tpm2-pkcs11-1.9.1/0000755000175100017510000000000014674407116007261 5tpm2-pkcs11-1.9.1/lib/0000755000175100017510000000000014674407116010027 5tpm2-pkcs11-1.9.1/lib/tpm2-pkcs11.pc.in0000644000175100017510000000046114535673717012673 p11_module_path=@P11_MODULE_PATH@ Name: tpm2-pkcs11 Description: TPM2 PKCS#11 library URL: https://github.com/tpm2-software/tpm2-pkcs11 Version: @VERSION@ Requires.private: tss2-esys tss2-mu sqlite3 libcrypto Cflags: @PTHREAD_CFLAGS@ Libs: -L${p11_module_path} -ltpm2_pkcs11 Libs.private: @PTHREAD_LIBS@ tpm2-pkcs11-1.9.1/lib/tpm2-pkcs11.map0000644000175100017510000000254514535673717012446 { global: C_Initialize; C_Finalize; C_GetInfo; C_GetFunctionList; C_GetSlotList; C_GetSlotInfo; C_GetTokenInfo; C_GetMechanismList; C_GetMechanismInfo; C_InitToken; C_InitPIN; C_SetPIN; C_OpenSession; C_CloseSession; C_CloseAllSessions; C_GetSessionInfo; C_GetOperationState; C_SetOperationState; C_Login; C_Logout; C_CreateObject; C_CopyObject; C_DestroyObject; C_GetObjectSize; C_GetAttributeValue; C_SetAttributeValue; C_FindObjectsInit; C_FindObjects; C_FindObjectsFinal; C_EncryptInit; C_Encrypt; C_EncryptUpdate; C_EncryptFinal; C_DecryptInit; C_Decrypt; C_DecryptUpdate; C_DecryptFinal; C_DigestInit; C_Digest; C_DigestUpdate; C_DigestKey; C_DigestFinal; C_SignInit; C_Sign; C_SignUpdate; C_SignFinal; C_SignRecoverInit; C_SignRecover; C_VerifyInit; C_Verify; C_VerifyUpdate; C_VerifyFinal; C_VerifyRecoverInit; C_VerifyRecover; C_DigestEncryptUpdate; C_DecryptDigestUpdate; C_SignEncryptUpdate; C_DecryptVerifyUpdate; C_GenerateKey; C_GenerateKeyPair; C_WrapKey; C_UnwrapKey; C_DeriveKey; C_SeedRandom; C_GenerateRandom; C_GetFunctionStatus; C_CancelFunction; C_WaitForSlotEvent; local: *; }; tpm2-pkcs11-1.9.1/m4/0000755000175100017510000000000014674407116007601 5tpm2-pkcs11-1.9.1/m4/ax_ac_append_to_file.m40000644000175100017510000000162214674407103014063 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_ac_append_to_file.html # =========================================================================== # # SYNOPSIS # # AX_AC_APPEND_TO_FILE([FILE],[DATA]) # # DESCRIPTION # # Appends the specified data to the specified Autoconf is run. If you want # to append to a file when configure is run use AX_APPEND_TO_FILE instead. # # LICENSE # # Copyright (c) 2009 Allan Caffee # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 10 AC_DEFUN([AX_AC_APPEND_TO_FILE],[ AC_REQUIRE([AX_FILE_ESCAPES]) m4_esyscmd( AX_FILE_ESCAPES [ printf "%s" "$2" >> "$1" ]) ]) tpm2-pkcs11-1.9.1/m4/ax_ac_print_to_file.m40000644000175100017510000000161114674407103013746 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_ac_print_to_file.html # =========================================================================== # # SYNOPSIS # # AX_AC_PRINT_TO_FILE([FILE],[DATA]) # # DESCRIPTION # # Writes the specified data to the specified file when Autoconf is run. If # you want to print to a file when configure is run use AX_PRINT_TO_FILE # instead. # # LICENSE # # Copyright (c) 2009 Allan Caffee # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 10 AC_DEFUN([AX_AC_PRINT_TO_FILE],[ m4_esyscmd( AC_REQUIRE([AX_FILE_ESCAPES]) [ printf "%s" "$2" > "$1" ]) ]) tpm2-pkcs11-1.9.1/m4/ax_add_am_macro_static.m40000644000175100017510000000152514674407103014407 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_add_am_macro_static.html # =========================================================================== # # SYNOPSIS # # AX_ADD_AM_MACRO_STATIC([RULE]) # # DESCRIPTION # # Adds the specified rule to $AMINCLUDE. # # LICENSE # # Copyright (c) 2009 Tom Howard # Copyright (c) 2009 Allan Caffee # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 8 AC_DEFUN([AX_ADD_AM_MACRO_STATIC],[ AC_REQUIRE([AX_AM_MACROS_STATIC]) AX_AC_APPEND_TO_FILE(AMINCLUDE_STATIC,[$1]) ]) tpm2-pkcs11-1.9.1/m4/ax_add_fortify_source.m40000644000175100017510000000741514674407103014330 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_add_fortify_source.html # =========================================================================== # # SYNOPSIS # # AX_ADD_FORTIFY_SOURCE # # DESCRIPTION # # Check whether -D_FORTIFY_SOURCE=2 can be added to CPPFLAGS without macro # redefinition warnings, other cpp warnings or linker. Some distributions # (such as Ubuntu or Gentoo Linux) enable _FORTIFY_SOURCE globally in # their compilers, leading to unnecessary warnings in the form of # # :0:0: error: "_FORTIFY_SOURCE" redefined [-Werror] # : note: this is the location of the previous definition # # which is a problem if -Werror is enabled. This macro checks whether # _FORTIFY_SOURCE is already defined, and if not, adds -D_FORTIFY_SOURCE=2 # to CPPFLAGS. # # Newer mingw-w64 msys2 package comes with a bug in # headers-git-7.0.0.5546.d200317d-1. It broke -D_FORTIFY_SOURCE support, # and would need -lssp or -fstack-protector. See # https://github.com/msys2/MINGW-packages/issues/5803. Try to actually # link it. # # LICENSE # # Copyright (c) 2017 David Seifert # Copyright (c) 2019, 2023 Reini Urban # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 8 AC_DEFUN([AX_ADD_FORTIFY_SOURCE],[ ac_save_cflags=$CFLAGS ac_cwerror_flag=yes AX_CHECK_COMPILE_FLAG([-Werror],[CFLAGS="$CFLAGS -Werror"]) ax_add_fortify_3_failed= AC_MSG_CHECKING([whether to add -D_FORTIFY_SOURCE=3 to CPPFLAGS]) AC_LINK_IFELSE([ AC_LANG_PROGRAM([], [[ #ifndef _FORTIFY_SOURCE return 0; #else _FORTIFY_SOURCE_already_defined; #endif ]] )], AC_LINK_IFELSE([ AC_LANG_SOURCE([[ #define _FORTIFY_SOURCE 3 #include int main() { char *s = " "; strcpy(s, "x"); return strlen(s)-1; } ]] )], [ AC_MSG_RESULT([yes]) CFLAGS=$ac_save_cflags CPPFLAGS="$CPPFLAGS -D_FORTIFY_SOURCE=3" ], [ AC_MSG_RESULT([no]) CFLAGS=$ac_save_cflags ax_add_fortify_3_failed=1 ], ), [ AC_MSG_RESULT([no]) CFLAGS=$ac_save_cflags ax_add_fortify_3_failed=1 ]) if test -n "$ax_add_fortify_3_failed" then AC_MSG_CHECKING([whether to add -D_FORTIFY_SOURCE=2 to CPPFLAGS]) AC_LINK_IFELSE([ AC_LANG_PROGRAM([], [[ #ifndef _FORTIFY_SOURCE return 0; #else _FORTIFY_SOURCE_already_defined; #endif ]] )], AC_LINK_IFELSE([ AC_LANG_SOURCE([[ #define _FORTIFY_SOURCE 2 #include int main(void) { char *s = " "; strcpy(s, "x"); return strlen(s)-1; } ]] )], [ AC_MSG_RESULT([yes]) CFLAGS=$ac_save_cflags CPPFLAGS="$CPPFLAGS -D_FORTIFY_SOURCE=2" ], [ AC_MSG_RESULT([no]) CFLAGS=$ac_save_cflags ], ), [ AC_MSG_RESULT([no]) CFLAGS=$ac_save_cflags ]) fi ]) tpm2-pkcs11-1.9.1/m4/ax_am_macros_static.m40000644000175100017510000000212514674407103013757 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_am_macros_static.html # =========================================================================== # # SYNOPSIS # # AX_AM_MACROS_STATIC # # DESCRIPTION # # Adds support for macros that create Automake rules. You must manually # add the following line # # include $(top_srcdir)/aminclude_static.am # # to your Makefile.am files. # # LICENSE # # Copyright (c) 2009 Tom Howard # Copyright (c) 2009 Allan Caffee # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 11 AC_DEFUN([AMINCLUDE_STATIC],[aminclude_static.am]) AC_DEFUN([AX_AM_MACROS_STATIC], [ AX_AC_PRINT_TO_FILE(AMINCLUDE_STATIC,[ # ]AMINCLUDE_STATIC[ generated automatically by Autoconf # from AX_AM_MACROS_STATIC on ]m4_esyscmd([LC_ALL=C date])[ ]) ]) tpm2-pkcs11-1.9.1/m4/ax_check_class.m40000644000175100017510000000644114674407103012716 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_check_class.html # =========================================================================== # # SYNOPSIS # # AX_CHECK_CLASS # # DESCRIPTION # # AX_CHECK_CLASS tests the existence of a given Java class, either in a # jar or in a '.class' file. # # *Warning*: its success or failure can depend on a proper setting of the # CLASSPATH env. variable. # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. The # general documentation, as well as the sample configure.in, is included # in the AX_PROG_JAVA macro. # # LICENSE # # Copyright (c) 2008 Stephane Bortzmeyer # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 12 AU_ALIAS([AC_CHECK_CLASS], [AX_CHECK_CLASS]) AC_DEFUN([AX_CHECK_CLASS],[ AC_REQUIRE([AX_PROG_JAVA]) ac_var_name=`echo $1 | sed 's/\./_/g'` dnl Normally I'd use a AC_CACHE_CHECK here but since the variable name is dnl dynamic I need an extra level of extraction AC_MSG_CHECKING([for $1 class]) AC_CACHE_VAL(ax_cv_class_$ac_var_name, [ AX_TRY_COMPILE_JAVA([$1], , [eval "ac_cv_class_$ac_var_name=yes"], [eval "ac_cv_class_$ac_var_name=no"]) eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" eval "HAVE_$ac_var_name=$`echo ac_cv_class_$ac_var_val`" HAVE_LAST_CLASS=$ac_var_val if test x$ac_var_val = xyes; then ifelse([$2], , :, [$2]) else ifelse([$3], , :, [$3]) fi ]) dnl for some reason the above statement didn't fall though here? dnl do scripts have variable scoping? eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" AC_MSG_RESULT($ac_var_val) ]) tpm2-pkcs11-1.9.1/m4/ax_check_compile_flag.m40000644000175100017510000000407014674407103014226 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_check_compile_flag.html # =========================================================================== # # SYNOPSIS # # AX_CHECK_COMPILE_FLAG(FLAG, [ACTION-SUCCESS], [ACTION-FAILURE], [EXTRA-FLAGS], [INPUT]) # # DESCRIPTION # # Check whether the given FLAG works with the current language's compiler # or gives an error. (Warnings, however, are ignored) # # ACTION-SUCCESS/ACTION-FAILURE are shell commands to execute on # success/failure. # # If EXTRA-FLAGS is defined, it is added to the current language's default # flags (e.g. CFLAGS) when the check is done. The check is thus made with # the flags: "CFLAGS EXTRA-FLAGS FLAG". This can for example be used to # force the compiler to issue an error when a bad flag is given. # # INPUT gives an alternative input source to AC_COMPILE_IFELSE. # # NOTE: Implementation based on AX_CFLAGS_GCC_OPTION. Please keep this # macro in sync with AX_CHECK_{PREPROC,LINK}_FLAG. # # LICENSE # # Copyright (c) 2008 Guido U. Draheim # Copyright (c) 2011 Maarten Bosmans # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 6 AC_DEFUN([AX_CHECK_COMPILE_FLAG], [AC_PREREQ(2.64)dnl for _AC_LANG_PREFIX and AS_VAR_IF AS_VAR_PUSHDEF([CACHEVAR],[ax_cv_check_[]_AC_LANG_ABBREV[]flags_$4_$1])dnl AC_CACHE_CHECK([whether _AC_LANG compiler accepts $1], CACHEVAR, [ ax_check_save_flags=$[]_AC_LANG_PREFIX[]FLAGS _AC_LANG_PREFIX[]FLAGS="$[]_AC_LANG_PREFIX[]FLAGS $4 $1" AC_COMPILE_IFELSE([m4_default([$5],[AC_LANG_PROGRAM()])], [AS_VAR_SET(CACHEVAR,[yes])], [AS_VAR_SET(CACHEVAR,[no])]) _AC_LANG_PREFIX[]FLAGS=$ax_check_save_flags]) AS_VAR_IF(CACHEVAR,yes, [m4_default([$2], :)], [m4_default([$3], :)]) AS_VAR_POPDEF([CACHEVAR])dnl ])dnl AX_CHECK_COMPILE_FLAGS tpm2-pkcs11-1.9.1/m4/ax_check_enable_debug.m40000644000175100017510000001131414674407103014200 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_check_enable_debug.html # =========================================================================== # # SYNOPSIS # # AX_CHECK_ENABLE_DEBUG([enable by default=yes/info/profile/no], [ENABLE DEBUG VARIABLES ...], [DISABLE DEBUG VARIABLES NDEBUG ...], [IS-RELEASE]) # # DESCRIPTION # # Check for the presence of an --enable-debug option to configure, with # the specified default value used when the option is not present. Return # the value in the variable $ax_enable_debug. # # Specifying 'yes' adds '-g -O0' to the compilation flags for all # languages. Specifying 'info' adds '-g' to the compilation flags. # Specifying 'profile' adds '-g -pg' to the compilation flags and '-pg' to # the linking flags. Otherwise, nothing is added. # # Define the variables listed in the second argument if debug is enabled, # defaulting to no variables. Defines the variables listed in the third # argument if debug is disabled, defaulting to NDEBUG. All lists of # variables should be space-separated. # # If debug is not enabled, ensure AC_PROG_* will not add debugging flags. # Should be invoked prior to any AC_PROG_* compiler checks. # # IS-RELEASE can be used to change the default to 'no' when making a # release. Set IS-RELEASE to 'yes' or 'no' as appropriate. By default, it # uses the value of $ax_is_release, so if you are using the AX_IS_RELEASE # macro, there is no need to pass this parameter. # # AX_IS_RELEASE([git-directory]) # AX_CHECK_ENABLE_DEBUG() # # LICENSE # # Copyright (c) 2011 Rhys Ulerich # Copyright (c) 2014, 2015 Philip Withnall # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. #serial 9 AC_DEFUN([AX_CHECK_ENABLE_DEBUG],[ AC_BEFORE([$0],[AC_PROG_CC])dnl AC_BEFORE([$0],[AC_PROG_CXX])dnl AC_BEFORE([$0],[AC_PROG_F77])dnl AC_BEFORE([$0],[AC_PROG_FC])dnl AC_MSG_CHECKING(whether to enable debugging) ax_enable_debug_default=m4_tolower(m4_normalize(ifelse([$1],,[no],[$1]))) ax_enable_debug_is_release=m4_tolower(m4_normalize(ifelse([$4],, [$ax_is_release], [$4]))) # If this is a release, override the default. AS_IF([test "$ax_enable_debug_is_release" = "yes"], [ax_enable_debug_default="no"]) m4_define(ax_enable_debug_vars,[m4_normalize(ifelse([$2],,,[$2]))]) m4_define(ax_disable_debug_vars,[m4_normalize(ifelse([$3],,[NDEBUG],[$3]))]) AC_ARG_ENABLE(debug, [AS_HELP_STRING([--enable-debug=]@<:@yes/info/profile/no@:>@,[compile with debugging])], [],enable_debug=$ax_enable_debug_default) # empty mean debug yes AS_IF([test "x$enable_debug" = "x"], [enable_debug="yes"]) # case of debug AS_CASE([$enable_debug], [yes],[ AC_MSG_RESULT(yes) CFLAGS="${CFLAGS} -g -O0" CXXFLAGS="${CXXFLAGS} -g -O0" FFLAGS="${FFLAGS} -g -O0" FCFLAGS="${FCFLAGS} -g -O0" OBJCFLAGS="${OBJCFLAGS} -g -O0" ], [info],[ AC_MSG_RESULT(info) CFLAGS="${CFLAGS} -g" CXXFLAGS="${CXXFLAGS} -g" FFLAGS="${FFLAGS} -g" FCFLAGS="${FCFLAGS} -g" OBJCFLAGS="${OBJCFLAGS} -g" ], [profile],[ AC_MSG_RESULT(profile) CFLAGS="${CFLAGS} -g -pg" CXXFLAGS="${CXXFLAGS} -g -pg" FFLAGS="${FFLAGS} -g -pg" FCFLAGS="${FCFLAGS} -g -pg" OBJCFLAGS="${OBJCFLAGS} -g -pg" LDFLAGS="${LDFLAGS} -pg" ], [ AC_MSG_RESULT(no) dnl Ensure AC_PROG_CC/CXX/F77/FC/OBJC will not enable debug flags dnl by setting any unset environment flag variables AS_IF([test "x${CFLAGS+set}" != "xset"], [CFLAGS=""]) AS_IF([test "x${CXXFLAGS+set}" != "xset"], [CXXFLAGS=""]) AS_IF([test "x${FFLAGS+set}" != "xset"], [FFLAGS=""]) AS_IF([test "x${FCFLAGS+set}" != "xset"], [FCFLAGS=""]) AS_IF([test "x${OBJCFLAGS+set}" != "xset"], [OBJCFLAGS=""]) ]) dnl Define various variables if debugging is disabled. dnl assert.h is a NOP if NDEBUG is defined, so define it by default. AS_IF([test "x$enable_debug" = "xyes"], [m4_map_args_w(ax_enable_debug_vars, [AC_DEFINE(], [,[1],[Define if debugging is enabled])])], [m4_map_args_w(ax_disable_debug_vars, [AC_DEFINE(], [,[1],[Define if debugging is disabled])])]) ax_enable_debug=$enable_debug ]) tpm2-pkcs11-1.9.1/m4/ax_check_gnu_make.m40000644000175100017510000000772714674407103013407 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_check_gnu_make.html # =========================================================================== # # SYNOPSIS # # AX_CHECK_GNU_MAKE([run-if-true],[run-if-false]) # # DESCRIPTION # # This macro searches for a GNU version of make. If a match is found: # # * The makefile variable `ifGNUmake' is set to the empty string, otherwise # it is set to "#". This is useful for including a special features in a # Makefile, which cannot be handled by other versions of make. # * The makefile variable `ifnGNUmake' is set to #, otherwise # it is set to the empty string. This is useful for including a special # features in a Makefile, which can be handled # by other versions of make or to specify else like clause. # * The variable `_cv_gnu_make_command` is set to the command to invoke # GNU make if it exists, the empty string otherwise. # * The variable `ax_cv_gnu_make_command` is set to the command to invoke # GNU make by copying `_cv_gnu_make_command`, otherwise it is unset. # * If GNU Make is found, its version is extracted from the output of # `make --version` as the last field of a record of space-separated # columns and saved into the variable `ax_check_gnu_make_version`. # * Additionally if GNU Make is found, run shell code run-if-true # else run shell code run-if-false. # # Here is an example of its use: # # Makefile.in might contain: # # # A failsafe way of putting a dependency rule into a makefile # $(DEPEND): # $(CC) -MM $(srcdir)/*.c > $(DEPEND) # # @ifGNUmake@ ifeq ($(DEPEND),$(wildcard $(DEPEND))) # @ifGNUmake@ include $(DEPEND) # @ifGNUmake@ else # fallback code # @ifGNUmake@ endif # # Then configure.in would normally contain: # # AX_CHECK_GNU_MAKE() # AC_OUTPUT(Makefile) # # Then perhaps to cause gnu make to override any other make, we could do # something like this (note that GNU make always looks for GNUmakefile # first): # # if ! test x$_cv_gnu_make_command = x ; then # mv Makefile GNUmakefile # echo .DEFAULT: > Makefile ; # echo \ $_cv_gnu_make_command \$@ >> Makefile; # fi # # Then, if any (well almost any) other make is called, and GNU make also # exists, then the other make wraps the GNU make. # # LICENSE # # Copyright (c) 2008 John Darrington # Copyright (c) 2015 Enrico M. Crisostomo # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 12 AC_DEFUN([AX_CHECK_GNU_MAKE],dnl [AC_PROG_AWK AC_CACHE_CHECK([for GNU make],[_cv_gnu_make_command],[dnl _cv_gnu_make_command="" ; dnl Search all the common names for GNU make for a in "$MAKE" make gmake gnumake ; do if test -z "$a" ; then continue ; fi ; if "$a" --version 2> /dev/null | grep GNU 2>&1 > /dev/null ; then _cv_gnu_make_command=$a ; AX_CHECK_GNU_MAKE_HEADLINE=$("$a" --version 2> /dev/null | grep "GNU Make") ax_check_gnu_make_version=$(echo ${AX_CHECK_GNU_MAKE_HEADLINE} | ${AWK} -F " " '{ print $(NF); }') break ; fi done ;]) dnl If there was a GNU version, then set @ifGNUmake@ to the empty string, '#' otherwise AS_VAR_IF([_cv_gnu_make_command], [""], [AS_VAR_SET([ifGNUmake], ["#"])], [AS_VAR_SET([ifGNUmake], [""])]) AS_VAR_IF([_cv_gnu_make_command], [""], [AS_VAR_SET([ifnGNUmake], [""])], [AS_VAR_SET([ifnGNUmake], ["#"])]) AS_VAR_IF([_cv_gnu_make_command], [""], [AS_UNSET(ax_cv_gnu_make_command)], [AS_VAR_SET([ax_cv_gnu_make_command], [${_cv_gnu_make_command}])]) AS_VAR_IF([_cv_gnu_make_command], [""],[$2],[$1]) AC_SUBST([ifGNUmake]) AC_SUBST([ifnGNUmake]) ]) tpm2-pkcs11-1.9.1/m4/ax_check_link_flag.m40000644000175100017510000000364414674407103013541 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_check_link_flag.html # =========================================================================== # # SYNOPSIS # # AX_CHECK_LINK_FLAG(FLAG, [ACTION-SUCCESS], [ACTION-FAILURE], [EXTRA-FLAGS], [INPUT]) # # DESCRIPTION # # Check whether the given FLAG works with the linker or gives an error. # (Warnings, however, are ignored) # # ACTION-SUCCESS/ACTION-FAILURE are shell commands to execute on # success/failure. # # If EXTRA-FLAGS is defined, it is added to the linker's default flags # when the check is done. The check is thus made with the flags: "LDFLAGS # EXTRA-FLAGS FLAG". This can for example be used to force the linker to # issue an error when a bad flag is given. # # INPUT gives an alternative input source to AC_LINK_IFELSE. # # NOTE: Implementation based on AX_CFLAGS_GCC_OPTION. Please keep this # macro in sync with AX_CHECK_{PREPROC,COMPILE}_FLAG. # # LICENSE # # Copyright (c) 2008 Guido U. Draheim # Copyright (c) 2011 Maarten Bosmans # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 6 AC_DEFUN([AX_CHECK_LINK_FLAG], [AC_PREREQ(2.64)dnl for _AC_LANG_PREFIX and AS_VAR_IF AS_VAR_PUSHDEF([CACHEVAR],[ax_cv_check_ldflags_$4_$1])dnl AC_CACHE_CHECK([whether the linker accepts $1], CACHEVAR, [ ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS $4 $1" AC_LINK_IFELSE([m4_default([$5],[AC_LANG_PROGRAM()])], [AS_VAR_SET(CACHEVAR,[yes])], [AS_VAR_SET(CACHEVAR,[no])]) LDFLAGS=$ax_check_save_flags]) AS_VAR_IF(CACHEVAR,yes, [m4_default([$2], :)], [m4_default([$3], :)]) AS_VAR_POPDEF([CACHEVAR])dnl ])dnl AX_CHECK_LINK_FLAGS tpm2-pkcs11-1.9.1/m4/ax_code_coverage.m40000644000175100017510000002761614674407103013250 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_code_coverage.html # =========================================================================== # # SYNOPSIS # # AX_CODE_COVERAGE() # # DESCRIPTION # # Defines CODE_COVERAGE_CPPFLAGS, CODE_COVERAGE_CFLAGS, # CODE_COVERAGE_CXXFLAGS and CODE_COVERAGE_LIBS which should be included # in the CPPFLAGS, CFLAGS CXXFLAGS and LIBS/LIBADD variables of every # build target (program or library) which should be built with code # coverage support. Also add rules using AX_ADD_AM_MACRO_STATIC; and # $enable_code_coverage which can be used in subsequent configure output. # CODE_COVERAGE_ENABLED is defined and substituted, and corresponds to the # value of the --enable-code-coverage option, which defaults to being # disabled. # # Test also for gcov program and create GCOV variable that could be # substituted. # # Note that all optimization flags in CFLAGS must be disabled when code # coverage is enabled. # # Usage example: # # configure.ac: # # AX_CODE_COVERAGE # # Makefile.am: # # include $(top_srcdir)/aminclude_static.am # # my_program_LIBS = ... $(CODE_COVERAGE_LIBS) ... # my_program_CPPFLAGS = ... $(CODE_COVERAGE_CPPFLAGS) ... # my_program_CFLAGS = ... $(CODE_COVERAGE_CFLAGS) ... # my_program_CXXFLAGS = ... $(CODE_COVERAGE_CXXFLAGS) ... # # clean-local: code-coverage-clean # distclean-local: code-coverage-dist-clean # # This results in a "check-code-coverage" rule being added to any # Makefile.am which do "include $(top_srcdir)/aminclude_static.am" # (assuming the module has been configured with --enable-code-coverage). # Running `make check-code-coverage` in that directory will run the # module's test suite (`make check`) and build a code coverage report # detailing the code which was touched, then print the URI for the report. # # This code was derived from Makefile.decl in GLib, originally licensed # under LGPLv2.1+. # # LICENSE # # Copyright (c) 2012, 2016 Philip Withnall # Copyright (c) 2012 Xan Lopez # Copyright (c) 2012 Christian Persch # Copyright (c) 2012 Paolo Borelli # Copyright (c) 2012 Dan Winship # Copyright (c) 2015,2018 Bastien ROUCARIES # # This library is free software; you can redistribute it and/or modify it # under the terms of the GNU Lesser General Public License as published by # the Free Software Foundation; either version 2.1 of the License, or (at # your option) any later version. # # This library is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser # General Public License for more details. # # You should have received a copy of the GNU Lesser General Public License # along with this program. If not, see . #serial 34 m4_define(_AX_CODE_COVERAGE_RULES,[ AX_ADD_AM_MACRO_STATIC([ # Code coverage # # Optional: # - CODE_COVERAGE_DIRECTORY: Top-level directory for code coverage reporting. # Multiple directories may be specified, separated by whitespace. # (Default: \$(top_builddir)) # - CODE_COVERAGE_OUTPUT_FILE: Filename and path for the .info file generated # by lcov for code coverage. (Default: # \$(PACKAGE_NAME)-\$(PACKAGE_VERSION)-coverage.info) # - CODE_COVERAGE_OUTPUT_DIRECTORY: Directory for generated code coverage # reports to be created. (Default: # \$(PACKAGE_NAME)-\$(PACKAGE_VERSION)-coverage) # - CODE_COVERAGE_BRANCH_COVERAGE: Set to 1 to enforce branch coverage, # set to 0 to disable it and leave empty to stay with the default. # (Default: empty) # - CODE_COVERAGE_LCOV_SHOPTS_DEFAULT: Extra options shared between both lcov # instances. (Default: based on $CODE_COVERAGE_BRANCH_COVERAGE) # - CODE_COVERAGE_LCOV_SHOPTS: Extra options to shared between both lcov # instances. (Default: $CODE_COVERAGE_LCOV_SHOPTS_DEFAULT) # - CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH: --gcov-tool pathtogcov # - CODE_COVERAGE_LCOV_OPTIONS_DEFAULT: Extra options to pass to the # collecting lcov instance. (Default: $CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH) # - CODE_COVERAGE_LCOV_OPTIONS: Extra options to pass to the collecting lcov # instance. (Default: $CODE_COVERAGE_LCOV_OPTIONS_DEFAULT) # - CODE_COVERAGE_LCOV_RMOPTS_DEFAULT: Extra options to pass to the filtering # lcov instance. (Default: empty) # - CODE_COVERAGE_LCOV_RMOPTS: Extra options to pass to the filtering lcov # instance. (Default: $CODE_COVERAGE_LCOV_RMOPTS_DEFAULT) # - CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT: Extra options to pass to the # genhtml instance. (Default: based on $CODE_COVERAGE_BRANCH_COVERAGE) # - CODE_COVERAGE_GENHTML_OPTIONS: Extra options to pass to the genhtml # instance. (Default: $CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT) # - CODE_COVERAGE_IGNORE_PATTERN: Extra glob pattern of files to ignore # # The generated report will be titled using the \$(PACKAGE_NAME) and # \$(PACKAGE_VERSION). In order to add the current git hash to the title, # use the git-version-gen script, available online. # Optional variables # run only on top dir if CODE_COVERAGE_ENABLED ifeq (\$(abs_builddir), \$(abs_top_builddir)) CODE_COVERAGE_DIRECTORY ?= \$(top_builddir) CODE_COVERAGE_OUTPUT_FILE ?= \$(PACKAGE_NAME)-\$(PACKAGE_VERSION)-coverage.info CODE_COVERAGE_OUTPUT_DIRECTORY ?= \$(PACKAGE_NAME)-\$(PACKAGE_VERSION)-coverage CODE_COVERAGE_BRANCH_COVERAGE ?= CODE_COVERAGE_LCOV_SHOPTS_DEFAULT ?= \$(if \$(CODE_COVERAGE_BRANCH_COVERAGE),\ --rc lcov_branch_coverage=\$(CODE_COVERAGE_BRANCH_COVERAGE)) CODE_COVERAGE_LCOV_SHOPTS ?= \$(CODE_COVERAGE_LCOV_SHOPTS_DEFAULT) CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH ?= --gcov-tool \"\$(GCOV)\" CODE_COVERAGE_LCOV_OPTIONS_DEFAULT ?= \$(CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH) CODE_COVERAGE_LCOV_OPTIONS ?= \$(CODE_COVERAGE_LCOV_OPTIONS_DEFAULT) CODE_COVERAGE_LCOV_RMOPTS_DEFAULT ?= CODE_COVERAGE_LCOV_RMOPTS ?= \$(CODE_COVERAGE_LCOV_RMOPTS_DEFAULT) CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT ?=\ \$(if \$(CODE_COVERAGE_BRANCH_COVERAGE),\ --rc genhtml_branch_coverage=\$(CODE_COVERAGE_BRANCH_COVERAGE)) CODE_COVERAGE_GENHTML_OPTIONS ?= \$(CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT) CODE_COVERAGE_IGNORE_PATTERN ?= GITIGNOREFILES := \$(GITIGNOREFILES) \$(CODE_COVERAGE_OUTPUT_FILE) \$(CODE_COVERAGE_OUTPUT_DIRECTORY) code_coverage_v_lcov_cap = \$(code_coverage_v_lcov_cap_\$(V)) code_coverage_v_lcov_cap_ = \$(code_coverage_v_lcov_cap_\$(AM_DEFAULT_VERBOSITY)) code_coverage_v_lcov_cap_0 = @echo \" LCOV --capture\" \$(CODE_COVERAGE_OUTPUT_FILE); code_coverage_v_lcov_ign = \$(code_coverage_v_lcov_ign_\$(V)) code_coverage_v_lcov_ign_ = \$(code_coverage_v_lcov_ign_\$(AM_DEFAULT_VERBOSITY)) code_coverage_v_lcov_ign_0 = @echo \" LCOV --remove /tmp/*\" \$(CODE_COVERAGE_IGNORE_PATTERN); code_coverage_v_genhtml = \$(code_coverage_v_genhtml_\$(V)) code_coverage_v_genhtml_ = \$(code_coverage_v_genhtml_\$(AM_DEFAULT_VERBOSITY)) code_coverage_v_genhtml_0 = @echo \" GEN \" \"\$(CODE_COVERAGE_OUTPUT_DIRECTORY)\"; code_coverage_quiet = \$(code_coverage_quiet_\$(V)) code_coverage_quiet_ = \$(code_coverage_quiet_\$(AM_DEFAULT_VERBOSITY)) code_coverage_quiet_0 = --quiet # sanitizes the test-name: replaces with underscores: dashes and dots code_coverage_sanitize = \$(subst -,_,\$(subst .,_,\$(1))) # Use recursive makes in order to ignore errors during check check-code-coverage: -\$(AM_V_at)\$(MAKE) \$(AM_MAKEFLAGS) -k check \$(AM_V_at)\$(MAKE) \$(AM_MAKEFLAGS) code-coverage-capture # Capture code coverage data code-coverage-capture: code-coverage-capture-hook \$(code_coverage_v_lcov_cap)\$(LCOV) \$(code_coverage_quiet) \$(addprefix --directory ,\$(CODE_COVERAGE_DIRECTORY)) --capture --output-file \"\$(CODE_COVERAGE_OUTPUT_FILE).tmp\" --test-name \"\$(call code_coverage_sanitize,\$(PACKAGE_NAME)-\$(PACKAGE_VERSION))\" --no-checksum --compat-libtool \$(CODE_COVERAGE_LCOV_SHOPTS) \$(CODE_COVERAGE_LCOV_OPTIONS) \$(code_coverage_v_lcov_ign)\$(LCOV) \$(code_coverage_quiet) \$(addprefix --directory ,\$(CODE_COVERAGE_DIRECTORY)) --remove \"\$(CODE_COVERAGE_OUTPUT_FILE).tmp\" \"/tmp/*\" \$(CODE_COVERAGE_IGNORE_PATTERN) --output-file \"\$(CODE_COVERAGE_OUTPUT_FILE)\" \$(CODE_COVERAGE_LCOV_SHOPTS) \$(CODE_COVERAGE_LCOV_RMOPTS) -@rm -f \"\$(CODE_COVERAGE_OUTPUT_FILE).tmp\" \$(code_coverage_v_genhtml)LANG=C \$(GENHTML) \$(code_coverage_quiet) \$(addprefix --prefix ,\$(CODE_COVERAGE_DIRECTORY)) --output-directory \"\$(CODE_COVERAGE_OUTPUT_DIRECTORY)\" --title \"\$(PACKAGE_NAME)-\$(PACKAGE_VERSION) Code Coverage\" --legend --show-details \"\$(CODE_COVERAGE_OUTPUT_FILE)\" \$(CODE_COVERAGE_GENHTML_OPTIONS) @echo \"file://\$(abs_builddir)/\$(CODE_COVERAGE_OUTPUT_DIRECTORY)/index.html\" code-coverage-clean: -\$(LCOV) --directory \$(top_builddir) -z -rm -rf \"\$(CODE_COVERAGE_OUTPUT_FILE)\" \"\$(CODE_COVERAGE_OUTPUT_FILE).tmp\" \"\$(CODE_COVERAGE_OUTPUT_DIRECTORY)\" -find . \\( -name \"*.gcda\" -o -name \"*.gcno\" -o -name \"*.gcov\" \\) -delete code-coverage-dist-clean: A][M_DISTCHECK_CONFIGURE_FLAGS := \$(A][M_DISTCHECK_CONFIGURE_FLAGS) --disable-code-coverage else # ifneq (\$(abs_builddir), \$(abs_top_builddir)) check-code-coverage: code-coverage-capture: code-coverage-capture-hook code-coverage-clean: code-coverage-dist-clean: endif # ifeq (\$(abs_builddir), \$(abs_top_builddir)) else #! CODE_COVERAGE_ENABLED # Use recursive makes in order to ignore errors during check check-code-coverage: @echo \"Need to reconfigure with --enable-code-coverage\" # Capture code coverage data code-coverage-capture: code-coverage-capture-hook @echo \"Need to reconfigure with --enable-code-coverage\" code-coverage-clean: code-coverage-dist-clean: endif #CODE_COVERAGE_ENABLED # Hook rule executed before code-coverage-capture, overridable by the user code-coverage-capture-hook: .PHONY: check-code-coverage code-coverage-capture code-coverage-dist-clean code-coverage-clean code-coverage-capture-hook ]) ]) AC_DEFUN([_AX_CODE_COVERAGE_ENABLED],[ AX_CHECK_GNU_MAKE([],[AC_MSG_ERROR([not using GNU make that is needed for coverage])]) AC_REQUIRE([AX_ADD_AM_MACRO_STATIC]) # check for gcov AC_CHECK_TOOL([GCOV], [$_AX_CODE_COVERAGE_GCOV_PROG_WITH], [:]) AS_IF([test "X$GCOV" = "X:"], [AC_MSG_ERROR([gcov is needed to do coverage])]) AC_SUBST([GCOV]) dnl Check if gcc is being used AS_IF([ test "$GCC" = "no" ], [ AC_MSG_ERROR([not compiling with gcc, which is required for gcov code coverage]) ]) AC_CHECK_PROG([LCOV], [lcov], [lcov]) AC_CHECK_PROG([GENHTML], [genhtml], [genhtml]) AS_IF([ test x"$LCOV" = x ], [ AC_MSG_ERROR([To enable code coverage reporting you must have lcov installed]) ]) AS_IF([ test x"$GENHTML" = x ], [ AC_MSG_ERROR([Could not find genhtml from the lcov package]) ]) dnl Build the code coverage flags dnl Define CODE_COVERAGE_LDFLAGS for backwards compatibility CODE_COVERAGE_CPPFLAGS="-DNDEBUG" CODE_COVERAGE_CFLAGS="-O0 -g -fprofile-arcs -ftest-coverage" CODE_COVERAGE_CXXFLAGS="-O0 -g -fprofile-arcs -ftest-coverage" CODE_COVERAGE_LIBS="-lgcov" AC_SUBST([CODE_COVERAGE_CPPFLAGS]) AC_SUBST([CODE_COVERAGE_CFLAGS]) AC_SUBST([CODE_COVERAGE_CXXFLAGS]) AC_SUBST([CODE_COVERAGE_LIBS]) ]) AC_DEFUN([AX_CODE_COVERAGE],[ dnl Check for --enable-code-coverage # allow to override gcov location AC_ARG_WITH([gcov], [AS_HELP_STRING([--with-gcov[=GCOV]], [use given GCOV for coverage (GCOV=gcov).])], [_AX_CODE_COVERAGE_GCOV_PROG_WITH=$with_gcov], [_AX_CODE_COVERAGE_GCOV_PROG_WITH=gcov]) AC_MSG_CHECKING([whether to build with code coverage support]) AC_ARG_ENABLE([code-coverage], AS_HELP_STRING([--enable-code-coverage], [Whether to enable code coverage support]),, enable_code_coverage=no) AM_CONDITIONAL([CODE_COVERAGE_ENABLED], [test "x$enable_code_coverage" = xyes]) AC_SUBST([CODE_COVERAGE_ENABLED], [$enable_code_coverage]) AC_MSG_RESULT($enable_code_coverage) AS_IF([ test "x$enable_code_coverage" = xyes ], [ _AX_CODE_COVERAGE_ENABLED ]) _AX_CODE_COVERAGE_RULES ]) tpm2-pkcs11-1.9.1/m4/ax_file_escapes.m40000644000175100017510000000137314674407103013075 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_file_escapes.html # =========================================================================== # # SYNOPSIS # # AX_FILE_ESCAPES # # DESCRIPTION # # Writes the specified data to the specified file. # # LICENSE # # Copyright (c) 2008 Tom Howard # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 8 AC_DEFUN([AX_FILE_ESCAPES],[ AX_DOLLAR="\$" AX_SRB="\\135" AX_SLB="\\133" AX_BS="\\\\" AX_DQ="\"" ]) tpm2-pkcs11-1.9.1/m4/ax_gcc_func_attribute.m40000644000175100017510000002042614674407103014305 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_gcc_func_attribute.html # =========================================================================== # # SYNOPSIS # # AX_GCC_FUNC_ATTRIBUTE(ATTRIBUTE) # # DESCRIPTION # # This macro checks if the compiler supports one of GCC's function # attributes; many other compilers also provide function attributes with # the same syntax. Compiler warnings are used to detect supported # attributes as unsupported ones are ignored by default so quieting # warnings when using this macro will yield false positives. # # The ATTRIBUTE parameter holds the name of the attribute to be checked. # # If ATTRIBUTE is supported define HAVE_FUNC_ATTRIBUTE_. # # The macro caches its result in the ax_cv_have_func_attribute_ # variable. # # The macro currently supports the following function attributes: # # alias # aligned # alloc_size # always_inline # artificial # cold # const # constructor # constructor_priority for constructor attribute with priority # deprecated # destructor # dllexport # dllimport # error # externally_visible # fallthrough # flatten # format # format_arg # gnu_format # gnu_inline # hot # ifunc # leaf # malloc # noclone # noinline # nonnull # noreturn # nothrow # optimize # pure # sentinel # sentinel_position # unused # used # visibility # warning # warn_unused_result # weak # weakref # # Unsupported function attributes will be tested with a prototype # returning an int and not accepting any arguments and the result of the # check might be wrong or meaningless so use with care. # # LICENSE # # Copyright (c) 2013 Gabriele Svelto # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 13 AC_DEFUN([AX_GCC_FUNC_ATTRIBUTE], [ AS_VAR_PUSHDEF([ac_var], [ax_cv_have_func_attribute_$1]) AC_CACHE_CHECK([for __attribute__(($1))], [ac_var], [ AC_LINK_IFELSE([AC_LANG_PROGRAM([ m4_case([$1], [alias], [ int foo( void ) { return 0; } int bar( void ) __attribute__(($1("foo"))); ], [aligned], [ int foo( void ) __attribute__(($1(32))); ], [alloc_size], [ void *foo(int a) __attribute__(($1(1))); ], [always_inline], [ inline __attribute__(($1)) int foo( void ) { return 0; } ], [artificial], [ inline __attribute__(($1)) int foo( void ) { return 0; } ], [cold], [ int foo( void ) __attribute__(($1)); ], [const], [ int foo( void ) __attribute__(($1)); ], [constructor_priority], [ int foo( void ) __attribute__((__constructor__(65535/2))); ], [constructor], [ int foo( void ) __attribute__(($1)); ], [deprecated], [ int foo( void ) __attribute__(($1(""))); ], [destructor], [ int foo( void ) __attribute__(($1)); ], [dllexport], [ __attribute__(($1)) int foo( void ) { return 0; } ], [dllimport], [ int foo( void ) __attribute__(($1)); ], [error], [ int foo( void ) __attribute__(($1(""))); ], [externally_visible], [ int foo( void ) __attribute__(($1)); ], [fallthrough], [ void foo( int x ) {switch (x) { case 1: __attribute__(($1)); case 2: break ; }}; ], [flatten], [ int foo( void ) __attribute__(($1)); ], [format], [ int foo(const char *p, ...) __attribute__(($1(printf, 1, 2))); ], [gnu_format], [ int foo(const char *p, ...) __attribute__((format(gnu_printf, 1, 2))); ], [format_arg], [ char *foo(const char *p) __attribute__(($1(1))); ], [gnu_inline], [ inline __attribute__(($1)) int foo( void ) { return 0; } ], [hot], [ int foo( void ) __attribute__(($1)); ], [ifunc], [ int my_foo( void ) { return 0; } static int (*resolve_foo(void))(void) { return my_foo; } int foo( void ) __attribute__(($1("resolve_foo"))); ], [leaf], [ __attribute__(($1)) int foo( void ) { return 0; } ], [malloc], [ void *foo( void ) __attribute__(($1)); ], [noclone], [ int foo( void ) __attribute__(($1)); ], [noinline], [ __attribute__(($1)) int foo( void ) { return 0; } ], [nonnull], [ int foo(char *p) __attribute__(($1(1))); ], [noreturn], [ void foo( void ) __attribute__(($1)); ], [nothrow], [ int foo( void ) __attribute__(($1)); ], [optimize], [ __attribute__(($1(3))) int foo( void ) { return 0; } ], [pure], [ int foo( void ) __attribute__(($1)); ], [sentinel], [ int foo(void *p, ...) __attribute__(($1)); ], [sentinel_position], [ int foo(void *p, ...) __attribute__(($1(1))); ], [returns_nonnull], [ void *foo( void ) __attribute__(($1)); ], [unused], [ int foo( void ) __attribute__(($1)); ], [used], [ int foo( void ) __attribute__(($1)); ], [visibility], [ int foo_def( void ) __attribute__(($1("default"))); int foo_hid( void ) __attribute__(($1("hidden"))); int foo_int( void ) __attribute__(($1("internal"))); int foo_pro( void ) __attribute__(($1("protected"))); ], [warning], [ int foo( void ) __attribute__(($1(""))); ], [warn_unused_result], [ int foo( void ) __attribute__(($1)); ], [weak], [ int foo( void ) __attribute__(($1)); ], [weakref], [ static int foo( void ) { return 0; } static int bar( void ) __attribute__(($1("foo"))); ], [ m4_warn([syntax], [Unsupported attribute $1, the test may fail]) int foo( void ) __attribute__(($1)); ] )], []) ], dnl GCC doesn't exit with an error if an unknown attribute is dnl provided but only outputs a warning, so accept the attribute dnl only if no warning were issued. [AS_IF([grep -- -Wattributes conftest.err], [AS_VAR_SET([ac_var], [no])], [AS_VAR_SET([ac_var], [yes])])], [AS_VAR_SET([ac_var], [no])]) ]) AS_IF([test yes = AS_VAR_GET([ac_var])], [AC_DEFINE_UNQUOTED(AS_TR_CPP(HAVE_FUNC_ATTRIBUTE_$1), 1, [Define to 1 if the system has the `$1' function attribute])], []) AS_VAR_POPDEF([ac_var]) ]) tpm2-pkcs11-1.9.1/m4/ax_is_release.m40000644000175100017510000000650614674407103012571 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_is_release.html # =========================================================================== # # SYNOPSIS # # AX_IS_RELEASE(POLICY) # # DESCRIPTION # # Determine whether the code is being configured as a release, or from # git. Set the ax_is_release variable to 'yes' or 'no'. # # If building a release version, it is recommended that the configure # script disable compiler errors and debug features, by conditionalising # them on the ax_is_release variable. If building from git, these # features should be enabled. # # The POLICY parameter specifies how ax_is_release is determined. It can # take the following values: # # * git-directory: ax_is_release will be 'no' if a '.git' # directory or git worktree exists # * minor-version: ax_is_release will be 'no' if the minor version number # in $PACKAGE_VERSION is odd; this assumes # $PACKAGE_VERSION follows the 'major.minor.micro' scheme # * micro-version: ax_is_release will be 'no' if the micro version number # in $PACKAGE_VERSION is odd; this assumes # $PACKAGE_VERSION follows the 'major.minor.micro' scheme # * dash-version: ax_is_release will be 'no' if there is a dash '-' # in $PACKAGE_VERSION, for example 1.2-pre3, 1.2.42-a8b9 # or 2.0-dirty (in particular this is suitable for use # with git-version-gen) # * always: ax_is_release will always be 'yes' # * never: ax_is_release will always be 'no' # # Other policies may be added in future. # # LICENSE # # Copyright (c) 2015 Philip Withnall # Copyright (c) 2016 Collabora Ltd. # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. #serial 8 AC_DEFUN([AX_IS_RELEASE],[ AC_BEFORE([AC_INIT],[$0]) m4_case([$1], [git-directory],[ # $is_release = (.git directory does not exist) AS_IF([test -d ${srcdir}/.git || (test -f ${srcdir}/.git && grep \.git/worktrees ${srcdir}/.git)],[ax_is_release=no],[ax_is_release=yes]) ], [minor-version],[ # $is_release = ($minor_version is even) minor_version=`echo "$PACKAGE_VERSION" | sed 's/[[^.]][[^.]]*.\([[^.]][[^.]]*\).*/\1/'` AS_IF([test "$(( $minor_version % 2 ))" -ne 0], [ax_is_release=no],[ax_is_release=yes]) ], [micro-version],[ # $is_release = ($micro_version is even) micro_version=`echo "$PACKAGE_VERSION" | sed 's/[[^.]]*\.[[^.]]*\.\([[^.]]*\).*/\1/'` AS_IF([test "$(( $micro_version % 2 ))" -ne 0], [ax_is_release=no],[ax_is_release=yes]) ], [dash-version],[ # $is_release = ($PACKAGE_VERSION has a dash) AS_CASE([$PACKAGE_VERSION], [*-*], [ax_is_release=no], [*], [ax_is_release=yes]) ], [always],[ax_is_release=yes], [never],[ax_is_release=no], [ AC_MSG_ERROR([Invalid policy. Valid policies: git-directory, minor-version, micro-version, dash-version, always, never.]) ]) ]) tpm2-pkcs11-1.9.1/m4/ax_normalize_path.m40000644000175100017510000001134214674407103013464 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_normalize_path.html # =========================================================================== # # SYNOPSIS # # AX_NORMALIZE_PATH(VARNAME, [REFERENCE_STRING]) # # DESCRIPTION # # Perform some cleanups on the value of $VARNAME (interpreted as a path): # # - empty paths are changed to '.' # - trailing slashes are removed # - repeated slashes are squeezed except a leading doubled slash '//' # (which might indicate a networked disk on some OS). # # REFERENCE_STRING is used to turn '/' into '\' and vice-versa: if # REFERENCE_STRING contains some backslashes, all slashes and backslashes # are turned into backslashes, otherwise they are all turned into slashes. # # This makes processing of DOS filenames quite easier, because you can # turn a filename to the Unix notation, make your processing, and turn it # back to original notation. # # filename='A:\FOO\\BAR\' # old_filename="$filename" # # Switch to the unix notation # AX_NORMALIZE_PATH([filename], ["/"]) # # now we have $filename = 'A:/FOO/BAR' and we can process it as if # # it was a Unix path. For instance let's say that you want # # to append '/subpath': # filename="$filename/subpath" # # finally switch back to the original notation # AX_NORMALIZE_PATH([filename], ["$old_filename"]) # # now $filename equals to 'A:\FOO\BAR\subpath' # # One good reason to make all path processing with the unix convention is # that backslashes have a special meaning in many cases. For instance # # expr 'A:\FOO' : 'A:\Foo' # # will return 0 because the second argument is a regex in which # backslashes have to be backslashed. In other words, to have the two # strings to match you should write this instead: # # expr 'A:\Foo' : 'A:\\Foo' # # Such behavior makes DOS filenames extremely unpleasant to work with. So # temporary turn your paths to the Unix notation, and revert them to the # original notation after the processing. See the macro # AX_COMPUTE_RELATIVE_PATHS for a concrete example of this. # # REFERENCE_STRING defaults to $VARIABLE, this means that slashes will be # converted to backslashes if $VARIABLE already contains some backslashes # (see $thirddir below). # # firstdir='/usr/local//share' # seconddir='C:\Program Files\\' # thirddir='C:\home/usr/' # AX_NORMALIZE_PATH([firstdir]) # AX_NORMALIZE_PATH([seconddir]) # AX_NORMALIZE_PATH([thirddir]) # # $firstdir = '/usr/local/share' # # $seconddir = 'C:\Program Files' # # $thirddir = 'C:\home\usr' # # LICENSE # # Copyright (c) 2008 Alexandre Duret-Lutz # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 8 AU_ALIAS([ADL_NORMALIZE_PATH], [AX_NORMALIZE_PATH]) AC_DEFUN([AX_NORMALIZE_PATH], [case ":[$]$1:" in # change empty paths to '.' ::) $1='.' ;; # strip trailing slashes :*[[\\/]]:) $1=`echo "[$]$1" | sed 's,[[\\/]]*[$],,'` ;; :*:) ;; esac # squeeze repeated slashes case ifelse($2,,"[$]$1",$2) in # if the path contains any backslashes, turn slashes into backslashes *\\*) $1=`echo "[$]$1" | sed 's,\(.\)[[\\/]][[\\/]]*,\1\\\\,g'` ;; # if the path contains slashes, also turn backslashes into slashes *) $1=`echo "[$]$1" | sed 's,\(.\)[[\\/]][[\\/]]*,\1/,g'` ;; esac]) tpm2-pkcs11-1.9.1/m4/ax_prog_java.m40000644000175100017510000001042214674407103012416 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_prog_java.html # =========================================================================== # # SYNOPSIS # # AX_PROG_JAVA # # DESCRIPTION # # Here is a summary of the main macros: # # AX_PROG_JAVAC: finds a Java compiler. # # AX_PROG_JAVA: finds a Java virtual machine. # # AX_CHECK_CLASS: finds if we have the given class (beware of CLASSPATH!). # # AX_CHECK_RQRD_CLASS: finds if we have the given class and stops # otherwise. # # AX_TRY_COMPILE_JAVA: attempt to compile user given source. # # AX_TRY_RUN_JAVA: attempt to compile and run user given source. # # AX_JAVA_OPTIONS: adds Java configure options. # # AX_PROG_JAVA tests an existing Java virtual machine. It uses the # environment variable JAVA then tests in sequence various common Java # virtual machines. For political reasons, it starts with the free ones. # You *must* call [AX_PROG_JAVAC] before. # # If you want to force a specific VM: # # - at the configure.in level, set JAVA=yourvm before calling AX_PROG_JAVA # # (but after AC_INIT) # # - at the configure level, setenv JAVA # # You can use the JAVA variable in your Makefile.in, with @JAVA@. # # *Warning*: its success or failure can depend on a proper setting of the # CLASSPATH env. variable. # # TODO: allow to exclude virtual machines (rationale: most Java programs # cannot run with some VM like kaffe). # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. # # A Web page, with a link to the latest CVS snapshot is at # . # # This is a sample configure.in Process this file with autoconf to produce # a configure script. # # AC_INIT(UnTag.java) # # dnl Checks for programs. # AC_CHECK_CLASSPATH # AX_PROG_JAVAC # AX_PROG_JAVA # # dnl Checks for classes # AX_CHECK_RQRD_CLASS(org.xml.sax.Parser) # AX_CHECK_RQRD_CLASS(com.jclark.xml.sax.Driver) # # AC_OUTPUT(Makefile) # # LICENSE # # Copyright (c) 2008 Stephane Bortzmeyer # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 10 AU_ALIAS([AC_PROG_JAVA], [AX_PROG_JAVA]) AC_DEFUN([AX_PROG_JAVA],[ m4_define([m4_ax_prog_java_list], [kaffe java])dnl AS_IF([test "x$JAVAPREFIX" = x], [test x$JAVA = x && AC_CHECK_PROGS([JAVA], [m4_ax_prog_java_list])], [test x$JAVA = x && AC_CHECK_PROGS([JAVA], [m4_ax_prog_java_list], [], [$JAVAPREFIX/bin])]) test x$JAVA = x && AC_MSG_ERROR([no acceptable Java virtual machine found in \$PATH]) m4_undefine([m4_ax_prog_java_list])dnl AX_PROG_JAVA_WORKS AC_PROVIDE([$0])dnl ]) tpm2-pkcs11-1.9.1/m4/ax_prog_java_works.m40000644000175100017510000000701214674407103013644 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_prog_java_works.html # =========================================================================== # # SYNOPSIS # # AX_PROG_JAVA_WORKS # # DESCRIPTION # # Internal use ONLY. # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. The # general documentation, as well as the sample configure.in, is included # in the AX_PROG_JAVA macro. # # LICENSE # # Copyright (c) 2008 Stephane Bortzmeyer # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 11 AU_ALIAS([AC_PROG_JAVA_WORKS], [AX_PROG_JAVA_WORKS]) AC_DEFUN([AX_PROG_JAVA_WORKS], [ if test x$ac_cv_prog_javac_works = xno; then AC_MSG_ERROR([Cannot compile java source. $JAVAC does not work properly]) fi if test x$ac_cv_prog_javac_works = x; then AX_PROG_JAVAC fi AC_CACHE_CHECK(if $JAVA works, ac_cv_prog_java_works, [ JAVA_TEST=Test.java CLASS_TEST=Test.class TEST=Test changequote(, )dnl cat << \EOF > $JAVA_TEST /* [#]line __oline__ "configure" */ public class Test { public static void main (String args[]) { System.exit (0); } } EOF changequote([, ])dnl if AC_TRY_COMMAND($JAVAC $JAVACFLAGS $JAVA_TEST) && test -s $CLASS_TEST; then : else echo "configure: failed program was:" >&AS_MESSAGE_LOG_FD cat $JAVA_TEST >&AS_MESSAGE_LOG_FD AC_MSG_ERROR(The Java compiler $JAVAC failed (see config.log, check the CLASSPATH?)) fi if AC_TRY_COMMAND($JAVA -classpath . $JAVAFLAGS $TEST) >/dev/null 2>&1; then ac_cv_prog_java_works=yes else echo "configure: failed program was:" >&AS_MESSAGE_LOG_FD cat $JAVA_TEST >&AS_MESSAGE_LOG_FD AC_MSG_ERROR(The Java VM $JAVA failed (see config.log, check the CLASSPATH?)) fi rm -f $JAVA_TEST $CLASS_TEST ]) AC_PROVIDE([$0])dnl ] ) tpm2-pkcs11-1.9.1/m4/ax_prog_javac.m40000644000175100017510000000657614674407103012600 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_prog_javac.html # =========================================================================== # # SYNOPSIS # # AX_PROG_JAVAC # # DESCRIPTION # # AX_PROG_JAVAC tests an existing Java compiler. It uses the environment # variable JAVAC then tests in sequence various common Java compilers. For # political reasons, it starts with the free ones. # # If you want to force a specific compiler: # # - at the configure.in level, set JAVAC=yourcompiler before calling # AX_PROG_JAVAC # # - at the configure level, setenv JAVAC # # You can use the JAVAC variable in your Makefile.in, with @JAVAC@. # # *Warning*: its success or failure can depend on a proper setting of the # CLASSPATH env. variable. # # TODO: allow to exclude compilers (rationale: most Java programs cannot # compile with some compilers like guavac). # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. The # general documentation, as well as the sample configure.in, is included # in the AX_PROG_JAVA macro. # # LICENSE # # Copyright (c) 2008 Stephane Bortzmeyer # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 8 AU_ALIAS([AC_PROG_JAVAC], [AX_PROG_JAVAC]) AC_DEFUN([AX_PROG_JAVAC],[ m4_define([m4_ax_prog_javac_list],["gcj -C" guavac jikes javac])dnl AS_IF([test "x$JAVAPREFIX" = x], [test "x$JAVAC" = x && AC_CHECK_PROGS([JAVAC], [m4_ax_prog_javac_list])], [test "x$JAVAC" = x && AC_CHECK_PROGS([JAVAC], [m4_ax_prog_javac_list], [], [$JAVAPREFIX/bin])]) m4_undefine([m4_ax_prog_javac_list])dnl test "x$JAVAC" = x && AC_MSG_ERROR([no acceptable Java compiler found in \$PATH]) AX_PROG_JAVAC_WORKS AC_PROVIDE([$0])dnl ]) tpm2-pkcs11-1.9.1/m4/ax_prog_javac_works.m40000644000175100017510000000552614674407103014017 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_prog_javac_works.html # =========================================================================== # # SYNOPSIS # # AX_PROG_JAVAC_WORKS # # DESCRIPTION # # Internal use ONLY. # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. The # general documentation, as well as the sample configure.in, is included # in the AX_PROG_JAVA macro. # # LICENSE # # Copyright (c) 2008 Stephane Bortzmeyer # # This program is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation; either version 2 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 7 AU_ALIAS([AC_PROG_JAVAC_WORKS], [AX_PROG_JAVAC_WORKS]) AC_DEFUN([AX_PROG_JAVAC_WORKS],[ AC_CACHE_CHECK([if $JAVAC works], ac_cv_prog_javac_works, [ JAVA_TEST=Test.java CLASS_TEST=Test.class cat << \EOF > $JAVA_TEST /* [#]line __oline__ "configure" */ public class Test { } EOF if AC_TRY_COMMAND($JAVAC $JAVACFLAGS $JAVA_TEST) >/dev/null 2>&1; then ac_cv_prog_javac_works=yes else AC_MSG_ERROR([The Java compiler $JAVAC failed (see config.log, check the CLASSPATH?)]) echo "configure: failed program was:" >&AS_MESSAGE_LOG_FD cat $JAVA_TEST >&AS_MESSAGE_LOG_FD fi rm -f $JAVA_TEST $CLASS_TEST ]) AC_PROVIDE([$0])dnl ]) tpm2-pkcs11-1.9.1/m4/ax_pthread.m40000644000175100017510000005403414674407103012104 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_pthread.html # =========================================================================== # # SYNOPSIS # # AX_PTHREAD([ACTION-IF-FOUND[, ACTION-IF-NOT-FOUND]]) # # DESCRIPTION # # This macro figures out how to build C programs using POSIX threads. It # sets the PTHREAD_LIBS output variable to the threads library and linker # flags, and the PTHREAD_CFLAGS output variable to any special C compiler # flags that are needed. (The user can also force certain compiler # flags/libs to be tested by setting these environment variables.) # # Also sets PTHREAD_CC and PTHREAD_CXX to any special C compiler that is # needed for multi-threaded programs (defaults to the value of CC # respectively CXX otherwise). (This is necessary on e.g. AIX to use the # special cc_r/CC_r compiler alias.) # # NOTE: You are assumed to not only compile your program with these flags, # but also to link with them as well. For example, you might link with # $PTHREAD_CC $CFLAGS $PTHREAD_CFLAGS $LDFLAGS ... $PTHREAD_LIBS $LIBS # $PTHREAD_CXX $CXXFLAGS $PTHREAD_CFLAGS $LDFLAGS ... $PTHREAD_LIBS $LIBS # # If you are only building threaded programs, you may wish to use these # variables in your default LIBS, CFLAGS, and CC: # # LIBS="$PTHREAD_LIBS $LIBS" # CFLAGS="$CFLAGS $PTHREAD_CFLAGS" # CXXFLAGS="$CXXFLAGS $PTHREAD_CFLAGS" # CC="$PTHREAD_CC" # CXX="$PTHREAD_CXX" # # In addition, if the PTHREAD_CREATE_JOINABLE thread-attribute constant # has a nonstandard name, this macro defines PTHREAD_CREATE_JOINABLE to # that name (e.g. PTHREAD_CREATE_UNDETACHED on AIX). # # Also HAVE_PTHREAD_PRIO_INHERIT is defined if pthread is found and the # PTHREAD_PRIO_INHERIT symbol is defined when compiling with # PTHREAD_CFLAGS. # # ACTION-IF-FOUND is a list of shell commands to run if a threads library # is found, and ACTION-IF-NOT-FOUND is a list of commands to run it if it # is not found. If ACTION-IF-FOUND is not specified, the default action # will define HAVE_PTHREAD. # # Please let the authors know if this macro fails on any platform, or if # you have any other suggestions or comments. This macro was based on work # by SGJ on autoconf scripts for FFTW (http://www.fftw.org/) (with help # from M. Frigo), as well as ac_pthread and hb_pthread macros posted by # Alejandro Forero Cuervo to the autoconf macro repository. We are also # grateful for the helpful feedback of numerous users. # # Updated for Autoconf 2.68 by Daniel Richard G. # # LICENSE # # Copyright (c) 2008 Steven G. Johnson # Copyright (c) 2011 Daniel Richard G. # Copyright (c) 2019 Marc Stevens # # This program is free software: you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by the # Free Software Foundation, either version 3 of the License, or (at your # option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General # Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program. If not, see . # # As a special exception, the respective Autoconf Macro's copyright owner # gives unlimited permission to copy, distribute and modify the configure # scripts that are the output of Autoconf when processing the Macro. You # need not follow the terms of the GNU General Public License when using # or distributing such scripts, even though portions of the text of the # Macro appear in them. The GNU General Public License (GPL) does govern # all other use of the material that constitutes the Autoconf Macro. # # This special exception to the GPL applies to versions of the Autoconf # Macro released by the Autoconf Archive. When you make and distribute a # modified version of the Autoconf Macro, you may extend this special # exception to the GPL to apply to your modified version as well. #serial 31 AU_ALIAS([ACX_PTHREAD], [AX_PTHREAD]) AC_DEFUN([AX_PTHREAD], [ AC_REQUIRE([AC_CANONICAL_HOST]) AC_REQUIRE([AC_PROG_CC]) AC_REQUIRE([AC_PROG_SED]) AC_LANG_PUSH([C]) ax_pthread_ok=no # We used to check for pthread.h first, but this fails if pthread.h # requires special compiler flags (e.g. on Tru64 or Sequent). # It gets checked for in the link test anyway. # First of all, check if the user has set any of the PTHREAD_LIBS, # etcetera environment variables, and if threads linking works using # them: if test "x$PTHREAD_CFLAGS$PTHREAD_LIBS" != "x"; then ax_pthread_save_CC="$CC" ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" AS_IF([test "x$PTHREAD_CC" != "x"], [CC="$PTHREAD_CC"]) AS_IF([test "x$PTHREAD_CXX" != "x"], [CXX="$PTHREAD_CXX"]) CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" AC_MSG_CHECKING([for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS]) AC_LINK_IFELSE([AC_LANG_CALL([], [pthread_join])], [ax_pthread_ok=yes]) AC_MSG_RESULT([$ax_pthread_ok]) if test "x$ax_pthread_ok" = "xno"; then PTHREAD_LIBS="" PTHREAD_CFLAGS="" fi CC="$ax_pthread_save_CC" CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" fi # We must check for the threads library under a number of different # names; the ordering is very important because some systems # (e.g. DEC) have both -lpthread and -lpthreads, where one of the # libraries is broken (non-POSIX). # Create a list of thread flags to try. Items with a "," contain both # C compiler flags (before ",") and linker flags (after ","). Other items # starting with a "-" are C compiler flags, and remaining items are # library names, except for "none" which indicates that we try without # any flags at all, and "pthread-config" which is a program returning # the flags for the Pth emulation library. ax_pthread_flags="pthreads none -Kthread -pthread -pthreads -mthreads pthread --thread-safe -mt pthread-config" # The ordering *is* (sometimes) important. Some notes on the # individual items follow: # pthreads: AIX (must check this before -lpthread) # none: in case threads are in libc; should be tried before -Kthread and # other compiler flags to prevent continual compiler warnings # -Kthread: Sequent (threads in libc, but -Kthread needed for pthread.h) # -pthread: Linux/gcc (kernel threads), BSD/gcc (userland threads), Tru64 # (Note: HP C rejects this with "bad form for `-t' option") # -pthreads: Solaris/gcc (Note: HP C also rejects) # -mt: Sun Workshop C (may only link SunOS threads [-lthread], but it # doesn't hurt to check since this sometimes defines pthreads and # -D_REENTRANT too), HP C (must be checked before -lpthread, which # is present but should not be used directly; and before -mthreads, # because the compiler interprets this as "-mt" + "-hreads") # -mthreads: Mingw32/gcc, Lynx/gcc # pthread: Linux, etcetera # --thread-safe: KAI C++ # pthread-config: use pthread-config program (for GNU Pth library) case $host_os in freebsd*) # -kthread: FreeBSD kernel threads (preferred to -pthread since SMP-able) # lthread: LinuxThreads port on FreeBSD (also preferred to -pthread) ax_pthread_flags="-kthread lthread $ax_pthread_flags" ;; hpux*) # From the cc(1) man page: "[-mt] Sets various -D flags to enable # multi-threading and also sets -lpthread." ax_pthread_flags="-mt -pthread pthread $ax_pthread_flags" ;; openedition*) # IBM z/OS requires a feature-test macro to be defined in order to # enable POSIX threads at all, so give the user a hint if this is # not set. (We don't define these ourselves, as they can affect # other portions of the system API in unpredictable ways.) AC_EGREP_CPP([AX_PTHREAD_ZOS_MISSING], [ # if !defined(_OPEN_THREADS) && !defined(_UNIX03_THREADS) AX_PTHREAD_ZOS_MISSING # endif ], [AC_MSG_WARN([IBM z/OS requires -D_OPEN_THREADS or -D_UNIX03_THREADS to enable pthreads support.])]) ;; solaris*) # On Solaris (at least, for some versions), libc contains stubbed # (non-functional) versions of the pthreads routines, so link-based # tests will erroneously succeed. (N.B.: The stubs are missing # pthread_cleanup_push, or rather a function called by this macro, # so we could check for that, but who knows whether they'll stub # that too in a future libc.) So we'll check first for the # standard Solaris way of linking pthreads (-mt -lpthread). ax_pthread_flags="-mt,-lpthread pthread $ax_pthread_flags" ;; esac # Are we compiling with Clang? AC_CACHE_CHECK([whether $CC is Clang], [ax_cv_PTHREAD_CLANG], [ax_cv_PTHREAD_CLANG=no # Note that Autoconf sets GCC=yes for Clang as well as GCC if test "x$GCC" = "xyes"; then AC_EGREP_CPP([AX_PTHREAD_CC_IS_CLANG], [/* Note: Clang 2.7 lacks __clang_[a-z]+__ */ # if defined(__clang__) && defined(__llvm__) AX_PTHREAD_CC_IS_CLANG # endif ], [ax_cv_PTHREAD_CLANG=yes]) fi ]) ax_pthread_clang="$ax_cv_PTHREAD_CLANG" # GCC generally uses -pthread, or -pthreads on some platforms (e.g. SPARC) # Note that for GCC and Clang -pthread generally implies -lpthread, # except when -nostdlib is passed. # This is problematic using libtool to build C++ shared libraries with pthread: # [1] https://gcc.gnu.org/bugzilla/show_bug.cgi?id=25460 # [2] https://bugzilla.redhat.com/show_bug.cgi?id=661333 # [3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468555 # To solve this, first try -pthread together with -lpthread for GCC AS_IF([test "x$GCC" = "xyes"], [ax_pthread_flags="-pthread,-lpthread -pthread -pthreads $ax_pthread_flags"]) # Clang takes -pthread (never supported any other flag), but we'll try with -lpthread first AS_IF([test "x$ax_pthread_clang" = "xyes"], [ax_pthread_flags="-pthread,-lpthread -pthread"]) # The presence of a feature test macro requesting re-entrant function # definitions is, on some systems, a strong hint that pthreads support is # correctly enabled case $host_os in darwin* | hpux* | linux* | osf* | solaris*) ax_pthread_check_macro="_REENTRANT" ;; aix*) ax_pthread_check_macro="_THREAD_SAFE" ;; *) ax_pthread_check_macro="--" ;; esac AS_IF([test "x$ax_pthread_check_macro" = "x--"], [ax_pthread_check_cond=0], [ax_pthread_check_cond="!defined($ax_pthread_check_macro)"]) if test "x$ax_pthread_ok" = "xno"; then for ax_pthread_try_flag in $ax_pthread_flags; do case $ax_pthread_try_flag in none) AC_MSG_CHECKING([whether pthreads work without any flags]) ;; *,*) PTHREAD_CFLAGS=`echo $ax_pthread_try_flag | sed "s/^\(.*\),\(.*\)$/\1/"` PTHREAD_LIBS=`echo $ax_pthread_try_flag | sed "s/^\(.*\),\(.*\)$/\2/"` AC_MSG_CHECKING([whether pthreads work with "$PTHREAD_CFLAGS" and "$PTHREAD_LIBS"]) ;; -*) AC_MSG_CHECKING([whether pthreads work with $ax_pthread_try_flag]) PTHREAD_CFLAGS="$ax_pthread_try_flag" ;; pthread-config) AC_CHECK_PROG([ax_pthread_config], [pthread-config], [yes], [no]) AS_IF([test "x$ax_pthread_config" = "xno"], [continue]) PTHREAD_CFLAGS="`pthread-config --cflags`" PTHREAD_LIBS="`pthread-config --ldflags` `pthread-config --libs`" ;; *) AC_MSG_CHECKING([for the pthreads library -l$ax_pthread_try_flag]) PTHREAD_LIBS="-l$ax_pthread_try_flag" ;; esac ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" # Check for various functions. We must include pthread.h, # since some functions may be macros. (On the Sequent, we # need a special flag -Kthread to make this header compile.) # We check for pthread_join because it is in -lpthread on IRIX # while pthread_create is in libc. We check for pthread_attr_init # due to DEC craziness with -lpthreads. We check for # pthread_cleanup_push because it is one of the few pthread # functions on Solaris that doesn't have a non-functional libc stub. # We try pthread_create on general principles. AC_LINK_IFELSE([AC_LANG_PROGRAM([#include # if $ax_pthread_check_cond # error "$ax_pthread_check_macro must be defined" # endif static void *some_global = NULL; static void routine(void *a) { /* To avoid any unused-parameter or unused-but-set-parameter warning. */ some_global = a; } static void *start_routine(void *a) { return a; }], [pthread_t th; pthread_attr_t attr; pthread_create(&th, 0, start_routine, 0); pthread_join(th, 0); pthread_attr_init(&attr); pthread_cleanup_push(routine, 0); pthread_cleanup_pop(0) /* ; */])], [ax_pthread_ok=yes], []) CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" AC_MSG_RESULT([$ax_pthread_ok]) AS_IF([test "x$ax_pthread_ok" = "xyes"], [break]) PTHREAD_LIBS="" PTHREAD_CFLAGS="" done fi # Clang needs special handling, because older versions handle the -pthread # option in a rather... idiosyncratic way if test "x$ax_pthread_clang" = "xyes"; then # Clang takes -pthread; it has never supported any other flag # (Note 1: This will need to be revisited if a system that Clang # supports has POSIX threads in a separate library. This tends not # to be the way of modern systems, but it's conceivable.) # (Note 2: On some systems, notably Darwin, -pthread is not needed # to get POSIX threads support; the API is always present and # active. We could reasonably leave PTHREAD_CFLAGS empty. But # -pthread does define _REENTRANT, and while the Darwin headers # ignore this macro, third-party headers might not.) # However, older versions of Clang make a point of warning the user # that, in an invocation where only linking and no compilation is # taking place, the -pthread option has no effect ("argument unused # during compilation"). They expect -pthread to be passed in only # when source code is being compiled. # # Problem is, this is at odds with the way Automake and most other # C build frameworks function, which is that the same flags used in # compilation (CFLAGS) are also used in linking. Many systems # supported by AX_PTHREAD require exactly this for POSIX threads # support, and in fact it is often not straightforward to specify a # flag that is used only in the compilation phase and not in # linking. Such a scenario is extremely rare in practice. # # Even though use of the -pthread flag in linking would only print # a warning, this can be a nuisance for well-run software projects # that build with -Werror. So if the active version of Clang has # this misfeature, we search for an option to squash it. AC_CACHE_CHECK([whether Clang needs flag to prevent "argument unused" warning when linking with -pthread], [ax_cv_PTHREAD_CLANG_NO_WARN_FLAG], [ax_cv_PTHREAD_CLANG_NO_WARN_FLAG=unknown # Create an alternate version of $ac_link that compiles and # links in two steps (.c -> .o, .o -> exe) instead of one # (.c -> exe), because the warning occurs only in the second # step ax_pthread_save_ac_link="$ac_link" ax_pthread_sed='s/conftest\.\$ac_ext/conftest.$ac_objext/g' ax_pthread_link_step=`AS_ECHO(["$ac_link"]) | sed "$ax_pthread_sed"` ax_pthread_2step_ac_link="($ac_compile) && (echo ==== >&5) && ($ax_pthread_link_step)" ax_pthread_save_CFLAGS="$CFLAGS" for ax_pthread_try in '' -Qunused-arguments -Wno-unused-command-line-argument unknown; do AS_IF([test "x$ax_pthread_try" = "xunknown"], [break]) CFLAGS="-Werror -Wunknown-warning-option $ax_pthread_try -pthread $ax_pthread_save_CFLAGS" ac_link="$ax_pthread_save_ac_link" AC_LINK_IFELSE([AC_LANG_SOURCE([[int main(void){return 0;}]])], [ac_link="$ax_pthread_2step_ac_link" AC_LINK_IFELSE([AC_LANG_SOURCE([[int main(void){return 0;}]])], [break]) ]) done ac_link="$ax_pthread_save_ac_link" CFLAGS="$ax_pthread_save_CFLAGS" AS_IF([test "x$ax_pthread_try" = "x"], [ax_pthread_try=no]) ax_cv_PTHREAD_CLANG_NO_WARN_FLAG="$ax_pthread_try" ]) case "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" in no | unknown) ;; *) PTHREAD_CFLAGS="$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG $PTHREAD_CFLAGS" ;; esac fi # $ax_pthread_clang = yes # Various other checks: if test "x$ax_pthread_ok" = "xyes"; then ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" # Detect AIX lossage: JOINABLE attribute is called UNDETACHED. AC_CACHE_CHECK([for joinable pthread attribute], [ax_cv_PTHREAD_JOINABLE_ATTR], [ax_cv_PTHREAD_JOINABLE_ATTR=unknown for ax_pthread_attr in PTHREAD_CREATE_JOINABLE PTHREAD_CREATE_UNDETACHED; do AC_LINK_IFELSE([AC_LANG_PROGRAM([#include ], [int attr = $ax_pthread_attr; return attr /* ; */])], [ax_cv_PTHREAD_JOINABLE_ATTR=$ax_pthread_attr; break], []) done ]) AS_IF([test "x$ax_cv_PTHREAD_JOINABLE_ATTR" != "xunknown" && \ test "x$ax_cv_PTHREAD_JOINABLE_ATTR" != "xPTHREAD_CREATE_JOINABLE" && \ test "x$ax_pthread_joinable_attr_defined" != "xyes"], [AC_DEFINE_UNQUOTED([PTHREAD_CREATE_JOINABLE], [$ax_cv_PTHREAD_JOINABLE_ATTR], [Define to necessary symbol if this constant uses a non-standard name on your system.]) ax_pthread_joinable_attr_defined=yes ]) AC_CACHE_CHECK([whether more special flags are required for pthreads], [ax_cv_PTHREAD_SPECIAL_FLAGS], [ax_cv_PTHREAD_SPECIAL_FLAGS=no case $host_os in solaris*) ax_cv_PTHREAD_SPECIAL_FLAGS="-D_POSIX_PTHREAD_SEMANTICS" ;; esac ]) AS_IF([test "x$ax_cv_PTHREAD_SPECIAL_FLAGS" != "xno" && \ test "x$ax_pthread_special_flags_added" != "xyes"], [PTHREAD_CFLAGS="$ax_cv_PTHREAD_SPECIAL_FLAGS $PTHREAD_CFLAGS" ax_pthread_special_flags_added=yes]) AC_CACHE_CHECK([for PTHREAD_PRIO_INHERIT], [ax_cv_PTHREAD_PRIO_INHERIT], [AC_LINK_IFELSE([AC_LANG_PROGRAM([[#include ]], [[int i = PTHREAD_PRIO_INHERIT; return i;]])], [ax_cv_PTHREAD_PRIO_INHERIT=yes], [ax_cv_PTHREAD_PRIO_INHERIT=no]) ]) AS_IF([test "x$ax_cv_PTHREAD_PRIO_INHERIT" = "xyes" && \ test "x$ax_pthread_prio_inherit_defined" != "xyes"], [AC_DEFINE([HAVE_PTHREAD_PRIO_INHERIT], [1], [Have PTHREAD_PRIO_INHERIT.]) ax_pthread_prio_inherit_defined=yes ]) CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" # More AIX lossage: compile with *_r variant if test "x$GCC" != "xyes"; then case $host_os in aix*) AS_CASE(["x/$CC"], [x*/c89|x*/c89_128|x*/c99|x*/c99_128|x*/cc|x*/cc128|x*/xlc|x*/xlc_v6|x*/xlc128|x*/xlc128_v6], [#handle absolute path differently from PATH based program lookup AS_CASE(["x$CC"], [x/*], [ AS_IF([AS_EXECUTABLE_P([${CC}_r])],[PTHREAD_CC="${CC}_r"]) AS_IF([test "x${CXX}" != "x"], [AS_IF([AS_EXECUTABLE_P([${CXX}_r])],[PTHREAD_CXX="${CXX}_r"])]) ], [ AC_CHECK_PROGS([PTHREAD_CC],[${CC}_r],[$CC]) AS_IF([test "x${CXX}" != "x"], [AC_CHECK_PROGS([PTHREAD_CXX],[${CXX}_r],[$CXX])]) ] ) ]) ;; esac fi fi test -n "$PTHREAD_CC" || PTHREAD_CC="$CC" test -n "$PTHREAD_CXX" || PTHREAD_CXX="$CXX" AC_SUBST([PTHREAD_LIBS]) AC_SUBST([PTHREAD_CFLAGS]) AC_SUBST([PTHREAD_CC]) AC_SUBST([PTHREAD_CXX]) # Finally, execute ACTION-IF-FOUND/ACTION-IF-NOT-FOUND: if test "x$ax_pthread_ok" = "xyes"; then ifelse([$1],,[AC_DEFINE([HAVE_PTHREAD],[1],[Define if you have POSIX threads libraries and header files.])],[$1]) : else ax_pthread_ok=no $2 fi AC_LANG_POP ])dnl AX_PTHREAD tpm2-pkcs11-1.9.1/m4/ax_try_compile_java.m40000644000175100017510000000337314674407103014004 # =========================================================================== # https://www.gnu.org/software/autoconf-archive/ax_try_compile_java.html # =========================================================================== # # SYNOPSIS # # AX_TRY_COMPILE_JAVA # # DESCRIPTION # # AX_TRY_COMPILE_JAVA attempt to compile user given source. # # *Warning*: its success or failure can depend on a proper setting of the # CLASSPATH env. variable. # # Note: This is part of the set of autoconf M4 macros for Java programs. # It is VERY IMPORTANT that you download the whole set, some macros depend # on other. Unfortunately, the autoconf archive does not support the # concept of set of macros, so I had to break it for submission. The # general documentation, as well as the sample configure.in, is included # in the AX_PROG_JAVA macro. # # LICENSE # # Copyright (c) 2008 Devin Weaver # # Copying and distribution of this file, with or without modification, are # permitted in any medium without royalty provided the copyright notice # and this notice are preserved. This file is offered as-is, without any # warranty. #serial 10 AU_ALIAS([AC_TRY_COMPILE_JAVA], [AX_TRY_COMPILE_JAVA]) AC_DEFUN([AX_TRY_COMPILE_JAVA],[ AC_REQUIRE([AX_PROG_JAVAC])dnl cat << \EOF > Test.java /* [#]line __oline__ "configure" */ ifelse([$1], , , [import $1;]) public class Test { [$2] } EOF if AC_TRY_COMMAND($JAVAC $JAVACFLAGS Test.java) && test -s Test.class then dnl Don't remove the temporary files here, so they can be examined. ifelse([$3], , :, [$3]) else echo "configure: failed program was:" >&AS_MESSAGE_LOG_FD cat Test.java >&AS_MESSAGE_LOG_FD ifelse([$4], , , [ rm -f Test.java Test.class $4 ])dnl fi rm -f Test.java Test.class]) tpm2-pkcs11-1.9.1/m4/ld-version-script.m40000644000175100017510000000317414535673717013364 # ld-version-script.m4 serial 4 dnl Copyright (C) 2008-2019 Free Software Foundation, Inc. dnl This file is free software; the Free Software Foundation dnl gives unlimited permission to copy and/or distribute it, dnl with or without modifications, as long as this notice is preserved. dnl From Simon Josefsson # FIXME: The test below returns a false positive for mingw # cross-compiles, 'local:' statements does not reduce number of # exported symbols in a DLL. Use --disable-ld-version-script to work # around the problem. # gl_LD_VERSION_SCRIPT # -------------------- # Check if LD supports linker scripts, and define automake conditional # HAVE_LD_VERSION_SCRIPT if so. AC_DEFUN([gl_LD_VERSION_SCRIPT], [ AC_ARG_ENABLE([ld-version-script], [AS_HELP_STRING([--enable-ld-version-script], [enable linker version script (default is enabled when possible)])], [have_ld_version_script=$enableval], [AC_CACHE_CHECK([if LD -Wl,--version-script works], [gl_cv_sys_ld_version_script], [gl_cv_sys_ld_version_script=no save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS -Wl,--version-script=conftest.map" echo foo >conftest.map AC_LINK_IFELSE([AC_LANG_PROGRAM([], [])], [], [cat > conftest.map <. ]) # serial 59 LT_INIT # LT_PREREQ(VERSION) # ------------------ # Complain and exit if this libtool version is less that VERSION. m4_defun([LT_PREREQ], [m4_if(m4_version_compare(m4_defn([LT_PACKAGE_VERSION]), [$1]), -1, [m4_default([$3], [m4_fatal([Libtool version $1 or higher is required], 63)])], [$2])]) # _LT_CHECK_BUILDDIR # ------------------ # Complain if the absolute build directory name contains unusual characters m4_defun([_LT_CHECK_BUILDDIR], [case `pwd` in *\ * | *\ *) AC_MSG_WARN([Libtool does not cope well with whitespace in `pwd`]) ;; esac ]) # LT_INIT([OPTIONS]) # ------------------ AC_DEFUN([LT_INIT], [AC_PREREQ([2.62])dnl We use AC_PATH_PROGS_FEATURE_CHECK AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl AC_BEFORE([$0], [LT_LANG])dnl AC_BEFORE([$0], [LT_OUTPUT])dnl AC_BEFORE([$0], [LTDL_INIT])dnl m4_require([_LT_CHECK_BUILDDIR])dnl dnl Autoconf doesn't catch unexpanded LT_ macros by default: m4_pattern_forbid([^_?LT_[A-Z_]+$])dnl m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])dnl dnl aclocal doesn't pull ltoptions.m4, ltsugar.m4, or ltversion.m4 dnl unless we require an AC_DEFUNed macro: AC_REQUIRE([LTOPTIONS_VERSION])dnl AC_REQUIRE([LTSUGAR_VERSION])dnl AC_REQUIRE([LTVERSION_VERSION])dnl AC_REQUIRE([LTOBSOLETE_VERSION])dnl m4_require([_LT_PROG_LTMAIN])dnl _LT_SHELL_INIT([SHELL=${CONFIG_SHELL-/bin/sh}]) dnl Parse OPTIONS _LT_SET_OPTIONS([$0], [$1]) # This can be used to rebuild libtool when needed LIBTOOL_DEPS=$ltmain # Always use our own libtool. LIBTOOL='$(SHELL) $(top_builddir)/libtool' AC_SUBST(LIBTOOL)dnl _LT_SETUP # Only expand once: m4_define([LT_INIT]) ])# LT_INIT # Old names: AU_ALIAS([AC_PROG_LIBTOOL], [LT_INIT]) AU_ALIAS([AM_PROG_LIBTOOL], [LT_INIT]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_PROG_LIBTOOL], []) dnl AC_DEFUN([AM_PROG_LIBTOOL], []) # _LT_PREPARE_CC_BASENAME # ----------------------- m4_defun([_LT_PREPARE_CC_BASENAME], [ # Calculate cc_basename. Skip known compiler wrappers and cross-prefix. func_cc_basename () { for cc_temp in @S|@*""; do case $cc_temp in compile | *[[\\/]]compile | ccache | *[[\\/]]ccache ) ;; distcc | *[[\\/]]distcc | purify | *[[\\/]]purify ) ;; \-*) ;; *) break;; esac done func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"` } ])# _LT_PREPARE_CC_BASENAME # _LT_CC_BASENAME(CC) # ------------------- # It would be clearer to call AC_REQUIREs from _LT_PREPARE_CC_BASENAME, # but that macro is also expanded into generated libtool script, which # arranges for $SED and $ECHO to be set by different means. m4_defun([_LT_CC_BASENAME], [m4_require([_LT_PREPARE_CC_BASENAME])dnl AC_REQUIRE([_LT_DECL_SED])dnl AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl func_cc_basename $1 cc_basename=$func_cc_basename_result ]) # _LT_FILEUTILS_DEFAULTS # ---------------------- # It is okay to use these file commands and assume they have been set # sensibly after 'm4_require([_LT_FILEUTILS_DEFAULTS])'. m4_defun([_LT_FILEUTILS_DEFAULTS], [: ${CP="cp -f"} : ${MV="mv -f"} : ${RM="rm -f"} ])# _LT_FILEUTILS_DEFAULTS # _LT_SETUP # --------- m4_defun([_LT_SETUP], [AC_REQUIRE([AC_CANONICAL_HOST])dnl AC_REQUIRE([AC_CANONICAL_BUILD])dnl AC_REQUIRE([_LT_PREPARE_SED_QUOTE_VARS])dnl AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl _LT_DECL([], [PATH_SEPARATOR], [1], [The PATH separator for the build system])dnl dnl _LT_DECL([], [host_alias], [0], [The host system])dnl _LT_DECL([], [host], [0])dnl _LT_DECL([], [host_os], [0])dnl dnl _LT_DECL([], [build_alias], [0], [The build system])dnl _LT_DECL([], [build], [0])dnl _LT_DECL([], [build_os], [0])dnl dnl AC_REQUIRE([AC_PROG_CC])dnl AC_REQUIRE([LT_PATH_LD])dnl AC_REQUIRE([LT_PATH_NM])dnl dnl AC_REQUIRE([AC_PROG_LN_S])dnl test -z "$LN_S" && LN_S="ln -s" _LT_DECL([], [LN_S], [1], [Whether we need soft or hard links])dnl dnl AC_REQUIRE([LT_CMD_MAX_LEN])dnl _LT_DECL([objext], [ac_objext], [0], [Object file suffix (normally "o")])dnl _LT_DECL([], [exeext], [0], [Executable file suffix (normally "")])dnl dnl m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_CHECK_SHELL_FEATURES])dnl m4_require([_LT_PATH_CONVERSION_FUNCTIONS])dnl m4_require([_LT_CMD_RELOAD])dnl m4_require([_LT_DECL_FILECMD])dnl m4_require([_LT_CHECK_MAGIC_METHOD])dnl m4_require([_LT_CHECK_SHAREDLIB_FROM_LINKLIB])dnl m4_require([_LT_CMD_OLD_ARCHIVE])dnl m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl m4_require([_LT_WITH_SYSROOT])dnl m4_require([_LT_CMD_TRUNCATE])dnl _LT_CONFIG_LIBTOOL_INIT([ # See if we are running on zsh, and set the options that allow our # commands through without removal of \ escapes INIT. if test -n "\${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi ]) if test -n "${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi _LT_CHECK_OBJDIR m4_require([_LT_TAG_COMPILER])dnl case $host_os in aix3*) # AIX sometimes has problems with the GCC collect2 program. For some # reason, if we set the COLLECT_NAMES environment variable, the problems # vanish in a puff of smoke. if test set != "${COLLECT_NAMES+set}"; then COLLECT_NAMES= export COLLECT_NAMES fi ;; esac # Global variables: ofile=libtool can_build_shared=yes # All known linkers require a '.a' archive for static linking (except MSVC and # ICC, which need '.lib'). libext=a with_gnu_ld=$lt_cv_prog_gnu_ld old_CC=$CC old_CFLAGS=$CFLAGS # Set sane defaults for various variables test -z "$CC" && CC=cc test -z "$LTCC" && LTCC=$CC test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS test -z "$LD" && LD=ld test -z "$ac_objext" && ac_objext=o _LT_CC_BASENAME([$compiler]) # Only perform the check for file, if the check method requires it test -z "$MAGIC_CMD" && MAGIC_CMD=file case $deplibs_check_method in file_magic*) if test "$file_magic_cmd" = '$MAGIC_CMD'; then _LT_PATH_MAGIC fi ;; esac # Use C for the default configuration in the libtool script LT_SUPPORTED_TAG([CC]) _LT_LANG_C_CONFIG _LT_LANG_DEFAULT_CONFIG _LT_CONFIG_COMMANDS ])# _LT_SETUP # _LT_PREPARE_SED_QUOTE_VARS # -------------------------- # Define a few sed substitution that help us do robust quoting. m4_defun([_LT_PREPARE_SED_QUOTE_VARS], [# Backslashify metacharacters that are still active within # double-quoted strings. sed_quote_subst='s/\([["`$\\]]\)/\\\1/g' # Same as above, but do not quote variable references. double_quote_subst='s/\([["`\\]]\)/\\\1/g' # Sed substitution to delay expansion of an escaped shell variable in a # double_quote_subst'ed string. delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g' # Sed substitution to delay expansion of an escaped single quote. delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g' # Sed substitution to avoid accidental globbing in evaled expressions no_glob_subst='s/\*/\\\*/g' ]) # _LT_PROG_LTMAIN # --------------- # Note that this code is called both from 'configure', and 'config.status' # now that we use AC_CONFIG_COMMANDS to generate libtool. Notably, # 'config.status' has no value for ac_aux_dir unless we are using Automake, # so we pass a copy along to make sure it has a sensible value anyway. m4_defun([_LT_PROG_LTMAIN], [m4_ifdef([AC_REQUIRE_AUX_FILE], [AC_REQUIRE_AUX_FILE([ltmain.sh])])dnl _LT_CONFIG_LIBTOOL_INIT([ac_aux_dir='$ac_aux_dir']) ltmain=$ac_aux_dir/ltmain.sh ])# _LT_PROG_LTMAIN ## ------------------------------------- ## ## Accumulate code for creating libtool. ## ## ------------------------------------- ## # So that we can recreate a full libtool script including additional # tags, we accumulate the chunks of code to send to AC_CONFIG_COMMANDS # in macros and then make a single call at the end using the 'libtool' # label. # _LT_CONFIG_LIBTOOL_INIT([INIT-COMMANDS]) # ---------------------------------------- # Register INIT-COMMANDS to be passed to AC_CONFIG_COMMANDS later. m4_define([_LT_CONFIG_LIBTOOL_INIT], [m4_ifval([$1], [m4_append([_LT_OUTPUT_LIBTOOL_INIT], [$1 ])])]) # Initialize. m4_define([_LT_OUTPUT_LIBTOOL_INIT]) # _LT_CONFIG_LIBTOOL([COMMANDS]) # ------------------------------ # Register COMMANDS to be passed to AC_CONFIG_COMMANDS later. m4_define([_LT_CONFIG_LIBTOOL], [m4_ifval([$1], [m4_append([_LT_OUTPUT_LIBTOOL_COMMANDS], [$1 ])])]) # Initialize. m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS]) # _LT_CONFIG_SAVE_COMMANDS([COMMANDS], [INIT_COMMANDS]) # ----------------------------------------------------- m4_defun([_LT_CONFIG_SAVE_COMMANDS], [_LT_CONFIG_LIBTOOL([$1]) _LT_CONFIG_LIBTOOL_INIT([$2]) ]) # _LT_FORMAT_COMMENT([COMMENT]) # ----------------------------- # Add leading comment marks to the start of each line, and a trailing # full-stop to the whole comment if one is not present already. m4_define([_LT_FORMAT_COMMENT], [m4_ifval([$1], [ m4_bpatsubst([m4_bpatsubst([$1], [^ *], [# ])], [['`$\]], [\\\&])]m4_bmatch([$1], [[!?.]$], [], [.]) )]) ## ------------------------ ## ## FIXME: Eliminate VARNAME ## ## ------------------------ ## # _LT_DECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION], [IS-TAGGED?]) # ------------------------------------------------------------------- # CONFIGNAME is the name given to the value in the libtool script. # VARNAME is the (base) name used in the configure script. # VALUE may be 0, 1 or 2 for a computed quote escaped value based on # VARNAME. Any other value will be used directly. m4_define([_LT_DECL], [lt_if_append_uniq([lt_decl_varnames], [$2], [, ], [lt_dict_add_subkey([lt_decl_dict], [$2], [libtool_name], [m4_ifval([$1], [$1], [$2])]) lt_dict_add_subkey([lt_decl_dict], [$2], [value], [$3]) m4_ifval([$4], [lt_dict_add_subkey([lt_decl_dict], [$2], [description], [$4])]) lt_dict_add_subkey([lt_decl_dict], [$2], [tagged?], [m4_ifval([$5], [yes], [no])])]) ]) # _LT_TAGDECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION]) # -------------------------------------------------------- m4_define([_LT_TAGDECL], [_LT_DECL([$1], [$2], [$3], [$4], [yes])]) # lt_decl_tag_varnames([SEPARATOR], [VARNAME1...]) # ------------------------------------------------ m4_define([lt_decl_tag_varnames], [_lt_decl_filter([tagged?], [yes], $@)]) # _lt_decl_filter(SUBKEY, VALUE, [SEPARATOR], [VARNAME1..]) # --------------------------------------------------------- m4_define([_lt_decl_filter], [m4_case([$#], [0], [m4_fatal([$0: too few arguments: $#])], [1], [m4_fatal([$0: too few arguments: $#: $1])], [2], [lt_dict_filter([lt_decl_dict], [$1], [$2], [], lt_decl_varnames)], [3], [lt_dict_filter([lt_decl_dict], [$1], [$2], [$3], lt_decl_varnames)], [lt_dict_filter([lt_decl_dict], $@)])[]dnl ]) # lt_decl_quote_varnames([SEPARATOR], [VARNAME1...]) # -------------------------------------------------- m4_define([lt_decl_quote_varnames], [_lt_decl_filter([value], [1], $@)]) # lt_decl_dquote_varnames([SEPARATOR], [VARNAME1...]) # --------------------------------------------------- m4_define([lt_decl_dquote_varnames], [_lt_decl_filter([value], [2], $@)]) # lt_decl_varnames_tagged([SEPARATOR], [VARNAME1...]) # --------------------------------------------------- m4_define([lt_decl_varnames_tagged], [m4_assert([$# <= 2])dnl _$0(m4_quote(m4_default([$1], [[, ]])), m4_ifval([$2], [[$2]], [m4_dquote(lt_decl_tag_varnames)]), m4_split(m4_normalize(m4_quote(_LT_TAGS)), [ ]))]) m4_define([_lt_decl_varnames_tagged], [m4_ifval([$3], [lt_combine([$1], [$2], [_], $3)])]) # lt_decl_all_varnames([SEPARATOR], [VARNAME1...]) # ------------------------------------------------ m4_define([lt_decl_all_varnames], [_$0(m4_quote(m4_default([$1], [[, ]])), m4_if([$2], [], m4_quote(lt_decl_varnames), m4_quote(m4_shift($@))))[]dnl ]) m4_define([_lt_decl_all_varnames], [lt_join($@, lt_decl_varnames_tagged([$1], lt_decl_tag_varnames([[, ]], m4_shift($@))))dnl ]) # _LT_CONFIG_STATUS_DECLARE([VARNAME]) # ------------------------------------ # Quote a variable value, and forward it to 'config.status' so that its # declaration there will have the same value as in 'configure'. VARNAME # must have a single quote delimited value for this to work. m4_define([_LT_CONFIG_STATUS_DECLARE], [$1='`$ECHO "$][$1" | $SED "$delay_single_quote_subst"`']) # _LT_CONFIG_STATUS_DECLARATIONS # ------------------------------ # We delimit libtool config variables with single quotes, so when # we write them to config.status, we have to be sure to quote all # embedded single quotes properly. In configure, this macro expands # each variable declared with _LT_DECL (and _LT_TAGDECL) into: # # ='`$ECHO "$" | $SED "$delay_single_quote_subst"`' m4_defun([_LT_CONFIG_STATUS_DECLARATIONS], [m4_foreach([_lt_var], m4_quote(lt_decl_all_varnames), [m4_n([_LT_CONFIG_STATUS_DECLARE(_lt_var)])])]) # _LT_LIBTOOL_TAGS # ---------------- # Output comment and list of tags supported by the script m4_defun([_LT_LIBTOOL_TAGS], [_LT_FORMAT_COMMENT([The names of the tagged configurations supported by this script])dnl available_tags='_LT_TAGS'dnl ]) # _LT_LIBTOOL_DECLARE(VARNAME, [TAG]) # ----------------------------------- # Extract the dictionary values for VARNAME (optionally with TAG) and # expand to a commented shell variable setting: # # # Some comment about what VAR is for. # visible_name=$lt_internal_name m4_define([_LT_LIBTOOL_DECLARE], [_LT_FORMAT_COMMENT(m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [description])))[]dnl m4_pushdef([_libtool_name], m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [libtool_name])))[]dnl m4_case(m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [value])), [0], [_libtool_name=[$]$1], [1], [_libtool_name=$lt_[]$1], [2], [_libtool_name=$lt_[]$1], [_libtool_name=lt_dict_fetch([lt_decl_dict], [$1], [value])])[]dnl m4_ifval([$2], [_$2])[]m4_popdef([_libtool_name])[]dnl ]) # _LT_LIBTOOL_CONFIG_VARS # ----------------------- # Produce commented declarations of non-tagged libtool config variables # suitable for insertion in the LIBTOOL CONFIG section of the 'libtool' # script. Tagged libtool config variables (even for the LIBTOOL CONFIG # section) are produced by _LT_LIBTOOL_TAG_VARS. m4_defun([_LT_LIBTOOL_CONFIG_VARS], [m4_foreach([_lt_var], m4_quote(_lt_decl_filter([tagged?], [no], [], lt_decl_varnames)), [m4_n([_LT_LIBTOOL_DECLARE(_lt_var)])])]) # _LT_LIBTOOL_TAG_VARS(TAG) # ------------------------- m4_define([_LT_LIBTOOL_TAG_VARS], [m4_foreach([_lt_var], m4_quote(lt_decl_tag_varnames), [m4_n([_LT_LIBTOOL_DECLARE(_lt_var, [$1])])])]) # _LT_TAGVAR(VARNAME, [TAGNAME]) # ------------------------------ m4_define([_LT_TAGVAR], [m4_ifval([$2], [$1_$2], [$1])]) # _LT_CONFIG_COMMANDS # ------------------- # Send accumulated output to $CONFIG_STATUS. Thanks to the lists of # variables for single and double quote escaping we saved from calls # to _LT_DECL, we can put quote escaped variables declarations # into 'config.status', and then the shell code to quote escape them in # for loops in 'config.status'. Finally, any additional code accumulated # from calls to _LT_CONFIG_LIBTOOL_INIT is expanded. m4_defun([_LT_CONFIG_COMMANDS], [AC_PROVIDE_IFELSE([LT_OUTPUT], dnl If the libtool generation code has been placed in $CONFIG_LT, dnl instead of duplicating it all over again into config.status, dnl then we will have config.status run $CONFIG_LT later, so it dnl needs to know what name is stored there: [AC_CONFIG_COMMANDS([libtool], [$SHELL $CONFIG_LT || AS_EXIT(1)], [CONFIG_LT='$CONFIG_LT'])], dnl If the libtool generation code is destined for config.status, dnl expand the accumulated commands and init code now: [AC_CONFIG_COMMANDS([libtool], [_LT_OUTPUT_LIBTOOL_COMMANDS], [_LT_OUTPUT_LIBTOOL_COMMANDS_INIT])]) ])#_LT_CONFIG_COMMANDS # Initialize. m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS_INIT], [ # The HP-UX ksh and POSIX shell print the target directory to stdout # if CDPATH is set. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH sed_quote_subst='$sed_quote_subst' double_quote_subst='$double_quote_subst' delay_variable_subst='$delay_variable_subst' _LT_CONFIG_STATUS_DECLARATIONS LTCC='$LTCC' LTCFLAGS='$LTCFLAGS' compiler='$compiler_DEFAULT' # A function that is used when there is no print builtin or printf. func_fallback_echo () { eval 'cat <<_LTECHO_EOF \$[]1 _LTECHO_EOF' } # Quote evaled strings. for var in lt_decl_all_varnames([[ \ ]], lt_decl_quote_varnames); do case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in *[[\\\\\\\`\\"\\\$]]*) eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes ;; *) eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\"" ;; esac done # Double-quote double-evaled strings. for var in lt_decl_all_varnames([[ \ ]], lt_decl_dquote_varnames); do case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in *[[\\\\\\\`\\"\\\$]]*) eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes ;; *) eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\"" ;; esac done _LT_OUTPUT_LIBTOOL_INIT ]) # _LT_GENERATED_FILE_INIT(FILE, [COMMENT]) # ------------------------------------ # Generate a child script FILE with all initialization necessary to # reuse the environment learned by the parent script, and make the # file executable. If COMMENT is supplied, it is inserted after the # '#!' sequence but before initialization text begins. After this # macro, additional text can be appended to FILE to form the body of # the child script. The macro ends with non-zero status if the # file could not be fully written (such as if the disk is full). m4_ifdef([AS_INIT_GENERATED], [m4_defun([_LT_GENERATED_FILE_INIT],[AS_INIT_GENERATED($@)])], [m4_defun([_LT_GENERATED_FILE_INIT], [m4_require([AS_PREPARE])]dnl [m4_pushdef([AS_MESSAGE_LOG_FD])]dnl [lt_write_fail=0 cat >$1 <<_ASEOF || lt_write_fail=1 #! $SHELL # Generated by $as_me. $2 SHELL=\${CONFIG_SHELL-$SHELL} export SHELL _ASEOF cat >>$1 <<\_ASEOF || lt_write_fail=1 AS_SHELL_SANITIZE _AS_PREPARE exec AS_MESSAGE_FD>&1 _ASEOF test 0 = "$lt_write_fail" && chmod +x $1[]dnl m4_popdef([AS_MESSAGE_LOG_FD])])])# _LT_GENERATED_FILE_INIT # LT_OUTPUT # --------- # This macro allows early generation of the libtool script (before # AC_OUTPUT is called), incase it is used in configure for compilation # tests. AC_DEFUN([LT_OUTPUT], [: ${CONFIG_LT=./config.lt} AC_MSG_NOTICE([creating $CONFIG_LT]) _LT_GENERATED_FILE_INIT(["$CONFIG_LT"], [# Run this file to recreate a libtool stub with the current configuration.]) cat >>"$CONFIG_LT" <<\_LTEOF lt_cl_silent=false exec AS_MESSAGE_LOG_FD>>config.log { echo AS_BOX([Running $as_me.]) } >&AS_MESSAGE_LOG_FD lt_cl_help="\ '$as_me' creates a local libtool stub from the current configuration, for use in further configure time tests before the real libtool is generated. Usage: $[0] [[OPTIONS]] -h, --help print this help, then exit -V, --version print version number, then exit -q, --quiet do not print progress messages -d, --debug don't remove temporary files Report bugs to ." lt_cl_version="\ m4_ifset([AC_PACKAGE_NAME], [AC_PACKAGE_NAME ])config.lt[]dnl m4_ifset([AC_PACKAGE_VERSION], [ AC_PACKAGE_VERSION]) configured by $[0], generated by m4_PACKAGE_STRING. Copyright (C) 2011 Free Software Foundation, Inc. This config.lt script is free software; the Free Software Foundation gives unlimited permision to copy, distribute and modify it." while test 0 != $[#] do case $[1] in --version | --v* | -V ) echo "$lt_cl_version"; exit 0 ;; --help | --h* | -h ) echo "$lt_cl_help"; exit 0 ;; --debug | --d* | -d ) debug=: ;; --quiet | --q* | --silent | --s* | -q ) lt_cl_silent=: ;; -*) AC_MSG_ERROR([unrecognized option: $[1] Try '$[0] --help' for more information.]) ;; *) AC_MSG_ERROR([unrecognized argument: $[1] Try '$[0] --help' for more information.]) ;; esac shift done if $lt_cl_silent; then exec AS_MESSAGE_FD>/dev/null fi _LTEOF cat >>"$CONFIG_LT" <<_LTEOF _LT_OUTPUT_LIBTOOL_COMMANDS_INIT _LTEOF cat >>"$CONFIG_LT" <<\_LTEOF AC_MSG_NOTICE([creating $ofile]) _LT_OUTPUT_LIBTOOL_COMMANDS AS_EXIT(0) _LTEOF chmod +x "$CONFIG_LT" # configure is writing to config.log, but config.lt does its own redirection, # appending to config.log, which fails on DOS, as config.log is still kept # open by configure. Here we exec the FD to /dev/null, effectively closing # config.log, so it can be properly (re)opened and appended to by config.lt. lt_cl_success=: test yes = "$silent" && lt_config_lt_args="$lt_config_lt_args --quiet" exec AS_MESSAGE_LOG_FD>/dev/null $SHELL "$CONFIG_LT" $lt_config_lt_args || lt_cl_success=false exec AS_MESSAGE_LOG_FD>>config.log $lt_cl_success || AS_EXIT(1) ])# LT_OUTPUT # _LT_CONFIG(TAG) # --------------- # If TAG is the built-in tag, create an initial libtool script with a # default configuration from the untagged config vars. Otherwise add code # to config.status for appending the configuration named by TAG from the # matching tagged config vars. m4_defun([_LT_CONFIG], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl _LT_CONFIG_SAVE_COMMANDS([ m4_define([_LT_TAG], m4_if([$1], [], [C], [$1]))dnl m4_if(_LT_TAG, [C], [ # See if we are running on zsh, and set the options that allow our # commands through without removal of \ escapes. if test -n "${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi cfgfile=${ofile}T trap "$RM \"$cfgfile\"; exit 1" 1 2 15 $RM "$cfgfile" cat <<_LT_EOF >> "$cfgfile" #! $SHELL # Generated automatically by $as_me ($PACKAGE) $VERSION # Libtool was configured on host `(hostname || uname -n) 2>/dev/null | sed 1q`: # NOTE: Changes made to this file will be lost: look at ltmain.sh. # Provide generalized library-building support services. # Written by Gordon Matzigkeit, 1996 _LT_COPYING _LT_LIBTOOL_TAGS # Configured defaults for sys_lib_dlsearch_path munging. : \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"} # ### BEGIN LIBTOOL CONFIG _LT_LIBTOOL_CONFIG_VARS _LT_LIBTOOL_TAG_VARS # ### END LIBTOOL CONFIG _LT_EOF cat <<'_LT_EOF' >> "$cfgfile" # ### BEGIN FUNCTIONS SHARED WITH CONFIGURE _LT_PREPARE_MUNGE_PATH_LIST _LT_PREPARE_CC_BASENAME # ### END FUNCTIONS SHARED WITH CONFIGURE _LT_EOF case $host_os in aix3*) cat <<\_LT_EOF >> "$cfgfile" # AIX sometimes has problems with the GCC collect2 program. For some # reason, if we set the COLLECT_NAMES environment variable, the problems # vanish in a puff of smoke. if test set != "${COLLECT_NAMES+set}"; then COLLECT_NAMES= export COLLECT_NAMES fi _LT_EOF ;; esac _LT_PROG_LTMAIN # We use sed instead of cat because bash on DJGPP gets confused if # if finds mixed CR/LF and LF-only lines. Since sed operates in # text mode, it properly converts lines to CR/LF. This bash problem # is reportedly fixed, but why not run on old versions too? $SED '$q' "$ltmain" >> "$cfgfile" \ || (rm -f "$cfgfile"; exit 1) mv -f "$cfgfile" "$ofile" || (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile") chmod +x "$ofile" ], [cat <<_LT_EOF >> "$ofile" dnl Unfortunately we have to use $1 here, since _LT_TAG is not expanded dnl in a comment (ie after a #). # ### BEGIN LIBTOOL TAG CONFIG: $1 _LT_LIBTOOL_TAG_VARS(_LT_TAG) # ### END LIBTOOL TAG CONFIG: $1 _LT_EOF ])dnl /m4_if ], [m4_if([$1], [], [ PACKAGE='$PACKAGE' VERSION='$VERSION' RM='$RM' ofile='$ofile'], []) ])dnl /_LT_CONFIG_SAVE_COMMANDS ])# _LT_CONFIG # LT_SUPPORTED_TAG(TAG) # --------------------- # Trace this macro to discover what tags are supported by the libtool # --tag option, using: # autoconf --trace 'LT_SUPPORTED_TAG:$1' AC_DEFUN([LT_SUPPORTED_TAG], []) # C support is built-in for now m4_define([_LT_LANG_C_enabled], []) m4_define([_LT_TAGS], []) # LT_LANG(LANG) # ------------- # Enable libtool support for the given language if not already enabled. AC_DEFUN([LT_LANG], [AC_BEFORE([$0], [LT_OUTPUT])dnl m4_case([$1], [C], [_LT_LANG(C)], [C++], [_LT_LANG(CXX)], [Go], [_LT_LANG(GO)], [Java], [_LT_LANG(GCJ)], [Fortran 77], [_LT_LANG(F77)], [Fortran], [_LT_LANG(FC)], [Windows Resource], [_LT_LANG(RC)], [m4_ifdef([_LT_LANG_]$1[_CONFIG], [_LT_LANG($1)], [m4_fatal([$0: unsupported language: "$1"])])])dnl ])# LT_LANG # _LT_LANG(LANGNAME) # ------------------ m4_defun([_LT_LANG], [m4_ifdef([_LT_LANG_]$1[_enabled], [], [LT_SUPPORTED_TAG([$1])dnl m4_append([_LT_TAGS], [$1 ])dnl m4_define([_LT_LANG_]$1[_enabled], [])dnl _LT_LANG_$1_CONFIG($1)])dnl ])# _LT_LANG m4_ifndef([AC_PROG_GO], [ ############################################################ # NOTE: This macro has been submitted for inclusion into # # GNU Autoconf as AC_PROG_GO. When it is available in # # a released version of Autoconf we should remove this # # macro and use it instead. # ############################################################ m4_defun([AC_PROG_GO], [AC_LANG_PUSH(Go)dnl AC_ARG_VAR([GOC], [Go compiler command])dnl AC_ARG_VAR([GOFLAGS], [Go compiler flags])dnl _AC_ARG_VAR_LDFLAGS()dnl AC_CHECK_TOOL(GOC, gccgo) if test -z "$GOC"; then if test -n "$ac_tool_prefix"; then AC_CHECK_PROG(GOC, [${ac_tool_prefix}gccgo], [${ac_tool_prefix}gccgo]) fi fi if test -z "$GOC"; then AC_CHECK_PROG(GOC, gccgo, gccgo, false) fi ])#m4_defun ])#m4_ifndef # _LT_LANG_DEFAULT_CONFIG # ----------------------- m4_defun([_LT_LANG_DEFAULT_CONFIG], [AC_PROVIDE_IFELSE([AC_PROG_CXX], [LT_LANG(CXX)], [m4_define([AC_PROG_CXX], defn([AC_PROG_CXX])[LT_LANG(CXX)])]) AC_PROVIDE_IFELSE([AC_PROG_F77], [LT_LANG(F77)], [m4_define([AC_PROG_F77], defn([AC_PROG_F77])[LT_LANG(F77)])]) AC_PROVIDE_IFELSE([AC_PROG_FC], [LT_LANG(FC)], [m4_define([AC_PROG_FC], defn([AC_PROG_FC])[LT_LANG(FC)])]) dnl The call to [A][M_PROG_GCJ] is quoted like that to stop aclocal dnl pulling things in needlessly. AC_PROVIDE_IFELSE([AC_PROG_GCJ], [LT_LANG(GCJ)], [AC_PROVIDE_IFELSE([A][M_PROG_GCJ], [LT_LANG(GCJ)], [AC_PROVIDE_IFELSE([LT_PROG_GCJ], [LT_LANG(GCJ)], [m4_ifdef([AC_PROG_GCJ], [m4_define([AC_PROG_GCJ], defn([AC_PROG_GCJ])[LT_LANG(GCJ)])]) m4_ifdef([A][M_PROG_GCJ], [m4_define([A][M_PROG_GCJ], defn([A][M_PROG_GCJ])[LT_LANG(GCJ)])]) m4_ifdef([LT_PROG_GCJ], [m4_define([LT_PROG_GCJ], defn([LT_PROG_GCJ])[LT_LANG(GCJ)])])])])]) AC_PROVIDE_IFELSE([AC_PROG_GO], [LT_LANG(GO)], [m4_define([AC_PROG_GO], defn([AC_PROG_GO])[LT_LANG(GO)])]) AC_PROVIDE_IFELSE([LT_PROG_RC], [LT_LANG(RC)], [m4_define([LT_PROG_RC], defn([LT_PROG_RC])[LT_LANG(RC)])]) ])# _LT_LANG_DEFAULT_CONFIG # Obsolete macros: AU_DEFUN([AC_LIBTOOL_CXX], [LT_LANG(C++)]) AU_DEFUN([AC_LIBTOOL_F77], [LT_LANG(Fortran 77)]) AU_DEFUN([AC_LIBTOOL_FC], [LT_LANG(Fortran)]) AU_DEFUN([AC_LIBTOOL_GCJ], [LT_LANG(Java)]) AU_DEFUN([AC_LIBTOOL_RC], [LT_LANG(Windows Resource)]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_CXX], []) dnl AC_DEFUN([AC_LIBTOOL_F77], []) dnl AC_DEFUN([AC_LIBTOOL_FC], []) dnl AC_DEFUN([AC_LIBTOOL_GCJ], []) dnl AC_DEFUN([AC_LIBTOOL_RC], []) # _LT_TAG_COMPILER # ---------------- m4_defun([_LT_TAG_COMPILER], [AC_REQUIRE([AC_PROG_CC])dnl _LT_DECL([LTCC], [CC], [1], [A C compiler])dnl _LT_DECL([LTCFLAGS], [CFLAGS], [1], [LTCC compiler flags])dnl _LT_TAGDECL([CC], [compiler], [1], [A language specific compiler])dnl _LT_TAGDECL([with_gcc], [GCC], [0], [Is the compiler the GNU compiler?])dnl # If no C compiler was specified, use CC. LTCC=${LTCC-"$CC"} # If no C compiler flags were specified, use CFLAGS. LTCFLAGS=${LTCFLAGS-"$CFLAGS"} # Allow CC to be a program name with arguments. compiler=$CC ])# _LT_TAG_COMPILER # _LT_COMPILER_BOILERPLATE # ------------------------ # Check for compiler boilerplate output or warnings with # the simple compiler test code. m4_defun([_LT_COMPILER_BOILERPLATE], [m4_require([_LT_DECL_SED])dnl ac_outfile=conftest.$ac_objext echo "$lt_simple_compile_test_code" >conftest.$ac_ext eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err _lt_compiler_boilerplate=`cat conftest.err` $RM conftest* ])# _LT_COMPILER_BOILERPLATE # _LT_LINKER_BOILERPLATE # ---------------------- # Check for linker boilerplate output or warnings with # the simple link test code. m4_defun([_LT_LINKER_BOILERPLATE], [m4_require([_LT_DECL_SED])dnl ac_outfile=conftest.$ac_objext echo "$lt_simple_link_test_code" >conftest.$ac_ext eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err _lt_linker_boilerplate=`cat conftest.err` $RM -r conftest* ])# _LT_LINKER_BOILERPLATE # _LT_REQUIRED_DARWIN_CHECKS # ------------------------- m4_defun_once([_LT_REQUIRED_DARWIN_CHECKS],[ case $host_os in rhapsody* | darwin*) AC_CHECK_TOOL([DSYMUTIL], [dsymutil], [:]) AC_CHECK_TOOL([NMEDIT], [nmedit], [:]) AC_CHECK_TOOL([LIPO], [lipo], [:]) AC_CHECK_TOOL([OTOOL], [otool], [:]) AC_CHECK_TOOL([OTOOL64], [otool64], [:]) _LT_DECL([], [DSYMUTIL], [1], [Tool to manipulate archived DWARF debug symbol files on Mac OS X]) _LT_DECL([], [NMEDIT], [1], [Tool to change global to local symbols on Mac OS X]) _LT_DECL([], [LIPO], [1], [Tool to manipulate fat objects and archives on Mac OS X]) _LT_DECL([], [OTOOL], [1], [ldd/readelf like tool for Mach-O binaries on Mac OS X]) _LT_DECL([], [OTOOL64], [1], [ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4]) AC_CACHE_CHECK([for -single_module linker flag],[lt_cv_apple_cc_single_mod], [lt_cv_apple_cc_single_mod=no if test -z "$LT_MULTI_MODULE"; then # By default we will add the -single_module flag. You can override # by either setting the environment variable LT_MULTI_MODULE # non-empty at configure time, or by adding -multi_module to the # link flags. rm -rf libconftest.dylib* echo "int foo(void){return 1;}" > conftest.c echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \ -dynamiclib -Wl,-single_module conftest.c" >&AS_MESSAGE_LOG_FD $LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \ -dynamiclib -Wl,-single_module conftest.c 2>conftest.err _lt_result=$? # If there is a non-empty error log, and "single_module" # appears in it, assume the flag caused a linker warning if test -s conftest.err && $GREP single_module conftest.err; then cat conftest.err >&AS_MESSAGE_LOG_FD # Otherwise, if the output was created with a 0 exit code from # the compiler, it worked. elif test -f libconftest.dylib && test 0 = "$_lt_result"; then lt_cv_apple_cc_single_mod=yes else cat conftest.err >&AS_MESSAGE_LOG_FD fi rm -rf libconftest.dylib* rm -f conftest.* fi]) AC_CACHE_CHECK([for -exported_symbols_list linker flag], [lt_cv_ld_exported_symbols_list], [lt_cv_ld_exported_symbols_list=no save_LDFLAGS=$LDFLAGS echo "_main" > conftest.sym LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym" AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])], [lt_cv_ld_exported_symbols_list=yes], [lt_cv_ld_exported_symbols_list=no]) LDFLAGS=$save_LDFLAGS ]) AC_CACHE_CHECK([for -force_load linker flag],[lt_cv_ld_force_load], [lt_cv_ld_force_load=no cat > conftest.c << _LT_EOF int forced_loaded() { return 2;} _LT_EOF echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&AS_MESSAGE_LOG_FD $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&AS_MESSAGE_LOG_FD echo "$AR $AR_FLAGS libconftest.a conftest.o" >&AS_MESSAGE_LOG_FD $AR $AR_FLAGS libconftest.a conftest.o 2>&AS_MESSAGE_LOG_FD echo "$RANLIB libconftest.a" >&AS_MESSAGE_LOG_FD $RANLIB libconftest.a 2>&AS_MESSAGE_LOG_FD cat > conftest.c << _LT_EOF int main() { return 0;} _LT_EOF echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&AS_MESSAGE_LOG_FD $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err _lt_result=$? if test -s conftest.err && $GREP force_load conftest.err; then cat conftest.err >&AS_MESSAGE_LOG_FD elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then lt_cv_ld_force_load=yes else cat conftest.err >&AS_MESSAGE_LOG_FD fi rm -f conftest.err libconftest.a conftest conftest.c rm -rf conftest.dSYM ]) case $host_os in rhapsody* | darwin1.[[012]]) _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;; darwin1.*) _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;; darwin*) case $MACOSX_DEPLOYMENT_TARGET,$host in 10.[[012]],*|,*powerpc*-darwin[[5-8]]*) _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;; *) _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup' ;; esac ;; esac if test yes = "$lt_cv_apple_cc_single_mod"; then _lt_dar_single_mod='$single_module' fi if test yes = "$lt_cv_ld_exported_symbols_list"; then _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym' else _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib' fi if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then _lt_dsymutil='~$DSYMUTIL $lib || :' else _lt_dsymutil= fi ;; esac ]) # _LT_DARWIN_LINKER_FEATURES([TAG]) # --------------------------------- # Checks for linker and compiler features on darwin m4_defun([_LT_DARWIN_LINKER_FEATURES], [ m4_require([_LT_REQUIRED_DARWIN_CHECKS]) _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_automatic, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported if test yes = "$lt_cv_ld_force_load"; then _LT_TAGVAR(whole_archive_flag_spec, $1)='`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`' m4_case([$1], [F77], [_LT_TAGVAR(compiler_needs_object, $1)=yes], [FC], [_LT_TAGVAR(compiler_needs_object, $1)=yes]) else _LT_TAGVAR(whole_archive_flag_spec, $1)='' fi _LT_TAGVAR(link_all_deplibs, $1)=yes _LT_TAGVAR(allow_undefined_flag, $1)=$_lt_dar_allow_undefined case $cc_basename in ifort*|nagfor*) _lt_dar_can_shared=yes ;; *) _lt_dar_can_shared=$GCC ;; esac if test yes = "$_lt_dar_can_shared"; then output_verbose_link_cmd=func_echo_all _LT_TAGVAR(archive_cmds, $1)="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil" _LT_TAGVAR(module_cmds, $1)="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil" _LT_TAGVAR(archive_expsym_cmds, $1)="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil" _LT_TAGVAR(module_expsym_cmds, $1)="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil" m4_if([$1], [CXX], [ if test yes != "$lt_cv_apple_cc_single_mod"; then _LT_TAGVAR(archive_cmds, $1)="\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dsymutil" _LT_TAGVAR(archive_expsym_cmds, $1)="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dar_export_syms$_lt_dsymutil" fi ],[]) else _LT_TAGVAR(ld_shlibs, $1)=no fi ]) # _LT_SYS_MODULE_PATH_AIX([TAGNAME]) # ---------------------------------- # Links a minimal program and checks the executable # for the system default hardcoded library path. In most cases, # this is /usr/lib:/lib, but when the MPI compilers are used # the location of the communication and MPI libs are included too. # If we don't find anything, use the default library path according # to the aix ld manual. # Store the results from the different compilers for each TAGNAME. # Allow to override them for all tags through lt_cv_aix_libpath. m4_defun([_LT_SYS_MODULE_PATH_AIX], [m4_require([_LT_DECL_SED])dnl if test set = "${lt_cv_aix_libpath+set}"; then aix_libpath=$lt_cv_aix_libpath else AC_CACHE_VAL([_LT_TAGVAR([lt_cv_aix_libpath_], [$1])], [AC_LINK_IFELSE([AC_LANG_PROGRAM],[ lt_aix_libpath_sed='[ /Import File Strings/,/^$/ { /^0/ { s/^0 *\([^ ]*\) *$/\1/ p } }]' _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` # Check for a 64-bit object if we didn't find anything. if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` fi],[]) if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=/usr/lib:/lib fi ]) aix_libpath=$_LT_TAGVAR([lt_cv_aix_libpath_], [$1]) fi ])# _LT_SYS_MODULE_PATH_AIX # _LT_SHELL_INIT(ARG) # ------------------- m4_define([_LT_SHELL_INIT], [m4_divert_text([M4SH-INIT], [$1 ])])# _LT_SHELL_INIT # _LT_PROG_ECHO_BACKSLASH # ----------------------- # Find how we can fake an echo command that does not interpret backslash. # In particular, with Autoconf 2.60 or later we add some code to the start # of the generated configure script that will find a shell with a builtin # printf (that we can use as an echo command). m4_defun([_LT_PROG_ECHO_BACKSLASH], [ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO AC_MSG_CHECKING([how to print strings]) # Test print first, because it will be a builtin if present. if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \ test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then ECHO='print -r --' elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then ECHO='printf %s\n' else # Use this function as a fallback that always works. func_fallback_echo () { eval 'cat <<_LTECHO_EOF $[]1 _LTECHO_EOF' } ECHO='func_fallback_echo' fi # func_echo_all arg... # Invoke $ECHO with all args, space-separated. func_echo_all () { $ECHO "$*" } case $ECHO in printf*) AC_MSG_RESULT([printf]) ;; print*) AC_MSG_RESULT([print -r]) ;; *) AC_MSG_RESULT([cat]) ;; esac m4_ifdef([_AS_DETECT_SUGGESTED], [_AS_DETECT_SUGGESTED([ test -n "${ZSH_VERSION+set}${BASH_VERSION+set}" || ( ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO PATH=/empty FPATH=/empty; export PATH FPATH test "X`printf %s $ECHO`" = "X$ECHO" \ || test "X`print -r -- $ECHO`" = "X$ECHO" )])]) _LT_DECL([], [SHELL], [1], [Shell to use when invoking shell scripts]) _LT_DECL([], [ECHO], [1], [An echo program that protects backslashes]) ])# _LT_PROG_ECHO_BACKSLASH # _LT_WITH_SYSROOT # ---------------- AC_DEFUN([_LT_WITH_SYSROOT], [m4_require([_LT_DECL_SED])dnl AC_MSG_CHECKING([for sysroot]) AC_ARG_WITH([sysroot], [AS_HELP_STRING([--with-sysroot@<:@=DIR@:>@], [Search for dependent libraries within DIR (or the compiler's sysroot if not specified).])], [], [with_sysroot=no]) dnl lt_sysroot will always be passed unquoted. We quote it here dnl in case the user passed a directory name. lt_sysroot= case $with_sysroot in #( yes) if test yes = "$GCC"; then lt_sysroot=`$CC --print-sysroot 2>/dev/null` fi ;; #( /*) lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"` ;; #( no|'') ;; #( *) AC_MSG_RESULT([$with_sysroot]) AC_MSG_ERROR([The sysroot must be an absolute path.]) ;; esac AC_MSG_RESULT([${lt_sysroot:-no}]) _LT_DECL([], [lt_sysroot], [0], [The root where to search for ]dnl [dependent libraries, and where our libraries should be installed.])]) # _LT_ENABLE_LOCK # --------------- m4_defun([_LT_ENABLE_LOCK], [AC_ARG_ENABLE([libtool-lock], [AS_HELP_STRING([--disable-libtool-lock], [avoid locking (might break parallel builds)])]) test no = "$enable_libtool_lock" || enable_libtool_lock=yes # Some flags need to be propagated to the compiler or linker for good # libtool support. case $host in ia64-*-hpux*) # Find out what ABI is being produced by ac_compile, and set mode # options accordingly. echo 'int i;' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then case `$FILECMD conftest.$ac_objext` in *ELF-32*) HPUX_IA64_MODE=32 ;; *ELF-64*) HPUX_IA64_MODE=64 ;; esac fi rm -rf conftest* ;; *-*-irix6*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then if test yes = "$lt_cv_prog_gnu_ld"; then case `$FILECMD conftest.$ac_objext` in *32-bit*) LD="${LD-ld} -melf32bsmip" ;; *N32*) LD="${LD-ld} -melf32bmipn32" ;; *64-bit*) LD="${LD-ld} -melf64bmip" ;; esac else case `$FILECMD conftest.$ac_objext` in *32-bit*) LD="${LD-ld} -32" ;; *N32*) LD="${LD-ld} -n32" ;; *64-bit*) LD="${LD-ld} -64" ;; esac fi fi rm -rf conftest* ;; mips64*-*linux*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then emul=elf case `$FILECMD conftest.$ac_objext` in *32-bit*) emul="${emul}32" ;; *64-bit*) emul="${emul}64" ;; esac case `$FILECMD conftest.$ac_objext` in *MSB*) emul="${emul}btsmip" ;; *LSB*) emul="${emul}ltsmip" ;; esac case `$FILECMD conftest.$ac_objext` in *N32*) emul="${emul}n32" ;; esac LD="${LD-ld} -m $emul" fi rm -rf conftest* ;; x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \ s390*-*linux*|s390*-*tpf*|sparc*-*linux*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. Note that the listed cases only cover the # situations where additional linker options are needed (such as when # doing 32-bit compilation for a host where ld defaults to 64-bit, or # vice versa); the common cases where no linker options are needed do # not appear in the list. echo 'int i;' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then case `$FILECMD conftest.o` in *32-bit*) case $host in x86_64-*kfreebsd*-gnu) LD="${LD-ld} -m elf_i386_fbsd" ;; x86_64-*linux*) case `$FILECMD conftest.o` in *x86-64*) LD="${LD-ld} -m elf32_x86_64" ;; *) LD="${LD-ld} -m elf_i386" ;; esac ;; powerpc64le-*linux*) LD="${LD-ld} -m elf32lppclinux" ;; powerpc64-*linux*) LD="${LD-ld} -m elf32ppclinux" ;; s390x-*linux*) LD="${LD-ld} -m elf_s390" ;; sparc64-*linux*) LD="${LD-ld} -m elf32_sparc" ;; esac ;; *64-bit*) case $host in x86_64-*kfreebsd*-gnu) LD="${LD-ld} -m elf_x86_64_fbsd" ;; x86_64-*linux*) LD="${LD-ld} -m elf_x86_64" ;; powerpcle-*linux*) LD="${LD-ld} -m elf64lppc" ;; powerpc-*linux*) LD="${LD-ld} -m elf64ppc" ;; s390*-*linux*|s390*-*tpf*) LD="${LD-ld} -m elf64_s390" ;; sparc*-*linux*) LD="${LD-ld} -m elf64_sparc" ;; esac ;; esac fi rm -rf conftest* ;; *-*-sco3.2v5*) # On SCO OpenServer 5, we need -belf to get full-featured binaries. SAVE_CFLAGS=$CFLAGS CFLAGS="$CFLAGS -belf" AC_CACHE_CHECK([whether the C compiler needs -belf], lt_cv_cc_needs_belf, [AC_LANG_PUSH(C) AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],[[]])],[lt_cv_cc_needs_belf=yes],[lt_cv_cc_needs_belf=no]) AC_LANG_POP]) if test yes != "$lt_cv_cc_needs_belf"; then # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf CFLAGS=$SAVE_CFLAGS fi ;; *-*solaris*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo 'int i;' > conftest.$ac_ext if AC_TRY_EVAL(ac_compile); then case `$FILECMD conftest.o` in *64-bit*) case $lt_cv_prog_gnu_ld in yes*) case $host in i?86-*-solaris*|x86_64-*-solaris*) LD="${LD-ld} -m elf_x86_64" ;; sparc*-*-solaris*) LD="${LD-ld} -m elf64_sparc" ;; esac # GNU ld 2.21 introduced _sol2 emulations. Use them if available. if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then LD=${LD-ld}_sol2 fi ;; *) if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then LD="${LD-ld} -64" fi ;; esac ;; esac fi rm -rf conftest* ;; esac need_locks=$enable_libtool_lock ])# _LT_ENABLE_LOCK # _LT_PROG_AR # ----------- m4_defun([_LT_PROG_AR], [AC_CHECK_TOOLS(AR, [ar], false) : ${AR=ar} _LT_DECL([], [AR], [1], [The archiver]) # Use ARFLAGS variable as AR's operation code to sync the variable naming with # Automake. If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have # higher priority because thats what people were doing historically (setting # ARFLAGS for automake and AR_FLAGS for libtool). FIXME: Make the AR_FLAGS # variable obsoleted/removed. test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr} lt_ar_flags=$AR_FLAGS _LT_DECL([], [lt_ar_flags], [0], [Flags to create an archive (by configure)]) # Make AR_FLAGS overridable by 'make ARFLAGS='. Don't try to run-time override # by AR_FLAGS because that was never working and AR_FLAGS is about to die. _LT_DECL([], [AR_FLAGS], [\@S|@{ARFLAGS-"\@S|@lt_ar_flags"}], [Flags to create an archive]) AC_CACHE_CHECK([for archiver @FILE support], [lt_cv_ar_at_file], [lt_cv_ar_at_file=no AC_COMPILE_IFELSE([AC_LANG_PROGRAM], [echo conftest.$ac_objext > conftest.lst lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&AS_MESSAGE_LOG_FD' AC_TRY_EVAL([lt_ar_try]) if test 0 -eq "$ac_status"; then # Ensure the archiver fails upon bogus file names. rm -f conftest.$ac_objext libconftest.a AC_TRY_EVAL([lt_ar_try]) if test 0 -ne "$ac_status"; then lt_cv_ar_at_file=@ fi fi rm -f conftest.* libconftest.a ]) ]) if test no = "$lt_cv_ar_at_file"; then archiver_list_spec= else archiver_list_spec=$lt_cv_ar_at_file fi _LT_DECL([], [archiver_list_spec], [1], [How to feed a file listing to the archiver]) ])# _LT_PROG_AR # _LT_CMD_OLD_ARCHIVE # ------------------- m4_defun([_LT_CMD_OLD_ARCHIVE], [_LT_PROG_AR AC_CHECK_TOOL(STRIP, strip, :) test -z "$STRIP" && STRIP=: _LT_DECL([], [STRIP], [1], [A symbol stripping program]) AC_CHECK_TOOL(RANLIB, ranlib, :) test -z "$RANLIB" && RANLIB=: _LT_DECL([], [RANLIB], [1], [Commands used to install an old-style archive]) # Determine commands to create old-style static archives. old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs' old_postinstall_cmds='chmod 644 $oldlib' old_postuninstall_cmds= if test -n "$RANLIB"; then case $host_os in bitrig* | openbsd*) old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB -t \$tool_oldlib" ;; *) old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib" ;; esac old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib" fi case $host_os in darwin*) lock_old_archive_extraction=yes ;; *) lock_old_archive_extraction=no ;; esac _LT_DECL([], [old_postinstall_cmds], [2]) _LT_DECL([], [old_postuninstall_cmds], [2]) _LT_TAGDECL([], [old_archive_cmds], [2], [Commands used to build an old-style archive]) _LT_DECL([], [lock_old_archive_extraction], [0], [Whether to use a lock for old archive extraction]) ])# _LT_CMD_OLD_ARCHIVE # _LT_COMPILER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS, # [OUTPUT-FILE], [ACTION-SUCCESS], [ACTION-FAILURE]) # ---------------------------------------------------------------- # Check whether the given compiler option works AC_DEFUN([_LT_COMPILER_OPTION], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_DECL_SED])dnl AC_CACHE_CHECK([$1], [$2], [$2=no m4_if([$4], , [ac_outfile=conftest.$ac_objext], [ac_outfile=$4]) echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="$3" ## exclude from sc_useless_quotes_in_assignment # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. # The option is referenced via a variable to avoid confusing sed. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&AS_MESSAGE_LOG_FD echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then $2=yes fi fi $RM conftest* ]) if test yes = "[$]$2"; then m4_if([$5], , :, [$5]) else m4_if([$6], , :, [$6]) fi ])# _LT_COMPILER_OPTION # Old name: AU_ALIAS([AC_LIBTOOL_COMPILER_OPTION], [_LT_COMPILER_OPTION]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_COMPILER_OPTION], []) # _LT_LINKER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS, # [ACTION-SUCCESS], [ACTION-FAILURE]) # ---------------------------------------------------- # Check whether the given linker option works AC_DEFUN([_LT_LINKER_OPTION], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_DECL_SED])dnl AC_CACHE_CHECK([$1], [$2], [$2=no save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS $3" echo "$lt_simple_link_test_code" > conftest.$ac_ext if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then # The linker can only warn and ignore the option if not recognized # So say no if there are warnings if test -s conftest.err; then # Append any errors to the config.log. cat conftest.err 1>&AS_MESSAGE_LOG_FD $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if diff conftest.exp conftest.er2 >/dev/null; then $2=yes fi else $2=yes fi fi $RM -r conftest* LDFLAGS=$save_LDFLAGS ]) if test yes = "[$]$2"; then m4_if([$4], , :, [$4]) else m4_if([$5], , :, [$5]) fi ])# _LT_LINKER_OPTION # Old name: AU_ALIAS([AC_LIBTOOL_LINKER_OPTION], [_LT_LINKER_OPTION]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_LINKER_OPTION], []) # LT_CMD_MAX_LEN #--------------- AC_DEFUN([LT_CMD_MAX_LEN], [AC_REQUIRE([AC_CANONICAL_HOST])dnl # find the maximum length of command line arguments AC_MSG_CHECKING([the maximum length of command line arguments]) AC_CACHE_VAL([lt_cv_sys_max_cmd_len], [dnl i=0 teststring=ABCD case $build_os in msdosdjgpp*) # On DJGPP, this test can blow up pretty badly due to problems in libc # (any single argument exceeding 2000 bytes causes a buffer overrun # during glob expansion). Even if it were fixed, the result of this # check would be larger than it should be. lt_cv_sys_max_cmd_len=12288; # 12K is about right ;; gnu*) # Under GNU Hurd, this test is not required because there is # no limit to the length of command line arguments. # Libtool will interpret -1 as no limit whatsoever lt_cv_sys_max_cmd_len=-1; ;; cygwin* | mingw* | cegcc*) # On Win9x/ME, this test blows up -- it succeeds, but takes # about 5 minutes as the teststring grows exponentially. # Worse, since 9x/ME are not pre-emptively multitasking, # you end up with a "frozen" computer, even though with patience # the test eventually succeeds (with a max line length of 256k). # Instead, let's just punt: use the minimum linelength reported by # all of the supported platforms: 8192 (on NT/2K/XP). lt_cv_sys_max_cmd_len=8192; ;; mint*) # On MiNT this can take a long time and run out of memory. lt_cv_sys_max_cmd_len=8192; ;; amigaos*) # On AmigaOS with pdksh, this test takes hours, literally. # So we just punt and use a minimum line length of 8192. lt_cv_sys_max_cmd_len=8192; ;; bitrig* | darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*) # This has been around since 386BSD, at least. Likely further. if test -x /sbin/sysctl; then lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax` elif test -x /usr/sbin/sysctl; then lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax` else lt_cv_sys_max_cmd_len=65536 # usable default for all BSDs fi # And add a safety zone lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` ;; interix*) # We know the value 262144 and hardcode it with a safety zone (like BSD) lt_cv_sys_max_cmd_len=196608 ;; os2*) # The test takes a long time on OS/2. lt_cv_sys_max_cmd_len=8192 ;; osf*) # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not # nice to cause kernel panics so lets avoid the loop below. # First set a reasonable default. lt_cv_sys_max_cmd_len=16384 # if test -x /sbin/sysconfig; then case `/sbin/sysconfig -q proc exec_disable_arg_limit` in *1*) lt_cv_sys_max_cmd_len=-1 ;; esac fi ;; sco3.2v5*) lt_cv_sys_max_cmd_len=102400 ;; sysv5* | sco5v6* | sysv4.2uw2*) kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null` if test -n "$kargmax"; then lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[[ ]]//'` else lt_cv_sys_max_cmd_len=32768 fi ;; *) lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null` if test -n "$lt_cv_sys_max_cmd_len" && \ test undefined != "$lt_cv_sys_max_cmd_len"; then lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` else # Make teststring a little bigger before we do anything with it. # a 1K string should be a reasonable start. for i in 1 2 3 4 5 6 7 8; do teststring=$teststring$teststring done SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}} # If test is not a shell built-in, we'll probably end up computing a # maximum length that is only half of the actual maximum length, but # we can't tell. while { test X`env echo "$teststring$teststring" 2>/dev/null` \ = "X$teststring$teststring"; } >/dev/null 2>&1 && test 17 != "$i" # 1/2 MB should be enough do i=`expr $i + 1` teststring=$teststring$teststring done # Only check the string length outside the loop. lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1` teststring= # Add a significant safety factor because C++ compilers can tack on # massive amounts of additional arguments before passing them to the # linker. It appears as though 1/2 is a usable value. lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2` fi ;; esac ]) if test -n "$lt_cv_sys_max_cmd_len"; then AC_MSG_RESULT($lt_cv_sys_max_cmd_len) else AC_MSG_RESULT(none) fi max_cmd_len=$lt_cv_sys_max_cmd_len _LT_DECL([], [max_cmd_len], [0], [What is the maximum length of a command?]) ])# LT_CMD_MAX_LEN # Old name: AU_ALIAS([AC_LIBTOOL_SYS_MAX_CMD_LEN], [LT_CMD_MAX_LEN]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], []) # _LT_HEADER_DLFCN # ---------------- m4_defun([_LT_HEADER_DLFCN], [AC_CHECK_HEADERS([dlfcn.h], [], [], [AC_INCLUDES_DEFAULT])dnl ])# _LT_HEADER_DLFCN # _LT_TRY_DLOPEN_SELF (ACTION-IF-TRUE, ACTION-IF-TRUE-W-USCORE, # ACTION-IF-FALSE, ACTION-IF-CROSS-COMPILING) # ---------------------------------------------------------------- m4_defun([_LT_TRY_DLOPEN_SELF], [m4_require([_LT_HEADER_DLFCN])dnl if test yes = "$cross_compiling"; then : [$4] else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext <<_LT_EOF [#line $LINENO "configure" #include "confdefs.h" #if HAVE_DLFCN_H #include #endif #include #ifdef RTLD_GLOBAL # define LT_DLGLOBAL RTLD_GLOBAL #else # ifdef DL_GLOBAL # define LT_DLGLOBAL DL_GLOBAL # else # define LT_DLGLOBAL 0 # endif #endif /* We may have to define LT_DLLAZY_OR_NOW in the command line if we find out it does not work in some platform. */ #ifndef LT_DLLAZY_OR_NOW # ifdef RTLD_LAZY # define LT_DLLAZY_OR_NOW RTLD_LAZY # else # ifdef DL_LAZY # define LT_DLLAZY_OR_NOW DL_LAZY # else # ifdef RTLD_NOW # define LT_DLLAZY_OR_NOW RTLD_NOW # else # ifdef DL_NOW # define LT_DLLAZY_OR_NOW DL_NOW # else # define LT_DLLAZY_OR_NOW 0 # endif # endif # endif # endif #endif /* When -fvisibility=hidden is used, assume the code has been annotated correspondingly for the symbols needed. */ #if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3)) int fnord () __attribute__((visibility("default"))); #endif int fnord () { return 42; } int main () { void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW); int status = $lt_dlunknown; if (self) { if (dlsym (self,"fnord")) status = $lt_dlno_uscore; else { if (dlsym( self,"_fnord")) status = $lt_dlneed_uscore; else puts (dlerror ()); } /* dlclose (self); */ } else puts (dlerror ()); return status; }] _LT_EOF if AC_TRY_EVAL(ac_link) && test -s "conftest$ac_exeext" 2>/dev/null; then (./conftest; exit; ) >&AS_MESSAGE_LOG_FD 2>/dev/null lt_status=$? case x$lt_status in x$lt_dlno_uscore) $1 ;; x$lt_dlneed_uscore) $2 ;; x$lt_dlunknown|x*) $3 ;; esac else : # compilation failed $3 fi fi rm -fr conftest* ])# _LT_TRY_DLOPEN_SELF # LT_SYS_DLOPEN_SELF # ------------------ AC_DEFUN([LT_SYS_DLOPEN_SELF], [m4_require([_LT_HEADER_DLFCN])dnl if test yes != "$enable_dlopen"; then enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown else lt_cv_dlopen=no lt_cv_dlopen_libs= case $host_os in beos*) lt_cv_dlopen=load_add_on lt_cv_dlopen_libs= lt_cv_dlopen_self=yes ;; mingw* | pw32* | cegcc*) lt_cv_dlopen=LoadLibrary lt_cv_dlopen_libs= ;; cygwin*) lt_cv_dlopen=dlopen lt_cv_dlopen_libs= ;; darwin*) # if libdl is installed we need to link against it AC_CHECK_LIB([dl], [dlopen], [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],[ lt_cv_dlopen=dyld lt_cv_dlopen_libs= lt_cv_dlopen_self=yes ]) ;; tpf*) # Don't try to run any link tests for TPF. We know it's impossible # because TPF is a cross-compiler, and we know how we open DSOs. lt_cv_dlopen=dlopen lt_cv_dlopen_libs= lt_cv_dlopen_self=no ;; *) AC_CHECK_FUNC([shl_load], [lt_cv_dlopen=shl_load], [AC_CHECK_LIB([dld], [shl_load], [lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld], [AC_CHECK_FUNC([dlopen], [lt_cv_dlopen=dlopen], [AC_CHECK_LIB([dl], [dlopen], [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl], [AC_CHECK_LIB([svld], [dlopen], [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld], [AC_CHECK_LIB([dld], [dld_link], [lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld]) ]) ]) ]) ]) ]) ;; esac if test no = "$lt_cv_dlopen"; then enable_dlopen=no else enable_dlopen=yes fi case $lt_cv_dlopen in dlopen) save_CPPFLAGS=$CPPFLAGS test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H" save_LDFLAGS=$LDFLAGS wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\" save_LIBS=$LIBS LIBS="$lt_cv_dlopen_libs $LIBS" AC_CACHE_CHECK([whether a program can dlopen itself], lt_cv_dlopen_self, [dnl _LT_TRY_DLOPEN_SELF( lt_cv_dlopen_self=yes, lt_cv_dlopen_self=yes, lt_cv_dlopen_self=no, lt_cv_dlopen_self=cross) ]) if test yes = "$lt_cv_dlopen_self"; then wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\" AC_CACHE_CHECK([whether a statically linked program can dlopen itself], lt_cv_dlopen_self_static, [dnl _LT_TRY_DLOPEN_SELF( lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=no, lt_cv_dlopen_self_static=cross) ]) fi CPPFLAGS=$save_CPPFLAGS LDFLAGS=$save_LDFLAGS LIBS=$save_LIBS ;; esac case $lt_cv_dlopen_self in yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;; *) enable_dlopen_self=unknown ;; esac case $lt_cv_dlopen_self_static in yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;; *) enable_dlopen_self_static=unknown ;; esac fi _LT_DECL([dlopen_support], [enable_dlopen], [0], [Whether dlopen is supported]) _LT_DECL([dlopen_self], [enable_dlopen_self], [0], [Whether dlopen of programs is supported]) _LT_DECL([dlopen_self_static], [enable_dlopen_self_static], [0], [Whether dlopen of statically linked programs is supported]) ])# LT_SYS_DLOPEN_SELF # Old name: AU_ALIAS([AC_LIBTOOL_DLOPEN_SELF], [LT_SYS_DLOPEN_SELF]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_DLOPEN_SELF], []) # _LT_COMPILER_C_O([TAGNAME]) # --------------------------- # Check to see if options -c and -o are simultaneously supported by compiler. # This macro does not hard code the compiler like AC_PROG_CC_C_O. m4_defun([_LT_COMPILER_C_O], [m4_require([_LT_DECL_SED])dnl m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_TAG_COMPILER])dnl AC_CACHE_CHECK([if $compiler supports -c -o file.$ac_objext], [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)], [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=no $RM -r conftest 2>/dev/null mkdir conftest cd conftest mkdir out echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="-o out/conftest2.$ac_objext" # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&AS_MESSAGE_LOG_FD echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2 if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then _LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes fi fi chmod u+w . 2>&AS_MESSAGE_LOG_FD $RM conftest* # SGI C++ compiler will create directory out/ii_files/ for # template instantiation test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files $RM out/* && rmdir out cd .. $RM -r conftest $RM conftest* ]) _LT_TAGDECL([compiler_c_o], [lt_cv_prog_compiler_c_o], [1], [Does compiler simultaneously support -c and -o options?]) ])# _LT_COMPILER_C_O # _LT_COMPILER_FILE_LOCKS([TAGNAME]) # ---------------------------------- # Check to see if we can do hard links to lock some files if needed m4_defun([_LT_COMPILER_FILE_LOCKS], [m4_require([_LT_ENABLE_LOCK])dnl m4_require([_LT_FILEUTILS_DEFAULTS])dnl _LT_COMPILER_C_O([$1]) hard_links=nottested if test no = "$_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)" && test no != "$need_locks"; then # do not overwrite the value of need_locks provided by the user AC_MSG_CHECKING([if we can lock with hard links]) hard_links=yes $RM conftest* ln conftest.a conftest.b 2>/dev/null && hard_links=no touch conftest.a ln conftest.a conftest.b 2>&5 || hard_links=no ln conftest.a conftest.b 2>/dev/null && hard_links=no AC_MSG_RESULT([$hard_links]) if test no = "$hard_links"; then AC_MSG_WARN(['$CC' does not support '-c -o', so 'make -j' may be unsafe]) need_locks=warn fi else need_locks=no fi _LT_DECL([], [need_locks], [1], [Must we lock files when doing compilation?]) ])# _LT_COMPILER_FILE_LOCKS # _LT_CHECK_OBJDIR # ---------------- m4_defun([_LT_CHECK_OBJDIR], [AC_CACHE_CHECK([for objdir], [lt_cv_objdir], [rm -f .libs 2>/dev/null mkdir .libs 2>/dev/null if test -d .libs; then lt_cv_objdir=.libs else # MS-DOS does not allow filenames that begin with a dot. lt_cv_objdir=_libs fi rmdir .libs 2>/dev/null]) objdir=$lt_cv_objdir _LT_DECL([], [objdir], [0], [The name of the directory that contains temporary libtool files])dnl m4_pattern_allow([LT_OBJDIR])dnl AC_DEFINE_UNQUOTED([LT_OBJDIR], "$lt_cv_objdir/", [Define to the sub-directory where libtool stores uninstalled libraries.]) ])# _LT_CHECK_OBJDIR # _LT_LINKER_HARDCODE_LIBPATH([TAGNAME]) # -------------------------------------- # Check hardcoding attributes. m4_defun([_LT_LINKER_HARDCODE_LIBPATH], [AC_MSG_CHECKING([how to hardcode library paths into programs]) _LT_TAGVAR(hardcode_action, $1)= if test -n "$_LT_TAGVAR(hardcode_libdir_flag_spec, $1)" || test -n "$_LT_TAGVAR(runpath_var, $1)" || test yes = "$_LT_TAGVAR(hardcode_automatic, $1)"; then # We can hardcode non-existent directories. if test no != "$_LT_TAGVAR(hardcode_direct, $1)" && # If the only mechanism to avoid hardcoding is shlibpath_var, we # have to relink, otherwise we might link with an installed library # when we should be linking with a yet-to-be-installed one ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, $1)" && test no != "$_LT_TAGVAR(hardcode_minus_L, $1)"; then # Linking always hardcodes the temporary library directory. _LT_TAGVAR(hardcode_action, $1)=relink else # We can link without hardcoding, and we can hardcode nonexisting dirs. _LT_TAGVAR(hardcode_action, $1)=immediate fi else # We cannot hardcode anything, or else we can only hardcode existing # directories. _LT_TAGVAR(hardcode_action, $1)=unsupported fi AC_MSG_RESULT([$_LT_TAGVAR(hardcode_action, $1)]) if test relink = "$_LT_TAGVAR(hardcode_action, $1)" || test yes = "$_LT_TAGVAR(inherit_rpath, $1)"; then # Fast installation is not supported enable_fast_install=no elif test yes = "$shlibpath_overrides_runpath" || test no = "$enable_shared"; then # Fast installation is not necessary enable_fast_install=needless fi _LT_TAGDECL([], [hardcode_action], [0], [How to hardcode a shared library path into an executable]) ])# _LT_LINKER_HARDCODE_LIBPATH # _LT_CMD_STRIPLIB # ---------------- m4_defun([_LT_CMD_STRIPLIB], [m4_require([_LT_DECL_EGREP]) striplib= old_striplib= AC_MSG_CHECKING([whether stripping libraries is possible]) if test -z "$STRIP"; then AC_MSG_RESULT([no]) else if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then old_striplib="$STRIP --strip-debug" striplib="$STRIP --strip-unneeded" AC_MSG_RESULT([yes]) else case $host_os in darwin*) # FIXME - insert some real tests, host_os isn't really good enough striplib="$STRIP -x" old_striplib="$STRIP -S" AC_MSG_RESULT([yes]) ;; freebsd*) if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then old_striplib="$STRIP --strip-debug" striplib="$STRIP --strip-unneeded" AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) fi ;; *) AC_MSG_RESULT([no]) ;; esac fi fi _LT_DECL([], [old_striplib], [1], [Commands to strip libraries]) _LT_DECL([], [striplib], [1]) ])# _LT_CMD_STRIPLIB # _LT_PREPARE_MUNGE_PATH_LIST # --------------------------- # Make sure func_munge_path_list() is defined correctly. m4_defun([_LT_PREPARE_MUNGE_PATH_LIST], [[# func_munge_path_list VARIABLE PATH # ----------------------------------- # VARIABLE is name of variable containing _space_ separated list of # directories to be munged by the contents of PATH, which is string # having a format: # "DIR[:DIR]:" # string "DIR[ DIR]" will be prepended to VARIABLE # ":DIR[:DIR]" # string "DIR[ DIR]" will be appended to VARIABLE # "DIRP[:DIRP]::[DIRA:]DIRA" # string "DIRP[ DIRP]" will be prepended to VARIABLE and string # "DIRA[ DIRA]" will be appended to VARIABLE # "DIR[:DIR]" # VARIABLE will be replaced by "DIR[ DIR]" func_munge_path_list () { case x@S|@2 in x) ;; *:) eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\" ;; x:*) eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\" ;; *::*) eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\" eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\" ;; *) eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\" ;; esac } ]])# _LT_PREPARE_PATH_LIST # _LT_SYS_DYNAMIC_LINKER([TAG]) # ----------------------------- # PORTME Fill in your ld.so characteristics m4_defun([_LT_SYS_DYNAMIC_LINKER], [AC_REQUIRE([AC_CANONICAL_HOST])dnl m4_require([_LT_DECL_EGREP])dnl m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_DECL_OBJDUMP])dnl m4_require([_LT_DECL_SED])dnl m4_require([_LT_CHECK_SHELL_FEATURES])dnl m4_require([_LT_PREPARE_MUNGE_PATH_LIST])dnl AC_MSG_CHECKING([dynamic linker characteristics]) m4_if([$1], [], [ if test yes = "$GCC"; then case $host_os in darwin*) lt_awk_arg='/^libraries:/,/LR/' ;; *) lt_awk_arg='/^libraries:/' ;; esac case $host_os in mingw* | cegcc*) lt_sed_strip_eq='s|=\([[A-Za-z]]:\)|\1|g' ;; *) lt_sed_strip_eq='s|=/|/|g' ;; esac lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq` case $lt_search_path_spec in *\;*) # if the path contains ";" then we assume it to be the separator # otherwise default to the standard path separator (i.e. ":") - it is # assumed that no part of a normal pathname contains ";" but that should # okay in the real world where ";" in dirpaths is itself problematic. lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'` ;; *) lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"` ;; esac # Ok, now we have the path, separated by spaces, we can step through it # and add multilib dir if necessary... lt_tmp_lt_search_path_spec= lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null` # ...but if some path component already ends with the multilib dir we assume # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer). case "$lt_multi_os_dir; $lt_search_path_spec " in "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*) lt_multi_os_dir= ;; esac for lt_sys_path in $lt_search_path_spec; do if test -d "$lt_sys_path$lt_multi_os_dir"; then lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir" elif test -n "$lt_multi_os_dir"; then test -d "$lt_sys_path" && \ lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path" fi done lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk ' BEGIN {RS = " "; FS = "/|\n";} { lt_foo = ""; lt_count = 0; for (lt_i = NF; lt_i > 0; lt_i--) { if ($lt_i != "" && $lt_i != ".") { if ($lt_i == "..") { lt_count++; } else { if (lt_count == 0) { lt_foo = "/" $lt_i lt_foo; } else { lt_count--; } } } } if (lt_foo != "") { lt_freq[[lt_foo]]++; } if (lt_freq[[lt_foo]] == 1) { print lt_foo; } }'` # AWK program above erroneously prepends '/' to C:/dos/paths # for these hosts. case $host_os in mingw* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\ $SED 's|/\([[A-Za-z]]:\)|\1|g'` ;; esac sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP` else sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" fi]) library_names_spec= libname_spec='lib$name' soname_spec= shrext_cmds=.so postinstall_cmds= postuninstall_cmds= finish_cmds= finish_eval= shlibpath_var= shlibpath_overrides_runpath=unknown version_type=none dynamic_linker="$host_os ld.so" sys_lib_dlsearch_path_spec="/lib /usr/lib" need_lib_prefix=unknown hardcode_into_libs=no # when you set need_version to no, make sure it does not cause -set_version # flags to be left without arguments need_version=unknown AC_ARG_VAR([LT_SYS_LIBRARY_PATH], [User-defined run-time library search path.]) case $host_os in aix3*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname.a' shlibpath_var=LIBPATH # AIX 3 has no versioning support, so we append a major version to the name. soname_spec='$libname$release$shared_ext$major' ;; aix[[4-9]]*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no hardcode_into_libs=yes if test ia64 = "$host_cpu"; then # AIX 5 supports IA64 library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH else # With GCC up to 2.95.x, collect2 would create an import file # for dependence libraries. The import file would start with # the line '#! .'. This would cause the generated library to # depend on '.', always an invalid library. This was fixed in # development snapshots of GCC prior to 3.0. case $host_os in aix4 | aix4.[[01]] | aix4.[[01]].*) if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)' echo ' yes ' echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then : else can_build_shared=no fi ;; esac # Using Import Files as archive members, it is possible to support # filename-based versioning of shared library archives on AIX. While # this would work for both with and without runtime linking, it will # prevent static linking of such archives. So we do filename-based # shared library versioning with .so extension only, which is used # when both runtime linking and shared linking is enabled. # Unfortunately, runtime linking may impact performance, so we do # not want this to be the default eventually. Also, we use the # versioned .so libs for executables only if there is the -brtl # linker flag in LDFLAGS as well, or --with-aix-soname=svr4 only. # To allow for filename-based versioning support, we need to create # libNAME.so.V as an archive file, containing: # *) an Import File, referring to the versioned filename of the # archive as well as the shared archive member, telling the # bitwidth (32 or 64) of that shared object, and providing the # list of exported symbols of that shared object, eventually # decorated with the 'weak' keyword # *) the shared object with the F_LOADONLY flag set, to really avoid # it being seen by the linker. # At run time we better use the real file rather than another symlink, # but for link time we create the symlink libNAME.so -> libNAME.so.V case $with_aix_soname,$aix_use_runtimelinking in # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct # soname into executable. Probably we can add versioning support to # collect2, so additional links can be useful in future. aix,yes) # traditional libtool dynamic_linker='AIX unversionable lib.so' # If using run time linking (on AIX 4.2 or later) use lib.so # instead of lib.a to let people know that these are not # typical AIX shared libraries. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' ;; aix,no) # traditional AIX only dynamic_linker='AIX lib.a[(]lib.so.V[)]' # We preserve .a as extension for shared libraries through AIX4.2 # and later when we are not doing run time linking. library_names_spec='$libname$release.a $libname.a' soname_spec='$libname$release$shared_ext$major' ;; svr4,*) # full svr4 only dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)]" library_names_spec='$libname$release$shared_ext$major $libname$shared_ext' # We do not specify a path in Import Files, so LIBPATH fires. shlibpath_overrides_runpath=yes ;; *,yes) # both, prefer svr4 dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)], lib.a[(]lib.so.V[)]" library_names_spec='$libname$release$shared_ext$major $libname$shared_ext' # unpreferred sharedlib libNAME.a needs extra handling postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"' postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"' # We do not specify a path in Import Files, so LIBPATH fires. shlibpath_overrides_runpath=yes ;; *,no) # both, prefer aix dynamic_linker="AIX lib.a[(]lib.so.V[)], lib.so.V[(]$shared_archive_member_spec.o[)]" library_names_spec='$libname$release.a $libname.a' soname_spec='$libname$release$shared_ext$major' # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)' postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"' ;; esac shlibpath_var=LIBPATH fi ;; amigaos*) case $host_cpu in powerpc) # Since July 2007 AmigaOS4 officially supports .so libraries. # When compiling the executable, add -use-dynld -Lsobjs: to the compileline. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' ;; m68k) library_names_spec='$libname.ixlibrary $libname.a' # Create ${libname}_ixlibrary.a entries in /sys/libs. finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([[^/]]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done' ;; esac ;; beos*) library_names_spec='$libname$shared_ext' dynamic_linker="$host_os ld.so" shlibpath_var=LIBRARY_PATH ;; bsdi[[45]]*) version_type=linux # correct to gnu/linux during the next big refactor need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir' shlibpath_var=LD_LIBRARY_PATH sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib" sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib" # the default ld.so.conf also contains /usr/contrib/lib and # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow # libtool to hard-code these into programs ;; cygwin* | mingw* | pw32* | cegcc*) version_type=windows shrext_cmds=.dll need_version=no need_lib_prefix=no case $GCC,$cc_basename in yes,*) # gcc library_names_spec='$libname.dll.a' # DLL is installed to $(libdir)/../bin by postinstall_cmds postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname~ chmod a+x \$dldir/$dlname~ if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then eval '\''$striplib \$dldir/$dlname'\'' || exit \$?; fi' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' shlibpath_overrides_runpath=yes case $host_os in cygwin*) # Cygwin DLLs use 'cyg' prefix rather than 'lib' soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' m4_if([$1], [],[ sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"]) ;; mingw* | cegcc*) # MinGW DLLs use traditional 'lib' prefix soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' ;; pw32*) # pw32 DLLs use 'pw' prefix rather than 'lib' library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' ;; esac dynamic_linker='Win32 ld.exe' ;; *,cl* | *,icl*) # Native MSVC or ICC libname_spec='$name' soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext' library_names_spec='$libname.dll.lib' case $build_os in mingw*) sys_lib_search_path_spec= lt_save_ifs=$IFS IFS=';' for lt_path in $LIB do IFS=$lt_save_ifs # Let DOS variable expansion print the short 8.3 style file name. lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"` sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path" done IFS=$lt_save_ifs # Convert to MSYS style. sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([[a-zA-Z]]\\):| /\\1|g' -e 's|^ ||'` ;; cygwin*) # Convert to unix form, then to dos form, then back to unix form # but this time dos style (no spaces!) so that the unix form looks # like /cygdrive/c/PROGRA~1:/cygdr... sys_lib_search_path_spec=`cygpath --path --unix "$LIB"` sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null` sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` ;; *) sys_lib_search_path_spec=$LIB if $ECHO "$sys_lib_search_path_spec" | [$GREP ';[c-zC-Z]:/' >/dev/null]; then # It is most probably a Windows format PATH. sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'` else sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` fi # FIXME: find the short name or the path components, as spaces are # common. (e.g. "Program Files" -> "PROGRA~1") ;; esac # DLL is installed to $(libdir)/../bin by postinstall_cmds postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' shlibpath_overrides_runpath=yes dynamic_linker='Win32 link.exe' ;; *) # Assume MSVC and ICC wrapper library_names_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext $libname.lib' dynamic_linker='Win32 ld.exe' ;; esac # FIXME: first we should search . and the directory the executable is in shlibpath_var=PATH ;; darwin* | rhapsody*) dynamic_linker="$host_os dyld" version_type=darwin need_lib_prefix=no need_version=no library_names_spec='$libname$release$major$shared_ext $libname$shared_ext' soname_spec='$libname$release$major$shared_ext' shlibpath_overrides_runpath=yes shlibpath_var=DYLD_LIBRARY_PATH shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`' m4_if([$1], [],[ sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"]) sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib' ;; dgux*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH ;; freebsd* | dragonfly* | midnightbsd*) # DragonFly does not have aout. When/if they implement a new # versioning mechanism, adjust this. if test -x /usr/bin/objformat; then objformat=`/usr/bin/objformat` else case $host_os in freebsd[[23]].*) objformat=aout ;; *) objformat=elf ;; esac fi version_type=freebsd-$objformat case $version_type in freebsd-elf*) library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' need_version=no need_lib_prefix=no ;; freebsd-*) library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' need_version=yes ;; esac shlibpath_var=LD_LIBRARY_PATH case $host_os in freebsd2.*) shlibpath_overrides_runpath=yes ;; freebsd3.[[01]]* | freebsdelf3.[[01]]*) shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; freebsd3.[[2-9]]* | freebsdelf3.[[2-9]]* | \ freebsd4.[[0-5]] | freebsdelf4.[[0-5]] | freebsd4.1.1 | freebsdelf4.1.1) shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; *) # from 4.6 on, and DragonFly shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; esac ;; haiku*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no dynamic_linker="$host_os runtime_loader" library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LIBRARY_PATH shlibpath_overrides_runpath=no sys_lib_dlsearch_path_spec='/boot/home/config/lib /boot/common/lib /boot/system/lib' hardcode_into_libs=yes ;; hpux9* | hpux10* | hpux11*) # Give a soname corresponding to the major version so that dld.sl refuses to # link against other versions. version_type=sunos need_lib_prefix=no need_version=no case $host_cpu in ia64*) shrext_cmds='.so' hardcode_into_libs=yes dynamic_linker="$host_os dld.so" shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' if test 32 = "$HPUX_IA64_MODE"; then sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib" sys_lib_dlsearch_path_spec=/usr/lib/hpux32 else sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64" sys_lib_dlsearch_path_spec=/usr/lib/hpux64 fi ;; hppa*64*) shrext_cmds='.sl' hardcode_into_libs=yes dynamic_linker="$host_os dld.sl" shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec ;; *) shrext_cmds='.sl' dynamic_linker="$host_os dld.sl" shlibpath_var=SHLIB_PATH shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' ;; esac # HP-UX runs *really* slowly unless shared libraries are mode 555, ... postinstall_cmds='chmod 555 $lib' # or fails outright, so override atomically: install_override_mode=555 ;; interix[[3-9]]*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; irix5* | irix6* | nonstopux*) case $host_os in nonstopux*) version_type=nonstopux ;; *) if test yes = "$lt_cv_prog_gnu_ld"; then version_type=linux # correct to gnu/linux during the next big refactor else version_type=irix fi ;; esac need_lib_prefix=no need_version=no soname_spec='$libname$release$shared_ext$major' library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext' case $host_os in irix5* | nonstopux*) libsuff= shlibsuff= ;; *) case $LD in # libtool.m4 will add one of these switches to LD *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ") libsuff= shlibsuff= libmagic=32-bit;; *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ") libsuff=32 shlibsuff=N32 libmagic=N32;; *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ") libsuff=64 shlibsuff=64 libmagic=64-bit;; *) libsuff= shlibsuff= libmagic=never-match;; esac ;; esac shlibpath_var=LD_LIBRARY${shlibsuff}_PATH shlibpath_overrides_runpath=no sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff" sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff" hardcode_into_libs=yes ;; # No shared lib support for Linux oldld, aout, or coff. linux*oldld* | linux*aout* | linux*coff*) dynamic_linker=no ;; linux*android*) version_type=none # Android doesn't support versioned libraries. need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext' soname_spec='$libname$release$shared_ext' finish_cmds= shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes # This implies no fast_install, which is unacceptable. # Some rework will be needed to allow for fast_install # before this can be enabled. hardcode_into_libs=yes dynamic_linker='Android linker' # Don't embed -rpath directories since the linker doesn't support them. _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' ;; # This must be glibc/ELF. linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no # Some binutils ld are patched to set DT_RUNPATH AC_CACHE_VAL([lt_cv_shlibpath_overrides_runpath], [lt_cv_shlibpath_overrides_runpath=no save_LDFLAGS=$LDFLAGS save_libdir=$libdir eval "libdir=/foo; wl=\"$_LT_TAGVAR(lt_prog_compiler_wl, $1)\"; \ LDFLAGS=\"\$LDFLAGS $_LT_TAGVAR(hardcode_libdir_flag_spec, $1)\"" AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])], [AS_IF([ ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null], [lt_cv_shlibpath_overrides_runpath=yes])]) LDFLAGS=$save_LDFLAGS libdir=$save_libdir ]) shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath # This implies no fast_install, which is unacceptable. # Some rework will be needed to allow for fast_install # before this can be enabled. hardcode_into_libs=yes # Add ABI-specific directories to the system library path. sys_lib_dlsearch_path_spec="/lib64 /usr/lib64 /lib /usr/lib" # Ideally, we could use ldconfig to report *all* directores which are # searched for libraries, however this is still not possible. Aside from not # being certain /sbin/ldconfig is available, command # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64, # even though it is searched at run-time. Try to do the best guess by # appending ld.so.conf contents (and includes) to the search path. if test -f /etc/ld.so.conf; then lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \[$]2)); skip = 1; } { if (!skip) print \[$]0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[ ]*hwcap[ ]/d;s/[:, ]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '` sys_lib_dlsearch_path_spec="$sys_lib_dlsearch_path_spec $lt_ld_extra" fi # We used to test for /lib/ld.so.1 and disable shared libraries on # powerpc, because MkLinux only supported shared libraries with the # GNU dynamic linker. Since this was broken with cross compilers, # most powerpc-linux boxes support dynamic linking these days and # people can always --disable-shared, the test was removed, and we # assume the GNU/Linux dynamic linker is in use. dynamic_linker='GNU/Linux ld.so' ;; netbsd*) version_type=sunos need_lib_prefix=no need_version=no if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' dynamic_linker='NetBSD (a.out) ld.so' else library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' dynamic_linker='NetBSD ld.elf_so' fi shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; newsos6) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes ;; *nto* | *qnx*) version_type=qnx need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes dynamic_linker='ldqnx.so' ;; openbsd* | bitrig*) version_type=sunos sys_lib_dlsearch_path_spec=/usr/lib need_lib_prefix=no if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then need_version=no else need_version=yes fi library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes ;; os2*) libname_spec='$name' version_type=windows shrext_cmds=.dll need_version=no need_lib_prefix=no # OS/2 can only load a DLL with a base name of 8 characters or less. soname_spec='`test -n "$os2dllname" && libname="$os2dllname"; v=$($ECHO $release$versuffix | tr -d .-); n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _); $ECHO $n$v`$shared_ext' library_names_spec='${libname}_dll.$libext' dynamic_linker='OS/2 ld.exe' shlibpath_var=BEGINLIBPATH sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname~ chmod a+x \$dldir/$dlname~ if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then eval '\''$striplib \$dldir/$dlname'\'' || exit \$?; fi' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' ;; osf3* | osf4* | osf5*) version_type=osf need_lib_prefix=no need_version=no soname_spec='$libname$release$shared_ext$major' library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec ;; rdos*) dynamic_linker=no ;; solaris*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes # ldd complains unless libraries are executable postinstall_cmds='chmod +x $lib' ;; sunos4*) version_type=sunos library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes if test yes = "$with_gnu_ld"; then need_lib_prefix=no fi need_version=yes ;; sysv4 | sysv4.3*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH case $host_vendor in sni) shlibpath_overrides_runpath=no need_lib_prefix=no runpath_var=LD_RUN_PATH ;; siemens) need_lib_prefix=no ;; motorola) need_lib_prefix=no need_version=no shlibpath_overrides_runpath=no sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib' ;; esac ;; sysv4*MP*) if test -d /usr/nec; then version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext' soname_spec='$libname$shared_ext.$major' shlibpath_var=LD_LIBRARY_PATH fi ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) version_type=sco need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes if test yes = "$with_gnu_ld"; then sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib' else sys_lib_search_path_spec='/usr/ccs/lib /usr/lib' case $host_os in sco3.2v5*) sys_lib_search_path_spec="$sys_lib_search_path_spec /lib" ;; esac fi sys_lib_dlsearch_path_spec='/usr/lib' ;; tpf*) # TPF is a cross-target only. Preferred cross-host = GNU/Linux. version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; uts4*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH ;; *) dynamic_linker=no ;; esac AC_MSG_RESULT([$dynamic_linker]) test no = "$dynamic_linker" && can_build_shared=no variables_saved_for_relink="PATH $shlibpath_var $runpath_var" if test yes = "$GCC"; then variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH" fi if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec fi if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec fi # remember unaugmented sys_lib_dlsearch_path content for libtool script decls... configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec # ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH" # to be used as default LT_SYS_LIBRARY_PATH value in generated libtool configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH _LT_DECL([], [variables_saved_for_relink], [1], [Variables whose values should be saved in libtool wrapper scripts and restored at link time]) _LT_DECL([], [need_lib_prefix], [0], [Do we need the "lib" prefix for modules?]) _LT_DECL([], [need_version], [0], [Do we need a version for libraries?]) _LT_DECL([], [version_type], [0], [Library versioning type]) _LT_DECL([], [runpath_var], [0], [Shared library runtime path variable]) _LT_DECL([], [shlibpath_var], [0],[Shared library path variable]) _LT_DECL([], [shlibpath_overrides_runpath], [0], [Is shlibpath searched before the hard-coded library search path?]) _LT_DECL([], [libname_spec], [1], [Format of library name prefix]) _LT_DECL([], [library_names_spec], [1], [[List of archive names. First name is the real one, the rest are links. The last name is the one that the linker finds with -lNAME]]) _LT_DECL([], [soname_spec], [1], [[The coded name of the library, if different from the real name]]) _LT_DECL([], [install_override_mode], [1], [Permission mode override for installation of shared libraries]) _LT_DECL([], [postinstall_cmds], [2], [Command to use after installation of a shared archive]) _LT_DECL([], [postuninstall_cmds], [2], [Command to use after uninstallation of a shared archive]) _LT_DECL([], [finish_cmds], [2], [Commands used to finish a libtool library installation in a directory]) _LT_DECL([], [finish_eval], [1], [[As "finish_cmds", except a single script fragment to be evaled but not shown]]) _LT_DECL([], [hardcode_into_libs], [0], [Whether we should hardcode library paths into libraries]) _LT_DECL([], [sys_lib_search_path_spec], [2], [Compile-time system search path for libraries]) _LT_DECL([sys_lib_dlsearch_path_spec], [configure_time_dlsearch_path], [2], [Detected run-time system search path for libraries]) _LT_DECL([], [configure_time_lt_sys_library_path], [2], [Explicit LT_SYS_LIBRARY_PATH set during ./configure time]) ])# _LT_SYS_DYNAMIC_LINKER # _LT_PATH_TOOL_PREFIX(TOOL) # -------------------------- # find a file program that can recognize shared library AC_DEFUN([_LT_PATH_TOOL_PREFIX], [m4_require([_LT_DECL_EGREP])dnl AC_MSG_CHECKING([for $1]) AC_CACHE_VAL(lt_cv_path_MAGIC_CMD, [case $MAGIC_CMD in [[\\/*] | ?:[\\/]*]) lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path. ;; *) lt_save_MAGIC_CMD=$MAGIC_CMD lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR dnl $ac_dummy forces splitting on constant user-supplied paths. dnl POSIX.2 word splitting is done only on the output of word expansions, dnl not every word. This closes a longstanding sh security hole. ac_dummy="m4_if([$2], , $PATH, [$2])" for ac_dir in $ac_dummy; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/$1"; then lt_cv_path_MAGIC_CMD=$ac_dir/"$1" if test -n "$file_magic_test_file"; then case $deplibs_check_method in "file_magic "*) file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"` MAGIC_CMD=$lt_cv_path_MAGIC_CMD if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null | $EGREP "$file_magic_regex" > /dev/null; then : else cat <<_LT_EOF 1>&2 *** Warning: the command libtool uses to detect shared libraries, *** $file_magic_cmd, produces output that libtool cannot recognize. *** The result is that libtool may fail to recognize shared libraries *** as such. This will affect the creation of libtool libraries that *** depend on shared libraries, but programs linked with such libtool *** libraries will work regardless of this problem. Nevertheless, you *** may want to report the problem to your system manager and/or to *** bug-libtool@gnu.org _LT_EOF fi ;; esac fi break fi done IFS=$lt_save_ifs MAGIC_CMD=$lt_save_MAGIC_CMD ;; esac]) MAGIC_CMD=$lt_cv_path_MAGIC_CMD if test -n "$MAGIC_CMD"; then AC_MSG_RESULT($MAGIC_CMD) else AC_MSG_RESULT(no) fi _LT_DECL([], [MAGIC_CMD], [0], [Used to examine libraries when file_magic_cmd begins with "file"])dnl ])# _LT_PATH_TOOL_PREFIX # Old name: AU_ALIAS([AC_PATH_TOOL_PREFIX], [_LT_PATH_TOOL_PREFIX]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_PATH_TOOL_PREFIX], []) # _LT_PATH_MAGIC # -------------- # find a file program that can recognize a shared library m4_defun([_LT_PATH_MAGIC], [_LT_PATH_TOOL_PREFIX(${ac_tool_prefix}file, /usr/bin$PATH_SEPARATOR$PATH) if test -z "$lt_cv_path_MAGIC_CMD"; then if test -n "$ac_tool_prefix"; then _LT_PATH_TOOL_PREFIX(file, /usr/bin$PATH_SEPARATOR$PATH) else MAGIC_CMD=: fi fi ])# _LT_PATH_MAGIC # LT_PATH_LD # ---------- # find the pathname to the GNU or non-GNU linker AC_DEFUN([LT_PATH_LD], [AC_REQUIRE([AC_PROG_CC])dnl AC_REQUIRE([AC_CANONICAL_HOST])dnl AC_REQUIRE([AC_CANONICAL_BUILD])dnl m4_require([_LT_DECL_SED])dnl m4_require([_LT_DECL_EGREP])dnl m4_require([_LT_PROG_ECHO_BACKSLASH])dnl AC_ARG_WITH([gnu-ld], [AS_HELP_STRING([--with-gnu-ld], [assume the C compiler uses GNU ld @<:@default=no@:>@])], [test no = "$withval" || with_gnu_ld=yes], [with_gnu_ld=no])dnl ac_prog=ld if test yes = "$GCC"; then # Check if gcc -print-prog-name=ld gives a path. AC_MSG_CHECKING([for ld used by $CC]) case $host in *-*-mingw*) # gcc leaves a trailing carriage return, which upsets mingw ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;; *) ac_prog=`($CC -print-prog-name=ld) 2>&5` ;; esac case $ac_prog in # Accept absolute paths. [[\\/]]* | ?:[[\\/]]*) re_direlt='/[[^/]][[^/]]*/\.\./' # Canonicalize the pathname of ld ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'` while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"` done test -z "$LD" && LD=$ac_prog ;; "") # If it fails, then pretend we aren't using GCC. ac_prog=ld ;; *) # If it is relative, then search for the first ld in PATH. with_gnu_ld=unknown ;; esac elif test yes = "$with_gnu_ld"; then AC_MSG_CHECKING([for GNU ld]) else AC_MSG_CHECKING([for non-GNU ld]) fi AC_CACHE_VAL(lt_cv_path_LD, [if test -z "$LD"; then lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR for ac_dir in $PATH; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then lt_cv_path_LD=$ac_dir/$ac_prog # Check to see if the program is GNU ld. I'd rather use --version, # but apparently some variants of GNU ld only accept -v. # Break only if it was the GNU/non-GNU ld that we prefer. case `"$lt_cv_path_LD" -v 2>&1 &1 conftest.i cat conftest.i conftest.i >conftest2.i : ${lt_DD:=$DD} AC_PATH_PROGS_FEATURE_CHECK([lt_DD], [dd], [if "$ac_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then cmp -s conftest.i conftest.out \ && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=: fi]) rm -f conftest.i conftest2.i conftest.out]) ])# _LT_PATH_DD # _LT_CMD_TRUNCATE # ---------------- # find command to truncate a binary pipe m4_defun([_LT_CMD_TRUNCATE], [m4_require([_LT_PATH_DD]) AC_CACHE_CHECK([how to truncate binary pipes], [lt_cv_truncate_bin], [printf 0123456789abcdef0123456789abcdef >conftest.i cat conftest.i conftest.i >conftest2.i lt_cv_truncate_bin= if "$ac_cv_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then cmp -s conftest.i conftest.out \ && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1" fi rm -f conftest.i conftest2.i conftest.out test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q"]) _LT_DECL([lt_truncate_bin], [lt_cv_truncate_bin], [1], [Command to truncate a binary pipe]) ])# _LT_CMD_TRUNCATE # _LT_CHECK_MAGIC_METHOD # ---------------------- # how to check for library dependencies # -- PORTME fill in with the dynamic library characteristics m4_defun([_LT_CHECK_MAGIC_METHOD], [m4_require([_LT_DECL_EGREP]) m4_require([_LT_DECL_OBJDUMP]) AC_CACHE_CHECK([how to recognize dependent libraries], lt_cv_deplibs_check_method, [lt_cv_file_magic_cmd='$MAGIC_CMD' lt_cv_file_magic_test_file= lt_cv_deplibs_check_method='unknown' # Need to set the preceding variable on all platforms that support # interlibrary dependencies. # 'none' -- dependencies not supported. # 'unknown' -- same as none, but documents that we really don't know. # 'pass_all' -- all dependencies passed with no checks. # 'test_compile' -- check by making test program. # 'file_magic [[regex]]' -- check by looking for files in library path # that responds to the $file_magic_cmd with a given extended regex. # If you have 'file' or equivalent on your system and you're not sure # whether 'pass_all' will *always* work, you probably want this one. case $host_os in aix[[4-9]]*) lt_cv_deplibs_check_method=pass_all ;; beos*) lt_cv_deplibs_check_method=pass_all ;; bsdi[[45]]*) lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib)' lt_cv_file_magic_cmd='$FILECMD -L' lt_cv_file_magic_test_file=/shlib/libc.so ;; cygwin*) # func_win32_libid is a shell function defined in ltmain.sh lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL' lt_cv_file_magic_cmd='func_win32_libid' ;; mingw* | pw32*) # Base MSYS/MinGW do not provide the 'file' command needed by # func_win32_libid shell function, so use a weaker test based on 'objdump', # unless we find 'file', for example because we are cross-compiling. if ( file / ) >/dev/null 2>&1; then lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL' lt_cv_file_magic_cmd='func_win32_libid' else # Keep this pattern in sync with the one in func_win32_libid. lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)' lt_cv_file_magic_cmd='$OBJDUMP -f' fi ;; cegcc*) # use the weaker test based on 'objdump'. See mingw*. lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?' lt_cv_file_magic_cmd='$OBJDUMP -f' ;; darwin* | rhapsody*) lt_cv_deplibs_check_method=pass_all ;; freebsd* | dragonfly* | midnightbsd*) if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then case $host_cpu in i*86 ) # Not sure whether the presence of OpenBSD here was a mistake. # Let's accept both of them until this is cleared up. lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[[3-9]]86 (compact )?demand paged shared library' lt_cv_file_magic_cmd=$FILECMD lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*` ;; esac else lt_cv_deplibs_check_method=pass_all fi ;; haiku*) lt_cv_deplibs_check_method=pass_all ;; hpux10.20* | hpux11*) lt_cv_file_magic_cmd=$FILECMD case $host_cpu in ia64*) lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|ELF-[[0-9]][[0-9]]) shared object file - IA64' lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so ;; hppa*64*) [lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]'] lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl ;; *) lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|PA-RISC[[0-9]]\.[[0-9]]) shared library' lt_cv_file_magic_test_file=/usr/lib/libc.sl ;; esac ;; interix[[3-9]]*) # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|\.a)$' ;; irix5* | irix6* | nonstopux*) case $LD in *-32|*"-32 ") libmagic=32-bit;; *-n32|*"-n32 ") libmagic=N32;; *-64|*"-64 ") libmagic=64-bit;; *) libmagic=never-match;; esac lt_cv_deplibs_check_method=pass_all ;; # This must be glibc/ELF. linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) lt_cv_deplibs_check_method=pass_all ;; netbsd*) if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$' else lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|_pic\.a)$' fi ;; newos6*) lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (executable|dynamic lib)' lt_cv_file_magic_cmd=$FILECMD lt_cv_file_magic_test_file=/usr/lib/libnls.so ;; *nto* | *qnx*) lt_cv_deplibs_check_method=pass_all ;; openbsd* | bitrig*) if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|\.so|_pic\.a)$' else lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$' fi ;; osf3* | osf4* | osf5*) lt_cv_deplibs_check_method=pass_all ;; rdos*) lt_cv_deplibs_check_method=pass_all ;; solaris*) lt_cv_deplibs_check_method=pass_all ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) lt_cv_deplibs_check_method=pass_all ;; sysv4 | sysv4.3*) case $host_vendor in motorola) lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib) M[[0-9]][[0-9]]* Version [[0-9]]' lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*` ;; ncr) lt_cv_deplibs_check_method=pass_all ;; sequent) lt_cv_file_magic_cmd='/bin/file' lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB (shared object|dynamic lib )' ;; sni) lt_cv_file_magic_cmd='/bin/file' lt_cv_deplibs_check_method="file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB dynamic lib" lt_cv_file_magic_test_file=/lib/libc.so ;; siemens) lt_cv_deplibs_check_method=pass_all ;; pc) lt_cv_deplibs_check_method=pass_all ;; esac ;; tpf*) lt_cv_deplibs_check_method=pass_all ;; os2*) lt_cv_deplibs_check_method=pass_all ;; esac ]) file_magic_glob= want_nocaseglob=no if test "$build" = "$host"; then case $host_os in mingw* | pw32*) if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then want_nocaseglob=yes else file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[[\1]]\/[[\1]]\/g;/g"` fi ;; esac fi file_magic_cmd=$lt_cv_file_magic_cmd deplibs_check_method=$lt_cv_deplibs_check_method test -z "$deplibs_check_method" && deplibs_check_method=unknown _LT_DECL([], [deplibs_check_method], [1], [Method to check whether dependent libraries are shared objects]) _LT_DECL([], [file_magic_cmd], [1], [Command to use when deplibs_check_method = "file_magic"]) _LT_DECL([], [file_magic_glob], [1], [How to find potential files when deplibs_check_method = "file_magic"]) _LT_DECL([], [want_nocaseglob], [1], [Find potential files using nocaseglob when deplibs_check_method = "file_magic"]) ])# _LT_CHECK_MAGIC_METHOD # LT_PATH_NM # ---------- # find the pathname to a BSD- or MS-compatible name lister AC_DEFUN([LT_PATH_NM], [AC_REQUIRE([AC_PROG_CC])dnl AC_CACHE_CHECK([for BSD- or MS-compatible name lister (nm)], lt_cv_path_NM, [if test -n "$NM"; then # Let the user override the test. lt_cv_path_NM=$NM else lt_nm_to_check=${ac_tool_prefix}nm if test -n "$ac_tool_prefix" && test "$build" = "$host"; then lt_nm_to_check="$lt_nm_to_check nm" fi for lt_tmp_nm in $lt_nm_to_check; do lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. tmp_nm=$ac_dir/$lt_tmp_nm if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then # Check to see if the nm accepts a BSD-compat flag. # Adding the 'sed 1q' prevents false positives on HP-UX, which says: # nm: unknown option "B" ignored # Tru64's nm complains that /dev/null is an invalid object file # MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty case $build_os in mingw*) lt_bad_file=conftest.nm/nofile ;; *) lt_bad_file=/dev/null ;; esac case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in *$lt_bad_file* | *'Invalid file or object type'*) lt_cv_path_NM="$tmp_nm -B" break 2 ;; *) case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in */dev/null*) lt_cv_path_NM="$tmp_nm -p" break 2 ;; *) lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but continue # so that we can try to find one that supports BSD flags ;; esac ;; esac fi done IFS=$lt_save_ifs done : ${lt_cv_path_NM=no} fi]) if test no != "$lt_cv_path_NM"; then NM=$lt_cv_path_NM else # Didn't find any BSD compatible name lister, look for dumpbin. if test -n "$DUMPBIN"; then : # Let the user override the test. else AC_CHECK_TOOLS(DUMPBIN, [dumpbin "link -dump"], :) case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in *COFF*) DUMPBIN="$DUMPBIN -symbols -headers" ;; *) DUMPBIN=: ;; esac fi AC_SUBST([DUMPBIN]) if test : != "$DUMPBIN"; then NM=$DUMPBIN fi fi test -z "$NM" && NM=nm AC_SUBST([NM]) _LT_DECL([], [NM], [1], [A BSD- or MS-compatible name lister])dnl AC_CACHE_CHECK([the name lister ($NM) interface], [lt_cv_nm_interface], [lt_cv_nm_interface="BSD nm" echo "int some_variable = 0;" > conftest.$ac_ext (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&AS_MESSAGE_LOG_FD) (eval "$ac_compile" 2>conftest.err) cat conftest.err >&AS_MESSAGE_LOG_FD (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&AS_MESSAGE_LOG_FD) (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out) cat conftest.err >&AS_MESSAGE_LOG_FD (eval echo "\"\$as_me:$LINENO: output\"" >&AS_MESSAGE_LOG_FD) cat conftest.out >&AS_MESSAGE_LOG_FD if $GREP 'External.*some_variable' conftest.out > /dev/null; then lt_cv_nm_interface="MS dumpbin" fi rm -f conftest*]) ])# LT_PATH_NM # Old names: AU_ALIAS([AM_PROG_NM], [LT_PATH_NM]) AU_ALIAS([AC_PROG_NM], [LT_PATH_NM]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AM_PROG_NM], []) dnl AC_DEFUN([AC_PROG_NM], []) # _LT_CHECK_SHAREDLIB_FROM_LINKLIB # -------------------------------- # how to determine the name of the shared library # associated with a specific link library. # -- PORTME fill in with the dynamic library characteristics m4_defun([_LT_CHECK_SHAREDLIB_FROM_LINKLIB], [m4_require([_LT_DECL_EGREP]) m4_require([_LT_DECL_OBJDUMP]) m4_require([_LT_DECL_DLLTOOL]) AC_CACHE_CHECK([how to associate runtime and link libraries], lt_cv_sharedlib_from_linklib_cmd, [lt_cv_sharedlib_from_linklib_cmd='unknown' case $host_os in cygwin* | mingw* | pw32* | cegcc*) # two different shell functions defined in ltmain.sh; # decide which one to use based on capabilities of $DLLTOOL case `$DLLTOOL --help 2>&1` in *--identify-strict*) lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib ;; *) lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback ;; esac ;; *) # fallback: assume linklib IS sharedlib lt_cv_sharedlib_from_linklib_cmd=$ECHO ;; esac ]) sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO _LT_DECL([], [sharedlib_from_linklib_cmd], [1], [Command to associate shared and link libraries]) ])# _LT_CHECK_SHAREDLIB_FROM_LINKLIB # _LT_PATH_MANIFEST_TOOL # ---------------------- # locate the manifest tool m4_defun([_LT_PATH_MANIFEST_TOOL], [AC_CHECK_TOOL(MANIFEST_TOOL, mt, :) test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt AC_CACHE_CHECK([if $MANIFEST_TOOL is a manifest tool], [lt_cv_path_mainfest_tool], [lt_cv_path_mainfest_tool=no echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&AS_MESSAGE_LOG_FD $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out cat conftest.err >&AS_MESSAGE_LOG_FD if $GREP 'Manifest Tool' conftest.out > /dev/null; then lt_cv_path_mainfest_tool=yes fi rm -f conftest*]) if test yes != "$lt_cv_path_mainfest_tool"; then MANIFEST_TOOL=: fi _LT_DECL([], [MANIFEST_TOOL], [1], [Manifest tool])dnl ])# _LT_PATH_MANIFEST_TOOL # _LT_DLL_DEF_P([FILE]) # --------------------- # True iff FILE is a Windows DLL '.def' file. # Keep in sync with func_dll_def_p in the libtool script AC_DEFUN([_LT_DLL_DEF_P], [dnl test DEF = "`$SED -n dnl -e '\''s/^[[ ]]*//'\'' dnl Strip leading whitespace -e '\''/^\(;.*\)*$/d'\'' dnl Delete empty lines and comments -e '\''s/^\(EXPORTS\|LIBRARY\)\([[ ]].*\)*$/DEF/p'\'' dnl -e q dnl Only consider the first "real" line $1`" dnl ])# _LT_DLL_DEF_P # LT_LIB_M # -------- # check for math library AC_DEFUN([LT_LIB_M], [AC_REQUIRE([AC_CANONICAL_HOST])dnl LIBM= case $host in *-*-beos* | *-*-cegcc* | *-*-cygwin* | *-*-haiku* | *-*-pw32* | *-*-darwin*) # These system don't have libm, or don't need it ;; *-ncr-sysv4.3*) AC_CHECK_LIB(mw, _mwvalidcheckl, LIBM=-lmw) AC_CHECK_LIB(m, cos, LIBM="$LIBM -lm") ;; *) AC_CHECK_LIB(m, cos, LIBM=-lm) ;; esac AC_SUBST([LIBM]) ])# LT_LIB_M # Old name: AU_ALIAS([AC_CHECK_LIBM], [LT_LIB_M]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_CHECK_LIBM], []) # _LT_COMPILER_NO_RTTI([TAGNAME]) # ------------------------------- m4_defun([_LT_COMPILER_NO_RTTI], [m4_require([_LT_TAG_COMPILER])dnl _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)= if test yes = "$GCC"; then case $cc_basename in nvcc*) _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -Xcompiler -fno-builtin' ;; *) _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' ;; esac _LT_COMPILER_OPTION([if $compiler supports -fno-rtti -fno-exceptions], lt_cv_prog_compiler_rtti_exceptions, [-fno-rtti -fno-exceptions], [], [_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)="$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1) -fno-rtti -fno-exceptions"]) fi _LT_TAGDECL([no_builtin_flag], [lt_prog_compiler_no_builtin_flag], [1], [Compiler flag to turn off builtin functions]) ])# _LT_COMPILER_NO_RTTI # _LT_CMD_GLOBAL_SYMBOLS # ---------------------- m4_defun([_LT_CMD_GLOBAL_SYMBOLS], [AC_REQUIRE([AC_CANONICAL_HOST])dnl AC_REQUIRE([AC_PROG_CC])dnl AC_REQUIRE([AC_PROG_AWK])dnl AC_REQUIRE([LT_PATH_NM])dnl AC_REQUIRE([LT_PATH_LD])dnl m4_require([_LT_DECL_SED])dnl m4_require([_LT_DECL_EGREP])dnl m4_require([_LT_TAG_COMPILER])dnl # Check for command to grab the raw symbol name followed by C symbol from nm. AC_MSG_CHECKING([command to parse $NM output from $compiler object]) AC_CACHE_VAL([lt_cv_sys_global_symbol_pipe], [ # These are sane defaults that work on at least a few old systems. # [They come from Ultrix. What could be older than Ultrix?!! ;)] # Character class describing NM global symbol codes. symcode='[[BCDEGRST]]' # Regexp to match symbols that can be accessed directly from C. sympat='\([[_A-Za-z]][[_A-Za-z0-9]]*\)' # Define system-specific variables. case $host_os in aix*) symcode='[[BCDT]]' ;; cygwin* | mingw* | pw32* | cegcc*) symcode='[[ABCDGISTW]]' ;; hpux*) if test ia64 = "$host_cpu"; then symcode='[[ABCDEGRST]]' fi ;; irix* | nonstopux*) symcode='[[BCDEGRST]]' ;; osf*) symcode='[[BCDEGQRST]]' ;; solaris*) symcode='[[BDRT]]' ;; sco3.2v5*) symcode='[[DT]]' ;; sysv4.2uw2*) symcode='[[DT]]' ;; sysv5* | sco5v6* | unixware* | OpenUNIX*) symcode='[[ABDT]]' ;; sysv4) symcode='[[DFNSTU]]' ;; esac # If we're using GNU nm, then use its standard symbol codes. case `$NM -V 2>&1` in *GNU* | *'with BFD'*) symcode='[[ABCDGIRSTW]]' ;; esac if test "$lt_cv_nm_interface" = "MS dumpbin"; then # Gets list of data symbols to import. lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'" # Adjust the below global symbol transforms to fixup imported variables. lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'" lt_c_name_hook=" -e 's/^I .* \(.*\)$/ {\"\1\", (void *) 0},/p'" lt_c_name_lib_hook="\ -e 's/^I .* \(lib.*\)$/ {\"\1\", (void *) 0},/p'\ -e 's/^I .* \(.*\)$/ {\"lib\1\", (void *) 0},/p'" else # Disable hooks by default. lt_cv_sys_global_symbol_to_import= lt_cdecl_hook= lt_c_name_hook= lt_c_name_lib_hook= fi # Transform an extracted symbol line into a proper C declaration. # Some systems (esp. on ia64) link data and code symbols differently, # so use this general approach. lt_cv_sys_global_symbol_to_cdecl="$SED -n"\ $lt_cdecl_hook\ " -e 's/^T .* \(.*\)$/extern int \1();/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'" # Transform an extracted symbol line into symbol name and symbol address lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\ $lt_c_name_hook\ " -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/p'" # Transform an extracted symbol line into symbol name with lib prefix and # symbol address. lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\ $lt_c_name_lib_hook\ " -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\ " -e 's/^$symcode$symcode* .* \(lib.*\)$/ {\"\1\", (void *) \&\1},/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/ {\"lib\1\", (void *) \&\1},/p'" # Handle CRLF in mingw tool chain opt_cr= case $build_os in mingw*) opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp ;; esac # Try without a prefix underscore, then with it. for ac_symprfx in "" "_"; do # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol. symxfrm="\\1 $ac_symprfx\\2 \\2" # Write the raw and C identifiers. if test "$lt_cv_nm_interface" = "MS dumpbin"; then # Fake it for dumpbin and say T for any non-static function, # D for any global variable and I for any imported variable. # Also find C++ and __fastcall symbols from MSVC++ or ICC, # which start with @ or ?. lt_cv_sys_global_symbol_pipe="$AWK ['"\ " {last_section=section; section=\$ 3};"\ " /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\ " /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\ " /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\ " /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\ " /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\ " \$ 0!~/External *\|/{next};"\ " / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\ " {if(hide[section]) next};"\ " {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\ " {split(\$ 0,a,/\||\r/); split(a[2],s)};"\ " s[1]~/^[@?]/{print f,s[1],s[1]; next};"\ " s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\ " ' prfx=^$ac_symprfx]" else lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[[ ]]\($symcode$symcode*\)[[ ]][[ ]]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'" fi lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'" # Check to see that the pipe works correctly. pipe_works=no rm -f conftest* cat > conftest.$ac_ext <<_LT_EOF #ifdef __cplusplus extern "C" { #endif char nm_test_var; void nm_test_func(void); void nm_test_func(void){} #ifdef __cplusplus } #endif int main(){nm_test_var='a';nm_test_func();return(0);} _LT_EOF if AC_TRY_EVAL(ac_compile); then # Now try to grab the symbols. nlist=conftest.nm if AC_TRY_EVAL(NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist) && test -s "$nlist"; then # Try sorting and uniquifying the output. if sort "$nlist" | uniq > "$nlist"T; then mv -f "$nlist"T "$nlist" else rm -f "$nlist"T fi # Make sure that we snagged all the symbols we need. if $GREP ' nm_test_var$' "$nlist" >/dev/null; then if $GREP ' nm_test_func$' "$nlist" >/dev/null; then cat <<_LT_EOF > conftest.$ac_ext /* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests. */ #if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE /* DATA imports from DLLs on WIN32 can't be const, because runtime relocations are performed -- see ld's documentation on pseudo-relocs. */ # define LT@&t@_DLSYM_CONST #elif defined __osf__ /* This system does not cope well with relocations in const data. */ # define LT@&t@_DLSYM_CONST #else # define LT@&t@_DLSYM_CONST const #endif #ifdef __cplusplus extern "C" { #endif _LT_EOF # Now generate the symbol file. eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext' cat <<_LT_EOF >> conftest.$ac_ext /* The mapping between symbol names and symbols. */ LT@&t@_DLSYM_CONST struct { const char *name; void *address; } lt__PROGRAM__LTX_preloaded_symbols[[]] = { { "@PROGRAM@", (void *) 0 }, _LT_EOF $SED "s/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext cat <<\_LT_EOF >> conftest.$ac_ext {0, (void *) 0} }; /* This works around a problem in FreeBSD linker */ #ifdef FREEBSD_WORKAROUND static const void *lt_preloaded_setup() { return lt__PROGRAM__LTX_preloaded_symbols; } #endif #ifdef __cplusplus } #endif _LT_EOF # Now try linking the two files. mv conftest.$ac_objext conftstm.$ac_objext lt_globsym_save_LIBS=$LIBS lt_globsym_save_CFLAGS=$CFLAGS LIBS=conftstm.$ac_objext CFLAGS="$CFLAGS$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)" if AC_TRY_EVAL(ac_link) && test -s conftest$ac_exeext; then pipe_works=yes fi LIBS=$lt_globsym_save_LIBS CFLAGS=$lt_globsym_save_CFLAGS else echo "cannot find nm_test_func in $nlist" >&AS_MESSAGE_LOG_FD fi else echo "cannot find nm_test_var in $nlist" >&AS_MESSAGE_LOG_FD fi else echo "cannot run $lt_cv_sys_global_symbol_pipe" >&AS_MESSAGE_LOG_FD fi else echo "$progname: failed program was:" >&AS_MESSAGE_LOG_FD cat conftest.$ac_ext >&5 fi rm -rf conftest* conftst* # Do not use the global_symbol_pipe unless it works. if test yes = "$pipe_works"; then break else lt_cv_sys_global_symbol_pipe= fi done ]) if test -z "$lt_cv_sys_global_symbol_pipe"; then lt_cv_sys_global_symbol_to_cdecl= fi if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then AC_MSG_RESULT(failed) else AC_MSG_RESULT(ok) fi # Response file support. if test "$lt_cv_nm_interface" = "MS dumpbin"; then nm_file_list_spec='@' elif $NM --help 2>/dev/null | grep '[[@]]FILE' >/dev/null; then nm_file_list_spec='@' fi _LT_DECL([global_symbol_pipe], [lt_cv_sys_global_symbol_pipe], [1], [Take the output of nm and produce a listing of raw symbols and C names]) _LT_DECL([global_symbol_to_cdecl], [lt_cv_sys_global_symbol_to_cdecl], [1], [Transform the output of nm in a proper C declaration]) _LT_DECL([global_symbol_to_import], [lt_cv_sys_global_symbol_to_import], [1], [Transform the output of nm into a list of symbols to manually relocate]) _LT_DECL([global_symbol_to_c_name_address], [lt_cv_sys_global_symbol_to_c_name_address], [1], [Transform the output of nm in a C name address pair]) _LT_DECL([global_symbol_to_c_name_address_lib_prefix], [lt_cv_sys_global_symbol_to_c_name_address_lib_prefix], [1], [Transform the output of nm in a C name address pair when lib prefix is needed]) _LT_DECL([nm_interface], [lt_cv_nm_interface], [1], [The name lister interface]) _LT_DECL([], [nm_file_list_spec], [1], [Specify filename containing input files for $NM]) ]) # _LT_CMD_GLOBAL_SYMBOLS # _LT_COMPILER_PIC([TAGNAME]) # --------------------------- m4_defun([_LT_COMPILER_PIC], [m4_require([_LT_TAG_COMPILER])dnl _LT_TAGVAR(lt_prog_compiler_wl, $1)= _LT_TAGVAR(lt_prog_compiler_pic, $1)= _LT_TAGVAR(lt_prog_compiler_static, $1)= m4_if([$1], [CXX], [ # C++ specific cases for pic, static, wl, etc. if test yes = "$GXX"; then _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' case $host_os in aix*) # All AIX code is PIC. if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' fi _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; m68k) # FIXME: we need at least 68020 code to build shared libraries, but # adding the '-m68020' flag to GCC prevents building anything better, # like '-m68040'. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4' ;; esac ;; beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*) # PIC is the default for these OSes. ;; mingw* | cygwin* | os2* | pw32* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). # Although the cygwin gcc ignores -fPIC, still need this for old-style # (--disable-auto-import) libraries m4_if([$1], [GCJ], [], [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) case $host_os in os2*) _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static' ;; esac ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' ;; *djgpp*) # DJGPP does not support shared libraries at all _LT_TAGVAR(lt_prog_compiler_pic, $1)= ;; haiku*) # PIC is the default for Haiku. # The "-static" flag exists, but is broken. _LT_TAGVAR(lt_prog_compiler_static, $1)= ;; interix[[3-9]]*) # Interix 3.x gcc -fpic/-fPIC options generate broken code. # Instead, we relocate shared libraries at runtime. ;; sysv4*MP*) if test -d /usr/nec; then _LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic fi ;; hpux*) # PIC is the default for 64-bit PA HP-UX, but not for 32-bit # PA HP-UX. On IA64 HP-UX, PIC is the default but the pic flag # sets the default TLS model and affects inlining. case $host_cpu in hppa*64*) ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac ;; *qnx* | *nto*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac else case $host_os in aix[[4-9]]*) # All AIX code is PIC. if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' else _LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp' fi ;; chorus*) case $cc_basename in cxch68*) # Green Hills C++ Compiler # _LT_TAGVAR(lt_prog_compiler_static, $1)="--no_auto_instantiation -u __main -u __premain -u _abort -r $COOL_DIR/lib/libOrb.a $MVME_DIR/lib/CC/libC.a $MVME_DIR/lib/classix/libcx.s.a" ;; esac ;; mingw* | cygwin* | os2* | pw32* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). m4_if([$1], [GCJ], [], [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) ;; dgux*) case $cc_basename in ec++*) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' ;; ghcx*) # Green Hills C++ Compiler _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' ;; *) ;; esac ;; freebsd* | dragonfly* | midnightbsd*) # FreeBSD uses GNU C++ ;; hpux9* | hpux10* | hpux11*) case $cc_basename in CC*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive' if test ia64 != "$host_cpu"; then _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z' fi ;; aCC*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive' case $host_cpu in hppa*64*|ia64*) # +Z the default ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z' ;; esac ;; *) ;; esac ;; interix*) # This is c89, which is MS Visual C++ (no shared libs) # Anyone wants to do a port? ;; irix5* | irix6* | nonstopux*) case $cc_basename in CC*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' # CC pic flag -KPIC is the default. ;; *) ;; esac ;; linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) case $cc_basename in KCC*) # KAI C++ Compiler _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; ecpc* ) # old Intel C++ for x86_64, which still supported -KPIC. _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; icpc* ) # Intel C++, used to be incompatible with GCC. # ICC 10 doesn't accept -KPIC any more. _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; pgCC* | pgcpp*) # Portland Group C++ compiler _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; cxx*) # Compaq C++ # Make sure the PIC flag is empty. It appears that all Alpha # Linux and Compaq Tru64 Unix objects are PIC. _LT_TAGVAR(lt_prog_compiler_pic, $1)= _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; xlc* | xlC* | bgxl[[cC]]* | mpixl[[cC]]*) # IBM XL 8.0, 9.0 on PPC and BlueGene _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink' ;; *) case `$CC -V 2>&1 | $SED 5q` in *Sun\ C*) # Sun C++ 5.9 _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' ;; esac ;; esac ;; lynxos*) ;; m88k*) ;; mvs*) case $cc_basename in cxx*) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-W c,exportall' ;; *) ;; esac ;; netbsd*) ;; *qnx* | *nto*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' ;; osf3* | osf4* | osf5*) case $cc_basename in KCC*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,' ;; RCC*) # Rational C++ 2.4.1 _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' ;; cxx*) # Digital/Compaq C++ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # Make sure the PIC flag is empty. It appears that all Alpha # Linux and Compaq Tru64 Unix objects are PIC. _LT_TAGVAR(lt_prog_compiler_pic, $1)= _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; *) ;; esac ;; psos*) ;; solaris*) case $cc_basename in CC* | sunCC*) # Sun C++ 4.2, 5.x and Centerline C++ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' ;; gcx*) # Green Hills C++ Compiler _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' ;; *) ;; esac ;; sunos4*) case $cc_basename in CC*) # Sun C++ 4.x _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; lcc*) # Lucid _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' ;; *) ;; esac ;; sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*) case $cc_basename in CC*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; esac ;; tandem*) case $cc_basename in NCC*) # NonStop-UX NCC 3.20 _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' ;; *) ;; esac ;; vxworks*) ;; *) _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no ;; esac fi ], [ if test yes = "$GCC"; then _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' case $host_os in aix*) # All AIX code is PIC. if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' fi _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; m68k) # FIXME: we need at least 68020 code to build shared libraries, but # adding the '-m68020' flag to GCC prevents building anything better, # like '-m68040'. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4' ;; esac ;; beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*) # PIC is the default for these OSes. ;; mingw* | cygwin* | pw32* | os2* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). # Although the cygwin gcc ignores -fPIC, still need this for old-style # (--disable-auto-import) libraries m4_if([$1], [GCJ], [], [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) case $host_os in os2*) _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static' ;; esac ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' ;; haiku*) # PIC is the default for Haiku. # The "-static" flag exists, but is broken. _LT_TAGVAR(lt_prog_compiler_static, $1)= ;; hpux*) # PIC is the default for 64-bit PA HP-UX, but not for 32-bit # PA HP-UX. On IA64 HP-UX, PIC is the default but the pic flag # sets the default TLS model and affects inlining. case $host_cpu in hppa*64*) # +Z the default ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac ;; interix[[3-9]]*) # Interix 3.x gcc -fpic/-fPIC options generate broken code. # Instead, we relocate shared libraries at runtime. ;; msdosdjgpp*) # Just because we use GCC doesn't mean we suddenly get shared libraries # on systems that don't support them. _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no enable_shared=no ;; *nto* | *qnx*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' ;; sysv4*MP*) if test -d /usr/nec; then _LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic fi ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' ;; esac case $cc_basename in nvcc*) # Cuda Compiler Driver 2.2 _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Xlinker ' if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then _LT_TAGVAR(lt_prog_compiler_pic, $1)="-Xcompiler $_LT_TAGVAR(lt_prog_compiler_pic, $1)" fi ;; esac else # PORTME Check for flag to pass linker flags through the system compiler. case $host_os in aix*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' else _LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp' fi ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common' case $cc_basename in nagfor*) # NAG Fortran compiler _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; esac ;; mingw* | cygwin* | pw32* | os2* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). m4_if([$1], [GCJ], [], [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT']) case $host_os in os2*) _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static' ;; esac ;; hpux9* | hpux10* | hpux11*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but # not for PA HP-UX. case $host_cpu in hppa*64*|ia64*) # +Z the default ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z' ;; esac # Is there a better lt_prog_compiler_static that works with the bundled CC? _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive' ;; irix5* | irix6* | nonstopux*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # PIC (with -KPIC) is the default. _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) case $cc_basename in # old Intel for x86_64, which still supported -KPIC. ecc*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; # icc used to be incompatible with GCC. # ICC 10 doesn't accept -KPIC any more. icc* | ifort*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; # Lahey Fortran 8.1. lf95*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='--shared' _LT_TAGVAR(lt_prog_compiler_static, $1)='--static' ;; nagfor*) # NAG Fortran compiler _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; tcc*) # Fabrice Bellard et al's Tiny C Compiler _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*) # Portland Group compilers (*not* the Pentium gcc compiler, # which looks to be a dead project) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; ccc*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # All Alpha code is PIC. _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; xl* | bgxl* | bgf* | mpixl*) # IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink' ;; *) case `$CC -V 2>&1 | $SED 5q` in *Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [[1-7]].* | *Sun*Fortran*\ 8.[[0-3]]*) # Sun Fortran 8.3 passes all unrecognized flags to the linker _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_TAGVAR(lt_prog_compiler_wl, $1)='' ;; *Sun\ F* | *Sun*Fortran*) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' ;; *Sun\ C*) # Sun C 5.9 _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' ;; *Intel*\ [[CF]]*Compiler*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-static' ;; *Portland\ Group*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; esac ;; esac ;; newsos6) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; *nto* | *qnx*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared' ;; osf3* | osf4* | osf5*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' # All OSF/1 code is PIC. _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; rdos*) _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared' ;; solaris*) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' case $cc_basename in f77* | f90* | f95* | sunf77* | sunf90* | sunf95*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ';; *) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,';; esac ;; sunos4*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; sysv4 | sysv4.2uw2* | sysv4.3*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; sysv4*MP*) if test -d /usr/nec; then _LT_TAGVAR(lt_prog_compiler_pic, $1)='-Kconform_pic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' fi ;; sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; unicos*) _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,' _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no ;; uts4*) _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic' _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic' ;; *) _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no ;; esac fi ]) case $host_os in # For platforms that do not support PIC, -DPIC is meaningless: *djgpp*) _LT_TAGVAR(lt_prog_compiler_pic, $1)= ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)="$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])" ;; esac AC_CACHE_CHECK([for $compiler option to produce PIC], [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)], [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_prog_compiler_pic, $1)]) _LT_TAGVAR(lt_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_cv_prog_compiler_pic, $1) # # Check to make sure the PIC flag actually works. # if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then _LT_COMPILER_OPTION([if $compiler PIC flag $_LT_TAGVAR(lt_prog_compiler_pic, $1) works], [_LT_TAGVAR(lt_cv_prog_compiler_pic_works, $1)], [$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])], [], [case $_LT_TAGVAR(lt_prog_compiler_pic, $1) in "" | " "*) ;; *) _LT_TAGVAR(lt_prog_compiler_pic, $1)=" $_LT_TAGVAR(lt_prog_compiler_pic, $1)" ;; esac], [_LT_TAGVAR(lt_prog_compiler_pic, $1)= _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no]) fi _LT_TAGDECL([pic_flag], [lt_prog_compiler_pic], [1], [Additional compiler flags for building library objects]) _LT_TAGDECL([wl], [lt_prog_compiler_wl], [1], [How to pass a linker flag through the compiler]) # # Check to make sure the static flag actually works. # wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1) eval lt_tmp_static_flag=\"$_LT_TAGVAR(lt_prog_compiler_static, $1)\" _LT_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works], _LT_TAGVAR(lt_cv_prog_compiler_static_works, $1), $lt_tmp_static_flag, [], [_LT_TAGVAR(lt_prog_compiler_static, $1)=]) _LT_TAGDECL([link_static_flag], [lt_prog_compiler_static], [1], [Compiler flag to prevent dynamic linking]) ])# _LT_COMPILER_PIC # _LT_LINKER_SHLIBS([TAGNAME]) # ---------------------------- # See if the linker supports building shared libraries. m4_defun([_LT_LINKER_SHLIBS], [AC_REQUIRE([LT_PATH_LD])dnl AC_REQUIRE([LT_PATH_NM])dnl m4_require([_LT_PATH_MANIFEST_TOOL])dnl m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_DECL_EGREP])dnl m4_require([_LT_DECL_SED])dnl m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl m4_require([_LT_TAG_COMPILER])dnl AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries]) m4_if([$1], [CXX], [ _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'] case $host_os in aix[[4-9]]*) # If we're using GNU nm, then we don't want the "-C" option. # -C means demangle to GNU nm, but means don't demangle to AIX nm. # Without the "-l" option, or with the "-B" option, AIX nm treats # weak defined symbols like other global defined symbols, whereas # GNU nm marks them as "W". # While the 'weak' keyword is ignored in the Export File, we need # it in the Import File for the 'aix-soname' feature, so we have # to replace the "-B" option with "-P" for AIX nm. if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols' else _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols' fi ;; pw32*) _LT_TAGVAR(export_symbols_cmds, $1)=$ltdll_cmds ;; cygwin* | mingw* | cegcc*) case $cc_basename in cl* | icl*) _LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*' ;; *) _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols' _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'] ;; esac ;; *) _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' ;; esac ], [ runpath_var= _LT_TAGVAR(allow_undefined_flag, $1)= _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(archive_cmds, $1)= _LT_TAGVAR(archive_expsym_cmds, $1)= _LT_TAGVAR(compiler_needs_object, $1)=no _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no _LT_TAGVAR(export_dynamic_flag_spec, $1)= _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' _LT_TAGVAR(hardcode_automatic, $1)=no _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_TAGVAR(hardcode_libdir_separator, $1)= _LT_TAGVAR(hardcode_minus_L, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported _LT_TAGVAR(inherit_rpath, $1)=no _LT_TAGVAR(link_all_deplibs, $1)=unknown _LT_TAGVAR(module_cmds, $1)= _LT_TAGVAR(module_expsym_cmds, $1)= _LT_TAGVAR(old_archive_from_new_cmds, $1)= _LT_TAGVAR(old_archive_from_expsyms_cmds, $1)= _LT_TAGVAR(thread_safe_flag_spec, $1)= _LT_TAGVAR(whole_archive_flag_spec, $1)= # include_expsyms should be a list of space-separated symbols to be *always* # included in the symbol list _LT_TAGVAR(include_expsyms, $1)= # exclude_expsyms can be an extended regexp of symbols to exclude # it will be wrapped by ' (' and ')$', so one must not match beginning or # end of line. Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc', # as well as any symbol that contains 'd'. _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'] # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out # platforms (ab)use it in PIC code, but their linkers get confused if # the symbol is explicitly referenced. Since portable code cannot # rely on this symbol name, it's probably fine to never include it in # preloaded symbol tables. # Exclude shared library initialization/finalization symbols. dnl Note also adjust exclude_expsyms for C++ above. extract_expsyms_cmds= case $host_os in cygwin* | mingw* | pw32* | cegcc*) # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time # When not using gcc, we currently assume that we are using # Microsoft Visual C++ or Intel C++ Compiler. if test yes != "$GCC"; then with_gnu_ld=no fi ;; interix*) # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC) with_gnu_ld=yes ;; openbsd* | bitrig*) with_gnu_ld=no ;; esac _LT_TAGVAR(ld_shlibs, $1)=yes # On some targets, GNU ld is compatible enough with the native linker # that we're better off using the native interface for both. lt_use_gnu_ld_interface=no if test yes = "$with_gnu_ld"; then case $host_os in aix*) # The AIX port of GNU ld has always aspired to compatibility # with the native linker. However, as the warning in the GNU ld # block says, versions before 2.19.5* couldn't really create working # shared libraries, regardless of the interface used. case `$LD -v 2>&1` in *\ \(GNU\ Binutils\)\ 2.19.5*) ;; *\ \(GNU\ Binutils\)\ 2.[[2-9]]*) ;; *\ \(GNU\ Binutils\)\ [[3-9]]*) ;; *) lt_use_gnu_ld_interface=yes ;; esac ;; *) lt_use_gnu_ld_interface=yes ;; esac fi if test yes = "$lt_use_gnu_ld_interface"; then # If archive_cmds runs LD, not CC, wlarc should be empty wlarc='$wl' # Set some defaults for GNU ld with shared library support. These # are reset later if shared libraries are not supported. Putting them # here allows them to be overridden if necessary. runpath_var=LD_RUN_PATH _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' # ancient GNU ld didn't support --whole-archive et. al. if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' else _LT_TAGVAR(whole_archive_flag_spec, $1)= fi supports_anon_versioning=no case `$LD -v | $SED -e 's/([[^)]]\+)\s\+//' 2>&1` in *GNU\ gold*) supports_anon_versioning=yes ;; *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.10.*) ;; # catch versions < 2.11 *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ... *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ... *\ 2.11.*) ;; # other 2.11 versions *) supports_anon_versioning=yes ;; esac # See if GNU ld supports shared libraries. case $host_os in aix[[3-9]]*) # On AIX/PPC, the GNU linker is very broken if test ia64 != "$host_cpu"; then _LT_TAGVAR(ld_shlibs, $1)=no cat <<_LT_EOF 1>&2 *** Warning: the GNU linker, at least up to release 2.19, is reported *** to be unable to reliably create shared libraries on AIX. *** Therefore, libtool is disabling shared libraries support. If you *** really care for shared libraries, you may want to install binutils *** 2.20 or above, or modify your PATH so that a non-GNU linker is found. *** You will then need to restart the configuration process. _LT_EOF fi ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='' ;; m68k) _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_minus_L, $1)=yes ;; esac ;; beos*) if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then _LT_TAGVAR(allow_undefined_flag, $1)=unsupported # Joseph Beckenbach says some releases of gcc # support --undefined. This deserves some investigation. FIXME _LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; cygwin* | mingw* | pw32* | cegcc*) # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless, # as there is no search path for DLLs. _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols' _LT_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols' _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'] if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' # If the export-symbols file already is a .def file, use it as # is; otherwise, prepend EXPORTS... _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then cp $export_symbols $output_objdir/$soname.def; else echo EXPORTS > $output_objdir/$soname.def; cat $export_symbols >> $output_objdir/$soname.def; fi~ $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; haiku*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(link_all_deplibs, $1)=yes ;; os2*) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(allow_undefined_flag, $1)=unsupported shrext_cmds=.dll _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ prefix_cmds="$SED"~ if test EXPORTS = "`$SED 1q $export_symbols`"; then prefix_cmds="$prefix_cmds -e 1d"; fi~ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes _LT_TAGVAR(file_list_spec, $1)='@' ;; interix[[3-9]]*) _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc. # Instead, shared libraries are loaded at an image base (0x10000000 by # default) and relocated if they conflict, which is a slow very memory # consuming and fragmenting process. To avoid this, we pick a random, # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link # time. Moving up from 0x10000000 also allows more sbrk(2) space. _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' ;; gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu) tmp_diet=no if test linux-dietlibc = "$host_os"; then case $cc_basename in diet\ *) tmp_diet=yes;; # linux-dietlibc with static linking (!diet-dyn) esac fi if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \ && test no = "$tmp_diet" then tmp_addflag=' $pic_flag' tmp_sharedflag='-shared' case $cc_basename,$host_cpu in pgcc*) # Portland Group C compiler _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' tmp_addflag=' $pic_flag' ;; pgf77* | pgf90* | pgf95* | pgfortran*) # Portland Group f77 and f90 compilers _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' tmp_addflag=' $pic_flag -Mnomain' ;; ecc*,ia64* | icc*,ia64*) # Intel C compiler on ia64 tmp_addflag=' -i_dynamic' ;; efc*,ia64* | ifort*,ia64*) # Intel Fortran compiler on ia64 tmp_addflag=' -i_dynamic -nofor_main' ;; ifc* | ifort*) # Intel Fortran compiler tmp_addflag=' -nofor_main' ;; lf95*) # Lahey Fortran 8.1 _LT_TAGVAR(whole_archive_flag_spec, $1)= tmp_sharedflag='--shared' ;; nagfor*) # NAGFOR 5.3 tmp_sharedflag='-Wl,-shared' ;; xl[[cC]]* | bgxl[[cC]]* | mpixl[[cC]]*) # IBM XL C 8.0 on PPC (deal with xlf below) tmp_sharedflag='-qmkshrobj' tmp_addflag= ;; nvcc*) # Cuda Compiler Driver 2.2 _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' _LT_TAGVAR(compiler_needs_object, $1)=yes ;; esac case `$CC -V 2>&1 | $SED 5q` in *Sun\ C*) # Sun C 5.9 _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' _LT_TAGVAR(compiler_needs_object, $1)=yes tmp_sharedflag='-G' ;; *Sun\ F*) # Sun Fortran 8.3 tmp_sharedflag='-G' ;; esac _LT_TAGVAR(archive_cmds, $1)='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' if test yes = "$supports_anon_versioning"; then _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ echo "local: *; };" >> $output_objdir/$libname.ver~ $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib' fi case $cc_basename in tcc*) _LT_TAGVAR(export_dynamic_flag_spec, $1)='-rdynamic' ;; xlf* | bgf* | bgxlf* | mpixlf*) # IBM XL Fortran 10.1 on PPC cannot create shared libs itself _LT_TAGVAR(whole_archive_flag_spec, $1)='--whole-archive$convenience --no-whole-archive' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(archive_cmds, $1)='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib' if test yes = "$supports_anon_versioning"; then _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ echo "local: *; };" >> $output_objdir/$libname.ver~ $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib' fi ;; esac else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; netbsd*) if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib' wlarc= else _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' fi ;; solaris*) if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then _LT_TAGVAR(ld_shlibs, $1)=no cat <<_LT_EOF 1>&2 *** Warning: The releases 2.8.* of the GNU linker cannot reliably *** create shared libraries on Solaris systems. Therefore, libtool *** is disabling shared libraries support. We urge you to upgrade GNU *** binutils to release 2.9.1 or newer. Another option is to modify *** your PATH or compiler configuration so that the native linker is *** used, and then restart. _LT_EOF elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*) case `$LD -v 2>&1` in *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.1[[0-5]].*) _LT_TAGVAR(ld_shlibs, $1)=no cat <<_LT_EOF 1>&2 *** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot *** reliably create shared libraries on SCO systems. Therefore, libtool *** is disabling shared libraries support. We urge you to upgrade GNU *** binutils to release 2.16.91.0.3 or newer. Another option is to modify *** your PATH or compiler configuration so that the native linker is *** used, and then restart. _LT_EOF ;; *) # For security reasons, it is highly recommended that you always # use absolute paths for naming shared libraries, and exclude the # DT_RUNPATH tag from executables and libraries. But doing so # requires that you compile everything twice, which is a pain. if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; sunos4*) _LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags' wlarc= _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac if test no = "$_LT_TAGVAR(ld_shlibs, $1)"; then runpath_var= _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_TAGVAR(export_dynamic_flag_spec, $1)= _LT_TAGVAR(whole_archive_flag_spec, $1)= fi else # PORTME fill in a description of your system's linker (not GNU ld) case $host_os in aix3*) _LT_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_TAGVAR(always_export_symbols, $1)=yes _LT_TAGVAR(archive_expsym_cmds, $1)='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname' # Note: this linker hardcodes the directories in LIBPATH if there # are no directories specified by -L. _LT_TAGVAR(hardcode_minus_L, $1)=yes if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then # Neither direct hardcoding nor static linking is supported with a # broken collect2. _LT_TAGVAR(hardcode_direct, $1)=unsupported fi ;; aix[[4-9]]*) if test ia64 = "$host_cpu"; then # On IA64, the linker does run time linking by default, so we don't # have to do anything special. aix_use_runtimelinking=no exp_sym_flag='-Bexport' no_entry_flag= else # If we're using GNU nm, then we don't want the "-C" option. # -C means demangle to GNU nm, but means don't demangle to AIX nm. # Without the "-l" option, or with the "-B" option, AIX nm treats # weak defined symbols like other global defined symbols, whereas # GNU nm marks them as "W". # While the 'weak' keyword is ignored in the Export File, we need # it in the Import File for the 'aix-soname' feature, so we have # to replace the "-B" option with "-P" for AIX nm. if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols' else _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols' fi aix_use_runtimelinking=no # Test if we are trying to use run time linking or normal # AIX style linking. If -brtl is somewhere in LDFLAGS, we # have runtime linking enabled, and use it for executables. # For shared libraries, we enable/disable runtime linking # depending on the kind of the shared library created - # when "with_aix_soname,aix_use_runtimelinking" is: # "aix,no" lib.a(lib.so.V) shared, rtl:no, for executables # "aix,yes" lib.so shared, rtl:yes, for executables # lib.a static archive # "both,no" lib.so.V(shr.o) shared, rtl:yes # lib.a(lib.so.V) shared, rtl:no, for executables # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a(lib.so.V) shared, rtl:no # "svr4,*" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a static archive case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*) for ld_flag in $LDFLAGS; do if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then aix_use_runtimelinking=yes break fi done if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then # With aix-soname=svr4, we create the lib.so.V shared archives only, # so we don't have lib.a shared libs to link our executables. # We have to force runtime linking in this case. aix_use_runtimelinking=yes LDFLAGS="$LDFLAGS -Wl,-brtl" fi ;; esac exp_sym_flag='-bexport' no_entry_flag='-bnoentry' fi # When large executables or shared objects are built, AIX ld can # have problems creating the table of contents. If linking a library # or program results in "error TOC overflow" add -mminimal-toc to # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS. _LT_TAGVAR(archive_cmds, $1)='' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_TAGVAR(link_all_deplibs, $1)=yes _LT_TAGVAR(file_list_spec, $1)='$wl-f,' case $with_aix_soname,$aix_use_runtimelinking in aix,*) ;; # traditional, no import file svr4,* | *,yes) # use import file # The Import File defines what to hardcode. _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no ;; esac if test yes = "$GCC"; then case $host_os in aix4.[[012]]|aix4.[[012]].*) # We only want to do this on AIX 4.2 and lower, the check # below for broken collect2 doesn't work under 4.3+ collect2name=`$CC -print-prog-name=collect2` if test -f "$collect2name" && strings "$collect2name" | $GREP resolve_lib_name >/dev/null then # We have reworked collect2 : else # We have old collect2 _LT_TAGVAR(hardcode_direct, $1)=unsupported # It fails to find uninstalled libraries when the uninstalled # path is not listed in the libpath. Setting hardcode_minus_L # to unsupported forces relinking _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)= fi ;; esac shared_flag='-shared' if test yes = "$aix_use_runtimelinking"; then shared_flag="$shared_flag "'$wl-G' fi # Need to ensure runtime linking is disabled for the traditional # shared library, or the linker may eventually find shared libraries # /with/ Import File - we do not want to mix them. shared_flag_aix='-shared' shared_flag_svr4='-shared $wl-G' else # not using gcc if test ia64 = "$host_cpu"; then # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release # chokes on -Wl,-G. The following line is correct: shared_flag='-G' else if test yes = "$aix_use_runtimelinking"; then shared_flag='$wl-G' else shared_flag='$wl-bM:SRE' fi shared_flag_aix='$wl-bM:SRE' shared_flag_svr4='$wl-G' fi fi _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall' # It seems that -bexpall does not export symbols beginning with # underscore (_), so it is better to generate a list of symbols to export. _LT_TAGVAR(always_export_symbols, $1)=yes if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then # Warning - without using the other runtime loading flags (-brtl), # -berok will link without error, but may produce a broken library. _LT_TAGVAR(allow_undefined_flag, $1)='-berok' # Determine the default libpath from the value encoded in an # empty executable. _LT_SYS_MODULE_PATH_AIX([$1]) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag else if test ia64 = "$host_cpu"; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib' _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs" _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols" else # Determine the default libpath from the value encoded in an # empty executable. _LT_SYS_MODULE_PATH_AIX([$1]) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" # Warning - without using the other run time loading flags, # -berok will link without error, but may produce a broken library. _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok' _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok' if test yes = "$with_gnu_ld"; then # We only use this code for GNU lds that support --whole-archive. _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive' else # Exported symbols can be pulled into shared objects from archives _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience' fi _LT_TAGVAR(archive_cmds_need_lc, $1)=yes _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d' # -brtl affects multiple linker settings, -berok does not and is overridden later compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`' if test svr4 != "$with_aix_soname"; then # This is similar to how AIX traditionally builds its shared libraries. _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname' fi if test aix != "$with_aix_soname"; then _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp' else # used by -dlpreopen to get the symbols _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV $output_objdir/$realname.d/$soname $output_objdir' fi _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d' fi fi ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='' ;; m68k) _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_minus_L, $1)=yes ;; esac ;; bsdi[[45]]*) _LT_TAGVAR(export_dynamic_flag_spec, $1)=-rdynamic ;; cygwin* | mingw* | pw32* | cegcc*) # When not using gcc, we currently assume that we are using # Microsoft Visual C++ or Intel C++ Compiler. # hardcode_libdir_flag_spec is actually meaningless, as there is # no search path for DLLs. case $cc_basename in cl* | icl*) # Native MSVC or ICC _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' ' _LT_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_TAGVAR(always_export_symbols, $1)=yes _LT_TAGVAR(file_list_spec, $1)='@' # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=.dll # FIXME: Setting linknames here is a bad hack. _LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames=' _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then cp "$export_symbols" "$output_objdir/$soname.def"; echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp"; else $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp; fi~ $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~ linknames=' # The linker will not automatically build a static lib if we build a DLL. # _LT_TAGVAR(old_archive_from_new_cmds, $1)='true' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes _LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*' _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1,DATA/'\'' | $SED -e '\''/^[[AITW]][[ ]]/s/.*[[ ]]//'\'' | sort | uniq > $export_symbols' # Don't use ranlib _LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib' _LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~ lt_tool_outputfile="@TOOL_OUTPUT@"~ case $lt_outputfile in *.exe|*.EXE) ;; *) lt_outputfile=$lt_outputfile.exe lt_tool_outputfile=$lt_tool_outputfile.exe ;; esac~ if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1; $RM "$lt_outputfile.manifest"; fi' ;; *) # Assume MSVC and ICC wrapper _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' ' _LT_TAGVAR(allow_undefined_flag, $1)=unsupported # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=.dll # FIXME: Setting linknames here is a bad hack. _LT_TAGVAR(archive_cmds, $1)='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames=' # The linker will automatically build a .lib file if we build a DLL. _LT_TAGVAR(old_archive_from_new_cmds, $1)='true' # FIXME: Should let the user specify the lib program. _LT_TAGVAR(old_archive_cmds, $1)='lib -OUT:$oldlib$oldobjs$old_deplibs' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes ;; esac ;; darwin* | rhapsody*) _LT_DARWIN_LINKER_FEATURES($1) ;; dgux*) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor # support. Future versions do this automatically, but an explicit c++rt0.o # does not break anything, and helps significantly (at the cost of a little # extra space). freebsd2.2*) _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; # Unfortunately, older versions of FreeBSD 2 do not have this feature. freebsd2.*) _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; # FreeBSD 3 and greater uses gcc -shared to do shared libraries. freebsd* | dragonfly* | midnightbsd*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; hpux9*) if test yes = "$GCC"; then _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' else _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' fi _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(hardcode_direct, $1)=yes # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' ;; hpux10*) if test yes,no = "$GCC,$with_gnu_ld"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' else _LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags' fi if test no = "$with_gnu_ld"; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. _LT_TAGVAR(hardcode_minus_L, $1)=yes fi ;; hpux11*) if test yes,no = "$GCC,$with_gnu_ld"; then case $host_cpu in hppa*64*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' ;; ia64*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' ;; esac else case $host_cpu in hppa*64*) _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' ;; ia64*) _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' ;; *) m4_if($1, [], [ # Older versions of the 11.00 compiler do not understand -b yet # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does) _LT_LINKER_OPTION([if $CC understands -b], _LT_TAGVAR(lt_cv_prog_compiler__b, $1), [-b], [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'], [_LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'])], [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags']) ;; esac fi if test no = "$with_gnu_ld"; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: case $host_cpu in hppa*64*|ia64*) _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. _LT_TAGVAR(hardcode_minus_L, $1)=yes ;; esac fi ;; irix5* | irix6* | nonstopux*) if test yes = "$GCC"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' # Try to use the -exported_symbol ld option, if it does not # work, assume that -exports_file does not work either and # implicitly export all symbols. # This should be the same for all languages, so no per-tag cache variable. AC_CACHE_CHECK([whether the $host_os linker accepts -exported_symbol], [lt_cv_irix_exported_symbol], [save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null" AC_LINK_IFELSE( [AC_LANG_SOURCE( [AC_LANG_CASE([C], [[int foo (void) { return 0; }]], [C++], [[int foo (void) { return 0; }]], [Fortran 77], [[ subroutine foo end]], [Fortran], [[ subroutine foo end]])])], [lt_cv_irix_exported_symbol=yes], [lt_cv_irix_exported_symbol=no]) LDFLAGS=$save_LDFLAGS]) if test yes = "$lt_cv_irix_exported_symbol"; then _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib' fi else _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib' fi _LT_TAGVAR(archive_cmds_need_lc, $1)='no' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(inherit_rpath, $1)=yes _LT_TAGVAR(link_all_deplibs, $1)=yes ;; linux*) case $cc_basename in tcc*) # Fabrice Bellard et al's Tiny C Compiler _LT_TAGVAR(ld_shlibs, $1)=yes _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' ;; esac ;; netbsd*) if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' # a.out else _LT_TAGVAR(archive_cmds, $1)='$LD -shared -o $lib $libobjs $deplibs $linker_flags' # ELF fi _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; newsos6) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *nto* | *qnx*) ;; openbsd* | bitrig*) if test -f /usr/libexec/ld.so; then _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=yes if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' else _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' fi else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; os2*) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(allow_undefined_flag, $1)=unsupported shrext_cmds=.dll _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ prefix_cmds="$SED"~ if test EXPORTS = "`$SED 1q $export_symbols`"; then prefix_cmds="$prefix_cmds -e 1d"; fi~ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes _LT_TAGVAR(file_list_spec, $1)='@' ;; osf3*) if test yes = "$GCC"; then _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' else _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' fi _LT_TAGVAR(archive_cmds_need_lc, $1)='no' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: ;; osf4* | osf5*) # as osf3* with the addition of -msym flag if test yes = "$GCC"; then _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' else _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~ $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp' # Both c and cxx compiler support -rpath directly _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' fi _LT_TAGVAR(archive_cmds_need_lc, $1)='no' _LT_TAGVAR(hardcode_libdir_separator, $1)=: ;; solaris*) _LT_TAGVAR(no_undefined_flag, $1)=' -z defs' if test yes = "$GCC"; then wlarc='$wl' _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp' else case `$CC -V 2>&1` in *"Compilers 5.0"*) wlarc='' _LT_TAGVAR(archive_cmds, $1)='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp' ;; *) wlarc='$wl' _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp' ;; esac fi _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no case $host_os in solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; *) # The compiler driver will combine and reorder linker options, # but understands '-z linker_flag'. GCC discards it without '$wl', # but is careful enough not to reorder. # Supported since Solaris 2.6 (maybe 2.5.1?) if test yes = "$GCC"; then _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract' else _LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract' fi ;; esac _LT_TAGVAR(link_all_deplibs, $1)=yes ;; sunos4*) if test sequent = "$host_vendor"; then # Use $CC to link under sequent, because it throws in some extra .o # files that make .init and .fini sections work. _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags' else _LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags' fi _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; sysv4) case $host_vendor in sni) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_direct, $1)=yes # is this really true??? ;; siemens) ## LD is ld it makes a PLAMLIB ## CC just makes a GrossModule. _LT_TAGVAR(archive_cmds, $1)='$LD -G -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(reload_cmds, $1)='$CC -r -o $output$reload_objs' _LT_TAGVAR(hardcode_direct, $1)=no ;; motorola) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_direct, $1)=no #Motorola manual says yes, but my tests say they lie ;; esac runpath_var='LD_RUN_PATH' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; sysv4.3*) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(export_dynamic_flag_spec, $1)='-Bexport' ;; sysv4*MP*) if test -d /usr/nec; then _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no runpath_var=LD_RUN_PATH hardcode_runpath_var=yes _LT_TAGVAR(ld_shlibs, $1)=yes fi ;; sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*) _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no runpath_var='LD_RUN_PATH' if test yes = "$GCC"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' else _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' fi ;; sysv5* | sco3.2v5* | sco5v6*) # Note: We CANNOT use -z defs as we might desire, because we do not # link with -lc, and that would cause any symbols used from libc to # always be unresolved, which means just about no library would # ever link correctly. If we're not using GNU ld we use -z text # though, which does catch some bad symbols but isn't as heavy-handed # as -z defs. _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' _LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs' _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_TAGVAR(link_all_deplibs, $1)=yes _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport' runpath_var='LD_RUN_PATH' if test yes = "$GCC"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' else _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' fi ;; uts4*) _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) _LT_TAGVAR(ld_shlibs, $1)=no ;; esac if test sni = "$host_vendor"; then case $host in sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*) _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Blargedynsym' ;; esac fi fi ]) AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)]) test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no _LT_TAGVAR(with_gnu_ld, $1)=$with_gnu_ld _LT_DECL([], [libext], [0], [Old archive suffix (normally "a")])dnl _LT_DECL([], [shrext_cmds], [1], [Shared library suffix (normally ".so")])dnl _LT_DECL([], [extract_expsyms_cmds], [2], [The commands to extract the exported symbol list from a shared archive]) # # Do we need to explicitly link libc? # case "x$_LT_TAGVAR(archive_cmds_need_lc, $1)" in x|xyes) # Assume -lc should be added _LT_TAGVAR(archive_cmds_need_lc, $1)=yes if test yes,yes = "$GCC,$enable_shared"; then case $_LT_TAGVAR(archive_cmds, $1) in *'~'*) # FIXME: we may have to deal with multi-command sequences. ;; '$CC '*) # Test whether the compiler implicitly links with -lc since on some # systems, -lgcc has to come before -lc. If gcc already passes -lc # to ld, don't add -lc before -lgcc. AC_CACHE_CHECK([whether -lc should be explicitly linked in], [lt_cv_]_LT_TAGVAR(archive_cmds_need_lc, $1), [$RM conftest* echo "$lt_simple_compile_test_code" > conftest.$ac_ext if AC_TRY_EVAL(ac_compile) 2>conftest.err; then soname=conftest lib=conftest libobjs=conftest.$ac_objext deplibs= wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1) pic_flag=$_LT_TAGVAR(lt_prog_compiler_pic, $1) compiler_flags=-v linker_flags=-v verstring= output_objdir=. libname=conftest lt_save_allow_undefined_flag=$_LT_TAGVAR(allow_undefined_flag, $1) _LT_TAGVAR(allow_undefined_flag, $1)= if AC_TRY_EVAL(_LT_TAGVAR(archive_cmds, $1) 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) then lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=no else lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=yes fi _LT_TAGVAR(allow_undefined_flag, $1)=$lt_save_allow_undefined_flag else cat conftest.err 1>&5 fi $RM conftest* ]) _LT_TAGVAR(archive_cmds_need_lc, $1)=$lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1) ;; esac fi ;; esac _LT_TAGDECL([build_libtool_need_lc], [archive_cmds_need_lc], [0], [Whether or not to add -lc for building shared libraries]) _LT_TAGDECL([allow_libtool_libs_with_static_runtimes], [enable_shared_with_static_runtimes], [0], [Whether or not to disallow shared libs when runtime libs are static]) _LT_TAGDECL([], [export_dynamic_flag_spec], [1], [Compiler flag to allow reflexive dlopens]) _LT_TAGDECL([], [whole_archive_flag_spec], [1], [Compiler flag to generate shared objects directly from archives]) _LT_TAGDECL([], [compiler_needs_object], [1], [Whether the compiler copes with passing no objects directly]) _LT_TAGDECL([], [old_archive_from_new_cmds], [2], [Create an old-style archive from a shared archive]) _LT_TAGDECL([], [old_archive_from_expsyms_cmds], [2], [Create a temporary old-style archive to link instead of a shared archive]) _LT_TAGDECL([], [archive_cmds], [2], [Commands used to build a shared archive]) _LT_TAGDECL([], [archive_expsym_cmds], [2]) _LT_TAGDECL([], [module_cmds], [2], [Commands used to build a loadable module if different from building a shared archive.]) _LT_TAGDECL([], [module_expsym_cmds], [2]) _LT_TAGDECL([], [with_gnu_ld], [1], [Whether we are building with GNU ld or not]) _LT_TAGDECL([], [allow_undefined_flag], [1], [Flag that allows shared libraries with undefined symbols to be built]) _LT_TAGDECL([], [no_undefined_flag], [1], [Flag that enforces no undefined symbols]) _LT_TAGDECL([], [hardcode_libdir_flag_spec], [1], [Flag to hardcode $libdir into a binary during linking. This must work even if $libdir does not exist]) _LT_TAGDECL([], [hardcode_libdir_separator], [1], [Whether we need a single "-rpath" flag with a separated argument]) _LT_TAGDECL([], [hardcode_direct], [0], [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes DIR into the resulting binary]) _LT_TAGDECL([], [hardcode_direct_absolute], [0], [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes DIR into the resulting binary and the resulting library dependency is "absolute", i.e impossible to change by setting $shlibpath_var if the library is relocated]) _LT_TAGDECL([], [hardcode_minus_L], [0], [Set to "yes" if using the -LDIR flag during linking hardcodes DIR into the resulting binary]) _LT_TAGDECL([], [hardcode_shlibpath_var], [0], [Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR into the resulting binary]) _LT_TAGDECL([], [hardcode_automatic], [0], [Set to "yes" if building a shared library automatically hardcodes DIR into the library and all subsequent libraries and executables linked against it]) _LT_TAGDECL([], [inherit_rpath], [0], [Set to yes if linker adds runtime paths of dependent libraries to runtime path list]) _LT_TAGDECL([], [link_all_deplibs], [0], [Whether libtool must link a program against all its dependency libraries]) _LT_TAGDECL([], [always_export_symbols], [0], [Set to "yes" if exported symbols are required]) _LT_TAGDECL([], [export_symbols_cmds], [2], [The commands to list exported symbols]) _LT_TAGDECL([], [exclude_expsyms], [1], [Symbols that should not be listed in the preloaded symbols]) _LT_TAGDECL([], [include_expsyms], [1], [Symbols that must always be exported]) _LT_TAGDECL([], [prelink_cmds], [2], [Commands necessary for linking programs (against libraries) with templates]) _LT_TAGDECL([], [postlink_cmds], [2], [Commands necessary for finishing linking programs]) _LT_TAGDECL([], [file_list_spec], [1], [Specify filename containing input files]) dnl FIXME: Not yet implemented dnl _LT_TAGDECL([], [thread_safe_flag_spec], [1], dnl [Compiler flag to generate thread safe objects]) ])# _LT_LINKER_SHLIBS # _LT_LANG_C_CONFIG([TAG]) # ------------------------ # Ensure that the configuration variables for a C compiler are suitably # defined. These variables are subsequently used by _LT_CONFIG to write # the compiler configuration to 'libtool'. m4_defun([_LT_LANG_C_CONFIG], [m4_require([_LT_DECL_EGREP])dnl lt_save_CC=$CC AC_LANG_PUSH(C) # Source file extension for C test sources. ac_ext=c # Object file extension for compiled C test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # Code to be used in simple compile tests lt_simple_compile_test_code="int some_variable = 0;" # Code to be used in simple link tests lt_simple_link_test_code='int main(){return(0);}' _LT_TAG_COMPILER # Save the default compiler, since it gets overwritten when the other # tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP. compiler_DEFAULT=$CC # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... if test -n "$compiler"; then _LT_COMPILER_NO_RTTI($1) _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_SYS_DYNAMIC_LINKER($1) _LT_LINKER_HARDCODE_LIBPATH($1) LT_SYS_DLOPEN_SELF _LT_CMD_STRIPLIB # Report what library types will actually be built AC_MSG_CHECKING([if libtool supports shared libraries]) AC_MSG_RESULT([$can_build_shared]) AC_MSG_CHECKING([whether to build shared libraries]) test no = "$can_build_shared" && enable_shared=no # On AIX, shared libraries and static libraries use the same namespace, and # are all built from PIC. case $host_os in aix3*) test yes = "$enable_shared" && enable_static=no if test -n "$RANLIB"; then archive_cmds="$archive_cmds~\$RANLIB \$lib" postinstall_cmds='$RANLIB $lib' fi ;; aix[[4-9]]*) if test ia64 != "$host_cpu"; then case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in yes,aix,yes) ;; # shared object as lib.so file only yes,svr4,*) ;; # shared object as lib.so archive member only yes,*) enable_static=no ;; # shared object in lib.a archive as well esac fi ;; esac AC_MSG_RESULT([$enable_shared]) AC_MSG_CHECKING([whether to build static libraries]) # Make sure either enable_shared or enable_static is yes. test yes = "$enable_shared" || enable_static=yes AC_MSG_RESULT([$enable_static]) _LT_CONFIG($1) fi AC_LANG_POP CC=$lt_save_CC ])# _LT_LANG_C_CONFIG # _LT_LANG_CXX_CONFIG([TAG]) # -------------------------- # Ensure that the configuration variables for a C++ compiler are suitably # defined. These variables are subsequently used by _LT_CONFIG to write # the compiler configuration to 'libtool'. m4_defun([_LT_LANG_CXX_CONFIG], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl m4_require([_LT_DECL_EGREP])dnl m4_require([_LT_PATH_MANIFEST_TOOL])dnl if test -n "$CXX" && ( test no != "$CXX" && ( (test g++ = "$CXX" && `g++ -v >/dev/null 2>&1` ) || (test g++ != "$CXX"))); then AC_PROG_CXXCPP else _lt_caught_CXX_error=yes fi AC_LANG_PUSH(C++) _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(allow_undefined_flag, $1)= _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(archive_expsym_cmds, $1)= _LT_TAGVAR(compiler_needs_object, $1)=no _LT_TAGVAR(export_dynamic_flag_spec, $1)= _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_TAGVAR(hardcode_libdir_separator, $1)= _LT_TAGVAR(hardcode_minus_L, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported _LT_TAGVAR(hardcode_automatic, $1)=no _LT_TAGVAR(inherit_rpath, $1)=no _LT_TAGVAR(module_cmds, $1)= _LT_TAGVAR(module_expsym_cmds, $1)= _LT_TAGVAR(link_all_deplibs, $1)=unknown _LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_TAGVAR(reload_flag, $1)=$reload_flag _LT_TAGVAR(reload_cmds, $1)=$reload_cmds _LT_TAGVAR(no_undefined_flag, $1)= _LT_TAGVAR(whole_archive_flag_spec, $1)= _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no # Source file extension for C++ test sources. ac_ext=cpp # Object file extension for compiled C++ test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # No sense in running all these tests if we already determined that # the CXX compiler isn't working. Some variables (like enable_shared) # are currently assumed to apply to all compilers on this platform, # and will be corrupted by setting them based on a non-working compiler. if test yes != "$_lt_caught_CXX_error"; then # Code to be used in simple compile tests lt_simple_compile_test_code="int some_variable = 0;" # Code to be used in simple link tests lt_simple_link_test_code='int main(int, char *[[]]) { return(0); }' # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_CFLAGS=$CFLAGS lt_save_LD=$LD lt_save_GCC=$GCC GCC=$GXX lt_save_with_gnu_ld=$with_gnu_ld lt_save_path_LD=$lt_cv_path_LD if test -n "${lt_cv_prog_gnu_ldcxx+set}"; then lt_cv_prog_gnu_ld=$lt_cv_prog_gnu_ldcxx else $as_unset lt_cv_prog_gnu_ld fi if test -n "${lt_cv_path_LDCXX+set}"; then lt_cv_path_LD=$lt_cv_path_LDCXX else $as_unset lt_cv_path_LD fi test -z "${LDCXX+set}" || LD=$LDCXX CC=${CXX-"c++"} CFLAGS=$CXXFLAGS compiler=$CC _LT_TAGVAR(compiler, $1)=$CC _LT_CC_BASENAME([$compiler]) if test -n "$compiler"; then # We don't want -fno-exception when compiling C++ code, so set the # no_builtin_flag separately if test yes = "$GXX"; then _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' else _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)= fi if test yes = "$GXX"; then # Set up default GNU C++ configuration LT_PATH_LD # Check if GNU C++ uses GNU ld as the underlying linker, since the # archiving commands below assume that GNU ld is being used. if test yes = "$with_gnu_ld"; then _LT_TAGVAR(archive_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' # If archive_cmds runs LD, not CC, wlarc should be empty # XXX I think wlarc can be eliminated in ltcf-cxx, but I need to # investigate it a little bit more. (MM) wlarc='$wl' # ancient GNU ld didn't support --whole-archive et. al. if eval "`$CC -print-prog-name=ld` --help 2>&1" | $GREP 'no-whole-archive' > /dev/null; then _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' else _LT_TAGVAR(whole_archive_flag_spec, $1)= fi else with_gnu_ld=no wlarc= # A generic and very simple default shared library creation # command for GNU C++ for the case where it uses the native # linker, instead of GNU ld. If possible, this setting should # overridden to take advantage of the native linker features on # the platform it is being used on. _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib' fi # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"' else GXX=no with_gnu_ld=no wlarc= fi # PORTME: fill in a description of your system's C++ link characteristics AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries]) _LT_TAGVAR(ld_shlibs, $1)=yes case $host_os in aix3*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; aix[[4-9]]*) if test ia64 = "$host_cpu"; then # On IA64, the linker does run time linking by default, so we don't # have to do anything special. aix_use_runtimelinking=no exp_sym_flag='-Bexport' no_entry_flag= else aix_use_runtimelinking=no # Test if we are trying to use run time linking or normal # AIX style linking. If -brtl is somewhere in LDFLAGS, we # have runtime linking enabled, and use it for executables. # For shared libraries, we enable/disable runtime linking # depending on the kind of the shared library created - # when "with_aix_soname,aix_use_runtimelinking" is: # "aix,no" lib.a(lib.so.V) shared, rtl:no, for executables # "aix,yes" lib.so shared, rtl:yes, for executables # lib.a static archive # "both,no" lib.so.V(shr.o) shared, rtl:yes # lib.a(lib.so.V) shared, rtl:no, for executables # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a(lib.so.V) shared, rtl:no # "svr4,*" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a static archive case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*) for ld_flag in $LDFLAGS; do case $ld_flag in *-brtl*) aix_use_runtimelinking=yes break ;; esac done if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then # With aix-soname=svr4, we create the lib.so.V shared archives only, # so we don't have lib.a shared libs to link our executables. # We have to force runtime linking in this case. aix_use_runtimelinking=yes LDFLAGS="$LDFLAGS -Wl,-brtl" fi ;; esac exp_sym_flag='-bexport' no_entry_flag='-bnoentry' fi # When large executables or shared objects are built, AIX ld can # have problems creating the table of contents. If linking a library # or program results in "error TOC overflow" add -mminimal-toc to # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS. _LT_TAGVAR(archive_cmds, $1)='' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_TAGVAR(link_all_deplibs, $1)=yes _LT_TAGVAR(file_list_spec, $1)='$wl-f,' case $with_aix_soname,$aix_use_runtimelinking in aix,*) ;; # no import file svr4,* | *,yes) # use import file # The Import File defines what to hardcode. _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no ;; esac if test yes = "$GXX"; then case $host_os in aix4.[[012]]|aix4.[[012]].*) # We only want to do this on AIX 4.2 and lower, the check # below for broken collect2 doesn't work under 4.3+ collect2name=`$CC -print-prog-name=collect2` if test -f "$collect2name" && strings "$collect2name" | $GREP resolve_lib_name >/dev/null then # We have reworked collect2 : else # We have old collect2 _LT_TAGVAR(hardcode_direct, $1)=unsupported # It fails to find uninstalled libraries when the uninstalled # path is not listed in the libpath. Setting hardcode_minus_L # to unsupported forces relinking _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)= fi esac shared_flag='-shared' if test yes = "$aix_use_runtimelinking"; then shared_flag=$shared_flag' $wl-G' fi # Need to ensure runtime linking is disabled for the traditional # shared library, or the linker may eventually find shared libraries # /with/ Import File - we do not want to mix them. shared_flag_aix='-shared' shared_flag_svr4='-shared $wl-G' else # not using gcc if test ia64 = "$host_cpu"; then # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release # chokes on -Wl,-G. The following line is correct: shared_flag='-G' else if test yes = "$aix_use_runtimelinking"; then shared_flag='$wl-G' else shared_flag='$wl-bM:SRE' fi shared_flag_aix='$wl-bM:SRE' shared_flag_svr4='$wl-G' fi fi _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall' # It seems that -bexpall does not export symbols beginning with # underscore (_), so it is better to generate a list of symbols to # export. _LT_TAGVAR(always_export_symbols, $1)=yes if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then # Warning - without using the other runtime loading flags (-brtl), # -berok will link without error, but may produce a broken library. # The "-G" linker flag allows undefined symbols. _LT_TAGVAR(no_undefined_flag, $1)='-bernotok' # Determine the default libpath from the value encoded in an empty # executable. _LT_SYS_MODULE_PATH_AIX([$1]) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag else if test ia64 = "$host_cpu"; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib' _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs" _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols" else # Determine the default libpath from the value encoded in an # empty executable. _LT_SYS_MODULE_PATH_AIX([$1]) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath" # Warning - without using the other run time loading flags, # -berok will link without error, but may produce a broken library. _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok' _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok' if test yes = "$with_gnu_ld"; then # We only use this code for GNU lds that support --whole-archive. _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive' else # Exported symbols can be pulled into shared objects from archives _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience' fi _LT_TAGVAR(archive_cmds_need_lc, $1)=yes _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d' # -brtl affects multiple linker settings, -berok does not and is overridden later compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`' if test svr4 != "$with_aix_soname"; then # This is similar to how AIX traditionally builds its shared # libraries. Need -bnortl late, we may have -brtl in LDFLAGS. _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname' fi if test aix != "$with_aix_soname"; then _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp' else # used by -dlpreopen to get the symbols _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV $output_objdir/$realname.d/$soname $output_objdir' fi _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d' fi fi ;; beos*) if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then _LT_TAGVAR(allow_undefined_flag, $1)=unsupported # Joseph Beckenbach says some releases of gcc # support --undefined. This deserves some investigation. FIXME _LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; chorus*) case $cc_basename in *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac ;; cygwin* | mingw* | pw32* | cegcc*) case $GXX,$cc_basename in ,cl* | no,cl* | ,icl* | no,icl*) # Native MSVC or ICC # hardcode_libdir_flag_spec is actually meaningless, as there is # no search path for DLLs. _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' ' _LT_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_TAGVAR(always_export_symbols, $1)=yes _LT_TAGVAR(file_list_spec, $1)='@' # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=.dll # FIXME: Setting linknames here is a bad hack. _LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames=' _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then cp "$export_symbols" "$output_objdir/$soname.def"; echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp"; else $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp; fi~ $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~ linknames=' # The linker will not automatically build a static lib if we build a DLL. # _LT_TAGVAR(old_archive_from_new_cmds, $1)='true' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes # Don't use ranlib _LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib' _LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~ lt_tool_outputfile="@TOOL_OUTPUT@"~ case $lt_outputfile in *.exe|*.EXE) ;; *) lt_outputfile=$lt_outputfile.exe lt_tool_outputfile=$lt_tool_outputfile.exe ;; esac~ func_to_tool_file "$lt_outputfile"~ if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1; $RM "$lt_outputfile.manifest"; fi' ;; *) # g++ # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless, # as there is no search path for DLLs. _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols' _LT_TAGVAR(allow_undefined_flag, $1)=unsupported _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' # If the export-symbols file already is a .def file, use it as # is; otherwise, prepend EXPORTS... _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then cp $export_symbols $output_objdir/$soname.def; else echo EXPORTS > $output_objdir/$soname.def; cat $export_symbols >> $output_objdir/$soname.def; fi~ $CC -shared -nostdlib $output_objdir/$soname.def $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; darwin* | rhapsody*) _LT_DARWIN_LINKER_FEATURES($1) ;; os2*) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir' _LT_TAGVAR(hardcode_minus_L, $1)=yes _LT_TAGVAR(allow_undefined_flag, $1)=unsupported shrext_cmds=.dll _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ prefix_cmds="$SED"~ if test EXPORTS = "`$SED 1q $export_symbols`"; then prefix_cmds="$prefix_cmds -e 1d"; fi~ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes _LT_TAGVAR(file_list_spec, $1)='@' ;; dgux*) case $cc_basename in ec++*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; ghcx*) # Green Hills C++ Compiler # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac ;; freebsd2.*) # C++ shared libraries reported to be fairly broken before # switch to ELF _LT_TAGVAR(ld_shlibs, $1)=no ;; freebsd-elf*) _LT_TAGVAR(archive_cmds_need_lc, $1)=no ;; freebsd* | dragonfly* | midnightbsd*) # FreeBSD 3 and later use GNU C++ and GNU ld with standard ELF # conventions _LT_TAGVAR(ld_shlibs, $1)=yes ;; haiku*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(link_all_deplibs, $1)=yes ;; hpux9*) _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH, # but as the default # location of the library. case $cc_basename in CC*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; aCC*) _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -b $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $EGREP "\-L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' ;; *) if test yes = "$GXX"; then _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared -nostdlib $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' else # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; hpux10*|hpux11*) if test no = "$with_gnu_ld"; then _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: case $host_cpu in hppa*64*|ia64*) ;; *) _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' ;; esac fi case $host_cpu in hppa*64*|ia64*) _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no ;; *) _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH, # but as the default # location of the library. ;; esac case $cc_basename in CC*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; aCC*) case $host_cpu in hppa*64*) _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; ia64*) _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; esac # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $GREP "\-L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' ;; *) if test yes = "$GXX"; then if test no = "$with_gnu_ld"; then case $host_cpu in hppa*64*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib -fPIC $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; ia64*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' ;; esac fi else # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; interix[[3-9]]*) _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc. # Instead, shared libraries are loaded at an image base (0x10000000 by # default) and relocated if they conflict, which is a slow very memory # consuming and fragmenting process. To avoid this, we pick a random, # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link # time. Moving up from 0x10000000 also allows more sbrk(2) space. _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' ;; irix5* | irix6*) case $cc_basename in CC*) # SGI C++ _LT_TAGVAR(archive_cmds, $1)='$CC -shared -all -multigot $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' # Archives containing C++ object files must be created using # "CC -ar", where "CC" is the IRIX C++ compiler. This is # necessary to make sure instantiated templates are included # in the archive. _LT_TAGVAR(old_archive_cmds, $1)='$CC -ar -WR,-u -o $oldlib $oldobjs' ;; *) if test yes = "$GXX"; then if test no = "$with_gnu_ld"; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' else _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` -o $lib' fi fi _LT_TAGVAR(link_all_deplibs, $1)=yes ;; esac _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: _LT_TAGVAR(inherit_rpath, $1)=yes ;; linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) case $cc_basename in KCC*) # Kuck and Associates, Inc. (KAI) C++ Compiler # KCC will only create a shared library if the output file # ends with ".so" (or ".sl" for HP-UX), so rename the library # to its proper name (with version) after linking. _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib $wl-retain-symbols-file,$export_symbols; mv \$templib $lib' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`$CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1 | $GREP "ld"`; rm -f libconftest$shared_ext; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' # Archives containing C++ object files must be created using # "CC -Bstatic", where "CC" is the KAI C++ compiler. _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' ;; icpc* | ecpc* ) # Intel C++ with_gnu_ld=yes # version 8.0 and above of icpc choke on multiply defined symbols # if we add $predep_objects and $postdep_objects, however 7.1 and # earlier do not add the objects themselves. case `$CC -V 2>&1` in *"Version 7."*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' ;; *) # Version 8.0 or newer tmp_idyn= case $host_cpu in ia64*) tmp_idyn=' -i_dynamic';; esac _LT_TAGVAR(archive_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' ;; esac _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive' ;; pgCC* | pgcpp*) # Portland Group C++ compiler case `$CC -V` in *pgCC\ [[1-5]].* | *pgcpp\ [[1-5]].*) _LT_TAGVAR(prelink_cmds, $1)='tpldir=Template.dir~ rm -rf $tpldir~ $CC --prelink_objects --instantiation_dir $tpldir $objs $libobjs $compile_deplibs~ compile_command="$compile_command `find $tpldir -name \*.o | sort | $NL2SP`"' _LT_TAGVAR(old_archive_cmds, $1)='tpldir=Template.dir~ rm -rf $tpldir~ $CC --prelink_objects --instantiation_dir $tpldir $oldobjs$old_deplibs~ $AR $AR_FLAGS $oldlib$oldobjs$old_deplibs `find $tpldir -name \*.o | sort | $NL2SP`~ $RANLIB $oldlib' _LT_TAGVAR(archive_cmds, $1)='tpldir=Template.dir~ rm -rf $tpldir~ $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~ $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='tpldir=Template.dir~ rm -rf $tpldir~ $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~ $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' ;; *) # Version 6 and above use weak symbols _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' ;; esac _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl--rpath $wl$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' ;; cxx*) # Compaq C++ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib $wl-retain-symbols-file $wl$export_symbols' runpath_var=LD_RUN_PATH _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld .*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "X$list" | $Xsed' ;; xl* | mpixl* | bgxl*) # IBM XL 8.0 on PPC, with GNU ld _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic' _LT_TAGVAR(archive_cmds, $1)='$CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' if test yes = "$supports_anon_versioning"; then _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ echo "local: *; };" >> $output_objdir/$libname.ver~ $CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib' fi ;; *) case `$CC -V 2>&1 | $SED 5q` in *Sun\ C*) # Sun C++ 5.9 _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs' _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file $wl$export_symbols' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' _LT_TAGVAR(compiler_needs_object, $1)=yes # Not sure whether something based on # $CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1 # would be better. output_verbose_link_cmd='func_echo_all' # Archives containing C++ object files must be created using # "CC -xar", where "CC" is the Sun C++ compiler. This is # necessary to make sure instantiated templates are included # in the archive. _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs' ;; esac ;; esac ;; lynxos*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; m88k*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; mvs*) case $cc_basename in cxx*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac ;; netbsd*) if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $predep_objects $libobjs $deplibs $postdep_objects $linker_flags' wlarc= _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no fi # Workaround some broken pre-1.5 toolchains output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP conftest.$objext | $SED -e "s:-lgcc -lc -lgcc::"' ;; *nto* | *qnx*) _LT_TAGVAR(ld_shlibs, $1)=yes ;; openbsd* | bitrig*) if test -f /usr/libexec/ld.so; then _LT_TAGVAR(hardcode_direct, $1)=yes _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=yes _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`"; then _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file,$export_symbols -o $lib' _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E' _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' fi output_verbose_link_cmd=func_echo_all else _LT_TAGVAR(ld_shlibs, $1)=no fi ;; osf3* | osf4* | osf5*) case $cc_basename in KCC*) # Kuck and Associates, Inc. (KAI) C++ Compiler # KCC will only create a shared library if the output file # ends with ".so" (or ".sl" for HP-UX), so rename the library # to its proper name (with version) after linking. _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo "$lib" | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: # Archives containing C++ object files must be created using # the KAI C++ compiler. case $host in osf3*) _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' ;; *) _LT_TAGVAR(old_archive_cmds, $1)='$CC -o $oldlib $oldobjs' ;; esac ;; RCC*) # Rational C++ 2.4.1 # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; cxx*) case $host in osf3*) _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $soname `test -n "$verstring" && func_echo_all "$wl-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' ;; *) _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*' _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done~ echo "-hidden">> $lib.exp~ $CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname $wl-input $wl$lib.exp `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~ $RM $lib.exp' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir' ;; esac _LT_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. # # There doesn't appear to be a way to prevent this compiler from # explicitly linking system object files so we need to strip them # from the output so that they don't get included in the library # dependencies. output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld" | $GREP -v "ld:"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld.*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"' ;; *) if test yes,no = "$GXX,$with_gnu_ld"; then _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*' case $host in osf3*) _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' ;; esac _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=: # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"' else # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no fi ;; esac ;; psos*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; sunos4*) case $cc_basename in CC*) # Sun C++ 4.x # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; lcc*) # Lucid # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac ;; solaris*) case $cc_basename in CC* | sunCC*) # Sun C++ 4.2, 5.x and Centerline C++ _LT_TAGVAR(archive_cmds_need_lc,$1)=yes _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs' _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -G$allow_undefined_flag $wl-M $wl$lib.exp -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp' _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir' _LT_TAGVAR(hardcode_shlibpath_var, $1)=no case $host_os in solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; *) # The compiler driver will combine and reorder linker options, # but understands '-z linker_flag'. # Supported since Solaris 2.6 (maybe 2.5.1?) _LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract' ;; esac _LT_TAGVAR(link_all_deplibs, $1)=yes output_verbose_link_cmd='func_echo_all' # Archives containing C++ object files must be created using # "CC -xar", where "CC" is the Sun C++ compiler. This is # necessary to make sure instantiated templates are included # in the archive. _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs' ;; gcx*) # Green Hills C++ Compiler _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib' # The C++ compiler must be used to create the archive. _LT_TAGVAR(old_archive_cmds, $1)='$CC $LDFLAGS -archive -o $oldlib $oldobjs' ;; *) # GNU C++ compiler with Solaris linker if test yes,no = "$GXX,$with_gnu_ld"; then _LT_TAGVAR(no_undefined_flag, $1)=' $wl-z ${wl}defs' if $CC --version | $GREP -v '^2\.7' > /dev/null; then _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -shared $pic_flag -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"' else # g++ 2.7 appears to require '-G' NOT '-shared' on this # platform. _LT_TAGVAR(archive_cmds, $1)='$CC -G -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib' _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -G -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp' # Commands to make compiler produce verbose output that lists # what "hidden" libraries, object files and flags are used when # linking a shared library. output_verbose_link_cmd='$CC -G $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"' fi _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $wl$libdir' case $host_os in solaris2.[[0-5]] | solaris2.[[0-5]].*) ;; *) _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract' ;; esac fi ;; esac ;; sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*) _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no runpath_var='LD_RUN_PATH' case $cc_basename in CC*) _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' ;; esac ;; sysv5* | sco3.2v5* | sco5v6*) # Note: We CANNOT use -z defs as we might desire, because we do not # link with -lc, and that would cause any symbols used from libc to # always be unresolved, which means just about no library would # ever link correctly. If we're not using GNU ld we use -z text # though, which does catch some bad symbols but isn't as heavy-handed # as -z defs. _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text' _LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs' _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(hardcode_shlibpath_var, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir' _LT_TAGVAR(hardcode_libdir_separator, $1)=':' _LT_TAGVAR(link_all_deplibs, $1)=yes _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport' runpath_var='LD_RUN_PATH' case $cc_basename in CC*) _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(old_archive_cmds, $1)='$CC -Tprelink_objects $oldobjs~ '"$_LT_TAGVAR(old_archive_cmds, $1)" _LT_TAGVAR(reload_cmds, $1)='$CC -Tprelink_objects $reload_objs~ '"$_LT_TAGVAR(reload_cmds, $1)" ;; *) _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' ;; esac ;; tandem*) case $cc_basename in NCC*) # NonStop-UX NCC 3.20 # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac ;; vxworks*) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; *) # FIXME: insert proper C++ library support _LT_TAGVAR(ld_shlibs, $1)=no ;; esac AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)]) test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no _LT_TAGVAR(GCC, $1)=$GXX _LT_TAGVAR(LD, $1)=$LD ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... _LT_SYS_HIDDEN_LIBDEPS($1) _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_SYS_DYNAMIC_LINKER($1) _LT_LINKER_HARDCODE_LIBPATH($1) _LT_CONFIG($1) fi # test -n "$compiler" CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS LDCXX=$LD LD=$lt_save_LD GCC=$lt_save_GCC with_gnu_ld=$lt_save_with_gnu_ld lt_cv_path_LDCXX=$lt_cv_path_LD lt_cv_path_LD=$lt_save_path_LD lt_cv_prog_gnu_ldcxx=$lt_cv_prog_gnu_ld lt_cv_prog_gnu_ld=$lt_save_with_gnu_ld fi # test yes != "$_lt_caught_CXX_error" AC_LANG_POP ])# _LT_LANG_CXX_CONFIG # _LT_FUNC_STRIPNAME_CNF # ---------------------- # func_stripname_cnf prefix suffix name # strip PREFIX and SUFFIX off of NAME. # PREFIX and SUFFIX must not contain globbing or regex special # characters, hashes, percent signs, but SUFFIX may contain a leading # dot (in which case that matches only a dot). # # This function is identical to the (non-XSI) version of func_stripname, # except this one can be used by m4 code that may be executed by configure, # rather than the libtool script. m4_defun([_LT_FUNC_STRIPNAME_CNF],[dnl AC_REQUIRE([_LT_DECL_SED]) AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH]) func_stripname_cnf () { case @S|@2 in .*) func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%\\\\@S|@2\$%%"`;; *) func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%@S|@2\$%%"`;; esac } # func_stripname_cnf ])# _LT_FUNC_STRIPNAME_CNF # _LT_SYS_HIDDEN_LIBDEPS([TAGNAME]) # --------------------------------- # Figure out "hidden" library dependencies from verbose # compiler output when linking a shared library. # Parse the compiler output and extract the necessary # objects, libraries and library flags. m4_defun([_LT_SYS_HIDDEN_LIBDEPS], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl AC_REQUIRE([_LT_FUNC_STRIPNAME_CNF])dnl # Dependencies to place before and after the object being linked: _LT_TAGVAR(predep_objects, $1)= _LT_TAGVAR(postdep_objects, $1)= _LT_TAGVAR(predeps, $1)= _LT_TAGVAR(postdeps, $1)= _LT_TAGVAR(compiler_lib_search_path, $1)= dnl we can't use the lt_simple_compile_test_code here, dnl because it contains code intended for an executable, dnl not a library. It's possible we should let each dnl tag define a new lt_????_link_test_code variable, dnl but it's only used here... m4_if([$1], [], [cat > conftest.$ac_ext <<_LT_EOF int a; void foo (void) { a = 0; } _LT_EOF ], [$1], [CXX], [cat > conftest.$ac_ext <<_LT_EOF class Foo { public: Foo (void) { a = 0; } private: int a; }; _LT_EOF ], [$1], [F77], [cat > conftest.$ac_ext <<_LT_EOF subroutine foo implicit none integer*4 a a=0 return end _LT_EOF ], [$1], [FC], [cat > conftest.$ac_ext <<_LT_EOF subroutine foo implicit none integer a a=0 return end _LT_EOF ], [$1], [GCJ], [cat > conftest.$ac_ext <<_LT_EOF public class foo { private int a; public void bar (void) { a = 0; } }; _LT_EOF ], [$1], [GO], [cat > conftest.$ac_ext <<_LT_EOF package foo func foo() { } _LT_EOF ]) _lt_libdeps_save_CFLAGS=$CFLAGS case "$CC $CFLAGS " in #( *\ -flto*\ *) CFLAGS="$CFLAGS -fno-lto" ;; *\ -fwhopr*\ *) CFLAGS="$CFLAGS -fno-whopr" ;; *\ -fuse-linker-plugin*\ *) CFLAGS="$CFLAGS -fno-use-linker-plugin" ;; esac dnl Parse the compiler output and extract the necessary dnl objects, libraries and library flags. if AC_TRY_EVAL(ac_compile); then # Parse the compiler output and extract the necessary # objects, libraries and library flags. # Sentinel used to keep track of whether or not we are before # the conftest object file. pre_test_object_deps_done=no for p in `eval "$output_verbose_link_cmd"`; do case $prev$p in -L* | -R* | -l*) # Some compilers place space between "-{L,R}" and the path. # Remove the space. if test x-L = "$p" || test x-R = "$p"; then prev=$p continue fi # Expand the sysroot to ease extracting the directories later. if test -z "$prev"; then case $p in -L*) func_stripname_cnf '-L' '' "$p"; prev=-L; p=$func_stripname_result ;; -R*) func_stripname_cnf '-R' '' "$p"; prev=-R; p=$func_stripname_result ;; -l*) func_stripname_cnf '-l' '' "$p"; prev=-l; p=$func_stripname_result ;; esac fi case $p in =*) func_stripname_cnf '=' '' "$p"; p=$lt_sysroot$func_stripname_result ;; esac if test no = "$pre_test_object_deps_done"; then case $prev in -L | -R) # Internal compiler library paths should come after those # provided the user. The postdeps already come after the # user supplied libs so there is no need to process them. if test -z "$_LT_TAGVAR(compiler_lib_search_path, $1)"; then _LT_TAGVAR(compiler_lib_search_path, $1)=$prev$p else _LT_TAGVAR(compiler_lib_search_path, $1)="${_LT_TAGVAR(compiler_lib_search_path, $1)} $prev$p" fi ;; # The "-l" case would never come before the object being # linked, so don't bother handling this case. esac else if test -z "$_LT_TAGVAR(postdeps, $1)"; then _LT_TAGVAR(postdeps, $1)=$prev$p else _LT_TAGVAR(postdeps, $1)="${_LT_TAGVAR(postdeps, $1)} $prev$p" fi fi prev= ;; *.lto.$objext) ;; # Ignore GCC LTO objects *.$objext) # This assumes that the test object file only shows up # once in the compiler output. if test "$p" = "conftest.$objext"; then pre_test_object_deps_done=yes continue fi if test no = "$pre_test_object_deps_done"; then if test -z "$_LT_TAGVAR(predep_objects, $1)"; then _LT_TAGVAR(predep_objects, $1)=$p else _LT_TAGVAR(predep_objects, $1)="$_LT_TAGVAR(predep_objects, $1) $p" fi else if test -z "$_LT_TAGVAR(postdep_objects, $1)"; then _LT_TAGVAR(postdep_objects, $1)=$p else _LT_TAGVAR(postdep_objects, $1)="$_LT_TAGVAR(postdep_objects, $1) $p" fi fi ;; *) ;; # Ignore the rest. esac done # Clean up. rm -f a.out a.exe else echo "libtool.m4: error: problem compiling $1 test program" fi $RM -f confest.$objext CFLAGS=$_lt_libdeps_save_CFLAGS # PORTME: override above test on systems where it is broken m4_if([$1], [CXX], [case $host_os in interix[[3-9]]*) # Interix 3.5 installs completely hosed .la files for C++, so rather than # hack all around it, let's just trust "g++" to DTRT. _LT_TAGVAR(predep_objects,$1)= _LT_TAGVAR(postdep_objects,$1)= _LT_TAGVAR(postdeps,$1)= ;; esac ]) case " $_LT_TAGVAR(postdeps, $1) " in *" -lc "*) _LT_TAGVAR(archive_cmds_need_lc, $1)=no ;; esac _LT_TAGVAR(compiler_lib_search_dirs, $1)= if test -n "${_LT_TAGVAR(compiler_lib_search_path, $1)}"; then _LT_TAGVAR(compiler_lib_search_dirs, $1)=`echo " ${_LT_TAGVAR(compiler_lib_search_path, $1)}" | $SED -e 's! -L! !g' -e 's!^ !!'` fi _LT_TAGDECL([], [compiler_lib_search_dirs], [1], [The directories searched by this compiler when creating a shared library]) _LT_TAGDECL([], [predep_objects], [1], [Dependencies to place before and after the objects being linked to create a shared library]) _LT_TAGDECL([], [postdep_objects], [1]) _LT_TAGDECL([], [predeps], [1]) _LT_TAGDECL([], [postdeps], [1]) _LT_TAGDECL([], [compiler_lib_search_path], [1], [The library search path used internally by the compiler when linking a shared library]) ])# _LT_SYS_HIDDEN_LIBDEPS # _LT_LANG_F77_CONFIG([TAG]) # -------------------------- # Ensure that the configuration variables for a Fortran 77 compiler are # suitably defined. These variables are subsequently used by _LT_CONFIG # to write the compiler configuration to 'libtool'. m4_defun([_LT_LANG_F77_CONFIG], [AC_LANG_PUSH(Fortran 77) if test -z "$F77" || test no = "$F77"; then _lt_disable_F77=yes fi _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(allow_undefined_flag, $1)= _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(archive_expsym_cmds, $1)= _LT_TAGVAR(export_dynamic_flag_spec, $1)= _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_TAGVAR(hardcode_libdir_separator, $1)= _LT_TAGVAR(hardcode_minus_L, $1)=no _LT_TAGVAR(hardcode_automatic, $1)=no _LT_TAGVAR(inherit_rpath, $1)=no _LT_TAGVAR(module_cmds, $1)= _LT_TAGVAR(module_expsym_cmds, $1)= _LT_TAGVAR(link_all_deplibs, $1)=unknown _LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_TAGVAR(reload_flag, $1)=$reload_flag _LT_TAGVAR(reload_cmds, $1)=$reload_cmds _LT_TAGVAR(no_undefined_flag, $1)= _LT_TAGVAR(whole_archive_flag_spec, $1)= _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no # Source file extension for f77 test sources. ac_ext=f # Object file extension for compiled f77 test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # No sense in running all these tests if we already determined that # the F77 compiler isn't working. Some variables (like enable_shared) # are currently assumed to apply to all compilers on this platform, # and will be corrupted by setting them based on a non-working compiler. if test yes != "$_lt_disable_F77"; then # Code to be used in simple compile tests lt_simple_compile_test_code="\ subroutine t return end " # Code to be used in simple link tests lt_simple_link_test_code="\ program t end " # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_GCC=$GCC lt_save_CFLAGS=$CFLAGS CC=${F77-"f77"} CFLAGS=$FFLAGS compiler=$CC _LT_TAGVAR(compiler, $1)=$CC _LT_CC_BASENAME([$compiler]) GCC=$G77 if test -n "$compiler"; then AC_MSG_CHECKING([if libtool supports shared libraries]) AC_MSG_RESULT([$can_build_shared]) AC_MSG_CHECKING([whether to build shared libraries]) test no = "$can_build_shared" && enable_shared=no # On AIX, shared libraries and static libraries use the same namespace, and # are all built from PIC. case $host_os in aix3*) test yes = "$enable_shared" && enable_static=no if test -n "$RANLIB"; then archive_cmds="$archive_cmds~\$RANLIB \$lib" postinstall_cmds='$RANLIB $lib' fi ;; aix[[4-9]]*) if test ia64 != "$host_cpu"; then case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in yes,aix,yes) ;; # shared object as lib.so file only yes,svr4,*) ;; # shared object as lib.so archive member only yes,*) enable_static=no ;; # shared object in lib.a archive as well esac fi ;; esac AC_MSG_RESULT([$enable_shared]) AC_MSG_CHECKING([whether to build static libraries]) # Make sure either enable_shared or enable_static is yes. test yes = "$enable_shared" || enable_static=yes AC_MSG_RESULT([$enable_static]) _LT_TAGVAR(GCC, $1)=$G77 _LT_TAGVAR(LD, $1)=$LD ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_SYS_DYNAMIC_LINKER($1) _LT_LINKER_HARDCODE_LIBPATH($1) _LT_CONFIG($1) fi # test -n "$compiler" GCC=$lt_save_GCC CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS fi # test yes != "$_lt_disable_F77" AC_LANG_POP ])# _LT_LANG_F77_CONFIG # _LT_LANG_FC_CONFIG([TAG]) # ------------------------- # Ensure that the configuration variables for a Fortran compiler are # suitably defined. These variables are subsequently used by _LT_CONFIG # to write the compiler configuration to 'libtool'. m4_defun([_LT_LANG_FC_CONFIG], [AC_LANG_PUSH(Fortran) if test -z "$FC" || test no = "$FC"; then _lt_disable_FC=yes fi _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(allow_undefined_flag, $1)= _LT_TAGVAR(always_export_symbols, $1)=no _LT_TAGVAR(archive_expsym_cmds, $1)= _LT_TAGVAR(export_dynamic_flag_spec, $1)= _LT_TAGVAR(hardcode_direct, $1)=no _LT_TAGVAR(hardcode_direct_absolute, $1)=no _LT_TAGVAR(hardcode_libdir_flag_spec, $1)= _LT_TAGVAR(hardcode_libdir_separator, $1)= _LT_TAGVAR(hardcode_minus_L, $1)=no _LT_TAGVAR(hardcode_automatic, $1)=no _LT_TAGVAR(inherit_rpath, $1)=no _LT_TAGVAR(module_cmds, $1)= _LT_TAGVAR(module_expsym_cmds, $1)= _LT_TAGVAR(link_all_deplibs, $1)=unknown _LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_TAGVAR(reload_flag, $1)=$reload_flag _LT_TAGVAR(reload_cmds, $1)=$reload_cmds _LT_TAGVAR(no_undefined_flag, $1)= _LT_TAGVAR(whole_archive_flag_spec, $1)= _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no # Source file extension for fc test sources. ac_ext=${ac_fc_srcext-f} # Object file extension for compiled fc test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # No sense in running all these tests if we already determined that # the FC compiler isn't working. Some variables (like enable_shared) # are currently assumed to apply to all compilers on this platform, # and will be corrupted by setting them based on a non-working compiler. if test yes != "$_lt_disable_FC"; then # Code to be used in simple compile tests lt_simple_compile_test_code="\ subroutine t return end " # Code to be used in simple link tests lt_simple_link_test_code="\ program t end " # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_GCC=$GCC lt_save_CFLAGS=$CFLAGS CC=${FC-"f95"} CFLAGS=$FCFLAGS compiler=$CC GCC=$ac_cv_fc_compiler_gnu _LT_TAGVAR(compiler, $1)=$CC _LT_CC_BASENAME([$compiler]) if test -n "$compiler"; then AC_MSG_CHECKING([if libtool supports shared libraries]) AC_MSG_RESULT([$can_build_shared]) AC_MSG_CHECKING([whether to build shared libraries]) test no = "$can_build_shared" && enable_shared=no # On AIX, shared libraries and static libraries use the same namespace, and # are all built from PIC. case $host_os in aix3*) test yes = "$enable_shared" && enable_static=no if test -n "$RANLIB"; then archive_cmds="$archive_cmds~\$RANLIB \$lib" postinstall_cmds='$RANLIB $lib' fi ;; aix[[4-9]]*) if test ia64 != "$host_cpu"; then case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in yes,aix,yes) ;; # shared object as lib.so file only yes,svr4,*) ;; # shared object as lib.so archive member only yes,*) enable_static=no ;; # shared object in lib.a archive as well esac fi ;; esac AC_MSG_RESULT([$enable_shared]) AC_MSG_CHECKING([whether to build static libraries]) # Make sure either enable_shared or enable_static is yes. test yes = "$enable_shared" || enable_static=yes AC_MSG_RESULT([$enable_static]) _LT_TAGVAR(GCC, $1)=$ac_cv_fc_compiler_gnu _LT_TAGVAR(LD, $1)=$LD ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... _LT_SYS_HIDDEN_LIBDEPS($1) _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_SYS_DYNAMIC_LINKER($1) _LT_LINKER_HARDCODE_LIBPATH($1) _LT_CONFIG($1) fi # test -n "$compiler" GCC=$lt_save_GCC CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS fi # test yes != "$_lt_disable_FC" AC_LANG_POP ])# _LT_LANG_FC_CONFIG # _LT_LANG_GCJ_CONFIG([TAG]) # -------------------------- # Ensure that the configuration variables for the GNU Java Compiler compiler # are suitably defined. These variables are subsequently used by _LT_CONFIG # to write the compiler configuration to 'libtool'. m4_defun([_LT_LANG_GCJ_CONFIG], [AC_REQUIRE([LT_PROG_GCJ])dnl AC_LANG_SAVE # Source file extension for Java test sources. ac_ext=java # Object file extension for compiled Java test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # Code to be used in simple compile tests lt_simple_compile_test_code="class foo {}" # Code to be used in simple link tests lt_simple_link_test_code='public class conftest { public static void main(String[[]] argv) {}; }' # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_CFLAGS=$CFLAGS lt_save_GCC=$GCC GCC=yes CC=${GCJ-"gcj"} CFLAGS=$GCJFLAGS compiler=$CC _LT_TAGVAR(compiler, $1)=$CC _LT_TAGVAR(LD, $1)=$LD _LT_CC_BASENAME([$compiler]) # GCJ did not exist at the time GCC didn't implicitly link libc in. _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_TAGVAR(reload_flag, $1)=$reload_flag _LT_TAGVAR(reload_cmds, $1)=$reload_cmds ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... if test -n "$compiler"; then _LT_COMPILER_NO_RTTI($1) _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_LINKER_HARDCODE_LIBPATH($1) _LT_CONFIG($1) fi AC_LANG_RESTORE GCC=$lt_save_GCC CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS ])# _LT_LANG_GCJ_CONFIG # _LT_LANG_GO_CONFIG([TAG]) # -------------------------- # Ensure that the configuration variables for the GNU Go compiler # are suitably defined. These variables are subsequently used by _LT_CONFIG # to write the compiler configuration to 'libtool'. m4_defun([_LT_LANG_GO_CONFIG], [AC_REQUIRE([LT_PROG_GO])dnl AC_LANG_SAVE # Source file extension for Go test sources. ac_ext=go # Object file extension for compiled Go test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # Code to be used in simple compile tests lt_simple_compile_test_code="package main; func main() { }" # Code to be used in simple link tests lt_simple_link_test_code='package main; func main() { }' # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_CFLAGS=$CFLAGS lt_save_GCC=$GCC GCC=yes CC=${GOC-"gccgo"} CFLAGS=$GOFLAGS compiler=$CC _LT_TAGVAR(compiler, $1)=$CC _LT_TAGVAR(LD, $1)=$LD _LT_CC_BASENAME([$compiler]) # Go did not exist at the time GCC didn't implicitly link libc in. _LT_TAGVAR(archive_cmds_need_lc, $1)=no _LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds _LT_TAGVAR(reload_flag, $1)=$reload_flag _LT_TAGVAR(reload_cmds, $1)=$reload_cmds ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... if test -n "$compiler"; then _LT_COMPILER_NO_RTTI($1) _LT_COMPILER_PIC($1) _LT_COMPILER_C_O($1) _LT_COMPILER_FILE_LOCKS($1) _LT_LINKER_SHLIBS($1) _LT_LINKER_HARDCODE_LIBPATH($1) _LT_CONFIG($1) fi AC_LANG_RESTORE GCC=$lt_save_GCC CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS ])# _LT_LANG_GO_CONFIG # _LT_LANG_RC_CONFIG([TAG]) # ------------------------- # Ensure that the configuration variables for the Windows resource compiler # are suitably defined. These variables are subsequently used by _LT_CONFIG # to write the compiler configuration to 'libtool'. m4_defun([_LT_LANG_RC_CONFIG], [AC_REQUIRE([LT_PROG_RC])dnl AC_LANG_SAVE # Source file extension for RC test sources. ac_ext=rc # Object file extension for compiled RC test sources. objext=o _LT_TAGVAR(objext, $1)=$objext # Code to be used in simple compile tests lt_simple_compile_test_code='sample MENU { MENUITEM "&Soup", 100, CHECKED }' # Code to be used in simple link tests lt_simple_link_test_code=$lt_simple_compile_test_code # ltmain only uses $CC for tagged configurations so make sure $CC is set. _LT_TAG_COMPILER # save warnings/boilerplate of simple test code _LT_COMPILER_BOILERPLATE _LT_LINKER_BOILERPLATE # Allow CC to be a program name with arguments. lt_save_CC=$CC lt_save_CFLAGS=$CFLAGS lt_save_GCC=$GCC GCC= CC=${RC-"windres"} CFLAGS= compiler=$CC _LT_TAGVAR(compiler, $1)=$CC _LT_CC_BASENAME([$compiler]) _LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes if test -n "$compiler"; then : _LT_CONFIG($1) fi GCC=$lt_save_GCC AC_LANG_RESTORE CC=$lt_save_CC CFLAGS=$lt_save_CFLAGS ])# _LT_LANG_RC_CONFIG # LT_PROG_GCJ # ----------- AC_DEFUN([LT_PROG_GCJ], [m4_ifdef([AC_PROG_GCJ], [AC_PROG_GCJ], [m4_ifdef([A][M_PROG_GCJ], [A][M_PROG_GCJ], [AC_CHECK_TOOL(GCJ, gcj,) test set = "${GCJFLAGS+set}" || GCJFLAGS="-g -O2" AC_SUBST(GCJFLAGS)])])[]dnl ]) # Old name: AU_ALIAS([LT_AC_PROG_GCJ], [LT_PROG_GCJ]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([LT_AC_PROG_GCJ], []) # LT_PROG_GO # ---------- AC_DEFUN([LT_PROG_GO], [AC_CHECK_TOOL(GOC, gccgo,) ]) # LT_PROG_RC # ---------- AC_DEFUN([LT_PROG_RC], [AC_CHECK_TOOL(RC, windres,) ]) # Old name: AU_ALIAS([LT_AC_PROG_RC], [LT_PROG_RC]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([LT_AC_PROG_RC], []) # _LT_DECL_EGREP # -------------- # If we don't have a new enough Autoconf to choose the best grep # available, choose the one first in the user's PATH. m4_defun([_LT_DECL_EGREP], [AC_REQUIRE([AC_PROG_EGREP])dnl AC_REQUIRE([AC_PROG_FGREP])dnl test -z "$GREP" && GREP=grep _LT_DECL([], [GREP], [1], [A grep program that handles long lines]) _LT_DECL([], [EGREP], [1], [An ERE matcher]) _LT_DECL([], [FGREP], [1], [A literal string matcher]) dnl Non-bleeding-edge autoconf doesn't subst GREP, so do it here too AC_SUBST([GREP]) ]) # _LT_DECL_OBJDUMP # -------------- # If we don't have a new enough Autoconf to choose the best objdump # available, choose the one first in the user's PATH. m4_defun([_LT_DECL_OBJDUMP], [AC_CHECK_TOOL(OBJDUMP, objdump, false) test -z "$OBJDUMP" && OBJDUMP=objdump _LT_DECL([], [OBJDUMP], [1], [An object symbol dumper]) AC_SUBST([OBJDUMP]) ]) # _LT_DECL_DLLTOOL # ---------------- # Ensure DLLTOOL variable is set. m4_defun([_LT_DECL_DLLTOOL], [AC_CHECK_TOOL(DLLTOOL, dlltool, false) test -z "$DLLTOOL" && DLLTOOL=dlltool _LT_DECL([], [DLLTOOL], [1], [DLL creation program]) AC_SUBST([DLLTOOL]) ]) # _LT_DECL_FILECMD # ---------------- # Check for a file(cmd) program that can be used to detect file type and magic m4_defun([_LT_DECL_FILECMD], [AC_CHECK_TOOL([FILECMD], [file], [:]) _LT_DECL([], [FILECMD], [1], [A file(cmd) program that detects file types]) ])# _LD_DECL_FILECMD # _LT_DECL_SED # ------------ # Check for a fully-functional sed program, that truncates # as few characters as possible. Prefer GNU sed if found. m4_defun([_LT_DECL_SED], [AC_PROG_SED test -z "$SED" && SED=sed Xsed="$SED -e 1s/^X//" _LT_DECL([], [SED], [1], [A sed program that does not truncate output]) _LT_DECL([], [Xsed], ["\$SED -e 1s/^X//"], [Sed that helps us avoid accidentally triggering echo(1) options like -n]) ])# _LT_DECL_SED m4_ifndef([AC_PROG_SED], [ ############################################################ # NOTE: This macro has been submitted for inclusion into # # GNU Autoconf as AC_PROG_SED. When it is available in # # a released version of Autoconf we should remove this # # macro and use it instead. # ############################################################ m4_defun([AC_PROG_SED], [AC_MSG_CHECKING([for a sed that does not truncate output]) AC_CACHE_VAL(lt_cv_path_SED, [# Loop through the user's path and test for sed and gsed. # Then use that list of sed's as ones to test for truncation. as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS test -z "$as_dir" && as_dir=. for lt_ac_prog in sed gsed; do for ac_exec_ext in '' $ac_executable_extensions; do if $as_executable_p "$as_dir/$lt_ac_prog$ac_exec_ext"; then lt_ac_sed_list="$lt_ac_sed_list $as_dir/$lt_ac_prog$ac_exec_ext" fi done done done IFS=$as_save_IFS lt_ac_max=0 lt_ac_count=0 # Add /usr/xpg4/bin/sed as it is typically found on Solaris # along with /bin/sed that truncates output. for lt_ac_sed in $lt_ac_sed_list /usr/xpg4/bin/sed; do test ! -f "$lt_ac_sed" && continue cat /dev/null > conftest.in lt_ac_count=0 echo $ECHO_N "0123456789$ECHO_C" >conftest.in # Check for GNU sed and select it if it is found. if "$lt_ac_sed" --version 2>&1 < /dev/null | grep 'GNU' > /dev/null; then lt_cv_path_SED=$lt_ac_sed break fi while true; do cat conftest.in conftest.in >conftest.tmp mv conftest.tmp conftest.in cp conftest.in conftest.nl echo >>conftest.nl $lt_ac_sed -e 's/a$//' < conftest.nl >conftest.out || break cmp -s conftest.out conftest.nl || break # 10000 chars as input seems more than enough test 10 -lt "$lt_ac_count" && break lt_ac_count=`expr $lt_ac_count + 1` if test "$lt_ac_count" -gt "$lt_ac_max"; then lt_ac_max=$lt_ac_count lt_cv_path_SED=$lt_ac_sed fi done done ]) SED=$lt_cv_path_SED AC_SUBST([SED]) AC_MSG_RESULT([$SED]) ])#AC_PROG_SED ])#m4_ifndef # Old name: AU_ALIAS([LT_AC_PROG_SED], [AC_PROG_SED]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([LT_AC_PROG_SED], []) # _LT_CHECK_SHELL_FEATURES # ------------------------ # Find out whether the shell is Bourne or XSI compatible, # or has some other useful features. m4_defun([_LT_CHECK_SHELL_FEATURES], [if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then lt_unset=unset else lt_unset=false fi _LT_DECL([], [lt_unset], [0], [whether the shell understands "unset"])dnl # test EBCDIC or ASCII case `echo X|tr X '\101'` in A) # ASCII based system # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr lt_SP2NL='tr \040 \012' lt_NL2SP='tr \015\012 \040\040' ;; *) # EBCDIC based system lt_SP2NL='tr \100 \n' lt_NL2SP='tr \r\n \100\100' ;; esac _LT_DECL([SP2NL], [lt_SP2NL], [1], [turn spaces into newlines])dnl _LT_DECL([NL2SP], [lt_NL2SP], [1], [turn newlines into spaces])dnl ])# _LT_CHECK_SHELL_FEATURES # _LT_PATH_CONVERSION_FUNCTIONS # ----------------------------- # Determine what file name conversion functions should be used by # func_to_host_file (and, implicitly, by func_to_host_path). These are needed # for certain cross-compile configurations and native mingw. m4_defun([_LT_PATH_CONVERSION_FUNCTIONS], [AC_REQUIRE([AC_CANONICAL_HOST])dnl AC_REQUIRE([AC_CANONICAL_BUILD])dnl AC_MSG_CHECKING([how to convert $build file names to $host format]) AC_CACHE_VAL(lt_cv_to_host_file_cmd, [case $host in *-*-mingw* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32 ;; *-*-cygwin* ) lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32 ;; * ) # otherwise, assume *nix lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32 ;; esac ;; *-*-cygwin* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin ;; *-*-cygwin* ) lt_cv_to_host_file_cmd=func_convert_file_noop ;; * ) # otherwise, assume *nix lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin ;; esac ;; * ) # unhandled hosts (and "normal" native builds) lt_cv_to_host_file_cmd=func_convert_file_noop ;; esac ]) to_host_file_cmd=$lt_cv_to_host_file_cmd AC_MSG_RESULT([$lt_cv_to_host_file_cmd]) _LT_DECL([to_host_file_cmd], [lt_cv_to_host_file_cmd], [0], [convert $build file names to $host format])dnl AC_MSG_CHECKING([how to convert $build file names to toolchain format]) AC_CACHE_VAL(lt_cv_to_tool_file_cmd, [#assume ordinary cross tools, or native build. lt_cv_to_tool_file_cmd=func_convert_file_noop case $host in *-*-mingw* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32 ;; esac ;; esac ]) to_tool_file_cmd=$lt_cv_to_tool_file_cmd AC_MSG_RESULT([$lt_cv_to_tool_file_cmd]) _LT_DECL([to_tool_file_cmd], [lt_cv_to_tool_file_cmd], [0], [convert $build files to toolchain format])dnl ])# _LT_PATH_CONVERSION_FUNCTIONS tpm2-pkcs11-1.9.1/m4/ltoptions.m40000644000175100017510000003427514674407103012025 # Helper functions for option handling. -*- Autoconf -*- # # Copyright (C) 2004-2005, 2007-2009, 2011-2019, 2021-2022 Free # Software Foundation, Inc. # Written by Gary V. Vaughan, 2004 # # This file is free software; the Free Software Foundation gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. # serial 8 ltoptions.m4 # This is to help aclocal find these macros, as it can't see m4_define. AC_DEFUN([LTOPTIONS_VERSION], [m4_if([1])]) # _LT_MANGLE_OPTION(MACRO-NAME, OPTION-NAME) # ------------------------------------------ m4_define([_LT_MANGLE_OPTION], [[_LT_OPTION_]m4_bpatsubst($1__$2, [[^a-zA-Z0-9_]], [_])]) # _LT_SET_OPTION(MACRO-NAME, OPTION-NAME) # --------------------------------------- # Set option OPTION-NAME for macro MACRO-NAME, and if there is a # matching handler defined, dispatch to it. Other OPTION-NAMEs are # saved as a flag. m4_define([_LT_SET_OPTION], [m4_define(_LT_MANGLE_OPTION([$1], [$2]))dnl m4_ifdef(_LT_MANGLE_DEFUN([$1], [$2]), _LT_MANGLE_DEFUN([$1], [$2]), [m4_warning([Unknown $1 option '$2'])])[]dnl ]) # _LT_IF_OPTION(MACRO-NAME, OPTION-NAME, IF-SET, [IF-NOT-SET]) # ------------------------------------------------------------ # Execute IF-SET if OPTION is set, IF-NOT-SET otherwise. m4_define([_LT_IF_OPTION], [m4_ifdef(_LT_MANGLE_OPTION([$1], [$2]), [$3], [$4])]) # _LT_UNLESS_OPTIONS(MACRO-NAME, OPTION-LIST, IF-NOT-SET) # ------------------------------------------------------- # Execute IF-NOT-SET unless all options in OPTION-LIST for MACRO-NAME # are set. m4_define([_LT_UNLESS_OPTIONS], [m4_foreach([_LT_Option], m4_split(m4_normalize([$2])), [m4_ifdef(_LT_MANGLE_OPTION([$1], _LT_Option), [m4_define([$0_found])])])[]dnl m4_ifdef([$0_found], [m4_undefine([$0_found])], [$3 ])[]dnl ]) # _LT_SET_OPTIONS(MACRO-NAME, OPTION-LIST) # ---------------------------------------- # OPTION-LIST is a space-separated list of Libtool options associated # with MACRO-NAME. If any OPTION has a matching handler declared with # LT_OPTION_DEFINE, dispatch to that macro; otherwise complain about # the unknown option and exit. m4_defun([_LT_SET_OPTIONS], [# Set options m4_foreach([_LT_Option], m4_split(m4_normalize([$2])), [_LT_SET_OPTION([$1], _LT_Option)]) m4_if([$1],[LT_INIT],[ dnl dnl Simply set some default values (i.e off) if boolean options were not dnl specified: _LT_UNLESS_OPTIONS([LT_INIT], [dlopen], [enable_dlopen=no ]) _LT_UNLESS_OPTIONS([LT_INIT], [win32-dll], [enable_win32_dll=no ]) dnl dnl If no reference was made to various pairs of opposing options, then dnl we run the default mode handler for the pair. For example, if neither dnl 'shared' nor 'disable-shared' was passed, we enable building of shared dnl archives by default: _LT_UNLESS_OPTIONS([LT_INIT], [shared disable-shared], [_LT_ENABLE_SHARED]) _LT_UNLESS_OPTIONS([LT_INIT], [static disable-static], [_LT_ENABLE_STATIC]) _LT_UNLESS_OPTIONS([LT_INIT], [pic-only no-pic], [_LT_WITH_PIC]) _LT_UNLESS_OPTIONS([LT_INIT], [fast-install disable-fast-install], [_LT_ENABLE_FAST_INSTALL]) _LT_UNLESS_OPTIONS([LT_INIT], [aix-soname=aix aix-soname=both aix-soname=svr4], [_LT_WITH_AIX_SONAME([aix])]) ]) ])# _LT_SET_OPTIONS ## --------------------------------- ## ## Macros to handle LT_INIT options. ## ## --------------------------------- ## # _LT_MANGLE_DEFUN(MACRO-NAME, OPTION-NAME) # ----------------------------------------- m4_define([_LT_MANGLE_DEFUN], [[_LT_OPTION_DEFUN_]m4_bpatsubst(m4_toupper([$1__$2]), [[^A-Z0-9_]], [_])]) # LT_OPTION_DEFINE(MACRO-NAME, OPTION-NAME, CODE) # ----------------------------------------------- m4_define([LT_OPTION_DEFINE], [m4_define(_LT_MANGLE_DEFUN([$1], [$2]), [$3])[]dnl ])# LT_OPTION_DEFINE # dlopen # ------ LT_OPTION_DEFINE([LT_INIT], [dlopen], [enable_dlopen=yes ]) AU_DEFUN([AC_LIBTOOL_DLOPEN], [_LT_SET_OPTION([LT_INIT], [dlopen]) AC_DIAGNOSE([obsolete], [$0: Remove this warning and the call to _LT_SET_OPTION when you put the 'dlopen' option into LT_INIT's first parameter.]) ]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_DLOPEN], []) # win32-dll # --------- # Declare package support for building win32 dll's. LT_OPTION_DEFINE([LT_INIT], [win32-dll], [enable_win32_dll=yes case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-cegcc*) AC_CHECK_TOOL(AS, as, false) AC_CHECK_TOOL(DLLTOOL, dlltool, false) AC_CHECK_TOOL(OBJDUMP, objdump, false) ;; esac test -z "$AS" && AS=as _LT_DECL([], [AS], [1], [Assembler program])dnl test -z "$DLLTOOL" && DLLTOOL=dlltool _LT_DECL([], [DLLTOOL], [1], [DLL creation program])dnl test -z "$OBJDUMP" && OBJDUMP=objdump _LT_DECL([], [OBJDUMP], [1], [Object dumper program])dnl ])# win32-dll AU_DEFUN([AC_LIBTOOL_WIN32_DLL], [AC_REQUIRE([AC_CANONICAL_HOST])dnl _LT_SET_OPTION([LT_INIT], [win32-dll]) AC_DIAGNOSE([obsolete], [$0: Remove this warning and the call to _LT_SET_OPTION when you put the 'win32-dll' option into LT_INIT's first parameter.]) ]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_WIN32_DLL], []) # _LT_ENABLE_SHARED([DEFAULT]) # ---------------------------- # implement the --enable-shared flag, and supports the 'shared' and # 'disable-shared' LT_INIT options. # DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'. m4_define([_LT_ENABLE_SHARED], [m4_define([_LT_ENABLE_SHARED_DEFAULT], [m4_if($1, no, no, yes)])dnl AC_ARG_ENABLE([shared], [AS_HELP_STRING([--enable-shared@<:@=PKGS@:>@], [build shared libraries @<:@default=]_LT_ENABLE_SHARED_DEFAULT[@:>@])], [p=${PACKAGE-default} case $enableval in yes) enable_shared=yes ;; no) enable_shared=no ;; *) enable_shared=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_shared=yes fi done IFS=$lt_save_ifs ;; esac], [enable_shared=]_LT_ENABLE_SHARED_DEFAULT) _LT_DECL([build_libtool_libs], [enable_shared], [0], [Whether or not to build shared libraries]) ])# _LT_ENABLE_SHARED LT_OPTION_DEFINE([LT_INIT], [shared], [_LT_ENABLE_SHARED([yes])]) LT_OPTION_DEFINE([LT_INIT], [disable-shared], [_LT_ENABLE_SHARED([no])]) # Old names: AC_DEFUN([AC_ENABLE_SHARED], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[shared]) ]) AC_DEFUN([AC_DISABLE_SHARED], [_LT_SET_OPTION([LT_INIT], [disable-shared]) ]) AU_DEFUN([AM_ENABLE_SHARED], [AC_ENABLE_SHARED($@)]) AU_DEFUN([AM_DISABLE_SHARED], [AC_DISABLE_SHARED($@)]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AM_ENABLE_SHARED], []) dnl AC_DEFUN([AM_DISABLE_SHARED], []) # _LT_ENABLE_STATIC([DEFAULT]) # ---------------------------- # implement the --enable-static flag, and support the 'static' and # 'disable-static' LT_INIT options. # DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'. m4_define([_LT_ENABLE_STATIC], [m4_define([_LT_ENABLE_STATIC_DEFAULT], [m4_if($1, no, no, yes)])dnl AC_ARG_ENABLE([static], [AS_HELP_STRING([--enable-static@<:@=PKGS@:>@], [build static libraries @<:@default=]_LT_ENABLE_STATIC_DEFAULT[@:>@])], [p=${PACKAGE-default} case $enableval in yes) enable_static=yes ;; no) enable_static=no ;; *) enable_static=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_static=yes fi done IFS=$lt_save_ifs ;; esac], [enable_static=]_LT_ENABLE_STATIC_DEFAULT) _LT_DECL([build_old_libs], [enable_static], [0], [Whether or not to build static libraries]) ])# _LT_ENABLE_STATIC LT_OPTION_DEFINE([LT_INIT], [static], [_LT_ENABLE_STATIC([yes])]) LT_OPTION_DEFINE([LT_INIT], [disable-static], [_LT_ENABLE_STATIC([no])]) # Old names: AC_DEFUN([AC_ENABLE_STATIC], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[static]) ]) AC_DEFUN([AC_DISABLE_STATIC], [_LT_SET_OPTION([LT_INIT], [disable-static]) ]) AU_DEFUN([AM_ENABLE_STATIC], [AC_ENABLE_STATIC($@)]) AU_DEFUN([AM_DISABLE_STATIC], [AC_DISABLE_STATIC($@)]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AM_ENABLE_STATIC], []) dnl AC_DEFUN([AM_DISABLE_STATIC], []) # _LT_ENABLE_FAST_INSTALL([DEFAULT]) # ---------------------------------- # implement the --enable-fast-install flag, and support the 'fast-install' # and 'disable-fast-install' LT_INIT options. # DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'. m4_define([_LT_ENABLE_FAST_INSTALL], [m4_define([_LT_ENABLE_FAST_INSTALL_DEFAULT], [m4_if($1, no, no, yes)])dnl AC_ARG_ENABLE([fast-install], [AS_HELP_STRING([--enable-fast-install@<:@=PKGS@:>@], [optimize for fast installation @<:@default=]_LT_ENABLE_FAST_INSTALL_DEFAULT[@:>@])], [p=${PACKAGE-default} case $enableval in yes) enable_fast_install=yes ;; no) enable_fast_install=no ;; *) enable_fast_install=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_fast_install=yes fi done IFS=$lt_save_ifs ;; esac], [enable_fast_install=]_LT_ENABLE_FAST_INSTALL_DEFAULT) _LT_DECL([fast_install], [enable_fast_install], [0], [Whether or not to optimize for fast installation])dnl ])# _LT_ENABLE_FAST_INSTALL LT_OPTION_DEFINE([LT_INIT], [fast-install], [_LT_ENABLE_FAST_INSTALL([yes])]) LT_OPTION_DEFINE([LT_INIT], [disable-fast-install], [_LT_ENABLE_FAST_INSTALL([no])]) # Old names: AU_DEFUN([AC_ENABLE_FAST_INSTALL], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[fast-install]) AC_DIAGNOSE([obsolete], [$0: Remove this warning and the call to _LT_SET_OPTION when you put the 'fast-install' option into LT_INIT's first parameter.]) ]) AU_DEFUN([AC_DISABLE_FAST_INSTALL], [_LT_SET_OPTION([LT_INIT], [disable-fast-install]) AC_DIAGNOSE([obsolete], [$0: Remove this warning and the call to _LT_SET_OPTION when you put the 'disable-fast-install' option into LT_INIT's first parameter.]) ]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_ENABLE_FAST_INSTALL], []) dnl AC_DEFUN([AM_DISABLE_FAST_INSTALL], []) # _LT_WITH_AIX_SONAME([DEFAULT]) # ---------------------------------- # implement the --with-aix-soname flag, and support the `aix-soname=aix' # and `aix-soname=both' and `aix-soname=svr4' LT_INIT options. DEFAULT # is either `aix', `both' or `svr4'. If omitted, it defaults to `aix'. m4_define([_LT_WITH_AIX_SONAME], [m4_define([_LT_WITH_AIX_SONAME_DEFAULT], [m4_if($1, svr4, svr4, m4_if($1, both, both, aix))])dnl shared_archive_member_spec= case $host,$enable_shared in power*-*-aix[[5-9]]*,yes) AC_MSG_CHECKING([which variant of shared library versioning to provide]) AC_ARG_WITH([aix-soname], [AS_HELP_STRING([--with-aix-soname=aix|svr4|both], [shared library versioning (aka "SONAME") variant to provide on AIX, @<:@default=]_LT_WITH_AIX_SONAME_DEFAULT[@:>@.])], [case $withval in aix|svr4|both) ;; *) AC_MSG_ERROR([Unknown argument to --with-aix-soname]) ;; esac lt_cv_with_aix_soname=$with_aix_soname], [AC_CACHE_VAL([lt_cv_with_aix_soname], [lt_cv_with_aix_soname=]_LT_WITH_AIX_SONAME_DEFAULT) with_aix_soname=$lt_cv_with_aix_soname]) AC_MSG_RESULT([$with_aix_soname]) if test aix != "$with_aix_soname"; then # For the AIX way of multilib, we name the shared archive member # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o', # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File. # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag, # the AIX toolchain works better with OBJECT_MODE set (default 32). if test 64 = "${OBJECT_MODE-32}"; then shared_archive_member_spec=shr_64 else shared_archive_member_spec=shr fi fi ;; *) with_aix_soname=aix ;; esac _LT_DECL([], [shared_archive_member_spec], [0], [Shared archive member basename, for filename based shared library versioning on AIX])dnl ])# _LT_WITH_AIX_SONAME LT_OPTION_DEFINE([LT_INIT], [aix-soname=aix], [_LT_WITH_AIX_SONAME([aix])]) LT_OPTION_DEFINE([LT_INIT], [aix-soname=both], [_LT_WITH_AIX_SONAME([both])]) LT_OPTION_DEFINE([LT_INIT], [aix-soname=svr4], [_LT_WITH_AIX_SONAME([svr4])]) # _LT_WITH_PIC([MODE]) # -------------------- # implement the --with-pic flag, and support the 'pic-only' and 'no-pic' # LT_INIT options. # MODE is either 'yes' or 'no'. If omitted, it defaults to 'both'. m4_define([_LT_WITH_PIC], [AC_ARG_WITH([pic], [AS_HELP_STRING([--with-pic@<:@=PKGS@:>@], [try to use only PIC/non-PIC objects @<:@default=use both@:>@])], [lt_p=${PACKAGE-default} case $withval in yes|no) pic_mode=$withval ;; *) pic_mode=default # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for lt_pkg in $withval; do IFS=$lt_save_ifs if test "X$lt_pkg" = "X$lt_p"; then pic_mode=yes fi done IFS=$lt_save_ifs ;; esac], [pic_mode=m4_default([$1], [default])]) _LT_DECL([], [pic_mode], [0], [What type of objects to build])dnl ])# _LT_WITH_PIC LT_OPTION_DEFINE([LT_INIT], [pic-only], [_LT_WITH_PIC([yes])]) LT_OPTION_DEFINE([LT_INIT], [no-pic], [_LT_WITH_PIC([no])]) # Old name: AU_DEFUN([AC_LIBTOOL_PICMODE], [_LT_SET_OPTION([LT_INIT], [pic-only]) AC_DIAGNOSE([obsolete], [$0: Remove this warning and the call to _LT_SET_OPTION when you put the 'pic-only' option into LT_INIT's first parameter.]) ]) dnl aclocal-1.4 backwards compatibility: dnl AC_DEFUN([AC_LIBTOOL_PICMODE], []) ## ----------------- ## ## LTDL_INIT Options ## ## ----------------- ## m4_define([_LTDL_MODE], []) LT_OPTION_DEFINE([LTDL_INIT], [nonrecursive], [m4_define([_LTDL_MODE], [nonrecursive])]) LT_OPTION_DEFINE([LTDL_INIT], [recursive], [m4_define([_LTDL_MODE], [recursive])]) LT_OPTION_DEFINE([LTDL_INIT], [subproject], [m4_define([_LTDL_MODE], [subproject])]) m4_define([_LTDL_TYPE], []) LT_OPTION_DEFINE([LTDL_INIT], [installable], [m4_define([_LTDL_TYPE], [installable])]) LT_OPTION_DEFINE([LTDL_INIT], [convenience], [m4_define([_LTDL_TYPE], [convenience])]) tpm2-pkcs11-1.9.1/m4/ltsugar.m40000644000175100017510000001045314674407103011443 # ltsugar.m4 -- libtool m4 base layer. -*-Autoconf-*- # # Copyright (C) 2004-2005, 2007-2008, 2011-2019, 2021-2022 Free Software # Foundation, Inc. # Written by Gary V. Vaughan, 2004 # # This file is free software; the Free Software Foundation gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. # serial 6 ltsugar.m4 # This is to help aclocal find these macros, as it can't see m4_define. AC_DEFUN([LTSUGAR_VERSION], [m4_if([0.1])]) # lt_join(SEP, ARG1, [ARG2...]) # ----------------------------- # Produce ARG1SEPARG2...SEPARGn, omitting [] arguments and their # associated separator. # Needed until we can rely on m4_join from Autoconf 2.62, since all earlier # versions in m4sugar had bugs. m4_define([lt_join], [m4_if([$#], [1], [], [$#], [2], [[$2]], [m4_if([$2], [], [], [[$2]_])$0([$1], m4_shift(m4_shift($@)))])]) m4_define([_lt_join], [m4_if([$#$2], [2], [], [m4_if([$2], [], [], [[$1$2]])$0([$1], m4_shift(m4_shift($@)))])]) # lt_car(LIST) # lt_cdr(LIST) # ------------ # Manipulate m4 lists. # These macros are necessary as long as will still need to support # Autoconf-2.59, which quotes differently. m4_define([lt_car], [[$1]]) m4_define([lt_cdr], [m4_if([$#], 0, [m4_fatal([$0: cannot be called without arguments])], [$#], 1, [], [m4_dquote(m4_shift($@))])]) m4_define([lt_unquote], $1) # lt_append(MACRO-NAME, STRING, [SEPARATOR]) # ------------------------------------------ # Redefine MACRO-NAME to hold its former content plus 'SEPARATOR''STRING'. # Note that neither SEPARATOR nor STRING are expanded; they are appended # to MACRO-NAME as is (leaving the expansion for when MACRO-NAME is invoked). # No SEPARATOR is output if MACRO-NAME was previously undefined (different # than defined and empty). # # This macro is needed until we can rely on Autoconf 2.62, since earlier # versions of m4sugar mistakenly expanded SEPARATOR but not STRING. m4_define([lt_append], [m4_define([$1], m4_ifdef([$1], [m4_defn([$1])[$3]])[$2])]) # lt_combine(SEP, PREFIX-LIST, INFIX, SUFFIX1, [SUFFIX2...]) # ---------------------------------------------------------- # Produce a SEP delimited list of all paired combinations of elements of # PREFIX-LIST with SUFFIX1 through SUFFIXn. Each element of the list # has the form PREFIXmINFIXSUFFIXn. # Needed until we can rely on m4_combine added in Autoconf 2.62. m4_define([lt_combine], [m4_if(m4_eval([$# > 3]), [1], [m4_pushdef([_Lt_sep], [m4_define([_Lt_sep], m4_defn([lt_car]))])]]dnl [[m4_foreach([_Lt_prefix], [$2], [m4_foreach([_Lt_suffix], ]m4_dquote(m4_dquote(m4_shift(m4_shift(m4_shift($@)))))[, [_Lt_sep([$1])[]m4_defn([_Lt_prefix])[$3]m4_defn([_Lt_suffix])])])])]) # lt_if_append_uniq(MACRO-NAME, VARNAME, [SEPARATOR], [UNIQ], [NOT-UNIQ]) # ----------------------------------------------------------------------- # Iff MACRO-NAME does not yet contain VARNAME, then append it (delimited # by SEPARATOR if supplied) and expand UNIQ, else NOT-UNIQ. m4_define([lt_if_append_uniq], [m4_ifdef([$1], [m4_if(m4_index([$3]m4_defn([$1])[$3], [$3$2$3]), [-1], [lt_append([$1], [$2], [$3])$4], [$5])], [lt_append([$1], [$2], [$3])$4])]) # lt_dict_add(DICT, KEY, VALUE) # ----------------------------- m4_define([lt_dict_add], [m4_define([$1($2)], [$3])]) # lt_dict_add_subkey(DICT, KEY, SUBKEY, VALUE) # -------------------------------------------- m4_define([lt_dict_add_subkey], [m4_define([$1($2:$3)], [$4])]) # lt_dict_fetch(DICT, KEY, [SUBKEY]) # ---------------------------------- m4_define([lt_dict_fetch], [m4_ifval([$3], m4_ifdef([$1($2:$3)], [m4_defn([$1($2:$3)])]), m4_ifdef([$1($2)], [m4_defn([$1($2)])]))]) # lt_if_dict_fetch(DICT, KEY, [SUBKEY], VALUE, IF-TRUE, [IF-FALSE]) # ----------------------------------------------------------------- m4_define([lt_if_dict_fetch], [m4_if(lt_dict_fetch([$1], [$2], [$3]), [$4], [$5], [$6])]) # lt_dict_filter(DICT, [SUBKEY], VALUE, [SEPARATOR], KEY, [...]) # -------------------------------------------------------------- m4_define([lt_dict_filter], [m4_if([$5], [], [], [lt_join(m4_quote(m4_default([$4], [[, ]])), lt_unquote(m4_split(m4_normalize(m4_foreach(_Lt_key, lt_car([m4_shiftn(4, $@)]), [lt_if_dict_fetch([$1], _Lt_key, [$2], [$3], [_Lt_key ])])))))])[]dnl ]) tpm2-pkcs11-1.9.1/m4/ltversion.m40000644000175100017510000000131214674407103012001 # ltversion.m4 -- version numbers -*- Autoconf -*- # # Copyright (C) 2004, 2011-2019, 2021-2022 Free Software Foundation, # Inc. # Written by Scott James Remnant, 2004 # # This file is free software; the Free Software Foundation gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. # @configure_input@ # serial 4245 ltversion.m4 # This file is part of GNU Libtool m4_define([LT_PACKAGE_VERSION], [2.4.7]) m4_define([LT_PACKAGE_REVISION], [2.4.7]) AC_DEFUN([LTVERSION_VERSION], [macro_version='2.4.7' macro_revision='2.4.7' _LT_DECL(, macro_version, 0, [Which release of libtool.m4 was used?]) _LT_DECL(, macro_revision, 0) ]) tpm2-pkcs11-1.9.1/m4/lt~obsolete.m40000644000175100017510000001400714674407103012333 # lt~obsolete.m4 -- aclocal satisfying obsolete definitions. -*-Autoconf-*- # # Copyright (C) 2004-2005, 2007, 2009, 2011-2019, 2021-2022 Free # Software Foundation, Inc. # Written by Scott James Remnant, 2004. # # This file is free software; the Free Software Foundation gives # unlimited permission to copy and/or distribute it, with or without # modifications, as long as this notice is preserved. # serial 5 lt~obsolete.m4 # These exist entirely to fool aclocal when bootstrapping libtool. # # In the past libtool.m4 has provided macros via AC_DEFUN (or AU_DEFUN), # which have later been changed to m4_define as they aren't part of the # exported API, or moved to Autoconf or Automake where they belong. # # The trouble is, aclocal is a bit thick. It'll see the old AC_DEFUN # in /usr/share/aclocal/libtool.m4 and remember it, then when it sees us # using a macro with the same name in our local m4/libtool.m4 it'll # pull the old libtool.m4 in (it doesn't see our shiny new m4_define # and doesn't know about Autoconf macros at all.) # # So we provide this file, which has a silly filename so it's always # included after everything else. This provides aclocal with the # AC_DEFUNs it wants, but when m4 processes it, it doesn't do anything # because those macros already exist, or will be overwritten later. # We use AC_DEFUN over AU_DEFUN for compatibility with aclocal-1.6. # # Anytime we withdraw an AC_DEFUN or AU_DEFUN, remember to add it here. # Yes, that means every name once taken will need to remain here until # we give up compatibility with versions before 1.7, at which point # we need to keep only those names which we still refer to. # This is to help aclocal find these macros, as it can't see m4_define. AC_DEFUN([LTOBSOLETE_VERSION], [m4_if([1])]) m4_ifndef([AC_LIBTOOL_LINKER_OPTION], [AC_DEFUN([AC_LIBTOOL_LINKER_OPTION])]) m4_ifndef([AC_PROG_EGREP], [AC_DEFUN([AC_PROG_EGREP])]) m4_ifndef([_LT_AC_PROG_ECHO_BACKSLASH], [AC_DEFUN([_LT_AC_PROG_ECHO_BACKSLASH])]) m4_ifndef([_LT_AC_SHELL_INIT], [AC_DEFUN([_LT_AC_SHELL_INIT])]) m4_ifndef([_LT_AC_SYS_LIBPATH_AIX], [AC_DEFUN([_LT_AC_SYS_LIBPATH_AIX])]) m4_ifndef([_LT_PROG_LTMAIN], [AC_DEFUN([_LT_PROG_LTMAIN])]) m4_ifndef([_LT_AC_TAGVAR], [AC_DEFUN([_LT_AC_TAGVAR])]) m4_ifndef([AC_LTDL_ENABLE_INSTALL], [AC_DEFUN([AC_LTDL_ENABLE_INSTALL])]) m4_ifndef([AC_LTDL_PREOPEN], [AC_DEFUN([AC_LTDL_PREOPEN])]) m4_ifndef([_LT_AC_SYS_COMPILER], [AC_DEFUN([_LT_AC_SYS_COMPILER])]) m4_ifndef([_LT_AC_LOCK], [AC_DEFUN([_LT_AC_LOCK])]) m4_ifndef([AC_LIBTOOL_SYS_OLD_ARCHIVE], [AC_DEFUN([AC_LIBTOOL_SYS_OLD_ARCHIVE])]) m4_ifndef([_LT_AC_TRY_DLOPEN_SELF], [AC_DEFUN([_LT_AC_TRY_DLOPEN_SELF])]) m4_ifndef([AC_LIBTOOL_PROG_CC_C_O], [AC_DEFUN([AC_LIBTOOL_PROG_CC_C_O])]) m4_ifndef([AC_LIBTOOL_SYS_HARD_LINK_LOCKS], [AC_DEFUN([AC_LIBTOOL_SYS_HARD_LINK_LOCKS])]) m4_ifndef([AC_LIBTOOL_OBJDIR], [AC_DEFUN([AC_LIBTOOL_OBJDIR])]) m4_ifndef([AC_LTDL_OBJDIR], [AC_DEFUN([AC_LTDL_OBJDIR])]) m4_ifndef([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH], [AC_DEFUN([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH])]) m4_ifndef([AC_LIBTOOL_SYS_LIB_STRIP], [AC_DEFUN([AC_LIBTOOL_SYS_LIB_STRIP])]) m4_ifndef([AC_PATH_MAGIC], [AC_DEFUN([AC_PATH_MAGIC])]) m4_ifndef([AC_PROG_LD_GNU], [AC_DEFUN([AC_PROG_LD_GNU])]) m4_ifndef([AC_PROG_LD_RELOAD_FLAG], [AC_DEFUN([AC_PROG_LD_RELOAD_FLAG])]) m4_ifndef([AC_DEPLIBS_CHECK_METHOD], [AC_DEFUN([AC_DEPLIBS_CHECK_METHOD])]) m4_ifndef([AC_LIBTOOL_PROG_COMPILER_NO_RTTI], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_NO_RTTI])]) m4_ifndef([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE], [AC_DEFUN([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE])]) m4_ifndef([AC_LIBTOOL_PROG_COMPILER_PIC], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_PIC])]) m4_ifndef([AC_LIBTOOL_PROG_LD_SHLIBS], [AC_DEFUN([AC_LIBTOOL_PROG_LD_SHLIBS])]) m4_ifndef([AC_LIBTOOL_POSTDEP_PREDEP], [AC_DEFUN([AC_LIBTOOL_POSTDEP_PREDEP])]) m4_ifndef([LT_AC_PROG_EGREP], [AC_DEFUN([LT_AC_PROG_EGREP])]) m4_ifndef([LT_AC_PROG_SED], [AC_DEFUN([LT_AC_PROG_SED])]) m4_ifndef([_LT_CC_BASENAME], [AC_DEFUN([_LT_CC_BASENAME])]) m4_ifndef([_LT_COMPILER_BOILERPLATE], [AC_DEFUN([_LT_COMPILER_BOILERPLATE])]) m4_ifndef([_LT_LINKER_BOILERPLATE], [AC_DEFUN([_LT_LINKER_BOILERPLATE])]) m4_ifndef([_AC_PROG_LIBTOOL], [AC_DEFUN([_AC_PROG_LIBTOOL])]) m4_ifndef([AC_LIBTOOL_SETUP], [AC_DEFUN([AC_LIBTOOL_SETUP])]) m4_ifndef([_LT_AC_CHECK_DLFCN], [AC_DEFUN([_LT_AC_CHECK_DLFCN])]) m4_ifndef([AC_LIBTOOL_SYS_DYNAMIC_LINKER], [AC_DEFUN([AC_LIBTOOL_SYS_DYNAMIC_LINKER])]) m4_ifndef([_LT_AC_TAGCONFIG], [AC_DEFUN([_LT_AC_TAGCONFIG])]) m4_ifndef([AC_DISABLE_FAST_INSTALL], [AC_DEFUN([AC_DISABLE_FAST_INSTALL])]) m4_ifndef([_LT_AC_LANG_CXX], [AC_DEFUN([_LT_AC_LANG_CXX])]) m4_ifndef([_LT_AC_LANG_F77], [AC_DEFUN([_LT_AC_LANG_F77])]) m4_ifndef([_LT_AC_LANG_GCJ], [AC_DEFUN([_LT_AC_LANG_GCJ])]) m4_ifndef([AC_LIBTOOL_LANG_C_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_C_CONFIG])]) m4_ifndef([_LT_AC_LANG_C_CONFIG], [AC_DEFUN([_LT_AC_LANG_C_CONFIG])]) m4_ifndef([AC_LIBTOOL_LANG_CXX_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_CXX_CONFIG])]) m4_ifndef([_LT_AC_LANG_CXX_CONFIG], [AC_DEFUN([_LT_AC_LANG_CXX_CONFIG])]) m4_ifndef([AC_LIBTOOL_LANG_F77_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_F77_CONFIG])]) m4_ifndef([_LT_AC_LANG_F77_CONFIG], [AC_DEFUN([_LT_AC_LANG_F77_CONFIG])]) m4_ifndef([AC_LIBTOOL_LANG_GCJ_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_GCJ_CONFIG])]) m4_ifndef([_LT_AC_LANG_GCJ_CONFIG], [AC_DEFUN([_LT_AC_LANG_GCJ_CONFIG])]) m4_ifndef([AC_LIBTOOL_LANG_RC_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_RC_CONFIG])]) m4_ifndef([_LT_AC_LANG_RC_CONFIG], [AC_DEFUN([_LT_AC_LANG_RC_CONFIG])]) m4_ifndef([AC_LIBTOOL_CONFIG], [AC_DEFUN([AC_LIBTOOL_CONFIG])]) m4_ifndef([_LT_AC_FILE_LTDLL_C], [AC_DEFUN([_LT_AC_FILE_LTDLL_C])]) m4_ifndef([_LT_REQUIRED_DARWIN_CHECKS], [AC_DEFUN([_LT_REQUIRED_DARWIN_CHECKS])]) m4_ifndef([_LT_AC_PROG_CXXCPP], [AC_DEFUN([_LT_AC_PROG_CXXCPP])]) m4_ifndef([_LT_PREPARE_SED_QUOTE_VARS], [AC_DEFUN([_LT_PREPARE_SED_QUOTE_VARS])]) m4_ifndef([_LT_PROG_ECHO_BACKSLASH], [AC_DEFUN([_LT_PROG_ECHO_BACKSLASH])]) m4_ifndef([_LT_PROG_F77], [AC_DEFUN([_LT_PROG_F77])]) m4_ifndef([_LT_PROG_FC], [AC_DEFUN([_LT_PROG_FC])]) m4_ifndef([_LT_PROG_CXX], [AC_DEFUN([_LT_PROG_CXX])]) tpm2-pkcs11-1.9.1/m4/pkg.m40000644000175100017510000003067714674407103010555 # pkg.m4 - Macros to locate and use pkg-config. -*- Autoconf -*- # serial 12 (pkg-config-0.29.2) dnl Copyright © 2004 Scott James Remnant . dnl Copyright © 2012-2015 Dan Nicholson dnl dnl This program is free software; you can redistribute it and/or modify dnl it under the terms of the GNU General Public License as published by dnl the Free Software Foundation; either version 2 of the License, or dnl (at your option) any later version. dnl dnl This program is distributed in the hope that it will be useful, but dnl WITHOUT ANY WARRANTY; without even the implied warranty of dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU dnl General Public License for more details. dnl dnl You should have received a copy of the GNU General Public License dnl along with this program; if not, write to the Free Software dnl Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA dnl 02111-1307, USA. dnl dnl As a special exception to the GNU General Public License, if you dnl distribute this file as part of a program that contains a dnl configuration script generated by Autoconf, you may include it under dnl the same distribution terms that you use for the rest of that dnl program. dnl PKG_PREREQ(MIN-VERSION) dnl ----------------------- dnl Since: 0.29 dnl dnl Verify that the version of the pkg-config macros are at least dnl MIN-VERSION. Unlike PKG_PROG_PKG_CONFIG, which checks the user's dnl installed version of pkg-config, this checks the developer's version dnl of pkg.m4 when generating configure. dnl dnl To ensure that this macro is defined, also add: dnl m4_ifndef([PKG_PREREQ], dnl [m4_fatal([must install pkg-config 0.29 or later before running autoconf/autogen])]) dnl dnl See the "Since" comment for each macro you use to see what version dnl of the macros you require. m4_defun([PKG_PREREQ], [m4_define([PKG_MACROS_VERSION], [0.29.2]) m4_if(m4_version_compare(PKG_MACROS_VERSION, [$1]), -1, [m4_fatal([pkg.m4 version $1 or higher is required but ]PKG_MACROS_VERSION[ found])]) ])dnl PKG_PREREQ dnl PKG_PROG_PKG_CONFIG([MIN-VERSION]) dnl ---------------------------------- dnl Since: 0.16 dnl dnl Search for the pkg-config tool and set the PKG_CONFIG variable to dnl first found in the path. Checks that the version of pkg-config found dnl is at least MIN-VERSION. If MIN-VERSION is not specified, 0.9.0 is dnl used since that's the first version where most current features of dnl pkg-config existed. AC_DEFUN([PKG_PROG_PKG_CONFIG], [m4_pattern_forbid([^_?PKG_[A-Z_]+$]) m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$]) m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$]) AC_ARG_VAR([PKG_CONFIG], [path to pkg-config utility]) AC_ARG_VAR([PKG_CONFIG_PATH], [directories to add to pkg-config's search path]) AC_ARG_VAR([PKG_CONFIG_LIBDIR], [path overriding pkg-config's built-in search path]) if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then AC_PATH_TOOL([PKG_CONFIG], [pkg-config]) fi if test -n "$PKG_CONFIG"; then _pkg_min_version=m4_default([$1], [0.9.0]) AC_MSG_CHECKING([pkg-config is at least version $_pkg_min_version]) if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) PKG_CONFIG="" fi fi[]dnl ])dnl PKG_PROG_PKG_CONFIG dnl PKG_CHECK_EXISTS(MODULES, [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND]) dnl ------------------------------------------------------------------- dnl Since: 0.18 dnl dnl Check to see whether a particular set of modules exists. Similar to dnl PKG_CHECK_MODULES(), but does not set variables or print errors. dnl dnl Please remember that m4 expands AC_REQUIRE([PKG_PROG_PKG_CONFIG]) dnl only at the first occurrence in configure.ac, so if the first place dnl it's called might be skipped (such as if it is within an "if", you dnl have to call PKG_CHECK_EXISTS manually AC_DEFUN([PKG_CHECK_EXISTS], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl if test -n "$PKG_CONFIG" && \ AC_RUN_LOG([$PKG_CONFIG --exists --print-errors "$1"]); then m4_default([$2], [:]) m4_ifvaln([$3], [else $3])dnl fi]) dnl _PKG_CONFIG([VARIABLE], [COMMAND], [MODULES]) dnl --------------------------------------------- dnl Internal wrapper calling pkg-config via PKG_CONFIG and setting dnl pkg_failed based on the result. m4_define([_PKG_CONFIG], [if test -n "$$1"; then pkg_cv_[]$1="$$1" elif test -n "$PKG_CONFIG"; then PKG_CHECK_EXISTS([$3], [pkg_cv_[]$1=`$PKG_CONFIG --[]$2 "$3" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes ], [pkg_failed=yes]) else pkg_failed=untried fi[]dnl ])dnl _PKG_CONFIG dnl _PKG_SHORT_ERRORS_SUPPORTED dnl --------------------------- dnl Internal check to see if pkg-config supports short errors. AC_DEFUN([_PKG_SHORT_ERRORS_SUPPORTED], [AC_REQUIRE([PKG_PROG_PKG_CONFIG]) if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi[]dnl ])dnl _PKG_SHORT_ERRORS_SUPPORTED dnl PKG_CHECK_MODULES(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND], dnl [ACTION-IF-NOT-FOUND]) dnl -------------------------------------------------------------- dnl Since: 0.4.0 dnl dnl Note that if there is a possibility the first call to dnl PKG_CHECK_MODULES might not happen, you should be sure to include an dnl explicit call to PKG_PROG_PKG_CONFIG in your configure.ac AC_DEFUN([PKG_CHECK_MODULES], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl AC_ARG_VAR([$1][_CFLAGS], [C compiler flags for $1, overriding pkg-config])dnl AC_ARG_VAR([$1][_LIBS], [linker flags for $1, overriding pkg-config])dnl pkg_failed=no AC_MSG_CHECKING([for $2]) _PKG_CONFIG([$1][_CFLAGS], [cflags], [$2]) _PKG_CONFIG([$1][_LIBS], [libs], [$2]) m4_define([_PKG_TEXT], [Alternatively, you may set the environment variables $1[]_CFLAGS and $1[]_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details.]) if test $pkg_failed = yes; then AC_MSG_RESULT([no]) _PKG_SHORT_ERRORS_SUPPORTED if test $_pkg_short_errors_supported = yes; then $1[]_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "$2" 2>&1` else $1[]_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "$2" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$$1[]_PKG_ERRORS" >&AS_MESSAGE_LOG_FD m4_default([$4], [AC_MSG_ERROR( [Package requirements ($2) were not met: $$1_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. _PKG_TEXT])[]dnl ]) elif test $pkg_failed = untried; then AC_MSG_RESULT([no]) m4_default([$4], [AC_MSG_FAILURE( [The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. _PKG_TEXT To get pkg-config, see .])[]dnl ]) else $1[]_CFLAGS=$pkg_cv_[]$1[]_CFLAGS $1[]_LIBS=$pkg_cv_[]$1[]_LIBS AC_MSG_RESULT([yes]) $3 fi[]dnl ])dnl PKG_CHECK_MODULES dnl PKG_CHECK_MODULES_STATIC(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND], dnl [ACTION-IF-NOT-FOUND]) dnl --------------------------------------------------------------------- dnl Since: 0.29 dnl dnl Checks for existence of MODULES and gathers its build flags with dnl static libraries enabled. Sets VARIABLE-PREFIX_CFLAGS from --cflags dnl and VARIABLE-PREFIX_LIBS from --libs. dnl dnl Note that if there is a possibility the first call to dnl PKG_CHECK_MODULES_STATIC might not happen, you should be sure to dnl include an explicit call to PKG_PROG_PKG_CONFIG in your dnl configure.ac. AC_DEFUN([PKG_CHECK_MODULES_STATIC], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl _save_PKG_CONFIG=$PKG_CONFIG PKG_CONFIG="$PKG_CONFIG --static" PKG_CHECK_MODULES($@) PKG_CONFIG=$_save_PKG_CONFIG[]dnl ])dnl PKG_CHECK_MODULES_STATIC dnl PKG_INSTALLDIR([DIRECTORY]) dnl ------------------------- dnl Since: 0.27 dnl dnl Substitutes the variable pkgconfigdir as the location where a module dnl should install pkg-config .pc files. By default the directory is dnl $libdir/pkgconfig, but the default can be changed by passing dnl DIRECTORY. The user can override through the --with-pkgconfigdir dnl parameter. AC_DEFUN([PKG_INSTALLDIR], [m4_pushdef([pkg_default], [m4_default([$1], ['${libdir}/pkgconfig'])]) m4_pushdef([pkg_description], [pkg-config installation directory @<:@]pkg_default[@:>@]) AC_ARG_WITH([pkgconfigdir], [AS_HELP_STRING([--with-pkgconfigdir], pkg_description)],, [with_pkgconfigdir=]pkg_default) AC_SUBST([pkgconfigdir], [$with_pkgconfigdir]) m4_popdef([pkg_default]) m4_popdef([pkg_description]) ])dnl PKG_INSTALLDIR dnl PKG_NOARCH_INSTALLDIR([DIRECTORY]) dnl -------------------------------- dnl Since: 0.27 dnl dnl Substitutes the variable noarch_pkgconfigdir as the location where a dnl module should install arch-independent pkg-config .pc files. By dnl default the directory is $datadir/pkgconfig, but the default can be dnl changed by passing DIRECTORY. The user can override through the dnl --with-noarch-pkgconfigdir parameter. AC_DEFUN([PKG_NOARCH_INSTALLDIR], [m4_pushdef([pkg_default], [m4_default([$1], ['${datadir}/pkgconfig'])]) m4_pushdef([pkg_description], [pkg-config arch-independent installation directory @<:@]pkg_default[@:>@]) AC_ARG_WITH([noarch-pkgconfigdir], [AS_HELP_STRING([--with-noarch-pkgconfigdir], pkg_description)],, [with_noarch_pkgconfigdir=]pkg_default) AC_SUBST([noarch_pkgconfigdir], [$with_noarch_pkgconfigdir]) m4_popdef([pkg_default]) m4_popdef([pkg_description]) ])dnl PKG_NOARCH_INSTALLDIR dnl PKG_CHECK_VAR(VARIABLE, MODULE, CONFIG-VARIABLE, dnl [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND]) dnl ------------------------------------------- dnl Since: 0.28 dnl dnl Retrieves the value of the pkg-config variable for the given module. AC_DEFUN([PKG_CHECK_VAR], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl AC_ARG_VAR([$1], [value of $3 for $2, overriding pkg-config])dnl _PKG_CONFIG([$1], [variable="][$3]["], [$2]) AS_VAR_COPY([$1], [pkg_cv_][$1]) AS_VAR_IF([$1], [""], [$5], [$4])dnl ])dnl PKG_CHECK_VAR dnl PKG_WITH_MODULES(VARIABLE-PREFIX, MODULES, dnl [ACTION-IF-FOUND],[ACTION-IF-NOT-FOUND], dnl [DESCRIPTION], [DEFAULT]) dnl ------------------------------------------ dnl dnl Prepare a "--with-" configure option using the lowercase dnl [VARIABLE-PREFIX] name, merging the behaviour of AC_ARG_WITH and dnl PKG_CHECK_MODULES in a single macro. AC_DEFUN([PKG_WITH_MODULES], [ m4_pushdef([with_arg], m4_tolower([$1])) m4_pushdef([description], [m4_default([$5], [build with ]with_arg[ support])]) m4_pushdef([def_arg], [m4_default([$6], [auto])]) m4_pushdef([def_action_if_found], [AS_TR_SH([with_]with_arg)=yes]) m4_pushdef([def_action_if_not_found], [AS_TR_SH([with_]with_arg)=no]) m4_case(def_arg, [yes],[m4_pushdef([with_without], [--without-]with_arg)], [m4_pushdef([with_without],[--with-]with_arg)]) AC_ARG_WITH(with_arg, AS_HELP_STRING(with_without, description[ @<:@default=]def_arg[@:>@]),, [AS_TR_SH([with_]with_arg)=def_arg]) AS_CASE([$AS_TR_SH([with_]with_arg)], [yes],[PKG_CHECK_MODULES([$1],[$2],$3,$4)], [auto],[PKG_CHECK_MODULES([$1],[$2], [m4_n([def_action_if_found]) $3], [m4_n([def_action_if_not_found]) $4])]) m4_popdef([with_arg]) m4_popdef([description]) m4_popdef([def_arg]) ])dnl PKG_WITH_MODULES dnl PKG_HAVE_WITH_MODULES(VARIABLE-PREFIX, MODULES, dnl [DESCRIPTION], [DEFAULT]) dnl ----------------------------------------------- dnl dnl Convenience macro to trigger AM_CONDITIONAL after PKG_WITH_MODULES dnl check._[VARIABLE-PREFIX] is exported as make variable. AC_DEFUN([PKG_HAVE_WITH_MODULES], [ PKG_WITH_MODULES([$1],[$2],,,[$3],[$4]) AM_CONDITIONAL([HAVE_][$1], [test "$AS_TR_SH([with_]m4_tolower([$1]))" = "yes"]) ])dnl PKG_HAVE_WITH_MODULES dnl PKG_HAVE_DEFINE_WITH_MODULES(VARIABLE-PREFIX, MODULES, dnl [DESCRIPTION], [DEFAULT]) dnl ------------------------------------------------------ dnl dnl Convenience macro to run AM_CONDITIONAL and AC_DEFINE after dnl PKG_WITH_MODULES check. HAVE_[VARIABLE-PREFIX] is exported as make dnl and preprocessor variable. AC_DEFUN([PKG_HAVE_DEFINE_WITH_MODULES], [ PKG_HAVE_WITH_MODULES([$1],[$2],[$3],[$4]) AS_IF([test "$AS_TR_SH([with_]m4_tolower([$1]))" = "yes"], [AC_DEFINE([HAVE_][$1], 1, [Enable ]m4_tolower([$1])[ support])]) ])dnl PKG_HAVE_DEFINE_WITH_MODULES tpm2-pkcs11-1.9.1/misc/0000755000175100017510000000000014674407116010214 5tpm2-pkcs11-1.9.1/misc/p11-kit/0000755000175100017510000000000014535673717011412 5tpm2-pkcs11-1.9.1/misc/p11-kit/tpm2_pkcs11.module0000644000175100017510000000005014535673717014600 module: libtpm2_pkcs11.so critical: no tpm2-pkcs11-1.9.1/src/0000755000175100017510000000000014674407116010050 5tpm2-pkcs11-1.9.1/src/lib/0000755000175100017510000000000014674407116010616 5tpm2-pkcs11-1.9.1/src/lib/config.h.in0000644000175100017510000000630514674407106012564 /* src/lib/config.h.in. Generated from configure.ac by autoheader. */ /* Define if building universal (internal helper macro) */ #undef AC_APPLE_UNIVERSAL_BUILD /* Define to disable built in overflow math */ #undef DISABLE_OVERFLOW_BUILTINS /* ESAPI versions below 2.2.1 are known to require manual session flag management. */ #undef ESAPI_MANAGE_FLAGS /* Esys3 */ #undef ESYS_3 /* Defined when building fuzzing tests */ #undef FUZZING /* Define to 1 if you have the header file. */ #undef HAVE_DLFCN_H /* Enabled if FAPI >= 3.0 is found */ #undef HAVE_FAPI /* Define to 1 if the system has the `weak' function attribute */ #undef HAVE_FUNC_ATTRIBUTE_WEAK /* Define to 1 if you have the header file. */ #undef HAVE_INTTYPES_H /* Define if you have POSIX threads libraries and header files. */ #undef HAVE_PTHREAD /* Have PTHREAD_PRIO_INHERIT. */ #undef HAVE_PTHREAD_PRIO_INHERIT /* Define to 1 if you have the header file. */ #undef HAVE_STDINT_H /* Define to 1 if you have the header file. */ #undef HAVE_STDIO_H /* Define to 1 if you have the header file. */ #undef HAVE_STDLIB_H /* Define to 1 if you have the header file. */ #undef HAVE_STRINGS_H /* Define to 1 if you have the header file. */ #undef HAVE_STRING_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_STAT_H /* Define to 1 if you have the header file. */ #undef HAVE_SYS_TYPES_H /* Define to 1 if you have the header file. */ #undef HAVE_UNISTD_H /* Define to the sub-directory where libtool stores uninstalled libraries. */ #undef LT_OBJDIR /* Define if debugging is disabled */ #undef NDEBUG /* Name of package */ #undef PACKAGE /* Define to the address where bug reports for this package should be sent. */ #undef PACKAGE_BUGREPORT /* Define to the full name of this package. */ #undef PACKAGE_NAME /* Define to the full name and version of this package. */ #undef PACKAGE_STRING /* Define to the one symbol short name of this package. */ #undef PACKAGE_TARNAME /* Define to the home page for this package. */ #undef PACKAGE_URL /* Define to the version of this package. */ #undef PACKAGE_VERSION /* Define to enable 1 byte structure packing. Default for Windows builds. */ #undef PKCS11_PACK /* Define to necessary symbol if this constant uses a non-standard name on your system. */ #undef PTHREAD_CREATE_JOINABLE /* Define to 1 if all of the C90 standard headers exist (not just the ones required in a freestanding environment). This macro is provided for backward compatibility; new code need not use it. */ #undef STDC_HEADERS /* Changes the store directory to search. Defaults to /etc/tpm2_pkcs11 */ #undef TPM2_PKCS11_STORE_DIR /* Define when unit testing. libtwist uses this to define a debug interface for alloc failures */ #undef UNIT_TESTING /* Version number of package */ #undef VERSION /* Define WORDS_BIGENDIAN to 1 if your processor stores words with the most significant byte first (like Motorola and SPARC, unlike Intel). */ #if defined AC_APPLE_UNIVERSAL_BUILD # if defined __BIG_ENDIAN__ # define WORDS_BIGENDIAN 1 # endif #else # ifndef WORDS_BIGENDIAN # undef WORDS_BIGENDIAN # endif #endif tpm2-pkcs11-1.9.1/src/lib/attrs.c0000644000175100017510000011237014667615111012041 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include "attrs.h" #include "log.h" #include "pkcs11.h" #include "typed_memory.h" #include "utils.h" struct attr_list { CK_ULONG max; CK_ULONG count; CK_ATTRIBUTE_PTR attrs; }; #define ADD_ATTR_HANDLER(t, m) { .type = t, .name = #t, .memtype = m } typedef struct attr_handler2 attr_handler2; struct attr_handler2 { CK_ATTRIBUTE_TYPE type; CK_BYTE memtype; const char *name; }; #define ALLOC_LEN 16 static bool _attr_list_add(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_ULONG len, CK_BYTE_PTR buf, int memtype) { /* do we need space in the attribute list? if so realloc */ if (l->count == l->max) { bool res = __builtin_add_overflow(l->max, ALLOC_LEN, &l->max); if (res) { LOGE("add overflow\n"); return false; } size_t bytes = 0; safe_mul(bytes, l->max, sizeof(*l->attrs)); void *tmp = realloc(l->attrs, bytes); if (!tmp) { LOGE("oom"); return false; } l->attrs = (CK_ATTRIBUTE_PTR)tmp; /* * clear the newly allocated region * If the mul operation didn't overflow above, then * mul cannot overflow here, so use regular mul */ safe_mul(bytes, ALLOC_LEN, sizeof(*l->attrs)); memset(&l->attrs[l->count], 0, bytes); } /* only hex strings and sequences can be empty */ if (!len && (memtype != TYPE_BYTE_HEX_STR) && (memtype != TYPE_BYTE_INT_SEQ)) { LOGE("type cannot be empty, got: %d", memtype); return false; } if (!len) { l->attrs[l->count].type = type; assert(!l->attrs[l->count].pValue); assert(!l->attrs[l->count].ulValueLen); l->count++; return true; } void *newnode = type_calloc(1, len, memtype); if (!newnode) { LOGE("oom"); return false; } memcpy(newnode, buf, len); l->attrs[l->count].type = type; l->attrs[l->count].ulValueLen = len; l->attrs[l->count++].pValue = newnode; return true; } static bool add_type_copy(CK_ATTRIBUTE_PTR a, CK_BYTE memtype, attr_list *l) { if (!a->pValue || !a->ulValueLen) { return attr_list_add_buf(l, a->type, NULL, 0); } if (!memtype) { LOGW("Guessing type for attribute, consider adding type info: 0x%lx", a->type); /* guess based on length */ switch(a->ulValueLen) { case sizeof(CK_BBOOL): memtype = TYPE_BYTE_BOOL; break; case sizeof(CK_ULONG): memtype = TYPE_BYTE_INT; break; default: memtype = TYPE_BYTE_HEX_STR; } } return _attr_list_add(l, a->type, a->ulValueLen, a->pValue, memtype); } static attr_handler2 attr_handlers[] = { ADD_ATTR_HANDLER(CKA_CLASS, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_TOKEN, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_PRIVATE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_LABEL, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_APPLICATION, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_VALUE, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_OBJECT_ID, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_CERTIFICATE_TYPE, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_ISSUER, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_SERIAL_NUMBER, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_TRUSTED, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_CERTIFICATE_CATEGORY, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_JAVA_MIDP_SECURITY_DOMAIN, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_URL, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_CHECK_VALUE, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_HASH_OF_SUBJECT_PUBLIC_KEY, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_HASH_OF_ISSUER_PUBLIC_KEY, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_NAME_HASH_ALGORITHM, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_KEY_TYPE, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_SUBJECT, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_ID, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_SENSITIVE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_ENCRYPT, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_DECRYPT, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_WRAP, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_UNWRAP, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_SIGN, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_SIGN_RECOVER, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_VERIFY, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_VERIFY_RECOVER, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_DERIVE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_START_DATE, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_END_DATE, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_MODULUS, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_MODULUS_BITS, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_PUBLIC_EXPONENT, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_PUBLIC_KEY_INFO, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_VALUE_LEN, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_EXTRACTABLE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_LOCAL, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_NEVER_EXTRACTABLE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_ALWAYS_SENSITIVE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_KEY_GEN_MECHANISM, TYPE_BYTE_INT), ADD_ATTR_HANDLER(CKA_MODIFIABLE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_COPYABLE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_DESTROYABLE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_EC_PARAMS, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_EC_POINT, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_ALWAYS_AUTHENTICATE, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_WRAP_WITH_TRUSTED, TYPE_BYTE_BOOL), ADD_ATTR_HANDLER(CKA_WRAP_TEMPLATE, TYPE_BYTE_TEMP_SEQ), ADD_ATTR_HANDLER(CKA_UNWRAP_TEMPLATE, TYPE_BYTE_TEMP_SEQ), ADD_ATTR_HANDLER(CKA_ALLOWED_MECHANISMS, TYPE_BYTE_INT_SEQ), ADD_ATTR_HANDLER(CKA_TPM2_OBJAUTH_ENC, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_TPM2_PUB_BLOB, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_TPM2_PRIV_BLOB, TYPE_BYTE_HEX_STR), ADD_ATTR_HANDLER(CKA_TPM2_ENC_BLOB, TYPE_BYTE_HEX_STR), }; static attr_handler2 default_handler = { .memtype = 0, .name="UNKNOWN" }; static attr_handler2 *attr_lookup(CK_ATTRIBUTE_TYPE t) { size_t i; for (i=0; i < ARRAY_LEN(attr_handlers); i++) { attr_handler2 *h = &attr_handlers[i]; if (h->type == t) { return h; } } LOGW("Using default attribute handler for %lu," " consider registering a handler", t); /* attempt using the default */ return &default_handler; } attr_list *attr_list_new(void) { return calloc(1, sizeof(attr_list)); } bool attr_list_add_int(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_ULONG value) { return _attr_list_add(l, type, sizeof(value), (CK_BYTE_PTR)&value, TYPE_BYTE_INT); } bool attr_list_add_int_seq(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_BYTE_PTR value, CK_ULONG len) { return _attr_list_add(l, type, len, value, TYPE_BYTE_INT_SEQ); } bool attr_list_add_bool(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_BBOOL value) { return _attr_list_add(l, type, sizeof(value), &value, TYPE_BYTE_BOOL); } bool attr_list_add_buf(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_BYTE_PTR value, CK_ULONG len) { return _attr_list_add(l, type, len, value, TYPE_BYTE_HEX_STR); } CK_ULONG attr_list_get_count(attr_list *l) { assert(l); return l->count; } CK_ATTRIBUTE_PTR attr_list_get_ptr(attr_list *l) { assert(l); return l->attrs; } void attr_pfree_cleanse(CK_ATTRIBUTE_PTR attr) { if (attr && attr->pValue) { /* Don't use clear_free because OSSL is not used for alloc */ OPENSSL_cleanse(attr->pValue, attr->ulValueLen); free(attr->pValue); attr->pValue = NULL; attr->ulValueLen = 0; } } void attr_list_free(attr_list *attrs) { if (!attrs) { return; } CK_ULONG i; for (i=0; i < attrs->count; i++) { const CK_ATTRIBUTE_PTR a = &attrs->attrs[i]; attr_pfree_cleanse(a); } free(attrs->attrs); free(attrs); } CK_RV attr_list_raw_invoke_handlers(const CK_ATTRIBUTE_PTR attrs, CK_ULONG count, const attr_handler *handlers, size_t len, void *udata) { size_t i; if (!attrs || !count) { return CKR_OK; } for(i=0; i < count; i++) { const CK_ATTRIBUTE_PTR a = &attrs[i]; size_t j; for(j=0; j < len; j++) { const attr_handler *h = &handlers[j]; if (h->type == a->type) { CK_RV rv = h->handler(a, udata); if (rv != CKR_OK) { return rv; } } } LOGV("ignoring attribute: 0x%lx", a->type); } return CKR_OK; } CK_RV attr_list_invoke_handlers(attr_list *l, const attr_handler *handlers, size_t len, void *udata) { if (!l) { return CKR_OK; } return attr_list_raw_invoke_handlers(attr_list_get_ptr(l), attr_list_get_count(l), handlers, len, udata); } bool attr_typify(CK_ATTRIBUTE_PTR attrs, CK_ULONG cnt, attr_list **copy) { attr_list *c = attr_list_new(); if (!c) { return CKR_HOST_MEMORY; } CK_ULONG i; for (i=0; i < cnt; i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; attr_handler2 *h = attr_lookup(a->type); bool res = add_type_copy(a, h->memtype, c); if (!res) { attr_list_free(c); return res; } } *copy = c; return true; } CK_RV attr_list_dup(attr_list *old, attr_list **new) { assert(old); assert(new); CK_RV rv = CKR_GENERAL_ERROR; /* create the container */ attr_list *tmp = calloc(1, sizeof(attr_list)); if (!tmp) { LOGE("oom"); return CKR_HOST_MEMORY; } /* create the attribute list */ tmp->attrs = calloc(old->max, sizeof(CK_ATTRIBUTE)); if (!tmp->attrs) { LOGE("oom"); free(tmp); return CKR_HOST_MEMORY; } tmp->max = old->max; /* deep copy the attrs */ size_t i; for (i=0; i < old->count; i++) { CK_ATTRIBUTE_PTR o = &old->attrs[i]; CK_ATTRIBUTE_PTR n = &tmp->attrs[i]; n->type = o->type; if (o->pValue && o->ulValueLen) { rv = type_mem_dup(o->pValue, o->ulValueLen, &n->pValue); if (rv != CKR_OK) { goto error; } n->ulValueLen = o->ulValueLen; } tmp->count++; } *new = tmp; return CKR_OK; error: attr_list_free(tmp); return rv; } CK_ATTRIBUTE_PTR attr_get_attribute_by_type_raw(CK_ATTRIBUTE_PTR haystack, CK_ULONG haystack_count, CK_ATTRIBUTE_TYPE needle) { assert(haystack); CK_ULONG i; for (i=0; i < haystack_count; i++) { CK_ATTRIBUTE_PTR a = &haystack[i]; if (a->type == needle) { return a; } } return NULL; } CK_ATTRIBUTE_PTR attr_get_attribute_by_type(attr_list *haystack, CK_ATTRIBUTE_TYPE needle) { assert(haystack); return attr_get_attribute_by_type_raw(haystack->attrs, haystack->count, needle); } attr_list *attr_list_append_attrs( attr_list *old_attrs, attr_list **new_attrs) { if (!(*new_attrs)) { return old_attrs; } if (!old_attrs) { return *new_attrs; } /* todo safe addition */ CK_ULONG old_len = attr_list_get_count(old_attrs); CK_ULONG new_len = attr_list_get_count(*new_attrs); CK_ULONG total_len = 0; safe_add(total_len, new_len, old_len); if (!new_len) { attr_list_free(*new_attrs); *new_attrs = NULL; return old_attrs; } // need to fit 500 have space for 16 if (total_len > old_attrs->max) { size_t blocks = total_len / ALLOC_LEN; safe_adde(blocks, total_len % ALLOC_LEN ? 1 : 0); CK_ULONG alloc_items = 0; safe_mul(alloc_items, blocks, ALLOC_LEN); size_t bytes = 0; safe_mul(bytes, alloc_items, sizeof(CK_ATTRIBUTE)); void *tmp = realloc(old_attrs->attrs, bytes); if (!tmp) { return NULL; } old_attrs->attrs = tmp; CK_ATTRIBUTE_PTR clear_point = &old_attrs->attrs[old_attrs->max]; /* clear the delta */ size_t delta = alloc_items - old_attrs->max; safe_mul(bytes, delta, sizeof(CK_ATTRIBUTE)); memset(clear_point, 0, bytes); old_attrs->max = alloc_items; } CK_ATTRIBUTE_PTR cpy_point = &old_attrs->attrs[old_len]; size_t bytes = 0; safe_mul(bytes, new_len, sizeof(CK_ATTRIBUTE)); memcpy(cpy_point, (*new_attrs)->attrs, bytes); old_attrs->count = total_len; free((*new_attrs)->attrs); free(*new_attrs); *new_attrs = NULL; return old_attrs; } CK_RV attr_common_add_storage(attr_list **storage_attrs) { CK_RV rv = CKR_GENERAL_ERROR; CK_OBJECT_CLASS cka_class = attr_list_get_CKA_CLASS(*storage_attrs, CK_OBJECT_CLASS_BAD); if (cka_class == CK_OBJECT_CLASS_BAD) { LOGE("Expected object to have CKA_CLASS"); return CKR_GENERAL_ERROR; } attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } /* currently immutable */ bool r = attr_list_add_bool(new_attrs, CKA_TOKEN, CK_TRUE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_MODIFIABLE, CK_TRUE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_COPYABLE, CK_TRUE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_DESTROYABLE, CK_TRUE); goto_error_false(r); /* defaults */ CK_BBOOL defpriv = ((cka_class == CKO_PRIVATE_KEY) || (cka_class == CKO_SECRET_KEY) || (cka_class == CKO_DATA)) ? CK_TRUE : CK_FALSE; CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*storage_attrs, CKA_PRIVATE); if (!a) { r = attr_list_add_bool(new_attrs, CKA_PRIVATE, defpriv); goto_error_false(r); } a = attr_get_attribute_by_type(*storage_attrs, CKA_LABEL); if (!a) { r = attr_list_add_buf(new_attrs, CKA_LABEL, NULL, 0); goto_error_false(r); } *storage_attrs = attr_list_append_attrs(*storage_attrs, &new_attrs); goto_error_false(*storage_attrs); return CKR_OK; error: attr_list_free(new_attrs); return rv; } CK_RV attr_common_add_data(attr_list **data_attrs) { CK_RV rv = CKR_HOST_MEMORY; /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*data_attrs, CKA_VALUE); if (!a) { LOGE("Expected object to have CKA_VALUE"); return CKR_TEMPLATE_INCOMPLETE; } else if (!a->ulValueLen || !a->pValue) { LOGE("CKA_VALUE bad, got len: %lu, pValue: %s", a->ulValueLen, a->pValue ? "(set)" : "(null)"); return CKR_ATTRIBUTE_VALUE_INVALID; } attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } a = attr_get_attribute_by_type(*data_attrs, CKA_OBJECT_ID); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_APPLICATION, NULL, 0); goto_error_false(r); } a = attr_get_attribute_by_type(*data_attrs, CKA_APPLICATION); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_APPLICATION, NULL, 0); goto_error_false(r); } *data_attrs = attr_list_append_attrs(*data_attrs, &new_attrs); goto_error_false(*data_attrs); return attr_common_add_storage(data_attrs); error: attr_list_free(new_attrs); return rv; } static CK_RV attr_common_add_key(attr_list **key_attrs) { CK_RV rv = CKR_HOST_MEMORY; /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*key_attrs, CKA_KEY_TYPE); if (!a) { LOGE("Expected object to have CKA_KEY_TYPE"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*key_attrs, CKA_LOCAL); if (!a) { LOGE("Expected object to have CKA_LOCAL"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*key_attrs, CKA_ALLOWED_MECHANISMS); if (!a) { LOGE("Expected object to have CKA_ALLOWED_MECHANISMS"); return CKR_GENERAL_ERROR; } attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } /* defaults */ a = attr_get_attribute_by_type(*key_attrs, CKA_ID); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_ID, NULL, 0); goto_error_false(r); } a = attr_get_attribute_by_type(*key_attrs, CKA_START_DATE); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_START_DATE, NULL, 0); goto_error_false(r); } a = attr_get_attribute_by_type(*key_attrs, CKA_END_DATE); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_END_DATE, NULL, 0); goto_error_false(r); } bool r = attr_list_add_bool(new_attrs, CKA_DERIVE, CK_FALSE); goto_error_false(r); *key_attrs = attr_list_append_attrs(*key_attrs, &new_attrs); goto_error_false(*key_attrs); return attr_common_add_storage(key_attrs); error: attr_list_free(new_attrs); return rv; } static CK_RV attr_common_add_publickey(attr_list **public_attrs) { CK_RV rv = CKR_HOST_MEMORY; /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*public_attrs, CKA_ENCRYPT); if (!a) { LOGE("Expected object to have CKA_ENCRYPT"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*public_attrs, CKA_VERIFY); if (!a) { LOGE("Expected object to have CKA_VERIFY"); return CKR_GENERAL_ERROR; } attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } /* defaults */ a = attr_get_attribute_by_type(*public_attrs, CKA_SUBJECT); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_SUBJECT, NULL, 0); goto_error_false(r); } bool r = attr_list_add_bool(new_attrs, CKA_SUBJECT, CK_FALSE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_TRUSTED, CK_FALSE); goto_error_false(r); r = attr_list_add_buf(new_attrs, CKA_WRAP_TEMPLATE, NULL, 0); goto_error_false(r); r = attr_list_add_buf(new_attrs, CKA_PUBLIC_KEY_INFO, NULL, 0); goto_error_false(r); r = attr_list_add_int(new_attrs, CKA_CLASS, CKO_PUBLIC_KEY); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_WRAP, CK_FALSE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_VERIFY_RECOVER, CK_FALSE); goto_error_false(r); *public_attrs = attr_list_append_attrs(*public_attrs, &new_attrs); goto_error_false(*public_attrs); return attr_common_add_key(public_attrs); error: attr_list_free(new_attrs); return rv; } CK_RV attr_common_add_RSA_publickey(attr_list **public_attrs) { CK_RV rv = CKR_GENERAL_ERROR; attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } /* default if not set */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*public_attrs, CKA_MODULUS_BITS); if (!a) { a = attr_get_attribute_by_type(*public_attrs, CKA_MODULUS); if (!a) { LOGE("Expected object to have CKA_MODULUS"); goto error; } CK_ULONG modulus_bits = 0; safe_mul(modulus_bits, a->ulValueLen, 8); bool r = attr_list_add_int(new_attrs, CKA_MODULUS_BITS, modulus_bits); goto_error_false(r); } *public_attrs = attr_list_append_attrs(*public_attrs, &new_attrs); goto_error_false(*public_attrs); return attr_common_add_publickey(public_attrs); error: attr_list_free(new_attrs); return rv; } static CK_RV attr_common_add_EC_publickey(attr_list **public_attrs) { /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*public_attrs, CKA_EC_POINT); if (!a) { LOGE("Expected object to have CKA_EC_POINT"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*public_attrs, CKA_EC_PARAMS); if (!a) { LOGE("Expected object to have CKA_EC_PARAMS"); return CKR_GENERAL_ERROR; } return attr_common_add_publickey(public_attrs); } static CK_RV attr_common_add_privatekey(attr_list **private_attrs) { CK_RV rv = CKR_HOST_MEMORY; /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*private_attrs, CKA_DECRYPT); if (!a) { LOGE("Expected object to have CKA_DECRYPT"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*private_attrs, CKA_SIGN); if (!a) { LOGE("Expected object to have CKA_SIGN"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*private_attrs, CKA_EXTRACTABLE); if (!a) { LOGE("Expected object to have CKA_EXTRACTABLE"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*private_attrs, CKA_ALWAYS_SENSITIVE); if (!a) { LOGE("Expected object to have CKA_ALWAYS_SENSITIVE"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*private_attrs, CKA_NEVER_EXTRACTABLE); if (!a) { LOGE("Expected object to have CKA_NEVER_EXTRACTABLE"); return CKR_GENERAL_ERROR; } attr_list *new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } /* defaults */ a = attr_get_attribute_by_type(*private_attrs, CKA_SUBJECT); if (!a) { bool r = attr_list_add_buf(new_attrs, CKA_SUBJECT, NULL, 0); goto_error_false(r); } a = attr_get_attribute_by_type(*private_attrs, CKA_ALWAYS_AUTHENTICATE); if (!a) { bool r = attr_list_add_bool(new_attrs, CKA_ALWAYS_AUTHENTICATE, CK_FALSE); goto_error_false(r); } bool r = attr_list_add_bool(new_attrs, CKA_SIGN_RECOVER, CK_FALSE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_SENSITIVE, CK_FALSE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_UNWRAP, CK_FALSE); goto_error_false(r); r = attr_list_add_bool(new_attrs, CKA_WRAP_WITH_TRUSTED, CK_FALSE); goto_error_false(r); r = attr_list_add_buf(new_attrs, CKA_UNWRAP_TEMPLATE, NULL, 0); goto_error_false(r); r = attr_list_add_buf(new_attrs, CKA_PUBLIC_KEY_INFO, NULL, 0); goto_error_false(r); r = attr_list_add_int(new_attrs, CKA_CLASS, CKO_PRIVATE_KEY); goto_error_false(r); *private_attrs = attr_list_append_attrs(*private_attrs, &new_attrs); goto_error_false(*private_attrs); return attr_common_add_key(private_attrs); error: attr_list_free(new_attrs); return rv; } static CK_RV attr_common_add_RSA_privatekey(attr_list **private_attrs) { CK_RV rv = CKR_HOST_MEMORY; /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*private_attrs, CKA_MODULUS); if (!a) { LOGE("Expected object to have CKA_MODULUS"); return CKR_GENERAL_ERROR; } a = attr_get_attribute_by_type(*private_attrs, CKA_PUBLIC_EXPONENT); if (!a) { LOGE("Expected object to have CKA_PUBLIC_EXPONENT"); return CKR_GENERAL_ERROR; } attr_list *new_attrs = NULL; a = attr_get_attribute_by_type(*private_attrs, CKA_MODULUS_BITS); if (!a) { new_attrs = attr_list_new(); if (!new_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } a = attr_get_attribute_by_type(*private_attrs, CKA_MODULUS); /* we checked above this cant fail */ assert(a); CK_ULONG modulus_bits = 0; safe_mul(modulus_bits, a->ulValueLen, 8); bool r = attr_list_add_int(new_attrs, CKA_MODULUS_BITS, modulus_bits); goto_error_false(r); } *private_attrs = attr_list_append_attrs(*private_attrs, &new_attrs); goto_error_false(*private_attrs); return attr_common_add_privatekey(private_attrs); error: attr_list_free(new_attrs); return rv; } static CK_RV attr_common_add_EC_privatekey(attr_list **private_attrs) { /* expected */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*private_attrs, CKA_EC_POINT); if (!a) { LOGE("Expected object to have CKA_EC_POINT"); return CKR_GENERAL_ERROR; } return attr_common_add_privatekey(private_attrs); } CK_RV rsa_gen_mechs(attr_list *new_pub_attrs, attr_list *new_priv_attrs) { /* XXX These are hardcoded for now */ CK_MECHANISM_TYPE t[] = { CKM_RSA_X_509, CKM_RSA_PKCS_OAEP, CKM_RSA_PKCS, CKM_SHA1_RSA_PKCS, CKM_SHA256_RSA_PKCS, CKM_SHA384_RSA_PKCS, CKM_SHA512_RSA_PKCS, CKM_RSA_PKCS_PSS, CKM_SHA1_RSA_PKCS_PSS, CKM_SHA256_RSA_PKCS_PSS, CKM_SHA384_RSA_PKCS_PSS, CKM_SHA512_RSA_PKCS_PSS, }; if (new_pub_attrs) { bool r = attr_list_add_int_seq(new_pub_attrs, CKA_ALLOWED_MECHANISMS, (CK_BYTE_PTR)&t, sizeof(t)); goto_error_false(r); } if (new_priv_attrs) { bool r = attr_list_add_int_seq(new_priv_attrs, CKA_ALLOWED_MECHANISMS, (CK_BYTE_PTR)&t, sizeof(t)); goto_error_false(r); } return CKR_OK; error: return CKR_GENERAL_ERROR; } /* * Add required attributes to the RSA objects based on: * - http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/errata01/os/pkcs11-curr-v2.40-errata01-os-complete.html#_Toc441850406 * - 2.1.2 and 2.1.3 */ static CK_RV rsa_add_missing_attrs(attr_list **public_attrs, attr_list **private_attrs) { CK_RV rv = CKR_HOST_MEMORY; attr_list *new_pub_attrs = attr_list_new(); if (!new_pub_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } attr_list *new_priv_attrs = attr_list_new(); if (!new_priv_attrs) { attr_list_free(new_pub_attrs); LOGE("oom"); return CKR_HOST_MEMORY; } rv = rsa_gen_mechs(new_pub_attrs, new_priv_attrs); if (rv != CKR_OK) { goto error; } bool r = attr_list_add_int(new_pub_attrs, CKA_KEY_TYPE, CKK_RSA); goto_error_false(r); r = attr_list_add_int(new_priv_attrs, CKA_KEY_TYPE, CKK_RSA); goto_error_false(r); *public_attrs = attr_list_append_attrs(*public_attrs, &new_pub_attrs); goto_error_false(*public_attrs); *private_attrs = attr_list_append_attrs(*private_attrs, &new_priv_attrs); goto_error_false(*private_attrs); rv = attr_common_add_RSA_privatekey(private_attrs); if (rv != CKR_OK) { goto error; } rv = attr_common_add_RSA_publickey(public_attrs); if (rv != CKR_OK) { goto error; } return CKR_OK; error: attr_list_free(new_priv_attrs); attr_list_free(new_pub_attrs); return rv; } static CK_RV ecc_gen_mechs(attr_list *new_pub_attrs, attr_list *new_priv_attrs) { /* XXX These are hardcoded for now */ CK_MECHANISM_TYPE t[] = { CKM_ECDSA, CKM_ECDSA_SHA1, CKM_ECDSA_SHA256, CKM_ECDSA_SHA384, CKM_ECDSA_SHA512, CKM_ECDH1_DERIVE, }; bool r = attr_list_add_int_seq(new_pub_attrs, CKA_ALLOWED_MECHANISMS, (CK_BYTE_PTR)&t, sizeof(t)); goto_error_false(r); r = attr_list_add_int_seq(new_priv_attrs, CKA_ALLOWED_MECHANISMS, (CK_BYTE_PTR)&t, sizeof(t)); goto_error_false(r); return CKR_OK; error: return CKR_GENERAL_ERROR; } static CK_RV ecc_add_missing_attrs(attr_list **public_attrs, attr_list **private_attrs) { CK_RV rv = CKR_HOST_MEMORY; CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(*public_attrs, CKA_EC_PARAMS); if (!a) { LOGE("CKA_EC_PARAMS missing"); return CKR_GENERAL_ERROR; } attr_list *new_pub_attrs = attr_list_new(); if (!new_pub_attrs) { LOGE("oom"); return CKR_HOST_MEMORY; } attr_list *new_priv_attrs = attr_list_new(); if (!new_priv_attrs) { attr_list_free(new_pub_attrs); LOGE("oom"); return CKR_HOST_MEMORY; } bool r = attr_list_add_buf(new_pub_attrs, CKA_EC_PARAMS, a->pValue, a->ulValueLen); goto_error_false(r); rv = ecc_gen_mechs(new_pub_attrs, new_priv_attrs); if (rv != CKR_OK) { goto error; } /* clients behave better when EC_PRIVATE objects have CKA_EC_PARAMS */ a = attr_get_attribute_by_type(*public_attrs, CKA_EC_PARAMS); if (!a) { LOGE("Expected object to have CKA_EC_PARAMS"); goto error; } r = attr_list_add_buf(new_priv_attrs, CKA_EC_PARAMS, a->pValue, a->ulValueLen); goto_error_false(r); r = attr_list_add_int(new_pub_attrs, CKA_KEY_TYPE, CKK_EC); goto_error_false(r); r = attr_list_add_int(new_priv_attrs, CKA_KEY_TYPE, CKK_EC); goto_error_false(r); *private_attrs = attr_list_append_attrs(*private_attrs, &new_priv_attrs); goto_error_false(*private_attrs); *public_attrs = attr_list_append_attrs(*public_attrs, &new_pub_attrs); goto_error_false(*public_attrs); rv = attr_common_add_EC_privatekey(private_attrs); if (rv != CKR_OK) { goto error; } return attr_common_add_EC_publickey(public_attrs); error: attr_list_free(new_priv_attrs); attr_list_free(new_pub_attrs); return rv; } static CK_RV attr_conditional_add( attr_list *search_attrs, /* look in this list */ CK_ULONG conds[], size_t conds_len, /* if not set add them */ attr_list *ext_attrs, /* from this list of attributes */ attr_list **filtered_attrs) { /* and return them to me */ assert(filtered_attrs); attr_handler2 *h; attr_list *d = attr_list_new(); if (!d) { return CKR_HOST_MEMORY; } bool r; CK_ULONG c; /* for each of the new attrs ADD TO PRIVATE */ for (c = 0; c < ext_attrs->count; c++) { /* current extra attribute we're examining */ CK_ATTRIBUTE_PTR cur = &ext_attrs->attrs[c]; /* actual filtered list to save it to, shallow copy ok */ CK_ULONG i; /* is it a conditional attr */ for (i = 0; i < conds_len; i++) { /* yes it's conditional */ if (cur->type == conds[i]) { /* * is it in the externally supplied attribute present in the user specified * template */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(search_attrs, cur->type); if (!a) { /* * we just treat it like a regular attribute to add so break out of the inner loop */ goto add_item; } else if (a->ulValueLen != cur->ulValueLen || memcmp(a->pValue, cur->pValue, cur->ulValueLen)) { /* yes - better match */ LOGE("User specified and TPM specified attr mismatch: 0x%lx", cur->type); attr_list_free(d); return CKR_GENERAL_ERROR; } break; } } /* not conditional and specified, skip */ if (i != conds_len) { continue; } add_item: /* no - add it, shallow copy ok */ h = attr_lookup(cur->type); assert(h); r = add_type_copy(cur, h->memtype, d); if (!r) { attr_list_free(d); return CKR_GENERAL_ERROR; } } if (!d->count) { attr_list_free(d); *filtered_attrs = NULL; } else { *filtered_attrs = d; } return CKR_OK; } CK_RV attr_add_missing_attrs(attr_list **public_attrs, attr_list **private_attrs, attr_list *ext_attrs, CK_MECHANISM_TYPE mech) { switch (mech) { case CKM_RSA_PKCS_KEY_PAIR_GEN: break; case CKM_EC_KEY_PAIR_GEN: break; default: LOGE("Unsupported keygen mechanism: 0x%lx", mech); return CKR_MECHANISM_INVALID; } CK_RV rv = CKR_GENERAL_ERROR; attr_list *filtered_pub_attrs = NULL; attr_list *filtered_priv_attrs = NULL; bool r = attr_list_add_int(*public_attrs, CKA_KEY_GEN_MECHANISM, mech); goto_error_false(r); r = attr_list_add_int(*private_attrs, CKA_KEY_GEN_MECHANISM, mech); goto_error_false(r); /* * We can't just blindly add the extra attributes, as we don't want the tpm specifying * attributes already in the template. * * Conditionally add them for public and private */ /* add only if not set, sanity check that values match */ CK_ULONG conds[] = { CKA_DECRYPT, CKA_VERIFY, CKA_SIGN, CKA_ENCRYPT, }; rv = attr_conditional_add( *private_attrs, conds, ARRAY_LEN(conds), ext_attrs, &filtered_priv_attrs); if (rv != CKR_OK) { goto error; } rv = attr_conditional_add( *public_attrs, conds, ARRAY_LEN(conds), ext_attrs, &filtered_pub_attrs); if (rv != CKR_OK) { goto error; } *private_attrs = attr_list_append_attrs(*private_attrs, &filtered_priv_attrs); goto_error_false(*private_attrs); *public_attrs = attr_list_append_attrs(*public_attrs, &filtered_pub_attrs); goto_error_false(*public_attrs); /* key type specific stuff */ switch (mech) { case CKM_RSA_PKCS_KEY_PAIR_GEN: return rsa_add_missing_attrs(public_attrs, private_attrs); break; case CKM_EC_KEY_PAIR_GEN: return ecc_add_missing_attrs(public_attrs, private_attrs); } assert(0); LOGE("barn fire"); return CKR_GENERAL_ERROR; error: attr_list_free(filtered_priv_attrs); attr_list_free(filtered_pub_attrs); return rv; } static CK_RV check_attr(CK_ATTRIBUTE_PTR a, CK_BYTE memtype) { CK_BBOOL bbool; CK_RV rv = CKR_GENERAL_ERROR; /* validate sizes */ CK_ULONG ulValueLen = a->ulValueLen; switch (memtype) { case TYPE_BYTE_INT: if (ulValueLen != sizeof(CK_ULONG)) { LOGE("ulValueLen(%lu) != sizeof(CK_ULONG)", ulValueLen); return CKR_MECHANISM_PARAM_INVALID; } break; case TYPE_BYTE_BOOL: rv = attr_CK_BBOOL(a, &bbool); if (rv != CKR_OK) { return rv; } break; case TYPE_BYTE_INT_SEQ: if (ulValueLen % sizeof(CK_ULONG)) { LOGE("ulValueLen(%lu) %% sizeof(CK_ULONG)", ulValueLen % sizeof(CK_ULONG)); return CKR_MECHANISM_PARAM_INVALID; } break; case TYPE_BYTE_HEX_STR: /* nothing to do */ break; default: LOGE("Unknown data type representation, got: %u", memtype); return CKR_GENERAL_ERROR; } return CKR_OK; } CK_RV attr_list_update_entry(attr_list *attrs, CK_ATTRIBUTE_PTR untrusted_attr) { assert(attrs); assert(untrusted_attr); CK_ATTRIBUTE_TYPE t = untrusted_attr->type; attr_handler2 *handler = attr_lookup(t); assert(handler); CK_ATTRIBUTE_PTR found = attr_get_attribute_by_type(attrs, t); if (!found) { LOGE("Attribute entry not found"); return CKR_GENERAL_ERROR; } void *pValue = untrusted_attr->pValue; CK_ULONG ulValueLen = untrusted_attr->ulValueLen; if (ulValueLen != found->ulValueLen) { void *new_pValue = type_zrealloc(found->pValue, ulValueLen, handler->memtype); if (!new_pValue) { LOGE("oom"); return CKR_HOST_MEMORY; } /* update the found node with the new resized memory */ found->ulValueLen = ulValueLen; found->pValue = new_pValue; } /* update the contents of memory with what was provided */ memcpy(found->pValue, pValue, ulValueLen); return CKR_OK; } CK_RV attr_list_append_entry(attr_list **attrs, CK_ATTRIBUTE_PTR untrusted_attr) { assert(attrs); assert(*attrs); assert(untrusted_attr); CK_ATTRIBUTE_TYPE t = untrusted_attr->type; attr_handler2 *handler = attr_lookup(t); assert(handler); CK_RV rv = check_attr(untrusted_attr, handler->memtype); if (rv != CKR_OK) { return rv; } attr_list *new_item = NULL; bool res = attr_typify(untrusted_attr, 1, &new_item); if (!res) { LOGE("Could not typify attr: %lu", untrusted_attr->type); return CKR_GENERAL_ERROR; } attr_list *x = attr_list_append_attrs( *attrs, &new_item); if (!x) { return CKR_GENERAL_ERROR; } *attrs = x; return CKR_OK; } const char *attr_get_name(CK_ATTRIBUTE_TYPE t) { attr_handler2 *attr = attr_lookup(t); assert(attr); assert(attr->name); return attr->name; } #define UTILS_GENERIC_ATTR_TYPE_CONVERT(T) \ CK_RV attr_##T(CK_ATTRIBUTE_PTR attr, T *x) { \ assert(attr); \ assert(x); \ \ if (attr->ulValueLen != sizeof(*x)) { \ return CKR_ATTRIBUTE_VALUE_INVALID; \ } \ \ *x = *(T *)attr->pValue; \ \ return CKR_OK; \ } UTILS_GENERIC_ATTR_TYPE_CONVERT(CK_ULONG); UTILS_GENERIC_ATTR_TYPE_CONVERT(CK_BBOOL); UTILS_GENERIC_ATTR_TYPE_CONVERT(CK_OBJECT_CLASS); UTILS_GENERIC_ATTR_TYPE_CONVERT(CK_KEY_TYPE); #define UTILS_GENERIC_EXTRACTOR(type, T) \ T attr_list_get_##type(attr_list *attrs, T defvalue) { \ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, type); \ if (!a) { \ return defvalue; \ } \ T x = defvalue; \ CK_RV rv = attr_##T(a, &x); \ return rv != CKR_OK ? defvalue : x; \ } UTILS_GENERIC_EXTRACTOR(CKA_PRIVATE, CK_BBOOL); UTILS_GENERIC_EXTRACTOR(CKA_CLASS, CK_OBJECT_CLASS); UTILS_GENERIC_EXTRACTOR(CKA_KEY_TYPE, CK_KEY_TYPE); UTILS_GENERIC_EXTRACTOR(CKA_TOKEN, CK_BBOOL); tpm2-pkcs11-1.9.1/src/lib/backend.c0000644000175100017510000002471614666345422012305 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include "backend.h" #include "backend_esysdb.h" #include "backend_fapi.h" enum backend { backend_error, backend_esysdb, backend_fapi }; static enum backend get_backend(void) { const char *env = getenv("TPM2_PKCS11_BACKEND"); if (!env || !strcasecmp(env, "esysdb")) { return backend_esysdb; } if (!strcasecmp(env, "fapi")) { return backend_fapi; } return backend_error; } /* This file includes the logic for selecting, aggregating and * distributing calls to different backends. * For now this will only be the esysdb backend that uses tss2-esys * and sqlite3 for operations. * In the future, logic will be added to also include the tss2-fapi * library for storage and TPM interaction. */ static bool fapi_init = false; static bool esysdb_init = false; CK_RV backend_init(void) { LOGV("Initializing backends"); enum backend backend = get_backend(); if (backend == backend_error) { return CKR_GENERAL_ERROR; } CK_RV rv = backend_fapi_init(); if (rv) { static const char *msg = "FAPI backend was not initialized."; if (backend == backend_fapi) { LOGE(msg); return rv; } if (rv != CKR_FUNCTION_NOT_SUPPORTED) { LOGW(msg); } } else { fapi_init = true; } rv = backend_esysdb_init(); if (rv) { LOGW("ESYSDB backend was not initialized."); } else { esysdb_init = true; } if (!fapi_init && !esysdb_init) { LOGE("Neither FAPI nor ESYSDB backends could be initialized."); return CKR_GENERAL_ERROR; } return CKR_OK; } CK_RV backend_destroy(void) { LOGV("Destroying backends"); CK_RV rv = CKR_OK; enum backend backend = get_backend(); if (fapi_init) { rv = backend_fapi_destroy(); if (backend != backend_fapi) { rv = CKR_OK; } } if (esysdb_init) { CK_RV rv2 = backend_esysdb_destroy(); if (rv2 != CKR_OK) { rv = rv2; } } fapi_init = false; esysdb_init = false; return rv; } CK_RV backend_ctx_new(token *t) { enum backend backend = get_backend(); if (backend == backend_fapi) { return backend_fapi_ctx_new(t); } else { return backend_esysdb_ctx_new(t); } } void backend_ctx_free(token *t) { if (t->type == token_type_esysdb) { backend_esysdb_ctx_free(t); } else { backend_fapi_ctx_free(t); } tpm_ctx_free(t->tctx); } void backend_ctx_reset(token *t) { backend_esysdb_ctx_reset(t); /* fapi doesn't appear to need anything */ } /** Create a new token * * Create a new sealed object and store it in the data store. * * @param[in,out] t The token information on input and generated token * on output. * @param[in] hexwrappingkey TODO * @param[in] newauth The authorization value for the security operator * of the newly created token. * @param[in] newsalthex TODO * @returns TODO */ CK_RV backend_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex) { enum backend backend = get_backend(); if (backend == backend_fapi) { if (!fapi_init) { LOGE("FAPI backend not initialized."); return CKR_GENERAL_ERROR; } LOGV("Creating token under FAPI"); return backend_fapi_create_token_seal(t, hexwrappingkey, newauth, newsalthex); } else { if (!esysdb_init) { LOGE("FAPI backend not initialized."); return CKR_GENERAL_ERROR; } LOGV("Creating token under ESYSDB"); return backend_esysdb_create_token_seal(t, hexwrappingkey, newauth, newsalthex); } } /** Retrieve all tokens available. * * The returned list is a set of all stored tokens with all * objects inside the token structure. * @param[out] tok The list of tokens. * @param[out] len The number of entries in tok. * @returns TODO */ CK_RV backend_get_tokens(token **tok, size_t *len) { CK_RV rv = CKR_GENERAL_ERROR; enum backend backend = get_backend(); /* make sure tmp has a path to be populated */ if (!esysdb_init && !fapi_init) { LOGE("No backend initialized"); return CKR_GENERAL_ERROR; } token *tmp = calloc(MAX_TOKEN_CNT, sizeof(token)); if (!tmp) { LOGE("oom"); return CKR_HOST_MEMORY; } if (esysdb_init) { rv = backend_esysdb_get_tokens(tmp, len); if (rv) { LOGE("Getting tokens from esysdb backend failed."); return rv; } LOGV("Esysdb returned %zi token", *len); } if (fapi_init) { rv = backend_fapi_add_tokens(tmp, len); if (rv) { static const char *msg = "Getting tokens from fapi backend failed."; if (backend == backend_fapi) { LOGE(msg); token_free_list(&tmp, len); return rv; } else { LOGW(msg); } } LOGV("FAPI + Esysdb returned %zi token", *len); } /* -1 for starting at id 1 and -1 for the empty token */ if (*len >= MAX_TOKEN_CNT - 2) { LOGW("Too many tokens, must have less than %d to show empty tokens", MAX_TOKEN_CNT - 1); token_free_list(&tmp, len); return CKR_GENERAL_ERROR; } token *t = &tmp[*len]; for (t->id = 1; t->id < MAX_TOKEN_CNT && *len; t->id += 1) { size_t i = 0; for (; i < *len; i++) { if ((tmp[i]).id == t->id) { break; } } if (i == *len) { break; } } *len += 1; rv = token_min_init(t); if (rv != CKR_OK) { token_free_list(&tmp, len); return rv; } *tok = tmp; LOGV("Esysdb + FAPI returned %zi token", *len); return rv; } /** Initialize the user PIN data for a given token. * * @param[in,out] t The token to initialize user pin for. * @param[in] sealdata The data to be stored inside the created seal. * @param[in] newauthhex The auth value to be set of the created seal. * @param[in] newsalthex The salt value to be stored for this auth. * returns TODO */ CK_RV backend_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex) { switch (t->type) { case token_type_esysdb: return backend_esysdb_init_user(t, sealdata, newauthhex, newsalthex); case token_type_fapi: return backend_fapi_init_user(t, sealdata, newauthhex, newsalthex); default: assert(1); return CKR_GENERAL_ERROR; } } /** Store a new object for a given token in the backend. * * Note: Adding the object to the ring buffer in the token * struct is done independently. * * @param[in,out] t The token to add the object to. * @param[in] tobj The object to store. * @returns TODO */ CK_RV backend_add_object(token *t, tobject *tobj) { switch (t->type) { case token_type_esysdb: LOGV("Adding object to token using esysdb backend."); return backend_esysdb_add_object(t, tobj); case token_type_fapi: LOGV("Adding object to token using fapi backend."); return backend_fapi_add_object(t, tobj); default: assert(1); return CKR_GENERAL_ERROR; } } /** Given a token with a config, persist it. * * @param t * The token whose config to propagate to persistent storage. * * @return * CKR_OK on success, anything else is an error. */ CK_RV backend_update_token_config(token *t) { switch (t->type) { case token_type_esysdb: LOGV("Adding object to token using esysdb backend."); return backend_esysdb_update_token_config(t); case token_type_fapi: LOGE("Not supported on FAPI"); return CKR_FUNCTION_NOT_SUPPORTED; default: assert(1); return CKR_GENERAL_ERROR; } } /** Given a token and tobject, will persist the new attributes. * * @param tok * The token to persist to. * @param tobj * The tobject to persist. * @param attrs * The new attributes to persist. * @return * CKR_OK on success, anything else is an error. */ CK_RV backend_update_tobject_attrs(token *tok, tobject *tobj, attr_list *attrs) { switch (tok->type) { case token_type_esysdb: return backend_esysdb_update_tobject_attrs(tobj, attrs); case token_type_fapi: return backend_fapi_update_tobject_attrs(tok, tobj, attrs); default: assert(1); return CKR_GENERAL_ERROR; } } /** * Removes a tobject from the backend. * @param tok * The token to remove from. * @param tobj * The tobject to remove. * @return * CKR_OK on success, anything else is an error. */ CK_RV backend_rm_tobject(token *tok, tobject *tobj) { switch (tok->type) { case token_type_esysdb: return backend_esysdb_rm_tobject(tobj); case token_type_fapi: return backend_fapi_rm_tobject(tok, tobj); default: assert(1); return CKR_GENERAL_ERROR; } } /** Unseal a token's wrapping key. * * Unseal a token's wrapping key as part of the Login process. * The wrapping key is then used to decrypt the individual tobjects' * auth values. * * @param[in,out] tok The token to remove from. * @param[in] user Whether to unseal from the user or so seal. * @param[in] tpin The pin value to use for unsealing. * @return CKR_OK on success, anything else is an error. */ CK_RV backend_token_unseal_wrapping_key(token *tok, bool user, twist tpin) { switch (tok->type) { case token_type_esysdb: return backend_esysdb_token_unseal_wrapping_key(tok, user, tpin); case token_type_fapi: return backend_fapi_token_unseal_wrapping_key(tok, user, tpin); default: assert(1); return CKR_GENERAL_ERROR; } } /** Change the authValue of a token's seal blob. * * @param[in,out] tok The token to remove from. * @param[in] user Whether to unseal from the user or so seal. * @param[in] tpin The pin value to use for unsealing. * @return CKR_OK on success, anything else is an error. */ CK_RV backend_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin) { switch (tok->type) { case token_type_esysdb: return backend_esysdb_token_changeauth(tok, user, toldpin, tnewpin); case token_type_fapi: return backend_fapi_token_changeauth(tok, user, toldpin, tnewpin); default: assert(1); return CKR_GENERAL_ERROR; } } tpm2-pkcs11-1.9.1/src/lib/backend_esysdb.c0000644000175100017510000002725514535673717013665 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include "backend_esysdb.h" #include "db.h" #include "ssl_util.h" #include "tpm.h" CK_RV backend_esysdb_init(void) { tpm_init(); return db_init(); } CK_RV backend_esysdb_destroy(void) { db_destroy(); tpm_destroy(); return CKR_OK; } CK_RV backend_esysdb_ctx_new(token *t) { return tpm_ctx_new(t->config.tcti, &t->tctx); } static void sealobject_free(sealobject *sealobj) { twist_free(sealobj->soauthsalt); twist_free(sealobj->sopriv); twist_free(sealobj->sopub); twist_free(sealobj->userauthsalt); twist_free(sealobj->userpub); twist_free(sealobj->userpriv); memset(sealobj, 0, sizeof(*sealobj)); } void backend_esysdb_ctx_reset(token *t) { sealobject_free(&t->esysdb.sealobject); /* * the rest of the state can live so we don't need to free/realloc it * Beware of who holds the mutex! */ } void backend_esysdb_ctx_free(token *t) { sealobject_free(&t->esysdb.sealobject); } static CK_RV get_or_create_primary(token *t) { /* if there is no primary object ... */ if (t->pid) { return CKR_OK; } /* is there one in the db to use ? */ CK_RV rv = db_get_first_pid(&t->pid); if (rv != CKR_OK) { return rv; } /* if so use it */ if (t->pid) { /* tokens in the DB store already have an associated primary object */ rv = db_init_pobject(t->pid, &t->pobject, t->tctx); if (rv != CKR_OK) { LOGE("Could not initialize pobject"); return rv; } /* if it's a transient primary we need to create it */ return t->pobject.config.is_transient ? tpm_create_transient_primary_from_template(t->tctx, t->pobject.config.template_name, NULL, &t->pobject.handle) : CKR_OK; } /* is their a PC client spec key ? */ uint32_t handle = 0; twist blob = NULL; rv = tpm_get_existing_primary(t->tctx, &handle, &blob); if (rv != CKR_OK) { return rv; } /* nothing, create one and persist it */ if (!handle) { rv = tpm_create_persistent_primary(t->tctx, &handle, &blob); if (rv != CKR_OK) { return rv; } } assert(handle); t->pobject.config.is_transient = false; t->pobject.handle = handle; t->pobject.config.blob = blob; rv = db_add_primary(&t->pobject, &t->pid); assert(t->pid); return rv; } /** Create a new token in esysdb backend. * * See backend_create_token_seal() */ CK_RV backend_esysdb_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex) { CK_RV rv = CKR_GENERAL_ERROR; /* * find or create a primary object and get the serialized blob * for it. */ rv = get_or_create_primary(t); if (rv != CKR_OK) { LOGE("Could not find nor create a primary object"); goto error; } /* we have a primary object, create the seal object underneath it */ rv = tpm2_create_seal_obj(t->tctx, t->pobject.objauth, t->pobject.handle, newauth, NULL, hexwrappingkey, &t->esysdb.sealobject.sopub, &t->esysdb.sealobject.sopriv); if (rv != CKR_OK) { LOGE("Could not create SO seal object"); goto error; } t->esysdb.sealobject.soauthsalt = newsalthex; /* TODO get TCTI config from ENV var and use throughout this process */ t->config.is_initialized = true; rv = db_add_token(t); if (rv != CKR_OK) { /* do not take ownership on failure */ t->esysdb.sealobject.soauthsalt = NULL; /* reset the token to an initial state */ backend_esysdb_ctx_reset(t); LOGE("Could not add token to db"); goto error; } assert(t->id); error: return rv; } /** Retrieve all esys tokens available. * * See backend_get_tokens() */ CK_RV backend_esysdb_get_tokens(token *tok, size_t *len) { return db_get_tokens(tok, len); } static void change_token_mem_data(token *tok, bool is_so, twist newsalthex, twist newprivblob, twist newpubblob) { twist *authsalt; twist *priv; twist *pub; if (is_so) { authsalt = &tok->esysdb.sealobject.soauthsalt; priv = &tok->esysdb.sealobject.sopriv; pub = &tok->esysdb.sealobject.sopub; } else { authsalt = &tok->esysdb.sealobject.userauthsalt; priv = &tok->esysdb.sealobject.userpriv; pub = &tok->esysdb.sealobject.userpub; } twist_free(*authsalt); twist_free(*priv); *authsalt = newsalthex; *priv = newprivblob; if (newpubblob) { twist_free(*pub); *pub = newpubblob; } } /** Initialize the user PIN data for a given token. * * See backend_init_user() */ CK_RV backend_esysdb_init_user(token *tok, const twist sealdata, const twist newauthhex, const twist newsalthex) { CK_RV rv = CKR_GENERAL_ERROR; twist newpubblob = NULL; twist newprivblob = NULL; /* create a new seal object and seal the data */ rv = tpm2_create_seal_obj(tok->tctx, tok->pobject.objauth, tok->pobject.handle, newauthhex, tok->esysdb.sealobject.userpub, sealdata, &newpubblob, &newprivblob); if (rv != CKR_OK) { goto out; } /* update the db data */ rv = db_update_for_pinchange( tok, false, /* new seal object auth metadata */ newsalthex, /* private and public blobs */ newprivblob, newpubblob); if (rv != CKR_OK) { goto out; } /* update in-memory metadata for seal object and primary object */ change_token_mem_data(tok, false, newsalthex, newprivblob, newpubblob); out: /* If the function failed, then these pointers ARE NOT CLAIMED and must be free'd */ if (rv != CKR_OK) { twist_free(newprivblob); twist_free(newpubblob); } return rv; } /** Store a new object for a given token in the backend. * * See backend_add_object() */ CK_RV backend_esysdb_add_object(token *t, tobject *tobj) { LOGV("Adding object to esysdb backend"); return db_add_new_object(t, tobj); } /** Given a token with a config, persist it. * * See backend_update_token_config() */ CK_RV backend_esysdb_update_token_config (token *tok) { return db_update_token_config(tok); } CK_RV backend_esysdb_update_tobject_attrs(tobject *tobj, attr_list *attrs) { return db_update_tobject_attrs(tobj->id, attrs); } CK_RV backend_esysdb_rm_tobject(tobject *tobj) { return db_delete_object(tobj); } /** Unseal a token's wrapping key. * * see backend_token_unseal_wrapping_key() */ CK_RV backend_esysdb_token_unseal_wrapping_key(token *tok, bool user, twist tpin) { CK_RV rv = CKR_GENERAL_ERROR; bool on_error_flush_session = false; sealobject *sealobj = &tok->esysdb.sealobject; twist sealpub = user ? sealobj->userpub : sealobj->sopub; twist sealpriv = user ? sealobj->userpriv : sealobj->sopriv; if (user && !sealpub && !sealpriv) { return CKR_USER_PIN_NOT_INITIALIZED; } assert(sealpub); assert(sealpriv); if (!tpm_session_active(tok->tctx)) { LOGV("token parent object handle is 0x%08x", tok->pobject.handle); CK_RV tmp = tpm_session_start(tok->tctx, tok->pobject.objauth, tok->pobject.handle); if (tmp != CKR_OK) { LOGE("Could not start Auth Session with the TPM."); return tmp; } on_error_flush_session = true; } uint32_t pobj_handle = tok->pobject.handle; twist pobjauth = tok->pobject.objauth; uint32_t sealhandle; rv = tpm_loadobj(tok->tctx, pobj_handle, pobjauth, sealpub, sealpriv, &sealhandle); if (rv != CKR_OK) { goto error; } twist sealsalt = user ? sealobj->userauthsalt : sealobj->soauthsalt; twist sealobjauth = ssl_util_hash_pass(tpin, sealsalt); if (!sealobjauth) { rv = CKR_HOST_MEMORY; goto error; } twist wrappingkeyhex = tpm_unseal(tok->tctx, sealhandle, sealobjauth); twist_free(sealobjauth); tpm_flushcontext(tok->tctx, sealhandle); if (!wrappingkeyhex) { rv = CKR_PIN_INCORRECT; goto error; } if (tok->wrappingkey) { twist_free(wrappingkeyhex); } else { tok->wrappingkey = twistbin_unhexlify(wrappingkeyhex); twist_free(wrappingkeyhex); if (!tok->wrappingkey) { LOGE("Expected internal wrapping key in base 16 format"); goto error; } } return CKR_OK; error: if (on_error_flush_session) { tpm_session_stop(tok->tctx); } return rv; } CK_RV backend_esysdb_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin) { CK_RV rv = CKR_GENERAL_ERROR; bool is_anyone_logged_in = token_is_any_user_logged_in(tok); bool session_started = false; /* new seal auth data */ twist newsalthex = NULL; twist newauthhex = NULL; twist newprivblob = NULL; /* * Step 1 - Generate a new sealing auth value derived from pin and salt * * This will be used to update the sealobjects table, the columns: * - (so|user)authsalt --> newsalt */ rv = utils_setup_new_object_auth(tnewpin, &newauthhex, &newsalthex); if (rv != CKR_OK) { goto out; } /* * Step 2 - Generate the current auth value from oldpin */ twist oldsalt = !user ? tok->esysdb.sealobject.soauthsalt : tok->esysdb.sealobject.userauthsalt; twist oldauth = ssl_util_hash_pass(toldpin, oldsalt); if (!oldauth) { goto out; } /* if no one is logged in, we need to start a session with the TPM */ if (!is_anyone_logged_in) { rv = tpm_session_start(tok->tctx, tok->pobject.objauth, tok->pobject.handle); if (rv != CKR_OK) { LOGE("Could not start session with TPM"); goto out; } session_started = true; } sealobject *sealobj = &tok->esysdb.sealobject; twist sealpub = !user ? sealobj->sopub : sealobj->userpub; twist sealpriv = !user ? sealobj->sopriv : sealobj->userpriv; uint32_t sealhandle; rv = tpm_loadobj(tok->tctx, tok->pobject.handle, tok->pobject.objauth, sealpub, sealpriv, &sealhandle); if (rv != CKR_OK) { goto out; } /* * Step 3- Call tpm2_changeauth and get a new private object portion * * This private blob will update table sealobjects (user|so)priv */ rv = tpm_changeauth(tok->tctx, tok->pobject.handle, sealhandle, oldauth, newauthhex, &newprivblob); twist_free(oldauth); tpm_flushcontext(tok->tctx, sealhandle); if (rv != CKR_OK) { goto out; } /* * Step X - update the db data */ rv = db_update_for_pinchange( tok, !user, /* new seal object auth metadata */ newsalthex, /* private and public blobs */ newprivblob, NULL); if (rv != CKR_OK) { goto out; } /* TODO: consider calling unload on old seal object handle and WARN on failure */ /* * step 6 - update in-memory metadata for seal object and primary object */ change_token_mem_data(tok, !user, newsalthex, newprivblob, NULL); rv = CKR_OK; out: if (session_started) { rv = tpm_session_stop(tok->tctx); if (rv != CKR_OK) { LOGE("Could not stop session with TPM"); } } /* If the function failed, then these pointers ARE NOT CLAIMED and must be free'd */ if (rv != CKR_OK) { twist_free(newsalthex); twist_free(newprivblob); } twist_free(newauthhex); return rv; } tpm2-pkcs11-1.9.1/src/lib/backend_fapi.c0000644000175100017510000006742514666345422013310 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #ifdef HAVE_FAPI #include #endif #include #include #include "backend_fapi.h" #include "emitter.h" #include "parser.h" #include "ssl_util.h" #include "utils.h" #ifdef HAVE_FAPI FAPI_CONTEXT *fctx = NULL; unsigned maxobjectid = 0; static void fail_fapi_msg(TSS2_RC rc) { bool is_release = false; const char *split = strchr(VERSION, '-'); if (split) { /* Something like: * 1.6.0-20-gb57b05742878-dirty * 1.6.0-rc0 */ is_release = !strncmp(split, "rc", 2); } else { /* something like 1.2.3 */ is_release = true; } const char *version = is_release ? VERSION : "master"; LOGW("Listing FAPI token objects failed: \"%s\"\n" "Please see https://github.com/tpm2-software/tpm2-pkcs11/blob/%s/docs/FAPI.md " "for more details", Tss2_RC_Decode(rc), version); } static CK_RV get_key(FAPI_CONTEXT *fapictx, tpm_ctx *tctx, const char *path, uint32_t *esysHandle, uint32_t *pid) { bool ret; TSS2_RC rc; uint8_t type; uint8_t *data; size_t length; twist name = NULL; rc = Fapi_GetEsysBlob(fapictx, path, &type, &data, &length); if (rc != TSS2_RC_SUCCESS) { LOGE("Cannot get Esys blob for key %s", path); return CKR_GENERAL_ERROR; } twist twistdata = twistbin_new(data, length); Fapi_Free(data); if (!twistdata) { return CKR_HOST_MEMORY; } switch(type) { case FAPI_ESYSBLOB_CONTEXTLOAD: ret = tpm_contextload_handle(tctx, twistdata, esysHandle); if (!ret) { LOGE("Error on contextload"); return CKR_GENERAL_ERROR; } break; case FAPI_ESYSBLOB_DESERIALIZE: ret = tpm_deserialize_handle(tctx, twistdata, esysHandle); if (!ret) { LOGE("Error on deserialize"); return CKR_GENERAL_ERROR; } break; default: LOGE("Unknown FAPI type for ESYS blob."); twist_free(twistdata); return CKR_GENERAL_ERROR; } /* * For debugging multiple tokens, populate pid with something. * That something will be the LAST four octets of name. To avoid * the name algorithm identifier bits that are common to all Names. * This way its likely to be unique, but ultimately it doesn't * matter. */ ret = tpm_get_name(tctx, *esysHandle, &name); if (ret) { length = twist_len(name); if (length >= sizeof(*pid)) { memcpy(pid, &name[length - sizeof(*pid)], sizeof(*pid)); LOGV("pid set to: 0x%"PRIX32, *pid); } else { LOGW("Name length smaller than sizeof(uint32_t), got: %zu" "Not populating pid", length); *pid = 0; } } else { LOGW("Could not get name to populate pid"); *pid = 0; } twist_free(name); return CKR_OK; } CK_RV backend_fapi_init(void) { if (fctx) { LOGW("Backend FAPI already initialized."); return CKR_OK; } LOGV("Calling Fapi_Initialize"); TSS2_RC rc = Fapi_Initialize(&fctx, NULL); if (rc) { fail_fapi_msg(rc); return CKR_GENERAL_ERROR; } return CKR_OK; } CK_RV backend_fapi_destroy(void) { LOGV("Calling Fapi_Finalize"); Fapi_Finalize(&fctx); return CKR_OK; } CK_RV backend_fapi_ctx_new(token *t) { TSS2_TCTI_CONTEXT *tcti; TSS2_RC rc = Fapi_GetTcti(fctx, &tcti); if (rc) { LOGE("Getting FAPI's tcti context"); return CKR_GENERAL_ERROR; } t->type = token_type_fapi; t->fapi.ctx = fctx; return tpm_ctx_new_fromtcti(tcti, &t->tctx); } void backend_fapi_ctx_free(token *t) { UNUSED(t); } #define PREFIX "/HS/SRK/tpm2-pkcs11-token-" static char *tss_path_from_id(unsigned id, const char *type) { /* Allocate for PREFIX + type + "-" + id + '\0' */ size_t size = 0; safe_add(size, strlen(PREFIX), strlen(type)); safe_adde(size, strlen(PREFIX)); safe_adde(size, 1 + 8 + 1); char *path = malloc(size); if (!path) { return NULL; } sprintf(&path[0], PREFIX "%s-%08x", type, id); return path; } static char *path_get_parent(const char *path) { char *end = rindex(path, '/'); if (!end) { return NULL; } return strndup(path, end - path); } /** Create a new token in fapi backend. * * See backend_create_token_seal() */ CK_RV backend_fapi_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex) { TSS2_RC rc; char *path = tss_path_from_id(t->id, "so"); if (!path) { LOGE("No path constructed."); return CKR_GENERAL_ERROR; } rc = Fapi_CreateSeal(t->fapi.ctx, path, NULL /*type*/, twist_len(hexwrappingkey), NULL /*policy*/, newauth, (uint8_t*)hexwrappingkey); if (rc) { LOGE("Creation of a FAPI seal failed."); free(path); return CKR_GENERAL_ERROR; } /* Turn trailing whitespaces into trailing \0; cause some software is weird */ for (size_t i = sizeof(t->label); i > 0; i--) { if (t->label[i-1] != ' ') { break; } t->label[i-1] = '\0'; } char label[sizeof(t->label) + 1]; /* token-label length plus \0, cannot overflow */ label[sizeof(t->label)] = '\0'; memcpy(&label[0], &t->label[0], sizeof(t->label)); rc = Fapi_SetDescription(t->fapi.ctx, path, &label[0]); if (rc) { LOGE("Setting FAPI seal description failed."); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } size_t appdata_len = 0; safe_add(appdata_len, twist_len(newsalthex), 1); uint8_t *appdata = malloc(appdata_len); if (!appdata) { LOGE("oom"); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } memcpy(appdata, newsalthex, appdata_len - 1); appdata[appdata_len - 1] = '\0'; rc = Fapi_SetAppData(t->fapi.ctx, path, appdata, appdata_len); free(appdata); if (rc) { LOGE("Setting FAPI seal appdata failed."); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } t->fapi.soauthsalt = newsalthex; t->type = token_type_fapi; t->config.is_initialized = true; assert(t->id); char *parentpath = path_get_parent(path); free(path); if (!parentpath) { return CKR_HOST_MEMORY; } CK_RV rv = get_key(t->fapi.ctx, t->tctx, parentpath, &t->pobject.handle, &t->pid); free(parentpath); if (rv != CKR_OK) { LOGE("Error getting parent key"); return rv; } return CKR_OK; } /** Retrieve all fapi tokens available. * * See backend_get_tokens() */ CK_RV backend_fapi_add_tokens(token *tok, size_t *len) { CK_RV rv = CKR_GENERAL_ERROR; TSS2_RC rc; char *pathlist; rc = Fapi_List(fctx, "/HS/SRK", &pathlist); if (rc == TSS2_FAPI_RC_IO_ERROR) { /* If no token seals were found, we're done here. */ LOGV("No FAPI token seals found."); } else if (rc != TSS2_RC_SUCCESS) { fail_fapi_msg(rc); return CKR_GENERAL_ERROR; } char *strtokr_save = NULL; for (char *path = strtok_r(pathlist, ":", &strtokr_save); path != NULL; path = strtok_r(NULL, ":", &strtokr_save)) { /* Skip over potential profile nodes that don't interest us. */ char *subpath = path; if (!strncmp(path, "/P_", strlen("/P_"))) { subpath = index(path + 1, '/'); if (!subpath) { LOGE("Malformed path received"); goto error; } } unsigned id; if (sscanf(subpath, PREFIX "so-%08x", &id) != 1) { LOGV("%s aka %s is not a token, ignoring", path, subpath); continue; } LOGV("Found a token at %s", path); token *t = &tok[*len]; memset(t, 0, sizeof(*t)); *len += 1; t->type = token_type_fapi; t->id = id; rv = token_min_init(t); if (rv) { LOGE("token min init failed"); goto error; } //FIXME t->fapi.ctx = fctx; char *parentpath = path_get_parent(path); if (!parentpath) { rv = CKR_HOST_MEMORY; goto error; } rv = get_key(t->fapi.ctx, t->tctx, parentpath, &t->pobject.handle, &t->pid); free(parentpath); if (rv != CKR_OK) { return rv; } char *label; rc = Fapi_GetDescription(t->fapi.ctx, path, &label); if (rc) { LOGE("Getting FAPI seal description failed."); goto error; } memcpy(&t->label[0], label, strlen(label)); Fapi_Free(label); LOGV("Parsing objects for token %i:%s", t->id, &t->label[0]); uint8_t *appdata; size_t appdata_len; rc = Fapi_GetAppData(t->fapi.ctx, path, &appdata, &appdata_len); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } t->fapi.soauthsalt = twistbin_new(appdata, strlen((char *)appdata)); if (!t->fapi.soauthsalt) { LOGE("OOM"); Fapi_Free(appdata); goto error; } size_t offset = 0; safe_add(offset, strlen((char *)appdata), 1); uint8_t *yaml = &appdata[offset]; while ((size_t)(yaml - appdata) < appdata_len) { LOGV("Current tobj at offset %zi / %zi is: %s", yaml - appdata, appdata_len, yaml); if (((size_t)(yaml - appdata) > appdata_len - 9) || (strlen((char*)yaml) < 10)) { LOGE("Incomplete tobj in appdata"); Fapi_Free(appdata); goto error; } tobject *tobj = tobject_new(); if (!tobj) { LOGE("oom"); Fapi_Free(appdata); goto error; } if (sscanf((char*)yaml, "%08x:", &tobj->id) != 1) { LOGE("Could not scan tobj id"); free(tobj); Fapi_Free(appdata); goto error; } maxobjectid = (maxobjectid > tobj->id)? maxobjectid : tobj->id; if (!parse_attributes_from_string(&yaml[9], strlen((char*)&yaml[9]), &tobj->attrs)) { LOGE("Could not parse FAPI attrs, got: \"%s\"", yaml); free(tobj); Fapi_Free(appdata); goto error; } rv = object_init_from_attrs(tobj); if (rv != CKR_OK) { LOGE("Object initialization failed"); free(tobj); Fapi_Free(appdata); goto error; } rv = token_add_tobject_last(t, tobj); if (rv != CKR_OK) { LOGE("Failed to initialize tobject from FAPI"); free(tobj); Fapi_Free(appdata); goto error; } size_t offset = 0; safe_add(offset, strlen((char *)yaml), 1); yaml += offset; LOGV("\nCurrent next is: %zi / %zi", yaml - appdata, appdata_len); } Fapi_Free(appdata); t->config.is_initialized = true; /* Initialize the User PIN area. */ /*********************************/ path = tss_path_from_id(t->id, "usr"); if (!path) { LOGE("No path constructed."); goto error; } rc = Fapi_GetAppData(t->fapi.ctx, path, &appdata, NULL); free(path); if (rc == TSS2_FAPI_RC_KEY_NOT_FOUND) { LOGV("No user pin found for token %08x.", t->id); continue; } if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } t->fapi.userauthsalt = twistbin_new(appdata, strlen((char *)appdata)); Fapi_Free(appdata); if (!t->fapi.userauthsalt) { LOGE("OOM"); goto error; } } rv = CKR_OK; out: Fapi_Free(pathlist); return rv; error: if (rv == CKR_OK) { rv = CKR_GENERAL_ERROR; } goto out; } /** Initialize the user PIN data for a given token. * * See backend_init_user() */ CK_RV backend_fapi_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex) { TSS2_RC rc; char *path = tss_path_from_id(t->id, "usr"); if (!path) { LOGE("No path constructed."); return CKR_GENERAL_ERROR; } rc = Fapi_CreateSeal(t->fapi.ctx, path, NULL /*type*/, twist_len(sealdata), NULL /*policy*/, newauthhex, (uint8_t*)sealdata); if (rc) { LOGE("Creation of a FAPI seal failed."); free(path); return CKR_GENERAL_ERROR; } char label[sizeof(t->label) + 1]; /* token-label length plus \0, no overflow possible */ label[sizeof(t->label)] = '\0'; memcpy(&label[0], &t->label[0], sizeof(t->label)); rc = Fapi_SetDescription(t->fapi.ctx, path, &label[0]); if (rc) { LOGE("Setting FAPI seal description failed."); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } size_t appdata_len = 0; safe_add(appdata_len, twist_len(newsalthex), 1); uint8_t *appdata = malloc(appdata_len); if (!appdata) { LOGE("oom"); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } memcpy(appdata, newsalthex, appdata_len - 1); appdata[appdata_len - 1] = '\0'; rc = Fapi_SetAppData(t->fapi.ctx, path, appdata, appdata_len); free(appdata); if (rc) { LOGE("Setting FAPI seal appdata failed."); Fapi_Delete(t->fapi.ctx, path); free(path); return CKR_GENERAL_ERROR; } free(path); twist_free(t->fapi.userauthsalt); t->fapi.userauthsalt = newsalthex; return CKR_OK; } /** Store a new object for a given token in the backend. * * See backend_add_object() * * The object is added to the AppData of the token object * in the FAPI keystore. The different objects are separated * by a \0 delimiter. The first element of the AppData is the * salthex, so the first object starts after the first \0. */ CK_RV backend_fapi_add_object(token *t, tobject *tobj) { TSS2_RC rc; LOGV("Adding object to fapi token %i", t->id); char *path = tss_path_from_id(t->id, "so"); if (!path) { LOGE("No path constructed."); return CKR_GENERAL_ERROR; } safe_adde(maxobjectid, 1); tobj->id = maxobjectid; char *attrs = emit_attributes_to_string(tobj->attrs); if (!attrs) { LOGE("OOM"); free(path); return CKR_GENERAL_ERROR; } uint8_t *appdata; size_t appdata_len; rc = Fapi_GetAppData(t->fapi.ctx, path, &appdata, &appdata_len); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } size_t newappdata_len = appdata_len; safe_adde(newappdata_len, 9); /* id as 8byte hex and ':' */ safe_adde(newappdata_len, strlen(attrs)); safe_adde(newappdata_len, 1); /* terminating '\0' */ uint8_t *newappdata = malloc(newappdata_len); if (!newappdata) { LOGE("OOM"); Fapi_Free(appdata); goto error; } memcpy(&newappdata[0], &appdata[0], appdata_len); sprintf((char*)&newappdata[appdata_len], "%08x:", tobj->id); memcpy(&newappdata[appdata_len + 9], attrs, strlen(attrs)); newappdata[newappdata_len - 1] = '\0'; Fapi_Free(appdata); rc = Fapi_SetAppData(t->fapi.ctx, path, newappdata, newappdata_len); free(newappdata); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } free(path); free(attrs); return CKR_OK; error: free(path); free(attrs); return CKR_GENERAL_ERROR; } /** Given a token and tobject, will persist the new attributes in fapi backend. * * see backend_update_tobject_attrs(). */ CK_RV backend_fapi_update_tobject_attrs(token *t, tobject *tobj, attr_list *attrlist) { TSS2_RC rc; char *path = tss_path_from_id(t->id, "so"); if (!path) { LOGE("No path constructed."); return CKR_GENERAL_ERROR; } uint8_t *appdata; size_t appdata_len; rc = Fapi_GetAppData(t->fapi.ctx, path, &appdata, &appdata_len); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } /* Skip over soauthvalue (the first element of appData) */ size_t tobj_start = strlen((char*)appdata) + 1; /* Find the offset of the tobj to delete */ while (1) { if (tobj_start + 9 >= appdata_len) { LOGE("tobj not found in appdata."); goto error; } unsigned id; if (sscanf((char*)&appdata[tobj_start], "%08x:", &id) != 1) { LOGE("bad tobject."); goto error; } if (id == tobj->id) { LOGV("Object found at offset %zi.", tobj_start); break; } safe_adde(tobj_start, strlen((char*)&appdata[tobj_start])); safe_adde(tobj_start, 1); } size_t tobj_len = strlen((char*)&appdata[tobj_start]); char *attrs = emit_attributes_to_string(attrlist); if (!attrs) { LOGE("OOM"); free(path); return CKR_GENERAL_ERROR; } size_t newappdata_len = appdata_len - tobj_len; safe_adde(newappdata_len, 9); /* id as 8byte hex and ':' */ safe_adde(newappdata_len, strlen(attrs)); uint8_t *newappdata = malloc(newappdata_len); if (!newappdata) { LOGE("OOM"); Fapi_Free(appdata); goto error; } memcpy(&newappdata[0], &appdata[0], tobj_start); sprintf((char*)&newappdata[tobj_start], "%08x:%s", tobj->id, attrs); memcpy(&newappdata[tobj_start + 9 + strlen(attrs) + 1], &appdata[tobj_start + tobj_len + 1], appdata_len - tobj_start - tobj_len - 1); newappdata[newappdata_len - 1] = '\0'; Fapi_Free(appdata); rc = Fapi_SetAppData(t->fapi.ctx, path, newappdata, newappdata_len); free(newappdata); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } free(path); return CKR_OK; error: free(path); return CKR_GENERAL_ERROR; } /** Removes a tobject from the fapi backend. * * See backend_rm_tobject(). */ CK_RV backend_fapi_rm_tobject(token *t, tobject *tobj) { TSS2_RC rc; char *path = tss_path_from_id(t->id, "so"); if (!path) { LOGE("No path constructed."); return CKR_GENERAL_ERROR; } uint8_t *appdata; size_t appdata_len; rc = Fapi_GetAppData(t->fapi.ctx, path, &appdata, &appdata_len); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } /* Skip over soauthvalue (the first element of appData) */ size_t tobj_start = strlen((char*)appdata) + 1; /* Find the offset of the tobj to delete */ while (1) { if (tobj_start + 9 >= appdata_len) { LOGE("tobj not found in appdata."); goto error; } unsigned id; if (sscanf((char*)&appdata[tobj_start], "%08x:", &id) != 1) { LOGE("bad tobject."); goto error; } if (id == tobj->id) { LOGV("Object found at offset %zi.", tobj_start); break; } safe_adde(tobj_start, strlen((char*)&appdata[tobj_start])); safe_adde(tobj_start, 1); } size_t tobj_len = strlen((char*)&appdata[tobj_start]); memmove(&appdata[tobj_start - 1], &appdata[tobj_start + tobj_len], appdata_len - tobj_start - tobj_len); appdata_len -= tobj_len + 1; rc = Fapi_SetAppData(t->fapi.ctx, path, appdata, appdata_len); Fapi_Free(appdata); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto error; } free(path); return CKR_OK; error: free(path); return CKR_GENERAL_ERROR; } struct authtable { const char *path; const char *auth; }; static TSS2_RC auth_cb(const char *path, char const *description, const char **auth, void *userData) { LOGV("Searching auth value for %s", description); struct authtable *at = (struct authtable *) userData; for (; at->path != NULL; at = &at[1]) { /* Using strstr because description may be prefixed with a crypto profile */ if (strstr(path, at->path)) { *auth = at->auth; if (!*auth) { return TSS2_FAPI_RC_MEMORY; } return TSS2_RC_SUCCESS; } } return TSS2_FAPI_RC_AUTHORIZATION_UNKNOWN; } /** Unseal a token's wrapping key. * * see backend_token_unseal_wrapping_key() */ CK_RV backend_fapi_token_unseal_wrapping_key(token *tok, bool user, twist tpin) { CK_RV rv = CKR_GENERAL_ERROR; TSS2_RC rc; char *path = tss_path_from_id(tok->id, user ? "usr":"so"); if (!path) { LOGE("No path constructed."); return CKR_HOST_MEMORY; } twist sealsalt = user ? tok->fapi.userauthsalt : tok->fapi.soauthsalt; twist sealobjauth = ssl_util_hash_pass(tpin, sealsalt); if (!sealobjauth) { rv = CKR_HOST_MEMORY; goto error; } char label[sizeof(tok->label) + 1]; /* token-label length plus \0, cannot overflow */ label[sizeof(tok->label)] = '\0'; memcpy(&label[0], &tok->label[0], sizeof(tok->label)); /* FAPI may return the description (which is the label) or the path. Thus we register our auth value for either. */ struct authtable authtable[] = { { path, (char *)sealobjauth }, { &label[0], (char *)sealobjauth }, { NULL, NULL } }; rc = Fapi_SetAuthCB(tok->fapi.ctx, auth_cb, &authtable[0]); if (rc) { twist_free(sealobjauth); LOGE("Fapi_SetAuthCB failed."); goto error; } uint8_t *data; size_t size; rc = Fapi_Unseal(tok->fapi.ctx, path, &data, &size); Fapi_SetAuthCB(tok->fapi.ctx, NULL, NULL); twist_free(sealobjauth); if (user && rc == TSS2_FAPI_RC_PATH_NOT_FOUND) { rv = CKR_USER_PIN_NOT_INITIALIZED; goto error; } if (rc) { LOGE("Fapi_Unseal failed."); goto error; } twist wrappingkeyhex = twistbin_new(data, size); Fapi_Free(data); if (!wrappingkeyhex) { rv = CKR_HOST_MEMORY; goto error; } if (tok->wrappingkey) { twist_free(wrappingkeyhex); } else { tok->wrappingkey = twistbin_unhexlify(wrappingkeyhex); twist_free(wrappingkeyhex); if (!tok->wrappingkey) { LOGE("Expected internal wrapping key in base 16 format"); goto error; } } free(path); /* Since tobject are esysdb backed, they need an active session. */ if (!tpm_session_active(tok->tctx)) { LOGV("token parent object handle is 0x%08x", tok->pobject.handle); CK_RV tmp = tpm_session_start(tok->tctx, tok->pobject.objauth, tok->pobject.handle); if (tmp != CKR_OK) { LOGE("Could not start Auth Session with the TPM."); return tmp; } } return CKR_OK; error: free(path); return rv; } CK_RV backend_fapi_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin) { CK_RV rv = CKR_GENERAL_ERROR; TSS2_RC rc; char *path = tss_path_from_id(tok->id, user ? "usr":"so"); if (!path) { LOGE("No path constructed."); return CKR_HOST_MEMORY; } twist newsalthex = NULL; twist newauthhex = NULL; twist oldauth = NULL; rv = utils_setup_new_object_auth(tnewpin, &newauthhex, &newsalthex); if (rv != CKR_OK) { goto out; } rv = CKR_GENERAL_ERROR; oldauth = ssl_util_hash_pass(toldpin, user ? tok->fapi.userauthsalt : tok->fapi.soauthsalt); if (!oldauth) { goto out; } char label[sizeof(tok->label) + 1]; /* token-label length plus \0, cannot overflow */ label[sizeof(tok->label)] = '\0'; memcpy(&label[0], &tok->label[0], sizeof(tok->label)); /* FAPI may return the description (which is the label) or the path. Thus we register our auth value for either. */ struct authtable authtable[] = { { path, (char *)oldauth }, { &label[0], (char *)oldauth }, { NULL, NULL } }; rc = Fapi_SetAuthCB(tok->fapi.ctx, auth_cb, &authtable[0]); if (rc) { LOGE("Fapi_SetAuthCB failed."); goto out; } LOGV("Attempting to change auth value for %s", path); rc = Fapi_ChangeAuth(tok->fapi.ctx, path, newauthhex); Fapi_SetAuthCB(tok->fapi.ctx, NULL, NULL); if (rc) { LOGE("Fapi_ChangeAuth failed."); goto out; } uint8_t *appdata; size_t appdata_len; rc = Fapi_GetAppData(tok->fapi.ctx, path, &appdata, &appdata_len); if (rc) { LOGE("Getting FAPI seal appdata failed."); goto out; } size_t newappdata_len = appdata_len - strlen((char*)appdata); safe_adde(newappdata_len, twist_len(newsalthex)); uint8_t *newappdata = malloc(newappdata_len); if (!newappdata) { Fapi_Free(appdata); rv = CKR_HOST_MEMORY; goto out; } memcpy(newappdata, newsalthex, twist_len(newsalthex)); memcpy(&newappdata[twist_len(newsalthex)], &appdata[strlen((char*)appdata)], appdata_len - strlen((char*)appdata)); Fapi_Free(appdata); rc = Fapi_SetAppData(tok->fapi.ctx, path, newappdata, newappdata_len); free(newappdata); if (rc) { LOGE("Setting FAPI seal appdata failed."); goto out; } if (user) { twist_free(tok->fapi.userauthsalt); tok->fapi.userauthsalt = newsalthex; } else { twist_free(tok->fapi.soauthsalt); tok->fapi.soauthsalt = newsalthex; } rv = CKR_OK; out: free(path); if (rv != CKR_OK) { twist_free(newsalthex); } twist_free(oldauth); twist_free(newauthhex); return rv; } #else CK_RV backend_fapi_init(void) { LOGV("FAPI not enabled, failing init"); return CKR_FUNCTION_NOT_SUPPORTED; } CK_RV backend_fapi_destroy(void) { return CKR_OK; } CK_RV backend_fapi_ctx_new(token *t) { UNUSED(t); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } void backend_fapi_ctx_free(token *t) { UNUSED(t); LOGV("FAPI NOT ENABLED"); } CK_RV backend_fapi_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex) { UNUSED(t); UNUSED(hexwrappingkey); UNUSED(newauth); UNUSED(newsalthex); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_add_tokens(token *tok, size_t *len) { UNUSED(tok); UNUSED(len); LOGV("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex) { UNUSED(t); UNUSED(sealdata); UNUSED(newauthhex); UNUSED(newsalthex); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_add_object(token *t, tobject *tobj) { UNUSED(t); UNUSED(tobj); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_update_tobject_attrs(token *tok, tobject *tobj, attr_list *attrlist) { UNUSED(tok); UNUSED(tobj); UNUSED(attrlist); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_rm_tobject(token *tok, tobject *tobj) { UNUSED(tok); UNUSED(tobj); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_token_unseal_wrapping_key(token *tok, bool user, twist tpin) { UNUSED(tok); UNUSED(user); UNUSED(tpin); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } CK_RV backend_fapi_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin) { UNUSED(tok); UNUSED(user); UNUSED(toldpin); UNUSED(tnewpin); LOGE("FAPI NOT ENABLED"); return CKR_GENERAL_ERROR; } #endif tpm2-pkcs11-1.9.1/src/lib/db.c0000644000175100017510000021440714667614777011316 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "db.h" #include "debug.h" #include "emitter.h" #include "log.h" #include "mutex.h" #include "object.h" #include "parser.h" #include "session_table.h" #include "token.h" #include "tpm.h" #include "twist.h" #include "utils.h" #include "typed_memory.h" #include #ifndef TPM2_PKCS11_STORE_DIR #define TPM2_PKCS11_STORE_DIR "/etc/tpm2_pkcs11" #endif #define DB_VERSION 8 #define goto_oom(x, l) if (!x) { LOGE("oom"); goto l; } #define goto_error(x, l) if (x) { goto l; } #define gotobinderror(rc, msg) do { if (rc) { LOGE("cannot bind "msg); goto error; } } while(0) #define TRANSACTION_START \ do { \ bool _transaction_active = false; \ if (start() != SQLITE_OK) { \ goto error; \ } \ \ _transaction_active = true; #define TRANSACTION_END(rx) \ error: \ if (_transaction_active) { \ if (rv == CKR_OK) { \ if(commit() != SQLITE_OK) { \ rollback(); \ rx = CKR_GENERAL_ERROR; \ } \ } else { \ rollback(); \ } \ } \ } while (0); #define CKR_VENDOR_SKIP (CKR_VENDOR_DEFINED | 0x01) static struct { sqlite3 *db; } global; static inline void _sqlite3_finalize_warn(sqlite3 *db, sqlite3_stmt *stmt) { int rc = sqlite3_finalize(stmt); if (rc != SQLITE_OK) { LOGW("sqlite3_finalize: %s", sqlite3_errmsg(db)); } } static inline void sqlite3_finalize_warn(sqlite3_stmt *stmt) { if (stmt) { _sqlite3_finalize_warn(global.db, stmt); } } static int _get_blob(sqlite3_stmt *stmt, int i, bool can_be_null, twist *blob) { /* This cannot return < 0 */ int size = sqlite3_column_bytes(stmt, i); assert(size >= 0); if (size == 0) { return can_be_null ? SQLITE_OK : SQLITE_ERROR; } /* 0 length is the only way it will return NULL */ const void *data = sqlite3_column_blob(stmt, i); assert(data); *blob = twistbin_new(data, size); if (!*blob) { LOGE("oom"); return SQLITE_ERROR; } return SQLITE_OK; } DEBUG_VISIBILITY int get_blob_null(sqlite3_stmt *stmt, int i, twist *blob) { return _get_blob(stmt, i, true, blob); } DEBUG_VISIBILITY int get_blob(sqlite3_stmt *stmt, int i, twist *blob) { return _get_blob(stmt, i, false, blob); } typedef struct token_get_cb_ud token_get_cb_ud; struct token_get_cb_ud { size_t offset; size_t len; token *tokens; }; DEBUG_VISIBILITY tobject *__real_db_tobject_new(sqlite3_stmt *stmt) { tobject *tobj = tobject_new(); if (!tobj) { LOGE("oom"); return NULL; } int i; int col_count = sqlite3_data_count(stmt); for (i=0; i < col_count; i++) { const char *name = sqlite3_column_name(stmt, i); if (!strcmp(name, "id")) { tobj->id = sqlite3_column_int(stmt, i); } else if (!strcmp(name, "tokid")) { // Ignore sid we don't need it as token has that data. } else if (!strcmp(name, "attrs")) { int bytes = sqlite3_column_bytes(stmt, i); const unsigned char *attrs = sqlite3_column_text(stmt, i); if (!attrs || !bytes) { LOGE("tobject does not have attributes"); goto error; } bool res = parse_attributes_from_string(attrs, bytes, &tobj->attrs); if (!res) { LOGE("Could not parse DB attrs, got: \"%s\"", attrs); goto error; } } else { LOGE("Unknown row, got: %s", name); goto error; } } assert(tobj->id); CK_RV rv = object_init_from_attrs(tobj); if (rv != CKR_OK) { LOGE("Object initialization failed"); goto error; } return tobj; error: tobject_free(tobj); return NULL; } WEAK DEBUG_VISIBILITY tobject *db_tobject_new(sqlite3_stmt *stmt) { return __real_db_tobject_new(stmt); } DEBUG_VISIBILITY int __real_init_tobjects(token *tok) { const char *sql = "SELECT * FROM tobjects WHERE tokid=?"; sqlite3_stmt *stmt; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("Cannot prepare tobject query: %s\n", sqlite3_errmsg(global.db)); return rc; } rc = sqlite3_bind_int(stmt, 1, tok->id); if (rc != SQLITE_OK) { LOGE("Cannot bind tobject tokid: %s\n", sqlite3_errmsg(global.db)); goto error; } while ((rc = sqlite3_step(stmt)) == SQLITE_ROW) { tobject *insert = db_tobject_new(stmt); if (!insert) { LOGE("Failed to initialize tobject from db"); goto error; } CK_RV rv = token_add_tobject_last(tok, insert); if (rv != CKR_OK) { tobject_free(insert); goto error; } } rc = SQLITE_OK; error: sqlite3_finalize(stmt); return rc; } WEAK DEBUG_VISIBILITY int init_tobjects(token *tok) { return __real_init_tobjects(tok); } static void pobject_v3_free(pobject_v3 *old_pobj) { twist_free(old_pobj->handle); free(old_pobj->hierarchy); free(old_pobj->objauth); } static void pobject_v4_free(pobject_v4 *new_pobj) { free(new_pobj->config); free(new_pobj->hierarchy); free(new_pobj->objauth); } DEBUG_VISIBILITY int init_pobject_v3_from_stmt(sqlite3_stmt *stmt, pobject_v3 *old_pobj) { old_pobj->id = sqlite3_column_int(stmt, 0); char *tmp = (char *)sqlite3_column_text(stmt, 1); if (!tmp) { LOGE("Hierarchy is NULL"); goto error; } old_pobj->hierarchy = strdup(tmp); if (!old_pobj->hierarchy) { LOGE("oom"); goto error; } int rc = _get_blob(stmt, 2, false, &old_pobj->handle); if (rc != SQLITE_OK) { goto error; } tmp = (char *)sqlite3_column_text(stmt, 3); if (!tmp) { LOGE("objauth is NULL"); goto error; } old_pobj->objauth = strdup(tmp); if (!old_pobj->objauth) { LOGE("oom"); goto error; } return SQLITE_OK; error: pobject_v3_free(old_pobj); return SQLITE_ERROR; } DEBUG_VISIBILITY CK_RV convert_pobject_v3_to_v4(pobject_v3 *old_pobj, pobject_v4 *new_pobj) { new_pobj->id = old_pobj->id; /* take and steal ownership of these pointers so we don't have oom issues */ new_pobj->hierarchy = old_pobj->hierarchy; old_pobj->hierarchy = NULL; new_pobj->objauth = old_pobj->objauth; old_pobj->objauth = NULL; pobject_config pobj_conf = { .is_transient = false, .blob = old_pobj->handle, }; char *config = emit_pobject_to_conf_string(&pobj_conf); if (!config) { LOGE("oom"); return CKR_HOST_MEMORY; } new_pobj->config = config; return CKR_OK; } static int start2(sqlite3 *db) { int rc = sqlite3_exec(db, "BEGIN TRANSACTION", NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(db)); } return rc; } static int start(void) { return start2(global.db); } static int commit2(sqlite3 *db) { return sqlite3_exec(db, "COMMIT", NULL, NULL, NULL); } static int commit(void) { return commit2(global.db); } static int rollback2(sqlite3 *db) { return sqlite3_exec(db, "ROLLBACK", NULL, NULL, NULL); } static int rollback(void) { return rollback2(global.db); } DEBUG_VISIBILITY CK_RV db_add_pobject_v4(sqlite3 *updb, pobject_v4 *new_pobj) { CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; const char *sql = "INSERT INTO pobjects2 (" "id," // index: 1 type: INT "hierarchy, " // index: 2 type: TEXT "config," // index: 3 type: TEXT "objauth" // index: 4 type: TEXT ") VALUES (" "?,?,?,?" ");"; int rc = sqlite3_prepare_v2(updb, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_bind_int(stmt, 1, new_pobj->id); gotobinderror(rc, "id"); rc = sqlite3_bind_text(stmt, 2, new_pobj->hierarchy, -1, SQLITE_STATIC); gotobinderror(rc, "hierarchy"); rc = sqlite3_bind_text(stmt, 3, new_pobj->config, -1, SQLITE_STATIC); gotobinderror(rc, "config"); rc = sqlite3_bind_text(stmt, 4, new_pobj->objauth, -1, SQLITE_STATIC); gotobinderror(rc, "objauth"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(updb)); goto error; } rv = CKR_OK; error: rc = sqlite3_finalize(stmt); if (rc != SQLITE_OK) { LOGW("Could not finalize stmt: %d", rc); } return rv; } DEBUG_VISIBILITY int init_pobject_from_stmt(sqlite3_stmt *stmt, tpm_ctx *tpm, pobject *pobj) { /* Get the YAML config and: * - parse it to the config structure * - if persistent deserializes the ESYS_TR into the handle * - if transient, verify that the template_name is set */ size_t yaml_size = sqlite3_column_bytes(stmt, 0); const unsigned char *pobj_yaml_conf = sqlite3_column_text(stmt, 0); bool res = parse_pobject_config_from_string(pobj_yaml_conf, yaml_size, &pobj->config); if (!res) { LOGE("Could not parse pobject config"); return SQLITE_ERROR; } if (!pobj->config.is_transient) { if (!pobj->config.blob) { LOGE("Expected persistent pobject config to have ESYS_TR blob"); return SQLITE_ERROR; } res = tpm_deserialize_handle(tpm, pobj->config.blob, &pobj->handle); if (!res) { /* just set a general error as rc could be success right now */ return SQLITE_ERROR; } } else if (!pobj->config.template_name) { LOGE("Expected transient pobject config to have a template name"); return SQLITE_ERROR; } pobj->objauth = twist_new((char *)sqlite3_column_text(stmt, 1)); if (!pobj->objauth) { LOGE("oom"); return SQLITE_ERROR; } int rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("stepping in pobjects, got: %s\n", sqlite3_errstr(rc)); return SQLITE_ERROR; } /* if it's a transient primary object create it */ if (tpm && pobj->config.is_transient) { CK_RV rv = tpm_create_transient_primary_from_template(tpm, pobj->config.template_name, pobj->objauth, &pobj->handle); if (rv != CKR_OK) { return SQLITE_ERROR; } } return SQLITE_OK; } DEBUG_VISIBILITY int __real_init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm) { const char *sql = "SELECT config,objauth FROM pobjects WHERE id=?"; sqlite3_stmt *stmt; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("Cannot prepare sobject query: %s\n", sqlite3_errmsg(global.db)); return rc; } rc = sqlite3_bind_int(stmt, 1, pid); if (rc != SQLITE_OK) { LOGE("Cannot bind pobject id: %s\n", sqlite3_errmsg(global.db)); goto error; } rc = sqlite3_step(stmt); if (rc != SQLITE_ROW) { LOGE("stepping in pobjects, got: %s\n", sqlite3_errstr(rc)); goto error; } rc = init_pobject_from_stmt(stmt, tpm, pobj); error: sqlite3_finalize(stmt); return rc; } WEAK DEBUG_VISIBILITY int init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm) { return __real_init_pobject(pid, pobj, tpm); } CK_RV db_init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm) { int rc = init_pobject(pid, pobj, tpm); return rc == SQLITE_OK ? CKR_OK : CKR_GENERAL_ERROR; } DEBUG_VISIBILITY int __real_init_sealobjects(unsigned tokid, sealobject *sealobj) { const char *sql = "SELECT * FROM sealobjects WHERE tokid=?"; sqlite3_stmt *stmt; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("Cannot prepare sealobject query: %s\n", sqlite3_errmsg(global.db)); return rc; } rc = sqlite3_bind_int(stmt, 1, tokid); if (rc != SQLITE_OK) { LOGE("Cannot bind tokid: %s\n", sqlite3_errmsg(global.db)); goto error; } rc = sqlite3_step(stmt); if (rc != SQLITE_ROW) { LOGE("stepping in sealobjects, got: %s\n", sqlite3_errstr(rc)); goto error; } int i; int col_count = sqlite3_data_count(stmt); for (i=0; i < col_count; i++) { const char *name = sqlite3_column_name(stmt, i); if (!strcmp(name, "id")) { // pass } else if (!strcmp(name, "userauthsalt")) { const char *x = (const char *)sqlite3_column_text(stmt, i); if (x) { sealobj->userauthsalt = twist_new(x); goto_oom(sealobj->userauthsalt, error); } } else if (!strcmp(name, "userpriv")) { goto_error(get_blob_null(stmt, i, &sealobj->userpriv), error); } else if (!strcmp(name, "userpub")) { goto_error(get_blob_null(stmt, i, &sealobj->userpub), error); } else if (!strcmp(name, "soauthsalt")) { sealobj->soauthsalt = twist_new((char *)sqlite3_column_text(stmt, i)); goto_oom(sealobj->soauthsalt, error); } else if (!strcmp(name, "sopriv")) { goto_error(get_blob(stmt, i, &sealobj->sopriv), error); } else if (!strcmp(name, "sopub")) { goto_error(get_blob(stmt, i, &sealobj->sopub), error); } else if (!strcmp(name, "tokid")) { // pass } else { LOGE("Unknown token: %s", name); goto error; } } rc = SQLITE_OK; error: sqlite3_finalize(stmt); return rc; } WEAK DEBUG_VISIBILITY int init_sealobjects(unsigned tokid, sealobject *sealobj) { return __real_init_sealobjects(tokid, sealobj); } DEBUG_VISIBILITY WEAK void db_get_label(token *t, sqlite3_stmt *stmt, int iCol) { snprintf((char *)t->label, sizeof(t->label), "%s", sqlite3_column_text(stmt, iCol)); } CK_RV db_get_tokens(token *tok, size_t *len) { size_t cnt = 0; const char *sql = "SELECT * FROM tokens"; sqlite3_stmt *stmt = NULL; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("Cannot prepare tobject query: %s\n", sqlite3_errmsg(global.db)); goto error; } size_t row = 0; while (sqlite3_step(stmt) == SQLITE_ROW) { if (cnt >= MAX_TOKEN_CNT) { LOGE("Too many tokens, must have less than %d", MAX_TOKEN_CNT); goto error; } token *t = &tok[row++]; int col_count = sqlite3_data_count(stmt); int i; for (i=0; i < col_count; i++) { const char *name = sqlite3_column_name(stmt, i); if (!strcmp(name, "id")) { t->id = sqlite3_column_int(stmt, i); } else if(!strcmp(name, "pid")) { t->pid = sqlite3_column_int(stmt, i); } else if (!strcmp(name, "label")) { db_get_label(t, stmt, i); } else if (!strcmp(name, "config")) { int bytes = sqlite3_column_bytes(stmt, i); const unsigned char *config = sqlite3_column_text(stmt, i); if (!config || !bytes) { LOGE("Expected token config to contain config data"); goto error; } bool result = parse_token_config_from_string(config, bytes, &t->config); if (!result) { LOGE("Could not parse token config, got: \"%s\"", config); goto error; } } else { LOGE("Unknown key: %s", name); goto error; } } /* done with sql key value search */ CK_RV rv = token_min_init(t); if (rv != CKR_OK) { goto error; } /* tokens in the DB store already have an associated primary object */ rc = init_pobject(t->pid, &t->pobject, t->tctx); if (rc != SQLITE_OK) { goto error; } if (!t->config.is_initialized) { LOGV("skipping further initialization of token tid: %u", t->id); /* token initialized, bump cnt */ cnt++; continue; } rc = init_sealobjects(t->id, &t->esysdb.sealobject); if (rc != SQLITE_OK) { goto error; } rc = init_tobjects(t); if (rc != SQLITE_OK) { goto error; } /* token initialized, bump cnt */ cnt++; } *len = cnt; sqlite3_finalize(stmt); return CKR_OK; error: token_free_list(&tok, &cnt); *len = 0; if (stmt) { sqlite3_finalize(stmt); } return CKR_GENERAL_ERROR; } CK_RV db_update_for_pinchange( token *tok, bool is_so, /* new seal object auth metadata */ twist newauthsalthex, /* private and public blobs */ twist newprivblob, twist newpubblob) { CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; char *sql = NULL; /* so update statements */ if (is_so) { if (newpubblob) { sql = "UPDATE sealobjects SET" " soauthsalt=?," /* index: 1 */ " sopriv=?," /* index: 2 */ " sopub=?" /* index: 3 */ " WHERE tokid=?"; /* index: 4 */ } else { sql = "UPDATE sealobjects SET" " soauthsalt=?," /* index: 1 */ " sopriv=?" /* index: 2 */ " WHERE tokid=?"; /* index: 3 */ } /* user */ } else { if (newpubblob) { sql = "UPDATE sealobjects SET" " userauthsalt=?," /* index: 1 */ " userpriv=?," /* index: 2 */ " userpub=?" /* index: 3 */ " WHERE tokid=?" ; /* index: 4 */ } else { sql = "UPDATE sealobjects SET" " userauthsalt=?," /* index: 1 */ " userpriv=?" /* index: 2 */ " WHERE tokid=?"; /* index: 3 */ } } /* * Prepare statements */ int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc) { LOGE("Could not prepare statement: \"%s\" error: \"%s\"", sql, sqlite3_errmsg(global.db)); return CKR_GENERAL_ERROR; } TRANSACTION_START; /* bind values */ /* sealobjects */ int index = 1; rc = sqlite3_bind_text(stmt, index++, newauthsalthex, -1, SQLITE_STATIC); gotobinderror(rc, "newauthsalthex"); rc = sqlite3_bind_blob(stmt, index++, newprivblob, twist_len(newprivblob), SQLITE_STATIC); gotobinderror(rc, "newprivblob"); if (newpubblob) { rc = sqlite3_bind_blob(stmt, index++, newpubblob, twist_len(newpubblob), SQLITE_STATIC); gotobinderror(rc, "newpubblob"); } rc = sqlite3_bind_int(stmt, index++, tok->id); gotobinderror(rc, "tokid"); /* * Everything is bound, fire off the sql statements */ rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("Could not execute stmt"); goto error; } rv = CKR_OK; TRANSACTION_END(rv); sqlite3_finalize_warn(stmt); return rv; } CK_RV db_add_new_object(token *tok, tobject *tobj) { CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; char *attrs = emit_attributes_to_string(tobj->attrs); if (!attrs) { return CKR_GENERAL_ERROR; } const char *sql = "INSERT INTO tobjects (" "tokid, " // index: 1 type: INT "attrs" // index: 2 type: TEXT (JSON) ") VALUES (" "?,?" ");"; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { free(attrs); LOGE("%s", sqlite3_errmsg(global.db)); return CKR_GENERAL_ERROR; } TRANSACTION_START; rc = sqlite3_bind_int(stmt, 1, tok->id); gotobinderror(rc, "tokid"); rc = sqlite3_bind_text(stmt, 2, attrs, -1, SQLITE_STATIC); gotobinderror(rc, "attrs"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(global.db)); goto error; } sqlite3_int64 id = sqlite3_last_insert_rowid(global.db); if (id == 0) { LOGE("Could not get id: %s", sqlite3_errmsg(global.db)); goto error; } if (id > UINT_MAX) { LOGE("id is larger than unsigned int, got: %lld", id); goto error; } tobject_set_id(tobj, (unsigned)id); rv = CKR_OK; TRANSACTION_END(rv); sqlite3_finalize_warn(stmt); free(attrs); return rv; } CK_RV db_delete_object(tobject *tobj) { CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; static const char *sql = "DELETE FROM tobjects WHERE id=?;"; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(global.db)); return CKR_GENERAL_ERROR; } TRANSACTION_START; rc = sqlite3_bind_int(stmt, 1, tobj->id); gotobinderror(rc, "id"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(global.db)); goto error; } rv = CKR_OK; TRANSACTION_END(rv); sqlite3_finalize_warn(stmt); return rv; } CK_RV db_add_primary(pobject *pobj, unsigned *pid) { assert(pid); CK_RV rv = CKR_GENERAL_ERROR; char *yaml_conf = NULL; sqlite3_stmt *stmt = NULL; const char *sql = "INSERT INTO pobjects (" "hierarchy, " // index: 1 type: TEXT "config," // index: 2 type: BLOB "objauth" // index: 3 type: TEXT ") VALUES (" "?,?,?" ");"; yaml_conf = emit_pobject_to_conf_string(&pobj->config); if (!yaml_conf) { return CKR_GENERAL_ERROR; } int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { free(yaml_conf); LOGE("%s", sqlite3_errmsg(global.db)); return CKR_GENERAL_ERROR; } TRANSACTION_START; rc = sqlite3_bind_text(stmt, 1, "o", -1, SQLITE_STATIC); gotobinderror(rc, "hierarchy"); rc = sqlite3_bind_text(stmt, 2, yaml_conf, -1, SQLITE_STATIC); gotobinderror(rc, "config"); rc = sqlite3_bind_text(stmt, 3, "", -1, SQLITE_STATIC); gotobinderror(rc, "objauth"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(global.db)); goto error; } sqlite3_int64 id = sqlite3_last_insert_rowid(global.db); if (id == 0) { LOGE("Could not get id: %s", sqlite3_errmsg(global.db)); goto error; } if (id > UINT_MAX) { LOGE("id is larger than unsigned int, got: %lld", id); goto error; } *pid = (unsigned)id; rv = CKR_OK; TRANSACTION_END(rv); sqlite3_finalize_warn(stmt); free(yaml_conf); return rv; } CK_RV db_update_token_config(token *tok) { assert(tok); CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; char *config = emit_config_to_string(tok); if (!config) { LOGE("Could not get token config"); return CKR_GENERAL_ERROR; } const char *sql = "UPDATE tokens SET" " config=?" // index: 1 type: TEXT (JSON) " WHERE id=?;"; // Index 2 type: int int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(global.db)); goto error; } rc = sqlite3_bind_text(stmt, 1, config, -1, SQLITE_STATIC); gotobinderror(rc, "config"); rc = sqlite3_bind_int(stmt, 2, tok->id); gotobinderror(rc, "id"); rv = CKR_OK; error: sqlite3_finalize_warn(stmt); free(config); return rv; } CK_RV _db_update_tobject_attrs(sqlite3 *db, unsigned id, attr_list *attrs) { assert(attrs); CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; char *attr_str = emit_attributes_to_string(attrs); if (!attr_str) { LOGE("Could not emit tobject attributes"); return CKR_GENERAL_ERROR; } const char *sql = "UPDATE tobjects SET" " attrs=?" // index: 1 type: TEXT (JSON) " WHERE id=?;"; // Index 2 type: int int rc = sqlite3_prepare_v2(db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(db)); goto error; } rc = sqlite3_bind_text(stmt, 1, attr_str, -1, SQLITE_STATIC); gotobinderror(rc, "attrs"); rc = sqlite3_bind_int(stmt, 2, id); gotobinderror(rc, "id"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("Could not execute stmt"); goto error; } rv = CKR_OK; error: sqlite3_finalize_warn(stmt); free(attr_str); return rv; } CK_RV db_update_tobject_attrs(unsigned id, attr_list *attrs) { assert(attrs); return _db_update_tobject_attrs(global.db, id, attrs); } CK_RV db_add_token(token *tok) { assert(tok); /* This function is only called from token_initialize, hence... */ assert(tok->config.is_initialized); CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; char *config = emit_config_to_string(tok); if (!config) { LOGE("Could not get token config"); return CKR_GENERAL_ERROR; } /* strip trailing spaces */ char label_buf[sizeof(tok->label) + 1] = { 0 }; memcpy(label_buf, tok->label, sizeof(tok->label)); size_t i; for (i=sizeof(tok->label); i > 0; i--) { char *p = &label_buf[i-1]; if (*p != ' ') { break; } *p = '\0'; } const char *sql = "INSERT INTO tokens (" "pid, " // index: 1 type: INT "label," // index: 2 type: TEXT "config" // index: 3 type: TEXT (JSON) ") VALUES (" "?,?,?" ");"; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(global.db)); free(config); return CKR_GENERAL_ERROR; } TRANSACTION_START; rc = sqlite3_bind_int(stmt, 1, tok->pid); gotobinderror(rc, "pid"); rc = sqlite3_bind_text(stmt, 2, label_buf, -1, SQLITE_STATIC); gotobinderror(rc, "config"); rc = sqlite3_bind_text(stmt, 3, config, -1, SQLITE_STATIC); gotobinderror(rc, "label"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(global.db)); goto error; } sqlite3_int64 id = sqlite3_last_insert_rowid(global.db); if (id == 0) { LOGE("Could not get id: %s", sqlite3_errmsg(global.db)); goto error; } if (id > UINT_MAX) { LOGE("id is larger than unsigned int, got: %lld", id); goto error; } tok->id = id; rc = sqlite3_finalize(stmt); gotobinderror(rc, "finalize"); stmt = NULL; /* add the sealobjects WITHIN the transaction */ sql = "INSERT INTO sealobjects" "(tokid, soauthsalt, sopriv, sopub)" "VALUES(?,?,?,?)"; rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("%s", sqlite3_errmsg(global.db)); goto error; } rc = sqlite3_bind_int(stmt, 1, tok->id); gotobinderror(rc, "tokid"); rc = sqlite3_bind_text(stmt, 2, tok->esysdb.sealobject.soauthsalt, -1, SQLITE_STATIC); gotobinderror(rc, "soauthsalt"); rc = sqlite3_bind_blob(stmt, 3, tok->esysdb.sealobject.sopriv, twist_len(tok->esysdb.sealobject.sopriv), SQLITE_STATIC); gotobinderror(rc, "sopriv"); rc = sqlite3_bind_blob(stmt, 4, tok->esysdb.sealobject.sopub, twist_len(tok->esysdb.sealobject.sopub), SQLITE_STATIC); gotobinderror(rc, "sopub"); rc = sqlite3_step(stmt); if (rc != SQLITE_DONE) { LOGE("step error: %s", sqlite3_errmsg(global.db)); goto error; } rv = CKR_OK; TRANSACTION_END(rv); sqlite3_finalize_warn(stmt); free(config); return rv; } CK_RV db_get_first_pid(unsigned *id) { assert(id); CK_RV rv = CKR_GENERAL_ERROR; const char *sql = "SELECT id FROM pobjects ORDER BY id ASC LIMIT 1"; sqlite3_stmt *stmt; int rc = sqlite3_prepare_v2(global.db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGE("Cannot prepare first pid query: %s\n", sqlite3_errmsg(global.db)); return rv; } rc = sqlite3_step(stmt); if (rc == SQLITE_ROW) { *id = sqlite3_column_int(stmt, 0); } else if (rc == SQLITE_DONE) { *id = 0; } else { LOGE("Cannot step query: %s\n", sqlite3_errmsg(global.db)); goto error; } rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } #define DB_NAME "tpm2_pkcs11.sqlite3" #define PKCS11_STORE_ENV_VAR "TPM2_PKCS11_STORE" static CK_RV handle_env_var(char *path, size_t len, bool *skip) { *skip = false; char *env_path = getenv(PKCS11_STORE_ENV_VAR); if (!env_path) { *skip = true; return CKR_OK; } /* * It's an in memory db, use it: * - https://www.sqlite.org/inmemorydb.html */ if (!strncmp(env_path, "file::memory", 12) || !strcmp(env_path, ":memory:")) { unsigned l = snprintf(path, len, "%s", env_path); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } unsigned l = snprintf(path, len, "%s/%s", env_path, DB_NAME); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV handle_home(char *path, size_t len, bool *skip) { *skip = false; char *env_home = getenv("HOME"); if (!env_home) { *skip = true; return CKR_OK; } unsigned l = snprintf(path, len, "%s/.tpm2_pkcs11/%s", env_home, DB_NAME); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV handle_homexdg(char *path, size_t len, bool *skip) { *skip = false; char *env_data = getenv("XDG_DATA_HOME"); if (env_data) { unsigned l = snprintf(path, len, "%s/tpm2-pkcs11/%s", env_data, DB_NAME); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } char *env_home = getenv("HOME"); if (env_home) { unsigned l = snprintf(path, len, "%s/.local/share/tpm2-pkcs11/%s", env_home, DB_NAME); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } *skip = true; return CKR_OK; } static CK_RV handle_cwd(char *path, size_t len, bool *skip) { *skip = false; char *cwd_path = getcwd(NULL, 0); if (!cwd_path) { return errno == ENOMEM ? CKR_HOST_MEMORY : CKR_GENERAL_ERROR; } unsigned l = snprintf(path, len, "%s/%s", cwd_path, DB_NAME); free(cwd_path); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV handle_path(char *path, size_t len, bool *skip) { *skip = false; unsigned l = snprintf(path, len, "%s/%s", TPM2_PKCS11_STORE_DIR, DB_NAME); if (l >= len) { LOGE("Completed DB path was over-length, got %d expected less than %lu", l, len); return CKR_GENERAL_ERROR; } return CKR_OK; } typedef enum handler_idx handler_idx; enum handler_idx { HANDLER_IDX_ENV, HANDLER_IDX_STORE_DIR, HANDLER_IDX_HOMEXDG, HANDLER_IDX_HOME, HANDLER_IDX_CWD, HANDLER_IDX_CNT, }; typedef CK_RV (*db_handler)(char *path, size_t len, handler_idx index); static CK_RV db_for_path(char *path, size_t len, db_handler h) { /* * Search in the following order: * 1. ENV variable * 2. TPM2_PKCS11_STORE_DIR * 3a. $XDG_DATA_HOME/tpm2-pkcs11 * 3b. $HOME/.local/share/tpm2-pkcs11 * 4. $HOME/.tpm2_pkcs11 * 5. cwd */ handler_idx i; for (i=0; i < HANDLER_IDX_CNT; i++) { CK_RV rv = CKR_GENERAL_ERROR; bool skip = false; switch (i) { case HANDLER_IDX_ENV: rv = handle_env_var(path, len, &skip); break; case HANDLER_IDX_STORE_DIR: rv = handle_path(path, len, &skip); break; case HANDLER_IDX_HOMEXDG: rv = handle_homexdg(path, len, &skip); break; case HANDLER_IDX_HOME: rv = handle_home(path, len, &skip); break; case HANDLER_IDX_CWD: rv = handle_cwd(path, len, &skip); break; default: LOGE("Unknown handler_idx: %d", i); return CKR_GENERAL_ERROR; } /* handler had fatal error, exit with return code */ if (rv != CKR_OK) { return rv; } /* handler says skip, something must not be set */ if (skip) { continue; } rv = h(path, len, i); if (rv != CKR_TOKEN_NOT_PRESENT) { return rv; } } return CKR_TOKEN_NOT_PRESENT; } static CK_RV db_get_path_handler(char *path, size_t len, handler_idx index) { UNUSED(len); /* Always attempt to use ENV VAR */ if (index == HANDLER_IDX_ENV) { LOGV("using "PKCS11_STORE_ENV_VAR"=\"%s\"", path); return CKR_OK; } struct stat sb; int rc = stat(path, &sb); if (rc) { LOGV("Could not stat db at path \"%s\", error: %s", path, strerror(errno)); /* no db, keep looking */ return CKR_TOKEN_NOT_PRESENT; } /* * made it all the way through and found an existing store, * done searching. */ return CKR_OK; } static CK_RV db_get_existing(char *path, size_t len) { return db_for_path(path, len, db_get_path_handler); } static CK_RV db_create_handler(char *path, size_t len, handler_idx index) { UNUSED(len); CK_RV rv = CKR_TOKEN_NOT_PRESENT; /* nothing to do for index CWD */ if (index == HANDLER_IDX_CWD) { return CKR_OK; } char *pathdup = strdup(path); if (!pathdup) { LOGE("oom"); return CKR_HOST_MEMORY; } char *d = dirname(pathdup); if (index == HANDLER_IDX_ENV || index == HANDLER_IDX_HOME) { struct stat sb; int rc = stat(d, &sb); if (rc && errno != ENOENT) { LOGV("Could not stat db dir \"%s\", error: %s", d, strerror(errno)); /* no db dir, keep looking */ goto out; } if (rc == 0) { goto done; } rc = mkdir(d, S_IRWXU|S_IRWXG); if (rc) { LOGE("Could not mkdir \"%s\", error: %s", d, strerror(errno)); rv = HANDLER_IDX_ENV ? CKR_GENERAL_ERROR : CKR_TOKEN_NOT_PRESENT; goto out; } /* success */ goto done; } if (index == HANDLER_IDX_STORE_DIR) { /* tests if it exists AND we can use it */ const char *test_file_path = TPM2_PKCS11_STORE_DIR"/.test"; FILE *f = fopen(test_file_path, "w+"); if (!f) { /* * we don't care about errors, we just skip it, but if it's * an access issue, we will let the user know via LOGW. * */ if (errno != ENOENT) { const char *msg = (errno == EPERM || errno == EACCES) ? "Error checking access to \"%s\", skipping. error: %s" : "\"%s\" exists, but no access, skipping. error: %s"; LOGW(msg, TPM2_PKCS11_STORE_DIR, strerror(errno)); } goto out; } /* all is well, unlink and move on */ fclose(f); unlink(test_file_path); goto done; } /* I don't know what it is fatal error */ assert(0); LOGE("Unhandled search index: %d", index); rv = CKR_GENERAL_ERROR; goto out; /* * made it all the way through and found a dir I can use, * done searching. Now use it to create the db. */ done: rv = CKR_OK; out: free(pathdup); return rv; } #define DB_EMPTY 0 static CK_RV db_get_version(sqlite3 *db, unsigned *version) { CK_RV rv = CKR_GENERAL_ERROR; const char *sql = "SELECT schema_version FROM schema"; sqlite3_stmt *stmt; int rc = sqlite3_prepare_v2(db, sql, -1, &stmt, NULL); if (rc != SQLITE_OK) { LOGW("Cannot prepare version query: %s\n", sqlite3_errmsg(global.db)); *version = DB_EMPTY; return CKR_OK; } rc = sqlite3_step(stmt); if (rc == SQLITE_ROW) { *version = sqlite3_column_int(stmt, 0); } else if (rc == SQLITE_DONE) { *version = DB_EMPTY; } else { LOGE("Cannot step query: %s\n", sqlite3_errmsg(global.db)); *version = DB_EMPTY; goto error; } rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } static CK_RV run_sql_list(sqlite3 *db, const char **sql, size_t cnt) { size_t i; for (i=0; i < cnt; i++) { const char *s = sql[i]; int rc = sqlite3_exec(db, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("db creation failed: %s", sqlite3_errmsg(db)); return CKR_GENERAL_ERROR; } } return CKR_OK; } static CK_RV dbup_handler_from_1_to_2(sqlite3 *updb) { /* Between version 1 and 2 of the DB the following changes need to be made: * The existing rows: * - userpub BLOB NOT NULL, * - userpriv BLOB NOT NULL, * - userauthsalt TEXT NOT NULL, * All have the "NOT NULL" constarint removed, like so: * userpub BLOB, * userpriv BLOB, * userauthsalt TEXT * So we need to create a new table with this constraint removed, * copy the data and move the table back */ /* Create a new table to copy data to that has the constraints removed */ const char *s = "" "CREATE TABLE sealobjects_new2(" "id INTEGER PRIMARY KEY," "tokid INTEGER NOT NULL," "userpub BLOB," "userpriv BLOB," "userauthsalt TEXT," "sopub BLOB NOT NULL," "sopriv BLOB NOT NULL," "soauthsalt TEXT NOT NULL," "FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE" ");"; int rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot create temp table: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } /* copy the data */ s = "INSERT INTO sealobjects_new2\n" "SELECT * FROM sealobjects;"; rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot copy data to the temp table: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } /* Drop the old table */ s = "DROP TABLE sealobjects;"; rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot drop the temp table: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } /* Rename the new table to the correct table name */ s = "ALTER TABLE sealobjects_new2 RENAME TO sealobjects;"; rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot rename the temp table back to the original table name: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } const char *sql[] = { "CREATE TRIGGER limit_tokens\n" "BEFORE INSERT ON tokens\n" "BEGIN\n" " SELECT CASE WHEN\n" " (SELECT COUNT (*) FROM tokens) >= 255\n" " THEN\n" " RAISE(FAIL, \"Maximum token count of 255 reached.\")\n" " END;\n" "END;\n", "CREATE TRIGGER limit_tobjects\n" "BEFORE INSERT ON tobjects\n" "BEGIN\n" " SELECT CASE WHEN\n" " (SELECT COUNT (*) FROM tobjects) >= 16777215\n" " THEN\n" " RAISE(FAIL, \"Maximum object count of 16777215 reached.\")\n" " END;\n" "END;\n" }; return run_sql_list(updb, sql, ARRAY_LEN(sql)); } static CK_RV dbup_handler_from_2_to_3(sqlite3 *updb) { /* Between version 2 and 3 of the DB the following changes need to be made: * - Drop the incorrect limit_tobjects TRIGGER. */ /* Create a new table to copy data to that has the constraints removed */ const char *s = "DROP TRIGGER limit_tobjects;"; int rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot create temp table: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV dbup_handler_from_3_to_4(sqlite3 *updb) { /* * Between version 3 and 1 of the DB the following changes need to be made: * Table pobjects: * - column handle of type blob was changes to config of type string * * The YAML config has the handle of the ESYS_TR blob as a hex string. * So to perform the upgrade, the code needs to create a new db and copy * everything over and generate the new config YAML as: * ---- * persistent: true * esys-tr: bytes.hex(handle) */ CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; /* Create a new table to copy data to */ const char *s = "CREATE TABLE pobjects2 (" "id INTEGER PRIMARY KEY," "hierarchy TEXT NOT NULL," "config TEXT NOT NULL," "objauth TEXT NOT NULL" ");"; int rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot create temp table: %s", sqlite3_errmsg(updb)); return CKR_GENERAL_ERROR; } rc = sqlite3_prepare_v2(updb, "SELECT * from pobjects", -1, &stmt, 0); if (rc != SQLITE_OK) { LOGE("Failed to fetch data: %s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_step(stmt); if (rc == SQLITE_DONE) { goto out; } else if (rc != SQLITE_ROW) { LOGE("Failed to step: %s", sqlite3_errmsg(updb)); goto error; } while (rc == SQLITE_ROW) { pobject_v3 old_pobj = { 0 }; rc = init_pobject_v3_from_stmt(stmt, &old_pobj); if (rc != SQLITE_OK) { LOGE("Could not process pobjectes for upgrade"); goto error; } pobject_v4 new_pobj = { 0 }; CK_RV tmp_rv = convert_pobject_v3_to_v4(&old_pobj, &new_pobj); if (tmp_rv != CKR_OK) { LOGE("Could not convert V3 Pobject to v4"); pobject_v3_free(&old_pobj); pobject_v4_free(&new_pobj); goto error; } /* insert into pobjects2 */ tmp_rv = db_add_pobject_v4(updb, &new_pobj); pobject_v3_free(&old_pobj); pobject_v4_free(&new_pobj); if (tmp_rv != CKR_OK) { LOGE("Could not store V4 Pobject to pobject2 table"); goto error; } rc = sqlite3_step(stmt); if (rc != SQLITE_ROW && rc != SQLITE_DONE) { LOGE("Failed to fetch data: %s\n", sqlite3_errmsg(updb)); goto error; } } /* * done copying V3 pobjects, converting to config and storing as v4 pobject * in pobjects 2. * * Time to drop pobjects table */ s = "DROP TABLE pobjects;"; rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot drop pobjects table: %s", sqlite3_errmsg(updb)); goto error; } /* Rename pobjects2 to pobjects */ s = "ALTER TABLE pobjects2 RENAME TO pobjects;"; rc = sqlite3_exec(updb, s, NULL, NULL, NULL); if (rc != SQLITE_OK) { LOGE("Cannot drop pobjects table: %s", sqlite3_errmsg(updb)); goto error; } out: rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } /* * A bug in the python code added CBC_PAD twice and missed CTR mode, filter out the CBC_PAD * and CTR mode and add them both back in properly, ie one of each in CKA_ALLOWED_MECHANISMS. */ static CK_RV handle_AES_add_cbc_ctr_modes(tobject *tobj) { CK_OBJECT_CLASS cka_class = attr_list_get_CKA_CLASS(tobj->attrs, CK_OBJECT_CLASS_BAD); if (cka_class != CKO_SECRET_KEY) { return CKR_VENDOR_SKIP; } CK_KEY_TYPE cka_key_type = attr_list_get_CKA_KEY_TYPE(tobj->attrs, CKA_KEY_TYPE_BAD); if (cka_key_type != CKK_AES) { return CKR_VENDOR_SKIP; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_ALLOWED_MECHANISMS); CK_ULONG mech_num = a ? (a->ulValueLen/sizeof(CK_MECHANISM_TYPE)) : 0; /* plus two: one for CBC_PAD one for CTR modes */ safe_adde(mech_num, 2); CK_MECHANISM_TYPE *new_mechs = calloc(mech_num, sizeof(CK_MECHANISM_TYPE)); if (!new_mechs) { return CKR_HOST_MEMORY; } /* copy the old mechanism into the list and add CBC_PAD and CTR */ CK_ULONG i; CK_ULONG pos = 0; for (i=0; i < mech_num - 2; i++) { assert(a && a->pValue && a->ulValueLen); CK_MECHANISM_TYPE old_mech = ((CK_MECHANISM_TYPE_PTR)(a->pValue))[i]; if (old_mech == CKM_AES_CBC_PAD || old_mech == CKM_AES_CTR) { /* * don't add the ones were adding, just to make the add below * unconditional. This is an unlikely case as someone would have * had to twiddle their object config by hand. */ continue; } new_mechs[pos++] = old_mech; } /* append the missing mechanisms */ new_mechs[pos++] = CKM_AES_CBC_PAD; new_mechs[pos++] = CKM_AES_CTR; CK_ULONG total_bytes = 0; safe_mul(total_bytes, pos, sizeof(CK_MECHANISM_TYPE)); CK_ATTRIBUTE updated_attr = { .type = CKA_ALLOWED_MECHANISMS, .ulValueLen = total_bytes, .pValue = new_mechs }; /* * if the object had CKA_ALLOWED_MECHANISMS we UPDATE the entry, * else we just add it to the list */ CK_RV rv = a ? attr_list_update_entry(tobj->attrs, &updated_attr) : attr_list_append_entry(&tobj->attrs, &updated_attr); if (rv != CKR_OK) { SAFE_FREE(new_mechs); return rv; } return CKR_OK; } static CK_RV dbup_handler_from_4_to_5(sqlite3 *updb) { /* * Between version 3 and 4 of the DB the following changes need to be made: * * Table tobjects: * * The YAML attributes need to include CKM_AES_CBC_PAD and CKM_AES_CTR in the CKM_ALLOWED_MECHANISMS list. */ CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; int rc = sqlite3_prepare_v2(updb, "SELECT * from tobjects", -1, &stmt, 0); if (rc != SQLITE_OK) { LOGE("Failed to fetch data: %s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_step(stmt); if (rc == SQLITE_DONE) { goto out; } else if (rc != SQLITE_ROW) { LOGE("Failed to step: %s", sqlite3_errmsg(updb)); goto error; } while (rc == SQLITE_ROW) { CK_MECHANISM_TYPE *new_mechs = NULL; tobject *tobj = db_tobject_new(stmt); if (!tobj) { LOGE("Could not process tobjects for upgrade"); goto error; } /* * Due to a bug in Python side of adding AES objects, we need to run the * CKA_ALLOWED_MECHANISM updates to add modes CTR and CBC on both the 4->5 * and 5->6 updates in the C code. Since the logic is the same for AES, * we just call the routine. It was handled properly in the C code in 4->5 * but the Python code added CTR twice and missed CBC, so the 5->6 update * gets that one. */ rv = handle_AES_add_cbc_ctr_modes(tobj); if (rv == CKR_VENDOR_SKIP) { goto next; } else if (rv != CKR_OK) { tobject_free(tobj); goto error; } /* persist the changes in the update db */ rv = _db_update_tobject_attrs(updb, tobj->id, tobj->attrs); if (rv != CKR_OK) { SAFE_FREE(new_mechs); tobject_free(tobj); goto error; } next: tobject_free(tobj); SAFE_FREE(new_mechs); rc = sqlite3_step(stmt); if (rc != SQLITE_ROW && rc != SQLITE_DONE) { LOGE("Failed to fetch data: %s\n", sqlite3_errmsg(updb)); goto error; } } out: rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } static CK_RV handle_ECDSA_5_to_6(tobject *tobj) { CK_OBJECT_CLASS cka_class = attr_list_get_CKA_CLASS(tobj->attrs, CK_OBJECT_CLASS_BAD); if (cka_class != CKO_PRIVATE_KEY) { return CKR_VENDOR_SKIP; } CK_KEY_TYPE cka_key_type = attr_list_get_CKA_KEY_TYPE(tobj->attrs, CKA_KEY_TYPE_BAD); if (cka_key_type != CKK_EC) { return CKR_VENDOR_SKIP; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_ALLOWED_MECHANISMS); CK_ULONG mech_num = a ? (a->ulValueLen/sizeof(CK_MECHANISM_TYPE)) : 0; /* plus three: SHA256 SHA384 and SHA512 */ safe_adde(mech_num, 3); CK_MECHANISM_TYPE *new_mechs = calloc(mech_num, sizeof(CK_MECHANISM_TYPE)); if (!new_mechs) { return CKR_HOST_MEMORY; } /* copy the old mechanism into the list and add CBC_PAD and CTR */ CK_ULONG i; CK_ULONG pos = 0; for (i=0; i < mech_num - 3; i++) { assert(a && a->pValue && a->ulValueLen); CK_MECHANISM_TYPE old_mech = ((CK_MECHANISM_TYPE_PTR)(a->pValue))[i]; if (old_mech == CKM_ECDSA_SHA256 || old_mech == CKM_ECDSA_SHA384 || old_mech == CKM_ECDSA_SHA512) { /* * don't add the ones were adding, just to make the add below * unconditional. This is an unlikely case as someone would have * had to twiddle their object config by hand. */ continue; } new_mechs[pos++] = old_mech; } /* append the missing mechanisms */ new_mechs[pos++] = CKM_ECDSA_SHA256; new_mechs[pos++] = CKM_ECDSA_SHA384; new_mechs[pos++] = CKM_ECDSA_SHA512; CK_ULONG total_bytes = 0; safe_mul(total_bytes, pos, sizeof(CK_MECHANISM_TYPE)); CK_ATTRIBUTE updated_attr = { .type = CKA_ALLOWED_MECHANISMS, .ulValueLen = total_bytes, .pValue = new_mechs }; /* * if the object had CKA_ALLOWED_MECHANISMS we UPDATE the entry, * else we just add it to the list */ CK_RV rv = a ? attr_list_update_entry(tobj->attrs, &updated_attr) : attr_list_append_entry(&tobj->attrs, &updated_attr); if (rv != CKR_OK) { SAFE_FREE(new_mechs); return rv; } return CKR_OK; } static CK_RV dbup_handler_from_5_to_6(sqlite3 *updb) { /* * Between version 3 and 4 of the DB the following changes need to be made: * * Table tobjects: * * The YAML attributes need to include CKM_AES_CBC_PAD and CKM_AES_CTR in the CKM_ALLOWED_MECHANISMS list. */ CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; int rc = sqlite3_prepare_v2(updb, "SELECT * from tobjects", -1, &stmt, 0); if (rc != SQLITE_OK) { LOGE("Failed to fetch data: %s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_step(stmt); if (rc == SQLITE_DONE) { goto out; } else if (rc != SQLITE_ROW) { LOGE("Failed to step: %s", sqlite3_errmsg(updb)); goto error; } while (rc == SQLITE_ROW) { tobject *tobj = db_tobject_new(stmt); if (!tobj) { LOGE("Could not process tobjects for upgrade"); goto error; } rv = handle_ECDSA_5_to_6(tobj); if (rv == CKR_OK) { goto handled; } else if (rv != CKR_VENDOR_SKIP) { /* actual error */ tobject_free(tobj); goto error; } rv = handle_AES_add_cbc_ctr_modes(tobj); if (rv == CKR_OK) { goto handled; } else if (rv == CKR_VENDOR_SKIP) { goto next; } else { /* actual error */ tobject_free(tobj); goto error; } handled: /* persist the changes in the update db */ rv = _db_update_tobject_attrs(updb, tobj->id, tobj->attrs); if (rv != CKR_OK) { tobject_free(tobj); goto error; } next: tobject_free(tobj); rc = sqlite3_step(stmt); if (rc != SQLITE_ROW && rc != SQLITE_DONE) { LOGE("Failed to fetch data: %s\n", sqlite3_errmsg(updb)); goto error; } } out: rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } static CK_RV handle_EC_AES_drop_0_allowed_mechs(tobject *tobj) { CK_OBJECT_CLASS cka_class = attr_list_get_CKA_CLASS(tobj->attrs, CK_OBJECT_CLASS_BAD); if (cka_class != CKO_PRIVATE_KEY && cka_class != CKO_SECRET_KEY) { return CKR_VENDOR_SKIP; } CK_KEY_TYPE cka_key_type = attr_list_get_CKA_KEY_TYPE(tobj->attrs, CKA_KEY_TYPE_BAD); if (cka_key_type != CKK_EC && cka_key_type != CKK_AES) { return CKR_VENDOR_SKIP; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_ALLOWED_MECHANISMS); /* * The new array will be at most the same size as the old array as theirs nothing * to filer out. */ CK_ULONG mech_num = a ? (a->ulValueLen/sizeof(CK_MECHANISM_TYPE)) : 0; CK_MECHANISM_TYPE *new_mechs = calloc(mech_num, sizeof(CK_MECHANISM_TYPE)); if (!new_mechs) { return CKR_HOST_MEMORY; } /* copy the old mechanism into the list and drop 0 mechanisms */ CK_ULONG i; CK_ULONG pos = 0; for (i=0; i < mech_num; i++) { assert(a && a->pValue && a->ulValueLen); CK_MECHANISM_TYPE old_mech = ((CK_MECHANISM_TYPE_PTR)(a->pValue))[i]; if (old_mech == 0) { /* * don't add the ones were adding, just to make the add below * unconditional. This is an unlikely case as someone would have * had to twiddle their object config by hand. */ continue; } new_mechs[pos++] = old_mech; } CK_ULONG total_bytes = 0; safe_mul(total_bytes, pos, sizeof(CK_MECHANISM_TYPE)); CK_ATTRIBUTE updated_attr = { .type = CKA_ALLOWED_MECHANISMS, .ulValueLen = total_bytes, .pValue = new_mechs }; /* * if the object had CKA_ALLOWED_MECHANISMS we UPDATE the entry, * else we just add it to the list */ CK_RV rv = a ? attr_list_update_entry(tobj->attrs, &updated_attr) : attr_list_append_entry(&tobj->attrs, &updated_attr); if (rv != CKR_OK) { SAFE_FREE(new_mechs); return rv; } return CKR_OK; } static CK_RV dbup_handler_from_6_to_7(sqlite3 *updb) { /* * Between version 3 and 4 of the DB the following changes need to be made: * * Table tobjects: * * The YAML attributes need to include CKM_AES_CBC_PAD and CKM_AES_CTR in the CKM_ALLOWED_MECHANISMS list. */ CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; int rc = sqlite3_prepare_v2(updb, "SELECT * from tobjects", -1, &stmt, 0); if (rc != SQLITE_OK) { LOGE("Failed to fetch data: %s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_step(stmt); if (rc == SQLITE_DONE) { goto out; } else if (rc != SQLITE_ROW) { LOGE("Failed to step: %s", sqlite3_errmsg(updb)); goto error; } while (rc == SQLITE_ROW) { tobject *tobj = db_tobject_new(stmt); if (!tobj) { LOGE("Could not process tobjects for upgrade"); goto error; } rv = handle_EC_AES_drop_0_allowed_mechs(tobj); if (rv != CKR_VENDOR_SKIP) { /* actual error */ tobject_free(tobj); goto error; } /* persist the changes in the update db */ rv = _db_update_tobject_attrs(updb, tobj->id, tobj->attrs); tobject_free(tobj); if (rv != CKR_OK) { goto error; } rc = sqlite3_step(stmt); if (rc != SQLITE_ROW && rc != SQLITE_DONE) { LOGE("Failed to fetch data: %s\n", sqlite3_errmsg(updb)); goto error; } } out: rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } static CK_RV dbup_handler_from_7_to_8(sqlite3 *updb) { /* * Between version 7 and 8 of the DB the following changes need to be made: * * Table tobjects: * * The YAML attributes for a int sequence has to be a yaml sequence. */ CK_RV rv = CKR_GENERAL_ERROR; sqlite3_stmt *stmt = NULL; int rc = sqlite3_prepare_v2(updb, "SELECT * from tobjects", -1, &stmt, 0); if (rc != SQLITE_OK) { LOGE("Failed to fetch data: %s", sqlite3_errmsg(updb)); goto error; } rc = sqlite3_step(stmt); if (rc == SQLITE_DONE) { goto out; } else if (rc != SQLITE_ROW) { LOGE("Failed to step: %s", sqlite3_errmsg(updb)); goto error; } while (rc == SQLITE_ROW) { tobject *tobj = db_tobject_new(stmt); if (!tobj) { LOGE("Could not process tobjects for upgrade"); goto error; } /* for each tobject */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_ALLOWED_MECHANISMS); if (a) { CK_BYTE type = type_from_ptr(a->pValue, a->ulValueLen); if (type != TYPE_BYTE_INT_SEQ) { rv = _db_update_tobject_attrs(updb, tobj->id, tobj->attrs); } } else { rv = CKR_OK; } tobject_free(tobj); if (rv != CKR_OK) { goto error; } rc = sqlite3_step(stmt); if (rc != SQLITE_ROW && rc != SQLITE_DONE) { LOGE("Failed to fetch data: %s\n", sqlite3_errmsg(updb)); goto error; } } out: rv = CKR_OK; error: sqlite3_finalize(stmt); return rv; } static CK_RV db_backup(sqlite3 *db, const char *dbpath, sqlite3 **updb, char **copypath) { CK_RV rv = CKR_GENERAL_ERROR; char temp[PATH_MAX]; sqlite3 *copydb = NULL; const char *suffix = ".bak"; sqlite3_backup *backup_conn = NULL; unsigned l = snprintf(temp, sizeof(temp), "%s%s", dbpath, suffix); if (l >= sizeof(temp)) { LOGE("Backup DB path is longer than PATH_MAX"); goto out; } LOGV("Performing DB backup at: \"%s\"", temp); int rc = sqlite3_open(temp, ©db); if (rc != SQLITE_OK) { LOGE("Cannot open database: %s\n", sqlite3_errmsg(copydb)); goto out; } backup_conn = sqlite3_backup_init(copydb, "main", db, "main"); if (!backup_conn) { LOGE("Cannot backup init db: %s\n", sqlite3_errmsg(copydb)); goto out; } rc = sqlite3_backup_step(backup_conn, -1); if (rc != SQLITE_DONE) { LOGE("Cannot step db backup: %s\n", sqlite3_errmsg(copydb)); goto out; } *copypath = strdup(temp); if (!(*copypath)) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto out; } *updb = copydb; copydb = NULL; rv = CKR_OK; out: if (backup_conn) { sqlite3_backup_finish(backup_conn); } if (copydb) { sqlite3_close(copydb); } return rv; } typedef CK_RV (*db_update_handlers)(sqlite3 *db); static CK_RV db_update(sqlite3 **xdb, const char *dbpath, unsigned old_version, unsigned new_version) { sqlite3 *dbbak = NULL; char *dbbakpath = NULL; static const db_update_handlers updaters[] = { NULL, dbup_handler_from_1_to_2, dbup_handler_from_2_to_3, dbup_handler_from_3_to_4, dbup_handler_from_4_to_5, dbup_handler_from_5_to_6, dbup_handler_from_6_to_7, dbup_handler_from_7_to_8 }; /* * Sanity checks, this is definite belts and suspenders code */ if (new_version > ARRAY_LEN(updaters)) { LOGE("db update code does not know how to update to version: %u", new_version); return CKR_GENERAL_ERROR; } if (old_version == 0) { LOGE("version 0 was never a valid db version"); return CKR_GENERAL_ERROR; } /* * Create a DB backup of whats there */ CK_RV rv = db_backup(*xdb, dbpath, &dbbak, &dbbakpath); if (rv != CKR_OK) { LOGE("Could not make DB copy"); return rv; } /* * run the update handlers on the backup */ size_t i; for(i=old_version; i < ARRAY_LEN(updaters) && i < new_version; i++) { rv = updaters[i](dbbak); if (rv != CKR_OK) { LOGE("Running updater index %zu failed", i); goto out; } } const char *sql[] = { "REPLACE INTO schema (id, schema_version) VALUES (1, "xstr(DB_VERSION) ");", }; rv = run_sql_list(dbbak, sql, ARRAY_LEN(sql)); if (rv != CKR_OK) { LOGE("Could not set new schema_version"); goto out; } /* * Swap the current db with the backup db, by: * 1. closing them * 2. renaming the current db as .old * 3. renaming the backup db as the old db * 4. unlinking the .old db * 5. opening the new db */ sqlite3_close(*xdb); *xdb = NULL; sqlite3_close(dbbak); dbbak = NULL; char buf[PATH_MAX]; unsigned l = snprintf(buf, sizeof(buf), "%s.old", dbpath); if (l >= sizeof(buf)) { LOGE("Old database path is longer than PATH_MAX"); rv = CKR_GENERAL_ERROR; goto out; } int rc = rename(dbpath, buf); if (rc != 0) { LOGE("Could not rename \"%s\" --> \"%s\", error: %s", dbpath, buf, strerror(errno)); rv = CKR_GENERAL_ERROR; goto out; } rc = rename(dbbakpath, dbpath); if (rc != 0) { LOGE("Could not rename \"%s\" --> \"%s\", error: %s", dbbakpath, dbpath, strerror(errno)); rv = CKR_GENERAL_ERROR; goto out; } rc = sqlite3_open(dbpath, xdb); if (rc != SQLITE_OK) { LOGE("Cannot open database: %s\n", sqlite3_errmsg(*xdb)); rv = CKR_GENERAL_ERROR; goto out; } rc = unlink(buf); if (rc != 0) { LOGE("Could not unlink \"%s\", error: %s", buf, strerror(errno)); rv = CKR_GENERAL_ERROR; goto out; } rv = CKR_OK; out: if (dbbak) { sqlite3_close(dbbak); } free(dbbakpath); return rv; } static CK_RV db_create(char *path, size_t len) { return db_for_path(path, len, db_create_handler); } DEBUG_VISIBILITY int get_lock_path(const char *path, char *lockpath) { unsigned l; size_t lenv_lock = 0; char *env_lock = getenv("PKCS11_SQL_LOCK"); if (env_lock && ((lenv_lock = strlen(env_lock)) > 0)) { /* * lock file shall be "PKCS11_SQL_LOCK" + '/' + path + ".lock", but * path's '/' will be substituted by '_'. */ if (env_lock[lenv_lock - 1] == '/') { env_lock[lenv_lock - 1] = '\0'; lenv_lock--; } if ((lenv_lock + 1 + strlen(path) + strlen(".lock")) >= PATH_MAX) { LOGE("Lock file path would be longer than PATH_MAX"); return SQLITE_ERROR; } strncpy(lockpath, env_lock, PATH_MAX-1); strcat(lockpath, "/"); for (size_t i = 0; path[i] && (i < PATH_MAX) && (i < strlen(path)); i++) { lockpath[lenv_lock + 1 + i] = '\0'; if (path[i] == '/') { lockpath[lenv_lock + 1 + i] = '_'; continue; } lockpath[lenv_lock + 1 + i] = path[i]; } strcat(lockpath, ".lock"); l = strlen(lockpath); } else { l = snprintf(lockpath, PATH_MAX, "%s%s", path, ".lock"); } if (l >= PATH_MAX) { LOGE("Lock file path is longer than PATH_MAX"); return SQLITE_ERROR; } return SQLITE_OK; } DEBUG_VISIBILITY FILE *take_lock(const char *path, char *lockpath) { if (get_lock_path(path, lockpath) != SQLITE_OK) { return NULL; } FILE *f = fopen(lockpath, "w+"); if (!f) { LOGE("Could not open lock file \"%s\", error: %s", lockpath, strerror(errno)); return NULL; } int rc = flock(fileno(f), LOCK_EX); if (rc < 0) { LOGE("Could not flock file \"%s\", error: %s", lockpath, strerror(errno)); fclose(f); unlink(lockpath); return NULL; } return f; } static void release_lock(FILE *f, char *lockpath) { int rc = flock(fileno(f), LOCK_UN); if (rc < 0) { LOGE("Could not unlock file \"%s\", error: %s", lockpath, strerror(errno)); } UNUSED(unlink(lockpath)); UNUSED(fclose(f)); } #ifndef NDBEBUG void db_debug_set_db(sqlite3 *db) { global.db = db; } #endif CK_RV db_init_new(sqlite3 *db) { const char *sql[] = { "CREATE TABLE tokens(" "id INTEGER PRIMARY KEY," "pid INTEGER NOT NULL," "label TEXT UNIQUE," "config TEXT NOT NULL," "FOREIGN KEY (pid) REFERENCES pobjects(id) ON DELETE CASCADE" ");", "CREATE TABLE sealobjects(" "id INTEGER PRIMARY KEY," "tokid INTEGER NOT NULL," "userpub BLOB," "userpriv BLOB," "userauthsalt TEXT," "sopub BLOB NOT NULL," "sopriv BLOB NOT NULL," "soauthsalt TEXT NOT NULL," "FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE" ");", "CREATE TABLE pobjects(" "id INTEGER PRIMARY KEY," "hierarchy TEXT NOT NULL," "config TEXT NOT NULL," "objauth TEXT NOT NULL" ");", "CREATE TABLE tobjects(" "id INTEGER PRIMARY KEY," "tokid INTEGER NOT NULL," "attrs TEXT NOT NULL," "FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE" ");", "CREATE TABLE schema(" "id INTEGER PRIMARY KEY," "schema_version INTEGER NOT NULL" ");", "CREATE TRIGGER limit_tokens\n" "BEFORE INSERT ON tokens\n" "BEGIN\n" " SELECT CASE WHEN\n" " (SELECT COUNT (*) FROM tokens) >= 255\n" " THEN\n" " RAISE(FAIL, \"Maximum token count of 255 reached.\")\n" " END;\n" "END;\n", "REPLACE INTO schema (id, schema_version) VALUES (1, "xstr(DB_VERSION) ");", }; return run_sql_list(db, sql, ARRAY_LEN(sql)); } static CK_RV db_verify_update_ok(const char *dbpath) { char buf[PATH_MAX]; unsigned l = snprintf(buf, sizeof(buf), "%s.old", dbpath); if (l >= sizeof(buf)) { LOGE("Backup DB path is longer than PATH_MAX"); return CKR_GENERAL_ERROR; } struct stat sb; int rc = stat(buf, &sb); if (rc == 0) { LOGE("Backup DB exists at \"%s\" not overwriting. " "Refusing to run, see " "https://github.com/tpm2-software/tpm2-pkcs11/blob/master/docs/DB_UPGRADE.md.", buf); return CKR_GENERAL_ERROR; } else if (rc < 0 && errno != ENOENT) { LOGE("Failed to stat path \"%s\", error: %s", buf, strerror(errno)); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV db_setup(sqlite3 **xdb, const char *dbpath) { /* * take the version check lock and figure out what * to do: * - nothing * - init a new db * - upgrade an existing db */ const char *pname = sqlite3_db_filename(*xdb, NULL); bool is_in_mem_db = !pname || pname[0] == '\0'; char lockpath[PATH_MAX]; FILE *f = NULL; if (!is_in_mem_db) { f = take_lock(dbpath, lockpath); if (!f) { return CKR_GENERAL_ERROR; } } CK_RV rv = db_verify_update_ok(dbpath); if (rv != CKR_OK) { goto out; } unsigned old_version = 0; rv = db_get_version(*xdb, &old_version); if (rv != CKR_OK) { LOGE("Could not get DB version"); goto out; } if (old_version == DB_EMPTY) { rv = db_init_new(*xdb); goto out; } if (old_version == DB_VERSION) { LOGV("No DB upgrade needed"); rv = CKR_OK; goto out; } if (old_version > DB_VERSION) { LOGE("DB Version exceeds library version: %u > %u", old_version, DB_VERSION); rv = CKR_OK; goto out; } rv = db_update(xdb, dbpath, old_version, DB_VERSION); out: if (rv != CKR_OK) { LOGE("Error within db, leaving backup see: " "https://github.com/tpm2-software/tpm2-pkcs11/blob/master/docs/DB_UPGRADE.md."); } if (!is_in_mem_db) { assert(f); release_lock(f, lockpath); } return rv; } DEBUG_VISIBILITY WEAK CK_RV db_new(sqlite3 **db) { char dbpath[PATH_MAX]; CK_RV rv = db_get_existing(dbpath, sizeof(dbpath)); if (rv == CKR_TOKEN_NOT_PRESENT) { rv = db_create(dbpath, sizeof(dbpath)); } if (rv != CKR_OK) { LOGE("Could not find or create a pkcs11 store"); LOGE("Consider exporting "PKCS11_STORE_ENV_VAR" to point to a valid store directory"); return rv; } LOGV("Using sqlite3 DB: \"%s\"", dbpath); int rc = sqlite3_open(dbpath, db); if (rc != SQLITE_OK) { LOGE("Cannot open database: %s\n", sqlite3_errmsg(*db)); return CKR_GENERAL_ERROR; } return db_setup(db, dbpath); } static CK_RV db_free(sqlite3 **db) { int rc = sqlite3_close(*db); if (rc != SQLITE_OK) { LOGE("Cannot close database: %s\n", sqlite3_errmsg(*db)); return CKR_GENERAL_ERROR; } *db = NULL; return CKR_OK; } CK_RV db_init(void) { return db_new(&global.db); } CK_RV db_destroy(void) { return db_free(&global.db); } tpm2-pkcs11-1.9.1/src/lib/derive.c0000644000175100017510000001631514666345037012172 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include "attrs.h" #include "backend.h" #include "checks.h" #include "derive.h" #include "digest.h" #include "encrypt.h" #include "log.h" #include "mech.h" #include "ssl_util.h" #include "session.h" #include "session_ctx.h" #include "token.h" #include "tpm.h" typedef struct sanity_check_data sanity_check_data; struct sanity_check_data { size_t len; }; CK_RV handle_token(const CK_ATTRIBUTE_PTR attr, void* userdat) { CK_BBOOL value; UNUSED(userdat); CK_RV rv = attr_CK_BBOOL(attr, &value); LOGV("attr: name %s,\t\t val = %d", attr_get_name(attr->type), value); return rv; } CK_RV handle_class(const CK_ATTRIBUTE_PTR attr, void* userdat) { CK_OBJECT_CLASS value = 0; UNUSED(userdat); CK_RV rv = attr_CK_OBJECT_CLASS(attr, &value); if (value != CKO_SECRET_KEY) rv = CKR_ARGUMENTS_BAD; LOGV("attr: name %s, \t\t val = %s", attr_get_name(attr->type), "CKO_SECRET_KEY"); return rv; } CK_RV handle_key_type(const CK_ATTRIBUTE_PTR attr, void* userdat) { CK_KEY_TYPE value; UNUSED(userdat); CK_RV rv = attr_CK_KEY_TYPE(attr, &value); if (value != CKK_GENERIC_SECRET) rv = CKR_ARGUMENTS_BAD; LOGV("attr: name %s,\t val = %s", attr_get_name(attr->type), "CKK_GENERIC_SECRET"); return rv; } CK_RV handle_sensitive(const CK_ATTRIBUTE_PTR attr, void* userdat) { UNUSED(userdat); LOGV("attr: name %s", attr_get_name(attr->type)); return CKR_OK; } CK_RV handle_extractable(const CK_ATTRIBUTE_PTR attr, void* userdat) { UNUSED(userdat); LOGV("attr: name %s", attr_get_name(attr->type)); return CKR_OK; } CK_RV handle_encrypt(const CK_ATTRIBUTE_PTR attr, void* userdat) { CK_BBOOL value; UNUSED(userdat); CK_RV rv = attr_CK_BBOOL(attr, &value); LOGV("attr: name %s,\t\t val = %d", attr_get_name(attr->type), value); return rv; } CK_RV handle_decrypt(const CK_ATTRIBUTE_PTR attr, void* userdat) { CK_BBOOL value; UNUSED(userdat); CK_RV rv = attr_CK_BBOOL(attr, &value); LOGV("attr: name %s,\t\t val = %d", attr_get_name(attr->type), value); return rv; } CK_RV handle_wrap(const CK_ATTRIBUTE_PTR attr, void* userdat) { CK_BBOOL value; UNUSED(userdat); CK_RV rv = attr_CK_BBOOL(attr, &value); LOGV("attr: name %s,\t\t val = %d", attr_get_name(attr->type), value); return rv; } CK_RV handle_unwrap(const CK_ATTRIBUTE_PTR attr, void* userdat) { CK_BBOOL value; UNUSED(userdat); CK_RV rv = attr_CK_BBOOL(attr, &value); LOGV("attr: name %s,\t\t val = %d", attr_get_name(attr->type), value); return rv; } CK_RV handle_value_len(const CK_ATTRIBUTE_PTR attr, void* userdat) { CK_ULONG value; CK_RV rv = attr_CK_ULONG(attr, &value); if (rv == CKR_OK) { ((sanity_check_data*)userdat)->len = value; } LOGV("attr: name %s,\t val = 0x%lx", attr_get_name(attr->type), value); return rv; } CK_RV derive(session_ctx* ctx, CK_MECHANISM_PTR mechanism, /* public EC point */ CK_OBJECT_HANDLE tpm_key, /* private key */ CK_ATTRIBUTE_PTR secret_template, CK_ULONG secret_template_count, CK_OBJECT_HANDLE_PTR secret) { /* secret buffer in CKA_VALUE */ CK_RV rv = CKR_GENERAL_ERROR; check_pointer(mechanism); LOGV("mechanism: 0x%lx\n\thas_params: %s\n\tlen: %lu", mechanism->mechanism, mechanism->pParameter ? "yes" : "no", mechanism->ulParameterLen); if (mechanism->mechanism != CKM_ECDH1_DERIVE) return CKR_MECHANISM_INVALID; if (session_ctx_opdata_is_active(ctx)) return CKR_OPERATION_ACTIVE; token* tok = session_ctx_get_token(ctx); assert(tok); tobject* tobj = NULL; rv = token_load_object(tok, tpm_key, &tobj); if (rv != CKR_OK) { return rv; } rv = object_mech_is_supported(tobj, mechanism); if (rv != CKR_OK) { tobject_user_decrement(tobj); return rv; } /* Validate the keysize against the one provided by the mechanism */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_EC_PARAMS); if (!a) { LOGE("Expected tobject to have attribute CKA_EC_PARAMS"); return CKR_GENERAL_ERROR; } int nid = 0; rv = ssl_util_params_to_nid(a, &nid); if (rv != CKR_OK) { return rv; } unsigned keysize; switch (nid) { case NID_X9_62_prime192v1: keysize = 24; break; case NID_secp224r1: keysize = 28; break; case NID_X9_62_prime256v1: keysize = 32; break; case NID_secp384r1: keysize = 48; break; case NID_secp521r1: keysize = 66; break; default: return CKR_CURVE_NOT_SUPPORTED; } /* 1. Get the public EC point to use in the derivation from the mechanism */ CK_ECDH1_DERIVE_PARAMS_PTR mecha_params; SAFE_CAST(mechanism, mecha_params); if (mecha_params->kdf != CKD_NULL) { return CKR_MECHANISM_PARAM_INVALID; } /* 2. Uncompressed EC_POINT: is a DER OCTECT string of 04||x||y */ if (!mecha_params->public_data_len || (mecha_params->public_data_len - 1) != 2 * keysize) { return CKR_MECHANISM_PARAM_INVALID; } /* Validate the shared secret attributes */ static const attr_handler secret_check_handlers[] = { { CKA_TOKEN, handle_token }, { CKA_CLASS, handle_class }, { CKA_KEY_TYPE, handle_key_type }, { CKA_SENSITIVE, handle_sensitive }, { CKA_EXTRACTABLE, handle_extractable }, { CKA_ENCRYPT, handle_encrypt }, { CKA_DECRYPT, handle_decrypt }, { CKA_WRAP, handle_wrap }, { CKA_UNWRAP, handle_unwrap }, { CKA_VALUE_LEN, handle_value_len }, }; sanity_check_data udata = { 0 }; rv = attr_list_raw_invoke_handlers(secret_template, secret_template_count, secret_check_handlers, ARRAY_LEN(secret_check_handlers), &udata); if (rv != CKR_OK) { tobject_user_decrement(tobj); return rv; } /* Get the shaed secret */ CK_BYTE* shared_secret = NULL; rv = tpm_ec_ecdh1_derive(tok->tctx, tobj, /* EC private */ mecha_params->public_data, /* EC point */ mecha_params->public_data_len, &shared_secret, &udata.len); if (rv != CKR_OK) { tobject_user_decrement(tobj); return rv; } CK_ATTRIBUTE shared_secret_attr = { .ulValueLen = udata.len, .pValue = shared_secret, .type = CKA_VALUE, }; /* Return the shared secret in a CKO_SECRET_KEY class object */ rv = object_create(ctx, secret_template, secret_template_count, secret); if (rv != CKR_OK) { tobject_user_decrement(tobj); goto out; } rv = object_set_attributes(ctx, *secret, &shared_secret_attr, 1); if (rv != CKR_OK) { tobject_user_decrement(tobj); goto out; } out: free(shared_secret); return rv; } tpm2-pkcs11-1.9.1/src/lib/digest.c0000644000175100017510000001302514535673717012172 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include "checks.h" #include "digest.h" #include "mech.h" #include "session.h" #include "session_ctx.h" #include "token.h" #include "tpm.h" static inline const char *get_openssl_err(void) { return ERR_error_string(ERR_get_error(), NULL); } digest_op_data *digest_op_data_new(void) { return calloc(1, sizeof(digest_op_data)); } void digest_op_data_free(digest_op_data **opdata) { /* nothing to do if NULL or pointer to NULL */ if (!opdata || !*opdata) { return; } if ((*opdata)->mdctx) { EVP_MD_CTX_destroy((*opdata)->mdctx); } free(*opdata); *opdata = NULL; } static CK_RV digest_sw_init(mdetail *mdtl, digest_op_data *opdata) { const EVP_MD *md = NULL; CK_RV rv = mech_get_digester(mdtl, &opdata->mechanism, &md); if (rv != CKR_OK) { return rv; } EVP_MD_CTX *mdctx = EVP_MD_CTX_create(); if (!mdctx) { LOGE("%s", get_openssl_err()); return CKR_GENERAL_ERROR; } int rc = EVP_DigestInit_ex(mdctx, md, NULL); if (!rc) { EVP_MD_CTX_destroy(mdctx); LOGE("%s", get_openssl_err()); return CKR_GENERAL_ERROR; } opdata->mdctx = mdctx; return CKR_OK; } static CK_RV digest_sw_update(digest_op_data *opdata, const void *d, size_t cnt) { int rc = EVP_DigestUpdate(opdata->mdctx, d, cnt); if (!rc) { LOGE("%s", get_openssl_err()); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV digest_sw_final(digest_op_data *opdata, CK_BYTE_PTR md, CK_ULONG_PTR s) { CK_RV rv = CKR_GENERAL_ERROR; /* * Warn on truncation, this is likely not an issue unless digest message lengths overflow * int. */ if (*s > UINT_MAX) { LOGW("OSSL takes an int pointer, anything past %u is lost, got %lu", UINT_MAX, *s); } int rc = EVP_DigestFinal_ex(opdata->mdctx, md, (unsigned int *)s); if (!rc) { LOGE("%s", get_openssl_err()); goto out; } rv = CKR_OK; out: EVP_MD_CTX_destroy(opdata->mdctx); opdata->mdctx = NULL; return rv; } static CK_RV digest_get_min_size(session_ctx *ctx, digest_op_data *opdata, CK_ULONG_PTR digest_len) { if (!opdata) { CK_RV rv = session_ctx_opdata_get(ctx, operation_digest, &opdata); if (rv != CKR_OK) { LOGE("Could not get session data"); return rv; } } *digest_len = EVP_MD_CTX_size(opdata->mdctx); return CKR_OK; } CK_RV digest_init_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_MECHANISM_PTR mechanism) { CK_RV rv = CKR_GENERAL_ERROR; if (!supplied_opdata) { bool is_active = session_ctx_opdata_is_active(ctx); if (is_active) { return CKR_OPERATION_ACTIVE; } } digest_op_data *opdata = NULL; if (!supplied_opdata) { opdata = digest_op_data_new(); if (!opdata) { return CKR_HOST_MEMORY; } } else { opdata = supplied_opdata; } opdata->mechanism = *mechanism; token *tok = session_ctx_get_token(ctx); rv = digest_sw_init(tok->mdtl, opdata); if (rv != CKR_OK) { if (!supplied_opdata) { digest_op_data_free(&opdata); } return rv; } if (!supplied_opdata) { /* Store everything for later */ session_ctx_opdata_set(ctx, operation_digest, NULL, opdata, (opdata_free_fn)digest_op_data_free); } return CKR_OK; } CK_RV digest_update_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_BYTE_PTR part, CK_ULONG part_len) { check_pointer(part); CK_RV rv = CKR_GENERAL_ERROR; digest_op_data *opdata = NULL; if (!supplied_opdata) { rv = session_ctx_opdata_get(ctx, operation_digest, &opdata); if (rv != CKR_OK) { return rv; } } else { opdata = supplied_opdata; } return digest_sw_update(opdata, part, part_len); } CK_RV digest_final_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_BYTE_PTR digest, CK_ULONG_PTR digest_len) { check_pointer(digest_len); CK_RV rv = CKR_GENERAL_ERROR; digest_op_data *opdata = NULL; if (!supplied_opdata) { rv = session_ctx_opdata_get(ctx, operation_digest, &opdata); if (rv != CKR_OK) { return rv; } } else { opdata = supplied_opdata; } CK_ULONG min_len = 0; rv = digest_get_min_size(ctx, opdata, &min_len); if (rv != CKR_OK) { goto error; } if (!digest) { *digest_len = min_len; return CKR_OK; } else if (*digest_len < min_len) { *digest_len = min_len; return CKR_BUFFER_TOO_SMALL; } rv = digest_sw_final(opdata, digest, digest_len); error: if (!supplied_opdata) { session_ctx_opdata_clear(ctx); } return rv; } CK_RV digest_oneshot(session_ctx *ctx, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR digest, CK_ULONG_PTR digest_len) { CK_ULONG min_len = 0; CK_RV rv = digest_get_min_size(ctx, NULL, &min_len); if (rv != CKR_OK) { /* fatal error ends digest state */ session_ctx_opdata_clear(ctx); return rv; } if (!digest) { *digest_len = min_len; return CKR_OK; } else if (*digest_len < min_len) { *digest_len = min_len; return CKR_BUFFER_TOO_SMALL; } rv = digest_update(ctx, data, data_len); if (rv != CKR_OK) { return rv; } return digest_final(ctx, digest, digest_len); } tpm2-pkcs11-1.9.1/src/lib/emitter.c0000644000175100017510000003447014535673717012373 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include "attrs.h" #include "emitter.h" #include "log.h" #include "pkcs11.h" #include "twist.h" #include "token.h" #include "typed_memory.h" typedef struct yaml_emitter_state yaml_emitter_state; struct yaml_emitter_state { char *buf; size_t size; }; static int output_handler(void *data, unsigned char *buffer, size_t size) { yaml_emitter_state *s = (yaml_emitter_state *)data; size_t newsize = 0; safe_add(newsize, s->size, size); size_t newsize_1 = 0; safe_add(newsize_1, newsize, 1); void *ptr = realloc(s->buf, newsize_1); if (!ptr) { free(s->buf); return 0; } s->buf = ptr; size_t size_1 = 0; safe_add(size_1, size, 1); memset(&s->buf[s->size], 0, size_1); memcpy(&s->buf[s->size], buffer, size); s->size = newsize; return 1; } WEAK char *emit_attributes_to_string(attr_list *attrs) { yaml_document_t doc = { 0 }; char *yaml_return = NULL; int rc = yaml_document_initialize(&doc, NULL, /* version directive */ NULL, /* directive start */ NULL, /* directive end */ 0, /* start implicit */ 0); /* end implicit */ if (!rc) { LOGE("doc init failed"); return NULL; } int root = yaml_document_add_mapping(&doc, NULL, YAML_ANY_MAPPING_STYLE); if (!root) { LOGE("root add failed"); goto doc_delete; } CK_ULONG count = attr_list_get_count(attrs); const CK_ATTRIBUTE_PTR _attrs = attr_list_get_ptr(attrs); CK_ULONG i; for (i=0; i < count; i++) { /* handle the key */ const CK_ATTRIBUTE_PTR a = &_attrs[i]; char strkey[64] = { 0 }; CK_ATTRIBUTE_TYPE k = a->type; snprintf(strkey, sizeof(strkey), "%lu", k); int key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_INT_TAG, (yaml_char_t *)strkey, -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } /* what type of value is it */ CK_BYTE type = type_from_ptr(a->pValue, a->ulValueLen); assert(type); yaml_char_t *yamltag = NULL; switch(type) { case TYPE_BYTE_INT: yamltag = (yaml_char_t *)YAML_INT_TAG; break; case TYPE_BYTE_BOOL: yamltag = (yaml_char_t *)YAML_BOOL_TAG; break; case TYPE_BYTE_INT_SEQ: yamltag = (yaml_char_t *)YAML_SEQ_TAG; break; case TYPE_BYTE_HEX_STR: yamltag = (yaml_char_t *)YAML_STR_TAG; break; default: LOGE("unknown type, perhaps memory corruption issue?"); goto doc_delete; } int node; /* * handle the value */ if (type != TYPE_BYTE_INT_SEQ) { char keyvaluebuf[64] = { 0 }; const char *keyvalue = NULL; if (type == TYPE_BYTE_INT) { CK_ULONG_PTR v = (CK_ULONG_PTR)a->pValue; snprintf(keyvaluebuf, sizeof(keyvaluebuf), "%lu", *v); keyvalue = keyvaluebuf; } else if (type == TYPE_BYTE_BOOL) { CK_BBOOL *v = (CK_BBOOL *)a->pValue; snprintf(keyvaluebuf, sizeof(keyvaluebuf), "%s", *v == CK_TRUE ? "true" : "false"); keyvalue = keyvaluebuf; } else if (type == TYPE_BYTE_HEX_STR) { /* string*/ keyvalue = a->pValue ? twist_hex_new(a->pValue, a->ulValueLen) : ""; if (!keyvalue) { LOGE("oom"); goto doc_delete; } } else { /* impossible */ LOGE("barn fire"); assert(0); goto doc_delete; } node = yaml_document_add_scalar(&doc, yamltag, (yaml_char_t *)keyvalue, -1, YAML_ANY_SCALAR_STYLE); if (type == TYPE_BYTE_HEX_STR && strcmp(keyvalue, "")) { twist_free(keyvalue); } if (!node) { LOGE("yaml_document_add_scalar for value failed"); goto doc_delete; } } else { /* start a sequence */ node = yaml_document_add_sequence(&doc, yamltag, YAML_ANY_SEQUENCE_STYLE); if (!node) { LOGE("yaml_document_add_sequence for value failed"); goto doc_delete; } /* add scalar int's to sequence */ CK_ULONG len = a->ulValueLen/sizeof(CK_ULONG); CK_ULONG j; for (j=0; j < len; j++) { CK_ULONG v = ((CK_ULONG_PTR)a->pValue)[j]; char keyvalue[64] = { 0 }; snprintf(keyvalue, sizeof(keyvalue), "%lu", v); /* create a scalar */ int seqscalar = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_INT_TAG, (yaml_char_t *)keyvalue, -1, YAML_ANY_SCALAR_STYLE); if (!seqscalar) { LOGE("yaml_document_add_scalar for value failed"); goto doc_delete; } /* add scalar to sequence */ rc = yaml_document_append_sequence_item(&doc, node, seqscalar); if (!rc) { LOGE("yaml_document_append_sequence_item for value failed"); goto doc_delete; } } } /* add either scalar value or sequence of values */ rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } } yaml_emitter_t emitter = { 0 }; /* dummy dump the yaml to get size */ if (!yaml_emitter_initialize(&emitter)) { LOGE("Could not inialize the emitter object"); goto doc_delete; } yaml_emitter_state state = { 0 }; yaml_emitter_set_output(&emitter, output_handler, &state); yaml_emitter_set_canonical(&emitter, 1); if (!yaml_emitter_dump(&emitter, &doc)) { free(state.buf); LOGE("dump failed"); goto emitter_delete; } if (!yaml_emitter_close(&emitter)) { free(state.buf); LOGE("close failed"); goto emitter_delete; } yaml_return = state.buf; emitter_delete: yaml_emitter_delete(&emitter); doc_delete: yaml_document_delete(&doc); return yaml_return; } WEAK char *emit_config_to_string(token *t) { yaml_document_t doc = { 0 }; char *yaml_return = NULL; int rc = yaml_document_initialize(&doc, NULL, /* version directive */ NULL, /* directive start */ NULL, /* directive end */ 0, /* start implicit */ 0); /* end implicit */ if (!rc) { LOGE("doc init failed"); return NULL; } int root = yaml_document_add_mapping(&doc, NULL, YAML_ANY_MAPPING_STYLE); if (!root) { LOGE("root add failed"); goto doc_delete; } /* add config value is initialized */ int key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"token-init", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } const char *value = t->config.is_initialized ? "true" : "false"; int node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_BOOL_TAG, (yaml_char_t *)value, -1, YAML_ANY_SCALAR_STYLE); rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } /* add the tcti config value */ if (t->config.tcti) { key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"tcti", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)t->config.tcti, -1, YAML_ANY_SCALAR_STYLE); rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } } /* add the pss signature state if known */ if (t->config.pss_sigs_good != pss_config_state_unk) { key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"pss-sigs-good", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } value = (t->config.pss_sigs_good == pss_config_state_good) ? "true" : "false"; node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_BOOL_TAG, (yaml_char_t *)value, -1, YAML_ANY_SCALAR_STYLE); rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } } /* add config value empty user PIN, if set */ if (t->config.empty_user_pin) { key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"empty-user-pin", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } int node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_BOOL_TAG, (yaml_char_t *)"true", -1, YAML_ANY_SCALAR_STYLE); rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } } yaml_emitter_t emitter = { 0 }; /* dummy dump the yaml to get size */ if (!yaml_emitter_initialize(&emitter)) { LOGE("Could not inialize the emitter object"); goto doc_delete; } yaml_emitter_state state = { 0 }; yaml_emitter_set_output(&emitter, output_handler, &state); yaml_emitter_set_canonical(&emitter, 1); if (!yaml_emitter_dump(&emitter, &doc)) { free(state.buf); LOGE("dump failed"); goto emitter_delete; } if (!yaml_emitter_close(&emitter)) { free(state.buf); LOGE("close failed"); goto emitter_delete; } yaml_return = state.buf; emitter_delete: yaml_emitter_delete(&emitter); doc_delete: yaml_document_delete(&doc); return yaml_return; } WEAK char *emit_pobject_to_conf_string(pobject_config *config) { yaml_document_t doc = { 0 }; char *yaml_return = NULL; int rc = yaml_document_initialize(&doc, NULL, /* version directive */ NULL, /* directive start */ NULL, /* directive end */ 0, /* start implicit */ 0); /* end implicit */ if (!rc) { LOGE("doc init failed"); return NULL; } int root = yaml_document_add_mapping(&doc, NULL, YAML_ANY_MAPPING_STYLE); if (!root) { LOGE("root add failed"); goto doc_delete; } /* add config value is transient */ int key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"transient", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } const char *value = config->is_transient ? "true" : "false"; int node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_BOOL_TAG, (yaml_char_t *)value, -1, YAML_ANY_SCALAR_STYLE); rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } /* add the template-name config value if is transient */ if (config->is_transient) { assert(config->template_name); key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"template-name", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)config->template_name, -1, YAML_ANY_SCALAR_STYLE); } else { /* it is persistent add the esys tr */ assert(config->blob); key = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)"esys-tr", -1, YAML_ANY_SCALAR_STYLE); if (!key) { LOGE("yaml_document_add_scalar for key failed"); goto doc_delete; } twist hexblob = twist_hexlify(config->blob); if (!hexblob) { goto doc_delete; } node = yaml_document_add_scalar(&doc, (yaml_char_t *)YAML_STR_TAG, (yaml_char_t *)hexblob, -1, YAML_ANY_SCALAR_STYLE); twist_free(hexblob); } /* add either template-name or esys-tr */ rc = yaml_document_append_mapping_pair(&doc, root, key, node); if (!rc) { LOGE("yaml_document_append_mapping_pair failed"); goto doc_delete; } yaml_emitter_t emitter = { 0 }; /* dummy dump the yaml to get size */ if (!yaml_emitter_initialize(&emitter)) { LOGE("Could not inialize the emitter object"); goto doc_delete; } yaml_emitter_state state = { 0 }; yaml_emitter_set_output(&emitter, output_handler, &state); yaml_emitter_set_canonical(&emitter, 1); if (!yaml_emitter_dump(&emitter, &doc)) { free(state.buf); LOGE("dump failed"); goto emitter_delete; } if (!yaml_emitter_close(&emitter)) { free(state.buf); LOGE("close failed"); goto emitter_delete; } yaml_return = state.buf; emitter_delete: yaml_emitter_delete(&emitter); doc_delete: yaml_document_delete(&doc); return yaml_return; } tpm2-pkcs11-1.9.1/src/lib/encrypt.c0000644000175100017510000003022114535673717012374 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include "checks.h" #include "encrypt.h" #include "mech.h" #include "ssl_util.h" #include "session.h" #include "session_ctx.h" #include "token.h" #include "tpm.h" #include "twist.h" typedef CK_RV (*crypto_op)(crypto_op_data *enc_data, CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen); static sw_encrypt_data *sw_encrypt_data_new(void) { return (sw_encrypt_data *)calloc(1, sizeof(sw_encrypt_data)); } static void sw_encrypt_data_free(sw_encrypt_data **enc_data) { if (!enc_data || !*enc_data) { return; } if ((*enc_data)->key) { EVP_PKEY_free((*enc_data)->key); } twist_free((*enc_data)->label); free(*enc_data); *enc_data = NULL; } encrypt_op_data *encrypt_op_data_new(void) { return (encrypt_op_data *)calloc(1, sizeof(encrypt_op_data)); } void encrypt_op_data_free(encrypt_op_data **opdata) { if (opdata) { (*opdata)->use_sw ? sw_encrypt_data_free(&(*opdata)->cryptopdata.sw_enc_data) : tpm_opdata_free(&(*opdata)->cryptopdata.tpm_opdata); free(*opdata); *opdata = NULL; } } CK_RV sw_encrypt_data_init(mdetail *mdtl, CK_MECHANISM *mechanism, tobject *tobj, sw_encrypt_data **enc_data) { EVP_PKEY *pkey = NULL; CK_RV rv = ssl_util_attrs_to_evp(tobj->attrs, &pkey); if (rv != CKR_OK) { return rv; } int padding = 0; rv = mech_get_padding(mdtl, mechanism, &padding); if (rv != CKR_OK) { return rv; } const EVP_MD *md = NULL; bool is_hashing_needed = false; rv = mech_is_hashing_needed( mdtl, mechanism, &is_hashing_needed); if (rv != CKR_OK) { return rv; } if (is_hashing_needed) { rv = mech_get_digester(mdtl, mechanism, &md); if (rv != CKR_OK) { return rv; } } twist label = NULL; rv = mech_get_label(mechanism, &label); if (rv != CKR_OK) { return rv; } sw_encrypt_data *d = sw_encrypt_data_new(); if (!d) { LOGE("oom"); twist_free(label); EVP_PKEY_free(pkey); return CKR_HOST_MEMORY; } d->key = pkey; d->padding = padding; d->label = label; d->md = md; *enc_data = d; return CKR_OK; } static CK_RV sw_encrypt(crypto_op_data *opdata, CK_BYTE_PTR ptext, CK_ULONG ptextlen, CK_BYTE_PTR ctext, CK_ULONG_PTR ctextlen) { assert(opdata); sw_encrypt_data *sw_enc_data = opdata->sw_enc_data; assert(sw_enc_data); assert(sw_enc_data->key); return ssl_util_encrypt(sw_enc_data->key, sw_enc_data->padding, sw_enc_data->label, sw_enc_data->md, ptext, ptextlen, ctext, ctextlen); } static CK_RV common_init_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, operation op, CK_MECHANISM_PTR mechanism, CK_OBJECT_HANDLE key) { check_pointer(mechanism); LOGV("mechanism->mechanism: %lu\n" "mechanism->ulParameterLen: %lu\n" "mechanism->pParameter: %s", mechanism->mechanism, mechanism->ulParameterLen, mechanism->pParameter ? "set" : "(null)"); token *tok = session_ctx_get_token(ctx); assert(tok); if (!supplied_opdata) { bool is_active = session_ctx_opdata_is_active(ctx); if (is_active) { return CKR_OPERATION_ACTIVE; } } tobject *tobj; CK_RV rv = token_load_object(tok, key, &tobj); if (rv != CKR_OK) { return rv; } rv = object_mech_is_supported(tobj, mechanism); if (rv != CKR_OK) { tobject_user_decrement(tobj); return rv; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_CLASS); if (!a) { LOGE("Expected tobject to have attribute CKA_CLASS"); return CKR_GENERAL_ERROR; } CK_OBJECT_CLASS obj_class = 0; rv = attr_CK_OBJECT_CLASS(a, &obj_class); if (rv != CKR_OK) { LOGE("Could not convert CKA_CLASS"); return rv; } encrypt_op_data *opdata; if (!supplied_opdata) { opdata = encrypt_op_data_new(); if (!opdata) { tobject_user_decrement(tobj); return CKR_HOST_MEMORY; } } else { opdata = supplied_opdata; } /* * Public Key Objects don't need to hit the TPM */ if (obj_class == CKO_PUBLIC_KEY) { opdata->use_sw = true; rv = sw_encrypt_data_init(tok->mdtl, mechanism, tobj, &opdata->cryptopdata.sw_enc_data); } else { rv = mech_get_tpm_opdata(tok->mdtl, tok->tctx, mechanism, tobj, &opdata->cryptopdata.tpm_opdata); } if (rv != CKR_OK) { tobject_user_decrement(tobj); if (!supplied_opdata) { encrypt_op_data_free(&opdata); } return rv; } if (!supplied_opdata) { session_ctx_opdata_set(ctx, op, tobj, opdata, (opdata_free_fn)encrypt_op_data_free); } return CKR_OK; } static CK_RV common_update_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, operation op, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { check_pointer(part); check_pointer(encrypted_part_len); CK_RV rv = CKR_GENERAL_ERROR; encrypt_op_data *opdata = NULL; if (!supplied_opdata) { rv = session_ctx_opdata_get(ctx, op, &opdata); if (rv != CKR_OK) { return rv; } rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } } else { opdata = supplied_opdata; } /* * Public key crypto operations have the use_sw flag set. Currently, * they are restricted to working only with RSA AFAIK. Thus, * they only perform RSA Encrypt (RSA operation w/pub key). Thus, the * SW path will always call sw_encrypt. * * If we add proper EC support, we likely need a sw_decrypt interface * that does the right thing with respect to EC and RSA. For RSA it * should always call Encrypt and for EC, likely can do Encrypt. */ crypto_op fop; switch(op) { case operation_encrypt: fop = opdata->use_sw ? sw_encrypt : tpm_encrypt; break; case operation_decrypt: fop = opdata->use_sw ? sw_encrypt : tpm_decrypt; break; default: return CKR_GENERAL_ERROR; } return fop(&opdata->cryptopdata, part, part_len, encrypted_part, encrypted_part_len); } static CK_RV common_final_op(session_ctx *ctx, encrypt_op_data *supplied_opdata, operation op, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len, bool is_oneshot) { check_pointer(last_part_len); bool reset_ctx = false; CK_RV rv = CKR_GENERAL_ERROR; encrypt_op_data *opdata = supplied_opdata; if (!opdata) { rv = session_ctx_opdata_get(ctx, op, &opdata); if (rv != CKR_OK) { return rv; } rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } } assert(opdata); tobject *tobj = session_ctx_opdata_get_tobject(ctx); assert(tobj); /* we may have some TPM symmetric data to deal with */ if (!opdata->use_sw) { rv = (op == operation_encrypt) ? tpm_final_encrypt(&opdata->cryptopdata, last_part, last_part_len) : tpm_final_decrypt(&opdata->cryptopdata, last_part, last_part_len); if (rv != CKR_OK) { goto out; } } else if (!last_part) { /* For all other encrypt operations deal with 5.2 style returns */ if (last_part_len) { *last_part_len = 0; } } rv = CKR_OK; out: /* * we're only done if last_part is specified or the buffer isn't too small * * We also don't want to decrement the tobject unless we're using session ctx * not internal routines. */ reset_ctx = (rv == CKR_BUFFER_TOO_SMALL || !last_part); if (reset_ctx) { if (is_oneshot && !opdata->use_sw) { tpm_opdata_reset(opdata->cryptopdata.tpm_opdata); } /* all is well, we reset the command context */ rv = CKR_OK; } else if(!supplied_opdata) { /* end the command context */ tobj->is_authenticated = false; if (!supplied_opdata) { session_ctx_opdata_clear(ctx); } CK_RV tmp_rv = tobject_user_decrement(tobj); if (tmp_rv != CKR_OK && rv == CKR_OK) { rv = tmp_rv; } } return rv; } CK_RV encrypt_init_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return common_init_op(ctx, supplied_opdata, operation_encrypt, mechanism, key); } CK_RV decrypt_init_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return common_init_op(ctx, supplied_opdata, operation_decrypt, mechanism, key); } CK_RV encrypt_update_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { return common_update_op(ctx, supplied_opdata, operation_encrypt, part, part_len, encrypted_part, encrypted_part_len); } CK_RV decrypt_update_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { return common_update_op(ctx, supplied_opdata, operation_decrypt, part, part_len, encrypted_part, encrypted_part_len); } CK_RV encrypt_final_ex (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR last_encrypted_part, CK_ULONG_PTR last_encrypted_part_len, bool is_oneshot) { return common_final_op(ctx, supplied_opdata, operation_encrypt, last_encrypted_part, last_encrypted_part_len, is_oneshot); } CK_RV decrypt_final_ex (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len, bool is_oneshot) { return common_final_op(ctx, supplied_opdata, operation_decrypt, last_part, last_part_len, is_oneshot); } CK_RV decrypt_oneshot_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR encrypted_data, CK_ULONG encrypted_data_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len) { check_pointer(data_len); bool is_buffer_too_small = false; CK_ULONG tmp_len = *data_len; CK_RV rv = decrypt_update_op(ctx, supplied_opdata, encrypted_data, encrypted_data_len, data, &tmp_len); if (rv != CKR_OK && rv != CKR_BUFFER_TOO_SMALL) { return rv; } CK_ULONG update_len = tmp_len; if (rv == CKR_BUFFER_TOO_SMALL) { data = NULL; is_buffer_too_small = true; } else { if (data) { data = &data[update_len]; assert(tmp_len <= *data_len); } tmp_len = *data_len - tmp_len; } rv = decrypt_final_ex(ctx, supplied_opdata, data, &tmp_len, true); *data_len = update_len + tmp_len; return !is_buffer_too_small ? rv : CKR_BUFFER_TOO_SMALL; } CK_RV encrypt_oneshot_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR encrypted_data, CK_ULONG_PTR encrypted_data_len) { check_pointer(encrypted_data_len); bool is_buffer_too_small = false; CK_ULONG tmp_len = *encrypted_data_len; CK_RV rv = encrypt_update_op (ctx, supplied_opdata, data, data_len, encrypted_data, &tmp_len); if (rv != CKR_OK && rv != CKR_BUFFER_TOO_SMALL) { return rv; } CK_ULONG update_len = tmp_len; if (rv == CKR_BUFFER_TOO_SMALL) { encrypted_data = NULL; is_buffer_too_small = true; } else { if (encrypted_data) { encrypted_data = &encrypted_data[update_len]; assert(tmp_len <= *encrypted_data_len); } tmp_len = *encrypted_data_len - tmp_len; } rv = encrypt_final_ex(ctx, supplied_opdata, encrypted_data, &tmp_len, true); *encrypted_data_len = update_len + tmp_len; return !is_buffer_too_small ? rv : CKR_BUFFER_TOO_SMALL; } tpm2-pkcs11-1.9.1/src/lib/general.c0000644000175100017510000001554514535673717012341 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include "checks.h" #include "config.h" #include "backend.h" #include "general.h" #include "log.h" #include "mutex.h" #include "pkcs11.h" #include "session.h" #include "utils.h" #ifndef VERSION #warning "VERSION Not known at compile time, not embedding..." #define VERSION "UNKNOWN" #endif static const CK_UTF8CHAR LIBRARY_DESCRIPTION[] = "TPM2.0 Cryptoki"; static const CK_UTF8CHAR LIBRARY_MANUFACTURER[] = "tpm2-software.github.io"; #define CRYPTOKI_VERSION { \ .major = CRYPTOKI_VERSION_MAJOR, \ .minor = CRYPTOKI_VERSION_MINOR \ } CK_RV general_get_info(CK_INFO *info) { check_pointer(info); /* we only need one copy and we only need to initialize it on first call */ static CK_INFO _info_ = { .cryptokiVersion = CRYPTOKI_VERSION, }; static CK_INFO *_info = NULL; if (!_info) { str_padded_copy(_info_.manufacturerID, LIBRARY_MANUFACTURER); str_padded_copy(_info_.libraryDescription, LIBRARY_DESCRIPTION); parse_lib_version(PACKAGE_VERSION, &_info_.libraryVersion.major, &_info_.libraryVersion.minor); _info = &_info_; } *info = *_info; return CKR_OK; } CK_RV general_get_func_list(CK_FUNCTION_LIST **function_list) { if (function_list == NULL_PTR) { return CKR_ARGUMENTS_BAD; } static CK_FUNCTION_LIST list = { .version = CRYPTOKI_VERSION, .C_Initialize = C_Initialize, .C_Finalize = C_Finalize, .C_GetInfo = C_GetInfo, .C_GetFunctionList = C_GetFunctionList, .C_GetSlotList = C_GetSlotList, .C_GetSlotInfo = C_GetSlotInfo, .C_GetTokenInfo = C_GetTokenInfo, .C_GetMechanismList = C_GetMechanismList, .C_GetMechanismInfo = C_GetMechanismInfo, .C_InitToken = C_InitToken, .C_InitPIN = C_InitPIN, .C_SetPIN = C_SetPIN, .C_OpenSession = C_OpenSession, .C_CloseSession = C_CloseSession, .C_CloseAllSessions = C_CloseAllSessions, .C_GetSessionInfo = C_GetSessionInfo, .C_GetOperationState = C_GetOperationState, .C_SetOperationState = C_SetOperationState, .C_Login = C_Login, .C_Logout = C_Logout, .C_CreateObject = C_CreateObject, .C_CopyObject = C_CopyObject, .C_DestroyObject = C_DestroyObject, .C_GetObjectSize = C_GetObjectSize, .C_GetAttributeValue = C_GetAttributeValue, .C_SetAttributeValue = C_SetAttributeValue, .C_FindObjectsInit = C_FindObjectsInit, .C_FindObjects = C_FindObjects, .C_FindObjectsFinal = C_FindObjectsFinal, .C_EncryptInit = C_EncryptInit, .C_Encrypt = C_Encrypt, .C_EncryptUpdate = C_EncryptUpdate, .C_EncryptFinal = C_EncryptFinal, .C_DecryptInit = C_DecryptInit, .C_Decrypt = C_Decrypt, .C_DecryptUpdate = C_DecryptUpdate, .C_DecryptFinal = C_DecryptFinal, .C_DigestInit = C_DigestInit, .C_Digest = C_Digest, .C_DigestUpdate = C_DigestUpdate, .C_DigestKey = C_DigestKey, .C_DigestFinal = C_DigestFinal, .C_SignInit = C_SignInit, .C_Sign = C_Sign, .C_SignUpdate = C_SignUpdate, .C_SignFinal = C_SignFinal, .C_SignRecoverInit = C_SignRecoverInit, .C_SignRecover = C_SignRecover, .C_VerifyInit = C_VerifyInit, .C_Verify = C_Verify, .C_VerifyUpdate = C_VerifyUpdate, .C_VerifyFinal = C_VerifyFinal, .C_VerifyRecoverInit = C_VerifyRecoverInit, .C_VerifyRecover = C_VerifyRecover, .C_DigestEncryptUpdate = C_DigestEncryptUpdate, .C_DecryptDigestUpdate = C_DecryptDigestUpdate, .C_SignEncryptUpdate = C_SignEncryptUpdate, .C_DecryptVerifyUpdate = C_DecryptVerifyUpdate, .C_GenerateKey = C_GenerateKey, .C_GenerateKeyPair = C_GenerateKeyPair, .C_WrapKey = C_WrapKey, .C_UnwrapKey = C_UnwrapKey, .C_DeriveKey = C_DeriveKey, .C_SeedRandom = C_SeedRandom, .C_GenerateRandom = C_GenerateRandom, .C_GetFunctionStatus = C_GetFunctionStatus, .C_CancelFunction = C_CancelFunction, .C_WaitForSlotEvent = C_WaitForSlotEvent, }; *function_list = &list; return CKR_OK; } static bool _g_is_init; bool general_is_init(void) { return _g_is_init; } CK_RV general_init(void *init_args) { CK_RV rv = CKR_GENERAL_ERROR; if (init_args) { CK_C_INITIALIZE_ARGS *args = (CK_C_INITIALIZE_ARGS *)init_args; if(args->pReserved) { return CKR_ARGUMENTS_BAD; } /* * If their is CKF_OS_LOCKING_OK flag: * 1. No function pointers, Use native OS support (default in mutex.h). * 2. Supplied function pointers, optional use them (we won't). * 3. Partial supplied function pointers is CKR_ARGUMENTS_BAD * * If their is no CKF_OS_LOCKING_OK flag: * A. No callbacks means no need for locks * B. All callbacks means use theirs * C. A mix is CKR_ARGUMENTS_BAD */ if (!args->CreateMutex && !args->DestroyMutex && !args->LockMutex && !args->UnlockMutex) { /* no function pointers, options 1 and A */ if(args->flags & CKF_OS_LOCKING_OK) { /* pass as it's default */ } else { /* no need for locks */ mutex_set_handlers(NULL, NULL, NULL, NULL); } } else if (args->CreateMutex && args->DestroyMutex && args->LockMutex && args->UnlockMutex) { /* all function pointers, options 2 and B */ if(args->flags & CKF_OS_LOCKING_OK) { /* optional, we won't use theirs, use default */ } else { mutex_set_handlers(args->CreateMutex, args->DestroyMutex, args->LockMutex, args->UnlockMutex); } } else { /* mixed function pointers, bad */ return CKR_ARGUMENTS_BAD; } } else { /* No init arguments means no multi-thread access */ mutex_set_handlers(NULL, NULL, NULL, NULL); } /* * Initialize the various sub-systems. * * THESE MUST GO AFTER MUTEX INIT above!! */ rv = backend_init(); if (rv != CKR_OK) { goto err; } rv = slot_init(); if (rv != CKR_OK) { (void)backend_destroy(); goto err; } _g_is_init = true; return CKR_OK; err: return rv; } CK_RV general_finalize(void *reserved) { if (reserved) { return CKR_ARGUMENTS_BAD; } _g_is_init = false; slot_destroy(); backend_destroy(); return CKR_OK; } tpm2-pkcs11-1.9.1/src/lib/key.c0000644000175100017510000002156414667615111011500 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include "attrs.h" #include "backend.h" #include "checks.h" #include "key.h" #include "list.h" #include "pkcs11.h" #include "session.h" #include "session_ctx.h" #include "utils.h" typedef struct sanity_check_data sanity_check_data; struct sanity_check_data { bool is_extractable; bool is_sensitive; }; static CK_RV handle_extractable_common(CK_ATTRIBUTE_PTR attr, bool is_extractable, void *udata) { sanity_check_data *scd = (sanity_check_data *)udata; assert(scd); CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value != CK_TRUE && value != CK_FALSE) { return CKR_ATTRIBUTE_VALUE_INVALID; } if (is_extractable) { scd->is_extractable = !!value; } else { scd->is_sensitive = !!value; } return CKR_OK; } static CK_RV handle_sensitive(CK_ATTRIBUTE_PTR attr,void *udata) { return handle_extractable_common(attr, false, udata); } static CK_RV handle_extractable(CK_ATTRIBUTE_PTR attr,void *udata) { return handle_extractable_common(attr, true, udata); } static CK_RV handle_expect_false(CK_ATTRIBUTE_PTR attr,void *udata) { UNUSED(udata); CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value) { LOGE("%s=true not supported", attr_get_name(attr->type)); return CKR_ATTRIBUTE_VALUE_INVALID; } return CKR_OK; } CK_RV check_common_attrs( CK_ATTRIBUTE_PTR private_key_template, CK_ULONG private_key_attribute_count) { static const attr_handler common_attr_check_handlers[] = { { CKA_PRIVATE, handle_sensitive }, { CKA_EXTRACTABLE, handle_extractable }, { CKA_SIGN_RECOVER, handle_expect_false }, { CKA_VERIFY_RECOVER, handle_expect_false }, { CKA_TRUSTED, handle_expect_false }, }; sanity_check_data udata = { 0 }; CK_RV rv = attr_list_raw_invoke_handlers( private_key_template, private_key_attribute_count, common_attr_check_handlers, ARRAY_LEN(common_attr_check_handlers), &udata); if (rv != CKR_OK) { return rv; } if (udata.is_extractable && udata.is_sensitive) { LOGE("Cannot mark object both extractable AND sensitive"); return CKR_ATTRIBUTE_VALUE_INVALID; } return CKR_OK; } static CK_RV ecc_check_attrs( CK_ATTRIBUTE_PTR public_key_template, CK_ULONG public_key_attribute_count, CK_ATTRIBUTE_PTR private_key_template, CK_ULONG private_key_attribute_count) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type_raw(public_key_template, public_key_attribute_count, CKA_EC_PARAMS); if (!a) { LOGE("EC keygen requires CKA_EC_PARAMS in public template"); return CKR_TEMPLATE_INCONSISTENT; } CK_ATTRIBUTE_PTR b = attr_get_attribute_by_type_raw(private_key_template, private_key_attribute_count, CKA_EC_PARAMS); if (b) { LOGW("EC keygen CKA_EC_PARAMS should not be in private template"); return CKR_TEMPLATE_INCONSISTENT; } return CKR_OK; } static CK_RV check_specific_attrs(CK_MECHANISM_TYPE mech, CK_ATTRIBUTE_PTR public_key_template, CK_ULONG public_key_attribute_count, CK_ATTRIBUTE_PTR private_key_template, CK_ULONG private_key_attribute_count) { switch (mech) { case CKM_RSA_PKCS_KEY_PAIR_GEN: return CKR_OK; case CKM_EC_KEY_PAIR_GEN: return ecc_check_attrs(public_key_template, public_key_attribute_count, private_key_template, private_key_attribute_count); default: LOGE("Unsupported keygen mechanism: 0x%lx", mech); return CKR_MECHANISM_INVALID; } } CK_RV key_gen ( session_ctx *ctx, CK_MECHANISM_PTR mechanism, CK_ATTRIBUTE_PTR public_key_template, CK_ULONG public_key_attribute_count, CK_ATTRIBUTE_PTR private_key_template, CK_ULONG private_key_attribute_count, CK_OBJECT_HANDLE_PTR public_key_handle, CK_OBJECT_HANDLE_PTR private_key_handle) { CK_RV rv = CKR_GENERAL_ERROR; twist newauthhex = NULL; twist newwrapped_auth = NULL; attr_list *pubkey_templ_w_types = NULL; attr_list *privkey_templ_w_types = NULL; tobject *new_private_tobj = NULL; tobject *new_public_tobj = NULL; tpm_object_data objdata = { 0 }; token *tok = session_ctx_get_token(ctx); assert(tok); /* * Attribute arrays specified by the user don't have the type * information, but are safe for basic sanity checks (for now). */ rv = check_common_attrs( private_key_template, private_key_attribute_count); if (rv != CKR_OK) { LOGE("Failed checking private attrs"); goto out; } rv = check_common_attrs( public_key_template, public_key_attribute_count); if (rv != CKR_OK) { LOGE("Failed checking public attrs"); goto out; } check_specific_attrs(mechanism->mechanism, public_key_template, public_key_attribute_count, private_key_template, private_key_attribute_count); /* * Following functions demand to know about the type tagging, * so "typeify" the user supplied attrs. */ bool res = attr_typify(public_key_template, public_key_attribute_count, &pubkey_templ_w_types); if (!res) { LOGE("Failed typifying public attrs"); goto out; } res = attr_typify(private_key_template, private_key_attribute_count, &privkey_templ_w_types); if (!res) { LOGE("Failed typifying private attrs"); goto out; } /* re-seat pointers to type safe ones */ public_key_template = NULL; private_key_template = NULL; new_private_tobj = tobject_new(); if (!new_private_tobj) { rv = CKR_HOST_MEMORY; goto out; } new_public_tobj = tobject_new(); if (!new_public_tobj) { rv = CKR_HOST_MEMORY; goto out; } rv = utils_new_random_object_auth(&newauthhex); if (rv != CKR_OK) { LOGE("Failed to create new object auth"); goto out; } rv = utils_ctx_wrap_objauth(tok->wrappingkey, newauthhex, &newwrapped_auth); if (rv != CKR_OK) { LOGE("Failed to wrap new object auth"); goto out; } rv = tpm2_generate_key( tok->tctx, tok->pobject.handle, tok->pobject.objauth, newauthhex, mechanism, pubkey_templ_w_types, privkey_templ_w_types, &objdata); if (rv != CKR_OK) { LOGE("Failed to generate key"); goto out; } /* set the tpm object handles */ tobject_set_handle(new_private_tobj, objdata.privhandle); tobject_set_handle(new_public_tobj, objdata.pubhandle); new_public_tobj->attrs = pubkey_templ_w_types; new_private_tobj->attrs = privkey_templ_w_types; /* make it clear that tobj now owns these */ pubkey_templ_w_types = privkey_templ_w_types = NULL; /* * objects have default required attributes, add them if not present. */ rv = attr_add_missing_attrs(&new_public_tobj->attrs, &new_private_tobj->attrs, objdata.attrs, mechanism->mechanism); if (rv != CKR_OK) { LOGE("Failed to add missing rsa attrs"); goto out; } /* populate blob data */ rv = tobject_set_blob_data(new_private_tobj, objdata.pubblob, objdata.privblob); if (rv != CKR_OK) { goto out; } rv = tobject_set_blob_data(new_public_tobj, objdata.pubblob, NULL); if (rv != CKR_OK) { goto out; } /* populate auth data, public objects do not need an auth */ rv = tobject_set_auth(new_private_tobj, newauthhex, newwrapped_auth); if (rv != CKR_OK) { goto out; } rv = backend_add_object(tok, new_public_tobj); if (rv != CKR_OK) { LOGE("Failed to add public object to db"); goto out; } rv = backend_add_object(tok, new_private_tobj); if (rv != CKR_OK) { LOGE("Failed to add public object to db"); goto out; } rv = token_add_tobject(tok, new_public_tobj); if (rv != CKR_OK) { LOGE("Failed to add public object to token"); goto out; } rv = token_add_tobject(tok, new_private_tobj); if (rv != CKR_OK) { LOGE("Failed to add private object to token"); goto out; } *public_key_handle = new_public_tobj->obj_handle; *private_key_handle = new_private_tobj->obj_handle; out: tpm_objdata_free(&objdata); twist_free(newauthhex); twist_free(newwrapped_auth); attr_list_free(pubkey_templ_w_types); attr_list_free(privkey_templ_w_types); if (rv != CKR_OK) { tobject_free(new_private_tobj); tobject_free(new_public_tobj); } return rv; } tpm2-pkcs11-1.9.1/src/lib/mech.c0000644000175100017510000013502314666345037011626 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include "attrs.h" #include "checks.h" #include "log.h" #include "mech.h" #include "object.h" #include "ssl_util.h" #include "pkcs11.h" #include "tpm.h" #include "utils.h" #define MAX_MECHS 128 typedef enum mechanism_flags mechanism_flags; enum mechanism_flags { mf_tpm_supported = 1 << 0, mf_is_keygen = 1 << 1, mf_is_synthetic = 1 << 3, mf_is_digester = 1 << 4, mf_sign = 1 << 5, mf_verify = 1 << 6, mf_encrypt = 1 << 7, mf_decrypt = 1 << 8, mf_rsa = 1 << 9, mf_ecc = 1 << 10, mf_aes = 1 << 11, mf_force_synthetic = 1 << 12, mf_hmac = 1 << 13, mf_derive = 1 << 14, }; typedef struct mdetail_entry mdetail_entry; typedef struct nid_detail nid_detail; typedef struct rsa_detail rsa_detail; struct rsa_detail { CK_ULONG bits; bool supported; }; struct nid_detail { int nid; bool supported; }; /* * Validates that the mechanism parameters are sane and supported */ typedef CK_RV (*fn_validator)(mdetail *details, CK_MECHANISM_PTR mech, attr_list *attrs); /* * Some crypto operations can be synthesized (padding done off hw and raw crypto performed) * This routine would do all those steps. */ typedef CK_RV (*fn_synthesizer)(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); typedef CK_RV (*fn_get_halg)(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE *halg); typedef CK_RV (*fn_get_digester)(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); typedef CK_RV (*fn_get_tpm_opdata)(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **encdata); struct mdetail_entry { CK_MECHANISM_TYPE type; fn_validator validator; fn_synthesizer synthesizer; fn_synthesizer unsynthesizer; fn_get_tpm_opdata get_tpm_opdata; fn_get_halg get_halg; fn_get_digester get_digester; int padding; mechanism_flags flags; }; struct mdetail { size_t mdetail_len; mdetail_entry *mech_entries; size_t rsa_detail_len; rsa_detail *rsa_entries; size_t nid_detail_len; nid_detail *nid_entries; }; static CK_RV rsa_keygen_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_pkcs_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_pss_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_oaep_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_pkcs_hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_pss_hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV ecc_keygen_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV ecdsa_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV ecdh1_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV hmac_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs); static CK_RV rsa_pkcs_synthesizer(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV rsa_pkcs_unsynthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV rsa_pss_synthesizer(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV rsa_pkcs_hash_synthesizer(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV aes_cbc_synthesizer(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV aes_cbc_unsynthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); static CK_RV rsa_pss_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV rsa_oaep_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV sha1_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV sha256_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV sha384_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV sha512_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg); static CK_RV rsa_pss_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static CK_RV rsa_oaep_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static CK_RV sha1_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static CK_RV sha256_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static CK_RV sha384_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static CK_RV sha512_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md); static const mdetail_entry _g_mechs_templ[] = { /* RSA */ { .type = CKM_RSA_PKCS_KEY_PAIR_GEN, .validator = rsa_keygen_validator, .flags = mf_is_keygen|mf_rsa }, { .type = CKM_RSA_X_509, .flags = mf_is_synthetic|mf_sign|mf_verify|mf_encrypt|mf_decrypt|mf_rsa, .get_tpm_opdata = tpm_rsa_pkcs_get_opdata, .padding = RSA_NO_PADDING }, { .type = CKM_RSA_PKCS, .flags = mf_force_synthetic|mf_sign|mf_verify|mf_encrypt|mf_decrypt|mf_rsa, .validator = rsa_pkcs_validator, .synthesizer = rsa_pkcs_synthesizer, .unsynthesizer = rsa_pkcs_unsynthesizer, .get_tpm_opdata = tpm_rsa_pkcs_get_opdata, .padding = RSA_PKCS1_PADDING }, { .type = CKM_RSA_PKCS_PSS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pss_validator, .synthesizer = rsa_pss_synthesizer, .get_digester = rsa_pss_get_digester, .get_tpm_opdata = tpm_rsa_pss_get_opdata, .padding = RSA_PKCS1_PSS_PADDING }, { .type = CKM_RSA_PKCS_OAEP, . flags = mf_encrypt|mf_decrypt|mf_rsa, .validator = rsa_oaep_validator, .get_halg = rsa_oaep_get_halg, .get_digester = rsa_oaep_get_digester, .get_tpm_opdata = tpm_rsa_oaep_get_opdata, .padding = RSA_PKCS1_OAEP_PADDING }, { .type = CKM_SHA1_RSA_PKCS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pkcs_hash_validator, .synthesizer = rsa_pkcs_hash_synthesizer, .get_halg = sha1_get_halg, .get_digester = sha1_get_digester, .get_tpm_opdata = tpm_rsa_pkcs_sha1_get_opdata, .padding = RSA_PKCS1_PADDING }, { .type = CKM_SHA256_RSA_PKCS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pkcs_hash_validator, .synthesizer = rsa_pkcs_hash_synthesizer, .get_halg = sha256_get_halg, .get_digester = sha256_get_digester, .get_tpm_opdata = tpm_rsa_pkcs_sha256_get_opdata, .padding = RSA_PKCS1_PADDING }, { .type = CKM_SHA384_RSA_PKCS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pkcs_hash_validator, .synthesizer = rsa_pkcs_hash_synthesizer, .get_halg = sha384_get_halg, .get_digester = sha384_get_digester, .get_tpm_opdata = tpm_rsa_pkcs_sha384_get_opdata, .padding = RSA_PKCS1_PADDING }, { .type = CKM_SHA512_RSA_PKCS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pkcs_hash_validator, .synthesizer = rsa_pkcs_hash_synthesizer, .get_halg = sha512_get_halg, .get_digester = sha512_get_digester, .get_tpm_opdata = tpm_rsa_pkcs_sha512_get_opdata, .padding = RSA_PKCS1_PADDING }, { .type = CKM_SHA1_RSA_PKCS_PSS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pss_hash_validator, .get_halg = sha1_get_halg, .get_digester = sha1_get_digester, .synthesizer = rsa_pss_synthesizer, .get_tpm_opdata = tpm_rsa_pss_sha1_get_opdata, .padding = RSA_PKCS1_PSS_PADDING }, { .type = CKM_SHA256_RSA_PKCS_PSS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pss_hash_validator, .get_halg = sha256_get_halg, .get_digester = sha256_get_digester, .synthesizer = rsa_pss_synthesizer, .get_tpm_opdata = tpm_rsa_pss_sha256_get_opdata, .padding = RSA_PKCS1_PSS_PADDING }, { .type = CKM_SHA384_RSA_PKCS_PSS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pss_hash_validator, .get_halg = sha384_get_halg, .get_digester = sha384_get_digester, .synthesizer = rsa_pss_synthesizer, .get_tpm_opdata = tpm_rsa_pss_sha384_get_opdata, .padding = RSA_PKCS1_PSS_PADDING }, { .type = CKM_SHA512_RSA_PKCS_PSS, .flags = mf_sign|mf_verify|mf_rsa, .validator = rsa_pss_hash_validator, .get_halg = sha512_get_halg, .get_digester = sha512_get_digester, .synthesizer = rsa_pss_synthesizer, .get_tpm_opdata = tpm_rsa_pss_sha512_get_opdata, .padding = RSA_PKCS1_PSS_PADDING }, /* EC */ { .type = CKM_EC_KEY_PAIR_GEN, .flags = mf_is_keygen|mf_ecc, .validator = ecc_keygen_validator }, { .type = CKM_ECDSA, .flags = mf_sign|mf_verify|mf_ecc, .validator = ecdsa_validator, .get_tpm_opdata = tpm_ec_ecdsa_get_opdata }, { .type = CKM_ECDSA_SHA1, .flags = mf_sign|mf_verify|mf_ecc, .validator = ecdsa_validator, .get_halg = sha1_get_halg, .get_digester = sha1_get_digester, .get_tpm_opdata = tpm_ec_ecdsa_sha1_get_opdata }, { .type = CKM_ECDSA_SHA256, .flags = mf_sign|mf_verify|mf_ecc, .validator = ecdsa_validator, .get_halg = sha256_get_halg, .get_digester = sha256_get_digester, .get_tpm_opdata = tpm_ec_ecdsa_sha256_get_opdata }, { .type = CKM_ECDSA_SHA384, .flags = mf_sign|mf_verify|mf_ecc, .validator = ecdsa_validator, .get_halg = sha384_get_halg, .get_digester = sha384_get_digester, .get_tpm_opdata = tpm_ec_ecdsa_sha384_get_opdata }, { .type = CKM_ECDSA_SHA512, .flags = mf_sign|mf_verify|mf_ecc, .validator = ecdsa_validator, .get_halg = sha512_get_halg, .get_digester = sha512_get_digester, .get_tpm_opdata = tpm_ec_ecdsa_sha512_get_opdata }, { .type = CKM_ECDH1_DERIVE, .flags = mf_derive | mf_ecc, .validator = ecdh1_validator }, /* AES */ { .type = CKM_AES_KEY_GEN, .flags = mf_is_keygen|mf_aes }, { .type = CKM_AES_CBC, .flags = mf_encrypt|mf_decrypt|mf_aes, .get_tpm_opdata = tpm_aes_cbc_get_opdata }, { .type = CKM_AES_CBC_PAD, .flags = mf_encrypt|mf_decrypt|mf_aes|mf_force_synthetic, .get_tpm_opdata = tpm_aes_cbc_get_opdata, .synthesizer = aes_cbc_synthesizer, .unsynthesizer = aes_cbc_unsynthesizer }, { .type = CKM_AES_CFB128, .flags = mf_encrypt|mf_decrypt|mf_aes, .get_tpm_opdata = tpm_aes_cfb_get_opdata }, { .type = CKM_AES_ECB, .flags = mf_encrypt|mf_decrypt|mf_aes, .get_tpm_opdata = tpm_aes_ecb_get_opdata }, { .type = CKM_AES_CTR, .flags = mf_encrypt|mf_decrypt|mf_aes, .get_tpm_opdata = tpm_aes_ctr_get_opdata }, /* hashing */ { .type = CKM_SHA_1, .flags = mf_is_digester|mf_aes, .validator = hash_validator, .get_digester = sha1_get_digester }, { .type = CKM_SHA256, .flags = mf_is_digester|mf_aes, .validator = hash_validator, .get_digester = sha256_get_digester }, { .type = CKM_SHA384, .flags = mf_is_digester|mf_aes, .validator = hash_validator, .get_digester = sha384_get_digester }, { .type = CKM_SHA512, .flags = mf_is_digester|mf_aes, .validator = hash_validator, .get_digester = sha512_get_digester }, /* hmac */ { .type = CKM_SHA_1_HMAC, .flags = mf_sign|mf_verify|mf_hmac, .validator = hmac_validator, .get_tpm_opdata = tpm_hmac_sha1_get_opdata }, { .type = CKM_SHA256_HMAC, .flags = mf_sign|mf_verify|mf_hmac, .validator = hmac_validator, .get_tpm_opdata = tpm_hmac_sha256_get_opdata }, { .type = CKM_SHA384_HMAC, .flags = mf_sign|mf_verify|mf_hmac, .validator = hmac_validator, .get_tpm_opdata = tpm_hmac_sha384_get_opdata }, { .type = CKM_SHA512_HMAC, .flags = mf_sign|mf_verify|mf_hmac, .validator = hmac_validator, .get_tpm_opdata = tpm_hmac_sha512_get_opdata }, }; const rsa_detail _g_rsa_keysizes_templ [] = { { .bits = 1024 }, { .bits = 2048 }, { .bits = 3072 }, { .bits = 4096 }, }; const nid_detail _g_ecc_curve_nids_templ [] = { { .nid = NID_X9_62_prime192v1 }, { .nid = NID_secp224r1 }, { .nid = NID_X9_62_prime256v1 }, { .nid = NID_secp384r1, }, { .nid = NID_secp521r1, }, }; static mdetail_entry *mlookup(mdetail *details, CK_MECHANISM_TYPE t) { CK_ULONG i; for (i=0; i < details->mdetail_len; i++) { mdetail_entry *m = &details->mech_entries[i]; if (m->type == t) { return m; } } return NULL; } static CK_RV mech_init(tpm_ctx *tctx, mdetail *m) { /* * Get the mechanisms */ CK_MECHANISM_TYPE tpm_mechs[MAX_MECHS]; CK_ULONG tpm_mechs_len = ARRAY_LEN(tpm_mechs); CK_RV rv = tpm2_getmechanisms(tctx, tpm_mechs, &tpm_mechs_len); if (rv != CKR_OK) { return rv; } assert(tpm_mechs_len <= m->mdetail_len); /* * Update whether or not the TPM supports it or not * and any other metadata */ CK_ULONG i; for (i=0; i < tpm_mechs_len; i++) { CK_MECHANISM_TYPE t = tpm_mechs[i]; mdetail_entry *d = NULL; CK_ULONG j; for (j=0; j < m->mdetail_len; j++) { d = &m->mech_entries[j]; if (d->type == t) { d->flags |= mf_tpm_supported; break; } } } mdetail_entry *d = mlookup(m, CKM_RSA_PKCS_KEY_PAIR_GEN); if (d) { /* get supported RSA key bit sizes */ for (i=0; i < m->rsa_detail_len; i++) { rv = tpm_is_rsa_keysize_supported(tctx, m->rsa_entries[i].bits); if (rv == CKR_MECHANISM_INVALID) { continue; } if(rv == CKR_OK) { m->rsa_entries[i].supported = true; continue; } return rv; } } else { LOGV("RSA Keygen not detected"); } d = mlookup(m, CKM_EC_KEY_PAIR_GEN); if (d) { /* get supported ECC curves */ for (i=0; i < m->nid_detail_len; i++) { rv = tpm_is_ecc_curve_supported(tctx, m->nid_entries[i].nid); if (rv == CKR_MECHANISM_INVALID) { continue; } if(rv == CKR_OK) { m->nid_entries[i].supported = true; continue; } return rv; } } else { LOGV("EC Keygen not detected"); } return CKR_OK; } void mdetail_free(mdetail **mdtl) { if (!mdtl || !*mdtl) { return; } mdetail *m = *mdtl; free(m->mech_entries); free(m->nid_entries); free(m->rsa_entries); free(m); *mdtl = NULL; } void mdetail_set_pss_status(mdetail *m, bool pss_sigs_good) { CK_MECHANISM_TYPE mtypes[] = { CKM_RSA_PKCS_PSS, CKM_SHA1_RSA_PKCS_PSS, CKM_SHA256_RSA_PKCS_PSS, CKM_SHA384_RSA_PKCS_PSS, CKM_SHA512_RSA_PKCS_PSS, }; size_t i = 0; for (i=0; i < ARRAY_LEN(mtypes); i++) { CK_MECHANISM_TYPE t = mtypes[i]; mdetail_entry *d = mlookup(m, t); assert(d); if (pss_sigs_good) { d->flags |= mf_tpm_supported; } else { d->flags &= ~mf_tpm_supported; } } } CK_RV mdetail_new(tpm_ctx *ctx, mdetail **mout, pss_config_state pss_sig_state) { assert(mout); mdetail_entry *d = calloc(1, sizeof(_g_mechs_templ)); if (!d) { LOGE("oom"); return CKR_HOST_MEMORY; } nid_detail *n = calloc(1, sizeof(_g_ecc_curve_nids_templ)); if (!n) { LOGE("oom"); free(d); return CKR_HOST_MEMORY; } rsa_detail *r = calloc(1, sizeof(_g_rsa_keysizes_templ)); if (!r) { LOGE("oom"); free(d); free(n); return CKR_HOST_MEMORY; } mdetail *m = calloc(1, sizeof(mdetail)); if (!m) { LOGE("oom"); free(d); free(n); free(r); return CKR_HOST_MEMORY; } memcpy(d, _g_mechs_templ, sizeof(_g_mechs_templ)); m->mdetail_len = ARRAY_LEN(_g_mechs_templ); m->mech_entries = d; memcpy(n, _g_ecc_curve_nids_templ, sizeof(_g_ecc_curve_nids_templ)); m->nid_detail_len = ARRAY_LEN(_g_ecc_curve_nids_templ); m->nid_entries = n; memcpy(r, _g_rsa_keysizes_templ, sizeof(_g_rsa_keysizes_templ)); m->rsa_detail_len = ARRAY_LEN(_g_rsa_keysizes_templ); m->rsa_entries = r; /* * TODO * make mech_init smarter by caching the various RSA and EC curve * information in the YAML token config. Thus reduce TPM round trips. * See https://github.com/tpm2-software/tpm2-pkcs11/issues/455 */ CK_RV rv = mech_init(ctx, m); if (rv != CKR_OK) { LOGE("mech_init failed: 0x%lx", rv); free(m); free(d); free(n); free(r); return rv; } /* * Some tokens know their PSS state, always use it. The TPM backend code * might get it wrong, as it *ONLY* checks TPMA_MODES in the properties. * Else we will figure it out when we need to sign, which is when it really * matters. */ if (pss_sig_state != pss_config_state_unk) { bool pss_sigs_good = (pss_sig_state == pss_config_state_good) ? true : false; LOGV("Updating mech detail table that PSS signatures are: %s", pss_sigs_good ? "good" : "bad"); mdetail_set_pss_status(m, pss_sigs_good); } *mout = m; return CKR_OK; }; #define _L(a) (a->ulValueLen/sizeof(CK_MECHANISM_TYPE)) #define _P(a) ((CK_MECHANISM_TYPE_PTR)a->pValue) static CK_RV has_raw_rsa(attr_list *attrs) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_ALLOWED_MECHANISMS); if (!a) { LOGE("Expected CKA_ALLOWED_MECHANISMS"); return CKR_GENERAL_ERROR; } /* If the TPM doesn't support it, it needs to support raw sign */ bool supported = false; CK_ULONG i; for (i=0; i < _L(a); i++) { CK_MECHANISM_TYPE t = _P(a)[i]; if (t == CKM_RSA_X_509) { supported = true; break; } } return supported ? CKR_OK : CKR_MECHANISM_INVALID; } CK_RV hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); UNUSED(m); /* hashers don't take params */ if (mech->pParameter || mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } /* all known hashing digests are supported in software */ return CKR_OK; } CK_RV hmac_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); UNUSED(m); /* The non general HMAC routines don't take params */ if (mech->pParameter || mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_ALLOWED_MECHANISMS); if (!a) { LOGE("Expected CKA_ALLOWED_MECHANISMS"); return CKR_GENERAL_ERROR; } /* Is the mechanism in the list of allowed mechs? */ bool supported = false; CK_ULONG i; for (i=0; i < _L(a); i++) { CK_MECHANISM_TYPE t = _P(a)[i]; if (t == mech->mechanism) { supported = true; break; } } return supported ? CKR_OK : CKR_MECHANISM_INVALID; } CK_RV rsa_pkcs_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(m); /* * CKM_RSA_PKCS has the PKCS v1.5 signing structure computed by the client * and requires only padding, so no parameters should be set */ if (mech->pParameter || mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } return has_raw_rsa(attrs); } CK_RV rsa_pkcs_hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { /* CKM__RSA_PKCS takes no params */ if (mech->pParameter || mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } /* it needs to be supported */ mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { return CKR_MECHANISM_INVALID; } /* if the TPM supports it natively, we're done */ if (d->flags & mf_tpm_supported) { return CKR_OK; } return has_raw_rsa(attrs); } CK_RV rsa_pss_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); /* it needs to be supported */ mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { return CKR_MECHANISM_INVALID; } CK_RSA_PKCS_PSS_PARAMS_PTR params; SAFE_CAST(mech, params); /* no SHA224 support AFAIK */ if (params->mgf == CKG_MGF1_SHA224) { return CKR_MECHANISM_PARAM_INVALID; } /* * The TPM fixes the MGF to the hash algorithm and the salt to the hashlen. */ CK_MECHANISM test_type = { 0 }; if (params->hashAlg == CKM_SHA_1) { if ((params->mgf != CKG_MGF1_SHA1) ||(params->sLen != 20)) { return CKR_MECHANISM_PARAM_INVALID; } test_type.mechanism = CKM_SHA1_RSA_PKCS_PSS; } else if (params->hashAlg == CKM_SHA256) { if ((params->mgf != CKG_MGF1_SHA256) ||(params->sLen != 32)) { return CKR_MECHANISM_PARAM_INVALID; } test_type.mechanism = CKM_SHA256_RSA_PKCS_PSS; } else if (params->hashAlg == CKM_SHA384) { if ((params->mgf != CKG_MGF1_SHA384) ||(params->sLen != 48)) { return CKR_MECHANISM_PARAM_INVALID; } test_type.mechanism = CKM_SHA384_RSA_PKCS_PSS; } else if (params->hashAlg == CKM_SHA512) { if ((params->mgf != CKG_MGF1_SHA512) ||(params->sLen != 64)) { return CKR_MECHANISM_PARAM_INVALID; } test_type.mechanism = CKM_SHA512_RSA_PKCS_PSS; } else { LOGE("Unknown hash algorithm: 0x%lx", params->hashAlg); return CKR_MECHANISM_PARAM_INVALID; } /* Is it synthetic or native TPM supported ?*/ bool is_synthetic = true; CK_RV rv = mech_is_synthetic(m, &test_type, &is_synthetic); if (rv != CKR_OK) { return rv; } /* * For synthetic operations we need raw RSA do we have it? Else we're * fine */ return is_synthetic ? has_raw_rsa(attrs) : CKR_OK; } CK_RV rsa_oaep_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); /* it needs to be supported */ mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { return CKR_MECHANISM_INVALID; } CK_RSA_PKCS_OAEP_PARAMS_PTR params; SAFE_CAST(mech, params); /* no SHA224 support AFAIK */ if (params->mgf == CKG_MGF1_SHA224) { return CKR_MECHANISM_PARAM_INVALID; } CK_MECHANISM_TYPE halg = 0; CK_RV rv = d->get_halg(mech, &halg); if (rv != CKR_OK) { return rv; } if (halg != params->hashAlg) { return CKR_MECHANISM_PARAM_INVALID; } if (!params->source) { if (params->pSourceData || params->ulSourceDataLen) { return CKR_MECHANISM_PARAM_INVALID; } return CKR_OK; } if (params->source != CKZ_DATA_SPECIFIED) { return CKR_MECHANISM_PARAM_INVALID; } /* * now that the OAEP portion IS supported AND the mechanism params check out, * is supported natively? */ if (d->flags & mf_tpm_supported) { return CKR_OK; } return CKR_MECHANISM_INVALID; } CK_RV rsa_pss_hash_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { /* this may have an argument */ if (mech->pParameter || mech->ulParameterLen) { return rsa_pss_validator(m, mech, attrs); } /* * now that the PSS portion IS supported AND the mechanism params check out, * we need raw RSA, do we have it? */ return has_raw_rsa(attrs); } CK_RV rsa_keygen_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { /* this requires no argument */ if (!mech->pParameter || !mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_MODULUS); if (!a) { return CKR_TEMPLATE_INCOMPLETE; } CK_ULONG bits = 0; safe_mul(bits, a->ulValueLen, 8); CK_ULONG i; for (i=0; i < m->mdetail_len; i++) { if (m->rsa_entries[i].bits == bits) { return m->rsa_entries[i].supported ? CKR_OK : CKR_ATTRIBUTE_VALUE_INVALID; } } return CKR_ATTRIBUTE_VALUE_INVALID; } CK_RV ecc_keygen_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { /* this requires no argument */ if (!mech->pParameter || !mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_EC_PARAMS); if (!a) { return CKR_TEMPLATE_INCOMPLETE; } int nid = 0; CK_RV rv = ssl_util_params_to_nid(a, &nid); if (rv != CKR_OK) { return rv; } CK_ULONG i; for (i=0; i < m->nid_detail_len; i++) { if (m->nid_entries[i].nid == nid) { return m->nid_entries[i].supported ? CKR_OK : CKR_MECHANISM_INVALID; } } return CKR_MECHANISM_INVALID; } CK_RV ecdsa_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); UNUSED(m); /* ECDSA and ECDSA SHA1 are always supported */ /* this does not require an argument */ if (mech->pParameter || mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } return CKR_OK; } CK_RV ecdh1_validator(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { UNUSED(attrs); UNUSED(m); CK_ECDH1_DERIVE_PARAMS *params = mech->pParameter; if (!params || !mech->ulParameterLen) { return CKR_MECHANISM_PARAM_INVALID; } return CKR_OK; } CK_RV sha1_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { UNUSED(mech); *halg = CKM_SHA_1; return CKR_OK; } CK_RV sha256_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { UNUSED(mech); *halg = CKM_SHA256; return CKR_OK; } CK_RV sha384_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { UNUSED(mech); *halg = CKM_SHA384; return CKR_OK; } CK_RV sha512_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { UNUSED(mech); *halg = CKM_SHA512; return CKR_OK; } static CK_RV rsa_pss_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { CK_RSA_PKCS_PSS_PARAMS_PTR params; SAFE_CAST(mech, params); *halg = params->hashAlg; return CKR_OK; } static CK_RV rsa_oaep_get_halg(CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE_PTR halg) { CK_RSA_PKCS_OAEP_PARAMS_PTR params; SAFE_CAST(mech, params); *halg = params->hashAlg; return CKR_OK; } CK_RV rsa_pss_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { CK_MECHANISM_TYPE halg = 0; CK_RV rv = rsa_pss_get_halg(mech, &halg); if (rv != CKR_OK) { return rv; } mdetail_entry *d = mlookup(m, halg); if (!d) { return CKR_MECHANISM_INVALID; } return d->get_digester(m, mech, md); } CK_RV rsa_oaep_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { CK_MECHANISM_TYPE halg = 0; CK_RV rv = rsa_oaep_get_halg(mech, &halg); if (rv != CKR_OK) { return rv; } mdetail_entry *d = mlookup(m, halg); if (!d) { return CKR_MECHANISM_INVALID; } return d->get_digester(m, mech, md); } CK_RV sha1_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { UNUSED(mech); UNUSED(m); *md = EVP_sha1(); return CKR_OK; } CK_RV sha256_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { UNUSED(mech); UNUSED(m); *md = EVP_sha256(); return CKR_OK; } CK_RV sha384_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { UNUSED(mech); UNUSED(m); *md = EVP_sha384(); return CKR_OK; } CK_RV sha512_get_digester(mdetail *m, CK_MECHANISM_PTR mech, const EVP_MD **md) { UNUSED(mech); UNUSED(m); *md = EVP_sha512(); return CKR_OK; } CK_RV rsa_pkcs_synthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { UNUSED(mech); UNUSED(mdtl); CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_MODULUS_BITS); if (!a) { LOGE("Signing key has no CKA_MODULUS_BITS"); return CKR_GENERAL_ERROR; } if (a->ulValueLen != sizeof(CK_ULONG)) { LOGE("Modulus bit pointer data not size of CK_ULONG, got %lu, expected %zu", a->ulValueLen, sizeof(CK_ULONG)); return CKR_GENERAL_ERROR; } CK_ULONG_PTR keybits = (CK_ULONG_PTR)a->pValue; size_t padded_len = *keybits / 8; if (*outlen < padded_len) { LOGE("Internal buffer is too small, got: %lu, required %lu", *outlen, padded_len); return CKR_GENERAL_ERROR; } /* Apply the PKCS1.5 padding */ CK_RV rv = ssl_util_add_PKCS1_TYPE_1(inbuf, inlen, outbuf, padded_len); if (rv != CKR_OK) { LOGE("Applying RSA padding failed"); return rv; } *outlen = padded_len; return CKR_OK; } CK_RV rsa_pkcs_unsynthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { UNUSED(mech); UNUSED(mdtl); CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_MODULUS_BITS); if (!a) { LOGE("Signing key has no CKA_MODULUS_BITS"); return CKR_GENERAL_ERROR; } if (a->ulValueLen != sizeof(CK_ULONG)) { LOGE("Modulus bit pointer data not size of CK_ULONG, got %lu, expected %zu", a->ulValueLen, sizeof(CK_ULONG)); return CKR_GENERAL_ERROR; } CK_ULONG_PTR keybits = (CK_ULONG_PTR)a->pValue; size_t key_bytes = *keybits / 8; unsigned char buf[4096]; CK_ULONG buflen = sizeof(buf); CK_RV rv = ssl_util_check_PKCS1_TYPE_2(inbuf, inlen, key_bytes, buf, &buflen); if (rv != CKR_OK) { LOGE("Could not recover CKM_RSA_PKCS Padding"); return rv; } if (!outbuf || buflen > *outlen) { *outlen = buflen; return outbuf ? CKR_BUFFER_TOO_SMALL : CKR_OK; } *outlen = buflen; memcpy(outbuf, buf, buflen); return CKR_OK; } CK_RV rsa_pss_synthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { const EVP_MD *md = NULL; CK_RV rv = mech_get_digester(mdtl, mech, &md); if (rv != CKR_OK) { LOGE("Could not get digester for mech: 0x%lx", mech->mechanism); return rv; } int expected_len = EVP_MD_size(md); if (expected_len <= 0) { LOGE("Hash size cannot be 0 or negative, got: %d", expected_len); return CKR_GENERAL_ERROR; } if (inlen != (unsigned)expected_len) { LOGE("Expected input size to be hash size, %lu != %d", inlen, expected_len); return CKR_GENERAL_ERROR; } CK_ATTRIBUTE_PTR modulus_attr = attr_get_attribute_by_type(attrs, CKA_MODULUS); if (!modulus_attr) { LOGE("Signing key has no CKA_MODULUS"); return CKR_GENERAL_ERROR; } if (modulus_attr->ulValueLen > *outlen) { LOGE("Output buffer is too small, got: %lu, required at least %lu", *outlen, modulus_attr->ulValueLen); return CKR_GENERAL_ERROR; } EVP_PKEY *pkey = NULL; rv = ssl_util_attrs_to_evp(attrs, &pkey); if (rv != CKR_OK) { return rv; } rv = ssl_util_add_PKCS1_PSS(pkey, inbuf, md, outbuf); EVP_PKEY_free(pkey); if (rv != CKR_OK) { LOGE("Applying RSA padding failed"); return CKR_GENERAL_ERROR; } *outlen = modulus_attr->ulValueLen; return CKR_OK; } CK_RV rsa_pkcs_hash_synthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { assert(mech); assert(outlen); /* These headers are defined in the following RFC * - https://www.ietf.org/rfc/rfc3447.txt * - Page 42 */ static const CK_BYTE pkcs1_5_hdr_sha1[15] = { 0x30, 0x21, 0x30, 0x09, 0x06, 0x05, 0x2b, 0x0e, 0x03, 0x02, 0x1a, 0x05, 0x00, 0x04, 0x14, }; static const CK_BYTE pkcs1_5_hdr_sha256[19] = { 0x30, 0x31, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, 0x05, 0x00, 0x04, 0x20, }; static const CK_BYTE pkcs1_5_hdr_sha384[19] = { 0x30, 0x41, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x02, 0x05, 0x00, 0x04, 0x30, }; static const CK_BYTE pkcs1_5_hdr_sha512[19] = { 0x30, 0x51, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x03, 0x05, 0x00, 0x04, 0x40, }; const CK_BYTE *hdr; size_t hdr_size; switch(mech->mechanism) { case CKM_SHA1_RSA_PKCS: hdr = pkcs1_5_hdr_sha1; hdr_size = sizeof(pkcs1_5_hdr_sha1); break; case CKM_SHA256_RSA_PKCS: hdr = pkcs1_5_hdr_sha256; hdr_size = sizeof(pkcs1_5_hdr_sha256); break; case CKM_SHA384_RSA_PKCS: hdr = pkcs1_5_hdr_sha384; hdr_size = sizeof(pkcs1_5_hdr_sha384); break; case CKM_SHA512_RSA_PKCS: hdr = pkcs1_5_hdr_sha512; hdr_size = sizeof(pkcs1_5_hdr_sha512); break; default: return CKR_MECHANISM_INVALID; } size_t hash_len = utils_get_halg_size(mech->mechanism); if (!hash_len) { LOGE("Unknown hash size, got 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } if (inlen != hash_len) { LOGE("Expected input hash length to match expected hash length," "got: %lu, expected: %lu", inlen, hash_len); } size_t total_size = 0; safe_add(total_size, hdr_size, hash_len); CK_BYTE hdr_buf[4096]; if (total_size > sizeof(hdr_buf)) { LOGE("Internal buffer is too small, got: %lu, required %lu", total_size, sizeof(hdr_buf)); return CKR_GENERAL_ERROR; } /* * Build and populate a buffer with hdr + hash */ memcpy(hdr_buf, hdr, hdr_size); memcpy(&hdr_buf[hdr_size], inbuf, hash_len); return rsa_pkcs_synthesizer(mdtl, mech, attrs, hdr_buf, total_size, outbuf, outlen); } static CK_RV aes_cbc_synthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { UNUSED(mdtl); UNUSED(mech); UNUSED(attrs); return apply_pkcs7_pad(inbuf, inlen, outbuf, outlen); } static CK_RV aes_cbc_unsynthesizer(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { UNUSED(mdtl); UNUSED(mech); UNUSED(attrs); return remove_pkcs7_pad(inbuf, inlen, outbuf, outlen); } static CK_RV get_rsa_mechinfo(tpm_ctx *tctx, CK_MECHANISM_INFO_PTR info) { CK_ULONG min = 0; CK_ULONG max = 0; CK_RV rv = tpm_find_max_rsa_keysize(tctx, &min, &max); if (rv != CKR_OK) { return rv; } info->ulMinKeySize = min; info->ulMaxKeySize = max; return CKR_OK; } static CK_RV get_ecc_mechinfo(tpm_ctx *tctx, CK_MECHANISM_INFO_PTR info) { CK_ULONG max = 0; CK_ULONG min = 0; CK_RV rv = tpm_find_ecc_keysizes(tctx, &min, &max); if (rv != CKR_OK) { return rv; } info->ulMinKeySize = min; info->ulMaxKeySize = max; return CKR_OK; } static CK_RV get_aes_mechinfo(tpm_ctx *tctx, CK_MECHANISM_INFO_PTR info) { CK_ULONG max = 0; CK_ULONG min = 0; CK_RV rv = tpm_find_aes_keysizes(tctx, &min, &max); if (rv != CKR_OK) { return rv; } info->ulMinKeySize = min; info->ulMaxKeySize = max; return CKR_OK; } static bool is_mech_supported(mdetail_entry *d) { mechanism_flags f = d->flags; return (f & mf_tpm_supported) || (f & mf_is_keygen) || (f & mf_is_digester); } CK_RV mech_get_supported(mdetail *m, CK_MECHANISM_TYPE_PTR mechlist, CK_ULONG_PTR count) { CK_RV rv = CKR_GENERAL_ERROR; check_pointer(count); CK_ULONG supported = 0; CK_MECHANISM_TYPE tmp[MAX_MECHS]; CK_ULONG i; for (i=0; i < m->mdetail_len; i++) { mdetail_entry *d = &m->mech_entries[i]; /* is it supported ? */ bool is_supported = is_mech_supported(d); if (!is_supported) { continue; } assert(supported <= ARRAY_LEN(tmp)); tmp[supported] = d->type; supported++; } if (mechlist) { if (supported > *count) { rv = CKR_BUFFER_TOO_SMALL; goto out; } if (supported) { size_t bytes = 0; safe_mul(bytes, supported, sizeof(mechlist[0])); memcpy(mechlist, tmp, bytes); } } rv = CKR_OK; out: *count = supported; return rv; } CK_RV mech_validate(mdetail *m, CK_MECHANISM_PTR mech, attr_list *attrs) { check_pointer(mech); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGV("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } /* if their is no validator, don't do anything but a look up */ if (!d->validator) { return CKR_OK; } /* if it's not a keygen template, make sure the object supports it */ if (!(d->flags & mf_is_keygen)) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_ALLOWED_MECHANISMS); if (!a) { LOGE("Expected object to have: CKA_ALLOWED_MECHANISMS"); return CKR_GENERAL_ERROR; } CK_ULONG count = a->ulValueLen/sizeof(CK_MECHANISM_TYPE); CK_MECHANISM_TYPE_PTR mt = (CK_MECHANISM_TYPE_PTR)a->pValue; bool found = false; CK_ULONG i; for(i=0; i < count; i++) { CK_MECHANISM_TYPE t = mt[i]; if (t == mech->mechanism) { found = true; break; } } if (!found) { return CKR_MECHANISM_INVALID; } } return d->validator(m, mech, attrs); } CK_RV mech_synthesize( mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { check_pointer(mech); mdetail_entry *d = mlookup(mdtl, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } /* if it's supported by the tpm we don't need to call * the synthesizer, just memcpy in to out. */ if ((d->flags & mf_tpm_supported) && !(d->flags & mf_force_synthetic)) { if (outbuf) { if (*outlen < inlen) { return CKR_BUFFER_TOO_SMALL; } memcpy(outbuf, inbuf, inlen); } *outlen = inlen; return CKR_OK; } if (!d->synthesizer) { LOGE("Cannot synthesize mechanism: 0x%lx", d->type); return CKR_MECHANISM_INVALID; } return d->synthesizer(mdtl, mech, attrs, inbuf, inlen, outbuf, outlen); } CK_RV mech_unsynthesize( mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen) { check_pointer(mech); mdetail_entry *d = mlookup(mdtl, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } /* if it's supported by the tpm we don't need to call * the synthesizer, just memcpy in to out. */ if ((d->flags & mf_tpm_supported) && !(d->flags & mf_force_synthetic)) { if (outbuf) { if (*outlen < inlen) { return CKR_BUFFER_TOO_SMALL; } memcpy(outbuf, inbuf, inlen); } *outlen = inlen; return CKR_OK; } if (!d->unsynthesizer) { LOGE("Cannot unsynthesize mechanism: 0x%lx", d->type); return CKR_MECHANISM_INVALID; } return d->unsynthesizer(mdtl, mech, attrs, inbuf, inlen, outbuf, outlen); } CK_RV mech_is_synthetic(mdetail *m, CK_MECHANISM_PTR mech, bool *is_synthetic) { check_pointer(m); check_pointer(mech); check_pointer(is_synthetic); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } *is_synthetic = (!(d->flags & mf_tpm_supported)) || (d->flags & mf_is_synthetic) || (d->flags & mf_force_synthetic); return CKR_OK; } CK_RV mech_is_hashing_needed(mdetail *m, CK_MECHANISM_PTR mech, bool *is_hashing_needed) { check_pointer(m); check_pointer(mech); check_pointer(is_hashing_needed); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } if (!d->get_halg) { *is_hashing_needed = false; return CKR_OK; } CK_MECHANISM_TYPE halg; CK_RV rv = d->get_halg(mech, &halg); if (rv != CKR_OK) { return rv; } *is_hashing_needed = halg != 0; return CKR_OK; } CK_RV mech_is_HMAC(mdetail *m, CK_MECHANISM_PTR mech, bool *is_hmac) { check_pointer(m); check_pointer(mech); check_pointer(is_hmac); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } *is_hmac = !!(d->flags & mf_hmac); return CKR_OK; } CK_RV mech_is_hashing_knowledge_needed(mdetail *m, CK_MECHANISM_PTR mech, bool *is_hashing_knowledge_needed) { check_pointer(m); check_pointer(mech); check_pointer(is_hashing_knowledge_needed); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } *is_hashing_knowledge_needed = d->get_digester; return CKR_OK; } CK_RV mech_get_digest_alg(mdetail *m, CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE *mech_type) { check_pointer(m); check_pointer(mech); check_pointer(mech_type); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } if (!d->get_halg) { LOGE("Mechanism 0x%lx has no get_halg()", mech->mechanism); return CKR_MECHANISM_INVALID; } return d->get_halg(mech, mech_type); } CK_RV mech_get_digester( mdetail *mdtl, CK_MECHANISM_PTR mech, const EVP_MD **md) { check_pointer(mech); check_pointer(md); mdetail_entry *d = mlookup(mdtl, mech->mechanism); if (!d) { LOGV("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } if (!d->get_digester) { LOGE("Mechanism 0x%lx has no get_digester()", mech->mechanism); return CKR_MECHANISM_INVALID; } return d->get_digester(mdtl, mech, md); } CK_RV mech_get_tpm_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata) { check_pointer(mdtl); check_pointer(tctx); check_pointer(opdata); mdetail_entry *d = mlookup(mdtl, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } if (!d->get_tpm_opdata) { return CKR_MECHANISM_INVALID; } return d->get_tpm_opdata(mdtl, tctx, mech, tobj, opdata); } CK_RV mech_get_padding(mdetail *m, CK_MECHANISM_PTR mech, int *padding) { check_pointer(mech); check_pointer(padding); mdetail_entry *d = mlookup(m, mech->mechanism); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } *padding = d->padding; return CKR_OK; } CK_RV mech_get_label(CK_MECHANISM_PTR mech, twist *label) { check_pointer(mech); check_pointer(label); if (mech->mechanism != CKM_RSA_PKCS_OAEP) { *label = NULL; return CKR_OK; } CK_RSA_PKCS_OAEP_PARAMS_PTR params; SAFE_CAST(mech, params); /* empty label ? */ if (!params->ulSourceDataLen) { *label = NULL; return CKR_OK; } /* non empty label */ twist t = twistbin_new(params->pSourceData, params->ulSourceDataLen); if (!t) { LOGE("oom"); return CKR_HOST_MEMORY; } *label = t; return CKR_OK; } CK_RV mech_get_info(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_TYPE mech_type, CK_MECHANISM_INFO_PTR info) { check_pointer(m); check_pointer(tctx); check_pointer(info); memset(info, 0, sizeof(*info)); mdetail_entry *d = mlookup(m, mech_type); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech_type); return CKR_MECHANISM_INVALID; } if (d->flags & mf_is_keygen) { info->flags |= (d->flags & mf_aes) ? CKF_GENERATE : CKF_GENERATE_KEY_PAIR; } if (d->flags & mf_tpm_supported) { info->flags |= CKF_HW; } if (d->flags & mf_sign) { info->flags |= CKF_SIGN; } if (d->flags & mf_verify) { info->flags |= CKF_VERIFY; } if (d->flags & mf_encrypt) { info->flags |= CKF_ENCRYPT; } if (d->flags & mf_decrypt) { info->flags |= CKF_DECRYPT; } /* functions below here return */ if (d->flags & mf_is_digester) { info->flags |= CKF_DIGEST; return CKR_OK; } if (d->flags & mf_rsa) { return get_rsa_mechinfo(tctx, info); } if (d->flags & mf_aes) { return get_aes_mechinfo(tctx, info); } if (d->flags & mf_ecc) { return get_ecc_mechinfo(tctx, info); } if (d->flags & mf_hmac) { /* * peering into TPM internals, the code seems to make the key the length * of the hash alg, however, I could not find this in the spec. */ size_t len = utils_get_halg_size(mech_type); info->ulMinKeySize = info->ulMaxKeySize = len; return CKR_OK; } LOGE("Unknown mechanism, got: 0x%lx", mech_type); return CKR_MECHANISM_INVALID; } CK_RV mech_is_ecc(mdetail *m, CK_MECHANISM_TYPE mech_type, bool *is_ecc) { *is_ecc = false; mdetail_entry *d = mlookup(m, mech_type); if (!d) { LOGE("Mechanism not supported, got: 0x%lx", mech_type); return CKR_MECHANISM_INVALID; } *is_ecc = !!(d->flags & mf_ecc); return CKR_OK; } tpm2-pkcs11-1.9.1/src/lib/mutex.c0000644000175100017510000000676714535673717012074 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "log.h" #include "mutex.h" #include "pkcs11.h" /* * Default handlers for mutex operations */ static CK_RV default_mutex_create(void **mutex); static CK_RV default_mutex_destroy(void *mutex); static CK_RV default_mutex_lock(void *mutex); static CK_RV default_mutex_unlock(void *mutex); /* * Function pointers for the actual registered * mutex operation. */ static CK_CREATEMUTEX _g_create = default_mutex_create; static CK_DESTROYMUTEX _g_destroy = default_mutex_destroy; static CK_LOCKMUTEX _g_lock = default_mutex_lock; static CK_UNLOCKMUTEX _g_unlock = default_mutex_unlock; void mutex_set_handlers(CK_CREATEMUTEX create, CK_DESTROYMUTEX destroy, CK_LOCKMUTEX lock, CK_UNLOCKMUTEX unlock) { /* * We assume the caller checked all of these are set to either * NULL or fn-ptrs and NOT a mix. */ _g_create = create; _g_destroy = destroy; _g_lock = lock; _g_unlock = unlock; } static CK_RV default_mutex_create(void **mutex) { int rc; pthread_mutex_t *p = calloc(1, sizeof(pthread_mutex_t)); if (!p) { LOGE("oom"); return CKR_HOST_MEMORY; } pthread_mutexattr_t *attr = NULL; /* * When NOT NOT DEBUGGING, ie when building in DEBUG mode * (autotools uses NDEBUG for this, hence the double * negative) enable error checking mutexes to prevent * double locks and have assert() cause an abort(). */ #ifndef NDEBUG pthread_mutexattr_t __attr; attr = &__attr; rc = pthread_mutexattr_init(attr); if (rc) { LOGE("Failed to initialize pthread attribute: %s\n", strerror(rc)); free(p); return CKR_GENERAL_ERROR; } rc = pthread_mutexattr_settype(attr, PTHREAD_MUTEX_ERRORCHECK); if (rc) { LOGE("Could not set attribute type: %s", strerror(rc)); free(p); return CKR_GENERAL_ERROR; } #endif rc = pthread_mutex_init(p, attr); if (rc) { LOGE("Could not initialize mutex: %s", strerror(rc)); free(p); return CKR_GENERAL_ERROR; } *mutex = p; return CKR_OK; } static CK_RV default_mutex_destroy(void *mutex) { pthread_mutex_t *p = (pthread_mutex_t *)mutex; if (!p) { return CKR_OK; } int rc = pthread_mutex_destroy(p); if (rc) { LOGE("Could not destroy mutex: %s", strerror(rc)); return CKR_MUTEX_BAD; } free(p); return CKR_OK; } static CK_RV default_mutex_lock(void *mutex) { pthread_mutex_t *p = (pthread_mutex_t *)mutex; int rc = pthread_mutex_lock(p); if (rc) { LOGE("Could not lock mutex: %s", strerror(rc)); return CKR_MUTEX_BAD; } return CKR_OK; } static CK_RV default_mutex_unlock(void *mutex) { pthread_mutex_t *p = (pthread_mutex_t *)mutex; int rc = pthread_mutex_unlock(p); if (rc) { LOGE("Could not unlock mutex: %s", strerror(rc)); return CKR_MUTEX_BAD; } return CKR_OK; } CK_RV mutex_create(void **mutex) { if (!_g_create) { return CKR_OK; } return _g_create(mutex); } CK_RV mutex_destroy(void *mutex) { if (!_g_destroy) { return CKR_OK; } return _g_destroy(mutex); } CK_RV mutex_lock(void *mutex) { if (!_g_lock) { return CKR_OK; } return _g_lock(mutex); } CK_RV mutex_unlock(void *mutex) { if (!_g_unlock) { return CKR_OK; } return _g_unlock(mutex); } tpm2-pkcs11-1.9.1/src/lib/object.c0000644000175100017510000010310614667615111012147 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include "attrs.h" #include "backend.h" #include "checks.h" #include "db.h" #include "emitter.h" #include "log.h" #include "object.h" #include "pkcs11.h" #include "session_ctx.h" #include "ssl_util.h" #include "token.h" #include "utils.h" typedef struct tobject_match_list tobject_match_list; struct tobject_match_list { CK_OBJECT_HANDLE tobj_handle; CK_BBOOL cka_private; tobject_match_list *next; }; typedef struct object_find_data object_find_data; struct object_find_data { tobject_match_list *head; tobject_match_list *cur; }; void tobject_free(tobject *tobj) { if (!tobj) { return; } /* cleanse the ENCRYPTED objauth so it goes away */ if (tobj->objauth) { OPENSSL_cleanse((void *)tobj->objauth, twist_len(tobj->objauth)); twist_free(tobj->objauth); tobj->objauth = NULL; } twist_free(tobj->priv); twist_free(tobj->pub); /* cleanse the PLAINTEXT objauth so it goes away */ if (tobj->unsealed_auth) { OPENSSL_cleanse((void *)tobj->unsealed_auth, twist_len(tobj->unsealed_auth)); twist_free(tobj->unsealed_auth); tobj->unsealed_auth = NULL; } attr_list *a = tobject_get_attrs(tobj); attr_list_free(a); free(tobj); } CK_RV object_mech_is_supported(tobject *tobj, CK_MECHANISM_PTR mech) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_ALLOWED_MECHANISMS); if (!a) { LOGE("Expected object to have: CKA_ALLOWED_MECHANISMS"); return CKR_GENERAL_ERROR; } CK_ULONG count = a->ulValueLen/sizeof(CK_MECHANISM_TYPE); CK_MECHANISM_TYPE_PTR mt = (CK_MECHANISM_TYPE_PTR)a->pValue; CK_ULONG i; for(i=0; i < count; i++) { CK_MECHANISM_TYPE t = mt[i]; if (t == mech->mechanism) { return CKR_OK; } } /* TODO further sanity checking for CKR_MECHANISM_PARAM_INVALID */ return CKR_MECHANISM_INVALID; } CK_RV tobject_get_min_buf_size(tobject *tobj, CK_MECHANISM_PTR mech, size_t *maxsize) { assert(tobj); assert(mech); CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_KEY_TYPE); if (!a) { LOGE("Expected attribute CKA_KEY_TYPE"); return CKR_TEMPLATE_INCOMPLETE; } CK_KEY_TYPE key_type; CK_RV rv = attr_CK_KEY_TYPE(a, &key_type); if (rv != CKR_OK) { return rv; } if (key_type == CKK_RSA) { a = attr_get_attribute_by_type(tobj->attrs, CKA_MODULUS); if (!a) { LOGE("RSA Keys should have a modulus"); return CKR_GENERAL_ERROR; } *maxsize = a->ulValueLen; return CKR_OK; } if (key_type == CKK_EC) { a = attr_get_attribute_by_type(tobj->attrs, CKA_EC_PARAMS); if (!a) { LOGE("EC Keys should have params"); return CKR_GENERAL_ERROR; } int nid = 0; CK_RV rv = ssl_util_params_to_nid(a, &nid); if (rv != CKR_OK) { return rv; } /* * The signature output from a PKCS#11 ECDSA operation is the raw R,S output * which is twice the size of the keysize */ unsigned keysize; switch (nid) { case NID_X9_62_prime192v1: keysize = 24; break; case NID_secp224r1: keysize = 28; break; case NID_X9_62_prime256v1: keysize = 32; break; case NID_secp384r1: keysize = 48; break; case NID_secp521r1: keysize = 66; /* round up */ break; default: LOGE("Unsupported nid to tpm signature size maaping: %d", nid); return CKR_CURVE_NOT_SUPPORTED; } *maxsize = keysize * 2; return CKR_OK; } if (key_type == CKK_SHA_1_HMAC) { *maxsize = 20; return CKR_OK; } if (key_type == CKK_SHA256_HMAC) { *maxsize = 32; return CKR_OK; } if (key_type == CKK_SHA384_HMAC) { *maxsize = 48; return CKR_OK; } /* Best guess on buffer size for CKK_GENERIC_SECRET */ if (key_type == CKK_SHA512_HMAC) { *maxsize = 64; return CKR_OK; } if (key_type == CKK_GENERIC_SECRET) { switch (mech->mechanism) { case CKM_SHA_1_HMAC: *maxsize = 20; return CKR_OK; case CKM_SHA256_HMAC: *maxsize = 32; return CKR_OK; case CKM_SHA384_HMAC: *maxsize = 48; return CKR_OK; case CKM_SHA512_HMAC: *maxsize = 64; return CKR_OK; default: LOGE("Cannot handle CKK_GENERIC_SECRET Mechanism: 0x%lx", mech->mechanism); return CKR_MECHANISM_INVALID; } } LOGE("Unknown signing key type, got: 0x%lx", key_type); return CKR_GENERAL_ERROR; } static bool attr_filter(attr_list *attrs, CK_ATTRIBUTE_PTR templ, CK_ULONG count) { CK_ULONG i; // If ulCount is set to 0 all items match automatically. if (count == 0) { return true; } for (i=0; i < count; i++) { CK_ATTRIBUTE_PTR search = &templ[i]; CK_ATTRIBUTE_PTR compare = NULL; bool is_attr_match = false; CK_ULONG j; for(j=0; j < attr_list_get_count(attrs); j++) { const CK_ATTRIBUTE_PTR ptr = attr_list_get_ptr(attrs); compare = &ptr[j]; if (search->type != compare->type) { continue; } if (search->ulValueLen != compare->ulValueLen) { continue; } bool match = !memcmp(compare->pValue, search->pValue, search->ulValueLen); if (match) { is_attr_match = true; break; } } /* * If we didn't get an attribute match, then the searched for attribute wasn't * found and it's not a match. Ie search attribute set must be subset of compare * attribute set */ if (!is_attr_match) { return false; } } /* * Done with matching loops, we always found a match, thus we have a match * assign it. */ /* all the specified template attributes matched */ return true; } tobject *object_attr_filter(tobject *tobj, CK_ATTRIBUTE_PTR templ, CK_ULONG count) { attr_list *attrs = tobject_get_attrs(tobj); bool res = attr_filter(attrs, templ, count); return res ? tobj : NULL; } void object_find_data_free(object_find_data **fd) { if (!*fd) { return; } tobject_match_list *cur = (*fd)->head; while (cur) { tobject_match_list *tmp = cur; cur = cur->next; free(tmp); } free(*fd); *fd = NULL; return; } static object_find_data *object_find_data_new(void) { return calloc(1, sizeof(object_find_data)); } static CK_RV do_match_set(tobject_match_list *match_cur, tobject *tobj) { match_cur->tobj_handle = tobj->obj_handle; CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_CLASS); if (!a) { LOGE("Objects must have CK_OBJECT_CLASS"); assert(0); return CKR_GENERAL_ERROR; } match_cur->cka_private = attr_list_get_CKA_PRIVATE(tobj->attrs, CK_FALSE); return CKR_OK; } CK_RV object_find_init(session_ctx *ctx, CK_ATTRIBUTE_PTR templ, CK_ULONG count) { // if count is 0 template is not used and all objects are requested so templ can be NULL. if (count > 0) { check_pointer(templ); } CK_RV rv = CKR_GENERAL_ERROR; object_find_data *fd = NULL; bool is_active = session_ctx_opdata_is_active(ctx); if (is_active) { rv = CKR_OPERATION_ACTIVE; goto out; } fd = object_find_data_new(); if (!fd) { rv = CKR_HOST_MEMORY; goto out; } token *tok = session_ctx_get_token(ctx); assert(tok); if (!tok->tobjects.head) { LOGV("Token %i contains no objects.", tok->id); goto empty; } tobject_match_list *match_cur = NULL; list *cur = &tok->tobjects.head->l; while(cur) { // Get the current object, and grab it's id for the object handle tobject *tobj = list_entry(cur, tobject, l); cur = cur->next; tobject *match = object_attr_filter(tobj, templ, count); if (!match) { continue; } /* we have a match, build the list */ if (!fd->head) { /* set the head to point into the list */ fd->head = calloc(1, sizeof(*match_cur)); if (!fd->head) { rv = CKR_HOST_MEMORY; goto out; } match_cur = fd->head; } else { assert(match_cur); match_cur->next = calloc(1, sizeof(*match_cur)); if (!match_cur->next) { rv = CKR_HOST_MEMORY; goto out; } match_cur = match_cur->next; } rv = do_match_set(match_cur, tobj); if (rv != CKR_OK) { goto out; } } fd->cur = fd->head; empty: session_ctx_opdata_set(ctx, operation_find, NULL, fd, (opdata_free_fn)object_find_data_free); rv = CKR_OK; out: if (rv != CKR_OK) { object_find_data_free(&fd); } return rv; } CK_RV object_find(session_ctx *ctx, CK_OBJECT_HANDLE *object, CK_ULONG max_object_count, CK_ULONG_PTR object_count) { check_pointer(object); check_pointer(object_count); CK_RV rv = CKR_OK; object_find_data *opdata = NULL; rv = session_ctx_opdata_get(ctx, operation_find, &opdata); if (rv != CKR_OK) { return rv; } token *tok = session_ctx_get_token(ctx); assert(tok); CK_ULONG count = 0; while(opdata->cur && count < max_object_count) { // Get the current object, and grab it's id for the object handle CK_OBJECT_HANDLE handle = opdata->cur->tobj_handle; // filter out CKA_PRIVATE set to CK_TRUE if not logged in and PIN is needed if (opdata->cur->cka_private && !token_is_user_logged_in(tok) && !tok->config.empty_user_pin) { opdata->cur = opdata->cur->next; continue; } object[count] = handle; // Update our iterator opdata->cur = opdata->cur->next; count++; } *object_count = count; return CKR_OK; } CK_RV object_find_final(session_ctx *ctx) { CK_RV rv = CKR_GENERAL_ERROR; object_find_data *opdata = NULL; rv = session_ctx_opdata_get(ctx, operation_find, &opdata); if (rv != CKR_OK) { return rv; } session_ctx_opdata_clear(ctx); return CKR_OK; } /** * given an attribute list with CKA_TPM2_ENC_BLOB, will unwrap it with the token wrapping * key and store it in CKA_VALUE. * @param tok * The token * @param attrs * The attribute list to modify. * @return * CKR_OK on success. */ static CK_RV unwrap_protected_cka_value(token *tok, attr_list *attrs) { /* Caller wants CKA_VALUE in their template and it's not found, we need to fetch it, do we have * the wrapped value in the DB? */ assert(tok->wrappingkey); CK_ATTRIBUTE_PTR ciphertext_attr = attr_get_attribute_by_type(attrs, CKA_TPM2_ENC_BLOB); if (ciphertext_attr) { twist plaintext = NULL; size_t len = 0; if (ciphertext_attr->ulValueLen) { twist ciphertext = twistbin_new(ciphertext_attr->pValue, ciphertext_attr->ulValueLen); if (!ciphertext) { LOGE("oom"); return CKR_HOST_MEMORY; } CK_RV rv = utils_ctx_unwrap_objauth(tok->wrappingkey, ciphertext, &plaintext); twist_free(ciphertext); if (rv != CKR_OK) { LOGE("Could not unwrap CKA_VALUE"); return rv; } len = twist_len(plaintext); } CK_ATTRIBUTE temp = { .type = CKA_VALUE, .pValue = (void *)plaintext, .ulValueLen = len }; /* * Add the unwrapped value back to CKA_VALUE * - Append if not in the list * - Update if it's in the list */ CK_ATTRIBUTE_PTR found = attr_get_attribute_by_type(attrs, CKA_TPM2_ENC_BLOB); CK_RV rv = found ? attr_list_update_entry(attrs, &temp) : attr_list_append_entry(&attrs, &temp); twist_free(plaintext); if (rv != CKR_OK) { return rv; } } else { // TODO: Fetch from TPM to support more object types? // TODO: set CKA_VALUE to 0? LOGW("Needed CKA_VALUE but didn't find encrypted blob"); } return CKR_OK; } /** * given an attribute list with CKA_VALUE, will wrap it with the token wrapping * key and store it in CKA_TPM2_ENC_BLOB. A zero length CKA_VALUE attribute will * clear the CKA_TPM2_ENC_BLOB attribute. * @param tok * The token * @param attrs * The attribute list to modify * @return * CKR_OK on success. */ static CK_RV wrap_protected_cka_value(token *tok, attr_list *attrs) { assert(tok->wrappingkey); /* this may or maynot exist */ CK_ATTRIBUTE_PTR enc_blob_attr = attr_get_attribute_by_type(attrs, CKA_TPM2_ENC_BLOB); CK_ATTRIBUTE_PTR plaintext_attr = attr_get_attribute_by_type(attrs, CKA_VALUE); if (!plaintext_attr) { LOGE("Expected vendor attribute CKA_VALUE"); return CKR_GENERAL_ERROR; } twist ciphertext = NULL; size_t len = 0; if (plaintext_attr->ulValueLen) { twist plaintext = twistbin_new(plaintext_attr->pValue, plaintext_attr->ulValueLen); if (!plaintext) { LOGE("oom"); return CKR_HOST_MEMORY; } CK_RV rv = utils_ctx_wrap_objauth(tok->wrappingkey, plaintext, &ciphertext); twist_free(plaintext); if (rv != CKR_OK) { LOGE("Could not wrap CKA_VALUE"); return rv; } len = twist_len(ciphertext); } CK_ATTRIBUTE temp = { .type = CKA_TPM2_ENC_BLOB, .pValue = (void *)ciphertext, .ulValueLen = len }; /* add the wrapped value back to CKA_TPM2_ENC_BLOB */ CK_RV rv = enc_blob_attr ? attr_list_update_entry(attrs, &temp) : attr_list_append_entry(&attrs, &temp); twist_free(ciphertext); if (rv != CKR_OK) { return rv; } return CKR_OK; } CK_RV object_get_attributes(session_ctx *ctx, CK_OBJECT_HANDLE object, CK_ATTRIBUTE *templ, CK_ULONG count) { token *tok = session_ctx_get_token(ctx); assert(tok); tobject *tobj = NULL; CK_RV rv = token_find_tobject(tok, object, &tobj); if (rv != CKR_OK) { return rv; } rv = tobject_user_increment(tobj); if (rv != CKR_OK) { return rv; } /* * If the object is SENSITIVE AND EXTRACTABLE we can reveal CKA_VALUE. We set the * defaults as extractable and not sensitive because only non-tpm objects have * the CKA_VALUE field (certs and public keys). However, we are adding secret * keys, that are created through C_CreateObject(). The user *must* be logged * in to do this or tok->wrappingkey is NULL. */ CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(tobj->attrs, CK_FALSE); bool is_user_logged_in = token_is_user_logged_in (tok); /* * For each item requested in the template, find if the request has a match * and copy the size and possibly data (if allocated). */ CK_ULONG i; for (i=0; i < count; i++) { CK_ATTRIBUTE_PTR t = &templ[i]; CK_ATTRIBUTE_PTR found = attr_get_attribute_by_type(tobj->attrs, t->type); if (cka_private && t->type == CKA_VALUE && is_user_logged_in && (!found || !found->ulValueLen)) { rv = unwrap_protected_cka_value(tok, tobj->attrs); /* continue on processing */ } if (found) { if (!t->pValue) { /* only populate size if the buffer is null */ t->ulValueLen = found->ulValueLen; continue; } /* The found attribute should fit inside the one to copy to */ if (found->ulValueLen > t->ulValueLen) { t->ulValueLen = CK_UNAVAILABLE_INFORMATION; rv = CKR_BUFFER_TOO_SMALL; continue; } t->ulValueLen = found->ulValueLen; if (found->ulValueLen && found->pValue) { memcpy(t->pValue, found->pValue, found->ulValueLen); } } else { /* If it's not found it defaults to empty. */ t->pValue = NULL; t->ulValueLen = CK_UNAVAILABLE_INFORMATION; LOGV("Invalid Attribute for tid %u: type(%lu) ulValueLen(%lu), pData(%s)", tobj->id, t->type, t->ulValueLen, t->pValue ? "non-null" : "null"); rv = CKR_ATTRIBUTE_TYPE_INVALID; } } tobject_user_decrement(tobj); // if no error occurred rv is CKR_OK from previous call return rv; } CK_RV object_set_attributes(session_ctx *ctx, CK_OBJECT_HANDLE object, CK_ATTRIBUTE *templ, CK_ULONG count) { token *tok = session_ctx_get_token(ctx); assert(tok); tobject *tobj = NULL; CK_RV rv = token_find_tobject(tok, object, &tobj); if (rv != CKR_OK) { return rv; } rv = tobject_user_increment(tobj); if (rv != CKR_OK) { return rv; } CK_OBJECT_CLASS clazz = attr_list_get_CKA_CLASS(tobj->attrs, CK_OBJECT_CLASS_BAD); if (clazz == CK_OBJECT_CLASS_BAD) { LOGE("Expect ALL objects to contain attribute CKA_CLASS"); rv = CKR_GENERAL_ERROR; goto out; } CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(tobj->attrs, CK_FALSE); /* create a temp copy to work on so we have transactional atomicity */ attr_list *tmp = NULL; rv = attr_list_dup(tobj->attrs, &tmp); if (rv != CKR_OK) { goto out; } /* * For each item: * 1. If it exists, update the contents * 2. If it is new, add it. * * XXX: Enforce whether or not attributes * are settable, etc. * We don't do this, because the TPM isn't really * enforcing anything but it might be useful just * to prevent oopsies. */ CK_ULONG i; for (i=0; i < count; i++) { CK_ATTRIBUTE_PTR t = &templ[i]; /* CKA_VALUE fields are encrypted for CKO_DATA objects */ if (t->type == CKA_VALUE && clazz == CKO_DATA && cka_private) { rv = wrap_protected_cka_value(tok, tmp); if (rv != CKR_OK) { goto error; } } CK_ATTRIBUTE_PTR found = attr_get_attribute_by_type(tmp, t->type); rv = found ? attr_list_update_entry(tmp, t) : attr_list_append_entry(&tmp, t); if (rv != CKR_OK) { goto error; } } /* We don't want to emit CKA_VALUE for CKA_PRIVATE objects to the backend store */ bool is_backed_up = false; CK_ATTRIBUTE backup = { 0 }; CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tmp, CKA_VALUE); if (cka_private && a && a->ulValueLen) { backup.pValue = a->pValue; backup.ulValueLen = a->ulValueLen; a->pValue = NULL; a->ulValueLen = 0; is_backed_up = true; } /* in memory is updated, so update the persistent store */ rv = backend_update_tobject_attrs(tok, tobj, tmp); if (rv != CKR_OK) { goto error; } if (is_backed_up) { a->pValue = backup.pValue; a->ulValueLen = backup.ulValueLen; } /* * everything completed successfully, swap the * attribute pointers. */ attr_list_free(tobj->attrs); tobj->attrs = tmp; rv = CKR_OK; out: tobject_user_decrement(tobj); return rv; error: attr_list_free(tmp); goto out; } DEBUG_VISIBILITY tobject *__real_tobject_new(void) { tobject *tobj = calloc(1, sizeof(tobject)); if (!tobj) { LOGE("oom"); return NULL; } return tobj; } WEAK tobject *tobject_new(void) { return __real_tobject_new(); } CK_RV tobject_set_blob_data(tobject *tobj, twist pub, twist priv) { assert(pub); assert(tobj); tobj->priv = twist_dup(priv); if (priv && !tobj->priv) { LOGE("oom"); return CKR_HOST_MEMORY; } tobj->pub = twist_dup(pub); if (!tobj->pub) { twist_free(tobj->priv); LOGE("oom"); return CKR_HOST_MEMORY; } if (priv) { bool r = attr_list_add_buf(tobj->attrs, CKA_TPM2_PRIV_BLOB, (CK_BYTE_PTR)priv, twist_len(priv)); if (!r) { return CKR_GENERAL_ERROR; } } bool r = attr_list_add_buf(tobj->attrs, CKA_TPM2_PUB_BLOB, (CK_BYTE_PTR)pub, pub ? twist_len(pub) : 0); return r ? CKR_OK : CKR_GENERAL_ERROR; } CK_RV tobject_set_auth(tobject *tobj, twist authbin, twist wrappedauthhex) { assert(tobj); assert(authbin); assert(wrappedauthhex); tobj->unsealed_auth = twist_dup(authbin); if (!tobj->unsealed_auth) { LOGE("oom"); return CKR_HOST_MEMORY; } tobj->objauth = twist_dup(wrappedauthhex); if (!tobj->objauth) { LOGE("oom"); twist_free(tobj->unsealed_auth); return CKR_HOST_MEMORY; } bool r = attr_list_add_buf(tobj->attrs, CKA_TPM2_OBJAUTH_ENC, (CK_BYTE_PTR)wrappedauthhex, twist_len(wrappedauthhex)); return r ? CKR_OK : CKR_GENERAL_ERROR; } void tobject_set_handle(tobject *tobj, uint32_t handle) { assert(tobj); tobj->tpm_handle = handle; } void tobject_set_id(tobject *tobj, unsigned id) { assert(tobj); tobj->id = id; } attr_list *tobject_get_attrs(tobject *tobj) { return tobj->attrs; } CK_RV _tobject_user_increment(tobject *tobj, const char *filename, int lineno) { if (tobj->active == UINT_MAX) { LOGE("tobject active at max count, cannot issue. id: %u", tobj->id); return CKR_GENERAL_ERROR; } tobj->active++; _LOGV(filename, lineno, "Incremented tobject id: %u, value: %u", tobj->id, tobj->active); return CKR_OK; } CK_RV _tobject_user_decrement(tobject *tobj, const char *filename, int lineno) { if (!tobj->active) { LOGE("Returning a non-active tobject id: %u", tobj->id); return CKR_GENERAL_ERROR; } tobj->active--; _LOGV(filename, lineno, "Decremented tobject id: %u, value: %u", tobj->id, tobj->active); return CKR_OK; } static bool tobject_is_busy(tobject *tobj) { assert(tobj); return tobj->active > 0; } CK_RV object_destroy(session_ctx *ctx, CK_OBJECT_HANDLE object) { token *tok = session_ctx_get_token(ctx); assert(tok); tobject *tobj = NULL; CK_RV rv = token_find_tobject(tok, object, &tobj); if (rv != CKR_OK) { return rv; } bool is_busy = tobject_is_busy(tobj); if (is_busy) { return CKR_FUNCTION_FAILED; } rv = backend_rm_tobject(tok, tobj); if (rv != CKR_OK) { return rv; } token_rm_tobject(tok, tobj); tobject_free(tobj); rv = CKR_OK; return rv; } static CK_RV handle_rsa_public(CK_ATTRIBUTE_PTR templ, CK_ULONG count, attr_list **new_attrs) { CK_RV rv = CKR_GENERAL_ERROR; /* RSA Public keys should have a modulus and exponent, verify */ CK_ATTRIBUTE_PTR a_modulus = attr_get_attribute_by_type_raw(templ, count, CKA_MODULUS); if (!a_modulus) { return CKR_TEMPLATE_INCOMPLETE; } CK_ATTRIBUTE_PTR a_exponent = attr_get_attribute_by_type_raw(templ, count, CKA_PUBLIC_EXPONENT); if (!a_exponent) { return CKR_TEMPLATE_INCOMPLETE; } /* * Create a new typed attr list */ attr_list *tmp_attrs = NULL; bool res = attr_typify(templ, count, &tmp_attrs); if (!res) { return CKR_GENERAL_ERROR; } assert(tmp_attrs); /* Add attribute CKA_LOCAL if missing */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tmp_attrs, CKA_LOCAL); if (!a) { bool result = attr_list_add_bool(tmp_attrs, CKA_LOCAL, CK_FALSE); if (!result) { rv = CKR_HOST_MEMORY; goto out; } } /* add CKA_ENCRYPT if missing */ a = attr_get_attribute_by_type(tmp_attrs, CKA_ENCRYPT); if (!a) { bool result = attr_list_add_bool(tmp_attrs, CKA_ENCRYPT, CK_TRUE); if (!result) { rv = CKR_HOST_MEMORY; goto out; } } /* add CKA_VERIFY if missing */ a = attr_get_attribute_by_type(tmp_attrs, CKA_VERIFY); if (!a) { bool result = attr_list_add_bool(tmp_attrs, CKA_VERIFY, CK_TRUE); if (!result) { rv = CKR_HOST_MEMORY; goto out; } } /* add CKA_KEY_GEN_MECHANISM as CK_UNAVAILABLE_INFORMATION */ a = attr_get_attribute_by_type(tmp_attrs, CKA_KEY_GEN_MECHANISM); if (!a) { bool result = attr_list_add_int(tmp_attrs, CKA_KEY_GEN_MECHANISM, CK_UNAVAILABLE_INFORMATION); if (!result) { rv = CKR_HOST_MEMORY; goto out; } } else { CK_ULONG genmech = 0; rv = attr_CK_ULONG(a, &genmech); if (rv != CKR_OK) { LOGE("Error converting attribute CKA_KEY_GEN_MECHANISM"); goto out; } if (genmech != CK_UNAVAILABLE_INFORMATION) { LOGE("CKA_KEY_GEN_MECHANISM cannot be anything but " "CKA_KEY_GEN_MECHANISM, got: %lu", genmech); rv = CKR_ATTRIBUTE_VALUE_INVALID; goto out; } } /* populate CKA_ALLOWED_MECHANISMS */ rv = rsa_gen_mechs(tmp_attrs, NULL); if (rv != CKR_OK) { LOGE("Could not add RSA public mechanisms"); goto out; } /* populate missing RSA public key attributes */ rv = attr_common_add_RSA_publickey(&tmp_attrs); if (rv != CKR_OK) { LOGE("Could not add RSA public missing attributes"); goto out; } /* transfer ownership to caller */ *new_attrs = tmp_attrs; tmp_attrs = NULL; out: attr_list_free(tmp_attrs); return rv; } static CK_RV handle_data_object(token *tok, CK_ATTRIBUTE_PTR templ, CK_ULONG count, attr_list **new_attrs) { CK_RV rv = CKR_GENERAL_ERROR; /* * Create a new typed attr list */ attr_list *tmp_attrs = NULL; bool res = attr_typify(templ, count, &tmp_attrs); if (!res) { return CKR_GENERAL_ERROR; } assert(tmp_attrs); CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(tmp_attrs, CK_TRUE); if (!cka_private) { LOGE("CKA_PRIVATE cannot be CK_FALSE"); rv = CKR_ATTRIBUTE_VALUE_INVALID; goto out; } rv = wrap_protected_cka_value(tok, tmp_attrs); if (rv != CKR_OK) { goto out; } /* Set any defaults and do error checking */ rv = attr_common_add_data(&tmp_attrs); if (rv != CKR_OK) { goto out; } /* transfer ownership to caller */ *new_attrs = tmp_attrs; tmp_attrs = NULL; out: attr_list_free(tmp_attrs); return rv; } static CK_RV handle_cert_object(CK_ATTRIBUTE_PTR templ, CK_ULONG count, attr_list **new_attrs) { CK_RV rv = CKR_GENERAL_ERROR; /* * Create a new typed attr list */ attr_list *tmp_attrs = NULL; bool res = attr_typify(templ, count, &tmp_attrs); if (!res) { return CKR_GENERAL_ERROR; } assert(tmp_attrs); CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(tmp_attrs, CK_FALSE); if (cka_private) { LOGE("CKA_PRIVATE cannot be CK_TRUE"); rv = CKR_ATTRIBUTE_VALUE_INVALID; goto out; } /* Set any defaults and do error checking */ rv = attr_common_add_storage(&tmp_attrs); if (rv != CKR_OK) { goto out; } /* transfer ownership to caller */ *new_attrs = tmp_attrs; tmp_attrs = NULL; out: attr_list_free(tmp_attrs); return rv; } static CK_RV handle_secret_object(CK_ATTRIBUTE_PTR templ, CK_ULONG count, attr_list **new_attrs) { CK_RV rv = CKR_OK; /* * Create a new typed attr list */ attr_list *tmp_attrs = NULL; bool res = attr_typify(templ, count, &tmp_attrs); if (!res) { return CKR_GENERAL_ERROR; } assert(tmp_attrs); /* Set any defaults and do error checking */ rv = attr_common_add_storage(&tmp_attrs); if (rv != CKR_OK) { return rv; } /* transfer ownership to caller */ *new_attrs = tmp_attrs; tmp_attrs = NULL; return rv; } CK_RV object_create(session_ctx *ctx, CK_ATTRIBUTE *templ, CK_ULONG count, CK_OBJECT_HANDLE *object) { assert(ctx); check_pointer(templ); check_pointer(object); CK_RV rv = CKR_GENERAL_ERROR; CK_STATE state = session_ctx_state_get(ctx); LOGV("state: %lu", state); /* * Currently we only support RW user session state objects. */ switch(state) { case CKS_RW_USER_FUNCTIONS: break; case CKS_RW_PUBLIC_SESSION: case CKS_RW_SO_FUNCTIONS: return CKR_USER_NOT_LOGGED_IN; default: return CKR_SESSION_READ_ONLY; } /* * If CKA_LOCAL is specified, it can never be CK_TRUE * TODO: At somepoint these attr_get_attribute_by_type_raw() calls * could be done by general extractors and default error values ala * attr_list_get_CKA_PRIVATE() type calls for raw attr lists. */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type_raw(templ, count, CKA_LOCAL); if (a) { CK_BBOOL bbool = CK_FALSE; rv = attr_CK_BBOOL(a, &bbool); if (rv != CKR_OK) { LOGE("Error converting attribute CKA_LOCAL"); return rv; } if (bbool == CK_TRUE) { LOGE("CKA_LOCAL cannot be true"); return CKR_ATTRIBUTE_VALUE_INVALID; } } /* * We only support: * - CKK_RSA - CKO_PUBLIC_KEY * - CKO_DATA * so verify it. */ a = attr_get_attribute_by_type_raw(templ, count, CKA_CLASS); if (!a) { LOGE("Expected attribute CKA_CLASS"); return CKR_TEMPLATE_INCOMPLETE; } CK_OBJECT_CLASS clazz; rv = attr_CK_OBJECT_CLASS(a, &clazz); if (rv != CKR_OK) { LOGE("Error converting attribute CKA_CLASS"); return CKR_TEMPLATE_INCOMPLETE; } /* Not all objects have a key type, only KEY Objects do */ CK_KEY_TYPE key_type = CKA_KEY_TYPE_BAD; a = attr_get_attribute_by_type_raw(templ, count, CKA_KEY_TYPE); if (a) { rv = attr_CK_KEY_TYPE(a, &key_type); if (rv != CKR_OK) { LOGE("Error converting attribute CKA_KEY_TYPE"); return rv; } } token *tok = session_ctx_get_token(ctx); assert(tok); attr_list *new_attrs = NULL; if (key_type == CKK_RSA && clazz == CKO_PUBLIC_KEY) { rv = handle_rsa_public(templ, count, &new_attrs); } else if (clazz == CKO_DATA) { rv = handle_data_object(tok, templ, count, &new_attrs); } else if (clazz == CKO_CERTIFICATE) { rv = handle_cert_object(templ, count, &new_attrs); } else if (clazz == CKO_SECRET_KEY) { rv = handle_secret_object(templ, count, &new_attrs); } else { LOGE("Can only create RSA Public key objects or" " data objects, CKA_CLASS(%lu), CKA_KEY_TYPE(%lu)", clazz, key_type); return CKR_ATTRIBUTE_VALUE_INVALID; } if (rv != CKR_OK) { LOGE("Error creating object, " "CKA_CLASS(%lu), CKA_KEY_TYPE(%lu) rv: %lu", clazz, key_type, rv); return rv; } /* ok create the new tobject */ tobject *new_tobj = tobject_new(); if (!new_tobj) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto out; } new_tobj->attrs = new_attrs; new_attrs = NULL; bool is_backed_up = false; CK_ATTRIBUTE backup = { 0 }; /* if it's a private object we can't expose the CKA_VALUE attribute */ CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(new_tobj->attrs, CK_FALSE); a = attr_get_attribute_by_type(new_tobj->attrs, CKA_VALUE); if (cka_private && a && a->ulValueLen) { backup.ulValueLen = a->ulValueLen; backup.pValue = a->pValue; a->ulValueLen = 0; a->pValue = NULL; is_backed_up = true; } /* add the object to the db */ rv = backend_add_object(tok, new_tobj); if (rv != CKR_OK) { goto out; } if (is_backed_up) { a->ulValueLen = backup.ulValueLen; a->pValue = backup.pValue; } /* add the object to the token */ rv = token_add_tobject(tok, new_tobj); if (rv != CKR_OK) { return rv; } /* assign temp tobject to callee provided pointer */ *object = new_tobj->obj_handle; new_tobj = NULL; rv = CKR_OK; out: attr_list_free(new_attrs); tobject_free(new_tobj); return rv; } CK_RV object_init_from_attrs(tobject *tobj) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_TPM2_OBJAUTH_ENC); if (a && a->pValue && a->ulValueLen) { tobj->objauth = twistbin_new(a->pValue, a->ulValueLen); if (!tobj->objauth) { LOGE("oom"); goto error; } } a = attr_get_attribute_by_type(tobj->attrs, CKA_TPM2_PUB_BLOB); if (a && a->pValue && a->ulValueLen) { tobj->pub = twistbin_new(a->pValue, a->ulValueLen); if (!tobj->pub) { LOGE("oom"); goto error; } } a = attr_get_attribute_by_type(tobj->attrs, CKA_TPM2_PRIV_BLOB); if (a && a->pValue && a->ulValueLen) { if (!tobj->pub) { LOGE("objects with CKA_TPM2_PUB_BLOB should have CKA_TPM2_PRIV_BLOB"); goto error; } tobj->priv = twistbin_new(a->pValue, a->ulValueLen); if (!tobj->priv) { LOGE("oom"); goto error; } } return CKR_OK; error: return CKR_GENERAL_ERROR; } tpm2-pkcs11-1.9.1/src/lib/parser.c0000644000175100017510000003666014535673717012221 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include "parser.h" #include "pkcs11.h" #include "token.h" #include "twist.h" #include "typed_memory.h" #include "utils.h" #define MAX_DEPTH 2 typedef struct handler_state handler_state; struct handler_state { bool is_value; size_t cnt; CK_ATTRIBUTE_TYPE key; size_t seqbytes; void *seqbuf; }; typedef bool (*handler)(yaml_event_t *e, handler_state *state, attr_list *l); typedef struct handler_stack handler_stack; struct handler_stack { handler h[MAX_DEPTH]; handler cur; size_t depth; handler_state state[MAX_DEPTH]; handler_state *s; }; bool push_handler(handler_stack *state, handler h) { if (state->depth >= MAX_DEPTH) { return false; } state->cur = h; state->h[state->depth] = h; state->s = &state->state[state->depth]; state->depth++; return true; } #ifdef __clang_analyzer__ static inline void analyzer_free(void *p ) { assert(0); free(p); } #else #define analyzer_free(x) UNUSED(x) #endif bool pop_handler(handler_stack *state) { if (state->depth == 0) { return false; } state->depth--; memset(&state->state[state->depth], 0, sizeof(state->state[state->depth])); /* * scan-build reports this as a leak of h, which is * invalid... you can't free fn pointers */ analyzer_free(state->h[state->depth]); if (state->depth == 0) { state->cur = NULL; state->s = NULL; state->h[state->depth] = NULL; } else { state->cur = state->h[state->depth - 1]; state->s = &state->state[state->depth - 1]; state->cur = state->h[state->depth - 1]; /* * state transitions only occur on sequences and thus the value portion * is complete */ state->s->is_value = false; } return true; } static bool is_yaml_int(unsigned char *tag) { if (!tag) { LOGE("Tag cannot be NULL"); return false; } return !strcmp((const char *)tag, YAML_INT_TAG); } static bool is_yaml_bool(unsigned char *tag) { if (!tag) { LOGE("Tag cannot be NULL"); return false; } return !strcmp((const char *)tag, YAML_BOOL_TAG); } static bool is_yaml_str(unsigned char *tag) { if (!tag) { LOGE("Tag cannot be NULL"); return false; } return !strcmp((const char *)tag, YAML_STR_TAG); } typedef bool (*pfn_yaml_convert)(attr_list *l, CK_ATTRIBUTE_TYPE type, const yaml_char_t *value); static bool yaml_convert_ulong(attr_list *l, CK_ATTRIBUTE_TYPE type, const yaml_char_t *value) { size_t val; int rc = str_to_ul((const char *)value, &val); if (rc) { return false; } return attr_list_add_int(l, type, val); } static bool yaml_convert_bbool(attr_list *l, CK_ATTRIBUTE_TYPE type, const yaml_char_t *value) { CK_BBOOL val = !strcmp((const char *)value, "true") ? CK_TRUE : CK_FALSE; return attr_list_add_bool(l, type, val); } static bool yaml_convert_hex_str(attr_list *l, CK_ATTRIBUTE_TYPE type, const yaml_char_t *value) { size_t len = 0; twist t = NULL; if (!value || strlen((const char *)value)) { t = twistbin_unhexlify((const char *)value); if (!t) { LOGE("Could not unhexlify, got: \"%s\"", value); return false; } len = twist_len(t); } bool r = attr_list_add_buf(l, type, (CK_BYTE_PTR)t, len); twist_free(t); return r; } bool on_map_scalar_event(yaml_event_t *e, handler_state *state, attr_list *l) { if (!e->data.scalar.tag) { LOGE("e->data.scalar.tag is NULL"); return false; } if (!state->is_value) { if (!is_yaml_int(e->data.scalar.tag)) { LOGE("key should always be int, got: \"%s\"", e->data.scalar.tag); return false; } size_t val; int rc = str_to_ul((const char *)e->data.scalar.value, &val); if (rc) { return false; } state->key = val; } else { pfn_yaml_convert pfn = NULL; if (is_yaml_int(e->data.scalar.tag)) { pfn = yaml_convert_ulong; } else if (is_yaml_bool(e->data.scalar.tag)) { pfn = yaml_convert_bbool; } else if (is_yaml_str(e->data.scalar.tag)) { pfn = yaml_convert_hex_str; } else { LOGE("unknown data type: %s", e->data.scalar.tag); return false; } bool res = pfn(l, state->key, e->data.scalar.value); if (!res) { return false; } } state->is_value = !state->is_value; return true; } bool on_seq_scalar_event(yaml_event_t *e, handler_state *state, attr_list *l) { UNUSED(l); if (!e->data.scalar.tag) { LOGE("Scalar tag is null"); return false; } if (strcmp((const char *)e->data.scalar.tag, YAML_INT_TAG)) { LOGE("Attribute type key should always be int, got: \"%s\"", e->data.scalar.tag); return false; } state->cnt++; if (state->cnt == 0) { LOGE("add overflow"); return false; } size_t bytes = 0; safe_mul(bytes, state->cnt, sizeof(CK_ULONG)); void *tmp = realloc(state->seqbuf, bytes); if (!tmp) { LOGE("oom"); return false; } state->seqbytes = bytes; CK_ULONG_PTR p = state->seqbuf = tmp; size_t val; int rc = str_to_ul((const char *)e->data.scalar.value, &val); if (rc) { return false; } p[state->cnt - 1] = val; return true; } bool handle_attr_event(yaml_event_t *event, attr_list *l, handler_stack *state) { bool res; switch(event->type) { case YAML_NO_EVENT: case YAML_STREAM_START_EVENT: case YAML_STREAM_END_EVENT: case YAML_DOCUMENT_START_EVENT: case YAML_DOCUMENT_END_EVENT: return true; case YAML_SEQUENCE_START_EVENT: return push_handler(state, on_seq_scalar_event); case YAML_SEQUENCE_END_EVENT: /* XXX we know that sequences never come first so the previous state (map) has the key */ assert(state->s); res = attr_list_add_buf(l, state->state[0].key, state->s->seqbuf, state->s->seqbytes); free(state->s->seqbuf); state->s->seqbuf = NULL; if (!res) { LOGE("Cannot add sequence to attr list: 0x%lx", state->s->key); return res; } return pop_handler(state); case YAML_MAPPING_START_EVENT: return push_handler(state, on_map_scalar_event); case YAML_MAPPING_END_EVENT: return pop_handler(state); /* Data */ case YAML_SCALAR_EVENT: if (!state->cur) { return false; } return state->cur(event, state->s, l); default: LOGE("Unhandled YAML event type: %u\n", event->type); return false; } return false; } #define ALLOC_SIZE 16 bool parse_attributes(yaml_parser_t *parser, attr_list **attrs) { bool res = false; attr_list *a = attr_list_new(); if (!a) { LOGE("oom"); return false; } yaml_event_t event; handler_stack state = { 0 }; /* while events */ do { int rc = yaml_parser_parse(parser, &event); if (!rc) { LOGE("Parser error %d\n", parser->error); goto error; } /* handle events */ bool tmp_res = handle_attr_event(&event, a, &state); if(event.type != YAML_STREAM_END_EVENT) { yaml_event_delete(&event); } if (!tmp_res) { goto error; } } while(event.type != YAML_STREAM_END_EVENT); *attrs = a; res = true; error: /* make sure sequf is always freed */ free(state.state[0].seqbuf); free(state.state[1].seqbuf); if (!res) { attr_list_free(a); } yaml_event_delete(&event); return res; } bool parse_attributes_from_string(const unsigned char *yaml, size_t size, attr_list **attrs) { yaml_parser_t parser; int rc = yaml_parser_initialize(&parser); if(!rc) { return false; } yaml_parser_set_input_string(&parser, yaml, size); bool ret = parse_attributes(&parser, attrs); yaml_parser_delete(&parser); if (!ret) { attr_list_free(*attrs); *attrs = NULL; } return ret; } typedef struct config_state config_state; struct config_state { bool map_start; char key[64]; }; bool handle_token_config_event(yaml_event_t *e, config_state *state, token_config *config) { switch(e->type) { case YAML_NO_EVENT: case YAML_STREAM_START_EVENT: case YAML_STREAM_END_EVENT: case YAML_DOCUMENT_START_EVENT: case YAML_DOCUMENT_END_EVENT: return true; case YAML_MAPPING_START_EVENT: if (state->map_start) { return false; } state->map_start = true; return true; case YAML_MAPPING_END_EVENT: if (!state->map_start) { return false; } state->map_start = false; return true; /* Data */ case YAML_SCALAR_EVENT: if (!state->map_start) { return false; } /* key */ if (!strlen(state->key)) { if (!is_yaml_str(e->data.scalar.tag)) { LOGE("Cannot handle non-str config keys, got: \"%s\"\n", e->data.scalar.value); return false; } if (e->data.scalar.length > sizeof(state->key) - 1) { LOGE("Key is too big for storage class, got key \"%s\"," " expected less than %zu", e->data.scalar.value, sizeof(state->key) - 1); return false; } snprintf(state->key, sizeof(state->key), "%s", e->data.scalar.value); } else { if (!strcmp(state->key, "tcti")) { config->tcti = strdup((const char *)e->data.scalar.value); if (!config->tcti) { LOGE("oom"); return false; } } else if(!strcmp(state->key, "token-init")) { config->is_initialized = !strcmp((const char *)e->data.scalar.value, "true") ? true : false; } else if(!strcmp(state->key, "pss-sigs-good")) { config->pss_sigs_good = !strcmp((const char *)e->data.scalar.value, "true") ? pss_config_state_good : pss_config_state_bad; } else if(!strcmp(state->key, "empty-user-pin")) { config->empty_user_pin = !strcmp((const char *)e->data.scalar.value, "true") ? true : false; } else { LOGE("Unknown key, got: \"%s\"\n", state->key); return false; } state->key[0] = '\0'; } return true; default: LOGE("Unhandled YAML event type: %u\n", e->type); } return false; } bool parse_token_config_from_string(const unsigned char *yaml, size_t size, token_config *config) { bool ret = false; yaml_parser_t parser; int rc = yaml_parser_initialize(&parser); if(!rc) { return false; } yaml_parser_set_input_string(&parser, yaml, size); config_state state = { 0 }; yaml_event_t event; do { int rc = yaml_parser_parse(&parser, &event); if (!rc) { LOGE("Parser error %d", parser.error); goto error; } /* handle events */ rc = handle_token_config_event(&event, &state, config); if (!rc) { LOGE("Parser error %d", parser.error); goto error; } if(event.type != YAML_STREAM_END_EVENT) { yaml_event_delete(&event); } } while(event.type != YAML_STREAM_END_EVENT); ret = true; error: yaml_event_delete(&event); yaml_parser_delete(&parser); if (!ret) { token_config_free(config); } return ret; } static bool handle_pobject_config_event(yaml_event_t *e, config_state *state, pobject_config *config) { switch(e->type) { case YAML_NO_EVENT: case YAML_STREAM_START_EVENT: case YAML_STREAM_END_EVENT: case YAML_DOCUMENT_START_EVENT: case YAML_DOCUMENT_END_EVENT: return true; case YAML_MAPPING_START_EVENT: if (state->map_start) { return false; } state->map_start = true; return true; case YAML_MAPPING_END_EVENT: if (!state->map_start) { return false; } state->map_start = false; return true; /* Data */ case YAML_SCALAR_EVENT: if (!state->map_start) { return false; } /* key */ if (!strlen(state->key)) { if (!is_yaml_str(e->data.scalar.tag)) { LOGE("Cannot handle non-str config keys, got: \"%s\"\n", e->data.scalar.value); return false; } if (e->data.scalar.length > sizeof(state->key) - 1) { LOGE("Key is too big for storage class, got key \"%s\"," " expected less than %zu", e->data.scalar.value, sizeof(state->key) - 1); return false; } snprintf(state->key, sizeof(state->key), "%s", e->data.scalar.value); } else { if (!strcmp(state->key, "transient")) { config->is_transient = !strcmp((const char *)e->data.scalar.value, "true") ? true : false; } else if(!strcmp(state->key, "esys-tr")) { config->blob = twistbin_unhexlify((const char *)e->data.scalar.value); if (!config->blob) { LOGE("oom"); return false; } } else if(!strcmp(state->key, "template-name")) { config->template_name = strdup((const char *)e->data.scalar.value); if (!config->template_name) { LOGE("oom"); return false; } } else { LOGE("Unknown key, got: \"%s\"\n", state->key); return false; } state->key[0] = '\0'; } return true; default: LOGE("Unhandled YAML event type: %u\n", e->type); } return false; } bool parse_pobject_config_from_string(const unsigned char *yaml, size_t size, pobject_config *config) { bool ret = false; yaml_parser_t parser; int rc = yaml_parser_initialize(&parser); if(!rc) { return false; } yaml_parser_set_input_string(&parser, yaml, size); config_state state = { 0 }; yaml_event_t event; do { int rc = yaml_parser_parse(&parser, &event); if (!rc) { LOGE("Parser error %d", parser.error); goto error; } /* handle events */ rc = handle_pobject_config_event(&event, &state, config); if (!rc) { LOGE("Parser error %d", parser.error); goto error; } if(event.type != YAML_STREAM_END_EVENT) { yaml_event_delete(&event); } } while(event.type != YAML_STREAM_END_EVENT); ret = true; error: if (!ret) { pobject_config_free(config); } yaml_event_delete(&event); yaml_parser_delete(&parser); return ret; } tpm2-pkcs11-1.9.1/src/lib/random.c0000644000175100017510000000135714535673717012200 /* SPDX-License-Identifier: BSD-2-Clause */ #include "checks.h" #include "pkcs11.h" #include "random.h" #include "session_ctx.h" #include "token.h" #include "tpm.h" CK_RV random_get(session_ctx *ctx, CK_BYTE_PTR random_data, CK_ULONG random_len) { check_pointer(random_data); token *tok = session_ctx_get_token(ctx); assert(tok); tpm_ctx *tpm = tok->tctx; bool res = tpm_getrandom(tpm, random_data, random_len); return res ? CKR_OK: CKR_GENERAL_ERROR; } CK_RV seed_random(session_ctx *ctx, CK_BYTE_PTR seed, CK_ULONG seed_len) { check_pointer(seed); token *tok = session_ctx_get_token(ctx); assert(tok); tpm_ctx *tpm = tok->tctx; CK_RV rv = tpm_stirrandom(tpm, seed, seed_len); return rv; } tpm2-pkcs11-1.9.1/src/lib/session.c0000644000175100017510000000570214535673717012401 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include "checks.h" #include "general.h" #include "log.h" #include "mutex.h" #include "pkcs11.h" #include "session.h" #include "session_table.h" #include "token.h" #include "tpm.h" #include "utils.h" static CK_RV check_max_sessions(session_table *s_table) { CK_ULONG all; session_table_get_cnt(s_table, &all, NULL, NULL); return (all > MAX_NUM_OF_SESSIONS) ? CKR_SESSION_COUNT : CKR_OK; } #define TOKID_SESSION_SHIFT ((sizeof(CK_SESSION_HANDLE) * 8) - 8) static inline void add_tokid_to_session_handle(unsigned tokid, CK_SESSION_HANDLE *handle) { /* * Plop the token id in the high byte */ *handle |= ((typeof(*handle))tokid << TOKID_SESSION_SHIFT); } static inline unsigned get_tokid_from_session_handle_and_cleanse( CK_SESSION_HANDLE *handle) { /* * Get the token id from the high byte */ unsigned tokid = (*handle >> TOKID_SESSION_SHIFT); /* * drop the top byte, this is a simple way to deal * with CK_SESSION_HANDLE being architecture dependent * in size. */ CK_SESSION_HANDLE tmp = *handle; tmp = tmp << 8; tmp = tmp >> 8; *handle = tmp; return tokid; } CK_RV session_open(CK_SLOT_ID slot_id, CK_FLAGS flags, void *application, CK_NOTIFY notify, CK_SESSION_HANDLE *session) { (void) notify; (void) application; /* can be null */ if (!(flags & CKF_SERIAL_SESSION)) { return CKR_SESSION_PARALLEL_NOT_SUPPORTED; } CK_RV rv = CKR_GENERAL_ERROR; check_pointer(session); token *t = slot_get_token(slot_id); if (!t) { return CKR_SLOT_ID_INVALID; } rv = check_max_sessions(t->s_table); if (rv != CKR_OK) { return rv; } /* * Cannot open an R/O session when the SO is logged in */ if ((!(flags & CKF_RW_SESSION)) && (t->login_state == token_so_logged_in)) { return CKR_SESSION_READ_WRITE_SO_EXISTS; } rv = session_table_new_entry(t->s_table, session, t, flags); if (rv != CKR_OK) { return rv; } add_tokid_to_session_handle(t->id, session); return CKR_OK; } CK_RV session_close(CK_SESSION_HANDLE session) { token *t = NULL; unsigned tokid = get_tokid_from_session_handle_and_cleanse(&session); check_slot_id(tokid, t, CKR_SESSION_HANDLE_INVALID); return session_table_free_ctx(t, session); } CK_RV session_closeall(CK_SLOT_ID slot_id) { token *t; check_slot_id(slot_id, t, CKR_SLOT_ID_INVALID); return session_table_free_ctx_all(t); } CK_RV session_lookup(CK_SESSION_HANDLE session, token **tok, session_ctx **ctx) { token *tmp = NULL; unsigned tokid = get_tokid_from_session_handle_and_cleanse(&session); check_slot_id(tokid, tmp, CKR_SESSION_HANDLE_INVALID); *ctx = session_table_lookup(tmp->s_table, session); if (!*ctx) { return CKR_SESSION_HANDLE_INVALID; } token_lock(tmp); *tok = tmp; return CKR_OK; } tpm2-pkcs11-1.9.1/src/lib/session_ctx.c0000644000175100017510000002333114667615111013243 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include "attrs.h" #include "log.h" #include "mutex.h" #include "pkcs11.h" #include "session_ctx.h" #include "session_table.h" #include "token.h" #include "twist.h" #include "utils.h" #include "backend.h" struct session_ctx { CK_FLAGS flags; CK_STATE state; token *tok; generic_opdata opdata; opdata_free_fn free; }; void session_ctx_free(session_ctx *ctx) { if (!ctx) { return; } session_ctx_opdata_clear(ctx); free(ctx); } /** * Sets the initial state of the a session context based on the tokens login state * and the flags present. Does no error checking. * @param ctx * The session ctx to set * @param tok * The token state to check * @param flags * The session flags. */ static void session_set_initial_state(session_ctx *ctx, token_login_state state, CK_FLAGS flags) { switch(state) { case token_no_one_logged_in: ctx->state = flags & CKF_RW_SESSION ? CKS_RW_PUBLIC_SESSION : CKS_RO_PUBLIC_SESSION; break; case token_user_logged_in: ctx->state = flags & CKF_RW_SESSION ? CKS_RW_USER_FUNCTIONS : CKS_RO_USER_FUNCTIONS; break; case token_so_logged_in: assert(flags & CKF_RW_SESSION); ctx->state = CKS_RW_SO_FUNCTIONS; break; /* no default */ } } CK_RV session_ctx_new(session_ctx **ctx, token *tok, CK_FLAGS flags) { session_ctx *s = calloc(1, sizeof(session_ctx)); if (!s) { return CKR_HOST_MEMORY; } session_set_initial_state(s, tok->login_state, flags); s->flags = flags; s->tok = tok; *ctx = s; return CKR_OK; } CK_STATE session_ctx_state_get(session_ctx *ctx) { return ctx->state; } CK_FLAGS session_ctx_flags_get(session_ctx *ctx) { return ctx->flags; } token *session_ctx_get_token(session_ctx *ctx) { return ctx->tok; } void session_ctx_login_event(session_ctx *ctx, CK_USER_TYPE usertype) { /* * S/O REQUIRES a R/W start state and transitions * to CKS_RW_SO_FUNCTIONS * * Users can start in a RO or RW PUBLIC Session and transition * on that to either RO or RW USER FUNCTION state * * See Section 5 of: * - https://www.cryptsoft.com/pkcs11doc/STANDARD/pkcs-11.pdf */ if (usertype == CKU_SO) { assert(ctx->state == CKS_RW_PUBLIC_SESSION); ctx->state = CKS_RW_SO_FUNCTIONS; } else { assert(ctx->state == CKS_RO_PUBLIC_SESSION || ctx->state == CKS_RW_PUBLIC_SESSION); if (ctx->state == CKS_RO_PUBLIC_SESSION) { ctx->state = CKS_RO_USER_FUNCTIONS; } else { ctx->state = CKS_RW_USER_FUNCTIONS; } } } void session_ctx_logout_event(session_ctx *ctx) { /* * Returns a session back to it's initial state. * See the comment block insession_ctx_login() for details */ if (ctx->state == CKS_RW_SO_FUNCTIONS || ctx->state == CKS_RW_USER_FUNCTIONS) { ctx->state = CKS_RW_PUBLIC_SESSION; } else { ctx->state = CKS_RO_PUBLIC_SESSION; } } CK_RV _session_ctx_opdata_get(session_ctx *ctx, operation op, void **data) { if (op != ctx->opdata.op) { return CKR_OPERATION_NOT_INITIALIZED; } *data = ctx->opdata.data; return CKR_OK; } bool session_ctx_opdata_is_active(session_ctx *ctx) { return ctx->opdata.op != operation_none; } void session_ctx_opdata_set(session_ctx *ctx, operation op, tobject *tobj, void *data, opdata_free_fn fn) { ctx->opdata.op = op; ctx->opdata.tobj = tobj; ctx->opdata.data = data; ctx->free = fn; } void session_ctx_opdata_clear(session_ctx *ctx) { if (ctx->free && ctx->opdata.data) { ctx->free(&ctx->opdata.data); } session_ctx_opdata_set(ctx, operation_none, NULL, NULL, NULL); } static bool is_user(CK_USER_TYPE user) { return user == CKU_USER || user == CKU_CONTEXT_SPECIFIC; } tobject *session_ctx_opdata_get_tobject(session_ctx *ctx) { return ctx->opdata.tobj; } CK_RV session_ctx_login(session_ctx *ctx, CK_USER_TYPE user, CK_BYTE_PTR pin, CK_ULONG pinlen) { if (user != CKU_SO && user != CKU_USER && user != CKU_CONTEXT_SPECIFIC) { return CKR_USER_TYPE_INVALID; } CK_RV rv = CKR_GENERAL_ERROR; token *tok = session_ctx_get_token(ctx); assert(tok); bool is_anyone_logged_in = token_is_any_user_logged_in(tok); if (is_anyone_logged_in) { /* context specific user login's require USER logged in */ if (user != CKU_CONTEXT_SPECIFIC || tok->login_state != token_user_logged_in) { return CKR_USER_ALREADY_LOGGED_IN; } } else if (user == CKU_CONTEXT_SPECIFIC) { /* * is this a valid assertion? Most flows I see have a C_Login(user) before * the context specific login... */ return CKR_USER_NOT_LOGGED_IN; } CK_ULONG ro; session_table_get_cnt(tok->s_table, NULL, NULL, &ro); if (user == CKU_SO && ro) { return CKR_SESSION_READ_ONLY_EXISTS; } /* so pin will NOT be set */ if (!tok->config.is_initialized) { return CKR_OPERATION_NOT_INITIALIZED; } /* * context specific logins require an active object * also the session state DOESN'T change, so we set * a flag that its a context specific login in the * session state for tracking so we can logout when * done and check state when an operation is occurring. */ if (user == CKU_CONTEXT_SPECIFIC) { /* an object must be active */ bool is_active = session_ctx_opdata_is_active(ctx); if (!is_active || !ctx->opdata.tobj) { return CKR_OPERATION_NOT_INITIALIZED; } } twist tpin = twistbin_new(pin, pinlen); if (!tpin) { return CKR_HOST_MEMORY; } rv = backend_token_unseal_wrapping_key(tok, is_user(user), tpin); twist_free(tpin); if (rv != CKR_OK) { LOGE("Error unsealing wrapping key"); return rv; } /* * Indicate that the token has been logged in. For CKU_CONTEXT_SPECIFIC the spec * states that on both cases (appears to be fail or success of C_Login) session * state does not change. This is because C_Login(USER) should have already occurred * and is validated above. */ if (user == CKU_CONTEXT_SPECIFIC) { /* object use verified */ ctx->opdata.tobj->is_authenticated = true; } else { tok->login_state = user == CKU_USER ? token_user_logged_in : token_so_logged_in; /* * State transition all *EXISTING* sessions in the table */ session_table_login_event(tok->s_table, user); } return CKR_OK; } CK_RV session_ctx_logout(session_ctx *ctx) { token *tok = session_ctx_get_token(ctx); assert(tok); bool is_anyone_logged_in = token_is_any_user_logged_in(tok); if (!is_anyone_logged_in) { return CKR_USER_NOT_LOGGED_IN; } /* clear the wrapping key */ assert(tok->wrappingkey); /* cleanse the wrapping key */ if (tok->wrappingkey) { OPENSSL_cleanse((void *)tok->wrappingkey, twist_len(tok->wrappingkey)); twist_free(tok->wrappingkey); tok->wrappingkey = NULL; } /* * Ok now start evicting TPM objects from the right * context */ tpm_ctx *tpm = tok->tctx; /* * For each object: * - Evict the TPM Handles * - Cleanse CKA_VALUE fields for private values. */ if (tok->tobjects.head) { list *cur = &tok->tobjects.head->l; while(cur) { tobject *tobj = list_entry(cur, tobject, l); cur = cur->next; /* if it's CKA_PRIVATE == CK_TRUE and it has a CKA_VALUE field, clear it */ CK_BBOOL cka_private = attr_list_get_CKA_PRIVATE(tobj->attrs, CK_FALSE); CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_VALUE); if (cka_private && a && a->pValue && a->ulValueLen) { attr_pfree_cleanse(a); } if (tobj->tpm_handle) { bool result = tpm_flushcontext(tpm, tobj->tpm_handle); assert(result); UNUSED(result); tobj->tpm_handle = 0; /* Clear the unwrapped auth value for tertiary objects */ twist_free(tobj->unsealed_auth); tobj->unsealed_auth = NULL; } } } /* * State transition all sessions in the table */ token_logout_all_sessions(tok); /* * mark no one logged in */ tok->login_state = token_no_one_logged_in; tpm_session_stop(tok->tctx); return CKR_OK; } CK_RV session_ctx_get_info(session_ctx *ctx, CK_SESSION_INFO *info) { check_pointer(info); token *tok = session_ctx_get_token(ctx); assert(tok); info->flags = session_ctx_flags_get(ctx); info->slotID = tok->id; info->state = session_ctx_state_get(ctx); // We'll need to set this state error at some point, perhaps TSS2_RC's info->ulDeviceError = 0; return CKR_OK; } CK_RV session_ctx_tobject_authenticated(session_ctx *ctx) { tobject *tobj = session_ctx_opdata_get_tobject(ctx); assert(tobj); CK_ATTRIBUTE_PTR p = attr_get_attribute_by_type(tobj->attrs, CKA_ALWAYS_AUTHENTICATE); bool has_always_auth = false; if (p) { assert(p->ulValueLen == sizeof(CK_BBOOL)); CK_BBOOL *b = (CK_BBOOL *)p->pValue; assert(*b == CK_TRUE || *b == CK_FALSE); has_always_auth = *b == CK_TRUE; } if(has_always_auth && !tobj->is_authenticated) { return CKR_USER_NOT_LOGGED_IN; } return CKR_OK; } tpm2-pkcs11-1.9.1/src/lib/session_table.c0000644000175100017510000001105614535673717013547 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "mutex.h" #include "pkcs11.h" #include "session_ctx.h" #include "session_table.h" #include "token.h" #include "utils.h" struct session_table { CK_ULONG cnt; CK_ULONG rw_cnt; session_ctx *table[MAX_NUM_OF_SESSIONS]; }; CK_RV session_table_new(session_table **t) { session_table *x = calloc(1, sizeof(session_table)); if (!x) { return CKR_HOST_MEMORY; } *t = x; return CKR_OK; } void session_table_free(session_table *t) { if (!t) { return; } free(t); } void session_table_get_cnt(session_table *t, CK_ULONG_PTR all, CK_ULONG_PTR rw, CK_ULONG_PTR ro) { /* All counts should always be greater than or equal to rw count */ assert(t->cnt >= t->rw_cnt); if (all) { *all = t->cnt; } if (rw) { *rw = t->rw_cnt; } if (ro) { *ro = t->cnt - t->rw_cnt; } } CK_RV session_table_new_entry(session_table *t, CK_SESSION_HANDLE *handle, token *tok, CK_FLAGS flags) { CK_SESSION_HANDLE free_handle = 0; session_ctx **open_slot = NULL; size_t i; for (i=0; i < ARRAY_LEN(t->table); i++) { if (!t->table[i]) { /* 0 is not a good session handle, so offset by 1 */ free_handle = i + 1; open_slot = &t->table[i]; break; } } if (!open_slot) { LOGV("No available session slot found"); return CKR_SESSION_COUNT; } CK_RV rv = session_ctx_new(open_slot, tok, flags); if (rv != CKR_OK) { return rv; } *handle = free_handle; t->cnt++; if(flags & CKF_RW_SESSION) { t->rw_cnt++; } return CKR_OK; } static CK_RV do_logout_if_needed(session_ctx *ctx) { token *tok = session_ctx_get_token(ctx); assert(tok); if (tok->login_state == token_no_one_logged_in) { return CKR_OK; } return session_ctx_logout(ctx); } static CK_RV session_table_free_ctx_by_ctx(token *t, session_ctx **ctx) { session_table *stable = t->s_table; CK_RV rv = CKR_OK; CK_STATE state = session_ctx_state_get(*ctx); if(state == CKS_RW_PUBLIC_SESSION || state == CKS_RW_USER_FUNCTIONS || state == CKS_RW_SO_FUNCTIONS) { assert(stable->rw_cnt); stable->rw_cnt--; } stable->cnt--; /* Per the spec, when session count hits 0, logout */ if (!stable->cnt) { rv = do_logout_if_needed(*ctx); if (rv != CKR_OK) { LOGE("do_logout_if_needed failed: 0x%lx", rv); } } session_ctx_free(*ctx); *ctx = NULL; return rv; } static session_ctx **_session_table_lookup(session_table *t, CK_SESSION_HANDLE handle) { if (handle == 0 || handle > ARRAY_LEN(t->table)) { return NULL; } return &t->table[handle - 1]; } session_ctx *session_table_lookup(session_table *t, CK_SESSION_HANDLE handle) { return *_session_table_lookup(t, handle); } CK_RV session_table_free_ctx_by_handle(token *t, CK_SESSION_HANDLE handle) { session_ctx **ctx = _session_table_lookup(t->s_table, handle); if (!*ctx) { return CKR_SESSION_HANDLE_INVALID; } return session_table_free_ctx_by_ctx(t, ctx); } CK_RV session_table_free_ctx_all(token *t) { bool had_error = false; if (!t->s_table) { return CKR_OK; } unsigned i; for (i=0; i < ARRAY_LEN(t->s_table->table); i++) { CK_SESSION_HANDLE handle = i; /* * skip dead handles */ session_ctx **ctx = &t->s_table->table[handle]; if (!*ctx) { continue; } CK_RV rv = session_table_free_ctx_by_ctx(t, ctx); if (rv != CKR_OK) { LOGE("Failed to free session_ctx: 0x%lx", rv); had_error = true; } } return !had_error ? CKR_OK : CKR_GENERAL_ERROR; } CK_RV session_table_free_ctx(token *t, CK_SESSION_HANDLE handle) { return session_table_free_ctx_by_handle(t, handle); } void session_table_login_event(session_table *s_table, CK_USER_TYPE user) { size_t i; for (i=0; i < ARRAY_LEN(s_table->table); i++) { session_ctx *ctx = s_table->table[i]; if (!ctx) { continue; } session_ctx_login_event(ctx, user); } } void token_logout_all_sessions(token *tok) { size_t i; for (i=0; i < ARRAY_LEN(tok->s_table->table); i++) { session_ctx *ctx = tok->s_table->table[i]; if (!ctx) { continue; } session_ctx_logout_event(ctx); } } tpm2-pkcs11-1.9.1/src/lib/sign.c0000644000175100017510000004331714535673717011662 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include "attrs.h" #include "backend.h" #include "checks.h" #include "digest.h" #include "encrypt.h" #include "log.h" #include "mech.h" #include "ssl_util.h" #include "session.h" #include "session_ctx.h" #include "sign.h" #include "token.h" #include "tpm.h" typedef struct sign_opdata sign_opdata; struct sign_opdata { CK_MECHANISM mech; bool do_hash; twist buffer; digest_op_data *digest_opdata; encrypt_op_data *crypto_opdata; int padding; EVP_PKEY *pkey; const EVP_MD *md; }; static sign_opdata *sign_opdata_new(mdetail *mdtl, CK_MECHANISM_PTR mechanism, tobject *tobj) { int padding = 0; CK_RV rv = mech_get_padding(mdtl, mechanism, &padding); if (rv != CKR_OK) { return NULL; } const EVP_MD *md = NULL; bool is_hashing_needed = false; rv = mech_is_hashing_needed(mdtl, mechanism, &is_hashing_needed); if (rv != CKR_OK) { return NULL; } /* * Some algorithms we don't perform the hash, but we need knowledge of * the hashing algorithm for verify operations with OSSL */ bool is_hash_knowledge_needed = false; rv = mech_is_hashing_knowledge_needed(mdtl, mechanism, &is_hash_knowledge_needed); if (rv != CKR_OK) { return NULL; } if (is_hashing_needed || is_hash_knowledge_needed) { rv = mech_get_digester(mdtl, mechanism, &md); if (rv != CKR_OK) { return NULL; } } EVP_PKEY *pkey = NULL; rv = ssl_util_attrs_to_evp(tobj->attrs, &pkey); if (rv != CKR_OK) { return NULL; } sign_opdata *opdata = calloc(1, sizeof(sign_opdata)); if (!opdata) { LOGE("oom"); return NULL; } opdata->padding = padding; opdata->pkey = pkey; opdata->md = md; return opdata; } static void sign_opdata_free(sign_opdata **opdata) { digest_op_data_free(&(*opdata)->digest_opdata); if (*opdata && !(*opdata)->do_hash) { twist_free((*opdata)->buffer); } if ((*opdata)->pkey) { EVP_PKEY_free((*opdata)->pkey); } if ((*opdata)->crypto_opdata) { encrypt_op_data_free(&(*opdata)->crypto_opdata); } free(*opdata); *opdata = NULL; } static CK_RV update_pss_sig_state(token *tok, tobject *tobj) { CK_RV rv = CKR_GENERAL_ERROR; /* * Only test for PSS signature state if it's an RSA object. This avoids printing superfluous errors */ CK_OBJECT_CLASS cka_class = attr_list_get_CKA_CLASS(tobj->attrs, CK_OBJECT_CLASS_BAD); if (cka_class != CKK_RSA) { return CKR_OK; } /* * Tokens added in previous versions may not have a known PSS signature * state, so check and populate here. */ bool pss_sigs_good = false; pss_config_state pss_cfg = tok->config.pss_sigs_good; if (pss_cfg == pss_config_state_unk) { rv = tpm_get_pss_sig_state(tok->tctx, tobj, &pss_sigs_good); if (rv != CKR_OK) { LOGW("Could not determine PSS signature format," "assuming maximized slen"); tok->config.pss_sigs_good = pss_sigs_good ? pss_config_state_good : pss_config_state_bad; } mdetail_set_pss_status(tok->mdtl, pss_sigs_good); rv = backend_update_token_config(tok); if (rv != CKR_OK) { LOGW("Could not update token config backend, moving on"); } } return rv; } static CK_RV common_init(operation op, session_ctx *ctx, CK_MECHANISM_PTR mechanism, CK_OBJECT_HANDLE key) { check_pointer(mechanism); LOGV("mechanism: 0x%lx\n\thas_params: %s\n\tlen: %lu", mechanism->mechanism, mechanism->pParameter ? "yes" : "no", mechanism->ulParameterLen); CK_RV rv = CKR_GENERAL_ERROR; bool is_active = session_ctx_opdata_is_active(ctx); if (is_active) { return CKR_OPERATION_ACTIVE; } token *tok = session_ctx_get_token(ctx); assert(tok); tobject *tobj = NULL; rv = token_load_object(tok, key, &tobj); if (rv != CKR_OK) { return rv; } rv = mech_validate(tok->mdtl, mechanism, tobj->attrs); if (rv != CKR_OK) { return rv; } digest_op_data *digest_opdata = NULL; bool is_hashing_needed = false; rv = mech_is_hashing_needed(tok->mdtl, mechanism, &is_hashing_needed); if (rv != CKR_OK) { return rv; } if (is_hashing_needed) { digest_opdata = digest_op_data_new(); if (!digest_opdata) { return CKR_HOST_MEMORY; } rv = digest_init_op(ctx, digest_opdata, mechanism); if (rv != CKR_OK) { digest_op_data_free(&digest_opdata); return rv; } } /* TPM is only used on sign operations, not verify. This is because * with asymmetric key pairs we can use the public key for verification in SW * without needing to involve the TPM. This with HMAC we need to use the TPM * verify since the key is only resident in the TPM. */ bool is_hmac = false; rv = mech_is_HMAC(tok->mdtl, mechanism, &is_hmac); if (rv != CKR_OK) { LOGE("Could not determine if algorithm is HMAC or not"); return rv; } tpm_op_data *tpm_opdata = NULL; if (op == operation_sign || is_hmac) { rv = update_pss_sig_state(tok, tobj); if (rv != CKR_OK) { return rv; } rv = mech_get_tpm_opdata(tok->mdtl, tok->tctx, mechanism, tobj, &tpm_opdata); if (rv != CKR_OK) { return rv; } } sign_opdata *opdata = sign_opdata_new(tok->mdtl, mechanism, tobj); if (!opdata) { tpm_opdata_free(&tpm_opdata); return CKR_HOST_MEMORY; } opdata->do_hash = is_hashing_needed; memcpy(&opdata->mech, mechanism, sizeof(opdata->mech)); opdata->digest_opdata = digest_opdata; opdata->crypto_opdata = encrypt_op_data_new(); if (!opdata->crypto_opdata) { sign_opdata_free(&opdata); return CKR_HOST_MEMORY; } /* Use SW Verify if it's an asymmetric key with pkey set */ if (op != operation_sign && opdata->pkey) { opdata->crypto_opdata->use_sw = true; rv = sw_encrypt_data_init(tok->mdtl, mechanism, tobj, &opdata->crypto_opdata->cryptopdata.sw_enc_data); if (rv != CKR_OK) { sign_opdata_free(&opdata); return rv; } } else { opdata->crypto_opdata->cryptopdata.tpm_opdata = tpm_opdata; } /* * Store everything for later */ session_ctx_opdata_set(ctx, op, tobj, opdata, (opdata_free_fn)sign_opdata_free); return CKR_OK; } static CK_RV common_update(operation op, session_ctx *ctx, CK_BYTE_PTR part, CK_ULONG part_len) { check_pointer(part); CK_RV rv = CKR_GENERAL_ERROR; sign_opdata *opdata = NULL; rv = session_ctx_opdata_get(ctx, op, &opdata); if (rv != CKR_OK) { return rv; } rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } if (opdata->do_hash) { rv = digest_update_op(ctx, opdata->digest_opdata, part, part_len); if (rv != CKR_OK) { return rv; } } else { twist tmp = twistbin_append(opdata->buffer, part, part_len); if (!tmp) { return CKR_HOST_MEMORY; } opdata->buffer = tmp; } return CKR_OK; } CK_RV sign_init(session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return common_init(operation_sign, ctx, mechanism, key); } CK_RV sign_update(session_ctx *ctx, CK_BYTE_PTR part, CK_ULONG part_len) { return common_update(operation_sign, ctx, part, part_len); } CK_RV sign_final_ex(session_ctx *ctx, CK_BYTE_PTR signature, CK_ULONG_PTR signature_len, bool is_oneshot) { check_pointer(signature_len); bool reset_ctx = false; CK_RV rv = CKR_GENERAL_ERROR; sign_opdata *opdata = NULL; rv = session_ctx_opdata_get(ctx, operation_sign, &opdata); if (rv != CKR_OK) { return rv; } assert(opdata); rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } token *tok = session_ctx_get_token(ctx); assert(tok); tobject *tobj = session_ctx_opdata_get_tobject(ctx); assert(tobj); twist digest_buf = NULL; size_t expected_sig_len = 0; rv = tobject_get_min_buf_size(tobj, &opdata->mech, &expected_sig_len); if (rv != CKR_OK) { return rv; } if (!signature) { *signature_len = expected_sig_len; goto out; } if (*signature_len < expected_sig_len) { *signature_len = expected_sig_len; rv = CKR_BUFFER_TOO_SMALL; goto out; } if (opdata->do_hash) { CK_MECHANISM_TYPE mech_halg; rv = mech_get_digest_alg(tok->mdtl, &opdata->mech, &mech_halg); if (rv != CKR_OK) { return rv; } CK_ULONG hash_len = utils_get_halg_size(mech_halg); if (!hash_len) { LOGE("Hash algorithm cannot have 0 size"); return CKR_GENERAL_ERROR; } digest_buf = twist_calloc(hash_len); if (!digest_buf) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto session_out; } rv = digest_final_op(ctx, opdata->digest_opdata, (CK_BYTE_PTR)digest_buf, &hash_len); if (rv != CKR_OK) { goto session_out; } } else { digest_buf = opdata->buffer; /* we take ownership of this buffer */ opdata->buffer = NULL; } CK_BYTE syn_buf[4096]; CK_ULONG syn_buf_len = sizeof(syn_buf); CK_ULONG digest_buf_len = twist_len(digest_buf); bool is_ecc = false; rv = mech_is_ecc(tok->mdtl, opdata->mech.mechanism, &is_ecc); if (rv != CKR_OK) { LOGE("COuld not determine if mechanism is ECC: %lu", rv); return rv; } if (is_ecc && (digest_buf_len > expected_sig_len)) { LOGV("Truncating hash for EC Signature from %lu to %lu", digest_buf_len, expected_sig_len); digest_buf_len = expected_sig_len; } rv = mech_synthesize( tok->mdtl, &opdata->mech, tobj->attrs, (CK_BYTE_PTR)digest_buf, digest_buf_len, syn_buf, &syn_buf_len); if (rv != CKR_OK) { goto session_out; } bool is_synthetic = false; rv = mech_is_synthetic(tok->mdtl, &opdata->mech, &is_synthetic); if (rv != CKR_OK) { goto session_out; } if (is_synthetic) { /* sign padded pkcs 1.5 structure */ encrypt_op_data *encrypt_opdata = encrypt_op_data_new(); if (!encrypt_opdata) { rv = CKR_HOST_MEMORY; goto session_out; } /* perform a RAW RSA encryption */ CK_MECHANISM mechanism = { CKM_RSA_X_509, NULL, 0 }; /* RSA Decrypt is the RSA operation with the private key, which is what we want */ rv = decrypt_init_op(ctx, encrypt_opdata, &mechanism, tobj->obj_handle); if (rv != CKR_OK) { encrypt_op_data_free(&encrypt_opdata); goto session_out; } rv = decrypt_oneshot_op(ctx, encrypt_opdata, syn_buf, syn_buf_len, signature, signature_len); encrypt_op_data_free(&encrypt_opdata); if (rv != CKR_OK && rv != CKR_BUFFER_TOO_SMALL) { goto session_out; } /* WORKAROUND / TODO: decrypt_init_op above increments the usage counter by one, but never decremented. if called for size, decrypt_finalize is never called, thus no decrement. if not called for size, decrypt_finalize does not decrement as supplied data was set Without reworking the whole logic and breaking other valid use cases it is the easiest to decrement the usage counter here. */ CK_RV rv_tmp = tobject_user_decrement(tobj); if (rv_tmp != CKR_OK) { rv = rv_tmp; goto session_out; } } else { rv = tpm_sign(opdata->crypto_opdata->cryptopdata.tpm_opdata, syn_buf, syn_buf_len, signature, signature_len); if (rv != CKR_OK && rv != CKR_BUFFER_TOO_SMALL) { goto session_out; } } out: /* * Detect 1 of 2 states: * - 1 - everything is ok from enc/sign and sig is set (continue normally) * - 2 - buffer too small from enc/sign and sig is set (reset hashing state and keep sign operation alive) * - 3 - everything is ok but sig is NULL, handle like state 2. * * Reset the hashing state IF we're actually doing the hash internally */ reset_ctx = (rv == CKR_BUFFER_TOO_SMALL || !signature); if (reset_ctx) { if (opdata->do_hash) { /* reset the hashing state */ digest_op_data *new_digest_state = digest_op_data_new(); if (!new_digest_state) { rv = CKR_HOST_MEMORY; reset_ctx = false; goto session_out; } assert(opdata->digest_opdata); CK_RV tmp = digest_init_op(ctx, new_digest_state, &opdata->digest_opdata->mechanism); if (tmp != CKR_OK) { digest_op_data_free(&new_digest_state); reset_ctx = false; goto session_out; } digest_op_data_free(&opdata->digest_opdata); opdata->digest_opdata = new_digest_state; } else if (is_oneshot) { twist_free(opdata->buffer); opdata->buffer = NULL; } } else { /* not resetting the state, and all is well */ rv = CKR_OK; } session_out: twist_free(digest_buf); assert(tobj); if (!reset_ctx) { tobj->is_authenticated = false; CK_RV tmp_rv = tobject_user_decrement(tobj); if (tmp_rv != CKR_OK && rv == CKR_OK) { rv = tmp_rv; } encrypt_op_data_free(&opdata->crypto_opdata); session_ctx_opdata_clear(ctx); } return rv; } CK_RV sign(session_ctx *ctx, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR signature, CK_ULONG *signature_len) { CK_RV rv = sign_update(ctx, data, data_len); if (rv != CKR_OK) { return rv; } return sign_final_ex(ctx, signature, signature_len, true); } CK_RV verify_init (session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return common_init(operation_verify, ctx, mechanism, key); } CK_RV verify_update (session_ctx *ctx, CK_BYTE_PTR part, CK_ULONG part_len) { return common_update(operation_verify, ctx, part, part_len); } CK_RV verify_final (session_ctx *ctx, CK_BYTE_PTR signature, CK_ULONG signature_len) { check_pointer(signature); check_pointer(signature_len); CK_RV rv = CKR_GENERAL_ERROR; sign_opdata *opdata = NULL; rv = session_ctx_opdata_get(ctx, operation_verify, &opdata); if (rv != CKR_OK) { return rv; } rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } tobject *tobj = session_ctx_opdata_get_tobject(ctx); assert(tobj); CK_ULONG data_len = 0; CK_BYTE_PTR data = NULL; /* buffer has to stay in scope for assignment to data pointer */ CK_BYTE _buffer[1024]; if (opdata->do_hash) { // TODO mode to buffer size CK_ULONG _buffer_len = sizeof(_buffer); rv = digest_final_op(ctx, opdata->digest_opdata, _buffer, &_buffer_len); if (rv != CKR_OK) { goto out; } data_len = _buffer_len; data = _buffer; } else { data_len = twist_len(opdata->buffer); data = (const CK_BYTE_PTR)opdata->buffer; } if (opdata->pkey) { rv = ssl_util_sig_verify(opdata->pkey, opdata->padding, opdata->md, data, data_len, signature, signature_len); } else { rv = tpm_verify(opdata->crypto_opdata->cryptopdata.tpm_opdata, data, data_len, signature, signature_len); } out: assert(tobj); tobj->is_authenticated = false; CK_RV tmp_rv = tobject_user_decrement(tobj); if (tmp_rv != CKR_OK && rv == CKR_OK) { rv = tmp_rv; } encrypt_op_data_free(&opdata->crypto_opdata); session_ctx_opdata_clear(ctx); return rv; } CK_RV verify(session_ctx *ctx, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR signature, CK_ULONG signature_len) { CK_RV rv = verify_update(ctx, data, data_len); if (rv != CKR_OK) { return rv; } return verify_final(ctx, signature, signature_len); } CK_RV verify_recover_init (session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return common_init(operation_verify_recover, ctx, mechanism, key); } CK_RV verify_recover (session_ctx *ctx, CK_BYTE_PTR signature, CK_ULONG signature_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len) { check_pointer(signature); check_pointer(signature_len); CK_RV rv = CKR_GENERAL_ERROR; sign_opdata *opdata = NULL; rv = session_ctx_opdata_get(ctx, operation_verify_recover, &opdata); if (rv != CKR_OK) { return rv; } rv = session_ctx_tobject_authenticated(ctx); if (rv != CKR_OK) { return rv; } tobject *tobj = session_ctx_opdata_get_tobject(ctx); assert(tobj); rv = ssl_util_verify_recover(opdata->pkey, opdata->padding, opdata->md, signature, signature_len, data, data_len); assert(tobj); tobj->is_authenticated = false; CK_RV tmp_rv = tobject_user_decrement(tobj); if (tmp_rv != CKR_OK && rv == CKR_OK) { rv = tmp_rv; } encrypt_op_data_free(&opdata->crypto_opdata); session_ctx_opdata_clear(ctx); return rv; } tpm2-pkcs11-1.9.1/src/lib/slot.c0000644000175100017510000001011314535673717011667 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include "checks.h" #include "backend.h" #include "mech.h" #include "pkcs11.h" #include "slot.h" #include "token.h" #include "utils.h" static struct { size_t token_cnt; token *token; void *mutex; } global; CK_RV slot_init(void) { CK_RV rv = mutex_create(&global.mutex); if (rv != CKR_OK) { return rv; } return backend_get_tokens(&global.token, &global.token_cnt); } static void slot_lock(void) { mutex_lock_fatal(global.mutex); } static void slot_unlock(void) { mutex_unlock_fatal(global.mutex); } void slot_destroy(void) { token_free_list(&global.token, &global.token_cnt); CK_RV rv = mutex_destroy(global.mutex); global.mutex = NULL; if (rv != CKR_OK) { LOGW("Failed to destroy mutex"); } } token *slot_get_token(CK_SLOT_ID slot_id) { slot_lock(); size_t i; for (i=0; i < global.token_cnt; i++) { token *t = &global.token[i]; if (slot_id == t->id) { slot_unlock(); return t; } } slot_unlock(); return NULL; } CK_RV slot_get_list (CK_BYTE token_present, CK_SLOT_ID *slot_list, CK_ULONG_PTR count) { /* * True for token present only returns slots with tokens, False all slots. All * of our slots always have a token, so we can ignore this. */ UNUSED(token_present); check_pointer(count); slot_lock(); if (!slot_list) { slot_unlock(); *count = global.token_cnt; return CKR_OK; } if (*count < global.token_cnt) { *count = global.token_cnt; slot_unlock(); return CKR_BUFFER_TOO_SMALL; } size_t i; for (i=0; i < global.token_cnt; i++) { token *t = &global.token[i]; slot_list[i] = t->id; } *count = global.token_cnt; slot_unlock(); return CKR_OK; } CK_RV slot_get_info (CK_SLOT_ID slot_id, CK_SLOT_INFO *info) { token *token; check_pointer(info); token = slot_get_token(slot_id); if (!token) { return CKR_SLOT_ID_INVALID; } token_lock(token); CK_TOKEN_INFO token_info; if (token_get_info(token, &token_info)) { token_unlock(token); return CKR_GENERAL_ERROR; } str_padded_copy(info->manufacturerID, token_info.manufacturerID); str_padded_copy(info->slotDescription, token_info.label); info->hardwareVersion = token_info.hardwareVersion; info->firmwareVersion = token_info.firmwareVersion; info->flags = CKF_TOKEN_PRESENT | CKF_HW_SLOT; token_unlock(token); return CKR_OK; } CK_RV slot_mechanism_list_get (CK_SLOT_ID slot_id, CK_MECHANISM_TYPE *mechanism_list, CK_ULONG_PTR count) { token *t = slot_get_token(slot_id); if (!t) { return CKR_SLOT_ID_INVALID; } token_lock(t); CK_RV rv = mech_get_supported(t->mdtl, mechanism_list, count); token_unlock(t); return rv; } CK_RV slot_mechanism_info_get (CK_SLOT_ID slot_id, CK_MECHANISM_TYPE type, CK_MECHANISM_INFO *info) { check_pointer(info); token *t = slot_get_token(slot_id); if (!t) { return CKR_SLOT_ID_INVALID; } token_lock(t); CK_RV rv = mech_get_info(t->mdtl, t->tctx, type, info); if (rv != CKR_OK) { token_unlock(t); return rv; } token_unlock(t); return CKR_OK; } CK_RV slot_add_uninit_token(void) { CK_RV rv = CKR_GENERAL_ERROR; slot_lock(); if (global.token_cnt < MAX_TOKEN_CNT) { size_t i; for (i=0; i < global.token_cnt; i++) { token *t = &global.token[i]; if (!t->config.is_initialized) { LOGV("Skipping adding uninitialized token, one found"); rv = CKR_OK; goto out; } } token *t = &global.token[global.token_cnt++]; t->id = global.token_cnt; rv = token_min_init(t); if (rv != CKR_OK) { goto out; } assert(t->id); } else { LOGW("Reached max tokens in store"); } rv = CKR_OK; out: slot_unlock(); return rv; } tpm2-pkcs11-1.9.1/src/lib/ssl_util.c0000644000175100017510000005072514535673717012561 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include #include #include "attrs.h" #include "log.h" #include "pkcs11.h" #include "ssl_util.h" #include "twist.h" #if defined(LIB_TPM2_OPENSSL_OPENSSL_POST111) #include #endif #if defined(LIB_TPM2_OPENSSL_OPENSSL_POST300) #include #endif /* * TODO Port these routines * Deprecated function block to port * * There are no padding routine replacements in OSSL 3.0. * - per Matt Caswell (maintainer) on mailing list. * Signature verification can likely be done with EVP Verify interface. */ #if defined(LIB_TPM2_OPENSSL_OPENSSL_POST300) #pragma GCC diagnostic push #pragma GCC diagnostic ignored "-Wdeprecated-declarations" #endif CK_RV ssl_util_add_PKCS1_PSS(EVP_PKEY *pkey, const CK_BYTE_PTR inbuf, const EVP_MD *md, CK_BYTE_PTR outbuf) { RSA *rsa = (RSA *)EVP_PKEY_get0_RSA(pkey); if (!rsa) { return CKR_GENERAL_ERROR; } int rc = RSA_padding_add_PKCS1_PSS(rsa, outbuf, inbuf, md, -1); return rc == 1 ? CKR_OK : CKR_GENERAL_ERROR; } CK_RV ssl_util_add_PKCS1_TYPE_1(const CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG outbuflen) { return RSA_padding_add_PKCS1_type_1(outbuf, outbuflen, inbuf, inlen) == 1 ? CKR_OK : CKR_GENERAL_ERROR; } CK_RV ssl_util_check_PKCS1_TYPE_2(const CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_ULONG rsa_len, CK_BYTE_PTR outbuf, CK_ULONG_PTR outbuflen) { int rc = RSA_padding_check_PKCS1_type_2(outbuf, *outbuflen, inbuf, inlen, rsa_len); if (rc < 0) { return CKR_GENERAL_ERROR; } /* cannot be negative due to check above */ *outbuflen = rc; return CKR_OK; } #if defined(LIB_TPM2_OPENSSL_OPENSSL_POST300) #pragma GCC diagnostic pop #endif #if defined(LIB_TPM2_OPENSSL_OPENSSL_POST300) #include #include static CK_RV get_RSA_evp_pubkey(CK_ATTRIBUTE_PTR e_attr, CK_ATTRIBUTE_PTR n_attr, EVP_PKEY **out_pkey) { CK_RV rv = CKR_GENERAL_ERROR; OSSL_PARAM *params = NULL; OSSL_PARAM_BLD *bld = NULL; EVP_PKEY_CTX *evp_ctx = NULL; BIGNUM *e = BN_bin2bn(e_attr->pValue, e_attr->ulValueLen, NULL); if (!e) { SSL_UTIL_LOGE("BN_bin2bn for e"); return rv; } BIGNUM *n = BN_bin2bn(n_attr->pValue, n_attr->ulValueLen, NULL); if (!n) { SSL_UTIL_LOGE("BN_bin2bn for n"); goto out; } bld = OSSL_PARAM_BLD_new(); if (!bld) { SSL_UTIL_LOGE("OSSL_PARAM_BLD_new"); goto out; } if (OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_RSA_E, e) != 1) { SSL_UTIL_LOGE("OSSL_PARAM_BLD_push_BN(OSSL_PKEY_PARAM_RSA_E)"); goto out; } if (OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_RSA_N, n) != 1) { SSL_UTIL_LOGE("OSSL_PARAM_BLD_push_BN(OSSL_PKEY_PARAM_RSA_N)"); goto out; } params = OSSL_PARAM_BLD_to_param(bld); if (!params) { SSL_UTIL_LOGE("OSSL_PARAM_BLD_to_param"); goto out; } /* convert params to EVP key */ evp_ctx = EVP_PKEY_CTX_new_from_name(NULL, "RSA", NULL); if (!evp_ctx) { SSL_UTIL_LOGE("EVP_PKEY_CTX_new_id"); goto out; } int rc = EVP_PKEY_fromdata_init(evp_ctx); if (rc != 1) { SSL_UTIL_LOGE("EVP_PKEY_fromdata_init"); goto out; } rc = EVP_PKEY_fromdata(evp_ctx, out_pkey, EVP_PKEY_PUBLIC_KEY, params); if (rc != 1) { SSL_UTIL_LOGE("EVP_PKEY_fromdata"); EVP_PKEY_CTX_free(evp_ctx); goto out; } rv = CKR_OK; out: EVP_PKEY_CTX_free(evp_ctx); BN_free(n); BN_free(e); OSSL_PARAM_BLD_free(bld); OSSL_PARAM_free(params); return rv; } static CK_RV get_EC_evp_pubkey(CK_ATTRIBUTE_PTR ecparams, CK_ATTRIBUTE_PTR ecpoint, EVP_PKEY **out_pkey) { CK_RV rv = CKR_GENERAL_ERROR; EVP_PKEY_CTX *evp_ctx = NULL; OSSL_PARAM *params = NULL; OSSL_PARAM_BLD *bld = NULL; /* * The simplest way I have found to deal with this is to convert the ASN1 object in * the ecparams attribute (was done previously with d2i_ECParameters) is to a nid and * then take the int nid and convert it to a friendly name like prime256v1. * EVP_PKEY_fromdata can handle group by name. * * Per the spec this is "DER-encoding of an ANSI X9.62 Parameters value". */ int curve_id = 0; CK_RV rc = ssl_util_params_to_nid(ecparams, &curve_id); if (rc != CKR_OK) { LOGE("Could not get nid from params"); return rc; } /* Per the spec CKA_EC_POINT attribute is the "DER-encoding of ANSI X9.62 ECPoint value Q */ const unsigned char *x = ecpoint->pValue; ASN1_OCTET_STRING *os = d2i_ASN1_OCTET_STRING(NULL, &x, ecpoint->ulValueLen); if (!os) { SSL_UTIL_LOGE("d2i_ASN1_OCTET_STRING: %s"); return rv; } bld = OSSL_PARAM_BLD_new(); if (!bld) { SSL_UTIL_LOGE("OSSL_PARAM_BLD_new"); goto out; } if (OSSL_PARAM_BLD_push_utf8_string(bld, OSSL_PKEY_PARAM_GROUP_NAME, (char *)OBJ_nid2sn(curve_id), 0) != 1) { SSL_UTIL_LOGE("OSSL_PARAM_BLD_push_utf8_string(OSSL_PKEY_PARAM_GROUP_NAME)"); goto out; } if (OSSL_PARAM_BLD_push_octet_string(bld, OSSL_PKEY_PARAM_PUB_KEY, os->data, os->length) != 1) { SSL_UTIL_LOGE("OSSL_PARAM_BLD_push_octet_string(OSSL_PKEY_PARAM_PUB_KEY)"); goto out; } params = OSSL_PARAM_BLD_to_param(bld); if (!params) { SSL_UTIL_LOGE("OSSL_PARAM_BLD_to_param"); goto out; } /* convert params to EVP key */ evp_ctx = EVP_PKEY_CTX_new_id(EVP_PKEY_EC, NULL); if (!evp_ctx) { SSL_UTIL_LOGE("EVP_PKEY_CTX_new_id"); goto out; } int ossl_rc = EVP_PKEY_fromdata_init(evp_ctx); if (ossl_rc != 1) { SSL_UTIL_LOGE("EVP_PKEY_fromdata_init: %s"); goto out; } ossl_rc = EVP_PKEY_fromdata(evp_ctx, out_pkey, EVP_PKEY_PUBLIC_KEY, params); if (ossl_rc != 1) { SSL_UTIL_LOGE("EVP_PKEY_fromdata"); goto out; } out: OPENSSL_free(os); OSSL_PARAM_BLD_free(bld); OSSL_PARAM_free(params); EVP_PKEY_CTX_free(evp_ctx); return CKR_OK; } #else static CK_RV get_RSA_evp_pubkey(CK_ATTRIBUTE_PTR e_attr, CK_ATTRIBUTE_PTR n_attr, EVP_PKEY **out_pkey) { BIGNUM *e = BN_bin2bn(e_attr->pValue, e_attr->ulValueLen, NULL); if (!e) { LOGE("Could not convert exponent to bignum"); return CKR_GENERAL_ERROR; } BIGNUM *n = BN_bin2bn(n_attr->pValue, n_attr->ulValueLen, NULL); if (!n) { LOGE("Could not convert modulus to bignum"); BN_free(e); return CKR_GENERAL_ERROR; } RSA *rsa = RSA_new(); if (!rsa) { LOGE("oom"); return CKR_HOST_MEMORY; } int rc = RSA_set0_key(rsa, n, e, NULL); if (!rc) { LOGE("Could not set modulus and exponent to OSSL RSA key"); BN_free(n); BN_free(e); RSA_free(rsa); return CKR_GENERAL_ERROR; } /* assigned to RSA key */ n = e = NULL; EVP_PKEY *pkey = EVP_PKEY_new(); if (!pkey) { SSL_UTIL_LOGE("EVP_PKEY_new"); RSA_free(rsa); return CKR_GENERAL_ERROR; } rc = EVP_PKEY_assign_RSA(pkey, rsa); if (rc != 1) { RSA_free(rsa); EVP_PKEY_free(pkey); return CKR_GENERAL_ERROR; } *out_pkey = pkey; return CKR_OK; } static CK_RV get_EC_evp_pubkey(CK_ATTRIBUTE_PTR ecparams, CK_ATTRIBUTE_PTR ecpoint, EVP_PKEY **out_pkey) { EC_KEY *ecc = EC_KEY_new(); if (!ecc) { LOGE("oom"); return CKR_HOST_MEMORY; } /* set params */ const unsigned char *x = ecparams->pValue; EC_KEY *k = d2i_ECParameters(&ecc, &x, ecparams->ulValueLen); if (!k) { SSL_UTIL_LOGE("Could not update key with EC Parameters"); EC_KEY_free(ecc); return CKR_GENERAL_ERROR; } /* set point */ x = ecpoint->pValue; ASN1_OCTET_STRING *os = d2i_ASN1_OCTET_STRING(NULL, &x, ecpoint->ulValueLen); if (os) { x = os->data; k = o2i_ECPublicKey(&ecc, &x, os->length); ASN1_STRING_free(os); if (!k) { SSL_UTIL_LOGE("Could not update key with EC Points"); EC_KEY_free(ecc); return CKR_GENERAL_ERROR; } } EVP_PKEY *pkey = EVP_PKEY_new(); if (!pkey) { SSL_UTIL_LOGE("EVP_PKEY_new"); EC_KEY_free(ecc); return CKR_GENERAL_ERROR; } int rc = EVP_PKEY_assign_EC_KEY(pkey, ecc); if (!rc) { SSL_UTIL_LOGE("Could not set pkey with ec key"); EC_KEY_free(ecc); EVP_PKEY_free(pkey); return CKR_GENERAL_ERROR; } *out_pkey = pkey; return CKR_OK; } #endif CK_RV ssl_util_attrs_to_evp(attr_list *attrs, EVP_PKEY **outpkey) { CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_KEY_TYPE); if (!a) { LOGE("Expected object to have attribute CKA_KEY_TYPE"); return CKR_KEY_TYPE_INCONSISTENT; } CK_KEY_TYPE key_type = CKK_RSA; CK_RV rv = attr_CK_KEY_TYPE(a, &key_type); if (rv != CKR_OK) { LOGE("Could not convert CK_KEY_TYPE"); return rv; } else if (key_type == CKK_SHA_1_HMAC || key_type == CKK_SHA256_HMAC || key_type == CKK_SHA384_HMAC || key_type == CKK_SHA512_HMAC || key_type == CKK_GENERIC_SECRET) { /* Ignore HMAC keys no public operation possible */ *outpkey = NULL; return CKR_OK; } EVP_PKEY *pkey = NULL; if (key_type == CKK_EC) { CK_ATTRIBUTE_PTR ecparams = attr_get_attribute_by_type(attrs, CKA_EC_PARAMS); if (!ecparams) { LOGE("ECC Key must have attribute CKA_EC_PARAMS"); return CKR_GENERAL_ERROR; } CK_ATTRIBUTE_PTR ecpoint = attr_get_attribute_by_type(attrs, CKA_EC_POINT); if (!ecpoint) { LOGE("ECC Key must have attribute CKA_EC_POINT"); return CKR_GENERAL_ERROR; } rv = get_EC_evp_pubkey(ecparams, ecpoint, &pkey); if (rv != CKR_OK) { return rv; } } else if (key_type == CKK_RSA) { CK_ATTRIBUTE_PTR exp = attr_get_attribute_by_type(attrs, CKA_PUBLIC_EXPONENT); if (!exp) { LOGE("RSA Object must have attribute CKA_PUBLIC_EXPONENT"); return CKR_GENERAL_ERROR; } CK_ATTRIBUTE_PTR mod = attr_get_attribute_by_type(attrs, CKA_MODULUS); if (!mod) { LOGE("RSA Object must have attribute CKA_MODULUS"); return CKR_GENERAL_ERROR; } rv = get_RSA_evp_pubkey(exp, mod, &pkey); if (rv != CKR_OK) { return rv; } } else { LOGE("Invalid CKA_KEY_TYPE, got: %lu", key_type); return CKR_KEY_TYPE_INCONSISTENT; } assert(pkey); *outpkey = pkey; return CKR_OK; } CK_RV ssl_util_encrypt(EVP_PKEY *pkey, int padding, twist label, const EVP_MD *md, CK_BYTE_PTR ptext, CK_ULONG ptextlen, CK_BYTE_PTR ctext, CK_ULONG_PTR ctextlen) { assert(pkey); CK_RV rv = CKR_GENERAL_ERROR; if (!ctext) { *ctextlen = EVP_PKEY_size(pkey); return CKR_OK; } EVP_PKEY_CTX *pkey_ctx = EVP_PKEY_CTX_new(pkey, NULL); if (!pkey_ctx) { LOGE("OOM"); return CKR_HOST_MEMORY; } int rc = EVP_PKEY_encrypt_init(pkey_ctx); if (rc <= 0) { SSL_UTIL_LOGE("EVP_PKEY_encrypt_init"); goto error; } if (padding) { rc = EVP_PKEY_CTX_set_rsa_padding(pkey_ctx, padding); if (rc <= 0) { SSL_UTIL_LOGE("Could not set padding"); goto error; } } if (label) { assert(padding == RSA_PKCS1_OAEP_PADDING); /* make a copy since OSSL calls OSSL_free on label */ size_t len = twist_len(label); char *label2 = OPENSSL_memdup(label, len); if (!label2) { LOGE("oom"); return CKR_HOST_MEMORY; } rc = EVP_PKEY_CTX_set0_rsa_oaep_label(pkey_ctx, label2, len); if (rc <= 0) { SSL_UTIL_LOGE("EVP_PKEY_CTX_set0_rsa_oaep_label"); goto error; } } if (md) { assert(padding == RSA_PKCS1_OAEP_PADDING); rc = EVP_PKEY_CTX_set_rsa_oaep_md(pkey_ctx, md); if (rc <= 0) { SSL_UTIL_LOGE("EVP_PKEY_CTX_set_rsa_oaep_md"); goto error; } } size_t outlen = *ctextlen; rc = EVP_PKEY_encrypt(pkey_ctx, ctext, &outlen, ptext, ptextlen); if (rc <= 0) { unsigned long r = ERR_get_error(); int reason = ERR_GET_REASON(r); if (reason == EVP_R_BUFFER_TOO_SMALL) { *ctextlen = EVP_PKEY_size(pkey); rv = CKR_BUFFER_TOO_SMALL; } else { LOGE("Could not perform RSA public encrypt: %s", ERR_error_string(r, NULL)); } goto error; } *ctextlen = outlen; rv = CKR_OK; error: EVP_PKEY_CTX_free(pkey_ctx); return rv; } CK_RV ssl_util_setup_evp_pkey_ctx(EVP_PKEY *pkey, int padding, const EVP_MD *md, fn_EVP_PKEY_init init_fn, EVP_PKEY_CTX **outpkey_ctx) { EVP_PKEY_CTX *pkey_ctx = EVP_PKEY_CTX_new(pkey, NULL); if (!pkey_ctx) { SSL_UTIL_LOGE("EVP_PKEY_CTX_new failed"); return CKR_GENERAL_ERROR; } int rc = init_fn(pkey_ctx); if (!rc) { SSL_UTIL_LOGE("EVP_PKEY_verify_init failed"); goto error; } if (padding) { rc = EVP_PKEY_CTX_set_rsa_padding(pkey_ctx, padding); if (!rc) { SSL_UTIL_LOGE("EVP_PKEY_CTX_set_rsa_padding failed"); goto error; } } if (md) { rc = EVP_PKEY_CTX_set_signature_md(pkey_ctx, md); if (!rc) { SSL_UTIL_LOGE("EVP_PKEY_CTX_set_signature_md failed"); goto error; } } *outpkey_ctx = pkey_ctx; return CKR_OK; error: EVP_PKEY_CTX_free(pkey_ctx); return CKR_GENERAL_ERROR; } static CK_RV sig_verify(EVP_PKEY_CTX *ctx, const unsigned char *sig, size_t siglen, const unsigned char *tbs, size_t tbslen) { CK_RV rv = CKR_GENERAL_ERROR; int rc = EVP_PKEY_verify(ctx, sig, siglen, tbs, tbslen); if (rc < 0) { SSL_UTIL_LOGE("EVP_PKEY_verify failed"); } else if (rc == 1) { rv = CKR_OK; } else { rv = CKR_SIGNATURE_INVALID; } return rv; } static CK_RV create_ecdsa_sig(CK_BYTE_PTR sig, CK_ULONG siglen, unsigned char **outbuf, size_t *outlen) { if (siglen & 1) { LOGE("Expected ECDSA signature length to be even, got : %lu", siglen); return CKR_SIGNATURE_LEN_RANGE; } size_t len = siglen >> 1; unsigned char *rbuf = sig; unsigned char *sbuf = &sig[len]; BIGNUM *r = BN_bin2bn(rbuf, len, NULL); if (!r) { LOGE("Could not make bignum for r"); return CKR_GENERAL_ERROR; } BIGNUM *s = BN_bin2bn(sbuf, len, NULL); if (!s) { LOGE("Could not make bignum for s"); BN_free(r); return CKR_GENERAL_ERROR; } ECDSA_SIG *ossl_sig = ECDSA_SIG_new(); if (!ossl_sig) { LOGE("oom"); return CKR_HOST_MEMORY; } int rc = ECDSA_SIG_set0(ossl_sig, r, s); if (!rc) { LOGE("Could not call ECDSA_SIG_set0"); ECDSA_SIG_free(ossl_sig); return CKR_GENERAL_ERROR; } int sig_len =i2d_ECDSA_SIG(ossl_sig, NULL); if (sig_len <= 0) { if (rc < 0) { SSL_UTIL_LOGE("ECDSA_do_verify failed"); } else { LOGE("Expected length to be greater than 0"); } ECDSA_SIG_free(ossl_sig); return CKR_GENERAL_ERROR; } unsigned char *buf = calloc(1, sig_len); if (!buf) { LOGE("oom"); ECDSA_SIG_free(ossl_sig); return CKR_HOST_MEMORY; } unsigned char *p = buf; int sig_len2 = i2d_ECDSA_SIG(ossl_sig, &p); if (sig_len2 < 0) { SSL_UTIL_LOGE("ECDSA_do_verify failed"); ECDSA_SIG_free(ossl_sig); free(buf); return CKR_GENERAL_ERROR; } assert(sig_len == sig_len2); ECDSA_SIG_free(ossl_sig); *outbuf = buf; *outlen = sig_len; return CKR_OK; } static CK_RV do_sig_verify_ec(EVP_PKEY *pkey, const EVP_MD *md, CK_BYTE_PTR digest, CK_ULONG digest_len, CK_BYTE_PTR signature, CK_ULONG signature_len) { /* * OpenSSL expects ASN1 framed signatures, PKCS11 does flat * R + S signatures, so convert it to ASN1 framing. * See: * https://github.com/tpm2-software/tpm2-pkcs11/issues/277 * For details. */ unsigned char *buf = NULL; size_t buflen = 0; CK_RV rv = create_ecdsa_sig(signature, signature_len, &buf, &buflen); if (rv != CKR_OK) { return rv; } EVP_PKEY_CTX *pkey_ctx = NULL; rv = ssl_util_setup_evp_pkey_ctx(pkey, 0, md, EVP_PKEY_verify_init, &pkey_ctx); if (rv != CKR_OK) { free(buf); return rv; } rv = sig_verify(pkey_ctx, buf, buflen, digest, digest_len); EVP_PKEY_CTX_free(pkey_ctx); free(buf); return rv; } static CK_RV do_sig_verify_rsa(EVP_PKEY *pkey, int padding, const EVP_MD *md, CK_BYTE_PTR digest, CK_ULONG digest_len, CK_BYTE_PTR signature, CK_ULONG signature_len) { CK_RV rv = CKR_GENERAL_ERROR; EVP_PKEY_CTX *pkey_ctx = NULL; rv = ssl_util_setup_evp_pkey_ctx(pkey, padding, md, EVP_PKEY_verify_init, &pkey_ctx); if (rv != CKR_OK) { return rv; } rv = sig_verify(pkey_ctx, signature, signature_len, digest, digest_len); EVP_PKEY_CTX_free(pkey_ctx); return rv; } CK_RV ssl_util_sig_verify(EVP_PKEY *pkey, int padding, const EVP_MD *md, CK_BYTE_PTR digest, CK_ULONG digest_len, CK_BYTE_PTR signature, CK_ULONG signature_len) { int type = EVP_PKEY_type(EVP_PKEY_id(pkey)); switch (type) { case EVP_PKEY_RSA: return do_sig_verify_rsa(pkey, padding, md, digest, digest_len, signature, signature_len); case EVP_PKEY_EC: return do_sig_verify_ec(pkey, md, digest, digest_len, signature, signature_len); default: LOGE("Unknown PKEY type, got: %d", type); return CKR_GENERAL_ERROR; } } CK_RV ssl_util_verify_recover(EVP_PKEY *pkey, int padding, const EVP_MD *md, CK_BYTE_PTR signature, CK_ULONG signature_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len) { int type = EVP_PKEY_type(EVP_PKEY_id(pkey)); if (type != EVP_PKEY_RSA) { LOGE("Cannot perform verify recover on non RSA key types"); return CKR_GENERAL_ERROR; } EVP_PKEY_CTX *pkey_ctx = NULL; CK_RV rv = ssl_util_setup_evp_pkey_ctx(pkey, padding, md, EVP_PKEY_verify_recover_init, &pkey_ctx); if (rv != CKR_OK) { return rv; } int rc = EVP_PKEY_verify_recover(pkey_ctx, data, (size_t*) data_len, signature, signature_len); if (rc < 0) { SSL_UTIL_LOGE("EVP_PKEY_verify_recover failed"); } else if (rc == 1) { rv = CKR_OK; } else { rv = CKR_SIGNATURE_INVALID; } EVP_PKEY_CTX_free(pkey_ctx); return rv; } twist ssl_util_hash_pass(const twist pin, const twist salt) { twist out = NULL; unsigned char md[SHA256_DIGEST_LENGTH]; EVP_MD_CTX *ctx = EVP_MD_CTX_new(); if (!ctx) { SSL_UTIL_LOGE("EVP_MD_CTX_new"); return NULL; } int rc = EVP_DigestInit(ctx, EVP_sha256()); if (rc != 1) { SSL_UTIL_LOGE("EVP_DigestInit"); goto error; } rc = EVP_DigestUpdate(ctx, pin, twist_len(pin)); if (rc != 1) { SSL_UTIL_LOGE("EVP_DigestUpdate"); goto error; } rc = EVP_DigestUpdate(ctx, salt, twist_len(salt)); if (rc != 1) { SSL_UTIL_LOGE("EVP_DigestUpdate"); goto error; } unsigned int len = sizeof(md); rc = EVP_DigestFinal(ctx, md, &len); if (rc != 1) { SSL_UTIL_LOGE("EVP_DigestFinal"); goto error; } /* truncate the password to 32 characters */ out = twist_hex_new((char *)md, sizeof(md)/2); error: EVP_MD_CTX_free(ctx); return out; } CK_RV ssl_util_params_to_nid(CK_ATTRIBUTE_PTR ecparams, int *nid) { const unsigned char *p = ecparams->pValue; ASN1_OBJECT *a = d2i_ASN1_OBJECT(NULL, &p, ecparams->ulValueLen); if (!a) { LOGE("Unknown CKA_EC_PARAMS value"); return CKR_ATTRIBUTE_VALUE_INVALID; } *nid = OBJ_obj2nid(a); ASN1_OBJECT_free(a); return CKR_OK; } tpm2-pkcs11-1.9.1/src/lib/token.c0000644000175100017510000003713014667615111012024 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include "attrs.h" #include "backend.h" #include "checks.h" #include "list.h" #include "mech.h" #include "object.h" #include "pkcs11.h" #include "session.h" #include "session_table.h" #include "slot.h" #include "token.h" #include "utils.h" static const CK_UTF8CHAR TPM2_TOKEN_SERIAL_NUMBER[] = "0000000000000000"; void pobject_config_free(pobject_config *c) { if (c->is_transient) { free(c->template_name); } else { twist_free(c->blob); } memset(c, 0, sizeof(*c)); } DEBUG_VISIBILITY void pobject_free(pobject *pobj) { twist_free(pobj->objauth); pobject_config_free(&pobj->config); memset(pobj, 0, sizeof(*pobj)); } WEAK CK_RV token_min_init(token *t) { /* * Initialize the per-token session table */ CK_RV rv = session_table_new(&t->s_table); if (rv != CKR_OK) { LOGE("Could not initialize session table"); return rv; } /* * Initialize the per-token tpm context */ rv = backend_ctx_new(t); if (rv != CKR_OK) { LOGE("Could not initialize tpm ctx: 0x%lx", rv); return rv; } /* * Initialize the per-token mechanism details table */ rv = mdetail_new(t->tctx, &t->mdtl, t->config.pss_sigs_good); if (rv != CKR_OK) { LOGE("Could not initialize tpm mdetails: 0x%lx", rv); return rv; } rv = mutex_create(&t->mutex); if (rv != CKR_OK) { LOGE("Could not initialize mutex: 0x%lx", rv); } return rv; } void token_reset(token *t) { /* forget the primary object so it can be reinitialized as needed */ pobject_free(&t->pobject); backend_ctx_reset(t); /* * the rest of the state can live so we don't need to free/realloc it * Beware of who holds the mutex! */ } void token_free_list(token **tok_ptr, size_t *ptr_len) { size_t len = *ptr_len; token *t = *tok_ptr; *tok_ptr = NULL; *ptr_len = 0; if (!t) { return; } size_t i; for (i=0; i < len; i++) { token_free(&t[i]); } memset(t, 0, sizeof(*t) * len); free(t); } WEAK CK_RV token_add_tobject_last(token *tok, tobject *t) { if (!tok->tobjects.tail) { t->l.prev = t->l.next = NULL; tok->tobjects.tail = tok->tobjects.head = t; t->obj_handle = 1; return CKR_OK; } CK_OBJECT_HANDLE handle = tok->tobjects.tail->obj_handle; if (handle == ~((CK_OBJECT_HANDLE)0)) { LOGE("Too many objects for token, id: %u, label: %*s", tok->id, (int)sizeof(tok->label), tok->label); return CKR_OK; } handle++; t->obj_handle = handle; tok->tobjects.tail->l.next = &t->l; t->l.prev = &tok->tobjects.tail->l; tok->tobjects.tail = t; return CKR_OK; } CK_RV token_add_tobject(token *tok, tobject *t) { if (!tok->tobjects.head) { t->l.prev = t->l.next = NULL; tok->tobjects.tail = tok->tobjects.head = t; t->obj_handle = 1; return CKR_OK; } /* minimum potential handle to add */ CK_OBJECT_HANDLE index = 2; list *cur = &tok->tobjects.head->l; while(cur) { if (index == 0) { LOGE("Rollover, too many objects for token, id: %u, label: %*s", tok->id, (int)sizeof(tok->label), tok->label); return CKR_OK; } tobject *c = list_entry(cur, tobject, l); /* end of list, just add it updating the tail pointer */ if (!c->l.next) { t->obj_handle = index; t->l.prev = cur; cur->next = &t->l; tok->tobjects.tail = t; return CKR_OK; } tobject *n = list_entry(c->l.next, tobject, l); /* gap */ if (n->obj_handle - c->obj_handle > 1) { assert(index < n->obj_handle && index > c->obj_handle); t->obj_handle = index; /* new object should point to next and previous */ t->l.next = &n->l; t->l.prev = cur; /* existing object ahead should point back at new object */ n->l.prev = &t->l; /* existing object behind should point forward at new object */ c->l.next = &t->l; return CKR_OK; } index++; cur = cur->next; } LOGE("Could not insert tobject into token"); return CKR_GENERAL_ERROR; } CK_RV token_find_tobject(token *tok, CK_OBJECT_HANDLE handle, tobject **tobj) { assert(tok); assert(tobj); if (!tok->tobjects.head) { return CKR_KEY_HANDLE_INVALID; } list *cur = &tok->tobjects.head->l; while(cur) { tobject *c = list_entry(cur, tobject, l); if (c->obj_handle == handle) { *tobj = c; return CKR_OK; } cur = cur->next; } return CKR_KEY_HANDLE_INVALID; } void token_rm_tobject(token *tok, tobject *t) { assert(tok->tobjects.head); assert(tok->tobjects.tail); /* only item in the list */ if (t == tok->tobjects.tail && t == tok->tobjects.head) { /* just empty the list */ tok->tobjects.head = tok->tobjects.tail = NULL; } else if (t == tok->tobjects.head) { tok->tobjects.head = tok->tobjects.head->l.next ? list_entry(tok->tobjects.head->l.next, tobject, l) : NULL; } else if (t == tok->tobjects.tail) { /* * remove the tail by setting the tail equal to the previous list object * and setting the new tails next pointer to null as it's pointing to the * old tail location. */ tok->tobjects.tail = list_entry(tok->tobjects.tail->l.prev, tobject, l); tok->tobjects.tail->l.next = NULL; } else { /* * the previous objects next pointer should point past * the removed object by pointing to it's next */ t->l.prev->next = t->l.next; t->l.next->prev = t->l.prev; } t->l.next = t->l.prev = NULL; } void token_config_free(token_config *c) { if (!c) { return; } free(c->tcti); memset(c, 0, sizeof(*c)); } void token_free(token *t) { /* * for each session remove them */ session_table_free_ctx_all(t); session_table_free(t->s_table); t->s_table = NULL; if (t->pobject.config.is_transient) { tpm_flushcontext(t->tctx, t->pobject.handle); } pobject_free(&t->pobject); if (t->tobjects.head) { list *cur = &t->tobjects.head->l; while(cur) { tobject *tobj = list_entry(cur, tobject, l); cur = cur->next; tobject_free(tobj); } } t->tobjects.head = t->tobjects.tail = NULL; backend_ctx_free(t); t->tctx = NULL; mutex_destroy(t->mutex); t->mutex = NULL; token_config_free(&t->config); mdetail_free(&t->mdtl); } CK_RV token_get_info (token *t, CK_TOKEN_INFO *info) { check_pointer(t); check_pointer(info); int rval; time_t rawtime; struct tm tminfo; memset(info, 0, sizeof(*info)); rval = tpm_get_token_info(t->tctx, info); if (rval != CKR_OK) { return CKR_GENERAL_ERROR; } // Support Flags info->flags = CKF_RNG; if (!t->config.empty_user_pin) { info->flags |= CKF_LOGIN_REQUIRED; } if (t->config.is_initialized) { info->flags |= CKF_TOKEN_INITIALIZED; info->flags |= CKF_USER_PIN_INITIALIZED; } // Identification str_padded_copy(info->label, t->label); str_padded_copy(info->serialNumber, TPM2_TOKEN_SERIAL_NUMBER); // Memory: TODO not sure what memory values should go here, the platform? info->ulFreePrivateMemory = ~0; info->ulFreePublicMemory = ~0; info->ulTotalPrivateMemory = ~0; info->ulTotalPublicMemory = ~0; // Maximums and Minimums info->ulMaxPinLen = 128; info->ulMinPinLen = 0; info->ulMaxSessionCount = MAX_NUM_OF_SESSIONS; info->ulMaxRwSessionCount = MAX_NUM_OF_SESSIONS; // Session session_table_get_cnt(t->s_table, &info->ulSessionCount, &info->ulRwSessionCount, NULL); // Time time (&rawtime); gmtime_r(&rawtime, &tminfo); strftime ((char *)info->utcTime, sizeof(info->utcTime), "%Y%m%d%H%M%S", &tminfo); // The last two bytes must be '0', not NULL/'\0' terminated. info->utcTime[14] = '0'; info->utcTime[15] = '0'; return CKR_OK; } CK_RV token_init(token *t, CK_BYTE_PTR pin, CK_ULONG pin_len, CK_BYTE_PTR label) { check_pointer(pin); check_pointer(label); CK_RV rv = CKR_GENERAL_ERROR; twist newauth = NULL; twist newsalthex = NULL; /* * validate that label doesn't have embedded NULL bytes */ void *found = memchr(label, '\0', sizeof(t->label)); if (found) { LOGE("Label has embedded 0 bytes"); return CKR_ARGUMENTS_BAD; } if (t->config.is_initialized) { LOGE("Token already initialized"); return CKR_ARGUMENTS_BAD; } twist sopin = twistbin_new(pin, pin_len); if (!sopin) { LOGE("oom"); return CKR_HOST_MEMORY; } twist hexwrappingkey = utils_get_rand_hex_str(32); if (!sopin) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto out; } rv = utils_setup_new_object_auth(sopin, &newauth, &newsalthex); if (rv != CKR_OK) { goto error; } memcpy(t->label, label, sizeof(t->label)); rv = backend_create_token_seal(t, hexwrappingkey, newauth, newsalthex); if (rv != CKR_OK) { LOGE("Could not create new token"); goto error; } /* Ownership of newsalthex is transferred in the previous call */ newsalthex = NULL; rv = slot_add_uninit_token(); if (rv != CKR_OK) { LOGW("Could not add uninitialized token"); } rv = CKR_OK; out: twist_free(sopin); twist_free(newauth); twist_free(newsalthex); twist_free(hexwrappingkey); return rv; error: token_reset(t); goto out; } bool token_is_any_user_logged_in(token *tok) { return tok->login_state != token_no_one_logged_in; } bool token_is_user_logged_in(token *tok) { return tok->login_state & token_user_logged_in; } bool token_is_so_logged_in(token *tok) { return tok->login_state & token_so_logged_in; } void token_lock(token *t) { mutex_lock_fatal(t->mutex); } void token_unlock(token *t) { mutex_unlock_fatal(t->mutex); } CK_RV token_setpin(token *tok, CK_UTF8CHAR_PTR oldpin, CK_ULONG oldlen, CK_UTF8CHAR_PTR newpin, CK_ULONG newlen) { CK_RV rv = CKR_GENERAL_ERROR; /* pin data */ twist toldpin = NULL; twist tnewpin = NULL; bool is_so = token_is_so_logged_in(tok); toldpin = twistbin_new(oldpin, oldlen); if (!toldpin) { rv = CKR_HOST_MEMORY; goto out; } tnewpin = twistbin_new(newpin, newlen); if (!tnewpin) { rv = CKR_HOST_MEMORY; goto out; } /* Clear empty-user-pin if a new user PIN is being set */ if (!is_so && newlen && tok->config.empty_user_pin) { tok->config.empty_user_pin = false; rv = backend_update_token_config(tok); if (rv != CKR_OK) { LOGE("Clearing empty user PIN state"); goto out; } } rv = backend_token_changeauth(tok, !is_so, toldpin, tnewpin); if (rv != CKR_OK) { LOGE("Changing token auth"); goto out; } if (!is_so && !newlen && !tok->config.empty_user_pin) { tok->config.empty_user_pin = true; rv = backend_update_token_config(tok); if (rv != CKR_OK) { /* Failing to set empty-user-pin is not fatal, as the PIN changed */ LOGW("Setting empty user PIN state failed"); } } out: twist_free(toldpin); twist_free(tnewpin); return rv; } CK_RV token_initpin(token *tok, CK_UTF8CHAR_PTR newpin, CK_ULONG newlen) { CK_RV rv = CKR_GENERAL_ERROR; twist tnewpin = NULL; twist newkeysalthex = NULL; twist newsalthex = NULL; twist newauthhex = NULL; twist sealdata = NULL; tnewpin = twistbin_new(newpin, newlen); if (!tnewpin) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto out; } /* generate a new auth */ rv = utils_setup_new_object_auth(tnewpin, &newauthhex, &newsalthex); if (rv != CKR_OK) { goto out; } /* we store the seal data in hex form, but it's in binary form in memory, so convert it */ sealdata = twist_hexlify(tok->wrappingkey); if (!sealdata) { LOGE("oom"); goto out; } /* Clear empty-user-pin if a new user PIN is being set */ if (newlen && tok->config.empty_user_pin) { tok->config.empty_user_pin = false; rv = backend_update_token_config(tok); if (rv != CKR_OK) { LOGE("Clearing empty user PIN state"); goto out; } } rv = backend_init_user(tok, sealdata, newauthhex, newsalthex); if (rv != CKR_OK) { goto out; } if (!newlen && !tok->config.empty_user_pin) { tok->config.empty_user_pin = true; rv = backend_update_token_config(tok); if (rv != CKR_OK) { /* Failing to set empty-user-pin is not fatal, as the user was initialized */ LOGW("Setting empty user PIN state failed"); } } rv = CKR_OK; out: /* If the function failed, then these pointers ARE NOT CLAIMED and must be free'd */ if (rv != CKR_OK) { twist_free(newkeysalthex); twist_free(newsalthex); } twist_free(sealdata); twist_free(newauthhex); twist_free(tnewpin); return rv; } CK_RV token_load_object(token *tok, CK_OBJECT_HANDLE key, tobject **loaded_tobj) { CK_RV rv; tpm_ctx *tpm = tok->tctx; /* Unseal the wrapping key, if the user PIN is empty */ if (!tok->wrappingkey && tok->config.empty_user_pin) { twist tpin = twistbin_new("", 0); if (!tpin) { return CKR_HOST_MEMORY; } rv = backend_token_unseal_wrapping_key(tok, true, tpin); twist_free(tpin); if (rv != CKR_OK) { LOGE("Error unsealing wrapping key"); return rv; } } rv = token_find_tobject(tok, key, loaded_tobj); if (rv != CKR_OK) { return rv; } tobject *tobj = *loaded_tobj; rv = tobject_user_increment(tobj); if (rv != CKR_OK) { return rv; } /* this might not be the best place for this check */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(tobj->attrs, CKA_CLASS); if (!a) { LOGE("All objects expected to have CKA_CLASS, missing" " for tobj id: %u", tobj->id); return CKR_GENERAL_ERROR; } CK_OBJECT_CLASS v; rv = attr_CK_OBJECT_CLASS(a, &v); if (rv != CKR_OK) { return rv; } if (v != CKO_PRIVATE_KEY && v != CKO_PUBLIC_KEY && v != CKO_SECRET_KEY) { LOGE("Cannot use tobj id %u in a crypto operation", tobj->id); return CKR_KEY_HANDLE_INVALID; } /* * The object may already be loaded by the TPM or may just be * a public key object not-resident in the TPM. */ if (tobj->tpm_handle || !tobj->pub) { *loaded_tobj = tobj; return CKR_OK; } rv = tpm_loadobj( tpm, tok->pobject.handle, tok->pobject.objauth, tobj->pub, tobj->priv, &tobj->tpm_handle); if (rv != CKR_OK) { return rv; } rv = utils_ctx_unwrap_objauth(tok->wrappingkey, tobj->objauth, &tobj->unsealed_auth); if (rv != CKR_OK) { LOGE("Error unwrapping tertiary object auth"); return rv; } *loaded_tobj = tobj; return CKR_OK; } tpm2-pkcs11-1.9.1/src/lib/tpm.c0000644000175100017510000037074114667615111011514 /* SPDX-License-Identifier: BSD-2-Clause */ /* config can control how other headers behave, include first */ #include "config.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "attrs.h" #include "checks.h" #include "digest.h" #include "encrypt.h" #include "log.h" #include "mutex.h" #include "pkcs11.h" #include "ssl_util.h" #include "tpm.h" #ifndef ESAPI_MANAGE_FLAGS #define ESAPI_MANAGE_FLAGS 0 #endif #define DEFAULT_SEAL_TEMPLATE { \ .size = 0, \ .publicArea = { \ .type = TPM2_ALG_KEYEDHASH, \ .nameAlg = TPM2_ALG_SHA256, \ .objectAttributes = ( \ TPMA_OBJECT_USERWITHAUTH | \ TPMA_OBJECT_FIXEDTPM | \ TPMA_OBJECT_FIXEDPARENT \ ), \ .authPolicy = { \ .size = 0, \ }, \ .parameters.keyedHashDetail = { \ .scheme = { \ .scheme = TPM2_ALG_NULL, \ .details = { \ .hmac = { \ .hashAlg = TPM2_ALG_SHA256 \ } \ } \ } \ }, \ .unique.keyedHash = { \ .size = 0, \ .buffer = {}, \ }, \ } \ } /* * The provisioning guidance states that this 0x81000001 should be the SRK * See: * - https://trustedcomputinggroup.org/wp-content/uploads/TCG-TPM-v2.0-Provisioning-Guidance-Published-v1r1.pdf */ #define DEFAULT_SRK_HANDLE 0x81000001 /* Return code when TPM is in DA Lockout mode */ static const TPM2B_PUBLIC rsa_template = { .size = 0, .publicArea = { .type = TPM2_ALG_RSA, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT | TPMA_OBJECT_SENSITIVEDATAORIGIN | TPMA_OBJECT_USERWITHAUTH | TPMA_OBJECT_DECRYPT | TPMA_OBJECT_SIGN_ENCRYPT, .authPolicy = { .size = 0, }, .parameters.rsaDetail = { .symmetric = { .algorithm = TPM2_ALG_NULL, }, .scheme = { .scheme = TPM2_ALG_NULL }, .keyBits = 2048, .exponent = 0, }, .unique.rsa = { .size = 0, }, }, }; static const TPM2B_PUBLIC ecc_template = { .size = 0, .publicArea = { .type = TPM2_ALG_ECC, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT | TPMA_OBJECT_SENSITIVEDATAORIGIN | TPMA_OBJECT_USERWITHAUTH | TPMA_OBJECT_SIGN_ENCRYPT, .authPolicy = { .size = 0, }, .parameters.eccDetail = { .symmetric = { .algorithm = TPM2_ALG_NULL, .keyBits.aes = 0, .mode.aes = 0, }, .scheme = { .scheme = TPM2_ALG_NULL, .details = { // {.hashAlg = TPM2_ALG_SHA1} } }, .curveID = TPM2_ECC_NIST_P256, .kdf = {.scheme = TPM2_ALG_NULL,.details = {} } }, .unique.ecc = { .x = {.size = 0,.buffer = {}}, .y = {.size = 0,.buffer = {}} }, }, }; /** * Maps 4-byte manufacturer identifier to manufacturer name. */ static const char *TPM2_MANUFACTURER_MAP[][2] = { {"ATML", "Atmel"}, {"INTC", "Intel"}, {"IFX ", "Infineon"}, {"IBM ", "IBM"}, {"NTC ", "Nuvoton"}, {"STM ", "STMicro"} }; struct tpm_ctx { TSS2_TCTI_CONTEXT *tcti_ctx; ESYS_CONTEXT *esys_ctx; bool esapi_manage_session_flags; ESYS_TR hmac_session; TPMA_SESSION old_flags; TPMA_SESSION original_flags; TPMS_CAPABILITY_DATA *tpms_fixed_property_cache; TPMS_CAPABILITY_DATA *tpms_alg_cache; TPMS_CAPABILITY_DATA *tpms_cc_cache; bool did_check_for_createloaded; bool use_createloaded; bool did_check_for_encdec2; bool use_encdec2; }; #define TPM2B_INIT(xsize) { .size = xsize, } #define TPM2B_EMPTY_INIT TPM2B_INIT(0) struct tpm_op_data { tpm_ctx *ctx; tobject *tobj; CK_KEY_TYPE op_type; mdetail *mdtl; CK_MECHANISM mech; union { struct { TPMT_SIG_SCHEME sig; TPMT_RSA_DECRYPT raw; TPM2B_DATA label; } rsa; struct { TPMT_SIG_SCHEME sig; } hmac; struct { TPMI_ALG_SYM_MODE mode; TPM2B_IV iv; struct { BIGNUM *counter; } ctr; struct { CK_ULONG len; CK_BYTE data[16]; } prev; } sym; struct { TPMT_SIG_SCHEME sig; } ecc; }; }; static inline tpm_op_data *tpm_opdata_new(mdetail *mdtl, CK_MECHANISM_PTR mech) { tpm_op_data *opdata = (tpm_op_data *)calloc(1, sizeof(tpm_op_data)); if (opdata) { opdata->mdtl = mdtl; opdata->mech = *mech; } return opdata; } static ESYS_CONTEXT* esys_ctx_init(TSS2_TCTI_CONTEXT *tcti_ctx) { ESYS_CONTEXT *esys_ctx = NULL; TSS2_RC rval = Esys_Initialize(&esys_ctx, tcti_ctx, NULL); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_Initialize: 0x%x", rval); return NULL; } return esys_ctx; } static void flags_turndown(tpm_ctx *ctx, TPMA_SESSION flags) { if (ctx->esapi_manage_session_flags) { return; } TSS2_RC rc = Esys_TRSess_GetAttributes(ctx->esys_ctx, ctx->hmac_session, &ctx->old_flags); assert(rc == TPM2_RC_SUCCESS); if (rc != TSS2_RC_SUCCESS) { LOGW("Esys_TRSess_SetAttributes: 0x%x", rc); return; } assert(ctx->old_flags == ctx->original_flags); TPMA_SESSION new_flags = (ctx->old_flags & (~flags)); rc = Esys_TRSess_SetAttributes(ctx->esys_ctx, ctx->hmac_session, new_flags, 0xff); assert(rc == TSS2_RC_SUCCESS); if (rc != TSS2_RC_SUCCESS) { LOGW("Esys_TRSess_SetAttributes: 0x%x", rc); } } static void flags_restore(tpm_ctx *ctx) { if (ctx->esapi_manage_session_flags) { return; } assert(ctx->old_flags == ctx->original_flags); TSS2_RC rc = Esys_TRSess_SetAttributes(ctx->esys_ctx, ctx->hmac_session, ctx->old_flags, 0xff); assert(rc == TSS2_RC_SUCCESS); if (rc != TSS2_RC_SUCCESS) { LOGW("Esys_TRSess_SetAttributes: 0x%x", rc); } } #define SAFE_ESYS_FREE(ptr) do { Esys_Free(ptr); ctx->tpms_alg_cache = NULL; } while (0) void tpm_ctx_free(tpm_ctx *ctx) { if (!ctx) { return; } /* free the per-tpm caches of properties */ SAFE_ESYS_FREE(ctx->tpms_alg_cache); SAFE_ESYS_FREE(ctx->tpms_cc_cache); SAFE_ESYS_FREE(ctx->tpms_fixed_property_cache); Esys_Finalize(&ctx->esys_ctx); Tss2_TctiLdr_Finalize(&ctx->tcti_ctx); free(ctx); } static bool set_esys_auth(ESYS_CONTEXT *esys_ctx, ESYS_TR handle, twist auth) { TPM2B_AUTH tpm_auth = TPM2B_EMPTY_INIT; if (auth) { size_t auth_len = twist_len(auth); if (auth_len > sizeof(tpm_auth.buffer)) { LOGE("Auth value too large, got %zu expected < %zu", auth_len, sizeof(tpm_auth.buffer)); return false; } tpm_auth.size = auth_len; memcpy(tpm_auth.buffer, auth, auth_len); } TSS2_RC rval = Esys_TR_SetAuth(esys_ctx, handle, &tpm_auth); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_SetAuth: 0x%x:", rval); return false; } return true; } static bool set_esys_auth_string(ESYS_CONTEXT *esys_ctx, ESYS_TR handle, const char *auth) { TPM2B_AUTH tpm_auth = TPM2B_EMPTY_INIT; if (auth) { size_t auth_len = strlen(auth); if (auth_len > sizeof(tpm_auth.buffer)) { LOGE("Auth value too large, got %zu expected < %zu", auth_len, sizeof(tpm_auth.buffer)); return false; } tpm_auth.size = auth_len; memcpy(tpm_auth.buffer, auth, auth_len); } TSS2_RC rval = Esys_TR_SetAuth(esys_ctx, handle, &tpm_auth); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_SetAuth: 0x%x:", rval); return false; } return true; } bool tpm_session_active(tpm_ctx *ctx) { return (!!ctx->hmac_session); } CK_RV tpm_session_start(tpm_ctx *ctx, twist auth, uint32_t handle) { assert(!ctx->hmac_session); bool res = set_esys_auth(ctx->esys_ctx, handle, auth); if (!res) { return CKR_GENERAL_ERROR; } TPMT_SYM_DEF symmetric = { .algorithm = TPM2_ALG_AES, .keyBits = { .aes = 128 }, .mode = { .aes = TPM2_ALG_CFB } }; TPMA_SESSION session_attrs = TPMA_SESSION_CONTINUESESSION | TPMA_SESSION_DECRYPT | TPMA_SESSION_ENCRYPT; ESYS_TR session = ESYS_TR_NONE; TSS2_RC rc = Esys_StartAuthSession(ctx->esys_ctx, handle, //tpmkey handle, //bind ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, NULL, TPM2_SE_HMAC, &symmetric, TPM2_ALG_SHA256, &session); if (rc != TSS2_RC_SUCCESS) { LOGE("Esys_StartAuthSession: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } rc = Esys_TRSess_SetAttributes(ctx->esys_ctx, session, session_attrs, 0xff); if (rc != TSS2_RC_SUCCESS) { LOGE("Esys_TRSess_SetAttributes: %s", Tss2_RC_Decode(rc)); rc = Esys_FlushContext(ctx->esys_ctx, session); if (rc != TSS2_RC_SUCCESS) { LOGW("Esys_FlushContext: %s", Tss2_RC_Decode(rc)); } return CKR_GENERAL_ERROR; } ctx->original_flags = session_attrs; ctx->hmac_session = session; return CKR_OK; } CK_RV tpm_session_stop(tpm_ctx *ctx) { TSS2_RC rc = Esys_FlushContext(ctx->esys_ctx, ctx->hmac_session); if (rc != TSS2_RC_SUCCESS) { LOGE("Esys_FlushContext: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } ctx->hmac_session = 0; return CKR_OK; } CK_RV tpm_ctx_new_fromtcti(void *tcti, tpm_ctx **tctx) { ESYS_CONTEXT *esys = NULL; tpm_ctx *t = calloc(1, sizeof(*t)); if (!t) { return CKR_HOST_MEMORY; } esys = esys_ctx_init(tcti); if (!esys) { goto error; } /* populate */ t->esys_ctx = esys; t->tcti_ctx = tcti; /* * allow TPM2_PKCS11_ESAPI_MANAGE_FLAGS to override the configure time default on whether or * not ESAPI should manage the flags or if the TPM code should do it. */ const char *c = getenv("TPM2_PKCS11_ESAPI_MANAGE_FLAGS"); t->esapi_manage_session_flags = c ? true : !!ESAPI_MANAGE_FLAGS; /* assign back (return via pointer) */ *tctx = t; return CKR_OK; error: tpm_ctx_free(t); return CKR_GENERAL_ERROR; } CK_RV tpm_ctx_new(const char *config, tpm_ctx **tctx) { TSS2_TCTI_CONTEXT *tcti = NULL; /* no specific config, try environment */ if (!config) { config = getenv(TPM2_PKCS11_TCTI); } LOGV("tcti=%s", config ? config : "(null)"); TSS2_RC rc = Tss2_TctiLdr_Initialize(config, &tcti); if (rc != TSS2_RC_SUCCESS) { return CKR_GENERAL_ERROR; } return tpm_ctx_new_fromtcti(tcti, tctx); } static CK_RV tpm_get_properties(tpm_ctx *ctx, TPMS_CAPABILITY_DATA **d) { if (ctx->tpms_fixed_property_cache) { *d = ctx->tpms_fixed_property_cache; return CKR_OK; } assert(!ctx->tpms_fixed_property_cache); TPM2_CAP capability = TPM2_CAP_TPM_PROPERTIES; UINT32 property = TPM2_PT_FIXED; UINT32 propertyCount = TPM2_MAX_TPM_PROPERTIES; TPMS_CAPABILITY_DATA *capabilityData; TPMI_YES_NO moreData; TSS2_RC rval = Esys_GetCapability(ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, capability, property, propertyCount, &moreData, &capabilityData); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_GetCapability: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } /* this cannot overflow */ if (!capabilityData || capabilityData->data.tpmProperties.count < TPM2_PT_VENDOR_STRING_4 - TPM2_PT_FIXED + 1) { LOGE("TPM did not reply with correct amount of capabilities"); Esys_Free(capabilityData); return CKR_GENERAL_ERROR; } *d = ctx->tpms_fixed_property_cache = capabilityData; return CKR_OK; } static CK_RV find_fixed_cap(TPMS_CAPABILITY_DATA *d, TPM2_PT property, CK_ULONG_PTR value) { TPML_TAGGED_TPM_PROPERTY *t = &d->data.tpmProperties; TPMS_TAGGED_PROPERTY *p = t->tpmProperty; CK_ULONG i; for (i=0; i < t->count; i++) { if (property == p[i].property) { *value = p[i].value; return CKR_OK; } } return CKR_MECHANISM_INVALID; } CK_RV tpm_find_max_rsa_keysize(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max) { TPMT_PUBLIC_PARMS input = { 0 }; input.type = TPM2_ALG_RSA; input.parameters.rsaDetail.exponent = 0; input.parameters.rsaDetail.scheme.scheme = TPM2_ALG_NULL; input.parameters.rsaDetail.symmetric.algorithm = TPM2_ALG_NULL; static CK_ULONG max_found = 0; if (max_found) { *min = 1024; *max = max_found; return CKR_OK; } TPM2_KEY_BITS i; for(i=2; i < 5; i++) { input.parameters.rsaDetail.keyBits = 1024 * i; /* 2048, 3072, 4096... (cannot overflow)*/ TSS2_RC rval = Esys_TestParms(tctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &input); if (rval != TSS2_RC_SUCCESS) { if ((rval & (TPM2_RC_P | TPM2_RC_1)) == (TPM2_RC_P | TPM2_RC_1)) { rval &= ~(TPM2_RC_P | TPM2_RC_1); if (rval == TPM2_RC_KEY_SIZE || rval == TPM2_RC_VALUE) { continue; } else { return CKR_MECHANISM_INVALID; } } return CKR_GENERAL_ERROR; } /* key size was good */ if (max_found < input.parameters.rsaDetail.keyBits) { max_found = input.parameters.rsaDetail.keyBits; } } *min = 1024; *max = max_found; return CKR_OK; } static TPM2_ALGORITHM_ID nid_to_tpm2alg(int nid) { switch (nid) { case NID_X9_62_prime192v1: return TPM2_ECC_NIST_P192; case NID_secp224r1: return TPM2_ECC_NIST_P224; case NID_X9_62_prime256v1: return TPM2_ECC_NIST_P256; case NID_secp384r1: return TPM2_ECC_NIST_P384; case NID_secp521r1: return TPM2_ECC_NIST_P521; default: LOGE("Unsupported nid to tpm EC algorithm mapping, got nid: %d", nid); return TPM2_ALG_ERROR; } } CK_RV tpm_is_rsa_keysize_supported(tpm_ctx *tctx, CK_ULONG test_size) { TPMT_PUBLIC_PARMS input = { 0 }; input.type = TPM2_ALG_RSA; input.parameters.rsaDetail.exponent = 0; input.parameters.rsaDetail.scheme.scheme = TPM2_ALG_NULL; input.parameters.rsaDetail.symmetric.algorithm = TPM2_ALG_NULL; input.parameters.rsaDetail.keyBits = test_size; TSS2_RC rval = Esys_TestParms(tctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &input); if (rval != TSS2_RC_SUCCESS) { if ((rval & (TPM2_RC_P | TPM2_RC_1)) == (TPM2_RC_P | TPM2_RC_1)) { rval &= ~(TPM2_RC_P | TPM2_RC_1); if (rval == TPM2_RC_KEY_SIZE || rval == TPM2_RC_VALUE) { return CKR_MECHANISM_INVALID; } } return CKR_GENERAL_ERROR; } return CKR_OK; } CK_RV tpm_is_ecc_curve_supported(tpm_ctx *tctx, int nid) { TPMT_PUBLIC_PARMS input = { 0 }; input.type = TPM2_ALG_ECC; input.parameters.eccDetail.kdf.scheme = TPM2_ALG_NULL; input.parameters.eccDetail.scheme.scheme = TPM2_ALG_NULL; input.parameters.eccDetail.symmetric.algorithm = TPM2_ALG_NULL; input.parameters.eccDetail.curveID = nid_to_tpm2alg(nid); if (input.parameters.eccDetail.curveID == TPM2_ALG_ERROR) { return CKR_MECHANISM_INVALID; } TSS2_RC rval = Esys_TestParms(tctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &input); if (rval != TSS2_RC_SUCCESS) { if ((rval & (TPM2_RC_P | TPM2_RC_1)) == (TPM2_RC_P | TPM2_RC_1)) { rval &= ~(TPM2_RC_P | TPM2_RC_1); if (rval == TPM2_RC_CURVE || rval == TPM2_RC_VALUE) { return CKR_MECHANISM_INVALID; } } return CKR_GENERAL_ERROR; } return CKR_OK; } CK_RV tpm_find_ecc_keysizes(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max) { static bool cached = false; static CK_ULONG found_max = 0; static CK_ULONG found_min = ~0; if (cached) { *min = found_min/8; *max = found_max/8; return CKR_OK; } TPMT_PUBLIC_PARMS input = { 0 }; input.type = TPM2_ALG_ECC; input.parameters.eccDetail.kdf.scheme = TPM2_ALG_NULL; input.parameters.eccDetail.scheme.scheme = TPM2_ALG_NULL; input.parameters.eccDetail.symmetric.algorithm = TPM2_ALG_NULL; struct { TPM2_ALG_ID alg; unsigned size; } tests[] = { { TPM2_ECC_NIST_P192, 192 * 8 }, { TPM2_ECC_NIST_P224, 224 * 8 }, { TPM2_ECC_NIST_P256, 256 * 8 }, { TPM2_ECC_NIST_P384, 384 * 8 }, { TPM2_ECC_NIST_P521, 521 * 8 }, { TPM2_ECC_BN_P256, 256 * 8 }, { TPM2_ECC_BN_P638, 638 * 8 }, { TPM2_ECC_SM2_P256, 256 * 8 }, }; TPM2_ALG_ID i; for(i=0; i < ARRAY_LEN(tests); i++) { input.parameters.eccDetail.curveID = tests[i].alg; TSS2_RC rval = Esys_TestParms(tctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &input); if (rval != TSS2_RC_SUCCESS) { if ((rval & (TPM2_RC_P | TPM2_RC_1)) == (TPM2_RC_P | TPM2_RC_1)) { rval &= ~(TPM2_RC_P | TPM2_RC_1); if (rval == TPM2_RC_CURVE) { continue; } else { return CKR_MECHANISM_INVALID; } } return CKR_GENERAL_ERROR; } if (tests[i].size > found_max) { found_max = tests[i].size; } if (tests[i].size < found_min) { found_min = tests[i].size; } } *max = found_max/8; *min = found_min/8; cached = true; return CKR_OK; } CK_RV tpm_find_aes_keysizes(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max) { /* ok it's supported, what are the key sizes? */ static CK_ULONG _max = 0; static const CK_ULONG _min = 128; if (_max) { *min = _min/8; *max = _max/8; return CKR_OK; } TPMS_CAPABILITY_DATA *fixed_property_data = NULL; CK_RV rv = tpm_get_properties(tctx, &fixed_property_data); if (rv != CKR_OK) { return rv; } rv = find_fixed_cap(fixed_property_data, TPM2_PT_CONTEXT_SYM_SIZE, &_max); if (rv != CKR_OK) { return rv; } /* if it's supported 128bits is min by spec IIUC */ /* convert to bytes for return values */ *min = _min/8; *max = _max/8; return CKR_OK; } CK_RV tpm_get_token_info (tpm_ctx *ctx, CK_TOKEN_INFO *info) { check_pointer(ctx); check_pointer(info); TPMS_CAPABILITY_DATA *capabilityData = NULL; CK_RV rv = tpm_get_properties(ctx, &capabilityData); if (rv !=CKR_OK) { return rv; } TPMS_TAGGED_PROPERTY *tpmProperties = capabilityData->data.tpmProperties.tpmProperty; // Use Spec revision as HW Version UINT32 revision = tpmProperties[TPM2_PT_REVISION - TPM2_PT_FIXED].value; info->hardwareVersion.major = revision / 100; info->hardwareVersion.minor = revision % 100; // Use Firmware Version as FW Version UINT32 version = tpmProperties[TPM2_PT_FIRMWARE_VERSION_1 - TPM2_PT_FIXED].value; // Most vendors seem to use 00MM.00mm as format for TPM2_PT_FIRMWARE_VERSION_1 // Unfortunately we only have 1 byte for major and minor each. info->firmwareVersion.major = (version >> 16) & 0xFF; info->firmwareVersion.minor = version & 0xFF; // Use Vendor ID as Manufacturer ID unsigned char manufacturerID[sizeof(UINT32)+1] = {0}; // 4 bytes + '\0' as temp storage UINT32 manufacturer = ntohl(tpmProperties[TPM2_PT_MANUFACTURER - TPM2_PT_FIXED].value); memcpy(manufacturerID, (unsigned char*) &manufacturer, sizeof(uint32_t)); str_padded_copy(info->manufacturerID, manufacturerID); // Map human readable Manufacturer String, if available, // otherwise 4 byte ID was already padded and will be used. for (unsigned int i=0; i < ARRAY_LEN(TPM2_MANUFACTURER_MAP); i++){ if (!strncasecmp((char *)info->manufacturerID, TPM2_MANUFACTURER_MAP[i][0], 4)) { _str_padded_copy(info->manufacturerID, sizeof(info->manufacturerID), (const CK_UTF8CHAR_PTR)TPM2_MANUFACTURER_MAP[i][1], strlen(TPM2_MANUFACTURER_MAP[i][1])); } } // Use Vendor String as Model description UINT32 vendor[4]; vendor[0] = ntohl(tpmProperties[TPM2_PT_VENDOR_STRING_1 - TPM2_PT_FIXED].value); vendor[1] = ntohl(tpmProperties[TPM2_PT_VENDOR_STRING_2 - TPM2_PT_FIXED].value); vendor[2] = ntohl(tpmProperties[TPM2_PT_VENDOR_STRING_3 - TPM2_PT_FIXED].value); vendor[3] = ntohl(tpmProperties[TPM2_PT_VENDOR_STRING_4 - TPM2_PT_FIXED].value); _str_padded_copy(info->model, sizeof(info->model), (unsigned char*) &vendor, sizeof(vendor)); return CKR_OK; } bool tpm_getrandom(tpm_ctx *ctx, BYTE *data, size_t size) { size_t offset = 0; bool result = false; /* * This will get re-used once allocated by esys */ TPM2B_DIGEST *rand_bytes = NULL; while (size) { UINT16 request_size = size > sizeof(rand_bytes->buffer) ? sizeof(rand_bytes->buffer) : size; TSS2_RC rval = Esys_GetRandom( ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, request_size, &rand_bytes); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_GetRandom: %s:", Tss2_RC_Decode(rval)); Esys_Free(rand_bytes); goto out; } memcpy(&data[offset], rand_bytes->buffer, rand_bytes->size); offset += rand_bytes->size; size -= rand_bytes->size; Esys_Free(rand_bytes); rand_bytes = NULL; } result = true; out: return result; } CK_RV tpm_stirrandom(tpm_ctx *ctx, CK_BYTE_PTR seed, CK_ULONG seed_len) { TSS2_RC rc = TSS2_TCTI_RC_GENERAL_FAILURE;; size_t offset = 0; while(offset < seed_len) { TPM2B_SENSITIVE_DATA stir; size_t left = seed_len - offset; size_t chunk = left > sizeof(stir.buffer) ? sizeof(stir.buffer) : left; stir.size = chunk; memcpy(stir.buffer, &seed[offset], chunk); rc = Esys_StirRandom( ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &stir); if (rc != TSS2_RC_SUCCESS) { LOGE("Esys_StirRandom: %s:", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } offset += seed_len; } return CKR_OK; } bool tpm_get_name(tpm_ctx *ctx, uint32_t handle, twist *name) { TPM2B_NAME *tname = NULL; TSS2_RC rval = Esys_TR_GetName(ctx->esys_ctx, handle, &tname); if (rval != TSS2_RC_SUCCESS) { return false; } twist t = twistbin_new(tname->name, tname->size); Esys_Free(tname); if (!t) { LOGE("OOM"); return false; } *name = t; return true; } bool tpm_deserialize_handle(tpm_ctx *ctx, twist handle_blob, uint32_t *handle) { TSS2_RC rval = Esys_TR_Deserialize(ctx->esys_ctx, (uint8_t *)handle_blob, twist_len(handle_blob), handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_Deserialize: %s:", Tss2_RC_Decode(rval)); return false; } return true; } bool tpm_contextload_handle(tpm_ctx *ctx, twist handle_blob, uint32_t *handle) { TPMS_CONTEXT blob; TSS2_RC rval = Tss2_MU_TPMS_CONTEXT_Unmarshal((uint8_t *)handle_blob, twist_len(handle_blob), NULL, &blob); if (rval != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPMS_CONTEXT_Unmarshal: %s:", Tss2_RC_Decode(rval)); return false; } rval = Esys_ContextLoad(ctx->esys_ctx, &blob, handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_ContextLoad: %s:", Tss2_RC_Decode(rval)); return false; } return true; } static CK_RV tpm_load(tpm_ctx *ctx, uint32_t phandle, TPM2B_PUBLIC *pub, twist priv_data, uint32_t *handle) { TPM2B_PRIVATE priv = { .size = 0 }; size_t len = twist_len(priv_data); size_t offset = 0; TSS2_RC rval = Tss2_MU_TPM2B_PRIVATE_Unmarshal((uint8_t *)priv_data, len, &offset, &priv); if (rval != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PRIVATE_Unmarshal: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } rval = Esys_Load( ctx->esys_ctx, phandle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, &priv, pub, handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_Load: %s:", Tss2_RC_Decode(rval)); return rval == TPM2_RC_LOCKOUT ? CKR_PIN_LOCKED : CKR_GENERAL_ERROR; } return CKR_OK; } static bool tpm_loadexternal(tpm_ctx *ctx, TPM2B_PUBLIC *pub, uint32_t *handle) { TSS2_RC rval; #ifdef ESYS_3 rval = Esys_LoadExternal( ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, NULL, pub, ESYS_TR_RH_NULL, handle); #else /* ESYS_3 */ rval = Esys_LoadExternal( ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, NULL, pub, TPM2_RH_NULL, handle); #endif /* ESYS_3 */ if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_LoadExternal: %s:", Tss2_RC_Decode(rval)); return false; } return true; } CK_RV tpm_loadobj( tpm_ctx *ctx, uint32_t phandle, twist auth, twist pub_data, twist priv_data, uint32_t *handle) { TPM2B_PUBLIC pub = { .size = 0 }; size_t len = twist_len(pub_data); size_t offset = 0; TSS2_RC rval = Tss2_MU_TPM2B_PUBLIC_Unmarshal((uint8_t *)pub_data, len, &offset, &pub); if (rval != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PRIVATE_Unmarshal: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } bool tmp_rc = set_esys_auth(ctx->esys_ctx, phandle, auth); if (!tmp_rc) { return CKR_GENERAL_ERROR; } if (priv_data) { return tpm_load(ctx, phandle, &pub, priv_data, handle); } return tpm_loadexternal(ctx, &pub, handle) ? CKR_OK : CKR_GENERAL_ERROR; } bool tpm_flushcontext(tpm_ctx *ctx, uint32_t handle) { TSS2_RC rval = Esys_FlushContext( ctx->esys_ctx, handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_FlushContext: %s", Tss2_RC_Decode(rval)); return false; } return true; } twist tpm_unseal(tpm_ctx *ctx, uint32_t handle, twist objauth) { twist t = NULL; bool result = set_esys_auth(ctx->esys_ctx, handle, objauth); if (!result) { return false; } TPM2B_SENSITIVE_DATA *unsealed_data = NULL; flags_turndown(ctx, TPMA_SESSION_DECRYPT); TSS2_RC rc = Esys_Unseal( ctx->esys_ctx, handle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, &unsealed_data); if (rc != TPM2_RC_SUCCESS) { LOGE("Esys_Unseal: %s", Tss2_RC_Decode(rc)); goto out; } t = twistbin_new(unsealed_data->buffer, unsealed_data->size); free(unsealed_data); out: flags_restore(ctx); return t; } static CK_RV flatten_rsassa(TPMS_SIGNATURE_RSASSA *rsassa, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { if (sig && *siglen < rsassa->sig.size) { *siglen = rsassa->sig.size; return CKR_BUFFER_TOO_SMALL; } *siglen = rsassa->sig.size; if (sig) { memcpy(sig, rsassa->sig.buffer, *siglen); } return CKR_OK; } static CK_RV flatten_rsapss(TPMS_SIGNATURE_RSAPSS *rsapss, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { if (sig && *siglen < rsapss->sig.size) { *siglen = rsapss->sig.size; return CKR_BUFFER_TOO_SMALL; } *siglen = rsapss->sig.size; if (sig) { memcpy(sig, rsapss->sig.buffer, *siglen); } return CKR_OK; } static CK_RV flatten_ecdsa(TPMS_SIGNATURE_ECDSA *ecdsa, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { TPM2B_ECC_PARAMETER *R = &ecdsa->signatureR; TPM2B_ECC_PARAMETER *S = &ecdsa->signatureS; /* * From PKCS#11 Current Mechanisms Specification: * * "For the purposes of these mechanisms, an ECDSA signature is an * octet string of even length which is at most two times nLen * octets, where nLen is the length in octets of the base point * order n. The signature octets correspond to the concatenation * of the ECDSA values r and s, both represented as an octet * string of equal length of at most nLen with the most * significant byte first." */ /* * From TCG TPM 2.0, Part 1: Architecture, Appendix C.8: * * "When ECC parameters are returned by the TPM as output * parameters in a response, they must be padded with zeros to the * length of the respective curve (e.g., 32 bytes for NIST * P-256)." */ if (R->size != S->size) { LOGE("TPM returned ECC signature with inconsistent padding"); return CKR_DEVICE_ERROR; } /* this can't overflow, but it doesn't hurt */ CK_ULONG rs = 0; safe_add(rs, R->size, S->size); *siglen = rs; if (!sig) { return CKR_OK; } if (rs > *siglen) { return CKR_BUFFER_TOO_SMALL; } memcpy(sig, R->buffer, R->size); memcpy(sig + R->size, S->buffer, S->size); return CKR_OK; } static CK_RV flatten_hmac(TPMT_HA *hmac, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { CK_ULONG buffer_len = 0; switch(hmac->hashAlg) { case TPM2_ALG_SHA1: buffer_len = 20; break; case TPM2_ALG_SHA256: buffer_len = 32; break; case TPM2_ALG_SHA384: buffer_len = 48; break; case TPM2_ALG_SHA512: buffer_len = 64; break; default: LOGE("Could not flatten HMAC signature"); return CKR_GENERAL_ERROR; } if (buffer_len > *siglen) { return CKR_BUFFER_TOO_SMALL; } /* copy N bytes (digest length) from the biggest buffer union */ memcpy(sig, hmac->digest.sha512, buffer_len); *siglen = buffer_len; return CKR_OK; } static CK_RV sig_flatten(TPMT_SIGNATURE *signature, TPMT_SIG_SCHEME *scheme, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { switch(scheme->scheme) { case TPM2_ALG_RSASSA: return flatten_rsassa(&signature->signature.rsassa, sig, siglen); case TPM2_ALG_RSAPSS: return flatten_rsapss(&signature->signature.rsapss, sig, siglen); case TPM2_ALG_ECDSA: return flatten_ecdsa(&signature->signature.ecdsa, sig, siglen); case TPM2_ALG_HMAC: return flatten_hmac(&signature->signature.hmac, sig, siglen); /* no default */ } return CKR_GENERAL_ERROR; } static TPMI_ALG_HASH guess_hash_by_size(CK_ULONG len) { switch(len) { case 20: return TPM2_ALG_SHA1; case 32: return TPM2_ALG_SHA256; case 48: return TPM2_ALG_SHA384; case 64: return TPM2_ALG_SHA512; /* no default */ } return TPM2_ALG_ERROR; } static CK_RV ecc_fixup_halg(TPMT_SIG_SCHEME *sig, CK_ULONG datalen) { if (sig->details.any.hashAlg == TPM2_ALG_ERROR) { TPMI_ALG_HASH halg = guess_hash_by_size(datalen); if (halg == TPM2_ALG_ERROR) { LOGE("Cannot figure out hashing algorithm for signature of len: %lu", datalen); return CKR_GENERAL_ERROR; } sig->details.any.hashAlg = halg; } return CKR_OK; } static CK_RV tpm_hmac_large(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { CK_RV rv = CKR_GENERAL_ERROR; tobject *tobj = opdata->tobj; assert(tobj); tpm_ctx *tctx = opdata->ctx; assert(tctx); twist auth = tobj->unsealed_auth; TPMI_DH_OBJECT handle = tobj->tpm_handle; ESYS_TR session = tctx->hmac_session; TPMI_ALG_HASH halg = opdata->hmac.sig.details.hmac.hashAlg; bool result = set_esys_auth(opdata->ctx->esys_ctx, handle, auth); if (!result) { return CKR_GENERAL_ERROR; } TPM2B_AUTH seq_auth = { .size = 32 }; int rc = RAND_bytes(seq_auth.buffer, seq_auth.size); if (rc != 1) { LOGE("Could not generate random sequence auth value for HMAC"); return CKR_GENERAL_ERROR; } ESYS_TR seq_handle = ESYS_TR_NONE; TSS2_RC rval = Esys_HMAC_Start(tctx->esys_ctx, handle, session, ESYS_TR_NONE, ESYS_TR_NONE, &seq_auth, halg, &seq_handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_HMAC_Start: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } TPM2B_MAX_BUFFER buffer = { 0 }; CK_ULONG bytes_remaining = datalen; while (bytes_remaining > sizeof(buffer.buffer)) { off_t offset = datalen - bytes_remaining; memcpy(buffer.buffer, &data[offset], sizeof(buffer.buffer)); buffer.size = sizeof(buffer.buffer); rval = Esys_SequenceUpdate(tctx->esys_ctx, seq_handle, session, ESYS_TR_NONE, ESYS_TR_NONE, &buffer); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_SequenceUpdate: %s", Tss2_RC_Decode(rval)); /* XXX what to do with a sequence handle? */ return CKR_GENERAL_ERROR; } bytes_remaining -= sizeof(buffer.buffer); } assert(bytes_remaining <= sizeof(buffer.buffer)); off_t offset = datalen - bytes_remaining; memcpy(buffer.buffer, &data[offset], bytes_remaining); buffer.size = bytes_remaining; TPM2B_DIGEST *hmac = NULL; TPMT_TK_HASHCHECK *ticket = NULL; rval = Esys_SequenceComplete(tctx->esys_ctx, seq_handle, session, ESYS_TR_NONE, ESYS_TR_NONE, &buffer, ESYS_TR_RH_NULL, &hmac, &ticket ); if (rval != TSS2_RC_SUCCESS) { /* XXX what to do with a sequence handle? */ LOGE("Esys_SequenceComplete: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } Esys_Free(ticket); *siglen = hmac->size; if (sig && *siglen < hmac->size) { rv = CKR_BUFFER_TOO_SMALL; goto out; } if (sig) { memcpy(sig, hmac->buffer, hmac->size); } rv = CKR_OK; out: Esys_Free(hmac); return rv; } static CK_RV tpm_hmac(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { CK_RV rv = CKR_GENERAL_ERROR; TPM2B_MAX_BUFFER buffer = { 0 }; if (sizeof(buffer.buffer) < datalen) { /* doesn't fit in a oneshot call, do it in a multiple call */ return tpm_hmac_large(opdata, data, datalen, sig, siglen); } /* one shot call */ tobject *tobj = opdata->tobj; assert(tobj); tpm_ctx *tctx = opdata->ctx; assert(tctx); twist auth = tobj->unsealed_auth; TPMI_DH_OBJECT handle = tobj->tpm_handle; ESYS_TR session = tctx->hmac_session; TPMI_ALG_HASH halg = opdata->hmac.sig.details.hmac.hashAlg; bool result = set_esys_auth(opdata->ctx->esys_ctx, handle, auth); if (!result) { return CKR_GENERAL_ERROR; } /* size checked in entry to determine if one shot or not */ memcpy(buffer.buffer, data, datalen); buffer.size = datalen; TPM2B_DIGEST *hmac = NULL; TSS2_RC rval = Esys_HMAC(tctx->esys_ctx, handle, session, ESYS_TR_NONE, ESYS_TR_NONE, &buffer, halg, &hmac); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_Sign: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } *siglen = hmac->size; if (sig && *siglen < hmac->size) { rv = CKR_BUFFER_TOO_SMALL; goto out; } if (sig) { memcpy(sig, hmac->buffer, hmac->size); } rv = CKR_OK; out: Esys_Free(hmac); return rv; } CK_RV tpm_sign(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG_PTR siglen) { assert(opdata); tobject *tobj = opdata->tobj; assert(tobj); tpm_ctx *tctx = opdata->ctx; assert(tctx); twist auth = tobj->unsealed_auth; TPMI_DH_OBJECT handle = tobj->tpm_handle; ESYS_CONTEXT *ectx = tctx->esys_ctx; ESYS_TR session = tctx->hmac_session; TPMT_SIG_SCHEME *scheme = NULL; switch(opdata->op_type) { case CKK_RSA: scheme = &opdata->rsa.sig; break; case CKK_EC: scheme = &opdata->ecc.sig; break; case CKK_GENERIC_SECRET: return tpm_hmac(opdata, data, datalen, sig, siglen); default: LOGE("Unknown opdata op_type selector for sign, got: 0x%lx", opdata->op_type); return CKR_GENERAL_ERROR; } TPM2B_DIGEST tdigest; if (sizeof(tdigest.buffer) < datalen) { return CKR_DATA_LEN_RANGE; } memcpy(tdigest.buffer, data, datalen); tdigest.size = datalen; bool result = set_esys_auth(opdata->ctx->esys_ctx, handle, auth); if (!result) { return CKR_GENERAL_ERROR; } TPMT_TK_HASHCHECK validation = { .tag = TPM2_ST_HASHCHECK, .hierarchy = TPM2_RH_NULL, .digest = TPM2B_EMPTY_INIT }; if (opdata->op_type == CKK_EC) { CK_RV rv = ecc_fixup_halg(&opdata->ecc.sig, datalen); if (rv != CKR_OK) { return rv; } } flags_turndown(opdata->ctx, TPMA_SESSION_ENCRYPT); TPMT_SIGNATURE *signature = NULL; TSS2_RC rval = Esys_Sign( ectx, handle, session, ESYS_TR_NONE, ESYS_TR_NONE, &tdigest, scheme, &validation, &signature); flags_restore(opdata->ctx); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_Sign: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } CK_RV rv = sig_flatten(signature, scheme, sig, siglen); Esys_Free(signature); return rv; } CK_RV tpm_verify(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG siglen) { assert(opdata); /* * Only HMAC should be going the way of verify to the TPM, asym ciphers should use SW for both ease of * integration with certificate objects but performance as well. */ assert(opdata->op_type == CKK_GENERIC_SECRET); CK_BYTE cmp_sig[sizeof(((TPM2B_MAX_BUFFER *)NULL)->buffer)]; CK_ULONG cmp_sig_len = sizeof(cmp_sig); CK_RV rv = tpm_hmac(opdata, data, datalen, cmp_sig, &cmp_sig_len); if (rv != CKR_OK) { return rv; } if (cmp_sig_len != siglen) { return CKR_SIGNATURE_INVALID; } return CRYPTO_memcmp(sig, cmp_sig, cmp_sig_len) == 0 ? CKR_OK : CKR_SIGNATURE_INVALID; } CK_RV tpm_readpub(tpm_ctx *ctx, uint32_t handle, TPM2B_PUBLIC **public, TPM2B_NAME **name, TPM2B_NAME **qualified_name) { TSS2_RC rval = Esys_ReadPublic(ctx->esys_ctx, handle, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, public, name, qualified_name); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_ReadPublic: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } return CKR_OK; } static CK_RV get_oaep_mgf1_alg(tpm_ctx *tpm, uint32_t handle, CK_RSA_PKCS_MGF_TYPE_PTR mgf) { TPM2B_PUBLIC *public = NULL; TPM2B_NAME *name = NULL; TPM2B_NAME *qualified_name = NULL; CK_RV rv = tpm_readpub(tpm, handle, &public, &name, &qualified_name); if (rv != CKR_OK) { return rv; } switch(public->publicArea.nameAlg) { case TPM2_ALG_SHA1: *mgf = CKG_MGF1_SHA1; break; case TPM2_ALG_SHA256: *mgf = CKG_MGF1_SHA256; break; case TPM2_ALG_SHA384: *mgf = CKG_MGF1_SHA384; break; case TPM2_ALG_SHA512: *mgf = CKG_MGF1_SHA512; break; default: rv = CKR_GENERAL_ERROR; } free(public); free(name); free(qualified_name); return rv; } static TPMI_ALG_HASH mech_to_hash_alg(CK_MECHANISM_TYPE t) { switch(t) { case CKM_SHA_1: return TPM2_ALG_SHA1; case CKM_SHA256: return TPM2_ALG_SHA256; case CKM_SHA384: return TPM2_ALG_SHA384; case CKM_SHA512: return TPM2_ALG_SHA512; /* no default */ } return TPM2_ALG_ERROR; } static void set_common_opdata(tpm_op_data *opdata, tpm_ctx *tctx, tobject *tobj, CK_KEY_TYPE key_type) { opdata->tobj = tobj; opdata->ctx = tctx; opdata->op_type = key_type; } CK_RV tpm_rsa_oaep_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { assert(outdata); assert(mech); UNUSED(m); /* * At the current moment, this is the only thing that cannot be flattened and requires PARAMS * and a TPM ctx for verifying the hash alg. Others just pass along the tctx via the opdata */ CK_RSA_PKCS_OAEP_PARAMS_PTR params = NULL; SAFE_CAST(mech, params); if (mech->ulParameterLen != sizeof(CK_RSA_PKCS_OAEP_PARAMS)) { return CKR_MECHANISM_PARAM_INVALID; } if (params->source != CKZ_DATA_SPECIFIED && params->pSourceData != NULL && params->ulSourceDataLen != 0) { return CKR_MECHANISM_PARAM_INVALID; } /* * TPM is hardcoded to MGF1 + in the TPM, make sure what is requested is supported */ CK_RSA_PKCS_MGF_TYPE supported_mgf; CK_RV rv = get_oaep_mgf1_alg(tctx, tobj->tpm_handle, &supported_mgf); if (rv != CKR_OK) { return rv; } /* TODO revisit - why does it return not supported here. It works though if (params->mgf != supported_mgf) { return CKR_MECHANISM_PARAM_INVALID; } */ tpm_op_data *opdata = tpm_opdata_new(m, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.raw.scheme = TPM2_ALG_OAEP; opdata->rsa.raw.details.anySig.hashAlg = mech_to_hash_alg(params->hashAlg); if (opdata->rsa.raw.details.anySig.hashAlg == TPM2_ALG_ERROR) { tpm_opdata_free(&opdata); return CKR_MECHANISM_PARAM_INVALID; } if (params->ulSourceDataLen > sizeof(opdata->rsa.label.buffer)) { tpm_opdata_free(&opdata); return CKR_MECHANISM_PARAM_INVALID; } opdata->rsa.label.size = params->ulSourceDataLen; if (params->ulSourceDataLen) { if (!params->pSourceData) { tpm_opdata_free(&opdata); return CKR_MECHANISM_PARAM_INVALID; } memcpy(opdata->rsa.label.buffer, params->pSourceData, params->ulSourceDataLen); } set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pkcs_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(m); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(m, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.raw.scheme = TPM2_ALG_NULL; opdata->rsa.label.size = 0; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pss_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(m); check_pointer(mech); check_pointer(outdata); CK_RSA_PKCS_PSS_PARAMS_PTR params; SAFE_CAST(mech, params); tpm_op_data *opdata = tpm_opdata_new(m, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSAPSS; switch (params->hashAlg) { case CKM_SHA_1: opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA1; break; case CKM_SHA256: opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA256; break; case CKM_SHA384: opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA384; break; case CKM_SHA512: opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA512; break; default: tpm_opdata_free(&opdata); return CKR_MECHANISM_INVALID; } set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pss_sha1_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSAPSS; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA1; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pss_sha256_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSAPSS; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA256; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pss_sha384_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSAPSS; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA384; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pss_sha512_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSAPSS; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA512; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pkcs_sha1_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSASSA; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA1; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pkcs_sha256_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSASSA; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA256; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pkcs_sha384_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSASSA; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA384; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_rsa_pkcs_sha512_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->rsa.sig.scheme = TPM2_ALG_RSASSA; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA512; set_common_opdata(opdata, tctx, tobj, CKK_RSA); *outdata = opdata; return CKR_OK; } CK_RV tpm_ec_ecdsa_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->ecc.sig.scheme = TPM2_ALG_ECDSA; /* * we don't know the proper algorithm to set until ESys_Sign() is called, * So we need to detect this case and guess the algorithm based on hash size. */ opdata->ecc.sig.details.any.hashAlg = TPM2_ALG_ERROR; set_common_opdata(opdata, tctx, tobj, CKK_EC); *outdata = opdata; return CKR_OK; } static CK_RV tpm_ec_ecdsa_get_opdata_common(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, TPMI_ALG_HASH halg, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->ecc.sig.scheme = TPM2_ALG_ECDSA; opdata->ecc.sig.details.any.hashAlg = halg; set_common_opdata(opdata, tctx, tobj, CKK_EC); *outdata = opdata; return CKR_OK; } #define TPM_EC_ECDSA_GET_OPDATA(name, halg) \ CK_RV tpm_ec_ecdsa_##name##_get_opdata(mdetail *mdtl, \ tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, \ tpm_op_data **outdata) { \ return tpm_ec_ecdsa_get_opdata_common(mdtl, tctx, mech, tobj, \ halg, outdata); \ } TPM_EC_ECDSA_GET_OPDATA(sha1, TPM2_ALG_SHA1) TPM_EC_ECDSA_GET_OPDATA(sha256, TPM2_ALG_SHA256) TPM_EC_ECDSA_GET_OPDATA(sha384, TPM2_ALG_SHA384) TPM_EC_ECDSA_GET_OPDATA(sha512, TPM2_ALG_SHA512) static CK_RV aes_common_opdata(tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data *opdata) { if (mech->ulParameterLen > sizeof(opdata->sym.iv.buffer) || mech->ulParameterLen % 8) { return CKR_MECHANISM_PARAM_INVALID; } opdata->sym.iv.size = mech->ulParameterLen; memcpy(opdata->sym.iv.buffer, mech->pParameter, mech->ulParameterLen); opdata->tobj = tobj; opdata->ctx = tctx; opdata->op_type = CKK_AES; return CKR_OK; } CK_RV tpm_aes_cbc_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->sym.mode = TPM2_ALG_CBC; CK_RV rv = aes_common_opdata(tctx, mech, tobj, opdata); if (rv != CKR_OK) { free(opdata); return rv; } *outdata = opdata; return CKR_OK; } CK_RV tpm_aes_cfb_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->sym.mode = TPM2_ALG_CFB; CK_RV rv = aes_common_opdata(tctx, mech, tobj, opdata); if (rv != CKR_OK) { free(opdata); return rv; } *outdata = opdata; return CKR_OK; } CK_RV tpm_aes_ecb_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->sym.mode = TPM2_ALG_ECB; CK_RV rv = aes_common_opdata(tctx, mech, tobj, opdata); if (rv != CKR_OK) { free(opdata); return rv; } *outdata = opdata; return CKR_OK; } CK_RV tpm_aes_ctr_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); assert(outdata); assert(mech); CK_AES_CTR_PARAMS *params = NULL; SAFE_CAST(mech, params); /* * The TPM has the counter bits equal to block size, * so it should be set to use the FULL cb value which is * 16 bytes. */ if (params->ulCounterBits != (8 * sizeof(params->cb))) { LOGE("TPM Requires ulCounterBits to be %zu, got %lu", sizeof(params->cb), params->ulCounterBits); return CKR_MECHANISM_PARAM_INVALID; } tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->sym.mode = TPM2_ALG_CTR; opdata->tobj = tobj; opdata->ctx = tctx; opdata->op_type = CKK_AES; /* to detect overflow, start a counter at 0 and detect when it overflows 16 bytes */ opdata->sym.ctr.counter = BN_new(); if (!opdata->sym.ctr.counter) { free(opdata); return CKR_HOST_MEMORY; } /* the counter buffer and the iv buffer should be big enough */ assert(sizeof(params->cb) <= sizeof(opdata->sym.iv.buffer)); /* The counter value for the TPM IS THE WHOLE IV, SO USE IV */ opdata->sym.iv.size = sizeof(params->cb); memcpy(opdata->sym.iv.buffer, params->cb, sizeof(params->cb)); *outdata = opdata; return CKR_OK; } CK_RV tpm_hmac_sha1_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->hmac.sig.scheme = TPM2_ALG_HMAC; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA1; set_common_opdata(opdata, tctx, tobj, CKK_GENERIC_SECRET); *outdata = opdata; return CKR_OK; } CK_RV tpm_hmac_sha256_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->hmac.sig.scheme = TPM2_ALG_HMAC; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA256; set_common_opdata(opdata, tctx, tobj, CKK_GENERIC_SECRET); *outdata = opdata; return CKR_OK; } CK_RV tpm_hmac_sha384_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->hmac.sig.scheme = TPM2_ALG_HMAC; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA384; set_common_opdata(opdata, tctx, tobj, CKK_GENERIC_SECRET); *outdata = opdata; return CKR_OK; } CK_RV tpm_hmac_sha512_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata) { UNUSED(mdtl); UNUSED(mech); assert(outdata); assert(mech); tpm_op_data *opdata = tpm_opdata_new(mdtl, mech); if (!opdata) { return CKR_HOST_MEMORY; } opdata->hmac.sig.scheme = TPM2_ALG_HMAC; opdata->rsa.sig.details.any.hashAlg = TPM2_ALG_SHA512; set_common_opdata(opdata, tctx, tobj, CKK_GENERIC_SECRET); *outdata = opdata; return CKR_OK; } void tpm_opdata_reset(tpm_op_data *opdata) { if (opdata) { opdata->sym.prev.len = 0; } } void tpm_opdata_free(tpm_op_data **opdata) { if (opdata) { if (*opdata && (*opdata)->mech.mechanism == CKM_AES_CTR) { BN_free((*opdata)->sym.ctr.counter); (*opdata)->sym.ctr.counter = NULL; } free(*opdata); *opdata = NULL; } } CK_RV tpm_rsa_decrypt(tpm_op_data *tpm_enc_data, CK_BYTE_PTR ctext, CK_ULONG ctextlen, CK_BYTE_PTR ptext, CK_ULONG_PTR ptextlen) { LOGV("Performing TPM RSA Decrypt"); CK_RV rv = CKR_GENERAL_ERROR; tpm_ctx *ctx = tpm_enc_data->ctx; TPMT_RSA_DECRYPT *scheme = &tpm_enc_data->rsa.raw; TPM2B_DATA *label = &tpm_enc_data->rsa.label; /* * Validate that the data to perform the operation on, typically * ciphertext on RSA decrypt, fits in the buffer for the TPM and * populate it. */ TPM2B_PUBLIC_KEY_RSA tpm_ctext = { .size = ctextlen }; if (ctextlen > sizeof(tpm_ctext.buffer)) { return CKR_ARGUMENTS_BAD; } memcpy(tpm_ctext.buffer, ctext, ctextlen); twist auth = tpm_enc_data->tobj->unsealed_auth; ESYS_TR handle = tpm_enc_data->tobj->tpm_handle; bool result = set_esys_auth(ctx->esys_ctx, handle, auth); if (!result) { return CKR_GENERAL_ERROR; } TPM2B_PUBLIC_KEY_RSA *tpm_ptext; TSS2_RC rc = Esys_RSA_Decrypt( ctx->esys_ctx, handle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, &tpm_ctext, scheme, label, &tpm_ptext); if (rc != TPM2_RC_SUCCESS) { LOGE("Esys_RSA_Decrypt: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } if (!ptext) { *ptextlen = tpm_ctext.size; rv = CKR_OK; goto out; } if (*ptextlen < tpm_ctext.size) { *ptextlen = tpm_ctext.size; rv = CKR_BUFFER_TOO_SMALL; goto out; } *ptextlen = tpm_ptext->size; memcpy(ptext, tpm_ptext->buffer, tpm_ptext->size); rv = CKR_OK; out: free(tpm_ptext); return rv; } static TSS2_RC tpm_get_cc(tpm_ctx *tpm, TPMS_CAPABILITY_DATA **capabilityData) { assert(tpm); assert(tpm->esys_ctx); assert(capabilityData); if (tpm->tpms_cc_cache) { *capabilityData = tpm->tpms_cc_cache; return CKR_OK; } TPM2_CAP capability = TPM2_CAP_COMMANDS; UINT32 property = TPM2_CC_FIRST; UINT32 propertyCount = TPM2_MAX_CAP_CC; TPMI_YES_NO moreData; TSS2_RC rval = Esys_GetCapability(tpm->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, capability, property, propertyCount, &moreData, capabilityData); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_GetCapability: %s", Tss2_RC_Decode(rval)); return rval; } tpm->tpms_cc_cache = *capabilityData; return TSS2_RC_SUCCESS; } static TSS2_RC tpm_supports_cc(tpm_ctx *tpm, TPMA_CC check_cc, bool *is_supported) { /* do not free, value is cached */ TPMS_CAPABILITY_DATA *capabilityData = NULL; CK_RV rval = tpm_get_cc(tpm, &capabilityData); if (rval != TSS2_RC_SUCCESS) { return rval; } size_t i; for (i=0; i < capabilityData->data.command.count; i++) { TPMA_CC cca = capabilityData->data.command.commandAttributes[i]; TPM2_CC cc = cca & TPMA_CC_COMMANDINDEX_MASK; if (cc == check_cc) { *is_supported = true; return TSS2_RC_SUCCESS; } } *is_supported = false; return TSS2_RC_SUCCESS; } static TSS2_RC do_part_encrypt_decrypt( tpm_ctx *ctx, uint32_t handle, TPMI_ALG_SYM_MODE mode, TPMI_YES_NO is_decrypt, const TPM2B_MAX_BUFFER *data_in, const TPM2B_IV *iv_in, TPM2B_MAX_BUFFER **data_out, TPM2B_IV **iv_out) { TSS2_RC rval = TSS2_RC_SUCCESS; /* figure out what command to use */ if (!ctx->did_check_for_encdec2) { /* do not free, value is cached */ rval = tpm_supports_cc(ctx, TPM2_CC_EncryptDecrypt2, &ctx->use_encdec2); if (rval != TSS2_RC_SUCCESS) { return rval; } } /* setup the output structures */ unsigned version = 2; if (ctx->use_encdec2) { rval = Esys_EncryptDecrypt2( ctx->esys_ctx, handle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, data_in, is_decrypt, mode, iv_in, data_out, iv_out); } else { version = 1; flags_turndown(ctx, TPMA_SESSION_DECRYPT); rval = Esys_EncryptDecrypt( ctx->esys_ctx, handle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, is_decrypt, mode, iv_in, data_in, data_out, iv_out); flags_restore(ctx); } if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_EncryptDecrypt%u: %s", version, Tss2_RC_Decode(rval)); } return rval; } static CK_RV encrypt_decrypt(tpm_ctx *ctx, uint32_t handle, twist objauth, TPMI_ALG_SYM_MODE mode, TPMI_YES_NO is_decrypt, TPM2B_IV *iv, CK_BYTE_PTR data_in, CK_ULONG data_in_len, CK_BYTE_PTR data_out, CK_ULONG_PTR data_out_len) { /* * Handle 5.2 style queries for output buffer size * * XXX This might not be the best spot, and logic may need to be extended * for different modes to include padding sizes, not sure yet. */ if (!data_out) { *data_out_len = data_in_len; return CKR_OK; } else if(data_in_len > *data_out_len) { *data_out_len = data_in_len; return CKR_BUFFER_TOO_SMALL; } bool result = set_esys_auth(ctx->esys_ctx, handle, objauth); if (!result) { return CKR_GENERAL_ERROR; } TPM2B_IV empty_iv = { .size = sizeof(empty_iv.buffer), .buffer = { 0 } }; /* * Copy the data into TPM structures */ TPM2B_IV current_iv = iv ? *iv : empty_iv; CK_ULONG offset = 0; while (offset < data_in_len) { TPM2B_MAX_BUFFER tpm_data_in = { 0 }; assert(offset <= data_in_len); CK_ULONG data_left = data_in_len - offset; assert(data_left != 0); /* How much can we encrypt in this part, bounded by TPM data structure sizes */ CK_ULONG part_len = data_left > sizeof(tpm_data_in.buffer) ? sizeof(tpm_data_in.buffer) : data_left; /* copy it into the structure and set size */ tpm_data_in.size = part_len; memcpy(tpm_data_in.buffer, &data_in[offset], part_len); /* send to TPM */ TPM2B_MAX_BUFFER *tpm_data_out = NULL; TPM2B_IV *tpm_iv_out = NULL; TSS2_RC rc = do_part_encrypt_decrypt(ctx, handle, mode, is_decrypt, &tpm_data_in, ¤t_iv, &tpm_data_out, &tpm_iv_out); if (rc != TSS2_RC_SUCCESS) { return CKR_GENERAL_ERROR; } /* shuffle IVs */ current_iv = *tpm_iv_out; Esys_Free(tpm_iv_out); tpm_iv_out = NULL; /* shuffle to output buffer */ assert(tpm_data_out->size == part_len); memcpy(&data_out[offset], tpm_data_out->buffer, part_len); Esys_Free(tpm_data_out); tpm_data_out = NULL; /* update the offset for the next go around */ offset += part_len; } assert(offset == data_in_len); /* update the operations IV */ *iv = current_iv; /* set the output size */ *data_out_len = data_in_len; return CKR_OK; } /* * These align with the specifications TPMI_YES_NO values as understood for encryptdecrypt routines. */ #define ENCRYPT 0 #define DECRYPT 1 static CK_RV do_buffered_encdec(tpm_op_data *tpm_enc_data, int encdec, CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen) { CK_RV rv = CKR_GENERAL_ERROR; tpm_ctx *ctx = tpm_enc_data->ctx; TPMI_ALG_SYM_MODE mode = tpm_enc_data->sym.mode; TPM2B_IV *iv = &tpm_enc_data->sym.iv; twist auth = tpm_enc_data->tobj->unsealed_auth; ESYS_TR handle = tpm_enc_data->tobj->tpm_handle; /* final calls don't have input data, they just exhaust the internal buffer if present */ bool is_final = !in; /* * if the application doesn't ask for a block boundary, * buffer the extra till later when you can make a block. * Manipulate the input to the TPM to be on a boundary. */ binarybuffer data[] = { { .data = tpm_enc_data->sym.prev.data, .size = tpm_enc_data->sym.prev.len }, { .data = in, .size = inlen }, }; twist full_buffer = twistbin_create(data, ARRAY_LEN(data)); if (!full_buffer) { LOGE("oom"); return CKR_HOST_MEMORY; } /* pass only the "good blocks here */ size_t full_buffer_len = twist_len(full_buffer); CK_ULONG extralen = full_buffer_len % 16; CK_ULONG blocks = full_buffer_len / 16; CK_ULONG modified_full_buffer_len = full_buffer_len - extralen; /* * Hold a block back on the following conditions: * 1. Decrypt, as one block will have padding. Encrypt can just fire off blocks like * normal. Decrypt will need a final block to strip padding from. * 2. Its not the final round, the final round better be right or error. * 3. There are blocks to hold back * 4. There is NO extra data, just send the blocks we have. * the blocks we have. * 5. We have a padding mechanism, so we need to hold it back for possible final pad. */ bool hold_block_back = encdec == DECRYPT && !is_final && blocks > 0 && extralen == 0 && tpm_enc_data->mech.mechanism == CKM_AES_CBC_PAD; if (hold_block_back) { blocks--; extralen = blocks == 0 ? 16 : blocks * 16; modified_full_buffer_len = blocks * 16; } if (blocks) { if (tpm_enc_data->mech.mechanism == CKM_AES_CTR) { /* Detect CTR wrapping, ie CTR should never repeat itself */ int rc = BN_add_word(tpm_enc_data->sym.ctr.counter, blocks); if (!rc) { SSL_UTIL_LOGE("BN_add_word"); rv = CKR_GENERAL_ERROR; goto error; } /* it shouldn't be over 16 bytes */ int bytes = BN_num_bytes(tpm_enc_data->sym.ctr.counter); assert(bytes >= 0); if ((unsigned)bytes > sizeof(((CK_AES_CTR_PARAMS *)NULL)->cb)) { LOGE("CTR counter wrapped"); rv = CKR_DATA_LEN_RANGE; goto error; } } rv = encrypt_decrypt(ctx, handle, auth, mode, encdec, iv, (CK_BYTE_PTR)full_buffer, modified_full_buffer_len, out, outlen); if (rv != CKR_OK) { goto error; } } else { /* no blocks to encrypt, nothing to output */ *outlen = 0; } /* if we have extra data, save it for next round */ /* make sure we don't exceed the space of the internal static buffer */ if (extralen > sizeof(tpm_enc_data->sym.prev.data)) { LOGE("Internal buffer too small"); rv = CKR_GENERAL_ERROR; goto error; } tpm_enc_data->sym.prev.len = extralen; if (extralen) { memcpy(tpm_enc_data->sym.prev.data, &full_buffer[modified_full_buffer_len], extralen); } rv = CKR_OK; error: twist_free(full_buffer); return rv; } CK_RV tpm_encrypt(crypto_op_data *opdata, CK_BYTE_PTR ptext, CK_ULONG ptextlen, CK_BYTE_PTR ctext, CK_ULONG_PTR ctextlen) { tpm_op_data *tpm_enc_data = opdata->tpm_opdata; if (tpm_enc_data->op_type == CKK_RSA) { return tpm_rsa_decrypt(tpm_enc_data, ptext, ptextlen, ctext, ctextlen); } return do_buffered_encdec(tpm_enc_data, ENCRYPT, ptext, ptextlen, ctext, ctextlen); } static CK_RV common_final_encrypt_decrypt(int encdec, crypto_op_data *opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len) { tpm_op_data *tpm_enc_data = opdata->tpm_opdata; CK_RV rv = CKR_GENERAL_ERROR; /* non-aes things don't matter */ if (opdata->tpm_opdata->op_type != CKK_AES) { if (last_part_len) { *last_part_len = 0; } return CKR_OK; } /* * For padding modes, this is where you would apply the pad or error * for non-padding modes */ if (opdata->tpm_opdata->mech.mechanism == CKM_AES_CBC_PAD) { /* if it's a padding mode, apply the pad */ if (encdec == ENCRYPT) { /* * pad the data preserving the extra data * This call might be for buffer size, so we don't want to attempt to apply padding * twice, so we only copy the padded data into the internal buffer as needed. */ CK_BYTE out[sizeof(opdata->tpm_opdata->sym.prev.data)]; CK_ULONG outlen = sizeof(out); rv = mech_synthesize(tpm_enc_data->mdtl, &tpm_enc_data->mech, tpm_enc_data->tobj->attrs, opdata->tpm_opdata->sym.prev.data, opdata->tpm_opdata->sym.prev.len, out, &outlen); if (rv != CKR_OK) { return rv; } /* just asking for size as in 5.2 style returns */ if (!last_part) { *last_part_len = outlen; return CKR_OK; } if (outlen > *last_part_len) { *last_part_len = outlen; return CKR_BUFFER_TOO_SMALL; } /* swap the internal buffer with the padded variant for the last call */ opdata->tpm_opdata->sym.prev.len = outlen; memcpy(opdata->tpm_opdata->sym.prev.data, out, outlen); rv = do_buffered_encdec(tpm_enc_data, encdec, NULL, 0, last_part, last_part_len); } else { /* remove the pad */ /* decrypt into the padded buffer */ CK_BYTE padded[16]; CK_ULONG padded_len = sizeof(padded); rv = do_buffered_encdec(tpm_enc_data, encdec, NULL, 0, padded, &padded_len); if (rv != CKR_OK) { return rv; } /* remove the pad */ CK_BYTE out[sizeof(padded)]; CK_ULONG outlen = sizeof(out); rv = mech_unsynthesize(tpm_enc_data->mdtl, &tpm_enc_data->mech, tpm_enc_data->tobj->attrs, padded, padded_len, out, &outlen); if (rv != CKR_OK) { return rv; } /* just asking for size as in 5.2 style returns */ if (!last_part) { *last_part_len = outlen; return CKR_OK; } if (outlen > *last_part_len) { *last_part_len = outlen; return CKR_BUFFER_TOO_SMALL; } *last_part_len = outlen; memcpy(last_part, out, outlen); } /* no extra data, nothing to do */ } else if (opdata->tpm_opdata->sym.prev.len) { /* mode should be one of the non padding modes */ assert( (opdata->tpm_opdata->mech.mechanism == CKM_AES_CBC) || (opdata->tpm_opdata->mech.mechanism == CKM_AES_CFB128) || (opdata->tpm_opdata->mech.mechanism == CKM_AES_ECB) || (opdata->tpm_opdata->mech.mechanism == CKM_AES_CTR)); rv = CKR_DATA_LEN_RANGE; } else { /* everything ended on a block boundary */ assert(opdata->tpm_opdata->sym.prev.len == 0); *last_part_len = opdata->tpm_opdata->sym.prev.len; rv = CKR_OK; } return rv; } CK_RV tpm_final_encrypt(crypto_op_data *opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len) { return common_final_encrypt_decrypt(ENCRYPT, opdata, last_part, last_part_len); } CK_RV tpm_decrypt(crypto_op_data *opdata, CK_BYTE_PTR ctext, CK_ULONG ctextlen, CK_BYTE_PTR ptext, CK_ULONG_PTR ptextlen) { tpm_op_data *tpm_enc_data = opdata->tpm_opdata; if (tpm_enc_data->op_type == CKK_RSA) { CK_BYTE buf[4096]; CK_ULONG buf_len = sizeof(buf); CK_RV rv = tpm_rsa_decrypt(tpm_enc_data, ctext, ctextlen, buf, &buf_len); if (rv != CKR_OK) { return rv; } return mech_unsynthesize( tpm_enc_data->mdtl, &tpm_enc_data->mech, tpm_enc_data->tobj->attrs, buf, buf_len, ptext, ptextlen); } return do_buffered_encdec(tpm_enc_data, DECRYPT, ctext, ctextlen, ptext, ptextlen); } CK_RV tpm_final_decrypt(crypto_op_data *opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len) { return common_final_encrypt_decrypt(DECRYPT, opdata, last_part, last_part_len); } CK_RV tpm_changeauth(tpm_ctx *ctx, uint32_t parent_handle, uint32_t object_handle, twist oldauth, twist newauth, twist *newblob) { /* Set up the new auth value */ TPM2B_AUTH new_tpm_auth; size_t newauthlen = twist_len(newauth); if (newauthlen > sizeof(new_tpm_auth.buffer)) { return CKR_PIN_LEN_RANGE; } new_tpm_auth.size = newauthlen; memcpy(new_tpm_auth.buffer, newauth, newauthlen); /* set the old auth value */ bool result = set_esys_auth(ctx->esys_ctx, object_handle, oldauth); if (!result) { return CKR_GENERAL_ERROR; } /* call changeauth */ TPM2B_PRIVATE *newprivate = NULL; TSS2_RC rval = Esys_ObjectChangeAuth(ctx->esys_ctx, object_handle, parent_handle, ctx->hmac_session, ESYS_TR_NONE, ESYS_TR_NONE, &new_tpm_auth, &newprivate); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_ObjectChangeAuth: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } uint8_t serialized[sizeof(*newprivate)]; /* serialize the new blob private */ size_t offset = 0; rval = Tss2_MU_TPM2B_PRIVATE_Marshal(newprivate, serialized, sizeof(*newprivate), &offset); if (rval != TSS2_RC_SUCCESS) { free(newprivate); LOGE("Tss2_MU_TPM2B_PRIVATE_Marshal: %s", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } *newblob = twistbin_new(serialized, offset); free(newprivate); return *newblob ? CKR_OK : CKR_HOST_MEMORY; } static TSS2_RC create_loaded( tpm_ctx *tpm, ESYS_TR parent, ESYS_TR session, TPM2B_SENSITIVE_CREATE *in_sens, const TPM2B_PUBLIC *in_pub, ESYS_TR *out_handle, TPM2B_PUBLIC **out_pub, TPM2B_PRIVATE **out_priv ) { TSS2_RC rval; if (!tpm->did_check_for_createloaded) { /* do not free, value is cached */ rval = tpm_supports_cc(tpm, TPM2_CC_CreateLoaded, &tpm->use_createloaded); if (rval != TSS2_RC_SUCCESS) { return rval; } tpm->did_check_for_createloaded = true; } if (out_handle && tpm->use_createloaded) { size_t offset = 0; TPM2B_TEMPLATE template = { .size = 0 }; rval = Tss2_MU_TPMT_PUBLIC_Marshal(&in_pub->publicArea, &template.buffer[0], sizeof(TPMT_PUBLIC), &offset); if (rval != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPMT_PUBLIC_Marshal: %s", Tss2_RC_Decode(rval)); return rval; } template.size = offset; rval = Esys_CreateLoaded( tpm->esys_ctx, parent, session, ESYS_TR_NONE, ESYS_TR_NONE, in_sens, &template, out_handle, out_priv, out_pub); if(rval != TPM2_RC_SUCCESS) { LOGE("Esys_CreateLoaded: %s", Tss2_RC_Decode(rval)); return rval; } } else { TPM2B_DATA outside_info = TPM2B_EMPTY_INIT; TPML_PCR_SELECTION creation_pcr = { .count = 0 }; TPM2B_CREATION_DATA *creation_data = NULL; TPM2B_DIGEST *creation_hash = NULL; TPMT_TK_CREATION *creation_ticket = NULL; rval = Esys_Create(tpm->esys_ctx, parent, session, ESYS_TR_NONE, ESYS_TR_NONE, in_sens, in_pub, &outside_info, &creation_pcr, out_priv, out_pub, &creation_data, &creation_hash, &creation_ticket); if(rval != TPM2_RC_SUCCESS) { LOGE("Esys_Create: %s", Tss2_RC_Decode(rval)); return rval; } Esys_Free(creation_data); Esys_Free(creation_hash); Esys_Free(creation_ticket); assert(*out_priv); assert(*out_pub); if (!out_handle) return TSS2_RC_SUCCESS; rval = Esys_Load(tpm->esys_ctx, parent, session, ESYS_TR_NONE, ESYS_TR_NONE, *out_priv, *out_pub, out_handle); if(rval != TPM2_RC_SUCCESS) { LOGE("Esys_Load: %s", Tss2_RC_Decode(rval)); return rval; } } return TSS2_RC_SUCCESS; } CK_RV tpm2_create_seal_obj(tpm_ctx *ctx, twist parentauth, uint32_t parent_handle, twist objauth, twist oldpubblob, twist sealdata, twist *newpubblob, twist *newprivblob) { bool started_session = false; CK_RV rv = CKR_GENERAL_ERROR; CK_RV tmp_rv = CKR_GENERAL_ERROR; /* * clone the public portion from the existing object by unmarshaling (aka unserializing) it from the * pub blob and converting it to a TPM2B_TEMPLATE */ TPM2B_PUBLIC pub = DEFAULT_SEAL_TEMPLATE; if (oldpubblob) { pub.size = 0; size_t len = twist_len(oldpubblob); size_t offset = 0; TSS2_RC rc = Tss2_MU_TPM2B_PUBLIC_Unmarshal((uint8_t *)oldpubblob, len, &offset, &pub); if (rc != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PUBLIC_Unmarshal: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } } /* * Set the seal data and auth value in the sensitive portion */ TPM2B_SENSITIVE_CREATE sensitive = { .size = 0 }; size_t len = twist_len(sealdata); if (len > sizeof(sensitive.sensitive.data.buffer)) { LOGE("Seal data too big"); return CKR_GENERAL_ERROR; } memcpy(sensitive.sensitive.data.buffer, sealdata, len); sensitive.sensitive.data.size = len; len = twist_len(objauth); if (len > sizeof(sensitive.sensitive.userAuth.buffer)) { LOGE("Auth value too big"); return CKR_GENERAL_ERROR; } memcpy(sensitive.sensitive.userAuth.buffer, objauth, len); sensitive.sensitive.userAuth.size = len; /* * Set the parent object auth */ if (!ctx->hmac_session) { rv = tpm_session_start(ctx, parentauth, parent_handle); if (rv != CKR_OK) { return rv; } started_session = true; } else { bool res = set_esys_auth(ctx->esys_ctx, parent_handle, parentauth); if (!res) { return CKR_GENERAL_ERROR; } } TPM2B_PRIVATE *newpriv = NULL; TPM2B_PUBLIC *newpub = NULL; TSS2_RC rc = create_loaded( ctx, parent_handle, ctx->hmac_session, &sensitive, &pub, NULL, &newpub, &newpriv ); if (rc != TSS2_RC_SUCCESS) { return CKR_GENERAL_ERROR; } uint8_t serialized[sizeof(*newpriv) > sizeof(*newpub) ? sizeof(*newpriv) : sizeof(*newpub)]; /* serialize the new blob private */ size_t offset = 0; rc = Tss2_MU_TPM2B_PRIVATE_Marshal(newpriv, serialized, sizeof(*newpriv), &offset); if (rc != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PRIVATE_Marshal: %s", Tss2_RC_Decode(rc)); goto out; } *newprivblob = twistbin_new(serialized, offset); if (!*newprivblob) { goto out; } /* serialize the new blob public */ offset = 0; rc = Tss2_MU_TPM2B_PUBLIC_Marshal(newpub, serialized, sizeof(*newpub), &offset); if (rc != TSS2_RC_SUCCESS) { twist_free(*newprivblob); *newprivblob = NULL; LOGE("Tss2_MU_TPM2B_PUBLIC_Marshal: %s", Tss2_RC_Decode(rc)); goto out; } *newpubblob = twistbin_new(serialized, offset); if (!*newpubblob) { twist_free(*newprivblob); *newprivblob = NULL; goto out; } rv = CKR_OK; out: if (started_session) { tmp_rv = tpm_session_stop(ctx); if (tmp_rv != CKR_OK) { rv = tmp_rv; } } free(newpriv); free(newpub); return rv; } typedef struct tpm_key_data tpm_key_data; struct tpm_key_data { tpm_ctx *ctx; TPM2B_PUBLIC pub; TPM2B_SENSITIVE_CREATE priv; }; static CK_RV generic_bbool_check(CK_ATTRIBUTE_PTR attr, CK_BBOOL check) { CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value != check) { LOGE("Expected attr 0x%lx to be %u, got %u", attr->type, value, check); return CKR_ATTRIBUTE_VALUE_INVALID; } return CKR_OK; } static CK_RV generic_bbool_true(CK_ATTRIBUTE_PTR attr, void *udata) { UNUSED(udata); return generic_bbool_check(attr, CK_TRUE); } static CK_RV generic_bbool_false(CK_ATTRIBUTE_PTR attr, void *udata) { UNUSED(udata); return generic_bbool_check(attr, CK_FALSE); } static CK_RV generic_bbool_any(CK_ATTRIBUTE_PTR attr, void *udata) { UNUSED(udata); CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value != CK_TRUE && value != CK_FALSE) { return CKR_ATTRIBUTE_VALUE_INVALID; } return CKR_OK; } static CK_RV handle_modulus(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; CK_ULONG value; CK_RV rv = attr_CK_ULONG(attr, &value); if (rv != CKR_OK) { return rv; } CK_ULONG min = 0; CK_ULONG max = 0; rv = tpm_find_max_rsa_keysize(keydat->ctx, &min, &max); if (rv != CKR_OK) { return rv; } if (value < min || value > max) { LOGE("Keysize %lu not supported.", value); return CKR_ATTRIBUTE_VALUE_INVALID; } keydat->pub.publicArea.parameters.rsaDetail.keyBits = value; return CKR_OK; } static CK_RV handle_ecparams(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; int nid = 0; CK_RV rv = ssl_util_params_to_nid(attr, &nid); if (rv != CKR_OK) { return rv; } TPMS_ECC_PARMS *ec = &keydat->pub.publicArea.parameters.eccDetail; TPMI_ECC_CURVE curve = nid_to_tpm2alg(nid); if (curve == TPM2_ALG_ERROR) { return CKR_CURVE_NOT_SUPPORTED; } ec->curveID = curve; return CKR_OK; } static CK_RV handle_encrypt(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value == CK_TRUE) { keydat->pub.publicArea.objectAttributes |= TPMA_OBJECT_SIGN_ENCRYPT; } else { keydat->pub.publicArea.objectAttributes &= ~TPMA_OBJECT_SIGN_ENCRYPT; } return CKR_OK; } static CK_RV handle_decrypt(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value == CK_TRUE) { keydat->pub.publicArea.objectAttributes |= TPMA_OBJECT_DECRYPT; } else { keydat->pub.publicArea.objectAttributes &= ~TPMA_OBJECT_DECRYPT; } return CKR_OK; } static CK_RV handle_exp(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; UINT32 *e = &keydat->pub.publicArea.parameters.rsaDetail.exponent; if (attr->ulValueLen > sizeof(*e)) { return CKR_ATTRIBUTE_VALUE_INVALID; } BIGNUM *bn = NULL; bn = BN_bin2bn(attr->pValue, attr->ulValueLen, NULL); if (!bn) { return CKR_HOST_MEMORY; } BN_ULONG value = BN_get_word(bn); *e = value; BN_free(bn); return CKR_OK; } static CK_RV handle_ckobject_class(CK_ATTRIBUTE_PTR attr, void *udata) { UNUSED(udata); CK_OBJECT_CLASS class[2] = { CKA_PRIVATE, /* p11tool */ CKO_PRIVATE_KEY /* pkcs11-tool */ }; if (attr->ulValueLen != sizeof(class[0])) { LOGE("Expected CK_OBJECT_CLASS length to be %zu got %lu", sizeof(class), attr->ulValueLen); return CKR_ATTRIBUTE_VALUE_INVALID; } CK_OBJECT_CLASS_PTR class_ptr = (CK_OBJECT_CLASS_PTR)attr->pValue; size_t i; bool found = false; for (i=0; i < ARRAY_LEN(class); i++) { if (*class_ptr == class[i]) { found = true; break; } } if (!found) { LOGE("Unexpected CK_OBJECT_CLASS got %lu", *class_ptr); return CKR_ATTRIBUTE_VALUE_INVALID; } return CKR_OK; } static CK_RV handle_extractable_common(CK_ATTRIBUTE_PTR attr, bool is_extractable, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; CK_BBOOL value; CK_RV rv = attr_CK_BBOOL(attr, &value); if (rv != CKR_OK) { return rv; } if (value == is_extractable ? true : false) { keydat->pub.publicArea.objectAttributes &= ~(TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT); } else { keydat->pub.publicArea.objectAttributes |= (TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT); } return CKR_OK; } static CK_RV handle_extractable(CK_ATTRIBUTE_PTR attr, void *udata) { return handle_extractable_common(attr, true, udata); } static CK_RV handle_sensitive(CK_ATTRIBUTE_PTR attr, void *udata) { return handle_extractable_common(attr, false, udata); } static CK_RV handle_key_type(CK_ATTRIBUTE_PTR attr, void *udata) { tpm_key_data *keydat = (tpm_key_data *)udata; CK_ULONG value; CK_RV rv = attr_CK_ULONG(attr, &value); if (rv != CKR_OK) { return rv; } if ((value == CKK_RSA && keydat->pub.publicArea.type == TPM2_ALG_RSA) || (value == CKK_EC && keydat->pub.publicArea.type == TPM2_ALG_ECC)) { return CKR_OK; } return CKR_ATTRIBUTE_VALUE_INVALID; } static CK_RV sanity_check_mech(CK_MECHANISM_PTR mechanism) { switch (mechanism->mechanism) { case CKM_RSA_PKCS_KEY_PAIR_GEN: /* falls-thru */ case CKM_EC_KEY_PAIR_GEN: break; default: LOGE("Only supports mechanism \"CKM_RSA_PKCS_KEY_PAIR_GEN\" or" "\"CKM_EC_KEY_PAIR_GEN\", got: 0x%lx", mechanism->mechanism); return CKR_MECHANISM_INVALID; } if (mechanism->ulParameterLen) { LOGE("Expected mechanism with an empty parameter, got length: %lu", mechanism->ulParameterLen); return CKR_MECHANISM_PARAM_INVALID; } if (mechanism->pParameter) { LOGE("Expected mechanism with an empty parameter, got a parameter pointer"); return CKR_MECHANISM_PARAM_INVALID; } return CKR_OK; } static const attr_handler tpm_handlers[] = { { CKA_TOKEN, generic_bbool_true }, { CKA_PRIVATE, generic_bbool_any }, { CKA_VERIFY, handle_decrypt }, // Verify is same as decrypt { CKA_ENCRYPT, handle_encrypt }, { CKA_DECRYPT, handle_decrypt }, { CKA_SIGN, handle_encrypt }, // SIGN_ENCRYPT are same in TPM, depends on SCHEME { CKA_MODULUS_BITS, handle_modulus }, { CKA_PUBLIC_EXPONENT, handle_exp }, { CKA_SENSITIVE, handle_sensitive }, { CKA_CLASS, handle_ckobject_class }, { CKA_EXTRACTABLE, handle_extractable }, { CKA_EC_PARAMS, handle_ecparams }, { CKA_KEY_TYPE, handle_key_type }, { CKA_TRUSTED, generic_bbool_false }, { CKA_SIGN_RECOVER, generic_bbool_false }, { CKA_VERIFY_RECOVER, generic_bbool_false }, { CKA_DERIVE, generic_bbool_any }, }; static CK_RV tpm_data_init( CK_MECHANISM_PTR mechanism, attr_list *pubattrs, attr_list *privattrs, tpm_key_data *tpmdat) { memset(&tpmdat->priv, 0, sizeof(tpmdat->priv)); memset(&tpmdat->pub, 0, sizeof(tpmdat->pub)); switch(mechanism->mechanism) { case CKM_RSA_PKCS_KEY_PAIR_GEN: tpmdat->pub = rsa_template; break; case CKM_EC_KEY_PAIR_GEN: tpmdat->pub = ecc_template; break; default: /* should never happen checked at entry */ LOGE("Unsupported key pair mechanism: 0x%lx", mechanism->mechanism); assert(0); return CKR_MECHANISM_INVALID; } CK_RV rv = attr_list_invoke_handlers(pubattrs, tpm_handlers, ARRAY_LEN(tpm_handlers), tpmdat); if (rv != CKR_OK) { return rv; } rv = attr_list_invoke_handlers(privattrs, tpm_handlers, ARRAY_LEN(tpm_handlers), tpmdat); if (rv != CKR_OK) { return rv; } return CKR_OK; } static CK_RV uint32_to_BN(uint32_t value, void **bytes, CK_ULONG_PTR len) { CK_RV rv = CKR_GENERAL_ERROR; BIGNUM *b = BN_new(); if (!b) { LOGE("oom"); return CKR_HOST_MEMORY; } int rc = BN_set_word(b, value); if (!rc) { LOGE("BN_set_word failed: %d", rc); goto out; } int l = BN_num_bytes(b); if (!l) { LOGE("Expected bignum to not be 0"); return CKR_GENERAL_ERROR; } void *x = malloc(l); if (!x) { LOGE("oom"); rv = CKR_HOST_MEMORY; goto out; } rc = BN_bn2bin(b, x); if (!rc) { free(x); LOGE("BN_bn2bin failed: %d", rc); goto out; } *bytes = x; *len = l; rv = CKR_OK; out: BN_free(b); return rv; } static CK_RV tpm_object_data_populate_rsa(TPM2B_PUBLIC *out_pub, tpm_object_data *objdata) { assert(out_pub); assert(objdata); /* MODULUS */ bool r = attr_list_add_buf(objdata->attrs, CKA_MODULUS, out_pub->publicArea.unique.rsa.buffer, out_pub->publicArea.unique.rsa.size); if (!r) { return CKR_GENERAL_ERROR; } UINT32 exp = out_pub->publicArea.parameters.rsaDetail.exponent; if (!exp) { exp = 65537; } void *buf = NULL; CK_ULONG len = 0; CK_RV rv = uint32_to_BN(exp, &buf, &len); if (rv != CKR_OK) { return rv; } r = attr_list_add_buf(objdata->attrs, CKA_PUBLIC_EXPONENT, buf, len); free(buf); if (!r) { return CKR_GENERAL_ERROR; } return CKR_OK; } static EC_POINT *tpm_pub_to_ossl_pub(EC_GROUP *group, TPM2B_PUBLIC *key) { BIGNUM *bn_x = NULL; BIGNUM *bn_y = NULL; EC_POINT *pub_key_point_tmp = NULL; EC_POINT *r = NULL; /* Create the big numbers for the coordinates of the point */ bn_x = BN_bin2bn(&key->publicArea.unique.ecc.x.buffer[0], key->publicArea.unique.ecc.x.size, NULL); if (!bn_x) { LOGE("Create big num from byte buffer."); goto out; } bn_y = BN_bin2bn(&key->publicArea.unique.ecc.y.buffer[0], key->publicArea.unique.ecc.y.size, NULL); if (!bn_y) { LOGE("Create big num from byte buffer."); goto out; } /* Create the ec point with the affine coordinates of the TPM point */ pub_key_point_tmp = EC_POINT_new(group); if (!pub_key_point_tmp) { LOGE("Could not create new affine point from X and Y coordinates"); goto out; } int rc = EC_POINT_set_affine_coordinates(group, pub_key_point_tmp, bn_x, bn_y, NULL); if (!rc) { EC_POINT_free(pub_key_point_tmp); LOGE("Could not set affine coordinate points"); goto out; } /* sanity check that the point created in the group is on the curve */ rc = EC_POINT_is_on_curve(group, pub_key_point_tmp, NULL); if (!rc) { EC_POINT_free(pub_key_point_tmp); LOGE("The TPM point is not on the curve"); goto out; } r = pub_key_point_tmp; out: BN_free(bn_x); BN_free(bn_y); return r; } static CK_RV tpm_object_data_populate_ecc(TPM2B_PUBLIC *out_pub, tpm_object_data *objdata) { CK_RV rv = CKR_GENERAL_ERROR; EC_GROUP *group = NULL; /* Group defines the used curve */ EC_POINT *tpm_pub_key = NULL; /* Public part of TPM key */ int curveId; unsigned char *mydata = NULL; /* Set ossl constant for curve type and create group for curve */ switch (out_pub->publicArea.parameters.eccDetail.curveID) { case TPM2_ECC_NIST_P192: curveId = NID_X9_62_prime192v1; break; case TPM2_ECC_NIST_P224: curveId = NID_secp224r1; break; case TPM2_ECC_NIST_P256: curveId = NID_X9_62_prime256v1; break; case TPM2_ECC_NIST_P384: curveId = NID_secp384r1; break; case TPM2_ECC_NIST_P521: curveId = NID_secp521r1; break; default: LOGE("ECC Curve not implemented"); return CKR_GENERAL_ERROR; } group = EC_GROUP_new_by_curve_name(curveId); if (!group) { LOGE("EC_GROUP_new failed"); goto out; } tpm_pub_key = tpm_pub_to_ossl_pub(group, out_pub); if (!tpm_pub_key){ goto out; } ssize_t len = EC_POINT_point2buf(group, tpm_pub_key, POINT_CONVERSION_UNCOMPRESSED, &mydata, NULL); if (len <= 0) { LOGE("EC_POINT_point2buf failed: %zd", len); goto out; } if (len > 255) { LOGE("Length must fit within a byte, got %zd", len); goto out; } /* * Build a DER encoded uncompressed representation of the points * per X9.62. * * TODO get better link to documentation around this or build * with OSSL. */ size_t tmp = 0; safe_add(tmp, len, 2); char *padded_data = malloc(tmp); if (!padded_data) { LOGE("oom"); goto out; } padded_data[0] = 4; padded_data[1] = len; memcpy(&padded_data[2], mydata, len); safe_adde(len, 2); bool r = attr_list_add_buf(objdata->attrs, CKA_EC_POINT, (CK_BYTE_PTR)padded_data, len); free(padded_data); if (!r) { goto out; } rv = CKR_OK; out: EC_POINT_free(tpm_pub_key); EC_GROUP_free(group); OPENSSL_free(mydata); return rv; } static CK_RV serialize_pub_priv_blobs(TPM2B_PUBLIC *pub, TPM2B_PRIVATE *priv, twist *pubblob, twist *privblob) { twist tmppub = NULL; twist tmppriv = NULL; BYTE pubb[sizeof(*pub)]; size_t pubb_size = 0; BYTE privb[sizeof(*priv)]; size_t privb_size = 0; size_t offset = 0; TSS2_RC rc = Tss2_MU_TPM2B_PUBLIC_Marshal(pub, pubb, sizeof(pubb), &offset); if (rc != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PUBLIC_Marshal: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } pubb_size = offset; offset = 0; rc = Tss2_MU_TPM2B_PRIVATE_Marshal(priv, privb, sizeof(privb), &offset); if (rc != TSS2_RC_SUCCESS) { LOGE("Tss2_MU_TPM2B_PRIVATE_Marshal: %s", Tss2_RC_Decode(rc)); return CKR_GENERAL_ERROR; } privb_size = offset; tmppub = twistbin_new(pubb, pubb_size); if (!tmppub) { LOGE("oom"); return CKR_HOST_MEMORY; } tmppriv = twistbin_new(privb, privb_size); if (!tmppriv) { twist_free(tmppub); return CKR_HOST_MEMORY; } *pubblob = tmppub; *privblob = tmppriv; return CKR_OK; } CK_RV tpm2_generate_key( tpm_ctx *tpm, uint32_t parent, twist parentauth, twist newauthbin, CK_MECHANISM_PTR mechanism, attr_list *pubattrs, attr_list *privattrs, tpm_object_data *objdata) { twist tmppub = NULL; twist tmppriv = NULL; TPM2B_PUBLIC *out_pub = NULL; TPM2B_PRIVATE *out_priv = NULL; ESYS_TR out_handle = 0; CK_RV rv = CKR_GENERAL_ERROR; assert(objdata); rv = sanity_check_mech(mechanism); if (rv != CKR_OK) { goto error; } tpm_key_data tpmdat = { .ctx = tpm }; rv = tpm_data_init( mechanism, pubattrs, privattrs, &tpmdat); if (rv != CKR_OK) { goto error; } bool res = set_esys_auth(tpm->esys_ctx, parent, parentauth); if (!res) { rv = CKR_GENERAL_ERROR; goto error; } /* * Guaranteed to fit but throw an assert in just in case * utils_setup_new_object_auth() changes. */ TPM2B_AUTH *auth = &tpmdat.priv.sensitive.userAuth; size_t len = twist_len(newauthbin); assert(len < sizeof(auth->buffer)); auth->size = len; memcpy(auth->buffer, newauthbin, auth->size); TSS2_RC rc = create_loaded( tpm, parent, tpm->hmac_session, &tpmdat.priv, &tpmdat.pub, &out_handle, &out_pub, &out_priv ); if (rc != TSS2_RC_SUCCESS) { rv = CKR_GENERAL_ERROR; LOGE("create_loaded %s", Tss2_RC_Decode(rc)); goto error; } assert(out_pub); assert(out_priv); /* load the public only object portion */ res = tpm_loadexternal(tpm, out_pub, &objdata->pubhandle); if (!res) { rv = CKR_GENERAL_ERROR; goto error; } /* serialize the tpm public private object portions */ rv = serialize_pub_priv_blobs(out_pub, out_priv, &tmppub, &tmppriv); if (rv != CKR_OK) { goto error; } objdata->attrs = attr_list_new(); if (!objdata->attrs) { twist_free(tmppub); twist_free(tmppriv); LOGE("oom"); rv = CKR_HOST_MEMORY; goto error; } switch(mechanism->mechanism) { case CKM_RSA_PKCS_KEY_PAIR_GEN: rv = tpm_object_data_populate_rsa(out_pub, objdata); break; case CKM_EC_KEY_PAIR_GEN: rv = tpm_object_data_populate_ecc(out_pub, objdata); break; default: LOGE("Impossible keygen type, got: 0x%lx", mechanism->mechanism); rv = CKR_MECHANISM_INVALID; assert(rv == CKR_OK); goto error; } if (rv != CKR_OK) { goto error; } /* everything common*/ TPMA_OBJECT objattrs = out_pub->publicArea.objectAttributes; CK_BBOOL extractable = !!!(objattrs & (TPMA_OBJECT_FIXEDTPM|TPMA_OBJECT_FIXEDPARENT)); bool r = attr_list_add_bool(objdata->attrs, CKA_EXTRACTABLE, extractable); goto_error_false(r); CK_BBOOL sensitive = !extractable; r = attr_list_add_bool(objdata->attrs, CKA_ALWAYS_SENSITIVE, sensitive); goto_error_false(r); CK_BBOOL never_extractable = !extractable; r = attr_list_add_bool(objdata->attrs, CKA_NEVER_EXTRACTABLE, never_extractable); goto_error_false(r); CK_BBOOL local = !!(objattrs & TPMA_OBJECT_SENSITIVEDATAORIGIN); r = attr_list_add_bool(objdata->attrs, CKA_LOCAL, local); goto_error_false(r); /* conditional block */ CK_BBOOL decrypt = !!(objattrs & TPMA_OBJECT_DECRYPT); r = attr_list_add_bool(objdata->attrs, CKA_DECRYPT, decrypt); goto_error_false(r); /* decrypt and verify are the same */ r = attr_list_add_bool(objdata->attrs, CKA_VERIFY, decrypt); goto_error_false(r); CK_BBOOL sign = !!(objattrs & TPMA_OBJECT_SIGN_ENCRYPT); r = attr_list_add_bool(objdata->attrs, CKA_SIGN, sign); goto_error_false(r); /* sign and encrypt are same */ r = attr_list_add_bool(objdata->attrs, CKA_ENCRYPT, sign); goto_error_false(r); objdata->privblob = tmppriv; objdata->pubblob = tmppub; objdata->privhandle = out_handle; rv = CKR_OK; error: Esys_Free(out_pub); Esys_Free(out_priv); if (rv != CKR_OK) { tpm_objdata_free(objdata); } return rv; } void tpm_objdata_free(tpm_object_data *objdata) { if (!objdata) { return; } attr_list_free(objdata->attrs); twist_free(objdata->privblob); twist_free(objdata->pubblob); } CK_RV tpm_get_algorithms(tpm_ctx *ctx, TPMS_CAPABILITY_DATA **capabilityData) { if (ctx->tpms_alg_cache) { *capabilityData = ctx->tpms_alg_cache; return CKR_OK; } TPM2_CAP capability = TPM2_CAP_ALGS; UINT32 property = TPM2_ALG_FIRST; UINT32 propertyCount = TPM2_MAX_CAP_ALGS; TPMI_YES_NO moreData; check_pointer(ctx); check_pointer(capabilityData); TPMS_CAPABILITY_DATA *capdata = NULL; TSS2_RC rval = Esys_GetCapability(ctx->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, capability, property, propertyCount, &moreData, &capdata); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_GetCapability: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } *capabilityData = ctx->tpms_alg_cache = capdata; return CKR_OK; } static CK_BBOOL is_algorithm_supported(TPMU_CAPABILITIES *capabilities, TPM2_ALG_ID algorithm){ for (unsigned int i = 0 ; i < capabilities->algorithms.count ; i++){ if (capabilities->algorithms.algProperties[i].alg == algorithm){ return CK_TRUE; } } return CK_FALSE; } #define add_mech(mech) \ if (mechanism_list) { /* Only update if not called for size*/ \ if (*count <= supported) { \ rv = CKR_BUFFER_TOO_SMALL; \ goto out; \ } \ mechanism_list[supported] = mech; \ } \ supported++; #define if_add_mech(list, test, mech) \ if (is_algorithm_supported(list, test)) { \ add_mech(mech); \ } static CK_RV tpm2_get_modes(tpm_ctx *ctx, TPMA_MODES *modes) { /* get the TPMA_MODES field from fixed properties */ TPMS_CAPABILITY_DATA *fixed_props = NULL; CK_RV rv = tpm_get_properties(ctx, &fixed_props); if (rv != CKR_OK) { LOGE("Could not get fixed properties from TPM"); return rv; } TPML_TAGGED_TPM_PROPERTY *plist = &fixed_props->data.tpmProperties; UINT32 i; for (i = 0; i < plist->count; i++) { TPM2_PT property = plist->tpmProperty[i].property; if (property == TPM2_PT_MODES) { *modes = plist->tpmProperty[i].value; return CKR_OK; } } /* if we don't find it, we just say modes is implicitly empty */ *modes = 0; return CKR_OK; } CK_RV tpm2_getmechanisms(tpm_ctx *ctx, CK_MECHANISM_TYPE *mechanism_list, CK_ULONG_PTR count){ check_pointer(count); check_pointer(ctx); CK_ULONG supported = 0; TPMS_CAPABILITY_DATA *capabilityData = NULL; CK_RV rv = tpm_get_algorithms(ctx, &capabilityData); if (rv != CKR_OK) { LOGE("Retrieving supported algorithms from TPM failed"); return rv; } TPMU_CAPABILITIES *algs= &capabilityData->data; /* get the TPMA_MODES field from fixed properties */ TPMA_MODES modes = 0; rv = tpm2_get_modes(ctx, &modes); if (rv != CKR_OK) { return rv; } /* RSA */ if (is_algorithm_supported(algs, TPM2_ALG_RSA)) { /* if RSA is supported, these modes MUST be supported */ add_mech(CKM_RSA_PKCS); add_mech(CKM_RSA_PKCS_OAEP); add_mech(CKM_RSA_PKCS_KEY_PAIR_GEN); add_mech(CKM_RSA_X_509); if_add_mech(algs, TPM2_ALG_SHA1, CKM_SHA1_RSA_PKCS) if_add_mech(algs, TPM2_ALG_SHA256, CKM_SHA256_RSA_PKCS); if_add_mech(algs, TPM2_ALG_SHA384, CKM_SHA384_RSA_PKCS); if_add_mech(algs, TPM2_ALG_SHA512, CKM_SHA512_RSA_PKCS); /* * RSA PSS signatures, per Anex B7 of: * - https://trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-1-Architecture-01.38.pdf * * States that the saltlen is the maximum permitted. However, most things, and the TLS spec * call out that saltlen should equal hashlength. However, in FIPS-140-2 mode, the saltlen * does equal hash length, so: * - if fips mode is on, we can support it nativeley * - if fips mode is off, we can synthesize it by applying the padding * and using raw RSA. */ if (modes & TPMA_MODES_FIPS_140_2) { add_mech(CKM_RSA_PKCS_PSS); if_add_mech(algs, TPM2_ALG_SHA1, CKM_SHA1_RSA_PKCS_PSS) if_add_mech(algs, TPM2_ALG_SHA256, CKM_SHA256_RSA_PKCS_PSS); if_add_mech(algs, TPM2_ALG_SHA384, CKM_SHA384_RSA_PKCS_PSS); if_add_mech(algs, TPM2_ALG_SHA512, CKM_SHA512_RSA_PKCS_PSS); } } /* ECC */ if (is_algorithm_supported(algs, TPM2_ALG_ECC)) { add_mech(CKM_EC_KEY_PAIR_GEN); if_add_mech(algs, TPM2_ALG_ECDSA, CKM_ECDSA); if_add_mech(algs, TPM2_ALG_ECDSA, CKM_ECDSA_SHA1); if_add_mech(algs, TPM2_ALG_ECDSA, CKM_ECDSA_SHA256); if_add_mech(algs, TPM2_ALG_ECDSA, CKM_ECDSA_SHA384); if_add_mech(algs, TPM2_ALG_ECDSA, CKM_ECDSA_SHA512); } /* AES */ if (is_algorithm_supported(algs, TPM2_ALG_AES)) { add_mech(CKM_AES_KEY_GEN); if_add_mech(algs, TPM2_ALG_CBC, CKM_AES_CBC); if_add_mech(algs, TPM2_ALG_CBC, CKM_AES_CBC_PAD); if_add_mech(algs, TPM2_ALG_CFB, CKM_AES_CFB128); if_add_mech(algs, TPM2_ALG_ECB, CKM_AES_ECB); if_add_mech(algs, TPM2_ALG_CTR, CKM_AES_CTR); } /* HMAC */ if (is_algorithm_supported(algs, TPM2_ALG_KEYEDHASH)) { if_add_mech(algs, TPM2_ALG_SHA1, CKM_SHA_1_HMAC); if_add_mech(algs, TPM2_ALG_SHA256, CKM_SHA256_HMAC); if_add_mech(algs, TPM2_ALG_SHA384, CKM_SHA384_HMAC); if_add_mech(algs, TPM2_ALG_SHA512, CKM_SHA512_HMAC); } out: *count = supported; return rv; } void tpm_init(void) { /* pass nothing to do */ } void tpm_destroy(void) { /* pass nothing to do */ } CK_RV tpm_serialize_handle(ESYS_CONTEXT *esys, ESYS_TR handle, twist *buf) { assert(buf); uint8_t *buffer = NULL; size_t size = 0; TSS2_RC rval = Esys_TR_Serialize(esys, handle, &buffer, &size); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_Serialize: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } twist t = twistbin_new(buffer, size); Esys_Free(buffer); if (!t) { LOGE("oom"); return CKR_HOST_MEMORY; } *buf = t; return CKR_OK; } #define PARAM_1_HANDLE_IS_INVALID 0x0000018b CK_RV tpm_get_existing_primary(tpm_ctx *tpm, uint32_t *primary_handle, twist *primary_blob) { assert(tpm); assert(tpm->esys_ctx); assert(primary_blob); ESYS_TR handle = ESYS_TR_NONE; TPMI_YES_NO more_data = TPM2_NO; TPMS_CAPABILITY_DATA *capdata = NULL; /* Check for the handle here to avoid causing TPM2_ReadPublic to fail loudly */ TSS2_RC rval = Esys_GetCapability( tpm->esys_ctx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, TPM2_CAP_HANDLES, TPM2_PERSISTENT_FIRST, TPM2_MAX_CAP_HANDLES, &more_data, &capdata); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_GetCapability: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } TPM2_HANDLE find_handle = DEFAULT_SRK_HANDLE; bool found = false; UINT32 i; TPM2_HANDLE *found_handles = capdata->data.handles.handle; for (i=0; i < capdata->data.handles.count; i++) { if (find_handle == found_handles[i]) { found = true; break; } } Esys_Free(capdata); if (!found) { *primary_handle = 0; LOGV("No Provisioning Guide Spec Key Handle"); return CKR_OK; } rval = Esys_TR_FromTPMPublic( tpm->esys_ctx, find_handle, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, &handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_TR_FromTPMPublic: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } CK_RV rv = tpm_serialize_handle(tpm->esys_ctx, handle, primary_blob); if (rv != CKR_OK) { return rv; } *primary_handle = handle; return CKR_OK; } typedef CK_RV (*pfn_populate)(tpm_ctx *tpm, TPM2B_PUBLIC *pub); typedef struct key_template key_template; struct key_template { const char *template_name; pfn_populate fn; }; static CK_RV tss2_engine_pub_populator(tpm_ctx *tpm, TPM2B_PUBLIC *pub) { assert(tpm); static const TPM2B_PUBLIC primary_ecc_template = { .size = 0, .publicArea = { .type = TPM2_ALG_ECC, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = (TPMA_OBJECT_USERWITHAUTH |TPMA_OBJECT_RESTRICTED |TPMA_OBJECT_DECRYPT |TPMA_OBJECT_NODA |TPMA_OBJECT_FIXEDTPM |TPMA_OBJECT_FIXEDPARENT |TPMA_OBJECT_SENSITIVEDATAORIGIN), .authPolicy = { 0 }, .parameters.eccDetail = { .symmetric = { .algorithm = TPM2_ALG_AES, .keyBits.aes = 128, .mode.aes = TPM2_ALG_CFB, }, .scheme = { .scheme = TPM2_ALG_NULL, }, .curveID = TPM2_ECC_NIST_P256, .kdf = { .scheme = TPM2_ALG_NULL, .details = {}} }, .unique.ecc = { .x = {.size = 0,.buffer = {}}, .y = {.size = 0,.buffer = {}}, }, } /* end TPMT */ }; static const TPM2B_PUBLIC primary_rsa_template = { .size = 0, .publicArea = { .type = TPM2_ALG_RSA, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = (TPMA_OBJECT_USERWITHAUTH |TPMA_OBJECT_RESTRICTED |TPMA_OBJECT_DECRYPT |TPMA_OBJECT_NODA |TPMA_OBJECT_FIXEDTPM |TPMA_OBJECT_FIXEDPARENT |TPMA_OBJECT_SENSITIVEDATAORIGIN), .authPolicy = { 0 }, .parameters.rsaDetail = { .symmetric = { .algorithm = TPM2_ALG_AES, .keyBits.aes = 128, .mode.aes = TPM2_ALG_CFB, }, .scheme = { .scheme = TPM2_ALG_NULL, .details = {} }, .keyBits = 2048, .exponent = 0, } }, /* end TPMT */ }; TPMS_CAPABILITY_DATA *cap_data = NULL; CK_RV rv = tpm_get_algorithms(tpm, &cap_data); if (rv != CKR_OK) { return rv; } bool supports_ecc = false; bool supports_rsa = false; TPML_ALG_PROPERTY *algs = &cap_data->data.algorithms; UINT32 i; for (i=0; i < algs->count; i++) { TPMS_ALG_PROPERTY *p = &algs->algProperties[i]; if (p->alg == TPM2_ALG_ECC) { supports_ecc = true; } else if (p->alg == TPM2_ALG_RSA) { supports_rsa = true; } /* nothing left to examine, exit loop */ if (supports_ecc && supports_rsa) { break; } } if (!supports_rsa && !supports_ecc) { LOGE("TPM Supports niether ECC nor RSA?"); return CKR_GENERAL_ERROR; } *pub = supports_ecc ? primary_ecc_template : primary_rsa_template; return CKR_OK; } static CK_RV tpm2_tools_default_pub_populator(tpm_ctx *tpm, TPM2B_PUBLIC *pub) { UNUSED(tpm); /* fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt */ static const TPM2B_PUBLIC primary_rsa_template = { .size = 0, .publicArea = { .type = TPM2_ALG_RSA, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT | TPMA_OBJECT_SENSITIVEDATAORIGIN | TPMA_OBJECT_USERWITHAUTH | TPMA_OBJECT_RESTRICTED | TPMA_OBJECT_DECRYPT , .authPolicy = { 0 }, .parameters.rsaDetail = { .symmetric = { .algorithm = TPM2_ALG_AES, .keyBits.aes = 128, .mode.aes = TPM2_ALG_CFB, }, .scheme = { .scheme = TPM2_ALG_NULL, .details = {} }, .keyBits = 2048, .exponent = 0, } }, /* end TPMT */ }; *pub = primary_rsa_template; return CKR_OK; } static CK_RV tpm2_tools_default_ecc_pub_populator(tpm_ctx *tpm, TPM2B_PUBLIC *pub) { UNUSED(tpm); /* fixedtpm|fixedparent|sensitivedataorigin|userwithauth|restricted|decrypt */ static const TPM2B_PUBLIC primary_ecc_template = { .size = 0, .publicArea = { .type = TPM2_ALG_ECC, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT | TPMA_OBJECT_SENSITIVEDATAORIGIN | TPMA_OBJECT_USERWITHAUTH | TPMA_OBJECT_RESTRICTED | TPMA_OBJECT_DECRYPT , .authPolicy = { 0 }, .parameters.eccDetail = { .symmetric = { .algorithm = TPM2_ALG_AES, .keyBits.aes = 128, .mode.aes = TPM2_ALG_CFB, }, .scheme = { .scheme = TPM2_ALG_NULL, }, .curveID = TPM2_ECC_NIST_P256, .kdf = { .scheme = TPM2_ALG_NULL, .details = {}} }, .unique.ecc = { .x = {.size = 0,.buffer = {}}, .y = {.size = 0,.buffer = {}}, }, }, /* end TPMT */ }; *pub = primary_ecc_template; return CKR_OK; } /* * Mapping friendly string names to primary objects templates */ static const key_template TEMPLATES[] = { { .template_name = "tss2-engine-key", .fn = tss2_engine_pub_populator, }, { .template_name= "tpm2-tools-default", .fn = tpm2_tools_default_pub_populator, }, { .template_name= "tpm2-tools-ecc-default", .fn = tpm2_tools_default_ecc_pub_populator, } }; WEAK CK_RV tpm_create_transient_primary_from_template(tpm_ctx *tpm, const char *template_name, twist pobj_auth, uint32_t *primary_handle) { const key_template *templ = NULL; size_t i; for(i=0; i < ARRAY_LEN(TEMPLATES); i++) { const key_template *t = &TEMPLATES[i]; if (!strcmp(template_name, t->template_name)) { templ = t; break; } } if (!templ) { LOGE("No match for template with name: \"%s\"", template_name); return CKR_GENERAL_ERROR; } /* TODO make configurable ? */ ESYS_TR hierarchy = ESYS_TR_RH_OWNER; /* * Hierarchy is currently fixed to owner auth, but eventually * this could be: * TPM2_PKCS11__AUTH where is one of: * OWNER * PLATFORM * ENDORSEMENT * NULL */ const char *auth = getenv("TPM2_PKCS11_OWNER_AUTH"); bool res = set_esys_auth_string(tpm->esys_ctx, hierarchy, auth); if (!res) { return CKR_GENERAL_ERROR; } TPM2B_DATA outside_info = { 0 }; TPML_PCR_SELECTION pcrs = { 0 }; TPM2B_SENSITIVE_CREATE in_sens = { 0 }; if (pobj_auth) { size_t len = twist_len(pobj_auth); TPM2B_AUTH *a = &in_sens.sensitive.userAuth; if (len > sizeof(a->buffer)) { LOGE("pobject auth too large"); return CKR_GENERAL_ERROR; } a->size = (UINT16)len; memcpy(a->buffer, pobj_auth, len); } TPM2B_PUBLIC in_pub = { 0 }; CK_RV rv = templ->fn(tpm, &in_pub); if (rv != CKR_OK) { LOGE("Template population routine failed: 0x%lx", rv); return rv; } TPM2B_PUBLIC *out_pub = NULL; TPM2B_CREATION_DATA *data = NULL; TPM2B_DIGEST *hash = NULL; TPMT_TK_CREATION *ticket = NULL; ESYS_TR handle = ESYS_TR_NONE; TSS2_RC rval = Esys_CreatePrimary(tpm->esys_ctx, hierarchy, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE, &in_sens, &in_pub, &outside_info, &pcrs, &handle, &out_pub, &data, &hash, &ticket); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_CreatePrimary: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } Esys_Free(data); Esys_Free(hash); Esys_Free(ticket); Esys_Free(out_pub); *primary_handle = handle; return CKR_OK; } CK_RV tpm_create_persistent_primary(tpm_ctx *tpm, uint32_t *primary_handle, twist *primary_blob) { assert(tpm); assert(primary_blob); assert(tpm->esys_ctx); /* TODO make configurable ? */ ESYS_TR hierarchy = ESYS_TR_RH_OWNER; TPM2B_SENSITIVE_CREATE sens = { 0 }; /* TODO use proper template ? */ // https://trustedcomputinggroup.org/wp-content/uploads/Credential_Profile_EK_V2.0_R14_published.pdf // https://trustedcomputinggroup.org/wp-content/uploads/TCG_PC_Client_Platform_TPM_Profile_PTP_2.0_r1.03_v22.pdf TPM2B_PUBLIC pub_template = { .size = 0, .publicArea = { .type = TPM2_ALG_ECC, .nameAlg = TPM2_ALG_SHA256, .objectAttributes = (TPMA_OBJECT_USERWITHAUTH | TPMA_OBJECT_RESTRICTED | TPMA_OBJECT_DECRYPT | TPMA_OBJECT_FIXEDTPM | TPMA_OBJECT_FIXEDPARENT | TPMA_OBJECT_SENSITIVEDATAORIGIN), .authPolicy = { .size = 0, }, .parameters.eccDetail = { .symmetric = { .algorithm = TPM2_ALG_AES, .keyBits.aes = 128, .mode.aes = TPM2_ALG_CFB, }, .scheme = { .scheme = TPM2_ALG_NULL, }, .curveID = TPM2_ECC_NIST_P256, .kdf = { .scheme = TPM2_ALG_NULL, .details = {}} }, .unique.ecc = { .x = {.size = 0,.buffer = {}}, .y = {.size = 0,.buffer = {}}, }, }, }; TPM2B_DATA outside_info = { 0 }; TPML_PCR_SELECTION pcrs = { 0 }; const char *auth = getenv("TPM2_PKCS11_OWNER_AUTH"); bool res = set_esys_auth_string(tpm->esys_ctx, hierarchy, auth); if (!res) { return CKR_GENERAL_ERROR; } TPM2B_PUBLIC *out_pub = NULL; TPM2B_CREATION_DATA *data = NULL; TPM2B_DIGEST *hash = NULL; TPMT_TK_CREATION *ticket = NULL; ESYS_TR handle = ESYS_TR_NONE; TSS2_RC rval = Esys_CreatePrimary(tpm->esys_ctx, hierarchy, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE, &sens, &pub_template, &outside_info, &pcrs, &handle, &out_pub, &data, &hash, &ticket); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_CreatePrimary: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } Esys_Free(data); Esys_Free(hash); Esys_Free(ticket); Esys_Free(out_pub); // XXX should we be creating this here, if so it should probably // match provisioning spec ESYS_TR new_handle = ESYS_TR_NONE; rval = Esys_EvictControl(tpm->esys_ctx, ESYS_TR_RH_OWNER, handle, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE, DEFAULT_SRK_HANDLE, &new_handle); if (rval != TSS2_RC_SUCCESS) { LOGE("Esys_EvictControl: %s:", Tss2_RC_Decode(rval)); return CKR_GENERAL_ERROR; } CK_RV rv = tpm_serialize_handle(tpm->esys_ctx, new_handle, primary_blob); if (rv != CKR_OK) { return rv; } *primary_handle = new_handle; return CKR_OK; } CK_RV tpm_get_pss_sig_state(tpm_ctx *tctx, tobject *tobj, bool *pss_sigs_good) { CK_RV rv = CKR_GENERAL_ERROR; TPM2B_PRIVATE *out_priv = NULL; TPM2B_PUBLIC *out_pub = NULL; TPMT_SIGNATURE *signature = NULL; EVP_PKEY *pkey = NULL; EVP_PKEY_CTX *pkey_ctx = NULL; /* * do the fastest operation to figure this out front by checking, * the hopefully cached, FIPS_140_2 mode bit */ TPMA_MODES modes = 0; rv = tpm2_get_modes(tctx, &modes); if (rv != CKR_OK) { return rv; } if (modes & TPMA_MODES_FIPS_140_2) { *pss_sigs_good = true; return CKR_OK; } /* Sign something using RSA PSS SHA256 */ static const TPM2B_DIGEST dgst = { .size = 32, .buffer = { 0xb5, 0xbb, 0x9d, 0x80, 0x14, 0xa0, 0xf9, 0xb1, 0xd6, 0x1e, 0x21, 0xe7, 0x96, 0xd7, 0x8d, 0xcc, 0xdf, 0x13, 0x52, 0xf2, 0x3c, 0xd3, 0x28, 0x12, 0xf4, 0x85, 0x0b, 0x87, 0x8a, 0xe4, 0x94, 0x4c } }; TPMT_SIG_SCHEME scheme = { 0 }; scheme.scheme = TPM2_ALG_RSAPSS; scheme.details.rsapss.hashAlg = TPM2_ALG_SHA256; TPMT_TK_HASHCHECK validation = { .tag = TPM2_ST_HASHCHECK, .hierarchy = TPM2_RH_NULL, .digest = { 0 } }; bool res = set_esys_auth(tctx->esys_ctx, tobj->tpm_handle, tobj->unsealed_auth); if (!res) { return CKR_GENERAL_ERROR; } TSS2_RC rval = Esys_Sign( tctx->esys_ctx, tobj->tpm_handle, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE, &dgst, &scheme, &validation, &signature); if (rval != TPM2_RC_SUCCESS) { LOGE("Esys_Sign: %s", Tss2_RC_Decode(rval)); goto out; } rv = ssl_util_attrs_to_evp(tobj->attrs, &pkey); if (rv != CKR_OK) { goto out; } rv = ssl_util_setup_evp_pkey_ctx(pkey, RSA_PKCS1_PSS_PADDING, EVP_sha256(), EVP_PKEY_verify_init, &pkey_ctx); if (rv != CKR_OK) { return rv; } int rc = EVP_PKEY_CTX_set_rsa_pss_saltlen(pkey_ctx, RSA_PSS_SALTLEN_DIGEST); if (!rc) { SSL_UTIL_LOGE("EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen" " RSA_PSS_SALTLEN_DIGEST failed"); goto out; } TPM2B_PUBLIC_KEY_RSA *sig = &signature->signature.rsapss.sig; rc = EVP_PKEY_verify(pkey_ctx, sig->buffer, sig->size, dgst.buffer, dgst.size); if (rc < 0) { SSL_UTIL_LOGE("EVP_PKEY_verify failed"); goto out; } if (rc == 1) { *pss_sigs_good = true; } else { *pss_sigs_good = false; } rv = CKR_OK; out: EVP_PKEY_CTX_free(pkey_ctx); EVP_PKEY_free(pkey); Esys_Free(out_priv); Esys_Free(out_pub); Esys_Free(signature); return rv; } CK_RV tpm_ec_ecdh1_derive(tpm_ctx *tctx, tobject *tobj, uint8_t *ecc_point, size_t ecc_point_len, uint8_t **secret, size_t *secret_len) { TPM2B_ECC_POINT *out_point = NULL; TPM2B_ECC_POINT in_point = { }; CK_RV rv = CKR_GENERAL_ERROR; if (!tobj || !tctx || !ecc_point || !ecc_point_len || !secret_len) { return CKR_ARGUMENTS_BAD; } rv = utils_uncompressed_ecpoint_to_tpm2b(ecc_point, &in_point, ecc_point_len); if (rv != CKR_OK) { return rv; } bool res = set_esys_auth(tctx->esys_ctx, tobj->tpm_handle, tobj->unsealed_auth); if (!res) { return CKR_GENERAL_ERROR; } rv = Esys_ECDH_ZGen(tctx->esys_ctx, tobj->tpm_handle, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE, &in_point, &out_point); if (rv != CKR_OK) { return rv; } *secret = calloc(1, out_point->point.x.size); if (!*secret) { rv = CKR_HOST_MEMORY; goto out; } *secret_len = out_point->point.x.size; memcpy(*secret, out_point->point.x.buffer, *secret_len); out: free(out_point); return rv; } tpm2-pkcs11-1.9.1/src/lib/twist.c0000644000175100017510000002143114535673717012065 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include "debug.h" #include "twist.h" #include "utils.h" #ifdef UNIT_TESTING static int _next_alloc_fails = 0; void twist_next_alloc_fails(void) { _next_alloc_fails = 1; } static int alloc_fails(void) { int x = _next_alloc_fails; _next_alloc_fails = 0; return x; } #else static int alloc_fails(void) { return 0; } #endif #define LEN(x) (sizeof(x)/sizeof(*x)) typedef struct twist_hdr twist_hdr; struct twist_hdr { char *end; char data[]; }; static inline twist_hdr *from_twist_to_hdr(twist tstring) { return (twist_hdr *) (tstring - sizeof(char *)); } static inline twist from_hdr_to_twist(twist_hdr *str) { return (twist) str->data; } static void *twist_realloc(void *ptr, size_t size) { if (alloc_fails()) { return NULL; } return realloc(ptr, size); } static twist_hdr *internal_realloc(twist old, size_t size) { /* add header to size */ bool fail = _safe_add(size, size, sizeof(twist)); if (fail) { return NULL ; } /* add null byte space */ fail = _safe_add(size, size, 1); if (fail) { return NULL ; } twist_hdr *old_hdr = old ? from_twist_to_hdr(old) : NULL; return (twist_hdr *) twist_realloc(old_hdr, size); } static twist internal_append(twist orig, const binarybuffer data[], const size_t len) { size_t i; size_t size = 0; for (i = 0; i < len; i++) { const binarybuffer *b = &data[i]; if (!b->size) { continue; } bool fail = _safe_add(size, size, b->size); if (fail) { return NULL ; } } /* account for the space in the original string if specified */ size_t offset = 0; if (orig) { offset = twist_len(orig); bool fail = _safe_add(size, size, offset); if (fail) { return NULL ; } } twist_hdr *hdr = internal_realloc(orig, size); if (!hdr) { return NULL ; } for (i = 0; i < len; i++) { const binarybuffer *b = &data[i]; if (b->data) { memcpy(&hdr->data[offset], data[i].data, data[i].size); } else { memset(&hdr->data[offset], 0, data[i].size); } offset += data[i].size; } hdr->end = hdr->data + offset; *hdr->end = '\0'; return from_hdr_to_twist(hdr); } static inline twist internal_create(const binarybuffer data[], const size_t len) { return internal_append(NULL, data, len); } twist twist_new(const char *str) { if (!str) { return NULL ; } const binarybuffer things[1] = { { .size = strlen(str), .data = str } }; return internal_create(things, LEN(things)); } twist twist_calloc(size_t size) { if (!size) { return NULL; } const binarybuffer things[1] = { { .size = size, .data = NULL } }; return internal_create(things, LEN(things)); } size_t twist_len(twist tstring) { twist_hdr *str = from_twist_to_hdr(tstring); size_t len = str->end - str->data; return len; } twist twist_dup(twist tstring) { if (!tstring) { return NULL ; } const binarybuffer things[1] = { { .size = twist_len(tstring), .data = tstring } }; return internal_create(things, LEN(things)); } void twist_free(twist tstring) { if (!tstring) { return; } free(from_twist_to_hdr(tstring)); } extern char *twist_end(twist tstring) { if (!tstring) { return NULL ; } twist_hdr *hdr = from_twist_to_hdr(tstring); return hdr->end - 1; } twist twist_concat_twist(twist a, twist b) { if (!b) { return twist_dup(a); } if (!a) { return twist_dup(b); } binarybuffer things[2] = { { .size = twist_len(a), .data = a }, { .size = twist_len(b), .data = b } }; return internal_create(things, LEN(things)); } static twist twist_concat_internal(twist old_str, const void *data, size_t len) { const binarybuffer things[2] = { { .size = twist_len(old_str), .data = old_str }, { .size = len, .data = data }, }; return internal_create(things, LEN(things)); } twist twistbin_concat(twist old_str, const void *data, size_t len) { if (!data) { return twist_dup(old_str); } if (!old_str) { return twistbin_new(data, len); } return twist_concat_internal(old_str, data, len); } twist twist_concat(twist old_str, const char *new_str) { if (!new_str) { return twist_dup(old_str); } if (!old_str) { return twist_new(new_str); } size_t new_len = strlen(new_str); if (new_len == 0) { return twist_dup(old_str); } return twist_concat_internal(old_str, new_str, new_len); } bool twist_eq(twist x, twist y) { if (x == y) { return true; } if (!x || !y) { return false; } if (twist_len(x) != twist_len(y)) { return false; } return !memcmp(x, y, twist_len(x)); } DEBUG_VISIBILITY twist __real_twistbin_new(const void *data, size_t size) { if (!data) { return NULL ; } const struct binarybuffer things[1] = { { .size = size, .data = data } }; return internal_create(things, LEN(things)); } WEAK twist twistbin_new(const void *data, size_t size) { return __real_twistbin_new(data, size); } twist twist_append(twist old_str, const char *new_str) { if (!old_str) { return twist_new(new_str); } if (!new_str) { return old_str; } binarybuffer data[1] = { { .data = new_str, .size = strlen(new_str) } }; return internal_append(old_str, data, LEN(data)); } twist twistbin_append(twist old_str, const void *new_data, size_t len) { if (!old_str) { return twistbin_new(new_data, len); } if (!new_data) { return old_str; } binarybuffer data[1] = { { .data = new_data, .size = len } }; return internal_append(old_str, data, LEN(data)); } twist twistbin_aappend(twist old_str, binarybuffer data[], size_t num_of_args) { if (!data || !num_of_args) { return old_str; } return internal_append(old_str, data, num_of_args); } twist twist_append_twist(twist old_str, twist new_str) { if (!old_str) { return new_str; } if (!new_str) { return old_str; } return twistbin_append(old_str, new_str, twist_len(new_str)); } twist twist_truncate(twist tstring, size_t len) { if (!tstring) { return NULL ; } size_t old_len = twist_len(tstring); if (old_len == len) { return tstring; } twist_hdr *hdr = internal_realloc(tstring, len); if (!hdr) { return NULL ; } hdr->end = hdr->data + len; if (old_len < len) { memset(&hdr->data[old_len], 0, len - old_len); } else { *hdr->end = '\0'; } return from_hdr_to_twist(hdr); } twist twist_create(const char *data[], size_t len) { if (!data || !len) { return NULL ; } size_t i; size_t found = 0; binarybuffer *bindata = calloc(len, sizeof(bindata[0])); if (!bindata) { return NULL; } for (i = 0; i < len; i++) { const char *arg = data[i]; if (arg) { bindata[found].data = arg; bindata[found].size = strlen(arg); found++; } } twist tmp = internal_create(bindata, found); free(bindata); return tmp; } twist twistbin_create(const binarybuffer data[], size_t len) { if (!data || !len) { return NULL ; } return internal_create(data, len); } static twist hexlify(const char *data, size_t datalen) { size_t bytes = 0; bool fail = _safe_mul(bytes, datalen, 2); if (fail) { return NULL; } twist_hdr *hdr = internal_realloc(NULL, bytes); if (!hdr) { return NULL; } size_t i; for (i = 0; i < datalen; i++) { /* cannot overflow or alloc math on bytes would fail */ sprintf(hdr->data + (i * 2), "%02x", 255 & data[i]); } hdr->data[datalen *2] = '\0'; hdr->end = &hdr->data[datalen * 2]; return from_hdr_to_twist(hdr); } twist twist_hex_new(const char *data, size_t len) { if (!data) { return NULL; } return hexlify(data, len); } twist twist_hexlify(const twist data) { if (!data) { return NULL; } size_t datalen = twist_len(data); return hexlify(data, datalen); } static bool hex2bin(char hexchr, char *out) { char p = tolower(hexchr); if (p >= '0' && p <= '9') { *out = p - 0x30; return true; } else if(p >= 'a' && p <= 'f') { *out = p - 0x61 + 0xA; return true; } return false; } twist twistbin_unhexlify(const char *hexdata) { if (!hexdata) { return NULL; } size_t hexlen = strlen(hexdata); if (hexlen & 0x1) { return NULL; } size_t rawlen = hexlen/2; twist_hdr *hdr = internal_realloc(NULL, rawlen); if (!hdr) { return NULL; } char *raw = hdr->data; size_t i, j; for (i=0, j=0; i < rawlen; i++, j+=2) { char upper_nibble; bool result = hex2bin(hexdata[j], &upper_nibble); if (!result) { goto error; } upper_nibble <<= 4; char lower_nibble; result = hex2bin(hexdata[j + 1], &lower_nibble); if (!result) { goto error; } raw[i] = upper_nibble | lower_nibble; } raw[rawlen] = '\0'; hdr->end = &raw[rawlen]; return from_hdr_to_twist(hdr); error: twist_free(from_hdr_to_twist(hdr)); return NULL; } tpm2-pkcs11-1.9.1/src/lib/typed_memory.c0000644000175100017510000000403214535673717013426 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include "pkcs11.h" #include "typed_memory.h" #include "utils.h" void *type_calloc(size_t nmemb, size_t size, CK_BYTE type) { assert(size != 0); size_t total = 0; safe_mul(total, nmemb, size); safe_adde(total, 1); CK_BYTE_PTR ptr = (CK_BYTE_PTR)calloc(1, total); if (!ptr) { return NULL; } ptr[total - 1] = type; return ptr; } void *type_zrealloc(void *old_ptr, size_t size, CK_BYTE type) { assert(size != 0); // overflow safety here... size_t total = size + 1; CK_BYTE_PTR new_ptr = realloc(old_ptr, total); if (!new_ptr) { return NULL; } memset(new_ptr, 0, total); new_ptr[total - 1] = type; return new_ptr; } CK_BYTE type_from_ptr(void *ptr, size_t len) { if (!len || !ptr) { return TYPE_BYTE_HEX_STR; } CK_BYTE_PTR b = (CK_BYTE_PTR)ptr; return b[len]; } CK_RV type_mem_dup(void *in, size_t len, void **dup) { CK_BYTE type = in ? type_from_ptr(in, len) : TYPE_BYTE_HEX_STR; assert(type != 0); void *buf = type_calloc(1, len, type); if (!buf) { return CKR_HOST_MEMORY; } if (in) { memcpy(buf, in, len); } *dup = buf; #ifndef NDEBUG CK_BYTE check = type_from_ptr(buf, len); assert(check == type); #endif return CKR_OK; } void type_mem_cpy(void *dest, void *in, size_t size) { assert(in); assert(dest); assert(size); safe_adde(size, 1); memcpy(dest, in, size); #ifndef NDEBUG CK_BYTE check = type_from_ptr(in, size - 1); CK_BYTE got = type_from_ptr(dest, size - 1); assert(check == got); #endif } const char *type_to_str(CK_BYTE type) { switch(type) { case TYPE_BYTE_INT: return "int"; case TYPE_BYTE_BOOL: return "bool"; case TYPE_BYTE_INT_SEQ: return "int-seq"; case TYPE_BYTE_HEX_STR: return "hex-str"; default: return "unknown"; } } tpm2-pkcs11-1.9.1/src/lib/utils.c0000644000175100017510000003231114666345037012046 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include "log.h" #include "ssl_util.h" #include "token.h" #include "utils.h" int str_to_ul(const char *val, size_t *res) { errno=0; *res = strtoul(val, NULL, 0); if (errno) { LOGE("Could not convert \"%s\" to integer", val); return 1; } return 0; } CK_RV utils_setup_new_object_auth(twist newpin, twist *newauthhex, twist *newsalthex) { CK_RV rv = CKR_GENERAL_ERROR; bool allocated_pin_to_use = false; twist pin_to_use = NULL; twist salt_to_use = NULL; salt_to_use = utils_get_rand_hex_str(SALT_HEX_STR_SIZE); if (!salt_to_use) { goto out; } if (!newpin) { allocated_pin_to_use = true; pin_to_use = utils_get_rand_hex_str(AUTH_HEX_STR_SIZE); if (!pin_to_use) { goto out; } } else { pin_to_use = newpin; } *newauthhex = ssl_util_hash_pass(pin_to_use, salt_to_use); if (!*newauthhex) { goto out; } if (newsalthex) { *newsalthex = salt_to_use; salt_to_use = NULL; } rv = CKR_OK; out: if (rv != CKR_OK) { twist_free(*newauthhex); if (newsalthex) { twist_free(*newsalthex); *newsalthex = NULL; } } if (allocated_pin_to_use) { twist_free(pin_to_use); } twist_free(salt_to_use); return rv; } static twist encrypt_parts_to_twist(CK_BYTE tag[16], CK_BYTE iv[12], CK_BYTE_PTR ctextbin, int ctextbinlen) { /* * Build the :: data format * and convert from binary formats to hex encoded. */ twist ivhex = NULL; twist taghex = NULL; twist ctexthex = NULL; twist constructed = NULL; taghex = twist_hex_new((char *)tag, 16); if (!taghex) { LOGE("oom"); goto out; } ivhex = twist_hex_new((char *)iv, 12); if (!ivhex) { LOGE("oom"); goto out; } ctexthex = twist_hex_new((char *)ctextbin, ctextbinlen); if (!ctexthex) { LOGE("oom"); goto out; } /* * build the data structure of :: * This step gets us to : */ constructed = twist_append(ivhex, ":"); if (!constructed) { LOGE("oom"); goto out; } /* ownership transfered to tmp */ ivhex = NULL; /* : */ constructed = twist_append_twist(constructed, taghex); if (!constructed) { LOGE("oom"); goto out; } /* :: */ constructed = twist_append(constructed, ":"); if (!constructed) { LOGE("oom"); goto out; } /* :: */ constructed = twist_append_twist(constructed, ctexthex); if (!constructed) { LOGE("oom"); goto out; } out: twist_free(ivhex); twist_free(taghex); twist_free(ctexthex); return constructed; } twist aes256_gcm_encrypt(twist keybin, twist plaintextbin) { twist constructed = NULL; CK_BYTE_PTR ctextbin = NULL; EVP_CIPHER_CTX *ctx = NULL; CK_BYTE ivbin[12]; int rc = RAND_bytes(ivbin, sizeof(ivbin)); if (rc != 1) { LOGE("Could not generate random bytes"); return NULL; } ctx = EVP_CIPHER_CTX_new(); if (!ctx) { LOGE("oom"); goto out; } int ret = EVP_EncryptInit(ctx, EVP_aes_256_gcm(), (const CK_BYTE_PTR )keybin, (const CK_BYTE_PTR )ivbin); if (!ret) { LOGE("EVP_DecryptInit failed"); goto out; } ctextbin = calloc(1, twist_len(plaintextbin)); if (!ctextbin) { LOGE("oom"); goto out; } int len = 0; ret = EVP_EncryptUpdate(ctx, ctextbin, &len, (CK_BYTE_PTR )plaintextbin, twist_len(plaintextbin)); if (!ret) { LOGE("EVP_EncryptUpdate failed"); goto out; } assert((size_t)len == twist_len(plaintextbin)); int left = 0; ret = EVP_EncryptFinal_ex(ctx, &ctextbin[len], &left); if (!ret) { LOGE("AES GCM verification failed!"); goto out; } assert(left == 0); CK_BYTE tagbin[16]; ret = EVP_CIPHER_CTX_ctrl (ctx, EVP_CTRL_GCM_GET_TAG, sizeof(tagbin), tagbin); if (!ret) { LOGE("EVP_CIPHER_CTX_ctrl failed"); goto out; } constructed = encrypt_parts_to_twist(tagbin, ivbin, ctextbin, len); out: EVP_CIPHER_CTX_free(ctx); free(ctextbin); return constructed; } twist aes256_gcm_decrypt(const twist key, const twist objauth) { int ok = 0; twist ivbin = NULL; twist tagbin = NULL; twist objcopy = NULL; twist ctextbin = NULL; twist plaintext = NULL; EVP_CIPHER_CTX *ctx = NULL; /* * Split apart the :: data * and convert to binary formats. */ objcopy = twist_dup(objauth); if (!objcopy) { LOGE("oom0"); return NULL; } char *iv = (char *)objcopy; char *tag = strchr(objcopy, ':'); if (!tag) { LOGE("Could not find : to split tag"); goto out; } *tag = '\0'; tag++; char *ctext = strchr(tag, ':'); if (!ctext) { LOGE("Could not find : to split ctext"); goto out; } *ctext = '\0'; ctext++; ivbin = twistbin_unhexlify(iv); if (!ivbin) { LOGE("oom"); goto out; } tagbin = twistbin_unhexlify(tag); if (!tagbin) { LOGE("oom"); goto out; } ctextbin = twistbin_unhexlify(ctext); if (!ctextbin) { LOGE("oom"); goto out; } size_t clen = twist_len(ctextbin); if (!clen) { plaintext = twist_new(""); if (!plaintext) { LOGE("oom"); } else { ok = 1; } goto out; } plaintext = twist_calloc(clen); if (!plaintext) { LOGE("oom"); goto out; } ctx = EVP_CIPHER_CTX_new(); if (!ctx) { LOGE("oom"); goto out; } int ret = EVP_DecryptInit (ctx, EVP_aes_256_gcm(), (const CK_BYTE_PTR )key, (const CK_BYTE_PTR )ivbin); if (!ret) { LOGE("EVP_DecryptInit failed"); goto out; } int len = 0; ret = EVP_DecryptUpdate(ctx, (CK_BYTE_PTR )plaintext, &len, (CK_BYTE_PTR )ctextbin, twist_len(ctextbin)); if (!ret) { LOGE("EVP_DecryptUpdate failed"); goto out; } ret = EVP_CIPHER_CTX_ctrl (ctx, EVP_CTRL_GCM_SET_TAG, 16, (void *)tagbin); if (!ret) { LOGE("EVP_CIPHER_CTX_ctrl failed"); goto out; } ret = EVP_DecryptFinal_ex(ctx, &((CK_BYTE_PTR )plaintext)[len], &len); if (!ret) { LOGE("AES GCM verification failed!"); goto out; } ok = 1; out: twist_free(objcopy); twist_free(ctextbin); twist_free(tagbin); twist_free(ivbin); EVP_CIPHER_CTX_free(ctx); if (!ok) { twist_free(plaintext); plaintext = NULL; } return plaintext; } size_t utils_get_halg_size(CK_MECHANISM_TYPE mttype) { switch(mttype) { case CKM_ECDSA: case CKM_ECDSA_SHA1: /* falls-thru */ case CKM_SHA1_RSA_PKCS: /* falls-thru */ case CKM_SHA1_RSA_PKCS_PSS: /* falls-thru */ case CKM_SHA_1_HMAC: /* falls-thru */ case CKM_SHA_1: return 20; case CKM_SHA256_RSA_PKCS: /* falls-thru */ case CKM_SHA256_RSA_PKCS_PSS: /* falls-thru */ case CKM_SHA256_HMAC: /* falls-thru */ case CKM_SHA256: return 32; case CKM_SHA384_RSA_PKCS: /* falls-thru */ case CKM_SHA384_RSA_PKCS_PSS: /* falls-thru */ case CKM_SHA384_HMAC: /* falls-thru */ case CKM_SHA384: return 48; case CKM_SHA512_RSA_PKCS: /* falls-thru */ case CKM_SHA512_RSA_PKCS_PSS: /* falls-thru */ case CKM_SHA512_HMAC: /* falls-thru */ case CKM_SHA512: return 64; } return 0; } twist utils_get_rand_hex_str(size_t size) { if (size == 0) { return NULL; } if (size & 0x1) { return NULL; } twist salt = twist_calloc(size); if (!salt) { return NULL; } int rc = RAND_bytes((CK_BYTE_PTR )salt, size); if (rc != 1) { LOGE("Could not generate random bytes"); return NULL; } twist hex = twist_hex_new(salt, twist_len(salt)); twist_free(salt); return hex; } CK_RV utils_ctx_unwrap_objauth(twist wrappingkey, twist objauth, twist *unwrapped_auth) { assert(wrappingkey); assert(unwrapped_auth); if (!objauth) { *unwrapped_auth = NULL; return CKR_OK; } twist tmp = aes256_gcm_decrypt(wrappingkey, objauth); if (!tmp) { return CKR_GENERAL_ERROR; } *unwrapped_auth = tmp; return CKR_OK; } CK_RV utils_ctx_wrap_objauth(twist wrappingkey, twist data, twist *wrapped_auth) { assert(wrappingkey); assert(data); twist wrapped = aes256_gcm_encrypt(wrappingkey, data); if (!wrapped) { return CKR_GENERAL_ERROR; } *wrapped_auth = wrapped; return CKR_OK; } CK_RV apply_pkcs7_pad(const CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen) { size_t total_bytes = (inlen + 16) - (inlen % 16); if (*outlen < total_bytes) { return CKR_BUFFER_TOO_SMALL; } int pad_value = total_bytes - inlen; memcpy(out, in, inlen); memset(&out[inlen], pad_value, pad_value); *outlen = total_bytes; return CKR_OK; } CK_RV remove_pkcs7_pad(CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen) { if (inlen % 16) { LOGE("AES_CBC_PAD data should be block sized, got: %lu", inlen); return CKR_ENCRYPTED_DATA_LEN_RANGE; } CK_BYTE pad_value = in[inlen - 1]; if (pad_value < 1 || pad_value > 16) { LOGE("Nonsensical pad value, got: %u, expected 1-16", pad_value); return CKR_ENCRYPTED_DATA_INVALID; } CK_ULONG new_size = inlen - pad_value; if (new_size > *outlen) { return CKR_BUFFER_TOO_SMALL; } *outlen = new_size; memcpy(out, in, new_size); return CKR_OK; } void parse_lib_version(const char *userbuf, CK_BYTE *major, CK_BYTE *minor) { if (!userbuf || !userbuf[0]) { *major = *minor = 0; return; } bool is_release = strchr(userbuf, '-') == NULL; if (!is_release) { *major = *minor = 0; return; } /* don't modify the caller */ char *buf = strdup(userbuf); if (!buf) { LOGE("oom"); *major = *minor = 0; return; } char *minor_str = "0"; const char *major_str = &buf[0]; char *split = strchr(buf, '.'); if (split) { split[0] = '\0'; minor_str = &split[1]; split = strchr(minor_str, '.'); if (split) { split[0]='\0'; } } if (!major_str[0] || !minor_str[0]) { *major = *minor = 0; goto out; } char *endptr = NULL; unsigned long val; errno = 0; val = strtoul(major_str, &endptr, 10); if (errno != 0 || endptr[0] || val > UINT8_MAX) { LOGW("Could not strtoul(%s): %s", major_str, strerror(errno)); *major = *minor = 0; goto out; } *major = val; endptr = NULL; val = strtoul(minor_str, &endptr, 10); if (errno != 0 || endptr[0] || val > UINT8_MAX) { LOGW("Could not strtoul(%s): %s", minor_str, strerror(errno)); *major = *minor = 0; goto out; } *minor = val; out: free(buf); } CK_RV utils_uncompressed_ecpoint_to_tpm2b(uint8_t* from, TPM2B_ECC_POINT* to, size_t len) { const size_t ecc_key_sizes[] = { 24, 28, 32, 48, 64, 66 }; size_t tpm2b_size = 0; size_t i = 0; /* * Uncompressed EC_POINT is DER OCTET STRING of "04||x||y" * (discard the 0x04 and adjust the length) */ if (!from || !to || !len || len < 49 || len > 133) { return CKR_ARGUMENTS_BAD; } if (*from++ != 0x04) { return CKR_ARGUMENTS_BAD; } /* Remove the 0x04 tag from the length */ len = len - 1; tpm2b_size = len / 2; for (i = 0; i < ARRAY_LEN(ecc_key_sizes); i++) { if (tpm2b_size == ecc_key_sizes[i]) { break; } } if (i >= ARRAY_LEN(ecc_key_sizes)) { return CKR_ARGUMENTS_BAD; } /* Key has the expected length */ if (tpm2b_size > sizeof(to->point.x.buffer)) { LOGW("TPM2B_ECC_POINT buffer too small, truncate possible padding"); memcpy(to->point.x.buffer, from, sizeof(to->point.x.buffer)); to->point.x.size = sizeof(to->point.x.buffer); } else { memcpy(to->point.x.buffer, from, tpm2b_size); to->point.x.size = tpm2b_size; } from = from + tpm2b_size; if (tpm2b_size > sizeof(to->point.y.buffer)) { LOGW("TPM2B_ECC_POINT buffer too small, truncate possible padding"); memcpy(to->point.y.buffer, from, sizeof(to->point.y.buffer)); to->point.y.size = sizeof(to->point.y.buffer); } else { memcpy(to->point.y.buffer, from, tpm2b_size); to->point.y.size = tpm2b_size; } to->size = to->point.y.size + to->point.x.size; return CKR_OK; } tpm2-pkcs11-1.9.1/src/lib/attrs.h0000644000175100017510000002321114667615111012041 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_ATTRS_H_ #define SRC_LIB_ATTRS_H_ #include #include #include "pkcs11.h" /* * We will allow these to be accessed, but the values are not stable */ #define CKA_VENDOR_TPM2_DEFINED 0x0F000000UL #define CKA_TPM2_OBJAUTH_ENC (CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x1UL) #define CKA_TPM2_PUB_BLOB (CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x2UL) #define CKA_TPM2_PRIV_BLOB (CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x3UL) #define CKA_TPM2_ENC_BLOB (CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x4UL) /* Invalid values for error detection */ #define CK_OBJECT_CLASS_BAD (~(CK_OBJECT_CLASS)0) #define CKA_KEY_TYPE_BAD (~(CK_KEY_TYPE)0) /** * The heart of any PKCS11 object is it's attribute list. This list * attempts to make dealing with list attributes simple. It allows you * to easily add scalar and buffer types (deep copy) and maintains metadata * about the type stored in the attribute. Thus, de-serialization can occur * much more simply. */ typedef struct attr_list attr_list; typedef struct attr_handler attr_handler; struct attr_handler { /** Attribute type to invoke the handler for */ CK_ULONG type; /** handler to invoke for the attribute type */ CK_RV (*handler)(const CK_ATTRIBUTE_PTR attr, void *userdat); }; /** * Creates a new attribute list * @return * attribute list or NULL on error. */ attr_list *attr_list_new(void); /** * Duplicates an attribute list. * @param old * The attribute list to duplicate. * @param new * The new attribute list, that's a duplicate of old. * @return * CKR_OK on success. */ CK_RV attr_list_dup(attr_list *old, attr_list **new); /** * Adds a buffer to the attribute list and adds type data. * @param l * The list to add to. * @param type * The attribute type to add. * @param value * The buffer, can be NULL. * @param len * The length of the buffer. 0 is treated as NULL value. * @return * true on success, false otherwise. */ bool attr_list_add_buf(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_BYTE_PTR value, CK_ULONG len); /** * Adds a CK_BOOL to the attribute list and adds type data. * @param l * The list to add to. * @param type * The attribute type to add. * @param value * The Attributes CK_BBOOL value to add. * @return * true on success, false otherwise. * @note * Some PKCS11 types are just typedefs of CK_BYTE, like CK_BOOL. * However, CK_BOOL is more common, so for now this interface * can serve both use cases: adding any CK_BYTE typedef type. */ bool attr_list_add_bool(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_BBOOL value); /** * Adds a CK_ULONG to the attribute list and adds type data. * @param l * The list to add to. * @param type * The attribute type to add. * @param value * The Attributes CK_ULONG value to add. * @return * true on success, false otherwise. * @note * Most PKCS11 types are just typedefs of CK_ULONG, so this works * for most types. However, don't use this for CK_BYTE typedefs * as the storage size will be bigger than expected by clients. */ bool attr_list_add_int(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_ULONG value); /** * Adds a CK_ULONG to the attribute list and adds type data. * @param l * The list to add to. * @param type * The attribute type to add. * @param value * The buffer, can be NULL. * @param len * The length of the buffer. 0 is treated as NULL value. * @return * true on success, false otherwise. */ bool attr_list_add_int_seq(attr_list *l, CK_ATTRIBUTE_TYPE type, CK_BYTE_PTR value, CK_ULONG len); /** * Returns the count items in the attribute list. * * @param l * The list to query the length of. MUST not be NULL. * @return * The count in items. */ CK_ULONG attr_list_get_count(attr_list *l); /** * The pointer to the internal pkcs11 formatted attribute list. * @param l * The list to access. * @return * The attribute ptr, may be NULL. */ CK_ATTRIBUTE_PTR attr_list_get_ptr(attr_list *l); /** * Frees all storage of the attribute list. * @param attrs * The attribute list to free. */ void attr_list_free(attr_list *attrs); /** * Scrubs the memory pointed to by the pValue pointer and frees it. * The attribute pointer is expected to be contained within in attr_list. * The attribute is NOT REMOVED from the list and type remains unchanged. * Sets ulValueLen to 0. * @param attr * The attr to free. */ void attr_pfree_cleanse(CK_ATTRIBUTE_PTR attr); /** * Given a raw attribute list, perhaps from a client caller, * creates an attr_list which contains the caller supplied data, * deep copied with type metadata. * * @param attrs * The attributes to deep copy and add type metadata from. * @param cnt * The number of attributes. * @param copy * The allocated attr_list. * @return * true on success, false otherwise. * @note * Internally this function has registered converters for known attributes, * however, if an unknown attribute is converted, the default conversion is * to figure out type from the value length (ulValueLen). It will print a * warning message to add a specific handler. */ bool attr_typify(CK_ATTRIBUTE_PTR attrs, CK_ULONG cnt, attr_list **copy); /** * Appends one attr_list to another. * @param old_attrs * The list to append to. * @param new_attrs * The list to append. Resource is de-allocated on success and * the new_attrs pointer is NULL. * @return * The new list which should be passed to attr_list_free(). */ attr_list *attr_list_append_attrs( attr_list *old_attrs, attr_list **new_attrs); /** * Given an object created of type mech, and a list of starting attributes, * populate the public and private attribute lists for the object(s). * @param public_attrs * The public attribute list to allocate and populate. * @param private_attrs * The private attribute list to allocate and populate. * @param attrs * The initial attribute list to start with. * @param mech * The mechanism used to generate the object. * @return * CKR_OK on success, false otherwise. */ CK_RV attr_add_missing_attrs(attr_list **public_attrs, attr_list **private_attrs, attr_list *attrs, CK_MECHANISM_TYPE mech); /** * Invokes a list of handlers on a raw pkcs11 list. Handlers using this interface must not * expect typed_memory.h interface on pValue pointers. * * @param attrs * The attribute list. * @param count * The number of items in the attribute list. * @param handlers * The handlers to invoke. * @param len * The number of handlers to invoke. * @param udata * User data to pass to the handlers. * @return */ CK_RV attr_list_raw_invoke_handlers(const CK_ATTRIBUTE_PTR attrs, CK_ULONG count, const attr_handler *handlers, size_t len, void *udata); /** * Invokes a list of handlers on an attr_list. Handlers using this interface may * expect typed_memory.h interface on pValue pointers. * * @param attrs * The attribute list. * @param handlers * The handlers to invoke. * @param len * The number of handlers to invoke. * @param udata * User data to pass to the handlers. * @return */ CK_RV attr_list_invoke_handlers(attr_list *l, const attr_handler *handlers, size_t len, void *udata); /** * Given an attribute pointer, retrieves the CK_BBOOL value if present. * @param attr * The attribute ptr. * @param x * The extracted CK_BBOOL value. * @return * CKR_OK on success. */ CK_RV attr_CK_BBOOL(CK_ATTRIBUTE_PTR attr, CK_BBOOL *x); /** * Given an attribute pointer, retrieves the CK_ULONG value if present. * @param attr * The attribute ptr. * @param x * The extracted CK_ULONG value. * @return * CKR_OK on success. */ CK_RV attr_CK_ULONG(CK_ATTRIBUTE_PTR attr, CK_ULONG *x); /** * Given an attribute pointer, retrieves the CK_CLASS value if present. * @param attr * The attribute ptr. * @param x * The extracted CK_CLASS value. * @return * CKR_OK on success. */ CK_RV attr_CK_OBJECT_CLASS(CK_ATTRIBUTE_PTR attr, CK_OBJECT_CLASS *x); CK_RV attr_CK_KEY_TYPE(CK_ATTRIBUTE_PTR attr, CK_KEY_TYPE *x); CK_BBOOL attr_list_get_CKA_PRIVATE(attr_list *attrs, CK_BBOOL defvalue); CK_BBOOL attr_list_get_CKA_TOKEN(attr_list *attrs, CK_BBOOL defvalue); CK_KEY_TYPE attr_list_get_CKA_KEY_TYPE(attr_list *attrs, CK_KEY_TYPE defvalue); CK_OBJECT_CLASS attr_list_get_CKA_CLASS(attr_list *attrs, CK_OBJECT_CLASS defvalue); /** * Searches an attr_list for an attribute specified by type. * @param haystack * The attr_list to search. * @param needle * The attribute type to search for. * @return * The attribute or NULL if not found. */ CK_ATTRIBUTE_PTR attr_get_attribute_by_type(attr_list *haystack, CK_ATTRIBUTE_TYPE needle); /** * Searches a raw attribute list for an attribute specified by type. * @param haystack * The raw attribute list to search. * @ param haystack_count * The raw attribute list count. * @param needle * The attribute type to search for. * @return * The attribute or NULL if not found. */ CK_ATTRIBUTE_PTR attr_get_attribute_by_type_raw(CK_ATTRIBUTE_PTR haystack, CK_ULONG haystack_count, CK_ATTRIBUTE_TYPE needle); CK_RV attr_list_append_entry(attr_list **attrs, CK_ATTRIBUTE_PTR untrusted_attr); CK_RV attr_list_update_entry(attr_list *attrs, CK_ATTRIBUTE_PTR untrusted_attr); CK_RV attr_common_add_RSA_publickey(attr_list **public_attrs); CK_RV attr_common_add_storage(attr_list **public_attrs); CK_RV attr_common_add_data(attr_list **storage_attrs); CK_RV rsa_gen_mechs(attr_list *new_pub_attrs, attr_list *new_priv_attrs); CK_RV attr_list_append_entry(attr_list **attrs, CK_ATTRIBUTE_PTR untrusted_attr); CK_RV attr_list_update_entry(attr_list *attrs, CK_ATTRIBUTE_PTR untrusted_attr); const char *attr_get_name(CK_ATTRIBUTE_TYPE t); #endif /* SRC_LIB_ATTRS_H_ */ tpm2-pkcs11-1.9.1/src/lib/backend.h0000644000175100017510000000210614535673717012305 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_BACKEND_H_ #define SRC_LIB_BACKEND_H_ #include "pkcs11.h" #include "twist.h" #include "token.h" #define MAX_TOKEN_CNT 255 CK_RV backend_init(void); CK_RV backend_destroy(void); CK_RV backend_ctx_new(token *t); void backend_ctx_free(token *t); void backend_ctx_reset(token *t); CK_RV backend_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex); CK_RV backend_get_tokens(token **tok, size_t *len); CK_RV backend_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex); CK_RV backend_add_object(token *t, tobject *tobj); CK_RV backend_update_token_config(token *t); CK_RV backend_update_tobject_attrs(token *tok, tobject *tobj, attr_list *attrs); CK_RV backend_rm_tobject(token *tok, tobject *tobj); CK_RV backend_token_unseal_wrapping_key(token *tok, bool user, twist tpin); CK_RV backend_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin); #endif /* SRC_LIB_BACKEND_H_ */ tpm2-pkcs11-1.9.1/src/lib/backend_esysdb.h0000644000175100017510000000221414535673717013656 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_BACKEND_ESYSDB_H_ #define SRC_LIB_BACKEND_ESYSDB_H_ #include "pkcs11.h" #include "twist.h" #include "token.h" CK_RV backend_esysdb_init(void); CK_RV backend_esysdb_destroy(void); CK_RV backend_esysdb_ctx_new(token *t); void backend_esysdb_ctx_free(token *t); void backend_esysdb_ctx_reset(token *t); CK_RV backend_esysdb_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex); CK_RV backend_esysdb_get_tokens(token *tok, size_t *len); CK_RV backend_esysdb_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex); CK_RV backend_esysdb_add_object(token *t, tobject *tobj); CK_RV backend_esysdb_update_token_config (token *tok); CK_RV backend_esysdb_update_tobject_attrs(tobject *tobj, attr_list *attrs); CK_RV backend_esysdb_rm_tobject(tobject *tobj); CK_RV backend_esysdb_token_unseal_wrapping_key(token *tok, bool user, twist tpin); CK_RV backend_esysdb_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin); #endif /* SRC_LIB_BACKEND_ESYSDB_H_ */ tpm2-pkcs11-1.9.1/src/lib/backend_fapi.h0000644000175100017510000000215014535673717013303 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_BACKEND_FAPI_H_ #define SRC_LIB_BACKEND_FAPI_H_ #include "config.h" #include "pkcs11.h" #include "twist.h" #include "token.h" #ifndef NDEBUG __attribute__((weak)) #endif CK_RV backend_fapi_init(void); CK_RV backend_fapi_destroy(void); CK_RV backend_fapi_ctx_new(token *t); void backend_fapi_ctx_free(token *t); CK_RV backend_fapi_create_token_seal(token *t, const twist hexwrappingkey, const twist newauth, const twist newsalthex); CK_RV backend_fapi_add_tokens(token *tok, size_t *len); CK_RV backend_fapi_init_user(token *t, const twist sealdata, const twist newauthhex, const twist newsalthex); CK_RV backend_fapi_add_object(token *t, tobject *tobj); CK_RV backend_fapi_update_tobject_attrs(token *tok, tobject *tobj, attr_list *attrlist); CK_RV backend_fapi_rm_tobject(token *tok, tobject *tobj); CK_RV backend_fapi_token_unseal_wrapping_key(token *tok, bool user, twist tpin); CK_RV backend_fapi_token_changeauth(token *tok, bool user, twist toldpin, twist tnewpin); #endif /* SRC_LIB_BACKEND_FAPI_H_ */ tpm2-pkcs11-1.9.1/src/lib/checks.h0000644000175100017510000000076314535673717012165 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_CHECKS_H_ #define SRC_PKCS11_CHECKS_H_ #include "pkcs11.h" #include "general.h" #include "slot.h" #define check_num(ptr) if (!ptr) { return CKR_ARGUMENTS_BAD; } #define check_pointer(ptr) if (!ptr) { return CKR_ARGUMENTS_BAD; } #define check_slot_id(slot_id, tok, rv) \ do { \ tok = slot_get_token(slot_id); \ if (!tok) { \ return rv; \ }\ } while (0) #endif /* SRC_PKCS11_CHECKS_H_ */ tpm2-pkcs11-1.9.1/src/lib/db.h0000644000175100017510000000470414666345415011305 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_LIB_DB_H_ #define SRC_PKCS11_LIB_DB_H_ #include #include "attrs.h" #include "debug.h" #include "pkcs11.h" #include "token.h" #include "twist.h" #include "utils.h" /* * This HAS to be smaller than 1 byte, as this is embedded * in the top byte of the session handle. */ #define MAX_TOKEN_CNT 255 typedef struct pobject_v3 pobject_v3; struct pobject_v3 { int id; char *hierarchy; twist handle; char *objauth; }; typedef struct pobject_v4 pobject_v4; struct pobject_v4 { int id; char *hierarchy; char *config; char *objauth; }; CK_RV db_init(void); CK_RV db_destroy(void); CK_RV db_get_tokens(token *t, size_t *len); CK_RV db_update_for_pinchange( token *tok, bool is_so, /* new seal object auth metadata */ twist newauthsalthex, /* private and public blobs */ twist newprivblob, twist newpubblob); CK_RV db_init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm); CK_RV db_add_new_object(token *tok, tobject *tobj); /** * Delete a tobject from the DB. * @param tobj * The tobject to remove. * @return */ CK_RV db_delete_object(tobject *tobj); CK_RV db_get_first_pid(unsigned *id); CK_RV db_add_primary(pobject *pobj, unsigned *pid); CK_RV db_add_token(token *tok); CK_RV db_update_token_config(token *tok); CK_RV db_update_tobject_attrs(unsigned id, attr_list *attrs); /* Debug testing */ #ifdef TESTING #include #include "twist.h" int get_blob_null(sqlite3_stmt *stmt, int i, twist *blob); int get_blob(sqlite3_stmt *stmt, int i, twist *blob); tobject *db_tobject_new(sqlite3_stmt *stmt); tobject *__real_db_tobject_new(sqlite3_stmt *stmt); int init_pobject_v3_from_stmt(sqlite3_stmt *stmt, pobject_v3 *old_pobj); int init_tobjects(token *tok); int __real_init_tobjects(token *tok); CK_RV convert_pobject_v3_to_v4(pobject_v3 *old_pobj, pobject_v4 *new_pobj); CK_RV db_add_pobject_v4(sqlite3 *updb, pobject_v4 *new_pobj); int init_pobject_from_stmt(sqlite3_stmt *stmt, tpm_ctx *tpm, pobject *pobj); int init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm); int __real_init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm); int init_sealobjects(unsigned tokid, sealobject *sealobj); int __real_init_sealobjects(unsigned tokid, sealobject *sealobj); int get_lock_path(const char *path, char *lockpath); FILE *take_lock(const char *path, char *lockpath); #endif #endif /* SRC_PKCS11_LIB_DB_H_ */ tpm2-pkcs11-1.9.1/src/lib/debug.h0000644000175100017510000000053514535673717012010 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_DEBUG_H_ #define SRC_LIB_DEBUG_H_ #include "config.h" #if defined(FUZZING) || defined(UNIT_TESTING) || !defined(NDEBUG) #define WEAK __attribute__((weak)) #define DEBUG_VISIBILITY #define TESTING 1 #else #define WEAK #define DEBUG_VISIBILITY static #endif #endif /* SRC_LIB_DEBUG_H_ */ tpm2-pkcs11-1.9.1/src/lib/derive.h0000644000175100017510000000055114666345037012172 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef _SRC_LIB_DERIVE_H_ #define _SRC_LIB_DERIVE_H_ #include "pkcs11.h" #include "session_ctx.h" CK_RV derive(session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE tpm_key, CK_ATTRIBUTE_PTR secret_template, CK_ULONG secret_template_count, CK_OBJECT_HANDLE_PTR secret); #endif tpm2-pkcs11-1.9.1/src/lib/digest.h0000644000175100017510000000262014535673717012176 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_DIGEST_H_ #define SRC_LIB_DIGEST_H_ #include #include #include #include "object.h" #include "pkcs11.h" #include "session_ctx.h" typedef struct digest_op_data digest_op_data; struct digest_op_data { tobject *tobj; CK_MECHANISM mechanism; EVP_MD_CTX *mdctx; }; digest_op_data *digest_op_data_new(void); void digest_op_data_free(digest_op_data **opdata); CK_RV digest_init_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_MECHANISM_PTR mechanism); static inline CK_RV digest_init(session_ctx *ctx, CK_MECHANISM_PTR mechanism) { return digest_init_op(ctx, NULL, mechanism); } CK_RV digest_update_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_BYTE_PTR part, CK_ULONG part_len); static inline CK_RV digest_update(session_ctx *ctx, unsigned char *part, unsigned long part_len) { return digest_update_op(ctx, NULL, part, part_len); } CK_RV digest_final_op(session_ctx *ctx, digest_op_data *supplied_opdata, CK_BYTE_PTR digest, CK_ULONG_PTR digest_len); static inline CK_RV digest_final(session_ctx *ctx, unsigned char *digest, unsigned long *digest_len) { return digest_final_op(ctx, NULL, digest, digest_len); } CK_RV digest_oneshot(session_ctx *ctx, unsigned char *data, unsigned long data_len, unsigned char *digest, unsigned long *digest_len); #endif /* SRC_LIB_DIGEST_H_ */ tpm2-pkcs11-1.9.1/src/lib/emitter.h0000644000175100017510000000055214535673717012372 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_EMITTER_H_ #define SRC_LIB_EMITTER_H_ #include "attrs.h" #include "debug.h" #include "pkcs11.h" #include "token.h" char *emit_attributes_to_string(attr_list *attrs); char *emit_config_to_string(token *tok); char *emit_pobject_to_conf_string(pobject_config *pobj); #endif /* SRC_LIB_EMITTER_H_ */ tpm2-pkcs11-1.9.1/src/lib/encrypt.h0000644000175100017510000000765414535673717012417 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_ENCRYPT_H_ #define SRC_LIB_ENCRYPT_H_ #include #include "mech.h" #include "pkcs11.h" #include "tpm.h" #include "twist.h" typedef struct token token; typedef struct sw_encrypt_data sw_encrypt_data; typedef struct encrypt_op_data encrypt_op_data; typedef union crypto_op_data crypto_op_data; union crypto_op_data{ tpm_op_data *tpm_opdata; sw_encrypt_data *sw_enc_data; }; struct encrypt_op_data { bool use_sw; crypto_op_data cryptopdata; }; struct sw_encrypt_data { int padding; twist label; const EVP_MD *md; EVP_PKEY *key; }; encrypt_op_data *encrypt_op_data_new(void); void encrypt_op_data_free(encrypt_op_data **opdata); CK_RV sw_encrypt_data_init(mdetail *mdtl, CK_MECHANISM *mechanism, tobject *tobj, sw_encrypt_data **enc_data); CK_RV encrypt_init_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key); static inline CK_RV encrypt_init(session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return encrypt_init_op(ctx, NULL, mechanism, key); } CK_RV encrypt_update_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len); static inline CK_RV encrypt_update (session_ctx *ctx, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len) { return encrypt_update_op (ctx, NULL, part, part_len, encrypted_part, encrypted_part_len); } CK_RV encrypt_final_ex (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *last_encrypted_part, unsigned long *last_encrypted_part_len, bool is_oneshot); static inline CK_RV encrypt_final (session_ctx *ctx, unsigned char *last_encrypted_part, unsigned long *last_encrypted_part_len) { return encrypt_final_ex (ctx, NULL, last_encrypted_part, last_encrypted_part_len, false); } CK_RV decrypt_init_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key); static inline CK_RV decrypt_init (session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { return decrypt_init_op (ctx, NULL, mechanism, key); } CK_RV decrypt_update_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len); static inline CK_RV decrypt_update (session_ctx *ctx, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len) { return decrypt_update_op (ctx, NULL, part, part_len, encrypted_part, encrypted_part_len); } CK_RV decrypt_final_ex(session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *last_part, unsigned long *last_part_len, bool is_oneshot); static inline CK_RV decrypt_final (session_ctx *ctx, unsigned char *last_part, unsigned long *last_part_len) { return decrypt_final_ex (ctx, NULL, last_part, last_part_len, false); } CK_RV decrypt_oneshot_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *encrypted_data, unsigned long encrypted_data_len, unsigned char *data, unsigned long *data_len); static inline CK_RV decrypt_oneshot (session_ctx *ctx, unsigned char *encrypted_data, unsigned long encrypted_data_len, unsigned char *data, unsigned long *data_len) { return decrypt_oneshot_op (ctx, NULL, encrypted_data, encrypted_data_len, data, data_len); } CK_RV encrypt_oneshot_op (session_ctx *ctx, encrypt_op_data *supplied_opdata, unsigned char *data, unsigned long data_len, unsigned char *encrypted_data, unsigned long *encrypted_data_len); static inline CK_RV encrypt_oneshot (session_ctx *ctx, unsigned char *data, unsigned long data_len, unsigned char *encrypted_data, unsigned long *encrypted_data_len) { return encrypt_oneshot_op (ctx, NULL, data, data_len, encrypted_data, encrypted_data_len); } #endif /* SRC_LIB_ENCRYPT_H_ */ tpm2-pkcs11-1.9.1/src/lib/general.h0000644000175100017510000000060214535673717012332 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_GENERAL_H_ #define SRC_PKCS11_GENERAL_H_ #include #include "pkcs11.h" CK_RV general_init(void *init_args); CK_RV general_get_func_list(CK_FUNCTION_LIST **function_list); CK_RV general_get_info(CK_INFO *info); bool general_is_init(void); CK_RV general_finalize(void *reserved); #endif /* SRC_GENERAL_H_ */ tpm2-pkcs11-1.9.1/src/lib/key.h0000644000175100017510000000107214535673717011507 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_KEY_H_ #define SRC_PKCS11_KEY_H_ #include "pkcs11.h" typedef struct token token; typedef struct session_ctx session_ctx; CK_RV key_gen ( session_ctx *ctx, CK_MECHANISM_PTR mechanism, CK_ATTRIBUTE_PTR public_key_template, CK_ULONG public_key_attribute_count, CK_ATTRIBUTE_PTR private_key_template, CK_ULONG private_key_attribute_count, CK_OBJECT_HANDLE_PTR public_key, CK_OBJECT_HANDLE_PTR private_key); #endif /* SRC_PKCS11_KEY_H_ */ tpm2-pkcs11-1.9.1/src/lib/list.h0000644000175100017510000000057614535673717011702 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef LIST_H_ #define LIST_H_ typedef struct list list; struct list { list *next; list *prev; }; #define list_entry(element, type, name) \ (type *)(((uint8_t *)(element)) - (uint8_t *)&(((type *)NULL)->name)) #define list_for_each(list, var) \ for(var = list; var != NULL; var = var->next) #endif /* LIST_H_ */ tpm2-pkcs11-1.9.1/src/lib/log.h0000644000175100017510000000540314535673717011502 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_LOG_H_ #define SRC_PKCS11_LOG_H_ #include #include #include #include #if defined (__GNUC__) #define COMPILER_ATTR(...) __attribute__((__VA_ARGS__)) #else #define COMPILER_ATTR(...) #endif typedef enum log_level log_level; enum log_level { log_level_error, log_level_warn, log_level_verbose, log_level_unknown, }; static const char *log_strings[] = { "ERROR", "WARNING", "INFO", "UNKNOWN", }; #define _LOGV(filename, lineno, fmt, ...) _log(log_level_verbose, filename, lineno, fmt, ##__VA_ARGS__) #define _LOGW(filename, lineno, fmt, ...) _log(log_level_warn, filename, lineno, fmt, ##__VA_ARGS__) #define _LOGE(filename, lineno, fmt, ...) _log(log_level_error, filename, lineno, fmt, ##__VA_ARGS__) #define LOGV(fmt, ...) _LOGV(__FILE__, __LINE__, fmt, ##__VA_ARGS__) #define LOGW(fmt, ...) _LOGW(__FILE__, __LINE__, fmt, ##__VA_ARGS__) #define LOGE(fmt, ...) _LOGE(__FILE__, __LINE__, fmt, ##__VA_ARGS__) static log_level _g_current_log_level = log_level_warn; static inline void log_set_level(const char *level_str) { if (!level_str) { return; } char *endptr; errno = 0; unsigned long value = strtoul(level_str, &endptr, 0); if (errno || *endptr != '\0') { fprintf(stderr, "Could not change log level, got: \"%s\"\n", level_str); return; } /* * Use a switch to check value, as enum may be signed or * unsigned and when unsigned checking less than can cause * the compiler to complain. */ switch(value) { case log_level_error: case log_level_warn: case log_level_verbose: _g_current_log_level = value; break; default: fprintf(stderr, "Could not change log level, got: \"%s\"\n", level_str); return; } } static inline void _log(log_level level, const char *file, unsigned lineno, const char *fmt,...) { /* override config with env var if set */ log_set_level(getenv("TPM2_PKCS11_LOG_LEVEL")); /* Skip printing messages outside of the log level */ if (level > _g_current_log_level) { return; } va_list argptr; va_start(argptr, fmt); /* Verbose output prints file and line on error */ if (_g_current_log_level >= log_level_verbose) { fprintf(stderr, "%s on line: \"%u\" in file: \"%s\": ", log_strings[level], lineno, file); } else { fprintf(stderr, "%s: ", log_strings[level]); } /* Print the user supplied message */ vfprintf(stderr, fmt, argptr); /* always add a new line so the user doesn't have to */ fprintf(stderr, "\n"); va_end(argptr); } #endif /* SRC_PKCS11_LOG_H_ */ tpm2-pkcs11-1.9.1/src/lib/mech.h0000644000175100017510000000410114535673717011627 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include "attrs.h" #include "object.h" #include "pkcs11.h" #include "token.h" #include "tpm.h" #ifndef SRC_LIB_MECH_H_ #define SRC_LIB_MECH_H_ typedef struct mdetail mdetail; CK_RV mdetail_new(tpm_ctx *ctx, mdetail **mout, pss_config_state pss_sig_state); void mdetail_free(mdetail **mdtl); CK_RV mech_validate(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs); CK_RV mech_synthesize(mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); CK_RV mech_unsynthesize( mdetail *mdtl, CK_MECHANISM_PTR mech, attr_list *attrs, CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG_PTR outlen); CK_RV mech_is_synthetic(mdetail *mdtl, CK_MECHANISM_PTR mech, bool *is_synthetic); CK_RV mech_get_supported(mdetail *mdtl, CK_MECHANISM_TYPE_PTR mechlist, CK_ULONG_PTR count); CK_RV mech_is_hashing_needed( mdetail *mdtl, CK_MECHANISM_PTR mech, bool *is_hashing_needed); CK_RV mech_is_hashing_knowledge_needed(mdetail *m, CK_MECHANISM_PTR mech, bool *is_hashing_knowledge_needed); CK_RV mech_get_digest_alg(mdetail *mdtl, CK_MECHANISM_PTR mech, CK_MECHANISM_TYPE *mech_type); CK_RV mech_get_digester(mdetail *mdtl, CK_MECHANISM_PTR mech, const EVP_MD **md); CK_RV mech_get_tpm_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV mech_get_info(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_TYPE mech_type, CK_MECHANISM_INFO_PTR info); CK_RV mech_get_padding(mdetail *mdtl, CK_MECHANISM_PTR mech, int *padding); CK_RV mech_get_label(CK_MECHANISM_PTR mech, twist *label); void mdetail_set_pss_status(mdetail *m, bool pss_sigs_good); CK_RV mech_is_HMAC(mdetail *m, CK_MECHANISM_PTR mech, bool *is_hmac); CK_RV mech_is_ecc(mdetail *m, CK_MECHANISM_TYPE mech_type, bool *is_ecc); #endif /* SRC_LIB_MECH_H_ */ tpm2-pkcs11-1.9.1/src/lib/mutex.h0000644000175100017510000000421114535673717012057 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_MUTEX_H_ #define SRC_PKCS11_MUTEX_H_ #include "config.h" #include #include "log.h" #include "pkcs11.h" #include "utils.h" /** * Set's the mutex handlers. The mutex handlers default to internal * pthread mutexes unless specifically set, or cleared by setting NULL. * @param create * The handler for creating a MUTEX. * @param destroy * The handler for destroying a MUTEX. * @param lock * The handler for locking a MUTEX. * @param unlock * The handler for unlocking a MUTEX. */ void mutex_set_handlers(CK_CREATEMUTEX create, CK_DESTROYMUTEX destroy, CK_LOCKMUTEX lock, CK_UNLOCKMUTEX unlock); /** * Allocates and initializes a mutex. * @param mutex * The pointer to store the mutext at. * @return * CKR_OK on success. */ CK_RV mutex_create(void **mutex); /** * Deallocates and destroys a mutex. * @param mutex * The mutex to deallocate. * @return * CKR_OK on success. */ CK_RV mutex_destroy(void *mutex); /** * locks a mutex. * @param mutex * The mutex to lock. * @return * CKR_OK on success. */ CK_RV mutex_lock(void *mutex); /** * unlocks a mutex. * @param mutex * The mutex to unlock. * @return * CKR_OK on success. */ CK_RV mutex_unlock(void *mutex); static inline void _mutex_lock_fatal(void *mutex) { CK_RV rv = mutex_lock(mutex); assert(rv == CKR_OK); UNUSED(rv); } static inline void _mutex_unlock_fatal(void *mutex) { CK_RV rv = mutex_unlock(mutex); assert(rv == CKR_OK); UNUSED(rv); } #ifndef NDEBUG /* * debugging lock macros, the LOGV is on the top line to report lineno correctly */ #define mutex_lock_fatal(mutex) do { LOGV("LOCK(%p)-attempt", mutex); \ _mutex_lock_fatal(mutex); \ LOGV("LOCK(%p)-aquired", mutex); \ } while (0) #define mutex_unlock_fatal(mutex) do { LOGV("UNLOCK(%p)-attempt", mutex); \ _mutex_unlock_fatal(mutex); \ LOGV("UNLOCK(%p)-released", mutex); \ } while (0) #else #define mutex_lock_fatal(mutex) _mutex_lock_fatal(mutex) #define mutex_unlock_fatal(mutex) _mutex_unlock_fatal(mutex) #endif #endif /* SRC_PKCS11_MUTEX_H_ */ tpm2-pkcs11-1.9.1/src/lib/object.h0000644000175100017510000001035514667615111012157 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_OBJECT_H_ #define SRC_PKCS11_OBJECT_H_ #include #include #include "attrs.h" #include "debug.h" #include "list.h" #include "pkcs11.h" #include "twist.h" typedef struct session_ctx session_ctx; typedef struct pobject pobject; typedef struct tobject tobject; struct tobject { unsigned active; /** number of active users */ unsigned id; /** external handle */ CK_OBJECT_HANDLE obj_handle; /** application visible handle */ /* * these all exist in the attribute array, but we'll keep some * twist copies of them handy for convenience. */ twist pub; /** public tpm data */ twist priv; /** private tpm data */ twist objauth; /** wrapped object auth value */ attr_list *attrs; /** object attributes */ list l; /** list pointer for "listifying" tobjects */ twist unsealed_auth; /** unwrapped auth value */ uint32_t tpm_handle; /** loaded tpm handle */ bool is_authenticated; /** true if a context specific login has authenticated use of the object */ }; tobject *tobject_new(void); /** * Sets the internal private and public TPM data blob fields via deep copy. * Thus the caller is still responsible to free the priv and pub parameters. * @param tobj * The tobject to set. * @param pub * The public portion, cannot be NULL. * @param priv * The private portion, may be NULL. * @return * CKR_OK on success or CKR_HOST_MEMORY. */ CK_RV tobject_set_blob_data(tobject *tobj, twist pub, twist priv); /** * Sets the internal TPm auth fields via deep copy. * Thus the caller is still responsible to free the authbin and pub wrappedauthhex. * @param tobj * The tobject to set. * @param authbin * The auth in plaintext binary form. * @param wrappedauthhex * The wrapping key wrapped auth. * @return * CKR_OK on success or CKR_HOST_MEMORY. */ CK_RV tobject_set_auth(tobject *tobj, twist authbin, twist wrappedauthhex); void tobject_set_handle(tobject *tobj, uint32_t handle); void tobject_set_id(tobject *tobj, unsigned id); void tobject_free(tobject *tobj); CK_RV object_find_init(session_ctx *ctx, CK_ATTRIBUTE_PTR templ, unsigned long count); CK_RV object_find(session_ctx *ctx, CK_OBJECT_HANDLE *object, unsigned long max_object_count, unsigned long *object_count); CK_RV object_find_final(session_ctx *ctx); CK_RV object_get_attributes(session_ctx *ctx, CK_OBJECT_HANDLE object, CK_ATTRIBUTE *templ, unsigned long count); CK_RV object_set_attributes(session_ctx *ctx, CK_OBJECT_HANDLE object, CK_ATTRIBUTE *templ, unsigned long count); CK_ATTRIBUTE_PTR tobject_get_attribute_full(tobject *tobj, CK_ATTRIBUTE_PTR attr); CK_RV tobject_get_min_buf_size(tobject *tobj, CK_MECHANISM_PTR mech, size_t *maxsize); CK_RV object_mech_is_supported(tobject *tobj, CK_MECHANISM_PTR mech); /** * Gets the attributes for a tobject. If it's a link to a tobject, follows it * and retrieves the public attributes, as the link object is the public portion. * Else, it's not the link object and retrieves the private attributes. * @param tobj * The tobject to fetch the attributes from. * @return * The attribute array. */ attr_list *tobject_get_attrs(tobject *tobj); CK_RV _tobject_user_decrement(tobject *tobj, const char *filename, int lineno); CK_RV _tobject_user_increment(tobject *tobj, const char *filename, int lineno); /** * Marks a tobject no longer being used by an operation. * * @param tobj * The tobject to retire. * @return * CKR_OK on success, CKR_GENERAL_ERROR if not active. */ #define tobject_user_decrement(tobj) _tobject_user_decrement(tobj, __FILE__, __LINE__) /** * Marks a tobject as in use by an operation. * * @param tobj * The tobject to mark as in use. * @return * CKR_OK on success, CKR_GENERAL_ERROR if not active. */ #define tobject_user_increment(tobj) _tobject_user_increment(tobj, __FILE__, __LINE__) CK_RV object_destroy(session_ctx *ctx, CK_OBJECT_HANDLE object); CK_RV object_create(session_ctx *ctx, CK_ATTRIBUTE *templ, CK_ULONG count, CK_OBJECT_HANDLE *object); WEAK CK_RV object_init_from_attrs(tobject *tobj); #ifdef TESTING tobject *__real_tobject_new(void); void pobject_free(pobject *pobj); #endif #endif /* SRC_PKCS11_OBJECT_H_ */ tpm2-pkcs11-1.9.1/src/lib/parser.h0000644000175100017510000000105414535673717012213 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_PARSER_H_ #define SRC_LIB_PARSER_H_ #include #include "attrs.h" #include "debug.h" #include "pkcs11.h" #include "token.h" WEAK bool parse_attributes_from_string(const unsigned char *yaml, size_t size, attr_list **attrs); bool parse_token_config_from_string(const unsigned char *yaml, size_t size, token_config *config); bool parse_pobject_config_from_string(const unsigned char *yaml, size_t size, pobject_config *config); #endif /* SRC_LIB_PARSER_H_ */ tpm2-pkcs11-1.9.1/src/lib/random.h0000644000175100017510000000065314535673717012203 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_RANDOM_H_ #define SRC_PKCS11_RANDOM_H_ #include "pkcs11.h" #include "session_ctx.h" typedef struct token token; typedef struct session_ctx session_ctx; CK_RV random_get(session_ctx *ctx, unsigned char *random_data, unsigned long random_len); CK_RV seed_random(session_ctx *ctx, unsigned char *seed, unsigned long seed_len); #endif /* SRC_PKCS11_RANDOM_H_ */ tpm2-pkcs11-1.9.1/src/lib/session.h0000644000175100017510000000133314535673717012402 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_SESSION_H_ #define SRC_PKCS11_SESSION_H_ #include #include "pkcs11.h" #include "tpm.h" typedef struct session_ctx session_ctx; typedef struct token token; /* * This max value CANNOT extend into the upper byte of a CK_SESSION_HANDLE, * as that is reserved for the tokid. */ #define MAX_NUM_OF_SESSIONS 1024 CK_RV session_open(CK_SLOT_ID slot_id, CK_FLAGS flags, void *application, CK_NOTIFY notify, CK_SESSION_HANDLE *session); CK_RV session_close(CK_SESSION_HANDLE session); CK_RV session_closeall(CK_SLOT_ID slot_id); CK_RV session_lookup(CK_SESSION_HANDLE session, token **tok, session_ctx **ctx); #endif /* SRC_PKCS11_SESSION_H_ */ tpm2-pkcs11-1.9.1/src/lib/session_ctx.h0000644000175100017510000001340214666345415013254 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_SESSION_CTX_H_ #define SRC_PKCS11_SESSION_CTX_H_ #include "mutex.h" #include "object.h" #include "pkcs11.h" #include "tpm.h" #include "utils.h" typedef enum token_login_state token_login_state; typedef struct session_ctx session_ctx; typedef enum operation operation; enum operation { operation_none = 0, operation_find, operation_sign, operation_verify, operation_verify_recover, operation_encrypt, operation_decrypt, operation_digest, operation_count }; typedef struct generic_opdata generic_opdata; struct generic_opdata { operation op; tobject *tobj; void *data; }; /** * Frees a session context * @param ctx * The session context to free */ void session_ctx_free(session_ctx *ctx); /** * Creates a new session context within a given token. * @param ctx * The new session context generated, * @param tok * The token the session is created on. * @param flags * The session flags * @return * CKR_OK on success. */ typedef struct token token; CK_RV session_ctx_new(session_ctx **ctx, token *tok, CK_FLAGS flags); /** * Internal locking routine, use the session_ctx_lock and session_ctx_unlock macros. * @param ctx * The session to lock */ void *_session_ctx_get_lock(session_ctx *ctx); /** * Get the state of the session * @param ctx * Session context to query * @return * The CK_STATE flags. */ CK_STATE session_ctx_state_get(session_ctx *ctx); /** * Get the CK_Fstate of the session * @param ctx * Session context to query * @return * The CK_STATE flags. */ CK_FLAGS session_ctx_flags_get(session_ctx *ctx); token *session_ctx_get_token(session_ctx *ctx); /** * Given a user, performs a login event, causing a transition to it's correct end state based * on current session state and user triggering the event. * * See Section 5 of: * https://www.cryptsoft.com/pkcs11doc/STANDARD/pkcs-11.pdf * * @param ctx * The session context to transition. * @param user * The user performing the login, ie state transition trigger. */ void session_ctx_login_event(session_ctx *ctx, CK_USER_TYPE user); /** * Given a user, performs a logout event, causing a transition to it's correct * initial state based on current session state and user triggering the event. * * See Section 5 of: * https://www.cryptsoft.com/pkcs11doc/STANDARD/pkcs-11.pdf * * @param ctx * The session context to transition. */ void session_ctx_logout_event(session_ctx *ctx); /** * Determines if the opdata is in use * @param ctx * The token * @return */ bool session_ctx_opdata_is_active(session_ctx *ctx); typedef void (*opdata_free_fn)(void **opdata); /** * Sets operational specific data. Callers should take care to ensure * no other users are using it by calling session_ctx_opdata_is_active() * before setting the data. * * @param tok * The session_ctx to set operational data on * @param op * The operation setting the data * @param tobj * The active object or NULL if no single active object (like find objects has a list) * @param data * The data to set */ void session_ctx_opdata_set(session_ctx *ctx, operation op, tobject *tobj, void *data, opdata_free_fn fn); /** * Returns the active object for the session, or NULL. * @param ctx * The session context * @returns * The tobject or NULL. */ tobject *session_ctx_opdata_get_tobject(session_ctx *ctx); /** * Clears the session_ctx opdata state. NOTE that callers * are required to perform memory management on what * is stored in the void pointer. * @param tok * The session_ctx to clear operational data from. */ void session_ctx_opdata_clear(session_ctx *ctx); /** * Sets the operation specific state data * @param tok * The token to set the operation state data * @param op * The operation setting it * @param data * The data to set * @return * CKR_OK on success. */ #define session_ctx_opdata_get(ctx, op, data) _session_ctx_opdata_get(ctx, op, (void **)data) CK_RV _session_ctx_opdata_get(session_ctx *ctx, operation op, void **data); /** * Causes a login event to be propagated through the token * associated with the session context if the user is not CKU_CONTEXT_SPECIFIC. A login event is * Propagated by: * 1. setting the token level who is logged in state with whom is logged in. * 2. updating all open session states in the session table * * If the user is CKU_CONTEXT_SPECIIFC the session state is marked that it's "logged in" and a * logout should occur at the end. If a login request for CKU_USER occurs after a CKU_CONTEXT_SPECIFIC * call, an error is thrown. * * @param ctx * The session context to update, and possibly the global state of the * associated token. * @param user * The user * @param pin * The pin * @param pinlen * The length of the pin in bytes. * @return * CKR_OK on success, anything else is a failure. */ CK_RV session_ctx_login(session_ctx *ctx, CK_USER_TYPE user, CK_BYTE_PTR pin, CK_ULONG pinlen); /** * Generates a logout event to be propagated throughout the token. * A logout event is propagated by: * 1. setting the token level "who is logged in state" to no one is logged in. * 2. setting all existing sessions back to their original state. * * @param tok * The token to propagate the login event * @return * CKR_OK on success, anything else is a failure. */ CK_RV session_ctx_logout(session_ctx *ctx); /** * Gets session info * @param ctx * session ctx * @param info * structure to populate * @return * CKR_OK on success, anything else is a failure. */ CK_RV session_ctx_get_info(session_ctx *ctx, CK_SESSION_INFO *info); /** * True if the object has been authenticated for use. * @param ctx * @return */ CK_RV session_ctx_tobject_authenticated(session_ctx *ctx); #endif /* SRC_PKCS11_SESSION_CTX_H_ */ tpm2-pkcs11-1.9.1/src/lib/session_table.h0000644000175100017510000000266114535673717013556 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_SESSION_TABLE_H_ #define SRC_PKCS11_SESSION_TABLE_H_ #include "session.h" #include "session_ctx.h" #include "session_table.h" typedef struct token token; typedef struct session_table session_table; CK_RV session_table_new(session_table **t); void session_table_free(session_table *t); void session_table_get_cnt(session_table *t, unsigned long *all, unsigned long *rw, unsigned long *ro); CK_RV session_table_new_entry(session_table *t, CK_SESSION_HANDLE *handle, token *tok, CK_FLAGS flags); session_ctx *session_table_lookup(session_table *t, CK_SESSION_HANDLE handle); CK_RV session_table_free_ctx_by_handle(token *t, CK_SESSION_HANDLE handle); CK_RV session_table_free_ctx(token *t, CK_SESSION_HANDLE handle); CK_RV session_table_free_ctx_all(token *t); /** * performs a session_ctx_login_event() call for each item in the table * with the session table lock held. * @param s_table * The session table * @param user * The user triggering the login event. */ void session_table_login_event(session_table *s_table, CK_USER_TYPE user); /** * performs a session_ctx_logout_event() call for each item in the table * with the session table lock held. * @param s_table * The session table * @param called_session * The session context that the logout event occurred on. */ void token_logout_all_sessions(token *tok); #endif /* SRC_PKCS11_SESSION_TABLE_H_ */ tpm2-pkcs11-1.9.1/src/lib/sign.h0000644000175100017510000000252314535673717011661 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef _SRC_LIB_SIGN_H_ #define _SRC_LIB_SIGN_H_ #include "pkcs11.h" #include "session_ctx.h" CK_RV sign_init(session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key); CK_RV sign_update(session_ctx *ctx, unsigned char *part, unsigned long part_len); CK_RV sign_final_ex(session_ctx *ctx, unsigned char *signature, unsigned long *signature_len, bool is_oneshot); static inline CK_RV sign_final(session_ctx *ctx, unsigned char *signature, unsigned long *signature_len) { return sign_final_ex(ctx, signature, signature_len, false); } CK_RV sign(session_ctx *ctx, unsigned char *data, unsigned long data_len, unsigned char *signature, unsigned long *signature_len); CK_RV verify_init(session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key); CK_RV verify_update(session_ctx *ctx, unsigned char *part, unsigned long part_len); CK_RV verify_final(session_ctx *ctx, unsigned char *signature, unsigned long signature_len); CK_RV verify(session_ctx *ctx, unsigned char *data, unsigned long data_len, unsigned char *signature, unsigned long signature_len); CK_RV verify_recover_init (session_ctx *ctx, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key); CK_RV verify_recover (session_ctx *ctx, CK_BYTE_PTR signature, CK_ULONG signature_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len); #endif tpm2-pkcs11-1.9.1/src/lib/slot.h0000644000175100017510000000127714535673717011707 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_SLOT_H_ #define SRC_SLOT_H_ #include #include "pkcs11.h" typedef struct token token; #define SLOT_ID 0x1234 CK_RV slot_init(void); void slot_destroy(void); token *slot_get_token(CK_SLOT_ID slot_id); CK_RV slot_get_list (unsigned char token_present, CK_SLOT_ID *slot_list, unsigned long *count); CK_RV slot_get_info (CK_SLOT_ID slot_id, CK_SLOT_INFO *info); CK_RV slot_mechanism_list_get (CK_SLOT_ID slotID, CK_MECHANISM_TYPE *mechanism_list, unsigned long *count); CK_RV slot_mechanism_info_get (CK_SLOT_ID slot_id, CK_MECHANISM_TYPE type, CK_MECHANISM_INFO *info); CK_RV slot_add_uninit_token(void); #endif /* SRC_SLOT_H_ */ tpm2-pkcs11-1.9.1/src/lib/ssl_util.h0000644000175100017510000000444714535673717012566 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_SSL_UTIL_H_ #define SRC_LIB_SSL_UTIL_H_ #include #include #include #include #include #include #include "pkcs11.h" #include "attrs.h" #include "log.h" #include "twist.h" #if (OPENSSL_VERSION_NUMBER >= 0x1010100fL) /* OpenSSL 1.1.1 */ #define LIB_TPM2_OPENSSL_OPENSSL_POST111 0x1010100f #endif #if defined(LIB_TPM2_OPENSSL_OPENSSL_POST111) #include #endif #if (OPENSSL_VERSION_NUMBER >= 0x30000000) /* OpenSSL 3.0.0 */ #define LIB_TPM2_OPENSSL_OPENSSL_POST300 0x1010100f #endif #define SSL_UTIL_LOGE(m) LOGE("%s: %s", m, ERR_error_string(ERR_get_error(), NULL)); CK_RV ssl_util_attrs_to_evp(attr_list *attrs, EVP_PKEY **outpkey); CK_RV ssl_util_encrypt(EVP_PKEY *pkey, int padding, twist label, const EVP_MD *md, CK_BYTE_PTR ptext, CK_ULONG ptextlen, CK_BYTE_PTR ctext, CK_ULONG_PTR ctextlen); CK_RV ssl_util_sig_verify(EVP_PKEY *pkey, int padding, const EVP_MD *md, CK_BYTE_PTR digest, CK_ULONG digest_len, CK_BYTE_PTR signature, CK_ULONG signature_len); CK_RV ssl_util_verify_recover(EVP_PKEY *pkey, int padding, const EVP_MD *md, CK_BYTE_PTR signature, CK_ULONG signature_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len); typedef int (*fn_EVP_PKEY_init)(EVP_PKEY_CTX *ctx); CK_RV ssl_util_setup_evp_pkey_ctx(EVP_PKEY *pkey, int padding, const EVP_MD *md, fn_EVP_PKEY_init init_fn, EVP_PKEY_CTX **outpkey_ctx); CK_RV ssl_util_add_PKCS1_PSS(EVP_PKEY *pkey, const CK_BYTE_PTR inbuf, const EVP_MD *md, CK_BYTE_PTR outbuf); CK_RV ssl_util_add_PKCS1_TYPE_1(const CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_BYTE_PTR outbuf, CK_ULONG outbuflen); CK_RV ssl_util_check_PKCS1_TYPE_2(const CK_BYTE_PTR inbuf, CK_ULONG inlen, CK_ULONG rsa_len, CK_BYTE_PTR outbuf, CK_ULONG_PTR outbuflen); twist ssl_util_hash_pass(const twist pin, const twist salt); /** * Given an attribute of CKA_EC_PARAMS returns the nid value. * @param ecparams * The DER X9.62 parameters value * @param nid * The nid to set * @return * CKR_OK on success. */ CK_RV ssl_util_params_to_nid(CK_ATTRIBUTE_PTR ecparams, int *nid); #endif /* SRC_LIB_SSL_UTIL_H_ */ tpm2-pkcs11-1.9.1/src/lib/token.h0000644000175100017510000001162314666345415012036 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_TOKEN_H_ #define SRC_TOKEN_H_ #include "checks.h" #include "pkcs11.h" #include "session_ctx.h" #include "tpm.h" #include "twist.h" #include "utils.h" typedef enum pss_config_state pss_config_state; enum pss_config_state { pss_config_state_unk = 0, pss_config_state_bad, pss_config_state_good, }; typedef struct token_config token_config; struct token_config { bool is_initialized; /* token initialization state */ char *tcti; /* token specific tcti config */ pss_config_state pss_sigs_good; bool empty_user_pin; /* user PIN of the token is empty */ }; typedef struct session_table session_table; typedef struct session_ctx session_ctx; typedef enum token_login_state token_login_state; enum token_login_state { token_no_one_logged_in = 0, token_user_logged_in = 1 << 0, token_so_logged_in = 1 << 1, }; typedef struct tobject tobject; typedef struct pobject_config pobject_config; struct pobject_config { bool is_transient; union { char *template_name; twist blob; }; }; typedef struct pobject pobject; struct pobject { twist objauth; uint32_t handle; pobject_config config; }; typedef struct sealobject sealobject; struct sealobject { twist userpub; twist userpriv; twist userauthsalt; twist sopub; twist sopriv; twist soauthsalt; }; enum token_type { token_type_esysdb = 0, token_type_fapi }; typedef struct mdetail mdetail; typedef struct token token; struct token { unsigned id; unsigned pid; unsigned char label[32]; enum token_type type; token_config config; pobject pobject; union { /* anon union for backend data */ struct { sealobject sealobject; } esysdb; /* esysdb */ struct { void *ctx; twist userauthsalt; twist soauthsalt; } fapi; }; /* This context will be filled by fapi for use with esys-only commands. */ tpm_ctx *tctx; twist wrappingkey; struct { tobject *head; tobject *tail; } tobjects; session_table *s_table; token_login_state login_state; mdetail *mdtl; void *mutex; }; /** * Frees a token * @param t * The token to free */ void token_free(token *t); /** * Free's a token_config * @param c * The token config to free. */ void token_config_free(token_config *c); /** * Free's a list of tokens * @param t * The token list to free * @param len * The number of elements to free * @note * Sets the token pointer to NULL and len to 0. */ void token_free_list(token **t, size_t *len); /** * Adds a tobject into the token tobject list filling in * gaps along the way and using the gap index as the object * handle index. * @param tok * The token to insert into. * @param t * The tobject to insert. * @return * CKR_OK on success. */ CK_RV token_add_tobject(token *tok, tobject *t); CK_RV token_find_tobject(token *tok, CK_OBJECT_HANDLE handle, tobject **tobj); /** * Adds a tobject to the END of the tobject list incrementing the * previous tobject index number and using that. This DOES NOT gap * fill, and thus is really best for use only in the DB initialization * logic to prevent multiple iterations of the linked list during initialization. * @param tok * The token to insert into. * @param t * The tobject to insert. * @return * CKR_OK on success. */ CK_RV token_add_tobject_last(token *tok, tobject *t); void token_rm_tobject(token *tok, tobject *t); CK_RV token_get_info(token *t, CK_TOKEN_INFO *info); /** * Checks if anyone is logged into the token. * @param tok * The token to check * @return * True if logged in, false otherwise. */ bool token_is_any_user_logged_in(token *tok); bool token_is_user_logged_in(token *tok); bool token_is_so_logged_in(token *tok); /** * TODO * @param tok * @param old_pin * @param old_len * @param new_pin * @param new_len * @return */ CK_RV token_setpin(token *tok, CK_UTF8CHAR_PTR old_pin, CK_ULONG old_len, CK_UTF8CHAR_PTR new_pin, CK_ULONG new_len); CK_RV token_initpin(token *tok, CK_UTF8CHAR_PTR new_pin, CK_ULONG new_len); void token_lock(token *t); void token_unlock(token *t); /** * Look up and possibly load an unloaded tobject. * @param tok * The token to look up the object on. * @param key * The object handle to look for. * @param loaded_tobj * The pointer to the backing tobject * @return * CKR_OK - everything is good. * CKR_INVALID_KEY_HANDLE - not found * CKR_KEY_HANDLE_INVALID - invalid key handle * Others like: CKR_GENERAL_ERROR and CKR_HOST_MEMORY */ CK_RV token_load_object(token *tok, CK_OBJECT_HANDLE key, tobject **loaded_tobj); CK_RV token_min_init(token *t); void token_reset(token *t); CK_RV token_init(token *t, CK_BYTE_PTR pin, CK_ULONG pin_len, CK_BYTE_PTR label); void pobject_config_free(pobject_config *c); #endif /* SRC_TOKEN_H_ */ tpm2-pkcs11-1.9.1/src/lib/tpm.h0000644000175100017510000002024614667615111011511 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_TPM_H_ #define SRC_PKCS11_TPM_H_ #include #include #include #include "attrs.h" #include "debug.h" #include "object.h" #include "twist.h" #include "utils.h" /* config env var for TCTI context */ #define TPM2_PKCS11_TCTI "TPM2_PKCS11_TCTI" typedef struct tpm_ctx tpm_ctx; typedef struct tpm_op_data tpm_op_data; /* forward references */ typedef union crypto_op_data crypto_op_data; typedef struct mdetail mdetail; typedef struct pobject pobject; /** * Destroys the system API context, and when the refcnt * hits 0 for the tcti context, destroys it as well. * @param ctx * The tpm context * @note: NOT THREAD SAFE: Assumes session table lock held */ void tpm_ctx_free(tpm_ctx *ctx); /** * Creates a new tpm_ctx with it's own ESAPI * and TCTI contexts internally. * @param tcti * An optional (can be null) tcti config string. * @param tctx * The tpm_ctx to create. * @return * CJR_OK on success, anything else is a failure. */ CK_RV tpm_ctx_new(const char *tcti, tpm_ctx **tctx); CK_RV tpm_ctx_new_fromtcti(void *tcti, tpm_ctx **tctx); /** * Retrieves Spec Version, FW Version, Manufacturer and Model from TPM * and populates the provided CK_TOKEN_INFO structure. * * If the manufacturer id is specified in TPM2_MANUFACTURER_MAP it will be * extended with a human readable form of the manufacturer * @param ctx * The tpm api context. * @param info * The CK_TOKEN_INFO structure where the data is written to * @return * CKR_OK on success, CKR_ARGUMENTS_BAD, or CKR_GENERAL_ERROR otherwise */ CK_RV tpm_get_token_info (tpm_ctx *ctx, CK_TOKEN_INFO *info); CK_RV tpm_is_rsa_keysize_supported(tpm_ctx *tctx, CK_ULONG test_size); CK_RV tpm_find_max_rsa_keysize(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max); CK_RV tpm_find_ecc_keysizes(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max); CK_RV tpm_find_aes_keysizes(tpm_ctx *tctx, CK_ULONG_PTR min, CK_ULONG_PTR max); CK_RV tpm_is_ecc_curve_supported(tpm_ctx *tctx, int nid); /** * Generates random bytes from the TPM * @param ctx * The tpm api context. * @param data * The date to write the random bytes into. * @param size * The number of random bytes to generate. * @return * true on success, false otherwise. */ bool tpm_getrandom(tpm_ctx *ctx, uint8_t *data, size_t size); CK_RV tpm_stirrandom(tpm_ctx *ctx, unsigned char *seed, unsigned long seed_len); CK_RV tpm_loadobj(tpm_ctx *ctx, uint32_t phandle, twist auth, twist pub_path, twist priv_path, uint32_t *handle); bool tpm_flushcontext(tpm_ctx *ctx, uint32_t handle); twist tpm_unseal(tpm_ctx *ctx, uint32_t handle, twist objauth); WEAK bool tpm_deserialize_handle(tpm_ctx *ctx, twist handle_blob, uint32_t *handle); bool tpm_contextload_handle(tpm_ctx *ctx, twist handle_blob, uint32_t *handle); CK_RV tpm_sign(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG_PTR siglen); CK_RV tpm_verify(tpm_op_data *opdata, CK_BYTE_PTR data, CK_ULONG datalen, CK_BYTE_PTR sig, CK_ULONG siglen); CK_RV tpm_rsa_pkcs_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_oaep_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pss_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); CK_RV tpm_rsa_pss_sha1_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pss_sha256_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pss_sha384_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pss_sha512_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pkcs_sha1_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pkcs_sha256_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pkcs_sha384_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_rsa_pkcs_sha512_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdsa_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdsa_sha1_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdsa_sha256_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdsa_sha384_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdsa_sha512_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_ec_ecdh1_derive(tpm_ctx *tctx, tobject *tobj, unsigned char *pubkey, size_t pubkey_len, unsigned char **psec, size_t *pseclen); CK_RV tpm_aes_cbc_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_aes_cfb_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_aes_ecb_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **opdata); CK_RV tpm_aes_ctr_get_opdata(mdetail *m, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); CK_RV tpm_hmac_sha1_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); CK_RV tpm_hmac_sha256_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); CK_RV tpm_hmac_sha384_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); CK_RV tpm_hmac_sha512_get_opdata(mdetail *mdtl, tpm_ctx *tctx, CK_MECHANISM_PTR mech, tobject *tobj, tpm_op_data **outdata); void tpm_opdata_reset(tpm_op_data *opdata); void tpm_opdata_free(tpm_op_data **opdata); CK_RV tpm_encrypt(crypto_op_data *opdata, CK_BYTE_PTR ptext, CK_ULONG ptextlen, CK_BYTE_PTR ctext, CK_ULONG_PTR ctextlen); CK_RV tpm_final_encrypt(crypto_op_data *opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len); CK_RV tpm_decrypt(crypto_op_data *opdata, CK_BYTE_PTR ctext, CK_ULONG ctextlen, CK_BYTE_PTR ptext, CK_ULONG_PTR ptextlen); CK_RV tpm_final_decrypt(crypto_op_data *opdata, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len); CK_RV tpm_changeauth(tpm_ctx *ctx, uint32_t parent_handle, uint32_t object_handle, twist oldauth, twist newauth, twist *newblob); CK_RV tpm2_create_seal_obj(tpm_ctx *ctx, twist parentauth, uint32_t parent_handle, twist objauth, twist oldpubblob, twist sealdata, twist *newpubblob, twist *newprivblob); bool tpm_session_active(tpm_ctx *ctx); CK_RV tpm_session_start(tpm_ctx *ctx, twist auth, uint32_t handle); CK_RV tpm_session_stop(tpm_ctx *ctx); typedef struct tpm_object_data tpm_object_data; struct tpm_object_data { uint32_t privhandle; uint32_t pubhandle; attr_list *attrs; twist pubblob; twist privblob; }; void tpm_objdata_free(tpm_object_data *objdata); CK_RV tpm2_generate_key( tpm_ctx *tpm, uint32_t parent, twist parentauth, twist newauthbin, CK_MECHANISM_PTR mechanism, attr_list *pubattrs, attr_list *privattrs, tpm_object_data *objdata); CK_RV tpm2_getmechanisms(tpm_ctx *ctx, CK_MECHANISM_TYPE *mechanism_list, CK_ULONG_PTR count); CK_RV tpm_get_existing_primary(tpm_ctx *tpm, uint32_t *primary_handle, twist *primary_blob); CK_RV tpm_create_persistent_primary(tpm_ctx *tpm, uint32_t *primary_handle, twist *primary_blob); CK_RV tpm_create_transient_primary_from_template(tpm_ctx *tpm, const char *template_name, const char *pobj_auth, uint32_t *primary_handle); CK_RV tpm_get_pss_sig_state(tpm_ctx *tctx, tobject *tobj, bool *pss_sigs_good); bool tpm_get_name(tpm_ctx *ctx, uint32_t handle, twist *name); void tpm_init(void); void tpm_destroy(void); #endif /* SRC_PKCS11_TPM_H_ */ tpm2-pkcs11-1.9.1/src/lib/twist.h0000644000175100017510000002111014535673717012064 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef TWIST_H_ #define TWIST_H_ #include #include #include /** * Standard twist tstrings are safe to pass to C string routines. twist tstrings * created from twistbin_new() are safe to pass as well, since twist guarantees * all buffers are NULL terminated. however, they may contain NULL bytes in * between the start and end, so the C string routines might not give you what * you expect. */ typedef const char* twist; /** * Binary buffers are used to create a binary safe string * from many sources. */ typedef struct binarybuffer binarybuffer; struct binarybuffer { const void *data; /* data to store */ size_t size; /* length of that data */ }; /** * Creates a new twist tstring from a C string. * @param tstring * The C string to convert to a twist tstring. * @return * A new twist tstring on success, NULL on error or if string is NULL. * Call twist_free() on the return when done. */ extern twist twist_new(const char *string); /** * Creates a twist string of size bytes filled with zeroes. * @param size * The size of the string to allocate. * @return * A new twiest string on success or NULL on error. Like twist_new(), the * allocated string should be freed by twist_free(). */ extern twist twist_calloc(size_t size); /** * Creates a new, binary safe string. This string, like all * twist tstrings, is NULL terminated. However, this twist tstring * can have NULL bytes within its bounds. It is safe to pass to * C string routines and all twist routines, but note the * C routines are not binary safe, so one should always use * twist routines. * * @param data * The data to create the new twist tstring from. * @param len * The length of the data. * @return * A new twist tstring to pass to twist_free() when done. On error, it * returns NULL or if NULL is passed for data. */ extern twist twistbin_new(const void *data, size_t len); /** * Creates a new twist string from an array of strings, concatenating * them as it goes. The resulting string is like so: * data[0] + data[1] + .. + data[n] * @param data * The array of string to initialize and concatenate the twist string from. * @param len * The length of the array given by data. * @return * A new twist string or NULL on error. Should be passed to twist_free() */ extern twist twist_create(const char *data[], size_t len); /** * Creates a new, binary safe twist string, similair to twist_create(). * @param data * An array of data pointers with lengths. * @param len * The length of the data array. * @return * A new twist string or NULL on error. Should be passed to twist_free() */ extern twist twistbin_create(const binarybuffer data[], size_t len); /** * Returns the length of a twist tstring in O(1) time. * @param tstring * The twist tstring to check the length of. * @return * The length of the string. */ extern size_t twist_len(twist tstring); /** * Duplicates a twist tstring. * Note that assigning to the parameter results in a memory leak. * @param tstring * The twist tstring to duplicate. * @return * A new twist tstring or NULL on error or if string is NULL. Call twist_free() * on the return when done. */ extern twist twist_dup(twist tstring); /** * Frees a twist tstring. It is safe to pass NULL. * @param tstring * The twist tstring to free. */ extern void twist_free(twist tstring); /** * Concatenates a new string onto old string * @param old_str * The old string to concatenate to. * @param new_str * The new string to append to the old string. * @return * A new string to be passed to twist_free() or NULL on error. * Note: If you wish to reuse the same memory, see twist_append(). * It reurns NULL on error or if old_str and new_str are NULL. */ extern twist twist_concat(twist old_str, const char *new_str); /** * Like twist_concat() but allows appending binary safe data. * @param old_str * The twist tstring to append to. * @param data * The data to append. * @param len * The length of that data. * @return */ extern twist twistbin_concat(twist old_str, const void *data, size_t len); /** * Concatenates two twist tstrings together. Never assign back to a specified * parameter or a memory leak will ensue (orphaned pointer). * @param old_str * The first part of the string. * @param new_str * The second part of the string. * @return * A new twist tstring of new_str appended to old_str, that should be * be passed to twist_free() when done. It returns NULL on error * or if both old_str and new_str are NULL. */ extern twist twist_concat_twist(twist old_str, twist new_str); /** * Tests for equivalence and avoids a comparison if the * lengths alter. Thus tests like strcmp('fool', 'foo') * are performed in O(1). If the lengths are equal, * a O(N) (worst case) comparison is done (memcmp) * @param x * A twist tstring to test. * @param y * A twist tstring to test. * @return * true on equivalence, false otherwise. */ extern bool twist_eq(twist x, twist y); /** * Appends a new string to a twist tstring preserving the already allocated * memory space. Use this if a new string (aka heap allocation) is not required. * Do not assign old_str to the return value without checking for NULL, or a * memory leak will ensue. * @param old_str * The string to append to. * @param new_str * The new string data to append. * @return * A re-allocated version of old_str with new_str appended onto it. One no longer * needs to twist_free(old_str), but merely the return. Returns NULL on error or * of old_str and new_str are NULL. */ extern twist twist_append(twist old_str, const char *new_str); /** * Like twist_append() but works with binary safe data. * @param old_str * The string data to append to. * @param data * The data to append. * @param len * The length of the data. * @return * A re-allocated version of old_str with data appended onto it. One no longer * needs to twist_free(old_str), but merely the return. Returns NULL on error or * of old_str and data are NULL. */ extern twist twistbin_append(twist old_str, const void *data, size_t len); /** * like twistbin_append but takes an array of binarybuffer's. * @param old_str * The old string to reallocate and append to. * @param data * The data to add, in order from index 0 to N. * @param num_of_args * The number of items in the data array. * @return * NULLon failure or a reallocated twist string. */ extern twist twistbin_aappend(twist old_str, binarybuffer data[], size_t num_of_args); /** * Like twistbin_append() but the data to append is another twist tstring. * @param old_str * The twist tstring to append to. * @param new_str * The new string to append. * @return * A re-allocated version of old_str with new_str appended onto it. One no longer * needs to twist_free(old_str), but merely the return. Returns NULL on error or * of old_str and new_str are NULL. */ extern twist twist_append_twist(twist old_str, twist new_str); /** * Truncates a string to the giben length, preserving the trailing NULL byte. * If the new length is larger than the original length, the new memory is 0 * allocated. * @param tstring * The twist tstring to truncate to a given size. * @param len * The length to truncate it to. * @return */ extern twist twist_truncate(twist tstring, size_t len); /** * Returns a pointer to the right hand end of the string, * before the terminating null byte. * @param tstring * The twist tstring to get the right hand pointer of. * @return * The pointer to the end of the string on the first valid * byte before the guaranteed NULL byte. */ extern char *twist_end(twist tstring); /** * Given a C style string encoded in base 16, without the trailing 0x, * return a raw data representation of it. * @param hexdata * The data to convert to raw bytes from ASCII encoded hex. * @return * A binary twist, this could contain interleaved NULL bytes, but * is guaranteed to end in a NULL byte. */ twist twistbin_unhexlify(const char *hexdata); /** * The opposite of unhexlify. Converts a binary twist to a hex string without * a leading 0x. * @param data * The binary data to base 16 encode. * @return * A twist on success, NULL on failure. */ twist twist_hexlify(const twist data); /** * Given a binary data string, converts it to a hex encoded string without a * leading 0x which is guaranteed to be NULL terminated. * * @param data * The data to encode as hex. * @param len * The length of the data. * @return * A twist on success, NULL on failure. */ twist twist_hex_new(const char *data, size_t len); #endif /* TWIST_H_ */ tpm2-pkcs11-1.9.1/src/lib/typed_memory.h0000644000175100017510000000146414535673717013441 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_LIB_TYPED_MEMORY_H_ #define SRC_LIB_TYPED_MEMORY_H_ #define TYPE_BYTE_INT ((CK_BYTE)1) #define TYPE_BYTE_BOOL ((CK_BYTE)2) #define TYPE_BYTE_INT_SEQ ((CK_BYTE)3) #define TYPE_BYTE_HEX_STR ((CK_BYTE)4) /* * if we ever need wrap templates we will define a special type. * The parser would also need to be updated to recognize a seq * of attribute template pointers. */ #define TYPE_BYTE_TEMP_SEQ ((CK_BYTE)5) void *type_calloc(size_t nmemb, size_t size, CK_BYTE type); void *type_zrealloc(void *ptr, size_t size, CK_BYTE type); CK_BYTE type_from_ptr(void *ptr, size_t len); CK_RV type_mem_dup(void *in, size_t len, void **dup); void type_mem_cpy(void *dest, void *in, size_t size); const char *type_to_str(CK_BYTE type); #endif /* SRC_LIB_TYPED_MEMORY_H_ */ tpm2-pkcs11-1.9.1/src/lib/utils.h0000644000175100017510000001527514666345037012065 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef SRC_PKCS11_UTILS_H_ #define SRC_PKCS11_UTILS_H_ #include #include #include #include #include #include "config.h" #include "log.h" #include "pkcs11.h" #include "twist.h" #define SALT_HEX_STR_SIZE 64 #define AUTH_HEX_STR_SIZE 32 #define xstr(s) str(s) #define str(s) #s #define ARRAY_LEN(x) (sizeof(x)/sizeof(x[0])) #define ARRAY_BYTES(l, t) (l * sizeof(t[0])) #define UNUSED(x) (void)x #define SAFE_FREE(x) do { free(x); x = NULL; } while (0) #define SAFE_CAST(m, r) \ do { \ if (!m->pParameter || m->ulParameterLen != sizeof(typeof(*r))) { \ return CKR_MECHANISM_PARAM_INVALID; \ } \ \ r = (typeof(r))m->pParameter; \ } while (0) #define goto_error_false(r) if(!r) { goto error; } int str_to_ul(const char *val, size_t *res); #define str_padded_copy(dst, src) _str_padded_copy(dst, sizeof(dst), (const CK_UTF8CHAR_PTR)src, strnlen((const char *)src, sizeof(src))) static inline void _str_padded_copy(CK_UTF8CHAR_PTR dst, size_t dst_len, const CK_UTF8CHAR_PTR src, size_t src_len) { memset(dst, ' ', dst_len); memcpy(dst, src, src_len); } twist aes256_gcm_decrypt(const twist key, const twist objauth); twist aes256_gcm_encrypt(twist keybin, twist plaintextbin); /** * Retrieves the size in bytes of a hash algorithm * @param mttype * The mechanism type. * @return * The size in bytes or 0 if unknown. */ size_t utils_get_halg_size(CK_MECHANISM_TYPE mttype); /** * * @param size * @return */ twist utils_get_rand_hex_str(size_t size); CK_RV utils_setup_new_object_auth(twist newpin, twist *newauthhex, twist *newsalthex); static inline CK_RV utils_new_random_object_auth(twist *newauthhex) { return utils_setup_new_object_auth(NULL, newauthhex, NULL); } CK_RV utils_ctx_unwrap_objauth(twist wrappingkey, twist objauth, twist *unwrapped_auth); CK_RV utils_ctx_wrap_objauth(twist wrappingkey, twist objauth, twist *wrapped_auth); /** * Removes a PKCS7 padding on a 16 byte block. * @param in * The PKCS5 padded input. * @param inlen * The length of the input, should be multiples of block size. Set on successful * calls to the size of the data with the padding stripped. * @param out * The unpadded output. * @param outlen * Input: The length of the output buffer. * Output: The length of the unpadded buffer. * @return * CKR_OK on success. */ CK_RV remove_pkcs7_pad(CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen); /** * Applies a PKCS7 padding to a blocksize of 16. * @param in * The buffer to pad to AES blocksize of 16. * @param inlen * The length of the input buffer. * @param out * The padded output. * @param outlen * Input: The length of the output buffer. * Output: The length of the padded buffer. * @return * Returns CKR_OK on success. */ CK_RV apply_pkcs7_pad(const CK_BYTE_PTR in, CK_ULONG inlen, CK_BYTE_PTR out, CK_ULONG_PTR outlen); /** * Given a git describe string returns a major and minor package version or 0's for both * if its a development build. The patch level is ignored. * * Example strings and returns: * "1" --> (1, 0) * "1.1" --> (1, 1) * "1.2.1" --> (1, 2) * "1.6.0-42-gb462a23778ea-dirty: --> (0, 0) * * @param buf * The string to parse. * @param major * The major version of the library. * @param minor * The minor version of the library. */ void parse_lib_version(const char *buf, CK_BYTE *major, CK_BYTE *minor); /** * * Given an uncompressed ECC point in DER (0x04||x||y) populate a TPM2B_ECC_POINT * @param from * ECC point in uncompressed DER format (0x04||x||y) * @param to * Pointer to the TPM2B_ECC_POINT to populate * @param len * Length of the ECC point in uncompressed DER format * @return CK_RV * CKR_ARGUMENTS_BAD if the uncompressed ECC point is invalid * CKR_OK on success */ CK_RV utils_uncompressed_ecpoint_to_tpm2b(uint8_t* from, TPM2B_ECC_POINT* to, size_t len); /* * Work around bugs in clang not including the builtins, and when asan is enabled * ending up in a nightmare of having both the ASAN and BUILTINS defined and linked * properly. * See: * - https://bugs.llvm.org/show_bug.cgi?id=16404 * - https://lists.gnu.org/archive/html/bug-gnulib/2019-08/msg00076.html */ #ifdef DISABLE_OVERFLOW_BUILTINS #include #include #if defined(NDEBUG) #error "Emulated overflow support is not evaluated for non-debug release use." \ "Fix toolchain and use overflow builtins. To compile configure with --debug" #endif #ifndef WORDS_BIGENDIAN static void be_to_host(unsigned char *from, unsigned char *to, size_t len) { #ifndef WORDS_BIGENDIAN size_t i; for (i=0; i < len; i++) { to[len -i -1] = from[i]; } #else memcpy(from, to, len); #endif } #endif typedef int (*arithmetic_fn)(BIGNUM *a, BN_ULONG w); static bool _do_safe_arithmetic(void *r, BN_ULONG a, BN_ULONG b, size_t size_of_r, arithmetic_fn fn) { unsigned char bufr[sizeof(size_t)] = { 0 }; assert(sizeof(bufr) >= size_of_r); BIGNUM *bna = BN_new(); assert(bna); int rc = BN_add_word(bna, a); assert(rc); rc = fn(bna, b); assert(rc); int num_of_bytes = BN_num_bytes(bna); if (num_of_bytes > size_of_r) { BN_free(bna); return true; } if (!num_of_bytes) { BN_free(bna); memset(r, 0, size_of_r); return false; } /* BN_bn2binpad would be nice, but OSSL 1.0.2 is lacking this */ assert(num_of_bytes <= size_of_r); off_t offset = size_of_r - num_of_bytes; rc = BN_bn2bin(bna, &bufr[offset]); BN_free(bna); assert(rc); be_to_host(bufr, r, size_of_r); return false; } #define _safe_add(r, a, b) _do_safe_arithmetic(&r, a, b, \ sizeof(r), BN_add_word) #define _safe_adde(r, a) _do_safe_arithmetic(&r, r, a, \ sizeof(r), BN_add_word) #define _safe_mul(r, a, b) _do_safe_arithmetic(&r, a, b, \ sizeof(r), BN_mul_word) #define _safe_mule(r, a) _do_safe_arithmetic(&r, r, a, \ sizeof(r), BN_mul_word) #else #define _safe_add(r, a, b) __builtin_add_overflow(a, b, &r) #define _safe_adde(r, a) __builtin_add_overflow(a, r, &r) #define _safe_mul(r, a, b) __builtin_mul_overflow(a, b, &r) #define _safe_mule(r, a) __builtin_mul_overflow(a, r, &r) #endif #define safe_add(r, a, b) do { if (_safe_add(r, a, b)) { LOGE("overflow"); abort(); } } while(0) #define safe_adde(r, a) do { if (_safe_adde(r, a)) { LOGE("overflow"); abort(); } } while(0) #define safe_mul(r, a, b) do { if (_safe_mul(r, a, b)) { LOGE("overflow"); abort(); } } while(0) #define safe_mule(r, a) do { if (_safe_mule(r, a)) { LOGE("overflow"); abort(); } } while(0) #endif /* SRC_PKCS11_UTILS_H_ */ tpm2-pkcs11-1.9.1/src/pkcs11.c0000644000175100017510000005407214666345037011252 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "pkcs11.h" #include "derive.h" #include "digest.h" #include "encrypt.h" #include "key.h" #include "log.h" #include "general.h" #include "object.h" #include "random.h" #include "session.h" #include "sign.h" #include "slot.h" #include "token.h" // TODO REMOVE ME #pragma GCC diagnostic push #pragma GCC diagnostic ignored "-Wunused-parameter" /** * Logs an "enter" function stub via LOGV */ #define _TRACE_CALL LOGV("enter \"%s\"", __func__) /** * Logs an "return" function stub with return value. It expects rv to be declared * as a CK_RV and contain the actual return value */ #define _TRACE_RET(rv) LOGV("return \"%s\" value: %lu", __func__, rv); /** * Calls a user supplied function with arguments logging the function entry and * exit. * * It ensures that the library has been initialized. * * IT PERFORMS NO STATE checks and has NO access to the token, thus it's useful * for routines like C_Init(). * @param fn * The user function to run. * @param varargs * The arguments to pass to fn * @return * The rv value of running fn. */ #define TOKEN_CALL_INIT(fn, ...) \ CK_RV rv = CKR_GENERAL_ERROR; \ _TRACE_CALL; \ _CHECK_INIT(out); \ rv = fn(__VA_ARGS__); \ out: \ _TRACE_RET(rv); \ return rv; #define TOKEN_CALL(fn, ...) \ CK_RV rv = CKR_GENERAL_ERROR; \ _TRACE_CALL; \ rv = fn(__VA_ARGS__); \ _TRACE_RET(rv); \ return rv; #define TOKEN_CALL_NO_INIT(fn, ...) \ CK_RV rv = CKR_GENERAL_ERROR; \ _TRACE_CALL; \ _CHECK_NO_INIT(out); \ rv = fn(__VA_ARGS__); \ out: \ _TRACE_RET(rv); \ return rv; /** * Returns CKR_FUNCTION_NOT_SUPPORTED and if NDEBUG is 0, will cause an * assert(0) failure. * @return * CKR_FUNCTION_NOT_SUPPORTED */ #define TOKEN_UNSUPPORTED \ _TRACE_CALL; \ assert(0); \ _TRACE_RET(CKR_FUNCTION_NOT_SUPPORTED); \ return CKR_FUNCTION_NOT_SUPPORTED; /** * Checks that the library is initialized, if not goes to a user specified * label. Requires rv to be defined as a CK_RV type. * @param label * The label to go to on failure. * @return * Sets rv to CKR_CRYPTOKI_NOT_INITIALIZED. */ #define _CHECK_INIT(label) \ if (!general_is_init()) { \ rv = CKR_CRYPTOKI_NOT_INITIALIZED; \ goto label; \ } /** * Checks that the library is NOT initialized, if not goes to a user specified * label. Requires rv to be defined as a CK_RV type. * @param label * The label to go to on failure. * @return * Sets rv to CKR_CRYPTOKI_ALREADY_INITIALIZED. */ #define _CHECK_NO_INIT(label) \ if (general_is_init()) { \ rv = CKR_CRYPTOKI_ALREADY_INITIALIZED; \ goto label; \ } /** * Interface to calling into the internal interface from a cryptoki * routine that takes slot id. Performs all locking on token. * * @note * - Requires a CK_RV rv to be declared. * - Performs **NO** auth checking. The slot routines implemented * do not need a particular state AFAIK. * - manages token locking * * @param userfun * The userfunction to call, ie the internal API. * @param ... * The arguments to the internal API call from cryptoki. * @return * The internal API's result as rv. */ #define TOKEN_WITH_LOCK_BY_SLOT(userfunc, slot, ...) \ do { \ \ _TRACE_CALL; \ CK_RV rv = CKR_GENERAL_ERROR; \ _CHECK_INIT(out); \ \ token *t = slot_get_token(slot); \ if (!t) { \ rv = CKR_SLOT_ID_INVALID; \ goto out; \ } \ \ token_lock(t); \ rv = userfunc(t, ##__VA_ARGS__); \ token_unlock(t); \ out: \ _TRACE_RET(rv); \ return rv; \ } while (0) /** * Raw interface (DO NOT USE DIRECTLY) for calling into the internal interface from a cryptoki * routine that takes a session handle. Performs all locking on token. * * @note * - Requires a CK_RV rv to be declared. * - do not use directly, use the ones with auth model. * - manages token locking * * @param userfun * The userfunction to call, ie the internal API. * @param ... * The arguments to the internal API call from cryptoki. * @return * The internal API's result as rv. */ #define __TOKEN_WITH_LOCK_BY_SESSION(authfn, userfunc, session, ...) \ do { \ _TRACE_CALL; \ CK_RV rv = CKR_GENERAL_ERROR; \ \ _CHECK_INIT(out); \ \ token *t = NULL; \ session_ctx *ctx = NULL; \ rv = session_lookup(session, &t, &ctx); \ if (rv != CKR_OK) { \ goto out; \ } \ \ rv = authfn(ctx); \ if (rv != CKR_OK) { \ goto unlock; \ } \ rv = userfunc(ctx, ##__VA_ARGS__); \ unlock: \ token_unlock(t); \ out: \ _TRACE_RET(rv); \ return rv; \ } while (0) #define __TOKEN_WITH_LOCK_BY_SESSION_TOKEN(authfn, userfunc, session, ...) \ do { \ _TRACE_CALL; \ CK_RV rv = CKR_GENERAL_ERROR; \ \ _CHECK_INIT(out); \ \ token *t = NULL; \ session_ctx *ctx = NULL; \ rv = session_lookup(session, &t, &ctx); \ if (rv != CKR_OK) { \ goto out; \ } \ \ rv = authfn(ctx); \ if (rv != CKR_OK) { \ goto unlock; \ } \ rv = userfunc(t, ##__VA_ARGS__); \ unlock: \ token_unlock(t); \ out: \ _TRACE_RET(rv); \ return rv; \ } while (0) /* * Same as: __TOKEN_WITH_LOCK_BY_SESSION but hands the session_ctx to the internal routine. */ #define __TOKEN_WITH_LOCK_BY_SESSION_KEEP_CTX(authfn, userfunc, session, ...) \ do { \ \ _TRACE_CALL; \ CK_RV rv = CKR_GENERAL_ERROR; \ _CHECK_INIT(out); \ \ token *t = NULL; \ session_ctx *ctx = NULL; \ rv = session_lookup(session, &t, &ctx); \ if (rv != CKR_OK) { \ goto out; \ } \ \ rv = authfn(ctx); \ if (rv != CKR_OK) { \ goto unlock; \ } \ rv = userfunc(t, ctx, ##__VA_ARGS__); \ unlock: \ token_unlock(t); \ out: \ _TRACE_RET(rv); \ return rv; \ } while (0) /* * Below you'll find the auth routines that validate session * context. Because session context is required to be in a * certain state for things, these auth plugins check a vary * specific condition. Add more if you need different checks. */ static inline CK_RV auth_min_ro_pub(session_ctx *ctx) { UNUSED(ctx); return CKR_OK; } static inline CK_RV auth_min_ro_user(session_ctx *ctx) { CK_STATE state = session_ctx_state_get(ctx); switch(state) { case CKS_RO_USER_FUNCTIONS: /* falls-thru */ case CKS_RW_USER_FUNCTIONS: return CKR_OK; /* no default */ } /* If the token does not require a PIN, allow calling the function */ token *t = session_ctx_get_token(ctx); if (t && t->config.empty_user_pin) { LOGV("No user PIN is needed for token %u\n", t->id); return CKR_OK; } return CKR_USER_NOT_LOGGED_IN; } static inline CK_RV auth_min_rw_user(session_ctx *ctx) { CK_STATE state = session_ctx_state_get(ctx); switch(state) { case CKS_RO_USER_FUNCTIONS: return CKR_SESSION_READ_ONLY; case CKS_RW_USER_FUNCTIONS: return CKR_OK; /* no default */ } return CKR_USER_NOT_LOGGED_IN; } static inline CK_RV auth_any_logged_in(session_ctx *ctx) { CK_STATE state = session_ctx_state_get(ctx); switch(state) { case CKS_RO_USER_FUNCTIONS: case CKS_RW_USER_FUNCTIONS: case CKS_RW_SO_FUNCTIONS: return CKR_OK; /* no default */ } return CKR_USER_NOT_LOGGED_IN; } /* * C_SetPIN can only be called in the: * - “R/W Public Session†state * - “R/W SO Functions†state * - “R/W User Functions†state * * An attempt to call it from a session in any other state fails with * error CKR_SESSION_READ_ONLY. */ static inline CK_RV auth_set_pin_state(session_ctx *ctx) { CK_STATE state = session_ctx_state_get(ctx); switch(state) { case CKS_RW_PUBLIC_SESSION: case CKS_RW_SO_FUNCTIONS: case CKS_RW_USER_FUNCTIONS: return CKR_OK; /* no default */ } return CKR_SESSION_READ_ONLY; } static inline CK_RV auth_init_pin_state(session_ctx *ctx) { CK_STATE state = session_ctx_state_get(ctx); switch(state) { case CKS_RW_SO_FUNCTIONS: return CKR_OK; /* no default */ } return CKR_SESSION_READ_ONLY; } /* * The macros below are used to call into the cryptoki API and perform a myriad of checking using certain * auth models. Not using these is dangerous. */ /* * Does what __TOKEN_WITH_LOCK_BY_SESSION does, and checks that the session is at least RO Public Ie any session would work. */ #define TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION(auth_min_ro_pub, userfunc, session, ##__VA_ARGS__) /* * Does what __TOKEN_WITH_LOCK_BY_SESSION does, and checks that the session is at least RW Public. Ie no one logged in and R/W session. */ #define TOKEN_WITH_LOCK_BY_SESSION_PUB_RW(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION(auth_min_rw_pub, userfunc, session, ##__VA_ARGS__) /* * Does what __TOKEN_WITH_LOCK_BY_SESSION does, and checks that the session is at least RO User. Ie user logged in and R/O or R/W session. */ #define TOKEN_WITH_LOCK_BY_SESSION_USER_RO(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION(auth_min_ro_user, userfunc, session, ##__VA_ARGS__) /* * Does what __TOKEN_WITH_LOCK_BY_SESSION does, and checks that the session is at least RO User. Ie user logged in and R/W session. */ #define TOKEN_WITH_LOCK_BY_SESSION_USER_RW(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION(auth_min_rw_user, userfunc, session, ##__VA_ARGS__) /* * Does what __TOKEN_WITH_LOCK_BY_SESSION does, and checks that the session is at least RO User. Ie user or so logged in and R/O or R/W session. */ #define TOKEN_WITH_LOCK_BY_SESSION_LOGGED_IN(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION(auth_any_logged_in, userfunc, session, ##__VA_ARGS__) #define TOKEN_WITH_LOCK_BY_SESSION_SET_PIN_STATE(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION_TOKEN(auth_set_pin_state, userfunc, session, ##__VA_ARGS__) #define TOKEN_WITH_LOCK_BY_SESSION_INIT_PIN_STATE(userfunc, session, ...) __TOKEN_WITH_LOCK_BY_SESSION_TOKEN(auth_init_pin_state, userfunc, session, ##__VA_ARGS__) CK_RV C_Initialize (void *init_args) { TOKEN_CALL_NO_INIT(general_init, init_args); } CK_RV C_Finalize (void *pReserved) { TOKEN_CALL_INIT(general_finalize, pReserved); } CK_RV C_GetInfo (CK_INFO *info) { TOKEN_CALL_INIT(general_get_info, info); } CK_RV C_GetFunctionList (CK_FUNCTION_LIST **function_list) { TOKEN_CALL(general_get_func_list, function_list); } CK_RV C_GetSlotList (CK_BYTE token_present, CK_SLOT_ID *slot_list, CK_ULONG_PTR count) { TOKEN_CALL_INIT(slot_get_list, token_present, slot_list, count); } CK_RV C_GetSlotInfo (CK_SLOT_ID slotID, CK_SLOT_INFO *info) { TOKEN_CALL_INIT(slot_get_info, slotID, info); } CK_RV C_GetTokenInfo (CK_SLOT_ID slotID, CK_TOKEN_INFO *info) { TOKEN_WITH_LOCK_BY_SLOT(token_get_info, slotID, info); } CK_RV C_WaitForSlotEvent (CK_FLAGS flags, CK_SLOT_ID *slot, void *pReserved) { TOKEN_UNSUPPORTED; } CK_RV C_GetMechanismList (CK_SLOT_ID slotID, CK_MECHANISM_TYPE *mechanism_list, CK_ULONG_PTR count) { TOKEN_CALL_INIT(slot_mechanism_list_get, slotID, mechanism_list, count); } CK_RV C_GetMechanismInfo (CK_SLOT_ID slotID, CK_MECHANISM_TYPE type, CK_MECHANISM_INFO *info) { TOKEN_CALL_INIT(slot_mechanism_info_get, slotID, type, info); } CK_RV C_InitToken (CK_SLOT_ID slotID, CK_BYTE_PTR pin, CK_ULONG pin_len, CK_BYTE_PTR label) { TOKEN_WITH_LOCK_BY_SLOT(token_init, slotID, pin, pin_len, label); } CK_RV C_InitPIN (CK_SESSION_HANDLE session, CK_UTF8CHAR_PTR pin, CK_ULONG pin_len) { TOKEN_WITH_LOCK_BY_SESSION_INIT_PIN_STATE(token_initpin, session, pin, pin_len); } CK_RV C_SetPIN (CK_SESSION_HANDLE session, CK_UTF8CHAR_PTR old_pin, CK_ULONG old_len, CK_UTF8CHAR_PTR new_pin, CK_ULONG new_len) { TOKEN_WITH_LOCK_BY_SESSION_SET_PIN_STATE(token_setpin, session, old_pin, old_len, new_pin, new_len); } CK_RV C_OpenSession (CK_SLOT_ID slotID, CK_FLAGS flags, void *application, CK_NOTIFY notify, CK_SESSION_HANDLE *session) { TOKEN_CALL_INIT(session_open, slotID, flags, application, notify, session); } CK_RV C_CloseSession (CK_SESSION_HANDLE session) { TOKEN_CALL_INIT(session_close, session); } CK_RV C_CloseAllSessions (CK_SLOT_ID slotID) { TOKEN_CALL_INIT(session_closeall, slotID); } CK_RV C_GetSessionInfo (CK_SESSION_HANDLE session, CK_SESSION_INFO *info) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(session_ctx_get_info, session, info); } CK_RV C_GetOperationState (CK_SESSION_HANDLE session, CK_BYTE_PTR operation_state, CK_ULONG_PTR operation_state_len) { TOKEN_UNSUPPORTED; } CK_RV C_SetOperationState (CK_SESSION_HANDLE session, CK_BYTE_PTR operation_state, CK_ULONG operation_state_len, CK_OBJECT_HANDLE encryption_key, CK_OBJECT_HANDLE authentiation_key) { TOKEN_UNSUPPORTED; } CK_RV C_Login (CK_SESSION_HANDLE session, CK_USER_TYPE user_type, CK_BYTE_PTR pin, CK_ULONG pin_len) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(session_ctx_login, session, user_type, pin, pin_len); } CK_RV C_Logout (CK_SESSION_HANDLE session) { TOKEN_WITH_LOCK_BY_SESSION_LOGGED_IN(session_ctx_logout, session); } CK_RV C_CreateObject (CK_SESSION_HANDLE session, CK_ATTRIBUTE *templ, CK_ULONG count, CK_OBJECT_HANDLE *object) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(object_create, session, templ, count, object); } CK_RV C_CopyObject (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, CK_ATTRIBUTE *templ, CK_ULONG count, CK_OBJECT_HANDLE *new_object) { TOKEN_UNSUPPORTED; } CK_RV C_DestroyObject (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object) { TOKEN_WITH_LOCK_BY_SESSION_USER_RW(object_destroy, session, object); } CK_RV C_GetObjectSize (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, CK_ULONG_PTR size) { TOKEN_UNSUPPORTED; } CK_RV C_GetAttributeValue (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, CK_ATTRIBUTE_PTR templ, CK_ULONG count) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(object_get_attributes, session, object, templ, count); } CK_RV C_SetAttributeValue (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, CK_ATTRIBUTE_PTR templ, CK_ULONG count) { TOKEN_WITH_LOCK_BY_SESSION_USER_RW(object_set_attributes, session, object, templ, count); } CK_RV C_FindObjectsInit (CK_SESSION_HANDLE session, CK_ATTRIBUTE *templ, CK_ULONG count) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(object_find_init, session, templ, count); } CK_RV C_FindObjects (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE *object, CK_ULONG max_object_count, CK_ULONG_PTR object_count) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(object_find, session, object, max_object_count, object_count); } CK_RV C_FindObjectsFinal (CK_SESSION_HANDLE session) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(object_find_final, session); } CK_RV C_EncryptInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(encrypt_init, session, mechanism, key); } CK_RV C_Encrypt (CK_SESSION_HANDLE session, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR encrypted_data, CK_ULONG_PTR encrypted_data_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(encrypt_oneshot, session, data, data_len, encrypted_data, encrypted_data_len); } CK_RV C_EncryptUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(encrypt_update, session, part, part_len, encrypted_part, encrypted_part_len); } CK_RV C_EncryptFinal (CK_SESSION_HANDLE session, CK_BYTE_PTR last_encrypted_part, CK_ULONG_PTR last_encrypted_part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(encrypt_final, session, last_encrypted_part, last_encrypted_part_len); } CK_RV C_DecryptInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(decrypt_init, session, mechanism, key); } CK_RV C_Decrypt (CK_SESSION_HANDLE session, CK_BYTE_PTR encrypted_data, CK_ULONG encrypted_data_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(decrypt_oneshot, session, encrypted_data, encrypted_data_len, data, data_len); } CK_RV C_DecryptUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR encrypted_part, CK_ULONG encrypted_part_len, CK_BYTE_PTR part, CK_ULONG_PTR part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(decrypt_update, session, encrypted_part, encrypted_part_len, part, part_len); } CK_RV C_DecryptFinal (CK_SESSION_HANDLE session, CK_BYTE_PTR last_part, CK_ULONG_PTR last_part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(decrypt_final, session, last_part, last_part_len); } CK_RV C_DigestInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(digest_init, session, mechanism); } CK_RV C_Digest (CK_SESSION_HANDLE session, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR digest, CK_ULONG_PTR digest_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(digest_oneshot, session, data, data_len, digest, digest_len); } CK_RV C_DigestUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(digest_update, session, part, part_len); } CK_RV C_DigestKey (CK_SESSION_HANDLE session, CK_OBJECT_HANDLE key) { TOKEN_UNSUPPORTED; } CK_RV C_DigestFinal (CK_SESSION_HANDLE session, CK_BYTE_PTR digest, CK_ULONG_PTR digest_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(digest_final, session, digest, digest_len); } CK_RV C_SignInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(sign_init, session, mechanism, key); } CK_RV C_Sign (CK_SESSION_HANDLE session, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR signature, CK_ULONG_PTR signature_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(sign, session, data, data_len, signature, signature_len); } CK_RV C_SignUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(sign_update, session, part, part_len); } CK_RV C_SignFinal (CK_SESSION_HANDLE session, CK_BYTE_PTR signature, CK_ULONG_PTR signature_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(sign_final, session, signature, signature_len); } CK_RV C_SignRecoverInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_UNSUPPORTED; } CK_RV C_SignRecover (CK_SESSION_HANDLE session, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR signature, CK_ULONG_PTR signature_len) { TOKEN_UNSUPPORTED; } CK_RV C_VerifyInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify_init, session, mechanism, key); } CK_RV C_Verify (CK_SESSION_HANDLE session, CK_BYTE_PTR data, CK_ULONG data_len, CK_BYTE_PTR signature, CK_ULONG signature_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify, session, data, data_len, signature, signature_len); } CK_RV C_VerifyUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify_update, session, part, part_len); } CK_RV C_VerifyFinal (CK_SESSION_HANDLE session, CK_BYTE_PTR signature, CK_ULONG signature_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify_final, session, signature, signature_len); } CK_RV C_VerifyRecoverInit (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify_recover_init, session, mechanism, key); } CK_RV C_VerifyRecover (CK_SESSION_HANDLE session, CK_BYTE_PTR signature, CK_ULONG signature_len, CK_BYTE_PTR data, CK_ULONG_PTR data_len) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(verify_recover, session, signature, signature_len, data, data_len); } CK_RV C_DigestEncryptUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { TOKEN_UNSUPPORTED; } CK_RV C_DecryptDigestUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR encrypted_part, CK_ULONG encrypted_part_len, CK_BYTE_PTR part, CK_ULONG_PTR part_len) { TOKEN_UNSUPPORTED; } CK_RV C_SignEncryptUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR part, CK_ULONG part_len, CK_BYTE_PTR encrypted_part, CK_ULONG_PTR encrypted_part_len) { TOKEN_UNSUPPORTED; } CK_RV C_DecryptVerifyUpdate (CK_SESSION_HANDLE session, CK_BYTE_PTR encrypted_part, CK_ULONG encrypted_part_len, CK_BYTE_PTR part, CK_ULONG_PTR part_len) { TOKEN_UNSUPPORTED; } CK_RV C_GenerateKey (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_ATTRIBUTE *templ, CK_ULONG count, CK_OBJECT_HANDLE *key) { TOKEN_UNSUPPORTED; } CK_RV C_GenerateKeyPair (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_ATTRIBUTE *public_key_template, CK_ULONG public_key_attribute_count, CK_ATTRIBUTE *private_key_template, CK_ULONG private_key_attribute_count, CK_OBJECT_HANDLE *public_key, CK_OBJECT_HANDLE *private_key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RW(key_gen, session, mechanism, public_key_template, public_key_attribute_count, private_key_template, private_key_attribute_count, public_key, private_key); } CK_RV C_WrapKey (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE wrapping_key, CK_OBJECT_HANDLE key, CK_BYTE_PTR wrapped_key, CK_ULONG_PTR wrapped_key_len) { TOKEN_UNSUPPORTED; } CK_RV C_UnwrapKey (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE unwrapping_key, CK_BYTE_PTR wrapped_key, CK_ULONG wrapped_key_len, CK_ATTRIBUTE *templ, CK_ULONG attribute_count, CK_OBJECT_HANDLE *key) { TOKEN_UNSUPPORTED; } CK_RV C_DeriveKey (CK_SESSION_HANDLE session, CK_MECHANISM *mechanism, CK_OBJECT_HANDLE base_key, CK_ATTRIBUTE *templ, CK_ULONG attribute_count, CK_OBJECT_HANDLE *key) { TOKEN_WITH_LOCK_BY_SESSION_USER_RO(derive, session, mechanism, base_key, templ, attribute_count, key); } CK_RV C_SeedRandom (CK_SESSION_HANDLE session, CK_BYTE_PTR seed, CK_ULONG seed_len) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(seed_random, session, seed, seed_len); } CK_RV C_GenerateRandom (CK_SESSION_HANDLE session, CK_BYTE_PTR random_data, CK_ULONG random_len) { TOKEN_WITH_LOCK_BY_SESSION_PUB_RO(random_get, session, random_data, random_len); } CK_RV C_GetFunctionStatus (CK_SESSION_HANDLE session) { TOKEN_UNSUPPORTED; } CK_RV C_CancelFunction (CK_SESSION_HANDLE session) { TOKEN_UNSUPPORTED; } // TODO REMOVE ME #pragma GCC diagnostic pop tpm2-pkcs11-1.9.1/src/pkcs11.h0000644000175100017510000015656314535673717011273 /* pkcs11.h Copyright 2006, 2007 g10 Code GmbH Copyright 2006 Andreas Jellinghaus Copyright 2017 Red Hat, Inc. This file is free software; as a special exception the author gives unlimited permission to copy and/or distribute it, with or without modifications, as long as this notice is preserved. This file is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY, to the extent permitted by law; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. */ /* Please submit any changes back to the p11-kit project at https://github.com/p11-glue/p11-kit/, so that they can be picked up by other projects from there as well. */ /* This file is a modified implementation of the PKCS #11 standard by OASIS group. It is mostly a drop-in replacement, with the following change: This header file does not require any macro definitions by the user (like CK_DEFINE_FUNCTION etc). In fact, it defines those macros for you (if useful, some are missing, let me know if you need more). There is an additional API available that does comply better to the GNU coding standard. It can be switched on by defining CRYPTOKI_GNU before including this header file. For this, the following changes are made to the specification: All structure types are changed to a "struct ck_foo" where CK_FOO is the type name in PKCS #11. All non-structure types are changed to ck_foo_t where CK_FOO is the lowercase version of the type name in PKCS #11. The basic types (CK_ULONG et al.) are removed without substitute. All members of structures are modified in the following way: Type indication prefixes are removed, and underscore characters are inserted before words. Then the result is lowercased. Note that function names are still in the original case, as they need for ABI compatibility. CK_FALSE, CK_TRUE and NULL_PTR are removed without substitute. Use . If CRYPTOKI_COMPAT is defined before including this header file, then none of the API changes above take place, and the API is the one defined by the PKCS #11 standard. */ #ifndef PKCS11_H #define PKCS11_H 1 #if defined(__cplusplus) extern "C" { #endif /* The version of cryptoki we implement. The revision is changed with each modification of this file. */ #define CRYPTOKI_VERSION_MAJOR 2 #define CRYPTOKI_VERSION_MINOR 40 #define P11_KIT_CRYPTOKI_VERSION_REVISION 0 /* Compatibility interface is default, unless CRYPTOKI_GNU is given. */ #ifndef CRYPTOKI_GNU #ifndef CRYPTOKI_COMPAT #define CRYPTOKI_COMPAT 1 #endif #endif /* System dependencies. */ #if defined(_WIN32) || defined(CRYPTOKI_FORCE_WIN32) /* There is a matching pop below. */ #pragma pack(push, cryptoki, 1) #ifdef CRYPTOKI_EXPORTS #define CK_SPEC __declspec(dllexport) #else #define CK_SPEC __declspec(dllimport) #endif #else #define CK_SPEC #endif #ifdef CRYPTOKI_COMPAT /* If we are in compatibility mode, switch all exposed names to the PKCS #11 variant. There are corresponding #undefs below. */ #define ck_flags_t CK_FLAGS #define ck_version _CK_VERSION #define ck_info _CK_INFO #define cryptoki_version cryptokiVersion #define manufacturer_id manufacturerID #define library_description libraryDescription #define library_version libraryVersion #define ck_notification_t CK_NOTIFICATION #define ck_slot_id_t CK_SLOT_ID #define ck_slot_info _CK_SLOT_INFO #define slot_description slotDescription #define hardware_version hardwareVersion #define firmware_version firmwareVersion #define ck_token_info _CK_TOKEN_INFO #define serial_number serialNumber #define max_session_count ulMaxSessionCount #define session_count ulSessionCount #define max_rw_session_count ulMaxRwSessionCount #define rw_session_count ulRwSessionCount #define max_pin_len ulMaxPinLen #define min_pin_len ulMinPinLen #define total_public_memory ulTotalPublicMemory #define free_public_memory ulFreePublicMemory #define total_private_memory ulTotalPrivateMemory #define free_private_memory ulFreePrivateMemory #define utc_time utcTime #define ck_session_handle_t CK_SESSION_HANDLE #define ck_user_type_t CK_USER_TYPE #define ck_state_t CK_STATE #define ck_session_info _CK_SESSION_INFO #define slot_id slotID #define device_error ulDeviceError #define ck_object_handle_t CK_OBJECT_HANDLE #define ck_object_class_t CK_OBJECT_CLASS #define ck_hw_feature_type_t CK_HW_FEATURE_TYPE #define ck_key_type_t CK_KEY_TYPE #define ck_certificate_type_t CK_CERTIFICATE_TYPE #define ck_attribute_type_t CK_ATTRIBUTE_TYPE #define ck_attribute _CK_ATTRIBUTE #define value pValue #define value_len ulValueLen #define count ulCount #define ck_date _CK_DATE #define ck_mechanism_type_t CK_MECHANISM_TYPE #define ck_mechanism _CK_MECHANISM #define parameter pParameter #define parameter_len ulParameterLen #define params pParams #define ck_mechanism_info _CK_MECHANISM_INFO #define min_key_size ulMinKeySize #define max_key_size ulMaxKeySize #define ck_param_type CK_PARAM_TYPE #define ck_otp_param CK_OTP_PARAM #define ck_otp_params CK_OTP_PARAMS #define ck_otp_signature_info CK_OTP_SIGNATURE_INFO #define ck_rv_t CK_RV #define ck_notify_t CK_NOTIFY #define ck_function_list _CK_FUNCTION_LIST #define ck_createmutex_t CK_CREATEMUTEX #define ck_destroymutex_t CK_DESTROYMUTEX #define ck_lockmutex_t CK_LOCKMUTEX #define ck_unlockmutex_t CK_UNLOCKMUTEX #define ck_c_initialize_args _CK_C_INITIALIZE_ARGS #define create_mutex CreateMutex #define destroy_mutex DestroyMutex #define lock_mutex LockMutex #define unlock_mutex UnlockMutex #define reserved pReserved #define ck_rsa_pkcs_mgf_type_t CK_RSA_PKCS_MGF_TYPE #define ck_rsa_pkcs_oaep_source_type_t CK_RSA_PKCS_OAEP_SOURCE_TYPE #define hash_alg hashAlg #define s_len sLen #define source_data pSourceData #define source_data_len ulSourceDataLen #define counter_bits ulCounterBits #define iv_ptr pIv #define iv_len ulIvLen #define iv_bits ulIvBits #define aad_ptr pAAD #define aad_len ulAADLen #define tag_bits ulTagBits #define shared_data_len ulSharedDataLen #define shared_data pSharedData #define public_data_len ulPublicDataLen #define public_data pPublicData #define string_data pData #define string_data_len ulLen #define data_params pData #endif /* CRYPTOKI_COMPAT */ typedef unsigned long ck_flags_t; struct ck_version { unsigned char major; unsigned char minor; }; struct ck_info { struct ck_version cryptoki_version; unsigned char manufacturer_id[32]; ck_flags_t flags; unsigned char library_description[32]; struct ck_version library_version; }; typedef unsigned long ck_notification_t; #define CKN_SURRENDER (0UL) typedef unsigned long ck_slot_id_t; struct ck_slot_info { unsigned char slot_description[64]; unsigned char manufacturer_id[32]; ck_flags_t flags; struct ck_version hardware_version; struct ck_version firmware_version; }; #define CKF_TOKEN_PRESENT (1UL << 0) #define CKF_REMOVABLE_DEVICE (1UL << 1) #define CKF_HW_SLOT (1UL << 2) #define CKF_ARRAY_ATTRIBUTE (1UL << 30) struct ck_token_info { unsigned char label[32]; unsigned char manufacturer_id[32]; unsigned char model[16]; unsigned char serial_number[16]; ck_flags_t flags; unsigned long max_session_count; unsigned long session_count; unsigned long max_rw_session_count; unsigned long rw_session_count; unsigned long max_pin_len; unsigned long min_pin_len; unsigned long total_public_memory; unsigned long free_public_memory; unsigned long total_private_memory; unsigned long free_private_memory; struct ck_version hardware_version; struct ck_version firmware_version; unsigned char utc_time[16]; }; #define CKF_RNG (1UL << 0) #define CKF_WRITE_PROTECTED (1UL << 1) #define CKF_LOGIN_REQUIRED (1UL << 2) #define CKF_USER_PIN_INITIALIZED (1UL << 3) #define CKF_RESTORE_KEY_NOT_NEEDED (1UL << 5) #define CKF_CLOCK_ON_TOKEN (1UL << 6) #define CKF_PROTECTED_AUTHENTICATION_PATH (1UL << 8) #define CKF_DUAL_CRYPTO_OPERATIONS (1UL << 9) #define CKF_TOKEN_INITIALIZED (1UL << 10) #define CKF_SECONDARY_AUTHENTICATION (1UL << 11) #define CKF_USER_PIN_COUNT_LOW (1UL << 16) #define CKF_USER_PIN_FINAL_TRY (1UL << 17) #define CKF_USER_PIN_LOCKED (1UL << 18) #define CKF_USER_PIN_TO_BE_CHANGED (1UL << 19) #define CKF_SO_PIN_COUNT_LOW (1UL << 20) #define CKF_SO_PIN_FINAL_TRY (1UL << 21) #define CKF_SO_PIN_LOCKED (1UL << 22) #define CKF_SO_PIN_TO_BE_CHANGED (1UL << 23) #define CK_UNAVAILABLE_INFORMATION ((unsigned long)-1L) #define CK_EFFECTIVELY_INFINITE (0UL) typedef unsigned long ck_session_handle_t; #define CK_INVALID_HANDLE (0UL) typedef unsigned long ck_user_type_t; #define CKU_SO (0UL) #define CKU_USER (1UL) #define CKU_CONTEXT_SPECIFIC (2UL) typedef unsigned long ck_state_t; #define CKS_RO_PUBLIC_SESSION (0UL) #define CKS_RO_USER_FUNCTIONS (1UL) #define CKS_RW_PUBLIC_SESSION (2UL) #define CKS_RW_USER_FUNCTIONS (3UL) #define CKS_RW_SO_FUNCTIONS (4UL) struct ck_session_info { ck_slot_id_t slot_id; ck_state_t state; ck_flags_t flags; unsigned long device_error; }; #define CKF_RW_SESSION (1UL << 1) #define CKF_SERIAL_SESSION (1UL << 2) typedef unsigned long ck_object_handle_t; typedef unsigned long ck_object_class_t; #define CKO_DATA (0UL) #define CKO_CERTIFICATE (1UL) #define CKO_PUBLIC_KEY (2UL) #define CKO_PRIVATE_KEY (3UL) #define CKO_SECRET_KEY (4UL) #define CKO_HW_FEATURE (5UL) #define CKO_DOMAIN_PARAMETERS (6UL) #define CKO_MECHANISM (7UL) #define CKO_OTP_KEY (8UL) #define CKO_VENDOR_DEFINED ((unsigned long) (1UL << 31)) typedef unsigned long ck_hw_feature_type_t; #define CKH_MONOTONIC_COUNTER (1UL) #define CKH_CLOCK (2UL) #define CKH_USER_INTERFACE (3UL) #define CKH_VENDOR_DEFINED ((unsigned long) (1UL << 31)) typedef unsigned long ck_key_type_t; #define CKK_RSA (0UL) #define CKK_DSA (1UL) #define CKK_DH (2UL) #define CKK_ECDSA (3UL) #define CKK_EC (3UL) #define CKK_X9_42_DH (4UL) #define CKK_KEA (5UL) #define CKK_GENERIC_SECRET (0x10UL) #define CKK_RC2 (0x11UL) #define CKK_RC4 (0x12UL) #define CKK_DES (0x13UL) #define CKK_DES2 (0x14UL) #define CKK_DES3 (0x15UL) #define CKK_CAST (0x16UL) #define CKK_CAST3 (0x17UL) #define CKK_CAST128 (0x18UL) #define CKK_RC5 (0x19UL) #define CKK_IDEA (0x1aUL) #define CKK_SKIPJACK (0x1bUL) #define CKK_BATON (0x1cUL) #define CKK_JUNIPER (0x1dUL) #define CKK_CDMF (0x1eUL) #define CKK_AES (0x1fUL) #define CKK_BLOWFISH (0x20UL) #define CKK_TWOFISH (0x21UL) #define CKK_SECURID (0x22UL) #define CKK_HOTP (0x23UL) #define CKK_ACTI (0x24UL) #define CKK_CAMELLIA (0x25UL) #define CKK_ARIA (0x26UL) #define CKK_MD5_HMAC (0x27UL) #define CKK_SHA_1_HMAC (0x28UL) #define CKK_RIPEMD128_HMAC (0x29UL) #define CKK_RIPEMD160_HMAC (0x2aUL) #define CKK_SHA256_HMAC (0x2bUL) #define CKK_SHA384_HMAC (0x2cUL) #define CKK_SHA512_HMAC (0x2dUL) #define CKK_SHA224_HMAC (0x2eUL) #define CKK_SEED (0x2fUL) #define CKK_GOSTR3410 (0x30UL) #define CKK_GOSTR3411 (0x31UL) #define CKK_GOST28147 (0x32UL) #define CKK_EC_EDWARDS (0x40UL) #define CKK_VENDOR_DEFINED ((unsigned long) (1UL << 31)) typedef unsigned long ck_certificate_type_t; #define CKC_X_509 (0UL) #define CKC_X_509_ATTR_CERT (1UL) #define CKC_WTLS (2UL) #define CKC_VENDOR_DEFINED ((unsigned long) (1UL << 31)) #define CKC_OPENPGP (CKC_VENDOR_DEFINED|0x504750UL) typedef unsigned long ck_attribute_type_t; #define CKA_CLASS (0UL) #define CKA_TOKEN (1UL) #define CKA_PRIVATE (2UL) #define CKA_LABEL (3UL) #define CKA_APPLICATION (0x10UL) #define CKA_VALUE (0x11UL) #define CKA_OBJECT_ID (0x12UL) #define CKA_CERTIFICATE_TYPE (0x80UL) #define CKA_ISSUER (0x81UL) #define CKA_SERIAL_NUMBER (0x82UL) #define CKA_AC_ISSUER (0x83UL) #define CKA_OWNER (0x84UL) #define CKA_ATTR_TYPES (0x85UL) #define CKA_TRUSTED (0x86UL) #define CKA_CERTIFICATE_CATEGORY (0x87UL) #define CKA_JAVA_MIDP_SECURITY_DOMAIN (0x88UL) #define CKA_URL (0x89UL) #define CKA_HASH_OF_SUBJECT_PUBLIC_KEY (0x8aUL) #define CKA_HASH_OF_ISSUER_PUBLIC_KEY (0x8bUL) #define CKA_NAME_HASH_ALGORITHM (0x8cUL) #define CKA_CHECK_VALUE (0x90UL) #define CKA_KEY_TYPE (0x100UL) #define CKA_SUBJECT (0x101UL) #define CKA_ID (0x102UL) #define CKA_SENSITIVE (0x103UL) #define CKA_ENCRYPT (0x104UL) #define CKA_DECRYPT (0x105UL) #define CKA_WRAP (0x106UL) #define CKA_UNWRAP (0x107UL) #define CKA_SIGN (0x108UL) #define CKA_SIGN_RECOVER (0x109UL) #define CKA_VERIFY (0x10aUL) #define CKA_VERIFY_RECOVER (0x10bUL) #define CKA_DERIVE (0x10cUL) #define CKA_START_DATE (0x110UL) #define CKA_END_DATE (0x111UL) #define CKA_MODULUS (0x120UL) #define CKA_MODULUS_BITS (0x121UL) #define CKA_PUBLIC_EXPONENT (0x122UL) #define CKA_PRIVATE_EXPONENT (0x123UL) #define CKA_PRIME_1 (0x124UL) #define CKA_PRIME_2 (0x125UL) #define CKA_EXPONENT_1 (0x126UL) #define CKA_EXPONENT_2 (0x127UL) #define CKA_COEFFICIENT (0x128UL) #define CKA_PUBLIC_KEY_INFO (0x129UL) #define CKA_PRIME (0x130UL) #define CKA_SUBPRIME (0x131UL) #define CKA_BASE (0x132UL) #define CKA_PRIME_BITS (0x133UL) #define CKA_SUB_PRIME_BITS (0x134UL) #define CKA_VALUE_BITS (0x160UL) #define CKA_VALUE_LEN (0x161UL) #define CKA_EXTRACTABLE (0x162UL) #define CKA_LOCAL (0x163UL) #define CKA_NEVER_EXTRACTABLE (0x164UL) #define CKA_ALWAYS_SENSITIVE (0x165UL) #define CKA_KEY_GEN_MECHANISM (0x166UL) #define CKA_MODIFIABLE (0x170UL) #define CKA_COPYABLE (0x171UL) #define CKA_DESTROYABLE (0x172UL) #define CKA_ECDSA_PARAMS (0x180UL) #define CKA_EC_PARAMS (0x180UL) #define CKA_EC_POINT (0x181UL) #define CKA_SECONDARY_AUTH (0x200UL) #define CKA_AUTH_PIN_FLAGS (0x201UL) #define CKA_ALWAYS_AUTHENTICATE (0x202UL) #define CKA_WRAP_WITH_TRUSTED (0x210UL) #define CKA_OTP_FORMAT (0x220UL) #define CKA_OTP_LENGTH (0x221UL) #define CKA_OTP_TIME_INTERVAL (0x222UL) #define CKA_OTP_USER_FRIENDLY_MODE (0x223UL) #define CKA_OTP_CHALLENGE_REQUIREMENT (0x224UL) #define CKA_OTP_TIME_REQUIREMENT (0x225UL) #define CKA_OTP_COUNTER_REQUIREMENT (0x226UL) #define CKA_OTP_PIN_REQUIREMENT (0x227UL) #define CKA_OTP_USER_IDENTIFIER (0x22AUL) #define CKA_OTP_SERVICE_IDENTIFIER (0x22BUL) #define CKA_OTP_SERVICE_LOGO (0x22CUL) #define CKA_OTP_SERVICE_LOGO_TYPE (0x22DUL) #define CKA_OTP_COUNTER (0x22EUL) #define CKA_OTP_TIME (0x22FUL) #define CKA_GOSTR3410_PARAMS (0x250UL) #define CKA_GOSTR3411_PARAMS (0x251UL) #define CKA_GOST28147_PARAMS (0x252UL) #define CKA_HW_FEATURE_TYPE (0x300UL) #define CKA_RESET_ON_INIT (0x301UL) #define CKA_HAS_RESET (0x302UL) #define CKA_PIXEL_X (0x400UL) #define CKA_PIXEL_Y (0x401UL) #define CKA_RESOLUTION (0x402UL) #define CKA_CHAR_ROWS (0x403UL) #define CKA_CHAR_COLUMNS (0x404UL) #define CKA_COLOR (0x405UL) #define CKA_BITS_PER_PIXEL (0x406UL) #define CKA_CHAR_SETS (0x480UL) #define CKA_ENCODING_METHODS (0x481UL) #define CKA_MIME_TYPES (0x482UL) #define CKA_MECHANISM_TYPE (0x500UL) #define CKA_REQUIRED_CMS_ATTRIBUTES (0x501UL) #define CKA_DEFAULT_CMS_ATTRIBUTES (0x502UL) #define CKA_SUPPORTED_CMS_ATTRIBUTES (0x503UL) #define CKA_WRAP_TEMPLATE (CKF_ARRAY_ATTRIBUTE | 0x211UL) #define CKA_UNWRAP_TEMPLATE (CKF_ARRAY_ATTRIBUTE | 0x212UL) #define CKA_DERIVE_TEMPLATE (CKF_ARRAY_ATTRIBUTE | 0x213UL) #define CKA_ALLOWED_MECHANISMS (CKF_ARRAY_ATTRIBUTE | 0x600UL) #define CKA_VENDOR_DEFINED ((unsigned long) (1UL << 31)) struct ck_attribute { ck_attribute_type_t type; void *value; unsigned long value_len; }; struct ck_date { unsigned char year[4]; unsigned char month[2]; unsigned char day[2]; }; typedef unsigned long ck_mechanism_type_t; #define CKM_RSA_PKCS_KEY_PAIR_GEN (0UL) #define CKM_RSA_PKCS (1UL) #define CKM_RSA_9796 (2UL) #define CKM_RSA_X_509 (3UL) #define CKM_MD2_RSA_PKCS (4UL) #define CKM_MD5_RSA_PKCS (5UL) #define CKM_SHA1_RSA_PKCS (6UL) #define CKM_RIPEMD128_RSA_PKCS (7UL) #define CKM_RIPEMD160_RSA_PKCS (8UL) #define CKM_RSA_PKCS_OAEP (9UL) #define CKM_RSA_X9_31_KEY_PAIR_GEN (0xaUL) #define CKM_RSA_X9_31 (0xbUL) #define CKM_SHA1_RSA_X9_31 (0xcUL) #define CKM_RSA_PKCS_PSS (0xdUL) #define CKM_SHA1_RSA_PKCS_PSS (0xeUL) #define CKM_DSA_KEY_PAIR_GEN (0x10UL) #define CKM_DSA (0x11UL) #define CKM_DSA_SHA1 (0x12UL) #define CKM_DSA_SHA224 (0x13UL) #define CKM_DSA_SHA256 (0x14UL) #define CKM_DSA_SHA384 (0x15UL) #define CKM_DSA_SHA512 (0x16UL) #define CKM_DH_PKCS_KEY_PAIR_GEN (0x20UL) #define CKM_DH_PKCS_DERIVE (0x21UL) #define CKM_X9_42_DH_KEY_PAIR_GEN (0x30UL) #define CKM_X9_42_DH_DERIVE (0x31UL) #define CKM_X9_42_DH_HYBRID_DERIVE (0x32UL) #define CKM_X9_42_MQV_DERIVE (0x33UL) #define CKM_SHA256_RSA_PKCS (0x40UL) #define CKM_SHA384_RSA_PKCS (0x41UL) #define CKM_SHA512_RSA_PKCS (0x42UL) #define CKM_SHA256_RSA_PKCS_PSS (0x43UL) #define CKM_SHA384_RSA_PKCS_PSS (0x44UL) #define CKM_SHA512_RSA_PKCS_PSS (0x45UL) #define CKM_SHA512_224 (0x48UL) #define CKM_SHA512_224_HMAC (0x49UL) #define CKM_SHA512_224_HMAC_GENERAL (0x4aUL) #define CKM_SHA512_224_KEY_DERIVATION (0x4bUL) #define CKM_SHA512_256 (0x4cUL) #define CKM_SHA512_256_HMAC (0x4dUL) #define CKM_SHA512_256_HMAC_GENERAL (0x4eUL) #define CKM_SHA512_256_KEY_DERIVATION (0x4fUL) #define CKM_SHA512_T (0x50UL) #define CKM_SHA512_T_HMAC (0x51UL) #define CKM_SHA512_T_HMAC_GENERAL (0x52UL) #define CKM_SHA512_T_KEY_DERIVATION (0x53UL) #define CKM_RC2_KEY_GEN (0x100UL) #define CKM_RC2_ECB (0x101UL) #define CKM_RC2_CBC (0x102UL) #define CKM_RC2_MAC (0x103UL) #define CKM_RC2_MAC_GENERAL (0x104UL) #define CKM_RC2_CBC_PAD (0x105UL) #define CKM_RC4_KEY_GEN (0x110UL) #define CKM_RC4 (0x111UL) #define CKM_DES_KEY_GEN (0x120UL) #define CKM_DES_ECB (0x121UL) #define CKM_DES_CBC (0x122UL) #define CKM_DES_MAC (0x123UL) #define CKM_DES_MAC_GENERAL (0x124UL) #define CKM_DES_CBC_PAD (0x125UL) #define CKM_DES2_KEY_GEN (0x130UL) #define CKM_DES3_KEY_GEN (0x131UL) #define CKM_DES3_ECB (0x132UL) #define CKM_DES3_CBC (0x133UL) #define CKM_DES3_MAC (0x134UL) #define CKM_DES3_MAC_GENERAL (0x135UL) #define CKM_DES3_CBC_PAD (0x136UL) #define CKM_DES3_CMAC_GENERAL (0x137UL) #define CKM_DES3_CMAC (0x138UL) #define CKM_CDMF_KEY_GEN (0x140UL) #define CKM_CDMF_ECB (0x141UL) #define CKM_CDMF_CBC (0x142UL) #define CKM_CDMF_MAC (0x143UL) #define CKM_CDMF_MAC_GENERAL (0x144UL) #define CKM_CDMF_CBC_PAD (0x145UL) #define CKM_DES_OFB64 (0x150UL) #define CKM_DES_OFB8 (0x151UL) #define CKM_DES_CFB64 (0x152UL) #define CKM_DES_CFB8 (0x153UL) #define CKM_MD2 (0x200UL) #define CKM_MD2_HMAC (0x201UL) #define CKM_MD2_HMAC_GENERAL (0x202UL) #define CKM_MD5 (0x210UL) #define CKM_MD5_HMAC (0x211UL) #define CKM_MD5_HMAC_GENERAL (0x212UL) #define CKM_SHA_1 (0x220UL) #define CKM_SHA_1_HMAC (0x221UL) #define CKM_SHA_1_HMAC_GENERAL (0x222UL) #define CKM_RIPEMD128 (0x230UL) #define CKM_RIPEMD128_HMAC (0x231UL) #define CKM_RIPEMD128_HMAC_GENERAL (0x232UL) #define CKM_RIPEMD160 (0x240UL) #define CKM_RIPEMD160_HMAC (0x241UL) #define CKM_RIPEMD160_HMAC_GENERAL (0x242UL) #define CKM_SHA256 (0x250UL) #define CKM_SHA256_HMAC (0x251UL) #define CKM_SHA256_HMAC_GENERAL (0x252UL) #define CKM_SHA384 (0x260UL) #define CKM_SHA384_HMAC (0x261UL) #define CKM_SHA384_HMAC_GENERAL (0x262UL) #define CKM_SHA512 (0x270UL) #define CKM_SHA512_HMAC (0x271UL) #define CKM_SHA512_HMAC_GENERAL (0x272UL) #define CKM_SECURID_KEY_GEN (0x280UL) #define CKM_SECURID (0x282UL) #define CKM_HOTP_KEY_GEN (0x290UL) #define CKM_HOTP (0x291UL) #define CKM_ACTI (0x2a0UL) #define CKM_ACTI_KEY_GEN (0x2a1UL) #define CKM_CAST_KEY_GEN (0x300UL) #define CKM_CAST_ECB (0x301UL) #define CKM_CAST_CBC (0x302UL) #define CKM_CAST_MAC (0x303UL) #define CKM_CAST_MAC_GENERAL (0x304UL) #define CKM_CAST_CBC_PAD (0x305UL) #define CKM_CAST3_KEY_GEN (0x310UL) #define CKM_CAST3_ECB (0x311UL) #define CKM_CAST3_CBC (0x312UL) #define CKM_CAST3_MAC (0x313UL) #define CKM_CAST3_MAC_GENERAL (0x314UL) #define CKM_CAST3_CBC_PAD (0x315UL) #define CKM_CAST5_KEY_GEN (0x320UL) #define CKM_CAST128_KEY_GEN (0x320UL) #define CKM_CAST5_ECB (0x321UL) #define CKM_CAST128_ECB (0x321UL) #define CKM_CAST5_CBC (0x322UL) #define CKM_CAST128_CBC (0x322UL) #define CKM_CAST5_MAC (0x323UL) #define CKM_CAST128_MAC (0x323UL) #define CKM_CAST5_MAC_GENERAL (0x324UL) #define CKM_CAST128_MAC_GENERAL (0x324UL) #define CKM_CAST5_CBC_PAD (0x325UL) #define CKM_CAST128_CBC_PAD (0x325UL) #define CKM_RC5_KEY_GEN (0x330UL) #define CKM_RC5_ECB (0x331UL) #define CKM_RC5_CBC (0x332UL) #define CKM_RC5_MAC (0x333UL) #define CKM_RC5_MAC_GENERAL (0x334UL) #define CKM_RC5_CBC_PAD (0x335UL) #define CKM_IDEA_KEY_GEN (0x340UL) #define CKM_IDEA_ECB (0x341UL) #define CKM_IDEA_CBC (0x342UL) #define CKM_IDEA_MAC (0x343UL) #define CKM_IDEA_MAC_GENERAL (0x344UL) #define CKM_IDEA_CBC_PAD (0x345UL) #define CKM_GENERIC_SECRET_KEY_GEN (0x350UL) #define CKM_CONCATENATE_BASE_AND_KEY (0x360UL) #define CKM_CONCATENATE_BASE_AND_DATA (0x362UL) #define CKM_CONCATENATE_DATA_AND_BASE (0x363UL) #define CKM_XOR_BASE_AND_DATA (0x364UL) #define CKM_EXTRACT_KEY_FROM_KEY (0x365UL) #define CKM_SSL3_PRE_MASTER_KEY_GEN (0x370UL) #define CKM_SSL3_MASTER_KEY_DERIVE (0x371UL) #define CKM_SSL3_KEY_AND_MAC_DERIVE (0x372UL) #define CKM_SSL3_MASTER_KEY_DERIVE_DH (0x373UL) #define CKM_TLS_PRE_MASTER_KEY_GEN (0x374UL) #define CKM_TLS_MASTER_KEY_DERIVE (0x375UL) #define CKM_TLS_KEY_AND_MAC_DERIVE (0x376UL) #define CKM_TLS_MASTER_KEY_DERIVE_DH (0x377UL) #define CKM_TLS_PRF (0x378UL) #define CKM_SSL3_MD5_MAC (0x380UL) #define CKM_SSL3_SHA1_MAC (0x381UL) #define CKM_MD5_KEY_DERIVATION (0x390UL) #define CKM_MD2_KEY_DERIVATION (0x391UL) #define CKM_SHA1_KEY_DERIVATION (0x392UL) #define CKM_SHA256_KEY_DERIVATION (0x393UL) #define CKM_SHA384_KEY_DERIVATION (0x394UL) #define CKM_SHA512_KEY_DERIVATION (0x395UL) #define CKM_PBE_MD2_DES_CBC (0x3a0UL) #define CKM_PBE_MD5_DES_CBC (0x3a1UL) #define CKM_PBE_MD5_CAST_CBC (0x3a2UL) #define CKM_PBE_MD5_CAST3_CBC (0x3a3UL) #define CKM_PBE_MD5_CAST5_CBC (0x3a4UL) #define CKM_PBE_MD5_CAST128_CBC (0x3a4UL) #define CKM_PBE_SHA1_CAST5_CBC (0x3a5UL) #define CKM_PBE_SHA1_CAST128_CBC (0x3a5UL) #define CKM_PBE_SHA1_RC4_128 (0x3a6UL) #define CKM_PBE_SHA1_RC4_40 (0x3a7UL) #define CKM_PBE_SHA1_DES3_EDE_CBC (0x3a8UL) #define CKM_PBE_SHA1_DES2_EDE_CBC (0x3a9UL) #define CKM_PBE_SHA1_RC2_128_CBC (0x3aaUL) #define CKM_PBE_SHA1_RC2_40_CBC (0x3abUL) #define CKM_PKCS5_PBKD2 (0x3b0UL) #define CKM_PBA_SHA1_WITH_SHA1_HMAC (0x3c0UL) #define CKM_WTLS_PRE_MASTER_KEY_GEN (0x3d0UL) #define CKM_WTLS_MASTER_KEY_DERIVE (0x3d1UL) #define CKM_WTLS_MASTER_KEY_DERIVE_DH_ECC (0x3d2UL) #define CKM_WTLS_PRF (0x3d3UL) #define CKM_WTLS_SERVER_KEY_AND_MAC_DERIVE (0x3d4UL) #define CKM_WTLS_CLIENT_KEY_AND_MAC_DERIVE (0x3d5UL) #define CKM_TLS10_MAC_SERVER (0x3d6UL) #define CKM_TLS10_MAC_CLIENT (0x3d7UL) #define CKM_TLS12_MAC (0x3d8UL) #define CKM_TLS12_KDF (0x3d9UL) #define CKM_TLS12_MASTER_KEY_DERIVE (0x3e0UL) #define CKM_TLS12_KEY_AND_MAC_DERIVE (0x3e1UL) #define CKM_TLS12_MASTER_KEY_DERIVE_DH (0x3e2UL) #define CKM_TLS12_KEY_SAFE_DERIVE (0x3e3UL) #define CKM_TLS_MAC (0x3e4UL) #define CKM_TLS_KDF (0x3e5UL) #define CKM_KEY_WRAP_LYNKS (0x400UL) #define CKM_KEY_WRAP_SET_OAEP (0x401UL) #define CKM_CMS_SIG (0x500UL) #define CKM_KIP_DERIVE (0x510UL) #define CKM_KIP_WRAP (0x511UL) #define CKM_KIP_MAC (0x512UL) #define CKM_ARIA_KEY_GEN (0x560UL) #define CKM_ARIA_ECB (0x561UL) #define CKM_ARIA_CBC (0x562UL) #define CKM_ARIA_MAC (0x563UL) #define CKM_ARIA_MAC_GENERAL (0x564UL) #define CKM_ARIA_CBC_PAD (0x565UL) #define CKM_ARIA_ECB_ENCRYPT_DATA (0x566UL) #define CKM_ARIA_CBC_ENCRYPT_DATA (0x567UL) #define CKM_SEED_KEY_GEN (0x650UL) #define CKM_SEED_ECB (0x651UL) #define CKM_SEED_CBC (0x652UL) #define CKM_SEED_MAC (0x653UL) #define CKM_SEED_MAC_GENERAL (0x654UL) #define CKM_SEED_CBC_PAD (0x655UL) #define CKM_SEED_ECB_ENCRYPT_DATA (0x656UL) #define CKM_SEED_CBC_ENCRYPT_DATA (0x657UL) #define CKM_SKIPJACK_KEY_GEN (0x1000UL) #define CKM_SKIPJACK_ECB64 (0x1001UL) #define CKM_SKIPJACK_CBC64 (0x1002UL) #define CKM_SKIPJACK_OFB64 (0x1003UL) #define CKM_SKIPJACK_CFB64 (0x1004UL) #define CKM_SKIPJACK_CFB32 (0x1005UL) #define CKM_SKIPJACK_CFB16 (0x1006UL) #define CKM_SKIPJACK_CFB8 (0x1007UL) #define CKM_SKIPJACK_WRAP (0x1008UL) #define CKM_SKIPJACK_PRIVATE_WRAP (0x1009UL) #define CKM_SKIPJACK_RELAYX (0x100aUL) #define CKM_KEA_KEY_PAIR_GEN (0x1010UL) #define CKM_KEA_KEY_DERIVE (0x1011UL) #define CKM_FORTEZZA_TIMESTAMP (0x1020UL) #define CKM_BATON_KEY_GEN (0x1030UL) #define CKM_BATON_ECB128 (0x1031UL) #define CKM_BATON_ECB96 (0x1032UL) #define CKM_BATON_CBC128 (0x1033UL) #define CKM_BATON_COUNTER (0x1034UL) #define CKM_BATON_SHUFFLE (0x1035UL) #define CKM_BATON_WRAP (0x1036UL) #define CKM_ECDSA_KEY_PAIR_GEN (0x1040UL) #define CKM_EC_KEY_PAIR_GEN (0x1040UL) #define CKM_ECDSA (0x1041UL) #define CKM_ECDSA_SHA1 (0x1042UL) #define CKM_ECDSA_SHA224 (0x1043UL) #define CKM_ECDSA_SHA256 (0x1044UL) #define CKM_ECDSA_SHA384 (0x1045UL) #define CKM_ECDSA_SHA512 (0x1046UL) #define CKM_ECDH1_DERIVE (0x1050UL) #define CKM_ECDH1_COFACTOR_DERIVE (0x1051UL) #define CKM_ECMQV_DERIVE (0x1052UL) #define CKM_ECDH_AES_KEY_WRAP (0x1053UL) #define CKM_RSA_AES_KEY_WRAP (0x1054UL) #define CKM_JUNIPER_KEY_GEN (0x1060UL) #define CKM_JUNIPER_ECB128 (0x1061UL) #define CKM_JUNIPER_CBC128 (0x1062UL) #define CKM_JUNIPER_COUNTER (0x1063UL) #define CKM_JUNIPER_SHUFFLE (0x1064UL) #define CKM_JUNIPER_WRAP (0x1065UL) #define CKM_FASTHASH (0x1070UL) #define CKM_AES_KEY_GEN (0x1080UL) #define CKM_AES_ECB (0x1081UL) #define CKM_AES_CBC (0x1082UL) #define CKM_AES_MAC (0x1083UL) #define CKM_AES_MAC_GENERAL (0x1084UL) #define CKM_AES_CBC_PAD (0x1085UL) #define CKM_AES_CTR (0x1086UL) #define CKM_AES_GCM (0x1087UL) #define CKM_AES_CCM (0x1088UL) #define CKM_AES_CTS (0x1089UL) #define CKM_AES_CMAC (0x108aUL) #define CKM_AES_CMAC_GENERAL (0x108bUL) #define CKM_AES_XCBC_MAC (0x108cUL) #define CKM_AES_XCBC_MAC_96 (0x108dUL) #define CKM_AES_GMAC (0x108eUL) #define CKM_BLOWFISH_KEY_GEN (0x1090UL) #define CKM_BLOWFISH_CBC (0x1091UL) #define CKM_TWOFISH_KEY_GEN (0x1092UL) #define CKM_TWOFISH_CBC (0x1093UL) #define CKM_BLOWFISH_CBC_PAD (0x1094UL) #define CKM_TWOFISH_CBC_PAD (0x1095UL) #define CKM_DES_ECB_ENCRYPT_DATA (0x1100UL) #define CKM_DES_CBC_ENCRYPT_DATA (0x1101UL) #define CKM_DES3_ECB_ENCRYPT_DATA (0x1102UL) #define CKM_DES3_CBC_ENCRYPT_DATA (0x1103UL) #define CKM_AES_ECB_ENCRYPT_DATA (0x1104UL) #define CKM_AES_CBC_ENCRYPT_DATA (0x1105UL) #define CKM_GOSTR3410_KEY_PAIR_GEN (0x1200UL) #define CKM_GOSTR3410 (0x1201UL) #define CKM_GOSTR3410_WITH_GOSTR3411 (0x1202UL) #define CKM_GOSTR3410_KEY_WRAP (0x1203UL) #define CKM_GOSTR3410_DERIVE (0x1204UL) #define CKM_GOSTR3411 (0x1210UL) #define CKM_GOSTR3411_HMAC (0x1211UL) #define CKM_GOST28147_KEY_GEN (0x1220UL) #define CKM_GOST28147_ECB (0x1221UL) #define CKM_GOST28147 (0x1222UL) #define CKM_GOST28147_MAC (0x1223UL) #define CKM_GOST28147_KEY_WRAP (0x1224UL) #define CKM_DSA_PARAMETER_GEN (0x2000UL) #define CKM_DH_PKCS_PARAMETER_GEN (0x2001UL) #define CKM_X9_42_DH_PARAMETER_GEN (0x2002UL) #define CKM_DSA_PROBABLISTIC_PARAMETER_GEN (0x2003UL) #define CKM_DSA_SHAWE_TAYLOR_PARAMETER_GEN (0x2004UL) #define CKM_AES_OFB (0x2104UL) #define CKM_AES_CFB64 (0x2105UL) #define CKM_AES_CFB8 (0x2106UL) #define CKM_AES_CFB128 (0x2107UL) #define CKM_AES_CFB1 (0x2108UL) #define CKM_VENDOR_DEFINED ((unsigned long) (1UL << 31)) /* Amendments */ #define CKM_SHA224 (0x255UL) #define CKM_SHA224_HMAC (0x256UL) #define CKM_SHA224_HMAC_GENERAL (0x257UL) #define CKM_SHA224_RSA_PKCS (0x46UL) #define CKM_SHA224_RSA_PKCS_PSS (0x47UL) #define CKM_SHA224_KEY_DERIVATION (0x396UL) #define CKM_CAMELLIA_KEY_GEN (0x550UL) #define CKM_CAMELLIA_ECB (0x551UL) #define CKM_CAMELLIA_CBC (0x552UL) #define CKM_CAMELLIA_MAC (0x553UL) #define CKM_CAMELLIA_MAC_GENERAL (0x554UL) #define CKM_CAMELLIA_CBC_PAD (0x555UL) #define CKM_CAMELLIA_ECB_ENCRYPT_DATA (0x556UL) #define CKM_CAMELLIA_CBC_ENCRYPT_DATA (0x557UL) #define CKM_CAMELLIA_CTR (0x558UL) #define CKM_AES_KEY_WRAP (0x2109UL) #define CKM_AES_KEY_WRAP_PAD (0x210aUL) #define CKM_RSA_PKCS_TPM_1_1 (0x4001UL) #define CKM_RSA_PKCS_OAEP_TPM_1_1 (0x4002UL) /* From version 3.0 */ #define CKM_EC_EDWARDS_KEY_PAIR_GEN (0x1055UL) #define CKM_EDDSA (0x1057UL) /* Attribute and other constants related to OTP */ #define CK_OTP_FORMAT_DECIMAL (0UL) #define CK_OTP_FORMAT_HEXADECIMAL (1UL) #define CK_OTP_FORMAT_ALPHANUMERIC (2UL) #define CK_OTP_FORMAT_BINARY (3UL) #define CK_OTP_PARAM_IGNORED (0UL) #define CK_OTP_PARAM_OPTIONAL (1UL) #define CK_OTP_PARAM_MANDATORY (2UL) #define CK_OTP_VALUE (0UL) #define CK_OTP_PIN (1UL) #define CK_OTP_CHALLENGE (2UL) #define CK_OTP_TIME (3UL) #define CK_OTP_COUNTER (4UL) #define CK_OTP_FLAGS (5UL) #define CK_OTP_OUTPUT_LENGTH (6UL) #define CK_OTP_FORMAT (7UL) /* OTP mechanism flags */ #define CKF_NEXT_OTP (0x01UL) #define CKF_EXCLUDE_TIME (0x02UL) #define CKF_EXCLUDE_COUNTER (0x04UL) #define CKF_EXCLUDE_CHALLENGE (0x08UL) #define CKF_EXCLUDE_PIN (0x10UL) #define CKF_USER_FRIENDLY_OTP (0x20UL) #define CKN_OTP_CHANGED (0x01UL) /* Attribute and other constants related to security domain */ #define CK_SECURITY_DOMAIN_UNSPECIFIED (0UL) #define CK_SECURITY_DOMAIN_MANUFACTURER (1UL) #define CK_SECURITY_DOMAIN_OPERATOR (2UL) #define CK_SECURITY_DOMAIN_THIRD_PARTY (3UL) /* Attribute and other constants related to ceritificate category */ #define CK_CERTIFICATE_CATEGORY_UNSPECIFIED (0UL) #define CK_CERTIFICATE_CATEGORY_TOKEN_USER (1UL) #define CK_CERTIFICATE_CATEGORY_AUTHORITY (2UL) #define CK_CERTIFICATE_CATEGORY_OTHER_ENTITY (3UL) typedef unsigned long int CK_JAVA_MIDP_SECURITY_DOMAIN; struct ck_mechanism { ck_mechanism_type_t mechanism; void *parameter; unsigned long parameter_len; }; struct ck_mechanism_info { unsigned long min_key_size; unsigned long max_key_size; ck_flags_t flags; }; typedef unsigned long ck_param_type; typedef struct ck_otp_param { ck_param_type type; void *value; unsigned long value_len; } ck_otp_param; typedef struct ck_otp_params { struct ck_otp_param *params; unsigned long count; } ck_otp_params; typedef struct ck_otp_signature_info { struct ck_otp_param *params; unsigned long count; } ck_otp_signature_info; #define CKG_MGF1_SHA1 0x00000001UL #define CKG_MGF1_SHA224 0x00000005UL #define CKG_MGF1_SHA256 0x00000002UL #define CKG_MGF1_SHA384 0x00000003UL #define CKG_MGF1_SHA512 0x00000004UL typedef unsigned long ck_rsa_pkcs_mgf_type_t; typedef ck_rsa_pkcs_mgf_type_t * CK_RSA_PKCS_MGF_TYPE_PTR; struct ck_rsa_pkcs_pss_params { ck_mechanism_type_t hash_alg; ck_rsa_pkcs_mgf_type_t mgf; unsigned long s_len; }; typedef unsigned long ck_rsa_pkcs_oaep_source_type_t; struct ck_rsa_pkcs_oaep_params { ck_mechanism_type_t hash_alg; ck_rsa_pkcs_mgf_type_t mgf; ck_rsa_pkcs_oaep_source_type_t source; void *source_data; unsigned long source_data_len; }; struct ck_aes_ctr_params { unsigned long counter_bits; unsigned char cb[16]; }; struct ck_gcm_params { unsigned char *iv_ptr; unsigned long iv_len; unsigned long iv_bits; unsigned char *aad_ptr; unsigned long aad_len; unsigned long tag_bits; }; /* The following EC Key Derivation Functions are defined */ #define CKD_NULL (0x01UL) #define CKD_SHA1_KDF (0x02UL) /* The following X9.42 DH key derivation functions are defined */ #define CKD_SHA1_KDF_ASN1 (0x03UL) #define CKD_SHA1_KDF_CONCATENATE (0x04UL) #define CKD_SHA224_KDF (0x05UL) #define CKD_SHA256_KDF (0x06UL) #define CKD_SHA384_KDF (0x07UL) #define CKD_SHA512_KDF (0x08UL) #define CKD_CPDIVERSIFY_KDF (0x09UL) typedef unsigned long ck_ec_kdf_t; struct ck_ecdh1_derive_params { ck_ec_kdf_t kdf; unsigned long shared_data_len; unsigned char *shared_data; unsigned long public_data_len; unsigned char *public_data; }; struct ck_key_derivation_string_data { unsigned char *string_data; unsigned long string_data_len; }; struct ck_des_cbc_encrypt_data_params { unsigned char iv[8]; unsigned char *data_params; unsigned long length; }; struct ck_aes_cbc_encrypt_data_params { unsigned char iv[16]; unsigned char *data_params; unsigned long length; }; #define CKF_HW (1UL << 0) #define CKF_ENCRYPT (1UL << 8) #define CKF_DECRYPT (1UL << 9) #define CKF_DIGEST (1UL << 10) #define CKF_SIGN (1UL << 11) #define CKF_SIGN_RECOVER (1UL << 12) #define CKF_VERIFY (1UL << 13) #define CKF_VERIFY_RECOVER (1UL << 14) #define CKF_GENERATE (1UL << 15) #define CKF_GENERATE_KEY_PAIR (1UL << 16) #define CKF_WRAP (1UL << 17) #define CKF_UNWRAP (1UL << 18) #define CKF_DERIVE (1UL << 19) #define CKF_EXTENSION ((unsigned long) (1UL << 31)) #define CKF_EC_F_P (1UL << 20) #define CKF_EC_NAMEDCURVE (1UL << 23) #define CKF_EC_UNCOMPRESS (1UL << 24) #define CKF_EC_COMPRESS (1UL << 25) /* Flags for C_WaitForSlotEvent. */ #define CKF_DONT_BLOCK (1UL) typedef unsigned long ck_rv_t; typedef ck_rv_t (*ck_notify_t) (ck_session_handle_t session, ck_notification_t event, void *application); /* Forward reference. */ struct ck_function_list; #define _CK_DECLARE_FUNCTION(name, args) \ typedef ck_rv_t (*CK_ ## name) args; \ ck_rv_t CK_SPEC name args _CK_DECLARE_FUNCTION (C_Initialize, (void *init_args)); _CK_DECLARE_FUNCTION (C_Finalize, (void *reserved)); _CK_DECLARE_FUNCTION (C_GetInfo, (struct ck_info *info)); _CK_DECLARE_FUNCTION (C_GetFunctionList, (struct ck_function_list **function_list)); _CK_DECLARE_FUNCTION (C_GetSlotList, (unsigned char token_present, ck_slot_id_t *slot_list, unsigned long *count)); _CK_DECLARE_FUNCTION (C_GetSlotInfo, (ck_slot_id_t slot_id, struct ck_slot_info *info)); _CK_DECLARE_FUNCTION (C_GetTokenInfo, (ck_slot_id_t slot_id, struct ck_token_info *info)); _CK_DECLARE_FUNCTION (C_WaitForSlotEvent, (ck_flags_t flags, ck_slot_id_t *slot, void *reserved)); _CK_DECLARE_FUNCTION (C_GetMechanismList, (ck_slot_id_t slot_id, ck_mechanism_type_t *mechanism_list, unsigned long *count)); _CK_DECLARE_FUNCTION (C_GetMechanismInfo, (ck_slot_id_t slot_id, ck_mechanism_type_t type, struct ck_mechanism_info *info)); _CK_DECLARE_FUNCTION (C_InitToken, (ck_slot_id_t slot_id, unsigned char *pin, unsigned long pin_len, unsigned char *label)); _CK_DECLARE_FUNCTION (C_InitPIN, (ck_session_handle_t session, unsigned char *pin, unsigned long pin_len)); _CK_DECLARE_FUNCTION (C_SetPIN, (ck_session_handle_t session, unsigned char *old_pin, unsigned long old_len, unsigned char *new_pin, unsigned long new_len)); _CK_DECLARE_FUNCTION (C_OpenSession, (ck_slot_id_t slot_id, ck_flags_t flags, void *application, ck_notify_t notify, ck_session_handle_t *session)); _CK_DECLARE_FUNCTION (C_CloseSession, (ck_session_handle_t session)); _CK_DECLARE_FUNCTION (C_CloseAllSessions, (ck_slot_id_t slot_id)); _CK_DECLARE_FUNCTION (C_GetSessionInfo, (ck_session_handle_t session, struct ck_session_info *info)); _CK_DECLARE_FUNCTION (C_GetOperationState, (ck_session_handle_t session, unsigned char *operation_state, unsigned long *operation_state_len)); _CK_DECLARE_FUNCTION (C_SetOperationState, (ck_session_handle_t session, unsigned char *operation_state, unsigned long operation_state_len, ck_object_handle_t encryption_key, ck_object_handle_t authentiation_key)); _CK_DECLARE_FUNCTION (C_Login, (ck_session_handle_t session, ck_user_type_t user_type, unsigned char *pin, unsigned long pin_len)); _CK_DECLARE_FUNCTION (C_Logout, (ck_session_handle_t session)); _CK_DECLARE_FUNCTION (C_CreateObject, (ck_session_handle_t session, struct ck_attribute *templ, unsigned long count, ck_object_handle_t *object)); _CK_DECLARE_FUNCTION (C_CopyObject, (ck_session_handle_t session, ck_object_handle_t object, struct ck_attribute *templ, unsigned long count, ck_object_handle_t *new_object)); _CK_DECLARE_FUNCTION (C_DestroyObject, (ck_session_handle_t session, ck_object_handle_t object)); _CK_DECLARE_FUNCTION (C_GetObjectSize, (ck_session_handle_t session, ck_object_handle_t object, unsigned long *size)); _CK_DECLARE_FUNCTION (C_GetAttributeValue, (ck_session_handle_t session, ck_object_handle_t object, struct ck_attribute *templ, unsigned long count)); _CK_DECLARE_FUNCTION (C_SetAttributeValue, (ck_session_handle_t session, ck_object_handle_t object, struct ck_attribute *templ, unsigned long count)); _CK_DECLARE_FUNCTION (C_FindObjectsInit, (ck_session_handle_t session, struct ck_attribute *templ, unsigned long count)); _CK_DECLARE_FUNCTION (C_FindObjects, (ck_session_handle_t session, ck_object_handle_t *object, unsigned long max_object_count, unsigned long *object_count)); _CK_DECLARE_FUNCTION (C_FindObjectsFinal, (ck_session_handle_t session)); _CK_DECLARE_FUNCTION (C_EncryptInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_Encrypt, (ck_session_handle_t session, unsigned char *data, unsigned long data_len, unsigned char *encrypted_data, unsigned long *encrypted_data_len)); _CK_DECLARE_FUNCTION (C_EncryptUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len)); _CK_DECLARE_FUNCTION (C_EncryptFinal, (ck_session_handle_t session, unsigned char *last_encrypted_part, unsigned long *last_encrypted_part_len)); _CK_DECLARE_FUNCTION (C_DecryptInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_Decrypt, (ck_session_handle_t session, unsigned char *encrypted_data, unsigned long encrypted_data_len, unsigned char *data, unsigned long *data_len)); _CK_DECLARE_FUNCTION (C_DecryptUpdate, (ck_session_handle_t session, unsigned char *encrypted_part, unsigned long encrypted_part_len, unsigned char *part, unsigned long *part_len)); _CK_DECLARE_FUNCTION (C_DecryptFinal, (ck_session_handle_t session, unsigned char *last_part, unsigned long *last_part_len)); _CK_DECLARE_FUNCTION (C_DigestInit, (ck_session_handle_t session, struct ck_mechanism *mechanism)); _CK_DECLARE_FUNCTION (C_Digest, (ck_session_handle_t session, unsigned char *data, unsigned long data_len, unsigned char *digest, unsigned long *digest_len)); _CK_DECLARE_FUNCTION (C_DigestUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len)); _CK_DECLARE_FUNCTION (C_DigestKey, (ck_session_handle_t session, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_DigestFinal, (ck_session_handle_t session, unsigned char *digest, unsigned long *digest_len)); _CK_DECLARE_FUNCTION (C_SignInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_Sign, (ck_session_handle_t session, unsigned char *data, unsigned long data_len, unsigned char *signature, unsigned long *signature_len)); _CK_DECLARE_FUNCTION (C_SignUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len)); _CK_DECLARE_FUNCTION (C_SignFinal, (ck_session_handle_t session, unsigned char *signature, unsigned long *signature_len)); _CK_DECLARE_FUNCTION (C_SignRecoverInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_SignRecover, (ck_session_handle_t session, unsigned char *data, unsigned long data_len, unsigned char *signature, unsigned long *signature_len)); _CK_DECLARE_FUNCTION (C_VerifyInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_Verify, (ck_session_handle_t session, unsigned char *data, unsigned long data_len, unsigned char *signature, unsigned long signature_len)); _CK_DECLARE_FUNCTION (C_VerifyUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len)); _CK_DECLARE_FUNCTION (C_VerifyFinal, (ck_session_handle_t session, unsigned char *signature, unsigned long signature_len)); _CK_DECLARE_FUNCTION (C_VerifyRecoverInit, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t key)); _CK_DECLARE_FUNCTION (C_VerifyRecover, (ck_session_handle_t session, unsigned char *signature, unsigned long signature_len, unsigned char *data, unsigned long *data_len)); _CK_DECLARE_FUNCTION (C_DigestEncryptUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len)); _CK_DECLARE_FUNCTION (C_DecryptDigestUpdate, (ck_session_handle_t session, unsigned char *encrypted_part, unsigned long encrypted_part_len, unsigned char *part, unsigned long *part_len)); _CK_DECLARE_FUNCTION (C_SignEncryptUpdate, (ck_session_handle_t session, unsigned char *part, unsigned long part_len, unsigned char *encrypted_part, unsigned long *encrypted_part_len)); _CK_DECLARE_FUNCTION (C_DecryptVerifyUpdate, (ck_session_handle_t session, unsigned char *encrypted_part, unsigned long encrypted_part_len, unsigned char *part, unsigned long *part_len)); _CK_DECLARE_FUNCTION (C_GenerateKey, (ck_session_handle_t session, struct ck_mechanism *mechanism, struct ck_attribute *templ, unsigned long count, ck_object_handle_t *key)); _CK_DECLARE_FUNCTION (C_GenerateKeyPair, (ck_session_handle_t session, struct ck_mechanism *mechanism, struct ck_attribute *public_key_template, unsigned long public_key_attribute_count, struct ck_attribute *private_key_template, unsigned long private_key_attribute_count, ck_object_handle_t *public_key, ck_object_handle_t *private_key)); _CK_DECLARE_FUNCTION (C_WrapKey, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t wrapping_key, ck_object_handle_t key, unsigned char *wrapped_key, unsigned long *wrapped_key_len)); _CK_DECLARE_FUNCTION (C_UnwrapKey, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t unwrapping_key, unsigned char *wrapped_key, unsigned long wrapped_key_len, struct ck_attribute *templ, unsigned long attribute_count, ck_object_handle_t *key)); _CK_DECLARE_FUNCTION (C_DeriveKey, (ck_session_handle_t session, struct ck_mechanism *mechanism, ck_object_handle_t base_key, struct ck_attribute *templ, unsigned long attribute_count, ck_object_handle_t *key)); _CK_DECLARE_FUNCTION (C_SeedRandom, (ck_session_handle_t session, unsigned char *seed, unsigned long seed_len)); _CK_DECLARE_FUNCTION (C_GenerateRandom, (ck_session_handle_t session, unsigned char *random_data, unsigned long random_len)); _CK_DECLARE_FUNCTION (C_GetFunctionStatus, (ck_session_handle_t session)); _CK_DECLARE_FUNCTION (C_CancelFunction, (ck_session_handle_t session)); struct ck_function_list { struct ck_version version; CK_C_Initialize C_Initialize; CK_C_Finalize C_Finalize; CK_C_GetInfo C_GetInfo; CK_C_GetFunctionList C_GetFunctionList; CK_C_GetSlotList C_GetSlotList; CK_C_GetSlotInfo C_GetSlotInfo; CK_C_GetTokenInfo C_GetTokenInfo; CK_C_GetMechanismList C_GetMechanismList; CK_C_GetMechanismInfo C_GetMechanismInfo; CK_C_InitToken C_InitToken; CK_C_InitPIN C_InitPIN; CK_C_SetPIN C_SetPIN; CK_C_OpenSession C_OpenSession; CK_C_CloseSession C_CloseSession; CK_C_CloseAllSessions C_CloseAllSessions; CK_C_GetSessionInfo C_GetSessionInfo; CK_C_GetOperationState C_GetOperationState; CK_C_SetOperationState C_SetOperationState; CK_C_Login C_Login; CK_C_Logout C_Logout; CK_C_CreateObject C_CreateObject; CK_C_CopyObject C_CopyObject; CK_C_DestroyObject C_DestroyObject; CK_C_GetObjectSize C_GetObjectSize; CK_C_GetAttributeValue C_GetAttributeValue; CK_C_SetAttributeValue C_SetAttributeValue; CK_C_FindObjectsInit C_FindObjectsInit; CK_C_FindObjects C_FindObjects; CK_C_FindObjectsFinal C_FindObjectsFinal; CK_C_EncryptInit C_EncryptInit; CK_C_Encrypt C_Encrypt; CK_C_EncryptUpdate C_EncryptUpdate; CK_C_EncryptFinal C_EncryptFinal; CK_C_DecryptInit C_DecryptInit; CK_C_Decrypt C_Decrypt; CK_C_DecryptUpdate C_DecryptUpdate; CK_C_DecryptFinal C_DecryptFinal; CK_C_DigestInit C_DigestInit; CK_C_Digest C_Digest; CK_C_DigestUpdate C_DigestUpdate; CK_C_DigestKey C_DigestKey; CK_C_DigestFinal C_DigestFinal; CK_C_SignInit C_SignInit; CK_C_Sign C_Sign; CK_C_SignUpdate C_SignUpdate; CK_C_SignFinal C_SignFinal; CK_C_SignRecoverInit C_SignRecoverInit; CK_C_SignRecover C_SignRecover; CK_C_VerifyInit C_VerifyInit; CK_C_Verify C_Verify; CK_C_VerifyUpdate C_VerifyUpdate; CK_C_VerifyFinal C_VerifyFinal; CK_C_VerifyRecoverInit C_VerifyRecoverInit; CK_C_VerifyRecover C_VerifyRecover; CK_C_DigestEncryptUpdate C_DigestEncryptUpdate; CK_C_DecryptDigestUpdate C_DecryptDigestUpdate; CK_C_SignEncryptUpdate C_SignEncryptUpdate; CK_C_DecryptVerifyUpdate C_DecryptVerifyUpdate; CK_C_GenerateKey C_GenerateKey; CK_C_GenerateKeyPair C_GenerateKeyPair; CK_C_WrapKey C_WrapKey; CK_C_UnwrapKey C_UnwrapKey; CK_C_DeriveKey C_DeriveKey; CK_C_SeedRandom C_SeedRandom; CK_C_GenerateRandom C_GenerateRandom; CK_C_GetFunctionStatus C_GetFunctionStatus; CK_C_CancelFunction C_CancelFunction; CK_C_WaitForSlotEvent C_WaitForSlotEvent; }; typedef ck_rv_t (*ck_createmutex_t) (void **mutex); typedef ck_rv_t (*ck_destroymutex_t) (void *mutex); typedef ck_rv_t (*ck_lockmutex_t) (void *mutex); typedef ck_rv_t (*ck_unlockmutex_t) (void *mutex); struct ck_c_initialize_args { ck_createmutex_t create_mutex; ck_destroymutex_t destroy_mutex; ck_lockmutex_t lock_mutex; ck_unlockmutex_t unlock_mutex; ck_flags_t flags; void *reserved; }; #define CKF_LIBRARY_CANT_CREATE_OS_THREADS (1UL << 0) #define CKF_OS_LOCKING_OK (1UL << 1) #define CKR_OK (0UL) #define CKR_CANCEL (1UL) #define CKR_HOST_MEMORY (2UL) #define CKR_SLOT_ID_INVALID (3UL) #define CKR_GENERAL_ERROR (5UL) #define CKR_FUNCTION_FAILED (6UL) #define CKR_ARGUMENTS_BAD (7UL) #define CKR_NO_EVENT (8UL) #define CKR_NEED_TO_CREATE_THREADS (9UL) #define CKR_CANT_LOCK (0xaUL) #define CKR_ATTRIBUTE_READ_ONLY (0x10UL) #define CKR_ATTRIBUTE_SENSITIVE (0x11UL) #define CKR_ATTRIBUTE_TYPE_INVALID (0x12UL) #define CKR_ATTRIBUTE_VALUE_INVALID (0x13UL) #define CKR_ACTION_PROHIBITED (0x1BUL) #define CKR_DATA_INVALID (0x20UL) #define CKR_DATA_LEN_RANGE (0x21UL) #define CKR_DEVICE_ERROR (0x30UL) #define CKR_DEVICE_MEMORY (0x31UL) #define CKR_DEVICE_REMOVED (0x32UL) #define CKR_ENCRYPTED_DATA_INVALID (0x40UL) #define CKR_ENCRYPTED_DATA_LEN_RANGE (0x41UL) #define CKR_FUNCTION_CANCELED (0x50UL) #define CKR_FUNCTION_NOT_PARALLEL (0x51UL) #define CKR_FUNCTION_NOT_SUPPORTED (0x54UL) #define CKR_KEY_HANDLE_INVALID (0x60UL) #define CKR_KEY_SIZE_RANGE (0x62UL) #define CKR_KEY_TYPE_INCONSISTENT (0x63UL) #define CKR_KEY_NOT_NEEDED (0x64UL) #define CKR_KEY_CHANGED (0x65UL) #define CKR_KEY_NEEDED (0x66UL) #define CKR_KEY_INDIGESTIBLE (0x67UL) #define CKR_KEY_FUNCTION_NOT_PERMITTED (0x68UL) #define CKR_KEY_NOT_WRAPPABLE (0x69UL) #define CKR_KEY_UNEXTRACTABLE (0x6aUL) #define CKR_MECHANISM_INVALID (0x70UL) #define CKR_MECHANISM_PARAM_INVALID (0x71UL) #define CKR_OBJECT_HANDLE_INVALID (0x82UL) #define CKR_OPERATION_ACTIVE (0x90UL) #define CKR_OPERATION_NOT_INITIALIZED (0x91UL) #define CKR_PIN_INCORRECT (0xa0UL) #define CKR_PIN_INVALID (0xa1UL) #define CKR_PIN_LEN_RANGE (0xa2UL) #define CKR_PIN_EXPIRED (0xa3UL) #define CKR_PIN_LOCKED (0xa4UL) #define CKR_SESSION_CLOSED (0xb0UL) #define CKR_SESSION_COUNT (0xb1UL) #define CKR_SESSION_HANDLE_INVALID (0xb3UL) #define CKR_SESSION_PARALLEL_NOT_SUPPORTED (0xb4UL) #define CKR_SESSION_READ_ONLY (0xb5UL) #define CKR_SESSION_EXISTS (0xb6UL) #define CKR_SESSION_READ_ONLY_EXISTS (0xb7UL) #define CKR_SESSION_READ_WRITE_SO_EXISTS (0xb8UL) #define CKR_SIGNATURE_INVALID (0xc0UL) #define CKR_SIGNATURE_LEN_RANGE (0xc1UL) #define CKR_TEMPLATE_INCOMPLETE (0xd0UL) #define CKR_TEMPLATE_INCONSISTENT (0xd1UL) #define CKR_TOKEN_NOT_PRESENT (0xe0UL) #define CKR_TOKEN_NOT_RECOGNIZED (0xe1UL) #define CKR_TOKEN_WRITE_PROTECTED (0xe2UL) #define CKR_UNWRAPPING_KEY_HANDLE_INVALID (0xf0UL) #define CKR_UNWRAPPING_KEY_SIZE_RANGE (0xf1UL) #define CKR_UNWRAPPING_KEY_TYPE_INCONSISTENT (0xf2UL) #define CKR_USER_ALREADY_LOGGED_IN (0x100UL) #define CKR_USER_NOT_LOGGED_IN (0x101UL) #define CKR_USER_PIN_NOT_INITIALIZED (0x102UL) #define CKR_USER_TYPE_INVALID (0x103UL) #define CKR_USER_ANOTHER_ALREADY_LOGGED_IN (0x104UL) #define CKR_USER_TOO_MANY_TYPES (0x105UL) #define CKR_WRAPPED_KEY_INVALID (0x110UL) #define CKR_WRAPPED_KEY_LEN_RANGE (0x112UL) #define CKR_WRAPPING_KEY_HANDLE_INVALID (0x113UL) #define CKR_WRAPPING_KEY_SIZE_RANGE (0x114UL) #define CKR_WRAPPING_KEY_TYPE_INCONSISTENT (0x115UL) #define CKR_RANDOM_SEED_NOT_SUPPORTED (0x120UL) #define CKR_RANDOM_NO_RNG (0x121UL) #define CKR_DOMAIN_PARAMS_INVALID (0x130UL) #define CKR_CURVE_NOT_SUPPORTED (0x140UL) #define CKR_BUFFER_TOO_SMALL (0x150UL) #define CKR_SAVED_STATE_INVALID (0x160UL) #define CKR_INFORMATION_SENSITIVE (0x170UL) #define CKR_STATE_UNSAVEABLE (0x180UL) #define CKR_CRYPTOKI_NOT_INITIALIZED (0x190UL) #define CKR_CRYPTOKI_ALREADY_INITIALIZED (0x191UL) #define CKR_MUTEX_BAD (0x1a0UL) #define CKR_MUTEX_NOT_LOCKED (0x1a1UL) #define CKR_NEW_PIN_MODE (0x1b0UL) #define CKR_NEXT_OTP (0x1b1UL) #define CKR_EXCEEDED_MAX_ITERATIONS (0x1c0UL) #define CKR_FIPS_SELF_TEST_FAILED (0x1c1UL) #define CKR_LIBRARY_LOAD_FAILED (0x1c2UL) #define CKR_PIN_TOO_WEAK (0x1c3UL) #define CKR_PUBLIC_KEY_INVALID (0x1c4UL) #define CKR_FUNCTION_REJECTED (0x200UL) #define CKR_VENDOR_DEFINED ((unsigned long) (1UL << 31)) #define CKZ_DATA_SPECIFIED (0x01UL) /* Compatibility layer. */ #ifdef CRYPTOKI_COMPAT #undef CK_DEFINE_FUNCTION #define CK_DEFINE_FUNCTION(retval, name) retval CK_SPEC name /* For NULL. */ #include typedef unsigned char CK_BYTE; typedef unsigned char CK_CHAR; typedef unsigned char CK_UTF8CHAR; typedef unsigned char CK_BBOOL; typedef unsigned long int CK_ULONG; typedef long int CK_LONG; typedef CK_BYTE *CK_BYTE_PTR; typedef CK_CHAR *CK_CHAR_PTR; typedef CK_UTF8CHAR *CK_UTF8CHAR_PTR; typedef CK_ULONG *CK_ULONG_PTR; typedef void *CK_VOID_PTR; typedef void **CK_VOID_PTR_PTR; #define CK_FALSE 0 #define CK_TRUE 1 #ifndef CK_DISABLE_TRUE_FALSE #ifndef FALSE #define FALSE 0 #endif #ifndef TRUE #define TRUE 1 #endif #endif typedef struct ck_version CK_VERSION; typedef struct ck_version *CK_VERSION_PTR; typedef struct ck_info CK_INFO; typedef struct ck_info *CK_INFO_PTR; typedef ck_slot_id_t *CK_SLOT_ID_PTR; typedef struct ck_slot_info CK_SLOT_INFO; typedef struct ck_slot_info *CK_SLOT_INFO_PTR; typedef struct ck_token_info CK_TOKEN_INFO; typedef struct ck_token_info *CK_TOKEN_INFO_PTR; typedef ck_session_handle_t *CK_SESSION_HANDLE_PTR; typedef struct ck_session_info CK_SESSION_INFO; typedef struct ck_session_info *CK_SESSION_INFO_PTR; typedef ck_object_handle_t *CK_OBJECT_HANDLE_PTR; typedef ck_object_class_t *CK_OBJECT_CLASS_PTR; typedef struct ck_attribute CK_ATTRIBUTE; typedef struct ck_attribute *CK_ATTRIBUTE_PTR; typedef struct ck_date CK_DATE; typedef struct ck_date *CK_DATE_PTR; typedef ck_mechanism_type_t *CK_MECHANISM_TYPE_PTR; typedef struct ck_mechanism CK_MECHANISM; typedef struct ck_mechanism *CK_MECHANISM_PTR; typedef struct ck_mechanism_info CK_MECHANISM_INFO; typedef struct ck_mechanism_info *CK_MECHANISM_INFO_PTR; typedef struct ck_otp_mechanism_info CK_OTP_MECHANISM_INFO; typedef struct ck_otp_mechanism_info *CK_OTP_MECHANISM_INFO_PTR; typedef struct ck_function_list CK_FUNCTION_LIST; typedef struct ck_function_list *CK_FUNCTION_LIST_PTR; typedef struct ck_function_list **CK_FUNCTION_LIST_PTR_PTR; typedef struct ck_c_initialize_args CK_C_INITIALIZE_ARGS; typedef struct ck_c_initialize_args *CK_C_INITIALIZE_ARGS_PTR; typedef struct ck_rsa_pkcs_pss_params CK_RSA_PKCS_PSS_PARAMS; typedef struct ck_rsa_pkcs_pss_params *CK_RSA_PKCS_PSS_PARAMS_PTR; typedef struct ck_rsa_pkcs_oaep_params CK_RSA_PKCS_OAEP_PARAMS; typedef struct ck_rsa_pkcs_oaep_params *CK_RSA_PKCS_OAEP_PARAMS_PTR; typedef struct ck_aes_ctr_params CK_AES_CTR_PARAMS; typedef struct ck_aes_ctr_params *CK_AES_CTR_PARAMS_PTR; typedef struct ck_gcm_params CK_GCM_PARAMS; typedef struct ck_gcm_params *CK_GCM_PARAMS_PTR; typedef struct ck_ecdh1_derive_params CK_ECDH1_DERIVE_PARAMS; typedef struct ck_ecdh1_derive_params *CK_ECDH1_DERIVE_PARAMS_PTR; typedef struct ck_key_derivation_string_data CK_KEY_DERIVATION_STRING_DATA; typedef struct ck_key_derivation_string_data *CK_KEY_DERIVATION_STRING_DATA_PTR; typedef struct ck_des_cbc_encrypt_data_params CK_DES_CBC_ENCRYPT_DATA_PARAMS; typedef struct ck_des_cbc_encrypt_data_params *CK_DES_CBC_ENCRYPT_DATA_PARAMS_PTR; typedef struct ck_aes_cbc_encrypt_data_params CK_AES_CBC_ENCRYPT_DATA_PARAMS; typedef struct ck_aes_cbc_encrypt_data_params *CK_AES_CBC_ENCRYPT_DATA_PARAMS_PTR; #ifndef NULL_PTR #define NULL_PTR NULL #endif /* Delete the helper macros defined at the top of the file. */ #undef ck_flags_t #undef ck_version #undef ck_info #undef cryptoki_version #undef manufacturer_id #undef library_description #undef library_version #undef ck_notification_t #undef ck_slot_id_t #undef ck_slot_info #undef slot_description #undef hardware_version #undef firmware_version #undef ck_token_info #undef serial_number #undef max_session_count #undef session_count #undef max_rw_session_count #undef rw_session_count #undef max_pin_len #undef min_pin_len #undef total_public_memory #undef free_public_memory #undef total_private_memory #undef free_private_memory #undef utc_time #undef ck_session_handle_t #undef ck_user_type_t #undef ck_state_t #undef ck_session_info #undef slot_id #undef device_error #undef ck_object_handle_t #undef ck_object_class_t #undef ck_hw_feature_type_t #undef ck_key_type_t #undef ck_certificate_type_t #undef ck_attribute_type_t #undef ck_attribute #undef value #undef value_len #undef params #undef count #undef ck_date #undef ck_mechanism_type_t #undef ck_mechanism #undef parameter #undef parameter_len #undef ck_mechanism_info #undef ck_param_type #undef ck_otp_param #undef ck_otp_params #undef ck_otp_signature_info #undef min_key_size #undef max_key_size #undef ck_rv_t #undef ck_notify_t #undef ck_function_list #undef ck_createmutex_t #undef ck_destroymutex_t #undef ck_lockmutex_t #undef ck_unlockmutex_t #undef ck_c_initialize_args #undef create_mutex #undef destroy_mutex #undef lock_mutex #undef unlock_mutex #undef reserved #endif /* CRYPTOKI_COMPAT */ /* System dependencies. */ #if defined(_WIN32) || defined(CRYPTOKI_FORCE_WIN32) #pragma pack(pop, cryptoki) #endif #if defined(__cplusplus) } #endif #endif /* PKCS11_H */ tpm2-pkcs11-1.9.1/test/0000755000175100017510000000000014674407116010240 5tpm2-pkcs11-1.9.1/test/fuzz/0000755000175100017510000000000014674407116011236 5tpm2-pkcs11-1.9.1/test/fuzz/db-take-lock.fuzz.c0000644000175100017510000000425114535673717014566 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include #include #include #include #include "db.h" static const uint8_t *_data; static size_t _size; typedef struct test_state test_state; struct test_state { char *random_string; char *tmp_dir; FILE *file; }; static inline test_state *test_state_cast(void **state) { return (test_state *)*state; } static void test_state_free(test_state **test) { if (test && *test) { test_state *t = *test; free(t->random_string); if (t->file) { fclose(t->file); } free(t); *test = NULL; } } static test_state *test_state_new(const uint8_t *data, size_t len) { /* require a null terminated string */ char *null_term_data = calloc(1, len + 1); if (!null_term_data) { return NULL; } memcpy(null_term_data, data, len); char tmp_key[] = "pkcs11_fuzztest_db_take_lock_XXXXXX"; char *tmp_dir = mkdtemp(tmp_key); if (!tmp_dir) { free(null_term_data); return NULL; } test_state *t = calloc(1, sizeof(test_state)); if (!t) { free(null_term_data); return NULL; } t->random_string = null_term_data; t->tmp_dir = tmp_dir; return t; } static int setup(void **state) { /* assign to state */ *state = test_state_new(_data, _size); return *state == NULL; } static int teardown(void **state) { test_state *s = test_state_cast(state); test_state_free(&s); return 0; } static void test(void **state) { test_state *t = test_state_cast(state); assert_non_null(t); setenv("PKCS11_SQL_LOCK", t->random_string, true); char lockpath[PATH_MAX]; t->file = take_lock(t->tmp_dir, lockpath); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { _size = size; _data = data; const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test, setup, teardown), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.9.1/test/fuzz/db-token-label.fuzz32.c0000644000175100017510000000562314535673717015262 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include "db.h" #include "token.h" #include "pkcs11.h" #include "wrap_tpm.h" static const uint8_t *_data; static size_t _size; static sqlite3 *_db; static token _token; /* hidden api */ extern CK_RV db_init_new(sqlite3 *db); extern void db_debug_set_db(sqlite3 *db); /* overriding weak symbol, like wrap */ CK_RV db_new(sqlite3 **db) { *db = _db; return CKR_OK; } /* overriding weak symbol, like wrap */ void db_get_label(token *t, sqlite3_stmt *stmt, int iCol) { UNUSED(stmt); UNUSED(iCol); /* FUZZ DATA */ memcpy(t->label, _data, _size); } static int setup(void **state) { UNUSED(state); set_default_tpm(); int rc = sqlite3_open(":memory:", &_db); assert_int_equal(rc, SQLITE_OK); CK_RV rv = db_init_new(_db); assert_int_equal(rv, CKR_OK); db_debug_set_db(_db); unsigned int pid = 0; pobject pobj = { 0 }; pobj.config.blob = twist_new("aabbccdd"); assert_non_null(pobj.config.blob); rv = db_add_primary(&pobj, &pid); twist_free(pobj.config.blob); assert_int_equal(rv, CKR_OK); /* create and add a dummy token */ memcpy(_token.label, "foo", 3); _token.pid = pid; _token.config.is_initialized = true; _token.esysdb.sealobject.sopriv = twist_new("sopriv"); assert_non_null(_token.esysdb.sealobject.sopriv); _token.esysdb.sealobject.soauthsalt = twist_new("soauthsalt"); assert_non_null(_token.esysdb.sealobject.soauthsalt); _token.esysdb.sealobject.sopub = twist_new("sopub"); assert_non_null(_token.esysdb.sealobject.sopub); _token.esysdb.sealobject.userauthsalt = twist_new("userauthsalt"); assert_non_null(_token.esysdb.sealobject.userauthsalt); rv = db_add_token(&_token); assert_int_equal(rv, CKR_OK); setenv("TPM2_PKCS11_STORE", ":memory:", 1); rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); return 0; } static int teardown(void **state) { UNUSED(state); set_default_tpm(); CK_RV rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); token_free(&_token); return 0; } static void test(void **state) { UNUSED(state); /* nothing to do, setup and teardown do it */ CK_SLOT_ID slot_ids[2]; CK_ULONG cnt = ARRAY_LEN(slot_ids); CK_RV rv = C_GetSlotList(true, slot_ids, &cnt); assert_int_equal(rv, CKR_OK); CK_TOKEN_INFO info; /* FUZZ TARGET */ rv = C_GetTokenInfo(slot_ids[0], &info); assert_int_equal(rv, CKR_OK); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { if (size > 32) { LOGE("SIZE BIGGER THAN 32"); return 0; } _size = size; _data = data; const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test, setup, teardown), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.9.1/test/fuzz/init-pin.fuzz.c0000644000175100017510000000356514535673717014067 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "attrs.h" #include "log.h" #include "parser.h" #include "pkcs11.h" #include "wrap_tpm.h" static const uint8_t *_data; static size_t _size; static CK_SESSION_HANDLE _session; static int setup(void **state) { UNUSED(state); /* * we just use an in memory db so we don't need to fake sqlite or deal * * with temp file cleanup */ setenv("TPM2_PKCS11_STORE", ":memory:", 1); set_default_tpm(); CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); CK_SLOT_ID slot_list; CK_ULONG count = 1; rv = C_GetSlotList(0, &slot_list, &count); assert_int_equal(rv, CKR_OK); assert_int_not_equal(count, 0); CK_BYTE label[32] = " my label"; rv = C_InitToken(slot_list, (CK_BYTE_PTR)"mysopin", 7, label); assert_int_equal(rv, CKR_OK); rv = C_OpenSession(slot_list, CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &_session); assert_int_equal(rv, CKR_OK); rv = C_Login(_session, CKU_SO, (CK_BYTE_PTR)"mysopin", 7); assert_int_equal(rv, CKR_OK); return 0; } static int teardown(void **state) { UNUSED(state); set_default_tpm(); CK_RV rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); return 0; } static void test(void **state) { UNUSED(state); set_default_tpm(); /* FUZZ TARGET C_InitPIN pin */ CK_RV rv = C_InitPIN(_session, (CK_BYTE_PTR)_data, _size); /* it should never fail, all pins are ok */ assert_int_equal(rv, CKR_OK); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { _size = size; _data = data; const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test, setup, teardown), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.9.1/test/fuzz/init-token-label.fuzz32.c0000644000175100017510000000425114535673717015634 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "attrs.h" #include "log.h" #include "parser.h" #include "pkcs11.h" #include "wrap_tpm.h" static CK_BYTE _label[32]; static void test(void **state) { UNUSED(state); /* * we just use an in memory db so we don't need to fake sqlite or deal * * with temp file cleanup */ setenv("TPM2_PKCS11_STORE", ":memory:", 1); will_return_maybe(__wrap_backend_fapi_init, CKR_GENERAL_ERROR); will_return_maybe(__wrap_Esys_Initialize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Tss2_TctiLdr_Initialize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Tss2_TctiLdr_Finalize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_Finalize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TR_FromTPMPublic, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TR_Serialize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TR_SetAuth, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_StartAuthSession, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TRSess_SetAttributes, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_Create, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_FlushContext, TSS2_RC_SUCCESS); CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); CK_SLOT_ID slot_list; CK_ULONG count = 1; rv = C_GetSlotList(0, &slot_list, &count); assert_int_equal(rv, CKR_OK); assert_int_not_equal(count, 0); /* FUZZ TARGET C_InitToken LABEL */ rv = C_InitToken(slot_list, (CK_BYTE_PTR)"mysopin", 7, _label); /* some may work some may fail do not check RV */ rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { if (size > sizeof(_label)) { LOGE("Size is not valid, expected less than %zu got: %zu", sizeof(_label), size); abort(); } /* lets just throw random 32 byte buffers at it and see what blows up */ memcpy(_label, data, size); const struct CMUnitTest tests[] = { cmocka_unit_test(test), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.9.1/test/fuzz/init-token-sopin.fuzz.c0000644000175100017510000000452314535673717015542 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "attrs.h" #include "log.h" #include "parser.h" #include "pkcs11.h" #include "wrap_tpm.h" static const uint8_t *_data = NULL; static size_t _size = 0; static void test(void **state) { UNUSED(state); /* * we just use an in memory db so we don't need to fake sqlite or deal * * with temp file cleanup */ setenv("TPM2_PKCS11_STORE", ":memory:", 1); will_return_always(__wrap_backend_fapi_init, CKR_GENERAL_ERROR); will_return_always(__wrap_Esys_Initialize, TSS2_RC_SUCCESS); will_return_always(__wrap_Tss2_TctiLdr_Initialize, TSS2_RC_SUCCESS); will_return_always(__wrap_Tss2_TctiLdr_Finalize, TSS2_RC_SUCCESS); //will_return_always(__wrap_Esys_GetCapability, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_Finalize, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_TR_FromTPMPublic, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_TR_Serialize, TSS2_RC_SUCCESS); // will_return_always(__wrap_Esys_TR_Deserialize, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_TR_SetAuth, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_StartAuthSession, TSS2_RC_SUCCESS); // will_return_always(__wrap_Esys_TRSess_GetAttributes, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_TRSess_SetAttributes, TSS2_RC_SUCCESS); // will_return_always(__wrap_Esys_CreateLoaded, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_Create, TSS2_RC_SUCCESS); will_return_always(__wrap_Esys_FlushContext, TSS2_RC_SUCCESS); CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); CK_SLOT_ID slot_list; CK_ULONG count = 1; rv = C_GetSlotList(0, &slot_list, &count); assert_int_equal(rv, CKR_OK); assert_int_not_equal(count, 0); CK_BYTE label[32] = " my label"; /* FUZZ TARGET C_InitToken SOPIN */ rv = C_InitToken(slot_list, (CK_BYTE_PTR)_data, _size, label); /* any pin should work */ assert_int_equal(rv, CKR_OK); rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { _data = data; _size = size; const struct CMUnitTest tests[] = { cmocka_unit_test(test), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.9.1/test/fuzz/set-pin.fuzz.c0000644000175100017510000000377114535673717013716 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include "attrs.h" #include "log.h" #include "parser.h" #include "pkcs11.h" #include "wrap_tpm.h" static const uint8_t *_data; static size_t _size; static CK_SESSION_HANDLE _session; static int setup(void **state) { UNUSED(state); /* * we just use an in memory db so we don't need to fake sqlite or deal * * with temp file cleanup */ setenv("TPM2_PKCS11_STORE", ":memory:", 1); set_default_tpm(); CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); CK_SLOT_ID slot_list; CK_ULONG count = 1; rv = C_GetSlotList(0, &slot_list, &count); assert_int_equal(rv, CKR_OK); assert_int_not_equal(count, 0); CK_BYTE label[32] = " my label"; rv = C_InitToken(slot_list, (CK_BYTE_PTR)"mysopin", 7, label); assert_int_equal(rv, CKR_OK); rv = C_OpenSession(slot_list, CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &_session); assert_int_equal(rv, CKR_OK); rv = C_Login(_session, CKU_SO, (CK_BYTE_PTR)"mysopin", 7); assert_int_equal(rv, CKR_OK); rv = C_InitPIN(_session, (CK_BYTE_PTR)"myuserpin", 9); assert_int_equal(rv, CKR_OK); return 0; } static int teardown(void **state) { UNUSED(state); set_default_tpm(); CK_RV rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); return 0; } static void test(void **state) { UNUSED(state); set_default_tpm(); /* FUZZ TARGET C_InitPIN pin */ CK_RV rv = C_SetPIN(_session, (CK_BYTE_PTR)"mysopin", 7, (CK_BYTE_PTR)_data, _size); /* it should never fail, all pins are ok */ assert_int_equal(rv, CKR_OK); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { _size = size; _data = data; const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test, setup, teardown), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.9.1/test/fuzz/utils-ctx-unwrap-objauth.c0000644000175100017510000000414014535673717016231 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include #include #include #include #include #include #include #include #include #include #include "token.h" #include "twist.h" #include "utils.h" static const uint8_t *_data = NULL; static size_t _size = 0; /* * We want to target malicious DB injection. If someone points us to a store, * where data is malformed, we want to tolerate that. * * Generally 3 things come from the db in wild formats: * 1. attributes in yaml * 2. wrapped object auths (immediately handed to twistbin_new()) * 3. Public and Private TPM blobs * * This test aims to check issue 2. * * Sample Good Corpus with key below: * 05271d7286bfb46667a6ed2c:aa1f228f9925ac9694663d0b20dc5526:a8b8b5487e1abe7585458e88c8c7e82dc8c1f40d7bb0c6776a3895ecf75d240b * * Define CORPUS_TEST to test it. */ static void test(void **state) { UNUSED(state); #ifdef CORPUS_TEST char *e = "05271d7286bfb46667a6ed2c:aa1f228f9925ac9694663d0b20dc5526:a8b8b5487e1abe7585458e88c8c7e82dc8c1f40d7bb0c6776a3895ecf75d240b"; _data = (uint8_t *)e; _size = strlen(e); #endif /* we just need an AES key, any key will work */ twist wrappingkey = twistbin_unhexlify("6ef4c48c59793d6f004dbf4de399e643b627031a4bfd352b660fadaced95c9b4"); assert_non_null(wrappingkey); twist wrapped = twistbin_new(_data, _size); assert_non_null(wrapped); twist unwrapped = NULL; /* * under the hood this expects very specifically formatted hex data, make sure that code * doesn't blow up */ CK_RV rv = utils_ctx_unwrap_objauth(wrappingkey, wrapped, &unwrapped); #ifdef CORPUS_TEST assert_int_equal(rv, CKR_OK); #else UNUSED(rv); #endif twist_free(wrappingkey); twist_free(wrapped); twist_free(unwrapped); } int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { _data = data; _size = size; const struct CMUnitTest tests[] = { cmocka_unit_test(test), }; cmocka_run_group_tests(tests, NULL, NULL); return 0; } tpm2-pkcs11-1.9.1/test/fuzz/yaml-parser.fuzz.c0000644000175100017510000000130614535673717014563 /* SPDX-License-Identifier: BSD-2-Clause */ #include "config.h" #include "debug.h" /* * Drop WEAK or the parse_attributes_from_string is NULL * This command below will be empty without this. I am not * 100% sure why its not getting resolved properly, but this * fixes it for now. * nm --defined ./test/fuzz/yaml-parser.fuzz | grep parse 00000000005558d0 T parse_attributes_from_string */ #undef WEAK #define WEAK #include #include #include "attrs.h" #include "parser.h" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { attr_list *attrs = NULL; parse_attributes_from_string(data, size, &attrs); attr_list_free(attrs); return 0; } tpm2-pkcs11-1.9.1/test/integration/0000755000175100017510000000000014674407116012563 5tpm2-pkcs11-1.9.1/test/integration/PKCS11JavaTests.java0000644000175100017510000001106414535673717016107 import java.io.ByteArrayInputStream; import java.io.InputStream; /* Introspection to support Java < 9 */ import java.lang.reflect.Constructor; import java.lang.reflect.Method; import java.nio.file.Path; import java.nio.file.Paths; import java.security.Key; import java.security.KeyStore; import java.security.PrivateKey; import java.security.Provider; import java.security.PublicKey; import java.security.Security; import java.security.Signature; import java.security.cert.X509Certificate; import javax.crypto.Cipher; import org.junit.Assert; import org.junit.BeforeClass; import org.junit.Test; import org.junit.runner.JUnitCore; import org.junit.runner.Result; import org.junit.runner.notification.Failure; public class PKCS11JavaTests { static final String PIN = "myuserpin"; static final String KEY_ALIAS = "rsa1"; static KeyStore KEY_STORE; static Provider PROV; @BeforeClass public static void beforeAllTestMethods() throws Exception { /* * Generate a new provider to use the SUNPKCS11 module * */ String cwd = System.getProperty("user.dir"); Path libPath = Paths.get(cwd, "src/.libs/libtpm2_pkcs11.so.0.0.0"); String version = System.getProperty("java.version"); /* Parse for example "11.0.11" or "17-ea" */ String [] chunks = version.split("[\\.-]"); int major = Integer.parseInt(chunks[0]); if (major >= 9) { /* Java >= 9 */ Method configure = Provider.class.getMethod("configure", String.class); String pkcs11Config = "--name = TPM2\nlibrary = " + libPath; PROV = Security.getProvider("SunPKCS11"); PROV = (Provider) configure.invoke(PROV, pkcs11Config); } else { /* Java <= 8 */ Constructor SunPKCS11 = Class.forName("sun.security.pkcs11.SunPKCS11").getConstructor(InputStream.class); String pkcs11Config = "name = TPM2\nlibrary = " + libPath; ByteArrayInputStream confStream = new ByteArrayInputStream(pkcs11Config.getBytes()); PROV = (Provider) SunPKCS11.newInstance(confStream); } /* add the provider */ Security.addProvider(PROV); /* Generate a keystore from the provider */ KEY_STORE = KeyStore.getInstance("PKCS11-TPM2"); KeyStore.PasswordProtection pp = new KeyStore.PasswordProtection(PIN.toCharArray()); KEY_STORE.load(null, pp.getPassword()); } @Test public void test_rsa_crypto() throws Exception { /* Get the key/cert pair */ Key rsaKey = KEY_STORE.getKey(KEY_ALIAS, null); Assert.assertEquals("RSA", rsaKey.getAlgorithm()); X509Certificate certificate = (X509Certificate) KEY_STORE.getCertificate(KEY_ALIAS); /* get the public key from the cert */ Key rsaPublicKey = certificate.getPublicKey(); /* Encrypt public decrypt private */ Cipher cipher = Cipher.getInstance("RSA/ECB/PKCS1Padding", PROV); String plaintext = "mysecretdata"; byte[] plainData = plaintext.getBytes("UTF-8"); cipher.init(Cipher.ENCRYPT_MODE, rsaPublicKey); byte[] encryptedData = cipher.doFinal(plainData); cipher.init(Cipher.DECRYPT_MODE, rsaKey); int output = cipher.getOutputSize(encryptedData.length); byte[] decryptedData = cipher.doFinal(encryptedData); Assert.assertArrayEquals(plainData, decryptedData); /* Encrypt private decrypt public */ cipher.init(Cipher.ENCRYPT_MODE, rsaKey); encryptedData = cipher.doFinal(plainData); cipher.init(Cipher.DECRYPT_MODE, rsaPublicKey); output = cipher.getOutputSize(encryptedData.length); decryptedData = cipher.doFinal(encryptedData); } @Test public void test_signverify_signature() throws Exception { /* Get the key/cert pair */ Key rsaKey = KEY_STORE.getKey(KEY_ALIAS, null); Assert.assertEquals("RSA", rsaKey.getAlgorithm()); X509Certificate certificate = (X509Certificate) KEY_STORE.getCertificate(KEY_ALIAS); /* get the public key from the cert */ Key rsaPublicKey = certificate.getPublicKey(); /* Sign private Verify public */ Signature signature = Signature.getInstance("SHA256withRSA", PROV); String plaintext = "mysecretdata"; byte[] plainData = plaintext.getBytes("UTF-8"); signature.initSign((PrivateKey) rsaKey); signature.update(plainData); byte[] signedData = signature.sign(); signature.initVerify((PublicKey) rsaPublicKey); signature.update(plainData); boolean retSignature = signature.verify(signedData); Assert.assertTrue(retSignature); } public static void main(String[] args) { int rc = 1; Result result = JUnitCore.runClasses(PKCS11JavaTests.class); if (result.wasSuccessful()) { rc = 0; System.out.println("Success"); } else { System.out.println("Failed"); } for (Failure failure : result.getFailures()) { System.out.println(failure.toString()); } System.exit(rc); } } tpm2-pkcs11-1.9.1/test/integration/pkcs-crypt.int.c0000644000175100017510000016247614535673717015567 /* SPDX-License-Identifier: BSD-2-Clause */ #include "test.h" struct test_info { CK_SESSION_HANDLE handle; CK_SLOT_ID slot; struct { CK_OBJECT_HANDLE aes; CK_OBJECT_HANDLE aes_always_auth; struct { CK_OBJECT_HANDLE priv; CK_OBJECT_HANDLE pub; } rsa; } objects; }; static int test_setup(void **state) { test_info *info = calloc(1, sizeof(*info)); assert_non_null(info); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); /* open a session on slot 0 */ CK_SESSION_HANDLE handle; rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &handle); assert_int_equal(rv, CKR_OK); CK_BBOOL _false = FALSE; CK_BBOOL _true = TRUE; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_AES; CK_ATTRIBUTE tmpl[] = { {CKA_CLASS, &key_class, sizeof(key_class)}, {CKA_KEY_TYPE, &key_type, sizeof(key_type)}, {CKA_ALWAYS_AUTHENTICATE, &_false, sizeof(_false)}, }; user_login(handle); rv = C_FindObjectsInit(handle, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); /* get a AES key without always auth*/ CK_OBJECT_HANDLE objhandles[4]; rv = C_FindObjects(handle, &objhandles[0], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(handle); assert_int_equal(rv, CKR_OK); /* get an aes key with always auth */ tmpl[2].pValue = &_true; rv = C_FindObjectsInit(handle, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(handle, &objhandles[1], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(handle); assert_int_equal(rv, CKR_OK); /* get an rsa key */ key_class = CKO_PRIVATE_KEY; key_type = CKK_RSA; char _label[] = "rsa0"; CK_ATTRIBUTE tmpl_rsapriv[] = { {CKA_CLASS, &key_class, sizeof(key_class)}, {CKA_KEY_TYPE, &key_type, sizeof(key_type)}, {CKA_ALWAYS_AUTHENTICATE, &_false, sizeof(_false)}, {CKA_LABEL, _label, sizeof(_label) - 1}, }; rv = C_FindObjectsInit(handle, tmpl_rsapriv, ARRAY_LEN(tmpl_rsapriv)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(handle, &objhandles[2], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(handle); assert_int_equal(rv, CKR_OK); /* get an rsa public key */ key_class = CKO_PUBLIC_KEY; key_type = CKK_RSA; CK_ATTRIBUTE tmpl_rsapub[] = { {CKA_CLASS, &key_class, sizeof(key_class)}, {CKA_KEY_TYPE, &key_type, sizeof(key_type)}, {CKA_LABEL, _label, sizeof(_label) - 1}, }; rv = C_FindObjectsInit(handle, tmpl_rsapub, ARRAY_LEN(tmpl_rsapub)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(handle, &objhandles[3], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(handle); assert_int_equal(rv, CKR_OK); /* assign to state */ info->handle = handle; info->slot = slots[1]; info->objects.aes = objhandles[0]; info->objects.aes_always_auth = objhandles[1]; info->objects.rsa.priv = objhandles[2]; info->objects.rsa.pub = objhandles[3]; *state = info; /* success */ return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_Logout(ti->handle); assert_int_equal(rv, CKR_OK); rv = C_CloseSession(ti->handle); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_aes_encrypt_decrypt_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); /* part 1 */ CK_ULONG ciphertext_len = 16; rv = C_EncryptUpdate(session, plaintext, 16, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); /* part 2 */ ciphertext_len = 16; rv = C_EncryptUpdate(session, plaintext, 16, &ciphertext[16], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); /* final, shouldn't have anything left over */ CK_BYTE final = 0; CK_ULONG final_len = 0; rv = C_EncryptFinal(session, &final, &final_len); assert_int_equal(rv, CKR_OK); assert_int_equal(final_len, 0); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(plaintext)]; CK_ULONG plaintext2_len = ciphertext_len = 16; rv = C_DecryptUpdate (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); rv = C_DecryptUpdate (session, &ciphertext[ciphertext_len], ciphertext_len, &plaintext2[plaintext2_len], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); rv = C_DecryptFinal (session, &final, &final_len); assert_int_equal(rv, CKR_OK); assert_int_equal(final_len, 0); assert_int_equal(plaintext2_len, 16); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_encrypt_decrypt_5_2_returns(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); /* get buffer size on NULL case */ CK_ULONG tmp = 42; // something not 16 to help verify it's ignored rv = C_EncryptUpdate(session, plaintext, 16, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, 16); /* get buffer size on CKR_BUFFER_TOO_SMALL case */ tmp--; rv = C_EncryptUpdate(session, plaintext, 16, ciphertext, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, 16); /* part 1 */ unsigned long ciphertext_len = 16; rv = C_EncryptUpdate(session, plaintext, 16, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); /* part 2 */ ciphertext_len = 16; rv = C_EncryptUpdate(session, plaintext, 16, &ciphertext[16], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); /* final, shouldn't have anything left over */ CK_BYTE final; CK_ULONG final_len = 0; rv = C_EncryptFinal(session, &final, &final_len); assert_int_equal(rv, CKR_OK); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]; unsigned long plaintext2_len = ciphertext_len = 16; /* figure out buffer size via NULL*/ tmp = 42; rv = C_DecryptUpdate (session, ciphertext, ciphertext_len, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, plaintext2_len); /* figure out buffer size via CKR_BUFFER_TOO_SMALL*/ tmp--; rv = C_DecryptUpdate (session, ciphertext, ciphertext_len, plaintext2, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); /* do decrypt */ assert_int_equal(tmp, plaintext2_len); rv = C_DecryptUpdate (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); rv = C_DecryptUpdate (session, &ciphertext[ciphertext_len], ciphertext_len, &plaintext2[plaintext2_len], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); rv = C_DecryptFinal (session, &final, &final_len); assert_int_equal(rv, CKR_OK); assert_int_equal(final_len, 0); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_encrypt_decrypt_oneshot_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); /* part 1 */ CK_ULONG ciphertext_len = sizeof(plaintext); rv = C_Encrypt(session, plaintext, ciphertext_len, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(plaintext)); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(plaintext)]; CK_ULONG plaintext2_len = sizeof(plaintext2); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_encrypt_decrypt_oneshot_5_2_returns(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG plaintext_len = sizeof(plaintext); /* NULL size */ CK_ULONG tmp = 42; rv = C_Encrypt(session, plaintext, plaintext_len, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, sizeof(plaintext)); /* CKR_BUFFER_TOO_SMALL */ tmp--; rv = C_Encrypt(session, plaintext, plaintext_len, ciphertext, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, sizeof(plaintext)); /* part 1 */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_Encrypt(session, plaintext, ciphertext_len, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(plaintext)); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]; unsigned long plaintext2_len = sizeof(plaintext2); /* NULL size */ tmp = 42; rv = C_Decrypt (session, ciphertext, ciphertext_len, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, sizeof(plaintext2)); /* CKR_BUFFER_TOO_SMALL size */ tmp--; rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, sizeof(plaintext2)); /* good size */ rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } #define MGF1_LABEL "mylabel" static void test_rsa_oaep_encrypt_decrypt_oneshot_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_RSA_PKCS_OAEP_PARAMS params = { .hashAlg = CKM_SHA256, .pSourceData = MGF1_LABEL, .ulSourceDataLen = sizeof(MGF1_LABEL), // include NULL byte .source = CKZ_DATA_SPECIFIED, .mgf = CKG_MGF1_SHA256 }; CK_MECHANISM mechanism = { CKM_RSA_PKCS_OAEP, ¶ms, sizeof(params) }; CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; /* size of RSA 2048 modulus length */ CK_BYTE ciphertext[256] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.rsa.pub); assert_int_equal(rv, CKR_OK); /* part 1 */ CK_ULONG ciphertext_len = sizeof(ciphertext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); rv = C_DecryptInit (session, &mechanism, ti->objects.rsa.priv); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(ciphertext)]; CK_ULONG plaintext2_len = sizeof(plaintext2); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext)); /* retry with SHA1 */ params.hashAlg = CKM_SHA_1; params.mgf = CKG_MGF1_SHA1; rv = C_EncryptInit(session, &mechanism, ti->objects.rsa.pub); assert_int_equal(rv, CKR_OK); /* part 1 */ rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); rv = C_DecryptInit (session, &mechanism, ti->objects.rsa.priv); assert_int_equal(rv, CKR_OK); plaintext2_len = sizeof(plaintext2); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext)); } static void test_aes_always_authenticate(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_RV rv = C_Logout(session); assert_int_equal(rv, CKR_OK); /* context specific require C_Login(USER) before */ context_login_expects(session, CKR_USER_NOT_LOGGED_IN); user_login(session); /* should be able to initialize operation */ /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ rv = C_EncryptInit(session, &mechanism, ti->objects.aes_always_auth); assert_int_equal(rv, CKR_OK); /* shouldn't be able to perform actual operation */ CK_ULONG ciphertext_len = sizeof(plaintext); rv = C_Encrypt(session, plaintext, ciphertext_len, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_USER_NOT_LOGGED_IN); /* bad pin should fail */ context_login_bad_pin(session); /* ok log in and go */ context_login(session); rv = C_Encrypt(session, plaintext, ciphertext_len, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(plaintext)); rv = C_DecryptInit (session, &mechanism, ti->objects.aes_always_auth); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(plaintext)]; CK_ULONG plaintext2_len = sizeof(plaintext2); /* shouldn't work */ rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_USER_NOT_LOGGED_IN); context_login(session); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_cert_no_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS obj_class = CKO_CERTIFICATE; CK_KEY_TYPE cert_type = CKC_X_509; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &obj_class, sizeof(obj_class) }, { CKA_CERTIFICATE_TYPE, &cert_type, sizeof(cert_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); /* Find a cert */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; rv = C_EncryptInit(session, &mechanism, objhandles[0]); assert_int_equal(rv, CKR_KEY_HANDLE_INVALID); rv = C_DecryptInit(session, &mechanism, objhandles[0]); assert_int_equal(rv, CKR_KEY_HANDLE_INVALID); } static void test_rsa_x509_encrypt_decrypt_oneshot_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_MECHANISM mechanism = { CKM_RSA_X_509, NULL, 0 }; /* size of RSA 2048 modulus length */ CK_BYTE ciphertext[256] = { 0 }; CK_BYTE plaintext[256] = { 0 }; const char *secret= "my secret is cool"; /* * PKCS11 guidance for ra wRSA is to prepend message with 0's */ size_t len = strlen(secret); memcpy(&plaintext[sizeof(plaintext) - len], secret, len); /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.rsa.priv); assert_int_equal(rv, CKR_OK); /* part 1 */ CK_ULONG ciphertext_len = sizeof(ciphertext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); rv = C_DecryptInit (session, &mechanism, ti->objects.rsa.pub); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(ciphertext)]; CK_ULONG plaintext2_len = sizeof(plaintext2); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); /* after decrypt we need to undo the padding */ assert_memory_equal(&plaintext2[plaintext2_len - len], secret, len); } static void test_rsa_pkcs_encrypt_decrypt_public_5_2_returns_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_MECHANISM mechanism = { CKM_RSA_PKCS, NULL, 0 }; CK_BYTE plaintext[] = { 'm', 'y', ' ', 's', 'e', 'c', 'r', 'e', 't', ' ', 'i', 's', 'c', 'o', 'o', 'l', }; /* size of RSA 2048 modulus length */ CK_BYTE ciphertext[256] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.rsa.pub); assert_int_equal(rv, CKR_OK); /* get size */ CK_ULONG ciphertext_len = 42; rv = C_Encrypt(session, plaintext, sizeof(plaintext), NULL, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_not_equal(ciphertext_len, 42); /* do encryption */ rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); /* plaintext should not match ciphertext */ assert_true(sizeof(plaintext) < ciphertext_len); assert_memory_not_equal(plaintext, ciphertext, sizeof(plaintext)); rv = C_DecryptInit (session, &mechanism, ti->objects.rsa.priv); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(ciphertext)]; CK_ULONG plaintext2_len = sizeof(plaintext2); rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); assert_memory_equal(plaintext2, plaintext, sizeof(plaintext)); } static void test_aes_big_blockboundary_buffer_encrypt_decrypt_oneshot_5_2_returns(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[1048576] = { 0 }; size_t i; /* * for each block memset it to a value so we get each block separated * makes looking at it easier. * */ uint8_t value = 0; for(i=0; i < sizeof(plaintext)/16; i++) { memset(&plaintext[i*16], value, 16); /* intentionally wanting rollover */ value++; } CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG plaintext_len = sizeof(plaintext); /* NULL size */ CK_ULONG tmp = 42; rv = C_Encrypt(session, plaintext, plaintext_len, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, sizeof(plaintext)); /* CKR_BUFFER_TOO_SMALL */ tmp--; rv = C_Encrypt(session, plaintext, plaintext_len, ciphertext, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, sizeof(plaintext)); /* part 1 */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_Encrypt(session, plaintext, ciphertext_len, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(plaintext)); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]; unsigned long plaintext2_len = sizeof(plaintext2); /* NULL size */ tmp = 42; rv = C_Decrypt (session, ciphertext, ciphertext_len, NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, sizeof(plaintext2)); /* CKR_BUFFER_TOO_SMALL size */ tmp--; rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, sizeof(plaintext2)); /* good size */ rv = C_Decrypt (session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } /* * This tests that 3 blocks of plaintext encrypted and decrypted * via C_EncryptUpdate and C_DecryptUpdate calls work as expected. */ static void test_aes_cbc_non_block_boundary_plaintext(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext[48] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48 }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG counter = 0; CK_ULONG offset = 0; /* less than a block */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_EncryptUpdate(session, plaintext, 15, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); counter += ciphertext_len; offset += 15; /* add a block, 31 bytes should return a single block of 16 bytes */ ciphertext_len = sizeof(plaintext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 16, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; offset += 16; /* add remaining 17 bytes with 15 bytes in the internal state buffer should yield 32 */ ciphertext_len = sizeof(plaintext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 17, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 32); counter += ciphertext_len; offset += 17; /* plain text should be exhausted at this point */ assert_int_equal(offset, sizeof(plaintext)); /* cipher text should be fully acquired at this point (AES CBC mode) */ assert_int_equal(counter, sizeof(ciphertext)); /* * call final to get the last remaining block, * which in AES CBC mode shouldn't have one */ ciphertext_len = 42; rv = C_EncryptFinal(session, NULL, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); /* * call it again with a buffer to finish the operation * This shouldn't change the contents of ciphertext buffer, * so pass it in so we can detect bugs where we mutate the * contents. */ static const CK_BYTE all_zeros[sizeof(ciphertext)] = { 0 }; CK_BYTE tmp[sizeof(ciphertext)] = { 0 }; rv = C_EncryptFinal(session, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); assert_memory_equal(tmp, all_zeros, sizeof(all_zeros)); /* now do something wonky for decrypt crossing boundaries in weird ways */ counter = 0; offset = 0; rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]= { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); /* go one past the block boundary */ rv = C_DecryptUpdate (session, ciphertext, 17, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 17; /* add less than a block, 1 byte on internal buffer */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 14, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 14; /* 15 bytes on internal buffer, add a block, 1 byte remains */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 16, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 16; /* 15 bytes on internal buffer, add remaining byte, we should get a block back */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 1, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 1; rv = C_DecryptFinal(session, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); /* we should have decrypted ALL of the ciphertext */ assert_int_equal(offset, sizeof(ciphertext)); /* we should have acquired all the plaintext */ assert_int_equal(counter, sizeof(plaintext2)); /* the original plaintext and the decrypted plaintext should match */ assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_cbc_non_block_boundary_plaintext_bad(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; CK_BYTE plaintext[36] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36 }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned long ciphertext_len = sizeof(plaintext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_DATA_LEN_RANGE); } static void test_aes_0_bytes(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC, iv, sizeof(iv) }; /* * We're not dealing with padding schemes yet, but we do want to handle multi stage encrypt and decrypt. */ CK_BYTE plaintext = 0; CK_BYTE ciphertext = 0; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG ciphertext_len = 0; rv = C_EncryptUpdate(session, &plaintext, 0, &ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); /* * call final to get the last remaining block, * which in AES CBC mode shouldn't have one */ ciphertext_len = 42; rv = C_EncryptFinal(session, NULL, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); rv = C_EncryptFinal(session, &ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); } static void test_aes_cbc_pad_issue730(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC_PAD, iv, sizeof(iv) }; CK_BYTE plaintext[17] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17 }; /* encrypt init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned long ciphertext_len = 0; rv = C_Encrypt(session, plaintext, sizeof(plaintext), NULL, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 32); CK_BYTE ciphertext[32] = { 0 }; rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); /* decrypt init */ rv = C_DecryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(plaintext)] = { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); rv = C_Decrypt(session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext2, plaintext, sizeof(plaintext2)); } static void test_aes_cbc_pad_small_oneshot(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC_PAD, iv, sizeof(iv) }; CK_BYTE plaintext[15] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 }; CK_BYTE ciphertext[sizeof(plaintext) + 1] = { 0 }; /* encrypt init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned long ciphertext_len = sizeof(ciphertext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); /* decrypt init */ rv = C_DecryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(plaintext)] = { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); rv = C_Decrypt(session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext2)); assert_memory_equal(plaintext2, plaintext, sizeof(plaintext2)); } static void test_aes_cbc_pad_multiple_blocks(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC_PAD, iv, sizeof(iv) }; CK_BYTE plaintext[48] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48 }; /* +16 for the all padding block of AES CBC mode */ CK_BYTE ciphertext[sizeof(plaintext) + 16] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG counter = 0; CK_ULONG offset = 0; /* less than a block */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_EncryptUpdate(session, plaintext, 15, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); counter += ciphertext_len; offset += 15; /* add a block, 31 bytes should return a single block of 16 bytes */ ciphertext_len = sizeof(ciphertext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 16, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; offset += 16; /* add remaining 17 bytes with 15 bytes in the internal state buffer should yield 32 */ ciphertext_len = sizeof(ciphertext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 17, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 32); counter += ciphertext_len; offset += 17; /* plain text should be exhausted at this point */ assert_int_equal(offset, sizeof(plaintext)); /* * Do a 5.2 Style call for size * call final to get the last remaining block, * which in AES CBC PAD mode should have one. */ CK_ULONG tmp_len = 12; rv = C_EncryptFinal(session, NULL, &tmp_len); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp_len, 16); /* finish the operation, should have 16 bytes left in cipher text buffer */ ciphertext_len = sizeof(ciphertext) - counter; assert_int_equal(ciphertext_len, 16); rv = C_EncryptFinal(session, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; /* cipher text should be fully acquired at this point (AES CBC mode) */ assert_int_equal(counter, sizeof(ciphertext)); /* now do something wonky for decrypt crossing boundaries in weird ways */ counter = 0; offset = 0; rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]= { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); /* go one past the block boundary */ rv = C_DecryptUpdate (session, ciphertext, 17, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 17; /* add less than a block, 1 byte on internal buffer */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 14, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 14; /* 15 bytes on internal buffer, add a block, 1 byte remains */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 16, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 16; /* * 15 bytes on internal buffer, add remaining byte, CBC PAD mode needs to retain 1 block * during decrypt if their is no extra data (ie on block boundary) as it may need to strip * padding off the last block */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 1, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 1; /* * Add half of the remaining block of padding, this should cause * a block to be returned */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 8, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 8; /* * add the remaining 1/2 block. Its holding back a block on Decrypt, * so nothing will be returned as their is only 1 block in the internal * state buffer. */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 8, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 8; /* we should have decrypted ALL of the ciphertext */ assert_int_equal(offset, sizeof(ciphertext)); /* * Get the remaining block, since this is a block boundary, the final block * should get stripped as padding. */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptFinal(session, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; /* we should have acquired all the plaintext */ assert_int_equal(counter, sizeof(plaintext2)); /* the original plaintext and the decrypted plaintext should match */ assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_cbc_pad_multiple_blocks_with_extra(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_BYTE iv[16] = { 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, 0xDE, 0xAD, 0xBE, 0xEF, }; CK_MECHANISM mechanism = { CKM_AES_CBC_PAD, iv, sizeof(iv) }; CK_BYTE plaintext[38] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38 }; /* +10 for the padding on the final block of AES CBC mode */ CK_BYTE ciphertext[sizeof(plaintext) + 10] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG counter = 0; CK_ULONG offset = 0; /* less than a block */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_EncryptUpdate(session, plaintext, 15, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); counter += ciphertext_len; offset += 15; // is 15 /* add a block, 31 bytes should return a single block of 16 bytes */ ciphertext_len = sizeof(ciphertext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 16, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; offset += 16; // is 31 /* * add remaining 7 bytes with 15 bytes in the internal state buffer should 22 * Since their is extra data, we should get a block back */ ciphertext_len = sizeof(ciphertext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 7, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; offset += 7; // is 38 /* plain text should be exhausted at this point */ assert_int_equal(offset, sizeof(plaintext)); /* * Do a 5.2 Style call for size * call final to get the last remaining block, * which in AES CBC PAD mode should have one. */ CK_ULONG tmp_len = 12; rv = C_EncryptFinal(session, NULL, &tmp_len); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp_len, 16); /* finish the operation, should have 16 bytes left in cipher text buffer */ ciphertext_len = sizeof(ciphertext) - counter; assert_int_equal(ciphertext_len, 16); rv = C_EncryptFinal(session, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; /* cipher text should be fully acquired at this point (AES CBC mode) */ assert_int_equal(counter, sizeof(ciphertext)); /* now do something wonky for decrypt crossing boundaries in weird ways */ counter = 0; offset = 0; rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]= { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); /* go one past the block boundary */ rv = C_DecryptUpdate (session, ciphertext, 17, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 17; //17 /* add less than a block, 1 byte on internal buffer */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 14, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 14; // 31 /* * 15 bytes on internal buffer, add remaining 17 bytes. * We should get one block back since their will now * be an extra block of extra data on internal buffer since * it gets held to final on decrypt. */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 17, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 17; // 48 /* we should have decrypted ALL of the ciphertext */ assert_int_equal(offset, sizeof(ciphertext)); /* * Get the remaining block, since this is a block boundary, the final block * should get 10 bytes stripped as padding. */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptFinal(session, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 6); counter += plaintext2_len; /* we should have acquired all the plaintext */ assert_int_equal(counter, sizeof(plaintext2)); /* the original plaintext and the decrypted plaintext should match */ assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_ctr_multiple_blocks(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_AES_CTR_PARAMS params = { .ulCounterBits = sizeof(params.cb) * 8, /* initialize the counter to something other than 0 */ .cb = { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, } }; CK_MECHANISM mechanism = { CKM_AES_CTR, ¶ms, sizeof(params) }; CK_BYTE plaintext[48] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48 }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); CK_ULONG counter = 0; CK_ULONG offset = 0; /* less than a block */ unsigned long ciphertext_len = sizeof(plaintext); rv = C_EncryptUpdate(session, plaintext, 15, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); counter += ciphertext_len; offset += 15; /* add a block, 31 bytes should return a single block of 16 bytes */ ciphertext_len = sizeof(plaintext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 16, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 16); counter += ciphertext_len; offset += 16; /* add remaining 17 bytes with 15 bytes in the internal state buffer should yield 32 */ ciphertext_len = sizeof(plaintext) - counter; rv = C_EncryptUpdate(session, &plaintext[offset], 17, &ciphertext[counter], &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 32); counter += ciphertext_len; offset += 17; /* plain text should be exhausted at this point */ assert_int_equal(offset, sizeof(plaintext)); /* cipher text should be fully acquired at this point (AES CTR mode) */ assert_int_equal(counter, sizeof(ciphertext)); /* * call final to get the last remaining block, * which in AES CTR mode shouldn't have one */ ciphertext_len = 42; rv = C_EncryptFinal(session, NULL, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); /* * call it again with a buffer to finish the operation * This shouldn't change the contents of ciphertext buffer, * so pass it in so we can detect bugs where we mutate the * contents. */ static const CK_BYTE all_zeros[sizeof(ciphertext)] = { 0 }; CK_BYTE tmp[sizeof(ciphertext)] = { 0 }; rv = C_EncryptFinal(session, ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); assert_memory_equal(tmp, all_zeros, sizeof(all_zeros)); /* now do something wonky for decrypt crossing boundaries in weird ways */ counter = 0; offset = 0; rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]= { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); /* go one past the block boundary */ rv = C_DecryptUpdate (session, ciphertext, 17, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 17; /* add less than a block, 1 byte on internal buffer */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 14, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 0); counter += plaintext2_len; offset += 14; /* 15 bytes on internal buffer, add a block, 1 byte remains */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 16, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 16; /* 15 bytes on internal buffer, add remaining byte, we should get a block back */ plaintext2_len = sizeof(plaintext) - counter; rv = C_DecryptUpdate (session, &ciphertext[offset], 1, &plaintext2[counter], &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, 16); counter += plaintext2_len; offset += 1; rv = C_DecryptFinal(session, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, 0); /* we should have decrypted ALL of the ciphertext */ assert_int_equal(offset, sizeof(ciphertext)); /* we should have acquired all the plaintext */ assert_int_equal(counter, sizeof(plaintext2)); /* the original plaintext and the decrypted plaintext should match */ assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_ctr_one_block_oneshot(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_AES_CTR_PARAMS params = { .ulCounterBits = sizeof(params.cb) * 8, /* initialize the counter to something other than 0 */ .cb = { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, } }; CK_MECHANISM mechanism = { CKM_AES_CTR, ¶ms, sizeof(params) }; CK_BYTE plaintext[16] = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16 }; CK_BYTE ciphertext[sizeof(plaintext)] = { 0 }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned long ciphertext_len = sizeof(ciphertext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); assert_int_equal(ciphertext_len, sizeof(ciphertext)); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_OK); unsigned char plaintext2[sizeof(plaintext)]= { 0 }; unsigned long plaintext2_len = sizeof(plaintext2); /* go one past the block boundary */ rv = C_Decrypt (session, ciphertext, sizeof(ciphertext), plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); /* the original plaintext and the decrypted plaintext should match */ assert_memory_equal(plaintext, plaintext2, sizeof(plaintext2)); } static void test_aes_ctr_bad_counter_size(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* init encryption */ CK_AES_CTR_PARAMS params = { .ulCounterBits = 12, /* initialize the counter to something other than 0 */ .cb = { 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 0, 0, 0, } }; CK_MECHANISM mechanism = { CKM_AES_CTR, ¶ms, sizeof(params) }; /* init */ CK_RV rv = C_EncryptInit(session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_MECHANISM_PARAM_INVALID); rv = C_DecryptInit (session, &mechanism, ti->objects.aes); assert_int_equal(rv, CKR_MECHANISM_PARAM_INVALID); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_aes_always_authenticate, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_encrypt_decrypt_oneshot_5_2_returns, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_encrypt_decrypt_5_2_returns, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_encrypt_decrypt_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_encrypt_decrypt_oneshot_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_oaep_encrypt_decrypt_oneshot_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_cert_no_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_x509_encrypt_decrypt_oneshot_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_pkcs_encrypt_decrypt_public_5_2_returns_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_big_blockboundary_buffer_encrypt_decrypt_oneshot_5_2_returns, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_big_blockboundary_buffer_encrypt_decrypt_oneshot_5_2_returns, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_non_block_boundary_plaintext, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_0_bytes, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_non_block_boundary_plaintext_bad, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_pad_small_oneshot, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_pad_issue730, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_pad_multiple_blocks, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_cbc_pad_multiple_blocks_with_extra, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_ctr_multiple_blocks, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_ctr_one_block_oneshot, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_aes_ctr_bad_counter_size, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.9.1/test/integration/test.c0000644000175100017510000003362214535673717013644 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include "attrs.h" #include "test.h" test_info *test_info_from_state(void **state) { return (test_info *)*state; } int group_setup(void **state) { UNUSED(state); /* Initialize the library */ CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); return 0; } int group_setup_locking(void **state) { UNUSED(state); /* * Run these tests with locking enabled */ CK_C_INITIALIZE_ARGS args = { .CreateMutex = NULL, .DestroyMutex = NULL, .LockMutex = NULL, .UnlockMutex = NULL, .flags = CKF_OS_LOCKING_OK }; CK_RV rv = C_Initialize(&args); assert_int_equal(rv, CKR_OK); return 0; } int group_teardown(void **state) { UNUSED(state); /* Finalize the library */ CK_RV rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); return 0; } void logout_expects(CK_SESSION_HANDLE handle, CK_RV expected) { CK_RV rv = C_Logout(handle); assert_int_equal(rv, expected); } void logout(CK_SESSION_HANDLE handle) { logout_expects(handle, CKR_OK); } void login_expects(CK_SESSION_HANDLE handle, CK_USER_TYPE user_type, CK_RV expected, unsigned char *pin, CK_ULONG len) { CK_RV rv = C_Login(handle, user_type, pin, len); assert_int_equal(rv, expected); } void user_login_expects(CK_SESSION_HANDLE handle, CK_RV expected) { unsigned char upin[] = GOOD_USERPIN; login_expects(handle, CKU_USER, expected, upin, sizeof(upin) - 1); } void user_login_bad_pin(CK_SESSION_HANDLE handle) { unsigned char upin[] = BAD_USERPIN; login_expects(handle, CKU_USER, CKR_PIN_INCORRECT, upin, sizeof(upin) - 1); } void user_login(CK_SESSION_HANDLE handle) { user_login_expects(handle, CKR_OK); } void context_login_expects(CK_SESSION_HANDLE handle, CK_RV expected) { unsigned char upin[] = GOOD_USERPIN; login_expects(handle, CKU_CONTEXT_SPECIFIC, expected, upin, sizeof(upin) - 1); } void context_login(CK_SESSION_HANDLE handle) { unsigned char upin[] = GOOD_USERPIN; login_expects(handle, CKU_CONTEXT_SPECIFIC, CKR_OK, upin, sizeof(upin) - 1); } void context_login_bad_pin(CK_SESSION_HANDLE handle) { unsigned char upin[] = BAD_USERPIN; login_expects(handle, CKU_CONTEXT_SPECIFIC, CKR_PIN_INCORRECT, upin, sizeof(upin) - 1); } void so_login_expects(CK_SESSION_HANDLE handle, CK_RV expected) { unsigned char sopin[] = GOOD_SOPIN; login_expects(handle, CKU_SO, expected, sopin, sizeof(sopin) - 1); } void so_login(CK_SESSION_HANDLE handle) { so_login_expects(handle, CKR_OK); } void so_login_bad_pin(CK_SESSION_HANDLE handle) { unsigned char sopin[] = BAD_SOPIN; login_expects(handle, CKU_SO, CKR_PIN_INCORRECT, sopin, sizeof(sopin) - 1); } void get_keypair(CK_SESSION_HANDLE session, CK_KEY_TYPE key_type, CK_OBJECT_HANDLE_PTR pub_handle, CK_OBJECT_HANDLE_PTR priv_handle) { assert_non_null(pub_handle); assert_non_null(priv_handle); CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_ATTRIBUTE priv_tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, priv_tmpl, ARRAY_LEN(priv_tmpl)); assert_int_equal(rv, CKR_OK); /* Find an RSA key priv at index 0 pub at index 1 */ CK_ULONG count; rv = C_FindObjects(session, priv_handle, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* got private now fnd public based on CKA_ID */ key_class = CKO_PUBLIC_KEY; CK_BYTE _tmp_buf[1024]; CK_ATTRIBUTE pub_tmpl[] = { { .type = CKA_ID, .ulValueLen = sizeof(_tmp_buf), .pValue = _tmp_buf }, { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; /* populate the CKA_ID field for the public object template */ rv = C_GetAttributeValue(session, *priv_handle, pub_tmpl, 1); assert_int_equal(rv, CKR_OK); /* use public template + CKA_ID to find proper public object */ rv = C_FindObjectsInit(session, pub_tmpl, ARRAY_LEN(pub_tmpl)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(session, pub_handle, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); } static void verify_missing_common_attrs_rsa(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h) { CK_BYTE tmp[3][256] = { 0 }; CK_ATTRIBUTE attrs[] = { ADD_ATTR_ARRAY(CKA_MODULUS, tmp[0]), ADD_ATTR_ARRAY(CKA_MODULUS_BITS, tmp[1]), ADD_ATTR_ARRAY(CKA_PUBLIC_EXPONENT, tmp[2]), }; CK_RV rv = C_GetAttributeValue(session, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_ULONG i; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch(a->type) { case CKA_MODULUS: { assert_int_not_equal(0, a->ulValueLen); assert_non_null(a->pValue); count++; } break; case CKA_MODULUS_BITS: { CK_ULONG v = 0; rv = attr_CK_ULONG(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, 2048); count++; } break; case CKA_PUBLIC_EXPONENT: assert_int_not_equal(0, a->ulValueLen); assert_non_null(a->pValue); count++; break; default: assert_true(0); } } assert_int_equal(count, ARRAY_LEN(attrs)); } void verify_missing_priv_attrs_rsa(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h) { verify_missing_common_attrs_rsa(session, h); } void verify_missing_pub_attrs_rsa(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h) { verify_missing_common_attrs_rsa(session, h); } static void test_ec_params(CK_ATTRIBUTE_PTR ecparams) { const unsigned char *p = ecparams->pValue; ASN1_OBJECT *a = d2i_ASN1_OBJECT(NULL, &p, ecparams->ulValueLen); assert_non_null(a); int nid = OBJ_obj2nid(a); ASN1_OBJECT_free(a); switch (nid) { case NID_X9_62_prime192v1: case NID_secp224r1: case NID_X9_62_prime256v1: case NID_secp384r1: case NID_secp521r1: break; default: fail_msg("Unsupported nid to tpm EC algorithm mapping, got nid: %d", nid); } } static void test_ec_point(CK_ATTRIBUTE_PTR ecpoint) { assert_int_not_equal(0, ecpoint->ulValueLen); assert_non_null(ecpoint->pValue); const unsigned char *pp = ecpoint->pValue; CK_ULONG len = ecpoint->ulValueLen; ASN1_OCTET_STRING *a = NULL; a = d2i_ASN1_OCTET_STRING(&a, &pp, len); assert_non_null(a); const unsigned char *d = ASN1_STRING_get0_data(a); /* first byte should be 04 for "uncompressed format" */ assert_int_equal(d[0], 0x4); /* TODO look at curve id and map to expected X and Y sizes */ ASN1_STRING_free(a); } void verify_missing_pub_attrs_ecc(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h) { CK_BYTE tmp[2][256] = { 0 }; CK_ATTRIBUTE attrs[] = { ADD_ATTR_ARRAY(CKA_EC_PARAMS, tmp[0]), ADD_ATTR_ARRAY(CKA_EC_POINT, tmp[1]), }; CK_RV rv = C_GetAttributeValue(session, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_ULONG i; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch(a->type) { /* TODO more robust checking here: * - They match what was expected in generation. */ case CKA_EC_PARAMS: test_ec_params(a); count++; break; case CKA_EC_POINT: // DER-encoding of ANSI X9.62 ECPoint value Q test_ec_point(a); count++; break; default: fail_msg("Unknown attribute type to test, got: %lu", a->type); } } assert_int_equal(count, ARRAY_LEN(attrs)); } void verify_missing_priv_attrs_ecc(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h) { CK_BYTE tmp[1][256] = { 0 }; CK_ATTRIBUTE attrs[] = { ADD_ATTR_ARRAY(CKA_EC_PARAMS, tmp[0]), }; CK_RV rv = C_GetAttributeValue(session, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_ULONG i; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch(a->type) { /* TODO more robust checking here: * - They match what was expected in generation. */ case CKA_EC_PARAMS: test_ec_params(a); count++; break; default: fail_msg("Unknown attribute type to test, got: %lu", a->type); } } assert_int_equal(count, ARRAY_LEN(attrs)); } void verify_missing_priv_attrs_common(CK_SESSION_HANDLE session, CK_KEY_TYPE keytype, CK_OBJECT_HANDLE h, CK_BBOOL extractable) { CK_BYTE tmp[10][256] = { 0 }; CK_ATTRIBUTE attrs[] = { ADD_ATTR_ARRAY(CKA_KEY_TYPE, tmp[0]), ADD_ATTR_ARRAY(CKA_CLASS, tmp[1]), ADD_ATTR_ARRAY(CKA_ALWAYS_SENSITIVE, tmp[2]), ADD_ATTR_ARRAY(CKA_EXTRACTABLE, tmp[3]), ADD_ATTR_ARRAY(CKA_NEVER_EXTRACTABLE, tmp[4]), ADD_ATTR_ARRAY(CKA_SIGN, tmp[5]), ADD_ATTR_ARRAY(CKA_DECRYPT, tmp[6]), ADD_ATTR_ARRAY(CKA_SIGN_RECOVER, tmp[7]), ADD_ATTR_ARRAY(CKA_UNWRAP, tmp[8]), ADD_ATTR_ARRAY(CKA_WRAP_WITH_TRUSTED, tmp[8]), ADD_ATTR_ARRAY(CKA_DERIVE, tmp[9]), }; CK_RV rv = C_GetAttributeValue(session, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_ULONG i; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch(a->type) { case CKA_KEY_TYPE: { CK_ULONG v = 0; rv = attr_CK_ULONG(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, keytype); count++; } break; case CKA_CLASS: { CK_ULONG v = 0; rv = attr_CK_ULONG(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, CKO_PRIVATE_KEY); count++; } break; case CKA_ALWAYS_SENSITIVE: { CK_BBOOL v = CK_FALSE; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, !extractable); count++; } break; case CKA_EXTRACTABLE: { CK_BBOOL v = CK_TRUE; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, extractable); count++; } break; case CKA_NEVER_EXTRACTABLE: { CK_BBOOL v = CK_FALSE; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, !extractable); count++; } break; case CKA_SIGN: /* fall-thru */ case CKA_DECRYPT: { CK_BBOOL v = CK_FALSE; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, CK_TRUE); count++; } break; case CKA_SIGN_RECOVER: /* fall-thru */ case CKA_WRAP_WITH_TRUSTED: /* fall-thru */ case CKA_DERIVE: /* fall-thru */ case CKA_UNWRAP: { CK_BBOOL v = CK_FALSE; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, CK_FALSE); count++; } break; default: fail_msg("Unknown attribute type to test, got: %lu", a->type); } } assert_int_equal(count, ARRAY_LEN(attrs)); } void verify_missing_pub_attrs_common(CK_SESSION_HANDLE session, CK_KEY_TYPE keytype, CK_OBJECT_HANDLE h) { CK_BYTE tmp[9][256] = { 0 }; CK_ATTRIBUTE attrs[] = { ADD_ATTR_ARRAY(CKA_KEY_TYPE, tmp[0]), ADD_ATTR_ARRAY(CKA_CLASS, tmp[1]), ADD_ATTR_ARRAY(CKA_CLASS, tmp[2]), ADD_ATTR_ARRAY(CKA_VERIFY, tmp[3]), ADD_ATTR_ARRAY(CKA_ENCRYPT, tmp[4]), ADD_ATTR_ARRAY(CKA_VERIFY_RECOVER, tmp[5]), ADD_ATTR_ARRAY(CKA_WRAP, tmp[6]), ADD_ATTR_ARRAY(CKA_TRUSTED, tmp[7]), ADD_ATTR_ARRAY(CKA_DERIVE, tmp[8]), }; CK_RV rv = C_GetAttributeValue(session, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_ULONG i; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch(a->type) { case CKA_KEY_TYPE: { CK_ULONG v = 0; rv = attr_CK_ULONG(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, keytype); count++; } break; case CKA_CLASS: { CK_ULONG v = 0; rv = attr_CK_ULONG(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, CKO_PUBLIC_KEY); count++; } break; case CKA_ENCRYPT: /* fall-thru */ case CKA_VERIFY: { CK_BBOOL v = 0; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); /* is dependent on key type (no ecc keys yes rsa)*/ count++; } break; case CKA_TRUSTED: /* fall-thru */ case CKA_WRAP: /* fall-thru */ case CKA_DERIVE: /* fall-thru */ case CKA_VERIFY_RECOVER: { CK_BBOOL v = 0; rv = attr_CK_BBOOL(a, &v); assert_int_equal(rv, CKR_OK); assert_int_equal(v, CK_FALSE); count++; } break; default: fail_msg("Unknown attribute type to test, got: %lu", a->type); } } assert_int_equal(count, ARRAY_LEN(attrs)); } tpm2-pkcs11-1.9.1/test/integration/pkcs-ecdh.int.c0000644000175100017510000001536214666345037015314 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include "test.h" #define ATTR(a, v, t) { a, &(t){v}, sizeof(t) } #define ATTR_VAR(a, v, len) { a, v, len } struct test_info { CK_SESSION_HANDLE handle; CK_SLOT_ID slot_id; }; static test_info *test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* Get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); ti->slot_id = slots[0]; return ti; } static int test_setup(void **state) { test_info *ti = test_info_new(); CK_RV rv = C_OpenSession(ti->slot_id, CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &ti->handle); assert_int_equal(rv, CKR_OK); *state = ti; return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseAllSessions(ti->slot_id); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void gen_ecc_keypair(CK_SESSION_HANDLE session, CK_BYTE id, CK_BYTE *curve, size_t curve_size, uint8_t *pubkey, size_t *pubkey_len) { CK_MECHANISM mechanism = { CKM_EC_KEY_PAIR_GEN, NULL, 0 }; CK_ATTRIBUTE pub_template[] = { ATTR(CKA_CLASS, CKO_PUBLIC_KEY, CK_OBJECT_CLASS), ATTR(CKA_KEY_TYPE, CKK_EC, CK_KEY_TYPE), ATTR(CKA_DERIVE, CK_TRUE, CK_BBOOL), ATTR(CKA_TOKEN, CK_TRUE, CK_BBOOL), /* */ ATTR_VAR(CKA_EC_PARAMS, curve, curve_size), }; CK_ATTRIBUTE priv_template[] = { ATTR(CKA_CLASS, CKO_PRIVATE_KEY, CK_OBJECT_CLASS), ATTR(CKA_KEY_TYPE, CKK_EC, CK_KEY_TYPE), ATTR(CKA_PRIVATE, CK_TRUE, CK_BBOOL), ATTR(CKA_SENSITIVE, CK_TRUE, CK_BBOOL), ATTR(CKA_DERIVE, CK_TRUE, CK_BBOOL), ATTR(CKA_DECRYPT, CK_TRUE, CK_BBOOL), ATTR(CKA_TOKEN, CK_TRUE, CK_BBOOL), /* */ ATTR(CKA_ID, id, CK_BYTE), }; CK_ATTRIBUTE ec_point = { CKA_EC_POINT, NULL, 0 }; CK_OBJECT_HANDLE private = CK_INVALID_HANDLE; CK_OBJECT_HANDLE public = CK_INVALID_HANDLE; CK_RV rv = CKR_GENERAL_ERROR; rv = C_GenerateKeyPair(session, & mechanism, pub_template, ARRAY_LEN(pub_template), priv_template, ARRAY_LEN(priv_template), &public, &private); assert_int_equal(rv, CKR_OK); rv = C_GetAttributeValue(session, public, &ec_point, 1); assert_int_equal(rv, CKR_OK); assert(*pubkey_len >= ec_point.ulValueLen); ec_point.pValue = pubkey; rv = C_GetAttributeValue(session, public, &ec_point, 1); assert_int_equal(rv, CKR_OK); *pubkey_len = ec_point.ulValueLen; } static void gen_nistp256(CK_SESSION_HANDLE session, CK_BYTE id, uint8_t* pubkey, size_t *pubkey_len) { CK_BYTE curve[] = { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }; gen_ecc_keypair(session, id, curve, sizeof(curve), pubkey, pubkey_len); } static void ecdh1_derive(CK_SESSION_HANDLE session, CK_BYTE id, uint8_t *pubkey, size_t pubkey_len, uint8_t *secret, size_t secret_len) { CK_MECHANISM mechanism = { CKM_ECDH1_DERIVE, NULL, 0 }; CK_ATTRIBUTE secret_template[] = { ATTR(CKA_KEY_TYPE, CKK_GENERIC_SECRET, CK_KEY_TYPE), ATTR(CKA_CLASS, CKO_SECRET_KEY, CK_OBJECT_CLASS), ATTR(CKA_EXTRACTABLE, CK_TRUE, CK_BBOOL), ATTR(CKA_TOKEN, CK_FALSE, CK_BBOOL), ATTR(CKA_SENSITIVE, CK_FALSE, CK_BBOOL), /* */ ATTR(CKA_VALUE_LEN, secret_len, CK_ULONG), }; CK_ATTRIBUTE priv_template[] = { ATTR(CKA_CLASS, CKO_PRIVATE_KEY, CK_OBJECT_CLASS), ATTR(CKA_KEY_TYPE, CKK_EC, CK_KEY_TYPE), ATTR(CKA_PRIVATE, CK_TRUE, CK_BBOOL), ATTR(CKA_SENSITIVE, CK_TRUE, CK_BBOOL), ATTR(CKA_DERIVE, CK_TRUE, CK_BBOOL), ATTR(CKA_DECRYPT, CK_TRUE, CK_BBOOL), ATTR(CKA_TOKEN, CK_TRUE, CK_BBOOL), /* */ ATTR(CKA_ID, id, CK_BYTE), }; CK_ATTRIBUTE derived_template[] = { ATTR_VAR(CKA_VALUE, secret, secret_len), }; CK_ECDH1_DERIVE_PARAMS params = { .kdf = CKD_NULL, .ulSharedDataLen = 0, .pSharedData = secret, .ulPublicDataLen = 0, .pPublicData = NULL, }; CK_OBJECT_HANDLE private = CK_INVALID_HANDLE; CK_OBJECT_HANDLE derived = CK_INVALID_HANDLE; CK_RV rv = CKR_GENERAL_ERROR; CK_ULONG count = 0; /* Populate the mechanism, skip the DER header */ mechanism.ulParameterLen = sizeof(params); mechanism.mechanism = CKM_ECDH1_DERIVE; mechanism.pParameter = ¶ms; params.ulPublicDataLen = pubkey_len - 2; pubkey++; pubkey++; params.pPublicData = pubkey; /* Retrieve the private key */ rv = C_FindObjectsInit(session, priv_template, ARRAY_LEN(priv_template)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(session, &private, 2, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* Derive */ rv = C_DeriveKey(session, &mechanism, private, secret_template, ARRAY_LEN(secret_template), &derived); assert_int_equal(rv, CKR_OK); /* Get the secret */ rv = C_GetAttributeValue(session, derived, derived_template, ARRAY_LEN(derived_template)); assert_int_equal(rv, CKR_OK); } static void test_ecc_derive_nist_p256_templ(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; /* NIST P-256: 32 bytes */ struct { CK_BYTE shr[32]; /* Shared secret is the length of the key */ CK_BYTE pub[70]; /* Allocate extra space for encoding */ size_t plen; CK_BYTE id; } key[] = { [0] = { .id = 0x00, .shr = { 0 }, .pub = { 0 }, .plen = 70 }, [1] = { .id = 0x01, .shr = { 1 }, .pub = { 1 }, .plen = 70 }, }; user_login(session); gen_nistp256(session, key[0].id, key[0].pub, &key[0].plen); gen_nistp256(session, key[1].id, key[1].pub, &key[1].plen); ecdh1_derive(session, key[0].id, key[1].pub, key[1].plen, key[0].shr, 32); ecdh1_derive(session, key[1].id, key[0].pub, key[0].plen, key[1].shr, 32); assert(memcmp(key[0].shr, key[1].shr, 32) == 0); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_ecc_derive_nist_p256_templ, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.9.1/test/integration/pkcs-find-objects.int.c0000644000175100017510000001334314535673717016761 /* SPDX-License-Identifier: BSD-2-Clause */ #include "test.h" struct test_info { CK_SESSION_HANDLE session; }; static int test_setup(void **state) { test_info *info = calloc(1, sizeof(*info)); assert_non_null(info); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); /* open a session on slot 0 */ CK_SESSION_HANDLE session; rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &session); assert_int_equal(rv, CKR_OK); /* assign to state */ info->session = session; user_login(session); *state = info; /* success */ return 0; } static int test_setup_by_label(void **state) { test_info *info = calloc(1, sizeof(*info)); assert_non_null(info); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); unsigned i; CK_SLOT_ID slot = ~0; for (i=0; i < count; i++) { CK_TOKEN_INFO info; rv = C_GetTokenInfo(slots[i], &info); assert_int_equal(rv, CKR_OK); int eq = !memcmp((char *)info.label, "import-keys ", sizeof(info.label)); if (eq) { slot = slots[i]; break; } } assert_in_range(i, 0, count - 1); /* open a session on found slot */ CK_SESSION_HANDLE session; rv = C_OpenSession(slot, CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &session); assert_int_equal(rv, CKR_OK); unsigned char upin[] = IMPORT_LABEL_USERPIN; rv = C_Login(session, CKU_USER, upin, sizeof(upin)-1); assert_int_equal(rv, CKR_OK); /* assign to state */ info->session = session; *state = info; /* success */ return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_Logout(ti->session); assert_int_equal(rv, CKR_OK); rv = C_CloseSession(ti->session); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_find_objects_aes_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->session; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_AES; CK_ATTRIBUTE tmpl[] = { {CKA_CLASS, &key_class, sizeof(key_class)}, {CKA_KEY_TYPE, &key_type, sizeof(key_type)}, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); /* * We know there are 3 secret key objects in the first item, so break up the calls * so we test state tracking across C_FindObject(). You can think of * C_FindObject like read, where it keeps moving the file pointer ahead, * and eventually returns EOF, in our case, count == 0. */ unsigned i = 0; CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; for (i=0; i < 3; i++) { rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, ARRAY_LEN(objhandles)); } rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 0); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); } static void do_test_find_objects_by_label(void **state, const char *key_label, unsigned expected) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->session; CK_ATTRIBUTE tmpl[] = { {CKA_LABEL, (void *)key_label, strlen(key_label)}, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); /* * There is only one key in the test db with the label "mykeylabel" */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1024]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, expected); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); } static void test_find_objects_by_label(void **state) { do_test_find_objects_by_label(state, "mykeylabel", 1); } static void test_find_imported_objects_by_label(void **state) { /* imported key has a label duplicated on public and private portions */ do_test_find_objects_by_label(state, "imported_key", 2); } static void test_find_objects_via_empty_template(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->session; CK_RV rv = C_FindObjectsInit(session, NULL, 0); assert_int_equal(rv, CKR_OK); /* * There are 4 keys in the test db with */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[6]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, ARRAY_LEN(objhandles)); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_find_objects_aes_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_find_objects_by_label, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_find_objects_via_empty_template, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_find_imported_objects_by_label, test_setup_by_label, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.9.1/test/integration/pkcs-get-attribute-value.int.c0000644000175100017510000004546014535673717020311 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include "test.h" struct test_info { CK_SESSION_HANDLE hSession; CK_OBJECT_HANDLE hObject; }; static int test_setup(void **state) { test_info *info = calloc(1, sizeof(*info)); assert_non_null(info); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); /* open a session on slot 0 */ CK_SESSION_HANDLE hSession; rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &hSession); assert_int_equal(rv, CKR_OK); /* assign to state */ info->hSession = hSession; /* find a suitable object to work with */ const char *key_label = "mykeylabel"; CK_ATTRIBUTE tmpl[] = { {CKA_LABEL, (void *)key_label, strlen(key_label)}, }; rv = C_FindObjectsInit(hSession, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(hSession); CK_OBJECT_HANDLE objhandles[1024]; rv = C_FindObjects(hSession, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_true(count >= 1); rv = C_FindObjectsFinal(hSession); assert_int_equal(rv, CKR_OK); /* store handle for tests*/ info->hObject = objhandles[0]; *state = info; /* success */ return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseSession(ti->hSession); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_get_attribute_value_single_okay(void **state) { CK_RV rv; CK_UTF8CHAR *pLabel = NULL; CK_LONG exactsize = 0; CK_ATTRIBUTE template[] = { {CKA_LABEL, NULL_PTR, 0}, }; test_info *ti = test_info_from_state(state); // Call for Size rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 1); assert_int_equal(rv, CKR_OK); pLabel = malloc(template[0].ulValueLen+1); //+1 for \0 memset(pLabel, '\0', template[0].ulValueLen+1); exactsize = template[0].ulValueLen; //for comparison template[0].pValue = pLabel; template[0].ulValueLen++; //must be reset to 'exactsize' rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 1); assert_int_equal(rv, CKR_OK); assert_int_equal(template[0].ulValueLen, exactsize); assert_string_equal(template[0].pValue, "mykeylabel"); free(pLabel); } static void test_get_attribute_value_multiple_okay(void **state) { CK_RV rv; CK_UTF8CHAR *pLabel = NULL; CK_BYTE_PTR *pId = NULL; CK_ATTRIBUTE template[] = { {CKA_LABEL, NULL_PTR, 0}, {CKA_ID, NULL_PTR, 0}, }; test_info *ti = test_info_from_state(state); // Call for Size rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 2); assert_int_equal(rv, CKR_OK); pLabel = malloc(template[0].ulValueLen+1); //+1 for \0 memset(pLabel, '\0', template[0].ulValueLen+1); template[0].pValue = pLabel; pId = malloc(template[1].ulValueLen); template[1].pValue = pId; rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 2); assert_int_equal(rv, CKR_OK); assert_string_equal(template[0].pValue, "mykeylabel"); free(pLabel); free(pId); } static void test_get_attribute_value_buffer_too_small(void **state) { CK_RV rv; CK_UTF8CHAR *pLabel = NULL; CK_ATTRIBUTE template[] = { {CKA_LABEL, NULL_PTR, 0}, }; test_info *ti = test_info_from_state(state); // Call for Size rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 1); assert_int_equal(rv, CKR_OK); pLabel = malloc(template[0].ulValueLen+1); //+1 for \0 memset(pLabel, '\0', template[0].ulValueLen+1); template[0].pValue = pLabel; //make buffer length too small template[0].ulValueLen--; rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 1); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); free(pLabel); } static void test_get_attribute_value_invalid_attribute(void **state) { test_info *ti = test_info_from_state(state); CK_ATTRIBUTE template[] = { {0x0000FFFFUL, NULL_PTR, 0}, //Invalid }; CK_RV rv; rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 1); assert_int_equal(rv, CKR_ATTRIBUTE_TYPE_INVALID); assert_int_equal(template[0].ulValueLen, CK_UNAVAILABLE_INFORMATION); assert_null(template[0].pValue); } /* * C_GetAttributeValue must process every attribute in the template, * even if CKR_ATTRIBUTE_TYPE_INVALID or CKR_BUFFER_TOO_SMALL is returned. * The return value can be any one of the failures. * */ static void test_get_attribute_value_multiple_fail(void **state) { CK_RV rv; CK_UTF8CHAR *pLabel = NULL; CK_BYTE_PTR *pId = NULL; CK_BYTE_PTR *pInvalid = NULL; CK_ATTRIBUTE template[] = { {CKA_ID, NULL_PTR, 0}, {CKA_LABEL, NULL_PTR, 0}, {0x0000FFFFUL, NULL_PTR, 0}, //Invalid }; LargestIntegralType expected_returns[] = {CKR_BUFFER_TOO_SMALL, CKR_ATTRIBUTE_TYPE_INVALID}; test_info *ti = test_info_from_state(state); // Call for Size, without invalid rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 2); assert_int_equal(rv, CKR_OK); // too small pId = malloc(template[0].ulValueLen); template[0].pValue = pId; template[0].ulValueLen--; // make buffer too small // this one will be okay pLabel = malloc(template[1].ulValueLen+1); //+1 for \0 memset(pLabel, '\0', template[1].ulValueLen+1); template[1].pValue = pLabel; // invalid pInvalid = malloc(10); template[2].pValue = pInvalid; template[2].ulValueLen = 10; rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, 3); // Return should be CKR_ATTRIBUTE_TYPE_INVALID or CKR_BUFFER_TOO_SMALL assert_in_set(rv, expected_returns, 2); assert_int_equal(template[0].ulValueLen, CK_UNAVAILABLE_INFORMATION); assert_string_equal(template[1].pValue, "mykeylabel"); assert_int_equal(template[2].ulValueLen, CK_UNAVAILABLE_INFORMATION); free(pLabel); free(pId); free(pInvalid); } static void test_all_pub_ecc_obj_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->hSession; CK_OBJECT_CLASS class = CKO_PUBLIC_KEY; CK_KEY_TYPE keytype = CKK_EC; CK_ATTRIBUTE attrs[] = { ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), ADD_ATTR_BASE(CKA_CLASS, class), }; /* verify we can find it via pub templ */ CK_RV rv = C_FindObjectsInit(session, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE handles[255]; CK_ULONG count = ARRAY_LEN(handles); rv = C_FindObjects(session, handles, count, &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_ULONG i; for (i=0; i < count; i++) { CK_OBJECT_HANDLE h = handles[i]; /* verify missing attrs */ verify_missing_pub_attrs_common(session, keytype, h); verify_missing_pub_attrs_ecc(session, h); } } static void test_all_priv_ecc_obj_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->hSession; CK_OBJECT_CLASS class = CKO_PRIVATE_KEY; CK_KEY_TYPE keytype = CKK_EC; CK_ATTRIBUTE attrs[] = { ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), ADD_ATTR_BASE(CKA_CLASS, class), }; /* verify we can find it via pub templ */ CK_RV rv = C_FindObjectsInit(session, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE handles[255]; CK_ULONG count = ARRAY_LEN(handles); rv = C_FindObjects(session, handles, count, &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_ULONG i; for (i=0; i < count; i++) { CK_OBJECT_HANDLE h = handles[i]; /* verify missing attrs */ verify_missing_priv_attrs_common(session, keytype, h, CK_FALSE); verify_missing_priv_attrs_ecc(session, h); } } static void test_all_pub_rsa_obj_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->hSession; CK_OBJECT_CLASS class = CKO_PUBLIC_KEY; CK_KEY_TYPE keytype = CKK_RSA; CK_ATTRIBUTE attrs[] = { ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), ADD_ATTR_BASE(CKA_CLASS, class), }; /* verify we can find it via pub templ */ CK_RV rv = C_FindObjectsInit(session, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE handles[255]; CK_ULONG count = ARRAY_LEN(handles); rv = C_FindObjects(session, handles, count, &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_ULONG i; for (i=0; i < count; i++) { CK_OBJECT_HANDLE h = handles[i]; /* verify missing attrs */ verify_missing_pub_attrs_common(session, keytype, h); verify_missing_pub_attrs_rsa(session, h); } } static void test_all_priv_rsa_obj_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->hSession; CK_OBJECT_CLASS class = CKO_PRIVATE_KEY; CK_KEY_TYPE keytype = CKK_RSA; CK_ATTRIBUTE attrs[] = { ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), ADD_ATTR_BASE(CKA_CLASS, class), }; /* verify we can find it via pub templ */ CK_RV rv = C_FindObjectsInit(session, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE handles[255]; CK_ULONG count = ARRAY_LEN(handles); rv = C_FindObjects(session, handles, count, &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_ULONG i; for (i=0; i < count; i++) { CK_OBJECT_HANDLE h = handles[i]; /* verify missing attrs */ verify_missing_priv_attrs_common(session, keytype, h, CK_FALSE); verify_missing_priv_attrs_rsa(session, h); } } #define ADD_ATTR_HANDLER(a, b, index) .type = a, .ulValueLen = sizeof(b[0]), .pValue= b[index] static void verify_cert_attrs(CK_SESSION_HANDLE s, CK_OBJECT_HANDLE h) { CK_BYTE _buf[256][1024] = { 0 }; CK_ATTRIBUTE attrs[] = { { ADD_ATTR_HANDLER(CKA_CLASS, _buf, 0) }, { ADD_ATTR_HANDLER(CKA_CERTIFICATE_TYPE, _buf, 1) }, { ADD_ATTR_HANDLER(CKA_TRUSTED, _buf, 2) }, { ADD_ATTR_HANDLER(CKA_CERTIFICATE_CATEGORY, _buf, 3) }, { ADD_ATTR_HANDLER(CKA_CHECK_VALUE, _buf, 4) }, { ADD_ATTR_HANDLER(CKA_START_DATE, _buf, 5) }, { ADD_ATTR_HANDLER(CKA_END_DATE, _buf, 6) }, { ADD_ATTR_HANDLER(CKA_PUBLIC_KEY_INFO, _buf, 7) }, { ADD_ATTR_HANDLER(CKA_SUBJECT, _buf, 8) }, { ADD_ATTR_HANDLER(CKA_LABEL, _buf, 9) }, { ADD_ATTR_HANDLER(CKA_ISSUER, _buf, 10) }, { ADD_ATTR_HANDLER(CKA_SERIAL_NUMBER, _buf, 11) }, { ADD_ATTR_HANDLER(CKA_VALUE, _buf, 12) }, { ADD_ATTR_HANDLER(CKA_URL, _buf, 13) }, { ADD_ATTR_HANDLER(CKA_HASH_OF_SUBJECT_PUBLIC_KEY, _buf, 14) }, { ADD_ATTR_HANDLER(CKA_HASH_OF_ISSUER_PUBLIC_KEY, _buf, 15) }, { ADD_ATTR_HANDLER(CKA_JAVA_MIDP_SECURITY_DOMAIN, _buf, 16) }, { ADD_ATTR_HANDLER(CKA_NAME_HASH_ALGORITHM, _buf, 17) }, }; assert_true(ARRAY_LEN(attrs) <= ARRAY_LEN(_buf)); CK_RV rv = C_GetAttributeValue(s, h, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_ATTRIBUTE_PTR value = NULL; CK_ATTRIBUTE_PTR checkvalue = NULL; CK_ATTRIBUTE_PTR subject = NULL; CK_ATTRIBUTE_PTR issuer = NULL; CK_ATTRIBUTE_PTR serial_number = NULL; CK_ULONG i = 0; for (i=0; i < ARRAY_LEN(attrs); i++) { CK_ATTRIBUTE_PTR a = &attrs[i]; switch (a->type) { case CKA_CLASS: { assert_int_equal(a->ulValueLen, sizeof(CK_OBJECT_CLASS)); CK_OBJECT_CLASS *v = (CK_OBJECT_CLASS *)a->pValue; assert_int_equal(*v, CKO_CERTIFICATE); } break; case CKA_CERTIFICATE_TYPE: { assert_int_equal(a->ulValueLen, sizeof(CK_CERTIFICATE_TYPE)); CK_CERTIFICATE_TYPE *v = (CK_CERTIFICATE_TYPE *)a->pValue; assert_int_equal(*v, CKC_X_509); } break; case CKA_TRUSTED: { assert_int_equal(a->ulValueLen, sizeof(CK_BBOOL)); CK_BBOOL *v = (CK_BBOOL *)a->pValue; assert_int_equal(*v, CK_FALSE); } break; case CKA_CERTIFICATE_CATEGORY: { assert_int_equal(a->ulValueLen, sizeof(CK_ULONG)); CK_ULONG *v = (CK_ULONG *)a->pValue; assert_int_equal(*v, CK_CERTIFICATE_CATEGORY_UNSPECIFIED); } break; case CKA_CHECK_VALUE: { // check value is first three bytes of sha1 hash assert_int_equal(a->ulValueLen, 3); checkvalue = a; } break; case CKA_SUBJECT: subject = a; break; case CKA_ISSUER: issuer = a; break; case CKA_SERIAL_NUMBER: serial_number = a; break; case CKA_LABEL: /* a label should be set ? */ assert_true(a->ulValueLen > 0); break; case CKA_VALUE: value = a; break; case CKA_JAVA_MIDP_SECURITY_DOMAIN: { assert_int_equal(a->ulValueLen, sizeof(CK_JAVA_MIDP_SECURITY_DOMAIN)); CK_JAVA_MIDP_SECURITY_DOMAIN *v = (CK_ULONG *)a->pValue; assert_int_equal(*v, CK_SECURITY_DOMAIN_UNSPECIFIED); } break; case CKA_NAME_HASH_ALGORITHM: { assert_int_equal(a->ulValueLen, sizeof(CK_MECHANISM_TYPE)); CK_MECHANISM_TYPE *v = (CK_MECHANISM_TYPE *)a->pValue; assert_int_equal(*v, CKM_SHA_1); } break; /* expected empty */ case CKA_URL: // falls-thru case CKA_HASH_OF_SUBJECT_PUBLIC_KEY: // falls-thru case CKA_HASH_OF_ISSUER_PUBLIC_KEY: // falls-thru case CKA_PUBLIC_KEY_INFO: // falls-thru case CKA_START_DATE: // falls-thru case CKA_END_DATE: assert_int_equal(a->ulValueLen, 0); break; default: assert_true(0); } } assert_non_null(subject); assert_non_null(issuer); assert_non_null(serial_number); assert_non_null(value); assert_non_null(checkvalue); /* verify subject is an ASN1 encoded string */ const unsigned char *tmp = subject->pValue; X509_NAME *ss = d2i_X509_NAME(NULL, &tmp, subject->ulValueLen); assert_non_null(ss); X509_NAME_free(ss); /* verify check value */ EVP_MD_CTX *mdctx = EVP_MD_CTX_create(); assert_non_null(mdctx); int rc = EVP_DigestInit_ex(mdctx, EVP_sha1(), NULL); assert_int_equal(rc, 1); rc = EVP_DigestUpdate(mdctx, value->pValue, value->ulValueLen); assert_int_equal(rc, 1); unsigned char md[SHA_DIGEST_LENGTH]; unsigned int len = sizeof(md); rc = EVP_DigestFinal_ex(mdctx, md, &len); assert_int_equal(rc, 1); EVP_MD_CTX_destroy(mdctx); assert_memory_equal(md, checkvalue->pValue, checkvalue->ulValueLen); } static void test_all_cert_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->hSession; CK_OBJECT_CLASS obj_class = CKO_CERTIFICATE; CK_KEY_TYPE cert_type = CKC_X_509; CK_ATTRIBUTE attrs[] = { { CKA_CLASS, &obj_class, sizeof(obj_class) }, { CKA_CERTIFICATE_TYPE, &cert_type, sizeof(cert_type) }, }; /* verify we can find it via pub templ */ CK_RV rv = C_FindObjectsInit(session, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE handles[255]; CK_ULONG count = ARRAY_LEN(handles); rv = C_FindObjects(session, handles, count, &count); assert_int_equal(rv, CKR_OK); assert_true(count > 0); /* make sure we got all of them */ CK_ULONG left = 1; CK_OBJECT_HANDLE dummy; rv = C_FindObjects(session, &dummy, 1, &left); assert_int_equal(rv, CKR_OK); assert_int_equal(left, 0); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_ULONG i; for (i=0; i < count; i++) { CK_OBJECT_HANDLE h = handles[i]; /* verify missing attrs */ verify_cert_attrs(session, h); } } static void test_set_attribute_value_multiple_okay(void **state) { test_info *ti = test_info_from_state(state); CK_UTF8CHAR url [] = "http://fakeurl.com"; CK_UTF8CHAR label[] = "mynewkeylabel"; CK_ATTRIBUTE template[] = { {CKA_LABEL, label, sizeof(label) - 1}, {CKA_URL, url, sizeof(url) - 1}, }; CK_RV rv = C_SetAttributeValue(ti->hSession, ti->hObject, template, ARRAY_LEN(template)); assert_int_equal(rv, CKR_OK); memset(label, 0, sizeof(label)); memset(url, 0, sizeof(label)); rv = C_GetAttributeValue(ti->hSession, ti->hObject, template, ARRAY_LEN(template)); assert_int_equal(rv, CKR_OK); assert_memory_equal(template[0].pValue, "mynewkeylabel", template[0].ulValueLen); assert_memory_equal(template[1].pValue, "http://fakeurl.com", template[1].ulValueLen); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_all_cert_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_all_pub_ecc_obj_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_all_priv_ecc_obj_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_all_pub_rsa_obj_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_all_priv_rsa_obj_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_attribute_value_single_okay, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_attribute_value_multiple_okay, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_attribute_value_buffer_too_small, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_attribute_value_invalid_attribute, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_attribute_value_multiple_fail, test_setup, test_teardown), /* this must go last as it modifies the key label */ cmocka_unit_test_setup_teardown(test_set_attribute_value_multiple_okay, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.9.1/test/integration/pkcs-get-mechanism.int.c0000644000175100017510000001735514535673717017142 /* SPDX-License-Identifier: BSD-2-Clause */ #include "test.h" /* * C_GetMechanismList is used to obtain a list of mechanism types supported by a token. * SlotID is the ID of the token’s slot; pulCount points to the location that receives the number of mechanisms. * There are two ways for an application to call C_GetMechanismList: * 1. If pMechanismList is NULL_PTR, then all that C_GetMechanismList does is return (in *pulCount) the number of mechanisms, * without actually returning a list of mechanisms. The contents of *pulCount on entry to C_GetMechanismList has no meaning * in this case, and the call returns the value CKR_OK. * 2. If pMechanismList is not NULL_PTR, then *pulCount MUST contain the size (in terms of CK_MECHANISM_TYPE elements) of the * buffer pointed to by pMechanismList. If that buffer is large enough to hold the list of mechanisms, then the list is returned in it, * and CKR_OK is returned. If not, then the call to C_GetMechanismList returns the value CKR_BUFFER_TOO_SMALL. * In either case, the value *pulCount is set to hold the number of mechanisms. * Because C_GetMechanismList does not allocate any space of its own, an application will often call C_GetMechanismList twice. * However, this behavior is by no means required. */ struct test_info { CK_SLOT_ID slot; }; static int test_setup(void **state) { test_info *info = calloc(1, sizeof(*info)); assert_non_null(info); /* get the slots */ CK_SLOT_ID slots[32]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_not_equal(count, 0); /* assign to state */ info->slot = slots[0]; *state = info; /* success */ return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); free(ti); return 0; } void test_get_mechanism_list_good(void **state) { test_info *ti = test_info_from_state(state); CK_SLOT_ID slot_id = ti->slot; CK_ULONG mech_cnt; CK_MECHANISM_TYPE mechs[256]; // Only return the number of mechanisms CK_RV rv = C_GetMechanismList(slot_id, NULL, &mech_cnt); assert_int_equal(rv, CKR_OK); assert_in_range(mech_cnt, 1, ARRAY_LEN(mechs)); // Return List of mechanisms rv = C_GetMechanismList(slot_id, mechs, &mech_cnt); assert_int_equal(rv, CKR_OK); } void test_get_mechanism_list_bad(void **state) { test_info *ti = test_info_from_state(state); CK_SLOT_ID slot_id = ti->slot; CK_ULONG mech_cnt; // Invalid Slot CK_RV rv = C_GetMechanismList((CK_ULONG)-10, NULL, &mech_cnt); assert_int_equal(rv, CKR_SLOT_ID_INVALID); rv = C_GetMechanismList(slot_id, NULL, NULL); assert_int_equal(rv, CKR_ARGUMENTS_BAD); CK_MECHANISM_TYPE mechs[1]; rv = C_GetMechanismList(slot_id, NULL, &mech_cnt); assert_int_equal(rv, CKR_OK); assert_int_not_equal(mech_cnt, ARRAY_LEN(mechs)); CK_ULONG value = 0; rv = C_GetMechanismList(slot_id, mechs, &value); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); // Low count but buffer present value = ARRAY_LEN(mechs); rv = C_GetMechanismList(slot_id, mechs, &value); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); } /** * C_GetMechanismInfo obtains information about a particular mechanism possibly supported by a token. * slotID is the ID of the token’s slot; type is the type of mechanism; pInfo points to the location that receives the mechanism * information. */ void test_get_mechanism_info_good(void **state) { test_info *ti = test_info_from_state(state); CK_SLOT_ID slot_id = ti->slot; CK_MECHANISM_INFO mech_info; CK_RV rv = C_GetMechanismInfo(slot_id, CKM_AES_KEY_GEN, &mech_info); assert_int_equal(rv, CKR_OK); assert_int_equal(mech_info.ulMaxKeySize, 256/8); assert_int_equal(mech_info.ulMinKeySize, 128/8); assert_int_equal(mech_info.flags, CKF_GENERATE|CKF_HW); /* Test all other mechanisms */ CK_ULONG aes_mechs[] = { CKM_AES_CBC, CKM_AES_CFB128, CKM_AES_ECB, CKM_AES_CBC_PAD, CKM_AES_CTR, }; for (size_t i = 0; i < ARRAY_LEN(aes_mechs); i++) { rv = C_GetMechanismInfo(slot_id, aes_mechs[i], &mech_info); assert_int_equal(rv, CKR_OK); assert_int_equal(mech_info.ulMinKeySize, 128/8); assert_int_equal(mech_info.ulMaxKeySize, 256/8); assert_int_equal(mech_info.flags, CKF_ENCRYPT|CKF_DECRYPT|CKF_HW); } struct { CK_ULONG mech; CK_FLAGS flags; } rsa_mechs[] = { { CKM_RSA_PKCS_KEY_PAIR_GEN, CKF_HW | CKF_GENERATE_KEY_PAIR }, { CKM_RSA_PKCS, CKF_HW | CKF_ENCRYPT | CKF_DECRYPT | CKF_SIGN | CKF_VERIFY }, { CKM_RSA_X_509, CKF_HW | CKF_ENCRYPT | CKF_DECRYPT | CKF_SIGN | CKF_VERIFY }, { CKM_RSA_PKCS_OAEP, CKF_HW | CKF_ENCRYPT | CKF_DECRYPT }, { CKM_SHA1_RSA_PKCS, CKF_HW | CKF_SIGN | CKF_VERIFY }, { CKM_SHA256_RSA_PKCS, CKF_HW | CKF_SIGN | CKF_VERIFY }, { CKM_SHA384_RSA_PKCS, CKF_HW | CKF_SIGN | CKF_VERIFY }, }; for (size_t i = 0; i < ARRAY_LEN(rsa_mechs); i++) { rv = C_GetMechanismInfo(slot_id, rsa_mechs[i].mech, &mech_info); assert_int_equal(rv, CKR_OK); assert_int_equal(mech_info.ulMinKeySize, 1024); assert_in_range(mech_info.ulMaxKeySize, 2048, 3072); assert_int_equal(mech_info.flags, rsa_mechs[i].flags); } struct { CK_ULONG mech; CK_FLAGS flags; } ecc_mechs[] = { { CKM_EC_KEY_PAIR_GEN, CKF_HW | CKF_GENERATE_KEY_PAIR }, { CKM_ECDSA, CKF_HW | CKF_SIGN | CKF_VERIFY }, { CKM_ECDSA_SHA1, CKF_HW | CKF_SIGN | CKF_VERIFY }, }; for (size_t i = 0; i < ARRAY_LEN(ecc_mechs); i++) { rv = C_GetMechanismInfo(slot_id, ecc_mechs[i].mech, &mech_info); assert_int_equal(rv, CKR_OK); assert_in_range(mech_info.ulMinKeySize, 192, 256); assert_in_range(mech_info.ulMaxKeySize, 384, 638); assert_int_equal(mech_info.flags, ecc_mechs[i].flags); } CK_ULONG hash_mechs[] = { CKM_SHA_1, CKM_SHA256, }; for (size_t i = 0; i < ARRAY_LEN(hash_mechs); i++) { rv = C_GetMechanismInfo(slot_id, hash_mechs[i], &mech_info); assert_int_equal(rv, CKR_OK); assert_int_equal(mech_info.ulMinKeySize, 0); assert_int_equal(mech_info.ulMaxKeySize, 0); assert_int_equal(mech_info.flags, CKF_DIGEST); } } void test_get_mechanism_info_bad(void **state) { test_info *ti = test_info_from_state(state); CK_SLOT_ID slot_id = ti->slot; CK_MECHANISM_INFO mech_info; // Invalid mechanism CK_RV rv = C_GetMechanismInfo(slot_id, (CK_ULONG)-10, &mech_info); assert_int_equal(rv, CKR_MECHANISM_INVALID); // NULL Arguments rv = C_GetMechanismInfo(slot_id, CKM_AES_KEY_GEN, NULL); assert_int_equal(rv, CKR_ARGUMENTS_BAD); // Invalid slot ID rv = C_GetMechanismInfo((CK_ULONG)-10, CKM_AES_KEY_GEN, &mech_info); assert_int_equal(rv, CKR_SLOT_ID_INVALID); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_get_mechanism_list_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_mechanism_list_bad, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_mechanism_info_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_mechanism_info_bad, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.9.1/test/integration/pkcs-initialize-finalize.int.c0000644000175100017510000001356514535673717020360 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include "pkcs11.h" #include "test.h" /** * This program contains integration test for C_Initialize and C_Finalize. * C_Initialize initializes the Cryptoki library. * C_Finalize is called to indicate that an application is finished with the Cryptoki library. */ static CK_RV create(void **mutex) { (void) mutex; return CKR_OK; } static CK_RV lock(void *mutex) { (void) mutex; return CKR_OK; } static CK_RV unlock(void *mutex) { (void) mutex; return CKR_OK; } static CK_RV destroy(void *mutex) { (void) mutex; return CKR_OK; } static void state_setup(void **state) { bool *do_teardown = malloc(sizeof(bool)); assert_non_null(do_teardown); *do_teardown = true; *state = do_teardown; } static int test_setup(void **state) { state_setup(state); return group_setup(NULL); } static int test_teardown(void **state) { bool *p_do_teardown = (bool *)(*state); bool do_teardown = *p_do_teardown; free(p_do_teardown); if (do_teardown) { return group_teardown(NULL); } return 0; } // Test the 4 states and additional error case of: // http://docs.oasis-open.org/pkcs11/pkcs11-base/v2.40/os/pkcs11-base-v2.40-os.html // Section 5.4 void test_c_init_args(void **state) { /* No setup routine called */ state_setup(state); bool *do_teardown = (bool *)(*state); // Case 1 - flags and fn ptr's clear. No threaded access. CK_C_INITIALIZE_ARGS args = { .flags = 0, .CreateMutex = NULL, .DestroyMutex = NULL, .LockMutex = NULL, .pReserved = NULL, }; CK_RV rv = C_Initialize(&args); assert_int_equal(rv, CKR_OK); *do_teardown = true; rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); *do_teardown = false; // Case 2 locking flag specified but no fn pointers. Threaded access and use // library lock defaults. args.flags = CKF_OS_LOCKING_OK; rv = C_Initialize (&args); assert_int_equal(rv, CKR_OK); *do_teardown = true; rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); *do_teardown = false; // Case 3, no locking flag set, and set fn pointers. Threaded access and // use my call backs args.flags = 0; args.CreateMutex = create; args.DestroyMutex = destroy; args.LockMutex = lock; args.UnlockMutex = unlock; rv = C_Initialize (&args); assert_int_equal(rv, CKR_OK); *do_teardown = true; rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); *do_teardown = false; // Case 4, locking flag set, and set fn pointers. Threaded access and // optionally use my callbacks args.flags = CKF_OS_LOCKING_OK; rv = C_Initialize (&args); assert_int_equal(rv, CKR_OK); *do_teardown = true; rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); /* State is finalized, all other checks are negative tests below this */ *do_teardown = false; // Clear args for negative test // Case 5: If some, but not all, of the supplied function pointers to C_Initialize are non-NULL_PTR, // then C_Initialize should return with the value CKR_ARGUMENTS_BAD. memset(&args, 0, sizeof(args)); args.CreateMutex = create; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); args.DestroyMutex = destroy; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); args.LockMutex = lock; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); memset(&args, 0, sizeof(args)); // Case 6: flag is set but only some function pointers are provided, // then C_Initialize should return with the value CKR_ARGUMENTS_BAD args.flags = CKF_OS_LOCKING_OK; args.DestroyMutex = destroy; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); args.LockMutex = lock; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); args.UnlockMutex = unlock; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); // Case 7: the value of pReserved MUST be NULL_PTR; if it’s not, // then C_Initialize should return with the value CKR_ARGUMENTS_BAD. memset(&args, 0, sizeof(args)); args.pReserved = (void *)0xDEADBEEF; rv = C_Initialize (&args); assert_int_equal(rv, CKR_ARGUMENTS_BAD); // If negative test cases, successfully run C_Initialize rv = C_Finalize(NULL); assert_int_equal(rv, CKR_CRYPTOKI_NOT_INITIALIZED); } void test_c_double_init(void **state) { UNUSED(state); CK_RV rv = C_Initialize (NULL); assert_int_equal(rv, CKR_CRYPTOKI_ALREADY_INITIALIZED); } static void test_c_finalize_bad(void **state) { UNUSED(state); // Give it a pointer and make sure we don't try and dereference it. CK_RV rv = C_Finalize((void *)0xDEADBEEF); assert_int_equal(rv, CKR_ARGUMENTS_BAD); } static void test_double_calls(void **state) { bool *do_teardown = (bool *)(*state); /* already initialized by test setup */ CK_RV rv = C_Initialize(NULL); assert_int_equal(rv, CKR_CRYPTOKI_ALREADY_INITIALIZED); CK_TOKEN_INFO info = { 0 }; rv = C_GetTokenInfo(1, &info); assert_int_equal(rv, CKR_OK); rv = C_Finalize(NULL); assert_int_equal(rv, CKR_OK); *do_teardown = false; rv = C_Initialize(NULL); assert_int_equal(rv, CKR_OK); *do_teardown = true; } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_double_calls, test_setup, test_teardown), cmocka_unit_test_teardown(test_c_init_args, test_teardown), cmocka_unit_test_setup_teardown(test_c_double_init, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_c_finalize_bad, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.9.1/test/integration/pkcs-keygen.int.c0000644000175100017510000012045014535673717015672 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include "test.h" struct test_info { CK_SESSION_HANDLE handle; CK_SLOT_ID slot_id; }; static test_info *test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); ti->slot_id = slots[0]; return ti; } static int test_setup(void **state) { test_info *ti = test_info_new(); CK_RV rv = C_OpenSession(ti->slot_id, CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &ti->handle); assert_int_equal(rv, CKR_OK); *state = ti; return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseAllSessions(ti->slot_id); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_rsa_keygen_missing_attributes(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "minimum-rsa"; /* * keep a dead space in the array so we can add CKA_CLASS * and CKA_KEY_TYPE */ CK_ATTRIBUTE pub[7] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), /* empty */ /* empty */ }; CK_ATTRIBUTE priv[7] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_false), /* empty */ /* empty */ }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub) - 2, priv, ARRAY_LEN(priv) - 2, &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* verify that we can use it via an operation */ mech.mechanism = CKM_SHA256_RSA_PKCS; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); CK_BYTE msg[] = "my foo msg"; CK_BYTE sig[1024]; CK_ULONG siglen = sizeof(sig); rv = C_Sign(session, msg, sizeof(msg) - 1, sig, &siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(siglen, 256); /* try the public key verification */ rv = C_VerifyInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, msg, sizeof(msg) - 1, sig, siglen); assert_int_equal(rv, CKR_OK); /* verify we can find it via pub templ */ CK_OBJECT_CLASS class_pub = CKO_PUBLIC_KEY; pub[ARRAY_LEN(pub)-2].type = CKA_CLASS; pub[ARRAY_LEN(pub)-2].ulValueLen = sizeof(class_pub); pub[ARRAY_LEN(pub)-2].pValue = &class_pub; CK_OBJECT_CLASS class_priv = CKO_PRIVATE_KEY; priv[ARRAY_LEN(priv)-2].type = CKA_CLASS; priv[ARRAY_LEN(priv)-2].ulValueLen = sizeof(class_pub); priv[ARRAY_LEN(priv)-2].pValue = &class_priv; CK_KEY_TYPE keytype = CKK_RSA; pub[ARRAY_LEN(pub)-1].type = CKA_KEY_TYPE; pub[ARRAY_LEN(pub)-1].ulValueLen = sizeof(keytype); pub[ARRAY_LEN(pub)-1].pValue = &keytype; priv[ARRAY_LEN(priv)-1].type = CKA_KEY_TYPE; priv[ARRAY_LEN(priv)-1].ulValueLen = sizeof(keytype); priv[ARRAY_LEN(priv)-1].pValue = &keytype; rv = C_FindObjectsInit(session, pub, ARRAY_LEN(pub)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE pub_handle_dup; CK_ULONG count = 0; rv = C_FindObjects(session, &pub_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify we can find it via priv templ */ rv = C_FindObjectsInit(session, priv, ARRAY_LEN(priv)); assert_int_equal(rv, CKR_OK); count = 0; CK_OBJECT_HANDLE priv_handle_dup; rv = C_FindObjects(session, &priv_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify missing attrs */ verify_missing_pub_attrs_common(session, CKK_RSA, pub_handle_dup); verify_missing_pub_attrs_rsa(session, pub_handle_dup); verify_missing_priv_attrs_common(session, CKK_RSA, priv_handle_dup, CK_FALSE); verify_missing_priv_attrs_rsa(session, priv_handle_dup); } static void test_rsa_keygen_p11tool_templ(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_BYTE id[] = "p11-templ-key-id-rsa"; CK_ULONG bits = 2048; CK_BYTE exp[] = { 0x00, 0x01, 0x00, 0x01 }; //65537 in BN CK_UTF8CHAR label[] = "p11-templ-key-label-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_BASE(CKA_MODULUS_BITS, bits), ADD_ATTR_ARRAY(CKA_PUBLIC_EXPONENT, exp), ADD_ATTR_STR(CKA_LABEL, label) }; CK_ATTRIBUTE priv[] = { ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* verify that we can use it via an operation */ mech.mechanism = CKM_SHA256_RSA_PKCS; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); CK_BYTE msg[] = "my foo msg"; CK_BYTE sig[1024]; CK_ULONG siglen = sizeof(sig); rv = C_Sign(session, msg, sizeof(msg) - 1, sig, &siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(siglen, 256); /* try the public key verification */ rv = C_VerifyInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, msg, sizeof(msg) - 1, sig, siglen); assert_int_equal(rv, CKR_OK); /* verify we can find it via pub templ */ rv = C_FindObjectsInit(session, pub, ARRAY_LEN(pub)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE pub_handle_dup; CK_ULONG count = 0; rv = C_FindObjects(session, &pub_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify we can find it via priv templ */ rv = C_FindObjectsInit(session, priv, ARRAY_LEN(priv)); assert_int_equal(rv, CKR_OK); count = 0; CK_OBJECT_HANDLE priv_handle_dup; rv = C_FindObjects(session, &priv_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify missing attrs */ verify_missing_pub_attrs_common(session, CKK_RSA, pub_handle_dup); verify_missing_pub_attrs_rsa(session, pub_handle_dup); verify_missing_priv_attrs_common(session, CKK_RSA, priv_handle_dup, CK_TRUE); verify_missing_priv_attrs_rsa(session, priv_handle_dup); } static void test_ecc_keygen_p11tool_templ(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_BYTE id[] = "p11-templ-key-id-ecc"; CK_UTF8CHAR label[] = "p11-templ-key-label-ecc"; /* * DER-encoding of an ANSI X9.62 Parameters value * * Windows, surprisingly, had great documentation on how this works: * https://docs.microsoft.com/en-us/windows/desktop/seccertenroll/about-object-identifier */ CK_BYTE ec_params[] = { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_ARRAY(CKA_EC_PARAMS, ec_params), ADD_ATTR_STR(CKA_LABEL, label) }; CK_ATTRIBUTE priv[] = { ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_MECHANISM mech = { .mechanism = CKM_EC_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* verify that we can use it via a sign operation */ mech.mechanism = CKM_ECDSA; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); CK_BYTE sig[1024]; /* * echo -n 'my foo msg' | openssl sha256 | cut -d' ' -f 2-2 | xxd -r -p | xxd -i */ CK_BYTE sha256_msg_hash[] = { 0xcd, 0xd8, 0x92, 0x1d, 0xf0, 0xcd, 0x29, 0xba, 0x4b, 0x8b, 0x87, 0x12, 0x15, 0x07, 0x46, 0xdf, 0xb1, 0x91, 0x50, 0x81, 0xf7, 0xd4, 0x9b, 0xd5, 0x67, 0x58, 0xae, 0x5a, 0xa3, 0x2e, 0x47, 0x0d }; CK_ULONG siglen = sizeof(sig); rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, &siglen); assert_int_equal(rv, CKR_OK); /* * Skip checking the siglen. This comes back as a DER encoded R + S portions of the signature. * R + S is 2 times the curve size in bytes (so 64 for P256) but we're not returning that, were * returning the DER encoded format that tools expect, in DER format which may cause leading * bytes to be dropped from, R + S, so the output size isn't stable. But it's definitely not 0. */ assert_int_not_equal(siglen, 0); /* try the public key verification */ rv = C_VerifyInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, siglen); assert_int_equal(rv, CKR_OK); /* verify we can find it via pub templ */ rv = C_FindObjectsInit(session, pub, ARRAY_LEN(pub)); assert_int_equal(rv, CKR_OK); CK_OBJECT_HANDLE pub_handle_dup; CK_ULONG count = 0; rv = C_FindObjects(session, &pub_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify we can find it via priv templ */ rv = C_FindObjectsInit(session, priv, ARRAY_LEN(priv)); assert_int_equal(rv, CKR_OK); count = 0; CK_OBJECT_HANDLE priv_handle_dup; rv = C_FindObjects(session, &priv_handle_dup, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* verify missing attrs */ verify_missing_pub_attrs_common(session, CKK_EC, pub_handle_dup); verify_missing_priv_attrs_common(session, CKK_EC, priv_handle_dup, CK_TRUE); verify_missing_pub_attrs_ecc(session, pub_handle_dup); verify_missing_priv_attrs_ecc(session, priv_handle_dup); } static void test_ecc_keygen_CKA_DERIVE_CK_TRUE(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_BYTE id[] = "p11-templ-key-id-ecc"; CK_UTF8CHAR label[] = "p11-templ-key-label-ecc"; /* * DER-encoding of an ANSI X9.62 Parameters value * * Windows, surprisingly, had great documentation on how this works: * https://docs.microsoft.com/en-us/windows/desktop/seccertenroll/about-object-identifier */ CK_BYTE ec_params[] = { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_ARRAY(CKA_EC_PARAMS, ec_params), ADD_ATTR_STR(CKA_LABEL, label) }; CK_ATTRIBUTE priv[] = { ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false), ADD_ATTR_BASE(CKA_DERIVE, ck_true) }; CK_MECHANISM mech = { .mechanism = CKM_EC_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* verify that we can use it via a sign operation */ mech.mechanism = CKM_ECDSA; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); } static void test_destroy(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_BYTE id[] = "p11-templ-key-id-ecc-destroy"; CK_UTF8CHAR label[] = "p11-templ-key-label-ecc-destroy"; /* * DER-encoding of an ANSI X9.62 Parameters value * * Windows, surprisingly, had great documentation on how this works: * https://docs.microsoft.com/en-us/windows/desktop/seccertenroll/about-object-identifier */ CK_BYTE ec_params[] = { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_ARRAY(CKA_EC_PARAMS, ec_params) }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_MECHANISM mech = { .mechanism = CKM_EC_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); /* create 2 keys so we remove the one in the middle * creating a gap in the internal linked list */ CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); CK_BYTE id2[] = "p11-templ-key-id-ecc-destroy2"; CK_UTF8CHAR label2[] = "p11-templ-key-label-ecc-destroy2"; CK_ATTRIBUTE pub2[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_ARRAY(CKA_ID, id2), ADD_ATTR_STR(CKA_LABEL, label2), ADD_ATTR_ARRAY(CKA_EC_PARAMS, ec_params) }; CK_ATTRIBUTE priv2[] = { ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_ARRAY(CKA_ID, id2), ADD_ATTR_STR(CKA_LABEL, label2), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_OBJECT_HANDLE pubkey2; CK_OBJECT_HANDLE privkey2; rv = C_GenerateKeyPair (session, &mech, pub2, ARRAY_LEN(pub2), priv2, ARRAY_LEN(priv2), &pubkey2, &privkey2); assert_int_equal(rv, CKR_OK); /* verify that if it's held by sign operation, it can't be deleted */ mech.mechanism = CKM_ECDSA; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); /* attempt failed destroy */ rv = C_DestroyObject(session, privkey); assert_int_equal(rv, CKR_FUNCTION_FAILED); CK_BYTE sig[1024]; /* * echo -n 'my foo msg' | openssl sha256 | cut -d' ' -f 2-2 | xxd -r -p | xxd -i */ CK_BYTE sha256_msg_hash[] = { 0xcd, 0xd8, 0x92, 0x1d, 0xf0, 0xcd, 0x29, 0xba, 0x4b, 0x8b, 0x87, 0x12, 0x15, 0x07, 0x46, 0xdf, 0xb1, 0x91, 0x50, 0x81, 0xf7, 0xd4, 0x9b, 0xd5, 0x67, 0x58, 0xae, 0x5a, 0xa3, 0x2e, 0x47, 0x0d }; CK_ULONG siglen = sizeof(sig); /* finish sign to release the private key */ rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, &siglen); assert_int_equal(rv, CKR_OK); /* attempt good destroy */ rv = C_DestroyObject(session, privkey); assert_int_equal(rv, CKR_OK); /* verify gone */ rv = C_FindObjectsInit(session, priv, ARRAY_LEN(priv)); assert_int_equal(rv, CKR_OK); CK_ULONG count = 0; CK_OBJECT_HANDLE tmp; rv = C_FindObjects(session, &tmp, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 0); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* * PUBLIC BLOCK DESTROY AND CHECKS */ /* * try the public key verification to lock the public portion of the object. * active count == 1 */ rv = C_VerifyInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); /* attempt failed destroy */ rv = C_DestroyObject(session, pubkey); assert_int_equal(rv, CKR_FUNCTION_FAILED); /* release verify active count == 1*/ rv = C_Verify(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, siglen); assert_int_equal(rv, CKR_OK); /* attempt good destroy */ rv = C_DestroyObject(session, pubkey); assert_int_equal(rv, CKR_OK); /* verify gone */ rv = C_FindObjectsInit(session, pub, ARRAY_LEN(pub)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(session, &tmp, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 0); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* now that we have created some gaps, create an object in the gap */ mech.mechanism = CKM_EC_KEY_PAIR_GEN; rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* delete that objects */ rv = C_DestroyObject(session, pubkey); assert_int_equal(rv, CKR_OK); rv = C_DestroyObject(session, privkey); // Heap Use After Free assert_int_equal(rv, CKR_OK); /* verify gone */ rv = C_FindObjectsInit(session, pub, ARRAY_LEN(pub)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(session, &tmp, 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 0); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); } static void test_destroy_rsa_pkcs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "minimum-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_false), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); /* verify that if it's held by sign operation, it can't be deleted */ mech.mechanism = CKM_RSA_PKCS; rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); /* attempt failed destroy */ rv = C_DestroyObject(session, privkey); assert_int_equal(rv, CKR_FUNCTION_FAILED); CK_BYTE sha256_msg_hash[] = { 0x30, 0x31, /* SÈQUENCE */ 0x30, 0x0D, /* SEQUENCE */ 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, /* sha 256 */ 0x05, 0x00, /* NULL */ 0x04, 0x20, /* OCTET STRING, 32 bytes */ 0x12, 0x34, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF, /* hash */ 0x12, 0x34, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF, 0x12, 0x34, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF, 0x12, 0x34, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }; CK_BYTE sig[1024]; CK_ULONG siglen = 0; /* call for size*/ rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), NULL, &siglen); assert_int_equal(rv, CKR_OK); rv = C_DestroyObject(session, privkey); assert_int_equal(rv, CKR_FUNCTION_FAILED); /* finish sign to release the private key */ siglen = sizeof(sig); rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, &siglen); assert_int_equal(rv, CKR_OK); /* attempt good destroy */ rv = C_DestroyObject(session, privkey); assert_int_equal(rv, CKR_OK); rv = C_DestroyObject(session, pubkey); assert_int_equal(rv, CKR_OK); } static void test_keygen_keytype(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_BYTE id[] = "keytype_template_id"; CK_ULONG bits = 2048; CK_BYTE exp[] = { 0x00, 0x01, 0x00, 0x01 }; //65537 in BN CK_UTF8CHAR label[] = "keytype_template_label"; CK_KEY_TYPE keytype = CKK_EC; CK_ATTRIBUTE pub_rsa[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_BASE(CKA_MODULUS_BITS, bits), ADD_ATTR_ARRAY(CKA_PUBLIC_EXPONENT, exp), ADD_ATTR_STR(CKA_LABEL, label), /* deliberately wrong to CKK_EC */ ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), }; CK_ATTRIBUTE priv_rsa[] = { ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_MECHANISM mech_rsa = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech_rsa, pub_rsa, ARRAY_LEN(pub_rsa), priv_rsa, ARRAY_LEN(priv_rsa), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); /* Test ECC Template */ /* * DER-encoding of an ANSI X9.62 Parameters value * * Windows, surprisingly, had great documentation on how this works: * https://docs.microsoft.com/en-us/windows/desktop/seccertenroll/about-object-identifier */ CK_BYTE ec_params[] = { 0x06, 0x08, 0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07 }; keytype = CKK_RSA; CK_ATTRIBUTE pub_ecc[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_ARRAY(CKA_EC_PARAMS, ec_params), ADD_ATTR_STR(CKA_LABEL, label), /* deliberately wrong to CKK_RSA */ ADD_ATTR_BASE(CKA_KEY_TYPE, keytype), }; CK_ATTRIBUTE priv_ecc[] = { ADD_ATTR_ARRAY(CKA_ID, id), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_SENSITIVE, ck_false) }; CK_MECHANISM mech_ecc = { .mechanism = CKM_EC_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; rv = C_GenerateKeyPair (session, &mech_ecc, pub_ecc, ARRAY_LEN(pub_ecc), priv_ecc, ARRAY_LEN(priv_ecc), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); /* Fixup Keytype to correct value CKK_EC */ keytype = CKK_EC; rv = C_GenerateKeyPair (session, &mech_ecc, pub_ecc, ARRAY_LEN(pub_ecc), priv_ecc, ARRAY_LEN(priv_ecc), &pubkey, &privkey); assert_int_equal(rv, CKR_OK); } static CK_RV create_rsa_keypair(CK_SESSION_HANDLE session, CK_UTF8CHAR *label, CK_OBJECT_HANDLE *pubkey, CK_OBJECT_HANDLE *privkey) { CK_BBOOL ck_true = CK_TRUE; CK_BBOOL ck_false = CK_FALSE; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), { .type = CKA_LABEL, .pValue = label, .ulValueLen = strlen((char *)label) }, ADD_ATTR_BASE(CKA_VERIFY_RECOVER, ck_false), ADD_ATTR_BASE(CKA_WRAP, ck_false), ADD_ATTR_BASE(CKA_TRUSTED, ck_false), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), { .type = CKA_LABEL, .pValue = label, .ulValueLen = strlen((char *)label) }, ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_false), ADD_ATTR_BASE(CKA_SIGN_RECOVER, ck_false), ADD_ATTR_BASE(CKA_UNWRAP, ck_false), ADD_ATTR_BASE(CKA_WRAP_WITH_TRUSTED, ck_false), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; return C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), pubkey, privkey); } static void test_non_common_template_attrs(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_UTF8CHAR label[] = "test_non_common_template_attrs"; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = create_rsa_keypair(session, label, &pubkey, &privkey); assert_int_equal(rv, CKR_OK); } static void test_extract_and_private(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; // CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "minimum-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_true), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); } static void test_rsa_keypairgen_wrap(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; // CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "wrap-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_WRAP, ck_true), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_true), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); } static void test_rsa_keypairgen_unwrap(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; // CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "unwrap-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_true), ADD_ATTR_BASE(CKA_UNWRAP, ck_true), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); } static void test_rsa_keypairgen_wrap_unwrap(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BBOOL ck_true = CK_TRUE; // CK_BBOOL ck_false = CK_FALSE; CK_UTF8CHAR label[] = "wrap-unwrap-rsa"; CK_ATTRIBUTE pub[] = { ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_ENCRYPT, ck_true), ADD_ATTR_BASE(CKA_VERIFY, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_WRAP, ck_true), }; CK_ATTRIBUTE priv[] = { ADD_ATTR_BASE(CKA_DECRYPT, ck_true), ADD_ATTR_BASE(CKA_SIGN, ck_true), ADD_ATTR_BASE(CKA_PRIVATE, ck_true), ADD_ATTR_BASE(CKA_TOKEN, ck_true), ADD_ATTR_STR(CKA_LABEL, label), ADD_ATTR_BASE(CKA_EXTRACTABLE, ck_true), ADD_ATTR_BASE(CKA_UNWRAP, ck_true), }; CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_KEY_PAIR_GEN, .pParameter = NULL, .ulParameterLen = 0 }; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); CK_RV rv = C_GenerateKeyPair (session, &mech, pub, ARRAY_LEN(pub), priv, ARRAY_LEN(priv), &pubkey, &privkey); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); } static void test_create_obj_rsa_public_key(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_UTF8CHAR label[] = "test_external_pubkey"; CK_OBJECT_HANDLE tmppubkey; CK_OBJECT_HANDLE privkey; user_login(session); /* create a private public RSA keyapir */ CK_RV rv = create_rsa_keypair(session, label, &tmppubkey, &privkey); assert_int_equal(rv, CKR_OK); BYTE _buf[2][2048] = { 0 }; CK_ATTRIBUTE gettempl[] = { { .type = CKA_MODULUS, .pValue = _buf[0], .ulValueLen = sizeof(_buf[0]) }, { .type = CKA_PUBLIC_EXPONENT, .pValue = _buf[1], .ulValueLen = sizeof(_buf[1]) } }; /* get the modulus and exponent */ rv = C_GetAttributeValue(session, tmppubkey, gettempl, ARRAY_LEN(gettempl)); assert_int_equal(rv, CKR_OK); assert_int_equal(gettempl[0].type, CKA_MODULUS); assert_int_equal(gettempl[1].type, CKA_PUBLIC_EXPONENT); /* * create a new public key object using the C_CreateObject interface * Using the public key information from the keypairgen. */ CK_OBJECT_CLASS clazz = CKO_PUBLIC_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE template[] = { {CKA_CLASS, &clazz, sizeof(clazz)}, {CKA_KEY_TYPE, &key_type, sizeof(key_type)}, {CKA_MODULUS, gettempl[0].pValue, gettempl[0].ulValueLen}, {CKA_PUBLIC_EXPONENT, gettempl[1].pValue, gettempl[1].ulValueLen} }; CK_OBJECT_HANDLE pubkey = 0; rv = C_CreateObject(session, template, ARRAY_LEN(template), &pubkey); assert_int_equal(rv, CKR_OK); /* https://stackoverflow.com/questions/22663457/pkcs11-key-wrapping-using-openssl */ CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS, .ulParameterLen = 0, .pParameter = NULL }; /* * Encrypt with pub key and decrypt with privkey */ rv = C_EncryptInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); BYTE plaintext[] = {'m', 'y', 's', 'e', 'c', 'r', 'e', 't', 'd', 'a', 't', 'a' }; CK_BYTE ciphertext[256] = { 0 }; CK_ULONG ciphertext_len = sizeof(ciphertext); rv = C_Encrypt(session, plaintext, sizeof(plaintext), ciphertext, &ciphertext_len); assert_int_equal(rv, CKR_OK); rv = C_DecryptInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); CK_BYTE plaintext2[sizeof(ciphertext)] = { 0 }; CK_ULONG plaintext2_len = sizeof(plaintext2); rv = C_Decrypt(session, ciphertext, ciphertext_len, plaintext2, &plaintext2_len); assert_int_equal(rv, CKR_OK); assert_int_equal(plaintext2_len, sizeof(plaintext)); assert_memory_equal(plaintext2, plaintext, sizeof(plaintext)); } /* * Place this test here so we don't have to take the test time hit of another * test setup. */ static void test_create_data_object_private (void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BBOOL _false = CK_FALSE; CK_BBOOL _true = CK_TRUE; char label[] = "data object"; char application[] = "my application"; CK_OBJECT_CLASS object_class = CKO_DATA; CK_BYTE id[] = { '1', '2', '3' }; CK_BYTE value[] = "my data object"; CK_ATTRIBUTE data_template[] = { { CKA_CLASS, &object_class, sizeof(object_class) }, { CKA_TOKEN, &_true, sizeof(_true) }, { CKA_PRIVATE, &_true, sizeof(_true) }, { CKA_LABEL, label, sizeof(label) - 1 }, { CKA_MODIFIABLE, &_false, sizeof(_false) }, { CKA_APPLICATION, &application, sizeof(application) - 1 }, { CKA_OBJECT_ID, &id, sizeof(id) }, { CKA_VALUE, value, sizeof(value) } }; CK_OBJECT_HANDLE obj = 0; CK_RV rv = C_CreateObject(session, data_template, ARRAY_LEN(data_template), &obj); assert_int_equal(rv, CKR_OK); CK_BYTE buf[64]; CK_ATTRIBUTE data_template2[] = { { CKA_VALUE, buf, sizeof(buf) }, }; rv = C_GetAttributeValue (session, obj, data_template2, ARRAY_LEN(data_template2)); assert_int_equal(rv, CKR_OK); assert_int_equal(sizeof(value), data_template2[0].ulValueLen); assert_memory_equal(value, buf, sizeof(value)); logout(session); CK_BYTE buf2[64] = { 0 }; CK_ATTRIBUTE data_template3[] = { { CKA_VALUE, buf2, sizeof(buf2) }, }; rv = C_GetAttributeValue (session, obj, data_template3, ARRAY_LEN(data_template3)); assert_int_equal(rv, CKR_OK); assert_int_equal(data_template3[0].ulValueLen, 0); } static void test_create_data_object_public (void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BBOOL _false = CK_FALSE; CK_BBOOL _true = CK_TRUE; char label[] = "public data object"; char application[] = "my application"; CK_OBJECT_CLASS object_class = CKO_DATA; CK_BYTE id[] = { '1', '2', '3', '4' }; CK_BYTE value[] = "my public data object"; CK_ATTRIBUTE data_template[] = { { CKA_CLASS, &object_class, sizeof(object_class) }, { CKA_TOKEN, &_true, sizeof(_true) }, { CKA_PRIVATE, &_false, sizeof(_false) }, { CKA_LABEL, label, sizeof(label) - 1 }, { CKA_MODIFIABLE, &_false, sizeof(_false) }, { CKA_APPLICATION, &application, sizeof(application) - 1 }, { CKA_OBJECT_ID, &id, sizeof(id) }, { CKA_VALUE, value, sizeof(value) } }; CK_OBJECT_HANDLE obj = 0; CK_RV rv = C_CreateObject(session, data_template, ARRAY_LEN(data_template), &obj); assert_int_equal(rv, CKR_ATTRIBUTE_VALUE_INVALID); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_extract_and_private, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_create_data_object_public, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_create_data_object_private, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_create_obj_rsa_public_key, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_keygen_missing_attributes, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_destroy, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_destroy_rsa_pkcs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_ecc_keygen_p11tool_templ, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_keygen_p11tool_templ, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_keygen_keytype, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_non_common_template_attrs, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_keypairgen_wrap, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_keypairgen_unwrap, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_rsa_keypairgen_wrap_unwrap, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_ecc_keygen_CKA_DERIVE_CK_TRUE, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.9.1/test/integration/pkcs-lockout.int.c0000644000175100017510000001445414535673717016076 /* SPDX-License-Identifier: BSD-2-Clause */ #include "tpm.h" #include "test.h" /* we need to manage lockout counter for testing bad auths */ #include #include #include typedef struct test_session_handle test_session_handle; struct test_session_handle { CK_SESSION_HANDLE handle; /* the session handle */ bool is_rw; /* true if the session is R/W false if R/O */ }; /* * The maximum number of sessions any test expects to use * Note: The test_setup() routine only populates 2 session * handles as most tests ONLY need 2. The one test that * needs more than 2 is test_user_login_logout_time_two(), * and it manages the sessions itself. */ #define MAX_TEST_SESSIONS 3 #define C(x) ((CK_UTF8CHAR_PTR)x) typedef struct test_slot test_slot; struct test_slot { CK_SLOT_ID slot_id; /* slot id */ test_session_handle sessions[MAX_TEST_SESSIONS]; /* session on that slot */ }; struct test_info { test_slot slots[2]; /* slots with sessions for use */ }; ESYS_CONTEXT *_g_ectx = NULL; TSS2_TCTI_CONTEXT *_g_tcti = NULL; //TPM2_PT_MAX_AUTH_FAIL static void get_prop(TPM2_PT needle, UINT32 *value) { TPMS_CAPABILITY_DATA *cap_data = NULL; TPMI_YES_NO more_data = TPM2_NO; TSS2_RC rc = Esys_GetCapability(_g_ectx, ESYS_TR_NONE, ESYS_TR_NONE, ESYS_TR_NONE, TPM2_CAP_TPM_PROPERTIES, TPM2_PT_VAR, TPM2_MAX_TPM_PROPERTIES, &more_data, &cap_data); assert_int_equal(rc, TSS2_RC_SUCCESS); UINT32 count = cap_data->data.tpmProperties.count; TPMS_TAGGED_PROPERTY *props = cap_data->data.tpmProperties.tpmProperty; UINT32 i; for(i=0; i < count; i++) { TPM2_PT p = props[i].property; UINT32 v =props[i].value; if (p == needle) { *value = v; Esys_Free(cap_data); return; } } Esys_Free(cap_data); fail_msg("No property: %" PRIu32, needle); } static int _group_setup_locking(void **state) { const char *config = getenv(TPM2_PKCS11_TCTI); TSS2_RC rc = Tss2_TctiLdr_Initialize(config, &_g_tcti); assert_int_equal(rc, TSS2_RC_SUCCESS); rc = Esys_Initialize(&_g_ectx, _g_tcti, NULL); assert_int_equal(rc, TSS2_RC_SUCCESS); return group_setup_locking(state); } static int _group_teardown(void **state) { Esys_Finalize(&_g_ectx); Tss2_TctiLdr_Finalize(&_g_tcti); free(_g_tcti); return group_teardown(state); } /** * Opens a session on a slot * @param slot * The slot id to open the session on * @param is_rw * True if it should open the session as R/W via CKF_RW_SESSION, else it's just R/O. * @param tsh * The test_session_handle to populate */ static void open_session(CK_SLOT_ID slot, bool is_rw, test_session_handle *tsh) { CK_FLAGS flags = CKF_SERIAL_SESSION; if (is_rw) { flags |= CKF_RW_SESSION; } CK_RV rv = C_OpenSession(slot, CKF_SERIAL_SESSION | flags, NULL, NULL, &tsh->handle); assert_int_equal(rv, CKR_OK); tsh->is_rw = is_rw; } /** * Creates and populates a test_info structure but * DOES NOT open ANY sessions. * @return * test_info *, asserts on ENOMEM. */ static test_info *_test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); ti->slots[0].slot_id = slots[0]; ti->slots[1].slot_id = slots[1]; return ti; } /** * Creates a new test_info structure populating: * slot[0]: * - slot_id --> slot_id of the token * - session[0] --> a valid session * - session[1] --> a valid session * slot[1]: * - slot_id --> slot_id of the token * - session[0] --> a valid session * * @param is_rw * True if the sessions should be R/W false for R/O * @return * test_info on success. */ static test_info *test_info_new(bool is_rw) { test_info *ti = _test_info_new(); CK_SLOT_ID slot_id = ti->slots[0].slot_id; test_session_handle *tsh = &ti->slots[0].sessions[0]; /* open two RO sessions on slot 0, and one on slot 1 */ open_session(slot_id, is_rw, tsh); tsh = &ti->slots[0].sessions[1]; open_session(slot_id, is_rw, tsh); slot_id = ti->slots[1].slot_id; tsh = &ti->slots[1].sessions[0]; open_session(slot_id, is_rw, tsh); return ti; } /** * Sets up a test run with read-only sessions * @param state * The CMOCKA state to populate * @return * 0 on success or asserts on error. */ static int test_setup_ro(void **state) { *state = test_info_new(false); return 0; } /** * Closes all sessions for slots and frees the test_info * structure. * @param state * Expects *state to be a valid test_info pointer. * @return */ static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); unsigned i; for (i=0; i < ARRAY_LEN(ti->slots); i++) { CK_SLOT_ID slot_id = ti->slots[i].slot_id; CK_RV rv = C_CloseAllSessions(slot_id); assert_int_equal(rv, CKR_OK); } free(ti); return 0; } static void test_user_lockout(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; /* tpm's are generally configured for 3 attempts you can check * tpm2_getcap properties-variable * - TPM2_PT_MAX_AUTH_FAIL: 0x3 */ UINT32 max_fail = 0; get_prop(TPM2_PT_MAX_AUTH_FAIL, &max_fail); UINT32 count = 0; get_prop(TPM2_PT_LOCKOUT_COUNTER, &count); assert_int_equal(count, 0); UINT32 i; for(i=0; i < max_fail; i++) { login_expects(handle, CKU_USER, CKR_PIN_INCORRECT, C(BAD_USERPIN), sizeof(BAD_USERPIN) - 1); get_prop(TPM2_PT_LOCKOUT_COUNTER, &count); assert_int_equal(count, i + 1); } get_prop(TPM2_PT_LOCKOUT_COUNTER, &count); assert_int_equal(count, max_fail); login_expects(handle, CKU_USER, CKR_PIN_LOCKED, C(GOOD_USERPIN), sizeof(GOOD_USERPIN) - 1); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_user_lockout, test_setup_ro, test_teardown), }; return cmocka_run_group_tests(tests, _group_setup_locking, _group_teardown); } tpm2-pkcs11-1.9.1/test/integration/pkcs-login-logout.int.c0000644000175100017510000005563214535673717017040 /* SPDX-License-Identifier: BSD-2-Clause */ #include "tpm.h" #include "test.h" /* we need to manage lockout counter for testing bad auths */ #include #include #include typedef struct test_session_handle test_session_handle; struct test_session_handle { CK_SESSION_HANDLE handle; /* the session handle */ bool is_rw; /* true if the session is R/W false if R/O */ }; /* * The maximum number of sessions any test expects to use * Note: The test_setup() routine only populates 2 session * handles as most tests ONLY need 2. The one test that * needs more than 2 is test_user_login_logout_time_two(), * and it manages the sessions itself. */ #define MAX_TEST_SESSIONS 3 #define C(x) ((CK_UTF8CHAR_PTR)x) typedef struct test_slot test_slot; struct test_slot { CK_SLOT_ID slot_id; /* slot id */ test_session_handle sessions[MAX_TEST_SESSIONS]; /* session on that slot */ }; struct test_info { test_slot slots[2]; /* slots with sessions for use */ }; ESYS_CONTEXT *_g_ectx = NULL; TSS2_TCTI_CONTEXT *_g_tcti = NULL; static int _group_setup_locking(void **state) { const char *config = getenv(TPM2_PKCS11_TCTI); TSS2_RC rc = Tss2_TctiLdr_Initialize(config, &_g_tcti); if (rc != TSS2_RC_SUCCESS) { return CKR_GENERAL_ERROR; } rc = Esys_Initialize(&_g_ectx, _g_tcti, NULL); assert_int_equal(rc, TSS2_RC_SUCCESS); return group_setup_locking(state); } static int _group_teardown(void **state) { Esys_Finalize(&_g_ectx); Tss2_TctiLdr_Finalize(&_g_tcti); free(_g_tcti); return group_teardown(state); } /** * Opens a session on a slot * @param slot * The slot id to open the session on * @param is_rw * True if it should open the session as R/W via CKF_RW_SESSION, else it's just R/O. * @param tsh * The test_session_handle to populate */ static void open_session(CK_SLOT_ID slot, bool is_rw, test_session_handle *tsh) { CK_FLAGS flags = CKF_SERIAL_SESSION; if (is_rw) { flags |= CKF_RW_SESSION; } CK_RV rv = C_OpenSession(slot, CKF_SERIAL_SESSION | flags, NULL, NULL, &tsh->handle); assert_int_equal(rv, CKR_OK); tsh->is_rw = is_rw; } /** * Creates and populates a test_info structure but * DOES NOT open ANY sessions. * @return * test_info *, asserts on ENOMEM. */ static test_info *_test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); ti->slots[0].slot_id = slots[0]; ti->slots[1].slot_id = slots[1]; return ti; } /** * Creates a new test_info structure populating: * slot[0]: * - slot_id --> slot_id of the token * - session[0] --> a valid session * - session[1] --> a valid session * slot[1]: * - slot_id --> slot_id of the token * - session[0] --> a valid session * * @param is_rw * True if the sessions should be R/W false for R/O * @return * test_info on success. */ static test_info *test_info_new(bool is_rw) { test_info *ti = _test_info_new(); CK_SLOT_ID slot_id = ti->slots[0].slot_id; test_session_handle *tsh = &ti->slots[0].sessions[0]; /* open two RO sessions on slot 0, and one on slot 1 */ open_session(slot_id, is_rw, tsh); tsh = &ti->slots[0].sessions[1]; open_session(slot_id, is_rw, tsh); slot_id = ti->slots[1].slot_id; tsh = &ti->slots[1].sessions[0]; open_session(slot_id, is_rw, tsh); return ti; } static void test_setup_teardown_common(void) { /* * Reset the DA counter as login tests can affect * the count */ TPM2B_AUTH auth = { .size = 0 }; TSS2_RC rc = Esys_TR_SetAuth(_g_ectx, ESYS_TR_RH_LOCKOUT, &auth); assert_int_equal(rc, TSS2_RC_SUCCESS); rc = Esys_DictionaryAttackLockReset(_g_ectx, ESYS_TR_RH_LOCKOUT, ESYS_TR_PASSWORD, ESYS_TR_NONE, ESYS_TR_NONE); assert_int_equal(rc, TSS2_RC_SUCCESS); } /** * Sets up a test run with read/write sessions * @param state * The CMOCKA state to populate * @return * 0 on success or asserts on error. */ static int test_setup_rw(void **state) { test_setup_teardown_common(); *state = test_info_new(true); return 0; } /** * Sets up a test run with read-only sessions * @param state * The CMOCKA state to populate * @return * 0 on success or asserts on error. */ static int test_setup_ro(void **state) { test_setup_teardown_common(); *state = test_info_new(false); return 0; } /** * Closes all sessions for slots and frees the test_info * structure. * @param state * Expects *state to be a valid test_info pointer. * @return */ static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); test_setup_teardown_common(); unsigned i; for (i=0; i < ARRAY_LEN(ti->slots); i++) { CK_SLOT_ID slot_id = ti->slots[i].slot_id; CK_RV rv = C_CloseAllSessions(slot_id); assert_int_equal(rv, CKR_OK); } free(ti); return 0; } /** * Performs an SO login test * @param state * Cmocka state where *state is a valid test_info *. */ static void test_so_login_logout_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; so_login(handle); logout(handle); } /** * Performs a USER login test * @param state * Cmocka state where *state is a valid test_info *. */ static void test_user_login_logout_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; user_login(session); logout(session); } /** * Performs a USER login test with a bad pin * @param state * Cmocka state where *state is a valid test_info *. */ static void test_user_login_incorrect_pin(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; CK_BYTE upin[] = BAD_USERPIN; CK_RV rv = C_Login(session, CKU_USER, upin, sizeof(upin) - 1); assert_int_equal(rv, CKR_PIN_INCORRECT); } /** * Performs a SO login test with a bad pin * @param state * Cmocka state where *state is a valid test_info *. */ void test_so_login_incorrect_pin(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; so_login_bad_pin(session); } /** * Tests C_Logout without C_Login fails with CKR_USER_NOT_LOGGED_IN * @param state * Cmocka state where *state is a valid test_info *. */ static void test_logout_bad_not_logged_in(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; // Logout without Login CK_RV rv = C_Logout(session); assert_int_equal(rv, CKR_USER_NOT_LOGGED_IN); } /** * Tests C_Logout with an invalid session handle fails with CKR_SESSION_HANDLE_INVALID * @param state * Cmocka state where *state is a valid test_info *. */ static void test_logout_bad_invalid_session_handle(void **state) { UNUSED(state); // Logout with an Invalid Session CK_RV rv = C_Logout((CK_ULONG)-10); assert_int_equal(rv, CKR_SESSION_HANDLE_INVALID); } /** * Tests C_Login with an R/O session for a SO user fails with CKR_SESSION_READ_ONLY_EXISTS * @param state * Cmocka state where *state is a valid test_info *. */ static void test_so_on_ro_session(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; so_login_expects(session, CKR_SESSION_READ_ONLY_EXISTS); } /** * Tests C_Login when SO is already logged in fails with CKR_USER_ALREADY_LOGGED_IN * @param state * Cmocka state where *state is a valid test_info *. */ static void test_so_login_already_logged_in(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->slots[0].sessions[0].handle; so_login(session); so_login_expects(session, CKR_USER_ALREADY_LOGGED_IN); CK_RV rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } /** * Validates that *EXISTING* session state changes on SO logins. Ie all sessions * are logged in. * @param state * Cmocka state where *state is a valid test_info *. */ static void test_so_global_login_logout_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE slot0_session0 = ti->slots[0].sessions[0].handle; CK_SESSION_HANDLE slot0_session1 = ti->slots[0].sessions[1].handle; CK_SESSION_HANDLE slot1_session0 = ti->slots[1].sessions[0].handle; so_login(slot0_session0); so_login_expects(slot0_session1, CKR_USER_ALREADY_LOGGED_IN); logout(slot0_session1); logout_expects(slot1_session0, CKR_USER_NOT_LOGGED_IN); } /** * Validates that *EXISTING* session state changes on USER logins. Ie all sessions * are logged in. * @param state * Cmocka state where *state is a valid test_info *. */ static void test_user_global_login_logout_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE slot0_session0 = ti->slots[0].sessions[0].handle; CK_SESSION_HANDLE slot0_session1 = ti->slots[0].sessions[1].handle; CK_SESSION_HANDLE slot1_session0 = ti->slots[1].sessions[0].handle;; /* * login on slot 0 session 0, and verify that it is logged in on the other session */ user_login(slot0_session0); user_login_expects(slot0_session1, CKR_USER_ALREADY_LOGGED_IN); /* * logging out of slot 1 session 0 should yield not logged in (different slot) */ logout_expects(slot1_session0, CKR_USER_NOT_LOGGED_IN); /* * logging out of slot 0 should yield a logout and no other sessions should * be logged in. Try cross session login/logout. Ie DONT login and logout from * the same session */ logout(slot0_session1); logout_expects(slot0_session0, CKR_USER_NOT_LOGGED_IN); } /** * Replicate issue https://github.com/tpm2-software/tpm2-pkcs11/issues/81 * * Where a C_OpenSession, C_Login, C_OpenSession, C_Login fails * @param state * Cmocka state where *state is a valid test_info *. */ static void test_user_login_logout_time_two(void **state) { /* * We don't use the common init as this needs to manage session * state on it's own */ test_info *ti = _test_info_new(); *state = ti; CK_SLOT_ID slot_id = ti->slots[0].slot_id; test_session_handle *tsh[3] = { &ti->slots[0].sessions[0], &ti->slots[0].sessions[1], &ti->slots[0].sessions[2] }; /* * Open an R/O session, state should be initially at * CKS_RO_PUBLIC_SESSION */ open_session(slot_id, false, tsh[0]); CK_SESSION_INFO info; CK_RV rv = C_GetSessionInfo(tsh[0]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_PUBLIC_SESSION); /* * Login should cause state to change from: * CKS_RO_PUBLIC_SESSION * to * CKS_RO_USER_FUNCTIONS */ user_login(tsh[0]->handle); rv = C_GetSessionInfo(tsh[0]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_USER_FUNCTIONS); /* * Now that we're logged in, new R/0 sessions should start in the * state: CKS_RO_USER_FUNCTIONS */ open_session(slot_id, false, tsh[1]); rv = C_GetSessionInfo(tsh[1]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_USER_FUNCTIONS); /* * Start another session but R/W, and state should be CKS_RW_USER_FUNCTIONS */ open_session(slot_id, true, tsh[2]); rv = C_GetSessionInfo(tsh[2]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RW_USER_FUNCTIONS); /* * C_Logout, ALL states should return to CKS_RO_PUBLIC_SESSION or CKS_RW_PUBLIC_SESSION * depending on flags */ logout(tsh[1]->handle); unsigned i; for (i=0; i < ARRAY_LEN(tsh); i++) { test_session_handle *t = tsh[i]; rv = C_GetSessionInfo(t->handle, &info); assert_int_equal(rv, CKR_OK); CK_STATE expected = t->is_rw ? CKS_RW_PUBLIC_SESSION : CKS_RO_PUBLIC_SESSION; assert_int_equal(info.state, expected); } rv = C_CloseAllSessions(slot_id); assert_int_equal(rv, CKR_OK); } static void test_user_login_implicit_close_all_logout(void **state) { /* * We don't use the common init as this needs to manage session * state on it's own */ test_info *ti = _test_info_new(); *state = ti; CK_SLOT_ID slot_id = ti->slots[0].slot_id; test_session_handle *tsh[3] = { &ti->slots[0].sessions[0], &ti->slots[0].sessions[1], &ti->slots[0].sessions[2] }; /* * Open an R/O session, state should be initially at * CKS_RO_PUBLIC_SESSION */ open_session(slot_id, false, tsh[0]); CK_SESSION_INFO info; CK_RV rv = C_GetSessionInfo(tsh[0]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_PUBLIC_SESSION); /* * Login should cause state to change from: * CKS_RO_PUBLIC_SESSION * to * CKS_RO_USER_FUNCTIONS */ user_login(tsh[0]->handle); rv = C_GetSessionInfo(tsh[0]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_USER_FUNCTIONS); /* * Now that we're logged in, new R/0 sessions should start in the * state: CKS_RO_USER_FUNCTIONS */ open_session(slot_id, false, tsh[1]); rv = C_GetSessionInfo(tsh[1]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RO_USER_FUNCTIONS); /* * Start another session but R/W, and state should be CKS_RW_USER_FUNCTIONS */ open_session(slot_id, true, tsh[2]); rv = C_GetSessionInfo(tsh[2]->handle, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.state, CKS_RW_USER_FUNCTIONS); /* * C_CloseAllSessions: should cause a logout. */ rv = C_CloseAllSessions(slot_id); assert_int_equal(rv, CKR_OK); /* no login should cause a CKR_USER_NOT_LOGGED_IN error */ open_session(slot_id, false, tsh[0]); logout_expects(tsh[0]->handle, CKR_USER_NOT_LOGGED_IN); } static void _swap_pin(CK_SESSION_HANDLE handle, bool do_logout, CK_USER_TYPE user_type, CK_UTF8CHAR_PTR oldpin, CK_ULONG oldpinlen) { CK_UTF8CHAR_PTR newpin = user_type == CKU_SO ? C("newsopin") : C("newuserpin"); CK_ULONG newpinlen = user_type == CKU_SO ? (sizeof("newsopin") - 1): (sizeof("newuserpin") - 1); // Set the new pin CK_RV rv = C_SetPIN(handle, oldpin, oldpinlen, newpin, newpinlen); assert_int_equal(rv, CKR_OK); if (do_logout) { logout(handle); } // new pin should work for login login_expects(handle, user_type, CKR_OK, newpin, newpinlen); // swap the pin back rv = C_SetPIN(handle, newpin, newpinlen, oldpin, oldpinlen); assert_int_equal(rv, CKR_OK); } static void swap_pin(CK_SESSION_HANDLE handle, CK_USER_TYPE user_type, CK_UTF8CHAR_PTR oldpin, CK_ULONG oldpinlen) { _swap_pin(handle, true, user_type, oldpin, oldpinlen); } static void swap_pin_nologout(CK_SESSION_HANDLE handle, CK_USER_TYPE user_type, CK_UTF8CHAR_PTR oldpin, CK_ULONG oldpinlen) { _swap_pin(handle, false, user_type, oldpin, oldpinlen);} static void test_user_state_pin_change_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; user_login(handle); swap_pin(handle, CKU_USER, C(GOOD_USERPIN), sizeof(GOOD_USERPIN) - 1); logout(handle); } static void test_nologin_state_pin_change_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; swap_pin_nologout(handle, CKU_USER, C(GOOD_USERPIN), sizeof(GOOD_USERPIN) - 1); logout(handle); } static void test_so_state_pin_change_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; so_login(handle); swap_pin(handle, CKU_SO, C(GOOD_SOPIN), sizeof(GOOD_SOPIN) - 1); logout(handle); } static void test_ro_function_state_pin_change_bad(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; /* * NO LOGIN - should leave us in R/O Functions state */ CK_UTF8CHAR_PTR oldpin = C("doesntmatter"); CK_ULONG oldpinlen = sizeof("doesntmatter") - 1; CK_UTF8CHAR_PTR newpin = C("whocares"); CK_ULONG newpinlen = sizeof("whocares") - 1; // Set the new pin CK_RV rv = C_SetPIN(handle, oldpin, oldpinlen, newpin, newpinlen); assert_int_equal(rv, CKR_SESSION_READ_ONLY); } static void test_so_state_pin_init_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->slots[0].sessions[0].handle; so_login(handle); const char newpin[] = "mynewuserpin"; CK_RV rv = C_InitPIN(handle, C(newpin), sizeof(newpin) - 1); assert_int_equal(rv, CKR_OK); /* * logging in as user with the old pin should fail */ logout(handle); login_expects(handle, CKU_USER, CKR_PIN_INCORRECT, C(GOOD_USERPIN), sizeof(GOOD_USERPIN) - 1); /* * log back in as so and change it back */ so_login(handle); rv = C_InitPIN(handle, C(GOOD_USERPIN), sizeof(GOOD_USERPIN) - 1); assert_int_equal(rv, CKR_OK); logout(handle); } static void test_double_init_token(void **state) { test_info *ti = test_info_from_state(state); CK_SLOT_ID slot = ti->slots[0].slot_id; unsigned char sopin[] = GOOD_SOPIN; CK_BYTE label[32 + 1] = "doubleinittoken "; CK_RV rv = C_InitToken(slot, sopin, sizeof(sopin) - 1, label); assert_int_equal(rv, CKR_ARGUMENTS_BAD); } static void test_init_token(void **state) { UNUSED(state); CK_SLOT_ID slots[10]; CK_ULONG slot_cnt = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList (CK_TRUE, slots, &slot_cnt); assert_int_equal(rv, CKR_OK); bool found = false; CK_SLOT_ID slot = 0; CK_ULONG i; for (i=0; i < slot_cnt; i++) { CK_SLOT_ID s = slots[i]; CK_TOKEN_INFO info = { 0 }; rv = C_GetTokenInfo (s, &info); assert_int_equal(rv, CKR_OK); if (!(info.flags & CKF_TOKEN_INITIALIZED)) { found = true; slot = s; break; } /* keep looking */ } /* We better find an empty slot, or something is broken */ assert_int_equal(found, true); /* Initialize a token */ unsigned char sopin[] = GOOD_SOPIN; CK_BYTE label[32 + 1] = "mynewtoken42 "; CK_BYTE bad_label[32 + 1] = "myne\0wtoken42 "; rv = C_InitToken(slot, sopin, sizeof(sopin) - 1, bad_label); assert_int_equal(rv, CKR_ARGUMENTS_BAD); rv = C_InitToken(slot, sopin, sizeof(sopin) - 1, label); assert_int_equal(rv, CKR_OK); /* * Verify that we cannot do a USER login until pin is initialized * Bug: https://github.com/tpm2-software/tpm2-pkcs11/issues/563 */ CK_SESSION_HANDLE session = 0; rv = C_OpenSession(slot, CKF_SERIAL_SESSION|CKF_RW_SESSION, NULL, NULL, &session); assert_int_equal(rv, CKR_OK); rv = C_Login(session, CKU_USER, C("anypin"), 6); assert_int_equal(rv, CKR_USER_PIN_NOT_INITIALIZED); /* establish R/W SO Functions login state */ rv = C_Login(session, CKU_SO, sopin, sizeof(sopin) - 1); assert_int_equal(rv, CKR_OK); /* Initialize the Pin */ const char userpin[] = GOOD_USERPIN; rv = C_InitPIN(session, C(userpin), sizeof(userpin) - 1); assert_int_equal(rv, CKR_OK); /* logout of the SO session */ rv = C_Logout(session); assert_int_equal(rv, CKR_OK); user_login(session); logout(session); /* * Try to initialize a token of the same name to verify DB UNIQUE constraint error path * We know that slot + 1 brings us to the next uninitialized slot... */ rv = C_InitToken(slot + 1, sopin, sizeof(sopin) - 1, label); assert_int_equal(rv, CKR_GENERAL_ERROR); } int main() { const struct CMUnitTest tests[] = { /* * No Session tests */ cmocka_unit_test_setup_teardown(test_logout_bad_invalid_session_handle, NULL, NULL), /* * R/O Session Tests */ cmocka_unit_test_setup_teardown(test_user_login_logout_good, test_setup_ro, test_teardown), cmocka_unit_test_setup_teardown(test_user_login_incorrect_pin, test_setup_ro, test_teardown), cmocka_unit_test_setup_teardown(test_logout_bad_not_logged_in, test_setup_ro, test_teardown), cmocka_unit_test_setup_teardown(test_so_on_ro_session, test_setup_ro, test_teardown), cmocka_unit_test_setup_teardown(test_user_global_login_logout_good, test_setup_ro, test_teardown), cmocka_unit_test_setup_teardown(test_user_login_logout_time_two, NULL, test_teardown), cmocka_unit_test_setup_teardown(test_user_login_implicit_close_all_logout, NULL, test_teardown), /* * R/W Session Tests */ cmocka_unit_test_setup_teardown(test_so_login_already_logged_in, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_so_login_logout_good, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_so_login_incorrect_pin, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_so_global_login_logout_good, test_setup_rw, test_teardown), /* * Changepin tests, These should stay last, if they fail they could leave the token * in a weird state causing subsequent test failures. */ cmocka_unit_test_setup_teardown(test_user_state_pin_change_good, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_so_state_pin_change_good, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_nologin_state_pin_change_good, test_setup_rw, test_teardown), cmocka_unit_test_setup_teardown(test_ro_function_state_pin_change_bad, test_setup_ro, test_teardown), /* * C_InitPIN tests should also stay last as if they fail they can leave the token * in a weird state */ cmocka_unit_test_setup_teardown(test_so_state_pin_init_good, test_setup_rw, test_teardown), /* These work on new tokens via slots and thus don't matter the order */ cmocka_unit_test_setup_teardown(test_double_init_token, test_setup_ro, test_teardown), cmocka_unit_test(test_init_token), }; return cmocka_run_group_tests(tests, _group_setup_locking, _group_teardown); } tpm2-pkcs11-1.9.1/test/integration/pkcs-misc.int.c0000644000175100017510000003133614535673717015347 /* SPDX-License-Identifier: BSD-2-Clause */ #include "test.h" /* * config *MUST* go after test.h or cmocka includes cause some * odd memory issues. */ #include "config.h" struct test_info { CK_SESSION_HANDLE handles[6]; CK_SLOT_ID slot_id; }; static test_info *test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* get the slots and verify that count is updated * when buffer is null or count is too small */ CK_SLOT_ID slots[TOKEN_COUNT]; CK_ULONG count = 0; CK_RV rv = C_GetSlotList(true, NULL, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); CK_ULONG count2 = count - 1; rv = C_GetSlotList(true, slots, &count2); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(count2, count); rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); ti->slot_id = slots[0]; return ti; } static int test_setup(void **state) { test_info *ti = test_info_new(); CK_RV rv = C_OpenSession(ti->slot_id, CKF_SERIAL_SESSION, NULL, NULL, &ti->handles[0]); assert_int_equal(rv, CKR_OK); *state = ti; return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseAllSessions(ti->slot_id); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_c_getfunctionlist_good(void **state) { UNUSED(state); //Case 1: Successfully obtain function list CK_FUNCTION_LIST_PTR pFunctionList; CK_RV rv = C_GetFunctionList(&pFunctionList); assert_int_equal(rv, CKR_OK); } static void test_c_getfunctionlist_bad(void **state) { UNUSED(state); //Case 2: Null PTR fails CK_RV rv = C_GetFunctionList(NULL); assert_int_equal(rv, CKR_ARGUMENTS_BAD); } static void test_get_slot_list(void **state) { UNUSED(state); CK_SLOT_ID slots[6]; CK_ULONG count; // Case 1: Good test to get the count of slots CK_RV rv = C_GetSlotList(true, NULL, &count); assert_int_equal(rv, CKR_OK); // Case 2: Good test to get the slots in buffer rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); CK_SLOT_INFO sinfo; rv = C_GetSlotInfo(slots[0], &sinfo); assert_int_equal(rv, CKR_OK); assert_true(sinfo.flags & CKF_TOKEN_PRESENT); assert_true(sinfo.flags & CKF_HW_SLOT); CK_TOKEN_INFO tinfo; rv = C_GetTokenInfo(slots[0], &tinfo); assert_int_equal(rv, CKR_OK); assert_true(tinfo.flags & CKF_RNG); assert_true(tinfo.flags & CKF_TOKEN_INITIALIZED); } static void test_get_info(void **state) { UNUSED(state); CK_INFO info; CK_RV rv; // check if null pointer is handled correctly rv = C_GetInfo(NULL); assert_int_equal(rv, CKR_ARGUMENTS_BAD); // check for successful invocation rv = C_GetInfo(&info); assert_int_equal(rv, CKR_OK); // check whether cryptoki version is correct assert_int_equal(info.cryptokiVersion.major, 2); assert_int_equal(info.cryptokiVersion.minor, 40); CK_BYTE major; CK_BYTE minor; parse_lib_version(PACKAGE_VERSION, &major, &minor); assert_int_equal(info.libraryVersion.major, major); assert_int_equal(info.libraryVersion.minor, minor); } static void test_random_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; user_login(ti->handles[0]); CK_BYTE buf[4]; // Case 1: Good test CK_RV rv = C_GenerateRandom(handle++, buf, sizeof(buf)); assert_int_equal(rv, CKR_OK); } static void test_random_bad_session_handle(void **state) { test_info *ti = test_info_from_state(state); /* make the handle bad */ CK_SESSION_HANDLE handle = ~ti->handles[0]; CK_BYTE buf[4]; // Case 2: Test bad session CK_RV rv = C_GenerateRandom(handle, buf, sizeof(buf)); assert_int_equal(rv, CKR_SESSION_HANDLE_INVALID); } static void test_seed(void **state) { static CK_BYTE buf[]="ksadjfhjkhfsiudgfkjewsdjbkfcoidugshbvfewug"; test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; user_login(ti->handles[0]); CK_RV rv = C_SeedRandom(handle, buf, sizeof(buf)); assert_int_equal(rv, CKR_OK); } static void test_get_session_info (void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; CK_SESSION_INFO info; CK_RV rv = C_GetSessionInfo(handle, &info); assert_int_equal(rv, CKR_OK); } static void test_digest_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; user_login(handle); CK_MECHANISM smech = { .mechanism = CKM_SHA256, .pParameter = NULL, .ulParameterLen = 0 }; CK_RV rv = C_DigestInit(handle, &smech); assert_int_equal(rv, CKR_OK); // sizeof a sha256 hash CK_BYTE data[] = "Hello World This is My First Digest Message"; CK_BYTE hash[32]; CK_ULONG hashlen = sizeof(hash); rv = C_DigestUpdate(handle, data, sizeof(data) - 1); assert_int_equal(rv, CKR_OK); rv = C_DigestFinal(handle, hash, &hashlen); assert_int_equal(rv, CKR_OK); CK_BYTE hash2[32]; CK_ULONG hash2len = sizeof(hash); rv = C_DigestInit(handle, &smech); assert_int_equal(rv, CKR_OK); rv = C_Digest(handle, data, sizeof(data) - 1, hash2, &hash2len); assert_int_equal(rv, CKR_OK); rv = C_Logout(handle); assert_int_equal(rv, CKR_OK); assert_int_equal(hash2len, hashlen); assert_memory_equal(hash, hash2, hash2len); /* * expected hash of data */ CK_BYTE expected_digest[] = { 0xce, 0x89, 0xe6, 0x32, 0xe2, 0x56, 0x4c, 0x7b, 0xdb, 0x3c, 0x01, 0xca, 0x28, 0x20, 0x9b, 0x02, 0x9b, 0x80, 0x05, 0x99, 0x65, 0xb2, 0x8e, 0x58, 0xe0, 0xb3, 0xec, 0x88, 0x16, 0xe0, 0x77, 0x77 }; assert_int_equal(hashlen, sizeof(expected_digest)); assert_memory_equal(hash, expected_digest, sizeof(expected_digest)); } static void test_digest_5_2_returns_oneshot(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; user_login(handle); CK_MECHANISM hash_mechanism = { CKM_SHA256, NULL_PTR, 0 }; /* digest create */ CK_RV rv = C_DigestInit(handle, &hash_mechanism); assert_int_equal(rv, CKR_OK); CK_BYTE data[] = "Hello World This is My First Digest Message"; CK_BYTE hash[32]; CK_ULONG hashlen = 2; /* CKR_BUFFER_TOO_SMALL - buffer supplied but too small */ rv = C_Digest(handle, data, sizeof(data) - 1, hash, &hashlen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(hashlen, 32); /* CKR_OK NULL buffer */ hashlen = 0; rv = C_Digest(handle, data, sizeof(data) - 1, NULL, &hashlen); assert_int_equal(rv, CKR_OK); assert_int_equal(hashlen, 32); /* finish the operation */ rv = C_Digest(handle, data, sizeof(data) - 1, hash, &hashlen); assert_int_equal(rv, CKR_OK); assert_int_equal(hashlen, 32); /* * expected hash of data */ CK_BYTE expected_digest[] = { 0xce, 0x89, 0xe6, 0x32, 0xe2, 0x56, 0x4c, 0x7b, 0xdb, 0x3c, 0x01, 0xca, 0x28, 0x20, 0x9b, 0x02, 0x9b, 0x80, 0x05, 0x99, 0x65, 0xb2, 0x8e, 0x58, 0xe0, 0xb3, 0xec, 0x88, 0x16, 0xe0, 0x77, 0x77 }; assert_int_equal(hashlen, sizeof(expected_digest)); assert_memory_equal(hash, expected_digest, sizeof(expected_digest)); } static void test_digest_5_2_returns_multipart(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE handle = ti->handles[0]; user_login(handle); CK_MECHANISM hash_mechanism = { CKM_SHA256, NULL_PTR, 0 }; /* digest create */ CK_RV rv = C_DigestInit(handle, &hash_mechanism); assert_int_equal(rv, CKR_OK); CK_BYTE data[] = "Hello World This is My First Digest Message"; rv = C_DigestUpdate(handle, data, sizeof(data) - 1); assert_int_equal(rv, CKR_OK); /* finish the operation CKR_BUFFER_TOO_SMALL */ CK_BYTE hash[32]; CK_ULONG hashlen = 2; rv = C_DigestFinal(handle, hash, &hashlen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(hashlen, 32); hashlen = 64; /* CKR_OK - NULL output buffer */ rv = C_DigestFinal(handle, NULL, &hashlen); assert_int_equal(rv, CKR_OK); assert_int_equal(hashlen, 32); rv = C_DigestFinal(handle, hash, &hashlen); assert_int_equal(rv, CKR_OK); assert_int_equal(hashlen, 32); /* * expected hash of data */ CK_BYTE expected_digest[] = { 0xce, 0x89, 0xe6, 0x32, 0xe2, 0x56, 0x4c, 0x7b, 0xdb, 0x3c, 0x01, 0xca, 0x28, 0x20, 0x9b, 0x02, 0x9b, 0x80, 0x05, 0x99, 0x65, 0xb2, 0x8e, 0x58, 0xe0, 0xb3, 0xec, 0x88, 0x16, 0xe0, 0x77, 0x77 }; assert_int_equal(hashlen, sizeof(expected_digest)); assert_memory_equal(hash, expected_digest, sizeof(expected_digest)); } static void test_session_cnt(void **state) { /* we populate state in this test */ assert_null(*state); test_info *ti = test_info_new(); *state = ti; CK_SESSION_HANDLE slot = ti->slot_id; size_t i; CK_RV rv; CK_TOKEN_INFO info; CK_ULONG cnt = 0; CK_ULONG rw_cnt = 0; /* * Test incrementing */ for (i=0; i < ARRAY_LEN(ti->handles); i++) { CK_SESSION_HANDLE_PTR handle = &ti->handles[i]; /* * Every odd open up a RW session, every even open up a RO session */ CK_FLAGS flags = CKF_SERIAL_SESSION; flags |= (i & 1) ? CKF_RW_SESSION : 0; rv = C_OpenSession(slot, flags, NULL , NULL, handle); assert_int_equal(rv, CKR_OK); /* * For clarity, just track the sessions here rather than * doing computing it off of i. */ if (i & 1) { rw_cnt++; } cnt++; rv = C_GetTokenInfo(slot, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.ulSessionCount, cnt); assert_int_equal(info.ulRwSessionCount, rw_cnt); } /* * Test decrementing, but only decrement all but 2, so we can test * closeall. * * rw_cnt and cnt are properly in the state of current open handles, so * just use them from above. */ for (i=0; i < (ARRAY_LEN(ti->handles) - 2); i++) { CK_SESSION_HANDLE handle = ti->handles[i]; rv = C_CloseSession(handle); assert_int_equal(rv, CKR_OK); /* * For clarity, just track the sessions here rather than * doing computing it off of i. Remember that odd indexed * handles are R/W. */ if (i & 1) { rw_cnt--; } cnt--; rv = C_GetTokenInfo(slot, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.ulSessionCount, cnt); assert_int_equal(info.ulRwSessionCount, rw_cnt); } /* * test closeall brings it 0 */ rv = C_CloseAllSessions(slot); assert_int_equal(rv, CKR_OK); rv = C_GetTokenInfo(slot, &info); assert_int_equal(rv, CKR_OK); assert_int_equal(info.ulSessionCount, 0); assert_int_equal(info.ulRwSessionCount, 0); } int main() { const struct CMUnitTest tests[] = { /* * No Session tests */ cmocka_unit_test_setup_teardown(test_c_getfunctionlist_good, NULL, NULL), cmocka_unit_test_setup_teardown(test_c_getfunctionlist_bad, NULL, NULL), cmocka_unit_test_setup_teardown(test_get_slot_list, NULL, NULL), cmocka_unit_test_setup_teardown(test_get_info, NULL, NULL), /* * R/O Session Tests */ cmocka_unit_test_setup_teardown(test_seed, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_random_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_random_bad_session_handle, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_get_session_info, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_digest_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_digest_5_2_returns_oneshot, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_digest_5_2_returns_multipart, test_setup, test_teardown), /* * manages it's own sessions */ cmocka_unit_test_setup_teardown(test_session_cnt, NULL, test_teardown), }; return cmocka_run_group_tests(tests, group_setup_locking, group_teardown); } tpm2-pkcs11-1.9.1/test/integration/pkcs-session-state.c0000644000175100017510000000716414535673717016426 /* SPDX-License-Identifier: BSD-2-Clause */ #include "test.h" struct test_info { CK_SLOT_ID slot; CK_OBJECT_HANDLE key; CK_SESSION_HANDLE session[2]; }; static test_info *test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &ti->session[0]); assert_int_equal(rv, CKR_OK); rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL, NULL, &ti->session[1]); assert_int_equal(rv, CKR_OK); ti->slot = slots[0]; user_login(ti->session[0]); CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; rv = C_FindObjectsInit(ti->session[0], tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); count = 1; rv = C_FindObjects(ti->session[0], &ti->key, count, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(ti->session[0]); assert_int_equal(rv, CKR_OK); return ti; } static int test_setup(void **state) { /* get the slots */ test_info *ti = test_info_new(); *state = ti; return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseAllSessions(ti->slot); assert_int_equal(rv, CKR_OK); free(ti); return 0; } static void test_session_operation_state(void **state) { test_info *ti = test_info_from_state(state); CK_MECHANISM dmech = { .mechanism = CKM_SHA256, .pParameter = NULL, .ulParameterLen = 0 }; CK_MECHANISM smech = { .mechanism = CKM_SHA256_RSA_PKCS, .pParameter = NULL, .ulParameterLen = 0 }; CK_BYTE iv[16] = {0}; CK_MECHANISM emech = { .mechanism = CKM_AES_CBC, .pParameter = &iv, .ulParameterLen = sizeof(iv) }; CK_RV rv = C_DigestInit(ti->session[0], &dmech); assert_int_equal(rv, CKR_OK); rv = C_DigestInit(ti->session[0], &dmech); assert_int_equal(rv, CKR_OPERATION_ACTIVE); rv = C_SignInit(ti->session[0], &smech, ti->key); assert_int_equal(rv, CKR_OPERATION_ACTIVE); rv = C_SignInit(ti->session[1], &smech, ti->key); assert_int_equal(rv, CKR_OK); rv = C_DigestInit(ti->session[1], &dmech); assert_int_equal(rv, CKR_OPERATION_ACTIVE); rv = C_EncryptInit(ti->session[1], &emech, ti->key); assert_int_equal(rv, CKR_OPERATION_ACTIVE); } static void test_session_exhastion(void **state) { UNUSED(state); CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); CK_SESSION_HANDLE session; while ((rv = C_OpenSession(slots[0], CKF_SERIAL_SESSION | CKF_RW_SESSION, NULL_PTR, NULL_PTR, &session)) != CKR_SESSION_COUNT) { assert_int_equal(rv, CKR_OK); } rv = C_CloseAllSessions(slots[0]); assert_int_equal(rv, CKR_OK); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_session_operation_state, test_setup, test_teardown), /* this must go last to get C_Finalize from group_teardown called */ cmocka_unit_test(test_session_exhastion), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.9.1/test/integration/pkcs-sign-verify.int.c0000644000175100017510000015505614535673717016664 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include "largebin.h" #include "test.h" /* * This HMAC key is static in the fixtures folder. */ static const unsigned char hmac_key[] = { 0x30, 0x33, 0x33, 0x36, 0x61, 0x61, 0x37, 0x39, 0x34, 0x35, 0x61, 0x33, 0x63, 0x61, 0x64, 0x65, 0x63, 0x33, 0x63, 0x62, 0x64, 0x63, 0x36, 0x65, 0x37, 0x39, 0x30, 0x34, 0x33, 0x62, 0x35, 0x62 }; struct test_info { CK_SESSION_HANDLE handle; CK_SLOT_ID slot_id; }; static test_info *test_info_new(void) { test_info *ti = calloc(1, sizeof(*ti)); assert_non_null(ti); /* get the slots */ CK_SLOT_ID slots[6]; CK_ULONG count = ARRAY_LEN(slots); CK_RV rv = C_GetSlotList(true, slots, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, TOKEN_COUNT); ti->slot_id = slots[0]; return ti; } static int test_setup(void **state) { test_info *ti = test_info_new(); CK_RV rv = C_OpenSession(ti->slot_id, CKF_SERIAL_SESSION, NULL, NULL, &ti->handle); assert_int_equal(rv, CKR_OK); *state = ti; return 0; } static int test_teardown(void **state) { test_info *ti = test_info_from_state(state); CK_RV rv = C_CloseAllSessions(ti->slot_id); assert_int_equal(rv, CKR_OK); free(ti); return 0; } /* * Test that we can do a CKM_RSA_PKCS mechanism signature. * * This signature type will require an ASN1 digestinfo structure * to be populated, and then passed to the C_Sign(). * * More information on the Digest Info structure can be found: * - https://tools.ietf.org/html/rfc3447 * * In short, its; * DigestInfo ::= SEQUENCE { * digestAlgorithm AlgorithmIdentifier, * digest OCTET STRING * } * * The nice part is the note specification has the ASN1 header you can just * append the hash too, so we do this: * * SHA-256: (0x)30 31 30 0d 06 09 60 86 48 01 65 03 04 02 01 05 00 * 04 20 || H. * * We'll use SHA256 since the simulator supports it, we can then use * the CKM_SHA256_RSA_PKCS mechanism (which should go to tpm_sign * and the results should match. */ /* * The message to sign. */ static const CK_BYTE _data[] = { 'F', 'O', 'O', ' ', 'B', 'A', 'R' }; /* * The hash of the message to sign computed externally. */ static const CK_BYTE _data_hash_sha256[] = { 0x8d, 0x35, 0xc9, 0x7b, 0xcd, 0x90, 0x2b, 0x96, 0xd1, 0xb5, 0x51, 0x74, 0x1b, 0xbe, 0x8a, 0x7f, 0x50, 0xbb, 0x5a, 0x69, 0x0b, 0x4d, 0x02, 0x25, 0x48, 0x2e, 0xaa, 0x63, 0xdb, 0xfb, 0x9d, 0xed }; static const CK_BYTE _data_hash_sha512[] = { 0xcf, 0x4a, 0xca, 0x20, 0x77, 0xda, 0x02, 0xe6, 0x56, 0xc5, 0xe5, 0xed, 0x26, 0xd7, 0x81, 0x6b, 0xfc, 0x20, 0x2f, 0x7d, 0x40, 0xfe, 0x01, 0x27, 0x5f, 0x62, 0xd4, 0x91, 0x18, 0xa3, 0xbc, 0x5b, 0x20, 0xef, 0x94, 0x27, 0x24, 0xfc, 0x35, 0xb6, 0x67, 0x37, 0xbd, 0xec, 0x26, 0x28, 0x33, 0xc7, 0x49, 0xfd, 0xa9, 0x95, 0x54, 0x63, 0xc7, 0x55, 0xe9, 0x1a, 0x27, 0xc3, 0x8d, 0xda, 0x9e, 0xfb }; static void test_sign_verify_CKM_RSA_PKCS_sha256(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* * Now that we have a key for sign, build up what we need to sign, * which is the ASN1 digest info for CKM_RSA_PKCS */ CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); /* 19 byte ASN1 header + sha256 32 byte size */ CK_BYTE digest_info[19 + sizeof(_data_hash_sha256)] = { /* 19 byte ASN1 structure from the IETF rfc3447 for SHA256*/ 0x30, 0x31, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, 0x05, 0x00, 0x04, 0x20, /* the hash bytes, 0 them out */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, }; memcpy(&digest_info[19], _data_hash_sha256, sizeof(_data_hash_sha256)); CK_BYTE ckm_rsa_pkcs_sig[4096]; CK_ULONG ckm_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); rv = C_Sign(session, digest_info, sizeof(digest_info), ckm_rsa_pkcs_sig, &ckm_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); /* * OK now internally hash/sign the data via CKM_SHA256_RSA_PKCS */ mech.mechanism = CKM_SHA256_RSA_PKCS; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_sha256_rsa_pkcs_sig[4096]; CK_ULONG ckm_sha256_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, &ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(ckm_sha256_rsa_pkcs_siglen, ckm_rsa_pkcs_siglen); assert_memory_equal(ckm_sha256_rsa_pkcs_sig, ckm_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_RSA_PKCS_5_2_returns(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ unsigned long count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* * Now that we have a key for sign, build up what we need to sign, * which is the ASN1 digest info for CKM_RSA_PKCS */ CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); /* 19 byte ASN1 header + sha256 32 byte size */ unsigned char digest_info[19 + sizeof(_data_hash_sha256)] = { /* 19 byte ASN1 structure from the IETF rfc3447 for SHA256*/ 0x30, 0x31, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, 0x05, 0x00, 0x04, 0x20, /* the hash bytes, 0 them out */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, }; memcpy(&digest_info[19], _data_hash_sha256, sizeof(_data_hash_sha256)); unsigned char ckm_rsa_pkcs_sig[4096]; unsigned long ckm_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); /* NULL size */ CK_ULONG tmp = 42; rv = C_Sign(session, digest_info, sizeof(digest_info), NULL, &tmp); assert_int_equal(rv, CKR_OK); assert_int_equal(tmp, 256); /* CKR_BUFFER_TOO_SMALL */ tmp = 42; rv = C_Sign(session, digest_info, sizeof(digest_info), ckm_rsa_pkcs_sig, &tmp); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); assert_int_equal(tmp, 256); /* OK */ rv = C_Sign(session, digest_info, sizeof(digest_info), ckm_rsa_pkcs_sig, &ckm_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); /* * OK now internally hash/sign the data via CKM_SHA256_RSA_PKCS */ mech.mechanism = CKM_SHA256_RSA_PKCS; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); unsigned char ckm_sha256_rsa_pkcs_sig[4096]; unsigned long ckm_sha256_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); rv = C_Sign(session, (unsigned char *) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, &ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(ckm_sha256_rsa_pkcs_siglen, ckm_rsa_pkcs_siglen); assert_memory_equal(ckm_sha256_rsa_pkcs_sig, ckm_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (unsigned char *) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); } /* * Verify that using a non-tpm supported SHA algorithm works. The Simulator * by default only goes to SHA384, so use SHA512. * * It uses CKM_RSA_PKCS and CKM_SHA512_RSA_PKCS to verify that * they match. * * This uses CKM_RSA_PKCS which means that the host application * builds out the RSA_PKCS v1.5 signing structure as defined in * https://www.ietf.org/rfc/rfc3447.txt */ static void test_sign_verify_CKM_RSA_PKCS_sha512(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* * Now that we have a key for sign, build up what we need to sign, * which is the ASN1 digest info for CKM_RSA_PKCS */ CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); /* 19 byte ASN1 header + sha512 64 byte size */ CK_BYTE digest_info[19 + sizeof(_data_hash_sha512)] = { /* https://www.ietf.org/rfc/rfc3447.txt * Page 42 * 19 byte ASN1 structure from the IETF rfc3447 for SHA512 */ 0x30, 0x51, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x03, 0x05, 0x00, 0x04, 0x40, /* the hash bytes (64 of them), 0 them out */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, /* 16 */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, /* 32 */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, /* 48 */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, /* 64 */ }; memcpy(&digest_info[19], _data_hash_sha512, sizeof(_data_hash_sha512)); CK_BYTE ckm_rsa_pkcs_sig[4096]; CK_ULONG ckm_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); rv = C_Sign(session, digest_info, sizeof(digest_info), ckm_rsa_pkcs_sig, &ckm_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); /* * OK now internally hash/sign the data via CKM_SHA512_RSA_PKCS */ mech.mechanism = CKM_SHA512_RSA_PKCS; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_sha512_rsa_pkcs_sig[4096]; CK_ULONG ckm_sha512_rsa_pkcs_siglen = sizeof(ckm_rsa_pkcs_sig); rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha512_rsa_pkcs_sig, &ckm_sha512_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(ckm_sha512_rsa_pkcs_siglen, ckm_rsa_pkcs_siglen); assert_memory_equal(ckm_sha512_rsa_pkcs_sig, ckm_rsa_pkcs_sig, ckm_sha512_rsa_pkcs_siglen); } static void test_sign_verify_CKM_ECDSA(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_HANDLE pubkey; CK_OBJECT_HANDLE privkey; user_login(session); get_keypair(session, CKK_EC, &pubkey, &privkey); /* verify that we can use it via a sign operation */ CK_MECHANISM mech = { .mechanism = CKM_ECDSA }; CK_RV rv = C_SignInit(session, &mech, privkey); assert_int_equal(rv, CKR_OK); CK_BYTE sig[1024]; /* * echo -n 'my foo msg' | openssl sha256 | cut -d' ' -f 2-2 | xxd -r -p | xxd -i */ CK_BYTE sha256_msg_hash[] = { 0xcd, 0xd8, 0x92, 0x1d, 0xf0, 0xcd, 0x29, 0xba, 0x4b, 0x8b, 0x87, 0x12, 0x15, 0x07, 0x46, 0xdf, 0xb1, 0x91, 0x50, 0x81, 0xf7, 0xd4, 0x9b, 0xd5, 0x67, 0x58, 0xae, 0x5a, 0xa3, 0x2e, 0x47, 0x0d }; CK_ULONG siglen = 0; /* Call C_Sign for size */ rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), NULL, &siglen); assert_int_equal(rv, CKR_OK); /* The signature comes back as R + S parts of the signature. * R + S is 2 times the curve size in bytes (so 64 for P256) */ assert_int_equal(siglen, 64); CK_ULONG tmp_len = siglen; rv = C_Sign(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, &siglen); assert_int_equal(rv, CKR_OK); /* the actual siglength may be smaller than the previously reported siglen */ assert_in_range(siglen, 1, tmp_len); /* try the public key verification */ rv = C_VerifyInit(session, &mech, pubkey); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, sha256_msg_hash, sizeof(sha256_msg_hash), sig, siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_ECDSA_SHA1(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_EC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an EC key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_ECDSA_SHA1 }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_ecdsa_sha1_sig[4096]; CK_ULONG ckm_ecdsa_sha1_siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), NULL, &ckm_ecdsa_sha1_siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(ckm_ecdsa_sha1_siglen, 0); CK_ULONG tmp_len = ckm_ecdsa_sha1_siglen; rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha1_sig, &ckm_ecdsa_sha1_siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(ckm_ecdsa_sha1_siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha1_sig, ckm_ecdsa_sha1_siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_ECDSA_SHA256(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_EC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an EC key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_ECDSA_SHA256 }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_ecdsa_sha256_sig[4096]; CK_ULONG ckm_ecdsa_sha256_siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), NULL, &ckm_ecdsa_sha256_siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(ckm_ecdsa_sha256_siglen, 0); CK_ULONG tmp_len = ckm_ecdsa_sha256_siglen; rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha256_sig, &ckm_ecdsa_sha256_siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(ckm_ecdsa_sha256_siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha256_sig, ckm_ecdsa_sha256_siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_ECDSA_SHA384(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_EC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an EC key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_ECDSA_SHA256 }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_ecdsa_sha384_sig[4096]; CK_ULONG ckm_ecdsa_sha384_siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), NULL, &ckm_ecdsa_sha384_siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(ckm_ecdsa_sha384_siglen, 0); CK_ULONG tmp_len = ckm_ecdsa_sha384_siglen; rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha384_sig, &ckm_ecdsa_sha384_siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(ckm_ecdsa_sha384_siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha384_sig, ckm_ecdsa_sha384_siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_ECDSA_SHA512(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_EC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an EC key */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_ECDSA_SHA256 }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_ecdsa_sha512_sig[4096]; CK_ULONG ckm_ecdsa_sha512_siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), NULL, &ckm_ecdsa_sha512_siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(ckm_ecdsa_sha512_siglen, 0); CK_ULONG tmp_len = ckm_ecdsa_sha512_siglen; rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha512_sig, &ckm_ecdsa_sha512_siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(ckm_ecdsa_sha512_siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_ecdsa_sha512_sig, ckm_ecdsa_sha512_siglen); assert_int_equal(rv, CKR_OK); } static void test_pss(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE key[2], CK_MECHANISM_TYPE halg) { CK_RSA_PKCS_PSS_PARAMS params = { .hashAlg = halg, }; switch (halg) { case CKM_SHA_1: params.mgf = CKG_MGF1_SHA1; params.sLen = 20; break; case CKM_SHA256: params.mgf = CKG_MGF1_SHA256; params.sLen = 32; break; case CKM_SHA384: params.mgf = CKG_MGF1_SHA384; params.sLen = 48; break; case CKM_SHA512: params.mgf = CKG_MGF1_SHA512; params.sLen = 64; break; default: assert_true(0); } CK_MECHANISM mech = { .mechanism = CKM_RSA_PKCS_PSS, .pParameter = ¶ms, .ulParameterLen = sizeof(params) }; CK_BYTE msg_digest[64]; memset(msg_digest, 0xAA, params.sLen); CK_RV rv = C_SignInit(session, &mech, key[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_ULONG siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, msg_digest, params.sLen, NULL, &siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(siglen, 0); CK_ULONG tmp_len = siglen; rv = C_Sign(session, msg_digest, params.sLen, sig, &siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, key[1]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, msg_digest, params.sLen, sig, siglen); assert_int_equal(rv, CKR_OK); } static void test_pss2(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE key[2], CK_MECHANISM_TYPE halg) { CK_MECHANISM mech = { .pParameter = NULL, .ulParameterLen = 0 }; switch (halg) { case CKM_SHA_1: mech.mechanism = CKM_SHA1_RSA_PKCS_PSS; break; case CKM_SHA256: mech.mechanism = CKM_SHA256_RSA_PKCS_PSS; break; case CKM_SHA384: mech.mechanism = CKM_SHA384_RSA_PKCS_PSS; break; case CKM_SHA512: mech.mechanism = CKM_SHA512_RSA_PKCS_PSS; break; default: assert_true(0); } CK_BYTE msg[] = "my message"; CK_RV rv = C_SignInit(session, &mech, key[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_ULONG siglen = 0; /* Call C_Sign for Size */ rv = C_Sign(session, msg, sizeof(msg) - 1, NULL, &siglen); assert_int_equal(rv, CKR_OK); assert_int_not_equal(siglen, 0); CK_ULONG tmp_len = siglen; rv = C_Sign(session, msg, sizeof(msg) - 1, sig, &siglen); assert_int_equal(rv, CKR_OK); /* actual size must not be larger than previously indicated */ assert_in_range(siglen, 1, tmp_len); rv = C_VerifyInit(session, &mech, key[1]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, msg, sizeof(msg) - 1, sig, siglen); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_RSA_PKCS_PSS(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_BYTE _label[] = "rsa1"; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_LABEL, _label, sizeof(_label) - 1 }, }; user_login(session); /* Find an RSA Private key */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[2]; rv = C_FindObjects(session, &objhandles[0], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* Find matching RSA Public key */ key_class = CKO_PUBLIC_KEY; rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); rv = C_FindObjects(session, &objhandles[1], 1, &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); test_pss(session, objhandles, CKM_SHA_1); test_pss2(session, objhandles, CKM_SHA_1); test_pss(session, objhandles, CKM_SHA256); test_pss2(session, objhandles, CKM_SHA256); test_pss(session, objhandles, CKM_SHA384); test_pss2(session, objhandles, CKM_SHA384); test_pss(session, objhandles, CKM_SHA512); test_pss2(session, objhandles, CKM_SHA512); } static void test_double_sign_call_for_size_SHA256(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ unsigned long count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* initialize a signing operation */ CK_MECHANISM mech = { .mechanism = CKM_SHA256_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_ULONG siglen = 0; CK_BYTE_PTR msg=(unsigned char *)"my very cool message"; /* get the size of the buffer for a sign */ rv = C_Sign(session, msg, sizeof(msg), NULL, &siglen); assert_int_equal(rv, CKR_OK); assert_true(siglen > 0); /* Fail again on a size too small buffer CKR_BUFFER_TOO_SMALL case */ CK_ULONG toosmallsiglen = siglen - 1; rv = C_Sign(session, msg, sizeof(msg), sig, &toosmallsiglen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); rv = C_Sign(session, msg, sizeof(msg), sig, &siglen); assert_int_equal(rv, CKR_OK); } static void test_double_sign_call_for_size_SHA512(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ unsigned long count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* initialize a signing operation */ CK_MECHANISM mech = { .mechanism = CKM_SHA512_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_ULONG siglen = 0; CK_BYTE_PTR msg=(unsigned char *)"my very cool message"; /* get the size of the buffer for a sign */ rv = C_Sign(session, msg, sizeof(msg), NULL, &siglen); assert_int_equal(rv, CKR_OK); assert_true(siglen > 0); /* Fail again on a size too small buffer CKR_BUFFER_TOO_SMALL case */ CK_ULONG toosmallsiglen = siglen - 1; rv = C_Sign(session, msg, sizeof(msg), sig, &toosmallsiglen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); rv = C_Sign(session, msg, sizeof(msg), sig, &siglen); assert_int_equal(rv, CKR_OK); } static void test_double_sign_final_call_for_size_SHA256(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ unsigned long count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* initialize a signing operation */ CK_MECHANISM mech = { .mechanism = CKM_SHA256_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_BYTE_PTR msg=(unsigned char *)"my very cool message"; rv = C_SignUpdate(session, msg, sizeof(msg)); assert_int_equal(rv, CKR_OK); /* get the size of the buffer for a sign */ CK_ULONG siglen = 0; rv = C_SignFinal(session, NULL, &siglen); assert_int_equal(rv, CKR_OK); /* Fail again on a size too small buffer CKR_BUFFER_TOO_SMALL case */ CK_ULONG toosmallsiglen = siglen - 1; rv = C_SignFinal(session, sig, &toosmallsiglen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); rv = C_SignFinal(session, sig, &siglen); assert_int_equal(rv, CKR_OK); } static void test_double_sign_final_call_for_size_SHA512(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key */ unsigned long count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* initialize a signing operation */ CK_MECHANISM mech = { .mechanism = CKM_SHA512_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE sig[4096]; CK_BYTE_PTR msg=(unsigned char *)"my very cool message"; rv = C_SignUpdate(session, msg, sizeof(msg)); assert_int_equal(rv, CKR_OK); /* get the size of the buffer for a sign */ CK_ULONG siglen = 0; rv = C_SignFinal(session, NULL, &siglen); assert_int_equal(rv, CKR_OK); /* Fail again on a size too small buffer CKR_BUFFER_TOO_SMALL case */ CK_ULONG toosmallsiglen = siglen - 1; rv = C_SignFinal(session, sig, &toosmallsiglen); assert_int_equal(rv, CKR_BUFFER_TOO_SMALL); rv = C_SignFinal(session, sig, &siglen); assert_int_equal(rv, CKR_OK); } static void verify(EVP_PKEY *pkey, CK_BYTE_PTR msg, CK_ULONG msg_len, CK_BYTE_PTR sig, CK_ULONG sig_len) { EVP_MD_CTX *ctx = EVP_MD_CTX_create(); const EVP_MD* md = EVP_get_digestbyname("SHA256"); assert_non_null(md); int rc = EVP_DigestInit_ex(ctx, md, NULL); assert_int_equal(rc, 1); rc = EVP_DigestVerifyInit(ctx, NULL, md, NULL, pkey); assert_int_equal(rc, 1); rc = EVP_DigestVerifyUpdate(ctx, msg, msg_len); assert_int_equal(rc, 1); rc = EVP_DigestVerifyFinal(ctx, sig, sig_len); assert_int_equal(rc, 1); EVP_MD_CTX_destroy(ctx); } static void test_sign_verify_public(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_HANDLE priv_handle; CK_OBJECT_HANDLE pub_handle; user_login(session); get_keypair(session, CKK_RSA, &pub_handle, &priv_handle); /* * Now that we have a key for sign, build up what we need to sign, * which is the ASN1 digest info for CKM_RSA_PKCS */ CK_MECHANISM mech = { .mechanism = CKM_SHA256_RSA_PKCS }; CK_RV rv = C_SignInit(session, &mech, priv_handle); assert_int_equal(rv, CKR_OK); CK_BYTE msg[] = "my foo msg"; CK_BYTE sig[1024]; CK_ULONG siglen = sizeof(sig); rv = C_Sign(session, msg, sizeof(msg) - 1, sig, &siglen); assert_int_equal(rv, CKR_OK); assert_int_equal(siglen, 256); /* build an OSSL RSA key from parts */ CK_BYTE _tmp_bufs[3][1024]; CK_ATTRIBUTE attrs[] = { { .type = CKA_KEY_TYPE, .ulValueLen = sizeof(_tmp_bufs[0]), .pValue = &_tmp_bufs[0] }, { .type = CKA_PUBLIC_EXPONENT, .ulValueLen = sizeof(_tmp_bufs[0]), .pValue = &_tmp_bufs[1] }, { .type = CKA_MODULUS, .ulValueLen = sizeof(_tmp_bufs[1]), .pValue = &_tmp_bufs[2] }, }; rv = C_GetAttributeValue(session, pub_handle, attrs, ARRAY_LEN(attrs)); assert_int_equal(rv, CKR_OK); CK_KEY_TYPE key_type = CKA_KEY_TYPE_BAD; rv = attr_CK_KEY_TYPE(&attrs[0], &key_type); assert_int_equal(rv, CKR_OK); EVP_PKEY *pkey = NULL; attr_list *l = attr_list_new(); bool res = attr_list_add_int(l, CKA_KEY_TYPE, key_type); assert_true(res); res = attr_list_add_buf(l, attrs[1].type, attrs[1].pValue, attrs[1].ulValueLen); assert_true(res); res = attr_list_add_buf(l, attrs[2].type, attrs[2].pValue, attrs[2].ulValueLen); assert_true(res); rv = ssl_util_attrs_to_evp(l, &pkey); assert_int_equal(rv, CKR_OK); attr_list_free(l); verify(pkey, msg, sizeof(msg) - 1, sig, siglen); EVP_PKEY_free(pkey); } static void test_sign_verify_context_specific_good(void **state) { static CK_BBOOL _true = CK_TRUE; test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS key_class = CKO_PRIVATE_KEY; CK_KEY_TYPE key_type = CKK_RSA; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_ALWAYS_AUTHENTICATE, &_true, sizeof(_true) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); user_login(session); /* Find an RSA key w/CKA_ALWAYS_AUTHENTICATE set */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* context specific require C_Login(USER) before */ context_login_expects(session, CKR_USER_NOT_LOGGED_IN); user_login(session); CK_MECHANISM mech = { .mechanism = CKM_SHA256_RSA_PKCS }; /* * OK now internally hash/sign the data via CKM_SHA256_RSA_PKCS */ rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); CK_BYTE ckm_sha256_rsa_pkcs_sig[4096]; CK_ULONG ckm_sha256_rsa_pkcs_siglen = sizeof(ckm_sha256_rsa_pkcs_sig); /* this should fail with CKR_USER_NOT_LOGGED_IN */ rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, &ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_USER_NOT_LOGGED_IN); /* bad pin should fail */ context_login_bad_pin(session); /* finally logged in, should work */ context_login(session); rv = C_Sign(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, &ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); /* this should fail */ rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_USER_NOT_LOGGED_IN); context_login(session); rv = C_Verify(session, (CK_BYTE_PTR ) _data, sizeof(_data), ckm_sha256_rsa_pkcs_sig, ckm_sha256_rsa_pkcs_siglen); assert_int_equal(rv, CKR_OK); } static void test_cert_no_good(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; CK_OBJECT_CLASS obj_class = CKO_CERTIFICATE; CK_KEY_TYPE cert_type = CKC_X_509; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &obj_class, sizeof(obj_class) }, { CKA_CERTIFICATE_TYPE, &cert_type, sizeof(cert_type) }, }; CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); /* Find a cert */ CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); /* you cant do a sign without logging in */ user_login(session); CK_MECHANISM mech = { .mechanism = CKM_SHA256_RSA_PKCS }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_KEY_HANDLE_INVALID); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_SHA256_HMAC(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BYTE label[] = "hmac0"; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_SHA256_HMAC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_LABEL, &label, sizeof(label) - 1 }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA256_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const CK_BYTE_PTR msg = (typeof(msg))"Hello World This is my message to HMAC"; CK_ULONG msg_len = strlen((const char *)msg); CK_BYTE sig[32] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, msg_len, sig, sig_len); assert_int_equal(rv, CKR_OK); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } static void ossl_verify_hmac_sig(const unsigned char *hmac_key, size_t hmac_key_len, const EVP_MD *md, const CK_BYTE_PTR msg, CK_ULONG msg_len, CK_BYTE_PTR sig, CK_ULONG sig_len) { EVP_PKEY *ekey = EVP_PKEY_new_mac_key(EVP_PKEY_HMAC, NULL, hmac_key, hmac_key_len); assert_non_null(ekey); EVP_MD_CTX *mdctx = EVP_MD_CTX_new(); assert_non_null(mdctx); int rc = EVP_DigestSignInit(mdctx, NULL, md, NULL, ekey); assert_int_equal(rc, 1); rc = EVP_DigestSignUpdate(mdctx, msg, msg_len); assert_int_equal(rc, 1); unsigned char sig2[32] = { 0 }; size_t sig2_len = sizeof(sig2); rc = EVP_DigestSignFinal(mdctx, sig2, &sig2_len); assert_int_equal(rc, 1); EVP_MD_CTX_free(mdctx); EVP_PKEY_free(ekey); assert_int_equal(sig2_len, sig_len); assert_memory_equal(sig2, sig, sig2_len); } static void test_sign_verify_CKM_SHA256_HMAC_imported(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BYTE label[] = "imported_hmac_key"; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_GENERIC_SECRET; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_LABEL, &label, sizeof(label) - 1 }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA256_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const CK_BYTE_PTR msg = (typeof(msg))"Hello World This is my message to HMAC"; CK_ULONG msg_len = strlen((const char *)msg); CK_BYTE sig[32] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); /* * verify with OpenSSL. We do this here instead of in a script because sign via command line tools * like pkcs11-tool is not supported at the moment. However support was added here: * - https://github.com/OpenSC/OpenSC/pull/2385 */ ossl_verify_hmac_sig(hmac_key, sizeof(hmac_key), EVP_sha256(), msg, msg_len, sig, sig_len); } static void test_sign_verify_CKM_SHA256_HMAC_large(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BYTE label[] = "hmac0"; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_SHA256_HMAC; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_LABEL, &label, sizeof(label) - 1 }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA256_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const CK_BYTE_PTR msg = _large_rand_bin; CK_ULONG msg_len = sizeof(_large_rand_bin); CK_BYTE sig[32] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, msg_len, sig, sig_len); assert_int_equal(rv, CKR_OK); /* Try 5.2 style returns */ rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_SignUpdate(session, (CK_BYTE_PTR)msg, msg_len); assert_int_equal(rv, CKR_OK); sig_len = 0; rv = C_SignFinal(session, NULL, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_SignFinal(session, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); sig_len = 0; rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, NULL, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, msg_len, sig, sig_len); assert_int_equal(rv, CKR_OK); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_SHA256_HMAC_imported_large(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_BYTE label[] = "imported_hmac_key"; CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_GENERIC_SECRET; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, { CKA_LABEL, &label, sizeof(label) - 1 }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA256_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const CK_BYTE_PTR msg = _large_rand_bin; CK_ULONG msg_len = sizeof(_large_rand_bin); CK_BYTE sig[32] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, msg_len, sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 32); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); ossl_verify_hmac_sig(hmac_key, sizeof(hmac_key), EVP_sha256(), msg, msg_len, sig, sig_len); } static void test_sign_verify_CKM_SHA_1_HMAC(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_GENERIC_SECRET; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA_1_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const char *msg = "Hello World This is my message to HMAC"; CK_BYTE sig[20] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 20); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, sig_len); assert_int_equal(rv, CKR_OK); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_SHA384_HMAC(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_GENERIC_SECRET; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA384_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const char *msg = "Hello World This is my message to HMAC"; CK_BYTE sig[48] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 48); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, sig_len); assert_int_equal(rv, CKR_OK); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } static void test_sign_verify_CKM_SHA512_HMAC(void **state) { test_info *ti = test_info_from_state(state); CK_SESSION_HANDLE session = ti->handle; user_login(session); CK_OBJECT_CLASS key_class = CKO_SECRET_KEY; CK_KEY_TYPE key_type = CKK_GENERIC_SECRET; CK_ATTRIBUTE tmpl[] = { { CKA_CLASS, &key_class, sizeof(key_class) }, { CKA_KEY_TYPE, &key_type, sizeof(key_type) }, }; /* FIND A generic key for HMAC */ CK_RV rv = C_FindObjectsInit(session, tmpl, ARRAY_LEN(tmpl)); assert_int_equal(rv, CKR_OK); CK_ULONG count; CK_OBJECT_HANDLE objhandles[1]; rv = C_FindObjects(session, objhandles, ARRAY_LEN(objhandles), &count); assert_int_equal(rv, CKR_OK); assert_int_equal(count, 1); rv = C_FindObjectsFinal(session); assert_int_equal(rv, CKR_OK); CK_MECHANISM mech = { .mechanism = CKM_SHA512_HMAC }; rv = C_SignInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); const char *msg = "Hello World This is my message to HMAC"; CK_BYTE sig[64] = { 0 }; CK_ULONG sig_len = sizeof(sig); rv = C_Sign(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, &sig_len); assert_int_equal(rv, CKR_OK); assert_int_equal(sig_len, 64); rv = C_VerifyInit(session, &mech, objhandles[0]); assert_int_equal(rv, CKR_OK); rv = C_Verify(session, (CK_BYTE_PTR)msg, (CK_ULONG)strlen(msg), sig, sig_len); assert_int_equal(rv, CKR_OK); rv = C_Logout(session); assert_int_equal(rv, CKR_OK); } int main() { const struct CMUnitTest tests[] = { cmocka_unit_test_setup_teardown(test_sign_verify_CKM_RSA_PKCS_PSS, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_context_specific_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_public, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_RSA_PKCS_5_2_returns, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_double_sign_call_for_size_SHA512, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_double_sign_final_call_for_size_SHA512, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_double_sign_call_for_size_SHA256, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_double_sign_final_call_for_size_SHA256, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_RSA_PKCS_sha256, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_RSA_PKCS_sha512, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_ECDSA_SHA1, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_ECDSA_SHA256, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_ECDSA_SHA384, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_ECDSA_SHA512, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_ECDSA, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_cert_no_good, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA_1_HMAC, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA384_HMAC, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA256_HMAC, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA256_HMAC_imported, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA256_HMAC_large, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA256_HMAC_imported_large, test_setup, test_teardown), cmocka_unit_test_setup_teardown(test_sign_verify_CKM_SHA512_HMAC, test_setup, test_teardown), }; return cmocka_run_group_tests(tests, group_setup, group_teardown); } tpm2-pkcs11-1.9.1/test/integration/scripts/0000755000175100017510000000000014666345037014256 5tpm2-pkcs11-1.9.1/test/integration/scripts/helpers.sh0000644000175100017510000000442514535673717016205 # SPDX-License-Identifier: BSD-2-Clause #!/usr/bin/env bash setup_asan() { if [ "$ASAN_ENABLED" != "true" ]; then return 0 fi # To get line numbers set up the asan symbolizer clang_version=`$CC --version | head -n 1 | cut -d\ -f 3-3 | cut -d\. -f 1-3 | cut -d- -f 1-1` # Sometimes the version string has an Ubuntu on the front of it and the field # location changes if [ $clang_version == "version" ]; then clang_version=`$CC --version | head -n 1 | cut -d\ -f 4-4 | cut -d\. -f 1-3` fi # sometimes thier is an rc version if grep -qi '\-+rc' <<< "$clang_version"; then clang_version=$(echo "$clang_version" | cut -d'-' -f1-1) fi echo "Detected clang version: $clang_version" minor_maj=`echo "$clang_version" | cut -d\. -f 1-2` maj=`echo "$clang_version" | cut -d\. -f 1-1` p="/usr/lib/llvm-$minor_maj/lib/clang/$clang_version/lib/linux/libclang_rt.asan-$(arch).so" echo "Looking for libasan to LD_PRELOAD at: $p" if [ ! -f "$p" ]; then p="/usr/lib/llvm-$maj/lib/clang/$clang_version/lib/linux/libclang_rt.asan-$(arch).so" fi if [ ! -f "$p" ]; then p="/usr/lib64/clang/$clang_version/lib/linux/libclang_rt.asan-$(arch).so" fi if [ ! -f "$p" ]; then echo "Couldn't find libasan.so" return -1 fi echo "Found libasan at: $p" export LD_PRELOAD="$p" echo "export LD_PRELOAD=\"$LD_PRELOAD\"" export ASAN_OPTIONS=detect_leaks=0 echo "turning off asan detection for running commands..." return 0 } clear_asan() { unset LD_PRELOAD unset ASAN_OPTIONS } setup_ca() { CA_DIR=`mktemp -d -t tpm2tmpca.XXXXXX` export CA_DIR export CA_PEM="$CA_DIR/ca.pem" export CA_KEY="$CA_DIR/ca.key" # Generate CA CERT and CA KEY openssl req \ -x509 \ -nodes \ -days 3650 \ -newkey rsa:2048 \ -keyout "$CA_KEY" \ -out "$CA_PEM" \ -subj "/C=US/ST=Radius/L=Somewhere/O=Example Inc./CN=example.com" # make the DB touch "$CA_DIR"/index.txt touch "$CA_DIR"/index.txt.attr echo "01" >> "$CA_DIR"/serial } cleanup_ca() { test -n "$CA_DIR" || return 0 rm -rf "$CA_DIR" } check_openssl_version() { # do this in an if statement so it can fail and not cause # set -e (execfail) to exit the script if pkg-config --exists 'libcrypto < 3'; then OSSL3_DETECTED=0 else OSSL3_DETECTED=1 fi } tpm2-pkcs11-1.9.1/test/integration/scripts/int-test-funcs.sh0000755000175100017510000001330414535673717017425 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause # This file contains a collection of support functions used by the automake # test harness to execute our integration tests. # This function takes a PID as a parameter and determines whether or not the # process is currently running. If the daemon is running 0 is returned. Any # other value indicates that the daemon isn't running. daemon_status () { local pid=$1 if [ $(kill -0 "${pid}" 2> /dev/null) ]; then echo "failed to detect running daemon with PID: ${pid}"; return 1 fi return 0 } # This is a generic function to start a daemon, setup the environment # variables, redirect output to a log file, store the PID of the daemon # in a file and disconnect the daemon from the parent shell. daemon_start () { local daemon_bin="$1" local daemon_opts="$2" local daemon_log_file="$3" local daemon_pid_file="$4" local daemon_env="$5" printf "starting daemon: %s\n environment: %s\n options: %s\n" "${daemon_bin}" "${daemon_env}" "${daemon_opts}" env ${daemon_env} ${daemon_bin} ${daemon_opts} > ${daemon_log_file} 2>&1 & local ret=$? local pid=$! if [ ${ret} -ne 0 ]; then echo "failed to start daemon: \"${daemon_bin}\" with env: \"${daemon_env}\"" exit ${ret} fi sleep 1 daemon_status "${pid}" if [ $? -ne 0 ]; then echo "daemon died after successfully starting in background, check " \ "log file: ${daemon_log_file}" return 1 fi echo ${pid} > ${daemon_pid_file} echo "successfully started daemon: ${daemon_bin} with PID: ${pid}" return 0 } # function to start the simulator # This also that we have a private place to store the NVChip file. Since we # can't tell the simulator what to name this file we must generate a random # directory under /tmp, move to this directory, start the simulator, then # return to the old pwd. simulator_start () { local sim_bin="$1" local sim_port="$2" local sim_log_file="$3" local sim_pid_file="$4" local sim_tmp_dir="$5" # simulator port is a random port between 1024 and 65535 cd ${sim_tmp_dir} case "$sim_bin" in *swtpm) daemon_start "$sim_bin" "socket --tpm2 --server port=$sim_port \ --ctrl type=tcp,port=$((sim_port + 1)) \ --flags not-need-init --tpmstate dir=$PWD" \ "$sim_log_file" "$sim_pid_file";; *tpm_server) daemon_start "$sim_bin" "-port $sim_port" \ "$sim_log_file" "$sim_pid_file";; *) echo "Unknown TPM simulator $sim_bin"; return 1;; esac local ret=$? cd - return $ret } # function to start the tabrmd # This is little more than a call to the daemon_start function with special # command line options and an environment string. tabrmd_start () { local tabrmd_bin=$1 local tabrmd_log_file=$2 local tabrmd_pid_file=$3 local tabrmd_opts="$4" local tabrmd_env="G_MESSAGES_DEBUG=all" daemon_start "${tabrmd_bin}" "${tabrmd_opts}" "${tabrmd_log_file}" \ "${tabrmd_pid_file}" "${tabrmd_env}" "${VALGRIND}" "${LOG_FLAGS}" } # function to stop a running daemon # This function takes a single parameter: a file containing the PID of the # process to be killed. The PID is extracted and the daemon killed. daemon_stop () { local pid_file=$1 local pid=0 local ret=0 if [ ! -f ${pid_file} ]; then echo "failed to stop daemon, no pid file: ${pid_file}" return 1 fi pid=$(cat ${pid_file}) daemon_status "${pid}" if [ $? -ne 0 ]; then echo "failed to detect running daemon with PID: ${pid}"; return ${ret} fi kill ${pid} ret=$? if [ ${ret} -eq 0 ]; then wait ${pid} ret=$? else echo "failed to kill daemon process with PID: ${pid}" fi return ${ret} } function setup_fapi() { tempdir=${1:-$(mktemp -d tpm2-pkcs11-test-fapistore.XXXXXX)} KEYSTORE_USER=keystore_user KEYSTORE_SYSTEM=keystore_system LOG_DIR=log PROFILE_NAME=P_RSA mkdir -p $tempdir/$KEYSTORE_USER/policy $tempdir/$KEYSTORE_SYSTEM/policy \ $tempdir/$LOG_DIR cat > $tempdir/fapi_config.json < $tempdir/${PROFILE_NAME}.json <&3 print_usage >&3 exit 2 } print_usage () { cat < /dev/null | grep "${PID}" | grep -q "${SIM_PORT_DATA}" ret_data=$? ss -lt4pn 2> /dev/null | grep "${PID}" | grep -q "${SIM_PORT_CMD}" ret_cmd=$? if [ \( $ret_data -eq 0 \) -a \( $ret_cmd -eq 0 \) ]; then echo "Simulator with PID ${PID} bound to port ${SIM_PORT_DATA} and " \ "${SIM_PORT_CMD} successfully."; break fi echo "Port conflict? Cleaning up PID: ${PID}" kill "${PID}" BACKOFF=$((${BACKOFF}*${BACKOFF_FACTOR})) echo "Failed to start simulator: port ${SIM_PORT_DATA} or " \ "${SIM_PORT_CMD} probably in use. Retrying in ${BACKOFF}." sleep ${BACKOFF} if [ $i -eq 10 ]; then echo "Failed to start simulator after $i tries. Giving up."; exit 1 fi done TABRMD_NAME="com.intel.tss2.Tabrmd${SIM_PORT_DATA}" TABRMD_OPTS="${TABRMD_OPTS} --dbus-name=${TABRMD_NAME}" TABRMD_OPTS="${TABRMD_OPTS} --tcti=${TABRMD_TCTI}:port=${SIM_PORT_DATA}" # if the user is root, the daemon won't start without --allow-root option if [ $UID -eq 0 ]; then TABRMD_OPTS="--allow-root ${TABRMD_OPTS}" fi TABRMD_TEST_TCTI_CONF="${TABRMD_TEST_TCTI_CONF},bus_name=${TABRMD_NAME}" ;; "device") TABRMD_OPTS="--allow-root --tcti=device:/dev/tpm0" SIM_PORT_DATA=$(od -A n -N 2 -t u2 /dev/urandom | \ awk -v min=${PORT_MIN} -v max=${PORT_MAX} \ '{print ($1 % (max - min)) + min}') ;; *) echo "whoops" exit 1 ;; esac # start tpm2-abrmd daemon TABRMD_LOG_FILE="$SIM_TMP_DIR/tabrmd.log" TABRMD_PID_FILE="$SIM_TMP_DIR/tabrmd.pid" tabrmd_start ${TABRMD_BIN} ${TABRMD_LOG_FILE} ${TABRMD_PID_FILE} "${TABRMD_OPTS}" if [ $? -ne 0 ]; then echo "failed to start tabrmd with name ${TABRMD_NAME}" fi export TPM2TOOLS_TCTI="tabrmd:${TABRMD_TEST_TCTI_CONF}" echo ${TPM2TOOLS_TCTI} export TPM2_PKCS11_TCTI="tabrmd:${TABRMD_TEST_TCTI_CONF}" echo ${TPM2_PKCS11_TCTI} if [ "$FAPI_ENABLED" == "true" ]; then setup_fapi ${SIM_TMP_DIR} tss2_provision fi # if provided, run the test script if [ -z "${TSETUP_SCRIPT}" ]; then echo "No setup script provided" # execute the test script and capture exit code echo $@ env $@ ret_test=$? else echo "Run setup script ${TSETUP_SCRIPT}" bash ${TSETUP_SCRIPT} --tmpdir=${SIM_TMP_DIR} ret_test=$? if [ $ret_test -ne 0 ]; then echo "Failed to run the setup script" else echo "Successfully ran ${TSETUP_SCRIPT}" export TPM2_PKCS11_STORE="${SIM_TMP_DIR}" echo "export TPM2_PKCS11_STORE=${SIM_TMP_DIR}" # execute the test script and capture exit code echo $@ env $@ ret_test=$? fi fi if [ "$FAPI_ENABLED" == "true" ]; then tss2_list fi # This sleep is sadly necessary: If we kill the tabrmd w/o sleeping for a # second after the test finishes the simulator will die too. Bug in the # simulator? sleep 1 # teardown tabrmd daemon_stop ${TABRMD_PID_FILE} ret_tabrmd=$? rm -rf ${TABRMD_PID_FILE} # do configuration specific tear-down case "${TABRMD_TCTI}" in # when testing against the simulator we must shut it down "swtpm"|"mssim") # ignore exit code (it's always 143 AFAIK) daemon_stop ${SIM_PID_FILE} rm -rf ${SIM_TMP_DIR} ${SIM_PID_FILE} ;; esac # handle exit codes if [ $ret_test -ne 0 ]; then echo "Execution of $@ failed: $ret_test" exit $ret_test fi if [ $ret_tabrmd -ne 0 ]; then echo "Execution of tabrmd failed: $ret_tabrmd" exit $ret_tabrmd fi exit 0 tpm2-pkcs11-1.9.1/test/integration/scripts/create_pkcs_store.sh0000755000175100017510000002764214666345037020247 # SPDX-License-Identifier: BSD-2-Clause #!/usr/bin/env bash set -e if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi if [ -z "$TEST_FIXTURES" ]; then export TEST_FIXTURES="$T/test/integration/fixtures" fi if [ -z "$TPM2_PKCS11_MODULE" ]; then export TPM2_PKCS11_MODULE="$T/src/.libs/libtpm2_pkcs11.so" fi echo source "$T/test/integration/scripts/helpers.sh" source "$T/test/integration/scripts/helpers.sh" check_openssl_version export TPM2OPENSSL_TCTI="$TPM2TOOLS_TCTI" echo "SETUP SCRIPT - DBUS_SESSION_BUS_ADDRESS: $DBUS_SESSION_BUS_ADDRESS" echo "SETUP SCRIPT - TPM2TOOLS_TCTI: $TPM2TOOLS_TCTI" echo "SETUP SCRIPT - TPM2OPENSSL_TCTI: $TPM2OPENSSL_TCTI" echo "SETUP SCRIPT - PYTHONPATH: $PYTHONPATH" echo "SETUP SCRIPT - OSSL3_DETECTED: $OSSL3_DETECTED" usage_error () { echo "$0: $*" >&1 print_usage >&1 exit 2 } print_usage () { cat < /dev/null if [ $? -ne 0 ]; then echo "TPM2 TOOLS NOT ON PATH, ADD TO PATH" exit 1 fi # check that tpm2_ptool is on path which tpm2_ptool > /dev/null if [ $? -ne 0 ]; then echo "tpm2_ptool NOT ON PATH, ADD TO PATH" exit 1 fi set -ex # init tpm2_ptool init --primary-auth=mypobjpin --path=$TPM2_PKCS11_STORE # Test the existing primary object init functionality using a raw handle tpm2_createprimary -p foopass -c $TPM2_PKCS11_STORE/primary.ctx -g sha256 -G rsa handle=`tpm2_evictcontrol -C o -c $TPM2_PKCS11_STORE/primary.ctx | grep -Po '(?<=persistent-handle: )\S+'` echo "tpm2_ptool init --primary-auth=anotherpobjpin --primary-handle=$handle --primary-auth=foopass --path=$TPM2_PKCS11_STORE" tpm2_ptool init --primary-auth=anotherpobjpin --primary-handle=$handle --primary-auth=foopass --path=$TPM2_PKCS11_STORE # Test the existing primary object init functionality using an esys_tr tpm2_createprimary -c $TPM2_PKCS11_STORE/primary.ctx -g sha256 -G rsa esys_tr_file="$TPM2_PKCS11_STORE/primary3.handle" tpm2_evictcontrol -C o -c $TPM2_PKCS11_STORE/primary.ctx -o "$esys_tr_file" echo "tpm2_ptool init --primary-handle="$esys_tr_file" --path=$TPM2_PKCS11_STORE" tpm2_ptool init --primary-handle="$esys_tr_file" --path=$TPM2_PKCS11_STORE # add 3 tokens tpm2_ptool addtoken --pid=1 --sopin=myBADsopin --userpin=myBADuserpin --label=label --path $TPM2_PKCS11_STORE tpm2_ptool addtoken --pid=2 --sopin=anothersopin --userpin=anotheruserpin --label=import-keys --path $TPM2_PKCS11_STORE tpm2_ptool addtoken --pid=3 --sopin=sopin3 --userpin=userpin3 --label=esys-tr --path $TPM2_PKCS11_STORE # Change the bad pins to something good (test tpm2_ptool changepin commandlet) tpm2_ptool changepin --label=label --user=user --old=myBADuserpin --new=myuserpin --path=$TPM2_PKCS11_STORE tpm2_ptool changepin --label=label --user=so --old=myBADsopin --new=mysopin --path=$TPM2_PKCS11_STORE # verify the token w/o objects tpm2_ptool verify --label=label --sopin=mysopin --userpin=myuserpin --path=$TPM2_PKCS11_STORE # Use initpin to change the user pin tpm2_ptool initpin --label=label --sopin=mysopin --userpin=myverynewuserpin --path=$TPM2_PKCS11_STORE # verify the pin change tpm2_ptool verify --label=label --sopin=mysopin --userpin=myverynewuserpin --path=$TPM2_PKCS11_STORE # change it back tpm2_ptool initpin --label=label --sopin=mysopin --userpin=myuserpin --path=$TPM2_PKCS11_STORE # Create a token with an empty user PIN tpm2_ptool addtoken --pid=1 --sopin=sopin4 --userpin= --label=empty-pin --path $TPM2_PKCS11_STORE tpm2_ptool verify --label=empty-pin --path=$TPM2_PKCS11_STORE tpm2_ptool config --label=empty-pin --path $TPM2_PKCS11_STORE | grep '^empty-user-pin: true$' # Define a PIN. The verify command should fail because a PIN is required tpm2_ptool changepin --label=empty-pin --user=user --new=myuserpin --path $TPM2_PKCS11_STORE ! tpm2_ptool verify --label=empty-pin --path=$TPM2_PKCS11_STORE ! tpm2_ptool config --label=empty-pin --path=$TPM2_PKCS11_STORE | grep '^empty-user-pin:' tpm2_ptool changepin --label=empty-pin --user=user --old=myuserpin --new= --path $TPM2_PKCS11_STORE tpm2_ptool verify --label=empty-pin --path=$TPM2_PKCS11_STORE tpm2_ptool config --label=empty-pin --path $TPM2_PKCS11_STORE | grep '^empty-user-pin: true$' # Define and clear the PIN using the SO PIN tpm2_ptool initpin --label=empty-pin --sopin=sopin4 --userpin=myuserpin --path=$TPM2_PKCS11_STORE ! tpm2_ptool verify --label=empty-pin --path=$TPM2_PKCS11_STORE ! tpm2_ptool config --label=empty-pin --path=$TPM2_PKCS11_STORE | grep '^empty-user-pin:' tpm2_ptool initpin --label=empty-pin --sopin=sopin4 --userpin= --path=$TPM2_PKCS11_STORE tpm2_ptool verify --label=empty-pin --path=$TPM2_PKCS11_STORE tpm2_ptool config --label=empty-pin --path $TPM2_PKCS11_STORE | grep '^empty-user-pin: true$' echo "Adding 3 AES 256 keys under token \"label\"" tpm2_ptool addkey --algorithm=aes256 --label="label" --userpin=myuserpin --path=$TPM2_PKCS11_STORE tpm2_ptool addkey --algorithm=aes256 --label="label" --key-label=mykeylabel --userpin=myuserpin --path=$TPM2_PKCS11_STORE tpm2_ptool addkey --algorithm=aes256 --label="label" --userpin=myuserpin --attr-always-authenticate --path=$TPM2_PKCS11_STORE echo "Added AES Keys" echo "Adding 4 RSA 2048 keys under token \"label\"" for i in `seq 0 2`; do tpm2_ptool addkey --algorithm=rsa2048 --label="label" --key-label="rsa$i" --userpin=myuserpin --path=$TPM2_PKCS11_STORE done; tpm2_ptool addkey --algorithm=rsa2048 --label="label" --userpin=myuserpin --attr-always-authenticate --path=$TPM2_PKCS11_STORE echo "Added RSA Keys" echo "Adding 2 EC p256 keys under token \"label\"" for i in `seq 0 1`; do tpm2_ptool addkey --algorithm=ecc256 --label="label" --key-label="ec$i" --userpin=myuserpin --path=$TPM2_PKCS11_STORE done; echo "Added EC Keys" echo "Adding 1 HMAC:SHA256 key under token \"label\"" tpm2_ptool addkey --algorithm=hmac:sha256 --label="label" --key-label="hmac0" --userpin=myuserpin --path=$TPM2_PKCS11_STORE echo "Added HMAC Key" if [ "$OSSL3_DETECTED" -eq "0" ]; then export OPENSSL_CONF="$TEST_FIXTURES/ossl.cnf" fi # # generate cert # cert="$TPM2_PKCS11_STORE/cert.pem" # Enabling ASAN with Python seems to lead to no output, perhaps a hang? if [ "$OSSL3_DETECTED" -eq "1" ]; then clear_asan pushd $TPM2_PKCS11_STORE yaml_14=$(tpm2_ptool export --id=14 --userpin=myuserpin --path=$TPM2_PKCS11_STORE) yaml_6=$(tpm2_ptool export --id=6 --userpin=myuserpin --path=$TPM2_PKCS11_STORE) yaml_8=$(tpm2_ptool export --id=8 --userpin=myuserpin --path=$TPM2_PKCS11_STORE) popd auth_14=$(echo "$yaml_14" | grep "object-auth" | cut -d' ' -f2-) auth_6=$(echo "$yaml_6" | grep "object-auth" | cut -d' ' -f2-) auth_8=$(echo "$yaml_8" | grep "object-auth" | cut -d' ' -f2-) setup_asan TPM2OPENSSL_PARENT_AUTH="mypobjpin" openssl \ req -provider tpm2 -provider default -new -x509 -days 365 -subj '/CN=my key/' -sha256 \ -key "$TPM2_PKCS11_STORE/14.pem" --passin "pass:$auth_14" -out "$cert.ec1" TPM2OPENSSL_PARENT_AUTH="mypobjpin" openssl \ req -provider tpm2 -provider default -new -x509 -days 365 -subj '/CN=my key/' -sha256 \ -key "$TPM2_PKCS11_STORE/6.pem" --passin "pass:$auth_6" \ -config "$TEST_FIXTURES/ossl-req-ca.cnf" -extensions ca_ext -out "$cert.rsa1" # sign a certificate for rsa2 using the rsa1 key TPM2OPENSSL_PARENT_AUTH="mypobjpin" openssl \ req -provider tpm2 -provider default -new -subj '/CN=my sub key/' -sha256 \ -key "$TPM2_PKCS11_STORE/8.pem" --passin "pass:$auth_8" -out "$cert.csr.rsa2" TPM2OPENSSL_PARENT_AUTH="mypobjpin" openssl \ x509 -provider tpm2 -provider default -req -days 365 -sha256 -in "$cert.csr.rsa2" \ -CA "$cert.rsa1" -CAkey "$TPM2_PKCS11_STORE/6.pem" --passin "pass:$auth_6"\ -CAcreateserial -extfile "$TEST_FIXTURES/ossl-req-cert.cnf" -extensions cert_ext \ -out "$cert.rsa2" else # since we use the shared lib in a non-asan executable via dlopen() we need to set up # asan so we have defined symbols and we don't worry about leaks (since the tools are # often silly and leak. setup_asan TPM2_PKCS11_STORE="$TPM2_PKCS11_STORE" openssl \ req -new -x509 -days 365 -subj '/CN=my key/' -sha256 -engine pkcs11 -keyform engine -key slot_1-label_ec1 -out "$cert.ec1" TPM2_PKCS11_STORE="$TPM2_PKCS11_STORE" openssl \ req -new -x509 -days 365 -subj '/CN=my key/' -sha256 -engine pkcs11 -keyform engine -key slot_1-label_rsa1 \ -config "$TEST_FIXTURES/ossl-req-ca.cnf" -extensions ca_ext -out "$cert.rsa1" # sign a certificate for rsa2 using the rsa1 key TPM2_PKCS11_STORE="$TPM2_PKCS11_STORE" openssl \ req -new -subj '/CN=my sub key/' -sha256 -engine pkcs11 -keyform engine -key slot_1-label_rsa2 -out "$cert.csr.rsa2" TPM2_PKCS11_STORE="$TPM2_PKCS11_STORE" openssl \ x509 -req -days 365 -sha256 -in "$cert.csr.rsa2" -engine pkcs11 \ -CA "$cert.rsa1" -CAkeyform engine -CAkey slot_1-label_rsa1 -CAcreateserial \ -extfile "$TEST_FIXTURES/ossl-req-cert.cnf" -extensions cert_ext -out "$cert.rsa2" clear_asan fi # # insert cert to token # echo "Adding EC Certificate" tpm2_ptool addcert --label=label --key-label=ec1 --path=$TPM2_PKCS11_STORE "$cert.ec1" echo "added x509 Certificate" echo "Adding RSA Certificates" tpm2_ptool addcert --label=label --key-label=rsa1 --path=$TPM2_PKCS11_STORE "$cert.rsa1" tpm2_ptool addcert --label=label --key-label=rsa2 --path=$TPM2_PKCS11_STORE "$cert.rsa2" echo "added x509 Certificate" # add 1 aes key under label "import-keys" tpm2_ptool addkey --algorithm=aes128 --label="import-keys" --userpin=anotheruserpin --path=$TPM2_PKCS11_STORE # import 1 rsa2048 key under label "import-keys" echo "importing rsa2048 key under token 'import-keys'" openssl genrsa -out "$TPM2_PKCS11_STORE/private.pem" 2048 tpm2_ptool import --privkey="$TPM2_PKCS11_STORE/private.pem" --algorithm=rsa --key-label="imported_key" --label="import-keys" --userpin=anotheruserpin --path=$TPM2_PKCS11_STORE # import 1 ECCP256 key under label "import-keys" echo "importing ECCp256 key under token 'import-keys'" openssl ecparam -name prime256v1 -genkey -noout -out "$TPM2_PKCS11_STORE/private.ecc.pem" tpm2_ptool import --privkey="$TPM2_PKCS11_STORE/private.ecc.pem" --algorithm=ecc --key-label="imported_ecc_key" --label="import-keys" --userpin=anotheruserpin --path=$TPM2_PKCS11_STORE # import an ECC and RSA key in the ssh-keygen format ssh-keygen -t rsa -b 2048 -f "$TPM2_PKCS11_STORE/id_rsa_pass" -N 'secret' ssh-keygen -t ecdsa -b 256 -f "$TPM2_PKCS11_STORE/id_ec_nopass" -N '' tpm2_ptool import --privkey="$TPM2_PKCS11_STORE/id_rsa_pass" --key-label="imported_ssh_rsa_key" --id='imported_ssh_rsa_key' --label="import-keys" --userpin=anotheruserpin --passin 'pass:secret' --path=$TPM2_PKCS11_STORE tpm2_ptool import --privkey="$TPM2_PKCS11_STORE/id_ec_nopass" --key-label="imported_ssh_ecc_key" --id='imported_ssh_ecc_key' --label="import-keys" --userpin=anotheruserpin --path=$TPM2_PKCS11_STORE # add an ECC and RSA key under label "empty-pin" tpm2_ptool addkey --algorithm=rsa2048 --label="empty-pin" --key-label="rsa_key" --id='rsa_key' --path=$TPM2_PKCS11_STORE tpm2_ptool addkey --algorithm=ecc256 --label="empty-pin" --key-label="ecc_key" --id='ecc_key' --path=$TPM2_PKCS11_STORE # Import an HMAC key under "label" so its easy to get at in C code test tpm2_ptool import --algorithm="hmac" --privkey="$TEST_FIXTURES/hmac.hex.key" --key-label="imported_hmac_key" --label="label" --userpin=myuserpin --path=$TPM2_PKCS11_STORE # verify the token and all the objects echo "Adding 1 x509 Certificate under token \"label\"" tpm2_ptool verify --label=label --sopin=mysopin --userpin=myuserpin --path=$TPM2_PKCS11_STORE echo "RUN COMMAND BELOW BEFORE make check" echo "export TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" exit 0 tpm2-pkcs11-1.9.1/test/integration/pkcs11-tool.sh0000755000175100017510000002113014666345037015120 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -eo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } echo "Finding cert" id=$(pkcs11_tool --label label --list-objects --type cert | grep 'ID:' | head -n 1 | cut -d':' -f2- | sed s/' '//g) echo "Found cert: $id" # a public key with a cert label should exist echo "Looking for public key with id: $id" pkcs11_tool --slot=1 --list-objects --type pubkey | grep "$id" echo "Found pubkey" # a private key with a cert label should exist echo "Looking for private key with id: $id" pkcs11_tool --slot=1 --list-objects --type privkey --login --pin myuserpin | grep "$id" echo "Found privkey" # test pin change echo "Attempting pin change" pkcs11_tool --slot=1 --login --pin myuserpin --change-pin --new-pin mynewpin echo "Pin changed" # change userpin from sopin echo "Resetting pin" pkcs11_tool --slot=1 --init-pin --login --so-pin=mysopin --pin=myuserpin echo "Pin Reset" # test getting random data w/o login if [[ "${DOCKER_IMAGE:-nodocker}" != "ubuntu-16.04" && "${DOCKER_IMAGE:-nodocker}" != "ubuntu-18.04" ]]; then echo "Getting random" pkcs11_tool --slot=1 --generate-random 4 | xxd echo "Random got" else echo "Skipping pkcs11-tool --generate-random, not supported on ${DOCKER_IMAGE}" fi # test generating RSA key pair echo "Generating RSA key pair" pkcs11_tool --slot=1 --label="myrsakey" --login --pin=myuserpin --keypairgen echo "RSA Key pair generated" # test generating EC key pair echo "Generating EC key pair" pkcs11_tool --slot=1 --label="myecckey" --login --pin=myuserpin --keypairgen --usage-sign --key-type EC:prime256v1 echo "EC Key pair generated" echo "Deleting privkey" pkcs11_tool --slot=1 --pin=myuserpin --login --delete-object --type=privkey --label=myecckey echo "Privkey deleted" echo "Deleting pubkey" pkcs11_tool --slot=1 --pin=myuserpin --login --delete-object --type=pubkey --label=myecckey echo "Pubkey deleted" # test ECHD1 derive echo "Test ECDH1-DERIVE" echo "Create EC keys" tmp=$TPM2_PKCS11_STORE pkcs11_tool --slot=1 --keypairgen --login --pin myuserpin \ --key-type EC:prime256v1 --id 01 --label key1 pkcs11_tool --slot=1 --keypairgen --login --pin myuserpin \ --key-type EC:prime256v1 --id 02 --label key2 echo "Read public components" if pkcs11_tool --read-object --login --pin myuserpin --type pubkey --id 01 -o ${tmp}/key1_pub.der ; then pkcs11_tool --read-object --login --pin myuserpin --type pubkey --id 02 -o ${tmp}/key2_pub.der echo "Derive secrets" pkcs11_tool --derive -m ECDH1-DERIVE --id 01 --label key1 \ --login --pin myuserpin \ --input-file ${tmp}/key2_pub.der \ --output-file ${tmp}/shared_secret_1 pkcs11_tool --derive -m ECDH1-DERIVE --id 02 --label key2 \ --login --pin myuserpin \ --input-file ${tmp}/key1_pub.der \ --output-file ${tmp}/shared_secret_2 echo "Validate output" diff ${tmp}/shared_secret_2 ${tmp}/shared_secret_1 > /dev/null 2>&1 test "$?" -eq "0" else echo "pkcs11-tool can't read EC key public components" echo "Skipp ECDH1-1 derive test" fi # Verify we can add a certificate, since this is a setup a test, the store should contain a cert to use. echo "Writing certificate" # Not all versions of pkcs11-tool handle PEM to DER conversions, 0.15 doesn't, 0.19 does. So always # convert to DER openssl x509 -inform PEM -outform DER -in "$TPM2_PKCS11_STORE/cert.pem.rsa1" -out "$TPM2_PKCS11_STORE/cert.der.rsa1" pkcs11_tool --slot=1 -l --pin=myuserpin --write-object="$TPM2_PKCS11_STORE/cert.der.rsa1" \ --type=cert --id=01 --label=device-cert echo "Certificate wrote" echo "Importing RSA pubkey" openssl genrsa -out "$TPM2_PKCS11_STORE/key-rsa-priv.pem" 2048 openssl rsa -in "$TPM2_PKCS11_STORE/key-rsa-priv.pem" -pubout -out "$TPM2_PKCS11_STORE/key-rsa-pub.pem" pkcs11_tool --slot=1 -l --pin=myuserpin --write-object="$TPM2_PKCS11_STORE/key-rsa-pub.pem" --type=pubkey echo "RSA pubkey imported" echo "Trying to import RSA privkey (should fail)" if pkcs11_tool --slot=1 -l --pin=myuserpin --write-object="$TPM2_PKCS11_STORE/key-rsa-priv.pem" --type=privkey ; then echo >&2 "Error: pkcs11_tool unexpectedly succeeded in importing a RSA private key" exit 1 fi echo "RSA privkey not imported" # Run the --test and ensure nothing breaks # Note that pkcs11-tools 0.15 have invalid OAEP params size of things like # mechanism->ulParameterLen: 4225. if [[ "${DOCKER_IMAGE:-nodocker}" != "ubuntu-16.04" && "${DOCKER_IMAGE:-nodocker}" != "ubuntu-18.04" ]]; then pkcs11_tool --test --login --pin=myuserpin 2>&1 | tee logz # this command doesn't ALWAYS return rc's for status, so we have to peek into the logz # pkcs11-tool is inconsistent in outputs, older ones don't provide any success # output of 'No errors', se we search that the last line *isn't* ' errors' where # N is a base10 digit. tail -n1 logz | grep -vE '[0-9]+ errors' else echo "Skipping pkcs11-tool --test due to errors on ${DOCKER_IMAGE}" fi # verify that RSA3072 keys work if supported, turn off set -e so we can check the rc if ! tpm2_testparms rsa3072 ; then echo "TPM Does not support RSA3072, skipping" else # # pkcs11-tool is always fun, it seems to be ignoring --label, so things like --label="fake" will still work. # set an id as it seems to respect that. # tpm2_ptool addkey --label="label" --id="myrsa3072key" --key-label="myrsa3072key" --userpin="myuserpin" --algorithm="rsa3072" --path="$TPM2_PKCS11_STORE" # Since the PKCS11 Store gets automagically cleaned up, use that as our tempdir scratch space tempdir=$TPM2_PKCS11_STORE # pkcs11-tool --id is hex encoded input, so encode "myrsa3072key" as hex: 6d79727361333037326b6579 # python -c 'print("6d79727361333037326b6579".decode("hex"))' # myrsa3072key echo "testdata">${tempdir}/data pkcs11_tool --sign --login --slot=1 --id="6d79727361333037326b6579" --pin="myuserpin" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "384" # Test that we can generate a RSA3072 key via the CAPI pkcs11_tool --slot=1 --login --pin=myuserpin --keypairgen --id="11223344556677889900" --label="myrsa3072CKey" --key-type rsa:3072 # validate key is 384 bytes and usable rm ${tempdir}/sig echo "testdata">${tempdir}/data pkcs11_tool --sign --login --slot=1 --id="6d79727361333037326b6579" --pin="myuserpin" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "384" fi # # Test that the imported SSH keys are usable # pkcs11_tool --token-label="import-keys" --login --pin=anotheruserpin --list-objects # pkcs11-tool --label doesn't always work, so use id's which are hex encoded. echo "testdata">${tempdir}/data pkcs11_tool --sign --login --token-label="import-keys" --id="696d706f727465645f7373685f7273615f6b6579" --pin="anotheruserpin" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "256" echo "testdata">${tempdir}/data pkcs11_tool --sign --login --token-label="import-keys" --id="696d706f727465645f7373685f6563635f6b6579" --pin="anotheruserpin" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism ECDSA-SHA1 size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "64" # # Test that the keys with empty PIN are usable # pkcs11_tool --token-label="empty-pin" --list-objects # The Private Key Objects are enumerated without login pkcs11_tool --token-label="empty-pin" --list-objects | grep 'Private Key Object' echo "testdata">${tempdir}/data pkcs11_tool --sign --token-label="empty-pin" --id="7273615f6b6579" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "256" echo "testdata">${tempdir}/data pkcs11_tool --sign --token-label="empty-pin" --id="6563635f6b6579" \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism ECDSA-SHA1 size="$(stat --printf="%s" ${tempdir}/sig)" test "$size" -eq "64" exit 0 tpm2-pkcs11-1.9.1/test/integration/pkcs11-tool-init.sh.nosetup0000755000175100017510000000666414535673717017600 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -x if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" echo "testdata">${tempdir}/data echo "Should have uninitialized token" pkcs11_tool -T | grep -q uninitialized echo "Found uninitialized token" pkcs11_tool -I pkcs11_tool -T # Their is no SRK so it should attempt to make an SRK, so lets test it with an owner # hierarchy password set to make sure that works. tpm2_changeauth -cowner mynewpass export TPM2_PKCS11_OWNER_AUTH=mynewpass echo "Initializing token" pkcs11_tool --slot-index=0 --init-token --label=mynewtoken --so-pin=mynewsopin echo "Token initialized" pkcs11_tool -T echo "Initializing user pin" pkcs11_tool --slot-index=0 --login --login-type="so" --init-pin --so-pin=mynewsopin --pin=mynewuserpin echo "Userpin initialized" echo "Generating RSA key pair" pkcs11_tool --slot-index=0 --label="myrsakey" --login --pin=mynewuserpin --keypairgen echo "RSA Key pair generated" echo "Testing RSA signature" pkcs11_tool -v --list-objects --login --pin mynewuserpin pkcs11_tool -v --sign --login --slot-index=0 --label="myrsakey" --pin mynewuserpin \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS pkcs11_tool -v --read-object --slot-index=0 --label="myrsakey" \ --type pubkey --output-file ${tempdir}/pubkey.der \ || exit 77 #This fails on old pkcs11-tool versions, thus exit-skip here openssl dgst -verify ${tempdir}/pubkey.der -keyform DER -signature ${tempdir}/sig -sha256 \ -sigopt rsa_padding_mode:pkcs1 \ ${tempdir}/data echo "RSA signature tested" echo "Change PIN test" pkcs11_tool --change-pin --slot-index=0 --pin=mynewuserpin --login --new-pin=temppin pkcs11_tool --change-pin --slot-index=0 --pin=temppin --login --new-pin=mynewuserpin echo "PIN change tested" # # Regression test for https://github.com/tpm2-software/tpm2-pkcs11/issues/399 # Delete Private Key then Public Key. pkcs11_tool --delete-object --slot-index=0 --label="myrsakey" --pin=mynewuserpin --login --type=privkey pkcs11_tool --list-objects --slot-index=0 pkcs11_tool --delete-object --slot-index=0 --label="myrsakey" --pin=mynewuserpin --login --type=pubkey pkcs11_tool --list-objects --slot-index=0 # # Test creating data objects # echo "hello world" > objdata pkcs11_tool --slot-index=0 --login --pin=mynewuserpin --write-object objdata --type data --label dataobj1 --private # whitebox test to make sure secret is not in store if [ "$TPM2_PKCS11_BACKEND" != "fapi" ]; then sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select attrs from tobjects;' | grep -qiv "$(cat objdata)" # and check for the hex encoded version too sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select attrs from tobjects;' | grep -qiv "$(xxd -p objdata)" fi pkcs11_tool --slot-index=0 --login --pin=mynewuserpin --read-object --type data --label dataobj1 -o objdata2 cmp objdata objdata2 exit 0 tpm2-pkcs11-1.9.1/test/integration/p11-tool.sh.nosetup0000755000175100017510000001771314667614777016142 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi #WARNING: If your system hangs on this test, then the reason is typically that #you are running clang on a fedora-30 or similar system that has a buggy combination #of p11-tool p11-kit and libasan (clang). Consider using gcc or exporting #ASAN_ENABLED=false if [[ "${DOCKER_IMAGE:-nodocker}" = "fedora-30" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-20.04" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-22.04" ]]; then echo "p11-tool on fedora-30 or ubuntu-20.04/22.04 with clang is dysfunctional even without asan" ASAN_ENABLED=false #Even without ASAN the dlopen does not work on p11-tool/p11-kit at this moment fi export TPM2OPENSSL_TCTI="$TPM2TOOLS_TCTI" set -x source "$T/test/integration/scripts/helpers.sh" check_openssl_version tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi function setup_spy() { export PKCS11SPY="$modpath" export PKCS11SPY_OUTPUT=${0}_pkcs11spy.log modpath=${PKCS11SPY_LIB:-/usr/lib/x86_64-linux-gnu/pkcs11-spy.so} } if [ "${USE_PKCS11SPY:-no}" != "no" ]; then setup_spy fi echo "modpath=$modpath" function p11_tool() { p11tool -d 9999 $@ } export HOME=${tempdir} mkdir -p $HOME/.config/pkcs11/modules echo "module: $modpath" >$HOME/.config/pkcs11/modules/tpm2-pkcs11.module export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" echo "testdata">${tempdir}/data echo "Test p11-kit for modules" p11-kit list-modules || true echo "Done" echo "Should have uninitialized token" p11tool --list-tokens if ! p11_tool --list-tokens | grep -q "Model: SW TPM"; then echo "p11tool did not find this token." echo "If you are running a recent version of p11tool then you need to configure the module system-wide:" echo "echo \"module: $T/src/.libs/libtpm2_pkcs11.so\" >/etc/pkcs11/modules/tpm2_pkcs11.module" if [[ "${DOCKER_IMAGE:-nodocker}" = "fedora-30" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-20.04" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-22.04" ]]; then echo "p11-tool on fedora-30 or ubuntu-20.04/22.04 with clang is dysfunctional even without asan" exit 77 #TEST SKIP else exit 99 #TEST ERROR fi fi echo "Found uninitialized token" echo "Getting token url" p11_tool --list-token-urls TOKENURL=$(p11_tool --list-token-urls | grep "SW%20%20%20TPM") echo "Got token url: ${TOKENURL}" echo "Testing mech and random function" p11_tool --list-mechanisms ${TOKENURL} test "$(p11tool -d 0 --generate-random=4096 ${TOKENURL} \ | wc -c)" == "4096" echo "Random function works" echo "Testing p11tool version >= 3.5.0" #Older version of p11tool segfault during --initialize if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 1)" -lt "3" ]; then echo "p11tool version < 3.5.0, skipping" exit 77 #TEST SKIP fi if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 1)" -eq "3" ]; then if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 2)" -lt "5" ]; then echo "p11tool version < 3.5.0, skipping" exit 77 #TEST SKIP fi fi echo "p11tool version >= 3.5.0" echo "Initializing token" GNUTLS_SO_PIN=mynewsopin \ p11_tool --initialize --label=mynewtoken ${TOKENURL} p11_tool --list-token-urls TOKENURL=$(p11_tool --list-token-urls | grep "mynewtoken") echo "Token initialized" echo "Initializing user pin" GNUTLS_SO_PIN=mynewsopin \ GNUTLS_PIN=mynewuserpin \ p11_tool --initialize-pin ${TOKENURL} echo "Userpin initialized" echo "Initializing token2" GNUTLS_SO_PIN=mynewsopin \ p11_tool --initialize --label=mynewtoken2 $(p11_tool --list-token-urls | grep "SW%20%20%20TPM" | tail -n 1) TOKENURL2=$(p11_tool --list-token-urls | grep "mynewtoken2") echo "Token2 initialized" echo "Initializing user pin2" GNUTLS_SO_PIN=mynewsopin \ GNUTLS_PIN=mynewuserpin \ p11_tool --initialize-pin ${TOKENURL2} echo "Userpin2 initialized" echo "Generating RSA key pair" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-rsa --bits 2048 --login --label="myrsakey" --outfile="${tempdir}/pubkey.pem" ${TOKENURL} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL} echo "RSA Key pair generated" echo "Generating RSA keypair2" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-rsa --bits 2048 --login --label="my2rsakey" --outfile="${tempdir}/pubkey2.pem" ${TOKENURL2} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL2} echo "RSA Keypair2 generated" echo "Generating EC keypair" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-ecc --curve secp384r1 --login --label="myecckey" --outfile="${tempdir}/eccpubkey.pem" ${TOKENURL2} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL2} echo "EC Keypair generated" echo "Change the key pair label" GNUTLS_PIN=mynewuserpin \ p11_tool --login --set-label="myrsakey2" "${TOKENURL};object=myrsakey;object-type=private" GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL} GNUTLS_PIN=mynewuserpin \ p11_tool --login --set-label="myrsakey" "${TOKENURL};object=myrsakey2;object-type=private" echo "RSA Key pair generated" # # FAPI cannot use tpm2_ptool required for export for the tpm2-openssl provider when # testing against OpenSSL 3. Ie theirs no OpenSSL to PKCS11 adapter that works with OSSL3 # set +e trap - ERR grep -q "fapi" <<< "$0" have_fapi=$? trap onerror ERR set -e if [ "$OSSL3_DETECTED" -eq "1" ] && [ "$have_fapi" -eq "0" ]; then echo "OpenSSL 3 and FAPI test detected, skipping the rest of the tests..." exit 0 fi echo "Testing signing via openssl" if [ "$OSSL3_DETECTED" -eq "0" ]; then osslconf="$tempdir/ossl.cnf" cat << EOF > "$osslconf" openssl_conf = openssl_init [openssl_init] engines = engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 MODULE_PATH = $modpath init = 0 EOF export OPENSSL_CONF="$osslconf" openssl dgst -engine pkcs11 -keyform engine \ -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 \ -sign "$TOKENURL" -out ${tempdir}/sig -passin pass:mynewuserpin ${tempdir}/data openssl pkeyutl -sign -engine pkcs11 -keyform engine \ -inkey ${TOKENURL} -passin pass:mynewuserpin \ -in ${tempdir}/data -out ${tempdir}/sig else #end openssl < 3.0 pushd $TPM2_PKCS11_STORE clear_asan yaml_myrsakey=$(tpm2_ptool export --label=mynewtoken --userpin=mynewuserpin --key-label=myrsakey --path=$TPM2_PKCS11_STORE) popd auth_myrsakey=$(echo "$yaml_myrsakey" | grep "object-auth" | cut -d' ' -f2-) setup_asan openssl dgst -provider tpm2 -provider default \ -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 \ -sign "$TPM2_PKCS11_STORE/myrsakey.pem" -out ${tempdir}/sig -passin "pass:$auth_myrsakey" ${tempdir}/data openssl pkeyutl -sign -provider tpm2 -provider base -rawin -digest sha256 \ -inkey "$TPM2_PKCS11_STORE/myrsakey.pem" -passin "pass:$auth_myrsakey" \ -in ${tempdir}/data -out ${tempdir}/sig fi echo "RSA Signing tested" echo "Test ECC Signing" if [ "$OSSL3_DETECTED" -eq "0" ]; then ECC_KEY_URL="${TOKENURL2};object=myecckey;type=private" openssl dgst -engine pkcs11 -keyform engine -sha1 -sign "$ECC_KEY_URL" -out ${tempdir}/sig -passin pass:mynewuserpin ${tempdir}/data openssl dgst -sha1 -verify ${tempdir}/eccpubkey.pem -signature ${tempdir}/sig ${tempdir}/data else # openssl 3 pushd $TPM2_PKCS11_STORE clear_asan yaml_myecckey=$(tpm2_ptool export --label=mynewtoken2 --userpin=mynewuserpin --key-label=myecckey --path=$TPM2_PKCS11_STORE) popd auth_myecckey=$(echo "$yaml_myecckey" | grep "object-auth" | cut -d' ' -f2-) setup_asan openssl dgst -provider tpm2 -provider default \ -sha1 -sign "$TPM2_PKCS11_STORE/myecckey.pem" -out ${tempdir}/sig -passin "pass:$auth_myecckey" ${tempdir}/data openssl dgst -sha1 -verify ${tempdir}/eccpubkey.pem -signature ${tempdir}/sig ${tempdir}/data fi echo "ECC Signing tested" exit 0 tpm2-pkcs11-1.9.1/test/integration/pkcs11-dbup.sh.nosetup0000755000175100017510000000510614535673717016602 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -eo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR # # Before we setup and possibly LD_PRELOAD the asan library, # we need to download and build v1.0 and test HEAD (current build) # against it in the tempdir. # pushd "$tempdir" oldver=1.0.3 if ! wget "$PACKAGE_URL/releases/download/$oldver/tpm2-pkcs11-$oldver.tar.gz"; then echo "Could not download old version tpm2-pkcs11-$oldver.tar.gz" exit 77 fi if ! sha256sum "tpm2-pkcs11-$oldver.tar.gz" | grep -q ^6542049c0cc217b4372da52ea207fcb22e15afb2e76b9dc2f3d126b3147780c7; then echo "Integrity check of tpm2-pkcs11-$oldver.tar.gz failed" exit 99 fi tar xzf "tpm2-pkcs11-$oldver.tar.gz" pushd "tpm2-pkcs11-$oldver" ./configure --enable-debug --disable-hardening make -j$(nproc) popd popd echo "PWD: $(pwd)" # modpath will be to the HEAD version library if [ -z "$modpath" ]; then modpath="$(pwd)/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" setup_asan pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" # # Since OLD is on 1.0, it won't automagically populate a store. # So we need to use the 1.0 tpm2_ptool # XXX should we prepend the current? # PYTHONPATH=$tempdir/tpm2-pkcs11-$oldver/tools echo $PYTHONPATH tpm2_ptool init tpm2_ptool addtoken --pid=1 --sopin=mysopin --userpin=myuserpin --label=label # at this point we can verify the db schema version echo "Checking schema version as 1" v=$(sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select schema_version from schema;') echo "Got schema version as $v" test 1 -eq $v # do an upgrade echo "Generating RSA key pair" pkcs11_tool --slot=1 --label="myrsakey" --login --pin=myuserpin --keypairgen echo "RSA Key pair generated" echo "Checking schema version as > 1" v=$(sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select schema_version from schema;') echo "Got schema version as $v" test $v -ge 1 echo "testdata">${tempdir}/data echo "Using key to ensure it still works" pkcs11_tool -v --sign --login --slot-index=0 --label="myrsakey" --pin myuserpin \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS echo "Successfully used key post schema upgrade" exit 0 tpm2-pkcs11-1.9.1/test/integration/tls-tests.sh0000755000175100017510000000631714535673717015023 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -xo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" EXT_FILE="$TEST_FIXTURES/xpextensions" CLIENT_CNF="$TEST_FIXTURES/client.cnf" # details on the PKCS11 URI can be found here: https://tools.ietf.org/html/rfc7512 PKCS11_KEY="pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label;object=rsa0;type=private" if [ "$ASAN_ENABLED" = "true" ]; then # Skip this test when ASAN is enabled exit 77 fi check_openssl_version export TPM2OPENSSL_TCTI="$TPM2TOOLS_TCTI" function cleanup() { if [ "$1" != "no-kill" ]; then pkill -P $$ || true fi cleanup_ca rm -f server.csr server.crt server.key server.pem client.csr client.crt client_tpm.pem } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR cleanup "no-kill" # setup the CA BEFORE EXPORTING THE CA CONF for the clients setup_ca # create and sign standard file-based cert for server openssl genrsa -out server.key 2048 openssl req -new -key server.key -out server.csr -subj "/C=US/ST=Radius/L=Somewhere/O=Example Inc./CN=server.example.com" openssl ca -batch -keyfile "$CA_KEY" -cert "$CA_PEM" -in server.csr -out server.crt -config "$CLIENT_CNF" openssl x509 -in server.crt -out server.pem -outform pem # create and sign PKCS#11 cert for client if [ "$OSSL3_DETECTED" -eq "0" ]; then export OPENSSL_CONF="$TEST_FIXTURES/ossl.cnf" openssl req -new -engine pkcs11 -keyform engine -key "$PKCS11_KEY" -out client.csr -subj "/C=US/ST=Radius/L=Somewhere/O=Example Inc./CN=testing/emailAddress=testing@123.com" else pushd $TPM2_PKCS11_STORE yaml_rsa0=$(tpm2_ptool export --label=label --userpin=myuserpin --key-label=rsa0 --path=$TPM2_PKCS11_STORE) popd auth_rsa0=$(echo "$yaml_rsa0" | grep "object-auth" | cut -d' ' -f2-) TPM2OPENSSL_PARENT_AUTH="mypobjpin" openssl req -new -provider tpm2 -provider base \ -key "$TPM2_PKCS11_STORE/rsa0.pem" -passin "pass:$auth_rsa0" \ -subj "/C=US/ST=Radius/L=Somewhere/O=Example Inc./CN=testing/emailAddress=testing@123.com" \ -out client.csr fi openssl ca -batch -keyfile "$CA_KEY" -cert "$CA_PEM" -in client.csr -out client.crt -extensions xpclient_ext -extfile "$EXT_FILE" -config "$CLIENT_CNF" openssl x509 -in client.crt -out client_tpm.pem -outform pem # OpenSSL version 1.0.2g ends up in a state where it tries to read from stdin instead of the ssl connection. # Feeding it one byte as stdin avoids this condition which is described in more detail here: # https://github.com/tpm2-software/tpm2-pkcs11/pull/366 openssl s_server -debug -CAfile "$CA_PEM" -cert server.pem -key server.key -Verify 1 <<< '1' & sleep 1 # default connects to 127.0.0.1:443 if [ "$OSSL3_DETECTED" -eq "0" ]; then openssl s_client -engine pkcs11 -keyform engine -key "$PKCS11_KEY" -CAfile "$CA_PEM" -cert client_tpm.pem <<< 'Q' else TPM2OPENSSL_PARENT_AUTH="mypobjpin" openssl s_client -provider tpm2 -provider default \ -key "$TPM2_PKCS11_STORE/rsa0.pem" -pass "pass:$auth_rsa0" -ignore_unexpected_eof \ -CAfile "$CA_PEM" -cert client_tpm.pem <<< 'Q' fi exit 0 tpm2-pkcs11-1.9.1/test/integration/openssl.sh0000755000175100017510000001123114535673717014533 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -exo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" # Don't test with OSSL3, since we dont have an engine to call us through, # we would have to port everything over to the provider, which then doesn't # test tpm2-pkcs11 code anyways. check_openssl_version if [ "$OSSL3_DETECTED" -eq "1" ]; then exit 77 fi PIN="myuserpin" token_label="label" key_label="rsa1" function cleanup() { rm -f objlist.yaml key.attrs.yaml certificate.der.hex certificate.der certificate.pem \ pubkey.pem data.txt } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR cleanup setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" function yaml_get_id() { "${PYTHON_INTERPRETER:-python3}" << pyscript from __future__ import print_function import sys import yaml with open("$1") as f: try: y = yaml.load(f, Loader=yaml.BaseLoader) for x in y: if x['CKA_LABEL'] == "$2" and x['CKA_CLASS'] == "$3": print(x['id']) except yaml.YAMLError as exc: sys.exit(exc) pyscript } function yaml_get_kv() { third_arg="" if [ $# -eq 3 ]; then third_arg=$3 fi "${PYTHON_INTERPRETER:-python3}" << pyscript from __future__ import print_function import sys import yaml with open("$1") as f: try: y = yaml.load(f, Loader=yaml.BaseLoader) if $# == 3: print(y["$2"]["$third_arg"]) else: print(y["$2"]) except yaml.YAMLError as exc: sys.exit(exc) pyscript } pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } # step 1 is to get the id by listing the objects tpm2_ptool listobjects --label="$token_label" > "objlist.yaml" cert_db_id=$(yaml_get_id objlist.yaml "$key_label" CKO_CERTIFICATE) echo "cert db id: $cert_db_id" tpm2_ptool objmod --id="$cert_db_id" > "key.attrs.yaml" # 17 is the raw attribute value for CKA_VALUE which contains the certificate yaml_get_kv "key.attrs.yaml" 17 > "certificate.der.hex" # 258 is CKA_ID, get the key id cka_id_hex=$(yaml_get_kv "key.attrs.yaml" 258) # convert the hex to binary cat "certificate.der.hex" | xxd -p -r > "certificate.der" # convert to a pem, which helps verify the der openssl x509 -inform DER -in "certificate.der" -outform PEM -out "certificate.pem" # extract the pubkey openssl x509 -pubkey -noout -in "certificate.pem" > "pubkey.pem" # do an rsa-pss signature on data echo "sig data" > "data.txt" export OPENSSL_CONF="$TEST_FIXTURES/ossl.cnf" PKCS11_KEY="pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=$token_label;object=$key_label;type=private" openssl dgst -engine pkcs11 -keyform engine -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -sign "$PKCS11_KEY" -out data.sig data.txt openssl dgst -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -signature data.sig -verify pubkey.pem data.txt rm data.sig # The above for me always takes the raw signing path, either via C_Sign or C_Encrypt interfaces. So we will use pkcs11tool to force it # pkcs11tool is dumb, even though --label should be the object label, it only really is coded to know --id. # A bug in older OpenSC versions (like 0.15.0), map the _PSS identifiers wrong except for SHA1. This bug was fixed in OpenSC in: # https://github.com/OpenSC/OpenSC/pull/1146 # # Their is no generic way to really figure out the OpenSC version AFAICT to we code this to the common denominator of SHA1 pkcs11_tool --pin "$PIN" --token-label "$token_label" --id "$cka_id_hex" --sign --mechanism SHA1-RSA-PKCS-PSS -i data.txt -o data.sig openssl dgst -sha1 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -signature data.sig -verify pubkey.pem data.txt rm data.sig # verify that importing certificates do not modify them # NB. OpenSSL never verified the signature of self-signed certificate: # https://github.com/openssl/openssl/blob/openssl-3.0.0/ssl/t1_lib.c#L2970 # This is why two certificates are needed cert_db_id="$(yaml_get_id objlist.yaml rsa1 CKO_CERTIFICATE)" tpm2_ptool objmod --id="$cert_db_id" > "key.attrs.yaml" yaml_get_kv "key.attrs.yaml" 17 | xxd -p -r > "ca.der" openssl x509 -inform DER -in "ca.der" -outform PEM -out "ca.pem" cert_db_id="$(yaml_get_id objlist.yaml rsa2 CKO_CERTIFICATE)" tpm2_ptool objmod --id="$cert_db_id" > "key.attrs.yaml" yaml_get_kv "key.attrs.yaml" 17 | xxd -p -r > "cert.der" openssl x509 -inform DER -in "cert.der" -outform PEM -out "cert.pem" openssl verify -CAfile ca.pem cert.pem exit 0 tpm2-pkcs11-1.9.1/test/integration/pkcs11-javarunner.sh.java0000755000175100017510000000050514535673717017245 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -e if [ "$ASAN_ENABLED" = "true" ]; then # Skip this test when ASAN is enabled exit 77 fi export CLASSPATH="$CLASSPATH:$TEST_JAVA_ROOT" echo "CLASSPATH=$CLASSPATH" #dont use -cp here, it causes env CLASSPATH not to be used java PKCS11JavaTests exit 0 tpm2-pkcs11-1.9.1/test/integration/nss-tests.sh0000755000175100017510000001305214666345037015012 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -xo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi EXT_FILE="$TEST_FIXTURES/smimeextensions" CLIENT_CNF="$TEST_FIXTURES/client.cnf" source "$T/test/integration/scripts/helpers.sh" export NSS_DEFAULT_DB_TYPE=sql if [ "$ASAN_ENABLED" = "true" ]; then # Skip this test when ASAN is enabled exit 77 fi function pinentry() { expect <${tempdir}/data echo "Testing RSA signature" pkcs11_tool -v --list-objects --login --pin myuserpin pkcs11_tool -v --sign --login --token-label="$1" --label="$2" --pin myuserpin \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS pkcs11_tool -v --read-object --token-label="$1" --label="$2" \ --type pubkey --output-file "${tempdir}/$2.der" \ || exit 77 #This fails on old pkcs11-tool versions, thus exit-skip here openssl dgst -verify "${tempdir}/$2.der" -keyform DER -signature ${tempdir}/sig -sha256 \ -sigopt rsa_padding_mode:pkcs1 \ ${tempdir}/data echo "RSA signature tested" } export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" echo "TPM2_PKCS11_TCTI=$TPM2_PKCS11_TCTI" export TPM2_PKCS11_TCTI # Create a primary key at "$handle" tpm2_createprimary -c ${tempdir}/primary.ctx handle=$(tpm2_evictcontrol -c ${tempdir}/primary.ctx | grep persistent-handle | cut -d' ' -f2-2) # Create a primary object in the store referencing it pid=$(tpm2_ptool init --primary-handle="$handle" --path=$TPM2_PKCS11_STORE | grep id | cut -d' ' -f2-2) # Create a token using that pid tpm2_ptool addtoken --pid="$pid" --label=linktoken --sopin=mysopin --userpin=myuserpin \ --path=$TPM2_PKCS11_STORE if [ "$OSSL3_DETECTED" -eq "0" ]; then # Set up the engine for the tpm2tss-genkey tool both for future and older ways of doing it engdir="$(pkg-config --variable=enginesdir libcrypto)" if [ -z "$engdir" ]; then export OPENSSL_ENGINES=/usr/local/lib/engines fi tpm2tss_genkey -P"$handle" -a rsa -s 2048 "$tempdir/tss2-rsa-2048.pem" else openssl genpkey -provider tpm2 -algorithm RSA -pkeyopt "parent:$handle" -pkeyopt bits:2048 -out "$tempdir/tss2-rsa-2048.pem" fi # Link that key into the token tpm2_ptool link --label=linktoken --userpin=myuserpin --key-label=tss2rsa2048 \ --path=$TPM2_PKCS11_STORE "$tempdir/tss2-rsa-2048.pem" rsa_verify "linktoken" "tss2rsa2048" # # Test transient primary keys that the TSS Engine uses # pid=$(tpm2_ptool init --transient-parent="tss2-engine-key" --path=$TPM2_PKCS11_STORE | grep id | cut -d' ' -f2-2) tpm2_ptool addtoken --pid="$pid" --label=linktokentransient --sopin=mysopin --userpin=myuserpin \ --path=$TPM2_PKCS11_STORE if [ "$OSSL3_DETECTED" -eq "0" ]; then tpm2tss_genkey "$tempdir/tss2-rsa-2048-transient.pem" else openssl genpkey -provider tpm2 -algorithm RSA -pkeyopt bits:2048 -out "$tempdir/tss2-rsa-2048-transient.pem" fi # Link that key into the token tpm2_ptool link --label=linktokentransient --userpin=myuserpin --key-label=tss2rsa2048transient \ --path=$TPM2_PKCS11_STORE "$tempdir/tss2-rsa-2048-transient.pem" rsa_verify "linktokentransient" "tss2rsa2048transient" # Now test with owner auth and primary object passwords set to something rm -rf "$tempdir"/* tpm2_changeauth -c o "newpass" pid=$(tpm2_ptool init --transient-parent="tss2-engine-key" --hierarchy-auth=newpass --primary-auth=1234 \ --path=$TPM2_PKCS11_STORE | grep id | cut -d' ' -f2-2) tpm2_ptool addtoken --hierarchy-auth=newpass --pid="$pid" --label=linktokentransient --sopin=mysopin --userpin=myuserpin \ --path=$TPM2_PKCS11_STORE if [ "$OSSL3_DETECTED" -eq "0" ]; then tpm2tss_genkey -o newpass "$tempdir/tss2-rsa-2048-transient.pem" else openssl genpkey -provider tpm2 -algorithm RSA -pkeyopt "parent-auth:newpass" -pkeyopt bits:2048 -out "$tempdir/tss2-rsa-2048-transient.pem" fi # Link that key into the token tpm2_ptool link --hierarchy-auth=newpass --label=linktokentransient --userpin=myuserpin --key-label=tss2rsa2048transient \ --path=$TPM2_PKCS11_STORE "$tempdir/tss2-rsa-2048-transient.pem" export TPM2_PKCS11_OWNER_AUTH=newpass rsa_verify "linktokentransient" "tss2rsa2048transient" # Drop the ownerauth password tpm2_changeauth -c o -p "newpass" unset TPM2_PKCS11_OWNER_AUTH # # Test transient primary keys that the tpm2-tools tpm2_createprimary produces # # Create a key under the default primary key for the tools tpm2_createprimary -c "$tempdir/primary.ctx" tpm2_create -C "$tempdir/primary.ctx" -u "$tempdir/key.pub" -r "$tempdir/key.priv" # Create a token suitable to use this key pid=$(tpm2_ptool init --transient-parent="tpm2-tools-default" --path=$TPM2_PKCS11_STORE | grep id | cut -d' ' -f2-2) tpm2_ptool addtoken --pid="$pid" --label=linktokentpmtoolsdefault --sopin=mysopin --userpin=myuserpin \ --path=$TPM2_PKCS11_STORE # Link that key into the token tpm2_ptool link --label=linktokentpmtoolsdefault --userpin=myuserpin --key-label=tpm2toolkey \ --path=$TPM2_PKCS11_STORE "$tempdir/key.pub" "$tempdir/key.priv" rsa_verify "linktokentpmtoolsdefault" "tpm2toolkey" # Create an ECC key just to make sure that works too tpm2_create -C "$tempdir/primary.ctx" -Gecc -u "$tempdir/key-ecc.pub" -r "$tempdir/key-ecc.priv" # Also swap public and private to make sure order doesn't matter tpm2_ptool link --label=linktokentpmtoolsdefault --userpin=myuserpin --id=12345678 --key-label=tpm2toolecckey \ --path=$TPM2_PKCS11_STORE "$tempdir/key-ecc.priv" "$tempdir/key-ecc.pub" # Perform a signature using ECDSA w/SHA1 # Note: you must hex encode the id for it to work pkcs11_tool --token-label=linktokentpmtoolsdefault --login --pin myuserpin --sign --id=3132333435363738 \ --input-file ${tempdir}/data --mechanism ECDSA-SHA1 \ --signature-format=openssl --output-file ${tempdir}/sig # Verify signature against public key in PEM format, so load it and get a PEM format tpm2_load -C "$tempdir/primary.ctx" -u "$tempdir/key-ecc.pub" -r "$tempdir/key-ecc.priv" \ -c "$tempdir/ecc-key.ctx" tpm2_readpublic -c "$tempdir/ecc-key.ctx" -f pem -o "$tempdir/ecc-key.pem" openssl dgst -sha1 -verify "$tempdir/ecc-key.pem" -signature "$tempdir/sig" "$tempdir/data" # # Test tpm2_createprimary -Gecc transient primary keys # # Create a key under the default primary key for the tools tpm2_createprimary -Gecc -c "$tempdir/primary.ctx" tpm2_create -C "$tempdir/primary.ctx" -u "$tempdir/key.pub" -r "$tempdir/key.priv" # Create a token suitable to use this key pid=$(tpm2_ptool init --transient-parent="tpm2-tools-ecc-default" --path=$TPM2_PKCS11_STORE | grep id | cut -d' ' -f2-2) tpm2_ptool addtoken --pid="$pid" --label=eccdefault --sopin=mysopin --userpin=myuserpin \ --path=$TPM2_PKCS11_STORE # Link that key into the token tpm2_ptool link --label=eccdefault --userpin=myuserpin --key-label=tpm2toolkey \ --path=$TPM2_PKCS11_STORE "$tempdir/key.pub" "$tempdir/key.priv" rsa_verify "eccdefault" "tpm2toolkey" # Create an ECC key just to make sure that works too tpm2_create -C "$tempdir/primary.ctx" -Gecc -u "$tempdir/key-ecc.pub" -r "$tempdir/key-ecc.priv" # Also swap public and private to make sure order doesn't matter tpm2_ptool link --label=eccdefault --userpin=myuserpin --id=12345678 --key-label=tpm2toolecckey \ --path=$TPM2_PKCS11_STORE "$tempdir/key-ecc.priv" "$tempdir/key-ecc.pub" # Perform a signature using ECDSA w/SHA1 # Note: you must hex encode the id for it to work pkcs11_tool --token-label=eccdefault --login --pin myuserpin --sign --id=3132333435363738 \ --input-file ${tempdir}/data --mechanism ECDSA-SHA1 \ --signature-format=openssl --output-file ${tempdir}/sig # Verify signature against public key in PEM format, so load it and get a PEM format tpm2_load -C "$tempdir/primary.ctx" -u "$tempdir/key-ecc.pub" -r "$tempdir/key-ecc.priv" \ -c "$tempdir/ecc-key.ctx" tpm2_readpublic -c "$tempdir/ecc-key.ctx" -f pem -o "$tempdir/ecc-key.pem" openssl dgst -sha1 -verify "$tempdir/ecc-key.pem" -signature "$tempdir/sig" "$tempdir/data" # Add an HMAC SHA1 key and test it. We use SHA1 do to limited support in pkcs11-tool not supporting SHA256+ tpm2_create -C "$tempdir/primary.ctx" -Ghmac:sha1 -u "$tempdir/key-hmac.pub" -r "$tempdir/key-hmac.priv" tpm2_ptool link --label=eccdefault --userpin=myuserpin --id=987654321 --key-label=tpm2toolhmackey \ --path=$TPM2_PKCS11_STORE "$tempdir/key-ecc.priv" "$tempdir/key-ecc.pub" # Well, pkcs11-tool is broken, it requires all sign operations to be conducted with a CKO_PRIVATE_KEY and HMAC keys # are CKO_SECRET_KEY. # tpm2_pkcs11-tool --token-label=label --login --pin=myuserpin --sign --id='393837363534333231' --input-file=data.msg \ # -mechanism=SHA-1-HMAC --output-file=data.sig exit 0 tpm2-pkcs11-1.9.1/test/integration/python-pkcs11.sh0000755000175100017510000000264514535673717015502 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -exo pipefail if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" setup_asan "${PYTHON_INTERPRETER:-python3}" - <<'_SCRIPT_' import os import unittest import pkcs11 class TestPKCS11(unittest.TestCase): @classmethod def setUpClass(cls): path = os.getenv('TPM2_PKCS11_MODULE', os.path.join(os.getcwd(), 'src/.libs/libtpm2_pkcs11.so')) lib = pkcs11.lib(path) cls._token = lib.get_token(token_label='label') def test_CKM_PKCS11(self): with self._token.open(rw=False, user_pin='myuserpin') as session: public = session.get_key(label='rsa0',object_class=pkcs11.constants.ObjectClass.PUBLIC_KEY) private = session.get_key(label='rsa0',object_class=pkcs11.constants.ObjectClass.PRIVATE_KEY) original = plaintext = b'1234567890123456' ciphertext = public.encrypt(plaintext, mechanism=pkcs11.mechanisms.Mechanism.RSA_PKCS) self.assertNotEqual(plaintext, ciphertext) plaintext = 'notdecrypted' plaintext = private.decrypt(ciphertext, mechanism=pkcs11.mechanisms.Mechanism.RSA_PKCS) # strip padding p2 = plaintext[-len(original):] self.assertEqual(p2, original) if __name__ == '__main__': unittest.main() _SCRIPT_ exit $? tpm2-pkcs11-1.9.1/test/integration/p11-tool-fapi.sh.fapi0000755000175100017510000001771314667614777016301 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi #WARNING: If your system hangs on this test, then the reason is typically that #you are running clang on a fedora-30 or similar system that has a buggy combination #of p11-tool p11-kit and libasan (clang). Consider using gcc or exporting #ASAN_ENABLED=false if [[ "${DOCKER_IMAGE:-nodocker}" = "fedora-30" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-20.04" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-22.04" ]]; then echo "p11-tool on fedora-30 or ubuntu-20.04/22.04 with clang is dysfunctional even without asan" ASAN_ENABLED=false #Even without ASAN the dlopen does not work on p11-tool/p11-kit at this moment fi export TPM2OPENSSL_TCTI="$TPM2TOOLS_TCTI" set -x source "$T/test/integration/scripts/helpers.sh" check_openssl_version tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi function setup_spy() { export PKCS11SPY="$modpath" export PKCS11SPY_OUTPUT=${0}_pkcs11spy.log modpath=${PKCS11SPY_LIB:-/usr/lib/x86_64-linux-gnu/pkcs11-spy.so} } if [ "${USE_PKCS11SPY:-no}" != "no" ]; then setup_spy fi echo "modpath=$modpath" function p11_tool() { p11tool -d 9999 $@ } export HOME=${tempdir} mkdir -p $HOME/.config/pkcs11/modules echo "module: $modpath" >$HOME/.config/pkcs11/modules/tpm2-pkcs11.module export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" echo "testdata">${tempdir}/data echo "Test p11-kit for modules" p11-kit list-modules || true echo "Done" echo "Should have uninitialized token" p11tool --list-tokens if ! p11_tool --list-tokens | grep -q "Model: SW TPM"; then echo "p11tool did not find this token." echo "If you are running a recent version of p11tool then you need to configure the module system-wide:" echo "echo \"module: $T/src/.libs/libtpm2_pkcs11.so\" >/etc/pkcs11/modules/tpm2_pkcs11.module" if [[ "${DOCKER_IMAGE:-nodocker}" = "fedora-30" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-20.04" || "${DOCKER_IMAGE:-nodocker}" = "ubuntu-22.04" ]]; then echo "p11-tool on fedora-30 or ubuntu-20.04/22.04 with clang is dysfunctional even without asan" exit 77 #TEST SKIP else exit 99 #TEST ERROR fi fi echo "Found uninitialized token" echo "Getting token url" p11_tool --list-token-urls TOKENURL=$(p11_tool --list-token-urls | grep "SW%20%20%20TPM") echo "Got token url: ${TOKENURL}" echo "Testing mech and random function" p11_tool --list-mechanisms ${TOKENURL} test "$(p11tool -d 0 --generate-random=4096 ${TOKENURL} \ | wc -c)" == "4096" echo "Random function works" echo "Testing p11tool version >= 3.5.0" #Older version of p11tool segfault during --initialize if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 1)" -lt "3" ]; then echo "p11tool version < 3.5.0, skipping" exit 77 #TEST SKIP fi if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 1)" -eq "3" ]; then if [ "$(p11_tool --version=v | cut -d " " -f 2 | cut -d "." -f 2)" -lt "5" ]; then echo "p11tool version < 3.5.0, skipping" exit 77 #TEST SKIP fi fi echo "p11tool version >= 3.5.0" echo "Initializing token" GNUTLS_SO_PIN=mynewsopin \ p11_tool --initialize --label=mynewtoken ${TOKENURL} p11_tool --list-token-urls TOKENURL=$(p11_tool --list-token-urls | grep "mynewtoken") echo "Token initialized" echo "Initializing user pin" GNUTLS_SO_PIN=mynewsopin \ GNUTLS_PIN=mynewuserpin \ p11_tool --initialize-pin ${TOKENURL} echo "Userpin initialized" echo "Initializing token2" GNUTLS_SO_PIN=mynewsopin \ p11_tool --initialize --label=mynewtoken2 $(p11_tool --list-token-urls | grep "SW%20%20%20TPM" | tail -n 1) TOKENURL2=$(p11_tool --list-token-urls | grep "mynewtoken2") echo "Token2 initialized" echo "Initializing user pin2" GNUTLS_SO_PIN=mynewsopin \ GNUTLS_PIN=mynewuserpin \ p11_tool --initialize-pin ${TOKENURL2} echo "Userpin2 initialized" echo "Generating RSA key pair" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-rsa --bits 2048 --login --label="myrsakey" --outfile="${tempdir}/pubkey.pem" ${TOKENURL} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL} echo "RSA Key pair generated" echo "Generating RSA keypair2" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-rsa --bits 2048 --login --label="my2rsakey" --outfile="${tempdir}/pubkey2.pem" ${TOKENURL2} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL2} echo "RSA Keypair2 generated" echo "Generating EC keypair" GNUTLS_PIN=mynewuserpin \ p11_tool --generate-ecc --curve secp384r1 --login --label="myecckey" --outfile="${tempdir}/eccpubkey.pem" ${TOKENURL2} GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL2} echo "EC Keypair generated" echo "Change the key pair label" GNUTLS_PIN=mynewuserpin \ p11_tool --login --set-label="myrsakey2" "${TOKENURL};object=myrsakey;object-type=private" GNUTLS_PIN=mynewuserpin \ p11_tool --login --list-all ${TOKENURL} GNUTLS_PIN=mynewuserpin \ p11_tool --login --set-label="myrsakey" "${TOKENURL};object=myrsakey2;object-type=private" echo "RSA Key pair generated" # # FAPI cannot use tpm2_ptool required for export for the tpm2-openssl provider when # testing against OpenSSL 3. Ie theirs no OpenSSL to PKCS11 adapter that works with OSSL3 # set +e trap - ERR grep -q "fapi" <<< "$0" have_fapi=$? trap onerror ERR set -e if [ "$OSSL3_DETECTED" -eq "1" ] && [ "$have_fapi" -eq "0" ]; then echo "OpenSSL 3 and FAPI test detected, skipping the rest of the tests..." exit 0 fi echo "Testing signing via openssl" if [ "$OSSL3_DETECTED" -eq "0" ]; then osslconf="$tempdir/ossl.cnf" cat << EOF > "$osslconf" openssl_conf = openssl_init [openssl_init] engines = engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 MODULE_PATH = $modpath init = 0 EOF export OPENSSL_CONF="$osslconf" openssl dgst -engine pkcs11 -keyform engine \ -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 \ -sign "$TOKENURL" -out ${tempdir}/sig -passin pass:mynewuserpin ${tempdir}/data openssl pkeyutl -sign -engine pkcs11 -keyform engine \ -inkey ${TOKENURL} -passin pass:mynewuserpin \ -in ${tempdir}/data -out ${tempdir}/sig else #end openssl < 3.0 pushd $TPM2_PKCS11_STORE clear_asan yaml_myrsakey=$(tpm2_ptool export --label=mynewtoken --userpin=mynewuserpin --key-label=myrsakey --path=$TPM2_PKCS11_STORE) popd auth_myrsakey=$(echo "$yaml_myrsakey" | grep "object-auth" | cut -d' ' -f2-) setup_asan openssl dgst -provider tpm2 -provider default \ -sha256 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 \ -sign "$TPM2_PKCS11_STORE/myrsakey.pem" -out ${tempdir}/sig -passin "pass:$auth_myrsakey" ${tempdir}/data openssl pkeyutl -sign -provider tpm2 -provider base -rawin -digest sha256 \ -inkey "$TPM2_PKCS11_STORE/myrsakey.pem" -passin "pass:$auth_myrsakey" \ -in ${tempdir}/data -out ${tempdir}/sig fi echo "RSA Signing tested" echo "Test ECC Signing" if [ "$OSSL3_DETECTED" -eq "0" ]; then ECC_KEY_URL="${TOKENURL2};object=myecckey;type=private" openssl dgst -engine pkcs11 -keyform engine -sha1 -sign "$ECC_KEY_URL" -out ${tempdir}/sig -passin pass:mynewuserpin ${tempdir}/data openssl dgst -sha1 -verify ${tempdir}/eccpubkey.pem -signature ${tempdir}/sig ${tempdir}/data else # openssl 3 pushd $TPM2_PKCS11_STORE clear_asan yaml_myecckey=$(tpm2_ptool export --label=mynewtoken2 --userpin=mynewuserpin --key-label=myecckey --path=$TPM2_PKCS11_STORE) popd auth_myecckey=$(echo "$yaml_myecckey" | grep "object-auth" | cut -d' ' -f2-) setup_asan openssl dgst -provider tpm2 -provider default \ -sha1 -sign "$TPM2_PKCS11_STORE/myecckey.pem" -out ${tempdir}/sig -passin "pass:$auth_myecckey" ${tempdir}/data openssl dgst -sha1 -verify ${tempdir}/eccpubkey.pem -signature ${tempdir}/sig ${tempdir}/data fi echo "ECC Signing tested" exit 0 tpm2-pkcs11-1.9.1/test/integration/pkcs11-tool-init-fapi.sh.fapi0000755000175100017510000000666414535673717017737 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause set -x if [ -z "$T" ]; then export T="$(cd "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)" fi source "$T/test/integration/scripts/helpers.sh" tempdir=$(mktemp -d) function cleanup() { rm -rf "$tempdir" } trap cleanup EXIT onerror() { echo "$BASH_COMMAND on line ${BASH_LINENO[0]} failed: $?" exit 1 } trap onerror ERR setup_asan if [ -z "$modpath" ]; then modpath="$PWD/src/.libs/libtpm2_pkcs11.so" fi echo "modpath=$modpath" pkcs11_tool() { pkcs11-tool --module "$modpath" "$@" return $? } export TPM2_PKCS11_STORE="$tempdir" echo "TPM2_PKCS11_STORE=$TPM2_PKCS11_STORE" echo "testdata">${tempdir}/data echo "Should have uninitialized token" pkcs11_tool -T | grep -q uninitialized echo "Found uninitialized token" pkcs11_tool -I pkcs11_tool -T # Their is no SRK so it should attempt to make an SRK, so lets test it with an owner # hierarchy password set to make sure that works. tpm2_changeauth -cowner mynewpass export TPM2_PKCS11_OWNER_AUTH=mynewpass echo "Initializing token" pkcs11_tool --slot-index=0 --init-token --label=mynewtoken --so-pin=mynewsopin echo "Token initialized" pkcs11_tool -T echo "Initializing user pin" pkcs11_tool --slot-index=0 --login --login-type="so" --init-pin --so-pin=mynewsopin --pin=mynewuserpin echo "Userpin initialized" echo "Generating RSA key pair" pkcs11_tool --slot-index=0 --label="myrsakey" --login --pin=mynewuserpin --keypairgen echo "RSA Key pair generated" echo "Testing RSA signature" pkcs11_tool -v --list-objects --login --pin mynewuserpin pkcs11_tool -v --sign --login --slot-index=0 --label="myrsakey" --pin mynewuserpin \ --input-file ${tempdir}/data --output-file ${tempdir}/sig \ --mechanism SHA256-RSA-PKCS pkcs11_tool -v --read-object --slot-index=0 --label="myrsakey" \ --type pubkey --output-file ${tempdir}/pubkey.der \ || exit 77 #This fails on old pkcs11-tool versions, thus exit-skip here openssl dgst -verify ${tempdir}/pubkey.der -keyform DER -signature ${tempdir}/sig -sha256 \ -sigopt rsa_padding_mode:pkcs1 \ ${tempdir}/data echo "RSA signature tested" echo "Change PIN test" pkcs11_tool --change-pin --slot-index=0 --pin=mynewuserpin --login --new-pin=temppin pkcs11_tool --change-pin --slot-index=0 --pin=temppin --login --new-pin=mynewuserpin echo "PIN change tested" # # Regression test for https://github.com/tpm2-software/tpm2-pkcs11/issues/399 # Delete Private Key then Public Key. pkcs11_tool --delete-object --slot-index=0 --label="myrsakey" --pin=mynewuserpin --login --type=privkey pkcs11_tool --list-objects --slot-index=0 pkcs11_tool --delete-object --slot-index=0 --label="myrsakey" --pin=mynewuserpin --login --type=pubkey pkcs11_tool --list-objects --slot-index=0 # # Test creating data objects # echo "hello world" > objdata pkcs11_tool --slot-index=0 --login --pin=mynewuserpin --write-object objdata --type data --label dataobj1 --private # whitebox test to make sure secret is not in store if [ "$TPM2_PKCS11_BACKEND" != "fapi" ]; then sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select attrs from tobjects;' | grep -qiv "$(cat objdata)" # and check for the hex encoded version too sqlite3 "$TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3" 'select attrs from tobjects;' | grep -qiv "$(xxd -p objdata)" fi pkcs11_tool --slot-index=0 --login --pin=mynewuserpin --read-object --type data --label dataobj1 -o objdata2 cmp objdata objdata2 exit 0 tpm2-pkcs11-1.9.1/test/integration/test.h0000644000175100017510000000622514535673717013650 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef TEST_INTEGRATION_TEST_H_ #define TEST_INTEGRATION_TEST_H_ #include "config.h" /* Set up ALL the headers needed so tests can just use #include "test.h" */ #include #include #include #include #include #include #include #include #include #include #include "ssl_util.h" #include "pkcs11.h" #include "ssl_util.h" #include "utils.h" /* 4 in db tokens + 1 uninitialized token */ #define TOKEN_COUNT (4 + 1) #define GOOD_USERPIN "myuserpin" #define GOOD_SOPIN "mysopin" #define BAD_USERPIN "myBADuserpin" #define BAD_SOPIN "myBADsopin" #define IMPORT_LABEL_USERPIN "anotheruserpin" typedef struct test_info test_info; #define ADD_ATTR_BASE(t, x) { .type = t, .ulValueLen = sizeof(x), .pValue = &x } #define ADD_ATTR_ARRAY(t, x) { .type = t, .ulValueLen = ARRAY_LEN(x), .pValue = x } #define ADD_ATTR_STR(t, x) { .type = t, .ulValueLen = sizeof(x) - 1, .pValue = x } /* * If UNIT_TESTING is defined, cmocka will hijack allocation routines to look for memory leaks. * It checks at the end of the test via fail_if_blocks_allocated, and if true will free * the blocks causing any de-allocation/teardown routines defined after the test to access * and free memory already free'd. To remedy this, define some always safe alloc routines. */ #if defined(calloc) #undef calloc #endif #if defined(free) #undef free #endif #if defined(malloc) #undef malloc #endif #if defined(realloc) #undef realloc #endif test_info *test_info_from_state(void **state); int group_setup(void **state); int group_setup_locking(void **state); int group_teardown(void **state); void logout_expects(CK_SESSION_HANDLE handle, CK_RV expected); void logout(CK_SESSION_HANDLE handle); void login_expects(CK_SESSION_HANDLE handle, CK_USER_TYPE user_type, CK_RV expected, unsigned char *pin, CK_ULONG len); void user_login_expects(CK_SESSION_HANDLE handle, CK_RV expected); void user_login_bad_pin(CK_SESSION_HANDLE handle); void user_login(CK_SESSION_HANDLE handle); void context_login(CK_SESSION_HANDLE handle); void context_login_expects(CK_SESSION_HANDLE handle, CK_RV expected); void context_login_bad_pin(CK_SESSION_HANDLE handle); void so_login_expects(CK_SESSION_HANDLE handle, CK_RV expected); void so_login(CK_SESSION_HANDLE handle); void so_login_bad_pin(CK_SESSION_HANDLE handle); void get_keypair(CK_SESSION_HANDLE session, CK_KEY_TYPE key_type, CK_OBJECT_HANDLE_PTR pub_handle, CK_OBJECT_HANDLE_PTR priv_handle); void verify_missing_pub_attrs_common(CK_SESSION_HANDLE session, CK_KEY_TYPE keytype, CK_OBJECT_HANDLE h); void verify_missing_priv_attrs_common(CK_SESSION_HANDLE session, CK_KEY_TYPE keytype, CK_OBJECT_HANDLE h, CK_BBOOL extractable); void verify_missing_pub_attrs_ecc(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h); void verify_missing_priv_attrs_ecc(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h); void verify_missing_pub_attrs_rsa(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h); void verify_missing_priv_attrs_rsa(CK_SESSION_HANDLE session, CK_OBJECT_HANDLE h); #endif /* TEST_INTEGRATION_TEST_H_ */ tpm2-pkcs11-1.9.1/test/integration/largebin.h0000644000175100017510000003461314535673717014456 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef TEST_INTEGRATION_LARGEBIN_H_ #define TEST_INTEGRATION_LARGEBIN_H_ unsigned char _large_rand_bin[] = { 0xb8, 0xe5, 0x5c, 0x93, 0xf2, 0x1c, 0xa5, 0x76, 0x2f, 0x6b, 0x10, 0x42, 0x02, 0x69, 0x95, 0x4f, 0x1a, 0xed, 0x82, 0x81, 0x82, 0x5a, 0xfc, 0xd4, 0x66, 0x59, 0xf4, 0xed, 0x5b, 0x7a, 0x3a, 0x7a, 0x04, 0x91, 0xfe, 0x19, 0xb8, 0x27, 0xa6, 0xb9, 0xae, 0x42, 0xf4, 0x3a, 0x2f, 0x92, 0x1e, 0xe1, 0xfa, 0xf4, 0x9e, 0x98, 0xd5, 0xfe, 0x01, 0x3b, 0x6d, 0x32, 0x23, 0xcf, 0x6a, 0xad, 0xaf, 0x6b, 0x8c, 0xe3, 0x66, 0xd5, 0x47, 0x39, 0x90, 0xdb, 0x46, 0xe3, 0xae, 0x5c, 0xb0, 0xf9, 0xb0, 0xa7, 0x35, 0xf6, 0x72, 0x50, 0xfa, 0xea, 0x95, 0x4d, 0x2a, 0x2e, 0x0e, 0x4c, 0xfa, 0x91, 0x28, 0x4a, 0x84, 0xd9, 0x54, 0x6c, 0x85, 0x2c, 0xe3, 0xa9, 0xf9, 0xc0, 0x9c, 0xa5, 0xb9, 0xf8, 0xfb, 0x1f, 0xe7, 0xf2, 0x09, 0x9d, 0x91, 0x47, 0x7a, 0x9a, 0x0c, 0x72, 0x42, 0x08, 0x29, 0x82, 0x47, 0xd5, 0xdc, 0xd1, 0x67, 0x5e, 0x17, 0x19, 0xfd, 0x54, 0x2f, 0xff, 0xf8, 0x63, 0xb8, 0x61, 0x36, 0xfa, 0xa8, 0x32, 0x0e, 0xd1, 0x76, 0xaf, 0x2c, 0xf3, 0xd9, 0x23, 0x8f, 0x6a, 0xae, 0x14, 0x77, 0xd0, 0xa2, 0x8f, 0x62, 0xee, 0x33, 0x97, 0x92, 0xd8, 0x37, 0xaa, 0x46, 0x03, 0x45, 0x0f, 0xb7, 0x79, 0x3e, 0x50, 0xfb, 0x8d, 0x3d, 0x3f, 0xfb, 0xc4, 0x3f, 0x6d, 0xb2, 0xeb, 0xc3, 0xb0, 0x45, 0x77, 0xd2, 0xdc, 0x5a, 0xa6, 0xbe, 0x60, 0xad, 0xe0, 0x68, 0x4e, 0xf3, 0x30, 0xe8, 0xae, 0x11, 0x78, 0x83, 0x25, 0xf0, 0x52, 0x17, 0x56, 0x4c, 0x24, 0x01, 0x59, 0xde, 0x58, 0x45, 0x47, 0x28, 0x0f, 0x2d, 0xc7, 0x2c, 0xbb, 0x2f, 0x4d, 0x48, 0x87, 0xa8, 0x9b, 0x6d, 0x2b, 0x68, 0x82, 0x21, 0x30, 0xb6, 0x02, 0x06, 0xe4, 0x11, 0xa9, 0x95, 0xd1, 0x7a, 0x47, 0xcd, 0xcd, 0xcb, 0xf9, 0x63, 0x8e, 0x8c, 0xb0, 0xe4, 0x01, 0x38, 0xf1, 0xa5, 0x67, 0xcc, 0x69, 0xcd, 0xae, 0x31, 0xaf, 0xdc, 0xda, 0x17, 0x6f, 0x4f, 0xc2, 0xac, 0x15, 0xf1, 0x6c, 0x36, 0x68, 0xad, 0x45, 0xf0, 0x0c, 0xe0, 0x2d, 0x51, 0x32, 0xfa, 0xba, 0x3b, 0xaa, 0x3e, 0x18, 0x43, 0x58, 0x02, 0x65, 0xb8, 0x84, 0xcf, 0x50, 0xa7, 0xec, 0xb2, 0xe0, 0xe9, 0x5a, 0x14, 0x48, 0xc8, 0xd3, 0xd3, 0x1d, 0xa7, 0xa8, 0x38, 0xb6, 0x61, 0xaa, 0x72, 0xb9, 0xc5, 0x3c, 0x1b, 0x90, 0x65, 0x4f, 0x17, 0x9d, 0x0b, 0xc7, 0xd8, 0xcf, 0x63, 0x4d, 0x85, 0xc8, 0xdb, 0x26, 0x68, 0xca, 0x5b, 0xa1, 0x3a, 0xdd, 0x10, 0x0a, 0x4f, 0xc8, 0x15, 0xf1, 0x09, 0x12, 0x97, 0xa2, 0x46, 0x76, 0xd5, 0xa8, 0xa5, 0x26, 0xf5, 0xc7, 0x03, 0x69, 0x74, 0xa5, 0x62, 0x8b, 0x34, 0xa3, 0xa6, 0xb9, 0x8a, 0xae, 0x7b, 0x57, 0x11, 0x6c, 0x8f, 0x0c, 0xfc, 0x40, 0x23, 0xc2, 0xfc, 0xc0, 0x0a, 0x20, 0xb0, 0xa1, 0x7b, 0xe6, 0x55, 0x66, 0x52, 0x71, 0xfc, 0x98, 0x89, 0x87, 0x08, 0x8b, 0xb6, 0x45, 0xc9, 0x93, 0x2b, 0x80, 0xee, 0x6d, 0x0a, 0x81, 0x0a, 0x1d, 0xb9, 0x3f, 0x37, 0x3c, 0x47, 0x6e, 0x5f, 0xb8, 0xff, 0x2e, 0xd0, 0xee, 0x90, 0x5c, 0xe3, 0xc9, 0xd3, 0xba, 0xfc, 0x23, 0xfb, 0x53, 0xd5, 0x9e, 0x0d, 0x88, 0x50, 0xfb, 0x13, 0xb2, 0xe3, 0x2a, 0xdc, 0x98, 0xc5, 0x9c, 0xd3, 0xeb, 0x89, 0xf3, 0xf7, 0x44, 0x54, 0x8b, 0x09, 0xd2, 0x0e, 0x94, 0x14, 0x53, 0x76, 0x11, 0x5e, 0xfb, 0xce, 0xb0, 0x8d, 0x9d, 0x55, 0xfa, 0x5f, 0x40, 0xbd, 0xc1, 0x01, 0x9d, 0x6a, 0x52, 0x44, 0x7f, 0x28, 0xc8, 0x84, 0x79, 0x36, 0xf8, 0x7c, 0x6f, 0x63, 0x94, 0x2a, 0x78, 0xab, 0xa5, 0xc5, 0xef, 0x54, 0x2b, 0x1d, 0xf7, 0xba, 0x9f, 0x9c, 0xf4, 0xb7, 0xb2, 0x82, 0x92, 0x23, 0xab, 0x66, 0xb6, 0xbe, 0xd3, 0xd4, 0x4b, 0x17, 0xe0, 0xa9, 0xf1, 0xb3, 0x2d, 0xcd, 0x48, 0x8e, 0xba, 0xb5, 0x78, 0x52, 0xf2, 0xc2, 0x2f, 0x0c, 0x46, 0x08, 0x23, 0x34, 0xdc, 0xc1, 0xcb, 0xd2, 0x6a, 0x99, 0x6c, 0xf7, 0x5d, 0x4c, 0xff, 0x95, 0xde, 0x01, 0x7f, 0x46, 0x1d, 0xf0, 0xdc, 0x51, 0xd5, 0xa0, 0xb6, 0x8d, 0xd8, 0xde, 0x65, 0xf5, 0x1b, 0x5b, 0xd3, 0xa4, 0xfd, 0xac, 0xa0, 0xc6, 0x85, 0x12, 0xaf, 0x1d, 0xdc, 0x5f, 0x52, 0xd1, 0x57, 0xa8, 0x67, 0xb8, 0x42, 0x91, 0x6b, 0x07, 0xd8, 0xe9, 0x30, 0x35, 0xe3, 0x0a, 0xb0, 0x73, 0x8e, 0xe0, 0x60, 0xe3, 0xf7, 0x2c, 0x24, 0xfe, 0x95, 0xc5, 0x00, 0xad, 0x56, 0xb1, 0x2c, 0xb5, 0xd4, 0x5d, 0x24, 0x40, 0x27, 0x8e, 0x56, 0xf2, 0x60, 0x53, 0xef, 0x31, 0x48, 0xed, 0x45, 0x07, 0x62, 0x28, 0x53, 0x26, 0xde, 0x7e, 0x56, 0x3a, 0xfd, 0xc7, 0xc3, 0xb6, 0x5b, 0x35, 0xf7, 0xe4, 0x81, 0xa3, 0xde, 0xe9, 0xbd, 0x98, 0xe0, 0x68, 0x77, 0x20, 0x52, 0x5c, 0x9c, 0xb3, 0xf3, 0x48, 0x22, 0x32, 0x4d, 0x5a, 0xa8, 0xc8, 0xbc, 0xcc, 0x69, 0xde, 0x39, 0x36, 0x82, 0x94, 0xa0, 0x3e, 0xee, 0xf8, 0xe3, 0xe7, 0xf9, 0x4a, 0xa4, 0xdd, 0xa3, 0x0c, 0xd6, 0x9d, 0xe2, 0x88, 0xd1, 0xa3, 0xc0, 0x31, 0x63, 0x7c, 0x8d, 0xbb, 0xdf, 0xfa, 0xdb, 0x73, 0xf6, 0x39, 0xa2, 0x99, 0x73, 0x96, 0xfc, 0xcc, 0x88, 0xca, 0x44, 0x77, 0x59, 0x73, 0xad, 0x97, 0x03, 0x63, 0x5b, 0x3d, 0xbd, 0x38, 0x65, 0xad, 0xd1, 0x08, 0xaa, 0xfe, 0x29, 0x43, 0x7f, 0x1e, 0xb6, 0xa7, 0x22, 0x51, 0xc7, 0x09, 0xca, 0xfd, 0x7e, 0x81, 0xda, 0x41, 0xd7, 0xdf, 0xa7, 0x8b, 0x09, 0xde, 0x4d, 0x6c, 0x7e, 0xb7, 0xe2, 0x31, 0x53, 0x3f, 0xed, 0x64, 0x9d, 0x7a, 0xdb, 0x06, 0x9c, 0x19, 0x27, 0x2b, 0xec, 0xac, 0x83, 0x9c, 0x26, 0x2a, 0xf3, 0x69, 0x0b, 0x75, 0xd1, 0x31, 0xe6, 0x9d, 0x0b, 0x10, 0xa8, 0x8b, 0x2d, 0x7b, 0x61, 0xa0, 0x95, 0x31, 0xe1, 0x4e, 0x9f, 0x0e, 0x9e, 0xcc, 0x14, 0x81, 0x21, 0x9f, 0xca, 0x7a, 0xc9, 0x58, 0x59, 0xc5, 0xdd, 0x5b, 0xfc, 0xfc, 0x6e, 0xbb, 0x8f, 0x80, 0x9b, 0x3d, 0x5e, 0xa9, 0x7a, 0xf3, 0xd2, 0xfc, 0xbb, 0x8e, 0x79, 0x8d, 0x22, 0xe3, 0xf2, 0x3f, 0xab, 0xcb, 0x9a, 0x31, 0x9e, 0x5f, 0x02, 0x4b, 0xb1, 0x94, 0x24, 0xbd, 0xc0, 0xb3, 0x26, 0xbe, 0x8b, 0x41, 0x08, 0x9d, 0x19, 0xa6, 0x8a, 0xc5, 0xe8, 0x7a, 0xcd, 0xec, 0x31, 0xbb, 0x6c, 0xe3, 0xa6, 0xfe, 0x8f, 0xd7, 0x5e, 0x27, 0x85, 0xb6, 0xb6, 0x9e, 0xb3, 0x3e, 0x1d, 0xd2, 0x61, 0x2c, 0x9d, 0xd0, 0xe6, 0x54, 0xfb, 0x27, 0xf9, 0x52, 0x7a, 0xe3, 0xdc, 0x78, 0x69, 0x80, 0xad, 0x51, 0x31, 0x4e, 0xc2, 0xb4, 0x43, 0x8d, 0xb5, 0xc5, 0x95, 0x65, 0xb7, 0x70, 0x6f, 0x01, 0x3a, 0xa4, 0xe0, 0x7b, 0xb8, 0xaa, 0xc7, 0x2b, 0x3b, 0xcd, 0xaa, 0x9e, 0x3a, 0xa0, 0x03, 0xa0, 0x5d, 0xfc, 0x64, 0xb4, 0x38, 0xd7, 0xad, 0x12, 0xd8, 0x68, 0x75, 0x3f, 0x06, 0x07, 0x8b, 0x23, 0x1b, 0x47, 0x43, 0x93, 0x61, 0x87, 0xa9, 0x2d, 0xad, 0x1e, 0x6a, 0x53, 0xa4, 0x09, 0xc6, 0xab, 0xc7, 0x91, 0xe1, 0xb2, 0x77, 0x2d, 0xb5, 0x88, 0x39, 0xe2, 0xce, 0xd6, 0xb1, 0x3f, 0x2f, 0xbb, 0x95, 0xd9, 0xcf, 0x58, 0x7d, 0x27, 0xe7, 0xb5, 0xc2, 0x0b, 0xe3, 0x95, 0x65, 0xe3, 0xf6, 0x08, 0xee, 0x8b, 0x0d, 0xeb, 0xb3, 0xe0, 0x48, 0xff, 0x26, 0x6a, 0x3a, 0x84, 0xca, 0x86, 0x03, 0x26, 0xb9, 0xbb, 0xe6, 0x88, 0x5f, 0x05, 0x06, 0x26, 0x33, 0x1d, 0xb2, 0xe9, 0xba, 0x11, 0x4c, 0x43, 0x2d, 0x33, 0x59, 0x7d, 0x02, 0x7c, 0xb4, 0x52, 0xd5, 0x46, 0x12, 0xaa, 0x00, 0xdc, 0xdd, 0x68, 0xc4, 0x75, 0xdc, 0x91, 0x26, 0x72, 0x87, 0xa4, 0x65, 0xb1, 0x62, 0x58, 0x25, 0xee, 0x25, 0x66, 0x12, 0x30, 0x5f, 0x70, 0x7d, 0x07, 0xc5, 0x73, 0x7f, 0xbe, 0x8a, 0x56, 0x2f, 0xba, 0x3c, 0xdf, 0x0f, 0xd6, 0xfb, 0x10, 0x1f, 0x1a, 0xa7, 0xae, 0x15, 0xaf, 0xd4, 0xf6, 0xcf, 0x0e, 0x65, 0xaa, 0xde, 0x69, 0xcc, 0x83, 0x1f, 0xe5, 0x3b, 0xf5, 0xfe, 0x27, 0xc4, 0xcb, 0xd9, 0x36, 0x9d, 0x82, 0x4d, 0x0c, 0x5c, 0xbb, 0x50, 0xb4, 0x42, 0xbd, 0x6c, 0x2b, 0xe1, 0xad, 0xa8, 0xde, 0x11, 0x0d, 0x48, 0x15, 0x2a, 0x9e, 0x60, 0x84, 0x1f, 0xd6, 0xa1, 0xb3, 0x16, 0x01, 0xb3, 0x58, 0x8d, 0x35, 0xee, 0x25, 0x1f, 0x2e, 0x8a, 0x3d, 0x63, 0xe5, 0x69, 0x76, 0x06, 0xa0, 0xbf, 0x53, 0xe6, 0xa6, 0x85, 0x91, 0x17, 0x74, 0xde, 0x63, 0x36, 0x32, 0x3f, 0xfe, 0x0c, 0xdb, 0x80, 0xbd, 0x15, 0x48, 0x4e, 0x41, 0xe3, 0x38, 0xce, 0xc1, 0x18, 0x65, 0x18, 0x1e, 0x2b, 0x6d, 0x35, 0x02, 0x4d, 0xb5, 0xe7, 0x16, 0x21, 0x85, 0x8b, 0x7c, 0x00, 0x8d, 0x1c, 0x52, 0x57, 0xa7, 0x1e, 0x9b, 0x92, 0x7c, 0x31, 0xb9, 0x7a, 0x0f, 0x07, 0x90, 0x78, 0xcc, 0xc9, 0x56, 0xd7, 0xa5, 0x76, 0x4b, 0x8e, 0x88, 0x04, 0xb0, 0x92, 0x86, 0x78, 0x96, 0x92, 0x47, 0xa4, 0x08, 0xbf, 0x37, 0x74, 0x1b, 0x92, 0x32, 0xae, 0x72, 0xdf, 0x91, 0x8d, 0x8e, 0x5c, 0xe1, 0x0a, 0x5d, 0x64, 0x6d, 0x73, 0x2e, 0x7e, 0xa8, 0x69, 0xa1, 0xe7, 0x7d, 0x68, 0x73, 0x3c, 0x80, 0x86, 0xd6, 0x0c, 0x8f, 0x19, 0x62, 0xa5, 0x85, 0x2f, 0x49, 0xe2, 0x87, 0xf4, 0x80, 0xb7, 0x11, 0xa2, 0x73, 0x9a, 0x40, 0xb3, 0xfd, 0xc8, 0x58, 0xa1, 0x81, 0xd6, 0x20, 0xe1, 0x78, 0x4c, 0xe4, 0x7e, 0x5a, 0x3f, 0x62, 0xfc, 0xcb, 0x8f, 0x13, 0x94, 0x82, 0xe7, 0xe9, 0xa7, 0x8c, 0xf7, 0x6e, 0x2e, 0x23, 0x49, 0x75, 0x3d, 0x4d, 0x6b, 0xe2, 0x8d, 0xac, 0x6c, 0x76, 0x43, 0x6b, 0x76, 0xcc, 0x61, 0x62, 0x69, 0xca, 0xb8, 0xf3, 0x95, 0xbb, 0x5b, 0xf7, 0x7d, 0x9a, 0x95, 0x3f, 0xca, 0x4e, 0xfc, 0xc5, 0xa5, 0xfd, 0x8f, 0xcd, 0x92, 0x04, 0x9a, 0x74, 0x8a, 0xd3, 0xdd, 0x02, 0x95, 0x7e, 0x06, 0x03, 0xf0, 0xd4, 0x7a, 0x6e, 0x1b, 0xcb, 0xc1, 0x8d, 0xad, 0xc1, 0xf3, 0x07, 0x23, 0x08, 0x2c, 0xa2, 0x6a, 0xfa, 0x86, 0xc9, 0xc0, 0x03, 0x1f, 0xc7, 0x6d, 0xc5, 0x8f, 0x51, 0x50, 0x22, 0x1b, 0xad, 0x22, 0x89, 0x52, 0xd9, 0xf4, 0xef, 0x04, 0xec, 0x25, 0x38, 0x32, 0x02, 0x98, 0xd5, 0x0c, 0x06, 0x43, 0xd1, 0xc5, 0x64, 0x00, 0xd2, 0xa7, 0x6b, 0xc1, 0xd6, 0xa7, 0x83, 0xab, 0x47, 0xf6, 0xca, 0x39, 0x0f, 0x39, 0x19, 0xf3, 0x7a, 0x57, 0xb9, 0x23, 0x26, 0x47, 0x9e, 0x1b, 0x49, 0xe2, 0x9d, 0x21, 0x8b, 0xce, 0xd2, 0xc3, 0xc8, 0xbe, 0x66, 0x56, 0x19, 0x0f, 0x8d, 0xf5, 0x6a, 0xd7, 0x61, 0xcf, 0x3a, 0x44, 0x3e, 0x68, 0xd5, 0x60, 0x1f, 0x59, 0xd4, 0xdc, 0x5b, 0xd5, 0x00, 0xea, 0x24, 0x1d, 0x02, 0x77, 0x35, 0xce, 0x37, 0xe4, 0x2e, 0x6f, 0x7b, 0x1d, 0x2d, 0x3e, 0xa5, 0x71, 0x97, 0xb6, 0x69, 0x24, 0xdd, 0x26, 0x1b, 0x86, 0x6d, 0x83, 0x24, 0x19, 0x61, 0x5c, 0x94, 0x67, 0xb8, 0xf5, 0xe8, 0x6b, 0x8d, 0x71, 0xed, 0x3b, 0xfd, 0x92, 0x80, 0x48, 0x4a, 0xb9, 0x58, 0x82, 0x7e, 0xcf, 0x4c, 0xfa, 0xf7, 0x3d, 0xc0, 0xd3, 0xbc, 0xfd, 0x00, 0xb7, 0xa5, 0xd1, 0x29, 0xbf, 0xd1, 0x70, 0x1c, 0xda, 0xf0, 0x19, 0xfa, 0x52, 0x3a, 0xd1, 0x53, 0xfa, 0x0b, 0xaf, 0x17, 0x09, 0x5d, 0x6e, 0xad, 0xb4, 0x69, 0xfa, 0xaa, 0xf0, 0x0d, 0xc7, 0x55, 0xd7, 0xb7, 0xb9, 0x33, 0x41, 0xcf, 0x3e, 0x47, 0x91, 0x05, 0x90, 0x8d, 0x6b, 0x2f, 0x06, 0xea, 0x6a, 0xfd, 0xb2, 0x86, 0x31, 0x28, 0x13, 0x10, 0xa8, 0xcd, 0xe4, 0x65, 0xb1, 0xd3, 0xc6, 0x8f, 0x3e, 0xbe, 0xd9, 0x32, 0xfa, 0x14, 0xa1, 0x53, 0xfc, 0x86, 0x63, 0x42, 0xf7, 0x29, 0x7c, 0x59, 0xe0, 0x19, 0x9a, 0xc1, 0x6b, 0x83, 0xc9, 0x23, 0x6c, 0xc7, 0xb5, 0x44, 0xaa, 0xe8, 0x42, 0xcf, 0x9d, 0x0a, 0x6e, 0x45, 0x2a, 0xbc, 0xd3, 0x84, 0xad, 0x21, 0x57, 0x70, 0xc6, 0xe3, 0x7b, 0x87, 0x32, 0xe4, 0x8a, 0x48, 0x2f, 0x95, 0x31, 0x2c, 0x89, 0x1a, 0x30, 0xf1, 0x3f, 0x79, 0x55, 0xd8, 0xda, 0x33, 0x6f, 0xa8, 0x85, 0x16, 0xcb, 0x99, 0x17, 0x3d, 0xbc, 0x32, 0xcc, 0xf5, 0xdb, 0x62, 0x69, 0xba, 0x73, 0xd6, 0xe0, 0xef, 0x83, 0x09, 0x26, 0xba, 0x6e, 0xbe, 0x72, 0xce, 0x28, 0xc1, 0xd5, 0x88, 0xf9, 0xd9, 0x4f, 0x1c, 0x36, 0x94, 0xc7, 0xac, 0x4b, 0x06, 0x79, 0x1c, 0xe9, 0x2b, 0x62, 0xb2, 0xd9, 0xa7, 0x58, 0x49, 0xb3, 0x69, 0x37, 0x89, 0x38, 0xeb, 0xbb, 0x6f, 0x91, 0x79, 0xd3, 0x6e, 0x76, 0x71, 0x0e, 0xdb, 0xbc, 0xc5, 0x04, 0x6d, 0xae, 0xae, 0xa1, 0x06, 0x91, 0xcf, 0x40, 0x01, 0x2d, 0xe7, 0x1a, 0x01, 0x96, 0x8e, 0xcb, 0x5e, 0x4d, 0xb2, 0xe1, 0x23, 0xe8, 0x43, 0x93, 0x32, 0xb5, 0x99, 0x55, 0x39, 0x75, 0xce, 0x0f, 0x13, 0x88, 0x0c, 0x46, 0x87, 0x7a, 0x46, 0x0e, 0x5f, 0xed, 0x6b, 0xe3, 0x23, 0x76, 0x5b, 0xa1, 0xee, 0x89, 0xf7, 0x74, 0x77, 0x64, 0x76, 0x01, 0xd7, 0x0e, 0x48, 0x73, 0xd4, 0xb5, 0x83, 0x9c, 0x7f, 0xf2, 0x7a, 0x3a, 0xdb, 0x66, 0xde, 0x45, 0xb4, 0x21, 0xa1, 0xd9, 0x81, 0x91, 0x79, 0xb0, 0x34, 0x00, 0x0e, 0x10, 0x2f, 0x4c, 0x9f, 0x7a, 0x6f, 0xf5, 0x97, 0xaa, 0x2d, 0x13, 0xf2, 0xe9, 0x87, 0x90, 0x14, 0x24, 0x3c, 0x0c, 0xca, 0xcb, 0x24, 0x62, 0xa5, 0xd0, 0x92, 0xeb, 0x89, 0x37, 0x78, 0x6d, 0x21, 0x16, 0x14, 0x6d, 0x67, 0xdc, 0x2f, 0x63, 0x50, 0x1b, 0xb4, 0x78, 0x9e, 0x74, 0xa5, 0x3b, 0xea, 0x21, 0x0c, 0xda, 0x8a, 0x25, 0x08, 0x68, 0x46, 0xed, 0xad, 0x3b, 0x73, 0x39, 0xc3, 0xef, 0x3e, 0x00, 0x83, 0xc0, 0x83, 0x6c, 0xa4, 0x32, 0x69, 0xeb, 0x02, 0x35, 0xb5, 0x24, 0x29, 0x75, 0x3e, 0x2b, 0x80, 0x7c, 0xe9, 0x34, 0xff, 0x86, 0x26, 0x5c, 0x14, 0x94, 0x33, 0x41, 0xd3, 0x6f, 0x8e, 0x65, 0x63, 0xd9, 0xab, 0x6c, 0xca, 0xe9, 0xef, 0xd5, 0x11, 0x9f, 0x42, 0x66, 0x02, 0x8d, 0x89, 0xa9, 0xb8, 0xb6, 0x33, 0xb2, 0x5c, 0x75, 0x62, 0x14, 0xd8, 0x4c, 0x8c, 0xce, 0x61, 0x9e, 0x21, 0x20, 0x3d, 0x34, 0x60, 0xa1, 0x48, 0x5f, 0x68, 0x34, 0xd9, 0x42, 0xce, 0x27, 0x17, 0xf4, 0x97, 0xce, 0x8b, 0x4e, 0x94, 0x84, 0x64, 0xe6, 0x6a, 0x2e, 0x8b, 0x57, 0x31, 0x86, 0x83, 0xed, 0xa9, 0x68, 0x24, 0xb1, 0x86, 0xcd, 0xe7, 0xb3, 0x16, 0x7e, 0x46, 0x8a, 0x45, 0xb3, 0xed, 0xee, 0xf0, 0xde, 0x04, 0xa1, 0x29, 0x83, 0x0b, 0x6d, 0x07, 0x2d, 0xbd, 0x66, 0x9c, 0xa5, 0x08, 0x53, 0x69, 0x29, 0xba, 0xa1, 0x51, 0x93, 0x7a, 0x91, 0x03, 0xbb, 0x7c, 0xbf, 0x3f, 0x28, 0x2f, 0x39, 0xac, 0x52, 0x7f, 0x2f, 0x63, 0x95, 0xbf, 0xe4, 0xc7, 0x64, 0x6f, 0x96, 0x86, 0x03, 0x08, 0x70, 0x12, 0x13, 0x20, 0x55, 0x69, 0x59, 0x2a, 0x3b, 0x27, 0xcd, 0xa3, 0x1e, 0x8d, 0x8a, 0xc0, 0xa0, 0x56, 0x74, 0xf7, 0xb5, 0x3b, 0x89, 0x7c, 0x2b, 0x83, 0x9a, 0x0a, 0x89, 0x80, 0xa8, 0x5d, 0x3c, 0x89, 0xe9, 0xaa, 0xde, 0x2e, 0x20, 0xa2, 0xd2, 0xa0, 0xf5, 0x69, 0x85, 0xc0, 0xd8, 0xab, 0x9c, 0x1e, 0xe5, 0x9f, 0x46, 0x49, 0x1c, 0x00, 0x43, 0xf4, 0x92, 0x0c, 0xf3, 0xf1, 0x19, 0x24, 0x79, 0xd1, 0xe6, 0x19, 0xec, 0x41, 0x4b, 0x39, 0xfc, 0x9d, 0xe5, 0x49, 0x6a, 0xa5, 0x35, 0x1b, 0x40, 0x3f, 0x39, 0x50, 0x8e, 0x05, 0xe3, 0x26, 0x3d, 0x83, 0x39, 0xf5, 0xc1, 0x1d, 0x8e, 0x76, 0xb8, 0xd6, 0x27, 0x75, 0xa4, 0x03, 0xec, 0x42, 0x8b, 0x0e, 0xf2, 0x47, 0x0b, 0x2e, 0xf0, 0x3b, 0xdc, 0x66, 0xcd, 0xfd, 0x58, 0xa3, 0x2f, 0x6b, 0xd9, 0xca, 0x43, 0x84, 0x52, 0xd1, 0x87, 0x69, 0xe3, 0xd1, 0x3f, 0x45, 0x5b, 0x65, 0x3b, 0xe6, 0x33, 0x25, 0xdf, 0xc1, 0x02, 0x13, 0x7d, 0x4b, 0x0f, 0x50, 0x38, 0x85, 0xb5, 0xf4, 0x61, 0xed, 0x84, 0xd2, 0x8f, 0x5e, 0x62, 0x66, 0x54, 0xcb, 0xfc, 0x03, 0xba, 0x05, 0x4e, 0x95, 0xad, 0xf0, 0x18, 0xd6, 0x43, 0x41, 0xff, 0x75, 0x6c, 0x14, 0xc0, 0x1c, 0x22, 0x36, 0x6e, 0x50, 0x2b, 0xe9, 0xed, 0xc7, 0x1b, 0x46, 0x70, 0x89, 0x2f, 0x34, 0x88, 0x86, 0x69, 0xac, 0xe0, 0xa0, 0xc5, 0x7a, 0x79, 0x12, 0x2f, 0xf5, 0xd1, 0x22, 0x2e, 0x1c, 0x82, 0xd7, 0x15, 0x9d, 0x6d, 0x3b, 0xcd, 0x50, 0x77, 0x14, 0xba, 0x2f, 0xe1, 0xae, 0x84, 0x6a, 0x3d, 0xaf, 0x08, 0x62, 0xdc, 0x3c, 0x72, 0x85, 0x4d, 0x8b, 0xe0, 0xad, 0xc4, 0x87, 0xf6, 0xc6, 0xee, 0xe0, 0x3a, 0xc9, 0x4a, 0xb9, 0x72, 0x57, 0xd8, 0x87, 0xc3, 0x59, 0x7c, 0xdc, 0x57, 0x12, 0x6d, 0x84, 0x8e, 0xfb, 0x19, 0xe9, 0x01, 0xef, 0x99, 0x92, 0x61, 0x1e, 0xce, 0x42, 0xfd, 0x01, 0xc2, 0x89, 0x15, 0xd8, 0xd0, 0x83, 0xa7, 0x43, 0x2c, 0x3b, 0x3d, 0x94, 0x26, 0x15, 0xf4, 0x46, 0x48, 0xa2, 0x56, 0x90, 0x19, 0x96, 0xb4, 0x09, 0xf3, 0x76, 0xb5, 0x99, 0xe4, 0x08, 0x59, 0xb2, 0x6c, 0x90, 0xb6, 0xe9, 0xc7, 0x6e, 0x2d, 0xfb, 0x5b, 0x02, 0x21, 0xd5, 0x3d }; #endif /* TEST_INTEGRATION_LARGEBIN_H_ */ tpm2-pkcs11-1.9.1/test/integration/fixtures/0000755000175100017510000000000014535673717014444 5tpm2-pkcs11-1.9.1/test/integration/fixtures/client.cnf0000644000175100017510000000214414535673717016333 [ ca ] default_ca = CA_default [ CA_default ] fixtures = $ENV::TEST_FIXTURES dir = $ENV::CA_DIR certs = $dir crl_dir = $dir/crl database = $dir/index.txt new_certs_dir = $dir certificate = $dir/ca.pem serial = $dir/serial crl = $dir/crl.pem private_key = $dir/ca.key name_opt = ca_default cert_opt = ca_default default_days = 60 default_crl_days = 30 default_md = sha256 preserve = no policy = policy_match [ policy_match ] countryName = match stateOrProvinceName = match organizationName = match organizationalUnitName = optional commonName = supplied emailAddress = optional [ policy_anything ] countryName = optional stateOrProvinceName = optional localityName = optional organizationName = optional organizationalUnitName = optional commonName = supplied emailAddress = optional [ req ] prompt = no distinguished_name = client default_bits = 2048 input_password = whatever output_password = whatever [client] countryName = US stateOrProvinceName = Radius localityName = Somewhere organizationName = Example Inc. emailAddress = user@example.org commonName = user@example.org tpm2-pkcs11-1.9.1/test/integration/fixtures/hmac.hex.key0000644000175100017510000000004014535673717016563 0336aa7945a3cadec3cbdc6e79043b5btpm2-pkcs11-1.9.1/test/integration/fixtures/ossl-req-ca.cnf0000644000175100017510000000042614535673717017204 # OpenSSL configuration for generating CA certificates [req] default_bits = 2048 req_extensions = ca_ext distinguished_name = ca_dn [ca_dn] commonName = "Test CA" [ca_ext] keyUsage = critical,keyCertSign,cRLSign basicConstraints = critical,CA:true subjectKeyIdentifier = hash tpm2-pkcs11-1.9.1/test/integration/fixtures/ossl-req-cert.cnf0000644000175100017510000000045014535673717017553 # OpenSSL configuration for generating a certificate signed by a CA [req] default_bits = 2048 req_extensions = cert_ext distinguished_name = dn [dn] commonName = "Test Certificate" [cert_ext] keyUsage = critical,digitalSignature basicConstraints = critical,CA:false subjectKeyIdentifier = hash tpm2-pkcs11-1.9.1/test/integration/fixtures/ossl.cnf0000644000175100017510000000050414535673717016033 openssl_conf = openssl_init [openssl_init] engines = engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 MODULE_PATH = ${ENV::TPM2_PKCS11_MODULE} PIN=myuserpin init = 0 [ req ] distinguished_name = req_dn string_mask = utf8only utf8 = yes [ req_dn ] commonName = Mr Test Harness tpm2-pkcs11-1.9.1/test/integration/fixtures/smimeextensions0000644000175100017510000000035314535673717017542 [smime] basicConstraints = critical,CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment subjectKeyIdentifier = hash authorityKeyIdentifier = keyid,issuer subjectAltName = email:move extendedKeyUsage = emailProtection tpm2-pkcs11-1.9.1/test/integration/fixtures/tss2engine.cnf0000644000175100017510000000025014535673717017132 openssl_conf = openssl_init [openssl_init] engines = engine_section [engine_section] tpm2tss = tpm2tss_section [tpm2tss_section] SET_TCTI = ${ENV::TPM2_PKCS11_TCTI} tpm2-pkcs11-1.9.1/test/integration/fixtures/xpextensions0000644000175100017510000000130414535673717017054 # # File containing the OIDs required for Windows. # # http://support.microsoft.com/kb/814394/en-us # [ xpclient_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.2 crlDistributionPoints = URI:http://www.example.com/example_ca.crl [ xpserver_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.1 crlDistributionPoints = URI:http://www.example.com/example_ca.crl # # Add this to the PKCS#7 keybag attributes holding the client's private key # for machine authentication. # # the presence of this OID tells Windows XP that the cert is intended # for use by the computer itself, and not by an end-user. # # The other solution is to use Microsoft's web certificate server # to generate these certs. # # 1.3.6.1.4.1.311.17.2 tpm2-pkcs11-1.9.1/test/unit/0000755000175100017510000000000014674407116011217 5tpm2-pkcs11-1.9.1/test/unit/test_attr.c0000644000175100017510000000335514535673717013332 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include "attrs.h" static void test_config_parser_empty_seq(void **state) { (void) state; attr_list *attrs = attr_list_new(); assert_non_null(attrs); bool r = attr_list_add_int(attrs, CKA_CLASS, CKO_CERTIFICATE); assert_true(r); r = attr_list_add_buf(attrs, CKA_ID, (CK_BYTE_PTR)"2132333435", 10); assert_true(r); r = attr_list_add_bool(attrs, CKA_DECRYPT, CK_TRUE); assert_true(r); /* test class */ CK_ATTRIBUTE_PTR a = attr_get_attribute_by_type(attrs, CKA_CLASS); assert_non_null(a); CK_OBJECT_CLASS got_class = CKO_DATA; CK_RV rv = attr_CK_OBJECT_CLASS(a, &got_class); assert_int_equal(rv, CKR_OK); assert_int_equal(got_class, CKO_CERTIFICATE); /* test id */ a = attr_get_attribute_by_type(attrs, CKA_ID); assert_non_null(a); assert_int_equal(a->ulValueLen, 10); assert_memory_equal(a->pValue, "2132333435", 10); /* test decrypt */ a = attr_get_attribute_by_type(attrs, CKA_DECRYPT); assert_non_null(a); CK_BBOOL got_bool = CK_FALSE; rv = attr_CK_BBOOL(a, &got_bool); assert_int_equal(rv, CKR_OK); assert_int_equal(got_bool, CK_TRUE); /* test shouldn't be there */ a = attr_get_attribute_by_type(attrs, CKA_SIGN); assert_null(a); attr_list_free(attrs); } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_config_parser_empty_seq), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.9.1/test/unit/test_db.c0000644000175100017510000032147614666345037012750 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include #include #include "db.h" #include "debug.h" #include "object.h" #include "twist.h" #include "utils.h" #define BAD_PTR ((void *)0xDEADBEEF) typedef struct will_return_data will_return_data; struct will_return_data { bool call_real; token t; union { int rc; void *data; bool rcb; CK_RV rv; sqlite3_int64 u64; }; }; static int tobject_setup(void **state) { will_return_data d = { .call_real = true }; will_return(__wrap_calloc, &d); tobject *t = __real_tobject_new(); assert_non_null(t); t->id = 42; *state = t; return 0; } int __wrap_sqlite3_column_bytes(sqlite3 *stmt, int i) { UNUSED(stmt); UNUSED(i); will_return_data *d = mock_type(will_return_data *); return d->rc; } void *__wrap_sqlite3_column_blob(sqlite3 *stmt, int i) { UNUSED(stmt); UNUSED(i); will_return_data *d = mock_type(will_return_data *); return d->data; } int __wrap_sqlite3_data_count(sqlite3 *stmt) { UNUSED(stmt); will_return_data *d = mock_type(will_return_data *); return d->rc; } const char *__wrap_sqlite3_column_name(sqlite3 *stmt, int i) { UNUSED(stmt); UNUSED(i); will_return_data *d = mock_type(will_return_data *); return d->data; } const unsigned char *__wrap_sqlite3_column_text(sqlite3_stmt *stmt, int i) { UNUSED(stmt); UNUSED(i); will_return_data *d = mock_type(will_return_data *); return d->data; } int __wrap_sqlite3_column_int(sqlite3_stmt *stmt, int i) { UNUSED(stmt); UNUSED(i); will_return_data *d = mock_type(will_return_data *); return d->rc; } int __wrap_sqlite3_finalize(sqlite3_stmt *pStmt) { UNUSED(pStmt); will_return_data *d = mock_type(will_return_data *); return d->rc; } int __wrap_sqlite3_prepare_v2(sqlite3 *db, const char *zSql, int nByte, sqlite3_stmt **ppStmt, const char **pzTail ) { UNUSED(db); UNUSED(zSql); UNUSED(nByte); UNUSED(ppStmt); UNUSED(pzTail); will_return_data *d = mock_type(will_return_data *); if (d->rc == SQLITE_OK) { *ppStmt = (sqlite3_stmt *)0xBADCC0DE; } return d->rc; } int __wrap_sqlite3_bind_int(sqlite3_stmt *pStmt, int iCol, int value) { UNUSED(pStmt); UNUSED(iCol); UNUSED(value); will_return_data *d = mock_type(will_return_data *); return d->rc; } int __wrap_sqlite3_bind_text(sqlite3_stmt *pStmt, int iCol, const char *text, int len, void(*fnp)(void *data)) { UNUSED(pStmt); UNUSED(iCol); UNUSED(text); UNUSED(len); UNUSED(fnp); will_return_data *d = mock_type(will_return_data *); return d->rc; } int __wrap_sqlite3_bind_blob(sqlite3_stmt *pStmt, int iCol, const void *data, int len, void(*fnp)(void *data)) { UNUSED(pStmt); UNUSED(iCol); UNUSED(data); UNUSED(len); UNUSED(fnp); will_return_data *d = mock_type(will_return_data *); return d->rc; } int __wrap_sqlite3_step(sqlite3_stmt *pStmt) { UNUSED(pStmt); will_return_data *d = mock_type(will_return_data *); return d->rc; } const char *__wrap_sqlite3_errmsg(sqlite3 *db) { UNUSED(db); return "FAKE ERROR MESSAGE"; } char *__real_strdup(const char *s); char *__wrap_strdup(const char *s) { UNUSED(s); will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_strdup(s); } return d->data; } void *__real_calloc(size_t nmemb, size_t size); void *__wrap_calloc(size_t nmemb, size_t size) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_calloc(nmemb, size); } return d->data; } int __real_sqlite3_exec( sqlite3 *db, /* An open database */ const char *sql, /* SQL to be evaluated */ int (*callback)(void*,int,char**,char**), /* Callback function */ void *, /* 1st argument to callback */ char **errmsg /* Error msg written here */ ); int __wrap_sqlite3_exec( sqlite3 *db, const char *sql, int (*callback)(void*,int,char**,char**), void *arg, char **errmsg ) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_sqlite3_exec(db, sql, callback, arg, errmsg); } return d->rc; } sqlite3_int64 __wrap_sqlite3_last_insert_rowid(sqlite3 *db) { UNUSED(db); will_return_data *d = mock_type(will_return_data *); return d->u64; } /* Override WEAK symbol */ twist __real_twistbin_new(const void *data, size_t size); twist twistbin_new(const void *data, size_t len) { UNUSED(data); UNUSED(len); will_return_data *d = mock_type(will_return_data *); return d->data; } /* weak override */ tobject *tobject_new(void) { will_return_data *d = mock_type(will_return_data *); return d->data; } /* weak override */ tobject *db_tobject_new(sqlite3_stmt *stmt) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_db_tobject_new(stmt); } return d->data; } /* weak override */ bool parse_attributes_from_string(const unsigned char *yaml, size_t size, attr_list **attrs) { UNUSED(yaml); UNUSED(size); UNUSED(attrs); will_return_data *d = mock_type(will_return_data *); return d->rcb; } /* weak override */ WEAK CK_RV object_init_from_attrs(tobject *tobj) { UNUSED(tobj); will_return_data *d = mock_type(will_return_data *); return d->rv; } /* weak override */ char *emit_pobject_to_conf_string(pobject_config *config) { UNUSED(config); will_return_data *d = mock_type(will_return_data *); return d->data; } /* weak override */ bool tpm_deserialize_handle(tpm_ctx *ctx, twist handle_blob, uint32_t *handle) { UNUSED(ctx); UNUSED(handle_blob); UNUSED(handle); will_return_data *d = mock_type(will_return_data *); return d->rcb; } /* weak override */ CK_RV token_add_tobject_last(token *tok, tobject *t) { UNUSED(tok); UNUSED(t); will_return_data *d = mock_type(will_return_data *); return d->rv; } /* weak override */ CK_RV tpm_create_transient_primary_from_template(tpm_ctx *tpm, const char *template_name, twist pobj_auth, uint32_t *primary_handle) { UNUSED(tpm); UNUSED(template_name); UNUSED(pobj_auth); UNUSED(primary_handle); will_return_data *d = mock_type(will_return_data *); return d->rv; } /* weak override */ CK_RV token_min_init(token *t) { will_return_data *d = mock_type(will_return_data *); *t = d->t; return d->rv; } /* weak override */ int init_pobject(unsigned pid, pobject *pobj, tpm_ctx *tpm) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_init_pobject(pid, pobj, tpm); } return d->rc; } /* weak override */ int init_sealobjects(unsigned tokid, sealobject *sealobj) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_init_sealobjects(tokid, sealobj); } return d->rc; } /* weak override */ int init_tobjects(token *tok) { will_return_data *d = mock_type(will_return_data *); if (d->call_real) { return __real_init_tobjects(tok); } return d->rc; } /* weak override */ char *emit_attributes_to_string(attr_list *attrs) { UNUSED(attrs); will_return_data *d = mock_type(will_return_data *); return d->data; } /* weak override */ char *emit_config_to_string(token *tok) { UNUSED(tok); will_return_data *d = mock_type(will_return_data *); return d->data; } static int test_db_get_tokens_setup(void **state) { *state = __real_calloc(MAX_TOKEN_CNT, sizeof(token)); return !(*state != NULL); } static void test_db_get_blob_col_bytes_0(void **state) { (void) state; will_return_data d = { .rc = 0 }; will_return(__wrap_sqlite3_column_bytes, &d); twist blob = NULL; int rc = get_blob(BAD_PTR, 0, &blob); assert_int_equal(rc, SQLITE_ERROR); } static void test_db_get_blob_null_col_bytes_0(void **state) { (void) state; will_return_data d = { .rc = 0 }; will_return(__wrap_sqlite3_column_bytes, &d); twist blob = NULL; int rc = get_blob_null(BAD_PTR, 0, &blob); assert_int_equal(rc, SQLITE_OK); } static void test_db_get_blob_alloc_fail(void **state) { (void) state; will_return_data d[] = { { .rc = 32 }, { .data = "This is 32 bytes, that's cool!!" }, { .data = NULL }, }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_blob, &d[1]); will_return(twistbin_new, &d[2]); twist blob = NULL; int rc = get_blob(BAD_PTR, 0, &blob); assert_int_equal(rc, SQLITE_ERROR); } static void db_tobject_new_tobject_alloc_fail(void **state) { (void) state; will_return_data d[] = { { .call_real = true }, /* db_tobject_new call real */ { .data = NULL } /* tobject_new fail */ }; will_return(db_tobject_new, &d[0]); will_return(tobject_new, &d[1]); tobject *t = db_tobject_new(BAD_PTR); assert_null(t); } static void db_tobject_new_tobject_sqlite3_column_unknown_fail(void **state) { (void) state; will_return_data d[] = { { .call_real = true }, /* db_tobject_new call real */ { .data = *state }, /* tobject_new */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "unknown" }, /* sqlite3_column_name */ }; will_return(db_tobject_new, &d[0]); will_return(tobject_new, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); tobject *t = db_tobject_new(BAD_PTR); assert_null(t); } static void db_tobject_new_tobject_sqlite3_column_text_fail(void **state) { (void) state; will_return_data d[] = { { .call_real = true }, /* db_tobject_new call real */ { .data = *state }, /* tobject_new */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "attrs" }, /* sqlite3_column_name */ { .rc = 0 }, /* sqlite3_column_bytes */ { .data = NULL }, /* sqlite3_column_text */ }; will_return(db_tobject_new, &d[0]); will_return(tobject_new, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); will_return(__wrap_sqlite3_column_bytes, &d[4]); will_return(__wrap_sqlite3_column_text, &d[5]); tobject *t = db_tobject_new(BAD_PTR); assert_null(t); } static void db_tobject_new_tobject_sqlite3_attrs_text_fail(void **state) { (void) state; will_return_data d[] = { { .call_real = true }, /* db_tobject_new call real */ { .data = *state }, /* tobject_new */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "attrs" }, /* sqlite3_column_name */ { .rc = 4 }, /* sqlite3_column_bytes */ { .data = "bad" }, /* sqlite3_column_text */ { .rcb = false }, /* parse_attributes_from_string */ }; will_return(db_tobject_new, &d[0]); will_return(tobject_new, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); will_return(__wrap_sqlite3_column_bytes, &d[4]); will_return(__wrap_sqlite3_column_text, &d[5]); will_return(parse_attributes_from_string, &d[6]); tobject *t = db_tobject_new(BAD_PTR); assert_null(t); } static void db_tobject_new_tobject_object_init_from_attrs_fail(void **state) { (void) state; will_return_data d[] = { { .call_real = true }, /* db_tobject_new call real */ { .data = *state }, /* tobject_new */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "attrs" }, /* sqlite3_column_name */ { .rc = 3 }, /* sqlite3_column_bytes */ { .data = "good" }, /* sqlite3_column_text */ { .rcb = true }, /* parse_attributes_from_string */ { .rv = CKR_GENERAL_ERROR } /* object_init_from_attrs */ }; will_return(db_tobject_new, &d[0]); will_return(tobject_new, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); will_return(__wrap_sqlite3_column_bytes, &d[4]); will_return(__wrap_sqlite3_column_text, &d[5]); will_return(parse_attributes_from_string, &d[6]); will_return(object_init_from_attrs, &d[7]); tobject *t = db_tobject_new(BAD_PTR); assert_null(t); } static void init_pobject_v3_from_stmt_sqlite3_column_text_fail(void **state) { (void) state; will_return_data d[] = { { .rc = 42 }, /* sqlite3_column_int */ { .data = NULL }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_int, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); pobject_v3 pobj = { 0 }; int rc = init_pobject_v3_from_stmt(BAD_PTR, &pobj); assert_int_equal(rc, SQLITE_ERROR); } static void init_pobject_v3_from_stmt_strdup_fail(void **state) { (void) state; will_return_data d[] = { { .rc = 42 }, /* sqlite3_column_int */ { .data = "o" }, /* sqlite3_column_text */ { .data = NULL }, /* strdup */ }; will_return(__wrap_sqlite3_column_int, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(__wrap_strdup, &d[2]); pobject_v3 pobj = { 0 }; int rc = init_pobject_v3_from_stmt(BAD_PTR, &pobj); assert_int_equal(rc, SQLITE_ERROR); } static void init_pobject_v3_from_stmt__get_blob_fail(void **state) { (void) state; char *x = __real_strdup("o"); assert_non_null(x); will_return_data d[] = { { .rc = 42 }, /* sqlite3_column_int */ { .data = "o" }, /* sqlite3_column_text */ { .data = x }, /* strdup */ { .rc = 4 }, /* _get_blob --> sqlite3_column_bytes */ { .data = "data" }, /* _get_blob --> sqlite3_column_blob */ { .data = NULL }, /* twistbin_new */ }; will_return(__wrap_sqlite3_column_int, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(__wrap_strdup, &d[2]); will_return(__wrap_sqlite3_column_bytes, &d[3]); will_return(__wrap_sqlite3_column_blob, &d[4]); will_return(twistbin_new, &d[5]); pobject_v3 pobj = { 0 }; int rc = init_pobject_v3_from_stmt(BAD_PTR, &pobj); assert_int_equal(rc, SQLITE_ERROR); } static void init_pobject_v3_from_stmt_sqlite3_column_text2_fail(void **state) { (void) state; char *x = __real_strdup("o"); assert_non_null(x); twist t = __real_twistbin_new("data", 4); assert_non_null(t); will_return_data d[] = { { .rc = 42 }, /* sqlite3_column_int */ { .data = "o" }, /* sqlite3_column_text */ { .data = x }, /* strdup */ { .rc = 4 }, /* _get_blob --> sqlite3_column_bytes */ { .data = "data" }, /* _get_blob --> sqlite3_column_blob */ { .data = (void *)t }, /* twistbin_new */ { .data = NULL }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_int, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(__wrap_strdup, &d[2]); will_return(__wrap_sqlite3_column_bytes, &d[3]); will_return(__wrap_sqlite3_column_blob, &d[4]); will_return(twistbin_new, &d[5]); will_return(__wrap_sqlite3_column_text, &d[6]); pobject_v3 pobj = { 0 }; int rc = init_pobject_v3_from_stmt(BAD_PTR, &pobj); assert_int_equal(rc, SQLITE_ERROR); } static void init_pobject_v3_from_stmt_strdup2_fail(void **state) { (void) state; char *x = __real_strdup("o"); assert_non_null(x); twist t = __real_twistbin_new("data", 4); assert_non_null(t); will_return_data d[] = { { .rc = 42 }, /* sqlite3_column_int */ { .data = "o" }, /* sqlite3_column_text */ { .data = x }, /* strdup */ { .rc = 4 }, /* _get_blob --> sqlite3_column_bytes */ { .data = "data" }, /* _get_blob --> sqlite3_column_blob */ { .data = (void *)t }, /* twistbin_new */ { .data = "foo:bar:baz" }, /* sqlite3_column_text */ { .data = NULL }, /* strdup */ }; will_return(__wrap_sqlite3_column_int, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(__wrap_strdup, &d[2]); will_return(__wrap_sqlite3_column_bytes, &d[3]); will_return(__wrap_sqlite3_column_blob, &d[4]); will_return(twistbin_new, &d[5]); will_return(__wrap_sqlite3_column_text, &d[6]); will_return(__wrap_strdup, &d[7]); pobject_v3 pobj = { 0 }; int rc = init_pobject_v3_from_stmt(BAD_PTR, &pobj); assert_int_equal(rc, SQLITE_ERROR); } static void init_tobjects_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); int rc = __real_init_tobjects((token *)0xDEADBEEF); assert_int_not_equal(rc, SQLITE_OK); } static void init_tobjects_sqlite3_bind_int(void **state) { UNUSED(state); token t = { .id = 42 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int , &d[1]); will_return(__wrap_sqlite3_finalize, &d[2]); int rc = __real_init_tobjects(&t); assert_int_not_equal(rc, SQLITE_OK); } static void init_tobjects_db_tobject_new_fail(void **state) { UNUSED(state); token t = { .id = 42 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .data = NULL }, /* db_tobject_new */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_step, &d[2]); will_return(db_tobject_new, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); int rc = __real_init_tobjects(&t); assert_int_not_equal(rc, SQLITE_OK); } static void init_tobjects_token_add_tobject_last_fail(void **state) { token t = { .id = 42 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .data = *state }, /* db_tobject_new call real */ { .rv = CKR_HOST_MEMORY }, /* token_add_tobject_last */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_step, &d[2]); will_return(db_tobject_new, &d[3]); will_return(token_add_tobject_last, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); int rc = __real_init_tobjects(&t); assert_int_not_equal(rc, SQLITE_OK); } static void test_convert_pobject_v3_to_v4_emit_pobject_to_conf_string_fail(void **state) { UNUSED(state); pobject_v4 new_pobj = { 0 }; pobject_v3 old_pobj = { .id = 42, .hierarchy = "o", .objauth = "foobarauth" }; will_return_data d[] = { { .data = NULL }, /* emit_pobject_to_conf_string */ }; will_return(emit_pobject_to_conf_string, &d[0]); CK_RV rv = convert_pobject_v3_to_v4(&old_pobj, &new_pobj); assert_int_equal(rv, CKR_HOST_MEMORY); } static void test_db_add_pobject_v4_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR } /* sqlite3_finalize (error for warning) */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_finalize, &d[1]); pobject_v4 new_pobj = { .id = 1234, .config = "YAML CONFIG YEAH", .hierarchy = "o", .objauth = "foobarauth" }; CK_RV rv = db_add_pobject_v4((sqlite3 *)0xDEADBEEF, &new_pobj); assert_int_not_equal(rv, CKR_OK); } static void test_db_add_pobject_v4_sqlite3_step_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_step, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); pobject_v4 new_pobj = { .id = 1234, .config = "YAML CONFIG YEAH", .hierarchy = "o", .objauth = "foobarauth" }; CK_RV rv = db_add_pobject_v4((sqlite3 *)0xDEADBEEF, &new_pobj); assert_int_not_equal(rv, CKR_OK); } static void test_init_pobject_from_stmt_parse_pobject_config_from_string_fail(void **state) { UNUSED(state); pobject pobj = {0}; const char *yaml_config = "really bad yaml"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_not_transient_no_blob_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"transient\"\n" " : !!bool \"false\",\n" "}\n"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_tpm_deserialize_handle_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"esys-tr\"\n" " : !!str \"810000000022000b7ddf69cda75fe70a5114890cb571af4b67667887b51640de9833d0ad7ae1fe9400000001011a0001000b00030072000000060080004300100800000000000100bbfeca8f754e03dce6bee3b5ba7536c0c7241cb84ae1401b9573ca88ea2c2caeaa7a462b9e8578719a7b8e5cd72f8790e2745833d87f89586fe3fc3ff09edc154519361a1a6676247b423ee6d39419ede7946ee3778b75c558464cbd1305382ec7fb2674986ad924ee5198dfcd32d29b0b9161ed9c7dc9bf935d10562870b7a192d40b2c1b4b255df08fb9ce6489ce9ca11ba85fedf09107316aa18442b2eeb6249cb495ed6b9de9421ebbb1313f2616b60045351253be475ddb712dc1f593e98950b52c90ddad7590556564f3725eccebeb0b0f409c83e81d6e8163054312d01f5551f53ebecbef6b5a58bce6df206837b5af27ae6c3983fecd5a003f115159\",\n" " ? !!str \"transient\"\n" " : !!bool \"false\",\n" "}"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ { .rcb = false }, /* tpm_deserialize_handle */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(tpm_deserialize_handle, &d[2]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_tpm_create_transient_primary_from_template_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"template-name\"\n" " : !!str \"tpm2-tools-default\",\n" " ? !!str \"transient\"\n" " : !!bool \"true\",\n" "}\n"; will_return_data d[] = { { .call_real = true }, /* strdup */ { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ { .data = "fakeauth" }, /* sqlite3_column_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .rv = CKR_GENERAL_ERROR }, /* tpm_create_transient_primary_from_template */ }; will_return_always(__wrap_strdup, &d[0]); will_return(__wrap_sqlite3_column_bytes, &d[1]); will_return(__wrap_sqlite3_column_text, &d[2]); will_return(__wrap_sqlite3_column_text, &d[3]); will_return(__wrap_sqlite3_step, &d[4]); will_return(tpm_create_transient_primary_from_template, &d[5]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_missing_template_name_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"transient\"\n" " : !!bool \"true\",\n" "}"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_twist_new_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"esys-tr\"\n" " : !!str \"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\",\n" " ? !!str \"transient\"\n" " : !!bool \"false\",\n" "}"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ { .rcb = true }, /* tpm_deserialize_handle */ { .data = NULL }, /* sqlite3_column_text */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(tpm_deserialize_handle, &d[2]); will_return(__wrap_sqlite3_column_text, &d[3]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_from_stmt_sqlite_step_fail(void **state) { UNUSED(state); pobject pobj = {0}; /* * convert text to C string easily: * - https://tomeko.net/online_tools/cpp_text_escape.php?lang=en */ const char *yaml_config = "---\n" "!!map {\n" " ? !!str \"esys-tr\"\n" " : !!str \"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\",\n" " ? !!str \"transient\"\n" " : !!bool \"false\",\n" "}"; will_return_data d[] = { { .rc = strlen(yaml_config) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_config }, /* sqlite3_column_text */ { .rcb = true }, /* tpm_deserialize_handle */ { .data = "fake auth data" }, /* sqlite3_column_text */ { .rc = SQLITE_ERROR } /* sqlite3_step */ }; will_return(__wrap_sqlite3_column_bytes, &d[0]); will_return(__wrap_sqlite3_column_text, &d[1]); will_return(tpm_deserialize_handle, &d[2]); will_return(__wrap_sqlite3_column_text, &d[3]); will_return(__wrap_sqlite3_step, &d[4]); int rc = init_pobject_from_stmt((sqlite3_stmt *)0xBADDCAFE, (tpm_ctx *)0xBADCC0DE, &pobj); pobject_free(&pobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_sqlite_prepare_v2_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); int rc = __real_init_pobject(1, NULL, NULL); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_sqlite_bind_int_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_finalize, &d[2]); int rc = __real_init_pobject(1, NULL, NULL); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_pobject_sqlite_step_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_step, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); int rc = __real_init_pobject(1, NULL, NULL); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_sealobjects_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); sealobject sobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); int rc = __real_init_sealobjects(42, &sobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_sealobjects_sqlite3_bind_int_fail(void **state) { UNUSED(state); sealobject sobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_finalize, &d[2]); int rc = __real_init_sealobjects(42, &sobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_sealobjects_sqlite3_step_fail(void **state) { UNUSED(state); sealobject sobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_step, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); int rc = __real_init_sealobjects(42, &sobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_init_sealobjects_bad_col_name_fail(void **state) { UNUSED(state); sealobject sobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "bad col name" }, /* sqlite3_column_name */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_bind_int, &d[1]); will_return(__wrap_sqlite3_step, &d[2]); will_return(__wrap_sqlite3_data_count, &d[3]); will_return(__wrap_sqlite3_column_name, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); int rc = __real_init_sealobjects(42, &sobj); assert_int_not_equal(rc, SQLITE_OK); } static void test_db_get_tokens_sqlite3_prepare_v2_fail(void **state) { size_t len = 42; token *tok = (token *)*state; will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_token_overcount_fail(void **state) { size_t len = 42; token *tok = (token *)*state; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_data_count (no per token data)*/ { .rv = CKR_OK }, /* token_min_init */ { .rc = SQLITE_OK }, /* init_pobject */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return_always(__wrap_sqlite3_prepare_v2, &d[0]); will_return_always(__wrap_sqlite3_step, &d[1]); will_return_always(__wrap_sqlite3_data_count, &d[2]); will_return_always(token_min_init, &d[3]); will_return_always(init_pobject, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_init_seal_objects_fail(void **state) { size_t len = 42; token *tok = (token *)*state; token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_data_count (no per token data)*/ { .rv = CKR_OK, .t = t }, /* token_min_init */ { .rc = SQLITE_OK }, /* init_pobject */ { .rc = SQLITE_ERROR }, /* init_sealobjects */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(token_min_init, &d[3]); will_return(init_pobject, &d[4]); will_return(init_sealobjects, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_token_min_init_fail(void **state) { size_t len = 42; token *tok = (token *)*state; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_data_count (no per token data)*/ { .rv = CKR_GENERAL_ERROR }, /* token_min_init */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(token_min_init, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_init_pobjects_fail(void **state) { size_t len = 42; token *tok = (token *)*state; token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_data_count (no per token data)*/ { .rv = CKR_OK, .t = t }, /* token_min_init */ { .rc = SQLITE_ERROR }, /* init_pobject */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(token_min_init, &d[3]); will_return(init_pobject, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_init_tobjects_fail(void **state) { size_t len = 42; token *tok = (token *)*state; token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_data_count (no per token data)*/ { .rv = CKR_OK, .t = t }, /* token_min_init */ { .rc = SQLITE_OK }, /* init_pobject */ { .rc = SQLITE_OK }, /* init_sealobjects */ { .rc = SQLITE_ERROR }, /* init_tobjects */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(token_min_init, &d[3]); will_return(init_pobject, &d[4]); will_return(init_sealobjects, &d[5]); will_return(init_tobjects, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_config_fail(void **state) { size_t len = 42; token *tok = (token *)*state; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .data = "config" }, /* sqlite3_column_name*/ { .rc = 1 }, /* sqlite3_data_count */ { .rc = 0 }, /* sqlite3_column_bytes */ { .data = NULL }, /* sqlite3_column_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_column_name, &d[2]); will_return(__wrap_sqlite3_data_count, &d[3]); will_return(__wrap_sqlite3_column_bytes, &d[4]); will_return(__wrap_sqlite3_column_text, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_parse_token_config_from_string_fail(void **state) { size_t len = 42; token *tok = (token *)*state; const char *yaml_data = "bad yaml"; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "config" }, /* sqlite3_column_name*/ { .rc = strlen(yaml_data) }, /* sqlite3_column_bytes */ { .data = (void *)yaml_data }, /* sqlite3_column_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); will_return(__wrap_sqlite3_column_bytes, &d[4]); will_return(__wrap_sqlite3_column_text, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); assert_int_equal(len, 0); } static void test_db_get_tokens_parse_token_unknown_key_fail(void **state) { size_t len = 42; token *tok = (token *)*state; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ROW }, /* sqlite3_step */ { .rc = 1 }, /* sqlite3_data_count */ { .data = "unknown" }, /* sqlite3_column_name*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_step, &d[1]); will_return(__wrap_sqlite3_data_count, &d[2]); will_return(__wrap_sqlite3_column_name, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); CK_RV rv = db_get_tokens(tok, &len); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); CK_RV rv = db_update_for_pinchange( NULL, true, NULL, (twist)0xDEADBEEF, (twist)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_start_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_finalize, &d[2]); CK_RV rv = db_update_for_pinchange( NULL, true, NULL, (twist)0xDEADBEEF, (twist)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_bind_text_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); will_return(__wrap_sqlite3_exec, &d[4]); CK_RV rv = db_update_for_pinchange( NULL, true, NULL, (twist)0xDEADBEEF, (twist)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_bind_private_blob_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_blob */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); will_return(__wrap_sqlite3_exec, &d[5]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( NULL, true, NULL, twist_data, twist_data); twist_free(twist_data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_bind_public_blob_fail(void **state) { UNUSED(state); will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 1 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_blob 2 */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_bind_blob, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); will_return(__wrap_sqlite3_exec, &d[6]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( NULL, true, NULL, twist_data, twist_data); twist_free(twist_data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_bind_int_fail(void **state) { UNUSED(state); token t = { .id = 76 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 1 */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_bind_blob, &d[4]); will_return(__wrap_sqlite3_bind_int, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); will_return(__wrap_sqlite3_exec, &d[7]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( &t, true, NULL, twist_data, twist_data); twist_free(twist_data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_step_fail(void **state) { UNUSED(state); token t = { .id = 76 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 1 */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_bind_blob, &d[4]); will_return(__wrap_sqlite3_bind_int, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( &t, true, NULL, twist_data, twist_data); twist_free(twist_data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_for_pinchange_sqlite3_finalize_fail(void **state) { UNUSED(state); token t = { .id = 76 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 1 */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .rc = SQLITE_ERROR }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_bind_blob, &d[4]); will_return(__wrap_sqlite3_bind_int, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( &t, true, NULL, twist_data, twist_data); twist_free(twist_data); /* Finalize is just a warning */ assert_int_equal(rv, CKR_OK); } static void test_db_update_for_pinchange_commit_fail(void **state) { UNUSED(state); token t = { .id = 76 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_exec (BEGIN TRANSACTION)*/ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 1 */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob 2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_ERROR }, /* sqlite3_exec (ROLLBACK)*/ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_blob, &d[3]); will_return(__wrap_sqlite3_bind_blob, &d[4]); will_return(__wrap_sqlite3_bind_int, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); twist twist_data = twist_new("pubdata"); assert_non_null(twist_data); CK_RV rv = db_update_for_pinchange( &t, true, NULL, twist_data, twist_data); twist_free(twist_data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_new_object_emit_attributes_to_string_fail(void **state) { UNUSED(state); token t = { .id = 76 }; tobject tobj = { 0 }; will_return_data d[] = { { .data = NULL }, /* emit_attributes_to_string */ }; will_return(emit_attributes_to_string, &d[0]); CK_RV rv = db_add_new_object(&t, &tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_new_object_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); token t = { .id = 76 }; tobject tobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("attrs in yaml") }, /* emit_attributes_to_string */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); CK_RV rv = db_add_new_object(&t, &tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_new_object_sqlite_step_fail(void **state) { UNUSED(state); token t = { .id = 76 }; tobject tobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("attrs in yaml") }, /* emit_attributes_to_string */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_prepare_v2, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_step, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); will_return(__wrap_sqlite3_exec, &d[7]); CK_RV rv = db_add_new_object(&t, &tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_new_object_sqlite3_last_insert_rowid_fail(void **state) { UNUSED(state); token t = { .id = 76 }; tobject tobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("attrs in yaml") }, /* emit_attributes_to_string */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 0 }, /* sqlite3_last_insert_rowid */ { .rc = SQLITE_ERROR }, /* sqlite3_finalize (force warning) */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_prepare_v2, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_step, &d[5]); will_return(__wrap_sqlite3_last_insert_rowid, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); CK_RV rv = db_add_new_object(&t, &tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_delete_object_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); tobject tobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); CK_RV rv = db_delete_object(&tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_delete_object_sqlite3_bind_int_fail(void **state) { UNUSED(state); tobject tobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_int, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); will_return(__wrap_sqlite3_exec, &d[4]); CK_RV rv = db_delete_object(&tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_delete_object_sqlite3_step_fail(void **state) { UNUSED(state); tobject tobj = { 0 }; will_return_data d[] = { { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_ERROR }, /* sqlite3_finalize (force warning) */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; will_return(__wrap_sqlite3_prepare_v2, &d[0]); will_return(__wrap_sqlite3_exec, &d[1]); will_return(__wrap_sqlite3_bind_int, &d[2]); will_return(__wrap_sqlite3_step, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); will_return(__wrap_sqlite3_exec, &d[5]); CK_RV rv = db_delete_object(&tobj); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_emit_pobject_to_conf_string_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = NULL }, /* emit_pobject_to_conf_string */ }; will_return(emit_pobject_to_conf_string, &d[0]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_bind_text_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_finalize (force warning) */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); will_return(__wrap_sqlite3_exec, &d[5]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_bind_text_2_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; assert_non_null(d[0].data); will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); will_return(__wrap_sqlite3_exec, &d[6]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_bind_text_3_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; assert_non_null(d[0].data); will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); will_return(__wrap_sqlite3_exec, &d[7]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_step_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ }; assert_non_null(d[0].data); will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_db_add_primary_sqlite3_last_insert_rowid_fail(void **state) { UNUSED(state); unsigned pid = 0; pobject pobj = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_pobject_to_conf_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite_exec (BEGIN TRANSACTION) */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 0 }, /* sqlite3_last_insert_rowid */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite_exec (ROLLBACK) */ }; assert_non_null(d[0].data); will_return(emit_pobject_to_conf_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_text, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_exec, &d[9]); CK_RV rv = db_add_primary(&pobj, &pid); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_token_config_emit_config_to_string_fail(void **state) { UNUSED(state); token tok = { 0 }; will_return_data d[] = { { .data = NULL }, /* emit_config_to_string */ }; will_return(emit_config_to_string, &d[0]); CK_RV rv = db_update_token_config(&tok); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_token_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); token tok = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); CK_RV rv = db_update_token_config(&tok); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_token_sqlite3_bind_text_fail(void **state) { UNUSED(state); token tok = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); CK_RV rv = db_update_token_config(&tok); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_token_sqlite3_bind_int_fail(void **state) { UNUSED(state); token tok = { 0 }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); CK_RV rv = db_update_token_config(&tok); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_tobject_attrs_emit_attributes_to_string_fail(void **state) { UNUSED(state); will_return_data d[] = { { .data = NULL }, /* emit_attributes_to_string */ }; will_return(emit_attributes_to_string, &d[0]); CK_RV rv = db_update_tobject_attrs(42, (attr_list *)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_tobject_attrs_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_attributes_to_string */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); CK_RV rv = db_update_tobject_attrs(42, (attr_list *)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_tobject_attrs_sqlite3_bind_text_fail(void **state) { UNUSED(state); will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_attributes_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); CK_RV rv = db_update_tobject_attrs(42, (attr_list *)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_tobject_attrs_sqlite3_bind_int_fail(void **state) { UNUSED(state); will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_attributes_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_finalize, &d[4]); CK_RV rv = db_update_tobject_attrs(42, (attr_list *)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_update_tobject_attrs_sqlite3_step_fail(void **state) { UNUSED(state); will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_attributes_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_attributes_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_bind_text, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_step, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); CK_RV rv = db_update_tobject_attrs(42, (attr_list *)0xDEADBEEF); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_emit_config_to_string_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = NULL }, /* emit_config_to_string */ }; will_return(emit_config_to_string, &d[0]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_prepare_v2_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_exec_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_finalize, &d[3]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_int_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_exec, &d[4]); will_return(__wrap_sqlite3_finalize, &d[5]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_text_1_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_exec, &d[5]); will_return(__wrap_sqlite3_finalize, &d[6]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_text_2_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_exec, &d[6]); will_return(__wrap_sqlite3_finalize, &d[7]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_step_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_exec, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_last_insert_rowid_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .rc = 0 }, /* sqlite3_last_insert_rowid (zero is bad) */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_exec, &d[8]); will_return(__wrap_sqlite3_finalize, &d[9]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_finalize_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_ERROR }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_exec, &d[9]); will_return(__wrap_sqlite3_finalize, &d[10]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_prepare_v2_2_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_ERROR }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_exec, &d[10]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_int_2_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_bind_int, &d[10]); will_return(__wrap_sqlite3_exec, &d[11]); will_return(__wrap_sqlite3_finalize, &d[12]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_text_3_fail(void **state) { UNUSED(state); token t = { .config = { .is_initialized = true } }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_bind_int, &d[10]); will_return(__wrap_sqlite3_bind_text, &d[11]); will_return(__wrap_sqlite3_exec, &d[12]); will_return(__wrap_sqlite3_finalize, &d[13]); CK_RV rv = db_add_token(&t); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_blob_1_fail(void **state) { UNUSED(state); twist data = twist_new("twist data"); assert_non_null(data); token t = { .config = { .is_initialized = true }, .esysdb = { .sealobject = { .sopriv = data, .sopub = data }, }, }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_blob */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_bind_int, &d[10]); will_return(__wrap_sqlite3_bind_text, &d[11]); will_return(__wrap_sqlite3_bind_blob, &d[12]); will_return(__wrap_sqlite3_exec, &d[13]); will_return(__wrap_sqlite3_finalize, &d[14]); CK_RV rv = db_add_token(&t); twist_free(data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_bind_blob_2_fail(void **state) { UNUSED(state); twist data = twist_new("twist data"); assert_non_null(data); token t = { .config = { .is_initialized = true }, .esysdb = { .sealobject = { .sopriv = data, .sopub = data }, }, }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob */ { .rc = SQLITE_ERROR }, /* sqlite3_bind_blob */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_bind_int, &d[10]); will_return(__wrap_sqlite3_bind_text, &d[11]); will_return(__wrap_sqlite3_bind_blob, &d[12]); will_return(__wrap_sqlite3_bind_blob, &d[13]); will_return(__wrap_sqlite3_exec, &d[14]); will_return(__wrap_sqlite3_finalize, &d[15]); CK_RV rv = db_add_token(&t); twist_free(data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_add_token_sqlite3_step_2_fail(void **state) { UNUSED(state); twist data = twist_new("twist data"); assert_non_null(data); token t = { .config = { .is_initialized = true }, .esysdb = { .sealobject = { .sopriv = data, .sopub = data }, }, }; will_return_data d[] = { { .data = __real_strdup("foobar") }, /* emit_config_to_string */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* TRANSACTION_START */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_DONE }, /* sqlite3_step */ { .u64 = 42 }, /* sqlite3_last_insert_rowid*/ { .rc = SQLITE_OK }, /* sqlite3_finalize */ { .rc = SQLITE_OK }, /* sqlite3_prepare_v2 */ { .rc = SQLITE_OK }, /* sqlite3_bind_int */ { .rc = SQLITE_OK }, /* sqlite3_bind_text */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob */ { .rc = SQLITE_OK }, /* sqlite3_bind_blob */ { .rc = SQLITE_ERROR }, /* sqlite3_step */ { .rc = SQLITE_OK }, /* TRANSACTION_END */ { .rc = SQLITE_OK }, /* sqlite3_finalize */ }; assert_non_null(d[0].data); will_return(emit_config_to_string, &d[0]); will_return(__wrap_sqlite3_prepare_v2, &d[1]); will_return(__wrap_sqlite3_exec, &d[2]); will_return(__wrap_sqlite3_bind_int, &d[3]); will_return(__wrap_sqlite3_bind_text, &d[4]); will_return(__wrap_sqlite3_bind_text, &d[5]); will_return(__wrap_sqlite3_step, &d[6]); will_return(__wrap_sqlite3_last_insert_rowid, &d[7]); will_return(__wrap_sqlite3_finalize, &d[8]); will_return(__wrap_sqlite3_prepare_v2, &d[9]); will_return(__wrap_sqlite3_bind_int, &d[10]); will_return(__wrap_sqlite3_bind_text, &d[11]); will_return(__wrap_sqlite3_bind_blob, &d[12]); will_return(__wrap_sqlite3_bind_blob, &d[13]); will_return(__wrap_sqlite3_step, &d[14]); will_return(__wrap_sqlite3_exec, &d[15]); will_return(__wrap_sqlite3_finalize, &d[16]); CK_RV rv = db_add_token(&t); twist_free(data); assert_int_equal(rv, CKR_GENERAL_ERROR); } static void test_db_get_lock_path(void **state) { UNUSED(state); const char *db_path = "/etc/tpm2_pkcs11/tpm2_pkcs11.sqlite3"; char lock_path[PATH_MAX]; memset(lock_path, 0, sizeof lock_path); unsetenv("PKCS11_SQL_LOCK"); assert_int_equal(get_lock_path(db_path, lock_path), SQLITE_OK); assert_string_equal(lock_path, "/etc/tpm2_pkcs11/tpm2_pkcs11.sqlite3.lock"); memset(lock_path, 0, sizeof lock_path); setenv("PKCS11_SQL_LOCK", "", 1); assert_int_equal(get_lock_path(db_path, lock_path), SQLITE_OK); assert_string_equal(lock_path, "/etc/tpm2_pkcs11/tpm2_pkcs11.sqlite3.lock"); memset(lock_path, 0, sizeof lock_path); setenv("PKCS11_SQL_LOCK", "/tmp", 1); assert_int_equal(get_lock_path(db_path, lock_path), SQLITE_OK); assert_string_equal(lock_path, "/tmp/_etc_tpm2_pkcs11_tpm2_pkcs11.sqlite3.lock"); memset(lock_path, 0, sizeof lock_path); setenv("PKCS11_SQL_LOCK", "/tmp/", 1); assert_int_equal(get_lock_path(db_path, lock_path), SQLITE_OK); assert_string_equal(lock_path, "/tmp/_etc_tpm2_pkcs11_tpm2_pkcs11.sqlite3.lock"); char long_path[PATH_MAX]; memset(long_path, 'l', sizeof long_path); long_path[PATH_MAX - 1] = '\0'; memset(lock_path, 0, sizeof lock_path); setenv("PKCS11_SQL_LOCK", long_path, 1); assert_int_equal(get_lock_path(db_path, lock_path), SQLITE_ERROR); memset(lock_path, 0, sizeof lock_path); unsetenv("PKCS11_SQL_LOCK"); assert_int_equal(get_lock_path(long_path, lock_path), SQLITE_ERROR); unsetenv("PKCS11_SQL_LOCK"); } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_db_get_blob_col_bytes_0), cmocka_unit_test(test_db_get_blob_null_col_bytes_0), cmocka_unit_test(test_db_get_blob_alloc_fail), cmocka_unit_test(db_tobject_new_tobject_alloc_fail), cmocka_unit_test_setup( db_tobject_new_tobject_sqlite3_column_unknown_fail, tobject_setup), cmocka_unit_test_setup( db_tobject_new_tobject_sqlite3_column_text_fail, tobject_setup), cmocka_unit_test_setup( db_tobject_new_tobject_sqlite3_attrs_text_fail, tobject_setup), cmocka_unit_test_setup( db_tobject_new_tobject_object_init_from_attrs_fail, tobject_setup), cmocka_unit_test(init_tobjects_db_tobject_new_fail), cmocka_unit_test(init_pobject_v3_from_stmt_sqlite3_column_text_fail), cmocka_unit_test(init_pobject_v3_from_stmt_strdup_fail), cmocka_unit_test(init_pobject_v3_from_stmt__get_blob_fail), cmocka_unit_test(init_pobject_v3_from_stmt_sqlite3_column_text2_fail), cmocka_unit_test(init_pobject_v3_from_stmt_strdup2_fail), cmocka_unit_test(init_tobjects_sqlite3_prepare_v2_fail), cmocka_unit_test(init_tobjects_sqlite3_bind_int), cmocka_unit_test_setup(init_tobjects_token_add_tobject_last_fail, tobject_setup), cmocka_unit_test(test_convert_pobject_v3_to_v4_emit_pobject_to_conf_string_fail), cmocka_unit_test(test_db_add_pobject_v4_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_add_pobject_v4_sqlite3_step_fail), cmocka_unit_test(test_init_pobject_from_stmt_parse_pobject_config_from_string_fail), cmocka_unit_test(test_init_pobject_from_stmt_not_transient_no_blob_fail), cmocka_unit_test(test_init_pobject_from_stmt_tpm_deserialize_handle_fail), cmocka_unit_test(test_init_pobject_from_stmt_tpm_create_transient_primary_from_template_fail), cmocka_unit_test(test_init_pobject_from_stmt_missing_template_name_fail), cmocka_unit_test(test_init_pobject_from_stmt_twist_new_fail), cmocka_unit_test(test_init_pobject_from_stmt_sqlite_step_fail), cmocka_unit_test(test_init_pobject_sqlite_prepare_v2_fail), cmocka_unit_test(test_init_pobject_sqlite_bind_int_fail), cmocka_unit_test(test_init_pobject_sqlite_step_fail), cmocka_unit_test(test_init_sealobjects_sqlite3_prepare_v2_fail), cmocka_unit_test(test_init_sealobjects_sqlite3_bind_int_fail), cmocka_unit_test(test_init_sealobjects_sqlite3_step_fail), cmocka_unit_test(test_init_sealobjects_bad_col_name_fail), cmocka_unit_test_setup(test_db_get_tokens_sqlite3_prepare_v2_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_token_overcount_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_token_min_init_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_init_pobjects_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_init_seal_objects_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_init_tobjects_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_config_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_parse_token_config_from_string_fail, test_db_get_tokens_setup), cmocka_unit_test_setup(test_db_get_tokens_parse_token_unknown_key_fail, test_db_get_tokens_setup), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_update_for_pinchange_start_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_bind_text_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_bind_private_blob_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_bind_public_blob_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_bind_int_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_step_fail), cmocka_unit_test(test_db_update_for_pinchange_sqlite3_finalize_fail), cmocka_unit_test(test_db_update_for_pinchange_commit_fail), cmocka_unit_test(test_db_add_new_object_emit_attributes_to_string_fail), cmocka_unit_test(test_db_add_new_object_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_add_new_object_sqlite_step_fail), cmocka_unit_test(test_db_add_new_object_sqlite3_last_insert_rowid_fail), cmocka_unit_test(test_db_delete_object_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_delete_object_sqlite3_bind_int_fail), cmocka_unit_test(test_db_delete_object_sqlite3_step_fail), cmocka_unit_test(test_db_db_add_primary_emit_pobject_to_conf_string_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_bind_text_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_bind_text_2_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_bind_text_3_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_step_fail), cmocka_unit_test(test_db_db_add_primary_sqlite3_last_insert_rowid_fail), cmocka_unit_test(test_db_update_token_config_emit_config_to_string_fail), cmocka_unit_test(test_db_update_token_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_update_token_sqlite3_bind_text_fail), cmocka_unit_test(test_db_update_token_sqlite3_bind_int_fail), cmocka_unit_test(test_db_update_tobject_attrs_emit_attributes_to_string_fail), cmocka_unit_test(test_db_update_tobject_attrs_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_update_tobject_attrs_sqlite3_bind_text_fail), cmocka_unit_test(test_db_update_tobject_attrs_sqlite3_bind_int_fail), cmocka_unit_test(test_db_update_tobject_attrs_sqlite3_step_fail), cmocka_unit_test(test_db_add_token_emit_config_to_string_fail), cmocka_unit_test(test_db_add_token_sqlite3_prepare_v2_fail), cmocka_unit_test(test_db_add_token_sqlite3_exec_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_int_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_text_1_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_text_2_fail), cmocka_unit_test(test_db_add_token_sqlite3_step_fail), cmocka_unit_test(test_db_add_token_sqlite3_last_insert_rowid_fail), cmocka_unit_test(test_db_add_token_sqlite3_finalize_fail), cmocka_unit_test(test_db_add_token_sqlite3_prepare_v2_2_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_int_2_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_text_3_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_blob_1_fail), cmocka_unit_test(test_db_add_token_sqlite3_bind_blob_2_fail), cmocka_unit_test(test_db_add_token_sqlite3_step_2_fail), cmocka_unit_test(test_db_get_lock_path), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.9.1/test/unit/test_log.c0000644000175100017510000000144014535673717013132 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include "log.h" #include "utils.h" void test_log_levels(void **state) { (void) state; char *levels[] = {"abc", "-1", "0", "1", "2", "3", "4"}; for (int i = 0; i < 7; i++) { setenv("TPM2_PKCS11_LOG_LEVEL", levels[i], 1); LOGV("Test %i", i); LOGW("Test %i", i); LOGE("Test %i", i); } } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_log_levels), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.9.1/test/unit/test_parser.c0000644000175100017510000003556414535673717013663 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include "attrs.h" #include "parser.h" /* yaml file processed with xxd -i */ static const unsigned char _attrs_yaml[] = { 0x2d, 0x2d, 0x2d, 0x0a, 0x21, 0x21, 0x6d, 0x61, 0x70, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x36, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x37, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x33, 0x39, 0x33, 0x31, 0x33, 0x32, 0x33, 0x37, 0x33, 0x32, 0x36, 0x35, 0x33, 0x33, 0x33, 0x39, 0x33, 0x35, 0x33, 0x39, 0x33, 0x39, 0x36, 0x32, 0x36, 0x36, 0x33, 0x39, 0x36, 0x35, 0x33, 0x33, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x31, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x35, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x37, 0x32, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x37, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x39, 0x37, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x35, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x36, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x37, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x31, 0x36, 0x30, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x35, 0x31, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x35, 0x32, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x30, 0x37, 0x33, 0x37, 0x34, 0x32, 0x33, 0x35, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x30, 0x37, 0x33, 0x37, 0x34, 0x33, 0x33, 0x36, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x65, 0x71, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x31, 0x36, 0x31, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x31, 0x36, 0x32, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x31, 0x36, 0x33, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x7d, 0x0a }; static const unsigned int _attrs_yaml_len = 774; static void test_attr_parser_good(void **state) { (void) state; attr_list *attrs = NULL; bool res = parse_attributes_from_string(_attrs_yaml, _attrs_yaml_len, &attrs); assert_true(res); assert_non_null(attrs); assert_int_equal(attr_list_get_count(attrs), 20); attr_list_free(attrs); } static const unsigned char _config_yaml[] = { 0x21, 0x21, 0x6d, 0x61, 0x70, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x2d, 0x69, 0x6e, 0x69, 0x74, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x7d, 0x0a, 0x0a }; static const unsigned int _config_yaml_len = 53; static void test_config_parser_good(void **state) { (void) state; token_config config = { 0 }; bool res = parse_token_config_from_string(_config_yaml, _config_yaml_len, &config); assert_true(res); assert_true(config.is_initialized); assert_null(config.tcti); } static const unsigned char _home_wcrobert_empty_seq_yaml[] = { 0x21, 0x21, 0x6d, 0x61, 0x70, 0x20, 0x7b, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x37, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x33, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x36, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x31, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x36, 0x35, 0x36, 0x36, 0x36, 0x35, 0x33, 0x30, 0x36, 0x32, 0x33, 0x32, 0x36, 0x36, 0x36, 0x31, 0x33, 0x30, 0x33, 0x30, 0x36, 0x31, 0x36, 0x31, 0x36, 0x31, 0x36, 0x32, 0x33, 0x39, 0x33, 0x33, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x35, 0x39, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x31, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x32, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x36, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x36, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x37, 0x32, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x32, 0x37, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x32, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x35, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x36, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x37, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x35, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x32, 0x32, 0x34, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x36, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x36, 0x39, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x33, 0x37, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x74, 0x72, 0x75, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x35, 0x31, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x35, 0x32, 0x38, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x62, 0x6f, 0x6f, 0x6c, 0x20, 0x22, 0x66, 0x61, 0x6c, 0x73, 0x65, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x30, 0x37, 0x33, 0x37, 0x34, 0x32, 0x33, 0x35, 0x33, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x65, 0x71, 0x20, 0x5b, 0x5d, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x30, 0x37, 0x33, 0x37, 0x34, 0x32, 0x33, 0x35, 0x34, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x74, 0x72, 0x20, 0x22, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x3f, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x31, 0x30, 0x37, 0x33, 0x37, 0x34, 0x33, 0x33, 0x36, 0x30, 0x22, 0x0a, 0x20, 0x20, 0x3a, 0x20, 0x21, 0x21, 0x73, 0x65, 0x71, 0x20, 0x5b, 0x0a, 0x20, 0x20, 0x20, 0x20, 0x21, 0x21, 0x69, 0x6e, 0x74, 0x20, 0x22, 0x34, 0x32, 0x32, 0x36, 0x22, 0x2c, 0x0a, 0x20, 0x20, 0x5d, 0x2c, 0x0a, 0x7d, 0x0a }; static const unsigned int _home_wcrobert_empty_seq_yaml_len = 1153; static void test_config_parser_empty_seq(void **state) { (void) state; attr_list *attrs = NULL; bool res = parse_attributes_from_string(_home_wcrobert_empty_seq_yaml, _home_wcrobert_empty_seq_yaml_len, &attrs); assert_true(res); assert_non_null(attrs); assert_int_equal(attr_list_get_count(attrs), 32); attr_list_free(attrs); } static void test_token_config_parser_no_tags(void **state) { (void) state; token_config conf = {0}; const char *yaml_config = "{\n" " pss-sigs-good: true\n" " token-init: true\n" "}"; bool res = parse_token_config_from_string((const unsigned char *)yaml_config, strlen(yaml_config), &conf); assert_false(res); } static void test_token_config_parser_missing_tags(void **state) { (void) state; token_config conf = {0}; const char *yaml_config = "---\n" "!!map {\n" "? !!str \"pss-sigs-good\"\n" ": !!bool \"true\",\n" "\"token-init\"\n" ": !!bool \"true\",\n" "}\n"; bool res = parse_token_config_from_string((const unsigned char *)yaml_config, strlen(yaml_config), &conf); assert_false(res); } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_config_parser_empty_seq), cmocka_unit_test(test_attr_parser_good), cmocka_unit_test(test_config_parser_good), cmocka_unit_test(test_token_config_parser_no_tags), cmocka_unit_test(test_token_config_parser_missing_tags), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.9.1/test/unit/test_twist.c0000644000175100017510000006777714535673717013554 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include "twist.h" #include "utils.h" extern void twist_next_alloc_fails(void); void test_twist_new(void **state) { (void) state; char *expected = "Hello World"; twist actual = twist_new(expected); assert_non_null(actual); assert_string_equal(expected, actual); assert_int_equal(strlen(expected), twist_len(actual)); twist_free(actual); } void test_twist_new_0_len(void **state) { (void) state; char *expected = ""; twist actual = twist_new(expected); assert_non_null(actual); assert_string_equal(expected, actual); assert_int_equal(strlen(expected), twist_len(actual)); assert_int_equal(actual[twist_len(actual)], '\0'); twist_free(actual); } void test_twist_new_bad_alloc(void **state) { (void) state; twist_next_alloc_fails(); twist actual = twist_new("I should be null"); assert_null(actual); } void test_twist_new_empty(void **state) { (void) state; char *expected = ""; twist actual = twist_new(expected); assert_non_null(actual); assert_string_equal(expected, actual); assert_int_equal(strlen(expected), twist_len(actual)); twist_free(actual); } void test_twist_new_null(void **state) { (void) state; twist actual = twist_new(NULL ); assert_null(actual); } void test_twist_calloc_zero(void **state) { UNUSED(state); assert_null(twist_calloc(0)); } void test_twist_calloc_many(void **state) { UNUSED(state); twist t = twist_calloc(42); assert_non_null(t); assert_int_equal(42, twist_len(t)); twist_free(t); } void test_twist_create(void **state) { (void) state; const char *expected = "onetwothreefourfive"; const char *data[] = { "one", "two", "three", "four", "five" }; twist actual = twist_create(data, ARRAY_LEN(data)); assert_non_null(actual); assert_string_equal(expected, (char * )actual); twist_free(actual); } void test_twist_create_null(void **state) { (void) state; twist actual = twist_create(NULL, 42); assert_null(actual); } void test_twist_create_embedded_null(void **state) { (void) state; const char *expected = "onetwothreefourfive"; const char *data[] = { NULL, "one", NULL, "two", "three", "four", NULL, "five", NULL }; twist actual = twist_create(data, ARRAY_LEN(data)); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twist_dup(void **state) { (void) state; twist actual = twist_new("Hello World"); assert_non_null(actual); twist expected = twist_dup(actual); assert_non_null(expected); assert_true(twist_eq(actual, expected)); twist_free(actual); twist_free(expected); } void test_twist_dup_empty(void **state) { (void) state; twist actual = twist_new(""); assert_non_null(actual); twist expected = twist_dup(actual); assert_non_null(expected); assert_true(twist_eq(actual, expected)); twist_free(actual); twist_free(expected); } void test_twist_dup_null(void **state) { (void) state; twist actual = twist_dup(NULL ); assert_null(actual); } void test_twist_end(void **state) { (void) state; twist x = twist_new("OMG Its a string!"); assert_non_null(x); char *end = twist_end(x); assert_non_null(x); assert_ptr_equal((void * )x + twist_len(x) - 1, (void * )end); assert_int_equal(*end, '!'); twist_free(x); } void test_twist_end_null(void **state) { (void) state; char *end = twist_end(NULL ); assert_null(end); } void test_twist_free_null(void **state) { UNUSED(state); twist_free(NULL); } void test_twist_concat(void **state) { (void) state; const char *expected = "Original String - Concatenated part"; twist original = twist_new("Original String"); assert_non_null(original); twist actual = twist_concat(original, " - Concatenated part"); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(original); twist_free(actual); } void test_twist_concat_empty(void **state) { (void) state; const char *expected = "Original String"; twist original = twist_new(expected); assert_non_null(original); twist actual = twist_concat(original, ""); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(original); twist_free(actual); } void test_twistbin_create(void **state) { (void) state; const char ex[] = { 0xAA, 0x00, 0xBB, 0xCC, 0x00, 0xDD, 0xDD, 0x00, 0xEE, 0xEE, 0x00, 0xFF }; const binarybuffer data[] = { { .data = ex, .size = 3 }, { .data = &ex[3], .size = 3 }, { .data = &ex[6], .size = 3 }, { .data = &ex[9], .size = 3 } }; twist expected = twistbin_new(ex, ARRAY_LEN(ex)); assert_non_null(expected); twist actual = twistbin_create(data, ARRAY_LEN(data)); assert_non_null(actual); assert_true(twist_eq(expected, actual)); twist_free(expected); twist_free(actual); } void test_twistbin_new_overflow_1(void **state) { (void) state; #pragma GCC diagnostic push #pragma GCC diagnostic ignored "-Wpragmas" #pragma GCC diagnostic ignored "-Wstringop-overflow" twist actual = twistbin_new((void *) 0xDEADBEEF, ~0); assert_null(actual); #pragma GCC diagnostic pop } void test_twistbin_new_overflow_2(void **state) { (void) state; #pragma GCC diagnostic push #pragma GCC diagnostic ignored "-Wpragmas" #pragma GCC diagnostic ignored "-Wstringop-overflow" twist actual = twistbin_new((void *) 0xDEADBEEF, ~0 - sizeof(void *)); assert_null(actual); #pragma GCC diagnostic pop } void test_twistbin_new_overflow_3(void **state) { (void) state; twist old = twist_new("hahahahahahahahahahahahaha"); assert_non_null(old); twist actual = twistbin_append(old, (void *) 0xDEADBEEF, ~0 - sizeof(void *) - 4); assert_null(actual); twist_free(old); } void test_twistbin_new_overflow_4(void **state) { (void) state; binarybuffer data[] = { { .data = (void *) 0xDEADBEEF, .size = ~0 }, { .data = (void *) 0xBADCC0DE, .size = 1 }, }; twist actual = twistbin_create(data, ARRAY_LEN(data)); assert_null(actual); } void test_twistbin_aappend(void **state) { (void) state; const char *expected = "No one likes youOMGtests are fun"; twist old = twist_new("No one likes you"); assert_non_null(old); binarybuffer data[] = { { .data = "OMG", .size = 3 }, { .data = "tests are fun", .size = 13 } }; twist actual = twistbin_aappend(old, data, ARRAY_LEN(data)); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twistbin_aappend_null_array(void **state) { (void) state; const char *expected = "OMGtests are fun"; binarybuffer data[] = { { .data = "OMG", .size = 3 }, { .data = NULL, .size = 0 }, { .data = "tests are fun", .size = 13 } }; twist actual = twistbin_aappend(NULL, data, ARRAY_LEN(data)); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twistbin_aappend_twist_null(void **state) { (void) state; twist expected = twist_new("foo"); twist actual = twistbin_aappend(expected, NULL, 42); assert_ptr_equal((void * )actual, (void * )expected); #pragma GCC diagnostic push #pragma GCC diagnostic ignored "-Wpragmas" #pragma GCC diagnostic ignored "-Wstringop-overflow" actual = twistbin_aappend(expected, (binarybuffer *) 0xDEADBEEF, 0); assert_ptr_equal((void * )actual, (void * )expected); #pragma GCC diagnostic pop twist_free(actual); } void test_twistbin_create_null(void **state) { (void) state; twist actual = twistbin_create(NULL, 010101); assert_null(actual); } void test_twistbin_create_embedded_null(void **state) { (void) state; const char ex[] = { 0xAA, 0x00, 0xBB, 0xDD, 0x00, 0xEE, 0xEE, 0x00, 0xFF }; const binarybuffer data[] = { { .data = ex, .size = 3 }, { .data = NULL, .size = 0 }, { .data = &ex[3], .size = 3 }, { .data = &ex[6], .size = 3 }, }; twist expected = twistbin_new(ex, ARRAY_LEN(ex)); assert_non_null(expected); twist actual = twistbin_create(data, ARRAY_LEN(data)); assert_non_null(actual); assert_true(twist_eq(expected, actual)); twist_free(expected); twist_free(actual); } void test_twistbin_concat(void **state) { (void) state; const char old_str[] = { 0xAA, 0xBB, 0x00, 0xCC }; const char new_str[] = { 0x11, 0x00, 0x22, 0x33 }; const char expected[] = { 0xAA, 0xBB, 0x00, 0xCC, 0x11, 0x00, 0x22, 0x33 }; twist original = twistbin_new(old_str, ARRAY_LEN(old_str)); assert_non_null(original); twist actual = twistbin_concat(original, new_str, ARRAY_LEN(new_str)); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); twist_free(original); twist_free(actual); } void test_twistbin_concat_twist_null(void **state) { (void) state; const char expected[] = { 0xAA, 0xBB, 0x00, 0xCC }; twist original = twistbin_new(expected, ARRAY_LEN(expected)); assert_non_null(original); twist actual = twistbin_concat(original, NULL, 0); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); twist_free(original); twist_free(actual); } void test_twistbin_concat_null_data(void **state) { (void) state; const char expected[] = { 0xAA, 0xBB, 0x00, 0xCC }; twist actual = twistbin_concat(NULL, expected, ARRAY_LEN(expected)); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); twist_free(actual); } void test_twist_concat_twist_null(void **state) { (void) state; twist expected = twist_new("Original String"); assert_non_null(expected); twist actual = twist_concat(expected, NULL ); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); twist_free(expected); } void test_twist_concat_null_null(void **state) { (void) state; assert_null(twist_concat(NULL, NULL)); } void test_twist_concat_empty_null(void **state) { (void) state; twist expected = twist_new(""); assert_non_null(expected); twist actual = twist_concat(expected, NULL ); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); twist_free(expected); } void test_twist_concat_null_empty(void **state) { (void) state; const char *expected = ""; twist actual = twist_concat(NULL, expected); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twist_concat_twist(void **state) { (void) state; const char *expected = "Original String - Concatenated part"; twist original = twist_new("Original String"); assert_non_null(original); twist part_to_add = twist_new(" - Concatenated part"); twist actual = twist_concat_twist(original, part_to_add); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); twist_free(original); twist_free(part_to_add); } void test_twist_concat_twist_null_null(void **state) { (void) state; assert_null(twist_concat_twist(NULL, NULL)); } void test_twist_concat_twist_twist_null(void **state) { (void) state; const char *expected = "Original String"; twist original = twist_new("Original String"); assert_non_null(original); twist actual = twist_concat_twist(original, NULL ); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); twist_free(original); } void test_twist_concat_twist_null_twist(void **state) { (void) state; const char *expected = " - Concatenated part"; twist part_to_add = twist_new(expected); assert_non_null(part_to_add); twist actual = twist_concat_twist(NULL, part_to_add); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); twist_free(part_to_add); } void test_twist_eq_equality(void **state) { (void) state; const char *expected = "im equal"; twist actual1 = twist_new(expected); assert_non_null(actual1); twist actual2 = twist_new(expected); assert_non_null(actual2); assert_string_equal(expected, actual1); assert_string_equal(expected, actual2); assert_true(twist_eq(actual1, actual2)); twist_free(actual1); twist_free(actual2); } void test_twist_eq_equality_null_null(void **state) { (void) state; assert_true(twist_eq(NULL, NULL)); } void test_twist_eq_equality_twist_null(void **state) { (void) state; twist x = twist_new("A twist string"); assert_non_null(x); assert_false(twist_eq(x, NULL)); twist_free(x); } void test_twist_eq_equality_null_twist(void **state) { (void) state; twist x = twist_new("A twist string"); assert_non_null(x); assert_false(twist_eq(NULL, x)); twist_free(x); } void test_twist_eq_not_equality(void **state) { (void) state; twist different1 = twist_new("I'm something"); assert_non_null(different1); twist different2 = twist_new("I'm something different"); assert_non_null(different2); assert_false(twist_eq(different1, different2)); twist_free(different1); twist_free(different2); } void test_twistbin_new_bin_dup_eq(void **state) { (void) state; uint8_t expected[] = { 0xAA, 0xBB, 0xCC, 0xDD, 0xEE, 0x00, 0x11, 0x22, 0x33, 0x44 }; twist original = twistbin_new(expected, ARRAY_LEN(expected)); assert_non_null(original); assert_int_equal(twist_len(original), ARRAY_LEN(expected)); twist actual = twist_dup(original); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); assert_true(twist_eq(original, actual)); twist_free(original); twist_free(actual); } void test_twistbin_new_null(void **state) { (void) state; assert_null(twistbin_new(NULL, 0)); } void test_twistbin_new_not_eq(void **state) { (void) state; uint8_t data1[] = { 0xAA, 0xBB, 0xCC, 0xDD, 0xEE, 0x00, 0x11, 0x22, 0x33, 0x44 }; uint8_t data2[] = { 0x00, 0x11, 0x22, 0x33, 0x44, 0xAA, 0xBB, 0xCC, 0xDD, 0xEE }; twist x = twistbin_new(data1, ARRAY_LEN(data1)); assert_non_null(x); twist y = twistbin_new(data2, ARRAY_LEN(data2)); assert_non_null(y); assert_int_equal(twist_len(x), ARRAY_LEN(data1)); assert_int_equal(twist_len(y), ARRAY_LEN(data2)); assert_memory_not_equal(x, y, twist_len(x)); assert_false(twist_eq(x, y)); twist_free(x); twist_free(y); } void test_twistbin_new_not_eq_diff_lengths(void **state) { (void) state; uint8_t data1[] = { 0xAA, 0xBB, 0xCC, 0xDD, 0xEE, 0x00, 0x11, 0x22, 0x33, 0x44 }; uint8_t data2[] = { 0x00, 0x11, 0x22, 0x33, 0x44, 0xAA, 0xBB, 0xCC, 0xDD, 0xEE, 0x00, 0xAA, 0xBB }; twist x = twistbin_new(data1, ARRAY_LEN(data1)); assert_non_null(x); twist y = twistbin_new(data2, ARRAY_LEN(data2)); assert_non_null(y); assert_int_equal(twist_len(x), ARRAY_LEN(data1)); assert_int_equal(twist_len(y), ARRAY_LEN(data2)); assert_memory_not_equal(x, y, twist_len(x)); assert_false(twist_eq(x, y)); twist_free(x); twist_free(y); } void test_twist_append(void **state) { (void) state; const char *expected = "My Original String - cool"; twist original = twist_new("My Original String"); assert_non_null(original); twist actual = twist_append(original, " - cool"); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twist_append_bad_alloc(void **state) { (void) state; twist original = twist_new("I'm Good"); assert_non_null(original); twist_next_alloc_fails(); twist actual = twist_append(original, "I fail"); assert_null(actual); twist_free(original); } void test_twistbin_append(void **state) { (void) state; const char first[] = { 0x01, 0x55, 'A', 'B' }; const char second[] = { 0x00, 'x', 0x00 }; const char expected[] = { 0x01, 0x55, 'A', 'B', 0x00, 'x', 0x00 }; twist tfirst = twistbin_new(first, ARRAY_LEN(first)); assert_non_null(tfirst); twist actual = twistbin_append(tfirst, second, ARRAY_LEN(second)); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); twist_free(actual); } void test_twist_append_twist(void **state) { (void) state; const char first[] = { 0x01, 0x55, 'A', 'B' }; const char second[] = { 0x00, 'x', 0x00 }; const char expected[] = { 0x01, 0x55, 'A', 'B', 0x00, 'x', 0x00 }; twist tfirst = twistbin_new(first, ARRAY_LEN(first)); assert_non_null(tfirst); twist tsecond = twistbin_new(second, ARRAY_LEN(second)); assert_non_null(tsecond); twist actual = twist_append_twist(tfirst, tsecond); assert_non_null(actual); assert_memory_equal(expected, actual, ARRAY_LEN(expected)); twist_free(actual); twist_free(tsecond); } void test_twist_append_twist_null(void **state) { (void) state; twist expected = twist_new("My Original String"); assert_non_null(expected); twist actual = twist_append(expected, NULL ); assert_non_null(actual); assert_string_equal(expected, actual); assert_true(twist_eq(actual, expected)); twist_free(actual); } void test_twistbin_append_twist_null(void **state) { (void) state; const char first[] = { 0x01, 0x55, 'A', 'B' }; twist tfirst = twistbin_new(first, ARRAY_LEN(first)); assert_non_null(tfirst); twist actual = twistbin_append(tfirst, NULL, 0); assert_non_null(actual); assert_ptr_equal((void * )tfirst, (void * )actual); assert_memory_equal(first, actual, ARRAY_LEN(first)); twist_free(actual); } void test_twist_append_twist_twist_null(void **state) { (void) state; const char first[] = { 0x01, 0x55, 'A', 'B' }; twist tfirst = twistbin_new(first, ARRAY_LEN(first)); assert_non_null(tfirst); twist actual = twist_append_twist(tfirst, NULL ); assert_non_null(actual); assert_ptr_equal((void * )tfirst, (void * )actual); assert_memory_equal(first, actual, ARRAY_LEN(first)); twist_free(actual); } void test_twist_append_null_string(void **state) { (void) state; const char *expected = "this is some string"; twist actual = twist_append(NULL, expected); assert_non_null(actual); assert_string_equal(expected, actual); twist_free(actual); } void test_twistbin_append_null_string(void **state) { (void) state; const char second[] = { 0x01, 0x00, 'A', 'B' }; twist actual = twistbin_append(NULL, second, ARRAY_LEN(second)); assert_non_null(actual); assert_memory_equal(second, actual, ARRAY_LEN(second)); twist_free(actual); } void test_twist_append_twist_null_string(void **state) { (void) state; const char second[] = { 0x01, 0x00, 'A', 'B' }; twist tsecond = twistbin_new(second, ARRAY_LEN(second)); assert_non_null(tsecond); twist actual = twist_append_twist(NULL, tsecond); assert_non_null(actual); assert_memory_equal(second, actual, ARRAY_LEN(second)); twist_free(actual); } void test_twist_append_null_null(void **state) { (void) state; assert_null(twist_append(NULL, NULL)); } void test_twistbin_append_null_null(void **state) { (void) state; assert_null(twistbin_append(NULL, NULL, 0)); } void test_twist_append_twist_null_null(void **state) { (void) state; assert_null(twist_append_twist(NULL, NULL)); } void test_twist_truncate_smaller(void **state) { (void) state; twist original = twist_new("My Original String"); assert_non_null(original); size_t orig_len = twist_len(original); twist actual = twist_truncate(original, orig_len - 4); assert_non_null(actual); assert_int_equal(orig_len - 4, twist_len(actual)); twist_free(actual); } void test_twist_truncate_bigger(void **state) { (void) state; twist original = twist_new("My Original String"); assert_non_null(original); size_t orig_len = twist_len(original); twist actual = twist_truncate(original, orig_len + 104); assert_non_null(actual); assert_int_equal(orig_len + 104, twist_len(actual)); twist_free(actual); } void test_twist_truncate_bigger_bad_alloc(void **state) { (void) state; twist original = twist_new("My Original String"); assert_non_null(original); size_t orig_len = twist_len(original); twist_next_alloc_fails(); twist actual = twist_truncate(original, orig_len + 104); assert_null(actual); twist_free(original); } void test_twist_truncate_same(void **state) { (void) state; twist original = twist_new("My Original String"); assert_non_null(original); size_t orig_len = twist_len(original); twist actual = twist_truncate(original, orig_len); assert_non_null(actual); assert_int_equal(orig_len, twist_len(actual)); assert_ptr_equal((void * )original, (void * )actual); twist_free(actual); } void test_twist_truncate_zero(void **state) { (void) state; twist original = twist_new("My Original String"); assert_non_null(original); twist actual = twist_truncate(original, 0); assert_non_null(actual); assert_int_equal(0, twist_len(actual)); twist_free(actual); } void test_twist_truncate_null(void **state) { (void) state; assert_null(twist_truncate(NULL, 0)); } void test_twist_unhexlify_null(void **state) { (void) state; twist null = twistbin_unhexlify(NULL); assert_null(null); } void test_twist_unhexlify_0_len(void **state) { (void) state; twist zero_len = twistbin_unhexlify(""); assert_int_equal(twist_len(zero_len), 0); assert_int_equal(zero_len[0], '\0'); twist_free(zero_len); } void test_twist_unhexlify_odd_len(void **state) { (void) state; twist odd = twistbin_unhexlify("a"); assert_null(odd); odd = twistbin_unhexlify("abc"); assert_null(odd); odd = twistbin_unhexlify("defab"); assert_null(odd); } void test_twist_unhexlify_even_len(void **state) { (void) state; /* Test all the characters */ char raw[] = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF, 0xab, 0xcd, 0xef }; twist even = twistbin_unhexlify("0123456789ABCDEFabcdef"); assert_non_null(even); assert_int_equal(even[twist_len(even)], '\0'); assert_int_equal(sizeof(raw), twist_len(even)); assert_memory_equal(even, raw, sizeof(raw)); twist_free(even); /* test smallest valid */ even = twistbin_unhexlify("01"); assert_non_null(even); assert_int_equal(even[twist_len(even)], '\0'); twist_free(even); even = twistbin_unhexlify("01a2b3c4"); assert_non_null(even); assert_int_equal(even[twist_len(even)], '\0'); twist_free(even); } void test_twist_unhexlify_bad_chars(void **state) { (void) state; /* Test all bad characters */ twist bad = twistbin_unhexlify("-(*&"); assert_null(bad); /* Test start good end bad */ bad = twistbin_unhexlify("abcdef0123-(*&"); assert_null(bad); /* Test start bad end good*/ bad = twistbin_unhexlify("-+=~`abcdef"); assert_null(bad); /* test upper nibble good lower bad */ bad = twistbin_unhexlify("a-"); assert_null(bad); } void test_twist_unhexlify_failed_alloc(void **state) { (void) state; /* Test all bad characters */ twist_next_alloc_fails(); twist bad = twistbin_unhexlify("abcd"); assert_null(bad); } void test_twist_hexlify_null(void **state) { (void) state; twist null = twist_hexlify(NULL); assert_null(null); } void test_twist_hexlify_0_len(void **state) { (void) state; twist zero_len = twist_new(""); twist hex_zero_len = twist_hexlify(zero_len); assert_int_equal(twist_len(hex_zero_len), 0); assert_int_equal(hex_zero_len[0], '\0'); twist_free(hex_zero_len); twist_free(zero_len); } void test_twist_hexlify_good(void **state) { (void) state; char raw[] = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }; twist raw_data = twistbin_new(raw, sizeof(raw)); twist hex_data = twist_hexlify(raw_data); assert_int_equal(twist_len(hex_data), sizeof(raw) * 2); assert_int_equal(hex_data[twist_len(hex_data)], '\0'); assert_true(!strcasecmp("0123456789ABCDEF", hex_data)); twist_free(hex_data); twist_free(raw_data); } void test_twist_hexlify_alloc_fail(void **state) { (void) state; char raw[] = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }; twist raw_data = twistbin_new(raw, sizeof(raw)); twist_next_alloc_fails(); twist hex_data = twist_hexlify(raw_data); assert_null(hex_data); twist_free(raw_data); } void test_twist_hexlify_unhelify(void **state) { (void) state; char *raw_hex = "0123456789ABCDEF"; char raw_data[] = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF }; twist raw = twistbin_new(raw_data, sizeof(raw_data)); twist hex = twist_hexlify(raw); assert_int_equal(sizeof(raw_data), twist_len(raw)); assert_int_equal(strlen(raw_hex), twist_len(hex)); assert_true(!strcasecmp(raw_hex, hex)); assert_memory_equal(raw_data, raw, sizeof(raw_data)); twist_free(raw); twist_free(hex); } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_twist_new), cmocka_unit_test(test_twist_new_0_len), cmocka_unit_test(test_twist_new_bad_alloc), cmocka_unit_test(test_twist_new_empty), cmocka_unit_test(test_twist_new_null), cmocka_unit_test(test_twist_create), cmocka_unit_test(test_twist_create_null), cmocka_unit_test(test_twist_create_embedded_null), cmocka_unit_test(test_twist_dup), cmocka_unit_test(test_twist_dup_empty), cmocka_unit_test(test_twist_dup_null), cmocka_unit_test(test_twist_end), cmocka_unit_test(test_twist_end_null), cmocka_unit_test(test_twist_free_null), cmocka_unit_test(test_twist_concat), cmocka_unit_test(test_twist_concat_empty), cmocka_unit_test(test_twistbin_create), cmocka_unit_test(test_twistbin_new_overflow_1), cmocka_unit_test(test_twistbin_new_overflow_2), cmocka_unit_test(test_twistbin_new_overflow_3), cmocka_unit_test(test_twistbin_new_overflow_4), cmocka_unit_test(test_twistbin_aappend), cmocka_unit_test(test_twistbin_aappend_null_array), cmocka_unit_test(test_twistbin_aappend_twist_null), cmocka_unit_test(test_twistbin_create_null), cmocka_unit_test(test_twistbin_create_embedded_null), cmocka_unit_test(test_twistbin_concat), cmocka_unit_test(test_twistbin_concat_twist_null), cmocka_unit_test(test_twistbin_concat_null_data), cmocka_unit_test(test_twist_concat_twist_null), cmocka_unit_test(test_twist_concat_null_null), cmocka_unit_test(test_twist_concat_empty_null), cmocka_unit_test(test_twist_concat_null_empty), cmocka_unit_test(test_twist_concat_twist), cmocka_unit_test(test_twist_concat_twist_null_null), cmocka_unit_test(test_twist_concat_twist_twist_null), cmocka_unit_test(test_twist_concat_twist_null_twist), cmocka_unit_test(test_twist_eq_equality), cmocka_unit_test(test_twist_eq_equality_null_null), cmocka_unit_test(test_twist_eq_equality_twist_null), cmocka_unit_test(test_twist_eq_equality_null_twist), cmocka_unit_test(test_twist_eq_not_equality), cmocka_unit_test(test_twistbin_new_bin_dup_eq), cmocka_unit_test(test_twistbin_new_null), cmocka_unit_test(test_twistbin_new_not_eq), cmocka_unit_test(test_twistbin_new_not_eq_diff_lengths), cmocka_unit_test(test_twist_append), cmocka_unit_test(test_twist_append_bad_alloc), cmocka_unit_test(test_twistbin_append), cmocka_unit_test(test_twist_append_twist), cmocka_unit_test(test_twist_append_twist_null), cmocka_unit_test(test_twistbin_append_twist_null), cmocka_unit_test(test_twist_append_twist_twist_null), cmocka_unit_test(test_twist_append_null_string), cmocka_unit_test(test_twistbin_append_null_string), cmocka_unit_test(test_twist_append_twist_null_string), cmocka_unit_test(test_twist_append_null_null), cmocka_unit_test(test_twistbin_append_null_null), cmocka_unit_test(test_twist_append_twist_null_null), cmocka_unit_test(test_twist_truncate_smaller), cmocka_unit_test(test_twist_truncate_bigger), cmocka_unit_test(test_twist_truncate_bigger_bad_alloc), cmocka_unit_test(test_twist_truncate_same), cmocka_unit_test(test_twist_truncate_zero), cmocka_unit_test(test_twist_truncate_null), cmocka_unit_test(test_twist_unhexlify_null), cmocka_unit_test(test_twist_unhexlify_0_len), cmocka_unit_test(test_twist_unhexlify_odd_len), cmocka_unit_test(test_twist_unhexlify_even_len), cmocka_unit_test(test_twist_unhexlify_bad_chars), cmocka_unit_test(test_twist_unhexlify_failed_alloc), cmocka_unit_test(test_twist_hexlify_null), cmocka_unit_test(test_twist_hexlify_0_len), cmocka_unit_test(test_twist_hexlify_good), cmocka_unit_test(test_twist_hexlify_alloc_fail), cmocka_unit_test(test_twist_hexlify_unhelify), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.9.1/test/unit/test_utils.c0000644000175100017510000000314514535673717013515 /* SPDX-License-Identifier: BSD-2-Clause */ #include #include #include #include #include #include #include #include #include #include #include "utils.h" static void test_parse_lib_version(void **state) { (void) state; CK_BYTE major = 0xFF; CK_BYTE minor = 0xFF; parse_lib_version("1", &major, &minor); assert_int_equal(major, 1); assert_int_equal(minor, 0); major = 0xFF; minor = 0xFF; parse_lib_version("5.2", &major, &minor); assert_int_equal(major, 5); assert_int_equal(minor, 2); major = 0xFF; minor = 0xFF; parse_lib_version("9.8.7", &major, &minor); assert_int_equal(major, 9); assert_int_equal(minor, 8); major = 0xFF; minor = 0xFF; parse_lib_version("1.6.0-42-gb462a23778ea-dirty", &major, &minor); assert_int_equal(major, 0); assert_int_equal(minor, 0); major = 0xFF; minor = 0xFF; parse_lib_version("1.6.0-", &major, &minor); assert_int_equal(major, 0); assert_int_equal(minor, 0); major = 0xFF; minor = 0xFF; parse_lib_version("", &major, &minor); assert_int_equal(major, 0); assert_int_equal(minor, 0); major = 0xFF; minor = 0xFF; parse_lib_version(NULL, &major, &minor); assert_int_equal(major, 0); assert_int_equal(minor, 0); } int main(int argc, char* argv[]) { (void) argc; (void) argv; const struct CMUnitTest tests[] = { cmocka_unit_test(test_parse_lib_version), }; return cmocka_run_group_tests(tests, NULL, NULL); } tpm2-pkcs11-1.9.1/test/fake-tpm/0000755000175100017510000000000014535673717011754 5tpm2-pkcs11-1.9.1/test/fake-tpm/wrap_tpm.h0000644000175100017510000010150614535673717013701 /* SPDX-License-Identifier: BSD-2-Clause */ #ifndef TEST_WRAP_TPM_H_ #define TEST_WRAP_TPM_H_ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "utils.h" static inline void set_default_tpm(void) { will_return_maybe(__wrap_backend_fapi_init, CKR_GENERAL_ERROR); will_return_maybe(__wrap_Esys_Initialize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Tss2_TctiLdr_Initialize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Tss2_TctiLdr_Finalize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_Finalize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TR_FromTPMPublic, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TR_Serialize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TR_Deserialize, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TR_SetAuth, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_StartAuthSession, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TRSess_SetAttributes, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_Create, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_FlushContext, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_Load, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_TRSess_GetAttributes, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_Unseal, TSS2_RC_SUCCESS); will_return_maybe(__wrap_Esys_ObjectChangeAuth, TSS2_RC_SUCCESS); } TSS2_RC __wrap_Esys_Create( ESYS_CONTEXT *esysContext, ESYS_TR parentHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_SENSITIVE_CREATE *inSensitive, const TPM2B_PUBLIC *inPublic, const TPM2B_DATA *outsideInfo, const TPML_PCR_SELECTION *creationPCR, TPM2B_PRIVATE **outPrivate, TPM2B_PUBLIC **outPublic, TPM2B_CREATION_DATA **creationData, TPM2B_DIGEST **creationHash, TPMT_TK_CREATION **creationTicket) { UNUSED(esysContext); UNUSED(parentHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(inSensitive); UNUSED(inPublic); UNUSED(outsideInfo); UNUSED(creationPCR); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_PUBLIC *pub = NULL; TPM2B_PRIVATE *priv = NULL; TPM2B_CREATION_DATA *cdata = NULL; TPM2B_DIGEST *chash = NULL; TPMT_TK_CREATION *cticket = NULL; pub = calloc(1, sizeof(*pub)); if (!pub) { goto oom; } *pub = *inPublic; priv = calloc(1, sizeof(*priv)); if (!priv) { goto oom; } priv->size = 42; memset(priv->buffer, 0xFF, priv->size); cdata = calloc(1, sizeof(*cdata)); if (!cdata) { goto oom; } chash = calloc(1, sizeof(*chash)); if (!chash) { goto oom; } cticket = calloc(1, sizeof(*cticket)); if (!cticket) { goto oom; } *outPrivate = priv; *outPublic = pub; *creationData = cdata; *creationHash = chash; *creationTicket = cticket; return rc; oom: free(pub); free(priv); free(cdata); free(chash); free(cticket); return TSS2_ESYS_RC_MEMORY; } TSS2_RC __wrap_Esys_CreateLoaded( ESYS_CONTEXT *esysContext, ESYS_TR parentHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_SENSITIVE_CREATE *inSensitive, const TPM2B_TEMPLATE *template, ESYS_TR *objectHandle, TPM2B_PRIVATE **outPrivate, TPM2B_PUBLIC **outPublic){ UNUSED(esysContext); UNUSED(parentHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(inSensitive); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_PUBLIC *pub = NULL; TPM2B_PRIVATE *priv = NULL; pub = calloc(1, sizeof(*pub)); if (!pub) { goto oom; } size_t offset = 0; TSS2_RC rv = Tss2_MU_TPMT_PUBLIC_Unmarshal(template->buffer, template->size, &offset, &pub->publicArea); if (rv != TSS2_RC_SUCCESS) { LOGE("Template unmarshal shouldn't fail, got: %lu", rv); free(pub); return rv; } priv = calloc(1, sizeof(*priv)); if (!priv) { goto oom; } *outPrivate = priv; *outPublic = pub; *objectHandle = 42; return rc; oom: free(pub); free(priv); return TSS2_ESYS_RC_MEMORY; } TSS2_RC __wrap_Esys_CreatePrimary( ESYS_CONTEXT *esysContext, ESYS_TR primaryHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_SENSITIVE_CREATE *inSensitive, const TPM2B_PUBLIC *inPublic, const TPM2B_DATA *outsideInfo, const TPML_PCR_SELECTION *creationPCR, ESYS_TR *objectHandle, TPM2B_PUBLIC **outPublic, TPM2B_CREATION_DATA **creationData, TPM2B_DIGEST **creationHash, TPMT_TK_CREATION **creationTicket){ UNUSED(esysContext); UNUSED(primaryHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(inSensitive); UNUSED(inPublic); UNUSED(outsideInfo); UNUSED(creationPCR); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_PUBLIC *pub = NULL; TPM2B_CREATION_DATA *cdata = NULL; TPM2B_DIGEST *chash = NULL; TPMT_TK_CREATION *cticket = NULL; pub = calloc(1, sizeof(*pub)); if (!pub) { goto oom; } *pub = *inPublic; cdata = calloc(1, sizeof(*cdata)); if (!cdata) { goto oom; } chash = calloc(1, sizeof(*chash)); if (!chash) { goto oom; } cticket = calloc(1, sizeof(*cticket)); if (!cticket) { goto oom; } *outPublic = pub; *creationData = cdata; *creationHash = chash; *creationTicket = cticket; *objectHandle = 42; return rc; oom: free(pub); free(cdata); free(chash); free(cticket); return TSS2_ESYS_RC_MEMORY; } TSS2_RC __wrap_Esys_EncryptDecrypt( ESYS_CONTEXT *esysContext, ESYS_TR keyHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, TPMI_YES_NO decrypt, TPMI_ALG_SYM_MODE mode, const TPM2B_IV *ivIn, const TPM2B_MAX_BUFFER *inData, TPM2B_MAX_BUFFER **outData, TPM2B_IV **ivOut) { UNUSED(esysContext); UNUSED(keyHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(decrypt); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_MAX_BUFFER *data_out = NULL; TPM2B_IV *iv_out = NULL; data_out = calloc(1, sizeof(*data_out)); if (!data_out) { goto oom; } /* shuffle the data */ data_out->size = inData->size; memcpy(data_out->buffer, inData->buffer, inData->size); iv_out = calloc(1, sizeof(*iv_out)); if (!iv_out) { goto oom; } *outData = data_out; *ivOut = iv_out; return rc; oom: free(data_out); free(iv_out); return TSS2_ESYS_RC_MEMORY; } TSS2_RC __wrap_Esys_EncryptDecrypt2( ESYS_CONTEXT *esysContext, ESYS_TR keyHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_MAX_BUFFER *inData, TPMI_YES_NO decrypt, TPMI_ALG_SYM_MODE mode, const TPM2B_IV *ivIn, TPM2B_MAX_BUFFER **outData, TPM2B_IV **ivOut){ UNUSED(esysContext); UNUSED(keyHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(decrypt); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_MAX_BUFFER *data_out = NULL; TPM2B_IV *iv_out = NULL; data_out = calloc(1, sizeof(*data_out)); if (!data_out) { goto oom; } /* shuffle the data */ data_out->size = inData->size; memcpy(data_out->buffer, inData->buffer, inData->size); iv_out = calloc(1, sizeof(*iv_out)); if (!iv_out) { goto oom; } *outData = data_out; *ivOut = iv_out; return rc; oom: free(data_out); free(iv_out); return TSS2_ESYS_RC_MEMORY; } TSS2_RC __wrap_Esys_EvictControl( ESYS_CONTEXT *esysContext, ESYS_TR auth, ESYS_TR objectHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, TPMI_DH_PERSISTENT persistentHandle, ESYS_TR *newObjectHandle) { UNUSED(esysContext); UNUSED(auth); UNUSED(objectHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(persistentHandle); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } *newObjectHandle = 69; return rc; } TSS2_RC __wrap_Esys_Finalize(ESYS_CONTEXT **context) { TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } *context = NULL; return rc; } TSS2_RC __wrap_Esys_FlushContext( ESYS_CONTEXT *esysContext, ESYS_TR flushHandle) { UNUSED(esysContext); UNUSED(flushHandle); return mock(); } TSS2_RC __wrap_Esys_Free(void *__ptr) { TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } free(__ptr); return rc; } static inline TSS2_RC get_commands(UINT32 property, UINT32 propertyCount, TPMI_YES_NO *moreData, const TPMS_CAPABILITY_DATA **capabilityData) { if (property != TPM2_CC_FIRST) { return TPM2_RC_P | TPM2_RC_2 | TPM2_RC_VALUE; } if (propertyCount != TPM2_MAX_CAP_CC) { return TPM2_RC_P | TPM2_RC_3 | TPM2_RC_VALUE; } *moreData = TPM2_NO; static const TPMS_CAPABILITY_DATA _data = { .capability = TPM2_CAP_COMMANDS, .data = { .command = { /* tpm2_getcap commands | grep value: | sort | cut -d: -f 2-2 | sed s/' '// | wc -l */ .count = 113, /* for v in `tpm2_getcap commands | grep value: | sort | cut -d: -f 2-2 | sed s/' '//`; do echo $v,; done; */ .commandAttributes = { 0x10000161, 0x10000167, 0x10000186, 0x12000131, 0x12000157, 0x1200015B, 0x12000191, 0x14000176, 0x165, 0x178, 0x17A, 0x17B, 0x17C, 0x17D, 0x17E, 0x181, 0x18A, 0x18E, 0x20000000, 0x2000130, 0x2000153, 0x2000154, 0x2000155, 0x2000156, 0x2000158, 0x2000159, 0x200015C, 0x200015D, 0x200015E, 0x2000162, 0x2000163, 0x2000164, 0x2000168, 0x2000169, 0x200016A, 0x200016B, 0x200016C, 0x200016D, 0x200016E, 0x200016F, 0x2000170, 0x2000171, 0x2000172, 0x2000173, 0x2000174, 0x2000177, 0x200017F, 0x2000180, 0x2000183, 0x2000187, 0x2000188, 0x2000189, 0x200018B, 0x200018C, 0x200018D, 0x200018F, 0x2000190, 0x2000193, 0x20400211, 0x20400212, 0x20400213, 0x2400127, 0x2400128, 0x2400129, 0x240012A, 0x240012B, 0x240012C, 0x240012D, 0x240012E, 0x2400132, 0x2400139, 0x240013A, 0x240013B, 0x240013C, 0x240013D, 0x240013F, 0x2400140, 0x2400182, 0x2C00121, 0x2C00124, 0x2C00125, 0x2C00126, 0x300013E, 0x4000147, 0x4000148, 0x400014A, 0x400014B, 0x400014C, 0x400014E, 0x4000150, 0x4000151, 0x4000152, 0x4000160, 0x400142, 0x400143, 0x400144, 0x400145, 0x400146, 0x440011F, 0x4400120, 0x4400122, 0x4400133, 0x4400134, 0x4400135, 0x4400136, 0x4400137, 0x4400138, 0x440014F, 0x5400185, 0x6000149, 0x600014D, 0x6000184, 0x6000192, }, }, }, }; *capabilityData = &_data; return TSS2_RC_SUCCESS; } static inline TSS2_RC get_algs(UINT32 property, UINT32 propertyCount, TPMI_YES_NO *moreData, const TPMS_CAPABILITY_DATA **capabilityData) { if (property != TPM2_ALG_FIRST) { return TPM2_RC_P | TPM2_RC_2 | TPM2_RC_VALUE; } if (propertyCount != TPM2_MAX_CAP_ALGS) { return TPM2_RC_P | TPM2_RC_3 | TPM2_RC_VALUE; } *moreData = TPM2_NO; static const TPMS_CAPABILITY_DATA _data = { .capability = TPM2_CAP_ALGS, .data = { .algorithms = { /* tpm2_getcap algorithms | grep value: | sort | wc -l */ .count = 26, /* alg, properties */ /* for v in `tpm2_getcap algorithms | grep value: | cut -d: -f 2-2 | sed s/' '//`; do echo "{$v,},"; done; */ /* hand jammed the rest, notice no sort, need order to be same to match alg with property */ .algProperties = { {0x1, 0x9}, {0x4, 0x4}, {0x5, 0x104}, {0x6, 0x2}, {0x7, 0x404}, {0x8, 0x30C}, {0xA, 0x6}, {0xB, 0x4}, {0xC, 0x4}, {0x14, 0x101}, {0x15, 0x201}, {0x16, 0x101}, {0x17, 0x201}, {0x18, 0x501}, {0x19, 0x401}, {0x1A, 0x101}, {0x1C, 0x101}, {0x20, 0x404}, {0x22, 0x404}, {0x23, 0x9}, {0x25, 0x8}, {0x40, 0x202}, {0x41, 0x202}, {0x42, 0x202}, {0x43, 0x202}, {0x44, 0x202}, }, }, }, }; *capabilityData = &_data; return TSS2_RC_SUCCESS; } static inline TSS2_RC get_properties(UINT32 property, UINT32 propertyCount, TPMI_YES_NO *moreData, const TPMS_CAPABILITY_DATA **capabilityData) { if (property != TPM2_PT_FIXED) { return TPM2_RC_P | TPM2_RC_2 | TPM2_RC_VALUE; } if (propertyCount != TPM2_MAX_TPM_PROPERTIES) { return TPM2_RC_P | TPM2_RC_3 | TPM2_RC_VALUE; } *moreData = TPM2_NO; static const TPMS_CAPABILITY_DATA _data = { .capability = TPM2_CAP_TPM_PROPERTIES, .data = { .tpmProperties = { /* tpm2_getcap properties-fixed | grep raw | wc -l */ .count = 44, /* python script * - https://gist.github.com/williamcroberts/15c3b7721a74cf5e0f1e9c733a88e511 * with this patch applied to tpm2-tools: * - https://github.com/tpm2-software/tpm2-tools/pull/1986 */ .tpmProperty = { {.property=TPM2_PT_FIRMWARE_VERSION_2, .value=0x162800}, {.property=TPM2_PT_FIRMWARE_VERSION_1, .value=0x20160511}, {.property=TPM2_PT_NV_COUNTERS_MAX, .value=0x0}, {.property=TPM2_PT_PCR_COUNT, .value=0x18}, {.property=TPM2_PT_PS_REVISION, .value=0x92}, {.property=TPM2_PT_CLOCK_UPDATE, .value=0x1000}, {.property=TPM2_PT_MEMORY, .value=0x6}, {.property=TPM2_PT_INPUT_BUFFER, .value=0x400}, {.property=TPM2_PT_SPLIT_MAX, .value=0x80}, {.property=TPM2_PT_DAY_OF_YEAR, .value=0xA7}, {.property=TPM2_PT_YEAR, .value=0x7E1}, {.property=TPM2_PT_HR_LOADED_MIN, .value=0x3}, {.property=TPM2_PT_PS_YEAR, .value=0x7E1}, {.property=TPM2_PT_LIBRARY_COMMANDS, .value=0x6D}, {.property=TPM2_PT_REVISION, .value=0x92}, {.property=TPM2_PT_VENDOR_COMMANDS, .value=0x4}, {.property=TPM2_PT_MODES, .value=0x0}, {.property=TPM2_PT_MAX_SESSION_CONTEXT, .value=0x144}, {.property=TPM2_PT_HR_TRANSIENT_MIN, .value=0x3}, {.property=TPM2_PT_TOTAL_COMMANDS, .value=0x71}, {.property=TPM2_PT_FAMILY_INDICATOR, .value=0x322E3000}, {.property=TPM2_PT_PS_FAMILY_INDICATOR, .value=0x322E3000}, {.property=TPM2_PT_ORDERLY_COUNT, .value=0xFF}, {.property=TPM2_PT_MAX_DIGEST, .value=0x30}, {.property=TPM2_PT_NV_BUFFER_MAX, .value=0x400}, {.property=TPM2_PT_MAX_COMMAND_SIZE, .value=0x1000}, {.property=TPM2_PT_VENDOR_STRING_1, .value=0x53572020}, {.property=TPM2_PT_VENDOR_STRING_3, .value=0x0}, {.property=TPM2_PT_VENDOR_STRING_2, .value=0x2054504D}, {.property=TPM2_PT_CONTEXT_SYM_SIZE, .value=0x100}, {.property=TPM2_PT_VENDOR_STRING_4, .value=0x0}, {.property=TPM2_PT_CONTEXT_GAP_MAX, .value=0xFFFFFFFF}, {.property=TPM2_PT_CONTEXT_HASH, .value=0xC}, {.property=TPM2_PT_MANUFACTURER, .value=0x49424D20}, {.property=TPM2_PT_CONTEXT_SYM, .value=0x6}, {.property=TPM2_PT_MAX_RESPONSE_SIZE, .value=0x1000}, {.property=TPM2_PT_NV_INDEX_MAX, .value=0x800}, {.property=TPM2_PT_LEVEL, .value=0x0}, {.property=TPM2_PT_PS_LEVEL, .value=0x0}, {.property=TPM2_PT_HR_PERSISTENT_MIN, .value=0x2}, {.property=TPM2_PT_PCR_SELECT_MIN, .value=0x3}, {.property=TPM2_PT_PS_DAY_OF_YEAR, .value=0xA7}, {.property=TPM2_PT_ACTIVE_SESSIONS_MAX, .value=0x40}, {.property=TPM2_PT_MAX_OBJECT_CONTEXT, .value=0x764}, {.property=TPM2_PT_VENDOR_TPM_TYPE, .value=0x1}, }, }, }, }; *capabilityData = &_data; return TSS2_RC_SUCCESS; } /* TODO THIS ONE IS HARD PROBABLY CAPTURE ACTUAL DUMPS AND MEMCPY HERE */ TSS2_RC __wrap_Esys_GetCapability( ESYS_CONTEXT *esysContext, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, TPM2_CAP capability, UINT32 property, UINT32 propertyCount, TPMI_YES_NO *moreData, TPMS_CAPABILITY_DATA **capabilityData) { UNUSED(esysContext); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); const TPMS_CAPABILITY_DATA *tmp = NULL; TSS2_RC rc = TSS2_RC_SUCCESS; switch (capability) { case TPM2_CAP_COMMANDS: rc = get_commands(property, propertyCount, moreData, &tmp); break; case TPM2_CAP_ALGS: rc = get_algs(property, propertyCount, moreData, &tmp); break; case TPM2_CAP_TPM_PROPERTIES: rc = get_properties(property, propertyCount, moreData, &tmp); break; default: return TPM2_RC_S | TPM2_RC_1 | TPM2_RC_HANDLE; } if (rc != TSS2_RC_SUCCESS) { return rc; } /* allocate a new place to store the data to */ TPMS_CAPABILITY_DATA *data = calloc(1, sizeof(*data)); if (!data) { return TSS2_ESYS_RC_MEMORY; } /* copy the static tpm data to it */ *data = *tmp; /* return good pointer to user */ *capabilityData = data; return rc; } TSS2_RC __wrap_Esys_GetRandom( ESYS_CONTEXT *esysContext, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, UINT16 bytesRequested, TPM2B_DIGEST **randomBytes) { UNUSED(esysContext); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_DIGEST *rdata = calloc(1, sizeof(*rdata)); if (!rdata) { return TSS2_ESYS_RC_MEMORY; } rdata->size = bytesRequested; memset(rdata->buffer, 0xAA, sizeof(rdata->buffer)); *randomBytes = rdata; return rc; } TSS2_RC __wrap_Esys_Initialize( ESYS_CONTEXT **esys_context, TSS2_TCTI_CONTEXT *tcti, TSS2_ABI_VERSION *abiVersion) { UNUSED(tcti); UNUSED(abiVersion); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } /* We should never be looking at this in the app anyways */ *esys_context = (void *)0xDEADBEEF; return rc; } TSS2_RC __wrap_Esys_Load( ESYS_CONTEXT *esysContext, ESYS_TR parentHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_PRIVATE *inPrivate, const TPM2B_PUBLIC *inPublic, ESYS_TR *objectHandle) { UNUSED(esysContext); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(inPrivate); UNUSED(inPublic); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } *objectHandle = 81; return rc; } TSS2_RC __wrap_Esys_LoadExternal( ESYS_CONTEXT *esysContext, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_SENSITIVE *inPrivate, const TPM2B_PUBLIC *inPublic, ESYS_TR hierarchy, ESYS_TR *objectHandle) { UNUSED(esysContext); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(inPrivate); UNUSED(inPublic); UNUSED(hierarchy); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } *objectHandle = 101; return rc; } TSS2_RC __wrap_Esys_ObjectChangeAuth( ESYS_CONTEXT *esysContext, ESYS_TR objectHandle, ESYS_TR parentHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_AUTH *newAuth, TPM2B_PRIVATE **outPrivate) { UNUSED(esysContext); UNUSED(parentHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(newAuth); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_PRIVATE *priv = NULL; priv = calloc(1, sizeof(*priv)); if (!priv) { goto oom; } priv->size = 42; memset(priv->buffer, 0xFF, priv->size); *outPrivate = priv; return rc; oom: free(priv); return TSS2_ESYS_RC_MEMORY; } TSS2_RC __wrap_Esys_ReadPublic( ESYS_CONTEXT *esysContext, ESYS_TR objectHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, TPM2B_PUBLIC **outPublic, TPM2B_NAME **name, TPM2B_NAME **qualifiedName) { UNUSED(esysContext); UNUSED(objectHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_PUBLIC *pub = NULL; pub = calloc(1, sizeof(*pub)); if (!pub) { goto oom; } /* * This will be super brittle, the only use for this at the moment is to * get the namealg... * */ pub->publicArea.nameAlg = TPM2_ALG_SHA256; *outPublic = pub; return rc; oom: free(pub); return TSS2_ESYS_RC_MEMORY; } TSS2_RC __wrap_Esys_RSA_Decrypt( ESYS_CONTEXT *esysContext, ESYS_TR keyHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_PUBLIC_KEY_RSA *cipherText, const TPMT_RSA_DECRYPT *inScheme, const TPM2B_DATA *label, TPM2B_PUBLIC_KEY_RSA **message) { UNUSED(esysContext); UNUSED(keyHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(inScheme); UNUSED(label); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_PUBLIC_KEY_RSA *msg = calloc(1, sizeof(*msg)); if (!msg) { return TSS2_ESYS_RC_MEMORY; } /* hmmm, might have to keep track of keysizes? */ msg->size = 256; memset(msg->buffer, 'R', msg->size); return rc; } TSS2_RC __wrap_Esys_Sign( ESYS_CONTEXT *esysContext, ESYS_TR keyHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_DIGEST *digest, const TPMT_SIG_SCHEME *inScheme, const TPMT_TK_HASHCHECK *validation, TPMT_SIGNATURE **signature) { UNUSED(esysContext); UNUSED(keyHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(digest); UNUSED(inScheme); UNUSED(validation); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPMT_SIGNATURE *sig = calloc(1, sizeof(*sig)); if (!sig) { return TSS2_ESYS_RC_MEMORY; } sig->sigAlg = TPM2_ALG_RSAPSS; sig->signature.rsapss.hash = TPM2_ALG_SHA256; /* hmm keysizes again */ sig->signature.rsapss.sig.size = 256; memset(sig->signature.rsapss.sig.buffer, 'S', 256); *signature = sig; return rc; } TSS2_RC __wrap_Esys_StartAuthSession( ESYS_CONTEXT *esysContext, ESYS_TR tpmKey, ESYS_TR bind, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_NONCE *nonceCaller, TPM2_SE sessionType, const TPMT_SYM_DEF *symmetric, TPMI_ALG_HASH authHash, ESYS_TR *sessionHandle) { UNUSED(esysContext); UNUSED(tpmKey); UNUSED(bind); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(nonceCaller); UNUSED(sessionType); UNUSED(symmetric); UNUSED(authHash); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } *sessionHandle = 0xBADCC0DE; return rc; } TSS2_RC __wrap_Esys_StirRandom( ESYS_CONTEXT *esysContext, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_SENSITIVE_DATA *inData) { UNUSED(esysContext); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(inData); return mock(); } static inline TSS2_RC test_rsa_params(TPMI_RSA_KEY_BITS bits) { if (bits == 1024 || bits == 2048) { return TSS2_RC_SUCCESS; } return TPM2_RC_P | TPM2_RC_1 | TPM2_RC_KEY_SIZE; } static inline TSS2_RC test_ecc_params(TPMI_ECC_CURVE curve) { if (curve == TPM2_ECC_NIST_P256 || curve == TPM2_ECC_NIST_P384) { return TSS2_RC_SUCCESS; } return TPM2_RC_P | TPM2_RC_1 | TPM2_RC_CURVE; } TSS2_RC __wrap_Esys_TestParms( ESYS_CONTEXT *esysContext, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPMT_PUBLIC_PARMS *parameters) { UNUSED(esysContext); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); /* * we intentionally don't mock this interface * as certain error codes are needed, so we just wire * this up to look like the simulator */ switch(parameters->type) { case TPM2_ALG_RSA: return test_rsa_params(parameters->parameters.rsaDetail.keyBits); case TPM2_ALG_ECC: return test_ecc_params(parameters->parameters.eccDetail.curveID); default: return TPM2_RC_S | TPM2_RC_1 | TPM2_RC_HANDLE; } } TSS2_RC __wrap_Esys_TR_Deserialize( ESYS_CONTEXT *esys_context, uint8_t const *buffer, size_t buffer_size, ESYS_TR *esys_handle) { UNUSED(esys_context); UNUSED(buffer); UNUSED(buffer_size); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } *esys_handle = 0xDE7EC7ED; return rc; } TSS2_RC __wrap_Esys_TR_FromTPMPublic( ESYS_CONTEXT *esysContext, TPM2_HANDLE tpm_handle, ESYS_TR optionalSession1, ESYS_TR optionalSession2, ESYS_TR optionalSession3, ESYS_TR *object) { UNUSED(esysContext); UNUSED(tpm_handle); UNUSED(optionalSession1); UNUSED(optionalSession2); UNUSED(optionalSession3); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } *object = 0xBADCAFE; return rc; } TSS2_RC __wrap_Esys_TR_Serialize( ESYS_CONTEXT *esys_context, ESYS_TR object, uint8_t **buffer, size_t *buffer_size) { UNUSED(esys_context); UNUSED(object); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } uint8_t *b = calloc(1, 32); if (!b) { return TSS2_ESYS_RC_MEMORY; } memset(b, 'Q', 32); *buffer = b; return rc; } static TPMA_SESSION _session_flags; TSS2_RC __wrap_Esys_TRSess_GetAttributes( ESYS_CONTEXT *esysContext, ESYS_TR session, TPMA_SESSION *flags) { UNUSED(esysContext); UNUSED(session); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } *flags = _session_flags; return rc; } TSS2_RC __wrap_Esys_TRSess_SetAttributes( ESYS_CONTEXT *esysContext, ESYS_TR session, TPMA_SESSION flags, TPMA_SESSION mask) { UNUSED(esysContext); UNUSED(session); _session_flags = flags & mask; return mock(); } TSS2_RC __wrap_Esys_TR_SetAuth( ESYS_CONTEXT *esysContext, ESYS_TR handle, TPM2B_AUTH const *authValue) { UNUSED(esysContext); UNUSED(handle); UNUSED(authValue); return mock(); } TSS2_RC __wrap_Esys_Unseal( ESYS_CONTEXT *esysContext, ESYS_TR itemHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, TPM2B_SENSITIVE_DATA **outData) { UNUSED(esysContext); UNUSED(itemHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_SENSITIVE_DATA *data = calloc(1, sizeof(*data)); if (!data) { return TSS2_ESYS_RC_MEMORY; } /* callers of this expect a 32 byte AES256 key in hex */ static const char key[] = "884c740971d77b883f043805d474c2d91c2780f463c4ead387905ef3f8a03f34"; data->size = sizeof(key) - 1; memcpy(data->buffer, key, sizeof(key) - 1); *outData = data; return rc; } TSS2_RC Esys_ObjectChangeAuth( ESYS_CONTEXT *esysContext, ESYS_TR objectHandle, ESYS_TR parentHandle, ESYS_TR shandle1, ESYS_TR shandle2, ESYS_TR shandle3, const TPM2B_AUTH *newAuth, TPM2B_PRIVATE **outPrivate) { UNUSED(esysContext); UNUSED(objectHandle); UNUSED(shandle1); UNUSED(shandle2); UNUSED(shandle3); UNUSED(newAuth); TSS2_RC rc = mock(); if (rc != TSS2_RC_SUCCESS) { return rc; } TPM2B_PRIVATE *priv = calloc(1, sizeof(*priv)); if (!priv) { LOGE("oom"); return TSS2_ESYS_RC_MEMORY; } priv->size = 42; memset(priv->buffer, 0xFF, priv->size); *outPrivate = priv; return rc; } CK_RV __wrap_backend_fapi_init(void) { return mock(); } TSS2_RC __wrap_Tss2_TctiLdr_Initialize( const char *nameConf, TSS2_TCTI_CONTEXT **context) { UNUSED(nameConf); *context = (TSS2_TCTI_CONTEXT *)0xDEFACED; return mock(); } TSS2_RC __wrap_Tss2_TctiLdr_Finalize( TSS2_TCTI_CONTEXT **context) { *context = NULL; return mock(); } #endif /* TEST_WRAP_TPM_H_ */ tpm2-pkcs11-1.9.1/Makefile.am0000644000175100017510000001101514667615111011231 # SPDX-License-Identifier: BSD-2-Clause INCLUDE_DIRS = -I$(srcdir)/src -I$(top_srcdir)/src/lib ACLOCAL_AMFLAGS = -I m4 --install AM_CFLAGS = $(INCLUDE_DIRS) $(EXTRA_CFLAGS) $(CODE_COVERAGE_CFLAGS) \ $(TSS2_ESYS_CFLAGS) $(TSS2_MU_CFLAGS) $(TSS2_TCTILDR_CFLAGS) \ $(TSS2_RC_CFLAGS) $(SQLITE3_CFLAGS) $(PTHREAD_CFLAGS) \ $(CRYPTO_CFLAGS) $(YAML_CFLAGS) $(TSS2_FAPI_CFLAGS) AM_LDFLAGS = $(EXTRA_LDFLAGS) $(CODE_COVERAGE_LIBS) $(TSS2_ESYS_LIBS) \ $(TSS2_MU_LIBS) $(TSS2_TCTILDR_LIBS) $(TSS2_RC_LIBS) \ $(SQLITE3_LIBS) $(PTHREAD_LIBS) $(CRYPTO_LIBS) $(YAML_LIBS) $(TSS2_FAPI_LIBS) check-programs: $(check_PROGRAMS) JAVAROOT=$(top_builddir)/test/integration # ax_code_coverage if AUTOCONF_CODE_COVERAGE_2019_01_06 include $(top_srcdir)/aminclude_static.am clean-local: code-coverage-clean distclean-local: code-coverage-dist-clean else @CODE_COVERAGE_RULES@ endif # Add source code files from bootstrap include src_vars.mk EXTRA_DIST = \ LICENSE \ docs \ test/fake-tpm \ test/integration/scripts \ misc/p11-kit \ tools \ VERSION # Generate the AUTHORS file from git log AUTHORS : $(AM_V_GEN)git log --format='%aN <%aE>' | grep -v 'users.noreply.github.com' | sort | \ uniq -c | sort -nr | sed 's/^\s*//' | cut -d" " -f2- > $@ EXTRA_DIST += AUTHORS CLEANFILES = AUTHORS # pkg-config setup. pc-file declarations happen in the corresponding modules pkgconfig_DATA = DISTCLEANFILES = $(pkgconfig_DATA) ### PKCS#11 Library Definition ### libtpm2_pkcs11 = src/libtpm2_pkcs11.la pkgconfig_DATA += lib/tpm2-pkcs11.pc EXTRA_DIST += lib/tpm2-pkcs11.map if HAVE_LD_VERSION_SCRIPT src_libtpm2_pkcs11_la_LDFLAGS = -Wl,--version-script=$(srcdir)/lib/tpm2-pkcs11.map endif # HAVE_LD_VERSION_SCRIPT src_libtpm2_pkcs11_la_LIBADD = $(AM_LDFLAGS) src_libtpm2_pkcs11_la_SOURCES = $(LIB_PKCS11_SRC) $(LIB_PKCS11_INTERNAL_LIB_SRC) if HAVE_PREFIX # Use standard install location when using --prefix lib_LTLIBRARIES = $(libtpm2_pkcs11) else if HAVE_P11KIT # Use P11 kit library module install location p11libdir=$(P11_MODULE_PATH) p11lib_LTLIBRARIES = $(libtpm2_pkcs11) # Use P11 kit module config file install location p11configdir=$(P11_CONFIGS_PATH) p11config_DATA = $(top_srcdir)/misc/p11-kit/tpm2_pkcs11.module else # Use standard install location when P11Kit is not found lib_LTLIBRARIES = $(libtpm2_pkcs11) endif endif AM_DISTCHECK_CONFIGURE_FLAGS = --with-p11kitconfigdir='$$(datarootdir)/p11kitconfigdir' --with-p11kitmoduledir='$$(libdir)' # # Due to limitations in how cmocka works, we build a separate library here so we # can have a PKCS11 shared object with undefined calls into the rest of the lib # code. This allows us to deploy a single library, but be able to intercept calls # during linking with ld wrap to mock out various functions. # # UNIT, INTEGRATION and/or FUZZ can use this library. # # src/lib stuff as a separate archive libtpm2_test_pkcs11 = src/libtpm2_test_pkcs11.la src_libtpm2_test_pkcs11_la_LIBADD = $(AM_LDFLAGS) $(libtpm2_test_internal) src_libtpm2_test_pkcs11_la_SOURCES = $(LIB_PKCS11_SRC) # Internal Testing Unit libtpm2_test_internal = src/libtpm2_test_internal.la src_libtpm2_test_internal_la_LIBADD = $(AM_LDFLAGS) src_libtpm2_test_internal_la_SOURCES = $(LIB_PKCS11_INTERNAL_LIB_SRC) noinst_LTLIBRARIES = $(libtpm2_test_pkcs11) $(libtpm2_test_internal) if ENABLE_ASAN ASAN_ENABLED="true" else ASAN_ENABLED="" endif if HAVE_FAPI FAPI_ENABLED="true" else FAPI_ENABLED="" endif # test harness configuration AM_TESTS_ENVIRONMENT = \ ASAN_ENABLED=$(ASAN_ENABLED) \ FAPI_ENABLED=$(FAPI_ENABLED) \ T=$(abs_top_srcdir) \ PYTHON_INTERPRETER=@PYTHON_INTERPRETER@ \ TEST_FUNC_LIB=$(srcdir)/test/integration/scripts/int-test-funcs.sh \ TEST_FIXTURES=$(abs_top_srcdir)/test/integration/fixtures \ PATH=$(abs_top_srcdir)/tools:./src:$(PATH) \ PYTHONPATH=$(abs_top_srcdir)/tools:$(PYTHONPATH) \ TPM2_PKCS11_MODULE=$(abs_builddir)/src/.libs/libtpm2_pkcs11.so \ TEST_JAVA_ROOT=$(JAVAROOT) \ PACKAGE_URL=$(PACKAGE_URL) \ CC=$(CC) \ dbus-run-session TESTS_LDADD = $(noinst_LTLIBRARIES) $(lib_LTLIBRARIES) $(p11lib_LTLIBRARIES) $(AM_LDFLAGS) $(CMOCKA_LIBS) $(CRYPTO_LIBS) TESTS_CFLAGS = $(CMOCKA_CFLAGS) # Intentionally empty so INTEGRATION and UNIT tests can append to it. check_PROGRAMS = check_SCRIPTS = # include integration tests include Makefile-integration.am # include unit tests include Makefile-unit.am # Include fuzz tests include Makefile-fuzz.am TESTS= \ $(check_PROGRAMS) \ $(check_SCRIPTS) tpm2-pkcs11-1.9.1/configure0000755000175100017510000241756414674407106011132 #! /bin/sh # Guess values for system-dependent variables and create Makefiles. # Generated by GNU Autoconf 2.71 for tpm2-pkcs11 1.9.1. # # Report bugs to . # # # Copyright (C) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation, # Inc. # # # This configure script is free software; the Free Software Foundation # gives unlimited permission to copy, distribute and modify it. ## -------------------- ## ## M4sh Initialization. ## ## -------------------- ## # Be more Bourne compatible DUALCASE=1; export DUALCASE # for MKS sh as_nop=: if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1 then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST else $as_nop case `(set -o) 2>/dev/null` in #( *posix*) : set -o posix ;; #( *) : ;; esac fi # Reset variables that may have inherited troublesome values from # the environment. # IFS needs to be set, to space, tab, and newline, in precisely that order. # (If _AS_PATH_WALK were called with IFS unset, it would have the # side effect of setting IFS to empty, thus disabling word splitting.) # Quoting is to prevent editors from complaining about space-tab. as_nl=' ' export as_nl IFS=" "" $as_nl" PS1='$ ' PS2='> ' PS4='+ ' # Ensure predictable behavior from utilities with locale-dependent output. LC_ALL=C export LC_ALL LANGUAGE=C export LANGUAGE # We cannot yet rely on "unset" to work, but we need these variables # to be unset--not just set to an empty or harmless value--now, to # avoid bugs in old shells (e.g. pre-3.0 UWIN ksh). This construct # also avoids known problems related to "unset" and subshell syntax # in other old shells (e.g. bash 2.01 and pdksh 5.2.14). for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH do eval test \${$as_var+y} \ && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || : done # Ensure that fds 0, 1, and 2 are open. if (exec 3>&0) 2>/dev/null; then :; else exec 0&1) 2>/dev/null; then :; else exec 1>/dev/null; fi if (exec 3>&2) ; then :; else exec 2>/dev/null; fi # The user is always right. if ${PATH_SEPARATOR+false} :; then PATH_SEPARATOR=: (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && { (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 || PATH_SEPARATOR=';' } fi # Find who we are. Look in the path if we contain no directory separator. as_myself= case $0 in #(( *[\\/]* ) as_myself=$0 ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac test -r "$as_dir$0" && as_myself=$as_dir$0 && break done IFS=$as_save_IFS ;; esac # We did not find ourselves, most probably we were run as `sh COMMAND' # in which case we are not to be found in the path. if test "x$as_myself" = x; then as_myself=$0 fi if test ! -f "$as_myself"; then printf "%s\n" "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2 exit 1 fi # Use a proper internal environment variable to ensure we don't fall # into an infinite loop, continuously re-executing ourselves. if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then _as_can_reexec=no; export _as_can_reexec; # We cannot yet assume a decent shell, so we have to provide a # neutralization value for shells without unset; and this also # works around shells that cannot unset nonexistent variables. # Preserve -v and -x to the replacement shell. BASH_ENV=/dev/null ENV=/dev/null (unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV case $- in # (((( *v*x* | *x*v* ) as_opts=-vx ;; *v* ) as_opts=-v ;; *x* ) as_opts=-x ;; * ) as_opts= ;; esac exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"} # Admittedly, this is quite paranoid, since all the known shells bail # out after a failed `exec'. printf "%s\n" "$0: could not re-execute with $CONFIG_SHELL" >&2 exit 255 fi # We don't want this to propagate to other subprocesses. { _as_can_reexec=; unset _as_can_reexec;} if test "x$CONFIG_SHELL" = x; then as_bourne_compatible="as_nop=: if test \${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1 then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which # is contrary to our usage. Disable this feature. alias -g '\${1+\"\$@\"}'='\"\$@\"' setopt NO_GLOB_SUBST else \$as_nop case \`(set -o) 2>/dev/null\` in #( *posix*) : set -o posix ;; #( *) : ;; esac fi " as_required="as_fn_return () { (exit \$1); } as_fn_success () { as_fn_return 0; } as_fn_failure () { as_fn_return 1; } as_fn_ret_success () { return 0; } as_fn_ret_failure () { return 1; } exitcode=0 as_fn_success || { exitcode=1; echo as_fn_success failed.; } as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; } as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; } as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; } if ( set x; as_fn_ret_success y && test x = \"\$1\" ) then : else \$as_nop exitcode=1; echo positional parameters were not saved. fi test x\$exitcode = x0 || exit 1 blah=\$(echo \$(echo blah)) test x\"\$blah\" = xblah || exit 1 test -x / || exit 1" as_suggested=" as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" && test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1 test -n \"\${ZSH_VERSION+set}\${BASH_VERSION+set}\" || ( ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO PATH=/empty FPATH=/empty; export PATH FPATH test \"X\`printf %s \$ECHO\`\" = \"X\$ECHO\" \\ || test \"X\`print -r -- \$ECHO\`\" = \"X\$ECHO\" ) || exit 1 test \$(( 1 + 1 )) = 2 || exit 1" if (eval "$as_required") 2>/dev/null then : as_have_required=yes else $as_nop as_have_required=no fi if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null then : else $as_nop as_save_IFS=$IFS; IFS=$PATH_SEPARATOR as_found=false for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac as_found=: case $as_dir in #( /*) for as_base in sh bash ksh sh5; do # Try only shells that exist, to save several forks. as_shell=$as_dir$as_base if { test -f "$as_shell" || test -f "$as_shell.exe"; } && as_run=a "$as_shell" -c "$as_bourne_compatible""$as_required" 2>/dev/null then : CONFIG_SHELL=$as_shell as_have_required=yes if as_run=a "$as_shell" -c "$as_bourne_compatible""$as_suggested" 2>/dev/null then : break 2 fi fi done;; esac as_found=false done IFS=$as_save_IFS if $as_found then : else $as_nop if { test -f "$SHELL" || test -f "$SHELL.exe"; } && as_run=a "$SHELL" -c "$as_bourne_compatible""$as_required" 2>/dev/null then : CONFIG_SHELL=$SHELL as_have_required=yes fi fi if test "x$CONFIG_SHELL" != x then : export CONFIG_SHELL # We cannot yet assume a decent shell, so we have to provide a # neutralization value for shells without unset; and this also # works around shells that cannot unset nonexistent variables. # Preserve -v and -x to the replacement shell. BASH_ENV=/dev/null ENV=/dev/null (unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV case $- in # (((( *v*x* | *x*v* ) as_opts=-vx ;; *v* ) as_opts=-v ;; *x* ) as_opts=-x ;; * ) as_opts= ;; esac exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"} # Admittedly, this is quite paranoid, since all the known shells bail # out after a failed `exec'. printf "%s\n" "$0: could not re-execute with $CONFIG_SHELL" >&2 exit 255 fi if test x$as_have_required = xno then : printf "%s\n" "$0: This script requires a shell more modern than all" printf "%s\n" "$0: the shells that I found on your system." if test ${ZSH_VERSION+y} ; then printf "%s\n" "$0: In particular, zsh $ZSH_VERSION has bugs and should" printf "%s\n" "$0: be upgraded to zsh 4.3.4 or later." else printf "%s\n" "$0: Please tell bug-autoconf@gnu.org and $0: https://github.com/tpm2-software/tpm2-pkcs11/issues $0: about your system, including any error possibly output $0: before this message. Then install a modern shell, or $0: manually run the script under such a shell if you do $0: have one." fi exit 1 fi fi fi SHELL=${CONFIG_SHELL-/bin/sh} export SHELL # Unset more variables known to interfere with behavior of common tools. CLICOLOR_FORCE= GREP_OPTIONS= unset CLICOLOR_FORCE GREP_OPTIONS ## --------------------- ## ## M4sh Shell Functions. ## ## --------------------- ## # as_fn_unset VAR # --------------- # Portably unset VAR. as_fn_unset () { { eval $1=; unset $1;} } as_unset=as_fn_unset # as_fn_set_status STATUS # ----------------------- # Set $? to STATUS, without forking. as_fn_set_status () { return $1 } # as_fn_set_status # as_fn_exit STATUS # ----------------- # Exit the shell with STATUS, even in a "trap 0" or "set -e" context. as_fn_exit () { set +e as_fn_set_status $1 exit $1 } # as_fn_exit # as_fn_nop # --------- # Do nothing but, unlike ":", preserve the value of $?. as_fn_nop () { return $? } as_nop=as_fn_nop # as_fn_mkdir_p # ------------- # Create "$as_dir" as a directory, including parents if necessary. as_fn_mkdir_p () { case $as_dir in #( -*) as_dir=./$as_dir;; esac test -d "$as_dir" || eval $as_mkdir_p || { as_dirs= while :; do case $as_dir in #( *\'*) as_qdir=`printf "%s\n" "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'( *) as_qdir=$as_dir;; esac as_dirs="'$as_qdir' $as_dirs" as_dir=`$as_dirname -- "$as_dir" || $as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$as_dir" : 'X\(//\)[^/]' \| \ X"$as_dir" : 'X\(//\)$' \| \ X"$as_dir" : 'X\(/\)' \| . 2>/dev/null || printf "%s\n" X"$as_dir" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` test -d "$as_dir" && break done test -z "$as_dirs" || eval "mkdir $as_dirs" } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir" } # as_fn_mkdir_p # as_fn_executable_p FILE # ----------------------- # Test if FILE is an executable regular file. as_fn_executable_p () { test -f "$1" && test -x "$1" } # as_fn_executable_p # as_fn_append VAR VALUE # ---------------------- # Append the text in VALUE to the end of the definition contained in VAR. Take # advantage of any shell optimizations that allow amortized linear growth over # repeated appends, instead of the typical quadratic growth present in naive # implementations. if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null then : eval 'as_fn_append () { eval $1+=\$2 }' else $as_nop as_fn_append () { eval $1=\$$1\$2 } fi # as_fn_append # as_fn_arith ARG... # ------------------ # Perform arithmetic evaluation on the ARGs, and store the result in the # global $as_val. Take advantage of shells that can avoid forks. The arguments # must be portable across $(()) and expr. if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null then : eval 'as_fn_arith () { as_val=$(( $* )) }' else $as_nop as_fn_arith () { as_val=`expr "$@" || test $? -eq 1` } fi # as_fn_arith # as_fn_nop # --------- # Do nothing but, unlike ":", preserve the value of $?. as_fn_nop () { return $? } as_nop=as_fn_nop # as_fn_error STATUS ERROR [LINENO LOG_FD] # ---------------------------------------- # Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are # provided, also output the error to LOG_FD, referencing LINENO. Then exit the # script with STATUS, using 1 if that was 0. as_fn_error () { as_status=$1; test $as_status -eq 0 && as_status=1 if test "$4"; then as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: $2" >&$4 fi printf "%s\n" "$as_me: error: $2" >&2 as_fn_exit $as_status } # as_fn_error if expr a : '\(a\)' >/dev/null 2>&1 && test "X`expr 00001 : '.*\(...\)'`" = X001; then as_expr=expr else as_expr=false fi if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then as_basename=basename else as_basename=false fi if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then as_dirname=dirname else as_dirname=false fi as_me=`$as_basename -- "$0" || $as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \ X"$0" : 'X\(//\)$' \| \ X"$0" : 'X\(/\)' \| . 2>/dev/null || printf "%s\n" X/"$0" | sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/ q } /^X\/\(\/\/\)$/{ s//\1/ q } /^X\/\(\/\).*/{ s//\1/ q } s/.*/./; q'` # Avoid depending upon Character Ranges. as_cr_letters='abcdefghijklmnopqrstuvwxyz' as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ' as_cr_Letters=$as_cr_letters$as_cr_LETTERS as_cr_digits='0123456789' as_cr_alnum=$as_cr_Letters$as_cr_digits as_lineno_1=$LINENO as_lineno_1a=$LINENO as_lineno_2=$LINENO as_lineno_2a=$LINENO eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" && test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || { # Blame Lee E. McMahon (1931-1989) for sed's syntax. :-) sed -n ' p /[$]LINENO/= ' <$as_myself | sed ' s/[$]LINENO.*/&-/ t lineno b :lineno N :loop s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/ t loop s/-\n.*// ' >$as_me.lineno && chmod +x "$as_me.lineno" || { printf "%s\n" "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; } # If we had to re-execute with $CONFIG_SHELL, we're ensured to have # already done that, so ensure we don't try to do so again and fall # in an infinite loop. This has already happened in practice. _as_can_reexec=no; export _as_can_reexec # Don't try to exec as it changes $[0], causing all sort of problems # (the dirname of $[0] is not the place where we might find the # original and so on. Autoconf is especially sensitive to this). . "./$as_me.lineno" # Exit status is that of the last command. exit } # Determine whether it's possible to make 'echo' print without a newline. # These variables are no longer used directly by Autoconf, but are AC_SUBSTed # for compatibility with existing Makefiles. ECHO_C= ECHO_N= ECHO_T= case `echo -n x` in #((((( -n*) case `echo 'xy\c'` in *c*) ECHO_T=' ';; # ECHO_T is single tab character. xy) ECHO_C='\c';; *) echo `echo ksh88 bug on AIX 6.1` > /dev/null ECHO_T=' ';; esac;; *) ECHO_N='-n';; esac # For backward compatibility with old third-party macros, we provide # the shell variables $as_echo and $as_echo_n. New code should use # AS_ECHO(["message"]) and AS_ECHO_N(["message"]), respectively. as_echo='printf %s\n' as_echo_n='printf %s' rm -f conf$$ conf$$.exe conf$$.file if test -d conf$$.dir; then rm -f conf$$.dir/conf$$.file else rm -f conf$$.dir mkdir conf$$.dir 2>/dev/null fi if (echo >conf$$.file) 2>/dev/null; then if ln -s conf$$.file conf$$ 2>/dev/null; then as_ln_s='ln -s' # ... but there are two gotchas: # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail. # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable. # In both cases, we have to default to `cp -pR'. ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe || as_ln_s='cp -pR' elif ln conf$$.file conf$$ 2>/dev/null; then as_ln_s=ln else as_ln_s='cp -pR' fi else as_ln_s='cp -pR' fi rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file rmdir conf$$.dir 2>/dev/null if mkdir -p . 2>/dev/null; then as_mkdir_p='mkdir -p "$as_dir"' else test -d ./-p && rmdir ./-p as_mkdir_p=false fi as_test_x='test -x' as_executable_p=as_fn_executable_p # Sed expression to map a string onto a valid CPP name. as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'" # Sed expression to map a string onto a valid variable name. as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'" SHELL=${CONFIG_SHELL-/bin/sh} test -n "$DJDIR" || exec 7<&0 &1 # Name of the host. # hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status, # so uname gets run too. ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q` # # Initializations. # ac_default_prefix=/usr/local ac_clean_files= ac_config_libobj_dir=. LIBOBJS= cross_compiling=no subdirs= MFLAGS= MAKEFLAGS= # Identity of this package. PACKAGE_NAME='tpm2-pkcs11' PACKAGE_TARNAME='tpm2-pkcs11' PACKAGE_VERSION='1.9.1' PACKAGE_STRING='tpm2-pkcs11 1.9.1' PACKAGE_BUGREPORT='https://github.com/tpm2-software/tpm2-pkcs11/issues' PACKAGE_URL='https://github.com/tpm2-software/tpm2-pkcs11' # Factoring default headers for most tests. ac_includes_default="\ #include #ifdef HAVE_STDIO_H # include #endif #ifdef HAVE_STDLIB_H # include #endif #ifdef HAVE_STRING_H # include #endif #ifdef HAVE_INTTYPES_H # include #endif #ifdef HAVE_STDINT_H # include #endif #ifdef HAVE_STRINGS_H # include #endif #ifdef HAVE_SYS_TYPES_H # include #endif #ifdef HAVE_SYS_STAT_H # include #endif #ifdef HAVE_UNISTD_H # include #endif" ac_header_c_list= ac_subst_vars='am__EXEEXT_FALSE am__EXEEXT_TRUE LTLIBOBJS LIBOBJS EXTRA_LDFLAGS EXTRA_CFLAGS HAVE_PREFIX_FALSE HAVE_PREFIX_TRUE HAVE_P11KIT_FALSE HAVE_P11KIT_TRUE P11_CONFIGS_PATH P11_MODULE_PATH P11KIT_LIBS P11KIT_CFLAGS p11kitmoduledir p11kitconfigdir ENABLE_INTEGRATION_FALSE ENABLE_INTEGRATION_TRUE ENABLE_INTEGRATION tss2_provision tpm2tss_genkey tpm2_abrmd sqlite3 bash p11tool pkcs11_tool expect modutil certutil ss TABRMD_TCTI tpm_server swtpm TSS2_TCTI_TABRMD_LIBS TSS2_TCTI_TABRMD_CFLAGS OPENSC_PKCS11_LIBS OPENSC_PKCS11_CFLAGS enginesdir tpm2_changeauth tpm2_import tpm2_getcap tpm2_sign tpm2_encryptdecrypt tpm2_unseal tpm2_loadexternal tpm2_load tpm2_readpublic tpm2_evictcontrol tpm2_create tpm2_createprimary JAVA JAVAC CMOCKA_LIBS CMOCKA_CFLAGS UNIT_FALSE UNIT_TRUE ENABLE_ASAN_FALSE ENABLE_ASAN_TRUE FUZZING_CFLAGS FUZZING_FLAGS FUZZING_FALSE FUZZING_TRUE HAVE_FAPI_FALSE HAVE_FAPI_TRUE TSS2_FAPI_LIBS TSS2_FAPI_CFLAGS HAVE_LD_VERSION_SCRIPT_FALSE HAVE_LD_VERSION_SCRIPT_TRUE PTHREAD_CFLAGS PTHREAD_LIBS PTHREAD_CXX PTHREAD_CC ax_pthread_config CPP PYTHON_INTERPRETER pkgpyexecdir pyexecdir pkgpythondir pythondir PYTHON_EXEC_PREFIX PYTHON_PREFIX PYTHON_PLATFORM PYTHON_VERSION PYTHON TSS2_RC_LIBS TSS2_RC_CFLAGS TSS2_TCTILDR_LIBS TSS2_TCTILDR_CFLAGS TSS2_MU_LIBS TSS2_MU_CFLAGS TSS2_ESYS_LIBS TSS2_ESYS_CFLAGS HAVE_OSSL3_FALSE HAVE_OSSL3_TRUE CRYPTO_LIBS CRYPTO_CFLAGS YAML_LIBS YAML_CFLAGS SQLITE3_LIBS SQLITE3_CFLAGS PKG_CONFIG_LIBDIR PKG_CONFIG_PATH PKG_CONFIG AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE CODE_COVERAGE_LIBS CODE_COVERAGE_CXXFLAGS CODE_COVERAGE_CFLAGS CODE_COVERAGE_CPPFLAGS GENHTML LCOV GCOV ifnGNUmake ifGNUmake CODE_COVERAGE_ENABLED CODE_COVERAGE_ENABLED_FALSE CODE_COVERAGE_ENABLED_TRUE pkgconfigdir AM_BACKSLASH AM_DEFAULT_VERBOSITY AM_DEFAULT_V AM_V CSCOPE ETAGS CTAGS am__fastdepCC_FALSE am__fastdepCC_TRUE CCDEPMODE am__nodep AMDEPBACKSLASH AMDEP_FALSE AMDEP_TRUE am__include DEPDIR am__untar am__tar AMTAR am__leading_dot SET_MAKE mkdir_p MKDIR_P INSTALL_STRIP_PROGRAM install_sh MAKEINFO AUTOHEADER AUTOMAKE AUTOCONF ACLOCAL VERSION PACKAGE CYGPATH_W am__isrc INSTALL_DATA INSTALL_SCRIPT INSTALL_PROGRAM LT_SYS_LIBRARY_PATH OTOOL64 OTOOL LIPO NMEDIT DSYMUTIL MANIFEST_TOOL AWK RANLIB STRIP ac_ct_AR AR DLLTOOL OBJDUMP FILECMD LN_S NM ac_ct_DUMPBIN DUMPBIN LD FGREP EGREP GREP SED host_os host_vendor host_cpu host build_os build_vendor build_cpu build LIBTOOL OBJEXT EXEEXT ac_ct_CC CPPFLAGS LDFLAGS CFLAGS CC DISTCHECK_CONFIGURE_FLAGS target_alias host_alias build_alias LIBS ECHO_T ECHO_N ECHO_C DEFS mandir localedir libdir psdir pdfdir dvidir htmldir infodir docdir oldincludedir includedir runstatedir localstatedir sharedstatedir sysconfdir datadir datarootdir libexecdir sbindir bindir program_transform_name prefix exec_prefix PACKAGE_URL PACKAGE_BUGREPORT PACKAGE_STRING PACKAGE_VERSION PACKAGE_TARNAME PACKAGE_NAME PATH_SEPARATOR SHELL am__quote' ac_subst_files='' ac_user_opts=' enable_option_checking enable_debug enable_shared enable_static with_pic enable_fast_install with_aix_soname with_gnu_ld with_sysroot enable_libtool_lock enable_dependency_tracking enable_silent_rules with_pkgconfigdir with_gcov enable_code_coverage enable_ptool_checks with_python_sys_prefix with_python_prefix with_python_exec_prefix enable_ld_version_script enable_esapi_session_manage_flags with_fapi enable_unit enable_fuzzing enable_asan enable_hardening enable_overflow with_fuzzing_flags enable_integration with_storedir enable_pack with_p11kitconfigdir with_p11kitmoduledir ' ac_precious_vars='build_alias host_alias target_alias CC CFLAGS LDFLAGS LIBS CPPFLAGS LT_SYS_LIBRARY_PATH PKG_CONFIG PKG_CONFIG_PATH PKG_CONFIG_LIBDIR SQLITE3_CFLAGS SQLITE3_LIBS YAML_CFLAGS YAML_LIBS CRYPTO_CFLAGS CRYPTO_LIBS TSS2_ESYS_CFLAGS TSS2_ESYS_LIBS TSS2_MU_CFLAGS TSS2_MU_LIBS TSS2_TCTILDR_CFLAGS TSS2_TCTILDR_LIBS TSS2_RC_CFLAGS TSS2_RC_LIBS PYTHON CPP TSS2_FAPI_CFLAGS TSS2_FAPI_LIBS CMOCKA_CFLAGS CMOCKA_LIBS enginesdir OPENSC_PKCS11_CFLAGS OPENSC_PKCS11_LIBS TSS2_TCTI_TABRMD_CFLAGS TSS2_TCTI_TABRMD_LIBS P11KIT_CFLAGS P11KIT_LIBS P11_MODULE_PATH P11_CONFIGS_PATH' # Initialize some variables set by options. ac_init_help= ac_init_version=false ac_unrecognized_opts= ac_unrecognized_sep= # The variables have the same names as the options, with # dashes changed to underlines. cache_file=/dev/null exec_prefix=NONE no_create= no_recursion= prefix=NONE program_prefix=NONE program_suffix=NONE program_transform_name=s,x,x, silent= site= srcdir= verbose= x_includes=NONE x_libraries=NONE # Installation directory options. # These are left unexpanded so users can "make install exec_prefix=/foo" # and all the variables that are supposed to be based on exec_prefix # by default will actually change. # Use braces instead of parens because sh, perl, etc. also accept them. # (The list follows the same order as the GNU Coding Standards.) bindir='${exec_prefix}/bin' sbindir='${exec_prefix}/sbin' libexecdir='${exec_prefix}/libexec' datarootdir='${prefix}/share' datadir='${datarootdir}' sysconfdir='${prefix}/etc' sharedstatedir='${prefix}/com' localstatedir='${prefix}/var' runstatedir='${localstatedir}/run' includedir='${prefix}/include' oldincludedir='/usr/include' docdir='${datarootdir}/doc/${PACKAGE_TARNAME}' infodir='${datarootdir}/info' htmldir='${docdir}' dvidir='${docdir}' pdfdir='${docdir}' psdir='${docdir}' libdir='${exec_prefix}/lib' localedir='${datarootdir}/locale' mandir='${datarootdir}/man' ac_prev= ac_dashdash= for ac_option do # If the previous option needs an argument, assign it. if test -n "$ac_prev"; then eval $ac_prev=\$ac_option ac_prev= continue fi case $ac_option in *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;; *=) ac_optarg= ;; *) ac_optarg=yes ;; esac case $ac_dashdash$ac_option in --) ac_dashdash=yes ;; -bindir | --bindir | --bindi | --bind | --bin | --bi) ac_prev=bindir ;; -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*) bindir=$ac_optarg ;; -build | --build | --buil | --bui | --bu) ac_prev=build_alias ;; -build=* | --build=* | --buil=* | --bui=* | --bu=*) build_alias=$ac_optarg ;; -cache-file | --cache-file | --cache-fil | --cache-fi \ | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c) ac_prev=cache_file ;; -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \ | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*) cache_file=$ac_optarg ;; --config-cache | -C) cache_file=config.cache ;; -datadir | --datadir | --datadi | --datad) ac_prev=datadir ;; -datadir=* | --datadir=* | --datadi=* | --datad=*) datadir=$ac_optarg ;; -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \ | --dataroo | --dataro | --datar) ac_prev=datarootdir ;; -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \ | --dataroot=* | --dataroo=* | --dataro=* | --datar=*) datarootdir=$ac_optarg ;; -disable-* | --disable-*) ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid feature name: \`$ac_useropt'" ac_useropt_orig=$ac_useropt ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "enable_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval enable_$ac_useropt=no ;; -docdir | --docdir | --docdi | --doc | --do) ac_prev=docdir ;; -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*) docdir=$ac_optarg ;; -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv) ac_prev=dvidir ;; -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*) dvidir=$ac_optarg ;; -enable-* | --enable-*) ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid feature name: \`$ac_useropt'" ac_useropt_orig=$ac_useropt ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "enable_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval enable_$ac_useropt=\$ac_optarg ;; -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \ | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \ | --exec | --exe | --ex) ac_prev=exec_prefix ;; -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \ | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \ | --exec=* | --exe=* | --ex=*) exec_prefix=$ac_optarg ;; -gas | --gas | --ga | --g) # Obsolete; use --with-gas. with_gas=yes ;; -help | --help | --hel | --he | -h) ac_init_help=long ;; -help=r* | --help=r* | --hel=r* | --he=r* | -hr*) ac_init_help=recursive ;; -help=s* | --help=s* | --hel=s* | --he=s* | -hs*) ac_init_help=short ;; -host | --host | --hos | --ho) ac_prev=host_alias ;; -host=* | --host=* | --hos=* | --ho=*) host_alias=$ac_optarg ;; -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht) ac_prev=htmldir ;; -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \ | --ht=*) htmldir=$ac_optarg ;; -includedir | --includedir | --includedi | --included | --include \ | --includ | --inclu | --incl | --inc) ac_prev=includedir ;; -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \ | --includ=* | --inclu=* | --incl=* | --inc=*) includedir=$ac_optarg ;; -infodir | --infodir | --infodi | --infod | --info | --inf) ac_prev=infodir ;; -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*) infodir=$ac_optarg ;; -libdir | --libdir | --libdi | --libd) ac_prev=libdir ;; -libdir=* | --libdir=* | --libdi=* | --libd=*) libdir=$ac_optarg ;; -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \ | --libexe | --libex | --libe) ac_prev=libexecdir ;; -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \ | --libexe=* | --libex=* | --libe=*) libexecdir=$ac_optarg ;; -localedir | --localedir | --localedi | --localed | --locale) ac_prev=localedir ;; -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*) localedir=$ac_optarg ;; -localstatedir | --localstatedir | --localstatedi | --localstated \ | --localstate | --localstat | --localsta | --localst | --locals) ac_prev=localstatedir ;; -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \ | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*) localstatedir=$ac_optarg ;; -mandir | --mandir | --mandi | --mand | --man | --ma | --m) ac_prev=mandir ;; -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*) mandir=$ac_optarg ;; -nfp | --nfp | --nf) # Obsolete; use --without-fp. with_fp=no ;; -no-create | --no-create | --no-creat | --no-crea | --no-cre \ | --no-cr | --no-c | -n) no_create=yes ;; -no-recursion | --no-recursion | --no-recursio | --no-recursi \ | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r) no_recursion=yes ;; -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \ | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \ | --oldin | --oldi | --old | --ol | --o) ac_prev=oldincludedir ;; -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \ | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \ | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*) oldincludedir=$ac_optarg ;; -prefix | --prefix | --prefi | --pref | --pre | --pr | --p) ac_prev=prefix ;; -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*) prefix=$ac_optarg ;; -program-prefix | --program-prefix | --program-prefi | --program-pref \ | --program-pre | --program-pr | --program-p) ac_prev=program_prefix ;; -program-prefix=* | --program-prefix=* | --program-prefi=* \ | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*) program_prefix=$ac_optarg ;; -program-suffix | --program-suffix | --program-suffi | --program-suff \ | --program-suf | --program-su | --program-s) ac_prev=program_suffix ;; -program-suffix=* | --program-suffix=* | --program-suffi=* \ | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*) program_suffix=$ac_optarg ;; -program-transform-name | --program-transform-name \ | --program-transform-nam | --program-transform-na \ | --program-transform-n | --program-transform- \ | --program-transform | --program-transfor \ | --program-transfo | --program-transf \ | --program-trans | --program-tran \ | --progr-tra | --program-tr | --program-t) ac_prev=program_transform_name ;; -program-transform-name=* | --program-transform-name=* \ | --program-transform-nam=* | --program-transform-na=* \ | --program-transform-n=* | --program-transform-=* \ | --program-transform=* | --program-transfor=* \ | --program-transfo=* | --program-transf=* \ | --program-trans=* | --program-tran=* \ | --progr-tra=* | --program-tr=* | --program-t=*) program_transform_name=$ac_optarg ;; -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd) ac_prev=pdfdir ;; -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*) pdfdir=$ac_optarg ;; -psdir | --psdir | --psdi | --psd | --ps) ac_prev=psdir ;; -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*) psdir=$ac_optarg ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil) silent=yes ;; -runstatedir | --runstatedir | --runstatedi | --runstated \ | --runstate | --runstat | --runsta | --runst | --runs \ | --run | --ru | --r) ac_prev=runstatedir ;; -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \ | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \ | --run=* | --ru=* | --r=*) runstatedir=$ac_optarg ;; -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb) ac_prev=sbindir ;; -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \ | --sbi=* | --sb=*) sbindir=$ac_optarg ;; -sharedstatedir | --sharedstatedir | --sharedstatedi \ | --sharedstated | --sharedstate | --sharedstat | --sharedsta \ | --sharedst | --shareds | --shared | --share | --shar \ | --sha | --sh) ac_prev=sharedstatedir ;; -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \ | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \ | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \ | --sha=* | --sh=*) sharedstatedir=$ac_optarg ;; -site | --site | --sit) ac_prev=site ;; -site=* | --site=* | --sit=*) site=$ac_optarg ;; -srcdir | --srcdir | --srcdi | --srcd | --src | --sr) ac_prev=srcdir ;; -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*) srcdir=$ac_optarg ;; -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \ | --syscon | --sysco | --sysc | --sys | --sy) ac_prev=sysconfdir ;; -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \ | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*) sysconfdir=$ac_optarg ;; -target | --target | --targe | --targ | --tar | --ta | --t) ac_prev=target_alias ;; -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*) target_alias=$ac_optarg ;; -v | -verbose | --verbose | --verbos | --verbo | --verb) verbose=yes ;; -version | --version | --versio | --versi | --vers | -V) ac_init_version=: ;; -with-* | --with-*) ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid package name: \`$ac_useropt'" ac_useropt_orig=$ac_useropt ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "with_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval with_$ac_useropt=\$ac_optarg ;; -without-* | --without-*) ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'` # Reject names that are not valid shell variable names. expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null && as_fn_error $? "invalid package name: \`$ac_useropt'" ac_useropt_orig=$ac_useropt ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'` case $ac_user_opts in *" "with_$ac_useropt" "*) ;; *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig" ac_unrecognized_sep=', ';; esac eval with_$ac_useropt=no ;; --x) # Obsolete; use --with-x. with_x=yes ;; -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \ | --x-incl | --x-inc | --x-in | --x-i) ac_prev=x_includes ;; -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \ | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*) x_includes=$ac_optarg ;; -x-libraries | --x-libraries | --x-librarie | --x-librari \ | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l) ac_prev=x_libraries ;; -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \ | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*) x_libraries=$ac_optarg ;; -*) as_fn_error $? "unrecognized option: \`$ac_option' Try \`$0 --help' for more information" ;; *=*) ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='` # Reject names that are not valid shell variable names. case $ac_envvar in #( '' | [0-9]* | *[!_$as_cr_alnum]* ) as_fn_error $? "invalid variable name: \`$ac_envvar'" ;; esac eval $ac_envvar=\$ac_optarg export $ac_envvar ;; *) # FIXME: should be removed in autoconf 3.0. printf "%s\n" "$as_me: WARNING: you should use --build, --host, --target" >&2 expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null && printf "%s\n" "$as_me: WARNING: invalid host type: $ac_option" >&2 : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}" ;; esac done if test -n "$ac_prev"; then ac_option=--`echo $ac_prev | sed 's/_/-/g'` as_fn_error $? "missing argument to $ac_option" fi if test -n "$ac_unrecognized_opts"; then case $enable_option_checking in no) ;; fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;; *) printf "%s\n" "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;; esac fi # Check all directory arguments for consistency. for ac_var in exec_prefix prefix bindir sbindir libexecdir datarootdir \ datadir sysconfdir sharedstatedir localstatedir includedir \ oldincludedir docdir infodir htmldir dvidir pdfdir psdir \ libdir localedir mandir runstatedir do eval ac_val=\$$ac_var # Remove trailing slashes. case $ac_val in */ ) ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'` eval $ac_var=\$ac_val;; esac # Be sure to have absolute directory names. case $ac_val in [\\/$]* | ?:[\\/]* ) continue;; NONE | '' ) case $ac_var in *prefix ) continue;; esac;; esac as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val" done # There might be people who depend on the old broken behavior: `$host' # used to hold the argument of --host etc. # FIXME: To remove some day. build=$build_alias host=$host_alias target=$target_alias # FIXME: To remove some day. if test "x$host_alias" != x; then if test "x$build_alias" = x; then cross_compiling=maybe elif test "x$build_alias" != "x$host_alias"; then cross_compiling=yes fi fi ac_tool_prefix= test -n "$host_alias" && ac_tool_prefix=$host_alias- test "$silent" = yes && exec 6>/dev/null ac_pwd=`pwd` && test -n "$ac_pwd" && ac_ls_di=`ls -di .` && ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` || as_fn_error $? "working directory cannot be determined" test "X$ac_ls_di" = "X$ac_pwd_ls_di" || as_fn_error $? "pwd does not report name of working directory" # Find the source files, if location was not specified. if test -z "$srcdir"; then ac_srcdir_defaulted=yes # Try the directory containing this script, then the parent directory. ac_confdir=`$as_dirname -- "$as_myself" || $as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$as_myself" : 'X\(//\)[^/]' \| \ X"$as_myself" : 'X\(//\)$' \| \ X"$as_myself" : 'X\(/\)' \| . 2>/dev/null || printf "%s\n" X"$as_myself" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` srcdir=$ac_confdir if test ! -r "$srcdir/$ac_unique_file"; then srcdir=.. fi else ac_srcdir_defaulted=no fi if test ! -r "$srcdir/$ac_unique_file"; then test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .." as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir" fi ac_msg="sources are in $srcdir, but \`cd $srcdir' does not work" ac_abs_confdir=`( cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg" pwd)` # When building in place, set srcdir=. if test "$ac_abs_confdir" = "$ac_pwd"; then srcdir=. fi # Remove unnecessary trailing slashes from srcdir. # Double slashes in file names in object file debugging info # mess up M-x gdb in Emacs. case $srcdir in */) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;; esac for ac_var in $ac_precious_vars; do eval ac_env_${ac_var}_set=\${${ac_var}+set} eval ac_env_${ac_var}_value=\$${ac_var} eval ac_cv_env_${ac_var}_set=\${${ac_var}+set} eval ac_cv_env_${ac_var}_value=\$${ac_var} done # # Report the --help message. # if test "$ac_init_help" = "long"; then # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF \`configure' configures tpm2-pkcs11 1.9.1 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... To assign environment variables (e.g., CC, CFLAGS...), specify them as VAR=VALUE. See below for descriptions of some of the useful variables. Defaults for the options are specified in brackets. Configuration: -h, --help display this help and exit --help=short display options specific to this package --help=recursive display the short help of all the included packages -V, --version display version information and exit -q, --quiet, --silent do not print \`checking ...' messages --cache-file=FILE cache test results in FILE [disabled] -C, --config-cache alias for \`--cache-file=config.cache' -n, --no-create do not create output files --srcdir=DIR find the sources in DIR [configure dir or \`..'] Installation directories: --prefix=PREFIX install architecture-independent files in PREFIX [$ac_default_prefix] --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX [PREFIX] By default, \`make install' will install all the files in \`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc. You can specify an installation prefix other than \`$ac_default_prefix' using \`--prefix', for instance \`--prefix=\$HOME'. For better control, use the options below. Fine tuning of the installation directories: --bindir=DIR user executables [EPREFIX/bin] --sbindir=DIR system admin executables [EPREFIX/sbin] --libexecdir=DIR program executables [EPREFIX/libexec] --sysconfdir=DIR read-only single-machine data [PREFIX/etc] --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com] --localstatedir=DIR modifiable single-machine data [PREFIX/var] --runstatedir=DIR modifiable per-process data [LOCALSTATEDIR/run] --libdir=DIR object code libraries [EPREFIX/lib] --includedir=DIR C header files [PREFIX/include] --oldincludedir=DIR C header files for non-gcc [/usr/include] --datarootdir=DIR read-only arch.-independent data root [PREFIX/share] --datadir=DIR read-only architecture-independent data [DATAROOTDIR] --infodir=DIR info documentation [DATAROOTDIR/info] --localedir=DIR locale-dependent data [DATAROOTDIR/locale] --mandir=DIR man documentation [DATAROOTDIR/man] --docdir=DIR documentation root [DATAROOTDIR/doc/tpm2-pkcs11] --htmldir=DIR html documentation [DOCDIR] --dvidir=DIR dvi documentation [DOCDIR] --pdfdir=DIR pdf documentation [DOCDIR] --psdir=DIR ps documentation [DOCDIR] _ACEOF cat <<\_ACEOF Program names: --program-prefix=PREFIX prepend PREFIX to installed program names --program-suffix=SUFFIX append SUFFIX to installed program names --program-transform-name=PROGRAM run sed PROGRAM on installed program names System types: --build=BUILD configure for building on BUILD [guessed] --host=HOST cross-compile to build programs to run on HOST [BUILD] _ACEOF fi if test -n "$ac_init_help"; then case $ac_init_help in short | recursive ) echo "Configuration of tpm2-pkcs11 1.9.1:";; esac cat <<\_ACEOF Optional Features: --disable-option-checking ignore unrecognized --enable/--with options --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no) --enable-FEATURE[=ARG] include FEATURE [ARG=yes] --enable-debug=[yes/info/profile/no] compile with debugging --enable-shared[=PKGS] build shared libraries [default=yes] --enable-static[=PKGS] build static libraries [default=yes] --enable-fast-install[=PKGS] optimize for fast installation [default=yes] --disable-libtool-lock avoid locking (might break parallel builds) --enable-dependency-tracking do not reject slow dependency extractors --disable-dependency-tracking speeds up one-time build --enable-silent-rules less verbose build output (undo: "make V=1") --disable-silent-rules verbose build output (undo: "make V=0") --enable-code-coverage Whether to enable code coverage support --disable-ptool-checks disable checks for ensuring tpm2_ptool works --enable-ld-version-script enable linker version script (default is enabled when possible) --enable-esapi-session-manage-flags Force the TPM module to manage ESAPI session flags (default is autodetect) --enable-unit build unit tests --enable-fuzzing build the fuzz tests --enable-asan Enable asan build, useful for testing --disable-hardening Disable compiler and linker options to frustrate memory corruption exploits --disable-overflow Disable builtin overflow checks (enabled by default) --enable-integration build and execute integration tests --enable-pack=[yes/no] Pack the structures. (default is no, except on Windows, where it defaults to packing) Optional Packages: --with-PACKAGE[=ARG] use PACKAGE [ARG=yes] --without-PACKAGE do not use PACKAGE (same as --with-PACKAGE=no) --with-pic[=PKGS] try to use only PIC/non-PIC objects [default=use both] --with-aix-soname=aix|svr4|both shared library versioning (aka "SONAME") variant to provide on AIX, [default=aix]. --with-gnu-ld assume the C compiler uses GNU ld [default=no] --with-sysroot[=DIR] Search for dependent libraries within DIR (or the compiler's sysroot if not specified). --with-pkgconfigdir pkg-config installation directory ['${libdir}/pkgconfig'] --with-gcov=GCOV use given GCOV for coverage (GCOV=gcov). --with-python-sys-prefix use Python's sys.prefix and sys.exec_prefix values --with-python_prefix override the default PYTHON_PREFIX --with-python_exec_prefix override the default PYTHON_EXEC_PREFIX --with-fapi enable or disable the fapi backend. Default is "auto" to autodetect --with-fuzzing-flags=FLAGS flags to pass to libfuzzer executables --with-storedir=DIR Store directory for searching, defaults to /etc/tpm2_pkcs11 --with-p11kitconfigdir=DIR directory for p11kit config --with-p11kitmoduledir=DIR directory for p11 libraries Some influential environment variables: CC C compiler command CFLAGS C compiler flags LDFLAGS linker flags, e.g. -L if you have libraries in a nonstandard directory LIBS libraries to pass to the linker, e.g. -l CPPFLAGS (Objective) C/C++ preprocessor flags, e.g. -I if you have headers in a nonstandard directory LT_SYS_LIBRARY_PATH User-defined run-time library search path. PKG_CONFIG path to pkg-config utility PKG_CONFIG_PATH directories to add to pkg-config's search path PKG_CONFIG_LIBDIR path overriding pkg-config's built-in search path SQLITE3_CFLAGS C compiler flags for SQLITE3, overriding pkg-config SQLITE3_LIBS linker flags for SQLITE3, overriding pkg-config YAML_CFLAGS C compiler flags for YAML, overriding pkg-config YAML_LIBS linker flags for YAML, overriding pkg-config CRYPTO_CFLAGS C compiler flags for CRYPTO, overriding pkg-config CRYPTO_LIBS linker flags for CRYPTO, overriding pkg-config TSS2_ESYS_CFLAGS C compiler flags for TSS2_ESYS, overriding pkg-config TSS2_ESYS_LIBS linker flags for TSS2_ESYS, overriding pkg-config TSS2_MU_CFLAGS C compiler flags for TSS2_MU, overriding pkg-config TSS2_MU_LIBS linker flags for TSS2_MU, overriding pkg-config TSS2_TCTILDR_CFLAGS C compiler flags for TSS2_TCTILDR, overriding pkg-config TSS2_TCTILDR_LIBS linker flags for TSS2_TCTILDR, overriding pkg-config TSS2_RC_CFLAGS C compiler flags for TSS2_RC, overriding pkg-config TSS2_RC_LIBS linker flags for TSS2_RC, overriding pkg-config PYTHON the Python interpreter CPP C preprocessor TSS2_FAPI_CFLAGS C compiler flags for TSS2_FAPI, overriding pkg-config TSS2_FAPI_LIBS linker flags for TSS2_FAPI, overriding pkg-config CMOCKA_CFLAGS C compiler flags for CMOCKA, overriding pkg-config CMOCKA_LIBS linker flags for CMOCKA, overriding pkg-config enginesdir value of libdir for libcrypto, overriding pkg-config OPENSC_PKCS11_CFLAGS C compiler flags for OPENSC_PKCS11, overriding pkg-config OPENSC_PKCS11_LIBS linker flags for OPENSC_PKCS11, overriding pkg-config TSS2_TCTI_TABRMD_CFLAGS C compiler flags for TSS2_TCTI_TABRMD, overriding pkg-config TSS2_TCTI_TABRMD_LIBS linker flags for TSS2_TCTI_TABRMD, overriding pkg-config P11KIT_CFLAGS C compiler flags for P11KIT, overriding pkg-config P11KIT_LIBS linker flags for P11KIT, overriding pkg-config P11_MODULE_PATH value of p11_module_path for p11-kit-1, overriding pkg-config P11_CONFIGS_PATH value of p11_module_configs for p11-kit-1, overriding pkg-config Use these variables to override the choices made by `configure' or to help it to find libraries and programs with nonstandard names/locations. Report bugs to . tpm2-pkcs11 home page: . _ACEOF ac_status=$? fi if test "$ac_init_help" = "recursive"; then # If there are subdirs, report their specific --help. for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue test -d "$ac_dir" || { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } || continue ac_builddir=. case "$ac_dir" in .) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_dir_suffix=/`printf "%s\n" "$ac_dir" | sed 's|^\.[\\/]||'` # A ".." for each directory in $ac_dir_suffix. ac_top_builddir_sub=`printf "%s\n" "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'` case $ac_top_builddir_sub in "") ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_top_build_prefix=$ac_top_builddir_sub/ ;; esac ;; esac ac_abs_top_builddir=$ac_pwd ac_abs_builddir=$ac_pwd$ac_dir_suffix # for backward compatibility: ac_top_builddir=$ac_top_build_prefix case $srcdir in .) # We are building in place. ac_srcdir=. ac_top_srcdir=$ac_top_builddir_sub ac_abs_top_srcdir=$ac_pwd ;; [\\/]* | ?:[\\/]* ) # Absolute name. ac_srcdir=$srcdir$ac_dir_suffix; ac_top_srcdir=$srcdir ac_abs_top_srcdir=$srcdir ;; *) # Relative name. ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix ac_top_srcdir=$ac_top_build_prefix$srcdir ac_abs_top_srcdir=$ac_pwd/$srcdir ;; esac ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix cd "$ac_dir" || { ac_status=$?; continue; } # Check for configure.gnu first; this name is used for a wrapper for # Metaconfig's "Configure" on case-insensitive file systems. if test -f "$ac_srcdir/configure.gnu"; then echo && $SHELL "$ac_srcdir/configure.gnu" --help=recursive elif test -f "$ac_srcdir/configure"; then echo && $SHELL "$ac_srcdir/configure" --help=recursive else printf "%s\n" "$as_me: WARNING: no configuration information is in $ac_dir" >&2 fi || ac_status=$? cd "$ac_pwd" || { ac_status=$?; break; } done fi test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF tpm2-pkcs11 configure 1.9.1 generated by GNU Autoconf 2.71 Copyright (C) 2021 Free Software Foundation, Inc. This configure script is free software; the Free Software Foundation gives unlimited permission to copy, distribute and modify it. _ACEOF exit fi ## ------------------------ ## ## Autoconf initialization. ## ## ------------------------ ## # ac_fn_c_try_compile LINENO # -------------------------- # Try to compile conftest.$ac_ext, and return whether this succeeded. ac_fn_c_try_compile () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack rm -f conftest.$ac_objext conftest.beam if { { ac_try="$ac_compile" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_compile") 2>conftest.err ac_status=$? if test -s conftest.err; then grep -v '^ *+' conftest.err >conftest.er1 cat conftest.er1 >&5 mv -f conftest.er1 conftest.err fi printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && { test -z "$ac_c_werror_flag" || test ! -s conftest.err } && test -s conftest.$ac_objext then : ac_retval=0 else $as_nop printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=1 fi eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_compile # ac_fn_c_try_link LINENO # ----------------------- # Try to link conftest.$ac_ext, and return whether this succeeded. ac_fn_c_try_link () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack rm -f conftest.$ac_objext conftest.beam conftest$ac_exeext if { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_link") 2>conftest.err ac_status=$? if test -s conftest.err; then grep -v '^ *+' conftest.err >conftest.er1 cat conftest.er1 >&5 mv -f conftest.er1 conftest.err fi printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && { test -z "$ac_c_werror_flag" || test ! -s conftest.err } && test -s conftest$ac_exeext && { test "$cross_compiling" = yes || test -x conftest$ac_exeext } then : ac_retval=0 else $as_nop printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=1 fi # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would # interfere with the next link command; also delete a directory that is # left behind by Apple's compiler. We do this before executing the actions. rm -rf conftest.dSYM conftest_ipa8_conftest.oo eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_link # ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES # ------------------------------------------------------- # Tests whether HEADER exists and can be compiled using the include files in # INCLUDES, setting the cache variable VAR accordingly. ac_fn_c_check_header_compile () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $2" >&5 printf %s "checking for $2... " >&6; } if eval test \${$3+y} then : printf %s "(cached) " >&6 else $as_nop cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $4 #include <$2> _ACEOF if ac_fn_c_try_compile "$LINENO" then : eval "$3=yes" else $as_nop eval "$3=no" fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi eval ac_res=\$$3 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 printf "%s\n" "$ac_res" >&6; } eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno } # ac_fn_c_check_header_compile # ac_fn_c_check_func LINENO FUNC VAR # ---------------------------------- # Tests whether FUNC exists, setting the cache variable VAR accordingly ac_fn_c_check_func () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $2" >&5 printf %s "checking for $2... " >&6; } if eval test \${$3+y} then : printf %s "(cached) " >&6 else $as_nop cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Define $2 to an innocuous variant, in case declares $2. For example, HP-UX 11i declares gettimeofday. */ #define $2 innocuous_$2 /* System header to define __stub macros and hopefully few prototypes, which can conflict with char $2 (); below. */ #include #undef $2 /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ #ifdef __cplusplus extern "C" #endif char $2 (); /* The GNU C library defines this for functions which it implements to always fail with ENOSYS. Some functions are actually named something starting with __ and the normal name is an alias. */ #if defined __stub_$2 || defined __stub___$2 choke me #endif int main (void) { return $2 (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : eval "$3=yes" else $as_nop eval "$3=no" fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext fi eval ac_res=\$$3 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 printf "%s\n" "$ac_res" >&6; } eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno } # ac_fn_c_check_func # ac_fn_c_try_cpp LINENO # ---------------------- # Try to preprocess conftest.$ac_ext, and return whether this succeeded. ac_fn_c_try_cpp () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack if { { ac_try="$ac_cpp conftest.$ac_ext" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_cpp conftest.$ac_ext") 2>conftest.err ac_status=$? if test -s conftest.err; then grep -v '^ *+' conftest.err >conftest.er1 cat conftest.er1 >&5 mv -f conftest.er1 conftest.err fi printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } > conftest.i && { test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" || test ! -s conftest.err } then : ac_retval=0 else $as_nop printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=1 fi eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_cpp # ac_fn_c_try_run LINENO # ---------------------- # Try to run conftest.$ac_ext, and return whether this succeeded. Assumes that # executables *can* be run. ac_fn_c_try_run () { as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack if { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_link") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && { ac_try='./conftest$ac_exeext' { { case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_try") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } then : ac_retval=0 else $as_nop printf "%s\n" "$as_me: program exited with status $ac_status" >&5 printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 ac_retval=$ac_status fi rm -rf conftest.dSYM conftest_ipa8_conftest.oo eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno as_fn_set_status $ac_retval } # ac_fn_c_try_run ac_configure_args_raw= for ac_arg do case $ac_arg in *\'*) ac_arg=`printf "%s\n" "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;; esac as_fn_append ac_configure_args_raw " '$ac_arg'" done case $ac_configure_args_raw in *$as_nl*) ac_safe_unquote= ;; *) ac_unsafe_z='|&;<>()$`\\"*?[ '' ' # This string ends in space, tab. ac_unsafe_a="$ac_unsafe_z#~" ac_safe_unquote="s/ '\\([^$ac_unsafe_a][^$ac_unsafe_z]*\\)'/ \\1/g" ac_configure_args_raw=` printf "%s\n" "$ac_configure_args_raw" | sed "$ac_safe_unquote"`;; esac cat >config.log <<_ACEOF This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. It was created by tpm2-pkcs11 $as_me 1.9.1, which was generated by GNU Autoconf 2.71. Invocation command line was $ $0$ac_configure_args_raw _ACEOF exec 5>>config.log { cat <<_ASUNAME ## --------- ## ## Platform. ## ## --------- ## hostname = `(hostname || uname -n) 2>/dev/null | sed 1q` uname -m = `(uname -m) 2>/dev/null || echo unknown` uname -r = `(uname -r) 2>/dev/null || echo unknown` uname -s = `(uname -s) 2>/dev/null || echo unknown` uname -v = `(uname -v) 2>/dev/null || echo unknown` /usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown` /bin/uname -X = `(/bin/uname -X) 2>/dev/null || echo unknown` /bin/arch = `(/bin/arch) 2>/dev/null || echo unknown` /usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null || echo unknown` /usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown` /usr/bin/hostinfo = `(/usr/bin/hostinfo) 2>/dev/null || echo unknown` /bin/machine = `(/bin/machine) 2>/dev/null || echo unknown` /usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null || echo unknown` /bin/universe = `(/bin/universe) 2>/dev/null || echo unknown` _ASUNAME as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac printf "%s\n" "PATH: $as_dir" done IFS=$as_save_IFS } >&5 cat >&5 <<_ACEOF ## ----------- ## ## Core tests. ## ## ----------- ## _ACEOF # Keep a trace of the command line. # Strip out --no-create and --no-recursion so they do not pile up. # Strip out --silent because we don't want to record it for future runs. # Also quote any args containing shell meta-characters. # Make two passes to allow for proper duplicate-argument suppression. ac_configure_args= ac_configure_args0= ac_configure_args1= ac_must_keep_next=false for ac_pass in 1 2 do for ac_arg do case $ac_arg in -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil) continue ;; *\'*) ac_arg=`printf "%s\n" "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;; esac case $ac_pass in 1) as_fn_append ac_configure_args0 " '$ac_arg'" ;; 2) as_fn_append ac_configure_args1 " '$ac_arg'" if test $ac_must_keep_next = true; then ac_must_keep_next=false # Got value, back to normal. else case $ac_arg in *=* | --config-cache | -C | -disable-* | --disable-* \ | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \ | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \ | -with-* | --with-* | -without-* | --without-* | --x) case "$ac_configure_args0 " in "$ac_configure_args1"*" '$ac_arg' "* ) continue ;; esac ;; -* ) ac_must_keep_next=true ;; esac fi as_fn_append ac_configure_args " '$ac_arg'" ;; esac done done { ac_configure_args0=; unset ac_configure_args0;} { ac_configure_args1=; unset ac_configure_args1;} # When interrupted or exit'd, cleanup temporary files, and complete # config.log. We remove comments because anyway the quotes in there # would cause problems or look ugly. # WARNING: Use '\'' to represent an apostrophe within the trap. # WARNING: Do not start the trap code with a newline, due to a FreeBSD 4.0 bug. trap 'exit_status=$? # Sanitize IFS. IFS=" "" $as_nl" # Save into config.log some information that might help in debugging. { echo printf "%s\n" "## ---------------- ## ## Cache variables. ## ## ---------------- ##" echo # The following way of writing the cache mishandles newlines in values, ( for ac_var in `(set) 2>&1 | sed -n '\''s/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'\''`; do eval ac_val=\$$ac_var case $ac_val in #( *${as_nl}*) case $ac_var in #( *_cv_*) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5 printf "%s\n" "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;; esac case $ac_var in #( _ | IFS | as_nl) ;; #( BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #( *) { eval $ac_var=; unset $ac_var;} ;; esac ;; esac done (set) 2>&1 | case $as_nl`(ac_space='\'' '\''; set) 2>&1` in #( *${as_nl}ac_space=\ *) sed -n \ "s/'\''/'\''\\\\'\'''\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\''\\2'\''/p" ;; #( *) sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | sort ) echo printf "%s\n" "## ----------------- ## ## Output variables. ## ## ----------------- ##" echo for ac_var in $ac_subst_vars do eval ac_val=\$$ac_var case $ac_val in *\'\''*) ac_val=`printf "%s\n" "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;; esac printf "%s\n" "$ac_var='\''$ac_val'\''" done | sort echo if test -n "$ac_subst_files"; then printf "%s\n" "## ------------------- ## ## File substitutions. ## ## ------------------- ##" echo for ac_var in $ac_subst_files do eval ac_val=\$$ac_var case $ac_val in *\'\''*) ac_val=`printf "%s\n" "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;; esac printf "%s\n" "$ac_var='\''$ac_val'\''" done | sort echo fi if test -s confdefs.h; then printf "%s\n" "## ----------- ## ## confdefs.h. ## ## ----------- ##" echo cat confdefs.h echo fi test "$ac_signal" != 0 && printf "%s\n" "$as_me: caught signal $ac_signal" printf "%s\n" "$as_me: exit $exit_status" } >&5 rm -f core *.core core.conftest.* && rm -f -r conftest* confdefs* conf$$* $ac_clean_files && exit $exit_status ' 0 for ac_signal in 1 2 13 15; do trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal done ac_signal=0 # confdefs.h avoids OS command line length limits that DEFS can exceed. rm -f -r conftest* confdefs.h printf "%s\n" "/* confdefs.h */" > confdefs.h # Predefined preprocessor variables. printf "%s\n" "#define PACKAGE_NAME \"$PACKAGE_NAME\"" >>confdefs.h printf "%s\n" "#define PACKAGE_TARNAME \"$PACKAGE_TARNAME\"" >>confdefs.h printf "%s\n" "#define PACKAGE_VERSION \"$PACKAGE_VERSION\"" >>confdefs.h printf "%s\n" "#define PACKAGE_STRING \"$PACKAGE_STRING\"" >>confdefs.h printf "%s\n" "#define PACKAGE_BUGREPORT \"$PACKAGE_BUGREPORT\"" >>confdefs.h printf "%s\n" "#define PACKAGE_URL \"$PACKAGE_URL\"" >>confdefs.h # Let the site file select an alternate cache file if it wants to. # Prefer an explicitly selected file to automatically selected ones. if test -n "$CONFIG_SITE"; then ac_site_files="$CONFIG_SITE" elif test "x$prefix" != xNONE; then ac_site_files="$prefix/share/config.site $prefix/etc/config.site" else ac_site_files="$ac_default_prefix/share/config.site $ac_default_prefix/etc/config.site" fi for ac_site_file in $ac_site_files do case $ac_site_file in #( */*) : ;; #( *) : ac_site_file=./$ac_site_file ;; esac if test -f "$ac_site_file" && test -r "$ac_site_file"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5 printf "%s\n" "$as_me: loading site script $ac_site_file" >&6;} sed 's/^/| /' "$ac_site_file" >&5 . "$ac_site_file" \ || { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "failed to load site script $ac_site_file See \`config.log' for more details" "$LINENO" 5; } fi done if test -r "$cache_file"; then # Some versions of bash will fail to source /dev/null (special files # actually), so we avoid doing that. DJGPP emulates it as a regular file. if test /dev/null != "$cache_file" && test -f "$cache_file"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5 printf "%s\n" "$as_me: loading cache $cache_file" >&6;} case $cache_file in [\\/]* | ?:[\\/]* ) . "$cache_file";; *) . "./$cache_file";; esac fi else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5 printf "%s\n" "$as_me: creating cache $cache_file" >&6;} >$cache_file fi # Test code for whether the C compiler supports C89 (global declarations) ac_c_conftest_c89_globals=' /* Does the compiler advertise C89 conformance? Do not test the value of __STDC__, because some compilers set it to 0 while being otherwise adequately conformant. */ #if !defined __STDC__ # error "Compiler does not advertise C89 conformance" #endif #include #include struct stat; /* Most of the following tests are stolen from RCS 5.7 src/conf.sh. */ struct buf { int x; }; struct buf * (*rcsopen) (struct buf *, struct stat *, int); static char *e (p, i) char **p; int i; { return p[i]; } static char *f (char * (*g) (char **, int), char **p, ...) { char *s; va_list v; va_start (v,p); s = g (p, va_arg (v,int)); va_end (v); return s; } /* OSF 4.0 Compaq cc is some sort of almost-ANSI by default. It has function prototypes and stuff, but not \xHH hex character constants. These do not provoke an error unfortunately, instead are silently treated as an "x". The following induces an error, until -std is added to get proper ANSI mode. Curiously \x00 != x always comes out true, for an array size at least. It is necessary to write \x00 == 0 to get something that is true only with -std. */ int osf4_cc_array ['\''\x00'\'' == 0 ? 1 : -1]; /* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters inside strings and character constants. */ #define FOO(x) '\''x'\'' int xlc6_cc_array[FOO(a) == '\''x'\'' ? 1 : -1]; int test (int i, double x); struct s1 {int (*f) (int a);}; struct s2 {int (*f) (double a);}; int pairnames (int, char **, int *(*)(struct buf *, struct stat *, int), int, int);' # Test code for whether the C compiler supports C89 (body of main). ac_c_conftest_c89_main=' ok |= (argc == 0 || f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1]); ' # Test code for whether the C compiler supports C99 (global declarations) ac_c_conftest_c99_globals=' // Does the compiler advertise C99 conformance? #if !defined __STDC_VERSION__ || __STDC_VERSION__ < 199901L # error "Compiler does not advertise C99 conformance" #endif #include extern int puts (const char *); extern int printf (const char *, ...); extern int dprintf (int, const char *, ...); extern void *malloc (size_t); // Check varargs macros. These examples are taken from C99 6.10.3.5. // dprintf is used instead of fprintf to avoid needing to declare // FILE and stderr. #define debug(...) dprintf (2, __VA_ARGS__) #define showlist(...) puts (#__VA_ARGS__) #define report(test,...) ((test) ? puts (#test) : printf (__VA_ARGS__)) static void test_varargs_macros (void) { int x = 1234; int y = 5678; debug ("Flag"); debug ("X = %d\n", x); showlist (The first, second, and third items.); report (x>y, "x is %d but y is %d", x, y); } // Check long long types. #define BIG64 18446744073709551615ull #define BIG32 4294967295ul #define BIG_OK (BIG64 / BIG32 == 4294967297ull && BIG64 % BIG32 == 0) #if !BIG_OK #error "your preprocessor is broken" #endif #if BIG_OK #else #error "your preprocessor is broken" #endif static long long int bignum = -9223372036854775807LL; static unsigned long long int ubignum = BIG64; struct incomplete_array { int datasize; double data[]; }; struct named_init { int number; const wchar_t *name; double average; }; typedef const char *ccp; static inline int test_restrict (ccp restrict text) { // See if C++-style comments work. // Iterate through items via the restricted pointer. // Also check for declarations in for loops. for (unsigned int i = 0; *(text+i) != '\''\0'\''; ++i) continue; return 0; } // Check varargs and va_copy. static bool test_varargs (const char *format, ...) { va_list args; va_start (args, format); va_list args_copy; va_copy (args_copy, args); const char *str = ""; int number = 0; float fnumber = 0; while (*format) { switch (*format++) { case '\''s'\'': // string str = va_arg (args_copy, const char *); break; case '\''d'\'': // int number = va_arg (args_copy, int); break; case '\''f'\'': // float fnumber = va_arg (args_copy, double); break; default: break; } } va_end (args_copy); va_end (args); return *str && number && fnumber; } ' # Test code for whether the C compiler supports C99 (body of main). ac_c_conftest_c99_main=' // Check bool. _Bool success = false; success |= (argc != 0); // Check restrict. if (test_restrict ("String literal") == 0) success = true; char *restrict newvar = "Another string"; // Check varargs. success &= test_varargs ("s, d'\'' f .", "string", 65, 34.234); test_varargs_macros (); // Check flexible array members. struct incomplete_array *ia = malloc (sizeof (struct incomplete_array) + (sizeof (double) * 10)); ia->datasize = 10; for (int i = 0; i < ia->datasize; ++i) ia->data[i] = i * 1.234; // Check named initializers. struct named_init ni = { .number = 34, .name = L"Test wide string", .average = 543.34343, }; ni.number = 58; int dynamic_array[ni.number]; dynamic_array[0] = argv[0][0]; dynamic_array[ni.number - 1] = 543; // work around unused variable warnings ok |= (!success || bignum == 0LL || ubignum == 0uLL || newvar[0] == '\''x'\'' || dynamic_array[ni.number - 1] != 543); ' # Test code for whether the C compiler supports C11 (global declarations) ac_c_conftest_c11_globals=' // Does the compiler advertise C11 conformance? #if !defined __STDC_VERSION__ || __STDC_VERSION__ < 201112L # error "Compiler does not advertise C11 conformance" #endif // Check _Alignas. char _Alignas (double) aligned_as_double; char _Alignas (0) no_special_alignment; extern char aligned_as_int; char _Alignas (0) _Alignas (int) aligned_as_int; // Check _Alignof. enum { int_alignment = _Alignof (int), int_array_alignment = _Alignof (int[100]), char_alignment = _Alignof (char) }; _Static_assert (0 < -_Alignof (int), "_Alignof is signed"); // Check _Noreturn. int _Noreturn does_not_return (void) { for (;;) continue; } // Check _Static_assert. struct test_static_assert { int x; _Static_assert (sizeof (int) <= sizeof (long int), "_Static_assert does not work in struct"); long int y; }; // Check UTF-8 literals. #define u8 syntax error! char const utf8_literal[] = u8"happens to be ASCII" "another string"; // Check duplicate typedefs. typedef long *long_ptr; typedef long int *long_ptr; typedef long_ptr long_ptr; // Anonymous structures and unions -- taken from C11 6.7.2.1 Example 1. struct anonymous { union { struct { int i; int j; }; struct { int k; long int l; } w; }; int m; } v1; ' # Test code for whether the C compiler supports C11 (body of main). ac_c_conftest_c11_main=' _Static_assert ((offsetof (struct anonymous, i) == offsetof (struct anonymous, w.k)), "Anonymous union alignment botch"); v1.i = 2; v1.w.k = 5; ok |= v1.i != 5; ' # Test code for whether the C compiler supports C11 (complete). ac_c_conftest_c11_program="${ac_c_conftest_c89_globals} ${ac_c_conftest_c99_globals} ${ac_c_conftest_c11_globals} int main (int argc, char **argv) { int ok = 0; ${ac_c_conftest_c89_main} ${ac_c_conftest_c99_main} ${ac_c_conftest_c11_main} return ok; } " # Test code for whether the C compiler supports C99 (complete). ac_c_conftest_c99_program="${ac_c_conftest_c89_globals} ${ac_c_conftest_c99_globals} int main (int argc, char **argv) { int ok = 0; ${ac_c_conftest_c89_main} ${ac_c_conftest_c99_main} return ok; } " # Test code for whether the C compiler supports C89 (complete). ac_c_conftest_c89_program="${ac_c_conftest_c89_globals} int main (int argc, char **argv) { int ok = 0; ${ac_c_conftest_c89_main} return ok; } " as_fn_append ac_header_c_list " stdio.h stdio_h HAVE_STDIO_H" as_fn_append ac_header_c_list " stdlib.h stdlib_h HAVE_STDLIB_H" as_fn_append ac_header_c_list " string.h string_h HAVE_STRING_H" as_fn_append ac_header_c_list " inttypes.h inttypes_h HAVE_INTTYPES_H" as_fn_append ac_header_c_list " stdint.h stdint_h HAVE_STDINT_H" as_fn_append ac_header_c_list " strings.h strings_h HAVE_STRINGS_H" as_fn_append ac_header_c_list " sys/stat.h sys_stat_h HAVE_SYS_STAT_H" as_fn_append ac_header_c_list " sys/types.h sys_types_h HAVE_SYS_TYPES_H" as_fn_append ac_header_c_list " unistd.h unistd_h HAVE_UNISTD_H" # Auxiliary files required by this configure script. ac_aux_files="missing install-sh config.guess config.sub ltmain.sh compile" # Locations in which to look for auxiliary files. ac_aux_dir_candidates="${srcdir}${PATH_SEPARATOR}${srcdir}/..${PATH_SEPARATOR}${srcdir}/../.." # Search for a directory containing all of the required auxiliary files, # $ac_aux_files, from the $PATH-style list $ac_aux_dir_candidates. # If we don't find one directory that contains all the files we need, # we report the set of missing files from the *first* directory in # $ac_aux_dir_candidates and give up. ac_missing_aux_files="" ac_first_candidate=: printf "%s\n" "$as_me:${as_lineno-$LINENO}: looking for aux files: $ac_aux_files" >&5 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR as_found=false for as_dir in $ac_aux_dir_candidates do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac as_found=: printf "%s\n" "$as_me:${as_lineno-$LINENO}: trying $as_dir" >&5 ac_aux_dir_found=yes ac_install_sh= for ac_aux in $ac_aux_files do # As a special case, if "install-sh" is required, that requirement # can be satisfied by any of "install-sh", "install.sh", or "shtool", # and $ac_install_sh is set appropriately for whichever one is found. if test x"$ac_aux" = x"install-sh" then if test -f "${as_dir}install-sh"; then printf "%s\n" "$as_me:${as_lineno-$LINENO}: ${as_dir}install-sh found" >&5 ac_install_sh="${as_dir}install-sh -c" elif test -f "${as_dir}install.sh"; then printf "%s\n" "$as_me:${as_lineno-$LINENO}: ${as_dir}install.sh found" >&5 ac_install_sh="${as_dir}install.sh -c" elif test -f "${as_dir}shtool"; then printf "%s\n" "$as_me:${as_lineno-$LINENO}: ${as_dir}shtool found" >&5 ac_install_sh="${as_dir}shtool install -c" else ac_aux_dir_found=no if $ac_first_candidate; then ac_missing_aux_files="${ac_missing_aux_files} install-sh" else break fi fi else if test -f "${as_dir}${ac_aux}"; then printf "%s\n" "$as_me:${as_lineno-$LINENO}: ${as_dir}${ac_aux} found" >&5 else ac_aux_dir_found=no if $ac_first_candidate; then ac_missing_aux_files="${ac_missing_aux_files} ${ac_aux}" else break fi fi fi done if test "$ac_aux_dir_found" = yes; then ac_aux_dir="$as_dir" break fi ac_first_candidate=false as_found=false done IFS=$as_save_IFS if $as_found then : else $as_nop as_fn_error $? "cannot find required auxiliary files:$ac_missing_aux_files" "$LINENO" 5 fi # These three variables are undocumented and unsupported, # and are intended to be withdrawn in a future Autoconf release. # They can cause serious problems if a builder's source tree is in a directory # whose full name contains unusual characters. if test -f "${ac_aux_dir}config.guess"; then ac_config_guess="$SHELL ${ac_aux_dir}config.guess" fi if test -f "${ac_aux_dir}config.sub"; then ac_config_sub="$SHELL ${ac_aux_dir}config.sub" fi if test -f "$ac_aux_dir/configure"; then ac_configure="$SHELL ${ac_aux_dir}configure" fi # Check that the precious variables saved in the cache have kept the same # value. ac_cache_corrupted=false for ac_var in $ac_precious_vars; do eval ac_old_set=\$ac_cv_env_${ac_var}_set eval ac_new_set=\$ac_env_${ac_var}_set eval ac_old_val=\$ac_cv_env_${ac_var}_value eval ac_new_val=\$ac_env_${ac_var}_value case $ac_old_set,$ac_new_set in set,) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5 printf "%s\n" "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;} ac_cache_corrupted=: ;; ,set) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was not set in the previous run" >&5 printf "%s\n" "$as_me: error: \`$ac_var' was not set in the previous run" >&2;} ac_cache_corrupted=: ;; ,);; *) if test "x$ac_old_val" != "x$ac_new_val"; then # differences in whitespace do not lead to failure. ac_old_val_w=`echo x $ac_old_val` ac_new_val_w=`echo x $ac_new_val` if test "$ac_old_val_w" != "$ac_new_val_w"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' has changed since the previous run:" >&5 printf "%s\n" "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;} ac_cache_corrupted=: else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&5 printf "%s\n" "$as_me: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&2;} eval $ac_var=\$ac_old_val fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: former value: \`$ac_old_val'" >&5 printf "%s\n" "$as_me: former value: \`$ac_old_val'" >&2;} { printf "%s\n" "$as_me:${as_lineno-$LINENO}: current value: \`$ac_new_val'" >&5 printf "%s\n" "$as_me: current value: \`$ac_new_val'" >&2;} fi;; esac # Pass precious variables to config.status. if test "$ac_new_set" = set; then case $ac_new_val in *\'*) ac_arg=$ac_var=`printf "%s\n" "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;; *) ac_arg=$ac_var=$ac_new_val ;; esac case " $ac_configure_args " in *" '$ac_arg' "*) ;; # Avoid dups. Use of quotes ensures accuracy. *) as_fn_append ac_configure_args " '$ac_arg'" ;; esac fi done if $ac_cache_corrupted; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5 printf "%s\n" "$as_me: error: changes in the environment can compromise the build" >&2;} as_fn_error $? "run \`${MAKE-make} distclean' and/or \`rm $cache_file' and start over" "$LINENO" 5 fi ## -------------------- ## ## Main body of script. ## ## -------------------- ## ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu # propagate configure arguments to distcheck DISTCHECK_CONFIGURE_FLAGS=$ac_configure_args # $is_release = ($PACKAGE_VERSION has a dash) case $PACKAGE_VERSION in #( *-*) : ax_is_release=no ;; #( *) : ax_is_release=yes ;; #( *) : ;; esac { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether to enable debugging" >&5 printf %s "checking whether to enable debugging... " >&6; } ax_enable_debug_default=info ax_enable_debug_is_release=$ax_is_release # If this is a release, override the default. if test "$ax_enable_debug_is_release" = "yes" then : ax_enable_debug_default="no" fi # Check whether --enable-debug was given. if test ${enable_debug+y} then : enableval=$enable_debug; else $as_nop enable_debug=$ax_enable_debug_default fi # empty mean debug yes if test "x$enable_debug" = "x" then : enable_debug="yes" fi # case of debug case $enable_debug in #( yes) : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } CFLAGS="${CFLAGS} -g -O0" CXXFLAGS="${CXXFLAGS} -g -O0" FFLAGS="${FFLAGS} -g -O0" FCFLAGS="${FCFLAGS} -g -O0" OBJCFLAGS="${OBJCFLAGS} -g -O0" ;; #( info) : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: info" >&5 printf "%s\n" "info" >&6; } CFLAGS="${CFLAGS} -g" CXXFLAGS="${CXXFLAGS} -g" FFLAGS="${FFLAGS} -g" FCFLAGS="${FCFLAGS} -g" OBJCFLAGS="${OBJCFLAGS} -g" ;; #( profile) : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: profile" >&5 printf "%s\n" "profile" >&6; } CFLAGS="${CFLAGS} -g -pg" CXXFLAGS="${CXXFLAGS} -g -pg" FFLAGS="${FFLAGS} -g -pg" FCFLAGS="${FCFLAGS} -g -pg" OBJCFLAGS="${OBJCFLAGS} -g -pg" LDFLAGS="${LDFLAGS} -pg" ;; #( *) : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if test "x${CFLAGS+set}" != "xset" then : CFLAGS="" fi if test "x${CXXFLAGS+set}" != "xset" then : CXXFLAGS="" fi if test "x${FFLAGS+set}" != "xset" then : FFLAGS="" fi if test "x${FCFLAGS+set}" != "xset" then : FCFLAGS="" fi if test "x${OBJCFLAGS+set}" != "xset" then : OBJCFLAGS="" fi ;; esac if test "x$enable_debug" = "xyes" then : else $as_nop printf "%s\n" "#define NDEBUG 1" >>confdefs.h fi ax_enable_debug=$enable_debug ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args. set dummy ${ac_tool_prefix}gcc; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_CC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_CC="${ac_tool_prefix}gcc" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 printf "%s\n" "$CC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_CC"; then ac_ct_CC=$CC # Extract the first word of "gcc", so it can be a program name with args. set dummy gcc; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_CC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_CC"; then ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_CC="gcc" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_CC=$ac_cv_prog_ac_ct_CC if test -n "$ac_ct_CC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5 printf "%s\n" "$ac_ct_CC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_CC" = x; then CC="" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac CC=$ac_ct_CC fi else CC="$ac_cv_prog_CC" fi if test -z "$CC"; then if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args. set dummy ${ac_tool_prefix}cc; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_CC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_CC="${ac_tool_prefix}cc" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 printf "%s\n" "$CC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi fi if test -z "$CC"; then # Extract the first word of "cc", so it can be a program name with args. set dummy cc; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_CC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else ac_prog_rejected=no as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then if test "$as_dir$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then ac_prog_rejected=yes continue fi ac_cv_prog_CC="cc" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS if test $ac_prog_rejected = yes; then # We found a bogon in the path, so make sure we never use it. set dummy $ac_cv_prog_CC shift if test $# != 0; then # We chose a different compiler from the bogus one. # However, it has the same basename, so the bogon will be chosen # first if we set CC to just the basename; use the full file name. shift ac_cv_prog_CC="$as_dir$ac_word${1+' '}$@" fi fi fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 printf "%s\n" "$CC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$CC"; then if test -n "$ac_tool_prefix"; then for ac_prog in cl.exe do # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args. set dummy $ac_tool_prefix$ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_CC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_CC="$ac_tool_prefix$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 printf "%s\n" "$CC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$CC" && break done fi if test -z "$CC"; then ac_ct_CC=$CC for ac_prog in cl.exe do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_CC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_CC"; then ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_CC="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_CC=$ac_cv_prog_ac_ct_CC if test -n "$ac_ct_CC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5 printf "%s\n" "$ac_ct_CC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$ac_ct_CC" && break done if test "x$ac_ct_CC" = x; then CC="" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac CC=$ac_ct_CC fi fi fi if test -z "$CC"; then if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}clang", so it can be a program name with args. set dummy ${ac_tool_prefix}clang; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_CC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$CC"; then ac_cv_prog_CC="$CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_CC="${ac_tool_prefix}clang" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi CC=$ac_cv_prog_CC if test -n "$CC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CC" >&5 printf "%s\n" "$CC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_CC"; then ac_ct_CC=$CC # Extract the first word of "clang", so it can be a program name with args. set dummy clang; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_CC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_CC"; then ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_CC="clang" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_CC=$ac_cv_prog_ac_ct_CC if test -n "$ac_ct_CC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5 printf "%s\n" "$ac_ct_CC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_CC" = x; then CC="" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac CC=$ac_ct_CC fi else CC="$ac_cv_prog_CC" fi fi test -z "$CC" && { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "no acceptable C compiler found in \$PATH See \`config.log' for more details" "$LINENO" 5; } # Provide some information about the compiler. printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5 set X $ac_compile ac_compiler=$2 for ac_option in --version -v -V -qversion -version; do { { ac_try="$ac_compiler $ac_option >&5" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_compiler $ac_option >&5") 2>conftest.err ac_status=$? if test -s conftest.err; then sed '10a\ ... rest of stderr output deleted ... 10q' conftest.err >conftest.er1 cat conftest.er1 >&5 fi rm -f conftest.er1 conftest.err printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } done cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF ac_clean_files_save=$ac_clean_files ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out" # Try to create an executable without -o first, disregard a.out. # It will help us diagnose broken compilers, and finding out an intuition # of exeext. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5 printf %s "checking whether the C compiler works... " >&6; } ac_link_default=`printf "%s\n" "$ac_link" | sed 's/ -o *conftest[^ ]*//'` # The possible output files: ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*" ac_rmfiles= for ac_file in $ac_files do case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;; * ) ac_rmfiles="$ac_rmfiles $ac_file";; esac done rm -f $ac_rmfiles if { { ac_try="$ac_link_default" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_link_default") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } then : # Autoconf-2.13 could set the ac_cv_exeext variable to `no'. # So ignore a value of `no', otherwise this would lead to `EXEEXT = no' # in a Makefile. We should not override ac_cv_exeext if it was cached, # so that the user can short-circuit this test for compilers unknown to # Autoconf. for ac_file in $ac_files '' do test -f "$ac_file" || continue case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;; [ab].out ) # We found the default executable, but exeext='' is most # certainly right. break;; *.* ) if test ${ac_cv_exeext+y} && test "$ac_cv_exeext" != no; then :; else ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'` fi # We set ac_cv_exeext here because the later test for it is not # safe: cross compilers may not add the suffix if given an `-o' # argument, so we may need to know it at that point already. # Even if this section looks crufty: it has the advantage of # actually working. break;; * ) break;; esac done test "$ac_cv_exeext" = no && ac_cv_exeext= else $as_nop ac_file='' fi if test -z "$ac_file" then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error 77 "C compiler cannot create executables See \`config.log' for more details" "$LINENO" 5; } else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5 printf %s "checking for C compiler default output file name... " >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5 printf "%s\n" "$ac_file" >&6; } ac_exeext=$ac_cv_exeext rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out ac_clean_files=$ac_clean_files_save { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5 printf %s "checking for suffix of executables... " >&6; } if { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_link") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } then : # If both `conftest.exe' and `conftest' are `present' (well, observable) # catch `conftest.exe'. For instance with Cygwin, `ls conftest' will # work properly (i.e., refer to `conftest.exe'), while it won't with # `rm'. for ac_file in conftest.exe conftest conftest.*; do test -f "$ac_file" || continue case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;; *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'` break;; * ) break;; esac done else $as_nop { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot compute suffix of executables: cannot compile and link See \`config.log' for more details" "$LINENO" 5; } fi rm -f conftest conftest$ac_cv_exeext { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5 printf "%s\n" "$ac_cv_exeext" >&6; } rm -f conftest.$ac_ext EXEEXT=$ac_cv_exeext ac_exeext=$EXEEXT cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main (void) { FILE *f = fopen ("conftest.out", "w"); return ferror (f) || fclose (f) != 0; ; return 0; } _ACEOF ac_clean_files="$ac_clean_files conftest.out" # Check that the compiler produces executables we can run. If not, either # the compiler is broken, or we cross compile. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5 printf %s "checking whether we are cross compiling... " >&6; } if test "$cross_compiling" != yes; then { { ac_try="$ac_link" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_link") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } if { ac_try='./conftest$ac_cv_exeext' { { case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_try") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; }; then cross_compiling=no else if test "$cross_compiling" = maybe; then cross_compiling=yes else { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error 77 "cannot run C compiled programs. If you meant to cross compile, use \`--host'. See \`config.log' for more details" "$LINENO" 5; } fi fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5 printf "%s\n" "$cross_compiling" >&6; } rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out ac_clean_files=$ac_clean_files_save { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5 printf %s "checking for suffix of object files... " >&6; } if test ${ac_cv_objext+y} then : printf %s "(cached) " >&6 else $as_nop cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF rm -f conftest.o conftest.obj if { { ac_try="$ac_compile" case "(($ac_try" in *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;; *) ac_try_echo=$ac_try;; esac eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\"" printf "%s\n" "$ac_try_echo"; } >&5 (eval "$ac_compile") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } then : for ac_file in conftest.o conftest.obj conftest.*; do test -f "$ac_file" || continue; case $ac_file in *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;; *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'` break;; esac done else $as_nop printf "%s\n" "$as_me: failed program was:" >&5 sed 's/^/| /' conftest.$ac_ext >&5 { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "cannot compute suffix of object files: cannot compile See \`config.log' for more details" "$LINENO" 5; } fi rm -f conftest.$ac_cv_objext conftest.$ac_ext fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5 printf "%s\n" "$ac_cv_objext" >&6; } OBJEXT=$ac_cv_objext ac_objext=$OBJEXT { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the compiler supports GNU C" >&5 printf %s "checking whether the compiler supports GNU C... " >&6; } if test ${ac_cv_c_compiler_gnu+y} then : printf %s "(cached) " >&6 else $as_nop cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { #ifndef __GNUC__ choke me #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_compiler_gnu=yes else $as_nop ac_compiler_gnu=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ac_cv_c_compiler_gnu=$ac_compiler_gnu fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5 printf "%s\n" "$ac_cv_c_compiler_gnu" >&6; } ac_compiler_gnu=$ac_cv_c_compiler_gnu if test $ac_compiler_gnu = yes; then GCC=yes else GCC= fi ac_test_CFLAGS=${CFLAGS+y} ac_save_CFLAGS=$CFLAGS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5 printf %s "checking whether $CC accepts -g... " >&6; } if test ${ac_cv_prog_cc_g+y} then : printf %s "(cached) " >&6 else $as_nop ac_save_c_werror_flag=$ac_c_werror_flag ac_c_werror_flag=yes ac_cv_prog_cc_g=no CFLAGS="-g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_prog_cc_g=yes else $as_nop CFLAGS="" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : else $as_nop ac_c_werror_flag=$ac_save_c_werror_flag CFLAGS="-g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_prog_cc_g=yes fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ac_c_werror_flag=$ac_save_c_werror_flag fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5 printf "%s\n" "$ac_cv_prog_cc_g" >&6; } if test $ac_test_CFLAGS; then CFLAGS=$ac_save_CFLAGS elif test $ac_cv_prog_cc_g = yes; then if test "$GCC" = yes; then CFLAGS="-g -O2" else CFLAGS="-g" fi else if test "$GCC" = yes; then CFLAGS="-O2" else CFLAGS= fi fi ac_prog_cc_stdc=no if test x$ac_prog_cc_stdc = xno then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C11 features" >&5 printf %s "checking for $CC option to enable C11 features... " >&6; } if test ${ac_cv_prog_cc_c11+y} then : printf %s "(cached) " >&6 else $as_nop ac_cv_prog_cc_c11=no ac_save_CC=$CC cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $ac_c_conftest_c11_program _ACEOF for ac_arg in '' -std=gnu11 do CC="$ac_save_CC $ac_arg" if ac_fn_c_try_compile "$LINENO" then : ac_cv_prog_cc_c11=$ac_arg fi rm -f core conftest.err conftest.$ac_objext conftest.beam test "x$ac_cv_prog_cc_c11" != "xno" && break done rm -f conftest.$ac_ext CC=$ac_save_CC fi if test "x$ac_cv_prog_cc_c11" = xno then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5 printf "%s\n" "unsupported" >&6; } else $as_nop if test "x$ac_cv_prog_cc_c11" = x then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none needed" >&5 printf "%s\n" "none needed" >&6; } else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c11" >&5 printf "%s\n" "$ac_cv_prog_cc_c11" >&6; } CC="$CC $ac_cv_prog_cc_c11" fi ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c11 ac_prog_cc_stdc=c11 fi fi if test x$ac_prog_cc_stdc = xno then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C99 features" >&5 printf %s "checking for $CC option to enable C99 features... " >&6; } if test ${ac_cv_prog_cc_c99+y} then : printf %s "(cached) " >&6 else $as_nop ac_cv_prog_cc_c99=no ac_save_CC=$CC cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $ac_c_conftest_c99_program _ACEOF for ac_arg in '' -std=gnu99 -std=c99 -c99 -qlanglvl=extc1x -qlanglvl=extc99 -AC99 -D_STDC_C99= do CC="$ac_save_CC $ac_arg" if ac_fn_c_try_compile "$LINENO" then : ac_cv_prog_cc_c99=$ac_arg fi rm -f core conftest.err conftest.$ac_objext conftest.beam test "x$ac_cv_prog_cc_c99" != "xno" && break done rm -f conftest.$ac_ext CC=$ac_save_CC fi if test "x$ac_cv_prog_cc_c99" = xno then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5 printf "%s\n" "unsupported" >&6; } else $as_nop if test "x$ac_cv_prog_cc_c99" = x then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none needed" >&5 printf "%s\n" "none needed" >&6; } else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c99" >&5 printf "%s\n" "$ac_cv_prog_cc_c99" >&6; } CC="$CC $ac_cv_prog_cc_c99" fi ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c99 ac_prog_cc_stdc=c99 fi fi if test x$ac_prog_cc_stdc = xno then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C89 features" >&5 printf %s "checking for $CC option to enable C89 features... " >&6; } if test ${ac_cv_prog_cc_c89+y} then : printf %s "(cached) " >&6 else $as_nop ac_cv_prog_cc_c89=no ac_save_CC=$CC cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $ac_c_conftest_c89_program _ACEOF for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__" do CC="$ac_save_CC $ac_arg" if ac_fn_c_try_compile "$LINENO" then : ac_cv_prog_cc_c89=$ac_arg fi rm -f core conftest.err conftest.$ac_objext conftest.beam test "x$ac_cv_prog_cc_c89" != "xno" && break done rm -f conftest.$ac_ext CC=$ac_save_CC fi if test "x$ac_cv_prog_cc_c89" = xno then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5 printf "%s\n" "unsupported" >&6; } else $as_nop if test "x$ac_cv_prog_cc_c89" = x then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none needed" >&5 printf "%s\n" "none needed" >&6; } else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5 printf "%s\n" "$ac_cv_prog_cc_c89" >&6; } CC="$CC $ac_cv_prog_cc_c89" fi ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c89 ac_prog_cc_stdc=c89 fi fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu # Expand $ac_aux_dir to an absolute path. am_aux_dir=`cd "$ac_aux_dir" && pwd` ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $CC understands -c and -o together" >&5 printf %s "checking whether $CC understands -c and -o together... " >&6; } if test ${am_cv_prog_cc_c_o+y} then : printf %s "(cached) " >&6 else $as_nop cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF # Make sure it works both with $CC and with simple cc. # Following AC_PROG_CC_C_O, we do the test twice because some # compilers refuse to overwrite an existing .o file with -o, # though they will create one. am_cv_prog_cc_c_o=yes for am_i in 1 2; do if { echo "$as_me:$LINENO: $CC -c conftest.$ac_ext -o conftest2.$ac_objext" >&5 ($CC -c conftest.$ac_ext -o conftest2.$ac_objext) >&5 2>&5 ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&5 (exit $ac_status); } \ && test -f conftest2.$ac_objext; then : OK else am_cv_prog_cc_c_o=no break fi done rm -f core conftest* unset am_i fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_cc_c_o" >&5 printf "%s\n" "$am_cv_prog_cc_c_o" >&6; } if test "$am_cv_prog_cc_c_o" != yes; then # Losing compiler, so override with the script. # FIXME: It is wrong to rewrite CC. # But if we don't then we get into trouble of one sort or another. # A longer-term fix would be to have automake use am__CC in this case, # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)" CC="$am_aux_dir/compile $CC" fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu case `pwd` in *\ * | *\ *) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&5 printf "%s\n" "$as_me: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&2;} ;; esac macro_version='2.4.7' macro_revision='2.4.7' ltmain=$ac_aux_dir/ltmain.sh # Make sure we can run config.sub. $SHELL "${ac_aux_dir}config.sub" sun4 >/dev/null 2>&1 || as_fn_error $? "cannot run $SHELL ${ac_aux_dir}config.sub" "$LINENO" 5 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking build system type" >&5 printf %s "checking build system type... " >&6; } if test ${ac_cv_build+y} then : printf %s "(cached) " >&6 else $as_nop ac_build_alias=$build_alias test "x$ac_build_alias" = x && ac_build_alias=`$SHELL "${ac_aux_dir}config.guess"` test "x$ac_build_alias" = x && as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5 ac_cv_build=`$SHELL "${ac_aux_dir}config.sub" $ac_build_alias` || as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $ac_build_alias failed" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5 printf "%s\n" "$ac_cv_build" >&6; } case $ac_cv_build in *-*-*) ;; *) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;; esac build=$ac_cv_build ac_save_IFS=$IFS; IFS='-' set x $ac_cv_build shift build_cpu=$1 build_vendor=$2 shift; shift # Remember, the first character of IFS is used to create $*, # except with old shells: build_os=$* IFS=$ac_save_IFS case $build_os in *\ *) build_os=`echo "$build_os" | sed 's/ /-/g'`;; esac { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking host system type" >&5 printf %s "checking host system type... " >&6; } if test ${ac_cv_host+y} then : printf %s "(cached) " >&6 else $as_nop if test "x$host_alias" = x; then ac_cv_host=$ac_cv_build else ac_cv_host=`$SHELL "${ac_aux_dir}config.sub" $host_alias` || as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $host_alias failed" "$LINENO" 5 fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5 printf "%s\n" "$ac_cv_host" >&6; } case $ac_cv_host in *-*-*) ;; *) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;; esac host=$ac_cv_host ac_save_IFS=$IFS; IFS='-' set x $ac_cv_host shift host_cpu=$1 host_vendor=$2 shift; shift # Remember, the first character of IFS is used to create $*, # except with old shells: host_os=$* IFS=$ac_save_IFS case $host_os in *\ *) host_os=`echo "$host_os" | sed 's/ /-/g'`;; esac # Backslashify metacharacters that are still active within # double-quoted strings. sed_quote_subst='s/\(["`$\\]\)/\\\1/g' # Same as above, but do not quote variable references. double_quote_subst='s/\(["`\\]\)/\\\1/g' # Sed substitution to delay expansion of an escaped shell variable in a # double_quote_subst'ed string. delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g' # Sed substitution to delay expansion of an escaped single quote. delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g' # Sed substitution to avoid accidental globbing in evaled expressions no_glob_subst='s/\*/\\\*/g' ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\' ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to print strings" >&5 printf %s "checking how to print strings... " >&6; } # Test print first, because it will be a builtin if present. if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \ test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then ECHO='print -r --' elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then ECHO='printf %s\n' else # Use this function as a fallback that always works. func_fallback_echo () { eval 'cat <<_LTECHO_EOF $1 _LTECHO_EOF' } ECHO='func_fallback_echo' fi # func_echo_all arg... # Invoke $ECHO with all args, space-separated. func_echo_all () { $ECHO "" } case $ECHO in printf*) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: printf" >&5 printf "%s\n" "printf" >&6; } ;; print*) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: print -r" >&5 printf "%s\n" "print -r" >&6; } ;; *) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: cat" >&5 printf "%s\n" "cat" >&6; } ;; esac { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5 printf %s "checking for a sed that does not truncate output... " >&6; } if test ${ac_cv_path_SED+y} then : printf %s "(cached) " >&6 else $as_nop ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/ for ac_i in 1 2 3 4 5 6 7; do ac_script="$ac_script$as_nl$ac_script" done echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed { ac_script=; unset ac_script;} if test -z "$SED"; then ac_path_SED_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_prog in sed gsed do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_SED="$as_dir$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_SED" || continue # Check for GNU ac_path_SED and select it if it is found. # Check for GNU $ac_path_SED case `"$ac_path_SED" --version 2>&1` in *GNU*) ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;; *) ac_count=0 printf %s 0123456789 >"conftest.in" while : do cat "conftest.in" "conftest.in" >"conftest.tmp" mv "conftest.tmp" "conftest.in" cp "conftest.in" "conftest.nl" printf "%s\n" '' >> "conftest.nl" "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break as_fn_arith $ac_count + 1 && ac_count=$as_val if test $ac_count -gt ${ac_path_SED_max-0}; then # Best one so far, save it but keep looking for a better one ac_cv_path_SED="$ac_path_SED" ac_path_SED_max=$ac_count fi # 10*(2^10) chars as input seems more than enough test $ac_count -gt 10 && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out;; esac $ac_path_SED_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_SED"; then as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5 fi else ac_cv_path_SED=$SED fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5 printf "%s\n" "$ac_cv_path_SED" >&6; } SED="$ac_cv_path_SED" rm -f conftest.sed test -z "$SED" && SED=sed Xsed="$SED -e 1s/^X//" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5 printf %s "checking for grep that handles long lines and -e... " >&6; } if test ${ac_cv_path_GREP+y} then : printf %s "(cached) " >&6 else $as_nop if test -z "$GREP"; then ac_path_GREP_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_prog in grep ggrep do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_GREP="$as_dir$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_GREP" || continue # Check for GNU ac_path_GREP and select it if it is found. # Check for GNU $ac_path_GREP case `"$ac_path_GREP" --version 2>&1` in *GNU*) ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;; *) ac_count=0 printf %s 0123456789 >"conftest.in" while : do cat "conftest.in" "conftest.in" >"conftest.tmp" mv "conftest.tmp" "conftest.in" cp "conftest.in" "conftest.nl" printf "%s\n" 'GREP' >> "conftest.nl" "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break as_fn_arith $ac_count + 1 && ac_count=$as_val if test $ac_count -gt ${ac_path_GREP_max-0}; then # Best one so far, save it but keep looking for a better one ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_max=$ac_count fi # 10*(2^10) chars as input seems more than enough test $ac_count -gt 10 && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out;; esac $ac_path_GREP_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_GREP"; then as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5 fi else ac_cv_path_GREP=$GREP fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5 printf "%s\n" "$ac_cv_path_GREP" >&6; } GREP="$ac_cv_path_GREP" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5 printf %s "checking for egrep... " >&6; } if test ${ac_cv_path_EGREP+y} then : printf %s "(cached) " >&6 else $as_nop if echo a | $GREP -E '(a|b)' >/dev/null 2>&1 then ac_cv_path_EGREP="$GREP -E" else if test -z "$EGREP"; then ac_path_EGREP_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_prog in egrep do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_EGREP="$as_dir$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_EGREP" || continue # Check for GNU ac_path_EGREP and select it if it is found. # Check for GNU $ac_path_EGREP case `"$ac_path_EGREP" --version 2>&1` in *GNU*) ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;; *) ac_count=0 printf %s 0123456789 >"conftest.in" while : do cat "conftest.in" "conftest.in" >"conftest.tmp" mv "conftest.tmp" "conftest.in" cp "conftest.in" "conftest.nl" printf "%s\n" 'EGREP' >> "conftest.nl" "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break as_fn_arith $ac_count + 1 && ac_count=$as_val if test $ac_count -gt ${ac_path_EGREP_max-0}; then # Best one so far, save it but keep looking for a better one ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_max=$ac_count fi # 10*(2^10) chars as input seems more than enough test $ac_count -gt 10 && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out;; esac $ac_path_EGREP_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_EGREP"; then as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5 fi else ac_cv_path_EGREP=$EGREP fi fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5 printf "%s\n" "$ac_cv_path_EGREP" >&6; } EGREP="$ac_cv_path_EGREP" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for fgrep" >&5 printf %s "checking for fgrep... " >&6; } if test ${ac_cv_path_FGREP+y} then : printf %s "(cached) " >&6 else $as_nop if echo 'ab*c' | $GREP -F 'ab*c' >/dev/null 2>&1 then ac_cv_path_FGREP="$GREP -F" else if test -z "$FGREP"; then ac_path_FGREP_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_prog in fgrep do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_FGREP="$as_dir$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_FGREP" || continue # Check for GNU ac_path_FGREP and select it if it is found. # Check for GNU $ac_path_FGREP case `"$ac_path_FGREP" --version 2>&1` in *GNU*) ac_cv_path_FGREP="$ac_path_FGREP" ac_path_FGREP_found=:;; *) ac_count=0 printf %s 0123456789 >"conftest.in" while : do cat "conftest.in" "conftest.in" >"conftest.tmp" mv "conftest.tmp" "conftest.in" cp "conftest.in" "conftest.nl" printf "%s\n" 'FGREP' >> "conftest.nl" "$ac_path_FGREP" FGREP < "conftest.nl" >"conftest.out" 2>/dev/null || break diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break as_fn_arith $ac_count + 1 && ac_count=$as_val if test $ac_count -gt ${ac_path_FGREP_max-0}; then # Best one so far, save it but keep looking for a better one ac_cv_path_FGREP="$ac_path_FGREP" ac_path_FGREP_max=$ac_count fi # 10*(2^10) chars as input seems more than enough test $ac_count -gt 10 && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out;; esac $ac_path_FGREP_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_FGREP"; then as_fn_error $? "no acceptable fgrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5 fi else ac_cv_path_FGREP=$FGREP fi fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_FGREP" >&5 printf "%s\n" "$ac_cv_path_FGREP" >&6; } FGREP="$ac_cv_path_FGREP" test -z "$GREP" && GREP=grep # Check whether --with-gnu-ld was given. if test ${with_gnu_ld+y} then : withval=$with_gnu_ld; test no = "$withval" || with_gnu_ld=yes else $as_nop with_gnu_ld=no fi ac_prog=ld if test yes = "$GCC"; then # Check if gcc -print-prog-name=ld gives a path. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for ld used by $CC" >&5 printf %s "checking for ld used by $CC... " >&6; } case $host in *-*-mingw*) # gcc leaves a trailing carriage return, which upsets mingw ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;; *) ac_prog=`($CC -print-prog-name=ld) 2>&5` ;; esac case $ac_prog in # Accept absolute paths. [\\/]* | ?:[\\/]*) re_direlt='/[^/][^/]*/\.\./' # Canonicalize the pathname of ld ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'` while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"` done test -z "$LD" && LD=$ac_prog ;; "") # If it fails, then pretend we aren't using GCC. ac_prog=ld ;; *) # If it is relative, then search for the first ld in PATH. with_gnu_ld=unknown ;; esac elif test yes = "$with_gnu_ld"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for GNU ld" >&5 printf %s "checking for GNU ld... " >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for non-GNU ld" >&5 printf %s "checking for non-GNU ld... " >&6; } fi if test ${lt_cv_path_LD+y} then : printf %s "(cached) " >&6 else $as_nop if test -z "$LD"; then lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR for ac_dir in $PATH; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then lt_cv_path_LD=$ac_dir/$ac_prog # Check to see if the program is GNU ld. I'd rather use --version, # but apparently some variants of GNU ld only accept -v. # Break only if it was the GNU/non-GNU ld that we prefer. case `"$lt_cv_path_LD" -v 2>&1 &5 printf "%s\n" "$LD" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -z "$LD" && as_fn_error $? "no acceptable ld found in \$PATH" "$LINENO" 5 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if the linker ($LD) is GNU ld" >&5 printf %s "checking if the linker ($LD) is GNU ld... " >&6; } if test ${lt_cv_prog_gnu_ld+y} then : printf %s "(cached) " >&6 else $as_nop # I'd rather use --version here, but apparently some GNU lds only accept -v. case `$LD -v 2>&1 &5 printf "%s\n" "$lt_cv_prog_gnu_ld" >&6; } with_gnu_ld=$lt_cv_prog_gnu_ld { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for BSD- or MS-compatible name lister (nm)" >&5 printf %s "checking for BSD- or MS-compatible name lister (nm)... " >&6; } if test ${lt_cv_path_NM+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$NM"; then # Let the user override the test. lt_cv_path_NM=$NM else lt_nm_to_check=${ac_tool_prefix}nm if test -n "$ac_tool_prefix" && test "$build" = "$host"; then lt_nm_to_check="$lt_nm_to_check nm" fi for lt_tmp_nm in $lt_nm_to_check; do lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. tmp_nm=$ac_dir/$lt_tmp_nm if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then # Check to see if the nm accepts a BSD-compat flag. # Adding the 'sed 1q' prevents false positives on HP-UX, which says: # nm: unknown option "B" ignored # Tru64's nm complains that /dev/null is an invalid object file # MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty case $build_os in mingw*) lt_bad_file=conftest.nm/nofile ;; *) lt_bad_file=/dev/null ;; esac case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in *$lt_bad_file* | *'Invalid file or object type'*) lt_cv_path_NM="$tmp_nm -B" break 2 ;; *) case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in */dev/null*) lt_cv_path_NM="$tmp_nm -p" break 2 ;; *) lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but continue # so that we can try to find one that supports BSD flags ;; esac ;; esac fi done IFS=$lt_save_ifs done : ${lt_cv_path_NM=no} fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_NM" >&5 printf "%s\n" "$lt_cv_path_NM" >&6; } if test no != "$lt_cv_path_NM"; then NM=$lt_cv_path_NM else # Didn't find any BSD compatible name lister, look for dumpbin. if test -n "$DUMPBIN"; then : # Let the user override the test. else if test -n "$ac_tool_prefix"; then for ac_prog in dumpbin "link -dump" do # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args. set dummy $ac_tool_prefix$ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_DUMPBIN+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$DUMPBIN"; then ac_cv_prog_DUMPBIN="$DUMPBIN" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_DUMPBIN="$ac_tool_prefix$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi DUMPBIN=$ac_cv_prog_DUMPBIN if test -n "$DUMPBIN"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $DUMPBIN" >&5 printf "%s\n" "$DUMPBIN" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$DUMPBIN" && break done fi if test -z "$DUMPBIN"; then ac_ct_DUMPBIN=$DUMPBIN for ac_prog in dumpbin "link -dump" do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_DUMPBIN+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_DUMPBIN"; then ac_cv_prog_ac_ct_DUMPBIN="$ac_ct_DUMPBIN" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_DUMPBIN="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_DUMPBIN=$ac_cv_prog_ac_ct_DUMPBIN if test -n "$ac_ct_DUMPBIN"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DUMPBIN" >&5 printf "%s\n" "$ac_ct_DUMPBIN" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$ac_ct_DUMPBIN" && break done if test "x$ac_ct_DUMPBIN" = x; then DUMPBIN=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac DUMPBIN=$ac_ct_DUMPBIN fi fi case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in *COFF*) DUMPBIN="$DUMPBIN -symbols -headers" ;; *) DUMPBIN=: ;; esac fi if test : != "$DUMPBIN"; then NM=$DUMPBIN fi fi test -z "$NM" && NM=nm { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking the name lister ($NM) interface" >&5 printf %s "checking the name lister ($NM) interface... " >&6; } if test ${lt_cv_nm_interface+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_nm_interface="BSD nm" echo "int some_variable = 0;" > conftest.$ac_ext (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&5) (eval "$ac_compile" 2>conftest.err) cat conftest.err >&5 (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&5) (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out) cat conftest.err >&5 (eval echo "\"\$as_me:$LINENO: output\"" >&5) cat conftest.out >&5 if $GREP 'External.*some_variable' conftest.out > /dev/null; then lt_cv_nm_interface="MS dumpbin" fi rm -f conftest* fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_nm_interface" >&5 printf "%s\n" "$lt_cv_nm_interface" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5 printf %s "checking whether ln -s works... " >&6; } LN_S=$as_ln_s if test "$LN_S" = "ln -s"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5 printf "%s\n" "no, using $LN_S" >&6; } fi # find the maximum length of command line arguments { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking the maximum length of command line arguments" >&5 printf %s "checking the maximum length of command line arguments... " >&6; } if test ${lt_cv_sys_max_cmd_len+y} then : printf %s "(cached) " >&6 else $as_nop i=0 teststring=ABCD case $build_os in msdosdjgpp*) # On DJGPP, this test can blow up pretty badly due to problems in libc # (any single argument exceeding 2000 bytes causes a buffer overrun # during glob expansion). Even if it were fixed, the result of this # check would be larger than it should be. lt_cv_sys_max_cmd_len=12288; # 12K is about right ;; gnu*) # Under GNU Hurd, this test is not required because there is # no limit to the length of command line arguments. # Libtool will interpret -1 as no limit whatsoever lt_cv_sys_max_cmd_len=-1; ;; cygwin* | mingw* | cegcc*) # On Win9x/ME, this test blows up -- it succeeds, but takes # about 5 minutes as the teststring grows exponentially. # Worse, since 9x/ME are not pre-emptively multitasking, # you end up with a "frozen" computer, even though with patience # the test eventually succeeds (with a max line length of 256k). # Instead, let's just punt: use the minimum linelength reported by # all of the supported platforms: 8192 (on NT/2K/XP). lt_cv_sys_max_cmd_len=8192; ;; mint*) # On MiNT this can take a long time and run out of memory. lt_cv_sys_max_cmd_len=8192; ;; amigaos*) # On AmigaOS with pdksh, this test takes hours, literally. # So we just punt and use a minimum line length of 8192. lt_cv_sys_max_cmd_len=8192; ;; bitrig* | darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*) # This has been around since 386BSD, at least. Likely further. if test -x /sbin/sysctl; then lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax` elif test -x /usr/sbin/sysctl; then lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax` else lt_cv_sys_max_cmd_len=65536 # usable default for all BSDs fi # And add a safety zone lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` ;; interix*) # We know the value 262144 and hardcode it with a safety zone (like BSD) lt_cv_sys_max_cmd_len=196608 ;; os2*) # The test takes a long time on OS/2. lt_cv_sys_max_cmd_len=8192 ;; osf*) # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not # nice to cause kernel panics so lets avoid the loop below. # First set a reasonable default. lt_cv_sys_max_cmd_len=16384 # if test -x /sbin/sysconfig; then case `/sbin/sysconfig -q proc exec_disable_arg_limit` in *1*) lt_cv_sys_max_cmd_len=-1 ;; esac fi ;; sco3.2v5*) lt_cv_sys_max_cmd_len=102400 ;; sysv5* | sco5v6* | sysv4.2uw2*) kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null` if test -n "$kargmax"; then lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[ ]//'` else lt_cv_sys_max_cmd_len=32768 fi ;; *) lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null` if test -n "$lt_cv_sys_max_cmd_len" && \ test undefined != "$lt_cv_sys_max_cmd_len"; then lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4` lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3` else # Make teststring a little bigger before we do anything with it. # a 1K string should be a reasonable start. for i in 1 2 3 4 5 6 7 8; do teststring=$teststring$teststring done SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}} # If test is not a shell built-in, we'll probably end up computing a # maximum length that is only half of the actual maximum length, but # we can't tell. while { test X`env echo "$teststring$teststring" 2>/dev/null` \ = "X$teststring$teststring"; } >/dev/null 2>&1 && test 17 != "$i" # 1/2 MB should be enough do i=`expr $i + 1` teststring=$teststring$teststring done # Only check the string length outside the loop. lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1` teststring= # Add a significant safety factor because C++ compilers can tack on # massive amounts of additional arguments before passing them to the # linker. It appears as though 1/2 is a usable value. lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2` fi ;; esac fi if test -n "$lt_cv_sys_max_cmd_len"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sys_max_cmd_len" >&5 printf "%s\n" "$lt_cv_sys_max_cmd_len" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none" >&5 printf "%s\n" "none" >&6; } fi max_cmd_len=$lt_cv_sys_max_cmd_len : ${CP="cp -f"} : ${MV="mv -f"} : ${RM="rm -f"} if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then lt_unset=unset else lt_unset=false fi # test EBCDIC or ASCII case `echo X|tr X '\101'` in A) # ASCII based system # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr lt_SP2NL='tr \040 \012' lt_NL2SP='tr \015\012 \040\040' ;; *) # EBCDIC based system lt_SP2NL='tr \100 \n' lt_NL2SP='tr \r\n \100\100' ;; esac { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to $host format" >&5 printf %s "checking how to convert $build file names to $host format... " >&6; } if test ${lt_cv_to_host_file_cmd+y} then : printf %s "(cached) " >&6 else $as_nop case $host in *-*-mingw* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32 ;; *-*-cygwin* ) lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32 ;; * ) # otherwise, assume *nix lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32 ;; esac ;; *-*-cygwin* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin ;; *-*-cygwin* ) lt_cv_to_host_file_cmd=func_convert_file_noop ;; * ) # otherwise, assume *nix lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin ;; esac ;; * ) # unhandled hosts (and "normal" native builds) lt_cv_to_host_file_cmd=func_convert_file_noop ;; esac fi to_host_file_cmd=$lt_cv_to_host_file_cmd { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_host_file_cmd" >&5 printf "%s\n" "$lt_cv_to_host_file_cmd" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to toolchain format" >&5 printf %s "checking how to convert $build file names to toolchain format... " >&6; } if test ${lt_cv_to_tool_file_cmd+y} then : printf %s "(cached) " >&6 else $as_nop #assume ordinary cross tools, or native build. lt_cv_to_tool_file_cmd=func_convert_file_noop case $host in *-*-mingw* ) case $build in *-*-mingw* ) # actually msys lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32 ;; esac ;; esac fi to_tool_file_cmd=$lt_cv_to_tool_file_cmd { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_tool_file_cmd" >&5 printf "%s\n" "$lt_cv_to_tool_file_cmd" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $LD option to reload object files" >&5 printf %s "checking for $LD option to reload object files... " >&6; } if test ${lt_cv_ld_reload_flag+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_ld_reload_flag='-r' fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_reload_flag" >&5 printf "%s\n" "$lt_cv_ld_reload_flag" >&6; } reload_flag=$lt_cv_ld_reload_flag case $reload_flag in "" | " "*) ;; *) reload_flag=" $reload_flag" ;; esac reload_cmds='$LD$reload_flag -o $output$reload_objs' case $host_os in cygwin* | mingw* | pw32* | cegcc*) if test yes != "$GCC"; then reload_cmds=false fi ;; darwin*) if test yes = "$GCC"; then reload_cmds='$LTCC $LTCFLAGS -nostdlib $wl-r -o $output$reload_objs' else reload_cmds='$LD$reload_flag -o $output$reload_objs' fi ;; esac if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}file", so it can be a program name with args. set dummy ${ac_tool_prefix}file; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_FILECMD+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$FILECMD"; then ac_cv_prog_FILECMD="$FILECMD" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_FILECMD="${ac_tool_prefix}file" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi FILECMD=$ac_cv_prog_FILECMD if test -n "$FILECMD"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $FILECMD" >&5 printf "%s\n" "$FILECMD" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_FILECMD"; then ac_ct_FILECMD=$FILECMD # Extract the first word of "file", so it can be a program name with args. set dummy file; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_FILECMD+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_FILECMD"; then ac_cv_prog_ac_ct_FILECMD="$ac_ct_FILECMD" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_FILECMD="file" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_FILECMD=$ac_cv_prog_ac_ct_FILECMD if test -n "$ac_ct_FILECMD"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_FILECMD" >&5 printf "%s\n" "$ac_ct_FILECMD" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_FILECMD" = x; then FILECMD=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac FILECMD=$ac_ct_FILECMD fi else FILECMD="$ac_cv_prog_FILECMD" fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}objdump", so it can be a program name with args. set dummy ${ac_tool_prefix}objdump; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_OBJDUMP+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$OBJDUMP"; then ac_cv_prog_OBJDUMP="$OBJDUMP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_OBJDUMP="${ac_tool_prefix}objdump" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi OBJDUMP=$ac_cv_prog_OBJDUMP if test -n "$OBJDUMP"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $OBJDUMP" >&5 printf "%s\n" "$OBJDUMP" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_OBJDUMP"; then ac_ct_OBJDUMP=$OBJDUMP # Extract the first word of "objdump", so it can be a program name with args. set dummy objdump; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_OBJDUMP+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_OBJDUMP"; then ac_cv_prog_ac_ct_OBJDUMP="$ac_ct_OBJDUMP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_OBJDUMP="objdump" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_OBJDUMP=$ac_cv_prog_ac_ct_OBJDUMP if test -n "$ac_ct_OBJDUMP"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OBJDUMP" >&5 printf "%s\n" "$ac_ct_OBJDUMP" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_OBJDUMP" = x; then OBJDUMP="false" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac OBJDUMP=$ac_ct_OBJDUMP fi else OBJDUMP="$ac_cv_prog_OBJDUMP" fi test -z "$OBJDUMP" && OBJDUMP=objdump { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to recognize dependent libraries" >&5 printf %s "checking how to recognize dependent libraries... " >&6; } if test ${lt_cv_deplibs_check_method+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_file_magic_cmd='$MAGIC_CMD' lt_cv_file_magic_test_file= lt_cv_deplibs_check_method='unknown' # Need to set the preceding variable on all platforms that support # interlibrary dependencies. # 'none' -- dependencies not supported. # 'unknown' -- same as none, but documents that we really don't know. # 'pass_all' -- all dependencies passed with no checks. # 'test_compile' -- check by making test program. # 'file_magic [[regex]]' -- check by looking for files in library path # that responds to the $file_magic_cmd with a given extended regex. # If you have 'file' or equivalent on your system and you're not sure # whether 'pass_all' will *always* work, you probably want this one. case $host_os in aix[4-9]*) lt_cv_deplibs_check_method=pass_all ;; beos*) lt_cv_deplibs_check_method=pass_all ;; bsdi[45]*) lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib)' lt_cv_file_magic_cmd='$FILECMD -L' lt_cv_file_magic_test_file=/shlib/libc.so ;; cygwin*) # func_win32_libid is a shell function defined in ltmain.sh lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL' lt_cv_file_magic_cmd='func_win32_libid' ;; mingw* | pw32*) # Base MSYS/MinGW do not provide the 'file' command needed by # func_win32_libid shell function, so use a weaker test based on 'objdump', # unless we find 'file', for example because we are cross-compiling. if ( file / ) >/dev/null 2>&1; then lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL' lt_cv_file_magic_cmd='func_win32_libid' else # Keep this pattern in sync with the one in func_win32_libid. lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)' lt_cv_file_magic_cmd='$OBJDUMP -f' fi ;; cegcc*) # use the weaker test based on 'objdump'. See mingw*. lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?' lt_cv_file_magic_cmd='$OBJDUMP -f' ;; darwin* | rhapsody*) lt_cv_deplibs_check_method=pass_all ;; freebsd* | dragonfly* | midnightbsd*) if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then case $host_cpu in i*86 ) # Not sure whether the presence of OpenBSD here was a mistake. # Let's accept both of them until this is cleared up. lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[3-9]86 (compact )?demand paged shared library' lt_cv_file_magic_cmd=$FILECMD lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*` ;; esac else lt_cv_deplibs_check_method=pass_all fi ;; haiku*) lt_cv_deplibs_check_method=pass_all ;; hpux10.20* | hpux11*) lt_cv_file_magic_cmd=$FILECMD case $host_cpu in ia64*) lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF-[0-9][0-9]) shared object file - IA64' lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so ;; hppa*64*) lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]' lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl ;; *) lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|PA-RISC[0-9]\.[0-9]) shared library' lt_cv_file_magic_test_file=/usr/lib/libc.sl ;; esac ;; interix[3-9]*) # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|\.a)$' ;; irix5* | irix6* | nonstopux*) case $LD in *-32|*"-32 ") libmagic=32-bit;; *-n32|*"-n32 ") libmagic=N32;; *-64|*"-64 ") libmagic=64-bit;; *) libmagic=never-match;; esac lt_cv_deplibs_check_method=pass_all ;; # This must be glibc/ELF. linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) lt_cv_deplibs_check_method=pass_all ;; netbsd*) if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$' else lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|_pic\.a)$' fi ;; newos6*) lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (executable|dynamic lib)' lt_cv_file_magic_cmd=$FILECMD lt_cv_file_magic_test_file=/usr/lib/libnls.so ;; *nto* | *qnx*) lt_cv_deplibs_check_method=pass_all ;; openbsd* | bitrig*) if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|\.so|_pic\.a)$' else lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$' fi ;; osf3* | osf4* | osf5*) lt_cv_deplibs_check_method=pass_all ;; rdos*) lt_cv_deplibs_check_method=pass_all ;; solaris*) lt_cv_deplibs_check_method=pass_all ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) lt_cv_deplibs_check_method=pass_all ;; sysv4 | sysv4.3*) case $host_vendor in motorola) lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib) M[0-9][0-9]* Version [0-9]' lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*` ;; ncr) lt_cv_deplibs_check_method=pass_all ;; sequent) lt_cv_file_magic_cmd='/bin/file' lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [LM]SB (shared object|dynamic lib )' ;; sni) lt_cv_file_magic_cmd='/bin/file' lt_cv_deplibs_check_method="file_magic ELF [0-9][0-9]*-bit [LM]SB dynamic lib" lt_cv_file_magic_test_file=/lib/libc.so ;; siemens) lt_cv_deplibs_check_method=pass_all ;; pc) lt_cv_deplibs_check_method=pass_all ;; esac ;; tpf*) lt_cv_deplibs_check_method=pass_all ;; os2*) lt_cv_deplibs_check_method=pass_all ;; esac fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_deplibs_check_method" >&5 printf "%s\n" "$lt_cv_deplibs_check_method" >&6; } file_magic_glob= want_nocaseglob=no if test "$build" = "$host"; then case $host_os in mingw* | pw32*) if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then want_nocaseglob=yes else file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[\1]\/[\1]\/g;/g"` fi ;; esac fi file_magic_cmd=$lt_cv_file_magic_cmd deplibs_check_method=$lt_cv_deplibs_check_method test -z "$deplibs_check_method" && deplibs_check_method=unknown if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}dlltool", so it can be a program name with args. set dummy ${ac_tool_prefix}dlltool; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_DLLTOOL+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$DLLTOOL"; then ac_cv_prog_DLLTOOL="$DLLTOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_DLLTOOL="${ac_tool_prefix}dlltool" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi DLLTOOL=$ac_cv_prog_DLLTOOL if test -n "$DLLTOOL"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $DLLTOOL" >&5 printf "%s\n" "$DLLTOOL" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_DLLTOOL"; then ac_ct_DLLTOOL=$DLLTOOL # Extract the first word of "dlltool", so it can be a program name with args. set dummy dlltool; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_DLLTOOL+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_DLLTOOL"; then ac_cv_prog_ac_ct_DLLTOOL="$ac_ct_DLLTOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_DLLTOOL="dlltool" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_DLLTOOL=$ac_cv_prog_ac_ct_DLLTOOL if test -n "$ac_ct_DLLTOOL"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DLLTOOL" >&5 printf "%s\n" "$ac_ct_DLLTOOL" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_DLLTOOL" = x; then DLLTOOL="false" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac DLLTOOL=$ac_ct_DLLTOOL fi else DLLTOOL="$ac_cv_prog_DLLTOOL" fi test -z "$DLLTOOL" && DLLTOOL=dlltool { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to associate runtime and link libraries" >&5 printf %s "checking how to associate runtime and link libraries... " >&6; } if test ${lt_cv_sharedlib_from_linklib_cmd+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_sharedlib_from_linklib_cmd='unknown' case $host_os in cygwin* | mingw* | pw32* | cegcc*) # two different shell functions defined in ltmain.sh; # decide which one to use based on capabilities of $DLLTOOL case `$DLLTOOL --help 2>&1` in *--identify-strict*) lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib ;; *) lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback ;; esac ;; *) # fallback: assume linklib IS sharedlib lt_cv_sharedlib_from_linklib_cmd=$ECHO ;; esac fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sharedlib_from_linklib_cmd" >&5 printf "%s\n" "$lt_cv_sharedlib_from_linklib_cmd" >&6; } sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO if test -n "$ac_tool_prefix"; then for ac_prog in ar do # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args. set dummy $ac_tool_prefix$ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_AR+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$AR"; then ac_cv_prog_AR="$AR" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_AR="$ac_tool_prefix$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi AR=$ac_cv_prog_AR if test -n "$AR"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $AR" >&5 printf "%s\n" "$AR" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$AR" && break done fi if test -z "$AR"; then ac_ct_AR=$AR for ac_prog in ar do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_AR+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_AR"; then ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_AR="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_AR=$ac_cv_prog_ac_ct_AR if test -n "$ac_ct_AR"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5 printf "%s\n" "$ac_ct_AR" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$ac_ct_AR" && break done if test "x$ac_ct_AR" = x; then AR="false" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac AR=$ac_ct_AR fi fi : ${AR=ar} # Use ARFLAGS variable as AR's operation code to sync the variable naming with # Automake. If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have # higher priority because thats what people were doing historically (setting # ARFLAGS for automake and AR_FLAGS for libtool). FIXME: Make the AR_FLAGS # variable obsoleted/removed. test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr} lt_ar_flags=$AR_FLAGS # Make AR_FLAGS overridable by 'make ARFLAGS='. Don't try to run-time override # by AR_FLAGS because that was never working and AR_FLAGS is about to die. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for archiver @FILE support" >&5 printf %s "checking for archiver @FILE support... " >&6; } if test ${lt_cv_ar_at_file+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_ar_at_file=no cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : echo conftest.$ac_objext > conftest.lst lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&5' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5 (eval $lt_ar_try) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } if test 0 -eq "$ac_status"; then # Ensure the archiver fails upon bogus file names. rm -f conftest.$ac_objext libconftest.a { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5 (eval $lt_ar_try) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } if test 0 -ne "$ac_status"; then lt_cv_ar_at_file=@ fi fi rm -f conftest.* libconftest.a fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ar_at_file" >&5 printf "%s\n" "$lt_cv_ar_at_file" >&6; } if test no = "$lt_cv_ar_at_file"; then archiver_list_spec= else archiver_list_spec=$lt_cv_ar_at_file fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args. set dummy ${ac_tool_prefix}strip; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_STRIP+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$STRIP"; then ac_cv_prog_STRIP="$STRIP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_STRIP="${ac_tool_prefix}strip" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi STRIP=$ac_cv_prog_STRIP if test -n "$STRIP"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5 printf "%s\n" "$STRIP" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_STRIP"; then ac_ct_STRIP=$STRIP # Extract the first word of "strip", so it can be a program name with args. set dummy strip; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_STRIP+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_STRIP"; then ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_STRIP="strip" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP if test -n "$ac_ct_STRIP"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5 printf "%s\n" "$ac_ct_STRIP" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_STRIP" = x; then STRIP=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac STRIP=$ac_ct_STRIP fi else STRIP="$ac_cv_prog_STRIP" fi test -z "$STRIP" && STRIP=: if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args. set dummy ${ac_tool_prefix}ranlib; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_RANLIB+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$RANLIB"; then ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi RANLIB=$ac_cv_prog_RANLIB if test -n "$RANLIB"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5 printf "%s\n" "$RANLIB" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_RANLIB"; then ac_ct_RANLIB=$RANLIB # Extract the first word of "ranlib", so it can be a program name with args. set dummy ranlib; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_RANLIB+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_RANLIB"; then ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_RANLIB="ranlib" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB if test -n "$ac_ct_RANLIB"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5 printf "%s\n" "$ac_ct_RANLIB" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_RANLIB" = x; then RANLIB=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac RANLIB=$ac_ct_RANLIB fi else RANLIB="$ac_cv_prog_RANLIB" fi test -z "$RANLIB" && RANLIB=: # Determine commands to create old-style static archives. old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs' old_postinstall_cmds='chmod 644 $oldlib' old_postuninstall_cmds= if test -n "$RANLIB"; then case $host_os in bitrig* | openbsd*) old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB -t \$tool_oldlib" ;; *) old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib" ;; esac old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib" fi case $host_os in darwin*) lock_old_archive_extraction=yes ;; *) lock_old_archive_extraction=no ;; esac for ac_prog in gawk mawk nawk awk do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_AWK+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$AWK"; then ac_cv_prog_AWK="$AWK" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_AWK="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi AWK=$ac_cv_prog_AWK if test -n "$AWK"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5 printf "%s\n" "$AWK" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$AWK" && break done # If no C compiler was specified, use CC. LTCC=${LTCC-"$CC"} # If no C compiler flags were specified, use CFLAGS. LTCFLAGS=${LTCFLAGS-"$CFLAGS"} # Allow CC to be a program name with arguments. compiler=$CC # Check for command to grab the raw symbol name followed by C symbol from nm. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking command to parse $NM output from $compiler object" >&5 printf %s "checking command to parse $NM output from $compiler object... " >&6; } if test ${lt_cv_sys_global_symbol_pipe+y} then : printf %s "(cached) " >&6 else $as_nop # These are sane defaults that work on at least a few old systems. # [They come from Ultrix. What could be older than Ultrix?!! ;)] # Character class describing NM global symbol codes. symcode='[BCDEGRST]' # Regexp to match symbols that can be accessed directly from C. sympat='\([_A-Za-z][_A-Za-z0-9]*\)' # Define system-specific variables. case $host_os in aix*) symcode='[BCDT]' ;; cygwin* | mingw* | pw32* | cegcc*) symcode='[ABCDGISTW]' ;; hpux*) if test ia64 = "$host_cpu"; then symcode='[ABCDEGRST]' fi ;; irix* | nonstopux*) symcode='[BCDEGRST]' ;; osf*) symcode='[BCDEGQRST]' ;; solaris*) symcode='[BDRT]' ;; sco3.2v5*) symcode='[DT]' ;; sysv4.2uw2*) symcode='[DT]' ;; sysv5* | sco5v6* | unixware* | OpenUNIX*) symcode='[ABDT]' ;; sysv4) symcode='[DFNSTU]' ;; esac # If we're using GNU nm, then use its standard symbol codes. case `$NM -V 2>&1` in *GNU* | *'with BFD'*) symcode='[ABCDGIRSTW]' ;; esac if test "$lt_cv_nm_interface" = "MS dumpbin"; then # Gets list of data symbols to import. lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'" # Adjust the below global symbol transforms to fixup imported variables. lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'" lt_c_name_hook=" -e 's/^I .* \(.*\)$/ {\"\1\", (void *) 0},/p'" lt_c_name_lib_hook="\ -e 's/^I .* \(lib.*\)$/ {\"\1\", (void *) 0},/p'\ -e 's/^I .* \(.*\)$/ {\"lib\1\", (void *) 0},/p'" else # Disable hooks by default. lt_cv_sys_global_symbol_to_import= lt_cdecl_hook= lt_c_name_hook= lt_c_name_lib_hook= fi # Transform an extracted symbol line into a proper C declaration. # Some systems (esp. on ia64) link data and code symbols differently, # so use this general approach. lt_cv_sys_global_symbol_to_cdecl="$SED -n"\ $lt_cdecl_hook\ " -e 's/^T .* \(.*\)$/extern int \1();/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'" # Transform an extracted symbol line into symbol name and symbol address lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\ $lt_c_name_hook\ " -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/p'" # Transform an extracted symbol line into symbol name with lib prefix and # symbol address. lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\ $lt_c_name_lib_hook\ " -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\ " -e 's/^$symcode$symcode* .* \(lib.*\)$/ {\"\1\", (void *) \&\1},/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/ {\"lib\1\", (void *) \&\1},/p'" # Handle CRLF in mingw tool chain opt_cr= case $build_os in mingw*) opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp ;; esac # Try without a prefix underscore, then with it. for ac_symprfx in "" "_"; do # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol. symxfrm="\\1 $ac_symprfx\\2 \\2" # Write the raw and C identifiers. if test "$lt_cv_nm_interface" = "MS dumpbin"; then # Fake it for dumpbin and say T for any non-static function, # D for any global variable and I for any imported variable. # Also find C++ and __fastcall symbols from MSVC++ or ICC, # which start with @ or ?. lt_cv_sys_global_symbol_pipe="$AWK '"\ " {last_section=section; section=\$ 3};"\ " /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\ " /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\ " /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\ " /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\ " /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\ " \$ 0!~/External *\|/{next};"\ " / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\ " {if(hide[section]) next};"\ " {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\ " {split(\$ 0,a,/\||\r/); split(a[2],s)};"\ " s[1]~/^[@?]/{print f,s[1],s[1]; next};"\ " s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\ " ' prfx=^$ac_symprfx" else lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[ ]\($symcode$symcode*\)[ ][ ]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'" fi lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'" # Check to see that the pipe works correctly. pipe_works=no rm -f conftest* cat > conftest.$ac_ext <<_LT_EOF #ifdef __cplusplus extern "C" { #endif char nm_test_var; void nm_test_func(void); void nm_test_func(void){} #ifdef __cplusplus } #endif int main(){nm_test_var='a';nm_test_func();return(0);} _LT_EOF if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then # Now try to grab the symbols. nlist=conftest.nm if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist\""; } >&5 (eval $NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && test -s "$nlist"; then # Try sorting and uniquifying the output. if sort "$nlist" | uniq > "$nlist"T; then mv -f "$nlist"T "$nlist" else rm -f "$nlist"T fi # Make sure that we snagged all the symbols we need. if $GREP ' nm_test_var$' "$nlist" >/dev/null; then if $GREP ' nm_test_func$' "$nlist" >/dev/null; then cat <<_LT_EOF > conftest.$ac_ext /* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests. */ #if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE /* DATA imports from DLLs on WIN32 can't be const, because runtime relocations are performed -- see ld's documentation on pseudo-relocs. */ # define LT_DLSYM_CONST #elif defined __osf__ /* This system does not cope well with relocations in const data. */ # define LT_DLSYM_CONST #else # define LT_DLSYM_CONST const #endif #ifdef __cplusplus extern "C" { #endif _LT_EOF # Now generate the symbol file. eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext' cat <<_LT_EOF >> conftest.$ac_ext /* The mapping between symbol names and symbols. */ LT_DLSYM_CONST struct { const char *name; void *address; } lt__PROGRAM__LTX_preloaded_symbols[] = { { "@PROGRAM@", (void *) 0 }, _LT_EOF $SED "s/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext cat <<\_LT_EOF >> conftest.$ac_ext {0, (void *) 0} }; /* This works around a problem in FreeBSD linker */ #ifdef FREEBSD_WORKAROUND static const void *lt_preloaded_setup() { return lt__PROGRAM__LTX_preloaded_symbols; } #endif #ifdef __cplusplus } #endif _LT_EOF # Now try linking the two files. mv conftest.$ac_objext conftstm.$ac_objext lt_globsym_save_LIBS=$LIBS lt_globsym_save_CFLAGS=$CFLAGS LIBS=conftstm.$ac_objext CFLAGS="$CFLAGS$lt_prog_compiler_no_builtin_flag" if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5 (eval $ac_link) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && test -s conftest$ac_exeext; then pipe_works=yes fi LIBS=$lt_globsym_save_LIBS CFLAGS=$lt_globsym_save_CFLAGS else echo "cannot find nm_test_func in $nlist" >&5 fi else echo "cannot find nm_test_var in $nlist" >&5 fi else echo "cannot run $lt_cv_sys_global_symbol_pipe" >&5 fi else echo "$progname: failed program was:" >&5 cat conftest.$ac_ext >&5 fi rm -rf conftest* conftst* # Do not use the global_symbol_pipe unless it works. if test yes = "$pipe_works"; then break else lt_cv_sys_global_symbol_pipe= fi done fi if test -z "$lt_cv_sys_global_symbol_pipe"; then lt_cv_sys_global_symbol_to_cdecl= fi if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: failed" >&5 printf "%s\n" "failed" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: ok" >&5 printf "%s\n" "ok" >&6; } fi # Response file support. if test "$lt_cv_nm_interface" = "MS dumpbin"; then nm_file_list_spec='@' elif $NM --help 2>/dev/null | grep '[@]FILE' >/dev/null; then nm_file_list_spec='@' fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for sysroot" >&5 printf %s "checking for sysroot... " >&6; } # Check whether --with-sysroot was given. if test ${with_sysroot+y} then : withval=$with_sysroot; else $as_nop with_sysroot=no fi lt_sysroot= case $with_sysroot in #( yes) if test yes = "$GCC"; then lt_sysroot=`$CC --print-sysroot 2>/dev/null` fi ;; #( /*) lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"` ;; #( no|'') ;; #( *) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $with_sysroot" >&5 printf "%s\n" "$with_sysroot" >&6; } as_fn_error $? "The sysroot must be an absolute path." "$LINENO" 5 ;; esac { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: ${lt_sysroot:-no}" >&5 printf "%s\n" "${lt_sysroot:-no}" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for a working dd" >&5 printf %s "checking for a working dd... " >&6; } if test ${ac_cv_path_lt_DD+y} then : printf %s "(cached) " >&6 else $as_nop printf 0123456789abcdef0123456789abcdef >conftest.i cat conftest.i conftest.i >conftest2.i : ${lt_DD:=$DD} if test -z "$lt_DD"; then ac_path_lt_DD_found=false # Loop through the user's path and test for each of PROGNAME-LIST as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_prog in dd do for ac_exec_ext in '' $ac_executable_extensions; do ac_path_lt_DD="$as_dir$ac_prog$ac_exec_ext" as_fn_executable_p "$ac_path_lt_DD" || continue if "$ac_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then cmp -s conftest.i conftest.out \ && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=: fi $ac_path_lt_DD_found && break 3 done done done IFS=$as_save_IFS if test -z "$ac_cv_path_lt_DD"; then : fi else ac_cv_path_lt_DD=$lt_DD fi rm -f conftest.i conftest2.i conftest.out fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_lt_DD" >&5 printf "%s\n" "$ac_cv_path_lt_DD" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to truncate binary pipes" >&5 printf %s "checking how to truncate binary pipes... " >&6; } if test ${lt_cv_truncate_bin+y} then : printf %s "(cached) " >&6 else $as_nop printf 0123456789abcdef0123456789abcdef >conftest.i cat conftest.i conftest.i >conftest2.i lt_cv_truncate_bin= if "$ac_cv_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then cmp -s conftest.i conftest.out \ && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1" fi rm -f conftest.i conftest2.i conftest.out test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q" fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_truncate_bin" >&5 printf "%s\n" "$lt_cv_truncate_bin" >&6; } # Calculate cc_basename. Skip known compiler wrappers and cross-prefix. func_cc_basename () { for cc_temp in $*""; do case $cc_temp in compile | *[\\/]compile | ccache | *[\\/]ccache ) ;; distcc | *[\\/]distcc | purify | *[\\/]purify ) ;; \-*) ;; *) break;; esac done func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"` } # Check whether --enable-libtool-lock was given. if test ${enable_libtool_lock+y} then : enableval=$enable_libtool_lock; fi test no = "$enable_libtool_lock" || enable_libtool_lock=yes # Some flags need to be propagated to the compiler or linker for good # libtool support. case $host in ia64-*-hpux*) # Find out what ABI is being produced by ac_compile, and set mode # options accordingly. echo 'int i;' > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then case `$FILECMD conftest.$ac_objext` in *ELF-32*) HPUX_IA64_MODE=32 ;; *ELF-64*) HPUX_IA64_MODE=64 ;; esac fi rm -rf conftest* ;; *-*-irix6*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo '#line '$LINENO' "configure"' > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then if test yes = "$lt_cv_prog_gnu_ld"; then case `$FILECMD conftest.$ac_objext` in *32-bit*) LD="${LD-ld} -melf32bsmip" ;; *N32*) LD="${LD-ld} -melf32bmipn32" ;; *64-bit*) LD="${LD-ld} -melf64bmip" ;; esac else case `$FILECMD conftest.$ac_objext` in *32-bit*) LD="${LD-ld} -32" ;; *N32*) LD="${LD-ld} -n32" ;; *64-bit*) LD="${LD-ld} -64" ;; esac fi fi rm -rf conftest* ;; mips64*-*linux*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo '#line '$LINENO' "configure"' > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then emul=elf case `$FILECMD conftest.$ac_objext` in *32-bit*) emul="${emul}32" ;; *64-bit*) emul="${emul}64" ;; esac case `$FILECMD conftest.$ac_objext` in *MSB*) emul="${emul}btsmip" ;; *LSB*) emul="${emul}ltsmip" ;; esac case `$FILECMD conftest.$ac_objext` in *N32*) emul="${emul}n32" ;; esac LD="${LD-ld} -m $emul" fi rm -rf conftest* ;; x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \ s390*-*linux*|s390*-*tpf*|sparc*-*linux*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. Note that the listed cases only cover the # situations where additional linker options are needed (such as when # doing 32-bit compilation for a host where ld defaults to 64-bit, or # vice versa); the common cases where no linker options are needed do # not appear in the list. echo 'int i;' > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then case `$FILECMD conftest.o` in *32-bit*) case $host in x86_64-*kfreebsd*-gnu) LD="${LD-ld} -m elf_i386_fbsd" ;; x86_64-*linux*) case `$FILECMD conftest.o` in *x86-64*) LD="${LD-ld} -m elf32_x86_64" ;; *) LD="${LD-ld} -m elf_i386" ;; esac ;; powerpc64le-*linux*) LD="${LD-ld} -m elf32lppclinux" ;; powerpc64-*linux*) LD="${LD-ld} -m elf32ppclinux" ;; s390x-*linux*) LD="${LD-ld} -m elf_s390" ;; sparc64-*linux*) LD="${LD-ld} -m elf32_sparc" ;; esac ;; *64-bit*) case $host in x86_64-*kfreebsd*-gnu) LD="${LD-ld} -m elf_x86_64_fbsd" ;; x86_64-*linux*) LD="${LD-ld} -m elf_x86_64" ;; powerpcle-*linux*) LD="${LD-ld} -m elf64lppc" ;; powerpc-*linux*) LD="${LD-ld} -m elf64ppc" ;; s390*-*linux*|s390*-*tpf*) LD="${LD-ld} -m elf64_s390" ;; sparc*-*linux*) LD="${LD-ld} -m elf64_sparc" ;; esac ;; esac fi rm -rf conftest* ;; *-*-sco3.2v5*) # On SCO OpenServer 5, we need -belf to get full-featured binaries. SAVE_CFLAGS=$CFLAGS CFLAGS="$CFLAGS -belf" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the C compiler needs -belf" >&5 printf %s "checking whether the C compiler needs -belf... " >&6; } if test ${lt_cv_cc_needs_belf+y} then : printf %s "(cached) " >&6 else $as_nop ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : lt_cv_cc_needs_belf=yes else $as_nop lt_cv_cc_needs_belf=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_cc_needs_belf" >&5 printf "%s\n" "$lt_cv_cc_needs_belf" >&6; } if test yes != "$lt_cv_cc_needs_belf"; then # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf CFLAGS=$SAVE_CFLAGS fi ;; *-*solaris*) # Find out what ABI is being produced by ac_compile, and set linker # options accordingly. echo 'int i;' > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then case `$FILECMD conftest.o` in *64-bit*) case $lt_cv_prog_gnu_ld in yes*) case $host in i?86-*-solaris*|x86_64-*-solaris*) LD="${LD-ld} -m elf_x86_64" ;; sparc*-*-solaris*) LD="${LD-ld} -m elf64_sparc" ;; esac # GNU ld 2.21 introduced _sol2 emulations. Use them if available. if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then LD=${LD-ld}_sol2 fi ;; *) if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then LD="${LD-ld} -64" fi ;; esac ;; esac fi rm -rf conftest* ;; esac need_locks=$enable_libtool_lock if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}mt", so it can be a program name with args. set dummy ${ac_tool_prefix}mt; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_MANIFEST_TOOL+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$MANIFEST_TOOL"; then ac_cv_prog_MANIFEST_TOOL="$MANIFEST_TOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_MANIFEST_TOOL="${ac_tool_prefix}mt" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi MANIFEST_TOOL=$ac_cv_prog_MANIFEST_TOOL if test -n "$MANIFEST_TOOL"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $MANIFEST_TOOL" >&5 printf "%s\n" "$MANIFEST_TOOL" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_MANIFEST_TOOL"; then ac_ct_MANIFEST_TOOL=$MANIFEST_TOOL # Extract the first word of "mt", so it can be a program name with args. set dummy mt; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_MANIFEST_TOOL+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_MANIFEST_TOOL"; then ac_cv_prog_ac_ct_MANIFEST_TOOL="$ac_ct_MANIFEST_TOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_MANIFEST_TOOL="mt" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_MANIFEST_TOOL=$ac_cv_prog_ac_ct_MANIFEST_TOOL if test -n "$ac_ct_MANIFEST_TOOL"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_MANIFEST_TOOL" >&5 printf "%s\n" "$ac_ct_MANIFEST_TOOL" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_MANIFEST_TOOL" = x; then MANIFEST_TOOL=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac MANIFEST_TOOL=$ac_ct_MANIFEST_TOOL fi else MANIFEST_TOOL="$ac_cv_prog_MANIFEST_TOOL" fi test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $MANIFEST_TOOL is a manifest tool" >&5 printf %s "checking if $MANIFEST_TOOL is a manifest tool... " >&6; } if test ${lt_cv_path_mainfest_tool+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_path_mainfest_tool=no echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&5 $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out cat conftest.err >&5 if $GREP 'Manifest Tool' conftest.out > /dev/null; then lt_cv_path_mainfest_tool=yes fi rm -f conftest* fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_mainfest_tool" >&5 printf "%s\n" "$lt_cv_path_mainfest_tool" >&6; } if test yes != "$lt_cv_path_mainfest_tool"; then MANIFEST_TOOL=: fi case $host_os in rhapsody* | darwin*) if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}dsymutil", so it can be a program name with args. set dummy ${ac_tool_prefix}dsymutil; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_DSYMUTIL+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$DSYMUTIL"; then ac_cv_prog_DSYMUTIL="$DSYMUTIL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_DSYMUTIL="${ac_tool_prefix}dsymutil" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi DSYMUTIL=$ac_cv_prog_DSYMUTIL if test -n "$DSYMUTIL"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $DSYMUTIL" >&5 printf "%s\n" "$DSYMUTIL" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_DSYMUTIL"; then ac_ct_DSYMUTIL=$DSYMUTIL # Extract the first word of "dsymutil", so it can be a program name with args. set dummy dsymutil; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_DSYMUTIL+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_DSYMUTIL"; then ac_cv_prog_ac_ct_DSYMUTIL="$ac_ct_DSYMUTIL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_DSYMUTIL="dsymutil" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_DSYMUTIL=$ac_cv_prog_ac_ct_DSYMUTIL if test -n "$ac_ct_DSYMUTIL"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DSYMUTIL" >&5 printf "%s\n" "$ac_ct_DSYMUTIL" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_DSYMUTIL" = x; then DSYMUTIL=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac DSYMUTIL=$ac_ct_DSYMUTIL fi else DSYMUTIL="$ac_cv_prog_DSYMUTIL" fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}nmedit", so it can be a program name with args. set dummy ${ac_tool_prefix}nmedit; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_NMEDIT+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$NMEDIT"; then ac_cv_prog_NMEDIT="$NMEDIT" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_NMEDIT="${ac_tool_prefix}nmedit" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi NMEDIT=$ac_cv_prog_NMEDIT if test -n "$NMEDIT"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $NMEDIT" >&5 printf "%s\n" "$NMEDIT" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_NMEDIT"; then ac_ct_NMEDIT=$NMEDIT # Extract the first word of "nmedit", so it can be a program name with args. set dummy nmedit; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_NMEDIT+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_NMEDIT"; then ac_cv_prog_ac_ct_NMEDIT="$ac_ct_NMEDIT" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_NMEDIT="nmedit" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_NMEDIT=$ac_cv_prog_ac_ct_NMEDIT if test -n "$ac_ct_NMEDIT"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_NMEDIT" >&5 printf "%s\n" "$ac_ct_NMEDIT" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_NMEDIT" = x; then NMEDIT=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac NMEDIT=$ac_ct_NMEDIT fi else NMEDIT="$ac_cv_prog_NMEDIT" fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}lipo", so it can be a program name with args. set dummy ${ac_tool_prefix}lipo; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_LIPO+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$LIPO"; then ac_cv_prog_LIPO="$LIPO" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_LIPO="${ac_tool_prefix}lipo" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi LIPO=$ac_cv_prog_LIPO if test -n "$LIPO"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $LIPO" >&5 printf "%s\n" "$LIPO" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_LIPO"; then ac_ct_LIPO=$LIPO # Extract the first word of "lipo", so it can be a program name with args. set dummy lipo; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_LIPO+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_LIPO"; then ac_cv_prog_ac_ct_LIPO="$ac_ct_LIPO" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_LIPO="lipo" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_LIPO=$ac_cv_prog_ac_ct_LIPO if test -n "$ac_ct_LIPO"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_LIPO" >&5 printf "%s\n" "$ac_ct_LIPO" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_LIPO" = x; then LIPO=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac LIPO=$ac_ct_LIPO fi else LIPO="$ac_cv_prog_LIPO" fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}otool", so it can be a program name with args. set dummy ${ac_tool_prefix}otool; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_OTOOL+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$OTOOL"; then ac_cv_prog_OTOOL="$OTOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_OTOOL="${ac_tool_prefix}otool" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi OTOOL=$ac_cv_prog_OTOOL if test -n "$OTOOL"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $OTOOL" >&5 printf "%s\n" "$OTOOL" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_OTOOL"; then ac_ct_OTOOL=$OTOOL # Extract the first word of "otool", so it can be a program name with args. set dummy otool; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_OTOOL+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_OTOOL"; then ac_cv_prog_ac_ct_OTOOL="$ac_ct_OTOOL" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_OTOOL="otool" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_OTOOL=$ac_cv_prog_ac_ct_OTOOL if test -n "$ac_ct_OTOOL"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL" >&5 printf "%s\n" "$ac_ct_OTOOL" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_OTOOL" = x; then OTOOL=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac OTOOL=$ac_ct_OTOOL fi else OTOOL="$ac_cv_prog_OTOOL" fi if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}otool64", so it can be a program name with args. set dummy ${ac_tool_prefix}otool64; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_OTOOL64+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$OTOOL64"; then ac_cv_prog_OTOOL64="$OTOOL64" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_OTOOL64="${ac_tool_prefix}otool64" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi OTOOL64=$ac_cv_prog_OTOOL64 if test -n "$OTOOL64"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $OTOOL64" >&5 printf "%s\n" "$OTOOL64" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_OTOOL64"; then ac_ct_OTOOL64=$OTOOL64 # Extract the first word of "otool64", so it can be a program name with args. set dummy otool64; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_OTOOL64+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_OTOOL64"; then ac_cv_prog_ac_ct_OTOOL64="$ac_ct_OTOOL64" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_OTOOL64="otool64" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_OTOOL64=$ac_cv_prog_ac_ct_OTOOL64 if test -n "$ac_ct_OTOOL64"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL64" >&5 printf "%s\n" "$ac_ct_OTOOL64" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_OTOOL64" = x; then OTOOL64=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac OTOOL64=$ac_ct_OTOOL64 fi else OTOOL64="$ac_cv_prog_OTOOL64" fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for -single_module linker flag" >&5 printf %s "checking for -single_module linker flag... " >&6; } if test ${lt_cv_apple_cc_single_mod+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_apple_cc_single_mod=no if test -z "$LT_MULTI_MODULE"; then # By default we will add the -single_module flag. You can override # by either setting the environment variable LT_MULTI_MODULE # non-empty at configure time, or by adding -multi_module to the # link flags. rm -rf libconftest.dylib* echo "int foo(void){return 1;}" > conftest.c echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \ -dynamiclib -Wl,-single_module conftest.c" >&5 $LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \ -dynamiclib -Wl,-single_module conftest.c 2>conftest.err _lt_result=$? # If there is a non-empty error log, and "single_module" # appears in it, assume the flag caused a linker warning if test -s conftest.err && $GREP single_module conftest.err; then cat conftest.err >&5 # Otherwise, if the output was created with a 0 exit code from # the compiler, it worked. elif test -f libconftest.dylib && test 0 = "$_lt_result"; then lt_cv_apple_cc_single_mod=yes else cat conftest.err >&5 fi rm -rf libconftest.dylib* rm -f conftest.* fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_apple_cc_single_mod" >&5 printf "%s\n" "$lt_cv_apple_cc_single_mod" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for -exported_symbols_list linker flag" >&5 printf %s "checking for -exported_symbols_list linker flag... " >&6; } if test ${lt_cv_ld_exported_symbols_list+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_ld_exported_symbols_list=no save_LDFLAGS=$LDFLAGS echo "_main" > conftest.sym LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : lt_cv_ld_exported_symbols_list=yes else $as_nop lt_cv_ld_exported_symbols_list=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$save_LDFLAGS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_exported_symbols_list" >&5 printf "%s\n" "$lt_cv_ld_exported_symbols_list" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for -force_load linker flag" >&5 printf %s "checking for -force_load linker flag... " >&6; } if test ${lt_cv_ld_force_load+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_ld_force_load=no cat > conftest.c << _LT_EOF int forced_loaded() { return 2;} _LT_EOF echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&5 $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&5 echo "$AR $AR_FLAGS libconftest.a conftest.o" >&5 $AR $AR_FLAGS libconftest.a conftest.o 2>&5 echo "$RANLIB libconftest.a" >&5 $RANLIB libconftest.a 2>&5 cat > conftest.c << _LT_EOF int main() { return 0;} _LT_EOF echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&5 $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err _lt_result=$? if test -s conftest.err && $GREP force_load conftest.err; then cat conftest.err >&5 elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then lt_cv_ld_force_load=yes else cat conftest.err >&5 fi rm -f conftest.err libconftest.a conftest conftest.c rm -rf conftest.dSYM fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_force_load" >&5 printf "%s\n" "$lt_cv_ld_force_load" >&6; } case $host_os in rhapsody* | darwin1.[012]) _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;; darwin1.*) _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;; darwin*) case $MACOSX_DEPLOYMENT_TARGET,$host in 10.[012],*|,*powerpc*-darwin[5-8]*) _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;; *) _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup' ;; esac ;; esac if test yes = "$lt_cv_apple_cc_single_mod"; then _lt_dar_single_mod='$single_module' fi if test yes = "$lt_cv_ld_exported_symbols_list"; then _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym' else _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib' fi if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then _lt_dsymutil='~$DSYMUTIL $lib || :' else _lt_dsymutil= fi ;; esac # func_munge_path_list VARIABLE PATH # ----------------------------------- # VARIABLE is name of variable containing _space_ separated list of # directories to be munged by the contents of PATH, which is string # having a format: # "DIR[:DIR]:" # string "DIR[ DIR]" will be prepended to VARIABLE # ":DIR[:DIR]" # string "DIR[ DIR]" will be appended to VARIABLE # "DIRP[:DIRP]::[DIRA:]DIRA" # string "DIRP[ DIRP]" will be prepended to VARIABLE and string # "DIRA[ DIRA]" will be appended to VARIABLE # "DIR[:DIR]" # VARIABLE will be replaced by "DIR[ DIR]" func_munge_path_list () { case x$2 in x) ;; *:) eval $1=\"`$ECHO $2 | $SED 's/:/ /g'` \$$1\" ;; x:*) eval $1=\"\$$1 `$ECHO $2 | $SED 's/:/ /g'`\" ;; *::*) eval $1=\"\$$1\ `$ECHO $2 | $SED -e 's/.*:://' -e 's/:/ /g'`\" eval $1=\"`$ECHO $2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \$$1\" ;; *) eval $1=\"`$ECHO $2 | $SED 's/:/ /g'`\" ;; esac } ac_header= ac_cache= for ac_item in $ac_header_c_list do if test $ac_cache; then ac_fn_c_check_header_compile "$LINENO" $ac_header ac_cv_header_$ac_cache "$ac_includes_default" if eval test \"x\$ac_cv_header_$ac_cache\" = xyes; then printf "%s\n" "#define $ac_item 1" >> confdefs.h fi ac_header= ac_cache= elif test $ac_header; then ac_cache=$ac_item else ac_header=$ac_item fi done if test $ac_cv_header_stdlib_h = yes && test $ac_cv_header_string_h = yes then : printf "%s\n" "#define STDC_HEADERS 1" >>confdefs.h fi ac_fn_c_check_header_compile "$LINENO" "dlfcn.h" "ac_cv_header_dlfcn_h" "$ac_includes_default " if test "x$ac_cv_header_dlfcn_h" = xyes then : printf "%s\n" "#define HAVE_DLFCN_H 1" >>confdefs.h fi # Set options enable_dlopen=no enable_win32_dll=no # Check whether --enable-shared was given. if test ${enable_shared+y} then : enableval=$enable_shared; p=${PACKAGE-default} case $enableval in yes) enable_shared=yes ;; no) enable_shared=no ;; *) enable_shared=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_shared=yes fi done IFS=$lt_save_ifs ;; esac else $as_nop enable_shared=yes fi # Check whether --enable-static was given. if test ${enable_static+y} then : enableval=$enable_static; p=${PACKAGE-default} case $enableval in yes) enable_static=yes ;; no) enable_static=no ;; *) enable_static=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_static=yes fi done IFS=$lt_save_ifs ;; esac else $as_nop enable_static=yes fi # Check whether --with-pic was given. if test ${with_pic+y} then : withval=$with_pic; lt_p=${PACKAGE-default} case $withval in yes|no) pic_mode=$withval ;; *) pic_mode=default # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for lt_pkg in $withval; do IFS=$lt_save_ifs if test "X$lt_pkg" = "X$lt_p"; then pic_mode=yes fi done IFS=$lt_save_ifs ;; esac else $as_nop pic_mode=default fi # Check whether --enable-fast-install was given. if test ${enable_fast_install+y} then : enableval=$enable_fast_install; p=${PACKAGE-default} case $enableval in yes) enable_fast_install=yes ;; no) enable_fast_install=no ;; *) enable_fast_install=no # Look at the argument we got. We use all the common list separators. lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR, for pkg in $enableval; do IFS=$lt_save_ifs if test "X$pkg" = "X$p"; then enable_fast_install=yes fi done IFS=$lt_save_ifs ;; esac else $as_nop enable_fast_install=yes fi shared_archive_member_spec= case $host,$enable_shared in power*-*-aix[5-9]*,yes) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking which variant of shared library versioning to provide" >&5 printf %s "checking which variant of shared library versioning to provide... " >&6; } # Check whether --with-aix-soname was given. if test ${with_aix_soname+y} then : withval=$with_aix_soname; case $withval in aix|svr4|both) ;; *) as_fn_error $? "Unknown argument to --with-aix-soname" "$LINENO" 5 ;; esac lt_cv_with_aix_soname=$with_aix_soname else $as_nop if test ${lt_cv_with_aix_soname+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_with_aix_soname=aix fi with_aix_soname=$lt_cv_with_aix_soname fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $with_aix_soname" >&5 printf "%s\n" "$with_aix_soname" >&6; } if test aix != "$with_aix_soname"; then # For the AIX way of multilib, we name the shared archive member # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o', # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File. # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag, # the AIX toolchain works better with OBJECT_MODE set (default 32). if test 64 = "${OBJECT_MODE-32}"; then shared_archive_member_spec=shr_64 else shared_archive_member_spec=shr fi fi ;; *) with_aix_soname=aix ;; esac # This can be used to rebuild libtool when needed LIBTOOL_DEPS=$ltmain # Always use our own libtool. LIBTOOL='$(SHELL) $(top_builddir)/libtool' test -z "$LN_S" && LN_S="ln -s" if test -n "${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for objdir" >&5 printf %s "checking for objdir... " >&6; } if test ${lt_cv_objdir+y} then : printf %s "(cached) " >&6 else $as_nop rm -f .libs 2>/dev/null mkdir .libs 2>/dev/null if test -d .libs; then lt_cv_objdir=.libs else # MS-DOS does not allow filenames that begin with a dot. lt_cv_objdir=_libs fi rmdir .libs 2>/dev/null fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_objdir" >&5 printf "%s\n" "$lt_cv_objdir" >&6; } objdir=$lt_cv_objdir printf "%s\n" "#define LT_OBJDIR \"$lt_cv_objdir/\"" >>confdefs.h case $host_os in aix3*) # AIX sometimes has problems with the GCC collect2 program. For some # reason, if we set the COLLECT_NAMES environment variable, the problems # vanish in a puff of smoke. if test set != "${COLLECT_NAMES+set}"; then COLLECT_NAMES= export COLLECT_NAMES fi ;; esac # Global variables: ofile=libtool can_build_shared=yes # All known linkers require a '.a' archive for static linking (except MSVC and # ICC, which need '.lib'). libext=a with_gnu_ld=$lt_cv_prog_gnu_ld old_CC=$CC old_CFLAGS=$CFLAGS # Set sane defaults for various variables test -z "$CC" && CC=cc test -z "$LTCC" && LTCC=$CC test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS test -z "$LD" && LD=ld test -z "$ac_objext" && ac_objext=o func_cc_basename $compiler cc_basename=$func_cc_basename_result # Only perform the check for file, if the check method requires it test -z "$MAGIC_CMD" && MAGIC_CMD=file case $deplibs_check_method in file_magic*) if test "$file_magic_cmd" = '$MAGIC_CMD'; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for ${ac_tool_prefix}file" >&5 printf %s "checking for ${ac_tool_prefix}file... " >&6; } if test ${lt_cv_path_MAGIC_CMD+y} then : printf %s "(cached) " >&6 else $as_nop case $MAGIC_CMD in [\\/*] | ?:[\\/]*) lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path. ;; *) lt_save_MAGIC_CMD=$MAGIC_CMD lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR ac_dummy="/usr/bin$PATH_SEPARATOR$PATH" for ac_dir in $ac_dummy; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/${ac_tool_prefix}file"; then lt_cv_path_MAGIC_CMD=$ac_dir/"${ac_tool_prefix}file" if test -n "$file_magic_test_file"; then case $deplibs_check_method in "file_magic "*) file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"` MAGIC_CMD=$lt_cv_path_MAGIC_CMD if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null | $EGREP "$file_magic_regex" > /dev/null; then : else cat <<_LT_EOF 1>&2 *** Warning: the command libtool uses to detect shared libraries, *** $file_magic_cmd, produces output that libtool cannot recognize. *** The result is that libtool may fail to recognize shared libraries *** as such. This will affect the creation of libtool libraries that *** depend on shared libraries, but programs linked with such libtool *** libraries will work regardless of this problem. Nevertheless, you *** may want to report the problem to your system manager and/or to *** bug-libtool@gnu.org _LT_EOF fi ;; esac fi break fi done IFS=$lt_save_ifs MAGIC_CMD=$lt_save_MAGIC_CMD ;; esac fi MAGIC_CMD=$lt_cv_path_MAGIC_CMD if test -n "$MAGIC_CMD"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5 printf "%s\n" "$MAGIC_CMD" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test -z "$lt_cv_path_MAGIC_CMD"; then if test -n "$ac_tool_prefix"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for file" >&5 printf %s "checking for file... " >&6; } if test ${lt_cv_path_MAGIC_CMD+y} then : printf %s "(cached) " >&6 else $as_nop case $MAGIC_CMD in [\\/*] | ?:[\\/]*) lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path. ;; *) lt_save_MAGIC_CMD=$MAGIC_CMD lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR ac_dummy="/usr/bin$PATH_SEPARATOR$PATH" for ac_dir in $ac_dummy; do IFS=$lt_save_ifs test -z "$ac_dir" && ac_dir=. if test -f "$ac_dir/file"; then lt_cv_path_MAGIC_CMD=$ac_dir/"file" if test -n "$file_magic_test_file"; then case $deplibs_check_method in "file_magic "*) file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"` MAGIC_CMD=$lt_cv_path_MAGIC_CMD if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null | $EGREP "$file_magic_regex" > /dev/null; then : else cat <<_LT_EOF 1>&2 *** Warning: the command libtool uses to detect shared libraries, *** $file_magic_cmd, produces output that libtool cannot recognize. *** The result is that libtool may fail to recognize shared libraries *** as such. This will affect the creation of libtool libraries that *** depend on shared libraries, but programs linked with such libtool *** libraries will work regardless of this problem. Nevertheless, you *** may want to report the problem to your system manager and/or to *** bug-libtool@gnu.org _LT_EOF fi ;; esac fi break fi done IFS=$lt_save_ifs MAGIC_CMD=$lt_save_MAGIC_CMD ;; esac fi MAGIC_CMD=$lt_cv_path_MAGIC_CMD if test -n "$MAGIC_CMD"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5 printf "%s\n" "$MAGIC_CMD" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi else MAGIC_CMD=: fi fi fi ;; esac # Use C for the default configuration in the libtool script lt_save_CC=$CC ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu # Source file extension for C test sources. ac_ext=c # Object file extension for compiled C test sources. objext=o objext=$objext # Code to be used in simple compile tests lt_simple_compile_test_code="int some_variable = 0;" # Code to be used in simple link tests lt_simple_link_test_code='int main(){return(0);}' # If no C compiler was specified, use CC. LTCC=${LTCC-"$CC"} # If no C compiler flags were specified, use CFLAGS. LTCFLAGS=${LTCFLAGS-"$CFLAGS"} # Allow CC to be a program name with arguments. compiler=$CC # Save the default compiler, since it gets overwritten when the other # tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP. compiler_DEFAULT=$CC # save warnings/boilerplate of simple test code ac_outfile=conftest.$ac_objext echo "$lt_simple_compile_test_code" >conftest.$ac_ext eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err _lt_compiler_boilerplate=`cat conftest.err` $RM conftest* ac_outfile=conftest.$ac_objext echo "$lt_simple_link_test_code" >conftest.$ac_ext eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err _lt_linker_boilerplate=`cat conftest.err` $RM -r conftest* ## CAVEAT EMPTOR: ## There is no encapsulation within the following macros, do not change ## the running order or otherwise move them around unless you know exactly ## what you are doing... if test -n "$compiler"; then lt_prog_compiler_no_builtin_flag= if test yes = "$GCC"; then case $cc_basename in nvcc*) lt_prog_compiler_no_builtin_flag=' -Xcompiler -fno-builtin' ;; *) lt_prog_compiler_no_builtin_flag=' -fno-builtin' ;; esac { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -fno-rtti -fno-exceptions" >&5 printf %s "checking if $compiler supports -fno-rtti -fno-exceptions... " >&6; } if test ${lt_cv_prog_compiler_rtti_exceptions+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_prog_compiler_rtti_exceptions=no ac_outfile=conftest.$ac_objext echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="-fno-rtti -fno-exceptions" ## exclude from sc_useless_quotes_in_assignment # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. # The option is referenced via a variable to avoid confusing sed. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 echo "$as_me:$LINENO: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then lt_cv_prog_compiler_rtti_exceptions=yes fi fi $RM conftest* fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_rtti_exceptions" >&5 printf "%s\n" "$lt_cv_prog_compiler_rtti_exceptions" >&6; } if test yes = "$lt_cv_prog_compiler_rtti_exceptions"; then lt_prog_compiler_no_builtin_flag="$lt_prog_compiler_no_builtin_flag -fno-rtti -fno-exceptions" else : fi fi lt_prog_compiler_wl= lt_prog_compiler_pic= lt_prog_compiler_static= if test yes = "$GCC"; then lt_prog_compiler_wl='-Wl,' lt_prog_compiler_static='-static' case $host_os in aix*) # All AIX code is PIC. if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor lt_prog_compiler_static='-Bstatic' fi lt_prog_compiler_pic='-fPIC' ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support lt_prog_compiler_pic='-fPIC' ;; m68k) # FIXME: we need at least 68020 code to build shared libraries, but # adding the '-m68020' flag to GCC prevents building anything better, # like '-m68040'. lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4' ;; esac ;; beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*) # PIC is the default for these OSes. ;; mingw* | cygwin* | pw32* | os2* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). # Although the cygwin gcc ignores -fPIC, still need this for old-style # (--disable-auto-import) libraries lt_prog_compiler_pic='-DDLL_EXPORT' case $host_os in os2*) lt_prog_compiler_static='$wl-static' ;; esac ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files lt_prog_compiler_pic='-fno-common' ;; haiku*) # PIC is the default for Haiku. # The "-static" flag exists, but is broken. lt_prog_compiler_static= ;; hpux*) # PIC is the default for 64-bit PA HP-UX, but not for 32-bit # PA HP-UX. On IA64 HP-UX, PIC is the default but the pic flag # sets the default TLS model and affects inlining. case $host_cpu in hppa*64*) # +Z the default ;; *) lt_prog_compiler_pic='-fPIC' ;; esac ;; interix[3-9]*) # Interix 3.x gcc -fpic/-fPIC options generate broken code. # Instead, we relocate shared libraries at runtime. ;; msdosdjgpp*) # Just because we use GCC doesn't mean we suddenly get shared libraries # on systems that don't support them. lt_prog_compiler_can_build_shared=no enable_shared=no ;; *nto* | *qnx*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. lt_prog_compiler_pic='-fPIC -shared' ;; sysv4*MP*) if test -d /usr/nec; then lt_prog_compiler_pic=-Kconform_pic fi ;; *) lt_prog_compiler_pic='-fPIC' ;; esac case $cc_basename in nvcc*) # Cuda Compiler Driver 2.2 lt_prog_compiler_wl='-Xlinker ' if test -n "$lt_prog_compiler_pic"; then lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic" fi ;; esac else # PORTME Check for flag to pass linker flags through the system compiler. case $host_os in aix*) lt_prog_compiler_wl='-Wl,' if test ia64 = "$host_cpu"; then # AIX 5 now supports IA64 processor lt_prog_compiler_static='-Bstatic' else lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp' fi ;; darwin* | rhapsody*) # PIC is the default on this platform # Common symbols not allowed in MH_DYLIB files lt_prog_compiler_pic='-fno-common' case $cc_basename in nagfor*) # NAG Fortran compiler lt_prog_compiler_wl='-Wl,-Wl,,' lt_prog_compiler_pic='-PIC' lt_prog_compiler_static='-Bstatic' ;; esac ;; mingw* | cygwin* | pw32* | os2* | cegcc*) # This hack is so that the source file can tell whether it is being # built for inclusion in a dll (and should export symbols for example). lt_prog_compiler_pic='-DDLL_EXPORT' case $host_os in os2*) lt_prog_compiler_static='$wl-static' ;; esac ;; hpux9* | hpux10* | hpux11*) lt_prog_compiler_wl='-Wl,' # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but # not for PA HP-UX. case $host_cpu in hppa*64*|ia64*) # +Z the default ;; *) lt_prog_compiler_pic='+Z' ;; esac # Is there a better lt_prog_compiler_static that works with the bundled CC? lt_prog_compiler_static='$wl-a ${wl}archive' ;; irix5* | irix6* | nonstopux*) lt_prog_compiler_wl='-Wl,' # PIC (with -KPIC) is the default. lt_prog_compiler_static='-non_shared' ;; linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) case $cc_basename in # old Intel for x86_64, which still supported -KPIC. ecc*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-static' ;; # icc used to be incompatible with GCC. # ICC 10 doesn't accept -KPIC any more. icc* | ifort*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fPIC' lt_prog_compiler_static='-static' ;; # Lahey Fortran 8.1. lf95*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='--shared' lt_prog_compiler_static='--static' ;; nagfor*) # NAG Fortran compiler lt_prog_compiler_wl='-Wl,-Wl,,' lt_prog_compiler_pic='-PIC' lt_prog_compiler_static='-Bstatic' ;; tcc*) # Fabrice Bellard et al's Tiny C Compiler lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fPIC' lt_prog_compiler_static='-static' ;; pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*) # Portland Group compilers (*not* the Pentium gcc compiler, # which looks to be a dead project) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fpic' lt_prog_compiler_static='-Bstatic' ;; ccc*) lt_prog_compiler_wl='-Wl,' # All Alpha code is PIC. lt_prog_compiler_static='-non_shared' ;; xl* | bgxl* | bgf* | mpixl*) # IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-qpic' lt_prog_compiler_static='-qstaticlink' ;; *) case `$CC -V 2>&1 | $SED 5q` in *Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*) # Sun Fortran 8.3 passes all unrecognized flags to the linker lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' lt_prog_compiler_wl='' ;; *Sun\ F* | *Sun*Fortran*) lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' lt_prog_compiler_wl='-Qoption ld ' ;; *Sun\ C*) # Sun C 5.9 lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' lt_prog_compiler_wl='-Wl,' ;; *Intel*\ [CF]*Compiler*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fPIC' lt_prog_compiler_static='-static' ;; *Portland\ Group*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-fpic' lt_prog_compiler_static='-Bstatic' ;; esac ;; esac ;; newsos6) lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' ;; *nto* | *qnx*) # QNX uses GNU C++, but need to define -shared option too, otherwise # it will coredump. lt_prog_compiler_pic='-fPIC -shared' ;; osf3* | osf4* | osf5*) lt_prog_compiler_wl='-Wl,' # All OSF/1 code is PIC. lt_prog_compiler_static='-non_shared' ;; rdos*) lt_prog_compiler_static='-non_shared' ;; solaris*) lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' case $cc_basename in f77* | f90* | f95* | sunf77* | sunf90* | sunf95*) lt_prog_compiler_wl='-Qoption ld ';; *) lt_prog_compiler_wl='-Wl,';; esac ;; sunos4*) lt_prog_compiler_wl='-Qoption ld ' lt_prog_compiler_pic='-PIC' lt_prog_compiler_static='-Bstatic' ;; sysv4 | sysv4.2uw2* | sysv4.3*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' ;; sysv4*MP*) if test -d /usr/nec; then lt_prog_compiler_pic='-Kconform_pic' lt_prog_compiler_static='-Bstatic' fi ;; sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_pic='-KPIC' lt_prog_compiler_static='-Bstatic' ;; unicos*) lt_prog_compiler_wl='-Wl,' lt_prog_compiler_can_build_shared=no ;; uts4*) lt_prog_compiler_pic='-pic' lt_prog_compiler_static='-Bstatic' ;; *) lt_prog_compiler_can_build_shared=no ;; esac fi case $host_os in # For platforms that do not support PIC, -DPIC is meaningless: *djgpp*) lt_prog_compiler_pic= ;; *) lt_prog_compiler_pic="$lt_prog_compiler_pic -DPIC" ;; esac { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5 printf %s "checking for $compiler option to produce PIC... " >&6; } if test ${lt_cv_prog_compiler_pic+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_prog_compiler_pic=$lt_prog_compiler_pic fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5 printf "%s\n" "$lt_cv_prog_compiler_pic" >&6; } lt_prog_compiler_pic=$lt_cv_prog_compiler_pic # # Check to make sure the PIC flag actually works. # if test -n "$lt_prog_compiler_pic"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5 printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; } if test ${lt_cv_prog_compiler_pic_works+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_prog_compiler_pic_works=no ac_outfile=conftest.$ac_objext echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="$lt_prog_compiler_pic -DPIC" ## exclude from sc_useless_quotes_in_assignment # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. # The option is referenced via a variable to avoid confusing sed. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 echo "$as_me:$LINENO: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings other than the usual output. $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then lt_cv_prog_compiler_pic_works=yes fi fi $RM conftest* fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5 printf "%s\n" "$lt_cv_prog_compiler_pic_works" >&6; } if test yes = "$lt_cv_prog_compiler_pic_works"; then case $lt_prog_compiler_pic in "" | " "*) ;; *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;; esac else lt_prog_compiler_pic= lt_prog_compiler_can_build_shared=no fi fi # # Check to make sure the static flag actually works. # wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5 printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; } if test ${lt_cv_prog_compiler_static_works+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_prog_compiler_static_works=no save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS $lt_tmp_static_flag" echo "$lt_simple_link_test_code" > conftest.$ac_ext if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then # The linker can only warn and ignore the option if not recognized # So say no if there are warnings if test -s conftest.err; then # Append any errors to the config.log. cat conftest.err 1>&5 $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if diff conftest.exp conftest.er2 >/dev/null; then lt_cv_prog_compiler_static_works=yes fi else lt_cv_prog_compiler_static_works=yes fi fi $RM -r conftest* LDFLAGS=$save_LDFLAGS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5 printf "%s\n" "$lt_cv_prog_compiler_static_works" >&6; } if test yes = "$lt_cv_prog_compiler_static_works"; then : else lt_prog_compiler_static= fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5 printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; } if test ${lt_cv_prog_compiler_c_o+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_prog_compiler_c_o=no $RM -r conftest 2>/dev/null mkdir conftest cd conftest mkdir out echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="-o out/conftest2.$ac_objext" # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 echo "$as_me:$LINENO: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2 if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then lt_cv_prog_compiler_c_o=yes fi fi chmod u+w . 2>&5 $RM conftest* # SGI C++ compiler will create directory out/ii_files/ for # template instantiation test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files $RM out/* && rmdir out cd .. $RM -r conftest $RM conftest* fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5 printf "%s\n" "$lt_cv_prog_compiler_c_o" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5 printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; } if test ${lt_cv_prog_compiler_c_o+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_prog_compiler_c_o=no $RM -r conftest 2>/dev/null mkdir conftest cd conftest mkdir out echo "$lt_simple_compile_test_code" > conftest.$ac_ext lt_compiler_flag="-o out/conftest2.$ac_objext" # Insert the option either (1) after the last *FLAGS variable, or # (2) before a word containing "conftest.", or (3) at the end. # Note that $ac_compile itself does not contain backslashes and begins # with a dollar sign (not a hyphen), so the echo should work correctly. lt_compile=`echo "$ac_compile" | $SED \ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \ -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 echo "$as_me:$LINENO: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then # The compiler can only warn and ignore the option if not recognized # So say no if there are warnings $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2 if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then lt_cv_prog_compiler_c_o=yes fi fi chmod u+w . 2>&5 $RM conftest* # SGI C++ compiler will create directory out/ii_files/ for # template instantiation test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files $RM out/* && rmdir out cd .. $RM -r conftest $RM conftest* fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5 printf "%s\n" "$lt_cv_prog_compiler_c_o" >&6; } hard_links=nottested if test no = "$lt_cv_prog_compiler_c_o" && test no != "$need_locks"; then # do not overwrite the value of need_locks provided by the user { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if we can lock with hard links" >&5 printf %s "checking if we can lock with hard links... " >&6; } hard_links=yes $RM conftest* ln conftest.a conftest.b 2>/dev/null && hard_links=no touch conftest.a ln conftest.a conftest.b 2>&5 || hard_links=no ln conftest.a conftest.b 2>/dev/null && hard_links=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $hard_links" >&5 printf "%s\n" "$hard_links" >&6; } if test no = "$hard_links"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&5 printf "%s\n" "$as_me: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&2;} need_locks=warn fi else need_locks=no fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the $compiler linker ($LD) supports shared libraries" >&5 printf %s "checking whether the $compiler linker ($LD) supports shared libraries... " >&6; } runpath_var= allow_undefined_flag= always_export_symbols=no archive_cmds= archive_expsym_cmds= compiler_needs_object=no enable_shared_with_static_runtimes=no export_dynamic_flag_spec= export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols' hardcode_automatic=no hardcode_direct=no hardcode_direct_absolute=no hardcode_libdir_flag_spec= hardcode_libdir_separator= hardcode_minus_L=no hardcode_shlibpath_var=unsupported inherit_rpath=no link_all_deplibs=unknown module_cmds= module_expsym_cmds= old_archive_from_new_cmds= old_archive_from_expsyms_cmds= thread_safe_flag_spec= whole_archive_flag_spec= # include_expsyms should be a list of space-separated symbols to be *always* # included in the symbol list include_expsyms= # exclude_expsyms can be an extended regexp of symbols to exclude # it will be wrapped by ' (' and ')$', so one must not match beginning or # end of line. Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc', # as well as any symbol that contains 'd'. exclude_expsyms='_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*' # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out # platforms (ab)use it in PIC code, but their linkers get confused if # the symbol is explicitly referenced. Since portable code cannot # rely on this symbol name, it's probably fine to never include it in # preloaded symbol tables. # Exclude shared library initialization/finalization symbols. extract_expsyms_cmds= case $host_os in cygwin* | mingw* | pw32* | cegcc*) # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time # When not using gcc, we currently assume that we are using # Microsoft Visual C++ or Intel C++ Compiler. if test yes != "$GCC"; then with_gnu_ld=no fi ;; interix*) # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC) with_gnu_ld=yes ;; openbsd* | bitrig*) with_gnu_ld=no ;; esac ld_shlibs=yes # On some targets, GNU ld is compatible enough with the native linker # that we're better off using the native interface for both. lt_use_gnu_ld_interface=no if test yes = "$with_gnu_ld"; then case $host_os in aix*) # The AIX port of GNU ld has always aspired to compatibility # with the native linker. However, as the warning in the GNU ld # block says, versions before 2.19.5* couldn't really create working # shared libraries, regardless of the interface used. case `$LD -v 2>&1` in *\ \(GNU\ Binutils\)\ 2.19.5*) ;; *\ \(GNU\ Binutils\)\ 2.[2-9]*) ;; *\ \(GNU\ Binutils\)\ [3-9]*) ;; *) lt_use_gnu_ld_interface=yes ;; esac ;; *) lt_use_gnu_ld_interface=yes ;; esac fi if test yes = "$lt_use_gnu_ld_interface"; then # If archive_cmds runs LD, not CC, wlarc should be empty wlarc='$wl' # Set some defaults for GNU ld with shared library support. These # are reset later if shared libraries are not supported. Putting them # here allows them to be overridden if necessary. runpath_var=LD_RUN_PATH hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' export_dynamic_flag_spec='$wl--export-dynamic' # ancient GNU ld didn't support --whole-archive et. al. if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then whole_archive_flag_spec=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive' else whole_archive_flag_spec= fi supports_anon_versioning=no case `$LD -v | $SED -e 's/([^)]\+)\s\+//' 2>&1` in *GNU\ gold*) supports_anon_versioning=yes ;; *\ [01].* | *\ 2.[0-9].* | *\ 2.10.*) ;; # catch versions < 2.11 *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ... *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ... *\ 2.11.*) ;; # other 2.11 versions *) supports_anon_versioning=yes ;; esac # See if GNU ld supports shared libraries. case $host_os in aix[3-9]*) # On AIX/PPC, the GNU linker is very broken if test ia64 != "$host_cpu"; then ld_shlibs=no cat <<_LT_EOF 1>&2 *** Warning: the GNU linker, at least up to release 2.19, is reported *** to be unable to reliably create shared libraries on AIX. *** Therefore, libtool is disabling shared libraries support. If you *** really care for shared libraries, you may want to install binutils *** 2.20 or above, or modify your PATH so that a non-GNU linker is found. *** You will then need to restart the configuration process. _LT_EOF fi ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='' ;; m68k) archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' hardcode_libdir_flag_spec='-L$libdir' hardcode_minus_L=yes ;; esac ;; beos*) if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then allow_undefined_flag=unsupported # Joseph Beckenbach says some releases of gcc # support --undefined. This deserves some investigation. FIXME archive_cmds='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' else ld_shlibs=no fi ;; cygwin* | mingw* | pw32* | cegcc*) # _LT_TAGVAR(hardcode_libdir_flag_spec, ) is actually meaningless, # as there is no search path for DLLs. hardcode_libdir_flag_spec='-L$libdir' export_dynamic_flag_spec='$wl--export-all-symbols' allow_undefined_flag=unsupported always_export_symbols=no enable_shared_with_static_runtimes=yes export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1 DATA/;s/^.*[ ]__nm__\([^ ]*\)[ ][^ ]*/\1 DATA/;/^I[ ]/d;/^[AITW][ ]/s/.* //'\'' | sort | uniq > $export_symbols' exclude_expsyms='[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname' if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' # If the export-symbols file already is a .def file, use it as # is; otherwise, prepend EXPORTS... archive_expsym_cmds='if test DEF = "`$SED -n -e '\''s/^[ ]*//'\'' -e '\''/^\(;.*\)*$/d'\'' -e '\''s/^\(EXPORTS\|LIBRARY\)\([ ].*\)*$/DEF/p'\'' -e q $export_symbols`" ; then cp $export_symbols $output_objdir/$soname.def; else echo EXPORTS > $output_objdir/$soname.def; cat $export_symbols >> $output_objdir/$soname.def; fi~ $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib' else ld_shlibs=no fi ;; haiku*) archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' link_all_deplibs=yes ;; os2*) hardcode_libdir_flag_spec='-L$libdir' hardcode_minus_L=yes allow_undefined_flag=unsupported shrext_cmds=.dll archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ prefix_cmds="$SED"~ if test EXPORTS = "`$SED 1q $export_symbols`"; then prefix_cmds="$prefix_cmds -e 1d"; fi~ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' old_archive_From_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' enable_shared_with_static_runtimes=yes file_list_spec='@' ;; interix[3-9]*) hardcode_direct=no hardcode_shlibpath_var=no hardcode_libdir_flag_spec='$wl-rpath,$libdir' export_dynamic_flag_spec='$wl-E' # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc. # Instead, shared libraries are loaded at an image base (0x10000000 by # default) and relocated if they conflict, which is a slow very memory # consuming and fragmenting process. To avoid this, we pick a random, # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link # time. Moving up from 0x10000000 also allows more sbrk(2) space. archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib' ;; gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu) tmp_diet=no if test linux-dietlibc = "$host_os"; then case $cc_basename in diet\ *) tmp_diet=yes;; # linux-dietlibc with static linking (!diet-dyn) esac fi if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \ && test no = "$tmp_diet" then tmp_addflag=' $pic_flag' tmp_sharedflag='-shared' case $cc_basename,$host_cpu in pgcc*) # Portland Group C compiler whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' tmp_addflag=' $pic_flag' ;; pgf77* | pgf90* | pgf95* | pgfortran*) # Portland Group f77 and f90 compilers whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' tmp_addflag=' $pic_flag -Mnomain' ;; ecc*,ia64* | icc*,ia64*) # Intel C compiler on ia64 tmp_addflag=' -i_dynamic' ;; efc*,ia64* | ifort*,ia64*) # Intel Fortran compiler on ia64 tmp_addflag=' -i_dynamic -nofor_main' ;; ifc* | ifort*) # Intel Fortran compiler tmp_addflag=' -nofor_main' ;; lf95*) # Lahey Fortran 8.1 whole_archive_flag_spec= tmp_sharedflag='--shared' ;; nagfor*) # NAGFOR 5.3 tmp_sharedflag='-Wl,-shared' ;; xl[cC]* | bgxl[cC]* | mpixl[cC]*) # IBM XL C 8.0 on PPC (deal with xlf below) tmp_sharedflag='-qmkshrobj' tmp_addflag= ;; nvcc*) # Cuda Compiler Driver 2.2 whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' compiler_needs_object=yes ;; esac case `$CC -V 2>&1 | $SED 5q` in *Sun\ C*) # Sun C 5.9 whole_archive_flag_spec='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive' compiler_needs_object=yes tmp_sharedflag='-G' ;; *Sun\ F*) # Sun Fortran 8.3 tmp_sharedflag='-G' ;; esac archive_cmds='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' if test yes = "$supports_anon_versioning"; then archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ echo "local: *; };" >> $output_objdir/$libname.ver~ $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib' fi case $cc_basename in tcc*) export_dynamic_flag_spec='-rdynamic' ;; xlf* | bgf* | bgxlf* | mpixlf*) # IBM XL Fortran 10.1 on PPC cannot create shared libs itself whole_archive_flag_spec='--whole-archive$convenience --no-whole-archive' hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' archive_cmds='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib' if test yes = "$supports_anon_versioning"; then archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~ cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~ echo "local: *; };" >> $output_objdir/$libname.ver~ $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib' fi ;; esac else ld_shlibs=no fi ;; netbsd*) if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib' wlarc= else archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' fi ;; solaris*) if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then ld_shlibs=no cat <<_LT_EOF 1>&2 *** Warning: The releases 2.8.* of the GNU linker cannot reliably *** create shared libraries on Solaris systems. Therefore, libtool *** is disabling shared libraries support. We urge you to upgrade GNU *** binutils to release 2.9.1 or newer. Another option is to modify *** your PATH or compiler configuration so that the native linker is *** used, and then restart. _LT_EOF elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else ld_shlibs=no fi ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*) case `$LD -v 2>&1` in *\ [01].* | *\ 2.[0-9].* | *\ 2.1[0-5].*) ld_shlibs=no cat <<_LT_EOF 1>&2 *** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot *** reliably create shared libraries on SCO systems. Therefore, libtool *** is disabling shared libraries support. We urge you to upgrade GNU *** binutils to release 2.16.91.0.3 or newer. Another option is to modify *** your PATH or compiler configuration so that the native linker is *** used, and then restart. _LT_EOF ;; *) # For security reasons, it is highly recommended that you always # use absolute paths for naming shared libraries, and exclude the # DT_RUNPATH tag from executables and libraries. But doing so # requires that you compile everything twice, which is a pain. if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else ld_shlibs=no fi ;; esac ;; sunos4*) archive_cmds='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags' wlarc= hardcode_direct=yes hardcode_shlibpath_var=no ;; *) if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib' else ld_shlibs=no fi ;; esac if test no = "$ld_shlibs"; then runpath_var= hardcode_libdir_flag_spec= export_dynamic_flag_spec= whole_archive_flag_spec= fi else # PORTME fill in a description of your system's linker (not GNU ld) case $host_os in aix3*) allow_undefined_flag=unsupported always_export_symbols=yes archive_expsym_cmds='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname' # Note: this linker hardcodes the directories in LIBPATH if there # are no directories specified by -L. hardcode_minus_L=yes if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then # Neither direct hardcoding nor static linking is supported with a # broken collect2. hardcode_direct=unsupported fi ;; aix[4-9]*) if test ia64 = "$host_cpu"; then # On IA64, the linker does run time linking by default, so we don't # have to do anything special. aix_use_runtimelinking=no exp_sym_flag='-Bexport' no_entry_flag= else # If we're using GNU nm, then we don't want the "-C" option. # -C means demangle to GNU nm, but means don't demangle to AIX nm. # Without the "-l" option, or with the "-B" option, AIX nm treats # weak defined symbols like other global defined symbols, whereas # GNU nm marks them as "W". # While the 'weak' keyword is ignored in the Export File, we need # it in the Import File for the 'aix-soname' feature, so we have # to replace the "-B" option with "-P" for AIX nm. if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then export_symbols_cmds='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && (substr(\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols' else export_symbols_cmds='`func_echo_all $NM | $SED -e '\''s/B\([^B]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && (substr(\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols' fi aix_use_runtimelinking=no # Test if we are trying to use run time linking or normal # AIX style linking. If -brtl is somewhere in LDFLAGS, we # have runtime linking enabled, and use it for executables. # For shared libraries, we enable/disable runtime linking # depending on the kind of the shared library created - # when "with_aix_soname,aix_use_runtimelinking" is: # "aix,no" lib.a(lib.so.V) shared, rtl:no, for executables # "aix,yes" lib.so shared, rtl:yes, for executables # lib.a static archive # "both,no" lib.so.V(shr.o) shared, rtl:yes # lib.a(lib.so.V) shared, rtl:no, for executables # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a(lib.so.V) shared, rtl:no # "svr4,*" lib.so.V(shr.o) shared, rtl:yes, for executables # lib.a static archive case $host_os in aix4.[23]|aix4.[23].*|aix[5-9]*) for ld_flag in $LDFLAGS; do if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then aix_use_runtimelinking=yes break fi done if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then # With aix-soname=svr4, we create the lib.so.V shared archives only, # so we don't have lib.a shared libs to link our executables. # We have to force runtime linking in this case. aix_use_runtimelinking=yes LDFLAGS="$LDFLAGS -Wl,-brtl" fi ;; esac exp_sym_flag='-bexport' no_entry_flag='-bnoentry' fi # When large executables or shared objects are built, AIX ld can # have problems creating the table of contents. If linking a library # or program results in "error TOC overflow" add -mminimal-toc to # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS. archive_cmds='' hardcode_direct=yes hardcode_direct_absolute=yes hardcode_libdir_separator=':' link_all_deplibs=yes file_list_spec='$wl-f,' case $with_aix_soname,$aix_use_runtimelinking in aix,*) ;; # traditional, no import file svr4,* | *,yes) # use import file # The Import File defines what to hardcode. hardcode_direct=no hardcode_direct_absolute=no ;; esac if test yes = "$GCC"; then case $host_os in aix4.[012]|aix4.[012].*) # We only want to do this on AIX 4.2 and lower, the check # below for broken collect2 doesn't work under 4.3+ collect2name=`$CC -print-prog-name=collect2` if test -f "$collect2name" && strings "$collect2name" | $GREP resolve_lib_name >/dev/null then # We have reworked collect2 : else # We have old collect2 hardcode_direct=unsupported # It fails to find uninstalled libraries when the uninstalled # path is not listed in the libpath. Setting hardcode_minus_L # to unsupported forces relinking hardcode_minus_L=yes hardcode_libdir_flag_spec='-L$libdir' hardcode_libdir_separator= fi ;; esac shared_flag='-shared' if test yes = "$aix_use_runtimelinking"; then shared_flag="$shared_flag "'$wl-G' fi # Need to ensure runtime linking is disabled for the traditional # shared library, or the linker may eventually find shared libraries # /with/ Import File - we do not want to mix them. shared_flag_aix='-shared' shared_flag_svr4='-shared $wl-G' else # not using gcc if test ia64 = "$host_cpu"; then # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release # chokes on -Wl,-G. The following line is correct: shared_flag='-G' else if test yes = "$aix_use_runtimelinking"; then shared_flag='$wl-G' else shared_flag='$wl-bM:SRE' fi shared_flag_aix='$wl-bM:SRE' shared_flag_svr4='$wl-G' fi fi export_dynamic_flag_spec='$wl-bexpall' # It seems that -bexpall does not export symbols beginning with # underscore (_), so it is better to generate a list of symbols to export. always_export_symbols=yes if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then # Warning - without using the other runtime loading flags (-brtl), # -berok will link without error, but may produce a broken library. allow_undefined_flag='-berok' # Determine the default libpath from the value encoded in an # empty executable. if test set = "${lt_cv_aix_libpath+set}"; then aix_libpath=$lt_cv_aix_libpath else if test ${lt_cv_aix_libpath_+y} then : printf %s "(cached) " >&6 else $as_nop cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : lt_aix_libpath_sed=' /Import File Strings/,/^$/ { /^0/ { s/^0 *\([^ ]*\) *$/\1/ p } }' lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` # Check for a 64-bit object if we didn't find anything. if test -z "$lt_cv_aix_libpath_"; then lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` fi fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext if test -z "$lt_cv_aix_libpath_"; then lt_cv_aix_libpath_=/usr/lib:/lib fi fi aix_libpath=$lt_cv_aix_libpath_ fi hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath" archive_expsym_cmds='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag else if test ia64 = "$host_cpu"; then hardcode_libdir_flag_spec='$wl-R $libdir:/usr/lib:/lib' allow_undefined_flag="-z nodefs" archive_expsym_cmds="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols" else # Determine the default libpath from the value encoded in an # empty executable. if test set = "${lt_cv_aix_libpath+set}"; then aix_libpath=$lt_cv_aix_libpath else if test ${lt_cv_aix_libpath_+y} then : printf %s "(cached) " >&6 else $as_nop cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : lt_aix_libpath_sed=' /Import File Strings/,/^$/ { /^0/ { s/^0 *\([^ ]*\) *$/\1/ p } }' lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` # Check for a 64-bit object if we didn't find anything. if test -z "$lt_cv_aix_libpath_"; then lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"` fi fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext if test -z "$lt_cv_aix_libpath_"; then lt_cv_aix_libpath_=/usr/lib:/lib fi fi aix_libpath=$lt_cv_aix_libpath_ fi hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath" # Warning - without using the other run time loading flags, # -berok will link without error, but may produce a broken library. no_undefined_flag=' $wl-bernotok' allow_undefined_flag=' $wl-berok' if test yes = "$with_gnu_ld"; then # We only use this code for GNU lds that support --whole-archive. whole_archive_flag_spec='$wl--whole-archive$convenience $wl--no-whole-archive' else # Exported symbols can be pulled into shared objects from archives whole_archive_flag_spec='$convenience' fi archive_cmds_need_lc=yes archive_expsym_cmds='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d' # -brtl affects multiple linker settings, -berok does not and is overridden later compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([, ]\\)%-berok\\1%g"`' if test svr4 != "$with_aix_soname"; then # This is similar to how AIX traditionally builds its shared libraries. archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname' fi if test aix != "$with_aix_soname"; then archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp' else # used by -dlpreopen to get the symbols archive_expsym_cmds="$archive_expsym_cmds"'~$MV $output_objdir/$realname.d/$soname $output_objdir' fi archive_expsym_cmds="$archive_expsym_cmds"'~$RM -r $output_objdir/$realname.d' fi fi ;; amigaos*) case $host_cpu in powerpc) # see comment about AmigaOS4 .so support archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib' archive_expsym_cmds='' ;; m68k) archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)' hardcode_libdir_flag_spec='-L$libdir' hardcode_minus_L=yes ;; esac ;; bsdi[45]*) export_dynamic_flag_spec=-rdynamic ;; cygwin* | mingw* | pw32* | cegcc*) # When not using gcc, we currently assume that we are using # Microsoft Visual C++ or Intel C++ Compiler. # hardcode_libdir_flag_spec is actually meaningless, as there is # no search path for DLLs. case $cc_basename in cl* | icl*) # Native MSVC or ICC hardcode_libdir_flag_spec=' ' allow_undefined_flag=unsupported always_export_symbols=yes file_list_spec='@' # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=.dll # FIXME: Setting linknames here is a bad hack. archive_cmds='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames=' archive_expsym_cmds='if test DEF = "`$SED -n -e '\''s/^[ ]*//'\'' -e '\''/^\(;.*\)*$/d'\'' -e '\''s/^\(EXPORTS\|LIBRARY\)\([ ].*\)*$/DEF/p'\'' -e q $export_symbols`" ; then cp "$export_symbols" "$output_objdir/$soname.def"; echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp"; else $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp; fi~ $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~ linknames=' # The linker will not automatically build a static lib if we build a DLL. # _LT_TAGVAR(old_archive_from_new_cmds, )='true' enable_shared_with_static_runtimes=yes exclude_expsyms='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*' export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1,DATA/'\'' | $SED -e '\''/^[AITW][ ]/s/.*[ ]//'\'' | sort | uniq > $export_symbols' # Don't use ranlib old_postinstall_cmds='chmod 644 $oldlib' postlink_cmds='lt_outputfile="@OUTPUT@"~ lt_tool_outputfile="@TOOL_OUTPUT@"~ case $lt_outputfile in *.exe|*.EXE) ;; *) lt_outputfile=$lt_outputfile.exe lt_tool_outputfile=$lt_tool_outputfile.exe ;; esac~ if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1; $RM "$lt_outputfile.manifest"; fi' ;; *) # Assume MSVC and ICC wrapper hardcode_libdir_flag_spec=' ' allow_undefined_flag=unsupported # Tell ltmain to make .lib files, not .a files. libext=lib # Tell ltmain to make .dll files, not .so files. shrext_cmds=.dll # FIXME: Setting linknames here is a bad hack. archive_cmds='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames=' # The linker will automatically build a .lib file if we build a DLL. old_archive_from_new_cmds='true' # FIXME: Should let the user specify the lib program. old_archive_cmds='lib -OUT:$oldlib$oldobjs$old_deplibs' enable_shared_with_static_runtimes=yes ;; esac ;; darwin* | rhapsody*) archive_cmds_need_lc=no hardcode_direct=no hardcode_automatic=yes hardcode_shlibpath_var=unsupported if test yes = "$lt_cv_ld_force_load"; then whole_archive_flag_spec='`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`' else whole_archive_flag_spec='' fi link_all_deplibs=yes allow_undefined_flag=$_lt_dar_allow_undefined case $cc_basename in ifort*|nagfor*) _lt_dar_can_shared=yes ;; *) _lt_dar_can_shared=$GCC ;; esac if test yes = "$_lt_dar_can_shared"; then output_verbose_link_cmd=func_echo_all archive_cmds="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil" module_cmds="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil" archive_expsym_cmds="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil" module_expsym_cmds="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil" else ld_shlibs=no fi ;; dgux*) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_libdir_flag_spec='-L$libdir' hardcode_shlibpath_var=no ;; # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor # support. Future versions do this automatically, but an explicit c++rt0.o # does not break anything, and helps significantly (at the cost of a little # extra space). freebsd2.2*) archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o' hardcode_libdir_flag_spec='-R$libdir' hardcode_direct=yes hardcode_shlibpath_var=no ;; # Unfortunately, older versions of FreeBSD 2 do not have this feature. freebsd2.*) archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' hardcode_direct=yes hardcode_minus_L=yes hardcode_shlibpath_var=no ;; # FreeBSD 3 and greater uses gcc -shared to do shared libraries. freebsd* | dragonfly* | midnightbsd*) archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' hardcode_libdir_flag_spec='-R$libdir' hardcode_direct=yes hardcode_shlibpath_var=no ;; hpux9*) if test yes = "$GCC"; then archive_cmds='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' else archive_cmds='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib' fi hardcode_libdir_flag_spec='$wl+b $wl$libdir' hardcode_libdir_separator=: hardcode_direct=yes # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. hardcode_minus_L=yes export_dynamic_flag_spec='$wl-E' ;; hpux10*) if test yes,no = "$GCC,$with_gnu_ld"; then archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' else archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags' fi if test no = "$with_gnu_ld"; then hardcode_libdir_flag_spec='$wl+b $wl$libdir' hardcode_libdir_separator=: hardcode_direct=yes hardcode_direct_absolute=yes export_dynamic_flag_spec='$wl-E' # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. hardcode_minus_L=yes fi ;; hpux11*) if test yes,no = "$GCC,$with_gnu_ld"; then case $host_cpu in hppa*64*) archive_cmds='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' ;; ia64*) archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' ;; *) archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' ;; esac else case $host_cpu in hppa*64*) archive_cmds='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' ;; ia64*) archive_cmds='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags' ;; *) # Older versions of the 11.00 compiler do not understand -b yet # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC understands -b" >&5 printf %s "checking if $CC understands -b... " >&6; } if test ${lt_cv_prog_compiler__b+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_prog_compiler__b=no save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS -b" echo "$lt_simple_link_test_code" > conftest.$ac_ext if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then # The linker can only warn and ignore the option if not recognized # So say no if there are warnings if test -s conftest.err; then # Append any errors to the config.log. cat conftest.err 1>&5 $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2 if diff conftest.exp conftest.er2 >/dev/null; then lt_cv_prog_compiler__b=yes fi else lt_cv_prog_compiler__b=yes fi fi $RM -r conftest* LDFLAGS=$save_LDFLAGS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler__b" >&5 printf "%s\n" "$lt_cv_prog_compiler__b" >&6; } if test yes = "$lt_cv_prog_compiler__b"; then archive_cmds='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags' else archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags' fi ;; esac fi if test no = "$with_gnu_ld"; then hardcode_libdir_flag_spec='$wl+b $wl$libdir' hardcode_libdir_separator=: case $host_cpu in hppa*64*|ia64*) hardcode_direct=no hardcode_shlibpath_var=no ;; *) hardcode_direct=yes hardcode_direct_absolute=yes export_dynamic_flag_spec='$wl-E' # hardcode_minus_L: Not really in the search PATH, # but as the default location of the library. hardcode_minus_L=yes ;; esac fi ;; irix5* | irix6* | nonstopux*) if test yes = "$GCC"; then archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' # Try to use the -exported_symbol ld option, if it does not # work, assume that -exports_file does not work either and # implicitly export all symbols. # This should be the same for all languages, so no per-tag cache variable. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the $host_os linker accepts -exported_symbol" >&5 printf %s "checking whether the $host_os linker accepts -exported_symbol... " >&6; } if test ${lt_cv_irix_exported_symbol+y} then : printf %s "(cached) " >&6 else $as_nop save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int foo (void) { return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : lt_cv_irix_exported_symbol=yes else $as_nop lt_cv_irix_exported_symbol=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$save_LDFLAGS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_irix_exported_symbol" >&5 printf "%s\n" "$lt_cv_irix_exported_symbol" >&6; } if test yes = "$lt_cv_irix_exported_symbol"; then archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib' fi else archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib' fi archive_cmds_need_lc='no' hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' hardcode_libdir_separator=: inherit_rpath=yes link_all_deplibs=yes ;; linux*) case $cc_basename in tcc*) # Fabrice Bellard et al's Tiny C Compiler ld_shlibs=yes archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' ;; esac ;; netbsd*) if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' # a.out else archive_cmds='$LD -shared -o $lib $libobjs $deplibs $linker_flags' # ELF fi hardcode_libdir_flag_spec='-R$libdir' hardcode_direct=yes hardcode_shlibpath_var=no ;; newsos6) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_direct=yes hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' hardcode_libdir_separator=: hardcode_shlibpath_var=no ;; *nto* | *qnx*) ;; openbsd* | bitrig*) if test -f /usr/libexec/ld.so; then hardcode_direct=yes hardcode_shlibpath_var=no hardcode_direct_absolute=yes if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols' hardcode_libdir_flag_spec='$wl-rpath,$libdir' export_dynamic_flag_spec='$wl-E' else archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags' hardcode_libdir_flag_spec='$wl-rpath,$libdir' fi else ld_shlibs=no fi ;; os2*) hardcode_libdir_flag_spec='-L$libdir' hardcode_minus_L=yes allow_undefined_flag=unsupported shrext_cmds=.dll archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~ $ECHO EXPORTS >> $output_objdir/$libname.def~ prefix_cmds="$SED"~ if test EXPORTS = "`$SED 1q $export_symbols`"; then prefix_cmds="$prefix_cmds -e 1d"; fi~ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~ emximp -o $lib $output_objdir/$libname.def' old_archive_From_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def' enable_shared_with_static_runtimes=yes file_list_spec='@' ;; osf3*) if test yes = "$GCC"; then allow_undefined_flag=' $wl-expect_unresolved $wl\*' archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' else allow_undefined_flag=' -expect_unresolved \*' archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' fi archive_cmds_need_lc='no' hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' hardcode_libdir_separator=: ;; osf4* | osf5*) # as osf3* with the addition of -msym flag if test yes = "$GCC"; then allow_undefined_flag=' $wl-expect_unresolved $wl\*' archive_cmds='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib' hardcode_libdir_flag_spec='$wl-rpath $wl$libdir' else allow_undefined_flag=' -expect_unresolved \*' archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib' archive_expsym_cmds='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~ $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp' # Both c and cxx compiler support -rpath directly hardcode_libdir_flag_spec='-rpath $libdir' fi archive_cmds_need_lc='no' hardcode_libdir_separator=: ;; solaris*) no_undefined_flag=' -z defs' if test yes = "$GCC"; then wlarc='$wl' archive_cmds='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp' else case `$CC -V 2>&1` in *"Compilers 5.0"*) wlarc='' archive_cmds='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags' archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp' ;; *) wlarc='$wl' archive_cmds='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~ $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp' ;; esac fi hardcode_libdir_flag_spec='-R$libdir' hardcode_shlibpath_var=no case $host_os in solaris2.[0-5] | solaris2.[0-5].*) ;; *) # The compiler driver will combine and reorder linker options, # but understands '-z linker_flag'. GCC discards it without '$wl', # but is careful enough not to reorder. # Supported since Solaris 2.6 (maybe 2.5.1?) if test yes = "$GCC"; then whole_archive_flag_spec='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract' else whole_archive_flag_spec='-z allextract$convenience -z defaultextract' fi ;; esac link_all_deplibs=yes ;; sunos4*) if test sequent = "$host_vendor"; then # Use $CC to link under sequent, because it throws in some extra .o # files that make .init and .fini sections work. archive_cmds='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags' else archive_cmds='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags' fi hardcode_libdir_flag_spec='-L$libdir' hardcode_direct=yes hardcode_minus_L=yes hardcode_shlibpath_var=no ;; sysv4) case $host_vendor in sni) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_direct=yes # is this really true??? ;; siemens) ## LD is ld it makes a PLAMLIB ## CC just makes a GrossModule. archive_cmds='$LD -G -o $lib $libobjs $deplibs $linker_flags' reload_cmds='$CC -r -o $output$reload_objs' hardcode_direct=no ;; motorola) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_direct=no #Motorola manual says yes, but my tests say they lie ;; esac runpath_var='LD_RUN_PATH' hardcode_shlibpath_var=no ;; sysv4.3*) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_shlibpath_var=no export_dynamic_flag_spec='-Bexport' ;; sysv4*MP*) if test -d /usr/nec; then archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_shlibpath_var=no runpath_var=LD_RUN_PATH hardcode_runpath_var=yes ld_shlibs=yes fi ;; sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[01].[10]* | unixware7* | sco3.2v5.0.[024]*) no_undefined_flag='$wl-z,text' archive_cmds_need_lc=no hardcode_shlibpath_var=no runpath_var='LD_RUN_PATH' if test yes = "$GCC"; then archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' else archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' fi ;; sysv5* | sco3.2v5* | sco5v6*) # Note: We CANNOT use -z defs as we might desire, because we do not # link with -lc, and that would cause any symbols used from libc to # always be unresolved, which means just about no library would # ever link correctly. If we're not using GNU ld we use -z text # though, which does catch some bad symbols but isn't as heavy-handed # as -z defs. no_undefined_flag='$wl-z,text' allow_undefined_flag='$wl-z,nodefs' archive_cmds_need_lc=no hardcode_shlibpath_var=no hardcode_libdir_flag_spec='$wl-R,$libdir' hardcode_libdir_separator=':' link_all_deplibs=yes export_dynamic_flag_spec='$wl-Bexport' runpath_var='LD_RUN_PATH' if test yes = "$GCC"; then archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' else archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags' fi ;; uts4*) archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags' hardcode_libdir_flag_spec='-L$libdir' hardcode_shlibpath_var=no ;; *) ld_shlibs=no ;; esac if test sni = "$host_vendor"; then case $host in sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*) export_dynamic_flag_spec='$wl-Blargedynsym' ;; esac fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ld_shlibs" >&5 printf "%s\n" "$ld_shlibs" >&6; } test no = "$ld_shlibs" && can_build_shared=no with_gnu_ld=$with_gnu_ld # # Do we need to explicitly link libc? # case "x$archive_cmds_need_lc" in x|xyes) # Assume -lc should be added archive_cmds_need_lc=yes if test yes,yes = "$GCC,$enable_shared"; then case $archive_cmds in *'~'*) # FIXME: we may have to deal with multi-command sequences. ;; '$CC '*) # Test whether the compiler implicitly links with -lc since on some # systems, -lgcc has to come before -lc. If gcc already passes -lc # to ld, don't add -lc before -lgcc. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether -lc should be explicitly linked in" >&5 printf %s "checking whether -lc should be explicitly linked in... " >&6; } if test ${lt_cv_archive_cmds_need_lc+y} then : printf %s "(cached) " >&6 else $as_nop $RM conftest* echo "$lt_simple_compile_test_code" > conftest.$ac_ext if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5 (eval $ac_compile) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } 2>conftest.err; then soname=conftest lib=conftest libobjs=conftest.$ac_objext deplibs= wl=$lt_prog_compiler_wl pic_flag=$lt_prog_compiler_pic compiler_flags=-v linker_flags=-v verstring= output_objdir=. libname=conftest lt_save_allow_undefined_flag=$allow_undefined_flag allow_undefined_flag= if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1\""; } >&5 (eval $archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } then lt_cv_archive_cmds_need_lc=no else lt_cv_archive_cmds_need_lc=yes fi allow_undefined_flag=$lt_save_allow_undefined_flag else cat conftest.err 1>&5 fi $RM conftest* fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_archive_cmds_need_lc" >&5 printf "%s\n" "$lt_cv_archive_cmds_need_lc" >&6; } archive_cmds_need_lc=$lt_cv_archive_cmds_need_lc ;; esac fi ;; esac { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking dynamic linker characteristics" >&5 printf %s "checking dynamic linker characteristics... " >&6; } if test yes = "$GCC"; then case $host_os in darwin*) lt_awk_arg='/^libraries:/,/LR/' ;; *) lt_awk_arg='/^libraries:/' ;; esac case $host_os in mingw* | cegcc*) lt_sed_strip_eq='s|=\([A-Za-z]:\)|\1|g' ;; *) lt_sed_strip_eq='s|=/|/|g' ;; esac lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq` case $lt_search_path_spec in *\;*) # if the path contains ";" then we assume it to be the separator # otherwise default to the standard path separator (i.e. ":") - it is # assumed that no part of a normal pathname contains ";" but that should # okay in the real world where ";" in dirpaths is itself problematic. lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'` ;; *) lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"` ;; esac # Ok, now we have the path, separated by spaces, we can step through it # and add multilib dir if necessary... lt_tmp_lt_search_path_spec= lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null` # ...but if some path component already ends with the multilib dir we assume # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer). case "$lt_multi_os_dir; $lt_search_path_spec " in "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*) lt_multi_os_dir= ;; esac for lt_sys_path in $lt_search_path_spec; do if test -d "$lt_sys_path$lt_multi_os_dir"; then lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir" elif test -n "$lt_multi_os_dir"; then test -d "$lt_sys_path" && \ lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path" fi done lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk ' BEGIN {RS = " "; FS = "/|\n";} { lt_foo = ""; lt_count = 0; for (lt_i = NF; lt_i > 0; lt_i--) { if ($lt_i != "" && $lt_i != ".") { if ($lt_i == "..") { lt_count++; } else { if (lt_count == 0) { lt_foo = "/" $lt_i lt_foo; } else { lt_count--; } } } } if (lt_foo != "") { lt_freq[lt_foo]++; } if (lt_freq[lt_foo] == 1) { print lt_foo; } }'` # AWK program above erroneously prepends '/' to C:/dos/paths # for these hosts. case $host_os in mingw* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\ $SED 's|/\([A-Za-z]:\)|\1|g'` ;; esac sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP` else sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" fi library_names_spec= libname_spec='lib$name' soname_spec= shrext_cmds=.so postinstall_cmds= postuninstall_cmds= finish_cmds= finish_eval= shlibpath_var= shlibpath_overrides_runpath=unknown version_type=none dynamic_linker="$host_os ld.so" sys_lib_dlsearch_path_spec="/lib /usr/lib" need_lib_prefix=unknown hardcode_into_libs=no # when you set need_version to no, make sure it does not cause -set_version # flags to be left without arguments need_version=unknown case $host_os in aix3*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname.a' shlibpath_var=LIBPATH # AIX 3 has no versioning support, so we append a major version to the name. soname_spec='$libname$release$shared_ext$major' ;; aix[4-9]*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no hardcode_into_libs=yes if test ia64 = "$host_cpu"; then # AIX 5 supports IA64 library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH else # With GCC up to 2.95.x, collect2 would create an import file # for dependence libraries. The import file would start with # the line '#! .'. This would cause the generated library to # depend on '.', always an invalid library. This was fixed in # development snapshots of GCC prior to 3.0. case $host_os in aix4 | aix4.[01] | aix4.[01].*) if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)' echo ' yes ' echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then : else can_build_shared=no fi ;; esac # Using Import Files as archive members, it is possible to support # filename-based versioning of shared library archives on AIX. While # this would work for both with and without runtime linking, it will # prevent static linking of such archives. So we do filename-based # shared library versioning with .so extension only, which is used # when both runtime linking and shared linking is enabled. # Unfortunately, runtime linking may impact performance, so we do # not want this to be the default eventually. Also, we use the # versioned .so libs for executables only if there is the -brtl # linker flag in LDFLAGS as well, or --with-aix-soname=svr4 only. # To allow for filename-based versioning support, we need to create # libNAME.so.V as an archive file, containing: # *) an Import File, referring to the versioned filename of the # archive as well as the shared archive member, telling the # bitwidth (32 or 64) of that shared object, and providing the # list of exported symbols of that shared object, eventually # decorated with the 'weak' keyword # *) the shared object with the F_LOADONLY flag set, to really avoid # it being seen by the linker. # At run time we better use the real file rather than another symlink, # but for link time we create the symlink libNAME.so -> libNAME.so.V case $with_aix_soname,$aix_use_runtimelinking in # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct # soname into executable. Probably we can add versioning support to # collect2, so additional links can be useful in future. aix,yes) # traditional libtool dynamic_linker='AIX unversionable lib.so' # If using run time linking (on AIX 4.2 or later) use lib.so # instead of lib.a to let people know that these are not # typical AIX shared libraries. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' ;; aix,no) # traditional AIX only dynamic_linker='AIX lib.a(lib.so.V)' # We preserve .a as extension for shared libraries through AIX4.2 # and later when we are not doing run time linking. library_names_spec='$libname$release.a $libname.a' soname_spec='$libname$release$shared_ext$major' ;; svr4,*) # full svr4 only dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o)" library_names_spec='$libname$release$shared_ext$major $libname$shared_ext' # We do not specify a path in Import Files, so LIBPATH fires. shlibpath_overrides_runpath=yes ;; *,yes) # both, prefer svr4 dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o), lib.a(lib.so.V)" library_names_spec='$libname$release$shared_ext$major $libname$shared_ext' # unpreferred sharedlib libNAME.a needs extra handling postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"' postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"' # We do not specify a path in Import Files, so LIBPATH fires. shlibpath_overrides_runpath=yes ;; *,no) # both, prefer aix dynamic_linker="AIX lib.a(lib.so.V), lib.so.V($shared_archive_member_spec.o)" library_names_spec='$libname$release.a $libname.a' soname_spec='$libname$release$shared_ext$major' # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)' postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"' ;; esac shlibpath_var=LIBPATH fi ;; amigaos*) case $host_cpu in powerpc) # Since July 2007 AmigaOS4 officially supports .so libraries. # When compiling the executable, add -use-dynld -Lsobjs: to the compileline. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' ;; m68k) library_names_spec='$libname.ixlibrary $libname.a' # Create ${libname}_ixlibrary.a entries in /sys/libs. finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([^/]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done' ;; esac ;; beos*) library_names_spec='$libname$shared_ext' dynamic_linker="$host_os ld.so" shlibpath_var=LIBRARY_PATH ;; bsdi[45]*) version_type=linux # correct to gnu/linux during the next big refactor need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir' shlibpath_var=LD_LIBRARY_PATH sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib" sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib" # the default ld.so.conf also contains /usr/contrib/lib and # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow # libtool to hard-code these into programs ;; cygwin* | mingw* | pw32* | cegcc*) version_type=windows shrext_cmds=.dll need_version=no need_lib_prefix=no case $GCC,$cc_basename in yes,*) # gcc library_names_spec='$libname.dll.a' # DLL is installed to $(libdir)/../bin by postinstall_cmds postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname~ chmod a+x \$dldir/$dlname~ if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then eval '\''$striplib \$dldir/$dlname'\'' || exit \$?; fi' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' shlibpath_overrides_runpath=yes case $host_os in cygwin*) # Cygwin DLLs use 'cyg' prefix rather than 'lib' soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext' sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api" ;; mingw* | cegcc*) # MinGW DLLs use traditional 'lib' prefix soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext' ;; pw32*) # pw32 DLLs use 'pw' prefix rather than 'lib' library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext' ;; esac dynamic_linker='Win32 ld.exe' ;; *,cl* | *,icl*) # Native MSVC or ICC libname_spec='$name' soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext' library_names_spec='$libname.dll.lib' case $build_os in mingw*) sys_lib_search_path_spec= lt_save_ifs=$IFS IFS=';' for lt_path in $LIB do IFS=$lt_save_ifs # Let DOS variable expansion print the short 8.3 style file name. lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"` sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path" done IFS=$lt_save_ifs # Convert to MSYS style. sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([a-zA-Z]\\):| /\\1|g' -e 's|^ ||'` ;; cygwin*) # Convert to unix form, then to dos form, then back to unix form # but this time dos style (no spaces!) so that the unix form looks # like /cygdrive/c/PROGRA~1:/cygdr... sys_lib_search_path_spec=`cygpath --path --unix "$LIB"` sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null` sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` ;; *) sys_lib_search_path_spec=$LIB if $ECHO "$sys_lib_search_path_spec" | $GREP ';[c-zC-Z]:/' >/dev/null; then # It is most probably a Windows format PATH. sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'` else sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"` fi # FIXME: find the short name or the path components, as spaces are # common. (e.g. "Program Files" -> "PROGRA~1") ;; esac # DLL is installed to $(libdir)/../bin by postinstall_cmds postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' shlibpath_overrides_runpath=yes dynamic_linker='Win32 link.exe' ;; *) # Assume MSVC and ICC wrapper library_names_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext $libname.lib' dynamic_linker='Win32 ld.exe' ;; esac # FIXME: first we should search . and the directory the executable is in shlibpath_var=PATH ;; darwin* | rhapsody*) dynamic_linker="$host_os dyld" version_type=darwin need_lib_prefix=no need_version=no library_names_spec='$libname$release$major$shared_ext $libname$shared_ext' soname_spec='$libname$release$major$shared_ext' shlibpath_overrides_runpath=yes shlibpath_var=DYLD_LIBRARY_PATH shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`' sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib" sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib' ;; dgux*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH ;; freebsd* | dragonfly* | midnightbsd*) # DragonFly does not have aout. When/if they implement a new # versioning mechanism, adjust this. if test -x /usr/bin/objformat; then objformat=`/usr/bin/objformat` else case $host_os in freebsd[23].*) objformat=aout ;; *) objformat=elf ;; esac fi version_type=freebsd-$objformat case $version_type in freebsd-elf*) library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' need_version=no need_lib_prefix=no ;; freebsd-*) library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' need_version=yes ;; esac shlibpath_var=LD_LIBRARY_PATH case $host_os in freebsd2.*) shlibpath_overrides_runpath=yes ;; freebsd3.[01]* | freebsdelf3.[01]*) shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; freebsd3.[2-9]* | freebsdelf3.[2-9]* | \ freebsd4.[0-5] | freebsdelf4.[0-5] | freebsd4.1.1 | freebsdelf4.1.1) shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; *) # from 4.6 on, and DragonFly shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; esac ;; haiku*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no dynamic_linker="$host_os runtime_loader" library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LIBRARY_PATH shlibpath_overrides_runpath=no sys_lib_dlsearch_path_spec='/boot/home/config/lib /boot/common/lib /boot/system/lib' hardcode_into_libs=yes ;; hpux9* | hpux10* | hpux11*) # Give a soname corresponding to the major version so that dld.sl refuses to # link against other versions. version_type=sunos need_lib_prefix=no need_version=no case $host_cpu in ia64*) shrext_cmds='.so' hardcode_into_libs=yes dynamic_linker="$host_os dld.so" shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' if test 32 = "$HPUX_IA64_MODE"; then sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib" sys_lib_dlsearch_path_spec=/usr/lib/hpux32 else sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64" sys_lib_dlsearch_path_spec=/usr/lib/hpux64 fi ;; hppa*64*) shrext_cmds='.sl' hardcode_into_libs=yes dynamic_linker="$host_os dld.sl" shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH shlibpath_overrides_runpath=yes # Unless +noenvvar is specified. library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec ;; *) shrext_cmds='.sl' dynamic_linker="$host_os dld.sl" shlibpath_var=SHLIB_PATH shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' ;; esac # HP-UX runs *really* slowly unless shared libraries are mode 555, ... postinstall_cmds='chmod 555 $lib' # or fails outright, so override atomically: install_override_mode=555 ;; interix[3-9]*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; irix5* | irix6* | nonstopux*) case $host_os in nonstopux*) version_type=nonstopux ;; *) if test yes = "$lt_cv_prog_gnu_ld"; then version_type=linux # correct to gnu/linux during the next big refactor else version_type=irix fi ;; esac need_lib_prefix=no need_version=no soname_spec='$libname$release$shared_ext$major' library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext' case $host_os in irix5* | nonstopux*) libsuff= shlibsuff= ;; *) case $LD in # libtool.m4 will add one of these switches to LD *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ") libsuff= shlibsuff= libmagic=32-bit;; *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ") libsuff=32 shlibsuff=N32 libmagic=N32;; *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ") libsuff=64 shlibsuff=64 libmagic=64-bit;; *) libsuff= shlibsuff= libmagic=never-match;; esac ;; esac shlibpath_var=LD_LIBRARY${shlibsuff}_PATH shlibpath_overrides_runpath=no sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff" sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff" hardcode_into_libs=yes ;; # No shared lib support for Linux oldld, aout, or coff. linux*oldld* | linux*aout* | linux*coff*) dynamic_linker=no ;; linux*android*) version_type=none # Android doesn't support versioned libraries. need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext' soname_spec='$libname$release$shared_ext' finish_cmds= shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes # This implies no fast_install, which is unacceptable. # Some rework will be needed to allow for fast_install # before this can be enabled. hardcode_into_libs=yes dynamic_linker='Android linker' # Don't embed -rpath directories since the linker doesn't support them. hardcode_libdir_flag_spec='-L$libdir' ;; # This must be glibc/ELF. linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no # Some binutils ld are patched to set DT_RUNPATH if test ${lt_cv_shlibpath_overrides_runpath+y} then : printf %s "(cached) " >&6 else $as_nop lt_cv_shlibpath_overrides_runpath=no save_LDFLAGS=$LDFLAGS save_libdir=$libdir eval "libdir=/foo; wl=\"$lt_prog_compiler_wl\"; \ LDFLAGS=\"\$LDFLAGS $hardcode_libdir_flag_spec\"" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : if ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null then : lt_cv_shlibpath_overrides_runpath=yes fi fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$save_LDFLAGS libdir=$save_libdir fi shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath # This implies no fast_install, which is unacceptable. # Some rework will be needed to allow for fast_install # before this can be enabled. hardcode_into_libs=yes # Add ABI-specific directories to the system library path. sys_lib_dlsearch_path_spec="/lib64 /usr/lib64 /lib /usr/lib" # Ideally, we could use ldconfig to report *all* directores which are # searched for libraries, however this is still not possible. Aside from not # being certain /sbin/ldconfig is available, command # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64, # even though it is searched at run-time. Try to do the best guess by # appending ld.so.conf contents (and includes) to the search path. if test -f /etc/ld.so.conf; then lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \$2)); skip = 1; } { if (!skip) print \$0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[ ]*hwcap[ ]/d;s/[:, ]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '` sys_lib_dlsearch_path_spec="$sys_lib_dlsearch_path_spec $lt_ld_extra" fi # We used to test for /lib/ld.so.1 and disable shared libraries on # powerpc, because MkLinux only supported shared libraries with the # GNU dynamic linker. Since this was broken with cross compilers, # most powerpc-linux boxes support dynamic linking these days and # people can always --disable-shared, the test was removed, and we # assume the GNU/Linux dynamic linker is in use. dynamic_linker='GNU/Linux ld.so' ;; netbsd*) version_type=sunos need_lib_prefix=no need_version=no if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' dynamic_linker='NetBSD (a.out) ld.so' else library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' dynamic_linker='NetBSD ld.elf_so' fi shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes ;; newsos6) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes ;; *nto* | *qnx*) version_type=qnx need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes dynamic_linker='ldqnx.so' ;; openbsd* | bitrig*) version_type=sunos sys_lib_dlsearch_path_spec=/usr/lib need_lib_prefix=no if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then need_version=no else need_version=yes fi library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes ;; os2*) libname_spec='$name' version_type=windows shrext_cmds=.dll need_version=no need_lib_prefix=no # OS/2 can only load a DLL with a base name of 8 characters or less. soname_spec='`test -n "$os2dllname" && libname="$os2dllname"; v=$($ECHO $release$versuffix | tr -d .-); n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _); $ECHO $n$v`$shared_ext' library_names_spec='${libname}_dll.$libext' dynamic_linker='OS/2 ld.exe' shlibpath_var=BEGINLIBPATH sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec postinstall_cmds='base_file=`basename \$file`~ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~ dldir=$destdir/`dirname \$dlpath`~ test -d \$dldir || mkdir -p \$dldir~ $install_prog $dir/$dlname \$dldir/$dlname~ chmod a+x \$dldir/$dlname~ if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then eval '\''$striplib \$dldir/$dlname'\'' || exit \$?; fi' postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~ dlpath=$dir/\$dldll~ $RM \$dlpath' ;; osf3* | osf4* | osf5*) version_type=osf need_lib_prefix=no need_version=no soname_spec='$libname$release$shared_ext$major' library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib" sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec ;; rdos*) dynamic_linker=no ;; solaris*) version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes # ldd complains unless libraries are executable postinstall_cmds='chmod +x $lib' ;; sunos4*) version_type=sunos library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix' finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes if test yes = "$with_gnu_ld"; then need_lib_prefix=no fi need_version=yes ;; sysv4 | sysv4.3*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH case $host_vendor in sni) shlibpath_overrides_runpath=no need_lib_prefix=no runpath_var=LD_RUN_PATH ;; siemens) need_lib_prefix=no ;; motorola) need_lib_prefix=no need_version=no shlibpath_overrides_runpath=no sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib' ;; esac ;; sysv4*MP*) if test -d /usr/nec; then version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext' soname_spec='$libname$shared_ext.$major' shlibpath_var=LD_LIBRARY_PATH fi ;; sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*) version_type=sco need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=yes hardcode_into_libs=yes if test yes = "$with_gnu_ld"; then sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib' else sys_lib_search_path_spec='/usr/ccs/lib /usr/lib' case $host_os in sco3.2v5*) sys_lib_search_path_spec="$sys_lib_search_path_spec /lib" ;; esac fi sys_lib_dlsearch_path_spec='/usr/lib' ;; tpf*) # TPF is a cross-target only. Preferred cross-host = GNU/Linux. version_type=linux # correct to gnu/linux during the next big refactor need_lib_prefix=no need_version=no library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' shlibpath_var=LD_LIBRARY_PATH shlibpath_overrides_runpath=no hardcode_into_libs=yes ;; uts4*) version_type=linux # correct to gnu/linux during the next big refactor library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext' soname_spec='$libname$release$shared_ext$major' shlibpath_var=LD_LIBRARY_PATH ;; *) dynamic_linker=no ;; esac { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $dynamic_linker" >&5 printf "%s\n" "$dynamic_linker" >&6; } test no = "$dynamic_linker" && can_build_shared=no variables_saved_for_relink="PATH $shlibpath_var $runpath_var" if test yes = "$GCC"; then variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH" fi if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec fi if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec fi # remember unaugmented sys_lib_dlsearch_path content for libtool script decls... configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec # ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH" # to be used as default LT_SYS_LIBRARY_PATH value in generated libtool configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to hardcode library paths into programs" >&5 printf %s "checking how to hardcode library paths into programs... " >&6; } hardcode_action= if test -n "$hardcode_libdir_flag_spec" || test -n "$runpath_var" || test yes = "$hardcode_automatic"; then # We can hardcode non-existent directories. if test no != "$hardcode_direct" && # If the only mechanism to avoid hardcoding is shlibpath_var, we # have to relink, otherwise we might link with an installed library # when we should be linking with a yet-to-be-installed one ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, )" && test no != "$hardcode_minus_L"; then # Linking always hardcodes the temporary library directory. hardcode_action=relink else # We can link without hardcoding, and we can hardcode nonexisting dirs. hardcode_action=immediate fi else # We cannot hardcode anything, or else we can only hardcode existing # directories. hardcode_action=unsupported fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $hardcode_action" >&5 printf "%s\n" "$hardcode_action" >&6; } if test relink = "$hardcode_action" || test yes = "$inherit_rpath"; then # Fast installation is not supported enable_fast_install=no elif test yes = "$shlibpath_overrides_runpath" || test no = "$enable_shared"; then # Fast installation is not necessary enable_fast_install=needless fi if test yes != "$enable_dlopen"; then enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown else lt_cv_dlopen=no lt_cv_dlopen_libs= case $host_os in beos*) lt_cv_dlopen=load_add_on lt_cv_dlopen_libs= lt_cv_dlopen_self=yes ;; mingw* | pw32* | cegcc*) lt_cv_dlopen=LoadLibrary lt_cv_dlopen_libs= ;; cygwin*) lt_cv_dlopen=dlopen lt_cv_dlopen_libs= ;; darwin*) # if libdl is installed we need to link against it { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5 printf %s "checking for dlopen in -ldl... " >&6; } if test ${ac_cv_lib_dl_dlopen+y} then : printf %s "(cached) " >&6 else $as_nop ac_check_lib_save_LIBS=$LIBS LIBS="-ldl $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ char dlopen (); int main (void) { return dlopen (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_dl_dlopen=yes else $as_nop ac_cv_lib_dl_dlopen=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5 printf "%s\n" "$ac_cv_lib_dl_dlopen" >&6; } if test "x$ac_cv_lib_dl_dlopen" = xyes then : lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl else $as_nop lt_cv_dlopen=dyld lt_cv_dlopen_libs= lt_cv_dlopen_self=yes fi ;; tpf*) # Don't try to run any link tests for TPF. We know it's impossible # because TPF is a cross-compiler, and we know how we open DSOs. lt_cv_dlopen=dlopen lt_cv_dlopen_libs= lt_cv_dlopen_self=no ;; *) ac_fn_c_check_func "$LINENO" "shl_load" "ac_cv_func_shl_load" if test "x$ac_cv_func_shl_load" = xyes then : lt_cv_dlopen=shl_load else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for shl_load in -ldld" >&5 printf %s "checking for shl_load in -ldld... " >&6; } if test ${ac_cv_lib_dld_shl_load+y} then : printf %s "(cached) " >&6 else $as_nop ac_check_lib_save_LIBS=$LIBS LIBS="-ldld $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ char shl_load (); int main (void) { return shl_load (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_dld_shl_load=yes else $as_nop ac_cv_lib_dld_shl_load=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_shl_load" >&5 printf "%s\n" "$ac_cv_lib_dld_shl_load" >&6; } if test "x$ac_cv_lib_dld_shl_load" = xyes then : lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld else $as_nop ac_fn_c_check_func "$LINENO" "dlopen" "ac_cv_func_dlopen" if test "x$ac_cv_func_dlopen" = xyes then : lt_cv_dlopen=dlopen else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5 printf %s "checking for dlopen in -ldl... " >&6; } if test ${ac_cv_lib_dl_dlopen+y} then : printf %s "(cached) " >&6 else $as_nop ac_check_lib_save_LIBS=$LIBS LIBS="-ldl $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ char dlopen (); int main (void) { return dlopen (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_dl_dlopen=yes else $as_nop ac_cv_lib_dl_dlopen=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5 printf "%s\n" "$ac_cv_lib_dl_dlopen" >&6; } if test "x$ac_cv_lib_dl_dlopen" = xyes then : lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for dlopen in -lsvld" >&5 printf %s "checking for dlopen in -lsvld... " >&6; } if test ${ac_cv_lib_svld_dlopen+y} then : printf %s "(cached) " >&6 else $as_nop ac_check_lib_save_LIBS=$LIBS LIBS="-lsvld $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ char dlopen (); int main (void) { return dlopen (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_svld_dlopen=yes else $as_nop ac_cv_lib_svld_dlopen=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_svld_dlopen" >&5 printf "%s\n" "$ac_cv_lib_svld_dlopen" >&6; } if test "x$ac_cv_lib_svld_dlopen" = xyes then : lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for dld_link in -ldld" >&5 printf %s "checking for dld_link in -ldld... " >&6; } if test ${ac_cv_lib_dld_dld_link+y} then : printf %s "(cached) " >&6 else $as_nop ac_check_lib_save_LIBS=$LIBS LIBS="-ldld $LIBS" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ char dld_link (); int main (void) { return dld_link (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_cv_lib_dld_dld_link=yes else $as_nop ac_cv_lib_dld_dld_link=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LIBS=$ac_check_lib_save_LIBS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_dld_link" >&5 printf "%s\n" "$ac_cv_lib_dld_dld_link" >&6; } if test "x$ac_cv_lib_dld_dld_link" = xyes then : lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld fi fi fi fi fi fi ;; esac if test no = "$lt_cv_dlopen"; then enable_dlopen=no else enable_dlopen=yes fi case $lt_cv_dlopen in dlopen) save_CPPFLAGS=$CPPFLAGS test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H" save_LDFLAGS=$LDFLAGS wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\" save_LIBS=$LIBS LIBS="$lt_cv_dlopen_libs $LIBS" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether a program can dlopen itself" >&5 printf %s "checking whether a program can dlopen itself... " >&6; } if test ${lt_cv_dlopen_self+y} then : printf %s "(cached) " >&6 else $as_nop if test yes = "$cross_compiling"; then : lt_cv_dlopen_self=cross else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext <<_LT_EOF #line $LINENO "configure" #include "confdefs.h" #if HAVE_DLFCN_H #include #endif #include #ifdef RTLD_GLOBAL # define LT_DLGLOBAL RTLD_GLOBAL #else # ifdef DL_GLOBAL # define LT_DLGLOBAL DL_GLOBAL # else # define LT_DLGLOBAL 0 # endif #endif /* We may have to define LT_DLLAZY_OR_NOW in the command line if we find out it does not work in some platform. */ #ifndef LT_DLLAZY_OR_NOW # ifdef RTLD_LAZY # define LT_DLLAZY_OR_NOW RTLD_LAZY # else # ifdef DL_LAZY # define LT_DLLAZY_OR_NOW DL_LAZY # else # ifdef RTLD_NOW # define LT_DLLAZY_OR_NOW RTLD_NOW # else # ifdef DL_NOW # define LT_DLLAZY_OR_NOW DL_NOW # else # define LT_DLLAZY_OR_NOW 0 # endif # endif # endif # endif #endif /* When -fvisibility=hidden is used, assume the code has been annotated correspondingly for the symbols needed. */ #if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3)) int fnord () __attribute__((visibility("default"))); #endif int fnord () { return 42; } int main () { void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW); int status = $lt_dlunknown; if (self) { if (dlsym (self,"fnord")) status = $lt_dlno_uscore; else { if (dlsym( self,"_fnord")) status = $lt_dlneed_uscore; else puts (dlerror ()); } /* dlclose (self); */ } else puts (dlerror ()); return status; } _LT_EOF if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5 (eval $ac_link) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then (./conftest; exit; ) >&5 2>/dev/null lt_status=$? case x$lt_status in x$lt_dlno_uscore) lt_cv_dlopen_self=yes ;; x$lt_dlneed_uscore) lt_cv_dlopen_self=yes ;; x$lt_dlunknown|x*) lt_cv_dlopen_self=no ;; esac else : # compilation failed lt_cv_dlopen_self=no fi fi rm -fr conftest* fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self" >&5 printf "%s\n" "$lt_cv_dlopen_self" >&6; } if test yes = "$lt_cv_dlopen_self"; then wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether a statically linked program can dlopen itself" >&5 printf %s "checking whether a statically linked program can dlopen itself... " >&6; } if test ${lt_cv_dlopen_self_static+y} then : printf %s "(cached) " >&6 else $as_nop if test yes = "$cross_compiling"; then : lt_cv_dlopen_self_static=cross else lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2 lt_status=$lt_dlunknown cat > conftest.$ac_ext <<_LT_EOF #line $LINENO "configure" #include "confdefs.h" #if HAVE_DLFCN_H #include #endif #include #ifdef RTLD_GLOBAL # define LT_DLGLOBAL RTLD_GLOBAL #else # ifdef DL_GLOBAL # define LT_DLGLOBAL DL_GLOBAL # else # define LT_DLGLOBAL 0 # endif #endif /* We may have to define LT_DLLAZY_OR_NOW in the command line if we find out it does not work in some platform. */ #ifndef LT_DLLAZY_OR_NOW # ifdef RTLD_LAZY # define LT_DLLAZY_OR_NOW RTLD_LAZY # else # ifdef DL_LAZY # define LT_DLLAZY_OR_NOW DL_LAZY # else # ifdef RTLD_NOW # define LT_DLLAZY_OR_NOW RTLD_NOW # else # ifdef DL_NOW # define LT_DLLAZY_OR_NOW DL_NOW # else # define LT_DLLAZY_OR_NOW 0 # endif # endif # endif # endif #endif /* When -fvisibility=hidden is used, assume the code has been annotated correspondingly for the symbols needed. */ #if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3)) int fnord () __attribute__((visibility("default"))); #endif int fnord () { return 42; } int main () { void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW); int status = $lt_dlunknown; if (self) { if (dlsym (self,"fnord")) status = $lt_dlno_uscore; else { if (dlsym( self,"_fnord")) status = $lt_dlneed_uscore; else puts (dlerror ()); } /* dlclose (self); */ } else puts (dlerror ()); return status; } _LT_EOF if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5 (eval $ac_link) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then (./conftest; exit; ) >&5 2>/dev/null lt_status=$? case x$lt_status in x$lt_dlno_uscore) lt_cv_dlopen_self_static=yes ;; x$lt_dlneed_uscore) lt_cv_dlopen_self_static=yes ;; x$lt_dlunknown|x*) lt_cv_dlopen_self_static=no ;; esac else : # compilation failed lt_cv_dlopen_self_static=no fi fi rm -fr conftest* fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self_static" >&5 printf "%s\n" "$lt_cv_dlopen_self_static" >&6; } fi CPPFLAGS=$save_CPPFLAGS LDFLAGS=$save_LDFLAGS LIBS=$save_LIBS ;; esac case $lt_cv_dlopen_self in yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;; *) enable_dlopen_self=unknown ;; esac case $lt_cv_dlopen_self_static in yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;; *) enable_dlopen_self_static=unknown ;; esac fi striplib= old_striplib= { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether stripping libraries is possible" >&5 printf %s "checking whether stripping libraries is possible... " >&6; } if test -z "$STRIP"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } else if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then old_striplib="$STRIP --strip-debug" striplib="$STRIP --strip-unneeded" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } else case $host_os in darwin*) # FIXME - insert some real tests, host_os isn't really good enough striplib="$STRIP -x" old_striplib="$STRIP -S" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } ;; freebsd*) if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then old_striplib="$STRIP --strip-debug" striplib="$STRIP --strip-unneeded" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi ;; *) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } ;; esac fi fi # Report what library types will actually be built { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if libtool supports shared libraries" >&5 printf %s "checking if libtool supports shared libraries... " >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $can_build_shared" >&5 printf "%s\n" "$can_build_shared" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether to build shared libraries" >&5 printf %s "checking whether to build shared libraries... " >&6; } test no = "$can_build_shared" && enable_shared=no # On AIX, shared libraries and static libraries use the same namespace, and # are all built from PIC. case $host_os in aix3*) test yes = "$enable_shared" && enable_static=no if test -n "$RANLIB"; then archive_cmds="$archive_cmds~\$RANLIB \$lib" postinstall_cmds='$RANLIB $lib' fi ;; aix[4-9]*) if test ia64 != "$host_cpu"; then case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in yes,aix,yes) ;; # shared object as lib.so file only yes,svr4,*) ;; # shared object as lib.so archive member only yes,*) enable_static=no ;; # shared object in lib.a archive as well esac fi ;; esac { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $enable_shared" >&5 printf "%s\n" "$enable_shared" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether to build static libraries" >&5 printf %s "checking whether to build static libraries... " >&6; } # Make sure either enable_shared or enable_static is yes. test yes = "$enable_shared" || enable_static=yes { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $enable_static" >&5 printf "%s\n" "$enable_static" >&6; } fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu CC=$lt_save_CC ac_config_commands="$ac_config_commands libtool" # Only expand once: am__api_version='1.16' # Find a good install program. We prefer a C program (faster), # so one script is as good as another. But avoid the broken or # incompatible versions: # SysV /etc/install, /usr/sbin/install # SunOS /usr/etc/install # IRIX /sbin/install # AIX /bin/install # AmigaOS /C/install, which installs bootblocks on floppy discs # AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag # AFS /usr/afsws/bin/install, which mishandles nonexistent args # SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff" # OS/2's system install, which has a completely different semantic # ./install, which can be erroneously created by make from ./install.sh. # Reject install programs that cannot install multiple files. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5 printf %s "checking for a BSD-compatible install... " >&6; } if test -z "$INSTALL"; then if test ${ac_cv_path_install+y} then : printf %s "(cached) " >&6 else $as_nop as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac # Account for fact that we put trailing slashes in our PATH walk. case $as_dir in #(( ./ | /[cC]/* | \ /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \ ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \ /usr/ucb/* ) ;; *) # OSF1 and SCO ODT 3.0 have their own names for install. # Don't use installbsd from OSF since it installs stuff as root # by default. for ac_prog in ginstall scoinst install; do for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext"; then if test $ac_prog = install && grep dspmsg "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then # AIX install. It has an incompatible calling convention. : elif test $ac_prog = install && grep pwplus "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then # program-specific install script used by HP pwplus--don't use. : else rm -rf conftest.one conftest.two conftest.dir echo one > conftest.one echo two > conftest.two mkdir conftest.dir if "$as_dir$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir/" && test -s conftest.one && test -s conftest.two && test -s conftest.dir/conftest.one && test -s conftest.dir/conftest.two then ac_cv_path_install="$as_dir$ac_prog$ac_exec_ext -c" break 3 fi fi fi done done ;; esac done IFS=$as_save_IFS rm -rf conftest.one conftest.two conftest.dir fi if test ${ac_cv_path_install+y}; then INSTALL=$ac_cv_path_install else # As a last resort, use the slow shell script. Don't cache a # value for INSTALL within a source directory, because that will # break other packages using the cache if that directory is # removed, or if the value is a relative name. INSTALL=$ac_install_sh fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5 printf "%s\n" "$INSTALL" >&6; } # Use test -z because SunOS4 sh mishandles braces in ${var-val}. # It thinks the first close brace ends the variable substitution. test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}' test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}' test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644' { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether build environment is sane" >&5 printf %s "checking whether build environment is sane... " >&6; } # Reject unsafe characters in $srcdir or the absolute working directory # name. Accept space and tab only in the latter. am_lf=' ' case `pwd` in *[\\\"\#\$\&\'\`$am_lf]*) as_fn_error $? "unsafe absolute working directory name" "$LINENO" 5;; esac case $srcdir in *[\\\"\#\$\&\'\`$am_lf\ \ ]*) as_fn_error $? "unsafe srcdir value: '$srcdir'" "$LINENO" 5;; esac # Do 'set' in a subshell so we don't clobber the current shell's # arguments. Must try -L first in case configure is actually a # symlink; some systems play weird games with the mod time of symlinks # (eg FreeBSD returns the mod time of the symlink's containing # directory). if ( am_has_slept=no for am_try in 1 2; do echo "timestamp, slept: $am_has_slept" > conftest.file set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null` if test "$*" = "X"; then # -L didn't work. set X `ls -t "$srcdir/configure" conftest.file` fi if test "$*" != "X $srcdir/configure conftest.file" \ && test "$*" != "X conftest.file $srcdir/configure"; then # If neither matched, then we have a broken ls. This can happen # if, for instance, CONFIG_SHELL is bash and it inherits a # broken ls alias from the environment. This has actually # happened. Such a system could not be considered "sane". as_fn_error $? "ls -t appears to fail. Make sure there is not a broken alias in your environment" "$LINENO" 5 fi if test "$2" = conftest.file || test $am_try -eq 2; then break fi # Just in case. sleep 1 am_has_slept=yes done test "$2" = conftest.file ) then # Ok. : else as_fn_error $? "newly created file is older than distributed files! Check your system clock" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } # If we didn't sleep, we still need to ensure time stamps of config.status and # generated files are strictly newer. am_sleep_pid= if grep 'slept: no' conftest.file >/dev/null 2>&1; then ( sleep 1 ) & am_sleep_pid=$! fi rm -f conftest.file test "$program_prefix" != NONE && program_transform_name="s&^&$program_prefix&;$program_transform_name" # Use a double $ so make ignores it. test "$program_suffix" != NONE && program_transform_name="s&\$&$program_suffix&;$program_transform_name" # Double any \ or $. # By default was `s,x,x', remove it if useless. ac_script='s/[\\$]/&&/g;s/;s,x,x,$//' program_transform_name=`printf "%s\n" "$program_transform_name" | sed "$ac_script"` if test x"${MISSING+set}" != xset; then MISSING="\${SHELL} '$am_aux_dir/missing'" fi # Use eval to expand $SHELL if eval "$MISSING --is-lightweight"; then am_missing_run="$MISSING " else am_missing_run= { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: 'missing' script is too old or missing" >&5 printf "%s\n" "$as_me: WARNING: 'missing' script is too old or missing" >&2;} fi if test x"${install_sh+set}" != xset; then case $am_aux_dir in *\ * | *\ *) install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;; *) install_sh="\${SHELL} $am_aux_dir/install-sh" esac fi # Installed binaries are usually stripped using 'strip' when the user # run "make install-strip". However 'strip' might not be the right # tool to use in cross-compilation environments, therefore Automake # will honor the 'STRIP' environment variable to overrule this program. if test "$cross_compiling" != no; then if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args. set dummy ${ac_tool_prefix}strip; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_STRIP+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$STRIP"; then ac_cv_prog_STRIP="$STRIP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_STRIP="${ac_tool_prefix}strip" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi STRIP=$ac_cv_prog_STRIP if test -n "$STRIP"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5 printf "%s\n" "$STRIP" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_STRIP"; then ac_ct_STRIP=$STRIP # Extract the first word of "strip", so it can be a program name with args. set dummy strip; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_STRIP+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_STRIP"; then ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_STRIP="strip" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP if test -n "$ac_ct_STRIP"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5 printf "%s\n" "$ac_ct_STRIP" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_STRIP" = x; then STRIP=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac STRIP=$ac_ct_STRIP fi else STRIP="$ac_cv_prog_STRIP" fi fi INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for a race-free mkdir -p" >&5 printf %s "checking for a race-free mkdir -p... " >&6; } if test -z "$MKDIR_P"; then if test ${ac_cv_path_mkdir+y} then : printf %s "(cached) " >&6 else $as_nop as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH$PATH_SEPARATOR/opt/sfw/bin do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_prog in mkdir gmkdir; do for ac_exec_ext in '' $ac_executable_extensions; do as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext" || continue case `"$as_dir$ac_prog$ac_exec_ext" --version 2>&1` in #( 'mkdir ('*'coreutils) '* | \ 'BusyBox '* | \ 'mkdir (fileutils) '4.1*) ac_cv_path_mkdir=$as_dir$ac_prog$ac_exec_ext break 3;; esac done done done IFS=$as_save_IFS fi test -d ./--version && rmdir ./--version if test ${ac_cv_path_mkdir+y}; then MKDIR_P="$ac_cv_path_mkdir -p" else # As a last resort, use the slow shell script. Don't cache a # value for MKDIR_P within a source directory, because that will # break other packages using the cache if that directory is # removed, or if the value is a relative name. MKDIR_P="$ac_install_sh -d" fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $MKDIR_P" >&5 printf "%s\n" "$MKDIR_P" >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5 printf %s "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; } set x ${MAKE-make} ac_make=`printf "%s\n" "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'` if eval test \${ac_cv_prog_make_${ac_make}_set+y} then : printf %s "(cached) " >&6 else $as_nop cat >conftest.make <<\_ACEOF SHELL = /bin/sh all: @echo '@@@%%%=$(MAKE)=@@@%%%' _ACEOF # GNU make sometimes prints "make[1]: Entering ...", which would confuse us. case `${MAKE-make} -f conftest.make 2>/dev/null` in *@@@%%%=?*=@@@%%%*) eval ac_cv_prog_make_${ac_make}_set=yes;; *) eval ac_cv_prog_make_${ac_make}_set=no;; esac rm -f conftest.make fi if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } SET_MAKE= else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } SET_MAKE="MAKE=${MAKE-make}" fi rm -rf .tst 2>/dev/null mkdir .tst 2>/dev/null if test -d .tst; then am__leading_dot=. else am__leading_dot=_ fi rmdir .tst 2>/dev/null DEPDIR="${am__leading_dot}deps" ac_config_commands="$ac_config_commands depfiles" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} supports the include directive" >&5 printf %s "checking whether ${MAKE-make} supports the include directive... " >&6; } cat > confinc.mk << 'END' am__doit: @echo this is the am__doit target >confinc.out .PHONY: am__doit END am__include="#" am__quote= # BSD make does it like this. echo '.include "confinc.mk" # ignored' > confmf.BSD # Other make implementations (GNU, Solaris 10, AIX) do it like this. echo 'include confinc.mk # ignored' > confmf.GNU _am_result=no for s in GNU BSD; do { echo "$as_me:$LINENO: ${MAKE-make} -f confmf.$s && cat confinc.out" >&5 (${MAKE-make} -f confmf.$s && cat confinc.out) >&5 2>&5 ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&5 (exit $ac_status); } case $?:`cat confinc.out 2>/dev/null` in #( '0:this is the am__doit target') : case $s in #( BSD) : am__include='.include' am__quote='"' ;; #( *) : am__include='include' am__quote='' ;; esac ;; #( *) : ;; esac if test "$am__include" != "#"; then _am_result="yes ($s style)" break fi done rm -f confinc.* confmf.* { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: ${_am_result}" >&5 printf "%s\n" "${_am_result}" >&6; } # Check whether --enable-dependency-tracking was given. if test ${enable_dependency_tracking+y} then : enableval=$enable_dependency_tracking; fi if test "x$enable_dependency_tracking" != xno; then am_depcomp="$ac_aux_dir/depcomp" AMDEPBACKSLASH='\' am__nodep='_no' fi if test "x$enable_dependency_tracking" != xno; then AMDEP_TRUE= AMDEP_FALSE='#' else AMDEP_TRUE='#' AMDEP_FALSE= fi # Check whether --enable-silent-rules was given. if test ${enable_silent_rules+y} then : enableval=$enable_silent_rules; fi case $enable_silent_rules in # ((( yes) AM_DEFAULT_VERBOSITY=0;; no) AM_DEFAULT_VERBOSITY=1;; *) AM_DEFAULT_VERBOSITY=1;; esac am_make=${MAKE-make} { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5 printf %s "checking whether $am_make supports nested variables... " >&6; } if test ${am_cv_make_support_nested_variables+y} then : printf %s "(cached) " >&6 else $as_nop if printf "%s\n" 'TRUE=$(BAR$(V)) BAR0=false BAR1=true V=1 am__doit: @$(TRUE) .PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then am_cv_make_support_nested_variables=yes else am_cv_make_support_nested_variables=no fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5 printf "%s\n" "$am_cv_make_support_nested_variables" >&6; } if test $am_cv_make_support_nested_variables = yes; then AM_V='$(V)' AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)' else AM_V=$AM_DEFAULT_VERBOSITY AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY fi AM_BACKSLASH='\' if test "`cd $srcdir && pwd`" != "`pwd`"; then # Use -I$(srcdir) only when $(srcdir) != ., so that make's output # is not polluted with repeated "-I." am__isrc=' -I$(srcdir)' # test to see if srcdir already configured if test -f $srcdir/config.status; then as_fn_error $? "source directory already configured; run \"make distclean\" there first" "$LINENO" 5 fi fi # test whether we have cygpath if test -z "$CYGPATH_W"; then if (cygpath --version) >/dev/null 2>/dev/null; then CYGPATH_W='cygpath -w' else CYGPATH_W=echo fi fi # Define the identity of the package. PACKAGE='tpm2-pkcs11' VERSION='1.9.1' printf "%s\n" "#define PACKAGE \"$PACKAGE\"" >>confdefs.h printf "%s\n" "#define VERSION \"$VERSION\"" >>confdefs.h # Some tools Automake needs. ACLOCAL=${ACLOCAL-"${am_missing_run}aclocal-${am__api_version}"} AUTOCONF=${AUTOCONF-"${am_missing_run}autoconf"} AUTOMAKE=${AUTOMAKE-"${am_missing_run}automake-${am__api_version}"} AUTOHEADER=${AUTOHEADER-"${am_missing_run}autoheader"} MAKEINFO=${MAKEINFO-"${am_missing_run}makeinfo"} # For better backward compatibility. To be removed once Automake 1.9.x # dies out for good. For more background, see: # # mkdir_p='$(MKDIR_P)' # We need awk for the "check" target (and possibly the TAP driver). The # system "awk" is bad on some platforms. # Always define AMTAR for backward compatibility. Yes, it's still used # in the wild :-( We should find a proper way to deprecate it ... AMTAR='$${TAR-tar}' # We'll loop over all known methods to create a tar archive until one works. _am_tools='gnutar pax cpio none' am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -' depcc="$CC" am_compiler_list= { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking dependency style of $depcc" >&5 printf %s "checking dependency style of $depcc... " >&6; } if test ${am_cv_CC_dependencies_compiler_type+y} then : printf %s "(cached) " >&6 else $as_nop if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then # We make a subdir and do the tests there. Otherwise we can end up # making bogus files that we don't know about and never remove. For # instance it was reported that on HP-UX the gcc test will end up # making a dummy file named 'D' -- because '-MD' means "put the output # in D". rm -rf conftest.dir mkdir conftest.dir # Copy depcomp to subdir because otherwise we won't find it if we're # using a relative directory. cp "$am_depcomp" conftest.dir cd conftest.dir # We will build objects and dependencies in a subdirectory because # it helps to detect inapplicable dependency modes. For instance # both Tru64's cc and ICC support -MD to output dependencies as a # side effect of compilation, but ICC will put the dependencies in # the current directory while Tru64 will put them in the object # directory. mkdir sub am_cv_CC_dependencies_compiler_type=none if test "$am_compiler_list" = ""; then am_compiler_list=`sed -n 's/^#*\([a-zA-Z0-9]*\))$/\1/p' < ./depcomp` fi am__universal=false case " $depcc " in #( *\ -arch\ *\ -arch\ *) am__universal=true ;; esac for depmode in $am_compiler_list; do # Setup a source with many dependencies, because some compilers # like to wrap large dependency lists on column 80 (with \), and # we should not choose a depcomp mode which is confused by this. # # We need to recreate these files for each test, as the compiler may # overwrite some of them when testing with obscure command lines. # This happens at least with the AIX C compiler. : > sub/conftest.c for i in 1 2 3 4 5 6; do echo '#include "conftst'$i'.h"' >> sub/conftest.c # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with # Solaris 10 /bin/sh. echo '/* dummy */' > sub/conftst$i.h done echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf # We check with '-c' and '-o' for the sake of the "dashmstdout" # mode. It turns out that the SunPro C++ compiler does not properly # handle '-M -o', and we need to detect this. Also, some Intel # versions had trouble with output in subdirs. am__obj=sub/conftest.${OBJEXT-o} am__minus_obj="-o $am__obj" case $depmode in gcc) # This depmode causes a compiler race in universal mode. test "$am__universal" = false || continue ;; nosideeffect) # After this tag, mechanisms are not by side-effect, so they'll # only be used when explicitly requested. if test "x$enable_dependency_tracking" = xyes; then continue else break fi ;; msvc7 | msvc7msys | msvisualcpp | msvcmsys) # This compiler won't grok '-c -o', but also, the minuso test has # not run yet. These depmodes are late enough in the game, and # so weak that their functioning should not be impacted. am__obj=conftest.${OBJEXT-o} am__minus_obj= ;; none) break ;; esac if depmode=$depmode \ source=sub/conftest.c object=$am__obj \ depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \ $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \ >/dev/null 2>conftest.err && grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 && grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 && grep $am__obj sub/conftest.Po > /dev/null 2>&1 && ${MAKE-make} -s -f confmf > /dev/null 2>&1; then # icc doesn't choke on unknown options, it will just issue warnings # or remarks (even with -Werror). So we grep stderr for any message # that says an option was ignored or not supported. # When given -MP, icc 7.0 and 7.1 complain thusly: # icc: Command line warning: ignoring option '-M'; no argument required # The diagnosis changed in icc 8.0: # icc: Command line remark: option '-MP' not supported if (grep 'ignoring option' conftest.err || grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else am_cv_CC_dependencies_compiler_type=$depmode break fi fi done cd .. rm -rf conftest.dir else am_cv_CC_dependencies_compiler_type=none fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_CC_dependencies_compiler_type" >&5 printf "%s\n" "$am_cv_CC_dependencies_compiler_type" >&6; } CCDEPMODE=depmode=$am_cv_CC_dependencies_compiler_type if test "x$enable_dependency_tracking" != xno \ && test "$am_cv_CC_dependencies_compiler_type" = gcc3; then am__fastdepCC_TRUE= am__fastdepCC_FALSE='#' else am__fastdepCC_TRUE='#' am__fastdepCC_FALSE= fi # Variables for tags utilities; see am/tags.am if test -z "$CTAGS"; then CTAGS=ctags fi if test -z "$ETAGS"; then ETAGS=etags fi if test -z "$CSCOPE"; then CSCOPE=cscope fi # POSIX will say in a future version that running "rm -f" with no argument # is OK; and we want to be able to make that assumption in our Makefile # recipes. So use an aggressive probe to check that the usage we want is # actually supported "in the wild" to an acceptable degree. # See automake bug#10828. # To make any issue more visible, cause the running configure to be aborted # by default if the 'rm' program in use doesn't match our expectations; the # user can still override this though. if rm -f && rm -fr && rm -rf; then : OK; else cat >&2 <<'END' Oops! Your 'rm' program seems unable to run without file operands specified on the command line, even when the '-f' option is present. This is contrary to the behaviour of most rm programs out there, and not conforming with the upcoming POSIX standard: Please tell bug-automake@gnu.org about your system, including the value of your $PATH and any error possibly output before this message. This can help us improve future automake versions. END if test x"$ACCEPT_INFERIOR_RM_PROGRAM" = x"yes"; then echo 'Configuration will proceed anyway, since you have set the' >&2 echo 'ACCEPT_INFERIOR_RM_PROGRAM variable to "yes"' >&2 echo >&2 else cat >&2 <<'END' Aborting the configuration process, to ensure you take notice of the issue. You can download and install GNU coreutils to get an 'rm' implementation that behaves properly: . If you want to complete the configuration process using your problematic 'rm' anyway, export the environment variable ACCEPT_INFERIOR_RM_PROGRAM to "yes", and re-run configure. END as_fn_error $? "Your 'rm' program is bad, sorry." "$LINENO" 5 fi fi # Check whether --with-pkgconfigdir was given. if test ${with_pkgconfigdir+y} then : withval=$with_pkgconfigdir; else $as_nop with_pkgconfigdir='${libdir}/pkgconfig' fi pkgconfigdir=$with_pkgconfigdir # enable "silent-rules" option by default # Check whether --enable-silent-rules was given. if test ${enable_silent_rules+y} then : enableval=$enable_silent_rules; fi case $enable_silent_rules in # ((( yes) AM_DEFAULT_VERBOSITY=0;; no) AM_DEFAULT_VERBOSITY=1;; *) AM_DEFAULT_VERBOSITY=0;; esac am_make=${MAKE-make} { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5 printf %s "checking whether $am_make supports nested variables... " >&6; } if test ${am_cv_make_support_nested_variables+y} then : printf %s "(cached) " >&6 else $as_nop if printf "%s\n" 'TRUE=$(BAR$(V)) BAR0=false BAR1=true V=1 am__doit: @$(TRUE) .PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then am_cv_make_support_nested_variables=yes else am_cv_make_support_nested_variables=no fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5 printf "%s\n" "$am_cv_make_support_nested_variables" >&6; } if test $am_cv_make_support_nested_variables = yes; then AM_V='$(V)' AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)' else AM_V=$AM_DEFAULT_VERBOSITY AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY fi AM_BACKSLASH='\' # allow to override gcov location # Check whether --with-gcov was given. if test ${with_gcov+y} then : withval=$with_gcov; _AX_CODE_COVERAGE_GCOV_PROG_WITH=$with_gcov else $as_nop _AX_CODE_COVERAGE_GCOV_PROG_WITH=gcov fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether to build with code coverage support" >&5 printf %s "checking whether to build with code coverage support... " >&6; } # Check whether --enable-code-coverage was given. if test ${enable_code_coverage+y} then : enableval=$enable_code_coverage; else $as_nop enable_code_coverage=no fi if test "x$enable_code_coverage" = xyes; then CODE_COVERAGE_ENABLED_TRUE= CODE_COVERAGE_ENABLED_FALSE='#' else CODE_COVERAGE_ENABLED_TRUE='#' CODE_COVERAGE_ENABLED_FALSE= fi CODE_COVERAGE_ENABLED=$enable_code_coverage { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $enable_code_coverage" >&5 printf "%s\n" "$enable_code_coverage" >&6; } if test "x$enable_code_coverage" = xyes then : for ac_prog in gawk mawk nawk awk do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_AWK+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$AWK"; then ac_cv_prog_AWK="$AWK" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_AWK="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi AWK=$ac_cv_prog_AWK if test -n "$AWK"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5 printf "%s\n" "$AWK" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$AWK" && break done { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for GNU make" >&5 printf %s "checking for GNU make... " >&6; } if test ${_cv_gnu_make_command+y} then : printf %s "(cached) " >&6 else $as_nop _cv_gnu_make_command="" ; for a in "$MAKE" make gmake gnumake ; do if test -z "$a" ; then continue ; fi ; if "$a" --version 2> /dev/null | grep GNU 2>&1 > /dev/null ; then _cv_gnu_make_command=$a ; AX_CHECK_GNU_MAKE_HEADLINE=$("$a" --version 2> /dev/null | grep "GNU Make") ax_check_gnu_make_version=$(echo ${AX_CHECK_GNU_MAKE_HEADLINE} | ${AWK} -F " " '{ print $(NF); }') break ; fi done ; fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $_cv_gnu_make_command" >&5 printf "%s\n" "$_cv_gnu_make_command" >&6; } if test "x$_cv_gnu_make_command" = x"" then : ifGNUmake="#" else $as_nop ifGNUmake="" fi if test "x$_cv_gnu_make_command" = x"" then : ifnGNUmake="" else $as_nop ifnGNUmake="#" fi if test "x$_cv_gnu_make_command" = x"" then : { ax_cv_gnu_make_command=; unset ax_cv_gnu_make_command;} else $as_nop ax_cv_gnu_make_command=${_cv_gnu_make_command} fi if test "x$_cv_gnu_make_command" = x"" then : as_fn_error $? "not using GNU make that is needed for coverage" "$LINENO" 5 fi # check for gcov if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}$_AX_CODE_COVERAGE_GCOV_PROG_WITH", so it can be a program name with args. set dummy ${ac_tool_prefix}$_AX_CODE_COVERAGE_GCOV_PROG_WITH; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_GCOV+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$GCOV"; then ac_cv_prog_GCOV="$GCOV" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_GCOV="${ac_tool_prefix}$_AX_CODE_COVERAGE_GCOV_PROG_WITH" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi GCOV=$ac_cv_prog_GCOV if test -n "$GCOV"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $GCOV" >&5 printf "%s\n" "$GCOV" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_prog_GCOV"; then ac_ct_GCOV=$GCOV # Extract the first word of "$_AX_CODE_COVERAGE_GCOV_PROG_WITH", so it can be a program name with args. set dummy $_AX_CODE_COVERAGE_GCOV_PROG_WITH; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ac_ct_GCOV+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ac_ct_GCOV"; then ac_cv_prog_ac_ct_GCOV="$ac_ct_GCOV" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ac_ct_GCOV="$_AX_CODE_COVERAGE_GCOV_PROG_WITH" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi ac_ct_GCOV=$ac_cv_prog_ac_ct_GCOV if test -n "$ac_ct_GCOV"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_GCOV" >&5 printf "%s\n" "$ac_ct_GCOV" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_ct_GCOV" = x; then GCOV=":" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac GCOV=$ac_ct_GCOV fi else GCOV="$ac_cv_prog_GCOV" fi if test "X$GCOV" = "X:" then : as_fn_error $? "gcov is needed to do coverage" "$LINENO" 5 fi if test "$GCC" = "no" then : as_fn_error $? "not compiling with gcc, which is required for gcov code coverage" "$LINENO" 5 fi # Extract the first word of "lcov", so it can be a program name with args. set dummy lcov; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_LCOV+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$LCOV"; then ac_cv_prog_LCOV="$LCOV" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_LCOV="lcov" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi LCOV=$ac_cv_prog_LCOV if test -n "$LCOV"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $LCOV" >&5 printf "%s\n" "$LCOV" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi # Extract the first word of "genhtml", so it can be a program name with args. set dummy genhtml; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_GENHTML+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$GENHTML"; then ac_cv_prog_GENHTML="$GENHTML" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_GENHTML="genhtml" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi GENHTML=$ac_cv_prog_GENHTML if test -n "$GENHTML"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $GENHTML" >&5 printf "%s\n" "$GENHTML" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test x"$LCOV" = x then : as_fn_error $? "To enable code coverage reporting you must have lcov installed" "$LINENO" 5 fi if test x"$GENHTML" = x then : as_fn_error $? "Could not find genhtml from the lcov package" "$LINENO" 5 fi CODE_COVERAGE_CPPFLAGS="-DNDEBUG" CODE_COVERAGE_CFLAGS="-O0 -g -fprofile-arcs -ftest-coverage" CODE_COVERAGE_CXXFLAGS="-O0 -g -fprofile-arcs -ftest-coverage" CODE_COVERAGE_LIBS="-lgcov" fi if true; then AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE= AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE='#' else AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE='#' AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE= fi ac_config_files="$ac_config_files Makefile lib/tpm2-pkcs11.pc" # enable autoheader config.h file ac_config_headers="$ac_config_headers src/lib/config.h" # require sqlite3 and libcrypto if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then if test -n "$ac_tool_prefix"; then # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args. set dummy ${ac_tool_prefix}pkg-config; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_path_PKG_CONFIG+y} then : printf %s "(cached) " >&6 else $as_nop case $PKG_CONFIG in [\\/]* | ?:[\\/]*) ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path. ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_path_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS ;; esac fi PKG_CONFIG=$ac_cv_path_PKG_CONFIG if test -n "$PKG_CONFIG"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5 printf "%s\n" "$PKG_CONFIG" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test -z "$ac_cv_path_PKG_CONFIG"; then ac_pt_PKG_CONFIG=$PKG_CONFIG # Extract the first word of "pkg-config", so it can be a program name with args. set dummy pkg-config; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_path_ac_pt_PKG_CONFIG+y} then : printf %s "(cached) " >&6 else $as_nop case $ac_pt_PKG_CONFIG in [\\/]* | ?:[\\/]*) ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path. ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_path_ac_pt_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS ;; esac fi ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG if test -n "$ac_pt_PKG_CONFIG"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5 printf "%s\n" "$ac_pt_PKG_CONFIG" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ac_pt_PKG_CONFIG" = x; then PKG_CONFIG="" else case $cross_compiling:$ac_tool_warned in yes:) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5 printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;} ac_tool_warned=yes ;; esac PKG_CONFIG=$ac_pt_PKG_CONFIG fi else PKG_CONFIG="$ac_cv_path_PKG_CONFIG" fi fi if test -n "$PKG_CONFIG"; then _pkg_min_version=0.9.0 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5 printf %s "checking pkg-config is at least version $_pkg_min_version... " >&6; } if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } PKG_CONFIG="" fi fi pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for sqlite3" >&5 printf %s "checking for sqlite3... " >&6; } if test -n "$SQLITE3_CFLAGS"; then pkg_cv_SQLITE3_CFLAGS="$SQLITE3_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"sqlite3\""; } >&5 ($PKG_CONFIG --exists --print-errors "sqlite3") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_SQLITE3_CFLAGS=`$PKG_CONFIG --cflags "sqlite3" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$SQLITE3_LIBS"; then pkg_cv_SQLITE3_LIBS="$SQLITE3_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"sqlite3\""; } >&5 ($PKG_CONFIG --exists --print-errors "sqlite3") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_SQLITE3_LIBS=`$PKG_CONFIG --libs "sqlite3" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then SQLITE3_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "sqlite3" 2>&1` else SQLITE3_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "sqlite3" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$SQLITE3_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (sqlite3) were not met: $SQLITE3_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables SQLITE3_CFLAGS and SQLITE3_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables SQLITE3_CFLAGS and SQLITE3_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else SQLITE3_CFLAGS=$pkg_cv_SQLITE3_CFLAGS SQLITE3_LIBS=$pkg_cv_SQLITE3_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for yaml-0.1" >&5 printf %s "checking for yaml-0.1... " >&6; } if test -n "$YAML_CFLAGS"; then pkg_cv_YAML_CFLAGS="$YAML_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"yaml-0.1\""; } >&5 ($PKG_CONFIG --exists --print-errors "yaml-0.1") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_YAML_CFLAGS=`$PKG_CONFIG --cflags "yaml-0.1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$YAML_LIBS"; then pkg_cv_YAML_LIBS="$YAML_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"yaml-0.1\""; } >&5 ($PKG_CONFIG --exists --print-errors "yaml-0.1") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_YAML_LIBS=`$PKG_CONFIG --libs "yaml-0.1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then YAML_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "yaml-0.1" 2>&1` else YAML_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "yaml-0.1" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$YAML_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (yaml-0.1) were not met: $YAML_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables YAML_CFLAGS and YAML_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables YAML_CFLAGS and YAML_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else YAML_CFLAGS=$pkg_cv_YAML_CFLAGS YAML_LIBS=$pkg_cv_YAML_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for libcrypto >= 1.1.0" >&5 printf %s "checking for libcrypto >= 1.1.0... " >&6; } if test -n "$CRYPTO_CFLAGS"; then pkg_cv_CRYPTO_CFLAGS="$CRYPTO_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libcrypto >= 1.1.0\""; } >&5 ($PKG_CONFIG --exists --print-errors "libcrypto >= 1.1.0") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_CRYPTO_CFLAGS=`$PKG_CONFIG --cflags "libcrypto >= 1.1.0" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$CRYPTO_LIBS"; then pkg_cv_CRYPTO_LIBS="$CRYPTO_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libcrypto >= 1.1.0\""; } >&5 ($PKG_CONFIG --exists --print-errors "libcrypto >= 1.1.0") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_CRYPTO_LIBS=`$PKG_CONFIG --libs "libcrypto >= 1.1.0" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then CRYPTO_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "libcrypto >= 1.1.0" 2>&1` else CRYPTO_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "libcrypto >= 1.1.0" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$CRYPTO_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (libcrypto >= 1.1.0) were not met: $CRYPTO_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables CRYPTO_CFLAGS and CRYPTO_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables CRYPTO_CFLAGS and CRYPTO_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else CRYPTO_CFLAGS=$pkg_cv_CRYPTO_CFLAGS CRYPTO_LIBS=$pkg_cv_CRYPTO_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libcrypto >= 3.0\""; } >&5 ($PKG_CONFIG --exists --print-errors "libcrypto >= 3.0") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then have_ossl3=yes else have_ossl3=no fi if test "x$have_ossl3" = "xyes"; then HAVE_OSSL3_TRUE= HAVE_OSSL3_FALSE='#' else HAVE_OSSL3_TRUE='#' HAVE_OSSL3_FALSE= fi # # With OSSL3 we need 3.2 of tpm2-tss to avoid bugs in test code # plus that tpm2-tss works with OSSL3. # if test "x$have_ossl3" = "xyes" then : pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for tss2-esys >= 3.2" >&5 printf %s "checking for tss2-esys >= 3.2... " >&6; } if test -n "$TSS2_ESYS_CFLAGS"; then pkg_cv_TSS2_ESYS_CFLAGS="$TSS2_ESYS_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-esys >= 3.2\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-esys >= 3.2") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_ESYS_CFLAGS=`$PKG_CONFIG --cflags "tss2-esys >= 3.2" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_ESYS_LIBS"; then pkg_cv_TSS2_ESYS_LIBS="$TSS2_ESYS_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-esys >= 3.2\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-esys >= 3.2") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_ESYS_LIBS=`$PKG_CONFIG --libs "tss2-esys >= 3.2" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_ESYS_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-esys >= 3.2" 2>&1` else TSS2_ESYS_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-esys >= 3.2" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_ESYS_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-esys >= 3.2) were not met: $TSS2_ESYS_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_ESYS_CFLAGS and TSS2_ESYS_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_ESYS_CFLAGS and TSS2_ESYS_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_ESYS_CFLAGS=$pkg_cv_TSS2_ESYS_CFLAGS TSS2_ESYS_LIBS=$pkg_cv_TSS2_ESYS_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi elif pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for tss2-esys >= 2.0" >&5 printf %s "checking for tss2-esys >= 2.0... " >&6; } if test -n "$TSS2_ESYS_CFLAGS"; then pkg_cv_TSS2_ESYS_CFLAGS="$TSS2_ESYS_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-esys >= 2.0\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-esys >= 2.0") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_ESYS_CFLAGS=`$PKG_CONFIG --cflags "tss2-esys >= 2.0" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_ESYS_LIBS"; then pkg_cv_TSS2_ESYS_LIBS="$TSS2_ESYS_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-esys >= 2.0\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-esys >= 2.0") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_ESYS_LIBS=`$PKG_CONFIG --libs "tss2-esys >= 2.0" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_ESYS_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-esys >= 2.0" 2>&1` else TSS2_ESYS_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-esys >= 2.0" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_ESYS_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-esys >= 2.0) were not met: $TSS2_ESYS_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_ESYS_CFLAGS and TSS2_ESYS_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_ESYS_CFLAGS and TSS2_ESYS_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_ESYS_CFLAGS=$pkg_cv_TSS2_ESYS_CFLAGS TSS2_ESYS_LIBS=$pkg_cv_TSS2_ESYS_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi then : fi # test for non version specific TSS dependencies pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for tss2-mu" >&5 printf %s "checking for tss2-mu... " >&6; } if test -n "$TSS2_MU_CFLAGS"; then pkg_cv_TSS2_MU_CFLAGS="$TSS2_MU_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-mu\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-mu") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_MU_CFLAGS=`$PKG_CONFIG --cflags "tss2-mu" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_MU_LIBS"; then pkg_cv_TSS2_MU_LIBS="$TSS2_MU_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-mu\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-mu") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_MU_LIBS=`$PKG_CONFIG --libs "tss2-mu" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_MU_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-mu" 2>&1` else TSS2_MU_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-mu" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_MU_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-mu) were not met: $TSS2_MU_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_MU_CFLAGS and TSS2_MU_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_MU_CFLAGS and TSS2_MU_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_MU_CFLAGS=$pkg_cv_TSS2_MU_CFLAGS TSS2_MU_LIBS=$pkg_cv_TSS2_MU_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for tss2-tctildr" >&5 printf %s "checking for tss2-tctildr... " >&6; } if test -n "$TSS2_TCTILDR_CFLAGS"; then pkg_cv_TSS2_TCTILDR_CFLAGS="$TSS2_TCTILDR_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-tctildr\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-tctildr") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_TCTILDR_CFLAGS=`$PKG_CONFIG --cflags "tss2-tctildr" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_TCTILDR_LIBS"; then pkg_cv_TSS2_TCTILDR_LIBS="$TSS2_TCTILDR_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-tctildr\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-tctildr") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_TCTILDR_LIBS=`$PKG_CONFIG --libs "tss2-tctildr" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_TCTILDR_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-tctildr" 2>&1` else TSS2_TCTILDR_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-tctildr" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_TCTILDR_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-tctildr) were not met: $TSS2_TCTILDR_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_TCTILDR_CFLAGS and TSS2_TCTILDR_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_TCTILDR_CFLAGS and TSS2_TCTILDR_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_TCTILDR_CFLAGS=$pkg_cv_TSS2_TCTILDR_CFLAGS TSS2_TCTILDR_LIBS=$pkg_cv_TSS2_TCTILDR_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for tss2-rc" >&5 printf %s "checking for tss2-rc... " >&6; } if test -n "$TSS2_RC_CFLAGS"; then pkg_cv_TSS2_RC_CFLAGS="$TSS2_RC_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-rc\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-rc") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_RC_CFLAGS=`$PKG_CONFIG --cflags "tss2-rc" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_RC_LIBS"; then pkg_cv_TSS2_RC_LIBS="$TSS2_RC_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-rc\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-rc") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_RC_LIBS=`$PKG_CONFIG --libs "tss2-rc" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_RC_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-rc" 2>&1` else TSS2_RC_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-rc" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_RC_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-rc) were not met: $TSS2_RC_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_RC_CFLAGS and TSS2_RC_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_RC_CFLAGS and TSS2_RC_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_RC_CFLAGS=$pkg_cv_TSS2_RC_CFLAGS TSS2_RC_LIBS=$pkg_cv_TSS2_RC_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi # Macro that checks for existence of a python module # Check whether --enable-ptool-checks was given. if test ${enable_ptool_checks+y} then : enableval=$enable_ptool_checks; do_pycheck=no else $as_nop do_pycheck=yes fi # for tpm2_ptool to work if test "$do_pycheck" == "yes" then : if test -n "$PYTHON"; then # If the user set $PYTHON, use it and don't search something else. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $PYTHON version is >= 3.7" >&5 printf %s "checking whether $PYTHON version is >= 3.7... " >&6; } prog="import sys # split strings by '.' and convert to numeric. Append some zeros # because we need at least 4 digits for the hex conversion. # map returns an iterator in Python 3.0 and a list in 2.x minver = list(map(int, '3.7'.split('.'))) + [0, 0, 0] minverhex = 0 # xrange is not present in Python 3.0 and range returns an iterator for i in list(range(0, 4)): minverhex = (minverhex << 8) + minver[i] sys.exit(sys.hexversion < minverhex)" if { echo "$as_me:$LINENO: $PYTHON -c "$prog"" >&5 ($PYTHON -c "$prog") >&5 2>&5 ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&5 (exit $ac_status); } then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } as_fn_error $? "Python interpreter is too old" "$LINENO" 5 fi am_display_PYTHON=$PYTHON else # Otherwise, try each interpreter until we find one that satisfies # VERSION. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for a Python interpreter with version >= 3.7" >&5 printf %s "checking for a Python interpreter with version >= 3.7... " >&6; } if test ${am_cv_pathless_PYTHON+y} then : printf %s "(cached) " >&6 else $as_nop for am_cv_pathless_PYTHON in python python2 python3 python3.9 python3.8 python3.7 python3.6 python3.5 python3.4 python3.3 python3.2 python3.1 python3.0 python2.7 python2.6 python2.5 python2.4 python2.3 python2.2 python2.1 python2.0 none; do test "$am_cv_pathless_PYTHON" = none && break prog="import sys # split strings by '.' and convert to numeric. Append some zeros # because we need at least 4 digits for the hex conversion. # map returns an iterator in Python 3.0 and a list in 2.x minver = list(map(int, '3.7'.split('.'))) + [0, 0, 0] minverhex = 0 # xrange is not present in Python 3.0 and range returns an iterator for i in list(range(0, 4)): minverhex = (minverhex << 8) + minver[i] sys.exit(sys.hexversion < minverhex)" if { echo "$as_me:$LINENO: $am_cv_pathless_PYTHON -c "$prog"" >&5 ($am_cv_pathless_PYTHON -c "$prog") >&5 2>&5 ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&5 (exit $ac_status); } then : break fi done fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_pathless_PYTHON" >&5 printf "%s\n" "$am_cv_pathless_PYTHON" >&6; } # Set $PYTHON to the absolute path of $am_cv_pathless_PYTHON. if test "$am_cv_pathless_PYTHON" = none; then PYTHON=: else # Extract the first word of "$am_cv_pathless_PYTHON", so it can be a program name with args. set dummy $am_cv_pathless_PYTHON; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_path_PYTHON+y} then : printf %s "(cached) " >&6 else $as_nop case $PYTHON in [\\/]* | ?:[\\/]*) ac_cv_path_PYTHON="$PYTHON" # Let the user override the test with a path. ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_path_PYTHON="$as_dir$ac_word$ac_exec_ext" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS ;; esac fi PYTHON=$ac_cv_path_PYTHON if test -n "$PYTHON"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $PYTHON" >&5 printf "%s\n" "$PYTHON" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi am_display_PYTHON=$am_cv_pathless_PYTHON fi if test "$PYTHON" = :; then as_fn_error $? "Integration tests enabled but python >= 3.7 executable not found." "$LINENO" 5 else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $am_display_PYTHON version" >&5 printf %s "checking for $am_display_PYTHON version... " >&6; } if test ${am_cv_python_version+y} then : printf %s "(cached) " >&6 else $as_nop am_cv_python_version=`$PYTHON -c "import sys; print ('%u.%u' % sys.version_info[:2])"` fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_version" >&5 printf "%s\n" "$am_cv_python_version" >&6; } PYTHON_VERSION=$am_cv_python_version { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $am_display_PYTHON platform" >&5 printf %s "checking for $am_display_PYTHON platform... " >&6; } if test ${am_cv_python_platform+y} then : printf %s "(cached) " >&6 else $as_nop am_cv_python_platform=`$PYTHON -c "import sys; sys.stdout.write(sys.platform)"` fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_platform" >&5 printf "%s\n" "$am_cv_python_platform" >&6; } PYTHON_PLATFORM=$am_cv_python_platform if test "x$prefix" = xNONE; then am__usable_prefix=$ac_default_prefix else am__usable_prefix=$prefix fi # Allow user to request using sys.* values from Python, # instead of the GNU $prefix values. # Check whether --with-python-sys-prefix was given. if test ${with_python_sys_prefix+y} then : withval=$with_python_sys_prefix; am_use_python_sys=: else $as_nop am_use_python_sys=false fi # Allow user to override whatever the default Python prefix is. # Check whether --with-python_prefix was given. if test ${with_python_prefix+y} then : withval=$with_python_prefix; am_python_prefix_subst=$withval am_cv_python_prefix=$withval { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for explicit $am_display_PYTHON prefix" >&5 printf %s "checking for explicit $am_display_PYTHON prefix... " >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_prefix" >&5 printf "%s\n" "$am_cv_python_prefix" >&6; } else $as_nop if $am_use_python_sys; then # using python sys.prefix value, not GNU { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for python default $am_display_PYTHON prefix" >&5 printf %s "checking for python default $am_display_PYTHON prefix... " >&6; } if test ${am_cv_python_prefix+y} then : printf %s "(cached) " >&6 else $as_nop am_cv_python_prefix=`$PYTHON -c "import sys; sys.stdout.write(sys.prefix)"` fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_prefix" >&5 printf "%s\n" "$am_cv_python_prefix" >&6; } case $am_cv_python_prefix in $am__usable_prefix*) am__strip_prefix=`echo "$am__usable_prefix" | sed 's|.|.|g'` am_python_prefix_subst=`echo "$am_cv_python_prefix" | sed "s,^$am__strip_prefix,\\${prefix},"` ;; *) am_python_prefix_subst=$am_cv_python_prefix ;; esac else # using GNU prefix value, not python sys.prefix am_python_prefix_subst='${prefix}' am_python_prefix=$am_python_prefix_subst { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for GNU default $am_display_PYTHON prefix" >&5 printf %s "checking for GNU default $am_display_PYTHON prefix... " >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_python_prefix" >&5 printf "%s\n" "$am_python_prefix" >&6; } fi fi # Substituting python_prefix_subst value. PYTHON_PREFIX=$am_python_prefix_subst # emacs-page Now do it all over again for Python exec_prefix, but with yet # another conditional: fall back to regular prefix if that was specified. # Check whether --with-python_exec_prefix was given. if test ${with_python_exec_prefix+y} then : withval=$with_python_exec_prefix; am_python_exec_prefix_subst=$withval am_cv_python_exec_prefix=$withval { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for explicit $am_display_PYTHON exec_prefix" >&5 printf %s "checking for explicit $am_display_PYTHON exec_prefix... " >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_exec_prefix" >&5 printf "%s\n" "$am_cv_python_exec_prefix" >&6; } else $as_nop # no explicit --with-python_exec_prefix, but if # --with-python_prefix was given, use its value for python_exec_prefix too. if test -n "$with_python_prefix" then : am_python_exec_prefix_subst=$with_python_prefix am_cv_python_exec_prefix=$with_python_prefix { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for python_prefix-given $am_display_PYTHON exec_prefix" >&5 printf %s "checking for python_prefix-given $am_display_PYTHON exec_prefix... " >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_exec_prefix" >&5 printf "%s\n" "$am_cv_python_exec_prefix" >&6; } else $as_nop # Set am__usable_exec_prefix whether using GNU or Python values, # since we use that variable for pyexecdir. if test "x$exec_prefix" = xNONE; then am__usable_exec_prefix=$am__usable_prefix else am__usable_exec_prefix=$exec_prefix fi # if $am_use_python_sys; then # using python sys.exec_prefix, not GNU { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for python default $am_display_PYTHON exec_prefix" >&5 printf %s "checking for python default $am_display_PYTHON exec_prefix... " >&6; } if test ${am_cv_python_exec_prefix+y} then : printf %s "(cached) " >&6 else $as_nop am_cv_python_exec_prefix=`$PYTHON -c "import sys; sys.stdout.write(sys.exec_prefix)"` fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_exec_prefix" >&5 printf "%s\n" "$am_cv_python_exec_prefix" >&6; } case $am_cv_python_exec_prefix in $am__usable_exec_prefix*) am__strip_prefix=`echo "$am__usable_exec_prefix" | sed 's|.|.|g'` am_python_exec_prefix_subst=`echo "$am_cv_python_exec_prefix" | sed "s,^$am__strip_prefix,\\${exec_prefix},"` ;; *) am_python_exec_prefix_subst=$am_cv_python_exec_prefix ;; esac else # using GNU $exec_prefix, not python sys.exec_prefix am_python_exec_prefix_subst='${exec_prefix}' am_python_exec_prefix=$am_python_exec_prefix_subst { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for GNU default $am_display_PYTHON exec_prefix" >&5 printf %s "checking for GNU default $am_display_PYTHON exec_prefix... " >&6; } { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_python_exec_prefix" >&5 printf "%s\n" "$am_python_exec_prefix" >&6; } fi fi fi # Substituting python_exec_prefix_subst. PYTHON_EXEC_PREFIX=$am_python_exec_prefix_subst # Factor out some code duplication into this shell variable. am_python_setup_sysconfig="\ import sys # Prefer sysconfig over distutils.sysconfig, for better compatibility # with python 3.x. See automake bug#10227. try: import sysconfig except ImportError: can_use_sysconfig = 0 else: can_use_sysconfig = 1 # Can't use sysconfig in CPython 2.7, since it's broken in virtualenvs: # try: from platform import python_implementation if python_implementation() == 'CPython' and sys.version[:3] == '2.7': can_use_sysconfig = 0 except ImportError: pass" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $am_display_PYTHON script directory (pythondir)" >&5 printf %s "checking for $am_display_PYTHON script directory (pythondir)... " >&6; } if test ${am_cv_python_pythondir+y} then : printf %s "(cached) " >&6 else $as_nop if test "x$am_cv_python_prefix" = x; then am_py_prefix=$am__usable_prefix else am_py_prefix=$am_cv_python_prefix fi am_cv_python_pythondir=`$PYTHON -c " $am_python_setup_sysconfig if can_use_sysconfig: sitedir = sysconfig.get_path('purelib', vars={'base':'$am_py_prefix'}) else: from distutils import sysconfig sitedir = sysconfig.get_python_lib(0, 0, prefix='$am_py_prefix') sys.stdout.write(sitedir)"` # case $am_cv_python_pythondir in $am_py_prefix*) am__strip_prefix=`echo "$am_py_prefix" | sed 's|.|.|g'` am_cv_python_pythondir=`echo "$am_cv_python_pythondir" | sed "s,^$am__strip_prefix,\\${PYTHON_PREFIX},"` ;; *) case $am_py_prefix in /usr|/System*) ;; *) am_cv_python_pythondir="\${PYTHON_PREFIX}/lib/python$PYTHON_VERSION/site-packages" ;; esac ;; esac fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_pythondir" >&5 printf "%s\n" "$am_cv_python_pythondir" >&6; } pythondir=$am_cv_python_pythondir pkgpythondir=\${pythondir}/$PACKAGE { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $am_display_PYTHON extension module directory (pyexecdir)" >&5 printf %s "checking for $am_display_PYTHON extension module directory (pyexecdir)... " >&6; } if test ${am_cv_python_pyexecdir+y} then : printf %s "(cached) " >&6 else $as_nop if test "x$am_cv_python_exec_prefix" = x; then am_py_exec_prefix=$am__usable_exec_prefix else am_py_exec_prefix=$am_cv_python_exec_prefix fi am_cv_python_pyexecdir=`$PYTHON -c " $am_python_setup_sysconfig if can_use_sysconfig: sitedir = sysconfig.get_path('platlib', vars={'platbase':'$am_py_exec_prefix'}) else: from distutils import sysconfig sitedir = sysconfig.get_python_lib(1, 0, prefix='$am_py_exec_prefix') sys.stdout.write(sitedir)"` # case $am_cv_python_pyexecdir in $am_py_exec_prefix*) am__strip_prefix=`echo "$am_py_exec_prefix" | sed 's|.|.|g'` am_cv_python_pyexecdir=`echo "$am_cv_python_pyexecdir" | sed "s,^$am__strip_prefix,\\${PYTHON_EXEC_PREFIX},"` ;; *) case $am_py_exec_prefix in /usr|/System*) ;; *) am_cv_python_pyexecdir="\${PYTHON_EXEC_PREFIX}/lib/python$PYTHON_VERSION/site-packages" ;; esac ;; esac fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_python_pyexecdir" >&5 printf "%s\n" "$am_cv_python_pyexecdir" >&6; } pyexecdir=$am_cv_python_pyexecdir pkgpyexecdir=\${pyexecdir}/$PACKAGE PYTHON_INTERPRETER=$PYTHON fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for module pyasn1_modules in python" >&5 printf %s "checking for module pyasn1_modules in python... " >&6; } echo "import pyasn1_modules" | $PYTHON - 2>/dev/null if test $? -ne 0 ; then as_fn_error $? "not found" "$LINENO" 5 else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: found" >&5 printf "%s\n" "found" >&6; } fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for module pyasn1 in python" >&5 printf %s "checking for module pyasn1 in python... " >&6; } echo "import pyasn1" | $PYTHON - 2>/dev/null if test $? -ne 0 ; then as_fn_error $? "not found" "$LINENO" 5 else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: found" >&5 printf "%s\n" "found" >&6; } fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for module cryptography in python" >&5 printf %s "checking for module cryptography in python... " >&6; } echo "import cryptography" | $PYTHON - 2>/dev/null if test $? -ne 0 ; then as_fn_error $? "not found" "$LINENO" 5 else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: found" >&5 printf "%s\n" "found" >&6; } fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for module yaml in python" >&5 printf %s "checking for module yaml in python... " >&6; } echo "import yaml" | $PYTHON - 2>/dev/null if test $? -ne 0 ; then as_fn_error $? "not found" "$LINENO" 5 else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: found" >&5 printf "%s\n" "found" >&6; } fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for module tpm2_pytss in python" >&5 printf %s "checking for module tpm2_pytss in python... " >&6; } echo "import tpm2_pytss" | $PYTHON - 2>/dev/null if test $? -ne 0 ; then as_fn_error $? "not found" "$LINENO" 5 else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: found" >&5 printf "%s\n" "found" >&6; } fi fi # Check for ESYS version below 2.2.1 which requires us to manage ESYS session flags if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-esys < 2.2.1\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-esys < 2.2.1") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then printf "%s\n" "#define ESAPI_MANAGE_FLAGS 1" >>confdefs.h fi # ESYS >= 3.0 uses a different ABI param hierarchy in Esys_LoadExternal() if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-esys >= 3.0\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-esys >= 3.0") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then printf "%s\n" "#define ESYS_3 1" >>confdefs.h fi # check for pthread ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5 printf %s "checking how to run the C preprocessor... " >&6; } # On Suns, sometimes $CPP names a directory. if test -n "$CPP" && test -d "$CPP"; then CPP= fi if test -z "$CPP"; then if test ${ac_cv_prog_CPP+y} then : printf %s "(cached) " >&6 else $as_nop # Double quotes because $CC needs to be expanded for CPP in "$CC -E" "$CC -E -traditional-cpp" cpp /lib/cpp do ac_preproc_ok=false for ac_c_preproc_warn_flag in '' yes do # Use a header file that comes with gcc, so configuring glibc # with a fresh cross-compiler works. # On the NeXT, cc -E runs the code through the compiler's parser, # not just through cpp. "Syntax error" is here to catch this case. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include Syntax error _ACEOF if ac_fn_c_try_cpp "$LINENO" then : else $as_nop # Broken: fails on valid input. continue fi rm -f conftest.err conftest.i conftest.$ac_ext # OK, works on sane cases. Now check whether nonexistent headers # can be detected and how. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if ac_fn_c_try_cpp "$LINENO" then : # Broken: success on invalid input. continue else $as_nop # Passes both tests. ac_preproc_ok=: break fi rm -f conftest.err conftest.i conftest.$ac_ext done # Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped. rm -f conftest.i conftest.err conftest.$ac_ext if $ac_preproc_ok then : break fi done ac_cv_prog_CPP=$CPP fi CPP=$ac_cv_prog_CPP else ac_cv_prog_CPP=$CPP fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5 printf "%s\n" "$CPP" >&6; } ac_preproc_ok=false for ac_c_preproc_warn_flag in '' yes do # Use a header file that comes with gcc, so configuring glibc # with a fresh cross-compiler works. # On the NeXT, cc -E runs the code through the compiler's parser, # not just through cpp. "Syntax error" is here to catch this case. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include Syntax error _ACEOF if ac_fn_c_try_cpp "$LINENO" then : else $as_nop # Broken: fails on valid input. continue fi rm -f conftest.err conftest.i conftest.$ac_ext # OK, works on sane cases. Now check whether nonexistent headers # can be detected and how. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include _ACEOF if ac_fn_c_try_cpp "$LINENO" then : # Broken: success on invalid input. continue else $as_nop # Passes both tests. ac_preproc_ok=: break fi rm -f conftest.err conftest.i conftest.$ac_ext done # Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped. rm -f conftest.i conftest.err conftest.$ac_ext if $ac_preproc_ok then : else $as_nop { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "C preprocessor \"$CPP\" fails sanity check See \`config.log' for more details" "$LINENO" 5; } fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu ax_pthread_ok=no # We used to check for pthread.h first, but this fails if pthread.h # requires special compiler flags (e.g. on Tru64 or Sequent). # It gets checked for in the link test anyway. # First of all, check if the user has set any of the PTHREAD_LIBS, # etcetera environment variables, and if threads linking works using # them: if test "x$PTHREAD_CFLAGS$PTHREAD_LIBS" != "x"; then ax_pthread_save_CC="$CC" ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" if test "x$PTHREAD_CC" != "x" then : CC="$PTHREAD_CC" fi if test "x$PTHREAD_CXX" != "x" then : CXX="$PTHREAD_CXX" fi CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS" >&5 printf %s "checking for pthread_join using $CC $PTHREAD_CFLAGS $PTHREAD_LIBS... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Override any GCC internal prototype to avoid an error. Use char because int might match the return type of a GCC builtin and then its argument prototype would still apply. */ char pthread_join (); int main (void) { return pthread_join (); ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ax_pthread_ok=yes fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_pthread_ok" >&5 printf "%s\n" "$ax_pthread_ok" >&6; } if test "x$ax_pthread_ok" = "xno"; then PTHREAD_LIBS="" PTHREAD_CFLAGS="" fi CC="$ax_pthread_save_CC" CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" fi # We must check for the threads library under a number of different # names; the ordering is very important because some systems # (e.g. DEC) have both -lpthread and -lpthreads, where one of the # libraries is broken (non-POSIX). # Create a list of thread flags to try. Items with a "," contain both # C compiler flags (before ",") and linker flags (after ","). Other items # starting with a "-" are C compiler flags, and remaining items are # library names, except for "none" which indicates that we try without # any flags at all, and "pthread-config" which is a program returning # the flags for the Pth emulation library. ax_pthread_flags="pthreads none -Kthread -pthread -pthreads -mthreads pthread --thread-safe -mt pthread-config" # The ordering *is* (sometimes) important. Some notes on the # individual items follow: # pthreads: AIX (must check this before -lpthread) # none: in case threads are in libc; should be tried before -Kthread and # other compiler flags to prevent continual compiler warnings # -Kthread: Sequent (threads in libc, but -Kthread needed for pthread.h) # -pthread: Linux/gcc (kernel threads), BSD/gcc (userland threads), Tru64 # (Note: HP C rejects this with "bad form for `-t' option") # -pthreads: Solaris/gcc (Note: HP C also rejects) # -mt: Sun Workshop C (may only link SunOS threads [-lthread], but it # doesn't hurt to check since this sometimes defines pthreads and # -D_REENTRANT too), HP C (must be checked before -lpthread, which # is present but should not be used directly; and before -mthreads, # because the compiler interprets this as "-mt" + "-hreads") # -mthreads: Mingw32/gcc, Lynx/gcc # pthread: Linux, etcetera # --thread-safe: KAI C++ # pthread-config: use pthread-config program (for GNU Pth library) case $host_os in freebsd*) # -kthread: FreeBSD kernel threads (preferred to -pthread since SMP-able) # lthread: LinuxThreads port on FreeBSD (also preferred to -pthread) ax_pthread_flags="-kthread lthread $ax_pthread_flags" ;; hpux*) # From the cc(1) man page: "[-mt] Sets various -D flags to enable # multi-threading and also sets -lpthread." ax_pthread_flags="-mt -pthread pthread $ax_pthread_flags" ;; openedition*) # IBM z/OS requires a feature-test macro to be defined in order to # enable POSIX threads at all, so give the user a hint if this is # not set. (We don't define these ourselves, as they can affect # other portions of the system API in unpredictable ways.) cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ # if !defined(_OPEN_THREADS) && !defined(_UNIX03_THREADS) AX_PTHREAD_ZOS_MISSING # endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "AX_PTHREAD_ZOS_MISSING" >/dev/null 2>&1 then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: IBM z/OS requires -D_OPEN_THREADS or -D_UNIX03_THREADS to enable pthreads support." >&5 printf "%s\n" "$as_me: WARNING: IBM z/OS requires -D_OPEN_THREADS or -D_UNIX03_THREADS to enable pthreads support." >&2;} fi rm -rf conftest* ;; solaris*) # On Solaris (at least, for some versions), libc contains stubbed # (non-functional) versions of the pthreads routines, so link-based # tests will erroneously succeed. (N.B.: The stubs are missing # pthread_cleanup_push, or rather a function called by this macro, # so we could check for that, but who knows whether they'll stub # that too in a future libc.) So we'll check first for the # standard Solaris way of linking pthreads (-mt -lpthread). ax_pthread_flags="-mt,-lpthread pthread $ax_pthread_flags" ;; esac # Are we compiling with Clang? { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $CC is Clang" >&5 printf %s "checking whether $CC is Clang... " >&6; } if test ${ax_cv_PTHREAD_CLANG+y} then : printf %s "(cached) " >&6 else $as_nop ax_cv_PTHREAD_CLANG=no # Note that Autoconf sets GCC=yes for Clang as well as GCC if test "x$GCC" = "xyes"; then cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ /* Note: Clang 2.7 lacks __clang_[a-z]+__ */ # if defined(__clang__) && defined(__llvm__) AX_PTHREAD_CC_IS_CLANG # endif _ACEOF if (eval "$ac_cpp conftest.$ac_ext") 2>&5 | $EGREP "AX_PTHREAD_CC_IS_CLANG" >/dev/null 2>&1 then : ax_cv_PTHREAD_CLANG=yes fi rm -rf conftest* fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_CLANG" >&5 printf "%s\n" "$ax_cv_PTHREAD_CLANG" >&6; } ax_pthread_clang="$ax_cv_PTHREAD_CLANG" # GCC generally uses -pthread, or -pthreads on some platforms (e.g. SPARC) # Note that for GCC and Clang -pthread generally implies -lpthread, # except when -nostdlib is passed. # This is problematic using libtool to build C++ shared libraries with pthread: # [1] https://gcc.gnu.org/bugzilla/show_bug.cgi?id=25460 # [2] https://bugzilla.redhat.com/show_bug.cgi?id=661333 # [3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468555 # To solve this, first try -pthread together with -lpthread for GCC if test "x$GCC" = "xyes" then : ax_pthread_flags="-pthread,-lpthread -pthread -pthreads $ax_pthread_flags" fi # Clang takes -pthread (never supported any other flag), but we'll try with -lpthread first if test "x$ax_pthread_clang" = "xyes" then : ax_pthread_flags="-pthread,-lpthread -pthread" fi # The presence of a feature test macro requesting re-entrant function # definitions is, on some systems, a strong hint that pthreads support is # correctly enabled case $host_os in darwin* | hpux* | linux* | osf* | solaris*) ax_pthread_check_macro="_REENTRANT" ;; aix*) ax_pthread_check_macro="_THREAD_SAFE" ;; *) ax_pthread_check_macro="--" ;; esac if test "x$ax_pthread_check_macro" = "x--" then : ax_pthread_check_cond=0 else $as_nop ax_pthread_check_cond="!defined($ax_pthread_check_macro)" fi if test "x$ax_pthread_ok" = "xno"; then for ax_pthread_try_flag in $ax_pthread_flags; do case $ax_pthread_try_flag in none) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether pthreads work without any flags" >&5 printf %s "checking whether pthreads work without any flags... " >&6; } ;; *,*) PTHREAD_CFLAGS=`echo $ax_pthread_try_flag | sed "s/^\(.*\),\(.*\)$/\1/"` PTHREAD_LIBS=`echo $ax_pthread_try_flag | sed "s/^\(.*\),\(.*\)$/\2/"` { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether pthreads work with \"$PTHREAD_CFLAGS\" and \"$PTHREAD_LIBS\"" >&5 printf %s "checking whether pthreads work with \"$PTHREAD_CFLAGS\" and \"$PTHREAD_LIBS\"... " >&6; } ;; -*) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether pthreads work with $ax_pthread_try_flag" >&5 printf %s "checking whether pthreads work with $ax_pthread_try_flag... " >&6; } PTHREAD_CFLAGS="$ax_pthread_try_flag" ;; pthread-config) # Extract the first word of "pthread-config", so it can be a program name with args. set dummy pthread-config; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ax_pthread_config+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ax_pthread_config"; then ac_cv_prog_ax_pthread_config="$ax_pthread_config" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ax_pthread_config="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_ax_pthread_config" && ac_cv_prog_ax_pthread_config="no" fi fi ax_pthread_config=$ac_cv_prog_ax_pthread_config if test -n "$ax_pthread_config"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_pthread_config" >&5 printf "%s\n" "$ax_pthread_config" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ax_pthread_config" = "xno" then : continue fi PTHREAD_CFLAGS="`pthread-config --cflags`" PTHREAD_LIBS="`pthread-config --ldflags` `pthread-config --libs`" ;; *) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for the pthreads library -l$ax_pthread_try_flag" >&5 printf %s "checking for the pthreads library -l$ax_pthread_try_flag... " >&6; } PTHREAD_LIBS="-l$ax_pthread_try_flag" ;; esac ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" # Check for various functions. We must include pthread.h, # since some functions may be macros. (On the Sequent, we # need a special flag -Kthread to make this header compile.) # We check for pthread_join because it is in -lpthread on IRIX # while pthread_create is in libc. We check for pthread_attr_init # due to DEC craziness with -lpthreads. We check for # pthread_cleanup_push because it is one of the few pthread # functions on Solaris that doesn't have a non-functional libc stub. # We try pthread_create on general principles. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include # if $ax_pthread_check_cond # error "$ax_pthread_check_macro must be defined" # endif static void *some_global = NULL; static void routine(void *a) { /* To avoid any unused-parameter or unused-but-set-parameter warning. */ some_global = a; } static void *start_routine(void *a) { return a; } int main (void) { pthread_t th; pthread_attr_t attr; pthread_create(&th, 0, start_routine, 0); pthread_join(th, 0); pthread_attr_init(&attr); pthread_cleanup_push(routine, 0); pthread_cleanup_pop(0) /* ; */ ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ax_pthread_ok=yes fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_pthread_ok" >&5 printf "%s\n" "$ax_pthread_ok" >&6; } if test "x$ax_pthread_ok" = "xyes" then : break fi PTHREAD_LIBS="" PTHREAD_CFLAGS="" done fi # Clang needs special handling, because older versions handle the -pthread # option in a rather... idiosyncratic way if test "x$ax_pthread_clang" = "xyes"; then # Clang takes -pthread; it has never supported any other flag # (Note 1: This will need to be revisited if a system that Clang # supports has POSIX threads in a separate library. This tends not # to be the way of modern systems, but it's conceivable.) # (Note 2: On some systems, notably Darwin, -pthread is not needed # to get POSIX threads support; the API is always present and # active. We could reasonably leave PTHREAD_CFLAGS empty. But # -pthread does define _REENTRANT, and while the Darwin headers # ignore this macro, third-party headers might not.) # However, older versions of Clang make a point of warning the user # that, in an invocation where only linking and no compilation is # taking place, the -pthread option has no effect ("argument unused # during compilation"). They expect -pthread to be passed in only # when source code is being compiled. # # Problem is, this is at odds with the way Automake and most other # C build frameworks function, which is that the same flags used in # compilation (CFLAGS) are also used in linking. Many systems # supported by AX_PTHREAD require exactly this for POSIX threads # support, and in fact it is often not straightforward to specify a # flag that is used only in the compilation phase and not in # linking. Such a scenario is extremely rare in practice. # # Even though use of the -pthread flag in linking would only print # a warning, this can be a nuisance for well-run software projects # that build with -Werror. So if the active version of Clang has # this misfeature, we search for an option to squash it. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether Clang needs flag to prevent \"argument unused\" warning when linking with -pthread" >&5 printf %s "checking whether Clang needs flag to prevent \"argument unused\" warning when linking with -pthread... " >&6; } if test ${ax_cv_PTHREAD_CLANG_NO_WARN_FLAG+y} then : printf %s "(cached) " >&6 else $as_nop ax_cv_PTHREAD_CLANG_NO_WARN_FLAG=unknown # Create an alternate version of $ac_link that compiles and # links in two steps (.c -> .o, .o -> exe) instead of one # (.c -> exe), because the warning occurs only in the second # step ax_pthread_save_ac_link="$ac_link" ax_pthread_sed='s/conftest\.\$ac_ext/conftest.$ac_objext/g' ax_pthread_link_step=`printf "%s\n" "$ac_link" | sed "$ax_pthread_sed"` ax_pthread_2step_ac_link="($ac_compile) && (echo ==== >&5) && ($ax_pthread_link_step)" ax_pthread_save_CFLAGS="$CFLAGS" for ax_pthread_try in '' -Qunused-arguments -Wno-unused-command-line-argument unknown; do if test "x$ax_pthread_try" = "xunknown" then : break fi CFLAGS="-Werror -Wunknown-warning-option $ax_pthread_try -pthread $ax_pthread_save_CFLAGS" ac_link="$ax_pthread_save_ac_link" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main(void){return 0;} _ACEOF if ac_fn_c_try_link "$LINENO" then : ac_link="$ax_pthread_2step_ac_link" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main(void){return 0;} _ACEOF if ac_fn_c_try_link "$LINENO" then : break fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext done ac_link="$ax_pthread_save_ac_link" CFLAGS="$ax_pthread_save_CFLAGS" if test "x$ax_pthread_try" = "x" then : ax_pthread_try=no fi ax_cv_PTHREAD_CLANG_NO_WARN_FLAG="$ax_pthread_try" fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" >&5 printf "%s\n" "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" >&6; } case "$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG" in no | unknown) ;; *) PTHREAD_CFLAGS="$ax_cv_PTHREAD_CLANG_NO_WARN_FLAG $PTHREAD_CFLAGS" ;; esac fi # $ax_pthread_clang = yes # Various other checks: if test "x$ax_pthread_ok" = "xyes"; then ax_pthread_save_CFLAGS="$CFLAGS" ax_pthread_save_LIBS="$LIBS" CFLAGS="$CFLAGS $PTHREAD_CFLAGS" LIBS="$PTHREAD_LIBS $LIBS" # Detect AIX lossage: JOINABLE attribute is called UNDETACHED. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for joinable pthread attribute" >&5 printf %s "checking for joinable pthread attribute... " >&6; } if test ${ax_cv_PTHREAD_JOINABLE_ATTR+y} then : printf %s "(cached) " >&6 else $as_nop ax_cv_PTHREAD_JOINABLE_ATTR=unknown for ax_pthread_attr in PTHREAD_CREATE_JOINABLE PTHREAD_CREATE_UNDETACHED; do cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main (void) { int attr = $ax_pthread_attr; return attr /* ; */ ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ax_cv_PTHREAD_JOINABLE_ATTR=$ax_pthread_attr; break fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext done fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_JOINABLE_ATTR" >&5 printf "%s\n" "$ax_cv_PTHREAD_JOINABLE_ATTR" >&6; } if test "x$ax_cv_PTHREAD_JOINABLE_ATTR" != "xunknown" && \ test "x$ax_cv_PTHREAD_JOINABLE_ATTR" != "xPTHREAD_CREATE_JOINABLE" && \ test "x$ax_pthread_joinable_attr_defined" != "xyes" then : printf "%s\n" "#define PTHREAD_CREATE_JOINABLE $ax_cv_PTHREAD_JOINABLE_ATTR" >>confdefs.h ax_pthread_joinable_attr_defined=yes fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether more special flags are required for pthreads" >&5 printf %s "checking whether more special flags are required for pthreads... " >&6; } if test ${ax_cv_PTHREAD_SPECIAL_FLAGS+y} then : printf %s "(cached) " >&6 else $as_nop ax_cv_PTHREAD_SPECIAL_FLAGS=no case $host_os in solaris*) ax_cv_PTHREAD_SPECIAL_FLAGS="-D_POSIX_PTHREAD_SEMANTICS" ;; esac fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_SPECIAL_FLAGS" >&5 printf "%s\n" "$ax_cv_PTHREAD_SPECIAL_FLAGS" >&6; } if test "x$ax_cv_PTHREAD_SPECIAL_FLAGS" != "xno" && \ test "x$ax_pthread_special_flags_added" != "xyes" then : PTHREAD_CFLAGS="$ax_cv_PTHREAD_SPECIAL_FLAGS $PTHREAD_CFLAGS" ax_pthread_special_flags_added=yes fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for PTHREAD_PRIO_INHERIT" >&5 printf %s "checking for PTHREAD_PRIO_INHERIT... " >&6; } if test ${ax_cv_PTHREAD_PRIO_INHERIT+y} then : printf %s "(cached) " >&6 else $as_nop cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main (void) { int i = PTHREAD_PRIO_INHERIT; return i; ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ax_cv_PTHREAD_PRIO_INHERIT=yes else $as_nop ax_cv_PTHREAD_PRIO_INHERIT=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_PTHREAD_PRIO_INHERIT" >&5 printf "%s\n" "$ax_cv_PTHREAD_PRIO_INHERIT" >&6; } if test "x$ax_cv_PTHREAD_PRIO_INHERIT" = "xyes" && \ test "x$ax_pthread_prio_inherit_defined" != "xyes" then : printf "%s\n" "#define HAVE_PTHREAD_PRIO_INHERIT 1" >>confdefs.h ax_pthread_prio_inherit_defined=yes fi CFLAGS="$ax_pthread_save_CFLAGS" LIBS="$ax_pthread_save_LIBS" # More AIX lossage: compile with *_r variant if test "x$GCC" != "xyes"; then case $host_os in aix*) case "x/$CC" in #( x*/c89|x*/c89_128|x*/c99|x*/c99_128|x*/cc|x*/cc128|x*/xlc|x*/xlc_v6|x*/xlc128|x*/xlc128_v6) : #handle absolute path differently from PATH based program lookup case "x$CC" in #( x/*) : if as_fn_executable_p ${CC}_r then : PTHREAD_CC="${CC}_r" fi if test "x${CXX}" != "x" then : if as_fn_executable_p ${CXX}_r then : PTHREAD_CXX="${CXX}_r" fi fi ;; #( *) : for ac_prog in ${CC}_r do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_PTHREAD_CC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$PTHREAD_CC"; then ac_cv_prog_PTHREAD_CC="$PTHREAD_CC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_PTHREAD_CC="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi PTHREAD_CC=$ac_cv_prog_PTHREAD_CC if test -n "$PTHREAD_CC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $PTHREAD_CC" >&5 printf "%s\n" "$PTHREAD_CC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$PTHREAD_CC" && break done test -n "$PTHREAD_CC" || PTHREAD_CC="$CC" if test "x${CXX}" != "x" then : for ac_prog in ${CXX}_r do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_PTHREAD_CXX+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$PTHREAD_CXX"; then ac_cv_prog_PTHREAD_CXX="$PTHREAD_CXX" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_PTHREAD_CXX="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi PTHREAD_CXX=$ac_cv_prog_PTHREAD_CXX if test -n "$PTHREAD_CXX"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $PTHREAD_CXX" >&5 printf "%s\n" "$PTHREAD_CXX" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$PTHREAD_CXX" && break done test -n "$PTHREAD_CXX" || PTHREAD_CXX="$CXX" fi ;; esac ;; #( *) : ;; esac ;; esac fi fi test -n "$PTHREAD_CC" || PTHREAD_CC="$CC" test -n "$PTHREAD_CXX" || PTHREAD_CXX="$CXX" # Finally, execute ACTION-IF-FOUND/ACTION-IF-NOT-FOUND: if test "x$ax_pthread_ok" = "xyes"; then printf "%s\n" "#define HAVE_PTHREAD 1" >>confdefs.h : else ax_pthread_ok=no as_fn_error $? "Cannot find pthread" "$LINENO" 5 fi ac_ext=c ac_cpp='$CPP $CPPFLAGS' ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5' ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5' ac_compiler_gnu=$ac_cv_c_compiler_gnu # gnulib m4 dependency: check for linker script support # Check whether --enable-ld-version-script was given. if test ${enable_ld_version_script+y} then : enableval=$enable_ld_version_script; have_ld_version_script=$enableval else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if LD -Wl,--version-script works" >&5 printf %s "checking if LD -Wl,--version-script works... " >&6; } if test ${gl_cv_sys_ld_version_script+y} then : printf %s "(cached) " >&6 else $as_nop gl_cv_sys_ld_version_script=no save_LDFLAGS=$LDFLAGS LDFLAGS="$LDFLAGS -Wl,--version-script=conftest.map" echo foo >conftest.map cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : else $as_nop cat > conftest.map <conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : gl_cv_sys_ld_version_script=yes fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext rm -f conftest.map LDFLAGS=$save_LDFLAGS fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $gl_cv_sys_ld_version_script" >&5 printf "%s\n" "$gl_cv_sys_ld_version_script" >&6; } have_ld_version_script=$gl_cv_sys_ld_version_script fi if test "$have_ld_version_script" = yes; then HAVE_LD_VERSION_SCRIPT_TRUE= HAVE_LD_VERSION_SCRIPT_FALSE='#' else HAVE_LD_VERSION_SCRIPT_TRUE='#' HAVE_LD_VERSION_SCRIPT_FALSE= fi # Check whether --enable-esapi-session-manage-flags was given. if test ${enable_esapi_session_manage_flags+y} then : enableval=$enable_esapi_session_manage_flags; esapi_sf=$enableval fi if test "x$esapi_sf" = "xyes" then : printf "%s\n" "#define ESAPI_MANAGE_FLAGS 1" >>confdefs.h fi # Check whether --with-fapi was given. if test ${with_fapi+y} then : withval=$with_fapi; enable_fapi=$withval else $as_nop enable_fapi=auto fi if test "x$enable_fapi" != "xno" then : if test "x$enable_fapi" = "xauto" then : pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for tss2-fapi >= 3.0 " >&5 printf %s "checking for tss2-fapi >= 3.0 ... " >&6; } if test -n "$TSS2_FAPI_CFLAGS"; then pkg_cv_TSS2_FAPI_CFLAGS="$TSS2_FAPI_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-fapi >= 3.0 \""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-fapi >= 3.0 ") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_FAPI_CFLAGS=`$PKG_CONFIG --cflags "tss2-fapi >= 3.0 " 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_FAPI_LIBS"; then pkg_cv_TSS2_FAPI_LIBS="$TSS2_FAPI_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-fapi >= 3.0 \""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-fapi >= 3.0 ") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_FAPI_LIBS=`$PKG_CONFIG --libs "tss2-fapi >= 3.0 " 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_FAPI_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-fapi >= 3.0 " 2>&1` else TSS2_FAPI_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-fapi >= 3.0 " 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_FAPI_PKG_ERRORS" >&5 have_fapi=0 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } have_fapi=0 else TSS2_FAPI_CFLAGS=$pkg_cv_TSS2_FAPI_CFLAGS TSS2_FAPI_LIBS=$pkg_cv_TSS2_FAPI_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } have_fapi=1 fi else $as_nop pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for tss2-fapi >= 3.0 " >&5 printf %s "checking for tss2-fapi >= 3.0 ... " >&6; } if test -n "$TSS2_FAPI_CFLAGS"; then pkg_cv_TSS2_FAPI_CFLAGS="$TSS2_FAPI_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-fapi >= 3.0 \""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-fapi >= 3.0 ") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_FAPI_CFLAGS=`$PKG_CONFIG --cflags "tss2-fapi >= 3.0 " 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_FAPI_LIBS"; then pkg_cv_TSS2_FAPI_LIBS="$TSS2_FAPI_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-fapi >= 3.0 \""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-fapi >= 3.0 ") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_FAPI_LIBS=`$PKG_CONFIG --libs "tss2-fapi >= 3.0 " 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_FAPI_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-fapi >= 3.0 " 2>&1` else TSS2_FAPI_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-fapi >= 3.0 " 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_FAPI_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-fapi >= 3.0 ) were not met: $TSS2_FAPI_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_FAPI_CFLAGS and TSS2_FAPI_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_FAPI_CFLAGS and TSS2_FAPI_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_FAPI_CFLAGS=$pkg_cv_TSS2_FAPI_CFLAGS TSS2_FAPI_LIBS=$pkg_cv_TSS2_FAPI_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } have_fapi=1 fi fi fi if test "$have_fapi" = "1" then : printf "%s\n" "#define HAVE_FAPI 1" >>confdefs.h fi if test "$have_fapi" = "1"; then HAVE_FAPI_TRUE= HAVE_FAPI_FALSE='#' else HAVE_FAPI_TRUE='#' HAVE_FAPI_FALSE= fi # START ENABLE UNIT # # Enable --with-unit option for unit testing # # Check whether --enable-unit was given. if test ${enable_unit+y} then : enableval=$enable_unit; else $as_nop enable_unit=no fi # Check whether --enable-fuzzing was given. if test ${enable_fuzzing+y} then : enableval=$enable_fuzzing; else $as_nop enable_fuzzing=no fi if test "x$enable_fuzzing" != xno; then FUZZING_TRUE= FUZZING_FALSE='#' else FUZZING_TRUE='#' FUZZING_FALSE= fi # Check whether --enable-asan was given. if test ${enable_asan+y} then : enableval=$enable_asan; else $as_nop enable_asan=no fi # Check whether --enable-hardening was given. if test ${enable_hardening+y} then : enableval=$enable_hardening; else $as_nop enable_hardening="yes" fi # Check whether --enable-overflow was given. if test ${enable_overflow+y} then : enableval=$enable_overflow; fi if test "x$enable_overflow" = "xno" then : printf "%s\n" "#define DISABLE_OVERFLOW_BUILTINS /**/" >>confdefs.h fi # Check whether --with-fuzzing-flags was given. if test ${with_fuzzing_flags+y} then : withval=$with_fuzzing_flags; FUZZING_FLAGS="$with_fuzzing_flags" else $as_nop FUZZING_FLAGS="-max_total_time=30" fi if test "x$enable_fuzzing" = "xyes" then : # Add these to AM_CFLAGS to everyone gets built # smartly (extra info and instrumentation) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fsanitize=address" >&5 printf %s "checking whether C compiler accepts -fsanitize=address... " >&6; } if test ${ax_cv_check_cflags___fsanitize_address+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fsanitize=address" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___fsanitize_address=yes else $as_nop ax_cv_check_cflags___fsanitize_address=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fsanitize_address" >&5 printf "%s\n" "$ax_cv_check_cflags___fsanitize_address" >&6; } if test "x$ax_cv_check_cflags___fsanitize_address" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fsanitize=address" else $as_nop as_fn_error $? "Cannot enable -fsanitize=address, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -g" >&5 printf %s "checking whether C compiler accepts -g... " >&6; } if test ${ax_cv_check_cflags___g+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___g=yes else $as_nop ax_cv_check_cflags___g=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___g" >&5 printf "%s\n" "$ax_cv_check_cflags___g" >&6; } if test "x$ax_cv_check_cflags___g" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -g" else $as_nop as_fn_error $? "Cannot enable -g, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -O0" >&5 printf %s "checking whether C compiler accepts -O0... " >&6; } if test ${ax_cv_check_cflags___O0+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -O0" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___O0=yes else $as_nop ax_cv_check_cflags___O0=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___O0" >&5 printf "%s\n" "$ax_cv_check_cflags___O0" >&6; } if test "x$ax_cv_check_cflags___O0" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -O0" else $as_nop as_fn_error $? "Cannot enable -O0, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fsanitize=fuzzer" >&5 printf %s "checking whether C compiler accepts -fsanitize=fuzzer... " >&6; } if test ${ax_cv_check_cflags___fsanitize_fuzzer+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fsanitize=fuzzer" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___fsanitize_fuzzer=yes else $as_nop ax_cv_check_cflags___fsanitize_fuzzer=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fsanitize_fuzzer" >&5 printf "%s\n" "$ax_cv_check_cflags___fsanitize_fuzzer" >&6; } if test "x$ax_cv_check_cflags___fsanitize_fuzzer" = xyes then : FUZZING_CFLAGS="$FUZZING_CFLAGS -fsanitize=fuzzer" else $as_nop as_fn_error $? "Cannot enable -fsanitize=fuzzer" "$LINENO" 5 fi # Disable hardening flags { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \"Disabling hardening --disable-hardening for --enable-fuzzing\"" >&5 printf "%s\n" "$as_me: \"Disabling hardening --disable-hardening for --enable-fuzzing\"" >&6;} enable_hardening=no printf "%s\n" "#define FUZZING 1" >>confdefs.h fi if test "x$enable_asan" = "xyes" then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fsanitize=address" >&5 printf %s "checking whether C compiler accepts -fsanitize=address... " >&6; } if test ${ax_cv_check_cflags___fsanitize_address+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fsanitize=address" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___fsanitize_address=yes else $as_nop ax_cv_check_cflags___fsanitize_address=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fsanitize_address" >&5 printf "%s\n" "$ax_cv_check_cflags___fsanitize_address" >&6; } if test "x$ax_cv_check_cflags___fsanitize_address" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fsanitize=address" else $as_nop as_fn_error $? "Cannot enable -fsanitize=address, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -g" >&5 printf %s "checking whether C compiler accepts -g... " >&6; } if test ${ax_cv_check_cflags___g+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -g" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___g=yes else $as_nop ax_cv_check_cflags___g=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___g" >&5 printf "%s\n" "$ax_cv_check_cflags___g" >&6; } if test "x$ax_cv_check_cflags___g" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -g" else $as_nop as_fn_error $? "Cannot enable -g, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -O0" >&5 printf %s "checking whether C compiler accepts -O0... " >&6; } if test ${ax_cv_check_cflags___O0+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -O0" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___O0=yes else $as_nop ax_cv_check_cflags___O0=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___O0" >&5 printf "%s\n" "$ax_cv_check_cflags___O0" >&6; } if test "x$ax_cv_check_cflags___O0" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -O0" else $as_nop as_fn_error $? "Cannot enable -O0, consider configuring with --disable-hardening" "$LINENO" 5 fi # Disable hardening flags { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \"Disabling hardening --disable-hardening for --enable-fuzzing\"" >&5 printf "%s\n" "$as_me: \"Disabling hardening --disable-hardening for --enable-fuzzing\"" >&6;} enable_hardening=no fi if test "x$enable_asan" = "xyes"; then ENABLE_ASAN_TRUE= ENABLE_ASAN_FALSE='#' else ENABLE_ASAN_TRUE='#' ENABLE_ASAN_FALSE= fi # end function unit_test_checks if test "x$enable_unit" = "xyes" then : printf "%s\n" "#define UNIT_TESTING 1" >>confdefs.h { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for __attribute__((weak))" >&5 printf %s "checking for __attribute__((weak))... " >&6; } if test ${ax_cv_have_func_attribute_weak+y} then : printf %s "(cached) " >&6 else $as_nop cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int foo( void ) __attribute__((weak)); int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : if grep -- -Wattributes conftest.err then : ax_cv_have_func_attribute_weak=no else $as_nop ax_cv_have_func_attribute_weak=yes fi else $as_nop ax_cv_have_func_attribute_weak=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_have_func_attribute_weak" >&5 printf "%s\n" "$ax_cv_have_func_attribute_weak" >&6; } if test yes = $ax_cv_have_func_attribute_weak then : printf "%s\n" "#define HAVE_FUNC_ATTRIBUTE_WEAK 1" >>confdefs.h fi fi if test "x$enable_unit" = "xyes"; then UNIT_TRUE= UNIT_FALSE='#' else UNIT_TRUE='#' UNIT_FALSE= fi # All the tests leverage CMOCKA, so if any testing is enabled, look for it if test "x$enable_unit" = "xyes" -o "x$enable_integration" = "xyes" -o "x$enable_fuzzing" = "xyes" then : pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for cmocka" >&5 printf %s "checking for cmocka... " >&6; } if test -n "$CMOCKA_CFLAGS"; then pkg_cv_CMOCKA_CFLAGS="$CMOCKA_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"cmocka\""; } >&5 ($PKG_CONFIG --exists --print-errors "cmocka") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_CMOCKA_CFLAGS=`$PKG_CONFIG --cflags "cmocka" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$CMOCKA_LIBS"; then pkg_cv_CMOCKA_LIBS="$CMOCKA_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"cmocka\""; } >&5 ($PKG_CONFIG --exists --print-errors "cmocka") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_CMOCKA_LIBS=`$PKG_CONFIG --libs "cmocka" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then CMOCKA_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "cmocka" 2>&1` else CMOCKA_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "cmocka" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$CMOCKA_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (cmocka) were not met: $CMOCKA_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables CMOCKA_CFLAGS and CMOCKA_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables CMOCKA_CFLAGS and CMOCKA_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else CMOCKA_CFLAGS=$pkg_cv_CMOCKA_CFLAGS CMOCKA_LIBS=$pkg_cv_CMOCKA_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi fi # END ENABLE UNIT # START ENABLE INTEGRATION # # enable integration tests and check for simulator binary # # Check whether --enable-integration was given. if test ${enable_integration+y} then : enableval=$enable_integration; else $as_nop enable_integration=no fi # Test for Java compiler and interpreter without throwing fatal errors (since # these macros are defined using AC_DEFUN they cannot be called conditionally) if test "x$JAVAPREFIX" = x then : test "x$JAVAC" = x && for ac_prog in "gcj -C" guavac jikes javac do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_JAVAC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$JAVAC"; then ac_cv_prog_JAVAC="$JAVAC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_JAVAC="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVAC=$ac_cv_prog_JAVAC if test -n "$JAVAC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $JAVAC" >&5 printf "%s\n" "$JAVAC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$JAVAC" && break done else $as_nop test "x$JAVAC" = x && for ac_prog in "gcj -C" guavac jikes javac do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_JAVAC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$JAVAC"; then ac_cv_prog_JAVAC="$JAVAC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $JAVAPREFIX/bin do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_JAVAC="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVAC=$ac_cv_prog_JAVAC if test -n "$JAVAC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $JAVAC" >&5 printf "%s\n" "$JAVAC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$JAVAC" && break done fi test "x$JAVAC" = x && have_javac=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $JAVAC works" >&5 printf %s "checking if $JAVAC works... " >&6; } if test ${ac_cv_prog_javac_works+y} then : printf %s "(cached) " >&6 else $as_nop JAVA_TEST=Test.java CLASS_TEST=Test.class cat << \EOF > $JAVA_TEST /* #line 16766 "configure" */ public class Test { } EOF if { ac_try='$JAVAC $JAVACFLAGS $JAVA_TEST' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } >/dev/null 2>&1; then ac_cv_prog_javac_works=yes else have_javac=no echo "configure: failed program was:" >&5 cat $JAVA_TEST >&5 fi rm -f $JAVA_TEST $CLASS_TEST fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_javac_works" >&5 printf "%s\n" "$ac_cv_prog_javac_works" >&6; } if test "x$JAVAPREFIX" = x then : test x$JAVA = x && for ac_prog in kaffe java do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_JAVA+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$JAVA"; then ac_cv_prog_JAVA="$JAVA" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_JAVA="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVA=$ac_cv_prog_JAVA if test -n "$JAVA"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $JAVA" >&5 printf "%s\n" "$JAVA" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$JAVA" && break done else $as_nop test x$JAVA = x && for ac_prog in kaffe java do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_JAVA+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$JAVA"; then ac_cv_prog_JAVA="$JAVA" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $JAVAPREFIX/bin do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_JAVA="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVA=$ac_cv_prog_JAVA if test -n "$JAVA"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $JAVA" >&5 printf "%s\n" "$JAVA" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$JAVA" && break done fi test x$JAVA = x && have_javac=no if test x$ac_cv_prog_javac_works = xno; then have_javac=no fi if test x$ac_cv_prog_javac_works = x; then if test "x$JAVAPREFIX" = x then : test "x$JAVAC" = x && for ac_prog in "gcj -C" guavac jikes javac do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_JAVAC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$JAVAC"; then ac_cv_prog_JAVAC="$JAVAC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_JAVAC="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVAC=$ac_cv_prog_JAVAC if test -n "$JAVAC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $JAVAC" >&5 printf "%s\n" "$JAVAC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$JAVAC" && break done else $as_nop test "x$JAVAC" = x && for ac_prog in "gcj -C" guavac jikes javac do # Extract the first word of "$ac_prog", so it can be a program name with args. set dummy $ac_prog; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_JAVAC+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$JAVAC"; then ac_cv_prog_JAVAC="$JAVAC" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $JAVAPREFIX/bin do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_JAVAC="$ac_prog" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi JAVAC=$ac_cv_prog_JAVAC if test -n "$JAVAC"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $JAVAC" >&5 printf "%s\n" "$JAVAC" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi test -n "$JAVAC" && break done fi test "x$JAVAC" = x && have_javac=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $JAVAC works" >&5 printf %s "checking if $JAVAC works... " >&6; } if test ${ac_cv_prog_javac_works+y} then : printf %s "(cached) " >&6 else $as_nop JAVA_TEST=Test.java CLASS_TEST=Test.class cat << \EOF > $JAVA_TEST /* #line 17005 "configure" */ public class Test { } EOF if { ac_try='$JAVAC $JAVACFLAGS $JAVA_TEST' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } >/dev/null 2>&1; then ac_cv_prog_javac_works=yes else have_javac=no echo "configure: failed program was:" >&5 cat $JAVA_TEST >&5 fi rm -f $JAVA_TEST $CLASS_TEST fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_javac_works" >&5 printf "%s\n" "$ac_cv_prog_javac_works" >&6; } fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $JAVA works" >&5 printf %s "checking if $JAVA works... " >&6; } if test ${ac_cv_prog_java_works+y} then : printf %s "(cached) " >&6 else $as_nop JAVA_TEST=Test.java CLASS_TEST=Test.class TEST=Test cat << \EOF > $JAVA_TEST /* [#]line 17040 "configure" */ public class Test { public static void main (String args[]) { System.exit (0); } } EOF if { ac_try='$JAVAC $JAVACFLAGS $JAVA_TEST' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } && test -s $CLASS_TEST; then : else echo "configure: failed program was:" >&5 cat $JAVA_TEST >&5 have_javac=no fi if { ac_try='$JAVA -classpath . $JAVAFLAGS $TEST' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } >/dev/null 2>&1; then ac_cv_prog_java_works=yes else echo "configure: failed program was:" >&5 cat $JAVA_TEST >&5 have_javac=no fi rm -f $JAVA_TEST $CLASS_TEST fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_java_works" >&5 printf "%s\n" "$ac_cv_prog_java_works" >&6; } # end function integration_test_checks if test "x$enable_integration" = "xyes" then : # Extract the first word of "tpm2_createprimary", so it can be a program name with args. set dummy tpm2_createprimary; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_createprimary+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_createprimary"; then ac_cv_prog_tpm2_createprimary="$tpm2_createprimary" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_createprimary="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_createprimary" && ac_cv_prog_tpm2_createprimary="no" fi fi tpm2_createprimary=$ac_cv_prog_tpm2_createprimary if test -n "$tpm2_createprimary"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_createprimary" >&5 printf "%s\n" "$tpm2_createprimary" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_createprimary" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_createprimary, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_create", so it can be a program name with args. set dummy tpm2_create; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_create+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_create"; then ac_cv_prog_tpm2_create="$tpm2_create" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_create="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_create" && ac_cv_prog_tpm2_create="no" fi fi tpm2_create=$ac_cv_prog_tpm2_create if test -n "$tpm2_create"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_create" >&5 printf "%s\n" "$tpm2_create" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_create" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_create, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_evictcontrol", so it can be a program name with args. set dummy tpm2_evictcontrol; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_evictcontrol+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_evictcontrol"; then ac_cv_prog_tpm2_evictcontrol="$tpm2_evictcontrol" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_evictcontrol="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_evictcontrol" && ac_cv_prog_tpm2_evictcontrol="no" fi fi tpm2_evictcontrol=$ac_cv_prog_tpm2_evictcontrol if test -n "$tpm2_evictcontrol"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_evictcontrol" >&5 printf "%s\n" "$tpm2_evictcontrol" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_evictcontrol" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_evictcontrol, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_readpublic", so it can be a program name with args. set dummy tpm2_readpublic; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_readpublic+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_readpublic"; then ac_cv_prog_tpm2_readpublic="$tpm2_readpublic" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_readpublic="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_readpublic" && ac_cv_prog_tpm2_readpublic="no" fi fi tpm2_readpublic=$ac_cv_prog_tpm2_readpublic if test -n "$tpm2_readpublic"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_readpublic" >&5 printf "%s\n" "$tpm2_readpublic" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_readpublic" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_readpublic, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_load", so it can be a program name with args. set dummy tpm2_load; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_load+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_load"; then ac_cv_prog_tpm2_load="$tpm2_load" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_load="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_load" && ac_cv_prog_tpm2_load="no" fi fi tpm2_load=$ac_cv_prog_tpm2_load if test -n "$tpm2_load"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_load" >&5 printf "%s\n" "$tpm2_load" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_load" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_load, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_loadexternal", so it can be a program name with args. set dummy tpm2_loadexternal; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_loadexternal+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_loadexternal"; then ac_cv_prog_tpm2_loadexternal="$tpm2_loadexternal" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_loadexternal="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_loadexternal" && ac_cv_prog_tpm2_loadexternal="no" fi fi tpm2_loadexternal=$ac_cv_prog_tpm2_loadexternal if test -n "$tpm2_loadexternal"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_loadexternal" >&5 printf "%s\n" "$tpm2_loadexternal" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_loadexternal" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_loadexternal, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_unseal", so it can be a program name with args. set dummy tpm2_unseal; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_unseal+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_unseal"; then ac_cv_prog_tpm2_unseal="$tpm2_unseal" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_unseal="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_unseal" && ac_cv_prog_tpm2_unseal="no" fi fi tpm2_unseal=$ac_cv_prog_tpm2_unseal if test -n "$tpm2_unseal"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_unseal" >&5 printf "%s\n" "$tpm2_unseal" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_unseal" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_unseal, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_encryptdecrypt", so it can be a program name with args. set dummy tpm2_encryptdecrypt; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_encryptdecrypt+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_encryptdecrypt"; then ac_cv_prog_tpm2_encryptdecrypt="$tpm2_encryptdecrypt" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_encryptdecrypt="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_encryptdecrypt" && ac_cv_prog_tpm2_encryptdecrypt="no" fi fi tpm2_encryptdecrypt=$ac_cv_prog_tpm2_encryptdecrypt if test -n "$tpm2_encryptdecrypt"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_encryptdecrypt" >&5 printf "%s\n" "$tpm2_encryptdecrypt" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_encryptdecrypt" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_encryptdecrypt, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_sign", so it can be a program name with args. set dummy tpm2_sign; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_sign+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_sign"; then ac_cv_prog_tpm2_sign="$tpm2_sign" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_sign="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_sign" && ac_cv_prog_tpm2_sign="no" fi fi tpm2_sign=$ac_cv_prog_tpm2_sign if test -n "$tpm2_sign"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_sign" >&5 printf "%s\n" "$tpm2_sign" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_sign" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_sign, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_getcap", so it can be a program name with args. set dummy tpm2_getcap; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_getcap+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_getcap"; then ac_cv_prog_tpm2_getcap="$tpm2_getcap" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_getcap="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_getcap" && ac_cv_prog_tpm2_getcap="no" fi fi tpm2_getcap=$ac_cv_prog_tpm2_getcap if test -n "$tpm2_getcap"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_getcap" >&5 printf "%s\n" "$tpm2_getcap" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_getcap" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_getcap, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_import", so it can be a program name with args. set dummy tpm2_import; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_import+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_import"; then ac_cv_prog_tpm2_import="$tpm2_import" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_import="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_import" && ac_cv_prog_tpm2_import="no" fi fi tpm2_import=$ac_cv_prog_tpm2_import if test -n "$tpm2_import"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_import" >&5 printf "%s\n" "$tpm2_import" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_import" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_import, but executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2_changeauth", so it can be a program name with args. set dummy tpm2_changeauth; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_changeauth+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_changeauth"; then ac_cv_prog_tpm2_changeauth="$tpm2_changeauth" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_changeauth="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_changeauth" && ac_cv_prog_tpm2_changeauth="no" fi fi tpm2_changeauth=$ac_cv_prog_tpm2_changeauth if test -n "$tpm2_changeauth"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_changeauth" >&5 printf "%s\n" "$tpm2_changeauth" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_changeauth" != "xyes" then : as_fn_error $? "tpm2_ptool requires tpm2_changeauth, but executable not found." "$LINENO" 5 fi # set enginesdir to be either the engines dir for OSSL < 3.0 and the provider (libdir var) # path and look for the shared object implementing the plugin functionality for openssl. if test "x$have_ossl3" = "xyes" then : if test -n "$enginesdir"; then pkg_cv_enginesdir="$enginesdir" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libcrypto\""; } >&5 ($PKG_CONFIG --exists --print-errors "libcrypto") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_enginesdir=`$PKG_CONFIG --variable="libdir" "libcrypto" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi enginesdir=$pkg_cv_enginesdir if test "x$enginesdir" = x"" then : as_fn_error $? "could not determine openssl provider path." "$LINENO" 5 fi else $as_nop if test -n "$enginesdir"; then pkg_cv_enginesdir="$enginesdir" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"libcrypto\""; } >&5 ($PKG_CONFIG --exists --print-errors "libcrypto") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_enginesdir=`$PKG_CONFIG --variable="enginesdir" "libcrypto" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi enginesdir=$pkg_cv_enginesdir if test "x$enginesdir" = x"" then : as_fn_error $? "could not determine openssl engine path." "$LINENO" 5 fi fi if test "x$have_ossl3" = "xyes" then : as_ac_File=`printf "%s\n" "ac_cv_file_$enginesdir/tpm2.so" | $as_tr_sh` { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $enginesdir/tpm2.so" >&5 printf %s "checking for $enginesdir/tpm2.so... " >&6; } if eval test \${$as_ac_File+y} then : printf %s "(cached) " >&6 else $as_nop test "$cross_compiling" = yes && as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5 if test -r "$enginesdir/tpm2.so"; then eval "$as_ac_File=yes" else eval "$as_ac_File=no" fi fi eval ac_res=\$$as_ac_File { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 printf "%s\n" "$ac_res" >&6; } if eval test \"x\$"$as_ac_File"\" = x"yes" then : fi else $as_nop pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for opensc-pkcs11" >&5 printf %s "checking for opensc-pkcs11... " >&6; } if test -n "$OPENSC_PKCS11_CFLAGS"; then pkg_cv_OPENSC_PKCS11_CFLAGS="$OPENSC_PKCS11_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"opensc-pkcs11\""; } >&5 ($PKG_CONFIG --exists --print-errors "opensc-pkcs11") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_OPENSC_PKCS11_CFLAGS=`$PKG_CONFIG --cflags "opensc-pkcs11" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$OPENSC_PKCS11_LIBS"; then pkg_cv_OPENSC_PKCS11_LIBS="$OPENSC_PKCS11_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"opensc-pkcs11\""; } >&5 ($PKG_CONFIG --exists --print-errors "opensc-pkcs11") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_OPENSC_PKCS11_LIBS=`$PKG_CONFIG --libs "opensc-pkcs11" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then OPENSC_PKCS11_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "opensc-pkcs11" 2>&1` else OPENSC_PKCS11_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "opensc-pkcs11" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$OPENSC_PKCS11_PKG_ERRORS" >&5 as_ac_File=`printf "%s\n" "ac_cv_file_$enginesdir/engine_pkcs11.so" | $as_tr_sh` { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $enginesdir/engine_pkcs11.so" >&5 printf %s "checking for $enginesdir/engine_pkcs11.so... " >&6; } if eval test \${$as_ac_File+y} then : printf %s "(cached) " >&6 else $as_nop test "$cross_compiling" = yes && as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5 if test -r "$enginesdir/engine_pkcs11.so"; then eval "$as_ac_File=yes" else eval "$as_ac_File=no" fi fi eval ac_res=\$$as_ac_File { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 printf "%s\n" "$ac_res" >&6; } if eval test \"x\$"$as_ac_File"\" = x"yes" then : fi elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } as_ac_File=`printf "%s\n" "ac_cv_file_$enginesdir/engine_pkcs11.so" | $as_tr_sh` { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $enginesdir/engine_pkcs11.so" >&5 printf %s "checking for $enginesdir/engine_pkcs11.so... " >&6; } if eval test \${$as_ac_File+y} then : printf %s "(cached) " >&6 else $as_nop test "$cross_compiling" = yes && as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5 if test -r "$enginesdir/engine_pkcs11.so"; then eval "$as_ac_File=yes" else eval "$as_ac_File=no" fi fi eval ac_res=\$$as_ac_File { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5 printf "%s\n" "$ac_res" >&6; } if eval test \"x\$"$as_ac_File"\" = x"yes" then : fi else OPENSC_PKCS11_CFLAGS=$pkg_cv_OPENSC_PKCS11_CFLAGS OPENSC_PKCS11_LIBS=$pkg_cv_OPENSC_PKCS11_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi fi pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for tss2-tcti-tabrmd" >&5 printf %s "checking for tss2-tcti-tabrmd... " >&6; } if test -n "$TSS2_TCTI_TABRMD_CFLAGS"; then pkg_cv_TSS2_TCTI_TABRMD_CFLAGS="$TSS2_TCTI_TABRMD_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-tcti-tabrmd\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-tcti-tabrmd") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_TCTI_TABRMD_CFLAGS=`$PKG_CONFIG --cflags "tss2-tcti-tabrmd" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$TSS2_TCTI_TABRMD_LIBS"; then pkg_cv_TSS2_TCTI_TABRMD_LIBS="$TSS2_TCTI_TABRMD_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"tss2-tcti-tabrmd\""; } >&5 ($PKG_CONFIG --exists --print-errors "tss2-tcti-tabrmd") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_TSS2_TCTI_TABRMD_LIBS=`$PKG_CONFIG --libs "tss2-tcti-tabrmd" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then TSS2_TCTI_TABRMD_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "tss2-tcti-tabrmd" 2>&1` else TSS2_TCTI_TABRMD_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "tss2-tcti-tabrmd" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$TSS2_TCTI_TABRMD_PKG_ERRORS" >&5 as_fn_error $? "Package requirements (tss2-tcti-tabrmd) were not met: $TSS2_TCTI_TABRMD_PKG_ERRORS Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables TSS2_TCTI_TABRMD_CFLAGS and TSS2_TCTI_TABRMD_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details." "$LINENO" 5 elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "The pkg-config script could not be found or is too old. Make sure it is in your PATH or set the PKG_CONFIG environment variable to the full path to pkg-config. Alternatively, you may set the environment variables TSS2_TCTI_TABRMD_CFLAGS and TSS2_TCTI_TABRMD_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. To get pkg-config, see . See \`config.log' for more details" "$LINENO" 5; } else TSS2_TCTI_TABRMD_CFLAGS=$pkg_cv_TSS2_TCTI_TABRMD_CFLAGS TSS2_TCTI_TABRMD_LIBS=$pkg_cv_TSS2_TCTI_TABRMD_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } fi # Extract the first word of "swtpm", so it can be a program name with args. set dummy swtpm; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_swtpm+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$swtpm"; then ac_cv_prog_swtpm="$swtpm" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_swtpm="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_swtpm" && ac_cv_prog_swtpm="no" fi fi swtpm=$ac_cv_prog_swtpm if test -n "$swtpm"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $swtpm" >&5 printf "%s\n" "$swtpm" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi # Extract the first word of "tpm_server", so it can be a program name with args. set dummy tpm_server; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm_server+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm_server"; then ac_cv_prog_tpm_server="$tpm_server" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm_server="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm_server" && ac_cv_prog_tpm_server="no" fi fi tpm_server=$ac_cv_prog_tpm_server if test -n "$tpm_server"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm_server" >&5 printf "%s\n" "$tpm_server" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "$swtpm" = yes then : TABRMD_TCTI=swtpm else $as_nop if test "$tpm_server" = yes then : TABRMD_TCTI=mssim else $as_nop as_fn_error $? "Integration tests enabled but swtpm (or tpm_server) executable not found." "$LINENO" 5 fi fi # Extract the first word of "ss", so it can be a program name with args. set dummy ss; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_ss+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$ss"; then ac_cv_prog_ss="$ss" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_ss="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_ss" && ac_cv_prog_ss="no" fi fi ss=$ac_cv_prog_ss if test -n "$ss"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ss" >&5 printf "%s\n" "$ss" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$ss" != "xyes" then : as_fn_error $? "Integration tests enabled but ss executable not found." "$LINENO" 5 fi # Extract the first word of "certutil", so it can be a program name with args. set dummy certutil; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_certutil+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$certutil"; then ac_cv_prog_certutil="$certutil" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_certutil="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_certutil" && ac_cv_prog_certutil="no" fi fi certutil=$ac_cv_prog_certutil if test -n "$certutil"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $certutil" >&5 printf "%s\n" "$certutil" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$certutil" != "xyes" then : as_fn_error $? "Integration tests enabled but certutil executable not found." "$LINENO" 5 fi # Extract the first word of "modutil", so it can be a program name with args. set dummy modutil; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_modutil+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$modutil"; then ac_cv_prog_modutil="$modutil" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_modutil="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_modutil" && ac_cv_prog_modutil="no" fi fi modutil=$ac_cv_prog_modutil if test -n "$modutil"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $modutil" >&5 printf "%s\n" "$modutil" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$modutil" != "xyes" then : as_fn_error $? "Integration tests enabled but modutil executable not found." "$LINENO" 5 fi # Extract the first word of "expect", so it can be a program name with args. set dummy expect; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_expect+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$expect"; then ac_cv_prog_expect="$expect" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_expect="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_expect" && ac_cv_prog_expect="no" fi fi expect=$ac_cv_prog_expect if test -n "$expect"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $expect" >&5 printf "%s\n" "$expect" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$expect" != "xyes" then : as_fn_error $? "Integration tests enabled but expect executable not found." "$LINENO" 5 fi # Extract the first word of "pkcs11-tool", so it can be a program name with args. set dummy pkcs11-tool; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_pkcs11_tool+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$pkcs11_tool"; then ac_cv_prog_pkcs11_tool="$pkcs11_tool" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_pkcs11_tool="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_pkcs11_tool" && ac_cv_prog_pkcs11_tool="no" fi fi pkcs11_tool=$ac_cv_prog_pkcs11_tool if test -n "$pkcs11_tool"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $pkcs11_tool" >&5 printf "%s\n" "$pkcs11_tool" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$pkcs11_tool" != "xyes" then : as_fn_error $? "Integration tests enabled but pkcs11-tool executable not found." "$LINENO" 5 fi # Extract the first word of "p11tool", so it can be a program name with args. set dummy p11tool; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_p11tool+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$p11tool"; then ac_cv_prog_p11tool="$p11tool" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_p11tool="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_p11tool" && ac_cv_prog_p11tool="no" fi fi p11tool=$ac_cv_prog_p11tool if test -n "$p11tool"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $p11tool" >&5 printf "%s\n" "$p11tool" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$p11tool" != "xyes" then : as_fn_error $? "Integration tests enabled but p11tool executable not found." "$LINENO" 5 fi # Extract the first word of "bash", so it can be a program name with args. set dummy bash; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_bash+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$bash"; then ac_cv_prog_bash="$bash" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_bash="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_bash" && ac_cv_prog_bash="no" fi fi bash=$ac_cv_prog_bash if test -n "$bash"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $bash" >&5 printf "%s\n" "$bash" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$bash" != "xyes" then : as_fn_error $? "Integration tests enabled but bash executable not found." "$LINENO" 5 fi # Extract the first word of "sqlite3", so it can be a program name with args. set dummy sqlite3; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_sqlite3+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$sqlite3"; then ac_cv_prog_sqlite3="$sqlite3" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_sqlite3="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_sqlite3" && ac_cv_prog_sqlite3="no" fi fi sqlite3=$ac_cv_prog_sqlite3 if test -n "$sqlite3"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $sqlite3" >&5 printf "%s\n" "$sqlite3" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$sqlite3" != "xyes" then : as_fn_error $? "Integration tests enabled but sqlite3 executable not found." "$LINENO" 5 fi # Extract the first word of "tpm2-abrmd", so it can be a program name with args. set dummy tpm2-abrmd; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2_abrmd+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2_abrmd"; then ac_cv_prog_tpm2_abrmd="$tpm2_abrmd" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2_abrmd="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tpm2_abrmd" && ac_cv_prog_tpm2_abrmd="no" fi fi tpm2_abrmd=$ac_cv_prog_tpm2_abrmd if test -n "$tpm2_abrmd"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2_abrmd" >&5 printf "%s\n" "$tpm2_abrmd" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tpm2_abrmd" != "xyes" then : as_fn_error $? "Integration tests enabled but tpm2-abrmd executable not found." "$LINENO" 5 fi if test "x$have_ossl3" = "xno" then : # Extract the first word of "tpm2tss-genkey", so it can be a program name with args. set dummy tpm2tss-genkey; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tpm2tss_genkey+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tpm2tss_genkey"; then ac_cv_prog_tpm2tss_genkey="$tpm2tss_genkey" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tpm2tss_genkey="" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS fi fi tpm2tss_genkey=$ac_cv_prog_tpm2tss_genkey if test -n "$tpm2tss_genkey"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tpm2tss_genkey" >&5 printf "%s\n" "$tpm2tss_genkey" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi fi if test "$have_fapi" = "1" then : # Extract the first word of "tss2_provision", so it can be a program name with args. set dummy tss2_provision; ac_word=$2 { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 printf %s "checking for $ac_word... " >&6; } if test ${ac_cv_prog_tss2_provision+y} then : printf %s "(cached) " >&6 else $as_nop if test -n "$tss2_provision"; then ac_cv_prog_tss2_provision="$tss2_provision" # Let the user override the test. else as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac for ac_exec_ext in '' $ac_executable_extensions; do if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then ac_cv_prog_tss2_provision="yes" printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5 break 2 fi done done IFS=$as_save_IFS test -z "$ac_cv_prog_tss2_provision" && ac_cv_prog_tss2_provision="no" fi fi tss2_provision=$ac_cv_prog_tss2_provision if test -n "$tss2_provision"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $tss2_provision" >&5 printf "%s\n" "$tss2_provision" >&6; } else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } fi if test "x$tss2_provision" != "xyes" then : as_fn_error $? "Integration tests enabled but tss2_provision executable not found." "$LINENO" 5 fi fi if test "x$have_javac" = "xno" then : as_fn_error $? "Integration tests enabled but no Java compiler was found" "$LINENO" 5 fi ac_var_name=`echo org.junit.Assert | sed 's/\./_/g'` { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for org.junit.Assert class" >&5 printf %s "checking for org.junit.Assert class... " >&6; } if eval test \${ax_cv_class_$ac_var_name+y} then : printf %s "(cached) " >&6 else $as_nop cat << \EOF > Test.java /* #line 18600 "configure" */ import org.junit.Assert; public class Test { } EOF if { ac_try='$JAVAC $JAVACFLAGS Test.java' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } && test -s Test.class then eval "ac_cv_class_$ac_var_name=yes" else echo "configure: failed program was:" >&5 cat Test.java >&5 rm -f Test.java Test.class eval "ac_cv_class_$ac_var_name=no" fi rm -f Test.java Test.class eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" eval "HAVE_$ac_var_name=$`echo ac_cv_class_$ac_var_val`" HAVE_LAST_CLASS=$ac_var_val if test x$ac_var_val = xyes; then : else as_fn_error $? "Integration tests enabled but JUnit not found, try setting CLASSPATH" "$LINENO" 5 fi fi eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_var_val" >&5 printf "%s\n" "$ac_var_val" >&6; } ac_var_name=`echo org.hamcrest.SelfDescribing | sed 's/\./_/g'` { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for org.hamcrest.SelfDescribing class" >&5 printf %s "checking for org.hamcrest.SelfDescribing class... " >&6; } if eval test \${ax_cv_class_$ac_var_name+y} then : printf %s "(cached) " >&6 else $as_nop cat << \EOF > Test.java /* #line 18648 "configure" */ import org.hamcrest.SelfDescribing; public class Test { } EOF if { ac_try='$JAVAC $JAVACFLAGS Test.java' { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_try\""; } >&5 (eval $ac_try) 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; } && test -s Test.class then eval "ac_cv_class_$ac_var_name=yes" else echo "configure: failed program was:" >&5 cat Test.java >&5 rm -f Test.java Test.class eval "ac_cv_class_$ac_var_name=no" fi rm -f Test.java Test.class eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" eval "HAVE_$ac_var_name=$`echo ac_cv_class_$ac_var_val`" HAVE_LAST_CLASS=$ac_var_val if test x$ac_var_val = xyes; then : else as_fn_error $? "Integration tests enabled but Hamcrest not found, try setting CLASSPATH" "$LINENO" 5 fi fi eval "ac_var_val=$`eval echo ac_cv_class_$ac_var_name`" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_var_val" >&5 printf "%s\n" "$ac_var_val" >&6; } ENABLE_INTEGRATION=$enable_integration fi if test "x$enable_integration" = "xyes"; then ENABLE_INTEGRATION_TRUE= ENABLE_INTEGRATION_FALSE='#' else ENABLE_INTEGRATION_TRUE='#' ENABLE_INTEGRATION_FALSE= fi # END ENABLE INTEGRATION # START WITH STOREDIR # # Enable --with-storedir for changing the default store directory search path # # Check whether --with-storedir was given. if test ${with_storedir+y} then : withval=$with_storedir; case ":$with_storedir:" in # change empty paths to '.' ::) with_storedir='.' ;; # strip trailing slashes :*[\\/]:) with_storedir=`echo "$with_storedir" | sed 's,[\\/]*$,,'` ;; :*:) ;; esac # squeeze repeated slashes case "$with_storedir" in # if the path contains any backslashes, turn slashes into backslashes *\\*) with_storedir=`echo "$with_storedir" | sed 's,\(.\)[\\/][\\/]*,\1\\\\,g'` ;; # if the path contains slashes, also turn backslashes into slashes *) with_storedir=`echo "$with_storedir" | sed 's,\(.\)[\\/][\\/]*,\1/,g'` ;; esac printf "%s\n" "#define TPM2_PKCS11_STORE_DIR \"$with_storedir\"" >>confdefs.h fi # END WITH STOREDIR # START ENABLE PACK # # Enable --enable-pack for forcing structure packing # # Check whether --enable-pack was given. if test ${enable_pack+y} then : enableval=$enable_pack; else $as_nop enable_pack=no fi if test "x$enable_pack" = "xyes" then : printf "%s\n" "#define PKCS11_PACK 1" >>confdefs.h fi # END ENABLE PACK # START P11 CONFIG # If P11 kit is installed we want to detect it and install # the module config file and change the library install location. # Check whether --with-p11kitconfigdir was given. if test ${with_p11kitconfigdir+y} then : withval=$with_p11kitconfigdir; fi p11kitconfigdir=$with_p11kitconfigdir # Check whether --with-p11kitmoduledir was given. if test ${with_p11kitmoduledir+y} then : withval=$with_p11kitmoduledir; fi p11kitmoduledir=$with_p11kitmoduledir # set havep11kit based on if P11kit is installed, then: # 1. execute function do_p11kit_config # 2. set the makefile flag HAVE_P11_KIT pkg_failed=no { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for p11-kit-1" >&5 printf %s "checking for p11-kit-1... " >&6; } if test -n "$P11KIT_CFLAGS"; then pkg_cv_P11KIT_CFLAGS="$P11KIT_CFLAGS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"p11-kit-1\""; } >&5 ($PKG_CONFIG --exists --print-errors "p11-kit-1") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_P11KIT_CFLAGS=`$PKG_CONFIG --cflags "p11-kit-1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test -n "$P11KIT_LIBS"; then pkg_cv_P11KIT_LIBS="$P11KIT_LIBS" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"p11-kit-1\""; } >&5 ($PKG_CONFIG --exists --print-errors "p11-kit-1") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_P11KIT_LIBS=`$PKG_CONFIG --libs "p11-kit-1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi if test $pkg_failed = yes; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then _pkg_short_errors_supported=yes else _pkg_short_errors_supported=no fi if test $_pkg_short_errors_supported = yes; then P11KIT_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "p11-kit-1" 2>&1` else P11KIT_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "p11-kit-1" 2>&1` fi # Put the nasty error message in config.log where it belongs echo "$P11KIT_PKG_ERRORS" >&5 have_p11kit=no elif test $pkg_failed = untried; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } have_p11kit=no else P11KIT_CFLAGS=$pkg_cv_P11KIT_CFLAGS P11KIT_LIBS=$pkg_cv_P11KIT_LIBS { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } have_p11kit=yes fi if test "x$have_p11kit" = "xyes" then : if test -z "$p11kitmoduledir" then : if test -n "$P11_MODULE_PATH"; then pkg_cv_P11_MODULE_PATH="$P11_MODULE_PATH" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"p11-kit-1\""; } >&5 ($PKG_CONFIG --exists --print-errors "p11-kit-1") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_P11_MODULE_PATH=`$PKG_CONFIG --variable="p11_module_path" "p11-kit-1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi P11_MODULE_PATH=$pkg_cv_P11_MODULE_PATH if test "x$P11_MODULE_PATH" = x"" then : fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking p11 module path" >&5 printf %s "checking p11 module path... " >&6; } if test "x$P11_MODULE_PATH" = "x" then : { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "Unable to identify p11 module path. See \`config.log' for more details" "$LINENO" 5; } fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $P11_MODULE_PATH" >&5 printf "%s\n" "$P11_MODULE_PATH" >&6; } else $as_nop P11_MODULE_PATH=$p11kitmoduledir fi if test -z "$p11kitconfigdir" then : if test -n "$P11_CONFIGS_PATH"; then pkg_cv_P11_CONFIGS_PATH="$P11_CONFIGS_PATH" elif test -n "$PKG_CONFIG"; then if test -n "$PKG_CONFIG" && \ { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"p11-kit-1\""; } >&5 ($PKG_CONFIG --exists --print-errors "p11-kit-1") 2>&5 ac_status=$? printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5 test $ac_status = 0; }; then pkg_cv_P11_CONFIGS_PATH=`$PKG_CONFIG --variable="p11_module_configs" "p11-kit-1" 2>/dev/null` test "x$?" != "x0" && pkg_failed=yes else pkg_failed=yes fi else pkg_failed=untried fi P11_CONFIGS_PATH=$pkg_cv_P11_CONFIGS_PATH if test "x$P11_CONFIGS_PATH" = x"" then : fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking p11 configs path" >&5 printf %s "checking p11 configs path... " >&6; } if test "x$P11_CONFIGS_PATH" = "x" then : { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "Unable to identify p11 configs path. See \`config.log' for more details" "$LINENO" 5; } fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $P11_CONFIGS_PATH" >&5 printf "%s\n" "$P11_CONFIGS_PATH" >&6; } else $as_nop P11_CONFIGS_PATH=$p11kitconfigdir fi fi if test "x$have_p11kit" = "xyes"; then HAVE_P11KIT_TRUE= HAVE_P11KIT_FALSE='#' else HAVE_P11KIT_TRUE='#' HAVE_P11KIT_FALSE= fi # check for --prefix and set flag HAVE_PREFIX if found # do not change install location if --prefix is given and with P11_KIT found if test ! -z "$(prefix)"; then HAVE_PREFIX_TRUE= HAVE_PREFIX_FALSE='#' else HAVE_PREFIX_TRUE='#' HAVE_PREFIX_FALSE= fi # END P11 CONFIG { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether byte ordering is bigendian" >&5 printf %s "checking whether byte ordering is bigendian... " >&6; } if test ${ac_cv_c_bigendian+y} then : printf %s "(cached) " >&6 else $as_nop ac_cv_c_bigendian=unknown # See if we're dealing with a universal compiler. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #ifndef __APPLE_CC__ not a universal capable compiler #endif typedef int dummy; _ACEOF if ac_fn_c_try_compile "$LINENO" then : # Check for potential -arch flags. It is not universal unless # there are at least two -arch flags with different values. ac_arch= ac_prev= for ac_word in $CC $CFLAGS $CPPFLAGS $LDFLAGS; do if test -n "$ac_prev"; then case $ac_word in i?86 | x86_64 | ppc | ppc64) if test -z "$ac_arch" || test "$ac_arch" = "$ac_word"; then ac_arch=$ac_word else ac_cv_c_bigendian=universal break fi ;; esac ac_prev= elif test "x$ac_word" = "x-arch"; then ac_prev=arch fi done fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext if test $ac_cv_c_bigendian = unknown; then # See if sys/param.h defines the BYTE_ORDER macro. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include int main (void) { #if ! (defined BYTE_ORDER && defined BIG_ENDIAN \ && defined LITTLE_ENDIAN && BYTE_ORDER && BIG_ENDIAN \ && LITTLE_ENDIAN) bogus endian macros #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : # It does; now see whether it defined to BIG_ENDIAN or not. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include #include int main (void) { #if BYTE_ORDER != BIG_ENDIAN not big endian #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_c_bigendian=yes else $as_nop ac_cv_c_bigendian=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi if test $ac_cv_c_bigendian = unknown; then # See if defines _LITTLE_ENDIAN or _BIG_ENDIAN (e.g., Solaris). cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main (void) { #if ! (defined _LITTLE_ENDIAN || defined _BIG_ENDIAN) bogus endian macros #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : # It does; now see whether it defined to _BIG_ENDIAN or not. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #include int main (void) { #ifndef _BIG_ENDIAN not big endian #endif ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ac_cv_c_bigendian=yes else $as_nop ac_cv_c_bigendian=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext fi if test $ac_cv_c_bigendian = unknown; then # Compile a test program. if test "$cross_compiling" = yes then : # Try to guess by grepping values from an object file. cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ unsigned short int ascii_mm[] = { 0x4249, 0x4765, 0x6E44, 0x6961, 0x6E53, 0x7953, 0 }; unsigned short int ascii_ii[] = { 0x694C, 0x5454, 0x656C, 0x6E45, 0x6944, 0x6E61, 0 }; int use_ascii (int i) { return ascii_mm[i] + ascii_ii[i]; } unsigned short int ebcdic_ii[] = { 0x89D3, 0xE3E3, 0x8593, 0x95C5, 0x89C4, 0x9581, 0 }; unsigned short int ebcdic_mm[] = { 0xC2C9, 0xC785, 0x95C4, 0x8981, 0x95E2, 0xA8E2, 0 }; int use_ebcdic (int i) { return ebcdic_mm[i] + ebcdic_ii[i]; } extern int foo; int main (void) { return use_ascii (foo) == use_ebcdic (foo); ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : if grep BIGenDianSyS conftest.$ac_objext >/dev/null; then ac_cv_c_bigendian=yes fi if grep LiTTleEnDian conftest.$ac_objext >/dev/null ; then if test "$ac_cv_c_bigendian" = unknown; then ac_cv_c_bigendian=no else # finding both strings is unlikely to happen, but who knows? ac_cv_c_bigendian=unknown fi fi fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext else $as_nop cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ $ac_includes_default int main (void) { /* Are we little or big endian? From Harbison&Steele. */ union { long int l; char c[sizeof (long int)]; } u; u.l = 1; return u.c[sizeof (long int) - 1] == 1; ; return 0; } _ACEOF if ac_fn_c_try_run "$LINENO" then : ac_cv_c_bigendian=no else $as_nop ac_cv_c_bigendian=yes fi rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \ conftest.$ac_objext conftest.beam conftest.$ac_ext fi fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_bigendian" >&5 printf "%s\n" "$ac_cv_c_bigendian" >&6; } case $ac_cv_c_bigendian in #( yes) printf "%s\n" "#define WORDS_BIGENDIAN 1" >>confdefs.h ;; #( no) ;; #( universal) printf "%s\n" "#define AC_APPLE_UNIVERSAL_BUILD 1" >>confdefs.h ;; #( *) as_fn_error $? "unknown endianness presetting ac_cv_c_bigendian=no (or yes) will help" "$LINENO" 5 ;; esac # Good information on adding flags, and dealing with compilers can be found here: # https://github.com/zcash/zcash/issues/1832 # https://github.com/kmcallister/autoharden/ if test x"$enable_hardening" != xno then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wall" >&5 printf %s "checking whether C compiler accepts -Wall... " >&6; } if test ${ax_cv_check_cflags___Wall+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wall" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___Wall=yes else $as_nop ax_cv_check_cflags___Wall=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wall" >&5 printf "%s\n" "$ax_cv_check_cflags___Wall" >&6; } if test "x$ax_cv_check_cflags___Wall" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wall" else $as_nop as_fn_error $? "Cannot enable -Wall, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wextra" >&5 printf %s "checking whether C compiler accepts -Wextra... " >&6; } if test ${ax_cv_check_cflags___Wextra+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wextra" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___Wextra=yes else $as_nop ax_cv_check_cflags___Wextra=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wextra" >&5 printf "%s\n" "$ax_cv_check_cflags___Wextra" >&6; } if test "x$ax_cv_check_cflags___Wextra" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wextra" else $as_nop as_fn_error $? "Cannot enable -Wextra, consider configuring with --disable-hardening" "$LINENO" 5 fi if test "x$ax_is_release" = "xno" then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Werror" >&5 printf %s "checking whether C compiler accepts -Werror... " >&6; } if test ${ax_cv_check_cflags___Werror+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Werror" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___Werror=yes else $as_nop ax_cv_check_cflags___Werror=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Werror" >&5 printf "%s\n" "$ax_cv_check_cflags___Werror" >&6; } if test "x$ax_cv_check_cflags___Werror" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Werror" else $as_nop as_fn_error $? "Cannot enable -Werror, consider configuring with --disable-hardening" "$LINENO" 5 fi fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wformat" >&5 printf %s "checking whether C compiler accepts -Wformat... " >&6; } if test ${ax_cv_check_cflags___Wformat+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wformat" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___Wformat=yes else $as_nop ax_cv_check_cflags___Wformat=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wformat" >&5 printf "%s\n" "$ax_cv_check_cflags___Wformat" >&6; } if test "x$ax_cv_check_cflags___Wformat" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wformat" else $as_nop as_fn_error $? "Cannot enable -Wformat, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wformat-security" >&5 printf %s "checking whether C compiler accepts -Wformat-security... " >&6; } if test ${ax_cv_check_cflags___Wformat_security+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wformat-security" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___Wformat_security=yes else $as_nop ax_cv_check_cflags___Wformat_security=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wformat_security" >&5 printf "%s\n" "$ax_cv_check_cflags___Wformat_security" >&6; } if test "x$ax_cv_check_cflags___Wformat_security" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wformat-security" else $as_nop as_fn_error $? "Cannot enable -Wformat-security, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wstack-protector" >&5 printf %s "checking whether C compiler accepts -Wstack-protector... " >&6; } if test ${ax_cv_check_cflags___Wstack_protector+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wstack-protector" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___Wstack_protector=yes else $as_nop ax_cv_check_cflags___Wstack_protector=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wstack_protector" >&5 printf "%s\n" "$ax_cv_check_cflags___Wstack_protector" >&6; } if test "x$ax_cv_check_cflags___Wstack_protector" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wstack-protector" else $as_nop as_fn_error $? "Cannot enable -Wstack-protector, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fstack-protector-all" >&5 printf %s "checking whether C compiler accepts -fstack-protector-all... " >&6; } if test ${ax_cv_check_cflags___fstack_protector_all+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fstack-protector-all" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___fstack_protector_all=yes else $as_nop ax_cv_check_cflags___fstack_protector_all=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fstack_protector_all" >&5 printf "%s\n" "$ax_cv_check_cflags___fstack_protector_all" >&6; } if test "x$ax_cv_check_cflags___fstack_protector_all" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fstack-protector-all" else $as_nop as_fn_error $? "Cannot enable -fstack-protector-all, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Wstrict-overflow=5" >&5 printf %s "checking whether C compiler accepts -Wstrict-overflow=5... " >&6; } if test ${ax_cv_check_cflags___Wstrict_overflow_5+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Wstrict-overflow=5" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___Wstrict_overflow_5=yes else $as_nop ax_cv_check_cflags___Wstrict_overflow_5=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Wstrict_overflow_5" >&5 printf "%s\n" "$ax_cv_check_cflags___Wstrict_overflow_5" >&6; } if test "x$ax_cv_check_cflags___Wstrict_overflow_5" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -Wstrict-overflow=5" else $as_nop as_fn_error $? "Cannot enable -Wstrict-overflow=5, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -O2" >&5 printf %s "checking whether C compiler accepts -O2... " >&6; } if test ${ax_cv_check_cflags___O2+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -O2" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___O2=yes else $as_nop ax_cv_check_cflags___O2=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___O2" >&5 printf "%s\n" "$ax_cv_check_cflags___O2" >&6; } if test "x$ax_cv_check_cflags___O2" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -O2" else $as_nop as_fn_error $? "Cannot enable -O2, consider configuring with --disable-hardening" "$LINENO" 5 fi ac_save_cflags=$CFLAGS ac_cwerror_flag=yes { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -Werror" >&5 printf %s "checking whether C compiler accepts -Werror... " >&6; } if test ${ax_cv_check_cflags___Werror+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -Werror" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___Werror=yes else $as_nop ax_cv_check_cflags___Werror=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___Werror" >&5 printf "%s\n" "$ax_cv_check_cflags___Werror" >&6; } if test "x$ax_cv_check_cflags___Werror" = xyes then : CFLAGS="$CFLAGS -Werror" else $as_nop : fi ax_add_fortify_3_failed= { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether to add -D_FORTIFY_SOURCE=3 to CPPFLAGS" >&5 printf %s "checking whether to add -D_FORTIFY_SOURCE=3 to CPPFLAGS... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { #ifndef _FORTIFY_SOURCE return 0; #else _FORTIFY_SOURCE_already_defined; #endif ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #define _FORTIFY_SOURCE 3 #include int main() { char *s = " "; strcpy(s, "x"); return strlen(s)-1; } _ACEOF if ac_fn_c_try_link "$LINENO" then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } CFLAGS=$ac_save_cflags CPPFLAGS="$CPPFLAGS -D_FORTIFY_SOURCE=3" else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } CFLAGS=$ac_save_cflags ax_add_fortify_3_failed=1 fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } CFLAGS=$ac_save_cflags ax_add_fortify_3_failed=1 fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext if test -n "$ax_add_fortify_3_failed" then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether to add -D_FORTIFY_SOURCE=2 to CPPFLAGS" >&5 printf %s "checking whether to add -D_FORTIFY_SOURCE=2 to CPPFLAGS... " >&6; } cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { #ifndef _FORTIFY_SOURCE return 0; #else _FORTIFY_SOURCE_already_defined; #endif ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ #define _FORTIFY_SOURCE 2 #include int main(void) { char *s = " "; strcpy(s, "x"); return strlen(s)-1; } _ACEOF if ac_fn_c_try_link "$LINENO" then : { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5 printf "%s\n" "yes" >&6; } CFLAGS=$ac_save_cflags CPPFLAGS="$CPPFLAGS -D_FORTIFY_SOURCE=2" else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } CFLAGS=$ac_save_cflags fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5 printf "%s\n" "no" >&6; } CFLAGS=$ac_save_cflags fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fPIC" >&5 printf %s "checking whether C compiler accepts -fPIC... " >&6; } if test ${ax_cv_check_cflags___fPIC+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fPIC" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___fPIC=yes else $as_nop ax_cv_check_cflags___fPIC=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fPIC" >&5 printf "%s\n" "$ax_cv_check_cflags___fPIC" >&6; } if test "x$ax_cv_check_cflags___fPIC" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fPIC" else $as_nop as_fn_error $? "Cannot enable -fPIC, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -shared" >&5 printf %s "checking whether the linker accepts -shared... " >&6; } if test ${ax_cv_check_ldflags___shared+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS -shared" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ax_cv_check_ldflags___shared=yes else $as_nop ax_cv_check_ldflags___shared=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___shared" >&5 printf "%s\n" "$ax_cv_check_ldflags___shared" >&6; } if test "x$ax_cv_check_ldflags___shared" = xyes then : EXTRA_LDFLAGS="$EXTRA_LDFLAGS -shared" else $as_nop as_fn_error $? "Cannot enable -shared, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fPIE" >&5 printf %s "checking whether C compiler accepts -fPIE... " >&6; } if test ${ax_cv_check_cflags___fPIE+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fPIE" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___fPIE=yes else $as_nop ax_cv_check_cflags___fPIE=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fPIE" >&5 printf "%s\n" "$ax_cv_check_cflags___fPIE" >&6; } if test "x$ax_cv_check_cflags___fPIE" = xyes then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fPIE" else $as_nop as_fn_error $? "Cannot enable -fPIE, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -pie" >&5 printf %s "checking whether the linker accepts -pie... " >&6; } if test ${ax_cv_check_ldflags___pie+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS -pie" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ax_cv_check_ldflags___pie=yes else $as_nop ax_cv_check_ldflags___pie=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___pie" >&5 printf "%s\n" "$ax_cv_check_ldflags___pie" >&6; } if test "x$ax_cv_check_ldflags___pie" = xyes then : EXTRA_LDFLAGS="$EXTRA_LDFLAGS -pie" else $as_nop as_fn_error $? "Cannot enable -pie, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -Wl,-z,relro" >&5 printf %s "checking whether the linker accepts -Wl,-z,relro... " >&6; } if test ${ax_cv_check_ldflags___Wl__z_relro+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS -Wl,-z,relro" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ax_cv_check_ldflags___Wl__z_relro=yes else $as_nop ax_cv_check_ldflags___Wl__z_relro=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___Wl__z_relro" >&5 printf "%s\n" "$ax_cv_check_ldflags___Wl__z_relro" >&6; } if test "x$ax_cv_check_ldflags___Wl__z_relro" = xyes then : EXTRA_LDFLAGS="$EXTRA_LDFLAGS -Wl,-z,relro" else $as_nop as_fn_error $? "Cannot enable -Wl,-z,relro, consider configuring with --disable-hardening" "$LINENO" 5 fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -Wl,-z,now" >&5 printf %s "checking whether the linker accepts -Wl,-z,now... " >&6; } if test ${ax_cv_check_ldflags___Wl__z_now+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS -Wl,-z,now" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ax_cv_check_ldflags___Wl__z_now=yes else $as_nop ax_cv_check_ldflags___Wl__z_now=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___Wl__z_now" >&5 printf "%s\n" "$ax_cv_check_ldflags___Wl__z_now" >&6; } if test "x$ax_cv_check_ldflags___Wl__z_now" = xyes then : EXTRA_LDFLAGS="$EXTRA_LDFLAGS -Wl,-z,now" else $as_nop as_fn_error $? "Cannot enable -Wl,-z,now, consider configuring with --disable-hardening" "$LINENO" 5 fi else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: Compiling with --disable-hardening is dangerous! You should consider fixing the configure script compiler flags and submitting patches upstream!" >&5 printf "%s\n" "$as_me: WARNING: Compiling with --disable-hardening is dangerous! You should consider fixing the configure script compiler flags and submitting patches upstream!" >&2;} fi # Best attempt, strip unused stuff from the binary to reduce size. # Rather than nesting these and making them ugly just use a counter. { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -fdata-sections" >&5 printf %s "checking whether C compiler accepts -fdata-sections... " >&6; } if test ${ax_cv_check_cflags___fdata_sections+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -fdata-sections" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___fdata_sections=yes else $as_nop ax_cv_check_cflags___fdata_sections=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___fdata_sections" >&5 printf "%s\n" "$ax_cv_check_cflags___fdata_sections" >&6; } if test "x$ax_cv_check_cflags___fdata_sections" = xyes then : strip=y else $as_nop : fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether C compiler accepts -ffunction-sections" >&5 printf %s "checking whether C compiler accepts -ffunction-sections... " >&6; } if test ${ax_cv_check_cflags___ffunction_sections+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$CFLAGS CFLAGS="$CFLAGS -ffunction-sections" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_compile "$LINENO" then : ax_cv_check_cflags___ffunction_sections=yes else $as_nop ax_cv_check_cflags___ffunction_sections=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext CFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_cflags___ffunction_sections" >&5 printf "%s\n" "$ax_cv_check_cflags___ffunction_sections" >&6; } if test "x$ax_cv_check_cflags___ffunction_sections" = xyes then : strip="y$strip" else $as_nop : fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the linker accepts -Wl,--gc-sections" >&5 printf %s "checking whether the linker accepts -Wl,--gc-sections... " >&6; } if test ${ax_cv_check_ldflags___Wl___gc_sections+y} then : printf %s "(cached) " >&6 else $as_nop ax_check_save_flags=$LDFLAGS LDFLAGS="$LDFLAGS -Wl,--gc-sections" cat confdefs.h - <<_ACEOF >conftest.$ac_ext /* end confdefs.h. */ int main (void) { ; return 0; } _ACEOF if ac_fn_c_try_link "$LINENO" then : ax_cv_check_ldflags___Wl___gc_sections=yes else $as_nop ax_cv_check_ldflags___Wl___gc_sections=no fi rm -f core conftest.err conftest.$ac_objext conftest.beam \ conftest$ac_exeext conftest.$ac_ext LDFLAGS=$ax_check_save_flags fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ax_cv_check_ldflags___Wl___gc_sections" >&5 printf "%s\n" "$ax_cv_check_ldflags___Wl___gc_sections" >&6; } if test "x$ax_cv_check_ldflags___Wl___gc_sections" = xyes then : strip="y$strip" else $as_nop : fi if test x"$strip" = xyyy then : EXTRA_CFLAGS="$EXTRA_CFLAGS -fdata-sections -ffunction-sections" EXTRA_LDFLAGS="$EXTRA_LDFLAGS -Wl,--gc-sections" else $as_nop { printf "%s\n" "$as_me:${as_lineno-$LINENO}: Not using compiler options to reduce binary size!" >&5 printf "%s\n" "$as_me: Not using compiler options to reduce binary size!" >&6;} fi cat >confcache <<\_ACEOF # This file is a shell script that caches the results of configure # tests run on this system so they can be shared between configure # scripts and configure runs, see configure's option --config-cache. # It is not useful on other systems. If it contains results you don't # want to keep, you may remove or edit it. # # config.status only pays attention to the cache file if you give it # the --recheck option to rerun configure. # # `ac_cv_env_foo' variables (set or unset) will be overridden when # loading this file, other *unset* `ac_cv_foo' will be assigned the # following values. _ACEOF # The following way of writing the cache mishandles newlines in values, # but we know of no workaround that is simple, portable, and efficient. # So, we kill variables containing newlines. # Ultrix sh set writes to stderr and can't be redirected directly, # and sets the high bit in the cache file unless we assign to the vars. ( for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do eval ac_val=\$$ac_var case $ac_val in #( *${as_nl}*) case $ac_var in #( *_cv_*) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5 printf "%s\n" "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;; esac case $ac_var in #( _ | IFS | as_nl) ;; #( BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #( *) { eval $ac_var=; unset $ac_var;} ;; esac ;; esac done (set) 2>&1 | case $as_nl`(ac_space=' '; set) 2>&1` in #( *${as_nl}ac_space=\ *) # `set' does not quote correctly, so add quotes: double-quote # substitution turns \\\\ into \\, and sed turns \\ into \. sed -n \ "s/'/'\\\\''/g; s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p" ;; #( *) # `set' quotes correctly as required by POSIX, so do not add quotes. sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p" ;; esac | sort ) | sed ' /^ac_cv_env_/b end t clear :clear s/^\([^=]*\)=\(.*[{}].*\)$/test ${\1+y} || &/ t end s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/ :end' >>confcache if diff "$cache_file" confcache >/dev/null 2>&1; then :; else if test -w "$cache_file"; then if test "x$cache_file" != "x/dev/null"; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5 printf "%s\n" "$as_me: updating cache $cache_file" >&6;} if test ! -f "$cache_file" || test -h "$cache_file"; then cat confcache >"$cache_file" else case $cache_file in #( */* | ?:*) mv -f confcache "$cache_file"$$ && mv -f "$cache_file"$$ "$cache_file" ;; #( *) mv -f confcache "$cache_file" ;; esac fi fi else { printf "%s\n" "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5 printf "%s\n" "$as_me: not updating unwritable cache $cache_file" >&6;} fi fi rm -f confcache test "x$prefix" = xNONE && prefix=$ac_default_prefix # Let make expand exec_prefix. test "x$exec_prefix" = xNONE && exec_prefix='${prefix}' DEFS=-DHAVE_CONFIG_H ac_libobjs= ac_ltlibobjs= U= for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue # 1. Remove the extension, and $U if already installed. ac_script='s/\$U\././;s/\.o$//;s/\.obj$//' ac_i=`printf "%s\n" "$ac_i" | sed "$ac_script"` # 2. Prepend LIBOBJDIR. When used with automake>=1.10 LIBOBJDIR # will be set to the directory where LIBOBJS objects are built. as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext" as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo' done LIBOBJS=$ac_libobjs LTLIBOBJS=$ac_ltlibobjs { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking that generated files are newer than configure" >&5 printf %s "checking that generated files are newer than configure... " >&6; } if test -n "$am_sleep_pid"; then # Hide warnings about reused PIDs. wait $am_sleep_pid 2>/dev/null fi { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: done" >&5 printf "%s\n" "done" >&6; } if test -z "${AMDEP_TRUE}" && test -z "${AMDEP_FALSE}"; then as_fn_error $? "conditional \"AMDEP\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${am__fastdepCC_TRUE}" && test -z "${am__fastdepCC_FALSE}"; then as_fn_error $? "conditional \"am__fastdepCC\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -n "$EXEEXT"; then am__EXEEXT_TRUE= am__EXEEXT_FALSE='#' else am__EXEEXT_TRUE='#' am__EXEEXT_FALSE= fi if test -z "${CODE_COVERAGE_ENABLED_TRUE}" && test -z "${CODE_COVERAGE_ENABLED_FALSE}"; then as_fn_error $? "conditional \"CODE_COVERAGE_ENABLED\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE}" && test -z "${AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE}"; then as_fn_error $? "conditional \"AUTOCONF_CODE_COVERAGE_2019_01_06\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${HAVE_OSSL3_TRUE}" && test -z "${HAVE_OSSL3_FALSE}"; then as_fn_error $? "conditional \"HAVE_OSSL3\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${HAVE_LD_VERSION_SCRIPT_TRUE}" && test -z "${HAVE_LD_VERSION_SCRIPT_FALSE}"; then as_fn_error $? "conditional \"HAVE_LD_VERSION_SCRIPT\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${HAVE_FAPI_TRUE}" && test -z "${HAVE_FAPI_FALSE}"; then as_fn_error $? "conditional \"HAVE_FAPI\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${FUZZING_TRUE}" && test -z "${FUZZING_FALSE}"; then as_fn_error $? "conditional \"FUZZING\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${ENABLE_ASAN_TRUE}" && test -z "${ENABLE_ASAN_FALSE}"; then as_fn_error $? "conditional \"ENABLE_ASAN\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${UNIT_TRUE}" && test -z "${UNIT_FALSE}"; then as_fn_error $? "conditional \"UNIT\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${ENABLE_INTEGRATION_TRUE}" && test -z "${ENABLE_INTEGRATION_FALSE}"; then as_fn_error $? "conditional \"ENABLE_INTEGRATION\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${HAVE_P11KIT_TRUE}" && test -z "${HAVE_P11KIT_FALSE}"; then as_fn_error $? "conditional \"HAVE_P11KIT\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi if test -z "${HAVE_PREFIX_TRUE}" && test -z "${HAVE_PREFIX_FALSE}"; then as_fn_error $? "conditional \"HAVE_PREFIX\" was never defined. Usually this means the macro was only invoked conditionally." "$LINENO" 5 fi : "${CONFIG_STATUS=./config.status}" ac_write_fail=0 ac_clean_files_save=$ac_clean_files ac_clean_files="$ac_clean_files $CONFIG_STATUS" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5 printf "%s\n" "$as_me: creating $CONFIG_STATUS" >&6;} as_write_fail=0 cat >$CONFIG_STATUS <<_ASEOF || as_write_fail=1 #! $SHELL # Generated by $as_me. # Run this file to recreate the current configuration. # Compiler output produced by configure, useful for debugging # configure, is in config.log if it exists. debug=false ac_cs_recheck=false ac_cs_silent=false SHELL=\${CONFIG_SHELL-$SHELL} export SHELL _ASEOF cat >>$CONFIG_STATUS <<\_ASEOF || as_write_fail=1 ## -------------------- ## ## M4sh Initialization. ## ## -------------------- ## # Be more Bourne compatible DUALCASE=1; export DUALCASE # for MKS sh as_nop=: if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1 then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST else $as_nop case `(set -o) 2>/dev/null` in #( *posix*) : set -o posix ;; #( *) : ;; esac fi # Reset variables that may have inherited troublesome values from # the environment. # IFS needs to be set, to space, tab, and newline, in precisely that order. # (If _AS_PATH_WALK were called with IFS unset, it would have the # side effect of setting IFS to empty, thus disabling word splitting.) # Quoting is to prevent editors from complaining about space-tab. as_nl=' ' export as_nl IFS=" "" $as_nl" PS1='$ ' PS2='> ' PS4='+ ' # Ensure predictable behavior from utilities with locale-dependent output. LC_ALL=C export LC_ALL LANGUAGE=C export LANGUAGE # We cannot yet rely on "unset" to work, but we need these variables # to be unset--not just set to an empty or harmless value--now, to # avoid bugs in old shells (e.g. pre-3.0 UWIN ksh). This construct # also avoids known problems related to "unset" and subshell syntax # in other old shells (e.g. bash 2.01 and pdksh 5.2.14). for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH do eval test \${$as_var+y} \ && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || : done # Ensure that fds 0, 1, and 2 are open. if (exec 3>&0) 2>/dev/null; then :; else exec 0&1) 2>/dev/null; then :; else exec 1>/dev/null; fi if (exec 3>&2) ; then :; else exec 2>/dev/null; fi # The user is always right. if ${PATH_SEPARATOR+false} :; then PATH_SEPARATOR=: (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && { (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 || PATH_SEPARATOR=';' } fi # Find who we are. Look in the path if we contain no directory separator. as_myself= case $0 in #(( *[\\/]* ) as_myself=$0 ;; *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR for as_dir in $PATH do IFS=$as_save_IFS case $as_dir in #((( '') as_dir=./ ;; */) ;; *) as_dir=$as_dir/ ;; esac test -r "$as_dir$0" && as_myself=$as_dir$0 && break done IFS=$as_save_IFS ;; esac # We did not find ourselves, most probably we were run as `sh COMMAND' # in which case we are not to be found in the path. if test "x$as_myself" = x; then as_myself=$0 fi if test ! -f "$as_myself"; then printf "%s\n" "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2 exit 1 fi # as_fn_error STATUS ERROR [LINENO LOG_FD] # ---------------------------------------- # Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are # provided, also output the error to LOG_FD, referencing LINENO. Then exit the # script with STATUS, using 1 if that was 0. as_fn_error () { as_status=$1; test $as_status -eq 0 && as_status=1 if test "$4"; then as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: $2" >&$4 fi printf "%s\n" "$as_me: error: $2" >&2 as_fn_exit $as_status } # as_fn_error # as_fn_set_status STATUS # ----------------------- # Set $? to STATUS, without forking. as_fn_set_status () { return $1 } # as_fn_set_status # as_fn_exit STATUS # ----------------- # Exit the shell with STATUS, even in a "trap 0" or "set -e" context. as_fn_exit () { set +e as_fn_set_status $1 exit $1 } # as_fn_exit # as_fn_unset VAR # --------------- # Portably unset VAR. as_fn_unset () { { eval $1=; unset $1;} } as_unset=as_fn_unset # as_fn_append VAR VALUE # ---------------------- # Append the text in VALUE to the end of the definition contained in VAR. Take # advantage of any shell optimizations that allow amortized linear growth over # repeated appends, instead of the typical quadratic growth present in naive # implementations. if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null then : eval 'as_fn_append () { eval $1+=\$2 }' else $as_nop as_fn_append () { eval $1=\$$1\$2 } fi # as_fn_append # as_fn_arith ARG... # ------------------ # Perform arithmetic evaluation on the ARGs, and store the result in the # global $as_val. Take advantage of shells that can avoid forks. The arguments # must be portable across $(()) and expr. if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null then : eval 'as_fn_arith () { as_val=$(( $* )) }' else $as_nop as_fn_arith () { as_val=`expr "$@" || test $? -eq 1` } fi # as_fn_arith if expr a : '\(a\)' >/dev/null 2>&1 && test "X`expr 00001 : '.*\(...\)'`" = X001; then as_expr=expr else as_expr=false fi if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then as_basename=basename else as_basename=false fi if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then as_dirname=dirname else as_dirname=false fi as_me=`$as_basename -- "$0" || $as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \ X"$0" : 'X\(//\)$' \| \ X"$0" : 'X\(/\)' \| . 2>/dev/null || printf "%s\n" X/"$0" | sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/ q } /^X\/\(\/\/\)$/{ s//\1/ q } /^X\/\(\/\).*/{ s//\1/ q } s/.*/./; q'` # Avoid depending upon Character Ranges. as_cr_letters='abcdefghijklmnopqrstuvwxyz' as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ' as_cr_Letters=$as_cr_letters$as_cr_LETTERS as_cr_digits='0123456789' as_cr_alnum=$as_cr_Letters$as_cr_digits # Determine whether it's possible to make 'echo' print without a newline. # These variables are no longer used directly by Autoconf, but are AC_SUBSTed # for compatibility with existing Makefiles. ECHO_C= ECHO_N= ECHO_T= case `echo -n x` in #((((( -n*) case `echo 'xy\c'` in *c*) ECHO_T=' ';; # ECHO_T is single tab character. xy) ECHO_C='\c';; *) echo `echo ksh88 bug on AIX 6.1` > /dev/null ECHO_T=' ';; esac;; *) ECHO_N='-n';; esac # For backward compatibility with old third-party macros, we provide # the shell variables $as_echo and $as_echo_n. New code should use # AS_ECHO(["message"]) and AS_ECHO_N(["message"]), respectively. as_echo='printf %s\n' as_echo_n='printf %s' rm -f conf$$ conf$$.exe conf$$.file if test -d conf$$.dir; then rm -f conf$$.dir/conf$$.file else rm -f conf$$.dir mkdir conf$$.dir 2>/dev/null fi if (echo >conf$$.file) 2>/dev/null; then if ln -s conf$$.file conf$$ 2>/dev/null; then as_ln_s='ln -s' # ... but there are two gotchas: # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail. # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable. # In both cases, we have to default to `cp -pR'. ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe || as_ln_s='cp -pR' elif ln conf$$.file conf$$ 2>/dev/null; then as_ln_s=ln else as_ln_s='cp -pR' fi else as_ln_s='cp -pR' fi rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file rmdir conf$$.dir 2>/dev/null # as_fn_mkdir_p # ------------- # Create "$as_dir" as a directory, including parents if necessary. as_fn_mkdir_p () { case $as_dir in #( -*) as_dir=./$as_dir;; esac test -d "$as_dir" || eval $as_mkdir_p || { as_dirs= while :; do case $as_dir in #( *\'*) as_qdir=`printf "%s\n" "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'( *) as_qdir=$as_dir;; esac as_dirs="'$as_qdir' $as_dirs" as_dir=`$as_dirname -- "$as_dir" || $as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$as_dir" : 'X\(//\)[^/]' \| \ X"$as_dir" : 'X\(//\)$' \| \ X"$as_dir" : 'X\(/\)' \| . 2>/dev/null || printf "%s\n" X"$as_dir" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` test -d "$as_dir" && break done test -z "$as_dirs" || eval "mkdir $as_dirs" } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir" } # as_fn_mkdir_p if mkdir -p . 2>/dev/null; then as_mkdir_p='mkdir -p "$as_dir"' else test -d ./-p && rmdir ./-p as_mkdir_p=false fi # as_fn_executable_p FILE # ----------------------- # Test if FILE is an executable regular file. as_fn_executable_p () { test -f "$1" && test -x "$1" } # as_fn_executable_p as_test_x='test -x' as_executable_p=as_fn_executable_p # Sed expression to map a string onto a valid CPP name. as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'" # Sed expression to map a string onto a valid variable name. as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'" exec 6>&1 ## ----------------------------------- ## ## Main body of $CONFIG_STATUS script. ## ## ----------------------------------- ## _ASEOF test $as_write_fail = 0 && chmod +x $CONFIG_STATUS || ac_write_fail=1 cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # Save the log message, to keep $0 and so on meaningful, and to # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" This file was extended by tpm2-pkcs11 $as_me 1.9.1, which was generated by GNU Autoconf 2.71. Invocation command line was CONFIG_FILES = $CONFIG_FILES CONFIG_HEADERS = $CONFIG_HEADERS CONFIG_LINKS = $CONFIG_LINKS CONFIG_COMMANDS = $CONFIG_COMMANDS $ $0 $@ on `(hostname || uname -n) 2>/dev/null | sed 1q` " _ACEOF case $ac_config_files in *" "*) set x $ac_config_files; shift; ac_config_files=$*;; esac case $ac_config_headers in *" "*) set x $ac_config_headers; shift; ac_config_headers=$*;; esac cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 # Files that config.status was made for. config_files="$ac_config_files" config_headers="$ac_config_headers" config_commands="$ac_config_commands" _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 ac_cs_usage="\ \`$as_me' instantiates files and other configuration actions from templates according to the current configuration. Unless the files and actions are specified as TAGs, all are instantiated by default. Usage: $0 [OPTION]... [TAG]... -h, --help print this help, then exit -V, --version print version number and configuration settings, then exit --config print configuration, then exit -q, --quiet, --silent do not print progress messages -d, --debug don't remove temporary files --recheck update $as_me by reconfiguring in the same conditions --file=FILE[:TEMPLATE] instantiate the configuration file FILE --header=FILE[:TEMPLATE] instantiate the configuration header FILE Configuration files: $config_files Configuration headers: $config_headers Configuration commands: $config_commands Report bugs to . tpm2-pkcs11 home page: ." _ACEOF ac_cs_config=`printf "%s\n" "$ac_configure_args" | sed "$ac_safe_unquote"` ac_cs_config_escaped=`printf "%s\n" "$ac_cs_config" | sed "s/^ //; s/'/'\\\\\\\\''/g"` cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config='$ac_cs_config_escaped' ac_cs_version="\\ tpm2-pkcs11 config.status 1.9.1 configured by $0, generated by GNU Autoconf 2.71, with options \\"\$ac_cs_config\\" Copyright (C) 2021 Free Software Foundation, Inc. This config.status script is free software; the Free Software Foundation gives unlimited permission to copy, distribute and modify it." ac_pwd='$ac_pwd' srcdir='$srcdir' INSTALL='$INSTALL' MKDIR_P='$MKDIR_P' AWK='$AWK' test -n "\$AWK" || AWK=awk _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # The default lists apply if the user does not specify any file. ac_need_defaults=: while test $# != 0 do case $1 in --*=?*) ac_option=`expr "X$1" : 'X\([^=]*\)='` ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'` ac_shift=: ;; --*=) ac_option=`expr "X$1" : 'X\([^=]*\)='` ac_optarg= ac_shift=: ;; *) ac_option=$1 ac_optarg=$2 ac_shift=shift ;; esac case $ac_option in # Handling of the options. -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r) ac_cs_recheck=: ;; --version | --versio | --versi | --vers | --ver | --ve | --v | -V ) printf "%s\n" "$ac_cs_version"; exit ;; --config | --confi | --conf | --con | --co | --c ) printf "%s\n" "$ac_cs_config"; exit ;; --debug | --debu | --deb | --de | --d | -d ) debug=: ;; --file | --fil | --fi | --f ) $ac_shift case $ac_optarg in *\'*) ac_optarg=`printf "%s\n" "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;; '') as_fn_error $? "missing file argument" ;; esac as_fn_append CONFIG_FILES " '$ac_optarg'" ac_need_defaults=false;; --header | --heade | --head | --hea ) $ac_shift case $ac_optarg in *\'*) ac_optarg=`printf "%s\n" "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;; esac as_fn_append CONFIG_HEADERS " '$ac_optarg'" ac_need_defaults=false;; --he | --h) # Conflict between --help and --header as_fn_error $? "ambiguous option: \`$1' Try \`$0 --help' for more information.";; --help | --hel | -h ) printf "%s\n" "$ac_cs_usage"; exit ;; -q | -quiet | --quiet | --quie | --qui | --qu | --q \ | -silent | --silent | --silen | --sile | --sil | --si | --s) ac_cs_silent=: ;; # This is an error. -*) as_fn_error $? "unrecognized option: \`$1' Try \`$0 --help' for more information." ;; *) as_fn_append ac_config_targets " $1" ac_need_defaults=false ;; esac shift done ac_configure_extra_args= if $ac_cs_silent; then exec 6>/dev/null ac_configure_extra_args="$ac_configure_extra_args --silent" fi _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 if \$ac_cs_recheck; then set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion shift \printf "%s\n" "running CONFIG_SHELL=$SHELL \$*" >&6 CONFIG_SHELL='$SHELL' export CONFIG_SHELL exec "\$@" fi _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 exec 5>>config.log { echo sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX ## Running $as_me. ## _ASBOX printf "%s\n" "$ac_log" } >&5 _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 # # INIT-COMMANDS # # The HP-UX ksh and POSIX shell print the target directory to stdout # if CDPATH is set. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH sed_quote_subst='$sed_quote_subst' double_quote_subst='$double_quote_subst' delay_variable_subst='$delay_variable_subst' macro_version='`$ECHO "$macro_version" | $SED "$delay_single_quote_subst"`' macro_revision='`$ECHO "$macro_revision" | $SED "$delay_single_quote_subst"`' enable_shared='`$ECHO "$enable_shared" | $SED "$delay_single_quote_subst"`' enable_static='`$ECHO "$enable_static" | $SED "$delay_single_quote_subst"`' pic_mode='`$ECHO "$pic_mode" | $SED "$delay_single_quote_subst"`' enable_fast_install='`$ECHO "$enable_fast_install" | $SED "$delay_single_quote_subst"`' shared_archive_member_spec='`$ECHO "$shared_archive_member_spec" | $SED "$delay_single_quote_subst"`' SHELL='`$ECHO "$SHELL" | $SED "$delay_single_quote_subst"`' ECHO='`$ECHO "$ECHO" | $SED "$delay_single_quote_subst"`' PATH_SEPARATOR='`$ECHO "$PATH_SEPARATOR" | $SED "$delay_single_quote_subst"`' host_alias='`$ECHO "$host_alias" | $SED "$delay_single_quote_subst"`' host='`$ECHO "$host" | $SED "$delay_single_quote_subst"`' host_os='`$ECHO "$host_os" | $SED "$delay_single_quote_subst"`' build_alias='`$ECHO "$build_alias" | $SED "$delay_single_quote_subst"`' build='`$ECHO "$build" | $SED "$delay_single_quote_subst"`' build_os='`$ECHO "$build_os" | $SED "$delay_single_quote_subst"`' SED='`$ECHO "$SED" | $SED "$delay_single_quote_subst"`' Xsed='`$ECHO "$Xsed" | $SED "$delay_single_quote_subst"`' GREP='`$ECHO "$GREP" | $SED "$delay_single_quote_subst"`' EGREP='`$ECHO "$EGREP" | $SED "$delay_single_quote_subst"`' FGREP='`$ECHO "$FGREP" | $SED "$delay_single_quote_subst"`' LD='`$ECHO "$LD" | $SED "$delay_single_quote_subst"`' NM='`$ECHO "$NM" | $SED "$delay_single_quote_subst"`' LN_S='`$ECHO "$LN_S" | $SED "$delay_single_quote_subst"`' max_cmd_len='`$ECHO "$max_cmd_len" | $SED "$delay_single_quote_subst"`' ac_objext='`$ECHO "$ac_objext" | $SED "$delay_single_quote_subst"`' exeext='`$ECHO "$exeext" | $SED "$delay_single_quote_subst"`' lt_unset='`$ECHO "$lt_unset" | $SED "$delay_single_quote_subst"`' lt_SP2NL='`$ECHO "$lt_SP2NL" | $SED "$delay_single_quote_subst"`' lt_NL2SP='`$ECHO "$lt_NL2SP" | $SED "$delay_single_quote_subst"`' lt_cv_to_host_file_cmd='`$ECHO "$lt_cv_to_host_file_cmd" | $SED "$delay_single_quote_subst"`' lt_cv_to_tool_file_cmd='`$ECHO "$lt_cv_to_tool_file_cmd" | $SED "$delay_single_quote_subst"`' reload_flag='`$ECHO "$reload_flag" | $SED "$delay_single_quote_subst"`' reload_cmds='`$ECHO "$reload_cmds" | $SED "$delay_single_quote_subst"`' FILECMD='`$ECHO "$FILECMD" | $SED "$delay_single_quote_subst"`' OBJDUMP='`$ECHO "$OBJDUMP" | $SED "$delay_single_quote_subst"`' deplibs_check_method='`$ECHO "$deplibs_check_method" | $SED "$delay_single_quote_subst"`' file_magic_cmd='`$ECHO "$file_magic_cmd" | $SED "$delay_single_quote_subst"`' file_magic_glob='`$ECHO "$file_magic_glob" | $SED "$delay_single_quote_subst"`' want_nocaseglob='`$ECHO "$want_nocaseglob" | $SED "$delay_single_quote_subst"`' DLLTOOL='`$ECHO "$DLLTOOL" | $SED "$delay_single_quote_subst"`' sharedlib_from_linklib_cmd='`$ECHO "$sharedlib_from_linklib_cmd" | $SED "$delay_single_quote_subst"`' AR='`$ECHO "$AR" | $SED "$delay_single_quote_subst"`' lt_ar_flags='`$ECHO "$lt_ar_flags" | $SED "$delay_single_quote_subst"`' AR_FLAGS='`$ECHO "$AR_FLAGS" | $SED "$delay_single_quote_subst"`' archiver_list_spec='`$ECHO "$archiver_list_spec" | $SED "$delay_single_quote_subst"`' STRIP='`$ECHO "$STRIP" | $SED "$delay_single_quote_subst"`' RANLIB='`$ECHO "$RANLIB" | $SED "$delay_single_quote_subst"`' old_postinstall_cmds='`$ECHO "$old_postinstall_cmds" | $SED "$delay_single_quote_subst"`' old_postuninstall_cmds='`$ECHO "$old_postuninstall_cmds" | $SED "$delay_single_quote_subst"`' old_archive_cmds='`$ECHO "$old_archive_cmds" | $SED "$delay_single_quote_subst"`' lock_old_archive_extraction='`$ECHO "$lock_old_archive_extraction" | $SED "$delay_single_quote_subst"`' CC='`$ECHO "$CC" | $SED "$delay_single_quote_subst"`' CFLAGS='`$ECHO "$CFLAGS" | $SED "$delay_single_quote_subst"`' compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`' GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`' lt_cv_nm_interface='`$ECHO "$lt_cv_nm_interface" | $SED "$delay_single_quote_subst"`' nm_file_list_spec='`$ECHO "$nm_file_list_spec" | $SED "$delay_single_quote_subst"`' lt_sysroot='`$ECHO "$lt_sysroot" | $SED "$delay_single_quote_subst"`' lt_cv_truncate_bin='`$ECHO "$lt_cv_truncate_bin" | $SED "$delay_single_quote_subst"`' objdir='`$ECHO "$objdir" | $SED "$delay_single_quote_subst"`' MAGIC_CMD='`$ECHO "$MAGIC_CMD" | $SED "$delay_single_quote_subst"`' lt_prog_compiler_no_builtin_flag='`$ECHO "$lt_prog_compiler_no_builtin_flag" | $SED "$delay_single_quote_subst"`' lt_prog_compiler_pic='`$ECHO "$lt_prog_compiler_pic" | $SED "$delay_single_quote_subst"`' lt_prog_compiler_wl='`$ECHO "$lt_prog_compiler_wl" | $SED "$delay_single_quote_subst"`' lt_prog_compiler_static='`$ECHO "$lt_prog_compiler_static" | $SED "$delay_single_quote_subst"`' lt_cv_prog_compiler_c_o='`$ECHO "$lt_cv_prog_compiler_c_o" | $SED "$delay_single_quote_subst"`' need_locks='`$ECHO "$need_locks" | $SED "$delay_single_quote_subst"`' MANIFEST_TOOL='`$ECHO "$MANIFEST_TOOL" | $SED "$delay_single_quote_subst"`' DSYMUTIL='`$ECHO "$DSYMUTIL" | $SED "$delay_single_quote_subst"`' NMEDIT='`$ECHO "$NMEDIT" | $SED "$delay_single_quote_subst"`' LIPO='`$ECHO "$LIPO" | $SED "$delay_single_quote_subst"`' OTOOL='`$ECHO "$OTOOL" | $SED "$delay_single_quote_subst"`' OTOOL64='`$ECHO "$OTOOL64" | $SED "$delay_single_quote_subst"`' libext='`$ECHO "$libext" | $SED "$delay_single_quote_subst"`' shrext_cmds='`$ECHO "$shrext_cmds" | $SED "$delay_single_quote_subst"`' extract_expsyms_cmds='`$ECHO "$extract_expsyms_cmds" | $SED "$delay_single_quote_subst"`' archive_cmds_need_lc='`$ECHO "$archive_cmds_need_lc" | $SED "$delay_single_quote_subst"`' enable_shared_with_static_runtimes='`$ECHO "$enable_shared_with_static_runtimes" | $SED "$delay_single_quote_subst"`' export_dynamic_flag_spec='`$ECHO "$export_dynamic_flag_spec" | $SED "$delay_single_quote_subst"`' whole_archive_flag_spec='`$ECHO "$whole_archive_flag_spec" | $SED "$delay_single_quote_subst"`' compiler_needs_object='`$ECHO "$compiler_needs_object" | $SED "$delay_single_quote_subst"`' old_archive_from_new_cmds='`$ECHO "$old_archive_from_new_cmds" | $SED "$delay_single_quote_subst"`' old_archive_from_expsyms_cmds='`$ECHO "$old_archive_from_expsyms_cmds" | $SED "$delay_single_quote_subst"`' archive_cmds='`$ECHO "$archive_cmds" | $SED "$delay_single_quote_subst"`' archive_expsym_cmds='`$ECHO "$archive_expsym_cmds" | $SED "$delay_single_quote_subst"`' module_cmds='`$ECHO "$module_cmds" | $SED "$delay_single_quote_subst"`' module_expsym_cmds='`$ECHO "$module_expsym_cmds" | $SED "$delay_single_quote_subst"`' with_gnu_ld='`$ECHO "$with_gnu_ld" | $SED "$delay_single_quote_subst"`' allow_undefined_flag='`$ECHO "$allow_undefined_flag" | $SED "$delay_single_quote_subst"`' no_undefined_flag='`$ECHO "$no_undefined_flag" | $SED "$delay_single_quote_subst"`' hardcode_libdir_flag_spec='`$ECHO "$hardcode_libdir_flag_spec" | $SED "$delay_single_quote_subst"`' hardcode_libdir_separator='`$ECHO "$hardcode_libdir_separator" | $SED "$delay_single_quote_subst"`' hardcode_direct='`$ECHO "$hardcode_direct" | $SED "$delay_single_quote_subst"`' hardcode_direct_absolute='`$ECHO "$hardcode_direct_absolute" | $SED "$delay_single_quote_subst"`' hardcode_minus_L='`$ECHO "$hardcode_minus_L" | $SED "$delay_single_quote_subst"`' hardcode_shlibpath_var='`$ECHO "$hardcode_shlibpath_var" | $SED "$delay_single_quote_subst"`' hardcode_automatic='`$ECHO "$hardcode_automatic" | $SED "$delay_single_quote_subst"`' inherit_rpath='`$ECHO "$inherit_rpath" | $SED "$delay_single_quote_subst"`' link_all_deplibs='`$ECHO "$link_all_deplibs" | $SED "$delay_single_quote_subst"`' always_export_symbols='`$ECHO "$always_export_symbols" | $SED "$delay_single_quote_subst"`' export_symbols_cmds='`$ECHO "$export_symbols_cmds" | $SED "$delay_single_quote_subst"`' exclude_expsyms='`$ECHO "$exclude_expsyms" | $SED "$delay_single_quote_subst"`' include_expsyms='`$ECHO "$include_expsyms" | $SED "$delay_single_quote_subst"`' prelink_cmds='`$ECHO "$prelink_cmds" | $SED "$delay_single_quote_subst"`' postlink_cmds='`$ECHO "$postlink_cmds" | $SED "$delay_single_quote_subst"`' file_list_spec='`$ECHO "$file_list_spec" | $SED "$delay_single_quote_subst"`' variables_saved_for_relink='`$ECHO "$variables_saved_for_relink" | $SED "$delay_single_quote_subst"`' need_lib_prefix='`$ECHO "$need_lib_prefix" | $SED "$delay_single_quote_subst"`' need_version='`$ECHO "$need_version" | $SED "$delay_single_quote_subst"`' version_type='`$ECHO "$version_type" | $SED "$delay_single_quote_subst"`' runpath_var='`$ECHO "$runpath_var" | $SED "$delay_single_quote_subst"`' shlibpath_var='`$ECHO "$shlibpath_var" | $SED "$delay_single_quote_subst"`' shlibpath_overrides_runpath='`$ECHO "$shlibpath_overrides_runpath" | $SED "$delay_single_quote_subst"`' libname_spec='`$ECHO "$libname_spec" | $SED "$delay_single_quote_subst"`' library_names_spec='`$ECHO "$library_names_spec" | $SED "$delay_single_quote_subst"`' soname_spec='`$ECHO "$soname_spec" | $SED "$delay_single_quote_subst"`' install_override_mode='`$ECHO "$install_override_mode" | $SED "$delay_single_quote_subst"`' postinstall_cmds='`$ECHO "$postinstall_cmds" | $SED "$delay_single_quote_subst"`' postuninstall_cmds='`$ECHO "$postuninstall_cmds" | $SED "$delay_single_quote_subst"`' finish_cmds='`$ECHO "$finish_cmds" | $SED "$delay_single_quote_subst"`' finish_eval='`$ECHO "$finish_eval" | $SED "$delay_single_quote_subst"`' hardcode_into_libs='`$ECHO "$hardcode_into_libs" | $SED "$delay_single_quote_subst"`' sys_lib_search_path_spec='`$ECHO "$sys_lib_search_path_spec" | $SED "$delay_single_quote_subst"`' configure_time_dlsearch_path='`$ECHO "$configure_time_dlsearch_path" | $SED "$delay_single_quote_subst"`' configure_time_lt_sys_library_path='`$ECHO "$configure_time_lt_sys_library_path" | $SED "$delay_single_quote_subst"`' hardcode_action='`$ECHO "$hardcode_action" | $SED "$delay_single_quote_subst"`' enable_dlopen='`$ECHO "$enable_dlopen" | $SED "$delay_single_quote_subst"`' enable_dlopen_self='`$ECHO "$enable_dlopen_self" | $SED "$delay_single_quote_subst"`' enable_dlopen_self_static='`$ECHO "$enable_dlopen_self_static" | $SED "$delay_single_quote_subst"`' old_striplib='`$ECHO "$old_striplib" | $SED "$delay_single_quote_subst"`' striplib='`$ECHO "$striplib" | $SED "$delay_single_quote_subst"`' LTCC='$LTCC' LTCFLAGS='$LTCFLAGS' compiler='$compiler_DEFAULT' # A function that is used when there is no print builtin or printf. func_fallback_echo () { eval 'cat <<_LTECHO_EOF \$1 _LTECHO_EOF' } # Quote evaled strings. for var in SHELL \ ECHO \ PATH_SEPARATOR \ SED \ GREP \ EGREP \ FGREP \ LD \ NM \ LN_S \ lt_SP2NL \ lt_NL2SP \ reload_flag \ FILECMD \ OBJDUMP \ deplibs_check_method \ file_magic_cmd \ file_magic_glob \ want_nocaseglob \ DLLTOOL \ sharedlib_from_linklib_cmd \ AR \ archiver_list_spec \ STRIP \ RANLIB \ CC \ CFLAGS \ compiler \ lt_cv_sys_global_symbol_pipe \ lt_cv_sys_global_symbol_to_cdecl \ lt_cv_sys_global_symbol_to_import \ lt_cv_sys_global_symbol_to_c_name_address \ lt_cv_sys_global_symbol_to_c_name_address_lib_prefix \ lt_cv_nm_interface \ nm_file_list_spec \ lt_cv_truncate_bin \ lt_prog_compiler_no_builtin_flag \ lt_prog_compiler_pic \ lt_prog_compiler_wl \ lt_prog_compiler_static \ lt_cv_prog_compiler_c_o \ need_locks \ MANIFEST_TOOL \ DSYMUTIL \ NMEDIT \ LIPO \ OTOOL \ OTOOL64 \ shrext_cmds \ export_dynamic_flag_spec \ whole_archive_flag_spec \ compiler_needs_object \ with_gnu_ld \ allow_undefined_flag \ no_undefined_flag \ hardcode_libdir_flag_spec \ hardcode_libdir_separator \ exclude_expsyms \ include_expsyms \ file_list_spec \ variables_saved_for_relink \ libname_spec \ library_names_spec \ soname_spec \ install_override_mode \ finish_eval \ old_striplib \ striplib; do case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in *[\\\\\\\`\\"\\\$]*) eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes ;; *) eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\"" ;; esac done # Double-quote double-evaled strings. for var in reload_cmds \ old_postinstall_cmds \ old_postuninstall_cmds \ old_archive_cmds \ extract_expsyms_cmds \ old_archive_from_new_cmds \ old_archive_from_expsyms_cmds \ archive_cmds \ archive_expsym_cmds \ module_cmds \ module_expsym_cmds \ export_symbols_cmds \ prelink_cmds \ postlink_cmds \ postinstall_cmds \ postuninstall_cmds \ finish_cmds \ sys_lib_search_path_spec \ configure_time_dlsearch_path \ configure_time_lt_sys_library_path; do case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in *[\\\\\\\`\\"\\\$]*) eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes ;; *) eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\"" ;; esac done ac_aux_dir='$ac_aux_dir' # See if we are running on zsh, and set the options that allow our # commands through without removal of \ escapes INIT. if test -n "\${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi PACKAGE='$PACKAGE' VERSION='$VERSION' RM='$RM' ofile='$ofile' AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}" _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # Handling of arguments. for ac_config_target in $ac_config_targets do case $ac_config_target in "libtool") CONFIG_COMMANDS="$CONFIG_COMMANDS libtool" ;; "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;; "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;; "lib/tpm2-pkcs11.pc") CONFIG_FILES="$CONFIG_FILES lib/tpm2-pkcs11.pc" ;; "src/lib/config.h") CONFIG_HEADERS="$CONFIG_HEADERS src/lib/config.h" ;; *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;; esac done # If the user did not use the arguments to specify the items to instantiate, # then the envvar interface is used. Set only those that are not. # We use the long form for the default assignment because of an extremely # bizarre bug on SunOS 4.1.3. if $ac_need_defaults; then test ${CONFIG_FILES+y} || CONFIG_FILES=$config_files test ${CONFIG_HEADERS+y} || CONFIG_HEADERS=$config_headers test ${CONFIG_COMMANDS+y} || CONFIG_COMMANDS=$config_commands fi # Have a temporary directory for convenience. Make it in the build tree # simply because there is no reason against having it here, and in addition, # creating and moving files from /tmp can sometimes cause problems. # Hook for its removal unless debugging. # Note that there is a small window in which the directory will not be cleaned: # after its creation but before its name has been assigned to `$tmp'. $debug || { tmp= ac_tmp= trap 'exit_status=$? : "${ac_tmp:=$tmp}" { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status ' 0 trap 'as_fn_exit 1' 1 2 13 15 } # Create a (secure) tmp directory for tmp files. { tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` && test -d "$tmp" } || { tmp=./conf$$-$RANDOM (umask 077 && mkdir "$tmp") } || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5 ac_tmp=$tmp # Set up the scripts for CONFIG_FILES section. # No need to generate them if there are no CONFIG_FILES. # This happens for instance with `./config.status config.h'. if test -n "$CONFIG_FILES"; then ac_cr=`echo X | tr X '\015'` # On cygwin, bash can eat \r inside `` if the user requested igncr. # But we know of no other shell where ac_cr would be empty at this # point, so we can use a bashism as a fallback. if test "x$ac_cr" = x; then eval ac_cr=\$\'\\r\' fi ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' /dev/null` if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then ac_cs_awk_cr='\\r' else ac_cs_awk_cr=$ac_cr fi echo 'BEGIN {' >"$ac_tmp/subs1.awk" && _ACEOF { echo "cat >conf$$subs.awk <<_ACEOF" && echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' && echo "_ACEOF" } >conf$$subs.sh || as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5 ac_delim_num=`echo "$ac_subst_vars" | grep -c '^'` ac_delim='%!_!# ' for ac_last_try in false false false false false :; do . ./conf$$subs.sh || as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5 ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | grep -c X` if test $ac_delim_n = $ac_delim_num; then break elif $ac_last_try; then as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5 else ac_delim="$ac_delim!$ac_delim _$ac_delim!! " fi done rm -f conf$$subs.sh cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK && _ACEOF sed -n ' h s/^/S["/; s/!.*/"]=/ p g s/^[^!]*!// :repl t repl s/'"$ac_delim"'$// t delim :nl h s/\(.\{148\}\)..*/\1/ t more1 s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/ p n b repl :more1 s/["\\]/\\&/g; s/^/"/; s/$/"\\/ p g s/.\{148\}// t nl :delim h s/\(.\{148\}\)..*/\1/ t more2 s/["\\]/\\&/g; s/^/"/; s/$/"/ p b :more2 s/["\\]/\\&/g; s/^/"/; s/$/"\\/ p g s/.\{148\}// t delim ' >$CONFIG_STATUS || ac_write_fail=1 rm -f conf$$subs.awk cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 _ACAWK cat >>"\$ac_tmp/subs1.awk" <<_ACAWK && for (key in S) S_is_set[key] = 1 FS = "" } { line = $ 0 nfields = split(line, field, "@") substed = 0 len = length(field[1]) for (i = 2; i < nfields; i++) { key = field[i] keylen = length(key) if (S_is_set[key]) { value = S[key] line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3) len += length(value) + length(field[++i]) substed = 1 } else len += 1 + keylen } print line } _ACAWK _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g" else cat fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \ || as_fn_error $? "could not setup config files machinery" "$LINENO" 5 _ACEOF # VPATH may cause trouble with some makes, so we remove sole $(srcdir), # ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and # trailing colons and then remove the whole line if VPATH becomes empty # (actually we leave an empty line to preserve line numbers). if test "x$srcdir" = x.; then ac_vpsub='/^[ ]*VPATH[ ]*=[ ]*/{ h s/// s/^/:/ s/[ ]*$/:/ s/:\$(srcdir):/:/g s/:\${srcdir}:/:/g s/:@srcdir@:/:/g s/^:*// s/:*$// x s/\(=[ ]*\).*/\1/ G s/\n// s/^[^=]*=[ ]*$// }' fi cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 fi # test -n "$CONFIG_FILES" # Set up the scripts for CONFIG_HEADERS section. # No need to generate them if there are no CONFIG_HEADERS. # This happens for instance with `./config.status Makefile'. if test -n "$CONFIG_HEADERS"; then cat >"$ac_tmp/defines.awk" <<\_ACAWK || BEGIN { _ACEOF # Transform confdefs.h into an awk script `defines.awk', embedded as # here-document in config.status, that substitutes the proper values into # config.h.in to produce config.h. # Create a delimiter string that does not exist in confdefs.h, to ease # handling of long lines. ac_delim='%!_!# ' for ac_last_try in false false :; do ac_tt=`sed -n "/$ac_delim/p" confdefs.h` if test -z "$ac_tt"; then break elif $ac_last_try; then as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5 else ac_delim="$ac_delim!$ac_delim _$ac_delim!! " fi done # For the awk script, D is an array of macro values keyed by name, # likewise P contains macro parameters if any. Preserve backslash # newline sequences. ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]* sed -n ' s/.\{148\}/&'"$ac_delim"'/g t rset :rset s/^[ ]*#[ ]*define[ ][ ]*/ / t def d :def s/\\$// t bsnl s/["\\]/\\&/g s/^ \('"$ac_word_re"'\)\(([^()]*)\)[ ]*\(.*\)/P["\1"]="\2"\ D["\1"]=" \3"/p s/^ \('"$ac_word_re"'\)[ ]*\(.*\)/D["\1"]=" \2"/p d :bsnl s/["\\]/\\&/g s/^ \('"$ac_word_re"'\)\(([^()]*)\)[ ]*\(.*\)/P["\1"]="\2"\ D["\1"]=" \3\\\\\\n"\\/p t cont s/^ \('"$ac_word_re"'\)[ ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p t cont d :cont n s/.\{148\}/&'"$ac_delim"'/g t clear :clear s/\\$// t bsnlc s/["\\]/\\&/g; s/^/"/; s/$/"/p d :bsnlc s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p b cont ' >$CONFIG_STATUS || ac_write_fail=1 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 for (key in D) D_is_set[key] = 1 FS = "" } /^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ { line = \$ 0 split(line, arg, " ") if (arg[1] == "#") { defundef = arg[2] mac1 = arg[3] } else { defundef = substr(arg[1], 2) mac1 = arg[2] } split(mac1, mac2, "(") #) macro = mac2[1] prefix = substr(line, 1, index(line, defundef) - 1) if (D_is_set[macro]) { # Preserve the white space surrounding the "#". print prefix "define", macro P[macro] D[macro] next } else { # Replace #undef with comments. This is necessary, for example, # in the case of _POSIX_SOURCE, which is predefined and required # on some systems where configure will not decide to define it. if (defundef == "undef") { print "/*", prefix defundef, macro, "*/" next } } } { print } _ACAWK _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 as_fn_error $? "could not setup config headers machinery" "$LINENO" 5 fi # test -n "$CONFIG_HEADERS" eval set X " :F $CONFIG_FILES :H $CONFIG_HEADERS :C $CONFIG_COMMANDS" shift for ac_tag do case $ac_tag in :[FHLC]) ac_mode=$ac_tag; continue;; esac case $ac_mode$ac_tag in :[FHL]*:*);; :L* | :C*:*) as_fn_error $? "invalid tag \`$ac_tag'" "$LINENO" 5;; :[FH]-) ac_tag=-:-;; :[FH]*) ac_tag=$ac_tag:$ac_tag.in;; esac ac_save_IFS=$IFS IFS=: set x $ac_tag IFS=$ac_save_IFS shift ac_file=$1 shift case $ac_mode in :L) ac_source=$1;; :[FH]) ac_file_inputs= for ac_f do case $ac_f in -) ac_f="$ac_tmp/stdin";; *) # Look for the file first in the build tree, then in the source tree # (if the path is not absolute). The absolute path cannot be DOS-style, # because $ac_f cannot contain `:'. test -f "$ac_f" || case $ac_f in [\\/$]*) false;; *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";; esac || as_fn_error 1 "cannot find input file: \`$ac_f'" "$LINENO" 5;; esac case $ac_f in *\'*) ac_f=`printf "%s\n" "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac as_fn_append ac_file_inputs " '$ac_f'" done # Let's still pretend it is `configure' which instantiates (i.e., don't # use $as_me), people would be surprised to read: # /* config.h. Generated by config.status. */ configure_input='Generated from '` printf "%s\n" "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g' `' by configure.' if test x"$ac_file" != x-; then configure_input="$ac_file. $configure_input" { printf "%s\n" "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5 printf "%s\n" "$as_me: creating $ac_file" >&6;} fi # Neutralize special characters interpreted by sed in replacement strings. case $configure_input in #( *\&* | *\|* | *\\* ) ac_sed_conf_input=`printf "%s\n" "$configure_input" | sed 's/[\\\\&|]/\\\\&/g'`;; #( *) ac_sed_conf_input=$configure_input;; esac case $ac_tag in *:-:* | *:-) cat >"$ac_tmp/stdin" \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;; esac ;; esac ac_dir=`$as_dirname -- "$ac_file" || $as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$ac_file" : 'X\(//\)[^/]' \| \ X"$ac_file" : 'X\(//\)$' \| \ X"$ac_file" : 'X\(/\)' \| . 2>/dev/null || printf "%s\n" X"$ac_file" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` as_dir="$ac_dir"; as_fn_mkdir_p ac_builddir=. case "$ac_dir" in .) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_dir_suffix=/`printf "%s\n" "$ac_dir" | sed 's|^\.[\\/]||'` # A ".." for each directory in $ac_dir_suffix. ac_top_builddir_sub=`printf "%s\n" "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'` case $ac_top_builddir_sub in "") ac_top_builddir_sub=. ac_top_build_prefix= ;; *) ac_top_build_prefix=$ac_top_builddir_sub/ ;; esac ;; esac ac_abs_top_builddir=$ac_pwd ac_abs_builddir=$ac_pwd$ac_dir_suffix # for backward compatibility: ac_top_builddir=$ac_top_build_prefix case $srcdir in .) # We are building in place. ac_srcdir=. ac_top_srcdir=$ac_top_builddir_sub ac_abs_top_srcdir=$ac_pwd ;; [\\/]* | ?:[\\/]* ) # Absolute name. ac_srcdir=$srcdir$ac_dir_suffix; ac_top_srcdir=$srcdir ac_abs_top_srcdir=$srcdir ;; *) # Relative name. ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix ac_top_srcdir=$ac_top_build_prefix$srcdir ac_abs_top_srcdir=$ac_pwd/$srcdir ;; esac ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix case $ac_mode in :F) # # CONFIG_FILE # case $INSTALL in [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;; *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;; esac ac_MKDIR_P=$MKDIR_P case $MKDIR_P in [\\/$]* | ?:[\\/]* ) ;; */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;; esac _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 # If the template does not know about datarootdir, expand it. # FIXME: This hack should be removed a few years after 2.60. ac_datarootdir_hack=; ac_datarootdir_seen= ac_sed_dataroot=' /datarootdir/ { p q } /@datadir@/p /@docdir@/p /@infodir@/p /@localedir@/p /@mandir@/p' case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in *datarootdir*) ac_datarootdir_seen=yes;; *@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5 printf "%s\n" "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;} _ACEOF cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_datarootdir_hack=' s&@datadir@&$datadir&g s&@docdir@&$docdir&g s&@infodir@&$infodir&g s&@localedir@&$localedir&g s&@mandir@&$mandir&g s&\\\${datarootdir}&$datarootdir&g' ;; esac _ACEOF # Neutralize VPATH when `$srcdir' = `.'. # Shell code in configure.ac might set extrasub. # FIXME: do we really want to maintain this feature? cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_sed_extra="$ac_vpsub $extrasub _ACEOF cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1 :t /@[a-zA-Z_][a-zA-Z_0-9]*@/!b s|@configure_input@|$ac_sed_conf_input|;t t s&@top_builddir@&$ac_top_builddir_sub&;t t s&@top_build_prefix@&$ac_top_build_prefix&;t t s&@srcdir@&$ac_srcdir&;t t s&@abs_srcdir@&$ac_abs_srcdir&;t t s&@top_srcdir@&$ac_top_srcdir&;t t s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t s&@builddir@&$ac_builddir&;t t s&@abs_builddir@&$ac_abs_builddir&;t t s&@abs_top_builddir@&$ac_abs_top_builddir&;t t s&@INSTALL@&$ac_INSTALL&;t t s&@MKDIR_P@&$ac_MKDIR_P&;t t $ac_datarootdir_hack " eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \ >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5 test -z "$ac_datarootdir_hack$ac_datarootdir_seen" && { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } && { ac_out=`sed -n '/^[ ]*datarootdir[ ]*:*=/p' \ "$ac_tmp/out"`; test -z "$ac_out"; } && { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable \`datarootdir' which seems to be undefined. Please make sure it is defined" >&5 printf "%s\n" "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir' which seems to be undefined. Please make sure it is defined" >&2;} rm -f "$ac_tmp/stdin" case $ac_file in -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";; *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";; esac \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;; :H) # # CONFIG_HEADER # if test x"$ac_file" != x-; then { printf "%s\n" "/* $configure_input */" >&1 \ && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" } >"$ac_tmp/config.h" \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5 printf "%s\n" "$as_me: $ac_file is unchanged" >&6;} else rm -f "$ac_file" mv "$ac_tmp/config.h" "$ac_file" \ || as_fn_error $? "could not create $ac_file" "$LINENO" 5 fi else printf "%s\n" "/* $configure_input */" >&1 \ && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \ || as_fn_error $? "could not create -" "$LINENO" 5 fi # Compute "$ac_file"'s index in $config_headers. _am_arg="$ac_file" _am_stamp_count=1 for _am_header in $config_headers :; do case $_am_header in $_am_arg | $_am_arg:* ) break ;; * ) _am_stamp_count=`expr $_am_stamp_count + 1` ;; esac done echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" || $as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$_am_arg" : 'X\(//\)[^/]' \| \ X"$_am_arg" : 'X\(//\)$' \| \ X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null || printf "%s\n" X"$_am_arg" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'`/stamp-h$_am_stamp_count ;; :C) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5 printf "%s\n" "$as_me: executing $ac_file commands" >&6;} ;; esac case $ac_file$ac_mode in "libtool":C) # See if we are running on zsh, and set the options that allow our # commands through without removal of \ escapes. if test -n "${ZSH_VERSION+set}"; then setopt NO_GLOB_SUBST fi cfgfile=${ofile}T trap "$RM \"$cfgfile\"; exit 1" 1 2 15 $RM "$cfgfile" cat <<_LT_EOF >> "$cfgfile" #! $SHELL # Generated automatically by $as_me ($PACKAGE) $VERSION # Libtool was configured on host `(hostname || uname -n) 2>/dev/null | sed 1q`: # NOTE: Changes made to this file will be lost: look at ltmain.sh. # Provide generalized library-building support services. # Written by Gordon Matzigkeit, 1996 # Copyright (C) 2014 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # GNU Libtool is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of of the License, or # (at your option) any later version. # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program or library that is built # using GNU Libtool, you may include this file under the same # distribution terms that you use for the rest of that program. # # GNU Libtool is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . # The names of the tagged configurations supported by this script. available_tags='' # Configured defaults for sys_lib_dlsearch_path munging. : \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"} # ### BEGIN LIBTOOL CONFIG # Which release of libtool.m4 was used? macro_version=$macro_version macro_revision=$macro_revision # Whether or not to build shared libraries. build_libtool_libs=$enable_shared # Whether or not to build static libraries. build_old_libs=$enable_static # What type of objects to build. pic_mode=$pic_mode # Whether or not to optimize for fast installation. fast_install=$enable_fast_install # Shared archive member basename,for filename based shared library versioning on AIX. shared_archive_member_spec=$shared_archive_member_spec # Shell to use when invoking shell scripts. SHELL=$lt_SHELL # An echo program that protects backslashes. ECHO=$lt_ECHO # The PATH separator for the build system. PATH_SEPARATOR=$lt_PATH_SEPARATOR # The host system. host_alias=$host_alias host=$host host_os=$host_os # The build system. build_alias=$build_alias build=$build build_os=$build_os # A sed program that does not truncate output. SED=$lt_SED # Sed that helps us avoid accidentally triggering echo(1) options like -n. Xsed="\$SED -e 1s/^X//" # A grep program that handles long lines. GREP=$lt_GREP # An ERE matcher. EGREP=$lt_EGREP # A literal string matcher. FGREP=$lt_FGREP # A BSD- or MS-compatible name lister. NM=$lt_NM # Whether we need soft or hard links. LN_S=$lt_LN_S # What is the maximum length of a command? max_cmd_len=$max_cmd_len # Object file suffix (normally "o"). objext=$ac_objext # Executable file suffix (normally ""). exeext=$exeext # whether the shell understands "unset". lt_unset=$lt_unset # turn spaces into newlines. SP2NL=$lt_lt_SP2NL # turn newlines into spaces. NL2SP=$lt_lt_NL2SP # convert \$build file names to \$host format. to_host_file_cmd=$lt_cv_to_host_file_cmd # convert \$build files to toolchain format. to_tool_file_cmd=$lt_cv_to_tool_file_cmd # A file(cmd) program that detects file types. FILECMD=$lt_FILECMD # An object symbol dumper. OBJDUMP=$lt_OBJDUMP # Method to check whether dependent libraries are shared objects. deplibs_check_method=$lt_deplibs_check_method # Command to use when deplibs_check_method = "file_magic". file_magic_cmd=$lt_file_magic_cmd # How to find potential files when deplibs_check_method = "file_magic". file_magic_glob=$lt_file_magic_glob # Find potential files using nocaseglob when deplibs_check_method = "file_magic". want_nocaseglob=$lt_want_nocaseglob # DLL creation program. DLLTOOL=$lt_DLLTOOL # Command to associate shared and link libraries. sharedlib_from_linklib_cmd=$lt_sharedlib_from_linklib_cmd # The archiver. AR=$lt_AR # Flags to create an archive (by configure). lt_ar_flags=$lt_ar_flags # Flags to create an archive. AR_FLAGS=\${ARFLAGS-"\$lt_ar_flags"} # How to feed a file listing to the archiver. archiver_list_spec=$lt_archiver_list_spec # A symbol stripping program. STRIP=$lt_STRIP # Commands used to install an old-style archive. RANLIB=$lt_RANLIB old_postinstall_cmds=$lt_old_postinstall_cmds old_postuninstall_cmds=$lt_old_postuninstall_cmds # Whether to use a lock for old archive extraction. lock_old_archive_extraction=$lock_old_archive_extraction # A C compiler. LTCC=$lt_CC # LTCC compiler flags. LTCFLAGS=$lt_CFLAGS # Take the output of nm and produce a listing of raw symbols and C names. global_symbol_pipe=$lt_lt_cv_sys_global_symbol_pipe # Transform the output of nm in a proper C declaration. global_symbol_to_cdecl=$lt_lt_cv_sys_global_symbol_to_cdecl # Transform the output of nm into a list of symbols to manually relocate. global_symbol_to_import=$lt_lt_cv_sys_global_symbol_to_import # Transform the output of nm in a C name address pair. global_symbol_to_c_name_address=$lt_lt_cv_sys_global_symbol_to_c_name_address # Transform the output of nm in a C name address pair when lib prefix is needed. global_symbol_to_c_name_address_lib_prefix=$lt_lt_cv_sys_global_symbol_to_c_name_address_lib_prefix # The name lister interface. nm_interface=$lt_lt_cv_nm_interface # Specify filename containing input files for \$NM. nm_file_list_spec=$lt_nm_file_list_spec # The root where to search for dependent libraries,and where our libraries should be installed. lt_sysroot=$lt_sysroot # Command to truncate a binary pipe. lt_truncate_bin=$lt_lt_cv_truncate_bin # The name of the directory that contains temporary libtool files. objdir=$objdir # Used to examine libraries when file_magic_cmd begins with "file". MAGIC_CMD=$MAGIC_CMD # Must we lock files when doing compilation? need_locks=$lt_need_locks # Manifest tool. MANIFEST_TOOL=$lt_MANIFEST_TOOL # Tool to manipulate archived DWARF debug symbol files on Mac OS X. DSYMUTIL=$lt_DSYMUTIL # Tool to change global to local symbols on Mac OS X. NMEDIT=$lt_NMEDIT # Tool to manipulate fat objects and archives on Mac OS X. LIPO=$lt_LIPO # ldd/readelf like tool for Mach-O binaries on Mac OS X. OTOOL=$lt_OTOOL # ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4. OTOOL64=$lt_OTOOL64 # Old archive suffix (normally "a"). libext=$libext # Shared library suffix (normally ".so"). shrext_cmds=$lt_shrext_cmds # The commands to extract the exported symbol list from a shared archive. extract_expsyms_cmds=$lt_extract_expsyms_cmds # Variables whose values should be saved in libtool wrapper scripts and # restored at link time. variables_saved_for_relink=$lt_variables_saved_for_relink # Do we need the "lib" prefix for modules? need_lib_prefix=$need_lib_prefix # Do we need a version for libraries? need_version=$need_version # Library versioning type. version_type=$version_type # Shared library runtime path variable. runpath_var=$runpath_var # Shared library path variable. shlibpath_var=$shlibpath_var # Is shlibpath searched before the hard-coded library search path? shlibpath_overrides_runpath=$shlibpath_overrides_runpath # Format of library name prefix. libname_spec=$lt_libname_spec # List of archive names. First name is the real one, the rest are links. # The last name is the one that the linker finds with -lNAME library_names_spec=$lt_library_names_spec # The coded name of the library, if different from the real name. soname_spec=$lt_soname_spec # Permission mode override for installation of shared libraries. install_override_mode=$lt_install_override_mode # Command to use after installation of a shared archive. postinstall_cmds=$lt_postinstall_cmds # Command to use after uninstallation of a shared archive. postuninstall_cmds=$lt_postuninstall_cmds # Commands used to finish a libtool library installation in a directory. finish_cmds=$lt_finish_cmds # As "finish_cmds", except a single script fragment to be evaled but # not shown. finish_eval=$lt_finish_eval # Whether we should hardcode library paths into libraries. hardcode_into_libs=$hardcode_into_libs # Compile-time system search path for libraries. sys_lib_search_path_spec=$lt_sys_lib_search_path_spec # Detected run-time system search path for libraries. sys_lib_dlsearch_path_spec=$lt_configure_time_dlsearch_path # Explicit LT_SYS_LIBRARY_PATH set during ./configure time. configure_time_lt_sys_library_path=$lt_configure_time_lt_sys_library_path # Whether dlopen is supported. dlopen_support=$enable_dlopen # Whether dlopen of programs is supported. dlopen_self=$enable_dlopen_self # Whether dlopen of statically linked programs is supported. dlopen_self_static=$enable_dlopen_self_static # Commands to strip libraries. old_striplib=$lt_old_striplib striplib=$lt_striplib # The linker used to build libraries. LD=$lt_LD # How to create reloadable object files. reload_flag=$lt_reload_flag reload_cmds=$lt_reload_cmds # Commands used to build an old-style archive. old_archive_cmds=$lt_old_archive_cmds # A language specific compiler. CC=$lt_compiler # Is the compiler the GNU compiler? with_gcc=$GCC # Compiler flag to turn off builtin functions. no_builtin_flag=$lt_lt_prog_compiler_no_builtin_flag # Additional compiler flags for building library objects. pic_flag=$lt_lt_prog_compiler_pic # How to pass a linker flag through the compiler. wl=$lt_lt_prog_compiler_wl # Compiler flag to prevent dynamic linking. link_static_flag=$lt_lt_prog_compiler_static # Does compiler simultaneously support -c and -o options? compiler_c_o=$lt_lt_cv_prog_compiler_c_o # Whether or not to add -lc for building shared libraries. build_libtool_need_lc=$archive_cmds_need_lc # Whether or not to disallow shared libs when runtime libs are static. allow_libtool_libs_with_static_runtimes=$enable_shared_with_static_runtimes # Compiler flag to allow reflexive dlopens. export_dynamic_flag_spec=$lt_export_dynamic_flag_spec # Compiler flag to generate shared objects directly from archives. whole_archive_flag_spec=$lt_whole_archive_flag_spec # Whether the compiler copes with passing no objects directly. compiler_needs_object=$lt_compiler_needs_object # Create an old-style archive from a shared archive. old_archive_from_new_cmds=$lt_old_archive_from_new_cmds # Create a temporary old-style archive to link instead of a shared archive. old_archive_from_expsyms_cmds=$lt_old_archive_from_expsyms_cmds # Commands used to build a shared archive. archive_cmds=$lt_archive_cmds archive_expsym_cmds=$lt_archive_expsym_cmds # Commands used to build a loadable module if different from building # a shared archive. module_cmds=$lt_module_cmds module_expsym_cmds=$lt_module_expsym_cmds # Whether we are building with GNU ld or not. with_gnu_ld=$lt_with_gnu_ld # Flag that allows shared libraries with undefined symbols to be built. allow_undefined_flag=$lt_allow_undefined_flag # Flag that enforces no undefined symbols. no_undefined_flag=$lt_no_undefined_flag # Flag to hardcode \$libdir into a binary during linking. # This must work even if \$libdir does not exist hardcode_libdir_flag_spec=$lt_hardcode_libdir_flag_spec # Whether we need a single "-rpath" flag with a separated argument. hardcode_libdir_separator=$lt_hardcode_libdir_separator # Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes # DIR into the resulting binary. hardcode_direct=$hardcode_direct # Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes # DIR into the resulting binary and the resulting library dependency is # "absolute",i.e impossible to change by setting \$shlibpath_var if the # library is relocated. hardcode_direct_absolute=$hardcode_direct_absolute # Set to "yes" if using the -LDIR flag during linking hardcodes DIR # into the resulting binary. hardcode_minus_L=$hardcode_minus_L # Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR # into the resulting binary. hardcode_shlibpath_var=$hardcode_shlibpath_var # Set to "yes" if building a shared library automatically hardcodes DIR # into the library and all subsequent libraries and executables linked # against it. hardcode_automatic=$hardcode_automatic # Set to yes if linker adds runtime paths of dependent libraries # to runtime path list. inherit_rpath=$inherit_rpath # Whether libtool must link a program against all its dependency libraries. link_all_deplibs=$link_all_deplibs # Set to "yes" if exported symbols are required. always_export_symbols=$always_export_symbols # The commands to list exported symbols. export_symbols_cmds=$lt_export_symbols_cmds # Symbols that should not be listed in the preloaded symbols. exclude_expsyms=$lt_exclude_expsyms # Symbols that must always be exported. include_expsyms=$lt_include_expsyms # Commands necessary for linking programs (against libraries) with templates. prelink_cmds=$lt_prelink_cmds # Commands necessary for finishing linking programs. postlink_cmds=$lt_postlink_cmds # Specify filename containing input files. file_list_spec=$lt_file_list_spec # How to hardcode a shared library path into an executable. hardcode_action=$hardcode_action # ### END LIBTOOL CONFIG _LT_EOF cat <<'_LT_EOF' >> "$cfgfile" # ### BEGIN FUNCTIONS SHARED WITH CONFIGURE # func_munge_path_list VARIABLE PATH # ----------------------------------- # VARIABLE is name of variable containing _space_ separated list of # directories to be munged by the contents of PATH, which is string # having a format: # "DIR[:DIR]:" # string "DIR[ DIR]" will be prepended to VARIABLE # ":DIR[:DIR]" # string "DIR[ DIR]" will be appended to VARIABLE # "DIRP[:DIRP]::[DIRA:]DIRA" # string "DIRP[ DIRP]" will be prepended to VARIABLE and string # "DIRA[ DIRA]" will be appended to VARIABLE # "DIR[:DIR]" # VARIABLE will be replaced by "DIR[ DIR]" func_munge_path_list () { case x$2 in x) ;; *:) eval $1=\"`$ECHO $2 | $SED 's/:/ /g'` \$$1\" ;; x:*) eval $1=\"\$$1 `$ECHO $2 | $SED 's/:/ /g'`\" ;; *::*) eval $1=\"\$$1\ `$ECHO $2 | $SED -e 's/.*:://' -e 's/:/ /g'`\" eval $1=\"`$ECHO $2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \$$1\" ;; *) eval $1=\"`$ECHO $2 | $SED 's/:/ /g'`\" ;; esac } # Calculate cc_basename. Skip known compiler wrappers and cross-prefix. func_cc_basename () { for cc_temp in $*""; do case $cc_temp in compile | *[\\/]compile | ccache | *[\\/]ccache ) ;; distcc | *[\\/]distcc | purify | *[\\/]purify ) ;; \-*) ;; *) break;; esac done func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"` } # ### END FUNCTIONS SHARED WITH CONFIGURE _LT_EOF case $host_os in aix3*) cat <<\_LT_EOF >> "$cfgfile" # AIX sometimes has problems with the GCC collect2 program. For some # reason, if we set the COLLECT_NAMES environment variable, the problems # vanish in a puff of smoke. if test set != "${COLLECT_NAMES+set}"; then COLLECT_NAMES= export COLLECT_NAMES fi _LT_EOF ;; esac ltmain=$ac_aux_dir/ltmain.sh # We use sed instead of cat because bash on DJGPP gets confused if # if finds mixed CR/LF and LF-only lines. Since sed operates in # text mode, it properly converts lines to CR/LF. This bash problem # is reportedly fixed, but why not run on old versions too? $SED '$q' "$ltmain" >> "$cfgfile" \ || (rm -f "$cfgfile"; exit 1) mv -f "$cfgfile" "$ofile" || (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile") chmod +x "$ofile" ;; "depfiles":C) test x"$AMDEP_TRUE" != x"" || { # Older Autoconf quotes --file arguments for eval, but not when files # are listed without --file. Let's play safe and only enable the eval # if we detect the quoting. # TODO: see whether this extra hack can be removed once we start # requiring Autoconf 2.70 or later. case $CONFIG_FILES in #( *\'*) : eval set x "$CONFIG_FILES" ;; #( *) : set x $CONFIG_FILES ;; #( *) : ;; esac shift # Used to flag and report bootstrapping failures. am_rc=0 for am_mf do # Strip MF so we end up with the name of the file. am_mf=`printf "%s\n" "$am_mf" | sed -e 's/:.*$//'` # Check whether this is an Automake generated Makefile which includes # dependency-tracking related rules and includes. # Grep'ing the whole file directly is not great: AIX grep has a line # limit of 2048, but all sed's we know have understand at least 4000. sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \ || continue am_dirpart=`$as_dirname -- "$am_mf" || $as_expr X"$am_mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \ X"$am_mf" : 'X\(//\)[^/]' \| \ X"$am_mf" : 'X\(//\)$' \| \ X"$am_mf" : 'X\(/\)' \| . 2>/dev/null || printf "%s\n" X"$am_mf" | sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{ s//\1/ q } /^X\(\/\/\)[^/].*/{ s//\1/ q } /^X\(\/\/\)$/{ s//\1/ q } /^X\(\/\).*/{ s//\1/ q } s/.*/./; q'` am_filepart=`$as_basename -- "$am_mf" || $as_expr X/"$am_mf" : '.*/\([^/][^/]*\)/*$' \| \ X"$am_mf" : 'X\(//\)$' \| \ X"$am_mf" : 'X\(/\)' \| . 2>/dev/null || printf "%s\n" X/"$am_mf" | sed '/^.*\/\([^/][^/]*\)\/*$/{ s//\1/ q } /^X\/\(\/\/\)$/{ s//\1/ q } /^X\/\(\/\).*/{ s//\1/ q } s/.*/./; q'` { echo "$as_me:$LINENO: cd "$am_dirpart" \ && sed -e '/# am--include-marker/d' "$am_filepart" \ | $MAKE -f - am--depfiles" >&5 (cd "$am_dirpart" \ && sed -e '/# am--include-marker/d' "$am_filepart" \ | $MAKE -f - am--depfiles) >&5 2>&5 ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&5 (exit $ac_status); } || am_rc=$? done if test $am_rc -ne 0; then { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5 printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;} as_fn_error $? "Something went wrong bootstrapping makefile fragments for automatic dependency tracking. If GNU make was not used, consider re-running the configure script with MAKE=\"gmake\" (or whatever is necessary). You can also try re-running configure with the '--disable-dependency-tracking' option to at least be able to build the package (albeit without support for automatic dependency tracking). See \`config.log' for more details" "$LINENO" 5; } fi { am_dirpart=; unset am_dirpart;} { am_filepart=; unset am_filepart;} { am_mf=; unset am_mf;} { am_rc=; unset am_rc;} rm -f conftest-deps.mk } ;; esac done # for ac_tag as_fn_exit 0 _ACEOF ac_clean_files=$ac_clean_files_save test $ac_write_fail = 0 || as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5 # configure is writing to config.log, and then calls config.status. # config.status does its own redirection, appending to config.log. # Unfortunately, on DOS this fails, as config.log is still kept open # by configure, so config.status won't be able to write to it; its # output is simply discarded. So we exec the FD to /dev/null, # effectively closing config.log, so it can be properly (re)opened and # appended to by config.status. When coming back to configure, we # need to make the FD available again. if test "$no_create" != yes; then ac_cs_success=: ac_config_status_args= test "$silent" = yes && ac_config_status_args="$ac_config_status_args --quiet" exec 5>/dev/null $SHELL $CONFIG_STATUS $ac_config_status_args || ac_cs_success=false exec 5>>config.log # Use ||, not &&, to avoid exiting from the if with $? = 1, which # would make configure fail if this is the last instruction. $ac_cs_success || as_fn_exit 1 fi if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5 printf "%s\n" "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;} fi tpm2-pkcs11-1.9.1/configure.ac0000644000175100017510000004455014666350663011504 # SPDX-License-Identifier: BSD-2-Clause AC_INIT([tpm2-pkcs11], [m4_esyscmd_s([cat ./VERSION])], [https://github.com/tpm2-software/tpm2-pkcs11/issues], [], [https://github.com/tpm2-software/tpm2-pkcs11]) AC_CONFIG_MACRO_DIR([m4]) # propagate configure arguments to distcheck AC_SUBST([DISTCHECK_CONFIGURE_FLAGS],[$ac_configure_args]) AX_IS_RELEASE([dash-version]) AX_CHECK_ENABLE_DEBUG([info]) AC_PROG_CC LT_INIT AM_INIT_AUTOMAKE([foreign subdir-objects]) PKG_INSTALLDIR() # enable "silent-rules" option by default m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])]) AX_CODE_COVERAGE m4_ifdef([_AX_CODE_COVERAGE_RULES], [AM_CONDITIONAL(AUTOCONF_CODE_COVERAGE_2019_01_06, [true])], [AM_CONDITIONAL(AUTOCONF_CODE_COVERAGE_2019_01_06, [false])]) AX_ADD_AM_MACRO_STATIC([]) AC_CONFIG_FILES([Makefile lib/tpm2-pkcs11.pc]) # enable autoheader config.h file AC_CONFIG_HEADERS([src/lib/config.h]) # require sqlite3 and libcrypto PKG_CHECK_MODULES([SQLITE3], [sqlite3]) PKG_CHECK_MODULES([YAML], [yaml-0.1]) PKG_CHECK_MODULES([CRYPTO], [libcrypto >= 1.1.0]) PKG_CHECK_EXISTS([libcrypto >= 3.0], have_ossl3=yes, have_ossl3=no) AM_CONDITIONAL([HAVE_OSSL3],[test "x$have_ossl3" = "xyes"]) # # With OSSL3 we need 3.2 of tpm2-tss to avoid bugs in test code # plus that tpm2-tss works with OSSL3. # AS_IF([test "x$have_ossl3" = "xyes"], [PKG_CHECK_MODULES([TSS2_ESYS], [tss2-esys >= 3.2])], [PKG_CHECK_MODULES([TSS2_ESYS], [tss2-esys >= 2.0])], ) # test for non version specific TSS dependencies PKG_CHECK_MODULES([TSS2_MU], [tss2-mu]) PKG_CHECK_MODULES([TSS2_TCTILDR], [tss2-tctildr]) PKG_CHECK_MODULES([TSS2_RC], [tss2-rc]) # Macro that checks for existence of a python module AC_DEFUN([AC_PYTHON_MODULE], [AC_MSG_CHECKING([for module $2 in python]) echo "import $2" | $1 - 2>/dev/null if test $? -ne 0 ; then AC_MSG_ERROR([not found]) else AC_MSG_RESULT(found) fi ]) AC_ARG_ENABLE( [ptool-checks], [AS_HELP_STRING([--disable-ptool-checks], [disable checks for ensuring tpm2_ptool works])], [do_pycheck=no], [do_pycheck=yes]) # for tpm2_ptool to work AS_IF([test "$do_pycheck" == "yes"], [ AM_PATH_PYTHON([3.7], [AC_SUBST([PYTHON_INTERPRETER], [$PYTHON])], [AC_MSG_ERROR([Integration tests enabled but python >= 3.7 executable not found.])] ) AC_PYTHON_MODULE([$PYTHON], [pyasn1_modules]) AC_PYTHON_MODULE([$PYTHON], [pyasn1]) AC_PYTHON_MODULE([$PYTHON], [cryptography]) AC_PYTHON_MODULE([$PYTHON], [yaml]) AC_PYTHON_MODULE([$PYTHON], [tpm2_pytss]) ]) AC_DEFUN([do_esapi_manage_flags], [ AC_DEFINE([ESAPI_MANAGE_FLAGS], [1], [ESAPI versions below 2.2.1 are known to require manual session flag management.]) ]) # Check for ESYS version below 2.2.1 which requires us to manage ESYS session flags PKG_CHECK_EXISTS([tss2-esys < 2.2.1], [do_esapi_manage_flags]) # ESYS >= 3.0 uses a different ABI param hierarchy in Esys_LoadExternal() PKG_CHECK_EXISTS([tss2-esys >= 3.0], [AC_DEFINE([ESYS_3], [1], [Esys3])]) # check for pthread AX_PTHREAD([],[AC_MSG_ERROR([Cannot find pthread])]) # gnulib m4 dependency: check for linker script support gl_LD_VERSION_SCRIPT AC_ARG_ENABLE( [esapi-session-manage-flags], [AS_HELP_STRING([--enable-esapi-session-manage-flags], [Force the TPM module to manage ESAPI session flags (default is autodetect)])], [esapi_sf=$enableval]) AS_IF([test "x$esapi_sf" = "xyes"], [do_esapi_manage_flags]) AC_ARG_WITH( [fapi], [AS_HELP_STRING([--with-fapi], [enable or disable the fapi backend. Default is "auto" to autodetect])], [enable_fapi=$withval], [enable_fapi=auto]) AC_DEFUN([do_fapi_configure], [ AS_IF([test "x$enable_fapi" = "xauto"], [ PKG_CHECK_MODULES([TSS2_FAPI], [tss2-fapi >= 3.0 ], [have_fapi=1], [have_fapi=0]) ], [ PKG_CHECK_MODULES([TSS2_FAPI], [tss2-fapi >= 3.0 ], [have_fapi=1]) ] ) ]) AS_IF([test "x$enable_fapi" != "xno"], [do_fapi_configure]) AS_IF([test "$have_fapi" = "1"], AC_DEFINE([HAVE_FAPI], [1], [Enabled if FAPI >= 3.0 is found]) ) AM_CONDITIONAL([HAVE_FAPI], [test "$have_fapi" = "1"]) # START ENABLE UNIT # # Enable --with-unit option for unit testing # AC_ARG_ENABLE( [unit], [AS_HELP_STRING([--enable-unit], [build unit tests])],, [enable_unit=no]) AC_ARG_ENABLE([fuzzing], [AS_HELP_STRING([--enable-fuzzing], [build the fuzz tests])],, [enable_fuzzing=no]) AM_CONDITIONAL([FUZZING], [test "x$enable_fuzzing" != xno]) AC_ARG_ENABLE([asan], [AS_HELP_STRING([--enable-asan], [Enable asan build, useful for testing])],, [enable_asan=no]) AC_ARG_ENABLE([hardening], [AS_HELP_STRING([--disable-hardening], [Disable compiler and linker options to frustrate memory corruption exploits])],, [enable_hardening="yes"]) AC_ARG_ENABLE([overflow], [AS_HELP_STRING([--disable-overflow], [Disable builtin overflow checks (enabled by default)])],, ,[enable_overflow=yes]) AS_IF([test "x$enable_overflow" = "xno"], AC_DEFINE([DISABLE_OVERFLOW_BUILTINS], [], [Define to disable built in overflow math])) AC_DEFUN([add_hardened_c_flag], [ AX_CHECK_COMPILE_FLAG([$1], [EXTRA_CFLAGS="$EXTRA_CFLAGS $1"], [AC_MSG_ERROR([Cannot enable $1, consider configuring with --disable-hardening])] ) ]) AC_ARG_WITH( [fuzzing-flags], [AS_HELP_STRING([--with-fuzzing-flags=FLAGS],[flags to pass to libfuzzer executables])], [FUZZING_FLAGS="$with_fuzzing_flags"], [FUZZING_FLAGS="-max_total_time=30"] ) AC_DEFUN([fuzzing_checks],[ # Add these to AM_CFLAGS to everyone gets built # smartly (extra info and instrumentation) add_hardened_c_flag([-fsanitize=address]) add_hardened_c_flag([-g]) add_hardened_c_flag([-O0]) AX_CHECK_COMPILE_FLAG([-fsanitize=fuzzer], [FUZZING_CFLAGS="$FUZZING_CFLAGS -fsanitize=fuzzer"], [AC_MSG_ERROR([Cannot enable -fsanitize=fuzzer])] ) AC_SUBST([FUZZING_CFLAGS]) # Disable hardening flags AC_MSG_NOTICE(["Disabling hardening --disable-hardening for --enable-fuzzing"]) enable_hardening=no AC_DEFINE([FUZZING], [1], [Defined when building fuzzing tests]) ]) AC_SUBST([FUZZING_FLAGS]) AS_IF([test "x$enable_fuzzing" = "xyes"], [fuzzing_checks]) AC_DEFUN([asan_checks],[ add_hardened_c_flag([-fsanitize=address]) add_hardened_c_flag([-g]) add_hardened_c_flag([-O0]) # Disable hardening flags AC_MSG_NOTICE(["Disabling hardening --disable-hardening for --enable-fuzzing"]) enable_hardening=no ]) AS_IF([test "x$enable_asan" = "xyes"], [asan_checks]) AM_CONDITIONAL([ENABLE_ASAN],[test "x$enable_asan" = "xyes"]) AC_DEFUN([unit_test_checks],[ AC_DEFINE([UNIT_TESTING], [1], [Define when unit testing. libtwist uses this to define a debug interface for alloc failures]) AX_GCC_FUNC_ATTRIBUTE([weak]) ]) # end function unit_test_checks AS_IF([test "x$enable_unit" = "xyes"], [unit_test_checks]) AM_CONDITIONAL([UNIT], [test "x$enable_unit" = "xyes"]) # All the tests leverage CMOCKA, so if any testing is enabled, look for it AS_IF([test "x$enable_unit" = "xyes" -o "x$enable_integration" = "xyes" -o "x$enable_fuzzing" = "xyes"], [ PKG_CHECK_MODULES([CMOCKA],[cmocka]) ] ) # END ENABLE UNIT # START ENABLE INTEGRATION # # enable integration tests and check for simulator binary # AC_ARG_ENABLE( [integration], [AS_HELP_STRING([--enable-integration], [build and execute integration tests])],, [enable_integration=no]) # Test for Java compiler and interpreter without throwing fatal errors (since # these macros are defined using AC_DEFUN they cannot be called conditionally) m4_pushdef([AC_MSG_ERROR], [have_javac=no]) AX_PROG_JAVAC() AX_PROG_JAVA() m4_popdef([AC_MSG_ERROR]) AC_DEFUN([integration_test_checks], [ AC_CHECK_PROG([tpm2_createprimary], [tpm2_createprimary], [yes], [no]) AS_IF([test "x$tpm2_createprimary" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_createprimary, but executable not found.])]) AC_CHECK_PROG([tpm2_create], [tpm2_create], [yes], [no]) AS_IF([test "x$tpm2_create" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_create, but executable not found.])]) AC_CHECK_PROG([tpm2_evictcontrol], [tpm2_evictcontrol], [yes], [no]) AS_IF([test "x$tpm2_evictcontrol" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_evictcontrol, but executable not found.])]) AC_CHECK_PROG([tpm2_readpublic], [tpm2_readpublic], [yes], [no]) AS_IF([test "x$tpm2_readpublic" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_readpublic, but executable not found.])]) AC_CHECK_PROG([tpm2_load], [tpm2_load], [yes], [no]) AS_IF([test "x$tpm2_load" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_load, but executable not found.])]) AC_CHECK_PROG([tpm2_loadexternal], [tpm2_loadexternal], [yes], [no]) AS_IF([test "x$tpm2_loadexternal" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_loadexternal, but executable not found.])]) AC_CHECK_PROG([tpm2_unseal], [tpm2_unseal], [yes], [no]) AS_IF([test "x$tpm2_unseal" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_unseal, but executable not found.])]) AC_CHECK_PROG([tpm2_encryptdecrypt], [tpm2_encryptdecrypt], [yes], [no]) AS_IF([test "x$tpm2_encryptdecrypt" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_encryptdecrypt, but executable not found.])]) AC_CHECK_PROG([tpm2_sign], [tpm2_sign], [yes], [no]) AS_IF([test "x$tpm2_sign" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_sign, but executable not found.])]) AC_CHECK_PROG([tpm2_getcap], [tpm2_getcap], [yes], [no]) AS_IF([test "x$tpm2_getcap" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_getcap, but executable not found.])]) AC_CHECK_PROG([tpm2_import], [tpm2_import], [yes], [no]) AS_IF([test "x$tpm2_import" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_import, but executable not found.])]) AC_CHECK_PROG([tpm2_changeauth], [tpm2_changeauth], [yes], [no]) AS_IF([test "x$tpm2_changeauth" != "xyes"], [AC_MSG_ERROR([tpm2_ptool requires tpm2_changeauth, but executable not found.])]) # set enginesdir to be either the engines dir for OSSL < 3.0 and the provider (libdir var) # path and look for the shared object implementing the plugin functionality for openssl. AS_IF([test "x$have_ossl3" = "xyes"], [PKG_CHECK_VAR([enginesdir], [libcrypto], [libdir],, AC_MSG_ERROR([could not determine openssl provider path.]))], [PKG_CHECK_VAR([enginesdir], [libcrypto], [enginesdir],, AC_MSG_ERROR([could not determine openssl engine path.]))] ) AS_IF([test "x$have_ossl3" = "xyes"], [AC_CHECK_FILE([$enginesdir/tpm2.so])], [PKG_CHECK_MODULES([OPENSC_PKCS11],[opensc-pkcs11],, [AC_CHECK_FILE([$enginesdir/engine_pkcs11.so])]) ]) PKG_CHECK_MODULES([TSS2_TCTI_TABRMD],[tss2-tcti-tabrmd]) AC_CHECK_PROG([swtpm], [swtpm], [yes], [no]) AC_CHECK_PROG([tpm_server], [tpm_server], [yes], [no]) AS_IF([test "$swtpm" = yes], [TABRMD_TCTI=swtpm], [AS_IF([test "$tpm_server" = yes], [TABRMD_TCTI=mssim], [AC_MSG_ERROR([Integration tests enabled but swtpm (or tpm_server) executable not found.])])]) AC_SUBST([TABRMD_TCTI]) AC_CHECK_PROG([ss], [ss], [yes], [no]) AS_IF([test "x$ss" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but ss executable not found.])]) AC_CHECK_PROG([certutil], [certutil], [yes], [no]) AS_IF([test "x$certutil" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but certutil executable not found.])]) AC_CHECK_PROG([modutil], [modutil], [yes], [no]) AS_IF([test "x$modutil" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but modutil executable not found.])]) AC_CHECK_PROG([expect], [expect], [yes], [no]) AS_IF([test "x$expect" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but expect executable not found.])]) AC_CHECK_PROG([pkcs11_tool], [pkcs11-tool], [yes], [no]) AS_IF([test "x$pkcs11_tool" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but pkcs11-tool executable not found.])]) AC_CHECK_PROG([p11tool], [p11tool], [yes], [no]) AS_IF([test "x$p11tool" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but p11tool executable not found.])]) AC_CHECK_PROG([bash], [bash], [yes], [no]) AS_IF([test "x$bash" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but bash executable not found.])]) AC_CHECK_PROG([sqlite3], [sqlite3], [yes], [no]) AS_IF([test "x$sqlite3" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but sqlite3 executable not found.])]) AC_CHECK_PROG([tpm2_abrmd], [tpm2-abrmd], [yes], [no]) AS_IF([test "x$tpm2_abrmd" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but tpm2-abrmd executable not found.])]) AS_IF([test "x$have_ossl3" = "xno"], [AC_CHECK_PROG([tpm2tss_genkey], [tpm2tss-genkey])]) AS_IF([test "$have_fapi" = "1"], [ AC_CHECK_PROG([tss2_provision], [tss2_provision], [yes], [no]) AS_IF([test "x$tss2_provision" != "xyes"], [AC_MSG_ERROR([Integration tests enabled but tss2_provision executable not found.])]) ]) AS_IF([test "x$have_javac" = "xno"], [AC_MSG_ERROR([Integration tests enabled but no Java compiler was found])]) AX_CHECK_CLASS([org.junit.Assert], , [AC_MSG_ERROR([Integration tests enabled but JUnit not found, try setting CLASSPATH])]) AX_CHECK_CLASS([org.hamcrest.SelfDescribing], , [AC_MSG_ERROR([Integration tests enabled but Hamcrest not found, try setting CLASSPATH])]) AC_SUBST([ENABLE_INTEGRATION], [$enable_integration]) ]) # end function integration_test_checks AS_IF([test "x$enable_integration" = "xyes"], [integration_test_checks]) AM_CONDITIONAL([ENABLE_INTEGRATION],[test "x$enable_integration" = "xyes"]) # END ENABLE INTEGRATION AC_DEFUN([handle_store_dir],[ AX_NORMALIZE_PATH([with_storedir]) AC_DEFINE_UNQUOTED([TPM2_PKCS11_STORE_DIR], ["$with_storedir"], [Changes the store directory to search. Defaults to /etc/tpm2_pkcs11]) ]) # START WITH STOREDIR # # Enable --with-storedir for changing the default store directory search path # AC_ARG_WITH( [storedir], [AS_HELP_STRING([--with-storedir=DIR],[Store directory for searching, defaults to /etc/tpm2_pkcs11])], [handle_store_dir] ) # END WITH STOREDIR # START ENABLE PACK # # Enable --enable-pack for forcing structure packing # AC_ARG_ENABLE( [pack], [AS_HELP_STRING([--enable-pack=]@<:@yes/no@:>@, [Pack the structures. (default is no, except on Windows, where it defaults to packing)])],, [enable_pack=no]) AS_IF([test "x$enable_pack" = "xyes"], [AC_DEFINE([PKCS11_PACK], [1], [Define to enable 1 byte structure packing. Default for Windows builds.]) ]) # END ENABLE PACK # START P11 CONFIG # If P11 kit is installed we want to detect it and install # the module config file and change the library install location. AC_DEFUN([do_p11kit_config], [ AS_IF([test -z "$1"], [ PKG_CHECK_VAR([P11_MODULE_PATH], [p11-kit-1], [p11_module_path]) AC_MSG_CHECKING([p11 module path]) AS_IF([test "x$P11_MODULE_PATH" = "x"], [ AC_MSG_FAILURE([Unable to identify p11 module path.]) ]) AC_MSG_RESULT([$P11_MODULE_PATH]) ], [ AC_SUBST(P11_MODULE_PATH, [$1]) ]) AS_IF([test -z "$2"], [ PKG_CHECK_VAR([P11_CONFIGS_PATH], [p11-kit-1], [p11_module_configs]) AC_MSG_CHECKING([p11 configs path]) AS_IF([test "x$P11_CONFIGS_PATH" = "x"], [ AC_MSG_FAILURE([Unable to identify p11 configs path.]) ]) AC_MSG_RESULT([$P11_CONFIGS_PATH]) ], [ AC_SUBST(P11_CONFIGS_PATH, [$2]) ]) ]) AC_ARG_WITH([p11kitconfigdir], AS_HELP_STRING([--with-p11kitconfigdir=DIR], [directory for p11kit config])) AC_SUBST(p11kitconfigdir, [$with_p11kitconfigdir]) AC_ARG_WITH([p11kitmoduledir], AS_HELP_STRING([--with-p11kitmoduledir=DIR], [directory for p11 libraries])) AC_SUBST(p11kitmoduledir, [$with_p11kitmoduledir]) # set havep11kit based on if P11kit is installed, then: # 1. execute function do_p11kit_config # 2. set the makefile flag HAVE_P11_KIT PKG_CHECK_MODULES( [P11KIT], [p11-kit-1], [have_p11kit=yes], [have_p11kit=no]) AS_IF([test "x$have_p11kit" = "xyes"], [ do_p11kit_config([$p11kitmoduledir], [$p11kitconfigdir]) ]) AM_CONDITIONAL([HAVE_P11KIT], [test "x$have_p11kit" = "xyes"]) # check for --prefix and set flag HAVE_PREFIX if found # do not change install location if --prefix is given and with P11_KIT found AM_CONDITIONAL([HAVE_PREFIX], [test ! -z "$(prefix)"]) # END P11 CONFIG AC_C_BIGENDIAN() # Good information on adding flags, and dealing with compilers can be found here: # https://github.com/zcash/zcash/issues/1832 # https://github.com/kmcallister/autoharden/ AS_IF([test x"$enable_hardening" != xno], [ AC_DEFUN([add_hardened_ld_flag], [ AX_CHECK_LINK_FLAG([$1], [EXTRA_LDFLAGS="$EXTRA_LDFLAGS $1"], [AC_MSG_ERROR([Cannot enable $1, consider configuring with --disable-hardening])] ) ]) AC_DEFUN([add_hardened_define_flag], [ AX_CHECK_PREPROC_FLAG([$1], [EXTRA_CFLAGS="$EXTRA_CFLAGS $1"], [AC_MSG_ERROR([Cannot enable $1, consider configuring with --disable-hardening])] ) ]) add_hardened_c_flag([-Wall]) add_hardened_c_flag([-Wextra]) AS_IF([test "x$ax_is_release" = "xno"], [add_hardened_c_flag([-Werror])]) add_hardened_c_flag([-Wformat]) add_hardened_c_flag([-Wformat-security]) add_hardened_c_flag([-Wstack-protector]) add_hardened_c_flag([-fstack-protector-all]) add_hardened_c_flag([-Wstrict-overflow=5]) add_hardened_c_flag([-O2]) AX_ADD_FORTIFY_SOURCE add_hardened_c_flag([-fPIC]) add_hardened_ld_flag([[-shared]]) add_hardened_c_flag([-fPIE]) add_hardened_ld_flag([[-pie]]) add_hardened_ld_flag([[-Wl,-z,relro]]) add_hardened_ld_flag([[-Wl,-z,now]]) ], [ AC_MSG_WARN([Compiling with --disable-hardening is dangerous! You should consider fixing the configure script compiler flags and submitting patches upstream!]) ]) # Best attempt, strip unused stuff from the binary to reduce size. # Rather than nesting these and making them ugly just use a counter. AX_CHECK_COMPILE_FLAG([-fdata-sections], [strip=y]) AX_CHECK_COMPILE_FLAG([-ffunction-sections], [strip="y$strip"]) AX_CHECK_LINK_FLAG([[-Wl,--gc-sections]], [strip="y$strip"]) AS_IF([test x"$strip" = xyyy], [ EXTRA_CFLAGS="$EXTRA_CFLAGS -fdata-sections -ffunction-sections" EXTRA_LDFLAGS="$EXTRA_LDFLAGS -Wl,--gc-sections" ], AC_MSG_NOTICE([Not using compiler options to reduce binary size!]) ) AC_SUBST([EXTRA_CFLAGS]) AC_SUBST([EXTRA_LDFLAGS]) AC_OUTPUT tpm2-pkcs11-1.9.1/aclocal.m40000644000175100017510000015724314674407104011052 # generated automatically by aclocal 1.16.5 -*- Autoconf -*- # Copyright (C) 1996-2021 Free Software Foundation, Inc. # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY, to the extent permitted by law; without # even the implied warranty of MERCHANTABILITY or FITNESS FOR A # PARTICULAR PURPOSE. m4_ifndef([AC_CONFIG_MACRO_DIRS], [m4_defun([_AM_CONFIG_MACRO_DIRS], [])m4_defun([AC_CONFIG_MACRO_DIRS], [_AM_CONFIG_MACRO_DIRS($@)])]) m4_ifndef([AC_AUTOCONF_VERSION], [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl m4_if(m4_defn([AC_AUTOCONF_VERSION]), [2.71],, [m4_warning([this file was generated for autoconf 2.71. You have another version of autoconf. It may work, but is not guaranteed to. If you have problems, you may need to regenerate the build system entirely. To do so, use the procedure documented by the package, typically 'autoreconf'.])]) # Copyright (C) 2002-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_AUTOMAKE_VERSION(VERSION) # ---------------------------- # Automake X.Y traces this macro to ensure aclocal.m4 has been # generated from the m4 files accompanying Automake X.Y. # (This private macro should not be called outside this file.) AC_DEFUN([AM_AUTOMAKE_VERSION], [am__api_version='1.16' dnl Some users find AM_AUTOMAKE_VERSION and mistake it for a way to dnl require some minimum version. Point them to the right macro. m4_if([$1], [1.16.5], [], [AC_FATAL([Do not call $0, use AM_INIT_AUTOMAKE([$1]).])])dnl ]) # _AM_AUTOCONF_VERSION(VERSION) # ----------------------------- # aclocal traces this macro to find the Autoconf version. # This is a private macro too. Using m4_define simplifies # the logic in aclocal, which can simply ignore this definition. m4_define([_AM_AUTOCONF_VERSION], []) # AM_SET_CURRENT_AUTOMAKE_VERSION # ------------------------------- # Call AM_AUTOMAKE_VERSION and AM_AUTOMAKE_VERSION so they can be traced. # This function is AC_REQUIREd by AM_INIT_AUTOMAKE. AC_DEFUN([AM_SET_CURRENT_AUTOMAKE_VERSION], [AM_AUTOMAKE_VERSION([1.16.5])dnl m4_ifndef([AC_AUTOCONF_VERSION], [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl _AM_AUTOCONF_VERSION(m4_defn([AC_AUTOCONF_VERSION]))]) # AM_AUX_DIR_EXPAND -*- Autoconf -*- # Copyright (C) 2001-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # For projects using AC_CONFIG_AUX_DIR([foo]), Autoconf sets # $ac_aux_dir to '$srcdir/foo'. In other projects, it is set to # '$srcdir', '$srcdir/..', or '$srcdir/../..'. # # Of course, Automake must honor this variable whenever it calls a # tool from the auxiliary directory. The problem is that $srcdir (and # therefore $ac_aux_dir as well) can be either absolute or relative, # depending on how configure is run. This is pretty annoying, since # it makes $ac_aux_dir quite unusable in subdirectories: in the top # source directory, any form will work fine, but in subdirectories a # relative path needs to be adjusted first. # # $ac_aux_dir/missing # fails when called from a subdirectory if $ac_aux_dir is relative # $top_srcdir/$ac_aux_dir/missing # fails if $ac_aux_dir is absolute, # fails when called from a subdirectory in a VPATH build with # a relative $ac_aux_dir # # The reason of the latter failure is that $top_srcdir and $ac_aux_dir # are both prefixed by $srcdir. In an in-source build this is usually # harmless because $srcdir is '.', but things will broke when you # start a VPATH build or use an absolute $srcdir. # # So we could use something similar to $top_srcdir/$ac_aux_dir/missing, # iff we strip the leading $srcdir from $ac_aux_dir. That would be: # am_aux_dir='\$(top_srcdir)/'`expr "$ac_aux_dir" : "$srcdir//*\(.*\)"` # and then we would define $MISSING as # MISSING="\${SHELL} $am_aux_dir/missing" # This will work as long as MISSING is not called from configure, because # unfortunately $(top_srcdir) has no meaning in configure. # However there are other variables, like CC, which are often used in # configure, and could therefore not use this "fixed" $ac_aux_dir. # # Another solution, used here, is to always expand $ac_aux_dir to an # absolute PATH. The drawback is that using absolute paths prevent a # configured tree to be moved without reconfiguration. AC_DEFUN([AM_AUX_DIR_EXPAND], [AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl # Expand $ac_aux_dir to an absolute path. am_aux_dir=`cd "$ac_aux_dir" && pwd` ]) # AM_CONDITIONAL -*- Autoconf -*- # Copyright (C) 1997-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_CONDITIONAL(NAME, SHELL-CONDITION) # ------------------------------------- # Define a conditional. AC_DEFUN([AM_CONDITIONAL], [AC_PREREQ([2.52])dnl m4_if([$1], [TRUE], [AC_FATAL([$0: invalid condition: $1])], [$1], [FALSE], [AC_FATAL([$0: invalid condition: $1])])dnl AC_SUBST([$1_TRUE])dnl AC_SUBST([$1_FALSE])dnl _AM_SUBST_NOTMAKE([$1_TRUE])dnl _AM_SUBST_NOTMAKE([$1_FALSE])dnl m4_define([_AM_COND_VALUE_$1], [$2])dnl if $2; then $1_TRUE= $1_FALSE='#' else $1_TRUE='#' $1_FALSE= fi AC_CONFIG_COMMANDS_PRE( [if test -z "${$1_TRUE}" && test -z "${$1_FALSE}"; then AC_MSG_ERROR([[conditional "$1" was never defined. Usually this means the macro was only invoked conditionally.]]) fi])]) # Copyright (C) 1999-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # There are a few dirty hacks below to avoid letting 'AC_PROG_CC' be # written in clear, in which case automake, when reading aclocal.m4, # will think it sees a *use*, and therefore will trigger all it's # C support machinery. Also note that it means that autoscan, seeing # CC etc. in the Makefile, will ask for an AC_PROG_CC use... # _AM_DEPENDENCIES(NAME) # ---------------------- # See how the compiler implements dependency checking. # NAME is "CC", "CXX", "OBJC", "OBJCXX", "UPC", or "GJC". # We try a few techniques and use that to set a single cache variable. # # We don't AC_REQUIRE the corresponding AC_PROG_CC since the latter was # modified to invoke _AM_DEPENDENCIES(CC); we would have a circular # dependency, and given that the user is not expected to run this macro, # just rely on AC_PROG_CC. AC_DEFUN([_AM_DEPENDENCIES], [AC_REQUIRE([AM_SET_DEPDIR])dnl AC_REQUIRE([AM_OUTPUT_DEPENDENCY_COMMANDS])dnl AC_REQUIRE([AM_MAKE_INCLUDE])dnl AC_REQUIRE([AM_DEP_TRACK])dnl m4_if([$1], [CC], [depcc="$CC" am_compiler_list=], [$1], [CXX], [depcc="$CXX" am_compiler_list=], [$1], [OBJC], [depcc="$OBJC" am_compiler_list='gcc3 gcc'], [$1], [OBJCXX], [depcc="$OBJCXX" am_compiler_list='gcc3 gcc'], [$1], [UPC], [depcc="$UPC" am_compiler_list=], [$1], [GCJ], [depcc="$GCJ" am_compiler_list='gcc3 gcc'], [depcc="$$1" am_compiler_list=]) AC_CACHE_CHECK([dependency style of $depcc], [am_cv_$1_dependencies_compiler_type], [if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then # We make a subdir and do the tests there. Otherwise we can end up # making bogus files that we don't know about and never remove. For # instance it was reported that on HP-UX the gcc test will end up # making a dummy file named 'D' -- because '-MD' means "put the output # in D". rm -rf conftest.dir mkdir conftest.dir # Copy depcomp to subdir because otherwise we won't find it if we're # using a relative directory. cp "$am_depcomp" conftest.dir cd conftest.dir # We will build objects and dependencies in a subdirectory because # it helps to detect inapplicable dependency modes. For instance # both Tru64's cc and ICC support -MD to output dependencies as a # side effect of compilation, but ICC will put the dependencies in # the current directory while Tru64 will put them in the object # directory. mkdir sub am_cv_$1_dependencies_compiler_type=none if test "$am_compiler_list" = ""; then am_compiler_list=`sed -n ['s/^#*\([a-zA-Z0-9]*\))$/\1/p'] < ./depcomp` fi am__universal=false m4_case([$1], [CC], [case " $depcc " in #( *\ -arch\ *\ -arch\ *) am__universal=true ;; esac], [CXX], [case " $depcc " in #( *\ -arch\ *\ -arch\ *) am__universal=true ;; esac]) for depmode in $am_compiler_list; do # Setup a source with many dependencies, because some compilers # like to wrap large dependency lists on column 80 (with \), and # we should not choose a depcomp mode which is confused by this. # # We need to recreate these files for each test, as the compiler may # overwrite some of them when testing with obscure command lines. # This happens at least with the AIX C compiler. : > sub/conftest.c for i in 1 2 3 4 5 6; do echo '#include "conftst'$i'.h"' >> sub/conftest.c # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with # Solaris 10 /bin/sh. echo '/* dummy */' > sub/conftst$i.h done echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf # We check with '-c' and '-o' for the sake of the "dashmstdout" # mode. It turns out that the SunPro C++ compiler does not properly # handle '-M -o', and we need to detect this. Also, some Intel # versions had trouble with output in subdirs. am__obj=sub/conftest.${OBJEXT-o} am__minus_obj="-o $am__obj" case $depmode in gcc) # This depmode causes a compiler race in universal mode. test "$am__universal" = false || continue ;; nosideeffect) # After this tag, mechanisms are not by side-effect, so they'll # only be used when explicitly requested. if test "x$enable_dependency_tracking" = xyes; then continue else break fi ;; msvc7 | msvc7msys | msvisualcpp | msvcmsys) # This compiler won't grok '-c -o', but also, the minuso test has # not run yet. These depmodes are late enough in the game, and # so weak that their functioning should not be impacted. am__obj=conftest.${OBJEXT-o} am__minus_obj= ;; none) break ;; esac if depmode=$depmode \ source=sub/conftest.c object=$am__obj \ depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \ $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \ >/dev/null 2>conftest.err && grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 && grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 && grep $am__obj sub/conftest.Po > /dev/null 2>&1 && ${MAKE-make} -s -f confmf > /dev/null 2>&1; then # icc doesn't choke on unknown options, it will just issue warnings # or remarks (even with -Werror). So we grep stderr for any message # that says an option was ignored or not supported. # When given -MP, icc 7.0 and 7.1 complain thusly: # icc: Command line warning: ignoring option '-M'; no argument required # The diagnosis changed in icc 8.0: # icc: Command line remark: option '-MP' not supported if (grep 'ignoring option' conftest.err || grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else am_cv_$1_dependencies_compiler_type=$depmode break fi fi done cd .. rm -rf conftest.dir else am_cv_$1_dependencies_compiler_type=none fi ]) AC_SUBST([$1DEPMODE], [depmode=$am_cv_$1_dependencies_compiler_type]) AM_CONDITIONAL([am__fastdep$1], [ test "x$enable_dependency_tracking" != xno \ && test "$am_cv_$1_dependencies_compiler_type" = gcc3]) ]) # AM_SET_DEPDIR # ------------- # Choose a directory name for dependency files. # This macro is AC_REQUIREd in _AM_DEPENDENCIES. AC_DEFUN([AM_SET_DEPDIR], [AC_REQUIRE([AM_SET_LEADING_DOT])dnl AC_SUBST([DEPDIR], ["${am__leading_dot}deps"])dnl ]) # AM_DEP_TRACK # ------------ AC_DEFUN([AM_DEP_TRACK], [AC_ARG_ENABLE([dependency-tracking], [dnl AS_HELP_STRING( [--enable-dependency-tracking], [do not reject slow dependency extractors]) AS_HELP_STRING( [--disable-dependency-tracking], [speeds up one-time build])]) if test "x$enable_dependency_tracking" != xno; then am_depcomp="$ac_aux_dir/depcomp" AMDEPBACKSLASH='\' am__nodep='_no' fi AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno]) AC_SUBST([AMDEPBACKSLASH])dnl _AM_SUBST_NOTMAKE([AMDEPBACKSLASH])dnl AC_SUBST([am__nodep])dnl _AM_SUBST_NOTMAKE([am__nodep])dnl ]) # Generate code to set up dependency tracking. -*- Autoconf -*- # Copyright (C) 1999-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # _AM_OUTPUT_DEPENDENCY_COMMANDS # ------------------------------ AC_DEFUN([_AM_OUTPUT_DEPENDENCY_COMMANDS], [{ # Older Autoconf quotes --file arguments for eval, but not when files # are listed without --file. Let's play safe and only enable the eval # if we detect the quoting. # TODO: see whether this extra hack can be removed once we start # requiring Autoconf 2.70 or later. AS_CASE([$CONFIG_FILES], [*\'*], [eval set x "$CONFIG_FILES"], [*], [set x $CONFIG_FILES]) shift # Used to flag and report bootstrapping failures. am_rc=0 for am_mf do # Strip MF so we end up with the name of the file. am_mf=`AS_ECHO(["$am_mf"]) | sed -e 's/:.*$//'` # Check whether this is an Automake generated Makefile which includes # dependency-tracking related rules and includes. # Grep'ing the whole file directly is not great: AIX grep has a line # limit of 2048, but all sed's we know have understand at least 4000. sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \ || continue am_dirpart=`AS_DIRNAME(["$am_mf"])` am_filepart=`AS_BASENAME(["$am_mf"])` AM_RUN_LOG([cd "$am_dirpart" \ && sed -e '/# am--include-marker/d' "$am_filepart" \ | $MAKE -f - am--depfiles]) || am_rc=$? done if test $am_rc -ne 0; then AC_MSG_FAILURE([Something went wrong bootstrapping makefile fragments for automatic dependency tracking. If GNU make was not used, consider re-running the configure script with MAKE="gmake" (or whatever is necessary). You can also try re-running configure with the '--disable-dependency-tracking' option to at least be able to build the package (albeit without support for automatic dependency tracking).]) fi AS_UNSET([am_dirpart]) AS_UNSET([am_filepart]) AS_UNSET([am_mf]) AS_UNSET([am_rc]) rm -f conftest-deps.mk } ])# _AM_OUTPUT_DEPENDENCY_COMMANDS # AM_OUTPUT_DEPENDENCY_COMMANDS # ----------------------------- # This macro should only be invoked once -- use via AC_REQUIRE. # # This code is only required when automatic dependency tracking is enabled. # This creates each '.Po' and '.Plo' makefile fragment that we'll need in # order to bootstrap the dependency handling code. AC_DEFUN([AM_OUTPUT_DEPENDENCY_COMMANDS], [AC_CONFIG_COMMANDS([depfiles], [test x"$AMDEP_TRUE" != x"" || _AM_OUTPUT_DEPENDENCY_COMMANDS], [AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"])]) # Do all the work for Automake. -*- Autoconf -*- # Copyright (C) 1996-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # This macro actually does too much. Some checks are only needed if # your package does certain things. But this isn't really a big deal. dnl Redefine AC_PROG_CC to automatically invoke _AM_PROG_CC_C_O. m4_define([AC_PROG_CC], m4_defn([AC_PROG_CC]) [_AM_PROG_CC_C_O ]) # AM_INIT_AUTOMAKE(PACKAGE, VERSION, [NO-DEFINE]) # AM_INIT_AUTOMAKE([OPTIONS]) # ----------------------------------------------- # The call with PACKAGE and VERSION arguments is the old style # call (pre autoconf-2.50), which is being phased out. PACKAGE # and VERSION should now be passed to AC_INIT and removed from # the call to AM_INIT_AUTOMAKE. # We support both call styles for the transition. After # the next Automake release, Autoconf can make the AC_INIT # arguments mandatory, and then we can depend on a new Autoconf # release and drop the old call support. AC_DEFUN([AM_INIT_AUTOMAKE], [AC_PREREQ([2.65])dnl m4_ifdef([_$0_ALREADY_INIT], [m4_fatal([$0 expanded multiple times ]m4_defn([_$0_ALREADY_INIT]))], [m4_define([_$0_ALREADY_INIT], m4_expansion_stack)])dnl dnl Autoconf wants to disallow AM_ names. We explicitly allow dnl the ones we care about. m4_pattern_allow([^AM_[A-Z]+FLAGS$])dnl AC_REQUIRE([AM_SET_CURRENT_AUTOMAKE_VERSION])dnl AC_REQUIRE([AC_PROG_INSTALL])dnl if test "`cd $srcdir && pwd`" != "`pwd`"; then # Use -I$(srcdir) only when $(srcdir) != ., so that make's output # is not polluted with repeated "-I." AC_SUBST([am__isrc], [' -I$(srcdir)'])_AM_SUBST_NOTMAKE([am__isrc])dnl # test to see if srcdir already configured if test -f $srcdir/config.status; then AC_MSG_ERROR([source directory already configured; run "make distclean" there first]) fi fi # test whether we have cygpath if test -z "$CYGPATH_W"; then if (cygpath --version) >/dev/null 2>/dev/null; then CYGPATH_W='cygpath -w' else CYGPATH_W=echo fi fi AC_SUBST([CYGPATH_W]) # Define the identity of the package. dnl Distinguish between old-style and new-style calls. m4_ifval([$2], [AC_DIAGNOSE([obsolete], [$0: two- and three-arguments forms are deprecated.]) m4_ifval([$3], [_AM_SET_OPTION([no-define])])dnl AC_SUBST([PACKAGE], [$1])dnl AC_SUBST([VERSION], [$2])], [_AM_SET_OPTIONS([$1])dnl dnl Diagnose old-style AC_INIT with new-style AM_AUTOMAKE_INIT. m4_if( m4_ifset([AC_PACKAGE_NAME], [ok]):m4_ifset([AC_PACKAGE_VERSION], [ok]), [ok:ok],, [m4_fatal([AC_INIT should be called with package and version arguments])])dnl AC_SUBST([PACKAGE], ['AC_PACKAGE_TARNAME'])dnl AC_SUBST([VERSION], ['AC_PACKAGE_VERSION'])])dnl _AM_IF_OPTION([no-define],, [AC_DEFINE_UNQUOTED([PACKAGE], ["$PACKAGE"], [Name of package]) AC_DEFINE_UNQUOTED([VERSION], ["$VERSION"], [Version number of package])])dnl # Some tools Automake needs. AC_REQUIRE([AM_SANITY_CHECK])dnl AC_REQUIRE([AC_ARG_PROGRAM])dnl AM_MISSING_PROG([ACLOCAL], [aclocal-${am__api_version}]) AM_MISSING_PROG([AUTOCONF], [autoconf]) AM_MISSING_PROG([AUTOMAKE], [automake-${am__api_version}]) AM_MISSING_PROG([AUTOHEADER], [autoheader]) AM_MISSING_PROG([MAKEINFO], [makeinfo]) AC_REQUIRE([AM_PROG_INSTALL_SH])dnl AC_REQUIRE([AM_PROG_INSTALL_STRIP])dnl AC_REQUIRE([AC_PROG_MKDIR_P])dnl # For better backward compatibility. To be removed once Automake 1.9.x # dies out for good. For more background, see: # # AC_SUBST([mkdir_p], ['$(MKDIR_P)']) # We need awk for the "check" target (and possibly the TAP driver). The # system "awk" is bad on some platforms. AC_REQUIRE([AC_PROG_AWK])dnl AC_REQUIRE([AC_PROG_MAKE_SET])dnl AC_REQUIRE([AM_SET_LEADING_DOT])dnl _AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])], [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])], [_AM_PROG_TAR([v7])])]) _AM_IF_OPTION([no-dependencies],, [AC_PROVIDE_IFELSE([AC_PROG_CC], [_AM_DEPENDENCIES([CC])], [m4_define([AC_PROG_CC], m4_defn([AC_PROG_CC])[_AM_DEPENDENCIES([CC])])])dnl AC_PROVIDE_IFELSE([AC_PROG_CXX], [_AM_DEPENDENCIES([CXX])], [m4_define([AC_PROG_CXX], m4_defn([AC_PROG_CXX])[_AM_DEPENDENCIES([CXX])])])dnl AC_PROVIDE_IFELSE([AC_PROG_OBJC], [_AM_DEPENDENCIES([OBJC])], [m4_define([AC_PROG_OBJC], m4_defn([AC_PROG_OBJC])[_AM_DEPENDENCIES([OBJC])])])dnl AC_PROVIDE_IFELSE([AC_PROG_OBJCXX], [_AM_DEPENDENCIES([OBJCXX])], [m4_define([AC_PROG_OBJCXX], m4_defn([AC_PROG_OBJCXX])[_AM_DEPENDENCIES([OBJCXX])])])dnl ]) # Variables for tags utilities; see am/tags.am if test -z "$CTAGS"; then CTAGS=ctags fi AC_SUBST([CTAGS]) if test -z "$ETAGS"; then ETAGS=etags fi AC_SUBST([ETAGS]) if test -z "$CSCOPE"; then CSCOPE=cscope fi AC_SUBST([CSCOPE]) AC_REQUIRE([AM_SILENT_RULES])dnl dnl The testsuite driver may need to know about EXEEXT, so add the dnl 'am__EXEEXT' conditional if _AM_COMPILER_EXEEXT was seen. This dnl macro is hooked onto _AC_COMPILER_EXEEXT early, see below. AC_CONFIG_COMMANDS_PRE(dnl [m4_provide_if([_AM_COMPILER_EXEEXT], [AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])])])dnl # POSIX will say in a future version that running "rm -f" with no argument # is OK; and we want to be able to make that assumption in our Makefile # recipes. So use an aggressive probe to check that the usage we want is # actually supported "in the wild" to an acceptable degree. # See automake bug#10828. # To make any issue more visible, cause the running configure to be aborted # by default if the 'rm' program in use doesn't match our expectations; the # user can still override this though. if rm -f && rm -fr && rm -rf; then : OK; else cat >&2 <<'END' Oops! Your 'rm' program seems unable to run without file operands specified on the command line, even when the '-f' option is present. This is contrary to the behaviour of most rm programs out there, and not conforming with the upcoming POSIX standard: Please tell bug-automake@gnu.org about your system, including the value of your $PATH and any error possibly output before this message. This can help us improve future automake versions. END if test x"$ACCEPT_INFERIOR_RM_PROGRAM" = x"yes"; then echo 'Configuration will proceed anyway, since you have set the' >&2 echo 'ACCEPT_INFERIOR_RM_PROGRAM variable to "yes"' >&2 echo >&2 else cat >&2 <<'END' Aborting the configuration process, to ensure you take notice of the issue. You can download and install GNU coreutils to get an 'rm' implementation that behaves properly: . If you want to complete the configuration process using your problematic 'rm' anyway, export the environment variable ACCEPT_INFERIOR_RM_PROGRAM to "yes", and re-run configure. END AC_MSG_ERROR([Your 'rm' program is bad, sorry.]) fi fi dnl The trailing newline in this macro's definition is deliberate, for dnl backward compatibility and to allow trailing 'dnl'-style comments dnl after the AM_INIT_AUTOMAKE invocation. See automake bug#16841. ]) dnl Hook into '_AC_COMPILER_EXEEXT' early to learn its expansion. Do not dnl add the conditional right here, as _AC_COMPILER_EXEEXT may be further dnl mangled by Autoconf and run in a shell conditional statement. m4_define([_AC_COMPILER_EXEEXT], m4_defn([_AC_COMPILER_EXEEXT])[m4_provide([_AM_COMPILER_EXEEXT])]) # When config.status generates a header, we must update the stamp-h file. # This file resides in the same directory as the config header # that is generated. The stamp files are numbered to have different names. # Autoconf calls _AC_AM_CONFIG_HEADER_HOOK (when defined) in the # loop where config.status creates the headers, so we can generate # our stamp files there. AC_DEFUN([_AC_AM_CONFIG_HEADER_HOOK], [# Compute $1's index in $config_headers. _am_arg=$1 _am_stamp_count=1 for _am_header in $config_headers :; do case $_am_header in $_am_arg | $_am_arg:* ) break ;; * ) _am_stamp_count=`expr $_am_stamp_count + 1` ;; esac done echo "timestamp for $_am_arg" >`AS_DIRNAME(["$_am_arg"])`/stamp-h[]$_am_stamp_count]) # Copyright (C) 2001-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_PROG_INSTALL_SH # ------------------ # Define $install_sh. AC_DEFUN([AM_PROG_INSTALL_SH], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl if test x"${install_sh+set}" != xset; then case $am_aux_dir in *\ * | *\ *) install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;; *) install_sh="\${SHELL} $am_aux_dir/install-sh" esac fi AC_SUBST([install_sh])]) # Copyright (C) 2003-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # Check whether the underlying file-system supports filenames # with a leading dot. For instance MS-DOS doesn't. AC_DEFUN([AM_SET_LEADING_DOT], [rm -rf .tst 2>/dev/null mkdir .tst 2>/dev/null if test -d .tst; then am__leading_dot=. else am__leading_dot=_ fi rmdir .tst 2>/dev/null AC_SUBST([am__leading_dot])]) # Check to see how 'make' treats includes. -*- Autoconf -*- # Copyright (C) 2001-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_MAKE_INCLUDE() # ----------------- # Check whether make has an 'include' directive that can support all # the idioms we need for our automatic dependency tracking code. AC_DEFUN([AM_MAKE_INCLUDE], [AC_MSG_CHECKING([whether ${MAKE-make} supports the include directive]) cat > confinc.mk << 'END' am__doit: @echo this is the am__doit target >confinc.out .PHONY: am__doit END am__include="#" am__quote= # BSD make does it like this. echo '.include "confinc.mk" # ignored' > confmf.BSD # Other make implementations (GNU, Solaris 10, AIX) do it like this. echo 'include confinc.mk # ignored' > confmf.GNU _am_result=no for s in GNU BSD; do AM_RUN_LOG([${MAKE-make} -f confmf.$s && cat confinc.out]) AS_CASE([$?:`cat confinc.out 2>/dev/null`], ['0:this is the am__doit target'], [AS_CASE([$s], [BSD], [am__include='.include' am__quote='"'], [am__include='include' am__quote=''])]) if test "$am__include" != "#"; then _am_result="yes ($s style)" break fi done rm -f confinc.* confmf.* AC_MSG_RESULT([${_am_result}]) AC_SUBST([am__include])]) AC_SUBST([am__quote])]) # Fake the existence of programs that GNU maintainers use. -*- Autoconf -*- # Copyright (C) 1997-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_MISSING_PROG(NAME, PROGRAM) # ------------------------------ AC_DEFUN([AM_MISSING_PROG], [AC_REQUIRE([AM_MISSING_HAS_RUN]) $1=${$1-"${am_missing_run}$2"} AC_SUBST($1)]) # AM_MISSING_HAS_RUN # ------------------ # Define MISSING if not defined so far and test if it is modern enough. # If it is, set am_missing_run to use it, otherwise, to nothing. AC_DEFUN([AM_MISSING_HAS_RUN], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl AC_REQUIRE_AUX_FILE([missing])dnl if test x"${MISSING+set}" != xset; then MISSING="\${SHELL} '$am_aux_dir/missing'" fi # Use eval to expand $SHELL if eval "$MISSING --is-lightweight"; then am_missing_run="$MISSING " else am_missing_run= AC_MSG_WARN(['missing' script is too old or missing]) fi ]) # Helper functions for option handling. -*- Autoconf -*- # Copyright (C) 2001-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # _AM_MANGLE_OPTION(NAME) # ----------------------- AC_DEFUN([_AM_MANGLE_OPTION], [[_AM_OPTION_]m4_bpatsubst($1, [[^a-zA-Z0-9_]], [_])]) # _AM_SET_OPTION(NAME) # -------------------- # Set option NAME. Presently that only means defining a flag for this option. AC_DEFUN([_AM_SET_OPTION], [m4_define(_AM_MANGLE_OPTION([$1]), [1])]) # _AM_SET_OPTIONS(OPTIONS) # ------------------------ # OPTIONS is a space-separated list of Automake options. AC_DEFUN([_AM_SET_OPTIONS], [m4_foreach_w([_AM_Option], [$1], [_AM_SET_OPTION(_AM_Option)])]) # _AM_IF_OPTION(OPTION, IF-SET, [IF-NOT-SET]) # ------------------------------------------- # Execute IF-SET if OPTION is set, IF-NOT-SET otherwise. AC_DEFUN([_AM_IF_OPTION], [m4_ifset(_AM_MANGLE_OPTION([$1]), [$2], [$3])]) # Copyright (C) 1999-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # _AM_PROG_CC_C_O # --------------- # Like AC_PROG_CC_C_O, but changed for automake. We rewrite AC_PROG_CC # to automatically call this. AC_DEFUN([_AM_PROG_CC_C_O], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl AC_REQUIRE_AUX_FILE([compile])dnl AC_LANG_PUSH([C])dnl AC_CACHE_CHECK( [whether $CC understands -c and -o together], [am_cv_prog_cc_c_o], [AC_LANG_CONFTEST([AC_LANG_PROGRAM([])]) # Make sure it works both with $CC and with simple cc. # Following AC_PROG_CC_C_O, we do the test twice because some # compilers refuse to overwrite an existing .o file with -o, # though they will create one. am_cv_prog_cc_c_o=yes for am_i in 1 2; do if AM_RUN_LOG([$CC -c conftest.$ac_ext -o conftest2.$ac_objext]) \ && test -f conftest2.$ac_objext; then : OK else am_cv_prog_cc_c_o=no break fi done rm -f core conftest* unset am_i]) if test "$am_cv_prog_cc_c_o" != yes; then # Losing compiler, so override with the script. # FIXME: It is wrong to rewrite CC. # But if we don't then we get into trouble of one sort or another. # A longer-term fix would be to have automake use am__CC in this case, # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)" CC="$am_aux_dir/compile $CC" fi AC_LANG_POP([C])]) # For backward compatibility. AC_DEFUN_ONCE([AM_PROG_CC_C_O], [AC_REQUIRE([AC_PROG_CC])]) # Copyright (C) 1999-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_PATH_PYTHON([MINIMUM-VERSION], [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND]) # --------------------------------------------------------------------------- # Adds support for distributing Python modules and packages. To # install modules, copy them to $(pythondir), using the python_PYTHON # automake variable. To install a package with the same name as the # automake package, install to $(pkgpythondir), or use the # pkgpython_PYTHON automake variable. # # The variables $(pyexecdir) and $(pkgpyexecdir) are provided as # locations to install python extension modules (shared libraries). # Another macro is required to find the appropriate flags to compile # extension modules. # # If your package is configured with a different prefix to python, # users will have to add the install directory to the PYTHONPATH # environment variable, or create a .pth file (see the python # documentation for details). # # If the MINIMUM-VERSION argument is passed, AM_PATH_PYTHON will # cause an error if the version of python installed on the system # doesn't meet the requirement. MINIMUM-VERSION should consist of # numbers and dots only. AC_DEFUN([AM_PATH_PYTHON], [ dnl Find a Python interpreter. Python versions prior to 2.0 are not dnl supported. (2.0 was released on October 16, 2000). m4_define_default([_AM_PYTHON_INTERPRETER_LIST], [python python2 python3 dnl python3.9 python3.8 python3.7 python3.6 python3.5 python3.4 python3.3 dnl python3.2 python3.1 python3.0 dnl python2.7 python2.6 python2.5 python2.4 python2.3 python2.2 python2.1 dnl python2.0]) AC_ARG_VAR([PYTHON], [the Python interpreter]) m4_if([$1],[],[ dnl No version check is needed. # Find any Python interpreter. if test -z "$PYTHON"; then AC_PATH_PROGS([PYTHON], _AM_PYTHON_INTERPRETER_LIST, :) fi am_display_PYTHON=python ], [ dnl A version check is needed. if test -n "$PYTHON"; then # If the user set $PYTHON, use it and don't search something else. AC_MSG_CHECKING([whether $PYTHON version is >= $1]) AM_PYTHON_CHECK_VERSION([$PYTHON], [$1], [AC_MSG_RESULT([yes])], [AC_MSG_RESULT([no]) AC_MSG_ERROR([Python interpreter is too old])]) am_display_PYTHON=$PYTHON else # Otherwise, try each interpreter until we find one that satisfies # VERSION. AC_CACHE_CHECK([for a Python interpreter with version >= $1], [am_cv_pathless_PYTHON],[ for am_cv_pathless_PYTHON in _AM_PYTHON_INTERPRETER_LIST none; do test "$am_cv_pathless_PYTHON" = none && break AM_PYTHON_CHECK_VERSION([$am_cv_pathless_PYTHON], [$1], [break]) done]) # Set $PYTHON to the absolute path of $am_cv_pathless_PYTHON. if test "$am_cv_pathless_PYTHON" = none; then PYTHON=: else AC_PATH_PROG([PYTHON], [$am_cv_pathless_PYTHON]) fi am_display_PYTHON=$am_cv_pathless_PYTHON fi ]) if test "$PYTHON" = :; then dnl Run any user-specified action, or abort. m4_default([$3], [AC_MSG_ERROR([no suitable Python interpreter found])]) else dnl Query Python for its version number. Although site.py simply uses dnl sys.version[:3], printing that failed with Python 3.10, since the dnl trailing zero was eliminated. So now we output just the major dnl and minor version numbers, as numbers. Apparently the tertiary dnl version is not of interest. dnl AC_CACHE_CHECK([for $am_display_PYTHON version], [am_cv_python_version], [am_cv_python_version=`$PYTHON -c "import sys; print ('%u.%u' % sys.version_info[[:2]])"`]) AC_SUBST([PYTHON_VERSION], [$am_cv_python_version]) dnl At times, e.g., when building shared libraries, you may want dnl to know which OS platform Python thinks this is. dnl AC_CACHE_CHECK([for $am_display_PYTHON platform], [am_cv_python_platform], [am_cv_python_platform=`$PYTHON -c "import sys; sys.stdout.write(sys.platform)"`]) AC_SUBST([PYTHON_PLATFORM], [$am_cv_python_platform]) dnl emacs-page dnl If --with-python-sys-prefix is given, use the values of sys.prefix dnl and sys.exec_prefix for the corresponding values of PYTHON_PREFIX dnl and PYTHON_EXEC_PREFIX. Otherwise, use the GNU ${prefix} and dnl ${exec_prefix} variables. dnl dnl The two are made distinct variables so they can be overridden if dnl need be, although general consensus is that you shouldn't need dnl this separation. dnl dnl Also allow directly setting the prefixes via configure options, dnl overriding any default. dnl if test "x$prefix" = xNONE; then am__usable_prefix=$ac_default_prefix else am__usable_prefix=$prefix fi # Allow user to request using sys.* values from Python, # instead of the GNU $prefix values. AC_ARG_WITH([python-sys-prefix], [AS_HELP_STRING([--with-python-sys-prefix], [use Python's sys.prefix and sys.exec_prefix values])], [am_use_python_sys=:], [am_use_python_sys=false]) # Allow user to override whatever the default Python prefix is. AC_ARG_WITH([python_prefix], [AS_HELP_STRING([--with-python_prefix], [override the default PYTHON_PREFIX])], [am_python_prefix_subst=$withval am_cv_python_prefix=$withval AC_MSG_CHECKING([for explicit $am_display_PYTHON prefix]) AC_MSG_RESULT([$am_cv_python_prefix])], [ if $am_use_python_sys; then # using python sys.prefix value, not GNU AC_CACHE_CHECK([for python default $am_display_PYTHON prefix], [am_cv_python_prefix], [am_cv_python_prefix=`$PYTHON -c "import sys; sys.stdout.write(sys.prefix)"`]) dnl If sys.prefix is a subdir of $prefix, replace the literal value of dnl $prefix with a variable reference so it can be overridden. case $am_cv_python_prefix in $am__usable_prefix*) am__strip_prefix=`echo "$am__usable_prefix" | sed 's|.|.|g'` am_python_prefix_subst=`echo "$am_cv_python_prefix" | sed "s,^$am__strip_prefix,\\${prefix},"` ;; *) am_python_prefix_subst=$am_cv_python_prefix ;; esac else # using GNU prefix value, not python sys.prefix am_python_prefix_subst='${prefix}' am_python_prefix=$am_python_prefix_subst AC_MSG_CHECKING([for GNU default $am_display_PYTHON prefix]) AC_MSG_RESULT([$am_python_prefix]) fi]) # Substituting python_prefix_subst value. AC_SUBST([PYTHON_PREFIX], [$am_python_prefix_subst]) # emacs-page Now do it all over again for Python exec_prefix, but with yet # another conditional: fall back to regular prefix if that was specified. AC_ARG_WITH([python_exec_prefix], [AS_HELP_STRING([--with-python_exec_prefix], [override the default PYTHON_EXEC_PREFIX])], [am_python_exec_prefix_subst=$withval am_cv_python_exec_prefix=$withval AC_MSG_CHECKING([for explicit $am_display_PYTHON exec_prefix]) AC_MSG_RESULT([$am_cv_python_exec_prefix])], [ # no explicit --with-python_exec_prefix, but if # --with-python_prefix was given, use its value for python_exec_prefix too. AS_IF([test -n "$with_python_prefix"], [am_python_exec_prefix_subst=$with_python_prefix am_cv_python_exec_prefix=$with_python_prefix AC_MSG_CHECKING([for python_prefix-given $am_display_PYTHON exec_prefix]) AC_MSG_RESULT([$am_cv_python_exec_prefix])], [ # Set am__usable_exec_prefix whether using GNU or Python values, # since we use that variable for pyexecdir. if test "x$exec_prefix" = xNONE; then am__usable_exec_prefix=$am__usable_prefix else am__usable_exec_prefix=$exec_prefix fi # if $am_use_python_sys; then # using python sys.exec_prefix, not GNU AC_CACHE_CHECK([for python default $am_display_PYTHON exec_prefix], [am_cv_python_exec_prefix], [am_cv_python_exec_prefix=`$PYTHON -c "import sys; sys.stdout.write(sys.exec_prefix)"`]) dnl If sys.exec_prefix is a subdir of $exec_prefix, replace the dnl literal value of $exec_prefix with a variable reference so it can dnl be overridden. case $am_cv_python_exec_prefix in $am__usable_exec_prefix*) am__strip_prefix=`echo "$am__usable_exec_prefix" | sed 's|.|.|g'` am_python_exec_prefix_subst=`echo "$am_cv_python_exec_prefix" | sed "s,^$am__strip_prefix,\\${exec_prefix},"` ;; *) am_python_exec_prefix_subst=$am_cv_python_exec_prefix ;; esac else # using GNU $exec_prefix, not python sys.exec_prefix am_python_exec_prefix_subst='${exec_prefix}' am_python_exec_prefix=$am_python_exec_prefix_subst AC_MSG_CHECKING([for GNU default $am_display_PYTHON exec_prefix]) AC_MSG_RESULT([$am_python_exec_prefix]) fi])]) # Substituting python_exec_prefix_subst. AC_SUBST([PYTHON_EXEC_PREFIX], [$am_python_exec_prefix_subst]) # Factor out some code duplication into this shell variable. am_python_setup_sysconfig="\ import sys # Prefer sysconfig over distutils.sysconfig, for better compatibility # with python 3.x. See automake bug#10227. try: import sysconfig except ImportError: can_use_sysconfig = 0 else: can_use_sysconfig = 1 # Can't use sysconfig in CPython 2.7, since it's broken in virtualenvs: # try: from platform import python_implementation if python_implementation() == 'CPython' and sys.version[[:3]] == '2.7': can_use_sysconfig = 0 except ImportError: pass" dnl emacs-page Set up 4 directories: dnl 1. pythondir: where to install python scripts. This is the dnl site-packages directory, not the python standard library dnl directory like in previous automake betas. This behavior dnl is more consistent with lispdir.m4 for example. dnl Query distutils for this directory. dnl AC_CACHE_CHECK([for $am_display_PYTHON script directory (pythondir)], [am_cv_python_pythondir], [if test "x$am_cv_python_prefix" = x; then am_py_prefix=$am__usable_prefix else am_py_prefix=$am_cv_python_prefix fi am_cv_python_pythondir=`$PYTHON -c " $am_python_setup_sysconfig if can_use_sysconfig: sitedir = sysconfig.get_path('purelib', vars={'base':'$am_py_prefix'}) else: from distutils import sysconfig sitedir = sysconfig.get_python_lib(0, 0, prefix='$am_py_prefix') sys.stdout.write(sitedir)"` # case $am_cv_python_pythondir in $am_py_prefix*) am__strip_prefix=`echo "$am_py_prefix" | sed 's|.|.|g'` am_cv_python_pythondir=`echo "$am_cv_python_pythondir" | sed "s,^$am__strip_prefix,\\${PYTHON_PREFIX},"` ;; *) case $am_py_prefix in /usr|/System*) ;; *) am_cv_python_pythondir="\${PYTHON_PREFIX}/lib/python$PYTHON_VERSION/site-packages" ;; esac ;; esac ]) AC_SUBST([pythondir], [$am_cv_python_pythondir]) dnl 2. pkgpythondir: $PACKAGE directory under pythondir. Was dnl PYTHON_SITE_PACKAGE in previous betas, but this naming is dnl more consistent with the rest of automake. dnl AC_SUBST([pkgpythondir], [\${pythondir}/$PACKAGE]) dnl 3. pyexecdir: directory for installing python extension modules dnl (shared libraries). dnl Query distutils for this directory. dnl AC_CACHE_CHECK([for $am_display_PYTHON extension module directory (pyexecdir)], [am_cv_python_pyexecdir], [if test "x$am_cv_python_exec_prefix" = x; then am_py_exec_prefix=$am__usable_exec_prefix else am_py_exec_prefix=$am_cv_python_exec_prefix fi am_cv_python_pyexecdir=`$PYTHON -c " $am_python_setup_sysconfig if can_use_sysconfig: sitedir = sysconfig.get_path('platlib', vars={'platbase':'$am_py_exec_prefix'}) else: from distutils import sysconfig sitedir = sysconfig.get_python_lib(1, 0, prefix='$am_py_exec_prefix') sys.stdout.write(sitedir)"` # case $am_cv_python_pyexecdir in $am_py_exec_prefix*) am__strip_prefix=`echo "$am_py_exec_prefix" | sed 's|.|.|g'` am_cv_python_pyexecdir=`echo "$am_cv_python_pyexecdir" | sed "s,^$am__strip_prefix,\\${PYTHON_EXEC_PREFIX},"` ;; *) case $am_py_exec_prefix in /usr|/System*) ;; *) am_cv_python_pyexecdir="\${PYTHON_EXEC_PREFIX}/lib/python$PYTHON_VERSION/site-packages" ;; esac ;; esac ]) AC_SUBST([pyexecdir], [$am_cv_python_pyexecdir]) dnl 4. pkgpyexecdir: $(pyexecdir)/$(PACKAGE) dnl AC_SUBST([pkgpyexecdir], [\${pyexecdir}/$PACKAGE]) dnl Run any user-specified action. $2 fi ]) # AM_PYTHON_CHECK_VERSION(PROG, VERSION, [ACTION-IF-TRUE], [ACTION-IF-FALSE]) # --------------------------------------------------------------------------- # Run ACTION-IF-TRUE if the Python interpreter PROG has version >= VERSION. # Run ACTION-IF-FALSE otherwise. # This test uses sys.hexversion instead of the string equivalent (first # word of sys.version), in order to cope with versions such as 2.2c1. # This supports Python 2.0 or higher. (2.0 was released on October 16, 2000). AC_DEFUN([AM_PYTHON_CHECK_VERSION], [prog="import sys # split strings by '.' and convert to numeric. Append some zeros # because we need at least 4 digits for the hex conversion. # map returns an iterator in Python 3.0 and a list in 2.x minver = list(map(int, '$2'.split('.'))) + [[0, 0, 0]] minverhex = 0 # xrange is not present in Python 3.0 and range returns an iterator for i in list(range(0, 4)): minverhex = (minverhex << 8) + minver[[i]] sys.exit(sys.hexversion < minverhex)" AS_IF([AM_RUN_LOG([$1 -c "$prog"])], [$3], [$4])]) # Copyright (C) 2001-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_RUN_LOG(COMMAND) # ------------------- # Run COMMAND, save the exit status in ac_status, and log it. # (This has been adapted from Autoconf's _AC_RUN_LOG macro.) AC_DEFUN([AM_RUN_LOG], [{ echo "$as_me:$LINENO: $1" >&AS_MESSAGE_LOG_FD ($1) >&AS_MESSAGE_LOG_FD 2>&AS_MESSAGE_LOG_FD ac_status=$? echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD (exit $ac_status); }]) # Check to make sure that the build environment is sane. -*- Autoconf -*- # Copyright (C) 1996-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_SANITY_CHECK # --------------- AC_DEFUN([AM_SANITY_CHECK], [AC_MSG_CHECKING([whether build environment is sane]) # Reject unsafe characters in $srcdir or the absolute working directory # name. Accept space and tab only in the latter. am_lf=' ' case `pwd` in *[[\\\"\#\$\&\'\`$am_lf]]*) AC_MSG_ERROR([unsafe absolute working directory name]);; esac case $srcdir in *[[\\\"\#\$\&\'\`$am_lf\ \ ]]*) AC_MSG_ERROR([unsafe srcdir value: '$srcdir']);; esac # Do 'set' in a subshell so we don't clobber the current shell's # arguments. Must try -L first in case configure is actually a # symlink; some systems play weird games with the mod time of symlinks # (eg FreeBSD returns the mod time of the symlink's containing # directory). if ( am_has_slept=no for am_try in 1 2; do echo "timestamp, slept: $am_has_slept" > conftest.file set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null` if test "$[*]" = "X"; then # -L didn't work. set X `ls -t "$srcdir/configure" conftest.file` fi if test "$[*]" != "X $srcdir/configure conftest.file" \ && test "$[*]" != "X conftest.file $srcdir/configure"; then # If neither matched, then we have a broken ls. This can happen # if, for instance, CONFIG_SHELL is bash and it inherits a # broken ls alias from the environment. This has actually # happened. Such a system could not be considered "sane". AC_MSG_ERROR([ls -t appears to fail. Make sure there is not a broken alias in your environment]) fi if test "$[2]" = conftest.file || test $am_try -eq 2; then break fi # Just in case. sleep 1 am_has_slept=yes done test "$[2]" = conftest.file ) then # Ok. : else AC_MSG_ERROR([newly created file is older than distributed files! Check your system clock]) fi AC_MSG_RESULT([yes]) # If we didn't sleep, we still need to ensure time stamps of config.status and # generated files are strictly newer. am_sleep_pid= if grep 'slept: no' conftest.file >/dev/null 2>&1; then ( sleep 1 ) & am_sleep_pid=$! fi AC_CONFIG_COMMANDS_PRE( [AC_MSG_CHECKING([that generated files are newer than configure]) if test -n "$am_sleep_pid"; then # Hide warnings about reused PIDs. wait $am_sleep_pid 2>/dev/null fi AC_MSG_RESULT([done])]) rm -f conftest.file ]) # Copyright (C) 2009-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_SILENT_RULES([DEFAULT]) # -------------------------- # Enable less verbose build rules; with the default set to DEFAULT # ("yes" being less verbose, "no" or empty being verbose). AC_DEFUN([AM_SILENT_RULES], [AC_ARG_ENABLE([silent-rules], [dnl AS_HELP_STRING( [--enable-silent-rules], [less verbose build output (undo: "make V=1")]) AS_HELP_STRING( [--disable-silent-rules], [verbose build output (undo: "make V=0")])dnl ]) case $enable_silent_rules in @%:@ ((( yes) AM_DEFAULT_VERBOSITY=0;; no) AM_DEFAULT_VERBOSITY=1;; *) AM_DEFAULT_VERBOSITY=m4_if([$1], [yes], [0], [1]);; esac dnl dnl A few 'make' implementations (e.g., NonStop OS and NextStep) dnl do not support nested variable expansions. dnl See automake bug#9928 and bug#10237. am_make=${MAKE-make} AC_CACHE_CHECK([whether $am_make supports nested variables], [am_cv_make_support_nested_variables], [if AS_ECHO([['TRUE=$(BAR$(V)) BAR0=false BAR1=true V=1 am__doit: @$(TRUE) .PHONY: am__doit']]) | $am_make -f - >/dev/null 2>&1; then am_cv_make_support_nested_variables=yes else am_cv_make_support_nested_variables=no fi]) if test $am_cv_make_support_nested_variables = yes; then dnl Using '$V' instead of '$(V)' breaks IRIX make. AM_V='$(V)' AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)' else AM_V=$AM_DEFAULT_VERBOSITY AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY fi AC_SUBST([AM_V])dnl AM_SUBST_NOTMAKE([AM_V])dnl AC_SUBST([AM_DEFAULT_V])dnl AM_SUBST_NOTMAKE([AM_DEFAULT_V])dnl AC_SUBST([AM_DEFAULT_VERBOSITY])dnl AM_BACKSLASH='\' AC_SUBST([AM_BACKSLASH])dnl _AM_SUBST_NOTMAKE([AM_BACKSLASH])dnl ]) # Copyright (C) 2001-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # AM_PROG_INSTALL_STRIP # --------------------- # One issue with vendor 'install' (even GNU) is that you can't # specify the program used to strip binaries. This is especially # annoying in cross-compiling environments, where the build's strip # is unlikely to handle the host's binaries. # Fortunately install-sh will honor a STRIPPROG variable, so we # always use install-sh in "make install-strip", and initialize # STRIPPROG with the value of the STRIP variable (set by the user). AC_DEFUN([AM_PROG_INSTALL_STRIP], [AC_REQUIRE([AM_PROG_INSTALL_SH])dnl # Installed binaries are usually stripped using 'strip' when the user # run "make install-strip". However 'strip' might not be the right # tool to use in cross-compilation environments, therefore Automake # will honor the 'STRIP' environment variable to overrule this program. dnl Don't test for $cross_compiling = yes, because it might be 'maybe'. if test "$cross_compiling" != no; then AC_CHECK_TOOL([STRIP], [strip], :) fi INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s" AC_SUBST([INSTALL_STRIP_PROGRAM])]) # Copyright (C) 2006-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # _AM_SUBST_NOTMAKE(VARIABLE) # --------------------------- # Prevent Automake from outputting VARIABLE = @VARIABLE@ in Makefile.in. # This macro is traced by Automake. AC_DEFUN([_AM_SUBST_NOTMAKE]) # AM_SUBST_NOTMAKE(VARIABLE) # -------------------------- # Public sister of _AM_SUBST_NOTMAKE. AC_DEFUN([AM_SUBST_NOTMAKE], [_AM_SUBST_NOTMAKE($@)]) # Check how to create a tarball. -*- Autoconf -*- # Copyright (C) 2004-2021 Free Software Foundation, Inc. # # This file is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # _AM_PROG_TAR(FORMAT) # -------------------- # Check how to create a tarball in format FORMAT. # FORMAT should be one of 'v7', 'ustar', or 'pax'. # # Substitute a variable $(am__tar) that is a command # writing to stdout a FORMAT-tarball containing the directory # $tardir. # tardir=directory && $(am__tar) > result.tar # # Substitute a variable $(am__untar) that extract such # a tarball read from stdin. # $(am__untar) < result.tar # AC_DEFUN([_AM_PROG_TAR], [# Always define AMTAR for backward compatibility. Yes, it's still used # in the wild :-( We should find a proper way to deprecate it ... AC_SUBST([AMTAR], ['$${TAR-tar}']) # We'll loop over all known methods to create a tar archive until one works. _am_tools='gnutar m4_if([$1], [ustar], [plaintar]) pax cpio none' m4_if([$1], [v7], [am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -'], [m4_case([$1], [ustar], [# The POSIX 1988 'ustar' format is defined with fixed-size fields. # There is notably a 21 bits limit for the UID and the GID. In fact, # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343 # and bug#13588). am_max_uid=2097151 # 2^21 - 1 am_max_gid=$am_max_uid # The $UID and $GID variables are not portable, so we need to resort # to the POSIX-mandated id(1) utility. Errors in the 'id' calls # below are definitely unexpected, so allow the users to see them # (that is, avoid stderr redirection). am_uid=`id -u || echo unknown` am_gid=`id -g || echo unknown` AC_MSG_CHECKING([whether UID '$am_uid' is supported by ustar format]) if test $am_uid -le $am_max_uid; then AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) _am_tools=none fi AC_MSG_CHECKING([whether GID '$am_gid' is supported by ustar format]) if test $am_gid -le $am_max_gid; then AC_MSG_RESULT([yes]) else AC_MSG_RESULT([no]) _am_tools=none fi], [pax], [], [m4_fatal([Unknown tar format])]) AC_MSG_CHECKING([how to create a $1 tar archive]) # Go ahead even if we have the value already cached. We do so because we # need to set the values for the 'am__tar' and 'am__untar' variables. _am_tools=${am_cv_prog_tar_$1-$_am_tools} for _am_tool in $_am_tools; do case $_am_tool in gnutar) for _am_tar in tar gnutar gtar; do AM_RUN_LOG([$_am_tar --version]) && break done am__tar="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$$tardir"' am__tar_="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$tardir"' am__untar="$_am_tar -xf -" ;; plaintar) # Must skip GNU tar: if it does not support --format= it doesn't create # ustar tarball either. (tar --version) >/dev/null 2>&1 && continue am__tar='tar chf - "$$tardir"' am__tar_='tar chf - "$tardir"' am__untar='tar xf -' ;; pax) am__tar='pax -L -x $1 -w "$$tardir"' am__tar_='pax -L -x $1 -w "$tardir"' am__untar='pax -r' ;; cpio) am__tar='find "$$tardir" -print | cpio -o -H $1 -L' am__tar_='find "$tardir" -print | cpio -o -H $1 -L' am__untar='cpio -i -H $1 -d' ;; none) am__tar=false am__tar_=false am__untar=false ;; esac # If the value was cached, stop now. We just wanted to have am__tar # and am__untar set. test -n "${am_cv_prog_tar_$1}" && break # tar/untar a dummy directory, and stop if the command works. rm -rf conftest.dir mkdir conftest.dir echo GrepMe > conftest.dir/file AM_RUN_LOG([tardir=conftest.dir && eval $am__tar_ >conftest.tar]) rm -rf conftest.dir if test -s conftest.tar; then AM_RUN_LOG([$am__untar /dev/null 2>&1 && break fi done rm -rf conftest.dir AC_CACHE_VAL([am_cv_prog_tar_$1], [am_cv_prog_tar_$1=$_am_tool]) AC_MSG_RESULT([$am_cv_prog_tar_$1])]) AC_SUBST([am__tar]) AC_SUBST([am__untar]) ]) # _AM_PROG_TAR m4_include([m4/ax_ac_append_to_file.m4]) m4_include([m4/ax_ac_print_to_file.m4]) m4_include([m4/ax_add_am_macro_static.m4]) m4_include([m4/ax_add_fortify_source.m4]) m4_include([m4/ax_am_macros_static.m4]) m4_include([m4/ax_check_class.m4]) m4_include([m4/ax_check_compile_flag.m4]) m4_include([m4/ax_check_enable_debug.m4]) m4_include([m4/ax_check_gnu_make.m4]) m4_include([m4/ax_check_link_flag.m4]) m4_include([m4/ax_code_coverage.m4]) m4_include([m4/ax_file_escapes.m4]) m4_include([m4/ax_gcc_func_attribute.m4]) m4_include([m4/ax_is_release.m4]) m4_include([m4/ax_normalize_path.m4]) m4_include([m4/ax_prog_java.m4]) m4_include([m4/ax_prog_java_works.m4]) m4_include([m4/ax_prog_javac.m4]) m4_include([m4/ax_prog_javac_works.m4]) m4_include([m4/ax_pthread.m4]) m4_include([m4/ax_try_compile_java.m4]) m4_include([m4/ld-version-script.m4]) m4_include([m4/libtool.m4]) m4_include([m4/ltoptions.m4]) m4_include([m4/ltsugar.m4]) m4_include([m4/ltversion.m4]) m4_include([m4/lt~obsolete.m4]) m4_include([m4/pkg.m4]) tpm2-pkcs11-1.9.1/Makefile-fuzz.am0000644000175100017510000000760314535673717012247 # SPDX-License-Identifier: BSD-2-Clause TEST_EXTENSIONS += .fuzz .fuzz32 WRAP_LD_FLAGS := \ -Wl,--wrap=Esys_Initialize \ -Wl,--wrap=backend_fapi_init \ -Wl,--wrap=Tss2_TctiLdr_Initialize \ -Wl,--wrap=Tss2_TctiLdr_Finalize \ -Wl,--wrap=Esys_GetCapability \ -Wl,--wrap=Esys_TestParms \ -Wl,--wrap=Esys_Finalize \ -Wl,--wrap=Esys_TR_FromTPMPublic \ -Wl,--wrap=Esys_TR_Serialize \ -Wl,--wrap=Esys_TR_Deserialize \ -Wl,--wrap=Esys_TR_SetAuth \ -Wl,--wrap=Esys_StartAuthSession \ -Wl,--wrap=Esys_TRSess_SetAttributes \ -Wl,--wrap=Esys_TRSess_GetAttributes \ -Wl,--wrap=Esys_CreateLoaded \ -Wl,--wrap=Esys_Create \ -Wl,--wrap=Esys_FlushContext \ -Wl,--wrap=Esys_Load \ -Wl,--wrap=Esys_TRSess_GetAttributes \ -Wl,--wrap=Esys_Unseal \ -Wl,--wrap=Esys_ObjectChangeAuth if FUZZING FUZZ_RUNNER := $(top_srcdir)/test/fuzz/scripts/fuzz-runner.sh AM_FUZZ_LOG_FLAGS=$(FUZZING_FLAGS) FUZZ_LOG_COMPILER=$(FUZZ_RUNNER) test_fuzz_yaml_parser_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) test_fuzz_yaml_parser_fuzz_LDADD = $(libtpm2_test_pkcs11) test_fuzz_yaml_parser_fuzz_SOURCES = test/fuzz/yaml-parser.fuzz.c test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) $(FUZZING_CFLAGS) test_fuzz_utils_ctx_unwrap_objauth_fuzz_LDADD = $(libtpm2_test_pkcs11) $(CMOCKA_LIBS) test_fuzz_utils_ctx_unwrap_objauth_fuzz_SOURCES = test/fuzz/utils-ctx-unwrap-objauth.c test_fuzz_init_token_sopin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_init_token_sopin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) test_fuzz_init_token_sopin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_init_token_sopin_fuzz_SOURCES = test/fuzz/init-token-sopin.fuzz.c test_fuzz_init_pin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_init_pin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) test_fuzz_init_pin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_init_pin_fuzz_SOURCES = test/fuzz/init-pin.fuzz.c test_fuzz_set_pin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_set_pin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) test_fuzz_set_pin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_set_pin_fuzz_SOURCES = test/fuzz/set-pin.fuzz.c test_fuzz_db_take_lock_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_db_take_lock_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_db_take_lock_fuzz_SOURCES = test/fuzz/db-take-lock.fuzz.c AM_FUZZ32_LOG_FLAGS=$(FUZZING_FLAGS) -max_len=32 FUZZ32_LOG_COMPILER=$(FUZZ_RUNNER) test_fuzz_init_token_label_fuzz32_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_init_token_label_fuzz32_LDFLAGS = $(WRAP_LD_FLAGS) test_fuzz_init_token_label_fuzz32_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_init_token_label_fuzz32_SOURCES = test/fuzz/init-token-label.fuzz32.c test_fuzz_db_token_label_fuzz32_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm test_fuzz_db_token_label_fuzz32_LDFLAGS = $(WRAP_LD_FLAGS) test_fuzz_db_token_label_fuzz32_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) test_fuzz_db_token_label_fuzz32_SOURCES = test/fuzz/db-token-label.fuzz32.c fuzz_PROGRAMS = \ test/fuzz/yaml-parser.fuzz \ test/fuzz/init-token-sopin.fuzz \ test/fuzz/init-pin.fuzz \ test/fuzz/set-pin.fuzz \ test/fuzz/db-take-lock.fuzz \ test/fuzz/db-token-label.fuzz32 \ test/fuzz/init-token-label.fuzz32 \ test/fuzz/utils-ctx-unwrap-objauth.fuzz # make check will run the fuzz targets check_PROGRAMS += $(fuzz_PROGRAMS) fuzzdir = $(srcdir) fuzz-targets: $(fuzz_PROGRAMS) endif # FUZZING tpm2-pkcs11-1.9.1/Makefile-integration.am0000644000175100017510000001314214667615111013555 TEST_EXTENSIONS = .sh .int .nosetup .java .fapi integration_scripts = \ test/integration/pkcs11-tool.sh \ test/integration/pkcs11-tool-init.sh.nosetup \ test/integration/p11-tool.sh.nosetup \ test/integration/pkcs11-dbup.sh.nosetup \ test/integration/tls-tests.sh \ test/integration/openssl.sh \ test/integration/pkcs11-javarunner.sh.java \ test/integration/nss-tests.sh \ test/integration/ptool-link.sh.nosetup \ test/integration/python-pkcs11.sh # Note that -fapi.sh.fapi is symlinked to .sh.nosetup # If we'd use the .fapi extension then .nosetup and .fapi overwrite each others .log # thus we use -fapi.sh.fapi as suffix. if HAVE_FAPI integration_scripts += \ test/integration/p11-tool-fapi.sh.fapi \ test/integration/pkcs11-tool-init-fapi.sh.fapi endif EXTRA_DIST += \ $(integration_scripts) \ test/integration/test.h \ test/integration/largebin.h \ test/integration/fixtures ### Integration Tests ### if ENABLE_INTEGRATION check_PROGRAMS += \ test/integration/pkcs-find-objects.int \ test/integration/pkcs-get-mechanism.int \ test/integration/pkcs-get-attribute-value.int \ test/integration/pkcs-login-logout.int \ test/integration/pkcs-sign-verify.int \ test/integration/pkcs-initialize-finalize.int \ test/integration/pkcs-misc.int \ test/integration/pkcs-crypt.int \ test/integration/pkcs-keygen.int \ test/integration/pkcs-session-state.int \ test/integration/pkcs-lockout.int \ test/integration/pkcs-ecdh.int # add test scripts check_SCRIPTS += $(integration_scripts) AM_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) LOG_COMPILER = $(srcdir)/test/integration/scripts/int-test-setup.sh AM_INT_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh INT_LOG_COMPILER=$(LOG_COMPILER) AM_SH_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh SH_LOG_COMPILER=$(LOG_COMPILER) AM_NOSETUP_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) NOSETUP_LOG_COMPILER=$(LOG_COMPILER) AM_FAPI_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) FAPI_LOG_COMPILER=env TPM2_PKCS11_BACKEND=fapi $(LOG_COMPILER) test_integration_pkcs_find_objects_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_find_objects_int_LDADD = $(TESTS_LDADD) test_integration_pkcs_find_objects_int_SOURCES = test/integration/pkcs-find-objects.int.c test/integration/test.c test_integration_pkcs_get_mechanism_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_get_mechanism_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_get_mechanism_int_SOURCES = test/integration/pkcs-get-mechanism.int.c test/integration/test.c test_integration_pkcs_get_attribute_value_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_get_attribute_value_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_get_attribute_value_int_SOURCES = test/integration/pkcs-get-attribute-value.int.c test/integration/test.c test_integration_pkcs_login_logout_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_login_logout_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_login_logout_int_SOURCES = test/integration/pkcs-login-logout.int.c test/integration/test.c test_integration_pkcs_sign_verify_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_sign_verify_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_sign_verify_int_SOURCES = test/integration/pkcs-sign-verify.int.c test/integration/test.c test_integration_pkcs_initialize_finalize_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_initialize_finalize_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_initialize_finalize_int_SOURCES = test/integration/pkcs-initialize-finalize.int.c test/integration/test.c test_integration_pkcs_misc_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_misc_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_misc_int_SOURCES = test/integration/pkcs-misc.int.c test/integration/test.c test_integration_pkcs_crypt_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_crypt_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_crypt_int_SOURCES = test/integration/pkcs-crypt.int.c test/integration/test.c test_integration_pkcs_keygen_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_keygen_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_keygen_int_SOURCES = test/integration/pkcs-keygen.int.c test/integration/test.c test_integration_pkcs_ecdh_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_ecdh_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_ecdh_int_SOURCES = test/integration/pkcs-ecdh.int.c test/integration/test.c test_integration_pkcs_session_state_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_session_state_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_session_state_int_SOURCES = test/integration/pkcs-session-state.c test/integration/test.c test_integration_pkcs_lockout_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) test_integration_pkcs_lockout_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) test_integration_pkcs_lockout_int_SOURCES = test/integration/pkcs-lockout.int.c test/integration/test.c # # Java Tests # AM_JAVA_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh JAVA_LOG_COMPILER=$(LOG_COMPILER) dist_noinst_JAVA = test/integration/PKCS11JavaTests.java CLEANFILES += test/integration/PKCS11JavaTests.class endif # END INTEGRATION tpm2-pkcs11-1.9.1/Makefile-unit.am0000644000175100017510000000462614535673717012232 ### Unit Tests ### if UNIT ## End of test libraries, start tests ## check_PROGRAMS += \ test/unit/test_twist\ test/unit/test_log \ test/unit/test_parser \ test/unit/test_attr \ test/unit/test_db \ test/unit/test_utils test_unit_test_twist_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) test_unit_test_twist_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_log_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) test_unit_test_log_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_parser_CFLAGS = $(AM_CFLAGS) $(YAML_CFLAGS) $(CMOCKA_CFLAGS) test_unit_test_parser_LDADD = $(CMOCKA_LIBS) $(YAML_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_attr_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) test_unit_test_attr_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_db_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) $(SQLITE3_CFLAGS) test_unit_test_db_LDADD = $(CMOCKA_LIBS) $(SQLITE3_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_db_LDFLAGS = -Wl,--wrap=sqlite3_column_bytes \ -Wl,--wrap=sqlite3_column_blob \ -Wl,--wrap=sqlite3_data_count \ -Wl,--wrap=sqlite3_column_name \ -Wl,--wrap=sqlite3_column_bytes \ -Wl,--wrap=sqlite3_column_text \ -Wl,--wrap=sqlite3_column_int \ -Wl,--wrap=sqlite3_prepare_v2 \ -Wl,--wrap=sqlite3_finalize \ -Wl,--wrap=sqlite3_bind_blob \ -Wl,--wrap=sqlite3_bind_int \ -Wl,--wrap=sqlite3_bind_text \ -Wl,--wrap=sqlite3_errmsg \ -Wl,--wrap=sqlite3_step \ -Wl,--wrap=sqlite3_exec \ -Wl,--wrap=sqlite3_last_insert_rowid \ -Wl,--wrap=strdup \ -Wl,--wrap=calloc test_unit_test_utils_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) test_unit_test_utils_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) endif # END UNIT tpm2-pkcs11-1.9.1/Makefile.in0000644000175100017510000076053614674407107011267 # Makefile.in generated by automake 1.16.5 from Makefile.am. # @configure_input@ # Copyright (C) 1994-2021 Free Software Foundation, Inc. # This Makefile.in is free software; the Free Software Foundation # gives unlimited permission to copy and/or distribute it, # with or without modifications, as long as this notice is preserved. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY, to the extent permitted by law; without # even the implied warranty of MERCHANTABILITY or FITNESS FOR A # PARTICULAR PURPOSE. @SET_MAKE@ # SPDX-License-Identifier: BSD-2-Clause # aminclude_static.am generated automatically by Autoconf # from AX_AM_MACROS_STATIC on Mon Sep 23 19:56:38 CDT 2024 # SPDX-License-Identifier: BSD-2-Clause VPATH = @srcdir@ am__is_gnu_make = { \ if test -z '$(MAKELEVEL)'; then \ false; \ elif test -n '$(MAKE_HOST)'; then \ true; \ elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \ true; \ else \ false; \ fi; \ } am__make_running_with_option = \ case $${target_option-} in \ ?) ;; \ *) echo "am__make_running_with_option: internal error: invalid" \ "target option '$${target_option-}' specified" >&2; \ exit 1;; \ esac; \ has_opt=no; \ sane_makeflags=$$MAKEFLAGS; \ if $(am__is_gnu_make); then \ sane_makeflags=$$MFLAGS; \ else \ case $$MAKEFLAGS in \ *\\[\ \ ]*) \ bs=\\; \ sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \ | sed "s/$$bs$$bs[$$bs $$bs ]*//g"`;; \ esac; \ fi; \ skip_next=no; \ strip_trailopt () \ { \ flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \ }; \ for flg in $$sane_makeflags; do \ test $$skip_next = yes && { skip_next=no; continue; }; \ case $$flg in \ *=*|--*) continue;; \ -*I) strip_trailopt 'I'; skip_next=yes;; \ -*I?*) strip_trailopt 'I';; \ -*O) strip_trailopt 'O'; skip_next=yes;; \ -*O?*) strip_trailopt 'O';; \ -*l) strip_trailopt 'l'; skip_next=yes;; \ -*l?*) strip_trailopt 'l';; \ -[dEDm]) skip_next=yes;; \ -[JT]) skip_next=yes;; \ esac; \ case $$flg in \ *$$target_option*) has_opt=yes; break;; \ esac; \ done; \ test $$has_opt = yes am__make_dryrun = (target_option=n; $(am__make_running_with_option)) am__make_keepgoing = (target_option=k; $(am__make_running_with_option)) pkgdatadir = $(datadir)/@PACKAGE@ pkgincludedir = $(includedir)/@PACKAGE@ pkglibdir = $(libdir)/@PACKAGE@ pkglibexecdir = $(libexecdir)/@PACKAGE@ am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd install_sh_DATA = $(install_sh) -c -m 644 install_sh_PROGRAM = $(install_sh) -c install_sh_SCRIPT = $(install_sh) -c INSTALL_HEADER = $(INSTALL_DATA) transform = $(program_transform_name) NORMAL_INSTALL = : PRE_INSTALL = : POST_INSTALL = : NORMAL_UNINSTALL = : PRE_UNINSTALL = : POST_UNINSTALL = : build_triplet = @build@ host_triplet = @host@ check_PROGRAMS = $(am__EXEEXT_1) $(am__EXEEXT_2) $(am__EXEEXT_4) # Note that -fapi.sh.fapi is symlinked to .sh.nosetup # If we'd use the .fapi extension then .nosetup and .fapi overwrite each others .log # thus we use -fapi.sh.fapi as suffix. @HAVE_FAPI_TRUE@am__append_1 = \ @HAVE_FAPI_TRUE@ test/integration/p11-tool-fapi.sh.fapi \ @HAVE_FAPI_TRUE@ test/integration/pkcs11-tool-init-fapi.sh.fapi ### Integration Tests ### @ENABLE_INTEGRATION_TRUE@am__append_2 = \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-find-objects.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-get-mechanism.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-get-attribute-value.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-login-logout.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-sign-verify.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-initialize-finalize.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-misc.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-crypt.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-keygen.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-session-state.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-lockout.int \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-ecdh.int # add test scripts @ENABLE_INTEGRATION_TRUE@am__append_3 = $(integration_scripts) @ENABLE_INTEGRATION_TRUE@am__append_4 = test/integration/PKCS11JavaTests.class ### Unit Tests ### @UNIT_TRUE@am__append_5 = \ @UNIT_TRUE@ test/unit/test_twist\ @UNIT_TRUE@ test/unit/test_log \ @UNIT_TRUE@ test/unit/test_parser \ @UNIT_TRUE@ test/unit/test_attr \ @UNIT_TRUE@ test/unit/test_db \ @UNIT_TRUE@ test/unit/test_utils @FUZZING_TRUE@fuzz_PROGRAMS = test/fuzz/yaml-parser.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-token-sopin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-pin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/set-pin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/db-take-lock.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/db-token-label.fuzz32$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-token-label.fuzz32$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/utils-ctx-unwrap-objauth.fuzz$(EXEEXT) # make check will run the fuzz targets @FUZZING_TRUE@am__append_6 = $(fuzz_PROGRAMS) subdir = . ACLOCAL_M4 = $(top_srcdir)/aclocal.m4 am__aclocal_m4_deps = $(top_srcdir)/m4/ax_ac_append_to_file.m4 \ $(top_srcdir)/m4/ax_ac_print_to_file.m4 \ $(top_srcdir)/m4/ax_add_am_macro_static.m4 \ $(top_srcdir)/m4/ax_add_fortify_source.m4 \ $(top_srcdir)/m4/ax_am_macros_static.m4 \ $(top_srcdir)/m4/ax_check_class.m4 \ $(top_srcdir)/m4/ax_check_compile_flag.m4 \ $(top_srcdir)/m4/ax_check_enable_debug.m4 \ $(top_srcdir)/m4/ax_check_gnu_make.m4 \ $(top_srcdir)/m4/ax_check_link_flag.m4 \ $(top_srcdir)/m4/ax_code_coverage.m4 \ $(top_srcdir)/m4/ax_file_escapes.m4 \ $(top_srcdir)/m4/ax_gcc_func_attribute.m4 \ $(top_srcdir)/m4/ax_is_release.m4 \ $(top_srcdir)/m4/ax_normalize_path.m4 \ $(top_srcdir)/m4/ax_prog_java.m4 \ $(top_srcdir)/m4/ax_prog_java_works.m4 \ $(top_srcdir)/m4/ax_prog_javac.m4 \ $(top_srcdir)/m4/ax_prog_javac_works.m4 \ $(top_srcdir)/m4/ax_pthread.m4 \ $(top_srcdir)/m4/ax_try_compile_java.m4 \ $(top_srcdir)/m4/ld-version-script.m4 \ $(top_srcdir)/m4/libtool.m4 $(top_srcdir)/m4/ltoptions.m4 \ $(top_srcdir)/m4/ltsugar.m4 $(top_srcdir)/m4/ltversion.m4 \ $(top_srcdir)/m4/lt~obsolete.m4 $(top_srcdir)/m4/pkg.m4 \ $(top_srcdir)/configure.ac am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \ $(ACLOCAL_M4) DIST_COMMON = $(srcdir)/Makefile.am $(top_srcdir)/configure \ $(am__configure_deps) $(am__dist_noinst_JAVA_DIST) \ $(am__DIST_COMMON) am__CONFIG_DISTCLEAN_FILES = config.status config.cache config.log \ configure.lineno config.status.lineno mkinstalldirs = $(install_sh) -d CONFIG_HEADER = $(top_builddir)/src/lib/config.h CONFIG_CLEAN_FILES = lib/tpm2-pkcs11.pc CONFIG_CLEAN_VPATH_FILES = @ENABLE_INTEGRATION_TRUE@am__EXEEXT_1 = test/integration/pkcs-find-objects.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-get-mechanism.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-get-attribute-value.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-login-logout.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-sign-verify.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-initialize-finalize.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-misc.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-crypt.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-keygen.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-session-state.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-lockout.int$(EXEEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs-ecdh.int$(EXEEXT) @UNIT_TRUE@am__EXEEXT_2 = test/unit/test_twist$(EXEEXT) \ @UNIT_TRUE@ test/unit/test_log$(EXEEXT) \ @UNIT_TRUE@ test/unit/test_parser$(EXEEXT) \ @UNIT_TRUE@ test/unit/test_attr$(EXEEXT) \ @UNIT_TRUE@ test/unit/test_db$(EXEEXT) \ @UNIT_TRUE@ test/unit/test_utils$(EXEEXT) @FUZZING_TRUE@am__EXEEXT_3 = test/fuzz/yaml-parser.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-token-sopin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-pin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/set-pin.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/db-take-lock.fuzz$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/db-token-label.fuzz32$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/init-token-label.fuzz32$(EXEEXT) \ @FUZZING_TRUE@ test/fuzz/utils-ctx-unwrap-objauth.fuzz$(EXEEXT) @FUZZING_TRUE@am__EXEEXT_4 = $(am__EXEEXT_3) am__installdirs = "$(DESTDIR)$(fuzzdir)" "$(DESTDIR)$(libdir)" \ "$(DESTDIR)$(p11libdir)" "$(DESTDIR)$(p11configdir)" \ "$(DESTDIR)$(pkgconfigdir)" PROGRAMS = $(fuzz_PROGRAMS) am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`; am__vpath_adj = case $$p in \ $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \ *) f=$$p;; \ esac; am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`; am__install_max = 40 am__nobase_strip_setup = \ srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'` am__nobase_strip = \ for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||" am__nobase_list = $(am__nobase_strip_setup); \ for p in $$list; do echo "$$p $$p"; done | \ sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \ $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \ if (++n[$$2] == $(am__install_max)) \ { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \ END { for (dir in files) print dir, files[dir] }' am__base_list = \ sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \ sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g' am__uninstall_files_from_dir = { \ test -z "$$files" \ || { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \ || { echo " ( cd '$$dir' && rm -f" $$files ")"; \ $(am__cd) "$$dir" && rm -f $$files; }; \ } LTLIBRARIES = $(lib_LTLIBRARIES) $(noinst_LTLIBRARIES) \ $(p11lib_LTLIBRARIES) am__DEPENDENCIES_1 = am__DEPENDENCIES_2 = $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \ $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \ $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \ $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \ $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \ $(am__DEPENDENCIES_1) src_libtpm2_pkcs11_la_DEPENDENCIES = $(am__DEPENDENCIES_2) am__dirstamp = $(am__leading_dot)dirstamp am__objects_1 = src/pkcs11.lo am__objects_2 = am__objects_3 = $(am__objects_1) $(am__objects_2) am__objects_4 = src/lib/attrs.lo src/lib/backend.lo \ src/lib/backend_esysdb.lo src/lib/backend_fapi.lo \ src/lib/db.lo src/lib/derive.lo src/lib/digest.lo \ src/lib/emitter.lo src/lib/encrypt.lo src/lib/general.lo \ src/lib/key.lo src/lib/mech.lo src/lib/mutex.lo \ src/lib/object.lo src/lib/parser.lo src/lib/random.lo \ src/lib/session.lo src/lib/session_ctx.lo \ src/lib/session_table.lo src/lib/sign.lo src/lib/slot.lo \ src/lib/ssl_util.lo src/lib/token.lo src/lib/tpm.lo \ src/lib/twist.lo src/lib/typed_memory.lo src/lib/utils.lo am__objects_5 = $(am__objects_4) $(am__objects_2) am_src_libtpm2_pkcs11_la_OBJECTS = $(am__objects_3) $(am__objects_5) src_libtpm2_pkcs11_la_OBJECTS = $(am_src_libtpm2_pkcs11_la_OBJECTS) AM_V_lt = $(am__v_lt_@AM_V@) am__v_lt_ = $(am__v_lt_@AM_DEFAULT_V@) am__v_lt_0 = --silent am__v_lt_1 = src_libtpm2_pkcs11_la_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(AM_CFLAGS) $(CFLAGS) $(src_libtpm2_pkcs11_la_LDFLAGS) \ $(LDFLAGS) -o $@ @HAVE_P11KIT_FALSE@@HAVE_PREFIX_FALSE@am_src_libtpm2_pkcs11_la_rpath = \ @HAVE_P11KIT_FALSE@@HAVE_PREFIX_FALSE@ -rpath $(libdir) @HAVE_P11KIT_TRUE@@HAVE_PREFIX_FALSE@am_src_libtpm2_pkcs11_la_rpath = \ @HAVE_P11KIT_TRUE@@HAVE_PREFIX_FALSE@ -rpath $(p11libdir) @HAVE_PREFIX_TRUE@am_src_libtpm2_pkcs11_la_rpath = -rpath $(libdir) src_libtpm2_test_internal_la_DEPENDENCIES = $(am__DEPENDENCIES_2) am_src_libtpm2_test_internal_la_OBJECTS = $(am__objects_5) src_libtpm2_test_internal_la_OBJECTS = \ $(am_src_libtpm2_test_internal_la_OBJECTS) src_libtpm2_test_pkcs11_la_DEPENDENCIES = $(am__DEPENDENCIES_2) \ $(libtpm2_test_internal) am_src_libtpm2_test_pkcs11_la_OBJECTS = $(am__objects_3) src_libtpm2_test_pkcs11_la_OBJECTS = \ $(am_src_libtpm2_test_pkcs11_la_OBJECTS) am__test_fuzz_db_take_lock_fuzz_SOURCES_DIST = \ test/fuzz/db-take-lock.fuzz.c @FUZZING_TRUE@am_test_fuzz_db_take_lock_fuzz_OBJECTS = test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.$(OBJEXT) test_fuzz_db_take_lock_fuzz_OBJECTS = \ $(am_test_fuzz_db_take_lock_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_db_take_lock_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_db_take_lock_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_db_take_lock_fuzz_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ am__test_fuzz_db_token_label_fuzz32_SOURCES_DIST = \ test/fuzz/db-token-label.fuzz32.c @FUZZING_TRUE@am_test_fuzz_db_token_label_fuzz32_OBJECTS = test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.$(OBJEXT) test_fuzz_db_token_label_fuzz32_OBJECTS = \ $(am_test_fuzz_db_token_label_fuzz32_OBJECTS) @FUZZING_TRUE@test_fuzz_db_token_label_fuzz32_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_db_token_label_fuzz32_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_db_token_label_fuzz32_CFLAGS) $(CFLAGS) \ $(test_fuzz_db_token_label_fuzz32_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_init_pin_fuzz_SOURCES_DIST = test/fuzz/init-pin.fuzz.c @FUZZING_TRUE@am_test_fuzz_init_pin_fuzz_OBJECTS = \ @FUZZING_TRUE@ test/fuzz/init_pin_fuzz-init-pin.fuzz.$(OBJEXT) test_fuzz_init_pin_fuzz_OBJECTS = \ $(am_test_fuzz_init_pin_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_init_pin_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_init_pin_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_init_pin_fuzz_CFLAGS) $(CFLAGS) \ $(test_fuzz_init_pin_fuzz_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_init_token_label_fuzz32_SOURCES_DIST = \ test/fuzz/init-token-label.fuzz32.c @FUZZING_TRUE@am_test_fuzz_init_token_label_fuzz32_OBJECTS = test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.$(OBJEXT) test_fuzz_init_token_label_fuzz32_OBJECTS = \ $(am_test_fuzz_init_token_label_fuzz32_OBJECTS) @FUZZING_TRUE@test_fuzz_init_token_label_fuzz32_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_init_token_label_fuzz32_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_fuzz_init_token_label_fuzz32_CFLAGS) $(CFLAGS) \ $(test_fuzz_init_token_label_fuzz32_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_init_token_sopin_fuzz_SOURCES_DIST = \ test/fuzz/init-token-sopin.fuzz.c @FUZZING_TRUE@am_test_fuzz_init_token_sopin_fuzz_OBJECTS = test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.$(OBJEXT) test_fuzz_init_token_sopin_fuzz_OBJECTS = \ $(am_test_fuzz_init_token_sopin_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_init_token_sopin_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_init_token_sopin_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_init_token_sopin_fuzz_CFLAGS) $(CFLAGS) \ $(test_fuzz_init_token_sopin_fuzz_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_set_pin_fuzz_SOURCES_DIST = test/fuzz/set-pin.fuzz.c @FUZZING_TRUE@am_test_fuzz_set_pin_fuzz_OBJECTS = \ @FUZZING_TRUE@ test/fuzz/set_pin_fuzz-set-pin.fuzz.$(OBJEXT) test_fuzz_set_pin_fuzz_OBJECTS = $(am_test_fuzz_set_pin_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_set_pin_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_2) \ @FUZZING_TRUE@ $(am__DEPENDENCIES_1) test_fuzz_set_pin_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_set_pin_fuzz_CFLAGS) $(CFLAGS) \ $(test_fuzz_set_pin_fuzz_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_utils_ctx_unwrap_objauth_fuzz_SOURCES_DIST = \ test/fuzz/utils-ctx-unwrap-objauth.c @FUZZING_TRUE@am_test_fuzz_utils_ctx_unwrap_objauth_fuzz_OBJECTS = test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.$(OBJEXT) test_fuzz_utils_ctx_unwrap_objauth_fuzz_OBJECTS = \ $(am_test_fuzz_utils_ctx_unwrap_objauth_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_utils_ctx_unwrap_objauth_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) $(am__DEPENDENCIES_1) test_fuzz_utils_ctx_unwrap_objauth_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_fuzz_yaml_parser_fuzz_SOURCES_DIST = \ test/fuzz/yaml-parser.fuzz.c @FUZZING_TRUE@am_test_fuzz_yaml_parser_fuzz_OBJECTS = test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.$(OBJEXT) test_fuzz_yaml_parser_fuzz_OBJECTS = \ $(am_test_fuzz_yaml_parser_fuzz_OBJECTS) @FUZZING_TRUE@test_fuzz_yaml_parser_fuzz_DEPENDENCIES = \ @FUZZING_TRUE@ $(libtpm2_test_pkcs11) test_fuzz_yaml_parser_fuzz_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_fuzz_yaml_parser_fuzz_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ am__test_integration_pkcs_crypt_int_SOURCES_DIST = \ test/integration/pkcs-crypt.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_crypt_int_OBJECTS = test/integration/pkcs_crypt_int-pkcs-crypt.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_crypt_int-test.$(OBJEXT) test_integration_pkcs_crypt_int_OBJECTS = \ $(am_test_integration_pkcs_crypt_int_OBJECTS) am__DEPENDENCIES_3 = $(noinst_LTLIBRARIES) $(lib_LTLIBRARIES) \ $(p11lib_LTLIBRARIES) $(am__DEPENDENCIES_2) \ $(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_crypt_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_crypt_int_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_ecdh_int_SOURCES_DIST = \ test/integration/pkcs-ecdh.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_ecdh_int_OBJECTS = test/integration/pkcs_ecdh_int-pkcs-ecdh.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_ecdh_int-test.$(OBJEXT) test_integration_pkcs_ecdh_int_OBJECTS = \ $(am_test_integration_pkcs_ecdh_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_ecdh_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_ecdh_int_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_integration_pkcs_ecdh_int_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_find_objects_int_SOURCES_DIST = \ test/integration/pkcs-find-objects.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_find_objects_int_OBJECTS = test/integration/pkcs_find_objects_int-pkcs-find-objects.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_find_objects_int-test.$(OBJEXT) test_integration_pkcs_find_objects_int_OBJECTS = \ $(am_test_integration_pkcs_find_objects_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_find_objects_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) test_integration_pkcs_find_objects_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_find_objects_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_get_attribute_value_int_SOURCES_DIST = \ test/integration/pkcs-get-attribute-value.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_get_attribute_value_int_OBJECTS = test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_get_attribute_value_int-test.$(OBJEXT) test_integration_pkcs_get_attribute_value_int_OBJECTS = \ $(am_test_integration_pkcs_get_attribute_value_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_attribute_value_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_get_attribute_value_int_LINK = $(LIBTOOL) \ $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) \ --mode=link $(CCLD) \ $(test_integration_pkcs_get_attribute_value_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_get_mechanism_int_SOURCES_DIST = \ test/integration/pkcs-get-mechanism.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_get_mechanism_int_OBJECTS = test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_get_mechanism_int-test.$(OBJEXT) test_integration_pkcs_get_mechanism_int_OBJECTS = \ $(am_test_integration_pkcs_get_mechanism_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_mechanism_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_get_mechanism_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_get_mechanism_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_initialize_finalize_int_SOURCES_DIST = \ test/integration/pkcs-initialize-finalize.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_initialize_finalize_int_OBJECTS = test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_initialize_finalize_int-test.$(OBJEXT) test_integration_pkcs_initialize_finalize_int_OBJECTS = \ $(am_test_integration_pkcs_initialize_finalize_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_initialize_finalize_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_initialize_finalize_int_LINK = $(LIBTOOL) \ $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) \ --mode=link $(CCLD) \ $(test_integration_pkcs_initialize_finalize_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_keygen_int_SOURCES_DIST = \ test/integration/pkcs-keygen.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_keygen_int_OBJECTS = test/integration/pkcs_keygen_int-pkcs-keygen.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_keygen_int-test.$(OBJEXT) test_integration_pkcs_keygen_int_OBJECTS = \ $(am_test_integration_pkcs_keygen_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_keygen_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_keygen_int_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_lockout_int_SOURCES_DIST = \ test/integration/pkcs-lockout.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_lockout_int_OBJECTS = test/integration/pkcs_lockout_int-pkcs-lockout.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_lockout_int-test.$(OBJEXT) test_integration_pkcs_lockout_int_OBJECTS = \ $(am_test_integration_pkcs_lockout_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_lockout_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_lockout_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_login_logout_int_SOURCES_DIST = \ test/integration/pkcs-login-logout.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_login_logout_int_OBJECTS = test/integration/pkcs_login_logout_int-pkcs-login-logout.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_login_logout_int-test.$(OBJEXT) test_integration_pkcs_login_logout_int_OBJECTS = \ $(am_test_integration_pkcs_login_logout_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_login_logout_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_login_logout_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_login_logout_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_misc_int_SOURCES_DIST = \ test/integration/pkcs-misc.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_misc_int_OBJECTS = test/integration/pkcs_misc_int-pkcs-misc.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_misc_int-test.$(OBJEXT) test_integration_pkcs_misc_int_OBJECTS = \ $(am_test_integration_pkcs_misc_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_misc_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_misc_int_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_session_state_int_SOURCES_DIST = \ test/integration/pkcs-session-state.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_session_state_int_OBJECTS = test/integration/pkcs_session_state_int-pkcs-session-state.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_session_state_int-test.$(OBJEXT) test_integration_pkcs_session_state_int_OBJECTS = \ $(am_test_integration_pkcs_session_state_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_session_state_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_session_state_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_session_state_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ am__test_integration_pkcs_sign_verify_int_SOURCES_DIST = \ test/integration/pkcs-sign-verify.int.c \ test/integration/test.c @ENABLE_INTEGRATION_TRUE@am_test_integration_pkcs_sign_verify_int_OBJECTS = test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.$(OBJEXT) \ @ENABLE_INTEGRATION_TRUE@ test/integration/pkcs_sign_verify_int-test.$(OBJEXT) test_integration_pkcs_sign_verify_int_OBJECTS = \ $(am_test_integration_pkcs_sign_verify_int_OBJECTS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_sign_verify_int_DEPENDENCIES = \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_3) \ @ENABLE_INTEGRATION_TRUE@ $(am__DEPENDENCIES_1) test_integration_pkcs_sign_verify_int_LINK = $(LIBTOOL) $(AM_V_lt) \ --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link \ $(CCLD) $(test_integration_pkcs_sign_verify_int_CFLAGS) \ $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@ test_unit_test_attr_SOURCES = test/unit/test_attr.c test_unit_test_attr_OBJECTS = test/unit/test_attr-test_attr.$(OBJEXT) @UNIT_TRUE@test_unit_test_attr_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_attr_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_attr_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ test_unit_test_db_SOURCES = test/unit/test_db.c test_unit_test_db_OBJECTS = test/unit/test_db-test_db.$(OBJEXT) @UNIT_TRUE@test_unit_test_db_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(am__DEPENDENCIES_1) $(libtpm2_test_internal) \ @UNIT_TRUE@ $(libtpm2_test_pkcs11) test_unit_test_db_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_db_CFLAGS) $(CFLAGS) \ $(test_unit_test_db_LDFLAGS) $(LDFLAGS) -o $@ test_unit_test_log_SOURCES = test/unit/test_log.c test_unit_test_log_OBJECTS = test/unit/test_log-test_log.$(OBJEXT) @UNIT_TRUE@test_unit_test_log_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_log_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_log_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ test_unit_test_parser_SOURCES = test/unit/test_parser.c test_unit_test_parser_OBJECTS = \ test/unit/test_parser-test_parser.$(OBJEXT) @UNIT_TRUE@test_unit_test_parser_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(am__DEPENDENCIES_1) $(libtpm2_test_internal) \ @UNIT_TRUE@ $(libtpm2_test_pkcs11) test_unit_test_parser_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_parser_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ test_unit_test_twist_SOURCES = test/unit/test_twist.c test_unit_test_twist_OBJECTS = \ test/unit/test_twist-test_twist.$(OBJEXT) @UNIT_TRUE@test_unit_test_twist_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_twist_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_twist_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ test_unit_test_utils_SOURCES = test/unit/test_utils.c test_unit_test_utils_OBJECTS = \ test/unit/test_utils-test_utils.$(OBJEXT) @UNIT_TRUE@test_unit_test_utils_DEPENDENCIES = $(am__DEPENDENCIES_1) \ @UNIT_TRUE@ $(libtpm2_test_internal) $(libtpm2_test_pkcs11) test_unit_test_utils_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ $(test_unit_test_utils_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) \ $(LDFLAGS) -o $@ AM_V_P = $(am__v_P_@AM_V@) am__v_P_ = $(am__v_P_@AM_DEFAULT_V@) am__v_P_0 = false am__v_P_1 = : AM_V_GEN = $(am__v_GEN_@AM_V@) am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@) am__v_GEN_0 = @echo " GEN " $@; am__v_GEN_1 = AM_V_at = $(am__v_at_@AM_V@) am__v_at_ = $(am__v_at_@AM_DEFAULT_V@) am__v_at_0 = @ am__v_at_1 = DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir)/src/lib depcomp = $(SHELL) $(top_srcdir)/depcomp am__maybe_remake_depfiles = depfiles am__depfiles_remade = src/$(DEPDIR)/pkcs11.Plo \ src/lib/$(DEPDIR)/attrs.Plo src/lib/$(DEPDIR)/backend.Plo \ src/lib/$(DEPDIR)/backend_esysdb.Plo \ src/lib/$(DEPDIR)/backend_fapi.Plo src/lib/$(DEPDIR)/db.Plo \ src/lib/$(DEPDIR)/derive.Plo src/lib/$(DEPDIR)/digest.Plo \ src/lib/$(DEPDIR)/emitter.Plo src/lib/$(DEPDIR)/encrypt.Plo \ src/lib/$(DEPDIR)/general.Plo src/lib/$(DEPDIR)/key.Plo \ src/lib/$(DEPDIR)/mech.Plo src/lib/$(DEPDIR)/mutex.Plo \ src/lib/$(DEPDIR)/object.Plo src/lib/$(DEPDIR)/parser.Plo \ src/lib/$(DEPDIR)/random.Plo src/lib/$(DEPDIR)/session.Plo \ src/lib/$(DEPDIR)/session_ctx.Plo \ src/lib/$(DEPDIR)/session_table.Plo src/lib/$(DEPDIR)/sign.Plo \ src/lib/$(DEPDIR)/slot.Plo src/lib/$(DEPDIR)/ssl_util.Plo \ src/lib/$(DEPDIR)/token.Plo src/lib/$(DEPDIR)/tpm.Plo \ src/lib/$(DEPDIR)/twist.Plo src/lib/$(DEPDIR)/typed_memory.Plo \ src/lib/$(DEPDIR)/utils.Plo \ test/fuzz/$(DEPDIR)/db_take_lock_fuzz-db-take-lock.fuzz.Po \ test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po \ test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po \ test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po \ test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po \ test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po \ test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po \ test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po \ test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po \ test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po \ test/integration/$(DEPDIR)/pkcs_ecdh_int-pkcs-ecdh.int.Po \ test/integration/$(DEPDIR)/pkcs_ecdh_int-test.Po \ test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po \ test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po \ test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po \ test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po \ test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po \ test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po \ test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po \ test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po \ test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po \ test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po \ test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po \ test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po \ test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po \ test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po \ test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po \ test/integration/$(DEPDIR)/pkcs_misc_int-test.Po \ test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po \ test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po \ test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po \ test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po \ test/unit/$(DEPDIR)/test_attr-test_attr.Po \ test/unit/$(DEPDIR)/test_db-test_db.Po \ test/unit/$(DEPDIR)/test_log-test_log.Po \ test/unit/$(DEPDIR)/test_parser-test_parser.Po \ test/unit/$(DEPDIR)/test_twist-test_twist.Po \ test/unit/$(DEPDIR)/test_utils-test_utils.Po am__mv = mv -f COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \ $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) LTCOMPILE = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \ $(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) \ $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) \ $(AM_CFLAGS) $(CFLAGS) AM_V_CC = $(am__v_CC_@AM_V@) am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@) am__v_CC_0 = @echo " CC " $@; am__v_CC_1 = CCLD = $(CC) LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \ $(LIBTOOLFLAGS) --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \ $(AM_LDFLAGS) $(LDFLAGS) -o $@ AM_V_CCLD = $(am__v_CCLD_@AM_V@) am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@) am__v_CCLD_0 = @echo " CCLD " $@; am__v_CCLD_1 = SOURCES = $(src_libtpm2_pkcs11_la_SOURCES) \ $(src_libtpm2_test_internal_la_SOURCES) \ $(src_libtpm2_test_pkcs11_la_SOURCES) \ $(test_fuzz_db_take_lock_fuzz_SOURCES) \ $(test_fuzz_db_token_label_fuzz32_SOURCES) \ $(test_fuzz_init_pin_fuzz_SOURCES) \ $(test_fuzz_init_token_label_fuzz32_SOURCES) \ $(test_fuzz_init_token_sopin_fuzz_SOURCES) \ $(test_fuzz_set_pin_fuzz_SOURCES) \ $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_SOURCES) \ $(test_fuzz_yaml_parser_fuzz_SOURCES) \ $(test_integration_pkcs_crypt_int_SOURCES) \ $(test_integration_pkcs_ecdh_int_SOURCES) \ $(test_integration_pkcs_find_objects_int_SOURCES) \ $(test_integration_pkcs_get_attribute_value_int_SOURCES) \ $(test_integration_pkcs_get_mechanism_int_SOURCES) \ $(test_integration_pkcs_initialize_finalize_int_SOURCES) \ $(test_integration_pkcs_keygen_int_SOURCES) \ $(test_integration_pkcs_lockout_int_SOURCES) \ $(test_integration_pkcs_login_logout_int_SOURCES) \ $(test_integration_pkcs_misc_int_SOURCES) \ $(test_integration_pkcs_session_state_int_SOURCES) \ $(test_integration_pkcs_sign_verify_int_SOURCES) \ test/unit/test_attr.c test/unit/test_db.c test/unit/test_log.c \ test/unit/test_parser.c test/unit/test_twist.c \ test/unit/test_utils.c DIST_SOURCES = $(src_libtpm2_pkcs11_la_SOURCES) \ $(src_libtpm2_test_internal_la_SOURCES) \ $(src_libtpm2_test_pkcs11_la_SOURCES) \ $(am__test_fuzz_db_take_lock_fuzz_SOURCES_DIST) \ $(am__test_fuzz_db_token_label_fuzz32_SOURCES_DIST) \ $(am__test_fuzz_init_pin_fuzz_SOURCES_DIST) \ $(am__test_fuzz_init_token_label_fuzz32_SOURCES_DIST) \ $(am__test_fuzz_init_token_sopin_fuzz_SOURCES_DIST) \ $(am__test_fuzz_set_pin_fuzz_SOURCES_DIST) \ $(am__test_fuzz_utils_ctx_unwrap_objauth_fuzz_SOURCES_DIST) \ $(am__test_fuzz_yaml_parser_fuzz_SOURCES_DIST) \ $(am__test_integration_pkcs_crypt_int_SOURCES_DIST) \ $(am__test_integration_pkcs_ecdh_int_SOURCES_DIST) \ $(am__test_integration_pkcs_find_objects_int_SOURCES_DIST) \ $(am__test_integration_pkcs_get_attribute_value_int_SOURCES_DIST) \ $(am__test_integration_pkcs_get_mechanism_int_SOURCES_DIST) \ $(am__test_integration_pkcs_initialize_finalize_int_SOURCES_DIST) \ $(am__test_integration_pkcs_keygen_int_SOURCES_DIST) \ $(am__test_integration_pkcs_lockout_int_SOURCES_DIST) \ $(am__test_integration_pkcs_login_logout_int_SOURCES_DIST) \ $(am__test_integration_pkcs_misc_int_SOURCES_DIST) \ $(am__test_integration_pkcs_session_state_int_SOURCES_DIST) \ $(am__test_integration_pkcs_sign_verify_int_SOURCES_DIST) \ test/unit/test_attr.c test/unit/test_db.c test/unit/test_log.c \ test/unit/test_parser.c test/unit/test_twist.c \ test/unit/test_utils.c am__can_run_installinfo = \ case $$AM_UPDATE_INFO_DIR in \ n|no|NO) false;; \ *) (install-info --version) >/dev/null 2>&1;; \ esac am__dist_noinst_JAVA_DIST = test/integration/PKCS11JavaTests.java CLASSPATH_ENV = CLASSPATH=$(JAVAROOT):$(srcdir)/$(JAVAROOT)$${CLASSPATH:+":$$CLASSPATH"} am__java_sources = $(dist_noinst_JAVA) DATA = $(p11config_DATA) $(pkgconfig_DATA) am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP) # Read a list of newline-separated strings from the standard input, # and print each of them once, without duplicates. Input order is # *not* preserved. am__uniquify_input = $(AWK) '\ BEGIN { nonempty = 0; } \ { items[$$0] = 1; nonempty = 1; } \ END { if (nonempty) { for (i in items) print i; }; } \ ' # Make sure the list of sources is unique. This is necessary because, # e.g., the same source file might be shared among _SOURCES variables # for different programs/libraries. am__define_uniq_tagged_files = \ list='$(am__tagged_files)'; \ unique=`for i in $$list; do \ if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \ done | $(am__uniquify_input)` AM_RECURSIVE_TARGETS = cscope check recheck am__tty_colors_dummy = \ mgn= red= grn= lgn= blu= brg= std=; \ am__color_tests=no am__tty_colors = { \ $(am__tty_colors_dummy); \ if test "X$(AM_COLOR_TESTS)" = Xno; then \ am__color_tests=no; \ elif test "X$(AM_COLOR_TESTS)" = Xalways; then \ am__color_tests=yes; \ elif test "X$$TERM" != Xdumb && { test -t 1; } 2>/dev/null; then \ am__color_tests=yes; \ fi; \ if test $$am__color_tests = yes; then \ red=''; \ grn=''; \ lgn=''; \ blu=''; \ mgn=''; \ brg=''; \ std=''; \ fi; \ } am__recheck_rx = ^[ ]*:recheck:[ ]* am__global_test_result_rx = ^[ ]*:global-test-result:[ ]* am__copy_in_global_log_rx = ^[ ]*:copy-in-global-log:[ ]* # A command that, given a newline-separated list of test names on the # standard input, print the name of the tests that are to be re-run # upon "make recheck". am__list_recheck_tests = $(AWK) '{ \ recheck = 1; \ while ((rc = (getline line < ($$0 ".trs"))) != 0) \ { \ if (rc < 0) \ { \ if ((getline line2 < ($$0 ".log")) < 0) \ recheck = 0; \ break; \ } \ else if (line ~ /$(am__recheck_rx)[nN][Oo]/) \ { \ recheck = 0; \ break; \ } \ else if (line ~ /$(am__recheck_rx)[yY][eE][sS]/) \ { \ break; \ } \ }; \ if (recheck) \ print $$0; \ close ($$0 ".trs"); \ close ($$0 ".log"); \ }' # A command that, given a newline-separated list of test names on the # standard input, create the global log from their .trs and .log files. am__create_global_log = $(AWK) ' \ function fatal(msg) \ { \ print "fatal: making $@: " msg | "cat >&2"; \ exit 1; \ } \ function rst_section(header) \ { \ print header; \ len = length(header); \ for (i = 1; i <= len; i = i + 1) \ printf "="; \ printf "\n\n"; \ } \ { \ copy_in_global_log = 1; \ global_test_result = "RUN"; \ while ((rc = (getline line < ($$0 ".trs"))) != 0) \ { \ if (rc < 0) \ fatal("failed to read from " $$0 ".trs"); \ if (line ~ /$(am__global_test_result_rx)/) \ { \ sub("$(am__global_test_result_rx)", "", line); \ sub("[ ]*$$", "", line); \ global_test_result = line; \ } \ else if (line ~ /$(am__copy_in_global_log_rx)[nN][oO]/) \ copy_in_global_log = 0; \ }; \ if (copy_in_global_log) \ { \ rst_section(global_test_result ": " $$0); \ while ((rc = (getline line < ($$0 ".log"))) != 0) \ { \ if (rc < 0) \ fatal("failed to read from " $$0 ".log"); \ print line; \ }; \ printf "\n"; \ }; \ close ($$0 ".trs"); \ close ($$0 ".log"); \ }' # Restructured Text title. am__rst_title = { sed 's/.*/ & /;h;s/./=/g;p;x;s/ *$$//;p;g' && echo; } # Solaris 10 'make', and several other traditional 'make' implementations, # pass "-e" to $(SHELL), and POSIX 2008 even requires this. Work around it # by disabling -e (using the XSI extension "set +e") if it's set. am__sh_e_setup = case $$- in *e*) set +e;; esac # Default flags passed to test drivers. am__common_driver_flags = \ --color-tests "$$am__color_tests" \ --enable-hard-errors "$$am__enable_hard_errors" \ --expect-failure "$$am__expect_failure" # To be inserted before the command running the test. Creates the # directory for the log if needed. Stores in $dir the directory # containing $f, in $tst the test, in $log the log. Executes the # developer- defined test setup AM_TESTS_ENVIRONMENT (if any), and # passes TESTS_ENVIRONMENT. Set up options for the wrapper that # will run the test scripts (or their associated LOG_COMPILER, if # thy have one). am__check_pre = \ $(am__sh_e_setup); \ $(am__vpath_adj_setup) $(am__vpath_adj) \ $(am__tty_colors); \ srcdir=$(srcdir); export srcdir; \ case "$@" in \ */*) am__odir=`echo "./$@" | sed 's|/[^/]*$$||'`;; \ *) am__odir=.;; \ esac; \ test "x$$am__odir" = x"." || test -d "$$am__odir" \ || $(MKDIR_P) "$$am__odir" || exit $$?; \ if test -f "./$$f"; then dir=./; \ elif test -f "$$f"; then dir=; \ else dir="$(srcdir)/"; fi; \ tst=$$dir$$f; log='$@'; \ if test -n '$(DISABLE_HARD_ERRORS)'; then \ am__enable_hard_errors=no; \ else \ am__enable_hard_errors=yes; \ fi; \ case " $(XFAIL_TESTS) " in \ *[\ \ ]$$f[\ \ ]* | *[\ \ ]$$dir$$f[\ \ ]*) \ am__expect_failure=yes;; \ *) \ am__expect_failure=no;; \ esac; \ $(AM_TESTS_ENVIRONMENT) $(TESTS_ENVIRONMENT) # A shell command to get the names of the tests scripts with any registered # extension removed (i.e., equivalently, the names of the test logs, with # the '.log' extension removed). The result is saved in the shell variable # '$bases'. This honors runtime overriding of TESTS and TEST_LOGS. Sadly, # we cannot use something simpler, involving e.g., "$(TEST_LOGS:.log=)", # since that might cause problem with VPATH rewrites for suffix-less tests. # See also 'test-harness-vpath-rewrite.sh' and 'test-trs-basic.sh'. am__set_TESTS_bases = \ bases='$(TEST_LOGS)'; \ bases=`for i in $$bases; do echo $$i; done | sed 's/\.log$$//'`; \ bases=`echo $$bases` AM_TESTSUITE_SUMMARY_HEADER = ' for $(PACKAGE_STRING)' RECHECK_LOGS = $(TEST_LOGS) TEST_SUITE_LOG = test-suite.log LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver LOG_COMPILE = $(LOG_COMPILER) $(AM_LOG_FLAGS) $(LOG_FLAGS) am__set_b = \ case '$@' in \ */*) \ case '$*' in \ */*) b='$*';; \ *) b=`echo '$@' | sed 's/\.log$$//'`; \ esac;; \ *) \ b='$*';; \ esac am__test_logs1 = $(TESTS:=.log) am__test_logs2 = $(am__test_logs1:@EXEEXT@.log=.log) am__test_logs3 = $(am__test_logs2:.sh.log=.log) SH_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver SH_LOG_COMPILE = $(SH_LOG_COMPILER) $(AM_SH_LOG_FLAGS) $(SH_LOG_FLAGS) am__test_logs4 = $(am__test_logs3:.int.log=.log) INT_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver INT_LOG_COMPILE = $(INT_LOG_COMPILER) $(AM_INT_LOG_FLAGS) \ $(INT_LOG_FLAGS) am__test_logs5 = $(am__test_logs4:.nosetup.log=.log) NOSETUP_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver NOSETUP_LOG_COMPILE = $(NOSETUP_LOG_COMPILER) $(AM_NOSETUP_LOG_FLAGS) \ $(NOSETUP_LOG_FLAGS) am__test_logs6 = $(am__test_logs5:.java.log=.log) JAVA_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver JAVA_LOG_COMPILE = $(JAVA_LOG_COMPILER) $(AM_JAVA_LOG_FLAGS) \ $(JAVA_LOG_FLAGS) am__test_logs7 = $(am__test_logs6:.fapi.log=.log) FAPI_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver FAPI_LOG_COMPILE = $(FAPI_LOG_COMPILER) $(AM_FAPI_LOG_FLAGS) \ $(FAPI_LOG_FLAGS) am__test_logs8 = $(am__test_logs7:.fuzz.log=.log) FUZZ_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver FUZZ_LOG_COMPILE = $(FUZZ_LOG_COMPILER) $(AM_FUZZ_LOG_FLAGS) \ $(FUZZ_LOG_FLAGS) TEST_LOGS = $(am__test_logs8:.fuzz32.log=.log) FUZZ32_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver FUZZ32_LOG_COMPILE = $(FUZZ32_LOG_COMPILER) $(AM_FUZZ32_LOG_FLAGS) \ $(FUZZ32_LOG_FLAGS) am__DIST_COMMON = $(srcdir)/Makefile-fuzz.am \ $(srcdir)/Makefile-integration.am $(srcdir)/Makefile-unit.am \ $(srcdir)/Makefile.in $(srcdir)/src_vars.mk \ $(top_srcdir)/aminclude_static.am \ $(top_srcdir)/lib/tpm2-pkcs11.pc.in \ $(top_srcdir)/src/lib/config.h.in AUTHORS README.md compile \ config.guess config.sub depcomp install-sh ltmain.sh missing \ test-driver DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST) distdir = $(PACKAGE)-$(VERSION) top_distdir = $(distdir) am__remove_distdir = \ if test -d "$(distdir)"; then \ find "$(distdir)" -type d ! -perm -200 -exec chmod u+w {} ';' \ && rm -rf "$(distdir)" \ || { sleep 5 && rm -rf "$(distdir)"; }; \ else :; fi am__post_remove_distdir = $(am__remove_distdir) DIST_ARCHIVES = $(distdir).tar.gz GZIP_ENV = --best DIST_TARGETS = dist-gzip # Exists only to be overridden by the user if desired. AM_DISTCHECK_DVI_TARGET = dvi distuninstallcheck_listfiles = find . -type f -print am__distuninstallcheck_listfiles = $(distuninstallcheck_listfiles) \ | sed 's|^\./|$(prefix)/|' | grep -v '$(infodir)/dir$$' distcleancheck_listfiles = find . -type f -print ACLOCAL = @ACLOCAL@ AMTAR = @AMTAR@ AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@ AR = @AR@ AUTOCONF = @AUTOCONF@ AUTOHEADER = @AUTOHEADER@ AUTOMAKE = @AUTOMAKE@ AWK = @AWK@ CC = @CC@ CCDEPMODE = @CCDEPMODE@ CFLAGS = @CFLAGS@ CMOCKA_CFLAGS = @CMOCKA_CFLAGS@ CMOCKA_LIBS = @CMOCKA_LIBS@ CODE_COVERAGE_CFLAGS = @CODE_COVERAGE_CFLAGS@ CODE_COVERAGE_CPPFLAGS = @CODE_COVERAGE_CPPFLAGS@ CODE_COVERAGE_CXXFLAGS = @CODE_COVERAGE_CXXFLAGS@ CODE_COVERAGE_ENABLED = @CODE_COVERAGE_ENABLED@ CODE_COVERAGE_LIBS = @CODE_COVERAGE_LIBS@ CPP = @CPP@ CPPFLAGS = @CPPFLAGS@ CRYPTO_CFLAGS = @CRYPTO_CFLAGS@ CRYPTO_LIBS = @CRYPTO_LIBS@ CSCOPE = @CSCOPE@ CTAGS = @CTAGS@ CYGPATH_W = @CYGPATH_W@ DEFS = @DEFS@ DEPDIR = @DEPDIR@ DISTCHECK_CONFIGURE_FLAGS = @DISTCHECK_CONFIGURE_FLAGS@ DLLTOOL = @DLLTOOL@ DSYMUTIL = @DSYMUTIL@ DUMPBIN = @DUMPBIN@ ECHO_C = @ECHO_C@ ECHO_N = @ECHO_N@ ECHO_T = @ECHO_T@ EGREP = @EGREP@ ENABLE_INTEGRATION = @ENABLE_INTEGRATION@ ETAGS = @ETAGS@ EXEEXT = @EXEEXT@ EXTRA_CFLAGS = @EXTRA_CFLAGS@ EXTRA_LDFLAGS = @EXTRA_LDFLAGS@ FGREP = @FGREP@ FILECMD = @FILECMD@ FUZZING_CFLAGS = @FUZZING_CFLAGS@ FUZZING_FLAGS = @FUZZING_FLAGS@ GCOV = @GCOV@ GENHTML = @GENHTML@ GREP = @GREP@ INSTALL = @INSTALL@ INSTALL_DATA = @INSTALL_DATA@ INSTALL_PROGRAM = @INSTALL_PROGRAM@ INSTALL_SCRIPT = @INSTALL_SCRIPT@ INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@ JAVA = @JAVA@ JAVAC = @JAVAC@ LCOV = @LCOV@ LD = @LD@ LDFLAGS = @LDFLAGS@ LIBOBJS = @LIBOBJS@ LIBS = @LIBS@ LIBTOOL = @LIBTOOL@ LIPO = @LIPO@ LN_S = @LN_S@ LTLIBOBJS = @LTLIBOBJS@ LT_SYS_LIBRARY_PATH = @LT_SYS_LIBRARY_PATH@ MAKEINFO = @MAKEINFO@ MANIFEST_TOOL = @MANIFEST_TOOL@ MKDIR_P = @MKDIR_P@ NM = @NM@ NMEDIT = @NMEDIT@ OBJDUMP = @OBJDUMP@ OBJEXT = @OBJEXT@ OPENSC_PKCS11_CFLAGS = @OPENSC_PKCS11_CFLAGS@ OPENSC_PKCS11_LIBS = @OPENSC_PKCS11_LIBS@ OTOOL = @OTOOL@ OTOOL64 = @OTOOL64@ P11KIT_CFLAGS = @P11KIT_CFLAGS@ P11KIT_LIBS = @P11KIT_LIBS@ P11_CONFIGS_PATH = @P11_CONFIGS_PATH@ P11_MODULE_PATH = @P11_MODULE_PATH@ PACKAGE = @PACKAGE@ PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@ PACKAGE_NAME = @PACKAGE_NAME@ PACKAGE_STRING = @PACKAGE_STRING@ PACKAGE_TARNAME = @PACKAGE_TARNAME@ PACKAGE_URL = @PACKAGE_URL@ PACKAGE_VERSION = @PACKAGE_VERSION@ PATH_SEPARATOR = @PATH_SEPARATOR@ PKG_CONFIG = @PKG_CONFIG@ PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@ PKG_CONFIG_PATH = @PKG_CONFIG_PATH@ PTHREAD_CC = @PTHREAD_CC@ PTHREAD_CFLAGS = @PTHREAD_CFLAGS@ PTHREAD_CXX = @PTHREAD_CXX@ PTHREAD_LIBS = @PTHREAD_LIBS@ PYTHON = @PYTHON@ PYTHON_EXEC_PREFIX = @PYTHON_EXEC_PREFIX@ PYTHON_INTERPRETER = @PYTHON_INTERPRETER@ PYTHON_PLATFORM = @PYTHON_PLATFORM@ PYTHON_PREFIX = @PYTHON_PREFIX@ PYTHON_VERSION = @PYTHON_VERSION@ RANLIB = @RANLIB@ SED = @SED@ SET_MAKE = @SET_MAKE@ SHELL = @SHELL@ SQLITE3_CFLAGS = @SQLITE3_CFLAGS@ SQLITE3_LIBS = @SQLITE3_LIBS@ STRIP = @STRIP@ TABRMD_TCTI = @TABRMD_TCTI@ TSS2_ESYS_CFLAGS = @TSS2_ESYS_CFLAGS@ TSS2_ESYS_LIBS = @TSS2_ESYS_LIBS@ TSS2_FAPI_CFLAGS = @TSS2_FAPI_CFLAGS@ TSS2_FAPI_LIBS = @TSS2_FAPI_LIBS@ TSS2_MU_CFLAGS = @TSS2_MU_CFLAGS@ TSS2_MU_LIBS = @TSS2_MU_LIBS@ TSS2_RC_CFLAGS = @TSS2_RC_CFLAGS@ TSS2_RC_LIBS = @TSS2_RC_LIBS@ TSS2_TCTILDR_CFLAGS = @TSS2_TCTILDR_CFLAGS@ TSS2_TCTILDR_LIBS = @TSS2_TCTILDR_LIBS@ TSS2_TCTI_TABRMD_CFLAGS = @TSS2_TCTI_TABRMD_CFLAGS@ TSS2_TCTI_TABRMD_LIBS = @TSS2_TCTI_TABRMD_LIBS@ VERSION = @VERSION@ YAML_CFLAGS = @YAML_CFLAGS@ YAML_LIBS = @YAML_LIBS@ abs_builddir = @abs_builddir@ abs_srcdir = @abs_srcdir@ abs_top_builddir = @abs_top_builddir@ abs_top_srcdir = @abs_top_srcdir@ ac_ct_AR = @ac_ct_AR@ ac_ct_CC = @ac_ct_CC@ ac_ct_DUMPBIN = @ac_ct_DUMPBIN@ am__include = @am__include@ am__leading_dot = @am__leading_dot@ am__quote = @am__quote@ am__tar = @am__tar@ am__untar = @am__untar@ ax_pthread_config = @ax_pthread_config@ bash = @bash@ bindir = @bindir@ build = @build@ build_alias = @build_alias@ build_cpu = @build_cpu@ build_os = @build_os@ build_vendor = @build_vendor@ builddir = @builddir@ certutil = @certutil@ datadir = @datadir@ datarootdir = @datarootdir@ docdir = @docdir@ dvidir = @dvidir@ enginesdir = @enginesdir@ exec_prefix = @exec_prefix@ expect = @expect@ host = @host@ host_alias = @host_alias@ host_cpu = @host_cpu@ host_os = @host_os@ host_vendor = @host_vendor@ htmldir = @htmldir@ ifGNUmake = @ifGNUmake@ ifnGNUmake = @ifnGNUmake@ includedir = @includedir@ infodir = @infodir@ install_sh = @install_sh@ libdir = @libdir@ libexecdir = @libexecdir@ localedir = @localedir@ localstatedir = @localstatedir@ mandir = @mandir@ mkdir_p = @mkdir_p@ modutil = @modutil@ oldincludedir = @oldincludedir@ p11kitconfigdir = @p11kitconfigdir@ p11kitmoduledir = @p11kitmoduledir@ p11tool = @p11tool@ pdfdir = @pdfdir@ pkcs11_tool = @pkcs11_tool@ pkgconfigdir = @pkgconfigdir@ pkgpyexecdir = @pkgpyexecdir@ pkgpythondir = @pkgpythondir@ prefix = @prefix@ program_transform_name = @program_transform_name@ psdir = @psdir@ pyexecdir = @pyexecdir@ pythondir = @pythondir@ runstatedir = @runstatedir@ sbindir = @sbindir@ sharedstatedir = @sharedstatedir@ sqlite3 = @sqlite3@ srcdir = @srcdir@ ss = @ss@ swtpm = @swtpm@ sysconfdir = @sysconfdir@ target_alias = @target_alias@ top_build_prefix = @top_build_prefix@ top_builddir = @top_builddir@ top_srcdir = @top_srcdir@ tpm2_abrmd = @tpm2_abrmd@ tpm2_changeauth = @tpm2_changeauth@ tpm2_create = @tpm2_create@ tpm2_createprimary = @tpm2_createprimary@ tpm2_encryptdecrypt = @tpm2_encryptdecrypt@ tpm2_evictcontrol = @tpm2_evictcontrol@ tpm2_getcap = @tpm2_getcap@ tpm2_import = @tpm2_import@ tpm2_load = @tpm2_load@ tpm2_loadexternal = @tpm2_loadexternal@ tpm2_readpublic = @tpm2_readpublic@ tpm2_sign = @tpm2_sign@ tpm2_unseal = @tpm2_unseal@ tpm2tss_genkey = @tpm2tss_genkey@ tpm_server = @tpm_server@ tss2_provision = @tss2_provision@ INCLUDE_DIRS = -I$(srcdir)/src -I$(top_srcdir)/src/lib ACLOCAL_AMFLAGS = -I m4 --install AM_CFLAGS = $(INCLUDE_DIRS) $(EXTRA_CFLAGS) $(CODE_COVERAGE_CFLAGS) \ $(TSS2_ESYS_CFLAGS) $(TSS2_MU_CFLAGS) $(TSS2_TCTILDR_CFLAGS) \ $(TSS2_RC_CFLAGS) $(SQLITE3_CFLAGS) $(PTHREAD_CFLAGS) \ $(CRYPTO_CFLAGS) $(YAML_CFLAGS) $(TSS2_FAPI_CFLAGS) AM_LDFLAGS = $(EXTRA_LDFLAGS) $(CODE_COVERAGE_LIBS) $(TSS2_ESYS_LIBS) \ $(TSS2_MU_LIBS) $(TSS2_TCTILDR_LIBS) $(TSS2_RC_LIBS) \ $(SQLITE3_LIBS) $(PTHREAD_LIBS) $(CRYPTO_LIBS) $(YAML_LIBS) $(TSS2_FAPI_LIBS) JAVAROOT = $(top_builddir)/test/integration @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@GITIGNOREFILES := $(GITIGNOREFILES) $(CODE_COVERAGE_OUTPUT_FILE) $(CODE_COVERAGE_OUTPUT_DIRECTORY) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_cap = $(code_coverage_v_lcov_cap_$(V)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_cap_ = $(code_coverage_v_lcov_cap_$(AM_DEFAULT_VERBOSITY)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_cap_0 = @echo " LCOV --capture" $(CODE_COVERAGE_OUTPUT_FILE); @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_ign = $(code_coverage_v_lcov_ign_$(V)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_ign_ = $(code_coverage_v_lcov_ign_$(AM_DEFAULT_VERBOSITY)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_lcov_ign_0 = @echo " LCOV --remove /tmp/*" $(CODE_COVERAGE_IGNORE_PATTERN); @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_genhtml = $(code_coverage_v_genhtml_$(V)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_genhtml_ = $(code_coverage_v_genhtml_$(AM_DEFAULT_VERBOSITY)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_v_genhtml_0 = @echo " GEN " "$(CODE_COVERAGE_OUTPUT_DIRECTORY)"; @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_quiet = $(code_coverage_quiet_$(V)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_quiet_ = $(code_coverage_quiet_$(AM_DEFAULT_VERBOSITY)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_quiet_0 = --quiet # sanitizes the test-name: replaces with underscores: dashes and dots @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code_coverage_sanitize = $(subst -,_,$(subst .,_,$(1))) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@AM_DISTCHECK_CONFIGURE_FLAGS := $(AM_DISTCHECK_CONFIGURE_FLAGS) --disable-code-coverage AM_DISTCHECK_CONFIGURE_FLAGS = --with-p11kitconfigdir='$$(datarootdir)/p11kitconfigdir' --with-p11kitmoduledir='$$(libdir)' LIB_PKCS11_C = src/pkcs11.c LIB_PKCS11_H = src/pkcs11.h LIB_PKCS11_SRC = $(LIB_PKCS11_C) $(LIB_PKCS11_H) LIB_PKCS11_INTERNAL_LIB_C = src/lib/attrs.c src/lib/backend.c src/lib/backend_esysdb.c src/lib/backend_fapi.c src/lib/db.c src/lib/derive.c src/lib/digest.c src/lib/emitter.c src/lib/encrypt.c src/lib/general.c src/lib/key.c src/lib/mech.c src/lib/mutex.c src/lib/object.c src/lib/parser.c src/lib/random.c src/lib/session.c src/lib/session_ctx.c src/lib/session_table.c src/lib/sign.c src/lib/slot.c src/lib/ssl_util.c src/lib/token.c src/lib/tpm.c src/lib/twist.c src/lib/typed_memory.c src/lib/utils.c LIB_PKCS11_INTERNAL_LIB_H = src/lib/attrs.h src/lib/backend.h src/lib/backend_esysdb.h src/lib/backend_fapi.h src/lib/checks.h src/lib/db.h src/lib/debug.h src/lib/derive.h src/lib/digest.h src/lib/emitter.h src/lib/encrypt.h src/lib/general.h src/lib/key.h src/lib/list.h src/lib/log.h src/lib/mech.h src/lib/mutex.h src/lib/object.h src/lib/parser.h src/lib/random.h src/lib/session.h src/lib/session_ctx.h src/lib/session_table.h src/lib/sign.h src/lib/slot.h src/lib/ssl_util.h src/lib/token.h src/lib/tpm.h src/lib/twist.h src/lib/typed_memory.h src/lib/utils.h LIB_PKCS11_INTERNAL_LIB_SRC = $(LIB_PKCS11_INTERNAL_LIB_C) $(LIB_PKCS11_INTERNAL_LIB_H) # Add source code files from bootstrap EXTRA_DIST = LICENSE docs test/fake-tpm test/integration/scripts \ misc/p11-kit tools VERSION AUTHORS lib/tpm2-pkcs11.map \ $(integration_scripts) test/integration/test.h \ test/integration/largebin.h test/integration/fixtures CLEANFILES = AUTHORS $(am__append_4) # pkg-config setup. pc-file declarations happen in the corresponding modules pkgconfig_DATA = lib/tpm2-pkcs11.pc DISTCLEANFILES = $(pkgconfig_DATA) ### PKCS#11 Library Definition ### libtpm2_pkcs11 = src/libtpm2_pkcs11.la @HAVE_LD_VERSION_SCRIPT_TRUE@src_libtpm2_pkcs11_la_LDFLAGS = -Wl,--version-script=$(srcdir)/lib/tpm2-pkcs11.map src_libtpm2_pkcs11_la_LIBADD = $(AM_LDFLAGS) src_libtpm2_pkcs11_la_SOURCES = $(LIB_PKCS11_SRC) $(LIB_PKCS11_INTERNAL_LIB_SRC) @HAVE_P11KIT_FALSE@@HAVE_PREFIX_FALSE@lib_LTLIBRARIES = $(libtpm2_pkcs11) @HAVE_PREFIX_TRUE@lib_LTLIBRARIES = $(libtpm2_pkcs11) @HAVE_P11KIT_TRUE@@HAVE_PREFIX_FALSE@p11libdir = $(P11_MODULE_PATH) @HAVE_P11KIT_TRUE@@HAVE_PREFIX_FALSE@p11lib_LTLIBRARIES = $(libtpm2_pkcs11) @HAVE_P11KIT_TRUE@@HAVE_PREFIX_FALSE@p11configdir = $(P11_CONFIGS_PATH) @HAVE_P11KIT_TRUE@@HAVE_PREFIX_FALSE@p11config_DATA = $(top_srcdir)/misc/p11-kit/tpm2_pkcs11.module # # Due to limitations in how cmocka works, we build a separate library here so we # can have a PKCS11 shared object with undefined calls into the rest of the lib # code. This allows us to deploy a single library, but be able to intercept calls # during linking with ld wrap to mock out various functions. # # UNIT, INTEGRATION and/or FUZZ can use this library. # # src/lib stuff as a separate archive libtpm2_test_pkcs11 = src/libtpm2_test_pkcs11.la src_libtpm2_test_pkcs11_la_LIBADD = $(AM_LDFLAGS) $(libtpm2_test_internal) src_libtpm2_test_pkcs11_la_SOURCES = $(LIB_PKCS11_SRC) # Internal Testing Unit libtpm2_test_internal = src/libtpm2_test_internal.la src_libtpm2_test_internal_la_LIBADD = $(AM_LDFLAGS) src_libtpm2_test_internal_la_SOURCES = $(LIB_PKCS11_INTERNAL_LIB_SRC) noinst_LTLIBRARIES = $(libtpm2_test_pkcs11) $(libtpm2_test_internal) @ENABLE_ASAN_FALSE@ASAN_ENABLED = "" @ENABLE_ASAN_TRUE@ASAN_ENABLED = "true" @HAVE_FAPI_FALSE@FAPI_ENABLED = "" @HAVE_FAPI_TRUE@FAPI_ENABLED = "true" # test harness configuration AM_TESTS_ENVIRONMENT = \ ASAN_ENABLED=$(ASAN_ENABLED) \ FAPI_ENABLED=$(FAPI_ENABLED) \ T=$(abs_top_srcdir) \ PYTHON_INTERPRETER=@PYTHON_INTERPRETER@ \ TEST_FUNC_LIB=$(srcdir)/test/integration/scripts/int-test-funcs.sh \ TEST_FIXTURES=$(abs_top_srcdir)/test/integration/fixtures \ PATH=$(abs_top_srcdir)/tools:./src:$(PATH) \ PYTHONPATH=$(abs_top_srcdir)/tools:$(PYTHONPATH) \ TPM2_PKCS11_MODULE=$(abs_builddir)/src/.libs/libtpm2_pkcs11.so \ TEST_JAVA_ROOT=$(JAVAROOT) \ PACKAGE_URL=$(PACKAGE_URL) \ CC=$(CC) \ dbus-run-session TESTS_LDADD = $(noinst_LTLIBRARIES) $(lib_LTLIBRARIES) $(p11lib_LTLIBRARIES) $(AM_LDFLAGS) $(CMOCKA_LIBS) $(CRYPTO_LIBS) TESTS_CFLAGS = $(CMOCKA_CFLAGS) check_SCRIPTS = $(am__append_3) TEST_EXTENSIONS = .sh .int .nosetup .java .fapi .fuzz .fuzz32 integration_scripts = test/integration/pkcs11-tool.sh \ test/integration/pkcs11-tool-init.sh.nosetup \ test/integration/p11-tool.sh.nosetup \ test/integration/pkcs11-dbup.sh.nosetup \ test/integration/tls-tests.sh test/integration/openssl.sh \ test/integration/pkcs11-javarunner.sh.java \ test/integration/nss-tests.sh \ test/integration/ptool-link.sh.nosetup \ test/integration/python-pkcs11.sh $(am__append_1) @ENABLE_INTEGRATION_TRUE@AM_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) @ENABLE_INTEGRATION_TRUE@LOG_COMPILER = $(srcdir)/test/integration/scripts/int-test-setup.sh @ENABLE_INTEGRATION_TRUE@AM_INT_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh @ENABLE_INTEGRATION_TRUE@INT_LOG_COMPILER = $(LOG_COMPILER) @ENABLE_INTEGRATION_TRUE@AM_SH_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh @ENABLE_INTEGRATION_TRUE@SH_LOG_COMPILER = $(LOG_COMPILER) @ENABLE_INTEGRATION_TRUE@AM_NOSETUP_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) @ENABLE_INTEGRATION_TRUE@NOSETUP_LOG_COMPILER = $(LOG_COMPILER) @ENABLE_INTEGRATION_TRUE@AM_FAPI_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) @ENABLE_INTEGRATION_TRUE@FAPI_LOG_COMPILER = env TPM2_PKCS11_BACKEND=fapi $(LOG_COMPILER) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_find_objects_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_find_objects_int_LDADD = $(TESTS_LDADD) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_find_objects_int_SOURCES = test/integration/pkcs-find-objects.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_mechanism_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_mechanism_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_mechanism_int_SOURCES = test/integration/pkcs-get-mechanism.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_attribute_value_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_attribute_value_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_get_attribute_value_int_SOURCES = test/integration/pkcs-get-attribute-value.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_login_logout_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_login_logout_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_login_logout_int_SOURCES = test/integration/pkcs-login-logout.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_sign_verify_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_sign_verify_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_sign_verify_int_SOURCES = test/integration/pkcs-sign-verify.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_initialize_finalize_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_initialize_finalize_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_initialize_finalize_int_SOURCES = test/integration/pkcs-initialize-finalize.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_misc_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_misc_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_misc_int_SOURCES = test/integration/pkcs-misc.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_crypt_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_crypt_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_crypt_int_SOURCES = test/integration/pkcs-crypt.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_keygen_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_keygen_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_keygen_int_SOURCES = test/integration/pkcs-keygen.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_ecdh_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_ecdh_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_ecdh_int_SOURCES = test/integration/pkcs-ecdh.int.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_session_state_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_session_state_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_session_state_int_SOURCES = test/integration/pkcs-session-state.c test/integration/test.c @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_lockout_int_CFLAGS = $(AM_CFLAGS) $(TESTS_CFLAGS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_lockout_int_LDADD = $(TESTS_LDADD) $(SQLITE3_LIBS) @ENABLE_INTEGRATION_TRUE@test_integration_pkcs_lockout_int_SOURCES = test/integration/pkcs-lockout.int.c test/integration/test.c # # Java Tests # @ENABLE_INTEGRATION_TRUE@AM_JAVA_LOG_FLAGS = --tabrmd-tcti=$(TABRMD_TCTI) --tsetup-script=$(top_srcdir)/test/integration/scripts/create_pkcs_store.sh @ENABLE_INTEGRATION_TRUE@JAVA_LOG_COMPILER = $(LOG_COMPILER) @ENABLE_INTEGRATION_TRUE@dist_noinst_JAVA = test/integration/PKCS11JavaTests.java @UNIT_TRUE@test_unit_test_twist_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) @UNIT_TRUE@test_unit_test_twist_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) @UNIT_TRUE@test_unit_test_log_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) @UNIT_TRUE@test_unit_test_log_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) @UNIT_TRUE@test_unit_test_parser_CFLAGS = $(AM_CFLAGS) $(YAML_CFLAGS) $(CMOCKA_CFLAGS) @UNIT_TRUE@test_unit_test_parser_LDADD = $(CMOCKA_LIBS) $(YAML_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) @UNIT_TRUE@test_unit_test_attr_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) @UNIT_TRUE@test_unit_test_attr_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) @UNIT_TRUE@test_unit_test_db_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) $(SQLITE3_CFLAGS) @UNIT_TRUE@test_unit_test_db_LDADD = $(CMOCKA_LIBS) $(SQLITE3_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) @UNIT_TRUE@test_unit_test_db_LDFLAGS = -Wl,--wrap=sqlite3_column_bytes \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_column_blob \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_data_count \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_column_name \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_column_bytes \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_column_text \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_column_int \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_prepare_v2 \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_finalize \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_bind_blob \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_bind_int \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_bind_text \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_errmsg \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_step \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_exec \ @UNIT_TRUE@ -Wl,--wrap=sqlite3_last_insert_rowid \ @UNIT_TRUE@ -Wl,--wrap=strdup \ @UNIT_TRUE@ -Wl,--wrap=calloc @UNIT_TRUE@test_unit_test_utils_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) @UNIT_TRUE@test_unit_test_utils_LDADD = $(CMOCKA_LIBS) $(libtpm2_test_internal) $(libtpm2_test_pkcs11) WRAP_LD_FLAGS := \ -Wl,--wrap=Esys_Initialize \ -Wl,--wrap=backend_fapi_init \ -Wl,--wrap=Tss2_TctiLdr_Initialize \ -Wl,--wrap=Tss2_TctiLdr_Finalize \ -Wl,--wrap=Esys_GetCapability \ -Wl,--wrap=Esys_TestParms \ -Wl,--wrap=Esys_Finalize \ -Wl,--wrap=Esys_TR_FromTPMPublic \ -Wl,--wrap=Esys_TR_Serialize \ -Wl,--wrap=Esys_TR_Deserialize \ -Wl,--wrap=Esys_TR_SetAuth \ -Wl,--wrap=Esys_StartAuthSession \ -Wl,--wrap=Esys_TRSess_SetAttributes \ -Wl,--wrap=Esys_TRSess_GetAttributes \ -Wl,--wrap=Esys_CreateLoaded \ -Wl,--wrap=Esys_Create \ -Wl,--wrap=Esys_FlushContext \ -Wl,--wrap=Esys_Load \ -Wl,--wrap=Esys_TRSess_GetAttributes \ -Wl,--wrap=Esys_Unseal \ -Wl,--wrap=Esys_ObjectChangeAuth @FUZZING_TRUE@FUZZ_RUNNER := $(top_srcdir)/test/fuzz/scripts/fuzz-runner.sh @FUZZING_TRUE@AM_FUZZ_LOG_FLAGS = $(FUZZING_FLAGS) @FUZZING_TRUE@FUZZ_LOG_COMPILER = $(FUZZ_RUNNER) @FUZZING_TRUE@test_fuzz_yaml_parser_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) @FUZZING_TRUE@test_fuzz_yaml_parser_fuzz_LDADD = $(libtpm2_test_pkcs11) @FUZZING_TRUE@test_fuzz_yaml_parser_fuzz_SOURCES = test/fuzz/yaml-parser.fuzz.c @FUZZING_TRUE@test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS = $(AM_CFLAGS) $(CMOCKA_CFLAGS) $(FUZZING_CFLAGS) @FUZZING_TRUE@test_fuzz_utils_ctx_unwrap_objauth_fuzz_LDADD = $(libtpm2_test_pkcs11) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_utils_ctx_unwrap_objauth_fuzz_SOURCES = test/fuzz/utils-ctx-unwrap-objauth.c @FUZZING_TRUE@test_fuzz_init_token_sopin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_init_token_sopin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) @FUZZING_TRUE@test_fuzz_init_token_sopin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_init_token_sopin_fuzz_SOURCES = test/fuzz/init-token-sopin.fuzz.c @FUZZING_TRUE@test_fuzz_init_pin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_init_pin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) @FUZZING_TRUE@test_fuzz_init_pin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_init_pin_fuzz_SOURCES = test/fuzz/init-pin.fuzz.c @FUZZING_TRUE@test_fuzz_set_pin_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_set_pin_fuzz_LDFLAGS = $(WRAP_LD_FLAGS) @FUZZING_TRUE@test_fuzz_set_pin_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_set_pin_fuzz_SOURCES = test/fuzz/set-pin.fuzz.c @FUZZING_TRUE@test_fuzz_db_take_lock_fuzz_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_db_take_lock_fuzz_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_db_take_lock_fuzz_SOURCES = test/fuzz/db-take-lock.fuzz.c @FUZZING_TRUE@AM_FUZZ32_LOG_FLAGS = $(FUZZING_FLAGS) -max_len=32 @FUZZING_TRUE@FUZZ32_LOG_COMPILER = $(FUZZ_RUNNER) @FUZZING_TRUE@test_fuzz_init_token_label_fuzz32_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_init_token_label_fuzz32_LDFLAGS = $(WRAP_LD_FLAGS) @FUZZING_TRUE@test_fuzz_init_token_label_fuzz32_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_init_token_label_fuzz32_SOURCES = test/fuzz/init-token-label.fuzz32.c @FUZZING_TRUE@test_fuzz_db_token_label_fuzz32_CFLAGS = $(AM_CFLAGS) $(FUZZING_CFLAGS) $(CMOCKA_CFLAGS) -I$(srcdir)/test/fake-tpm @FUZZING_TRUE@test_fuzz_db_token_label_fuzz32_LDFLAGS = $(WRAP_LD_FLAGS) @FUZZING_TRUE@test_fuzz_db_token_label_fuzz32_LDADD = $(libtpm2_test_pkcs11) $(AM_LDFLAGS) $(CMOCKA_LIBS) @FUZZING_TRUE@test_fuzz_db_token_label_fuzz32_SOURCES = test/fuzz/db-token-label.fuzz32.c @FUZZING_TRUE@fuzzdir = $(srcdir) # include integration tests # include unit tests # Include fuzz tests TESTS = \ $(check_PROGRAMS) \ $(check_SCRIPTS) all: all-am .SUFFIXES: .SUFFIXES: .c .fapi .fapi$(EXEEXT) .fuzz .fuzz$(EXEEXT) .fuzz32 .fuzz32$(EXEEXT) .int .int$(EXEEXT) .java .java$(EXEEXT) .lo .log .nosetup .nosetup$(EXEEXT) .o .obj .sh .sh$(EXEEXT) .trs am--refresh: Makefile @: $(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(top_srcdir)/aminclude_static.am $(srcdir)/src_vars.mk $(srcdir)/Makefile-integration.am $(srcdir)/Makefile-unit.am $(srcdir)/Makefile-fuzz.am $(am__configure_deps) @for dep in $?; do \ case '$(am__configure_deps)' in \ *$$dep*) \ echo ' cd $(srcdir) && $(AUTOMAKE) --foreign'; \ $(am__cd) $(srcdir) && $(AUTOMAKE) --foreign \ && exit 0; \ exit 1;; \ esac; \ done; \ echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign Makefile'; \ $(am__cd) $(top_srcdir) && \ $(AUTOMAKE) --foreign Makefile Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status @case '$?' in \ *config.status*) \ echo ' $(SHELL) ./config.status'; \ $(SHELL) ./config.status;; \ *) \ echo ' cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__maybe_remake_depfiles)'; \ cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__maybe_remake_depfiles);; \ esac; $(top_srcdir)/aminclude_static.am $(srcdir)/src_vars.mk $(srcdir)/Makefile-integration.am $(srcdir)/Makefile-unit.am $(srcdir)/Makefile-fuzz.am $(am__empty): $(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES) $(SHELL) ./config.status --recheck $(top_srcdir)/configure: $(am__configure_deps) $(am__cd) $(srcdir) && $(AUTOCONF) $(ACLOCAL_M4): $(am__aclocal_m4_deps) $(am__cd) $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS) $(am__aclocal_m4_deps): src/lib/config.h: src/lib/stamp-h1 @test -f $@ || rm -f src/lib/stamp-h1 @test -f $@ || $(MAKE) $(AM_MAKEFLAGS) src/lib/stamp-h1 src/lib/stamp-h1: $(top_srcdir)/src/lib/config.h.in $(top_builddir)/config.status @rm -f src/lib/stamp-h1 cd $(top_builddir) && $(SHELL) ./config.status src/lib/config.h $(top_srcdir)/src/lib/config.h.in: $(am__configure_deps) ($(am__cd) $(top_srcdir) && $(AUTOHEADER)) rm -f src/lib/stamp-h1 touch $@ distclean-hdr: -rm -f src/lib/config.h src/lib/stamp-h1 lib/tpm2-pkcs11.pc: $(top_builddir)/config.status $(top_srcdir)/lib/tpm2-pkcs11.pc.in cd $(top_builddir) && $(SHELL) ./config.status $@ clean-checkPROGRAMS: @list='$(check_PROGRAMS)'; test -n "$$list" || exit 0; \ echo " rm -f" $$list; \ rm -f $$list || exit $$?; \ test -n "$(EXEEXT)" || exit 0; \ list=`for p in $$list; do echo "$$p"; done | sed 's/$(EXEEXT)$$//'`; \ echo " rm -f" $$list; \ rm -f $$list install-fuzzPROGRAMS: $(fuzz_PROGRAMS) @$(NORMAL_INSTALL) @list='$(fuzz_PROGRAMS)'; test -n "$(fuzzdir)" || list=; \ if test -n "$$list"; then \ echo " $(MKDIR_P) '$(DESTDIR)$(fuzzdir)'"; \ $(MKDIR_P) "$(DESTDIR)$(fuzzdir)" || exit 1; \ fi; \ for p in $$list; do echo "$$p $$p"; done | \ sed 's/$(EXEEXT)$$//' | \ while read p p1; do if test -f $$p \ || test -f $$p1 \ ; then echo "$$p"; echo "$$p"; else :; fi; \ done | \ sed -e 'p;s,.*/,,;n;h' \ -e 's|.*|.|' \ -e 'p;x;s,.*/,,;s/$(EXEEXT)$$//;$(transform);s/$$/$(EXEEXT)/' | \ sed 'N;N;N;s,\n, ,g' | \ $(AWK) 'BEGIN { files["."] = ""; dirs["."] = 1 } \ { d=$$3; if (dirs[d] != 1) { print "d", d; dirs[d] = 1 } \ if ($$2 == $$4) files[d] = files[d] " " $$1; \ else { print "f", $$3 "/" $$4, $$1; } } \ END { for (d in files) print "f", d, files[d] }' | \ while read type dir files; do \ if test "$$dir" = .; then dir=; else dir=/$$dir; fi; \ test -z "$$files" || { \ echo " $(INSTALL_PROGRAM_ENV) $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL_PROGRAM) $$files '$(DESTDIR)$(fuzzdir)$$dir'"; \ $(INSTALL_PROGRAM_ENV) $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL_PROGRAM) $$files "$(DESTDIR)$(fuzzdir)$$dir" || exit $$?; \ } \ ; done uninstall-fuzzPROGRAMS: @$(NORMAL_UNINSTALL) @list='$(fuzz_PROGRAMS)'; test -n "$(fuzzdir)" || list=; \ files=`for p in $$list; do echo "$$p"; done | \ sed -e 'h;s,^.*/,,;s/$(EXEEXT)$$//;$(transform)' \ -e 's/$$/$(EXEEXT)/' \ `; \ test -n "$$list" || exit 0; \ echo " ( cd '$(DESTDIR)$(fuzzdir)' && rm -f" $$files ")"; \ cd "$(DESTDIR)$(fuzzdir)" && rm -f $$files clean-fuzzPROGRAMS: @list='$(fuzz_PROGRAMS)'; test -n "$$list" || exit 0; \ echo " rm -f" $$list; \ rm -f $$list || exit $$?; \ test -n "$(EXEEXT)" || exit 0; \ list=`for p in $$list; do echo "$$p"; done | sed 's/$(EXEEXT)$$//'`; \ echo " rm -f" $$list; \ rm -f $$list install-libLTLIBRARIES: $(lib_LTLIBRARIES) @$(NORMAL_INSTALL) @list='$(lib_LTLIBRARIES)'; test -n "$(libdir)" || list=; \ list2=; for p in $$list; do \ if test -f $$p; then \ list2="$$list2 $$p"; \ else :; fi; \ done; \ test -z "$$list2" || { \ echo " $(MKDIR_P) '$(DESTDIR)$(libdir)'"; \ $(MKDIR_P) "$(DESTDIR)$(libdir)" || exit 1; \ echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 '$(DESTDIR)$(libdir)'"; \ $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 "$(DESTDIR)$(libdir)"; \ } uninstall-libLTLIBRARIES: @$(NORMAL_UNINSTALL) @list='$(lib_LTLIBRARIES)'; test -n "$(libdir)" || list=; \ for p in $$list; do \ $(am__strip_dir) \ echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f '$(DESTDIR)$(libdir)/$$f'"; \ $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f "$(DESTDIR)$(libdir)/$$f"; \ done clean-libLTLIBRARIES: -test -z "$(lib_LTLIBRARIES)" || rm -f $(lib_LTLIBRARIES) @list='$(lib_LTLIBRARIES)'; \ locs=`for p in $$list; do echo $$p; done | \ sed 's|^[^/]*$$|.|; s|/[^/]*$$||; s|$$|/so_locations|' | \ sort -u`; \ test -z "$$locs" || { \ echo rm -f $${locs}; \ rm -f $${locs}; \ } clean-noinstLTLIBRARIES: -test -z "$(noinst_LTLIBRARIES)" || rm -f $(noinst_LTLIBRARIES) @list='$(noinst_LTLIBRARIES)'; \ locs=`for p in $$list; do echo $$p; done | \ sed 's|^[^/]*$$|.|; s|/[^/]*$$||; s|$$|/so_locations|' | \ sort -u`; \ test -z "$$locs" || { \ echo rm -f $${locs}; \ rm -f $${locs}; \ } install-p11libLTLIBRARIES: $(p11lib_LTLIBRARIES) @$(NORMAL_INSTALL) @list='$(p11lib_LTLIBRARIES)'; test -n "$(p11libdir)" || list=; \ list2=; for p in $$list; do \ if test -f $$p; then \ list2="$$list2 $$p"; \ else :; fi; \ done; \ test -z "$$list2" || { \ echo " $(MKDIR_P) '$(DESTDIR)$(p11libdir)'"; \ $(MKDIR_P) "$(DESTDIR)$(p11libdir)" || exit 1; \ echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 '$(DESTDIR)$(p11libdir)'"; \ $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 "$(DESTDIR)$(p11libdir)"; \ } uninstall-p11libLTLIBRARIES: @$(NORMAL_UNINSTALL) @list='$(p11lib_LTLIBRARIES)'; test -n "$(p11libdir)" || list=; \ for p in $$list; do \ $(am__strip_dir) \ echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f '$(DESTDIR)$(p11libdir)/$$f'"; \ $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f "$(DESTDIR)$(p11libdir)/$$f"; \ done clean-p11libLTLIBRARIES: -test -z "$(p11lib_LTLIBRARIES)" || rm -f $(p11lib_LTLIBRARIES) @list='$(p11lib_LTLIBRARIES)'; \ locs=`for p in $$list; do echo $$p; done | \ sed 's|^[^/]*$$|.|; s|/[^/]*$$||; s|$$|/so_locations|' | \ sort -u`; \ test -z "$$locs" || { \ echo rm -f $${locs}; \ rm -f $${locs}; \ } src/$(am__dirstamp): @$(MKDIR_P) src @: > src/$(am__dirstamp) src/$(DEPDIR)/$(am__dirstamp): @$(MKDIR_P) src/$(DEPDIR) @: > src/$(DEPDIR)/$(am__dirstamp) src/pkcs11.lo: src/$(am__dirstamp) src/$(DEPDIR)/$(am__dirstamp) src/lib/$(am__dirstamp): @$(MKDIR_P) src/lib @: > src/lib/$(am__dirstamp) src/lib/$(DEPDIR)/$(am__dirstamp): @$(MKDIR_P) src/lib/$(DEPDIR) @: > src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/attrs.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/backend.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/backend_esysdb.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/backend_fapi.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/db.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/derive.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/digest.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/emitter.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/encrypt.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/general.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/key.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/mech.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/mutex.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/object.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/parser.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/random.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/session.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/session_ctx.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/session_table.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/sign.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/slot.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/ssl_util.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/token.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/tpm.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/twist.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/typed_memory.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/lib/utils.lo: src/lib/$(am__dirstamp) \ src/lib/$(DEPDIR)/$(am__dirstamp) src/libtpm2_pkcs11.la: $(src_libtpm2_pkcs11_la_OBJECTS) $(src_libtpm2_pkcs11_la_DEPENDENCIES) $(EXTRA_src_libtpm2_pkcs11_la_DEPENDENCIES) src/$(am__dirstamp) $(AM_V_CCLD)$(src_libtpm2_pkcs11_la_LINK) $(am_src_libtpm2_pkcs11_la_rpath) $(src_libtpm2_pkcs11_la_OBJECTS) $(src_libtpm2_pkcs11_la_LIBADD) $(LIBS) src/libtpm2_test_internal.la: $(src_libtpm2_test_internal_la_OBJECTS) $(src_libtpm2_test_internal_la_DEPENDENCIES) $(EXTRA_src_libtpm2_test_internal_la_DEPENDENCIES) src/$(am__dirstamp) $(AM_V_CCLD)$(LINK) $(src_libtpm2_test_internal_la_OBJECTS) $(src_libtpm2_test_internal_la_LIBADD) $(LIBS) src/libtpm2_test_pkcs11.la: $(src_libtpm2_test_pkcs11_la_OBJECTS) $(src_libtpm2_test_pkcs11_la_DEPENDENCIES) $(EXTRA_src_libtpm2_test_pkcs11_la_DEPENDENCIES) src/$(am__dirstamp) $(AM_V_CCLD)$(LINK) $(src_libtpm2_test_pkcs11_la_OBJECTS) $(src_libtpm2_test_pkcs11_la_LIBADD) $(LIBS) test/fuzz/$(am__dirstamp): @$(MKDIR_P) test/fuzz @: > test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp): @$(MKDIR_P) test/fuzz/$(DEPDIR) @: > test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/db-take-lock.fuzz$(EXEEXT): $(test_fuzz_db_take_lock_fuzz_OBJECTS) $(test_fuzz_db_take_lock_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_db_take_lock_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/db-take-lock.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_db_take_lock_fuzz_LINK) $(test_fuzz_db_take_lock_fuzz_OBJECTS) $(test_fuzz_db_take_lock_fuzz_LDADD) $(LIBS) test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/db-token-label.fuzz32$(EXEEXT): $(test_fuzz_db_token_label_fuzz32_OBJECTS) $(test_fuzz_db_token_label_fuzz32_DEPENDENCIES) $(EXTRA_test_fuzz_db_token_label_fuzz32_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/db-token-label.fuzz32$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_db_token_label_fuzz32_LINK) $(test_fuzz_db_token_label_fuzz32_OBJECTS) $(test_fuzz_db_token_label_fuzz32_LDADD) $(LIBS) test/fuzz/init_pin_fuzz-init-pin.fuzz.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/init-pin.fuzz$(EXEEXT): $(test_fuzz_init_pin_fuzz_OBJECTS) $(test_fuzz_init_pin_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_init_pin_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/init-pin.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_init_pin_fuzz_LINK) $(test_fuzz_init_pin_fuzz_OBJECTS) $(test_fuzz_init_pin_fuzz_LDADD) $(LIBS) test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/init-token-label.fuzz32$(EXEEXT): $(test_fuzz_init_token_label_fuzz32_OBJECTS) $(test_fuzz_init_token_label_fuzz32_DEPENDENCIES) $(EXTRA_test_fuzz_init_token_label_fuzz32_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/init-token-label.fuzz32$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_init_token_label_fuzz32_LINK) $(test_fuzz_init_token_label_fuzz32_OBJECTS) $(test_fuzz_init_token_label_fuzz32_LDADD) $(LIBS) test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/init-token-sopin.fuzz$(EXEEXT): $(test_fuzz_init_token_sopin_fuzz_OBJECTS) $(test_fuzz_init_token_sopin_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_init_token_sopin_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/init-token-sopin.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_init_token_sopin_fuzz_LINK) $(test_fuzz_init_token_sopin_fuzz_OBJECTS) $(test_fuzz_init_token_sopin_fuzz_LDADD) $(LIBS) test/fuzz/set_pin_fuzz-set-pin.fuzz.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/set-pin.fuzz$(EXEEXT): $(test_fuzz_set_pin_fuzz_OBJECTS) $(test_fuzz_set_pin_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_set_pin_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/set-pin.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_set_pin_fuzz_LINK) $(test_fuzz_set_pin_fuzz_OBJECTS) $(test_fuzz_set_pin_fuzz_LDADD) $(LIBS) test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/utils-ctx-unwrap-objauth.fuzz$(EXEEXT): $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_OBJECTS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_utils_ctx_unwrap_objauth_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/utils-ctx-unwrap-objauth.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_utils_ctx_unwrap_objauth_fuzz_LINK) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_OBJECTS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_LDADD) $(LIBS) test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.$(OBJEXT): \ test/fuzz/$(am__dirstamp) test/fuzz/$(DEPDIR)/$(am__dirstamp) test/fuzz/yaml-parser.fuzz$(EXEEXT): $(test_fuzz_yaml_parser_fuzz_OBJECTS) $(test_fuzz_yaml_parser_fuzz_DEPENDENCIES) $(EXTRA_test_fuzz_yaml_parser_fuzz_DEPENDENCIES) test/fuzz/$(am__dirstamp) @rm -f test/fuzz/yaml-parser.fuzz$(EXEEXT) $(AM_V_CCLD)$(test_fuzz_yaml_parser_fuzz_LINK) $(test_fuzz_yaml_parser_fuzz_OBJECTS) $(test_fuzz_yaml_parser_fuzz_LDADD) $(LIBS) test/integration/$(am__dirstamp): @$(MKDIR_P) test/integration @: > test/integration/$(am__dirstamp) test/integration/$(DEPDIR)/$(am__dirstamp): @$(MKDIR_P) test/integration/$(DEPDIR) @: > test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_crypt_int-pkcs-crypt.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_crypt_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-crypt.int$(EXEEXT): $(test_integration_pkcs_crypt_int_OBJECTS) $(test_integration_pkcs_crypt_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_crypt_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-crypt.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_crypt_int_LINK) $(test_integration_pkcs_crypt_int_OBJECTS) $(test_integration_pkcs_crypt_int_LDADD) $(LIBS) test/integration/pkcs_ecdh_int-pkcs-ecdh.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_ecdh_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-ecdh.int$(EXEEXT): $(test_integration_pkcs_ecdh_int_OBJECTS) $(test_integration_pkcs_ecdh_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_ecdh_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-ecdh.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_ecdh_int_LINK) $(test_integration_pkcs_ecdh_int_OBJECTS) $(test_integration_pkcs_ecdh_int_LDADD) $(LIBS) test/integration/pkcs_find_objects_int-pkcs-find-objects.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_find_objects_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-find-objects.int$(EXEEXT): $(test_integration_pkcs_find_objects_int_OBJECTS) $(test_integration_pkcs_find_objects_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_find_objects_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-find-objects.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_find_objects_int_LINK) $(test_integration_pkcs_find_objects_int_OBJECTS) $(test_integration_pkcs_find_objects_int_LDADD) $(LIBS) test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_get_attribute_value_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-get-attribute-value.int$(EXEEXT): $(test_integration_pkcs_get_attribute_value_int_OBJECTS) $(test_integration_pkcs_get_attribute_value_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_get_attribute_value_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-get-attribute-value.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_get_attribute_value_int_LINK) $(test_integration_pkcs_get_attribute_value_int_OBJECTS) $(test_integration_pkcs_get_attribute_value_int_LDADD) $(LIBS) test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_get_mechanism_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-get-mechanism.int$(EXEEXT): $(test_integration_pkcs_get_mechanism_int_OBJECTS) $(test_integration_pkcs_get_mechanism_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_get_mechanism_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-get-mechanism.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_get_mechanism_int_LINK) $(test_integration_pkcs_get_mechanism_int_OBJECTS) $(test_integration_pkcs_get_mechanism_int_LDADD) $(LIBS) test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_initialize_finalize_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-initialize-finalize.int$(EXEEXT): $(test_integration_pkcs_initialize_finalize_int_OBJECTS) $(test_integration_pkcs_initialize_finalize_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_initialize_finalize_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-initialize-finalize.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_initialize_finalize_int_LINK) $(test_integration_pkcs_initialize_finalize_int_OBJECTS) $(test_integration_pkcs_initialize_finalize_int_LDADD) $(LIBS) test/integration/pkcs_keygen_int-pkcs-keygen.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_keygen_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-keygen.int$(EXEEXT): $(test_integration_pkcs_keygen_int_OBJECTS) $(test_integration_pkcs_keygen_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_keygen_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-keygen.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_keygen_int_LINK) $(test_integration_pkcs_keygen_int_OBJECTS) $(test_integration_pkcs_keygen_int_LDADD) $(LIBS) test/integration/pkcs_lockout_int-pkcs-lockout.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_lockout_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-lockout.int$(EXEEXT): $(test_integration_pkcs_lockout_int_OBJECTS) $(test_integration_pkcs_lockout_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_lockout_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-lockout.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_lockout_int_LINK) $(test_integration_pkcs_lockout_int_OBJECTS) $(test_integration_pkcs_lockout_int_LDADD) $(LIBS) test/integration/pkcs_login_logout_int-pkcs-login-logout.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_login_logout_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-login-logout.int$(EXEEXT): $(test_integration_pkcs_login_logout_int_OBJECTS) $(test_integration_pkcs_login_logout_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_login_logout_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-login-logout.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_login_logout_int_LINK) $(test_integration_pkcs_login_logout_int_OBJECTS) $(test_integration_pkcs_login_logout_int_LDADD) $(LIBS) test/integration/pkcs_misc_int-pkcs-misc.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_misc_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-misc.int$(EXEEXT): $(test_integration_pkcs_misc_int_OBJECTS) $(test_integration_pkcs_misc_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_misc_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-misc.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_misc_int_LINK) $(test_integration_pkcs_misc_int_OBJECTS) $(test_integration_pkcs_misc_int_LDADD) $(LIBS) test/integration/pkcs_session_state_int-pkcs-session-state.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_session_state_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-session-state.int$(EXEEXT): $(test_integration_pkcs_session_state_int_OBJECTS) $(test_integration_pkcs_session_state_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_session_state_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-session-state.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_session_state_int_LINK) $(test_integration_pkcs_session_state_int_OBJECTS) $(test_integration_pkcs_session_state_int_LDADD) $(LIBS) test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs_sign_verify_int-test.$(OBJEXT): \ test/integration/$(am__dirstamp) \ test/integration/$(DEPDIR)/$(am__dirstamp) test/integration/pkcs-sign-verify.int$(EXEEXT): $(test_integration_pkcs_sign_verify_int_OBJECTS) $(test_integration_pkcs_sign_verify_int_DEPENDENCIES) $(EXTRA_test_integration_pkcs_sign_verify_int_DEPENDENCIES) test/integration/$(am__dirstamp) @rm -f test/integration/pkcs-sign-verify.int$(EXEEXT) $(AM_V_CCLD)$(test_integration_pkcs_sign_verify_int_LINK) $(test_integration_pkcs_sign_verify_int_OBJECTS) $(test_integration_pkcs_sign_verify_int_LDADD) $(LIBS) test/unit/$(am__dirstamp): @$(MKDIR_P) test/unit @: > test/unit/$(am__dirstamp) test/unit/$(DEPDIR)/$(am__dirstamp): @$(MKDIR_P) test/unit/$(DEPDIR) @: > test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_attr-test_attr.$(OBJEXT): test/unit/$(am__dirstamp) \ test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_attr$(EXEEXT): $(test_unit_test_attr_OBJECTS) $(test_unit_test_attr_DEPENDENCIES) $(EXTRA_test_unit_test_attr_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_attr$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_attr_LINK) $(test_unit_test_attr_OBJECTS) $(test_unit_test_attr_LDADD) $(LIBS) test/unit/test_db-test_db.$(OBJEXT): test/unit/$(am__dirstamp) \ test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_db$(EXEEXT): $(test_unit_test_db_OBJECTS) $(test_unit_test_db_DEPENDENCIES) $(EXTRA_test_unit_test_db_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_db$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_db_LINK) $(test_unit_test_db_OBJECTS) $(test_unit_test_db_LDADD) $(LIBS) test/unit/test_log-test_log.$(OBJEXT): test/unit/$(am__dirstamp) \ test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_log$(EXEEXT): $(test_unit_test_log_OBJECTS) $(test_unit_test_log_DEPENDENCIES) $(EXTRA_test_unit_test_log_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_log$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_log_LINK) $(test_unit_test_log_OBJECTS) $(test_unit_test_log_LDADD) $(LIBS) test/unit/test_parser-test_parser.$(OBJEXT): \ test/unit/$(am__dirstamp) test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_parser$(EXEEXT): $(test_unit_test_parser_OBJECTS) $(test_unit_test_parser_DEPENDENCIES) $(EXTRA_test_unit_test_parser_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_parser$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_parser_LINK) $(test_unit_test_parser_OBJECTS) $(test_unit_test_parser_LDADD) $(LIBS) test/unit/test_twist-test_twist.$(OBJEXT): test/unit/$(am__dirstamp) \ test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_twist$(EXEEXT): $(test_unit_test_twist_OBJECTS) $(test_unit_test_twist_DEPENDENCIES) $(EXTRA_test_unit_test_twist_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_twist$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_twist_LINK) $(test_unit_test_twist_OBJECTS) $(test_unit_test_twist_LDADD) $(LIBS) test/unit/test_utils-test_utils.$(OBJEXT): test/unit/$(am__dirstamp) \ test/unit/$(DEPDIR)/$(am__dirstamp) test/unit/test_utils$(EXEEXT): $(test_unit_test_utils_OBJECTS) $(test_unit_test_utils_DEPENDENCIES) $(EXTRA_test_unit_test_utils_DEPENDENCIES) test/unit/$(am__dirstamp) @rm -f test/unit/test_utils$(EXEEXT) $(AM_V_CCLD)$(test_unit_test_utils_LINK) $(test_unit_test_utils_OBJECTS) $(test_unit_test_utils_LDADD) $(LIBS) mostlyclean-compile: -rm -f *.$(OBJEXT) -rm -f src/*.$(OBJEXT) -rm -f src/*.lo -rm -f src/lib/*.$(OBJEXT) -rm -f src/lib/*.lo -rm -f test/fuzz/*.$(OBJEXT) -rm -f test/integration/*.$(OBJEXT) -rm -f test/unit/*.$(OBJEXT) distclean-compile: -rm -f *.tab.c @AMDEP_TRUE@@am__include@ @am__quote@src/$(DEPDIR)/pkcs11.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/attrs.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/backend.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/backend_esysdb.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/backend_fapi.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/db.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/derive.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/digest.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/emitter.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/encrypt.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/general.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/key.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/mech.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/mutex.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/object.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/parser.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/random.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/session.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/session_ctx.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/session_table.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/sign.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/slot.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/ssl_util.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/token.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/tpm.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/twist.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/typed_memory.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@src/lib/$(DEPDIR)/utils.Plo@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/db_take_lock_fuzz-db-take-lock.fuzz.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_ecdh_int-pkcs-ecdh.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_ecdh_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_misc_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_attr-test_attr.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_db-test_db.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_log-test_log.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_parser-test_parser.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_twist-test_twist.Po@am__quote@ # am--include-marker @AMDEP_TRUE@@am__include@ @am__quote@test/unit/$(DEPDIR)/test_utils-test_utils.Po@am__quote@ # am--include-marker $(am__depfiles_remade): @$(MKDIR_P) $(@D) @echo '# dummy' >$@-t && $(am__mv) $@-t $@ am--depfiles: $(am__depfiles_remade) .c.o: @am__fastdepCC_TRUE@ $(AM_V_CC)depbase=`echo $@ | sed 's|[^/]*$$|$(DEPDIR)/&|;s|\.o$$||'`;\ @am__fastdepCC_TRUE@ $(COMPILE) -MT $@ -MD -MP -MF $$depbase.Tpo -c -o $@ $< &&\ @am__fastdepCC_TRUE@ $(am__mv) $$depbase.Tpo $$depbase.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(COMPILE) -c -o $@ $< .c.obj: @am__fastdepCC_TRUE@ $(AM_V_CC)depbase=`echo $@ | sed 's|[^/]*$$|$(DEPDIR)/&|;s|\.obj$$||'`;\ @am__fastdepCC_TRUE@ $(COMPILE) -MT $@ -MD -MP -MF $$depbase.Tpo -c -o $@ `$(CYGPATH_W) '$<'` &&\ @am__fastdepCC_TRUE@ $(am__mv) $$depbase.Tpo $$depbase.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(COMPILE) -c -o $@ `$(CYGPATH_W) '$<'` .c.lo: @am__fastdepCC_TRUE@ $(AM_V_CC)depbase=`echo $@ | sed 's|[^/]*$$|$(DEPDIR)/&|;s|\.lo$$||'`;\ @am__fastdepCC_TRUE@ $(LTCOMPILE) -MT $@ -MD -MP -MF $$depbase.Tpo -c -o $@ $< &&\ @am__fastdepCC_TRUE@ $(am__mv) $$depbase.Tpo $$depbase.Plo @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='$<' object='$@' libtool=yes @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(LTCOMPILE) -c -o $@ $< test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.o: test/fuzz/db-take-lock.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_take_lock_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.o -MD -MP -MF test/fuzz/$(DEPDIR)/db_take_lock_fuzz-db-take-lock.fuzz.Tpo -c -o test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.o `test -f 'test/fuzz/db-take-lock.fuzz.c' || echo '$(srcdir)/'`test/fuzz/db-take-lock.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/db_take_lock_fuzz-db-take-lock.fuzz.Tpo test/fuzz/$(DEPDIR)/db_take_lock_fuzz-db-take-lock.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/db-take-lock.fuzz.c' object='test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_take_lock_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.o `test -f 'test/fuzz/db-take-lock.fuzz.c' || echo '$(srcdir)/'`test/fuzz/db-take-lock.fuzz.c test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.obj: test/fuzz/db-take-lock.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_take_lock_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.obj -MD -MP -MF test/fuzz/$(DEPDIR)/db_take_lock_fuzz-db-take-lock.fuzz.Tpo -c -o test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.obj `if test -f 'test/fuzz/db-take-lock.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/db-take-lock.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/db-take-lock.fuzz.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/db_take_lock_fuzz-db-take-lock.fuzz.Tpo test/fuzz/$(DEPDIR)/db_take_lock_fuzz-db-take-lock.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/db-take-lock.fuzz.c' object='test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_take_lock_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/db_take_lock_fuzz-db-take-lock.fuzz.obj `if test -f 'test/fuzz/db-take-lock.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/db-take-lock.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/db-take-lock.fuzz.c'; fi` test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.o: test/fuzz/db-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_token_label_fuzz32_CFLAGS) $(CFLAGS) -MT test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.o -MD -MP -MF test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Tpo -c -o test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.o `test -f 'test/fuzz/db-token-label.fuzz32.c' || echo '$(srcdir)/'`test/fuzz/db-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Tpo test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/db-token-label.fuzz32.c' object='test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_token_label_fuzz32_CFLAGS) $(CFLAGS) -c -o test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.o `test -f 'test/fuzz/db-token-label.fuzz32.c' || echo '$(srcdir)/'`test/fuzz/db-token-label.fuzz32.c test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.obj: test/fuzz/db-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_token_label_fuzz32_CFLAGS) $(CFLAGS) -MT test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.obj -MD -MP -MF test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Tpo -c -o test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.obj `if test -f 'test/fuzz/db-token-label.fuzz32.c'; then $(CYGPATH_W) 'test/fuzz/db-token-label.fuzz32.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/db-token-label.fuzz32.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Tpo test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/db-token-label.fuzz32.c' object='test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_db_token_label_fuzz32_CFLAGS) $(CFLAGS) -c -o test/fuzz/db_token_label_fuzz32-db-token-label.fuzz32.obj `if test -f 'test/fuzz/db-token-label.fuzz32.c'; then $(CYGPATH_W) 'test/fuzz/db-token-label.fuzz32.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/db-token-label.fuzz32.c'; fi` test/fuzz/init_pin_fuzz-init-pin.fuzz.o: test/fuzz/init-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_pin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/init_pin_fuzz-init-pin.fuzz.o -MD -MP -MF test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Tpo -c -o test/fuzz/init_pin_fuzz-init-pin.fuzz.o `test -f 'test/fuzz/init-pin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/init-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Tpo test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-pin.fuzz.c' object='test/fuzz/init_pin_fuzz-init-pin.fuzz.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_pin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_pin_fuzz-init-pin.fuzz.o `test -f 'test/fuzz/init-pin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/init-pin.fuzz.c test/fuzz/init_pin_fuzz-init-pin.fuzz.obj: test/fuzz/init-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_pin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/init_pin_fuzz-init-pin.fuzz.obj -MD -MP -MF test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Tpo -c -o test/fuzz/init_pin_fuzz-init-pin.fuzz.obj `if test -f 'test/fuzz/init-pin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/init-pin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-pin.fuzz.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Tpo test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-pin.fuzz.c' object='test/fuzz/init_pin_fuzz-init-pin.fuzz.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_pin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_pin_fuzz-init-pin.fuzz.obj `if test -f 'test/fuzz/init-pin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/init-pin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-pin.fuzz.c'; fi` test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.o: test/fuzz/init-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_label_fuzz32_CFLAGS) $(CFLAGS) -MT test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.o -MD -MP -MF test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Tpo -c -o test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.o `test -f 'test/fuzz/init-token-label.fuzz32.c' || echo '$(srcdir)/'`test/fuzz/init-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Tpo test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-token-label.fuzz32.c' object='test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_label_fuzz32_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.o `test -f 'test/fuzz/init-token-label.fuzz32.c' || echo '$(srcdir)/'`test/fuzz/init-token-label.fuzz32.c test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.obj: test/fuzz/init-token-label.fuzz32.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_label_fuzz32_CFLAGS) $(CFLAGS) -MT test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.obj -MD -MP -MF test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Tpo -c -o test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.obj `if test -f 'test/fuzz/init-token-label.fuzz32.c'; then $(CYGPATH_W) 'test/fuzz/init-token-label.fuzz32.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-token-label.fuzz32.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Tpo test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-token-label.fuzz32.c' object='test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_label_fuzz32_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_token_label_fuzz32-init-token-label.fuzz32.obj `if test -f 'test/fuzz/init-token-label.fuzz32.c'; then $(CYGPATH_W) 'test/fuzz/init-token-label.fuzz32.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-token-label.fuzz32.c'; fi` test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.o: test/fuzz/init-token-sopin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_sopin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.o -MD -MP -MF test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Tpo -c -o test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.o `test -f 'test/fuzz/init-token-sopin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/init-token-sopin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Tpo test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-token-sopin.fuzz.c' object='test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_sopin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.o `test -f 'test/fuzz/init-token-sopin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/init-token-sopin.fuzz.c test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.obj: test/fuzz/init-token-sopin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_sopin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.obj -MD -MP -MF test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Tpo -c -o test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.obj `if test -f 'test/fuzz/init-token-sopin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/init-token-sopin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-token-sopin.fuzz.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Tpo test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/init-token-sopin.fuzz.c' object='test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_init_token_sopin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/init_token_sopin_fuzz-init-token-sopin.fuzz.obj `if test -f 'test/fuzz/init-token-sopin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/init-token-sopin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/init-token-sopin.fuzz.c'; fi` test/fuzz/set_pin_fuzz-set-pin.fuzz.o: test/fuzz/set-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_set_pin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/set_pin_fuzz-set-pin.fuzz.o -MD -MP -MF test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Tpo -c -o test/fuzz/set_pin_fuzz-set-pin.fuzz.o `test -f 'test/fuzz/set-pin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/set-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Tpo test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/set-pin.fuzz.c' object='test/fuzz/set_pin_fuzz-set-pin.fuzz.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_set_pin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/set_pin_fuzz-set-pin.fuzz.o `test -f 'test/fuzz/set-pin.fuzz.c' || echo '$(srcdir)/'`test/fuzz/set-pin.fuzz.c test/fuzz/set_pin_fuzz-set-pin.fuzz.obj: test/fuzz/set-pin.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_set_pin_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/set_pin_fuzz-set-pin.fuzz.obj -MD -MP -MF test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Tpo -c -o test/fuzz/set_pin_fuzz-set-pin.fuzz.obj `if test -f 'test/fuzz/set-pin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/set-pin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/set-pin.fuzz.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Tpo test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/set-pin.fuzz.c' object='test/fuzz/set_pin_fuzz-set-pin.fuzz.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_set_pin_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/set_pin_fuzz-set-pin.fuzz.obj `if test -f 'test/fuzz/set-pin.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/set-pin.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/set-pin.fuzz.c'; fi` test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.o: test/fuzz/utils-ctx-unwrap-objauth.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.o -MD -MP -MF test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Tpo -c -o test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.o `test -f 'test/fuzz/utils-ctx-unwrap-objauth.c' || echo '$(srcdir)/'`test/fuzz/utils-ctx-unwrap-objauth.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Tpo test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/utils-ctx-unwrap-objauth.c' object='test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.o `test -f 'test/fuzz/utils-ctx-unwrap-objauth.c' || echo '$(srcdir)/'`test/fuzz/utils-ctx-unwrap-objauth.c test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.obj: test/fuzz/utils-ctx-unwrap-objauth.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.obj -MD -MP -MF test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Tpo -c -o test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.obj `if test -f 'test/fuzz/utils-ctx-unwrap-objauth.c'; then $(CYGPATH_W) 'test/fuzz/utils-ctx-unwrap-objauth.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/utils-ctx-unwrap-objauth.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Tpo test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/utils-ctx-unwrap-objauth.c' object='test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_utils_ctx_unwrap_objauth_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.obj `if test -f 'test/fuzz/utils-ctx-unwrap-objauth.c'; then $(CYGPATH_W) 'test/fuzz/utils-ctx-unwrap-objauth.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/utils-ctx-unwrap-objauth.c'; fi` test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.o: test/fuzz/yaml-parser.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_yaml_parser_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.o -MD -MP -MF test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Tpo -c -o test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.o `test -f 'test/fuzz/yaml-parser.fuzz.c' || echo '$(srcdir)/'`test/fuzz/yaml-parser.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Tpo test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/yaml-parser.fuzz.c' object='test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_yaml_parser_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.o `test -f 'test/fuzz/yaml-parser.fuzz.c' || echo '$(srcdir)/'`test/fuzz/yaml-parser.fuzz.c test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.obj: test/fuzz/yaml-parser.fuzz.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_yaml_parser_fuzz_CFLAGS) $(CFLAGS) -MT test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.obj -MD -MP -MF test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Tpo -c -o test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.obj `if test -f 'test/fuzz/yaml-parser.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/yaml-parser.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/yaml-parser.fuzz.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Tpo test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/fuzz/yaml-parser.fuzz.c' object='test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_fuzz_yaml_parser_fuzz_CFLAGS) $(CFLAGS) -c -o test/fuzz/yaml_parser_fuzz-yaml-parser.fuzz.obj `if test -f 'test/fuzz/yaml-parser.fuzz.c'; then $(CYGPATH_W) 'test/fuzz/yaml-parser.fuzz.c'; else $(CYGPATH_W) '$(srcdir)/test/fuzz/yaml-parser.fuzz.c'; fi` test/integration/pkcs_crypt_int-pkcs-crypt.int.o: test/integration/pkcs-crypt.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_crypt_int-pkcs-crypt.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Tpo -c -o test/integration/pkcs_crypt_int-pkcs-crypt.int.o `test -f 'test/integration/pkcs-crypt.int.c' || echo '$(srcdir)/'`test/integration/pkcs-crypt.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Tpo test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-crypt.int.c' object='test/integration/pkcs_crypt_int-pkcs-crypt.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_crypt_int-pkcs-crypt.int.o `test -f 'test/integration/pkcs-crypt.int.c' || echo '$(srcdir)/'`test/integration/pkcs-crypt.int.c test/integration/pkcs_crypt_int-pkcs-crypt.int.obj: test/integration/pkcs-crypt.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_crypt_int-pkcs-crypt.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Tpo -c -o test/integration/pkcs_crypt_int-pkcs-crypt.int.obj `if test -f 'test/integration/pkcs-crypt.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-crypt.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-crypt.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Tpo test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-crypt.int.c' object='test/integration/pkcs_crypt_int-pkcs-crypt.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_crypt_int-pkcs-crypt.int.obj `if test -f 'test/integration/pkcs-crypt.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-crypt.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-crypt.int.c'; fi` test/integration/pkcs_crypt_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_crypt_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_crypt_int-test.Tpo -c -o test/integration/pkcs_crypt_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_crypt_int-test.Tpo test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_crypt_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_crypt_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_crypt_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_crypt_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_crypt_int-test.Tpo -c -o test/integration/pkcs_crypt_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_crypt_int-test.Tpo test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_crypt_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_crypt_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_crypt_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_ecdh_int-pkcs-ecdh.int.o: test/integration/pkcs-ecdh.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_ecdh_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_ecdh_int-pkcs-ecdh.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_ecdh_int-pkcs-ecdh.int.Tpo -c -o test/integration/pkcs_ecdh_int-pkcs-ecdh.int.o `test -f 'test/integration/pkcs-ecdh.int.c' || echo '$(srcdir)/'`test/integration/pkcs-ecdh.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_ecdh_int-pkcs-ecdh.int.Tpo test/integration/$(DEPDIR)/pkcs_ecdh_int-pkcs-ecdh.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-ecdh.int.c' object='test/integration/pkcs_ecdh_int-pkcs-ecdh.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_ecdh_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_ecdh_int-pkcs-ecdh.int.o `test -f 'test/integration/pkcs-ecdh.int.c' || echo '$(srcdir)/'`test/integration/pkcs-ecdh.int.c test/integration/pkcs_ecdh_int-pkcs-ecdh.int.obj: test/integration/pkcs-ecdh.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_ecdh_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_ecdh_int-pkcs-ecdh.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_ecdh_int-pkcs-ecdh.int.Tpo -c -o test/integration/pkcs_ecdh_int-pkcs-ecdh.int.obj `if test -f 'test/integration/pkcs-ecdh.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-ecdh.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-ecdh.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_ecdh_int-pkcs-ecdh.int.Tpo test/integration/$(DEPDIR)/pkcs_ecdh_int-pkcs-ecdh.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-ecdh.int.c' object='test/integration/pkcs_ecdh_int-pkcs-ecdh.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_ecdh_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_ecdh_int-pkcs-ecdh.int.obj `if test -f 'test/integration/pkcs-ecdh.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-ecdh.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-ecdh.int.c'; fi` test/integration/pkcs_ecdh_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_ecdh_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_ecdh_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_ecdh_int-test.Tpo -c -o test/integration/pkcs_ecdh_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_ecdh_int-test.Tpo test/integration/$(DEPDIR)/pkcs_ecdh_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_ecdh_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_ecdh_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_ecdh_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_ecdh_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_ecdh_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_ecdh_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_ecdh_int-test.Tpo -c -o test/integration/pkcs_ecdh_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_ecdh_int-test.Tpo test/integration/$(DEPDIR)/pkcs_ecdh_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_ecdh_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_ecdh_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_ecdh_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_find_objects_int-pkcs-find-objects.int.o: test/integration/pkcs-find-objects.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_find_objects_int-pkcs-find-objects.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Tpo -c -o test/integration/pkcs_find_objects_int-pkcs-find-objects.int.o `test -f 'test/integration/pkcs-find-objects.int.c' || echo '$(srcdir)/'`test/integration/pkcs-find-objects.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Tpo test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-find-objects.int.c' object='test/integration/pkcs_find_objects_int-pkcs-find-objects.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_find_objects_int-pkcs-find-objects.int.o `test -f 'test/integration/pkcs-find-objects.int.c' || echo '$(srcdir)/'`test/integration/pkcs-find-objects.int.c test/integration/pkcs_find_objects_int-pkcs-find-objects.int.obj: test/integration/pkcs-find-objects.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_find_objects_int-pkcs-find-objects.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Tpo -c -o test/integration/pkcs_find_objects_int-pkcs-find-objects.int.obj `if test -f 'test/integration/pkcs-find-objects.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-find-objects.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-find-objects.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Tpo test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-find-objects.int.c' object='test/integration/pkcs_find_objects_int-pkcs-find-objects.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_find_objects_int-pkcs-find-objects.int.obj `if test -f 'test/integration/pkcs-find-objects.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-find-objects.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-find-objects.int.c'; fi` test/integration/pkcs_find_objects_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_find_objects_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Tpo -c -o test/integration/pkcs_find_objects_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Tpo test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_find_objects_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_find_objects_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_find_objects_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_find_objects_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Tpo -c -o test/integration/pkcs_find_objects_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Tpo test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_find_objects_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_find_objects_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_find_objects_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.o: test/integration/pkcs-get-attribute-value.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Tpo -c -o test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.o `test -f 'test/integration/pkcs-get-attribute-value.int.c' || echo '$(srcdir)/'`test/integration/pkcs-get-attribute-value.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Tpo test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-get-attribute-value.int.c' object='test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.o `test -f 'test/integration/pkcs-get-attribute-value.int.c' || echo '$(srcdir)/'`test/integration/pkcs-get-attribute-value.int.c test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.obj: test/integration/pkcs-get-attribute-value.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Tpo -c -o test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.obj `if test -f 'test/integration/pkcs-get-attribute-value.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-get-attribute-value.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-get-attribute-value.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Tpo test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-get-attribute-value.int.c' object='test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.obj `if test -f 'test/integration/pkcs-get-attribute-value.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-get-attribute-value.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-get-attribute-value.int.c'; fi` test/integration/pkcs_get_attribute_value_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_attribute_value_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Tpo -c -o test/integration/pkcs_get_attribute_value_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Tpo test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_get_attribute_value_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_attribute_value_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_get_attribute_value_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_attribute_value_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Tpo -c -o test/integration/pkcs_get_attribute_value_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Tpo test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_get_attribute_value_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_attribute_value_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_attribute_value_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.o: test/integration/pkcs-get-mechanism.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Tpo -c -o test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.o `test -f 'test/integration/pkcs-get-mechanism.int.c' || echo '$(srcdir)/'`test/integration/pkcs-get-mechanism.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Tpo test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-get-mechanism.int.c' object='test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.o `test -f 'test/integration/pkcs-get-mechanism.int.c' || echo '$(srcdir)/'`test/integration/pkcs-get-mechanism.int.c test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.obj: test/integration/pkcs-get-mechanism.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Tpo -c -o test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.obj `if test -f 'test/integration/pkcs-get-mechanism.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-get-mechanism.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-get-mechanism.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Tpo test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-get-mechanism.int.c' object='test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_mechanism_int-pkcs-get-mechanism.int.obj `if test -f 'test/integration/pkcs-get-mechanism.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-get-mechanism.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-get-mechanism.int.c'; fi` test/integration/pkcs_get_mechanism_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_mechanism_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Tpo -c -o test/integration/pkcs_get_mechanism_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Tpo test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_get_mechanism_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_mechanism_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_get_mechanism_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_get_mechanism_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Tpo -c -o test/integration/pkcs_get_mechanism_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Tpo test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_get_mechanism_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_get_mechanism_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_get_mechanism_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.o: test/integration/pkcs-initialize-finalize.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Tpo -c -o test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.o `test -f 'test/integration/pkcs-initialize-finalize.int.c' || echo '$(srcdir)/'`test/integration/pkcs-initialize-finalize.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Tpo test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-initialize-finalize.int.c' object='test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.o `test -f 'test/integration/pkcs-initialize-finalize.int.c' || echo '$(srcdir)/'`test/integration/pkcs-initialize-finalize.int.c test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.obj: test/integration/pkcs-initialize-finalize.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Tpo -c -o test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.obj `if test -f 'test/integration/pkcs-initialize-finalize.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-initialize-finalize.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-initialize-finalize.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Tpo test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-initialize-finalize.int.c' object='test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.obj `if test -f 'test/integration/pkcs-initialize-finalize.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-initialize-finalize.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-initialize-finalize.int.c'; fi` test/integration/pkcs_initialize_finalize_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_initialize_finalize_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Tpo -c -o test/integration/pkcs_initialize_finalize_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Tpo test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_initialize_finalize_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_initialize_finalize_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_initialize_finalize_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_initialize_finalize_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Tpo -c -o test/integration/pkcs_initialize_finalize_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Tpo test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_initialize_finalize_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_initialize_finalize_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_initialize_finalize_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_keygen_int-pkcs-keygen.int.o: test/integration/pkcs-keygen.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_keygen_int-pkcs-keygen.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Tpo -c -o test/integration/pkcs_keygen_int-pkcs-keygen.int.o `test -f 'test/integration/pkcs-keygen.int.c' || echo '$(srcdir)/'`test/integration/pkcs-keygen.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Tpo test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-keygen.int.c' object='test/integration/pkcs_keygen_int-pkcs-keygen.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_keygen_int-pkcs-keygen.int.o `test -f 'test/integration/pkcs-keygen.int.c' || echo '$(srcdir)/'`test/integration/pkcs-keygen.int.c test/integration/pkcs_keygen_int-pkcs-keygen.int.obj: test/integration/pkcs-keygen.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_keygen_int-pkcs-keygen.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Tpo -c -o test/integration/pkcs_keygen_int-pkcs-keygen.int.obj `if test -f 'test/integration/pkcs-keygen.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-keygen.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-keygen.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Tpo test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-keygen.int.c' object='test/integration/pkcs_keygen_int-pkcs-keygen.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_keygen_int-pkcs-keygen.int.obj `if test -f 'test/integration/pkcs-keygen.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-keygen.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-keygen.int.c'; fi` test/integration/pkcs_keygen_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_keygen_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_keygen_int-test.Tpo -c -o test/integration/pkcs_keygen_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_keygen_int-test.Tpo test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_keygen_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_keygen_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_keygen_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_keygen_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_keygen_int-test.Tpo -c -o test/integration/pkcs_keygen_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_keygen_int-test.Tpo test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_keygen_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_keygen_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_keygen_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_lockout_int-pkcs-lockout.int.o: test/integration/pkcs-lockout.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_lockout_int-pkcs-lockout.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Tpo -c -o test/integration/pkcs_lockout_int-pkcs-lockout.int.o `test -f 'test/integration/pkcs-lockout.int.c' || echo '$(srcdir)/'`test/integration/pkcs-lockout.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Tpo test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-lockout.int.c' object='test/integration/pkcs_lockout_int-pkcs-lockout.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_lockout_int-pkcs-lockout.int.o `test -f 'test/integration/pkcs-lockout.int.c' || echo '$(srcdir)/'`test/integration/pkcs-lockout.int.c test/integration/pkcs_lockout_int-pkcs-lockout.int.obj: test/integration/pkcs-lockout.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_lockout_int-pkcs-lockout.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Tpo -c -o test/integration/pkcs_lockout_int-pkcs-lockout.int.obj `if test -f 'test/integration/pkcs-lockout.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-lockout.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-lockout.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Tpo test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-lockout.int.c' object='test/integration/pkcs_lockout_int-pkcs-lockout.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_lockout_int-pkcs-lockout.int.obj `if test -f 'test/integration/pkcs-lockout.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-lockout.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-lockout.int.c'; fi` test/integration/pkcs_lockout_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_lockout_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_lockout_int-test.Tpo -c -o test/integration/pkcs_lockout_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_lockout_int-test.Tpo test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_lockout_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_lockout_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_lockout_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_lockout_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_lockout_int-test.Tpo -c -o test/integration/pkcs_lockout_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_lockout_int-test.Tpo test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_lockout_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_lockout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_lockout_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_login_logout_int-pkcs-login-logout.int.o: test/integration/pkcs-login-logout.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_login_logout_int-pkcs-login-logout.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Tpo -c -o test/integration/pkcs_login_logout_int-pkcs-login-logout.int.o `test -f 'test/integration/pkcs-login-logout.int.c' || echo '$(srcdir)/'`test/integration/pkcs-login-logout.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Tpo test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-login-logout.int.c' object='test/integration/pkcs_login_logout_int-pkcs-login-logout.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_login_logout_int-pkcs-login-logout.int.o `test -f 'test/integration/pkcs-login-logout.int.c' || echo '$(srcdir)/'`test/integration/pkcs-login-logout.int.c test/integration/pkcs_login_logout_int-pkcs-login-logout.int.obj: test/integration/pkcs-login-logout.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_login_logout_int-pkcs-login-logout.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Tpo -c -o test/integration/pkcs_login_logout_int-pkcs-login-logout.int.obj `if test -f 'test/integration/pkcs-login-logout.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-login-logout.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-login-logout.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Tpo test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-login-logout.int.c' object='test/integration/pkcs_login_logout_int-pkcs-login-logout.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_login_logout_int-pkcs-login-logout.int.obj `if test -f 'test/integration/pkcs-login-logout.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-login-logout.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-login-logout.int.c'; fi` test/integration/pkcs_login_logout_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_login_logout_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Tpo -c -o test/integration/pkcs_login_logout_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Tpo test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_login_logout_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_login_logout_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_login_logout_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_login_logout_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Tpo -c -o test/integration/pkcs_login_logout_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Tpo test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_login_logout_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_login_logout_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_login_logout_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_misc_int-pkcs-misc.int.o: test/integration/pkcs-misc.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_misc_int-pkcs-misc.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Tpo -c -o test/integration/pkcs_misc_int-pkcs-misc.int.o `test -f 'test/integration/pkcs-misc.int.c' || echo '$(srcdir)/'`test/integration/pkcs-misc.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Tpo test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-misc.int.c' object='test/integration/pkcs_misc_int-pkcs-misc.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_misc_int-pkcs-misc.int.o `test -f 'test/integration/pkcs-misc.int.c' || echo '$(srcdir)/'`test/integration/pkcs-misc.int.c test/integration/pkcs_misc_int-pkcs-misc.int.obj: test/integration/pkcs-misc.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_misc_int-pkcs-misc.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Tpo -c -o test/integration/pkcs_misc_int-pkcs-misc.int.obj `if test -f 'test/integration/pkcs-misc.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-misc.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-misc.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Tpo test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-misc.int.c' object='test/integration/pkcs_misc_int-pkcs-misc.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_misc_int-pkcs-misc.int.obj `if test -f 'test/integration/pkcs-misc.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-misc.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-misc.int.c'; fi` test/integration/pkcs_misc_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_misc_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_misc_int-test.Tpo -c -o test/integration/pkcs_misc_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_misc_int-test.Tpo test/integration/$(DEPDIR)/pkcs_misc_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_misc_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_misc_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_misc_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_misc_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_misc_int-test.Tpo -c -o test/integration/pkcs_misc_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_misc_int-test.Tpo test/integration/$(DEPDIR)/pkcs_misc_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_misc_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_misc_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_misc_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_session_state_int-pkcs-session-state.o: test/integration/pkcs-session-state.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_session_state_int-pkcs-session-state.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Tpo -c -o test/integration/pkcs_session_state_int-pkcs-session-state.o `test -f 'test/integration/pkcs-session-state.c' || echo '$(srcdir)/'`test/integration/pkcs-session-state.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Tpo test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-session-state.c' object='test/integration/pkcs_session_state_int-pkcs-session-state.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_session_state_int-pkcs-session-state.o `test -f 'test/integration/pkcs-session-state.c' || echo '$(srcdir)/'`test/integration/pkcs-session-state.c test/integration/pkcs_session_state_int-pkcs-session-state.obj: test/integration/pkcs-session-state.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_session_state_int-pkcs-session-state.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Tpo -c -o test/integration/pkcs_session_state_int-pkcs-session-state.obj `if test -f 'test/integration/pkcs-session-state.c'; then $(CYGPATH_W) 'test/integration/pkcs-session-state.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-session-state.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Tpo test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-session-state.c' object='test/integration/pkcs_session_state_int-pkcs-session-state.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_session_state_int-pkcs-session-state.obj `if test -f 'test/integration/pkcs-session-state.c'; then $(CYGPATH_W) 'test/integration/pkcs-session-state.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-session-state.c'; fi` test/integration/pkcs_session_state_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_session_state_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_session_state_int-test.Tpo -c -o test/integration/pkcs_session_state_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_session_state_int-test.Tpo test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_session_state_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_session_state_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_session_state_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_session_state_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_session_state_int-test.Tpo -c -o test/integration/pkcs_session_state_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_session_state_int-test.Tpo test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_session_state_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_session_state_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_session_state_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.o: test/integration/pkcs-sign-verify.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Tpo -c -o test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.o `test -f 'test/integration/pkcs-sign-verify.int.c' || echo '$(srcdir)/'`test/integration/pkcs-sign-verify.int.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Tpo test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-sign-verify.int.c' object='test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.o `test -f 'test/integration/pkcs-sign-verify.int.c' || echo '$(srcdir)/'`test/integration/pkcs-sign-verify.int.c test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.obj: test/integration/pkcs-sign-verify.int.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Tpo -c -o test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.obj `if test -f 'test/integration/pkcs-sign-verify.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-sign-verify.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-sign-verify.int.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Tpo test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/pkcs-sign-verify.int.c' object='test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_sign_verify_int-pkcs-sign-verify.int.obj `if test -f 'test/integration/pkcs-sign-verify.int.c'; then $(CYGPATH_W) 'test/integration/pkcs-sign-verify.int.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/pkcs-sign-verify.int.c'; fi` test/integration/pkcs_sign_verify_int-test.o: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_sign_verify_int-test.o -MD -MP -MF test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Tpo -c -o test/integration/pkcs_sign_verify_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Tpo test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_sign_verify_int-test.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_sign_verify_int-test.o `test -f 'test/integration/test.c' || echo '$(srcdir)/'`test/integration/test.c test/integration/pkcs_sign_verify_int-test.obj: test/integration/test.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -MT test/integration/pkcs_sign_verify_int-test.obj -MD -MP -MF test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Tpo -c -o test/integration/pkcs_sign_verify_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Tpo test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/integration/test.c' object='test/integration/pkcs_sign_verify_int-test.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_integration_pkcs_sign_verify_int_CFLAGS) $(CFLAGS) -c -o test/integration/pkcs_sign_verify_int-test.obj `if test -f 'test/integration/test.c'; then $(CYGPATH_W) 'test/integration/test.c'; else $(CYGPATH_W) '$(srcdir)/test/integration/test.c'; fi` test/unit/test_attr-test_attr.o: test/unit/test_attr.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_attr_CFLAGS) $(CFLAGS) -MT test/unit/test_attr-test_attr.o -MD -MP -MF test/unit/$(DEPDIR)/test_attr-test_attr.Tpo -c -o test/unit/test_attr-test_attr.o `test -f 'test/unit/test_attr.c' || echo '$(srcdir)/'`test/unit/test_attr.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_attr-test_attr.Tpo test/unit/$(DEPDIR)/test_attr-test_attr.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_attr.c' object='test/unit/test_attr-test_attr.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_attr_CFLAGS) $(CFLAGS) -c -o test/unit/test_attr-test_attr.o `test -f 'test/unit/test_attr.c' || echo '$(srcdir)/'`test/unit/test_attr.c test/unit/test_attr-test_attr.obj: test/unit/test_attr.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_attr_CFLAGS) $(CFLAGS) -MT test/unit/test_attr-test_attr.obj -MD -MP -MF test/unit/$(DEPDIR)/test_attr-test_attr.Tpo -c -o test/unit/test_attr-test_attr.obj `if test -f 'test/unit/test_attr.c'; then $(CYGPATH_W) 'test/unit/test_attr.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_attr.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_attr-test_attr.Tpo test/unit/$(DEPDIR)/test_attr-test_attr.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_attr.c' object='test/unit/test_attr-test_attr.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_attr_CFLAGS) $(CFLAGS) -c -o test/unit/test_attr-test_attr.obj `if test -f 'test/unit/test_attr.c'; then $(CYGPATH_W) 'test/unit/test_attr.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_attr.c'; fi` test/unit/test_db-test_db.o: test/unit/test_db.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_db_CFLAGS) $(CFLAGS) -MT test/unit/test_db-test_db.o -MD -MP -MF test/unit/$(DEPDIR)/test_db-test_db.Tpo -c -o test/unit/test_db-test_db.o `test -f 'test/unit/test_db.c' || echo '$(srcdir)/'`test/unit/test_db.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_db-test_db.Tpo test/unit/$(DEPDIR)/test_db-test_db.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_db.c' object='test/unit/test_db-test_db.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_db_CFLAGS) $(CFLAGS) -c -o test/unit/test_db-test_db.o `test -f 'test/unit/test_db.c' || echo '$(srcdir)/'`test/unit/test_db.c test/unit/test_db-test_db.obj: test/unit/test_db.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_db_CFLAGS) $(CFLAGS) -MT test/unit/test_db-test_db.obj -MD -MP -MF test/unit/$(DEPDIR)/test_db-test_db.Tpo -c -o test/unit/test_db-test_db.obj `if test -f 'test/unit/test_db.c'; then $(CYGPATH_W) 'test/unit/test_db.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_db.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_db-test_db.Tpo test/unit/$(DEPDIR)/test_db-test_db.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_db.c' object='test/unit/test_db-test_db.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_db_CFLAGS) $(CFLAGS) -c -o test/unit/test_db-test_db.obj `if test -f 'test/unit/test_db.c'; then $(CYGPATH_W) 'test/unit/test_db.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_db.c'; fi` test/unit/test_log-test_log.o: test/unit/test_log.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_log_CFLAGS) $(CFLAGS) -MT test/unit/test_log-test_log.o -MD -MP -MF test/unit/$(DEPDIR)/test_log-test_log.Tpo -c -o test/unit/test_log-test_log.o `test -f 'test/unit/test_log.c' || echo '$(srcdir)/'`test/unit/test_log.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_log-test_log.Tpo test/unit/$(DEPDIR)/test_log-test_log.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_log.c' object='test/unit/test_log-test_log.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_log_CFLAGS) $(CFLAGS) -c -o test/unit/test_log-test_log.o `test -f 'test/unit/test_log.c' || echo '$(srcdir)/'`test/unit/test_log.c test/unit/test_log-test_log.obj: test/unit/test_log.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_log_CFLAGS) $(CFLAGS) -MT test/unit/test_log-test_log.obj -MD -MP -MF test/unit/$(DEPDIR)/test_log-test_log.Tpo -c -o test/unit/test_log-test_log.obj `if test -f 'test/unit/test_log.c'; then $(CYGPATH_W) 'test/unit/test_log.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_log.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_log-test_log.Tpo test/unit/$(DEPDIR)/test_log-test_log.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_log.c' object='test/unit/test_log-test_log.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_log_CFLAGS) $(CFLAGS) -c -o test/unit/test_log-test_log.obj `if test -f 'test/unit/test_log.c'; then $(CYGPATH_W) 'test/unit/test_log.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_log.c'; fi` test/unit/test_parser-test_parser.o: test/unit/test_parser.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_parser_CFLAGS) $(CFLAGS) -MT test/unit/test_parser-test_parser.o -MD -MP -MF test/unit/$(DEPDIR)/test_parser-test_parser.Tpo -c -o test/unit/test_parser-test_parser.o `test -f 'test/unit/test_parser.c' || echo '$(srcdir)/'`test/unit/test_parser.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_parser-test_parser.Tpo test/unit/$(DEPDIR)/test_parser-test_parser.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_parser.c' object='test/unit/test_parser-test_parser.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_parser_CFLAGS) $(CFLAGS) -c -o test/unit/test_parser-test_parser.o `test -f 'test/unit/test_parser.c' || echo '$(srcdir)/'`test/unit/test_parser.c test/unit/test_parser-test_parser.obj: test/unit/test_parser.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_parser_CFLAGS) $(CFLAGS) -MT test/unit/test_parser-test_parser.obj -MD -MP -MF test/unit/$(DEPDIR)/test_parser-test_parser.Tpo -c -o test/unit/test_parser-test_parser.obj `if test -f 'test/unit/test_parser.c'; then $(CYGPATH_W) 'test/unit/test_parser.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_parser.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_parser-test_parser.Tpo test/unit/$(DEPDIR)/test_parser-test_parser.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_parser.c' object='test/unit/test_parser-test_parser.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_parser_CFLAGS) $(CFLAGS) -c -o test/unit/test_parser-test_parser.obj `if test -f 'test/unit/test_parser.c'; then $(CYGPATH_W) 'test/unit/test_parser.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_parser.c'; fi` test/unit/test_twist-test_twist.o: test/unit/test_twist.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_twist_CFLAGS) $(CFLAGS) -MT test/unit/test_twist-test_twist.o -MD -MP -MF test/unit/$(DEPDIR)/test_twist-test_twist.Tpo -c -o test/unit/test_twist-test_twist.o `test -f 'test/unit/test_twist.c' || echo '$(srcdir)/'`test/unit/test_twist.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_twist-test_twist.Tpo test/unit/$(DEPDIR)/test_twist-test_twist.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_twist.c' object='test/unit/test_twist-test_twist.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_twist_CFLAGS) $(CFLAGS) -c -o test/unit/test_twist-test_twist.o `test -f 'test/unit/test_twist.c' || echo '$(srcdir)/'`test/unit/test_twist.c test/unit/test_twist-test_twist.obj: test/unit/test_twist.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_twist_CFLAGS) $(CFLAGS) -MT test/unit/test_twist-test_twist.obj -MD -MP -MF test/unit/$(DEPDIR)/test_twist-test_twist.Tpo -c -o test/unit/test_twist-test_twist.obj `if test -f 'test/unit/test_twist.c'; then $(CYGPATH_W) 'test/unit/test_twist.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_twist.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_twist-test_twist.Tpo test/unit/$(DEPDIR)/test_twist-test_twist.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_twist.c' object='test/unit/test_twist-test_twist.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_twist_CFLAGS) $(CFLAGS) -c -o test/unit/test_twist-test_twist.obj `if test -f 'test/unit/test_twist.c'; then $(CYGPATH_W) 'test/unit/test_twist.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_twist.c'; fi` test/unit/test_utils-test_utils.o: test/unit/test_utils.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_utils_CFLAGS) $(CFLAGS) -MT test/unit/test_utils-test_utils.o -MD -MP -MF test/unit/$(DEPDIR)/test_utils-test_utils.Tpo -c -o test/unit/test_utils-test_utils.o `test -f 'test/unit/test_utils.c' || echo '$(srcdir)/'`test/unit/test_utils.c @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_utils-test_utils.Tpo test/unit/$(DEPDIR)/test_utils-test_utils.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_utils.c' object='test/unit/test_utils-test_utils.o' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_utils_CFLAGS) $(CFLAGS) -c -o test/unit/test_utils-test_utils.o `test -f 'test/unit/test_utils.c' || echo '$(srcdir)/'`test/unit/test_utils.c test/unit/test_utils-test_utils.obj: test/unit/test_utils.c @am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_utils_CFLAGS) $(CFLAGS) -MT test/unit/test_utils-test_utils.obj -MD -MP -MF test/unit/$(DEPDIR)/test_utils-test_utils.Tpo -c -o test/unit/test_utils-test_utils.obj `if test -f 'test/unit/test_utils.c'; then $(CYGPATH_W) 'test/unit/test_utils.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_utils.c'; fi` @am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) test/unit/$(DEPDIR)/test_utils-test_utils.Tpo test/unit/$(DEPDIR)/test_utils-test_utils.Po @AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='test/unit/test_utils.c' object='test/unit/test_utils-test_utils.obj' libtool=no @AMDEPBACKSLASH@ @AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ @am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(test_unit_test_utils_CFLAGS) $(CFLAGS) -c -o test/unit/test_utils-test_utils.obj `if test -f 'test/unit/test_utils.c'; then $(CYGPATH_W) 'test/unit/test_utils.c'; else $(CYGPATH_W) '$(srcdir)/test/unit/test_utils.c'; fi` mostlyclean-libtool: -rm -f *.lo clean-libtool: -rm -rf .libs _libs -rm -rf src/.libs src/_libs -rm -rf src/lib/.libs src/lib/_libs -rm -rf test/fuzz/.libs test/fuzz/_libs -rm -rf test/integration/.libs test/integration/_libs -rm -rf test/unit/.libs test/unit/_libs distclean-libtool: -rm -f libtool config.lt classnoinst.stamp: $(am__java_sources) @list1='$?'; list2=; if test -n "$$list1"; then \ for p in $$list1; do \ if test -f $$p; then d=; else d="$(srcdir)/"; fi; \ list2="$$list2 $$d$$p"; \ done; \ echo '$(CLASSPATH_ENV) $(JAVAC) -d $(JAVAROOT) $(AM_JAVACFLAGS) $(JAVACFLAGS) '"$$list2"; \ $(CLASSPATH_ENV) $(JAVAC) -d $(JAVAROOT) $(AM_JAVACFLAGS) $(JAVACFLAGS) $$list2; \ else :; fi echo timestamp > $@ clean-noinstJAVA: -rm -f *.class classnoinst.stamp install-p11configDATA: $(p11config_DATA) @$(NORMAL_INSTALL) @list='$(p11config_DATA)'; test -n "$(p11configdir)" || list=; \ if test -n "$$list"; then \ echo " $(MKDIR_P) '$(DESTDIR)$(p11configdir)'"; \ $(MKDIR_P) "$(DESTDIR)$(p11configdir)" || exit 1; \ fi; \ for p in $$list; do \ if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \ echo "$$d$$p"; \ done | $(am__base_list) | \ while read files; do \ echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(p11configdir)'"; \ $(INSTALL_DATA) $$files "$(DESTDIR)$(p11configdir)" || exit $$?; \ done uninstall-p11configDATA: @$(NORMAL_UNINSTALL) @list='$(p11config_DATA)'; test -n "$(p11configdir)" || list=; \ files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \ dir='$(DESTDIR)$(p11configdir)'; $(am__uninstall_files_from_dir) install-pkgconfigDATA: $(pkgconfig_DATA) @$(NORMAL_INSTALL) @list='$(pkgconfig_DATA)'; test -n "$(pkgconfigdir)" || list=; \ if test -n "$$list"; then \ echo " $(MKDIR_P) '$(DESTDIR)$(pkgconfigdir)'"; \ $(MKDIR_P) "$(DESTDIR)$(pkgconfigdir)" || exit 1; \ fi; \ for p in $$list; do \ if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \ echo "$$d$$p"; \ done | $(am__base_list) | \ while read files; do \ echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(pkgconfigdir)'"; \ $(INSTALL_DATA) $$files "$(DESTDIR)$(pkgconfigdir)" || exit $$?; \ done uninstall-pkgconfigDATA: @$(NORMAL_UNINSTALL) @list='$(pkgconfig_DATA)'; test -n "$(pkgconfigdir)" || list=; \ files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \ dir='$(DESTDIR)$(pkgconfigdir)'; $(am__uninstall_files_from_dir) ID: $(am__tagged_files) $(am__define_uniq_tagged_files); mkid -fID $$unique tags: tags-am TAGS: tags tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files) set x; \ here=`pwd`; \ $(am__define_uniq_tagged_files); \ shift; \ if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \ test -n "$$unique" || unique=$$empty_fix; \ if test $$# -gt 0; then \ $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \ "$$@" $$unique; \ else \ $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \ $$unique; \ fi; \ fi ctags: ctags-am CTAGS: ctags ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files) $(am__define_uniq_tagged_files); \ test -z "$(CTAGS_ARGS)$$unique" \ || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \ $$unique GTAGS: here=`$(am__cd) $(top_builddir) && pwd` \ && $(am__cd) $(top_srcdir) \ && gtags -i $(GTAGS_ARGS) "$$here" cscope: cscope.files test ! -s cscope.files \ || $(CSCOPE) -b -q $(AM_CSCOPEFLAGS) $(CSCOPEFLAGS) -i cscope.files $(CSCOPE_ARGS) clean-cscope: -rm -f cscope.files cscope.files: clean-cscope cscopelist cscopelist: cscopelist-am cscopelist-am: $(am__tagged_files) list='$(am__tagged_files)'; \ case "$(srcdir)" in \ [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \ *) sdir=$(subdir)/$(srcdir) ;; \ esac; \ for i in $$list; do \ if test -f "$$i"; then \ echo "$(subdir)/$$i"; \ else \ echo "$$sdir/$$i"; \ fi; \ done >> $(top_builddir)/cscope.files distclean-tags: -rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags -rm -f cscope.out cscope.in.out cscope.po.out cscope.files # Recover from deleted '.trs' file; this should ensure that # "rm -f foo.log; make foo.trs" re-run 'foo.test', and re-create # both 'foo.log' and 'foo.trs'. Break the recipe in two subshells # to avoid problems with "make -n". .log.trs: rm -f $< $@ $(MAKE) $(AM_MAKEFLAGS) $< # Leading 'am--fnord' is there to ensure the list of targets does not # expand to empty, as could happen e.g. with make check TESTS=''. am--fnord $(TEST_LOGS) $(TEST_LOGS:.log=.trs): $(am__force_recheck) am--force-recheck: @: $(TEST_SUITE_LOG): $(TEST_LOGS) @$(am__set_TESTS_bases); \ am__f_ok () { test -f "$$1" && test -r "$$1"; }; \ redo_bases=`for i in $$bases; do \ am__f_ok $$i.trs && am__f_ok $$i.log || echo $$i; \ done`; \ if test -n "$$redo_bases"; then \ redo_logs=`for i in $$redo_bases; do echo $$i.log; done`; \ redo_results=`for i in $$redo_bases; do echo $$i.trs; done`; \ if $(am__make_dryrun); then :; else \ rm -f $$redo_logs && rm -f $$redo_results || exit 1; \ fi; \ fi; \ if test -n "$$am__remaking_logs"; then \ echo "fatal: making $(TEST_SUITE_LOG): possible infinite" \ "recursion detected" >&2; \ elif test -n "$$redo_logs"; then \ am__remaking_logs=yes $(MAKE) $(AM_MAKEFLAGS) $$redo_logs; \ fi; \ if $(am__make_dryrun); then :; else \ st=0; \ errmsg="fatal: making $(TEST_SUITE_LOG): failed to create"; \ for i in $$redo_bases; do \ test -f $$i.trs && test -r $$i.trs \ || { echo "$$errmsg $$i.trs" >&2; st=1; }; \ test -f $$i.log && test -r $$i.log \ || { echo "$$errmsg $$i.log" >&2; st=1; }; \ done; \ test $$st -eq 0 || exit 1; \ fi @$(am__sh_e_setup); $(am__tty_colors); $(am__set_TESTS_bases); \ ws='[ ]'; \ results=`for b in $$bases; do echo $$b.trs; done`; \ test -n "$$results" || results=/dev/null; \ all=` grep "^$$ws*:test-result:" $$results | wc -l`; \ pass=` grep "^$$ws*:test-result:$$ws*PASS" $$results | wc -l`; \ fail=` grep "^$$ws*:test-result:$$ws*FAIL" $$results | wc -l`; \ skip=` grep "^$$ws*:test-result:$$ws*SKIP" $$results | wc -l`; \ xfail=`grep "^$$ws*:test-result:$$ws*XFAIL" $$results | wc -l`; \ xpass=`grep "^$$ws*:test-result:$$ws*XPASS" $$results | wc -l`; \ error=`grep "^$$ws*:test-result:$$ws*ERROR" $$results | wc -l`; \ if test `expr $$fail + $$xpass + $$error` -eq 0; then \ success=true; \ else \ success=false; \ fi; \ br='==================='; br=$$br$$br$$br$$br; \ result_count () \ { \ if test x"$$1" = x"--maybe-color"; then \ maybe_colorize=yes; \ elif test x"$$1" = x"--no-color"; then \ maybe_colorize=no; \ else \ echo "$@: invalid 'result_count' usage" >&2; exit 4; \ fi; \ shift; \ desc=$$1 count=$$2; \ if test $$maybe_colorize = yes && test $$count -gt 0; then \ color_start=$$3 color_end=$$std; \ else \ color_start= color_end=; \ fi; \ echo "$${color_start}# $$desc $$count$${color_end}"; \ }; \ create_testsuite_report () \ { \ result_count $$1 "TOTAL:" $$all "$$brg"; \ result_count $$1 "PASS: " $$pass "$$grn"; \ result_count $$1 "SKIP: " $$skip "$$blu"; \ result_count $$1 "XFAIL:" $$xfail "$$lgn"; \ result_count $$1 "FAIL: " $$fail "$$red"; \ result_count $$1 "XPASS:" $$xpass "$$red"; \ result_count $$1 "ERROR:" $$error "$$mgn"; \ }; \ { \ echo "$(PACKAGE_STRING): $(subdir)/$(TEST_SUITE_LOG)" | \ $(am__rst_title); \ create_testsuite_report --no-color; \ echo; \ echo ".. contents:: :depth: 2"; \ echo; \ for b in $$bases; do echo $$b; done \ | $(am__create_global_log); \ } >$(TEST_SUITE_LOG).tmp || exit 1; \ mv $(TEST_SUITE_LOG).tmp $(TEST_SUITE_LOG); \ if $$success; then \ col="$$grn"; \ else \ col="$$red"; \ test x"$$VERBOSE" = x || cat $(TEST_SUITE_LOG); \ fi; \ echo "$${col}$$br$${std}"; \ echo "$${col}Testsuite summary"$(AM_TESTSUITE_SUMMARY_HEADER)"$${std}"; \ echo "$${col}$$br$${std}"; \ create_testsuite_report --maybe-color; \ echo "$$col$$br$$std"; \ if $$success; then :; else \ echo "$${col}See $(subdir)/$(TEST_SUITE_LOG)$${std}"; \ if test -n "$(PACKAGE_BUGREPORT)"; then \ echo "$${col}Please report to $(PACKAGE_BUGREPORT)$${std}"; \ fi; \ echo "$$col$$br$$std"; \ fi; \ $$success || exit 1 check-TESTS: $(check_PROGRAMS) $(check_SCRIPTS) @list='$(RECHECK_LOGS)'; test -z "$$list" || rm -f $$list @list='$(RECHECK_LOGS:.log=.trs)'; test -z "$$list" || rm -f $$list @test -z "$(TEST_SUITE_LOG)" || rm -f $(TEST_SUITE_LOG) @set +e; $(am__set_TESTS_bases); \ log_list=`for i in $$bases; do echo $$i.log; done`; \ trs_list=`for i in $$bases; do echo $$i.trs; done`; \ log_list=`echo $$log_list`; trs_list=`echo $$trs_list`; \ $(MAKE) $(AM_MAKEFLAGS) $(TEST_SUITE_LOG) TEST_LOGS="$$log_list"; \ exit $$?; recheck: all $(check_PROGRAMS) $(check_SCRIPTS) @test -z "$(TEST_SUITE_LOG)" || rm -f $(TEST_SUITE_LOG) @set +e; $(am__set_TESTS_bases); \ bases=`for i in $$bases; do echo $$i; done \ | $(am__list_recheck_tests)` || exit 1; \ log_list=`for i in $$bases; do echo $$i.log; done`; \ log_list=`echo $$log_list`; \ $(MAKE) $(AM_MAKEFLAGS) $(TEST_SUITE_LOG) \ am__force_recheck=am--force-recheck \ TEST_LOGS="$$log_list"; \ exit $$? test/unit/test_twist.log: test/unit/test_twist$(EXEEXT) @p='test/unit/test_twist$(EXEEXT)'; \ b='test/unit/test_twist'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) test/unit/test_log.log: test/unit/test_log$(EXEEXT) @p='test/unit/test_log$(EXEEXT)'; \ b='test/unit/test_log'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) test/unit/test_parser.log: test/unit/test_parser$(EXEEXT) @p='test/unit/test_parser$(EXEEXT)'; \ b='test/unit/test_parser'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) test/unit/test_attr.log: test/unit/test_attr$(EXEEXT) @p='test/unit/test_attr$(EXEEXT)'; \ b='test/unit/test_attr'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) test/unit/test_db.log: test/unit/test_db$(EXEEXT) @p='test/unit/test_db$(EXEEXT)'; \ b='test/unit/test_db'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) test/unit/test_utils.log: test/unit/test_utils$(EXEEXT) @p='test/unit/test_utils$(EXEEXT)'; \ b='test/unit/test_utils'; \ $(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) .sh.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(SH_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_SH_LOG_DRIVER_FLAGS) $(SH_LOG_DRIVER_FLAGS) -- $(SH_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.sh$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(SH_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_SH_LOG_DRIVER_FLAGS) $(SH_LOG_DRIVER_FLAGS) -- $(SH_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .int.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(INT_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_INT_LOG_DRIVER_FLAGS) $(INT_LOG_DRIVER_FLAGS) -- $(INT_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.int$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(INT_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_INT_LOG_DRIVER_FLAGS) $(INT_LOG_DRIVER_FLAGS) -- $(INT_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .nosetup.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(NOSETUP_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_NOSETUP_LOG_DRIVER_FLAGS) $(NOSETUP_LOG_DRIVER_FLAGS) -- $(NOSETUP_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.nosetup$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(NOSETUP_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_NOSETUP_LOG_DRIVER_FLAGS) $(NOSETUP_LOG_DRIVER_FLAGS) -- $(NOSETUP_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .java.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(JAVA_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_JAVA_LOG_DRIVER_FLAGS) $(JAVA_LOG_DRIVER_FLAGS) -- $(JAVA_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.java$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(JAVA_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_JAVA_LOG_DRIVER_FLAGS) $(JAVA_LOG_DRIVER_FLAGS) -- $(JAVA_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .fapi.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(FAPI_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_FAPI_LOG_DRIVER_FLAGS) $(FAPI_LOG_DRIVER_FLAGS) -- $(FAPI_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.fapi$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(FAPI_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_FAPI_LOG_DRIVER_FLAGS) $(FAPI_LOG_DRIVER_FLAGS) -- $(FAPI_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .fuzz.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(FUZZ_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_FUZZ_LOG_DRIVER_FLAGS) $(FUZZ_LOG_DRIVER_FLAGS) -- $(FUZZ_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.fuzz$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(FUZZ_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_FUZZ_LOG_DRIVER_FLAGS) $(FUZZ_LOG_DRIVER_FLAGS) -- $(FUZZ_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) .fuzz32.log: @p='$<'; \ $(am__set_b); \ $(am__check_pre) $(FUZZ32_LOG_DRIVER) --test-name "$$f" \ --log-file $$b.log --trs-file $$b.trs \ $(am__common_driver_flags) $(AM_FUZZ32_LOG_DRIVER_FLAGS) $(FUZZ32_LOG_DRIVER_FLAGS) -- $(FUZZ32_LOG_COMPILE) \ "$$tst" $(AM_TESTS_FD_REDIRECT) @am__EXEEXT_TRUE@.fuzz32$(EXEEXT).log: @am__EXEEXT_TRUE@ @p='$<'; \ @am__EXEEXT_TRUE@ $(am__set_b); \ @am__EXEEXT_TRUE@ $(am__check_pre) $(FUZZ32_LOG_DRIVER) --test-name "$$f" \ @am__EXEEXT_TRUE@ --log-file $$b.log --trs-file $$b.trs \ @am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_FUZZ32_LOG_DRIVER_FLAGS) $(FUZZ32_LOG_DRIVER_FLAGS) -- $(FUZZ32_LOG_COMPILE) \ @am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT) distdir: $(BUILT_SOURCES) $(MAKE) $(AM_MAKEFLAGS) distdir-am distdir-am: $(DISTFILES) $(am__remove_distdir) test -d "$(distdir)" || mkdir "$(distdir)" @srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \ topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \ list='$(DISTFILES)'; \ dist_files=`for file in $$list; do echo $$file; done | \ sed -e "s|^$$srcdirstrip/||;t" \ -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \ case $$dist_files in \ */*) $(MKDIR_P) `echo "$$dist_files" | \ sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \ sort -u` ;; \ esac; \ for file in $$dist_files; do \ if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \ if test -d $$d/$$file; then \ dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \ if test -d "$(distdir)/$$file"; then \ find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \ fi; \ if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \ cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \ find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \ fi; \ cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \ else \ test -f "$(distdir)/$$file" \ || cp -p $$d/$$file "$(distdir)/$$file" \ || exit 1; \ fi; \ done -test -n "$(am__skip_mode_fix)" \ || find "$(distdir)" -type d ! -perm -755 \ -exec chmod u+rwx,go+rx {} \; -o \ ! -type d ! -perm -444 -links 1 -exec chmod a+r {} \; -o \ ! -type d ! -perm -400 -exec chmod a+r {} \; -o \ ! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \ || chmod -R a+r "$(distdir)" dist-gzip: distdir tardir=$(distdir) && $(am__tar) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).tar.gz $(am__post_remove_distdir) dist-bzip2: distdir tardir=$(distdir) && $(am__tar) | BZIP2=$${BZIP2--9} bzip2 -c >$(distdir).tar.bz2 $(am__post_remove_distdir) dist-lzip: distdir tardir=$(distdir) && $(am__tar) | lzip -c $${LZIP_OPT--9} >$(distdir).tar.lz $(am__post_remove_distdir) dist-xz: distdir tardir=$(distdir) && $(am__tar) | XZ_OPT=$${XZ_OPT--e} xz -c >$(distdir).tar.xz $(am__post_remove_distdir) dist-zstd: distdir tardir=$(distdir) && $(am__tar) | zstd -c $${ZSTD_CLEVEL-$${ZSTD_OPT--19}} >$(distdir).tar.zst $(am__post_remove_distdir) dist-tarZ: distdir @echo WARNING: "Support for distribution archives compressed with" \ "legacy program 'compress' is deprecated." >&2 @echo WARNING: "It will be removed altogether in Automake 2.0" >&2 tardir=$(distdir) && $(am__tar) | compress -c >$(distdir).tar.Z $(am__post_remove_distdir) dist-shar: distdir @echo WARNING: "Support for shar distribution archives is" \ "deprecated." >&2 @echo WARNING: "It will be removed altogether in Automake 2.0" >&2 shar $(distdir) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).shar.gz $(am__post_remove_distdir) dist-zip: distdir -rm -f $(distdir).zip zip -rq $(distdir).zip $(distdir) $(am__post_remove_distdir) dist dist-all: $(MAKE) $(AM_MAKEFLAGS) $(DIST_TARGETS) am__post_remove_distdir='@:' $(am__post_remove_distdir) # This target untars the dist file and tries a VPATH configuration. Then # it guarantees that the distribution is self-contained by making another # tarfile. distcheck: dist case '$(DIST_ARCHIVES)' in \ *.tar.gz*) \ eval GZIP= gzip $(GZIP_ENV) -dc $(distdir).tar.gz | $(am__untar) ;;\ *.tar.bz2*) \ bzip2 -dc $(distdir).tar.bz2 | $(am__untar) ;;\ *.tar.lz*) \ lzip -dc $(distdir).tar.lz | $(am__untar) ;;\ *.tar.xz*) \ xz -dc $(distdir).tar.xz | $(am__untar) ;;\ *.tar.Z*) \ uncompress -c $(distdir).tar.Z | $(am__untar) ;;\ *.shar.gz*) \ eval GZIP= gzip $(GZIP_ENV) -dc $(distdir).shar.gz | unshar ;;\ *.zip*) \ unzip $(distdir).zip ;;\ *.tar.zst*) \ zstd -dc $(distdir).tar.zst | $(am__untar) ;;\ esac chmod -R a-w $(distdir) chmod u+w $(distdir) mkdir $(distdir)/_build $(distdir)/_build/sub $(distdir)/_inst chmod a-w $(distdir) test -d $(distdir)/_build || exit 0; \ dc_install_base=`$(am__cd) $(distdir)/_inst && pwd | sed -e 's,^[^:\\/]:[\\/],/,'` \ && dc_destdir="$${TMPDIR-/tmp}/am-dc-$$$$/" \ && am__cwd=`pwd` \ && $(am__cd) $(distdir)/_build/sub \ && ../../configure \ $(AM_DISTCHECK_CONFIGURE_FLAGS) \ $(DISTCHECK_CONFIGURE_FLAGS) \ --srcdir=../.. --prefix="$$dc_install_base" \ && $(MAKE) $(AM_MAKEFLAGS) \ && $(MAKE) $(AM_MAKEFLAGS) $(AM_DISTCHECK_DVI_TARGET) \ && $(MAKE) $(AM_MAKEFLAGS) check \ && $(MAKE) $(AM_MAKEFLAGS) install \ && $(MAKE) $(AM_MAKEFLAGS) installcheck \ && $(MAKE) $(AM_MAKEFLAGS) uninstall \ && $(MAKE) $(AM_MAKEFLAGS) distuninstallcheck_dir="$$dc_install_base" \ distuninstallcheck \ && chmod -R a-w "$$dc_install_base" \ && ({ \ (cd ../.. && umask 077 && mkdir "$$dc_destdir") \ && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" install \ && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" uninstall \ && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" \ distuninstallcheck_dir="$$dc_destdir" distuninstallcheck; \ } || { rm -rf "$$dc_destdir"; exit 1; }) \ && rm -rf "$$dc_destdir" \ && $(MAKE) $(AM_MAKEFLAGS) dist \ && rm -rf $(DIST_ARCHIVES) \ && $(MAKE) $(AM_MAKEFLAGS) distcleancheck \ && cd "$$am__cwd" \ || exit 1 $(am__post_remove_distdir) @(echo "$(distdir) archives ready for distribution: "; \ list='$(DIST_ARCHIVES)'; for i in $$list; do echo $$i; done) | \ sed -e 1h -e 1s/./=/g -e 1p -e 1x -e '$$p' -e '$$x' distuninstallcheck: @test -n '$(distuninstallcheck_dir)' || { \ echo 'ERROR: trying to run $@ with an empty' \ '$$(distuninstallcheck_dir)' >&2; \ exit 1; \ }; \ $(am__cd) '$(distuninstallcheck_dir)' || { \ echo 'ERROR: cannot chdir into $(distuninstallcheck_dir)' >&2; \ exit 1; \ }; \ test `$(am__distuninstallcheck_listfiles) | wc -l` -eq 0 \ || { echo "ERROR: files left after uninstall:" ; \ if test -n "$(DESTDIR)"; then \ echo " (check DESTDIR support)"; \ fi ; \ $(distuninstallcheck_listfiles) ; \ exit 1; } >&2 distcleancheck: distclean @if test '$(srcdir)' = . ; then \ echo "ERROR: distcleancheck can only run from a VPATH build" ; \ exit 1 ; \ fi @test `$(distcleancheck_listfiles) | wc -l` -eq 0 \ || { echo "ERROR: files left in build directory after distclean:" ; \ $(distcleancheck_listfiles) ; \ exit 1; } >&2 check-am: all-am $(MAKE) $(AM_MAKEFLAGS) $(check_PROGRAMS) $(check_SCRIPTS) $(MAKE) $(AM_MAKEFLAGS) check-TESTS check: check-am all-am: Makefile $(PROGRAMS) $(LTLIBRARIES) classnoinst.stamp $(DATA) install-checkPROGRAMS: install-libLTLIBRARIES install-fuzzPROGRAMS: install-libLTLIBRARIES install-p11libLTLIBRARIES: install-libLTLIBRARIES installdirs: for dir in "$(DESTDIR)$(fuzzdir)" "$(DESTDIR)$(libdir)" "$(DESTDIR)$(p11libdir)" "$(DESTDIR)$(p11configdir)" "$(DESTDIR)$(pkgconfigdir)"; do \ test -z "$$dir" || $(MKDIR_P) "$$dir"; \ done install: install-am install-exec: install-exec-am install-data: install-data-am uninstall: uninstall-am install-am: all-am @$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am installcheck: installcheck-am install-strip: if test -z '$(STRIP)'; then \ $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \ install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \ install; \ else \ $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \ install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \ "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \ fi mostlyclean-generic: -test -z "$(TEST_LOGS)" || rm -f $(TEST_LOGS) -test -z "$(TEST_LOGS:.log=.trs)" || rm -f $(TEST_LOGS:.log=.trs) -test -z "$(TEST_SUITE_LOG)" || rm -f $(TEST_SUITE_LOG) clean-generic: -test -z "$(CLEANFILES)" || rm -f $(CLEANFILES) distclean-generic: -test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES) -test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES) -rm -f src/$(DEPDIR)/$(am__dirstamp) -rm -f src/$(am__dirstamp) -rm -f src/lib/$(DEPDIR)/$(am__dirstamp) -rm -f src/lib/$(am__dirstamp) -rm -f test/fuzz/$(DEPDIR)/$(am__dirstamp) -rm -f test/fuzz/$(am__dirstamp) -rm -f test/integration/$(DEPDIR)/$(am__dirstamp) -rm -f test/integration/$(am__dirstamp) -rm -f test/unit/$(DEPDIR)/$(am__dirstamp) -rm -f test/unit/$(am__dirstamp) -test -z "$(DISTCLEANFILES)" || rm -f $(DISTCLEANFILES) maintainer-clean-generic: @echo "This command is intended for maintainers to use" @echo "it deletes files that may require special tools to rebuild." @AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE@clean-local: @AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE@distclean-local: clean: clean-am clean-am: clean-checkPROGRAMS clean-fuzzPROGRAMS clean-generic \ clean-libLTLIBRARIES clean-libtool clean-local \ clean-noinstJAVA clean-noinstLTLIBRARIES \ clean-p11libLTLIBRARIES mostlyclean-am distclean: distclean-am -rm -f $(am__CONFIG_DISTCLEAN_FILES) -rm -f src/$(DEPDIR)/pkcs11.Plo -rm -f src/lib/$(DEPDIR)/attrs.Plo -rm -f src/lib/$(DEPDIR)/backend.Plo -rm -f src/lib/$(DEPDIR)/backend_esysdb.Plo -rm -f src/lib/$(DEPDIR)/backend_fapi.Plo -rm -f src/lib/$(DEPDIR)/db.Plo -rm -f src/lib/$(DEPDIR)/derive.Plo -rm -f src/lib/$(DEPDIR)/digest.Plo -rm -f src/lib/$(DEPDIR)/emitter.Plo -rm -f src/lib/$(DEPDIR)/encrypt.Plo -rm -f src/lib/$(DEPDIR)/general.Plo -rm -f src/lib/$(DEPDIR)/key.Plo -rm -f src/lib/$(DEPDIR)/mech.Plo -rm -f src/lib/$(DEPDIR)/mutex.Plo -rm -f src/lib/$(DEPDIR)/object.Plo -rm -f src/lib/$(DEPDIR)/parser.Plo -rm -f src/lib/$(DEPDIR)/random.Plo -rm -f src/lib/$(DEPDIR)/session.Plo -rm -f src/lib/$(DEPDIR)/session_ctx.Plo -rm -f src/lib/$(DEPDIR)/session_table.Plo -rm -f src/lib/$(DEPDIR)/sign.Plo -rm -f src/lib/$(DEPDIR)/slot.Plo -rm -f src/lib/$(DEPDIR)/ssl_util.Plo -rm -f src/lib/$(DEPDIR)/token.Plo -rm -f src/lib/$(DEPDIR)/tpm.Plo -rm -f src/lib/$(DEPDIR)/twist.Plo -rm -f src/lib/$(DEPDIR)/typed_memory.Plo -rm -f src/lib/$(DEPDIR)/utils.Plo -rm -f test/fuzz/$(DEPDIR)/db_take_lock_fuzz-db-take-lock.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po -rm -f test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po -rm -f test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po -rm -f test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po -rm -f test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_ecdh_int-pkcs-ecdh.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_ecdh_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_misc_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po -rm -f test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po -rm -f test/unit/$(DEPDIR)/test_attr-test_attr.Po -rm -f test/unit/$(DEPDIR)/test_db-test_db.Po -rm -f test/unit/$(DEPDIR)/test_log-test_log.Po -rm -f test/unit/$(DEPDIR)/test_parser-test_parser.Po -rm -f test/unit/$(DEPDIR)/test_twist-test_twist.Po -rm -f test/unit/$(DEPDIR)/test_utils-test_utils.Po -rm -f Makefile distclean-am: clean-am distclean-compile distclean-generic \ distclean-hdr distclean-libtool distclean-local distclean-tags dvi: dvi-am dvi-am: html: html-am html-am: info: info-am info-am: install-data-am: install-fuzzPROGRAMS install-p11configDATA \ install-p11libLTLIBRARIES install-pkgconfigDATA install-dvi: install-dvi-am install-dvi-am: install-exec-am: install-libLTLIBRARIES install-html: install-html-am install-html-am: install-info: install-info-am install-info-am: install-man: install-pdf: install-pdf-am install-pdf-am: install-ps: install-ps-am install-ps-am: installcheck-am: maintainer-clean: maintainer-clean-am -rm -f $(am__CONFIG_DISTCLEAN_FILES) -rm -rf $(top_srcdir)/autom4te.cache -rm -f src/$(DEPDIR)/pkcs11.Plo -rm -f src/lib/$(DEPDIR)/attrs.Plo -rm -f src/lib/$(DEPDIR)/backend.Plo -rm -f src/lib/$(DEPDIR)/backend_esysdb.Plo -rm -f src/lib/$(DEPDIR)/backend_fapi.Plo -rm -f src/lib/$(DEPDIR)/db.Plo -rm -f src/lib/$(DEPDIR)/derive.Plo -rm -f src/lib/$(DEPDIR)/digest.Plo -rm -f src/lib/$(DEPDIR)/emitter.Plo -rm -f src/lib/$(DEPDIR)/encrypt.Plo -rm -f src/lib/$(DEPDIR)/general.Plo -rm -f src/lib/$(DEPDIR)/key.Plo -rm -f src/lib/$(DEPDIR)/mech.Plo -rm -f src/lib/$(DEPDIR)/mutex.Plo -rm -f src/lib/$(DEPDIR)/object.Plo -rm -f src/lib/$(DEPDIR)/parser.Plo -rm -f src/lib/$(DEPDIR)/random.Plo -rm -f src/lib/$(DEPDIR)/session.Plo -rm -f src/lib/$(DEPDIR)/session_ctx.Plo -rm -f src/lib/$(DEPDIR)/session_table.Plo -rm -f src/lib/$(DEPDIR)/sign.Plo -rm -f src/lib/$(DEPDIR)/slot.Plo -rm -f src/lib/$(DEPDIR)/ssl_util.Plo -rm -f src/lib/$(DEPDIR)/token.Plo -rm -f src/lib/$(DEPDIR)/tpm.Plo -rm -f src/lib/$(DEPDIR)/twist.Plo -rm -f src/lib/$(DEPDIR)/typed_memory.Plo -rm -f src/lib/$(DEPDIR)/utils.Plo -rm -f test/fuzz/$(DEPDIR)/db_take_lock_fuzz-db-take-lock.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/db_token_label_fuzz32-db-token-label.fuzz32.Po -rm -f test/fuzz/$(DEPDIR)/init_pin_fuzz-init-pin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/init_token_label_fuzz32-init-token-label.fuzz32.Po -rm -f test/fuzz/$(DEPDIR)/init_token_sopin_fuzz-init-token-sopin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/set_pin_fuzz-set-pin.fuzz.Po -rm -f test/fuzz/$(DEPDIR)/utils_ctx_unwrap_objauth_fuzz-utils-ctx-unwrap-objauth.Po -rm -f test/fuzz/$(DEPDIR)/yaml_parser_fuzz-yaml-parser.fuzz.Po -rm -f test/integration/$(DEPDIR)/pkcs_crypt_int-pkcs-crypt.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_crypt_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_ecdh_int-pkcs-ecdh.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_ecdh_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_find_objects_int-pkcs-find-objects.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_find_objects_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-pkcs-get-attribute-value.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_attribute_value_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_mechanism_int-pkcs-get-mechanism.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_get_mechanism_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-pkcs-initialize-finalize.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_initialize_finalize_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_keygen_int-pkcs-keygen.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_keygen_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_lockout_int-pkcs-lockout.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_lockout_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_login_logout_int-pkcs-login-logout.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_login_logout_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_misc_int-pkcs-misc.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_misc_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_session_state_int-pkcs-session-state.Po -rm -f test/integration/$(DEPDIR)/pkcs_session_state_int-test.Po -rm -f test/integration/$(DEPDIR)/pkcs_sign_verify_int-pkcs-sign-verify.int.Po -rm -f test/integration/$(DEPDIR)/pkcs_sign_verify_int-test.Po -rm -f test/unit/$(DEPDIR)/test_attr-test_attr.Po -rm -f test/unit/$(DEPDIR)/test_db-test_db.Po -rm -f test/unit/$(DEPDIR)/test_log-test_log.Po -rm -f test/unit/$(DEPDIR)/test_parser-test_parser.Po -rm -f test/unit/$(DEPDIR)/test_twist-test_twist.Po -rm -f test/unit/$(DEPDIR)/test_utils-test_utils.Po -rm -f Makefile maintainer-clean-am: distclean-am maintainer-clean-generic mostlyclean: mostlyclean-am mostlyclean-am: mostlyclean-compile mostlyclean-generic \ mostlyclean-libtool pdf: pdf-am pdf-am: ps: ps-am ps-am: uninstall-am: uninstall-fuzzPROGRAMS uninstall-libLTLIBRARIES \ uninstall-p11configDATA uninstall-p11libLTLIBRARIES \ uninstall-pkgconfigDATA .MAKE: check-am install-am install-strip .PHONY: CTAGS GTAGS TAGS all all-am am--depfiles am--refresh check \ check-TESTS check-am clean clean-checkPROGRAMS clean-cscope \ clean-fuzzPROGRAMS clean-generic clean-libLTLIBRARIES \ clean-libtool clean-local clean-noinstJAVA \ clean-noinstLTLIBRARIES clean-p11libLTLIBRARIES cscope \ cscopelist-am ctags ctags-am dist dist-all dist-bzip2 \ dist-gzip dist-lzip dist-shar dist-tarZ dist-xz dist-zip \ dist-zstd distcheck distclean distclean-compile \ distclean-generic distclean-hdr distclean-libtool \ distclean-local distclean-tags distcleancheck distdir \ distuninstallcheck dvi dvi-am html html-am info info-am \ install install-am install-data install-data-am install-dvi \ install-dvi-am install-exec install-exec-am \ install-fuzzPROGRAMS install-html install-html-am install-info \ install-info-am install-libLTLIBRARIES install-man \ install-p11configDATA install-p11libLTLIBRARIES install-pdf \ install-pdf-am install-pkgconfigDATA install-ps install-ps-am \ install-strip installcheck installcheck-am installdirs \ maintainer-clean maintainer-clean-generic mostlyclean \ mostlyclean-compile mostlyclean-generic mostlyclean-libtool \ pdf pdf-am ps ps-am recheck tags tags-am uninstall \ uninstall-am uninstall-fuzzPROGRAMS uninstall-libLTLIBRARIES \ uninstall-p11configDATA uninstall-p11libLTLIBRARIES \ uninstall-pkgconfigDATA .PRECIOUS: Makefile check-programs: $(check_PROGRAMS) # Code coverage # # Optional: # - CODE_COVERAGE_DIRECTORY: Top-level directory for code coverage reporting. # Multiple directories may be specified, separated by whitespace. # (Default: $(top_builddir)) # - CODE_COVERAGE_OUTPUT_FILE: Filename and path for the .info file generated # by lcov for code coverage. (Default: # $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage.info) # - CODE_COVERAGE_OUTPUT_DIRECTORY: Directory for generated code coverage # reports to be created. (Default: # $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage) # - CODE_COVERAGE_BRANCH_COVERAGE: Set to 1 to enforce branch coverage, # set to 0 to disable it and leave empty to stay with the default. # (Default: empty) # - CODE_COVERAGE_LCOV_SHOPTS_DEFAULT: Extra options shared between both lcov # instances. (Default: based on ) # - CODE_COVERAGE_LCOV_SHOPTS: Extra options to shared between both lcov # instances. (Default: ) # - CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH: --gcov-tool pathtogcov # - CODE_COVERAGE_LCOV_OPTIONS_DEFAULT: Extra options to pass to the # collecting lcov instance. (Default: ) # - CODE_COVERAGE_LCOV_OPTIONS: Extra options to pass to the collecting lcov # instance. (Default: ) # - CODE_COVERAGE_LCOV_RMOPTS_DEFAULT: Extra options to pass to the filtering # lcov instance. (Default: empty) # - CODE_COVERAGE_LCOV_RMOPTS: Extra options to pass to the filtering lcov # instance. (Default: ) # - CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT: Extra options to pass to the # genhtml instance. (Default: based on ) # - CODE_COVERAGE_GENHTML_OPTIONS: Extra options to pass to the genhtml # instance. (Default: ) # - CODE_COVERAGE_IGNORE_PATTERN: Extra glob pattern of files to ignore # # The generated report will be titled using the $(PACKAGE_NAME) and # $(PACKAGE_VERSION). In order to add the current git hash to the title, # use the git-version-gen script, available online. # Optional variables # run only on top dir @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ ifeq ($(abs_builddir), $(abs_top_builddir)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_DIRECTORY ?= $(top_builddir) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_OUTPUT_FILE ?= $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage.info @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_OUTPUT_DIRECTORY ?= $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_BRANCH_COVERAGE ?= @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_SHOPTS_DEFAULT ?= $(if $(CODE_COVERAGE_BRANCH_COVERAGE),--rc lcov_branch_coverage=$(CODE_COVERAGE_BRANCH_COVERAGE)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_SHOPTS ?= $(CODE_COVERAGE_LCOV_SHOPTS_DEFAULT) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH ?= --gcov-tool "$(GCOV)" @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_OPTIONS_DEFAULT ?= $(CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_OPTIONS ?= $(CODE_COVERAGE_LCOV_OPTIONS_DEFAULT) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_RMOPTS_DEFAULT ?= @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_LCOV_RMOPTS ?= $(CODE_COVERAGE_LCOV_RMOPTS_DEFAULT) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT ?=$(if $(CODE_COVERAGE_BRANCH_COVERAGE),--rc genhtml_branch_coverage=$(CODE_COVERAGE_BRANCH_COVERAGE)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_GENHTML_OPTIONS ?= $(CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@CODE_COVERAGE_IGNORE_PATTERN ?= # Use recursive makes in order to ignore errors during check @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@check-code-coverage: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ -$(AM_V_at)$(MAKE) $(AM_MAKEFLAGS) -k check @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ $(AM_V_at)$(MAKE) $(AM_MAKEFLAGS) code-coverage-capture # Capture code coverage data @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-capture: code-coverage-capture-hook @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ $(code_coverage_v_lcov_cap)$(LCOV) $(code_coverage_quiet) $(addprefix --directory ,$(CODE_COVERAGE_DIRECTORY)) --capture --output-file "$(CODE_COVERAGE_OUTPUT_FILE).tmp" --test-name "$(call code_coverage_sanitize,$(PACKAGE_NAME)-$(PACKAGE_VERSION))" --no-checksum --compat-libtool $(CODE_COVERAGE_LCOV_SHOPTS) $(CODE_COVERAGE_LCOV_OPTIONS) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ $(code_coverage_v_lcov_ign)$(LCOV) $(code_coverage_quiet) $(addprefix --directory ,$(CODE_COVERAGE_DIRECTORY)) --remove "$(CODE_COVERAGE_OUTPUT_FILE).tmp" "/tmp/*" $(CODE_COVERAGE_IGNORE_PATTERN) --output-file "$(CODE_COVERAGE_OUTPUT_FILE)" $(CODE_COVERAGE_LCOV_SHOPTS) $(CODE_COVERAGE_LCOV_RMOPTS) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ -@rm -f "$(CODE_COVERAGE_OUTPUT_FILE).tmp" @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ $(code_coverage_v_genhtml)LANG=C $(GENHTML) $(code_coverage_quiet) $(addprefix --prefix ,$(CODE_COVERAGE_DIRECTORY)) --output-directory "$(CODE_COVERAGE_OUTPUT_DIRECTORY)" --title "$(PACKAGE_NAME)-$(PACKAGE_VERSION) Code Coverage" --legend --show-details "$(CODE_COVERAGE_OUTPUT_FILE)" $(CODE_COVERAGE_GENHTML_OPTIONS) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ @echo "file://$(abs_builddir)/$(CODE_COVERAGE_OUTPUT_DIRECTORY)/index.html" @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-clean: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ -$(LCOV) --directory $(top_builddir) -z @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ -rm -rf "$(CODE_COVERAGE_OUTPUT_FILE)" "$(CODE_COVERAGE_OUTPUT_FILE).tmp" "$(CODE_COVERAGE_OUTPUT_DIRECTORY)" @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ -find . \( -name "*.gcda" -o -name "*.gcno" -o -name "*.gcov" \) -delete @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-dist-clean: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ else # ifneq ($(abs_builddir), $(abs_top_builddir)) @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@check-code-coverage: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-capture: code-coverage-capture-hook @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-clean: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@code-coverage-dist-clean: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_TRUE@ endif # ifeq ($(abs_builddir), $(abs_top_builddir)) # Use recursive makes in order to ignore errors during check @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@check-code-coverage: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@ @echo "Need to reconfigure with --enable-code-coverage" # Capture code coverage data @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@code-coverage-capture: code-coverage-capture-hook @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@ @echo "Need to reconfigure with --enable-code-coverage" @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@code-coverage-clean: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@@CODE_COVERAGE_ENABLED_FALSE@code-coverage-dist-clean: # Hook rule executed before code-coverage-capture, overridable by the user @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@code-coverage-capture-hook: @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@.PHONY: check-code-coverage code-coverage-capture code-coverage-dist-clean code-coverage-clean code-coverage-capture-hook # ax_code_coverage @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@clean-local: code-coverage-clean @AUTOCONF_CODE_COVERAGE_2019_01_06_TRUE@distclean-local: code-coverage-dist-clean @AUTOCONF_CODE_COVERAGE_2019_01_06_FALSE@@CODE_COVERAGE_RULES@ # Generate the AUTHORS file from git log AUTHORS : $(AM_V_GEN)git log --format='%aN <%aE>' | grep -v 'users.noreply.github.com' | sort | \ uniq -c | sort -nr | sed 's/^\s*//' | cut -d" " -f2- > $@ @HAVE_PREFIX_TRUE@ # Use standard install location when using --prefix @HAVE_P11KIT_TRUE@@HAVE_PREFIX_FALSE@ # Use P11 kit library module install location @HAVE_P11KIT_TRUE@@HAVE_PREFIX_FALSE@ # Use P11 kit module config file install location @HAVE_P11KIT_FALSE@@HAVE_PREFIX_FALSE@ # Use standard install location when P11Kit is not found # END INTEGRATION # END UNIT @FUZZING_TRUE@fuzz-targets: $(fuzz_PROGRAMS) # Tell versions [3.59,3.63) of GNU make to not export all variables. # Otherwise a system limit (for SysV at least) may be exceeded. .NOEXPORT: tpm2-pkcs11-1.9.1/src_vars.mk0000644000175100017510000000236514674407101011354 LIB_PKCS11_C = src/pkcs11.c LIB_PKCS11_H = src/pkcs11.h LIB_PKCS11_SRC = $(LIB_PKCS11_C) $(LIB_PKCS11_H) LIB_PKCS11_INTERNAL_LIB_C = src/lib/attrs.c src/lib/backend.c src/lib/backend_esysdb.c src/lib/backend_fapi.c src/lib/db.c src/lib/derive.c src/lib/digest.c src/lib/emitter.c src/lib/encrypt.c src/lib/general.c src/lib/key.c src/lib/mech.c src/lib/mutex.c src/lib/object.c src/lib/parser.c src/lib/random.c src/lib/session.c src/lib/session_ctx.c src/lib/session_table.c src/lib/sign.c src/lib/slot.c src/lib/ssl_util.c src/lib/token.c src/lib/tpm.c src/lib/twist.c src/lib/typed_memory.c src/lib/utils.c LIB_PKCS11_INTERNAL_LIB_H = src/lib/attrs.h src/lib/backend.h src/lib/backend_esysdb.h src/lib/backend_fapi.h src/lib/checks.h src/lib/db.h src/lib/debug.h src/lib/derive.h src/lib/digest.h src/lib/emitter.h src/lib/encrypt.h src/lib/general.h src/lib/key.h src/lib/list.h src/lib/log.h src/lib/mech.h src/lib/mutex.h src/lib/object.h src/lib/parser.h src/lib/random.h src/lib/session.h src/lib/session_ctx.h src/lib/session_table.h src/lib/sign.h src/lib/slot.h src/lib/ssl_util.h src/lib/token.h src/lib/tpm.h src/lib/twist.h src/lib/typed_memory.h src/lib/utils.h LIB_PKCS11_INTERNAL_LIB_SRC = $(LIB_PKCS11_INTERNAL_LIB_C) $(LIB_PKCS11_INTERNAL_LIB_H) tpm2-pkcs11-1.9.1/aminclude_static.am0000644000175100017510000001513414674407106013033 # aminclude_static.am generated automatically by Autoconf # from AX_AM_MACROS_STATIC on Mon Sep 23 19:56:38 CDT 2024 # Code coverage # # Optional: # - CODE_COVERAGE_DIRECTORY: Top-level directory for code coverage reporting. # Multiple directories may be specified, separated by whitespace. # (Default: $(top_builddir)) # - CODE_COVERAGE_OUTPUT_FILE: Filename and path for the .info file generated # by lcov for code coverage. (Default: # $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage.info) # - CODE_COVERAGE_OUTPUT_DIRECTORY: Directory for generated code coverage # reports to be created. (Default: # $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage) # - CODE_COVERAGE_BRANCH_COVERAGE: Set to 1 to enforce branch coverage, # set to 0 to disable it and leave empty to stay with the default. # (Default: empty) # - CODE_COVERAGE_LCOV_SHOPTS_DEFAULT: Extra options shared between both lcov # instances. (Default: based on ) # - CODE_COVERAGE_LCOV_SHOPTS: Extra options to shared between both lcov # instances. (Default: ) # - CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH: --gcov-tool pathtogcov # - CODE_COVERAGE_LCOV_OPTIONS_DEFAULT: Extra options to pass to the # collecting lcov instance. (Default: ) # - CODE_COVERAGE_LCOV_OPTIONS: Extra options to pass to the collecting lcov # instance. (Default: ) # - CODE_COVERAGE_LCOV_RMOPTS_DEFAULT: Extra options to pass to the filtering # lcov instance. (Default: empty) # - CODE_COVERAGE_LCOV_RMOPTS: Extra options to pass to the filtering lcov # instance. (Default: ) # - CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT: Extra options to pass to the # genhtml instance. (Default: based on ) # - CODE_COVERAGE_GENHTML_OPTIONS: Extra options to pass to the genhtml # instance. (Default: ) # - CODE_COVERAGE_IGNORE_PATTERN: Extra glob pattern of files to ignore # # The generated report will be titled using the $(PACKAGE_NAME) and # $(PACKAGE_VERSION). In order to add the current git hash to the title, # use the git-version-gen script, available online. # Optional variables # run only on top dir if CODE_COVERAGE_ENABLED ifeq ($(abs_builddir), $(abs_top_builddir)) CODE_COVERAGE_DIRECTORY ?= $(top_builddir) CODE_COVERAGE_OUTPUT_FILE ?= $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage.info CODE_COVERAGE_OUTPUT_DIRECTORY ?= $(PACKAGE_NAME)-$(PACKAGE_VERSION)-coverage CODE_COVERAGE_BRANCH_COVERAGE ?= CODE_COVERAGE_LCOV_SHOPTS_DEFAULT ?= $(if $(CODE_COVERAGE_BRANCH_COVERAGE),--rc lcov_branch_coverage=$(CODE_COVERAGE_BRANCH_COVERAGE)) CODE_COVERAGE_LCOV_SHOPTS ?= $(CODE_COVERAGE_LCOV_SHOPTS_DEFAULT) CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH ?= --gcov-tool "$(GCOV)" CODE_COVERAGE_LCOV_OPTIONS_DEFAULT ?= $(CODE_COVERAGE_LCOV_OPTIONS_GCOVPATH) CODE_COVERAGE_LCOV_OPTIONS ?= $(CODE_COVERAGE_LCOV_OPTIONS_DEFAULT) CODE_COVERAGE_LCOV_RMOPTS_DEFAULT ?= CODE_COVERAGE_LCOV_RMOPTS ?= $(CODE_COVERAGE_LCOV_RMOPTS_DEFAULT) CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT ?=$(if $(CODE_COVERAGE_BRANCH_COVERAGE),--rc genhtml_branch_coverage=$(CODE_COVERAGE_BRANCH_COVERAGE)) CODE_COVERAGE_GENHTML_OPTIONS ?= $(CODE_COVERAGE_GENHTML_OPTIONS_DEFAULT) CODE_COVERAGE_IGNORE_PATTERN ?= GITIGNOREFILES := $(GITIGNOREFILES) $(CODE_COVERAGE_OUTPUT_FILE) $(CODE_COVERAGE_OUTPUT_DIRECTORY) code_coverage_v_lcov_cap = $(code_coverage_v_lcov_cap_$(V)) code_coverage_v_lcov_cap_ = $(code_coverage_v_lcov_cap_$(AM_DEFAULT_VERBOSITY)) code_coverage_v_lcov_cap_0 = @echo " LCOV --capture" $(CODE_COVERAGE_OUTPUT_FILE); code_coverage_v_lcov_ign = $(code_coverage_v_lcov_ign_$(V)) code_coverage_v_lcov_ign_ = $(code_coverage_v_lcov_ign_$(AM_DEFAULT_VERBOSITY)) code_coverage_v_lcov_ign_0 = @echo " LCOV --remove /tmp/*" $(CODE_COVERAGE_IGNORE_PATTERN); code_coverage_v_genhtml = $(code_coverage_v_genhtml_$(V)) code_coverage_v_genhtml_ = $(code_coverage_v_genhtml_$(AM_DEFAULT_VERBOSITY)) code_coverage_v_genhtml_0 = @echo " GEN " "$(CODE_COVERAGE_OUTPUT_DIRECTORY)"; code_coverage_quiet = $(code_coverage_quiet_$(V)) code_coverage_quiet_ = $(code_coverage_quiet_$(AM_DEFAULT_VERBOSITY)) code_coverage_quiet_0 = --quiet # sanitizes the test-name: replaces with underscores: dashes and dots code_coverage_sanitize = $(subst -,_,$(subst .,_,$(1))) # Use recursive makes in order to ignore errors during check check-code-coverage: -$(AM_V_at)$(MAKE) $(AM_MAKEFLAGS) -k check $(AM_V_at)$(MAKE) $(AM_MAKEFLAGS) code-coverage-capture # Capture code coverage data code-coverage-capture: code-coverage-capture-hook $(code_coverage_v_lcov_cap)$(LCOV) $(code_coverage_quiet) $(addprefix --directory ,$(CODE_COVERAGE_DIRECTORY)) --capture --output-file "$(CODE_COVERAGE_OUTPUT_FILE).tmp" --test-name "$(call code_coverage_sanitize,$(PACKAGE_NAME)-$(PACKAGE_VERSION))" --no-checksum --compat-libtool $(CODE_COVERAGE_LCOV_SHOPTS) $(CODE_COVERAGE_LCOV_OPTIONS) $(code_coverage_v_lcov_ign)$(LCOV) $(code_coverage_quiet) $(addprefix --directory ,$(CODE_COVERAGE_DIRECTORY)) --remove "$(CODE_COVERAGE_OUTPUT_FILE).tmp" "/tmp/*" $(CODE_COVERAGE_IGNORE_PATTERN) --output-file "$(CODE_COVERAGE_OUTPUT_FILE)" $(CODE_COVERAGE_LCOV_SHOPTS) $(CODE_COVERAGE_LCOV_RMOPTS) -@rm -f "$(CODE_COVERAGE_OUTPUT_FILE).tmp" $(code_coverage_v_genhtml)LANG=C $(GENHTML) $(code_coverage_quiet) $(addprefix --prefix ,$(CODE_COVERAGE_DIRECTORY)) --output-directory "$(CODE_COVERAGE_OUTPUT_DIRECTORY)" --title "$(PACKAGE_NAME)-$(PACKAGE_VERSION) Code Coverage" --legend --show-details "$(CODE_COVERAGE_OUTPUT_FILE)" $(CODE_COVERAGE_GENHTML_OPTIONS) @echo "file://$(abs_builddir)/$(CODE_COVERAGE_OUTPUT_DIRECTORY)/index.html" code-coverage-clean: -$(LCOV) --directory $(top_builddir) -z -rm -rf "$(CODE_COVERAGE_OUTPUT_FILE)" "$(CODE_COVERAGE_OUTPUT_FILE).tmp" "$(CODE_COVERAGE_OUTPUT_DIRECTORY)" -find . \( -name "*.gcda" -o -name "*.gcno" -o -name "*.gcov" \) -delete code-coverage-dist-clean: AM_DISTCHECK_CONFIGURE_FLAGS := $(AM_DISTCHECK_CONFIGURE_FLAGS) --disable-code-coverage else # ifneq ($(abs_builddir), $(abs_top_builddir)) check-code-coverage: code-coverage-capture: code-coverage-capture-hook code-coverage-clean: code-coverage-dist-clean: endif # ifeq ($(abs_builddir), $(abs_top_builddir)) else #! CODE_COVERAGE_ENABLED # Use recursive makes in order to ignore errors during check check-code-coverage: @echo "Need to reconfigure with --enable-code-coverage" # Capture code coverage data code-coverage-capture: code-coverage-capture-hook @echo "Need to reconfigure with --enable-code-coverage" code-coverage-clean: code-coverage-dist-clean: endif #CODE_COVERAGE_ENABLED # Hook rule executed before code-coverage-capture, overridable by the user code-coverage-capture-hook: .PHONY: check-code-coverage code-coverage-capture code-coverage-dist-clean code-coverage-clean code-coverage-capture-hook tpm2-pkcs11-1.9.1/AUTHORS0000644000175100017510000000370114674407113010247 William Roberts Jonas Witschel Andreas Fuchs Nicolas Iooss Peter Huewe ДилÑн Палаузов Markus Linnala Daniel Kobras Johannes Holland Peter Huewe Imran Desai wenxin.leong Vincent JARDIN malikabhi05 Tadeusz Struk Matthew Dempsky Jorge Ramirez-Ortiz joholl Jakub Jelen Iwan Timmer Bill Roberts Bill Roberts Alvin Chen Tilman Keskinöz Thomas Calderon Å tÄ›pán HoráÄek Péter Vágány Nicolas Oliver Joshua Lock Jonathan McDowell 张亚 Vincent Cao Victor Makarov Tom Stellard Tobias Wackenhut SZ Lin (林上智) Robby Cornelissen Philip Fyvie Nick Bedbury Mitchell Mantas MikulÄ—nas Lim, Lukaz Wei Hwang Khushboo Bindlish Jay Chetty Erik Larsson Desislav Iliev Christopher Byrne CharlieYJH bb-froggy Alexander Naumov tpm2-pkcs11-1.9.1/README.md0000644000175100017510000000423614535673717010475 # tpm2-pkcs11 [![Build Status](https://github.com/tpm2-software/tpm2-pkcs11/workflows/CI/badge.svg)](https://github.com/tpm2-software/tpm2-pkcs11/actions) [![Coverage Status](https://codecov.io/gh/tpm2-software/tpm2-pkcs11/branch/master/graph/badge.svg)](https://codecov.io/gh/tpm2-software/tpm2-pkcs11) [![Language grade: C/C++](https://img.shields.io/lgtm/grade/cpp/g/tpm2-software/tpm2-pkcs11.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/tpm2-software/tpm2-pkcs11/context:cpp) [![Language grade: Python](https://img.shields.io/lgtm/grade/python/g/tpm2-software/tpm2-pkcs11.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/tpm2-software/tpm2-pkcs11/context:python) [![Coverity Scan](src="https://img.shields.io/coverity/scan/16909.svg")](https://scan.coverity.com/projects/tpm2-pkcs11) PKCS #11 is a Public-Key Cryptography Standard that defines a standard method to access cryptographic services from tokens/ devices such as hardware security modules (HSM), smart cards, etc. In this project we intend to use a TPM2 device as the cryptographic token. # Getting Started * [Building](/docs/BUILDING.md) - How to get it to build * [Initializing](/docs/INITIALIZING.md) - How to configure it * [Installing](/docs/INSTALL.md) - How to install it # Example Usages * [SSH](/docs/SSH.md) - How to configure and use it with SSH. * [P11](/docs/P11.md) - How to configure and use it with various P11 components. * [PKCS11-TOOL](/docs/PKCS11_TOOL.md) - How to configure and use it with OpenSC's pkcs11-tool. * [EAP-TLS](/docs/EAP-TLS.md) - How to configure and use it for Wi-Fi authentication using EAP-TLS. * [INTEROPERABILITY](/docs/INTEROPERABILITY.md) - Configuration details for interoperability with [tss2-engine](https://github.com/tpm2-software/tpm2-tss-engine) and [tpm2-tools](https://github.com/tpm2-software/tpm2-tools) projects. Note, the *tpm2-tools* interoperability could cover other projects that use raw *marshalled* TPM 2.0 structures. # Advanced Knowledge * [Architecture](/docs/ARCHITECTURE.md) - Internal Overview * [DB Upgrades](/docs/DB_UPGRADE.md) - What happens on a DB Version Upgrade * [Release Process](/docs/RELEASE.md) - How releases are conducted tpm2-pkcs11-1.9.1/compile0000755000175100017510000001635014072725711010560 #! /bin/sh # Wrapper for compilers which do not understand '-c -o'. scriptversion=2018-03-07.03; # UTC # Copyright (C) 1999-2021 Free Software Foundation, Inc. # Written by Tom Tromey . # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2, or (at your option) # any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. # This file is maintained in Automake, please report # bugs to or send patches to # . nl=' ' # We need space, tab and new line, in precisely that order. Quoting is # there to prevent tools from complaining about whitespace usage. IFS=" "" $nl" file_conv= # func_file_conv build_file lazy # Convert a $build file to $host form and store it in $file # Currently only supports Windows hosts. If the determined conversion # type is listed in (the comma separated) LAZY, no conversion will # take place. func_file_conv () { file=$1 case $file in / | /[!/]*) # absolute file, and not a UNC file if test -z "$file_conv"; then # lazily determine how to convert abs files case `uname -s` in MINGW*) file_conv=mingw ;; CYGWIN* | MSYS*) file_conv=cygwin ;; *) file_conv=wine ;; esac fi case $file_conv/,$2, in *,$file_conv,*) ;; mingw/*) file=`cmd //C echo "$file " | sed -e 's/"\(.*\) " *$/\1/'` ;; cygwin/* | msys/*) file=`cygpath -m "$file" || echo "$file"` ;; wine/*) file=`winepath -w "$file" || echo "$file"` ;; esac ;; esac } # func_cl_dashL linkdir # Make cl look for libraries in LINKDIR func_cl_dashL () { func_file_conv "$1" if test -z "$lib_path"; then lib_path=$file else lib_path="$lib_path;$file" fi linker_opts="$linker_opts -LIBPATH:$file" } # func_cl_dashl library # Do a library search-path lookup for cl func_cl_dashl () { lib=$1 found=no save_IFS=$IFS IFS=';' for dir in $lib_path $LIB do IFS=$save_IFS if $shared && test -f "$dir/$lib.dll.lib"; then found=yes lib=$dir/$lib.dll.lib break fi if test -f "$dir/$lib.lib"; then found=yes lib=$dir/$lib.lib break fi if test -f "$dir/lib$lib.a"; then found=yes lib=$dir/lib$lib.a break fi done IFS=$save_IFS if test "$found" != yes; then lib=$lib.lib fi } # func_cl_wrapper cl arg... # Adjust compile command to suit cl func_cl_wrapper () { # Assume a capable shell lib_path= shared=: linker_opts= for arg do if test -n "$eat"; then eat= else case $1 in -o) # configure might choose to run compile as 'compile cc -o foo foo.c'. eat=1 case $2 in *.o | *.[oO][bB][jJ]) func_file_conv "$2" set x "$@" -Fo"$file" shift ;; *) func_file_conv "$2" set x "$@" -Fe"$file" shift ;; esac ;; -I) eat=1 func_file_conv "$2" mingw set x "$@" -I"$file" shift ;; -I*) func_file_conv "${1#-I}" mingw set x "$@" -I"$file" shift ;; -l) eat=1 func_cl_dashl "$2" set x "$@" "$lib" shift ;; -l*) func_cl_dashl "${1#-l}" set x "$@" "$lib" shift ;; -L) eat=1 func_cl_dashL "$2" ;; -L*) func_cl_dashL "${1#-L}" ;; -static) shared=false ;; -Wl,*) arg=${1#-Wl,} save_ifs="$IFS"; IFS=',' for flag in $arg; do IFS="$save_ifs" linker_opts="$linker_opts $flag" done IFS="$save_ifs" ;; -Xlinker) eat=1 linker_opts="$linker_opts $2" ;; -*) set x "$@" "$1" shift ;; *.cc | *.CC | *.cxx | *.CXX | *.[cC]++) func_file_conv "$1" set x "$@" -Tp"$file" shift ;; *.c | *.cpp | *.CPP | *.lib | *.LIB | *.Lib | *.OBJ | *.obj | *.[oO]) func_file_conv "$1" mingw set x "$@" "$file" shift ;; *) set x "$@" "$1" shift ;; esac fi shift done if test -n "$linker_opts"; then linker_opts="-link$linker_opts" fi exec "$@" $linker_opts exit 1 } eat= case $1 in '') echo "$0: No command. Try '$0 --help' for more information." 1>&2 exit 1; ;; -h | --h*) cat <<\EOF Usage: compile [--help] [--version] PROGRAM [ARGS] Wrapper for compilers which do not understand '-c -o'. Remove '-o dest.o' from ARGS, run PROGRAM with the remaining arguments, and rename the output as expected. If you are trying to build a whole package this is not the right script to run: please start by reading the file 'INSTALL'. Report bugs to . EOF exit $? ;; -v | --v*) echo "compile $scriptversion" exit $? ;; cl | *[/\\]cl | cl.exe | *[/\\]cl.exe | \ icl | *[/\\]icl | icl.exe | *[/\\]icl.exe ) func_cl_wrapper "$@" # Doesn't return... ;; esac ofile= cfile= for arg do if test -n "$eat"; then eat= else case $1 in -o) # configure might choose to run compile as 'compile cc -o foo foo.c'. # So we strip '-o arg' only if arg is an object. eat=1 case $2 in *.o | *.obj) ofile=$2 ;; *) set x "$@" -o "$2" shift ;; esac ;; *.c) cfile=$1 set x "$@" "$1" shift ;; *) set x "$@" "$1" shift ;; esac fi shift done if test -z "$ofile" || test -z "$cfile"; then # If no '-o' option was seen then we might have been invoked from a # pattern rule where we don't need one. That is ok -- this is a # normal compilation that the losing compiler can handle. If no # '.c' file was seen then we are probably linking. That is also # ok. exec "$@" fi # Name of file we expect compiler to create. cofile=`echo "$cfile" | sed 's|^.*[\\/]||; s|^[a-zA-Z]:||; s/\.c$/.o/'` # Create the lock directory. # Note: use '[/\\:.-]' here to ensure that we don't use the same name # that we are using for the .o file. Also, base the name on the expected # object file name, since that is what matters with a parallel build. lockdir=`echo "$cofile" | sed -e 's|[/\\:.-]|_|g'`.d while true; do if mkdir "$lockdir" >/dev/null 2>&1; then break fi sleep 1 done # FIXME: race condition here if user kills between mkdir and trap. trap "rmdir '$lockdir'; exit 1" 1 2 15 # Run the compile. "$@" ret=$? if test -f "$cofile"; then test "$cofile" = "$ofile" || mv "$cofile" "$ofile" elif test -f "${cofile}bj"; then test "${cofile}bj" = "$ofile" || mv "${cofile}bj" "$ofile" fi rmdir "$lockdir" exit $ret # Local Variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "scriptversion=" # time-stamp-format: "%:y-%02m-%02d.%02H" # time-stamp-time-zone: "UTC0" # time-stamp-end: "; # UTC" # End: tpm2-pkcs11-1.9.1/config.guess0000755000175100017510000014142314553330000011505 #!/usr/bin/sh # Attempt to guess a canonical system name. # Copyright 1992-2023 Free Software Foundation, Inc. # shellcheck disable=SC2006,SC2268 # see below for rationale timestamp='2023-06-23' # This file is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, see . # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that # program. This Exception is an additional permission under section 7 # of the GNU General Public License, version 3 ("GPLv3"). # # Originally written by Per Bothner; maintained since 2000 by Ben Elliston. # # You can get the latest version of this script from: # https://git.savannah.gnu.org/cgit/config.git/plain/config.guess # # Please send patches to . # The "shellcheck disable" line above the timestamp inhibits complaints # about features and limitations of the classic Bourne shell that were # superseded or lifted in POSIX. However, this script identifies a wide # variety of pre-POSIX systems that do not have POSIX shells at all, and # even some reasonably current systems (Solaris 10 as case-in-point) still # have a pre-POSIX /bin/sh. me=`echo "$0" | sed -e 's,.*/,,'` usage="\ Usage: $0 [OPTION] Output the configuration name of the system '$me' is run on. Options: -h, --help print this help, then exit -t, --time-stamp print date of last modification, then exit -v, --version print version number, then exit Report bugs and patches to ." version="\ GNU config.guess ($timestamp) Originally written by Per Bothner. Copyright 1992-2023 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." help=" Try '$me --help' for more information." # Parse command line while test $# -gt 0 ; do case $1 in --time-stamp | --time* | -t ) echo "$timestamp" ; exit ;; --version | -v ) echo "$version" ; exit ;; --help | --h* | -h ) echo "$usage"; exit ;; -- ) # Stop option processing shift; break ;; - ) # Use stdin as input. break ;; -* ) echo "$me: invalid option $1$help" >&2 exit 1 ;; * ) break ;; esac done if test $# != 0; then echo "$me: too many arguments$help" >&2 exit 1 fi # Just in case it came from the environment. GUESS= # CC_FOR_BUILD -- compiler used by this script. Note that the use of a # compiler to aid in system detection is discouraged as it requires # temporary files to be created and, as you can see below, it is a # headache to deal with in a portable fashion. # Historically, 'CC_FOR_BUILD' used to be named 'HOST_CC'. We still # use 'HOST_CC' if defined, but it is deprecated. # Portable tmp directory creation inspired by the Autoconf team. tmp= # shellcheck disable=SC2172 trap 'test -z "$tmp" || rm -fr "$tmp"' 0 1 2 13 15 set_cc_for_build() { # prevent multiple calls if $tmp is already set test "$tmp" && return 0 : "${TMPDIR=/tmp}" # shellcheck disable=SC2039,SC3028 { tmp=`(umask 077 && mktemp -d "$TMPDIR/cgXXXXXX") 2>/dev/null` && test -n "$tmp" && test -d "$tmp" ; } || { test -n "$RANDOM" && tmp=$TMPDIR/cg$$-$RANDOM && (umask 077 && mkdir "$tmp" 2>/dev/null) ; } || { tmp=$TMPDIR/cg-$$ && (umask 077 && mkdir "$tmp" 2>/dev/null) && echo "Warning: creating insecure temp directory" >&2 ; } || { echo "$me: cannot create a temporary directory in $TMPDIR" >&2 ; exit 1 ; } dummy=$tmp/dummy case ${CC_FOR_BUILD-},${HOST_CC-},${CC-} in ,,) echo "int x;" > "$dummy.c" for driver in cc gcc c89 c99 ; do if ($driver -c -o "$dummy.o" "$dummy.c") >/dev/null 2>&1 ; then CC_FOR_BUILD=$driver break fi done if test x"$CC_FOR_BUILD" = x ; then CC_FOR_BUILD=no_compiler_found fi ;; ,,*) CC_FOR_BUILD=$CC ;; ,*,*) CC_FOR_BUILD=$HOST_CC ;; esac } # This is needed to find uname on a Pyramid OSx when run in the BSD universe. # (ghazi@noc.rutgers.edu 1994-08-24) if test -f /.attbin/uname ; then PATH=$PATH:/.attbin ; export PATH fi UNAME_MACHINE=`(uname -m) 2>/dev/null` || UNAME_MACHINE=unknown UNAME_RELEASE=`(uname -r) 2>/dev/null` || UNAME_RELEASE=unknown UNAME_SYSTEM=`(uname -s) 2>/dev/null` || UNAME_SYSTEM=unknown UNAME_VERSION=`(uname -v) 2>/dev/null` || UNAME_VERSION=unknown case $UNAME_SYSTEM in Linux|GNU|GNU/*) LIBC=unknown set_cc_for_build cat <<-EOF > "$dummy.c" #include #if defined(__UCLIBC__) LIBC=uclibc #elif defined(__dietlibc__) LIBC=dietlibc #elif defined(__GLIBC__) LIBC=gnu #else #include /* First heuristic to detect musl libc. */ #ifdef __DEFINED_va_list LIBC=musl #endif #endif EOF cc_set_libc=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^LIBC' | sed 's, ,,g'` eval "$cc_set_libc" # Second heuristic to detect musl libc. if [ "$LIBC" = unknown ] && command -v ldd >/dev/null && ldd --version 2>&1 | grep -q ^musl; then LIBC=musl fi # If the system lacks a compiler, then just pick glibc. # We could probably try harder. if [ "$LIBC" = unknown ]; then LIBC=gnu fi ;; esac # Note: order is significant - the case branches are not exclusive. case $UNAME_MACHINE:$UNAME_SYSTEM:$UNAME_RELEASE:$UNAME_VERSION in *:NetBSD:*:*) # NetBSD (nbsd) targets should (where applicable) match one or # more of the tuples: *-*-netbsdelf*, *-*-netbsdaout*, # *-*-netbsdecoff* and *-*-netbsd*. For targets that recently # switched to ELF, *-*-netbsd* would select the old # object file format. This provides both forward # compatibility and a consistent mechanism for selecting the # object file format. # # Note: NetBSD doesn't particularly care about the vendor # portion of the name. We always set it to "unknown". UNAME_MACHINE_ARCH=`(uname -p 2>/dev/null || \ /sbin/sysctl -n hw.machine_arch 2>/dev/null || \ /usr/sbin/sysctl -n hw.machine_arch 2>/dev/null || \ echo unknown)` case $UNAME_MACHINE_ARCH in aarch64eb) machine=aarch64_be-unknown ;; armeb) machine=armeb-unknown ;; arm*) machine=arm-unknown ;; sh3el) machine=shl-unknown ;; sh3eb) machine=sh-unknown ;; sh5el) machine=sh5le-unknown ;; earmv*) arch=`echo "$UNAME_MACHINE_ARCH" | sed -e 's,^e\(armv[0-9]\).*$,\1,'` endian=`echo "$UNAME_MACHINE_ARCH" | sed -ne 's,^.*\(eb\)$,\1,p'` machine=${arch}${endian}-unknown ;; *) machine=$UNAME_MACHINE_ARCH-unknown ;; esac # The Operating System including object format, if it has switched # to ELF recently (or will in the future) and ABI. case $UNAME_MACHINE_ARCH in earm*) os=netbsdelf ;; arm*|i386|m68k|ns32k|sh3*|sparc|vax) set_cc_for_build if echo __ELF__ | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ELF__ then # Once all utilities can be ECOFF (netbsdecoff) or a.out (netbsdaout). # Return netbsd for either. FIX? os=netbsd else os=netbsdelf fi ;; *) os=netbsd ;; esac # Determine ABI tags. case $UNAME_MACHINE_ARCH in earm*) expr='s/^earmv[0-9]/-eabi/;s/eb$//' abi=`echo "$UNAME_MACHINE_ARCH" | sed -e "$expr"` ;; esac # The OS release # Debian GNU/NetBSD machines have a different userland, and # thus, need a distinct triplet. However, they do not need # kernel version information, so it can be replaced with a # suitable tag, in the style of linux-gnu. case $UNAME_VERSION in Debian*) release='-gnu' ;; *) release=`echo "$UNAME_RELEASE" | sed -e 's/[-_].*//' | cut -d. -f1,2` ;; esac # Since CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM: # contains redundant information, the shorter form: # CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM is used. GUESS=$machine-${os}${release}${abi-} ;; *:Bitrig:*:*) UNAME_MACHINE_ARCH=`arch | sed 's/Bitrig.//'` GUESS=$UNAME_MACHINE_ARCH-unknown-bitrig$UNAME_RELEASE ;; *:OpenBSD:*:*) UNAME_MACHINE_ARCH=`arch | sed 's/OpenBSD.//'` GUESS=$UNAME_MACHINE_ARCH-unknown-openbsd$UNAME_RELEASE ;; *:SecBSD:*:*) UNAME_MACHINE_ARCH=`arch | sed 's/SecBSD.//'` GUESS=$UNAME_MACHINE_ARCH-unknown-secbsd$UNAME_RELEASE ;; *:LibertyBSD:*:*) UNAME_MACHINE_ARCH=`arch | sed 's/^.*BSD\.//'` GUESS=$UNAME_MACHINE_ARCH-unknown-libertybsd$UNAME_RELEASE ;; *:MidnightBSD:*:*) GUESS=$UNAME_MACHINE-unknown-midnightbsd$UNAME_RELEASE ;; *:ekkoBSD:*:*) GUESS=$UNAME_MACHINE-unknown-ekkobsd$UNAME_RELEASE ;; *:SolidBSD:*:*) GUESS=$UNAME_MACHINE-unknown-solidbsd$UNAME_RELEASE ;; *:OS108:*:*) GUESS=$UNAME_MACHINE-unknown-os108_$UNAME_RELEASE ;; macppc:MirBSD:*:*) GUESS=powerpc-unknown-mirbsd$UNAME_RELEASE ;; *:MirBSD:*:*) GUESS=$UNAME_MACHINE-unknown-mirbsd$UNAME_RELEASE ;; *:Sortix:*:*) GUESS=$UNAME_MACHINE-unknown-sortix ;; *:Twizzler:*:*) GUESS=$UNAME_MACHINE-unknown-twizzler ;; *:Redox:*:*) GUESS=$UNAME_MACHINE-unknown-redox ;; mips:OSF1:*.*) GUESS=mips-dec-osf1 ;; alpha:OSF1:*:*) # Reset EXIT trap before exiting to avoid spurious non-zero exit code. trap '' 0 case $UNAME_RELEASE in *4.0) UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $3}'` ;; *5.*) UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $4}'` ;; esac # According to Compaq, /usr/sbin/psrinfo has been available on # OSF/1 and Tru64 systems produced since 1995. I hope that # covers most systems running today. This code pipes the CPU # types through head -n 1, so we only detect the type of CPU 0. ALPHA_CPU_TYPE=`/usr/sbin/psrinfo -v | sed -n -e 's/^ The alpha \(.*\) processor.*$/\1/p' | head -n 1` case $ALPHA_CPU_TYPE in "EV4 (21064)") UNAME_MACHINE=alpha ;; "EV4.5 (21064)") UNAME_MACHINE=alpha ;; "LCA4 (21066/21068)") UNAME_MACHINE=alpha ;; "EV5 (21164)") UNAME_MACHINE=alphaev5 ;; "EV5.6 (21164A)") UNAME_MACHINE=alphaev56 ;; "EV5.6 (21164PC)") UNAME_MACHINE=alphapca56 ;; "EV5.7 (21164PC)") UNAME_MACHINE=alphapca57 ;; "EV6 (21264)") UNAME_MACHINE=alphaev6 ;; "EV6.7 (21264A)") UNAME_MACHINE=alphaev67 ;; "EV6.8CB (21264C)") UNAME_MACHINE=alphaev68 ;; "EV6.8AL (21264B)") UNAME_MACHINE=alphaev68 ;; "EV6.8CX (21264D)") UNAME_MACHINE=alphaev68 ;; "EV6.9A (21264/EV69A)") UNAME_MACHINE=alphaev69 ;; "EV7 (21364)") UNAME_MACHINE=alphaev7 ;; "EV7.9 (21364A)") UNAME_MACHINE=alphaev79 ;; esac # A Pn.n version is a patched version. # A Vn.n version is a released version. # A Tn.n version is a released field test version. # A Xn.n version is an unreleased experimental baselevel. # 1.2 uses "1.2" for uname -r. OSF_REL=`echo "$UNAME_RELEASE" | sed -e 's/^[PVTX]//' | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz` GUESS=$UNAME_MACHINE-dec-osf$OSF_REL ;; Amiga*:UNIX_System_V:4.0:*) GUESS=m68k-unknown-sysv4 ;; *:[Aa]miga[Oo][Ss]:*:*) GUESS=$UNAME_MACHINE-unknown-amigaos ;; *:[Mm]orph[Oo][Ss]:*:*) GUESS=$UNAME_MACHINE-unknown-morphos ;; *:OS/390:*:*) GUESS=i370-ibm-openedition ;; *:z/VM:*:*) GUESS=s390-ibm-zvmoe ;; *:OS400:*:*) GUESS=powerpc-ibm-os400 ;; arm:RISC*:1.[012]*:*|arm:riscix:1.[012]*:*) GUESS=arm-acorn-riscix$UNAME_RELEASE ;; arm*:riscos:*:*|arm*:RISCOS:*:*) GUESS=arm-unknown-riscos ;; SR2?01:HI-UX/MPP:*:* | SR8000:HI-UX/MPP:*:*) GUESS=hppa1.1-hitachi-hiuxmpp ;; Pyramid*:OSx*:*:* | MIS*:OSx*:*:* | MIS*:SMP_DC-OSx*:*:*) # akee@wpdis03.wpafb.af.mil (Earle F. Ake) contributed MIS and NILE. case `(/bin/universe) 2>/dev/null` in att) GUESS=pyramid-pyramid-sysv3 ;; *) GUESS=pyramid-pyramid-bsd ;; esac ;; NILE*:*:*:dcosx) GUESS=pyramid-pyramid-svr4 ;; DRS?6000:unix:4.0:6*) GUESS=sparc-icl-nx6 ;; DRS?6000:UNIX_SV:4.2*:7* | DRS?6000:isis:4.2*:7*) case `/usr/bin/uname -p` in sparc) GUESS=sparc-icl-nx7 ;; esac ;; s390x:SunOS:*:*) SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'` GUESS=$UNAME_MACHINE-ibm-solaris2$SUN_REL ;; sun4H:SunOS:5.*:*) SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'` GUESS=sparc-hal-solaris2$SUN_REL ;; sun4*:SunOS:5.*:* | tadpole*:SunOS:5.*:*) SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'` GUESS=sparc-sun-solaris2$SUN_REL ;; i86pc:AuroraUX:5.*:* | i86xen:AuroraUX:5.*:*) GUESS=i386-pc-auroraux$UNAME_RELEASE ;; i86pc:SunOS:5.*:* | i86xen:SunOS:5.*:*) set_cc_for_build SUN_ARCH=i386 # If there is a compiler, see if it is configured for 64-bit objects. # Note that the Sun cc does not turn __LP64__ into 1 like gcc does. # This test works for both compilers. if test "$CC_FOR_BUILD" != no_compiler_found; then if (echo '#ifdef __amd64'; echo IS_64BIT_ARCH; echo '#endif') | \ (CCOPTS="" $CC_FOR_BUILD -m64 -E - 2>/dev/null) | \ grep IS_64BIT_ARCH >/dev/null then SUN_ARCH=x86_64 fi fi SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'` GUESS=$SUN_ARCH-pc-solaris2$SUN_REL ;; sun4*:SunOS:6*:*) # According to config.sub, this is the proper way to canonicalize # SunOS6. Hard to guess exactly what SunOS6 will be like, but # it's likely to be more like Solaris than SunOS4. SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'` GUESS=sparc-sun-solaris3$SUN_REL ;; sun4*:SunOS:*:*) case `/usr/bin/arch -k` in Series*|S4*) UNAME_RELEASE=`uname -v` ;; esac # Japanese Language versions have a version number like '4.1.3-JL'. SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/-/_/'` GUESS=sparc-sun-sunos$SUN_REL ;; sun3*:SunOS:*:*) GUESS=m68k-sun-sunos$UNAME_RELEASE ;; sun*:*:4.2BSD:*) UNAME_RELEASE=`(sed 1q /etc/motd | awk '{print substr($5,1,3)}') 2>/dev/null` test "x$UNAME_RELEASE" = x && UNAME_RELEASE=3 case `/bin/arch` in sun3) GUESS=m68k-sun-sunos$UNAME_RELEASE ;; sun4) GUESS=sparc-sun-sunos$UNAME_RELEASE ;; esac ;; aushp:SunOS:*:*) GUESS=sparc-auspex-sunos$UNAME_RELEASE ;; # The situation for MiNT is a little confusing. The machine name # can be virtually everything (everything which is not # "atarist" or "atariste" at least should have a processor # > m68000). The system name ranges from "MiNT" over "FreeMiNT" # to the lowercase version "mint" (or "freemint"). Finally # the system name "TOS" denotes a system which is actually not # MiNT. But MiNT is downward compatible to TOS, so this should # be no problem. atarist[e]:*MiNT:*:* | atarist[e]:*mint:*:* | atarist[e]:*TOS:*:*) GUESS=m68k-atari-mint$UNAME_RELEASE ;; atari*:*MiNT:*:* | atari*:*mint:*:* | atarist[e]:*TOS:*:*) GUESS=m68k-atari-mint$UNAME_RELEASE ;; *falcon*:*MiNT:*:* | *falcon*:*mint:*:* | *falcon*:*TOS:*:*) GUESS=m68k-atari-mint$UNAME_RELEASE ;; milan*:*MiNT:*:* | milan*:*mint:*:* | *milan*:*TOS:*:*) GUESS=m68k-milan-mint$UNAME_RELEASE ;; hades*:*MiNT:*:* | hades*:*mint:*:* | *hades*:*TOS:*:*) GUESS=m68k-hades-mint$UNAME_RELEASE ;; *:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*) GUESS=m68k-unknown-mint$UNAME_RELEASE ;; m68k:machten:*:*) GUESS=m68k-apple-machten$UNAME_RELEASE ;; powerpc:machten:*:*) GUESS=powerpc-apple-machten$UNAME_RELEASE ;; RISC*:Mach:*:*) GUESS=mips-dec-mach_bsd4.3 ;; RISC*:ULTRIX:*:*) GUESS=mips-dec-ultrix$UNAME_RELEASE ;; VAX*:ULTRIX*:*:*) GUESS=vax-dec-ultrix$UNAME_RELEASE ;; 2020:CLIX:*:* | 2430:CLIX:*:*) GUESS=clipper-intergraph-clix$UNAME_RELEASE ;; mips:*:*:UMIPS | mips:*:*:RISCos) set_cc_for_build sed 's/^ //' << EOF > "$dummy.c" #ifdef __cplusplus #include /* for printf() prototype */ int main (int argc, char *argv[]) { #else int main (argc, argv) int argc; char *argv[]; { #endif #if defined (host_mips) && defined (MIPSEB) #if defined (SYSTYPE_SYSV) printf ("mips-mips-riscos%ssysv\\n", argv[1]); exit (0); #endif #if defined (SYSTYPE_SVR4) printf ("mips-mips-riscos%ssvr4\\n", argv[1]); exit (0); #endif #if defined (SYSTYPE_BSD43) || defined(SYSTYPE_BSD) printf ("mips-mips-riscos%sbsd\\n", argv[1]); exit (0); #endif #endif exit (-1); } EOF $CC_FOR_BUILD -o "$dummy" "$dummy.c" && dummyarg=`echo "$UNAME_RELEASE" | sed -n 's/\([0-9]*\).*/\1/p'` && SYSTEM_NAME=`"$dummy" "$dummyarg"` && { echo "$SYSTEM_NAME"; exit; } GUESS=mips-mips-riscos$UNAME_RELEASE ;; Motorola:PowerMAX_OS:*:*) GUESS=powerpc-motorola-powermax ;; Motorola:*:4.3:PL8-*) GUESS=powerpc-harris-powermax ;; Night_Hawk:*:*:PowerMAX_OS | Synergy:PowerMAX_OS:*:*) GUESS=powerpc-harris-powermax ;; Night_Hawk:Power_UNIX:*:*) GUESS=powerpc-harris-powerunix ;; m88k:CX/UX:7*:*) GUESS=m88k-harris-cxux7 ;; m88k:*:4*:R4*) GUESS=m88k-motorola-sysv4 ;; m88k:*:3*:R3*) GUESS=m88k-motorola-sysv3 ;; AViiON:dgux:*:*) # DG/UX returns AViiON for all architectures UNAME_PROCESSOR=`/usr/bin/uname -p` if test "$UNAME_PROCESSOR" = mc88100 || test "$UNAME_PROCESSOR" = mc88110 then if test "$TARGET_BINARY_INTERFACE"x = m88kdguxelfx || \ test "$TARGET_BINARY_INTERFACE"x = x then GUESS=m88k-dg-dgux$UNAME_RELEASE else GUESS=m88k-dg-dguxbcs$UNAME_RELEASE fi else GUESS=i586-dg-dgux$UNAME_RELEASE fi ;; M88*:DolphinOS:*:*) # DolphinOS (SVR3) GUESS=m88k-dolphin-sysv3 ;; M88*:*:R3*:*) # Delta 88k system running SVR3 GUESS=m88k-motorola-sysv3 ;; XD88*:*:*:*) # Tektronix XD88 system running UTekV (SVR3) GUESS=m88k-tektronix-sysv3 ;; Tek43[0-9][0-9]:UTek:*:*) # Tektronix 4300 system running UTek (BSD) GUESS=m68k-tektronix-bsd ;; *:IRIX*:*:*) IRIX_REL=`echo "$UNAME_RELEASE" | sed -e 's/-/_/g'` GUESS=mips-sgi-irix$IRIX_REL ;; ????????:AIX?:[12].1:2) # AIX 2.2.1 or AIX 2.1.1 is RT/PC AIX. GUESS=romp-ibm-aix # uname -m gives an 8 hex-code CPU id ;; # Note that: echo "'`uname -s`'" gives 'AIX ' i*86:AIX:*:*) GUESS=i386-ibm-aix ;; ia64:AIX:*:*) if test -x /usr/bin/oslevel ; then IBM_REV=`/usr/bin/oslevel` else IBM_REV=$UNAME_VERSION.$UNAME_RELEASE fi GUESS=$UNAME_MACHINE-ibm-aix$IBM_REV ;; *:AIX:2:3) if grep bos325 /usr/include/stdio.h >/dev/null 2>&1; then set_cc_for_build sed 's/^ //' << EOF > "$dummy.c" #include main() { if (!__power_pc()) exit(1); puts("powerpc-ibm-aix3.2.5"); exit(0); } EOF if $CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"` then GUESS=$SYSTEM_NAME else GUESS=rs6000-ibm-aix3.2.5 fi elif grep bos324 /usr/include/stdio.h >/dev/null 2>&1; then GUESS=rs6000-ibm-aix3.2.4 else GUESS=rs6000-ibm-aix3.2 fi ;; *:AIX:*:[4567]) IBM_CPU_ID=`/usr/sbin/lsdev -C -c processor -S available | sed 1q | awk '{ print $1 }'` if /usr/sbin/lsattr -El "$IBM_CPU_ID" | grep ' POWER' >/dev/null 2>&1; then IBM_ARCH=rs6000 else IBM_ARCH=powerpc fi if test -x /usr/bin/lslpp ; then IBM_REV=`/usr/bin/lslpp -Lqc bos.rte.libc | \ awk -F: '{ print $3 }' | sed s/[0-9]*$/0/` else IBM_REV=$UNAME_VERSION.$UNAME_RELEASE fi GUESS=$IBM_ARCH-ibm-aix$IBM_REV ;; *:AIX:*:*) GUESS=rs6000-ibm-aix ;; ibmrt:4.4BSD:*|romp-ibm:4.4BSD:*) GUESS=romp-ibm-bsd4.4 ;; ibmrt:*BSD:*|romp-ibm:BSD:*) # covers RT/PC BSD and GUESS=romp-ibm-bsd$UNAME_RELEASE # 4.3 with uname added to ;; # report: romp-ibm BSD 4.3 *:BOSX:*:*) GUESS=rs6000-bull-bosx ;; DPX/2?00:B.O.S.:*:*) GUESS=m68k-bull-sysv3 ;; 9000/[34]??:4.3bsd:1.*:*) GUESS=m68k-hp-bsd ;; hp300:4.4BSD:*:* | 9000/[34]??:4.3bsd:2.*:*) GUESS=m68k-hp-bsd4.4 ;; 9000/[34678]??:HP-UX:*:*) HPUX_REV=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*.[0B]*//'` case $UNAME_MACHINE in 9000/31?) HP_ARCH=m68000 ;; 9000/[34]??) HP_ARCH=m68k ;; 9000/[678][0-9][0-9]) if test -x /usr/bin/getconf; then sc_cpu_version=`/usr/bin/getconf SC_CPU_VERSION 2>/dev/null` sc_kernel_bits=`/usr/bin/getconf SC_KERNEL_BITS 2>/dev/null` case $sc_cpu_version in 523) HP_ARCH=hppa1.0 ;; # CPU_PA_RISC1_0 528) HP_ARCH=hppa1.1 ;; # CPU_PA_RISC1_1 532) # CPU_PA_RISC2_0 case $sc_kernel_bits in 32) HP_ARCH=hppa2.0n ;; 64) HP_ARCH=hppa2.0w ;; '') HP_ARCH=hppa2.0 ;; # HP-UX 10.20 esac ;; esac fi if test "$HP_ARCH" = ""; then set_cc_for_build sed 's/^ //' << EOF > "$dummy.c" #define _HPUX_SOURCE #include #include int main () { #if defined(_SC_KERNEL_BITS) long bits = sysconf(_SC_KERNEL_BITS); #endif long cpu = sysconf (_SC_CPU_VERSION); switch (cpu) { case CPU_PA_RISC1_0: puts ("hppa1.0"); break; case CPU_PA_RISC1_1: puts ("hppa1.1"); break; case CPU_PA_RISC2_0: #if defined(_SC_KERNEL_BITS) switch (bits) { case 64: puts ("hppa2.0w"); break; case 32: puts ("hppa2.0n"); break; default: puts ("hppa2.0"); break; } break; #else /* !defined(_SC_KERNEL_BITS) */ puts ("hppa2.0"); break; #endif default: puts ("hppa1.0"); break; } exit (0); } EOF (CCOPTS="" $CC_FOR_BUILD -o "$dummy" "$dummy.c" 2>/dev/null) && HP_ARCH=`"$dummy"` test -z "$HP_ARCH" && HP_ARCH=hppa fi ;; esac if test "$HP_ARCH" = hppa2.0w then set_cc_for_build # hppa2.0w-hp-hpux* has a 64-bit kernel and a compiler generating # 32-bit code. hppa64-hp-hpux* has the same kernel and a compiler # generating 64-bit code. GNU and HP use different nomenclature: # # $ CC_FOR_BUILD=cc ./config.guess # => hppa2.0w-hp-hpux11.23 # $ CC_FOR_BUILD="cc +DA2.0w" ./config.guess # => hppa64-hp-hpux11.23 if echo __LP64__ | (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | grep -q __LP64__ then HP_ARCH=hppa2.0w else HP_ARCH=hppa64 fi fi GUESS=$HP_ARCH-hp-hpux$HPUX_REV ;; ia64:HP-UX:*:*) HPUX_REV=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*.[0B]*//'` GUESS=ia64-hp-hpux$HPUX_REV ;; 3050*:HI-UX:*:*) set_cc_for_build sed 's/^ //' << EOF > "$dummy.c" #include int main () { long cpu = sysconf (_SC_CPU_VERSION); /* The order matters, because CPU_IS_HP_MC68K erroneously returns true for CPU_PA_RISC1_0. CPU_IS_PA_RISC returns correct results, however. */ if (CPU_IS_PA_RISC (cpu)) { switch (cpu) { case CPU_PA_RISC1_0: puts ("hppa1.0-hitachi-hiuxwe2"); break; case CPU_PA_RISC1_1: puts ("hppa1.1-hitachi-hiuxwe2"); break; case CPU_PA_RISC2_0: puts ("hppa2.0-hitachi-hiuxwe2"); break; default: puts ("hppa-hitachi-hiuxwe2"); break; } } else if (CPU_IS_HP_MC68K (cpu)) puts ("m68k-hitachi-hiuxwe2"); else puts ("unknown-hitachi-hiuxwe2"); exit (0); } EOF $CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"` && { echo "$SYSTEM_NAME"; exit; } GUESS=unknown-hitachi-hiuxwe2 ;; 9000/7??:4.3bsd:*:* | 9000/8?[79]:4.3bsd:*:*) GUESS=hppa1.1-hp-bsd ;; 9000/8??:4.3bsd:*:*) GUESS=hppa1.0-hp-bsd ;; *9??*:MPE/iX:*:* | *3000*:MPE/iX:*:*) GUESS=hppa1.0-hp-mpeix ;; hp7??:OSF1:*:* | hp8?[79]:OSF1:*:*) GUESS=hppa1.1-hp-osf ;; hp8??:OSF1:*:*) GUESS=hppa1.0-hp-osf ;; i*86:OSF1:*:*) if test -x /usr/sbin/sysversion ; then GUESS=$UNAME_MACHINE-unknown-osf1mk else GUESS=$UNAME_MACHINE-unknown-osf1 fi ;; parisc*:Lites*:*:*) GUESS=hppa1.1-hp-lites ;; C1*:ConvexOS:*:* | convex:ConvexOS:C1*:*) GUESS=c1-convex-bsd ;; C2*:ConvexOS:*:* | convex:ConvexOS:C2*:*) if getsysinfo -f scalar_acc then echo c32-convex-bsd else echo c2-convex-bsd fi exit ;; C34*:ConvexOS:*:* | convex:ConvexOS:C34*:*) GUESS=c34-convex-bsd ;; C38*:ConvexOS:*:* | convex:ConvexOS:C38*:*) GUESS=c38-convex-bsd ;; C4*:ConvexOS:*:* | convex:ConvexOS:C4*:*) GUESS=c4-convex-bsd ;; CRAY*Y-MP:*:*:*) CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'` GUESS=ymp-cray-unicos$CRAY_REL ;; CRAY*[A-Z]90:*:*:*) echo "$UNAME_MACHINE"-cray-unicos"$UNAME_RELEASE" \ | sed -e 's/CRAY.*\([A-Z]90\)/\1/' \ -e y/ABCDEFGHIJKLMNOPQRSTUVWXYZ/abcdefghijklmnopqrstuvwxyz/ \ -e 's/\.[^.]*$/.X/' exit ;; CRAY*TS:*:*:*) CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'` GUESS=t90-cray-unicos$CRAY_REL ;; CRAY*T3E:*:*:*) CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'` GUESS=alphaev5-cray-unicosmk$CRAY_REL ;; CRAY*SV1:*:*:*) CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'` GUESS=sv1-cray-unicos$CRAY_REL ;; *:UNICOS/mp:*:*) CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'` GUESS=craynv-cray-unicosmp$CRAY_REL ;; F30[01]:UNIX_System_V:*:* | F700:UNIX_System_V:*:*) FUJITSU_PROC=`uname -m | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz` FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'` FUJITSU_REL=`echo "$UNAME_RELEASE" | sed -e 's/ /_/'` GUESS=${FUJITSU_PROC}-fujitsu-${FUJITSU_SYS}${FUJITSU_REL} ;; 5000:UNIX_System_V:4.*:*) FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'` FUJITSU_REL=`echo "$UNAME_RELEASE" | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/ /_/'` GUESS=sparc-fujitsu-${FUJITSU_SYS}${FUJITSU_REL} ;; i*86:BSD/386:*:* | i*86:BSD/OS:*:* | *:Ascend\ Embedded/OS:*:*) GUESS=$UNAME_MACHINE-pc-bsdi$UNAME_RELEASE ;; sparc*:BSD/OS:*:*) GUESS=sparc-unknown-bsdi$UNAME_RELEASE ;; *:BSD/OS:*:*) GUESS=$UNAME_MACHINE-unknown-bsdi$UNAME_RELEASE ;; arm:FreeBSD:*:*) UNAME_PROCESSOR=`uname -p` set_cc_for_build if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ARM_PCS_VFP then FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'` GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL-gnueabi else FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'` GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL-gnueabihf fi ;; *:FreeBSD:*:*) UNAME_PROCESSOR=`/usr/bin/uname -p` case $UNAME_PROCESSOR in amd64) UNAME_PROCESSOR=x86_64 ;; i386) UNAME_PROCESSOR=i586 ;; esac FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'` GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL ;; i*:CYGWIN*:*) GUESS=$UNAME_MACHINE-pc-cygwin ;; *:MINGW64*:*) GUESS=$UNAME_MACHINE-pc-mingw64 ;; *:MINGW*:*) GUESS=$UNAME_MACHINE-pc-mingw32 ;; *:MSYS*:*) GUESS=$UNAME_MACHINE-pc-msys ;; i*:PW*:*) GUESS=$UNAME_MACHINE-pc-pw32 ;; *:SerenityOS:*:*) GUESS=$UNAME_MACHINE-pc-serenity ;; *:Interix*:*) case $UNAME_MACHINE in x86) GUESS=i586-pc-interix$UNAME_RELEASE ;; authenticamd | genuineintel | EM64T) GUESS=x86_64-unknown-interix$UNAME_RELEASE ;; IA64) GUESS=ia64-unknown-interix$UNAME_RELEASE ;; esac ;; i*:UWIN*:*) GUESS=$UNAME_MACHINE-pc-uwin ;; amd64:CYGWIN*:*:* | x86_64:CYGWIN*:*:*) GUESS=x86_64-pc-cygwin ;; prep*:SunOS:5.*:*) SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'` GUESS=powerpcle-unknown-solaris2$SUN_REL ;; *:GNU:*:*) # the GNU system GNU_ARCH=`echo "$UNAME_MACHINE" | sed -e 's,[-/].*$,,'` GNU_REL=`echo "$UNAME_RELEASE" | sed -e 's,/.*$,,'` GUESS=$GNU_ARCH-unknown-$LIBC$GNU_REL ;; *:GNU/*:*:*) # other systems with GNU libc and userland GNU_SYS=`echo "$UNAME_SYSTEM" | sed 's,^[^/]*/,,' | tr "[:upper:]" "[:lower:]"` GNU_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'` GUESS=$UNAME_MACHINE-unknown-$GNU_SYS$GNU_REL-$LIBC ;; x86_64:[Mm]anagarm:*:*|i?86:[Mm]anagarm:*:*) GUESS="$UNAME_MACHINE-pc-managarm-mlibc" ;; *:[Mm]anagarm:*:*) GUESS="$UNAME_MACHINE-unknown-managarm-mlibc" ;; *:Minix:*:*) GUESS=$UNAME_MACHINE-unknown-minix ;; aarch64:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; aarch64_be:Linux:*:*) UNAME_MACHINE=aarch64_be GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; alpha:Linux:*:*) case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' /proc/cpuinfo 2>/dev/null` in EV5) UNAME_MACHINE=alphaev5 ;; EV56) UNAME_MACHINE=alphaev56 ;; PCA56) UNAME_MACHINE=alphapca56 ;; PCA57) UNAME_MACHINE=alphapca56 ;; EV6) UNAME_MACHINE=alphaev6 ;; EV67) UNAME_MACHINE=alphaev67 ;; EV68*) UNAME_MACHINE=alphaev68 ;; esac objdump --private-headers /bin/sh | grep -q ld.so.1 if test "$?" = 0 ; then LIBC=gnulibc1 ; fi GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; arc:Linux:*:* | arceb:Linux:*:* | arc32:Linux:*:* | arc64:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; arm*:Linux:*:*) set_cc_for_build if echo __ARM_EABI__ | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ARM_EABI__ then GUESS=$UNAME_MACHINE-unknown-linux-$LIBC else if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \ | grep -q __ARM_PCS_VFP then GUESS=$UNAME_MACHINE-unknown-linux-${LIBC}eabi else GUESS=$UNAME_MACHINE-unknown-linux-${LIBC}eabihf fi fi ;; avr32*:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; cris:Linux:*:*) GUESS=$UNAME_MACHINE-axis-linux-$LIBC ;; crisv32:Linux:*:*) GUESS=$UNAME_MACHINE-axis-linux-$LIBC ;; e2k:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; frv:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; hexagon:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; i*86:Linux:*:*) GUESS=$UNAME_MACHINE-pc-linux-$LIBC ;; ia64:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; k1om:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; loongarch32:Linux:*:* | loongarch64:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; m32r*:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; m68*:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; mips:Linux:*:* | mips64:Linux:*:*) set_cc_for_build IS_GLIBC=0 test x"${LIBC}" = xgnu && IS_GLIBC=1 sed 's/^ //' << EOF > "$dummy.c" #undef CPU #undef mips #undef mipsel #undef mips64 #undef mips64el #if ${IS_GLIBC} && defined(_ABI64) LIBCABI=gnuabi64 #else #if ${IS_GLIBC} && defined(_ABIN32) LIBCABI=gnuabin32 #else LIBCABI=${LIBC} #endif #endif #if ${IS_GLIBC} && defined(__mips64) && defined(__mips_isa_rev) && __mips_isa_rev>=6 CPU=mipsisa64r6 #else #if ${IS_GLIBC} && !defined(__mips64) && defined(__mips_isa_rev) && __mips_isa_rev>=6 CPU=mipsisa32r6 #else #if defined(__mips64) CPU=mips64 #else CPU=mips #endif #endif #endif #if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL) MIPS_ENDIAN=el #else #if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB) MIPS_ENDIAN= #else MIPS_ENDIAN= #endif #endif EOF cc_set_vars=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^CPU\|^MIPS_ENDIAN\|^LIBCABI'` eval "$cc_set_vars" test "x$CPU" != x && { echo "$CPU${MIPS_ENDIAN}-unknown-linux-$LIBCABI"; exit; } ;; mips64el:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; openrisc*:Linux:*:*) GUESS=or1k-unknown-linux-$LIBC ;; or32:Linux:*:* | or1k*:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; padre:Linux:*:*) GUESS=sparc-unknown-linux-$LIBC ;; parisc64:Linux:*:* | hppa64:Linux:*:*) GUESS=hppa64-unknown-linux-$LIBC ;; parisc:Linux:*:* | hppa:Linux:*:*) # Look for CPU level case `grep '^cpu[^a-z]*:' /proc/cpuinfo 2>/dev/null | cut -d' ' -f2` in PA7*) GUESS=hppa1.1-unknown-linux-$LIBC ;; PA8*) GUESS=hppa2.0-unknown-linux-$LIBC ;; *) GUESS=hppa-unknown-linux-$LIBC ;; esac ;; ppc64:Linux:*:*) GUESS=powerpc64-unknown-linux-$LIBC ;; ppc:Linux:*:*) GUESS=powerpc-unknown-linux-$LIBC ;; ppc64le:Linux:*:*) GUESS=powerpc64le-unknown-linux-$LIBC ;; ppcle:Linux:*:*) GUESS=powerpcle-unknown-linux-$LIBC ;; riscv32:Linux:*:* | riscv32be:Linux:*:* | riscv64:Linux:*:* | riscv64be:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; s390:Linux:*:* | s390x:Linux:*:*) GUESS=$UNAME_MACHINE-ibm-linux-$LIBC ;; sh64*:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; sh*:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; sparc:Linux:*:* | sparc64:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; tile*:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; vax:Linux:*:*) GUESS=$UNAME_MACHINE-dec-linux-$LIBC ;; x86_64:Linux:*:*) set_cc_for_build CPU=$UNAME_MACHINE LIBCABI=$LIBC if test "$CC_FOR_BUILD" != no_compiler_found; then ABI=64 sed 's/^ //' << EOF > "$dummy.c" #ifdef __i386__ ABI=x86 #else #ifdef __ILP32__ ABI=x32 #endif #endif EOF cc_set_abi=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^ABI' | sed 's, ,,g'` eval "$cc_set_abi" case $ABI in x86) CPU=i686 ;; x32) LIBCABI=${LIBC}x32 ;; esac fi GUESS=$CPU-pc-linux-$LIBCABI ;; xtensa*:Linux:*:*) GUESS=$UNAME_MACHINE-unknown-linux-$LIBC ;; i*86:DYNIX/ptx:4*:*) # ptx 4.0 does uname -s correctly, with DYNIX/ptx in there. # earlier versions are messed up and put the nodename in both # sysname and nodename. GUESS=i386-sequent-sysv4 ;; i*86:UNIX_SV:4.2MP:2.*) # Unixware is an offshoot of SVR4, but it has its own version # number series starting with 2... # I am not positive that other SVR4 systems won't match this, # I just have to hope. -- rms. # Use sysv4.2uw... so that sysv4* matches it. GUESS=$UNAME_MACHINE-pc-sysv4.2uw$UNAME_VERSION ;; i*86:OS/2:*:*) # If we were able to find 'uname', then EMX Unix compatibility # is probably installed. GUESS=$UNAME_MACHINE-pc-os2-emx ;; i*86:XTS-300:*:STOP) GUESS=$UNAME_MACHINE-unknown-stop ;; i*86:atheos:*:*) GUESS=$UNAME_MACHINE-unknown-atheos ;; i*86:syllable:*:*) GUESS=$UNAME_MACHINE-pc-syllable ;; i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.[02]*:*) GUESS=i386-unknown-lynxos$UNAME_RELEASE ;; i*86:*DOS:*:*) GUESS=$UNAME_MACHINE-pc-msdosdjgpp ;; i*86:*:4.*:*) UNAME_REL=`echo "$UNAME_RELEASE" | sed 's/\/MP$//'` if grep Novell /usr/include/link.h >/dev/null 2>/dev/null; then GUESS=$UNAME_MACHINE-univel-sysv$UNAME_REL else GUESS=$UNAME_MACHINE-pc-sysv$UNAME_REL fi ;; i*86:*:5:[678]*) # UnixWare 7.x, OpenUNIX and OpenServer 6. case `/bin/uname -X | grep "^Machine"` in *486*) UNAME_MACHINE=i486 ;; *Pentium) UNAME_MACHINE=i586 ;; *Pent*|*Celeron) UNAME_MACHINE=i686 ;; esac GUESS=$UNAME_MACHINE-unknown-sysv${UNAME_RELEASE}${UNAME_SYSTEM}${UNAME_VERSION} ;; i*86:*:3.2:*) if test -f /usr/options/cb.name; then UNAME_REL=`sed -n 's/.*Version //p' /dev/null >/dev/null ; then UNAME_REL=`(/bin/uname -X|grep Release|sed -e 's/.*= //')` (/bin/uname -X|grep i80486 >/dev/null) && UNAME_MACHINE=i486 (/bin/uname -X|grep '^Machine.*Pentium' >/dev/null) \ && UNAME_MACHINE=i586 (/bin/uname -X|grep '^Machine.*Pent *II' >/dev/null) \ && UNAME_MACHINE=i686 (/bin/uname -X|grep '^Machine.*Pentium Pro' >/dev/null) \ && UNAME_MACHINE=i686 GUESS=$UNAME_MACHINE-pc-sco$UNAME_REL else GUESS=$UNAME_MACHINE-pc-sysv32 fi ;; pc:*:*:*) # Left here for compatibility: # uname -m prints for DJGPP always 'pc', but it prints nothing about # the processor, so we play safe by assuming i586. # Note: whatever this is, it MUST be the same as what config.sub # prints for the "djgpp" host, or else GDB configure will decide that # this is a cross-build. GUESS=i586-pc-msdosdjgpp ;; Intel:Mach:3*:*) GUESS=i386-pc-mach3 ;; paragon:*:*:*) GUESS=i860-intel-osf1 ;; i860:*:4.*:*) # i860-SVR4 if grep Stardent /usr/include/sys/uadmin.h >/dev/null 2>&1 ; then GUESS=i860-stardent-sysv$UNAME_RELEASE # Stardent Vistra i860-SVR4 else # Add other i860-SVR4 vendors below as they are discovered. GUESS=i860-unknown-sysv$UNAME_RELEASE # Unknown i860-SVR4 fi ;; mini*:CTIX:SYS*5:*) # "miniframe" GUESS=m68010-convergent-sysv ;; mc68k:UNIX:SYSTEM5:3.51m) GUESS=m68k-convergent-sysv ;; M680?0:D-NIX:5.3:*) GUESS=m68k-diab-dnix ;; M68*:*:R3V[5678]*:*) test -r /sysV68 && { echo 'm68k-motorola-sysv'; exit; } ;; 3[345]??:*:4.0:3.0 | 3[34]??A:*:4.0:3.0 | 3[34]??,*:*:4.0:3.0 | 3[34]??/*:*:4.0:3.0 | 4400:*:4.0:3.0 | 4850:*:4.0:3.0 | SKA40:*:4.0:3.0 | SDS2:*:4.0:3.0 | SHG2:*:4.0:3.0 | S7501*:*:4.0:3.0) OS_REL='' test -r /etc/.relid \ && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid` /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && { echo i486-ncr-sysv4.3"$OS_REL"; exit; } /bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \ && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;; 3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*) /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && { echo i486-ncr-sysv4; exit; } ;; NCR*:*:4.2:* | MPRAS*:*:4.2:*) OS_REL='.3' test -r /etc/.relid \ && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid` /bin/uname -p 2>/dev/null | grep 86 >/dev/null \ && { echo i486-ncr-sysv4.3"$OS_REL"; exit; } /bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \ && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } /bin/uname -p 2>/dev/null | /bin/grep pteron >/dev/null \ && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;; m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*) GUESS=m68k-unknown-lynxos$UNAME_RELEASE ;; mc68030:UNIX_System_V:4.*:*) GUESS=m68k-atari-sysv4 ;; TSUNAMI:LynxOS:2.*:*) GUESS=sparc-unknown-lynxos$UNAME_RELEASE ;; rs6000:LynxOS:2.*:*) GUESS=rs6000-unknown-lynxos$UNAME_RELEASE ;; PowerPC:LynxOS:2.*:* | PowerPC:LynxOS:3.[01]*:* | PowerPC:LynxOS:4.[02]*:*) GUESS=powerpc-unknown-lynxos$UNAME_RELEASE ;; SM[BE]S:UNIX_SV:*:*) GUESS=mips-dde-sysv$UNAME_RELEASE ;; RM*:ReliantUNIX-*:*:*) GUESS=mips-sni-sysv4 ;; RM*:SINIX-*:*:*) GUESS=mips-sni-sysv4 ;; *:SINIX-*:*:*) if uname -p 2>/dev/null >/dev/null ; then UNAME_MACHINE=`(uname -p) 2>/dev/null` GUESS=$UNAME_MACHINE-sni-sysv4 else GUESS=ns32k-sni-sysv fi ;; PENTIUM:*:4.0*:*) # Unisys 'ClearPath HMP IX 4000' SVR4/MP effort # says GUESS=i586-unisys-sysv4 ;; *:UNIX_System_V:4*:FTX*) # From Gerald Hewes . # How about differentiating between stratus architectures? -djm GUESS=hppa1.1-stratus-sysv4 ;; *:*:*:FTX*) # From seanf@swdc.stratus.com. GUESS=i860-stratus-sysv4 ;; i*86:VOS:*:*) # From Paul.Green@stratus.com. GUESS=$UNAME_MACHINE-stratus-vos ;; *:VOS:*:*) # From Paul.Green@stratus.com. GUESS=hppa1.1-stratus-vos ;; mc68*:A/UX:*:*) GUESS=m68k-apple-aux$UNAME_RELEASE ;; news*:NEWS-OS:6*:*) GUESS=mips-sony-newsos6 ;; R[34]000:*System_V*:*:* | R4000:UNIX_SYSV:*:* | R*000:UNIX_SV:*:*) if test -d /usr/nec; then GUESS=mips-nec-sysv$UNAME_RELEASE else GUESS=mips-unknown-sysv$UNAME_RELEASE fi ;; BeBox:BeOS:*:*) # BeOS running on hardware made by Be, PPC only. GUESS=powerpc-be-beos ;; BeMac:BeOS:*:*) # BeOS running on Mac or Mac clone, PPC only. GUESS=powerpc-apple-beos ;; BePC:BeOS:*:*) # BeOS running on Intel PC compatible. GUESS=i586-pc-beos ;; BePC:Haiku:*:*) # Haiku running on Intel PC compatible. GUESS=i586-pc-haiku ;; ppc:Haiku:*:*) # Haiku running on Apple PowerPC GUESS=powerpc-apple-haiku ;; *:Haiku:*:*) # Haiku modern gcc (not bound by BeOS compat) GUESS=$UNAME_MACHINE-unknown-haiku ;; SX-4:SUPER-UX:*:*) GUESS=sx4-nec-superux$UNAME_RELEASE ;; SX-5:SUPER-UX:*:*) GUESS=sx5-nec-superux$UNAME_RELEASE ;; SX-6:SUPER-UX:*:*) GUESS=sx6-nec-superux$UNAME_RELEASE ;; SX-7:SUPER-UX:*:*) GUESS=sx7-nec-superux$UNAME_RELEASE ;; SX-8:SUPER-UX:*:*) GUESS=sx8-nec-superux$UNAME_RELEASE ;; SX-8R:SUPER-UX:*:*) GUESS=sx8r-nec-superux$UNAME_RELEASE ;; SX-ACE:SUPER-UX:*:*) GUESS=sxace-nec-superux$UNAME_RELEASE ;; Power*:Rhapsody:*:*) GUESS=powerpc-apple-rhapsody$UNAME_RELEASE ;; *:Rhapsody:*:*) GUESS=$UNAME_MACHINE-apple-rhapsody$UNAME_RELEASE ;; arm64:Darwin:*:*) GUESS=aarch64-apple-darwin$UNAME_RELEASE ;; *:Darwin:*:*) UNAME_PROCESSOR=`uname -p` case $UNAME_PROCESSOR in unknown) UNAME_PROCESSOR=powerpc ;; esac if command -v xcode-select > /dev/null 2> /dev/null && \ ! xcode-select --print-path > /dev/null 2> /dev/null ; then # Avoid executing cc if there is no toolchain installed as # cc will be a stub that puts up a graphical alert # prompting the user to install developer tools. CC_FOR_BUILD=no_compiler_found else set_cc_for_build fi if test "$CC_FOR_BUILD" != no_compiler_found; then if (echo '#ifdef __LP64__'; echo IS_64BIT_ARCH; echo '#endif') | \ (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \ grep IS_64BIT_ARCH >/dev/null then case $UNAME_PROCESSOR in i386) UNAME_PROCESSOR=x86_64 ;; powerpc) UNAME_PROCESSOR=powerpc64 ;; esac fi # On 10.4-10.6 one might compile for PowerPC via gcc -arch ppc if (echo '#ifdef __POWERPC__'; echo IS_PPC; echo '#endif') | \ (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \ grep IS_PPC >/dev/null then UNAME_PROCESSOR=powerpc fi elif test "$UNAME_PROCESSOR" = i386 ; then # uname -m returns i386 or x86_64 UNAME_PROCESSOR=$UNAME_MACHINE fi GUESS=$UNAME_PROCESSOR-apple-darwin$UNAME_RELEASE ;; *:procnto*:*:* | *:QNX:[0123456789]*:*) UNAME_PROCESSOR=`uname -p` if test "$UNAME_PROCESSOR" = x86; then UNAME_PROCESSOR=i386 UNAME_MACHINE=pc fi GUESS=$UNAME_PROCESSOR-$UNAME_MACHINE-nto-qnx$UNAME_RELEASE ;; *:QNX:*:4*) GUESS=i386-pc-qnx ;; NEO-*:NONSTOP_KERNEL:*:*) GUESS=neo-tandem-nsk$UNAME_RELEASE ;; NSE-*:NONSTOP_KERNEL:*:*) GUESS=nse-tandem-nsk$UNAME_RELEASE ;; NSR-*:NONSTOP_KERNEL:*:*) GUESS=nsr-tandem-nsk$UNAME_RELEASE ;; NSV-*:NONSTOP_KERNEL:*:*) GUESS=nsv-tandem-nsk$UNAME_RELEASE ;; NSX-*:NONSTOP_KERNEL:*:*) GUESS=nsx-tandem-nsk$UNAME_RELEASE ;; *:NonStop-UX:*:*) GUESS=mips-compaq-nonstopux ;; BS2000:POSIX*:*:*) GUESS=bs2000-siemens-sysv ;; DS/*:UNIX_System_V:*:*) GUESS=$UNAME_MACHINE-$UNAME_SYSTEM-$UNAME_RELEASE ;; *:Plan9:*:*) # "uname -m" is not consistent, so use $cputype instead. 386 # is converted to i386 for consistency with other x86 # operating systems. if test "${cputype-}" = 386; then UNAME_MACHINE=i386 elif test "x${cputype-}" != x; then UNAME_MACHINE=$cputype fi GUESS=$UNAME_MACHINE-unknown-plan9 ;; *:TOPS-10:*:*) GUESS=pdp10-unknown-tops10 ;; *:TENEX:*:*) GUESS=pdp10-unknown-tenex ;; KS10:TOPS-20:*:* | KL10:TOPS-20:*:* | TYPE4:TOPS-20:*:*) GUESS=pdp10-dec-tops20 ;; XKL-1:TOPS-20:*:* | TYPE5:TOPS-20:*:*) GUESS=pdp10-xkl-tops20 ;; *:TOPS-20:*:*) GUESS=pdp10-unknown-tops20 ;; *:ITS:*:*) GUESS=pdp10-unknown-its ;; SEI:*:*:SEIUX) GUESS=mips-sei-seiux$UNAME_RELEASE ;; *:DragonFly:*:*) DRAGONFLY_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'` GUESS=$UNAME_MACHINE-unknown-dragonfly$DRAGONFLY_REL ;; *:*VMS:*:*) UNAME_MACHINE=`(uname -p) 2>/dev/null` case $UNAME_MACHINE in A*) GUESS=alpha-dec-vms ;; I*) GUESS=ia64-dec-vms ;; V*) GUESS=vax-dec-vms ;; esac ;; *:XENIX:*:SysV) GUESS=i386-pc-xenix ;; i*86:skyos:*:*) SKYOS_REL=`echo "$UNAME_RELEASE" | sed -e 's/ .*$//'` GUESS=$UNAME_MACHINE-pc-skyos$SKYOS_REL ;; i*86:rdos:*:*) GUESS=$UNAME_MACHINE-pc-rdos ;; i*86:Fiwix:*:*) GUESS=$UNAME_MACHINE-pc-fiwix ;; *:AROS:*:*) GUESS=$UNAME_MACHINE-unknown-aros ;; x86_64:VMkernel:*:*) GUESS=$UNAME_MACHINE-unknown-esx ;; amd64:Isilon\ OneFS:*:*) GUESS=x86_64-unknown-onefs ;; *:Unleashed:*:*) GUESS=$UNAME_MACHINE-unknown-unleashed$UNAME_RELEASE ;; esac # Do we have a guess based on uname results? if test "x$GUESS" != x; then echo "$GUESS" exit fi # No uname command or uname output not recognized. set_cc_for_build cat > "$dummy.c" < #include #endif #if defined(ultrix) || defined(_ultrix) || defined(__ultrix) || defined(__ultrix__) #if defined (vax) || defined (__vax) || defined (__vax__) || defined(mips) || defined(__mips) || defined(__mips__) || defined(MIPS) || defined(__MIPS__) #include #if defined(_SIZE_T_) || defined(SIGLOST) #include #endif #endif #endif main () { #if defined (sony) #if defined (MIPSEB) /* BFD wants "bsd" instead of "newsos". Perhaps BFD should be changed, I don't know.... */ printf ("mips-sony-bsd\n"); exit (0); #else #include printf ("m68k-sony-newsos%s\n", #ifdef NEWSOS4 "4" #else "" #endif ); exit (0); #endif #endif #if defined (NeXT) #if !defined (__ARCHITECTURE__) #define __ARCHITECTURE__ "m68k" #endif int version; version=`(hostinfo | sed -n 's/.*NeXT Mach \([0-9]*\).*/\1/p') 2>/dev/null`; if (version < 4) printf ("%s-next-nextstep%d\n", __ARCHITECTURE__, version); else printf ("%s-next-openstep%d\n", __ARCHITECTURE__, version); exit (0); #endif #if defined (MULTIMAX) || defined (n16) #if defined (UMAXV) printf ("ns32k-encore-sysv\n"); exit (0); #else #if defined (CMU) printf ("ns32k-encore-mach\n"); exit (0); #else printf ("ns32k-encore-bsd\n"); exit (0); #endif #endif #endif #if defined (__386BSD__) printf ("i386-pc-bsd\n"); exit (0); #endif #if defined (sequent) #if defined (i386) printf ("i386-sequent-dynix\n"); exit (0); #endif #if defined (ns32000) printf ("ns32k-sequent-dynix\n"); exit (0); #endif #endif #if defined (_SEQUENT_) struct utsname un; uname(&un); if (strncmp(un.version, "V2", 2) == 0) { printf ("i386-sequent-ptx2\n"); exit (0); } if (strncmp(un.version, "V1", 2) == 0) { /* XXX is V1 correct? */ printf ("i386-sequent-ptx1\n"); exit (0); } printf ("i386-sequent-ptx\n"); exit (0); #endif #if defined (vax) #if !defined (ultrix) #include #if defined (BSD) #if BSD == 43 printf ("vax-dec-bsd4.3\n"); exit (0); #else #if BSD == 199006 printf ("vax-dec-bsd4.3reno\n"); exit (0); #else printf ("vax-dec-bsd\n"); exit (0); #endif #endif #else printf ("vax-dec-bsd\n"); exit (0); #endif #else #if defined(_SIZE_T_) || defined(SIGLOST) struct utsname un; uname (&un); printf ("vax-dec-ultrix%s\n", un.release); exit (0); #else printf ("vax-dec-ultrix\n"); exit (0); #endif #endif #endif #if defined(ultrix) || defined(_ultrix) || defined(__ultrix) || defined(__ultrix__) #if defined(mips) || defined(__mips) || defined(__mips__) || defined(MIPS) || defined(__MIPS__) #if defined(_SIZE_T_) || defined(SIGLOST) struct utsname *un; uname (&un); printf ("mips-dec-ultrix%s\n", un.release); exit (0); #else printf ("mips-dec-ultrix\n"); exit (0); #endif #endif #endif #if defined (alliant) && defined (i860) printf ("i860-alliant-bsd\n"); exit (0); #endif exit (1); } EOF $CC_FOR_BUILD -o "$dummy" "$dummy.c" 2>/dev/null && SYSTEM_NAME=`"$dummy"` && { echo "$SYSTEM_NAME"; exit; } # Apollos put the system type in the environment. test -d /usr/apollo && { echo "$ISP-apollo-$SYSTYPE"; exit; } echo "$0: unable to guess system type" >&2 case $UNAME_MACHINE:$UNAME_SYSTEM in mips:Linux | mips64:Linux) # If we got here on MIPS GNU/Linux, output extra information. cat >&2 <&2 <&2 </dev/null || echo unknown` uname -r = `(uname -r) 2>/dev/null || echo unknown` uname -s = `(uname -s) 2>/dev/null || echo unknown` uname -v = `(uname -v) 2>/dev/null || echo unknown` /usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null` /bin/uname -X = `(/bin/uname -X) 2>/dev/null` hostinfo = `(hostinfo) 2>/dev/null` /bin/universe = `(/bin/universe) 2>/dev/null` /usr/bin/arch -k = `(/usr/bin/arch -k) 2>/dev/null` /bin/arch = `(/bin/arch) 2>/dev/null` /usr/bin/oslevel = `(/usr/bin/oslevel) 2>/dev/null` /usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null` UNAME_MACHINE = "$UNAME_MACHINE" UNAME_RELEASE = "$UNAME_RELEASE" UNAME_SYSTEM = "$UNAME_SYSTEM" UNAME_VERSION = "$UNAME_VERSION" EOF fi exit 1 # Local variables: # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "timestamp='" # time-stamp-format: "%:y-%02m-%02d" # time-stamp-end: "'" # End: tpm2-pkcs11-1.9.1/config.sub0000755000175100017510000010572414553330000011154 #!/usr/bin/sh # Configuration validation subroutine script. # Copyright 1992-2023 Free Software Foundation, Inc. # shellcheck disable=SC2006,SC2268 # see below for rationale timestamp='2023-06-23' # This file is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, see . # # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that # program. This Exception is an additional permission under section 7 # of the GNU General Public License, version 3 ("GPLv3"). # Please send patches to . # # Configuration subroutine to validate and canonicalize a configuration type. # Supply the specified configuration type as an argument. # If it is invalid, we print an error message on stderr and exit with code 1. # Otherwise, we print the canonical config type on stdout and succeed. # You can get the latest version of this script from: # https://git.savannah.gnu.org/cgit/config.git/plain/config.sub # This file is supposed to be the same for all GNU packages # and recognize all the CPU types, system types and aliases # that are meaningful with *any* GNU software. # Each package is responsible for reporting which valid configurations # it does not support. The user should be able to distinguish # a failure to support a valid configuration from a meaningless # configuration. # The goal of this file is to map all the various variations of a given # machine specification into a single specification in the form: # CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM # or in some cases, the newer four-part form: # CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM # It is wrong to echo any other type of specification. # The "shellcheck disable" line above the timestamp inhibits complaints # about features and limitations of the classic Bourne shell that were # superseded or lifted in POSIX. However, this script identifies a wide # variety of pre-POSIX systems that do not have POSIX shells at all, and # even some reasonably current systems (Solaris 10 as case-in-point) still # have a pre-POSIX /bin/sh. me=`echo "$0" | sed -e 's,.*/,,'` usage="\ Usage: $0 [OPTION] CPU-MFR-OPSYS or ALIAS Canonicalize a configuration name. Options: -h, --help print this help, then exit -t, --time-stamp print date of last modification, then exit -v, --version print version number, then exit Report bugs and patches to ." version="\ GNU config.sub ($timestamp) Copyright 1992-2023 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." help=" Try '$me --help' for more information." # Parse command line while test $# -gt 0 ; do case $1 in --time-stamp | --time* | -t ) echo "$timestamp" ; exit ;; --version | -v ) echo "$version" ; exit ;; --help | --h* | -h ) echo "$usage"; exit ;; -- ) # Stop option processing shift; break ;; - ) # Use stdin as input. break ;; -* ) echo "$me: invalid option $1$help" >&2 exit 1 ;; *local*) # First pass through any local machine types. echo "$1" exit ;; * ) break ;; esac done case $# in 0) echo "$me: missing argument$help" >&2 exit 1;; 1) ;; *) echo "$me: too many arguments$help" >&2 exit 1;; esac # Split fields of configuration type # shellcheck disable=SC2162 saved_IFS=$IFS IFS="-" read field1 field2 field3 field4 <&2 exit 1 ;; *-*-*-*) basic_machine=$field1-$field2 basic_os=$field3-$field4 ;; *-*-*) # Ambiguous whether COMPANY is present, or skipped and KERNEL-OS is two # parts maybe_os=$field2-$field3 case $maybe_os in nto-qnx* | linux-* | uclinux-uclibc* \ | uclinux-gnu* | kfreebsd*-gnu* | knetbsd*-gnu* | netbsd*-gnu* \ | netbsd*-eabi* | kopensolaris*-gnu* | cloudabi*-eabi* \ | storm-chaos* | os2-emx* | rtmk-nova* | managarm-*) basic_machine=$field1 basic_os=$maybe_os ;; android-linux) basic_machine=$field1-unknown basic_os=linux-android ;; *) basic_machine=$field1-$field2 basic_os=$field3 ;; esac ;; *-*) # A lone config we happen to match not fitting any pattern case $field1-$field2 in decstation-3100) basic_machine=mips-dec basic_os= ;; *-*) # Second component is usually, but not always the OS case $field2 in # Prevent following clause from handling this valid os sun*os*) basic_machine=$field1 basic_os=$field2 ;; zephyr*) basic_machine=$field1-unknown basic_os=$field2 ;; # Manufacturers dec* | mips* | sequent* | encore* | pc533* | sgi* | sony* \ | att* | 7300* | 3300* | delta* | motorola* | sun[234]* \ | unicom* | ibm* | next | hp | isi* | apollo | altos* \ | convergent* | ncr* | news | 32* | 3600* | 3100* \ | hitachi* | c[123]* | convex* | sun | crds | omron* | dg \ | ultra | tti* | harris | dolphin | highlevel | gould \ | cbm | ns | masscomp | apple | axis | knuth | cray \ | microblaze* | sim | cisco \ | oki | wec | wrs | winbond) basic_machine=$field1-$field2 basic_os= ;; *) basic_machine=$field1 basic_os=$field2 ;; esac ;; esac ;; *) # Convert single-component short-hands not valid as part of # multi-component configurations. case $field1 in 386bsd) basic_machine=i386-pc basic_os=bsd ;; a29khif) basic_machine=a29k-amd basic_os=udi ;; adobe68k) basic_machine=m68010-adobe basic_os=scout ;; alliant) basic_machine=fx80-alliant basic_os= ;; altos | altos3068) basic_machine=m68k-altos basic_os= ;; am29k) basic_machine=a29k-none basic_os=bsd ;; amdahl) basic_machine=580-amdahl basic_os=sysv ;; amiga) basic_machine=m68k-unknown basic_os= ;; amigaos | amigados) basic_machine=m68k-unknown basic_os=amigaos ;; amigaunix | amix) basic_machine=m68k-unknown basic_os=sysv4 ;; apollo68) basic_machine=m68k-apollo basic_os=sysv ;; apollo68bsd) basic_machine=m68k-apollo basic_os=bsd ;; aros) basic_machine=i386-pc basic_os=aros ;; aux) basic_machine=m68k-apple basic_os=aux ;; balance) basic_machine=ns32k-sequent basic_os=dynix ;; blackfin) basic_machine=bfin-unknown basic_os=linux ;; cegcc) basic_machine=arm-unknown basic_os=cegcc ;; convex-c1) basic_machine=c1-convex basic_os=bsd ;; convex-c2) basic_machine=c2-convex basic_os=bsd ;; convex-c32) basic_machine=c32-convex basic_os=bsd ;; convex-c34) basic_machine=c34-convex basic_os=bsd ;; convex-c38) basic_machine=c38-convex basic_os=bsd ;; cray) basic_machine=j90-cray basic_os=unicos ;; crds | unos) basic_machine=m68k-crds basic_os= ;; da30) basic_machine=m68k-da30 basic_os= ;; decstation | pmax | pmin | dec3100 | decstatn) basic_machine=mips-dec basic_os= ;; delta88) basic_machine=m88k-motorola basic_os=sysv3 ;; dicos) basic_machine=i686-pc basic_os=dicos ;; djgpp) basic_machine=i586-pc basic_os=msdosdjgpp ;; ebmon29k) basic_machine=a29k-amd basic_os=ebmon ;; es1800 | OSE68k | ose68k | ose | OSE) basic_machine=m68k-ericsson basic_os=ose ;; gmicro) basic_machine=tron-gmicro basic_os=sysv ;; go32) basic_machine=i386-pc basic_os=go32 ;; h8300hms) basic_machine=h8300-hitachi basic_os=hms ;; h8300xray) basic_machine=h8300-hitachi basic_os=xray ;; h8500hms) basic_machine=h8500-hitachi basic_os=hms ;; harris) basic_machine=m88k-harris basic_os=sysv3 ;; hp300 | hp300hpux) basic_machine=m68k-hp basic_os=hpux ;; hp300bsd) basic_machine=m68k-hp basic_os=bsd ;; hppaosf) basic_machine=hppa1.1-hp basic_os=osf ;; hppro) basic_machine=hppa1.1-hp basic_os=proelf ;; i386mach) basic_machine=i386-mach basic_os=mach ;; isi68 | isi) basic_machine=m68k-isi basic_os=sysv ;; m68knommu) basic_machine=m68k-unknown basic_os=linux ;; magnum | m3230) basic_machine=mips-mips basic_os=sysv ;; merlin) basic_machine=ns32k-utek basic_os=sysv ;; mingw64) basic_machine=x86_64-pc basic_os=mingw64 ;; mingw32) basic_machine=i686-pc basic_os=mingw32 ;; mingw32ce) basic_machine=arm-unknown basic_os=mingw32ce ;; monitor) basic_machine=m68k-rom68k basic_os=coff ;; morphos) basic_machine=powerpc-unknown basic_os=morphos ;; moxiebox) basic_machine=moxie-unknown basic_os=moxiebox ;; msdos) basic_machine=i386-pc basic_os=msdos ;; msys) basic_machine=i686-pc basic_os=msys ;; mvs) basic_machine=i370-ibm basic_os=mvs ;; nacl) basic_machine=le32-unknown basic_os=nacl ;; ncr3000) basic_machine=i486-ncr basic_os=sysv4 ;; netbsd386) basic_machine=i386-pc basic_os=netbsd ;; netwinder) basic_machine=armv4l-rebel basic_os=linux ;; news | news700 | news800 | news900) basic_machine=m68k-sony basic_os=newsos ;; news1000) basic_machine=m68030-sony basic_os=newsos ;; necv70) basic_machine=v70-nec basic_os=sysv ;; nh3000) basic_machine=m68k-harris basic_os=cxux ;; nh[45]000) basic_machine=m88k-harris basic_os=cxux ;; nindy960) basic_machine=i960-intel basic_os=nindy ;; mon960) basic_machine=i960-intel basic_os=mon960 ;; nonstopux) basic_machine=mips-compaq basic_os=nonstopux ;; os400) basic_machine=powerpc-ibm basic_os=os400 ;; OSE68000 | ose68000) basic_machine=m68000-ericsson basic_os=ose ;; os68k) basic_machine=m68k-none basic_os=os68k ;; paragon) basic_machine=i860-intel basic_os=osf ;; parisc) basic_machine=hppa-unknown basic_os=linux ;; psp) basic_machine=mipsallegrexel-sony basic_os=psp ;; pw32) basic_machine=i586-unknown basic_os=pw32 ;; rdos | rdos64) basic_machine=x86_64-pc basic_os=rdos ;; rdos32) basic_machine=i386-pc basic_os=rdos ;; rom68k) basic_machine=m68k-rom68k basic_os=coff ;; sa29200) basic_machine=a29k-amd basic_os=udi ;; sei) basic_machine=mips-sei basic_os=seiux ;; sequent) basic_machine=i386-sequent basic_os= ;; sps7) basic_machine=m68k-bull basic_os=sysv2 ;; st2000) basic_machine=m68k-tandem basic_os= ;; stratus) basic_machine=i860-stratus basic_os=sysv4 ;; sun2) basic_machine=m68000-sun basic_os= ;; sun2os3) basic_machine=m68000-sun basic_os=sunos3 ;; sun2os4) basic_machine=m68000-sun basic_os=sunos4 ;; sun3) basic_machine=m68k-sun basic_os= ;; sun3os3) basic_machine=m68k-sun basic_os=sunos3 ;; sun3os4) basic_machine=m68k-sun basic_os=sunos4 ;; sun4) basic_machine=sparc-sun basic_os= ;; sun4os3) basic_machine=sparc-sun basic_os=sunos3 ;; sun4os4) basic_machine=sparc-sun basic_os=sunos4 ;; sun4sol2) basic_machine=sparc-sun basic_os=solaris2 ;; sun386 | sun386i | roadrunner) basic_machine=i386-sun basic_os= ;; sv1) basic_machine=sv1-cray basic_os=unicos ;; symmetry) basic_machine=i386-sequent basic_os=dynix ;; t3e) basic_machine=alphaev5-cray basic_os=unicos ;; t90) basic_machine=t90-cray basic_os=unicos ;; toad1) basic_machine=pdp10-xkl basic_os=tops20 ;; tpf) basic_machine=s390x-ibm basic_os=tpf ;; udi29k) basic_machine=a29k-amd basic_os=udi ;; ultra3) basic_machine=a29k-nyu basic_os=sym1 ;; v810 | necv810) basic_machine=v810-nec basic_os=none ;; vaxv) basic_machine=vax-dec basic_os=sysv ;; vms) basic_machine=vax-dec basic_os=vms ;; vsta) basic_machine=i386-pc basic_os=vsta ;; vxworks960) basic_machine=i960-wrs basic_os=vxworks ;; vxworks68) basic_machine=m68k-wrs basic_os=vxworks ;; vxworks29k) basic_machine=a29k-wrs basic_os=vxworks ;; xbox) basic_machine=i686-pc basic_os=mingw32 ;; ymp) basic_machine=ymp-cray basic_os=unicos ;; *) basic_machine=$1 basic_os= ;; esac ;; esac # Decode 1-component or ad-hoc basic machines case $basic_machine in # Here we handle the default manufacturer of certain CPU types. It is in # some cases the only manufacturer, in others, it is the most popular. w89k) cpu=hppa1.1 vendor=winbond ;; op50n) cpu=hppa1.1 vendor=oki ;; op60c) cpu=hppa1.1 vendor=oki ;; ibm*) cpu=i370 vendor=ibm ;; orion105) cpu=clipper vendor=highlevel ;; mac | mpw | mac-mpw) cpu=m68k vendor=apple ;; pmac | pmac-mpw) cpu=powerpc vendor=apple ;; # Recognize the various machine names and aliases which stand # for a CPU type and a company and sometimes even an OS. 3b1 | 7300 | 7300-att | att-7300 | pc7300 | safari | unixpc) cpu=m68000 vendor=att ;; 3b*) cpu=we32k vendor=att ;; bluegene*) cpu=powerpc vendor=ibm basic_os=cnk ;; decsystem10* | dec10*) cpu=pdp10 vendor=dec basic_os=tops10 ;; decsystem20* | dec20*) cpu=pdp10 vendor=dec basic_os=tops20 ;; delta | 3300 | motorola-3300 | motorola-delta \ | 3300-motorola | delta-motorola) cpu=m68k vendor=motorola ;; dpx2*) cpu=m68k vendor=bull basic_os=sysv3 ;; encore | umax | mmax) cpu=ns32k vendor=encore ;; elxsi) cpu=elxsi vendor=elxsi basic_os=${basic_os:-bsd} ;; fx2800) cpu=i860 vendor=alliant ;; genix) cpu=ns32k vendor=ns ;; h3050r* | hiux*) cpu=hppa1.1 vendor=hitachi basic_os=hiuxwe2 ;; hp3k9[0-9][0-9] | hp9[0-9][0-9]) cpu=hppa1.0 vendor=hp ;; hp9k2[0-9][0-9] | hp9k31[0-9]) cpu=m68000 vendor=hp ;; hp9k3[2-9][0-9]) cpu=m68k vendor=hp ;; hp9k6[0-9][0-9] | hp6[0-9][0-9]) cpu=hppa1.0 vendor=hp ;; hp9k7[0-79][0-9] | hp7[0-79][0-9]) cpu=hppa1.1 vendor=hp ;; hp9k78[0-9] | hp78[0-9]) # FIXME: really hppa2.0-hp cpu=hppa1.1 vendor=hp ;; hp9k8[67]1 | hp8[67]1 | hp9k80[24] | hp80[24] | hp9k8[78]9 | hp8[78]9 | hp9k893 | hp893) # FIXME: really hppa2.0-hp cpu=hppa1.1 vendor=hp ;; hp9k8[0-9][13679] | hp8[0-9][13679]) cpu=hppa1.1 vendor=hp ;; hp9k8[0-9][0-9] | hp8[0-9][0-9]) cpu=hppa1.0 vendor=hp ;; i*86v32) cpu=`echo "$1" | sed -e 's/86.*/86/'` vendor=pc basic_os=sysv32 ;; i*86v4*) cpu=`echo "$1" | sed -e 's/86.*/86/'` vendor=pc basic_os=sysv4 ;; i*86v) cpu=`echo "$1" | sed -e 's/86.*/86/'` vendor=pc basic_os=sysv ;; i*86sol2) cpu=`echo "$1" | sed -e 's/86.*/86/'` vendor=pc basic_os=solaris2 ;; j90 | j90-cray) cpu=j90 vendor=cray basic_os=${basic_os:-unicos} ;; iris | iris4d) cpu=mips vendor=sgi case $basic_os in irix*) ;; *) basic_os=irix4 ;; esac ;; miniframe) cpu=m68000 vendor=convergent ;; *mint | mint[0-9]* | *MiNT | *MiNT[0-9]*) cpu=m68k vendor=atari basic_os=mint ;; news-3600 | risc-news) cpu=mips vendor=sony basic_os=newsos ;; next | m*-next) cpu=m68k vendor=next case $basic_os in openstep*) ;; nextstep*) ;; ns2*) basic_os=nextstep2 ;; *) basic_os=nextstep3 ;; esac ;; np1) cpu=np1 vendor=gould ;; op50n-* | op60c-*) cpu=hppa1.1 vendor=oki basic_os=proelf ;; pa-hitachi) cpu=hppa1.1 vendor=hitachi basic_os=hiuxwe2 ;; pbd) cpu=sparc vendor=tti ;; pbb) cpu=m68k vendor=tti ;; pc532) cpu=ns32k vendor=pc532 ;; pn) cpu=pn vendor=gould ;; power) cpu=power vendor=ibm ;; ps2) cpu=i386 vendor=ibm ;; rm[46]00) cpu=mips vendor=siemens ;; rtpc | rtpc-*) cpu=romp vendor=ibm ;; sde) cpu=mipsisa32 vendor=sde basic_os=${basic_os:-elf} ;; simso-wrs) cpu=sparclite vendor=wrs basic_os=vxworks ;; tower | tower-32) cpu=m68k vendor=ncr ;; vpp*|vx|vx-*) cpu=f301 vendor=fujitsu ;; w65) cpu=w65 vendor=wdc ;; w89k-*) cpu=hppa1.1 vendor=winbond basic_os=proelf ;; none) cpu=none vendor=none ;; leon|leon[3-9]) cpu=sparc vendor=$basic_machine ;; leon-*|leon[3-9]-*) cpu=sparc vendor=`echo "$basic_machine" | sed 's/-.*//'` ;; *-*) # shellcheck disable=SC2162 saved_IFS=$IFS IFS="-" read cpu vendor <&2 exit 1 ;; esac ;; esac # Here we canonicalize certain aliases for manufacturers. case $vendor in digital*) vendor=dec ;; commodore*) vendor=cbm ;; *) ;; esac # Decode manufacturer-specific aliases for certain operating systems. if test x$basic_os != x then # First recognize some ad-hoc cases, or perhaps split kernel-os, or else just # set os. case $basic_os in gnu/linux*) kernel=linux os=`echo "$basic_os" | sed -e 's|gnu/linux|gnu|'` ;; os2-emx) kernel=os2 os=`echo "$basic_os" | sed -e 's|os2-emx|emx|'` ;; nto-qnx*) kernel=nto os=`echo "$basic_os" | sed -e 's|nto-qnx|qnx|'` ;; *-*) # shellcheck disable=SC2162 saved_IFS=$IFS IFS="-" read kernel os <&2 exit 1 ;; esac # As a final step for OS-related things, validate the OS-kernel combination # (given a valid OS), if there is a kernel. case $kernel-$os in linux-gnu* | linux-dietlibc* | linux-android* | linux-newlib* \ | linux-musl* | linux-relibc* | linux-uclibc* | linux-mlibc* ) ;; uclinux-uclibc* ) ;; managarm-mlibc* | managarm-kernel* ) ;; -dietlibc* | -newlib* | -musl* | -relibc* | -uclibc* | -mlibc* ) # These are just libc implementations, not actual OSes, and thus # require a kernel. echo "Invalid configuration '$1': libc '$os' needs explicit kernel." 1>&2 exit 1 ;; -kernel* ) echo "Invalid configuration '$1': '$os' needs explicit kernel." 1>&2 exit 1 ;; *-kernel* ) echo "Invalid configuration '$1': '$kernel' does not support '$os'." 1>&2 exit 1 ;; kfreebsd*-gnu* | kopensolaris*-gnu*) ;; vxworks-simlinux | vxworks-simwindows | vxworks-spe) ;; nto-qnx*) ;; os2-emx) ;; *-eabi* | *-gnueabi*) ;; -*) # Blank kernel with real OS is always fine. ;; *-*) echo "Invalid configuration '$1': Kernel '$kernel' not known to work with OS '$os'." 1>&2 exit 1 ;; esac # Here we handle the case where we know the os, and the CPU type, but not the # manufacturer. We pick the logical manufacturer. case $vendor in unknown) case $cpu-$os in *-riscix*) vendor=acorn ;; *-sunos*) vendor=sun ;; *-cnk* | *-aix*) vendor=ibm ;; *-beos*) vendor=be ;; *-hpux*) vendor=hp ;; *-mpeix*) vendor=hp ;; *-hiux*) vendor=hitachi ;; *-unos*) vendor=crds ;; *-dgux*) vendor=dg ;; *-luna*) vendor=omron ;; *-genix*) vendor=ns ;; *-clix*) vendor=intergraph ;; *-mvs* | *-opened*) vendor=ibm ;; *-os400*) vendor=ibm ;; s390-* | s390x-*) vendor=ibm ;; *-ptx*) vendor=sequent ;; *-tpf*) vendor=ibm ;; *-vxsim* | *-vxworks* | *-windiss*) vendor=wrs ;; *-aux*) vendor=apple ;; *-hms*) vendor=hitachi ;; *-mpw* | *-macos*) vendor=apple ;; *-*mint | *-mint[0-9]* | *-*MiNT | *-MiNT[0-9]*) vendor=atari ;; *-vos*) vendor=stratus ;; esac ;; esac echo "$cpu-$vendor-${kernel:+$kernel-}$os" exit # Local variables: # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "timestamp='" # time-stamp-format: "%:y-%02m-%02d" # time-stamp-end: "'" # End: tpm2-pkcs11-1.9.1/depcomp0000755000175100017510000005602014072725711010555 #! /bin/sh # depcomp - compile a program generating dependencies as side-effects scriptversion=2018-03-07.03; # UTC # Copyright (C) 1999-2021 Free Software Foundation, Inc. # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2, or (at your option) # any later version. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program. If not, see . # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. # Originally written by Alexandre Oliva . case $1 in '') echo "$0: No command. Try '$0 --help' for more information." 1>&2 exit 1; ;; -h | --h*) cat <<\EOF Usage: depcomp [--help] [--version] PROGRAM [ARGS] Run PROGRAMS ARGS to compile a file, generating dependencies as side-effects. Environment variables: depmode Dependency tracking mode. source Source file read by 'PROGRAMS ARGS'. object Object file output by 'PROGRAMS ARGS'. DEPDIR directory where to store dependencies. depfile Dependency file to output. tmpdepfile Temporary file to use when outputting dependencies. libtool Whether libtool is used (yes/no). Report bugs to . EOF exit $? ;; -v | --v*) echo "depcomp $scriptversion" exit $? ;; esac # Get the directory component of the given path, and save it in the # global variables '$dir'. Note that this directory component will # be either empty or ending with a '/' character. This is deliberate. set_dir_from () { case $1 in */*) dir=`echo "$1" | sed -e 's|/[^/]*$|/|'`;; *) dir=;; esac } # Get the suffix-stripped basename of the given path, and save it the # global variable '$base'. set_base_from () { base=`echo "$1" | sed -e 's|^.*/||' -e 's/\.[^.]*$//'` } # If no dependency file was actually created by the compiler invocation, # we still have to create a dummy depfile, to avoid errors with the # Makefile "include basename.Plo" scheme. make_dummy_depfile () { echo "#dummy" > "$depfile" } # Factor out some common post-processing of the generated depfile. # Requires the auxiliary global variable '$tmpdepfile' to be set. aix_post_process_depfile () { # If the compiler actually managed to produce a dependency file, # post-process it. if test -f "$tmpdepfile"; then # Each line is of the form 'foo.o: dependency.h'. # Do two passes, one to just change these to # $object: dependency.h # and one to simply output # dependency.h: # which is needed to avoid the deleted-header problem. { sed -e "s,^.*\.[$lower]*:,$object:," < "$tmpdepfile" sed -e "s,^.*\.[$lower]*:[$tab ]*,," -e 's,$,:,' < "$tmpdepfile" } > "$depfile" rm -f "$tmpdepfile" else make_dummy_depfile fi } # A tabulation character. tab=' ' # A newline character. nl=' ' # Character ranges might be problematic outside the C locale. # These definitions help. upper=ABCDEFGHIJKLMNOPQRSTUVWXYZ lower=abcdefghijklmnopqrstuvwxyz digits=0123456789 alpha=${upper}${lower} if test -z "$depmode" || test -z "$source" || test -z "$object"; then echo "depcomp: Variables source, object and depmode must be set" 1>&2 exit 1 fi # Dependencies for sub/bar.o or sub/bar.obj go into sub/.deps/bar.Po. depfile=${depfile-`echo "$object" | sed 's|[^\\/]*$|'${DEPDIR-.deps}'/&|;s|\.\([^.]*\)$|.P\1|;s|Pobj$|Po|'`} tmpdepfile=${tmpdepfile-`echo "$depfile" | sed 's/\.\([^.]*\)$/.T\1/'`} rm -f "$tmpdepfile" # Avoid interferences from the environment. gccflag= dashmflag= # Some modes work just like other modes, but use different flags. We # parameterize here, but still list the modes in the big case below, # to make depend.m4 easier to write. Note that we *cannot* use a case # here, because this file can only contain one case statement. if test "$depmode" = hp; then # HP compiler uses -M and no extra arg. gccflag=-M depmode=gcc fi if test "$depmode" = dashXmstdout; then # This is just like dashmstdout with a different argument. dashmflag=-xM depmode=dashmstdout fi cygpath_u="cygpath -u -f -" if test "$depmode" = msvcmsys; then # This is just like msvisualcpp but w/o cygpath translation. # Just convert the backslash-escaped backslashes to single forward # slashes to satisfy depend.m4 cygpath_u='sed s,\\\\,/,g' depmode=msvisualcpp fi if test "$depmode" = msvc7msys; then # This is just like msvc7 but w/o cygpath translation. # Just convert the backslash-escaped backslashes to single forward # slashes to satisfy depend.m4 cygpath_u='sed s,\\\\,/,g' depmode=msvc7 fi if test "$depmode" = xlc; then # IBM C/C++ Compilers xlc/xlC can output gcc-like dependency information. gccflag=-qmakedep=gcc,-MF depmode=gcc fi case "$depmode" in gcc3) ## gcc 3 implements dependency tracking that does exactly what ## we want. Yay! Note: for some reason libtool 1.4 doesn't like ## it if -MD -MP comes after the -MF stuff. Hmm. ## Unfortunately, FreeBSD c89 acceptance of flags depends upon ## the command line argument order; so add the flags where they ## appear in depend2.am. Note that the slowdown incurred here ## affects only configure: in makefiles, %FASTDEP% shortcuts this. for arg do case $arg in -c) set fnord "$@" -MT "$object" -MD -MP -MF "$tmpdepfile" "$arg" ;; *) set fnord "$@" "$arg" ;; esac shift # fnord shift # $arg done "$@" stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi mv "$tmpdepfile" "$depfile" ;; gcc) ## Note that this doesn't just cater to obsosete pre-3.x GCC compilers. ## but also to in-use compilers like IMB xlc/xlC and the HP C compiler. ## (see the conditional assignment to $gccflag above). ## There are various ways to get dependency output from gcc. Here's ## why we pick this rather obscure method: ## - Don't want to use -MD because we'd like the dependencies to end ## up in a subdir. Having to rename by hand is ugly. ## (We might end up doing this anyway to support other compilers.) ## - The DEPENDENCIES_OUTPUT environment variable makes gcc act like ## -MM, not -M (despite what the docs say). Also, it might not be ## supported by the other compilers which use the 'gcc' depmode. ## - Using -M directly means running the compiler twice (even worse ## than renaming). if test -z "$gccflag"; then gccflag=-MD, fi "$@" -Wp,"$gccflag$tmpdepfile" stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi rm -f "$depfile" echo "$object : \\" > "$depfile" # The second -e expression handles DOS-style file names with drive # letters. sed -e 's/^[^:]*: / /' \ -e 's/^['$alpha']:\/[^:]*: / /' < "$tmpdepfile" >> "$depfile" ## This next piece of magic avoids the "deleted header file" problem. ## The problem is that when a header file which appears in a .P file ## is deleted, the dependency causes make to die (because there is ## typically no way to rebuild the header). We avoid this by adding ## dummy dependencies for each header file. Too bad gcc doesn't do ## this for us directly. ## Some versions of gcc put a space before the ':'. On the theory ## that the space means something, we add a space to the output as ## well. hp depmode also adds that space, but also prefixes the VPATH ## to the object. Take care to not repeat it in the output. ## Some versions of the HPUX 10.20 sed can't process this invocation ## correctly. Breaking it into two sed invocations is a workaround. tr ' ' "$nl" < "$tmpdepfile" \ | sed -e 's/^\\$//' -e '/^$/d' -e "s|.*$object$||" -e '/:$/d' \ | sed -e 's/$/ :/' >> "$depfile" rm -f "$tmpdepfile" ;; hp) # This case exists only to let depend.m4 do its work. It works by # looking at the text of this script. This case will never be run, # since it is checked for above. exit 1 ;; sgi) if test "$libtool" = yes; then "$@" "-Wp,-MDupdate,$tmpdepfile" else "$@" -MDupdate "$tmpdepfile" fi stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi rm -f "$depfile" if test -f "$tmpdepfile"; then # yes, the sourcefile depend on other files echo "$object : \\" > "$depfile" # Clip off the initial element (the dependent). Don't try to be # clever and replace this with sed code, as IRIX sed won't handle # lines with more than a fixed number of characters (4096 in # IRIX 6.2 sed, 8192 in IRIX 6.5). We also remove comment lines; # the IRIX cc adds comments like '#:fec' to the end of the # dependency line. tr ' ' "$nl" < "$tmpdepfile" \ | sed -e 's/^.*\.o://' -e 's/#.*$//' -e '/^$/ d' \ | tr "$nl" ' ' >> "$depfile" echo >> "$depfile" # The second pass generates a dummy entry for each header file. tr ' ' "$nl" < "$tmpdepfile" \ | sed -e 's/^.*\.o://' -e 's/#.*$//' -e '/^$/ d' -e 's/$/:/' \ >> "$depfile" else make_dummy_depfile fi rm -f "$tmpdepfile" ;; xlc) # This case exists only to let depend.m4 do its work. It works by # looking at the text of this script. This case will never be run, # since it is checked for above. exit 1 ;; aix) # The C for AIX Compiler uses -M and outputs the dependencies # in a .u file. In older versions, this file always lives in the # current directory. Also, the AIX compiler puts '$object:' at the # start of each line; $object doesn't have directory information. # Version 6 uses the directory in both cases. set_dir_from "$object" set_base_from "$object" if test "$libtool" = yes; then tmpdepfile1=$dir$base.u tmpdepfile2=$base.u tmpdepfile3=$dir.libs/$base.u "$@" -Wc,-M else tmpdepfile1=$dir$base.u tmpdepfile2=$dir$base.u tmpdepfile3=$dir$base.u "$@" -M fi stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3" exit $stat fi for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3" do test -f "$tmpdepfile" && break done aix_post_process_depfile ;; tcc) # tcc (Tiny C Compiler) understand '-MD -MF file' since version 0.9.26 # FIXME: That version still under development at the moment of writing. # Make that this statement remains true also for stable, released # versions. # It will wrap lines (doesn't matter whether long or short) with a # trailing '\', as in: # # foo.o : \ # foo.c \ # foo.h \ # # It will put a trailing '\' even on the last line, and will use leading # spaces rather than leading tabs (at least since its commit 0394caf7 # "Emit spaces for -MD"). "$@" -MD -MF "$tmpdepfile" stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi rm -f "$depfile" # Each non-empty line is of the form 'foo.o : \' or ' dep.h \'. # We have to change lines of the first kind to '$object: \'. sed -e "s|.*:|$object :|" < "$tmpdepfile" > "$depfile" # And for each line of the second kind, we have to emit a 'dep.h:' # dummy dependency, to avoid the deleted-header problem. sed -n -e 's|^ *\(.*\) *\\$|\1:|p' < "$tmpdepfile" >> "$depfile" rm -f "$tmpdepfile" ;; ## The order of this option in the case statement is important, since the ## shell code in configure will try each of these formats in the order ## listed in this file. A plain '-MD' option would be understood by many ## compilers, so we must ensure this comes after the gcc and icc options. pgcc) # Portland's C compiler understands '-MD'. # Will always output deps to 'file.d' where file is the root name of the # source file under compilation, even if file resides in a subdirectory. # The object file name does not affect the name of the '.d' file. # pgcc 10.2 will output # foo.o: sub/foo.c sub/foo.h # and will wrap long lines using '\' : # foo.o: sub/foo.c ... \ # sub/foo.h ... \ # ... set_dir_from "$object" # Use the source, not the object, to determine the base name, since # that's sadly what pgcc will do too. set_base_from "$source" tmpdepfile=$base.d # For projects that build the same source file twice into different object # files, the pgcc approach of using the *source* file root name can cause # problems in parallel builds. Use a locking strategy to avoid stomping on # the same $tmpdepfile. lockdir=$base.d-lock trap " echo '$0: caught signal, cleaning up...' >&2 rmdir '$lockdir' exit 1 " 1 2 13 15 numtries=100 i=$numtries while test $i -gt 0; do # mkdir is a portable test-and-set. if mkdir "$lockdir" 2>/dev/null; then # This process acquired the lock. "$@" -MD stat=$? # Release the lock. rmdir "$lockdir" break else # If the lock is being held by a different process, wait # until the winning process is done or we timeout. while test -d "$lockdir" && test $i -gt 0; do sleep 1 i=`expr $i - 1` done fi i=`expr $i - 1` done trap - 1 2 13 15 if test $i -le 0; then echo "$0: failed to acquire lock after $numtries attempts" >&2 echo "$0: check lockdir '$lockdir'" >&2 exit 1 fi if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi rm -f "$depfile" # Each line is of the form `foo.o: dependent.h', # or `foo.o: dep1.h dep2.h \', or ` dep3.h dep4.h \'. # Do two passes, one to just change these to # `$object: dependent.h' and one to simply `dependent.h:'. sed "s,^[^:]*:,$object :," < "$tmpdepfile" > "$depfile" # Some versions of the HPUX 10.20 sed can't process this invocation # correctly. Breaking it into two sed invocations is a workaround. sed 's,^[^:]*: \(.*\)$,\1,;s/^\\$//;/^$/d;/:$/d' < "$tmpdepfile" \ | sed -e 's/$/ :/' >> "$depfile" rm -f "$tmpdepfile" ;; hp2) # The "hp" stanza above does not work with aCC (C++) and HP's ia64 # compilers, which have integrated preprocessors. The correct option # to use with these is +Maked; it writes dependencies to a file named # 'foo.d', which lands next to the object file, wherever that # happens to be. # Much of this is similar to the tru64 case; see comments there. set_dir_from "$object" set_base_from "$object" if test "$libtool" = yes; then tmpdepfile1=$dir$base.d tmpdepfile2=$dir.libs/$base.d "$@" -Wc,+Maked else tmpdepfile1=$dir$base.d tmpdepfile2=$dir$base.d "$@" +Maked fi stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile1" "$tmpdepfile2" exit $stat fi for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2" do test -f "$tmpdepfile" && break done if test -f "$tmpdepfile"; then sed -e "s,^.*\.[$lower]*:,$object:," "$tmpdepfile" > "$depfile" # Add 'dependent.h:' lines. sed -ne '2,${ s/^ *// s/ \\*$// s/$/:/ p }' "$tmpdepfile" >> "$depfile" else make_dummy_depfile fi rm -f "$tmpdepfile" "$tmpdepfile2" ;; tru64) # The Tru64 compiler uses -MD to generate dependencies as a side # effect. 'cc -MD -o foo.o ...' puts the dependencies into 'foo.o.d'. # At least on Alpha/Redhat 6.1, Compaq CCC V6.2-504 seems to put # dependencies in 'foo.d' instead, so we check for that too. # Subdirectories are respected. set_dir_from "$object" set_base_from "$object" if test "$libtool" = yes; then # Libtool generates 2 separate objects for the 2 libraries. These # two compilations output dependencies in $dir.libs/$base.o.d and # in $dir$base.o.d. We have to check for both files, because # one of the two compilations can be disabled. We should prefer # $dir$base.o.d over $dir.libs/$base.o.d because the latter is # automatically cleaned when .libs/ is deleted, while ignoring # the former would cause a distcleancheck panic. tmpdepfile1=$dir$base.o.d # libtool 1.5 tmpdepfile2=$dir.libs/$base.o.d # Likewise. tmpdepfile3=$dir.libs/$base.d # Compaq CCC V6.2-504 "$@" -Wc,-MD else tmpdepfile1=$dir$base.d tmpdepfile2=$dir$base.d tmpdepfile3=$dir$base.d "$@" -MD fi stat=$? if test $stat -ne 0; then rm -f "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3" exit $stat fi for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3" do test -f "$tmpdepfile" && break done # Same post-processing that is required for AIX mode. aix_post_process_depfile ;; msvc7) if test "$libtool" = yes; then showIncludes=-Wc,-showIncludes else showIncludes=-showIncludes fi "$@" $showIncludes > "$tmpdepfile" stat=$? grep -v '^Note: including file: ' "$tmpdepfile" if test $stat -ne 0; then rm -f "$tmpdepfile" exit $stat fi rm -f "$depfile" echo "$object : \\" > "$depfile" # The first sed program below extracts the file names and escapes # backslashes for cygpath. The second sed program outputs the file # name when reading, but also accumulates all include files in the # hold buffer in order to output them again at the end. This only # works with sed implementations that can handle large buffers. sed < "$tmpdepfile" -n ' /^Note: including file: *\(.*\)/ { s//\1/ s/\\/\\\\/g p }' | $cygpath_u | sort -u | sed -n ' s/ /\\ /g s/\(.*\)/'"$tab"'\1 \\/p s/.\(.*\) \\/\1:/ H $ { s/.*/'"$tab"'/ G p }' >> "$depfile" echo >> "$depfile" # make sure the fragment doesn't end with a backslash rm -f "$tmpdepfile" ;; msvc7msys) # This case exists only to let depend.m4 do its work. It works by # looking at the text of this script. This case will never be run, # since it is checked for above. exit 1 ;; #nosideeffect) # This comment above is used by automake to tell side-effect # dependency tracking mechanisms from slower ones. dashmstdout) # Important note: in order to support this mode, a compiler *must* # always write the preprocessed file to stdout, regardless of -o. "$@" || exit $? # Remove the call to Libtool. if test "$libtool" = yes; then while test "X$1" != 'X--mode=compile'; do shift done shift fi # Remove '-o $object'. IFS=" " for arg do case $arg in -o) shift ;; $object) shift ;; *) set fnord "$@" "$arg" shift # fnord shift # $arg ;; esac done test -z "$dashmflag" && dashmflag=-M # Require at least two characters before searching for ':' # in the target name. This is to cope with DOS-style filenames: # a dependency such as 'c:/foo/bar' could be seen as target 'c' otherwise. "$@" $dashmflag | sed "s|^[$tab ]*[^:$tab ][^:][^:]*:[$tab ]*|$object: |" > "$tmpdepfile" rm -f "$depfile" cat < "$tmpdepfile" > "$depfile" # Some versions of the HPUX 10.20 sed can't process this sed invocation # correctly. Breaking it into two sed invocations is a workaround. tr ' ' "$nl" < "$tmpdepfile" \ | sed -e 's/^\\$//' -e '/^$/d' -e '/:$/d' \ | sed -e 's/$/ :/' >> "$depfile" rm -f "$tmpdepfile" ;; dashXmstdout) # This case only exists to satisfy depend.m4. It is never actually # run, as this mode is specially recognized in the preamble. exit 1 ;; makedepend) "$@" || exit $? # Remove any Libtool call if test "$libtool" = yes; then while test "X$1" != 'X--mode=compile'; do shift done shift fi # X makedepend shift cleared=no eat=no for arg do case $cleared in no) set ""; shift cleared=yes ;; esac if test $eat = yes; then eat=no continue fi case "$arg" in -D*|-I*) set fnord "$@" "$arg"; shift ;; # Strip any option that makedepend may not understand. Remove # the object too, otherwise makedepend will parse it as a source file. -arch) eat=yes ;; -*|$object) ;; *) set fnord "$@" "$arg"; shift ;; esac done obj_suffix=`echo "$object" | sed 's/^.*\././'` touch "$tmpdepfile" ${MAKEDEPEND-makedepend} -o"$obj_suffix" -f"$tmpdepfile" "$@" rm -f "$depfile" # makedepend may prepend the VPATH from the source file name to the object. # No need to regex-escape $object, excess matching of '.' is harmless. sed "s|^.*\($object *:\)|\1|" "$tmpdepfile" > "$depfile" # Some versions of the HPUX 10.20 sed can't process the last invocation # correctly. Breaking it into two sed invocations is a workaround. sed '1,2d' "$tmpdepfile" \ | tr ' ' "$nl" \ | sed -e 's/^\\$//' -e '/^$/d' -e '/:$/d' \ | sed -e 's/$/ :/' >> "$depfile" rm -f "$tmpdepfile" "$tmpdepfile".bak ;; cpp) # Important note: in order to support this mode, a compiler *must* # always write the preprocessed file to stdout. "$@" || exit $? # Remove the call to Libtool. if test "$libtool" = yes; then while test "X$1" != 'X--mode=compile'; do shift done shift fi # Remove '-o $object'. IFS=" " for arg do case $arg in -o) shift ;; $object) shift ;; *) set fnord "$@" "$arg" shift # fnord shift # $arg ;; esac done "$@" -E \ | sed -n -e '/^# [0-9][0-9]* "\([^"]*\)".*/ s:: \1 \\:p' \ -e '/^#line [0-9][0-9]* "\([^"]*\)".*/ s:: \1 \\:p' \ | sed '$ s: \\$::' > "$tmpdepfile" rm -f "$depfile" echo "$object : \\" > "$depfile" cat < "$tmpdepfile" >> "$depfile" sed < "$tmpdepfile" '/^$/d;s/^ //;s/ \\$//;s/$/ :/' >> "$depfile" rm -f "$tmpdepfile" ;; msvisualcpp) # Important note: in order to support this mode, a compiler *must* # always write the preprocessed file to stdout. "$@" || exit $? # Remove the call to Libtool. if test "$libtool" = yes; then while test "X$1" != 'X--mode=compile'; do shift done shift fi IFS=" " for arg do case "$arg" in -o) shift ;; $object) shift ;; "-Gm"|"/Gm"|"-Gi"|"/Gi"|"-ZI"|"/ZI") set fnord "$@" shift shift ;; *) set fnord "$@" "$arg" shift shift ;; esac done "$@" -E 2>/dev/null | sed -n '/^#line [0-9][0-9]* "\([^"]*\)"/ s::\1:p' | $cygpath_u | sort -u > "$tmpdepfile" rm -f "$depfile" echo "$object : \\" > "$depfile" sed < "$tmpdepfile" -n -e 's% %\\ %g' -e '/^\(.*\)$/ s::'"$tab"'\1 \\:p' >> "$depfile" echo "$tab" >> "$depfile" sed < "$tmpdepfile" -n -e 's% %\\ %g' -e '/^\(.*\)$/ s::\1\::p' >> "$depfile" rm -f "$tmpdepfile" ;; msvcmsys) # This case exists only to let depend.m4 do its work. It works by # looking at the text of this script. This case will never be run, # since it is checked for above. exit 1 ;; none) exec "$@" ;; *) echo "Unknown depmode $depmode" 1>&2 exit 1 ;; esac exit 0 # Local Variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "scriptversion=" # time-stamp-format: "%:y-%02m-%02d.%02H" # time-stamp-time-zone: "UTC0" # time-stamp-end: "; # UTC" # End: tpm2-pkcs11-1.9.1/install-sh0000755000175100017510000003577613753651557011236 #!/bin/sh # install - install a program, script, or datafile scriptversion=2020-11-14.01; # UTC # This originates from X11R5 (mit/util/scripts/install.sh), which was # later released in X11R6 (xc/config/util/install.sh) with the # following copyright and license. # # Copyright (C) 1994 X Consortium # # Permission is hereby granted, free of charge, to any person obtaining a copy # of this software and associated documentation files (the "Software"), to # deal in the Software without restriction, including without limitation the # rights to use, copy, modify, merge, publish, distribute, sublicense, and/or # sell copies of the Software, and to permit persons to whom the Software is # furnished to do so, subject to the following conditions: # # The above copyright notice and this permission notice shall be included in # all copies or substantial portions of the Software. # # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, # FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE # X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN # AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNEC- # TION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. # # Except as contained in this notice, the name of the X Consortium shall not # be used in advertising or otherwise to promote the sale, use or other deal- # ings in this Software without prior written authorization from the X Consor- # tium. # # # FSF changes to this file are in the public domain. # # Calling this script install-sh is preferred over install.sh, to prevent # 'make' implicit rules from creating a file called install from it # when there is no Makefile. # # This script is compatible with the BSD install script, but was written # from scratch. tab=' ' nl=' ' IFS=" $tab$nl" # Set DOITPROG to "echo" to test this script. doit=${DOITPROG-} doit_exec=${doit:-exec} # Put in absolute file names if you don't have them in your path; # or use environment vars. chgrpprog=${CHGRPPROG-chgrp} chmodprog=${CHMODPROG-chmod} chownprog=${CHOWNPROG-chown} cmpprog=${CMPPROG-cmp} cpprog=${CPPROG-cp} mkdirprog=${MKDIRPROG-mkdir} mvprog=${MVPROG-mv} rmprog=${RMPROG-rm} stripprog=${STRIPPROG-strip} posix_mkdir= # Desired mode of installed file. mode=0755 # Create dirs (including intermediate dirs) using mode 755. # This is like GNU 'install' as of coreutils 8.32 (2020). mkdir_umask=22 backupsuffix= chgrpcmd= chmodcmd=$chmodprog chowncmd= mvcmd=$mvprog rmcmd="$rmprog -f" stripcmd= src= dst= dir_arg= dst_arg= copy_on_change=false is_target_a_directory=possibly usage="\ Usage: $0 [OPTION]... [-T] SRCFILE DSTFILE or: $0 [OPTION]... SRCFILES... DIRECTORY or: $0 [OPTION]... -t DIRECTORY SRCFILES... or: $0 [OPTION]... -d DIRECTORIES... In the 1st form, copy SRCFILE to DSTFILE. In the 2nd and 3rd, copy all SRCFILES to DIRECTORY. In the 4th, create DIRECTORIES. Options: --help display this help and exit. --version display version info and exit. -c (ignored) -C install only if different (preserve data modification time) -d create directories instead of installing files. -g GROUP $chgrpprog installed files to GROUP. -m MODE $chmodprog installed files to MODE. -o USER $chownprog installed files to USER. -p pass -p to $cpprog. -s $stripprog installed files. -S SUFFIX attempt to back up existing files, with suffix SUFFIX. -t DIRECTORY install into DIRECTORY. -T report an error if DSTFILE is a directory. Environment variables override the default commands: CHGRPPROG CHMODPROG CHOWNPROG CMPPROG CPPROG MKDIRPROG MVPROG RMPROG STRIPPROG By default, rm is invoked with -f; when overridden with RMPROG, it's up to you to specify -f if you want it. If -S is not specified, no backups are attempted. Email bug reports to bug-automake@gnu.org. Automake home page: https://www.gnu.org/software/automake/ " while test $# -ne 0; do case $1 in -c) ;; -C) copy_on_change=true;; -d) dir_arg=true;; -g) chgrpcmd="$chgrpprog $2" shift;; --help) echo "$usage"; exit $?;; -m) mode=$2 case $mode in *' '* | *"$tab"* | *"$nl"* | *'*'* | *'?'* | *'['*) echo "$0: invalid mode: $mode" >&2 exit 1;; esac shift;; -o) chowncmd="$chownprog $2" shift;; -p) cpprog="$cpprog -p";; -s) stripcmd=$stripprog;; -S) backupsuffix="$2" shift;; -t) is_target_a_directory=always dst_arg=$2 # Protect names problematic for 'test' and other utilities. case $dst_arg in -* | [=\(\)!]) dst_arg=./$dst_arg;; esac shift;; -T) is_target_a_directory=never;; --version) echo "$0 $scriptversion"; exit $?;; --) shift break;; -*) echo "$0: invalid option: $1" >&2 exit 1;; *) break;; esac shift done # We allow the use of options -d and -T together, by making -d # take the precedence; this is for compatibility with GNU install. if test -n "$dir_arg"; then if test -n "$dst_arg"; then echo "$0: target directory not allowed when installing a directory." >&2 exit 1 fi fi if test $# -ne 0 && test -z "$dir_arg$dst_arg"; then # When -d is used, all remaining arguments are directories to create. # When -t is used, the destination is already specified. # Otherwise, the last argument is the destination. Remove it from $@. for arg do if test -n "$dst_arg"; then # $@ is not empty: it contains at least $arg. set fnord "$@" "$dst_arg" shift # fnord fi shift # arg dst_arg=$arg # Protect names problematic for 'test' and other utilities. case $dst_arg in -* | [=\(\)!]) dst_arg=./$dst_arg;; esac done fi if test $# -eq 0; then if test -z "$dir_arg"; then echo "$0: no input file specified." >&2 exit 1 fi # It's OK to call 'install-sh -d' without argument. # This can happen when creating conditional directories. exit 0 fi if test -z "$dir_arg"; then if test $# -gt 1 || test "$is_target_a_directory" = always; then if test ! -d "$dst_arg"; then echo "$0: $dst_arg: Is not a directory." >&2 exit 1 fi fi fi if test -z "$dir_arg"; then do_exit='(exit $ret); exit $ret' trap "ret=129; $do_exit" 1 trap "ret=130; $do_exit" 2 trap "ret=141; $do_exit" 13 trap "ret=143; $do_exit" 15 # Set umask so as not to create temps with too-generous modes. # However, 'strip' requires both read and write access to temps. case $mode in # Optimize common cases. *644) cp_umask=133;; *755) cp_umask=22;; *[0-7]) if test -z "$stripcmd"; then u_plus_rw= else u_plus_rw='% 200' fi cp_umask=`expr '(' 777 - $mode % 1000 ')' $u_plus_rw`;; *) if test -z "$stripcmd"; then u_plus_rw= else u_plus_rw=,u+rw fi cp_umask=$mode$u_plus_rw;; esac fi for src do # Protect names problematic for 'test' and other utilities. case $src in -* | [=\(\)!]) src=./$src;; esac if test -n "$dir_arg"; then dst=$src dstdir=$dst test -d "$dstdir" dstdir_status=$? # Don't chown directories that already exist. if test $dstdir_status = 0; then chowncmd="" fi else # Waiting for this to be detected by the "$cpprog $src $dsttmp" command # might cause directories to be created, which would be especially bad # if $src (and thus $dsttmp) contains '*'. if test ! -f "$src" && test ! -d "$src"; then echo "$0: $src does not exist." >&2 exit 1 fi if test -z "$dst_arg"; then echo "$0: no destination specified." >&2 exit 1 fi dst=$dst_arg # If destination is a directory, append the input filename. if test -d "$dst"; then if test "$is_target_a_directory" = never; then echo "$0: $dst_arg: Is a directory" >&2 exit 1 fi dstdir=$dst dstbase=`basename "$src"` case $dst in */) dst=$dst$dstbase;; *) dst=$dst/$dstbase;; esac dstdir_status=0 else dstdir=`dirname "$dst"` test -d "$dstdir" dstdir_status=$? fi fi case $dstdir in */) dstdirslash=$dstdir;; *) dstdirslash=$dstdir/;; esac obsolete_mkdir_used=false if test $dstdir_status != 0; then case $posix_mkdir in '') # With -d, create the new directory with the user-specified mode. # Otherwise, rely on $mkdir_umask. if test -n "$dir_arg"; then mkdir_mode=-m$mode else mkdir_mode= fi posix_mkdir=false # The $RANDOM variable is not portable (e.g., dash). Use it # here however when possible just to lower collision chance. tmpdir=${TMPDIR-/tmp}/ins$RANDOM-$$ trap ' ret=$? rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir" 2>/dev/null exit $ret ' 0 # Because "mkdir -p" follows existing symlinks and we likely work # directly in world-writeable /tmp, make sure that the '$tmpdir' # directory is successfully created first before we actually test # 'mkdir -p'. if (umask $mkdir_umask && $mkdirprog $mkdir_mode "$tmpdir" && exec $mkdirprog $mkdir_mode -p -- "$tmpdir/a/b") >/dev/null 2>&1 then if test -z "$dir_arg" || { # Check for POSIX incompatibilities with -m. # HP-UX 11.23 and IRIX 6.5 mkdir -m -p sets group- or # other-writable bit of parent directory when it shouldn't. # FreeBSD 6.1 mkdir -m -p sets mode of existing directory. test_tmpdir="$tmpdir/a" ls_ld_tmpdir=`ls -ld "$test_tmpdir"` case $ls_ld_tmpdir in d????-?r-*) different_mode=700;; d????-?--*) different_mode=755;; *) false;; esac && $mkdirprog -m$different_mode -p -- "$test_tmpdir" && { ls_ld_tmpdir_1=`ls -ld "$test_tmpdir"` test "$ls_ld_tmpdir" = "$ls_ld_tmpdir_1" } } then posix_mkdir=: fi rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir" else # Remove any dirs left behind by ancient mkdir implementations. rmdir ./$mkdir_mode ./-p ./-- "$tmpdir" 2>/dev/null fi trap '' 0;; esac if $posix_mkdir && ( umask $mkdir_umask && $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir" ) then : else # mkdir does not conform to POSIX, # or it failed possibly due to a race condition. Create the # directory the slow way, step by step, checking for races as we go. case $dstdir in /*) prefix='/';; [-=\(\)!]*) prefix='./';; *) prefix='';; esac oIFS=$IFS IFS=/ set -f set fnord $dstdir shift set +f IFS=$oIFS prefixes= for d do test X"$d" = X && continue prefix=$prefix$d if test -d "$prefix"; then prefixes= else if $posix_mkdir; then (umask $mkdir_umask && $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir") && break # Don't fail if two instances are running concurrently. test -d "$prefix" || exit 1 else case $prefix in *\'*) qprefix=`echo "$prefix" | sed "s/'/'\\\\\\\\''/g"`;; *) qprefix=$prefix;; esac prefixes="$prefixes '$qprefix'" fi fi prefix=$prefix/ done if test -n "$prefixes"; then # Don't fail if two instances are running concurrently. (umask $mkdir_umask && eval "\$doit_exec \$mkdirprog $prefixes") || test -d "$dstdir" || exit 1 obsolete_mkdir_used=true fi fi fi if test -n "$dir_arg"; then { test -z "$chowncmd" || $doit $chowncmd "$dst"; } && { test -z "$chgrpcmd" || $doit $chgrpcmd "$dst"; } && { test "$obsolete_mkdir_used$chowncmd$chgrpcmd" = false || test -z "$chmodcmd" || $doit $chmodcmd $mode "$dst"; } || exit 1 else # Make a couple of temp file names in the proper directory. dsttmp=${dstdirslash}_inst.$$_ rmtmp=${dstdirslash}_rm.$$_ # Trap to clean up those temp files at exit. trap 'ret=$?; rm -f "$dsttmp" "$rmtmp" && exit $ret' 0 # Copy the file name to the temp name. (umask $cp_umask && { test -z "$stripcmd" || { # Create $dsttmp read-write so that cp doesn't create it read-only, # which would cause strip to fail. if test -z "$doit"; then : >"$dsttmp" # No need to fork-exec 'touch'. else $doit touch "$dsttmp" fi } } && $doit_exec $cpprog "$src" "$dsttmp") && # and set any options; do chmod last to preserve setuid bits. # # If any of these fail, we abort the whole thing. If we want to # ignore errors from any of these, just make sure not to ignore # errors from the above "$doit $cpprog $src $dsttmp" command. # { test -z "$chowncmd" || $doit $chowncmd "$dsttmp"; } && { test -z "$chgrpcmd" || $doit $chgrpcmd "$dsttmp"; } && { test -z "$stripcmd" || $doit $stripcmd "$dsttmp"; } && { test -z "$chmodcmd" || $doit $chmodcmd $mode "$dsttmp"; } && # If -C, don't bother to copy if it wouldn't change the file. if $copy_on_change && old=`LC_ALL=C ls -dlL "$dst" 2>/dev/null` && new=`LC_ALL=C ls -dlL "$dsttmp" 2>/dev/null` && set -f && set X $old && old=:$2:$4:$5:$6 && set X $new && new=:$2:$4:$5:$6 && set +f && test "$old" = "$new" && $cmpprog "$dst" "$dsttmp" >/dev/null 2>&1 then rm -f "$dsttmp" else # If $backupsuffix is set, and the file being installed # already exists, attempt a backup. Don't worry if it fails, # e.g., if mv doesn't support -f. if test -n "$backupsuffix" && test -f "$dst"; then $doit $mvcmd -f "$dst" "$dst$backupsuffix" 2>/dev/null fi # Rename the file to the real destination. $doit $mvcmd -f "$dsttmp" "$dst" 2>/dev/null || # The rename failed, perhaps because mv can't rename something else # to itself, or perhaps because mv is so ancient that it does not # support -f. { # Now remove or move aside any old file at destination location. # We try this two ways since rm can't unlink itself on some # systems and the destination file might be busy for other # reasons. In this case, the final cleanup might fail but the new # file should still install successfully. { test ! -f "$dst" || $doit $rmcmd "$dst" 2>/dev/null || { $doit $mvcmd -f "$dst" "$rmtmp" 2>/dev/null && { $doit $rmcmd "$rmtmp" 2>/dev/null; :; } } || { echo "$0: cannot unlink or rename $dst" >&2 (exit 1); exit 1 } } && # Now rename the file to the real destination. $doit $mvcmd "$dsttmp" "$dst" } fi || exit 1 trap '' 0 fi done # Local variables: # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "scriptversion=" # time-stamp-format: "%:y-%02m-%02d.%02H" # time-stamp-time-zone: "UTC0" # time-stamp-end: "; # UTC" # End: tpm2-pkcs11-1.9.1/ltmain.sh0000644000175100017510000121201014553057200011005 #! /usr/bin/env sh ## DO NOT EDIT - This file generated from ./build-aux/ltmain.in ## by inline-source v2019-02-19.15 # libtool (GNU libtool) 2.4.7 # Provide generalized library-building support services. # Written by Gordon Matzigkeit , 1996 # Copyright (C) 1996-2019, 2021-2022 Free Software Foundation, Inc. # This is free software; see the source for copying conditions. There is NO # warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # GNU Libtool is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # As a special exception to the GNU General Public License, # if you distribute this file as part of a program or library that # is built using GNU Libtool, you may include this file under the # same distribution terms that you use for the rest of that program. # # GNU Libtool is distributed in the hope that it will be useful, but # WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . PROGRAM=libtool PACKAGE=libtool VERSION=2.4.7 package_revision=2.4.7 ## ------ ## ## Usage. ## ## ------ ## # Run './libtool --help' for help with using this script from the # command line. ## ------------------------------- ## ## User overridable command paths. ## ## ------------------------------- ## # After configure completes, it has a better idea of some of the # shell tools we need than the defaults used by the functions shared # with bootstrap, so set those here where they can still be over- # ridden by the user, but otherwise take precedence. : ${AUTOCONF="autoconf"} : ${AUTOMAKE="automake"} ## -------------------------- ## ## Source external libraries. ## ## -------------------------- ## # Much of our low-level functionality needs to be sourced from external # libraries, which are installed to $pkgauxdir. # Set a version string for this script. scriptversion=2019-02-19.15; # UTC # General shell script boiler plate, and helper functions. # Written by Gary V. Vaughan, 2004 # This is free software. There is NO warranty; not even for # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # # Copyright (C) 2004-2019, 2021 Bootstrap Authors # # This file is dual licensed under the terms of the MIT license # , and GPL version 2 or later # . You must apply one of # these licenses when using or redistributing this software or any of # the files within it. See the URLs above, or the file `LICENSE` # included in the Bootstrap distribution for the full license texts. # Please report bugs or propose patches to: # ## ------ ## ## Usage. ## ## ------ ## # Evaluate this file near the top of your script to gain access to # the functions and variables defined here: # # . `echo "$0" | ${SED-sed} 's|[^/]*$||'`/build-aux/funclib.sh # # If you need to override any of the default environment variable # settings, do that before evaluating this file. ## -------------------- ## ## Shell normalisation. ## ## -------------------- ## # Some shells need a little help to be as Bourne compatible as possible. # Before doing anything else, make sure all that help has been provided! DUALCASE=1; export DUALCASE # for MKS sh if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then : emulate sh NULLCMD=: # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which # is contrary to our usage. Disable this feature. alias -g '${1+"$@"}'='"$@"' setopt NO_GLOB_SUBST else case `(set -o) 2>/dev/null` in *posix*) set -o posix ;; esac fi # NLS nuisances: We save the old values in case they are required later. _G_user_locale= _G_safe_locale= for _G_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES do eval "if test set = \"\${$_G_var+set}\"; then save_$_G_var=\$$_G_var $_G_var=C export $_G_var _G_user_locale=\"$_G_var=\\\$save_\$_G_var; \$_G_user_locale\" _G_safe_locale=\"$_G_var=C; \$_G_safe_locale\" fi" done # These NLS vars are set unconditionally (bootstrap issue #24). Unset those # in case the environment reset is needed later and the $save_* variant is not # defined (see the code above). LC_ALL=C LANGUAGE=C export LANGUAGE LC_ALL # Make sure IFS has a sensible default sp=' ' nl=' ' IFS="$sp $nl" # There are apparently some retarded systems that use ';' as a PATH separator! if test "${PATH_SEPARATOR+set}" != set; then PATH_SEPARATOR=: (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && { (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 || PATH_SEPARATOR=';' } fi # func_unset VAR # -------------- # Portably unset VAR. # In some shells, an 'unset VAR' statement leaves a non-zero return # status if VAR is already unset, which might be problematic if the # statement is used at the end of a function (thus poisoning its return # value) or when 'set -e' is active (causing even a spurious abort of # the script in this case). func_unset () { { eval $1=; (eval unset $1) >/dev/null 2>&1 && eval unset $1 || : ; } } # Make sure CDPATH doesn't cause `cd` commands to output the target dir. func_unset CDPATH # Make sure ${,E,F}GREP behave sanely. func_unset GREP_OPTIONS ## ------------------------- ## ## Locate command utilities. ## ## ------------------------- ## # func_executable_p FILE # ---------------------- # Check that FILE is an executable regular file. func_executable_p () { test -f "$1" && test -x "$1" } # func_path_progs PROGS_LIST CHECK_FUNC [PATH] # -------------------------------------------- # Search for either a program that responds to --version with output # containing "GNU", or else returned by CHECK_FUNC otherwise, by # trying all the directories in PATH with each of the elements of # PROGS_LIST. # # CHECK_FUNC should accept the path to a candidate program, and # set $func_check_prog_result if it truncates its output less than # $_G_path_prog_max characters. func_path_progs () { _G_progs_list=$1 _G_check_func=$2 _G_PATH=${3-"$PATH"} _G_path_prog_max=0 _G_path_prog_found=false _G_save_IFS=$IFS; IFS=${PATH_SEPARATOR-:} for _G_dir in $_G_PATH; do IFS=$_G_save_IFS test -z "$_G_dir" && _G_dir=. for _G_prog_name in $_G_progs_list; do for _exeext in '' .EXE; do _G_path_prog=$_G_dir/$_G_prog_name$_exeext func_executable_p "$_G_path_prog" || continue case `"$_G_path_prog" --version 2>&1` in *GNU*) func_path_progs_result=$_G_path_prog _G_path_prog_found=: ;; *) $_G_check_func $_G_path_prog func_path_progs_result=$func_check_prog_result ;; esac $_G_path_prog_found && break 3 done done done IFS=$_G_save_IFS test -z "$func_path_progs_result" && { echo "no acceptable sed could be found in \$PATH" >&2 exit 1 } } # We want to be able to use the functions in this file before configure # has figured out where the best binaries are kept, which means we have # to search for them ourselves - except when the results are already set # where we skip the searches. # Unless the user overrides by setting SED, search the path for either GNU # sed, or the sed that truncates its output the least. test -z "$SED" && { _G_sed_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/ for _G_i in 1 2 3 4 5 6 7; do _G_sed_script=$_G_sed_script$nl$_G_sed_script done echo "$_G_sed_script" 2>/dev/null | sed 99q >conftest.sed _G_sed_script= func_check_prog_sed () { _G_path_prog=$1 _G_count=0 printf 0123456789 >conftest.in while : do cat conftest.in conftest.in >conftest.tmp mv conftest.tmp conftest.in cp conftest.in conftest.nl echo '' >> conftest.nl "$_G_path_prog" -f conftest.sed conftest.out 2>/dev/null || break diff conftest.out conftest.nl >/dev/null 2>&1 || break _G_count=`expr $_G_count + 1` if test "$_G_count" -gt "$_G_path_prog_max"; then # Best one so far, save it but keep looking for a better one func_check_prog_result=$_G_path_prog _G_path_prog_max=$_G_count fi # 10*(2^10) chars as input seems more than enough test 10 -lt "$_G_count" && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out } func_path_progs "sed gsed" func_check_prog_sed "$PATH:/usr/xpg4/bin" rm -f conftest.sed SED=$func_path_progs_result } # Unless the user overrides by setting GREP, search the path for either GNU # grep, or the grep that truncates its output the least. test -z "$GREP" && { func_check_prog_grep () { _G_path_prog=$1 _G_count=0 _G_path_prog_max=0 printf 0123456789 >conftest.in while : do cat conftest.in conftest.in >conftest.tmp mv conftest.tmp conftest.in cp conftest.in conftest.nl echo 'GREP' >> conftest.nl "$_G_path_prog" -e 'GREP$' -e '-(cannot match)-' conftest.out 2>/dev/null || break diff conftest.out conftest.nl >/dev/null 2>&1 || break _G_count=`expr $_G_count + 1` if test "$_G_count" -gt "$_G_path_prog_max"; then # Best one so far, save it but keep looking for a better one func_check_prog_result=$_G_path_prog _G_path_prog_max=$_G_count fi # 10*(2^10) chars as input seems more than enough test 10 -lt "$_G_count" && break done rm -f conftest.in conftest.tmp conftest.nl conftest.out } func_path_progs "grep ggrep" func_check_prog_grep "$PATH:/usr/xpg4/bin" GREP=$func_path_progs_result } ## ------------------------------- ## ## User overridable command paths. ## ## ------------------------------- ## # All uppercase variable names are used for environment variables. These # variables can be overridden by the user before calling a script that # uses them if a suitable command of that name is not already available # in the command search PATH. : ${CP="cp -f"} : ${ECHO="printf %s\n"} : ${EGREP="$GREP -E"} : ${FGREP="$GREP -F"} : ${LN_S="ln -s"} : ${MAKE="make"} : ${MKDIR="mkdir"} : ${MV="mv -f"} : ${RM="rm -f"} : ${SHELL="${CONFIG_SHELL-/bin/sh}"} ## -------------------- ## ## Useful sed snippets. ## ## -------------------- ## sed_dirname='s|/[^/]*$||' sed_basename='s|^.*/||' # Sed substitution that helps us do robust quoting. It backslashifies # metacharacters that are still active within double-quoted strings. sed_quote_subst='s|\([`"$\\]\)|\\\1|g' # Same as above, but do not quote variable references. sed_double_quote_subst='s/\(["`\\]\)/\\\1/g' # Sed substitution that turns a string into a regex matching for the # string literally. sed_make_literal_regex='s|[].[^$\\*\/]|\\&|g' # Sed substitution that converts a w32 file name or path # that contains forward slashes, into one that contains # (escaped) backslashes. A very naive implementation. sed_naive_backslashify='s|\\\\*|\\|g;s|/|\\|g;s|\\|\\\\|g' # Re-'\' parameter expansions in output of sed_double_quote_subst that # were '\'-ed in input to the same. If an odd number of '\' preceded a # '$' in input to sed_double_quote_subst, that '$' was protected from # expansion. Since each input '\' is now two '\'s, look for any number # of runs of four '\'s followed by two '\'s and then a '$'. '\' that '$'. _G_bs='\\' _G_bs2='\\\\' _G_bs4='\\\\\\\\' _G_dollar='\$' sed_double_backslash="\ s/$_G_bs4/&\\ /g s/^$_G_bs2$_G_dollar/$_G_bs&/ s/\\([^$_G_bs]\\)$_G_bs2$_G_dollar/\\1$_G_bs2$_G_bs$_G_dollar/g s/\n//g" # require_check_ifs_backslash # --------------------------- # Check if we can use backslash as IFS='\' separator, and set # $check_ifs_backshlash_broken to ':' or 'false'. require_check_ifs_backslash=func_require_check_ifs_backslash func_require_check_ifs_backslash () { _G_save_IFS=$IFS IFS='\' _G_check_ifs_backshlash='a\\b' for _G_i in $_G_check_ifs_backshlash do case $_G_i in a) check_ifs_backshlash_broken=false ;; '') break ;; *) check_ifs_backshlash_broken=: break ;; esac done IFS=$_G_save_IFS require_check_ifs_backslash=: } ## ----------------- ## ## Global variables. ## ## ----------------- ## # Except for the global variables explicitly listed below, the following # functions in the '^func_' namespace, and the '^require_' namespace # variables initialised in the 'Resource management' section, sourcing # this file will not pollute your global namespace with anything # else. There's no portable way to scope variables in Bourne shell # though, so actually running these functions will sometimes place # results into a variable named after the function, and often use # temporary variables in the '^_G_' namespace. If you are careful to # avoid using those namespaces casually in your sourcing script, things # should continue to work as you expect. And, of course, you can freely # overwrite any of the functions or variables defined here before # calling anything to customize them. EXIT_SUCCESS=0 EXIT_FAILURE=1 EXIT_MISMATCH=63 # $? = 63 is used to indicate version mismatch to missing. EXIT_SKIP=77 # $? = 77 is used to indicate a skipped test to automake. # Allow overriding, eg assuming that you follow the convention of # putting '$debug_cmd' at the start of all your functions, you can get # bash to show function call trace with: # # debug_cmd='eval echo "${FUNCNAME[0]} $*" >&2' bash your-script-name debug_cmd=${debug_cmd-":"} exit_cmd=: # By convention, finish your script with: # # exit $exit_status # # so that you can set exit_status to non-zero if you want to indicate # something went wrong during execution without actually bailing out at # the point of failure. exit_status=$EXIT_SUCCESS # Work around backward compatibility issue on IRIX 6.5. On IRIX 6.4+, sh # is ksh but when the shell is invoked as "sh" and the current value of # the _XPG environment variable is not equal to 1 (one), the special # positional parameter $0, within a function call, is the name of the # function. progpath=$0 # The name of this program. progname=`$ECHO "$progpath" |$SED "$sed_basename"` # Make sure we have an absolute progpath for reexecution: case $progpath in [\\/]*|[A-Za-z]:\\*) ;; *[\\/]*) progdir=`$ECHO "$progpath" |$SED "$sed_dirname"` progdir=`cd "$progdir" && pwd` progpath=$progdir/$progname ;; *) _G_IFS=$IFS IFS=${PATH_SEPARATOR-:} for progdir in $PATH; do IFS=$_G_IFS test -x "$progdir/$progname" && break done IFS=$_G_IFS test -n "$progdir" || progdir=`pwd` progpath=$progdir/$progname ;; esac ## ----------------- ## ## Standard options. ## ## ----------------- ## # The following options affect the operation of the functions defined # below, and should be set appropriately depending on run-time para- # meters passed on the command line. opt_dry_run=false opt_quiet=false opt_verbose=false # Categories 'all' and 'none' are always available. Append any others # you will pass as the first argument to func_warning from your own # code. warning_categories= # By default, display warnings according to 'opt_warning_types'. Set # 'warning_func' to ':' to elide all warnings, or func_fatal_error to # treat the next displayed warning as a fatal error. warning_func=func_warn_and_continue # Set to 'all' to display all warnings, 'none' to suppress all # warnings, or a space delimited list of some subset of # 'warning_categories' to display only the listed warnings. opt_warning_types=all ## -------------------- ## ## Resource management. ## ## -------------------- ## # This section contains definitions for functions that each ensure a # particular resource (a file, or a non-empty configuration variable for # example) is available, and if appropriate to extract default values # from pertinent package files. Call them using their associated # 'require_*' variable to ensure that they are executed, at most, once. # # It's entirely deliberate that calling these functions can set # variables that don't obey the namespace limitations obeyed by the rest # of this file, in order that that they be as useful as possible to # callers. # require_term_colors # ------------------- # Allow display of bold text on terminals that support it. require_term_colors=func_require_term_colors func_require_term_colors () { $debug_cmd test -t 1 && { # COLORTERM and USE_ANSI_COLORS environment variables take # precedence, because most terminfo databases neglect to describe # whether color sequences are supported. test -n "${COLORTERM+set}" && : ${USE_ANSI_COLORS="1"} if test 1 = "$USE_ANSI_COLORS"; then # Standard ANSI escape sequences tc_reset='' tc_bold=''; tc_standout='' tc_red=''; tc_green='' tc_blue=''; tc_cyan='' else # Otherwise trust the terminfo database after all. test -n "`tput sgr0 2>/dev/null`" && { tc_reset=`tput sgr0` test -n "`tput bold 2>/dev/null`" && tc_bold=`tput bold` tc_standout=$tc_bold test -n "`tput smso 2>/dev/null`" && tc_standout=`tput smso` test -n "`tput setaf 1 2>/dev/null`" && tc_red=`tput setaf 1` test -n "`tput setaf 2 2>/dev/null`" && tc_green=`tput setaf 2` test -n "`tput setaf 4 2>/dev/null`" && tc_blue=`tput setaf 4` test -n "`tput setaf 5 2>/dev/null`" && tc_cyan=`tput setaf 5` } fi } require_term_colors=: } ## ----------------- ## ## Function library. ## ## ----------------- ## # This section contains a variety of useful functions to call in your # scripts. Take note of the portable wrappers for features provided by # some modern shells, which will fall back to slower equivalents on # less featureful shells. # func_append VAR VALUE # --------------------- # Append VALUE onto the existing contents of VAR. # We should try to minimise forks, especially on Windows where they are # unreasonably slow, so skip the feature probes when bash or zsh are # being used: if test set = "${BASH_VERSION+set}${ZSH_VERSION+set}"; then : ${_G_HAVE_ARITH_OP="yes"} : ${_G_HAVE_XSI_OPS="yes"} # The += operator was introduced in bash 3.1 case $BASH_VERSION in [12].* | 3.0 | 3.0*) ;; *) : ${_G_HAVE_PLUSEQ_OP="yes"} ;; esac fi # _G_HAVE_PLUSEQ_OP # Can be empty, in which case the shell is probed, "yes" if += is # useable or anything else if it does not work. test -z "$_G_HAVE_PLUSEQ_OP" \ && (eval 'x=a; x+=" b"; test "a b" = "$x"') 2>/dev/null \ && _G_HAVE_PLUSEQ_OP=yes if test yes = "$_G_HAVE_PLUSEQ_OP" then # This is an XSI compatible shell, allowing a faster implementation... eval 'func_append () { $debug_cmd eval "$1+=\$2" }' else # ...otherwise fall back to using expr, which is often a shell builtin. func_append () { $debug_cmd eval "$1=\$$1\$2" } fi # func_append_quoted VAR VALUE # ---------------------------- # Quote VALUE and append to the end of shell variable VAR, separated # by a space. if test yes = "$_G_HAVE_PLUSEQ_OP"; then eval 'func_append_quoted () { $debug_cmd func_quote_arg pretty "$2" eval "$1+=\\ \$func_quote_arg_result" }' else func_append_quoted () { $debug_cmd func_quote_arg pretty "$2" eval "$1=\$$1\\ \$func_quote_arg_result" } fi # func_append_uniq VAR VALUE # -------------------------- # Append unique VALUE onto the existing contents of VAR, assuming # entries are delimited by the first character of VALUE. For example: # # func_append_uniq options " --another-option option-argument" # # will only append to $options if " --another-option option-argument " # is not already present somewhere in $options already (note spaces at # each end implied by leading space in second argument). func_append_uniq () { $debug_cmd eval _G_current_value='`$ECHO $'$1'`' _G_delim=`expr "$2" : '\(.\)'` case $_G_delim$_G_current_value$_G_delim in *"$2$_G_delim"*) ;; *) func_append "$@" ;; esac } # func_arith TERM... # ------------------ # Set func_arith_result to the result of evaluating TERMs. test -z "$_G_HAVE_ARITH_OP" \ && (eval 'test 2 = $(( 1 + 1 ))') 2>/dev/null \ && _G_HAVE_ARITH_OP=yes if test yes = "$_G_HAVE_ARITH_OP"; then eval 'func_arith () { $debug_cmd func_arith_result=$(( $* )) }' else func_arith () { $debug_cmd func_arith_result=`expr "$@"` } fi # func_basename FILE # ------------------ # Set func_basename_result to FILE with everything up to and including # the last / stripped. if test yes = "$_G_HAVE_XSI_OPS"; then # If this shell supports suffix pattern removal, then use it to avoid # forking. Hide the definitions single quotes in case the shell chokes # on unsupported syntax... _b='func_basename_result=${1##*/}' _d='case $1 in */*) func_dirname_result=${1%/*}$2 ;; * ) func_dirname_result=$3 ;; esac' else # ...otherwise fall back to using sed. _b='func_basename_result=`$ECHO "$1" |$SED "$sed_basename"`' _d='func_dirname_result=`$ECHO "$1" |$SED "$sed_dirname"` if test "X$func_dirname_result" = "X$1"; then func_dirname_result=$3 else func_append func_dirname_result "$2" fi' fi eval 'func_basename () { $debug_cmd '"$_b"' }' # func_dirname FILE APPEND NONDIR_REPLACEMENT # ------------------------------------------- # Compute the dirname of FILE. If nonempty, add APPEND to the result, # otherwise set result to NONDIR_REPLACEMENT. eval 'func_dirname () { $debug_cmd '"$_d"' }' # func_dirname_and_basename FILE APPEND NONDIR_REPLACEMENT # -------------------------------------------------------- # Perform func_basename and func_dirname in a single function # call: # dirname: Compute the dirname of FILE. If nonempty, # add APPEND to the result, otherwise set result # to NONDIR_REPLACEMENT. # value returned in "$func_dirname_result" # basename: Compute filename of FILE. # value retuned in "$func_basename_result" # For efficiency, we do not delegate to the functions above but instead # duplicate the functionality here. eval 'func_dirname_and_basename () { $debug_cmd '"$_b"' '"$_d"' }' # func_echo ARG... # ---------------- # Echo program name prefixed message. func_echo () { $debug_cmd _G_message=$* func_echo_IFS=$IFS IFS=$nl for _G_line in $_G_message; do IFS=$func_echo_IFS $ECHO "$progname: $_G_line" done IFS=$func_echo_IFS } # func_echo_all ARG... # -------------------- # Invoke $ECHO with all args, space-separated. func_echo_all () { $ECHO "$*" } # func_echo_infix_1 INFIX ARG... # ------------------------------ # Echo program name, followed by INFIX on the first line, with any # additional lines not showing INFIX. func_echo_infix_1 () { $debug_cmd $require_term_colors _G_infix=$1; shift _G_indent=$_G_infix _G_prefix="$progname: $_G_infix: " _G_message=$* # Strip color escape sequences before counting printable length for _G_tc in "$tc_reset" "$tc_bold" "$tc_standout" "$tc_red" "$tc_green" "$tc_blue" "$tc_cyan" do test -n "$_G_tc" && { _G_esc_tc=`$ECHO "$_G_tc" | $SED "$sed_make_literal_regex"` _G_indent=`$ECHO "$_G_indent" | $SED "s|$_G_esc_tc||g"` } done _G_indent="$progname: "`echo "$_G_indent" | $SED 's|.| |g'`" " ## exclude from sc_prohibit_nested_quotes func_echo_infix_1_IFS=$IFS IFS=$nl for _G_line in $_G_message; do IFS=$func_echo_infix_1_IFS $ECHO "$_G_prefix$tc_bold$_G_line$tc_reset" >&2 _G_prefix=$_G_indent done IFS=$func_echo_infix_1_IFS } # func_error ARG... # ----------------- # Echo program name prefixed message to standard error. func_error () { $debug_cmd $require_term_colors func_echo_infix_1 " $tc_standout${tc_red}error$tc_reset" "$*" >&2 } # func_fatal_error ARG... # ----------------------- # Echo program name prefixed message to standard error, and exit. func_fatal_error () { $debug_cmd func_error "$*" exit $EXIT_FAILURE } # func_grep EXPRESSION FILENAME # ----------------------------- # Check whether EXPRESSION matches any line of FILENAME, without output. func_grep () { $debug_cmd $GREP "$1" "$2" >/dev/null 2>&1 } # func_len STRING # --------------- # Set func_len_result to the length of STRING. STRING may not # start with a hyphen. test -z "$_G_HAVE_XSI_OPS" \ && (eval 'x=a/b/c; test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \ && _G_HAVE_XSI_OPS=yes if test yes = "$_G_HAVE_XSI_OPS"; then eval 'func_len () { $debug_cmd func_len_result=${#1} }' else func_len () { $debug_cmd func_len_result=`expr "$1" : ".*" 2>/dev/null || echo $max_cmd_len` } fi # func_mkdir_p DIRECTORY-PATH # --------------------------- # Make sure the entire path to DIRECTORY-PATH is available. func_mkdir_p () { $debug_cmd _G_directory_path=$1 _G_dir_list= if test -n "$_G_directory_path" && test : != "$opt_dry_run"; then # Protect directory names starting with '-' case $_G_directory_path in -*) _G_directory_path=./$_G_directory_path ;; esac # While some portion of DIR does not yet exist... while test ! -d "$_G_directory_path"; do # ...make a list in topmost first order. Use a colon delimited # list incase some portion of path contains whitespace. _G_dir_list=$_G_directory_path:$_G_dir_list # If the last portion added has no slash in it, the list is done case $_G_directory_path in */*) ;; *) break ;; esac # ...otherwise throw away the child directory and loop _G_directory_path=`$ECHO "$_G_directory_path" | $SED -e "$sed_dirname"` done _G_dir_list=`$ECHO "$_G_dir_list" | $SED 's|:*$||'` func_mkdir_p_IFS=$IFS; IFS=: for _G_dir in $_G_dir_list; do IFS=$func_mkdir_p_IFS # mkdir can fail with a 'File exist' error if two processes # try to create one of the directories concurrently. Don't # stop in that case! $MKDIR "$_G_dir" 2>/dev/null || : done IFS=$func_mkdir_p_IFS # Bail out if we (or some other process) failed to create a directory. test -d "$_G_directory_path" || \ func_fatal_error "Failed to create '$1'" fi } # func_mktempdir [BASENAME] # ------------------------- # Make a temporary directory that won't clash with other running # libtool processes, and avoids race conditions if possible. If # given, BASENAME is the basename for that directory. func_mktempdir () { $debug_cmd _G_template=${TMPDIR-/tmp}/${1-$progname} if test : = "$opt_dry_run"; then # Return a directory name, but don't create it in dry-run mode _G_tmpdir=$_G_template-$$ else # If mktemp works, use that first and foremost _G_tmpdir=`mktemp -d "$_G_template-XXXXXXXX" 2>/dev/null` if test ! -d "$_G_tmpdir"; then # Failing that, at least try and use $RANDOM to avoid a race _G_tmpdir=$_G_template-${RANDOM-0}$$ func_mktempdir_umask=`umask` umask 0077 $MKDIR "$_G_tmpdir" umask $func_mktempdir_umask fi # If we're not in dry-run mode, bomb out on failure test -d "$_G_tmpdir" || \ func_fatal_error "cannot create temporary directory '$_G_tmpdir'" fi $ECHO "$_G_tmpdir" } # func_normal_abspath PATH # ------------------------ # Remove doubled-up and trailing slashes, "." path components, # and cancel out any ".." path components in PATH after making # it an absolute path. func_normal_abspath () { $debug_cmd # These SED scripts presuppose an absolute path with a trailing slash. _G_pathcar='s|^/\([^/]*\).*$|\1|' _G_pathcdr='s|^/[^/]*||' _G_removedotparts=':dotsl s|/\./|/|g t dotsl s|/\.$|/|' _G_collapseslashes='s|/\{1,\}|/|g' _G_finalslash='s|/*$|/|' # Start from root dir and reassemble the path. func_normal_abspath_result= func_normal_abspath_tpath=$1 func_normal_abspath_altnamespace= case $func_normal_abspath_tpath in "") # Empty path, that just means $cwd. func_stripname '' '/' "`pwd`" func_normal_abspath_result=$func_stripname_result return ;; # The next three entries are used to spot a run of precisely # two leading slashes without using negated character classes; # we take advantage of case's first-match behaviour. ///*) # Unusual form of absolute path, do nothing. ;; //*) # Not necessarily an ordinary path; POSIX reserves leading '//' # and for example Cygwin uses it to access remote file shares # over CIFS/SMB, so we conserve a leading double slash if found. func_normal_abspath_altnamespace=/ ;; /*) # Absolute path, do nothing. ;; *) # Relative path, prepend $cwd. func_normal_abspath_tpath=`pwd`/$func_normal_abspath_tpath ;; esac # Cancel out all the simple stuff to save iterations. We also want # the path to end with a slash for ease of parsing, so make sure # there is one (and only one) here. func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \ -e "$_G_removedotparts" -e "$_G_collapseslashes" -e "$_G_finalslash"` while :; do # Processed it all yet? if test / = "$func_normal_abspath_tpath"; then # If we ascended to the root using ".." the result may be empty now. if test -z "$func_normal_abspath_result"; then func_normal_abspath_result=/ fi break fi func_normal_abspath_tcomponent=`$ECHO "$func_normal_abspath_tpath" | $SED \ -e "$_G_pathcar"` func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \ -e "$_G_pathcdr"` # Figure out what to do with it case $func_normal_abspath_tcomponent in "") # Trailing empty path component, ignore it. ;; ..) # Parent dir; strip last assembled component from result. func_dirname "$func_normal_abspath_result" func_normal_abspath_result=$func_dirname_result ;; *) # Actual path component, append it. func_append func_normal_abspath_result "/$func_normal_abspath_tcomponent" ;; esac done # Restore leading double-slash if one was found on entry. func_normal_abspath_result=$func_normal_abspath_altnamespace$func_normal_abspath_result } # func_notquiet ARG... # -------------------- # Echo program name prefixed message only when not in quiet mode. func_notquiet () { $debug_cmd $opt_quiet || func_echo ${1+"$@"} # A bug in bash halts the script if the last line of a function # fails when set -e is in force, so we need another command to # work around that: : } # func_relative_path SRCDIR DSTDIR # -------------------------------- # Set func_relative_path_result to the relative path from SRCDIR to DSTDIR. func_relative_path () { $debug_cmd func_relative_path_result= func_normal_abspath "$1" func_relative_path_tlibdir=$func_normal_abspath_result func_normal_abspath "$2" func_relative_path_tbindir=$func_normal_abspath_result # Ascend the tree starting from libdir while :; do # check if we have found a prefix of bindir case $func_relative_path_tbindir in $func_relative_path_tlibdir) # found an exact match func_relative_path_tcancelled= break ;; $func_relative_path_tlibdir*) # found a matching prefix func_stripname "$func_relative_path_tlibdir" '' "$func_relative_path_tbindir" func_relative_path_tcancelled=$func_stripname_result if test -z "$func_relative_path_result"; then func_relative_path_result=. fi break ;; *) func_dirname $func_relative_path_tlibdir func_relative_path_tlibdir=$func_dirname_result if test -z "$func_relative_path_tlibdir"; then # Have to descend all the way to the root! func_relative_path_result=../$func_relative_path_result func_relative_path_tcancelled=$func_relative_path_tbindir break fi func_relative_path_result=../$func_relative_path_result ;; esac done # Now calculate path; take care to avoid doubling-up slashes. func_stripname '' '/' "$func_relative_path_result" func_relative_path_result=$func_stripname_result func_stripname '/' '/' "$func_relative_path_tcancelled" if test -n "$func_stripname_result"; then func_append func_relative_path_result "/$func_stripname_result" fi # Normalisation. If bindir is libdir, return '.' else relative path. if test -n "$func_relative_path_result"; then func_stripname './' '' "$func_relative_path_result" func_relative_path_result=$func_stripname_result fi test -n "$func_relative_path_result" || func_relative_path_result=. : } # func_quote_portable EVAL ARG # ---------------------------- # Internal function to portably implement func_quote_arg. Note that we still # keep attention to performance here so we as much as possible try to avoid # calling sed binary (so far O(N) complexity as long as func_append is O(1)). func_quote_portable () { $debug_cmd $require_check_ifs_backslash func_quote_portable_result=$2 # one-time-loop (easy break) while true do if $1; then func_quote_portable_result=`$ECHO "$2" | $SED \ -e "$sed_double_quote_subst" -e "$sed_double_backslash"` break fi # Quote for eval. case $func_quote_portable_result in *[\\\`\"\$]*) # Fallback to sed for $func_check_bs_ifs_broken=:, or when the string # contains the shell wildcard characters. case $check_ifs_backshlash_broken$func_quote_portable_result in :*|*[\[\*\?]*) func_quote_portable_result=`$ECHO "$func_quote_portable_result" \ | $SED "$sed_quote_subst"` break ;; esac func_quote_portable_old_IFS=$IFS for _G_char in '\' '`' '"' '$' do # STATE($1) PREV($2) SEPARATOR($3) set start "" "" func_quote_portable_result=dummy"$_G_char$func_quote_portable_result$_G_char"dummy IFS=$_G_char for _G_part in $func_quote_portable_result do case $1 in quote) func_append func_quote_portable_result "$3$2" set quote "$_G_part" "\\$_G_char" ;; start) set first "" "" func_quote_portable_result= ;; first) set quote "$_G_part" "" ;; esac done done IFS=$func_quote_portable_old_IFS ;; *) ;; esac break done func_quote_portable_unquoted_result=$func_quote_portable_result case $func_quote_portable_result in # double-quote args containing shell metacharacters to delay # word splitting, command substitution and variable expansion # for a subsequent eval. # many bourne shells cannot handle close brackets correctly # in scan sets, so we specify it separately. *[\[\~\#\^\&\*\(\)\{\}\|\;\<\>\?\'\ \ ]*|*]*|"") func_quote_portable_result=\"$func_quote_portable_result\" ;; esac } # func_quotefast_eval ARG # ----------------------- # Quote one ARG (internal). This is equivalent to 'func_quote_arg eval ARG', # but optimized for speed. Result is stored in $func_quotefast_eval. if test xyes = `(x=; printf -v x %q yes; echo x"$x") 2>/dev/null`; then printf -v _GL_test_printf_tilde %q '~' if test '\~' = "$_GL_test_printf_tilde"; then func_quotefast_eval () { printf -v func_quotefast_eval_result %q "$1" } else # Broken older Bash implementations. Make those faster too if possible. func_quotefast_eval () { case $1 in '~'*) func_quote_portable false "$1" func_quotefast_eval_result=$func_quote_portable_result ;; *) printf -v func_quotefast_eval_result %q "$1" ;; esac } fi else func_quotefast_eval () { func_quote_portable false "$1" func_quotefast_eval_result=$func_quote_portable_result } fi # func_quote_arg MODEs ARG # ------------------------ # Quote one ARG to be evaled later. MODEs argument may contain zero or more # specifiers listed below separated by ',' character. This function returns two # values: # i) func_quote_arg_result # double-quoted (when needed), suitable for a subsequent eval # ii) func_quote_arg_unquoted_result # has all characters that are still active within double # quotes backslashified. Available only if 'unquoted' is specified. # # Available modes: # ---------------- # 'eval' (default) # - escape shell special characters # 'expand' # - the same as 'eval'; but do not quote variable references # 'pretty' # - request aesthetic output, i.e. '"a b"' instead of 'a\ b'. This might # be used later in func_quote to get output like: 'echo "a b"' instead # of 'echo a\ b'. This is slower than default on some shells. # 'unquoted' # - produce also $func_quote_arg_unquoted_result which does not contain # wrapping double-quotes. # # Examples for 'func_quote_arg pretty,unquoted string': # # string | *_result | *_unquoted_result # ------------+-----------------------+------------------- # " | \" | \" # a b | "a b" | a b # "a b" | "\"a b\"" | \"a b\" # * | "*" | * # z="${x-$y}" | "z=\"\${x-\$y}\"" | z=\"\${x-\$y}\" # # Examples for 'func_quote_arg pretty,unquoted,expand string': # # string | *_result | *_unquoted_result # --------------+---------------------+-------------------- # z="${x-$y}" | "z=\"${x-$y}\"" | z=\"${x-$y}\" func_quote_arg () { _G_quote_expand=false case ,$1, in *,expand,*) _G_quote_expand=: ;; esac case ,$1, in *,pretty,*|*,expand,*|*,unquoted,*) func_quote_portable $_G_quote_expand "$2" func_quote_arg_result=$func_quote_portable_result func_quote_arg_unquoted_result=$func_quote_portable_unquoted_result ;; *) # Faster quote-for-eval for some shells. func_quotefast_eval "$2" func_quote_arg_result=$func_quotefast_eval_result ;; esac } # func_quote MODEs ARGs... # ------------------------ # Quote all ARGs to be evaled later and join them into single command. See # func_quote_arg's description for more info. func_quote () { $debug_cmd _G_func_quote_mode=$1 ; shift func_quote_result= while test 0 -lt $#; do func_quote_arg "$_G_func_quote_mode" "$1" if test -n "$func_quote_result"; then func_append func_quote_result " $func_quote_arg_result" else func_append func_quote_result "$func_quote_arg_result" fi shift done } # func_stripname PREFIX SUFFIX NAME # --------------------------------- # strip PREFIX and SUFFIX from NAME, and store in func_stripname_result. # PREFIX and SUFFIX must not contain globbing or regex special # characters, hashes, percent signs, but SUFFIX may contain a leading # dot (in which case that matches only a dot). if test yes = "$_G_HAVE_XSI_OPS"; then eval 'func_stripname () { $debug_cmd # pdksh 5.2.14 does not do ${X%$Y} correctly if both X and Y are # positional parameters, so assign one to ordinary variable first. func_stripname_result=$3 func_stripname_result=${func_stripname_result#"$1"} func_stripname_result=${func_stripname_result%"$2"} }' else func_stripname () { $debug_cmd case $2 in .*) func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%\\\\$2\$%%"`;; *) func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%$2\$%%"`;; esac } fi # func_show_eval CMD [FAIL_EXP] # ----------------------------- # Unless opt_quiet is true, then output CMD. Then, if opt_dryrun is # not true, evaluate CMD. If the evaluation of CMD fails, and FAIL_EXP # is given, then evaluate it. func_show_eval () { $debug_cmd _G_cmd=$1 _G_fail_exp=${2-':'} func_quote_arg pretty,expand "$_G_cmd" eval "func_notquiet $func_quote_arg_result" $opt_dry_run || { eval "$_G_cmd" _G_status=$? if test 0 -ne "$_G_status"; then eval "(exit $_G_status); $_G_fail_exp" fi } } # func_show_eval_locale CMD [FAIL_EXP] # ------------------------------------ # Unless opt_quiet is true, then output CMD. Then, if opt_dryrun is # not true, evaluate CMD. If the evaluation of CMD fails, and FAIL_EXP # is given, then evaluate it. Use the saved locale for evaluation. func_show_eval_locale () { $debug_cmd _G_cmd=$1 _G_fail_exp=${2-':'} $opt_quiet || { func_quote_arg expand,pretty "$_G_cmd" eval "func_echo $func_quote_arg_result" } $opt_dry_run || { eval "$_G_user_locale $_G_cmd" _G_status=$? eval "$_G_safe_locale" if test 0 -ne "$_G_status"; then eval "(exit $_G_status); $_G_fail_exp" fi } } # func_tr_sh # ---------- # Turn $1 into a string suitable for a shell variable name. # Result is stored in $func_tr_sh_result. All characters # not in the set a-zA-Z0-9_ are replaced with '_'. Further, # if $1 begins with a digit, a '_' is prepended as well. func_tr_sh () { $debug_cmd case $1 in [0-9]* | *[!a-zA-Z0-9_]*) func_tr_sh_result=`$ECHO "$1" | $SED -e 's/^\([0-9]\)/_\1/' -e 's/[^a-zA-Z0-9_]/_/g'` ;; * ) func_tr_sh_result=$1 ;; esac } # func_verbose ARG... # ------------------- # Echo program name prefixed message in verbose mode only. func_verbose () { $debug_cmd $opt_verbose && func_echo "$*" : } # func_warn_and_continue ARG... # ----------------------------- # Echo program name prefixed warning message to standard error. func_warn_and_continue () { $debug_cmd $require_term_colors func_echo_infix_1 "${tc_red}warning$tc_reset" "$*" >&2 } # func_warning CATEGORY ARG... # ---------------------------- # Echo program name prefixed warning message to standard error. Warning # messages can be filtered according to CATEGORY, where this function # elides messages where CATEGORY is not listed in the global variable # 'opt_warning_types'. func_warning () { $debug_cmd # CATEGORY must be in the warning_categories list! case " $warning_categories " in *" $1 "*) ;; *) func_internal_error "invalid warning category '$1'" ;; esac _G_category=$1 shift case " $opt_warning_types " in *" $_G_category "*) $warning_func ${1+"$@"} ;; esac } # func_sort_ver VER1 VER2 # ----------------------- # 'sort -V' is not generally available. # Note this deviates from the version comparison in automake # in that it treats 1.5 < 1.5.0, and treats 1.4.4a < 1.4-p3a # but this should suffice as we won't be specifying old # version formats or redundant trailing .0 in bootstrap.conf. # If we did want full compatibility then we should probably # use m4_version_compare from autoconf. func_sort_ver () { $debug_cmd printf '%s\n%s\n' "$1" "$2" \ | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n -k 5,5n -k 6,6n -k 7,7n -k 8,8n -k 9,9n } # func_lt_ver PREV CURR # --------------------- # Return true if PREV and CURR are in the correct order according to # func_sort_ver, otherwise false. Use it like this: # # func_lt_ver "$prev_ver" "$proposed_ver" || func_fatal_error "..." func_lt_ver () { $debug_cmd test "x$1" = x`func_sort_ver "$1" "$2" | $SED 1q` } # Local variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-pattern: "10/scriptversion=%:y-%02m-%02d.%02H; # UTC" # time-stamp-time-zone: "UTC" # End: #! /bin/sh # A portable, pluggable option parser for Bourne shell. # Written by Gary V. Vaughan, 2010 # This is free software. There is NO warranty; not even for # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. # # Copyright (C) 2010-2019, 2021 Bootstrap Authors # # This file is dual licensed under the terms of the MIT license # , and GPL version 2 or later # . You must apply one of # these licenses when using or redistributing this software or any of # the files within it. See the URLs above, or the file `LICENSE` # included in the Bootstrap distribution for the full license texts. # Please report bugs or propose patches to: # # Set a version string for this script. scriptversion=2019-02-19.15; # UTC ## ------ ## ## Usage. ## ## ------ ## # This file is a library for parsing options in your shell scripts along # with assorted other useful supporting features that you can make use # of too. # # For the simplest scripts you might need only: # # #!/bin/sh # . relative/path/to/funclib.sh # . relative/path/to/options-parser # scriptversion=1.0 # func_options ${1+"$@"} # eval set dummy "$func_options_result"; shift # ...rest of your script... # # In order for the '--version' option to work, you will need to have a # suitably formatted comment like the one at the top of this file # starting with '# Written by ' and ending with '# Copyright'. # # For '-h' and '--help' to work, you will also need a one line # description of your script's purpose in a comment directly above the # '# Written by ' line, like the one at the top of this file. # # The default options also support '--debug', which will turn on shell # execution tracing (see the comment above debug_cmd below for another # use), and '--verbose' and the func_verbose function to allow your script # to display verbose messages only when your user has specified # '--verbose'. # # After sourcing this file, you can plug in processing for additional # options by amending the variables from the 'Configuration' section # below, and following the instructions in the 'Option parsing' # section further down. ## -------------- ## ## Configuration. ## ## -------------- ## # You should override these variables in your script after sourcing this # file so that they reflect the customisations you have added to the # option parser. # The usage line for option parsing errors and the start of '-h' and # '--help' output messages. You can embed shell variables for delayed # expansion at the time the message is displayed, but you will need to # quote other shell meta-characters carefully to prevent them being # expanded when the contents are evaled. usage='$progpath [OPTION]...' # Short help message in response to '-h' and '--help'. Add to this or # override it after sourcing this library to reflect the full set of # options your script accepts. usage_message="\ --debug enable verbose shell tracing -W, --warnings=CATEGORY report the warnings falling in CATEGORY [all] -v, --verbose verbosely report processing --version print version information and exit -h, --help print short or long help message and exit " # Additional text appended to 'usage_message' in response to '--help'. long_help_message=" Warning categories include: 'all' show all warnings 'none' turn off all the warnings 'error' warnings are treated as fatal errors" # Help message printed before fatal option parsing errors. fatal_help="Try '\$progname --help' for more information." ## ------------------------- ## ## Hook function management. ## ## ------------------------- ## # This section contains functions for adding, removing, and running hooks # in the main code. A hook is just a list of function names that can be # run in order later on. # func_hookable FUNC_NAME # ----------------------- # Declare that FUNC_NAME will run hooks added with # 'func_add_hook FUNC_NAME ...'. func_hookable () { $debug_cmd func_append hookable_fns " $1" } # func_add_hook FUNC_NAME HOOK_FUNC # --------------------------------- # Request that FUNC_NAME call HOOK_FUNC before it returns. FUNC_NAME must # first have been declared "hookable" by a call to 'func_hookable'. func_add_hook () { $debug_cmd case " $hookable_fns " in *" $1 "*) ;; *) func_fatal_error "'$1' does not accept hook functions." ;; esac eval func_append ${1}_hooks '" $2"' } # func_remove_hook FUNC_NAME HOOK_FUNC # ------------------------------------ # Remove HOOK_FUNC from the list of hook functions to be called by # FUNC_NAME. func_remove_hook () { $debug_cmd eval ${1}_hooks='`$ECHO "\$'$1'_hooks" |$SED "s| '$2'||"`' } # func_propagate_result FUNC_NAME_A FUNC_NAME_B # --------------------------------------------- # If the *_result variable of FUNC_NAME_A _is set_, assign its value to # *_result variable of FUNC_NAME_B. func_propagate_result () { $debug_cmd func_propagate_result_result=: if eval "test \"\${${1}_result+set}\" = set" then eval "${2}_result=\$${1}_result" else func_propagate_result_result=false fi } # func_run_hooks FUNC_NAME [ARG]... # --------------------------------- # Run all hook functions registered to FUNC_NAME. # It's assumed that the list of hook functions contains nothing more # than a whitespace-delimited list of legal shell function names, and # no effort is wasted trying to catch shell meta-characters or preserve # whitespace. func_run_hooks () { $debug_cmd case " $hookable_fns " in *" $1 "*) ;; *) func_fatal_error "'$1' does not support hook functions." ;; esac eval _G_hook_fns=\$$1_hooks; shift for _G_hook in $_G_hook_fns; do func_unset "${_G_hook}_result" eval $_G_hook '${1+"$@"}' func_propagate_result $_G_hook func_run_hooks if $func_propagate_result_result; then eval set dummy "$func_run_hooks_result"; shift fi done } ## --------------- ## ## Option parsing. ## ## --------------- ## # In order to add your own option parsing hooks, you must accept the # full positional parameter list from your hook function. You may remove # or edit any options that you action, and then pass back the remaining # unprocessed options in '_result', escaped # suitably for 'eval'. # # The '_result' variable is automatically unset # before your hook gets called; for best performance, only set the # *_result variable when necessary (i.e. don't call the 'func_quote' # function unnecessarily because it can be an expensive operation on some # machines). # # Like this: # # my_options_prep () # { # $debug_cmd # # # Extend the existing usage message. # usage_message=$usage_message' # -s, --silent don'\''t print informational messages # ' # # No change in '$@' (ignored completely by this hook). Leave # # my_options_prep_result variable intact. # } # func_add_hook func_options_prep my_options_prep # # # my_silent_option () # { # $debug_cmd # # args_changed=false # # # Note that, for efficiency, we parse as many options as we can # # recognise in a loop before passing the remainder back to the # # caller on the first unrecognised argument we encounter. # while test $# -gt 0; do # opt=$1; shift # case $opt in # --silent|-s) opt_silent=: # args_changed=: # ;; # # Separate non-argument short options: # -s*) func_split_short_opt "$_G_opt" # set dummy "$func_split_short_opt_name" \ # "-$func_split_short_opt_arg" ${1+"$@"} # shift # args_changed=: # ;; # *) # Make sure the first unrecognised option "$_G_opt" # # is added back to "$@" in case we need it later, # # if $args_changed was set to 'true'. # set dummy "$_G_opt" ${1+"$@"}; shift; break ;; # esac # done # # # Only call 'func_quote' here if we processed at least one argument. # if $args_changed; then # func_quote eval ${1+"$@"} # my_silent_option_result=$func_quote_result # fi # } # func_add_hook func_parse_options my_silent_option # # # my_option_validation () # { # $debug_cmd # # $opt_silent && $opt_verbose && func_fatal_help "\ # '--silent' and '--verbose' options are mutually exclusive." # } # func_add_hook func_validate_options my_option_validation # # You'll also need to manually amend $usage_message to reflect the extra # options you parse. It's preferable to append if you can, so that # multiple option parsing hooks can be added safely. # func_options_finish [ARG]... # ---------------------------- # Finishing the option parse loop (call 'func_options' hooks ATM). func_options_finish () { $debug_cmd func_run_hooks func_options ${1+"$@"} func_propagate_result func_run_hooks func_options_finish } # func_options [ARG]... # --------------------- # All the functions called inside func_options are hookable. See the # individual implementations for details. func_hookable func_options func_options () { $debug_cmd _G_options_quoted=false for my_func in options_prep parse_options validate_options options_finish do func_unset func_${my_func}_result func_unset func_run_hooks_result eval func_$my_func '${1+"$@"}' func_propagate_result func_$my_func func_options if $func_propagate_result_result; then eval set dummy "$func_options_result"; shift _G_options_quoted=: fi done $_G_options_quoted || { # As we (func_options) are top-level options-parser function and # nobody quoted "$@" for us yet, we need to do it explicitly for # caller. func_quote eval ${1+"$@"} func_options_result=$func_quote_result } } # func_options_prep [ARG]... # -------------------------- # All initialisations required before starting the option parse loop. # Note that when calling hook functions, we pass through the list of # positional parameters. If a hook function modifies that list, and # needs to propagate that back to rest of this script, then the complete # modified list must be put in 'func_run_hooks_result' before returning. func_hookable func_options_prep func_options_prep () { $debug_cmd # Option defaults: opt_verbose=false opt_warning_types= func_run_hooks func_options_prep ${1+"$@"} func_propagate_result func_run_hooks func_options_prep } # func_parse_options [ARG]... # --------------------------- # The main option parsing loop. func_hookable func_parse_options func_parse_options () { $debug_cmd _G_parse_options_requote=false # this just eases exit handling while test $# -gt 0; do # Defer to hook functions for initial option parsing, so they # get priority in the event of reusing an option name. func_run_hooks func_parse_options ${1+"$@"} func_propagate_result func_run_hooks func_parse_options if $func_propagate_result_result; then eval set dummy "$func_parse_options_result"; shift # Even though we may have changed "$@", we passed the "$@" array # down into the hook and it quoted it for us (because we are in # this if-branch). No need to quote it again. _G_parse_options_requote=false fi # Break out of the loop if we already parsed every option. test $# -gt 0 || break # We expect that one of the options parsed in this function matches # and thus we remove _G_opt from "$@" and need to re-quote. _G_match_parse_options=: _G_opt=$1 shift case $_G_opt in --debug|-x) debug_cmd='set -x' func_echo "enabling shell trace mode" >&2 $debug_cmd ;; --no-warnings|--no-warning|--no-warn) set dummy --warnings none ${1+"$@"} shift ;; --warnings|--warning|-W) if test $# = 0 && func_missing_arg $_G_opt; then _G_parse_options_requote=: break fi case " $warning_categories $1" in *" $1 "*) # trailing space prevents matching last $1 above func_append_uniq opt_warning_types " $1" ;; *all) opt_warning_types=$warning_categories ;; *none) opt_warning_types=none warning_func=: ;; *error) opt_warning_types=$warning_categories warning_func=func_fatal_error ;; *) func_fatal_error \ "unsupported warning category: '$1'" ;; esac shift ;; --verbose|-v) opt_verbose=: ;; --version) func_version ;; -\?|-h) func_usage ;; --help) func_help ;; # Separate optargs to long options (plugins may need this): --*=*) func_split_equals "$_G_opt" set dummy "$func_split_equals_lhs" \ "$func_split_equals_rhs" ${1+"$@"} shift ;; # Separate optargs to short options: -W*) func_split_short_opt "$_G_opt" set dummy "$func_split_short_opt_name" \ "$func_split_short_opt_arg" ${1+"$@"} shift ;; # Separate non-argument short options: -\?*|-h*|-v*|-x*) func_split_short_opt "$_G_opt" set dummy "$func_split_short_opt_name" \ "-$func_split_short_opt_arg" ${1+"$@"} shift ;; --) _G_parse_options_requote=: ; break ;; -*) func_fatal_help "unrecognised option: '$_G_opt'" ;; *) set dummy "$_G_opt" ${1+"$@"}; shift _G_match_parse_options=false break ;; esac if $_G_match_parse_options; then _G_parse_options_requote=: fi done if $_G_parse_options_requote; then # save modified positional parameters for caller func_quote eval ${1+"$@"} func_parse_options_result=$func_quote_result fi } # func_validate_options [ARG]... # ------------------------------ # Perform any sanity checks on option settings and/or unconsumed # arguments. func_hookable func_validate_options func_validate_options () { $debug_cmd # Display all warnings if -W was not given. test -n "$opt_warning_types" || opt_warning_types=" $warning_categories" func_run_hooks func_validate_options ${1+"$@"} func_propagate_result func_run_hooks func_validate_options # Bail if the options were screwed! $exit_cmd $EXIT_FAILURE } ## ----------------- ## ## Helper functions. ## ## ----------------- ## # This section contains the helper functions used by the rest of the # hookable option parser framework in ascii-betical order. # func_fatal_help ARG... # ---------------------- # Echo program name prefixed message to standard error, followed by # a help hint, and exit. func_fatal_help () { $debug_cmd eval \$ECHO \""Usage: $usage"\" eval \$ECHO \""$fatal_help"\" func_error ${1+"$@"} exit $EXIT_FAILURE } # func_help # --------- # Echo long help message to standard output and exit. func_help () { $debug_cmd func_usage_message $ECHO "$long_help_message" exit 0 } # func_missing_arg ARGNAME # ------------------------ # Echo program name prefixed message to standard error and set global # exit_cmd. func_missing_arg () { $debug_cmd func_error "Missing argument for '$1'." exit_cmd=exit } # func_split_equals STRING # ------------------------ # Set func_split_equals_lhs and func_split_equals_rhs shell variables # after splitting STRING at the '=' sign. test -z "$_G_HAVE_XSI_OPS" \ && (eval 'x=a/b/c; test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \ && _G_HAVE_XSI_OPS=yes if test yes = "$_G_HAVE_XSI_OPS" then # This is an XSI compatible shell, allowing a faster implementation... eval 'func_split_equals () { $debug_cmd func_split_equals_lhs=${1%%=*} func_split_equals_rhs=${1#*=} if test "x$func_split_equals_lhs" = "x$1"; then func_split_equals_rhs= fi }' else # ...otherwise fall back to using expr, which is often a shell builtin. func_split_equals () { $debug_cmd func_split_equals_lhs=`expr "x$1" : 'x\([^=]*\)'` func_split_equals_rhs= test "x$func_split_equals_lhs=" = "x$1" \ || func_split_equals_rhs=`expr "x$1" : 'x[^=]*=\(.*\)$'` } fi #func_split_equals # func_split_short_opt SHORTOPT # ----------------------------- # Set func_split_short_opt_name and func_split_short_opt_arg shell # variables after splitting SHORTOPT after the 2nd character. if test yes = "$_G_HAVE_XSI_OPS" then # This is an XSI compatible shell, allowing a faster implementation... eval 'func_split_short_opt () { $debug_cmd func_split_short_opt_arg=${1#??} func_split_short_opt_name=${1%"$func_split_short_opt_arg"} }' else # ...otherwise fall back to using expr, which is often a shell builtin. func_split_short_opt () { $debug_cmd func_split_short_opt_name=`expr "x$1" : 'x\(-.\)'` func_split_short_opt_arg=`expr "x$1" : 'x-.\(.*\)$'` } fi #func_split_short_opt # func_usage # ---------- # Echo short help message to standard output and exit. func_usage () { $debug_cmd func_usage_message $ECHO "Run '$progname --help |${PAGER-more}' for full usage" exit 0 } # func_usage_message # ------------------ # Echo short help message to standard output. func_usage_message () { $debug_cmd eval \$ECHO \""Usage: $usage"\" echo $SED -n 's|^# || /^Written by/{ x;p;x } h /^Written by/q' < "$progpath" echo eval \$ECHO \""$usage_message"\" } # func_version # ------------ # Echo version message to standard output and exit. # The version message is extracted from the calling file's header # comments, with leading '# ' stripped: # 1. First display the progname and version # 2. Followed by the header comment line matching /^# Written by / # 3. Then a blank line followed by the first following line matching # /^# Copyright / # 4. Immediately followed by any lines between the previous matches, # except lines preceding the intervening completely blank line. # For example, see the header comments of this file. func_version () { $debug_cmd printf '%s\n' "$progname $scriptversion" $SED -n ' /^# Written by /!b s|^# ||; p; n :fwd2blnk /./ { n b fwd2blnk } p; n :holdwrnt s|^# || s|^# *$|| /^Copyright /!{ /./H n b holdwrnt } s|\((C)\)[ 0-9,-]*[ ,-]\([1-9][0-9]* \)|\1 \2| G s|\(\n\)\n*|\1|g p; q' < "$progpath" exit $? } # Local variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-pattern: "30/scriptversion=%:y-%02m-%02d.%02H; # UTC" # time-stamp-time-zone: "UTC" # End: # Set a version string. scriptversion='(GNU libtool) 2.4.7' # func_echo ARG... # ---------------- # Libtool also displays the current mode in messages, so override # funclib.sh func_echo with this custom definition. func_echo () { $debug_cmd _G_message=$* func_echo_IFS=$IFS IFS=$nl for _G_line in $_G_message; do IFS=$func_echo_IFS $ECHO "$progname${opt_mode+: $opt_mode}: $_G_line" done IFS=$func_echo_IFS } # func_warning ARG... # ------------------- # Libtool warnings are not categorized, so override funclib.sh # func_warning with this simpler definition. func_warning () { $debug_cmd $warning_func ${1+"$@"} } ## ---------------- ## ## Options parsing. ## ## ---------------- ## # Hook in the functions to make sure our own options are parsed during # the option parsing loop. usage='$progpath [OPTION]... [MODE-ARG]...' # Short help message in response to '-h'. usage_message="Options: --config show all configuration variables --debug enable verbose shell tracing -n, --dry-run display commands without modifying any files --features display basic configuration information and exit --mode=MODE use operation mode MODE --no-warnings equivalent to '-Wnone' --preserve-dup-deps don't remove duplicate dependency libraries --quiet, --silent don't print informational messages --tag=TAG use configuration variables from tag TAG -v, --verbose print more informational messages than default --version print version information -W, --warnings=CATEGORY report the warnings falling in CATEGORY [all] -h, --help, --help-all print short, long, or detailed help message " # Additional text appended to 'usage_message' in response to '--help'. func_help () { $debug_cmd func_usage_message $ECHO "$long_help_message MODE must be one of the following: clean remove files from the build directory compile compile a source file into a libtool object execute automatically set library path, then run a program finish complete the installation of libtool libraries install install libraries or executables link create a library or an executable uninstall remove libraries from an installed directory MODE-ARGS vary depending on the MODE. When passed as first option, '--mode=MODE' may be abbreviated as 'MODE' or a unique abbreviation of that. Try '$progname --help --mode=MODE' for a more detailed description of MODE. When reporting a bug, please describe a test case to reproduce it and include the following information: host-triplet: $host shell: $SHELL compiler: $LTCC compiler flags: $LTCFLAGS linker: $LD (gnu? $with_gnu_ld) version: $progname (GNU libtool) 2.4.7 automake: `($AUTOMAKE --version) 2>/dev/null |$SED 1q` autoconf: `($AUTOCONF --version) 2>/dev/null |$SED 1q` Report bugs to . GNU libtool home page: . General help using GNU software: ." exit 0 } # func_lo2o OBJECT-NAME # --------------------- # Transform OBJECT-NAME from a '.lo' suffix to the platform specific # object suffix. lo2o=s/\\.lo\$/.$objext/ o2lo=s/\\.$objext\$/.lo/ if test yes = "$_G_HAVE_XSI_OPS"; then eval 'func_lo2o () { case $1 in *.lo) func_lo2o_result=${1%.lo}.$objext ;; * ) func_lo2o_result=$1 ;; esac }' # func_xform LIBOBJ-OR-SOURCE # --------------------------- # Transform LIBOBJ-OR-SOURCE from a '.o' or '.c' (or otherwise) # suffix to a '.lo' libtool-object suffix. eval 'func_xform () { func_xform_result=${1%.*}.lo }' else # ...otherwise fall back to using sed. func_lo2o () { func_lo2o_result=`$ECHO "$1" | $SED "$lo2o"` } func_xform () { func_xform_result=`$ECHO "$1" | $SED 's|\.[^.]*$|.lo|'` } fi # func_fatal_configuration ARG... # ------------------------------- # Echo program name prefixed message to standard error, followed by # a configuration failure hint, and exit. func_fatal_configuration () { func_fatal_error ${1+"$@"} \ "See the $PACKAGE documentation for more information." \ "Fatal configuration error." } # func_config # ----------- # Display the configuration for all the tags in this script. func_config () { re_begincf='^# ### BEGIN LIBTOOL' re_endcf='^# ### END LIBTOOL' # Default configuration. $SED "1,/$re_begincf CONFIG/d;/$re_endcf CONFIG/,\$d" < "$progpath" # Now print the configurations for the tags. for tagname in $taglist; do $SED -n "/$re_begincf TAG CONFIG: $tagname\$/,/$re_endcf TAG CONFIG: $tagname\$/p" < "$progpath" done exit $? } # func_features # ------------- # Display the features supported by this script. func_features () { echo "host: $host" if test yes = "$build_libtool_libs"; then echo "enable shared libraries" else echo "disable shared libraries" fi if test yes = "$build_old_libs"; then echo "enable static libraries" else echo "disable static libraries" fi exit $? } # func_enable_tag TAGNAME # ----------------------- # Verify that TAGNAME is valid, and either flag an error and exit, or # enable the TAGNAME tag. We also add TAGNAME to the global $taglist # variable here. func_enable_tag () { # Global variable: tagname=$1 re_begincf="^# ### BEGIN LIBTOOL TAG CONFIG: $tagname\$" re_endcf="^# ### END LIBTOOL TAG CONFIG: $tagname\$" sed_extractcf=/$re_begincf/,/$re_endcf/p # Validate tagname. case $tagname in *[!-_A-Za-z0-9,/]*) func_fatal_error "invalid tag name: $tagname" ;; esac # Don't test for the "default" C tag, as we know it's # there but not specially marked. case $tagname in CC) ;; *) if $GREP "$re_begincf" "$progpath" >/dev/null 2>&1; then taglist="$taglist $tagname" # Evaluate the configuration. Be careful to quote the path # and the sed script, to avoid splitting on whitespace, but # also don't use non-portable quotes within backquotes within # quotes we have to do it in 2 steps: extractedcf=`$SED -n -e "$sed_extractcf" < "$progpath"` eval "$extractedcf" else func_error "ignoring unknown tag $tagname" fi ;; esac } # func_check_version_match # ------------------------ # Ensure that we are using m4 macros, and libtool script from the same # release of libtool. func_check_version_match () { if test "$package_revision" != "$macro_revision"; then if test "$VERSION" != "$macro_version"; then if test -z "$macro_version"; then cat >&2 <<_LT_EOF $progname: Version mismatch error. This is $PACKAGE $VERSION, but the $progname: definition of this LT_INIT comes from an older release. $progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION $progname: and run autoconf again. _LT_EOF else cat >&2 <<_LT_EOF $progname: Version mismatch error. This is $PACKAGE $VERSION, but the $progname: definition of this LT_INIT comes from $PACKAGE $macro_version. $progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION $progname: and run autoconf again. _LT_EOF fi else cat >&2 <<_LT_EOF $progname: Version mismatch error. This is $PACKAGE $VERSION, revision $package_revision, $progname: but the definition of this LT_INIT comes from revision $macro_revision. $progname: You should recreate aclocal.m4 with macros from revision $package_revision $progname: of $PACKAGE $VERSION and run autoconf again. _LT_EOF fi exit $EXIT_MISMATCH fi } # libtool_options_prep [ARG]... # ----------------------------- # Preparation for options parsed by libtool. libtool_options_prep () { $debug_mode # Option defaults: opt_config=false opt_dlopen= opt_dry_run=false opt_help=false opt_mode= opt_preserve_dup_deps=false opt_quiet=false nonopt= preserve_args= _G_rc_lt_options_prep=: # Shorthand for --mode=foo, only valid as the first argument case $1 in clean|clea|cle|cl) shift; set dummy --mode clean ${1+"$@"}; shift ;; compile|compil|compi|comp|com|co|c) shift; set dummy --mode compile ${1+"$@"}; shift ;; execute|execut|execu|exec|exe|ex|e) shift; set dummy --mode execute ${1+"$@"}; shift ;; finish|finis|fini|fin|fi|f) shift; set dummy --mode finish ${1+"$@"}; shift ;; install|instal|insta|inst|ins|in|i) shift; set dummy --mode install ${1+"$@"}; shift ;; link|lin|li|l) shift; set dummy --mode link ${1+"$@"}; shift ;; uninstall|uninstal|uninsta|uninst|unins|unin|uni|un|u) shift; set dummy --mode uninstall ${1+"$@"}; shift ;; *) _G_rc_lt_options_prep=false ;; esac if $_G_rc_lt_options_prep; then # Pass back the list of options. func_quote eval ${1+"$@"} libtool_options_prep_result=$func_quote_result fi } func_add_hook func_options_prep libtool_options_prep # libtool_parse_options [ARG]... # --------------------------------- # Provide handling for libtool specific options. libtool_parse_options () { $debug_cmd _G_rc_lt_parse_options=false # Perform our own loop to consume as many options as possible in # each iteration. while test $# -gt 0; do _G_match_lt_parse_options=: _G_opt=$1 shift case $_G_opt in --dry-run|--dryrun|-n) opt_dry_run=: ;; --config) func_config ;; --dlopen|-dlopen) opt_dlopen="${opt_dlopen+$opt_dlopen }$1" shift ;; --preserve-dup-deps) opt_preserve_dup_deps=: ;; --features) func_features ;; --finish) set dummy --mode finish ${1+"$@"}; shift ;; --help) opt_help=: ;; --help-all) opt_help=': help-all' ;; --mode) test $# = 0 && func_missing_arg $_G_opt && break opt_mode=$1 case $1 in # Valid mode arguments: clean|compile|execute|finish|install|link|relink|uninstall) ;; # Catch anything else as an error *) func_error "invalid argument for $_G_opt" exit_cmd=exit break ;; esac shift ;; --no-silent|--no-quiet) opt_quiet=false func_append preserve_args " $_G_opt" ;; --no-warnings|--no-warning|--no-warn) opt_warning=false func_append preserve_args " $_G_opt" ;; --no-verbose) opt_verbose=false func_append preserve_args " $_G_opt" ;; --silent|--quiet) opt_quiet=: opt_verbose=false func_append preserve_args " $_G_opt" ;; --tag) test $# = 0 && func_missing_arg $_G_opt && break opt_tag=$1 func_append preserve_args " $_G_opt $1" func_enable_tag "$1" shift ;; --verbose|-v) opt_quiet=false opt_verbose=: func_append preserve_args " $_G_opt" ;; # An option not handled by this hook function: *) set dummy "$_G_opt" ${1+"$@"} ; shift _G_match_lt_parse_options=false break ;; esac $_G_match_lt_parse_options && _G_rc_lt_parse_options=: done if $_G_rc_lt_parse_options; then # save modified positional parameters for caller func_quote eval ${1+"$@"} libtool_parse_options_result=$func_quote_result fi } func_add_hook func_parse_options libtool_parse_options # libtool_validate_options [ARG]... # --------------------------------- # Perform any sanity checks on option settings and/or unconsumed # arguments. libtool_validate_options () { # save first non-option argument if test 0 -lt $#; then nonopt=$1 shift fi # preserve --debug test : = "$debug_cmd" || func_append preserve_args " --debug" # Keeping compiler generated duplicates in $postdeps and $predeps is not # harmful, and is necessary in a majority of systems that use it to satisfy # symbol dependencies. opt_duplicate_compiler_generated_deps=: $opt_help || { # Sanity checks first: func_check_version_match test yes != "$build_libtool_libs" \ && test yes != "$build_old_libs" \ && func_fatal_configuration "not configured to build any kind of library" # Darwin sucks eval std_shrext=\"$shrext_cmds\" # Only execute mode is allowed to have -dlopen flags. if test -n "$opt_dlopen" && test execute != "$opt_mode"; then func_error "unrecognized option '-dlopen'" $ECHO "$help" 1>&2 exit $EXIT_FAILURE fi # Change the help message to a mode-specific one. generic_help=$help help="Try '$progname --help --mode=$opt_mode' for more information." } # Pass back the unparsed argument list func_quote eval ${1+"$@"} libtool_validate_options_result=$func_quote_result } func_add_hook func_validate_options libtool_validate_options # Process options as early as possible so that --help and --version # can return quickly. func_options ${1+"$@"} eval set dummy "$func_options_result"; shift ## ----------- ## ## Main. ## ## ----------- ## magic='%%%MAGIC variable%%%' magic_exe='%%%MAGIC EXE variable%%%' # Global variables. extracted_archives= extracted_serial=0 # If this variable is set in any of the actions, the command in it # will be execed at the end. This prevents here-documents from being # left over by shells. exec_cmd= # A function that is used when there is no print builtin or printf. func_fallback_echo () { eval 'cat <<_LTECHO_EOF $1 _LTECHO_EOF' } # func_generated_by_libtool # True iff stdin has been generated by Libtool. This function is only # a basic sanity check; it will hardly flush out determined imposters. func_generated_by_libtool_p () { $GREP "^# Generated by .*$PACKAGE" > /dev/null 2>&1 } # func_lalib_p file # True iff FILE is a libtool '.la' library or '.lo' object file. # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_lalib_p () { test -f "$1" && $SED -e 4q "$1" 2>/dev/null | func_generated_by_libtool_p } # func_lalib_unsafe_p file # True iff FILE is a libtool '.la' library or '.lo' object file. # This function implements the same check as func_lalib_p without # resorting to external programs. To this end, it redirects stdin and # closes it afterwards, without saving the original file descriptor. # As a safety measure, use it only where a negative result would be # fatal anyway. Works if 'file' does not exist. func_lalib_unsafe_p () { lalib_p=no if test -f "$1" && test -r "$1" && exec 5<&0 <"$1"; then for lalib_p_l in 1 2 3 4 do read lalib_p_line case $lalib_p_line in \#\ Generated\ by\ *$PACKAGE* ) lalib_p=yes; break;; esac done exec 0<&5 5<&- fi test yes = "$lalib_p" } # func_ltwrapper_script_p file # True iff FILE is a libtool wrapper script # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_ltwrapper_script_p () { test -f "$1" && $lt_truncate_bin < "$1" 2>/dev/null | func_generated_by_libtool_p } # func_ltwrapper_executable_p file # True iff FILE is a libtool wrapper executable # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_ltwrapper_executable_p () { func_ltwrapper_exec_suffix= case $1 in *.exe) ;; *) func_ltwrapper_exec_suffix=.exe ;; esac $GREP "$magic_exe" "$1$func_ltwrapper_exec_suffix" >/dev/null 2>&1 } # func_ltwrapper_scriptname file # Assumes file is an ltwrapper_executable # uses $file to determine the appropriate filename for a # temporary ltwrapper_script. func_ltwrapper_scriptname () { func_dirname_and_basename "$1" "" "." func_stripname '' '.exe' "$func_basename_result" func_ltwrapper_scriptname_result=$func_dirname_result/$objdir/${func_stripname_result}_ltshwrapper } # func_ltwrapper_p file # True iff FILE is a libtool wrapper script or wrapper executable # This function is only a basic sanity check; it will hardly flush out # determined imposters. func_ltwrapper_p () { func_ltwrapper_script_p "$1" || func_ltwrapper_executable_p "$1" } # func_execute_cmds commands fail_cmd # Execute tilde-delimited COMMANDS. # If FAIL_CMD is given, eval that upon failure. # FAIL_CMD may read-access the current command in variable CMD! func_execute_cmds () { $debug_cmd save_ifs=$IFS; IFS='~' for cmd in $1; do IFS=$sp$nl eval cmd=\"$cmd\" IFS=$save_ifs func_show_eval "$cmd" "${2-:}" done IFS=$save_ifs } # func_source file # Source FILE, adding directory component if necessary. # Note that it is not necessary on cygwin/mingw to append a dot to # FILE even if both FILE and FILE.exe exist: automatic-append-.exe # behavior happens only for exec(3), not for open(2)! Also, sourcing # 'FILE.' does not work on cygwin managed mounts. func_source () { $debug_cmd case $1 in */* | *\\*) . "$1" ;; *) . "./$1" ;; esac } # func_resolve_sysroot PATH # Replace a leading = in PATH with a sysroot. Store the result into # func_resolve_sysroot_result func_resolve_sysroot () { func_resolve_sysroot_result=$1 case $func_resolve_sysroot_result in =*) func_stripname '=' '' "$func_resolve_sysroot_result" func_resolve_sysroot_result=$lt_sysroot$func_stripname_result ;; esac } # func_replace_sysroot PATH # If PATH begins with the sysroot, replace it with = and # store the result into func_replace_sysroot_result. func_replace_sysroot () { case $lt_sysroot:$1 in ?*:"$lt_sysroot"*) func_stripname "$lt_sysroot" '' "$1" func_replace_sysroot_result='='$func_stripname_result ;; *) # Including no sysroot. func_replace_sysroot_result=$1 ;; esac } # func_infer_tag arg # Infer tagged configuration to use if any are available and # if one wasn't chosen via the "--tag" command line option. # Only attempt this if the compiler in the base compile # command doesn't match the default compiler. # arg is usually of the form 'gcc ...' func_infer_tag () { $debug_cmd if test -n "$available_tags" && test -z "$tagname"; then CC_quoted= for arg in $CC; do func_append_quoted CC_quoted "$arg" done CC_expanded=`func_echo_all $CC` CC_quoted_expanded=`func_echo_all $CC_quoted` case $@ in # Blanks in the command may have been stripped by the calling shell, # but not from the CC environment variable when configure was run. " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \ " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*) ;; # Blanks at the start of $base_compile will cause this to fail # if we don't check for them as well. *) for z in $available_tags; do if $GREP "^# ### BEGIN LIBTOOL TAG CONFIG: $z$" < "$progpath" > /dev/null; then # Evaluate the configuration. eval "`$SED -n -e '/^# ### BEGIN LIBTOOL TAG CONFIG: '$z'$/,/^# ### END LIBTOOL TAG CONFIG: '$z'$/p' < $progpath`" CC_quoted= for arg in $CC; do # Double-quote args containing other shell metacharacters. func_append_quoted CC_quoted "$arg" done CC_expanded=`func_echo_all $CC` CC_quoted_expanded=`func_echo_all $CC_quoted` case "$@ " in " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \ " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*) # The compiler in the base compile command matches # the one in the tagged configuration. # Assume this is the tagged configuration we want. tagname=$z break ;; esac fi done # If $tagname still isn't set, then no tagged configuration # was found and let the user know that the "--tag" command # line option must be used. if test -z "$tagname"; then func_echo "unable to infer tagged configuration" func_fatal_error "specify a tag with '--tag'" # else # func_verbose "using $tagname tagged configuration" fi ;; esac fi } # func_write_libtool_object output_name pic_name nonpic_name # Create a libtool object file (analogous to a ".la" file), # but don't create it if we're doing a dry run. func_write_libtool_object () { write_libobj=$1 if test yes = "$build_libtool_libs"; then write_lobj=\'$2\' else write_lobj=none fi if test yes = "$build_old_libs"; then write_oldobj=\'$3\' else write_oldobj=none fi $opt_dry_run || { cat >${write_libobj}T </dev/null` if test "$?" -eq 0 && test -n "$func_convert_core_file_wine_to_w32_tmp"; then func_convert_core_file_wine_to_w32_result=`$ECHO "$func_convert_core_file_wine_to_w32_tmp" | $SED -e "$sed_naive_backslashify"` else func_convert_core_file_wine_to_w32_result= fi fi } # end: func_convert_core_file_wine_to_w32 # func_convert_core_path_wine_to_w32 ARG # Helper function used by path conversion functions when $build is *nix, and # $host is mingw, cygwin, or some other w32 environment. Relies on a correctly # configured wine environment available, with the winepath program in $build's # $PATH. Assumes ARG has no leading or trailing path separator characters. # # ARG is path to be converted from $build format to win32. # Result is available in $func_convert_core_path_wine_to_w32_result. # Unconvertible file (directory) names in ARG are skipped; if no directory names # are convertible, then the result may be empty. func_convert_core_path_wine_to_w32 () { $debug_cmd # unfortunately, winepath doesn't convert paths, only file names func_convert_core_path_wine_to_w32_result= if test -n "$1"; then oldIFS=$IFS IFS=: for func_convert_core_path_wine_to_w32_f in $1; do IFS=$oldIFS func_convert_core_file_wine_to_w32 "$func_convert_core_path_wine_to_w32_f" if test -n "$func_convert_core_file_wine_to_w32_result"; then if test -z "$func_convert_core_path_wine_to_w32_result"; then func_convert_core_path_wine_to_w32_result=$func_convert_core_file_wine_to_w32_result else func_append func_convert_core_path_wine_to_w32_result ";$func_convert_core_file_wine_to_w32_result" fi fi done IFS=$oldIFS fi } # end: func_convert_core_path_wine_to_w32 # func_cygpath ARGS... # Wrapper around calling the cygpath program via LT_CYGPATH. This is used when # when (1) $build is *nix and Cygwin is hosted via a wine environment; or (2) # $build is MSYS and $host is Cygwin, or (3) $build is Cygwin. In case (1) or # (2), returns the Cygwin file name or path in func_cygpath_result (input # file name or path is assumed to be in w32 format, as previously converted # from $build's *nix or MSYS format). In case (3), returns the w32 file name # or path in func_cygpath_result (input file name or path is assumed to be in # Cygwin format). Returns an empty string on error. # # ARGS are passed to cygpath, with the last one being the file name or path to # be converted. # # Specify the absolute *nix (or w32) name to cygpath in the LT_CYGPATH # environment variable; do not put it in $PATH. func_cygpath () { $debug_cmd if test -n "$LT_CYGPATH" && test -f "$LT_CYGPATH"; then func_cygpath_result=`$LT_CYGPATH "$@" 2>/dev/null` if test "$?" -ne 0; then # on failure, ensure result is empty func_cygpath_result= fi else func_cygpath_result= func_error "LT_CYGPATH is empty or specifies non-existent file: '$LT_CYGPATH'" fi } #end: func_cygpath # func_convert_core_msys_to_w32 ARG # Convert file name or path ARG from MSYS format to w32 format. Return # result in func_convert_core_msys_to_w32_result. func_convert_core_msys_to_w32 () { $debug_cmd # awkward: cmd appends spaces to result func_convert_core_msys_to_w32_result=`( cmd //c echo "$1" ) 2>/dev/null | $SED -e 's/[ ]*$//' -e "$sed_naive_backslashify"` } #end: func_convert_core_msys_to_w32 # func_convert_file_check ARG1 ARG2 # Verify that ARG1 (a file name in $build format) was converted to $host # format in ARG2. Otherwise, emit an error message, but continue (resetting # func_to_host_file_result to ARG1). func_convert_file_check () { $debug_cmd if test -z "$2" && test -n "$1"; then func_error "Could not determine host file name corresponding to" func_error " '$1'" func_error "Continuing, but uninstalled executables may not work." # Fallback: func_to_host_file_result=$1 fi } # end func_convert_file_check # func_convert_path_check FROM_PATHSEP TO_PATHSEP FROM_PATH TO_PATH # Verify that FROM_PATH (a path in $build format) was converted to $host # format in TO_PATH. Otherwise, emit an error message, but continue, resetting # func_to_host_file_result to a simplistic fallback value (see below). func_convert_path_check () { $debug_cmd if test -z "$4" && test -n "$3"; then func_error "Could not determine the host path corresponding to" func_error " '$3'" func_error "Continuing, but uninstalled executables may not work." # Fallback. This is a deliberately simplistic "conversion" and # should not be "improved". See libtool.info. if test "x$1" != "x$2"; then lt_replace_pathsep_chars="s|$1|$2|g" func_to_host_path_result=`echo "$3" | $SED -e "$lt_replace_pathsep_chars"` else func_to_host_path_result=$3 fi fi } # end func_convert_path_check # func_convert_path_front_back_pathsep FRONTPAT BACKPAT REPL ORIG # Modifies func_to_host_path_result by prepending REPL if ORIG matches FRONTPAT # and appending REPL if ORIG matches BACKPAT. func_convert_path_front_back_pathsep () { $debug_cmd case $4 in $1 ) func_to_host_path_result=$3$func_to_host_path_result ;; esac case $4 in $2 ) func_append func_to_host_path_result "$3" ;; esac } # end func_convert_path_front_back_pathsep ################################################## # $build to $host FILE NAME CONVERSION FUNCTIONS # ################################################## # invoked via '$to_host_file_cmd ARG' # # In each case, ARG is the path to be converted from $build to $host format. # Result will be available in $func_to_host_file_result. # func_to_host_file ARG # Converts the file name ARG from $build format to $host format. Return result # in func_to_host_file_result. func_to_host_file () { $debug_cmd $to_host_file_cmd "$1" } # end func_to_host_file # func_to_tool_file ARG LAZY # converts the file name ARG from $build format to toolchain format. Return # result in func_to_tool_file_result. If the conversion in use is listed # in (the comma separated) LAZY, no conversion takes place. func_to_tool_file () { $debug_cmd case ,$2, in *,"$to_tool_file_cmd",*) func_to_tool_file_result=$1 ;; *) $to_tool_file_cmd "$1" func_to_tool_file_result=$func_to_host_file_result ;; esac } # end func_to_tool_file # func_convert_file_noop ARG # Copy ARG to func_to_host_file_result. func_convert_file_noop () { func_to_host_file_result=$1 } # end func_convert_file_noop # func_convert_file_msys_to_w32 ARG # Convert file name ARG from (mingw) MSYS to (mingw) w32 format; automatic # conversion to w32 is not available inside the cwrapper. Returns result in # func_to_host_file_result. func_convert_file_msys_to_w32 () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then func_convert_core_msys_to_w32 "$1" func_to_host_file_result=$func_convert_core_msys_to_w32_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_msys_to_w32 # func_convert_file_cygwin_to_w32 ARG # Convert file name ARG from Cygwin to w32 format. Returns result in # func_to_host_file_result. func_convert_file_cygwin_to_w32 () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then # because $build is cygwin, we call "the" cygpath in $PATH; no need to use # LT_CYGPATH in this case. func_to_host_file_result=`cygpath -m "$1"` fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_cygwin_to_w32 # func_convert_file_nix_to_w32 ARG # Convert file name ARG from *nix to w32 format. Requires a wine environment # and a working winepath. Returns result in func_to_host_file_result. func_convert_file_nix_to_w32 () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then func_convert_core_file_wine_to_w32 "$1" func_to_host_file_result=$func_convert_core_file_wine_to_w32_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_nix_to_w32 # func_convert_file_msys_to_cygwin ARG # Convert file name ARG from MSYS to Cygwin format. Requires LT_CYGPATH set. # Returns result in func_to_host_file_result. func_convert_file_msys_to_cygwin () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then func_convert_core_msys_to_w32 "$1" func_cygpath -u "$func_convert_core_msys_to_w32_result" func_to_host_file_result=$func_cygpath_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_msys_to_cygwin # func_convert_file_nix_to_cygwin ARG # Convert file name ARG from *nix to Cygwin format. Requires Cygwin installed # in a wine environment, working winepath, and LT_CYGPATH set. Returns result # in func_to_host_file_result. func_convert_file_nix_to_cygwin () { $debug_cmd func_to_host_file_result=$1 if test -n "$1"; then # convert from *nix to w32, then use cygpath to convert from w32 to cygwin. func_convert_core_file_wine_to_w32 "$1" func_cygpath -u "$func_convert_core_file_wine_to_w32_result" func_to_host_file_result=$func_cygpath_result fi func_convert_file_check "$1" "$func_to_host_file_result" } # end func_convert_file_nix_to_cygwin ############################################# # $build to $host PATH CONVERSION FUNCTIONS # ############################################# # invoked via '$to_host_path_cmd ARG' # # In each case, ARG is the path to be converted from $build to $host format. # The result will be available in $func_to_host_path_result. # # Path separators are also converted from $build format to $host format. If # ARG begins or ends with a path separator character, it is preserved (but # converted to $host format) on output. # # All path conversion functions are named using the following convention: # file name conversion function : func_convert_file_X_to_Y () # path conversion function : func_convert_path_X_to_Y () # where, for any given $build/$host combination the 'X_to_Y' value is the # same. If conversion functions are added for new $build/$host combinations, # the two new functions must follow this pattern, or func_init_to_host_path_cmd # will break. # func_init_to_host_path_cmd # Ensures that function "pointer" variable $to_host_path_cmd is set to the # appropriate value, based on the value of $to_host_file_cmd. to_host_path_cmd= func_init_to_host_path_cmd () { $debug_cmd if test -z "$to_host_path_cmd"; then func_stripname 'func_convert_file_' '' "$to_host_file_cmd" to_host_path_cmd=func_convert_path_$func_stripname_result fi } # func_to_host_path ARG # Converts the path ARG from $build format to $host format. Return result # in func_to_host_path_result. func_to_host_path () { $debug_cmd func_init_to_host_path_cmd $to_host_path_cmd "$1" } # end func_to_host_path # func_convert_path_noop ARG # Copy ARG to func_to_host_path_result. func_convert_path_noop () { func_to_host_path_result=$1 } # end func_convert_path_noop # func_convert_path_msys_to_w32 ARG # Convert path ARG from (mingw) MSYS to (mingw) w32 format; automatic # conversion to w32 is not available inside the cwrapper. Returns result in # func_to_host_path_result. func_convert_path_msys_to_w32 () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # Remove leading and trailing path separator characters from ARG. MSYS # behavior is inconsistent here; cygpath turns them into '.;' and ';.'; # and winepath ignores them completely. func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_msys_to_w32 "$func_to_host_path_tmp1" func_to_host_path_result=$func_convert_core_msys_to_w32_result func_convert_path_check : ";" \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" ";" "$1" fi } # end func_convert_path_msys_to_w32 # func_convert_path_cygwin_to_w32 ARG # Convert path ARG from Cygwin to w32 format. Returns result in # func_to_host_file_result. func_convert_path_cygwin_to_w32 () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # See func_convert_path_msys_to_w32: func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_to_host_path_result=`cygpath -m -p "$func_to_host_path_tmp1"` func_convert_path_check : ";" \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" ";" "$1" fi } # end func_convert_path_cygwin_to_w32 # func_convert_path_nix_to_w32 ARG # Convert path ARG from *nix to w32 format. Requires a wine environment and # a working winepath. Returns result in func_to_host_file_result. func_convert_path_nix_to_w32 () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # See func_convert_path_msys_to_w32: func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1" func_to_host_path_result=$func_convert_core_path_wine_to_w32_result func_convert_path_check : ";" \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" ";" "$1" fi } # end func_convert_path_nix_to_w32 # func_convert_path_msys_to_cygwin ARG # Convert path ARG from MSYS to Cygwin format. Requires LT_CYGPATH set. # Returns result in func_to_host_file_result. func_convert_path_msys_to_cygwin () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # See func_convert_path_msys_to_w32: func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_msys_to_w32 "$func_to_host_path_tmp1" func_cygpath -u -p "$func_convert_core_msys_to_w32_result" func_to_host_path_result=$func_cygpath_result func_convert_path_check : : \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" : "$1" fi } # end func_convert_path_msys_to_cygwin # func_convert_path_nix_to_cygwin ARG # Convert path ARG from *nix to Cygwin format. Requires Cygwin installed in a # a wine environment, working winepath, and LT_CYGPATH set. Returns result in # func_to_host_file_result. func_convert_path_nix_to_cygwin () { $debug_cmd func_to_host_path_result=$1 if test -n "$1"; then # Remove leading and trailing path separator characters from # ARG. msys behavior is inconsistent here, cygpath turns them # into '.;' and ';.', and winepath ignores them completely. func_stripname : : "$1" func_to_host_path_tmp1=$func_stripname_result func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1" func_cygpath -u -p "$func_convert_core_path_wine_to_w32_result" func_to_host_path_result=$func_cygpath_result func_convert_path_check : : \ "$func_to_host_path_tmp1" "$func_to_host_path_result" func_convert_path_front_back_pathsep ":*" "*:" : "$1" fi } # end func_convert_path_nix_to_cygwin # func_dll_def_p FILE # True iff FILE is a Windows DLL '.def' file. # Keep in sync with _LT_DLL_DEF_P in libtool.m4 func_dll_def_p () { $debug_cmd func_dll_def_p_tmp=`$SED -n \ -e 's/^[ ]*//' \ -e '/^\(;.*\)*$/d' \ -e 's/^\(EXPORTS\|LIBRARY\)\([ ].*\)*$/DEF/p' \ -e q \ "$1"` test DEF = "$func_dll_def_p_tmp" } # func_mode_compile arg... func_mode_compile () { $debug_cmd # Get the compilation command and the source file. base_compile= srcfile=$nonopt # always keep a non-empty value in "srcfile" suppress_opt=yes suppress_output= arg_mode=normal libobj= later= pie_flag= for arg do case $arg_mode in arg ) # do not "continue". Instead, add this to base_compile lastarg=$arg arg_mode=normal ;; target ) libobj=$arg arg_mode=normal continue ;; normal ) # Accept any command-line options. case $arg in -o) test -n "$libobj" && \ func_fatal_error "you cannot specify '-o' more than once" arg_mode=target continue ;; -pie | -fpie | -fPIE) func_append pie_flag " $arg" continue ;; -shared | -static | -prefer-pic | -prefer-non-pic) func_append later " $arg" continue ;; -no-suppress) suppress_opt=no continue ;; -Xcompiler) arg_mode=arg # the next one goes into the "base_compile" arg list continue # The current "srcfile" will either be retained or ;; # replaced later. I would guess that would be a bug. -Wc,*) func_stripname '-Wc,' '' "$arg" args=$func_stripname_result lastarg= save_ifs=$IFS; IFS=, for arg in $args; do IFS=$save_ifs func_append_quoted lastarg "$arg" done IFS=$save_ifs func_stripname ' ' '' "$lastarg" lastarg=$func_stripname_result # Add the arguments to base_compile. func_append base_compile " $lastarg" continue ;; *) # Accept the current argument as the source file. # The previous "srcfile" becomes the current argument. # lastarg=$srcfile srcfile=$arg ;; esac # case $arg ;; esac # case $arg_mode # Aesthetically quote the previous argument. func_append_quoted base_compile "$lastarg" done # for arg case $arg_mode in arg) func_fatal_error "you must specify an argument for -Xcompile" ;; target) func_fatal_error "you must specify a target with '-o'" ;; *) # Get the name of the library object. test -z "$libobj" && { func_basename "$srcfile" libobj=$func_basename_result } ;; esac # Recognize several different file suffixes. # If the user specifies -o file.o, it is replaced with file.lo case $libobj in *.[cCFSifmso] | \ *.ada | *.adb | *.ads | *.asm | \ *.c++ | *.cc | *.ii | *.class | *.cpp | *.cxx | \ *.[fF][09]? | *.for | *.java | *.go | *.obj | *.sx | *.cu | *.cup) func_xform "$libobj" libobj=$func_xform_result ;; esac case $libobj in *.lo) func_lo2o "$libobj"; obj=$func_lo2o_result ;; *) func_fatal_error "cannot determine name of library object from '$libobj'" ;; esac func_infer_tag $base_compile for arg in $later; do case $arg in -shared) test yes = "$build_libtool_libs" \ || func_fatal_configuration "cannot build a shared library" build_old_libs=no continue ;; -static) build_libtool_libs=no build_old_libs=yes continue ;; -prefer-pic) pic_mode=yes continue ;; -prefer-non-pic) pic_mode=no continue ;; esac done func_quote_arg pretty "$libobj" test "X$libobj" != "X$func_quote_arg_result" \ && $ECHO "X$libobj" | $GREP '[]~#^*{};<>?"'"'"' &()|`$[]' \ && func_warning "libobj name '$libobj' may not contain shell special characters." func_dirname_and_basename "$obj" "/" "" objname=$func_basename_result xdir=$func_dirname_result lobj=$xdir$objdir/$objname test -z "$base_compile" && \ func_fatal_help "you must specify a compilation command" # Delete any leftover library objects. if test yes = "$build_old_libs"; then removelist="$obj $lobj $libobj ${libobj}T" else removelist="$lobj $libobj ${libobj}T" fi # On Cygwin there's no "real" PIC flag so we must build both object types case $host_os in cygwin* | mingw* | pw32* | os2* | cegcc*) pic_mode=default ;; esac if test no = "$pic_mode" && test pass_all != "$deplibs_check_method"; then # non-PIC code in shared libraries is not supported pic_mode=default fi # Calculate the filename of the output object if compiler does # not support -o with -c if test no = "$compiler_c_o"; then output_obj=`$ECHO "$srcfile" | $SED 's%^.*/%%; s%\.[^.]*$%%'`.$objext lockfile=$output_obj.lock else output_obj= need_locks=no lockfile= fi # Lock this critical section if it is needed # We use this script file to make the link, it avoids creating a new file if test yes = "$need_locks"; then until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do func_echo "Waiting for $lockfile to be removed" sleep 2 done elif test warn = "$need_locks"; then if test -f "$lockfile"; then $ECHO "\ *** ERROR, $lockfile exists and contains: `cat $lockfile 2>/dev/null` This indicates that another process is trying to use the same temporary object file, and libtool could not work around it because your compiler does not support '-c' and '-o' together. If you repeat this compilation, it may succeed, by chance, but you had better avoid parallel builds (make -j) in this platform, or get a better compiler." $opt_dry_run || $RM $removelist exit $EXIT_FAILURE fi func_append removelist " $output_obj" $ECHO "$srcfile" > "$lockfile" fi $opt_dry_run || $RM $removelist func_append removelist " $lockfile" trap '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE' 1 2 15 func_to_tool_file "$srcfile" func_convert_file_msys_to_w32 srcfile=$func_to_tool_file_result func_quote_arg pretty "$srcfile" qsrcfile=$func_quote_arg_result # Only build a PIC object if we are building libtool libraries. if test yes = "$build_libtool_libs"; then # Without this assignment, base_compile gets emptied. fbsd_hideous_sh_bug=$base_compile if test no != "$pic_mode"; then command="$base_compile $qsrcfile $pic_flag" else # Don't build PIC code command="$base_compile $qsrcfile" fi func_mkdir_p "$xdir$objdir" if test -z "$output_obj"; then # Place PIC objects in $objdir func_append command " -o $lobj" fi func_show_eval_locale "$command" \ 'test -n "$output_obj" && $RM $removelist; exit $EXIT_FAILURE' if test warn = "$need_locks" && test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then $ECHO "\ *** ERROR, $lockfile contains: `cat $lockfile 2>/dev/null` but it should contain: $srcfile This indicates that another process is trying to use the same temporary object file, and libtool could not work around it because your compiler does not support '-c' and '-o' together. If you repeat this compilation, it may succeed, by chance, but you had better avoid parallel builds (make -j) in this platform, or get a better compiler." $opt_dry_run || $RM $removelist exit $EXIT_FAILURE fi # Just move the object if needed, then go on to compile the next one if test -n "$output_obj" && test "X$output_obj" != "X$lobj"; then func_show_eval '$MV "$output_obj" "$lobj"' \ 'error=$?; $opt_dry_run || $RM $removelist; exit $error' fi # Allow error messages only from the first compilation. if test yes = "$suppress_opt"; then suppress_output=' >/dev/null 2>&1' fi fi # Only build a position-dependent object if we build old libraries. if test yes = "$build_old_libs"; then if test yes != "$pic_mode"; then # Don't build PIC code command="$base_compile $qsrcfile$pie_flag" else command="$base_compile $qsrcfile $pic_flag" fi if test yes = "$compiler_c_o"; then func_append command " -o $obj" fi # Suppress compiler output if we already did a PIC compilation. func_append command "$suppress_output" func_show_eval_locale "$command" \ '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE' if test warn = "$need_locks" && test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then $ECHO "\ *** ERROR, $lockfile contains: `cat $lockfile 2>/dev/null` but it should contain: $srcfile This indicates that another process is trying to use the same temporary object file, and libtool could not work around it because your compiler does not support '-c' and '-o' together. If you repeat this compilation, it may succeed, by chance, but you had better avoid parallel builds (make -j) in this platform, or get a better compiler." $opt_dry_run || $RM $removelist exit $EXIT_FAILURE fi # Just move the object if needed if test -n "$output_obj" && test "X$output_obj" != "X$obj"; then func_show_eval '$MV "$output_obj" "$obj"' \ 'error=$?; $opt_dry_run || $RM $removelist; exit $error' fi fi $opt_dry_run || { func_write_libtool_object "$libobj" "$objdir/$objname" "$objname" # Unlock the critical section if it was locked if test no != "$need_locks"; then removelist=$lockfile $RM "$lockfile" fi } exit $EXIT_SUCCESS } $opt_help || { test compile = "$opt_mode" && func_mode_compile ${1+"$@"} } func_mode_help () { # We need to display help for each of the modes. case $opt_mode in "") # Generic help is extracted from the usage comments # at the start of this file. func_help ;; clean) $ECHO \ "Usage: $progname [OPTION]... --mode=clean RM [RM-OPTION]... FILE... Remove files from the build directory. RM is the name of the program to use to delete files associated with each FILE (typically '/bin/rm'). RM-OPTIONS are options (such as '-f') to be passed to RM. If FILE is a libtool library, object or program, all the files associated with it are deleted. Otherwise, only FILE itself is deleted using RM." ;; compile) $ECHO \ "Usage: $progname [OPTION]... --mode=compile COMPILE-COMMAND... SOURCEFILE Compile a source file into a libtool library object. This mode accepts the following additional options: -o OUTPUT-FILE set the output file name to OUTPUT-FILE -no-suppress do not suppress compiler output for multiple passes -prefer-pic try to build PIC objects only -prefer-non-pic try to build non-PIC objects only -shared do not build a '.o' file suitable for static linking -static only build a '.o' file suitable for static linking -Wc,FLAG -Xcompiler FLAG pass FLAG directly to the compiler COMPILE-COMMAND is a command to be used in creating a 'standard' object file from the given SOURCEFILE. The output file name is determined by removing the directory component from SOURCEFILE, then substituting the C source code suffix '.c' with the library object suffix, '.lo'." ;; execute) $ECHO \ "Usage: $progname [OPTION]... --mode=execute COMMAND [ARGS]... Automatically set library path, then run a program. This mode accepts the following additional options: -dlopen FILE add the directory containing FILE to the library path This mode sets the library path environment variable according to '-dlopen' flags. If any of the ARGS are libtool executable wrappers, then they are translated into their corresponding uninstalled binary, and any of their required library directories are added to the library path. Then, COMMAND is executed, with ARGS as arguments." ;; finish) $ECHO \ "Usage: $progname [OPTION]... --mode=finish [LIBDIR]... Complete the installation of libtool libraries. Each LIBDIR is a directory that contains libtool libraries. The commands that this mode executes may require superuser privileges. Use the '--dry-run' option if you just want to see what would be executed." ;; install) $ECHO \ "Usage: $progname [OPTION]... --mode=install INSTALL-COMMAND... Install executables or libraries. INSTALL-COMMAND is the installation command. The first component should be either the 'install' or 'cp' program. The following components of INSTALL-COMMAND are treated specially: -inst-prefix-dir PREFIX-DIR Use PREFIX-DIR as a staging area for installation The rest of the components are interpreted as arguments to that command (only BSD-compatible install options are recognized)." ;; link) $ECHO \ "Usage: $progname [OPTION]... --mode=link LINK-COMMAND... Link object files or libraries together to form another library, or to create an executable program. LINK-COMMAND is a command using the C compiler that you would use to create a program from several object files. The following components of LINK-COMMAND are treated specially: -all-static do not do any dynamic linking at all -avoid-version do not add a version suffix if possible -bindir BINDIR specify path to binaries directory (for systems where libraries must be found in the PATH setting at runtime) -dlopen FILE '-dlpreopen' FILE if it cannot be dlopened at runtime -dlpreopen FILE link in FILE and add its symbols to lt_preloaded_symbols -export-dynamic allow symbols from OUTPUT-FILE to be resolved with dlsym(3) -export-symbols SYMFILE try to export only the symbols listed in SYMFILE -export-symbols-regex REGEX try to export only the symbols matching REGEX -LLIBDIR search LIBDIR for required installed libraries -lNAME OUTPUT-FILE requires the installed library libNAME -module build a library that can dlopened -no-fast-install disable the fast-install mode -no-install link a not-installable executable -no-undefined declare that a library does not refer to external symbols -o OUTPUT-FILE create OUTPUT-FILE from the specified objects -objectlist FILE use a list of object files found in FILE to specify objects -os2dllname NAME force a short DLL name on OS/2 (no effect on other OSes) -precious-files-regex REGEX don't remove output files matching REGEX -release RELEASE specify package release information -rpath LIBDIR the created library will eventually be installed in LIBDIR -R[ ]LIBDIR add LIBDIR to the runtime path of programs and libraries -shared only do dynamic linking of libtool libraries -shrext SUFFIX override the standard shared library file extension -static do not do any dynamic linking of uninstalled libtool libraries -static-libtool-libs do not do any dynamic linking of libtool libraries -version-info CURRENT[:REVISION[:AGE]] specify library version info [each variable defaults to 0] -weak LIBNAME declare that the target provides the LIBNAME interface -Wc,FLAG -Xcompiler FLAG pass linker-specific FLAG directly to the compiler -Wa,FLAG -Xassembler FLAG pass linker-specific FLAG directly to the assembler -Wl,FLAG -Xlinker FLAG pass linker-specific FLAG directly to the linker -XCClinker FLAG pass link-specific FLAG to the compiler driver (CC) All other options (arguments beginning with '-') are ignored. Every other argument is treated as a filename. Files ending in '.la' are treated as uninstalled libtool libraries, other files are standard or library object files. If the OUTPUT-FILE ends in '.la', then a libtool library is created, only library objects ('.lo' files) may be specified, and '-rpath' is required, except when creating a convenience library. If OUTPUT-FILE ends in '.a' or '.lib', then a standard library is created using 'ar' and 'ranlib', or on Windows using 'lib'. If OUTPUT-FILE ends in '.lo' or '.$objext', then a reloadable object file is created, otherwise an executable program is created." ;; uninstall) $ECHO \ "Usage: $progname [OPTION]... --mode=uninstall RM [RM-OPTION]... FILE... Remove libraries from an installation directory. RM is the name of the program to use to delete files associated with each FILE (typically '/bin/rm'). RM-OPTIONS are options (such as '-f') to be passed to RM. If FILE is a libtool library, all the files associated with it are deleted. Otherwise, only FILE itself is deleted using RM." ;; *) func_fatal_help "invalid operation mode '$opt_mode'" ;; esac echo $ECHO "Try '$progname --help' for more information about other modes." } # Now that we've collected a possible --mode arg, show help if necessary if $opt_help; then if test : = "$opt_help"; then func_mode_help else { func_help noexit for opt_mode in compile link execute install finish uninstall clean; do func_mode_help done } | $SED -n '1p; 2,$s/^Usage:/ or: /p' { func_help noexit for opt_mode in compile link execute install finish uninstall clean; do echo func_mode_help done } | $SED '1d /^When reporting/,/^Report/{ H d } $x /information about other modes/d /more detailed .*MODE/d s/^Usage:.*--mode=\([^ ]*\) .*/Description of \1 mode:/' fi exit $? fi # func_mode_execute arg... func_mode_execute () { $debug_cmd # The first argument is the command name. cmd=$nonopt test -z "$cmd" && \ func_fatal_help "you must specify a COMMAND" # Handle -dlopen flags immediately. for file in $opt_dlopen; do test -f "$file" \ || func_fatal_help "'$file' is not a file" dir= case $file in *.la) func_resolve_sysroot "$file" file=$func_resolve_sysroot_result # Check to see that this really is a libtool archive. func_lalib_unsafe_p "$file" \ || func_fatal_help "'$lib' is not a valid libtool archive" # Read the libtool library. dlname= library_names= func_source "$file" # Skip this library if it cannot be dlopened. if test -z "$dlname"; then # Warn if it was a shared library. test -n "$library_names" && \ func_warning "'$file' was not linked with '-export-dynamic'" continue fi func_dirname "$file" "" "." dir=$func_dirname_result if test -f "$dir/$objdir/$dlname"; then func_append dir "/$objdir" else if test ! -f "$dir/$dlname"; then func_fatal_error "cannot find '$dlname' in '$dir' or '$dir/$objdir'" fi fi ;; *.lo) # Just add the directory containing the .lo file. func_dirname "$file" "" "." dir=$func_dirname_result ;; *) func_warning "'-dlopen' is ignored for non-libtool libraries and objects" continue ;; esac # Get the absolute pathname. absdir=`cd "$dir" && pwd` test -n "$absdir" && dir=$absdir # Now add the directory to shlibpath_var. if eval "test -z \"\$$shlibpath_var\""; then eval "$shlibpath_var=\"\$dir\"" else eval "$shlibpath_var=\"\$dir:\$$shlibpath_var\"" fi done # This variable tells wrapper scripts just to set shlibpath_var # rather than running their programs. libtool_execute_magic=$magic # Check if any of the arguments is a wrapper script. args= for file do case $file in -* | *.la | *.lo ) ;; *) # Do a test to see if this is really a libtool program. if func_ltwrapper_script_p "$file"; then func_source "$file" # Transform arg to wrapped name. file=$progdir/$program elif func_ltwrapper_executable_p "$file"; then func_ltwrapper_scriptname "$file" func_source "$func_ltwrapper_scriptname_result" # Transform arg to wrapped name. file=$progdir/$program fi ;; esac # Quote arguments (to preserve shell metacharacters). func_append_quoted args "$file" done if $opt_dry_run; then # Display what would be done. if test -n "$shlibpath_var"; then eval "\$ECHO \"\$shlibpath_var=\$$shlibpath_var\"" echo "export $shlibpath_var" fi $ECHO "$cmd$args" exit $EXIT_SUCCESS else if test -n "$shlibpath_var"; then # Export the shlibpath_var. eval "export $shlibpath_var" fi # Restore saved environment variables for lt_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES do eval "if test \"\${save_$lt_var+set}\" = set; then $lt_var=\$save_$lt_var; export $lt_var else $lt_unset $lt_var fi" done # Now prepare to actually exec the command. exec_cmd=\$cmd$args fi } test execute = "$opt_mode" && func_mode_execute ${1+"$@"} # func_mode_finish arg... func_mode_finish () { $debug_cmd libs= libdirs= admincmds= for opt in "$nonopt" ${1+"$@"} do if test -d "$opt"; then func_append libdirs " $opt" elif test -f "$opt"; then if func_lalib_unsafe_p "$opt"; then func_append libs " $opt" else func_warning "'$opt' is not a valid libtool archive" fi else func_fatal_error "invalid argument '$opt'" fi done if test -n "$libs"; then if test -n "$lt_sysroot"; then sysroot_regex=`$ECHO "$lt_sysroot" | $SED "$sed_make_literal_regex"` sysroot_cmd="s/\([ ']\)$sysroot_regex/\1/g;" else sysroot_cmd= fi # Remove sysroot references if $opt_dry_run; then for lib in $libs; do echo "removing references to $lt_sysroot and '=' prefixes from $lib" done else tmpdir=`func_mktempdir` for lib in $libs; do $SED -e "$sysroot_cmd s/\([ ']-[LR]\)=/\1/g; s/\([ ']\)=/\1/g" $lib \ > $tmpdir/tmp-la mv -f $tmpdir/tmp-la $lib done ${RM}r "$tmpdir" fi fi if test -n "$finish_cmds$finish_eval" && test -n "$libdirs"; then for libdir in $libdirs; do if test -n "$finish_cmds"; then # Do each command in the finish commands. func_execute_cmds "$finish_cmds" 'admincmds="$admincmds '"$cmd"'"' fi if test -n "$finish_eval"; then # Do the single finish_eval. eval cmds=\"$finish_eval\" $opt_dry_run || eval "$cmds" || func_append admincmds " $cmds" fi done fi # Exit here if they wanted silent mode. $opt_quiet && exit $EXIT_SUCCESS if test -n "$finish_cmds$finish_eval" && test -n "$libdirs"; then echo "----------------------------------------------------------------------" echo "Libraries have been installed in:" for libdir in $libdirs; do $ECHO " $libdir" done echo echo "If you ever happen to want to link against installed libraries" echo "in a given directory, LIBDIR, you must either use libtool, and" echo "specify the full pathname of the library, or use the '-LLIBDIR'" echo "flag during linking and do at least one of the following:" if test -n "$shlibpath_var"; then echo " - add LIBDIR to the '$shlibpath_var' environment variable" echo " during execution" fi if test -n "$runpath_var"; then echo " - add LIBDIR to the '$runpath_var' environment variable" echo " during linking" fi if test -n "$hardcode_libdir_flag_spec"; then libdir=LIBDIR eval flag=\"$hardcode_libdir_flag_spec\" $ECHO " - use the '$flag' linker flag" fi if test -n "$admincmds"; then $ECHO " - have your system administrator run these commands:$admincmds" fi if test -f /etc/ld.so.conf; then echo " - have your system administrator add LIBDIR to '/etc/ld.so.conf'" fi echo echo "See any operating system documentation about shared libraries for" case $host in solaris2.[6789]|solaris2.1[0-9]) echo "more information, such as the ld(1), crle(1) and ld.so(8) manual" echo "pages." ;; *) echo "more information, such as the ld(1) and ld.so(8) manual pages." ;; esac echo "----------------------------------------------------------------------" fi exit $EXIT_SUCCESS } test finish = "$opt_mode" && func_mode_finish ${1+"$@"} # func_mode_install arg... func_mode_install () { $debug_cmd # There may be an optional sh(1) argument at the beginning of # install_prog (especially on Windows NT). if test "$SHELL" = "$nonopt" || test /bin/sh = "$nonopt" || # Allow the use of GNU shtool's install command. case $nonopt in *shtool*) :;; *) false;; esac then # Aesthetically quote it. func_quote_arg pretty "$nonopt" install_prog="$func_quote_arg_result " arg=$1 shift else install_prog= arg=$nonopt fi # The real first argument should be the name of the installation program. # Aesthetically quote it. func_quote_arg pretty "$arg" func_append install_prog "$func_quote_arg_result" install_shared_prog=$install_prog case " $install_prog " in *[\\\ /]cp\ *) install_cp=: ;; *) install_cp=false ;; esac # We need to accept at least all the BSD install flags. dest= files= opts= prev= install_type= isdir=false stripme= no_mode=: for arg do arg2= if test -n "$dest"; then func_append files " $dest" dest=$arg continue fi case $arg in -d) isdir=: ;; -f) if $install_cp; then :; else prev=$arg fi ;; -g | -m | -o) prev=$arg ;; -s) stripme=" -s" continue ;; -*) ;; *) # If the previous option needed an argument, then skip it. if test -n "$prev"; then if test X-m = "X$prev" && test -n "$install_override_mode"; then arg2=$install_override_mode no_mode=false fi prev= else dest=$arg continue fi ;; esac # Aesthetically quote the argument. func_quote_arg pretty "$arg" func_append install_prog " $func_quote_arg_result" if test -n "$arg2"; then func_quote_arg pretty "$arg2" fi func_append install_shared_prog " $func_quote_arg_result" done test -z "$install_prog" && \ func_fatal_help "you must specify an install program" test -n "$prev" && \ func_fatal_help "the '$prev' option requires an argument" if test -n "$install_override_mode" && $no_mode; then if $install_cp; then :; else func_quote_arg pretty "$install_override_mode" func_append install_shared_prog " -m $func_quote_arg_result" fi fi if test -z "$files"; then if test -z "$dest"; then func_fatal_help "no file or destination specified" else func_fatal_help "you must specify a destination" fi fi # Strip any trailing slash from the destination. func_stripname '' '/' "$dest" dest=$func_stripname_result # Check to see that the destination is a directory. test -d "$dest" && isdir=: if $isdir; then destdir=$dest destname= else func_dirname_and_basename "$dest" "" "." destdir=$func_dirname_result destname=$func_basename_result # Not a directory, so check to see that there is only one file specified. set dummy $files; shift test "$#" -gt 1 && \ func_fatal_help "'$dest' is not a directory" fi case $destdir in [\\/]* | [A-Za-z]:[\\/]*) ;; *) for file in $files; do case $file in *.lo) ;; *) func_fatal_help "'$destdir' must be an absolute directory name" ;; esac done ;; esac # This variable tells wrapper scripts just to set variables rather # than running their programs. libtool_install_magic=$magic staticlibs= future_libdirs= current_libdirs= for file in $files; do # Do each installation. case $file in *.$libext) # Do the static libraries later. func_append staticlibs " $file" ;; *.la) func_resolve_sysroot "$file" file=$func_resolve_sysroot_result # Check to see that this really is a libtool archive. func_lalib_unsafe_p "$file" \ || func_fatal_help "'$file' is not a valid libtool archive" library_names= old_library= relink_command= func_source "$file" # Add the libdir to current_libdirs if it is the destination. if test "X$destdir" = "X$libdir"; then case "$current_libdirs " in *" $libdir "*) ;; *) func_append current_libdirs " $libdir" ;; esac else # Note the libdir as a future libdir. case "$future_libdirs " in *" $libdir "*) ;; *) func_append future_libdirs " $libdir" ;; esac fi func_dirname "$file" "/" "" dir=$func_dirname_result func_append dir "$objdir" if test -n "$relink_command"; then # Determine the prefix the user has applied to our future dir. inst_prefix_dir=`$ECHO "$destdir" | $SED -e "s%$libdir\$%%"` # Don't allow the user to place us outside of our expected # location b/c this prevents finding dependent libraries that # are installed to the same prefix. # At present, this check doesn't affect windows .dll's that # are installed into $libdir/../bin (currently, that works fine) # but it's something to keep an eye on. test "$inst_prefix_dir" = "$destdir" && \ func_fatal_error "error: cannot install '$file' to a directory not ending in $libdir" if test -n "$inst_prefix_dir"; then # Stick the inst_prefix_dir data into the link command. relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%-inst-prefix-dir $inst_prefix_dir%"` else relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%%"` fi func_warning "relinking '$file'" func_show_eval "$relink_command" \ 'func_fatal_error "error: relink '\''$file'\'' with the above command before installing it"' fi # See the names of the shared library. set dummy $library_names; shift if test -n "$1"; then realname=$1 shift srcname=$realname test -n "$relink_command" && srcname=${realname}T # Install the shared library and build the symlinks. func_show_eval "$install_shared_prog $dir/$srcname $destdir/$realname" \ 'exit $?' tstripme=$stripme case $host_os in cygwin* | mingw* | pw32* | cegcc*) case $realname in *.dll.a) tstripme= ;; esac ;; os2*) case $realname in *_dll.a) tstripme= ;; esac ;; esac if test -n "$tstripme" && test -n "$striplib"; then func_show_eval "$striplib $destdir/$realname" 'exit $?' fi if test "$#" -gt 0; then # Delete the old symlinks, and create new ones. # Try 'ln -sf' first, because the 'ln' binary might depend on # the symlink we replace! Solaris /bin/ln does not understand -f, # so we also need to try rm && ln -s. for linkname do test "$linkname" != "$realname" \ && func_show_eval "(cd $destdir && { $LN_S -f $realname $linkname || { $RM $linkname && $LN_S $realname $linkname; }; })" done fi # Do each command in the postinstall commands. lib=$destdir/$realname func_execute_cmds "$postinstall_cmds" 'exit $?' fi # Install the pseudo-library for information purposes. func_basename "$file" name=$func_basename_result instname=$dir/${name}i func_show_eval "$install_prog $instname $destdir/$name" 'exit $?' # Maybe install the static library, too. test -n "$old_library" && func_append staticlibs " $dir/$old_library" ;; *.lo) # Install (i.e. copy) a libtool object. # Figure out destination file name, if it wasn't already specified. if test -n "$destname"; then destfile=$destdir/$destname else func_basename "$file" destfile=$func_basename_result destfile=$destdir/$destfile fi # Deduce the name of the destination old-style object file. case $destfile in *.lo) func_lo2o "$destfile" staticdest=$func_lo2o_result ;; *.$objext) staticdest=$destfile destfile= ;; *) func_fatal_help "cannot copy a libtool object to '$destfile'" ;; esac # Install the libtool object if requested. test -n "$destfile" && \ func_show_eval "$install_prog $file $destfile" 'exit $?' # Install the old object if enabled. if test yes = "$build_old_libs"; then # Deduce the name of the old-style object file. func_lo2o "$file" staticobj=$func_lo2o_result func_show_eval "$install_prog \$staticobj \$staticdest" 'exit $?' fi exit $EXIT_SUCCESS ;; *) # Figure out destination file name, if it wasn't already specified. if test -n "$destname"; then destfile=$destdir/$destname else func_basename "$file" destfile=$func_basename_result destfile=$destdir/$destfile fi # If the file is missing, and there is a .exe on the end, strip it # because it is most likely a libtool script we actually want to # install stripped_ext= case $file in *.exe) if test ! -f "$file"; then func_stripname '' '.exe' "$file" file=$func_stripname_result stripped_ext=.exe fi ;; esac # Do a test to see if this is really a libtool program. case $host in *cygwin* | *mingw*) if func_ltwrapper_executable_p "$file"; then func_ltwrapper_scriptname "$file" wrapper=$func_ltwrapper_scriptname_result else func_stripname '' '.exe' "$file" wrapper=$func_stripname_result fi ;; *) wrapper=$file ;; esac if func_ltwrapper_script_p "$wrapper"; then notinst_deplibs= relink_command= func_source "$wrapper" # Check the variables that should have been set. test -z "$generated_by_libtool_version" && \ func_fatal_error "invalid libtool wrapper script '$wrapper'" finalize=: for lib in $notinst_deplibs; do # Check to see that each library is installed. libdir= if test -f "$lib"; then func_source "$lib" fi libfile=$libdir/`$ECHO "$lib" | $SED 's%^.*/%%g'` if test -n "$libdir" && test ! -f "$libfile"; then func_warning "'$lib' has not been installed in '$libdir'" finalize=false fi done relink_command= func_source "$wrapper" outputname= if test no = "$fast_install" && test -n "$relink_command"; then $opt_dry_run || { if $finalize; then tmpdir=`func_mktempdir` func_basename "$file$stripped_ext" file=$func_basename_result outputname=$tmpdir/$file # Replace the output file specification. relink_command=`$ECHO "$relink_command" | $SED 's%@OUTPUT@%'"$outputname"'%g'` $opt_quiet || { func_quote_arg expand,pretty "$relink_command" eval "func_echo $func_quote_arg_result" } if eval "$relink_command"; then : else func_error "error: relink '$file' with the above command before installing it" $opt_dry_run || ${RM}r "$tmpdir" continue fi file=$outputname else func_warning "cannot relink '$file'" fi } else # Install the binary that we compiled earlier. file=`$ECHO "$file$stripped_ext" | $SED "s%\([^/]*\)$%$objdir/\1%"` fi fi # remove .exe since cygwin /usr/bin/install will append another # one anyway case $install_prog,$host in */usr/bin/install*,*cygwin*) case $file:$destfile in *.exe:*.exe) # this is ok ;; *.exe:*) destfile=$destfile.exe ;; *:*.exe) func_stripname '' '.exe' "$destfile" destfile=$func_stripname_result ;; esac ;; esac func_show_eval "$install_prog\$stripme \$file \$destfile" 'exit $?' $opt_dry_run || if test -n "$outputname"; then ${RM}r "$tmpdir" fi ;; esac done for file in $staticlibs; do func_basename "$file" name=$func_basename_result # Set up the ranlib parameters. oldlib=$destdir/$name func_to_tool_file "$oldlib" func_convert_file_msys_to_w32 tool_oldlib=$func_to_tool_file_result func_show_eval "$install_prog \$file \$oldlib" 'exit $?' if test -n "$stripme" && test -n "$old_striplib"; then func_show_eval "$old_striplib $tool_oldlib" 'exit $?' fi # Do each command in the postinstall commands. func_execute_cmds "$old_postinstall_cmds" 'exit $?' done test -n "$future_libdirs" && \ func_warning "remember to run '$progname --finish$future_libdirs'" if test -n "$current_libdirs"; then # Maybe just do a dry run. $opt_dry_run && current_libdirs=" -n$current_libdirs" exec_cmd='$SHELL "$progpath" $preserve_args --finish$current_libdirs' else exit $EXIT_SUCCESS fi } test install = "$opt_mode" && func_mode_install ${1+"$@"} # func_generate_dlsyms outputname originator pic_p # Extract symbols from dlprefiles and create ${outputname}S.o with # a dlpreopen symbol table. func_generate_dlsyms () { $debug_cmd my_outputname=$1 my_originator=$2 my_pic_p=${3-false} my_prefix=`$ECHO "$my_originator" | $SED 's%[^a-zA-Z0-9]%_%g'` my_dlsyms= if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then if test -n "$NM" && test -n "$global_symbol_pipe"; then my_dlsyms=${my_outputname}S.c else func_error "not configured to extract global symbols from dlpreopened files" fi fi if test -n "$my_dlsyms"; then case $my_dlsyms in "") ;; *.c) # Discover the nlist of each of the dlfiles. nlist=$output_objdir/$my_outputname.nm func_show_eval "$RM $nlist ${nlist}S ${nlist}T" # Parse the name list into a source file. func_verbose "creating $output_objdir/$my_dlsyms" $opt_dry_run || $ECHO > "$output_objdir/$my_dlsyms" "\ /* $my_dlsyms - symbol resolution table for '$my_outputname' dlsym emulation. */ /* Generated by $PROGRAM (GNU $PACKAGE) $VERSION */ #ifdef __cplusplus extern \"C\" { #endif #if defined __GNUC__ && (((__GNUC__ == 4) && (__GNUC_MINOR__ >= 4)) || (__GNUC__ > 4)) #pragma GCC diagnostic ignored \"-Wstrict-prototypes\" #endif /* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests. */ #if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE /* DATA imports from DLLs on WIN32 can't be const, because runtime relocations are performed -- see ld's documentation on pseudo-relocs. */ # define LT_DLSYM_CONST #elif defined __osf__ /* This system does not cope well with relocations in const data. */ # define LT_DLSYM_CONST #else # define LT_DLSYM_CONST const #endif #define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0) /* External symbol declarations for the compiler. */\ " if test yes = "$dlself"; then func_verbose "generating symbol list for '$output'" $opt_dry_run || echo ': @PROGRAM@ ' > "$nlist" # Add our own program objects to the symbol list. progfiles=`$ECHO "$objs$old_deplibs" | $SP2NL | $SED "$lo2o" | $NL2SP` for progfile in $progfiles; do func_to_tool_file "$progfile" func_convert_file_msys_to_w32 func_verbose "extracting global C symbols from '$func_to_tool_file_result'" $opt_dry_run || eval "$NM $func_to_tool_file_result | $global_symbol_pipe >> '$nlist'" done if test -n "$exclude_expsyms"; then $opt_dry_run || { eval '$EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T' eval '$MV "$nlist"T "$nlist"' } fi if test -n "$export_symbols_regex"; then $opt_dry_run || { eval '$EGREP -e "$export_symbols_regex" "$nlist" > "$nlist"T' eval '$MV "$nlist"T "$nlist"' } fi # Prepare the list of exported symbols if test -z "$export_symbols"; then export_symbols=$output_objdir/$outputname.exp $opt_dry_run || { $RM $export_symbols eval "$SED -n -e '/^: @PROGRAM@ $/d' -e 's/^.* \(.*\)$/\1/p' "'< "$nlist" > "$export_symbols"' case $host in *cygwin* | *mingw* | *cegcc* ) eval "echo EXPORTS "'> "$output_objdir/$outputname.def"' eval 'cat "$export_symbols" >> "$output_objdir/$outputname.def"' ;; esac } else $opt_dry_run || { eval "$SED -e 's/\([].[*^$]\)/\\\\\1/g' -e 's/^/ /' -e 's/$/$/'"' < "$export_symbols" > "$output_objdir/$outputname.exp"' eval '$GREP -f "$output_objdir/$outputname.exp" < "$nlist" > "$nlist"T' eval '$MV "$nlist"T "$nlist"' case $host in *cygwin* | *mingw* | *cegcc* ) eval "echo EXPORTS "'> "$output_objdir/$outputname.def"' eval 'cat "$nlist" >> "$output_objdir/$outputname.def"' ;; esac } fi fi for dlprefile in $dlprefiles; do func_verbose "extracting global C symbols from '$dlprefile'" func_basename "$dlprefile" name=$func_basename_result case $host in *cygwin* | *mingw* | *cegcc* ) # if an import library, we need to obtain dlname if func_win32_import_lib_p "$dlprefile"; then func_tr_sh "$dlprefile" eval "curr_lafile=\$libfile_$func_tr_sh_result" dlprefile_dlbasename= if test -n "$curr_lafile" && func_lalib_p "$curr_lafile"; then # Use subshell, to avoid clobbering current variable values dlprefile_dlname=`source "$curr_lafile" && echo "$dlname"` if test -n "$dlprefile_dlname"; then func_basename "$dlprefile_dlname" dlprefile_dlbasename=$func_basename_result else # no lafile. user explicitly requested -dlpreopen . $sharedlib_from_linklib_cmd "$dlprefile" dlprefile_dlbasename=$sharedlib_from_linklib_result fi fi $opt_dry_run || { if test -n "$dlprefile_dlbasename"; then eval '$ECHO ": $dlprefile_dlbasename" >> "$nlist"' else func_warning "Could not compute DLL name from $name" eval '$ECHO ": $name " >> "$nlist"' fi func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32 eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe | $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/_nm__//' >> '$nlist'" } else # not an import lib $opt_dry_run || { eval '$ECHO ": $name " >> "$nlist"' func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32 eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'" } fi ;; *) $opt_dry_run || { eval '$ECHO ": $name " >> "$nlist"' func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32 eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'" } ;; esac done $opt_dry_run || { # Make sure we have at least an empty file. test -f "$nlist" || : > "$nlist" if test -n "$exclude_expsyms"; then $EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T $MV "$nlist"T "$nlist" fi # Try sorting and uniquifying the output. if $GREP -v "^: " < "$nlist" | if sort -k 3 /dev/null 2>&1; then sort -k 3 else sort +2 fi | uniq > "$nlist"S; then : else $GREP -v "^: " < "$nlist" > "$nlist"S fi if test -f "$nlist"S; then eval "$global_symbol_to_cdecl"' < "$nlist"S >> "$output_objdir/$my_dlsyms"' else echo '/* NONE */' >> "$output_objdir/$my_dlsyms" fi func_show_eval '$RM "${nlist}I"' if test -n "$global_symbol_to_import"; then eval "$global_symbol_to_import"' < "$nlist"S > "$nlist"I' fi echo >> "$output_objdir/$my_dlsyms" "\ /* The mapping between symbol names and symbols. */ typedef struct { const char *name; void *address; } lt_dlsymlist; extern LT_DLSYM_CONST lt_dlsymlist lt_${my_prefix}_LTX_preloaded_symbols[];\ " if test -s "$nlist"I; then echo >> "$output_objdir/$my_dlsyms" "\ static void lt_syminit(void) { LT_DLSYM_CONST lt_dlsymlist *symbol = lt_${my_prefix}_LTX_preloaded_symbols; for (; symbol->name; ++symbol) {" $SED 's/.*/ if (STREQ (symbol->name, \"&\")) symbol->address = (void *) \&&;/' < "$nlist"I >> "$output_objdir/$my_dlsyms" echo >> "$output_objdir/$my_dlsyms" "\ } }" fi echo >> "$output_objdir/$my_dlsyms" "\ LT_DLSYM_CONST lt_dlsymlist lt_${my_prefix}_LTX_preloaded_symbols[] = { {\"$my_originator\", (void *) 0}," if test -s "$nlist"I; then echo >> "$output_objdir/$my_dlsyms" "\ {\"@INIT@\", (void *) <_syminit}," fi case $need_lib_prefix in no) eval "$global_symbol_to_c_name_address" < "$nlist" >> "$output_objdir/$my_dlsyms" ;; *) eval "$global_symbol_to_c_name_address_lib_prefix" < "$nlist" >> "$output_objdir/$my_dlsyms" ;; esac echo >> "$output_objdir/$my_dlsyms" "\ {0, (void *) 0} }; /* This works around a problem in FreeBSD linker */ #ifdef FREEBSD_WORKAROUND static const void *lt_preloaded_setup() { return lt_${my_prefix}_LTX_preloaded_symbols; } #endif #ifdef __cplusplus } #endif\ " } # !$opt_dry_run pic_flag_for_symtable= case "$compile_command " in *" -static "*) ;; *) case $host in # compiling the symbol table file with pic_flag works around # a FreeBSD bug that causes programs to crash when -lm is # linked before any other PIC object. But we must not use # pic_flag when linking with -static. The problem exists in # FreeBSD 2.2.6 and is fixed in FreeBSD 3.1. *-*-freebsd2.*|*-*-freebsd3.0*|*-*-freebsdelf3.0*) pic_flag_for_symtable=" $pic_flag -DFREEBSD_WORKAROUND" ;; *-*-hpux*) pic_flag_for_symtable=" $pic_flag" ;; *) $my_pic_p && pic_flag_for_symtable=" $pic_flag" ;; esac ;; esac symtab_cflags= for arg in $LTCFLAGS; do case $arg in -pie | -fpie | -fPIE) ;; *) func_append symtab_cflags " $arg" ;; esac done # Now compile the dynamic symbol file. func_show_eval '(cd $output_objdir && $LTCC$symtab_cflags -c$no_builtin_flag$pic_flag_for_symtable "$my_dlsyms")' 'exit $?' # Clean up the generated files. func_show_eval '$RM "$output_objdir/$my_dlsyms" "$nlist" "${nlist}S" "${nlist}T" "${nlist}I"' # Transform the symbol file into the correct name. symfileobj=$output_objdir/${my_outputname}S.$objext case $host in *cygwin* | *mingw* | *cegcc* ) if test -f "$output_objdir/$my_outputname.def"; then compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"` finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"` else compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"` finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"` fi ;; *) compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"` finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"` ;; esac ;; *) func_fatal_error "unknown suffix for '$my_dlsyms'" ;; esac else # We keep going just in case the user didn't refer to # lt_preloaded_symbols. The linker will fail if global_symbol_pipe # really was required. # Nullify the symbol file. compile_command=`$ECHO "$compile_command" | $SED "s% @SYMFILE@%%"` finalize_command=`$ECHO "$finalize_command" | $SED "s% @SYMFILE@%%"` fi } # func_cygming_gnu_implib_p ARG # This predicate returns with zero status (TRUE) if # ARG is a GNU/binutils-style import library. Returns # with nonzero status (FALSE) otherwise. func_cygming_gnu_implib_p () { $debug_cmd func_to_tool_file "$1" func_convert_file_msys_to_w32 func_cygming_gnu_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $EGREP ' (_head_[A-Za-z0-9_]+_[ad]l*|[A-Za-z0-9_]+_[ad]l*_iname)$'` test -n "$func_cygming_gnu_implib_tmp" } # func_cygming_ms_implib_p ARG # This predicate returns with zero status (TRUE) if # ARG is an MS-style import library. Returns # with nonzero status (FALSE) otherwise. func_cygming_ms_implib_p () { $debug_cmd func_to_tool_file "$1" func_convert_file_msys_to_w32 func_cygming_ms_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $GREP '_NULL_IMPORT_DESCRIPTOR'` test -n "$func_cygming_ms_implib_tmp" } # func_win32_libid arg # return the library type of file 'arg' # # Need a lot of goo to handle *both* DLLs and import libs # Has to be a shell function in order to 'eat' the argument # that is supplied when $file_magic_command is called. # Despite the name, also deal with 64 bit binaries. func_win32_libid () { $debug_cmd win32_libid_type=unknown win32_fileres=`file -L $1 2>/dev/null` case $win32_fileres in *ar\ archive\ import\ library*) # definitely import win32_libid_type="x86 archive import" ;; *ar\ archive*) # could be an import, or static # Keep the egrep pattern in sync with the one in _LT_CHECK_MAGIC_METHOD. if eval $OBJDUMP -f $1 | $SED -e '10q' 2>/dev/null | $EGREP 'file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)' >/dev/null; then case $nm_interface in "MS dumpbin") if func_cygming_ms_implib_p "$1" || func_cygming_gnu_implib_p "$1" then win32_nmres=import else win32_nmres= fi ;; *) func_to_tool_file "$1" func_convert_file_msys_to_w32 win32_nmres=`eval $NM -f posix -A \"$func_to_tool_file_result\" | $SED -n -e ' 1,100{ / I /{ s|.*|import| p q } }'` ;; esac case $win32_nmres in import*) win32_libid_type="x86 archive import";; *) win32_libid_type="x86 archive static";; esac fi ;; *DLL*) win32_libid_type="x86 DLL" ;; *executable*) # but shell scripts are "executable" too... case $win32_fileres in *MS\ Windows\ PE\ Intel*) win32_libid_type="x86 DLL" ;; esac ;; esac $ECHO "$win32_libid_type" } # func_cygming_dll_for_implib ARG # # Platform-specific function to extract the # name of the DLL associated with the specified # import library ARG. # Invoked by eval'ing the libtool variable # $sharedlib_from_linklib_cmd # Result is available in the variable # $sharedlib_from_linklib_result func_cygming_dll_for_implib () { $debug_cmd sharedlib_from_linklib_result=`$DLLTOOL --identify-strict --identify "$1"` } # func_cygming_dll_for_implib_fallback_core SECTION_NAME LIBNAMEs # # The is the core of a fallback implementation of a # platform-specific function to extract the name of the # DLL associated with the specified import library LIBNAME. # # SECTION_NAME is either .idata$6 or .idata$7, depending # on the platform and compiler that created the implib. # # Echos the name of the DLL associated with the # specified import library. func_cygming_dll_for_implib_fallback_core () { $debug_cmd match_literal=`$ECHO "$1" | $SED "$sed_make_literal_regex"` $OBJDUMP -s --section "$1" "$2" 2>/dev/null | $SED '/^Contents of section '"$match_literal"':/{ # Place marker at beginning of archive member dllname section s/.*/====MARK====/ p d } # These lines can sometimes be longer than 43 characters, but # are always uninteresting /:[ ]*file format pe[i]\{,1\}-/d /^In archive [^:]*:/d # Ensure marker is printed /^====MARK====/p # Remove all lines with less than 43 characters /^.\{43\}/!d # From remaining lines, remove first 43 characters s/^.\{43\}//' | $SED -n ' # Join marker and all lines until next marker into a single line /^====MARK====/ b para H $ b para b :para x s/\n//g # Remove the marker s/^====MARK====// # Remove trailing dots and whitespace s/[\. \t]*$// # Print /./p' | # we now have a list, one entry per line, of the stringified # contents of the appropriate section of all members of the # archive that possess that section. Heuristic: eliminate # all those that have a first or second character that is # a '.' (that is, objdump's representation of an unprintable # character.) This should work for all archives with less than # 0x302f exports -- but will fail for DLLs whose name actually # begins with a literal '.' or a single character followed by # a '.'. # # Of those that remain, print the first one. $SED -e '/^\./d;/^.\./d;q' } # func_cygming_dll_for_implib_fallback ARG # Platform-specific function to extract the # name of the DLL associated with the specified # import library ARG. # # This fallback implementation is for use when $DLLTOOL # does not support the --identify-strict option. # Invoked by eval'ing the libtool variable # $sharedlib_from_linklib_cmd # Result is available in the variable # $sharedlib_from_linklib_result func_cygming_dll_for_implib_fallback () { $debug_cmd if func_cygming_gnu_implib_p "$1"; then # binutils import library sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$7' "$1"` elif func_cygming_ms_implib_p "$1"; then # ms-generated import library sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$6' "$1"` else # unknown sharedlib_from_linklib_result= fi } # func_extract_an_archive dir oldlib func_extract_an_archive () { $debug_cmd f_ex_an_ar_dir=$1; shift f_ex_an_ar_oldlib=$1 if test yes = "$lock_old_archive_extraction"; then lockfile=$f_ex_an_ar_oldlib.lock until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do func_echo "Waiting for $lockfile to be removed" sleep 2 done fi func_show_eval "(cd \$f_ex_an_ar_dir && $AR x \"\$f_ex_an_ar_oldlib\")" \ 'stat=$?; rm -f "$lockfile"; exit $stat' if test yes = "$lock_old_archive_extraction"; then $opt_dry_run || rm -f "$lockfile" fi if ($AR t "$f_ex_an_ar_oldlib" | sort | sort -uc >/dev/null 2>&1); then : else func_fatal_error "object name conflicts in archive: $f_ex_an_ar_dir/$f_ex_an_ar_oldlib" fi } # func_extract_archives gentop oldlib ... func_extract_archives () { $debug_cmd my_gentop=$1; shift my_oldlibs=${1+"$@"} my_oldobjs= my_xlib= my_xabs= my_xdir= for my_xlib in $my_oldlibs; do # Extract the objects. case $my_xlib in [\\/]* | [A-Za-z]:[\\/]*) my_xabs=$my_xlib ;; *) my_xabs=`pwd`"/$my_xlib" ;; esac func_basename "$my_xlib" my_xlib=$func_basename_result my_xlib_u=$my_xlib while :; do case " $extracted_archives " in *" $my_xlib_u "*) func_arith $extracted_serial + 1 extracted_serial=$func_arith_result my_xlib_u=lt$extracted_serial-$my_xlib ;; *) break ;; esac done extracted_archives="$extracted_archives $my_xlib_u" my_xdir=$my_gentop/$my_xlib_u func_mkdir_p "$my_xdir" case $host in *-darwin*) func_verbose "Extracting $my_xabs" # Do not bother doing anything if just a dry run $opt_dry_run || { darwin_orig_dir=`pwd` cd $my_xdir || exit $? darwin_archive=$my_xabs darwin_curdir=`pwd` func_basename "$darwin_archive" darwin_base_archive=$func_basename_result darwin_arches=`$LIPO -info "$darwin_archive" 2>/dev/null | $GREP Architectures 2>/dev/null || true` if test -n "$darwin_arches"; then darwin_arches=`$ECHO "$darwin_arches" | $SED -e 's/.*are://'` darwin_arch= func_verbose "$darwin_base_archive has multiple architectures $darwin_arches" for darwin_arch in $darwin_arches; do func_mkdir_p "unfat-$$/$darwin_base_archive-$darwin_arch" $LIPO -thin $darwin_arch -output "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive" "$darwin_archive" cd "unfat-$$/$darwin_base_archive-$darwin_arch" func_extract_an_archive "`pwd`" "$darwin_base_archive" cd "$darwin_curdir" $RM "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive" done # $darwin_arches ## Okay now we've a bunch of thin objects, gotta fatten them up :) darwin_filelist=`find unfat-$$ -type f -name \*.o -print -o -name \*.lo -print | $SED -e "$sed_basename" | sort -u` darwin_file= darwin_files= for darwin_file in $darwin_filelist; do darwin_files=`find unfat-$$ -name $darwin_file -print | sort | $NL2SP` $LIPO -create -output "$darwin_file" $darwin_files done # $darwin_filelist $RM -rf unfat-$$ cd "$darwin_orig_dir" else cd $darwin_orig_dir func_extract_an_archive "$my_xdir" "$my_xabs" fi # $darwin_arches } # !$opt_dry_run ;; *) func_extract_an_archive "$my_xdir" "$my_xabs" ;; esac my_oldobjs="$my_oldobjs "`find $my_xdir -name \*.$objext -print -o -name \*.lo -print | sort | $NL2SP` done func_extract_archives_result=$my_oldobjs } # func_emit_wrapper [arg=no] # # Emit a libtool wrapper script on stdout. # Don't directly open a file because we may want to # incorporate the script contents within a cygwin/mingw # wrapper executable. Must ONLY be called from within # func_mode_link because it depends on a number of variables # set therein. # # ARG is the value that the WRAPPER_SCRIPT_BELONGS_IN_OBJDIR # variable will take. If 'yes', then the emitted script # will assume that the directory where it is stored is # the $objdir directory. This is a cygwin/mingw-specific # behavior. func_emit_wrapper () { func_emit_wrapper_arg1=${1-no} $ECHO "\ #! $SHELL # $output - temporary wrapper script for $objdir/$outputname # Generated by $PROGRAM (GNU $PACKAGE) $VERSION # # The $output program cannot be directly executed until all the libtool # libraries that it depends on are installed. # # This wrapper script should never be moved out of the build directory. # If it is, it will not operate correctly. # Sed substitution that helps us do robust quoting. It backslashifies # metacharacters that are still active within double-quoted strings. sed_quote_subst='$sed_quote_subst' # Be Bourne compatible if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then emulate sh NULLCMD=: # Zsh 3.x and 4.x performs word splitting on \${1+\"\$@\"}, which # is contrary to our usage. Disable this feature. alias -g '\${1+\"\$@\"}'='\"\$@\"' setopt NO_GLOB_SUBST else case \`(set -o) 2>/dev/null\` in *posix*) set -o posix;; esac fi BIN_SH=xpg4; export BIN_SH # for Tru64 DUALCASE=1; export DUALCASE # for MKS sh # The HP-UX ksh and POSIX shell print the target directory to stdout # if CDPATH is set. (unset CDPATH) >/dev/null 2>&1 && unset CDPATH relink_command=\"$relink_command\" # This environment variable determines our operation mode. if test \"\$libtool_install_magic\" = \"$magic\"; then # install mode needs the following variables: generated_by_libtool_version='$macro_version' notinst_deplibs='$notinst_deplibs' else # When we are sourced in execute mode, \$file and \$ECHO are already set. if test \"\$libtool_execute_magic\" != \"$magic\"; then file=\"\$0\"" func_quote_arg pretty "$ECHO" qECHO=$func_quote_arg_result $ECHO "\ # A function that is used when there is no print builtin or printf. func_fallback_echo () { eval 'cat <<_LTECHO_EOF \$1 _LTECHO_EOF' } ECHO=$qECHO fi # Very basic option parsing. These options are (a) specific to # the libtool wrapper, (b) are identical between the wrapper # /script/ and the wrapper /executable/ that is used only on # windows platforms, and (c) all begin with the string "--lt-" # (application programs are unlikely to have options that match # this pattern). # # There are only two supported options: --lt-debug and # --lt-dump-script. There is, deliberately, no --lt-help. # # The first argument to this parsing function should be the # script's $0 value, followed by "$@". lt_option_debug= func_parse_lt_options () { lt_script_arg0=\$0 shift for lt_opt do case \"\$lt_opt\" in --lt-debug) lt_option_debug=1 ;; --lt-dump-script) lt_dump_D=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%/[^/]*$%%'\` test \"X\$lt_dump_D\" = \"X\$lt_script_arg0\" && lt_dump_D=. lt_dump_F=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%^.*/%%'\` cat \"\$lt_dump_D/\$lt_dump_F\" exit 0 ;; --lt-*) \$ECHO \"Unrecognized --lt- option: '\$lt_opt'\" 1>&2 exit 1 ;; esac done # Print the debug banner immediately: if test -n \"\$lt_option_debug\"; then echo \"$outputname:$output:\$LINENO: libtool wrapper (GNU $PACKAGE) $VERSION\" 1>&2 fi } # Used when --lt-debug. Prints its arguments to stdout # (redirection is the responsibility of the caller) func_lt_dump_args () { lt_dump_args_N=1; for lt_arg do \$ECHO \"$outputname:$output:\$LINENO: newargv[\$lt_dump_args_N]: \$lt_arg\" lt_dump_args_N=\`expr \$lt_dump_args_N + 1\` done } # Core function for launching the target application func_exec_program_core () { " case $host in # Backslashes separate directories on plain windows *-*-mingw | *-*-os2* | *-cegcc*) $ECHO "\ if test -n \"\$lt_option_debug\"; then \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir\\\\\$program\" 1>&2 func_lt_dump_args \${1+\"\$@\"} 1>&2 fi exec \"\$progdir\\\\\$program\" \${1+\"\$@\"} " ;; *) $ECHO "\ if test -n \"\$lt_option_debug\"; then \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir/\$program\" 1>&2 func_lt_dump_args \${1+\"\$@\"} 1>&2 fi exec \"\$progdir/\$program\" \${1+\"\$@\"} " ;; esac $ECHO "\ \$ECHO \"\$0: cannot exec \$program \$*\" 1>&2 exit 1 } # A function to encapsulate launching the target application # Strips options in the --lt-* namespace from \$@ and # launches target application with the remaining arguments. func_exec_program () { case \" \$* \" in *\\ --lt-*) for lt_wr_arg do case \$lt_wr_arg in --lt-*) ;; *) set x \"\$@\" \"\$lt_wr_arg\"; shift;; esac shift done ;; esac func_exec_program_core \${1+\"\$@\"} } # Parse options func_parse_lt_options \"\$0\" \${1+\"\$@\"} # Find the directory that this script lives in. thisdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*$%%'\` test \"x\$thisdir\" = \"x\$file\" && thisdir=. # Follow symbolic links until we get to the real thisdir. file=\`ls -ld \"\$file\" | $SED -n 's/.*-> //p'\` while test -n \"\$file\"; do destdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*\$%%'\` # If there was a directory component, then change thisdir. if test \"x\$destdir\" != \"x\$file\"; then case \"\$destdir\" in [\\\\/]* | [A-Za-z]:[\\\\/]*) thisdir=\"\$destdir\" ;; *) thisdir=\"\$thisdir/\$destdir\" ;; esac fi file=\`\$ECHO \"\$file\" | $SED 's%^.*/%%'\` file=\`ls -ld \"\$thisdir/\$file\" | $SED -n 's/.*-> //p'\` done # Usually 'no', except on cygwin/mingw when embedded into # the cwrapper. WRAPPER_SCRIPT_BELONGS_IN_OBJDIR=$func_emit_wrapper_arg1 if test \"\$WRAPPER_SCRIPT_BELONGS_IN_OBJDIR\" = \"yes\"; then # special case for '.' if test \"\$thisdir\" = \".\"; then thisdir=\`pwd\` fi # remove .libs from thisdir case \"\$thisdir\" in *[\\\\/]$objdir ) thisdir=\`\$ECHO \"\$thisdir\" | $SED 's%[\\\\/][^\\\\/]*$%%'\` ;; $objdir ) thisdir=. ;; esac fi # Try to get the absolute directory name. absdir=\`cd \"\$thisdir\" && pwd\` test -n \"\$absdir\" && thisdir=\"\$absdir\" " if test yes = "$fast_install"; then $ECHO "\ program=lt-'$outputname'$exeext progdir=\"\$thisdir/$objdir\" if test ! -f \"\$progdir/\$program\" || { file=\`ls -1dt \"\$progdir/\$program\" \"\$progdir/../\$program\" 2>/dev/null | $SED 1q\`; \\ test \"X\$file\" != \"X\$progdir/\$program\"; }; then file=\"\$\$-\$program\" if test ! -d \"\$progdir\"; then $MKDIR \"\$progdir\" else $RM \"\$progdir/\$file\" fi" $ECHO "\ # relink executable if necessary if test -n \"\$relink_command\"; then if relink_command_output=\`eval \$relink_command 2>&1\`; then : else \$ECHO \"\$relink_command_output\" >&2 $RM \"\$progdir/\$file\" exit 1 fi fi $MV \"\$progdir/\$file\" \"\$progdir/\$program\" 2>/dev/null || { $RM \"\$progdir/\$program\"; $MV \"\$progdir/\$file\" \"\$progdir/\$program\"; } $RM \"\$progdir/\$file\" fi" else $ECHO "\ program='$outputname' progdir=\"\$thisdir/$objdir\" " fi $ECHO "\ if test -f \"\$progdir/\$program\"; then" # fixup the dll searchpath if we need to. # # Fix the DLL searchpath if we need to. Do this before prepending # to shlibpath, because on Windows, both are PATH and uninstalled # libraries must come first. if test -n "$dllsearchpath"; then $ECHO "\ # Add the dll search path components to the executable PATH PATH=$dllsearchpath:\$PATH " fi # Export our shlibpath_var if we have one. if test yes = "$shlibpath_overrides_runpath" && test -n "$shlibpath_var" && test -n "$temp_rpath"; then $ECHO "\ # Add our own library path to $shlibpath_var $shlibpath_var=\"$temp_rpath\$$shlibpath_var\" # Some systems cannot cope with colon-terminated $shlibpath_var # The second colon is a workaround for a bug in BeOS R4 sed $shlibpath_var=\`\$ECHO \"\$$shlibpath_var\" | $SED 's/::*\$//'\` export $shlibpath_var " fi $ECHO "\ if test \"\$libtool_execute_magic\" != \"$magic\"; then # Run the actual program with our arguments. func_exec_program \${1+\"\$@\"} fi else # The program doesn't exist. \$ECHO \"\$0: error: '\$progdir/\$program' does not exist\" 1>&2 \$ECHO \"This script is just a wrapper for \$program.\" 1>&2 \$ECHO \"See the $PACKAGE documentation for more information.\" 1>&2 exit 1 fi fi\ " } # func_emit_cwrapperexe_src # emit the source code for a wrapper executable on stdout # Must ONLY be called from within func_mode_link because # it depends on a number of variable set therein. func_emit_cwrapperexe_src () { cat < #include #ifdef _MSC_VER # include # include # include #else # include # include # ifdef __CYGWIN__ # include # endif #endif #include #include #include #include #include #include #include #include #define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0) /* declarations of non-ANSI functions */ #if defined __MINGW32__ # ifdef __STRICT_ANSI__ int _putenv (const char *); # endif #elif defined __CYGWIN__ # ifdef __STRICT_ANSI__ char *realpath (const char *, char *); int putenv (char *); int setenv (const char *, const char *, int); # endif /* #elif defined other_platform || defined ... */ #endif /* portability defines, excluding path handling macros */ #if defined _MSC_VER # define setmode _setmode # define stat _stat # define chmod _chmod # define getcwd _getcwd # define putenv _putenv # define S_IXUSR _S_IEXEC #elif defined __MINGW32__ # define setmode _setmode # define stat _stat # define chmod _chmod # define getcwd _getcwd # define putenv _putenv #elif defined __CYGWIN__ # define HAVE_SETENV # define FOPEN_WB "wb" /* #elif defined other platforms ... */ #endif #if defined PATH_MAX # define LT_PATHMAX PATH_MAX #elif defined MAXPATHLEN # define LT_PATHMAX MAXPATHLEN #else # define LT_PATHMAX 1024 #endif #ifndef S_IXOTH # define S_IXOTH 0 #endif #ifndef S_IXGRP # define S_IXGRP 0 #endif /* path handling portability macros */ #ifndef DIR_SEPARATOR # define DIR_SEPARATOR '/' # define PATH_SEPARATOR ':' #endif #if defined _WIN32 || defined __MSDOS__ || defined __DJGPP__ || \ defined __OS2__ # define HAVE_DOS_BASED_FILE_SYSTEM # define FOPEN_WB "wb" # ifndef DIR_SEPARATOR_2 # define DIR_SEPARATOR_2 '\\' # endif # ifndef PATH_SEPARATOR_2 # define PATH_SEPARATOR_2 ';' # endif #endif #ifndef DIR_SEPARATOR_2 # define IS_DIR_SEPARATOR(ch) ((ch) == DIR_SEPARATOR) #else /* DIR_SEPARATOR_2 */ # define IS_DIR_SEPARATOR(ch) \ (((ch) == DIR_SEPARATOR) || ((ch) == DIR_SEPARATOR_2)) #endif /* DIR_SEPARATOR_2 */ #ifndef PATH_SEPARATOR_2 # define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR) #else /* PATH_SEPARATOR_2 */ # define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR_2) #endif /* PATH_SEPARATOR_2 */ #ifndef FOPEN_WB # define FOPEN_WB "w" #endif #ifndef _O_BINARY # define _O_BINARY 0 #endif #define XMALLOC(type, num) ((type *) xmalloc ((num) * sizeof(type))) #define XFREE(stale) do { \ if (stale) { free (stale); stale = 0; } \ } while (0) #if defined LT_DEBUGWRAPPER static int lt_debug = 1; #else static int lt_debug = 0; #endif const char *program_name = "libtool-wrapper"; /* in case xstrdup fails */ void *xmalloc (size_t num); char *xstrdup (const char *string); const char *base_name (const char *name); char *find_executable (const char *wrapper); char *chase_symlinks (const char *pathspec); int make_executable (const char *path); int check_executable (const char *path); char *strendzap (char *str, const char *pat); void lt_debugprintf (const char *file, int line, const char *fmt, ...); void lt_fatal (const char *file, int line, const char *message, ...); static const char *nonnull (const char *s); static const char *nonempty (const char *s); void lt_setenv (const char *name, const char *value); char *lt_extend_str (const char *orig_value, const char *add, int to_end); void lt_update_exe_path (const char *name, const char *value); void lt_update_lib_path (const char *name, const char *value); char **prepare_spawn (char **argv); void lt_dump_script (FILE *f); EOF cat <= 0) && (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))) return 1; else return 0; } int make_executable (const char *path) { int rval = 0; struct stat st; lt_debugprintf (__FILE__, __LINE__, "(make_executable): %s\n", nonempty (path)); if ((!path) || (!*path)) return 0; if (stat (path, &st) >= 0) { rval = chmod (path, st.st_mode | S_IXOTH | S_IXGRP | S_IXUSR); } return rval; } /* Searches for the full path of the wrapper. Returns newly allocated full path name if found, NULL otherwise Does not chase symlinks, even on platforms that support them. */ char * find_executable (const char *wrapper) { int has_slash = 0; const char *p; const char *p_next; /* static buffer for getcwd */ char tmp[LT_PATHMAX + 1]; size_t tmp_len; char *concat_name; lt_debugprintf (__FILE__, __LINE__, "(find_executable): %s\n", nonempty (wrapper)); if ((wrapper == NULL) || (*wrapper == '\0')) return NULL; /* Absolute path? */ #if defined HAVE_DOS_BASED_FILE_SYSTEM if (isalpha ((unsigned char) wrapper[0]) && wrapper[1] == ':') { concat_name = xstrdup (wrapper); if (check_executable (concat_name)) return concat_name; XFREE (concat_name); } else { #endif if (IS_DIR_SEPARATOR (wrapper[0])) { concat_name = xstrdup (wrapper); if (check_executable (concat_name)) return concat_name; XFREE (concat_name); } #if defined HAVE_DOS_BASED_FILE_SYSTEM } #endif for (p = wrapper; *p; p++) if (*p == '/') { has_slash = 1; break; } if (!has_slash) { /* no slashes; search PATH */ const char *path = getenv ("PATH"); if (path != NULL) { for (p = path; *p; p = p_next) { const char *q; size_t p_len; for (q = p; *q; q++) if (IS_PATH_SEPARATOR (*q)) break; p_len = (size_t) (q - p); p_next = (*q == '\0' ? q : q + 1); if (p_len == 0) { /* empty path: current directory */ if (getcwd (tmp, LT_PATHMAX) == NULL) lt_fatal (__FILE__, __LINE__, "getcwd failed: %s", nonnull (strerror (errno))); tmp_len = strlen (tmp); concat_name = XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1); memcpy (concat_name, tmp, tmp_len); concat_name[tmp_len] = '/'; strcpy (concat_name + tmp_len + 1, wrapper); } else { concat_name = XMALLOC (char, p_len + 1 + strlen (wrapper) + 1); memcpy (concat_name, p, p_len); concat_name[p_len] = '/'; strcpy (concat_name + p_len + 1, wrapper); } if (check_executable (concat_name)) return concat_name; XFREE (concat_name); } } /* not found in PATH; assume curdir */ } /* Relative path | not found in path: prepend cwd */ if (getcwd (tmp, LT_PATHMAX) == NULL) lt_fatal (__FILE__, __LINE__, "getcwd failed: %s", nonnull (strerror (errno))); tmp_len = strlen (tmp); concat_name = XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1); memcpy (concat_name, tmp, tmp_len); concat_name[tmp_len] = '/'; strcpy (concat_name + tmp_len + 1, wrapper); if (check_executable (concat_name)) return concat_name; XFREE (concat_name); return NULL; } char * chase_symlinks (const char *pathspec) { #ifndef S_ISLNK return xstrdup (pathspec); #else char buf[LT_PATHMAX]; struct stat s; char *tmp_pathspec = xstrdup (pathspec); char *p; int has_symlinks = 0; while (strlen (tmp_pathspec) && !has_symlinks) { lt_debugprintf (__FILE__, __LINE__, "checking path component for symlinks: %s\n", tmp_pathspec); if (lstat (tmp_pathspec, &s) == 0) { if (S_ISLNK (s.st_mode) != 0) { has_symlinks = 1; break; } /* search backwards for last DIR_SEPARATOR */ p = tmp_pathspec + strlen (tmp_pathspec) - 1; while ((p > tmp_pathspec) && (!IS_DIR_SEPARATOR (*p))) p--; if ((p == tmp_pathspec) && (!IS_DIR_SEPARATOR (*p))) { /* no more DIR_SEPARATORS left */ break; } *p = '\0'; } else { lt_fatal (__FILE__, __LINE__, "error accessing file \"%s\": %s", tmp_pathspec, nonnull (strerror (errno))); } } XFREE (tmp_pathspec); if (!has_symlinks) { return xstrdup (pathspec); } tmp_pathspec = realpath (pathspec, buf); if (tmp_pathspec == 0) { lt_fatal (__FILE__, __LINE__, "could not follow symlinks for %s", pathspec); } return xstrdup (tmp_pathspec); #endif } char * strendzap (char *str, const char *pat) { size_t len, patlen; assert (str != NULL); assert (pat != NULL); len = strlen (str); patlen = strlen (pat); if (patlen <= len) { str += len - patlen; if (STREQ (str, pat)) *str = '\0'; } return str; } void lt_debugprintf (const char *file, int line, const char *fmt, ...) { va_list args; if (lt_debug) { (void) fprintf (stderr, "%s:%s:%d: ", program_name, file, line); va_start (args, fmt); (void) vfprintf (stderr, fmt, args); va_end (args); } } static void lt_error_core (int exit_status, const char *file, int line, const char *mode, const char *message, va_list ap) { fprintf (stderr, "%s:%s:%d: %s: ", program_name, file, line, mode); vfprintf (stderr, message, ap); fprintf (stderr, ".\n"); if (exit_status >= 0) exit (exit_status); } void lt_fatal (const char *file, int line, const char *message, ...) { va_list ap; va_start (ap, message); lt_error_core (EXIT_FAILURE, file, line, "FATAL", message, ap); va_end (ap); } static const char * nonnull (const char *s) { return s ? s : "(null)"; } static const char * nonempty (const char *s) { return (s && !*s) ? "(empty)" : nonnull (s); } void lt_setenv (const char *name, const char *value) { lt_debugprintf (__FILE__, __LINE__, "(lt_setenv) setting '%s' to '%s'\n", nonnull (name), nonnull (value)); { #ifdef HAVE_SETENV /* always make a copy, for consistency with !HAVE_SETENV */ char *str = xstrdup (value); setenv (name, str, 1); #else size_t len = strlen (name) + 1 + strlen (value) + 1; char *str = XMALLOC (char, len); sprintf (str, "%s=%s", name, value); if (putenv (str) != EXIT_SUCCESS) { XFREE (str); } #endif } } char * lt_extend_str (const char *orig_value, const char *add, int to_end) { char *new_value; if (orig_value && *orig_value) { size_t orig_value_len = strlen (orig_value); size_t add_len = strlen (add); new_value = XMALLOC (char, add_len + orig_value_len + 1); if (to_end) { strcpy (new_value, orig_value); strcpy (new_value + orig_value_len, add); } else { strcpy (new_value, add); strcpy (new_value + add_len, orig_value); } } else { new_value = xstrdup (add); } return new_value; } void lt_update_exe_path (const char *name, const char *value) { lt_debugprintf (__FILE__, __LINE__, "(lt_update_exe_path) modifying '%s' by prepending '%s'\n", nonnull (name), nonnull (value)); if (name && *name && value && *value) { char *new_value = lt_extend_str (getenv (name), value, 0); /* some systems can't cope with a ':'-terminated path #' */ size_t len = strlen (new_value); while ((len > 0) && IS_PATH_SEPARATOR (new_value[len-1])) { new_value[--len] = '\0'; } lt_setenv (name, new_value); XFREE (new_value); } } void lt_update_lib_path (const char *name, const char *value) { lt_debugprintf (__FILE__, __LINE__, "(lt_update_lib_path) modifying '%s' by prepending '%s'\n", nonnull (name), nonnull (value)); if (name && *name && value && *value) { char *new_value = lt_extend_str (getenv (name), value, 0); lt_setenv (name, new_value); XFREE (new_value); } } EOF case $host_os in mingw*) cat <<"EOF" /* Prepares an argument vector before calling spawn(). Note that spawn() does not by itself call the command interpreter (getenv ("COMSPEC") != NULL ? getenv ("COMSPEC") : ({ OSVERSIONINFO v; v.dwOSVersionInfoSize = sizeof(OSVERSIONINFO); GetVersionEx(&v); v.dwPlatformId == VER_PLATFORM_WIN32_NT; }) ? "cmd.exe" : "command.com"). Instead it simply concatenates the arguments, separated by ' ', and calls CreateProcess(). We must quote the arguments since Win32 CreateProcess() interprets characters like ' ', '\t', '\\', '"' (but not '<' and '>') in a special way: - Space and tab are interpreted as delimiters. They are not treated as delimiters if they are surrounded by double quotes: "...". - Unescaped double quotes are removed from the input. Their only effect is that within double quotes, space and tab are treated like normal characters. - Backslashes not followed by double quotes are not special. - But 2*n+1 backslashes followed by a double quote become n backslashes followed by a double quote (n >= 0): \" -> " \\\" -> \" \\\\\" -> \\" */ #define SHELL_SPECIAL_CHARS "\"\\ \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037" #define SHELL_SPACE_CHARS " \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037" char ** prepare_spawn (char **argv) { size_t argc; char **new_argv; size_t i; /* Count number of arguments. */ for (argc = 0; argv[argc] != NULL; argc++) ; /* Allocate new argument vector. */ new_argv = XMALLOC (char *, argc + 1); /* Put quoted arguments into the new argument vector. */ for (i = 0; i < argc; i++) { const char *string = argv[i]; if (string[0] == '\0') new_argv[i] = xstrdup ("\"\""); else if (strpbrk (string, SHELL_SPECIAL_CHARS) != NULL) { int quote_around = (strpbrk (string, SHELL_SPACE_CHARS) != NULL); size_t length; unsigned int backslashes; const char *s; char *quoted_string; char *p; length = 0; backslashes = 0; if (quote_around) length++; for (s = string; *s != '\0'; s++) { char c = *s; if (c == '"') length += backslashes + 1; length++; if (c == '\\') backslashes++; else backslashes = 0; } if (quote_around) length += backslashes + 1; quoted_string = XMALLOC (char, length + 1); p = quoted_string; backslashes = 0; if (quote_around) *p++ = '"'; for (s = string; *s != '\0'; s++) { char c = *s; if (c == '"') { unsigned int j; for (j = backslashes + 1; j > 0; j--) *p++ = '\\'; } *p++ = c; if (c == '\\') backslashes++; else backslashes = 0; } if (quote_around) { unsigned int j; for (j = backslashes; j > 0; j--) *p++ = '\\'; *p++ = '"'; } *p = '\0'; new_argv[i] = quoted_string; } else new_argv[i] = (char *) string; } new_argv[argc] = NULL; return new_argv; } EOF ;; esac cat <<"EOF" void lt_dump_script (FILE* f) { EOF func_emit_wrapper yes | $SED -n -e ' s/^\(.\{79\}\)\(..*\)/\1\ \2/ h s/\([\\"]\)/\\\1/g s/$/\\n/ s/\([^\n]*\).*/ fputs ("\1", f);/p g D' cat <<"EOF" } EOF } # end: func_emit_cwrapperexe_src # func_win32_import_lib_p ARG # True if ARG is an import lib, as indicated by $file_magic_cmd func_win32_import_lib_p () { $debug_cmd case `eval $file_magic_cmd \"\$1\" 2>/dev/null | $SED -e 10q` in *import*) : ;; *) false ;; esac } # func_suncc_cstd_abi # !!ONLY CALL THIS FOR SUN CC AFTER $compile_command IS FULLY EXPANDED!! # Several compiler flags select an ABI that is incompatible with the # Cstd library. Avoid specifying it if any are in CXXFLAGS. func_suncc_cstd_abi () { $debug_cmd case " $compile_command " in *" -compat=g "*|*\ -std=c++[0-9][0-9]\ *|*" -library=stdcxx4 "*|*" -library=stlport4 "*) suncc_use_cstd_abi=no ;; *) suncc_use_cstd_abi=yes ;; esac } # func_mode_link arg... func_mode_link () { $debug_cmd case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) # It is impossible to link a dll without this setting, and # we shouldn't force the makefile maintainer to figure out # what system we are compiling for in order to pass an extra # flag for every libtool invocation. # allow_undefined=no # FIXME: Unfortunately, there are problems with the above when trying # to make a dll that has undefined symbols, in which case not # even a static library is built. For now, we need to specify # -no-undefined on the libtool link line when we can be certain # that all symbols are satisfied, otherwise we get a static library. allow_undefined=yes ;; *) allow_undefined=yes ;; esac libtool_args=$nonopt base_compile="$nonopt $@" compile_command=$nonopt finalize_command=$nonopt compile_rpath= finalize_rpath= compile_shlibpath= finalize_shlibpath= convenience= old_convenience= deplibs= old_deplibs= compiler_flags= linker_flags= dllsearchpath= lib_search_path=`pwd` inst_prefix_dir= new_inherited_linker_flags= avoid_version=no bindir= dlfiles= dlprefiles= dlself=no export_dynamic=no export_symbols= export_symbols_regex= generated= libobjs= ltlibs= module=no no_install=no objs= os2dllname= non_pic_objects= precious_files_regex= prefer_static_libs=no preload=false prev= prevarg= release= rpath= xrpath= perm_rpath= temp_rpath= thread_safe=no vinfo= vinfo_number=no weak_libs= single_module=$wl-single_module func_infer_tag $base_compile # We need to know -static, to get the right output filenames. for arg do case $arg in -shared) test yes != "$build_libtool_libs" \ && func_fatal_configuration "cannot build a shared library" build_old_libs=no break ;; -all-static | -static | -static-libtool-libs) case $arg in -all-static) if test yes = "$build_libtool_libs" && test -z "$link_static_flag"; then func_warning "complete static linking is impossible in this configuration" fi if test -n "$link_static_flag"; then dlopen_self=$dlopen_self_static fi prefer_static_libs=yes ;; -static) if test -z "$pic_flag" && test -n "$link_static_flag"; then dlopen_self=$dlopen_self_static fi prefer_static_libs=built ;; -static-libtool-libs) if test -z "$pic_flag" && test -n "$link_static_flag"; then dlopen_self=$dlopen_self_static fi prefer_static_libs=yes ;; esac build_libtool_libs=no build_old_libs=yes break ;; esac done # See if our shared archives depend on static archives. test -n "$old_archive_from_new_cmds" && build_old_libs=yes # Go through the arguments, transforming them on the way. while test "$#" -gt 0; do arg=$1 shift func_quote_arg pretty,unquoted "$arg" qarg=$func_quote_arg_unquoted_result func_append libtool_args " $func_quote_arg_result" # If the previous option needs an argument, assign it. if test -n "$prev"; then case $prev in output) func_append compile_command " @OUTPUT@" func_append finalize_command " @OUTPUT@" ;; esac case $prev in bindir) bindir=$arg prev= continue ;; dlfiles|dlprefiles) $preload || { # Add the symbol object into the linking commands. func_append compile_command " @SYMFILE@" func_append finalize_command " @SYMFILE@" preload=: } case $arg in *.la | *.lo) ;; # We handle these cases below. force) if test no = "$dlself"; then dlself=needless export_dynamic=yes fi prev= continue ;; self) if test dlprefiles = "$prev"; then dlself=yes elif test dlfiles = "$prev" && test yes != "$dlopen_self"; then dlself=yes else dlself=needless export_dynamic=yes fi prev= continue ;; *) if test dlfiles = "$prev"; then func_append dlfiles " $arg" else func_append dlprefiles " $arg" fi prev= continue ;; esac ;; expsyms) export_symbols=$arg test -f "$arg" \ || func_fatal_error "symbol file '$arg' does not exist" prev= continue ;; expsyms_regex) export_symbols_regex=$arg prev= continue ;; framework) case $host in *-*-darwin*) case "$deplibs " in *" $qarg.ltframework "*) ;; *) func_append deplibs " $qarg.ltframework" # this is fixed later ;; esac ;; esac prev= continue ;; inst_prefix) inst_prefix_dir=$arg prev= continue ;; mllvm) # Clang does not use LLVM to link, so we can simply discard any # '-mllvm $arg' options when doing the link step. prev= continue ;; objectlist) if test -f "$arg"; then save_arg=$arg moreargs= for fil in `cat "$save_arg"` do # func_append moreargs " $fil" arg=$fil # A libtool-controlled object. # Check to see that this really is a libtool object. if func_lalib_unsafe_p "$arg"; then pic_object= non_pic_object= # Read the .lo file func_source "$arg" if test -z "$pic_object" || test -z "$non_pic_object" || test none = "$pic_object" && test none = "$non_pic_object"; then func_fatal_error "cannot find name of object for '$arg'" fi # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result if test none != "$pic_object"; then # Prepend the subdirectory the object is found in. pic_object=$xdir$pic_object if test dlfiles = "$prev"; then if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then func_append dlfiles " $pic_object" prev= continue else # If libtool objects are unsupported, then we need to preload. prev=dlprefiles fi fi # CHECK ME: I think I busted this. -Ossama if test dlprefiles = "$prev"; then # Preload the old-style object. func_append dlprefiles " $pic_object" prev= fi # A PIC object. func_append libobjs " $pic_object" arg=$pic_object fi # Non-PIC object. if test none != "$non_pic_object"; then # Prepend the subdirectory the object is found in. non_pic_object=$xdir$non_pic_object # A standard non-PIC object func_append non_pic_objects " $non_pic_object" if test -z "$pic_object" || test none = "$pic_object"; then arg=$non_pic_object fi else # If the PIC object exists, use it instead. # $xdir was prepended to $pic_object above. non_pic_object=$pic_object func_append non_pic_objects " $non_pic_object" fi else # Only an error if not doing a dry-run. if $opt_dry_run; then # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result func_lo2o "$arg" pic_object=$xdir$objdir/$func_lo2o_result non_pic_object=$xdir$func_lo2o_result func_append libobjs " $pic_object" func_append non_pic_objects " $non_pic_object" else func_fatal_error "'$arg' is not a valid libtool object" fi fi done else func_fatal_error "link input file '$arg' does not exist" fi arg=$save_arg prev= continue ;; os2dllname) os2dllname=$arg prev= continue ;; precious_regex) precious_files_regex=$arg prev= continue ;; release) release=-$arg prev= continue ;; rpath | xrpath) # We need an absolute path. case $arg in [\\/]* | [A-Za-z]:[\\/]*) ;; *) func_fatal_error "only absolute run-paths are allowed" ;; esac if test rpath = "$prev"; then case "$rpath " in *" $arg "*) ;; *) func_append rpath " $arg" ;; esac else case "$xrpath " in *" $arg "*) ;; *) func_append xrpath " $arg" ;; esac fi prev= continue ;; shrext) shrext_cmds=$arg prev= continue ;; weak) func_append weak_libs " $arg" prev= continue ;; xassembler) func_append compiler_flags " -Xassembler $qarg" prev= func_append compile_command " -Xassembler $qarg" func_append finalize_command " -Xassembler $qarg" continue ;; xcclinker) func_append linker_flags " $qarg" func_append compiler_flags " $qarg" prev= func_append compile_command " $qarg" func_append finalize_command " $qarg" continue ;; xcompiler) func_append compiler_flags " $qarg" prev= func_append compile_command " $qarg" func_append finalize_command " $qarg" continue ;; xlinker) func_append linker_flags " $qarg" func_append compiler_flags " $wl$qarg" prev= func_append compile_command " $wl$qarg" func_append finalize_command " $wl$qarg" continue ;; *) eval "$prev=\"\$arg\"" prev= continue ;; esac fi # test -n "$prev" prevarg=$arg case $arg in -all-static) if test -n "$link_static_flag"; then # See comment for -static flag below, for more details. func_append compile_command " $link_static_flag" func_append finalize_command " $link_static_flag" fi continue ;; -allow-undefined) # FIXME: remove this flag sometime in the future. func_fatal_error "'-allow-undefined' must not be used because it is the default" ;; -avoid-version) avoid_version=yes continue ;; -bindir) prev=bindir continue ;; -dlopen) prev=dlfiles continue ;; -dlpreopen) prev=dlprefiles continue ;; -export-dynamic) export_dynamic=yes continue ;; -export-symbols | -export-symbols-regex) if test -n "$export_symbols" || test -n "$export_symbols_regex"; then func_fatal_error "more than one -exported-symbols argument is not allowed" fi if test X-export-symbols = "X$arg"; then prev=expsyms else prev=expsyms_regex fi continue ;; -framework) prev=framework continue ;; -inst-prefix-dir) prev=inst_prefix continue ;; # The native IRIX linker understands -LANG:*, -LIST:* and -LNO:* # so, if we see these flags be careful not to treat them like -L -L[A-Z][A-Z]*:*) case $with_gcc/$host in no/*-*-irix* | /*-*-irix*) func_append compile_command " $arg" func_append finalize_command " $arg" ;; esac continue ;; -L*) func_stripname "-L" '' "$arg" if test -z "$func_stripname_result"; then if test "$#" -gt 0; then func_fatal_error "require no space between '-L' and '$1'" else func_fatal_error "need path for '-L' option" fi fi func_resolve_sysroot "$func_stripname_result" dir=$func_resolve_sysroot_result # We need an absolute path. case $dir in [\\/]* | [A-Za-z]:[\\/]*) ;; *) absdir=`cd "$dir" && pwd` test -z "$absdir" && \ func_fatal_error "cannot determine absolute directory name of '$dir'" dir=$absdir ;; esac case "$deplibs " in *" -L$dir "* | *" $arg "*) # Will only happen for absolute or sysroot arguments ;; *) # Preserve sysroot, but never include relative directories case $dir in [\\/]* | [A-Za-z]:[\\/]* | =*) func_append deplibs " $arg" ;; *) func_append deplibs " -L$dir" ;; esac func_append lib_search_path " $dir" ;; esac case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) testbindir=`$ECHO "$dir" | $SED 's*/lib$*/bin*'` case :$dllsearchpath: in *":$dir:"*) ;; ::) dllsearchpath=$dir;; *) func_append dllsearchpath ":$dir";; esac case :$dllsearchpath: in *":$testbindir:"*) ;; ::) dllsearchpath=$testbindir;; *) func_append dllsearchpath ":$testbindir";; esac ;; esac continue ;; -l*) if test X-lc = "X$arg" || test X-lm = "X$arg"; then case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-beos* | *-cegcc* | *-*-haiku*) # These systems don't actually have a C or math library (as such) continue ;; *-*-os2*) # These systems don't actually have a C library (as such) test X-lc = "X$arg" && continue ;; *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-bitrig* | *-*-midnightbsd*) # Do not include libc due to us having libc/libc_r. test X-lc = "X$arg" && continue ;; *-*-rhapsody* | *-*-darwin1.[012]) # Rhapsody C and math libraries are in the System framework func_append deplibs " System.ltframework" continue ;; *-*-sco3.2v5* | *-*-sco5v6*) # Causes problems with __ctype test X-lc = "X$arg" && continue ;; *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*) # Compiler inserts libc in the correct place for threads to work test X-lc = "X$arg" && continue ;; esac elif test X-lc_r = "X$arg"; then case $host in *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-bitrig* | *-*-midnightbsd*) # Do not include libc_r directly, use -pthread flag. continue ;; esac fi func_append deplibs " $arg" continue ;; -mllvm) prev=mllvm continue ;; -module) module=yes continue ;; # Tru64 UNIX uses -model [arg] to determine the layout of C++ # classes, name mangling, and exception handling. # Darwin uses the -arch flag to determine output architecture. -model|-arch|-isysroot|--sysroot) func_append compiler_flags " $arg" func_append compile_command " $arg" func_append finalize_command " $arg" prev=xcompiler continue ;; # Solaris ld rejects as of 11.4. Refer to Oracle bug 22985199. -pthread) case $host in *solaris2*) ;; *) case "$new_inherited_linker_flags " in *" $arg "*) ;; * ) func_append new_inherited_linker_flags " $arg" ;; esac ;; esac continue ;; -mt|-mthreads|-kthread|-Kthread|-pthreads|--thread-safe \ |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*) func_append compiler_flags " $arg" func_append compile_command " $arg" func_append finalize_command " $arg" case "$new_inherited_linker_flags " in *" $arg "*) ;; * ) func_append new_inherited_linker_flags " $arg" ;; esac continue ;; -multi_module) single_module=$wl-multi_module continue ;; -no-fast-install) fast_install=no continue ;; -no-install) case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-*-darwin* | *-cegcc*) # The PATH hackery in wrapper scripts is required on Windows # and Darwin in order for the loader to find any dlls it needs. func_warning "'-no-install' is ignored for $host" func_warning "assuming '-no-fast-install' instead" fast_install=no ;; *) no_install=yes ;; esac continue ;; -no-undefined) allow_undefined=no continue ;; -objectlist) prev=objectlist continue ;; -os2dllname) prev=os2dllname continue ;; -o) prev=output ;; -precious-files-regex) prev=precious_regex continue ;; -release) prev=release continue ;; -rpath) prev=rpath continue ;; -R) prev=xrpath continue ;; -R*) func_stripname '-R' '' "$arg" dir=$func_stripname_result # We need an absolute path. case $dir in [\\/]* | [A-Za-z]:[\\/]*) ;; =*) func_stripname '=' '' "$dir" dir=$lt_sysroot$func_stripname_result ;; *) func_fatal_error "only absolute run-paths are allowed" ;; esac case "$xrpath " in *" $dir "*) ;; *) func_append xrpath " $dir" ;; esac continue ;; -shared) # The effects of -shared are defined in a previous loop. continue ;; -shrext) prev=shrext continue ;; -static | -static-libtool-libs) # The effects of -static are defined in a previous loop. # We used to do the same as -all-static on platforms that # didn't have a PIC flag, but the assumption that the effects # would be equivalent was wrong. It would break on at least # Digital Unix and AIX. continue ;; -thread-safe) thread_safe=yes continue ;; -version-info) prev=vinfo continue ;; -version-number) prev=vinfo vinfo_number=yes continue ;; -weak) prev=weak continue ;; -Wc,*) func_stripname '-Wc,' '' "$arg" args=$func_stripname_result arg= save_ifs=$IFS; IFS=, for flag in $args; do IFS=$save_ifs func_quote_arg pretty "$flag" func_append arg " $func_quote_arg_result" func_append compiler_flags " $func_quote_arg_result" done IFS=$save_ifs func_stripname ' ' '' "$arg" arg=$func_stripname_result ;; -Wl,*) func_stripname '-Wl,' '' "$arg" args=$func_stripname_result arg= save_ifs=$IFS; IFS=, for flag in $args; do IFS=$save_ifs func_quote_arg pretty "$flag" func_append arg " $wl$func_quote_arg_result" func_append compiler_flags " $wl$func_quote_arg_result" func_append linker_flags " $func_quote_arg_result" done IFS=$save_ifs func_stripname ' ' '' "$arg" arg=$func_stripname_result ;; -Xassembler) prev=xassembler continue ;; -Xcompiler) prev=xcompiler continue ;; -Xlinker) prev=xlinker continue ;; -XCClinker) prev=xcclinker continue ;; # -msg_* for osf cc -msg_*) func_quote_arg pretty "$arg" arg=$func_quote_arg_result ;; # Flags to be passed through unchanged, with rationale: # -64, -mips[0-9] enable 64-bit mode for the SGI compiler # -r[0-9][0-9]* specify processor for the SGI compiler # -xarch=*, -xtarget=* enable 64-bit mode for the Sun compiler # +DA*, +DD* enable 64-bit mode for the HP compiler # -q* compiler args for the IBM compiler # -m*, -t[45]*, -txscale* architecture-specific flags for GCC # -F/path path to uninstalled frameworks, gcc on darwin # -p, -pg, --coverage, -fprofile-* profiling flags for GCC # -fstack-protector* stack protector flags for GCC # @file GCC response files # -tp=* Portland pgcc target processor selection # --sysroot=* for sysroot support # -O*, -g*, -flto*, -fwhopr*, -fuse-linker-plugin GCC link-time optimization # -specs=* GCC specs files # -stdlib=* select c++ std lib with clang # -fsanitize=* Clang/GCC memory and address sanitizer # -fuse-ld=* Linker select flags for GCC # -Wa,* Pass flags directly to the assembler -64|-mips[0-9]|-r[0-9][0-9]*|-xarch=*|-xtarget=*|+DA*|+DD*|-q*|-m*| \ -t[45]*|-txscale*|-p|-pg|--coverage|-fprofile-*|-F*|@*|-tp=*|--sysroot=*| \ -O*|-g*|-flto*|-fwhopr*|-fuse-linker-plugin|-fstack-protector*|-stdlib=*| \ -specs=*|-fsanitize=*|-fuse-ld=*|-Wa,*) func_quote_arg pretty "$arg" arg=$func_quote_arg_result func_append compile_command " $arg" func_append finalize_command " $arg" func_append compiler_flags " $arg" continue ;; -Z*) if test os2 = "`expr $host : '.*\(os2\)'`"; then # OS/2 uses -Zxxx to specify OS/2-specific options compiler_flags="$compiler_flags $arg" func_append compile_command " $arg" func_append finalize_command " $arg" case $arg in -Zlinker | -Zstack) prev=xcompiler ;; esac continue else # Otherwise treat like 'Some other compiler flag' below func_quote_arg pretty "$arg" arg=$func_quote_arg_result fi ;; # Some other compiler flag. -* | +*) func_quote_arg pretty "$arg" arg=$func_quote_arg_result ;; *.$objext) # A standard object. func_append objs " $arg" ;; *.lo) # A libtool-controlled object. # Check to see that this really is a libtool object. if func_lalib_unsafe_p "$arg"; then pic_object= non_pic_object= # Read the .lo file func_source "$arg" if test -z "$pic_object" || test -z "$non_pic_object" || test none = "$pic_object" && test none = "$non_pic_object"; then func_fatal_error "cannot find name of object for '$arg'" fi # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result test none = "$pic_object" || { # Prepend the subdirectory the object is found in. pic_object=$xdir$pic_object if test dlfiles = "$prev"; then if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then func_append dlfiles " $pic_object" prev= continue else # If libtool objects are unsupported, then we need to preload. prev=dlprefiles fi fi # CHECK ME: I think I busted this. -Ossama if test dlprefiles = "$prev"; then # Preload the old-style object. func_append dlprefiles " $pic_object" prev= fi # A PIC object. func_append libobjs " $pic_object" arg=$pic_object } # Non-PIC object. if test none != "$non_pic_object"; then # Prepend the subdirectory the object is found in. non_pic_object=$xdir$non_pic_object # A standard non-PIC object func_append non_pic_objects " $non_pic_object" if test -z "$pic_object" || test none = "$pic_object"; then arg=$non_pic_object fi else # If the PIC object exists, use it instead. # $xdir was prepended to $pic_object above. non_pic_object=$pic_object func_append non_pic_objects " $non_pic_object" fi else # Only an error if not doing a dry-run. if $opt_dry_run; then # Extract subdirectory from the argument. func_dirname "$arg" "/" "" xdir=$func_dirname_result func_lo2o "$arg" pic_object=$xdir$objdir/$func_lo2o_result non_pic_object=$xdir$func_lo2o_result func_append libobjs " $pic_object" func_append non_pic_objects " $non_pic_object" else func_fatal_error "'$arg' is not a valid libtool object" fi fi ;; *.$libext) # An archive. func_append deplibs " $arg" func_append old_deplibs " $arg" continue ;; *.la) # A libtool-controlled library. func_resolve_sysroot "$arg" if test dlfiles = "$prev"; then # This library was specified with -dlopen. func_append dlfiles " $func_resolve_sysroot_result" prev= elif test dlprefiles = "$prev"; then # The library was specified with -dlpreopen. func_append dlprefiles " $func_resolve_sysroot_result" prev= else func_append deplibs " $func_resolve_sysroot_result" fi continue ;; # Some other compiler argument. *) # Unknown arguments in both finalize_command and compile_command need # to be aesthetically quoted because they are evaled later. func_quote_arg pretty "$arg" arg=$func_quote_arg_result ;; esac # arg # Now actually substitute the argument into the commands. if test -n "$arg"; then func_append compile_command " $arg" func_append finalize_command " $arg" fi done # argument parsing loop test -n "$prev" && \ func_fatal_help "the '$prevarg' option requires an argument" if test yes = "$export_dynamic" && test -n "$export_dynamic_flag_spec"; then eval arg=\"$export_dynamic_flag_spec\" func_append compile_command " $arg" func_append finalize_command " $arg" fi oldlibs= # calculate the name of the file, without its directory func_basename "$output" outputname=$func_basename_result libobjs_save=$libobjs if test -n "$shlibpath_var"; then # get the directories listed in $shlibpath_var eval shlib_search_path=\`\$ECHO \"\$$shlibpath_var\" \| \$SED \'s/:/ /g\'\` else shlib_search_path= fi eval sys_lib_search_path=\"$sys_lib_search_path_spec\" eval sys_lib_dlsearch_path=\"$sys_lib_dlsearch_path_spec\" # Definition is injected by LT_CONFIG during libtool generation. func_munge_path_list sys_lib_dlsearch_path "$LT_SYS_LIBRARY_PATH" func_dirname "$output" "/" "" output_objdir=$func_dirname_result$objdir func_to_tool_file "$output_objdir/" tool_output_objdir=$func_to_tool_file_result # Create the object directory. func_mkdir_p "$output_objdir" # Determine the type of output case $output in "") func_fatal_help "you must specify an output file" ;; *.$libext) linkmode=oldlib ;; *.lo | *.$objext) linkmode=obj ;; *.la) linkmode=lib ;; *) linkmode=prog ;; # Anything else should be a program. esac specialdeplibs= libs= # Find all interdependent deplibs by searching for libraries # that are linked more than once (e.g. -la -lb -la) for deplib in $deplibs; do if $opt_preserve_dup_deps; then case "$libs " in *" $deplib "*) func_append specialdeplibs " $deplib" ;; esac fi func_append libs " $deplib" done if test lib = "$linkmode"; then libs="$predeps $libs $compiler_lib_search_path $postdeps" # Compute libraries that are listed more than once in $predeps # $postdeps and mark them as special (i.e., whose duplicates are # not to be eliminated). pre_post_deps= if $opt_duplicate_compiler_generated_deps; then for pre_post_dep in $predeps $postdeps; do case "$pre_post_deps " in *" $pre_post_dep "*) func_append specialdeplibs " $pre_post_deps" ;; esac func_append pre_post_deps " $pre_post_dep" done fi pre_post_deps= fi deplibs= newdependency_libs= newlib_search_path= need_relink=no # whether we're linking any uninstalled libtool libraries notinst_deplibs= # not-installed libtool libraries notinst_path= # paths that contain not-installed libtool libraries case $linkmode in lib) passes="conv dlpreopen link" for file in $dlfiles $dlprefiles; do case $file in *.la) ;; *) func_fatal_help "libraries can '-dlopen' only libtool libraries: $file" ;; esac done ;; prog) compile_deplibs= finalize_deplibs= alldeplibs=false newdlfiles= newdlprefiles= passes="conv scan dlopen dlpreopen link" ;; *) passes="conv" ;; esac for pass in $passes; do # The preopen pass in lib mode reverses $deplibs; put it back here # so that -L comes before libs that need it for instance... if test lib,link = "$linkmode,$pass"; then ## FIXME: Find the place where the list is rebuilt in the wrong ## order, and fix it there properly tmp_deplibs= for deplib in $deplibs; do tmp_deplibs="$deplib $tmp_deplibs" done deplibs=$tmp_deplibs fi if test lib,link = "$linkmode,$pass" || test prog,scan = "$linkmode,$pass"; then libs=$deplibs deplibs= fi if test prog = "$linkmode"; then case $pass in dlopen) libs=$dlfiles ;; dlpreopen) libs=$dlprefiles ;; link) libs="$deplibs %DEPLIBS% $dependency_libs" ;; esac fi if test lib,dlpreopen = "$linkmode,$pass"; then # Collect and forward deplibs of preopened libtool libs for lib in $dlprefiles; do # Ignore non-libtool-libs dependency_libs= func_resolve_sysroot "$lib" case $lib in *.la) func_source "$func_resolve_sysroot_result" ;; esac # Collect preopened libtool deplibs, except any this library # has declared as weak libs for deplib in $dependency_libs; do func_basename "$deplib" deplib_base=$func_basename_result case " $weak_libs " in *" $deplib_base "*) ;; *) func_append deplibs " $deplib" ;; esac done done libs=$dlprefiles fi if test dlopen = "$pass"; then # Collect dlpreopened libraries save_deplibs=$deplibs deplibs= fi for deplib in $libs; do lib= found=false case $deplib in -mt|-mthreads|-kthread|-Kthread|-pthread|-pthreads|--thread-safe \ |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*) if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else func_append compiler_flags " $deplib" if test lib = "$linkmode"; then case "$new_inherited_linker_flags " in *" $deplib "*) ;; * ) func_append new_inherited_linker_flags " $deplib" ;; esac fi fi continue ;; -l*) if test lib != "$linkmode" && test prog != "$linkmode"; then func_warning "'-l' is ignored for archives/objects" continue fi func_stripname '-l' '' "$deplib" name=$func_stripname_result if test lib = "$linkmode"; then searchdirs="$newlib_search_path $lib_search_path $compiler_lib_search_dirs $sys_lib_search_path $shlib_search_path" else searchdirs="$newlib_search_path $lib_search_path $sys_lib_search_path $shlib_search_path" fi for searchdir in $searchdirs; do for search_ext in .la $std_shrext .so .a; do # Search the libtool library lib=$searchdir/lib$name$search_ext if test -f "$lib"; then if test .la = "$search_ext"; then found=: else found=false fi break 2 fi done done if $found; then # deplib is a libtool library # If $allow_libtool_libs_with_static_runtimes && $deplib is a stdlib, # We need to do some special things here, and not later. if test yes = "$allow_libtool_libs_with_static_runtimes"; then case " $predeps $postdeps " in *" $deplib "*) if func_lalib_p "$lib"; then library_names= old_library= func_source "$lib" for l in $old_library $library_names; do ll=$l done if test "X$ll" = "X$old_library"; then # only static version available found=false func_dirname "$lib" "" "." ladir=$func_dirname_result lib=$ladir/$old_library if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else deplibs="$deplib $deplibs" test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs" fi continue fi fi ;; *) ;; esac fi else # deplib doesn't seem to be a libtool library if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else deplibs="$deplib $deplibs" test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs" fi continue fi ;; # -l *.ltframework) if test prog,link = "$linkmode,$pass"; then compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else deplibs="$deplib $deplibs" if test lib = "$linkmode"; then case "$new_inherited_linker_flags " in *" $deplib "*) ;; * ) func_append new_inherited_linker_flags " $deplib" ;; esac fi fi continue ;; -L*) case $linkmode in lib) deplibs="$deplib $deplibs" test conv = "$pass" && continue newdependency_libs="$deplib $newdependency_libs" func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result" func_append newlib_search_path " $func_resolve_sysroot_result" ;; prog) if test conv = "$pass"; then deplibs="$deplib $deplibs" continue fi if test scan = "$pass"; then deplibs="$deplib $deplibs" else compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" fi func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result" func_append newlib_search_path " $func_resolve_sysroot_result" ;; *) func_warning "'-L' is ignored for archives/objects" ;; esac # linkmode continue ;; # -L -R*) if test link = "$pass"; then func_stripname '-R' '' "$deplib" func_resolve_sysroot "$func_stripname_result" dir=$func_resolve_sysroot_result # Make sure the xrpath contains only unique directories. case "$xrpath " in *" $dir "*) ;; *) func_append xrpath " $dir" ;; esac fi deplibs="$deplib $deplibs" continue ;; *.la) func_resolve_sysroot "$deplib" lib=$func_resolve_sysroot_result ;; *.$libext) if test conv = "$pass"; then deplibs="$deplib $deplibs" continue fi case $linkmode in lib) # Linking convenience modules into shared libraries is allowed, # but linking other static libraries is non-portable. case " $dlpreconveniencelibs " in *" $deplib "*) ;; *) valid_a_lib=false case $deplibs_check_method in match_pattern*) set dummy $deplibs_check_method; shift match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"` if eval "\$ECHO \"$deplib\"" 2>/dev/null | $SED 10q \ | $EGREP "$match_pattern_regex" > /dev/null; then valid_a_lib=: fi ;; pass_all) valid_a_lib=: ;; esac if $valid_a_lib; then echo $ECHO "*** Warning: Linking the shared library $output against the" $ECHO "*** static library $deplib is not portable!" deplibs="$deplib $deplibs" else echo $ECHO "*** Warning: Trying to link with static lib archive $deplib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have" echo "*** because the file extensions .$libext of this argument makes me believe" echo "*** that it is just a static archive that I should not use here." fi ;; esac continue ;; prog) if test link != "$pass"; then deplibs="$deplib $deplibs" else compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" fi continue ;; esac # linkmode ;; # *.$libext *.lo | *.$objext) if test conv = "$pass"; then deplibs="$deplib $deplibs" elif test prog = "$linkmode"; then if test dlpreopen = "$pass" || test yes != "$dlopen_support" || test no = "$build_libtool_libs"; then # If there is no dlopen support or we're linking statically, # we need to preload. func_append newdlprefiles " $deplib" compile_deplibs="$deplib $compile_deplibs" finalize_deplibs="$deplib $finalize_deplibs" else func_append newdlfiles " $deplib" fi fi continue ;; %DEPLIBS%) alldeplibs=: continue ;; esac # case $deplib $found || test -f "$lib" \ || func_fatal_error "cannot find the library '$lib' or unhandled argument '$deplib'" # Check to see that this really is a libtool archive. func_lalib_unsafe_p "$lib" \ || func_fatal_error "'$lib' is not a valid libtool archive" func_dirname "$lib" "" "." ladir=$func_dirname_result dlname= dlopen= dlpreopen= libdir= library_names= old_library= inherited_linker_flags= # If the library was installed with an old release of libtool, # it will not redefine variables installed, or shouldnotlink installed=yes shouldnotlink=no avoidtemprpath= # Read the .la file func_source "$lib" # Convert "-framework foo" to "foo.ltframework" if test -n "$inherited_linker_flags"; then tmp_inherited_linker_flags=`$ECHO "$inherited_linker_flags" | $SED 's/-framework \([^ $]*\)/\1.ltframework/g'` for tmp_inherited_linker_flag in $tmp_inherited_linker_flags; do case " $new_inherited_linker_flags " in *" $tmp_inherited_linker_flag "*) ;; *) func_append new_inherited_linker_flags " $tmp_inherited_linker_flag";; esac done fi dependency_libs=`$ECHO " $dependency_libs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` if test lib,link = "$linkmode,$pass" || test prog,scan = "$linkmode,$pass" || { test prog != "$linkmode" && test lib != "$linkmode"; }; then test -n "$dlopen" && func_append dlfiles " $dlopen" test -n "$dlpreopen" && func_append dlprefiles " $dlpreopen" fi if test conv = "$pass"; then # Only check for convenience libraries deplibs="$lib $deplibs" if test -z "$libdir"; then if test -z "$old_library"; then func_fatal_error "cannot find name of link library for '$lib'" fi # It is a libtool convenience library, so add in its objects. func_append convenience " $ladir/$objdir/$old_library" func_append old_convenience " $ladir/$objdir/$old_library" elif test prog != "$linkmode" && test lib != "$linkmode"; then func_fatal_error "'$lib' is not a convenience library" fi tmp_libs= for deplib in $dependency_libs; do deplibs="$deplib $deplibs" if $opt_preserve_dup_deps; then case "$tmp_libs " in *" $deplib "*) func_append specialdeplibs " $deplib" ;; esac fi func_append tmp_libs " $deplib" done continue fi # $pass = conv # Get the name of the library we link against. linklib= if test -n "$old_library" && { test yes = "$prefer_static_libs" || test built,no = "$prefer_static_libs,$installed"; }; then linklib=$old_library else for l in $old_library $library_names; do linklib=$l done fi if test -z "$linklib"; then func_fatal_error "cannot find name of link library for '$lib'" fi # This library was specified with -dlopen. if test dlopen = "$pass"; then test -z "$libdir" \ && func_fatal_error "cannot -dlopen a convenience library: '$lib'" if test -z "$dlname" || test yes != "$dlopen_support" || test no = "$build_libtool_libs" then # If there is no dlname, no dlopen support or we're linking # statically, we need to preload. We also need to preload any # dependent libraries so libltdl's deplib preloader doesn't # bomb out in the load deplibs phase. func_append dlprefiles " $lib $dependency_libs" else func_append newdlfiles " $lib" fi continue fi # $pass = dlopen # We need an absolute path. case $ladir in [\\/]* | [A-Za-z]:[\\/]*) abs_ladir=$ladir ;; *) abs_ladir=`cd "$ladir" && pwd` if test -z "$abs_ladir"; then func_warning "cannot determine absolute directory name of '$ladir'" func_warning "passing it literally to the linker, although it might fail" abs_ladir=$ladir fi ;; esac func_basename "$lib" laname=$func_basename_result # Find the relevant object directory and library name. if test yes = "$installed"; then if test ! -f "$lt_sysroot$libdir/$linklib" && test -f "$abs_ladir/$linklib"; then func_warning "library '$lib' was moved." dir=$ladir absdir=$abs_ladir libdir=$abs_ladir else dir=$lt_sysroot$libdir absdir=$lt_sysroot$libdir fi test yes = "$hardcode_automatic" && avoidtemprpath=yes else if test ! -f "$ladir/$objdir/$linklib" && test -f "$abs_ladir/$linklib"; then dir=$ladir absdir=$abs_ladir # Remove this search path later func_append notinst_path " $abs_ladir" else dir=$ladir/$objdir absdir=$abs_ladir/$objdir # Remove this search path later func_append notinst_path " $abs_ladir" fi fi # $installed = yes func_stripname 'lib' '.la' "$laname" name=$func_stripname_result # This library was specified with -dlpreopen. if test dlpreopen = "$pass"; then if test -z "$libdir" && test prog = "$linkmode"; then func_fatal_error "only libraries may -dlpreopen a convenience library: '$lib'" fi case $host in # special handling for platforms with PE-DLLs. *cygwin* | *mingw* | *cegcc* ) # Linker will automatically link against shared library if both # static and shared are present. Therefore, ensure we extract # symbols from the import library if a shared library is present # (otherwise, the dlopen module name will be incorrect). We do # this by putting the import library name into $newdlprefiles. # We recover the dlopen module name by 'saving' the la file # name in a special purpose variable, and (later) extracting the # dlname from the la file. if test -n "$dlname"; then func_tr_sh "$dir/$linklib" eval "libfile_$func_tr_sh_result=\$abs_ladir/\$laname" func_append newdlprefiles " $dir/$linklib" else func_append newdlprefiles " $dir/$old_library" # Keep a list of preopened convenience libraries to check # that they are being used correctly in the link pass. test -z "$libdir" && \ func_append dlpreconveniencelibs " $dir/$old_library" fi ;; * ) # Prefer using a static library (so that no silly _DYNAMIC symbols # are required to link). if test -n "$old_library"; then func_append newdlprefiles " $dir/$old_library" # Keep a list of preopened convenience libraries to check # that they are being used correctly in the link pass. test -z "$libdir" && \ func_append dlpreconveniencelibs " $dir/$old_library" # Otherwise, use the dlname, so that lt_dlopen finds it. elif test -n "$dlname"; then func_append newdlprefiles " $dir/$dlname" else func_append newdlprefiles " $dir/$linklib" fi ;; esac fi # $pass = dlpreopen if test -z "$libdir"; then # Link the convenience library if test lib = "$linkmode"; then deplibs="$dir/$old_library $deplibs" elif test prog,link = "$linkmode,$pass"; then compile_deplibs="$dir/$old_library $compile_deplibs" finalize_deplibs="$dir/$old_library $finalize_deplibs" else deplibs="$lib $deplibs" # used for prog,scan pass fi continue fi if test prog = "$linkmode" && test link != "$pass"; then func_append newlib_search_path " $ladir" deplibs="$lib $deplibs" linkalldeplibs=false if test no != "$link_all_deplibs" || test -z "$library_names" || test no = "$build_libtool_libs"; then linkalldeplibs=: fi tmp_libs= for deplib in $dependency_libs; do case $deplib in -L*) func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result" func_append newlib_search_path " $func_resolve_sysroot_result" ;; esac # Need to link against all dependency_libs? if $linkalldeplibs; then deplibs="$deplib $deplibs" else # Need to hardcode shared library paths # or/and link against static libraries newdependency_libs="$deplib $newdependency_libs" fi if $opt_preserve_dup_deps; then case "$tmp_libs " in *" $deplib "*) func_append specialdeplibs " $deplib" ;; esac fi func_append tmp_libs " $deplib" done # for deplib continue fi # $linkmode = prog... if test prog,link = "$linkmode,$pass"; then if test -n "$library_names" && { { test no = "$prefer_static_libs" || test built,yes = "$prefer_static_libs,$installed"; } || test -z "$old_library"; }; then # We need to hardcode the library path if test -n "$shlibpath_var" && test -z "$avoidtemprpath"; then # Make sure the rpath contains only unique directories. case $temp_rpath: in *"$absdir:"*) ;; *) func_append temp_rpath "$absdir:" ;; esac fi # Hardcode the library path. # Skip directories that are in the system default run-time # search path. case " $sys_lib_dlsearch_path " in *" $absdir "*) ;; *) case "$compile_rpath " in *" $absdir "*) ;; *) func_append compile_rpath " $absdir" ;; esac ;; esac case " $sys_lib_dlsearch_path " in *" $libdir "*) ;; *) case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac ;; esac fi # $linkmode,$pass = prog,link... if $alldeplibs && { test pass_all = "$deplibs_check_method" || { test yes = "$build_libtool_libs" && test -n "$library_names"; }; }; then # We only need to search for static libraries continue fi fi link_static=no # Whether the deplib will be linked statically use_static_libs=$prefer_static_libs if test built = "$use_static_libs" && test yes = "$installed"; then use_static_libs=no fi if test -n "$library_names" && { test no = "$use_static_libs" || test -z "$old_library"; }; then case $host in *cygwin* | *mingw* | *cegcc* | *os2*) # No point in relinking DLLs because paths are not encoded func_append notinst_deplibs " $lib" need_relink=no ;; *) if test no = "$installed"; then func_append notinst_deplibs " $lib" need_relink=yes fi ;; esac # This is a shared library # Warn about portability, can't link against -module's on some # systems (darwin). Don't bleat about dlopened modules though! dlopenmodule= for dlpremoduletest in $dlprefiles; do if test "X$dlpremoduletest" = "X$lib"; then dlopenmodule=$dlpremoduletest break fi done if test -z "$dlopenmodule" && test yes = "$shouldnotlink" && test link = "$pass"; then echo if test prog = "$linkmode"; then $ECHO "*** Warning: Linking the executable $output against the loadable module" else $ECHO "*** Warning: Linking the shared library $output against the loadable module" fi $ECHO "*** $linklib is not portable!" fi if test lib = "$linkmode" && test yes = "$hardcode_into_libs"; then # Hardcode the library path. # Skip directories that are in the system default run-time # search path. case " $sys_lib_dlsearch_path " in *" $absdir "*) ;; *) case "$compile_rpath " in *" $absdir "*) ;; *) func_append compile_rpath " $absdir" ;; esac ;; esac case " $sys_lib_dlsearch_path " in *" $libdir "*) ;; *) case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac ;; esac fi if test -n "$old_archive_from_expsyms_cmds"; then # figure out the soname set dummy $library_names shift realname=$1 shift libname=`eval "\\$ECHO \"$libname_spec\""` # use dlname if we got it. it's perfectly good, no? if test -n "$dlname"; then soname=$dlname elif test -n "$soname_spec"; then # bleh windows case $host in *cygwin* | mingw* | *cegcc* | *os2*) func_arith $current - $age major=$func_arith_result versuffix=-$major ;; esac eval soname=\"$soname_spec\" else soname=$realname fi # Make a new name for the extract_expsyms_cmds to use soroot=$soname func_basename "$soroot" soname=$func_basename_result func_stripname 'lib' '.dll' "$soname" newlib=libimp-$func_stripname_result.a # If the library has no export list, then create one now if test -f "$output_objdir/$soname-def"; then : else func_verbose "extracting exported symbol list from '$soname'" func_execute_cmds "$extract_expsyms_cmds" 'exit $?' fi # Create $newlib if test -f "$output_objdir/$newlib"; then :; else func_verbose "generating import library for '$soname'" func_execute_cmds "$old_archive_from_expsyms_cmds" 'exit $?' fi # make sure the library variables are pointing to the new library dir=$output_objdir linklib=$newlib fi # test -n "$old_archive_from_expsyms_cmds" if test prog = "$linkmode" || test relink != "$opt_mode"; then add_shlibpath= add_dir= add= lib_linked=yes case $hardcode_action in immediate | unsupported) if test no = "$hardcode_direct"; then add=$dir/$linklib case $host in *-*-sco3.2v5.0.[024]*) add_dir=-L$dir ;; *-*-sysv4*uw2*) add_dir=-L$dir ;; *-*-sysv5OpenUNIX* | *-*-sysv5UnixWare7.[01].[10]* | \ *-*-unixware7*) add_dir=-L$dir ;; *-*-darwin* ) # if the lib is a (non-dlopened) module then we cannot # link against it, someone is ignoring the earlier warnings if /usr/bin/file -L $add 2> /dev/null | $GREP ": [^:]* bundle" >/dev/null; then if test "X$dlopenmodule" != "X$lib"; then $ECHO "*** Warning: lib $linklib is a module, not a shared library" if test -z "$old_library"; then echo echo "*** And there doesn't seem to be a static archive available" echo "*** The link will probably fail, sorry" else add=$dir/$old_library fi elif test -n "$old_library"; then add=$dir/$old_library fi fi esac elif test no = "$hardcode_minus_L"; then case $host in *-*-sunos*) add_shlibpath=$dir ;; esac add_dir=-L$dir add=-l$name elif test no = "$hardcode_shlibpath_var"; then add_shlibpath=$dir add=-l$name else lib_linked=no fi ;; relink) if test yes = "$hardcode_direct" && test no = "$hardcode_direct_absolute"; then add=$dir/$linklib elif test yes = "$hardcode_minus_L"; then add_dir=-L$absdir # Try looking first in the location we're being installed to. if test -n "$inst_prefix_dir"; then case $libdir in [\\/]*) func_append add_dir " -L$inst_prefix_dir$libdir" ;; esac fi add=-l$name elif test yes = "$hardcode_shlibpath_var"; then add_shlibpath=$dir add=-l$name else lib_linked=no fi ;; *) lib_linked=no ;; esac if test yes != "$lib_linked"; then func_fatal_configuration "unsupported hardcode properties" fi if test -n "$add_shlibpath"; then case :$compile_shlibpath: in *":$add_shlibpath:"*) ;; *) func_append compile_shlibpath "$add_shlibpath:" ;; esac fi if test prog = "$linkmode"; then test -n "$add_dir" && compile_deplibs="$add_dir $compile_deplibs" test -n "$add" && compile_deplibs="$add $compile_deplibs" else test -n "$add_dir" && deplibs="$add_dir $deplibs" test -n "$add" && deplibs="$add $deplibs" if test yes != "$hardcode_direct" && test yes != "$hardcode_minus_L" && test yes = "$hardcode_shlibpath_var"; then case :$finalize_shlibpath: in *":$libdir:"*) ;; *) func_append finalize_shlibpath "$libdir:" ;; esac fi fi fi if test prog = "$linkmode" || test relink = "$opt_mode"; then add_shlibpath= add_dir= add= # Finalize command for both is simple: just hardcode it. if test yes = "$hardcode_direct" && test no = "$hardcode_direct_absolute"; then add=$libdir/$linklib elif test yes = "$hardcode_minus_L"; then add_dir=-L$libdir add=-l$name elif test yes = "$hardcode_shlibpath_var"; then case :$finalize_shlibpath: in *":$libdir:"*) ;; *) func_append finalize_shlibpath "$libdir:" ;; esac add=-l$name elif test yes = "$hardcode_automatic"; then if test -n "$inst_prefix_dir" && test -f "$inst_prefix_dir$libdir/$linklib"; then add=$inst_prefix_dir$libdir/$linklib else add=$libdir/$linklib fi else # We cannot seem to hardcode it, guess we'll fake it. add_dir=-L$libdir # Try looking first in the location we're being installed to. if test -n "$inst_prefix_dir"; then case $libdir in [\\/]*) func_append add_dir " -L$inst_prefix_dir$libdir" ;; esac fi add=-l$name fi if test prog = "$linkmode"; then test -n "$add_dir" && finalize_deplibs="$add_dir $finalize_deplibs" test -n "$add" && finalize_deplibs="$add $finalize_deplibs" else test -n "$add_dir" && deplibs="$add_dir $deplibs" test -n "$add" && deplibs="$add $deplibs" fi fi elif test prog = "$linkmode"; then # Here we assume that one of hardcode_direct or hardcode_minus_L # is not unsupported. This is valid on all known static and # shared platforms. if test unsupported != "$hardcode_direct"; then test -n "$old_library" && linklib=$old_library compile_deplibs="$dir/$linklib $compile_deplibs" finalize_deplibs="$dir/$linklib $finalize_deplibs" else compile_deplibs="-l$name -L$dir $compile_deplibs" finalize_deplibs="-l$name -L$dir $finalize_deplibs" fi elif test yes = "$build_libtool_libs"; then # Not a shared library if test pass_all != "$deplibs_check_method"; then # We're trying link a shared library against a static one # but the system doesn't support it. # Just print a warning and add the library to dependency_libs so # that the program can be linked against the static library. echo $ECHO "*** Warning: This system cannot link to static lib archive $lib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have." if test yes = "$module"; then echo "*** But as you try to build a module library, libtool will still create " echo "*** a static module, that should work as long as the dlopening application" echo "*** is linked with the -dlopen flag to resolve symbols at runtime." if test -z "$global_symbol_pipe"; then echo echo "*** However, this would only work if libtool was able to extract symbol" echo "*** lists from a program, using 'nm' or equivalent, but libtool could" echo "*** not find such a program. So, this module is probably useless." echo "*** 'nm' from GNU binutils and a full rebuild may help." fi if test no = "$build_old_libs"; then build_libtool_libs=module build_old_libs=yes else build_libtool_libs=no fi fi else deplibs="$dir/$old_library $deplibs" link_static=yes fi fi # link shared/static library? if test lib = "$linkmode"; then if test -n "$dependency_libs" && { test yes != "$hardcode_into_libs" || test yes = "$build_old_libs" || test yes = "$link_static"; }; then # Extract -R from dependency_libs temp_deplibs= for libdir in $dependency_libs; do case $libdir in -R*) func_stripname '-R' '' "$libdir" temp_xrpath=$func_stripname_result case " $xrpath " in *" $temp_xrpath "*) ;; *) func_append xrpath " $temp_xrpath";; esac;; *) func_append temp_deplibs " $libdir";; esac done dependency_libs=$temp_deplibs fi func_append newlib_search_path " $absdir" # Link against this library test no = "$link_static" && newdependency_libs="$abs_ladir/$laname $newdependency_libs" # ... and its dependency_libs tmp_libs= for deplib in $dependency_libs; do newdependency_libs="$deplib $newdependency_libs" case $deplib in -L*) func_stripname '-L' '' "$deplib" func_resolve_sysroot "$func_stripname_result";; *) func_resolve_sysroot "$deplib" ;; esac if $opt_preserve_dup_deps; then case "$tmp_libs " in *" $func_resolve_sysroot_result "*) func_append specialdeplibs " $func_resolve_sysroot_result" ;; esac fi func_append tmp_libs " $func_resolve_sysroot_result" done if test no != "$link_all_deplibs"; then # Add the search paths of all dependency libraries for deplib in $dependency_libs; do path= case $deplib in -L*) path=$deplib ;; *.la) func_resolve_sysroot "$deplib" deplib=$func_resolve_sysroot_result func_dirname "$deplib" "" "." dir=$func_dirname_result # We need an absolute path. case $dir in [\\/]* | [A-Za-z]:[\\/]*) absdir=$dir ;; *) absdir=`cd "$dir" && pwd` if test -z "$absdir"; then func_warning "cannot determine absolute directory name of '$dir'" absdir=$dir fi ;; esac if $GREP "^installed=no" $deplib > /dev/null; then case $host in *-*-darwin*) depdepl= eval deplibrary_names=`$SED -n -e 's/^library_names=\(.*\)$/\1/p' $deplib` if test -n "$deplibrary_names"; then for tmp in $deplibrary_names; do depdepl=$tmp done if test -f "$absdir/$objdir/$depdepl"; then depdepl=$absdir/$objdir/$depdepl darwin_install_name=`$OTOOL -L $depdepl | awk '{if (NR == 2) {print $1;exit}}'` if test -z "$darwin_install_name"; then darwin_install_name=`$OTOOL64 -L $depdepl | awk '{if (NR == 2) {print $1;exit}}'` fi func_append compiler_flags " $wl-dylib_file $wl$darwin_install_name:$depdepl" func_append linker_flags " -dylib_file $darwin_install_name:$depdepl" path= fi fi ;; *) path=-L$absdir/$objdir ;; esac else eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $deplib` test -z "$libdir" && \ func_fatal_error "'$deplib' is not a valid libtool archive" test "$absdir" != "$libdir" && \ func_warning "'$deplib' seems to be moved" path=-L$absdir fi ;; esac case " $deplibs " in *" $path "*) ;; *) deplibs="$path $deplibs" ;; esac done fi # link_all_deplibs != no fi # linkmode = lib done # for deplib in $libs if test link = "$pass"; then if test prog = "$linkmode"; then compile_deplibs="$new_inherited_linker_flags $compile_deplibs" finalize_deplibs="$new_inherited_linker_flags $finalize_deplibs" else compiler_flags="$compiler_flags "`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` fi fi dependency_libs=$newdependency_libs if test dlpreopen = "$pass"; then # Link the dlpreopened libraries before other libraries for deplib in $save_deplibs; do deplibs="$deplib $deplibs" done fi if test dlopen != "$pass"; then test conv = "$pass" || { # Make sure lib_search_path contains only unique directories. lib_search_path= for dir in $newlib_search_path; do case "$lib_search_path " in *" $dir "*) ;; *) func_append lib_search_path " $dir" ;; esac done newlib_search_path= } if test prog,link = "$linkmode,$pass"; then vars="compile_deplibs finalize_deplibs" else vars=deplibs fi for var in $vars dependency_libs; do # Add libraries to $var in reverse order eval tmp_libs=\"\$$var\" new_libs= for deplib in $tmp_libs; do # FIXME: Pedantically, this is the right thing to do, so # that some nasty dependency loop isn't accidentally # broken: #new_libs="$deplib $new_libs" # Pragmatically, this seems to cause very few problems in # practice: case $deplib in -L*) new_libs="$deplib $new_libs" ;; -R*) ;; *) # And here is the reason: when a library appears more # than once as an explicit dependence of a library, or # is implicitly linked in more than once by the # compiler, it is considered special, and multiple # occurrences thereof are not removed. Compare this # with having the same library being listed as a # dependency of multiple other libraries: in this case, # we know (pedantically, we assume) the library does not # need to be listed more than once, so we keep only the # last copy. This is not always right, but it is rare # enough that we require users that really mean to play # such unportable linking tricks to link the library # using -Wl,-lname, so that libtool does not consider it # for duplicate removal. case " $specialdeplibs " in *" $deplib "*) new_libs="$deplib $new_libs" ;; *) case " $new_libs " in *" $deplib "*) ;; *) new_libs="$deplib $new_libs" ;; esac ;; esac ;; esac done tmp_libs= for deplib in $new_libs; do case $deplib in -L*) case " $tmp_libs " in *" $deplib "*) ;; *) func_append tmp_libs " $deplib" ;; esac ;; *) func_append tmp_libs " $deplib" ;; esac done eval $var=\"$tmp_libs\" done # for var fi # Add Sun CC postdeps if required: test CXX = "$tagname" && { case $host_os in linux*) case `$CC -V 2>&1 | $SED 5q` in *Sun\ C*) # Sun C++ 5.9 func_suncc_cstd_abi if test no != "$suncc_use_cstd_abi"; then func_append postdeps ' -library=Cstd -library=Crun' fi ;; esac ;; solaris*) func_cc_basename "$CC" case $func_cc_basename_result in CC* | sunCC*) func_suncc_cstd_abi if test no != "$suncc_use_cstd_abi"; then func_append postdeps ' -library=Cstd -library=Crun' fi ;; esac ;; esac } # Last step: remove runtime libs from dependency_libs # (they stay in deplibs) tmp_libs= for i in $dependency_libs; do case " $predeps $postdeps $compiler_lib_search_path " in *" $i "*) i= ;; esac if test -n "$i"; then func_append tmp_libs " $i" fi done dependency_libs=$tmp_libs done # for pass if test prog = "$linkmode"; then dlfiles=$newdlfiles fi if test prog = "$linkmode" || test lib = "$linkmode"; then dlprefiles=$newdlprefiles fi case $linkmode in oldlib) if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then func_warning "'-dlopen' is ignored for archives" fi case " $deplibs" in *\ -l* | *\ -L*) func_warning "'-l' and '-L' are ignored for archives" ;; esac test -n "$rpath" && \ func_warning "'-rpath' is ignored for archives" test -n "$xrpath" && \ func_warning "'-R' is ignored for archives" test -n "$vinfo" && \ func_warning "'-version-info/-version-number' is ignored for archives" test -n "$release" && \ func_warning "'-release' is ignored for archives" test -n "$export_symbols$export_symbols_regex" && \ func_warning "'-export-symbols' is ignored for archives" # Now set the variables for building old libraries. build_libtool_libs=no oldlibs=$output func_append objs "$old_deplibs" ;; lib) # Make sure we only generate libraries of the form 'libNAME.la'. case $outputname in lib*) func_stripname 'lib' '.la' "$outputname" name=$func_stripname_result eval shared_ext=\"$shrext_cmds\" eval libname=\"$libname_spec\" ;; *) test no = "$module" \ && func_fatal_help "libtool library '$output' must begin with 'lib'" if test no != "$need_lib_prefix"; then # Add the "lib" prefix for modules if required func_stripname '' '.la' "$outputname" name=$func_stripname_result eval shared_ext=\"$shrext_cmds\" eval libname=\"$libname_spec\" else func_stripname '' '.la' "$outputname" libname=$func_stripname_result fi ;; esac if test -n "$objs"; then if test pass_all != "$deplibs_check_method"; then func_fatal_error "cannot build libtool library '$output' from non-libtool objects on this host:$objs" else echo $ECHO "*** Warning: Linking the shared library $output against the non-libtool" $ECHO "*** objects $objs is not portable!" func_append libobjs " $objs" fi fi test no = "$dlself" \ || func_warning "'-dlopen self' is ignored for libtool libraries" set dummy $rpath shift test 1 -lt "$#" \ && func_warning "ignoring multiple '-rpath's for a libtool library" install_libdir=$1 oldlibs= if test -z "$rpath"; then if test yes = "$build_libtool_libs"; then # Building a libtool convenience library. # Some compilers have problems with a '.al' extension so # convenience libraries should have the same extension an # archive normally would. oldlibs="$output_objdir/$libname.$libext $oldlibs" build_libtool_libs=convenience build_old_libs=yes fi test -n "$vinfo" && \ func_warning "'-version-info/-version-number' is ignored for convenience libraries" test -n "$release" && \ func_warning "'-release' is ignored for convenience libraries" else # Parse the version information argument. save_ifs=$IFS; IFS=: set dummy $vinfo 0 0 0 shift IFS=$save_ifs test -n "$7" && \ func_fatal_help "too many parameters to '-version-info'" # convert absolute version numbers to libtool ages # this retains compatibility with .la files and attempts # to make the code below a bit more comprehensible case $vinfo_number in yes) number_major=$1 number_minor=$2 number_revision=$3 # # There are really only two kinds -- those that # use the current revision as the major version # and those that subtract age and use age as # a minor version. But, then there is irix # that has an extra 1 added just for fun # case $version_type in # correct linux to gnu/linux during the next big refactor darwin|freebsd-elf|linux|midnightbsd-elf|osf|windows|none) func_arith $number_major + $number_minor current=$func_arith_result age=$number_minor revision=$number_revision ;; freebsd-aout|qnx|sunos) current=$number_major revision=$number_minor age=0 ;; irix|nonstopux) func_arith $number_major + $number_minor current=$func_arith_result age=$number_minor revision=$number_minor lt_irix_increment=no ;; esac ;; no) current=$1 revision=$2 age=$3 ;; esac # Check that each of the things are valid numbers. case $current in 0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;; *) func_error "CURRENT '$current' must be a nonnegative integer" func_fatal_error "'$vinfo' is not valid version information" ;; esac case $revision in 0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;; *) func_error "REVISION '$revision' must be a nonnegative integer" func_fatal_error "'$vinfo' is not valid version information" ;; esac case $age in 0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;; *) func_error "AGE '$age' must be a nonnegative integer" func_fatal_error "'$vinfo' is not valid version information" ;; esac if test "$age" -gt "$current"; then func_error "AGE '$age' is greater than the current interface number '$current'" func_fatal_error "'$vinfo' is not valid version information" fi # Calculate the version variables. major= versuffix= verstring= case $version_type in none) ;; darwin) # Like Linux, but with the current version available in # verstring for coding it into the library header func_arith $current - $age major=.$func_arith_result versuffix=$major.$age.$revision # Darwin ld doesn't like 0 for these options... func_arith $current + 1 minor_current=$func_arith_result xlcverstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision" verstring="-compatibility_version $minor_current -current_version $minor_current.$revision" # On Darwin other compilers case $CC in nagfor*) verstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision" ;; *) verstring="-compatibility_version $minor_current -current_version $minor_current.$revision" ;; esac ;; freebsd-aout) major=.$current versuffix=.$current.$revision ;; freebsd-elf | midnightbsd-elf) func_arith $current - $age major=.$func_arith_result versuffix=$major.$age.$revision ;; irix | nonstopux) if test no = "$lt_irix_increment"; then func_arith $current - $age else func_arith $current - $age + 1 fi major=$func_arith_result case $version_type in nonstopux) verstring_prefix=nonstopux ;; *) verstring_prefix=sgi ;; esac verstring=$verstring_prefix$major.$revision # Add in all the interfaces that we are compatible with. loop=$revision while test 0 -ne "$loop"; do func_arith $revision - $loop iface=$func_arith_result func_arith $loop - 1 loop=$func_arith_result verstring=$verstring_prefix$major.$iface:$verstring done # Before this point, $major must not contain '.'. major=.$major versuffix=$major.$revision ;; linux) # correct to gnu/linux during the next big refactor func_arith $current - $age major=.$func_arith_result versuffix=$major.$age.$revision ;; osf) func_arith $current - $age major=.$func_arith_result versuffix=.$current.$age.$revision verstring=$current.$age.$revision # Add in all the interfaces that we are compatible with. loop=$age while test 0 -ne "$loop"; do func_arith $current - $loop iface=$func_arith_result func_arith $loop - 1 loop=$func_arith_result verstring=$verstring:$iface.0 done # Make executables depend on our current version. func_append verstring ":$current.0" ;; qnx) major=.$current versuffix=.$current ;; sco) major=.$current versuffix=.$current ;; sunos) major=.$current versuffix=.$current.$revision ;; windows) # Use '-' rather than '.', since we only want one # extension on DOS 8.3 file systems. func_arith $current - $age major=$func_arith_result versuffix=-$major ;; *) func_fatal_configuration "unknown library version type '$version_type'" ;; esac # Clear the version info if we defaulted, and they specified a release. if test -z "$vinfo" && test -n "$release"; then major= case $version_type in darwin) # we can't check for "0.0" in archive_cmds due to quoting # problems, so we reset it completely verstring= ;; *) verstring=0.0 ;; esac if test no = "$need_version"; then versuffix= else versuffix=.0.0 fi fi # Remove version info from name if versioning should be avoided if test yes,no = "$avoid_version,$need_version"; then major= versuffix= verstring= fi # Check to see if the archive will have undefined symbols. if test yes = "$allow_undefined"; then if test unsupported = "$allow_undefined_flag"; then if test yes = "$build_old_libs"; then func_warning "undefined symbols not allowed in $host shared libraries; building static only" build_libtool_libs=no else func_fatal_error "can't build $host shared library unless -no-undefined is specified" fi fi else # Don't allow undefined symbols. allow_undefined_flag=$no_undefined_flag fi fi func_generate_dlsyms "$libname" "$libname" : func_append libobjs " $symfileobj" test " " = "$libobjs" && libobjs= if test relink != "$opt_mode"; then # Remove our outputs, but don't remove object files since they # may have been created when compiling PIC objects. removelist= tempremovelist=`$ECHO "$output_objdir/*"` for p in $tempremovelist; do case $p in *.$objext | *.gcno) ;; $output_objdir/$outputname | $output_objdir/$libname.* | $output_objdir/$libname$release.*) if test -n "$precious_files_regex"; then if $ECHO "$p" | $EGREP -e "$precious_files_regex" >/dev/null 2>&1 then continue fi fi func_append removelist " $p" ;; *) ;; esac done test -n "$removelist" && \ func_show_eval "${RM}r \$removelist" fi # Now set the variables for building old libraries. if test yes = "$build_old_libs" && test convenience != "$build_libtool_libs"; then func_append oldlibs " $output_objdir/$libname.$libext" # Transform .lo files to .o files. oldobjs="$objs "`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; $lo2o" | $NL2SP` fi # Eliminate all temporary directories. #for path in $notinst_path; do # lib_search_path=`$ECHO "$lib_search_path " | $SED "s% $path % %g"` # deplibs=`$ECHO "$deplibs " | $SED "s% -L$path % %g"` # dependency_libs=`$ECHO "$dependency_libs " | $SED "s% -L$path % %g"` #done if test -n "$xrpath"; then # If the user specified any rpath flags, then add them. temp_xrpath= for libdir in $xrpath; do func_replace_sysroot "$libdir" func_append temp_xrpath " -R$func_replace_sysroot_result" case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac done if test yes != "$hardcode_into_libs" || test yes = "$build_old_libs"; then dependency_libs="$temp_xrpath $dependency_libs" fi fi # Make sure dlfiles contains only unique files that won't be dlpreopened old_dlfiles=$dlfiles dlfiles= for lib in $old_dlfiles; do case " $dlprefiles $dlfiles " in *" $lib "*) ;; *) func_append dlfiles " $lib" ;; esac done # Make sure dlprefiles contains only unique files old_dlprefiles=$dlprefiles dlprefiles= for lib in $old_dlprefiles; do case "$dlprefiles " in *" $lib "*) ;; *) func_append dlprefiles " $lib" ;; esac done if test yes = "$build_libtool_libs"; then if test -n "$rpath"; then case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-*-beos* | *-cegcc* | *-*-haiku*) # these systems don't actually have a c library (as such)! ;; *-*-rhapsody* | *-*-darwin1.[012]) # Rhapsody C library is in the System framework func_append deplibs " System.ltframework" ;; *-*-netbsd*) # Don't link with libc until the a.out ld.so is fixed. ;; *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-midnightbsd*) # Do not include libc due to us having libc/libc_r. ;; *-*-sco3.2v5* | *-*-sco5v6*) # Causes problems with __ctype ;; *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*) # Compiler inserts libc in the correct place for threads to work ;; *) # Add libc to deplibs on all other systems if necessary. if test yes = "$build_libtool_need_lc"; then func_append deplibs " -lc" fi ;; esac fi # Transform deplibs into only deplibs that can be linked in shared. name_save=$name libname_save=$libname release_save=$release versuffix_save=$versuffix major_save=$major # I'm not sure if I'm treating the release correctly. I think # release should show up in the -l (ie -lgmp5) so we don't want to # add it in twice. Is that correct? release= versuffix= major= newdeplibs= droppeddeps=no case $deplibs_check_method in pass_all) # Don't check for shared/static. Everything works. # This might be a little naive. We might want to check # whether the library exists or not. But this is on # osf3 & osf4 and I'm not really sure... Just # implementing what was already the behavior. newdeplibs=$deplibs ;; test_compile) # This code stresses the "libraries are programs" paradigm to its # limits. Maybe even breaks it. We compile a program, linking it # against the deplibs as a proxy for the library. Then we can check # whether they linked in statically or dynamically with ldd. $opt_dry_run || $RM conftest.c cat > conftest.c </dev/null` $nocaseglob else potential_libs=`ls $i/$libnameglob[.-]* 2>/dev/null` fi for potent_lib in $potential_libs; do # Follow soft links. if ls -lLd "$potent_lib" 2>/dev/null | $GREP " -> " >/dev/null; then continue fi # The statement above tries to avoid entering an # endless loop below, in case of cyclic links. # We might still enter an endless loop, since a link # loop can be closed while we follow links, # but so what? potlib=$potent_lib while test -h "$potlib" 2>/dev/null; do potliblink=`ls -ld $potlib | $SED 's/.* -> //'` case $potliblink in [\\/]* | [A-Za-z]:[\\/]*) potlib=$potliblink;; *) potlib=`$ECHO "$potlib" | $SED 's|[^/]*$||'`"$potliblink";; esac done if eval $file_magic_cmd \"\$potlib\" 2>/dev/null | $SED -e 10q | $EGREP "$file_magic_regex" > /dev/null; then func_append newdeplibs " $a_deplib" a_deplib= break 2 fi done done fi if test -n "$a_deplib"; then droppeddeps=yes echo $ECHO "*** Warning: linker path does not have real file for library $a_deplib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have" echo "*** because I did check the linker path looking for a file starting" if test -z "$potlib"; then $ECHO "*** with $libname but no candidates were found. (...for file magic test)" else $ECHO "*** with $libname and none of the candidates passed a file format test" $ECHO "*** using a file magic. Last file checked: $potlib" fi fi ;; *) # Add a -L argument. func_append newdeplibs " $a_deplib" ;; esac done # Gone through all deplibs. ;; match_pattern*) set dummy $deplibs_check_method; shift match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"` for a_deplib in $deplibs; do case $a_deplib in -l*) func_stripname -l '' "$a_deplib" name=$func_stripname_result if test yes = "$allow_libtool_libs_with_static_runtimes"; then case " $predeps $postdeps " in *" $a_deplib "*) func_append newdeplibs " $a_deplib" a_deplib= ;; esac fi if test -n "$a_deplib"; then libname=`eval "\\$ECHO \"$libname_spec\""` for i in $lib_search_path $sys_lib_search_path $shlib_search_path; do potential_libs=`ls $i/$libname[.-]* 2>/dev/null` for potent_lib in $potential_libs; do potlib=$potent_lib # see symlink-check above in file_magic test if eval "\$ECHO \"$potent_lib\"" 2>/dev/null | $SED 10q | \ $EGREP "$match_pattern_regex" > /dev/null; then func_append newdeplibs " $a_deplib" a_deplib= break 2 fi done done fi if test -n "$a_deplib"; then droppeddeps=yes echo $ECHO "*** Warning: linker path does not have real file for library $a_deplib." echo "*** I have the capability to make that library automatically link in when" echo "*** you link to this library. But I can only do this if you have a" echo "*** shared version of the library, which you do not appear to have" echo "*** because I did check the linker path looking for a file starting" if test -z "$potlib"; then $ECHO "*** with $libname but no candidates were found. (...for regex pattern test)" else $ECHO "*** with $libname and none of the candidates passed a file format test" $ECHO "*** using a regex pattern. Last file checked: $potlib" fi fi ;; *) # Add a -L argument. func_append newdeplibs " $a_deplib" ;; esac done # Gone through all deplibs. ;; none | unknown | *) newdeplibs= tmp_deplibs=`$ECHO " $deplibs" | $SED 's/ -lc$//; s/ -[LR][^ ]*//g'` if test yes = "$allow_libtool_libs_with_static_runtimes"; then for i in $predeps $postdeps; do # can't use Xsed below, because $i might contain '/' tmp_deplibs=`$ECHO " $tmp_deplibs" | $SED "s|$i||"` done fi case $tmp_deplibs in *[!\ \ ]*) echo if test none = "$deplibs_check_method"; then echo "*** Warning: inter-library dependencies are not supported in this platform." else echo "*** Warning: inter-library dependencies are not known to be supported." fi echo "*** All declared inter-library dependencies are being dropped." droppeddeps=yes ;; esac ;; esac versuffix=$versuffix_save major=$major_save release=$release_save libname=$libname_save name=$name_save case $host in *-*-rhapsody* | *-*-darwin1.[012]) # On Rhapsody replace the C library with the System framework newdeplibs=`$ECHO " $newdeplibs" | $SED 's/ -lc / System.ltframework /'` ;; esac if test yes = "$droppeddeps"; then if test yes = "$module"; then echo echo "*** Warning: libtool could not satisfy all declared inter-library" $ECHO "*** dependencies of module $libname. Therefore, libtool will create" echo "*** a static module, that should work as long as the dlopening" echo "*** application is linked with the -dlopen flag." if test -z "$global_symbol_pipe"; then echo echo "*** However, this would only work if libtool was able to extract symbol" echo "*** lists from a program, using 'nm' or equivalent, but libtool could" echo "*** not find such a program. So, this module is probably useless." echo "*** 'nm' from GNU binutils and a full rebuild may help." fi if test no = "$build_old_libs"; then oldlibs=$output_objdir/$libname.$libext build_libtool_libs=module build_old_libs=yes else build_libtool_libs=no fi else echo "*** The inter-library dependencies that have been dropped here will be" echo "*** automatically added whenever a program is linked with this library" echo "*** or is declared to -dlopen it." if test no = "$allow_undefined"; then echo echo "*** Since this library must not contain undefined symbols," echo "*** because either the platform does not support them or" echo "*** it was explicitly requested with -no-undefined," echo "*** libtool will only create a static version of it." if test no = "$build_old_libs"; then oldlibs=$output_objdir/$libname.$libext build_libtool_libs=module build_old_libs=yes else build_libtool_libs=no fi fi fi fi # Done checking deplibs! deplibs=$newdeplibs fi # Time to change all our "foo.ltframework" stuff back to "-framework foo" case $host in *-*-darwin*) newdeplibs=`$ECHO " $newdeplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` new_inherited_linker_flags=`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` deplibs=`$ECHO " $deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` ;; esac # move library search paths that coincide with paths to not yet # installed libraries to the beginning of the library search list new_libs= for path in $notinst_path; do case " $new_libs " in *" -L$path/$objdir "*) ;; *) case " $deplibs " in *" -L$path/$objdir "*) func_append new_libs " -L$path/$objdir" ;; esac ;; esac done for deplib in $deplibs; do case $deplib in -L*) case " $new_libs " in *" $deplib "*) ;; *) func_append new_libs " $deplib" ;; esac ;; *) func_append new_libs " $deplib" ;; esac done deplibs=$new_libs # All the library-specific variables (install_libdir is set above). library_names= old_library= dlname= # Test again, we may have decided not to build it any more if test yes = "$build_libtool_libs"; then # Remove $wl instances when linking with ld. # FIXME: should test the right _cmds variable. case $archive_cmds in *\$LD\ *) wl= ;; esac if test yes = "$hardcode_into_libs"; then # Hardcode the library paths hardcode_libdirs= dep_rpath= rpath=$finalize_rpath test relink = "$opt_mode" || rpath=$compile_rpath$rpath for libdir in $rpath; do if test -n "$hardcode_libdir_flag_spec"; then if test -n "$hardcode_libdir_separator"; then func_replace_sysroot "$libdir" libdir=$func_replace_sysroot_result if test -z "$hardcode_libdirs"; then hardcode_libdirs=$libdir else # Just accumulate the unique libdirs. case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*) ;; *) func_append hardcode_libdirs "$hardcode_libdir_separator$libdir" ;; esac fi else eval flag=\"$hardcode_libdir_flag_spec\" func_append dep_rpath " $flag" fi elif test -n "$runpath_var"; then case "$perm_rpath " in *" $libdir "*) ;; *) func_append perm_rpath " $libdir" ;; esac fi done # Substitute the hardcoded libdirs into the rpath. if test -n "$hardcode_libdir_separator" && test -n "$hardcode_libdirs"; then libdir=$hardcode_libdirs eval "dep_rpath=\"$hardcode_libdir_flag_spec\"" fi if test -n "$runpath_var" && test -n "$perm_rpath"; then # We should set the runpath_var. rpath= for dir in $perm_rpath; do func_append rpath "$dir:" done eval "$runpath_var='$rpath\$$runpath_var'; export $runpath_var" fi test -n "$dep_rpath" && deplibs="$dep_rpath $deplibs" fi shlibpath=$finalize_shlibpath test relink = "$opt_mode" || shlibpath=$compile_shlibpath$shlibpath if test -n "$shlibpath"; then eval "$shlibpath_var='$shlibpath\$$shlibpath_var'; export $shlibpath_var" fi # Get the real and link names of the library. eval shared_ext=\"$shrext_cmds\" eval library_names=\"$library_names_spec\" set dummy $library_names shift realname=$1 shift if test -n "$soname_spec"; then eval soname=\"$soname_spec\" else soname=$realname fi if test -z "$dlname"; then dlname=$soname fi lib=$output_objdir/$realname linknames= for link do func_append linknames " $link" done # Use standard objects if they are pic test -z "$pic_flag" && libobjs=`$ECHO "$libobjs" | $SP2NL | $SED "$lo2o" | $NL2SP` test "X$libobjs" = "X " && libobjs= delfiles= if test -n "$export_symbols" && test -n "$include_expsyms"; then $opt_dry_run || cp "$export_symbols" "$output_objdir/$libname.uexp" export_symbols=$output_objdir/$libname.uexp func_append delfiles " $export_symbols" fi orig_export_symbols= case $host_os in cygwin* | mingw* | cegcc*) if test -n "$export_symbols" && test -z "$export_symbols_regex"; then # exporting using user supplied symfile func_dll_def_p "$export_symbols" || { # and it's NOT already a .def file. Must figure out # which of the given symbols are data symbols and tag # them as such. So, trigger use of export_symbols_cmds. # export_symbols gets reassigned inside the "prepare # the list of exported symbols" if statement, so the # include_expsyms logic still works. orig_export_symbols=$export_symbols export_symbols= always_export_symbols=yes } fi ;; esac # Prepare the list of exported symbols if test -z "$export_symbols"; then if test yes = "$always_export_symbols" || test -n "$export_symbols_regex"; then func_verbose "generating symbol list for '$libname.la'" export_symbols=$output_objdir/$libname.exp $opt_dry_run || $RM $export_symbols cmds=$export_symbols_cmds save_ifs=$IFS; IFS='~' for cmd1 in $cmds; do IFS=$save_ifs # Take the normal branch if the nm_file_list_spec branch # doesn't work or if tool conversion is not needed. case $nm_file_list_spec~$to_tool_file_cmd in *~func_convert_file_noop | *~func_convert_file_msys_to_w32 | ~*) try_normal_branch=yes eval cmd=\"$cmd1\" func_len " $cmd" len=$func_len_result ;; *) try_normal_branch=no ;; esac if test yes = "$try_normal_branch" \ && { test "$len" -lt "$max_cmd_len" \ || test "$max_cmd_len" -le -1; } then func_show_eval "$cmd" 'exit $?' skipped_export=false elif test -n "$nm_file_list_spec"; then func_basename "$output" output_la=$func_basename_result save_libobjs=$libobjs save_output=$output output=$output_objdir/$output_la.nm func_to_tool_file "$output" libobjs=$nm_file_list_spec$func_to_tool_file_result func_append delfiles " $output" func_verbose "creating $NM input file list: $output" for obj in $save_libobjs; do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" done > "$output" eval cmd=\"$cmd1\" func_show_eval "$cmd" 'exit $?' output=$save_output libobjs=$save_libobjs skipped_export=false else # The command line is too long to execute in one step. func_verbose "using reloadable object file for export list..." skipped_export=: # Break out early, otherwise skipped_export may be # set to false by a later but shorter cmd. break fi done IFS=$save_ifs if test -n "$export_symbols_regex" && test : != "$skipped_export"; then func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"' func_show_eval '$MV "${export_symbols}T" "$export_symbols"' fi fi fi if test -n "$export_symbols" && test -n "$include_expsyms"; then tmp_export_symbols=$export_symbols test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"' fi if test : != "$skipped_export" && test -n "$orig_export_symbols"; then # The given exports_symbols file has to be filtered, so filter it. func_verbose "filter symbol list for '$libname.la' to tag DATA exports" # FIXME: $output_objdir/$libname.filter potentially contains lots of # 's' commands, which not all seds can handle. GNU sed should be fine # though. Also, the filter scales superlinearly with the number of # global variables. join(1) would be nice here, but unfortunately # isn't a blessed tool. $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter func_append delfiles " $export_symbols $output_objdir/$libname.filter" export_symbols=$output_objdir/$libname.def $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols fi tmp_deplibs= for test_deplib in $deplibs; do case " $convenience " in *" $test_deplib "*) ;; *) func_append tmp_deplibs " $test_deplib" ;; esac done deplibs=$tmp_deplibs if test -n "$convenience"; then if test -n "$whole_archive_flag_spec" && test yes = "$compiler_needs_object" && test -z "$libobjs"; then # extract the archives, so we have objects to list. # TODO: could optimize this to just extract one archive. whole_archive_flag_spec= fi if test -n "$whole_archive_flag_spec"; then save_libobjs=$libobjs eval libobjs=\"\$libobjs $whole_archive_flag_spec\" test "X$libobjs" = "X " && libobjs= else gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $convenience func_append libobjs " $func_extract_archives_result" test "X$libobjs" = "X " && libobjs= fi fi if test yes = "$thread_safe" && test -n "$thread_safe_flag_spec"; then eval flag=\"$thread_safe_flag_spec\" func_append linker_flags " $flag" fi # Make a backup of the uninstalled library when relinking if test relink = "$opt_mode"; then $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}U && $MV $realname ${realname}U)' || exit $? fi # Do each of the archive commands. if test yes = "$module" && test -n "$module_cmds"; then if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then eval test_cmds=\"$module_expsym_cmds\" cmds=$module_expsym_cmds else eval test_cmds=\"$module_cmds\" cmds=$module_cmds fi else if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then eval test_cmds=\"$archive_expsym_cmds\" cmds=$archive_expsym_cmds else eval test_cmds=\"$archive_cmds\" cmds=$archive_cmds fi fi if test : != "$skipped_export" && func_len " $test_cmds" && len=$func_len_result && test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then : else # The command line is too long to link in one step, link piecewise # or, if using GNU ld and skipped_export is not :, use a linker # script. # Save the value of $output and $libobjs because we want to # use them later. If we have whole_archive_flag_spec, we # want to use save_libobjs as it was before # whole_archive_flag_spec was expanded, because we can't # assume the linker understands whole_archive_flag_spec. # This may have to be revisited, in case too many # convenience libraries get linked in and end up exceeding # the spec. if test -z "$convenience" || test -z "$whole_archive_flag_spec"; then save_libobjs=$libobjs fi save_output=$output func_basename "$output" output_la=$func_basename_result # Clear the reloadable object creation command queue and # initialize k to one. test_cmds= concat_cmds= objlist= last_robj= k=1 if test -n "$save_libobjs" && test : != "$skipped_export" && test yes = "$with_gnu_ld"; then output=$output_objdir/$output_la.lnkscript func_verbose "creating GNU ld script: $output" echo 'INPUT (' > $output for obj in $save_libobjs do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" >> $output done echo ')' >> $output func_append delfiles " $output" func_to_tool_file "$output" output=$func_to_tool_file_result elif test -n "$save_libobjs" && test : != "$skipped_export" && test -n "$file_list_spec"; then output=$output_objdir/$output_la.lnk func_verbose "creating linker input file list: $output" : > $output set x $save_libobjs shift firstobj= if test yes = "$compiler_needs_object"; then firstobj="$1 " shift fi for obj do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" >> $output done func_append delfiles " $output" func_to_tool_file "$output" output=$firstobj\"$file_list_spec$func_to_tool_file_result\" else if test -n "$save_libobjs"; then func_verbose "creating reloadable object files..." output=$output_objdir/$output_la-$k.$objext eval test_cmds=\"$reload_cmds\" func_len " $test_cmds" len0=$func_len_result len=$len0 # Loop over the list of objects to be linked. for obj in $save_libobjs do func_len " $obj" func_arith $len + $func_len_result len=$func_arith_result if test -z "$objlist" || test "$len" -lt "$max_cmd_len"; then func_append objlist " $obj" else # The command $test_cmds is almost too long, add a # command to the queue. if test 1 -eq "$k"; then # The first file doesn't have a previous command to add. reload_objs=$objlist eval concat_cmds=\"$reload_cmds\" else # All subsequent reloadable object files will link in # the last one created. reload_objs="$objlist $last_robj" eval concat_cmds=\"\$concat_cmds~$reload_cmds~\$RM $last_robj\" fi last_robj=$output_objdir/$output_la-$k.$objext func_arith $k + 1 k=$func_arith_result output=$output_objdir/$output_la-$k.$objext objlist=" $obj" func_len " $last_robj" func_arith $len0 + $func_len_result len=$func_arith_result fi done # Handle the remaining objects by creating one last # reloadable object file. All subsequent reloadable object # files will link in the last one created. test -z "$concat_cmds" || concat_cmds=$concat_cmds~ reload_objs="$objlist $last_robj" eval concat_cmds=\"\$concat_cmds$reload_cmds\" if test -n "$last_robj"; then eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\" fi func_append delfiles " $output" else output= fi ${skipped_export-false} && { func_verbose "generating symbol list for '$libname.la'" export_symbols=$output_objdir/$libname.exp $opt_dry_run || $RM $export_symbols libobjs=$output # Append the command to create the export file. test -z "$concat_cmds" || concat_cmds=$concat_cmds~ eval concat_cmds=\"\$concat_cmds$export_symbols_cmds\" if test -n "$last_robj"; then eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\" fi } test -n "$save_libobjs" && func_verbose "creating a temporary reloadable object file: $output" # Loop through the commands generated above and execute them. save_ifs=$IFS; IFS='~' for cmd in $concat_cmds; do IFS=$save_ifs $opt_quiet || { func_quote_arg expand,pretty "$cmd" eval "func_echo $func_quote_arg_result" } $opt_dry_run || eval "$cmd" || { lt_exit=$? # Restore the uninstalled library and exit if test relink = "$opt_mode"; then ( cd "$output_objdir" && \ $RM "${realname}T" && \ $MV "${realname}U" "$realname" ) fi exit $lt_exit } done IFS=$save_ifs if test -n "$export_symbols_regex" && ${skipped_export-false}; then func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"' func_show_eval '$MV "${export_symbols}T" "$export_symbols"' fi fi ${skipped_export-false} && { if test -n "$export_symbols" && test -n "$include_expsyms"; then tmp_export_symbols=$export_symbols test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"' fi if test -n "$orig_export_symbols"; then # The given exports_symbols file has to be filtered, so filter it. func_verbose "filter symbol list for '$libname.la' to tag DATA exports" # FIXME: $output_objdir/$libname.filter potentially contains lots of # 's' commands, which not all seds can handle. GNU sed should be fine # though. Also, the filter scales superlinearly with the number of # global variables. join(1) would be nice here, but unfortunately # isn't a blessed tool. $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter func_append delfiles " $export_symbols $output_objdir/$libname.filter" export_symbols=$output_objdir/$libname.def $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols fi } libobjs=$output # Restore the value of output. output=$save_output if test -n "$convenience" && test -n "$whole_archive_flag_spec"; then eval libobjs=\"\$libobjs $whole_archive_flag_spec\" test "X$libobjs" = "X " && libobjs= fi # Expand the library linking commands again to reset the # value of $libobjs for piecewise linking. # Do each of the archive commands. if test yes = "$module" && test -n "$module_cmds"; then if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then cmds=$module_expsym_cmds else cmds=$module_cmds fi else if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then cmds=$archive_expsym_cmds else cmds=$archive_cmds fi fi fi if test -n "$delfiles"; then # Append the command to remove temporary files to $cmds. eval cmds=\"\$cmds~\$RM $delfiles\" fi # Add any objects from preloaded convenience libraries if test -n "$dlprefiles"; then gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $dlprefiles func_append libobjs " $func_extract_archives_result" test "X$libobjs" = "X " && libobjs= fi save_ifs=$IFS; IFS='~' for cmd in $cmds; do IFS=$sp$nl eval cmd=\"$cmd\" IFS=$save_ifs $opt_quiet || { func_quote_arg expand,pretty "$cmd" eval "func_echo $func_quote_arg_result" } $opt_dry_run || eval "$cmd" || { lt_exit=$? # Restore the uninstalled library and exit if test relink = "$opt_mode"; then ( cd "$output_objdir" && \ $RM "${realname}T" && \ $MV "${realname}U" "$realname" ) fi exit $lt_exit } done IFS=$save_ifs # Restore the uninstalled library and exit if test relink = "$opt_mode"; then $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}T && $MV $realname ${realname}T && $MV ${realname}U $realname)' || exit $? if test -n "$convenience"; then if test -z "$whole_archive_flag_spec"; then func_show_eval '${RM}r "$gentop"' fi fi exit $EXIT_SUCCESS fi # Create links to the real library. for linkname in $linknames; do if test "$realname" != "$linkname"; then func_show_eval '(cd "$output_objdir" && $RM "$linkname" && $LN_S "$realname" "$linkname")' 'exit $?' fi done # If -module or -export-dynamic was specified, set the dlname. if test yes = "$module" || test yes = "$export_dynamic"; then # On all known operating systems, these are identical. dlname=$soname fi fi ;; obj) if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then func_warning "'-dlopen' is ignored for objects" fi case " $deplibs" in *\ -l* | *\ -L*) func_warning "'-l' and '-L' are ignored for objects" ;; esac test -n "$rpath" && \ func_warning "'-rpath' is ignored for objects" test -n "$xrpath" && \ func_warning "'-R' is ignored for objects" test -n "$vinfo" && \ func_warning "'-version-info' is ignored for objects" test -n "$release" && \ func_warning "'-release' is ignored for objects" case $output in *.lo) test -n "$objs$old_deplibs" && \ func_fatal_error "cannot build library object '$output' from non-libtool objects" libobj=$output func_lo2o "$libobj" obj=$func_lo2o_result ;; *) libobj= obj=$output ;; esac # Delete the old objects. $opt_dry_run || $RM $obj $libobj # Objects from convenience libraries. This assumes # single-version convenience libraries. Whenever we create # different ones for PIC/non-PIC, this we'll have to duplicate # the extraction. reload_conv_objs= gentop= # if reload_cmds runs $LD directly, get rid of -Wl from # whole_archive_flag_spec and hope we can get by with turning comma # into space. case $reload_cmds in *\$LD[\ \$]*) wl= ;; esac if test -n "$convenience"; then if test -n "$whole_archive_flag_spec"; then eval tmp_whole_archive_flags=\"$whole_archive_flag_spec\" test -n "$wl" || tmp_whole_archive_flags=`$ECHO "$tmp_whole_archive_flags" | $SED 's|,| |g'` reload_conv_objs=$reload_objs\ $tmp_whole_archive_flags else gentop=$output_objdir/${obj}x func_append generated " $gentop" func_extract_archives $gentop $convenience reload_conv_objs="$reload_objs $func_extract_archives_result" fi fi # If we're not building shared, we need to use non_pic_objs test yes = "$build_libtool_libs" || libobjs=$non_pic_objects # Create the old-style object. reload_objs=$objs$old_deplibs' '`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; /\.lib$/d; $lo2o" | $NL2SP`' '$reload_conv_objs output=$obj func_execute_cmds "$reload_cmds" 'exit $?' # Exit if we aren't doing a library object file. if test -z "$libobj"; then if test -n "$gentop"; then func_show_eval '${RM}r "$gentop"' fi exit $EXIT_SUCCESS fi test yes = "$build_libtool_libs" || { if test -n "$gentop"; then func_show_eval '${RM}r "$gentop"' fi # Create an invalid libtool object if no PIC, so that we don't # accidentally link it into a program. # $show "echo timestamp > $libobj" # $opt_dry_run || eval "echo timestamp > $libobj" || exit $? exit $EXIT_SUCCESS } if test -n "$pic_flag" || test default != "$pic_mode"; then # Only do commands if we really have different PIC objects. reload_objs="$libobjs $reload_conv_objs" output=$libobj func_execute_cmds "$reload_cmds" 'exit $?' fi if test -n "$gentop"; then func_show_eval '${RM}r "$gentop"' fi exit $EXIT_SUCCESS ;; prog) case $host in *cygwin*) func_stripname '' '.exe' "$output" output=$func_stripname_result.exe;; esac test -n "$vinfo" && \ func_warning "'-version-info' is ignored for programs" test -n "$release" && \ func_warning "'-release' is ignored for programs" $preload \ && test unknown,unknown,unknown = "$dlopen_support,$dlopen_self,$dlopen_self_static" \ && func_warning "'LT_INIT([dlopen])' not used. Assuming no dlopen support." case $host in *-*-rhapsody* | *-*-darwin1.[012]) # On Rhapsody replace the C library is the System framework compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's/ -lc / System.ltframework /'` finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's/ -lc / System.ltframework /'` ;; esac case $host in *-*-darwin*) # Don't allow lazy linking, it breaks C++ global constructors # But is supposedly fixed on 10.4 or later (yay!). if test CXX = "$tagname"; then case ${MACOSX_DEPLOYMENT_TARGET-10.0} in 10.[0123]) func_append compile_command " $wl-bind_at_load" func_append finalize_command " $wl-bind_at_load" ;; esac fi # Time to change all our "foo.ltframework" stuff back to "-framework foo" compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'` ;; esac # move library search paths that coincide with paths to not yet # installed libraries to the beginning of the library search list new_libs= for path in $notinst_path; do case " $new_libs " in *" -L$path/$objdir "*) ;; *) case " $compile_deplibs " in *" -L$path/$objdir "*) func_append new_libs " -L$path/$objdir" ;; esac ;; esac done for deplib in $compile_deplibs; do case $deplib in -L*) case " $new_libs " in *" $deplib "*) ;; *) func_append new_libs " $deplib" ;; esac ;; *) func_append new_libs " $deplib" ;; esac done compile_deplibs=$new_libs func_append compile_command " $compile_deplibs" func_append finalize_command " $finalize_deplibs" if test -n "$rpath$xrpath"; then # If the user specified any rpath flags, then add them. for libdir in $rpath $xrpath; do # This is the magic to use -rpath. case "$finalize_rpath " in *" $libdir "*) ;; *) func_append finalize_rpath " $libdir" ;; esac done fi # Now hardcode the library paths rpath= hardcode_libdirs= for libdir in $compile_rpath $finalize_rpath; do if test -n "$hardcode_libdir_flag_spec"; then if test -n "$hardcode_libdir_separator"; then if test -z "$hardcode_libdirs"; then hardcode_libdirs=$libdir else # Just accumulate the unique libdirs. case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*) ;; *) func_append hardcode_libdirs "$hardcode_libdir_separator$libdir" ;; esac fi else eval flag=\"$hardcode_libdir_flag_spec\" func_append rpath " $flag" fi elif test -n "$runpath_var"; then case "$perm_rpath " in *" $libdir "*) ;; *) func_append perm_rpath " $libdir" ;; esac fi case $host in *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*) testbindir=`$ECHO "$libdir" | $SED -e 's*/lib$*/bin*'` case :$dllsearchpath: in *":$libdir:"*) ;; ::) dllsearchpath=$libdir;; *) func_append dllsearchpath ":$libdir";; esac case :$dllsearchpath: in *":$testbindir:"*) ;; ::) dllsearchpath=$testbindir;; *) func_append dllsearchpath ":$testbindir";; esac ;; esac done # Substitute the hardcoded libdirs into the rpath. if test -n "$hardcode_libdir_separator" && test -n "$hardcode_libdirs"; then libdir=$hardcode_libdirs eval rpath=\" $hardcode_libdir_flag_spec\" fi compile_rpath=$rpath rpath= hardcode_libdirs= for libdir in $finalize_rpath; do if test -n "$hardcode_libdir_flag_spec"; then if test -n "$hardcode_libdir_separator"; then if test -z "$hardcode_libdirs"; then hardcode_libdirs=$libdir else # Just accumulate the unique libdirs. case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*) ;; *) func_append hardcode_libdirs "$hardcode_libdir_separator$libdir" ;; esac fi else eval flag=\"$hardcode_libdir_flag_spec\" func_append rpath " $flag" fi elif test -n "$runpath_var"; then case "$finalize_perm_rpath " in *" $libdir "*) ;; *) func_append finalize_perm_rpath " $libdir" ;; esac fi done # Substitute the hardcoded libdirs into the rpath. if test -n "$hardcode_libdir_separator" && test -n "$hardcode_libdirs"; then libdir=$hardcode_libdirs eval rpath=\" $hardcode_libdir_flag_spec\" fi finalize_rpath=$rpath if test -n "$libobjs" && test yes = "$build_old_libs"; then # Transform all the library objects into standard objects. compile_command=`$ECHO "$compile_command" | $SP2NL | $SED "$lo2o" | $NL2SP` finalize_command=`$ECHO "$finalize_command" | $SP2NL | $SED "$lo2o" | $NL2SP` fi func_generate_dlsyms "$outputname" "@PROGRAM@" false # template prelinking step if test -n "$prelink_cmds"; then func_execute_cmds "$prelink_cmds" 'exit $?' fi wrappers_required=: case $host in *cegcc* | *mingw32ce*) # Disable wrappers for cegcc and mingw32ce hosts, we are cross compiling anyway. wrappers_required=false ;; *cygwin* | *mingw* ) test yes = "$build_libtool_libs" || wrappers_required=false ;; *) if test no = "$need_relink" || test yes != "$build_libtool_libs"; then wrappers_required=false fi ;; esac $wrappers_required || { # Replace the output file specification. compile_command=`$ECHO "$compile_command" | $SED 's%@OUTPUT@%'"$output"'%g'` link_command=$compile_command$compile_rpath # We have no uninstalled library dependencies, so finalize right now. exit_status=0 func_show_eval "$link_command" 'exit_status=$?' if test -n "$postlink_cmds"; then func_to_tool_file "$output" postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'` func_execute_cmds "$postlink_cmds" 'exit $?' fi # Delete the generated files. if test -f "$output_objdir/${outputname}S.$objext"; then func_show_eval '$RM "$output_objdir/${outputname}S.$objext"' fi exit $exit_status } if test -n "$compile_shlibpath$finalize_shlibpath"; then compile_command="$shlibpath_var=\"$compile_shlibpath$finalize_shlibpath\$$shlibpath_var\" $compile_command" fi if test -n "$finalize_shlibpath"; then finalize_command="$shlibpath_var=\"$finalize_shlibpath\$$shlibpath_var\" $finalize_command" fi compile_var= finalize_var= if test -n "$runpath_var"; then if test -n "$perm_rpath"; then # We should set the runpath_var. rpath= for dir in $perm_rpath; do func_append rpath "$dir:" done compile_var="$runpath_var=\"$rpath\$$runpath_var\" " fi if test -n "$finalize_perm_rpath"; then # We should set the runpath_var. rpath= for dir in $finalize_perm_rpath; do func_append rpath "$dir:" done finalize_var="$runpath_var=\"$rpath\$$runpath_var\" " fi fi if test yes = "$no_install"; then # We don't need to create a wrapper script. link_command=$compile_var$compile_command$compile_rpath # Replace the output file specification. link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output"'%g'` # Delete the old output file. $opt_dry_run || $RM $output # Link the executable and exit func_show_eval "$link_command" 'exit $?' if test -n "$postlink_cmds"; then func_to_tool_file "$output" postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'` func_execute_cmds "$postlink_cmds" 'exit $?' fi exit $EXIT_SUCCESS fi case $hardcode_action,$fast_install in relink,*) # Fast installation is not supported link_command=$compile_var$compile_command$compile_rpath relink_command=$finalize_var$finalize_command$finalize_rpath func_warning "this platform does not like uninstalled shared libraries" func_warning "'$output' will be relinked during installation" ;; *,yes) link_command=$finalize_var$compile_command$finalize_rpath relink_command=`$ECHO "$compile_var$compile_command$compile_rpath" | $SED 's%@OUTPUT@%\$progdir/\$file%g'` ;; *,no) link_command=$compile_var$compile_command$compile_rpath relink_command=$finalize_var$finalize_command$finalize_rpath ;; *,needless) link_command=$finalize_var$compile_command$finalize_rpath relink_command= ;; esac # Replace the output file specification. link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output_objdir/$outputname"'%g'` # Delete the old output files. $opt_dry_run || $RM $output $output_objdir/$outputname $output_objdir/lt-$outputname func_show_eval "$link_command" 'exit $?' if test -n "$postlink_cmds"; then func_to_tool_file "$output_objdir/$outputname" postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output_objdir/$outputname"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'` func_execute_cmds "$postlink_cmds" 'exit $?' fi # Now create the wrapper script. func_verbose "creating $output" # Quote the relink command for shipping. if test -n "$relink_command"; then # Preserve any variables that may affect compiler behavior for var in $variables_saved_for_relink; do if eval test -z \"\${$var+set}\"; then relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command" elif eval var_value=\$$var; test -z "$var_value"; then relink_command="$var=; export $var; $relink_command" else func_quote_arg pretty "$var_value" relink_command="$var=$func_quote_arg_result; export $var; $relink_command" fi done func_quote eval cd "`pwd`" func_quote_arg pretty,unquoted "($func_quote_result; $relink_command)" relink_command=$func_quote_arg_unquoted_result fi # Only actually do things if not in dry run mode. $opt_dry_run || { # win32 will think the script is a binary if it has # a .exe suffix, so we strip it off here. case $output in *.exe) func_stripname '' '.exe' "$output" output=$func_stripname_result ;; esac # test for cygwin because mv fails w/o .exe extensions case $host in *cygwin*) exeext=.exe func_stripname '' '.exe' "$outputname" outputname=$func_stripname_result ;; *) exeext= ;; esac case $host in *cygwin* | *mingw* ) func_dirname_and_basename "$output" "" "." output_name=$func_basename_result output_path=$func_dirname_result cwrappersource=$output_path/$objdir/lt-$output_name.c cwrapper=$output_path/$output_name.exe $RM $cwrappersource $cwrapper trap "$RM $cwrappersource $cwrapper; exit $EXIT_FAILURE" 1 2 15 func_emit_cwrapperexe_src > $cwrappersource # The wrapper executable is built using the $host compiler, # because it contains $host paths and files. If cross- # compiling, it, like the target executable, must be # executed on the $host or under an emulation environment. $opt_dry_run || { $LTCC $LTCFLAGS -o $cwrapper $cwrappersource $STRIP $cwrapper } # Now, create the wrapper script for func_source use: func_ltwrapper_scriptname $cwrapper $RM $func_ltwrapper_scriptname_result trap "$RM $func_ltwrapper_scriptname_result; exit $EXIT_FAILURE" 1 2 15 $opt_dry_run || { # note: this script will not be executed, so do not chmod. if test "x$build" = "x$host"; then $cwrapper --lt-dump-script > $func_ltwrapper_scriptname_result else func_emit_wrapper no > $func_ltwrapper_scriptname_result fi } ;; * ) $RM $output trap "$RM $output; exit $EXIT_FAILURE" 1 2 15 func_emit_wrapper no > $output chmod +x $output ;; esac } exit $EXIT_SUCCESS ;; esac # See if we need to build an old-fashioned archive. for oldlib in $oldlibs; do case $build_libtool_libs in convenience) oldobjs="$libobjs_save $symfileobj" addlibs=$convenience build_libtool_libs=no ;; module) oldobjs=$libobjs_save addlibs=$old_convenience build_libtool_libs=no ;; *) oldobjs="$old_deplibs $non_pic_objects" $preload && test -f "$symfileobj" \ && func_append oldobjs " $symfileobj" addlibs=$old_convenience ;; esac if test -n "$addlibs"; then gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $addlibs func_append oldobjs " $func_extract_archives_result" fi # Do each command in the archive commands. if test -n "$old_archive_from_new_cmds" && test yes = "$build_libtool_libs"; then cmds=$old_archive_from_new_cmds else # Add any objects from preloaded convenience libraries if test -n "$dlprefiles"; then gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_extract_archives $gentop $dlprefiles func_append oldobjs " $func_extract_archives_result" fi # POSIX demands no paths to be encoded in archives. We have # to avoid creating archives with duplicate basenames if we # might have to extract them afterwards, e.g., when creating a # static archive out of a convenience library, or when linking # the entirety of a libtool archive into another (currently # not supported by libtool). if (for obj in $oldobjs do func_basename "$obj" $ECHO "$func_basename_result" done | sort | sort -uc >/dev/null 2>&1); then : else echo "copying selected object files to avoid basename conflicts..." gentop=$output_objdir/${outputname}x func_append generated " $gentop" func_mkdir_p "$gentop" save_oldobjs=$oldobjs oldobjs= counter=1 for obj in $save_oldobjs do func_basename "$obj" objbase=$func_basename_result case " $oldobjs " in " ") oldobjs=$obj ;; *[\ /]"$objbase "*) while :; do # Make sure we don't pick an alternate name that also # overlaps. newobj=lt$counter-$objbase func_arith $counter + 1 counter=$func_arith_result case " $oldobjs " in *[\ /]"$newobj "*) ;; *) if test ! -f "$gentop/$newobj"; then break; fi ;; esac done func_show_eval "ln $obj $gentop/$newobj || cp $obj $gentop/$newobj" func_append oldobjs " $gentop/$newobj" ;; *) func_append oldobjs " $obj" ;; esac done fi func_to_tool_file "$oldlib" func_convert_file_msys_to_w32 tool_oldlib=$func_to_tool_file_result eval cmds=\"$old_archive_cmds\" func_len " $cmds" len=$func_len_result if test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then cmds=$old_archive_cmds elif test -n "$archiver_list_spec"; then func_verbose "using command file archive linking..." for obj in $oldobjs do func_to_tool_file "$obj" $ECHO "$func_to_tool_file_result" done > $output_objdir/$libname.libcmd func_to_tool_file "$output_objdir/$libname.libcmd" oldobjs=" $archiver_list_spec$func_to_tool_file_result" cmds=$old_archive_cmds else # the command line is too long to link in one step, link in parts func_verbose "using piecewise archive linking..." save_RANLIB=$RANLIB RANLIB=: objlist= concat_cmds= save_oldobjs=$oldobjs oldobjs= # Is there a better way of finding the last object in the list? for obj in $save_oldobjs do last_oldobj=$obj done eval test_cmds=\"$old_archive_cmds\" func_len " $test_cmds" len0=$func_len_result len=$len0 for obj in $save_oldobjs do func_len " $obj" func_arith $len + $func_len_result len=$func_arith_result func_append objlist " $obj" if test "$len" -lt "$max_cmd_len"; then : else # the above command should be used before it gets too long oldobjs=$objlist if test "$obj" = "$last_oldobj"; then RANLIB=$save_RANLIB fi test -z "$concat_cmds" || concat_cmds=$concat_cmds~ eval concat_cmds=\"\$concat_cmds$old_archive_cmds\" objlist= len=$len0 fi done RANLIB=$save_RANLIB oldobjs=$objlist if test -z "$oldobjs"; then eval cmds=\"\$concat_cmds\" else eval cmds=\"\$concat_cmds~\$old_archive_cmds\" fi fi fi func_execute_cmds "$cmds" 'exit $?' done test -n "$generated" && \ func_show_eval "${RM}r$generated" # Now create the libtool archive. case $output in *.la) old_library= test yes = "$build_old_libs" && old_library=$libname.$libext func_verbose "creating $output" # Preserve any variables that may affect compiler behavior for var in $variables_saved_for_relink; do if eval test -z \"\${$var+set}\"; then relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command" elif eval var_value=\$$var; test -z "$var_value"; then relink_command="$var=; export $var; $relink_command" else func_quote_arg pretty,unquoted "$var_value" relink_command="$var=$func_quote_arg_unquoted_result; export $var; $relink_command" fi done # Quote the link command for shipping. func_quote eval cd "`pwd`" relink_command="($func_quote_result; $SHELL \"$progpath\" $preserve_args --mode=relink $libtool_args @inst_prefix_dir@)" func_quote_arg pretty,unquoted "$relink_command" relink_command=$func_quote_arg_unquoted_result if test yes = "$hardcode_automatic"; then relink_command= fi # Only create the output if not a dry run. $opt_dry_run || { for installed in no yes; do if test yes = "$installed"; then if test -z "$install_libdir"; then break fi output=$output_objdir/${outputname}i # Replace all uninstalled libtool libraries with the installed ones newdependency_libs= for deplib in $dependency_libs; do case $deplib in *.la) func_basename "$deplib" name=$func_basename_result func_resolve_sysroot "$deplib" eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $func_resolve_sysroot_result` test -z "$libdir" && \ func_fatal_error "'$deplib' is not a valid libtool archive" func_append newdependency_libs " ${lt_sysroot:+=}$libdir/$name" ;; -L*) func_stripname -L '' "$deplib" func_replace_sysroot "$func_stripname_result" func_append newdependency_libs " -L$func_replace_sysroot_result" ;; -R*) func_stripname -R '' "$deplib" func_replace_sysroot "$func_stripname_result" func_append newdependency_libs " -R$func_replace_sysroot_result" ;; *) func_append newdependency_libs " $deplib" ;; esac done dependency_libs=$newdependency_libs newdlfiles= for lib in $dlfiles; do case $lib in *.la) func_basename "$lib" name=$func_basename_result eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib` test -z "$libdir" && \ func_fatal_error "'$lib' is not a valid libtool archive" func_append newdlfiles " ${lt_sysroot:+=}$libdir/$name" ;; *) func_append newdlfiles " $lib" ;; esac done dlfiles=$newdlfiles newdlprefiles= for lib in $dlprefiles; do case $lib in *.la) # Only pass preopened files to the pseudo-archive (for # eventual linking with the app. that links it) if we # didn't already link the preopened objects directly into # the library: func_basename "$lib" name=$func_basename_result eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib` test -z "$libdir" && \ func_fatal_error "'$lib' is not a valid libtool archive" func_append newdlprefiles " ${lt_sysroot:+=}$libdir/$name" ;; esac done dlprefiles=$newdlprefiles else newdlfiles= for lib in $dlfiles; do case $lib in [\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;; *) abs=`pwd`"/$lib" ;; esac func_append newdlfiles " $abs" done dlfiles=$newdlfiles newdlprefiles= for lib in $dlprefiles; do case $lib in [\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;; *) abs=`pwd`"/$lib" ;; esac func_append newdlprefiles " $abs" done dlprefiles=$newdlprefiles fi $RM $output # place dlname in correct position for cygwin # In fact, it would be nice if we could use this code for all target # systems that can't hard-code library paths into their executables # and that have no shared library path variable independent of PATH, # but it turns out we can't easily determine that from inspecting # libtool variables, so we have to hard-code the OSs to which it # applies here; at the moment, that means platforms that use the PE # object format with DLL files. See the long comment at the top of # tests/bindir.at for full details. tdlname=$dlname case $host,$output,$installed,$module,$dlname in *cygwin*,*lai,yes,no,*.dll | *mingw*,*lai,yes,no,*.dll | *cegcc*,*lai,yes,no,*.dll) # If a -bindir argument was supplied, place the dll there. if test -n "$bindir"; then func_relative_path "$install_libdir" "$bindir" tdlname=$func_relative_path_result/$dlname else # Otherwise fall back on heuristic. tdlname=../bin/$dlname fi ;; esac $ECHO > $output "\ # $outputname - a libtool library file # Generated by $PROGRAM (GNU $PACKAGE) $VERSION # # Please DO NOT delete this file! # It is necessary for linking the library. # The name that we can dlopen(3). dlname='$tdlname' # Names of this library. library_names='$library_names' # The name of the static archive. old_library='$old_library' # Linker flags that cannot go in dependency_libs. inherited_linker_flags='$new_inherited_linker_flags' # Libraries that this one depends upon. dependency_libs='$dependency_libs' # Names of additional weak libraries provided by this library weak_library_names='$weak_libs' # Version information for $libname. current=$current age=$age revision=$revision # Is this an already installed library? installed=$installed # Should we warn about portability when linking against -modules? shouldnotlink=$module # Files to dlopen/dlpreopen dlopen='$dlfiles' dlpreopen='$dlprefiles' # Directory that this library needs to be installed in: libdir='$install_libdir'" if test no,yes = "$installed,$need_relink"; then $ECHO >> $output "\ relink_command=\"$relink_command\"" fi done } # Do a symbolic link so that the libtool archive can be found in # LD_LIBRARY_PATH before the program is installed. func_show_eval '( cd "$output_objdir" && $RM "$outputname" && $LN_S "../$outputname" "$outputname" )' 'exit $?' ;; esac exit $EXIT_SUCCESS } if test link = "$opt_mode" || test relink = "$opt_mode"; then func_mode_link ${1+"$@"} fi # func_mode_uninstall arg... func_mode_uninstall () { $debug_cmd RM=$nonopt files= rmforce=false exit_status=0 # This variable tells wrapper scripts just to set variables rather # than running their programs. libtool_install_magic=$magic for arg do case $arg in -f) func_append RM " $arg"; rmforce=: ;; -*) func_append RM " $arg" ;; *) func_append files " $arg" ;; esac done test -z "$RM" && \ func_fatal_help "you must specify an RM program" rmdirs= for file in $files; do func_dirname "$file" "" "." dir=$func_dirname_result if test . = "$dir"; then odir=$objdir else odir=$dir/$objdir fi func_basename "$file" name=$func_basename_result test uninstall = "$opt_mode" && odir=$dir # Remember odir for removal later, being careful to avoid duplicates if test clean = "$opt_mode"; then case " $rmdirs " in *" $odir "*) ;; *) func_append rmdirs " $odir" ;; esac fi # Don't error if the file doesn't exist and rm -f was used. if { test -L "$file"; } >/dev/null 2>&1 || { test -h "$file"; } >/dev/null 2>&1 || test -f "$file"; then : elif test -d "$file"; then exit_status=1 continue elif $rmforce; then continue fi rmfiles=$file case $name in *.la) # Possibly a libtool archive, so verify it. if func_lalib_p "$file"; then func_source $dir/$name # Delete the libtool libraries and symlinks. for n in $library_names; do func_append rmfiles " $odir/$n" done test -n "$old_library" && func_append rmfiles " $odir/$old_library" case $opt_mode in clean) case " $library_names " in *" $dlname "*) ;; *) test -n "$dlname" && func_append rmfiles " $odir/$dlname" ;; esac test -n "$libdir" && func_append rmfiles " $odir/$name $odir/${name}i" ;; uninstall) if test -n "$library_names"; then # Do each command in the postuninstall commands. func_execute_cmds "$postuninstall_cmds" '$rmforce || exit_status=1' fi if test -n "$old_library"; then # Do each command in the old_postuninstall commands. func_execute_cmds "$old_postuninstall_cmds" '$rmforce || exit_status=1' fi # FIXME: should reinstall the best remaining shared library. ;; esac fi ;; *.lo) # Possibly a libtool object, so verify it. if func_lalib_p "$file"; then # Read the .lo file func_source $dir/$name # Add PIC object to the list of files to remove. if test -n "$pic_object" && test none != "$pic_object"; then func_append rmfiles " $dir/$pic_object" fi # Add non-PIC object to the list of files to remove. if test -n "$non_pic_object" && test none != "$non_pic_object"; then func_append rmfiles " $dir/$non_pic_object" fi fi ;; *) if test clean = "$opt_mode"; then noexename=$name case $file in *.exe) func_stripname '' '.exe' "$file" file=$func_stripname_result func_stripname '' '.exe' "$name" noexename=$func_stripname_result # $file with .exe has already been added to rmfiles, # add $file without .exe func_append rmfiles " $file" ;; esac # Do a test to see if this is a libtool program. if func_ltwrapper_p "$file"; then if func_ltwrapper_executable_p "$file"; then func_ltwrapper_scriptname "$file" relink_command= func_source $func_ltwrapper_scriptname_result func_append rmfiles " $func_ltwrapper_scriptname_result" else relink_command= func_source $dir/$noexename fi # note $name still contains .exe if it was in $file originally # as does the version of $file that was added into $rmfiles func_append rmfiles " $odir/$name $odir/${name}S.$objext" if test yes = "$fast_install" && test -n "$relink_command"; then func_append rmfiles " $odir/lt-$name" fi if test "X$noexename" != "X$name"; then func_append rmfiles " $odir/lt-$noexename.c" fi fi fi ;; esac func_show_eval "$RM $rmfiles" 'exit_status=1' done # Try to remove the $objdir's in the directories where we deleted files for dir in $rmdirs; do if test -d "$dir"; then func_show_eval "rmdir $dir >/dev/null 2>&1" fi done exit $exit_status } if test uninstall = "$opt_mode" || test clean = "$opt_mode"; then func_mode_uninstall ${1+"$@"} fi test -z "$opt_mode" && { help=$generic_help func_fatal_help "you must specify a MODE" } test -z "$exec_cmd" && \ func_fatal_help "invalid operation mode '$opt_mode'" if test -n "$exec_cmd"; then eval exec "$exec_cmd" exit $EXIT_FAILURE fi exit $exit_status # The TAGs below are defined such that we never get into a situation # where we disable both kinds of libraries. Given conflicting # choices, we go for a static library, that is the most portable, # since we can't tell whether shared libraries were disabled because # the user asked for that or because the platform doesn't support # them. This is particularly important on AIX, because we don't # support having both static and shared libraries enabled at the same # time on that platform, so we default to a shared-only configuration. # If a disable-shared tag is given, we'll fallback to a static-only # configuration. But we'll never go from static-only to shared-only. # ### BEGIN LIBTOOL TAG CONFIG: disable-shared build_libtool_libs=no build_old_libs=yes # ### END LIBTOOL TAG CONFIG: disable-shared # ### BEGIN LIBTOOL TAG CONFIG: disable-static build_old_libs=`case $build_libtool_libs in yes) echo no;; *) echo yes;; esac` # ### END LIBTOOL TAG CONFIG: disable-static # Local Variables: # mode:shell-script # sh-indentation:2 # End: tpm2-pkcs11-1.9.1/missing0000755000175100017510000001533614072725711010604 #! /bin/sh # Common wrapper for a few potentially missing GNU programs. scriptversion=2018-03-07.03; # UTC # Copyright (C) 1996-2021 Free Software Foundation, Inc. # Originally written by Fran,cois Pinard , 1996. # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2, or (at your option) # any later version. # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # You should have received a copy of the GNU General Public License # along with this program. If not, see . # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. if test $# -eq 0; then echo 1>&2 "Try '$0 --help' for more information" exit 1 fi case $1 in --is-lightweight) # Used by our autoconf macros to check whether the available missing # script is modern enough. exit 0 ;; --run) # Back-compat with the calling convention used by older automake. shift ;; -h|--h|--he|--hel|--help) echo "\ $0 [OPTION]... PROGRAM [ARGUMENT]... Run 'PROGRAM [ARGUMENT]...', returning a proper advice when this fails due to PROGRAM being missing or too old. Options: -h, --help display this help and exit -v, --version output version information and exit Supported PROGRAM values: aclocal autoconf autoheader autom4te automake makeinfo bison yacc flex lex help2man Version suffixes to PROGRAM as well as the prefixes 'gnu-', 'gnu', and 'g' are ignored when checking the name. Send bug reports to ." exit $? ;; -v|--v|--ve|--ver|--vers|--versi|--versio|--version) echo "missing $scriptversion (GNU Automake)" exit $? ;; -*) echo 1>&2 "$0: unknown '$1' option" echo 1>&2 "Try '$0 --help' for more information" exit 1 ;; esac # Run the given program, remember its exit status. "$@"; st=$? # If it succeeded, we are done. test $st -eq 0 && exit 0 # Also exit now if we it failed (or wasn't found), and '--version' was # passed; such an option is passed most likely to detect whether the # program is present and works. case $2 in --version|--help) exit $st;; esac # Exit code 63 means version mismatch. This often happens when the user # tries to use an ancient version of a tool on a file that requires a # minimum version. if test $st -eq 63; then msg="probably too old" elif test $st -eq 127; then # Program was missing. msg="missing on your system" else # Program was found and executed, but failed. Give up. exit $st fi perl_URL=https://www.perl.org/ flex_URL=https://github.com/westes/flex gnu_software_URL=https://www.gnu.org/software program_details () { case $1 in aclocal|automake) echo "The '$1' program is part of the GNU Automake package:" echo "<$gnu_software_URL/automake>" echo "It also requires GNU Autoconf, GNU m4 and Perl in order to run:" echo "<$gnu_software_URL/autoconf>" echo "<$gnu_software_URL/m4/>" echo "<$perl_URL>" ;; autoconf|autom4te|autoheader) echo "The '$1' program is part of the GNU Autoconf package:" echo "<$gnu_software_URL/autoconf/>" echo "It also requires GNU m4 and Perl in order to run:" echo "<$gnu_software_URL/m4/>" echo "<$perl_URL>" ;; esac } give_advice () { # Normalize program name to check for. normalized_program=`echo "$1" | sed ' s/^gnu-//; t s/^gnu//; t s/^g//; t'` printf '%s\n' "'$1' is $msg." configure_deps="'configure.ac' or m4 files included by 'configure.ac'" case $normalized_program in autoconf*) echo "You should only need it if you modified 'configure.ac'," echo "or m4 files included by it." program_details 'autoconf' ;; autoheader*) echo "You should only need it if you modified 'acconfig.h' or" echo "$configure_deps." program_details 'autoheader' ;; automake*) echo "You should only need it if you modified 'Makefile.am' or" echo "$configure_deps." program_details 'automake' ;; aclocal*) echo "You should only need it if you modified 'acinclude.m4' or" echo "$configure_deps." program_details 'aclocal' ;; autom4te*) echo "You might have modified some maintainer files that require" echo "the 'autom4te' program to be rebuilt." program_details 'autom4te' ;; bison*|yacc*) echo "You should only need it if you modified a '.y' file." echo "You may want to install the GNU Bison package:" echo "<$gnu_software_URL/bison/>" ;; lex*|flex*) echo "You should only need it if you modified a '.l' file." echo "You may want to install the Fast Lexical Analyzer package:" echo "<$flex_URL>" ;; help2man*) echo "You should only need it if you modified a dependency" \ "of a man page." echo "You may want to install the GNU Help2man package:" echo "<$gnu_software_URL/help2man/>" ;; makeinfo*) echo "You should only need it if you modified a '.texi' file, or" echo "any other file indirectly affecting the aspect of the manual." echo "You might want to install the Texinfo package:" echo "<$gnu_software_URL/texinfo/>" echo "The spurious makeinfo call might also be the consequence of" echo "using a buggy 'make' (AIX, DU, IRIX), in which case you might" echo "want to install GNU make:" echo "<$gnu_software_URL/make/>" ;; *) echo "You might have modified some files without having the proper" echo "tools for further handling them. Check the 'README' file, it" echo "often tells you about the needed prerequisites for installing" echo "this package. You may also peek at any GNU archive site, in" echo "case some other package contains this missing '$1' program." ;; esac } give_advice "$1" | sed -e '1s/^/WARNING: /' \ -e '2,$s/^/ /' >&2 # Propagate the correct exit status (expected to be 127 for a program # not found, 63 for a program that failed due to version mismatch). exit $st # Local variables: # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "scriptversion=" # time-stamp-format: "%:y-%02m-%02d.%02H" # time-stamp-time-zone: "UTC0" # time-stamp-end: "; # UTC" # End: tpm2-pkcs11-1.9.1/test-driver0000755000175100017510000001141714072725711011377 #! /bin/sh # test-driver - basic testsuite driver script. scriptversion=2018-03-07.03; # UTC # Copyright (C) 2011-2021 Free Software Foundation, Inc. # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2, or (at your option) # any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . # As a special exception to the GNU General Public License, if you # distribute this file as part of a program that contains a # configuration script generated by Autoconf, you may include it under # the same distribution terms that you use for the rest of that program. # This file is maintained in Automake, please report # bugs to or send patches to # . # Make unconditional expansion of undefined variables an error. This # helps a lot in preventing typo-related bugs. set -u usage_error () { echo "$0: $*" >&2 print_usage >&2 exit 2 } print_usage () { cat <"$log_file" "$@" >>"$log_file" 2>&1 estatus=$? if test $enable_hard_errors = no && test $estatus -eq 99; then tweaked_estatus=1 else tweaked_estatus=$estatus fi case $tweaked_estatus:$expect_failure in 0:yes) col=$red res=XPASS recheck=yes gcopy=yes;; 0:*) col=$grn res=PASS recheck=no gcopy=no;; 77:*) col=$blu res=SKIP recheck=no gcopy=yes;; 99:*) col=$mgn res=ERROR recheck=yes gcopy=yes;; *:yes) col=$lgn res=XFAIL recheck=no gcopy=yes;; *:*) col=$red res=FAIL recheck=yes gcopy=yes;; esac # Report the test outcome and exit status in the logs, so that one can # know whether the test passed or failed simply by looking at the '.log' # file, without the need of also peaking into the corresponding '.trs' # file (automake bug#11814). echo "$res $test_name (exit status: $estatus)" >>"$log_file" # Report outcome to console. echo "${col}${res}${std}: $test_name" # Register the test result, and other relevant metadata. echo ":test-result: $res" > $trs_file echo ":global-test-result: $res" >> $trs_file echo ":recheck: $recheck" >> $trs_file echo ":copy-in-global-log: $gcopy" >> $trs_file # Local Variables: # mode: shell-script # sh-indentation: 2 # eval: (add-hook 'before-save-hook 'time-stamp) # time-stamp-start: "scriptversion=" # time-stamp-format: "%:y-%02m-%02d.%02H" # time-stamp-time-zone: "UTC0" # time-stamp-end: "; # UTC" # End: tpm2-pkcs11-1.9.1/LICENSE0000644000175100017510000000310014535673717010210 Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Note that: - lib/twist.c - lib/twist.h - test/unit/test_twist all eminent from https://bitbucket.org/billcroberts/twist/src/master/ Those files, the copyright is retained by William Roberts however the source is relicensed from Apache 2.0, to BSD2 by the author. Those files respect the license as documented in the respective file: - src/pkcs11.h - .gitignore tpm2-pkcs11-1.9.1/docs/0000755000175100017510000000000014670050657010211 5tpm2-pkcs11-1.9.1/docs/ARCHITECTURE.md0000644000175100017510000000437014535673717012351 # tpm2-pkcs11 architecture design This document aims to describe the fundamental design of the TPM2.0 PKCS11 internals. ## Store In order to fulfill the PKCS11 interface, some additional metadata needs to be stored to disk. The data is stored in the "store", which is controllable via: - ENV Variable `TPM2_PKCS11_STORE` - Search Operation of: - `/etc/tpm2-pkcs11` - `$HOME/tpm2_pkcs11` - `$CWD` The store contains all the metadata required, and currently is stored in sqlite3 database. ## Primary Key Root Internally, all objects are stored under a **persistent** primary key in the owner hierarchy. The choice of a persistent object was done to prevent requirements of knowing the owner hierarchy auth to use the PKCS11 token. Additionally, most TPMs will have an *SRK* provisionined here as well. This authorization value is usually owned by an IT organization in enterprise environments. The auth value for this primary key is stored in the store on disk and is only protected with filesystem access controls. However, a typical Primary Key in the Owner Hierarchy has an empty password. Thus, use of the primary key should be considered a given and in most cases the auth value is empty or a known value. The primary key handle is stored as a serialized ESYS_TR in the store and is used for encrypted sessions with the TPM. ## Login Flow For each token in the store, a token maintains 2 objects under the primary key. One for each of the PKCS11 users, the SO and USER users. The authorization value for these objects is the SO or USER PIN respectively, mixed with a salt via sha256. This auth value is used to unseal an AES256 wrapping key. The wrapping key is used to encrypt all object auth values in the token, in mode GCM. ## Token Objects The actual keys and certificates that the token exposes for cryptographic operations. These keys all have an auth value that is wrapped with the token wide wrapping key. ## Expanding the Auth Model Currently, the wrapping model should make it easy to bring in existing keys into the model if needed. Most keys just use a simple password. However, in the fuure, we are looking to add policy support for internally created keys, see: - https://github.com/tpm2-software/tpm2-pkcs11/blob/master/docs/tpm2-pkcs11_object_auth_model.md tpm2-pkcs11-1.9.1/docs/CHANGELOG.md0000644000175100017510000000000014535673717011740 tpm2-pkcs11-1.9.1/docs/CODE_OF_CONDUCT.md0000644000175100017510000001256414535673717012750 # Contributor Covenant Code of Conduct ## Our Pledge We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation. We pledge to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and healthy community. ## Our Standards Examples of behavior that contributes to a positive environment for our community include: * Demonstrating empathy and kindness toward other people * Being respectful of differing opinions, viewpoints, and experiences * Giving and gracefully accepting constructive feedback * Accepting responsibility and apologizing to those affected by our mistakes, and learning from the experience * Focusing on what is best not just for us as individuals, but for the overall community Examples of unacceptable behavior include: * The use of sexualized language or imagery, and sexual attention or advances of any kind * Trolling, insulting or derogatory comments, and personal or political attacks * Public or private harassment * Publishing others' private information, such as a physical or email address, without their explicit permission * Other conduct which could reasonably be considered inappropriate in a professional setting ## Enforcement Responsibilities Community leaders are responsible for clarifying and enforcing our standards of acceptable behavior and will take appropriate and fair corrective action in response to any behavior that they deem inappropriate, threatening, offensive, or harmful. Community leaders have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, and will communicate reasons for moderation decisions when appropriate. ## Scope This Code of Conduct applies within all community spaces, and also applies when an individual is officially representing the community in public spaces. Examples of representing our community include using an official e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. ## Enforcement Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at [MAINTAINERS](MAINTAINERS). All complaints will be reviewed and investigated promptly and fairly. All community leaders are obligated to respect the privacy and security of the reporter of any incident. ## Enforcement Guidelines Community leaders will follow these Community Impact Guidelines in determining the consequences for any action they deem in violation of this Code of Conduct: ### 1. Correction **Community Impact**: Use of inappropriate language or other behavior deemed unprofessional or unwelcome in the community. **Consequence**: A private, written warning from community leaders, providing clarity around the nature of the violation and an explanation of why the behavior was inappropriate. A public apology may be requested. ### 2. Warning **Community Impact**: A violation through a single incident or series of actions. **Consequence**: A warning with consequences for continued behavior. No interaction with the people involved, including unsolicited interaction with those enforcing the Code of Conduct, for a specified period of time. This includes avoiding interactions in community spaces as well as external channels like social media. Violating these terms may lead to a temporary or permanent ban. ### 3. Temporary Ban **Community Impact**: A serious violation of community standards, including sustained inappropriate behavior. **Consequence**: A temporary ban from any sort of interaction or public communication with the community for a specified period of time. No public or private interaction with the people involved, including unsolicited interaction with those enforcing the Code of Conduct, is allowed during this period. Violating these terms may lead to a permanent ban. ### 4. Permanent Ban **Community Impact**: Demonstrating a pattern of violation of community standards, including sustained inappropriate behavior, harassment of an individual, or aggression toward or disparagement of classes of individuals. **Consequence**: A permanent ban from any sort of public interaction within the community. ## Attribution This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 2.1, available at [https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1]. Community Impact Guidelines were inspired by [Mozilla's code of conduct enforcement ladder][Mozilla CoC]. For answers to common questions about this code of conduct, see the FAQ at [https://www.contributor-covenant.org/faq][FAQ]. Translations are available at [https://www.contributor-covenant.org/translations][translations]. [homepage]: https://www.contributor-covenant.org [v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html [Mozilla CoC]: https://github.com/mozilla/diversity [FAQ]: https://www.contributor-covenant.org/faq [translations]: https://www.contributor-covenant.org/translations tpm2-pkcs11-1.9.1/docs/DB_UPGRADE.md0000644000175100017510000000545414535673717012127 # DB Upgrade The tools and libraries for tpm2-pkcs11 are designed in a way where they can automatically detect and upgrade DBs (databases). This document describes the internals of this functionality and what to do when things go wrong. ## Design Summary The DB contains the table "schema", which contains a column "schema_version" that contains the current schema version of that DB. The C library itself is statically set at build time with the maximum DB version that it knows how to read. The C library and Python tools are both equipped to upgrade the DB version from schema_version 1 to the current max version they know of. When the DB is accessed, a cooperative file lock is taken to prevent races on DB schema_version checks and upgrading the DB, thus only one process accessing the `$TPM2_PKCS11_STORE` will perform the upgrade if needed. This lock is held during the schema_version check and upgrade period only, after this the normal sqlite3 read/write lock semantics are in effect. During the upgrade period, a backup copy of the DB is created in `$TPM2_PKCS11_STORE` with the ".bak" suffix, and this DB is used for the upgrade process leaving the original DB intact. If the upgrade runs correctly on the ".bak" suffix DB. The old version of the DB is renamed with the ".old" suffix, and the ".bak" file is renamed to the original DB name. As a final step, the ".old" DB is removed. Leaving you with a single, updated DB. If a DB version mismatch is detected between the library's DB version and the DB schema_version, one of two things can happen: 1. The tool or library is built for an older schema_version than the current `$TPM2_PKCS11_STORE` schema_version, the tool or library will cause an error. 2. The tool or library is built for a newer schema_version than the current `$TPM2_PKCS11_STORE` schema_version, the tool or library will cause a DB upgrade to occur. To rectify the first case, simply upgrade your tools to a version >= to the DB schema_version of the `$TPM2_PKCS11_STORE`. To rectify the second case, nothing should be required of the user, unless an unforeseen error occurs. ## Error Recovery on DB Upgrade The biggest thing to remember if you encounter an error, is that either the original DB will exist in the in the `$TPM2_PKCS11_STORE` directory, unmodified, or as a file with an extension of ".old" if something occurs during renaming. That is your original, unmodified DB. The original DB, slightly modified will exist, allowing you to manually correct it, or roll back to the original DB via a simple mv command of the ".old" suffixed file to the ".sqlite3" suffixed file. ```bash mv $TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3.old $TPM2_PKCS11_STORE/tpm2_pkcs11.sqlite3 ``` If you you roll back the DB, it would be best to also roll back the tpm2-pkcs11 version to the last version successfully used. tpm2-pkcs11-1.9.1/docs/EAP-TLS.md0000644000175100017510000002430414535673717011533 # EAP-TLS Configuration The following instructions assist in connecting a Wi-Fi enabled device to a WPA2 Enterprise network using the EAP-TLS protocol, where the authentication credentials is secured using a TPM 2.0 generated key, and accessed using the PKCS#11 standard. WPA-Enterprise, also referred to as WPA-802.1X mode, is designed for enterprise networks and requires a RADIUS authentication server. The authentication of clients relies on a Extensible Authentication Protocol (EAP) that includes many types of authentication schemes. The one used in this setup is EAP Transport Layer Security (EAP-TLS), defined in RFC 5216. ## RADIUS Server Installation The RADIUS server implementation used in the example is FreeRADIUS from the FreeRADIUS Project, an open source implementation of RADIUS, an Internet Engineering Task Force (IETF) protocol for Authorization, Authentication, and Accounting (AAA). ### Installation on Fedora ```sh dnf install freeradius ``` Then enable the firewall rule for the RADIUS server: ```sh firewall-cmd --add-service=radius --permanent firewall-cmd --reload ``` ### Installation on Ubuntu ```sh cat >> /etc/apt/sources.list <> /etc/raddb/clients.conf <> /etc/freeradius/clients.conf < ## Configure Supplicant Access This step adds a Supplicant user to the RADIUS server. Add the following section to the `authorize` file describing a testing user: ### Configure Supplicant Access in Fedora ```sh cat >> /etc/raddb/mods-config/files/authorize <> /etc/freeradius/mods-config/files/authorize < wpa_supplicant.conf < NAK wlp1s0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=13 wlp1s0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 13 (TLS) selected wlp1s0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=FR/ST=Radius/L=Somewhere/O=Example Inc./emailAddress=admin@example.org/CN=Example Certificate Authority' hash=4953d5815718f3e6c082969bd950d84c1b8dbba87cb45c4b15335387b34abdb8 wlp1s0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=FR/ST=Radius/O=Example Inc./CN=Example Server Certificate/emailAddress=admin@example.org' hash=677cee54ddad924c818909397a5b3d1a8ff64d45ab8796648d47aa5fdc2d3f8f wlp1s0: CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully wlp1s0: WPA: Key negotiation completed with 58:6d:8f:9d:2f:9e [PTK=CCMP GTK=TKIP] wlp1s0: CTRL-EVENT-CONNECTED - Connection to 58:6d:8f:9d:2f:9e completed [id=0 id_str=] ``` ### Network Manager Configuration Specify the PKCS11 Store location that `wpa_supplicant` should use: ```sh echo "TPM2_PKCS11_STORE=/etc/tpm2_pkcs11" >> /etc/sysconfig/wpa_supplicant ``` Restart the `wpa_supplicant.service` daemon with the new configuration: ```sh systemctl restart wpa_supplicant.service ``` Add the following Network Manager connection configuration: ```sh nmcli connection add type wifi ifname wlp1s0 con-name 'SSID' \ 802-11-wireless.ssid SSID \ 802-11-wireless-security.key-mgmt wpa-eap \ 802-1x.eap tls \ 802-1x.identity testing \ 802-1x.ca-cert /etc/pki/SSID/ca.pem \ 802-1x.client-cert /etc/pki/SSID/client.crt \ 802-1x.private-key 'pkcs11:model=Intel;manufacturer=Intel;serial=0000000000000000;token=label;id=%32%62%37%30%65%62%36%32%66%33%32%62%31%63%65%37;object=0;type=private;pin-value=userpin' \ 802-1x.private-key-password-flags not-required ``` For system that uses SELinux, like Fedora, we need to allow Network Manager to access to the TPM and the TPM Resource Manager. The `etc_t` write access is also provide to allow interaction with the PKCS#11 database in `/etc/tpm2_pkcs11`. ```sh cat > nm-selinux.te <= 4.0 - bash (optional for testing) - pkcs11-tool (optional for testing) - openssl (optional for testing) - libp11 (optional for testing) - java (optional for testing) - junit (optional for testing) - hamcrest (optional for testing) Details on building can be found in [BUILDING.md](BUILDING.md). After satisfying the dependencies one invokes the regular autotools build process: ```bash ./bootstrap ./configure make make install ``` # Installing tpm2_ptool.py To install tpm2_ptool.py, one can use various python installation methodologies as a setup.py file is provided. Below are the common ways to install, but are not exhaustive. First cd to the tools folder: ```bash cd tools ``` Then perform one of: 1. ```bash # pip allows for easy user installs via option --user and thus doesn't require root pip install . ``` 2. ```bash easy_install setup.py ``` tpm2-pkcs11-1.9.1/docs/INTEROPERABILITY.md0000644000175100017510000001437014535673717013055 # Interoperability with Existing TPM2 Objects A user may have existing TPM2 objects created with the [tpm2-tss-engine](https://github.com/tpm2-software/tpm2-tss-engine) project. In order to use these objects in a token one can use the tpm2_ptool link commandlet. Below is an example of doing so. ### Linking a TPM2 TSS Engine Key with a persistent primary object tpm2-tss-engine's *tpm2tss-genkey* command has the ability to create TPM2 objects using an existing primary key. The only requirement that the tpm2-pkcs11 project requires is that the handle be persistent. The example below creates a persistent primary key and creates a tpm2-tss-engine key under the persistent primary key to use. Many TPM's come provisioned with what is known as the storage root key (SRK). This is a key defined by the [provisioning guidance](https://trustedcomputinggroup.org/wp-content/uploads/TCG-TPM-v2.0-Provisioning-Guidance-Published-v1r1.pdf). This is a particularly useful key, and is set to an empty auth value. Thus owner authorization is not needed. Also in the examples below we use specific primary key handles, but if one has existing objects, just substitute the values. ```bash # # Note: below we create/use a store in ~/tmp, however one can use a store wherever they would like. # # Create a primary key tpm2_createprimary -c primary.ctx # Persistent primary key at handle 0x81000001 tpm2_evictcontrol -c primary.ctx 0x81000001 # Create the tpm2-tss-engine key under the persistent primary key tpm2tss-genkey -P 0x81000001 tss2key-rsa2048.pem # Create a primary object in a store compatible for this key pid="$(tpm2_ptool init --primary-handle=0x81000001 --path=~/tmp | grep id | cut -d' ' -f 2-2)" # Create a token associated with the primary object # Note: in production set userpin and sopin to other values. tpm2_ptool addtoken --pid=$pid --sopin=mysopin --userpin=myuserpin --label=mytoken --path=~/tmp # Link the key tpm2_ptool link --label=mytoken --userpin=myuserpin --key-label="link-key" tss2key-rsa2048.pem ``` From there, one can use that key as they would in other tutorials. ## Linking a TPM2 TSS Engine Key with a transient primary object It may be desirable to use the transient primary key that *tpm2tss-genkey* utilizes by default. Either as a way to avoid using Non-Volatile memory with a persistent key, or for interoperability with existing *tpm2tss-genkey* generated keys using this default parent. Also in the examples below we create tpm2-tss-engine key, existing keys may also be used. ```bash # # Note: below we create/use a store in ~/tmp, however one can use a store wherever they would like. # # Create the tpm2-tss-engine key under the default transient primary key or use existing similar key tpm2tss-genkey tss2key-rsa2048.pem # Create a token associated with a transient primary object that is compatible with tpm2-tss-engine pid="$(tpm2_ptool init --transient-parent=tss2-engine-key --path=~/tmp | grep id | cut -d' ' -f 2-2)" # Create a token associated with the primary object # Note: in production set userpin and sopin to other values. tpm2_ptool addtoken --pid=$pid --sopin=mysopin --userpin=myuserpin --label=mytoken --path=~/tmp # Link the key tpm2_ptool link --label=mytoken --userpin=myuserpin --key-label="link-key" tss2key-rsa2048.pem ``` From there, one can use that key as they would in other tutorials. ### Linking a TPM2 Tools Key with a persistent primary object [tpm2-tools](https://github.com/tpm2-software/tpm2-tools) has the ability to create primary keys via [tpm2\_createprimary](https://github.com/tpm2-software/tpm2-tools/blob/master/man/tpm2_createprimary.1.md) and persist them via [tpm2\_evictcontrol](https://github.com/tpm2-software/tpm2-tools/blob/master/man/tpm2_evictcontrol.1.md). You can create tokens and link keys generated with *tpm2-tools* as illustraded below. One crucial benefit of persistent objects, besides token speed as it doesn't need to invoke the TPM2_CreatePrimary command, is that any template can be used for the persistent object; one is not limited to the few pre-defined templates. ```bash # # Note: below we create/use a store in ~/tmp, however one can use a store wherever they would like. # # Create a primary key tpm2_createprimary -c primary.ctx # Persistent primary key at handle 0x81000001 tpm2_evictcontrol -c primary.ctx 0x81000001 # Create the tpm2-tools key under the persistent primary key tpm2_create -C 0x81000001 -u key.pub -r key.priv # Create a primary object in a store compatible for this key pid="$(tpm2_ptool init --primary-handle=0x81000001 --path=~/tmp | grep id | cut -d' ' -f 2-2)" # Create a token associated with the primary object # Note: in production set userpin and sopin to other values. tpm2_ptool addtoken --pid=$pid --sopin=mysopin --userpin=myuserpin --label=mytoken --path=~/tmp # Link the key # Note: order of key pair objects does not matter tpm2_ptool link --label=mytoken --userpin=myuserpin --key-label="link-key" key.pub key.priv ``` ### Linking a TPM2 Tools Key with a transient primary object Since transient primary objects need exacting templates each time, currently only two tpm2-tools primary object templates are supported: | Command | Template Name | |-------------------------------------|------------------------| | `tpm2_create -c primary.ctx` | tpm2-tools-default | | `tpm2_create -Gecc -c primary.ctx` | tpm2-tools-ecc-default | ```bash # # Note: below we create/use a store in ~/tmp, however one can use a store wherever they would like. # # Create a primary key according to the template table above tpm2_createprimary -c primary.ctx # Create the tpm2-tools key under the persistent primary key tpm2_create -C primary.ctx -u key.pub -r key.priv # Create a primary object in a store compatible for this key pid="$(tpm2_ptool init --transient-parent="tpm2-tools-default" --path=~/tmp | grep id | cut -d' ' -f 2-2)" # Create a token associated with the primary object # Note: in production set userpin and sopin to other values. tpm2_ptool addtoken --pid=$pid --sopin=mysopin --userpin=myuserpin --label=mytoken --path=~/tmp # Link the key # Note: order of key pair objects does not matter tpm2_ptool link --label=mytoken --userpin=myuserpin --key-label="link-key" key.pub key.priv ``` From there, one can use that key as they would in other tutorials. tpm2-pkcs11-1.9.1/docs/OPENSSL.md0000644000175100017510000001206114535673717011606 # Using TPM2 PKCS11 with OpenSSL ## Introduction OpenSSL has the ability to load dynamic engines to control where the underlying cryptographic operations occur. Additionally, [OpenSC LibP11](https://github.com/OpenSC/libp11) has an engine that can load arbitrary PKCS11 libraries. Thus, through a few layer of indirections, you can use OpenSSL with the tpm2-pkcs11 library. This is a less complete tutorial, and assumes you have been through the [pkcs11-tool](PKCS11_TOOL.md) tutorial. ## Setup Yubico has very complete instructions for configuring, see: - https://developers.yubico.com/YubiHSM2/Usage_Guides/OpenSSL_with_pkcs11_engine.html These instructions are mostly applicable, the only thing that needs to change is that the MODULE_PATH needs to point to the tpm2-pkcs11 library. A sample OSSL config file is provided at [openssl.conf](../misc/tpm2-pkcs11.openssl.sample.conf). Note: - The Yubico instructions use rand. Rand will not hit the tpm because the OpenSC engine does not support it. - Systems with PKCS11 kit installed may need additional tweaks to get it to work. For the examples below, I followed Yubico's advice and set up an alias in my `~/.bashrc` file called tpm2ssl, like so: ```bash alias tpm2ssl='OPENSSL_CONF=$HOME/tpm2-pkcs11.openssl.conf openssl' ``` You'll also need to set up a `TPM2_PKCS11_STORE` and have an asymmetric key pair generated. This is all shown in the [pkcs11-tool](PKCS11_TOOL.md) tutorial. Setting up an alias makes life easier, so lets do that: ```bash alias tpm2pkcs11-tool='pkcs11-tool --module /path/to/libtpm2_pkcs11.so ``` Note: You need to update `--module` option to point to the tpm2-pcks11 shared object. ## Generating a Certificate First thing first, identify the private key to use to generate the certificate or CSR from. With pkcs11-tool, one can do: ```bash pkcs11-tool --module /path/to/libtpm2_pkcs11.so --slot 1 --login -O ``` You should see output like so: ```bash Private Key Object; EC label: my-ecc-keypair ID: 61366566303531343635636138663035 Usage: decrypt, sign ``` Note: You need to login to see private key objects. If you don't have a key, we can create one: ```bash tpm2pkcs11-tool --label="my-ecc-keypair" --login --keypairgen --usage-sign --key-type EC:prime256v1 Using slot 0 with a present token (0x1) Key pair generated: Private Key Object; EC label: my-ecc-keypair ID: 3436 Usage: sign Public Key Object; EC EC_POINT 256 bits EC_POINT: 04410436e7d2c84725234ec8d4b14bc31a50d382eb578cbc7315ae95561875314eb5a22a390bbfabef6269a35a18b1d95b2abc553071c419c3e866db0c3f13c0288ac6 EC_PARAMS: 06082a8648ce3d030107 label: my-ecc-keypair ID: 3437 Usage: verify ``` Your key could be RSA, that's fine. The imporant thing is to look at the label and pass it via the `-key` argument in openssl below. Note that this is key my-ecc-keypair in slot 1, even though the output says slot 0. In PKCS11, the slotid is what matters, which is the 0x1. A slot id of 0x0 is not valid. To generate a self signed certificate, one can simply use the `req` command with `openssl`. ``` bash tpm2ssl req -new -x509 -days 365 -subj '/CN=my key/' -sha256 -engine pkcs11 -keyform engine -key slot_1-label_my-ecc-keypair -out cert.pem engine "pkcs11" set. Enter PKCS#11 token PIN for label: ``` Note: OpenSSL can also find the key by using the `id` field. For example, update the key to: ``` -key slot_1-id_38316235653539316533633232383139 ``` ## Generating a CSR Most users will likely require certificates signed by a CA. To do this, we can generate a CSR that gets uploaded to a CA. The CA then returns the certificate. The steps to upload the CSR and retrieve it from the CA are CA dependent and will not be covered here. ```bash tpm2ssl req -new -subj '/CN=my key/' -sha256 -engine pkcs11 -keyform engine -key slot_1-label_my-ecc-keypair -out csr.pem ``` The next steps after generating the CSR would be to go to a CA, get a certificate generated and signed using it. Note: - OpenSSL config file can be used for specifying default values when using the req command. [See the man page](https://www.openssl.org/docs/man1.1.1/man1/openssl-req.html). ## Inserting a Certificate At this point, you have a certificate, either self signed or signed via a CA. The certificate may be in many forms, if you followed the steps above, it's in the PEM format. You need to convert any version you have to PEM, information on how to do this can be found at: - https://knowledge.digicert.com/solution/SO26449.html Once you obtain a PEM certificate, you can use the ptool command. ```bash tpm2_ptool addcert --label=label --key-id=38316235653539316533633232383139 --path=$TPM2_PKCS11_STORE ~/pem action: add cert: CKA_ID: '38316235653539316533633232383139' ``` ## Listing a Certificate After this, view your cert object, you can again just list the objects with pkcs11-tool. ```bash tpm2pkcs11-tool --slot 1 -O ``` You should see, amongst other output, output like: ```bash Certificate Object; type = X.509 cert label: 1 subject: DN: CN=my key ID: 38316235653539316533633232383139 ``` tpm2-pkcs11-1.9.1/docs/OPENVPN.md0000644000175100017510000002242414535673717011614 # OpenVPN OpenVPN is an Open source VPN daemon and client. In this tutorial, we will show an example of setting it up and using it with tpm2-pkcs11. **Note: This configuration has not been evaluated for production use.** If you use TLS-1.1, it should just work, if you want TLS-1.2, you may need to fiddle more with package versions. This write up stemmed from https://github.com/tpm2-software/tpm2-pkcs11/issues/67, so if you would like more details, please look through the conversation on the issue. ## Requirements In this tutorial, we will be using Fedora-32 as the example. Other distros should be similar but will require distro specific examples. - OS: [Fedora 32](https://getfedora.org/en/workstation/download/) - TPM2 Bits: - This is known to work with the following versions, however other previous versions may work too. - tpm2-pkcs11, 1.4 - tpm2-tools: 4.2 - tpm2-abrmd: 2.3.3 - tpm2-tss: 3.0 - Others: - EasyRSA on the **server** machine. ```bash wget https://github.com/OpenVPN/easy-rsa/releases/download/v3.0.5/EasyRSA-nix-3.0.5.tgz \ -O EasyRSA-nix-3.0.5.tgz tar -zxvf EasyRSA-nix-3.0.5.tgz cd EasyRSA-3.0.5 # Don't forget to add EasyRSA to your path export PATH="$PATH:$(realpath EasyRSA-3.0.5)" ``` - OpenVPN ```bash dnf install openvpn ``` The major issue is that pkcs11-helper library has a bug (P11 PKCS11 URI handling) and a missing feature (RSA_NO_PADDING support). However, if you use the Fedora packaged version with certain patches applied, and re-install, it should work. To do this, I first got the upstream pkcs11-helper and checked out version 1.22, which is the packaged version, and applied the following patches: ```bash # clone pkcs11-helper git clone https://github.com/OpenSC/pkcs11-helper.git # Checkout the same version that Fedora Packaged at the time of this tutorial # Note this could change, so check pkg-config --modversion libpkcs11-helper-1 git checkout pkcs11-helper-1.22 # Get the Patches that RPM built with. Note that this PR could change, and do to # rebase conflicts do not apply cleanly anymore. wget https://github.com/OpenSC/pkcs11-helper/pull/4.patch # Apply the patches git am 4.patch Applying: Stop _pkcs11h_util_hexToBinary() checking for trailing NUL Applying: Accept RFC7512-compliant PKCS#11 URIs as serialized token/certificate IDs Applying: Serialize to RFC7512-compliant PKCS#11 URIs # Get PSS support. git cherry-pick c192bb4 ``` **Note**: The above does not apply cleanly, but the conflict is on: `both modified: ChangeLog` So one can just ignore it. **Note**: There are other ways to do this, and your mileage may vary. After you have pkcs11-helper patched, you need to build and optionally install it: - https://github.com/OpenSC/pkcs11-helper/wiki/How-to-compile-pkcs11-helper If you don't install it, you can set `LD_LIBRARY_PATH` or `LD_PRELOAD` variables to the location of the parent directory containing the library or the library path itself respectively. ## Configuring The major headaches are configuring OpenVPN. I configured the client and server on the same machine; however, the steps will generally be the same if they are running on different machines. ### Step 1 - Server Setup ```bash #!/bin/bash mkdir ~/openvpn-server cd ~/openvpn-server firewall-cmd --add-service=openvpn --permanent firewall-cmd --reload # Create PKI and Initial CA ./easyrsa init-pki ./easyrsa build-ca # Generate Server Certs and Artifacts ./easyrsa build-server-full server ./easyrsa gen-dh cd .. # Configure Server cp /usr/share/doc/openvpn/sample/sample-config-files/server.conf . cp ./EasyRSA-3.0.5/pki/private/server.key . cp ./EasyRSA-3.0.5/pki/issued/server.crt . cp ./EasyRSA-3.0.5/pki/dh.pem dh2048.pem cp ./EasyRSA-3.0.5/pki/ca.crt . openvpn --genkey --secret ta.key ``` ### Step 2 - Client CSR Setup ```shell #!/bin/bash mkdir ~/openvpn-client cd ~/openvpn-client # Create certificate Signing Request Configuration cat > client.cnf << EOF [ req ] default_bits = 2048 distinguished_name = req_distinguished_name prompt = no [ req_distinguished_name ] C = US ST = Foo L = Bar O = Widget Co OU = Internet of Widgets Group CN = $(hostname) EOF # Create the TPM2 PKCS11 Key # Note: you may need to configure the TCTI for your environment, I used ibmtpm1563 server # and tpm2-abrmd. #export TPM2TOOLS_TCTI="device:/dev/tpmrm0" #export TPM2_PKCS11_TCTI="device:/dev/tpmrm0" # Set up the store location export TPM2_PKCS11_STORE=/etc/tpm2_pkcs11 # Set the log-level for debugging so we get more info export TPM2_PKCS11_LOG_LEVEL=2 rm ${TPM2_PKCS11_STORE} -fr || true mkdir -p ${TPM2_PKCS11_STORE} || true tpm2_clear tpm2_ptool init tpm2_ptool addtoken --pid=1 --sopin=sopin --userpin=userpin --label=openvpn tpm2_ptool addkey --algorithm=rsa2048 --label=openvpn --userpin=userpin # Set the token TCTI if needed. # tpm2_ptool config --key tcti --value "device:/dev/tpmrm0" --label=openvpn # Create the Certificate Signing Request TOKEN=$(p11tool --list-token-urls | grep "token=openvpn") export GNUTLS_PIN=userpin export GNUTLS_SO_PIN=sopin p11tool --login --list-all "${TOKEN}" --outfile p11tool.out PRIVATE_KEY=$(cat p11tool.out | grep private | awk '{ print $2 }') openssl req -new -engine pkcs11 -keyform engine \ -key "${PRIVATE_KEY};pin-value=userpin" \ -config client.cnf -out client.csr ``` ### Step 3 - Generate Client Cert in the Server Copy the generated client.csr to the server, and sign it. ```bash cd openvpn-server/EasyRSA-3.0.5 ./easyrsa import-req ./client.csr client ./easyrsa sign-req client client cat ./pki/issued/client.crt ``` ### Step 4 - Configure OpenVPN Client ```bash cd ~/openvpn-client # Get certificates from server. Whatever works scp, cp, etc. # Since I did it on the same machine, cp will work just fine. cp ~/openssl-server/client.crt . cp ~/openssl-server/ca.crt . cp ~/openssl-server/ta.key . # Configure Client REPLACE IP ADDRESS remote_ip="192.168.0.43" cp /usr/share/doc/openvpn/sample/sample-config-files/client.conf . sed -i "s/remote my-server-1 1194/remote $remote_ip 1194/g" client.conf ``` ### Step 5 - Import the certificate into the PKCS11 Store ```bash #!/bin/bash cd ~/openvpn-client TOKEN=$(p11tool --list-token-urls | grep "token=openvpn") export GNUTLS_PIN=userpin export GNUTLS_SO_PIN=sopin KEY_ID=$(p11tool --login --list-all "${TOKEN}" | grep ID: | uniq | awk '{ print $2 }' | sed 's/://g') tpm2_ptool addcert --label=openvpn --key-id=${KEY_ID} ./client.crt SERIALIZED_ID=$(openvpn --show-pkcs11-ids /usr/lib64/pkcs11/libtpm2_pkcs11.so.0.0.0 | grep "Serialized id:" | awk '{ print $3 }') cat << EOF # Comment the cert and key lines and add the following to the config: pkcs11-providers /usr/lib64/pkcs11/libtpm2_pkcs11.so.0.0.0 pkcs11-id '${SERIALIZED_ID}' EOF ``` The following diff illustrates the changes needed to the client openvpn config file. One needs to comment out the config file lines for cert and key. Your specific values for pkcs11-id, pkcs11-providers and remote may vary on distro and local configurations. ```diff diff /usr/share/doc/openvpn/sample/sample-config-files/client.conf client.conf 42c42 < remote my-server-1 1194 --- > remote 192.168.0.43 1194 89,90c89,93 < cert client.crt < key client.key --- > #cert client.crt > #key client.key > # Comment the cert and key lines and add the following to the config: > pkcs11-providers /usr/lib64/pkcs11/libtpm2_pkcs11.so.0.0.0 > pkcs11-id 'pkcs11:model=Intel;token=openvpn;manufacturer=Intel;serial=0000000000000000;id=e3dac3f1de50d109' ``` ## Step 6 - Start the Server On the **server machine**, do: ```bash cd ~/openvpn-server # note you need root openvpn --config server.conf --verb 11 ``` ## Step 7 - Start the Client: Note that since I did everything as local client, one might want to remove the `--no-bind` option. On the **client** machine do: ```bash cd ~/openvpn-client openvpn --config client.conf --verb 11 --nobind ``` You should see on the server, similar output on success: ``` Fri Aug 21 09:45:43 2020 Initialization Sequence Completed Fri Aug 21 09:45:53 2020 127.0.0.1:60283 TLS: Initial packet from [AF_INET]127.0.0.1:60283, sid=c0481798 843a43da Fri Aug 21 09:45:56 2020 127.0.0.1:60283 VERIFY OK: depth=1, CN=Easy-RSA CA Fri Aug 21 09:45:56 2020 127.0.0.1:60283 VERIFY OK: depth=0, C=US, ST=Oregon, L=Hillsboro, O=Intel Corp, OU=Internet of Things Group, CN=openvpn.mshome.net Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_VER=2.4.9 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_PLAT=linux Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_PROTO=2 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_NCP=2 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_LZ4=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_LZ4v2=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_LZO=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_COMP_STUB=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_COMP_STUBv2=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 peer info: IV_TCPNL=1 Fri Aug 21 09:45:56 2020 127.0.0.1:60283 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 2048 bit RSA Fri Aug 21 09:45:56 2020 127.0.0.1:60283 [openvpn.mshome.net] Peer Connection Initiated with [AF_INET]127.0.0.1:60283 ``` tpm2-pkcs11-1.9.1/docs/P11.md0000644000175100017510000001606514535673717011034 # P11 Kit Configuration Below, will be examples and discussion on how to use P11kit with tpm2-pkcs11. This will not be exhaustive, nor should it be. However, commands not explicitly listed will likely not work as they are work in progress. ## Prerequisites In order to use tpm2-pkcs11 with P11kit, one **MUST** have P11kit installed before running `./configure` and perform a `make install`. Often times, one must be root to do the install, i.e. `sudo make install`. During the configure step, tpm2-pkcs11 detects if P11kit is installed, and installs necessary configuration files and changes library installation paths so it works. To install p11kit, on Ubuntu, just do: ``` sudo apt-get install p11-kit ``` ## Listing Installed Modules ### Initial State This is the hello world of P11kit. This tests that the module can be seen. We assume a clean slate, if no `TPM2_PKCS11_STORE` is present. ``` p11-kit list-modules p11-kit: tpm2_pkcs11: module failed to initialize, skipping: The device is not present or unplugged ``` This will likely have more output than what is shown here, however, the error message indicates that P11kit sees the tpm2-pkcs11 library as a *slot* but that the *token* is not present. This state is analogous to a smart card reader that doesn't have a smart card in it. ### Initializing a Store Now that we have p11kit seeing the tpm2-pkcs11 library, lets initialize a *store*. This is the process of configuring the TPM to PKCS#11 bridge so it has tokens and objects for the PKCS#11 paradigm. Start by reading the document on initialization [here](INITIALIZING.md). Only brief commands will be provided here, so a basic understanding of the initialization process is paramount. ```bash # initialize a store tpm2_ptool.py init --path=~/tmp action: Created id: 1 # add a token to the store tpm2_ptool.py addtoken --pid=1 --label=label --sopin=mysopin --userpin=myuserpin --path=~/tmp ``` No we have an initialized store and a token, i.e. we inserted a non-provisioned smart card into the reader. Now when we list the installed modules, it should be an in inserted and initialized state. ``` p11-kit list-modules tpm2_pkcs11: libtpm2_pkcs11.so library-description: TPM2.0 Cryptoki library-manufacturer: Intel library-version: 42.42 token: p11kit manufacturer: Intel model: TPM2 PKCS#11 serial-number: 0000000000000000 flags: rng login-required token-initialized ``` **Note**: The details of this output may change, as many of the values are still in development. ## P11tool The p11tool is used to interact with pkcs11 modules and its API. It can be installed on Ubuntu via: ``` sudo apt install gnutls-bin ``` **This tutorial assumes you completed the section P11 Kit Configuration** ## Listing Token URLS p11tool can work of of token URLs. To find our token URL so we can use only that token we run the command: ``` p11tool --list-token-urls pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label ``` Now we have a URL we can use for subsequent commands and ignore other tokens on your system. **Note**:I set the variable `token="pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label"` in my bash shell before continuing. ## Listing Objects Let's probe the token and see what objects are on it: ```bash p11tool --list-all "$token" No matching objects found ``` In the subsequent sections, we'll add objects to the token. ### Generating a Random Number The next example will show how to generate a random number. We'll be piping it through xxd for display purposes. Be careful running this command without a redirect or pipe to something like xxd. Dumping raw bytes to the terminal can cause unexpected behaviors. ``` $ p11tool --generate-random=4 "$token" | xxd 00000000: 02b6 0c20 ``` ## Creating Objects Outside of using [tpm2_ptool.py](PKCS11_TOOL.md) to add objects, p11tool supports creating objects through the PKCS#11 interface. ### Generating RSA Key pair This will generate an RSA key pair using p11tool: ``` GNUTLS_PIN=myuserpin p11tool --login --generate-rsa --bits=2048 --label=p11kit "$token" ``` Successful runs should see the following output: ``` -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgP2yAABMnmDb+D6wZRp J4cqw8efa/Zk8AwHxJ2nAIUgaTIXzB3H0ps7++D0qfRVGJHpq0Qy1sGw+AfAbN4E kIMcl9SYw1xhGzFws4atcVwggH1hm+v32rezU4JrZ3wP+sZe+qVWHk1oBevSHYMG Yz7D/B5JEGSHmJTQLEtt0qlTj0lSbVo3w5e5MT6MsC1IiRjT2BlvWsZiOQ+OyKNE 1ziOhuVCXfZOzdVBDSDfT5Zg5PTvcJj+YIONFFrgdzmUF3Y/5xcqe+hgXx7gG3U0 0HhnbGkBA0P0nYGSDubo3D15IzUflCG7PDS4E2V5VtCkIJDyoJ/08bf106mratny 9QIDAQAB -----END PUBLIC KEY----- ``` ### Generating ECC Key pair This will generate an ECC key pair using p11tool: ```bash GNUTLS_PIN=myuserpin p11tool --login --generate-ecc --curve=secp256r1 --label=my-ecc-keypair "$token" ``` Successful runs should see the following output: ```bash -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEog3BTlQtVtMGnzJEHTK6xUE1PEKJ KLmYRAdS3Pj2pi2oAW6pTJo52F0SMTWwpdGSpsFGTqG+MKmXF3pC3JcnHQ== -----END PUBLIC KEY----- ``` ## Destroying Objects This will show how to delete an object. The first step is having an object to delete on the token and obtaining a URL to the object you want to delete. Look at the section on *Creating Objects*. The first step is getting a URL to what you want to delete, we can use the `p11tool --list-all` to find them: ```bash $ p11tool --list-all "$token" Object 0: URL: pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label;id=%29%96%2F%DE%18%D2%46%E0%16%4D%89%98%81%DF%7F%C2%EA%D9%59%E9;object=my-ecc-keypair;type=public Type: Public key Label: my-ecc-keypair Flags: CKA_NEVER_EXTRACTABLE; ID: 29:96:2f:de:18:d2:46:e0:16:4d:89:98:81:df:7f:c2:ea:d9:59:e9 ``` Note: You only see public objects when not logged in, to see private or secret objects you need to specify the `--login` option. Now that we know what object to delete, let's delete it. Ensure you provide the `--login` option and the password: ```bash url="pkcs11:model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label;id=%29%96%2F%DE%18%D2%46%E0%16%4D%89%98%81%DF%7F%C2%EA%D9%59%E9;object=my-ecc-keypair;type=public" $ GNUTLS_PIN=myuserpin p11tool --login --delete "$url" ``` You will then be presented with output verifying the delete: ``` Object 0: URL: pkcs11:library-description=TPM2.0%20Cryptoki;library-manufacturer=tpm2-software.github.io;model=SW%20%20%20TPM;manufacturer=IBM;serial=0000000000000000;token=label;id=%29%96%2F%DE%18%D2%46%E0%16%4D%89%98%81%DF%7F%C2%EA%D9%59%E9;object=my-ecc-keypair;type=public Type: Public key Label: my-ecc-keypair Flags: CKA_NEVER_EXTRACTABLE; ID: 29:96:2f:de:18:d2:46:e0:16:4d:89:98:81:df:7f:c2:ea:d9:59:e9 Are you sure you want to delete those objects? (y/N): ``` Select Y and then hit enter. ``` Are you sure you want to delete those objects? (y/N): y Re-using cached PIN for token 'label' 1 objects deleted ``` And verify that it's gone: ``` $ p11tool --list-all "$token" No matching objects found ``` Your output could vary based on what objects are present in your token. tpm2-pkcs11-1.9.1/docs/PKCS11_TOOL.md0000644000175100017510000001223514535673717012225 # pkcs11 tool Configuration Below, will be examples and discussion on how to use tpm2-pkcs11 with pkcs11-tool. pkcs11-tool is part of OpenSC and can be installed on ubuntu by issuing the command: ```sh sudo apt-get install opensc ``` # Step 1 - Initializing a Store Start by reading the document on initialization [here](INITIALIZING.md). Only brief commands will be provided here, so a basic understanding of the initialization process is paramount. We start by creating a tpm2-pkcs11 *store* and set up an empty token. ```bash tpm2_ptool.py init --path=~/tmp tpm2_ptool.py addtoken --pid=1 --sopin=mysopin --userpin=myuserpin --label=label --path ~/tmp ``` # Step 2 - Exporting the Store Since we didn't use the default store location by setting `--path` in the `tpm2-ptool` tool, we must export the store so the library can find it. We do this via: ```bash export TPM2_PKCS11_STORE=$HOME/tmp ``` **Note**: The tpm2-pkcs11.so library *WILL NOT EXPAND `~`* and thus you have to use something the shell will expand, like `$HOME`. # Examples of pkcs11-tool This will not be exhaustive, as we do not wish to duplicate opensc's documentation of their tool. But we will show case a few commands for users wishing to use this tool with tpm2-pkcs11 project. **For each example below, --module is the path to the pkcs11.so library and will be machine dependent. Note that default builds will provide the library under src/.libs** It makes life simpler to set up an alias, so let's do that, making sure to update `--module`: ```bash alias tpm2pkcs11-tool='pkcs11-tool --module /path/to/libtpm2_pkcs11.so ``` ## Changing USER PIN How to change the user PIN from *myuserpin* to *mynewpin* ```sh tpm2pkcs11-tool --label="label" --login --pin myuserpin --change-pin --new-pin mynewpin Using slot 0 with a present token (0x1) PIN successfully changed ``` You can see [Checking USER PIN](#checking-user-pin) for example of checking the PIN. ## Checking USER PIN How to check that the PIN is valid. The PIN value shown is based off of section [Changing USER PIN](#changing-user-pin) ```sh tpm2pkcs11-tool --label="label" --test --pin mynewpin ``` ## Initializing USER PIN How to reset or initialize the user PIN given the SO PIN. ```sh tpm2pkcs11-tool --label="label" --init-pin --so-pin mysopin --pin mynewpin ``` ## Generating Random Data The below example will generate 4 bytes of random data and assumes the PIN has been changed as in section [Checking USER PIN](#checking-user-pin) for example of checking the PIN. ```bash tpm2pkcs11-tool --label="label" --pin mynewpin --generate-random 4 | xxd Using slot 0 with a present token (0x1) 00000000: 2e50 bc47 .P.G ``` ## Listing Objects To list objects, we simply use the `--list-objects` option: ```bash tpm2pkcs11-tool --list-objects Private Key Object; EC label: p11-templ-key-label-ecc ID: 7031312d74656d706c2d6b65792d69642d65636300 Usage: sign Public Key Object; EC EC_POINT 256 bits EC_POINT: 04410452526c163439c3c5e5a943466a606439fbc7284eafd12221c4473ecb2fba3c586816d54f9ff108489877c5cfa857ba05cfba33dfe3e9b739107f672f787838d6 EC_PARAMS: 06082a8648ce3d030107 label: p11-templ-key-label-ecc ID: 7031312d74656d706c2d6b65792d69642d65636300 Usage: verify ``` **Note**: Your output will likely differ, but the tool should output a list of objects and some attributes. ## Creating Objects Outside of using [tpm2_ptool.py](PKCS11_TOOL.md) to add objects, p11tool supports creating objects through the PKCS#11 interface. ### Generating RSA Key pair This will generate an RSA key pair using pkcs11-tool: ```bash tpm2pkcs11-tool --label="label" --login --pin=myuserpin --keypairgen Using slot 0 with a present token (0x1) Key pair generated: Private Key Object; RSA label: label ID: 3332 Usage: none Public Key Object; RSA 2048 bits label: label ID: 3333 Usage: none ``` ### Generating ECC Key pair This will generate an EC key pair using pkcs11-tool: ```bash tpm2pkcs11-tool --label="my-ecc-keypair" --login --pin=myuserpin --keypairgen --usage-sign --key-type EC:prime256v1 Using slot 0 with a present token (0x1) Key pair generated: Private Key Object; EC label: my-ecc-keypair ID: 3436 Usage: sign Public Key Object; EC EC_POINT 256 bits EC_POINT: 04410436e7d2c84725234ec8d4b14bc31a50d382eb578cbc7315ae95561875314eb5a22a390bbfabef6269a35a18b1d95b2abc553071c419c3e866db0c3f13c0288ac6 EC_PARAMS: 06082a8648ce3d030107 label: my-ecc-keypair ID: 3437 Usage: verify ``` ## Destroying Objects Let's destroy the key we created in the *Generating ECC Key pair* segment, IDs 3436 and 3437 for both the private and public portions respectively. ### Private Key ```bash tpm2pkcs11-tool --login --pin=myuserpin --delete-object --type=privkey --id 3436 Using slot 0 with a present token (0x1) ``` ### Public Key ```bash tpm2pkcs11-tool --login --pin=myuserpin --delete-object --type=pubkey --id 3437 Using slot 0 with a present token (0x1) ``` **Note**: The tool doesn't have any output about successful delete, only when it fails. However, you can run the command in *Listing Objects* to verify that it is indeed deleted. tpm2-pkcs11-1.9.1/docs/README.md0000644000175100017510000000423614535673717011425 # tpm2-pkcs11 [![Build Status](https://github.com/tpm2-software/tpm2-pkcs11/workflows/CI/badge.svg)](https://github.com/tpm2-software/tpm2-pkcs11/actions) [![Coverage Status](https://codecov.io/gh/tpm2-software/tpm2-pkcs11/branch/master/graph/badge.svg)](https://codecov.io/gh/tpm2-software/tpm2-pkcs11) [![Language grade: C/C++](https://img.shields.io/lgtm/grade/cpp/g/tpm2-software/tpm2-pkcs11.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/tpm2-software/tpm2-pkcs11/context:cpp) [![Language grade: Python](https://img.shields.io/lgtm/grade/python/g/tpm2-software/tpm2-pkcs11.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/tpm2-software/tpm2-pkcs11/context:python) [![Coverity Scan](src="https://img.shields.io/coverity/scan/16909.svg")](https://scan.coverity.com/projects/tpm2-pkcs11) PKCS #11 is a Public-Key Cryptography Standard that defines a standard method to access cryptographic services from tokens/ devices such as hardware security modules (HSM), smart cards, etc. In this project we intend to use a TPM2 device as the cryptographic token. # Getting Started * [Building](/docs/BUILDING.md) - How to get it to build * [Initializing](/docs/INITIALIZING.md) - How to configure it * [Installing](/docs/INSTALL.md) - How to install it # Example Usages * [SSH](/docs/SSH.md) - How to configure and use it with SSH. * [P11](/docs/P11.md) - How to configure and use it with various P11 components. * [PKCS11-TOOL](/docs/PKCS11_TOOL.md) - How to configure and use it with OpenSC's pkcs11-tool. * [EAP-TLS](/docs/EAP-TLS.md) - How to configure and use it for Wi-Fi authentication using EAP-TLS. * [INTEROPERABILITY](/docs/INTEROPERABILITY.md) - Configuration details for interoperability with [tss2-engine](https://github.com/tpm2-software/tpm2-tss-engine) and [tpm2-tools](https://github.com/tpm2-software/tpm2-tools) projects. Note, the *tpm2-tools* interoperability could cover other projects that use raw *marshalled* TPM 2.0 structures. # Advanced Knowledge * [Architecture](/docs/ARCHITECTURE.md) - Internal Overview * [DB Upgrades](/docs/DB_UPGRADE.md) - What happens on a DB Version Upgrade * [Release Process](/docs/RELEASE.md) - How releases are conducted tpm2-pkcs11-1.9.1/docs/SSH.md0000644000175100017510000000730514535673717011125 # SSH Configuration Below, will be examples and discussion on how to configure SSH with tpm2-pkcs11 to ssh to the local host. The example described here could be extended for remote ssh login as well. We assume a machine configured in such a state where a user can ssh locally and login with a password prompt, ala: ```sh ssh user@127.0.0.1 user@127.0.0.1's password: Last login: Thu Sep 6 12:23:07 2018 from 127.0.0.1 ``` works. **Thus we assume a working ssh server, client and ssh-keygen services and utilities are present.** # Step 1 - Initializing a Store Start by reading the document on initialization [here](INITIALIZING.md). Only brief commands will be provided here, so a basic understanding of the initialization process is paramount. We start by creating a tpm2-pkcs11 *store* and set up an RSA2048 key that SSH can used. **Note**: Most SSH configurations allow RSA2048 keys to be used, but this can be turned off in the config, but this is quite rare. ```bash tpm2_ptool.py init --path=~/tmp tpm2_ptool.py addtoken --pid=1 --label=label --sopin=mysopin --userpin=myuserpin --path=~/tmp tpm2_ptool.py addkey --algorithm=rsa2048 --label=label --userpin=myuserpin --path=~/tmp ``` # Step 2 - Exporting the Store Since we didn't use the default store location by setting `--path` in the `tpm2-ptool` tool, we must export the store so the library can find it. We do this via: ```sh export TPM2_PKCS11_STORE=$HOME/tmp ``` **Note**: The tpm2-pkcs11.so library *WILL NOT EXPAND `~`* and thus you have to use something the shell will expand, like `$HOME`. # Step 3 - Generating the SSH key public portion The next step will use `ssh-keygen` command to generate the public portion of an ssh key. The command is slightly complicated as we use tee to redirect the output to both a file called `my.pub` and to *stdout* for viewing. Note: You may need to update the path to the tpm2-pkcs11 shared object below. ```bash ssh-keygen -D ./src/.libs/libtpm2_pkcs11.so | tee my.pub ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0CTmUAAB8jfNNHrw99m7K3U/+qbV1pAb7es3L+COqDh4eDqqekCm8gKHV4PFM9nW7z6CEfqzpUxYi5VvRFdYaU460bhye7NJbE0t9wjOirWtQbI6XMCKFiv/v8ThAtROT+KKYso7BK2A6spkCQwcHoaQU72C1vGouqtP5l/XRIYydp3P1wUdgQDZ8FoGhdH5dL3KnRpKR2d301GcbxMxKg5yhc/mTNkv1ZoLIcwMY7juAjzin/BhcYIDSz3sJ9C2VsX8FZXmbEo3olYU4ZfBZ+45KJ81MtWgrkXSzetwUfiH6eeTqNfqGT2IpSwDLFHTX2TsJyFDcM7Q+QR44lEU/ ``` # Step 4 - Configuring SSH to Accept the Key Now that the public portion of the key is in ssh format and located in file `my.pub` we can add this to the `authorized_keys2` file for the user: ```bash cat my.pub >> ~/.ssh/authorized_keys2 ``` SSH consults this file and trusts private keys corresponding with the public entries. # Step 5 - Ensuring the Library is in a Good Path Using the ssh client, we login. Note that ssh won't accept pkcs11 libraries outside of "trusted" locations. So we copy the PKCS\#11 library to a trusted location. Thus you can either do `sudo make install` to move the binary to a trusted location or just do it manually. Manual Method: ```sh sudo cp src/.libs/libtpm2_pkcs11.so /usr/local/lib/libtpm2_pkcs11.so ``` On Ubuntu 16.04 with no configuration options specified to alter installation locations, they end up in the same location for both the *manual method* and `sudo make install` method. # Step 6 - Logging In via SSH To log in, one used the `ssh` client application and specifies the path to the PKCS11 library via the `-I` option. It will prompt for the user PIN, which in the example is set to `myuserpin`. ```bash ssh -I /usr/local/lib/libtpm2_pkcs11.so 127.0.0.1 Enter PIN for 'label': myuserpin Last login: Fri Sep 21 13:28:31 2018 from 127.0.0.1 ``` You are now logged in with a key resident in the TPM being exported via the tpm2-pkcs11 library. tpm2-pkcs11-1.9.1/docs/SSH_HOSTKEYS.md0000644000175100017510000000300214535673717012444 # SSH host keys configuration This example will go through using a TPM 2.0 for the OpenSSH sshd host keys. As the SSH daemon supports using the SSH agent protocol we will use tpm2-pkcs11 with an ssh-agent. # Create a store and key The PIN is currently needed as ssh-agent doesn't seem to support an empty string PIN (just no PIN at all) ``` # mkdir /tmp/teststore-pkcs11 # tpm2_ptool init --path=/tmp/teststore-pkcs11 # tpm2_ptool addtoken --pid=1 --label=hostkey --sopin="mysopin" --userpin="myuserpin" --path=/tmp/teststore-pkcs11 # tpm2_ptool addkey --algorithm=rsa2048 --label=hostkey --userpin="myuserpin" --path=/tmp/teststore-pkcs11 ``` # Run a ssh agent The ssh agent should have a specific path for its socket, lets use /tmp/hostagent.sock for this example. ``` # export TPM2_PKCS11_STORE=/tmp/teststore-pkcs11 # ssh-agent -a /tmp/hostagent.sock ``` # Add the token to the agent ``` # SSH_AUTH_SOCK=/tmp/hostagent.sock ssh-add -s /usr/lib/x86_64-linux-gnu/libtpm2_pkcs11.so ``` # Get the public key in SSH format ``` # SSH_AUTH_SOCK=/tmp/hostagent.sock ssh-add -L ssh-rsa .... ``` Where `....` is the public key in ssh key format. Store the whole output from ssh-add -L in `/etc/ssh/ssh_hostkey_rsa.pub` as sshd requires the public key outside the agent. # Configure sshd Add the following to /etc/ssh/sshd_config ``` HostKey /etc/ssh/ssh_hostkey_rsa.pub HostKeyAgent /tmp/hostagent.sock ``` (Re)start sshd and run: ``` # ssh-keyscan localhost ``` You should now be able to see the same key as you saw with `ssh-add -L`. tpm2-pkcs11-1.9.1/docs/coding_standard_c.txt0000644000175100017510000002274114535673717014335 # Coding Standard For tpm2-pkcs11 ## Golden rule Code should hold as close to the C99 standard as possible with the exception that GCC specific extensions are generally accepted. The code must compile without warnings (for the primary target compiler) if the compiler is instructed to report all warnings. If some warning is unavoidable, the offensive line must be documented as to why it can not be changed to remove the warning. [1] It may also be possible to suppress specific warnings dependent on compiler options and this is acceptable but could also be dangerous if the suppression has too large a scope. ## Commenting There are four acceptable commenting styles: block, critical-line, next-line, and line. Block comments indicate many lines of code below are being covered by the comment. These are useful as file, function, algorithmic, or multi-line equation level comments. Next-line comments apply only to the line of code immediately beneath them. Critical-line comments are equivalent to next-liners, but they are formatted like block comments to indicate the line of code following (or the comment itself) is more important than normal. Each of these three comments are formatted so that the initial "/*" is left with the code/scope to which it applies. Line comments apply to the line on which they appear, always to the right of all code on the line. Line comments are preferred over next-liners because they do not interrupt the vertical flow of code... use the next-line style if the line of code would exceed 80 characters when a line comment is added. Next-line and line comments should be used sparingly... since they are rarely complete sentences, it is often better in the long run to rewrite the line of code to be understandable alone or in the context of a block comment. ```c /* * This block comment could apply to some function and describe its inner * workings. Notice these sentences have traditional capitalization and * punctuation... that's because it has to be read in a way completely * unlike the Post-It style content of next-line and line comments. */ /* * This line or comment is important... at least more than usual */ /* the next line is regular, but needs a comment */ // This is also acceptable for a line comment. // This is not an acceptable block comment. // These read very imbalanced. // Don't do this. ``` The size of the comment should be proportional to the size of the code that it refers to. Consequently, properties of code that can fit within a single 24-line screen should not be commented unless they are not obvious. By contrast, even obvious global properties and invariants may need to be made explicit. This doesn't have to be through comments, though. The assert() macro is an excellent executable comment. [2] All source files and functions require leading block comments for consistency. ## Naming conventions Variable names should clearly imply what their values mean... do not rely on the types of variables to do this. Multiple word names are descriptive and most easily read if words are separated with the underscore character, **_**. DoNotUseCamelBackStyle because ItIsNotAs easy to read, especially when actual whitespace IsAddedFor syntactical purposes. It is common practice to keep variable and function names completely lowercase. Constants are usually lowercase as well, but some groups prefer the standard of all-caps so they have the eye feel of older `#define` macros. ```c unsigned int table_index = find_index(jacket_table, "color", COLOR_RED); ``` Boolean variables should be named to reflect the true condition... even if the variable is used to detect false conditions. Boolean variables should be declared as type bool using . ```c int last_item = 0; while(!last_item) { /* ... */ } int char_found = is_alpha(c); ``` Single letter variable names should be avoided. Exceptions are: "i","j", and "k" are loop counters or temporary array indexes "m" and "n" are row and column indexes for multidimensional arrays "c" and "s" are temporary/parameter characters or strings "r", "g", "b", and "a" are red, green, blue, and alpha levels, but only when they are used together "x", "y", and "z" are coordinate values Abbreviated words in variable names should be avoided. Exceptions are: "char" = character "col" = column. Typically there is also "row" so it is not confused with color "cnt" = count "pos" = position "rem" = remainder Function names should follow the naming conventions of variables and clearly imply not only what the function does, but also the nature of what it returns (if anything). Functions that return boolean integers should be named to reflect the true condition... even if they are created to detect false conditions. Functions should never be hidden in conditional statements, with the exception of loops where it makes the code simpler. ```c bool is_number_prime = is_prime(i); if(is_number_prime) { /* ... */ } while(!labeled_correctly(sample[i])) { /* ... */ } ``` A function that is exported for use in multiple source files should be prefixed with the source file (or object module) name it was defined in (not declared... infinite declarations are allowed, but only one definition). For example, the file list.c may contain the implementation of a dynamic list ADT including an exported method for creating a list instance and an internal (static) method for overflow checking. The first function might be named "list_create", and the second, "is_overflowed". A function used only within its definition source file should be declared static (as should all variables global to only one file's scope), have no prefix, and must not be declared in any header files. A function used externally from its definition source file should be declared extern in the source's associated header file. ## Files Typically, every header file has the same base filename as an associated source file. Each header file is bound by conditional compilation commands using an all caps and underscored variant of the complete filename. Header files should never define functions or variables. ```c /* * File: basic_file.h * Header file block comment */ #ifndef BASIC_FILE_H #define BASIC_FILE_H /* standard #includes */ /* project #includes */ /* type/constant definitions */ /* extern variable declarations */ /* extern function declarations */ #endif /* BASIC_FILE_H */ /* * File: basic_file.c * Source file block comment... */ /* standard #includes */ /* project #includes */ #include "basic_file.h" /* externalized variable definitions */ /* static variables (locally global) */ /* static function declarations */ /* externalized function definitions */ /* static function definitions */ ``` Header files should only `#include` what is necessary to allow a file that includes it to compile. Associated source files will always `#include` the header of the same name, but should `#include` files whose resources are used within the source even if they are already included in that header. This provides a complete context for readers of the source file... i.e., they don't have to search through headers to determine where a resource came from. For example, consider a header and source that use FILE pointers declared in stdio.h. The header must `#include ` to ensure files that include it will be able to compile. The corresponding source `#includes` the associated header and therefore receives the benefit of stdio.h automatically. The source would be unnerving if the `FILE` type was used and `stdio.h` was not `#included`. ## Variable Scope and types Variables should be declared and scoped to the smallest scope of use. ```c /* This should be avoided */ void foo() { unsigned i; do_something(); for(i=0; i < 100; i++) { do_more(i); } } /* Proper variable scope */ void foo() { do_something(); unsigned i; for(i=0; i < 100; i++) { do_more(i); } } ``` This promotes descriptive variable names as well as dissuading variable re-use when not proper. Also, it promotes a locality, where one can identify the variable and it's corresponding usage in code. Variables should only be of a signed type if something should ever be negative. A common, incorrect use, is to declare loop indices as int instead of unsigned. ## Formatting Always use space characters, 4 spaces per level of indentation. Block statements encapsulated with braces should place the opening brace on the same line after the end of the conditional statement or function parameter list, and the closing brace at the same column position as the beginning of the conditional statement or function return parameter, on the line immediately after the end of the block. ```c if(some_int > 0) { statement1; statement2; } void some_function(arg1, arg2) { statement1; statement2; } ``` Conditional statements (such as if, else, while, for, switch, etc) should always be followed by such block statements, even if they contain only one line statement. These formatting conditions are contrary to Kernighan and Ritchie's "one true brace style". [3] Line Length should not exceed 80 characters and should be split on the nearest whitespace or delimiter character. ## Formatters Code formatters can be found under misc/formatters References 1: Alan Bridger, Mick Brooks, and Jim Pisano, C Coding Standards, 2001, http://www.alma.nrao.edu/development/computing/docs/joint/0009/2001-02-28.pdf 2: Jim Larson, Standards and Style for Coding in ANSI C, 1996, http://www.jetcafe.org/jim/c-style.html 3: Brian Kernighan, Dennis Ritchie, The C Programming Language, 1988 tpm2-pkcs11-1.9.1/docs/illustrations/0000755000175100017510000000000014535673717013135 5tpm2-pkcs11-1.9.1/docs/illustrations/cisco_e1500_wireless_config.jpg0000644000175100017510000012234514535673717020742 ÿØÿàJFIF``ÿÛC    $.' ",#(7),01444'9=82<.342ÿÛC  2!!22222222222222222222222222222222222222222222222222ÿÀ×2"ÿÄ ÿĵ}!1AQa"q2‘¡#B±ÁRÑð$3br‚ %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzƒ„…†‡ˆ‰Š’“”•–—˜™š¢£¤¥¦§¨©ª²³´µ¶·¸¹ºÂÃÄÅÆÇÈÉÊÒÓÔÕÖרÙÚáâãäåæçèéêñòóôõö÷øùúÿÄ ÿĵw!1AQaq"2B‘¡±Á #3RðbrÑ $4á%ñ&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz‚ƒ„…†‡ˆ‰Š’“”•–—˜™š¢£¤¥¦§¨©ª²³´µ¶·¸¹ºÂÃÄÅÆÇÈÉÊÒÓÔÕÖרÙÚâãäåæçèéêòóôõö÷øùúÿÚ ?ô_ˆÞ!Õ4ìßì˯#Îó|ÏÝ«g1÷õ5ÂÿÂÂñOý?ò^/þ&º‹ßóÿ¶ÿûN¼Æ½Ìr£(¦õéæxت³f”ŸôŽŸþŠè)ÿ’ññ4ÂÂñOý?ò^/þ&¹Š+§ØRþU÷#ŸÛUþg÷?ü,/ÿÐSÿ%âÿâhÿ……âŸú ä¼_üMsQì)*û{j¿Ìþó§ÿ……âŸú ä¼_üMð°¼SÿAOü—‹ÿ‰®b·¬ü2÷~¼×EʪÛ8_'fwsž:úTÊ•ï÷•¥´ŸÞYÿ……âŸú ä¼_üMð°¼SÿAOü—‹ÿ‰®bНaKùW܉öÕ™ýçOÿ Å?ôÿÉx¿øš?áax§þ‚Ÿù/ÿ\Å[Òì[SÕ-lUÂ4ò,aˆÎ2zÐèÑJî+î­U»)?¼Üÿ……âŸú ä¼_üMð°¼SÿAOü—‹ÿ‰¬¿hí ë3éí0›ÊÆ$ ·p#=2qY”£FŒ’j+î U«g'÷?ü,/ÿÐSÿ%âÿâhÿ……âŸú ä¼_üMsSö¿•}È^Ú¯ó?¼éÿáax§þ‚Ÿù/ÿGü,/ÿÐSÿ%âÿâk˜¢aKùW܃ÛUþg÷?ü,/ÿÐSÿ%âÿâhÿ……âŸú ä¼_üMsQì)*û{j¿Ìþó§ÿ……âŸú ä¼_üMð°¼SÿAOü—‹ÿ‰®bŠ=…/å_rmWùŸÞtÿð°¼SÿAOü—‹ÿ‰£þŠè)ÿ’ññ5ÌQG°¥ü«îAíªÿ3ûΟþŠè)ÿ’ññ4ÂÂñOý?ò^/þ&¹Š(ö¿•}È=µ_æyÓÿÂÂñOý?ò^/þ&øX^)ÿ §þKÅÿÄ×1E—ò¯¹¶«üÏï:øX^)ÿ §þKÅÿÄÑÿ Å?ôÿÉx¿øšæ(£ØRþU÷ öÕ™ýçOÿ Å?ôÿÉx¿øš?áax§þ‚Ÿù/ÿ\Å{ _ʾäÚ¯ó?¼éÿáax§þ‚Ÿù/ÿGü,/ÿÐSÿ%âÿâk˜¢aKùW܃ÛUþg÷?ü,/ÿÐSÿ%âÿâhÿ……âŸú ä¼_üMsQì)*û{j¿Ìþó§ÿ……âŸú ä¼_üMð°¼SÿAOü—‹ÿ‰®bŠ=…/å_rmWùŸÞtÿð°¼SÿAOü—‹ÿ‰£þŠè)ÿ’ññ5ÌQG°¥ü«îAíªÿ3ûΟþŠè)ÿ’ññ4ÂÂñOý?ò^/þ&¹Š(ö¿•}È=µ_æyÓÿÂÂñOý?ò^/þ&øX^)ÿ §þKÅÿÄ×1E—ò¯¹¶«üÏï:øX^)ÿ §þKÅÿÄÑÿ Å?ôÿÉx¿øšæ(£ØRþU÷ öÕ™ýçOÿ Å?ôÿÉx¿øš?áax§þ‚Ÿù/ÿ\Å{ _ʾäÚ¯ó?¼éÿáax§þ‚Ÿù/ÿGü,/ÿÐSÿ%âÿâk˜¢aKùW܃ÛUþg÷?ü,/ÿÐSÿ%âÿâhÿ……âŸú ä¼_üMsQì)*û{j¿Ìþó§ÿ……âŸú ä¼_üMð°¼SÿAOü—‹ÿ‰®bŠ=…/å_rmWùŸÞtÿð°¼SÿAOü—‹ÿ‰£þŠè)ÿ’ññ5ÌQG°¥ü«îAíªÿ3ûΟþŠè)ÿ’ññ4ÂÂñOý?ò^/þ&¹Š(ö¿•}È=µ_æyÓÿÂÂñOý?ò^/þ&øX^)ÿ §þKÅÿÄ×1E—ò¯¹¶«üÏï:øX^)ÿ §þKÅÿÄÑÿ Å?ôÿÉx¿øšæ(£ØRþU÷ öÕ™ýçOÿ Å?ôÿÉx¿øš?áax§þ‚Ÿù/ÿ\Å{ _ʾäÚ¯ó?¼éÿáax§þ‚Ÿù/ÿGü,/ÿÐSÿ%âÿâk˜¢aKùW܃ÛUþg÷?ü,/ÿÐSÿ%âÿâhÿ……âŸú ä¼_üMsQì)*û{j¿Ìþó§ÿ……âŸú ä¼_üMð°¼SÿAOü—‹ÿ‰®bŠ=…/å_rmWùŸÞtÿð°¼SÿAOü—‹ÿ‰£þŠè)ÿ’ññ5ÌQG°¥ü«îAíªÿ3ûΟþŠè)ÿ’ññ4ÂÂñOý?ò^/þ&¹Š(ö¿•}È=µ_æyÓÿÂÂñOý?ò^/þ&øX^)ÿ §þKÅÿÄ×1E—ò¯¹¶«üÏï:øX^)ÿ §þKÅÿÄÑÿ Å?ôÿÉx¿øšæ(£ØRþU÷ öÕ™ýçOÿ Å?ôÿÉx¿øš?áax§þ‚Ÿù/ÿ\Å{ _ʾäÚ¯ó?¼éÿáax§þ‚Ÿù/ÿGü,/ÿÐSÿ%âÿâk˜¢aKùW܃ÛUþg÷?ü,/ÿÐSÿ%âÿâhÿ……âŸú ä¼_üMsQì)*û{j¿Ìþó§ÿ……âŸú ä¼_üMð°¼SÿAOü—‹ÿ‰®bŠ=…/å_rmWùŸÞtÿð°¼SÿAOü—‹ÿ‰£þŠè)ÿ’ññ5ÌQG°¥ü«îAíªÿ3ûΟþŠè)ÿ’ññ4ÂÂñOý?ò^/þ&¹Š(ö¿•}È=µ_æyÓÿÂÂñOý?ò^/þ&øX^)ÿ §þKÅÿÄ×1E—ò¯¹¶«üÏï:øX^)ÿ §þKÅÿÄÑÿ Å?ôÿÉx¿øšæ(£ØRþU÷ öÕ™ýçOÿ Å?ôÿÉx¿øš?áax§þ‚Ÿù/ÿ\Å{ _ʾäÚ¯ó?¼éÿáax§þ‚Ÿù/ÿGü,/ÿÐSÿ%âÿâk˜¢aKùW܃ÛUþg÷?ü,/ÿÐSÿ%âÿâhÿ……âŸú ä¼_üMsQì)*û{j¿Ìþó§ÿ……âŸú ä¼_üMu¼S­kšôöÚç Ú´|¤\0eÊØšòÚî¾ÈÓsÿ^Oÿ¡¥a‰£MQ“Q_q¶­GV)Éýç°ÑEàžÙæ_¿æ ÿmÿöyzwÅïùƒÛý§^c_Aþ~™áã?/—äQEuœÁSKiq1K4G£1»)DZïP×WâOXêžÐì-Œ†{HUfܸ… ׿JÎR’’In\bšm½‚ïöPü?´ÖÉö¹&ÚÄ·ÊA$c…jèÿòI5úëÿ³-eÞx†Æo‡¶š2>ÙÛ˜àO9ükWGÿ’I¬×_ý™k’|ü¾÷ó~:¡ËÍîÿ/èdøSöZΑ¬ÜÝ<ËXwE±±ƒ‚r}zW5miqy!ŽÚ &p¥ŠÆ¥ˆ©âº xŠÇFÑõ«k³ ’ê±\‚v‘ƒéÔS<¯ØøV¸¸¿2䀠(»¹È8ý+W*‘sv¾Ö2å§%{w)ø?H¶ÖüKocy¿Éef`§àŒÕ6Î;ˆÖö‘c†ü"îäà7„µ›]ÅQj{ſΠQ’7Ž*m:î;ÿˆö÷pîò¦¿›¸8-Åçæ—n_Ä!ËË÷&ñÜb_Ï$hÔ‘îGãŸÙø{U·‚ËÌòä„9sÎqRxêAŽç‘³„hØãØ gŽõû/j¶óØ—1ÇB]qÎI©¥Ïû»mmJ«ËûËïs›žÒâÙ"yà’%•wF]H =G­C]_‹üAc­iÚ,6†Mö°²Êq‚BŒ{ýÓ\¥tS”¥ÉY˜TŠŒ­tQEh@QEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEWuð£þF›Ÿúòý +…®ëáGü7?õäÿúW>/ø27Ã'°ÑEó‡¼y—ÅïùƒÛý§^c^ñ{þ`ßößÿiט×Ð`ŸæxxÏãKåùQ]g0QE>Wž4c…fý3H ;ú¾«–ÆÂi£o …üÍ"Yk vú"%ÊË#üÖ¡ˆ Àg$t/ø27Ã'°ÑEó‡¼y—ÅïùƒÛý§^c^›ñxãûþÛÿí:óQ_Aþ~™áã?/—ä-™¢ŒQ]g0´RdzŠ2=Ewz'ÄY-tõ±Õ­ö(À±PN@sÁúÖBø™ƃ^ØE}Âé·ÍäzŠ2=E`°ôÓm-Í]z$ÞÇDž"ƒþ5¹¬ÖXdvc€À‚1ߊÕÖüwΑ&›¤iñØÁ0ÄÄ Žàcùבê(ÈõÝ m¦ÖÀ«M&“Üé|-ã ¿ ³ÂOe!ËÂݨ§ø³ÄöÚø¶K;k% “O¥rù¢ŒQG±‡?´¶¢öÓä侇}£|H{}=-5kAx"FûA¦°r=E¢”pôã.tµ«Ô”y[зu=´Ööë °ŠTR%p~ùã~U¤ÈõdzŠÙ+7qh¤ÈõdzŠ`-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èõ´RdzŠ2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èõ´RdzŠ2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èõ´RdzŠ2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èõ´RdzŠ2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èõ´RdzŠ2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èõ´RdzŠ2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èõ´RdzŠ2=E-™¢ŒQ@ E&G¨£#ÔPÑI‘ê(Èõ´RdzŠ2=E-™¢ŒQ@ E&G¨£#ÔPÔpè1+IÜ4²ä Håb0˜Éc•qz³2é ))ÏåHÅšv'"5Ú8oïùb¹ÌQFG¨¬Ý?2ÔüŽ“ìÚ,óùCìð+;(LHQµ['-ë¹QNK]®C/Ùü¦ŒLQ¦'næ'ß^Tß<ô5ÌäzŠ2=E/fÿ™ZÖ:i¢-ËCû‡Ù*ÞvD‡Ì#“æ(û cuÏ5—i¤×·V{£Ž‰M1Ë årÞã öçÚ²ò=E¢…ºƒš}¶H¼=3[º¤~Q(¤ïx8;†üò£9ÛלÕKh´Ö†Òr-íÜÈ79ÜAÏC¿*T}Ms¹¢ŒQKÙ;[˜~Ñ^ö:Co¤$9KfÚ™‡÷ä™vIÞpwm㎤sYZœp$£ìɉ€ ¤›ŽJ)+ÔàN?N8¡‘ê(ÈõJ ;Ü—+«X×½·¦Ø:0â&Þ#š0ÜFàs^{{Tú’[IdÂf0ÈÖûùa }øç9ÛÃrNqX9¢ŒQG'˜syPû—&>Á»hû|¿ùæsæ{ç½aj¾Oöƒù>^Ý©»ÊÆÝûFìcŒnÏN=*–G¨£#ÔQYÞá)ÝZÂ×uð£þF›Ÿúòý +„ÈõÝü(#þ›žåÉÿô4¬ñ_Á‘¦øÑ=†Š(¯œ=ãʾ3!oìL6ÜyÿûN¼¯Êùè*õŒóÿ¶ÿûN¼¶¶†"¬,^†2¡NošKR/)ÿç¡ü©<—ÿž§ò©¨«úÝoæü‰ú­.Ä>KÏCùQä·üô?•ME[­üß}V—b/%ÿç¡ü¨ò_þzŸÊ¥¢—Öë7äU¥Ø‹Êùê*O%¿ç¡üªj)ýn·ó~AõZ]ˆ¼§ÿž§ò¤ò[þzʦ¢—Öë7äU¥Ø‡Éoùê*<—ÿž‡ò©¨§õºßÍùÕiv!ò_þzÊ%¿ç¡üªj)}n·ó~AõZ]ˆ¼–ÿž‡ò£Êùè*–Š>·[ù¿!ýV—b%¿ç¡ü¨ò_þzʦ¢­ÖþoÈ_U¥Ø‡Éoùè*p·Œ‰åRTñýÁ]XJ•+MÆRéåþG>*:PRŒzùÿ™SìÒÿ|Ñöy¼ß§øÕÚ+ÑöùßáþG¶_Ê¿ó)}ž_ï7éþ4}ž_ï7éþ5vŠ=ƒþwø{eü«ñÿ2—Ù¥þó~ŸãGÙåþó~ŸãWh£Ø?ç‡ù¶_Ê¿ó)}ž_ï7éþ4}ž_ï7éþ5vŠ=ƒþwø{eü«ñÿ2—Ùåþñý?ƳKýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû<¿ÞoÓüjí{üïðÿ öËùWãþe/³Kýæý?ƳËýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû<¿ÞoÓüjí{üÏðÿ öËùWãþe/³Ëýæý?ƳËýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû<¿ÞoÓüjí{üïðÿ öËùWãþe/³Ëýæý?ƳËýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû<¿ÞoÓüjí{üïðÿ öËùWãþe/³Ëýæý?ƳËýæý?Æ®ÑG°Ìÿòl¿•~?æRû<¿ÞoÓühû4¿ÞoÓüjí{üïðÿ öËùWãþe/³Ëýæý?ƳKýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû4¿ÞoÓüjí{üïðÿ öËùWãþe/³Ëýæý?ƳËýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû<¿ÞoÓüjí{üïðÿ öËùWãþe/³Ëýæý?ƳKýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû<¿ÞoÓüjí{üïðÿ öËùWãþe/³Ëýæý?ƳKýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû<¿ÞoÓüjí{üïðÿ öËùWãþe/³Ëýæý?ƳËýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû4¿ÞoÓüjí{üïðÿ öËùWãþe/³Ëýæý?ƳËýæý?Æ®ÑG°Îÿòl¿•~?æRû4¿ÞoÓühû4¿ÞoÓüjí{üïðÿ öËùWãþe/³Ëýæý?ƳËýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû<¿ÞoÓüjí{üïðÿ öËùWãþe/³Kýæý?ƳKýæý?Æ®ÑG°Îÿòl¿•~?æRû<¿ÞoÓühû<¿ÞoÓüjí{üïðÿ öËùWãþe/³Ëýæý?ƳËýæý?Æ®ÑG°Îÿòl¿•~?æSû4¿ß4}š_ïš¹EÁÿ;ü?È=²þUøÿ™OìÒÿ|Ñöi¾jå{üïðÿ öËùWãþe?³KýóGÙ¥þù«”Qìó¿ÃüƒÛ/å_ù”L. ‡ò¤ò[þzʬI÷Í6¼Š¸š°›Š–ÏÈõiáéJ Mn¼È¼§ÿž§ò£Êùê*–ŠÏëu¿›ò+ê´»yOÿ=åIä·üô?•ME[­üß}V—b%¿ç¡ü©|§ÿž§ò©h£ëu¿›òªÒìEä·üô?•SÿÏSùT´QõºßÍùÕiv!ò[þzʽál¾,º%óþ‚ý¿é¤uÂ×}ðþF»¯úñý:RÄÕ’³z=8»¤{5QX[ñþ`¿ößÿiזש|cÿ˜/ý·ÿÚuå´QEQEQEQEQEQEQEQEQETñýÁPTñýÁ^†[üWéú£‡0þõÿ1ÔQE{gQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEkéúT~Õõ A-Ÿ•å…#iÞÄñQØé‹u¢jwÇ;­ @|ø;ÓiÏæ1ïSèÚݶ§j7v wç—»dþQ]„ž»O­9µË8´íFÆÇM’¯Yßsæ(ÄçîŒç8öÅ`ùîÕº¯»Kþ¦«’É·Ñþ¶ý /¼!}`—¥îlå{0­4QHK…la°@㟯µYÖ¼-–©$6²MÂáþyÙ€'n0 äœÆ¡»ñWÚ¯µ‹Ÿ±mþÒaÛæçËÆÞsŽ~ï·ZŸSñŸö»Ì/4ÿ6#4s[£NsP@ AŒk5íî¯óü?àš?cgoër©ð•Ñ¿QßXIpw-d`Û”d® ƒÎ0}i–^¿½µ‚áe·Ž9£’o›(ˆB– )8Éã5¤¾&›TºÓ­­ÿÑÚÞçí q¨^ù…0>îö íÉ4Ý[Ä–ƒÅ2ÜZÃ#ÙÁ‘lmî@9,¬=I=AàÐ¥[n¿×çú0奿OëòýNròËìW~A¸‚q€D>å þ û ušç…´ý%î’-/^™!pº ¾WÝÎOÉÐwçµsÚæ´u­E.š/dkÌûñÝ›'ß©«xŸMÕî'¸ŸHºY¥\ºÚ.Ïj©{WËó¿áæ…fœ¾Vþµ*Ë£éÇ‘êvÓÜIuö¥·2…A”,@N:g?…mê^·Šõ-,­ïJµÄp›·¹‰Ñwc’Š¡‡|g‹½¦§‡N“ý“1Ì‚s)»ë(]¹Û³§¶ž/Eaÿdé1YM4‘É3yÌêvÀ*Ÿº3îjd«_Nÿåçêt­¯oóòô/Cá3P‘%±¹»KX®e·¹ó¶–ù¾åÀ:•‡­ivv¶Z~¡§¼æÖõ_ 9Ñ‘°A *Ñ3óÂltÄ‚<“ÏL_Íg]­Î À¬­_WMFK[kO²ÙÚ+,Q ‡,rĶr}¨¦«s.m¿áÿàn—+åßþß­Ì9>ù¦Ó¤ûæ›^%âËÕþg¯GøQôAEVF§e®éV¶|m‘c嵤25Á¾>pfPI™=O÷i †‚º®–ïo½œúkNRâwÚÒ|áw0ÁêîãéX“x—S¸·M%´ˆ#Ö–ÚÝ·==êGñ^°ò@ÿh…Z)ËX— s•áFW“Áâ›þ¿[^GC‡¬bd½Óí¤K»«kxVÖy|µIŸ1KÄñѸëÅV¹Ð4ë}.kq k¨ìô]ù‡’&Ù³oLcÛ9¬DñF³Ì· zD’… ûµÀÚ0»F0¸ìF1PoQ:aÓËSüFqØÝŒã<ã8Í'åý[‚ó3袊+¾øGÿ#]×ýx¿þ‡p5ß|#ÿ‘®ëþ¼_ÿCŽ€=šŠ( -øÇÿ0_ûoÿ´ëËkÔ¾1ÿÌþÛÿí:òÚ(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š*d`dІ¶,|Akcg´šd:g25¼lNI=HÏzèÃVtgÌŒkÑUcÊÙŸ¹¼?:7/÷‡ç[ð•ØÿÐÛÿaÿâhÿ„®Çþ€Ößø ÿ]¿Ú2ìŽOìø÷1÷/÷‡çFåþðüëcþ»ú[à,?üMð•ØÿÐÛÿaÿâhþÑ—dÙñîcî_ïÎËýáùÖÇü%v?ô¶ÿÀXøš?á+±ÿ 5·þÃÿÄÑý£.È?³ãÜÇܿޗûÃó­øJìè mÿ€°ÿñ4ÂWcÿ@koü‡ÿ‰£ûF]gǹ¹¼?:7/÷‡ç[ð•ØÿÐÛÿaÿâhÿ„®Çþ€Ößø ÿGöŒ» þÏsrÿx~tn_ïέ꤯—äÙEmåç;"DÝœt ôïT¶Jé§^µH©$Žj”iB\­±Û—ûÃó£rÿx~t݃҃үÚWþTO%ìvåþðüèÜ¿Þ7`ô£`ô£ÚWþT”{±Û—ûÃó£rÿx~t݃҃Òi_ùPrQîÇn_ïÎËýáùÓvJ6J=¥åAÉG»¹¼?:7/÷‡çMØ=(Ø=(ö•ÿ•%ìvåþðüèÜ¿ÞlÂWcÿ@koü‡ÿ‰£þ»ú[à,?üMqÿh˲:ÿ³ãÜÇܿޗûÃó­øJìè mÿ€°ÿñ4ÂWcÿ@koü‡ÿ‰£ûF]gǹ¹¼?:7/÷‡ç[ð•ØÿÐÛÿaÿâhÿ„®Çþ€Ößø ÿGöŒ» þÏsrÿx~tn_ïζ?á+±ÿ 5·þÃÿÄÑÿ ]ý­¿ðþ&ívAýŸæ>åþðüèÜ¿ÞlÂWcÿ@koü‡ÿ‰£þ»ú[à,?üMÚ2ìƒû>=Ì}Ëýáùѹ¼?:Øÿ„®Çþ€Ößø ÿGü%v?ô¶ÿÀXøš?´eÙö|{˜û—ûÃó£rÿx~u±ÿ ]ý­¿ðþ&øJìè mÿ€°ÿñ4h˲ìø÷1÷/÷‡çFåþðüëcþ»ú[à,?üMð•ØÿÐÛÿaÿâhþÑ—dÙñîcî_ïÎËýáùÖÇü%v?ô¶ÿÀXøš?á+±ÿ 5·þÃÿÄÑý£.È?³ãÜÇܿޗûÃó­øJìè mÿ€°ÿñ4ÂWcÿ@koü‡ÿ‰£ûF]gǹ¹¼?:7/÷‡ç[ð•ØÿÐÛÿaÿâhÿ„®Çþ€Ößø ÿGöŒ» þÏsrÿx~tn_ïζ?á+±ÿ 5·þÃÿÄÑÿ ]ý­¿ðþ&ívAýŸæ>åþðüèÜ¿ÞlÂWcÿ@koü‡ÿ‰£þ»ú[à,?üMÚ2ìƒû>=Ì}Ëýáùѹ¼?:Øÿ„®Çþ€Ößø ÿGü%v?ô¶ÿÀXøš?´eÙö|{˜û—ûÃó£rÿx~u±ÿ ]ý­¿ðþ&øJìè mÿ€°ÿñ4h˲ìø÷1÷/÷‡çFåþðüëcþ»ú[à,?üMð•ØÿÐÛÿaÿâhþÑ—dÙñîcî_ïÎËýáùÖÇü%v?ô¶ÿÀXøš?á+±ÿ 5·þÃÿÄÑý£.È?³ãÜÇܿޗûÃó­øJìè mÿ€°ÿñ4ÂWcÿ@koü‡ÿ‰£ûF]gǹ¹¼?:7/÷‡ç[ð•ØÿÐÛÿaÿâhÿ„®Çþ€Ößø ÿGöŒ» þÏsrÿx~tn_ïζ?á+±ÿ 5·þÃÿÄÑÿ ]ý­¿ðþ&ívAýŸæ>åþðüèÜ¿ÞlÂWcÿ@koü‡ÿ‰£þ»ú[à,?üMÚ2ìƒû>=Ì}Ëýáùѹ¼?:Øÿ„®Çþ€Ößø ÿGü%v?ô¶ÿÀXøš?´eÙö|{˜û—ûÃó£rÿx~u±ÿ ]ý­¿ðþ&øJìè mÿ€°ÿñ4h˲ìø÷0\åÎ)µÐÂWcÿ@koü‡ÿ‰£þ»ú[à,?üMyÓ|òrîwÂ<±QìsôWAÿ ]ý­¿ðþ&øJìè mÿ€°ÿñ5<¾eýÐÂWcÿ@koü‡ÿ‰£þ»ú[à,?üM¾`sôWAÿ ]ý­¿ðþ&øJìè mÿ€°ÿñ4rùÏÑ]ü%v?ô¶ÿÀXøš?á+±ÿ 5·þÃÿÄÑËæ?]÷Â?ùî¿ëÅÿô8ëþ»ú[à,?üMv? u»mKÄwçÃnËhͽ! Ðc*ïJÀzQH-øÇÿ0_ûoÿ´ëËkÔ¾1ÿÌþÛÿí:òÚ(¢Š+¡ðMž¨øžÞËTƒÎ‚ud{.*G¦?çªÖ›xÚ~©kxŸz VOÈæœm}E-´;_øSM¸Ö5ˆõ˜|Ë{9–Ùv_ŸhåHôýj ÃV^xõK:ßJG©v\¶NÞA‡ë]&DÒ¼û7f§¨%Ø#ÑOþ„üi|u,>»º·a»\ž'ãû¡ÿì¿­Kø›·ü–¯×_‘ÆjšeáÐü=¾ÛK†;¼¬2Û£,¯’e8ç¯l÷¨µê:9ºžÍœ:¢E¤É.ìrŠ@$dãë]±ÿ"ß¿ßþ«PxÂò;?б]\a‚[wnøPŸëT×½o6J~íüŒ¹|«E¯bבſ½ŠN ê¾»qÖ¬Mej>ÛÞ XEѾ(fòÆò¿7ºâ»MFMRvãYÓ¬¼:¶>_˜š­Á9a´ VÉ=¸ËÝK¿á5¼¥WM˜…ãÚ§}ü¿4>ß×C*ê³A4ö0\Ü'™¤ÓíšEö\3T´¿ _êiu#=µ”¯åÍ5äžZ#ÿw<ó^™©M{©ê6:¾‰a¡ÜÚy*ßn»?5» œ1 ǰõ®{C¼Ö¯åÖd´EÕ#žçtú{‡þz |qîOn”ú°èŽZóÂZ¥®£ef‹ ɽæÚ[yÇ(ï†ö÷«ž Ô--.n#¼Ó¯  ÍÄV·äˆ»†Jèuk ];]ЧÓ>Ç¢ë3ÛÉ>ø¡=·œg‘Ưêzdwš^§sâMÃM™"g†úÖut° ’sïIíQ­þãʨ¢Šb (¢€ (¢€ (¢€ )Pê;sÎ:×osáËP¤:†&¸HÅÒ\¿™¶Gï£~ÿîàq@=Õ éÇ~òjŸhÙ™ÓȹV BQŽzØÁ©?†<„»oµçìðÛKþ«¼Üq׌gñÇj®Áý~_æsôWA­øj=*ÞêX/ÏÙnþË0h|¼1‚>c‘Áô®~‹€QE$]êZŠ.õ-}øùþg‡Œþ4¾_QEhiÚYÔm/dŽ\MlŠëÜù€°SÎxÆEu6–¬æJûôWW?‚š ùíþÚdXÌ ÇÌ­#À€ÃwíÚ²G‡u6X]-ÁŽbÂ"d@X.rq»€6œ“ÀõäVq­NZ¦héMnŒª+e|7yöIÝ”ý¢9¡Š8Pó|ÀH*ÀàŽ;g9¨¿áÔüï/ÉýY“Ìóãòöƒ·;÷mëÇ^µ^ÒÉörìeÑZ#BÔŒSIä(X™‘·J€’£,–ÀôÍgSROf'·AEU­EWÊJQ]‹húmî*ÖÞâu·¤créqñ¸²7ÊÉ“ü#¦9¢ÀqÔWYqà¸à½û8Õà(JnBìgŒF¹$*¹$u;NzTSÃö÷™í54?j‚ÜSûÀy žÆ02­ P0h®²Ó–ëwÏ|¾¤Ö)@H}¬ ±!Á 9÷î/†¬eMŠÚîU»»‚i´_+:3 îÈÎÒ^Þ¸¢ú_úî;­{VÓ†—v–Æo2_%Q·”½yÆG5FQ@µám-5mr8e‚IíâFšhãÎçUÚ1ÎIÀãÖ´u/ Cµ©ïy,´ëh’äf2ò*9Wi ’ ÁÉìh”¢·_A²ŠÃí“jê±K$‘Ú²Û±YvrÝ×9¡ü¹«WŽÕmV}bÒ)åh„‘Èè6 r0åŽ23•^¼ds@ÅÔÿ ƒTû#^ÈŠ`óS|*S»Aæmo^§¿ƒ£A'‹%Óo óÒ$›ä”´;™P•ÝÈ+Èèþ¾à9º+°¾Ð4Ùà[•’ ³Û™o¢´—íA p¨ç9'<ÜT–~·Žimgòç“íÖ±Ç1 Ç*³r¡‡QŽù÷¡_}€âè­ë­ ÒÎÚ/5/"iÓÎŽ%·,¾^ò¿{?{‚pF8ëQë^:,;å¹ípñÄ¡1æF 39àÃõ¢ã±‹NDi$XÐf ;“M«:}ãéÚ…½äqÇ#ÀâEY*HägSV¾¤¿#¢Ö<%¾¡¦Úi—&Ss!µ•æ?*\)‡…äz𦾼’h;«7I–b%WmŠbu9\ä}1ÏZšËÆWæòѵY¤»‚ĹÜÙinr$ z{ }¯‹BjI5¬QÚAÀŽ#ážU#sÝÎ3Î08º}ÿ×Þ2¼2+·¸eU³K«i c²@Ò*s¹sÜö"’ûÂÓZËtZæÖÚ(æ’(Vyù” Ëm £“·&¡—Ä÷’yа[G[-ªÄŠÛcE`ã9ÎGROSO¸ñ]ÝØŸí6–3%’d2D[Égm œv{8ëCòþµÿ ^ÖŸæXµð]ì£O–yáŽÞîXã.’›ÆGðàçàœ¸¨‡…äž$û,Ñ8ûDñ´í!5 X©@@õÉϧ«ŒïÉ ök?0<2—ØÙ/ ÇæôàŽžÀóPGâ›ÈJˆ­íR!,²‚±V(WS–Îܯ½ËúÛþ/?ëø ]y’fîÌ@–Âè\m`¹.zö )ëàûóq{Íl‚Ñ‘^B]”îR6© Üàæ«ÏâK¹ÒxÄ6ñÃ-ªÚ,H­¶(ÃÂäç9I=MO‹/"ÔäÔ>Ëj× ³ka×aE 0U<r¥×õò¿‡tc­k fRF@ŽÍå:¸‚NyëUµ{8¬u"·25±ù¡y ¯¨àdg#8ÅK§ëw}ÍÄÂ(fëRPv“¸0#iFx4šÖµ>»x.&Úš FìtÈ$ËvæmV×…´´ÕµÈá– '·‰i£;TghÇ9'Z´WW©xZ5S|’YiöХʃw ä]¤ƒNOj³wáµ›¸¢¼6–ñÏmoˆŒ›šTÎy`z×Û-@âè®±¼':}ÍÂÝÇp'h™J:JˆÛpÜ›‚{vÿøCàƒT‚¾[¥]IlfY *<ƒÃäŒuä}{ÑØBŠèÿáˆéoŒê÷‰!ÄC~Ü1ßqÏ#>j±©x^Æ­XÛÞ̱YÜ%¼q´šG`Ø7L޾ý;RŠícðU¥½ô+u¨<:Ü+yQ®å’4ÜGxúàñ‚sT‡-åÓmïžäAj¶†âiÎzQFÒø$ñЀ?R_×Ü3Eu#ÂG=ÂÜê~\qÏHéíâU,§†;d}zúѬu ›G`Í­#¡ ã4^Š( Š*Öš–²jv©z\Z™TJcm¹ç… PeZ+ºÒ¯®`e†¬ˆŸ:|í*¹T,–B[ž¸=0:ÖT>I4_í¾)„ŒK»Ê2lÜü“ߦÞÛ¨@sTWU©xZÚ=Bö;;©0_EfH¹Ëç';¹Æ?ö¨—Âjðj —ÆIm&–/*(C6ø˜nÜ ú€Ý9¥}/ýZ‡õý}Ç5ES®ûáüw_õâÿúuÀ×}ðþF»¯úñý:öj(¢€<·ãüÁí¿þÓ¯-¯RøÇÿ0_ûoÿ´ëËh¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(U™2’‚ Ö¼Þ)Ö§ÚZô« RÑÆˆÌëбP ïšÇ¢€5ÄZ›Í$¦t̘D„(NHÚyÎ3šVñ©%¨µ–à=¾ÔF_-eC•±“Œq“YTP´g]ñ%æ¹<ÞaÛ<Æe€àž9`b5E%` (¢€$‹½KQEÞ¥¯ Àÿ??ÌðñŸÆ—Ëò Ôðþ³ý‡ª ³n.£#Ä[h`}ðzáYtWL¢¤šg:m;£¥‹Åò¥¶›Ú‡{;¡pòy˜2ᙂô㛞zÓ ñ\–÷vS%±Úa`²XHÌI”ÜzW;EG±§Ø¿m>ÿÖçMŒ%‚w–8e‘¼øeF¸¹iXÃpIçqéŒzRÂX´EÎÍ@ Œ  ¨3¸ËdòÊW·oëÍsTQì)öm>ÿÖçKŠãAz?³†Ë‡w G’7 r…O#®T­sTQUF;)Ê[…QVIZŠ(¯”>”+UüI«Éhmšïä(#,#PåE.â8YTP³ø›W’ê+–»leˆa ņ° HàîÎiSÄúÄsI*Ý€ÒlÈòªìû»W\vÆ+"ŠÒþÞÔüè¥ûOÏË]!ò׉[nžÃŽ•5–¿476/x¦æ+) °Æ¥c!‰Ý÷“ŒóåXôP´©=åÜ·÷³ÝÎÙ–g29÷'5P•êQEY¶¿¹³†â+yLkp%Àeg¨ä•j/ê˜Ê܃åÃäñ£ƒwm ‚gžsŠÌ¢€5—ĺ¬ãí¬|ægvdRÁ˜aŠ’2¹|¸¦7ˆuGŽk¬ˆ ”>ZîùF-Œ° 9¬Ê(Tø‹S2‡2Â@O,Göh¼°¹ÏÜÛ·¯9ÅW]^ý5 oÅÁûT¡•ä*C ÇCŠ¥EZ°Ô®´Ù^KY—]ެŠêëèU§qV—ÄZ²\<âñŒ¯:\3S—Lí<ŽÙr’>]¸êzt¨›ÂÚwöαy÷#:\Ų.Ò/$ã®êàh§}n#Ñ›AÐ[Q6Ë¥íS©Mc‘<™ pn½Aü1Եƙ¦)óî¬Úé°‰|ÉäàIÍüYíǦn+€¢’Óðþ¾cg¡i¾ÓëÉþÏ7‘ÿh\A4¦VAòûõí^|zš½e¬ßið4V²¬jÙ;¼¤,¹;XŒ¯„U VQEÄfÚþæÎˆ­å1­Â—e”qž£:Uj(N/êìÛu}œó»ióÈÏJWñ­%ÃÎ÷y•æŽvo-yxÆôíú÷¬º(Oþ SìÏoö¯Ý>ýËå¯;˜;vîÊáKÿ «ç´ÿjýã\‹²ÞZÿ­éïÓ§µeÑ@?ÛºØÚ×ÏQ)RDH®wmߨÏ8Î)n5ýNèÊe¹¥‘%r±ª–tÎÖÈžO×½fÑ@MâÍi¥Y ÚîYAûˆñ¹ q·‚r;õ5^ Ôá1ì¸]±ÄaT1!M…·*FÉÏ"³(  ×u)V{¦fšdÉU9tÎÓÓŒg§J§sq-ÝÌ·3¶ùerîØ,NIÀ¨¨ Š( ¥¶¹šÒæ;‹y9£`ÈêyTTPÃx§Xi¢—íJ¦"̪F«–bT. #ŽA¦j¢Óì¢å|Ÿ(÷ÉO¸NvçÀL|²ýÖÆÞzõ÷¨ÓÄ:šyÛntÎîÎaBÀ¿Þ*ØÊçý’+.Š(¢Š+¾øGÿ#]×ýx¿þ‡p5ß|#ÿ‘®ëþ¼_ÿCŽ€=šŠ( -øÇÿ0_ûoÿ´ëËkÔ¾1ÿÌþÛÿí:òÚ(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š*xþà¨*xþà¯C-þ+ôýQØ zÿ˜ê(¥x}kÛ<(­Û˜!¹šx"UÌs€q ǵrFJªl­#yåÉåùð ÝŒn+íéP¦™«¤Ñ™EjÍa1ÆÒ¤ÌIìM»ÜÞÜôü}j->烠&±#’ƒ;‡ò£Zäû7tŒú+e­¢!ŽÅ_´•p£åP™ÀÈàd‘øTa³ϾGXã›ÉnIçžútýhçCöLÊ¢¶>Ãjmá’Y6®eA‰gç…<àt¨RÊÕãRFÁÌŒ ®ìgn3ŒcOÒŽtÉ™´U×"½ƒlM$O† vñœ§¥Zñ^þd^B%„^[Œ.p@vëÍ]D©¶ìdQ[ZÙoPÊ­4@ØÀ är£#ALvÍ 0—È +(Ææ~§ýÑG:³}̪+HØ@¨ÊL¦A“r‘½ŒcÖ ½·Šæ‰‹g8Çl= 5$Ä鴮ʔQEQE^¿ÏMeERö䱚ã'×€?*£I;«WU§ZYÍgmy,lžcÊŒ,åˆõ ƒŸZ™Ï‘\p3±ÊÑ]aÒmÝá œk戂«3ùRJrÅIÎp¿‡°ªCJӒžáÅ̱yèŸ3 oÀRc·]ÞÕ*ªnÅ:m+˜WS«èºd\“pÉ;´’ÇJÄæ• &1×pçŒTM£éAÌ‚IM±Ü±9œî ð[ËýÙÁèËøÒU¢Õì7E§c›¢¶,cŠÇQ¾K›y„2o0¬þCn,§å>ŸŽEh¶g/úeýÄ)†%ŒÚ£F0?6ЃòŸ—piº© Sl娮†ßE±’êÎѾ×#Üs4xÈWî‘‘õÏSŒTévƒHûlþy?giB£¼ÑêÑíbÊF-ÔÝi6-ok ¤¢î`Û$  3ù12©P£©lzääç5¨[Çizöñ–&0ËãÀÝläSE!J:•h¢”}áõ­н¬Æ‘kwÑÆŠˆ·T`¸ðQ©‹ºLmYØ(¥P N<šÕ–2ó][*[¢DNÕ1áöŽá€çSÞ›vcs&ŠÔM6,¡•#–EÉ=UF{ÏáøR-•£ÈV9Ëmò×vÜ’9•ç·¥O:+ÙHÌ¢®Ü[#ßÅo.±ŒžJŽZ»we®²¢¢ÂŠêÂR[hÈ9Á#ùÒM»˜´V´ƒËŒ„¸bvg&<ñÈç¯sRKecû<÷³+õì8çoýió!{6eÑZOc ¤€ó@,ªdwh9a»ô ûVm ÜR‹ŽáEzÂ4{MI™Š[RFvŸ1G§þtÛ°’»±FŠ(¦ ¢®XB.Œ¶áA‘Ô$r<þ™­¼“,ɬw‘ Ü’21Ÿ”ßUV47%taÑZBÊ×Ì}Îê‘DŽÅ›©`=àsèjo°Ú›bÆLG¿ÌARÃä?)nýÁã¥CyoE Í1PÅÎ1ÛƒÏCMI7a84®S¢·ä¶··3ˆ“ËetDÚ0®gøP5”Ù‹X„Ê¢f`뿨Æs€¸?Jše:-ôV…áu–æÝmcDx"1•àîœûúÓ­ö¦˜Ž$¶Œ® šä€§Ê}Z|Ú\žMlfÑ[P[[›ycß”-‘…#‰;ãØTcN´ób„ÌÆFhÃmÉá¿à8}Mêö²vO¹“E9öo; Ø1ɦՙ…Q@Q@Q@Q@Q@Q@Q@w_ ?äi¹ÿ¯'ÿÐÒ¸Zî¾ÈÓsÿ^Oÿ¡¥sâÿƒ#|7ñ¢{ Q_8{Ç–ücÿ˜/ý·ÿÚuåµï¾/ðÍ—ˆþÇöÉnÈß·ÉeÝ·9È>‚¹ŸøVZ'üüê÷ñ?øŠòŠ+ÕÿáYhŸóó¨ßÄÿâ(ÿ…e¢ÏΡÿÿˆ (¢½_þ–‰ÿ?:‡ýüOþ"øVZ'üüê÷ñ?øŠòŠ+ÕÿáYhŸóó¨ßÄÿâ(ÿ…e¢ÏΡÿÿˆ (¢½_þ–‰ÿ?:‡ýüOþ"øVZ'üüê÷ñ?øŠòŠ+ÕÿáYhŸóó¨ßÄÿâ(ÿ…e¢ÏΡÿÿˆ (¢½_þ–‰ÿ?:‡ýüOþ"øVZ'üüê÷ñ?øŠòŠ+ÕÿáYhŸóó¨ßÄÿâ(ÿ…e¢ÏΡÿÿˆ (¢½_þ–‰ÿ?:‡ýüOþ"øVZ'üüê÷ñ?øŠòŠ+ÕÿáYhŸóó¨ßÄÿâ(ÿ…e¢ÏΡÿÿˆ (©ãû‚½CþŽŠåçPÿ¿‰ÿÄS‡Ã]FÍÿýüOþ&ºðu£J£”»¸ºR«÷<¾ŠõøVú?üüßßÄÿâhÿ…o£ÿÏÍ÷ýüOþ&½/í 'ŸõÇš½åÔ›|Ë™›iÊîœQ@¼º ¸\̯˜kÒ¿á[èÿóó}ÿÿ‰£þ¾ÿ?7ß÷ñ?øš>¿CúE}N¿ôÏ3[«…$¬òŒŒ9äuÇêi‰#¦íŽË¸m88Èô¯Oÿ…o£ÿÏÍ÷ýüOþ&øVú?üüßßÄÿâhúýé êU1ó¥ùzÿ*•_˜ð=·&œ—Æìé4ŠÏ÷ˆb }kÓ?á[èÿóó}ÿÿ‰£þ¾ÿ?7ß÷ñ?øš>¿CúAõ*Ç™¥Ìñýɤ^6ü®G” ›…EEžPŠr9À5éŸð­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüM_¡ý úoéžbóK,‚I$wqüLğΞ×w.êïq+2}Ö.IJô¿øVú?üüßßÄÿâhÿ…o£ÿÏÍ÷ýüOþ&¯Ðþ}J·ôÏ3ûLû™¼ù71Žó’GLÒ5ÄÍÓHpr2ǯ<þ§ó¯Mÿ…o£ÿÏÍ÷ýüOþ&øVú?üüßßÄÿâhúýéÔ«Ló¨L-M¸èr nlòsÓ8üqPË<Óe•ä#¦ö'é¿ð­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüM/¯ÐÁ×z]Ezü+}þ~o¿ïâñ4·Ñÿçæûþþ'ÿOûB‰?Q¬y¤×/§[úgÛj·vò£™`ŒWbªà­Œõ gŽ*›1v,Ä–'$žõêð­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüM AjR­k]@àæ½Gþ¾ÿ?7ß÷ñ?øš?á[èÿóó}ÿÿ‰§ý¡D_Qªy¥ÝËÞ^Ms Pó9v ÐsÅC^£ÿ ßGÿŸ›ïûøŸüMð­ôùù¾ÿ¿‰ÿÄбô²ÁVzž]RµÌ퉧Æ:!søW¦·Ñÿçæûþþ'ÿGü+}þ~o¿ïâñ4}~€}J²<ÐÝ\3+‰IS•%ÏJÝÈgaq(/÷ˆsó}}kÒÿá[èÿóó}ÿÿ‰£þ¾ÿ?7ß÷ñ?øš>¿CúAõ:ÿÓ<ÇΗr·šùQµNãÀôG4±«‘Óœü¬G>¿©¯Nÿ…o£ÿÏÍ÷ýüOþ&øVú?üüßßÄÿâhúýú•cÌÍÍÁ ò‘'ßÏÍõõ¥û]Éecq.äS¼å~•éð­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüM_¡ý úéžhn® º›‰J¿, œ7Ö¡¯Qÿ…o£ÿÏÍ÷ýüOþ&øVú?üüßßÄÿâhúýx*Ïs˪hn^®#P¤O–Ùì7ãñQ^—ÿ ßGÿŸ›ïûøŸüMð­ôùù¾ÿ¿‰ÿÄÐñô,dyuê?ð­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüMÚEõǘ$‡Ùt*piDÒ¨@²8w( ~Sê+Ó¿á[èÿóó}ÿÿ‰£þ¾ÿ?7ß÷ñ?øš>¿@R¬y’Ï2Iæ$®¯Œn AǦiVætmË4ŠÙ'!È<õüëÓ?á[èÿóó}ÿÿ‰£þ¾ÿ?7ß÷ñ?øš>¿CúAõ*ßÓ<Ì\ÎO&Ö9a¼àŸzIgšb ²¼„t.Äâ½7þ¾ÿ?7ß÷ñ?øš?á[èÿóó}ÿÿ‰£ëô?¤R­ý3̼ùIÏšùÉ?xõ=OãIæÉ¼¿˜ÛÈ ¶y=«Ó¿á[èÿóó}ÿÿ‰£þ¾ÿ?7ß÷ñ?øš>¿CúAõ*Ç™5Ä‘£^ˆX? fæ(±Ú@Ïר·Ñÿçæûþþ'ÿGü+}þ~o¿ïâñ4}~€}J±æKq:mÛ4‹·¦Œuÿùš_´ÏµÏ“j¨Þp§ÛÒ½3þ¾ÿ?7ß÷ñ?øš?á[èÿóó}ÿÿ‰£ëô?¤R­ý3˨¯Qÿ…o£ÿÏÍ÷ýüOþ&øVú?üüßßÄÿâhþТ/¨Ö<ºŠõøVú?üüßßÄÿâhÿ…o£ÿÏÍ÷ýüOþ&í !õÇ—Q^£ÿ ßGÿŸ›ïûøŸüMð­ôùù¾ÿ¿‰ÿÄÑý¡D>£Xòê+Ôá[èÿóó}ÿÿ‰£þ¾ÿ?7ß÷ñ?øš?´(‡Ôk]Ezü+}þ~o¿ïâñ4·Ñÿçæûþþ'ÿGö…úc˨¯Qÿ…o£ÿÏÍ÷ýüOþ&øVú?üüßßÄÿâhþТQ¬yuê?ð­ôùù¾ÿ¿‰ÿÄÑÿ ßGÿŸ›ïûøŸüMÚCê5.¢½Gþ¾ÿ?7ß÷ñ?øš?á[èÿóó}ÿÿ‰£ûBˆ}F±åÕÝ|(ÿ‘¦çþ¼ŸÿCJ×ÿ…o£ÿÏÍ÷ýüOþ&·<+á+ S–êÖk—w„ÆD¬¤`²žÀz ʾ6”鸭٭%HTRg]EWŽz¥-CþYþ?Ò©W1ñ;]Ô´Oì¯ìëŸ'Îó·üŠÙÆÌuÔןÂwâOú äÿøšöŠ+Åÿá;ñ'ý¿òüMðø“þ‚_ù?þ&€=¢ŠñøNüIÿA/üÿGü'~$ÿ —þ@ÿ‰ h¢¼_þ¿ÐKÿ GÿÄÑÿ ߉?è%ÿ#ÿâhÚ(¯ÿ„ïÄŸôÿÈÿñ4ÂwâOú äÿøšöŠ+Åÿá;ñ'ý¿òüMðø“þ‚_ù?þ&€=¢ŠñøNüIÿA/üÿGü'~$ÿ —þ@ÿ‰ h¢¼_þ¿ÐKÿ GÿÄÑÿ ߉?è%ÿ#ÿâhÚ(¯ÿ„ïÄŸôÿÈÿñ4ÂwâOú äÿøšöŠ+Åÿá;ñ'ý¿òüMðø“þ‚_ù?þ&€=’|ˆ Á£²°½½µK…¿†'å0îÆ wJñöñψÙJG õýÄüMzÿ€î¦½ðe…ÅÃï•üÍÍ€3ûƨÇö-÷ý×ÿÿû*?±o¿è&¿øÿÙV݉ý‹}ÿA5ÿÀþÊì[ïú ¯þÿöU·EbbßÐMðÿ²£ûûþ‚kÿ€ÿý•mÑ@ŸØ·ßô_üÿì¨þžÿ šÿà?ÿe[tP'ö-÷ý×ÿÿû*?±o¿è&¿øÿÙV݉ý‹}ÿA5ÿÀþÊì[ïú ¯þÿöU·EbbßÐMðÿ²£ûûþ‚kÿ€ÿý•mÑ@ŸØ·ßô_üÿì¨þžÿ šÿà?ÿe[tP'ö-÷ý×ÿÿû*?±o¿è&¿øÿÙV݉ý‹}ÿA5ÿÀþÊì[ïú ¯þÿöU·EbbßÐMðÿ²£ûûþ‚kÿ€ÿý•mÑ@ŸØ·ßô_üÿì¨þžÿ šÿà?ÿe[tP'ö-÷ý×ÿÿû*?±o¿è&¿øÿÙV݉ý‹}ÿA5ÿÀþÊì[ïú ¯þÿöU·EbbßÐMðÿ²£ûûþ‚kÿ€ÿý•mÑ@ŸØ·ßô_üÿì¨þžÿ šÿà?ÿe[tP'ö-÷ý×ÿÿû*?±o¿è&¿øÿÙV݉ý‹}ÿA5ÿÀþÊì[ïú ¯þÿöU·EbbßÐMðÿ²£ûûþ‚kÿ€ÿý•mÑ@ŸØ·ßô_üÿì¨þžÿ šÿà?ÿe[tP'ö-÷ý×ÿÿû*?±o¿è&¿øÿÙV݉ý‹}ÿA5ÿÀþÊì[ïú ¯þÿöU·EbbßÐMðÿ²£ûûþ‚kÿ€ÿý•mÑ@ŸØ·ßô_üÿì¨þžÿ šÿà?ÿe[tP'ö-÷ý×ÿÿû*?±o¿è&¿øÿÙV݉ý‹}ÿA5ÿÀþÊì[ïú ¯þÿöU·EbbßÐMðÿ²£ûûþ‚kÿ€ÿý•mÑ@ŸØ·ßô_üÿì¨þžÿ šÿà?ÿe[tP'ö-÷ý×ÿÿû*?±o¿è&¿øÿÙW-ñcÄúdžl4Ét‹Ï³<ó2H|¤}À.GÞ¸[O‰-•A}[?öïÿ]4p³¬¯Œ*â#Kâ=ûûþ‚kÿ€ÿý•Ø·ßô_üÿì«É¿áax§þ‚Ÿù/ÿGü,/ÿÐSÿ%âÿâkìÚ½×ãþFÚ»?ëæzÏö-÷ý×ÿÿû*?±o¿è&¿øÿÙW“ÂÂñOý?ò^/þ&øX^)ÿ §þKÅÿÄÑý›WºüÈ?´)v×ÌõŸì[ïú ¯þÿöTbßÐMðÿ²¯&ÿ……âŸú ä¼_üMð°¼SÿAOü—‹ÿ‰£û6¯uøÿhRìÿ¯™ë?Ø·ßô_üÿì¨þžÿ šÿà?ÿe^Mÿ Å?ôÿÉx¿øš?áax§þ‚Ÿù/ÿGöm^ëñÿ þÐ¥Ùÿ_3Ö±o¿è&¿øÿÙQý‹}ÿA5ÿÀþʼ›þŠè)ÿ’ññ4ÂÂñOý?ò^/þ&ìÚ½×ãþAý¡K³þ¾g¬ÿbßÐMðÿ²£ûûþ‚kÿ€ÿý•y7ü,/ÿÐSÿ%âÿâhÿ……âŸú ä¼_üMÙµ{¯ÇüƒûB—gý|ÏYþžÿ šÿà?ÿeGö-÷ý×ÿÿû*òoøX^)ÿ §þKÅÿÄÑÿ Å?ôÿÉx¿øš?³j÷_ùö….Ïúùž³ý‹}ÿA5ÿÀþÊì[ïú ¯þÿöUäßð°¼SÿAOü—‹ÿ‰£þŠè)ÿ’ññ4fÕî¿òí ]Ÿõó=gûûþ‚kÿ€ÿý•Ø·ßô_üÿì«É¿áax§þ‚Ÿù/ÿGü,/ÿÐSÿ%âÿâhþÍ«Ý~?äÚ»?ëæzÏö-÷ý×ÿÿû*?±o¿è&¿øÿÙW“ÂÂñOý?ò^/þ&øX^)ÿ §þKÅÿÄÑý›WºüÈ?´)v×ÌõŸì[ïú ¯þÿöUjÃO¹´¤šðL¥q´E·#œä׎ÂÂñOý?ò^/þ&º¿‡Þ)ÖµÍz{mFóÎ…mZ@¾R.2Œå@ìMELJqrmiýv.Ús’ŠOSÒh¢Šâ:Ï-øÇÿ0_ûoÿ´ëËkÔ¾1ÿÌþÛÿí:òÚ(¢Š(¢Š*[f‰.¡iÓÌ„8.™#rç‘ǵEE4ìÁžwá>+Mj8á&ìÌï§üíÄI±ˆÆyÊÉß=)/|#§]ÝýšÅ£´U»–ÜÊC¹Ìp†l层Àô~•ˆž6ÕûM»òí™ì!0F¥×v’üòp§AP[x³Pµ,vî|ù§,êÄ–‘6·~˜éIí /2þ™à¦Õ­¾Ñkw3Ã$Í »­£Ä î|Ý®N3ÍM„PÓ4éaY"qk,×Mm3¹YJ€©žOÓ+ÇÄZwØMµ­Ì*æHÅÄe¼¶#Œ=89TÖÞ*½¶¶‚Ûɶ’Þ(ŽElHŒÛÎìrB1Gõø˜_ù0øVÔ/í¥º}”FÀCld•ÕÆCyy:õ ö5Ÿá/¶ØÝ]}²M°ÌðâV£;œ 2)ÿtŸj£oâ‚ò[ŸìÝ9ÙÝ]TÄTDW¦Ò¬üÎ{ÔÖÞ+¼¶»’óì¶R^<Í0¸xˆtf낤d{6EGá›m2çP™57ˆ yLQ¼œ`3@Æ}+bo 5þ¤Â+ 4ø#´¸·cv$ç‹-ŸBxæ¹Í7V›Mži÷ 2”–+ˆ÷+ŒçØŽ{‚+Gþûï8bÚÍmDßìkl'qï»9ç9Í¿®áý~E‰¼,f½mKPû5¥³Ä‚Qfs Ü¿&F0:óǽW·ðÊÜ-‹%ú2]êÈ:FHmùÆH';ºqQ[øšâ .¿Ð¬d·¸dv¶x–¬¿t€9^{椲ñuõŸü»ÙÌE×Úã2Åþ®Nû@ @éùb…ý~ðAÿ_×Ü]‹Â¶¶÷ZHžüJ÷·>RÀ`8!e(ÄÃŽ3Ç<þ5=Ç„´éc°ŠÚöT¼º%PÃò3FH컀yÏ_jœķ’]é×&+pö4‘§—.wsÓ'¶8«v>!{»Í5/¥·´ŽÎá®äDìë–ÞSœ‚zqøÐ•Òí{šž–4ȬKM¾k›q;dzXbvŒçœžÝkÚ¾ÿÈ…¦ÿÛ_ýõâÚþ¦5rêõWdr>#N›Pp£ò½§áÏüˆZoýµÿѯIk¨Þ‡SESQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEä¿¿ä¢ÿ×Ëÿè"¼ÂÇîŠôïŽßò Ñëåÿô^ca÷E{Ây˜íËÔQEzgšQEQEQEQEQEQEQEQEQEÝ|(ÿ‘¦çþ¼ŸÿCJákºøQÿ#MÏýy?þ†•Ï‹þ ð߯‰ì4QE|áïÏ‹¼1eâ?±ý²[„ò7íòYFwmÎr÷Es?ð¬t_ùúÔ?ïâñèÿòÏñþ•N€8¿øV:/üýj÷ñ?øŠ?áXè¿óõ¨ßÄÿâ+´¢€8¿øV:/üýj÷ñ?øŠ?áXè¿óõ¨ßÄÿâ+´¢€8¿øV:/üýj÷ñ?øŠ?áXè¿óõ¨ßÄÿâ+´¢€8¿øV:/üýj÷ñ?øŠ?áXè¿óõ¨ßÄÿâ+´¢€8¿øV:/üýj÷ñ?øŠ?áXè¿óõ¨ßÄÿâ+´¢€8¿øV:/üýj÷ñ?øŠ?áXè¿óõ¨ßÄÿâ+´¢€8¿øV:/üýj÷ñ?øŠ?áXè¿óõ¨ßÄÿâ+´¢€8¿øV:/üýj÷ñ?øŠ?áXè¿óõ¨ßÄÿâ+´¢€8¿øV:/üýj÷ñ?øŠ?áXè¿óõ¨ßÄÿâ+´¢€8KŸ†ú<0—[›âG¬‰ÿÄ×oàû8ì<-gkb‘™0XóÌŒ­CÿÍW¼;ÿ +«ÿèm@”QU5;á¦iWwæ)&м¦8ÆYöŒà{ñCvÔ¾…º+Ó¼QçÙ=õìvKg„ò®4û϶,ŒÇT ¿8à)ÎzÕ‡ñf‹1Ê×Ra÷ü¢ÚRÑ„ 9u ˜À$X3E€Ú¢±æñFof.å½ I¤å¹ùbm²çÛ5NëÆšuž£ ´©pV`¬ [L]I.›2#8êzœ(¤¢©CªÙÜ»¥¼ÂW[t¹Âƒ-ó´ççi÷⹘> G?†ômPiÌ'Ônãµk_;˜w6 ÛȃÐgrôÍÖÁ}.vtV1ñ^Š­8k‹Èìï ŠŒ#8}ŒWƒÁ MV·ñŽŸ4÷ˆéqÁ:AýšS,¬cÝlÞ0 íÐf€:**¥–¥k¨*½¬"— Z•{Ç–9y‘!+ƒÇ9aÒ«Çâ»Û•ž[m2ÜÁ¸ºf–ð¡hËHå‘ÊÇžHûØ÷£¥ÃÈêþÕsÿ>ñßãÿÄÑö«Ÿù÷‹þÿþ&¹ë/Å}­5„v²ÌHæcïµY£ÇbÔõî})ˆ®¢‰y¦¬WÁÉ\oÜ]Šª1Ú6¶F8Èç‚iØWêt_j¹ÿŸx¿ïñÿâhûUÏüûÅÿÿ\ä>)YgÒákR¯xòÇ/ï2 d%pxç,0:UxüW{r³Ëm¦[˜ ·LÒÞ-i<²9XóÉ{ôº\~GWö«Ÿù÷‹þÿþ&µ\ÿϼ_÷øÿñ5ÏØx¢+ýpéélé„:NÇï>ÕfˆWS××Ò¦¸Õ5¬Í§ØXÚÍäï$÷mß,FßÜõïNÖîm}ªçþ}âÿ¿Çÿ‰£íW?óïýþ?üMdéñÎÖòJâxØÆêÈÊ$ ¼¨m¸'o u>•·Š4Û‹kY™åˆÜG›ZÄaø]ç\ž„ã=© ÜûUÏüûÅÿÿGÚ®çÞ/ûüøšÇÿ„—K*¬³JÁæhm´¬]×;‚€¼ãiééL“Äúo‘+Á8‘£·') @‡8,ÁN3ƒÇ^·ö«Ÿù÷‹þÿþ&µ\ÿϼ_÷øÿñ5Õsÿ>ñßãÿÄÖGü$ZnÀ|Ùƒ™<¯(ÛIænÛ»îmÝÓœãªw>(ò<%º–fQ'–D '8f ÁÇ=sÓšèþÕsÿ>ñßãÿÄÑö«Ÿù÷‹þÿþ&°fñ=´:в`>Î,šòK­ÿ*€F1Ï=}=jøHôÝ€ù³o2y^Q¶“ÌÝ·wÜÛ»§9Æ1@ÿj¹ÿŸx¿ïñÿâhûUÏüûÅÿÿX6^)°¹³´šVhžâ4rªŽëc…Üáp¹=3н«ê‘èúUÆ¡4SË ¹ÒÜøÏ$n§ØÐûUÏüûÅÿÿGÚîçÞ/ûüøšç¯¼e£YiVz‚ܨïX%¬v˾I‰=}»ç§Nµ½š¹ÂxD€œ‚bê*J«§ÿǧý´“ÿC5j€ (¢€ (¢€ (¢€ (¢€ (¢€<—ã·ü‚ô_úùýW˜XýÕ¯Nøíÿ ½þ¾_ÿAæ6?tW±—ü'™ŽÜ½EW¦y¡EwÖ¾°ŸYÒ k1k5œrMl×X•Ü¡$…ÎO«þµÿ#o«Ï§õ·ùœÅ×^økO‚ðÜ›8"´µyBÆe.Ò’2øéÒ¹ýgL}VžÁäY DaÔ`0 "*¡V2v[ÿ_æD©Ê*ïbQZQEQEQEQEQEQEÝ|(ÿ‘¦çþ¼ŸÿCJákºøQÿ#MÏýy?þ†•Ï‹þ ð߯‰ì4QE|áïïÿåŸãý*\¿ÿ–ôªtQEQEQEQEQEQEQEQEQEVÿþ=š¯xwþ@VÿWÿÐÚ¨ßÿdzUïÿÈ ßêÿúP¥Cw³ÙÍ-m+© 2(b‡±ÁƦ¢€8»Ï¶©<×z…Öž÷måíòtí¹GÝ™PÈÞfyx`Z·„îl^ôÛë+Ì`Ó•c*Î(°¬1Á%³Üêh¡i°=w8ÛOqnöÏ« ¶]Ç‹_™|÷Kÿ6Çf¯ßxnIV~ÌÊw9ù²Üö«x[M[帞ÚÚåc¶†Þšcw Ÿ]Ãò­ß²Þrûøøš>ËyýÈ?ïáÿâi­õ9¨ü%>MÄW³F;“rggv™‰ßû­û@*JñÈ⤱Ð/!Š8®ïíçQp·ºZ²<μå˜ÈÝöžp8éÐý–óûßÃÿÄÑö[ÏîAÿÿBЧ5sá?9µwŠøÄ÷¬ò³öfS¸‘ÏÍ–çµX‹ÂÚjß-ÄöÖ×+´6ð¬Ð+Ä{¹úî•ný–óûßÃÿÄÑö[ÏîAÿÿBЧ9„áíîVòsѹiŒŽQÙ‰Þ<½ÛFT•ã§hÕ|3ý£¬¾¡ÿ¹7‘l¾ÓþÑ·ic•;×Ýú èþËyýÈ?ïáÿâhû-ç÷ ÿ¿‡ÿ‰¤ön^éwÁvÛ"Ú3åö“_ÓÞ©[x9a–ÞI%±¸hâ†'i¬±ð Ça#õ鑊ê¾ËyýÈ?ïáÿâhû-ç÷ ÿ¿‡ÿ‰¦´›—E½·:RYOmîç™æ’<ª‡Wp'—ƒïD>XtÛÛ1xOÚ­Ræ>„%±žåϱֺO²Þrûøøš>ËyýÈ?ïáÿâhÊ\ø;ísK$—VÁKù‹Úb7páƒJ›ö¹àŒ€¤î?†˜ÑxvçJV·„ÎŽ¥­í„h¥³È@{}sï[e¼þä÷ðÿñ4}–óûßÃÿÄдV·9Õð´i}%ÊÝŸšà̪S!¤€ çûÒ»gßõTø-d·)-ùg{U³vò~S¨Ú6’y 7gœäŽ˜ÇYö[ÏîAÿÿGÙo?¹ýü?üM!ä>’Ù žÖk k¨¥g EJm  |“ß;¿Jµ‡åè6Z[\ïû3ÄÆCߨáºgŒã³ö[ÏîAÿÿGÙo?¹ýü?üM09dðdInÐýµÎc™ä1ù}ÿbQïíV‡îÍøÔ¿´!þÐó7û1òöìÙ·füûçw_n+¡û-ç÷ ÿ¿‡ÿ‰£ì·ŸÜƒþþþ&€9K_Åk%»™m. Gr=Å’Èça<¡'äÈ<ðzqŠê³š_²Þrûøøš>ËyýÈ?ïáÿâhÒü¡èúÜúµ®Û‰sµIÊCŸ½å¯ðç¿é]i~ËyýÈ?ïáÿâhû-ç÷ ÿ¿‡ÿ‰  üyúé'þ†jÕCk An±±²I#¦I'úÔÔ†QEQEQEQEQEy/Çoùè¿õòÿú¯0±û¢½;ã·ü‚ô_úùýW˜ØýÑ^Æ_ðžf;rõ*í.<2@úRQ^™æbkºrjÖZˆ½ºó¬àX#S§.Òª¥FœàúÓ³¥-,e¹žQ²E,šbXäûüuÏPHí\µ±]ÿ/òó5öϱÚÛø—M6WÜÉæÆRÚÖK<™0ÝPIŒçÆ?¥W›]ÒnnžæéÚâg•¤f—IBNWh_õÿt@ìErTRú¼nßqûyY.ÅíVâÚâæ3hª"Ž%"ÜBXÔ¨fä÷9æ¨ÑEl••Œ›»¸QEÄQEQEQEQEQEÝ|(ÿ‘¦çþ¼ŸÿCJákºøQÿ#MÏýy?þ†•Ï‹þ ð߯‰ì4QE|áïïÿåŸãý*\¿ÿ–ôªtQEQEQEQEQEQEQEQEQEVÿþ=š¯xwþ@VÿWÿÐÚ¨ßÿdzUïÿÈ ßêÿúP¥6Bá UŸ°fÀüðiÔP}÷¿óïoÿÏÿFûßù÷·ÿ¿çÿˆ«Sºì}÷¿óïoÿÏÿFûßù÷·ÿ¿çÿˆ«QuØ ûïçÞßþÿŸþ"÷¿óïoÿÏÿV(¢ë°÷ÞÿϽ¿ýÿ?üEïçÞßþÿŸþ"¬QE×`+ï½ÿŸ{ûþøŠ7ÞÿϽ¿ýÿ?üEX¢‹®ÀWß{ÿ>öÿ÷üÿño½ÿŸ{ûþøŠ±E]€¯¾÷þ}íÿïùÿâ(ß{ÿ>öÿ÷üÿñbŠ.»_}ïüûÛÿßóÿÄQ¾÷þ}íÿïùÿâ*Å]v¾ûßù÷·ÿ¿çÿˆ£}ïüûÛÿßóÿÄT²J¦ç8:g5Ûbþìß÷áÿ‹®ÀïçÞßþÿŸþ"÷¿óïoÿÏÿGÛbþìß÷áÿ¶ÅýÙ¿ïÃÿ…òß{ÿ>öÿ÷üÿño½ÿŸ{ûþøŠ>Û÷fÿ¿þ}¶/îÍÿ~ü(¿ûßù÷·ÿ¿çÿˆ£}ïüûÛÿßóÿÄQöØ¿»7ýøð£í±voûðÿáEü€7ÞÿϽ¿ýÿ?üEïçÞßþÿŸþ"¥ŽT™7!ÈéÓ¤–háy<ð“ø .»ûßù÷·ÿ¿çÿˆ£}ïüûÛÿßóÿÄQöØ¿»7ýøð£í±voûðÿáEü€7ÞÿϽ¿ýÿ?üEïçÞßþÿŸþ"¶ÅýÙ¿ïÃÿ…m‹û³߇ÿ /ä¾÷þ}íÿïùÿâ(ß{ÿ>öÿ÷üÿñ}¶/îÍÿ~ü(ûl_Ý›þü?øQ ÷¿óïoÿÏÿFûßù÷·ÿ¿çÿˆ£í±voûðÿáS#¬ˆ*yQuØwÞÿϽ¿ýÿ?üEïçÞßþÿŸþ"Ÿ-Äp°V,Xò©cù gÛbþìß÷áÿ‹ùo½ÿŸ{ûþøŠ7ÞÿϽ¿ýÿ?üEm‹û³߇ÿ >Û÷fÿ¿þ_È}ïüûÛÿßóÿÄQ¾÷þ}íÿïùÿâ(ûl_Ý›þü?øQöØ¿»7ýøð¢þ@ïçÞßþÿŸþ"÷¿óïoÿÏÿGÛbþìß÷áÿ¶Â9"P=L.ý(¿ûßù÷·ÿ¿çÿˆ£}ïüûÛÿßóÿÄTà‚ ô"¢’æ(ßa,XrB#6>¸]v»ïçÞßþÿŸþ"÷¿óïoÿÏÿGÛbþìß÷áÿ¶ÅýÙ¿ïÃÿ…òß{ÿ>öÿ÷üÿño½ÿŸ{ûþøŠ>Û÷fÿ¿þ}¶/îÍÿ~ü(¿ûßù÷·ÿ¿çÿˆ£}ïüûÛÿßóÿÄQöØ¿»7ýøð£í±voûðÿáEü€7ÞÿϽ¿ýÿ?üEïçÞßþÿŸþ"{F|ÅÏh™GæEX¢ë°÷ÞÿϽ¿ýÿ?üE*½Ùaºç’&$ÿ|ÔôQuØ%øíÿ ½þ¾_ÿAæ?tW§üvÿ^‹ÿ_/ÿ Šó º+×ËþÌÇn^¢Š+Ó<ТŠ(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(®ëáGü7?õäÿúW ]×ÂùnëÉÿô4®|_ðdo†þ4Oa¢Š+çx§ÿ,ÿéTêåÿü³ü¥S Š( Š( Š( Š( Š( Š( Š( Š( Š(  ·ÿñìÕ{ÿò·ú¿þ†ÕFÿþ=š¯xwþ@VÿWÿÐÚ€5(¢±šÙ’åäx^K¯˜Ä± €¤žÐâ¦Ñð´'í“}¨ëÿg'Í;Ê‹Ò uÎ<±Óû¾Ô-mëoËüÆôþ¼®w4W o-Å–·ÝíÍÕÌ:ƒÅ힤d…·3ŠHå]¿w( Êä‘ÍOât»mRæá&žâÒÚÑZK{M­§µ9rdØY2ÆòÉÐäÒ¾—µ·õØìè®ÏÅÚ½ýó=о”’ù>lÁÏîƒï'Í<ƒ°GӜҟkºFqw“Üj– %¢Åª‹–(3–9¼· ß…[úõØW;Š+Ïá3ñömî£ý›n¶É ËÂd ¸h›hÎ&,Ààçä]§Ö»‹U½Sþ—=¼Ÿ»\ˆ¢)óäî<±ãp;`òsÂÕQ@Q@Q@îÖÚÿ×Sÿ 5KQ\ÿ®µÿ®§ÿ@jt¨d…ÑdhÙ”€éŒ¯¸È#?Q@¢¸¸¾Ù.¥©žòâ1wp’¤w¾Tó*´p唜`7|b¢²’óT²ÑÝ/o[Tx¡‘‚NDQD™ . €ž˜u¹¢Š(¢Š(+oõ·_õÔè I/üÃÿ\¤þiE¹ %Ù$%'ýÅ¢Oøÿ‡þ¹IüÒ€&¢ªj‘4Ú]Ê$òÀLdù‘6cžoLõôÁæ¸ûËÛél4…ß;Æ4sy+-ë[»²„Ën– p~RO4_úûÿÈvþ¾ïó;º+†·¿»Ÿ_Šõ'ŸìO¨,šáƒ`–`û˜ÉÎÿ½íŽk¹§m ¸QE†—ü{·ýu“ÿC5-Cf@·bH½“¯ûæ€ÿ! ë’7©ªÿ! ¿ë’7¬¯‰‡†o%‚ê{w… ¡}¤ã¶zã>˜éé‘@tW¬ß\Åâ+‰$óþÉd–Ì7f"7»vD™ °ã“K£\\CL®®$–ôÝ ˜žVd]Æœ&Ó…à 眚3¯¢Š(¢Š(+ùÛ×%þB›ü|]×Qÿ -:Èaj 1.=ø¤‡ý}×ýuúÐÔW'ãNêÓOx-ìÊ3=ͼ66ž2ƒ´“Ôœp=êruâh¤±»¾s‚K½ò²Ãf>"òø‰!¹‡r2 ô:Z(¢€ (¢€ ½ÿ úäßÊ­U[ßøð¹ÿ®MüZ Š( $øíÿ ½þ¾_ÿAæ6tW§üvÿ^‹ÿ_/ÿ Šó º+ØËþÌÇn^¢Š+Ó<ТŠ(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(®ëáGü7?õäÿúW ]×ÂùnëÉÿô4®|_ðdo†þ4Oa¢Š+çx§ÿ,ÿéTêåÿü³ü¥S Š( Š( Š( Š( Š( Š( Š( Š( Š(  ·ÿñìÕ{ÿò·ú¿þ†ÕFÿþ=š¯xwþ@VÿWÿÐÚ€5*9àŠæ ž$–«Ç"†V¨ õ%ZãO²ºu{‹;yWj´‘+2#¦UOÔJeö“§jk·PÓínÆÝ¸¸…dã ãxÊ©úéW(  Phúe­˜´·Ó­!¶$ǪÛ@ÆAçÔ ¦ LêCN´ä`ÝÍÆ1÷ñžœu«´PÑ4˜µÔcÒì’ù‰&åmÐJIàüØÍ-ö‹¥jsG.¡¦Y]Ë÷,…~„ƒŠ½ESm'Mkï·6Ÿho6ìûA…|͸Æ7c8Ç!Óì™-Ú[”µ!­ÔÆ1 §.#ŽÕbŠ£ý‰¥y×fYy· ¬ïöuÝ(=C|ÃëV„­ÃÜ,Q‰B4FæPIž¤ÇÜúÔ”PEPEPEP{ŸõÖ¿õÔÿè Nš®!xf%‰ÁWGPÊÀõ¢’å¼§EÜc}ÛsŒðGõ¦ùÒÿϜߚñTM<=¢GjÖ©£éën̢ȰèHÆ3ïO›CÒ.nVæ}*ÆYвÉnŒÀ˜$gŽÕgΗþ|æüÓÿŠ£Î—þ|æüÓÿŠ  ¨¨|éçÎoÍ?øª<éçÎoÍ?øªšŠ‡Î—þ|æüÓÿŠ£Î—þ|æüÓÿŠ $\­ôÄ’Ã#ìxäPÊÊQA§È¾€å?óJu²:ù®ë´Èû¶ç8àéI:È'ŽdC&Õe*œóô º´¶¾·k{Ëx® lnŽd§êWûGû,v¿Ù6?g‰·ÇÙÓb7¨À>õkΗþ|æüÓÿŠ£Î—þ|æüÓÿŠ gXý»íßc·û^1çùKæcÆìg¥Y¨|éçÎoÍ?øª<éçÎoÍ?øªšŠ‡Î—þ|æüÓÿŠ£Î—þ|æüÓÿŠ  ª´0CshRx£•ìá]CË!*yîzNó¥ÿŸ9¿ï¤ÿâªKhÚ8|,Ì@í’N?Z`ÿ„ßõÉ?›Ó/´ëN ý•½Ü@î ;È/Eÿ¯—ÿÐEyÝéÿ¿ä¢ÿ×Ëÿè"¼ÂÇîŠö2ÿ„ó1Û—¨¢ŠôÏ4(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š+ºøQÿ#MÏýy?þ†•Â×uð£þF›Ÿúòý +Ÿüá¿Øh¢ŠùÃÞ)ßÿË?ÇúU:¹ÿ,ÿéT袊(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(­ÿü{5^ðïü€­þ¯ÿ¡µQ¿ÿf«Þÿ¿Õÿô6  J(¬Ïê2éÔõ(fk[Y&A(%rªHÎãQCvWv4è®KGñCÜêRÃ.­¤êvqÚ5Ä·Zr[r¤|¯ûÇ ’9åQ×=qÆ2@7>Åiÿ>°ÿß±GØ­?çÖûö+*ÛPÔÿá"ûɳ’&ŽIJ@­ºÝC›ØœÃÛiÿ?PÿßÁGÛm?çêûø(z*¶ÚÏÔ?÷ðQöÛOùú‡þþ ž »ÿR¿õÖ?ý hûm§üýCÿG5Ä3„ŽRG2!Â0<ôözŠ( Š( Š( Š( Š( Š( Š( Š( Š( Š( Š( Š( Š( Š( %øíÿ ½þ¾_ÿAæ?u~•éß¿ä¢ÿ×Ëÿè"¼ÆÇîŠö2ÿ„ó1Û—¨¢ŠôÏ4(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š+ºøQÿ#MÏýy?þ†•Â×uð£þF›Ÿúòý +Ÿüá¿Øh¢ŠùÃÞ)ßÿË?ÇúU:¹ÿ,ÿéT袊(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(¢Š(­ÿü{5^ðïü€­þ¯ÿ¡µQ¿ÿf«Þÿ¿Õÿô6  J(ªÚ…ôfstÅ`¶‰¥’FOåš+üU¬>n£¦_éñï‰Üö#m ½]”z‚r8«Íâ -à¸}^Á`¸$C!¹@²pBœàóé@4U)5.&¹Y5+4kP á§Pb¡n~^£­V¾ñ6a¦hK©Z´ ¼E'BgÚ2Bs†?J/¥Æ•Ýj+6ï]³±K . $w¬B;`,x¤%É< ¨}i‘ø‹Mû —w §ÅpÄ@/]aib=Æœ(¶¶îjÑU%Õtè i濵Žv¤y”(e²’OP‰°}*Ø Œƒ‘@Q@Q@Q@Q@ZíÅÌZ-¤þL“]$%öÀ ö?…Gö gþƒ¿ù(”¾ 馨B/ëZSM¼/4ò$Q Ë;°UQêIé@Ÿ`Öè;ÿ’‰GØ5Ÿúÿä¢TÉ®é&«bÇ p.ð£,zöçÒ¤¹Õ´Û0 Ö¡i 0ófUÈ9Áä÷ÁüUû³ÿAßü”J>Á¬ÿÐwÿ%¯ BÈ®áw]þ^|Á÷±»o^¸çœÔ1ë:\°K•n€2~Á¬ÿÐwÿ%°k?ôÿÉD­j('ìÏýòQ(û³ÿAßü”JÖ¢€2~Á¬ÿÐwÿ%°k?ôÿÉD­j('ìÏýòQ(û³ÿAßü”JÖ¢€2~Á¬ÿÐwÿ%°k?ôÿÉD­j('ìÏýòQ(û³ÿAßü”JÖ®zÿQÔÿ´oâ´’Þ(,¢IȤ“¸ý(ߨ5Ÿúÿä¢U«o`•ÅÝùºÊåG”¨åYVާý£aÜ–òÁ{Ȇ5  ë[ëþ¿þýhZ(¢€ (¢€ (¢€ (¢€ (¢€ (¢€<—ã·ü‚ô_úùýW˜XýÑ^ñÛþAz/ý|¿þ‚+Ìl~è¯c/øO3¹zŠ(¯LóBŠ( Š( Š( Š( Š( Š( Š( Š( Š( »¯…ò4Üÿדÿèi\-w_ ?äi¹ÿ¯'ÿÐÒ¹ñÁ‘¾øÑ=†Š(¯œ=âÿü³ü¥S«—ÿòÏñþ•N€ (¢€ (¢€ (¢€ (¢€ (¢€ (¢€ (¢€ (¢€ (¢€*ßÿdzUïÿÈ ßêÿúUÿøöj½áßù[ý_ÿCjÔª÷ñM6Ÿq¿‘çµßQGüÇþ/ýzdÞ¾¸Òo#vn¦Ôa¾ Ĉ­±#R†E—”8`8àãµV¸ðv¤–³‹(,KË+›Yãžòim+d8vVg?Þnk¼¢ëð·ä OëÎç5®xU5ë=Îñc’ÚÒ]× ½”°ò]Ò;î`{t¬»ï ë²A%ܰ_4VÒÙ×ÓÛy±³®þPåˆdèx Ž•ÜÑCÕÝ‚ÑYm–:xšúk8 ²µ‹t\+ÆvSËb‚J„U€<»u9®Èg=h¢‹…‚Š( Š( Š( Š(  tÓ?ì!õ©uË 5M öÆ"‚KˆZ5/÷rG~µˆ:iŸö‹úÖ­s“è2}º{¦òLM¨-Û(±Œ[ˆÈÀœƒÇ§åYv>¾“LŽá#ÍÊÊVÙ¦™í¥Š"ä+s‚IV_âä+·¢Ž–Oëĉ+ÙÊ‹r.ä• +9yeBÀù¹ôì*¥·…õ;ý'N’u‚ÚKk;Xã&’2ûb‚†ŒöÎ w´P´ü?zÿ_3šÓü9%­â\4Vè>ÏqÇçÉ7Ï#«gsòà ÉãžÕš<)«y–ò3Ä"µaäÚ.¡0ÀØÊq8@àr0§wCÏ/ø27Ã'°ÑEó‡¼S¿ÿ–ôªurÿþYþ?Ò©ÐEPEPEPEPEPEPEPEPEP[ÿøöj½áßù[ý_ÿCj£ÿÍW¼;ÿ +«ÿèm@”QEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEy'Çoùè¿õòÿú¯1±û¢½?ã·ü‚ô_úùýW˜XýÑ^Æ_ðžf;rõQ^™æ…Q@Q@Q@Q@Q@Q@Q@Q@Q@w_ ?äi¹ÿ¯'ÿÐÒ¸Zî¾ÈÓsÿ^Oÿ¡¥sâÿƒ#|7ñ¢{ Q_8{Å;ÿùgøÿJ§W/ÿåŸãý*QEQEQEQEQEQEQEQEQEU¿ÿf«Þÿ¿Õÿô6ª7ÿñìÕ{ÿò·ú¿þ†Ô©EPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEP’üuÒ´oúøýW˜Xq^Ÿñ×þAz/ý|?þ‚+Ìl~è¯c/øO/¹vŠ(¯Ló‚Š( Š( Š( Š( Š( Š( Š( Š( Š( »¯…ò4Üÿדÿèi\-w_ ?äi¹ÿ¯'ÿÐÒ¹ñÁ‘¾øÑ=†Š(¯œ=âÿü³ü¥S¨¼I¯iº'Ù¿´n|Ÿ;~ÏݳgÏÝÔVü'žÿ —þ@“ÿ‰ ŽŠç?á<ð×ý¿òŸüMðžxkþ‚_ùOþ&€::+œÿ„óÃ_ôÿÈñ4Âyá¯ú ä ?øšèè®sþÏ ÐKÿ IÿÄÑÿ 熿è%ÿ$ÿâh£¢¹ÏøO<5ÿA/ü'ÿGü'žÿ —þ@“ÿ‰ ŽŠç?á<ð×ý¿òŸüMðžxkþ‚_ùOþ&€::+œÿ„óÃ_ôÿÈñ4Âyá¯ú ä ?øšèè®sþÏ ÐKÿ IÿÄÑÿ 熿è%ÿ$ÿâh£¢¹ÏøO<5ÿA/ü'ÿGü'žÿ —þ@“ÿ‰ ŽŠç?á<ð×ý¿òŸüMðžxkþ‚_ùOþ&€6oÿãÙª÷‡äoõý «»ñ¿‡e•5“ÿL$ÿâjî‰ã¿ Úé0Ã6¥¶E-‘äHz±=–ª0”Ý¢®L¥«ÉØí¨®cþ…¿è)ÿ’òÿñ4ÂÂð·ý?ò^_þ&¯ØUþW÷2=µ/æ_yÓÑ\Çü,/ ÐSÿ%åÿâhÿ……áoú 伿üM¯ò¿¹‡¶¥üËï:z+˜ÿ……áoú 伿üMð°¼-ÿAOü——ÿ‰£ØUþW÷0öÔ¿™}çOEsð°¼-ÿAOü——ÿ‰£þ…¿è)ÿ’òÿñ4{ ¿ÊþæÚ—ó/¼éè®cþ…¿è)ÿ’òÿñ4ÂÂð·ý?ò^_þ&aWù_ÜÃÛRþe÷=ÌÂÂð·ý?ò^_þ&øX^ÿ §þKËÿÄÑì*ÿ+û˜{j_̾󧢹øX^ÿ §þKËÿÄÑÿ ÂßôÿÉyøš=…_åsmKù—ÞtôW1ÿ ÂßôÿÉyøš?áax[þ‚Ÿù//ÿG°«ü¯îaí©2ûÎžŠæ?áax[þ‚Ÿù//ÿGü,/ ÐSÿ%åÿâhö•ýÌ=µ/æ_yÓÑ\Çü,/ ÐSÿ%åÿâhÿ……áoú 伿üM¯ò¿¹‡¶¥üËï:z+˜ÿ……áoú 伿üMð°¼-ÿAOü——ÿ‰£ØUþW÷0öÔ¿™}çOEsð°¼-ÿAOü——ÿ‰£þ…¿è)ÿ’òÿñ4{ ¿ÊþæÚ—ó/¼éè®cþ…¿è)ÿ’òÿñ4ÂÂð·ý?ò^_þ&aWù_ÜÃÛRþe÷=ÌÂÂð·ý?ò^_þ&øX^ÿ §þKËÿÄÑì*ÿ+û˜{j_̾󧢹øX^ÿ §þKËÿÄÑÿ ÂßôÿÉyøš=…_åsmKù—ÞtôW1ÿ ÂßôÿÉyøš?áax[þ‚Ÿù//ÿG°«ü¯îaí©2ûÎžŠæ?áax[þ‚Ÿù//ÿGü,/ ÐSÿ%åÿâhö•ýÌ=µ/æ_yÓÑ\Çü,/ ÐSÿ%åÿâhÿ……áoú 伿üM¯ò¿¹‡¶¥üËï:z+˜ÿ……áoú 伿üMð°¼-ÿAOü——ÿ‰£ØUþW÷0öÔ¿™}çOEsð°¼-ÿAOü——ÿ‰£þ…¿è)ÿ’òÿñ4{ ¿ÊþæÚ—ó/¼éè®cþ…¿è)ÿ’òÿñ4ÂÂð·ý?ò^_þ&aWù_ÜÃÛRþe÷=ÌÂÂð·ý?ò^_þ&øX^ÿ §þKËÿÄÑì*ÿ+û˜{j_̾󧢹øX^ÿ §þKËÿÄÑÿ ÂßôÿÉyøš=…_åsmKù—ÞtôW1ÿ ÂßôÿÉyøš?áax[þ‚Ÿù//ÿG°«ü¯îaí©2ûÎžŠæ?áax[þ‚Ÿù//ÿGü,/ ÐSÿ%åÿâhö•ýÌ=µ/æ_yÓÑ\Çü,/ ÐSÿ%åÿâhÿ……áoú 伿üM¯ò¿¹‡¶¥üËï:z+˜ÿ……áoú 伿üMð°¼-ÿAOü——ÿ‰£ØUþW÷0öÔ¿™}çOEsð°¼-ÿAOü——ÿ‰£þ…¿è)ÿ’òÿñ4{ ¿ÊþæÚ—ó/¼ã>;È/Eÿ¯‡ÿÐEy…ÝÝü^ñ—¯iz_öeןäÜ·™û¶\exûÀzá,~è¯Si+3ƒ%-S/QEépQEQEQEQEQEQEQEQEQEWuð£þF›Ÿúòý +…®ëáGü7?õäÿúW>/ø27Ã'°ÑEó‡¼yoÆ?ù‚ÿÛý§^[^¥ñþ`¿ößÿi×–ÐEPEPEPEPEPEPEPEPEPSÇ÷ASÇ÷zoñ_§êŽÃøK×üÇQEíž@QEQEQEQEQEQEQEQEQEQEQEQEŒÁFX€=M3΋þz§ýô)—Ÿñêÿ‡ó¬ª‡+•Í:/ùêŸ÷У΋þz§ýô+OÞ°Õ´³<‚îêëÎ(ÖÖsF²F€¿có&I#:Õhü¨K¤¶¦²D–Ê܉C«"ïٖ•=Wq>ÕŸ·ŠvfžÅµtUó¢ÿž©ÿ} <è¿çªßB®Åàm^[¦¶4\Ëo·,Iò×s8I+‚:rr0*¤þ}7ÄvÚ^«:ÛG+FZ|6þ,0cžÇ4*ñnɉђWhoüõOûèQçEÿ=Sþú·}খòÖÛK´¾æ2~öyx]gr¼C®?‡ôëU§ðTÖ6W²ßßÁo-»ÀY$ì™Ã“#¡à€x9Œ¥ˆ‹þ¾E<<‘›çEÿ=SþúyÑÏTÿ¾…k\x(®¡yakuòC{¢Ê]•CI»†]™=:ƒÇ¿j_ð‡_íQ.¬¤Žu•Œë#lÊÿY¸íÏÀç¶hXˆ¿ëÊât$¿¯;¼è¿çªßB:/ùêŸ÷Ы‰à»ù.Öî­Ð^y©æ:ùe¶ƒ€…‰Ï`¼wÅ`]@mn¥·gG1±RÑœ©Çpj•TÝ&•Ù¨²ÆÇ "“è >²¬ÿãé?åZµ¢w3jÄ~t_óÕ?ï¡GüõOûèV=lh:]­ò_ÝßÉ2ÙØÁæÈ°c{’ÁUA<O\‡RÊìµ » ó¢ÿž©ÿ} <è¿çªßB¬[èVºî¢!Ðe™cù’-â–hÎp@òÔ—ê9 =úTÑxS’F‰®,¢›í2Ú¬rHÛžD0¤rãßTºñ[èR£'¶¥:/ùêŸ÷У΋þz§ýô(ÿ„rèi°Ý½Í¤rNžd6¯!YdMÛr£<çŒäã¥m'€/,ïR=P•…£Ÿæ„2•’8Ëó¨qÕr84J¼c¿õ` IÙW1|è¿çªßB:/ùêŸ÷Щ43O}óVÕäÛÁ*@‘[Ww`O,À€SØÕëO 麵¥ôúuûƱÜAzBÞÈm ’rqßè:É^ý?à˜•&Òóþ¿C7΋þz§ýô(ó¢ÿž©ÿ} µmà½VæÞúTòA²y#‘âIŒe°B•ÛˆÏjmÏ„/­ìZä\ZJÉ2´1»K‡@ê@ëŸÃš=¼okØË{H¯çEÿ=SþúyÑÏTÿ¾…]ŸÁ”R$Q\YÜJ׋dÑÃ#’I*äôúÔà^;Ï!Ú%_ Ïæ²JÐÁOɳ~rGðô9éÍ/¬C¸{ v3¼è¿çªßB•eŽE'Ð˺€ÚÝKnÎŽcb¥£9SŽàÓ¬ÿãé?åZ)܇ ´QEhAKXÿXÿ¯”ÿÐ^’à¥Öä?ëå?ô¦ØtÍâËú莙?×RýQ]'0QEQEQEQEQEQEQEQEQEWuð£þF›Ÿúòý +…®ëáGü7?õäÿúW>/ø27Ã'°ÑEó‡¼yoÆ?ù‚ÿÛý§^[^¥ñþ`¿ößÿi×–ÐEPEPEPEPEPEPEPEPEPSÇ÷ASÇ÷zoñ_§êŽÃøK×üÇQEíž@QEQEQEQEQEQEQEQEQEQEQEQEçüz¿áüë*·(©q¸Ô¬G¥ø†M.Ñtí>ᡗΆYâ;ãn9Xg á²*ÜÞ4Ô.-%‚âÞÎV–ݭ䙑ƒ².:0†9ß5›¡îÍi-‰åñ¦©=å̉lMµ»[˜ö³+ ¬_œ’Ã#e6¦ßÚ‘ßÅii Œ©H,Æ1؆Î}òI5zŠ­„êÉîNž3¼€G¥ŽŸklÞKx£m’—]»,OÝ8À"©ŸKökÛd±²ŠÞïË&8Ñ€Œ¦v•ù³žNwg9©h¡Pж‘cþ]CíÒÞ-­šË-Ì7O…|4‘çïwÉÏéŠ4¯Kmqf—Q§Ù!3ï âë0à Žp}ê½½„-oë°{iuÀÚ­¼ö4Ö‰m̬„m$îrõÇ xêM`jZ„ú®¥qs·Î˾њҢœhÆ;«9neYÿÇÒ~?ʵh¢µJÆmÜëúN¯q¤O+‘Kј¦†eÜ’!çpz€x ñWh¨tÓVe)´î‰‹®Õ¦T°ÓÒÞHV³,DF¡[x#æÉ;¹äœ÷ÍK/µoà¼û5šÉ ÓÝ€°Ò2ª¶~nŸ.p1É?J­EG°^ÚC?á$º:tVmfòBž\7O2Æ›·aI8çëSÉâÛ©5~¶6ܺÊ%t”È¥Y›æë‚N{TtSöþ¼ÁV’þ»´½n}.‹³Û]ZÜm2[Ü¡d%z7FOCÞ¬Iâ›ÙãȵE–xfÛ{U< B*€z`ý}éh¦éE»‹Ú»XµŽ5vv´±‘ŒÓÊ £ü¾wúÅaÁüÇ­U“Å7Ò,ãË<è €”S•XŠ•#'¯Ê3E*„Ãu¤÷6u_@ñÃ&• Šð_ éehB \tÞÛ³““òaX©â3ÿÚ¢Ò´èð›Dq¬ŠÎw¼øN:RÑJ8xÇaʼžæn¥¨OªêW÷;|éÜ»í¦YÿÇÒ~?ʵh­#$C›z°¢Š+B :Ïü‚‡ý|§þ‚ôÝ?¢Óµ¯ùúùOýéšwE®Xÿ_×DuKø1þºš4QEu¡EPEPEPEPEPEPEPEPFZ( »¯…ò4Üÿדÿèi\-w_ ?äi¹ÿ¯'ÿÐÒ¹ñÁ‘¾øÑ=†Š(¯œ=â­æ™a¨ìûuµ×—ž|Jûs×t•Uÿ„g@ÿ ›ÿ€‘ÿ…PÿÎÿ@=7ÿ#ÿ ?áÐ?è¦ÿà$áEÂ3 ÐMÿÀHÿÂøFtúé¿ø øQEðŒèôÓð?ð£þþ€zoþGþQ@ü#:ýôßüü(ÿ„g@ÿ ›ÿ€‘ÿ…PÿÎÿ@=7ÿ#ÿ ?áÐ?è¦ÿà$áEÂ3 ÐMÿÀHÿÂøFtúé¿ø øQEðŒèôÓð?ð£þþ€zoþGþQ@ü#:ýôßüü(ÿ„g@ÿ ›ÿ€‘ÿ…PÿÎÿ@=7ÿ#ÿ ?áÐ?è¦ÿà$áEÂ3 ÐMÿÀHÿÂøFô!ÓEÓ¿ð?Š)¦ÖÂi=Åÿ„oBÿ .ÿ€©þÂ7¡ÐNÿÀTÿ (ªö“î.HöøFô/úéßø ŸáGü#zýtïüOð¢Š=¤û‡${ü#zýtïüOð£þ½ þ€ºwþ§øQEÒ}Ã’=ƒþ½ þ€ºwþ§øQÿÞ…ÿ@];ÿSü(¢i>áÉÁÿÞ…ÿ@];ÿSü(ÿ„oBÿ .ÿ€©þQG´Ÿpä`ÿ„oBÿ .ÿ€©þÂ7¡ÐNÿÀTÿ (£ÚO¸rG°Â7¡ÐNÿÀTÿ ?áÐ¿è §à*…Qí'Ü9#Ø?áÐ¿è §à*…ðè_ôÓ¿ð?Š(ö“î‘ìðè_ôÓ¿ð?ÂøFô/úéßø ŸáE{I÷HöøFô/úéßø ŸáGü#zýtïüOð¢Š=¤û‡${ü#zýtïüOð£þ½ þ€ºwþ§øQEÒ}Ã’=ƒþ½ þ€ºwþ§øQÿÞ…ÿ@];ÿSü(¢i>áÉÁÿÞ…ÿ@];ÿSü(ÿ„oBÿ .ÿ€©þQG´Ÿpä`ÿ„oBÿ .ÿ€©þÂ7¡ÐNÿÀTÿ (£ÚO¸rG°Â7¡ÐNÿÀTÿ ?áÐ¿è §à*…Qí'Ü9#Ø?áÐ¿è §à*…ðè_ôÓ¿ð?Š(ö“î‘ìðè_ôÓ¿ð?ÂøFô/úéßø ŸáE{I÷HöøFô/úéßø ŸáGü#zýtïüOð¢Š=¤û‡${ü#zýtïüOð£þ½ þ€ºwþ§øQEÒ}Ã’=ƒþ½ þ€ºwþ§øQÿÞ…ÿ@];ÿSü(¢i>áÉÁÿÞ…ÿ@];ÿSü(ÿ„oBÿ .ÿ€©þQG´Ÿpä`ÿ„oBÿ .ÿ€©þÂ7¡ÐNÿÀTÿ (£ÚO¸rG°Â7¡ÐNÿÀTÿ ?áÐ¿è §à*…Qí'Ü9#Ø?áÐ¿è §à*…ðè_ôÓ¿ð?Š(ö“î‘ìðè_ôÓ¿ð?ÂøFô/úéßø ŸáE{I÷HöøFô/úéßø ŸáGü#zýtïüOð¢Š=¤û‡${ü#zýtïüOð£þ½ þ€ºwþ§øQEÒ}Ã’=ƒþ½ þ€ºwþ§øQÿÞ…ÿ@];ÿSü(¢i>áÉÃ_Õ6I¡é޹ÎÒ23ëÓÜÒ/…ü>ŸwBÓéiþ”QKž]Ö;Xü#zýtïüOð£þ½ þ€ºwþ§øQE?i>áÉÁÿÞ…ÿ@];ÿSü(ÿ„oBÿ .ÿ€©þQG´Ÿpä`ÿ„oBÿ .ÿ€©þÂ7¡ÐNÿÀTÿ (£ÚO¸rG°Â7¡ÐNÿÀTÿ ?áÐ¿è §à*…Qí'Ü9#Ø?áÐ¿è §à*…ðè_ôÓ¿ð?Š(ö“î‘ìðè_ôÓ¿ð?ÂøFô/úéßø ŸáE{I÷HöøFô/úéßø ŸáGü#zýtïüOð¢Š=¤û‡${ü#zýtïüOð£þ½ þ€ºwþ§øQEÒ}Ã’=ƒþ½ þ€ºwþ§øQÿÞ…ÿ@];ÿSü(¢i>áÉÁÿÞ…ÿ@];ÿSü(ÿ„oBÿ .ÿ€©þQG´Ÿpä`ÿ„oBÿ .ÿ€©þ=¦“¦ØJe³Óí-ä+´¼0ª=2NRs“ѰPŠÙ(¢Š’ÿÙtpm2-pkcs11-1.9.1/docs/illustrations/object_diagram_nv_objects.png0000644000175100017510000015766414535673717020754 ‰PNG  IHDR –øŠ‡sRGB®Îé pHYs  šœ iTXtXML:com.adobe.xmp 2 5 1 2 †Ò®$@IDATxì¸EÝÆOBIè¡×„$ôÞ‘H(*JoÒ‘¢ˆ" Eš"| REi*Eª€z聾Ð;„Þ¿ß{¹6›9çÞsï)[Þÿó¼wwgËÌüfïžùï”íS±™€ ˜@ñ|B–¦,^¶œ#˜ˆÀ§lõ›(Ä&`&}rF'ÑLÀê%ðU½'øxÈ)ÿŽç´àœl(3¾eμón&`&`&`&`&ÐZ“·6:Çf&`m#à7ÅmCïˆDÀ-{ 颀 ´—€[@ÚËß±›€ ˜€ ˜€ ˜€ ˜@©Ø)Uq;³&`&`&`&`&Ð^v@ÚËß±›€ ˜€ ˜€ ˜€ ˜@©Ø)Uq;³&`&`&`&`&Ð^v@ÚËß±›€ ˜€ ˜€ ˜€ ˜@©Ø)Uq;³&`&`&`&`&Ð^v@ÚËß±›€ ˜€ ˜€ ˜€ ˜@©Ø)Uq;³&`&0ØŠü”‰°xÃLÀLÀLÀLÀê# ¶¥Uߊ}ô2dï!ôú½‹Gz)µ0ú²sÉ¢ÃÎàï§hÚ¯7;þ^Îß?¡Žÿ JÚNl(Ù/‘ŽIëTÂGÂÿGØïÐÈö ô=í~ÃÆk&`&`&`&ÐV®¨UÇ¿»>DG¢™Ñähzý©5ä5´# ö+Ÿ¡ïuè˜7ÐÖHˆxkÿb(Ø.¬<ܹ±?ËGÑœ)M϶Z`tþ*ûæbù}ôJ¦ÍÒ›ïëÒß`&`&`&U®¨U/™‹ØuCd÷wS‹È`t)ú ’Í‹Æ#m‡d‹"1žälÖoCrNdi䯃'ù]'i×±qB2Àë“´ê© l&`&;zóe30(%ɪºT¥MN‰µbÜŒö@²5Ñh$‡@-²ÕÐô šÉC·¢ÝÐé(m³ }I»*±¡ÖuÓïÒJhut²™€ ˜€ Œ€‚¨³c&`]˜‰ýó‘6ÏPK‡…QHݱtìZèF46 Ý„’ö?Cj)Ñø´ÍF€ZE’v/owÈéIš®u2Àë&`&`&`&`&Uêš’VVÓÚêtÝC„‡E"UK†œ5ºQiŒÇzè%¤VÙÃhcôlç’Å„.XrLd× ‹Q½]°Ôê!'e´Rù G¶o¤ïimÛLÀL wúæ.ÅN° ˜€ ˜@oÜÂÉ<ž~þoCØûèA¤Š­º]íŒÔRþ’©%d;4B1Û‹@9.R=ö&¿†Ô­ëô8ZÙLÀLÀ F ýT°ì9;&`&`)DZ=7:©Åa ´:©ÛU螥.Q"u… oÚµ¾’“ºN±:‘=ÃÖo‘®™´)ÙP¼I HZŽmu³™€ ˜€ ˜€ ˜€ ˜@æ ¸«Jí"ZŠÝr"¾Døý:%_JéqLŽÛ˜íÏ‘œ•`ó³¢ãB,…ËÙx©Ë–Lƒ×cer6áC;÷-À2iÚ—’Ü_ÆõÃ2rpžMÀLÀLÀL s\Që^‘È¡˜i̇-û|_g¿ŒœB0nðN7 ù0ÜPE-m~Þ¥‰x;o|_ç­Äœ^0(ds{ôš€ ˜€ ˜€ ˜€ ˜€ ˜@£ØiI_ÇLÀLÀLÀLÀL Kv@ºDäLÀLÀš@@³o-„’ƒ×›/i&`&`&`&`Í'P¦Áº¿ç¤ Û¯3|$Ë£:×õ!BÍ~•Ö„éZÉðÏØÖ¹[¢¤MÃÆxtG2õîœ?-Çýiö-IeuÒô¼²®ò£ý žOÚ©l<‹¦Nl]¬Ò*X02p HJÙy4(2jÏñä {­‡m-‡’ßãкœ ]kLbŸZ(F¡³¾lSVÞ@Ë£EB Ë®ÎWÜW¢AhY4ZÍŒ.G²®òsÇ<‰N×Á¶ËÝÐèÃÎ0/LÀLÀ2J Úƒ>£Éu²LÀLÀ@à=®ñrJŸv^÷³Dø3¬«Â/GAßû¶+§¡Ðö(iµÎÿ6®Š~ˆäèèmþch+4Õú0!»;Lß!Ù @?BúRûèBt-²™€ ˜€ dœ€Ü600|ÐÃÕ4µ*T³Ù‘<þ¶Ïéëæ±>ÌLÀL #ì€d¤ œ 0h!é‰KŽDÒÞHn$ÖÇv®«ûÔöèZº[±ZÔ¢²µ6"6¶3Lçß…tüßÐfH­4rj4žãbô>²™€ ˜€ œ@ß‚çÏÙ302ˆuÅ Ýu”ÿä~­«›Ó )­É¶,y¬¶?@r ´_NÃù(ijñÐXÃU;_×e› GÐÝH×~=ŠÔ*Xú WXµðpž—&`&`&`&`&С²š\¶%!Ž´*þìYiü‡­{’÷sXïÞ™>ÊLÀ2D@ m&`&P4ªœ¥ÍÏ»4oç€ï뼕˜Ók&%à.XQ,40000h; Í êkš€ ˜€ ˜€ ˜€ ˜€ D ؉bq  ˜€ ˜€ ˜€ ˜€ ˜@3ØiU_ÓLÀLÀLÀLÀL JÀH‹MÀLÀLÀLÀLÀšAÀH3¨úš&`&`&`&`&`Qv@¢Xh&`&`&`&`&Ð “7㢾¦ ˜€ d@ì L¦“d&`&`Å&àb—¯sg&`&`&`&`™"`$SÅáĘ€ 4ˆÀ§ ºŽ/cY&àû<˥㴙€ T%`¤*ï0È1Ñ9N»“nÝ%àû¼»¤|œ ˜@¦L–©Ô81&`&Ð7s™%Ð<ÈϹÆ0õU²C@-#ÑNèÝì$Ë)10000žX˜Ó~nBï¡kÑOÐTÍbƒü5ÑÉZèèEô8:­ˆú › ˜€ ˜€ ˜€ ˜€ ˜@ ô'Ïë"9 Ï qè4´šuÇbHú¼8 ArHNAk#ÏÈ› ˜€ ˜€ ˜€ ˜€ ™À 2·;º Gê¶¶?Zõĺã€$¯» ŠïNôú+Úu×ááP› ˜€ ˜€ ˜€ ˜€ ˜@V ¨•a ô;ô(z‹¶@Po­^$ß\lȺÉúÚÍ„l&`&`&`&`&`9!0éüº½îA‡£fŒÁèB’&˜œ¡¢K‘œCù)ˆl&`&`&`&`&`" Ýgqº½ƒ.AÛ£ÙQ3­QH2›²: ½îE£E‘ÍLÀLÀLÀLÀL  f ÎÍÑ9è5ô: G­ÜÝ „,L°ÉXŽND$ÿ?¤|®ŒäxÙLÀLÀLÀLÀLÀšD`1®»…4MîÕh4/j—5ÛIçkYŽ@ WÐéè;h d30000è©8÷ûèT4=‹NFßCꦔkµ’Ìó|lì‹nCêvv>R«Ð4Èf&`&`&`&`&Ð ƒ9f/t R+ÇH¤Jö¢(‹ÖN$ÉCc]vE×"q»í„fA600000Nê:4‡G¯" ¾Þ M²nYq@’œÄm+tzÝŒöAƒ‘ÍLÀLÀLÀLÀJG`r¼#º©ëÐ]è×h9”·ÕYt@À8Áú±¦nlg¢×ÐèP´²™€ ˜€ ˜€ ˜€ ˜@! ô%WßB<}Ò·9.DÛ¡YQž-ëH’­Êa:=‹žî\_¥öÙLÀLÀLÀLÀL ·ò-Ñyèuô:©¬©e‹byr@ÒÌ—"@­!"u}S+‰øO‰l&`&`&`&`&yêÖsºi ôèǨÈ_óγBÑL°!¬iœÈh¤q#j¡’9²™€ ˜€ ˜€ ˜€ ˜@&LM*ôÅîÓÑóH]zNBú.…Æ”ÁŠâ€$ËJÝâvFW!9’š‘L3li¦-› ˜€ ˜€ ˜€ ˜€ ´”À|ÄöStzýý-„ÊhEt@’å8-[ }cDÜŠöEC‘ÍLÀLÀLÀLÀN@ãÖFÿ‡þ‹^FF#UNËnEw@’å«)“¿‹Ôâ¥1#£#ÐÒÈf&`&`&`&`=&0gª Î?‘ÆÜŽFË ÛÄÊä€$s®é’WAÇ¢§ÐXt"ZõE60000¨J@FU&BúNÄ[H]n~ˆfF¶êÊꀤ‰,N€œTM³üú ZõG60000¨Ìƒ­ÑßÑ›HS±ÊYù 6ºiv@&5ˆ ½ÑH¤´KœÙÍLÀLÀLÀL DÔWÿ t.G» ¹‘­gì€Ô榴пfÔÒ代9‘ÍLÀLÀLÀL `4H|#t&z ý€ÖA\në=; Ýg¨i›7EEo£;Ðþhd3000È)I÷>è¤7Î×#u‡™ÙOÀHϘNÎir„OArŽCG¡åÍLÀLÀLÀL Ãú‘¶o£? ÍFô:mˆ¦A¶æ°Ò{¾šQë[èh¤©žõQ˓Кh2d3000h3yˆ7¤~õËq+úZÙZKÀHãy/Â%Dw#ÍÈvRW©ÍLÀLÀLÀL ôx5¤7Ä#Msª~ô[¡‘­}ì€4—½&HØ ýÉÙþÚù¾‚ÍLÀLÀLÀI`.¶-ºiÀîýèH´ò4¹@ȈÙi]AÈéó!'DΈœ9'žÅ 6000¨—€úÁkî!èNô.º í„æ@¶l°ÒžrQw,uË:©›–ºk©ÛÖÂÈf&`&`&`&P…Àt„kZR}5úô8:iðíÈ–}v@Ú_Fꢨÿ™“&ax©»¢¶Ë±·™€ ˜€ ˜€ ˜@© è í/ÐMè=t-ú ‚lù#`${e¶ m†¦G6è); =%WÌó¦$[j==é9ó :-‰l&`&`&`'0ùÛ]ŠÔ_û.ôk´òl6@°5„€†`,äEú’«ÕÐñè™Ni}Ò>› ˜€ ˜€ ˜@Î è}%tÒ<þú6‡ºDl‡Ü/¶¦°Ò¬…¼¨ZAÔòz ©•DãÏú!› ˜€ ˜€ ˜@N ê{}ziªÌcÞ0N†l&Ðlv@šM¸˜×L¶4Näf¤q#¡­»„Áf&`&`Y#° :Ý‚4ûÌèÇh ²™@« Øi5ñâÅ7 YÚ ]‰ôL»i†-à600hiˆtt:z=NBßAîº[[ Øi+þÂE®çÝæHßÑØµÛfè›ÙLÀLÀLÀšH@?¶?E×!½üú9ZÙL Kì€d©4Š•ÍÞ§-zùò ziŒÛ2Èf&`&`&ÐKšºrmtú/zýmŒü•a Ø2KÀHf‹¦P ÓÌ}+£cÑ“è9t"Ž&C6000n˜‹côåà" ¼„üv¶Ü°’›¢*TB#7£{ÑHß5RWÕþÈf&`&`&ÐI /ËUÐQHÓP¾…ÔÏù‡hfd3<°’ÇR+Vš5‡º¬Þ„Æ#}ûHÏUÍh300Ò˜‰oþŽÞD"9 «"9$6È;; y/Áb¥_ÏÜíÑ¿œ‘ëÑîH-Î600(,¥É™ºR݆ôx9ÚÍl&P4v@ŠV¢ÅÉÏÔdeôW¤ç;ÑþhAd300\Ð ñЙHƒÇÿ‡4˜|¤Áå6(2; E.Ýâämr²¢‰>NA/¢1è(´²™€ ˜€ ˜@.è Ú>è¤irÕÌ¿7Òô¹6(; e*íbäU3j­ˆŽF#9$Dk!9*600È~¤âÛèè)ô:mˆôá,› ”•€²–|qò½Yùº ©«Ö¹H­ÚS!› ˜€ ˜€ ´”À<Ķ ƒoe]?RK"› ˜À×ì€øN( Vßý©uûŸh;¤Áí600h8ɸâ0¤fù‡‘æ–×àÅ­ÐŒÈf&0); “2qH1 Û¢ M(r#Ú éå”ÍLÀLÀzL`ÎÔÌèmt:­„v@êãå£óO@­å#ÐIèyô_t Ò‹+ýÆØLÀLÀL 2= 6EA¯ Ízrö§©ûô6#¨/ër8>F3#µf¤[4Ôût6²™€ ”ƒ€^H¨+fò92„mu×Ðó#ù,Ñ81uÅ”#¢ç‰¤.Ï¢'Rk‰ž560ìXŽ$FS§’’7Wý@ÿÿ¡îþߵԋʱ(ù?ÿ4Ûrbl&0€ (r¿¢q«wj –‹£´AP¯L =Hôpº¹s9–¥ÍL æ"zŽè¢åÂH•ŒFÚ—\LcË’Ï‘¯e&ÐméºÃœÙèÿy׺]>вO@Îã0t2ƒôÞ#ÞsÑúH­.60üÐKе‘f®ÒËvxÒØ®¬Û|$°»]È®æXwËÊz‰:}$຃뼟|­’Л µÔª4¨ʼnhÊ›©¯÷HƒFkåQŽÊ¶Èf&P?ïsÊë¨Öÿ˜¾P®±[³£¼Ùl$ø7¨«®©or̆yËœÓk= àºÃ×Ï;×zpóø”rÐ72Eµº¨‹Ä™¨ƒÉ¹lKMݳ”ß®úwŸË1ên3蚀Æzüªåx¨åô4Ê»©«Øq¨«.žšˆÃcCò^ÚNŒ€ëñçë±»Åa&" ®£P­JÃì_Í“¡ Zyÿ/û—F60êÔ=é^TëéFö/Zý¹Ý³0)¿ÕÊûýìw×Îܱ!àºCíÿy×"7ƒL X†}‡£Ú§ºQì€ú "Û:d®Ö@YÍʳQ‘8o&Ð ê~¡.UÕž#êÖ¹Y/®Ÿ—S7!¡ú¶P5ï²oD^2ãtš@ ®;| Çu‡7‰w™@5k²C?ˆÕ~,G²o®j'0|òtªÆCÝÓvA60ol̪ôjÿ7ˆ®Á©e±Éè?Q5t¿yY`8Ÿ…$àºÃÄÅêºÃÄ<¼e5 hzÚOPìGRí_#õí,£mC¦5,ÆFabc3øzêíjãÆô|Ù»Äö$ïr6bϧÓ~› ä€ëÕKÌu‡êl¼Ç:ìÅ_ýÆ~ÕUBÝ)Ên @}¶cŒv**«ƒFÖm&Ð1‰Cµÿ'ᳬU–‚Á¨§#ÍÈrDÀu‡® Ëu‡®ùˆ’ФÚáÃì+S—«®n©9àʼþÔÕ¼ß JàpòUí9rûf*h¾{’-Mý=U㥩ˆm&u®;t¿„\wè>+Yj:­Öòq3ûf( ‡z²99Ÿ…ªUލçb>Ö @`wòPíÿAã=4ŵmbýÙ¬5.ä'î-È×ê/×êgæ3 J`MòUṁ¦¡Õ¤­:½¥¬VéÚ£úiÞc…"° ¹©öã/웬P¹mlfÄæ {Žˆé¯f !àºCï0ºîÐ;~>;çô ‹j³]©ÒÐ7çùkUò÷!¢j•‡M[•Çcm"°ñVT}l›Ò”Çh«UHô‚h­ÚrC`!RúŠÝûgæ&ÙIèiUXŽ'|Ñì$Ó))1×[ø®;4–§¯–qr.F¡X¥Ac>Üí =0 >1K¸œÚL Hú‘™QìžÿáîvUiëÙ|Y¦îq4õ3õ#àºCãX&¯äºC’†× MàPr«4q¦Ì´ýë6¤¥èQnT…õC„»o|ÑK¿Øù»¾Ê½­ï€ØK`.{fll4¾š Ô$àºCM< ÝéºCCqúbY °:‰¨öC¦e¶Æ¨ÖG^_޵™@ è{±çˆÇ85¯4/¬ÂÜßis_ù®;|âUk®;´Š´ãi:½q×›÷tÅáuÂ<î£yø«Í¤îY³4/Z_ÙšB@ËÇ¢ôsDa­9¦ç²Ï 4÷ç ›¦9Qúª&ÐAÀu‡öÜ®;´‡»cm½qOÿxi{‡&ÄåKNL`y6c_ˆÖ´{6ÈÃIlì9²^ž2‘Ó´~§ û£rš';\wh_9¹îÐ>ö޹Aô¦=6 úNÂû4(_¦6}-]q“S¢ŒÍò@`0‰Ô$ éûøê<$¾ i¼<Â_:¿ ùs6²EÀu‡ö—‡ëí/§ ŽçÜt¥Á•ß^íÁ©³rÎÛ‘r¸¡×ò)&Ðçiú9ò a®ü¶®44óUÌ Ôa› 4š€ë&Zÿõ\w¨Ÿ™ÏÈõË~¥+òªm­%P­){ÙÖ&ñ™@ÝrƧ(ýùmÝWò ½%ë§iÔåœØL Q\whÉÞ_Çu‡Þ3ôÚ@à@âLWÞ'L^µ­µ4˜ïq”.‹Z› Çfu83Ò÷í«„ytÝ({}‚&x ¥Ëãä^_Ù0o¸îð ‹v¯¹îÐîpüuÐW5_Aéªë¾’Oh"å¡·—ó5*_ÇL`&®§—éçÈA ŽÇ—ë>ý"塪ϾÍzKÀu‡Þlüù®;4ž©¯ØD?æÚéJÃg„ jbœ¾tmS²;ö%úSkŸæ½&Ð6‡sú9¢n3¶-EŽXÓò¾‹Òå¢îY6è-×zK°ñç»îÐx¦¾b ŒáÚé( $µµ—À¾DŸ.½½T¥ÂfY" ¦ÿ—Qú~ÕàT[{ üŽèÓå¢ï:MÞÞd9öpÝ!›…èºC6ËÅ©JXšíôÓ—„-ž:Λ­'0QÆfÄúQë“âM &uØ›~Žh0ú<5ÏòÎV˜“H4oº|¾×ŠÈGa ¸îÝ¢uÝ!»eã”%Ëzú‡iTb«Wû¡fÒY©i̦ pTm으†DÂÓåóï¼fÆé.,³#÷é%…Ímþ2v~¤|þ–¿l8Å"µºƒÐt§þ!„MMŠëMÅë‹÷–€þYÇ¡tw×Þ^¸‡ç/ÇyO Í_¯·§ê»¼; &¯^?¤z›§c4NåZ4;ªfƒÙ¡ 䉶F²=Ðÿ:Ö*•XêšéénÇÁÇ´z±¦ËGy˜­Õ q|&P…@?ÂßAéûtã*Ç;¸õÖ”Æçh¦,› ÔK Õu‡ÃHàèH"o&ìˆÎð®ê÷p\¨$—kþËÔ>ÕTOØU³ôõžäÀ£ÐÔ'è|mËîC ½< 6€¥c¡Ðà¥ë ÚÝËõíî%?n5ò¯Ö†¤éïÒd@ ×å\Ü€f@¸z4:éTezš ÉAЧZA>@·¡ðOÏêD¦óô°T^çFK¢Ñèl¤™`´/Ü/Zª_ôŸú´kg_é;Iij!!K¥móT˜7M ]¾OÄúŸMš^\“ ðz[ ü›ØßJ¥`Z¶7H…yÓºC Õuýæé·:mÉðZõ§ó5Jõ€¤î`[¿ýÏÂUç…ÎBÕ^ö%¯7˜ãöCz¡¹’iH³®¯ní:&ia2¬Që®;4Šd× Ê:O+Ýá?ˆäX•üôUä°†©ÌôÏÿ"úɱ8탴o$ÇCiÖƒB6mƒÔ2òcTË^gçËHçôàZ¥ív¦G?Míhæƒ"Õ$›Lò5‡H°ƒL åbÏ‘ŠOZžGXÀgì¸,²s‹H˜ƒL +±ÿùvÕ”Ö®ê!?jõS= )Õ7dú áϰ®oéEçü¨š…ë〢Qh³ó<Õº^ì¼Þ„¹îÐz=?¯šW«µúDw 4ÀˆÈ•Ûõ‰$ÅAbÏ•];_®¸pòI Kuìªþ(¯ÈÊn mv°œ©Gˆ´R]D]KïE]™þ‡ô›<ýÅìÿŽNílRXìÞu‡&Á—µHT_ÎÆ®…S»õO|m*¬•›r 6Co"9 ¡‘H}%gBêÖ³· TwªþhÕ„æb=؃¬è|{:)ž˜]OàÕè”ØÎ6„=FœÏ¥â‚í•SaÞ4VX”gMEúÛ£RaÞl?[HÂøT2fd»»/oR§z³¤²XwPQÔª?„¢Z•]RŠ`z–ëÔ–{ ý‘ZHô?êK³ìPVT¯xÝŽTϸU³رÚ®Ú wÝ¡Á@»s9; ]S9Dƒ¤TAo‡ÉyŒÔM` 4;Z-Bz0Tk‘̾±Hç¨õ$臬Û•Ñ·ÑH‚Zösv®ŽäeÁnŽ$"Ö…,r˜ƒL iô?’6½éû,èí¶ø‚ÜIE¬ #‡9È:´£î  ª#¤­_¢®êá¼SXY>¡µÃ–#Õ!¤yÑ9èH¤úä(Ô+Nc=ØßXQ½b}4@o jö;~‰ŽGziÚ sÝ¡”qØIÀ¨²«¼ÆnÔ*§7€mµF¼‚ºª?pH—ö G¼Ö©q,å$¨µG/,ÕÛ Ô+´ìiVT¯Æ¢îع$gG×o…Åþç]wh"ù¾M¼vQ.»c7j«òûéAr NȬ¯…îAr n@— 9!}ÐèJ$ÇEá¶S¸ Ò´B£/܃ëÅðßâ:zd3vˆ=Gb÷j3Ò§ç— =ÉúQhj$KïWë®ÞXª²"‰t¼lo¤ki™¶ó оU;¦a}<Òs)i¿d#™&µ)ž-ÑBècôS”´5Ùø O6i=V6Ú—/[L«G²Õ캃^0~…~‹† 9Ѩ…ºª?pH‡MÏß¹Sªö:¶ãŒI»˜v÷x¡|ìÖëñê;1ö?ïºC} ë:ºo]G—ïà)Èòâ‘l7û!‰rBÐ'¬m„ät¨ SM•£Ñï‘l¤üÛÐGHý4õÆb8Ò~OLƒ¤%·U)P×­P¡H×êu9Y/§"íÏv¨L¥vyÓšN`vbH޳R„ú?¾K+-0U>~‡T¡ŒöCúaß É’ûuŒZJõ63¼yÔ~I¦ß ­o«„MÇú†(vmÊŠžSêαHd©ëè¹*9r:F¡³ £‘œžAHÖ†ÎE£P³í^"ø0ÉllÏ“ ó¦ Ä´«îð8‰Ù EO µˆl‡ôû¬}Ý©?è·}¤s“Z“mYò·_Û ÷Q5=}¼ÎIZzrûQ Ï¡ä9ÍXwÝ¡T}ÍТþ’Ò?dVlv¢Šµ~üc¦‡ ò  x™ìj2›,3­oQ&Îk¦¬FjÒ÷ã-L¡*Ó¦âû'Ûv†Åöï̾ð¬źިÊöA¢wQÒ¡Øí[‘^F$[@F²­ÖŽkœ `ªà¤è­«8éü)‘*ú_–†^A¡Õ—Õ¦ÛÝÄ.·MÕ@ê3rš¼ ЮêUN+t°ë-,^½…²U'°@dד‘°v½JÄcæØŽÙgþ©;C™,VF±²,çµ}b÷^ìmE ûÉJh8ú ¦ÊÊ@¤9j!Iîgs‚}Èš˜d+ˆÖÿ>ሯWTù†Î™ ““1°SrfŽFï 9DŸ¢ÐwÑ¡è¤.Yo£VY¬ŒbeÙªô8žüˆÝ'±û©™9ÒK‚gÑçU"éªþPå´BÇÊ(V–…†ÐªÌÙ©M:vãÅnÐÚWñÞVx*áü‘0™@+dá9¢J¼*$ê*q;R+Æå(Ø~¬ŒCÏ¡ÛÐ|èpTÍþÆŽ"94r"ä´\Œ’¦®7£‘â’“#‡"˜Zo§¤)rzÔ2"çCv: †®GéëÔT‹=ëýi*òÂ\< ÿó…ÙÂŒ¸îÐBØv@jÃöC¤6Ÿ¬îUbe™Õô;]Å"»÷b÷h3s-‡ac´>ŠF 7P0µ>¨K†´Ò¾}Q5»‰S ÕÑ6H›(˜“!µ€hœšœŒ©Ñö(Øã¬„8çeýt$Jþ.)]²ß}½héßXÅʲ¥‰rd¹ »Ob÷S.2S¢DÆÊ(V–%BÒ¼¬NÞ¼KâÊú¡N[ìMãíöˆ•Q¬,Û›JÇ^±{/v6“ÇÓ\\NC5SËÈk;µ”òvçvlñ%C²-RëÇá(ik°17’ÓZ4–eý43’i@lˆSÛlº=š½„dŸ}½˜°ìÜlÉ"ö6T-C6èŠ@þç»J£÷OJ ö\Ž•å¤g:¤n}ë>£\' ˆd÷åHXÖƒäÁ«Âð›TBwbû!¤Š†öBIÛ™ õ¹V_í ©›„ÞV&MSh^ŽÂÌä¾,¯Dâ¾H%p*¶'K…yÓZA ö©6qD3ÒóUí—ƒ¤·ýs¡ôþ°}?ûþ‡þô?'Ó¾~h3t>JšZ<ô<Ù®30\'ó+z¾ªÛVÚÒǦ÷7c;VFÕflFü¾f~ Äþç]wÈ~yºîý2*M Ç’Sýð%5os¯·ÊÃÙè6$§C¶ z¸cíëÞܹ®…Þô©ÂðmäÐÞ!ÍÉrÓºß^æ° dU¬Ó÷¢ÆCزM` ’—.·¼½ŒÉ6áâ¦nläÞ™7‡ÙuÝáëg€ëM¸yÝRj‘Þb(§‡!u³Ú ¥í"VC¡ûÃz¬G7¢9IérÓìz6芀ë]Êî~ײ[6¥JÙÝä6ý´B©ä3³ý"妊–ÍÚAà"M?G·#!ĹR¥ÿH43’S>=þ€dû£GÑœÒ ŒÓÑ«(8)¬N°×X Ƚ¬¹a©CâþéeˆþO7@rDöC Ç?Ëú‰mÛj›‡Óåö|«áørIÀu‡\[Ç3)ý?ïºC“ÊÒo„kƒÙ¦©ìrPFÄÞ.ÇÊ2#Éu2 N@3ȤMÏ‘±éÀlA·¡Cqd}t R ¨Lo_îXûú*T›'¶k­*¿Ésñ±r?:8°¼Éy™©ëC°ÏYÑÿlì:á˜f/cÏ‘XY6;¾~þÄ~o\wÈ~9Æþçce™ýœä …v@jÒØÈn½ ´e›€Æ¼¤í¹t€·M EÆÏ’©¸tª»R«Mé8#é „©KÖbûôC¼[çºÒºR ‰ºCue+r@8WǪ…ã¤kËÉIÛ%逌lÇž#c3’6'#Ûb÷‰ëÙ.3¥.ö?ïºC“ÊÍHm°OFvÇnÐÈaj#XÅʲItÔ%"»÷b÷h+ÌD$ó‘69zÓÞÎÆú.õc©··ú¶A¤. µlvªûR0›8éyz›+£XY’-› LD vŸÄNòFÛ ÄÊ(V–mOh`¤v)Æn¼Ø Zû*ÞÛj±2Š•e«ÓåøÊI vïµëm¨fç™7R Ó&çd,šAË£`j9y]„^FšÙëm³SümdÇ „ Š„¯A˜¸Ù×Î ?GÚI?ßqÇþçc÷S¾sY¼ÔÇÊ(V–ÅËyrP؆dd6ʧ")‹Ý ‘Ú¤ÙY†"½lµ)îQ–§ÏŒ•‘"­¾S_ »÷b÷h8¾™Ë[¸øÖ(ýì×8Œ÷‘f¨ŠÙj0æH$û)’é4êªUDÇj€úfHÓÛ&m6–Jdd=VF±²ÌHrŒ pÝaÒÂpÝaR&1ª¦fº&èÇ5èsÖõ¶°¶ ‘>„<}fmúª$„ò ˼O+\;ÇÞ›ezëîðTW¤tE¼y˜‹H>@Cêf5Úipõ‘H¦Y°CswJñ㑞;‹¢ÃÑÍH-èë#åiu$““¡iuùa©n\‘ƃü©;–œ— =S7FIÓÿð^É€¯+mo¡P^a©?6芀ë•Êôr!/Soë¹þ×ÃÒu‡®îvïoØ ùݦÅVý ±ëC¤JÂÌH?þ#ÐÓèH¦ŠÃ£hÎNÍÏòtT¦é3•÷ðàËv:$ÇVrÕ*³Ëµ‰K²B V Ñ8…V=GÂÿNX>CØŽH&‡ä.¤sµÿB¤<Ê4°>œ“\®Û±·RY•å;ÑóL­.¿Diû{¦[¸­.gÉôk½]Nc ³í¨HÀu‡|M½íºCo~_ª1þÂeÒ?D±þ͉­úU.b× ‘Ýß!Lo&#U@IS¥áM*É}¯±±Mg€Þ\jÞý˜ý™ÀÑ‘›–~K©‡n:,rjÓ‚¶äÊéòRÞl&ÐNWyú¾Ü§ "nu‰˜ç¡ÞäÌà ³Ô{Rçñ:o(Ò‹”,šžaéòº6‹ uš2KÀu‡JÅu‡ÌÞžíOXVþí'óM nfU•ø¤­‘ÜhѺÞȉKN‰Mq)Óûnk_¿©ÜŠuµ¨+YW¶"„suì'è¤k_ƒÒvI: Û¡+H2)*C› ´“€xuWJšž#'$Z¼þ.ñI=µzz"ç½Ñ©^\¢©§Æžñ~Ž4yá.ë…»©™!; ]ÓŒ½ù_žÓ¦Bu}zÃŽÐ 5±Ê‚ u o"gc}$ë‡Ô×zZÔé^-[z«,ÓgÆ*±2 yôÒZA VyFÄÝù¿lEúÇÄb/2ü™˜‘·jˆÝ/®;ÔfÖν®;´˜~ßÇ—ÇèÆ’èçS Ÿ’í©°foŽ#‚y#‘LG˜œ“±ûưÔCNZ¢sù –Ë" @U³SØÎÕríÎõ¦sPçzr¡Ø£’m^Hü‹¤ÒðÛ·¤Â¼i­& ®‘ï§"Õÿ­þÏlÙ"° ÉÑ‹œ¤}ÈÆ=ɯ›@Ʋßu׺¸MÊ»ÛH÷Ê~dä0umj¥©½5J—Ù6„©bãé3+ÿÐå¤=̆f³±™@; |Nä1G¸ÕÏ‘v2ÈKܱ2¹Ä–— 8™!àºC>¦ÞvÝ!3ÿ2NHš€únëMzRš¶RݰZej½øý éíÜh¤t‰d„þš»S °<iŒH¦Ï¼Ÿ|&ËHë#› dÀŽ$"}¾HXú¥BÒZÖ4èÆs(]Nɱqeeã|×OÀu‡|L½íºCý÷¶ÏhUöõ=ý£´E‹âÑ,ÅJ˜O[S`zúÌ@¦RY˜Õtùh{¾oñš ´•Àb×ÿmú>muwζBÈxä—“.ŸO ›9ãévò²IÀu‡ìO½íºC6ÿwœª?±žþaº<±¿•«ž>sRÚ‡GÊç®Isˆ ´•À?‰=ý9³­)räI§FÊçªä^7: ¸îð5°YX EY›üÈu‡:ohÞzzK™®8èÍXrÖ¨Ö§Ê1Š€Þ2CéòÙ[;m&!›“–ô}ªÙíôRÁÖ^ÓýÛ(]>[·7YŽ=ç\wÈnºîݲqÊÔOûE”þqÒ [{ lGôérѸ—9Ú›,Çn“и±ñ(}¿0É‘h5͘.»›¦Õ q|…"àºCv‹Óu‡ì–S–"pÛé( Wßn[{ô!ÚGQº\.mOr« tIà$ŽH߯/¦ïöØÚC@oB5Ýxº\NkOrkÁ¸î½uÝ!{eâÕ  yû5åmúGêÀçxWs ¬)•Ï ÍÖW7Ì™šÒ5ýÙ¥ÇWô‰½%°C¤<ÔŠêI,zKÖç‹€ëÙ»\wÈ^™8E]8‘ýéŠÃ«„µrJÞ.’XªÝú¶Bº$lpó¢ô•Sú³ý,J—éã¼iY%p- Kß¿úÞ¦«´µ†ÀŒDó:J—ÃZ½c)×Ú_à®;´¿ œ‚^X€s?Aé­ôâš>µ>‡Fø«<ôåY› 䀯)}‰ÒÏ‘3òø‚¤ñä•ÉÊÉŸ³‘-®;´¿<\wh8½$p4ç§+Ú^§—×õé]Ì!jqJó¿¦ëS}„ dŠÀŸIMú>Öàgwÿi~1-EŸGøŸÛü¨C‰ ¸îоÂLÔ®;´¿cnÍ ›¶ÊiY@IDATQI=o|ƒ G.£©óäh¤+mj‘ÒÛ%› ä‰À¬$6öñ»{Ÿ"OÉYZõ5æ;Pú9¢BúûA9+Ìœ%×u‡ö˜ëíáîX›D`+®›þÓö9MŠÏ—­TöBŒ¹Þ*ÙL ~B¢c÷ôï󘙜¤ù·U˜ÿ<'éw2óMÀu‡Ö—Ÿë­gî›Làf®«9ŽÑšJ`®þ"Š=GŽmjÌžøQU˜ª;–ºeÙL ]\whyךÃÕWÍ(¥I×G(VyЬ+¶úlÅá±Á¢âûƒú.å£M 7†“ÒØ÷)tßk&[}ªÍ2&Æn3vpÝ¡±%àºCcyúj9!°étå¡÷…¥ÙbƒrU ;¨÷—÷L Óv$u±rÈ·Ëtʳ•¸­IŽ>ìc¹[¶’êÔ”œ€ë¹\wh G_%§v!ݱ<…‘Ó<µ2Ùz{QÍù8¹• q\&ÐFwì9"'dï6¦+/QïIB«9‡æ%Ng©¸îлâvÝ¡wü|vAüš|Ä* ûÒŒ,¶I üŒ U°bì.&¼ï¤§8Ä Kà$rû_PØ1…Íuï3vd n§õþò¾‚ 4€ë=CëºCϸù¬‚8•|U«<\ξþÍwO²¥YhªÍX!†7¡~=¹°Ï1Ã}ªö9›}žeï›Ö‹3kðºŒ}~‰ñ /¯e“€ëÝ/׺ÏÊG–ˆ€~èÔÚQ­òpû•ˆGµ¬êCAÕ¾óœc32˜’L_‚ª=G®gßle“ʳf»UãôOöù%F š73IÀu‡î‹ëÝãä£JLàò^íGñ-öiðYYM_€Ž}á<ðR·+WÊzw8߀*$§ ð‘^¾Ä¾µÂÁ%\'ÏÕ¦/«3»½Á–+®;T/.ת³ñ˜ˆÀlU©È?¢2U´Õlª)E?AéÊTØÖ€sU¼l&`_8˜EøÿH/õ|ù *SE[y=Õz¶j¿ÍòJÀu‡‰KÎu‡‰yx˺E`3Žú¥+aûAöÉ«/º &ƒ× ïØÒSíý.pþzJ`gN¬6Õ·þ—nC‹öôâ9:oaÒ:Åž “Sòcd3¼pÝáëÌÂu‡¼ßÍNÛ¬LÌcQ­M ¢œÍ4èþPô!ª–}áÜ‚ÍjX‡}¯¢jÿGŸ±ïÿÐô¨h¦~ß¿GŸ¢jù}ú€ÍŠBÀu׊r/;m$0#q_†ªýx*üm´*JwŠÉ˳¨VžïfÿPd3èšÀrªõ?õ û·Gê¶wS¶E/£ZyÖŒys!› €ëñÿ}׊v§;?M'°1|„jý˜>ÎþfÂÉ›©Â°ºÕÊã—ì?Ml&`Ý' 1R¿Bjñ¨õ?öû·Dy|¡¡óÕRcÔÒÏMü1ªeýÙ9J>C´®¾ë=qnÔrú;4ÙLÀªpÝ¡:ï1¨ƒ€º'¨ÅáC”|ØÓõϹÎ;HÛŸ@c*ƒò)êéu“ç}Áu.E+ › ˜@û ¨«æ9¨QÿãŸq-I{=Þ)­+Lû’σž®+­ç!½ü°™€ ÔGÀu‡úxùh0*¦'üGè:$'¢§?êÍ<ï.Òµ7RW-› ˜@öÌD’vE£^4óyГk«[§Z9~ŒfF60ÞpÝ¡wü|¶ ˜@‚Àl¬kæ,ýP7êfO+ Ûq0ÒÛ› ˜@~ÌMRôâ /5÷Ýè—ÈË`3&pÝ¡I`}ÙúÔÛ¸¾«ûèV˜šˆVAt*} ©ÿu3LoLåpÜŒäüÜ‚ÔuËf&ozKº*Ò3d ¤­S f˜ºhéÂá9r+ë㛑¯i&P•€ëUÑxG³ Øi6áö\_ƒÈE0ž:”íh*TËôŽ÷ÐXôdJ/¢}60bÐD[ µ‘µÎ…4ð¼/’c¢ïŽÔ2µÌê……Ž×RÏ’;Ñ•h$úÙLÀ²CÀu‡ì”EáSb¤ðEÍàd„N›*ï'¤·“60rP ÈjH­’~ßÔJ!ÝŽ’NÃäl'Ÿ#ˆ®îSáY¢nUÁÔ=sÍNÉ¡yÝÔ©Y¾Žl&`Ù&àºC¶Ë'W©³’«ârbMÀL afäJÃPp8f]cA‚áõ®¦Úå ökÝýM‘s’¬CÁ!ź› ˜€ ˜@A t÷Ç¢ Ùw¶LÀL 4Ô¥*ŒïÓ1݂áAà½iý¬Ç!ª Ö—µåPpHVe]]=ƒC¢qf!› ˜€ ˜@AØ)HA:&`&"0ÛI‡CÝ£nEÁáÐ ðd7)6{e=u@Ò‘j|ÉÊ(8$rNîEÁ!Ñ8’Þ8Jœn30h'; í¤ï¸MÀL qææRÑZ7¤Y‘Z‚Ãñë_¢fY£tú4SºŠ‡dÖåH‡DãTš™/.o30h$; ¤ék™€ ˜@ë &ªàlh9…‚Ãñër ZeÍr@ÒéW>G àÌÃúH’ÇX·™€ ˜€ d˜€ Ž“f&` ó³.G#HÓàgCK›h§µÊIçq6ÖBÁ!™Žõÿ 9$šaëYd30È; * 'ÅLÀ4+Up6´T7£¤Ãñ¿Ä±YXm—’Îû 4Õ¯9&ú®‘‘ÐBò2ë6006°ÒFøŽÚLÀ: èY¬©iƒÃ1œu}O#ép<Ãv–-+Hš‘¹ÐB2‚õWQpHF±þ²™€ ˜€ ´€ÂvT&`&ÐI /Ë¥Pp8´|‡cë/ x¹ Å<‘é#ˆaº_-ešî78$y›H #þc&`Í&`¤Ù„}}0<˜žDk†¤àph,À}(8·³þ²}C ŒÈ7¹ÿzmÁ!ÁúÛ(8$#YÙLÀL ô쀔þ00¨+Íê(8 ±~ ‡"{6$ Ô0; ÃÑïë(8$º¿Æ¢àèÞzÙLÀL t쀔®Èa0ÌŠ’ÇP¶Õ*8÷°þ²uŸ€Ú¬&c·Æ ‡D<Š‚C¢ûïcd30°Rø"vMÀ 0 ­ZÎnEÁáP÷*O¯ „^˜úàiæ4Md}˜RŽopHîfýsd30°R¸"u†LÀ  ÁÁI‡C-£Qp84€üKdk; ½c©‰†¡àÌϺœäàèžc› ˜€ 䞀Ü¡3`&Áh8 N‡¾ßœ -ý½ 4Ùì€4ðL\n8 Éì¬DÁ!y‚u› ˜€ ä’€\›m¥' Ù†‚³¡åh NÇã¬ÛZKÀHsyÏÉå匇dJÖåŒHÿAãÍLÀrAÀH.ŠÉ‰4ÒXI‡C}ン¡¥?×þ[ÄHkË`(чdmÖ5£VpHô’×ÍLÀ2IÀH&‹Å‰2RÐsIÓ—®Žät Gª\%ŽgÙ¶e‹€ö–ÇbD’¬¿€‚C2’õw‘ÍLÀ2AÀH&ŠÁ‰0RèKî—Fr6$9¯£ÑHNÇ(¤Ê”-Ûì€d§|ô?µ, Éj¬«[bpHnaýCd30¶°ÒìŽÔJM`rr¯ÊQp84ó 9A¯°nË; Ù-/‘ÒwG‚C²ë÷£àÜÁº¿{› ˜@kØi gÇbe& ÊÏ (8«°þ, Ά–o [¾ ØÉOùMMRÕ*’EY¿ ‡DßÅùÙLÀL )ì€4«/j¥& ¬émëêHN‡Öÿ‹‚Ã1šõ·‘­Xì€ä· ‡D_l·™€ ˜@ÃØiJ_ÈJK`*r®V 9ÒòHßÝ£!§CýÍÇ#[± Ø)NùÎFV‚3¢åôH3kÉ!Ñòd30°Òct>ÑJK@_l^‡CÈ@¡…C]9>@¶r°RÜòDÖÖBrF´ü…Ö9$/#› ˜€ t›€n£ò&PZêž¡þâÁáÐtŸ÷¢àphëGÈVnv@ÊSþ “Õd É«l‡d$ëo•…sj&Ðv@zBÍç˜@± ÌDöVŽÑ](8ZÿÙL IÀH’FyÖUP+hpH†±þ ÉhÖßG60˜@ÀÈ^1Ò˜•œËÑ̺ºQ©â §ãä):`«IÀHM<¥Ù©i¶WDÁ!ÑúC(8$·³î@°™@™ Ø)sé;ïe%0'Ά–s! —³!éû_ › ÔCÀH=´Êsl²ª1cÁ!Y‚õ;QpHô‚ÃÏ ØL L쀔©´×²HÆ“ÇÌl‡Ö 9z;ù%²™@oØé ½òœ;YÕó(8$CY×s(8$³®{Éf&P`v@ \¸ÎZi !çÃÑêH?ôšµJ?ðAšÓß?ð@°5”€î)ÿ¦4i).¦"ÁÑRÛÁ¹‘õ'‘ÍL `ücQ°uvJI`r=ÉÙ&C£Ðh$§ãqd3f°ÒlÂå¸þÜd39å¯ê)rDä”hù²™€ 䜀œ “_J‹’ëàlh©⣜ I3ÐØL Õ쀴šx9⛟l‡D-$ï àŒdýud3È; 9+0'·tô?ªA›ÁáÎú»(8ZŽE6h7; í.âǯçáâ(8$êf:‡DÏÃñÈf&qúg¶™€ d‡@_’² ’áWIoøôÃ*B/"› d€¬•HñÓ£î¦Ë¡à¬Ìúc(8$šNÜI‚ͲFÀHÖJÄé)Í™¯ÐÐÂ1Œu½Ñ“³1ºsù K› d€¬—PñÓ7%Y”} ñ^’»YW—U› ˜@› Øis8úÒÐä (8«°þ4’Ãô&ë6È; y+±â§w²¨—:Á!Ñ„j Ƀ¬‰l&`-&`¤ÅÀ]éè#\ßBÁáÐWÿ‹‚³¡V ª´™@Þ ØÉ{ ?ý3’Åá(8$s°> ‡Ä3Ãf­ `¤”G™LMfÕª!‡Cã7Ô½JßÝÇ­¬{$l…#`¤pEZø ÉY‡D/ŒnBrH¤çÍL  ì€4ª/Y*úÈßj(´p,ÅúýH‡Z7ÔÜÿ²™@Ñ Ø)z ?CÈbpHä”èÙ-_E60°Òˆ¾D© ·I‡c1¶5°Q‡túÙL l쀔­Ä‹Ÿ_}s)8$ÃY ‡dëî> › ô„€žPó9e"03™†B ‡1Þ‰‚ÃqëŸ"› ”€²ßÅÎ_²§)ÒƒC²*ëÏ’[XÿÙLÀºAÀH7 ùR˜ÜgcuÖçE·£àpÜÃúçÈf&01; óðV± LAö4ÁHpH–g]ÝoƒC¢U~9› ÄØ‰QqX™ÌIf‡£àthP¢ÞdÉáôƒò²™€ Ô&`¤6ï-6©Èžºç‡dÖÕ%78$þ-†Í; „—e!0ˆŒgCË™PhÝÐòaô%²™€ ÔGÀH}¼|t± Ì@öô’¬ë7&8$šÑf¥%`¤´E_šŒ%§I‡CÓä&ŽÇØVÅÉf&Ð;v@zÇÏg›À¬dOÎHpHä hªßà<ͺÍJCÀHiŠº4]ˆœ‡cuÖû¢¤ÃñDiH8£&ÐZv@ZË۱囀ZDÂ÷G´ÔØB9#Á!ÑŒ[6(,; …-ÚRdL÷¯¦I ÇpÖ?BÁáÍúSÈf&Ð|v@šÏØ1—€^ž…-_GÁ!Ñò-d3°R˜¢,EFÔš± ‡–š‡=8£X‡l&`­'`¤õÌc1 ¨n¦Ú‡duÖÕE+8$úÍ{ÙL ·ì€ä¶èJ‘ðÉÈåÒ(8ÃX %7SÄfm"°ñjúQÙéèÇk•ʽ,ïë\÷ÂL w&çôPpH4ý¯&L Ém¬‚l&v@rST¥H¨²ªÌ‡Czz‡CËW‘ÍL Ôê¡o¨ÿú”ë,*šìÁ¿/"a3ÆèÏ%WAÁ!Y’u}78$w³þ²™€ ˜€ D¨Â¢yÓB×£÷ÐèD´1ÒWÈm&`Ù%pIûÉ ÒöÑÈf&ÐÓÍ÷ÑñH¿¡ãÑUèçH½ü260òÐ[›áèP¤75êê/‹‡ÖGÍL ?†’ÔQp>´Ôö|Èf&Ðzy·:iæÇ7Ð%hw´ ²™€ ˜@¡ ¨ÆÚèH4}€ôeØcкHoml&`ù& /<'ó§Þ G`nr´-:C/ óÐöhd30ÌèGŠ®Fóv#er(äXÈÁ£!‡ãô´’Cb3(ÉŽºOÊ Q×ÍL »æ'i»¢ ‘ZGžDg  YQ-ÓØLµªL_ë ï30ÞX–“Ç¢/ÑH”6u™R×)u¡RW*u©RתCÑp¤.W60bЋ}Gˆ–nÙ‚ÍrD` Òº7úz=ŒND ´£¡}çõ*ÒN› ˜€ 4ŒÀä\Iݦԗ[·*j͘ip¸L覷ž<®AäziP¹ÍL |.%ËŸ£ËÊ—uçØ E`2r³":é÷]/ïBG£õ‘¦ûU Ô ~ÏúÈfuðÌuáÊíÁ}I¹úy΋¦Mi¶õÀÑCFšíƒ4ˆm*,8#· ép¥{‘*60âÐsbˆÒϽAÝ‚4&DϽ´ÐKŠÐsÈÓ‚Áf9# ‹+£5Ѧ(Ô#Xí0µ†¼ôbò]¤gƒêªèêZª‹¦ž/!90¶èSâ¼1ër4TÐüà !õóœ AýPoL•‡;‘ÞpêmˆœO‘ÍL Xäh,ôY…çÈ`Ö{ú¦S•‘±è)ô4ú/ÒóD-©~‰› d”€^DªED?Ü-†T×è©«æ3(<ư~;ÒØ;&@(ƒÙÉw)ëÍÄJhµN©Â ŒV˜ÞzècG·&¤·60|PCÏŽðÑ3Eo1[azC*G$EYù¿¯–ŽWHã)HÓÛ @À]°²]ˆzK¹-Ò ðEz“Ôé§Ÿ¾2÷ÜsW´œjª©&¨ÿþ•>}úT>þøãÊG}Ô!­¿ÿþû•—^z©òæ›oö&Zû2:é-†œ'› ˜@k ¨Er'´7Òx°Û€*sÍ5Weºé¦›ð Ï]4ïÍ…|nûØiûZ1ÏÆÎ=ÑîHÿ°Ý¶i¦™¦²Øb‹uhРA•9ÓN«ÿýúM•9"Ò /¼PyüñÇ+<òHå­·êö%Ô¯û\tz²þ”ø 0: äxU4vE3Ôs®^T,¾øâ•E]´2pàÀ Ï‘©§ÖKÓúíÃ?œðyþùç+cÆŒ©<ú裕wßU½¥.SËÍ™è$4®®3}° ”›ÀRdÿçhKToÏý¯i\†Æd<Õ©gY~‚zb3s’‘ùÑÂHcÐVBrVê19@zè™ .é¶°’­ÂR%á ôSÔ¯;IS…à[ßúVe©¥–ª,±Ä•!C†TúöíÛS{uÌ‹/¾Øáˆ<üðÕ;ï¼³‡DÍ« Ðó½J„O6ˆ˜…À#Ð.Ho!»49+­´RÇ3dÉ%—¬èå…ZF›mÏ=÷Ü„çÈ]wÝUC¢·žê’zR?q› ˜@œÀB‡Ö‹ïކŽ%T]³ätH­ø­Ö³ji´Z}u÷‡Z_~‡ŽGênËæÿÂäB’8i؉ºlñP—‡UW]µ2bÄˆÊ +¬P™rÊz_f46Ç_~ùeG%bäÈ‘•›o¾¹»Ý-ôÐCQ 5×ÚLÀzG@µx¨RÞe‹‡ZE‡ ÖñYvÙe+“O®ßÿöÙçŸ^yðÁ+zŽÜrË-Ý·º‘µˆ…Ô=«§oc»1ܘ‘Šö@St#õjå¸]ŒîîÆñÍ>D­!rš¶@뢩PW¦<èå¦^rÚ2NÀHû hm’pZ¼«¤,·Ür•6Ú¨²âŠ+VúõëVIW—lø~9#=ôPåÊ+¯ìpF¾øâ‹®âx‰Dç!µŽØLÀê'°§üÍßÕ©+¯¼rÇsDÏ“v;ÕÒ*gä¾ûî«\qÅ•Ûo¿½òÕW]>ôMýÐeÕ®ép( ½I؆fBµìcvþ ýÝ…ºüGã˜vØ´DºÒ uÕêÊîà€}òdË(; í+˜é‰ú´M­$¨‚°ÖZkU¶Øb‹Ê|óÍWëÐÌí{íµ×*—]vY媫®ª|ðA—£ÉÀvè¹ÌeÄ 2ìP‹éŸ‘~œ«š^X|÷»ß­l¶Ùfc:ª˜Á{v饗Vþýïw lï"‰ê6²#zµ‹ã¼ÛŠH`Q2u>ÒxZö:;OíÔkµÌྕI“ƲlŒÔ{¤šÉ™ú#ÚÉѲeŒ€öˆú8þ ®½* ª,l²É&•™gÖx­üš ^}õÕ•óÏ?¿«îYï’Ë= 60ÚÖe÷Ùhöj‡iRŠüà• 7ܰ2à ]öʪv™L„kF-µˆ\xá…³ôÕH”*T;¡«jã]&P4{‘!µ‚jöÌj6–겨V¼Wʇ9"»¡Z]Ìc¿¾Oö0²eˆ€Ö†šFC¿B}QÔ¾ýíoWvÙe—ʬ³êåfqLŽÈ_ÿú׎·™Ÿ}öY­ŒÉ‘#"‡Äf&01U0TÑP…#jšˆbýõׯì°ÃM[$ÓÌYgŸ}vG7Ï.ºxžF¾÷E)ÿ΋ ¤è„^Dè…D5ÓÔÕG#u÷λã‘Îã‡jµk|˜ºz+ÿYífFÒÊev@ZWÞ‰Jý“W¨¥¦½Ük¯½* /¬YéŠkú.ÀgœQ5jT­LŽcçfèžZyŸ ”ŒÀBä÷hÑjù^~ùå+{î¹gÇŒxÕŽ)B¸fÐ:å”S*wß}w­ì<ÁÎMјZyŸ ä”À:¤ûï¨ÚÛJ}«CÎÉÁèTd[“ÌÉÁX²F&ÿþ-Ñ›5Žñ®°ÒÐ˺̋NÝ$~úÓŸV¾óïÄv6ì¨sÌ1•W_­Ú][o.Õtú¯ÂBpÆL ûVçÐËÑŒ±SÔÅjß}÷í˜Ù*¶¿¨a¤þûßÿ¾V÷ÎwÈû&hdQ8_¥$°3¹V+ŸzVÄL]4®òþØÎ‚†©g‰Z†‡ªuE{’}j-zÙÚH Öž6&«PQÜ\ƒ¢9ôíŽãŽ;®²ôÒK*ÓÝÉÌœsÎYYwÝu+¬þÌ3ÏÄNQ¿Î-*wÅp˜ ”„ÀVäS-¨ÓÆò«o©^ôÖÓXÞõ¡D °W‹ˆ¬GLñ{¹xƒrE@/ŽƒÔ 3Ö•[]ŒNF›£çQ™LyW]A/jVEs ´©.¦›·¢è#}‚·›CÀHs¸†«jpÔßÐ$žød“MVÙi§*ûí·_eºé¦ Ç—n©o˜¬¾úê•yæ™§rÿý÷W>ýôÓ4=lõ¶Bo}¯GzÀØL L$³§ ÉÓ™Öÿºmþä'?©èû@eµþýûWÖ^{íÊŒ3ÎXQËjdlˆ~ë6Fz~Ü\VNÎwî LIÎC{VɉºYé¥ÝÑçUŽ)Cðëdò,45Z©‘4…ÿ©‹æãÉ^o; Íc}$—>Mò†BƒËÕê±æšk¶äkÃÍËbã®B¦—–·¡õPú ^訕è t²µ˜€æ×ËÃc—ַɾ²h,ŒZCÆŒSm|Ù²0R7ŒkËÎÊùÏ ~¤ô ´f•ŸM¸º¾_e™ƒÕ¿û_HÝáÕ“"iz±£ãЃÉ^o>; g¬¦Ñãc—ÕÌ=öØÂM‹ËkOÃôáÅáÇWÞ{ï½ÊO¨utS+ÈÈo0'Aã€8”¼Ëψ#*GydE“WØâô%9!šq¯Êø²9ScÌnŠ_Á¡&ª§]ŒTŽÙ¯ ürÏ€¯ÃÞdq!Z©4irBÔB2¦SÉ}^o"; …»-—ûÒ =‘­·Þz•ƒ:¨¢F[mú†ÁJ+­T™zê©+÷Þ{oìàå Tíë†ØN‡™@Î üŒôËÃV[mUùùÏ^‘£n«M@ãì4¾ìóÏ?¯<üp´WŠ*#¢Ûk_É{M mT—8ý ’‚O ÛÙç I |@ÐßÑ¢H½)’¦®ò!U8žJîðzóØiÛ ¹”> §y"Û|óÍ+?ûÙÏ*ªXÛºO`±Å«Ì6Ûl•Ûn»-v’f¸ø ÝÛé0È)H÷©h’—;ï¼seÇwô¸±: vÙe—­hz•—ëp¹—Ñ}u^Ö‡›@+ȹØ9‘~û6A—Eö9¨:ÏÙu Z©7EÒTÓÑh\r‡×›CÀHc¸.Îe48l’æï}ï{ÎGŸ>“Ô'sÁ¯²À T46¤ÊÇÆÖ"û¡h_­‚£qöŠG@Nµ*“<—Õò!çÃÖ3úÈ«fƪÒ¢®-£Ðs=»ºÏ2¦Ø«¹²ºZmƒ4ÒV?ÕxšeÐB©Ó§`{tŸÚç͘䇮Á×/Ãå¦%“ÿAs¦3«± ¿úÕ¯Üò‘Sçö¢‹.ÚñÖ÷Á£cÄ4€Lo4Þ®ó²>ܲD`V£çÈ€t¢6Ø`ƒŽivÓáÞ®€ZBÆ_yüñÇÓ'ö%à»èoHÝ4l&Ðnêf¬q±¾–»~^»˜óøåÄÉÓKŸ!©¼LͶ¦îcgk; ½«›tôe4àüð免­÷ô¡Æ>ø cf›ÔÕú³= ‹Ô¼j3¼Pør´t:ák­µVÇ·‚ŠÜ‚ªoÿ¼ôÒK•O>ù¤cÜW3óªç²¦?ýô$AžöªôÉ ÑR› ´‹€fjºÍIÀ/ S·,[ï ¨¾ çµÑÜ©Ë d[Ï„ëRáÞl > ¼V/µ™Ö&²!C†TN;í´Ž~ÇíðF¯|õÕW•_ÿúו[n¹%v3 Ü5¶Ãa&qêfñët5Õ®¦ìî΀s½ì5jTå‚ .¨Ì1‡&‰ëÚ.ºè¢ŽAÚsÎ9gå裮èûDgÒ(ÛvÛm+m´QeÓM7pÉ·Þz«²É&›TÎ:묊¾ýs饗v¬ëû£>ª 4¨ã|þùçïÈËgœ1áܰ²á†V¶ÜrËŠº¥%mî¹ç® 6¬#µ˜©+Ö/~ñ‹J•Õ£¹¦¦Q·™@;¨N¦îAëE"ר°=#áê9z÷#9iÛŒ9)¶&Л7[Ï,ÇiǧOÕ׈8â;i0 ØÖ›Ñ8 ¢ŠFÄv!쇑p™@– èíÛÁé0 r衇vËùД՚¨a®¹æª\w]÷_ØÉyå•W:¢– 5Òb×K†=õÔS•“O>¹ãyyíµ×V.¹ä’ÊÌ3ÏÜá ):vðàÁ•Ë.»l"íºë®Òªóµ_ŽŒ¾å•WV®¿þúšÙP«ô!‡R™i¦™bÇiêcuDz™@;ìK¤1çãÂ÷iG‚Jçäq ôY$¯g6$î °Ò3ˆêW¥év§LŸ¾ÿþûWŒ9Òé#½ÝúöÞöN9å$èu¹? ™{r]Ÿcm  îƒzÅ?ÑsX޶*ȳ̢s]Û7ÞXQ«ëÿŸ½3·jzÿø2ÉT •$ͦÌÃ-!…„I!‘1C¦h 2fž#TäGÊßP†Š( (Íæ!S¦ð?ëÞuÚgŸµÏ=çÞ{†{ïû>Ï÷œ½×^{­µ¿{Ÿ}Ö»Öû¾ë¤“ÌĉcsÎìÕ«—Yºti¬þýû›÷ßß:´¯ZµÊ\wÝufüx¬¿ŒY¼x±Mg1ÐsÏ=×0[‘Iùæ›olñnƆ˜‹/¾Ø®ßñï¿…¦×Ìd ”\ÿEcpµ÷Þ{›¦M›F­ûw)œÃlª'2!#Ð÷ °WQ²ÉÀöRÙ`O…ü» »«’Þ–b1o Ë&’ÀÌ“JˆûãË@ùµH¦Aw _¦8ž«d–Ì3Î?ÿ|_%(7úhš2‡ \)m¢Ó'( »íÆkjÂìÁ!‡bÍ©¾ÿþ{3wîÜØ‰+W®4øX8aS§¾}ûÚYZL¤vß}w{øí·ß¶æRÆ ³+ˆO˜0ÁûÆbÙ²e  Ìt¥U«Vó¯Þ½{[E創0­rŠÁO?ýdž{î¹8|ûí·±ª¸^ÚõꫯÚ(W©r‡_Y„ÉY}© Á$.V©n(™aà.)v£PÑLKö¬EeÐÝ2c€ÌÿyJcFôXOº&•’õKy~e<}k¹èkÂN§˜?u•ì0ЩS';’ËèoHzÉ>Ó¦o…ÒuWÈ'ÿØ?Ü ]vÙÅà;‘ª,Y²Ä`Ê„Ò@¸jðD!¡sLP:XƒsÛl³Ízà~W øÑ©ËÍ7ß7£âŽŸwÞyö·ŸÊ7í}àÌóÏ?of̘an¹åÃÌG÷îÝíÌ eüøãöx°¼&Mš˜7Æ?Ô$ DÀ3!© Ê3Bž5B.”2ÌOµ,ͧ ”‚cä\":†åVIx!œ¨ûcà4)yƒA¹Mv°oý%˜¨Û¥c@ôù.§0-L&pjLæøˬeÆ6ß3gÎ4¿þúk°LL(î0C¥Q±‚Ìèv>1À´~œál`W9O' ³8U;¥å?þ°ï!f™MHG˜p‚rÂìCXPRf1‚³/œÜÇ ?”°zõjëòÈ#XEŠü 4°J ÛA!jr÷Ýw[ß—Ù³g›k¯½Ö~£ˆ¤"pݯ_?«ðÛ&ç²ï‘S)Gó(¥` †œËè{X˜õЙ¸0+™ÝGÁ8Wð\¨O‡ú…Òu· ¬[Šs+ã©íä¢_8qú±=ÎgáÏuùòåÖ\!èš©6;³ˆ5k2§ÔªUËšox®¡¥¤ñQQò‘Þ!¼Kâ„Nx:þcü¶p¸îÑ£‡4h>tª‰ˆåÄùS°Ãz”¤¢øà/2räÈ|þùç Åâ—žY@I@pÇ …Á ×RµjUû®réɾkÖ¬ixàÓѾ}{E‹¡t„ ̺xäIóðäÕ$e ¤  dÐÁ Ëy’°:œ¨ûgàÿ¤† žZèS´ð¤kR P$=⇳óçaGΚö~Ÿ>}¬O ~%ALŸ>݆·$D§ lÇùCgd‘ü .´‡‰ƒ­7ÑcŽ;î8sÊ)§X³ L5‚å·o¼ñF뜊c+2zôhÚŸ~ú©Ýw8µ>öØcn×FáéÒ¥‹Ѥ3AN"ÓdJŽ8âˆ(åïR©3lO›©fh¹Ê@ª 0C70œ™Vî·>µÿî»ïÚÙ¿ã?Þúq`VÅ:ûí·Ÿ5Ãâ<:èDÈbÐß! ñ9Aáà]‘Î ku0S†¯ þ#Ô-‘¹È?þ|ƒ_I£F Îãøj`þD»P’h#y©3+äï¿ÿ6ø|‘L‰Â¡Ý7sã®9ê;‰òGçPÿ'£ˆÓôÒ2°¥€OiX‡ódk¿±Tô¯`íhAa͘+Í-Ü´Üä ƒ™^ò\U”¯öòmMéh|/àý˜‚ò÷[¨! ^Gè°î¦ËÀúéžP‰ó ×¾_øúñûpöÈác¥ÝçùÄOŒ‹£O™›l²‰5ù"RJæ#FŒ° l±ƒ#ž.Ô%¶ÛtPø#g””¸ÿ÷Üsí°P& ÆÇl®¹¦Ð½…QÈW^y%Q‡¶`êA9¬qâX$Í ‡;ï¼Óš4Ð Â$mÊ”)e¦víÚ±º\þ²øÆÌã /4(kÁë–²k NÜYõhÊ@1p´”“0]zÁØ‘ÿtêà÷†¿C0*ç·k×Î\~ùåvq?”š;î¸Ã<ùä“¶Sïü=ȇ@Èp.‚râ›AÙIUÈ‹âÁ»å†n°¿O¢u 0ÀÁûèì³Ï6¬õÁ{ƒw Ñí.¹äS¿~}«8Á«k×®qUvèÐÁΔÄ%í0³2oÞ<ß¡¤i˜¿aŠÅ»$$t¾Ž<J×]e ,à ÛJ2ë‘o3ø( ê=!øH€ ˜;…íù‚ƒA¡?L°o ñ Ù¦ãÐNðxQúþòý†§û|eÒˆÁ‚pPœÑùD RJTIÀÂÍ@~FòY™IÁ,ó‚°°àuóÇNçå©§ž²Ž¨('Œj:‰ uùÆoþt]Ù¬_âB^ºsÃßÍ›7·ewŸ™'('È}÷Ýgg>˜)q‚Y#’™ éÙ¸qc;;ƒÂ’Kdÿ~ÁÚ0@¡ º« d™+Ãõ1SÀÌEº‚Ù•OPJœ 3ŸDÈb†”Y‡ \qÅøä´ÓNó%§•Æû…YWÀz#(áµ7Ž=öX;;Ë{Š÷ΗŽÁ%îƒÇY'¨¤Â}hÓ¦af)$4V/£Pót·œ2ÀÒ¹†hXt€óMFIƒ0ëû-ü-鉑+Œy]Òù!¯+`æ£ànAÊä¿:Ÿävi á6ëÅ5\.èHÓÍ2™*Å3ÐF²$hvÃÅ—–FŽ Ä… ÄlÊ ³˜>ð§Kôš=÷ÜÓŠ}§ê2–¹˜ :(;8‰~ýõ×q¹ ‡IÄ_̰µÌ¤DÜ‹m¥Î™¬WËVÒ` £äÝ%œß9‡ÓËjŸAŒ°òQVe§Z¦QaåË ¾NùpDzýq/ZJ;ŽÌv[´¾ ϳqmdÿwÁ­yz僤]Û úD´o‹¢cw óŽRSÐL€ÒÕZp ¶ ‘`3Ç& òIþ’ÆÜäiÐI’ÖÀ“®Ii2  Hj„1'8‹¶2Ó‚Ya*‚£ü˜~1ú0zçê F!‰bè#JDI„BB}ÞvÛmq§»f`BxÄÀÂf™L6ê†Dõ9÷£IYg á=¬bª›²ÞÚJX!6­[Ó?J„{—C”Ô¨.Y/ðdHÒâG÷<™r”ô‹ÔK›1©ªãiÃV’Ö;ò}%Àdi_¦÷ߦ Ú Hgÿ#A¾ÉƒÒ oCÂr¨(MwKÀ€š`O? #ÂÙqw‹e…•å>Ý£û6v>‹‡ÑÁ/Å z³¸P—%‰Þ…Ý6 MЂUŒfFˆ~0ÉB°Uwñ6!CŒ^bZFXÚ ^ ¥ë®2Mðûà6N"FÜãòèNvàžs,ª¹V‚yÙmÖVA8Z®‹‘ÿ 0â~c0!·Ÿ‘6aŸy‡à•PûæËþî¡4·;U6öü$pÿÅÌxðß¼Bo³Ò$+«å“©ë wcŸ'ÉÖEf¬TJÈ€Ž O\7ɲ^0vÊA?‡à±lm³ò0³;w¶Ž¤D‹aQ¯°”E¨Ëp™(؈ãÜêÖàÀăY!‚"Øï´ÓN̼dC˜ а¥?9õkÊ@žA/eÐ@%¿À9ÞEá µ,ᆎë®2*¾g  :ãù.çH/BªmÅ „׊NBé`A¾* 4§ `êÑ9˜ Ûé3  Hñœ%¼(=ôЬÙ*ÿöÛoq!(‰b…C)&TøôîÝÛFá:묳lˆË>ŠŸÅL%Ôeñ$æÀ¹›îO>afµPPJ©9nÜ8J“pšO<ñ„©qy2ýíVrÕsŒìW ¥é®2-Ö‘Š1‹“Ž;ÆíëNþ0qoN”êfþܦòÚ’­¥áyùUyÏ¥‘øpjlÙ¯> È,f¢=`ŠÆ(L>+ ˜žýO–„¾a8ƒî'g@_¦Éùi.‡œF‰*“ ! &xÂPñâ‹/Öö`µc‚¥ûå›nº):—6C]âÎ+æZ.Ôe²ë‡á î2“•¤9S´‚‚þsÔ¨Q¶êbF„Uâƒç&«³´Çp‚Çï%$$JÓ]e [ `÷¼]°2~?íÚµ &év1À½ñ8Äו&ú:ŽyÔrmJ9`€Áˆpßk‘¤¹Žy¾]ža*¶vô±0C3ùb'ˆá…‡Ìò½P0MðgQÚßEûKå¥&ŸåqOãènåIפ`dN%šœ­. nÖ¬™]?#˜V¶™-ñ…ºÌTÛ©‹?ð¨È7™ª—rq´÷,~8Q–Ézµle ‚’~jðŠ2kñ¨ä/¬³4mý¥8¡#Ò#.Ew”ô˜+Ùñ' Ê ÙLÐí¼b€¾2JRƒP«pÊ¿=”¦»)2ÖÂS<­ÒdK5ÏÖìGY3œíP—[mµUN”x‹¸GíåPÂÔHYó¬å)!øãJ°fÆR%¿ˆxDÿ7óûÖåsëJãÂÊí•ÏÖ¶ÙuOF{xHè#zòhRú" F’™no<ŒQÛ¶mƒIº‡ ´lÙÒ …d}Ùg±#e › ´”Ê6VÈ¢Ÿ¾õr‚yt;÷  À™¸Z³©l'˜åŽë¦2Œ_b¦œðY²“ôX^00ÆÓн%mCOº&¥À€* Ñ$„e©fÍšádÝÏCp¾÷ˆïåïɦIÊ@™1ðÌ¡ W­ZµÌ*Ђ2Ñüð«óHÂ=õäÑ$eÀÇ€ïÙyÕ—QÓòŽ ãË^ä(!*%`@hÒ^º`X4Yùv$â^%ÜÓ|k·¶§Â1ðÌE<›îÂ+ÂEÜ«„{Z®U¯!+ xj™âIÓ¤üdÀw¯ô}PÂ{¥ H4q UÄŸQt yxä—_~1K—.5|Wd‰¸W»Ê5oR‘¯[¯-¯àýJ¬8‰x6ãòèN~0q¯ö—ÖaÒ©¢ ¤ÃÀ’y›Ð D„šJ+o»ëHƒ·ì(¨èæHª€”áÓ©/Q?™ø4 "lfÄt|0[N¶?ûì3»0à3Ï®B[™' àiþùºšö i[;A¸Ý¯K¸Z€­3ÎÙõü¿r-— î49*,ßIN𬴕þIö_\'ÀÜ)ŧ€ì! ­"ø+œÏmRÄwš†“ù#¢óPžä¿ÿþ‹­ 2zôh³lÙ2ÃÊè„ÆE©`}ާžzÊtïÞÝæ;ñÄÍ1Çw‰›l²‰™?¾iР oËAd}n¸Áìºë®¦V­ZqçäË cH¡iÄ*W$_nRÅnGÂ{¤E‹V¯Ø—]q®Ž5ޏg3fÌ_ïU@¬è~2Þ’ùd'äø Å:ž6ÓÇÈñ— 6œ+`åðÉÖùàü}‹Nþ-ÚàØ ‚;ŠöøeÿÁaEiùö…Bõ…€¶:Aù`v+_•&×μûÆD@%‘¸èW¦^žå믿¶ Ô¦›njlÞ¼¹4h©_Ÿ‹BAÁb%1ÂøºôºuëÚ…Y‘ÝÓÁ/,,>ƒ×hÎŽmÝT2É@³ñLf² Zv)ˆ¸g ÷¶”Õè韄~…\ò‚r|Ùôë V ýÿMp£ Ÿ Ø·üVö¿ àkÙvò‹l¸c(ôO Zºƒyúí»gú>(ÁÍÒ?i Ó6Û„M7ý'æk*1íû÷ïozôèa8à;sA¤(§`ÐnfEž{î¹Ø%pì°Ã "þþûo»!ÿýw3nÜ8»âx“&¾wj¬ˆœnl·Ýv¾úó·Á¾ÖjZyf áYÛv[L¥UÊú)Ow+¯ÛšÐ¯Ö~š×-NÞ8f2\/8X€eÁ$ÁídûÂ/s‚|S´Í3ÓŠö +ÊK‘Ù:Y}ùŒ{v (¾{<®ÛTñ"I SÄŸÿì‹ï¾ùîo>_C^´MÄÛÀ¬PœÖÏ(z>GÀÚxãÍ;ì`ÆoæÌ™cŠÉ“'·"8&X?þ¸Y´¨ð·³zõjɪaƱU™ûí7k‚…–CxVÅÑU§ƒÆ „ä³`Fæ‘=i𤠔% ^ijX–uF–EØí«®ºÊuÔQ6ä6!´ Bá~ߣ˜1^@IDAT„á&,w¼Oœ¼þúëö8‘ó‚òÄO˜ÓO?=˜Û¾à‚ ̃>h÷{÷îmzõêeP.œ Q'úC˜™íر£!ÿÑGmÎ8ã C¨ñ\JĽK¸Ç¹l£Ö× øþsòûϳÐL ¥â:38 Ü 0Ó1Uð‘Eä~SBv’mü#Þ8©-õH6¸TòWF>}ûî›ïþæS›ó²-t¶UâHøSñŒ~ÅŸ‘{ørŒ3Æ\}õÕæ×_5ÿþû¯iß¾}Ìo㬳β‹ò§Ž2E‡åcàÀ¶õ˜jÑ‘A!Ô®OàÌ›7Ï*?¾<ù¡8êË"nNÅnCÂ3–Ë÷HiÂp»Û4qâDƒ)êK/½{¯pŒpßQ<ÆöâÅ‹í;æä“Oöž‚RĬê=÷Üc}Ž‚‚sñÅüÖªVÅú#û¢ï‘ìs^ÁjLèWÈõ1úŸÏ²@×]Ð[ð±€þ"Q«Îp 9Jðà;ÁO®“NÄM”Äù{î^7ïGß‹…¦‘€…/ù(p–„÷}8ƒî'2  H"' R.;‰Íó§&˜Eñw 4.¦Á?M¶ùsgæã»ï¾3Õ«W·Nè®´àBƒ.Í}ï¹çž†5B‚‚ÂBG$ß%âÞùþ òýR´}å‹„÷Hð÷˜íK‰ ߘÚ\ÈÔ¥óýý÷ß›wÞyÇÜ{ヲoß¾†€;íÄ`gzB4¾Q£F™¶mÛZe&xöܹsízw>w¬CtÎ9çX%¿5Mr!÷.áç¢mZg¹`À÷¬ø:²ùv1c¥A€hU› – ÖNaóŽì·0˱¹€ãîºX3ƒÙ’(iã9ð¢¤å{¿ôi#Û¹aÑ~IRIÆ@Àdù*Ó±„EÄŸO^r‚¹X„Ó¤m/×’ìx^^T)qïîq)ªÐS• Jn„2ì;·ÌÓJ†ÿ±fÍš™wÜÑì±Ç†Ù’( ¬?„/Ì­·Þj¼PÌC‰æ”wŒYf@r)÷.áç²Zw^3àûÏqõ¼nxQã˜ÝQòµ•E˜½Ú4t±¼|æY¡lºëX×mèwŒj±­¢ 7D¹U) DÜ»êåñZ´Í劄g,âYÌÊE¹0Ü{íµ— ÃÍš@'œp‚õs `Vƒ0ÝÁ (˜t"|¿úê«1ÿw~ªßΧcÒ¤Iq§0ËR³&­…‚9(þ!Ï<óŒ;”õïˆ{—p³Þ0­°¼0Я†¯./×v&0à»w¾{œp¢&¬e@g@Örᶘ^‹ç¨—¨;傈_¿—‹Æk#Ë3yõ)Mn“%K–Xó+ü10ód1Ò·ÞzËšR¥{“0«:óÌ3­Ÿ3"NˆX‡©˜fmÜE„ ú“¸<ÙúÖ÷H¶˜®°õ$¼äJud³üÞnß½óÝãò{…Yh¹Î€$’œ0-ŠßD.§rìŸsñL݄Ìøޤ…¶~óÍ7%:7²Ð £ä‘|wþó4Y“Ê g1+—Uš0ÜøzµnÝÚ\{íµÖìšk®1ø…•ƬC‡Ögs'-Z´°Ñ÷ˆÞ‡à‚™×Ö[o§˜¸üÙüޏwúÉæM(ßu%¼är|fYÙ¼J¦·$óÓÈT{¶“‚Y=Ý>(Q(ñ» í–j­øî¾;)~ë H"Q /Š\) .4×_½Ú¬:~ì±Çšž={ÚÅÿÕìÖ­[ì p '$ïá‡nCWÆmÒ’‘GF »ùÉ'Ÿ„³˜Ûn»Íì¼óÎ6\/uþ’º×]w]sÌ1ÇØrqvŸ1cF¹$B3 :+Œf2ZŠ 7f„ͶDÜ»„{œívi}ž„g,âYÌ . wÓ¦MmÔ:ÚòòË/[§nYÊ…á6߇×^{Íœþù†2œ0 AX_Z 8³º;(ÌtD ïª~ýú™ÓN;-–…Pâ˜[]wÝuVÑÁç³,f?"€Ø¹™Þˆ¨?ágºZ~¹eÀ×9õub³q»H%#-D¡øSp›`°€/Ü p‚cõ2A_ÁË.1ðý¥lsΛÏÃÂKb«¢Ä>ò=TÀµ³0ãRÁ9‚©÷{B±FÈ"eé|ÁÇ9ÿcÁ ‚¹‚lJ©Œ¶å/Ù*i0  H"Y /Šˆ?ŸÄ3Ë0…¸øgŸ}¶9þøãÍðáÃmÔª>øÀvð™•`Es7#r×]wÙQB:ûóçÏ·ÞmÚ´‰™/¸fqÜ çÙ ¥"(tPlˆ<ƒ²CÝØ?¿ûî»6d/Ç/¿ürÛáà<ÚˆÂsØa‡ÙbP€N=õTCýDË!æÿ¸qã¬b³ë®»fÝ>âÞ¹]ðÒu[(KÞ#¹T@J†û¤“N²¿õýöÛ/ŽÑ ðàüD–.]jºví—‡Ðà(A îo¿ýööýFx]'¼[xŸ¡œ ¼?ð9éÔ©SBYîœl|GÜ;}dƒüŠQ‡ïY©‘ƒKk"u¾%¸EÐN€cùþ‚‡8UÓÉ_W0_p°Á×ébÁã‚­()AY¯h‡óøÁï+X\”Ɨ˶lœ.xQ€Rq…`œ€HZ.loKÙž$h-`TƒóÙ.8TðŠ€¼ ì,Ȧ ü„ÅwÃyt?Ä€* !Bd×i²h¹VøÄ„è-Ù’‡~Ø´lÙ2n„{hþ˜/½ôÒ¸?{Vêuá3Qˆ„T6¢ÚLÂÌÂ…7Ž[\lß}÷5t(ˆÑÙt‹4ºrX„QQÂ3c˜¥a”Õ)LÁº2½Í¨®G:‡ž<𤠔†„?¤ˆNliêHù\~냕, 7k……ß5ÎêNÂaº]ºs\gÿ¡‡èãÄ 3²À .ºÈθ`vŠ_H„¸;%+ßúÉ Í¹’„÷\lôaæ˜"E£€\¨bŠl3»R@'ù[À̆“wd#~„ÁIüFižK“¡‚‚ñ„|Ìœ¬Æ×™d°|%øÆnÓ¦è{IÑ÷Jù>Cp´ÅÇ)9²™qñÝ7ßýÍxCÊ{ª€øï ý6ÁCÌ Ô¯_?˜”ÑíÏ?ÿܰZqX0ƒÀjÉ’%±ö`"Q«V-»hŽ¡˜2 ¼' ,0Ï=÷\, f2(ï°`QœÐ6L¼pV5k– ÙÉh)³)Ù”!üP<âMôäÓ$e ¤ ð‡„SbÌY‘Ù¸Ÿ~ú).ÒSI /éy("å! 7fŸùÒNfœAHè ÑqRQRa€ÎvX†²°ÏLÃýžz˜UÀD¢yѱ-ä»OÑvcùî&¸]JG³¨à,³)K5¯ ‚²Fv"¶§I:³*ï P`^¼$¸ImñÝ7ßýÍv»Ê]}ª€øoÙ§’§€àˆMä矶fWáæÑÁgA:2N¦L™bggèpõÕWÖ®›ãŒ&¢Ûí¶kÔ¨aU«VyëNVVðØ\`vÛm7C»0¯`‘CüJp^ÅD+[‚Š'‚Ù÷RÿÙjƒÖSiøO®|¡ n$€÷H0Ôl¥e§]øŠ+|­ýLé°©(©0°H2Ñyg´ÞÉv²ÁÙ\ÛyX[+mûY€âÐyèm·Œ©*ß[ 0c&ƒw[29^¯iœì; ž:J"´y7m:\€—×  ²);z*£Ï¨’&ª€ø ãaj“ w.õã8zàZ`vÅ ÊC‡µ+ c‹ž-‰è8è‹"[7@ëáYKP@ˆö¤R~ˆx÷ë{¤üÜÂ|h)òe‚ÆÐ™gváƒ@Z¦7iƒÏ”ƒ‘A”“%:ÌZì.pÂÌÉlÁXÁ—‚ß? |ÒE| ²­à »µö£ŸlÒ®gÖ&%l¡­+`Æ  ](,xQðŽ [ÒÄS‘3óÒ¤(¸¡*‰ $ü¹DtfÏ,£”V­ZÙž˜Õ ‘kˆLƒ™•OP80]X¼x±¹úê«[¼ E€Ù€ ¨ï|Òš4ib^ýõ?Ân+™àŒŠ=ø/¿šDRæ\,€ñGž¬¸RÑß#ú¢ð¢Ia áYËöo #W•¤P~÷¼Üï?IÖrs(âž%ÜÛrsAÚÐ\1Я†øFÓ3Ù>L™N„û~ŒD2K1Gà“%%Š…óJÔF‚âfE0QâùAP8÷JAõ`¢gûbIH§­×V ²Í¡¯>ß½ 4W7} „B_žÊ˜–ðçÑ™Í7D¿Â™›”?þø£ƒæLÌl`.åÇpL©ðwÀ„¹„°Ä_äý÷ß·ç’† zÐ,Ë…Ýä\”ʧLêÆ åeòäÉ6â Ñh’Iƒ Ìf›mfn¹å–X'„ í ¦6%¢ã /ŠlÞ„Ê]W³–©÷Ñ£ ¼`óð1¢[Ýwß}öݼEƒ¶‹ bÊé„ÁÎ;‘¿ð 6âùþøã–—PÛ„øÆ §wg9~üxCHx…s×6"îWƒ .ø›à™ˆ{–po3Q·–Y¡HèWÈÕe÷Oј›¥Îz‚ǘYm 8RÀçv¦NHù³4× 0c¦áeA;4‡ èŒMDj˾;—ï­3çNT tÜ+À”ñyA2yURgoÁºŸ˜Y‚lŠïžéû w@M°ü¤%¼(X3ƒ?ÓlEÂ"ŠÔÝwßm×ÁT qêF1éуßÝZ!$¯ÌŸœƒùŽåÄéoÛ¶­afaf‚ŽÊ 7Ü`g,è °M‡‚zñ=Áôjÿý÷f·ÛÁYòbnEgàÈ#´¾$(>t9á„ðàGBQešðá‡úÊc$GEÈ ÏÚG}”‘z“…ÆvÔ.\7 ¬1„é&³¥;v´mbÖ‚AŽºuëšI“&™SN9%®­¼+ø7lØÐ¦3;KYÈèÑ£ õ±cÇÚ\Íê©§ž²fžäsyùf ‚AŠ íŠÁ$ª®víÚÙÀä¡NüØð-C˜ýÍ„Dܳ„{›‰ºµÌ Å@B¿B®nŸ,_áEu>*ߌ2ü%øCp³ ð‡$"Í+ìVáÇbù¢óiÖ(A³üè0Ëš&(|1nËnLÈ·±ànJÇpŠÇzL*Žü pâ›MAÁäêÁ‚5ÌÀhS6‹(WÛ ‚‚™Š* AFRÜVÄO? ~œuÜa”þTY8[‚™Õˆ#lœÊé;ûìO:5²9ø…0ÊÉÌŠáz0“’Lˆ¢5jÔ(;‚ß 3'D¦ €°°ØÙ#h×ܹsc#®v.í¯ûº© d’FÞ\½GÁ`Ä—_~iýËæÍ›g£Õ90o"„ö`Ið JÏž=íùÁÐÝî8ç1KŒÒ 3¯DÂó͘r*”D°£Ÿ¬.Wg6¾#îÕL©ÅREH‡y’98ÒÏ¹Ì Ý)ò“TÊ`kPùH§+$³S>Ò9úÜ o:ç‘E E‡ó³­|H•Ƨ€Lá€Jú ¨ÍYÂCñg]‚É÷*ážæ¬Zqea ᙋx63ÎÇùçŸoŽ;î8»0(æWÌRì½÷Þ¶Þ%K–˜E‹Lœð h IPH ÂÞ<`”à1üÍðá¼éÓ§›þýû[“˨ke¦ƒ… ƒÀïÌI²º\žl|G´?ážf£-ZG¹gà_¹‚×=WáëÔz²iR0à»Wú>(áI´©)aA𴄇jþüùÖÙ2Væ­€|—é%áôî‘„{êÉ£IÊ@Y2ðÌÎÿ L•²)ø”1›IÝt¬QBøÞe—] Žêÿüó9ùä“m“p*gÖ¥%(ø—á|~çwÆÍž0«BÙÎUÌñ6l˜õ –Á63£(2a FŒª+|N¦öñUá^y$ážzòh’2àc€g§Kè@;ÙJÓÝüc“³Æ¡fý#ûø¿¨”€ìþ– 9<;Ç•Áú±g~óÍ7ƒI9߯q4hºÉùBlbϾfM6ÍW‹¿BB3¢’ÿdj(Mw•L3ð®TgŒùQ„‚œÑ¶°b­Zµ¬ïEûöí­:³ü~ ïùÔ Aƒ,ˆ€‡Ÿ‡ÏÇŒ…F™å ²ž“ /¼ÐFÉsû(#̶àâ|Pܱt¾}u¥s~iò¢|geŠÊÂæýíÒ”«çVj|Ê+£êD¤Ê'i Áa<Ó²ŽT°­`GÁ†E•ñîèÊé×ñžÚ±ËÇ”M¥ ¨’œ´‡ù£Î'!R£˜„¾ :„bs‰ÓN;Í:’s¼  1L'Ñnpøtë…¸k£ƒDÔ,ÊNbóÙgŸµ‘nÜyùðq°Û.‰½j>\’¶¡ü2€rÂK#âÍêU²˜)Êлï¾k]9S*°Ç{˜ýöÛ/Á ‹¢\°€)JˆÎÁq…!p׈S»swyùf0Ç…þvß¾µC|uËÉävÄ=zEê,ôêÏdåZvEeà#¹°¥¡‹Ãå„PZ.wqLgTE€”ËN6‘ Fa™$Ç1- £»¤¡¬Ÿ' ³=Ìð}Á/óSÁ‡ü3ÏPÖ$ÁN‚|’Âéáø=¿«{é0Àƒ¯ÍÀãrèŒàáY³fÙQ1¬s-(Œö»ÿé§ŸŽ9]óG~É%—˜õÖ[ÏÜvÛmv%tÌ X ð˜cމk6Ñs0ŸÀ~›+°ñëÖ[o5:t°æD⊠±I§…ð¼„ò,©£{\ƒJ¹ƒyÉ«¯¾ê+e”/QÓ”,0À{$ÎìbÚ´iv]"9eBÂQª|uðó'|AªWðÄ„ð¾8®‡¥[·nq3gu–]÷‡wþ Z | 8Оn3§]»v+–÷ ŠMXÂu…gbŸYcõˆ¾G<¤hRÊ 0Ï3teè :·„—͹Fñ„à{3n š0š(k‚UŽß ·s † Æ – ª î<*˜*øDÀàÌE‚ ç îLÜ) ZÖ‘‚|–ÒˆÖž†èûÀCJªI<<*Ñ ÀÏg‚†Á,}ûöµæÁ´\lãèÉÈ#¦gœq†^ÃÚÄßG >¾óWqÇ}ðŒFÒq@ù`F…ºD§yì±Ç¬ò‚9‹úa÷í¢a½ýöÛv“(7 °‹ úÊÎ6/ÌÜ`F¡·ðRTQ²Í@©ðKAܨÅW\a£Ne»1™¬™PE™ñ…ÙÍdÝeY6 ¯2$\$¦uŒìª(%e€‘}FþÃÒL|éá|™ÜGÉÀR ¾ôY‚q‚ûÌþ}+8ZÀ äˆ;~]ánÜ'ï½÷Kƒg š ø-ý,¸V0L€ è „ ” °ÐŽV‚…‚\ ÊÐ%¡FL—ý}Ciº›Üp•hÜhE\Ì–òA˜ý®'@dl¦™ÑÀÁÔ)®­¬c {é¢Ü°È!Ê ¡3GŽiÆŒcI7Þxc{jq!6i³1ù 8Ózä%ISåÃCŒ&e…¿¤–§Â5E<«álåjŸÙ7,ÏÊ„GÜ›§å*åê‰ÌËÆ~,­Ât),=à 9Øo"uþ.@ùp‚ʱÌä:åC6­ì!Ÿ}èiS 9ÜôêÕËšQW9¦­]ºt±¡/  ðóÊI'*ùøŠ%b³,fH¶Ýv[b“|Ø’ãôžkyâ‰'l(ÑP;˜Æý¿Pšî*Ùf€éúmÇm•üb âÝŽ)îùÕRmM9fàIi{x6 åãœ_ÓvRÿ7¡6¼)û ˜Å,h)Êݲ³{íƒe›Y_'ÊFÁ3‚㵇 (ûJò•À)#6!ëIÌÜ„e‚$üNÔýôP$5¾Ü(–ûƒ>ˆŠË“É ç0ŠÙ•“=÷ÜÓFœÁ1|‡v0øn¤"×ùw¸oWnq!6W­Z7ãÎËæ7«<;“²P½ÃeÿÏPšî*¹``X¸RÂz‡ Ây2µÿ믿Öë @E¶…ºñ++MˆÞL´çøçs:OÙ'*©eæøRŒð4¤Ÿ¤U÷¤g+ ¿Œ:¡Ê0aÆ,ëfÁÁc‚ ©ÊßEÝ7»Í‹µØá·5Qð‚`G²…`™ÝÊÝÊQcOõAeÊsX“Ra`ýT2iû£à‡·s F/wÞ9.)x8£ÛÌ|A‡8ûÛo¿}\]D¿ºì²Ë¬c9&U§Ÿ~º=Î,ExÍÖ¨R_±hq!6›6mj›pˆMfc°ûÎ¥Œ;ÖFï µá'ÙgtFEÈFK# êCøì«®º*˜”Ñí… šë¯¿ÞFÐc°°c=ÖôìÙÓ.ŽÈLâý÷ßkïÌ,ûõëgÚ´iKwG}´9óÌ3­C=á¾}feDãã]‰yucÆJÝ,ÆHd>‚dà”\[Ä•Ï7‹8Ó½ð(d+¤ÞG3]·–_é¸Q®ø A°3¿¹ìŸ)¸E a¦oÛˆŠÿ‘ô^‚÷È&‚zvkí–Éþ>’ãÌpð¢ÁôŒ‘ÔÌ´Ü'@xO~b·ró±ŽT{…§j²÷<éš”&ª€¤NØu’5h¿hÞ{ï½ØJ©S69éð‡Îˆ!4Ãa.Yi˜!t‰TÅq: (D½bæ$(ᲊ ±I5j,"«Û(@8×{„P~(!*Ê@>0À #g÷3eÊ";¿!ÂiŸ}öÙ†YRÌ5™Ie6—>³¬dNœ÷Ç-·ö~ÿýw»šùСC͸qãVpgu'Å…ûfm"”êÆ_5HÕK8pBþ‘¡‡~¸9ì0¬2ŒÆg72øÁâ¥>d7IµØ|«(eÉ£û N z‰ì?$ÈÅ×4©—~!ÿ¥‚ÿA™/;ƒ× žpüÒ"ÈWL:Êõ ËB99JÀu¢¬p­5tPø½m$`TóCA®¤›TÜÂSùPOš&•€4<•ÔXW²¡µ£¥Ç„‘ÿ‡~8ž6v ,v÷ÝwÛÀIÌ´øBlbútÊ)§Ø½¹Z…0Àžê>x‰~Ÿi^´|e ªJÞÅ‚­ƒç‚ßrXùæ)‹íAƒÙõ:œráÊÄéúÒK/µþ](D„¡%ð„“_|ÑÜ{ï½f„ HçέÂ@´¼dá¾Qr\8oW.߬¶ÎŠã̤8Á™‘`š;–©o”/ÖE É7²ß@ð{(]w•²``)äcÁz¡Âî–ýsBiÙÚ}L*Z)¸òÝY€"“ ©)•r_ê„*]ö Biº[B2ßk-aÃòð4ÂÆ¡õÇ #ŠO>ùd\Z¶v˜ù Tn”ÙBY·Ãb“Ñ£Ž:Ê:¢—u}©”ǵ{”Ne”Y•THÔ<Ùd€‘¿ÃΟ?ßF¨ §—õ>þ&{íµWB±˜Y2ˆÁ, é.d÷=÷ÜcgR™¹He #*Ü7eSOX ²ªh„ëgÿ1òÁ¡›ª|À„J&X$…ú:gIzâ%-H,“~N/A¶|Q¾–º˜YqÊã®äJà ¬|Ж!¹jPE¬wýŠxQ¼¦1R6/†}ƒuê ƒ2[o7¨Ì’‘mFK±§³+iÕª•iÑÂ7K™ùáÀzûí·û*úB”E_FMSrÀ£›§ šë&2æ’ÁÈvÁãe±ýóÏ?'¬xN¹(˜c¹w Á-Ù`E  L±0±*n–†pßA_³5jXS*ÊpÁ3lÁyò'÷ÝwŸ¯5ŸH¢÷ãˬiÊ@ è/ç)Ø8p>ƒÃ<”{ü̦ù“P˜´K‚lK5©ðÁìlW\TßnòÝ×S÷Ó’6Ù“®I%d@ôˆÃ†ñL?Œwýõ—ÁÉŠlK½zõ È•„ýG²ÙŽG}Ô°ö‡GúIÑÿÌ+ŽÍX­Zp¡à}A­kd?ÁÌPºî–ª€”ŽDL±ìY0‹?ÙTÌJW}å;{íÓ+ìVÄÛ–T>ŠôŠË£¤É'…›Ý¾}{CˆéL ë~àûP·nݽ«X%¢$NóÌ€àwÂÌ f[† f&Nœè«óÍã}4MÈJ3;{êºPÒÌ¿=ù4)=ªJö7>Ó+fDnL¯8Í*8ܨ”œl„Û ¶ ±råJ»¨W.´ƒí©(ÛØjWh\¶™‡p^SQÊ“¤ÁG ¶ 6 mÝ:3&à(,XÒ"Z±˜`I„ó!žJXß’”Ÿìc;vlT–½å€:žG±£é™f€wÓN„\IÚÁ§•²a7„Çô‚…ËyáDÝ/;T)—Œ¶Óyè!¨,ŠXø8zî²Ë.ÁdÝ.!SÅYÛqðÂÆvócÏ1MRÊDÅš"Hð_š={¶Uð½P)=¬mr×]w%DT¯"çø+j‚2]~”ê>„gâè,c“8]°D Rzˆx…²l3àWª’!Ô ½ôÄ®"º LXä©§˜ÑW) 3gÎ4×\suZõ”s™¤½åI×$e <1° ª±wÜq‡!:–Jé ú×ðá~ –¾}û–®p=[([ž•ânõɬ#ó¬¢R:n’ÓÏðñ§¤áo³ÊsL“ÊU@ʆLz—ûŠ"2Ö /¼à;¤i)0ÀêÄ,¶ÝYtê(ù¾%…b4‹2P.8ú製íħlÚ´iÞcšX<Ó§O7×_½w£sçÎv!ÙâKÑÊ@VÀÿàeO„ª{IÐÂsL“Rc`€d»Ø“õ?Ië-À!]%à ¨Rvã¨4ÌWÜÍ7ßlž}– •txçwÌ¥—^jCxzÎcˆB*Ê@…aàÔSO5‡rHÂõ`Î9xðàŒ®’PiI˜2eŠ8p wã ƒ² ,VKÕ˨X `^ŒÉ•o†3IM 3!BBš2Dò_qÎù’ŽOˆJP²%™BmA›p±˜Ÿú%uú —Y‘÷ÿïÿþÏ :4JùÀù§]lçU”ŠÂÀ O<Ñ´iÓÆ†©]¶lYÜu¡„¼ñÆuL«°ìàpκ*á…¹´}öÙÇ\tÑE1Gx‹ æCEÈø#oAP›ªË>æß >ÓÝDªHÒ#‚sÙ”«äóæˆcšœt¤ìIÅ‘t´¯ØÿýïfРA†ô*~XœìÁ´†³+âqw(‰~ 5µœ3@d(:Æ VødĈæÆo´ úŽkš¬êöÏ?ö5Ϲä’K¬2§|)yÎÀOÒ>¦E?ñ´s#ICA¹ÀsL“Ö2°©lNœ¼6)n SîkãRt'ã ¨RöcCØS൹b“…ôXX%ž38=Ú«¿‘yŽ€È¿²£¢ TTXãòË/7-[¶ô^"!©/»ì2óË/¿xWæDfšáŽYTŸ4oÞÜ\y商EU”rÂÀ·ÒÎö¢3……~ÜpÁí‚õÃußl/L´àâ~I÷ùƒDd×ä²b@²b2¾l7» îO.Ü›?¾ÁÖÇH•B.\hz÷îm^{ +6¯¼"© ~ôÕDe ‚1@hØ!C†˜8À{e³fÍ2§vš™3½\Z'øùdß}÷µõJº~‰¯LMS²ÄÀ ©goÁ»õ±fÅ›‚"ŽWÆdfú¨yúé§Ž‘€OY·nÝì F.V÷6*ˉ¼;FŽiðãðù{М.]ºXŽ¢|ð?üp²yßÓPQò„jÒŽ1‚ÎíÁB“¬Ç+C2&W÷ ޏX|kz 8®ÉY`@_¶Y Yª`6ä11¼d»í¶3 0;î¸cÂ±ŠœðÍ7ߨÅ‹Á½J8¸¶"ó ×¦ 1àU@;'N4„õŽê`7nÜØ¾GêׯïN©ßË—/·¦›Ÿ|â3‘7ÖɼOŸ>¦S§NIùP$)=z0¿Àzå6A”C5­}V@'û{v*‘´•kE±Ø6âšñ©!Þ9ÁlTrÈ€* Ù#©jœ€(Y ‚ãéGazõêe6Ýå½â ¾Ìz0ZùÇD]èïr€—çè¨ š® T0’* \ë{ï½gÐñsð 3 Ç{¬éÞ½»©Q£†/K…I[½zµyüñÇíÌÐßûâU«VÍàlNd±âDâÒãyÈÀùÒ&"7­Ñ6œM 0¯è(,…ÐMÕ·ý\Ž)øH ’c¢nRŽ›Ua«ßR®ŒiÑ#¢®°zõê¦G†É*¢“$«?ðÀ†Ù$‚Íæ‰ -˜„$=Tá(V኿ýö[së­·š>ø ’€š5kZs#:Õë­W±¢­3Äâ®?ü°ùñÇ#9ÀÙœhb[mµUdžàU@‚lèv9b€µ@F 'i3ÿ¥ ^L’§¼ª. ¿T€#9QÁ¢+”s¹#Š¡,§«’e‹ªÃéé¶œ^©[·®] ëÀ¬ˆÙ³gÛðº8à'‘å£9˜]ý•$ŸR*")) \8ðqãÆÙ€ˆpÕ–Ÿ† Úà{ï½w¹__˜·ß~Û¾G>ÿœL¿ p±žJ×®]ck|øsƧªχî•+è„c’uz1­feõ‚(GöbNÏ«Ã8Ξ,,¨›¤eŒRÐçz*I=”TÉéEU6‘oÌ‹vKÖ„Úµk›cŽ9Æðçˆ9AyC'Ožlžzê)³hѢ⚾\2ôL-.£W*()+ îúù]Ý|óÍváB—æûÞvÛm­iV‡Ê]À L6_~ùeÃ:JáÅÃ×ÊÀ &WøÃ¤+ª€¤Ë˜æÏCŽ’6=$ؼ˜¶½)ÇoL0ðWžd i, ³^“öÀÅL‘mú+iº™' ¨’Û±Tž€ÿšÉš‚òåQGeêÕ«—,kέZµÊšH0Bûý÷Åú¿a¼}—€Q œÃT”ÊÊ@Ú DÑAæ™g,ØN&›l²‰!òþf©š&%+/“Ç05c- &˜Ÿ~Jþj¨R¥Š5[Åÿ¥¤!vUÉäÝÔ²³Èò¡‚^‚â–ZøLò0sò¸ ùL2äXZHý((ÉL­hæ×fzFþ¨ä!ª€äÇMA£"8CP¬Áv“&MLAAÅÖ[oW€Ò1mÚ43uêTƒ¹UT¤žPcŸ“}ì6†ÒuW¨Œ ”HqD}÷Ýw6\ï”) ú/-Z´0mÛ¶5˜yn±¯ Ü ¯¿þºá’ù¸[Jû{öìi¶Ü»’‹* %çNÏÌKv–V ¤Ð:Lž1ÏÂL‰Y‘Ÿù ;I#Ž+BóÄ  ˜úz¤@X.³¨’KöëæÆ´è!‰‡ü);í´“Ùo¿ýLëÖ­ Š #ÙŒÏ>ûÌ.ü5cÆ «t$³Eµižì÷L¥ë®2P™(•âˆûôÓO­ŸÄ‚ \R±ß¬¸Î{¤U«VÖ|)[ë‰`¦‰ ¾õÖ[ö_T„÷Ýgœaß{©ä/.* Å1¤ÇË)]¤Ý7 ¥Ø~:ñ“8¬Oð"IíG)K)Ø™ï)8P@¨Ü–‚TåiÉØ_°8Õ4_nP$·üGÕ¾¿¸H@´¬â¦Pce5 …„Î`°ûf†¤´Ñ´P,ˆZµbÅ C§†‘É>úÈ3MyKò£`”7»Ó4/U³+i3P& ˆ«•½ãÇ·ƒ.-•oEmÚ´©UFš5kf¶ÙfS§NSZ¥eã믿¶ïÞ¼GJQœÙX¸Í;ï¼³5EÝ}÷ÝÇJµ¯ H©èÓ“ó›̽» øcf$ùA2óßßÎë8tâSQZ¥3ª†‚¦‚}û v¬/HU0áfÖ†~Åû©ž¤ùòƒU@òã>Dµb9p § º maÕ_l½qÎÄwð6Ú(ì¥Yƒä÷ßµ9~ùåóå—_š•+Wš¯¾úʤ1»nã?’ðŒ€ÄÌðAÝW”eª€¸R—,YbÌ#QJ"¼#ˆáÞ#o¼qìÂûÄù]ðî¾Kx|ñÅö= FIß#(?˜ZáGd¯Lˆ* ™`UËÌCÚI›.t”´È,Éç|H˜qøIð›à×"°"QC@ß…o€$31ômˆ\UÒúWɹ”CJzóËᥖë&o&­?UÀ#åAx1ð’XZ¬mTrÌ@FwM¬™1iÒ$óÆoMÊ“ëofq8àCô®Zµje´9ª€d”^-<ÿÀ¿¢àXÁ6ù×¼„1ã2]0Fð˜eG¥3  Hù»yŒ8§¬t§R3}µŒ„üOÀ”è{™®LËW*U@‚\Ζ ÓÊ|fj÷ßë“Ò Aƒ¬5M¬Q­åô1¢_2ÂÌD¾J– fâã‘_/+iJÉP¤äÜåÙ¥ØN‚l¿8Xà‡‰7¯ f T”e d dM 6-"×አy<·,¶1 Å×ì²Ë.3±*®­ª€Ç¯ àsŠ2‚™}н ²)K¤2úà%Á2Jd@ŠuSÊåðÒàÂôê )‹ûü”ƒYÕ§‚·¼>0B¡¢ (¥g ' H¸Ùø}á$þñÇ[ß |80ß* ÁŒŠÀÌràèîœÜË¢ìÒ–¡ HiÔó+ ëÉ5µЯ :} €Yxi…@4(ô+æ œ£ûJÙV© ”EÇ´ÐT®/qCiýöL·¶0šáœsغ’t sŽd_Hú"/©-$¨(d /ßõá\N0 S°ÞŽæÎáœo€àŒœc:ß›o¾¹u^'’–sV÷Õ‘ë4U@r}´þrÄÀ¦ÒVú[ èS¸þ„Û^#iô%‚}‹Ÿe©€~ÅÁ_•JÊÀú•ôº+ÓeÓ3`t¨(Ê€26(øcdÓ'#íFê Ê€2-ˆB…É5PQJÄ#ß*Ê€2  (Ê€2  (Ê€2  d…U@²B³V¢ (Ê@Ù1°|ùrƒÉßNîºë.Ó¹sgkåÒ®¹æsç„ÊϼôèÑîd^5±`!ׇÿ‰|RŽ?þxóÀ¸$ýV”e@(§ ¨RNoœ6[P*/¬NNô¨ ÄH˜3gŽùï¿ÿ̇~hÓØ&ªUË–-cy2¹qÖYg™í¶ÃͬôBÛ÷SüUW]eŽ<òHsÆg”¾-AP”e § ¨HNé×Ê•e@HŸuÖYÇ´hÑÂ* ‡rˆa•qÂçtÐAv¢M›6vv„•È[·nmg PÞ}÷][Y¿~ýÌðáÃmÞÿý×ÿ¢‹.2‹-2>ø aÀ™3gV"ãÆ3½{÷¶‹>÷Üsf‹-¶0¯¿þº©R¥Š9÷ÜsÍî»ïnWBøá‡Í›o¾iÖ[o=»È u^{íµ‘$Ì›7Ï 2Ä0Ââ„ÐÁ=ôuЇ‹óÏ?ßLž<Ùrrùå—Ûl´‘6_vÙeê¿âˆÓoe@Pò€Ƀ› MP”e ]˜Ùp3 sçÎ5Í›77»îºkÌ ŠÙ Bß~ÿý÷†Ž?ŠKÇŽÍØ±c­‚¬@1¡Œ?ÿüÓ|úé§fÕªUfРA6ï=÷Ü›UÁ$ŠÅ ûôéc.¾øb{ÎÈ‘#mÓ‰å"c½ýöÛv›2š4ibFŒaó<ûì³V)9çœsÌ™gži&Nœh0·Šfu(cï½÷ŽS>P¸0/;ôÐC­rBT®[o½Õ*eÓ§O7?üðƒ-òý÷ß7ýõ—©_¿~Tš® (Ê€2TÉéZ¥2  (¥e„UÌ™å@yØyçM«V­ÌâÅ‹m¦XÌ~8©[·®0`€Ùm·Ýl:3”±é¦›šªU«šŸ&B¦1ë®»®a†d§v2]ºt1{î¹§YpåtïÞÝÎ|PNÏž=㎹<”×·o_«|P†S2˜¡èÚµ«qaö„Ù•drï½÷Ú2Pz–.%zg¡L™2Å4jÔÈì»ï¾v¦…6Íš5Ël¹å–Véš1c†ÍÈwAAU¼Ü¹ú­ (Ê€2{TÉý=Ð(Ê€26Œêc"Å, ÊFÍš5müƒ>°þ($N‚¾ ›m¶™3fŒ9î¸ãÌàÁƒí̇ˇBœz—'ì;a3§ß~#ÔÿZaÖÓ+e3/äÛo¿5ø¯8aAÂd‚‚ƒyÖöÛoog8þùç›5I¸îSN9Å¢ÿþ6™ÌÐ0ñZ³fÙiÛ¶m²*ô˜2  (Ê@X?uj•Ê€2  (¥dÀùLš4ÉúV8Å€™fèìjÕªÅjÄ\i‡v0<òˆ©Q£†õÑp™QÁlÉ)¬‚ŽÃ»:ùN8†/ …¶ù„rh—̶’ ¦W”Á˜óÎ;Ï<ù䓿¤“N²feà A1ùüóÏ­k>ÆÊëp€3½Î~¤D¯fR”e ë è HÖ)× •e@(œYUÐ×¥… ˜®­S§N¶ÃÎ ¾!tØq6ÇᛈV˜tá0NÜvíÚY¸2˜í "Ç0s§Üq§¹ýà÷É'Ÿl£o-‹rˆ¾…ÏJ*‚¿æ·Ür‹aÍÖ¡nÚÁ5Ë)B(8°xà©­y”e@P²Ì€ž<ËÐê”e@PÌÏ?ÿ|ÖhÀwƒYÌ¢ðÑÀã³Ï>³ £>j0¯ª^½zÌ‹†p fàÀVñpç¦Ó`ff¨ÙL«FmͽN=õÔtЉåÅôê×_µ¾/±DÙ $0az‰”•ª°ð¡ˆþ'¦J˜æS”e  è H)ÈÓS•e@(¯ }B˜9À¡=(8’GIðܨ<¾tÂûÞvÛm¦C‡Vá!ºNð%”|>œ`>ÆÊï(:¬ý¡¢ (Ê€2Ÿ ¨’Ÿ÷E[¥ (Ê@ÖÀ‘=ÙJãgŸ}¶5w*iÃPÝ m‹2  ”ìPPù¯<´ZÛ¨ (Ê€2Pj‚ïþRV‰ ÐÿÍJ|óõÒ•e Ä ¬³n‰OÕ•e@P”e@P”e@H“õ“åŸ:uj²ÃzLP”e Ï(((ÈóV¸æéìR…»¥zAÊ€2P ¼3Å:R FõTe@P”e@P”e@HU@ÒãKs+Ê€2  (Ê€2  (Ê@)P¤äé©Ê€2  (Ê€2  (Ê€2ª€¤Ç—æV”e@P”e@P”R0  H)ÈÓS•e@P”e@P”e =TI/Í­ (Ê€2  (Ê€2  (¥`@R§§*Ê€2  (Ê€2  (Ê@z ¨’_š[P”e@P”e@PJÁ€* ¥ OOU”e@P”e@P”ôP$=¾4·2  (Ê€2  (Ê€2  ”‚U@JAžžª (Ê€2  (Ê€2  (é1  Hz|ine@P”e@P”e@(ª€”‚<=UP”e@P”e@PÒc@ôøÒÜÊ€2  (Ê€2  (Ê€2P T)yÅú÷ß›?ÿü³¸lz\ð2°zõjóï¿ÿzi¢2  (•”rÝÚw©¤7_/»â0±ñï¿ÿn;ì0Ó·oߔٚ9s¦ÈôéÓM÷îÝ‹=÷»ï¾3æœsÎIÈ;mÚ4{ì®»îJ8V\Â3ÏÜ{}âÒO:£÷9ßIDATé$óàƒš?þøÃdâ>Þzë­æî»ïö´Ô˜Ò^wðYõVPŠD”Ž~ýú™#Ž8¼ýöÛ¥();§~óÍ7ö¾¢0¥$ýõ׆ßNY ƒwÜq‡9á„̉'žhzè¡+vG}´™;wnY6Ï\|ñÅæÍ7ßL(^yT M ¦2'T—‹ÿY0# :H^€.øÄnåæã<©öÅbª¾CŽßéÉCå5Á‚Žžã©$õ”LŒêøð¤¿:¶Pö‡ ª ~¨kÛ°dû'ÁŠ@Z*›I¦å÷—ô¯#Ž¥’¼dº8•ŒYÊSšöL“6öò´s¥¤xÒ“%Éò¥sl'Éü’€ŽÕ;‚N‚’HÔ³_’²Ü9gÉÆ#n'ô=Iö;‡Ò²¶»~¦jzã7LÍš5Í'Ÿ|b–.]jêׯ_lUtêþùç³çž{Ú¼ÿý÷_±ç¸?ç?üÐ|ñŦnݺ±s&M‚Û’ íHE¢Ú8aÂsá…šöíÛ§RL™å¹à‚ Lƒ ’–‡²ãŽ;š­·ÞÚl·Ýv¶”ô„¢€0냜}öÙæð÷J(ûo¼±+:€(IkÖ¬1Ÿ~ú©¹á†ì=kÓ¦ ÙLYÞGž¨ûSÚë?«¶ñeô±hÑ"ËÃÿýßÿ™6â­|JI8Fyâ‰'¬²PVW}ß}÷™>øÀ 4È $]wÝu¦V­Zö9L·ž'÷ÎI÷Ü`~Þ/\'ƒï½÷žéØqmŠ÷åË/¿l^{í5óË/¿OÓmeà¡à;Á‚‚ℇ‹ÿú‰‚utäs%ëIÅ´!™Dµqg9i_Áæ‚_“䨓rÌu .—mþxŽ.ÊÏ Î :‚v<,ø\0Bw\ÃIò9a$rAºíâZ£øàÞž!(©ÐéºTpsI (ãóJÓž¨¾êÙÒÆùi¶3ø{HóToöª’Ê35Ap¡àÁ8ÁŽ‚¥‚t$êÙO§ —·‹lЖ^‚ç]¢|óüö´,àùΉdìEôÒK/™Î;›ÝvÛͰíä0O=õ”Û5ÿûßÿ̽÷ÞkGÂÉ÷Ê+¯˜+®¸Â§3;dÈsÈ!‡˜®]»ÆfGb'6Z¶liÏuI?ÿü³aÔ½E‹.É*7Œ~wÜq¶m×\sùõ×Â÷Ê wfmN9å3þÚgšÇÃ?lŽ=öXsüñÇ›‘#GÆÊôm0ëà Ãý÷ßoèDÒÙˆª—Yf{N?ýtóüóÁgD†h"ê¥mœ·`AáÏÔ©Síù«V­2(tâ~ûí73`ÀÓ¡C«0Cy§žzª!°ñãÇ›¯¾úÊŒ3Æ^íå:Ï;ï²÷ íŒ3ΰ÷Ò—²ÃåE]\ž…Ûo¿ÝÎÊK<›üþx¶i¿ f¤î ׎"I{ú‰>þ“¶Q×Ëo£~‡ë¬³Ž©^½ºÙo¿ýìo$Xîºë®k¶Øb û,Óu[èLÜ+xEÐSàäzÙ óãäÙ¸I0TÐS@‡™ÂËø îå‚Ãa¡sB~êú^0O@çÿ Áo‚é‚-£~Ï ~,ô8Ù^6& Ф?ì%pRG68o•€™‡ƒQÂyÏ P øÃØN¬^~àGÞœ.pÂËQj@›þ ì¾à Ó9¾L@StÔœL““ÝNÑ7û¤GÉ¡r`¶€:ßì!pRU6À3üõ —±!B_mˆ`…`‰` ÀÉ‘²ñ€ûòŽ`WAe«–..ðÇÄ}S€B–õ$ç†z¸/£ÕжûË7Ç6À Ï÷}¼`s²¿`®àwõõÂíIvMÇKþÚÊ=ØXà“‹%‘ëày%ß‚ï˾çz¨¤÷¸ßÃÞ²ý¶ÀǪ¿†r>3b´…6ß.à¹j)ðÉ I) ÞŸü–|yw”tž™sˆï>“u_ÿ”c ^!S@þ“mê ø"žõM€2:˜_0úÍs3 ˜Ú¸Ž ³M'·]»v¶3ÚªU«Øè'ÞªU«šÛn»Í4mÚÔÜsÏ=‘mEI¡'“'O6Íš53[n¹¥K2˜U=ûì³¶SÃhèÂ… ÍÍ7ßl_uÕU†N3ût¬èÈ8¡£>qâDsÙe—ÙÎe$›]¡SÂì&°¨zM]±b…¹ñÆí¬ñ DÕËu5nÜØ¶•Î)Ê®M7ÝÔ¬\¹Ò`þöÜsÏ:ÛpGçnÞ}÷]k·á†ZÓ±ÝwßÝüõ×_öꥬѣGÛÎ69frÊ cäÚŠb¼6S\;m:‡pä$•ûèòòͳF'žkfÚ.¹ä’ØÈ1ÊɾûîkP˜PŽ.½ôRÛ^wÏpÉs¢Äs±Ùf›ÙrøYuÊ&³>®Óû裛i·yö§óIÇÎöúë¯oÛ¶÷Þ{[ŽynPPØPd¸§¾|(‘áò¢®ƒç‹aÆÅý–@™BéDIá~<þøãVb å㦛n²3tþV~_(¤ðe&ä8Ù³e •í·ßÞ^;ϧ»v~ÔåÚ÷þûï[Åžs(…›6ò{&ü£Ìq/¸6î ŠZAA§XPt6ä?Ã/Éêtg¼úê«V1¢.ÊŠâ1êwÈo‰÷ àžeÛm·µéÌÿ»Š2c€‡–Îݘ"Ðé¥ÃˆÔla· ?ئƒ?V0U0M@Ç¡óNç°­`¦ ðOP6RC¶éð ‡ è¸¿)˜(8D@=ÈÓêë(¸Q0LÐU€Œü#àœ».]6mÛþ–ïö‚çüÙ¬ýրЉ¦cG;ú ¾DÕ»ŽÛQ€Ií}]P¡œ½‚WN^” ”÷‡][¶Û è`û¤¡$þŸ€Ž`[ÔI:ñÜQF'Á½::64 tâOôœ/8GÐCÀq8pü•€v| ¸M𛾪 ¸7lï+@~Å}rœ:Μ$(\)ØDp¸àt÷·–`‚Žy>P £sûî?Üî_Ô55•ccOàëWAsOvÄê‚‚£Š¶á1ê¹+Ǧ Üïs÷øø§Ì#H²ßÀ§r|+Á_d9P@¹óÙñÈ֒ƽ„?^ò_ x¦68©/ûì3ÛqmÞ¼¹íœ3àä…^°i˜61ŠJg?™B[h;yëÕ«g;x¾zÍ<³*½{÷6Ûl³«Ò~'«^PÜ%§ã†mzPP¦àýÛo¿µ£¾tÎi?m£ƒ§áú8ÿ€°#á(lÃ9&!(køÄÀO=Ì;ð»O_˜=b´š™:‰”Ã3â$•ûèòòÍ}溵†ï‹.ºÈvÞM=÷™Ñt®¥‰NvP¢xÆE…’™:Ü´Þ0_sÏ*\#Ë—/·¦=tÊQ0|¹×^{­5;CI?í´Óìh7è­¶ÚÊÐÁfÖŽ2÷Úk/«døòa∸òöØcuä‹ú-ñwëÖÍÞk§¡ÄÑÁÆLïÀ´¿c8@Ñ@ñáÏ3Š÷‹ˆTÄ÷lÏ£#ÎóµÁØkwægÔ½Ï>û®‘p ß8¿UŽÑnx¤Í|S÷»FVÑCaã¢Ü18€ð»Ç< ðŒ;IV'ÏÊ š3â1êwèêÑoe èp¾.X)/@sí H&ŒP/,¼)@V èüÑ1¹UÐPà“%‘÷,¥× ÞLÐqn"Ø[ÐS0Cð àAOAsAkÁéŽÝ#xL€4ÐɾJð…€óhcü™$ m¡Þ5:VÛ ¢ê•CVn‘Ï+kØ…éÅ}” ? èøNð‡ßNþ”§(€È‰‚©‚¯>é.‰óýpÙG€"u”AAë)x[ÀýxNàÊ–M+ptpÞ<,àyè&˜- ÍðCÙ V (Nñ‹‚ŸHí¤Í(;a¡Ìã/hÇRCp˜à.õ¾/€‡‚«[ 8ÿ"çqoQN~ÛÃ~Ô5/ÇÞ Ì,ÊÇý/N¸æâžkßï!ÿÔ[Üoà_Éó}Qã–ïgw>ЩÛ7€*²L\/àúz 6º‚×3g þDÝçÂÎGñ÷UŠÈ?Y¿¬›ÄÈ6³t|é 8’F'aÄšŽB§“(á¾mÛ¶¶sBG;z:"AófTPtœ¸N4y©§N:îÍçÎ¥Žép‚b‘ªDÕK:žùpå&«—k¤#ÏŒfGŒªs:Wtv™}¢£„OJqBÇÚ œÓc&„Î f!N|Ê‹;–웣S ©ËÕç¸Hå>ËsK§“Ž(mF‚÷“î1¦Aø'8‰â™|(wNxO>9ü¿ o\QPf™`æƒs¸'>A1G¨éÙ³§ýv´Û=—¤%ËÇqWžËõœFý–¨/x˜(!ÌtáÃlLPø]ƒà Bã`Þð¶»×¤»g+œÇ·lÛ(ÖÎt’Y)'Ì&à $N.Ú>N¾)ã³¢}þéX¯,Úw_tž¼*ØQÀ9QuMKåøqò§l|âv’|§ú\‡‹HÆ*¿Êã7ÄýAY\´-_vÆïz6ФYÑwðyøYÒ¸f¸GPL¹: x^¢îs*÷UNÏ?Y¿¬›Äè2#üÉÓD°›Ç·À™ì |5PZ|îTûòÓèØbŽÃˆ'£Ç|…N;fNÜ6Žë(I8|Ò±@¸'trè`ؤüÑv€Ü †ËõU/æ5ˆë …Ϫ—|t¼1¹ad;xFˆñ¹p¯ÌŽ t`rBD¨GyÄŽ»<¾oçøv`ÆäŸ™t”0Wç¸N®K wƒùá6lÏϽƒ[¾é,;AãÞq=A‰â$fœ0ú¿>BA¡3Ì5aNƒÙÛˆ#¬Ùfja>Ý½Æ 3òÐqFðW!Ý)c¤%ˇi‘+¼Q×Ayáváy‡'ø¡po) Ó3̲¸££Žâá¸uç+.Í÷Õ_Þ`Z°|fýP,‚Ïz0¯o›k8p q ÏL9…#|^²:™ D:t¨õÓ@Y‰â‘¢’üÃíÑýJÏÀ£^]tH]CŒžò'º®À ië¸Ð·ÿ7”)Å]þ(7Ô¸ í¤CÍËw#t«T„Nß?‚Í(7ÈNÒ/g§IV¯;•YŒ’l×ñŽ:šà>\ h"xVp¨À'´u÷Ð8rNp‡N)¬#Ûk;*²#ò•àÁÓìˆl%€×'[ÊÆÅž‹ Ô”®énA Áµ‚'îÙ‘M+ÜCÊvrl4pÿ‚|ÒfI¨áOlÁÁÃ8i(øTà{梮éÉϳ÷ÜÓÂÛ¾:Ây|û©ðï;/˜v»ìtì%˜80\¶AX¶ $ ¼À¹XxI¶{ ˜AºLÀ½ä¾øîóm’žÊ}•lù'ÁV™´Ž™FÛ™íàÏ8›vL7è0Ò! óŽ­õ믿«— Ü’®ùJ#Ñn”=V¸l ”`3Nç‚:p gDÔ™‹ÑqÄÁ–NgÐÄŠëÁ›vŽcGsrªU¯S@¢ÊIV/> ˜ªaZE6Ü‘ÂÑŸ‚y £ÔΞéLs-©çâKƒɈ.÷¥2SRÜ} Ö ·˜-9?:ôt ]T-F¾1aBÉÅw‡ûîLü\9Q<£T0 ÆLç=öØcVÙa6(ø¬¢t`ÄóLg”Ž;Jv”bM½ 4°œò<¢¨ão‚ŸŠcPRÍÇ9Q×,/¼Í5>ýôÓöw‡¢BÈjÚNYDúbôžöñüãxŽÒÄo›ç e^|þ.ázR݇W~g¼üž¼À‡gÌiGªÂ¬&œ˜jQpÑÚ¢ÊHV'39Έß!íŒâ1Ùï0ªnMW< ô”4:&/^)?' èä¶Ôì N]þ+ûµ ÊZ>’— nÐ ¥3~†€v2b»Bp­€c; N ó»HÀ7Ü7tS‘dõ¦r~ióÐÙ}Bp£`‚àWA”ÀE;T¤·€ëĎȆ‚«tDQº ^…{ßW@^FvG : ^,ØGÀý @ÙùMÀ}'?÷¾•à]AcÁ‡‚gÔ·Ž (”w¾€sè$óŒù^¶´ç0årÿÎÜ)¨- cá:vçÉ6B›ƒí¡Þ¨kzQŽ$8D@>ÊÞNPVB;‚¿8ºZŒÿduo/i#¿9:FÕŠàãMY9\>÷p}ç¸wÓÈbÁ7”+ܳ¨û¼ƒKå¾J¶ü“d¥ÝZþØQ(¡g±¹ÆÎÛmLƒP°ÁÆÛz×™`ûjìùK*Ôͨ0Ó°ÑÓ|.0£ÃÅŒ xìöQ*ðï 3ÝgÄņ5?!ËõСAè0'Qõºó¢Êˆª_lÖY+Ó1üˆÈCGÜ ícd›uàœÑu×f:pD£“…DÕO: Ê2Š#eÑ©¢ g£ïê ‡Ë ï‡ó÷“ÝÇ`>” F˜ dG£‰Œ„º»˜c1ŠOçsäÈ‘Ö =¬øEñL'œˆQøÛð¼ t᫃ŸU&Ìÿ(‡çšŽ:mrÏu°½n›gΠmÜK|1P`8Ïq•,Ÿ+Ë}G]‡;îû&z˜{¶9¿aÆÖÏ…ëÃÜŒkÇï…ß.³€´ ³1ÌÎà^øÝ#®ÍÁz|i.¯ïØ´‡ç–ga¶ƒßÏŠ툒`™l£ qßFe¯ƒka…=\^*urϘâ·Åc²ß¡«3Øf—ü.îx0¯nWHèÐй)|a¯½D:~ã=#Œª3r>]@g†Žò¦€ÎêLAª£Ä©ä#Ï_‚n‚¶‚_ót,ï0³q’àHÁ¯‚Y‚E„cÝ´}µ`²àÁ‡×nÙüÿöÎßE’"Šã·^$¢™bp©\dd` ‚æþ&jj``d †""‚â™—» Â Š‘‚™?QÔ DE¿Ÿek¯¶§«§wvºoföóà±ÕÕUõ^}ªgº^U÷ì)!¿ø5d—J”+e9+g©s-2‡zï¸qüëóþL&ßÒWúùLô›(åYuz,JÐÀMüzôÝh-/åà·èOÑï£|é¾ý újô Êù‡¢LZ‘¯£äýåºÀþ—Ñ_¢ øÔõ÷…äÝŒ2þ*Êx¼íÊ'Éx9Š]ü~2úlôFô‹(_Þ¿GïŒâÃÑÚÕVŸ¸v9ǵ ¯ç¢ßF‡ä,ãÆx<ýô¸A®Í>þcÚ¤ ÄåèçQX%¿%°-ý{1é§¢ìˆÕãñVŽióõhkœù¬/׺Í?%cúxªÂ:êÙó‚#‡‡‡ë´uÒ+ñ¬žòNÁí¸¹–Ðò¸Õ‰cIà»4õóãå—w®JY>«ìFtƒ6ÎSž«~Š¡¿8ì8˜±kÁgsj9ÍÇu|Wí÷þþ~_Õú»¿ï¼yã,Ü7Sív±et” jŸ_ÉžTîMëL¦ ŒºÂÊ8ß»'rL=&ÈC¥žj'YCvO m@âŽøp_” ¢o|;&íE‘Ç£×¢ä¹+ ®/&͵pù'J°1$Ôgõ[B[œÿ³Uà8ŸkŽöÛZê¾Ü´UúU—#=Ô'&.CS ŒßŽ^‰Ö>çp2y3-X=åzø!Úw=${AZã÷@ʽ½Ñ)ÿGç¸þ“Ä²àƒ²ÔoµÁù"’c„k®|P¯î ;cCÒò‡>M|t}ª}îž›â˜þ±XpióØq=‹­ÉËÖ+5 ÊT; “÷Jk'À£,<Ç/Cñ¼;ÿ—e[…÷,x¯ƒÇȺ+þÛÚ§]õûàààè'³çœÀß›SŽŸ; SÒí]¹¬ï«“·ñ%ÀÊÿ#Ñ£Ëv!v câÑèõl'AàöYɸâ‹ô9ÏOÜ’… ·à˜’€$° @&µ…ûf¬Õ÷ÕIÛ¸$ - Ðû=É3‰Š$  H@€$ Y€Ì‚Y#€$  H@ @¼$  H@€$ ـ̆ZC€$  H@€ˆ×€$  H@€$0ÙPkH€$  H@0ñ€$  H@€f#`2j I@€$  H@ ^€$  H@Àl @fC­! H@€$  HÀÄk@€$  H@˜€Èl¨5$ H@€$  ìUþ«Ò&%  H`w Ôßý»ÛËé{æ}szÆZ€vÀž; »7¨öH€$  H@K @þÞX/uL€ÖEÀïúu‘¼tI–ëciKÀÅ pô½Y _Œ~ÛK H@š€ßõë~Y®¥-I@ƒÀÑ÷æåª¯%ý`ôJ´Î¯Š˜”€$ -%ÀªÓAôéèÍ-íæ¹í}sÓFD$ M%à=hSGF¿$  H@€$°ëþ¹ÅÜ‘†)<IEND®B`‚tpm2-pkcs11-1.9.1/docs/illustrations/object_diagram_transient_objects.png0000644000175100017510000015243314535673717022325 ‰PNG  IHDR à] õsRGB®Îé pHYs  šœ iTXtXML:com.adobe.xmp 2 5 1 2 †Ò®$@IDATxì¼cþÿA¤(‚Dï"jÔ$:Ë*«Gï½—]kºÅ_ï«—E,«¯aÕè½DK„ Hóÿ|Ž31™ûœ{Ͻ÷”9缿¯×çÎÌwÚó¼gîœçû”™i" €@ýøEYìXÿÙ$‡ N`¼ò?Cƒ3 û€@ ˜¦ÒH!´—À¯í=ûC Fð»^#ŠdB ‘ LÛÈ™'ï€ @€@e t¨ìé8 Ì ¦83—‚„´‘-{mÇn€@u ÐR]þœ€ @ E€¤¡.7™… @€@u €T—?g‡ @€@C i¨ËMf!@€ P] ÕåÏÙ!@€ ÐP@êr“Y@€ T—Huùsv@€ 4†ºÜd€@³ºjíßHi+!@€ Ð<°-­æ÷h¬µý”Ý—¥IÒÏÒwÒ ’+©“&ç§šäì2ý/uþm1÷÷ýý‡´°äíO–’¶»|Û‘’·IëbùúüïÈwº4½„ýN }OóaÂßÙ0@€ªJ€‚Zaü‹jÕ8é$i6©ƒ4Hz_:OrkÈWÒnRlïif‚´QÞámFIÛK@ÌÛë—”bÛS3¯äŽÖô5i®”ºhÙ-0ÞÕüº¹5ýƒô­”LƒÞ¸¯þ @Y%@A­ð•ù—V=X½¾|né#Ý&])ÙzKc%/Ÿ)̸ٖ§ Wiþ’ƒ[:yñ7w“¿qâã$í-œ“t0ߤUÏ׃ y®é @ q ,£¬»KUÚ”8q+ÆcÒ~’m-i˜ä€À-¶Õ¥7¤/¤Y$ÛñÒÒÞÒ¥RÚf—Ãë’vwbÁ­#îæß©þÒšÒù@5N€¤Æ/ ɇ ÐN³jùH›Çg¸¥ÃÂPÉݱ¼íÚÒÃÒ£Ò’}kHHIû^ ‡Hn)ñø´õí"I®…1y‡ƒž¤ùø÷$ÌC€ @ «Ü5%­¬¦µÒézN'<>pR·d8 ¹•Çxl,”Üjb{EÚ\ú0?ÕdJ,&¶{¥[¤ÖvÁr«‡ƒ”žÒv’¯ß@ û@úžö2@ ó¦Í| I  ”“Àã:¸§vïé%É[w»ÚCrËù«’Í-!;IóIC¥ §«56Z%¹[×MÒ›Ò²@5N ýƒSãÙ!ù€ ÐJgjû^Òµ’[¦—þ(!¹ÛUÜ=Ë]¢6•Ü*®i÷üf’ƒ”¸ë”f§²´tªäc&­£|Þ¤º%7Hͬewà @€ ytUiþõÕj“%üþV:NJVRysLŽÛèªå‰’ƒ•ØÒŒ·‹»`Ùï`ã-É]¶l¼º&WÉ¿@~Ýš&ÍëÒãB’ëq>İ9g@€ 9ÔŠ»$(”<æË>îëì_#Rð#€‚ ¨;.¨¥ç_š˵F€ûºÖ®é…r’Íë  @€ PV eÅËÁ!@€ $$ æ!@ Züö­E¥äàõj¥…óB€ @ ]i°î‘"õb€–}GåýjzJ~Þ"ôÛ¯Ò Ÿ•ôOв÷ÝVJÚÌZ+=•tj¾˜ý;k»ë$¿}ËòµzPòëym-åÇë”ikáCi¦¤³ÎæÍ*­:Ë"Ùê‘- õxUÉ ÐÈ =דƒî=/{zº”ü‡çLøXo$Ö¹…b¨ôOÉß ‰íOš%­ -;5miŸû.i>i9iFi)i6éÉÖR~ÎÑ6ïJ—zã¼õ×toi?i\ÞÇ€2B Ðƒ=#É#€ Pß럧4>Þ ÿšwß‚¿÷Û®š¹DzPÚEJZsû¯§ W“Kt\›ÿº´ô¨Ô܇ µ:gþÉîÒ igÉ_j¿LºYºO @ cü Æ @ ¾ø‹ánHš[ ÙJZ‘Üþ-_ߨœ7?ïîRHþPáð¼o~M×vÄø£„ÇH“$[sûûXoKŸzÄÙwTb¹¥ü<¯mÏÎk)M{IëH dH/ I‚ ÐN=´ÿž©c4€¬¨mçIlïãêüòšŽÈÏÇ+q ÉNšLúLr·)·>l Ý#ÙšÛ­ÿ.·UóŠÉÏq:ÄæÒ’Óôµ„A€ @ *ܵ'­ª$¤'=Zç BIþ¸Ua¨æO•lnÉp‹EÈ|¬7$–Çj\%})¹ ï4’»e9ù&/s¾U²µ´¿Çh¤ƒï×YºXê#“m–3·¨ŒÌÏ7Â$}O{ƒ y´€dþ‘@@U%àîX_%Rp–æw‘zJ‹Hîîä–‡¸EăÉO”â—æöw×)wïZEzJŠm€fö’ŽŠEN† EnËf€ P% UÏi!dˆ@¥ÅDÒF%óåçÝ}jé>)în¥Ùh˜ä•í½°ò>ïÿŒäí¯—¶”ÜJã Æã9n‘~0@¨3ÓÖY~È üÖÝ,Í!î®c²«ŽçÝÍéÓ”ÖÒ²-¹­—”x½ƒ†¥¤¹ÅÃcA<ÃVh\·m!½*=+ùØoI¯IîN[úöÛWÈïÇ€ @U!V“Óª$„“$ÐIk“<þ+Ž@ò~Žç‹Û“­ T‘€b€ê€ giãù—&Âr­ྮµ+Fz!º`q#@€ @#@R1Ôœ€ @ ဠ@€*F€¤b¨9 @€ @Â=@€ TŒHÅPs"@€ @€„{€ @¨;'‚ -¡o(d+…¤€ P‡h©Ã‹J– @€ U Y½2¤ (%ñ¥<Ç‚@F pŸgôÂ,@`j Só` ¨OÃê3[ä Sà>Ÿ  €@V L—Õ„‘.@%$𘎵´4Äs¯„`9T&¸åãQiwé»L¤ˆD@€ @ ‚ŽÒ¹Î¨àù8 Ôº`ÕÐÅ"©€j„€[™&ÕHZI& T˜H…s:@ @À¿-“ Ÿd€Ú@€¤ ÐØ€š%@Ò,VBhl }ýÉ= r  V9¨rL@uB€¤N.$Ù€ !´€dèb@Y#@’µ+Bz Ô>Ú¿†ä€@Ù€” -† аè‚Õ°—žŒCh™Hˌ؀ZG€Öñbk@ E€¤¡.7™… P ÁÌI Ô&Ú¼n¤€@– Ð+ËW‡´A¨2*_N@  ÐR‡•,A(R‘ä8€  ‰I0… &@š Á@í$@ÒN€ì@ ž €ÔóÕ%o€ªC€1 ÕáÎY!Ôš¸L$€@M ¤¦.‰… PY •åÍÙ 4F¸Êä€@ €´»A€@AtÁ*ˆ†€ @Â=@¥&@ H©‰r<@uD€¤Ž.&Y  ¹$€@ €dñª&@µM€.Xµ}ýH= ² )+^@ ! ÐÒ—LC(ŽHqœØ €Š'@R<+¶„ Ðp@î’“a@e'@¬²#æ€j—Hí^;R@ «hÉê•!]€2@€$$@¨3 uvAÉ R )%MŽ@&@,î@(H€¤ V@€@ ÐÒFpì@ €4ÂU&€*K€¤²¼9 š"@RS—‹ÄB¨  5q™H$ ê ©wÎ @ ž 0¤ž¯.yƒ ÐN íÈî€ Є- Mà€ ˜HL‚) ”ŠH©Hr@uH€¤/*Y‚ PetÁªòàô€²L€$ËW‡´A¨M´€Ôæu#Õ€*B€¤"˜9  †"@ÒP—›ÌBhÖñbk@h™]°ZfÄ€–HÃ^z2@ lh)Z @ ö €Ôþ5$€²F€$kW„ô@Èi2”’@µK`%}+i¼Ô_zIúVzG:MúI @€ ”„À­:Ê$é×€f*É8 @€ <šŽ•’ÈD-_“_Ï€ @€@ɸKï×R2ù^Ë+•ì € @€@‚ÀéšÿEŠƒ똅 @€ PR‹êh?J@<=\ @€ ”À›:²Ÿ¥ÙËv @€ @@’üÊÝû @èr⃠4C §Ö-œ×\švÎkM»K¤.ÒµÒ’£{êAêïIïJŸH“% €Œ"l° Nv!´‚€#–”H«I‹I<p´×N‚Q³¶×Zœ0ÄÏ-J|°°Y|¬„ @h4»+á³kö÷o4m̯§úpáym<&»A€ @ îl¬ù æ¡äºËmy3´¾_¨%äèòžš£C€ @ ûz+‰c¤Pðqzö“ŸÉú£Œ¡1!þžÊÀL¦˜DA€ @ üa½§¤PðquÎ_ϧ8¼×Ï䟽ž3NÞ @€ Pˆ€¿ê >î•ßÁ Ö>gj÷ß{ägPzûز7 @€@XWé uúPþ®5–—¬&×ß ñ CAˆ_Ý‹A€ @ !tW.¿Òcž^¹!T.“séT_I!ÖËT.œ € @Õ#PècƒGU/Iu}æ •»PkÓ°ºÎ5™ƒ @€€¸Ö=ôÊÝûåg\Bùn‘ÿ§C§[A¼ìb€ @¨[®uO„ÇÊç®BXùL¯C¿!¥Ùû­XËwZŽ @€ êpm{ºìe¿2+?utŠ¿ ƒ @€@]è¨Ü|"¥ À®•wíÍop²¦ßJsK}¥ Ò¦R¥ÌQúš9= ´À´m؇] @ í’…ÿø(n¨†¹+Óþ’ ×C%[GiÞ¼×ôï’ ÛBv½œ;$Vl£ù§¤8xˆWy·$¼ Ý/í"%­«|Þù$;ûII¶“¤Ï¥‹¥Ë¤;¤;¥JÙHh\êdN¯2 € @™%ÐY)Kפ»6¿C…R·€ü¨ó}'¹Eâ{é4Éætú¼¼—WÊB- }äÿJê/Ùž”v—n–Αb{M3ûä¤|#Í_vp“>¯Ó7~½'«I#2FrkJ¥íe0FJ ´’- ­Ææ€ÚA`¡À¾Ê71à/§k_|si=É…ù?K±½©™9óê­éÕ’[ ý^8í·H÷áüõ“n“’¶¢–”Δx\!u—6•bsKK|Þ¾š%¯ÔÔo¢z\ºVúBª´…Z©B­Y•Nçƒ Ps*UëVs`H0 2ð@ï´H;*°ì.R¡µOíñnшÍÁw‘¨¸µ&d×Ëy·ôtO~ªÉÛEsI§LñDÑ!š÷`t/¶¤ø¼žú˜ëHIs‹U û8pÒÐõ l† €’@’4˜‡ P^‡w¨,ÛGùĹû•ÇB„ìi9=NähiËÔîfµt ô`bÝŒš¿]š;áKκÀŸ¥~è:…®g2ÌC€@€@¡&õÀ¦¸ @ f ì*Ø6«˜Ëã’ö£Ü:±†¯‹§ÉínÔBÜ’ôo¢!8ž´ûµà¼ï …ŽçnV J…­ª¨™AÚ@ÒDX† @Ƚpa;)¿Ù Ë> O^7Ï_’ýd“B@Ù#@ Hö® )‚ê—@¨Æƒ V i%06‡ ÐYîÆã/Wã­SÓ뼋J³¶ƒk%v¥û\%(s@ !€4Äe&“€@F„Æ{„ ¶•Lî~:Ù(ÉßùRz_Z[Ší9Íø ä±\ëÿ°ÔCJ›ß”åíÜ5éÈü|¼_<Ý;ß×IÊ^–FK~Mo/i)Þ>=õG «a¡ëºžÕHç„ PS@jêr‘X@ Æ „ ¬¡‚m¥²y˜Nt¼´‡äÕþ:ùùÒÝÒÉ6tºäÀ`iMÉ%<^JÛtrx{›_Þ¼_Rþ꺷¹KšOZNò7A–’f“üºÞ›¥xŸ 5ÿLbùpÍWÃB×)t=«‘6Î @ ¦ð!šº\$¨q¡k·*åÉ…þ¥C¥øþÊøyÒÒ’ƒŽþ’Í­Ÿçæ~ûáÍóû1!±_~÷Üd}ý]MZ@ú4牢×5õ w—:Iñù|n§+^ÖlUÌÁYÚœ6 €ZI ˜V’Í!@ Ï~«a ê¤X}oàäö9ˆmeÍì-y¼†çW”NZ²Ùµ÷KÚÝZXRz[Šƒx½}GÅ ›†®S¡/Ãg,é$€@¶€dëz@ ¾ |¨ìM’ÜU)6éÛoÂ;*4-ž1óÙç4¹•Ķ‚ä.Q6—ïo_!ë¡{¦V×òÒw)Ö$ðÝ€ ´@`ÚÖ³€JGÀ]’>NÎã!Jù*±§£Oàdö}-ý”_w‘¦B¬>ÒÅÒ’[DœvOCö†œñ~ñôyù>‘<þ#mgác÷I¯¨ò²+ëBiz¯Êéâô€j’HM^6 Ô0P­y¨v½ÜY¡8Ù1p"ûøc×Ëš™_ê#9?qÓÄ-$Í™ƒy¥URyàû^Ò¨”¿Ú‹Î«ƒ¤yLÊIó€ Pôµ¸½Ø €ÚJÀöõS;/–Z®Ä¢ƒ„S$·88M7JüýWiMi%)¶®šé•_è£éÒ«’÷{Sr~>6—¾”&H¶ŽR¼_Ρ??JÏHäë¥-¥—¤E¤³¥[¤¬ìC×ÇyÇ @€ yû)…¿¦toS½ÎíîV~Ӕǧ¸[Ñ )¶ç4“Lï/ZþŸ´T~ƒ4ýTúYr—­$ÛÑRr¿xþªÜÚß_¹ë`e\~Û!š¦?Hè é1©švšN§?ž^ZÍqn@€ K`mbãéXù’Ó‹=V)·ó7><8¼-6vZPŠ­·ænuq ƒÇdÕžTÂâkOC]ײš~Ò@€ ÐÀ\XÿFŠ ²ñt…f’å¬{\‹[‡âëOçËr¢I ,`z–¯iƒê‘€ °¡Þwe€ÊOŸJÖÇZö ~ €Ú@€¤ ÐØ€@; xvÚÖJ;X婨ö˜”@’pA€ @ 0w·Š»òÄSîî^xÖT‰€åÇ×(žî^¥´pZ@€ ´‰€ÇøÍQq6žîѦ£±S¹øUÄñµ‰§図\'一]°á*“G@ k\˜½9¨í>\Õ#°]àÔÊço`€ @¨)Ë+µq­z<õw8殩\Ôob]A7RНM<ݵ~³LÎ @€êÀÛÊ`\°§þ€V}( ñ5‰§þØ¢¿ A€ @ & ¯TÇ…Ûxú™|k27õ•èG׿öúÊ"¹ @h4ó+ÃÔñ”·,U÷NX1pM|m6®n²8; @€ÚOà&"<âé[òùMYXuÜªÓÆ×"ž¾&פ:׃³B€ ”@?+.ä&§›—ðªx kS¿ y-<¿sñ‡`K@€ d›À•¼t÷ù¦Ëv²ë2u¡©O”Óéë2·d € @ ! ¬­\§/Ø4ª—é®Ã¡ÕKg† @€@yüO‡M!c䛣<§ã¨)nmr«Sú|!_çÔ¶,B€ @ æ øÃ„¡±WÔ|Îj#nmJ^Þ¹6’O*!@€ Ðz—i—t!x²|ý[(öhžÚÖ­MiöOÉÇ›¯Z’M!@€j‹ÀìJî7Rº ü¾|]j++5“Úi•Ò‡¤4s·F¹U ƒ @€@]Ø_¹K†½|s]çºz™;¦o·Fa€ @¨{ ý´ Bö¬ûÜW6ƒ«êt¬GÊ7[e“ÂÙ @€ P=óëÔßJé dœ|KV/YuuæîÊÍÇRš±»^­UW9%3€ @(‚ÀVÚ&]8öò‡Ò\EìÏ&… tҪǤß“ ïÆ@€ Ô7Ð[±\h~IêZßY/[î<èüv)|<.¿»Àa€ @hH3*ׯJ¡Âò£òÏÐTÚ—éK ð-ÿ¼í;4{C€ @ ö ,¨,økÜ¡ ä6ù]£Gàxmâø‹üƒŠ;[A€ @ þ ,§,Ž•B…ç!òÓÒò=pJ~tîñ6 @€ °¶æ]S B†ÊϘA˜Çt\)…¸Ùw@`\€ @€€l+M–B…é—åçíX‚0¡¹K ñ²ïäĶÌB€ @ûÈçnC¡Bõ‡ò/ا]=•é'¥'û.lD(ä€ @m!°v*Ôë'­sÒȶ¾2ÿ¥T(ø8®‘áw@€ ´…€Ç„˜î‚÷­R·¶¸†÷™^i?]*ÔMm¢Öí]Ãù#é€ @¨*~:{¡Wô:ùPZ­ª)¬ÜÉÒ©ž–œïÜ2´¹„A€ @í °€öõôP¡Û>·\-Í)գͤLù»?K…ŒÔºÕ% € @(N:ÆÅR¡¸ýßI‡I¤z±­•‘Rsù¾Oë稗 “@€ d‰ÀJÌ©¹ùZï‚»¿Q«æ¯–•šËçx­?BšF @€ 2è­ãþOj®pîuïKûJn=©›V‰ü“ô¬TLÞVª…L‘F@€ ÔÖ÷’FI-ÖýºÚ¿I½¥,ÚlJÔ~Ò;RKyñ@ó¥% € @¨0î:ßE’_?ÛRá݃ÕÝr²¿ÔCª¦uÖÉKwKîJÕRÚ½þi~ ƒ @€ªL ¯Î?T*¦ ïm°<$#ùíQ¥rš[lúIKÿ–~”ŠMë›Úv ƒ !À༹P$€@ ¬¡c-m$µæùïWÜún!yKzOzW-µÖfÑþfÇÂÒ"RÉANW©5æ± þè [>ÜzƒA€@hÍPd‰dB€@ –Òú#¥í¤é[ض¹Õc´òɯøý^ú!¯qšzp»»RÅê¢ùÞRO©=v¿vvà1´=a_@€ @ òæÑ)ÿ,½"Ûå©Û}¬ô9èXR @€ : àÂý)’[4ªd¤Ïù•ÒáôîžEk½ `€ê…õz¹’ä€@鸋֚Ҁü´½Ý¦ŠI™»q=! ““ž—&J Ô:» d€@‰ ø‹éJ›J~SU©›äß¿½ªµæ–ÿFrkË ÒéQÉ~ €êœH_`²@ üº]·~,—×òš.-},9Pp«„§/Jc¥A’»mõ’®–Þ–<è|&égɯÓu+Ê–Ò5ÒÒ‡ÒÒŠ ù«åÞö¹„†kþ[ ƒ :#@Rg”ì@(’€ßRÕWŠƒ O—Þ“dÄÇKšwp4Ü_ß:?½DÓæºKͯõWJ³H»J¯Ii[@ŽdPâô|!%ƒ§ÉoØÂ @€ ˜Yi[M:HºZzErAÞ-—KûJ+KJš³éµò0i”tžÔ]jí®½ï RK7t÷®%¤¥ ¥g$§Ùiw0ã4¯ 9M ÔZ@jèb‘T@EèªmÙuËóßH ”‘Hárh@E˜_Û8ÀH¿à ãùüÔóKå¶Íu·¦xLÅÒ»R¥¬³Ntšä4¸ÅåN©Üæ±1q0â©Ç•|-9q°ç©¯»ta€ P" %Éa ´@ÀÏ[¼Žƒ8àpá6nшŽ‘-«Ô«—ÕÏ•<¦Ä­HÕ²ÕuâJ/IHîV)ó5ZTŠƒOûJIFb½¬ù_$ € @™ 0­R±„´£tŽô˜4Vú@ºM:Fr·£9¤jÚœ:¹_iû…´—ätgÁ:)—|˜a5­ƒNîmOéÒ‹Ò8ÉÁâ¥ÒîÒ2R9ÆÈè° @€¦&àªkÉw•.”ž”~”Þ‘n’Ž”< º»”›A ù‹4Z:]ê"eÑú)Qn ¹Oš/C t€Ô_:PºVzSò5÷ÛÇpn/-"¹Eƒ @€@› ¸àîqn-pí·»ä¸6üué:éiMi)«¶•ö±4DZ «‰L¤Ëž[ŒFI’ÕB½¯ù é(éVÉoöúNzHrkÎÒ¼@ á dõAÞð€@Õ ø­Sîz“³±¨–ݲ‘³áñB²nË+çI3KKäZ2³¿Jš,í&ù:dÝ<¦f%iÅ„œf®ñ ÷g5ïà ƒ @h •×5$·`¸KÍk’ƒ ý-Œ½%"gjÍæR‚¯–>—\pŸVªUs¥ÙÒhÉßøpëH­™[AÜrªô äV’$·š¸õÄ­(Yí§¤a€ÚO€ö3ä€@mè¦äÆ­n𼿻ñŠô¼·n¸[•¿Q«æœ#¤C%ws÷©ÌãA.—æT½$Õ²ùíhÉV·¼}*9ŽåÁï?K @€@† ¸€º¾ä×®aþ@ú^&+ù KKJõö£í”§Ò¿$ë¢^mgeÌoÊrpU‹­S…®‹ïÇ¥%W—Hî®õ“ä ä’ßÈÕOªÅ %ƒ- ~Ôw5Š[4â Ž[4­r?ÿO¥ÁH‚P„õ×6oJ·K=‹Ø¾Q7™V_RÚEºHzFrðñŠt¥´ä ÅÿÏ @È NJ‰»z¸°â×…ºï}UºF:HZ]ê,aÅpMþÉ’[‚þOšQÂZGÀo:IúZÚµu»6ôÖ6tøÿÙAˆƒ%N¤ì"9hqð‚A(š5hE£bC@ EÀ Ý²w¡òtaÉ-îºa9yYúYÂZGÀÏgçÂã<”þ"}&am'°Œv½Jò˜=¤$¬uüïÿõä ÷¹µìÿõçú@ó @h3.Ús€t˜t½ô†ׄ^¢ù=%×”º¦k?5tpOJ.èa¥#0u¤4J:X¢ö^Úiî>¹Žä ùvéÉAÞ’[ï6•æ’0@9´€p#@i³ÊáNËA…§.<¸%õœ.[B&JXéôѡΔV”Ž’þ%aå!àÖ:¿)ËAón’lj`¥#ÐC‡ZIò½lyþ)n%ñ wÏ#a€ 46”þ* ‘>’¾“†JgK켸D-± ”ÑfѱO“\;FòX¬ü\ çñ n 9Vš^ÂÊG ½•t†ôˆ4VòÇo–—Ö”:K Pçh©ó Lö ÐKóq‹FÜÂáþÜÉV Ï»@ð«„•Ÿ€;×¾»›Ê½’ƒ/$¬²æÑé.“æ•v•ü€•Ÿ€Ë ‹Jq+‰§ËHJq ‰[I^’ÆK P'@êäB’ ¤ôÑr² •çmÉ`ã-d'VƒtÖs%·8y,‹V]ÛëôçH×H~ã/O„ [oi)9È}1-¿.ÅÝ·<}Cš$a€@  ©Á‹F’! àÿá…¤¸EÃ-Ö’ŒdÀÁ”$¶ Òp¦ÔW:R"aÙ!0‡’r¾ä1 »JÃ$¬º:éôý¤rk•ƒödPò®–1@€JHÀÝu–vΖ†Jc%wWp!Öã86\€Â²G «’äÀc´t´4ƒ„e—ÀÆJšƒöK¥Y²›Ì†M™¯É é(éVé#É­‰J§J[HîZ‡A€ P$wCp_h×À^ ýOúAzGºYòî:Rw Ë6¿öuéKéR « ]”L ùTúCm$¹¡S9»r¿‘tœt—äÿ¹/òóîRçnx ¨2wßÀ êðk@—–ÜÊݧ<]JúHz^rW*ËÝ ÜâÕ‰çñ•tˆôŠ„ÕJò•ÒÓÒAÒh « ìºå±%c¤áRÜ}ËóßK @ . ̨\õ—ö“®Tü$½,]% ­*Í$aµK`%Ý5°ïI›Ön6Hy‚€ÿwÏ”\«¾mÂÏlmpÅ«ÿ?ã<¡ù%æZé@ÉÏèN@¨9•â5¤ƒ¥k¤W¥q’kÛÜÇÝr\3ÇXA¨ë¦|¸Åc”t¸äÖ-¬¾øö5é?’_mÕ>w“\FÚ]ò˜·<»bÈD~Vï)-+u0@€@ftUJIGH7JoI®U{JºHò›ßâ2½„ÕL¾–.–èg.ulþ?ö8_oN±ú#àʃ•¤ý¥«¥×%?ÓŸ”Γv”“èÊ.ZK€œÖc{üV¸ô8 kùütNM][–³á&ýIVß6PöΖ>••\PÁƒÀ’ʦ»NºeÓ• ïKXýp«¶Ÿù+JKâé’[µŸKècÍc€ 6è©=ÿ ýMú·4BúVzD:SÚNZT"˜„³Å•ßû¤w¤,ïd÷w~=¶OLw·;wçÁ‡À¬ÊêúÒ±ÒÒHÉ/¸W:Aò³¡‡„A š0˜mxóŠ@Ü¢·p¸>ÙªáùžTcpËm¥“¥‹¤‰ÖØæWö¯”:K»I'‚5& Š[HÜJâ®\ßKÉV’áZþN @ , ¼n)ý]z@úZú\º[:QÚLšO p¿ÿC¤QÒ’ i{ÈáçÉñ’+00˜À‚’+-Î’†I?Hn=½Aòse5ÉoZà ÐhiˆËÜЙô=¾ˆ·hÄ-cåó·5’­@0„¸… îã˜ä— `(D`n­¸DZHÚUzV $0­ÜÓ-$±–Ö¼ƒ·”¸…ÄÓW¤ @%à¾×KI;IçJq-“ ·J‘Ö“f—0C`Imô ä x°9ÖØZû»!~Ißöi ¹ÆÜÖ­¬+HûJîÎçàcœôŒt¡´³´„äàƒ *ðƒzYÉožqü§¤%×Lß(!­%ùõ¸ZKÀAªk°¿–ö—X,X›̪½®“‘®’#3jÙoÓë#a(†€ŸKëHnÕ¿]ò}õt¿t’ôGi. ƒ " ¸¶gUééŸÒËÒOÒ‹’›¤÷“úKþÑÆ ÐV—kÇ_¥‰l¦ù÷¤ÿH 'üÌB TfÑÜb;Rr!Ѷ£ô‹ä¾ÿ®lÁ Ðsj§M¤¥û¤QÒgÒÒ_¥õ¤î@ á øÇx€ä¦ewQx]rËÆ³Ò¥Ò^’»Vƒ@©¸ÅìÉ…> ZFzDzUr­"rp—w¥qáp¬ä`Ø]HÝ‹A Túè@[IgHJîºåJ–›¤Ã¥5¥™% €@æ xìÅiR—V¦Ô5/kKGI7K®íóîÿ¤ ¤]¥¾R ƒ@¹¬«û¾sÏrëÚ7Ò>ÒtJè¤9ùYŠïGß›n‰Ã PÓè ‹K;IçKOIqwæ«4ï+JÅVúùxÿ–üÛA(×Ú}(ùÇòŠfÎ2‡Öm # ‘¼kù“Ζv–x“‡ `#°¨Îä@ß¿±&kþU ƒ@¥ lªº%.¾ã©ïÑù*Î×°\é×OrwM}IrPâ±–—H»IKK¡ šUä÷=ìíÏ‘è- P:³éP7HÉšã7ò‡Ÿ[S÷;=NºSúT#=$¹ÙwiaÉ5%ªEÀ-p#¥IR\Ћ§.ðm'a¨w?õýç8¾ãéù^–h ¬*H8¸8Hr÷è·$K®DôóÒ¿ë^ïàÃ÷®Ë_JëIZ$@¡°EDuµßå×õ-$-(Í%Ùg¹h<¨y?LüÀ™SZQrkEòÑÛŒÎûŸ×ô…¼<ÿ‘„A œ\çZbßǾŸ{K]¤ø~Žïåéåó½¼l~½÷³¹à÷‹äûØ…Ák¥% •"°¼Nt€´–ÔKràáûÕ÷¨ïËO¤O¥¤øyìgr¬Ï4ÿn^hêûƒ@¹øùº‚äò€åy?;g•’æûØ÷¦ƒhßÏ.[Ì$¹»«ïÝä½ü–}ï¾'½/9€Á„Hý^è9”µÕ¤5¤•$ÒzJ¥2×xø!ãÀãÒÒpi¼„A ”ÜÙ…µÕ%ßÓî¾×Gò[©Ì?|.Ì=+ù^¶¾–0”Š€[áü<^Sê/-"ù9] s@í€åMÉ÷î0É÷2A‰ `%#°°Žäç°ïcWêxì‡+'KePˆ8x‰ŸÃn}qy«3 õsA];±±äÚ4? Üß½Òö³NàîÕü“ŽJ_…Ú?ŸŸK«JI¾—@{Àn¥ímÐ?‚JwIÇ„A XÝe}i€´´TÉß\?Ÿ‘“î”\Y„A 5zkc¿ÁA³ŸÅ=¤JÛ(ЕœKwHP0@ Ê:ëüÛIÿ–ücãÂ~–ä9L[Eªä¯N‡Õßý¥³%ß7YºÿùÇo{ÉÿwB|.•\pÊÒ}ü–Òsœä– …Ì«‡IOKYºã´ WºŽ’æ—0@ ÂÖÕù†HîSÿSf}ú±Òzš4Ÿ„A &à;ß¾?²~ÇéóÿÿÿüˆAÀzI¾³<Ç÷mrêBÜ~ÒŒNB°§ä–wçKÞ+Yžw‹ý%3ÁjŒ€kk°Ú ÐQÉtí«k&Ü”ßj›nºé¢ž={FsÏ=wNsÍ5W4óÌ3G3Î8ãuêÔ)š4iRôÓO?E?ÿüsnêùo¿ý69rdôé§Ÿæ¦^n£MÔ~·I®é~®Ç`·Ú'àŒ‡K[JÚ˜¯´Ÿ›ãßËO=fÃ}ˆ­x £ï7ÿ8uNL»j¾´´`~¾­ixUû»•ïF‰þö‚Ð`¶¸ò{¤4Xò3ºµæ1sHd¾Ï+¾—}_Å÷°ïc«›ä{waÉ÷±ù¶üžûæé"é k,îRµ¿´¯ÔÖñH~Öú9ËAx|ïÆÏbWÚ8ÈI>‡=?äû8~Û×£.“|/lËاòÚòÀª|*ûŒ~ÄkªüèY,Ši¦™&Z`¢¥—^:§Å[,šsÎ9£ÚZΚúÌãÆ‹FŒ½öÚkÑ«¯¾šÓ7ß´ú÷ëqÕˆû'»–«o~ÞüQ:\Z£•YýBÛ?‘דšº;‰ j¥0ÿSô–V”VÏËA~kW:}.Ä],µúAû`µE ¿’ûgÉ÷sk~GßÐöäÇ$×Þ~,M’Úk.Ü-"ùþu}k.©Xs!òré,éÓbwb»š%àÀÙÏá$¿e­Xs ñŒ?‹=XÜϾR™¢e¤ø9ìÿ3ßÅÚmx³äûØiÃ2L 5Î g£.“6½råÀã8©{19œuÖY£Dýû÷–\rɨsç¶V&s¶¦Û|öÙgÑË/¿ 6,>|x4qâĦ…=~ "=^·ø‡ä\iå"óâšá¥Û%Ö\»VI뢓­*m$m)[˜sMÜ ’ÿbõE —²s¦´m‘ÙrÁÞ,¾x¸Å¡RæÖ‘µ¥­¥R1µ ˜—þŸô³„Õ9”“¤=¤éŠÌš ò·JI/H•|®¹rhYÉ÷ñVÒòR1æ Ík¥c$ZDŠ!V…m@ª½ˆSn¬mü#×⛬ºwï­¹æšÑ Aƒ¢e–Y&švÚb~cŠHA;7ùþûï£'žx"zôÑG£çŸ>×­«ˆCÞ¤mþ,(b[6© ó*™§IÛI-=oüÃæ¹[¤;¤o¥,˜ÿ©\#炜ƒ‘9¥–ìmàÆ»[Úõ5A £RéëùW©¥YÏH7Jÿ‘ÆIÕ¶¹•€m¤í¥ŠHŒ»…*9ýXíðý{°t¬äÊ•–ìUmàç°ågYVl%ÄÏa«_‰rÀé’ËS®± h©@¡¤6DR–P.]K¼nK¹íÛ·o´õÖ[G«¬²Jf‚ŽBiþî»ï¢»î`G=)@IDATº+ºýöÛ£"ºiù!áæÓS%… fßßIIÑÊ£¤››Ûˆu•%@RYÞ…Îæëà‡¼#õ‚ÿHD>pàÀ\à±è¢-6Ž:WÕü&Lˆyä‘è–[n‰Þ¿Å5.° –^ªZ‚9q[ ôÕŽ®ýõDsæ9ÿ0úGÁ?~µfË)ÁD\×\AÎ]Yܲw¾ä®Xm˜AÉtW$?››³´ò,éŸÒ8©Vl%Ô­{I›IôZ·Ÿt]3Û°*{ÜÒáÀy§’6Zë]ùãÀÙ•AµfîV¶¯´¿Ô£…Äߦõ{Kß´°«+@€¤[8Å\Z•´~¡í< |£6ŠvÞyç¨G–þ¿ %[þçž{.ºôÒK[ D\(u—ÿ¸SpËÖ% ¥ÆÏwS9Er“!sàq”ôßBԘ߹ÿ“v—ÜBRÈœß]¤Zü‘/”§zõ/¢Œ90î×L¿Ôº¿H.˜Olf»¬¯ê®:®Mn.¾Vë]Ès@‚e›ÀjJžïËù›Iæ·Zw’t©TKs¡,Í Ûr¼4»TÈ>ÓŠ¥‡ m€¿2@*ùÐY6ÓŠË¥‚ÿ,ýúõ‹ößÿh¡…Zjý/tŠìú'OžÝ{ï½Ñ•W^3¦¹„>¢•~`|ÚÜF¬«*^:» (k5“ ØŽ•\S<¹™íjuÕ2J¸»/4ÇÀÝtö”î°lp—Ž‹¥B­6\³|¼4Vª[T9O*X¦uïHKò’„e@%É•!ÇHÓHžïßHÞέõfÝ”¡¿IH…*Â\¡éÖws/aU @Rè:å´Ò™Ò¡…Nß«W¯hß}÷V_}õB›Ô߯ô½á†r]³ÜM«€¹ÉôOÒÐëqWÀ@zˆ4k$ü"¿ æ§JßئžÜTfüÿ½p3™2#¤z ÄšÉv¦W¹ÀæÀÂÝ9 ™kM’Þ(´Aø7U|ª=÷ÿónÒ–®Ètņ[? ™Çô.Õóýçݵ¶îB¹YìLŸ—o‰Véœr»@ÊM¸éñg”ëió¦«~óüéOŠöÚk¯h†Ü¢Ø8öñÇG'tRôÞ{ïÊ´k*v—®/´þЬ3þS*TÓäšRoÓ?xÊæó?ïiÒÁR¡ç쿵ÎlxÙ‚ TÙ<öÎêBÏeº0^(5‚ͬL^$¹å9d®AvAÖ V}.lß'y2·Ô¹EàºÐÊ:÷ýIùs‹O¡ ²Z÷é5 « BMtLBCʃ¥Ö åÚßñ8ñÄ£Í7ß¼d '«¾nݺEn¸aäV×_=”L߯[H®5Ú_E «³¹@zޏ€âV€í¥/¤F³Iʰÿן”üÿ>‹”¶ÅåðºÿH?¦W²\1î²q´A3¾_çëÔ(6AumúûÒzRº‚ÁAµ»jÍ$¹U«Uuꇤy $á ù} õ7óMåýz©¯´€”¶®r¸"è9éÃôJ–ËG Tp(ßÙûÈ‹*ûJK‡0¸«Õgœ‘ûzyh}£øü¦¯VX!òk†_xá…Èݳ6H¾ÞÒ½]X€Êìê ã_.¹4dŸÊéšdoã‚x#ÛÊüÕ’»c9àH› [Jî1:½’岘[gpz¥gºFþM¥O ¬¯w÷+ÊàmÒêÒ\Ì®&ßüÒÝÏâ 2»¶Òñ(v œg¢|ÇI{HcëÉõ½2ë d¬4PòoXÒܺäÿs·Úc àZ ¬ü–Ò)†J³…Nå±Ûlãq}X’Àرc£c=6zåÿí.y·ü Å*CÀîÛ%÷› ™kÙ||ZÙJ_wmßSr J=ü€:`;CšVJ›y ”^M¯`¹l\ þŸätÚ\˜>Xr EîRxäoÈþ-§×5z…CˆM¹|»ëÀ®ä •ã\™±™ô„„MM`-ºìàß–*繡øJK ôCXÚ3p´…àAi¶4ŠŽ;F'œpÁGL~¹K—.ÑYg­½öÚ¶È‚¯ÕJîãB„Jë7gó.|ܤunêo.øXFë]¸K?ü’ÏMå6wë"}%¹YÜ?¦·H.Ùìó1Ò ß‘)ÿ-»åq[©¥÷ùV:ŸKçwðþ§äçŸ×ÔAÂôùeOºIN‹[9›³³´rké§ÀF³Ê÷_i¡À:\¥'ÐU‡¼_ ãå÷ýBð!yûES3¹(v¤¦®t¸8åc±|ìýC ïË¿ªDð!._éÀ:»Î–v+°w ¸@•@/ú!©gú]»vÎ9çœhÀ—™°B¦Ÿ~ú\+ÈàÁƒ mâfÓK ­Ä_R.`˜wÈN•ÓÉ•–Ì?šéΤï/Z¿˜Ô[ê"ùÇt#épÉæmO—üÿ•ÔSZö3Í?,±ßAÁPéŸR)dé}6ÑFsKÃbK¦ÍÛºEó(¯HX:?‰USÍÑÒZÒ×Sy[ðsâAižÀ:\¥#à@öNÉÁpÚÜEÃcAnM¯`9d Ç`±—ü'X‡»t6Ô¡nü,J›Ÿ«Hï¤W°<µ´šäÊ¥´ùYþiËô –KK t—ö {´9”u}ÒüŠÝ‹/¾8ZrÉ%Ó«Xð‡÷ÜsÏèˆ#Žˆ¦6xËú‡ïŒÀ®¸JGÀþ½‡s—‹=¥¿J¿Ö·Å5Ÿvú^r!Ý- OK[K,bóúÏSŸ_9!áÿ@óçH3J͵.$÷y\Û:`(uÒv­ÇHÍ/½OrÙùq!áݤ3?ßGÓ%??°ÒðäF)Tóã7ûC…¹±<·î!ù3mÿ'Ç>i'Ë%#°†ŽäJŒd l|ðÛ5³–ªÜˆ·aú;·t¯/]÷»kÊÜtšsçʬLB?®e:UCvfåö~i±t®çœsÎ\ËG½|Ñ<¿r.o¼ñÆ‘©Ÿ~ºËÂMìHyFKÁ•M¶ÆÑ®íO×ø{>®òB ízë>É]²ü£ú°ä`>04›4œ ˆÜòrµWÈ:Jóææ~û˜œkmýc3<ïki2Ÿ6ØAzLšØø)ù|¾K¥uë‹q½¯\XxBêÚÁÏ$6~L­c±}Î×î7–6´.l¼”^ÁrÀ•òv’BÝÔ.’ß•neÂJG ¯u·äÊ”´ýGŽm¤Ðó*½-Ë¿pÅÓ.’Ží¥¤ùwÄÁžŸñ~æc%&СÄÇãp¿¸L“åÒ0ºwïžÓ@ð‘&Sü²_Óë7c]pÁ¡N•óÉ5ÈXiøáû÷‡ò`½R>•¯_?iicÉÁåHi°4T²­(Í“›û팫óËKh:"?OöÖŒï“,ð?—ßÀÝq¾ËÏwÑôCiÿürhòg9ß–v’üãßûT;™ïã’»_%Íùÿ‡ä’°öð˜%†ýlJÛ#r¸…˜à#M¦¸åÉÚlgii“Ô.3iùVÉÏã¯SëXl'?(°ÒØG‡kRhèܹs.ø˜gžd™©´'n”£ùC»îºk(»¾ŸÝlÚ+´_« ˜ãRè9qœüçµúˆ¿wÓríiÒfЂl}$·,9˜XPraÿj)6~VHÈùØÜr2g^6®–N’œ­¤‡Šÿ!p¸j­$ùœ÷I…ì­8R:Kš½ÐFEøßÓ6ëIcÛºFÎϬý|=]1”¶_åpé{k=cµ‹[CÒæóÍÒôé,·‰ÀÕÚË÷pÚž‘cSé—ô –[E`¢¶v÷h`¯æ~›ã*–@¨`Qì¾l×”Àòr›vwêÔ‰o|¤¡´syçw޶ÚÊeÉ&6‡<·Hš¬ÁÑæ÷/É<ÓvŽ'¦E.šßnÝÔöƒ´üEÞçÂ`2ˆÿ@ËgKóIéÀE®&æã¯ò¡©ƒ„’[œv#–msœGòzNSL[2×ò:ØññÛc¯jç ¥ñóÄϬí\¾Y Õ"¿ïs¬íܺxW`÷•å;9àÇÕ:GhóÍ»ÄÏëpµžÀÏÚåÒ³]ב︀W;€´^j×nZvSkr§2ž^b Wäb¥$àï§ø£…[U¾Ó~\Å8M›®ØüAùüƒØV£_’ö“H3JÛH@âZhŸÃ5«}%Û,ÒŽÒk’$l.LöJ©Éÿž7”}”û¦ò«Ú4qâ|¸›X{í`ÏÀAœ§Û¤îu¸Š#à{9ô pëÞùÅ‚­š!0Iëvâ`>¹é‘ZX?é`¾UV×Öìñ­|Jü<ÅJGàÊ­à_éß$î嘶º@ÚJ®é~nÞŸ?íÞtÓM£uÖqðŒ•š€ßˆåÎ1G¨’>:LçÛ Ôçlãù!{x ¯n½p· Éu­q ÖÆ¯HC¤ï¥›$²ã–8OK/Hþ¡--,¹¿Íÿ£%§'©µ´lóú¤¹eÁ?,k$©ùô>ÉÕéuÉå×´aœîä>m™7‡‹;ö‘/Ô}(°)®ß‡¦|^|OÚ'àÇÕ6cµÛvÒ„ÔîÓhÙ-…ÝR~[&0‹6ñ3¡CjS?v–B_jSÛ@`¤ö ýι¼|½4{ŽÉ.~8`í'à‚î}éÃ,ºè¢Ñ…^ù[Xù¼þúëÑAMšäЏ©Ì襤Ÿ¦ò²ÐNZùº´@j#,JO¦üíYœN;/$}&9@H[g9ÜÊáÂÍçé•uºÜQùzBZ1¿äkòœ l‡ë7.¸½,-‘2^Ën%}>åg±ýŽÐ!þ_à0Êw`À«0sµêàÀjó=*àÇUZnñ8)pÈ«äÛ-àÇÕJ.`í#àÛ=ÒT]$<èüì³ÏŽüÁA¬¼üV±™fš)zî9wÝŸÊâkòÈT^š#pœVnØàHùÜŰ”暼ђ „!³ßëCÁIhûzð9Šþ¯´“äîiI[E —K“Næ pám‡ÀZ’ÿðãj?§tˆ•$·X&my-Ü!}™t2_@?­¹Br­{ÒׂŸ ““NæËBÀ¬C÷ò²ò»L1¢,gm ƒ¦oîÊzɲúWiôÑ9äh®¹æJ»Y.H_~yÿÆ51œmâÅ"`N¡šµ‡ä?'´¾²øXG= pd?gŽ øq5%0§\Ç7uçZ—\³Œ•‡€+v—ܵ2i®ì¼ é`¾ —Ë.•Ì,i?ja°DD’Jùæ}/ï,IÂ=‡.‘èÚ’ÓÚEÖ›zû`m¹å–cÜÇÔœ*²t衇†º»¹K‹XË.Ö&æ•´_´°ÒÁ|Eܤ³8ðK›Dê4•¦Ë§Ë•~ë•[—èÔ”U©=Ÿë€'º¦|ñ8®Àj\y{iêš÷´/Ç'i'Ëe%ðµŽþçÀ–”ïЀW+€´V`ӳ䛪Àæñ.gݾÿþûèã?Ž<­„}õÕWÑçŸMœX¾Êceûí·egœ[„Và›B`sÍ­5eé÷äÞù}±bs3èL‹HóHY«æ4ö‘<æ ”æ7l9LšŸ7~î`… ¸‹„»©¤í29^J;Y. ótÔ·G>C>jŽ`ò.ͧV¿*-w0p¹ÛëÓóüŸ|sü¸Š$@R$¨ÀfýäûCÚ¿ÝvÛEóÎ;oÚÝîeÞØD~ËÖã? 4(zá¿4è7{ë­·¢µ×^;zâ‰'¢;î¸#<Ø-·z‡éÏ?GûÛߢÍ6Û,Ú{ï½£M6Ù$:þøã£ñãÇG÷Ýw_“ãÇç<ãŒ3"w+»ürÿ/êk7Ü;þ;ïL]6=ꨣ¢k¯½6·ÿ<ðÀÑæ›o™ËN;íù#‚wÝu×”õ¥žq>{õê:ì±!'¾)B|Þ×Ú¿OÙ¢r3î»ÿ•4\rßR_ÉÖGš·OÚÍZpwæ½ïB _<ëÂ~|3»Æk‚´\¼2?õð$'r¿>\Ø)í)•ÊÞÕN ÌÏtÚ›5¬ëhå<´z,Ñß–Hå3îÿŸƒ§õc°–(°m#ºüêžÊ¸»í#MLù«µXÌóñ9%.ôœÞ1ï_,‘xW Œ—üÒ‘ØîÐÌ?â…*Ocþþ=IÚÌZ84é`¾u@ZÇ+¹õ_“ žïٳ甂~z]{—ýÕÿQî­ZC† ‰b]uÕUÑk¬‘ @$üôÓOÑ/¿üz꩹aõÕW¼o¼¿‡#FDÿú׿¢{ï½7ºè¢‹¢§Ÿ~:ºå–[¢µÖZkÊq·Øb‹Ü·Kâóì·ß~SŽátøx~ëÔ™gž9ÕÛ§’o¢rðqÁDp@î\÷ßtàæ|Ï>û¬SrëØ±cîX;`Ü(àÇõÛGðBZwWù¹Â€hœ#m)¹6pÉûk$›ŸY.\®.õJhiÍÇæðM¥÷¥c§¦ñ¾é©7±/~zêÖ ÿ&ûa'[8|œ'"9þ1òüùÒúR©Ìˆœ´“v°œ#0¿þn`ñ7ù¾ øq•Àƒ:ô‡w7ÂÐÿ``Ó†rͤÜÈñÕò=ðWËUÌóÑ××­çÉg´çÿ%’V•b[[3Þ~ͼÃó~¾Í/gaò²á7¹¥m9º¥,G þÁ-nk¶Š ,®™-â…xºÃ;D3Ìàž#å³nݺE³Í6ÛÍ:묹“¹u­—]vYND\ØOÛ—_~™{c”ãïh,¹ä’¹Þ½{çÒ{ÆgŒ:tè0å<~«WÚ¼ï?þ˜ Z’ëâ`çÒK/͵|¸%Æ\¦›nºÜØ·¼|óMùÊ+¯¼r¡?þ5™Næ§8vÊÜï3OiÖ5þ¥¶EtÀS›9è¼ùuå§Ÿiº—tƒ”|^}­åÏúRó±m«wYø»ä¤-…'µŸ‹ƒ¤¤ÅÇ:CNÿÀÞ,9HsíØ’kß{J¥2;ÄËÏŸ%Ju’::ÎáÊK2htÖ|Ÿ\é¬âN œÑ÷íÆ£»ÜzšîÒ3Q¾3¦¥ç£“ü½”|F{~¼4LZM²õ–zH×JkI6—¯f“ñB†Ì¿'?¥Òã߈¦­ÔF,† Lvãm€kã‚HnS oýõ×oa·ö¯~øá‡£ÿüç?SôÊ+¯äÚ¥K—ÈÝŸÜÝêöÛoŽ>úèh–YfirÂõÖ[/zûí·sÝ¡ ¸%Âor+JkÍ­ |Ü ãÀ&i£GŽÆŒ­²Ê*IwnÞݰ6Ø`ƒ&þR:ÜÝ+`®uð7²k 2Ÿ¬ŠYœÏ”xêÚ¢þÍóq­ûPz^ò’ÿý?i²Û¶šÙ;¡ä ¼«ü×K·KsKqÍšf‹6üN”æKíÕSËsJ÷¤ü^<_º&àoË>IÀÏŸ¿¤|¾èÂÛnçÊ7>àÇU~ÃuŠG§q ŽýN £fü}qÊœ+^>š²”™æžq*=>ùŒÞ%¿â1Mãßœµ4?Lz@$ÙÜúán·_x!CæBÎô,_ÓÚÀ†¸¦&0íÔ‹,A`^m³]z»m·Ý6ô¦ôfí^~ôÑG£»ï¾{ŠâÄ^|ñÅ#·\Ì<óÌ‘?‚²VX!ºâŠ+¢þýûGO>ùd.hqÚ_|ñÅÐæ-úV\qÅܱÎ=׿ñ¿[ÜÂáÀÈ–Ãjù}ïöÏ9 -êê|ÍlûOX»Gpwˆ´ùf®ÓÛ•cù;tyÉ5§®»LúT:^JÚ6Zpa¬8qíj?É->–ó±«Ôû¯vòþ¥vž+¿<:?í£©ƒ£X¢Jit0·¸¤ÍÏ!?°ßì£ÉŒ)¾.MùX¬,Ó§s ¸ ¨ØokÒ+ÃÏ“¿§|YZ,ô|ŒÓ¸¢fâç³§;äW ÕÔwßX[zXzTê+Ùçgy(h•»ê抰te†[kv¯zÊj0j0ÍÕN²ÿ‰¦K&¢{÷îÑÆW¦Eùä“OŽü¶§]|ñÅ‘»dM˜0!ºä’KrÁEz;sÏ=÷”q#GŽŒkióCglÚÉrE ¸ ú’´lꬾ^Ϧ|º¸K ã·É÷vÀŸ%Wèù§Ï7¡ß’×äÿFZUr ˆ+W¾–ÞH«K>nÍÏþk¥=R‰ÛEËç¥|,¶@€V7ù‘ó[žÊ=ö#Ž©\nÁpÁþˆ#ŽÈ`jÕ8ì°Ã¢|pʾF¶Þzë\ àÁëm1»ï¾{tþùçG?üðCîcâ·ý÷¿þíÑ{õzâÅ[,§/¾¨LËêšk®™ ¶r øýïùí_lè9s˜*˜Öò’ƒ…RÛñ: kÁüƒäÀ!®K@ŽÐº¤Ø|C$“‰¦þ#y}lž?Z2ƒ×óNsJn“wWdò½Îâüm™:›GW4²íÈ|%žÃÓíjéùèõ¾ÿ¬¤m¤…û¤¡yçÃù©'Ã$?k“>û³h¾>ýS ó½ìÿýø7"µšÅ4j=ŒÒ騅åé”È‘Rdb<òÈèøCÒUónù5jTnÀº_½[nó—ÐýZßd0TîsÆÇwPôúëñopìÍ/8jÊRã͸ “Îÿ“ò­–®™Oò3j„4Aʪͫ„¹Ö—Hàn:Ç•©ó|¥å¹%ÿx7¢ P¦‡¦2îëÑSªFMê5:ï¢ÒR|ߺàÕQr‹Ü×Ò¡ÒåRÒ®ÐÂRRº`oãñÛ¥Sc‡¦ž‘”|,'ý ½#]--"­.¹@è ÞÛ¹ò¥¶…N:$uâï´<§ä<4¢­ L»e+i.Àö‘>I:™Ïš>—\´µµðHÒÁ|a®ÁŠ#à¦í©‚¿†Öµüµh3Í4S®5¢Á‡ùôèÑ£*Á‡Ï] –kÙ6 dÞµ:Y±‰JÈÒûR\ˆËJÚÒépA¡Á‡Ï{›ô“gæç’ žjë2~¿|Õ>œ”ë%,ß”ÎÖ—’î”f–î•ÒfßÒigeæTJ>vÈŽ—ÓAüÞ¡•UðÝ£s:àHZW-¬œt4Ø|èwè11ð3Ë.ÑJZè8t=³›‹*§Œ¤ø 0(½©¿ŸáWÞbÙ&0`€+H›˜kçhâm ÇìʦóŸ4צk'“ë™Ï±Jƃ¤4y>¶©WWèÜ-Õ2_WX¹À½±ä`èCi 77‡‚#ûf’f”ÜJ±Z^ËjÛqšq!Þ­OJî/ïÀ&dîötˆtšÔ3´A…}nå0‹´­™v4ÐrèÿöÖÊ-gÕ•Ai ]Ïô6,ç €+4¹±–[®‘+‹Wí-ýF®ùçŸ?Œiä\ÒÛÕãò@eÊùOšû¨}t0ŸY¡&þ&ϧ̦¾´ sa}ÅÀ! ø*å꣹åî`i É­oKWKK¶>¹¿Sÿ±ÏÿƒnáºLz8¯K4Í­+›K›H H¾î£¤BæJ*çÚ ÂþÐuiÔçð b¿j€ÿ£®ì=‡]ñÐ5{IÍfŠ@Š».îîþ¼S™ß8UËö믿F›ñÉ'Ÿ4y[V-ç+”ö×Ê?Þh¡|ó£W;wBèZ¹Ÿ¿ŸSfî¾Ó1•éOµüaÊWÉEƒ'ü@ó~QÁ|’»ê},í(¥Í¾ÇóÎU4í”—çc{_3.øXIÅØÚÈ-1Vµ-€8xïº ¯qÒ>×Â[IG Î;°ZDšGš¦Ó_l’GjCµJÚtZX3é`¾0Fü§/L£ð÷çíœ\í/|/¸ +¶²gW]uUô /D\pÁT‰ó›±–]vÙh·Ýv˽.÷ä“OÎ}ÿcÒ¤I¹Wðîµ×^‘_§ën·ÝvSíë…®]»FwÞyg´÷Þ{OõºÝÎ;羆¾Ã;D}úôi²_@ü:à” J-7ÊâÀ@FC…ÚÀf5éòboiœô™ô«TËöªï>ÈqwçÅÏ'·<å…²¼† ¹ÍÊær¬c¥g¥—¥Y$¯InÝ8EºXzWºQr!ô¯’ .+I¥¶tÀS¥“$ß;Õ´7uòQ’»Ææ~ÌËKÏÄŽ™†~†f8ïŒ.’.H¤qNÍ;hê+ùÞr«ß‰Ò4’ï{ï³­äÿƒ#¥Ó¥´]*‡ÇJù>MÚ{Zø·äÿ¥ Éš÷旅­¤ùºÞ•t0&@ H˜KÚÛ?íðëw“¯¡M¯¯æòäÉ“ƒ§·ß­¶“N:)ò7Aî¹çžèî»ïŽ{î¹Ñˆ#¦lsá…FC† ™"66cûí·Ÿâ÷÷Fü}‰=«æÀ+p½Wz­¹´‹òìn!Ió SŽB›Â>¶å/ž÷t}é¹”oŒ–¯—Òé»Y¾IRo)iÏkÁ?zÉ7‘tÓ²¿¨dóâWÒpéé ©¯dÛOŠk°üã˜L_<ï›záüº“5MÚîZðë.R¼}zz…Ö•ÚÌrhà MžSmêÍ*°«r&ÐùŸ–^¾•,úrAÌv¹t ä˜ÇôxýæÒº’÷)d¾î…,^çi<ŸÜö -¼tTiÞi ]·d5š…þ_Í0VÒ\†Œ}~®ž#m)ùwfi¤tdó¶~þöJéÏùu>ÎêùuÞ÷PioÉÁ{V-t½B×5«é¯jºh)\˜™²õK¤ËHSVe~ƈ_Áë/˜û å–[<ü5÷8@q&—’v©,´~‘¾–Z2ßW…Ì­ ¾cKÎÛ7^Z,^Y婯Oüÿ'ÅZ£YèÿÕÿ×µjóæþQ~ú™¦{I¾Öñsv‚æÓÿ rMióÿA¼~¤æŸ‘––²j¡ëº®YMUÓERþ&?róÎÿ¯w€,måúÕ´—_~y4|øðh¥•VÊiË-]q¡*‹‘þ¿×ȇŽºwwùï7s÷ªe–ùÿìœÕûÆmw ˜Ø¢þD± ìNìøabw'*v)`c+Jˆ ‚‚Š þŸïpÏ:;{î½{w÷Æî¾ïçóÜ™sâ9çμõ#ǬY³¢ý#,|™ýé§Ÿv¼¬”…6  Ü,Š­°’¶ }Y™çkd4nÔÌS>!Eì7ùûÇG„¾‚—î:a–ãVá\e$ÿ ^î×ÉÙ£ÂXï™:ú?éø”;ô@Œ_’îሂ î¶âeøSn_ꃲçÝ:Í‹|H5Ô¶huÆ‹çWë@m¾øà C$ÛkR1 VäÒÏ5q78ÌxîE§/ Èa“è¬üÏ*)ç¦:ro#­…‡„ÎÂp¡T…¼¤Bû¾Qª.•rÑÈ&™`¤¢œ¬¸âŠ®qãøs¿\pÑË.»¬ûúë¯Ý¯¿þZV–ß~ûÍ;6úù„ ¢Mäø!,:tˆÞdÅ+y+# .¸`´<‹%Z¼ ¬k×®Qú•¹¶Xq̉˜)mÅœé§R±Ä l LúH/?Ú˹vöx°Å…°Ó„«‚^8o*ð0ì$à¾XøŸÐ^HŠ8n¢÷‘ž›Ë ÿB;QÔÆ2­p¿ Ä©+^¡º¢Üš”6¿«x“El$w›„_]v®¨\1ïÃâTðú^>]¾Sî):öL¹9Ì.hïP}å]A~’ÏÂÂÃÂç†B)KÈp =gK¹E)› Ùi_&e¹å–Kz•”›}wÝuWôJ]f;xƒ3¼Ž¶uëÖ‘!ÂÛ«¼‚Q«{Û¶m[Vf6ØßáA:éd…Vp3f0à\º’¦Ý–.Ýç¥d¡úNÈKN•K”‡ð±0@àÓXè)ðÛ/…Ýtdn!)÷Ƀ‡ÕÕ±€šx Æ’+;=Ng»¤PæY„“P»U¸_¡\…Ê2Ô—'*óçÓLù¡Ä1%Ý Àyç#»ï‰†Ú3­Nx…êZê}w¨˜ï,$0ÔA8ZøH˜. º‡ ú)qF HS™Ú8– p+õ{Z¨ÝJ½Ìiè.¬7y“Ì ðG+'ìw(eiÕª•;çœs¢×ëöìÙÓñÊÌò(–[]qÅn·Ývs /¼°ûã?Ü6Ûlãºwï½!‹8|7$.Ìz¼ôÒK‘q÷ç|©¥–Š6¯û·k%ÃKÁM=²hÀ¯.{…êû[ UØ?p¶W™x0]%ø%Pó¡·p/Ž˜ü«óc†^x 23‘eSĉ?·‘;.þá÷›w¤Î¿ÕñRãè“”_1¡v«p¿*FÁ ”g¨®³j8ï^Jïž4iâÏ¬ÝÆ±pFa^ę̀yÙK' }„k¼§Žï ô»¿üˆ~ϬÞZ£«'  (tü™ì.Ð×—¦ ”á¾™”éò`Ô,S^äÿ~êBòá¿â…~¶¸wÔБ4“jÏdœºâ݇ã÷¹R¬çU*åfÉ+}¿‘ð‰ÐC@¸ßž"\.Ü Ìþ¸ÿÒgwÖ& qé/÷Ò0²e( „üBíjß*riÅ ìíP¡#•ºB•ºté·U1ËÁ²¬ø²±µÖZ+ša–cæÌ™ŽÙ_¯æÍ›»áǧe† ëI騱£:thÒ»¤ÜP©O=ª_¡?Ë/¤ ¨ª– M\©!±¤?8« GÏ É›û#)ÿUtDâi|*÷ÕF’íØe~´²ßtÇKÊbüwr…Nýƒ÷?ßž…Ú-Ô¾…-Uár Õ5ÄIuJD{%•ÀY:þŸÐ-åfiÉÁ+\x7O¹é‡;â‘’^:~-`<Ç †r¯+œ.ÄûF²p­€A>H`äø~á>™BÄÇ%-Î7Æ ^þIdÊ E‘´‘õêLÞÓ½NkLB†b}º‡êâ¤Æ¯„þRü@+áOaª—ëå¸YXY /Næ ÿN|?އ÷Ž;Jô<Ôn¡ö-Ñâ¯Xf€dç¾ÂCÎ+êÙ/-~ ¾RÒ 3 >ß}óãÉ'ŸŒŒ”xuù>âg$nºé&ÇWÞ½ð1Cä©§žrýû÷w§vZôµôÙ³g»¸óÎ;/2,žxâ‰(Þ·ß~Źûî»ÝK,}/„¯¯“îUW]å6Ùd“裆—^zidH¯’¦Ý*´o!ËT„¼¸1bpÄ…O1 5•ÿë·‹0CàAÆr•%„ %:äæÂ8{Wa ðª0LˆK£˜ƒëxbTÄå'9Úä±CÞð°½ð˜ð³p°ÀƒyCÀ็„ðbJ}ð…ò!NòÙFÿçíQ«  ô§…¸¼,÷)ÏxŸÊÿF‚BvŠàûï<£.|!,# ñ4FÎ÷*û…'þãH<^2¯ù1ÊÇñ~5} µå¬/zîø6*$ô-ö&03Çìooáyaá5!~ÿä%á~¡¯€!î»ÄA¸gºâˆ ÷Xâ<'g#ásamáÿ ÷ÿWä,áÿ„n8$×øµZ üßÚ üWN. )¡v µo!ËT+ò2${3UèHþëáÙ/­¹Ì 0Sq衇–%ÊWÍù¸àgœáöÙgŸÈŸMÖK/½tY¾÷‘é›eu‚Ñ¿–0Œ¾¨N¾[nÉ=a~=t½NnVPÜ& sdºà>ÜñsÜqiw¤Î“yáý‘)Ô¥Õ:øúÇ©O}7T×Ðÿ9ÎOMŸ3KÁ½÷dÁÉôÍë…õŒÞŽ¿N–›>èû8áé„~º_n/ÿÍ…U„Iò™°¿€’³€à¯#oÊåÝ:þ øó<øGxKØWh*ZBíjßB—«äó«L*ùJä¹€ß%Óÿþûï“^yw3»°ë®»VȇY”øñãÇGa¼b–åRȤI“Ü!C¢eZ•Qô‰ë ®g6Ã7Þ¯2ÁÐaéW6Yýõ£Y•Ã?<2`6Úh#סC‡à’¯liU7H~ë¾|< ¦ (0» £„lÒ^ŽŒEš£óþi¿($層G ºi·¤T¸_%#Ô!wè¿»jª_¼*¿ßÆ=jùy¨BíYË«™¶ø¡ÿiò¾œöâ   B÷?ü¸×zé îŸMÎ1¼/²É2Š¿ïŸÙî»_ É6Çït!› P„—ž O C„Á†J¡%Ôn¡ö-t¹J>¿Æ%_ÂâKÿO‹<”|¾¾Øb‹y¯¼Éoá…¹W” üý·-˜‘xþyþß"Ó÷~ýõ×h)3~IUùþs 6Ì5múßÂV[måü7OByÿweú3fIî¸ãލLo¾ùf´<Œ ì=zôp½{÷NaBXÆnxõI¨ïÖ‰ ¯‘pÚÉÒŒ@¦ŒlÍxˆyÙW'ü m„O…e…l7|˜-/¿ê¤¿ÀµäQÛ,Î åŸ#LञÈ×z†Œ²@4ó*"L‡'—`1bÌÀB}‘¯]3à—O¯¥S‰ÿÈ¿…fIM„ÑÙüû÷f}Ê;xXN¾‡'BFËÍ}7tÏODMëdpªp˜°‹pšÀÌÌÂp¡j·Pû²Lµ"/3@²7´o,ö2áNë¬SΫ,,'l&ç TIa_Æ 3,bÖ…ßË7ß|ã;ì0·õÖ[GË«š5kæ]4´dQïv¼øbײe\Gs‘CZ¼½j™eÊë;Œ6¹wêÔÉgWሄñÃ&w@y{ì1wï½÷FûIX"V(aF( õíFªoè *o^X†¬åM ãd|,`O{Å“‡ã(á8ázá!ô0•w´„åRNB§X9ᇓN½pŽ”P›U9¹_Õñý ^ßÕäh ü÷´ó’b d$†Ú²¤ ]Ã… ݇רá<²%ç+Z+â˜Ddü¦ ÜS‘›…øý³¯Ü7 ¯ Ü»Ik®ÒÅxIJy„,Kã…tÒZèe'¦"¬¢ã]B¡µPH µ[¨} Y¦Z‘£ˆ&Ù¨0JŽRHa)ÓàÁƒ+¼þöÕW_f)Ò½QŠ7N1«Á.Þ<å7ŒcðjÜl³"ì Yn¹åÜСCËUwΜ9ÑFtÞ,•IØaã…7ctÐAC¨ÐÚ HÔ ¡cèꛬÇ‘Êä!y?ê!¿Y‡BHx8òß\WxB8A@P@1N*£„ŽV¼½…FB\z˱AÜ£ÄÎCmjÛ+v)9ŠÊ¨móÍ%÷Äšè”ì²YóÜ“¨òäqŠá^ª7I©oÈ÷"`v‚„Åå^>á—O'?=™àÇ}9|¤€6Bk¶ÃðGøÿ!ÙBÞSœ•„M‰~ަÇüB§Cäy`,à[_#`ÔòG}ËÚÎ_6Ì`I’ü,Ñëmp…»ßsQ(FxûÕôéÓob™¯Â}ýõ×£×îò*^–:!,»š6mZFü™ ÁÐ`¦ý"ï¿ÿ~t-Ë¡xKÆ…fPüµúé§(¨{÷îÑ›°x¥.iqÝ5×\í=ÙtÓäýç6ÿÈÞò|î¹ç"ã Ãç•W^q0k®Ä-}Mº&Là^[A*´m…uË£‚1­ê­]ä*^¥ü[÷ tH”¨Ý„+f6âJ&Ë7ˆËM¿»°³ÀÄW….Bca?D|”€õ’\G3¹IŸ4É›e „ýŒŸ»…R•Ðôk}ëË´Í×*Ü´jùÌ™±{H`9ÑÇ©ãK:z¥²µÎQÌ<þÖùt¡Ÿ’›äùL*€%&þºøñ–T8ýý¼?¸yèdø5ñó»Vh Ýoê›ÂÆàH¨ï†þ×ùjúÁ%BáÅ} áJa+0/Gô%°¹À5ŸÔása{ûéžÂTa®€4¸&òx[! Ú Üw×0" ³„L2Hç ~ˆÿ^OáS!ó¨¨"ԠЗ){\P4þŠ{Øy˜Ö&Ùø,åÃÓ Ê&cÖŒ›åO7ß|sôúÚ=÷ÜÓñ f60L˜Qð‚’í߈…K³x}.K³¶Ûn;÷Î;ïDßíÀPaY3+S¦L‰.çU¾qaÿÇK/½äÈ™^§‹áÁŽæÍ›»‹.º¨Ü>˜Ðl F¯æû$7Þx£ãÛ$”›2µjÅÌmaƒÑï“‰åø»ÎÇÅÜõát¼*I½ŠUvóà«ÐÏcqòy:Y‰o&Ü'ü póæ!r•p‘Z^~ÑÉãÂÕ¸\<F û3RÀíe'  vî~þx0Ÿ%<%Ä…t@)H§@!xøÖ7£ o’¨ôrNøåÛÙP¼"Ðw7(Wk>üº°¾@œÂæÂ8çoa ðª0Lˆ q½p-ivõ©ãl‰÷œ@òþ\X[À yZØR lýúÿ„n8$Ü -´OR¨[}î·&*â?4á—OçJ¼‘p¹p[ꜾI?{_@þNO7}|´pÉeÂ¥©#q¼Ð'yGêØ_ÇÞ}Ažw„¹Â‚“ÂqB6é£K ”£{!û_w¡Ò)Y±ž£¢”¶WüWÚ%-néVRöãE`ó7›½YRThá»(Ó!¥?[yØÏÀòª\„Ù ¾À¾À Tx]o¶t˜±ñ_Ag? oÑ*¤ð-“믿>™%JJòžŒSÝ(;Éz/¿›J ²Œ´-#|+ð0ËUZꌗé¹^¨øä»˜À}žPªÂhßÏBòO´²ü¾+ÕBç©\‡)]”¨¸ —cë¸GÎ÷V„VÂÔX~Œ*OPð0¾Ö¾¥âï(p?ŠËÍrПwÎP®-NÊöòÀYE˜ \Sç‡ (‡¿¦ü/Ñq !¤8¥¢äõ°°R§,ÖwýÛ± @IDATç+êw$Ø!w±Ú†¾6G˜–(Seœè’ô?“ÄÉEø´軳„\dEn!̦ära Å}^éìœH«Ü Š™da yȽÞóPçÁ±ªg€Y€>úÈe[‚äã×ä‘åV~ÉUUÒ/»ÊåzŒ-ø¯ç.LÅ’>ø ”õ°g=ð£ÞI…í¦¨û •TUâ X®i`´TÅpÉ5ŸêÆßR $ïÝÜŸê›ñ(lIaV¡©ðW2 îõ•6£±qãƒì0†Ñ&Ù_ Þ’Ân7§QB6YFŽLDBböòK!Ù÷ñc五d3&ÙwÇɯ>öÝÐ󧣸XPÈU‰×%Õ–dÿÉ%Á™{PU„ÿÈU¹P×ÌèçÅFÊ”{qRB회cn1ÐÐX¨4:U¥¶Ò ZÄÂ0ÀÌMš%sÚ´0%*z.¡zwR©Å2)}0“jÓdœºèþJ•ú!Q1¸ö ¿|;™ÉHg8ÿ¢0Œ/ûêäpãZÂaY!›,§\Ç rsmº¼TR²U 4!#2­ÎyU’J?†3FšIé3°±Š¸X¢˜ü×?Lø™3 f€¤!&à]áÿî»ï¢™W©1ðå—_F¯*N”‹‘“úÚ€£Uwê—¥åØ$îaç%ËÀv’U¸?âÔU¯»M+;Qù±.$­å9>°§Îù¯m$4XÇ{œ€2³’NÆ(€ëâxOnfBy/"ÿ[„ÖB©È¶‚„Ú/­Nz…þ·Û×ÉšÖ½J…îÃôåê^UóS£†ùI¶N¦ZáF1nܸèõ¶¥T[6”ó–ª| ³ ìéàUº¼Ñ á˜æ[ù.NÆôy}q@FÉo^À¿>xQð3¯Òb`]‡å}\š×Ýú¤ züûï¿Ý!CBy>ò¬G~Oêʃ¯qÀß¼J‡ƒEyS~“þõÅëYUôßDeYÚ´aÂ/ŸNÚ`𘀂ò´ºÀæð±þ^P¨ØL‡’Õ]ØYxKàz®i#03²•0QðÒT'\Çr¿-Œíò^S¸F(ÌJA¨«W*}y>ÑÉ7ÞQôݹ‰zÓ/:'üŠéä¹ÐOh-0º¿šà¥£NXvtÐZ <‰åwš0[XUˆ 3tãŒí⎾˜ñÛ@ /¿(4JE˜…l›( ÷ §~æÌÀ@)5h†b–LÐÉ’ 4¨ÂÇ“q å¾çž{Ü6Ûlã_|ñèëãÌR ¿ýö›;õÔS#¿ë®».zûap@dhðqB.]º¸<ÐÝu×]e_^Ç áõ»;ì°ƒk×®]ôú]^¯û /Do#>é2ûÒ­[7wÛm·ªÊYó=ztôÝ”DÄ?å®ï <Äe99¶‹{ØyI1Àýú€@‰*Ü—qê²×$UnD ‚(N…”nÊ Cäu™ (ªÎJ™ÊJ™Q²n¸ñÖœO…G„…‰7ðk/kë„ëâðáä2ÿŽ€¢÷…@zÇ ¥"¡¾ûp©®HåøIù¢\'¥gÒ£HnöS].\,40 ½¹…ν^8IðáøÇäõ䦟~-Ä•ƒŽr)#`xgo¥ˆa ªÜ'¼&`¤(”Š„Úg¸ ÇÚ¤’ ÐaL*ÏÀ@Eý+õ1;PlÁÈàµÀ{íµW¹¢Ìœ9ÓrÊ)nÑEuW_}utôx…ðÒK/]|_ƒ‚Wåbt ̤0ƒrÌ1ÇDÆDä»$Äå[!ûï¿4»‚Q³ë®»º÷Þ{¯d–b¥™¡bÔ©¶lÚŒÚ ?3•&<$%tcMÆ1wqè¢ly°Ç…ûÑ£qzzRd»‹ ¯,‚–Yʤ‡€µ°¨°“ð£€|+Pž8–’ûPáw9XXQX#®APã×ùóÞQèüî¡sòÜ(uäað³—säè÷(ÐùÚÊgý@^¡v D«Ó^¡Ún¡¨5F<ﻉ²l-7ËÏú q™&Ç”¦ê|ž@?ç:úxcávƒ›tVñѯsßëx„𠀞z£pŠP BÙCƒ¡v,…ò–l Ò¤ò p3A`a™ ø3#PLa/F³fÍܲË.[V ¾˜~ÒI'E{5øˆ áqùüóÏݳÏþ§ƒbPì¸ãŽ‘aqúé§Gìß¿¿{衇ÜÙgŸ]f¼ðAÃ;ï¼Ó1»Ð¾}û|Ý e`©VË– bOX’6räÈPìF1ŸxØ7AJÌr‚WšÁæ,"<“ÂèiRÉLÆ©nfPRšÄ*»²Î·Çü qÊhí—ÕÈCTEþÔE_TåÂ<_sH ý7å7>à_ß¼žW…–ˆUCúž˜_1N×Q¦ÉþÔU~W üçn’B¹ãÏ1ró ~O¸&…uud0e[!|œ@œ§…!†É•ò¹€Q¿”PìûÏÈÿ-9$ODgöSil¤ÒT•EDi+'¯½öš›8qb9¿B;0@âÆù³¬Š²9üñǹW”—/¾ø"š5Á€,'ó²öÚkG³) Wìÿð‚QsÁDK½yä‘h_ ~Ì |g„[í‡I”ƒÑ™—~õÕ ð—ä(•‘¦x¹êûùš"€QѤT¸%#Ô÷Oª'ËA’rzÒÃÜg`qå2ž*xIJ3Ã9*ÖÀ@ÑΔ_±u4î;Iåæfù½-ì+` $e?yÖ±ÿÓ9DádÁ?X‘°±p‘ÐJ`vd’ÐW@(C¡ Ž"ËÙüŸ‘ßÌ€¿ye` Ø;CÑJ6ˆïã¥céÑ€â^?Ÿ:uª[rÉ%Ëå»Þzë¹k¯½ÖõîÝÛÝ{ï½Þصçž{º; ~É•O„¥X{E¼`ÌüðîS§N®oß¾ŽÍç—_~y”¶ç`©¥–r|­½˜‚1DÙˆÓÁ&óy¸;@Ä1ò+ß™‘Ì«  œ¥Ü’÷kîCŒžšÌgàÎ]å×.ào^…càheµh"»ßå~8áWŸ(ÜIY](ùÅ–Fy#Á—Ãh[á#á~¡±—=åØ$†KcÌ\/Lâƒ'ËÈÝT¸Rè$à¾XÀ`i/`´Ì0f‹);+óÐý$Ô~Å,g­È;ù@«….r!YsÍŸ¤œð¦%6aK^xa÷óÏåg&;tè-»Úo¿ýÜj«­æ.½ôR7o^åuo¾^Žø#ç¼á ƒÄÏvðutò騱côJ^â̘1#ÚCÂy±äÉ'Ÿt¿ÿÎ3®œp󻦜9®ð”…âv^TZ+÷ù£å‹Á}ˆû‘É|žÕá‹güÌ«0 4S6'²bàƒY+“ù ¼¯3ÒI9GŒüKÕ_>‘ù“rÿ-ôÖÎrîYqé#ǃ1Y:g6„‡ø†Gá;¡˜B{$å y Ozš;;f€dç(ãyÆ×8:^÷Ê^‰bIóæÍ£½¡ü5jäÎ<óÌÈx`I•6–O›6­xãU&iݺµc†ƒ íÞÁ(a#~Û¶óßJÇlÌJ+1pRÁð-9Siîʵ[qJXR¹Â¼$$9j™ŒcîÂ0€eœ&¿P»¦D¥™Ë¿*V…Á!ùí-¬RšE®ó¥:X5\!QKFÁ®Nø™sþˆ’öJìžô, ûåÕ*M~cäßW@)gù” –1¬è2+¬‹p¸€^ŠÑu° 0Z`?ÊÉ·B±„òmÈœ™“*0@C›äÎÀº„‘ãròâ‹/:>NX Yýõ##ˆåQ3qÁpèÕ«Wd$ñÂ~øa·Ï>û”›Ç“O«iÓ¦î’K.‰Œ™ÝvÛÍí²Ë.îCqm´‘ëÞ½{´ß¤M›6Éd æ~àÊŒ£X¦Ü¼BÊI,J½=…—¤å¹”üÙúG@±3‡ø?THÊ5ò¨0Å—ŒTÝTçɉz7’Û”„)p.¬<Î äó¨ü&üë»×ë"ൠýä×4à_¯!Êd­ ñì@i¸_à†Œ&Åðž áy S„Ë…Ù3/¤A¬&£›ÿŠ!Ôò$…™«—’žæ® *Íb`t˜›è’ñ0ö]Üpà  €xœ|³ÄŠ×ãqÄùÊ¢\º,ùâ5¿l:畾oÕ5j”»âŠ+ÊÅ-”cüøñѦxf¤ÂhqaˆId\Kœw¨œÜìã2WŽ&ÇûÙy`oYüå±lÕy+‡´IEN“WèÔIþ#*F7Ÿ<1p‰Ò=;öòû8ào^ó÷V Á`|Zx°'tP¶ó-•³è¦žA†ƒ ÷â(‚¯dX¬Íç,;ï¼óÒ)l=TMøçÛéõœ|ç“.}øø1]`žýwVú¡Õ·ÉŸeË&Õ`À j—ºt¼Ž« ë§ÜÑá›o¾‰^Ek#ÇqVòsÎ’+F‹yW@La ’Æ‹ Zoƒú«¯¾r]»vu 6Ls©y×ÌäÝwß}¡äý´·…˜ û}(ïıàuÎ{üYOnk cÄÔÐi ¥ó’ÀÞ¸L”£»0/îiçixC!=…Å1¶“›Ù€Ÿþæ¬yØ‹Â:Ød_Æböƒ=“j0`H5È‹]ÊÍ‚Ý1?÷î»ïºÍ6Û,zmmÜßÎk–»ï¾»ÜWÜc©›Â#£’§ã‘¶r5oWã2oœœ‰®dª­R |ûí·îÜsÏ ícbÙ ËWfW*!‹“f@’¶üP„G&5ÇúÄ3Bré9*ØÞ˜¨œ°ÿ½û'¢ó]•ÎBÁŒ9‘'i¢t1¤y&å(y¼“ô4wî ˜’;g¡+P XŸXnÍ1#óï½÷žÛa‡¯¯5©yÞ|óÍèkï”iF)La “Åk”Â{‹Æãñ‚ör™ßšÁøá[6Íšñì­»Â÷kN9å÷Ë/¿„*y´<_˜_FªÐ—å×I*02oR3 °ìªW )ößf’ì÷j+¬›¸ly¹[ O'üÍYs \§¤º’{A~güÍ« 4¬Â5vI˜ÖLÜ“ úþûïÝå—_noJSn¾<Ï«‡ÂR"¦û™*5Éxƒ?x,'ð ïù^hÀžž=öØÃyä‘n×]wu}ûöuÙ>”™©\ݺus}ôQ¦(žxâ wúé§Wð¯iÞ4Æ}bÒ¤I¡¤¹¯ô˜_VXª‚òO"&ƒo K'üÍY50èÎ \J‡>$ào^•càpEÃI Ëd 3©yX¶}| Ù ò;(ào^UdÀ *—æ²ãä_AÃ1b„»é¦›Ò\bÞUa€Mç}úô }päÎ^«JºvM#tådÖ¬Yï¼d!Ÿòàƒº‰'ºG}ÔñÏ›o¾Ù½õÖ[nàÀUÎ%ÿŸ’zhæä¯tÎ|AC©ßk¯¥í²ÜWLªÎÀ0]zIàò•äÇè<ûBLªÎK®ž’+*À8PÈïÍBÔaáe { ¿êx‹üv ø›WÕè¢KLN oÖã-?'Ì]uÌ©:w¡+ÿ'7‹™É@FR﹇L“ê2À²Œf—òœü®ø›Wî y„÷ Æ_î¹®˜:ujôÖ­%–X"Úø¾Î:ëD3 ­ZµŠbcuÖYÑë®™!a©#Bß8ûì³ÝŽ;îè¶ß~û´³&£Gv½{÷v»ì²Kôƒ3fD×Ož<ÙtÒIÑõ|°3fLäŸÏŸ{ï½7ú~N2Ø[Ǹ¯˜T tùÈ@›ÉïQ!©<¢šW€ò{YX*v¡üÈ0©Ÿêr–`&¥±<‘Ù:`î*1ÐAW=#„Öúž*ÿwª”ª]”–3@ÒRS倱º²wèêûï¿¿Z#¸¡4ë›ëäÏ8ã ÇfÝ€Œ—SÓÿÂÌ+w"WXa… WŽ7.ZšD{äCxíï—_~é:è wÛm·¹wÞy'Úï_m}Á¸Æ;><¹é¦›FFį¿þê ½ ¥b—\rI4kòÁ”+"{J0R0>®¼òJGúõëÅaÙûM®ºê*·çž{º|ž4o¼Šúy¹‚›£: 0€ÁdÙ^©™;»Kê’W„•——ßÅóª÷ë²;—. ?fñÚÂÌ«ò ¬§¨/ ¼þ8) PÜ”ô4wõ0¤ú†R`:úÌPÀ-·ÜâžþùPùea€ï«ð† 4£ÒÓuùNBpo–¤-8ìMà#—IùüóÏÓ},/5g÷&›lâîºë.×±cG÷ÆoDÆN÷îÝÆû$>þøcw衇ºe–Y&2$–[n9ÇRÇ6Ú(2.øæRK-m\Ç0‰ËàÁƒ£Íô:urË.»¬;äC"C…4y}öi§æ˜qaÿ ³(ùîÜBrøá‡;ÊgR£ °aOáÏ@ª‡È/´L+Õ¼ÄÀ‚Šï:6¾’ß>Bnë ™W9XŠùj9Ÿù”f”g”h“ÜX]—À+uRFɃ{ƒI` Ï$? \®dÑÚÎJ&Ïè*JQì4© ðŨuãƒ%o;ŸW&-‹“,{ºâŠ+ÜÉ'ŸÍÄ¯Æ ÀŸ–KÕ”°Ñ½yóæî„Nˆ’die¸ì²Ë¢å_xöêÕ+ ó?,ÛZ{íµÝwÜáxc×b‹-ú0¥#­O?ýÔí½7«%ÿŒÞ´ŸñYuÕU˵jZ˜©ÁÀ Éà<¥ó&y``„Ò<@x\HÀ-?F”û6‹*ÒŠK]7„ó† ¬öé0óªér h”å$÷,£ow† &•c £¢aH/ˆþ¾üvò3ÍȰ¾y%oÀõ­þù®/´à'ÊË?ø¶‚Ifñ>öØcÓèj–P¼—9 ­k®¹f¤ü‡^'QxÌ1Ǥ{ƒS•²åu´ƒ *»cdß}÷u /¼p´/ä…^p¯¼òJ„;ï¼3Z2…!´ôÒKGKÙÀÞ¢E‹²4ü 3#,åòײÉýúë¯wmÛ¶ ö‘x™>½fõ(þï @¤3>vß}wwÄGøì혞R²Ç¤Iúù? 4I^ß½[ŠF…“ 0¼ÌvÆ &ùae˜¯sHž —…ž0óªÈÆÚP!d||!5éÓ&ybÀ <Kö8ˆ¹ËNQ ØH›¯uôeÕâF²QnÓl8Ÿ«ªí%0òc’gÖ_}wÑEE{$’Y1«@;±Œ©&„%X<ð€;vl”ÿ‘W_}ÕµiÓ&Z>ÅÒ) Œ&MšD}ƒ™’™3gºiÓ¦E†Ä¢‹.}tüøñ>êסC÷öÛoGË­¸þ™gž‰ f;H—[b(L˜0!2Rj¢>¤Aø¿§[‚¹í¶ÛFàk*?K'#·+´ošÊŸu²‹¤ ¯¯Þk«â|W…cRæÈcá£d€¹kœ”bf™¾ ¤ÜT~÷ çÂÌë?hxL`)aRÆË£«0-`îše AÍ&g©¥a€¥nŒªu…¯²Ê*î /t-[2¸dâx饗Ü5×\ãæÎÅΨ ÊçÑL“ü1ðor#öÈ‘##C$ôMz–dí´Ûqª.(ë,¹âÕ´¼ Šï‚`|°¨uëÖ‘¡ÃloÃ"|¯½öŠ6¬c<ð ßX šý`F³)l*?ÿüó]»ví"ãa–„7_m°ÁQ\Œ,–ü±ÿæ"‹,•¥êµqÑìy§yy‚ëÒ¥K´Äõqéܹ3N»OÇI©Ùó«•ÊHHFË“މ¡Àzæ·ê;PX*PoîÅû ÏÂÌ+  0 ڦɂÜÑÂì4áõÑ›%–× G¦©ü8ùc||“&ܼk{°Õ ™Y’‚ë~¡x(L,3âƒkõ]XÃÛ’ŠoŒ—Ÿt¾»ðzÌÏNóÃ@„lØCÁžfBÂj^ÕËLDuC„eP,»biUR0026lX4{öìhƒó|÷ƒo—')|ヾÚ»Âwf¸#¤ºÂŒßˆ Éþûï-»jРâíØ c5îÇ=ù²4©þ"ÿC„§Ó„×uoþìeüïOö_­ßMñŸ—%•ƒpéÞXÁ23zïõ]6 ¡'À ¡€ýˆÃ$ÿ T|âå?Ïúž ¼ÙÔl6ß|óè-÷þûïG¯De)Mᆺ“ðušpó®Y‚Y°7‡W"§Y½¡Š%Go¼qÍ–¨–¤†qÄ~Q£FKŒÑÄÌËn»¡¿…Å 0/yð=XiÞ%”Ÿ‚ú/£›tÊæt–ÕYI}XØûDý‹}X/mܺÀ«ƒ1>˜I É‚ .}$‘ý(™Ä LìÔxÜ€J“ò‡ògƒï§iÂë’÷>ªÌí#ì!aÿÁö„P ù…‹”ë¹r~Ca‡ _dˆSׂVQ…îºd¨Øõ Ã@±×Fg )Af€äƒÕÊ¥Ét FÈé¢3r̲,Ö¡×Ua‰ o#â-F锵TÝïÕñ!¼Ž¥®Tüze4@(ßg¹îºë{vÒ Fõa‡ævØa‡rË¥Òů­þìñ¸ùæ›Ë¾Ìª{½úöíëV[mµPp9?3@ÊÑQG{eÂ}¹UšÌMf›M¾,?ªk²–*tƒ°m†Š VØþ‚ e ©HAÈôÏàà¦ü}ÿ½@çáÑÔYLu8G8Qh–¦>Ìv`xÜ–&ܼóÌ€ y&8KòŒ´]+‘.Ë4øb3K«k˲>úè£hmü×_®úøs“0È[³’¯ Ç+µs–ZQÇÁƒ§{MtY‘Û·omֽū,Rš3@ÒS8o,äG„µ²dù¹Â¯Päjƒb³¬Êy¼p¬mDë Å9\`Ôܤv1°©Šû€°j–bOU8K·Àô,qK)˜ÙJVЗ[d)Øw ï% ÍÏ‚ Ä€ ":‡lvW\d«g»†µí¼óÎnÓM7¾{-~1§L™â† âž}öY÷ã¬ZÈ*ƒQŒñYcZ„B0³â õÃ?¸Ûo¿Ý 6Ì{¥=.·ÜrÑÛ ø_=/Eá5ºo¾ù¦ã¢£G3ðYø¾ÈÑGó¬GI`Dy‘,¥ø^á7 "Ì”š´Wz¥°`–Â}£pêý|–x\Ú °âdálaÑ,Eeðo€ð€0J(Å¥vè­…ÂÁ³x™äw¢S]!pnR" ˜R" ‘(F¹±èyà-‘«àlÖ¬Yd„ ¬`Œà.¦`tð P‰Ù_ÔwuÂMòuïaÇ’` Êˆ/=_³ç;•í ̊ЗÁŠ+®è“)Ê‘ öôeޏ³ .ìÙ³§ëÖ­›cƲ:»OW‡Äš»ËEæ€J$ÉÌ-÷²‡…Ç„iB±„Ùʼ¿°j% ’v‰pµ½ÃW"A‹R ,¯R\,"4¬D‰¦(Îヂôåb¯Fè 2ì+ð†¶•„lByÎ&e‹lá…gÀl…ç<—ÙÒW8L¨”UÁ 7ÜpC·ÞzëEhÛ¶­kÚ”¼ü ëàù0Šæ‡~è²l*Od‚<0´žÁ%Ëfnµ Êwu…eY¯¾új´Q{êTfû+'lZç å¾?ç{ÿKÆ0”èËìU¢?§û€`²,!cF²wïÞ5öÂ3@’,—„{K•‚—‡Tö7lÞ% Fo ù–WQÆNBa]¡2Âh7Êæi¤Ê\`qj%¨ÔÒ]s(ýdÅeéýŒòý¼^Sy°iÐW*+üÏèÇïTö‹WxÌ)<çUÉ‘ý!Ç G Kç’#°!Œ*óúO–·°4dùå—ÏyÍ=›l'Ož}xŽÏMœ812<Ò}ˆ.K9¹1°Çã ´Ii2P#ˆ¯šß 4pà@÷Å_xïJé»ë®»®[yå•£~Œ›>ÍKrÊ!Dßõ}šò€¹sçæ’Tô•õÝwß=zADUöydÊÌ Lì= Žå¢ÛäX’¿ÿ]ámá+áka¬ð‹RÇÈÒ*Âê)´Õqsam!a–ƒ%7(¥”Ǥ~0ÐNÕä5´û Mr¬òÏŠÿºð±@ßý&udÖ$WY^¬&0;Çq=~Œ!‹ü­Èèèü·LJœ3@J¼Å[P*1:PeiÔ¨‘[vÙe#ÅY^ êñ÷ß»ßÿ=ùå€×ŒÎ˜1£Êù¥.d„í£(&¥Ï@ ñê2Ëð裺×_=Ú¸Ëõœ·Lñšj߇éÓ|ø~îû0Gf30¤y[ý¼:²ÒJ+¹½÷Þ;ú¶I¾–=šR*ص̄œ.ì%4ªF®¬¿ÇùM˜•çXØì?ñ`inK¡:ùqC¿M¸^¨Šâ¨ËLê-T‡ã…#„%«Y–ïM|ÿ:gÆ·ÉùþK^ThžòÓ¡Ê2SWÞ-ÐYQaRK0¤–4T¢˜´ÛÖë!» ¹Žè’‚ÊûÊ©ýG…ñ‚Iía oˆ§€ÍêC‡6«ç¸|Ï'Q°#†ÎV[må¶Þzk×®];× A~o¡f€¬ik"£ÖJäa¡²Ëžµ ‚ÕÍRš‡…Ç c0 x zÅB3¡Te® 6H@¯xR°~,j›ä÷éYÛØ¨åe,nŒ,]"ÕøHåÀàxL`ŠÖ¤v2w$N K¢xkûNÆŽ-n³Øb‹¹-·Ü²Ìè`V¥PbH¡˜®ñ|XF‚!Z Åö<$ °M-va,ÿ’g`1•p7åYÛ M…bË<`°@~ZøE0©Å ˜R‹/Pt4£õ…-b`Š3ߨkAYVå19ß™Zúa  H¼FÓ§O6ƒû á|{#ÓWÆã×Vçœ}~Ó;Jä{;…4:âe7$ÎF­=_S%gCøV©cË<ׄ}$ŸlÄ}-uüQGc * ,¤‹: ^¯àœåSù–sa8{âM³´Ë¤Ž0`HiÈ Õh£°öWVMWÐ1WùKŒ¾ƦŽctä&aS "¡JÑ $—ìK3fŒ?~|´q|Ò¤IÑ‘%\l*ÏUx£–ßÄά½öÚEõo¼f€ÄÙ¨3çÜ“Qâüæq\*Çbh|/|Ãç:C°Ña‘`’èäMZí¯Oø#3'¹ º:E\¯øPî„ÜoìºÈ¤v0`Híh§|”’õž!ýÆ0ޏùÓ3Òà7qÎF¯)³&õ‡’1@ÒQÎfòŸ~ú)zq‚ßh΃…0¿1£áÆîR3@J½…j´| Ëñû1#ÍÍ„ø½˜û1J÷c6÷š¥ÂÀÒ*ð}ØëÜlÿè»ô韅i‚I=d q=¬³Uy>üùq01j5,âKê&Æ@-ge ˜µ•ŸTp`b de aÖÁ0ŒcÀ0ŒcÀ0ŒbÀ "Ò’1ŒcÀ0ŒcÀ0Œì ˜’#‹a •dàCq÷Ýw_YìÑ£G;ö1¼òÊ+e~ƒ r»îºkµ?>X–`†“½öÚË}ð{«/S¦L‰êÂæw/Ÿ}ö™Ûe—]Ü7Þè½ìh Æ€1` Y0$ Al •g€××~úé§e¼ÿþûÑ+lãFÀÇì6Ø`ƒ¼ÄBœtÒI®uëÖeå©ÎÉ¿ÿòÒ¡ÿ„zôéÓÇaäüñÿØ™1` Æ€1` ddÀ6¡g¤Çc 0,}¯£aÆd=öp#GŽ,K†ïz0¬ÆÁ[oñgçÎ<óLׯ_¿hÆ‚ï}lºé¦îì³ÏvM›6uGuTôŠÜ7Þx#z»a'Ÿ|rôV«La>ú¨[vÙe£W÷>ñÄÑù!C\³fÍ"ã¡C‡Ñ›²n»í¶èˆ7v]ºtq_~ù¥»úê«ËÊœ<Á ¢l‡vXd€øpf|n¾ùf7mÚ´ÈÈ:ýôÓ£ÙfJ.¸à‚(oç¢Ì}ûö¾1⯵£1` Æ€1P_°úÒÒVOc  `€Ìž=;Røûí7÷Í7߸=z¸_~ùÅñ•ó™3gFam´‘ãCƒ(þ 4p»ï¾»0`€›0a‚»ôÒKÝ%—\&~æ„eOC‡u'œp‚;÷Üs#ÃæöÛoj”)Œúè#·úê«»%—\Ò­³Î:‘ÑÀò,Ü^ùnÙ²¥»øâ‹]ûöíF < ;ßé`–â×_-+0ûK6Ûl³(î‘Gé^}õÕJ…ùH¤Ç’,>6¸ï¾û:öt ¤sàF3.¤¿ß~ûùK‚Çë®».Jcذanܸqeq0bÖXc שS§h¦…ò2»Ã+‚[µjU6 ÄlжÛn[%he…³cÀ0Œc „°%X%ÔVc .0€¡±È"‹¸7Þ8ªÆÅ‡~)æœ{aÆÄ ÆËwÜáX¢µØb‹¹9sæø è¸Ê*«”¹9g¦eÖ,¾iåÊ-eJ†ù‹H#Ⴤ,óB¦NM‘C?P™äˆ#ŽˆŒ”c=6š­¹õÖ[K·&OžÕ{ï½÷.w9˱¶ß~{7|øðhv£ÄϾ”‹hcÀ0Œc ž0`3 õ¤¡­šÆ@¡À¨`Ïû?¼±Á7·ÛµkWV”…æC¹ó…¥W t,‹jÑ¢…ŠŽ,ÙòòóÏ?G›ÛZh¡¬aþ–z…dñÅw?þøcY†D&Ùj«­¢¼Ù³2~üx÷ÀDÑ™µÙrË-£=¼õëÅ_t×_}4ÛÓµk×È8aÖ¤yóæÑŒH¦<,Ì0ŒcÀ¨Ë ˜R—[×êf f@Ø{"ÏÒ+¤mÛ¶Ñþ‹1cÆ”%É¢1S@¼E]Ô½ûrÿ÷ß—E{衇܌3¢t~øáhv…îH¦°²ÒœtìØÑ=þøã‘‚AñØc¥‰YÞ› ô½zõŠö®°i ío¿ýv´ï¥I“&î™gž‰ ʸÌ2ËD†×M7Ýä0FLŒcÀ0ŒúÌ€-ÁªÏ­ou7òÀÊ6³+¬°Bô+²`‰¯èe“93!ámY̰¹œë1d®½öZ·ÓN;EÑ™í`Ó7¯Ãe‰«™ÂByÅý=ôÐhcú¥ƒAòí·ßÆ£¤=ïÞ½{´ÁœÙ›»ï¾ÛõìÙ3ÚgÂÔ='ÞHÚn»íÜ{ï½ç¶Ùf›´éY€1` Æ€1P¯I¨5·:Æ@eø—½ …öuÌ›7ϱ,Š=ìñ`?o–âíUìï˜;wnîË”)ÌÇÉt|ýõ×£ââ÷|Äýüy¦0'td? ¯ËåÛ$@ìÓ¸âŠ+BQ+å‡7>xå.F†ßþ01ŒcÀ0ê;6²Vß{€ÕßÈÌ@Ag@Ò£€ÍëqÅÞÇÍæãd;òæ-6ÈóZ`–`ù·ee»®2á̈°±žec¤‹Ø H.lY\cÀ0ŒÚ€ µ¥¥¬œÆ@q( ¤8U/~®f€¿ ¬Æ€1` 5Ï€½«æ9µcÀ0ŒcÀ0Œc f€¤!ƼcÀ0ŒcÀ0Œc æ0¤æ9µcÀ0ŒcÀ0Œc ¶$ 1æm ÿè×îÅë ÿ*k(*ÿ–³1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ€1` Æ@ýc ª¼²p·°•ÐT01ŒcÀ¨; ü¥ªŒ&Öj•LMìZ2Ma1Œg ìy„2HØ¶Ä lÅ3ŒcÀ¨ƒuy×ê%aW°gh€ó2Œc ƒ1@æ6ó‘% 2Œc 0ÀÈS³:PR«‚=CK­E¬<Æ€1Pê ü…òo©—ÒÊg Æ€1P# pÏ7©YìZ³|ZjÆ€1PhXêhU4ŒcÀ0ŒcÀ0Œa q¨Çy›Ÿ1` Æ@-a sç夤u²˜6ÓT'›Õ*e Ud ÂL±Í€T‘I»Ì0ŒcÀ0ŒcÀ0rgÀ Ü9³+ŒcÀ0ŒcÀ0Œc Š ˜REâì2cÀ0ŒcÀ0ŒcÀÈ3@rçÌ®0ŒcÀ0ŒcÀ0Œ*2`H‰³ËŒcÀ0ŒcÀ0Œc wÌÉ3»Â0ŒcÀ0ŒcÀ0ªÈ€ U$Î.3ŒcÀ0ŒcÀ0ŒÜ0$wÎì cÀ0ŒcÀ0ŒcÀ¨"f€T‘8»Ì0ŒcÀ0ŒcÀ0rgÀ Ü9³+ŒcÀ0ŒcÀ0Œc Š ˜REâì2cÀ0ŒcÀ0ŒcÀÈ3@rçÌ®0ŒcÀ0ŒcÀ0Œ*2`H‰³ËŒcÀ0ŒcÀ0Œc wÌÉ3»Â0ŒcÀ0ŒcÀ0ªÈ€ U$.ÓesçÎusæÌÉÅÂŒ´ üþûïîŸþInÆ€1` Ôsšªþ Ôs¬úÆ@­f Æ ×^{ÍuîÜÙ 8°ÒļýöÛ o¼ñ†ëÑ£GÖk§OŸåsÜqÇUˆ;räÈ(즛nª–Íã‰'žp§Ÿ~zÆhü±Ûc=‚qyä·Ûn»¹k¯½6ž/ϽöÚË}ðÁ“ôÑGÝ”)S¢87Üpƒ»îºë2ƯlàYgñM»'ñÎ;ï¸#<²œÿèî¼óN÷矺|´ã5×\ãn¾ùæ`ñ«[ïx_ fP OŒŽ“O>Ùíºë®î­·ÞªFJ…¹4Ý%Óÿ#]ɦNêøïÔ¤0@{wïÞÝpÀaW•úd«Ç?þµsÈÐ|úé§Ýe—]–- ¯¿ ,¬ªÏÞÌ‚xù]'zG'(¿³ä¹¥Â§¦‰ÓGþ? ·¦ ÏæÝKá á.ùŸ–ûUîû…õd”0Oh‰#& ê|†0)æW™Ómé»43ñæ’rÞ+Ë_¥$§ª0­«P ‘º¦wàºä—«²—ü?’ÍÙ«­®xI@ÉzGØY¨ŠT·ÍCyÒWùÏ„tþ£åoè¢|û5®é ^~ùeײeK÷ÒK/¹}÷Ý·RÉ£Ôýý÷ß®C‡Qüÿý7ëuþÁýé§ŸºÉ“'»æÍ›—]óÊ+¯”çzB9*#éÊøÌ3ϸSN9Åm»í¶•I¦ÆâœtÒI®uëÖÓÃYc5ÜŠ+®èvÜqÇ*)c¡ 0@˜õAŽ=öX·Ë.»Déã^tÑE\¡b$Í›7Ï}õÕWîòË/Úìÿþïÿˆæj²ééÚ§ºõNöÕ¨ð5ô3vìØˆ‡çž{Î-¸ ϲҖtÿ••W^Ùõé“Û3äᇎŒ…šªõm·Ýæ>ùä×·o_Ǭҥ—^ê–\rɨæšGºþ”k:&Lp¯¾úª2dˆûí·ßÊ]ÎÀÉ»ï¾Ý;7ÝtÓraæ0b ì¥óéÂ&ÂZÂçB6ÙIxÞ¿œŠØ Ûy o¤´+“º8(LG U±Œè:¯$œ¥sBÝRia˜‘ö¡kÊo5ÿ'\%l/ ÄQ‡…Ë/ŒJ.&Ìò•; F™½ð ÝvÛmçöÙgŸ²Ùmü¸ÞzëE×z¿™3gFeXwÝu½W4ÊŽ’ŒbÌè{|vãåÅôàƒvcÆpß™/Ô‡ëvÞyçhÿ½÷øÏ¤—cŽ9&ša¸ýöÛJ$£ûéòe–‡ÙžÃ;Ì=ÿ|ù¶G¾çž{ÜÞ{ïíöÛo?׿ÿ(Ó{ï½×xâ‰eÊ>JüW\…a\ ÄÍž=Û{î¹n‡vˆêËL érÈ!î×_”0FXÉÛ²Ó6=öXÄ <ÄgFŒ] w̘0ãoG2_l±ÅÜÒK/¡Q£Fn¡…*s7mÚ4*Ÿ÷[~ùåÝ–[né6ÜpC7zôè(ŒŸÊ´cYd ü2¢‘»ûî»»‹.ºÈÍšõß}âĉî裎ڕvùöÛo£Ë©÷›o¾gjß×_ÝÁËöÛoµ=F³6ñ¾šŽëx99O¶u(ßÏ>û,j7 ´#Ž8"jËP<Ò»ñÆ£þuÎ9ç8.3bô…믿>š•‹ÿ—àïÖ[oúýþ˜‘BhêN›“þŒ ê¹ÈÐO÷_‰"¤~~øá÷ÐCE.þ ôåN8!âòøãw?ÿüsÉ,C2_/ЯÖBÒWžýò¥œ¤ŠÛDþ O M…Ý„Oò~GØH@¨e£oö¿…É ™#÷§Â „Áœ4~ FÄÚk¯²·oßÞ1âåûï¿wýE{ÌÜüñ‡ëÒ¥K¤Œ®¿þúe£Ÿ<Ô›5k)¼k­µ–»å–[üeŽ)Œ(z:thT†e—¥OÌ "”(v–cÜqÇÎ+çwžCi¾êª«Üž{îYæÏ•(E7vW_}µcDe %> ä/¾øâ‘²·ñÆG†X(_FS'MšÌú ŒÇ%îÎ<óL‡ÂöÔSOEJåCùðÁK݆ )J\ëùDiBÙÆX ¼pè*Jø ,-CÁ¡^äZ®cÔåcdܸq‘ ´ÜaT2SoÇx¹+sNÝQÎPáÈKeÚÑÇåÈòxAQe„û믿ŽÚÐÇÁÞ|óÍ£¶Ã8:ãŒ3¢ÙêýË/Ü+Ó·/|Ð/0”èK-µTÔ’}5×¾ CmêWô N 6Œ¼%–X"mÿðet¿Aƒ‘ñJzòÿ5jT¤¸£XÇÿK´1ƆÊ4íñÀ8Œ0>®¼òÊhæåÉô_‰"¤~èpˆ`Ñ_1ä˜ÀHf–0.«¬²JTwú§¯;ÿþ˾| V`Ì ¤M¿æÿAº”£å’K.q묳ŽÃPG0ÔXˆ`\a¡à‡®>ÿüóè?Wµï}Äór¾`´]|ñÅŽ™*f91¸·`”ðÿÀâG_déךk®Ýk¶Ùf›è¿Î@ÀJ+­Ýg0L’Ò±cÇ(Œv21Ò0@F¹{(…ž:¢0"-„e¢³ù?œ¯ <* PŽQ,½l£”¼³„“…u„¤¬.ŒŽ^Â})P†=„7…¾ò¸@~(‚W— ^ ByBÚN¸9æ¯Ó¨lsuÜVx^àæðßÃ[Ž„œ/÷tá6a°.ß [C¸K@yM¨ª¬¬ {¤1/•È‹:6üÃ{ywBgÏ ({[ (©¯KÜ‘ÆÎ­JÏV‚ªrŒp°Ð[8Q8N mx@Y…ÿ¯4]§óÙí»@Ûp¾¹€üoþ¡Ü/áäq‚p ÐY8Gh Ä9ýZnÚ Ž·0îÞ…ÍÚŠþÀõ§ ”‡~€â–®NÜP¾·f ¡þ)o·œ@?Gè¯G Géúuòÿ°°âvBü/"”~„:þ)ŒèSÛ ô^ÂWåøK@: ¤;G@V”m < ¦/ ´¡—F:Ç „£…•þK€¼|»Açï (UðF› ßS.¸&¤ao' ån\“¡4£$#,Ab->Нåµêª«FK‚x¸c„0BñÁH+GÌyêà…IDATF¸yا”iFÂQjQ>PLÑõ£ëŒ„3«rÅß8Œf£|µjÕÊ}óÍ7ÑÚóVX! C AAEbíwÿþýÝ"‹,)d(DÌ´nÝ:XÊB™q¥>éòíÔ‰¾©;¿f7ößÿ i½ð ‘¡àóaV‚Q^”-¸`´š%:(ß-Z´(w=Æ#óÓ¦Ms(Q,;aæ‘%rIa&¦]»vPQDቺø=9äÍÈpU‡Öæctm±ÅeÆL¶vLæIûaLb Ì zê©‘ÂŒ›ºør£¨Ò/Q²½dj_”÷ÕW_=šù!>†Ù‹/¾ñÆò5ßW™á qíóˆ}[§Ë›Y;ÚE4]<úB¢ gŠÇH{ºÿý‰¾·ÕV<ãôt‘±Ša3xðàhÁ÷QŒjŒ`þ éþ+Q~ȃÿ$¹߇ä/Áøâ‰BOݽ÷f›m9ÙGD_¦ú>÷ ŒCfC˜½àÿ̲& „ÿ-B½0R¹1›Bÿ£o{¡Mf'˜±äÿBy¨3÷þw’d$wß}w”/÷úù“³xüLjK;2‚qrÐAEý~C&Æ@5@á|Mø^xZ¸]ØAxAH'ŒŒŽxÞ¼œ­“á)œ¥cká3!)§Éƒë¦ g}„/„%Ü5…MSGþXo (B½0¨Ö°öÊÞê7 Ë_…;…ý„n×…d°<ÿÞ¨Oº|QÈ‘«”î\e}]0#uÑb:ŽŽM¹9ÌÈËÂpŽBÒCžÔéôTà‘:Òn{“ ´^ÂÂ[–iß/x9L'·¾îÑ9ý²½ÐF/¼.ü.ÌHë/áEÁ?ø×Ôùke¦’Bš— (ºåhÍÿñœž-çû‚çú|–¸~ €áðÆI3ö£l”k¬®N«( …úBãù‘È™ñç…O!Ô¯“ÿ‡m7ÿÏ*ìáxaž€Á° p©€ 0ÿ~®Â£Â ·¼·¼Ðw‘¡B¿èl¾Á÷ƒÎ; 9 …»”Eþ?S…Ã…„ÿ È‘Â!å™+¬$4.h߯m_²BkDx?>ZÖÁR¶Œ*²”eë­·Î)F¬QœèŒ¦ô¤¢€"Ãè$Ê“7@PP<0>¼¬¶Új‘r’N>^0ˆ¸Ö+I½zõòAÑ‘\o” H82åë£&g>¼?y3K¼xCn¹å–‹ f ’‚¢‡¢ˆrJ0Ã’É€ó×{% 7œÀ9Fëù½°Ï†Q÷ª#¾~Ô—¼|~ð„dkÇdž\G[y¡MŸ^•î¿:÷mMÿg¿¤+7î/ç{~™†B¿A|ÌXÆ…åvÌ`HóŸ /Ðâÿ  N à…<Ø@üÒNŒS¸#Ž ø¼‰ç`0”˜ 9üðãû3*~¿ñLŒ*0ÀÍ÷`…æçÔõ éØKx!åÎå0.¥pþŸ)æ™:õ7N”Ä_çÝ<$Pš¾"0%(Œ[ ”•´'^>Ö JZ›”‡W¨}8éñŽ ÇLùúˆû“ÔñˆÔ5¿é8Zø7åö‡:AÑ<]àq­N(+õö‚bH[ “ÌùCH>:FgÿýÀ×e)xß±:! ýñ‚—›S'´ò9N8SøŸ@yN’BzŸÆ<‡¦ÎéÈðè×9’› ß§ÜþÐ\'‰ƒ…5òM'éê4AÄûß—éIø‹¹×yº~‹–‘ ‹y©ÈôùxúÞŸ`ò¡}0V.HëÍöã$%k§Žñþ0S~Ôî©çÒÂö²~ôÖýÂË\’r'mþž0]¸MxU(ii\S¥cD¥(®¨ùeÞ‰É ˜ñräªä¢Ø2rɈ'#¨~ä“41JXB~lˆFEÑ`™ £¡É0âÎh%{9¼RÈ'þìÉ&™òõ×¢ …å¦sçÎQ0 ±W¼˜¡¼,1c ?£þqAQb KN˜…bIJ¶MÁ!ΩËI¼ ¸1º[Á€òJnºë3µcòÊÆò/þœ6E0.½`ˆÁ!{U¼dj_úm|Ÿ J'ohbP\ráÚ·u¦|½ñD™â1Â_™ôåµ+éó_€/ìo¢_Ó÷XzƲ,îèñéþ+>tÇteHßûó?õÂrAŒ öUV¨Óÿþ÷¿èÅ^p`¹h\tàEýàyÒÏüXÁ¨`I&ËÁà¥]lp÷åb³'ðžŒ&òb)36Ìô™Ud “®k!ì) À"  (,Üœ ^ðkàã?¿ªxñG]@Àz÷7ʉB͘ZnÌ¿  *‚Rõ·°”0W@Ú ø¯Š#‹dÊ×_:ßäxüMñ½âîÒ‘  NÖžPCBY“~8ò*8€C 9dá¿\ä-¹9N§ÏwF3 ðÚTàÆ¸ˆ€!‚œ,¼ý÷ÃÍŒ:¡¨®+\,<"ø¾£ÓHhÃåRç¶h;qH<§?èœY’xJÐ'Û (å÷û pÒFøJ)¤ªSwùÓ·ãâûMÜ/t^•~]þCyÅý®—c'¡£ða,àZƒ¤´Œy4Ò9œû 'êO[Ý.Ðwh—µ/'}þÿü¸?,.ÐW ôÏABÉJüfUåB¢àóVÖó€õ`¹v ä̆ À¢Ô£¼yAAñï—Ë‘>FK|ü(»¿¾uëÖÑò#–C`D?† #œ(ò,© ¥Ó¿A‹ëcs7KCXwÎzôx¹}¡c¦|Cñã~ÌZ°N^)kÒá• â¼iŠeEl^÷3=þz ÖÂ#,Áb&%g”iÒ¬ŒÀË–E¦}üüÊ\[•8™Ú1™e£mè[(,Ãc”Û ”™%4ô7öŠÐK¦öÅP‚Wf¸îþûï6/3Úï«™¸öù$™òÇ­éxñ´9§Ž?þxÔ®ô+^YÍ}7}1ãA¿§¢HÓÒýW’iWÅ ¯~ À¹üŸ™-AÉg™{†rYÂÄ "K8YBEÀ¿­-TFò§­ù¿°jøðáe37Ì&±{ܵiÓ&º¯ 0 º†>ƒ‘‚ÃK6Ø#„!ÉL%×ûÿa(oó3*Á@/ÅyIxA@±× (­Ó…mÑÕ„½/(eK 5-Ÿ)Á ÂåJ(ÊøåüD˜$\,ÖV8X@Æ„*0Â’;B@¬ŒdÊ·2×W7 õÃÂÂ3‚WþuZAࢋ€‚Š.PßWpHÎPD1ö^âBÛ#·‰Ð_Ø]øT íϸ¾«ÐO MhwâÓö<ßV¸æ)ø „¸ ‘ãDkP’éc!]‘òì(.íw”p£°¼€’ñš€œ0ÿP¶¿2¡lS‡tuzQaÛÛ ”´WjJ(CüÿGç ™øÏ”÷* ¤Œüç0¶J!Ä›‚"ÙE¿[Ôï8ÿæH™-ü Ы ' ´ m»™@Üs…Mâ¾,ÿÂ~üßJZ2‘S邳oƒ;kúã‚ÌÈ #€ìàA2Àr©ø>ÖN³Y–uÝUöœ0*Œb¿Q”ÙÞTÃr ”,–J0³ÁÆZ”{öY°ÎÜ/u"Ìoâ¦Ì|Ÿ5ó~Y S&É”¯¿.]Œ´cPñ­^]Ëh*Š#¯lP¥$Òf&¥4H¼¯fâ:ŠûñdÊåº2ñbÉf¬G<^òœ=?¾ÑßP¦ysõc“ºãæ¿Êl}0Ý%™6n_dþ¡0–HRú-}áÞAÿ§cˆøý„…ÒÀ!ŒÿíÆ=‡zxdz¡ýšYâÒÞ,wôË}~,¤ï1«È`÷ö¾ÑÏØ#Â=C…Aúý‡¾Ä½}IIñéÆýs1²â×Ùyf…åæ¡D-QüžîZŒœ¿! Ì h!£”Õ·qHPžA6Éð¿„ý…­…߄˛„¹ÂÂnÂ,a´0V@ë!Pöß…¡Âå§B¶|%c¾„W& â…„k+# =êÁTdøöœ§¼¢üŸ) ¨+õ#²Û(Žï O(’q¹PŽ_„©ÂdÓ‘n€žÂÁiß)œ!L¾¸æg~AþŸ , ”)YÞsä7C@™#Ð÷ HœÓ×å¾D&PnÊp¼ð–ðÀüWaA2Ü* C 7ʘ®Nô]ÂèÛÔéda’’xùãå Åõ~´ÇîÂÛ)úfˆÒË&ÄAùm$¼'À…Gy¥X1[_¿ÿéü±x¨3aŸ× ÃøÜX8[@Nˆ‡ÿwÂËÂP!)¤”8ɰ¼ºÑ¢+ˆ‘¿|Kþ¿½³Ç•°@t $~ ZÎ@踡¤£ åT¯æH\ž@0Ÿô,YNìÝÍÆN´ûdmÖŽgì/NvÆvÞc–1w{Ø©édö§gª”´Ý"í)ÏË©Çö¥ŽAËnn§<Ɖb68mï(Ë[߱ɌvÚ+ß:·V†#È*[Z=â/$­ýãjöÉO³Úi{]^‡6Ç09züU+‚ì$µëK}Æl¾u+ÕÉ?—²®ÙÍus¼öy¹~¶Á#m;JeÌÖ³ê5w¯¶î•TÿÜOwVþø™ÜH[¡ÎÕ[«ÏêöXÙ`;ÁPɤV—|‚~V;raüÏÄÈ’{8×µä8má,êòÌWÖ%0ù õ[qÆ z u®]‘ÝUž†vœi£RžGŽïß² ¾Sy©3Ô²;cn³¬ûaùY$‚ˆ¹ëõÃiÿ yés$ò“<ŒÆNs)è&ph õyXÑ‚Àš<ŽÊÕN¸ËgÌ¡k›KÞ—GQ€®Ô¯ü<Žk}zeO"ê:– Œ?Ez)os|í&C3ÕûH\3‚ŹñÙ ׆ 2ò¹Ç¸ÿ˜Ø›LúGƒ‡ ?Â[ü§Î9S©¬å¨·ê¥ú­Ï¥õ­4ô°™ë$PcƘYa^@g%‹Ùá=IZ•™kŽ5/b'áý‚ë|&²Úõ¡þ¡à£U?Ù­}Öì–ç¯}^®?½K’çqL ^³ÛºWJ=ç~ßâyAÀzª”Áõ?l[S$0Îý÷öJSÌàÖ‡·&­zµ:yþ¹õs]= °~4 äe¯â¼‘XQÈågþ¥8>ÆQ§~KGR‰#{Œ0æÊàƒzy_9ĵöü =Çô {kHÞæ5ôÒAÿ˜,8E¨SÔ'Ë{Ÿ6œ$CW@Nj™'ï‚[›Ø‡°%%wèwÑÀÁËÔ¬Àñ®‰²oü¶,Õ‚ µ[ÏJï ¥??¼¶þ-ô¹2Œúdf/,oµ2¬ÓêN€™ÿ7‘¾F:´ ѽ1l€ˆ·‘¾ ìãë°Eàöm Í­MMž“ [_íK@è@À¤Ôy•“Ö8Ídž•¹Àu˜<'Ù¨H@€$  H@BÀdfH@€$  H@0qH@€$  H@À C­! H@€$  HÀÄ1  H@€$  #`2 µ†$  H@€$ Ç€$  H@€$0Œ€È0Ô’€$  H@€ @€$  H@À0 ÃPkH€$  H@0q H@€$  H@À C­! H@€$  HÀÄ1  H@€$  #p/,ýfMC€$°%žùʺü ]—§Ú$ + à È\d»( H@€$ ½ ¹ÝKcl‡$  t#à³¾Z¹öáªV Hàr Ü€Ü\nÿì™$  ÜðYßg(ȵWµJ@—Kàæ?‹17ØxA…<IEND®B`‚tpm2-pkcs11-1.9.1/docs/illustrations/pkcs11_api_classification.png0000644000175100017510000157440714535673717020613 ‰PNG  IHDR>Ðå7R (iCCPICC ProfileH‰•—XSÉ€ç–TZ )¡7QŠté5‚€TÁFH %†„ bGX *¬èªˆm-€,*bWÁÞP”u±`CåM@W¿÷Þ÷Î÷ͽΜ9sιs'wP‹æˆÅY¨:Ù¢\ILhkbR2‹ô`@ ¨=`ÏáJÅþÑÑÊÐýŸòî@ä÷«ör_?÷ÿWÑàñ¥\hÈ©<)7òapW®X’ ¡êÍfäŠ!a”@K„l.çt%»Ë9UÉ ›¸˜@È)iŽ$Uy\¬ÌÊ\BJÅYœ™ÿg9þ·dgɆæ0ƒ&„ÅÈs–×-sz¸œiÏ‹R#£ kB¾&ä)ìåÜ%…ÅÚàJaÍ”Æã…C6€l*ÊŠŒÔû¤ CØaíÑ8a.;N9åI¦Ç úGóùÒàØ!æHsÉmJd™ñþƒ>7 øì!Ÿ ‚¸Deœh[ž0!²*ä{ÒÌØðA›ç‚ÀÈ!‰,F3|æH“„Ä(m0óléP^˜§@ÈŽäˆ\A\˜r,6•ËQĦ 9ƒ/1'¬Ì +ä‹âãÇÊŹ1ƒöÛÅYуöX#?+T®7…Ü*͋ۛ ›2_ˆs£ã”±áZœqÑÊp[A`l©`:ÈÂÖžºøKÙ8@ÒØj†F$*zDð À_ø@:<.@ÑËyPÿeX«¼Úƒ4EožbD&肜 ÂAü-SŒ Ï–ž@ð§Ù¹0Ö,Øä}?éXjC:b01ˆF !Úàú¸î…GÀ«lN¸;î1×7{B¡ðˆpÐA¸=MX(ù!r:`Œ!ƒÙ¥~Ÿn ½ºà¸7ô}ãL\ØãcàLþ¸/œÛj¿U6œñ·Zú¢8PPŠÅbýcª¶ª.Ã^ä•ú¾ʸR‡«8ÜócßÕïá?Zb‹±CØ9ì$vkÄê ;Õc-Ø19¯'е14[Œ"žLèGøÓ|œÁ9åU“:Ô8t;|ì¹üü\ùË8]UÈÆd'r9™,"’+È»ÉÇÉWÈOÉýuŠÅ“EáQfR–Q¶S(—)”~ªÕŠêM£fPP×R÷QÏPïQߨ¨¨˜ªx¨LPªÌWY«r@å¼ÊC•4Mš--6™&£-¥í¤5ÑnÓÞÐétKº=™žK_J¯¦Ÿ¢? Pe¨ŽRe«òTç©VªÖª^Q}©FQ³PóW›ªV V¡vHí²Z:EÝR=P£>W½Rý¨úMõ> ††£F”F¶F™Æn Ï4Iš–šÁš<Í"Ímš§430†#Áe,dlgœatjµ¬´ØZZ¥Z{µZµzµ5µÇh'hçkWjÓî`bLK&›™Å\Æ<ȼÁü¤c¨ã¯Ã×Y¢³OçŠÎ{ݺ~º|ÝÝýº×u?é±ô‚õ2õVèÕéÝ×Çõmõ'èÏÐߤF¿g„Ö¯Ü%#ޏc€ØÄÌ2ØfÐbÐghdj(6\gxʰLjiäg”a´Êè¸Q·1ÃØÇXh¼Êø„ñs–6ËŸ•ÅZË:Íê510 3‘™l5i5é7µ27-4Ýozߌjæn–f¶Ê¬Ù¬×ÜØ|¼ùlóó; w Å‹sï-­,-YÖY>³Òµb[XÕXݳ¦[ûZçXWY_³!Ú¸ÛdÚl´i³Em]l¶•¶—íP;W;¡ÝF»ö‘„‘#E#«FÞ´§ÙûÛçÙר?Å1ªpTݨ—£ÍG'^1úÜè¯.YÛî:j:Žs,tlp|ídëÄuªtºæLwqžç\ïüjŒÝþ˜Mcn¹0\Æ»,rivùâêæ*qÝçÚífî–â¶Áí¦»–{´{™ûy‚G€Çx}ðƒÓôšÞP—ÐY¡Ma„°ð°a7Ù†l.»šÝ;ÎmÜœq§Ãiá±áëÃEØFH"Æ£ãÇ_9þ^¤E¤(². D±£VFݶŠÎ‰þcqBô„Ê ]1Ž1³cÎÅ2b§ÅîŽ}·,în¼u¼,¾9A-arBuÂûÄ ÄòÄŽ‰£'Ιx)I?I˜TŸLJNHÞ‘Ü7)xÒêI“]&O¾1ÅjJþ” Sõ§fM=6MmgÚ¡BJbÊî”Ïœ(N§/•º!µ—È]Ã}Áóã­âuó½ùåü§iÞiåiÏÒ½ÓW¦w |‚a p½ðUFXÆæŒ÷™Q™;3²³ög“³S²Š4E™¢ÓÓ¦çOoÛ‰‹Å9ž9«sz%á’RD:EZŸ«?²[dÖ²_dó|ò*ó>ÌH˜q(_#_”ß2Óvæ’™O B ~›…ÏâÎjžm2{Áì‡süçl‹ÌMÛ<Ïl^ѼÎù¡ów- .È\ðg¡CayáÛ…‰ Š ‹æ=þ%ô—šbÕbIñÍE^‹6/Æ ·.q^²nÉ×^ÉÅR‡ÒŠÒÏeܲ‹¿:þºö×¥iK[—¹.Û´œ¸\´üÆ ß»Ê5Ê Ê¯¿²vkUɪ·«§­¾P1¦bóêÙšŽµkë×™¯[¾îózÁúë••û7lX²áýFÞÆ+›ü6íÛl¸¹tó§-Â-·¶†n­­²¬ªØFÜ–·­k{Âös¿¹ÿV½CGéŽ/;E;;vÅì:]íV]½Û`÷²´FVÓ½gòž¶½A{ë÷ÙïÛºŸ¹¿ô8 ;ðü÷”ßo ?Ø|ÈýоÇ7a)©EjgÖöÖ ê:ê“êÛŽ;ÚÜàÕpäQìl4i¬<¦}lÙqêñ¢ã' Nô5‰›zN¦Ÿ|Ü<­ù§®žpºõLø™ógCΞ:çîÄyïóºû˜ûøÅé“ÏE]ô®Š§ÆO«Ÿ9=kìén{>éyç ñ‹þžâ¿4þÚðÒúåá¿ýþnéØÛùJòjàuÙ½7;ߎyÛÜÝ÷à]ö»þ÷%ô>ìúèþñܧÄOOûg|&}^ûÅæKÃ×ð¯÷²Ä Gñ)€Á†¦¥ðz'ô$øíÐu’òl¦DyžTøO¬<¿)Ä€~ÄÏ ~£l‚Í2 ÞåŸàq~uvnƒ"MsvRú¢Á áÃÀÀCH |‘ ôoø²{€¦å™P.ò3è]9µÜT?Ê¿, pBô‘Q% pHYs%%IR$ðiTXtXML:com.adobe.xmp 1488 1598 1 «3@IDATxì¼åÕÿŸÄ×D£1l¨Ä®Qìb bïÆ®‰B°$h”ׂ4€{¬ØkTÄÞ°`ÁJT+jÔ{â_cÊþŸïóæt#ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€t2|t™K©‰ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€Èð¡{@D@D@D@D@D@D@D@D@D@D@D Ëá£Ë\JMDD@D@D@D@D@D@D@D@D@D@D@†Ý" " " " " " " " " " " ]†€ ]æRj"" " " " " " " " " " " 2|èè2døè2—RáC÷€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@—! ÃG—¹”šˆˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ ºD@D@D@D@D@D@D@D@D@D@D@º >ºÌ¥ÔDD@D@D@D@D@D@D@D@D@D@D@døÐ= " " " " " " " " " " "ÐeÈðÑe.¥&"" " " " " " " " " " " Çî.C@†.s)5>tˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€t2|t™K©‰ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€Èð¡{@D@D@D@D@D@D@D@D@D@D@D Ëá£Ë\JMDD@D@D@D@D@D@D@D@D@D@D@†Ý" " " " " " " " " " " ]†€ ]æRj"" " " " " " " " " " " 2|èè2døè2—Rø!ö&0eÊ7jÔ(÷â‹/º~ýú¹—_~Ù-±Änçwßÿþ÷Û{¹íÿ¿ÿ÷ÿܧŸ~ÎõêÕ+·L½Ÿxâ wûí·»¹çž;ÌñG?úQ½M©žˆ€ˆ€ˆ€ˆ€ˆ@+|«ä¥åUTD@D@D@D@D@j&ðÚk¯¹å–[®jùUW]Õ=ýôÓî»ßýnÕ²­-ðïÿ;Tùö·[:¼Ÿ~úénذaáü[o½åeüèÛ·¯›6mZêˆ#ÜÈ‘#ãg툀ˆ€ˆ€ˆ€ˆ€´–¿üÛ¯/µ," " " " "Ð\xá…5=@‚‘`Ž9æpýë_J誫®r³Í6[ø{ûí·[´=×\sµ8ÖÖï¿ÿ~™ÑƒöÖXc¶6«ú" " " " " 5á£FP*&" " " " "P;qãÆ¹ƒ:¨¬ÂäÉ“çö÷Å_¸Ã?¼¬Ìb‹-Vö¹­mH©e<Ï=÷\,vÁ„ùn·Ývñ˜vD@D@D@D@D@Ú—€ íËW­‹€ˆ€ˆ€ˆ€ˆ@·#ðÏþÓí¾ûîqÞ„±ÂرæškÆcì×ãŒ3Îpï½÷^<þç?ÿÙMŸ>=~nëÎ÷¾÷½ØÄì³Ï÷ÛsçÝwßÍï°Ãq_;" " " " " C@ÉÍ;†³znCàì³Ï.›ëÔ©SË>g?àåqÀ¸K.¹$œ:ÿüóÝÅ_œ->c@yöÙgÝ3Ï<ã–]vY÷ÙgŸ¹þýû»\°¬üßÿþw÷¯ýË=ðÀñøŒ3Ü<óÌ’ë[ߊÇóvè# 2ß|ó…-¡²&NœÂqõèÑ£E¿Ô¡O’š›7„²]²9FH¬~íµ×º™3g†â$Aßk¯½Â¼¬¾¶" " " " " ­' äæ­g¦" " " " " Pþ§ þÇÜm°Á¥ÿ{øã?v -´PH.þÃþÐ=úè£ÿ=ùŸ½)S¦¸µÖZ«ÅqÌ;.DêfI“–g+¼úê«Ñ¸@ É•&7OëS¾(AûFmÇŠa¤wïÞÙîÂçlró#Ž8Ây晹e9øÑGŹÒ \ u•‹EE@D@D@D@D@ê!ðÉ'Ÿ”U«ÅèA M0>ä=È’5z`ì0Á;à ”jRKBó´L‘у~{ì1‡ñ¤š¬¸âбHß¾}ËŒÌ# ™ †‰ˆ€ˆ€ˆ€ˆ€ˆ@ë ÈðÑzfª!" " " " "P@à›o¾‰gzõê÷Û²óù矗å Á{‚Rÿꫯʌ ’¦S†²&wÞyg8VouŒ2ÿþ÷¿Cxz˜ ><ì2ߢ>wÛm·PδiÓ¬ª#á;óàï믿vi»• .±툀ˆ€ˆ€ˆ€ˆ€´  -耈€ˆ€ˆ€ˆ€ˆ@½0D˜ôë×Ïv˶$/¿å–[\êU‘ÀûcàÀñÐ>ûì÷/¸à7dÈø™äå ÈÃa99ðú°Wf¡Âꫯ^†+6Rà áE~¼R,Oýbá<•úL“¾¿ð îG?úQìý»ßýnh7Ë]wÝå¶Ûn»XF;" " " " " Õ ÈðQ‘Jˆ€ˆ€ˆ€ˆ€ˆ€ÔHàŽ;îˆ%IÞ'÷ÝwŸ5jTÞ©x cFÂ_Ý}÷Ýá8á R£G,ìw&L˜CaÝtÓM¹åþñ¤UjÞ¿ñÆ£Ñ#­´êª«–yo¤çl?íóý÷ß·Ã!—Ijôˆ'üãßl³Í¡W^yE†ŽöE@D@D@D@D 2|ÔIED@D@D@D@D@j#°å–[ºaÆU,\ä ’Wɼ88Ç>Y™sÎ9Ý9眧^'ñ`vÖ_ý6ÔίZdÀ¡ôk¬+‘CäÈ#ŒŸµ#" " " " "P€ Õ©„ˆ€ˆ€ˆ€ˆ€ˆ@æŸþXòÅ_Œûé ÏñäÈŠ…ŽJÿõ¯M?ºí·ß¾ìsG|H½6ÚÒß“O>«c *B]™1´óÚŠ€ˆ€ˆ€ˆ€ˆ€´$ ÃGK&:"" " " " "Ðo¿ývÌ}QKsµ„Ž¢Ì_þò—Âæð éß¿áùYyâ“O>‰ÝÿûßûÙ4DØ~ðƒìi}¨B@†*€tZD@D@D@D@D v={ö,+üðûM7Ý´ìXÞ<;¦M›–w*Ãè1uêÔø¹³íl½õÖqÈãÇÏÍCB>ø –;à€â¾vD@D@D@D@D@j#ðíÚŠ©”ˆ€ˆ€ˆ€ˆ€ˆ€T'@¸ªTYO’î¼°VÙ–vß}÷ì¡ðyÑEÇ1Œµ5}útGˆ(þ>þøãX§YwN?ýô¡yæ™…çtBD@D@D@D@D :>ª3R V8ûì³ËJ/µÔR… qÄîî»ï.«c¾ýío»^½zÙG7f̘¸Ÿîl´ÑF!ù9¡®Š’›Ï>ûìi•ß_rÉ%cŸ„›2eJül;x¾\rÉ%öÑ <8îkGD@D@D@D@D 62|ÔÆI¥D@D@D@D@D@j$ð½ï}Ï]pÁ±4J~ x9°O ¼2®ºê*‡‡H5‡ûï¿?¶uÐA¹‘#G†Ü!¤=ÚÀà`$áÏ$5‚`¡ü?ÿùO;Ý¡[Æ™rYk­µÜ¸qã‚QèßÿþwÛ\sÍÇ´çž{ºï~÷»ñ³vD@D@D@D@D@j# ÃGmœTJD@D@D@D@D † âN;í´²Æ s½{÷vóÌ3[h¡…Ü AƒâyŒ&LˆŸÓe—]Ö1"5j”›m¶Ù‚ÁƒöRyå•WÒe‰Î1°P~æÌ™ee:ò\Rà !¾0 1Ÿt.óÎ;¯»îºë:rhêKD@D@D@D@º >ºÌ¥ÔDD@D@D@º V«Oœ8Ñ 8Ð-½ôÒn›m¶q}úôq„ú9ùä“Ý[o½U1¬PgæD Ë.»Ì‘7bµÕVs}ûö ó>öØcÃjùÎ<7<ø{ÿý÷;ó4ÊÆ~ä‘Gº>úÈ‘”¼’` á¾0`@a1¼<Š #Tâþÿúë¯[xH¬±Æ-úÿÎw¾ûÁ;%Ozôè‘w¸ìXš´oŽ<ùÁ~Ðâ0sM 9Ùxz<ÿüóîwÞ ÷„ÝÙ­ÕÆs¯½öÚ,óf±±üå/ ãþãÿh‡‚wãc>éñX@;" " " " "Ð`ßòÉK nS͉€ˆ€ˆ€ˆ€´Ñ£G‡0?ÿûß«ö@þŒ¬&ï RËÜY%Â8]QßæN˜#Vü#ÌáóÏ?ï ÃnÕ1Z½üòË1$ÕsÌá–[n9·à‚ ¶ª £àÿÃþàhÏrgT Åwæ_ÿú—Ãèñ?ÿó?­î³=*0¦É“'»¿ýíonóÍ7ou„̓„bxÓ ¯¾úªÃCfVóÁˆõ›ßü&xõ̘1ÃõìÙ3ÜÏóÏ?ðÐYb‰%‚dVŒO}Š€ˆ€ˆ€ˆ€tÍñ‹¿ûðÖLE@D@D@D n«¬²Š{饗bnƒj ­¹æšî†np»ì²KÓ(z«¹èü{ìán¹å–²Õ쬤ÇHðî»ïF&äy \ЬTþÍ¡Òñ"oJu:Û9<+¸'!(ö[«Ü¯fiĸZÛcÚ`ƒ êöЛIó‚´v ,Ï}l4¬¯³\*Ýáþn$Gµ%" " " "Ðv2|´¡Zv'€âŸÕÓx˜<òÈ#Aij«×YmMòfB±2ç‡?ü¡[wÝu;­çÆžñãÇG%êñÇï;ì°¨ìEÁzß}÷¹­·ÞÚÐO‚ÎæØlá N8á„8ítOxMà­UIðùÑ~ŠàEÁýƒ1ðwÍ&x1¾9çœ3xƒ4Ûø4®G@¡®ºÞ5ÕŒD@D@D@ºB7‘¿àË/¿ 3ÃãꫯŽ+«³Ó%ÐÊ+¯ìˆûo‚'D^®;ßÌÛ¡C‡º1cƸo¾ùÆqÆîW¿úUW”3á¡§cB…ÎòÊÆ®m÷"€‘. I×ÙŒvvµøŽžwÞyîˆ#Žpßÿþ÷Ý‹/¾ ¯v^[è(òøè(ÒêGD@D@D@ê$°ï¾û:ò# ¬ð¾âŠ+ ”ÁÃã¹çžs«¯¾z4~à5a^xƒë€ü([I6Œ÷I‰<'È™P-< Æ”{î¹ÇÍ=÷ÜÁ(AV©Ï>ûì¡ô¹´Ï–ðT´æ±Çs_|ñ…[`‚qg‘EiÑï³Ï>½=œkô ¯ùæ›/x¸Þ«’0Ú|æ™gB¸¤Ï>ûÌõïß¿j® ’ŽßqÇ!Y7í^ˆó•rT´¦aP“ë£(,y[ÆŽ§·öÚk»vØ!·<óä!°AH0=qâÄp?‘¼»–y‡Šú§C àÙ•BjéÜžxUØw·Q÷ÀôéÓÝã?†ñÕW_…ïùzë­Wñ9”sÞýŽ/[>ýÌ|˜Wö{Aý?þ8x|ñ\áûÓ§OŸà]ÒZ~iÚèüE‰ˆ€ˆ€ˆ€ˆ@“ðF’÷Ô(ùŸáÏ+®K^)ZÓh½£ä•衞7˜”hË+âKóÌ3O8¶å–[–¶ÝvÛ’•Û·~Ö_ýP>¯#úß}÷ÝsëQÿè£.ù0¼W˜—7h”µÃŸH:·_úöŠÓ’ϙТÎ?þñ’ÓSX†Yim˜{Æ‘Æeçó¶#FŒÈV)ùpI±ŽÏy÷³õ½7Q‹º:бÒëÏõñ†ÉV À'9×—kmÒÖ{àÆoŒífï>ó½à^7ñFÕ’÷Ê uøŽ¿óÎ;á”÷Æ Ç¼£ä ³á˜7R”®¼òÊŠí[ŸÞàQ:å”S¬›°å9Á3Ìʤۼòe•õAD@D@D@D Ëø¶ÿ(hRwÝuWXÅÌððö ”“­æ®6dòX¢aóæHëãî»ïŽÞé¹'Ÿ|ÒyIô°s^A¼¼B4·åFívÚi'ÇÊpÆaã&Áu†Ëʰ¥ß‹/¾8ΙcŒÃêº oÆ‘'$оþúëÜÌËÁÊ7έµÖZö1lY%n‚wÄB -VÛ1¶xtL›6-b i=öíÛ7ž¯·Ž5€çL*¯½öZWzŒ1¤2jÔ¨cH^/·Üriñ²}¼n.¼ð²cú0k Øý^Ï(¾óïÄjm¹ðòðÎØ;ÙûŽïE%§²ÊþóÂ# ÁëÌiÂ~µ¨gÏ2ÊÖŽPZ<Ãò¯¶ãŽ;ΑI"" " " "Ð= ÈðÑ=¯»f-" " "ÐIXø†KÈ«l¨—JÓ@Ùmá^+E¨™TÈùB‘0WœóK~‚QÐU&—_~y™b»í¶‹¹F(óòË/#uo½õÖ¨œD!Ih”›Eò /„~)Cx-BoÀ€á¹Žx™`…ßB]y/’pŠ1ŠoÒ¤IVT[nD@†nt±5UÎGà“O>‰ NŒ (÷j3$•G‰á`à 7ŒFrtà`Æ’›ñ…±<ñÄјAnŒVX!zcàåqóÍ7‡Üôyâ‰':ò*·{êâÁÂ1ÎX® 3®Ô`Ò¯_?w衇¶0ú\uÕUAŠgœ7Þ8xzä1ÚgŸ}â8|X 7räÈhb%9†ŒÔøAÞdüøñ±Þµ×^ë|X°ø¹—÷ºð¡³âgŒ"H=ub#™ÔA>úh7EñpI›m¶Y¦…ÿ~„)mÀ æ´e‚òº^Eºµ¡m㬲Ê*nñÅ/üëÝ»·{ã7ZÝakîž&>|•í†í²Ë.ëø™`¸¨GxÎàá´Øb‹Å¿E]Ôñ¬1!·ÇE]äVZi¥ðüûðÃgç1ÞòÝíÙ³g(Žä§?ý©³ºß5׌E@D@D@:Â6™BEªxoë4P’=k Áø‘†Ôb5rûí·Ç±Ü{ï½!Uv [mµUHTŽr°Uy+ÁY‘m†•´>†óPI³òræÌ™îç?ÿynòtÊ ¨Ý~ûíChL0„Ž Á¸1dÈ;U¶0aBü|ÓM7…ý4¼f±‚xŸœ¯Œ H=uBÅœ0<™Üyç¶[¶Åø‘JžƒÐdylñb‘tNiH«ZfÐÚ{cß ¼<ò$ýŽå¯÷ØÿøGÇ÷ Á±×^{…?>ó,ä9„ð á9”½¯yFâAÆó CÏ¡{+Þ‹Ä'XƨÖÞ=7ß|óàIÕðÁä4Èw¸oß¾ñ EŒ-©ðüá9„àÍñÀ„¿´ŒöE@D@D@D@D2|è>&&°À DÊö¼\Eÿä’KÊ“•«÷8Æ”JÊxBÍ´ÆØ’7Œ cÆŒq(a y³ôÒKçö‰’”<;î¸cÈYB[ï¼óN^“CEº<[ˆ>û÷ïcàAiLòö“O>9#¬Æ r.¬p]H=u¬=ÛæyËØ¹ì° á$› þJß­öžý“|<+àð:#äaØÌ0—-×ÚÏxorÈ!îøC¨JÂrr˜TcÀyžC•„\)ÕÚ©T_çD@D@D@D@:'>:çuÓ¨E@D@D@º M7Ý4æ´@Yÿúë¯;rpTS䡸<ÿüóƒÁT_|qÈ=Áªj“JÞ$o¿ývôîÈ+÷òË/‡04mñÚ°qTÚ’_c×_~æ2bĈ\…¬µ‘æ»À€‘Í1‚Ñ#»ŠÜêVÚbÀa>$ÈC@ˆ­aÆÅjx…¤ùê©ó;\cÆ‹rÙ®GÑuŸ4iR¬Jrh‰´…À5×\SVûÚ<šìÄСCÝ AƒìcÝ[ŒŠ„öÂs !wÇ}÷ÝÂë…ÿ`™1cFLl^PL‡E@D@D@D@º)%7ï¦^Óèðd 6¿åõ éoj¼(šÅa‡V÷~Ýu×mXsÏ=7Fì˜mS£‰yìºë®ÎÂ^Mœ81&:·:¶%Äù ȃÁJî¶È /=äÆ T•%1?ðÀƒ7GÖ cùÈ-ðõ×_[wq[OX9³“z¦ØjøL‘p 1Œ˜´·1ÊúѶëHï§É“'·0z0ó[n¹¥Íø¾â)e¼LN:é¤àU’×8ÏžCžCy‚¡t£6rË,³ŒÃ@#è~døè~×\3èd.½ôR7×\sÅQ¯²Ê*Ž$ÀEB2à4ÌÕ•W^YVßê¡H'Q1±òSI "„n2£Ë€¢÷É!Cœ%O뢈|ôÑGƒçIˆ³iÙZöÍèBYŒÃ‡Ï56X[$eÏ ^AL0 ä ŠR¼Dø³¹B %ðÝwßk$ÊK_O¼ñp “4ü–cKˆ ÖËða4*o1t¡ —´$ðÁă|²B²s¾m•?üÐaÌE0j`4Lïçlû„qã9„`Tå9”;9Î3硇r?þ¸›9s¦{øá‡9,èfdøèf\Óè|zöìéŽ9ægJv óÏ?X%ýÔSO#ÊyV`Sö€ˆž[n¹eX!—÷›l²‰»öÚkc(©c=6„o2O†‹.º(MVZi¥`@°pKŒP3xP l=z´£?3#5ØÔCž9“»cÎ9ç ÕñDY{íµCBc<_èÅìøñヷ“ûï¿ßv]ºÐA¹‘#GF…)ì0˜‚# Hjx`5:eM0>m¼ñÆö1$‚æC=ub#™}öÙ'¡or‰0o˜“÷„y¤sNû޵ӂÀ3Ï<ã0 ¶Gñu„X3Ùl³ÍBBqî9î=î¹å–[ÎN‡í{ï½×j#'†LžW©pOŸ~úé-þxZŽgÆXËëAxhzÁuÜqÇ…\?|æùÃsH"" " " "Ðý(ÇG÷»æš±ˆ€ˆ€ˆ@'$pôÑGeß~ûíÄÄ·¸øySÂqóÍ7,Œaf,ÔLÚÎ.»ìâúöíCMqî÷¿ÿ}PVZÝW\1­÷/†3’Äuì0g¼G0ì`è`¥þ[lQ±% Ë.»l,Ã>ÇFޱµýXè?;¯¼òJ<´ï¾û–±ÁðP$\pA8UO¢ð[ð#Jzã¹ òäÎ;ït„F“T'`¹Xl[½Fû–(ºþíÛkqë„©Ã@hB‚ðJ²á††ç9ˆò$o~YO ÂØah;§ó"oW< ó„çÞm·Ýæ0ÀJD@D@D@D@º'où¬¥î9uÍZD@D@D`V œ á•È]Á aozf…Vaš?“*ŸÓq¢øG9"Úm§ç;Óþ_ÿú×¾%"Æ~–±š}úD%~%žŒáÅ_ õµÄK„1 Ðä:±¢c‰À[«ä¬Ô/¬¸_ØrŸ x™ñ¡R}Α£€12n¸-¹ä’…÷œµEÂówÞyÇ‘ÿ€üô»Á„P;V&»­§N¶ô3\+ä³Ï> 9©gKZVûÅøÎí±ÇáûB¸6I1î9Œ‰|Wøž,¸à‚e…¹ÇùÞa˜(z^•UhО/|‡y}úé§a f ƒU‹Á'ox²aPÁ³ŒwL-ÏÏ8 ·Ùð]yýT:fíeÇ`ÇÕO¥1蜈€ˆ€ˆ€t2|t…«¨9ˆ€ˆ€ˆ@'"@âm’×¢8®$x j)U<¡ø!¯Ê)”[(Ý;khòaŒôŠEâO<á'Õ(…bjø8þøãC>"#SѸªO¯s@9Yž©Z[:/íA@†ö Ú±mb à}€!£+FɶÏâÓN;Íýæ7¿ ï•çž{®E˜,žmôÇŸI£ÇaíñÌ'¼¡î;Þ¨ùÚøµ®J@¡®ºê•Õ¼D@D@D  l³Í6î¿øE £FŒ¬bÏ=÷tûï¿YÙTÙÔ„Ó«yH¬4'ojôÀ@Àjê”Â=ÿüó1wÍÌ‚]å:ÍB„êZD  {ΰµdçUªTd,ÔãY·Î:ë&goÑP:ªŸ:†¦*" " " "Дþ/cSMƒè*Pö?þøãÑ€Qb‰¸ì„v:t¨3fŒûæ›oÜV[mŒxDt!¯‰yzXŽ4W Š5æLL}<@ÈÅ`$"ìIêR +–â#¶_O[Eu˜×["" …Þä—â¯5B¿©S§¶¦J]e;ªŸº§J" " " "Єdøh‹¢!‰€ˆ€ˆ@W#@x«¯¾ú*LkË-·t‡vXÅDÒgu–ÃÛÃBëZsDè–øý$¯&ûÜsÏr…TË“Aî‹{î¹'$®¦!OöÞ{喝Rˆ<5¨G?ŒcÅj«­’܆Ágþ!!9ÆdðàÁ… Úçw^·ë®»ºk®¹ÆýãÿÈ´òß.Pº‘ì»wïÞ!ÿ ·Yd‘²8ôVƒÕÊxѼûî»îå—_v§žzj0~Ô2ßÖ0bŽð˜m¶Ù ¯5!¼Æç·Æk¸í¶Û.°´ñÚ–y²ª›-l¸&ƒ{ì±`Z`Ü&›lÒ"ñ²Õ×VD ûà}ÃssÎ9ç Ï>?ùä“î7Þù;V^yå॑gHÆ ŒP!·Æûï¿öù‡çïÄrLU{ÞÑÏ* Úä·âù¼îºë¶È!­ðO^?<yUž™Æ#-K}¼-ï»ï¾ðlå¹Ý§OŸB>i]í‹€ˆ€ˆ€ˆ@Sð?t$" " " "Ðn¼B¥ä%ÿƒ(üùpN%oX¨Úß)§œRZf™eJóÍ7_iÆŒ¡õ¼çGhÇ+ðKÞ¢¬áÇ—|¢îØ—õi[¯ôjÑ·WŽ•¼¡ ä`¹õ¼¡¦äCQ•õÃƲûî»—ü*áÜzG}tÉ+¸ZÔKûªÆâ©§ž* 8°ä%¯0k1vŸ|·ä .¹ýÃéÍ7ßlQ§žù¶¶Nz‡W–qÈÞv}l›ÇîœsÎ)Í1Ça®S¦L)y…cî¼7Úh£²¾ôAòŒ;6Ü?Ë/¿|Þië¼1!\CžÝ>´^±ç]0jÔ¨’÷¬Ë}Vð yýõ×c=ï‰ËÚ¹Ï>û,·®7"”x!Ö_zÌåYÇØìÙ–Ýú†%ÚЊ‡­µW4¯´o¤(]yå•…í§ýÁƒ÷j*Þ€Sâ—–³ý¼òi]í‹€ˆ€ˆ€ˆ@³PŽÿËN"" " "Ð~ÒpJ„«ò†Œ\O„ì¼ò;xmxÅ“óÊɪuˆÉî•:1Œ}™g€µ½ôÒK;o,(KÎÊVV{e}(†GD:FVÁöë×/®ð¥e)ƒg‰yoX¶=z´Ûi§¢§‹Çs…•·H/Ÿ$7;+Ç–~½RËÝyçn±Å‹õ8wÛm·9<;Èbœ­mV%3·™3g–…³ªg¾õÔ±1ÁÓÆÄ1V\;ßBxqŒ2éÊkØ­½öÚeÌñH±v*å=ã<ï$žÓ&x¢Z ï·Z%í‡ÜX¯¾újMU©—&o÷–à±Â;.OàwÜqǹ=öØ#ï´Ž‰€ˆ€ˆ€ˆ@Óá£é/‘(" " ›À<¿üå/ C;µe–RÂ#<â>ýôÓ¢„°"[o½u¹D©ÒœPI(üJ•l# ‰ÖÙ’hܘ ¸"D åÂ1¥BF¡<ãü­·Þ•K(”ÒÜ&Ô=öØcc>3ÂA 4È=üðÃ5…,!¬‰÷q’# 4Ž3®ÔØ€âÍŒ õÌ·ž:ÌËL*)ÙsÞ’Û{—æ æð(2,Ñæ /¼Σüã›xÏÛÕVD ›ðž Á(þõ×_‡çïžÓ¦M³-¶¸©Gh@ òòÙóŽwá£ì3oÞ!¼oxNs|—]v M’ëþûï·ækÚZ»Þ Îñ¼ã}EûéÇR™}öÙÝ€Â!Þ¼ÇLá¼7¡®0¸#< å8iÒ$+ª­ˆ€ˆ€ˆ€t2|tšK¥Š€ˆ€ˆ@ç'®Úoäl0˜ï î(:Pz¡¸I=&î½÷Þ ÐI2]tQÙJ\Œä w‚¥ùFHÀŽÂ ÁH²Â +Do¼øðâ8ôÐC[ä½ § J)ó6Á›ã¦›nŠù/¬>[r¦Ø|IîùDc Œ1$,±ÄqLŒ™±×3ßzê¤cM÷'Nœ8r ¾\n&°¡?c¾ãŽ;¶ð˜±²p÷!dÂuÆ[„kl‚b±h·•ÑVD ë §ÅùçŸï0ó.ÀÈŒÁ5Uìç0R2Ô³gÏž;$B¯$¼&OžŠ`@Ǩ۳gÏX…çÞe—]>cø¸þúëã¹Öî06rKñ޳¿E]4¼«¬-8ðŽ[i¥•»àÃ? žŽœÇƒAÆÆ‡ä§?ý©»á†Bu𓈀ˆ€ˆ€ˆ@g# ÃGg»b¯ˆ€ˆ€ˆ@n£ÔGP¦£”JÃ&Y᫯¾:|\÷`¸HÃ~à1ð¶_!kmQ$å´7…µ{ûí·GcDVqo}mµÕVŽdÛ„Á“õZ@‰DªŸÿüç…IЩG­à9b†ÆÇgÚDaµÿþûçzÑ0N3¾Ø˜ë™o=uŒCvKØ”hJ5_ZãÊI“<JKSDZ9¶«®ºjúQû" ÝœÏÏýöÛ¯ŒF‹uÖY§ìXk>˜·E¥:ô±óÎ;» &„P…+®¸bYqžãhMÒðWv¬-[Þ[x×!2öÚk¯ðÇg -¼ž£¼Ç²ïLÆÏ;‘qñîá}”¾Ceý#" " " MN òR•&¼†'" " "й DÇÐ^‚‚«(.{ß¾}£BÕ·Pì B2‹\(zöÙg·ï¾ûc‡…»²1?øàƒÑðÃER툀ˆ€ˆ€äH=ð¨È[ÁŸWc _YmJèª"ƒÆÓO?ä´A¨(”My’&:·œ;v¬Ûu×]cH%=çw^ø£<=ðN0E=qÐm¬‚Mã¤çõ[Ë1Æ¿«|È+’îžz꩎0VÄ’Gvß}÷°êÖB\Y»{î¹§íVÝÖ3ßzêä ¥Š>Øá™SÉp±ýöÛ‡UÒ•0|˜¡ÇÚ5c“”pFD[<©â>ï|{ã9EØÃÖ<£Û:ÞùM0ÜchI…g0ï1„÷+áù“ˆ€ˆ€ˆ€ˆ@W# PW]íŠj>" " "Ðd~üãGc±ÖM‘_m˜¬Beåÿf›mŒ$\͓Գ"ë‘–G!d’†Á›# IÉñ$Èz! ¬_yå•Ýïÿûhð°vØ¢ÄïÕ«Wáá—LÉO?§œrJXaûÚk¯å¶G›Ìo’ðZH'’Œg ”Å0S©r†`8²1Ô3ßzê0¶TòÆžžO÷Ó¤æŒ[Ž”ŽöE@šï«K/½´ÌèÁslþùçw›l²‰;á„b¸©FÍïC9Äñ®@È#òÆo´x§eûãWéÂ9 õ˜­«Ï" " " "ÐÌäñÑÌWGc.@`‘E)S\¿ôÒKnÝu×­ªŒÁóÁŒn)Çæ›o•ú¬Z]n¹år½CHæjž„±"a­ Êu’’ó‡‚þƒ>‰ÅIˆká¢XµK¨’T,üT­Šù·ÞzË|òÉîË/¿  #F¸9æ˜#m²l?ÍwÁÊål,”QxT2ø”5øŸ­™¯µÝš:f¬Iû¶°3„ôB1Çjè"yæ™gbN“ìýSTGÇE@D Yà™7dÈ0Þ5#½!ذaeï½Fz£ðn¸ñÆƒÇ ò &T=*"Á82cÆŒ˜Ø¼baNF@ì‚i¸" " "ÐÙ ðÞe—]¢×Çúë¯B9UšñÈÍèA9òaÔb\8÷Üs =Jò¼M†ê–Yf·Í6ÛÄPWôC‡zhðI½C a±,ìÖĉ[#(ƒÐæRK-åc§/¼ðÂQñ5f̘²9þ_­òÍPÃQ±PL©"o K¾MC 0°ê!.;ážVZi%GÌs3<³P!P¡€'7‰DÈ2×\s…6Pú§cÅ eíµ×‰eÉAB}úųØb‹9r§üñ ãÄÓv]tQœ3FJ¡Àè‚äç(úŽ9æ˜B¡èˆ@‰õ¼Q£¦zÞhPòFœXÏvvß}÷’7¢Tk:ž¼vjeéW[·¥zæ[OJ×ÉçI)yCXÕ¹ßpà %¿Ò<ŽÝ' .yeb¨çú”è™6 HŒ;6Ü+Ë/¿|rT»FÀ¯ô|f›m¶’W„Ûá¦Ú~þùçaŒ<÷yþ›|öÙg¹Çí<Ïž!}úE¹íõc}Wk›óYNÞÐQu|¼¯y×HD@D@D@D 3LJÿ(èxZ ÏV ¡‹ežV.Í÷ BŒsâš[(%«cÛ†¤åi=Úc•+«_‹ÆÃ¹?ýéOŽ0U&„íò†àâƒv¸lë÷Á£%ÏcÁ+]Ýc=Öb~e øpzõÕWCBôl;°$y­y“äÕeŒxÖ˜Ô3ßzëXŸx´¤Œð˜áÀ+¥H¦L™âvÛm·˜´žri˜°´žB¬¤^vÙeÝf›mO¥÷J<¨šâYgu Ÿ155ÔA…²ÏuºÅCO½¬ð¬·¤ßì.á™aÏyöÓgï¢Gy$6ÅyëÓž5<çxÞ!<¯ñÄ#\_V(‡7!^÷Þ{oÙiBUY{œ°>Ø·ãi?vŒóµHÚÞ¢‹.ê¼ñ(¼gòêòn¹í¶Û‚§`Þyf'ð-¬5Í>HOD@D@:;‘«âw¿û]ãC£>øÀm¸á†nŸ}öq«­¶Z¡â½£æN2ì3Ï<³L!¿ÜrË4‰º³Š÷¶Ž‹ÐL(õýŠÕÞƒÐG„œj­2' a>ž{î¹ú‰>9‚‚%Š0Øçµ‘€ðKBµ…e½õÖ+T¸[Ÿ\[ïÅòŠÀ%Ɔ¼>¬ý ¬g®(¿žyæ™`H¡OÆ‹ŸÄè(Áj‘7Þx#†¶".;Ê<”v‡rHáu«g¾õÔ©4~80vX €ãúsÏ¡òÚ"_‘ŒwÝuW^n¼ñFGè5ïñ¡PN-è8Ç3Ÿ{„›Sþœÿâ¿Î¼0>dÿ-U¾Ç;‚wïÞK/½t™žwyTh/Í…UÞJû~"Ä"ï1„1ËŒCíÛ³Zö# ÃGû±UË" " " :Ô3&æ-(‚a„d§$m´ XFé’§ŒG™Ý§OŸ+¡R¿x°‚µÑJ}6âs'qÌY튲=]ÉÛˆ>ZÓF{çùçŸwm´QÌI˜0*»½+ ß™qãÆ¹C=4äOéȹ¢Ð$'Éu×]ºÅèõî»ïºM7ÝÔí»ï¾Á“¨#Çc}1®O?ýÔ>Ö´e¥;¹xºŠrU`DÄè™JG>øÎcàC±Íóãk­òöÛo‡¢­­WkûEå0Þ~üñÇcâ¶Ûn[TLÇE@D@D@D@D i ”ÿ i‡©‰€ˆ€ˆ@ç#€ç+úQ¸×"ƒ «Bi\`u*Šï"¥?«<óŒ¬öDqÈyseÕ/‰QYÚ™¤yÆžZ®G{•IÇçôs[úDÑn έÖxNXζµPWË,³L‡„ê—\rIYŸ$=FØâ=… `'lW{H‘Ac̰aÃZÝ¥µ×ꊳ°cF²÷zÊ€ÕöxQÍ*ÁØŠ'2ï¼óï¦ZÆÂÜz÷îÝêz•Ú.â•Ö™>}z0zpÌB7¥çµ/" " " " @qpíÎ0zQD@D@𔯂¬Ñc Ï1wçøó VCH¦4ôÆ…‰>·ç-yJöÔCo^ô퓺o &l°AT*¢À»çž{Ü?ÿùÏF¯]Û#OǪ«®Õ³*”HÞk5ŠåÕÍãÚ˜R¯î±4ž{¶|WøÌmÞ¦XnïyaÐÄX•5zõëÙ»‘#G®ë8óf „ÛÁ›)+Ey_²å²Ÿi·3ÉUW]ÀÁ<#lüõ2°úܦ^|K.¹dÍM7Ê(jVâeeØ>ñÄá#ùxÒAií‹€ˆ€ˆ€ˆ€ˆ@³ÇG³_!OD@D S8õÔSÝ×_ÇNRTòy  3a…2¹=Þ{ï½kþ–[n âΣÌmïpLx˜Ò˜1½õÖ[-Â"áÙA’Û4\×É'Ÿâ¿w¯”‡–¨×Øwµmª°ÆÈÓÕ výðö Þ>Ò«W¯°mÏàœ õvÀ¸³Ï>;ÆæÇøDŽ­ã1…‡„ðW-µ(Ò¹ÿÓçQÞà˜õšÈ+×LDzNéØ;†±“ï9šEZkìdÈ 'œÐæ)Tâ•6n†ö¸_Ó~´/" " " " íI@†ö¤«¶E@D@º%¼!ðÜ`e8rûí·…gjôÈ‚¹âŠ+Ü}÷ÝBR¡#Ùi‘áe*^sÏ=wÈ‚âJºª˜ö)G[æÀ>ᫌxŸØ¹ã?>*nCÌ?;X-L¼üJŠ»ZÇ–6Ï{챰ʘøÄ•0`@øËÎ)­Gr8$ž6ðä ßCÏž=[„âš0v® ijBYØ$Øî²Ë.nÅWÌU£‡[B×`\ÁˆÄ<¾øâ‹ošEY¤ÅX²}§ŸQL2N”ëüqMš4ɽòÊ+áó +¬àV_}õך|fü`\Ôc®yÞ-ä!'Ét‘5ÖXÃm·Ývá~JÇÒö_ýõà¡Ä5Ïó|hô0`¤2yòd·æšk¦‡ÂýÂ1’µÃõî»ïçÙçXG ¹ƒºª;½¿³Ï xó×™…çÊÔ©S6…J¼ÒNž~úéðc½DD@D@D@D@:+>:ë•Ó¸E@D@š–Je”×&?Ã6@IDATþñ[$Öµs¶E!…¢ýŽ;îI‰1J*+]b{Ï=÷tæbum›&ÇÀ øÔHbž°Z¬€fŸd¿Jå©§ž Þ&yFÚ·ñ1žE]´…â½5c³ñ²½÷Þ{Ý®»î =éñ3Î8#|œ2eJ0ê¤0bôïßß1f3ÜXÝ£Ž:Êm¹å–îæ›ovꆱõèÑ#°°¹§F¥c=6$Å6C•µeJn’“ÙXqþ¼óÎsôÅ*zÆÈx̨dõÙ®¿þúÁ …!¥š0Nø\3®%׊< æÑÖO¹ œLYpm\pÁP¹¸ÈßPɰ؈9pßÙ=A{&LhaôÈöƒ1ÍîCŒ‚¶RåsZ£ß’Œs͹ç0r¥÷>å)—~¯Ù·{/Ï CbkÅ 4<#òÚ¤=ú„‰þ8Æ=Ì<r !„ "|sç{ÈwÅîÏP ç<0›ðÞd“M" ¾«„ä{ଈ›1cF0ó]³ïªy8Ì9çœñX¬ðŸ>úÈqÄáù,vØa‡\ã(h¾¹†<+ÙÇ›ƒ)ÇV^yåÜköŸ®êÚT3Ú¾ÿþûá¾a÷Û@V1e\+/êóüxóÍ7Ùí²³09ý#" " " "Ðõ øÿ HD@D@D@HÀÇô/y…!ÁòK^yWò+ëÛܺWò•¼Ò>´I»E^AXúòË/K•ÊûPH%ï•Pò Ñ’7ͼâ»ä•–­k¥¾ÒqÚØ¬¨ä•”±Êú<$%¯è-;ö /„ùX=ÊxÅf,Ãg¯d-;fs¤ŽWŒGvéqÎù•ðeýÁØ+rËÚb\ÞÐP6†K/½´ä•©q é<³ûÞˆSòŠGº ’އ±s-ôx¶¼ÏÞ¨êey¤e½;”ñž%¯À./õ²¬³|Bå&þÇ'/ù•þ%nªä•Òí:Rï9QƯÖμ±2ÜS\N®E5®û¶Ûn[Övz GŒëð]KÏ¥ûÜ·&\pA,wÚi§Ùáš¶ii›iež/¶ïOñ}Ù˜8nûÙ­÷†ŠuÒød˦Ÿ½!)OûIϳoãIØ1ëË *ö“2·:\'ë‹óiûvܶÙþR^Þ mMVݦ}f¯ï+ŽÉú¶-÷”I-¼¬ìu×]Úô¹=ì¶" " " " "Ð) (¹¹ÿßDD@D@I€¸^ašdÕvvÅv=}²Å4bÕ—_~9ôá}¸[o½5®"'\+9þᇆ°Kx9˜°êßÂ*nV_ÛÊhΞË+×Ü*«¬ràéz®XÙmkÇæ«¡‰}÷Ý7¬ æž¬l&©:!˜†W]¾ŠÐ_«‘YÎü¼’>$`·Dì¬,·Õé$i'w åRIWÊßvÛm!ƒ]+ò°2ŠöYq¿õÖ[G/BÙªú´½t®Ìù¥u‰Í_-¿BÚNº+è™y#RÏ‘iÓ¦…¾Xͼ²×™qp=‘tüx¡Pn”Á[ÄÚ…ÛÃ?摎£Y÷-4Ù2Ë,¯U{O+¼=j•믿>Þ³xa¥Â½ÇóÁÂa¥çl/“ZB6åú0k¯Ú6}&µ™¶Ax:“´¯JÉæ wá…Zµ°åÞëÝ»wÙ1»í ‰â)WIÒ1X¹tŒÜ3Ù„ÝÙëó¾}ûZõ[ÎtÐA-ŽÛænÏ;ÖÖmöZàÑÁ3À„9¤¼¸§*ÍÁêeyY~q Åâa‡æP&ÓÊ´C9ÄÍœ93މrH½cC)ˆƒ- ûõÖ[/*®Q3K"ò$´ Æ䢋.*Sö{÷è£Æ9S.køÿóÏ Aƒ¢áåÉ'Ÿtää°pIÌ›ü!„›2ÎfœIÛ°}® |©Ïø- ç¿];+_Ë–p_Ü fÐ Ë5×\\¸˜#áˆò®³Ü3dÌ`Ä<ÒkÞ¯_¿2ÈÚØqÇ£¡©–qÎÊ2Ü¿ÜC(šm¾í5žwß}76ݨdÙ„}JÅŒuÜ·„É2A‰Í3€9bD#L* ‹rA 'ÜÙ¢¿¢pXéw/í¯5ûÞ‹#\#¾|ÇL0nš0_ ®&Þ[!Ì#$sã³ m~øáá;å=/ì°»óÎ;Ã1¾³•$kY~ùåcd |§LàöàƒÚÇÜ-ýs=¨K¾—T0T6RÒkÁ}o!ÅH~#æ/¶&ÌkÞ^føèªyaŒ¶" " " " ]Ÿ€r|týk¬Š€ˆ€t T¡O·(­MqnÃ@I†á#UdÙ9Û¢LC©†òŸX÷(¶¬ÒÚÊoµÕV!71èQ⛢ÛγÍë£ ´n¸!(Çða|©Pœüá-À̳¢Þ±¥LhÿœsÎ ù,08˜0”¥00¥v𝠔‹¬·ö0ô(û1~XRïÍ6Û,>'²mùPWnÈ!ñ0^U«ðJAð ãX{Èøñãc³×^{mÙõÇó#ÌZk­Êðî°ûª/¼ ñ&DŒAø D@D@D@D@D (ÿŸ{'œ€†," " ÍDŠô—^z)(õPÌf”á«¶Mùž ~Sô¡¬3Þyž (HM L[Eífûá3ýìµ×^á¶YMÌ sBô<ûì³eJpŒ*Y©…²¿Þ±Ñ'F”ûï¿?7~ó›ß8þHbLh«-¶Ø"$B66nŒ>§CP䣈îÓ§O`¹Ï>û8Bgal0£ŒÕ©¶Í30XBŘA#|Rã åj1FX{µn‹ 1µÖ/*‡§)A³e`O8'æÈ½‰:Ë?[gV~6C†±EY¤]ÇŠ‚žï… l²b†ìñìç‘#G†C7ÝtS<…²=ïº⊾0`$¡ì5I 2±ÁVîäͧ•M´(Ž oNjÒMT´äâì?ýôÓlZ†Œ?Œ5¯]{F¶¨˜Hû9òÈ#ƒ±59v³žfœÉ–KvŽgZGHjƆð]i2s .|‡Spv\y¼0La¬Âx·âŠ+f«è³ˆ€ˆ€ˆ€ˆ€t*2|tªË¥ÁŠ€ˆ€téjp<0ò”•äWÈÇXÂÊûl.‰4g†‡Zâý×ˉUÔ„ñ:thøcŒ¿ÿýïÝ®»î½$aÓ–±±ŠÂ‰3þLŽ?þø2O”žcÇŽ ã±¼(~Í#…z ðl¨¤äG¹Š‚0`@0¦„™èÏÍ–W%S$¢¬\ö|=Ÿ¡Ì¦_®¡ËPÞb«ä€gá‚Ìð‘½?ë™G{Öñ ¤Ã¼VZi¥ŠójÄP´³’ÞŒ„xKÍôAî A”×oê ‚ç” ýÔ3ÇŽcÐLÛ«÷šÀ*ËúÀ»Ì¼ìX#¶õÈ‹”'òŒ yek9¶øâ‹#´–å]á»8ß|ó••Åx3+e‡vˆÝsàÉÁ½7xðà`æÙ×Z0 Z˜+Œ)•ž±s툀ˆ€ˆ€ˆ€ˆ@ᣉ/ކ&" "Ð9 ¤y=ÈIALù44Í*«(¯UQ…;oųµ‹á¥¥ò‰YOÚcŒcÈ=@ ~3R%lVZ36æ@Bp’¨_qÅÎrÿûßËšÄ ä²Ë.s/¾øbTäáq‚²ÃÉ©§žº Ø7AÑ¿òÊ+‡_ë®»n4\Øy¶©wL%î©*5h¥m5ó~Þ5*ošÔœû'{Õ›UÇÍãcÙe—­ø}hÔøÒëÑ-kø û^¤ì¸Óü6ž4gÞ„Uj!Œ:Zò< ŠÆz€Tz¶Õ¯å8ßë#V¥~vÞy犆F&kw^ 1)- ex&žyæ™áÏgEÈ\k3|d½^j­¯r" " " " "ÐL”ܼ™®†Æ"" "Ð%lÜ „VùÛßþVÓ¼ðn`õu%Áë€Uç$°-ú#Éq%e¾µÏêi ÷‚gJ59ú裣q£Ã7ß|SV¥Þ±áaròÉ'‡¹£P&¤ÆSL’9§Æ ópÆ5|¤9²m¤FÎÕò]¤ êJ(²í;AùZ%›Ç¢Öz•ÊáõÕHI“ž7²Ý´­Öy&˜Z¯Ï?ŒK„Ëó@ÁÈCþ# oµÏKÈ.ÃG-ÄTFD@D@D@D Ù ÈðÑìWHãètÈ—a†Ûm·ÅE“aµ.1ÿóVIfÊÚ›8qbnÚÝf›mabwR‹±ÅâÔ1cFTðó9OPœ›¥cªwlÌïV.ãÍaí»£ƳÏ>»ÌÁ˜ÁE"kæj¡®P4÷ìÙ3$ަÝTA7ì±sÏ=·…§‰•9ÿüó ÏY™fߦ«ÓñÜ1Öé¸ñ´I¯oVyŸ–m–ýŽöø°¤ÕÌÿ ƒªïýëªe¹.E†L;ŽA³Y„P_î½j‚7Í”)SB>‹jeóÎc42AÖš-?iÒ¤xhÑEûͶƒx·ÝvsÜ|¯¹N;í´²a¦^!e'20"cLj¸ÆkdÎ꣈€ˆ€ˆ€ˆ€t>2|t¾k¦‹€ˆ€49”÷ŒÆŠAƒ¹‡z(®¦ÏŸpSK.¹da þ4^¦ðOÛÁ BbZ”¤$Ï[ÙŸ5`<°ÕÌÄãgE¹SN9%l{½c#ßF þÏ’ qÅ8–Xb‰+Ü Ç4sæLÇŠû<µzd¤m£t%‰;I}SA xÕUWEÏ–Ÿýìgñš¦åÚ{ÿÀ ^úÓŸêê*õÔ!wA·£Ž:*Ë>øà§º:nÇJxFÁƒUüÂ:Âãƒït*ãÆK?æî£¬'ßLžì½÷Þñð„ â~vgã7+÷¹:Z²Ï ë?ÍObǵ%œ^žôïß?ä"!t`Þó"¯NöXj$Ü]žÐ6†“f4r/àÍ‘æ{bœ‹-¶Xðâ«æ9hsK·æjuÖ ÉÍÓsÚ/'€‘ÉB*&R"" " " "МdøhÎë¢Q‰€ˆ€trä« 1± y)V[mµ—‚ÕÒ(þQð±Z·’уú$o&Ž…¹™þùƒ‡J_ £Gv[n¹eThßzë­Qq•†wAQë‚9>lذ27Æ€N8!OPœ¡$ÿ+Öñ$±äÈxjØxê[jxÀ¸ÀX,ÜJ%«ìX=ÂüS%þ /wà #ÊÖ[oí¾üòK>ºM6Ù$†³ ’PžqÆñ¡T½öÚkƒ‘ƒþ1†îÉ¥»ì²‹›{:n÷‘G ÷ ^0y­j#Ùc=¢Á†y‘ÿÄr»p¹.ºè¢hàÁ2ÇsTkv–žç» ®cµ¼2(Í8 6‡ˆ)‹ãÁd‡ðk|W‹„ï¬ ÆQ`Ä$ÿŠø4üRZ®È8‘–iÍ~úÌ \Rv\Ù¹fyÙ½¬0WYR-?ó~9r¤#Ü‹ $" " " " ÍI@†æ¼.•ˆ€ˆ@''€‘‚äÅ©’ …!aGHŠÌqЄ·2e6IˆYmkŽaHÌË‚ã+®¸b(‡òê˜cމÊ/ #¬ ÛZ[xvÐ/I»9Grñ´]’‰cäÀhƒò›Õô©§ídÇ’ý\ËØPX3_”É!¥æšk® ddõ> óL`N„ÄBÈÛaa¿øLÒhÊÓe0˜˜ç†6RE.uLöÛo?G~c„ò…!íaŒ²Äæ\+¬ÛX­~£·Eãäú0?ÆC(´¢rEãa~äd°ëŒñƒ•áç§÷Þ |š]^{íµ çþlïë’²3fLúÑm¸á†®oß¾ÁË ï®ßsVâ/¾øâee³5×+I<Í}‡±ᙀb5Mx~ÿý÷Ç&Ò{ƒ}ZÝX¨Îî‹yç7Ö^`†ævá…æ&j…ëÜÁÉ&Þ ô‡Ñ…üB -d§ËB9Ù3‚“„ÆÃ`ÏÓX!ÙÙgŸ}â'Ë}BðÄ€óK.¹$–I %ñ`w¸^xñTú㞪4t\|‡™· ÷!m›ÏȤ/rü 2|­ü-÷ ;î¸#¼/¿(hN2|4çuѨD@D aPl³ržÀ;ï¼³[{íµÞ(°,TLÃ:kCCŒ…G[l±…[}õÕƒB‘í@^ƒ­âoC^E3J¼K/½4zä è+¯¼âHž2å;Ê\”Ý&|ÆSƒ Ò©·Š|k›ÕòŸ}öYÈ ’]œíC+]³1ïkIÔ‡^66’“WcÃ}:jÔ¨Xqã­æ'ÉŽ“sÜO(l›+ûÜÿ)?¾'tRî rÊsÿ}ðÁe,ŽÓvÚ.Dz‚òј•M ci™Ô[ežyæ }¡¦_3Ô¤^3ißÙ9rc!Âh«HÈŸ€yš]ÒüéõlïqÃÞ<Ÿ¬/Ù(ðî€/ƸÔ#¢(ù4õ³a0–ppßpß› èænb÷€}¦O š ²&<Ã0<0·Öä6±úµl™sºrE>ýqm1.™`áYb‚§– ï &ÜçE7¾ó©`Dã8ÏÍ”ùwÞ…”OMiýt?/GSzÞöñâ©ôÇ=Å<Šúä]‘ ó†!܇´mrÁØ®+âEž%3ñüàxâ‰'†üF!Ü£DD@D@D@D I øÔ.HàÍ7ß,ùUÝ%ÿú©øçWç—¼‚¥]ø•÷%þ*‰W*—ƒWçWd—|ŽŠ’çþ|BÚ’åT8æ"~>ymÉ+é/ž©ä %¿ µ°NpÞ¯ö-y¥MaY¯´+=÷Üs¥k®¹¦4vìØ’WØ–|ÞÀ¼Zû^iVòŠÊª×Ð{o”|âõ²±2O¯x+ye]ɹJ>wBéùçŸ/ùÏeå²èÓçæ(Ýu×]¡u9–kÇ´=¸øPR%Z¨äžáúø0Wi‘Y¶ï½JÞQ:ùä“Ãõkë@Þyç’Ï9æë—_~¹ê÷´­}6º>Ïo(vØa-î§F÷UÔžW(W¼ß}"í’+ª[Y¶Yá{çÃ;¶Åý˜'“'O.«Ó«W¯XŒï®=û‹êÇÂ;6fkǶ>ÜWé£>Ší{ƒEl!í7= ø>*ÖÍ~W½¶äñ¼õÉÖÒfÂ>õ᜖³~Ó±Ðn*éøÓº¶ïWô§Åc_vyÂ3ÖÊпIµþ¬NºeÌÏŽyo7k.lé‹knç³[¸P&•"^Þ“)´Ã»XRL€w ïHo+yÅð¾(.­3" " " " ³šÀ·€ÿ¡,èBÈU@øVò×*3fÌp$eÅh#äæ›ov¿øÅ/ d UB§ìJrVÞçžõ­¯r^áÓš*®ìõ×_¼?¼‘ ¬PNÃWv‰8ôœc•>¹C²+À;r¬ÏËS‚7 ^ œOnpœÆz‰±Všo[æÒ^í¶eL­­KlVà“oÀ+£÷KkÛéJåY•NBz¯œ¯É[©=çNˆ)žŸ&äžÁ;£–< V‡-ßVú#xð",^%á{ÅsÏBÀ5êùm}Ò>žf^á‘’}Ž[ÙFnñ>Àk †„ÀÃˬÒ3Ž0U^)Ô:>o˜pä¿ÁsêŠ+®ïKBL¥ž5œS{µ+oÌ ïQî®ÊÂæõ›åÅ3†g%IÓÉ÷#É'@Î)!¯y ºªXRï¼ù1o¿š7„Ã!ÇA%…`^ýFãúX(2B7aè²<ô…B—]$çö+ŽCâð{î¹Ç‘0Ü””•æÛ–ñ¶W»mSkëòɆXjm;]¥<Ïò”p/a¬Õ÷?ßÇF<‹0¶6¿ÏÉöÌqBû_ª`}oµ¶ÏÖ™ÒñbXÙtÓMÓCj¿µ¬˜\–—›W¿ä‡ž={–•%Ѷã~õ«_…•¿ÔçóĉC¾ k¯«mSef–9Z&MšV›šR|VÍÂ)¡Þ8äH•Ñ(tüñp í>ôa›ÂJuw¥ùZ™z¶íÕn=c©·üøþ`@ªdL¬·ýÎVüfÐÂó+½×:Û\4^˜Õ>üðÃð g­5¼Íê±wdÿÙÜÙXÖ‘ÜÔ—ˆ€ˆ€ˆ€ÌJòø˜•ôÕ·ˆ€4˜Àå—_^¶*|üøñÁPÔÍ"‹,Â6œwÞyažÏíàÖ\s͘:­‡ÂuúôéÎÇ•mú/V:§ŠGBh°2Ò熈†‰7ÞxÃõéÓ'$]¥,^x¤P) …•öî¹ç:Úñ9‚qfÈ!ÁĶx<Ÿ–%±7‰|½÷FH Ê9¯üÏí3;>ÛX­Mî*$ÀfÌŒŸã (ùZ%oh1ú"xž´fŽÔOyŸp %½äCŽÄ>½Á%tCÒl¿Š¶bòön¸!p¡Â9çœ—Ûøne¿‹M>t OšŽa‘jx ˆ÷Dêí1bĈêY݈€ˆ€ˆ€ˆ€´•€r|´• ê‹€ˆ@“ðžQ)JÞKݖᡜ'¤ÔÇš:t¨ûôÓOƒ¢ÃGšËa5Ö ~”þèì³ÏŽÊo”Ý”'´S6Ô¡²Z3VŒ0(‚‘ &”)Ã9†Òe(ÆÂ¡(öÞް8&¿ûÝïBè)>×3Gk'»¥ï;î¸Ã͘1#Ì„P2e59T>ÿüóðG8%ïýC)Ýÿý!„9Z0 rÊ)Ñpå=BÂ\7•5|¤c¸í¶ÛÜsÏ=<òH¸^ôI²yŒ „Ã*Œ6vÚ$” < O…`´JÇ„¡ãÔ*«¬î“1×"©e¾Ã† ‹×™òÌ…aŒ%¸Ý\K¾H-í’û†û҄냒‹ëå=LbØ. :(mÎV¾£¶føPŽÿ#náÛ0|ØýÜQ×Býˆ@W"Àóç¢üùW6ÍíÁ"åöÈ礣" " " "ÐŒdøhÆ«¢1‰€ˆ@Rï‡ÕW_=*ÍÓ¦È×púé§»SO=5lÙOÿ®¸âŠ2Eða‡Œ´áÃ99r8°B!·«ìWZi¥¸ê£‚áï SJb !O’U›Q œ¬áŸ´Ý¼â¬Š¿ýöÛÝ[lsl „GymÆ<4l¬õÌѼ Òþ1ê°*tûí·y;ȇbó%/ÅrË-{0™Œ•”ö°ãƒ[dÕUW’´Ïìþ Aƒ¢€þ6Úh£x |è«ÃC“*î½÷Þ˜G$mëŒ3Îp£FІ+”=ä±±b°ü#Ô{ûí·[äØàÞ€í2Ë,îEŒ!‡rHÈï’^óZæË\Œ#%v/Ñ7Þ+guV¸ùìC™ãEµv1J‘sÅÚÅ‹%5,í´ÓNe^ô‹ÁeVˆ åÔñØâ;(r.ú$­%ðØc…gà\sÍÞå­­ßÕËËÛ£«_aÍOD@D@D «P¨«®~…5?nC õ~Àc O9O²o< ð(’þýû‡Õý(§ …²OB ÙÊú´.Þ>·ƒóy6ÉÔQtgË¡$7e7IÇMiN»­ñöHû-Ú§MBn¥!˜(‹ñc‡~Øà…Ж9¦´a€ä©À…0ZÌ—ÐcfȰ2æQÁgBR‰ñ3ƒE^9þƘ0P$ýÎöG½«¯¾Úù(Á«ÄB™ÊÚÍ&fç8†¢k…Qƒ¹à™røá‡Æ6ko Ÿ;$üù\2£Kö>±²Ùù²"£ Çóêø\/ñž²6ò¶i»ÇÌ;„±pßde«­¶ <ŒŠ–P=[¦#>3g®½<>\xÎ`´äþâY“½w;âz¨è*0þ"„¹*z¾w•¹Ö3y{ÔCMuD@D@D@D yÈðÑ<×B#6ð‰~ê÷JF"O¼Žñœ0ã û<ð€[h¡…ÊŠ²òþª«® JoN¤^'e“={öŒ ÚEÝH9è ƒ „É9rdoEž¼G1ÇW\±,”Íeõüãðà |öa Q’g¸°¶1 ™²˜\ ðODE«_´e®{íµWø£M¼@0úàÉBþãL}ŒðÂÉòÚçžávgΜøÁ’vQÜá­‘5´äµ“{ðÁ£áoÚζW“)Ù©›=Ÿ¶×žûeàË÷«» a®ðÒáÙƒ\$" õ0ÇÂ\µäÇ;K¹=ZrÑèLdøèLWKc Xuo+üùϺ­fO«àu€gFVzõêr&¤ÇñôH½(Ó›A.¾øâP±l¶Ùf!üR­ á4LÊþFÍNÊ*å„7Á®»î“¹§ç¹Oâv”÷È€ CcqŸ˜²ãAj n# 0¬&9aøƒ ^p0ÏŒ$}_~ùåãxè?OÈÕò“ŸüÄ‘ÅBSå•kÍ1 _6wÆB¾fóFáúr¯UòjÖ94j\–ßc£V¨7ŠªÚéŽxž`ÆÉ¢ÆGîÁF ¿ ñ`ÇÓYü~ã·¤DD@D@òÈð‘GEÇD@D “xï½÷*&”ÎN%" éMc9‹ðD‰.ù/Þ%ÍâíÁXð]sÍ5ÿ;@¿÷æ›o†Ïœ»í¶ÛÂûk½õÖsx3潇Ë*×ñÁÞ¯é{’c3fÌ¡D­IÞ•äЪö¾$ìhïÞ½­Z0èã½™¶O¶ó¿_áË{u‰%–h±¨»oUóü>÷ÜsÝo~ó›úó¹çžkJC ¿UN;í´`¨#·‹_aüà÷&‹žX¸ƒp¿al“á£U·‘ ‹€ˆ@·" ÃG·ºÜš¬ˆ@W&€rØB1O ¦š!¥<ŠèjFVVa h„œDê(üÿ÷ÿ7(ÅùQ57n\PüZ9þ•ýÏ5 ¸‹”¬.4£ «úÒÿ`côhÍ‹<Ø}üñÇ-Šá>nŠEþ“ÁTóä•W^q+¬°‚›o¾ùB¨[˜WÖŽ1ÂÍ?ÿüá#äzH½"¬\ºåü±Çò9püüóÏw .¸`Z$ì§¡°²'/½ôÒ&‹þIFÞ^s̆dBáŸýÏ* ûj”ìjùÌj@Væ ÜŠÎ啯v,Í ÂÊÏj×ã“•!rüŽ3Á{ßd”ZÉÒ'¿ÕXäQIø 2zôèJEt®€¿ðJ!_Û†n~Ÿír‡ù†7„ßð×\sc1Ϭ2Lv9Àšˆ€tQ2|tÑ «i‰€tOügÓ à?EŠ„7ß|s®B—ÿ\¥¿ûÝïʼ-¬ÍÝvÛÍw%>¦Ô¶ólYh+êøL® Vhណ°ZÿÖ[ou¬²Ìþ#ÍŠ|‹MÒYCÇ™/Ь¡&5ˆ Þxã 7~üøèÉÃõÏ–±²i»i¼VòÂa!Žô[o½‡˜·µ×‘[KpÞ <ÈQÄõ•ÇGGÞ}ê«+ < "ÃGùÕmo ƒ ƒãÝÎuâùJ*,a±ƒ­‚çùHIûì’ÿ`Õv¼² ¬Þ´iÓJ>ÇHY=ÿá’ÿOU,çã%*©ä•ßeå*Ûÿç­¬ óÿÁ)1JõìœÏ/Ròÿ¡c`§ž9úÿ¸•–\rÉÐ'}{CPY›|ðÞ %¸¦qÙøü8K´í½VJÞ0QV×Îùÿ¼—¼#œó9/By뼞\OÿŸm«êÛ5ö å’WtÄs¶óÎ;ò%ôéÿ3]âÚ™¤çlÕ¶^ù`Õöh¾þ?ð5Ýip³ùµ cÿŸèšÚöaÊJ^ [6ÞŽþ°ñÆ—¼¨äã½—üô;ºû¦èÏ+YJ~•gÉHsïѦ¤Ñ0§žzjxÞx¥UÃÚLâ½ÇsÃ{¦‡»Å¾WZ†¹{ïÇn1ßZ'É;açwÏZïaQkµ†—óŠèp}¸?yŸùœmUûðÊß’W²‡ßS>ixië­·nQÇ+‹K<òHl;}ozãIÉ/\ˆ¿xÇó®OËØ>¿ü"„}zƒt(ã=AJ~±@Øç7]?¯8ï]Êñ›ƒvù Â{9o`‰mZß¶å·¿±ò„ß Þ”;vúäwRú[ÔxsŽ÷‹–[—yó{'+ü¦¤MëM”¼gjY5ë“yŒ5ªäó¹õµUæýoe³ç˜·7Vä¶Ã˜|.½Ò›o¾iM•¸ÇsL(ï”ü"¡’_<Ô¢>×È‘J>Tj‹s´Ëy®U*üŽô‹`ByúõFŠp:í“ãü¿ Ë‹Ïpñž-¡׊ßþyå¸oø oâg•ößÿܲÔç÷F>+®­ˆ€ˆ@7 ÿ”ˆ€ˆ@W#pà†•ñ[l±E C”7Gÿžà}€Û|ºj?-;tèаrÌã…À{pyÂJ<öØc²Ó¼# Êïʇÿã;Ä}paÝážY.X¾°­X¡2ŸØ#’ë¼È…VEÓãÖ ‘˵R¤R®ÓÊeÿf×)+b\û}+…±—Œ|î…1”¹‰ª¸Ç~¢ìÇ{¬|k ö™Y_DLyC¤èPºð ý¾«V>ú• 툷“rÙsEnEý=ÜëÕiyí>ë{Ü2‡>Z?âš {³|ŽÜš–¢>ßVýÇÂÁ¬ XC·Ýv[Ä|@»©DŒþ¡è0WWr´Àâ凡QŠ^^ͽŽô;Þ†FëOJfd< i˜ŽûqíI»_/~–Þ>ÉW–¨¥oÖ'†ôµVkÕU«¿XuðWÐŒ\Ay¿ØÑa¸"Y­rIÈ|é¼*Yã‡Yö ýmQk¤Ìï-4qWbYÜ—üöV=3+Cüô‹š‡xFÌR_ ÚÑ"çµéÓ`íÁXð~gñžÛpà ý÷ð_Ä öëq’öì§zõêå­_ÉGy‡v˜/‚=!±>øàr‘ÄÿB«Ÿõk Ú€Õ–ž¬éf%K{ØW¡IŸD³Ü[ªr/bà{K†wÞ¹œ”kXPB”õhÄ/ßç u3G#!…¿ŽE ÖV'–%Äò s¯½örÄ"¶.|?âˆ#|>,i‰—a{òƒå”)S|8,Êîºë.î3©˘n¸Á…íóq?R$òùX,æ{,xÁ݈u›8Ä%±r±ŽSÒ˜`ŒE+î±b%Æ‹õ%žŸß¤!öý$àýàÁƒËɰÆšKúÇÜ2Xà 2Äa=~üx_.–4¡Ζ[nY¾Äå-L¬œZŸ‘Â[_Øø‚±UúD1k˜ç´•Oî3öôÂÒ+ËGL³H¡ ƈöQO$¨ñy(“¹‚E } ! „@¾à#ßã«Þ ! „€( ôŒ"\dàò AF^ä0U`fUð³f- ÕW_½Ìì(Ìä.`GMðaA¸ AKºiäûraŽF± ZRGÖ …!‹HæòV[mÕm]€AŃðõóÞ‹,AÛ´ÅÒœzê©mîÙ¸‚1LzÖ¬!Œ{(ô°ô¸E(€+,Òó=žŽö„®$-/ŸÜCÀ‚ ¦=‚ „)\C8Ã}Öf+0­÷Ün&‘ÕÍ=„Ò6æ¶¥§\TÒGÊ£.Ö \N?qŸWf ßf›mæÝ!l`-‰ÌõPèÁ}ö«­¶Z<©ïkd%äÄSv3§" }&x¹íM"ðˆcMy¸’­—è3@ŽÛ[#ÿ0ûiS’"ï[\Á†D¿MÐYX¸?þñám‹Ý¯¸Qçæ"nÅâãË€e-7‡ôÃæ"B\áBàÆ{-zXs¨ÀñΘg‘…·Ž>…€9F@‚®º&„€B Hp'¶ÌO<áÿÐÒÌ›àMEüE#⼘4L8£¤hx¡¿&ø@‹†éRK-U„n·¼hŽCÕ|ë·¼)«FqZ¬=€¦ïOúSW+ÆÌÝP£¿¤¬ ¾£•¥Cœx§Zl ÒÙû6ž®½ßN>ùd¹Sòñ· w F3–ŒwÓΗG:4ñ!õ§FÂãŽ;ÎÓ2nÖ/®‡ë"‚„Ã?ôB“wUüµGìaúC`˜ä¬½2¸Ÿ$œ¨•zèàv«£ÔhIõ`ƒ+§M6Ù¤¼œýpËÈÿ‘‡yÅvIdö³‡6 ФòÛ»Ÿ”§½kÍ*“yöÌ3Ïøê¼!äI"„L&üAÀ†ÀS$„€ùG@‚ü±z(„€È=øÆ5‡h¾Ã$\[\~ùåîÙgŸõL“¼  ÁÇ?ß#/“¹Î~ÀÀÂG>VN>’\—ÔY”’ý˜ÞQ@iÿKñ=ÒÛ#i’"À]Ÿ0mÛ#³­ ây,M5f»1£‰ïÐQÂz îîŠç˜:k¹¹JªöÖŠíE‹+ñÎ;ï$ѲkÄ Áý“Å¡"\­¿þúÞm?ÿùÏ[Ö†°`,2Þzë-õö®®ˆé–.XÚLš4É™4¼ŸÕïÈÌŠü%sÛ\Ç‘ŽõE$„€ùG@‚ü±z(„€(ë­·^!ú©NÖF`ƒ 6ðî­`Áƒ_ÖΙî»E|X`sü¬×ÃL÷hªuõ"€Õ‡ >êÍ£tÕxä‘G¼mxÞE§´Y{00d±l3B ŸqÛ|óÍíRÕO˜ºí =°0wgU êä „–'^í¿ï¾ûÊñ7poôë_ÿº®`LÏœ9³"`xµŒ‡0ÔrF^˜äÏ?ÿ¼ß'G")ÞEµ:â×±¤1¡åà–ë·¿ýmÅUMÀ/«Y¿qIÅ>h„ ^øAý?ü°=z´·bÕ", âC=ôÐZÙ|ýÄŰúi– ôB@3f̘²Ð"ì߯¾úêrº-·ÜÒÝ~ûí¾¼CvÝuײpf9#!p7Bød˜‚ Bb<öØc–Äã †`ÚLbÌLè>—^z©;óÌ3Ë#0þóŸËBÖPæWžˆþœqƾKóçÏwŒýÝwßí±F@õøã»5×\Óßgžì¸ãŽrs–'ìÔ! „@Þà#ï#¬þ ! „€(8‡©ñÏþ³KÜLt¼fñCwWE"Æ—"0ÒzõêåÝw©ÿEî«,>š7úO?ý´ƒ Ó“E&˜ÔfQ1`À·ÕV[¥„(N?ýôrÛh÷1Çãz÷îíT Áº‚±;eÊ”rzûc|íµ×öV!\ƒùŽÛ#æaŒ4ÖšéÓ§[V¿–š Œ|gŸ}¶ƒ^-¢\|‡D;L ^§ Xl!䡯Xœp„ ±+V]uUÿ+„V‡Ø >Ü÷‘¸)fCðë{ï½·ì–ª£‚soE]!¦´ƒX*mŒLÀ´ì²Ëº7Þx£]ámjO¸deó 3ß„_àuòÉ'û~ƒý=øàƒ}ræ s(Ú„ådõ;óâ€(ºÇºc‡vðcÌ<1+7æàÊ+¯ì.¼ð¬vUíB@à£AÀ”\! „€H7«¯¾ºg ÁhÀ§}#̃´öŒC= ¨hq>|0–0õh‰Šƒ€Ík‹ïA|¡E%Þ%¼S°€qÝ^0ìîÄ †- l\÷`QèÇ\àƒWo¶Ùf‰ÉHƒF|’`„ *¶Ûn;G<ê5âúÀÛÔ`²OÖ',RB¢œýÿ«„ï¸ãª—T|üñÇe!F<Œ~Æ0^&s7X¡ÀÈòÒF¬0f̘áP0²µ•õå'?ù‰]Nü ­+Àôw¿û]Ù’"Ì`x"lDȘµW'õôèÑÃg ë$ŸYkðݬA¶ì·ß~e+¡°>ûN>b\XLÚˆ5MG‰:ûö훘¶% Wê©“|&¼¢pÃ*¬LØ…„p Ë(ë_xïÌ ¬pƒ•Tf<½~ ! „@>X(Ò&h®­e>pQ/„€B@ #°çž{º[o½ÕkÞsÎ9žÁ•áîx_ç0‚Ð }ê©§Ü AƒÊÚªYîW=m‡Q{4wÿøÇ?¶a®ÕS†Òd;î¸Ã»´AKüí·ßnj'n¼ñFÇ{b5Öp3gÎljÙi, ×.wÝu—;öØcÝyç—Æ&vI›°€A Óæ·Å=é’Ê;Y BïY³fùuÀË«­¶Z™A^oñ&ü™;w®_0â*)x$•…UÖw0î»RMìŠW^yÅ7 á ï $µÓ®áâhö-S`”ÓÏ8³ÜÒvö“±Á}ã‚@+”O k»¸€¨³uÇó3N6OÀŽ1Cq¥¢0ü±zyñÅ},ðÀÒ…}S’0&ŽŸ~ ! „@¾Ú\¾ÆS½B@! "ˆóÓ4/Î9¬ÃLAðQ4‹˜I0êߣx¶Y|¼÷Þ{Åë|“{ŒÀ2—/M.>ÅÃ? ÖI€Â´Çb§³„PÈÈo$_gÓ.¹ä’š· u160Ö«*]EŒSÿþý»ªºTÖƒ%Œ¹hKeÕ(! „€è2äêªË VEB@! „@W!`Îqi€_ô<Œ´5Ñd,’Áîk¯½æ5Va`Á° nÎ3Œæ²¨càÚÇ„Gm´QÇ ÉA.æAŸ¡´ÆöÈÌê‚B@! Rƒ€N© 5D! „€hh;¢õ£ Mg\=dLðQ$‹Æoþüù^Ѓàÿà¢â гgÏrg‰= êßw7&LêXIÙÍ·ö3fLv;£– ! „€B@Ô…€uÁ¤DB@! º©S§ú  ,èþƤ¼¸†Úpà =£RþÜ5»yøÂgÞC|t]|ÙÍUÜÚcذaT9…€B@! 2€™&5R! „€s—_~¹»ôÒKÝèÑ£}°kaRsw•Á>«ÉâãŸÿü§ï±Ê*«´< líÙ¤»Ý…€Åùà£ã#PtÁ‡¬=:>w”S! „€YF@‚,žÚ.„€…B`—]vq /¼°ûóŸÿìæÌ™S¨8h|<÷Üs¹pu…à"ÆGQÁnÊV_}uY{eÐcý”à#Hƒ?Íž=Ûç*ªÅ‡¬=œ4J.„€B@œ ÁGNRÝB@ü#ð‹_ü¡ùþÕW_¹sÎ9'7A»[5rl°wuõÑG9‚œ£õ›e2WWE nnýúõS|,OÞN´Ýrñ×1ÿþ÷¿ûŒË.»¬[yå•;VH†sÉÚ#ç¦ ! „€B “|¿“ù•]!IfÍšå.¼ðBC€È¸YuÕUÝ®»îê~ö³Ÿ•}ŠwWç¾ùæ‡{žë®»Î=òÈ#®OŸ>îÍ7ßtzÝj«­Ü^{íåà ôûí½ûî»̾ÿýï»å–[.5 Ò/¾øÂÝpà îÆot|ð·Ð@kèСnß}÷õsî{ß«_áþçܯýkwä‘Gz«ã?Þð™ù+j‹À2Ë,ãÖYgÿ,=ñÄ>æf•LðQ$WW¯½öš·øP`ó¬ÎÚηۂqËÕUm,y/\qÅnòäÉ>áŠ+®èÞyçòú°Å[Ô. wY—Ù»ðÞeÂb±W¯^íÖ„°«Fˆ|‹-¶˜ëÑ£G»ù’tÖÚ‹³^xÁ÷ØQìÓLŸ~ú©ûøãýžˆ½#û¢´‘Í ößõÎ ú`󢑹”¶¾w¶=6¾ìWZi¥Îçç {h0e<ì}[«`Æ/žç믿v³#˲Žì±WúÒÈ\-•J,Ø[#Ô]b‰%j5Y÷„€B ÈD‹†H!P¢ r)b”¢÷~Í¿£>º›ŽKt€.ñW‹.¸à‚R´¯Ù>kÿƒ>XŠÿÖ*.W÷’ðãZôØã J³$}>ûì³KÑ!²æ82Î/¿ürÕ9AߢaE"kRÄÌ/E‡ÔÒPŠ„+÷ëù‘Tn=ù²˜æ7¿ùM):ˆ—†^úüóϳ؅r›O;í4?§vÞyçÌ÷¥Ü©_˜ûÆ?C÷ß)b¶ÔH­[yE€yÏš·Ã;4µ‹ùË_|¹k¬±FSËíŽÂ=ôКkí"!|KšWmmŽ,í*ÚÅšWÏžeÞ¼ymòQG£DžçŸ¾)‰”"áIé¯ýk£E”"‹AßÖ܈9Ûpþ®Ì yJ§Ÿ~ºoo$(/E‚㮬¾®º›bÚŠ±Hš»uu¤ÅÇ÷í·ßît+"Á¤Ÿ/‘ ¥´îºë¶)/ Ÿxžé(ŽPÅ3kïœz>—_~ùÒo¼Ñ¦îZ"¡GéÄOôur "! „€IÔ¯f­Z"! „@–@3hÀ€^2ìÇ +¬à–^zé ÿñãÇwÑÀÍ;7LÚ©ï·Ür‹·ØÀJã±ÇóZVññ¿}ÜqÇy-¦ø½¤ß?ùÉOܵ×^[ˆ@×ÕðCK-m´çž{º1cÆx—TÖ6´Ñ¢ÃYÅž}öÙÌÇù(šÅGÄq‘°ÊOɾ}ûV<;y›§êOuÌÕ•,>Úb„ÛCÖÀ &´½™pe=öp§žzjÂŽ_ºæšküZÅÞÆ¬4(vÅ5¸Ñ·@ëÕjDs|Ê”)Õn7t½³ÖTf{ >YÇÓL´qÑEMs+æímÄjÁÆ¢dž]~ùå~î²ß çn3ÊoE­ßj˜~öÙgnܸqÆ £jyì~G>µii·ò! „@úà#ýc¤ !Ð$pa5þ|_î†üqi)yAȇ~è… Ûl³7»'›üiÓ¦5M¨ðå—_Ö F}ÐA9‚0Ã0ºóÎ;}Öüqˆ,B*ß|°w‡E_òLµð[k­µ\ÿþýÝÅ_ÜawÍÂnÆŒîž{î)c¤}é8@~òÉ'Þ ãË}\w 4Èá¦$‰8pÆ™a¬sÏ=·C±>’ÊMª?ë×,ÎG¤éñÇ¥BV‰÷s¡(®®þñx ®7ps²:ŽjwcHð‘Œ{à!E–^Xh{†©S§úÛá³Yд+|Ëlï;.ë%Öq”jœ±cÇÖJR×=ÞõĺýöÛ=NíÕ[W¡)O„û#\œ­¿þúnÈ!™ˆé‚H½DÿØëm´ÑFÞ­[½ùª¥kdîV+#ë×q5¦¸`ýÃþPîïž×$ŠçAÀÉœC¨9}úôòßSO=宿þúr¼Ëxàò}KËž%4‘B@V >§Ÿ­è¥ÊB ð°yÇ×µ ð׌qH‹/¾¸»÷Þ{ÝèÑ£=f5‡€m·ÝÖá×¹³DÆ|à`ß)—ÀËÔm‡ŒwÜÑýñlÃÄÇÿnä†ËÇ"A“Ý,RØÌŽ|ëbQWª†8rhJ Mœ8±léqþù绑#GVø<¦½Ì)kŒª!´ ×^{íº´ÚÍêƒXÄùío«XU&Ï98#"ÎGäÖ¦.Œ«×­—Íâ£(ÁÍ-¾‡›wë´ëöÊ%øH!ÁDDˆÖ¥±ÁX7î¾ûnÿ;ræã@øüZÄ-<¢Yûx‡EîýÉ~&‰`„³_ú¢¦x¼¬fX{ÄËLûoðß}÷Ýý_ÚÛÚ‘ö!ügÿÞ,²¹Ëܬ5w›U_ˉÜL%b &vö‰ã“”ežM7Ý´MíýÍ µÄ¢<‘B@®B@‚®BZõ!Э`Ñùõmˆ|Â:‚W#´ Šà£ƒ‘yä/Ú3°¶0-»¸&Ú‹h>üðÃeÍü×_Ý'7[Gq„{ÿý÷}“°^Àü¾V O4£zކ– ?ØNÐP4±Ì:„O.|bá2sæLÏHXyå•ÝÖ[o]au„G½}´¼¤§¯0,Ð̃óâ‹/ºÁƒ{¦~x°_Ño½õ–Ç,`ÚÐÿ0]=ø!Ðb 8LÅñ·¶!\ºõÖ[Ë®sÐpÛ~ûí®¤â^Œ}Øh³4·¸%ãðG?CÂ¥’ ذâ©f¾O»í¶›`Zë`b8R.ßͦ‘Væ`èxà¾,êÅuÖÆoì`„To¹ä¡ÿ0ž~úi/ ¤ ôÍû,Xb=ðä“Oº#F”­ºB|²ðÝE±ø@[›gÀæñç, ã¥66 ¶ #›wQÚÝ 5§×µKá] >î»ï¾6BJ0·Rhÿã"Ñ, YÐv7ÆoXïÖ1Þÿ<{Q\Ϭ$€pH¬Íì«þö·¿•/óÌòžB‘$N”ËøÑ†(>™Wˆ§ÁýP‡Ä¯A¤­‡X“Ù±F£<Â|Ùpà }ÿjY{Ðvò™U û”HØWU{ß0÷è•é{K\|QïµÖǤv²6U –Ž›?öìáñAûG0Žb}yMý¤¶š%C¨0bX‚1mGŸûŒ/ýÞl³ÍÚ´Ÿ÷/ã@¿Ø³ð›=Œÿzë­çèƒõ;l#{ÜË¢ÐÑLbîÓp Ϭ;ð1FÖnöKážš¶³Ž‚Ä\ç®õ§™ínuY6VÌæ)81WØgƒ×rË-çIçæéÉ ¦¼km¾ÒnÀsÍó >ñ<Õúǘ„ÄïjøÒNÚ{×]wù,´…ý,‚ÛøX‡eVûÎû€±¦_´7Þw0ÃóÀ0ãyäÙJz®˜'œ :‚qµ6êºB@tÑâ#B@ähc[Š„>ÞOúÓRä+¼fŸ#-ýÒ!‡R:ùä“Û96Ê¥ˆÑ\ŠŒ¾¼èU]ñŒ~ÅW”"æzEËm¶}ù‘Û¡òýè@Yw¾H³¯@;”"!ˆïWdQPŠ ¾ÌÈê möËå[Ý|Þ|óÍ¥è€Ó‹FûH×]w])^øz"¦IEùê ۶Ǿ_uÕUå Ýíá”J‘F¿¯7:h· nÞ^@û°mDX'cDàEk[ø¹[(1·BŠ¥èPäÓÏž=»Mpò0m$Œ*í¿ÿþ>hoÄ´ñÁ›£ÃWb]\åì·Ýv[)bZ%¦¥©$(ÖJõ–¹[+E‡ÛÄr)ƒ”Ì,Qd=åŸW‚G‡Ö,5½¢­>ú¨Æ!b\VÜËãÞÕs«tÎ9ç”"æE»¨>Õ@$$/¿"f9êK’åàæW_}uÞ÷I1ú|@oîÿýï÷IöÚk¯RÄÀöy#¥ƒ6Ù"e…ŠrÃõŽ|ï½÷^9Oäf11mÄ”÷AµY'^}õUŸ&*”"æºÿÎúÈ:™D¬q¶V‘ÎöF\c )Rñë\ØÆø÷¤º(Ç‚kÇÓó›u•õÕ(b—ÛYŸ•~õ«_UíwR°éöÚ1’K‘ÕªUç?­ÎˆÙ[Š\%öqIm5¬-3ïIK¿Ç|øóŸÿœXeÇÓ³W³@éìw£xå± ÛÂØD R|NZî‡ën8/ö*õ’á1ÎÛšg¿CYVoøÉü‹âÛøjÂ~…iøÇ ÞvuUºøøÚ| ûÄ~•}k¼oüf>qn‰÷÷l,x-hx¼ ÊfÏ–ÿni)‹½zü9&=×87Äë³ßÌ¡ÈÍoEÑÌ©3Î8Ã牗 qJ‘¢K¹¼¤~/X° ÄÃê?“ê qi㊆ë‡B@t9•jªÑ_$„€È#XA˜†þeÏ>ûlW+PêE]䃅F›j¯åf˜D6¯ÿ§?ý©ì–ÊîÙ'ÑwÝuW1ìRÕO´-±±¾X; •@ªæ o ñiLh!E«HxÛ?öØc½Vb›Ñ,ð¿k.¶HÓŒ>WWI„õ}Fû B+M°ÏÄ-¹ÿþû½–ZRv ül\¹†% Z€Fo¾ù¦×ˆ ÛBšÐ¢„ñÂ<Þ¼y–ÍkÁZ¹7«šr‚ÿ~Ac2Ò”-2¸L,oŸ>}|Ü0M"4Ù"f#–Kt*çKJÆäÀÊc¿ýöó­–6:°ÛWÿ‰;Ü<1/jQX.Ú±Xv`cËíŠ~ÞR \“æšåIÛ'©Œ9h:g•˜[½/²ÚzÛ1LdñQ/X9N‡†±YÔZ·s A›®a½h„µGaqÉ»‚5Ñ\`áMnÞ߬O!ÝtÓMÞ:3¼ÆÚlÄ»³gÏžeëT»ÿdýcm‰=Øðáýeë!ë“Y%„éX¯XgÐî>ꨣ¼hxß¾“Ílʨ“¶²^…D9{ï½wùucù‡¥‚yÃ|´‹õ•uÖˆ4¬±h½_rÉ%v¹â Ê ×ÆzÚÉážêù矯(h«ÿîw¿sìã’ˆ:Ûj{ ³8ËÞú'|•‹aÏÅúoDY,ùÇ‘=âo~ó?6–Þ>/ö¡p€]ªøä>ÑÍ$Ú¶œÙïØ| o3¼<®X3DŠ>>îI­v„}®•Ž=.Výs­ô­¾¶›ý*ûÖ$b>±·ž4iR›Û¼'Ø×¢°ÒÕ“§VyÜcl°ˆçÜ`Ä~-l s—®Ûm·%©úIy<ãìû ÖbaIfÄÞË0΃ID}¸=ÆjÛ(ì{G1¶²ô)„€]‹@}œµ®m“jB@4e!cf7›^Lð#mbï*Ò˜j·^‘–P9›k6Ùt1Í6Wl¦q¡À!#²ñ&÷aPr˜åœЈi·”)?ÎÀ.W–ð…ƒ? 7”•D‘V“?ÌRýÄ5. „ aŸ:ÒǤ:¹Fßzè!G€o˜¸…€yb‡tðÃÍŒ°"‡Ósíá :8ü–” -ÀšÃ B„.¸ñ0*‘Vª‹4bË®ÈÈ'\†€/ ˜0T óÎ;¯‚™Y •±å>L ÚS€>Õb¼3GaìуË\uÙÜàhL£Í7ßÜ3õéîœÌ]usxãz=åÒ®ý÷ß¿\î 'œà™f\g®†æmÌ ­¾úê^ żÃUÏlÉ„j´?Ne±/íµ™ç€yÏóŒ»ð9o/¯îçó/ÁÇ·c óy'‘¹¹b 2ÁQR:®±GñåÛ0ÛYë¸c>€ ü€`„“†´F0ƒÉƒÛÍ8á†òøã÷—Y—P€‰õÕ˜“0ìYûaÆÇ‰w®AYß Þ‹ì¨—õŠ}†1Åyç[:Ò²nY˜«ôæ5ùøÃåÄû5d²R§­Ëôã /ôk+ý·8*ä£>öP{í¤](É@IxøÿýÇ~…öo¼ÿÙ¯Ñ\OÕ"憹€ëSòáŠñ¬X|v¾ã*‰`ü"ÀûxHÏ>lúCܺlÏ^ëÌwW0§ü¦ (o°ŸœŽcÉÞ "ß™'t’ï7ûˆ}g­¹ëý÷cÀžA^ !“Š˜¦µié`´ØœAK—€ÝàŠ¾r7Á–,|Û+—yoŒ æ.ÖD¦µË'^æm‡Œ)mmJó'sŒñcŽ™°2Íí­Ö6ž#Æ`#ïŠje¦õ:<æ8ïI|“[¿ÓÚ^µ«µHðQ‰¯1}¹ É-ïÖyˆw?ŒÎðïÔSOõûK¿ï¾ûÚWw饗:îÛþ€÷?{™PøóÛÖfÛóP±³,_¹Àÿ~a"ÄÚ LìV¶e°Þ$ Øy/3’w"L|[ÛYëæÌ™S¶Òd}e_±N£Yñ>!OäVƒ#¿!ðãpmçš•3•õ„vßcÊ”)>÷M‹¼V;IÌÞ %ÈÊõ?bÿXËaƲWe,m=c_ÑÆÈ b,WåOÒ€ ý&žû#ÆF·Q8·ìŸ´—2Ø£Ñ4êMp@¹ì=Øw1OÀfóH)Ãî3.ìZAôÍâÌ Àˆ\•úú©‹ñao‚"Æô\§¶ß¤?µænØnò£ØdX†÷ÒòkÆŠ1±¹nBEÆ‚çŠÏj>ìwÍ¢œ=hµ¸Õʨç:ïÐ2ii'õCÌ÷vØ¡,ü@ðÍ^=‰èO(ô`¾2ÿÎ:ë¬rrÒ°'&N¡0‡gÅ0{.yï±N¢ÎbœT¦® ! „@kà£5¸ªT! Rˆ‡Z6¸0›1‰·uØTW^y¥?(Á(E ÈáÚ@eØAÛîó¹å–[:4”ÍÆÚïa¾sp⃟ïFM Âïf®¬Œi–ÇA†"d*›ÕG45app Æ?4Ç jÖ*–†·Æ8´p`K¢¿¤û\ã°ƒ¶Ä!&dÎø‹Ñ?„¬Œ¬nûÍ' ‡$ü8LÇÛoù`" ,áU-  4Û8P"2A†•aŸILv–"_Ëþ`JÐZæ ´äÐQ- Ëe.Òòðœ0~qa e1gÌ"‡ï0k²Bæî*Ë‚`öLð®²wHVÆ ‘v"øàyD¨Wíj¤<¥Í6&h­³Ý£Ž·žçbv¤Ín $ìï,!˜´X †¶±Z€HK0hˆ²Ž8âÿ=þ/t©eZØñ4ÕÖê@°Îž€½}€1kÂvîÃdd]bíÙ?²>¬F”±Ë.»ø}Ê ¬ÅFì¹XûÃõÔChp3Æ'E¹À–—OÞ±Q, ¯ €ÕH|ŸÈ»hçw³x!ViqªÕNÒÒg´ï¬öÛ>ÁËÜ(Û4øÃëÕ¾ÛºA¸a 5àÉCÝ`‡@ý…^hS ë¾ wì&ؘà€û&4Jºo×Zõ ÃÂR'Š!W!dA¨±y$„aÍäýaÖ@a[À¥ÚÜ Óñ¹ËY‚r±&Mayξ5iî†ÏJ#ínŸFÊen‚ öè&pË`Î^=$Æ $„ªÌO³ô`>óŽÃ²'$Îpœs ÖÞcqœx 6Ì ú(—³ý©‡åë»B@4JŽTsËViB@Ô!Àá×üqÈáà9~ðÑ»> ¹lv9ಙfƒüPä²ÉüùšÌæpCÌo•¶)ïUcĈÞ5‡~Ö›m¶Y"Ó9)=壥•ÄÄÆD›Ã3h_6«øÇ6+°Ýào¸À'3‚\OabcÐLÆ.L‰jÌS„1Œ?cË¡ßÆÎÚZ(±ëí}"Cã–?˜h¥bpÂúhepPG˜“×v/铲ùc#`áÐà A>Æ9¬5BŒ…Í%¾s04‡•ÃaMJæÁ°²<–&ÍŸ™ïÌ9úZÕ¤¹ÝaÛg›‹E±ø€±gL„˜è{10á³\]}«ÅÞ§OŸ²ðMzs³i³aÖ¬Yöµê§½ãCæ;ßqÛ'Þÿ&(áž)ÄÓµ÷›rpÉš‡k+öWÄà`MD âg®—ª•ÇzŽ¢ kÌÓW^yÅï#òDÉ+²±¦Å‰w Ɖ½Šüʼn†m °"Ñz‚¿‡ùùÎX"H€™Ò.0`î¸ãŽª‚ðzi i9„q0çïšÈå‡6ÜR!@3!¾ÆaJÔs8'þ¥ñ‘j¶R—•Ç÷zÉ´n-}èÿØ®eý‡Uܹ!dÛzë­½ÆfÖúÅüÀÍL08úõë—ÉqÊÚ¼J{{%ø¨¡Ð:!D\ðaîc¦Ïœ9³œF{Ø›ñ÷?ÌðV t³T`­;v¬|Àx Ý\ናw\5b]FPÒÈZÅû$4„ŒÓjõį' 'âiÂßig˜ŸïÖÏÏoýS§NõcÂDÛ™ Åö%¸ñŠ{ ÒW£öîWË׌ëìŸQäAÅæíaI\þk¬>I“dñQo;Øo™%û‰$ËïzËjUºî‹Fû„ð“½:ç1öêÕžIÎIìÕCÁGøŒ×‹ „s†¹÷²ûÌaÎ9ï,Æøk”²„q£}Sz! „@à#£ª> !ÐÈ08øþò—¿ôšZñDž0§æPƒU 6Éh@’/NlÒÙ¬W#„ ŒÚ#b>À €ð­}øá‡'¶/©œk¯½¶&s )OÒµjÖÍê£ÕÉ8Kæ³8d×WàŽK‡Îjõr(©—Ð5m/Ƴ£B(êƒAA\Th±†qTÂöÀ¼FÓìg?û™7©Ç=̈zÚÍ\„ g†p˜W˜`øðF›­žòÂvÙw4Lk1¨›ñª5ÿ­¬´|rpæùÆ] î®Ð´ç.-m¬§&¤Ì»àãµ×^óB=4@«1CêÁKiò€•ã2ý°Ð‹»§2Á‡YXZîzëÄ:ˆ¯/–ŸOöD[l±Ex©¡ïhv›õ¹»bB(dì_ÃÍÁ,Å’2ÞgÞ¼Ùw{ì±q+ÈÇûÞêåw«)©ì/Øóá  YkþóŸ·º)¾|æÌ[o½å͸tµ ÎV9û cŽ9Æ»Â*%KÄ^dÏ=÷t;í´“w_„RI(äbß„Õ-ÐXV³çìQÖTÌ¥VļèH›²œ§Þ=*s“½:Ä3”´÷ä¹ç¹âìÆœôXUÅÝd…xQçœjD]µ©†® ! ²@uŽ]6Ú¯V ! êB€C0‚7WkÑÑG]fÐûÀ4-ŒSLÉ›Á8Ý<ò=Œ7Äákbo$mì­~>9€Mœ8±lŽ}Á”ý-‡éª1ò9”áfDHÍì#årÀaLèÆøÛ†IZ‡%)ø2Æ"æÝwßõŒ’je>÷Üse+ Ü#tfL™cø+FÁÁ ÷aµúƒû%«¦OÜVR›ñ£Ž ñô™`§X0u†)#¦^Ë“¤ö¥ùŸ9µ8õ&ÓÖ—<Óã´õ)Þžž]Þ>쉧Óïâ ÁGåXc!hŒ@Þùq!@5ÁÇèÑ£+ ŠýBè‘ã!–¬S?Ùï ø‡ñr Âhžwˆwr’›©°B,T¬¿¤?õÔS½»bjCŒ½nœ¨#$Þ'¸AªE¤ÁuÖì(† ‚”:JIí$ÎJÈD­%`êh½µòQ7 û‹/¾Øÿ±Ž `o† €}%}G equj•—¶{Ì­}÷Ý×ÿÑödĹ;å”S|SQ Á*¤£‚,>ˆ?Ž0ÄEC€ç—½:VìÕ³ðù°ÒÙ°W‡Ø°WÝíñ{òäÉnà 7ôVdXù˜û+ÜÁ&•‰ÀÁHç¹á¢O! „€¨ïÕ—L©„€ÙF€µ1ö9´´Ç`fnfýÛl³w€&™Å€©`ñ>âÈÀà°Lœ còÇÓ„¿)†¬1añµ*Ç2nAü(#\ü°îCC† ±ËÞ W?qBшx[ÕÞë¬ X+ð‡»½ŽŒK,ÌK,LÁ³Þž+¢p}B±a #·ß~»W"! q{ÖÐИõ¥2ì§øcÐQŠ·ó„N¨x—s_¥£õ´—zØ70n¬ß|7b=!3 àÓO?Ý.gꓽ8±<Øû`õaÄ\êÛ·¯W°é¬±•ɼ1‹46·vf哹É^âœbÐxûyO°W7²ýªý¶ (µaÕoDü#ÎFœ·8ç@ÌÛ}ûDh‚µÜšk®éÚ[} ! „@zà#½c£– !ÐD8ØáêBð£Úáž ï¸qãÊg6Êl² :n–hÇ%üÙD?üðÃî7Þp>ø`Ù…R¼+Xs„w‚††>ºÙp›…JÆÛ#³æ–öÐC-Çþ0—>v/üŒãÞ³ïv̇á8¤;í´ÓÊ£C9¤œÞÊhôÆ‚+Œ0æF+©,4[« Ð,½õÁ~3? Gê°ïÜGp²Ï>û”…h–'é3,טMÆ`ÆHhUbù‰Q‚Pf ѰnK“æOY0ÝÐèEãÓHins¼mf­fÌ‚øý<üæýÌØÀȲÌyè—úÐqL+—÷ežç~½±Ÿa½4Bá˜xÄ!öÄ1ƒxoÇ üèïý>A o„öI„{CÞýöþOJÓž¥ªåa­b/ÊI‰Ã4|¯M¬±XZòÎ0`€wg…€‘­uìqˆa±w²€Ø–Žõ ¡Qè"ÉR,M#ŸñvÆó²†&µ3ž®³¿é{ÆþýáhS$s¡HwOGëf?Kì8”1°ÐNVµ7ŽìÛê™»³XŸØGT ÄÝÑ~¤9_½ø4ÚÆÞìÑCÁ••…‚{uˆý{uÛg[>m?J¼Î_ÏV`« ;çðr9ËÅ÷¼Oˆ%‚å3U³¬#H! ²‰€Ù7µZ X#¦0õ‡)Í«JšØ\£ÅešE˜BÃà@„Y;Úcv8‚¡€/YB¼Æï¶ß~û2ƒýºë®ó±¬Nê±9ŒeL»)S× v¤~êåP ƒ¶á~`Ê”)ÞšmO˜·± ´n‚«Ï>) Á‡y˜F”EÙ&Xá †e3úhu&}¢™VÀ‹>pèàP‚f1@ìÐ s | ³Zø%ÕGðo³Ð´ý‰ßB}ÔAýÄã0áѨQ£*æHR™í]ãpoi!Âôþoû›wMÄ<ù€Ovg]tQ™‰C€QcòZŸ©qã>p¹Ë¡BS–Xô —ŠÅ½–Í+ÒÀð2 §Zå†õs¤³BC”yÂ'e0_˜C&(¡ž,Ð2Ë,SöËmÐî°fñ‘gWW¼—y¯*¾G8òÅþn $Ä.":qÖø¸7«(X;vØa‡š~ìÁî¯ýkB\gá>Ê‚ì=X»Y» ÞýüÁ\4bÍc`­«EìŽ?þøŠ$CBaNÅÍà‡­¯\bOƒÖ¬¿¬‰0ðaZÁôgÍgÝ4a ëk*Þy—²F‚¹¶¢}µ€ÛÉšÌú ¦`ƒ{)ö—Ií ×iëCg>C¡˜+®¸Âa1lãË5˜Ãp€¯†ô=zôèL•uç¥ `ÒMµ?nÌíjsŠqÇšb¬ø™U‹3ñÔ ö¹XUCܳ=󣞹Ë\GxFywuâÃ~e+ž™jãàAmð{töêår¦"ûrêç]˺n¸Á§áÇ^½1ƸålaEÂsOyXþ³‡¶¸œƒ°*E¡ÂBäÄOô DüfÝá,'B@Œ#-"! „@!ˆ|;—"f3¾yêþ‹\!”¢ƒYŸèTŠ˜¾íæ4˜JQpér>¾D.$J‘K‰Š¼‘VR):p—ÓÝ|óÍ¥ˆ9[‘¦V{£}):”óÛ—m·Ý¶mðë*‡vELFËZêh£ÃA)Ò(õuFš§ý²Â£8$¥H¸SW»¬ß†Q5ü¢k):¸ø2£ÃL):˜Yu%ƯW¯^íÖwÕUWù~[Æzúb “,«ÿŒ´oKÑá«Ýz­Ñ¡½1p*ʈãÄïèP_Š( chy© Z¹Ü‹ü"—"&B»íNšsäÏEL²RÄ`+í²Ë.¥ˆ‰‘…&W´1úöG®ô*ælE¢Œÿ1b„E Ž6ÏEÆ»¦æwH¸ïßM>úh'Jù.k/É—10¿»˜±oC²Ý÷µ­3|Þxã¥ÈÍ”Ïsî¹çVô6v×UkPH‘›¤Š|‘p¶ äýÞ)Rðð÷"AB)²l ³ù=RØ6Ö¦è[sÊççžíSX+Y3üí}·6QFdíW3o$äñûÊþùç½pÂb~°éfÃnÌÏxûÍÁŸÇ¸o˜ 8 FZWÞUE¤íäM»9·×ÖŽöÑÚQí÷¸³¡}¢p ¸NàÃ!Ïf”W/~ñºaú 0`ìqÙŽüÙ!8ž¾Y¿ Ìá“yÂÁ>ô¹ÚÛêf‰ \áaÓîãÎÃåÂlá°fX!Áe ãý /xnv¯½r)¬(Ÿ1 \æP­C¦µ)íŸà㋃0B1¾.io;í‹4}°MÞ ¸¾‹3/³Ð‡Zmdn°€‰–øCÌ‘Ød“M<ó &¿Ãî *‘õƒ÷)Ï:èº3ewWÞÉ“'—ã<ÝqÇþYb½ah„XŸyÿüçýiT·[k3ÌaÖªV¯«ô7E‘u˜ⲊØgýúõ«h'ÛgÄƼkˆs† ~ò.E¸ÖÞ¾¨--‚j”Xk¨ @8&µÚie4ëÓö¿¸…Š,%<><0¸³´&áÁ˜âŠŠ¹;þ|¿_d\ywÄ•‘ÂüõÌ]„~¸Uƒ™Nì¶×Nèh V#îWc²×‹_¼lSüu5!H‹Q­· Œ[œYæEQMÑø011c†;rñÅ—1m¯\ê€1SM[3lCÖ¾s¨…¹#Š80|j ÓÖ?4¼¿¼Z|ƒ& Ä;«LÈ´©ÚSfñaþØëËU¬T&À!^–£%„%ü5B]›©ÃÒ²¯A8¹âñëñ3bÇ©–`˜÷(BþZM¼· TµšZí¬š©ƒ7lÿÛÁì©ÎƘ¢€Ä_#TÏÜE¨‡ð A|£ÏF#mIcZ„u]AÌÍ®Ü{2_r H"B@ü"оJs~û®ž ! „€È-hÝ¢È-`,Ðn9‡ËØUEÃ0K”wÁŒ%˜š0®˜ 0f¦\]UŸQ|-3ïŒ<4УXþ]1`À7lذê èŽh¡«+&DB@! „@6à#ã¤V ! „€h¬>VYeïî! dëý³7\H3Xœ,>$øH×GA‘½»\ÖÈÅUºÆ¦»[#ÁGí€1Kì"(Ï‚³ö¸í¶Û¼µÇÉ'Ÿ,ií©¡»M@wXÄa]"þ”H! „€È|dcœÔJ! „@CÏ&ˆ¨ØÈê#yüMðuñ^²D߇%y$Ü×ÀØT`ó<Žnçú$ÁGmü¦OŸîÝÄÁ˜r=¼êœEEàÑGu?þ¸ã“@Á¢â" «¶c› 01xN²dõA»!‚~æÑu‚˜L²øh;o‹~E‚Ú3ÀÜ\m°ÁŽø\y$Y{äqTÓß'æÝ¬Y³¼Ð¡|µtéï‰Z(„€B xHðQ¼1W…€(K,±„Ûh£¼»‹z‚6’ÂvQVm‡èM6ÙÄÇùÈš»+‹ññŸÿüÇ}öÙgm;—ñ+o½õ–H˜Mn¾7WŒd`Qt€† ’œ We푃AÌ`Æ[`s¹¹ÊàªÉB@!Ph$ø(ôð«óB@!PdõÑv”7ÞxãL87Á=úÿïÿåÊê†öûï¿ïû„àC1>ÚÎÛ"_1‹¬˜û¢Jžzê)!¯ñ=âÖ't’b{TNýj>°FD/ÁG‹@V±B@! Z„€-VÅ ! „€H ²úh;ç㥗^ÊTÐ÷< >,°9Vj¸è[h¡…Úœ®|€¬>*§ÁÌ™3˘ðnË#Å­=¶Þzë*·øh£›K°ÊÙþ%kl_Ö[kÉwß}WYHµ_!  ‰€…vuZ! І€¬>*Gê Aƒ¼!kq>–Zj)o ‘GÁ(˜·ŠïQ9_õë[ÌêC‚Êa‚¼º¹’µGåxëW×!€ÐíÕW_u?P:èÝ»w×U®š„€B@N# ÁG§!TB@! ²€¬>*ÇÉÜ]eMðaî®þýïç*ƇY|ôëׯlÕR9búUtLð±`Á‚¢CQÑÿ<6—µGÅPëG#`ÍÆ÷íÛ×ýïÿþo·@Õ ! „€A@‚Π§¼B@! 2„€¬>*ËÏ<óLf\]Ñ|äÍâÃb|Èâ£ržê×w˜'Y||‡É{ï½çÞzë-!²öøn¬õ­ëP`ó®Ç\5 ! „€h&|4M•%„€B åÈêã»2WW}ô‘{ùå—šÅY Ó8Åâ#/ôÕW_¹¹sçz Y|äeT›ß³øàã;lzè!ÿ£Gn•UVùîF¾ÉÚ#ƒ˜ñ.0gÍšå­Ê‹„€B@l! ÁG¶ÆK­B@!Ð)B«n¸Á½óÎ;¹r—Ô80 ×^{mO"Kî®òhñc ê -´ëÓ§b|42‘ ”V‚¶ƒmñ=6ß|ó¶73~EÖÀ4ß\]ßC‚ ¨º „€…C@‚ ¹:,„€(>ø #vÀ7ß|S¬Ž×è­Y}ÀT:ï¼óŸE%sw•%Áòäêêÿø‡·¸Yyå•Ýb‹-VÔé¨~·ƒ€m2ÁGÞÜ\¡iû»Ûn»Íýð‡?t't’ïµE ;WJ¥’›7ož›0a‚ûôÓO³Óð·ÁÇœ9s¼0^‚ú&{“»îºËåÉ*µ¾ž+•B@¤ >Ò8*j“B@4´ÈGŒá6ÜpC—%ÆvS:_£ÐêcòäÉ…¶ú0ÁG–â|˜ÅGž‚›[|ÕV[MÖ5žÝ¢ß’à£r|þùçÞMWó&ø@ ÖYgyè€ÜÖ[o]Ùù þÂ¥ßØ±cÝQGåÆŸÁ«ÉæjíË/¿ôëÖˆ¢Ú|òÉ'îøãw(ØŒ7®vbÝB@!ÐHðÑ « ! „€è8¤âóæÐ¡‡êµöи9(›¢[}˜àcöìÙîí·ß΄Û/|äÉâ«,˜LŠï¡·S-ܼ¬=°f\tÑEÝzë­Wy3ÿòhíÁp`©·ôÒKû1›>}z†G¨M77WŒÛ +¬à–Yf™bt¼½üàƒÜ7ÞèP°YsÍ5;Q’² ! „€h|4G•"„Û?¬ê@IDAT€)D`‘Eñ.%z÷îíƒS{ì±îÃ?LaK»¾I²úøó•VZÉÁL…±ñÄOdÂ%Z^0™p%ò½ïi{Úõo„lÔh³?ûì³l4º…­47W›nº©[xá…[XS×@þì³ÏΕµ'bÝu×õýzùå—»TÕÖ0àpèøõAÇ;yÊ”)îã?v={ötÛo¿}}•J! „@ Ðɲ…àªh! ò… 7ß|Ó¡þî»ï:˜ti&Ú˜•¶¶Ç5ÖXÛۣ©wûí·»K.¹ÄÇFheY)[±>¾©!C†¸ïÿû™q‡–7ÁVX¼«dñ‘•7G÷µÓ´à_ÿúW÷5$%5›à#On®ÌÚãÖ[oÍMl›.&øàs+CQz0‹ >ê#¬P¯¿þz·øâ‹»=öØÃÖ—³µ©°Š³óîæšAV&Ïð‚ ê*’çW`´¥ÖŸ•™d¡–Á™Tñ ë‚^‰„€(8||¨ûB@Ô)‡êúöíëÖ^{m ²þÜ]›ÆŒ,´µ+Ùi§¼Om‚Bã3üoû›kÖá§+Úߪ:dõñ-²æî*+q`òÜü­·Þòîè ‚›Ëâ£UO|öËEèG k¨è‚˜²Ä&‚ò$øÈ«µã„e!†ü1~²ú•ô{i,>X“ؼö8ýç?ÿq/¾ø¢ÿã=à#-ôÎ;ïøóÖ߃nJ³¬Lö,Æ kS&s‡¿ {î¹¾-œÏªýõ‰Üô.·Ürn©¥–j (,ƒ3éœ9sÂ*ô]! à#]B@$!€F8‡V_¿h€¥•¬im_w´ëÄOô‡°Gq„{õÕWSoµÓ8ÉêÃ9|Ìš5Ë}úé§]{§êțŌ%¸ÆXvÙeËïÙN¤Ì¹EÀ¬>Š.ø@èkö"Íbæu÷¤á=ðÚk¯¹ê»¶Á8„¡y <[{ØøÀ%½,> ‘t~²À‘ý> 3há‹’à<„ zêÔ©þ]´Ï>û$'ìæ«´“ñlS‰3Bž?üáå"©ãË/¿,ÿ®öe±Ås‡~¸Ÿc(Øß+¯¼â®½öZÇbÎ;×Mš4Éÿæ,ƒ@eÀ€ŽØNš—ýB@ÔD@‚šðè¦B › tÏ=÷¸^xÁí»ï¾e× ÙìMóZ6ù•W^ézõêåž~úiwòÉ'»>ú¨yd´¤¢[}ÀˆÚd“M|œ,87‹/¾ø"õØz ³ø@ðÁXˆ„@-dññ-:y‹ï·ö=zt.­¿xÇà\µžòî¿Ç|dmb?5"®‡DÉà~éÆoô ÿW\ÑmµÕVÉ stuùå—÷g¬¿ÿýïnË-·,÷ŒùbîùŽ "‰~ðƒ¸7ÞØõ‰jì}ìWÊœÛyä·÷Þ{û¬k8»@”Íýçž{Îc.× ýB@ÔD ùM\3‹n ! „@gÀµn>ÿüs_ CÛo¿½÷åZ«\̧aÊb½Ap<Îì†8@CᛀwøÜeã鹚HÄ·`ÓÍšïÓ§Ow3gÎôùñc¡Îô¥Z;t]!$øÈÃ(ªB@dÜ+ašL@¼$‚Ï&wÉ%—lsÍG\Vq¸ m 6ÔlŒ¹÷æ›oú`ylŠW]uUï›·8˜N£…Åõ5×\Ó_§>‚òzꩉV>ø 2dH…0%¬;ËßGŒáµ¥&NœèN8áï‹x‹-¶p˜®•8¬b®?cÆ wÞy繋.º¨¬µVL,ÎÁ99¼ò\¥•,¸9íCÓÒÃimo{íâ½…v­\]µ‡”ÎÈbœðîÊ:Å­=N:é¤Ü Þa’Ô6ŒJ”a6ß|ó¬aîÚo‚ÆK‚êÃË~顇rÿüç?ý9c÷Ýw¯ž8ewxŒ;Ö}öÙ ÜIýä'?iÓJ„;í´“·°°›³gÏöÏ1ó+ ,ð¬,KÃ;WX”VçPüLÂ^³Þ…^èÆŒS.—³\gúÒH›”V!Eäê*‹£¦6 !9`ìaÙ =°ZhŒ?Þûk7o^Eÿ¶Ûn;wþùç·zÇ„ ïY!Õ±SßQG•(ô /›ÿ°½V^^>9è ØA[ëÐCõ^0_ŠJfõuVŒ=‡¬¢Æn±ˆ"h0L´’Y|Ð>|¤µ­íµë½÷Þsï¿ÿ¾ŸkruÕZº|8Ïd ž™<¸à)еc±÷[guÊ‚o¯êš0WW²ø¨=*ìA®¿þz´+­f¯]ksîb)aÁƉ£‘$ô &,ãï¿ÿþrœ°væG{}ë óÖúÎü[á /|ÆÉ¬kÂ::Ú—xÙú-„€È mßžyé™ú!„€Hl¦ÙˆBm´‘ÿc3hbMX°ÖW_}Õá/&t÷Ýw{&,é ¸¶){ÅWx÷XÕ6Ã>Cô- Z l,?K´ÝC& –"˜zç‘`ðã3÷:ŒÅÈ‘#=6}­·OEŽõÁá— Ábq!ƒ@,­„€†vBí=ßi탵 -Qøô ­HsÙ`÷õ)â˜à£ÈÁÍ-°9Âû¬Ï?î`pŠûÍ<[{ØXñþV€sC#ŸÌK‚›Ãl^c5ÒÙÈnnÍ™3Ç=ðÀ©jÞLìC8Ð7ÎmœÙ \ c 'ÎNìÃ8‹ýþ÷¿wX÷s®‚ˆ sß}÷y+{;çYþPPa×ì“2q·eïw,?°Öo”íK£å+½B +Hð‘•‘R;…€È,˜?› ­ ÷×6ˆ3î­¡Îö¥‘º”V!vã#í#¤ö !yÎ:묲;©«®ºÊ3ÙãBøÆ³k´YÍÝÎOúSïC6tEÚ-·Ü²SqˆuÛœþ¶%¼—ÇïÄö †Ê)§œâãZàòÅhž‘ŠëƒÃ&ÏØ³Ï>[~öÒ:ÌÝUÖX|ðžS|´Î´ôµË,>°~$8¬¹*I_K[Ó"ÜÃá>Ê:£‘½NѬ=7³ø ÿhvãb±¨{ðH±&Øâýbµ³»Ûóé§Ÿº[n¹ÅŸ#öÛo¿Dw·±Þú. R ÈXk­µù´jÖÃXò£dÃ_-BˆrÁ”•ãj¥µ{­è‹•­O! „@ÅGGMmB ³ÀÜ«¦ÕŒpþ03C­¢Í7ß¼|/ÞùC9Ä›Xǯ·÷›|µ¶´—7o÷±¬Ùyç½ÀgÔ¨Q>ðyµÃJÞúïO‘­>úÁÂUnÞÂg0ŽSwÿΓàœq9ö"!Ð!²ˆî®~øaQ=¼–u{x¥ù~­=Þuht³ÃèŒ3ÒL@%Œm§BçiÓ¦y˘¥—^Ú >¼m¢ ]Aá‹=`Zˆöì²Ë.~/ºë®»6Ô¬´õ¥¡Æ+±B HðÑPU¤BÀ@Û-!4{0¶ tv?üÜvÛmËš«>Є¶ØDª¼[l±ª÷Âòãß³ ÞŸÎü[‚½ã-b‚ã·˜ñ+"…±>Î?ÿü\»; ÇF"A4þÒçc‰%–ðM7Wa?²ôÝ,>`Æ5-³ÔµµëÀ—:1š "º»27W›m¶Y×Þ‚šxÑÚàd_‡‹?˜ì/½ô’]Ög `nbñàCn®’„sʤI“gŸÿüçe÷Nɩӵ–uF+Z¿ÔRKùXÔÿcþ!ÆšÆ\;6Ò†®îK#mSZ! „@w ÁGw ®:…€( l>ë¥Gy¤Ì`ÆÝ&äl~¡–=ñò`Ô7RO<¿~‹Ì´‰':üâΜ9Ó{ì±^ó¿ˆø„V×_½ôX”9fq>Ò.ø0‹, 0¿úê+<”¹%‹"¾i:Þg³ú(¢àÛgÝÍUQ­=lÖÃT·8/¿ü²]Ög 0‹„ñ lÞv@°ˆFhùøã{‹s”eDÍC š¢[ójPIB@b! ÁG±Æ[½B ‹àÐd.¥”ˆKƒjôÜsÏ9PÏž=ÝFmT޵qß}÷y_æIy{ì1ï:éž®5†ÜqãÆy͵Ûo¿ÝûûE«­ˆTT«|LŸ>=Õq>LðÁü̪P Z¬Ú8ä÷íÛWE|Ñt°Ï¦[4WW(:“|È!D¯û³ÝÚƒ@ÁŲøèþ9¶€ù9{ölY|„ ßÙw\sÍ5æð€‚»ú*„€B ]Hð‘®ñPk„€È!¡Fö¼yóÝ!ð@0bq%`òÝšwÜq‡ûì³ÏÚ C>s¥Õæ¦.tvÚÉ9Òk±˜¡“ ¤:T`F3ÕêÜÃôxûí·ËÏ`Ú†1/‚L=p—!õ"PT‹Øà&i½õÖ«®Ô¥ÃÚcìØ±Þªuýõ×wÛl³MêÚØê…X™be ê~Øw¿÷Þ{nþüùåX,Ýߪtµ€8h(a)}À¤«qjB@|ÄÑO! „@=°Ù¯×ùè£væÏ=÷LôI~Úi§•Ý*¬œô½zõò´áZžóÃÚ¸ï¾ûº¢i¼Zß[ù9zôh7lØ0¯~øá‡{ü‹È”(¢ÕÇJ+­ä`ªò|§ÙÝU¸Êà¹Â‡ºâ{´ò–¿²‹*ø°ø›nº©ŒÅ‘5kü×#À9餓êÞOe±¿ÕÚl‚î£ØÂûPÔý˜›+Z‚ÈòË/ßýJQ ˜«(c}üñÇÞ:}ûí·OQëÒÕö‘Xv‰„€B {à£{ñWíB@dÇw­öG\d“nñÅ÷=ŪW:¸xáð%Aµ/»ì²²EǨQ£Ü’K.é'žx¢#„Fä9çœã^|ñE‡[¬ 7ÜÐÝvÛm…´Fð€´ðÆdíµ×ö©Ã;Ìkÿµ°ÊT]T«\È0Ò,ø0ák–]]Øœ÷ ‚˜€"!P/E|d9¾‡¬=¾›åìïúôéãÀæÂì»»úÖ°&Y`sö€Z›*G=AÍ9×ì¾ûîåóMeªâþÂbè‹/¾ð`ñå•WVXôõ\!Ð}HðÑ}Ø«f! 2ŽÀSO=åH^íïùçŸwo¼ñ†gìM›6Í[pÐe„Ä’à0µÈ"‹¸cŽ9Æ2çÞUW]åV^yå²öã/ùK/(Yxá…¹íÆŒãp ±Á8b˜k,3øg.²‚KþkµëaºÐÅVx½hß—]vY`Áòæé§ŸöØôÑGEƒÁÑêÃâ|¤Yð‘‹²ø(Ü+¥).¢àƒg…uʪàCÖ•Ó߬>[Åù¨Ä¦»~™Å‡›·¬ÎQ¾â=VìE¥jç)Îu¸L…|œzê©þ‡"œH! º >ºwÕ*„@@øP¯{+ëó‚µ+®¸¢ÝjóùàƒºýöÛÏ»~oÞsÏ=Ž?ž‡„Æ÷ÝwßíöÙgŸ6yÂvbyòƒüÀg ¯:Ô ^Â2ù¾Ì2Ë”5Ü0ñ/²™ö AƒÜ™gžé–^ziÈñúë¯w—-ÑêófÍ* %Ó6æ&øc¥­µÚÓ€8*0BûõëW~çÔÊ£{BÀ(bpógžyÆ[†Â,Çâ3‹$kÊQc,‰Õ³]•Øt×/Ö$Ö~ÆfõÕWï®f¤²^ö×DAÍaîcËÙ&KĈ³“clVõv-þ‰;>\ Ù9Ê>9_qÎ2bÏÌïµÖZË.ùO®‡õq¦\e•U*ÒÔó#,á{A(¼^­œj}©–^×…€yA`¡èàYÊKgÔ! „@Àâãõ×_÷ÖŸ|ò‰?8px¨GÀ`lvÍ'þvÛmçî¿ÿ~ÿFbïÞ½³C¦ÚˆUÎĉ=“vÊ”)n‹-¶È¬õŽÿõ×_{+£3f¸ƒ>Ø]xá…m„m)7­y`BñÍ;×ÝxãÞ]]=ÏgWögêÔ©n=öð‚Jfáa¾+ÛÑѺÞ|óMo½†Û Þ‡¡¥[GËT¾â ðè£:„÷¸[au„x¶ÑXfý%¸tÚiܸqîØcuƒöVˆioo¼}0”yW¡P³ð¦›nrì_ŠLìén½õV·×^{¹¾}ûz+á"㑆¾ÃÜGàÁ{…wÄÏ~ö³44«ÛÛˈ÷$B×E]Ô]}õÕ¦QAÐ n9Ò¶‡l§éº-„€È²øÈÕpª3B@dVXÁm¾ùænË-·t»îº«[guªnˆ:ê(Ï”éß¿¿›7ožOÇæÙ„Ä!Þæçh™K¬,à¥6ž}öÙ^» &Å¡‡êµ0qŠBE³ú@sWð®PSØÌB5 «Þýë_~Ÿ5‹†VïZA_~ù¥·^ßj«­ZY].ÊÆ2+ =r1œê„F@‚ žš.„@þ¸óÎ;}EÜdÝ{ï½þÀa½†ñ¾óÎ;{׎8âÝîë³ypx!@!.yÞyç7räH÷þûï7¯‚ ”T´Xæî*Í‚„0}³h¼ûÚk¯)¾Gžû´6Ñ´&eè‰'žðÝÌ¢àƒý Ïü-·Üâ£G–°3MÞá¸ÅŨÜ]uÿSlcÀš ³º–{Úîom×¶À,`p­´÷Þ{;bDB@! ²€€Y%µQÂ"pþùçû1àbhµÕVóŽáÇ{C°ö€¶ß~{o~îè_ÓXi¥•Ü%—\âc­<ðÀnìØ±WeE¡¢Y}˜àã…^ph*§,ÆnȲ¨ñþüûŽã†Ö³H4‚ÀK,QŽ]UÁÏ‹õÓç6‚Ww§•µGõ0«˜î p^§®¸Ã`ˆUõšk®)æþAçù}øá‡½"Ö¦¸Ù ! „€È |de¤ÔN!  ‰®°ˆ/anmˆrùå—»Ûo¿½Âú¦ˆb{´~ŠÛãÄOô–5]t‘»ãŽ;*Æ¡õ-èÞŠdõ1`ÀÏXŭóÏ>ëµq»ýÊÚMðÁÕ,8—ÅGåxêWã˜ÕÇ‚ Ïœ±Ä4.·Ür™j½¬=jW(øP€óÚXµú.sUÍÛ¢ŒµÇõ×_ï­µ¶Ùf‡Ë^‘B@¬ ÁGVFJíB °œtÒI>Èòµ×^ëvÛm7oÙu x²X|À u ¸¹ÂÅÁYGåž{î9¨¾kjïÞZâVâ²èf© Þ9pà@o€‹⻤‰BÁL‰¬ÁÍa2Éâ#M³*[mùñìl–Ùj}c­Ír|Y{Ôkë®»®®Ëâ£6V­¾kŒ‰öÕߢÍ:=gÎwÿý÷{%,`DB@! ²„€Y-µUÂ"°øâ‹»}÷Ý×ÝtÓMî®»îògu–gÌ*h^×N |r?Þm°ÁŽ ˜;çP˜5ÆsGQ ­>Î;ï¼TºêhßâùÒàœ¸30g ¬ >ˆóÞ{ïùg†¸9Ö8þú-j!`|ÔB©{ïÉÚ£}üyÿà¬Þ~ûm÷é§Ÿ¶ŸI)Z‚‚,¨qu¥ÀæßBÌþbòäÉ^0·êª«º!C†´{*„€B UHðÑ*dU®B@ä\M˜0Á»›9s¦;î¸ã܇~˜Ûþ†+’Õ‡Åùxæ™gRçêŠ1!΂¸¬ >ð¡“«)\fБh¢>¾ñÆž¬6—µGû³&û*«¬âc´Áx—»«ö1kUН¾úÊ[X#ŒZ}õÕ[UM¦ÊEwóÍ7{k°˜¯"! „€YB@+W–FKmB@Ô @àËqãÆùàó·Ýv›|ºZ}œþù¹µú4h·F@¨5cÆ Ï¬OÓø"€ËªàŒ¥…^8Mª-B (‚‚ C=zôpXHe…díQÿH¡P°öÚkËÝUý5=%kÒ«¯¾êÇæ¾âæ9÷Å_¸iÓ¦9Üš.½ôÒnøðáMÇ] ! „€h5|´a•/„€¹E`§vrÄü€ë±ûî»/•–Í€ÐêcÒ¤IþPœGW_Ë.»¬CÀäÉ'ŸLmœ¬77‹|¨K{´ÙOgqÊ+ŠàÛ:4Sƒ+kú‡ ‹ó!‹úqkfJu6gMBÀHœ¯¢Ê<5_l±Åû]„¯"! „€YC@‚¬˜Ú+„€©B`ôèÑnذaþ°|øá‡;‚6çQ½(Væî*‚n‚,Ñk¯½æ„Šï‘¥QK_[-¸ù‚ Ò׸&¶È›gÉ·¾¬=›ç«8o »f¥{â{0 lî¼¢kõc=æ~ô£¹}öÙ§YP«! „€]Š€] ·*B@¼!@pùË.»Ì»©À%Òþûï_ˆà¤E±ú°çO<ñDj->²ãÃ\]Éâ#ooÄ®ëO,>p5cŒð,Å÷ÀÚãœsÎñî×_}·í¶ÛvÝÄÈ`MfñÀ‹8bMˆºÖ$°gMR`sçc‡]{íµ^´Þzë¹t퀨6! „€MB@‚&©b„€B ¸àéÊ+¯t½zõr?þ¸;á„Ü—_~™{@Š`õà¦Ô;ï¼ãæÏŸŸ*k´0³ã†þÂ±Š’ÅGî_-í  >üåõ}‹¶õ7ß|ã~øÃºþýû·ÏfnÖD¦ÝXEòžUG€5f­µÖòk B£™3gVO¬;-AÀ\]1 lîÜG}äˆ_‡eéþ‘BH! „@Và#«#§v ! „@ª ö™gžé=A&OžìþóŸÿ¤ªÍnL¬>VZi%‡Kw¸œ ™Êbps4jy.À³oß¾Šñ‘–É”Áv˜àƒ¦ÿë_ÿÊ`Úo²¹¹Úd“MÜ /Ü~†¤µGÇ8 ¸XÂò@q>:†agr±.¡à€ÅGÑŸ}ö™›2eŠûøã]Ïž=Ý;ìÐh•W! „@·" ÁG·Â¯Ê…€B OŒ1ÂñƒjÔ¨QnúôéÞÕGžúïK¬>p1ƒK³´ÅùÈ¢Å>ÔѬíÓ§[|ñÅãÓI¿…@Ý,¹ä’á+”wÁGVÜ\ÉÚ£îéÛ&¡¹»BðaîÍÚ$Ò…– `Ö_ýµ·ºa}*2YPsÖèÝwß]ku‘'ƒú.„€È|ä`Õ! „@«À¿8BQýŒ?Þm´ÑF­W„ óæÍK•{¤ú{R_Ê"X}¤5À¹ >nŽë¨,6G³Yñ=²0béncžœÃúé§ýd%°¹¬=:þ¼ ø –‚,>:ŽaGs‚9ByÖ¤Þ½{»%–X¢£Ee>–//¾ø¢{á…|Pó=öØ#ó}êlØ_áN1+û¬ÎöWù…€yC@‚¼¨ú#„€h|ð`ô‰„@g0wWy´øxöÙg.gxN6ÜpÃÎÀÔeylZlO´øxå•WÄdm»Î&EðaÍ‹îæ EŠk®¹Æ-²È"ëšk®ÙYx3+ {î¹Ç»æÜgŸ}2Ý5^!PT$ø(êÈ«ßB@vÀ]o¼ñ†Û~ûíÝwÞéL,jÜ$\uÕUŸÝÓ¦Mó±?ЄÍ+åÝꃠ³ÄÓ€9’&!`²øÈë[ {ú•gÁ‡Å÷0`€×¼î„«õœsÎñV¢ë¯¿¾Ûn»íË\ðÔ&ø˜Ïì½D]ƒ€¹ºb Š,øÀ¢!òÝwßíß9bô;·`Á÷ë_ÿÚ?“æZ±kf¥jB@f! ÁG³T9B@œ!€©?š›íæ¾÷Þ{»‰'æÞz¡YÃ8lØ07f̯5wî¹çúƒdšc7«ŸVNž­>`†¤ÑÝ•7çùÌÁTÁ &S¿~ýdñ‘…AKy‹ øÈJ|7ß|SÖx^Zh!·Ì2˸VXAî®:cG²†®®Š,øÀÂìÆoônV\qEÇ>¶ÈôÉ'Ÿ¸±cÇ:6p«xòÉ'õ]!Y$øÈìЩáB@Ö#srêÔ©^s¦åÈ‘#ÝYgå!­¯=û5wÜqnÇwô~£qyõꫯæ6fJÞ­>Ò*øà)ÉŠ««Ù³g{×=´y•UVQŒ€u < >°.ƒ²"ø8í´ÓdíÑ©Ùì¼0Øâ|(Ày'Ál ;‚·ß~Ûã_dÁ{ X“¢ìTd bðÆz{©¥–r§œrŠß·40­”T! R‚€)5C!Vzôèánºé&wàºE]Ô >:è 7þü´695íBƒs„ níµ×öÂ"Ü;%¯”g«|ð3-nËÌÕ1d²têX{ðNéÙ³§üÿçõEÐ…ý2ÁîHòDı>c(í„µÇ 7Üàˆq¥Ø-¬ MðñòË/w¼ å¬Ö¤×_Ý}ñÅ^ß·oߺóæ)!ûšGyÄyÇšt÷ÝwÏS÷î ïßc=ÖïS†êöÝw߆ËP! „€H|¤cÔ ! „@ªøÁ~à.»ì2wüñÇ{M°[n¹Å >܃äÐ(ªŽ.î¿þz·ì²Ë:£Fòìê9²{'ÏVøÙç9€9BÐa4D»›LðAðMÚ•v²øhÔ~ï{Ú‚¦}¼²Ð>Ü@y nnñ=°ºìÕ«Wê‡k\9*¶Gç†Êâ|°¾HðÑ9,ëÍ ÖåQTáYC0_DÂÚcÒ¤I^x¹õÖ[;\]•ÌÅÕÌ™3ÝòË/ïÎ?ÿ|íYŠ:Ôo! r€N¹FuB!Ðz8bêMœ´lŸ|òIï‹Ï<Ç®h²ë¬³Ž»øâ‹½ÅÌ_þòwÉ%—8˜Õy¤¼Z}¨~àÀÞFZæ¼ >˜GYpw…»â{äñ©ï¾>™ÅG^YpsEܬ= Y{tîYøþ÷¿ïÖ]w]oÁ‡ÆyÞæuçÐiMnÖ¤Y³fÚÍÌ™3ÇÝÿýk"57WœupqE¬>\sŠ„€B »Hð‘ݱSË…€Ý‚À{ìán½õVœ÷;ì°ƒÜýÕW_uK{²Rén»íæŽ:ê(o5@€Ä‡z(VÍÆ/ÏVæîJ‚ŽÍ³øXmµÕ¤=Ù1•+†€ >þýï§Æ]¬‰úiY|œzê©^ùMÛm·]‡ú«Lß"€‚IïÞ½–¢X"(ÎGëg8#”Ç q5Öh}…)¬Å „—`±êª«º!C†¤°•]Ó¤¸‹«ýöÛ¯k*V-B@!Ð2$øh´*X!_6ÝtSô|ðàÁ>vÅž{îé-Aˆ5 ªŽÀgœá¶Øb ¯õÎa ÁQb3TïQòÐêcܸq¹aHšàcúôé©ZáOß\FeÁâã7ÞðsÁ.]DB ³˜àƒrò¢ÿþûïû˜ô)í‚ÐÚãôÓOWÜ­“Æù࣓`Ö‘kàÎÚTDúôÓO},?¬=ˆeaûŠ¢a!WEqõW¢ ÁGQFZýB@4|O:Õkx¼9r¤|Žæ­(ÜX\sÍ5Þl&Ýþûïï8pæB«ë®»Î½ûð èƒ9òᇺW_}Õ3ñ»{ì–\rIÏlä¹K³íƒ>pï½÷žo£,>º{Öä§~\‘ð¾ò"øxøá‡}ˆ5vF¬Y{àžiÇwôíÖ¿Î!Àžhß+ÎGç°¬'78Ïž=»°®®ˆö׿þÕïÓ–^zi¿¯Üò–F.®ò6¢êBà;$øø }B@€1sÓM7¹<Ðǯ8묳ÜAäæÏŸß`IÅIކòµ×^ë`X?þøãî„Np_~ùeîÈ£Õêq…6dÚÜ]¥Ýâƒà±hÖ ~…V(¬FiîôtȬ>pQ’27WC‡MuwBk¬qÓ$ê<²øè<†õ–ÀšôöÛo{ÖõÕW_½Þ¬¹IÇÞ æÄ1CxYÔàîrq•›)­Ž! Ú ÁGHtA! AFæe—]æŽ?þxñ–[nñcÆèl¤¬¢¤ÅeÒ9çœãpUtå•WºÉ“';´ÍòDyµúØxã–;O<ñ„÷kßÝc†k (í–V¼ЬEƒ}á…înØTŽ0ÁG^,>Lð‘v7W§všÊÚ£¹“Y|À”G¸ôÙgŸ5·•VFÀÜ\qµ´hLÿo¾ùÆ{ë±Çs?úÑ܈#ÊØé‹\\i´ÕW! Šˆ€EuõY!ÐdÐô<å”SÜ„ L(´á rš­ø&w·)ÅrÈ!þ xÔ¨QޏÂóDy´ú°8i™Û0+xþ²bñ!7WyzÂÓÑ—< >p;óâ‹/z`Ó,ø€!À’µ‡‡¡iÿÌò¥ÓrwÕ4hÛ„0Þâ{¬·ÞzmîçýûÜ‘š•Ñ€òÞå6ý“‹«6è‚B wHð‘»!U‡„€݇À{ìán½õVGüwï°Ãîî»ïv_}õU÷5*Å5?Þm´ÑF>ø7švóæÍKuœ†F¡Ì£Õ0 æÌ™ãpÐÝq5ÐRÍ‚à­R³ø?‘hy|àþf7ր믿~³ jz9²öh:¤"ôXk­µç£•æÿ0‹Ö¤´ÇÓi~ïûè£Üm·Ýæ­]öÛo¿VT‘ú2åâ*õC¤ ! :€†P! „@ˆÀ¦›nꃞ÷;{î¹§›8q¢ûüóÏÃdú!s ßÊË/¿¼wiHÞpÊ›ÕGïÞ½Ýüc/lÀ% LÊX| U “IÝ9[òYwžææ kZ]ÂÉÚ£õÏŒx pþÒK/µ¾Â‚ÖZ|-¾{Í)S¦xáGÏž=}|¢M¹¸*Úˆ«¿B@ >Š:òê·B …`ñ1uêTïî ø‘#G:Ÿ§=A !©ZtŸ>}ÜUW]åKN›6Íy晹²É£ÕÂ=â|¤ÁÝ• >x¶ºÛú¤Ú$Çâkîܹ^ðÁ»AÕÒõŽ € ÊCpóG}Ô÷eÈ!þ3ÿdíÑúQá‰ë%óruÕ:¼ÆcŒ{±5ÖX£u¥°dö ¸«[|ñÅÝn»íæ?SØÌ–5I.®Z­ B@¤ >R7$jB $ò¦›nrx [tÑE½àã ƒróçÏÏG›Ø‹aƹ1cƸEYÄ{î¹î®»þ?{ïtUuõÿïßtb›±¡cC5¨QTàU[E¢ØðUDPcT4FQ[° hìXA±+“( ‰ØŒ(¨yc0ìe,Èk‚åu2sÿû³’usžË¹÷¹åô»ÖÌóÜvÎ>{Ï>»¬µ¾k=–:“ Âæ¹¢±>²”à\ YÎñAbóï¿ÿ^X2Ý»w%S”ýËÊjoŠÂø@ɽ`Á¹™YÍïd{Œ?^žéöî}ñ´>ÈøxóÍ7JZ“hÀQ€ð¢Ë–-c|;…º¢?‘KèÕW_•¤æ0³ÛM,ÄU»Ýqk¯!`´3føhç»om7 C fˆS}óÍ7»sÏ=WbϘ1Ãzè¡EhÑy· å˜1c$Ôž‡„¼úË_þRŒŠÆúÐ<‹/v_}õU«·¾¥óóbøày'LÞ¥&†@”Åð±hÑ"·bÅ 1 öíÛ7Jˆ"++Èö2dHdåZAÀð±í¶ÛJ_øöÛoÆ“hÐ0W”ŠsÎÆoí2\l»ï¾Û±F‡]Ö³gÏ ×6úªYˆ«è1µ CÀÈ2føÈòݱº†€!PH¼|ÑE¹Ûo¿Ý¡ "<РAƒ2&(Kð‚¡ì`SzÌ1Ǹ/¾ø"KUl©.Eb} $ ©8Š“´Ã]å!¹y0±9†=C JÔð’°jyÍïÑ»wo_²Öc{${GÛaÈY¸«xpÇAIL¬ÁÚA`º|úé§Â,¦±6k'±Wít·­­†€!`ü Û}ZO0 CÀH#<ÒÍœ9Ó㟘ʃv³fÍʵ¢*jàÖ^{mwß}÷¹ 6Ø@âzŸqÆî›o¾‰ú2©”W$Öù=þë¿þ+y>òÀø&6GÉdbD‰€>(…^^E Y seld{c%y>þùÏZž Ç ûœÛ)±9¬2ÂÐÂ$Úl³Í¡VÛI,ÄU;Ýmk«!`ÿBÀ Ö CÀ0C€¤Ð$=ïÓ§°ˆ+|Çw¸¯¿þ:±:dýBÛm·»ñÆ%ôÂC=änºé&Éõz×S¿"±>²bøÀcI;äV­ûoŒZèØo­"°îºëºUW]UŠÉs‚óùóçK²˜ØÜØ­öÒÆÏWÇ1>Ç®ž3À£|»%6'kKœ&Ž>úh wU^E8ÆB\á.Z CÀh3|4Ž™a†€!Ð0>0~î ÊýèÑ£Ýå—_.†Š-Ô©‡~¸;ýôÓeCzÁ¸gŸ}VÂ]佑Eb}hž’ƒ¦^'댞q^„!y¬1>òþg¯þ„¨QÖG^xž«Ñ†±%kbläïcåöÛo/cçÿüÏÿ$_‚_‘9 Ã8·Kbóï¾ûÎ=ÿüóÒnœ&`b·‹Xˆ«v¹ÓÖNCÀ0VFÀ +cb߆€!`ÄŒ@—.]„j?räHa6L˜0Á5Ê}òÉ'1_9?Å?Þí½÷Þ¢ô1b„(Q"ç]ŠÂú ÿj«­&¡È.\˜šaJ °¦²Ø?Þ{ï=IØL¿Ýj«­Ä»6ï}ØêŸ=ònøÐ0W[o½µÛd“M2°±=Ò¹jø`\_¾|¹c,5‰X’äQk'Æl©®¾úênÿý÷w]»vÐŒ—d!®2~ƒ¬z†€!`Ĉ€>b׊6 •`áÉæ ïF²˜ßÃØé)a®Ž9昢7¹Ü¾¬‡¸‚‚ñ{èС®{÷înÇwt}ûöu'žx¢›;w®äù)7&7äz÷Ýw;ýûàƒÊŽ-•ÕÒ2Øó+›±òûl†@R˜á#)¤í:†€! DE‰_|ñÅÄsy¹ lPÚAùÏÆþ¢‹.r·ß~»„*AL¬4ÉYê#(óî¾ûn·Î:ë8â¿;6“ÊíF1 ²>®¹æšÜA³çƒpjLÀ›3k¬ (™óñ¬51â@À q êœ±=âÁµÞR1¬“àœ1Ô õ¢ÖùqàÉܾ={öl‹Œ¬xàéK„œÍb.¡Îï\ãGd9Äû¼E‹9‚¸<òˆŒ¹¯¿þº{ùå—Ý”)SÜ~ûíç`É_wÝu7¾Ž3¨C広Ɩ[nÙéßæ›oîȱExÆJ㆖ÁžŸ½¿‰!`i"`;Ð4Ñ·kmˆ^Ul4z&+#óÏhpš7o^[‡ˆ3¢»àÙn‰Ía OŸ>]ÖÇ{lÛ8" ?ûì³ÅAd=öpÇw\t©…’08üùÏv;ï¼s‡RVYe‡A§îݘ1c\”óŒœf`—ï°Ãz)yUgš_Vù³g5Ь…U)CϱWCÀ0âBÀ q!k冀!Ð$ß~ûmæ”—M6¥¡Óvß}w7gÎ×§OQà6ÌÝqÇŽÜí.ÐÝÙ¨²A!é9›‹¼3‚ŠÀú Š)â„/^¼8•{B¬neRd‘ñB%Écµžíþ<[û£G€p@H¥×iôWоD’ #„ƒËR’ec{D¯-‘ùÅ¢Öùñ¬ŸÞ|óM™¿³ôÌu^óæŽøæ›oÜïÿ{q2Yo½õ$¤Rs%åë¬,‡¸"§á(€²6‚yKÇ&ÂCQwŒs½zõ’c00°ž"ôU”ÂS+ÔÛÆoìÈcG]ôg‡¨ ?ÿùÏËUaî=üðÃËë`5¨`l‚Ùmb†@š˜á#MôíÚ†€!`„ €"S=eðüÑ÷!‡î+»Îž=[Â]A½=z´»üòËÅR¸Æ6Ø hîýúõ“°PA>þøã\ÈŠÀúØ`ƒ \=D¡Ÿfè¾µ×^[Ɖ,>–.]*a”Kl°M 8È3ãC›£ ÊÒ|?~üxaœÂ82dH·ÍÊìÆLðg=ôÑG¹eË–ur†ý\ãa#¢pf/º°6 ©9¹É>ø` Tô6g9ÄÏ3÷¶3B’yØAsë& ãG}´·|ùòĬÕasPý#t)Œç_ýêWް\*gØ› ›nº©{íµ×Ü3Ï<ãöÝw_=Ä^ CÀH3|¤»]Ô0ZA`ÅŠîž{î‘|З/¾øb‰‘Ê‚«3á\û½úꫲÃS›(œ_« â+s-®Éß½÷ÞëX„† ÞdP“ù½šg¾£áiþïÿþOò7<÷ÜsåœK–,©YFصóþ±l¡ã9Ò­±Æn„ nÔ¨Qï¨v bô96xâÂÉ;¦¬ w•f^ w•5ÃJºO?ýTÆW6ÌÆøhç,Þ¶Áðe“VÑfŽAQŠ`É’A¦Õ¶åé|ÆLbí3Æ£¬·<ÑÜ=¬)1,¡Ä-²°¯a/•~Ô.Iͳ⊾Ƴ¬FLrdœwÞyU×G0t.¼ðBé¢ìUÙ3† {HÂ#ÔÿÃþà}ôÑò5‚dz÷äÚRÊd¿Êú‘=r˜pL˜0>±'QÃÌwß}'a¯ôXŒOD1 n*”ÅÞ…kê÷¼üñÇÝ-·Ü"á|çªíµ{5 C Viä`;Ö0 ´ÀûÒ¤I+-üؘ#ÐqwÜqÇÐäùçŸïn¼ñÆ•v,ØÖZk-Yl±è#ÇMˆx»@A¨¾DH@­Â“…,†¢»ì²ËJÞÎtP–QhãéC˜'=GËÑ ÊÓO?-‰ï`€´ƒüà?p7ß|³Ûd“MÜÕW_íÈ{‚gù `…´«µ[·n’ìpèСî‰'ž6Ì%—\âÀ+¢¬SO=Uîí/~ñ ¹¿yR²aø %Œ6³iŒ¤Ú†8:qMÍïAÿÄ“±]ŸÛ´ðo§ëªáƒð ßÿ}nrˆ¡€UÙ,>Œí‘§‡u¬’ “çcï½÷ÎNårXæé7ÞxC¾šO!‡Í¨»Ê(´Y;cä!lÚN;íT÷¹y=y€Üx„ eÝÌ>"KëÖ¸ºŸÃX°`Á÷ÓŸþ4nŽÅ!Œ½*k=œH‚Â|G3˜<•B› ¡…C¡Âh‘p\ÃØüùóe»í¶Û6l\å0‰5ªðþÝwß•½4¿Ëåúì±iËYg%Fu5ìpž Ø.Áºêoöj†@£ã£QÄìxCÀH Aƒ9mªrÄo‚‹Y’ıÀ«dnp. ß0o–xÀÝ~ûí¡¿a!é[ÐèO¬€A"òS(½—ï`*¨ò–ºTó–áXÊë,L°<Îi?ÃÜ”Z¸izÖg÷.«­¶šI_Ùß³PÏzëwÖÇ®»î*Ïïûï¿/¤µžõz1iô¸¬2>0| db£N¼gC .ÔðAù°Œò"LñŠÅ‹,ˆ±=²pþS wÅXjŒÿàÒì;pÔÄæ°=òê8Roû¿üòK÷È#H²ì¬$ö®·îͧ!®Ø;À¦¸à‚ ÜV[mÕLQ±ÃþF×D0"fΜ){Ie@T^ÃÇý÷ß/aÁ¼Îq´ =Økbt ù˜[”aRY¶~fœ †ÚÒï;{oöÊÏR¥a­Z¹°<.ºè¢2›¥ò:0RöÙgc~TcŸ C )ÌðÑlv’!`$À¬Y³Ü+¯¼" ® …÷óÏ?F ¿#Ž8¢¼ya¡¤^Ž­<—ð ÐlÙüÜzë­²0f‘4 p,‹ü ”«ÉçðÐÑ„ªùË_$tž;Іº"t¡·®½öZñ„¡<É1ÖpíÎŒ#^7/Çy䑲)Øf›mdq=xð`‡²¿Ú!/íj¥žcÆŒ‘}–~CÿË+-\YrðJ„Ù“†ñ ÙûÑÍ{¢te#K˜4ŒPjøÐ±¤Ù¶D}ž2>xvÛuüŠS+/¨")O Î_xáiT­x “ûÖØÉa]Ï•;5Á9Œ“Ö`­¤‰Í‹抽Îï~÷;‡ñcà 7ì  o Åìž]âjĈ™«,kwe`P9Œgžy¦„"ëß¿¿»ë®»d-\k=I?&„Ùi§&íƒAÁþC„&FWûVØ[ˆ4 ²Å[8öÒD“°ý1Çqίýk÷ÔSOÉiÌa•ŒÖóê°V¶Ö›ý3û:ö÷*°Y‚õÔïíÕ0 F0ÃG£ˆÙñ†€! ,ì0t „ø9à€Ê¡,ð0yøá‡e±¥‹³¹sçÊÂŽãƒç2 E: Ž…ZL> ”®•Šcâáª!/jõÎ6Œ‰(öVæá¤[©‰Í³æ*Èö€a ®&é"ÀØI¨+Ut¢l4iœž˜›XoÝðÁúg/Âù~øáòÚk~ÂÃ"þ å „~͸£??”õÁžWÃSa¬èÕ«W‡HZ^ ÙŒ³auõ6>ëvÊPà å°gÅQ¯ëM[q„úñìnºé&)‚=8ëjCÀ0ZEÀ ­"hç†@ì°Øc£‚`€`aæINˆ 6Ø@Ž[ºt©x½Ïe1…¢8¦Šƒ÷Ýw_ 3!'þ]qÅâ%ÅW0/T©8Dñ,ÖT*'ú}³¯…Éj¶Ü<žGnÙ³gK¸+<ˆN?ýtwÙe—Õô$Êc;ë­3› 6´ôy¼@Ï8ã ñ¾ª÷ü,d}ÜsÏ=¹c}¤à<ˆÆD6àlÆM 8ÐpWy1|°®9ŠdÅðd{üä'?‰óvYÙu"€á£G²îÅšÐ5&Í#ÀœÔŒ”è„F{õÕW…IpÔQG5ZΤ½(ɳâ*#k"˜\§®¹æš²"x }4y$»yv1Ž{ÊˆÆ Ó‚r0ò{ì±ÁSå=s"ûG±0FGgŒ ê‡ C¸þ±÷"LtPp ²5‚¿U{ÏÚµ²Þì©É‹ib†@”Ø.4J4­,CÀˆH,”Â8¨Êekè±{íµW¨ƒß ¤^1z|ðµVŒz *ÄçFð¸ŽÚø¬G»¿'Î- Q£F kçÊ+¯”÷Ÿ|òI[Bƒ//L=ôxI¡É£(ë >›ÀÊç €Ÿ@IDAT7ËmÒ<„c“˜´0váá—%Æý ;ã¡…ºJºG´çõòfø@!É3‹âŠp–i‹±=Ò¾Õ¯‡6ÆŒeîª:NõüB8æ& J•ayê9?/ǰ™6mš°0¬’äºÈ’‡Waø³§%Ìá®Xÿ2/ûFPè·„-ÀźJך¼ÇØOààažù»þúë¥ q°Å`mà°ô®Of^éX¬å{ešT~oŸ CÀˆ3|Ī•i‘"@nÍç°çž{– •Á^½ŠI\ˆ÷ñOyE0NT Û]7ø D”˜œ ËD *•×äóÀEñÌ{3|€B¼‚7ÐäÉ“ÝØ±cÅX5cÆ w衇Jè‚v4:¾ö }”$ŽÏ>ûl™!ô<³>Ø b|@)õÇ?þ1ñ<Yd|è̸JbQ›£í5Vš!ðòføÐ0W;î¸cMÇ‹ÿ´0ÞwÆöˆßVJG¡ˆssŒ%8oIð[¼x±àÈœD¾ƒ" {U†³6!j‘%O!®jÝ œÌ0+`viâsuÌc/<þ|‡³¿©|öÙg’¿…$çúG>Ä¡C‡–óoè±¾’ÿG$úTå{.ÂgU²6ê¹e©ñ¦žãíCÀ0ZAÀ ­ gç†@"_”Í BœÚ "X’€³BԚŰ*ÃwÚi§ªù2 ë¹œ|ÏçZòüóÏ—½ÓÙœV«_ejX©üÞ>wŽcJ;Ê.”̓ JEéÜymã?…Õ>ûì#}DŽo¿ývC}8þÖw…¼²>xîñØæ5MÛÈFÆ®úîJsG½õÖ[2no¾ùæ…+ÞBvVÔ¨á£2zÔ׉ª4ÏG Î³Èø y,t’Ç2žšq#°ÑFÉ%ò’ãC“¶f!¿‡±=âϺR(Au­ÛZ©íw6¸µCbsØç>ø ìƒØé>¨ˆw”õ?¹*I”Ž;ìï½÷ÞƒÆCÀ0ÚÛ‰¶ã]·69FϘjÔXW*{ƒÉÁ‰Š—M¥ $c_½§?þøãÐð5œ‹a„ë aÞ/a,ÊV&Je}ìscì¾ûî’°¯OŸ>Ò7ØäÁasÐN‚·óÝwßíÖYg¡ÂŸwÞyŒyyÁ"¯¬ÝvÛMŒžÄgNÚð¦aªiÜ{”K(™,¿Gè·ç5•ñ‘ÃŒ(ÍMÅØ‘¦Û#Môë»6†rz±ÆdmCÿ1ie|€'Fù" a‰`“n’µA‘“šç5ÄÆ Íác…õR-aÉ^¥tà ƒƒÏœÏ6Ì¡Žßpú[wÝueüÀàbb†@;"`†v¼ëÖfC #„ª¶é¦›–¦±ðƒaQÉÀ€Î}ÿý÷— Gq„x:m²É&åsY’’…`P†.^òÁïxw ^6‡0e qXu!I‚t=žrº cš°hU¥‡\ Ê¿z1ªrzÛ|½õÖ[»Ù³gK¸+p'çÅe—]VÕHVT``Lœ8QR·Þz«{àVêïYo{^Y½{÷–Pz<ûŒQIzäf‘ñ¡¡®HkŒ¬?uŨ_ž šß–ë”4ÅØi¢_ÿµQ^oŸ¹Åò|Ô[ðH°Ã PdÃlûî»OÖ„¸êÚµk‚¼g/kG'ž rÜ1žæAÖXcrø1ëößÿòþµ²þÚg¯»î:ù ã'aŸY+kø+½ç•ç†9ì°Ã$4F¢`^=–òÔyF¿³WCÀ0І€>ŠvG­=†@Ž`1F²òjää`AËBíÒK/uë­·ž´ŽÄmwÜq‡x½á½…1¯â÷ß¿ü»‹Â ÏwÅÈ Ša(Á('ûöíëyä‘Pm⪲¸D¸Je6L\n¡7ß|sy±zÆgˆ·=Ç“°“‹âúë¯w_|ñ…„c¢œ—^z©Ìáø &S§NO<¸Lj#Ð¥K7}út¡³©¸òÊ+å}=¦Ú%çëW p$Ä£ ÐË/¿œ;vQõqíµ×–sèdùNà…GRJ*IçùМF•¹ŠÒ ã#¡ç+1|€‰‰!7jø /X¥sDÜ×n´|5|¤æÊØÞ¹ôŽgÕ<føhî> ,'ì{ƒ"2>˜s?øà÷‡?üAœ¿šI:ݲɟ•ÇWŠÌlÖç*ì_ÉÃÁž’v±Çd=·páB÷³ŸýLöŸ‹3\7ŸÇƒóÝ=÷Ü#E|ùå—nôèѲ/¥À!„3ež§×Tç<ž öÄ$SçÚ&†€!`?虆€!,y…,Èëúó ½’_Jý|H£’_¼Õ<ãý¦f¥ö4r]¯°+Ÿ¿xñâ’÷ƬyMÚâÃl•¼Á¢|o¼g^§çQ_¿0-yÃJù\¿-m¼ñÆÎ}úé§K~qZ>ÆÞTGÀ/úKÞƒµ¶Üoh*yƒUÉ{MU?©`¿Ð½B­ä7÷¥îÝ»—üF¸.yŸø±´úê«—¼«äÃä¢þãÆ+ùXÚ¥Aƒ•|X½Äàö슒g}H÷†¾Ä®[íBï¾ûn¹>K—.ÍŽ«Öû>?|þùçåy“1¯3y衇äø=ztvhä¿{g ¹¶w∼ìF 1b„ÔÃç°ç´àR8Ö;À”˜cX{ jïK²ô é﬽|¾R{ÚtÖYg•¼‘¬Äž©¨ë^oÜ.zê©%ÏV(m¹å–¥%K–„ ‘í¯ØÓy¸ôÇz÷Äìƒ{MpðÑ :-ƒý(ãGPX§¯Ë~ya¬¿qn3ýHË`¼¢/ªTû^ââKž½®?Ù«!`M#`Œ?ª›†@rx…~9ôT=WÅ«E½…ñ¼êª«Êá¤*Ï?úè£ÅË—J™3gŽä ùxPüæÇÍš5ËsÌ1åêÁß½BDB Ô¢Š{£„;î¸ãV:ßM±»ñ´©Ρ-JYæU…–xŽã±¯¥Ù¤>À– l!<¢ð¾÷ŠèĽðë«m–ÞÃe¥"w彊„BL¬TŒ"ü…6‚'SGlºPHo°Áåë«|O;QR~ÐRyœ}®ŽTïã?^îáÎ<3GŒ •€ê%äû :T±;Ö]rÉ%+m~²Ü»îºËy¯>Ù„½öÚkŽ\.õ<ãiµé³Ï>“°{ŒMÜúôéS׳Þj} Gž€¯¾úJB#`8Õ±­Õ²›9òäÉîì³Ïvä=¡jÈÀfʲs F@IBÌtÈ¥UKP’¿‹yG…¤„ðšŒË(wªƒ\žÛÊ:Žu.íÂ(@›x¾™Ÿê1Òqÿq:ÁB¸_¿˜;Ûï°ÏäÙ`͈“ÍyîEVwCÀ¨†ÀÊnÈÕŽ´ï CÀÈ,âP(Ö+ÄQEùÆy?þøJ‰DYð‘ø/¢^½zU52°mf“‰±£c¤Z;:[¬V;ϾÿxSÁö=@N—aÆɦ…9Š.$¶$á#I“&¹wÞÙýä'?éÔX—\¸o×\s(xÈõñ«_ýªƒ·[Vê©õ€QFÜpâ2£t@ñŸ[‹M®:²Äø ÷Rzí5û ìÁðñé§Ÿf¶²šß¶GZJ&ذ”ÁiÕ#³7)ƒã¡ÈD™C @ͬI3Ø´Dª¤Œæ¤"æ÷`/sÿý÷ËÚvðàÁ…4zàt6qâD1Twó¹.®¾úê¬1XÇ%€¿f'9ö°ü5"¬Ù§š†€!PdŠÇ,òݲ¶†@S@å…æË&ÃF<]9äQ”ðÝ)§œRNP®ÇØk¾€%0{ölñ ÃcCØe—]&Œ¡|·¬¾ÚŸsÎ9B£gsCÈ+<›é÷yŒ¿øÅ/Äûíî»ïv}ôQêaœ:ÃÍç”Æe—uvN¿ãˆb, †Âø dB¹¤™(Úhe!€áɃá#ÍÄæ—^z©ŒO°=0†›ä”öšàÜÂ]5vϘ“ðˆgN*šáƒ5Ïà^xáIjN˜«¢IQB\í¾X{ CÀÈføÈÃ]²:†@Kà¤ñBO8á÷ÃþP ‡z¨„`Á‚9è ƒ„"ÜÒíäÌ!€‡äôéÓݨQ£äþ^yå•ÖžÁE”áä;ÙvÛmÅØ‹bÙ²e¹iv0×쟠1ÓuWÃ1¨Q´$%>¹¹>³•¶`hFcŒ´ïDû]?ë† gÂIËðalü>>0V1·àÌcR?`Fß/"ããûï¿wwÜq‡´þ»·hBÞ&Bh²¦%7¹M CÀ0 z0ÃG=(Ù1†€!k;ì0wæ™g–“¶‘«ã–[nq¿ùÍo:°?PÖ…åöÈuã­òeFîóÎ;OúÂÌ™3%κ*iËð l’’_/QX/(àò yc}h‚ó÷Þ{Ob-'•JM“RbøHêšaý‡<#ä4¢™ñ†’}m´‘ÕäæDq´ ´¡ðÒe{l·ÝvÆöHã´pMc|4ž2"¾þúk™“ºwïÞ\A=kÅŠîÁ”µm ÁW„{+Rˆ«Œv)«–!`…BÀ …ºÖCÀ¨†À¸qã$Lár?üpavÀî@ N<~(éLŠžbä¼€g0áˆH€›tX¢4PFÉuà 7ã塇r7Ýt“ÃK0’'ÖÇ–[n)}‹¾6oÞ¼ÄÂ])ã#íPWäKBÉ„ÁŠÜFføÈÃVœ:fñ¡ù=`†%‘ÿ§òÎâñޱܕèdÿ³2>c1®ch6éðÂÉ…yã(N Eö/$øÆá€ ƬÛ×]w]YÃoµÕVEj¢µÅ0 C fÌð3ÀV¼!`dµÖZË >\B=öØcŽ¿+®¸Âí´ÓN¹Iöœ4ó]“#<ÒÁø q‘II 9d‘åˆ#޶ 7 @Ï>ûl¢á˜šÅ6o¬Ýwß=ñ<Y1|h~ É«®ºj³·ÜÎ3šB /†´Â\Áö@‘ˆ!œüf&ùBC2yËH„lá®ê¿w`…ᣈa®X·ÞyçbH…áÎ^§Hb!®Št7­-†€!`¤ƒ€>ÒÁÝ®j†€!2(§çÌ™ãúôé#¹/† &e„B(²Œ?Þí³Ï>â•?bÄ1ü¤©^¬óÄúH#Ï¡®ðfM›ñAòX¼k-¿G½=ÛŽ‹,>P¾¾ôÒKÒÜ4 Æöˆ²§¥WervÑŸ,Áy}÷A ŽŠ”Øœ¹–\//¿ü²#œ+ëØ"‰†¸‚Ij!®Štg­-†€!`$‹€>’ÅÛ®f†€!!ðœœ={¶4hÔŠÜxÄf!At\0¡4™6mš#Tžt?ò.#O¬ÍóÁf=)l³ÂøÀð’ å’…¹Šë)¶r«! †åË— ³¡Úqi|ÿÚk¯‰a’çãhÒbl¤çzÁ<–à¼>Œ5ÔUѰ=E»ú÷ïïzöìY 98*âj½õÖ³W9¸gVECÀ0²Š€>²zg¬^†€!`‰ Ð¥K 6räH 1qâDÇû?þ8‘ë§q”ƒä»YguÜüùó%×Í·ß~›FUºf^XxãÂÀPïþóŸ µ³™ƒÕð‘vrsc|4s÷율PÃ,¶O?ý4ªb#)ç…^rvÜqG")´ÎBÞ}÷]ËíQ'VY?,hø0ÆG}w‹¹˜°¦{ôèQßI98jÙ²eî‘G¶ëÖ"‰…¸*ÒÝ´¶†€!.føH»º!`†@ DÀäɓŀšüC‡•˜Ðx Qð8ÆÈ³úê«»[o½Õ=ðÀ™ó®Ä=/¬UVYÅõíÛWò|”3IÃGš¡®¾ÿþ{÷ÁH¨+r|  31’D`ýõ×/÷»¬>4±ya®qh¹=’ì‰ñ]‹quûí·—q–¼EÏMÖ*’A™—`_‚sS„ù–uÛŠ+$aûAT„fIq5iÒ$g!® sK­!†€!`¤Š€>R…ß.n†€!È@ÂoÂl´ÑFîü£;ðÀå5 Åu8œxâ‰îØc•$Ô„ù"NtÖ =ya}î ý(‰þ£Œ4 °=P®ò,uïÞÝB]¥ñP·ù5ñèÞpà …¬>`×!I>Œí!°æÊû^½z‰£ÇâÅ‹ Ó¶8¢ù=(Çâ¸V’erïï¹çIj>‡,ŧ¢!®n»í6·îºëZˆ«"ÜTkƒ!`)#`†”o€]Þ0 C [yä‘nÆŒ’œ™Ðƒv=öXa½*¯½öZׯ_?÷Ýw߉„_YNvžÖ‡æùX´hQ"}…’f~š·ÞzKÂ{uíÚÕaˆ11Ò@@Ã]eÉð±dÉ÷É'Ÿ»í¶[¢°Û#Q¸¹Øk¬!Ì”ú–ç£6äjøÀ`´ÝvÛÕ>8'¿Ò¦çŸÞ½ñÆbð>|xNjÞy5ƒ!®öÜsOwÜqÇu~’a†€!`Ô@À 5À±Ÿ CÀ0ÚÝwßÝÍ™3ÇõéÓGÉÆ &È×_]8@P Ü{ï½nÓM7uï¼óŽƒ’õvV²>²ê£wïÞ¢øæ›oÜ«¯¾*8;†˜i2>»cÈ›Çy§­ìÎÈ¢áCÃ\Á„b¬MJŒí‘ÒÉ^%þ~ô#™WÌðQû`b󢄹bÍ3uêTa•4Èm±ÅµAÈɯâ*'7ʪi†@Î0ÃGÎn˜U×0 C ¶Þzk7{ölǦ!Ô¥—^šªG}\-ïÖ­››2eŠ[sÍ5ÝO<á.¿üòDX Ͷ§’õñá‡fŽ¥²ÖZk9’£ J"Ü•†ºJ3¹¹2>¶Ùf›rž…fï±g4‹@ šØ<é0WÆöh¶eû<æò|àùo Îkß+e|%±9Œ\Øc¬O oU”¤æâªv?¶_ CÀ0šGÀ Ícgg†€!  …“äÐ$zºtéâ¦OŸ.K˜$g“I8¨¢É€$–òj«­&I% ï•DnŠfqÌëƒòIåùPÃl´B•‘ãïZ¼jQ2™i @Ž&„¹1+¢Œþýû'V%c{$uâ 2>w”õÜ\‰¸ Ø,]º´0‰ÍYïßu×]’O Ùüã@kóûÖB\…ß; wY Û^KûÖ0 l#`»Òlß«!`5@9×q‹zè!ÉÓPóû±að¨›X”Ö„¼"ijV*y`}ËÕ‚ bu¥†B`¯%iÁØBN6é>h·‰!Yc||ñÅ£ ’$ã†"^Ô¬9ä4n…]3&”ñAñ°ü{MVF€y …:Ï ˜†1ïÂüNxRÖ¦£F*„“…¸ ï•|ðÃ)‰}áwM CÀ0šCÀ Íáfg†€! 6ÜpC ODˆòPpÀŽ(;L¢C€Ü ãÆ“<xºèÀL$„Qt­è¼$Úyûí·»m·ÝV”)°*–-[Öù‰)‘uÖ9b`||þùçîÍ7ߌՈ¤†nEy>Ø s]ăýK ¬>4ÌÕú믟˜â¶ÊQä—¿ü¥äÿIévØec@€¹z½õÖs]»vµ<5ðÕ0W²úê«'š_§Fµšþ . ð÷ßßNóè£nº¬¬œh!®Âïkªc=Ö=ýôÓG×¶o CÀ0j!`†ZèØo†€!`d~ýú9BhœtÒIŽPLÏ=÷œÛ{ï½%“†ÉxrU½#<Ò͘1ÑÃËÁƒ;X7YL®Ý,°k¯½¶»ï¾ûÜl ±ÃÉmB‚î,JÖY&ÕwžMnÎ}JÃð¡ã ý‡¾ƒbÎÄHUe%<ˆ†¹‚í‘Ôsal4z^²×„Á  Î-ÏG8ö0Vaç‚U¯^½{þÂkÓú·šÔ|ÕUWsmÞÅB\­|1z >\ötÌg°ÎwÞyç•´o CÀ0êBÀ uÁdb¥þæ7¿‘Æxrï±Ç®›Oô»Ë.»¸k¯½ÖâjÖ¸ùx©Ò½GÂ6@ÉÇæCax[… çþéOr¯¼òŠ$ék$œÎŠ+‹BW+?ìšEýn³Í6s·Ýv›{þùçÝÀeƒ‡âš>|Áˆ·yQÛžF»vß}wñ¸ëÛ·¯°"`ÚÀ’ ·BQ„Ð(7ÜpƒÓ¡Æ¦+«yd²ÎúH*ÏÞ¬šW#-ÃãqÏž=Ëõ(Êó`íÈjøøòË/3Á~ >’@ÒØI œþ54Üã.ëi“• EHlÎ> ‡›gžy¦æjåçë›vqE¸5ÚɸÌÞ•=l5Á°Å^îˆ#ŽpÏ>û¬°<Øß 2¤Ã)ô û”É^¸Ù¼nÁºÑ·êÍë<:Ôó×YÛ;40¢Ôó³Ï>sW]u•#¿ÖŽ;îèvÚi'·ÿþû»«¯¾Z° »”¶ï½÷ÞK$Wãë•zpÔcÞyçéOèOÂÚjßmƒ€°M ¶EÀβà|î¹ç–¾úê«gäï§±cÇ–<«¢ä½ K¿ÿýïK~S”ÉFÜyç%¯ø/yÖSɇ}+ñdEî¿ÿ~©›7¨—|,öX«µÅ[”¼GyɳÏ8ã é+>4CÉ3„bm§nÔBÀ+:dLf â•BUõF]9Î;nT=¦Õx?©‹g}µZ\]ç9R®ç Ø™ 몼T7¬«™_óÙ˘¬Œ€W2—¼3ViµÕV+]wÝu+£o¾ýöÛ’gà–¼§ä*rTóðªzgš’Û%ã#{º©S§†˜óou¯À°æšk–FÚ"æŠiÓ¦•ç.Ê®t÷Ýw‡ëC•<ËWŽå¸{î¹'ô¸Î¾dÏrÞyçI9ìÉ—.]ºÒ)ìs+×ÔÁót¯_Ï+kÔʲVº`D_ W@¿P«^LoÀý<ùä“kÖ5¬Ý»w/=øàƒ-Õ'͓ðH³>víb#`Œ?Š˜´'^IãFŒáÈX~üJ’üñåä”~ÌàBñbo°yóæÕíÁQoS`tŒ3Æù…A]§ì³Ï>Î/Þœ_´—'|z*—¨ñ†NznÃbÿ)nœ›i¸àDX¿És°A>úè#çTâíòøã*,S3EuN—.]ÜôéÓ%¬}râĉòÏ®¢ÈøñãϯߨÈx‰G˜_e®yYf}ìºë®’ç/-B:ĉá®’Ý&-Êð#y,Þµ&†@ZKƒõ’v¸«_|QX'¬+{÷î;$Œ3šÛã’K.ÉÄZ)öF·é”ñÁœB?g~1鈀W¬ÉÞ ¬`¤çY` <ðÀÂö ¼mÞ¥]B\‘\û`˜aÂ^íì³ÏîðSµ½.Ì ]çycŠD­èpb(ŸýK˜0—ð;aÕvØa‡‡Ô:¯Ã!â\ëå`yvØa²ÖïX—’‰}± {›Å‹;˜ÙìoT‚í£¾õ2aôü°Wú»72ÉÚd·Ývë0^3>UêžÂʨüŽñí»ï¾«ü:óŸka‘ùÊ[s‹€íLs{ë¬â­ €ÑE¼*î·ÞzkIF‚5oÕ—…‰÷øš,(âøÿá(ŸÓÊõã>—…U\ ‹Q£F¹E‹uX<úè£2ñrMþ˜„ F¬w•N8Aè»`ܪxÏ Çß:ë¬# ßX ¤!qâÜj{< ÁvÚir¯0Rq/¸oƒ  õk¯½faÂZÙŸ΄:ÿüóJç™3gJÞV¨çT+²"ØðL›6ÍmµÕV²HáÅ:nFv‘ Êr®-·ÜRÂ0NÅaˆ§ ÎÓ uÅ&’ü7ªtÖÍÞI!€‚Ccß§møÐ0W(V§â–`nC=4îËYù)"Àœâ=¨e-ŒÌÂ]­|3P£eL $o^…½ëK}@”·C‡ÍkS¤ÞíâJoûrñ ¬‘è“•y uâ‰'Êý幯!ãsU)(á?þøãòתÐ/ÑÀœ7ß|s1ÊÆ·›õ])¬ç‚Æ‚ÊßùŒÓ(!ºž|òɪèP¦L™»c ÏÊ«¯¾êžzê)©*úõ@0_¶l™„‡"41uQÁè„“WœÂ½¯×HAH.rvÖÂÓ³ðg»K˜ñ8ëGÙ`Çõ­ÌöDÀ íyßÛºÕXôçÏŸ_VÞá ïC1IBh*(Õ1Ž«bã7–¯==Õ¡0κ°`Rc@YÑj½ÙTÁPæ†ó#ù#HðÌÂN…÷ž^êþüç?;OÕ¯er.ÖÊ?4øæ ƒrK–,q§úô铚’-.œ„£æá(`"¼ôÒKŽ U(a0²ØŽËHV³bú‘gmܸq’çƒÅ?Š.Ì“l”Å]Þ…xùŒ…Œ‰Œx,饶e™õwcqR Γ6|` óád,ÑdîYêV—öC@ó|dÅðS6nyרqCœ¹òQJn¿ýöâÈb Î;ÞŒAìCö%]»víx@Ž>iRsŒ§¬å•Ý™£&”«Šb&J}”Òä"ŦÈÂ~Qïí'?ƒ û0™+„=÷&NT•lÖßäyA(÷Ç?þqyϯeÖûÊù\Ǹ‡~¸)£ Ëo¼Q¢ ì»ï¾®Úß~ûí'¿Õ[·fÃ`äCÉé0<®¿þz÷ÓŸþTÖàZ&ØÉãõ×_ׯgðŽK0P)«ƒ÷Õ„`MO˜0ArÎVÃ’ï  Æöy“z±È[»¬¾ÙFà?ZÞl×ÓjgD†€Ï×!´F $É©§žZs1|æ™g Û&‚— ‹<¡Iö‹õ…‹hÈXè™81 l²É&rŽþCÅB”ÉŠ K¡Ç_}ÜO·páB¡k£`«os]Êe¡Ï5Ô« J&&š P,¤i›ÊÕ‰9x,ïO9å”r¢ì^½z¹[n¹Åî§šà!‚ ãñ¦@Þ|óÍ•pa‚ò£†<2ؤ`PA‰4Héµ”mA]+ÛÅ1,Ù¾üòËr=¼;úõë'†˜°ãµ\^9†¸#{î¹§,,•Ì‚”ûW/ÎRHÊÿXHù8 ²X¾ð ݂ „©ÀBj5ÀÎúaÊMÈüå<òHñŠ")¡“+ R°)©¶ÀÍ|£þ]A eW^y¥4ñœÚe—]d³Ä8˜QÖc:†š_üâ2ö©8Íz‚߯ýkÙì3FÇ%i1>À˜È=À{°³16®ö[¹†€"ÃÏ:ÆN$ DZ=ôî·Ï+k ¼ÉégÆøèxßyþÁÈ|Û#l/ÑñŒl~bnåÞ²7aŽ?î¸ã²YÑ:kÕ.!®‚p¬µÖZŽ=ÂwÜáØ>ñÄÒ'ƒFú)÷á>Q'þò—¿”#üÆù³fÍâ­ô‡aÆÉ{ýÇ~'Mú {a '$ôfÝÔèñÞšµ2{j>ãX¨ûv>£/@‡Á1´%(Ô•}{³‚îCûn„ý?ú %¼¯®G}À‹}+{rØÔ$"g¿NÔI•çå˜cŽ©,B>s>zô586*àB_fmïst6>ç†Ã93hdå8ꈉ{‚p1~q+ï ÷¯ÑÉŒu”É+ãíúº*Úν¬<Žß©:î3Ç ?€ÉÍ9•B])O¯‰î =†4ê#±oß¾â8ǹõ`Á5M XðÐÄhHtå=o P/õ&€½ë®»J^i^òJþ Ñý&ɹü+å<ë¾ûî+yc@¹lz«øIºD’`ïQþ]ëÀ«Sò^~å:$©ôcèyœL¼N‚+]ËÖ÷ÁãÔ‡rýdzlX²q¿à)y…Vùxï%Qwòt¯.'€#¿˜’DaÞ0"åñÚÍ'þõg¹|­7¿½ûî»eLxÃ}óL96Ø.=ˆºy–ÎJeQ¦÷¸)y lhÝý´œp]¯|½é¦›$Ax0¹zðwÞ‡ÕGë••W¿°‘Dx$Ãô Áɘ$Aš_üf¥š¹­‡_ô•H* ¶~Ñ^òtê’_Øç¶=ÁŠû¸Ò’ˆÒK~£úOú=c&Øû…ség?ûY)+ý™1Ço"J^IU3Ùr«x1®{c”$tL²í$Öd>ÙvÛmcOàÞ*Fv~{ àcªËÜÆz¦šÄÜü•W^‘:0xEFµjDò=kHž}Ö!>ÿX$eZ!ÙG€µ…÷œ—õ†Ï!“ý 'XCæ@Ö<>Lo‚WŽöR$½fŸÈúaàÀÑžpiìÃ}^§|Ð’wÎK¸é\ŽçÔ;¤Ýìu}X© ­÷Úk/ùŽ>ª:’Œ³—d,gÝHòñ 0ÖëÞÓ+ØËs‹W|—اêo•¯\ƒþã•Õåâ¼q¥ä ærŽ&7÷Nˆ¡e0ygM97xžgí”Ø7*^1^òN¡×¢îÞ¨Qòa³;¼.mž¯Ç£cP}LŸýûƒWÔ—æÌ™SòF)yÆtž^\ÐåË/¿,ùÐdU뎮‰¾ŽÔJ\îò;uf­B»›IXîÙB庠¯òF–`uå={Úªýú o\-yƒSùw=ŽWoÀ(¡ J°]´Ãç =—ûrúé§Ë©Ás‚åó^±^ÃÞQ"°²éÎ÷<C ¨`‰Æ`Ɇb‹•º3ñ Nñ¦"”ÇO~ò“•â4“D¼2*ÏÂÞà-]Í#‚úG}t™’­eŸº&V|„:n&Xgr ÷OŒZ¢¬ êCÌyâBúMAè)´‡¤`ÄÅUÁ;EëÛ¦‡_éÏ5_ ñ‹ ±øO€!ã+Ñy9†ß¼Q¤-O½x/( ÊÐá7èÅZW®O‚Q¼AÀB!êáRyŸÉ™ñ /;FÏ«|Uœ+¿ÏÒg<I´‹QÂaá‡×Ð ¡šðâ0i¼cü¦Ež{¼gÈosùå—‹ÇOs%fç,r÷ðœ0–Ò‡¢]eë”õǬƿhŠòM•;qˆq‹°sô‹8ï-¼¥˜’l7ãã) =ÆC m4üCš¡®4¿‰añLSŒí'ºÙ-›ñæ8ã¯WˆvºÈnK¢¯ó-s17åUØ;²ÏÃûÝ;7äµ²w‚™ÔN!®ôfy£ƒ#Ÿ(ÂúxÖÐ^a-9àIÌ}æ8\0Mh/ü?žsö±*ìm™[س±?eŸª‚®€È *C”ØÕ¤rO<Žç(XžþÆšS#"èw½‚QvÞyçò¡•õ…ÕqÎ9çTMÜ[&x¾&ÊdàïÓ!q¹Ç+Ï”79ïá¼b¿®yš} NØ;×C7£¡ÌøŽ°Àûï¿¿„“æs5Sö+A û.ø{Ø{î Œ"=†wÒ]é0ÖBäYA`bŒðº-eW:~ó&L`Ó‚PÇ*Áz¡?‡ ÷‘h¿ýíoÃ~.,¯ü¥½1"D >­e„´¢ 4`Áå­ôRûÁüQÔ Ã±$‰Ih„PYJ¹ä3”H((¥PŽbD@˜lX1A ÐQð«‚ŒóXñJGŒ n¸¡˹üFˆ·Þz«Cbq’w±pBYɤ‚rj¦ ˜p êÍT‚’Œ0UÔÁH¢Š4ÊÐE…–Së•Å‹9E$´Ö0ñ¬™òu˜DUqÁ±7ÜpC§ÔO° †ãòÞ‚ ߃ÊG5€°XbA„Ð.þªÄ%4‘÷J{AûÙh(Œ ÁE‚Á`÷Jœ¥àŒÿãb8cî=ùeáÊBt¯½ö’6«23ãÍÈdõxŽ0Âa¥ïó¼O¶QúrÖÇæÆ{õÈØ‰’…dŒ<[Y’,æú`CÝ›WsãÀ,MÃJ&”K:ÆÆÑ>+Ó¨,„ºRÃGÜa®pa\F.¹ä’²2£^¬ì¸ü"Àx˸‹òŒµ¼æ´Èo‹¢«9sÒ_ÿúW™“òšØœýajYg±'bÿ‘WaïyÖYgÉøä½Ís²«ÑûÀ3ª†öÔì·˜§È¡F”çì9Ñ'à‰`ìPÝ{R —D˜$Â4!è.¾øbyO—]v™CØçbð@߀¨áDu òeÅ?œ#©_p,AQNøgϨ8ÚÉžþ7ÞgI”îa쯩£ Çh2qŒì­iõEÇΡîìQu.Õ󃯴÷¢‹.…gx‰S+Jz®EÈoÖÇô?ô Íî[À£‚:º’–Dêèf¸G86á耨1€°W“'O–Èô„ç¢]ªw‘ü?ê†3&ΧaXêw`ª{JBÌjÈ3ô,„±®ölšÐ~8tèP9º*ÂŒqmt#¼j¿âþá[+—º&Oég8W*zíF±Ð:Ù«!føˆE+#—°Á•0¸ãmáé|b5GQ΄äC”,,<0¸¨GL<˜&$&„IU½:`gà‘ çQo&ùž={ʱLDXòÙñ»BÛFÙêMÀ¤…‘DäÔPƒ—’œjP¹úê«e2ç7Îe0ñ«D¾èäŸÖ¥Öa(5ù6Ç‘´œ˜›jü€…¢|µrˆéAÁûqüøñ’Û„ÏÜ&kuÀ°›C“¼c c0ÊŒ=ZöyÔ[ ¼¯Î¥­èm`’À,Âáú\›}B#XT^Ã>­ `†Vгs W]uUÙ²­_ÃàЉŽ0z©)““?*÷±¸Oó!°ž|òI7dÈòDË&”  ÂDWmÉ1j¤ÀSCÃU± ¨L¾NY„‰b²ebb¥3º|.ucâŒJX àaRÙŒLºÔ©Æá7ÚK/Œl˜Ô+…¾*D·Ê‚ЉG¥°`Dá‹W… ‚Çq~Ÿ§÷°`fÏží¦OŸ.}™Mã„ ¤ß²8ç³Ic°øÃó Cý’%‹Œp,ó* £ãØb:e¡MAÖ̬,f7ãØ¤é¸5Vô1ú\’¡®—aÈÑŸQ.éxuÛ¬ÞIô[“úÀ+'¨ë(ÄÀF¿¨Æ¡úkÍ‘0Y‡yäñ¬BédTEs•æJal‚ÆøÁ3›MAåÝ\éÍ…á›ç†9jù^{íù½×¥†Eh®¦ExE`Ëøœ×þÜX«íè¬# †<.Y_…Íëq¶A=tQŽDV5Xoc{ÑhÏ÷Œ¹äùÀ±§V’vB‡ýábPÄáYÇ5+ŠYÿŒ]쓺åÐxCŸk÷W`À>‡< @k&öìAÙÃ#ÁÐU|fÏŠA–8úú´îáé×H4 3cýƒ?kSÅ:“};‘'8¿Uãuª&Ìq0'´-ÁãtŸdFèåß¡mì‘pj¤íèB‚ŠuœÁ´š€ †¡ßýîwr>º ô °ï•5£çÒGÉ«Š~E#Mèoa¯\»šN€ß´Mj(PöNXYaßá( ¨–“ý#XWtì+È)«á®0 !Døð èåýzë­'¬>°¡o Îpâe¿tsBï­ÞS9Ñÿ£/ªN¿³WC k¬¬ÝËZ ­>†@„0I褉õ[]‚ɖů$ÆÖDÝz^5Öt´°“ä¸2øÓŸþ´CœÍFί<–6«…‰îðï<¤êg Í* ‰C©×eWi0! „.Þ*+¼nåyÁc¹—Á‰¸¬¹·,BíÁ²Ûñ=›D~õ«_EÊTk´]xf?6¿Œ{Q??l¸¸/ÌUÁñ°Ñº6r<† ïö‚Þg”aÇQ#  ža ר¯,O½nû÷ïü:Ò÷ïÛ#R<óZóˆ2>Pö³žÍãš"Jü™“X›€*!£,?س‘+Žõx^“šC\anÇW=Xç£tgˇ2î1N}j Áq%¸wå3:€ /¼PÖXœCX"„µ–&³Ö¾Èo|§Šlý>îWt"„£c?„]–0{ zèªí»Ùÿcð >P°7#\ƒ5þÀ㎚¤v(ÏYX®‰1#‚΂=]˜Ð.ÖâªÂ<ìØ°ï0ÔâX†#f#B¹8ã.Y²D¢d ‡"¼–:|ò;‘FtïŽJ#“`¤Y¤ì¢F®aªÜFÊ´c ¨øÿ¢.ÐÊ3²Œ ,Ýñ$™ôê”{‡rˆÐ! [£I°ë97x “.ÞÕþ°–ëdIì|&à`r1:´áŒ3Î c˜÷Dðz½gÁQ­.|Oùê%£E'J”µxŸE\5a‚VÃCµcýÚ%‹ìjí£~cyN´^§èdz@‡õÁBšÅ"xá)C¾ú! z&õ!+ãá®0²É¹üòË;x×ÔWR6Žb‚—)ýãô鬄DSÖ}Öã}Ú}/.6E°æÔåLÃðr‰MÊ%#¢l“•e4ƒñ®U¡’F¸+5|ę߃õ(k'ÖŽx«š´'Œ»Ê¶D‘…ñ£Ý%Üßþö7êUÈf 3”ì[x¾Ùˆ8oBÝÛ=ÄUÐè ‘œ‘0èî1kAkV oÅgÿ„aBXW³÷"!:‚>@“Sóå:ûݠуµ&{r] ó–Í9Q ë?˜•õJ½ëpÆ2 †CíéL¨  K.¹DŒlÕô<”‡³aÈ5—cFµã¹.¿c¨B8¿š£Çé>ˆ±¹ÚqRPÈ?ÎW§ÙŸk~…Ñ„½9‚®ŠðVÌãÀ|?å”Sä}Ø?öKÝjè©8Ê®­ÂÊ°ï ¬"Ðù’Õš[½ &ÀÒd @ý#á—&ðªV$1 ñ¼AP–³¡nT˜Xñð^¿Z,  *¢PBFŒ!•až˜°›£´½^EôIee@—ÅXA.ŒÎ",Bð¦PŠ-ž×à§‹êG6‰Ì˜p+…½,¼ê©/‹;r£ÔëáÉ¢€…F-ÁÐÃÂ’:2éwÖîZeåñ7Ï,Ή‹÷Ñ‚ „­Àbúì³Ï–…|³ž8yÄ£•:c$À‹Íá®`ϰA¿ùæ›Ë‰ïZ)?ésQºÝpà îøãj6!Xx×3ÖÅ]׬±>4ÏÏOgcN3بáb½›Ëf®`{ÜsÏ=J1&í‹c?J)w8!ÀÈmgaïˆ9‰õkÞÅ'Ï7NY£FÊ¥¢±ÝC\U=`ÎtÐAÂ`…±Ïþ û!¸·¤ï*sý‹.º¨F{Q„õ!gU;ÅçFŽ¡>ì×Òú4ûtÚÍxų¦H‡aA¤,å¤!¾«µ‡"B‚³¯bO ž?ÿùÏ«.Ï—æ¡è*ª9%¡ÑíD™`?î …‚ÐCpϓڌÁ„ñÃ)¯mÀà&ìO ƺÉÄ("Æø(â]µ6UE€‰•x‘šûF…Ò«„•<Èð`B¨W¡§‰Â){áÂ…å|•×BIˆGÒG! P&ß Ò ÃG¥ÑEµÉ¹²|ýLîõ<À±Z¨/¨²,¨ˆ©“7çáå¯Ìr`0èL.¸à‚r‹±EËÐsñ€WïýŽW0@1Ì‚ Á@UmsÏ=U¥‹)5–ȉl„zöì)9Yˆ ÖAAÆ>6l˜ëÛ·¯œ‹Á¬]…EGx-¡è$>èØ±c›Îâ‘¶+faíÆ€v×]w¹sÏ=WžŒJÿØŸý°s³øclÆÆqãÆ¹g=¥?Å~£m§>äúoþiãËÂF j¹2%mS­ã ÀɆ1£·Ö9­þƘÉ8Šr)lóÚjùv¾!Ð,šç#iDz=`–Æåmnlf{E1Ïcý«á®,ÏÇ¿ÂÒ èeNʛჽávHŠÌ¾‡Üpyõä `?†"¾ÝB\…=؃óœ2/Ñ/QBƒ¢a­*ï3Ç ·`Å~‹5,kHŒj$¡¿ð=‚C"}'hôà{öØ?þ8oSö8ê I݃:–`å0rh»ø¾Úþ?xŽHø= 9r:ÕTâZë<ê!+L¸÷Ó§Oû)‘ï0–Ñg°U¶z$eiEè‹Ê&£¡« ô%è€pl#l°‰!GÌð‘Ç»fun ³Î:«C¼W,ñXíÔ„›B©‹G+rñÅ7DEÉ¥¡µ`pÀ^¨&”„(ÁH† Å{X}‚çbPÐ0X%Té<†÷LäºX %‹(¯ë(_üûvÛ$]à ¤[^ýõ<ðdÔx£Á2ô=q"Y¨á⦛n*ô^¡æ’P¬ÒXAˆ1]Á–Q£Mð\}Ï"2¸$üNXx-5.±(gQÅ‚çï-©÷‰ßñR ưVƒH¥á†cƒ8Ï-â{ú^.ô]â£b Dù‰qˆ¤èô!ŪˆíªM<—à7eÊÙô€†%”ºêZI”3~üxIÚNÝGxc-ÂÎÆ±$êëOX ½0Î’2„µ -CÆ+<ò5^‡•üN|Çø7þ”Ï\‘ËÁ;aï³€@Ú†ÖHºþŠc{D‰f1Êb]˃±çvÖ 891¿‚ ÏyÖ((lñê'„:ëå¥ ¬ÿYßL™0É8ðk©fôÐöãˆË@÷·| k¥ÇñŠÍãèÑ@IDATA6uP0†vØaå¯xæÉc…Ð÷ƒåòÏ‘ȕь0‡Q¨V‚²0pJKü;Öµ ×UÏ\ÊóNŸCÀá„« ×AŸR°ÏLj‡€){œÊ±–k‚H!†(rcV {ê&|OiVïÀ A…îý ìt)AA÷® A…®Š6½ú t5è±Ð×D)µ°ˆò:V–!`†ëm‡‹‹SO=µÌ @){˜‡P*Qâ ÄEYÆÂBÃMaA'ÉV#@¬ë,ötã:3fÌ? <¾‰Ñ©'Þ1šWƒ‰@Oe&X&#^QŽGólДz:YáÙ¡ /<óñ(Á€ç!"“7Bý˜È¨ “8ÉÉ0©w$4kUp<`8ÒFxbtëÖM°ÂxDÝØã]cd„W~âA€à}@2uð&ãI“&IH1êÊB °†ÄÂè¤Æ‰°óù.X_hÄЂõúÔÈ*•yOÝÁ‚º©Aˆ#‰¿¸ïàÂO(²ÈyçW^TUÃYlƒ(YÏ?ÿ|1€œtÒIro1šíµ×^’Ÿ†—öÉ6€£é&sÌ1»—E)ããÄܹs¥ÿ5]h '²Ig¬bÌÃxÈó¯cT Õ)_2k¬¼¦wâ6|0–él\ÉK~‘'8zÃHÉŠJÞ©Ph¾©ÞC±äl%¿Y/ùÍNÉ3AJ~!Ý|)é“5–¼Ç•ôO«–1'¥ª”/ë=([ï1VòFîãrZrÿý÷—¼¡µä ¯%¿)‹´~£[ÆÞo`J~³iù•…ù\J%¿q’1×¹*¶Ï†@ªxf«ŒC>TLh=|xFùÝ;…„þÞÌ—¬Á¼XÊe,ŒZX'jù¬ÅL `ì÷Î&ÒïX{ÑOÚU˜ß½ãTÉ;”|èÞ\Á@Ý}ØPYz'‰\Õʲo=z´ôCot*ù|¹kC³f迤í^‰^òN€¡E¡?`ÿ¨{dÖƒÞÀz,_R.ûO=Ýe…=­þ^Ï+û Ï“5¨Wä˹ìÙ «xGÆeê9üÎÚUÏc½ïÙ=zZ]¯ìm¼Â¾CùaõöƃëL•àu+ë«ÇðŠÎÝCX™aß¡7@ Rë:Þ˜Ô©þ‚±çÀ”q9X¦‚Ñ¡Nžm!÷ׇ/¡w «[­ï¼‘#tŒ£Ï°ÿÒs½Á¢Ä=LèKõÜ úº)•`ûõë'zýM_½óhÉ;ÂJ=Йi¿ßjXè¹öjDÀ\Êý“ab´x àÍ×ïjB,Ãg<›aÇwìpHr‰÷B5Ê"–wÎ÷ Á2S¢CAþÃW\!ñOa ¨P?âÿÃL¨oˆ <0‚õÂãšzAwç{>«¨ÇÌ,ø„t ÙÄñ„Þ¡NxY„‰2aößÿר<¯–™3gºÙ³g¯DÕ¦Šá£>êðzç»JÁ{χz=¶ Ïâ}dªËô“³ó‹¹áÎøœ¡“ /±J¡\(³Á¤`µp®<¿>ã•Ľ&¶)}FÌ„ $&(!ÏølRâPãå£ ïœN8A¼žÒ ÍT½¶ÕÑ]šç™PxS¥úŒñ/+¹>”ñÁ8„×™_ØU³Á_S5ÜU¡®`uùŒ° ÃÆÍ«o‡‘" ëÁoõõ ÓT†µâsí0á¾0@rÞ²w"_0.¡›R©§Î\7ÈXR Žól 1HèäÁï(F™ü 0C|Ï€°*a× šœÉŸö¢(–ÑYÛ)óadÑ 9?˜è«ÅIëÙY9üNY,Á‰úR†l‚ç“;„a¬È‹€1ƒ6V ¡·XèM—.]»ZF.=Ÿ˜Ÿ(J8ãÁ$ ?=¾3œõ¸vz“;î¸ÃMœ8Ñy¯Qî¢BiC(§jF·v¨Z[y¦Ù©ÁÚ:¡íª"«•“ö÷„?›æC_ñìx-IŒ×ÈØuý¡¡³ÇÀù³ŸýLô¡œLCؤ2>yï)I\Zk|i´~PÑ uâ™%^0lll´ÌjÇŸyæ™Ò71¤““)Ìx]í\ûÞˆÖ Ã‡—p•a Ÿ~øa‰/ÎZ#,[3õ# a6½w£{Öço‹R0–R# `¸“(¯ceåö „!\ á^É­ÐŽ‚ÑŸ ¬ÿqäÊKrpžkr{°þC¹ÊþLÍy¸ìßóãY’×€ÐÎ죊.=âÆNz8Õ°ÅYðL*èØã²·Fù\ÏšœsØÓq,ç5²¯×ëÖz¥ÎÌmüq-t¬c C…P&I¾=ãAB_±N¥íÌ¥èTZY#{æ‚„S] úœ"kí-P½‚'¯à™¥g£9ùbpå~3þ Škÿ™e,¢è{VFÆðÎÄ0 \!@x µUê*W iƒÊæŠЈýô'>Ÿ‹„Žó‹Ý6@ ¹&ú…zÉ'Ü“WàæŠBAçû¼ˆW”| Z Ùà70(ôiµÁ+$Ì”7KX´ðôLC WÝoò"…Ãç(Ì¡‘Ç*Í'm,ùM›„<ð¿HÛa…­"ðûßÿ^æïñZT¡®¼ç¤\Ó+C¯ÙÊ—£F’² ‰˜ÖØÕJýíÜx Láݼ"¯äÑñ^,Ã¥{§(Y;yOèªá]²X}BúúÆ+CK>¦~«XµNíâŠB{ÕÞª*pöƒ!`†@"¬Ï%c†«Ž!`Š€ÅKOGØ!^Yò–кÚë¿€b ëƒäuGu”xÁ@&ÜÉêH¼Ç}5éˆUxã­ˆÇ Ì&B`áµì^Îè'h$ïƒr £Ž° úܦUåÿþïÿ6ŸW9ÏWÆ“4ê²ë®»Ê¸«(O6úžhq?[0éÛl³ÃQÞD++4Ô®Q?gaä„zA¢NlŽ7¬&^½øâ‹#÷º k}—/X ã)M? c8å«5ÍÕ–ùˆŒê¡Þhžæ®ÚúYÔ›ðd$`†}Üqǵ^hB%´kˆ«,1=ºÕvCÀ0r‹€>r{ë¬â†@û!€"X–ä`Sƒ \švÛ~ÈÆßbòW<øàƒnΜ9γDY:yòd‰9:iÒ$ç#Ç_‰^Ü7Š0@=&LØÜ¹sQâEW7Ÿ·hêÔ©B¹÷Éó$w>»Q”ßhÐʳëCó|v+꾯†¸s|Po(ñWx¾ë ™Ðèý²ã V ”(‚R‘¾·w ƒ#ÏÏx”b¹=¢D³˜eaø Ì c2!F¿øâ‹b6´F«0ú`g_gˆ–Uhê'ÖE„‡å²Fæ>æE«ä*‚9!þFòä¥ ÖÓŒ"fdž€!.føH»º!`´€ÀM7ÝT5‰y ÅÚ©1"køÓ(Ãñ'OËØ±c§÷;vÄ'Õ¤#l$Iz¾í¶Û:NÀùPa’;/»<Ió|Ø.aûÀþ!É¢æRJ£þY`} ÔÀ@xxF‰GR†’A¢PƘDœd3|¤Ñ›íšµ ·—öË$œÃÌCðºo&Qiµ¶Û£2ö}ú:ΰDÛ•õÁœ”ÇÄæ¬…gΜ)lÒ.x[3ýþÿ÷ÝUW]%ùHÈKrõÕWžýiFLwI«œ!`¡˜á#ûÒ0²ˆ ž÷»ß ã%Æ)§œ"Œ,ÖÕêT<Ú|Ž·páB çD8,<ôHâMbD”GyQêWoe´¿àQñÃJòN8Aŧɞh¤…>Ï‹lPÌòŠDÂ((Ò,°>H¦ˆ±WBãäÑðA8”k$j29{}®YL˜k0~ I>|N¦HU¶Æï¡C‡FZ¶V,˜S|› Ônœô׿þU”﬛ò >—0¢  KmðàÁy¨¶¬ÓY¿Üzë­nÝu×u>¯‘„ÍE囬¤=šÎN3 C eÌð‘ò °Ë†@ýàEé“éºÃ?Üm¸á†âª~è2y$žé矾@N:é$1bÁÙk¯½ÜÈ‘#%NsZÊñ,†hÖ¬YŽðW(šÇïŽ?þx‡Ç]Ö…°·ß~»°V낸ûiIõqÝuוCç%Y wuž¼}Á;îPW(—x>øÃÞÃ3É~a׊Íó‘„ácÞ¼yRù( A¶Ç%—\bëžh»GáJÃØ§y>ÚÑðÁœÄÜ„“E^ 8°L›6MØ“äö ÇG¤ÝB\™Ñ#½Òêh†@8føÇž5 CÀH®]»ºÛn»Í=ÿüónàÀ¢D%)öÎ;ï,!’>ÿüó„j’ýˬ¶Újî®»îrçž{®lŽÉ›‚w`’Äú…ûЇī§Ÿ~ºûæ›oR=ÈúÏ4ðÓç‹-Š4Ä›†ºŠ;¹¹2>0|h8¡Tn¦]Ô¨@R†r0}üñÇRbôG%Æöˆ Éö(áÛ5Ôí~ûí·sÃø ¾/¼ð‚#ßáÇ碣¶[ˆ+3zä¢[Z% CÀ¨Š€>ªBc?†€!`$‰†ŽÙ³gK(³vØA”â&Lp;í´“FÒR’'‰A=×›ÿÒK/uS¦L‘XÞ„#Æ„¬3dÁqà 7»‡œ.$¸'ÌC’6ëƒþŽ¢ã믿v$EF…¨á#nÆáéèoäêAÙfbdMpŽwrœ¢ù=¶ÜrKIªŵŒíŠíU†2>›—,Y’šsA¨ÓæwÞyGæTŒñ[mµUÕhèš°=ÈyGˆ2B½vó9Z².„¢m§WfôÈz´ú†€!Ð9føè#;Â0 C !Pê2ĽôÒKŽD›m¶™ûè£ÜÉ'Ÿìú÷ïïüñTÂ%Ôü†.CÈ«G}Ôm²É&oã}öÙÇÍ;72zC•iàà#Ž8Â=ZÂ:úÙgŸM¥Îi³>ÖZk-‡EᮢÊóA¨+ÆG\‚±ê½÷ÞÃáDŒñÒVn«$ÅøPÃG”a®.¿ür‰£o¹=Zíís>ó c2á0QPÃ$hÁðA˜+Ö‘„Ãå/ËR*•Ü'Ÿ|"!Lq‚ÈKRóv qeF,?AV7CÀ0êGÀ õceG†€!`$„›ÀÓN;Íh̘1Ž0I¼'Ç Šó×^{-eyBͯû2{î¹§$=G1¶|ùrI N¬è¬'‡‡±‚¡Eň#$4J€¤%mÖGy>’`|àI¬}¬{÷îÆøHºãÚõêF ¯†Øwß}·´Ór{Ô}»í@Àꫯîzôè!k¤vÊók2O‰Íq àg.…)¶ï¾ûf¾ÿ¶Sˆ+3zd¾;Z CÀ¨3|Ô •h†€!4䃘8q¢0@Ž:ê(GŽ X(ŒÏ8ãŒTr3$Ag×ûóé§Ÿ–pW°N8áG\xB(dUðF%·¡(ðÄøñÕW_%^Ý´YšçcÁ‚‘2>âNn®ù=6ß|s‡¡ÅÄÈ*I>–-[& W0ˆŠñal¬ö¨ì×KÃ]a f»ˆ2>ò’Øü»ï¾ÃŽ>#GŽÌ?ÈøX¼xqlý>k(cŒ' #ŒB}eY˜›ï¼óNqT9äC2Ÿ¤]B\™Ñ#ËOÕÍ0 æ0ÃGóØÙ™†€!`) À¦þØcu¯¼òŠ#Wl<Ї æ8à7o޼ĕç)ÀzI”n°=¦L™âHr'2Æ"Â] È¢œtÒIe¦Êé§Ÿî^~ùåÄëš&ëƒpW«¬²Jd ÎÕðÁ½þÇ?þ ëC>xM ¬" ŒÆ?˜UqH”‰Íƒl‹/¾8CJm¶2³‹còvÛm'}ç믿6avkMÍ`\}øá‡Âþ¥ýÌMYÆ¢·ß~Û=õÔS⤒õ¤æíâÊŒY}b¬^†€!`´Ž€>ZÇÐJ0 CÀHû„GZ¸p¡Cy¾Æk„„ßÄKÆ+=«Êþ¸á"ä¹P6Ùd·téRI$>wîÜÌz~^wÝuްO°0j}üñÇqCÔ¡ü4YšçãÅ_Œäþ$aø@iCüx uÕ¡Ù‡ "€apäÓO?¼†„ç[´h‘”E~ Ûã°Ã‹¼¾V`{ @ÉnݺÉ8Ýá®4±9w—9P™^Y¼Û$5Ÿ:uªT Ì×,K;„¸2£G–{ ÕÍ0 Ö0ÃGëZ †€!P<°Fí†*žXU³¯ –èÚµ«»í¶ÛÜóÏ?ï(è÷ÝwŸÛyçÝ\›—oK•Nàd @$=ßvÛmÝòåËÝÁì¦M›–I6 F+wÞyÇx≎IJZ¬”0>h7 †Vór/\½q0>PP.b¡®’ì¡v­fÀû{ýõ×—Sã0|¼ôÒK2¦j9§yï½÷$ïeÛ£$í\ú½æùh‡çjø Ý½zõÊt`mCXOB’žp ™®k;„¸2£G´]‡3ֳÇ—}G\LËhkm¥†@Ñ0ÃGÑï°µÏHxäcøíoëðbDùjbÄ…J§Ù³g»éÓ§»vØÁ}óÍ7n„ n§vßÛMH ñƒpWä`“Mx°¸r?´‚/Þ©xA¢¸â‰'ÜW\‘h=Ób}lµÕVß›0e°>ZÍóA9ÊúøûßÿÞÊ- =—$ì(™Ö^{ír½C´/ Œ  á®â0|h˜+kŒ!­Èe—]&FŒÕÆöhI;À~ô£¶a| l%#ífÝ“U!lÔ#<"9ë®»®;üðóZU‹È=vë­·:ê:nÜ8Çz¥HbFhï&û,r×Àd¾÷Þ{…‘o†h1¶Ò C 9ÌðÑnv–!`Ô^ÇcÆŒqPîÉ9ÀšE¿‰!(}‡ âðÂ%|Òf›mæ>úè#wòÉ'»þýû»ÇZeTâ‡á%Ê%”L&†@ÖPÃŒª¨E›3¿´"Æöh=;· á£YOl®IÍ1’uÔQ’‹­òÞeå3ãåÙgŸ-¹b`1"+U‹¤fôˆF)„5!!PayÀØÆØÁñöÛoÏ<+:¬$CÀÈ2føÈòݱº@E" f6açž{n,1¶ “5!b!pÚi§IìuŒox§‡}РAîˆ#Žp¯½öšxBF|Ù̇!á®»îrcÇŽ•ð >ø šçcþüù‘ôKe|ÄêŠÜ90>,±y«=ÝÎO ÷5ãeÆJ¤ÕüÆöHª7´ÇuXsêŠùëË/¿”¹¾È-çY\²d‰ì5²šØœ:b„Â1‡5j– 8Æ\}õÕî7Þp›nº©»êª« åè`FèFò\ªv·Ývs3gΔ|‹8WÍ›7ÏxàÑ]ÈJ2 C ÌðÑxvª!`tŽÊËI“&¹7ÞXü7Þx£ûꫯ:?ÑŽ0"@¶Ì”Sx×a é7yÎ8ã É=“„b;‚¦´\l˜ñãÇ û F!ZöÙgy.ÙgE¨'^b„{±€ñtÙ²e‰U/Èú¸öÚka)ã%Cá©â4|h¨+Ëï‘X—´ µˆ€2>¢6|¼þúëò¼²ÎánVŒíÑ,rv^5˜GəեK1T™õÁî³Ï>/s >Y uÛãŽ;îÂî»ï.†©j÷/Íïaæ³f¾å–[$ÄÕùçŸï¶Þzë4«éµÍè œìÈå1jÔ(wÜqÇ•Y?ü°ì34·V4W³R CÀh 3|´†Ÿmu À‚º4!¯n¸áñ¶o5Ž}—µC 2=zôp°æÌ™ãØp²`Ÿx~¶Ùf›By€ÖÕ9ì \"—áCó{ðü2f5+Æöh9;¯ÁpWúÓŸjšëß4±9X}õÕ%ÄiófÆŒÂö9rd«(uª q…÷~QÄŒÑÜIey`ðgoµÆkH]XtP4±R CÀˆ3|D¦eÕ8餓\¿~ýD¹J¸KvV+û%>Hòýì³ÏJm·lDéô͇zÈ}÷Ýwñ]ƒ¬rÅÄ ~•UVq}úôq¼F‘çF¿Q‡ºÂ@ˆg-¶xÕâénbd¸ ­„¹2¶GÖ{O~맆 êEf|`ˆ×Äæ8¹dq^bí‚‚xÅŠŽÐ{„óÌ¢9Ä•=ZïqÆòhC+Á0ÒAÀv¬éànW5ÚUW]UB¡€@±7uêTQʵÖàÔ@¹|ì±ÇºW^yÅ‘èV›æaƹ8@âÒfÉ`(®Ÿ~úi‡1Åù4À#n%#í!ËèÑ£,ŒqãÆ‰Ñ ïθ%Èú¸óÎ;]¹>4ÏÇ‹/¾Ø2ûFQ'7ç9ðÙ|óÍ3©`Š»oXùùC ˆc{ä¯?奯šçƒ1»È†e|`ðÀð‘Ea]u÷ÝwËÜIhr|dMŠâÊŒ­÷6cy´Ž¡•`é!`†ô°·+m‡À;ìàN=õT‡72y?HZœ„³í€¶×…ýØÅ .t0’`<÷ÜsnÏ=÷t„! ‰3ÞMEŒ>³fÍr„¿Â8‰áƒ°xýeE¨¹H¸$%¦pyY’f}w£ý±Uæ‘>¢f|hbó­¶ÚJ8Yé#VC šÜ¦iTcúÛo¿í>þøc¹l³Œc{Ôºkö[«(ãƒù’¾–¥y½Õ¶Ïç™~óÍ73›Øœ}Î /¼àþüç?‹Áƒ|Y”¢†¸2£Gk½çËry´†¡mé#`†ôïÕÀh+H(Ï<¸“LZÜV@[cëF k×®î¶ÛnsÏ?ÿ¼8p lžÉ/±óÎ;» .¸ ðaÙHøN˜«óÎ;O6å„cؓإš‰!”ñAß*̦æ÷èÖ­[Ó9.¿ür /HÈÁÃ;,PZs„ æÍ5×\Sæ“¢²>˜+ÿö·¿Éœ”ÅÄæ°=`ŽâØ«˜1#kRÔWfôh­§±W¿÷Þ{åòh G;Û0ÒGÀ éß«!ÐVxðÊ+¯t믿¾#¡2JV}&†@Ú`è˜={¶›>}ºç¾ùæ7a·ÓN;‰a„ÏEòAüò—¿tS¦LFJ=X(JP¦-xl&buÖqóçϦ²¸EYÜû¸s}¬µÖZîG?ú‘(oZÍó› !ÔU”¢Œ YŒ£e[­¬â ³1ùôÓO#i˜>Za{L›6MêrñÅ—ëIå¬Càßà8€a ã@Qœ3Ïá‘ÅPW8|òÉ'î±Çdž,&5/jˆ+3z4? *˃þ Ó‡ŒŠ?ü°ìØÃ›†€!'Ìð‘§»eu5 ‚Àn»íæFåPôÆféÒ¥™P®^kF  2dˆ{饗DѽÙf›‰§ÿÉ'Ÿìú÷ïïüñLåÀh¡©¡§òŠ ú&›l"Ï%ù?0P¶Â>½P_ £)ÆÓ[n¹Å=ðÀ±'cOšõ¡á®ZÍóWrs¼jñÑDçµSREOkUÔdÅðalT»DÛ\\Ã]1‡‘ñA»›‹7c‹-¶ÈÔ½%©9N¶ÜrK·ß~ûeª~T¦ˆ!®ÌèÑ|7 ²<zè! LÜyóæ¹ƒ:¨ù‚íLCÀ0RDÀ )‚o—6ÚsÏ=W’B¯¾ð ݗ_~ÙÎpXÛ3†èÓN;Í-Z´È3Æ­½öÚò~РAŽ„Û¯½öZ&ŒqÀ¶Ç{HÒs¼Dy>>ø` 5•…„ïäbÑ|$§Ÿ~º{ùå—c7š&ÉúÐç ,„óÍÞß8B]qÿ‰¯†c|4{wì¼4ÐpWQ>ÑIN¤ÆÏ‘±=ÒèíwÍ`‚ó"2>0|‚‘ù&"FÎ, ùºî¹çž2Û#kófC\™Ñ£¹'ÀXÍáfg†@>0ÃG>î“ÕÒ(x$ãñ¸Þzë¹G}TB %º¦p@ZƒbE€)'Nt„:òÈ#ù0è¯x擯æÃ?ÌDŒ¨A€ÒþÌ3Ï8ÿüç?݉'ž(ì,bU§-„œêÛ·¯$?öØcË †ãªW’¬~ýú‰âæ³Ï>s„•b#ÚŒ¨áƒ QåiY²d‰Ã{!n¼åøhæÎØ9i!  ÎñnnUsÅsÅú¥W¯^ gl†!³šD@Ì%0öPÄIh—&6ÏZ~ÖNO<ñ„8 g'Š,IC\™Ñ£¹f,æp³³ C ?˜á#?÷Êjjˆ2™ ‰ÎßÿýÈ”t…Ë”*=zôpP¾çÌ™ãÕÆf{òäÉ®wïÞnÒ¤I‰$ÛN€.]º¸Y³f9Œ Ä ',tw<Ó”5ÖXC’-ŽëwÞq°@V¬Xk•’b}à•¾õÖ[‹÷*á®Pœ4#jøøÇ?þÙ˜ŠÒ ïÚ®]»:Ê71ò„@”ŒÍï±ûî»7œ›#Èö¸è¢‹>?O˜[]ÓGÃGÏž=Å Žã‚†…J¿fÑÔ€9I›ÃøÈ’€÷Ô©SeýtÈ!‡¸ 7Ü0KÕ+\ˆ+3z4Þ½ØË°Ž¶\cgg†@¾0ÃG¾î—ÕÖ(lü»wï.ÉÿP¬._¾¼pm´Ï=÷œlf·Ùf Ñ6vìX‡§þƒ>X8oJ.wÞy§;ï¼ó$TmÔðâ%ªešßƒ~olfz­“&q>š sel4{A{^gŒ Šî*ê •¬룷ß~Û=õÔSå0WY©õ(Zˆ+3z4Þ»ŒåÑ8fv†!`ä3|ä÷ÞYÍ B @(¡_þò—2‚dÅ„×ÉB8B€kˆbHÂxå•W„A&ÆôÑGíè.\Øtˆ¢X*Üb¡$|ç2eŠ#DÞÎûì³(PðKK`ŒÁÃ8C82Ø)Í2$êiCR¬ÍóAxµfÛ£ÉÍiWTᮽ…’ ZÖâ”×sÿì˜öF *ÃÊ"Æx¤QÃG%ÛÞ£öî“IµCõöÛo/ãwÑœó<r”6f‰ñ¡lî1ùҘ׳"E qeFÆzV5–ÇôéÓe¿þúë7V m†@0ÃGn’UÑ(:PÀQÿÿìÐVÕµ÷wfrobôE¢b¯c,Q@#ŠbרØÀ ØcDQ±¨¨  –Ø‚ EÁ®˜ˆ&QMì%e®:™|™Ùßú-ï>9Ïóž§¾çs«¯¾º8p`5ÅdrN+Q\™Ñ£ü[„g%)—Q7ß|³³(ò±´# C 90ÃGs^7kµ!Ðr¬·ÞznìØ±ºI`ÍKZÜô-–u¨!Ø~ûíݼyó4×Ç[l¡žö^x¡RLÜqÇ-s?Ó7(éÈwÞŒ_|qÝ(ê¾ÿýï»»îºËA9Çgœá¾þúëLî‘ZG}TkøÀh§axƒJ„ÈÄ">2¹µ¬ÐŒX{íµµ†Ï?ÿ¼SŠßؼRš+‹öÈø[ñÀð#Â8Ž»C|#&64W¬Ž8â¥m¼[‰âÊŒåßQåQ>Vv¤!`´.føhÝkk=3š¨t»f“… 4/&†@3!€Âï¾eË–¹I“&©2þÏþ³;þøã•*,6ëÍ.]»vÕœä:ù¯ÿú/7aÂ¥KÀ›°‚Rçºë®Sº±ûî»ÏM›6Íýë_ÿʤ)µˆúØi§tÄðQíýè®Ò ºB¹D;02…h”LÀµB ŒÜÇ?ª¼fy&‘J íQ ÚvNZ°.éÒ¥‹Û`ƒ to•<<ËP0ñÑ(‰Í#À÷…^Ј°!C†¤u;]N«P\™Ñ£¼[!)ʃçÄ¢<ÊÃÏŽ2 ÖBÀ ­u=­7†@S#Àæ…$ÅݺuÓÃõ×_ïþñ4uŸ¬ñí‰üï£Gvo¼ñ†1b„[i¥•Üð$?òÈ#•ž¡šÜ „&}¼õÖ[ݘ1c”ÇúÞ{ïux`Ýr› 4H±ÆË’Ü+Y™jõò|pÿT±‘¶áƒM´E{4Òhm©¸Á®Z§Šßüæ7ú<²VÁ8Y®X´G¹HÙqY!€CQHpÎ}Ü ÂœÕ}#µ„h™3gj›úöí«˜7B»Z…âÊŒåÝM…¢<ˆX´\åahG†@k!`†ÖºžÖC éØ|óÍ5éÞj«­¦ܯ¿þºÒé4}Ǭm‰Ê6"^zé%MÂÍýp=zôÐûèf(8VWs]ésÊ*æ¿j !â#äæP]±¡Æð’ÉÄhFÝUµ†Ø¼š+‹öhÆ;¥õÚøhª+æ#æ%æFúÆœ_oaŸ Õ&{,Æšƒ:¨ÞMÒú[âÊŒ¥o¥fŠòàYyòÉ'ݾûî«4u‡~¸®yɉƒág¨–‚®…¨¨wß}·â?Œ¯…õkŸ /¼°Ø¡5ûíoû›?ãŒ3ôºo¼ñÆþí·ß®YÝiU$yòün»í¦}ƒ’®•Ó*»Êa-Êb/4ºŠëoæ´_ÿú× ×=ö?O?ý´¶³˜Î‡µë~ûíçÅ8Iòuâéе+é7ð®f 8l¸á†^¶2égZ…ò ž|òÉzÝÐ=¡ƒJC$¢Ý£ß ¸6iôÛʨæ¶'OšIýÀªK2ëÇ{,Ç£uíµ×vm´‘ƒC>È;ï¼£+Vøºé^Ić‡ÞÐåxñâEM7|õqÁÃ)xÞ‚ŸË•ï}ï{JRîñYåT@´]ŒZ9xl·Ývî´ÓNsеLœ8ѽõÖ[M}ݳÂÐÊm>ðâ6l˜æ±;v¬Þão¾ù¦;øàƒÝþûïï^y啺ÐD¥$cÕ‚ \ÿþýõy>|¸»øâ‹S§‚*ÕÖÿøÇîòË/×Ü*7Þx£…½«$*®TùüžuÔ}à^!ªϰJ%D|t–ê o,<äe™ªsQ˜w*moÔÎD|ˆs‰Fvчr#>Äx©ãx´šõBÚC’›‹Ó“®¥›=êƒ} ÌGPùÔ[hTxäåÇ,lõÖê¼—õõ,U~³S\™Ñ£ðæþÇÏÚ#”МË*§;î¸Ã]pÁQ§ºuëæÈãtô ýSA0L°'JK¨+ÉB[бS/üát½e ¬[i¥•t_C›Ã1/¾ø¢“s=.­6¶K9èÄ$M»K~×|PwÚi§vÀúYcÌðQcÀ­ºÿ €BŠ #‘l‰‚'žÃL0q;&™fT‚ç/à‚½ýöÛ•ç?îE+8:£ x°€%*B–ð¥¿&†@³"†á#¾-†ƒE{CÇ~«Ì%81ž·RÄG½›£LÅa}Ö;'œpB=.oN8âÙ¾|ùr'}nÒ¤IuÛëå4¬Ìfô( T<ÊC(,Üsçò“Ÿ>±Ž¿ð|œ~úéÚœh„ÆJ×ãŒGAРÿ B‰5/‚1}FÎ4„:Ð- ¼G÷€ðŠáˆÜzáç£îÝ»»~ýúé1œ'4å:††cС`˜Á‘ͤ20 õ»ž„ÃynM ,øæiϲ+ÛH@%>‰»Õ‹Å=öØ£ G“:‘,„ð¢c¢gÒD!< ”üjÑg’Ú{ï½u ]üxÂì‚'+“Ï=÷œNÆL¶ Â[n¹e޲‡ãQ¾óŠb*LšñryèE(g•UVÑE1å‡>cô ©y±ðF<#è/ÇR'1L°ù“C º’…ñÊâE#!ƒIm Ñœ7º„~°gc„щ„ÅÔOÝ, “ŽçñÊ9\Ó¬ e.×—ëˆ0ÙË¢E‹" BINØ¥K—œò±üsíIC áRmЊìŸ!ÐDð|AÏ>žö<óA¸÷1œ²ahaS1~üxU˜C[ǦŒ¤çô…~-žaÆœ;ï¼S7.xÇIsÿý÷똜ŽD}¨Ô)S”𝨏^I½Ð]1'ñÇœS‰`ø@:k8ƒž‘ñ,g&†@³"P+ÇE{4ëÒÚín¥ˆöRÐ%³¿©·áƒ½$Î+¼2O¢­§Š«iÓ¦itÿ˜1cšŠâÊŒÉwë0æ®'zÖÐ(ë%gUÃ<è kPö1AÐ)<òÈ#ác‡WÆ)mŽ>úh¥©å|ž/œ ’ÑPãH†£z’|ßãð¹xñb-†çÇt4+¯¼rçKŠGˆð>è5’ÚÁï+V¬p?ü°ê|èÇFBÛŽ³)J…1]µF¯ß[ð;ûœˆé{.ÆBÆ ¤ýý…ê‹1ýx`P‚…„ýØÁ6H%RM¹ÜË$KxtRÇ0 ѾxûiýL ×JúfǶòš5G€Dk2¸i2#Qìh½RAQ]É$ï÷ÜsÏçȯhb*Ë¢4ª†ãÔ-´¾ÊÄäe’ÔÏ|þ$ׄ—I!:O¼)¢¤ä$ÖKJ:+“´—I7*Còsx‰Þð½¡ßQæk¯½•Yì ‰éDù•5{öl/“¼·_r¢x™\½LˆÑq¡ý$WlÆEŒþ?øKr-™´â?{ ãôöÙ¡,Ê$)"m—‰(ç>ÈbՇ䟡þøë 7ÜàÅ€âãÉÕã¿ó>©=Â1ïÅóÂË"ÂKÈ©R‡ºí C •`¼#oxNy6dAêÅ0âe±Ût]#§—ÍŽ&È㦗¿šöãñÇ÷²1Ð1M¢PRO˜È\ Æu/›'/F\/‹úT®ó–otî`¬DÄà£mb¾‘ÍS%§æ+7óÎ>ûìN'IÏ)Ø>5F@”-:°fBÊMn.Ž::v1 5iÉV‹UëšÖĵRÉìC X·‹]ïMQnùJç” šTU‘ôC¬´ìIØ'ÕS$ºÂ‹ÒP÷`eQϦhÝ$"–¼B^"4½äŽ«éZ«³§í»Y"ó0ŠÂÝ C„ã½Þ÷¬ %W gnjt¥µ¶™ù“¹Wõ%›Ì3.ùuí)N‘~РAÎA2gΜ¨lÊ¢8×g àÃX'£è÷p¯è-Ä`Ñ¡|¾@Ÿ#ŽgzžP„«þ"é@Qâ{¡èJ,Ÿ:ÐãäSìçøm“M6ñŸS¬"Ljc\NBq¡¿ÍùcÂcQ~²tž«œœ½$ûƒp|üÝ:º|ùàƒü¨Q£ôœx[ª)—ýmX{Åëæ}~ÛÙO %|b[9> ×ü¶ÛgC €%ÓĨ9âÁ¯ "­BƃJ/2Qp±¨«qÎ`É@Ïâ‰8§Ô"%^,êz|!£ e<Ø‹W’—¨‡¨|þr%nl }¨´ý´!ˆxNx”´O¼°s q£HÀ„‹ˆð™W$qã‡$WÅfü˜¤óPx^ýõžDüØð^Â[é(.ƒ˜Å_¸Ž¡Oöj´"’TÚ1BØ<#âÑã%I®çyKK¹^+ÜijÈK´–Ž%â¹äo¾ùæctÖíd窘`,“¨“œq¯³u³£o\®W%ã{±ºÅJÍ\{ñhËs‹ÇoÁhÂ\Äæ­ZéÙ³§^³3fÔôzUÛ^;Ï(„ëž%œ(X¿„Í75ÅD< õ<Ö-¥Æ]M$2O§|C ‘@ˆ“û$¡Ïm¤¦•ÝœØî¾ûnoK=»eZå8Ž…qç9Ölõ”«’QÇŸ7ÞØ‹G{=›SQÝfôèóû÷ üeýÊ=/yô:Ü€ßFØã£ØNCp¢Ä™2”Ë+Ø wˆ'‘j*føÀA”µv’”cøÀ(€“C¨Ý:¨àl¾ÇàÀ=¤á#ß葯ÜÇA4”Y蕱èÜsÏ Uù¸á¢Ð9á{‰ñ’o#:—7ñóã†ø÷áüB¯¡Üb†p¤Æm‰ü‰úZ.®z²ý3°òtšÔ¹5¿ÔIˆL‚R5-‘‰Ci@ByÓ§OWª*Yü)=“(¡"îE8ÞãyEB}29ihçÊ$§¡„ÿ‰Â'¢!vðË'J”wúÙDDÇ„7wÝu—&èâóa‡Ö!&t ñpÅp^¡WQt*Å¿“ç#©N~ƒÏ•ÐA0¦ŸâYÁ×*PEÁùZLdaàN=õT¥üâ8±î+·&ß§˜‚û’pd„úöÝw߈?Z+™Üç‚ ÷h ¯ ¥à¢×\sMtmfΜ©u@÷Cxh¾@YF"xÂQItNùÔkb´2äøáÙ…>Ž{<PEõèÑÉ~ô¬6„`3^CWGˆ6 /ºè"#jÑþŸÿü犡lŽœxÊ91)…Sug•ëƒ1 @Ú\iž4’›ÂµaéÐ&ÒC Yk"QÆD”ôj…bB2Sú è$Љ(dÏlàÝÀ‹j¿5GºîMžñ®yýiTÈ|ÄõP½i®ØãÏ R‰®ˆö‡iô³Ò2À…uB3R\½UÇ«- b¥j…ò´Yryä÷‚}:ó!Â<+F†üC*þÌ}=vÈ=úêAÏ=«@´\î+ô|ž0a‚ê4Ðm 쯞xâ ]ㆵþPÁ?¨¯HÊ Í‚ÞH¢B•R } Ó%êZC/ƒª˜@ÕN\ôKkràú)~?óÌ3£"¸7ÄVõ!¼BŒ…ó•TtBì úè¥ÀSœB¢vB+…N¦Z)U.ú/ô9Ђ `—?T[ã/›±Ð? O¥?ŒïlŒªøÀ(ÍÜU`ìGÉĽ–??VSžcÔ ÆB‘¡Í`ÓƒëbÒ½{w't›Žg±”°IÇ‹¯GC Ñ`.ÙvÛm›>âÃ} JÆzà¢=¨›=¤PÒÔ£Z'óüW\á–/_® (Á§ÑÅŒ¹W()ÊCè¼UÁ-´×¹7Á'Ö×̇Šô¸£hh>}f&ZáœsÎéð‡1¿ ˆ§Lôè6$?Gbz Öúu&%Sg¿Ñ™=kã?þXëÀÉS¨åÔ9S¿ˆýCÿ”ø´=®3â0t386ÑÇ`ÔÀèÁšCr¹D%¡KZ¸p¡~fM‚Á'èwÂAuúõ맆X7(/_E{À:ÿ\ôg88U+)—k žxÐW„ýz4œ^ó¥®ùÇÛgCÀ v´ „cmO¬ÿAiÃ$Àd QÈ'IœfJ¸[5² 'X©™|ù>Hœæj·Ý¾¡Å"ÚÁÁŠ^ÌÊ©ä ;žÔI‚g#Ê>E\¡IO¡°¨à=^’ï#çÅË•W^yg3çO¨à¢kâíÁÃ$s3þSEï9ä·ß~û©ÂêèÇL vB€ç ª&<šÆŽ«^MxÇ0î¿ÿþ²žåFÅ£ñãÇk85†V¼–vß}w¥ÞȺíxx%Æ£ ´iÉYD}„ˆ¢/˜kòÇÜBט9œÆôrÏ‹—‡áƒë'V3(Qâm·÷†€!`¹Ä ª5Šç–ZÛO(Șëmø`?‡ó¬Éê%ÌÑPÕ`Ô%ê_’8wJY«~˜Ñã?Hs Ey©¢þsFs¼ƒ-E1) ’t8±žExÏš8_WAT9!‚µ/úŠ,…õv!+~C…cD¼-èE&Nœ¨Æ¾ÇÑèè£Î1zð=¦8¾!Ü+7óu58ßr cSüµ?:!öAiKå¢×co›$¥pM:Ǿko¾ÝÞÝ·Þ7ÁÓ?(hе ]¬À(ùQÄ ø F  -S~ ŽAÏd‘äqNø§™"D’v²ØÆ³ÏÂßÿ}” /æ «9 ,êLÎIœåÓ€ï‘þÇ'5ø+ õå^À6?"$Þ&<.â“c%‹x”®aó”ïA¯#­÷D˜àý Ç'?t9â+­:¬C Ñ`‘Ih8Þ`\pcœÀ8)‰áÜ` —Æ£‡txþ±?Áè|ÔQG©"ãÑ\PÅd©h'×Ы¯¾ª¼ÀDžà íMgë Qœ‰j!¢O¥Î\æ:"Tóñ #/sQ)aÞ õº«ð¹Ô¹áwIŒª^XxÕÖblõÚ«!`†@ú0Çá)ËxκŸ\P_5‹°ŸÂcšù§‰zE|°çÛŸ=)Ê9ÖõÁäg”Ìõ¦Ü*3zü%žÃûï¿ßá̇"Ÿ};N4—_~yÓ Øa‘_Ižæº`è†rÚ?†M*øXÄG{o†@ó"€Ž}û¢fËóÁ|„±†¹=@¡h÷¬¯N ¹ÂÙD½!Ÿ@Öõæ—(®HTÍ@qeFo®"÷2ëΤ\Í呆Ï8‡¢Ô§ßåútÅ„cp\JÒSð,°n”CSY¬ž¤ß?C®QÆ#ÖÜIÂq!âýSÒq¬ïËB’õ—^zIòÂwè_ õ›ï¡ˆbœÏ×A…óõ•½_Бú½$)פóì»öEÀ í{íëÚó8 ¢¥Â{ŸEl)!6|ö9 !Òåw! QÊ$^w¨“É£1£Cð.ˆ‡Q oÝÕÌ™3#K~œ‹z0Ø„ßD(”Óg΃—2ä á3“"íˆ ^¹ñøoo½õVÔw¼. õ3~ <ÇIÚÇ¢,éLáeÑ…P1a#qý.D·Uìüüßðdz‰þ/™ücì³!ÐN0’÷ú&¼ Qvõ7'†‘¬ ÁšöÒöþýûëø€aNÜ,sø°aºí¶ÛtsOï`1~„Åvgú¢>§‰úH#×G5y>؈/³j_DÕ1¶¦ßl›§Î\C;×0 VE€usHpŽÂ¼™„ùƒ<óÎõ·ŒØw2ߣ¸®‡ÐŽ@qÅzƒõûãF3z|suÐ+à­ÏÚnÖ¬YªÜmæ\…î9Æš”c0Ôå'÷N:'$Ö­0JÖðD‡Caž¤§à;¢FÐ;`I[ˆò`Ï‚p=ÙÃ$ ú't&Ñaè¡â‚ÑcŸ}öÑhöoz¨fÉ›š$Ü78½ê7ß³~G/Õl‚^ý,‚^q6IJáštŽ}×ޘ᣽¯ÝzO‚Þ0¢°ÇS9L Ib¡;^øàÈG-^Îq‰ÓAÅ¿ç=!¤,¶ I±sYà¡€@-ÃD‹ T:ðÀ£DÞ$f’b²bBÂÈÁ1AFŒ-HQ²áá\¬ÏœÇÎV ‹Ú$ï¼€“ÊbámL0Š`¨‰·I ý¿´7EÀ9ŠâÇðžÄ–[n©žE2ò=7À IÁ • ኜ‹A¥³Â¦‡|#$ŸgB’¯4”–m—oԞ晴Ï?¤Y“¼w—]vq %1^)#e½Ú·¼¼ðä2Îb ÆAHV‚!ùv‰ØÃ(ŒqÚ«`èîLñ¨ò‰tÖ€ò|0ÖUbÄÀ •{¢šˆæ=ÎC0|„ù¡3¸Ø¹†€!`õE€±¼Yœ³çÀðAo~­Ñd>G¡Hˆ|¯Uk@qE;`hd1£Ç7y)PJ·K”÷#8ä¬@ òÂq±Tt5”N°|ä Ï\p"E×€¾"©,~Ó((¢ß“t$ùewæ3ÏâôéÓ‹à¾GUHp¤…^½Œ&“'OÖCÑýð>D‹ 7ÃЃ`Àè™$èfØ3ôìÙ3*+é¸føìÐÑ%I)\“αïÚ3|´÷õ¯[ï [Ãø&/”M(®wa¼a(à¡#Á8 ; =&ý€1«PÔ„c1`”Q$ÿEY—BçÆ "!Ê$~ÞqÇç6’pB¢On¸á†È@§Á Ç£XCé¢Dèó/~ñ‹(L2^i7=óÌ3á+·Ûn»i¿£/þï ý~ñÅ;ôPÙ $ƒ3)¼2”Å„ …žIÚó±ä{xl1n Œ„^‹MF©yÃïàð5ƒH-õ2ÊÄËŠ¿‡~åì³ÏV¥%ÊEpH#š$^‡½7šÆÅÑ£Gës‡ÑÏ$èK<òH5`&mêÝ×%ÁøÈ8ÁŒ™nVíÅP —2Ýxãj,cUµxÄ£> ëlÔJ*6ŒoÐC–;Îqã*ó@¥ø…üü™k+Ÿ«ÅÎÎ3 CÀÈ”‡!⃵y¥sCv-+]rˆø õÊïÒqöìÙºF©W> öˆW\q… WS§NmhçÖpì™q¾a=’ZÓv’v‰òÈ¿¦èÈC„õ0ŽX…Æ裠³†M#IX_£¯@ÐS ¯Èôä AWÁ_’CkÚ óÈ?¿œÏœ»îºëꡬÉqêÌÏa‚ŽC ØôOè¡â˜ÆóŒ`¨Áˆ(¯Xï‡1C¾ êáùÏw>;kÙïÁøeV³ û@Æ\Ø‹Tƒk³õÛÚ›=føÈc«¡(¶~øÃF¿Bk‚rJ¹`ÉÅR7z~&­Q£F)ÿ8tÒIjÝ&ϓƂ`<€n*)Ù/’ÑbYgBÆ›gÚ´iîg?ûY@{1\Äã 0qEÉlƒ#~<Æ,ðAPLÁÁä…'/ý&ÿ ‹)#´›ã wd2,$ô}ܸqÚÈD·ô9çœVˆ ƉBe€}˜lX¤P^ Ãûìh'Øò~#1ú0ñƒ+JC‰ß™¤˜Ì™t¹†\Od̘1:±ó/†°ðA9ˆçF˜üù½9ñÄ5ÇuAy•d<+§;ÆhE0.cä9Äø‰²àp=zôP£a#>/ŒëãŘŠG% Ï>û¬lØàç/òÓºfŒŸx¡iBBrðêl]iF}Юí·ß¾â<ÁðÁæ0Œµåb† ,¿G¹ˆÙq†€!`4>¬õ JAr6‹0'±WÂY«†œñpÈ`ßÇ~©Ê{0ȧ¸ªåÞ3ínôàzµ[”GüÞ`M€¼zú"¬×Xc ‡ÁŽûÝ´TèaÐU¿³ðÜ¡¯@ÐQàÜuíµ×êz5”MnÊDG®"JX‡ ~LJ~#®Ã)ToÒ÷ô!ô ÛC=T)¯B=H÷Ýw_=•ýèŠ kýÐt"è] ÑB¯„Î(E-ZävÞygÕ{Pߊ+ÜYg¥No”ÏOä3 Ñ|è÷W_}5\›ksÊȃbbÔ ‰ð2h{¹­Ëú¾t/‹Íí•Är^,ÄEËã†CBt®G¼xú='´Kû^”òѹñ7ÂÇèÅH•C[„W1~HÎ{1ªx±ö{™Œ£sB=…^e‘íÅ[!§œJÚÕUWyQ|EçË‚ÁËÂB륢ïæè·k®¹Æ‹‡oɶ‰a#:‡7²pñ²°)zž(1½ÐîDçI„†sÄS!§=ÑÁEÞHX§—E–# /‹™"GÛO†@û"ðøã{1¾zQèó"Æ[?eÊ/†Eö^8q½lœtÌzì±Ç¼lP2i+ó‘—ÆtÆ´Î s–…½lXt^ pÕEJ>,/Q0^r%΃IË&Lç1$yÙ@%Rð;Ù@yÙ y¡(hØû£`ãíCÀ0 ‚5¬®¿%ßKT|ÁãéæOñbÖµ û qT«yóØ_ˆ3—ÎÅâPVóú©P¼º½(5½°<ûÓ¬ÖDitŽ=Ÿ8 ê5…µ'¾4Šmš2X[ ª§ïìñyÞ„ÂKÎÒ¦éCZ eÌçGÅ¡¾#|ŽD ^¢9ôx¡7÷âà5…g@ã%Ëâ¼øÚÌœ9srÎCw!Fƒ¨ìøžwô ´K¢1üM7ÝÿYß‹á$ÒA„öç¿ÒÉ‹êã{1fh¹ì7Ð%ÅE e~ðàÁQ;%BFõ@`À>(¿üüÏô[rFE2V¼úôéãÅHýވ×v-›}FïBçú>”Ék¡rK+¹=¼yŠö5 ×xÝöÞˆ#`2R˜Ô(¯ˆjxðÁ£¨¤Ö@E‚w‹L‰‘xß@Q"}ÒéJ•ÂùXÆ“*¼}õVü,ÎxäG{„cð¢&YUÊ)ÔŽÁÒ?oÞ< “Æ“¶˜Ð.¢  "ô/.|Æã Ácˆ<òox2‹Ñ\ÅÏ¡¿ðìãQ‘$2aªwX>·.ÞD«l0´+~>åâͱþúëG_jOø7…JyBD'ÇÞÀ‰IÿñŸ8q¢†wbb¹@ŸG4cϬl¾4¡W¯^J X­×Sn-é}êׯŸ†m3®à™Šw% É;KE•ÔBæ#" ÏñÎ#š,äGJ:¾œïÒŒúy>˜ËˆJ,GÒˆø`¬OÓ˩ߎ1 CÀh<BÔkåfIpN[å s[|ïU „©OuèÁ â$wZ­ðf¡¸jçHåÞ‚?¢«a¹ ×4ÔIûõZßKµ®=ú„ t¼IÊWÚÝ Ð<bº€>ŠÚ$š+ÊáùDwÂxÁû è`Þȯ¿Ý‘+ìò…h¢2Ðs$ ôV<³èV(#_âÔNá7¢T¸o‚°'aïÃZœ}Ø ûHX6Èï?= ´µÅ܉6 o+õæë¡8®³å†ºÄ€ÑA¿‡¾‰¶ñ~„ãy-…küX{o€À·°‚†@# À­ˆN¢%T©Eþ’Ý’[ƒ .>j/!È$ߦøQ®£ÄÏWܰA‰Æ Êd­õ¼+!ß„A2¹aÀH¢¬Š×ϱûì³Ò±~%ƒu9BŸ ±dã=ôVäÃ`%ÙU|².§<Ú"t ï¤ï,²’&s”{ô™Qhdh/“N¾ÀWIbd6H\ BGKáAôfœÇñàO{ J<‰´¡Øq…Îç{®7‹ñp» ½ÙÝwßhÈ*V†ýf´â}¥aåñ¡c}ßk¯½t3Vþ˜YOlÓÉM²ðÿ’³ŸþùÊ\éYN$*F¹1z@qå_gêa³‚a<ÉCÄ8_Î|–ßVèªØ 1nöG2cl19ãŒ3ÔÈÅÆ*€@IXìœðótWŒ¥Lœ#±öj†€!Ð< @gn“(o¥™5kVÃ7ž=óó2ëü'Ÿ|²¦mf…±ƒ}ÞÁ¬lµlû$ö¬ä¹dî‡Æ&)t-ÛT¨®v6z°ÅÀý2{aô 8Á ¨oGƒGÒ=‚Ϊ) ¼²&ÆAO¥á°ÅZª)°F瀥Ժ1v wHÒ$µ»Ôwè–È­AÙ8háP‹*ÉhPª¬R¿cˆ…ÚŠ+ö–phC—ÕJÂ5bX+\[ ;ëKr3™m‰@œ*êä“OΡ`ª8Õ•$h÷â•\Ééu9V¢@¼,,4|0Ÿêª. J©RñĊ‰¡ïI¢EK©*+ÆhÄØë=öX/‹dC퇪cb<,»Þ†îOøQ;Å¢”Y´K6¨JŸ(› /9Q*¦ß‹·‰Ðz¨1dcçÅѶ0~l©÷£ô´O6V¥÷¢ RJŽ£Ž:ÊCåU®@I(Å0Ÿò^nvœ!`†@c" Fí-ó’¹³‘y­×D¿JÁxê©§æýšíGÖBÐáˆ2U©+}ôÑl+L(½Y(®Ú•ÞJÑ^½DèZšõ#Ï–xú'\MûÊ0 C –ÕUž!È>å" ªÃ—pL"#¬ú¥B Ë-?‹ãh3ÑÐ_ <Jy gÑ–,Ê$©ºlŠÔk„ñxAà!eb… ² :¿Å‹;áuÕo¹åG¸4IûðÆjÁcJrf8¢=ðä‚â:@< ÛÒ<õ(/ªaÆ©§Qµc Qw$¤ýàJT^µí…ö‘ñ¯O¼½JI ºâVR'Þs”'Q&à`b†€!Ð0ü–yáÃ?TÚFïsâÌGD$ÖRˆ6aÄ+ùDÇÖRð oŠ«vô Ê6ÖhD{y Dʪ ¹jy«X]†€!` ØN6ûÊ(…€$çr’Xà á{E$ñ¬* K[Ïß¡F!””EYàˆgqV íJ=ûQ¬îsÏ=×m±Åšà‚ .PZ˜bÇÛo†€!ð ä€BI¢Øô°+É;ՠˆ?‹¼•bÏXE›fΜ©ã/T}»ï¾»rWk˜HjõÜ|óÍš³£4PøU+iåú`SMH>”~åäc!ô©Ôx ›nºi"]bµ8Øy†€!`õGãNÌš!Ïs<†Œ6ùy³FÃÃí·ß®NC† ©©Ãý&·×ÕW_­¬Øç4š´£ÑƒkCþ…ÁB'ÊŸåòh´»ÒÚc†À7˜áÃî„¶E€…~P”± ås¹B+øñƒÛå[¥¼”áüz½­R(‰y½ÚÔÙzÙÄa„êÒ¥‹›3gŽ&’ÇÇÄ0J#€ÂŸ|Ë–-Sþh ¼äù×ÃiȱQº¤l8æ˜cÜܹs5¹)‘]Œ¿O<ñDEãx©½GâD0`Ì9r¤æ*u^ÒïiE}„|Lðú’+ÌaIuò]ˆøÀˆUiÄeo¾ùæ5Uðê‡}ß¼pïÁEß½{wý#’Š÷gŸ}¶>WÍÛ³Ú·œt%Ë1zÖ¾uVc³!€Hõf0|0 Õ“F¦Ô:âƒçÜ_ï½÷žæ-dýQKÁqA¨½t¾'Ùó)§œRËê˪«åQÖ­a†€!ÐÈBÂÄh[$º'/ÄÛo¿íáa/W8nÜÉ“'ûyóæ5E^ú&‰uµ½ñá%ášÅV¹]nºã$ៗh/ Î<׫•ûÚtÇÜ40NŒ1ÂKRlå,È?üðý$™kˆgŠg›ü¢Qîm‰Òðp—§)’ôUÇYµyQàV4WÄÛ‘V®Qk§NZ²-’„UÛ.‘^”'ñæ}ôÑG{QŠùÑ£Gw*'IÑJìÇ–GàÄOÔqƒg§ØϘIqD9a(ôsŶ_ 2 g9ÉïEîŒF1>èþ…qD¶jšwŠ|{ï½w]p"·™Poê³ßµkWÝÏ4Úuj·œŒÅI¹<И†€!`4&ñ!+(“öE€PaòBl¶ÙfÑypž$VÞöý÷ß¿¡ózį.|¾´î5×\³¥(®âýäý¸qã4-}ô‘æ)ÀSÌÄ0*C€qâºë®s/½ô’;è ƒÔû_’}»=z¨Ç6aýõÆb蹈øÀ+søðánüøñ•_m“D•N ©:GH²ðª£^ÒŠú¨$ÏGµЉñH«ä€Jã^°2ÊC*M¢Çf̘QÖ Gq„>·eܦ§‰!&!ÏG3D|ÐF¢ÍQµQßhÇ'Ÿ|Ri®ÈÛP+antŠ«v‹ôHŠò ´«ì¯M CÀ0Ú¬³ïÖ*CÀha §¹è¢‹”òêž{îQåhÈkÒÂݶ®™ °õÖ[»‡~X©ãzöì© >á›&:†‘zÒɉ¤Ò^aŒ&7Twp-ÿýïO ‹ &¸þýû«1€²átF!R©¤‘ëƒ\,åæù†¨2Êm/¹\ Ô †Z)˜*ÅÒŽoL¸Ï¾ûÝïæ4N"?ÜW_}¥÷ ¿£ÄĘºÚj«EÇ1_£<21 Ú ¨®롌ämTąGbsö ·Ýv›ÂÂ:g¹ZI£S\µ“уgD¢}zÓQ]×ê¶z CÀhÌðÑ(WÂÚa©#pÈ!‡¸ýöÛO½´$TÜ}øá‡©×aí„€Ð=¸^xA7zë­·žnþÈ}Ñ«W/5ŒÔ‹{Eë­·ÞêÎ?ÿ|}Þï»ï>G.6æå*ü‹]G *·KbS¢È>þøcÝüÆó<;7þ[QÁðAŽ¡"+Ú¿`ø U¹ÉéÙÜ ]˜6›hH‹øˆ_A{_  qÁÀbH¨'£¯1¦1f‰yÀDßóÌš†@mà9üá¨ÑŒÌË—/¯MÅUԂ⹉ͅæJs}}ç;ßqµŒö`ξòÊ+5éüꫯî„Ú²¡æâv2z„(Œ^B­s™EyTñÛ)†€!`Ô3|Ô|«Ú0²Gïïõ×__=uH°š¦xö­· ÆC/Q6}o¼ñ†;v¬[uÕUÝ›o¾é>ø` õ‡š%E­*˜ /¼ÐÍœ9SÛ„÷8X¿ùÍoRiÏÚk¯­Æ¼Ô%7”ƒö åD¥ÒÙ¨览h£¿Ï?ÿ|ÑDÇÁðAËMpÞµ’Iq¬´v|û"€á3nøxâ‰'ÔÀQ ÉïýÌü,y¢Ïùo0”`€œ;w®* ^~ùå‚Ï6OŽÓ\ÉÄùÓ¦MÓóˡꫤNÚ›_'ãõñ\åËoû[ýßYŸ@§S¬ÿùçÛgC ³à4€ñƒ1Ÿû±Q¥ƒ$O–:x`|€’¯Âú‰u”ä‘Ôè9¨{¡õli£‡Ey4Êgí0 C dc`b†@K# ŠߥKMÖûÈ#¤žü¸¥Á³Î%e¢š)Mü)Ë/^<#= /eãXâìl~^´h‘_gu¼ôÙì±Ç<ÉQÓ›nº)Jö.F–ªÆ‰NÑ2V^ye/‘ãDòqÒžzê©E“KTŠÿþ÷¿¯‰Q_ýõ²Â^uÕU^”a~·Ývó$u51ÊE@(aô^cà¯\9ꨣ¼õ¡‘ëpãˆD†ä”êàU žΙ8qbt¼xŠGïãçñ¾_¿~Îå‹jê¯ì¨žO?ý4zŸßF’¹ç·#þy»í¶ó¢tÍií ÇldÉÍs°±Õ#@‚s1Æ{‰FôgœqFõe|æû￯÷¿ó½3®í›âÅYÀKN-ÅfÔ¨Q5©“JÄxê%'£®¥öØcÔÖ.it ]™ó\°w\k­µô¾“ˆE/”þóÏ?OF+Ã0 C ÆXćì"L C µ€û×]wÕ0q(¯ ‡11 tØpà ÝwÜá/^¬Ï¥ÞrË-šÿã’K.qðT×ZD™éž~úi'7^ä Pžîr鞊µ÷¤“NrÇsŒæ櫘×y¡râQ×_}ÅÉØC‚óJ">ʽ!âSËïQè Ú÷Iüò—¿Œ¾&Ú£\!‘²r¢ÔÏ9Mþzþú׿Îù>þ(“|š,1*F‡ó–fÜ"â".ÕÖ/cÍ5׌ŒÞãUŸï9žßg1RjTWt’½12B œíñ»ßýN€.2ÿyÉÆžÕçž{N©ÀN8á„,ªéPf#S\µC¤×Ýryt¸-í CÀ0š3|4ý%´†@)PÞÁ•Û­[7ÝÈÜpà ®~þRõØï†@;#@î‰ ¸{ï½Wi V‚zêG?ú‘FÒ0:T‚/ÊNÚÝ<ÇwãǯØÈTçµ×^ëz÷î­IÝ1‚Tš?(žëj®>ø h®Žü6„<Ðx3h@‡ÝÂq(–K †6ÿ›o¾yCqŠ—j·ý^PŒ!?LÒ¿ÿœbÄó[ïcîå8M†‘RÉÑ%šDïm©Gƒ(.iÖ9zôhMä>fÌ­âôÓOªâ7úA»x%‡A ¶õÊ™Ú`¯­†æhž‰·ÞzK_­×qš+æ%rne-$5Ç|ÈíFY ón£R\µƒÑÃryd}‡[ù†€!`Ô3|Ô{«Ù0jˆ›%” ðóO™2ÅáQiJ…^«ª-@Ñ>pà@·lÙ2å¬'…P#¸ã?Þí²Ë.náÂ…5U¬tíÚUóõ…²„œ?ƒît®5ßyçNè´Ti)Ž$¨•Hg¢>„ Ç­²Ê*:†¡()6–…<åæø i:Š&r‰XÄG%WÔŽ;ÅZ@Pîc|$ŸEÒ¿ù„Ddá¾$÷LAƒ¹9sæ„.߀ý o8OqÆ(îk¡Ã‹~ÆÈ€ÒI³N B§yNHŽŒÄûÃoqá™#‰qŒ<&†@– Øßf›mô¹ ¿LÜø–e½•”ͳIÄmå©…üõ¯Õ<@<·µŠöÀ9Aè+u,êÛ·¯¾¯E_KÕÑêFî/‹ò(uØï†€!`47føhîëg­7 €¢¦OŸ>ªòªœÄ¦o‡†Àÿ!@ÂT $@1b„&è|á…4úâÈ#Tå JÐZm‘œšˆ%Æ}÷Ýç$_€c3ß™6l¼ñÆšHJG}Ô]~ùåE“t&ê#N¯^½‰æ—.]ZÔ˜T‰áƒÈ“A‚‚ E“‰!P(Þ•äáAp2Èž7h©Î9çœÄ?~Ã1!ÈìÙ³Ã[÷Ì3Ï$â ¸ uaTHz¦‰ I2âa@Ì—´êdüKRÒbÌ€Œ($)µ’tŽ}gtžŒ‚1Á9í"‘g˜DìYË¿þõ/&ÙAr<¸ƒ>8ë*]£R\µºÑ#Dy@zÿý÷;œZ† ¦Ñƒûï¿æ×Ý*0 CÀ¨ fø¨ ÎV‹!`4( ¡¼b#7>ÊP¼ M C ๿îºë4ÆA¤ŠôxÀuïÞÝ}öÙ53>âå=nÜ8¥®XuÕUÝ’%KÔUTðô®}öÙG½Ì1¨\qźbÑùut&ê£Ò<åD|¼ýöÛªü£µ×^[½€óÛlŸ $PJ¢< "I`ÃÛè•c‚‘"ú2ïM<7Å Ds<ùä“Á5wîÜè•ïˆØ’døÀ{º\I«Î8¥U¼n"VöÜsO·Þzë©2e‘.pV_}u¥ Œoï ¬ÀÀ-É´uìgNl4‰G|ËדV»¡¹ºí¶Û4·Ñ¢!Z+­òóË¡HqÕÊF0'ʃhäÁÌ|…Q Ã÷ôéÓÝk¬‘™ì³!`†@#`†&¾xÖtC FåP½ôÒKE½‚Ë)«ŽÁÓPr{A•Ó¸°¶>’Œ?üðÃnÞ¼y®gϞʫ¯¾Z)60ŒàuW ÁЀÒŠª+V¨ñïkH®Ž¢¦0Öaø)Çðò{X´G!4íûbÄé­¾úê«ÄC¡²âùà>…”­(Þ‚ͱ×^{鳯óþø®”T’_(­: µ‰gu×]wUê=”¸$:'Ò£iÜ€Sè|ûÞH¸á£#> à⹬Õk#ˆVÅàR0䘕 7|<òÈ#O噉 ÷h9BDI±?Ò¾o‹ÕÇo•ÔÉú ê½xžúM9Gu”R`%Ño•ƒcT‹…à¼Ñ ÌGÁ µã¦›nZm7Ë:ù—hpêb½¥e–ÒˆW­jô`ü-åÑ¥K—,/µ•]žñ@‹ËÚZj(ß{jsç¨Â¾6 CÀÙ®ÖnC Å¸á†Üf›m¦ †Q°AeR®Gq«B³ÒJ+i´¡ÌÐdÀù_È;µU1°~õB…‘ltÆŽ«ÑWo¾ù¦òhãmåCÖZ<­,X [†îÆ ÝL¹F‡|ìPøÞ}÷ÝŽdî(Ž0æà¥ZŽTõ²ã J«çž{®¤á¯ÒRcP0m¾ùæ–ߣœ‹gÇä @ôBÓN;-¼-ùzÞyç•<†ÜäÅ(ö·lÙ²’åTr@ÚuÞqÇ9ÕÓžI^ï¹ç¥ÀÂ1ÃĨ%!âƒ{‘¤Þñ¨§Z¶#©.Ö$6Ç ‰‚õ{VBÿ?þøc7gÎu*È:©9}k4Š«V5zX”GVOMõå²F†úÊX þè+p‚"—y牬 Õ·ÞÎ4 fCÀ ÍvŬ½†@… àC!‡G!,ðÕâEQJVa5MwøN;íäØÔ¬²Ê*îâ‹/VÚ›¬•­M’5ØÈŒ<{ÐÜ0.‘ƒÚ©>}ú¸O<±ÓÉÇK5½k×®J{ê¾ì²Ë”Ö¢Zº™m¶ÙFó™@›pï½÷ºiÓ¦)¥W©vð{µQŒcÁðQ(Z¦ÚˆÊ51*A`p- ù+J Ô”,Å„ßñvÅ(nTWÅ²ß !€Ñ£e"@ ¬($|ð+F/²ï¾ûF§2$1Œ¨MÆŒ óçÏŽ¯öM–u~ôÑGQ³’ ¬D\‘ëÃĨ5!êƒy¤‘è®P”ñAû²6|@;Å^‰µãM–ÆÿF£¸jE£‡EyÔz)\ÆDœX#“D§'î9 p˜X¸p¡Òà:Ô•K}Y¸6ûÅ0 Ž˜á£#&ö!Ð’ì²Ë.nrk­µ–R¼àûÓO?mɾ–Û)‚xy£x ‰—Y(›†@í@‰ýÞß(8HÆWùxð¬6G©žàíŠác c .Iªˆ×k5Q`&Lpýû÷×s?þxõn+'®š¨`øøä“O F­•›ÜD¼k‰¼Á{>í\ ¥®ƒýÞÜxã9aíѽ{w¥•$ºƒçÅê¨Î9ç} ïž×APDb,APÐBOOnþøã‡C«~ͲÎxþÚM_À„¾ä+v¡Ú*dЬºƒv¢!€ÏV#æù`Núýï¯F òY Ïãñ+¯¼²;æ˜c²ªJ×DqÕjF‹òÈìÖ­¨`æ6Ö¦“'OÖ5TD4òLCÓzõÕW+ýöm·Ýæˆ^61 C SdP21 6B@”Š^r[xX¼,ì½ði¶Qï“»*Ú^ñìö¢¤ÑrúöíëEá[V›%úÄ ‡¹Å‹_±bEYc‘(S½)¼PkyÉQÒ¡1i™ùçEÁÚá÷ð…P"ê8(ÊW/Ñák{5*F€û‡g¶Ü¿Y³fyîcŽŸ8qbN}’«¬rÄHšsÞÔ©S£ó„Z#ç·ð!ÔI½¢Œ _û¬ê/ï¨Måb³Új«i»h_8GŒAQ[í!â‘환û„¶1"S)ã³Ï>óbŒ÷BKë_}õÕTÊL*äË/¿ô’k@ë’¨ø¤CRûŽõ€8tx16ù=öØ£ª5FZùóŸÿìwÛm7[Ä1Î?ôÐCi]—r$o„—¨/y"´Oìí„Ñöº5¼Œ%K—.õ5¥Ïm˜·XÛrÈ!º®ŽÏ·5lšUemŒ€E|Èhlb´Gy¤Ã#yõÕWwwÝu—R¼$Q.´&x{o²É& °Á+ÕÄ0ê‡T£GÖè#FŒp|†Î‰H Æ0<@eí–zûõë§Q'x£1.0ÀáVi´ÉÚk¯­”¢´Ôh¯ ¶(%ÕD}üøÇ?VoØB ÎCލ¬Ša">,±y©«d¿—B€{Ž{MŒE%‚¨è/EÞÖq>‹çg³Œ˜ˆ‰¸Ã§”ì¹çžÑ!D~ɪN(tŠEÚŠHqcÜÈ—xû 11ÒD€ˆ¢+ynEÞë`<÷áûçù§}›m¶Yš]ŽÊ¢Ï䀊‡g4ˤæDqÕJ‘Å¢<`;(F©Ýö¦S°f&rš¹šÖÎ$0'j“èm(ë~õ«_i2s‹(îÔv²!`Tƒ€Lö&†€!ІàU)›gõˆ¹à‚ ü?þñ6Dá?]–ð[/Šõv{à<ž™&†€!мñÆþ ƒòßþö·uÌCˆ?묳¼(3i ^¦¢ULY[ù1cÆT5&Ȇ[£-(cæÌ™O¸RRiÔÞxÒ‰R(1RCr h ÅÆù£>Z½]Åà䉸11ÒB@Œ^”ŠÑŸÐÈUõ<IòÌ3ÏèŸä+Ëìù÷;«:‰B¡/…úÁØ&yÇr"Qâí²÷†@Úp¿mÈÑõæË_üâ™G¡0ßyæ™9IdiV‚—»ä<Òy–5Ìu×]—UU%Ëm¥H‹ò(y¹3;@Œ’^¨+ýÈ‘#uÍZ—?É[§ÑL³gÏ®j®Ï¬ÁV°!`´-xv˜†@›" ɽ5 •ÐvheŠÑ ´DÇ{¬g3²é¦›zñþj‡.[ ¦B@8¸}Ïž=UAÁæ eþ”)S<ß´eÈàÁƒUIA]iR6eU¼-Ç×2P&þ_*ĺ*¨F—ÙL–2BHô‹{ÝlŠwlz,‰”ÑqãˆxäÅ›–ó¾W¯^Š+Æšr 49'ÛCÀ0 ¦F€=ŠÖÁ7ÜpCÝû‚N8<vØa™µGh5™#g̘‘Y=BqÕ*FÖRP‚8P×?P~Jâl?o޼̮¡ü ÐAÞÿý^òvDëqÖ¬¬É1"._¾Ü 2 C ¡0ª+Ñf˜íŠÀ¥—^êŽ;î8'‹}÷óŸÿ\“ –Ú®B¢óõ×__CÞ'Mš¤T7튅õÛhDHŽåÕôéÓ51²(,œœ(íÝÃ?œj"`Qþ8‰¾P:@è/î»ï>wÀ8è!d%W6<×^{­ëÝ»·†&LýðËž+žrN¢Y”ÞK¢DÇ«„¯¢´qPá<ÿüó0TWÔ_(Q2T"â®IW)ÏhŠ^"ûÑ0 –C žà\¢²êÞ?QlG‰Í%÷T&íaîcíÀZ `h÷²F¡¸jz+Ö3wÞy§ƒêS¢ ô„âd¢Ô¢ûï¿—°íË„NŒu"´U<<+óçÏWºwÜÑÝ|óÍJMGÒò­¶Úªíñ2 C ±0ÃGc]k!PSPn]sÍ5N<©œ$tpé³`ÞŽ²Þzë¹óÏ?_7?,ààÌgSdbƒ€xºaÆiþ±cǺUW]Õ½ùæ›îàƒv’LQ iµc9€à-¦ž%K–èx)ÞneWÁ†œ º$M×M#å±i/&ñ\Ô-Åwl:QZ½øâ‹eQ\h7ý@Ä£7шòî»ïFuXŽ8zöÞ0 ö@ äù`iÃÇþð5ÄgeøKßq8@‘›EþƯ¼òŠ›ù䓚Öo•†@y°éb†‚†çãíSO=•‰±CÄܹs݆nXU4ÄÆo¬Ñ#Df”MÁ¸LßHô"6Š¡rÄG¨B…zòË'Ñú–[n©Š>ÿüóvƒÀúk†€!`†€!Ð&`ØßvÛmuí[Ï<^0|dEsïý÷߯Ž^k­µ–0`@êW¸ÞWÍlô`ßùÇ?þÑwÜqnðàÁº#¿‰Ì¡gîÒ¥Kê×«Ý $‚ª·‘#GºÍ6ÛL“Ã?ÿüóÚ·=÷ÜÓÍš5Ëað?~¼Û`ƒ Ú ë¯!`´føh± jÝ1:‹‹›{ï½W=¾Þ{ï=·=2íÆŠ‡wô•W^騱$Á0‰M CÀ0 CÀ0 VC nø¨gĆ,›CíxÛm·©’÷˜cŽ©8³Ôu§|öˆV™:uj§¢EKÕ—ÿ{3=âQÐ-…DþÉ%K–µUþ…®âóW_}¥$h¶Ûn;wÝu×iôÎgžy¦{íµ×4×çá‡^QÔqM±S CÀ¨fø¨ÔV‘!Ð<Dðî»ïÖ×·ÞzKci7ã B®ºêªº‹v¤þjž;×Zj†€!`†€!P >ˆúf­»|ùòºE|ãñ·yôméÒ¥ÑÍÕ!Cªªà9´ýå—_ÖÐ[^pÁ5ÍëѬF‹ò(xKuú°ýÓŸþäÆ爜4h7x¾vÜqG¥¹zçw4iùV[mÕéú¬CÀ0 3|4Ú±ö ‚@=ÔŠ$‡$:;á„܇~Ø ­«]3F¥aÿx ;Ö}ñŵ«Üj2 CÀ0 CÀ0j€@0|PQÎ+V¬¨A­«À8"–üT(jÓ¢1n½õVÍÙE¢æ7Þ8Íâ]>ÅÕi§–jùÅ kV£‡Ey»ªÕÿƽ>þ|7pà@}Ž.¹ä÷þûï;òz²¯_´h‘{î¹çôýÿüÏÿT_‘i†@ƒ#ðíoŸ5Ï0êˆIÎàReq´`Á~¸ùæ›á°í"+­´’F{zè¡êsß}÷iÄ•W^¹] °~†€!`@AZŽS’묳Ž&,.X˜ý`uCà[ßú–R3A{Kn;¨š6ß|󚶇èrøŒ+D\“l=-¡ì?þØ=üðÃJã“vRó8ÅU×®]kJqE²vrb,\¸Piz§OŸžIî’´®å‰ðî»ï:r)Bk ]“'O6Z«*æÿä“OÜ]wÝ¥4ÍDN!5·Þzk7lØ0¥±þÁ~Pe vš!`͇€E|4ß5³5EÐk¯½Ö­±ÆnΜ9nôèÑÊZÓFÔ¹²vÚI?«¬²ŠÃ[8ë&†€!`†@»#€ƒ^Ó¥þˆ E±E²TCÀhL¾ýíoGtWõHpN´‰Í1¬¶Új©:[‘ÔüÎ;ït¼n´ÑFnï½÷Ní"°/¨ÅF#<²©Œå‘Ú­§ý¿ÿ÷ÿ” gEŒ•?ûÙÏ”.¾Ã;Ì=òÈ#jÈ„ÉÀŒébo¥†@ã#`†Æ¿FÖBC î°˜ž0a‚záA_íßÿþ÷º·«– 8÷Üs•£÷oû›r¤²É01 CÀ0ÚJ# /ºè"]O´;nÖC tW ê‘à<>0’n¹å–©BôÏþÓÝ~ûíí1xðàTŽ×‹â*=žx≦ˆôÀ@ôÇ?þQ£S¸DAg6{öleèÒ¥Kª×¼Õ c?, }ûöÕûû믿VÃND|Mƒ‘gÊÄ0 vDÀF¿v¼êÖgC  N>ùd7fÌå6mš&@c‘ß.B¸ýe—]æX"çÃÚ@IDAT ÞJ&†€!`†€!ð Gu”&QÅc;þGÄèvÛmÁ„²†µ„‰!`4>¶Ýv[Mp^ˆãŒ´c‹-¶H œÿûßšïj%ŒµÇ{ljeÇ)®V_}õšQ\Åähhtz«¤(O<Ñ-Y²Ä¨­*¸¹—ßxã 7räH·Ùf›90|þùçÝÿ÷;òÖÌš5K ^x¡ƒ¶ÎÄ0 vGÀ í~Xÿ  lö”SNqP>‚‡É—_~YA Í}(Þ2Gq„ûÞ÷¾çÎ;ï<÷ç?ÿÙÁ¥jb†€!`Îí¼óÎêi /üïÀtË–-SMÀiÒ¤Iá­½†@ƒ  ¬o?ûì3÷ÑGÕ´eñˆ4›‡¤æä:è ƒ4:"ŽÕ‹â*ßèqË-·4lN¤(¢yˆD¸ñÆÕ©,kÑêe|õÕW³ß~û©#Áu×]§ôÓk­µ–;묳Ük¯½¦Æ½Ã?\£šZëŸ!`å"`ÉÍËEÊŽ3 EàÒK/uDz*N2:"!~úÓŸª1  7nœrè¾ùæ›jü™2eŠ-ØÛáÂ[ CÀ0J"€b¦˜ ¨™1c†‚ç5ÊU¸üQŒýãÿÐïñ˜N’p 9ðnŽ 4”H8÷ÙgŸU>ó=÷ÜS 0(=Q¨~÷»ßUº>øÀA %2`À·îºëêûBÿH¶L~hZœ@Ž>úè’É—©‹HÑO?ýTÏÃÛŠ—R<ëô‰óȱ†§ô&›lâzöìit%Š¢ýË žÇõ×__Ÿ%raõÑ­[·¬ªëP.ÏùþðøH+±9ã Ïíüùóu¿B„´$NqÝÐi§–VÑËI2z 8°àñõü±ëþûïwçœsŽŽ8‘„ý¤ÑZ•¾2<ï½÷ž»í¶Ûôïý÷ßד0àõîÝÛ >ÜqíóçÄÒ%Û†€!`´²01 C "Dà%DÜ‹Áç;ßñ÷Üs—…mEe4óÁ¿üå/}×®]½l½x+yá næîXÛ CÀ0 ª˜:u*¡ú7qâÄ¢åˆñ!:–søŒp^(C;‰eU–# s~×/Æ…¨ÊªOy¡ì8Àó>Ç_EiéEÉ”Svø0zôèÄsÂùÔ›/’lÖ‡6‡ã⯴#IhC¡6r>}21²D@¢¹ý®»îªë|‰Ìʲªœ²¹÷…æJŸ5q¬òùË_r~¯ö{ñˆ÷’ãÀ‹²¸Úb:œÇú_rj{ÙH>…ǤýÅ_|á…ÎHëe·£BÚU¤RcûŠ+¼Dh[Á^¢<¼P§R~«½õøãûC9Ä …•bÈøÿýïß‹áÎ?÷Üs­õÏ0 Ô°ˆ™AL C 2à½é¦›Þ>ú¨z›àù¸Ï>û(¿he¥5ßчz¨{衇4ܘ¨<07ÞxãæëˆµØ0 CÀ¨!!ªƒ*Å€E/Ĥ‹Á h‹6Üp¿¯¹æšã‡_ÿú×_¼x±¶[¼ÞƒtïÞݽþúë᣶›ä) B½ä%ˆ{¨Ñ?f£6ÒÏá;ÚBÙP€¡n¨†Š Éá_yå7wîÜb‡Ùo†@ÕpþèG?rK—.Õˆª ªðD¢²xŽö¥¢°Ê-ZÞ»îºKé†ZîiEãY}ùå—ÝäÉ“5’ì‚ .H5'IRåÍéaQIW¯ôw¢ásŸ|ò‰FÞzë­š§ƒ³x·Þzk7lØ0eY(-Xº&;Â0 öBÀr|´×õ¶Þ©!@¨2tW„u üñÇkrºR ‹ÔPç‚Ht¡óð”EF›eÕ†@€2gæÌ™šX²GªÐd|;v¬Òv $iV!Ÿ´DP,°171 !7`äÃ3]S(W#qãI¡ó%BýôÒKn̘19‡`lAø{™?ÞÇÎù P´Ä â‘«k pl<3ÏKXԵџþô'=× ” Vþýû‡·úž9ÚIÂÚ M ó21²@ äùÀQËçÌ“ñÄæqdµýäÙ TsPá‘«/ ‰S\í´ÓN™S\5ƒÑƒëǾ*«ÁBç÷ùçŸ;ËåQúnãÅÈ8dÈ·ùæ›+-˜D¹•VZÉ‘¯C¢dô95jTIŠÄÒµÙ†€!`´ñÑ~×Üzl¤†€„Ûª•„áº_|Q¹®|ðA·Ã;”ôXL­u*h½õÖs矾&“#É;‰[á‡sÕÄ0Ú +®¸Â?Þ‘G _žyæå²f¼DQ¹ÕV[E^îùÇ6âg(¨Q6ÓŒ äv21’ GÈeÿ}Á‚ŽˆŠ¸Mfücjïó#/âcŒÀxÑ«W¯èkÞókŽþSN9E£>âJRÀxÁªO·hÑ"Í…ŒDa°@Q„¼ ä% BäG¼¾à0B"é8F(…&œæ ¤Š03#¬A¨ßÄHñÁøO~”üµ÷CÄ÷}Z‰ÍCRs¢ÕÉ…À<ÖY¡Ì+¯¼R•ÑBqå¦M›–é¾§ŒåQù]…ï$¦á…´î}æŒ 6Ø`ƒÊ ¶3 CÀ0røÏ*<çkû`†@y@ïpï½÷ºƒ>X7$úÄør ¾a/¯´æ:Jòœ(åt_P^¡èÀ bbíƒÀ‘Gé$ïû÷¿ÿuÅ žåÂO®I›ùÃã"ÔD„4Ëø˜†ÇmŒ½iyˆ`ˆGHê0‰ZÓ¢±‰×A¤Gœn*þïy.ãFð;ßñ[0`ÉŠ·rQq£Gøž×Ù³gk¤ïñÒÅðATl"¿HÖ§'¡>”É(˜Ã±”ƒiÒAÙ¡Iˆ±g4 f¯i!À½Çs„Ç9sÛoû[×·oß´Š/X†ž!ž‹bÏqÁò~ ¼7ÞxC½é¡ÎJ#©9eÖ’âªÑàA„û ”øÜ;Dy@¶ß~ûå]ûÈóÄ=Ž“ÆÉÙ¢ `˜“¼:Nr’ãIiÙ -CÀ0 tøQ:åY)†€!Іà‚ñƒM ža?Þ~ûí–§Daq/ Y]·nÝtSxà 7¨r³ oë²!Ж,_¾\ žÁèqñÅ;¸ÄQž¢à{ ¢qúžäGj&Aá ]õ ¤m¦ö[[ŒÐ7áÉš…œ~úéE‹=ï¼ó þ>räÈè7Ö2q9õÔSãsÞo¿ýöÑç±1`À€è;ÆœD Ù9ûì³u½ÀØ ‰‰sž'œ(‚Íñä“Oj¢HÂßã Çbø01²@E, l¢00|ÔB¨ #!†8u\µu™7=åýøÇ?ÖèÅjË çÕ’âªÑDyѶ=Xœxâ‰ÝjFpÇ|óúÕW_9¨Á…õÔõ×_︾k­µ–Ã`ÿÚk¯¹ùóç»Ã;ÌŒ¹ÐÙ'CÀ0:€E|tB+À0@€ ÊÝwß­\¤o½õ–#‚IH[Ù.V¬$5œ2eŠÛÿý\¿qZ »C C 5€æ.Ð[]uÕUnĈeQÆ>6¹(z Q˜ ÐE‘¨2É£;œÛ(¯ôïsC pøÙÏ~ÖáÐfˆLˆ'Fç9^²dIÔ}÷Ý7zŸÿƒF¼Ë¾›3gŽ ´T|‡Á/hþ”_=ô#š!B,”½öÚ+|´WC æ`,€æ{ºy># þ*£`TW(–Ù‹@K—F´G-)®ÙèA”¹ŠÎ=÷\‹ò(òd‚Ft•““µ -rïÞ½ÕHDîwCÀ0 ì0ÃGvØZɆ@Û!} ôÇsŒòW³ÉÀ( :‹F—°d>ýôÓê Õ×Úk¯ÝHM´¶†@¼òÊ+ÅÕСCsŒñê ¦[üŽ;îÐ$ÇñßâïQü,[¶Ls&m¼ñÆA¶óÎ;ëxRÌ€üᇺyóæ¹>úH©µðºüéOêÖYg‚†çJÎÁ;êa(’oEL!_^ðÐò@/’/ôê/^Á†¾a BÙ‹qh5ÖФь£Åú_®}n\Ò¸ŽåPh¥‰@œêª˜b*ÁÏÀýÏóð«_ýÊ]vÙe(ÀèÏy~îЇ` Ÿó_©«Œ§ùí¶ÏÍ@0|°Ž¯EÄJb(€(¶:›Û€9‹9‰ç“g JÞÎí«ÅU#=,—Gé»ÙÂ… ÝôéÓumƽˆ°Þ!¢cذanÇw,]a†€! føHF+Ä0ÐXÜtÓMêYE2Sè!ðŠŽ{R†c[åÏ’£äxþùçÕ³ÏïbŠ’Vé»õÃ0¾A $ÿ.¤àÅ0|Î]ºté ÐÇpÀø UV¾ à|õÕWUI/ƒDÿþý•¿¥L\àÛÆKú‰8ÕV¥ç`œ ykè_~rs”ÛnºiÍoïñ½ð Ýw¿ûÝè'(hß?ÿùOU$ч¸ò8§üc=–h< ÇØk{ À}˜†ÄŸ…üòþøÇ?F_qœA ¬+Dw…Á14/q!ú“¤äüÑ ŽðºŸsÎ9ÑaD…à=<ƒ[Ýi$Þ_{ßx`ø€æy ƒÊÛxDcÚ-¦žßÿþ÷j̃:—ú;#(ŸqÆ¢Í8dÅç jÊS\í²Ë.î´ÓN«¦˜’ç4ªÑƒ5†Ey¾|ŒïŸ|ò‰:üáŒxÜÇÛl³;pHa=eb†€!P[,ÇGmñ¶Ú ¶@eÁ5×\£^»P=ÀiÍB¾•¥{÷îî”SNq«®ºª»òÊ+t_lâL C uày†P~(›ïÞyç·É&›ä=8&î…ŽQJ‡xˆH åËyBßð˜ Þ’¡öÚÚàL/ñ¼ù¿UòyÒ¤IT¯œ*÷¼P8‘ Dsà„{žg*0Œ~ù‚R,ÈO<Þvx%.eS‡‰!(l%#÷+F‰,…y e1õv6¿ëïçž{N#UˆR2dH§š§¸bŽ6mZ§ 3I jT£GÈ啯åòȽrDõ-]ºTï±Í6ÛLÚÜǬsˆôÅhNt9¤òç•Ü’ì“!`†@V˜á#+d­\C Í8ꨣ܄ T G˜<90ÒR\4*´gžy¦ò!ýõ×nìØ±êÙݨmµv†@çà9‡’#J|”6(Y ¾+gÌã˜Á’è™q!B‚$˜|!$nl`SÏ:†¼rQ˜À%Íë»’X=DœAQ‚÷8Ç­Qé9¡o¼b€‰KÜhAt¿Ó”N(Ím¢M t?üιÏÁ¹ä’K•ąʱï›îù ?üpx½öìÙ3zß™7<ÐÕäKܰAî Œäå Rè<žÛ3f„Ñ]Ij9L”¦ù’DÏ# šñsIn%eS‡‰!%ŒáÌ;ŒËYçù ŽØœˆÎÏI͉¸"W†Âj…ç°Whô ï+V¬pÇwœ®Sˆð$á=Æo¼Q£W«ÅµÙÏc-£N+¬~ñ‹_8 D8Á\tÑEjăjmï½÷Îqiö~[û CÀhFÌðÑŒWÍÚl4 'Ÿ|²*ñð\Æ;êê«¯Ž”vMÒ…Šš‰”høéñÖœ5k–*0+*Ä6 ¦A€h ¼øò•˜$±Üc=¢è 6ƳgÏŽò_Ä;È8Œ$HgÃŒ§ Â+†„õ×_?Š@ñ€¥g0$@/È8cÉ¢E‹"ÃÇU{N(3ÿþêP?õ=úè£ñŽÚŒð«Ç•Ûá8^Qø`¼ÁØA´ùJÂySPˆ™´6q¥?2¬P^¢Ei‰¢? c}‡vPîÊç¨Ô8õÎÆ©S§FÕ†óx–PÒ¦8ua,€Þ-;ñö£0#j#Š1„g¥Yž‡>ø@?ò¬?>'áùã?µWC ¸Ip^+ÃG ºêLbsžÏ?þØa@åyìlRó8ÅYP\5¢Ñâ<:>RŒÃo¼ñ†ƒÎxóÍ7×ää/¾ø¢ÞgØ0tí1nÜ8]·u,Á¾1 CÀ¨ ²801 C SăًË‹Á‹bÏ åI¦õÕ»ðÐ_ iöÞìeÃXï&Yý†€!!¢œô¢\ñBÑãe1WôO ^6ÏÚQžz1Xèñ¼Š’?±•B¡¥c(e3†Š²Öß}÷Ý^Œ­Ñ¹â•é)/.¢°ñblˆ¾ªæœxÅÀá)cŽ#…Ö/”TǹÐ?Ú.Ê=W¼$£¶ ý—*+ý>þ/^~8/þ»½oÄ8Ýó'N¬ºa¥ž~Ã…ã@Nñú…ƒ>ç7>HÄSÔ¾Ruˆñ¢ÃùÔWê<Úþx_êœð»P¥Duò¼†ï‹½Ša%:ÇÞY! W^Œñ^ ~¿ýö˪-—ç”}‚D+z¡‹­º.Ú,FB-K¨º¢ù¶š)‹5=Ï"kzQjWSLÑs$ï—¥¹ÖAßEy^ôø¬dÏ"4–þðÃ×61ÏK”‡ʦ¬«nØò%úÖ‹3›‡–hÝýºÖZkùÑ£Gû7ß|³aÛn 3 CÀðÞ">d%cbÙ"p饗j˜4$´½÷Þ{#çlk®OécÆŒQ~b¼:ñúÁ“ËÄ0ZuÖYGi5ÈEÁsOÄÂñÇï’rˆòH½ØeªÔP¼"D6À=wîÜœ?¨mCáXGˆáè BùœKî¸ÇÏ8ã ÷Ê+¯h^ è®BôçVs畨/ây=âÇãÉÝ‚çlèo8¦OŸ>Ñïá;{m.â¼åñÔ&"(ñGOp¢( €‹G7qL¼þø9IïI>NdF’ÝAâñ|cŠÖÿ}øL™<÷Dˆá}±þp”Zž¾ãy…3¾_¿~|Lòýabd@<âO÷üñ;­ú‰(!º‹òIFÎ|V­ÅEÔ%уŽh+-OŒ—™S\5Z¤GR”¹„ž}öYÇÚ¥„ëO^5(M™×Ž8â÷ÔSOéýDD+ ÌÉsF¤.k CÀ0 F@&†€!`dŽÊÇ{¬Ê/›/Ê/ ìÌë­W’TØÿà?Po)á}õ¢¬¬WS¬^CÀ¨#DHœþù:îÉrPÇ¡´ÑÈ "E$Aº~~+õzñÅ{¼P<0…j§àùÔ#ʪœhŒJÏÁs=Dm„ˆ¤ï A2ŽxmK<â#|—¾E|ä#Ò>Ÿ‰zcƒþ}úé§îx<âƒè„çò¥—^Ò?1ªä<#…*ä¹{æ™g¼PYz1>è+m-%ôº8¯a^ˉb¢ÔÇç§E©¶Úï†@Æz¼ÿ™—ˆFEpüçÔÞõ'ôvêMß»wïªË%zJh%µ½B;ë…òªê²Ä˜é…æK£]vß}÷NEŽ$5¢‘"=,Êã?WˆqžÈ\¡çôb„‹ÖWDõ 6Ì?÷Üsÿ9ØÞ†€!`4߸àÉjÆÄ0 ,Àƒ z¡¹R.øáÇ+‡û>ûì£Þ]YÖ]²é× AƒœÐ¸¸óÎ;ÏáÕL²Æ¸Gh=Úeu†@:àyNrO¼K>úhM›õ@ÔÅ„ ÜO~òMrIÂr’ŒË*±CCàøgŒ,$Dvà <ÄñÀ¤D‰_H”£9 ‘I*¾Í6Û8¡¢r;FeTzNÒ˜•ÔöBmŽ'5§ÝIå:×¾oOˆz(ùÑYDˆ°@x.{õêUQqx“¯§R'Ç_¥B«©¯ÒzìxC Œ×Ü»D52×à¼3‰Â Õ">ˆ0éLbsæc’š yà:¡"*TeÑï)Ghû´¿D”‘sˆ¶¥%éA”9 ‰ÈãªF±Êº¥K—.iu¹¡ËaMC^˜»îºKï" ®9k(ö¬¬ó*‰.lè[ã CÀh3ŒêªÍ.¸uר'(3?Gq% krÐ:´¢@˱É&›¸>úH©j Â01 Ö@@<ÒÝe—]¦ÉÈ1p2¦¨‚âFþ¸‡Ñƒñr ý¡,!)r(‡ú0&rÈ!îùçŸ×dã$C¾öÚk •ƒ@í¾ÕžÊâíå#NHr?&¼'ñ'J-díµ×6ÃGÆ^ CÀh˜oB‚sŒéYsDg›£¼fîœ?¾Ò\ :´ª¦BqôòË/+…ó(TG[l±EUe%Ô(Fú)¹Á”ŠxÈ!îóÏ?Wʦx@ =í`ô`ƺk°P¢‘¬üœsÎÑûP"iÝÀÕQOr5*…¨=’îfûÎ0 æ@À Íq¬•†@Ë 775;ì°ƒz6ãA}PŒµLG¥#xÉÁÃÍæ>/X°@½Ã[©ÖC ]À“4DxùQÊð’!ˆPFi¤[Ü€B©Ð8¸|ùr·þúëk8§QðŒ5J7êD’£Þ¹xæŽ921B5ç„6ç¿b¼ "TB9‘&á{¼f1Œ„¾[´G@Æ^ CÀh0|`èf~"â# aŽÄájÔ¯ÖÈÀ|ƒs²ÕV[U-E.ªSO=Uç­vÚÉ~úéZfÿÅèA”ÇwÜáè†ÓÚ)—Žh3fÌÐ{„¨:°" …NÔ½õÖ[N’Ì;I:­óÒ¸þV†!`†@}0ª«úà^Q­„^†¤¦I'â­@ø=J^MÒA€þk¯½¦‰.If&\±¼Ê*«¸ÝvÛMiŒ…Â)Iþò—¿8áoÕóPn…$´IÇæ®¹ð‰:áo¹Eךk®© Î…?U7Q?|ðÁȃ8fþ|Øa‡¹‡zH7„‘÷ìÙ3š€fÆÈÚn4#Ì A‘@òx¸I“&åDZÄûuÖYgéÆ:þ†Œ 6Pü@Ñ1bĈó IɉäÀà‘ƒW(¤0‚\“ïðPŒKÒz šsâeÆßŸ{î¹Nø®µOp€#ñ-Ô÷ècÐUå º0ö7Pô26WCÙ™_f©Ïè<уñ²Ï*¤g+UNÒïô'TÉÓ£{/¨aæ0idólÒÀÈ€ãe2ŽkÉmYôýÉ'ŸìeáØP=¢2à6T›J5FhKü†nXëp-d‘˜¸ZO^&-C”M¥ªŒ~_s1²øgŸ}6ú­o²¼~âÝåeÁ­É Å;Ëó¹Ùî•r®‰Á¼„P{Q’zñ"ó$L41 æG ž¤›9A¼býã?®‰“EÙªÏú¼yó¼Daèóæ ¡Ñˆ’)¿ýöÛš46ü& / ç½÷ÞËù-$çÇxÒpÎ' gŒ‘½&eå7¡qÐyªšs“ó“›S?sCøž:hÉÚ9žä —_~yNBwÆÁ qÜâí¿ójÉÍãhØûÎ"@rp’„“èÜÄ0ÊG€±~Ù²eºŸg,/y Ê?¹Œ#)Ÿg“ydõÕWOÜS•*F^´ æ[ÉGRꔿÓö\â¨æÅHï…2²Ã1Õ~щ̿þúkÏþVœÏ'‰òð§œrЧm­,¢´õ÷ÝwŸßc=t¿É}Æ~LFýÙgŸíß|óÍVî¾õ-CXç£ãáž*ö'ŽIþ„NðbXͤ5Œ]ü%‰:uP¬}è«x>„š;§tŠè9WèzSû µ9àI›Ð¥¥%¬7Ûl³è:¡çc<4ið4i`P Tbøƒšð›Ö]o{#(ð˽ÌGq„.x–å¼ Ï»nÔœ*„[Ö3Ñq~µ†±¾{ámÏ)·V¸~ÁøÃF'+ƒÚ«¯¾êÅÚ®‹P¡¿òLÐÔÝjÂä*”Wj {ä‘G<›4CÀh~˜3‚‘»œùÆx·æt<ßHP¨ñ ‹ÎcœŒ Ã÷a~ªæ6'¡ž¸á…†H”GŽa¦PĻҳA b†€„½†€!Ðø`Lg`_óä“O¦Ú`ÖÃ3gÎT¥ôvÛmWUÙÿû¿ÿë…¶É‹w°?ãŒ3ª*ƒ>J.uØ}÷ݽDTUNþIõ6z0‡Kd¨ÏsÝ“J”‡:±iU¡Ï’¿ÄŸwÞy~½õÖ‹”µPà²'ãž11ªE@(ñü%—\Ý[…Ö¿ñïwÙe—ëÿjëç< ì)¨£OŸ> B¡«÷{¼ ìW$_GÇÿž÷½{÷ÎÑ÷àÌ$¹˯¦í¥Ú¼`Á­¹]Z‚ÁiöìÙ9ýÖ/ù}Ò(ÞÊh,LJ<åÍ"P,–ú‡?üAo‘N¼A5Û¾ûî›C!±÷Þ{k(—܇ Ñ=Âçš!tt̘1Nô9ÔbÓ§O×0?°ä0è[o½Õ‰Q ÂVVnΜ9ÏzôCo;«»&$üXþ*JI÷Y4æ$ÓM³ô=z8Y€:êk¼÷ᇦYEC”uÜqÇiRw( !ÖÄ0šñ$ÔwæèbÒ·o_»IˆžOùíÄc=Vp¼ç\Bš-ÆÊd<|å7BÆ Gª='”)›¢œ¹`ë­·Vº-( Ib ¤IØÃ1qš°ð]þ«8}D‘´ÛÄ0 C >ˆ²ÌAï+ e—v‚sÊdoËþç‡?üaѾR-.]ºTiQªIj§¸’¨MîÍz½³Roz+(ÄÚ)—בµÔ¡‡ª4C¬·ÈAuôðáÃu­Æ}"Q°®Ôš­³×ÞÎo]$zJŸ« .¸ êd·nÝ4OQÐA­5 8GEÇ@±õUZÂØWˆê?ô*Ô‰@étÏ=÷èñŸ}ö™„ã•g$È‹/¾øÿÙ;h;ª*￞ÔÖnA!Š$ Aæ!aC˜$&AHÃL€ S@ E†$a!„Ä„Ah@Ã$¨€Ð *.ì¶±]½êÛ¿­»<·^ÕÞ½ïoïµÞ»÷Vñ_÷žª³‡ÿ‡z¨}lÊk¹1Çr_€b«"FÎ ÑõÚ”0p(½:÷1r¹ô<ÇG]kŒ(ÛùÁÆ?ø¢E‹ÔЇ¶„lêi2a”ç.•À$‘2)ç'Ƈ«®ºª~p Ž?>åD|ê©§´qöÜTPÖôV¸‘Æ7ÓÞ¶×îõ·Ûn»@r`6+béפ‚â\¢äk÷9TºK.¹$]€ngΜ0˜•SVjÓÏ;Ž@{ „kŒlxÅØ'î AƒôÞP‰§vÉÅC>9;à:'/†îñ´“'$$ecEÔÁ‚¢ƒ¾y Ï30ÔZ£ƒÐ†äu¯ÇÄsL蟱³©ÏYU’‘¤–µ/+ûí·_EG©S§þ\GÀpZ‹€åùàþÆ=§‘Â=£7‰ÍÍ!12DÇjýc ¿ôÒKÕ)aòäÉuç‰ûm¥Ñƒ9I½:ZÍ›7¯«sy hÆÁcÖ¬Yš'ý<Â÷crIò¬ââ4ŒèÜžÕwÞyç T%MóýÃùÃ#ÆŽ<0` Áñ‘ü|È-Áóµ9Rñž>MÈ HþTÝ!:ryÄÂoâ”SNÑqî½÷ÞzÊrl wl†”s3ú£MîBѨÍ3gœÉ\únøè kŽBëg‘8 e1ɹH2JBn¼ðžÉzKò€w °xAø‘Åy $cb/,Ã(¦QnȉŖD`ô×CD!³B3vŽñ‡Ò……™÷ÜH†Š'–W¡=Ò¶$Ô¸DуeãJc”:(ˆjÙ|óÍKÊ1nk×”NÙ¹S±„ójåÎ=÷ÜÔh$€á¢‹.êaô ® 7 ›Ó›8"ÜÈS6JƒE¼„;V“Ø¢DZguôFI¢¨ìÁ‡Vê1¾ìyúbž<òˆ¶KYÆÃ5”PtN ׋ÿ’äŠù£T³äNvä \DÂ9µ?úÄC&o<…Vy‚ïÑå—_®‰}‰ža¯„ªÊÚ¿$8>çœs•W^HXŒr’ï¿‹#àt>l¼ù¡É W7&ç»*F;Mž(ži=ø8 uGÀpGÀpZ{ƒ8¹(Ÿ6$‰XÔgbö'yQS»âÉ›ˆÓ”æ \k­µjæÏÅYÂÞˆ=‡8$ì‘{+­ÊéÁþ\p€ÎGz]™Ë|¯½öÚ„¼¶‡e®\ÿóÎ;¯$GAo¯¥×w² £²ïº91Rd‹ôøÌÞ}•8 'bÈÈÍC$‘t=òqX?èeÈKc‚¾Ë’Ž[{µ<è£ÐKq\"1„Xõ¯â›ˆ±4ZÚää“ONËVÊñÁzCžCë;ûJÞ%ÓIU3f¶üo9>ÀжMâúÌñ¶ÛnËíýžåy#G"tĹ岘Ö2“¿vžÜ¼Í¯W=†Ø¨$˜*I¶×_ý’€M±x–‹ Ôoü’2,ô< ÆõLé+î³  •‰Ç˜->bãå«XqKúå8‹ŸD…hRìØðCâ6Œ6±dÇ'Öí„r܈hËÆ×)÷žäiå¡ucãTvìÙyÆŸ1d˜*¾æÙ±dÇ·¿«}'ÁeüÜôâë—·÷60~p3°cñ+ßn‚Í–‹/¾85L åW"Ñ'Íî²OÛöÙgScÞ´iÓÒŒ>„wæ8Ž€#à8Ž€#àT€DýkòpöbBó[EÊEØ×Ð{ Vµ>ï£Ì“H”D¢ã¡¨ªÜaT‚¾qÆÆUHJ”yt¶¾·­2zˆ'´*ø„S±”(äØcMO7óC1|ÜqÇ•8þqÝq&“ˆ#–‹#ÐLX3V¬X‘êHЗ4BÐÏÅú–¼÷8¼¢/Bb#@¶,º?‰ôJÐ5l´ÑFi»f©e¼å ±a…1 cBGÇý!“õ[͘ÛòÃG<–¸ý¼÷!£NÖå è´À©u.ZÉÿu™’oKw oˆX¥ÓÐOhŠÈa9@ÄÀDiŸRAw$‹–Öƒä_¼™ð‡~'Šøðä“O*8´W¿úÕ¯ÂV[m¥å ¿¥¹–#W¡hÛn»­žãásÐkA•'$Z¸p¡r¬ÊD)µHÈDèB(+üåp‡sl„ )­‰˜ $DŽPBr› Œ#›DšäF`Àˇ:ÜbpÐc„æX­0Vˆ°‚–+OäæüqÅ, Ç&V‹ë"+HIU0”›lz줓NRº/;Õc§ž,ÞAq=Ö>ú¨žãÀܹs5~¨¤¬a6_Â" „* ŒbÚ®ïK/½”–Õ†šôïÔSO òÀ®ažp¼CáÝ"o¼±ÎübäÑPÔø:wË<}Ž€#à8Ž€#à8ôÆPó¼Ú¨<´ÅÞýÛk¬QSÞ;ê²O„ÂZàZi®ØóÅ´³ÆÙ_ï•j½û?öÆcÇŽ |°î×ÉíɾO:ž.˜ý¾xl‡áÇöNW_}µÒÖ 0@sˆr7,^¼87Œï€‹#ÐLø½A·„ 3¶Œ^w;útSPÔѯÂL¢§Äˆ|ðA]ï â·€}B>ôLЪC£.PáÈ#ÔsüCO†^”Ûô[¤³J+¼A( 1J}OhvÑ¡£c]%ÿ-z/„~ÑÓU3f­PÃ?tÐV¡ÃƒTÚ'úÏo¼Q)ùÑ/æáÄ}ƒ4õÌ¥†!zÑ6BÀ mt1š=’£ÔFN<ñÄ žæib%fIÊă…?ÈCÁ⎡ƒ‡9„dÌ,¬ÆÁ'á–[nIyÅyeñÏÐryPƒ J^«Ç±X$b#HŸrrZ2Öo|ã©‘榛n cÆŒQ>?êÑþŒ3Ô°bãÅPÃMr¦°gÑcñ‹åæ›o¿øÅ/ô ϸ10Wrp ð2jnÀ¢yY,þô˃5܇üÁ¹Ã;¤x/Y²¤‡‘ÆêóÊI¾Gî Cɲ,a®åxáú $éã„HØbš´c ùQ¬›¸`yˆD¸©b Á(có R”\W+5áßOäéžÚ9sæÔ}ƒnÂðzÝ$9p~òÐA"E¾».Ž€#à8Ž€#à8Ž@»!ÀÞ…çVöH2|°gdoJÛµæ÷À‹ý!û@’ ³Ÿ«V¨K²_æ±ÒJ+©‘€1Ô+­0z°W»óÎ;Ãf›m¦{$rm’çÅ'ÎŒ*|'PTžuÖYjh5j”îy¹>(…ÑàŒÇõÃÈãâô#ÌX€¡-/¯Æ:t4çŸ~˜>}z?ò—¢kAг¡“zþùçõ³°–¤† `ÀÀÑb }Þ£Bgù,Èyç!‡ëŠÿX00¶M6ÙDu=Ô?äCÔá™ùU#8뢧CphF·dë7º#‰òPÃŒDhtèé*Y Wù¬h]$}r-ÈŸŠ°6â0ËZ‚”é޹hÃþ¯£pÃGG]®úËB†W ‹ sóò[½ì²Ëô¡–c’C­ ,,Tˆpæéq³vsŒ…Nx_u9ðÀuqáx,ÙÈ…ø 22±bë«"XÐP¼[tD\—E×¢$„NoF”gÌýby6C  áÀy’i—E†p#°›e!D-˜A"n/Æ;ŽÎ‰ËØ{»|¾êª«ro¶Vˆ@ázamLjCŠÍãÖñ¬W õˆ|aÞƒ J"Ö7V{3´:½}e$;®ÚÀÃ<7~g1§n¾ïDú`èÃè…ñÉ¢›ºa~>GÀpGÀpî@Ås£œ³?yùå—ußbгjÐbOÂþF¨™kŽö`/ˆ#bìq>ª¥ïìøúÚèÁÜã(ö¯ìý:=ÊcÔ¢E‹Âþûï¯{{”½¿þõ¯Õ0…£"º$j7…jöZøgG ™`ô`ÏŽ°ŽäíÛY0UƒEöÇGöÿÔGß…~!¢ ýŽéÜô üCO°ÝvÛéwçWŒ$y:Ú3}Õ%iù­·ÞyäM^nÇãWÚ¼ýöÛŒ1, x\&~~Žq#¬Ÿô±öÚkÇEô=ú93Ž€zº¬ä9[&ï3m “Å ÎÖå$s)×§ŸkþÊkÔcñQ4 FsÄ{h,ŠÃºE.™i4„E>u¦Ô… ŠŽ}÷ÝW>P¤ce¶èk¯ÚWÂS o.h·òŒ4”GIOß7oBé$á“Òp½öÚk:WŒDbš+(±¬]ú~¿@yÂf±[»Úx™y7Ÿlqð²È”ø–y뇛”by7ê`ȰkF$ ŠsæÄnÂ5„~ÌŽeÇF¸õgux寑õÞÊÖË÷Õ{¢R$¯0Nñà –D&YÄJ_¥ýðÛ?~|˜9sf„|ï dÙy3úö6GÀpþ„^Ä(Ҹ׺8Ž@m`ø°ˆhrÙWæímji•ý ûK򨁿€ÂjÖ¬Yê$‡¢k·Ýv«ºÛ˜âjèС½¢¸êk£˜Ï›7O™0üàÓF¤&ì5™ÌDïð]@ø>°:úè£FáÝióóñvè^x~¸ð '†“éàÁƒ ÏÇ'X?Ðï 8À!BôF@t¦ƒ³cünªÕ»¡/Áp²téR]³y‚& ^cþЍ1M‰6©$èÑСå ú&ôtˆl ãk„Í’çPÜ›¶[5—ÞŒÙëÖ†€>jë#JÇÊ}”Ä<<`Ä0e8“€²ªZaá"œ”…þ>Öaþ:ñÎ'ÔØ¢-ôDÿè‡E!\nå•WÎm‰±ÙCw1!ÉØU™Œ!ãf¡˜bQÆHÀ{£¹Š)±38Õ#ð/Z}X¾k l¸yß´ìZå•ãÖuë#OÌÛXT‡ãx5Ù ”v§)ÕÁ:5¢”0áéÃC?ùcxàït9ãŒ3Ô{„‡ ¼Ègâø~U}üŽ€#à8í†N-<#“SÇGÀ¨SF³wÁƒ—ß‘EÝWßJiI -¢íZ ìk <Âá‹}Aµ{8êÅÏÚäÁ¨¶néȃ:£¡ÈÜý(Æ04CPtBQu1 K®QxˆãÈ×iÂu‡ûŸü8]šç<Ûìáqt6lXÇíY;í:øxkCб‚ð6C]Ü Jyòes¡ÃØa‡⢪ױè ô^ùk– 38p`8âˆ#ô¨ž ‡yÁÝN¶yÂ8Mˆ~=]žÐë"Âï=]£f6º¥ž¶Ûa.õŒÛëÔ‡€>êí­k-X°@Ž$Êâ¼ÄK(ãyˆ*Z40ll±ÅéâŠYmøó°ÛC ýðÐʃÞ#GŽÌ¥¥¢\µÂBdtZq®l}¼m±á€…–‹.ž$äÇ \Ls…‘ÂŒ4ܤL‰ŽÖv"Gª‘»ï¾;¼ùæ›…EÁ&ƪ¨ ˜Û\ŠÊÄÇãñÇÇí=l›EûعN{åú`d#:ˆåÑ£Gpç;Z]0à:ñÀAâ/Bö™#'ŒT.Ž€#à8Ž€#Ð{þçþG´T˳Vï{öîA€çqh‚Ù[¡ ëáåô'ü6y®ÖðÁžæ¡‡ o¼ñ†F9°¡¿FQ\õe¤G7Ey€4@(U¹Êd¾S°`Īvÿ]Í5÷2Ž@³àwIôëJ5N¥FÄ^¨HÐK¡ß)tèð*õÇØˆÊÃQ”öÌ8Û.íA_ˆ‡RhÅ1³¾ ú9ôtõ³¿Vç,ôtV®È ØÊ·âµ›æÒ ü:­O7|tÚ«0^KòMQ£©²$×cÁÄ[„dDµ‹Þüa4– .Nøûˆ¬@ˆ$á!ú«ÞÈ!CÒ(’«Šl´Tq»ä,±\ PpÅe°´ssÁÿÌ3Ïhòn®‘qãÆ©§ŒµÅx-ªVix+)Ÿ¹Ùa!çÆ‡X"6k×^Á+O¸¹ÐBX$þÕûì³OUtOxÎÄ*þäõÁ,Ùx˜…>¯\«Ž‘ƒ„ï-7oÆjÆnØ•Z5æjû…º ƒ!Þkü†ø>GUÛ–—sGÀpR 5)G¯jeüÕpz"À^º+œªà‚ï u û›ó¬Ë3¾íÃzöZz„½Žv8¬át7`À€ÒŸEqÕWFn‰ò0%,ÊUöqà‡àœ‡<ŒìU»Â¸à«ç‡»Ö¿x½‰½FƒrÂZ‡ÎªœÑƒ|·ÕRL•ë‹sè»pöEGGdt_E‚A} Âïõüc¡ƒë4z:„ß2zº<º+tJÌA?‡ž®Ý¤›æÒnضãxþ_;ÊÇT?<<¬X±BÀ²ºÒJ+iÔ¼Ÿö@Á¢‹r?O0`ì¸ãŽZoáÂ…uAnŒ<,´‡T¸ÿð²Á¢ w`³ä»ßý®æ­ÈkÿÎ;ï,<Çxíæ„qå?ÞA ³ãH¬ÕÌ‘…ÁûžÈ‚J½¡Þ&ð ZvŒWŒDf ‰“Ð ª,„N^]+˜Í‡klŽvÞ^O8á5ná5c7;wõÕW§Vz;Æ+å¸!AA~”l½¸l+߯¹æšaöìÙj€² ã´E†¥V޵־¡¹"¿ ¡ìD€T2TÕÚ¾—wº}²&°Æ³&ç­·yóG‚Ç©ÕãßÅpºsP!¸;ºqŸQ7"€âý Žv8!õFhç4Ú¬6Úƒç}œÓ/^¬ûZ([ªîõFqÅÞ¸^Š«¾2zð,Âw³Í6ScFöuìÿ:…Ú ¶öð»îº«&nfÊÞ†½ì)§œ¢95ÉßH¤»é(ª¹–^Æh%Ç‚•y (FöØc]¨­ ã‚ÙÐBêÃ!Š‘0ÚXn+?yòä’m¼˜°âgçkå¡%Â{ÅúGq]”ÌŠÖà ׌äXÆɃ¡6ârö>ÎurÑEé5±söÊ c <—-[¦Ü‘x6Ú\ñv"‰€XN=õT5Îp Á,"Q*]ã¸|3ßñ‹_Ô„†pTò½ÄH…³è:5s,l›ïä”)SôAº5~oÙëÔÈþ¼-G ›ÀS ªþP Lš4)͉TnžÇwœŠ­k²ÿîÊ!ÖýçðÌëôûI÷_¥Úgh±ÓKí­x G #`-ˆøè°Ö²bZ­áƒûóÍ’¯aÏUÉÓšrôÓŠ«¾0zpïaŽc!ûP«xlCYCTx»'0kö D¯³_#19û¾7<§101B­·Þz\G £À pöÙg§cư3IÑs#¿‡©S§jFZéoohËrd°¢ßá7 ÆBt:èoÐ{dõIV–u”ß‚¡Ôœi1¢¢»æšk¬hWÆpæ­FÐÏ™¾ ]¨¦Ë²úÌ5ôû†ôKY‰Çœ=ן9—¾¯÷Ñ;ÜðÑ;üú´6 §Ÿ~ºZ™±4ÛßFm¤‹ ÎŒsï ƒR*+30ÐéÓ§kx2ﯸ⠥e2Š*Œ X’‰ò`Ä8€b™úã$4އ.å<Ö[K²1Å–h„ˆ®{|ýðTàú¡8 ¯V ÌÌ!Ï×êqÖÚ?×o·ÝvÓðïÓN;­+æT+^Þ¨¢ÁâõŸ5¯’ƒ5Ž5ÔòIÕÓ¯×éø>ðbãhžrÝ3;Ÿ‰E|8¼ú`}$âƒõ…“õJ=8÷‘üfžý«‘˜âŠ=N6ép5mô…Ñ£“£ãë!FDŒÙf ¿Nä†VU;bÉOëÇxË0îÄô8‰WAÅ6åf”Ȇ$­ÇÉ!‘ÈF¡l]¹Q%rMëe¿+ù‘È&'=ßê7÷ß"^:'Éy’ˆgT«‡ÔëþåÁEò`•|ík_ëq{Ý7àt!²QHÄs¨d}ƒmÉý(;m¡nL$d½¤ÎyçW²fëøçîE€{¯ÝÛÅ¡{'ÚOg&N/z}E ×Oði;A@”z‰(³¡ Nx¯Wþð‡?è=˜½’D«WlF½’oûÛú;Îø„ú•„=(µÎ§>õ©D”‘•ªô8/ô¿É.»ì¢mðÌ €=Êôæ÷Q–&¡}ðüÏþë¾ûîëM³M¯Ë¸Åé,/õ’}³° $BýœˆCf" ܦÃ;pZë ­-öìXôŠ.Kœ‡qâÕß8ú1tT¯Bù¦Ç‹êsœ5=^,bÔM„}¤¤®D¤ºôSè©ÊµŸËöÁº„N‰2âô›ˆQ%íýzª¸~ö=käï)Ù‹U³Dˆi›`†ФÜX¬Œ8Ã&bhÒú1Æ•êÖ;ë×_;ÿ'_P—.@K1¹#‘yBôá²Xsó„ÈBé°ÌbÑFx…ƒ+1‘y‚5›è ¢0¬å ‚Â;ß/ eiF@IDATh—¿# ¯’ÀHhž,ĹEá9…Þ©(Ô™:¢1,4˜ùáÉ1Û0j5fœ¥|ŠË2Ɔ‡ ¹=²BôxÑ'Ño¼q¶ˆžcüäU©FhOna„ ic¶Þ\øƒÇ:¼ ®¼òÊ4"'>•ž8$§Â‹ÊDºKèÃ(¦í"$Ã#4“ëËXO>ùäÂÜ'í2æJã Š…q¼¤®¿þz uôJ¨ùyG 'px—‹ú`í0O©žµýˆ#àtñÑMWÓçÒJ,ê]¢ÁëQ“¨g4Ì´W Õ÷s’šã9L½Q¹õ/Šù^S\5;Ò££<Ø“àáÎ>VØ( ºaÏ,Nvª3À«œÈ16]?ît4èD °‚iƒ¨"±– òÅ:1+^FèøÐå z&ô{èñb!ßÈ&›l¢Q%v—騍‡ž V˜rÂZЏ˜2+[ö¨Çåã20™@Ý%Æñ½[¥1[Üе™”‹•Awb4ÿËÓ÷¡‡Ìê÷ê‹õë¯À‡°ÏtÆP}”F€8r#ð`ˆ1€ðñ¼EÂúï —Ë©æÜ`b‘FYËB’'|ÅLùÄÃj=Šsèœ$I8áyôK¨5ƒ•Ú#Ìð†nЄ݄GC'ô‘|$o¨=Ž®GB÷—^zIçÉü1>𠇲½RßqƒàW+Ñ(Û0Vþ—ÅrBw¤ ¹DX³ÂØàd„® \¹ÁPlÊ Ù„¦óŠ0nxE×ñ0^Îc)*W®ÏfŸ»öÚkÕX@Ø=Ôk<ˆd ?ÍC#Ûç7É÷”‡B0xàý5²oËè&à×ÅxËo'Öì<åëÈFiu$â#ó(6Û9îlöY;Y¹aXç¾™Ú§m^Y‹X7Yw¡7„vƒût‡¬ÙåÖÔZúŒÇ€2 j ñŠÕ{#æËxPV!Ù{Õ3h/ÙppïÅñ€úE÷° ÷C° ï¥K—*%%÷Z6tÜŸlžYÄ“¶,µc†Nóé§ŸÖ.àŠ³CvŒ‡gñFÖëÈ{3¸_rŒ ›Ïøþͽƒv×’1È@¡ú4ÚH6i.Î'(ãPœ’wÍÅpêC€=:(ÓpŠC!W«p…Z…g]öŸìGË ÷vîÜs¹7q/.râ³v¸—‰×¯îáx6ƒ”ßÊ”{m¦Ñƒû”4ä#ÃÉû#”`Ú®ÉËÁºk‰ºQ%-Øqå$óÐXy¥rß(?×­ð{æÙdô2ü.xöÇèQ‹>‚çshÝ¡¸²gj~S•Ú žuyE'„Ñ +,yþæ9Ê@žÏÙ Ó‚º+¯N¶¼Ïô‰~޹so tK쑊¦i§š1çõ×ÌcõÎ¥™cò¶ˆ€\`G k |P7ùÉèßÃU„R·6fQì”P]µÃØÚu „Z‹‚S¯³$KD‰Õ®C­j\¢¤KDù¦ó‘|?Ÿª&í…:ˆ©®$j/¥¾þvDy†“ÇMÇ4W¢lHi²ò¨®æÏŸ¯”vɾÊÃ}" ¸ùD¢ëRšFñâêA©emH©D %uùPOŸÖˆä¶Jdã£ó·~x¯¬DòX¥ç²cÅ’†•vq]Þ‹WgZJêØºË«p§óŽë‹ç§Î¬EÁÓclœÏ£¼îàD”\=ÊÓ6ýÉæ°$„žñX¿çž{nrõÕW§Ÿí¸½Š‡ªBÆs‚˾ÊfÓ`õ×G@|ô:/Y²¤ÃgâÃwZ‹”SP®°–‹!¹®Áˆ’.‘<‰(Û”FªR#bÐN ©£¼äu¬T\)+Å8£¿ùz(®šIo%ŠÁšgöxÜsÄ©@ïÏ¢<¬8¯¾.ÀXEQšˆSYbk(c†:™g-¨«¹–.Ž€#à8Ž@;#€µÍÅè:Pd Bu’ˆ¥\,…þ)iLJÊ|Æ ÿ¬x£ê˜Åë'1åL\Îßç#€b%›±K/½4W¡˜_³=Θ1#Añ&‰D%l@\G '±áCμù‹Åï%¢5«¿é\X캊WbçNÄGî´¬™ôùMI”_Ã5Cä7Éý#=†ïJG;}‘WD"LÊg|ä“Ä Àó³ÐZ–-Ÿ=Ù,£÷'æqðÁ+vÜ3%Z¢-sypŸga HC/ÆI’œø:šýÖøgGÀpvF }ÈúåéÉÅhÐl@!"hA’C+5ín½õÖi®FôÓè6Þ~ûmã¿øÅ ^®Ú<¡‡ÕÒr5z<ØÞ´iÓ¡‡ª˜I”D…¦RÒtâ\3|›’¤L©i˜¡¤.Ž€#P¸ÂÆèæ›oV¦¸†<”)5T„bCãTâ í•(h´:|ÕP-BÉ!Š•ðꫯ£A‚&‰ðîru}Rw=öHû”(‰’\#õö)ž—zï劚DBßéüN„œ‹á ¥œŠÇ µáù&’^iÃÀJ JÅ9ò}AE›±0h®¸ïŠ!Gq¢ ”Tv-¬<\Ç„ÃóãÀx C(JD)–b‡8¡ùgœP‚ÐBŽ1(ŠD"?´/æq,ÜkcɶÁX Øré| v5á¹ÊÅpêG€5 (§XçëÉóA=òBÐûžr•â]wÝ¥4ŠP¨ì·ß~åŠëZÎþ{!{?ò"V+Ð9‰a"Hd˜Þß¡u‚Ϋ·Â½š(øç¡¶‚:j(îAíBm^Pì@cÆ5=z´æ•äùyžâ¹ç’K.©xÍz‹—×wªE€ßÏå<Ÿ’»ïÈ#Ôß,4Ñ.Ž€#ऴ³UÆÇæÔƒ€p¦&’#õî“/{"IÖQjÔÓ\ŸÕÉŽ›È¼üñr©<§Åø¡^^„bã±”G¡R}‹­-ùì³Ï&¢¨Ñï³vÚþ{ÜZ´¼÷þŠ@é Êq¥Ðà÷Ïúgª(YRhbú$¢=Þ}÷]õ$¥l6â#Ž‚ Ý¬Ä‘1­V|œvãè k#n;>¯¥Ï¸^vÎô)›À4²%S<ÿø¸3[7¦çâþ÷ žqdïãóË—/Od“š6Ÿ'’ÆîÓqDN6"Æ*Ç´YõÁx˜ƒýAu••;î¸#=/ œôt\×#=RXºâÍ÷¾÷=½æN]Ö—Ó'Ñ@ÑÈ^‹ˆ ÉKQ󈈄:I’Ì&’{£l}î PJrOŸ)&÷PáÿWz̧žzª,æ~Òh6üŽXsxÎbòo|#5j”RíåEWsLòÎ4{XÞ¾#àtùÙ¨ånçât*«¬²JÀ;þõ×_WšÝwß]–yô¶ËâuJ šT<>¿ç<ÂõcíÆ‹cÂëž»v3n¢;‰á=^½Ùì¬YÃMöPÏD°¸tñá‰w»çšúLZ‹k7ÉʼnX š±a'/ÑD ¥Y$D†pŸ%ª„²ãÇ/*ªbôÓ§O×dzÎ:«lÛqC͈ôà6oÞ¼pâ‰'¢ú¹?3F÷zìùZ)\’«ßvÛmᦛn ’WP‡Ã3‚äm _ýêWƒ(–Ûš)¡•øyßÍA€ïå{ï½§‰²I–ýÒK/i”‘Ѐ«^G ¹L¢n"•Ö_ý°ù曇‘#Gæ–õƒŽ€#Ð?pÃGÿ¼î]=kÆ+…A·#(ì«QÈ´ãØÛmLÂn¹å–0bĈ Q3NÎæÚ•¬b¬ÝÆž7ž“N:) dó'ÞnaÖ¬YpGÀè‰'IfšR!AÏ@ø;´lšL©]Ç G,’ÕW_=ð‡ãµ×^ ’ä3`˜X±bEqUÜÐ_9¯Ø\ƒCQÞö‰q´hƒ® **(°L–.]šRLM:Uçš8‰7lj\Éž§- 9Yc‹õÁkLO·÷flàÕÚç=tâlÅô•ñ`à6«cqpq@à׿þµñÙÏ~Öq À^‹5¿ª+£¹b8”û]r¯‚n …¼$5WŠ­¢áãðdWC‡­šâªÑFîE&Mš¤´V(eqžÈ˜–ÓZAáÈ^âúë¯ÐcB!‰pÝk¯½ÔÑ@òz”½—áïÇjà™šû2Æ ŒüñlÍk9ZgÖ0pð·Þzë¥<÷»8Ž€#P„€>Šñ㎀#ÐÑà)|ûí·«ìé§ŸV®Zò·Øb‹”[¿S&ˆ’. p€ò UK8üðÃ{(;e>>NG /Ú*þC9o5¹<0\ tA$T^½BË>Pºì¿ÿþañâÅi½ZÇÎEˆå¤¨T¿ž>ñÖ´yaø-’¼È¡áPƒuˆæ¨—oÜ E}W:oõ,§Š}Æë´©¶¿zÚö:…€><⣳®›¶}°ˆœ ¸ÿ P/2¸ggArEÐÆºë®[öÞˆ1ƒˆ>¡¹ B]“m*ýL¢ˆ>AJ”'íWžÎ9眆æôÀ˜@þ*ž7ÀäCQ‡ƒVFy`Ü!ÇÈ7Þ¨Žà‚£ÂZk­¥¸’oÄ×ÇJß?_+Däâ4„A#6rIMμ"áY•ï&† 3pðJt{bGÀpjEÀ µ"æåG c *‚ç_ùÊWt3D¢>Œ•<“Ûq‚Dâm Ýí·ß^ÃÑËyX·ã<|LŽ@_!0vìØpöÙgkT†C¢Àbš+èïÊ)jPÎ 0 dèD. 2D#ÉHLŽa•²zû„À"¶ÜrË“8yÑx™_¹u£reVQ{½=Îz]Î8Åõòª/ÇÔÛ9yý¾EÀ¨®Êy–÷툼7G ³À¨@TÎDD ”»—fgJ]è”0PH>§ìé’ϬëGPÊCãX$FuÝ1÷ùrôYqÔc¯@¤å•W^©‘âñùzÞÓ&sc ÐnÕëLPOßqœ.  "ºƒ„ê?ŒHDusÌ1JO 》#P/<{òÝ2ƽbÜ€v¼èù˜ß ÆÀذ¡ƒß FrÏ¡õŽÕë9Ž@ÿEÀ ý÷ÚûÌ~JxÄGû\ I÷ Àýí‚áJFè *Ýk0 ߣ’Xdѵ÷I">p’¨4–jÛÅ…d«„ˆ“{ï½W÷>ú¨*ž™Ûj«­¦Ñ'DŒsŸwqjACNqô†ÑSA…Z$/q:à;gF£¨"wœ‹#à8}€>úeïÃpZŠZäÅ8ðÀÕ#åÐCÕo8wµÑé‹ ’ØqÚ´iñúO.æäa¿}¾÷щÀ±}Úi§iÔ-h30ˆ-‚')†ˆFÎ9‹c&RÃFÛN˜0¡Ç˜àP'? ×…qñÚ(åt^.ÝÑXFñâTWÝqM}Ž€#ðW¸/[¶,\wÝuaÁ‚i”êJ+­FŽ©ù; #sqbx^"‰8 ûƒ¢ ãÆo¼ÑÃAÆêòŒE”†5xµ¿–6GÀh8е\~ùåêA M T8f8ÀPƒ"’Í !íûî»oØk¯½z¥pm8ÐÞ #Ð& 0Ÿ8qb°<DJUcø€R¥»Õ[ýõËÎh÷ÝwD °É¬WzÓ's„æê‰'žPcç¯yòÉ'5¹«EÅÍõôÓO/És ªé'[¦¨þç?ÿyh3ƒ ÉéùË"ø,HQ{q½¢'qt å7ÜpCÍCâx—ÎEÀ(_0‚Ú÷¤sgã#wþŠ÷7¼ñÏ?ÿ|½×['ÉÉÙ}ôÑa—]vq¯û~öá{CQÈqôï_yå•Bz*¢7pbÞÔŒÉÓSõ³/’O×èrÜðÑåاç8=5jT )ñYg »"wÆÔ©SUÉÕ³t{9à€4ÏI›Éa€w´sÜ·çµòQ5~ÃE4GtP‰ÅÉó„ˆk‡È 6’l -7H\ê¼1cÆ”ôx•ÇJw<⬸Nü~ûí·(퉱²½é“¶{ì±°hÑ"¥Ãc#l‚A†d§äæ ?P–ªŠyãAŠuñâŹy5æÌ™FŒQ‚›~*чåÑGalà8øfÏcd® …N<›Q-Ì)ö>ŒÇ³ë®»ZÑ’×UW]5ýLž§X¸1-Êr—ÎFÀ"><¿Gg_G½#ÐßÀ ãë_ÿºÞù×ÁvÄGè‘.Ý»Did£7 §úÅ/~‘Ñ "[¾ª¼ãÐó‘60t½Ë+´.Ž€#àôgÜðÑŸ¯¾Ï½åÀ£~È!‡(·:´EÐ.¹×Nß^¼ŠáëÇ£xúôéá«_ýjøØÇ>Ö·ƒèEo$9ç{ƒ²ê.KTÜ‹&½ª#àt GydxX’³~ù‘¥õ!²dÀ€jè%ÏÉã?Þ£LNÛ‡ì”E§€k¯½6uÔQáúë¯/[ÖO:Ž€#à8ÍF ö¯¾újz*Ž}ðÁ¹CÀz*"–Ê^×]w]w ÌEÍ:Ž€#B>׃#ã8}‚ÔDÐjàÍ:cÆŒ°téRånÝm·Ý4‰kŸ ¢ŸwrÁ(ÍÊ-·Ü¢”QxlC_õK'I‹¡{ÞæÔSO x´:¥G'\9£#ÐX ½³ .,¡¥‚"açwN‚C—á†Åß[kOŒêŠÈ%GÀpG ¯àÙ‹ˆà8zƒ÷üÅÊù<1z*‹Þ°Wè© è´(Þ¼º~ÌpG 'ñÑ?âô)„´ÞtÓMÚ¥×_]©<ðPÄ‹ß7ê}s)þ÷ÿ7à-Mb`¼pˆ¢øÊW¾Ò1ŠA¼ƒà³'é!,gœqFGQvõÍUö^îF`öìÙºŽY2v¢YÇ LÀbÔW PDsÕÝùìú#o¼qxþùçõ9küøñýŸ³#à8Ž@øË_þÒƒžÊ åè© ïŒé©ÌÀáôTM¼XÞ´#àôKÜðÑ//»Oº êƒ< ,ÐðWx9‰F@¡Ý,.óvÄ¡UcúÓŸþF|ðA5>¡D>|¸r¼·jLµôKÄй瞫áÑ$'Þzë­K’×Ò–—uÎD€\—^z©&L/šÁ;ï¼£y2ŠÎûqG › ©+Ч‡z(ì²Ë.Ý45Ÿ‹#à8Ž@!ÓSýä'?)‰â`_‰ž **£¥â•?§§ê£‹çÝ8Ž@¿GÀ ýþ+à´ýÑÚ«M̈#Â#<¢<ùóæÍ Ûn»­BZ;²Ê½ãm´×^{…åË—‡Í6Û,Ü}÷ÝáÓŸþtåŠ^Âpº òýÜqÇJ{Ǻ€àõ~ÐAi¢K§HèªËí“)ƒÑOF[‰¢ E“‹#à8Ž€#P„ôSï¾ûn‰aâ7 N,GOõ©O}ª$¹8ÐSÕáÏ^EˆûqGÀpš€>š±÷àÔŒ€GÔ YÃ*üæ7¿ ûí·_xúé§Ã*«¬æÏŸ¯yXþáþ¡a}4«¡çž{No¾ùf˜6mZ˜8qbG%jo.Þ®#à8Ž@ÿCà•W^Q¥3ÿý÷ÃÇ?þñþ‚ÏØpG ÐCjF ‹âxùå—5J°G…¿€žŠ<1-•8V^yå¢j~ÜpG …¸á£…à{׎@9<ú£:Í=GÂ9¸ñ_xáõÒ!zâK_úRGxë`ð¸ä’K %K–hôG'mš{E½uGÀpþ†À²eËÂN;í>ñ‰O„÷Þ{¯¿Mßçë8Ž@¿Fzªÿú¯ÿ äB4ÆÞãdøç?ÿ9Ÿ}èCê8VDOõ/ÿò/¹õü #à8Ž@{"à†ö¼.>*G EÀ£?R(úô Æûï¿Àóz "? xngÚƒ¼0O>ùdØqÇìY³œÏ¿/˜ÍpG )Üzë­á°Ã l°AøÑ~Ô”>¼QG  ÉY±b…æb"²øßÿýßÎ)8×@GHšüÇìÑ$õpÊÁ)jàÀ¹ezTjàú}ýõ×ÃJ+­ óÉʼöÚku寫w^PÔ©M„6N—þ‰¿¾Ùè >ÿú׿.KOÅw'/z㳟ýlG8¼õÏ+î³vG 6ÜðQ^^Úh lnºé¦pñÅëÆƒ0Ûc=6Lš4)ð`æÒžyæ™pà*æ[l±…òæÞÜîÆÇ<pÀ$ÆW]uU?~|ø×ý׿€ä­:Ž€#à8mˆ“'O»ï¾»æ¼iÃ!úú xžcøüç?_vÆx’O™2%œ~úé%åˆX‚F‡<ƒÖˆä’½ø€Ò˜çÚ¢g[(x–<ùä“ÕPÃX²ei㥗^ n¸a]#†ŽgîJøÄã­O„ó9眣ãúýïïŠê .|oôT½a¯8©•‹êûçþg¥§Â‘-6rðcž‹#à8Ž@w#ÐÓ¥¤»çë³s:¼¿Ž>úè0lذpöÙg‡ „+¯¼2@etÁ¨‡ÿG>ò‘Žœ[;zÓM7 ßùÎwÂ!‡¢9??üðpÛm·…5ÖX£‡¶Ùf›0nܸpõÕW‡o|ãa»í¶SWO¬×Ö—Íç8Ž€#Ð@ðôE>ó™Ï4°Uoʨ ŒDkd•ú<“á¼ô‡?ü!¹€ Ì?묳ÂìÙ³KŒYCCm#È/M¿(}i›qï OÓŒ34Êd·ÝvëaôÈ«SÏ1”ÓµãþèG?ZK/Û=9šÌ°Á+Æj詈ÎÇ 9øí9=U\|¢#à8MBÀ MÖ›ušn(Þ-úƒÁ‘#GzôG3Àþ[› ®¹æšpÄG„åË—‡ãŽ;.Üpà VßÄn{Ýô™gž–.]HxŽ÷àõ×__HOÐëμGÀpG ÍøÕ¯~¥#rÃG›]˜~6r ð,‰ ¬Çy†ÈÜ5×\3Eâ­·Þ  d#z‚èE‹i´RZ¨IoS<–l7ŒÃÍÇ>ö±p 'dOëgŒ8(œ{ì±ðá8-ƒ›¹‘7!úøÞ{ïÕ´¼î«Üâ²þ¾;à{Ndz–ž k7ß<Ỷꪫ–6,¹8<¾Ï.Ž€#à8Ž@Œ€>b4ü½#ÐxôGß_¤=÷Ü3\~ùåa„ ºaû·û·pÅW(í@ߦº#4‡zh 9;›Nh»<2¨:ü¼”#à8Ž@g#`N ÚÙ×±ÓGo†æÁ³‘ÙÜÕW_=<õÔSák_ûZ¸ùæ›ùڈ膦­•ò—¿ü%,^¼X‡€qÚ×"Á£~Ûm·íqÚ¢Y8Á†èuWN÷€©k@OõÆo¤Ñ:pÜ#¢£=Õ@ÉgGnðþ _ø‚ÓSuí·Å'æ8Ž@spÃGspõV¦#P.úz#&º4Q£F)Dݰy:uj['S>|¸;ØD²ÕV[uD‚öÆ]5oÉpG ¿"àýõʷϼñjÿío«"â¼óÎëaô°Ñ☂±ƒg6$6è ÿþïÿþOiYçÍ›§%1T 2$ì±Ç%4?xÒ£p~óÍ7Óéëü£~&߆É|¾ùÍoê˜IÀž—xÝʽf=÷ù\dø¨vE}e3~þ04¡€Ï&f'‡"ÉæŸ}öÙ°Î:ë(DçdËY»ÿýßÿ0q­0ôð™è(˜Àmƒ 6m´Qá5¶vºí•kŠh £§²HŽŸÿüçJá–7g¾Dä |vzª<Äü˜#à8Ž@=¸á£Ô¼Ž#Ð&E<ú裚ˆEw=›”6™^Û ƒ„òï¿ÿ~¸ð 5‰&Iöˆ¤]š+¾?þñuCMä ãvqGÀpº<æIvŒxÄG·^åöŸŠ]{GÉþÄO„‰'§¥Ñ£G«o÷j¥s¹ÄéÙ„éäöøä'?™6qŠ-úÎæúàwÄ9(ªp i–Ô:‡Jã =ï믿¾Å„3ÐÂ… õ3h¹vÜqÇMqÍ Ç#Ùzl±œ(à ` +õ$j϶ѮŸžÊŒöŠÁƒ;pÏ O (1n`èଋ aymù1GÀpG V>$7¨ü;T­-yyGÀh)l¨HÄ}ÑEéˆóÓO?=œtÒIýÑà+®$ÇÓkúôéá˜cŽÑ Pƒ»iXssçÎÕ<0(îºë®ußGÀpz‹Š”HÿôOÿÔÛ¦¼¾#Ð0 QÁkÁa!öboX'Þ#P¶Ù±QÂŒ<›×òfJwȃNŸ³þ­°ùæ›§#¡ Êdòr˜plë­·Ve?Ñy0q걯ÀPU*Fò1Ô2fëÛÆÎgÚáY”¾Lê™u‰à¸êª«Ôø·K{/½ôRØpà µ îMcÇŽ 7Þx£~&bãöÛoãÇ×ÏüCñŽSeÃg¢ÌøÏ#­Xð&OA‘¶> ¶¯¿þzIô†ÑSC‘ ~­µÖRƒF6‚ãŸøDQ5?î8Ž€#à47|4^oÜè{·&2á‘GÑpìM6ÙD7[n¹¥+¦t9ØTüñá–[nÑðm’Ÿ3&|ô£mPo†\@Hª¹dÉݘ4¾oÑpúC‡UÊ”ï}ï{e÷Üìo߀öœï²eËÂN;í¤t”åxäÛsô>ªnBezVé‹âcÅG¡IÍÉña‘!ys7¥;õbÃGܶE5,X°@ ¤yÞ³Êi”óuóòwAþ òY°‡h†ôfyã‰Ì**òñ™üéOÒ(m>3/î[`nòéOZ #k®¹¦F`À dQV.¯î6Ûl£‘÷D’0/ !í`øà»†AÇh©ÌÈ=y^˜cžð½3lðj8Q¹“Cj~ÌpG pÃG;^“#ÐKë>å”S”Òè„NÐèžßwß}ýÑKl­:^d×]w?|ðÁpÔQGé&r×]w œk7AùsÆgè&ðúë¯{íµ—zÃ:=M»])#ÐYLš4IiDn¸á5Csá ‘Îº†Ý8ZKlîù=ºñêvÖœX?÷¹Ïi’m(i1"XDÍåóo~óÍÅvñÅk> ¢3Ê­¥äß8ûì³µ ¢9æÌ™cÍ¥¯?¾üå/§Ÿyƒ"¥v,Ùñ`Ð~þùçµÏ´{ï½w\¼aï{3‡xŒ÷¡‡J£[,’#k°Á˜Ã3;¸š¡)n‡÷`yÏ=÷hþÊó>6ŽPL²Çˆú ·b«c ÎMfذ×W_}5ZÉsY{íµS£Æzë­§ï Ô#R)¯¾sGÀpÚ7|´ûòñ9½@ï/þ耪BmÝÕˆ#Ô¸‡ð¼yó¶ÛnÛ–´b‡v˜¿ðþ;í´ÓÔ3нa+\d?í8eÀƒÉ /¼ †u¢Ë<ê£,d~²ðˆ>Ù»¨ ”ñä„ãš&Ò(Õï¸ãM n¡Ä_¼x±:¨Äv>ïC ëöDo`ô(GOEäQLOe‘8+ðÝtqGÀpº7|të•õy9CÀ£?šûU`CH’ÄýöÛO) Èõ1þü°Å[(Í@s{¯­u6kП=÷Üsª¤$A;Q l†\GÀ¨<Š'OžìQõ€çuš†€E|¸q¿i{ý@/{ruðwÖYg)5y’:è UÎcüøþ÷¿Þzë­BÚ+ÊüèG?Òè ¨™xÆËöûì³OM†‹ŒÀ€@T_³¤7sˆ ÙñaÙwß}K¨¿(1 þ—zÄ (õÔmTæHÔ Q3&|V[mµ’è b8'8=•¡ä¯Ž€#à8ý ü'¤þ†‚Ï×èXôÇ´iÓ”«öÙgŸUª#>·Ã|'_‚UW]U)ðƒª`ôèÑáÅ_T:v›×ºë®HĈ·yJ0‚ïâ8Ž@½XÔ ˜«®ºªÐë´Þö½ž#P+ñáTWµ"ç剑Ð[MŸ>]óIµMTÆðáÃ;ŒÑï½÷^Q•ÂÜ Ù <ã-[¶LÁA_å*¬ŸÿüçZ Ï´ÍæXT3ŒðäÙ@0¨\œÄìE‚‘`£6 %ÑyÞôdŸüä'ÃСC‹šhéqr´ÜxãJvóÍ7ë\‰baí[ºt©F­/fذap9Ú´–NÄ;wGÀpšŒ€>š °7ï´ýñÈ#„wÞY7MäþØqÇ5!^.õ!ÀFuöìÙêUE¢_6ŠÐT»©«¯×új{ì±aË-·Ô!”W$ntqG ^,êï`r}à¥ÜŽk_½óóz‡€G|tÞ5ëÆc >üðÃé§žÎ9眊1PY^ Œ&yTL† n0Tüò—¿,l#‰Ô”ß$¬.'Ð%Õ峉½ËÕ­õ\£æ@^°"jæ¼óÎÓaýød£ÇÖ[o­Î?¯¿þzÈû{CÒcDh‡åÙñó™={ è%¡²2dˆçäÈÊ9Ž€#àô{ÜðÑï¿@DÀ¢?¦NêÑ üÀ—;kÖ,õûÉO~¢Ô/AÚMÈf îf"Už|òÉpÓM76ˆ.Ž€#àÔ‹€G}Ô‹œ×k4(›ÿûßk³ñÑht½½Z@Ánù PÀólXN̈A¢-*%·ˆmêY”S¶}~FL*yþcp!‚ 6ÂXÝf¼6bPÈc˜'Nœ˜j«£>Z?ÇFð‚&,ïùœsDЬ´ÒJ}ãÎA)œþÆpGÀèHÜðÑäËÆüÿ„/o¼ñÆa—]vQŒ#Ž8",Y²$À/Ú‚7ÐøÃðõ¯]Ã~ ‹Ý`ƒ t¬x=óÌ3šˆ/o¬ÔýéOªõñ°«5jàí·ßxÕüá(ôVÊë·UÇ^{í5õÆ"<šÍ ×ÙoûÛJs”÷ÍXmž`Ħ¢ÕâÑ͹›nº©ÒVއž~x?·›ð½%òƒüAØŒó[vqG <ê£Ô¼N3ˆÀðÚ»8­B€gí=÷ÜS»ÿãÿ¨TL¼æ û".ºè¢ôt¹¤â±a‚ýä^{í•Ö³7=ˆìE(üñÇçR‘¯a öÌJù±cÇêñfýkälÿfìiö¤wÞygx饗ô3£c/ÆÞ-+)¾”¿8/H¶¬vG pŸ˜7ožRÕ¡sB×DT×øñã5wQ«×% ÄèĦL™¢÷5ô ›o¾¹ŽóÚk¯U½W.èpLÁÿî»ïæiø1î°pÔÚç| :ÊZë5|Þ`c‡—&!p饗&’` òÒ²çž{n"yš2 Y\Y˜Ê¶-ܳ‰ð˜–£Íá¶ÛnKd¡-iï?ÿó?“­¶ÚJë7.‘‡ö’óå>0¾í·ß^ë Wi"‰üÊoú¹rx Ïn"aÑqÊÃ Ýæ™RþIzH8»ÎO6" ßKyàÏõÏU"pÿý÷' P<åa¥i¿ñ*‡“[Œßò¶Ûn›ÈF0£lòÎ;ïä–󃎀#àTƒ€ð°'²ùIÄË99ñÄQºUSÍË8 E@ènôÞ+¹¬Ú®7æÔƒ€(yJöB ˜H޵äÍ7ßLD±¢û*‰>HÄ(‘–c 窴;ö ìŲÇã¶íÜû￯{?žáÅy-mSŒ çLâºb,HƒäöHëP¾bcgü´Éž(–xµÌA(¹öÚyíŠñ"‘’¹³¦o1ФÇÙïU”çÜ /¼ž³±ØXmÙãvžöüãk}®ñ•W^i§üÕpª`o޾ÍtoE¯Bï—ˆseÂ:Ø a=Ì®ÕÖº>ô]Ecã8º…vÚ)AO‹’cŽ9Fë~ùË_n¨~$oÌìC¾ûÝïjŒIâá”}/¹±êªW®Ñ¼1–+ï燀G|È/³Ñ‚‰(óÃÉ'ŸäÇ^±yr,Àýú†D=4Jä+vØa‡€&Ý?þxnÓ|°z}CÇSz衚™äi&ô!ú~o>×#$içR /¬îxR=ñÄ%Ã'îÛxÜ„‡ËBžzê©´l¥°ò´`‹ÞxôGãÇÃïòË/×Ĉ÷Þ{o˜4iRJ½ÑøÞêkñ#ùˆz’¼‘4¼âÚ% ­¾y-GÀh%õÑJô½oCÀ">ˆ¼tqZÑ¢PO‡©†ÑHì›>úÑj¹åÕ  Q P‘š°OÉÚ¶=¸Ð7±ïc_&†¿4z„sæÌÑv­Û»ñ™}ΆnˆZ&âš­qãÆYѦ¾öfEc¾PÏš€ùÙgŸ­¸ <8Í£B>“3Î8C÷®Ü¿ÀÀ„kðƒüÀ>æÒb¥'å ׈$ì.Ž€#àÔƒÑvgžyf@ßVIدCUMÎVÖ·F %¶&’‰Ï±¼øâ‹š[}— z0ôaqþ(ÖBr.©b9×(Ï:Ë}áž%†}ß›åÆÌ}Ît“DÆc¬Ôg#õwåÆXi~¾1¸á£18¦­ðг뮻†G}4=?ëóÏ?¯?lÎó‡j»í¶Kæ,â!Œç4­Ü€7üÀù¡g…EméÒ¥%‹åu×]§c`œüñ@È¢*!iuäû! R#±ëƒæzë­xPmµäáuÔQG…+VèÐ0ÐÌ;7>Ža‹0=®?‹›X‰Cl úüç?¯4bÓ¦M ä‚hGñܽ*£F 矾ò‹÷F( ›ol/½km›m¶Ñï.ßkŒ°âí×”s½›µ×vf!à¹>š…¬·[-¶ÉvÃGµˆy¹f"À^j\ö #FŒ(Û)7ÜpCè5ˆXáXƒ¡À„¶q¶úÙÏ~f‡z¼¢Àî¹çÂî»ï^rŽç¾åË——³¶Ù7B‹ÕÒ›9`4*悱a?‹a eJ7žÍï¹çžÜª(ÉöØc QÐ%ûg»(ù „Î ó°Dð¼÷üBY„ü³#à!€>éúë¯Wc+ƒ!¡éåX¿0¢tÐAVDóUº¯¤…«xƒ1¢È‚±c09µ×^;Ìž=[Ë3~Ó‹]pÁiOÐ~WcÈI+Ôñ¦Ü˜ãæÐÁÖ’Ó½4c8?£ÿìT;ÆÞôáu+ ?$—"¥CBIXq¶+BÅÛZèä´aTOòãJ$êDÛ…{"‹TIײˆ&²˜êyùŠh(á¹EB˜šÑYQž¿‡~X‹CÓE¨Ç]#„­Ó¤^„È :4ÅŠ°·"‰éÍòp/ª×ŽÇ…7/‚D¼¾tî›l²‰~?¡År© ñžKÄOq<çœsÙüÖÖ@“K3žÍ6Û,‘Í^²ß~û%òðÒä½yGÀèfîºë®DR‰l”:…{¬‹#ÐW‚8­ôU—Þ#P5¢TJ$š#§·äŽ;îHX/%j#J©7…TUÁ›<ôÐC‰8i%Âk^±IÖgQh)íV«×êzçPq’èOrÜ%â¨{ðâú¸8Ž€#ÐW°îE'ú4ž%pa÷Ð[qß0œäÖе¿°B 'ÐùEb–Šêå—_NÄ¡[û]wÝu“»ï¾;·eÉ­”,X° :DÚE x„ —±ÇÇsªò`¹1ÇX‰Ñ;£Q•­6¶X¹16¶'o­Öð É7½+¢>‚ÑF]vÙeáÀ, +ÎÎpB”{ì1µ@b…”Å/¥ŽŠË†üÈ#hblÊ™€‘yçXYÊáUdÖZÚäxÆàÉB¿bèÐ*D"ÖLÄE‘З,°ê©„å!¡IŒbÁ‹†öñ¶#šºh”ˆê`¬Ú×aœ6g<ŒÌ£ÆÊÈ—7¼òÊ+š(š°mÕÑÖÀµm+—÷JÈ÷Â… Ãoû[=½å–[êX ö1©„‰í /Cd3À«HŽ;‘,nz=ùN˜ðžv˜_öx…ŠZ>XeÄÀĘ ûwhµóDr;)sÉB«/ù‡UψN ½š ú6"ãÐaů¿þºê+Ð ÐŽеÊꫯ®4VV?~%*nuÖQ½tWµ :3ú5ºEô~D^Ä‘tÕŒ¹Ö¾ãò´ŽŽ?Æî±Àì"ŽàªSå^½tøðáJiúºjÆheã¶ý}‹áÒ -Z”|á _H­›òC¨ªåóÎ;/‘‡TMDòl2P¬Àqdˆ| Ò>x?.J(. Eé‘-g%xõÐØÎc‘Å2[Lœ8QÓQ×"âˆ1$²0%XT­}{åMÌÇ$¯ÏÎñšL±¶x¥< ¤ó"°ªf#TâºbøÑdJqÿñykŸdëñü°|“ü¯œp=±Ò •X"‹¶eÎÏ“è10ôÀ*;>Ç×™F+}/°¦÷Ö{L/ÿ<úèÿ•ïڱǫ^ÐróL$œU=ìêo±ñ5¿öµ¯éø„wZ{ñoµñ½y‹Ž€#ÐÍàæQÝ|…ÛwnBM ÏUBÕÚ¾ƒô‘9Ž€#à8Ž@¿G`ùòå©.hã7NÄi¨"&è¿„®OunèÑÑeE  ì3yz%1N$BÏŸêŠâ¤ãÙòb$QFdÐÿq^¨²Ë²Úˆã°F4Ž92‘¼ÇiÙJBÛ¨QÙ1ØgÉ;RÓ˜{ña׬â¤èâPW.®ŒÓðâzTƒköºùçæ à9>äÛÙ(ÁëÞ" ˆöˆ¤•ëƒdkðêÉg_ì©/ŠÇ°ãŽ;jDFœ/"nü £G$*'DmàeDþxø¢8Že¶9á„‚„¶iQ"ID™[RÜX“-Ú$>É9ò `5‰-œ6>;'‹MØÿýÃ3Ï,¢>ð$sqúøè ”½GÀpGÀè èÿ`j1Éf“J‚.Äáäœ%È•W^YR]:«¯~õ«éqô}èÄ¢„1ˆB¿¢.ýz(ê[Œ5$V·ç­´“¿½abôBç¦OŸ^–Çêþð‡? »í¶›Öáý•bcæØO<¡QEýR±1ÿõSïþ£?E‡À´2oÞ¼’œ`cç);Ìè>ËI#ÇX®?÷WÜðÑÀo Œ)1Åcº!41P ‘΄08”(ÝIžBA!A#‹F‰ê°j03”õ„ε'1ªV­äÜ¡ù1ÿéOÊ­ÊBûûßÿ^Ç Õ…X¯Ór·Þz«GÒ{R˜£ã’h5qœ?ô™±ZA\?üðÀ‰ð¤ä„æ1o(‡ŒæJ,ãš ª^,¸Ü\LnC“XÖU¡3yòd5Ì`¼(2„X={çyðÁëØÅ¬´`„:ò‡ #Q,„$®¼òÊz¨Ò÷b•UVÑr\w ]P8Xì•V‹óÅ€D‚?n~ܸ]Ê#@ˆ¤x^è ›’Â?®”pF¥V¾vóÏò½™"ƾg³fÍÒ5¥ßæÜ{pvC€ú³Î:K7K$ë}ë­·ª¾O¶Û\|<ƒJž?‘˜¡sfà#uGÀpþ€úÓ¡dèõΣÀèiôwÐñ³§ÇÈ½С¡Kãy Jnœ±Ñ»!l°êx„% #À9òÈ#ÔsüCÁ¿æškª.Qr˜ªÎ²H7˜V*xƒ§d‰øÐ$vÇ©'LôẋDãˆ%L¯fÌZ¡—ÿpôF‡ ›$e‚~='ÏP„¡kµÄóŒ=a_QäÿÊ"P›Ù&ü¤!+´±†šbÞγ°ÝrË-jýC!ó,<äÚ .žô(ðÍ Œ¡ƒèÞ£LÀ’Ë‹(ŒüQR[DuÀáoQ qÎ úÌFmXûy¯Æ_—wÎŽaœÙgŸ}R<¬Ö;ÆŽ« "†ƒÃ;,7ÂÚÀÛë5"”Má”SNI 4܈òÀh³xñbµX3'n,>æ¥Î‚Ž…™…r™HBAUÞs½¸€U9¼¨ "Æü&,ÌD<ð‡Ð–÷ã?^ûÌòZ½ø•¹äž°bÛMòäÕ ¾WÕ|/fϞƌ£Ñ’p]¿±%:C­ï-úÏ‚‹/¾8þ`Œ\«˜/²Ö¶ûCy ‡¬Dã%ÆïÏ~»|[-Œ NMIŠN=õÔ IíõA§ÕãòþG óð\wÍ:}Ä8˜à„äâ8Ž@7"@ô?Jʘ¡çésrZ…º3"¶Ûn»†84çÍ=ú8}ÝàÁƒ{ÃÁÅ?z(tGYA@ž"¢%thèÒ˜ZÈÕŠŽÑ„Ü»>ø –G†Î ý:Ú7]ÎÇ?þq­þ ôQ(÷‰ä0Aéþùç럕CO'Úê„l:H+Ÿ÷ŠAÁ 58jÓ¾=—¡,@IDATå«¢>Àf˜#c† £P_•s^_½9†açotµ2~Þça†rË1ØZ²ðx,Y¼h‹…ŸôZ°Þ‚5óˆ…z·ß~»þa‘Ʋ¾µ *Ôe–Dž›Êq3\Tó½ "cÀ€9ÂÒ¾—µŽ¥¨<7X¢?öØcýQ%ܬî»ï>MdËÍ©”øEãoõqø® ä:c¤š?¾~‡Í`ÙÊ1’ˆ˜ï Æ=~gS§Nmè:Ñʹyߎ€#Ðw°žõ³ŽPüá1VÍ&¨ïFé=uFÀ³-Ïn.Ž€#àt#8FJ>ËÔá¯çèsrZÏ0m˜R¾ÑãåÃkQ–çELÅŠcñµ×^[Ø½ä’ ’³C—Ó&º4t‘PÎÆFkJ~£ÂB'†~)[ýfÖAš¤å84cÔ¼¶Ê*cmÚ+k“éÄpȦ|l °rö ó…é<1Ї=¬ ¯8ßrHâN0¦  %oÌñùÞ¾·ý z@½K~惋 F2"@¬>ÔÊ4{ŒÖ¿–"à†R<êþ„%Å4?V”ÌüàQîÇÊ_ʘA$«4·Ž©oŠO®O4JzúàÇbç›ó™pÆg¨qK’°kt¸x=ëÛyoŽ€#ЩxÔG§^¹Î·E|psqG [`¯‡£´Æ.Ž€#ÐxÐýàHºÃ;4¾ñ¿µ½4£åŒE‘ yƒB‡†þ á=º2˜KbAÏ€q=‚^«'Yú(ø¡Ì¢ž»X‡Ðkd×#(ûa§M¨صӂèïŠôtè+1ä èZÑ·ÅF‡‚&z§œéæ¨Q£”í…1 3dȪõª ˜7V7|T„¨ú5ÌhaŠø¬¢î:”Ðf-¤u~4üP,/…õˆåÓ!~\1§ž•©ç•%g­õQ¦Û˜PÊ[¾kg³Í6KóPØ1{û—+Ã+í›ÂžÏgžy&/U êf€ ý¢>ªj¬L!ðƒÓã\S¢Y°~C¥ÅM€kÆx0d¿EMó‹aÃÊ*¼ybiÖ÷"÷ÌÍ£?jAìïeùñ@Âó—_~Y70ô¸©7ë»û÷ÞË¿ÃC›žE‹inœ… W$•ÇÌÏ:Ž@O¸_zÔGO\üHs°ˆ¿_5_oÕpÚ"gΜÙƒñQ8Ž@] G1dtX¯¿þzv`Š€J¿X`‘ÉeС™®Ž²è§  o–U2P˜jŽ8âýÈmŽ»F‡=•8rç F Ɖ˜!(¯}UÂ*¯^#áÐ « ºK^KÍ·¿ýmý£/¢U˜_e9ÏnlË“›7ðªÆy=P~g£¬«¬BãA5† ,,E$ ²ÅÀúÊ{eñ4E< Œ «VðH'Ò¡HhË Eej=NŽBÞŠæM„ 4Wfe~¨Á®¸â Íbêlû\SBø Ã:à€ÒH±Ç¹:²õâÏ„Ýb7«{î¹§$A}\6~_é{A(#2Í‹þ`¡çšMD”ŸátÉGj8~‡|¿ ™„Ö ïŒfEéä¢çQ¼AÈá²Új«iîx5¡ˆsqG VˆúÀ Kø7Ôä×rqš€E|xbóf ëm:Ž€#à8Ž@3@„2=v.׺Gôdå„2èÑ3äýá$Â_%zvœza¨˜2eŠF§˜Ò?Û7:Mtb×]w>ïsžgþ¢òœGW†ñ¡~Ö±ZOÈ?Œ*FF9œÎ[!Pû㸾|ùò4™y<Îá톕ֿwÃG¯ÉÆ¡¯AP”¿úê«Uµïužu7® ¯ÊPÊý±‘ ¨’A€5!ŽöŒ‹®\]a,·¶©Äƒ¥m,ÌÙÂëâã¼'›#dÏŒ/Ùrñgs<≜(š7‡~¸} Ðª¤PÁñÒK/©5ºšy“nG=3ŽJ2nÜ8Í»B9 ÆYX® çM7ݤ9K(‡b ~%Œªù^y’—#¥Üxê=Çx‰þÀ<#(ïáb6l˜ÒUkª·ÿN­G.rÂðàAμ&È_ÓjAQÉw£"káª<ø¸8Ž€#P lPxf ò“gž·Þz«åÆÝZÆïe;sPñˆÎ¹f>RGÀpG ?"mTLÿÞ{ï©óh%,ÐËiPN7…Ñå;:Â"=ÏLèm¾ð…/”íyCÐë Ã1¸œàˆly=РÃp‘'è%¡ˆBpÇ­{í×  ¼òä~ÀûÞev%¥7‹ ³¡ÊŠ%¨æøŠ+ #HH.bäÈ‘á•W^É6Óã3VT­q衇¦‰´{Ž\~ùå%íc=¶6¬˜%%·ÏöŠ~ASæ²X É“O~ò“i2 s3–dËbMÅØ´ÒJ+hx²Ju›¼è¹¬¹4*yÖ³€qã@ŠÚŒÇÆÂgQðVâ3ä†súé§«!†vŽ9æÍûÅÖú¨ö{}c‡²ÈnÖF³_=ú£v„ù®: —è²eË”6­ÒúQ{/µ×8öØc•{”›úi§¦œ µ·â5G ¿#ÿ­G}ô÷oAóçoÎ9ñÑ|¬ûk(qØo±'À) Cn5‚¢Š:VŽuGÀpþJü½÷Þ[A€ŠäÝ•ôSÐIå%\Ç‚. A†.-¯-ÎÝvÛmªG>|xEvØCÌqö—¹sçjåþYä NO0Héþâ6ЋaLÈÎÝyçy§úä÷~ >èÑÇY ,èoˆò@‡ƒ.Ï¥ýpÃG¯ ?ê}÷ÝWØ4ËbD„„…ne»B©ÉBCbìúÕníÍðá­½ÝÚ;ŠöxÇ®µÖZJ‚³O5ѰD¥SÇê±_1ÅP·âåóªŒß<Ådåš^ÂpºîÇw\:ò½’4»h]@¿3uêTÀH+EoÐ?™36:4t YAGFnZtcè*ótEèäÌX>Àœr¹ß¡óÃa³Hp@§Q ó3Ý ã€A†Ü§±°Nµb‰Ú1¤ì±Çq}9{’¹ô†‹yƒ˜axºýöÛ³]¨þÒæÒãäß”cQ?ÞäåÒ@D!žl¿ýö‰\šôO³äÚk¯MDžÈ%‘… ™0aB"ÊÍ´Œ• a"y2Ò‰×~"‹AZN¨¡rJ䇗ˆ2ùÜç>—ž«m"¼wZ7;ÊÊb¡u­q¡Ö)©ÏDñžHBc#åxàDí‰(,Ò~„×.‘9k&‘h•„c6^O<ñÄD-äHdšž#J"¡jZ_±/Y Q¬êq0 _kSè£Yäõœ_‰ØHÏÅõâö¨Ë9QükbAO$!QZ/ƺ^Ùs´K]1:%bàIdÖk+9:JæY4®øxö»þb0K.¹ä’bPI˜;Ré{!7¦tžÌ_¢a´^«þq½§OŸžH(§ŽK¼1ž%b¨kÕÚºßo}ë[‰x(V’Ȭ-p’¬D(êôOŒ›ºµ5ˆ>8GÀh;¸q–‡~}NÐù¶£¨sàØžE9ݹñ‘·-ì3Dá‘~Ïø¾ITx"QþeÇÌÞg;û~òʳ:{ —þ‰{ ¾‗¬¹æšýŸµ#à(E¡ÏÅñ=B’d'èëÄ¡#e{Âs°„”ÜG¬<:%»Ÿð,„^ÐΡ/¤ÎóÜ-é9ôŒè•LÐÁ¡ç¢.ú»o~ó›‰Otߟ#÷¾#F$bDQ:1ô‡è±ÄÀöNÏô›qèóL·§oq(P÷\qX.³8c&çwž YÛ.3÷^ô§†÷]aÙ(üÛzë­qtÖùr_§^Œ‘3|¸¯îèD/¸à‚´¯¡C‡*Þ ´®éDüMSÀ’èÒ`øqJ”@ú¥·ZÑ+ à}öÙGœce<ÃbqâGST׎c`¡‰%«Tg’H€¸H²hÑ¢D¼–*¶oýd4–gø°òÙWk[à¨*bƒçX Y¨³md??ôÐCÚu¬a$[žÏyX”ëš6³ýH(\º² Zû6ÏøX¶nÞg«Ç«ý^`€j'ã‚äVI$40‘H½®’HK¿“fcn.E@¢¼ÔÈÀwáœsÎQ£i+±á!Šu #è.»ì’ˆçb+‡ã};Ž@‡"ÀD¼Ñô™‡ž\F €c‘=?½ÿþûhÒÛpJÈ3|`Èåù¨œð}D¹mßO^ÝðQ±î?g†j¾?݆ÏÐpbåx|¯È{2~×]wMp¼å84ú®lñgôÂQ²w(7æ¬á#n«è½ÍçaÊĆôžèn‹êÚñì¼ËѰñ׿"àTWòíl´^íÔÝwßÖ]wÝÂæ k“ˆŠpæ™g*'ü~òÃJCʨÈg±,‰IÃ˲ Še1\zé¥nŸƒšŠ\&„vA5 yI ¯;vlšÇ">oï©K8›J¹=baŒ„l!ôI¨žq ÆåHØM. YÐâÃ…ïe±óæÍ n¸an™6Ú( Ç^LWEûK–,Q±ì|iˆvIò´Í6Û”´[/Ú„’ ú2K`_R9ú ÆM™áÜ"$wEÕ ßr ,ܰšïÅ7Þøn˜º]ÄsT%ȧA~ ®ûù矯 ¢­úVW’¼rÈ!#D«ƒŒ„uêïH$ -ŸqØbÿ‰Âe{»¼¾¬Zû´z<«ò{#Y;{,ö·8:±¦³OBØ+å­ñàÉ>™„±Ô+öŒEc¥/ŒH´Ey>Ã5Ïû]œåÀÉúŠq`߈BÏX6þøµãyíµ×4%× ®wñ¨NsEÒ}€5ûdÆË5aL–ó“ëåâ8ýÖ¶ßýîwš¯ÝëkžékA‡µˆ¼¬Ñ8T¢¯â/6xdÛcbMå•ræ|—ãž#Q*ºþ²Ö¢Ÿ@ωî]T^¸~Ñ{úd¬äÓ"çý ÃûÒ—¾T•¯Ü˜‹ú¬ç89¹ÇrOâùrï+·§©×zÆâuª@@ÀwqZŠ@–ª¥ƒñÎû(®<÷GyÈå¡#c‡†Y’eΜ9)_dùšÍ9+7öd³Í6Käæžì·ß~‰lX›Ó‘·ê8]‹€çúèÚKÛÒ‰‘‹J¶>‰D3·tÞy÷" ʨ4Ç”|×øÎ‰RªîŠç&1r¤åŒòŠc15 ¨ñL%Ê-K»Ù?8ÕÉ¿‹Q&ñŒHž@aèQvD¡®ù㺼¯§OêÅXä“çUŽ3® /¼*%BžDÃ/[?¯üñðºSVlJñb¸Æõ9& C¥LŽÛ{ÎC;’•ÞŒløÃæâÎó²$áM»cWn91Öx®%ã8Ž€#à4§º’§ —Ö €%ûå—_Ö¨F°Å[¨•¸5£ñ^[ÑJxÀñe™,mJ'6lØ0õ|ÂÂßß/ hØ NCŽ:ꨰtéRõŠk6xÌM›6M#¯ óƒ®OGÀpªE€ÈHh>ñ¾á†‚$NÔõ¿Úú^ÎÈCïx„¨`G Ùð »ÿþûhƒÙÓõ@vVDɮޠ¢Ì'Nì-bå)½‰E+YTƒ(ê­ˆFrŒ92<ûì³é1{ƒw®p÷ˆ,±óx§n¾ùæ:V;VoŸÌ÷™gž)œ Þ¿£FÒn˜Q÷±ñ@d‘yÂ\Î>ûìpðÁ§§ãvxîœ4i’âšøÛ½Ÿ•·P/–ûƒœ$І±¡Ûi§‚xo*åZ½ívK=6ŒÐ] :TÃN¡ò $¾U†!Œ0#FŒÐìYg¥a®­\GÀ¨‰SŠHXÐÀ èrqzƒ€åøøÌg>Ó›f¼®#P5o¡Ex&[¼xqI]¨›î¸ã=†# Î+(ɳÂ3”O(åœL0䡇¶—ã žmy~´¹² —ÐdiU ã8Aå ˜À/Ãó$·‡%œeì)¿ÿýï+/>÷›vØ!=ùFއ¹`¤"jƒþ†„~0„Ð/µaï‹€!ÜõŒÑÅpGÀp€>©·X+¯¼r¸ì²Ë4 à(OIþƃ¢KÿFÀ£?Н?‰½Ø ’¤ò7¿ùM=ztxñÅÓTqÍÆŸYe•U”)S”òjÖ¬Yáá‡víÆÃì-:]Q$Aô¨®¾Ì}693|¸MŸAÞ¯;B™MÔ kŒ (µQÄ[$çQê£ð&Úcܸq…xÑÆ–,Yî»ï¾R´…RÝ%{žÐÏ‘GYrж·Új«’c|¨·OÖkh¨”÷Ë–-Ó÷ñ?ŽßsÏ=ñ!}ÑÆŽS†( ÿ±0.ɉ¡Qg0’0ÿXH&oíØqÚÁ‚pþ»ßý®Ò×ø¼hÔxˆÌƸ” Ÿ1jT¾#.Ž€#à8Ž€#Ðܵ 9¸z«àÁÜÂ+õÓý‹þØ}÷Ýà 'œ}ôÑ@ôÇ‚ ”eË-· ”é‚'Æx¥É‘ƒñcþüùJÓ׆Chî½÷Þ0wî\¥zØd“M4 ¤?^Ÿ³#àÔŽ .èòP’ëc„ º†ôõZVûȽF»!€2Vë°²üýí6VOw!@”ÅäÉ“ϬP5¡çÙ ¥:ÏGþÇ|Ù‰ó\kùî$¶:¶¼ð á¹çžÓhËýA#yŠòj•ìñ zÛ'k5ù4²ÂÚγzVÀ„餓4|½Æ&»¢84DY`x€KyìØ±J3À&¯¯†ðH?õÔSág?ûYøæ7¿©ÆÐ¸8Ž€#P D}L›6Mú’ëƒ5Þ|G ,Úƒ:äŒsqú ”ð¦ô†úŠçU Yš+—çå÷°qB!…¡Ä’‚ÛñZ^ccA5õêé#‘-•$oÇ A>„hއzHÿ*µ•=Ï{‘T:oõúj<ÖŸ¿:Ž€#à8Ž@ß#P[Ú÷ý{ÿŸ½3»rLÿø=3þ ²d”¥RiQ’-»ePHd Ù™,ÙÆ:cÆBɾÒ¢D!Q´ˆ±eùÛ…ùsþ÷÷š¹Ï<ïéœóž÷}Ïöœó»?Ÿ÷=ç<˽|ïç<çœëº¯ë'" Y „èiÔÄÔ¹sg7räHËaD|(ÍU9ÌFõõtWˆpï¸ãމ€VN\ i®N;í´¬PÐá;\8žPguV ƒ]£9²6èwÖ·Mœ8#H½EäQ©Ž œ#!õ\¦~ þMÔr6Ït\±¶—[Š5nµ#" " •N 8Ë'*¢Æ'"PŠþXó^{íe)¦È±ŒÞÆgœáÈ ]ÌÂÞ+¯¼Ò­½öÚŽ|Ô7Ýt“c¥£Šˆ€äB@Q¹PÒ1Ù„ˆ9ݳQÒ¾B ÝU‡¬úï¿ÿÞí·ß~IGß‘ˆŒÈVHû ÑoDÒF 8¢âæá؆<6¤Íà„¡_Ÿ|òÉ2Ý åרQ£–ÙNôKïÞ½m;!Ï?ÿü2ǰá»ï¾s,îiݺµ;å”SÒ“åÖŸ|ŒIuˆ€ˆ€ˆ€Ô$ ÇGMz%"!úã²Ë.sk¬±FRûƒÕvùþa–Kš4¤›â‡&+‹Í‘I~œ¢ïñ÷¿ÿÝÄ8³å_ŽWõQD xˆúÀÈ…à-ZÎTD WŠøÈ•”Ž+Œè={ö¬Q}.¢æœ@Ú©lgJß¾}“‡Ò­¡¥¾m2¦Áƒ[ó8(RÇLÈüùóMë$µ,`Úyçm3÷z¢\8>Zøî8~üx÷ /¸E‹9"š UÊ¥?ù˜ÏB1R½" " "wr|Ä}Õ¨RŠþ¨9ñǼ¥™"T£!·bG]ðvË-·4ÁJR^}þùç5;©W" "€¢>2€ÑæœLJ">rÂ¥ƒ @€H ¾ûD ÎcŽ9&º)ísRe…‚(:é8pL:ÕÒ‡¾øâ‹áÓØÀ9LÄE}K}Ûäû÷€¬Yúøæ›oºvíÚ¹wÞyÇž_zé¥nóÍ7OÛ-¢XH“"`ˆaÑNH †#åüóÏ·ˆ*hÔ¨‘{ôÑGÓÖ•¥ìO˜;¾þúënΜ9Iù›êø79>t%ˆ€Äš€¢?þ;}üàÆÒ¸qcÂD(“U‚Å*ü&åU³fÍLä|Ĉ–® Xí«xPÔG¼ç¯”½©®¤ñQÊY¨î¶IwÕ±cÇrIsÅ !½Ïqh 2ÄQß«¶Þzkst°‚¡} ôÜ.\X«ó{º܆´I„BpÄçÇ&›lb¡C‡þ»£þ7iÒľ#†Ý,ÒiÑ¢…CÌ}8}(D–œsÎ9n£6 ‡ä±Tý‰¦2ûöÛoÍYÔ½{÷‚ŒQ•Š€ˆ€ˆ@5㣚g_c ! èÿN$é¿;ì0ÇJ>!÷Þ{¯¥Žùï…}ÆþãŽ;ÎyÂW„+£y¤ Ûºjˆ3E}ÄyöJÛwE|”–5µNCýJ+­Tcèëû÷ïoÛxŽVG.'Ä\àN<ñÄeDzçž{ÚB–§Ÿ~ºÆ~úB?(Ü?wÚi§ûy´°áyp6¤MêÄ!óé§Ÿ.“êŠ>1މ'Z›éþ¡ ÷å—_ºm¶Ù&Ýn‹ôxì±ÇjðcœèÙÕ·ÐçLN”Bõ‡ß'=zôHv9ÌX¤eÄ>¥¼J¢ÒÈßøU õ‘Í[7T‘T/Þ‚|ñåË1FcV©ÔŸb‰×]wÝIµÄO§žzªéOÔ¿æøœIÞæ£Ž:Ê=üðöpäÈ‘–6€¹Å(ämÞm·ÝlE?Âïºë.‹)FÛjCD ÞX™Ü¥K[ÑLùË/¿ÜVCÇ{Tê}! ð™ Ðo½õ–kÓ¦M!›SÝ"PP¬þûí·Í¡Á÷6Œõ|— …H^¾ëâ`×}ØWßdž¶Éo™°È ¯çÍ›çˆÊ&]ÕC=äöØc´ÝC“Ž4OÆC¬à¨I{B7»?°â†ƒ+êÈ*ð0U½ˆ€ˆ€T 9>ªfª5Ðr%0mÚ4ËÿKØzÛ¶m-oêÖZk­ä*®rí{9÷ ãÇÉ'Ÿì&Ožl¢‘:u2í 4(p2Uzùá‡Lôü™gž±ñÞwß}æŒàGU1 )8à·dÉãN>è|ý@/FÿÕ†ˆ@é<øàƒîÈ#´ÏÀÙ³g»V­Zéó°tÓQö-#¤¼ñÆ[?I›£$e?eê`Œ ÚŠïØÛn»­¥ÝBƒ„ß/Ñ„ËYxC0ѿ͛7¢ç" " " "PJuUÌjD2@Õñ«­¶š‰ž~úé®C‡î”SN±éòòf®M{j×þÀÉpçwºí¶ÛÎòEqÄ–™U‚Å(¤/ MBù/ºè"ËCÍe¨ÀþûïïZ·nm«`¯¿þz»‡ÕvŽöW/ ïAš9=ª÷:ÐÈ‹C€"ª&GŒœ4\Ñß*D~Lš4Éáô ÂINC¡" " " %  ˆ@W“"ŽÀ»ï¾ëF儿Gú裮k×®R_;¹†ÁÊ[R]½öÚknß}÷u·ÜrKIÓ4l4:[D ˜õQLÚñn‹ïN8ÚYHBô¬Šˆ@a  ÏÁ‚­Pˆ¤îÝ»·¥äâ{&N i®žzê)·Ã;ØkýbPÄG±‰«=È@€T¾þúënøðáfœÆù¸ß®»îjä;î¸ÃÄ3T¡Í„èrÅ“7øÕW_u;ï¼³»ä’K*žg³fÍÜý÷ßo!œ }ûöµ\Êň¾ ½ÁŸÿügûqÌá1cƸü1Ã,i³ˆ€ü—€¢>þËBϲ묳NöµWD /V]uU·`Á‚d]Dß{ï½¶x+8=V\qEwÍ5×È鑤¤'" " " ¥  ˆRPW›"ÂÆ'L˜à† æÆï¤´lÙÒvØa¦‚ào+ÿe8“‡Tkô"“ÌDøõ‘G±œè¤ (t4h¥Ýbuà¸qãŠÖn¡Ç¥úE@ K@Q…å[)µüñîæ›ovt·Þzk¥ Kã²'@Z«éÓ§;f¡µÃo~›iL ¬¨({ÙF¨Hr|Tä´jP•F€Ô ü¨`åþ'Ÿ|bÃ#—5?,0*wìØÑK´ºز2¼ñD€§˜fgu–;õÔS]Ó¦M+aˆiÇ0kÖ,wàºÅ‹[DÑ<àÖ_ý‚‹öÙgnÇw4qKœvûÛßj¤HHÛYm¨z,èÒ¥‹¥/˜«®ºÊ-Y²Ä~øá®S§N>Z OD@D@D@D@D Wr|äJJlj@hܸ±Ûj«­,ÍU‡,Záã?6ã=)Ažxâ ÓPhÛ¶­ 9Ìךk®é9ä3ücT[´h‘»çž{¡û8ÈO\i…Tio¼±9!æÌ™ã.\hz'8' YÐY!r‰T[3f̰h¥JŽ®)$KÕ-ÕD`“M6±Ô|~ø¡9|¸ûè£ì~\£Ó(êCàƒ>°ÓX¸¡"ÕB€ï¡_|ñEµ Wãzã£Þèt¢Ä—ÀJ+­d)°f̘áž}öY·ÿþû›!‰È Þ¬ö?ï¼óÜ?ÿùO¿ŽïHóÛsÒ? qùå—»5ÖXÃĹq~àùòË/óÛX jãº9r¤C÷Ò¤Ò±Ó±cGwÜqÇ™¸ùW\áæÎk)ÙJ0t5)"|^¡ç°téRwýõ×Û½*&]W7 @€ï)9> WU–%ÿýßÿu{î¹§kÙ²¥¥'-ËNªS" " " "P&äø(“‰P7D Hq„¾Ã#*wŠë4²ñ±îºëÖé<,q$€Ó£OŸ>æð 5-ßÙUD@D@D@D@2ã#3íª"°ñÆ»«¯¾Ú½óÎ;îšk®1§iŽîºë.×­[7 ~øá‡Ý?þXU\2 ¶’£?H?uß}÷¹víÚ¹O?ýÔœsæÌ)HôÏŠ+®h)¯øñ>vìX÷àƒš$wm8@Qº ,ê'8Ëñ¡ ¢Ò àô8øàƒ- i“&MéþºvíZéÃÖøD@D@D@D A~ãs„&TƒN¨HèVŒ=ÚR‰L™2Å­RŒsÌ1 ‚±š¨‘j/ˆsŸ|òÉnòäÉÆ©S§NÆmË-·tDˆÄµÌ›7ÏÒ ¡ Cú3"ƒpbÎÏ>ûlwÓM7Ù*î &¸¶mÛºßþV¾ù¸^;ê·šÀ<à `÷£Ù³g»V­ZäÞTèq¨þú˜?¾}&QŠƒUD  §ÇsÏ=g×ùí·ßîz÷î]‰CÕ˜D@D@D@D ¯dUÊ+NU&•Cƒý~ûíçÆo:˜0*`h8óÌ3ÍØ0xð`‡qü—_~©œ×c$!úЍöÇÅ_kíM7ÝÔÝ}÷Ýnýõ×w8w?üp÷Þ{ïDLøÜsϵ(#´R.¼ðBÇ|ÈD@Q™ÈTÏö ï±Ê*«ÈéQ=Ó^u#•Ó£ê¦\È#9>òSU‰@¥èÒ¥‹cuâÓóI)ñõ×_»n¸Áô›7n\2*¤R9dŽ¢SO=ÕMš4Éí²Ë.æøóŸÿì?/¤@x¶>åc_çÎ݈#lÎg̘áŽ:ê(Ó€ÉGÝÑ:V^ye¯ÕV[Í=úè£&"¯´jQBz."% ­(ê|.}êœ÷jµœÕ4Û«ˆ€ˆ€ˆ@!üί¬½°«NÊ#€qºGî¸ã޳üê>ùäsˆ 2ḟØâFmäVXa…ÊÈÖ\sMwÈ!‡8X! ¾hÑ" ÿ¿ÿû?G ,4-âVZ¶lióM *´>.\hFåu(\7ï¾û®E—L:Õí»ï¾&ÜYˆÔZyí¸*( ¢ÒHÁ÷á‡Zš«vØÁáQ©¤ãäs }¿~ýªcÐeÕÓ£j¦Z( 9> WU‹@¥ º¡cÇŽnàÀnÛm·uß}÷¬I;ñä“OºQ£FYŠ'ô@HUm†kœ?Ý»ww½zõ2±xÒCMœ8ÑĻѮX{íµÍA§ëmæÍ›[DË«¯¾ê–,YbN°|;rÐEùÇ?þa×9Ûq´å»8qW_E@2@¨iÓ¦¦G5kÖ,3~óZ¥:Ü{ï½îå—_v;Û{ォcÐeUÓ£*¦Yƒ(Šr| ÀKËYge+Ïo¼ñFwÿý÷»O?ýÔýá°Øå –û믿:VÊó¥–tA¿ÿýïKºB‘ûŸþ¹ûöÛoÍÀˆÑ͆wÞyÇ-^¼Øž¯´ÒJ±3Ô†÷ÏgŸ}æ¾øâ »`½üòˇ]øá;ã.«G‰^¨ñ¶ü±³ >udìdì`<ÊöéÓÇtÐAÆ–ëæ}ß|óÍv‘k­µÖª:±êtÑjâýѾ}{sd½ôÒKnúôénéÒ¥æàá}•¯BI³fÍL[†6p„l°Á%½GæklªGD ÿR£>zöì™ÿFTcY¸å–[ì;Ñ8ÉUD ÈéQ ³¨1ˆ€ˆ€ˆ€” D”÷ß?ác 5ëŸO£’ð¹öÞñ÷Q{GA‚¿\ŠÏ—ŸðbÁɾún ¿²¹ÖS©?SßëÒ~´!Îó?­/7NL™2Åv{c}¢[·n¶½ÿþ Ÿ~&zZAŸ×w,™:ÆÇõñ§?ý)ÁØj+ÞŸðÆ\¿_¹Ÿxã7j;e™ýQ¶Þñ–˜6mÚ2ÇTâïdJ\{íµ‰M6Ù$áhÆÐ;H>I⡇Jxcy%»Ö1½ùæ› ¯ý‘ðŽ7câÓ^%^xá…ÄÏ?ÿ\ë¹åvÀe—]–ð©¼lC‡MxnÞ»èÓ–Ø{û¶O–÷úU¡ˆ@åð‹\~FÂ;NÞñ^9ÓH²èСƒ}y ²¬Çi§Ä…ß¡wÝuW»®}ÄtâÁŒK×ÕO(K±7üñÇ-×<¢»µ• ¸m¶ÙÆÒÍu‘¯òÌ3ϸÍ6ÛÌ""xàW› ïÈ‘#©oB¹é¦›,g~xúè¯GÞj"1Ð @(9ZêÚ~ôÜL´¢cXÍÍëb”†Œ%SÿУ`Å8%•}ºs¼!Ú¢4Â<4Èm¸á†éͺ-Û¬'UÀNĩ켳È=üðÃn§vrD»<ÿüó®wïÞnóÍ7wýë_-ʈk»Z ÷4P®¸â ·Æk8ÒE!‚ŽXü—_~+ C† qǼóÎRwÉ%—¸áÇ»ï¿ÿ>¯cðηîºëÚ½ñoû›ûꫯòZ¿*¨p€é…Æç‹Ju¸yuÌsµŒR‘Õ2Ó§ˆ€ˆ€ˆ@1 ÄÚñ1ÑçÌ?÷ÜsÝüùó“Ì{'/<Uþ0Æ]ýõŽT;¡xàáÜ| ä¹:RÐ@à‡y´¼þúë–ö*#0)»RE£ëÒ~´ÝðAa¿jÎ]z饎”¥, Kº¾ïµ×^¦©À>ROñÃÂGc¤;Ô¶‘/šcBÁø*@#÷Gœûí·Ÿ¥,ÂY7`ÀK“ÄûõÌ3ÏthFà ™7o^ÖùȽÅò?&§žzªédàôà=ÿç?ÿÙœ·>ÚÊýë_ÿ*ÿAü§‡Ü/;ì0{oœ}öÙŽ^©÷¶† †÷вüýÜ×}ÄT¬ø4dì:WD nHI‰C–…7Üpƒ9ÖëVƒŽŽ¾/’Æ”ýŽ·q¨¿"9=tˆ€ˆ€ˆ€ˆ@aÄÖñá=·ÞzËÈ`¼Ÿ9s¦;æ˜c̸p¡Mqâ‰':D/¦ ÄŒA¾V(óC;DGD#%B¢©Ñ¬˜æ;zèlÔ§Ô¥ýÔú‰J¸í¶ÛÜk¯½fFèÕW_=õ¢¾nÈX2uqíUW]5©k4(2•;î¸Ã„•Ùß¿çÓ’e:TÛs$Ð¥KçSQ¸¹sçZ„F ôm0P¡±ÿþû»qãÆ9¢mª¡TBô÷ºk®¹Ææ‡ÎI'd¢ä£òUxÿm¿ýö¦ƒsÍHG D}ðÝNQéUÖ6…"ÇG ¡Ç8Ó#޳¦>‹€ˆ€ˆ€Ä…@l^+ÀÂhŒ÷W3D†ùQ¼öÚkÛ!=ö˜ûðÃÓÎ*l„Òïºë.÷ä“OºG}Ô¢JRWcc¤e…3¼!U×1£:âÅ©g ¢À¬PÃáqÕUW¹–-[šÐ1+š}ûÔSLpœ~c"NDÈù£í\ÚçXúúD ¢;ï¼3)NL¿¨‡6ÒEàŒÀÈÉL¯Ob©mH׃£)ô+Úq¢_RÛŒîçy8†èÚ¯+Kêê©§lnH§Äjy é™Êé§ŸnìÇØ¾pá´‡Ò"‚SŒk&úƒÑs¯Ë`F|Òïâð˵„±Gç$õÜpLà“ºŸ×¹^§éÎ-Õ¶-Z¸óÏ?ßÞ_8˜Â{ö‰'žp>§±9'y/3îJ/•ýáõJ÷®ÝwßݦkàÀyu`áP¾òÊ+]óæÍÝìÙ³Žãj¸6*ýÚ×øD BÔu+ê£„Ë«Îæj•UV©±à©¼z©Þˆ@vrzd磽" " " "Ð`Þx»âÂIAn áSY%|þ÷ZÇá ͉­·Þ:Ð4ÂÝ>Çþ2çø´;‰Î;›¨uGÿÿöÆö¤ñ}÷Ý—ðÚ5Ž Ç{§IÂÉkÔ°z»víìx¿’ÙãÂÛ>ÿÂ;'’çx‡@q†ºy¤/>’¥Öö½ƒ'ѺukkÓë¡ØøC=ôÑàÐê âæŸ~úiQoŽ…—wÐ$žÃùa_ª`|” bÖ?ýôSrLáÉQGe"¤¡Íè9ÑúyeÉÜ#Pî#SÒr\C;á‘>ø•ãÉsRY‡ã¢súÆ>Î÷©š¬Ï©ý ¯|öQ;¡*¢l£âæÑ±æÊ'YéžÔvrmsý”{a>ÇŸð5®/oèNø4v ïHŒÅ8ÊÙ;ÜÞ‘–ðÚvútv‰óÎ;/á7´ê¢œÏ½ávïÌIx—„OC˜¼Oæ£>²$᣶ìñ[ ï„ÎGµªCD ÂpoßË|”X…NÉð xìó’ïÕ*"G2㬩Ï" " " q#ˈVöG£/H•Ê¯Ú éŽÐøøã-_|ÇŽkœâu–¶…´X¡xãw2Eѽzõ2âhûáØècˆ’ˆn»îºëë´XýNú­^ŠUï}ôQô”ŒÏÓi}DN×>mq’©dª]ŒÅ‹§î`‚ñW‡m›h¢2•LmFõQÏŽ;îhâÐ!¯sô8žôÂñ‡z¨›3gN]¬Lg¾Ãu2vìØ´is¢i®H‘DÍIÅ4jÔ¨d$×E4}sÎ9î‘G±h—§¼ãas}øärvêÔÉÒ—ecŸÒ­’¼$ÕâçpCëæ´ÓN³÷ïQ4$6ÙdçYU"–JÒÑ7÷èÞ ÷ÜsEð‘Á{û(×w> Bê[n¹¥ÕGÊ«ú¦ÌG_T‡ˆ@ù ê㢋.²*ê£|ç)= ѨÜ|Ô«:D éQ ÊjCD@D@D@œ‹¥ã§ƒ÷0Ùüa8ÇÜÐBê$RðÍŒ­¤Cb;{ì±GÒt¥E"ýSÐð«þ–p¨cl…:ø‘Fj(Œæ~e·ÃØI;áÜ›o¾¹Fº+Ò¼` Çá²í¶Û†ªL,Re‘–)—ö“'û'}úôq£G¶Ø¡möÓN6CåÕW_a'íLÔq„SçH]Kh3–ˆB£E éÎ|$†] &Lpè&P®Ç“šúêè£v­Zµ²cH§ôî»ïÚóð/5ÍùµÖZËùh¢©ÂhÇ ©ª˜OŒ,Íš5³jh;“S&´S—ÇÀ'œS—ët‹-¶°ôdáÜrDìœkŒkíœÌ )ç|„–¥Â"­Yºôjå>¶\ûgíÞ>šÉùÕ·v È|8߸—’òŠ6xáà佡"" ©>ø`ç£>l¡‚´>RéTÎë ñ!ÇGåÌiµŒDNj™iSD@D@D ÄÒñá3èÛ¶mëV^yåeX¢—qã7ZtÀ_þò—ú‡6Ñ ¡à°ðéƒìå)§œb«ÍùáLÁ±âS#Y{VR0†Óœ¬vNŸV*U`þç+ÚÃê´h$Æ^Ä·CAtco(Ô‹@;DÜ/+åi;×öC}‘q”ì¹çž¶²žzr)ûéwÓ¦Míp¢lpvç†Èú8>BÛµÞ/¿ürÒ™£#ê\"„9ÅèJIçØ`_ˆøÀhšªŸAýü¡À™±ÂgXÐ "'X˜oæeèС®M›6vÞ3Ï<“6’Ävæá_®×)<)8aòaxÎC×s®Â§JrƒvhÑàèÀ…“gVïÞ½Ýæ›onN;VýhΕÇàÀ8GàHÅùÁ}ûAß¾}Í9›yâ^sì±ÇÚýïòË/wsçÎM~Ä`ZÕE"à{Ú…^h­)ê£HÐKÐLøN½îºë– u5)õ# §Gý¸é,+%´¯@IDAT¨/X:>HWR 6œ Q3fÌpˆO2ÄuÖYËüsÌ1f8ãŒra¥>ÑÔÓM-¬FÇèJÁ‹“"µÐ—t†fï½÷ž" xa}çwNF Ô9‘kûG¤©µV\qÅÔÓ²¾æœM7Ý4iìãü ]WpE#qÂ1 yŒ²Œòöš.Îë°,Sµ×o±èúCÚ$œ%Ñë½÷Þ;)pŸšî*šæêä“Ov8±(ŒŸù{î¹çܾûîë5j­Ö"‚B&®Ÿà¤ªqP^Ôå:%R…‚Ã.µç¡ E­ÑU^ÄRÔysåtæ™gšq Ët÷€¢v¶Å5úƒ{ÅÝwßmïEœ†‡~¸Ýûòáü8ãŒ3÷îû^%¯ÑU˜BU)"P"‡rˆ¢>JľXÍ*â£X¤ÕN¾Èé‘/’ªGD@D@D@r'KǹÞYž­dŠIw΄`¸æ¹ÏuO>ùd?Œäÿûߓ΋hÔIº:£Ûˆ>‰Ÿi‹4L¤J¢=t$0˜Sh7Wh¹<ÿãÿhŽŠ\Žãº-5Wt[xÞ¯_?·ÞzëÙË%K–, ÑôéÓ“ÑDs @º®è<1Güs™ÎÐÊ ôÐßhTHjš+®Ÿ‚Ä´Q^¼Ù"¼p¸ó¢šîôÓOw^0Ý)8ã(µ9¦ì zþ«Ëuœ>ˆÓq¨gJvZ—.]Üí·ßnÎÊ‹/¾Ø‘Ú‚÷«y1„£Á2nܸÑR%ëlŽkôŽI"˘'œÐGu”i+5 N[R^¡‹ÄûH4®qˆPÔG”Fe>WÄGeÎk¥ŽJNJYKD@D@D Ü ü;oS¹÷2¥¤†Â HA§!êT‡b Å@ZvØa7iÒ¤›qbD£4©Îg!STO‚4SÙ Ú£)°²_è}ô%“£)*ÔÍœà$(D!º&h;Í^G}JTGÎ'%Ñ4WDàp\´ OšTÑôè1…~^èë´ÐýÏGýD¡ÅƒÓ £7Žt_žxâ ûÃàŽ6š1éRà壥¨#D¾Ñwîm8∀€EHAWоej‡éM7ÝdïURÓ 4ÈÒÑ­¹æš™NÉiû6ÛlcQ$Æ ³t68qT†ôn9U¢ƒD@*žQ¤¼bñ ZW\qEŹZÈ÷¡ §&j™õøŽSNøÎz." " "±ŒøˆbG§£.+~ÑnHMU­çCFË–-Óþ!LÞµkWÓöH=7õ5)x0š‡h©ûÓ½ÆXˆ°z¹”÷ß?­s©!ý[°`AƒêÄ1‘i~ØŽžG&ÇÑqÇg)0è?Q#ü±‹¦¹8p`RcÐí ÍRÔéA„!Rb}R q|>J.|j»NqVa$Æ9UiÝ›#Ž8¢ ž}öY‹ø`œ³fÍrÌš+¤B"(êÔŒ3‹èá¸ÅéA$NuS¦Lq¤š+·Ò«W/K9H„Æ?þñsÔ`hhanÑÁq‰a3u6´O:_D ¼(꣼æ#Ÿ½ i®¨SŽ|’U]ù& §G¾‰ª>¨X:>p<qi†Ëêg `µVˆM‘.B$œ‹1q^ ÏDi¤û#ú è „ó2=’6+è‘tèÐÁÒ³ õ­ÇΑ`<'¢/Êå’¢M¢#Ò4a+ìC$Nºcö†Ž‹•þ© £u¹N‰x ýi *%â!0Ëôˆ“#¼ßpHñí–»îºËuëÖÍíºë®S ò¸E~ Az×]wé%}óÍ7™¦2§í={ö4§#Ñ?çž{nÞÔsj\‰€ĂߩøîG!5bXˆ‹Î«“ „ˆ¾7«ˆ@9Ó£gE}¨F±t|0Q'œp‚¥¤ “ƪ¾iÓ¦…—Ë<’žÕýéRNa˜®ò'%K:ñÁƒ[JV+c0'Uj‰²1ˆsl0Šc0Ï–f Ý V&R0â„I-¤XJu.D‰¶ÝÞç8•(f<ÑòÀX*!¶‘n'8&0,6ˆ~§HE„ó¢¶KTОŒ¹sç.s:u>ÿüóñ /d]ýŽ^Gp`0>ú‹„èhÚœ[QÇÇ2ú ¤Ý i°j›ί/Ÿº\§8}¸öˆb©ÇG˜¢x¯õC2"BppmôîÝÛ"«XùËuYÛ܆:Ëõ1NÑC† q¤™ã=BÚG!ʪ¾|ºçžÉýšûB.‘õmK牀Ä“€¢>â9oÙz">¢ßײ¯}"PLrz“¶Úìbëø`µ>imZ·nm#Dë£{÷î&lLZ¾tâä "„uÃ¥tHþò—¿$SM±ZœÄDxP¨{«­¶2=œA_"h'D ÙZiƒ+ÍIÉDéÓ§O ƒºmLù·Ûn»%´É0ÈG³8C0è.^¼ØV³SE¦ö£ç¥4Uç—8 †jΘ¥K—šh1+¸£“N:)鈊:)` [úKJ¯}÷Ý×rýÓçt%ÓX0n¢»˜c̆5+úa4bÄsZÌž=ÛªÎgºvо MC,íR7Q!ê†}+¬°Bˆ•‘#GÚ˜q&„ 4Y¾þúk7‡|²9Â':®l×)íc ²(:ëd•üÃÙ±ß~û¹ñãÇ;p!=i͸vшÀA2oÞ¼¤£.ŽhâýqÙe—¹~ýúYtØÙgŸíî½÷^Çû¥¾¡ô .¸ ™F çÖO?ýTßêtžˆ@PÔGåMjˆøã£òæ6î#’Ó#î3¨þ‹€ˆ€ˆ€Touñz ¿r?á'¦Ö?ï°HÜxã ¯¥aÇN˜0¡ÆØ½ñ<áÓÕZÏØ±cÞ°œ<×N;w®qžÏeŸðîä6¯K‘ð¹ä9™žxM†„ÿ‘nçùÕÑ ï,°C{ô葬‹±zc} Û¾tí{§K‹¾'{채wÙ¹÷ßÂk4í‰P7||ÔŒíÿôÓOÞ‘T£ÍLŒÿô§?%|º«õ†:3Æà´&Û¤‚lc¡ïÛm·]­}òé¨^ç£FÒ½ðFï„ϬÏPŒ;µäz]DÇ ”–-õ×—çæÚ¯KÂá*Þù™ðQ ®;AcsÏûmŸ}öI<÷Üs9½G#Õ•ÝSïLüýïOx§žÍ;îÞ‰›ð?Ä˦¯Ü½ó#á ú—î¾T×ÎöíÛ×êóÚ7 ï¬ëé:^D Â øèÍ„_@a÷Eït­ðÑVþðzõêeséÓ˜Uþ`5ÂØð î>­ª]›>­nâÁŒMßÕQ¨T±øðFf+|°¥M:üðó¦‘"Å éšÈ5ϪþtýD’ƒÈxê1ˆ“£½Þ:#¡°r¼S§N5Úg3‘" Ö^{í¤ŽH8/Ýã‰'žh‘ ì‹jkÜrË-Î;W’§PgXÉŸ®}VÓG„yž©DÇѶm[ËÁϱD?mÚ&µ©åúë¯wÞñaQ0Ñ}Ï<óŒ¥ Ñ}DÂ%A}ì¦îÊ6Ž8q¢#º„q¥+¬('‘µ¢€ˆ" %¶ñÈuÁêôt+ Ã5Aº¬Ž;&OƒyàÇFæ+:Îúò¡®\®S"l`©R“@‹-ÜùçŸoéÐî¸ã×¥K;à‰'ž0 ¢Æn»í6×Pý‰š­ïU¢?ÐSâž²ûî»[4)þÆ—Œ`«­Ë/¿Ü‘ë}áÂ…¦ÒPñôúôA爀”/E}”ïÜÔ§gŠø¨5SHŠô($]Õ-" " " õ'ð<:õ?½¼Î$]‘_éï–,YbºØªnÞ¼yVãºQð£Š4U¤ B3£¼QGAêy!í?°ùËvlê¹¹¼fªBÆ5¬s~¡Û÷$îÃ?4­Œø8 0èg+Ì ?èŽ œÙ1¡®ÚÆB_б@k8–HA–KÝ¡º>†ë‹4f´ƒHýª«®šœgö3?°Ap9u~ÒµW_>¡®ú\§á\=úÐ)ÿžÂ™æ#Áܘ1c,å\¸gy䑎o8Kr™Ërã‰> ãºôÒKMÏ„´mgœq†;ýôÓ3:‹9œh®Lš4Éù•‘ætÆùXß÷0Ž,ÆÇ=GºCõ­«˜Ô–ˆ@qª”|Od1º@*ñ$@ªRÒÙúl[´ÏQ¨×•B@NJ™ICD@D@D  T”ã£'Hc(ŸÌÝzë­îÎ;ï4gN‘W\ÑxàeDTWˆ²*NòÓÊ[o½åN>ùd7yòds@2Žë®»Îuë֭䎟ZÎtXÐEB¯Ã§æ³(œhtT®pRpÀæÀB×iôèÑi£´r­Olj€T"NC„0‘‘Aë«òFZ¹#bÁŸÍ>ßÚ´iS¹ƒÕÈÊž€œe?Eê ˆ€ˆ€ˆ@•ˆ}ª«*Ÿ? _D O6ÙdwõÕW[$Âñ¼&òCNŸ·Ù=üðÃɨ<5[ðj6Ûl3s\yå•fä{õÕW-]ŸÏî¾üòË‚·Ÿ­fÍš9¯ÓäÚµkçp‚zè¡nΜ9i—í¼tûˆÊaŒDëÌž=Û 6,¶)ËÒOÛD@NàCq^ëùIZL•øi®èyº¤ñ‘zWrzÄuæÔoj" ˆjšmUD g¤Š"j›)S¦˜„“[·níŽ9æÓZ!u[¾SÚåÜÁzX®ÑóæÍsûï¿¿i¯°z­%RÒÔ‡-N+œ:¬ & º-qŒÔ©Çôê(ê#He|é)wÚi'Óz“žSOT…wMN Ÿ` OD@D@D b(â£b¦RÈ'ô!öÛo?7~üx÷â‹/º˜ÅüùóÝ™gži†ùÁƒ;Œö¿üòK>›.X]åýAj*Œ‘h2áœ! Kõ‘ 4hÛrË-mNÈãÿù矌§*ˆE}Äo΢=ŠöˆRÑóbÓ£˜´Õ–ˆ€ˆ€ˆ€4Œ€ ã§³E@ª€@—.]Üí·ßîæÎë.¾øbK¯ñõ×_»n¸ÁµoßޢƗŒ )g$8tN9åße—]̹€:bàD¶éRвÅ[¸#F˜˜üŒ3ÜQGå>þøã:weùå—7ÑbÒhM:Õ9ÒÏë\‘N¨HD€]xá…66îárŽÆkš?øàëðºë®¯Ž«·A@NŠ˜F BD@D@D ŠüÎÿø»°ŠÆ«¡Š€ˆ@½ ¬¼òÊ®Gî¸ã޳”W`>ùäsˆ±0ḟ0÷FmäVXa…z·SŒgåó*«¬â^yå·hÑ"wï½÷šãô [Œ¾„6Z¶li‘4&L0­ú„C¦Q£Fáœ×^{mËáϸpæì¹çžîøƒCDED@Ú¶mëî¾ûnÓâ¾€X%øœzùå—Ý;ìàöÙgŸxtZ½¬rzTÄ4j" " " UF@Ž*›p WD áˆšèر£8p ÛvÛm-¢àÝwßu¤àxòÉ'ݨQ£L8=&MšÔK«¢á½¬½œ4[mµ•ëÕ«—‰º“^êùçŸ7m ƒ88¦˜mÊ'Mšäb_²d‰9›êêˆ!ÝÕ³Ï>ë/^옛ž={ÖÙRÌq«-âÀÙÑ´iS÷øã»×^{Ít›VZi¥âu@-Õ›À-·ÜbŸWû}6Ô»"(u §G`éP(#r|”Ñd¨+" ñ"€øv«V­\Ÿ>}\ïÞ½i–Þyç÷ÙgŸ¹É“'»›o¾Ù^“‹|­µÖ*ÛˆƒhôǬY³ÜÂ… -úãçŸv;w.zôéÃp¡­2}út*G¤ü÷¿ÿ}ÎÎ)œ(O=õ”›={¶#š¤]»vŽí*" " ¨x^W]u•9Ä;ì0Gt¢Šš€œ…&¬úE@D@D@D päø([Õ,"PEÖXc ·ûî»»£>Ú"ˆ2ÀÂjâÛn»Í!7vl°#Ç|¹•ý±×^{•EôG×®]MdæÌ™ÆŽÔah­Ô%…Øzë­g©lp|òŠ´(8ypX©ˆ€T7E}ÄsþÏ;ï<·téRwâ‰'º 7Ü0žƒP¯cC@NØL•:*" " " i Èñ‘‹6Š€ˆ@ý’©[·nîØcµÕ¨8?>üðC‹¢x衇܃>è~úé'‹FàØr3—SôÇvÛmç¾úê+÷úë¯;Äãq.m¾ùæY“ëì0D}òŠ´Yh†(¥M®ôtœT6E}Äk~üñGwî¹çZ§‡ bŽìx@½9=â4[꫈€ˆ€ˆ€¤'ð›„/éwi«ˆ@œüë_ÿ²H‚r3¤Ç‰a¡úŠë°aÃŽo¿ýÖš!¿|ß¾}Ý 'œ`BéÅÖÒÈe¬o½õ–;ùä“-â‚´W¤¹îºë̱S¬”Q¿üò‹­ìE7‡ûõëW§ô[Ï<óŒ;üðÃ-çÎ;ïttPÒfåÂJLj€Ä“÷–#Ž8Â4€pâ`U)OóçÏ·Eôî›o¾±”ˆåÙSõ*îäôˆû ªÿ" " " "ðoŠøÐ• @àÖ[o5‰k¯½Ö40®£‡€qt*¥%€X7B¬ä$gN0Þ|þùç6W̺DZ RNrˆþàúÝm·ÝŒÙÛo¿íÆŒã6Ûl3·ÑFåœ2Œc-ZäpäL:ÕæbõÕW/»h›Ò^¥j]ª“€¢>â3ï¤-Äy½Ê*«¸ .¸ >WOcE@NXM—:+" " " Y (â#+íx1b„»è¢‹Ü{ï½W£Ãjo½õÖö×£GKT„•éEÞüðÃýqà 7˜ÈÿýßÿY݉üñ‘°òÊ+ç­½|TTêè˜zè¡îé§Ÿ¶TW÷ÝwŸ9D”Ï¥rlÇwtsçε諯¾Ú­¶Új¹œªcD@*œ€¢>â1ÁažpVÍ™3'V/cE@NXM—:+" " " µPÄG­ˆt€”?Rí·ß~nË-·tÍš53]„¯¿þÚÒ*Í›7Ï=÷Üsnøðáîšk®qãÇwo“‹”8B”«¸sLš¨Ž;ººm·ÝÖ}÷Ýw6'ÿüç?Ý“O>é0î|ùå—–«I“&e1?¥Žþ€YÏž=ÝŒ3L/…Èœz-Z´È)J¦Q£FUÃõ?}út{¯”«Ð|q¯Fµ&" ¨x\£Gv&Lp[l±…¥<ŒG¯Õ˸Ó#.3¥~Š€ˆ€ˆ€ˆ@îñ‘;+)±"ðÉ'Ÿ¸_|ѽð öøÆo˜FBt“;tè`Æ÷m¶ÙÆuïÞÝ­½öÚJ…T¤ç¤q"íi<øñüâçx ;餓L_c¹å–+Ro²7SÊèÊÿøÇ?º™3gš#ã±Çs]ºtÉÉùÁ¨Ðyä‘G,­ØØ±c]«V­²V{E@ª‚@ˆ&ÀI*­òœr""o¾ùfwôÑGÛbŽòì¥zGrzÄqÖÔg¨€µ3Ò"Peµü”)SÌ‚à6Z Ø£eã7¶•ôÛm·Ã‚>B9éNDûZ‰Ïùñ}÷Ýw»›nºÉ-X°À!îMD©ÊBïÕ«WYs1tã7ºË.»ÌDÉ:ýôÓÝgœa:&…œRºá„3oýõ×w>ú¨kß¾}N;¢jvÞygc{â‰'º‹/¾Ø­ºêª…ì®êˆRòùGDäÙgŸí®¸âŠôººº¸÷Þ{»§žzÊR{:´º¯ÑŒ€œC«ŠE@D@D@D ääø(ù¨"P?ÿü³éK„¨iÓ¦9VÓÿúë¯5:Dê,R m¿ýöæÙ|óÍËÂð^£“øÇi=®¿þzsV1_”Ö­[»cŽ9Æõïßß•ƒ@w©¢?ÐêØÿýÝ;ï¼ãÚ´icÎØä’¶íŽ;î0 )Æžxâ s„ý¤""PÝõQÞóOZÏ×^{ÍÝ~ûínÀ€åÝYõ.äôˆÅ4©“" " " "Por|ÔNÊ"@äé–¦Nê&Ožlé±-ZdÑ‘6nÜØuíÚÕ‚>º"qçbpŽÖ£ç¹ :gذa&ˆN”¥iÓ¦®oß¾‚Á¿”Q9¥Šþxå•W\ïÞ½-- ×ä<` µ]‹8÷8à‡NȦ›nj¦uÖY'÷ Ñ‘" I@Qå=­è’}ñÅŽ4…»îºkywV½+{rz”ý©ƒ" " " "Ð`r|4¡*Ê%€NÈK/½d©±H‘•I'„(œ ¤Æ":D:!…¹&>øà7bÄÓùè£,:‡H…=öØÃt@ˆÊY~ùå Óxµ–"úcÒ¤I¦Û›vÚÉÝu×]®yóæµö–H‘ÝwßÝœ&çœsŽ¥¶Á§""PÝõQžóÿã?šî½ã³†H?¨/9=êKN牀ˆ€ˆ€ˆ@¼Èñ¯ùRoE ¤ˆ6@'$¦ó<›NŽ"C6ÜpCW.ÂÜ%˜§Æøá‹þ¸á†,í«”);wvˆ¿tÐA…“§æêTM)¢?ÈùŽØ-©ÚÐþ@$~Í5׬µß×\såŠÇ Æ âîÝ»ë:­•šÊ& ¨òœßùóç› ½C³¬I“&åÙQõªì ÈéQöS¤Š€ˆ€ˆ€ˆ@ÞÈñ‘7”ªHªº¯¿þº¥Å‚NQ"™tB‚`z‡¤’‡Ë…ôd'N4‘qÒ6aÀ§ñpä‘Gºc=ÖµhÑ"'ÑïûÌtZn¾ùf{~ÅZk­UT‡rˆ©fÍšå.\èpNàl 2eÅW¬ãh³Þ¾}{[üâ‹/ºéÓ§›ˆŽßÿþ÷Oäúm×® œã¨Á¸Ù±cÇ’¦ ËØYí(î wß}·ûôÓOí¾¹Ë.»­m5”ž‹+üq·ÑF¹Aƒ¥?H[E 9=²ÀÑ.¨PŠø¨Ð‰Õ°D \LŸ={¶ûé§Ÿjt ×A'„YÒ ©(çü°Ç`wÓM7¹ ˜8=’=z˜z¯^½²:rn¨3úãòË/wW\q…¥B:t¨;ãŒ3jM‰rÉ%—¸¿þõ¯6¢qãÆ™c¦”bñu@«CE@ D@Q[Ïj/»ì2wî¹çºž={º§Ÿ~ºžµè´j% §GµÎ¼Æ-" " "Píäø¨ö+@ã"@dæÌ™IÁtž“¯›´MÑÒºukJ:!¬ò”NH”PöçDÒŒ=Ú]ýõaz"-(p=æ˜c, ‘68EŠQèΘK/½Ô"Rˆð!BèÌ3ÏtM›6ÍkÎ>ûlkëûï¿7‡)¿HY“©,]ºÔíºë®)Ò›5k–épm¨Òú(¯IF¿Š(Fôœ†^^SoÊš€œe==꜈€ˆ€ˆ€”€Å«ÊE@j#€AŒó¤)z饗²ê„GÈæ›ož÷tIµõ5®û_~ùe7lØ0DÇñDÁÙзo_‹ÁR¬‡bDüòË/îÄOt£F2‡—~ýúe½^¸þ<ð@HG4”•VZ)®S®~‹€䀢>ò1OU ÇôÔSO¹‹.ºÈͧ"¹Ó#J:FD@D@D@*—€•;·™Ä’‘èT‹œÞ8CBʦè€7nl‚ÔA0½[·n¦'Q¬†h_âòüƒ>p#FŒp·Þz«ûè£L„ž4c{챇;餓ÜöÛo_}‹tѳN8áǼæ£á2`À÷È#X4ú"{íµ—iÉdªÿ¬³Î2º én¶ÙfEÕEÉÔ/m( E}”†{ºV;uêä^{í5wûí·Û½=Ý1Ú&QrzDi蹈€ˆ€ˆ€T'9>ªsÞ5jˆ%K–X$Hp„!’ªB¬ ‚VÈÖ[oíš7o.Ãuš™Ftþ¡‡rD6`H¸GAtœt"t[yå•Óœ™ßMÑèœ sæÌqë®»nÞaœ‡z¨åƒßgŸ}Ì©€y¦òõ×_;R]q}‘R…ˆ˜|‹°gj[ÛE@Ê“€¢>Êc^¸wñÅnìØ±–š°ŠË[­‰€äéšHß4yòd‹™1cFZtAp€‹hé„Ô„Ot ‘ 7Þx£3fŒûñÇíF¤zB£E‹uýATŽÝwß=ïŽôcˆöØj«­\»víjÕ‰!ÚÃÚÁì²9Ij’Ô+J% ¨ÒÏ,ŸMÁ üM›6¥ï”zP¶äô(Û©QÇD@D@D@D èäø(:r5("oÏgÏžÔ !=Ö'Ÿ|b©œ¢m­¹æšIG)²:tè4¦D«Æço¿ý¶¥Àbu3Fœ"šÐ½ iF$._W†Æ," ¨Ò^óçÏwo¼±ugv“&MJÛ!µ^¶äô(Û©QÇD@D@D@D $äø( v5*"PHí1” ”Ž„Y .L¦t m7jÔÈuíÚÕ"Bp„l¹å–nÕUWuÕ¬‚Ñàî»ïv‚mxôèÑÃ48zõêeÑ¡E@D Ò (ꣴ3Ld"iWYe÷ÕW_•¶3j½l ÈéQ¶S£Ž‰€ˆ€ˆ€ˆ@ÉÈñQ2ôjXD ˜Ð ‰ ¦£m‘I'„ÔXè„ðX­:!DÑŒ=Ú]ýõIƒX8¥uëÖîŒ3Îpýúõs+­´R1§Pm‰€ˆ@É(ê£dèݨQ£ÜGáÚ¶mkZP¥ë‰Z.Wrz”ę̈_" " " "PZr|”–¿Z( Ó§OŸžV'dà 7´ôX8Bˆ Áð_m)ŸÐS6l˜ ¢Ã¶uìØ± ú%º4Ô¬ˆ€,C@QË )Ú†Ë.»Ì{î¹®gÏžîé§Ÿ.Z»j(äôˆÇ<©—" " " "P r|”‚ºÚ(;D8¼ñÆÝ0eÊK“õñÇ§Õ éÞ½{R0½štB>øàKƒ…ÐìàÁƒÝj«­Vv󨉀ˆ@¡(ê£Pd³×;hÐ s¾}ôÑnøðáÙÖÞª" §GUM·+" " " u& ÇG‘éj!Õ ™ýôÓ‚é³gÏvK—.­Ñ]Ò`µoßÞÒc‘‹èuÖYG)¡jPÒ ˆ'E}Þ:uêäÐåºýöÛÝ€ŠßµXväô(»)Q‡D@D@D@D , ÈñQ–Ó¢N‰€ÄÀwß}gZA'dÚ´iuBp€7Þ¸êtBâ0Ÿê£ˆ€ÔF@QµÊÿþ5ÖXÃ}ñÅîÙgŸu»í¶[þP±" §G¬¦K’㣤øÕ¸ˆ@%@'dΜ9.8B^|ñE—I'„”XD„ð‡HøŠ+®XI(4¨X#GŽtGy¤kÔ¨‘[¼x±Ã0¯RhJ…ÏÇ·Þz˵iÓ¦0 ©ÖXÓ#Ó¤NŠ€ˆ€ˆ€ˆ@Ùã£l¦B¨D ,°ôX¦ãá5+†£ãÙ[lQC'¤iÓ¦î7¿ùMô0=(Šú(Þ$ µE”$å›o¾qMš4)^ãj©¬ÈéQVӡΈ€ˆ€ˆ€ˆ@,Èñ‹iR'E@*…:!S§NuDƒ ˜žI'¤]»vI­·ÞZ:!•rh" A@QřƉ'ºvÚÉ­²Ê*¾*N£j¥ìÈéQvS¢‰€ˆ€ˆ€ˆ@,Èñ‹iR'E@*•@Ð ÁBDÈŒ3̸“H$j yà 7t[mµ•¥ÆÚf›mܦ›n*„ôBD@ŠG€Ô†D"êêì³ÏvW\qEñ¯¢–FåŽ8â×¶m[K%YEC×PÿC@N] " " " " õ% ÇG}Éé<( Bj,œ!ÈvÛmg‘uÖYÇýö·¿­q\µ¿øä“OÜ=÷ÜãÆŽë>ûì3‡Ðü÷ßï6ß|s÷Ç?þÑí¼óήqãÆi1á|zë­·ÜÏ?ÿìZ´háÖZk­œù~ûí·îË/¿´ã9WBöik£”=E}vŠöÞ{o÷ÔSO¹‹.ºÈ :´°©ö²! §GÙL…:"" " " ±& ÇG¬§OçÐ yå•W,*GÈôéÓÓê„l°Á5tBÚ´iSµ:!8nÝu×5£ú¢E‹Ü½÷ÞëŽ?þx‹hhÞ¼¹ëÕ«—»òÊ+-zä‡~¨ Œ³gÏv¤#Z#ý³ fk¬±†‰G#ª&Dj¬¸âŠur\ ÇÎÖYìçŒëçw¿û{ã7râQì>ª=(gÿó?ÿcNOúÈ=÷óÏ?/çîÆ®oÿüç?­ÏD,ªT>9=*Ž5B(&9>ŠI[m‰€ˆ@`ˆc•ì 'œàî¿ÿ~÷þûï»wÞyÇ5Ê{ì±n³Í6³HR;=ÚýéO²tXk®¹¦=2Ä3Æa€H$Eèqñšøúë¯ÍÙƒ`|(tDmàa¼ü¡«B ªh!eÇå£=BtÌW©œ ÕâìÊÇœ©ÈD oß¾®eË––&ï¯ýk¦Ã´½Žˆˆûâ‹/ì,ø*•M@NÊž_ND@D@D@JA@ŽRPW›" "Pdn¸¡;ì°ÃÜÍ7ßìÞ|óM÷ÑG¹üãÎrÝ»wwD,`Ÿ2eŠ»âŠ+Ü^{íešûï¿E­`Nu^0Þ›nºÉýu>ŒTV't’é~0]¼~þùç-=UC§ýæM7Ý´FÛ ­».çyJ4‚%lÓ£ˆ@íõQ;£ú¢=8Wõ!ŸsäôˆÏ\©§" " " "'ËÅ©³ê«ˆ€ˆ@~ݱÏ>ûØ5¢2kÖ,Ó ™œÇãÔ©S­ô™²Ë.»¸vÚÉ-¿üòöú§Ÿ~r¿üò‹›0a‚C¤BTu…’®?vþ‰€¤%@ÔÜ‹/vD}à@ViœÍ”UVYÅ5iÒ¤a•éì²% §GÙN:&" " " ±' qóØO¡ " ù'€1|îܹnå•W¶•¶h@Ľ <ØÝqÇ–Ž‡Çã?n†þÚÆEªR‡…ÕÇÓ¦Ms]ºtq¤ ëÚµ«E‚°™ˆ uÁ‘ê]o½õÌÑ´iÓ°É=öØc®_¿~eóòË/[ýQçÈ«¯¾jR©# N*œ!© Òšµk×Î}ûí·©§Ùë#F8 ´Ã† KŠ«§˜®?©Ç赈À²FŽéŽ<òH‹ÃR ãeGY¼-wÝu—;üðÃ]Û¶mÝœ9sŠ×°Z*9=ІZ ‰€ˆ€ˆ€ˆ@UPª«ªœv ZD@²Àˆß¾}{·þúë›ðuö£Ë/ÑDb|ÿý÷ÖÙ«¯¾:g£dÐ㎠"5¨/Zpx`èLuzp ΈÕV[ÍÒZ…sp¦„:BF؇S„ÈŽ¨ÓgGprMB Ñ%¡Î%…YªÓ#zÇ`”9sf2ê…m©%D¯¤n×kì¤õ‘O]÷g³ô=êJ.ÇËéyR/E@D@D@D Îäøˆóì©ï" " õ"€p9Î\Ë€’©Vž{î9‹ÔHwîÝwßm)±pH¼ôÒK®qãÆÉîºêªZõA¾úê+׿ÿdýÏã¬a;Ž¢G‚d£6rß|óÕO{Ûl³M2Ò£gÏž& Ìy?ÿü³ëÓ§Or¼{î¹§µA½—_~¹[a…¬Žûî»Ï‘«M›6É6’×Z Hë£VDu: ¤º’¾G°Åâ`9=b1M꤈€ˆ€ˆ€Äž€±ŸB @D@D 6èYDK4R"º=Ós¢>jK÷E ¬ƒ>8é`@4~ìØ±Iç9ÿüñÇLMØöãŽ;.éô@'Í€ @Îã{ï½gú"ÁùñùçŸ[ÔZ,!Ú„(xÀ¢L¨Ïý÷ߟi'bD°Š'D²tèÐÁa¸U¨?E}ÔŸ]ê™!âCŽT2ñ~-§G¼çO½8ã#N³¥¾Š€ˆ€Ô‹À'Ÿ|’t  [R—h\ÜyçMs#Õ9‚óƒ4WÁQAôE¦‚3æ™gž±~â¼8p`RŒ”êª~üÊñ,9=ÊqVÔ'¨\r|TîÜjd" " ÿ!мy󤱟ôP!:"_€öØcddFj§Ÿ~z2+˜ýõ×ÔCì5‘ÁñÀó1cƸ'Ÿ|²Æß¸qãÜ¥—^šŒI§7Ò²eËdG´¡£>Ú}üñǦE‚cEED 0úõëçx’N‡£Jý(â£~ÜÊõ,9=ÊufÔ/¨\¹'8¯\™ˆ€ˆ€d%pË-·$õ4vÝuWsràt1òW\1¼¬ñ O2­í‡rHtwÖço¼ñFÒ¡RWe=A;E@ F€”qD}  DÔÇgœaiå Ö`VLZÀ/¾øÂF¦ˆøO°œñŸC@D@D@D@âH@qœ5õYD@D NR¯¼òŠ yçR ‚ߤ\ Q"éœ ,°”S¹Ô—ë1íÛ··Uã¬O÷×´iS·ýöÛ[$ Âæ©i¶rmGlj€䟀¢>Æ4D{P‹4>ƲÔgËéQêPû" " " "P½äø¨Þ¹×ÈE@D ªì³Ï>ImŒSO=5çÜû>ø ûöÛo“¬0Â¥jd¼ùæ›.“~Çœ9sLLœ pV¤:a’GžàôxñÅݻロñcR=Ìá‘0¤ÉŠTSãéW_}åfÍšåÞ~ûídtHôBD oBÔJë£îXƒ¾iùš4iR÷ tFYÓ£,¦Aª%PRÇaì>ú¨ëÝ»·ëÒ¥‹ëر£cÕê)§œâ¦M›–Ìa^ÊÙ!;%ŒO‹/.yŸè¥ô)ÙxþÚk¯Ù6DnãZ~ùå÷þûïëèøjO:&µ“n?õÌŸ?ß}÷ÝwµÓ¯m" åMà‚ .0¡qz‰Q !ñ ž©çì?ï¼óÆ Ì5×\s™Ã'L˜àRSUqΈ‘#G&ï×7^æÜ°áñ ‚Nê*î‰é NR¿àDY´hÑ2÷«¹sç¦ulì½÷Þ®k×®nÓM7ÍÙé“®}mÈ€¢>rã”î¨àøP´G::ñØ&§G<æI½(,¶{ä‘GÜN;íä:tèàöÝw_·ÕV[¹#<Ò=:íïÍòé}uô;,öJì²Ùþ8æË/¿Ìø›¾\i‘åâ£>r/¿ü²-˜,×~Ö©_Þ(S’2bĈÄú믟ðÍøç D‰‡~8á Oyí£7&%øË¥¤öÓçyOxaÜZO¥~ï4I{\]ÚVÀy~u¯ñ‚Í”)Sl÷^{í•ð«m»7¾EO)øóúŽ%]ÇüêæD»ví’×ÃĉÓVc›êMtëÖ-yŽNø7jcryeë ïxËå4#"3^„<áWb'ïwß}wÆÏïÈH¬·ÞzÉcù¼òNð䈹ÿx£\rÿO<‘ði±’ûyríµ×&~ÿûßÛ1x`‹ÛþáÇ'¼&ˆmŸ={vò3ÉGz$|Dˆm÷¢ÈËÔÇÉôÉ;HjœË½¯Q£F¶Í¯Nxqtk'üûì³Ï+¯¼²íg>úÃvEûñÖ[oeüÜ õèQD nî¸ã{ßñþä}¨’K/½Ô¸õìÙ3·tTYðú, ¯‡esè#v>r²¬ú§Îˆ€ˆ€ˆ@9àwç]wÝ•ü­–ÉNÊ÷I¯!—ö7b9§œú‚­/“m¶>ýÄ‹=6Ó¥nÇà3O$ü"ïú4WôsèçqÇgãÃþ ¿¸—’D| 2Ä„ß{ï=Mü»° –U]þ¢›lå½79ïü¨uUnò¤Zž°Âw³Í6³Ô <ð@­¬Ôöó¦›nr .ÌØŠ¿ Ü;ì`õ{#“¥*‰\×ö£ç†•ÀÑm2¢Éºƒïॺʊ©ìvÊéQvS¢‰€ˆ€”1 ìn½õVwÍ5×${Ù¹sg7oÞ<[œ†Ý‘ÔCüÎëÓ§Oò¶±H\¥vuuTÔ^ã`®^}õUK …Žfø#õôøñã]ÿþý“#OpÒI'%_ëIñÝñ]¡–F"V¬ci^zé%Óû(Ð_ÀÐÞЂç*»0´‡çéêMî *AÛÉ“'×;?z]ÚOíln»í6ÓóÀÈ©ÇëuCÆ’©´•ÉìçF±dÉ’L‡ºÔk"5b$ã‰Ú!"PÕøò×Gœ«D‰e+‡z¨ÝkПJ4lj>»XÅÁÊn¶¥–§Ÿ~ÚsÌ1nùå—OÝ•öõŸþô'Ó ‘©Ñ—Ï?ÿÜ"R¢ûˆÁá‘ÉÁB½Ü7‰ m-þ¢Ÿ…¹ö3Ô¡Gìõ‘Oº½aQ ÷3•xÀÑðÁ»çž{Μð·ß~»é8Æ£÷ꥈ€ˆ€—N œ]tÑEÖ0¿ýŽ:ê(G–£…‚Ý’…y£Fr=ômÆ‚­Œ…å*¥#àÓyÚÂô7ÞØEÿÐÔD§§Öã?žì 6m~«—ÀrÅmÎ9<_DwPêiÞ¼yÚ.pí¾ûî–vãÓO?M{ ¹Yž„ˆUW]Õ!îÍMg «ìB!u‡ÏMæ¦OŸn3lÇ@„‡u­µÖZƠű8_|ŽZ‡ÃcèСv£! )Q|žøen""ÅHpа–müƒY¶öé#çr,Æ3Ο4i’E4+úÅqÛ0Þ£['Æ+ö³:\ŸÇÝm¸á† ‡ oêñ¬ê%\Ž'ÌC?C}<†c`Í͘>Ô…%ãgô‹ºˆ„aŽXyœZ6Ø`ƒdšö!*o:`Ô‰Ö½{w3FÇLJžð0'Ôs„ùŽùRû}Æ^>|0¥–º0H=W¯E@ C€hB ’Ügø Á™KÚ+Vóeƒ[º{bè ÷0>GB!„vذa–‘{9ŸAmÛ¶­Wú=R&ò°`ÁkƒºH½…s#s%ôÏAú„c„/U81VZi%Kï•îÞÄ=ó…^°ÈîëŸmÌ¡=Š€äN D}øœÌŽÈ*ÒØ¦’™€">2³)Ç=8=þøÇ?ÊéQŽ“£>‰€ˆ€”%yGìÒ¥‹-tÎÔY~§‘€ßœO>ù¤¥|Ç&vúé§§=»+N²¨êØ–[nivÓÔ°{‘}‡G~óÝ;,¿‘I-Ï¢kÚæ·r6[Z]Ú¤ØÙ‚½{$¶;¯·kYv¶Ýv[û=úŠÝ’è 0ò»•߬0öHŸC¡NDÅÃ"jŽ¥^Úá÷0¿£…ãƒ=Û/¿±Ô6ÖPvÒ¨2lçŽdm@¨žìA™ }$åöb¯#jãã<Æ—nP>æ‹qc7ð:Ÿv}`KÇaÃüFy¦ë3,±!xiÛÍÂJæ‹¿t‹(©ÛsÆ<3—𠲉9!r†¬Op„gôÚÃŽÝ©S'‡=·ÞÅWZÔâ=˜IVÿfMxÛ÷t¿‰ÞA’ðNˆeŽõPZQÁ&žzê©„7¶[ý÷Ýw_ƒJ{,"BþM^£Q¡íþýû'ü!),îa'RE´ý…Zc?Ç„?úrâ‰'fmßO|ò| “@p×k‘$ë@´Ü_ÜÉc¨3ˆ›G™ú›`ÂßÔ’ç…>ðxÙe—%¼1¬Æ8£\üM7­HR¨?´='Z?Ï£,é¯_aœð7É´ý \ktÈ¿ð‘6IÁàwÞ9ànºÒã?Bï´‹x¨#Ùa°Š²Kí£O%câåô/”([ï˜IŠ›GÇš+ŸP'õe­CÏE@*À=÷Ü“VܼòFª‰€@€ï£-[¶´ïCgŸ}¶ d!àÓÌ&¿7fú˜åtí*2ïèOøa6gþǬ„Ì‹Ì_͉€ˆ€Ä“Àĉ“ßw|~ûgm…ï“>‚ á Ó oœOøL0˜⠿X;YwÔæ ωÝvÛ-á5Î }ñÆö„OלÀ&=/<÷Ž“´"ÝõiÓ;T’íø¬?6®Ðý1b„õÑÁ^÷2m8Þ/’6Áwoȷ㱆z¢Œ}¯½öª1n˜ûEÔiö!z’O7À¦HÝØ$±g+~!c§)³ãýBì„wl$Ç^ˆí9ÔíoxîvLò$ÿ¤¡óÅ÷kl­¡ðˆívÿý÷O`Wf[êøÂõŽO}LÇÌ;W’béÞ™”ð ÀÒŠÃ{§IÂ;é2Î5û±›×§àM)jáéWÉ&G åuéH:ã6†y.æ(|n LNÔ€ÝÏótm.Ln&lèÙ@IDATìuDø¨Ü3¡ds|pãÀÉäx¡}~4pQ¥ö-¼Nu|P'o8JpL„c³=2†èÍ{ˆ\|œsÿý÷'ø±™ZBý¡Í\Xfãí7ÞW£InÂÜøÂq¼©S c঑zŒžOx¯hr;ûqd„¹ Ç'N¨7“ã£>|B aêУˆ@eà^Ãý~Ï=÷LøÕ v¯ò+›+kˆ@Z,Òà{?Ð|ÄqÚc´1‘˜?~ò{?¤UÊ—@ÔéÁgÚƒ>X¾UÏD@D@D L¤±棤s`#Åþlaó|Ô`òîÏ•5RFD •€´>R‰¤Ò\‘Npx•ò$Ò[¡cEšr÷îÝ»<;«^‰€ˆ€ˆ@ÀEúŠ7[:ø†vÛ©’‚f¶KìŸ|^“êiܸqfߤÒúc+ÍT8×;ì\ÒW‘î?ì¥Áæ–Ï6©uÖqW^y¥é]¢µI;ØøÂ>t˜±íaã#5—7ÄÛ>úA¿°‘îàSF³ßÛ¡l¿ýöÆÍd BãØëB!u>镘}„‰íBúà™gž1-–plêc¶Ô_Ø2i[!…¹&õ>…ù'=uØGHwEš.˜£ÿâ£2ìXúí4SÉu¾zð™‘ÌNJ]¤ôâ{œ_œim{'O¦&,íö{ ßÑÑÆNË\ ±pýõ×Û>¶y犥Y³ )ÿ°Õû¨£ä8£×‡b9âˆ#Œ,B½ì£ŸØéëZŠîø ÿ"¯\ÐÑBŽ:°Ø*5BjÁaA.0 é>+™ï‹ ‰ }àü`xpAbTNr¶1a©LUô)ªL#ƒc«‰þã¢ñžÚäéÔ‹A‹/ÿ!a"²ä)£í\Ûç\ŒcäLãb"—^¶œî çô‚½ÄÓþäÍx :òÝ…óêòXÛXàýòË/'8:¢Î¥wÜÑ >Ür¸Ñ.7nÑuqlêþx 9G‡~¸óé#ìtòÄqS§üñɹã5¹ñ† b¹úxÍüñ!Pˆ’…è—ê(/|ÅÉ­""Pù‚Ö#Eë#ÝwÜʧPûÃwðÔß µŸ©#ŠE Ó…Šˆ€ˆ€ˆ@í°O.úèB¦ ÈØÒ.¹ä÷—¿üe™¿k®¹ÆŒòᢎ†Ðôb(ØÜ9‡×»:N‘p.:,™´g¶Ùf÷ì³Ïšmžk '×)›5¶k˜±û}¯^½’û±¿§»fíä,ÿŠ.nN_¸X1„_wÝu¦rG-µpqŸp ö< ž® :œ%©ç_}õÕæyš5k–E ¢±Ülð¥ óF ðF 9.>n´ÓgV6á”À!’®¤F¤“©}ŽãƆ£®åÏþsÒ¡=7ʃ7njEôØú<Ž…n8桚Ԃc¯$7Jæ:õâåô·¿ýÍ<¼Ìw¨zì ¼æÆœY¼q‰òà ÒªU+v×(xMƒc¤ÆŽ<¿h¢—.¾øbǵ‹çZEJI€&"ÖV[mµRv£bÚ¾óÎ;M Ž•*|žˆkÅL­"9 êƒÏx„&ÿú׿:"qUjr|ÔäR.¯äô(—™P?D@D@âJ€Å/di¡`K#B!µüïÿþ¯¦É6“©`´ÇpŒš:±a<ÆF™.¢û%¶Ác=ÖllØ­RÃnšº [,†øÔ’¯6ù·ñ;UÈ›(ˆ·ß~ÛúŠã#µ`ÛÃÆ—­À7DUp¶EÆMÁøÍ2ðm£ÿ‡˜;Q"8‰‚ó[tpZ„ã°Kÿãÿ/3>â, ÿQnÚ`°U“ñ&Õ~¢X¨§MpX¥6’ë|á4vUúC´ ÑÂ<#$N[QfØ(‡ f‡r[깩õ¥ÚÛÃõ=[.ö[ u_~ùåÑÝfë ûkì¨Ã‹’8>èÆj<—ü’„ÇðÑGu^?œ Ñ1àmó9Ü,_¶ƒ1˜‰˜—œÃûæ›oZ=|°-´Î)ÄcCÐgú Ñ?Õ)¹ ÜòœsΑ>W`µÇ þTD@ª“ß%Y½ås [Ô‡øs¤TUù/ñ‘úã÷¿GèY©ÈéQ*òjWD@D ’°ø‡lNL‘ é8`ã †jžc Å^-Á9ÂBo 6³è‚b¶=2—’¯6i«E‹U’Ú.Fqì‚Øü° bdá46¾3f˜9Œ;õÜL¯±Ub¯£°(œEç,Lâ;N(°Âá­;ãƒã±¿¦:%¢l8ÎôÝëG×p*qì²Ë.f£ÄVɸöq²è°¨›’ê¼±þ_]æ‹Hlï”tÎÛáÿá€!Cé m¶üOÆÔý8spVaÏ„Aê‚{Î]o½õROK¾¶ãä†<=)™ã#ÚŒÙxÓø.ÞNB€Èí~ü¢¸D D èäòYRÓ*yڬգ߱Å[$ YÎq'o®\5Ñ*¹A¥¾áÂþ¨…cB˜WØŸÏG¼ˆáÊ›–7M} ‘Aä†#LŠ›3Q"x£i®ðn‡ˆÚÀ‹‰hœbDvdWCÊE˜YÔ1”©mBÀ+ŸíéÐí«~¨4D1³ðGQégVé¹”z«œ¥žµ/" "P)X&cNMíÎ8Y}Oê}þ¢……̤Šl¤ÁÇvÓ¢£\×’ÉÀž®ž|µ™®î° g6Aä°-æ£À)D>`3D'$h…Ôµ~"nHG–1B=ðA¾ààƒ¶¬5!eV4š†ˆ‘[o½ÕšÖµmޝË|áðÁYDÁ&]@n³üÃF†ê,jO7^Ng1L29>`’ÍÖ]Ûþ,]̺«¨Ž¼KÁhM*#Š—ZÐÉàÍ 0ôž!½QÔÎÁØÏ›!<&ˆÐ¡\Bc¨ƒœr\|¹tHðÔ2–R.ÄTZº>ÕÕ±ê 7ætufÛÆ#Ý<‡sxÓ¥«›UÑD¾PxãFÇ *èªP/ÒàÄáM‚#„‚há8œSÜpˆ!Ÿ\.œ¢ud{ž Ÿº0`<\Sü©ˆ€ˆ€ˆ€TE}dŸÏ°èIÙ9s¯œŤ­¶D@D@ª‰†xìØ³2”£<Â*ìP™ ǰrÛ_ºÂj|ÒKå3A!Ú$%òѲÃ6štM¤ŽÍÆ"znºçÁ˜ŸnÛ°ÏawÎen¢up<‹ûY”2D„yfÎÑɈ¦½%z„…ÝØ/qnaëΤ•m+—çŒ#Øeé[ Èå\ú‘KA G…6h“ñ–ºÕñAÊò‚âCèâ8™BdþŸ½÷€—ª:×ÿ—z[ ±EM"¢"XP0 &b¢DlX‚Ý5Š ˜˜Xb"vƒ‚…¨ ØĆÑ$Š•b7Å5#1Þû¹¿Ì}×?ïvÍ>{fΙ33gÊó~>çì™]VyÖÞ{ÖzŸ· ñÁ`9X&Ý1àÜ|„Æ"R%„°Y(×òkàòăÇ‚ì˜cŽ ž°Ž0g´+öª¨D{Ê)#Æ'¾ì¬$NÂm®=R¨¼ö\Ë9äÜ€iîÈCeeó à&[ îäWá>BN=õÔ¼0c÷Ýw_øÁ°ëo¾ùf7lذäáf? $îc¸­UBÚƒOg0¨DU†B@!P_Èë£ðxÈã£06]qD¤GW ®:…€B ™@?‡:EaLx#Þź±bŠ~Œ~ ;_+©FèøL¶ß~û* £bÎÁƒ:&ìX{¶èÉÑA¸üj:âBºPò[»‰l4iÒ¤`øÔ$mÔmûËÙFÊŒŠH¬Ž^4“ƒr³ˆc¨Žþû®IgåRý&ôçwµ|Šh Z‚u>¹[o½5ä[(V­)ê9‡››‡‰—ƒÝ8€^ˆÁ$WÇÀƒÇÀ]wÝåˆgVJHòCè*äÄO ¡•ñ9cÜ(<l-—FœÏ¡TÕ>qcq]0¥–D>&”âs u⇌cà 3Ù!F…ŸzòÉ'“|é2ÀxóÍ7w#GŽLpOŸsä‘G&I~Î>ûlDZï¼lbO(sï»âŠ+aʌѴr-¿‰}ïȶ#øTƒŽ´Qç z@€gr›IïT{.Kµ å §]—õ.+U†Ž ! óú ­¿üå/ÛFh{5ÛÈï…y^Û⬚õ©ìâˆô(ŽŽ ! „€(ò, 2$\Nxw,ûKÖ.Y²$èÄÒuš’™ýD7AWšUÇëDd•Áƒ»¿ÿýïé¢Úý½Úuš' êÛ·¯›:ujÐ Ç DÿÙQr]%ú:#vt–YBä¡þýû‡ºÑ—+è±! balb}7úæC}r÷X‹ÖrrÄ×–û™vXó?ýéOnÚ´i™E¡Ç!Õ@,qH-ÆÅtËñ9ô â#&:êÁ9€6Ö”øÀ{ƒ…‚BýÒK/ud‡/$]tQ…87B6vÎ<ârN8á·páÂð SWV(¬X‘Í ÅCoJþ7Þ8-q™ñgòVà:†üâ¿Èd\KåÒˆëËîÌçÃ;,q-²rPNž<9ñrˆóbpÓ6>úh›…7ÄC¡•Ï6î !š ¹L¼4ÒB™1x^÷†;Kâqàåý׿þ5ŒäÓ:묓çeÃBÙ¥Y„ „Äß³uV}é}åâSI ÒmÒw!PïðŽáÙå‰×ïãBÏxܼ¸ Cí:¬øñ”´.L³&í­‹ˆzÞLàõÁB‡E(nú—äö B0Hº‘]‡½jB@æGeø±Ç›tƒêQ£F\û ;=÷ÜsCøä¢è)Ì)ºÒ´ Ì?~|Ð}’ß}Wg¤šu¢Û3Ý…‰ŠÛú¯ý+¤E ,~1AW‰nÖ]¥…•G‰Î2&!8ݺCÆ}¦…o²2Êݲ®µ¿RÆùD¾9묳BUé>”SLT'úÑ´®ÒâÞ{ïmS<)3QN:é¤ð9þ÷ÒK/?û˜ÃxàyúÚøÜZ®)ñÐ'Ÿ|r’D…|äú¸îºë‚B›GÉEÈ)Ûßÿþ÷Ý[o½0!ìIv‘ø3ÉÐ'L˜àðð@(X9¼<L|•fù+²ñ:á6Öf a€J-¶bò€:a !b Šúçž{.X/›B¾Pýñu¡eþCá?|øðð’Kð#®˜"„ð"q6+èÁl±¶†$L/ËB/ÃB}AiÙ£Gsbò5€ã}À„Pa´!O¾§%kÂ"IX6NÚÛØÈë£íøY˜+Œ¥²ò¿µ½B{ª€Hj ª2…€B@|ŠFÝDc1%2ú5t¤"XÜér‚HgœqFØÏñB‚¾Ý‚šr)¥¾•½óÎ;#tô£èI()Tf©ýÕ¬Ý:5˜ã?>èðÐóâùƒ‘ s<̰Ûô|è{QÖƒ#:@<z÷îôpá×@0rÊ)In¸VW¹[ÚH=Œ½EC¢,t°6Vå㕃þÒºÓ'ö£Sµ~•Óî-Ò6 `zÐA¢ƒ2чaÇÂoÅåsŸ G¸—Ð1"èS¹¿ˆò±ýœ9sÂ9Ü[‡rHø\ÿ|k.žÐÈùX_dGiןg–r¯½öZ^;½ò<çY§’×û˜p9?ɵþfÏy7©¼ë|²™œWp'û|N†œ¿!“k }ØgŸ}r>ÜU¸Îß<9O„S}Rö¤,úèØœ÷> Dzê÷7uÎ9»ÎßT¹Ç¼MµþfÏ<çˆ#ŽÈù‡7¯ÎBØzÖ²M¹Vo¡k¬^™™×®B}ñdBγ¯9ÿ –lSÖØ¦èÙÖÜŽ;î˜W–÷IŸÆÌ“}zW5Eõ ! „€hzÐ#¢O,¥»â¸',r^ó¡—ÂùèªÐe™ 7EÇVª,ôf±Î=¡•ï ­¸d‹nËçÐ çx#ߜϵœ+·NOìä<9Êôù;rÞh;)“¬Ñç–êK|ý,zZa¡c`æ=òŽÇçÚgtÎèžcñÆó9O „kÓøÇçÙçø|tª—]vY8Ô^ܬ-lÑ[s¿tf¼ÐË sŽË-ô9î:ëk¯½¶äu[n¹eÎG²îçJsg'ùPSf˜ x äh°}Y[¼HfC¾£XüÃìn»í¶Ä $>Æg®Å-‰Ømq\±Í6ÛÌm»í¶ya¬p‘ò7~(V¼SJÉqÇ—0¸W™í% eZ>¬ú±ø‹c¹q~l-måÄýˆ”“ˆÆ–>ûc&®ɼ'iÁ• ¶Î¼bâã0þÁ Ii8·«P_h'ç2ư²– >.—Ïçw^íÛôyXýbñkfy€p cóèI’táûĉì_„IYvbŒmÿrñ©$ÖNm…@£"€×U1«}Þ3X´H„€­„€¼>òGÛ<>Jy^ç_¥o•BKÄýöÛÏÝsÏ=aÎϺbôèÑ•*^å! „€)ÈiFøüyóæµÉŸJT¯„wsçÎÍÓ7Æç [»ð ]¡œèæÐÑQW¬ó4}z·¯ýëq‘á3çZ~]ô\–Ó—ƒåÖɸ®riÓn»íšó=-xmŽŠèðÒ‚Nݬ úD;ý+ O<ñDУÚ9ñÖ+ðÝ7ÞèÐ=ÇB9x˜vö=½sŠÏ¯¯£¸Ê ýfZlœð`!E„ u›ÕYÎx‘$/Ë/ce³eþý“Ÿü$7«‹>3¦àxp=sî¾ûîļ9 ÆÄØgŽVI¡NBG’e#¯ˆ´y^Ö~ö–†p,ÌyÖZk­J6¥¢eÑæÐŠÔ”ˆ­D… F€÷ëEÂ-¡?c]ƺÒƒmGoÞ-$çYe½Æ_{õ_©ËέVèâЀ ºô1Ì¥Y?> =r¼že½Íz”÷kÎôš•ã `ÎuYå[ÿª±µ1§Ô¾¶Çù½¢ô5u%$î7¿QÔÇõ«ƒñð+!¿ ´‘µ;××¥x%†D! „@ňC]í¾ûî9ÏÒ—HÂÊùII›zâ0W¸úÞp~V¨+72ç”Ãqÿ£Úfë œŸ4äÕqùå—ç<ÑÎÅ-Ôm®£¬,[ *§NkÀ‰'ž˜ó“–6õyË‘ÜQG•ó¤³]¶~òÃÍØ°H÷•‘¸ÇrÉ%—÷gÎõ‰’ƒ «ŸØµ©Û“¹Ûo¿=ç ÚãZŽgÉ¢E‹BèÆt[øî'h9?YÌ -IØÏqÚë­U’{!]†·¶ nÚ~–\“>‡²ü„6«iÚ'ïž¿XËùØ¿ ߟr;°ï¾û&MšTnº® üVá­ÊÀM—Ô?^I_p^aó ¯hÊy#ŽÏA¥„yåS6!;M²ö3·±ù[æBõ*>¯jèí¼è¢‹êµ™j—B@. uå'! „€hN=õÔàÝ@W …³ÂÏ Ä+»‚ç^ø’ú‡gÂÑG‚Ù!¬=ÌŠŽ}$:ÃÚ/< ͲcРAÁ2ÁŽÅ[Â#^}õÕÁËÀö—['ד ×T,LÒòkŸhîÊ+¯Ì<†Å!¸ÁbA‘%$# Ö&q?¿÷½ï9<ßü¯½N¶Xbì¿ÿþÁr$Ù}à83±Ìœ93xv`ydâ½ ®œOò9¿ ά“öâVP–l·ÝvmêLŸ‡¤cú˜¾ FG€äŒXóL{â²Ñ»Svû±$FêÖb¬ìžÕï…òô¨ß±QËÊG€¹žÁÌã9 Ö´¼k™S˜p.ž¹„#ÁÓ´Rh¾’µŸ}q{*QµÊ°öƒ#áG$B@! êõ>BjŸB ð‰¿’°LÄÈŒçt ÅN; LcŽ9&é –ègŸ}vB¾ H ʱ6rmº_”cסA›HœK$ØÓƘ„ )D†… õO4 ­îõ’÷"åcõoj‘ÕÇX5t xmôë×/©œy‡!J^ˆ.;†g, ï¬Äî\ ~x`<úè£yDM\‰Ýb!Y&$róÍ7'䉷}ôÏ(ð´É"!h÷€‚Ÿ k',§<’§¯õyU2q°úÙÆ!*âýú,š óú8âˆ#ï*BÖÕs’ÛJãoÞ”+J£›_žH|<ô­yÀhƒ ›;0zýõ×#‹¬žòžÅ#•°œ°¼™k¥…°¬?üpHî§2F3ýû÷wx»VR˜«áQ{çwÏ\<”!r¾õ­o31|úé§óaæoÌÝúöíë'Z,,˜½ñÆnúôé|Æh‰¹+sX3 joÿ(˰‡d‚\*Vw{ËÕyB@! ÊE@ÄG¹Èé:! „€(‰ /”ô¦p'ÜÕüã°Å‘…¹BÉ•VÔ§ gñÅ 9B4úˆ0PO>ùd °æ£ÌbÂâϼŠgÇ:[ç7¿ùÍ6€•}ÜqÇ/óbaÿüùóâoúj$Š]Ç’_¶ß¶vœíf›mæVZi¥xWÞç¯}íkɘäH}añjåóùî»ïn3N´Ç'Ê.‡±k¬8¼6ì°}Ú !ЈâsÎ9'(êð’B×*bV×(*W_}õVévÍû)Ò£æ«Â"Àä»ßýn¨>Æšk®Y´ŸûÜç܉'žè®¸â ·‘Ïÿ‘~ÿà‰FŽ8¼”³„ùëo~ó›L²$ëübû Tð&\Z ÕáiÁuY©Î|töìÙmˆæ“x"3?O øa òàƒ¶¹.}.ßßyç7zôè0·ç;FJ‰È ‰B@t">º yÕ+„€h!Î8ã ÇÖrÄVfia¹8°´#¡w±ü(kÆŽëî¸ãŽ’ž… Í" Ëþrê|ñÅ“PUÆ)«Ž8œ“ÇâÎȼ9‘UŽX?ãq9¥ŽÛ¹–×þ5Ê>vhkÖºH' DÕYg<¤ZÍëÃ<>æªz7¾Hêa«’ë /l.‰a†åN*Õ: ]/šÊÂ£Ãæ1Ì«ð€¥ÛGÞ3òÅá BÏÎóâ,Òƒ2©ç€pxOC0 ÌñðˆI úcïTˆ‘¹sçL˜sâ±bçÙ~Û2W|ì±ÇÚ\gÇãmšôà=þÔSO%Þñ¹ú,„€B –(ÇG-ÑV]B@@r뮟þô§î¦›nJò;t¦éßùÎw’¼ _|qo‡¹Ú}÷Ý‹ºÂ³°ëÙ³§›1cFé²ÿþû;’‰8° wE9m/·Nð3‡o|ã­äâæ…ÚGâp¬ ýõéÓ§`ù…ÊìÌ~<7 µ…ýW„¼bÑ-B < xñÊBÉ…×G«ˆy|È:¸:#.Ò£:¸ªÔúB€iæ™§)sÇr…¹ÞÄFpàIÀ<0­ì>|x(ÞÈ…r늯Ãcwï½÷m€aþ…à2~üøàÌw TN;í4>†ð¨x ÓÞ§l,XŽ1§óØ1%ì©‘_þò—Ý3Ï<æ¯/„9E¸¯eË–…ïYÿÈ«7tèÐÄÓÒƒ1°°¶Y×hŸB@Z! ÍD­V=B@:D€XÆ‹/Öb$ò&7‹¬¼r2,]º4$ÉîLó±Ž#ÔÖe¸Ú6€°N,àPrV wõÞ~ûí!Þ±µÄÜéü´K6h•rëŒÛEh¨-·Ü23¼ÖC=”„µÊj/1ÄX.†KÖuÕÚÇ¢/”tˆBõùSè¸ö !€åú /N+y}˜NÙ÷EgöŠôè zº¶‘èL˜MH¼)æ>¿ýíoÝú믟À‚÷Å­·Þæs„‹Âƒ¹3é1xð`w×]w%Å`T¼cȈ ðú ÌÍΛ0aBrF(„x%|"ž/Ì“!)˜w3W&‚wÞÔäàCø Úu×]Ý´iÓܘ1c œԄ¹)^Í”÷íoÛ±†@h#ëŠ,¯f»V[! „€µD@µD[u ! ºG„ab!C,cÜÛ±ÆbQDû2Š$ÈGÕÃF¼Ð^î¡,a‘‹²’E÷«¯¾šô?ë\íB 4­èõ!Ò÷E9gˆô(5]#\˜gZjÞ¼yÁh§wïÞy°0×ÃóÃ#ŸÎ y<ÈבöÏš5+ìfîˆq Â|dîä̃I Ï¿‘7vŒ¹„1´öÚk‡yµgKÞ“wÞ9-‘ü=À2^xáwôÑG‹ôˆÓg! „€¨;äñQwC¢ ! *ƒÞ‹-r¿ÿýïÃÞq&«¯B@&@H°Ýb‹-¼×Ù-á®HlN,þ2eî²Ë.EÃ\q±ƒMéεiÂe;ñ‹+I”['–tfaYÀ$“í£?„çÊ uEÈ/,íðÄ!”˜1>±@ˆà-B01B(>§RŸi³Yïù5×\ãŽ?þø6m"$÷JÚÅÖ“ζ¥Š„ζA× Z#Њ^F†Ëã£rw›HÊa©’ZÞÅ$g^CÈ) „ð.~úé§¡ÀÏÄBbÙ÷r¶Ì²æ=x‚ÞÁ(# ÂZq>ó4þ˜;Ò>Ú1¼OŒxÎnž,‡~xzwøNÈEæìYB_™Ó›@ÀuÔQòô0@´B@ºA@ÄGÝ …"„€(&ÄæÅª ¢ãñÇwo¾ùf‚€ÒÆoìúõëçÈ?Á_ß¾}k²P‰Ã]qõ\{Üá{õê•(Ûq»ÇòŒ>°È»êª«ÜÙgŸÄ`Å·Þz+äéL®‰rëÄ*ïG?ú‘;ýôÓCûvÚi§§¯½ö Ä –Ü„3 âQ‡pÚÈçÊÀƒ‚ãxÂXÈ+Hâýã!ƒ2 !õUS¨ƒ{ä£> aSFÈBüéO ¡¼8†°ð¦ý&( Ê•øZ#({ƒ 6¨¡RnÛt¨¼+Q‚5/ÏþùçŸ_«ª»¤#>”ã£2ð‹ô¨ Ž*¥±€$Xyå•Kv‚9¡¬8Ÿù†y8`\B(«Q£F•,£³'0w"¬h!ÑxL޶jذaIÈ«RíàÝ)‚P'Ià;++—_~¹Ãoa‰B@zA@ÄG½Œ„Ú!„€h'–—‚ÈÜͳ,ÿ×Yg ´Æ‹Ãˆ\ÚãÅS;«­Èi§žzª;餓‚ÕžrÊ)! a ®1¸Úc=‚GLgËÖõB@! *…@uµ%•j¥ÊB@´(X Aj0‘¼äݰ¼,Ä®»îºàÀ"…0ÇO>ùäp>áŸX„û„}÷Ý×A„T›ô@ñV\Ûðí·ß~y»í¶[AK3RÖV¬õž|òÉ‚ 1b‰Ånºn¨,„‹ Šu³x«DÔõÈ#¸;ï¼³G jÂU >¼Mž®£ß( U¨Ý7ÝtS°'³ ÷…µÝöud Á‘ÆÎ®‡d!±e!ïð£ÍÜ_&q[ ”ÙWëV'ÊNûL<ð@Þ½nq™V¶B ™h•\æíÁXÊã£sw´HÎá§«拇rHèyߎ9昒‚à¸ûî»ÃyÌCÌë‚ëô ÜÉ“'Ò’„œgu–c[i)d8bá\™bÌD¹›o¾9©¯XŒoèžÅW^ye˜K¦CY1Ï$W\)¡|:Ú0g3Ï1 6ðÀ-æõÁ¼Ñ¼& ¦M›æ0Ô‰÷3G‹™ƒ$søàÖõ¶Ûn íázæ…„lmO([«O[!ÐŒ°†Á€CDÂ+ \3޲úÔ(ÔU#Œ’Ú(„@S"€{º%G„à¨Ç¼õr;Å‘bÞ'‚xàxyûí·Ãi0é$æÝ@@à FA óP¼6X‡`De‚ïi§¾Bá… õáƒ`˜³›÷|a®Ì»%ïž{îé.\_¢ÏB éÀpƒµ=k¿‡zÈ-Z´(„wæÝp衇:ÈB‰µG@ÄGí1WB@´ ÍË…Uœ—K4Y»7ÎÃbÛ¬–ïºë®¼°V,2‰¹l ÁÉs‡¬jœ^ª¥B@ÔVÈõRŒÔ®ÖZ‡HF9µ»`0A¢mæb zÈ<¥¯¿þúàÝâ/…8ÿÆ&–ô›ëboVæñxV@0ƒ(À‹ÄæzœÏgžEˆ‰r…vAl¹å–!üyùð´5O<`ñ¡­3œ‡@€vá ùðóŸÿ}B8°_|1„{%Ì®D4#<«1â=…ÿ}÷ÝŒÚ,$õ™0yx{èY0D´µG@¡®j¹jB É`aÁ"…Å È™aÝo–Qq÷qigѲýöÛ¢ƒ¤Ý¸ˆÊí_«Ïõ‹9Yðú°É/cJòK“, -ô=(æª~{§– !PkˆÙ¾é¦›†wÈé§ŸpµnC5ëÃ’yÊ”)á½yÕUWU³ª¦+[¤GÓ ©:T!âW¥Š„Hxì±ÇBX*;²ÃBIÙ¾R[ÊÁÊïcn„sSÖ)…„Ð<³gÏN¼A,Ôa¼ÈyrôÑG'—2Ÿ/³jgîK®‘˜@JNÖ!Ð`@x’š÷ÞLü±¾×tt‰µ= ¡äkLHêjD#h0øÔ\!Ð¥Èã£KáWåB@4,¬žzê©@r@t`mÅäKXÒy9 ;zõêÕ)˰¸|}®ˆ§¼dÉ÷³Ÿý,XÿšxÌiùë_ÿš™Û#}ž¾ !ÐÚ4»×¿£ˆ<>:vŸ‹ôè^:»µà}Â3r饗æyvÄ(öé€pS§NuXfÇ‚§ÃĉÝòå˃wD| ¥Áƒ‡ü!?üp^‘tN²8Vì½mû!#=żà“N:)¯<êµúæÌ™“ì7¬¤Ë%,FVéPXX©ãɉ mêÙ³g8žõ^ŽÃeÙuk®¹fh»¬….¼ðB7aÂ;E[!Ð0@h¼ôÒK!lùsðêÀ°1žgî{¢4ðìBvl³Í6 Óƒ¤ÏB ÇG ‚š „@ã çå0oÜɱ‰…‰ÐÆo’ZÈ*Ü\•è/F©ù?cÅwË-·„pXl#Lˆ‰ÍÜ»wï¼Åkó£¡ !КÙëcÛm· q±IÞ{øá‡w¦–¹V¤GË µ:Z˜§C°¢È„˜€Øh£Bβ4á‘Uó9’3¿‡hˆ¯#ÔïhÊ®Dn2¼Ç H;QÀ²¦@ÁZHèßk¯½ÂV‘“ƒ|I±•9ÇIÖNûðJ؈ïŒtH–u×]Wk– }nzðÒæ™gÑ7ž俉…熰n„~#äDaè0N‘!P¿ˆø¨ß±QË„€èbX<ÿüóÁƒÃ<9Xô¤]Zi&±r›1/ /’´±b¢§\]|Sªz! ZˆÂè¡Ø"äùŸšA°L&™îܹsÝ{ìÑ ]ªjDzT^.„€MŒ€åç J‰Èñèà3f,x6õèÑ#„¬‚è€ðØl³ÍâSôY@@ÄG ’š(„@õèh^Ž­¶Ú*Äì$\±;›-/ÇÒ¥KÝÍ7ßì¦OŸ”kX³Ü}÷Ý!!bõGC5ò°„¦ƒ rtPx6ãÐå—¬+…@×#ÐŒ^X øÅ‹o¸®Gº~[ Ò£~ÇF-B@úC'òs® oˆŽ¬üxs’ƒü7J„€hlD|4öø©õB@”‰îî$Ä“ƒ?‘·z^ÜygΜâcõb¡™på'Þðgœ¡|eÞoº¬v >ÜÝqÇÁ3 ¥ÝwßÝ;Ö 6Laj7 ª©Š\}õÕîÈ#l¯bf“¸!¬ aX$ÙˆôÈÆE{…€B@–Ÿƒü;–Ÿã•W^±Ãa‹Qyv0`„è0`€Ûn»í´VÈCI_„@s â£9ÆQ½B åäå`ÄqÇ›9/JâÙq×]w…Ž%}Çbž|믿~›xÀvž¶B žxÿý÷ÝW\ᮿþz÷â‹/&ùwˆ=bÄwÈ!‡¸þýû+l[= šÚÒ!šÍëãpxh­±ÆîÃ?ì­t²HVmõU! Ú‹ÀÇœ—ŸãñÇÏÌÏÁzv‡v¹9,?á¬$B@47">š{|Õ;!ÐrÄy9~÷»ß…x(?³òr·‚„ã–€œxé­—›nº)„³zë­·±N‘ 7Ü0(‡>ø`G8/M[îjšsOcåuà 7¸[o½ÕAˆ˜l¾ùæn̘1á0u­ðÌ[ßµmšÉëƒg¯¬-¶Ø"äÕjŽªl/DzTO•&„€‰€åç bCœŸò#ËÏ'‡åç0ïÒø<}B ùñÑüc¬ ¦E€¼/½ôRSEh&ˆâu¦'>€%i³çå(5ÐúÓŸÜo~ó›` ¿dÉ’„ £eï½÷Š'¬n-Öz©òt\4 $+$üÕÔ©SÖåÆM¡°eÕÎ4ÍäõqÞyç¹ &¸Áƒ»{ï½7ÝÕ–ÿ.Ò£åo „€hYÈÏñç?ÿÙáÅÑAžŽ¬ü¬_ÉIInˆþÖ^{í–ÅMBàSD||Š…> !Pç´7/9)°è6/<:zõêå>ûÙÏÖy+ß<⥠‹Ú 8( _&„£GväDèÖ­›¬Þ+¿J¬C §M›ž …ªÃR“Ú@³x}Œ?ÞM™2Å7Î]uÕUíî+œ(Ò£FY}B@C€( ÌÏ!9øƒð(”Ÿcûí·ëYÈÖý«®ºª£­B A@ÄG…>!POX^ W…;ë›o¾™Äë·¶¢fã7výúõ !«Z!/‡õ½ÐO&Š(wIV–ʪgÏžnäÈ‘ŽPVà"­ˆ€Baµâ¨7WŸ›ÅëcèСnΜ9nÒ¤InâĉÍ5HèHN€§K…€B !°ü$"_¸pa :Þ{ï½¼¶¯¸âŠ!ßäŽ;î˜ Éœ‘¾!PEÀÑ!! jƒÀ¿þõ/·xñâÈŽRy9°ðÀ²ƒ¿VÉËQj4–.]ên¹å–@x¼þúëŸaÆ…PV$unEÏ—RØéxk# PX­=þÜûfðúØvÛmÝÓO?í®¹æwøá‡7òpT¬í"=*¥ B@:AÀòs°ÞÇH\|äL‡©&?Ç&›lÂV‘„ƒï! „@9ˆø(5]#„@ÙÄy9ðâ`âóüóÏ·™ðPy9ˆÕ ¹Ñ7‰ˆå¥ð)üï¾û®›5kVÈ]ž–»€p_äëÀ³cß}÷u«¯¾ú§é“P(¬‚Ðè@"Ð ^ÄàÆºsîܹn=ö¨C”kÛ$‘µÅ[µ ! „@u°ü=öX :ÈÏÁºŸpV±Ÿ£OŸ>I~ˆåçˆÒg! :ƒ€ˆÎ §k…€(‰y9°äàÅËËñ•¯|Ey9Ò@ùŽÕë]wÝÈŽ 8"¹M˜<Ž=Ú >ÜuëÖÍá.,B ö(Ví1W…hT¯Hý±cǺ-¶Ø"SîaóéѼcÛì=ãÞÅÊûÞ{ïuwÞy§{á…’.¯²Ê*BvÔ¨QÉ>}B q°üäåà9·üèb±üœ¬SwØaåçˆÒg! º]>j€¨?,/‡…«Â›£P^Ž^½z¹í¶Û.ÄéT^ŽòÇ’I$“ÊiÓ¦¹™3gº>ø eÕ³gO7räÈÊjã7‰T>̺RT…ª ¬*´ƒ4¢×Çäɓݙgžé”§ìrß.ңᇰ¥:áÿöÛo‡°üDX¸pa = ?b!?Çf›m–äç€èP~Ž!}B ñш£¦6 v €çI S…7ÅòrôéÓ'ÊËÑpË8¿Mýñ@IDAT%Ç}÷Ýç¦OŸ’Ë—/OJÙvÛmÝAä<ð@·þúë;BH„€h «yƲÞ{Òh^üþaMasÄGÔ;¼iŸHŠÀ¨B*ˆ/¿ür]Ññàƒ&ùå¨e(Ï*!¬öÚk/ׯ_?BU%*zBW“€Üòs,^¼8‰,`õ‘Ÿƒxsð‡`íµ×¶ÃÚ ! šM1Œê„p!æîSO=åðâ`‚S*/„«â<ŸùÌgc`n¼ñÆΊbXÜ ¸ 1"äíËp€W‘B NP(¬:˜&j!£Ž:ê¨s›ŠxkÖ« `yï½÷ÜܹsÝ{ìQ¯Í¬X»DzT JÔI¸IVl!¬–,Y’Wâ—¾ô%7pàÀà Ù±Î:ëä×! êòsð ÑA~Ž×^{-¯xkY~KD‰©üy0é‹Mˆ€ˆ&Tu©ùÀï8/V2ÉÀs€X»ªJy9 ™ênQlΘ1ÃÝpà aÊdYmµÕÜÞ{ïòv 4Èae#B 5P(¬Ö÷ZôºQ¼>>ùä“äwKÔÞ½{מ.«C¤G—A¯Š=üæXbò;ï¼ÓÍ›7ϱž0aͰ馛¢ƒ¹*Öß2Š2t´õ…!ªž|òÉ„è „Õßþö·¼FòLchG¸*Ëϱå–[®¼õE!ÐäˆøhòV÷/¼ðBðä0¢cÙ²eŽýiÁrrë­·vXqàÑ᡼i”ªóýÿøG°šƒìX°`A"`¥•Vr;í´“=z´>|¸ëÖ­›ÂTgTªhX «a‡®nÞ^„ÖAÑŠðÚÌy­DzÔí£ÒÔ ³Ää$&g‘NLΕ\ü)1ySßê\ƒ"`ù9{ì±@tŸܱ҃’nóÍ7ëNˆŽþýû+?G > !вˆøhÙ¡WÇëâq–‚É –„­zæ™g‚B Ý^¼¶Øb‹ªÊÂVuïÞÝ}ö³ŸMŸªïUB€ñ"¬Ø´iÓÜÌ™3Ý|„²êÙ³§9rdeÅBD"„€(…€Ba•BHÇÛƒ@#x}<ïÇ5ÖX#Ïò¼=ýk¤sDz4Òh5~[ñâÀÇ“fÕ„P7X€<Øí³Ï>JLnÀh+êËÏÁÁá«cÅþXVYe•$?ÇÎ;ï¬ü18ú,„€ˆñ¡B Ö°±¼XaAx¼ûî»yÖX´ 2c“M6 $ƒè€ô`Â#©=K—. 9; < ªl"ŠwͰaÃB(+¬lDBÕ~lT£h «YF²ëúQï^xHŽ;6Ìgžþù®ªŠ5‹ô¨"¸*: `‰Éñè 1ùC=”xsVà}ûöMBXñD"„@} `ù9 90¨#?ëËX,?z¼9 :ÈÏ!]@Œ’> ! ²ñ‘‹ö Š#Б¼_ùÊWÂd‚ƒ NŸ>}B22-T*>,í.BjÖ¬YnêÔ©!T€åSYy啃ÅêÁ•ͪ£Ý`éD! *Š€BaUΖ)¬Þ½>&OžìÎ<óÌ`}~ï½÷6ݸˆôhº!­›qoaŽWÏN¡ÄäC† q$&'®Dú@€üO<ñD’ŸãÇbù9aMžŒ!2%B@!Ð1D|t /-Ú…€åå°œ„­zñÅ æå€Ø ñ8Dë­·žB#µ éêžÄÂò¾ûî ¡¬°¢[¾|yR!säí8ðÀÝúë¯ïH 'B@T…ª6ÂÍU~={}Œ?ÞM™2Å7ÎÑÎf‘Í4š]ßKL>wîÜ@vJLÑAbr¬Á•˜¼ëÇM-<»q~ŽE‹eæçèÕ«W^~åÜÑý#„€¨ ">*ƒ£JiasôÚk¯9&1ÍË7ÇFm¤Huvÿ`…sã7†pV„#cÒŠyĈ!oÇV[m%«›:75G´ …ÕJ£]~_ëÙëcèСnΜ9nÒ¤Inâĉåw²Î®éQgÒ Í!„áp-WyÿÒ‰É!8HJN¾)It Õì¦BÀòs² ¯,ÂW"ÙÂ"[g Q…ÝN;íBWa)Ï,CG[! „@eñQY‚µo¿%&'œ*?üp2¥5ÄóGAŠW¹:”˜¼öc¤…@ŒÏìo¼ åðê@G•Ÿ½^Yl{÷î­H1ú,„€¨!">j¶ªªo:š—bÃ’o·ÝvnÝu×U^ŽúâÐ:\™¨N›6ÍÍœ9Ó}ðÁI(«ž={º‘#G†PV„ €‘! …ÂjÄQ«^›ëÍëƒ9—yPb-‹R¨‘E¤G#^mÛν‚e¸%&' N,_úÒ—‚‡±‘ ££ÏB kxçwÂ:‘&”äç€äÀ£ÏŽîÝ»Ûam…€B ‹ñÑÅ ê»\ȯ½öZwï½÷Ï<ÒB¨#BT‘‚Cy9Ò5Æw–·ÜrK <^ýõ$ÖêZk­å† BY1Qýìg?ÛR+…€íD@¡°Ú TŸVo^/¿ü²#(ÂÜkõÕWoXôEz4ìÐÕ¤áÐo¿ývXk@vÌŸ?ßáQn‚×øf›m–äêÀ:\‰É m…@}!À|Š<ÏõéÓ'ÉÏÁzR"„€õ‰€ˆúµªF\pÁ.Jbè¢ô¶¼xt`…H2Iã!@î•Y³f¹©S§†0e¢lå•WvÄF3fLXh6²Â¥ñFE-B +P(¬®D¿kë®'¯|Ð 8Э±ÆyJà®E¨ãµ‹ôè8f­pápÈÑA®ŽB‰É‡ “Ë:¼î õQ! „€è D|tꪳnÀòÿ¶Ûn ùH²©¼u34e7%îÇ„²"^òòåË“²ˆLÞŽ<Э¿þú+;‰B P(¬Öõzòú ·ÖرcƒGíóÏ?߃!Ò£!‡­jÆ‹ãþûïOÈŽ¬Ääƒ7ƒ Rbòª„ B@! „À§ˆøø }B xâ‰'‚ë1á¬Xl¢ÔC6ÜpC7bĈu«­¶Rb¹c5]ê  PXÕÁµK­¯É“'»3Ï<Ó¡&Üh£‰HF±Ê·¯Ž—^z)xtàÙAþ8î âþ"×ru``µÂ +Øam…€B@! j€€ˆ€¬*„€¨„l™1c†ÃrtÉ’%îÿþïÿBEäeÙ{c5)Vu–@µ:­P©B@æA@¡°šg,³z‚×Ç&›lâçÓO?ÝþùY§U}ßøñãÝ”)SÜGᮾúêª×WÉ DzTÍÆ*ë“O>q>ú¨»óÎ;a·lÙ²¼˜œPª{î¹§Sbòøàƒ$”UÏž=ÝÈ‘#C(«7ÞØA€H„€B r(Vå°¬‡’êÁ냰?O?ýtðöÀë£D¤G#ŒRçÛˆ÷0÷&^–˜Ü§Rú*«¬âvÙe—àÕÙ¡ÄäÇ\%! „€B Zˆø¨²*WN#°téRGάR!@¬S¿ýío²£ÿþýl§ëRB@!P…Â*Q#œÑÕ^„zï½÷ÜܹsÝ{ìQ÷‰ô¨û!êTÿþ÷¿ç%&ûí·“òÈËñ•¯|%ä£2dˆ8p “'èèƒB@! êõ=>jh9Þ}÷]7kÖ,7uêT÷ûßÿÞa™Š¬¼òÊ!nò˜1c‚•ÝꫯÞrبÃB@zA@¡°êe$ÊkGWz}'Áro-^¼ØõîÝ»¼NÔè*‘5º†ÕXbò»ï¾Ûñ÷ðûÿýßÿMZ@¸*“ãÑAθm¶ÙFáStôA! „€ƒ@Õˆ?þ8„£1¥e{ Yc5ܾð…ªKF„­YwÝukbÑý /¸>ú(Ô·Þzë¹B1ZQÌn‡X¯o¼ñFPȲ(ÚtÓM1‹¿õ­o9’Ûa!”,Ö_zé%·|ùò’õ¤¯5L™¬× “tªõÝúÆýöŸûÜç:]••ÉöË_þrˆe5&®HtžŸûî»/xv°åù0éÛ·oÈÛqàºõ×_ß­¸âŠvH[! „€¨ «¡Œ&t•×ÇË/¿æÌ4™¼]õlÈ Ò£Œ«N/a]¹pá°~#„ë¾Xð&¶ÄäƒVbò}®8„T{õÕW‹ê8X·¢àYè=‰úÊã| ÅXKH><é! ¿øÅ/õ`â\ˆÁŸýìgáš-·Ü2l{ôèr*îµ×^E¯/ÖB q@'É{äúë¯wóæÍs¬þë¿þËm°ÁŽ÷Ñ9J½‹ê©÷¼Cßyç÷æ›o†÷-áÔMèû é‡9QHÐi³‘8s"t°n¸¡[sÍ5©ùík«ÿ±¬ŠÜtÓM9o?ç[Ñ¡¿x çÉÜ®»î®[mµÕr~’Z•6Æ…Æuz衹×^{->>û!çIœ KöÉ»BçüÍÓ¦ Ÿ /·ýöÛ‡ë ÕÓæ¢ÿìˆ1½ùæ›sÿú׿ ZõýàÅ_¥¤}‹Ëô‰°sžIš[éö'ëC‡øÃþ;ùä“sžÐÈùÉzò\ùnØ¿hÑ¢œ'Ã:T¦NB@®CàücîÇ?þqÎ'üÍùE@ò^÷“èÜ‘Gæt~qÑu TÍ ^¡•ûêW¿ÆèôÓOOöWûs}Ö~qXíª:U¾W”çüâ=´Õbå¦OŸÞ©òtqmðJ™œW箹æšÜ~ûíî·x]Êûi‹-¶Èz꩹|0Çó µ@€uè³Ï>›ü>Æ÷e¡ÏžÐÈM˜0!Ç}ˇ~˜ó†£IY¬¡Ð7ÖUèV¨‡ë.ºè¢ÌS9oÁ‚I¹…Úåá=ÉûR"„@k €®]f¡÷ûÑ™zc‚¢ï£zBˇòÍsÌ1¡Oè¢M׉ÎÝk±¾¦ñ¾ì²ËÚ¼¯ë©¿q[ì]ÿµ¯}-wÝu×ŇšæsÕL§a‹ÊI2ì‘Íô”ð7SU%öÈj; Øž{îØLØÀR2gÎKè'Òy§‚‰Y¬gÕ“wrêKGÏO]^±¯÷Þ{oK@_È¿€Ug¥}+Tf5ÚßÙþ·ÒõćÇj¨OŸ>n‡vp~ÂôUW]5$)'™ä‹/¾è.¼ðBGòS,$B@!ÐxEº;óÌ3Ý’%KÜC=äŽ:ê(×­[7G ý«®ºÊí¼ó΋QOŽ8O’8æ}’®AË5¯H •ÿò—¿ 97jÑ’?ÿùÏ¡ò&Ô«ÈÓ£^G¦x»X£=ñÄnâĉΚËÅ#Ž8"xêã]Ä\“õ÷;žGÏ?ÿ¼ûéOê¼’£¨%gñZuTt ô]ßðN:ï¼óÜFm”Weñ»k‚Ur±¼IqÝè$,ì ]ÏëßóÏ?ß 4(Þù™h xPm¶ÙfÎ+3ÏÑN! š~7Gí~ýë_'â}†×dìáÁïñý÷ßï† ælÞ—\P‡Ðm¢?L ïÉŽêµÿò—¿¸N8Á‘¬Ätá…0h„>”jcÕˆtÅ—^zi¸ñqƒ*ô‡Âsë­·—n²É&A1ÊÂØ[ ¦‹«éw~ü™4{ëó¤^ÂîðÐ{&0,ÚY¸£ÐýÆ7¾‘œÃ‡Q£F¹ßýîwyûÊýB0ÜQq=ÂÕ”rË+÷:ˆ\Ûê]ÖYgç-¹ÜŽ;Ø5Jûëߎ´Å¦÷À q’™{ë:ç-³3`Àwùå—WIϦ‡xÊ6V©Cç ! „@ý À$’ãŠ+®ó#o-”1(Û—-[æÎ:ë,G¨ ”‹CÖO/š¿%‡vXPšáÆQB-„!‚;}=ŠHz•Âm‚T½õÖ[÷2dÚ׿þu÷£ýÈy¯âp‘·` ììÙ³Ý_ÿú× ¤=öØc]÷îÝ ª#B Fð›È½ë-¨C¨Œ-íoéÒ¥Žûv«­¶ ­AßðÞ{ï"¯PóX£C~ðL”#„ˆ&tÍ~ðƒärBF?óÌ3‰Îƒ:Ð{x/ÎäÞë! šæŠü¶>öØc¡“>»ñƃ!4é¼·™c IkBÎÖƒ>ؾ6ôý"Æ]„)´÷´myG¢ÓB@üð^÷^Î Ýçfi|ML©¿ÿýï‡1X À«¯¾ºÔ)=^Ìâ0M^ œ…¹L3‚L¶!9Î9çœ`IDŒ8r•<úè£Á Ò¢32pàÀŠ‘(iý6ÒVÐ>w¦Ìj\ áA.–´4JûÓín´ï‚<òHÈÛÁ8|ðÁ‰e/ÞP‡$*ç³£,z£a¡ö ! Z¬¬±ãeÉ´iÓœA¼ûÈïÄF#FŒp‡rˆëß¿¿~jtØ×ÇÑGæ®ßûÞ÷‚Õ^5«7Ë¿z$>DzTsä+S6JWò%’k‘¼pÌ5ÉC`Â= ùARr’““˜\"ê,¥Y³¦=9¬½€~ó›ßtãÇw¿öÖðáÑä÷Ù)m¶ûÛßÜÿ÷—eL†âò¸ãŽ eò,Q7ÏY,6 ÷˜2eJ0å7›ç’z1lèj£Õ¸­ú,„@å Ÿé×ÈoŒÇ$¹Š zbô¥è5)̶Ûn»‚z`Ú‰.œóÐcÓˆf¢q=Þ­¥pk¢Ñ/唋>P>Þ+wÜqGðêáÝ~yß}÷ $xºŸè‚ù]kt~è®™ûûüR¡î 6ØÀí²Ë.ɧû†T4I¼ÿ±­Šx&0çA I`Hão®v×ãÊLnžNVí63ÉŒÏó7Q›úâÄâ~pò®õ^)9ÿ ´i¯w•Îy—¦°¿P¹m*ò;<1óƒ•Ôñ›ßü&çT9¤û¼a¿gx…XÎ+-C"c¯èÌ92:ªB@4>ÌUΓá=Þ§˜~Ç¿ç<ñÞ Þ¢Í¹\ksOÓçÙÖ+÷Ãüj–x² Ñ©Ú5¶-– ›÷. ×í\Ûz ·ÿþûç¼ñD8'7G‡‹.—sÑ%¢-&¼ß½'{8Ÿ9µ'AòNGo†~ÕêNo¹æðÃïj»]º%^GŽî2}ß½!xÎç±Ë’m±íèÀÑ…s}Vÿ|>´œÔ’Y× óN“ïÎg½LÒö¸Í$€ÿÕ¯~æpèªãc|¶ñI':ù‹ùªH¬t>餓Âäµ½ÅÊn,0$.3 Lú{ºNn–BDIúZ#jâvpN¬oO_¼{u˜p­)Öcâ#]oÖwÈ“¸ÿé¶Ä¤ˆ•à ÄÍfßÙΚ5+üxå•WržYÌ;'ë:H…ˆ#v²È&]ir'ÝþB}KAÜ—¬ÏÅðºîºëJ¶ß°Ö¶4( |ÜÙðc–~YAÀy«Ñœ÷fÊ1!–! „€hÞc6çó»å¼õUýÖ{˯œ'”:(n$•E€…÷® xŸ~úé•-°@—l‚!úíøœBŸ1G·jâ=/ %é2ÒÄG3ÚÅz,=Néû€ß«¬ñL×Wê;¤ÉOÜáÆƒàžm!¤Òÿüç?!üHW§8- *&¸*^ w-Ä{F80g?{íµW†ŠPC¿ýíoÃyÔçÙDço¦ðÝ{¢730ÁÝÈ/|“0W`KRjbêz!¸Rq®¬Œ}Åɳ—I;HhO˜3b…âÊuÙe—%‰,q×Åͪ¡¸¸ûI\pïòJö¤ÚGŸ³Ä[ ”lÖuÚ—÷Ë)§œrsàÞ8cÆŒàvG¬î“O>9¸ÛزìÃmP"„€B =X(,æ4Þ’;$%&D&ó Â`‘0Ý{•†ÐL„e.#é<Ìá&L˜ òŠå‚sÖÎÖÄüÒæÃ̺ZÞªkG€çšPwÌí }æÏ!1¹­M¼òÕ‘†„î!¯‰É ± Í€¡‹…óà7Ž0Ý#ž!äO-$è9xfLÈ»aïvÛ—µ¥t#ˆWX%kö¬sµOÖD€DãÆK:~•y;a¯¼Ñ‚{úé§K†îóäköÙg‡røG¿È|Ì·!ï1½eœC„òÑ7™ ¿DÉû‹-ºH„÷a1 šŸP™Þ{!|'$Ö=÷Üô‰è¨‹½SÃÿùGˆ§bú`Rx£žäLߘߘ «ô~á+s`ô£„òD_Jh(o,Ž:Íbzðí·ß>\‡N”Paž ×zÇ.Ü„1²äò¼Û о—÷ý¼yó æ]Ic†Îý-)¸}ŸÕ×aõÒæüŒ%á´<úÃu–ÞÎõQœ'´Bh¬¸\ÚðàƒÚiÚÖ$Ç“ÕR1΄›3£XïÇ&œÇMôÌ3Ï„…2„‰%ºãF`€t=Ä5cÂM|2nRÈ„›(^PÇŸíœb[âÒ•Êcà=%ÜСC“óÈÇÙ1vìØðâ –'‰>‹Mð!ˆï†x&0$âåƒð`’,î‹ ntâÉŸ\pÁÎHjb<“?Åxr “³¸_ÜÄ–[¼È¹b7ø¶Ûn›CùýÝï~7Ä%¾[)B+4>ã_º¼´ˆGM6”$ÄɃèa\ÓBø+Ôþôùúþ)žÉ/cp¶ç„ç‰ä‘ܯƒ 9X>½JŸ„€B@”‡ó Hþ.¼ðÂWvêÔ©Î[…9,pˆÌoD<¿I’ò`qæ½mBìãjåú°ü´²«s|ˆô(ÿ^)÷JÖ (q-19ñžm½F™äóƒü`nÉ_l VnºNÔ3¼‡Xs£×H ë-2%(9Æ:¶_¿~!§FúÜø;†—<[ü~²æfý†£·*ŽOËûŒžÃr@®˜N > ]zÚDÞÍ´Ð>}D¶ŠðNƒ”Åȵ˜’²UðP?ž]Þä˜(¦¿DÍ{1äåBqÎ9ç„?à<ôãÇwÌéMÐ[Z t‰ééÌëÑ ï¹çž‰ý¥÷ú y”Ñ÷"Þ+#¼7i;²öÚk»ã?>ä“8óÌ3ƒ<:bôWF´0¯@ߊÞ!ÏÄýçúbBnfÖþ¦…\…¼xç"´—w0ý0رö“ý¨ ïTôiè;/¾øâ@¡øÏzo§ûÎûš~î¶ÛnAOGx7QïlÄH ò/£ 7¬m?Û3î òEyp ãÉ\͇ªJ®…l‚¨"7‡ ¿ayC¼Û~’ÃóqFh;9¢Ðë"gÝÇqtÕÞë$ìï쿚íi$‹U£½Â ‡Å_Z`°ÂÃÀdÊ”)Á‚ï|Îú!Çë‚–ä0&ÜhLFÚWì%`×tdËK€D:éryyð`Ô¸Y˜d"]ØÿØcV“62Ñ0Ò#nKÜ?X3n¨öàƒ£<ŒñK‹òùç¡BâcV˜ãÔ¦eÍU óQ,ƒ±ÆëÃÇd®x’h#>ÖXcL#•Z!*Ò£VH»`͈Ö“óÜÆB"rß(I”˜V~ËxüãÁ8jÔ¨`(Ú í „Ï.QdHÌ]LPØC@jø|È™ÉËQ¸OŸ>=ü¥‰žô—¼§ˆ({tX½>Ä‘CÉ|Ô¬þQ´›õ?e]ÆH»Ž„Ýè©Ð‹ÉÀ|2ŒÂy7éaסKÄh›ëŒ¸°cñoŒÇù+%蜙KÇ‚þ—È5´ÓB›ÍK%}̾ã.<ÝwÖJèÂÍ«…óù]Aç‹Ðûvüç_ŒµíÇ %ÆŒ¶éaç°¥-JDzá7„5švcïCohmç€x2Òƒkâãè“JHû™†NÖÆµYŠÇÅ,lßöJG”ÝܼÆÀC(dY(ðÐ¥½|RóÄ•‰2b‹¤ö¶³Øy0u…ú«Ûo¿=0¤ì§,ÃÃ΃LÈrÛâE”õ2²ëâ-7)îN¸ ñÐúdiᜠSˆ4Ñ—Qì32´¤zp_<òÈ#A©„;,«‘n¼`÷¹7yññ"’! „€¨% ËÇ0–UÌ/±VÂÒŠPXü1?ôÐCÃïjIû·jz}`-‡te˜+‘í¿Ê9“y#ŠVÂH`@ƒñ Æ4&,xyFñè€ì`PŽ1”•§­htx&0dý ÏR¼Ï¬ÙQ–zfÐ1`5 Q‘Á3Éoå~ûíW‘|F?‚n¢©QÈ$)¤?¦ SÆ$­_iA8ÔåE€wdeíôy óçϺHŒZî¿ÿ~ç·!BÐ B`ÜqÇî‹_übB, Ã$dm:2máy"ò Âs…þ’y>aÂ9­½”粟k!Ћš ÃµPø¼? é6-ŒïÍb‚Δ÷k\çÓŸx:5Œ9˜™Þ ÜÐ;£û†\ÆèÅ‹‡´ D¯‰ËÈj$M–@Ö¹`gåñŽGžtà´©Ã,¾–ß'úòï|')ÊȘdGê¿)Y-vZÜ~ÛWî¶&Ä®CXòëTG;æiPìZαðKœÇÃP+!ÿˆ-ðá•~@x±`-Ÿ%ÓX#“s Î;ÆMß…@3# Ëó§葘‡cDƒ~ ÁC‚999-LGÈ~"ÜðNjpy! dÇð‰¿Raçz†t(W0þ¥_±r?. Â,ÓÉâÁûѼ%xwºé¨£ŽJB^Å×·ç3¿¦«+u>õ£ 7i¯.|-3új¼m²„±7çôÊR±ÐN#^âýö¹Ôq;¯Ûš–S¢ ®eé&¡ö„U‚Y$t–=ØYä®@Ü åz@daWT¡‡0WLlb²ÊÙfFø0Ñ‚±E®•‡' #þHÊ#éøá` ˆ™Î“\„I-Š"t,ñìeÖ5­T­B@! Š#€RÕBaAÞó»Æpòœñ‡•Þ§ ̃$…8ì°ÃBüeæ©•ÎõaA]áñ!Ò£ð˜—s„5ÖžxuðǺÇb’°Äg.¹›;-¯mCG[!Ð~Ð!àQÀoׯ½4ë5,«ÛC|°¦#ÄV("Iþ‹åu©8öX.³~GÁ–Ö‡dµœ6ZYǵOÆG€÷Ʋ±´ã9‘eØŽñ6Þ#äqÀ@‰÷ ó¯Xoh0/ÀÓ¢rœ:™/†Ê¼6ìZHã¬úí8í@7Êû‰sÞg•Ô½Z]¶ÅÐý€Fßx²ébÄ¡ºÈã mÃ゜DXaÞ‡«ŠÏ­Õg~g ?pij-KÐ9C® œW©°TYuuv_MˆÎ6²3×ss3°Q<8±wD\.ûÓÖ çäg¢»Çb¹=ÊzÙñ€‡’›:~`_zé¥ð³O ñØì@dØRƒ{ÉgÚ#$âŠ]ò®¡½,|YÀðRÊ –u–|§œrJøƒüÁjäÜsÏ V`=¼øPN@¾Ø‹(«í«,Œ7±Ðñìàµ{ŒZ õPÎ ¡öLt+Û:•&„€B s`uFìÛþð‡!ü'Š"Â{ºK3þ «8ÆÕôú0c˜Z{|ˆô(>æí=Êbœù#ù:z衼0ÀÌQ²Zbræø! :z <¦ø=ë¨îEe¯^½B¾ QÆ¥¥Õºë®›ìfýN¢Z—Åý ¡ì V$B@4/äø!Š 90l@‡w¨'d Æâ–K=,zÅØ8ÒÏ ·GÈãlBˆL"Ìм”0ÿ·9'ï*ŒÙ­]ñµ®c°ßYA·‹^- ý'z8tÊ!ÇäéHÏ?ÿ|;­S[æóèÂMç—EfóOëÈñò Ú ÂïÅã?ž" Ìð&DÐbèR¯R»¸O]ˆ7“…7@Ùnáâ&/.kC ¡€p#£Í7¾>þÌDLô pÙiáÅ‘U7Š' LF²„PDÆZ²±›:}.¹B,±Ê2ë~;¯.¸mòPbUBbÂ,rÈÊàe¶çž{†:˜`™· /E?L´x±ãi×i[}p©ƒˆ{¬†f̘îtƘø‚<$&bŸHê‰jB@ê!€ÁŠ¢ë®».ÌßPíæ­ÎÙo¡°Xz‡ùI)Cêµ´>KÆëƒ|*Ì™±>«”t…LJHòGõÂ<懛o¾yˆK}â‰'†$È,xQlF‡ç‹u1­ g!Ò£|Ìu¥H#ñÑÃËôu|ç7µïqÖwèÈû‘%xùc‡` ‰÷±µ?çAà¸ãŽã£D&F}ª…éã7‚QQ©îšB} $,zMô—óKô—YïŽÆ H$³¤O@ÐÛR3KÈ)‚Òòé,Ìg º1ÎBR1—é¬ÊÁn”yBÛðLIö* £’J cfu€):ß´€¥åNIã;óv"úd ÇÐ+6‚´ñó…g‚‡!Hâ°Y³ø!¡°0÷lÎã&…9Ìnè=öØ#Lüí8 í,6’ä/„н@¸†Xx¶0Äã$¶¾°2mˆ›Ù¼&`>I^–ú qÁKr¶•}Fêdá¹x»ð ,LžbaòdJrÎãþÀˆKZ苵5}¬+¾ÇíïŠú«Y§…¨`ñ‰aǸ7¸—Gެõ ç épdR-B@!Ðlð»wÈ!‡.† “&M ^¬Ì…°^ç7‘Ù±Çbï6[ÿËéy}p-¹>XŒUBjíñ!ң㣆“Å?„aËÀ\ÑbþC€`(ƒ1÷‹^ž¯¬µNÇk×B@C%¡…)v^| ‹_~çØbñ\HPjþà?H£ÜÜe—]2“œ„>䬳Îj“Ì8)@„€hˆ@c!ÿñà@—9eÊ”‚ý{ñŃþ)}a“Ln ýeZÐ׎?>è ¹„Ž5Î5Á|¯#VìzÞIÌMPä£ÇÄø—ù¬‘-´=kš4¸÷Þ{­˜ŠmYg˜1xìA;ÒëxÔÐoŒã+%±e£óM ùW,'‰C_k:hÚÎÐæ€vØRØ<[XGáñ[¯ÒÄ sŒøàÃ+›+\8‹1k,ø`åL˜ìãÁÁÃöÜsÏ…—©ýèGÁ¢k'Ü—Hl^Hˆ³I8ØNnvB0œz꩎…9{œ*ã‚ .p[o½u8|ñÅ» &$×óÃxâåAyÉläÃ@p3ã"f/p!YV]XwÑ/ècíêÝôQ±XbF?¼\™[™çm¢š~w¥½>˜‚rµE¤GûfŽˆ€u Vå,^{æø(I±Ĩë’K. Ï Ê¬ÇY'Èh¦}ë,!P)X§ßxã.nƒ 6ëübbàÈyçœsN8 ÝÁ£>ô¿úÕ¯‚Âw–ÑXR£ˆ$‘¯DæG€÷óã“N:)tCtMI@‚ ËdÞ…®‰9t¿~ý¥8ºJö!ñgt…”‡±úB扣ŸE¯…®Šy;:LŒ˜ÐÁi‚þ–óÐç2a^O„tµéz0öFŸ‰ ;è ƒ‚>˜ëxŸ¾«Rá¥B%ÿù‡!‰*¬5zôèŽÐô¼´÷,úQˆžƒ>8¹,I·`z×ä@> ·äñÔ3wîÜ  Çð"†y^:çˆ.ÑÆšè0ûï¿ø 3Èw¼åÑ«#èñÆé Ý®µ·äÖ7¼*2sæÌܦ›nšó Èù›,ç­ÏÛ]ÜœO®õ7vÎÇ ׯezÅmÎ?\mÊ<âˆ#rþ¡×z¶/9¾lÙ²œ'/Â~ÚTì/«½þÆËyerÎOð‹^—›ÕFóæ<áЮ2¾ÿýïçü¢;éC±þûP9k¯d¹>®\οT’2)ß/rŠ^çÒœ÷I®ÉÂÒ»¢åüsÿB*ZyECÎ3„I™…úVè^H.ôâ>ÄcW¨ÌbíËm”Ïþ%žz ç 9ï“àï$å<•óŒ{Žó$B@! „@>~q•󋮜÷ÐÍù…]òê½BÃÜÏ[´çüb,ÿ¢ùvùå—<˜[ûZ§zí¸ ¶^yÖ©²J]ÌxùÄÚ¡>Æqúôé¥.i©ãàûí·çX7±ÖŠ×/|öÊÏܸqãrÞ€+Çó!B r°÷Š®ðÜyÅ^ΓŠE g=ìeÉsê­®sÞè0\óìãÕ‡cè8·x‚?çYI9>ŒLŽw|Z¼…u·¬KÎK¿âïèF¼‚3çÃÇ´« éºô]ÆBÀH·[ŸÉ»‚÷ºÊXТŒß%YŸ½án=¬ ï7O$”¼.«NtÊYó¬zÑEÛ»”ú½’?Ôé Ás>§²5's‹Ž=°•ë½æ‚Þš÷>ºXÛßž-ïWo¬œóÞwÉ»Ým¬#¶Fxcôœ'xBùqûùð‰æÛUoºíÁÌÚë˜Ñ Ó?~ß|þ`kb²}àŠ/u}RP>TÍã7(KÈMLµB™à= m$§«Hro$.³ÍEÿÙ³hÉÂãr¼8x=Љ<ÌLbV8&Ø+¼&`¶<¡S¨ú°È!µÃ¥4mQÏw åoÀVÁ¼.âB/½ôR牄ьe}Æb‘¼æù‘>‡pG¸|ÁÄŸÀ˜Î›7/ÄÎó7mú2G¹xÄ^+°„F+Æšr±þ¼ ýšÆ KnòÂÅóýFè§ÚX¿²„( Xrïá}çÉ7ÇÚ¹’¹„ê¶-ãٳĻmþÿ{8Ç¢W°K]óúà^íÖÌfÁËù\›¥‡à}î¹çËè¬<¥Vër"ct8ÖØqm…€h>¶ÜrË0¿B_YLÐÅáeAttбàÅAMô†YµxD §Œ½xg1‡áS(—íãý˜®“9^"üÞ¤/äŸüä'!:Š‹õ¶¥…€²}é-^²qèO £Ey»ùDÊÞµ^áÒàKf,Þæ}Œ.ÜÄÚÏ|{ìØ±ót€ ÑzðŠI÷c„ÞJciuà!Œ§ÌwÞ™§·µºi:ÜB‚~2ÝWÎeÌÙ_èx¡òŠí_’¤Ø ÍxŒ¸n¸4yV*L" fâªTŸŒŸ E’r&Ý»wO©—*ÇŽã*D M\Ž\\ ²n’ÓN;-„‚¨a1ÂÍ™–¸¸ 2™bc7`ú|ûNnܱèDUºÊΉ·Lº<H…¸|°ÅÍ ÷,ÂG ‹v@deõ-.·VŸ‹µ¿Vmèh=$Â]ŽE<9[Àáþ%äîlŒD! „€(æB?üpp¿Ç—{',Hüʤ¿ÙC¯(À™Û¡4/GHTÉâ üP~VCDz|Š*!q¿‹á‹RâmÇ‚¡O½wLÞB=>OŸ…@{€Ô`}Ì:”u-[þâ}Þò´`Q¬YŸÇëÉ‚'ë@Íà·q#¾;[ƇµV°c€° ¤B0ªŠ1îÕ«W : ;ˆ­ycŒŽ>B ³¤F\.ŠsÈST(›øCùù†E"„€B@J"Ð6¶Q%KWYA€6¬ÚÝwßÜÑ)fÐB‰U¤RwbÌÇ žHv;À€ã¢‡Õ$îl0ë! „€B :X(,Âaáñ0uêÔðçc‡¹ó3,ÜFB·4›×%Vpx}Öä{ßû^Y^X#(<+-3­ÞŠ5¡© :ðì0otÃ2ŽÐ ûî»oðL·cÚ H“œxi´×S#F1‹Ôày7’ƒ-VÀY ârôY! „€•B@ÄG¥¬b9,¤ï¸ãŽàVdÕ0al똯mc ðæ›oºÙ³g;ÂA°Å• !ôØ AƒBX ,%K¹ð5FoÕJ! „€…q‰‰KÿÃþ0/a=/»ì²ð»Mìúfr}œwÞyÁë%;¡¾:*„TEÀ°Ò‚—C«äô 4.q¯!:b£(ÃÅòÞ{ïÈrû)G‡!Óz[‘­7æê±B@!€ˆ|<â n’öHš↓ȲcþüùÎ[$"Œá¬XÈV*¾_s §^! „€è°lÞu×]Ã^„Ââ·œD½Í(x}r“„×(ÕË‘O<1x©Ž7®œË‹^Cئ#<2ä9ó¡Ù„ø×üþæ†ßøÆ7¯Žm¶ÙÆiÛÄ"5,¯y6ŠåÔˆ¡)å©A8*’kËS#FMŸ…€B@F@@9>`”ÈéAh,¼P„ã&,o¸"M$láP"ÜvÛmOÂ#Ý»wwûï¿HTNZ&Z*ÒdB@! „€¨!¿ûÝï!ÖX Ä‚ç/À–˜¼Ü„óq™ú\?TšÔ y)T–S#?%R£~Æ]-B@! *€<>*iÅKìÙ³§ãOÒø¼òÊ+næÌ™Á»cÙ²e‰Å X’ú3Æ 0À­¶ÚjßYõ@! „€B lðð0ÒƒÄäx³@vì´ÓNJL^6ª]{¡H®Å_µ ! „€­…€<>Zk¼ÕÛ.@àý÷ßq§ eµpáB÷Ïþ3´OŽwÜ1xv :Ôa…«¹D! „€B@0g¼ÿþûÝV[m¥Ää p;@jÄ¡¦,Qx¼¯#á§ÌSã«_ýjðø—§FÜj¢B@!PWˆø¨«áPcšb/ƒ™PVsæÌqï¾ûnÒ5ÂW‘³ƒÜ=zôÅ^‚Œ>! „€B@úC@¤Fý‰Z$„€B@R(ÔU)„t\tçž{Î͘1ÃÝrË-îÕW_uäò@Ö[o=7dÈ7vìXׯ_¿Ü³ÅêT! „€B@! ª€@Ljüå/I¼6*å©A8dž…WaU¤B@! 2ñ‘Šv Ž @bòÙ³g‡¼‹-rŸ|òI¸|•UVqƒ y;H@I‰B@! „€µA@¤FmpV-B@! „€¨GêªGEmª{–/_î,XÈŽùó绿ÿýï¡Í+­´’ëÛ·oc5|øðwÅW¬ûþ¨B@! „€B ‘È"5ÌKÏ7ÞxÃu&§†yjXŽ yj4ÒÝ¡¶ ! „€BÀ9y|è.íD€°UO<ñDÈÛqÛm·9<=þý»wïîößÿ¨œ$.—! „€B@!ÐqDjt3]!„€B@!€ˆ|<ôM´Aà•W^q·ß~»›6mš[¶l™#q9B誽öÚ+„²0`€[mµÕÚ\«B@! „€B@|Š@1R Œ‹ä©ñ)^ú$„€B@!P uUnºªÉxÿý÷Ý=÷ÜBY-\¸ÐýóŸÿ =Æ“cÇw žC‡uk¯½¶[a…š uO! „€B@”F€ð¯„™²?ˆ ?U.©±á†:ÂNÙ–Dá ?Uz,t†B@! Zy|´ú þ'àÉñðÇPVsæÌqï¾°Ìù@IDATûnrŒðU#FŒ¹;zôèáþë¿ôè$àèƒB@! „@Ó#€FLhð9&5øÞQO #3l+R£éo#uP! „€5C@ÚÛšA­Šêçž{Î͘1ÃÝrË-îÕW_uäò@Ö[o=7dÈ7vìXׯ_?÷ùϾ^» v ! „€B@²0RÈŒJ’æ­!R£ìáÑ…B@! „€e ⣠ÐtIã#@ìàÙ³g‡PV‹-rŸ|òIèÔ*«¬â òv <8äñhüÞªB@! „€­Š@%I 0\k­µòBOá­Áß×¾öµ°]ýõÝç>÷¹V…[ýB@! „€¨”ã£NBͨ>Ë—/w ,dÇüùó1ˆ‘•VZÉõíÛ7„±>|xX°­¸âŠÕojB@! „€@€!)9Öo„¯ÂÂðÙgŸ âqãÆ¹uÖYG¤G§ÑVB@! „@µ5j”{íµ× `xU0×1(À##K,”TúØÿÇÞy€IUdí¿¾5îšs^³""Š9`BQEÅ(b³˜F@0!*˜3`³«(D1+˜Åì§ë¾§ÿõ«Ýsÿ5wn÷ôôôÌtϼçyfnª[ὡëž÷„,Òã?þ¨åé‘&=h“\.úÆröìÙ5úC(, Ob™>}z Ò ÚCYÏ ÏŸbY}õÕãÍZëY$ÇðáÃC9¼yͤ։~DKš„É*ï3r%ÞWIë ,°€HJº ê‹B@! „@Å â£b.…:R*äñ˜)‚L™2%,ù7`À€d=½©‚§‹…”J·ä8ï¼óÂî?þ89Ü¥K—dBSÕåARã¿Ñ¶m[‡7D! „€B@êF@ÄGu_?õþ¿˺PýôSwÀÔÙã^½z¹8o'k£)‡Ç‡µAƒw ù6¾ûî;÷À8ú–%xª|öÙgµ]{íµa$Ç<óÌÖHÁD"„€B@! „€ˆñ£¡u! „€B@!ÐŒ\tÑE €$ˆÿõÄöSO=U”§GÿþýÙð·¿ýÍáE 96²„²&uå±r,¿ÿþ{G"uþâTq[ÇÛd—]vIˆŸ~ú)„òã,wÞyç°Ù»wïP–¥…Æ"Ù¸í·s<ðÀ°/߸¬œ–B@! „€B@´D|´žk­‘ ! „€B@T)éÜ…†WĨQ£’"äÚˆ=, ¦Nš·•8úСCmwË“N:)„Ðâü‘#G†ò!gžyføƒ¬È' ,°€#VLÎÌš5ËýöÛoŽñãLJe|¾íOïc\C! „€B@! „€ˆÝB@! „€B !°ÐB ÕÍØ±ckìëÔ©“ûóÏ?kì[f™ejlOŸ>½Æv¾ óÆàx÷îÝC±>øÀuÖYáïÆo û ýƒœ1ùá‡ÜsÌáðá¤ç&}ôQØgÛ<„Ï"!<ËúDV‡–B@! „€B@´<D|´¼kª ! „€B@´b~üñÇZ£‡€4ˆeƒ 6ˆ7Ý_þò—ž!íÛ·¯q:çÐ\|ݲ0/º#e(÷Å[Cæ<X†ZU…B@! „€B@! „€h] Ÿ-VWˆN½\sˆõsÎ9çÌí¼óÎÍÑ… ?G^n¸aÎ÷çí‡÷²ÎYYÊ£ëFçÝš¥^þÝ0Eõñdð ñ7;«#–OöÞ{o7`À7kÖ¬|EjìïÓ§»üò˃¥š ~óÒ¨«=;'k‰w‰˜²5ú>®ž-ŒFõ¹çžkP›¥²±XÂf6Çu<ãä¸/žÐ ¬sF1íB@! „€B@! „€B õÑ’›Ž¼nÞ˜>è T[öCõégÙÿo…óÌ3Oˆ,Ä&ýɧ—÷®k×®!eW]uÕ ¿öúl¶Zi–ý ƒrþùg^ Õ¾}ûp|•UV .òœWjüâ¼ •pàä“Ov“&M á·ìôQ£F9È”ÿJø±cdžäŽFŽœrÊ)á¦ëÙ³gÁdç–²„0ÙvÛmCX'ÂkÒ©¹…pS†Yxò¹óP7IÌ9O <VXa·üòˇI†Šr&gœqFHÒÈ6Ó\P‹ô°²,ñ‚ðùÜž{îé^|ñÅpw« 6Ø .–„húä“O‚7ɧŸ~Ü VÖYgÌ„2$Ë!iý4\âJÁèÝwß í’”ºÚø—C!L¨cúôén„ î›o¾ U‚%}Á»ÄìHZO?®ûø#ñ¤… £$€‡eãŸ~ú)_Ûm·]H–cõe-9·¾b¸€‰õ¡\÷ ×îùçŸOÆ ‰åó´„äåY÷K}û®òB@! „€B@! „€B@d#€žd>!™8F÷艾3{öì k=ñÄCâîôyè)_~ùe7sæL·Ì2Ë=+zPt©iA¿øë¯¿}4!îÑúœÍÎçÉ:NŒß)ƒ¾š?ô’ü¡§ßx« ³ÎÊ3.êD÷.WŸ~fÕoûÒ¤G»v푌0&/$Å¶ÏøÑã“0½!ã-Ô—F?æQ´x…n§v UHrîó@}. ³½Å87Nn'Ž&‰5‰Zü kýy×¢œWºg¶wöÙgç|h¤Zçl²É&9Ë,çoöpÌ’›û›4·ùæ›'å|ðÁœ'2ëNï<òÈ#s -´P8×&¹—^z)ç¼mÑoOäçoB+ž,ã„ëÖ~¼ôÄOèwÜ~|Üê÷Q¨“~û(³”M' ¯7Ç û¤ƒu¬xoœGÚ‹ënèýB?<û™w\SO Õ¸Fq_n»í¶œ1ÖÑ{B@! „€B@! „€B ÀO<ôrèN÷Úk¯ôáZÛ>ìU¢Çóaœr=ôP2^‘Ÿó ÿ¤L¬ßô û\—.]rßÿ}s¬è¯¹æšzR;ý5úR+C$7ûá§sè^ÓâIÜĉkÔezàRú‰Þ]%}‹ÛL'2÷i&rS§NMw§Æv}ÛG'lÉÒ½áîƒ>¨QèÓÑ«ÇØÕ*ÔŒ;ê•ÜÜ"‘RSAœC"NM¾ó¦HúïÊ´iÓܘ1cÜçŸ^ãPß¾}Ý…^X¿üý7Þx£ó7bCx,|ýõ×aÞôæª9ꨣB‚ÊÂÞÁòÅ‚— Ì¢yO¤m¶ÙfÎ?(Én˜?“öùÌõèÑýòÊ+V$äȰ¾Ò~·nÝœ ’XxÄ›a—]vIÂr±/8ý¬³Îrž4 L%dzÄúCX0Ö7Þx#)Æ1® ×îÈ7eâqÚ9Å.ñj±ór¿€Ë 'œxúÐ~zï¿ÿ¾ÃƒåŸÿüg±ÝS9! „€B@! „€B@! u}ôÑ¡f"Ú<õÔSI+èw‡ê9ädzSô Þ¤:ðÄEÈ;úïÊ{ï½çú÷ÓJgô‡DòDM(òÙgŸe†èÿꫯB{ZqÅ7È:͆ö“úð Áëħ×HdNŠ[n¹Å­¿þúË”RÚ_yå•Ýá‡êÆ\,iAçN¤!ÄÆ›.ÓœÛ%(øQ$³äbgýá‚dÉiâAfñqoUÜh ¼‡…óá09BÚbr7#䤓N ĈgÒœgÿÉ\²ÄB(q â`Ùe—Í*–¹‹Hø'„±ãî“%/Æ…0Säý˜1cF(ƃ♵$U×®]²÷+SÔ{Í‘ij|á<ï‰ܼpcbܸƒY˜+°¥o¼hÛ{Á$]š)òI©8ùèJ®sçΡÚo¿ý6èàÓºRô©.ˆ7lTÈ¿’‰b¦‘°š˜i ,ëf(ŸG¾ñûPDA)ý׿þ5Üd(«-:•Øb&ÜØF  ‡ø ?x¹žœv®ÃŽÕöڈ˦×->[z¼M»0b‹,²HØÍÍÙa}Á  ¬‡¤=¬æyç’©³×^;ì°CB~0&H&¼C¼ûÅÂÃ}ñÅ;*+`+H.b¾!¦àÇ£"Îå ¹RÀ ‚œ`K×[o½„ˆ‹8®³Õ—KÈ’eÝ'ìãA½çž{ *+ò_}xñ!q¿Ù&'ÌÉ'ŸœxóÀ„òB‘! „€­æ|Hd}À´4ÊJG€yù¸qãÜ#<Œ¡*½¿êŸB@! KvNx…\~ùåÃqô•ü‘ãøá‡NÈô¦èOÓ‚Áýa‡<)0 GG˜%èO!aÌ›Ý2úCt²è[ÑÝ¢ï$¿G¹ú‰Îwÿý÷zZksÖ¬Y=sš°ã,Km 1žGOŒÄ¤Ûñx!ŽÈ¥’ÎgB¹æ”’‰b:¯T×9x˜R>. ÀóÍ7_¼+ÜXF^ànÔ©S§D!o!–[n¹„°ýÜô¸!(ò³’ÜXÙú.ñ°Xc5j%ÙI÷…‡-ßMÉ~™ 80¸…/ºè¢Îç² †=x¾J„@¥!àã'»}öÙ'xñý‚·2Ü¥ÃWZßÕ! „€B@”Â^¡?Eé¾Új«ezt 7EŠ 7ÓX|^i‡áx1‡Bz×]w%§ÅaŸÐe3OCÊÕϤ¡Ô © HþžOÒ>ãÅxÁ»cìØ±I3ñxc\’°R\b‹<%ïC¿~ý2-ã!%`Û`ŠH kU×9„‚²0Z¸*eÔAwß}7 qÄ>Êûä0!T—O˜â¢ËHå#+¨ñ pòŽyß}÷uo½õVhâ/Š8OÆjø'¬Ù@NÂfÅB|9>r`ö,Ï0ɪŸñrïŠÛøàðÚk¯R`äÈ‘Ž?Ü»ˆ‘‡«9_ $¹3²úÃy¼òϪ»>÷ ç/±ÄáR‡ðZ¼Þ|óÍà%Ë’}†{V{Ú'„€B@T'ÌßÈYƇΠ/¼ÜÞùÝO ¯„-7}޶…@S!@ˆ‡ÝwßÝ=öØcáïþð|GÚ¶më:ûpo¼qXò-&B@! „@KDý:S„uô£‰Ä‚ÇJ<"ôèOcÁО9S]zM;ÇÂ?QÇÂ]1@Jt¦FU]—«ŸÖ>KBrÑéXb8Od çÓß1 mc‹`DJ ÄHu€¾8se¸Äý¬„õ’‰ç„/*C¬¾äÄ…»!„–‘Ü æfT̹(× ûTŠp‘í!ÁÓÄò}X]Ü`ÜÜY·[È»úc ±vévÈ[a9O¸ ctÙb·/»ì²à!sÿý÷'c‡(àÏØËC=4°‹ùÜÁ¶Þzë9DŠm»P¹úÜ/Ô7hРvLž…Õ1! „€Õ¿ù·<ûì³áˆ 4ÙRK-æ'¸´ó‡§,H!P‰`P†ás`ƒš{2Ïò/òÁ}à 7„,îí-¶Ø"3ñ "B@! „@5!€ñ»åìEŸ‹½©ég ÆÍ»îºk½‡Å¼Ê”bNŽÃ?¡ƒå»O £Å r‚¾r¼ý´¾Q/ÉÄi{"óÐr8sÌ1!slTÞPœÐ+Cj`˜<É>¤š°°^GxÜÄíZ›{Y2ñr=_bï¦TL"ÀÊÕç#¯›ôsƒp£äSاÇrï½÷Ï€ô~Û†í›b™B;¯ÐO,y³„œP_Üô±wFVÙRö- Äqá"$D7y,0Œ÷Ýw_øË #9ñyMµNû]ºtq(>b¼‚¬"_ ×–˜ÉFÅå´.„€B@T.4L:5üΣ fRžÎÕŤc#9:{ËxòI„@µ!ÀG4a®ø;î¸ãB÷ñh‚12äƒ>Ö%ü!„¸åcÙžÎÇËI"„€B@JF€JæÍAØ~<Ò‚ò¹}>ÏÎ%ôC…o Š ‰p£|[ EûDÎ,iH?7Ø`ƒxý/‚—ïwÜÂõ²Í7ØŒ?žÍL)¥}p%âõ“³šƒ>8xÐH+³ÑfÜY2ñÑŒ}MCT0yGWôÓO?e†ÉŠ™‡ÂþŠyóÊàøè£‚…ŸÕgåÒK”ç$¼4¥ÿ©§žòyÀÞ™À@R§%6·ý,ù± #_â2éuH[o½Õqs#„ÐJè§Ïƒ)… AÀÍ[׸í|0?öØcÃl%Xçž{nH Y€¥ä ¡¸*IÈCBÿL rºwï^ƒÄŠŽ{‰qI„€B@ÊE€ßtòv™¢wÚ´iITë5F(ÌIÌÚ}Ë-· Éù츖B %!°úê«;þøE°<ÄàǼžxF°Ð#<å°Á¸ /'#B°äË>¸%a¥±! „€Õƒ†àDßA鎠»#üg,(ó1h¾îºëâݶŽAýÚk¯ê·äâèW!ô¬Yö í'Æ/qä!¶Ñ“^ଳΠaµH±€Î<ÒRjûF–PŸ…»"²á cá°Òm6÷vÕúò“Wà¼6Päg 7åÁ°ãÜ$Lò-ŸHŸ>}¡³ê<Èb’•c‚‘ØjiáA…„¥Dx¸A³—(óÁmÊÈ’tY\Ù¹Ñ Y`-牕ƒ„Èò^Àõ ò‡‡”!ú–O IvÜqÇÐÆÝw߸gáqƒ2ntb W²  1ײQ£F64í‚ÅÇ!±ÿ$B@! „@å À<£„Ñ£G¥.E(g÷Øcà…Š§s ŒJÈ'ƤÅ.^ Ìï.½ôÒùUK“Æò¨mh½ù¼”›ÿJéGS›öÈm‡Åßå—_¼¡x0:ýôÓÝ6Ûl“„ˆàù¡ e—[n¹¦€pÆ„Ëâ»§ÐwBsŒKm ! „€­ Â{rÈ!aÐ$1GÉNžfô¦6¿G÷‰þ4kÞ±›o¾9è5wØa‡$UCQ$‚̶ÛnªÁëü=Ð’À¤±ûÉœ¯[·n!o2m¢+fngÆßåjŸï¯]vÙ% ‹ñ¢#F_‡õ²1WÒ²j‰˜è)S¦ÔŠÝüðÃ': :‰XÖZk­d7L–ƒY …¸Q˜q›fì^R‰_ÁšŠlƒXð!TƒALé|‚õ)æÉ­ÁM•òk@\àÕ|ܱ/„u’’ÇBYØ?#Dxðüˆ…XyFÊPŽsø3fL&ÁÄX¬¯q=•´ež9`…‹[,\›Ç<“´ŠËi]! „€h\ð\%a³)c‰)»æšk†Ür(c™Ì3_cþAιK.¹$Ì1^ é³)v+}nÒ!zÎ>ûì@ö¿¬œB¨$0·$õ­{èСáƒôé§Ÿ®×©¨6—ýô<­^ý·0†9agžyf)§·¸s0üÚ~ûíb¹=ßO\/¦óíà½n$#$|L÷èÑ#Œ<—iC«”$„€B@4èóålf¾~µoß¾Ô S„ª7/¶™ßؽ)úÓ´ %ìs AÌ(:]®¾Ûþ‰ó˜? 6,Œ‚ k¤±û .$:7aއžÛtÜåh¿M›6n¿ýösOèÆùVCb¬ýJZVm¨+È4Ö|ß—n”ý|ãŒPTË&ñýû÷„!0a¸JÁ^·l5Ö¡¨ ø`zå•W’0ÜÀ±Š¢Ž,‰ä¼Ë)>† ’„È"œ‘Yç³ïâ‹/!¸xȹ™x@<+è+úÜÈ97 øôÍOüôsܸqÁ…ýí·ß7©‘!àgžö0P,éôéÓƒûÉjLq€Ç Ë9çœ>L±$™"˜Ï˜1ƒSÇ.dJ¥ Ö¡ö2å^Ácˆk YD(1Æ{q/‘æÒBvU®êB@†"À Õçž{.ä'`naV·åç ?IšIØÌ†ù`kæ„3"<'’ƪ!x  F#[Š`(Ô¯„«ðÅ<”œ={ö¬Ï©µÊ‚ s9<€˜3/6¼k­ÊZà –'„P¶–#ã*®÷yðøCÀï !§úè ?e>‹ñ3Dˆ…|B·‰îÔˆÎoˆP_\†;üáA‹î4–Æî'ßJÌÉ®ºêªw„¶Iö~Ê)§}t9ÚG׋œ12×7!“é–m_E-½Â»hñJøÜN;íD\¤œ·ÊùÔ¢Ïõ æœÿH çú#ç?jù~óÖ]a¿A–ó±gkÕé?îrÈPÆ[å×8¾×^{åü͎ѯBés©è¡‡Êyk¦‚çÅuú‰~Γ5úàã›åØ—Ë·~ÒI'åüG]r¾'2q¡€ÿ@Ë­¸âŠuÖëÝÖsÔcBý>”UÁó< ó4vJXÚõ±¾[póÞ1ëãœ8 ç󥄺âëͱ,ìk4žÚÈw_äÛŸžu¿xëÑœÿø®s 6v–6þbÚŒÛ׺B@!o•ó®Ñ9ÿa’óÖI9o5Të÷ÙO¬Ã1o\‘óa5s>‡Y¹NþÚ[îÿ‘óáJsžì xytî‚ .Èù² Út†º}.¼œÏiWR½>”l¨Ã‡«÷ùÞ{%œË¼º¡ÂÜøøãõ1¯óž$á>jh½­é|¾qîºë®äYõù  k%?ñõ×_æù°¢‡$§zË,á;ƒÈ;Ìaâ5ömQ(Ü–•A‡•î Ö Ýõzë­—Õ Wj?ÁÁ"ÑrœäôÕçŸ~rؼ>ØQjûIe~%=^o¬ïöÝw߸HÅ­ÿ¬KÅõª„áÊŽ{6î6(ʹ Ü v“S%upS:RÉ=7ñ†!2꣼§®Ï>û,äúà!ŠC-Å}~>ôI¬ aA.ì´Ò‹PL|\x+<·Â +ò¨®ñ1o%>8 ­P0¦|Bˆ­ð@Åc¦m¦C —4úÁÃIR-‚«x2V3pÉ70c¬Œ)~)VËøÔO! „€Í…sò¶ŠP9äy€ÄHO7 KŠ1‚…ËéСCßâæê¥µ v„èDŒ0·E™OXÖrŠ·s\ yøðá%UÏTÐ-wïÞ=8$º&Í}¬ÅÍ dCÚïܹsÄGCê×¹B@! „€h °îÇ2߈,õ1þˆÅ'F$Ft0ï! ^l\—×ú@9uÊzÅ=I ùx+§ðƒBšk·Új«Ev!/èBmOœ81xÏÒGòu”"(ÐéF)2x•C¨«[·n!/FIxr—›@*G?«¹ ‡È§Âû€\!!äzI ä†^ä€üÄ[Û¢¤Ëj[! „€B 2Àˆ’‘#G£©›nº)1zªŒÖîEí8HµËhO#!ÀÇîßXÄ!:uJBz5R“ªV! „€%#àã÷9Êi›¯½öšCq U„éIJ۬¼qÏ®ËK5®£5¯óA+ÿ„  ¸”6, áÅ = uU*éAß|ÜßÐÅRÂ\ÙØP„ã¦÷ž'±»¾•)e Ù†"ž¤éXªV ï$B4A„HŽd¦Ï þ •ðôÂóœwÞ_"\W¾}&Mšþh•{#{_’Œû^"„€B@!PüñÇaî éBÌ<½+£‡Ù½ÇG6.¾7ðÝvÛ-äè°Æ|BwÊ)§„ðQ¶OK! „€B@4(-ßyç ,6Å%Vóé°ULz±Ø¶°U>‰tI!ŽšcŒ•Ô&¸ò!AÞÃEäE!^17† ˆÞj«­yEþŸp¾AÍ0%çáª|Rú’ëºå–[\Ÿ>}B¨Yˆ ŸÈ½äºÒ'BÔAzÓ!'ÞwÜ!ƒ4P´M85ò­ðNáPYffMB ø$žὂ·^c"O !-…€B@”†ó ¼‰1ž1cFøc®ÕƧ ‡WcÍ9Kë­Îª0Za” FJä‰Î—GÙÊUÂR•p|ˆ=G,cJ„€B@!ÐÔX~‹×…öwß}W‹è ŒÑ&›l’Xg“-ΕÕÔýn í½õÖ[!4 J^ŒCJ4– €&!À$K?ꨣÜT9<>èÄÉ1ÇãˆÏ|óÍ7‡­wî¿àÝA’LîÛc=Ö‘8ž¶ñãLJþrµ£z² ¤U—.]Â%~ÿý÷@~Xx¬)S¦„û„ÐV‹.º¨{ýõ×Ë’Kƒœ Xñ_~ùå &RÎ=÷\G.B'½ùæ›9IöÞ{ïàq€býþûï¤^£4¦J‹B€PÀxšøþûï×:£1¼Ë Cx7áu&+ÕZ0i‡B@´`ðÆkòÃ? „ó%È ȱEë,Á €ßÑ•W^Ù­±ÆÁ˜#òoI„@S§†p¥@xTCˆ+‡ˆCBK! „€B@´`>ûì³$?^ùòs`ŒaDŠìÅ_\DG#ÜX¶÷íÛ7|DP}ÇŽƒu;¹[ótðÁ‡fî¾ûn×£G²4I˜¬ ï¹çžç$!9úŠ+®è ‡ðÊÀK 1 6’žã­2Ï<ó„XX„Íàn¿ýöP†X£Gnôcy;¤E#€¢ˆ÷ï=þ^|ñÅN8®€°x¯™GD"Ê£¤u! „€hl,<¡¨ÒG]á©OÈYH #6X2ÄøD"„@mD|ÔÆD{„€B@!PÑŸƒPIX<³ž•Ÿå6qXQv£ðS~Žæ¹¬ß~û­;î¸ãܘ1cB^xáÛ£_¿~MÚ¡SN9Å 2$]åðʰp/B¨‘<E4áÊ!Ûm·›ýôӼᩘGžÊBRÅ^Ë/¿|“x—2^#*•zeÔ/! „€B@ü>PTCrð7mÚ´ZLX.cÁŒòÙ<:øpÂÒYÒ|àApÄG$! vß}÷ À_z饛´S(IN×Ç¥—^’¨—³·Þz«#7dÉ©Ë%ãÇw»ì²‹Ã3¯’EY¤\Uç­gìØ±! žTä¡íÚµË[^*Ë»Óò„¼þúëyó„)²ÜrËUöàÔ;! „€hV 8'k¹7ŒÜxÿý÷“¹_V™·ã)xoàݪðTYˆiŸ( ¥á¦³„€B@!Ð(`­çç Ž}¾ün¸a’ˆëôr…-j”µ²JQÒã¥0a„0rÂŒ >¼ÁI¿K‘|bÜG„׃¢Ü„Ø…^¼%ðÐxì±ÇJéfæ95x*‘|œ6N8á„ÌråÞ‰—Àn»í”„–€À"׈¤e `yB B DÈÂs ^KÜ{!üá=±Wîg'nSëB@!P™£íÃ?LóâÀØ#íum#à÷‚9Ä*«¬’k­µVø}Qx*CJK!ÐxˆøhÄÞ¬ãÁÁœ‹ã! š̓»ZB@! Z)–Ÿ’ƒ?ñ¦-ÅP°áꎅ±…­R~ŽÊ¿aø8îÛ·¯Ã[YuÕUÝ5×\ã:w㠺!#»ï¾ÛõèÑ£QºA8*BByæ™îŒ3Î(k<3ĵÆÚÏ‹ž={–µþB•ýøã¡½G}4ƒà¹âŠ+¤Ä(Z 8†ò‹0%æB¨8¶!6cÁËo; 1Ø©S§f#8ã~i]! ò#@x*ÂÈZx*#9 <¾ú꫼'bx‘'g}íµ×Vxª¼¨é€h^D|4/þj]! „€háða…"܈,îÓcóÌ3O°Þl³Í’°*ÊÏQ=7Öâ]t‘;ûì³Cbo>Œ9昰=ï¼ó6Û@ðXèСCásØa‡…P[Õ,ß¹·o¸áwà–½™Aƒ¯™M6Ù$!–ÊÞHž y^9äÄ“e‡vpwÜq‡[pÁóœ¡Ý- Ù³g‡÷¸å !×Ï~,sÍ5WðÆ3¯H‘Æð°ŠÛÔºB@d#€ÁÄ|PË{ƒ„ãi££¸Hm ŽŒà0ï Âþío‹‹j] G@ÄG…_ uO! „€¨°Æê߈¦̚5«–•ðB -äHœ Ñ¥0Ê1}HUÏuŽ{JH¼<Þxã°»cÇŽAAáМ‚²åëóÏ?ò¼òÊ+š†¤ãxfLš4Ém»í¶eú{ï½¼ P@ƒ9ùmšZ®¼òJwì±ÇâëN<\Ú´iÓÔÝP{‚yB¸Í+dêÔ©™yBVZi%·å–[†w=^|xóáÕ'B@†#ÀÜûÛo¿uÌÁ-4Þ…ÂSñ&‰x:<Ûü¶+¾Ò‚Å/–êëø¦ÊS˃V„ƒaøè&A%!žðL¨„åSN9Å 2Äaù±þúë—gàµüþûï¯%Å!¾CöØcwÏ=÷¸^½z…œ%ÑF]uNœ8Ñí½÷Þ!ËK,áî¿ÿþðl×užŽ·|,Oˆ!/¼ðBÞ„÷êÝ»w£ŒY•V/¢„Xá¾åO@<—²ò„àhdˆò„Tï5WÏ…€h8?ÿüsÞðTé9wÜÚüóÏÂSYX*[ž ㉭­óºkÔB@! „@`Y†µÑÁ2_~ [Ù%n%äph רƈr}À€n„ ¡;Ë,³Œ>|x >*¡qPºtÐAa×Ýwßízôèn´õSO=5x_ƒã®»îj´v¨˜çeÈ7ß|ã \ú÷ïߨíÕU9VüxŸ\xá…¡èÆoò~,¹ä’uªãB ä ™6mZB„'äóÏ?¯Q¯B#B,OˆåÙ©QXB@&@ÀÂS±aKÂûÕžŠ0¡–Š% OÕMMV‚€ˆVr¡5L! „€­òs D2¢#_~\çè@±¤ü­óÎA¡=räHwâ‰'†DÖ(!†êZh¡Š…œ„\#ÔD Þ(M%}úôq·ÜrKÈ%BN‘Æ–sÎ9Ç~úéëOÂ^U‚Œ;ÖbXb@IDAT|ðÁî·ß~s+®¸¢?~|’÷¤ú§>T'x"~øá‡îé§ŸáÉòî»ïfæ Ùpà “„éx"Vâ{ª:¯‚z-„ð>ÂKƒwæÉ‡4dz„ù^FjÉAx*~/eL”…šö !P.D|” IÕ#„€B@T¸Ö“Ÿƒ8ê„yã7jÅ ÆBv½õÖ«‘ŸƒA !RQ—²É;Ã}ß¾}C2b_uÕUÝ5×\ã:wîÜä})¦AbaCÒq¿c%‰'Ó|óÍWÌ©e)C"u³—]v™;úè£ËRg¡J°€oÓ¦Ã:žDó]ºt)T¼ÉŽ¡”Þm·Ý‚bˆï„ÀêÚµk“µ¯†Z>–'Ä~× òñÉÊÒ¾}ûyB–_~ù–F(„@ƒ <D†‘Fr@xÔžêïÿ{ ï ˜—( ! „€håŸååç@Áš¶FCÊG 9xt`})‹ÖV~óÔ1|¬¥Ó(PâŸqÆnРA¯¨Fé¶îºëº™3gº­·ÞÚMš4)X×1ä²þôÓOC²q*ýꫯ\S&õÞvÛmÝã?Þä9MŠ" OÈ3d‡vpwÜq‡[pÁ‹9]e„@Ùà½Fžó†ÄP%(a³bÁó€Ü F„à©ûìãÆî{,¼—[n¹òU^dM(Qyñ¤"øàƒn×]w áê `Yd‘"{ÝtÅPn. "díµ×IÏ!d%B ¹€ðøæ›o"„ßÙ×^{­VžžiË‚!Þ“ÊRóªC|d‘×]wëÝ»wÍÊ´%ê@€gc ÈŒ˜Ü`ðTx^f @äý"Uì½Á:J O•…šö !ÐRñÑR®¤Æ!„€B JÀõÍ7ß ù9,F9ÄGÚuá…v–Ÿ’Cù9ªô‚W@· ‹vÜqǹ1cÆ„Þpo]tÑE®_¿~лâº0zôhwÐA…ÂM™[#Ý»Ûn»ÍõêÕ+(TH|Ú”™@ÞÞäf9ᄚ²ù¢Û"ÉÞ{ïíP’.±Äî¾ûîsäXJAe*áþÌ+¯J Éd}DyºÒJ+oÊ®]»º½öÚ˵Úe]ÄGšôÀ«æ–[nq»ï¾{«ÅL¯æÅ³gÏžY„¤2’O­ºÂSñƒ·†…¨²ðTx"5¥aBÝ£T ! „@Ó â£ipV+B@! „@„ K,ëQæËϱ + S [µÎ:ëT|è¡hˆZ­Pn¿ývwÄG$¡P@1Â-½ôÒÚãÚÝ"v‡¡® ú_»TÓì0:ñÄa§µÕÔrÕUW¹#<2„Û"œO¡ÄÂMÝ·¸=Báô¥±ýIÌ.‹ï!­W„Í™6mšÃ?~§ã¤-·Ü2$BÏÃ8ä‡~á<±ØÏ—ŸO<ˆ-”ÞóÎ;oÞrqÝZo¸ÖüžCnØ$xeå~çð4rü8ž*bÚ/„@kF`ÎÖà°‚&¤duÊÏÑ<×§%¶úÉ'Ÿ’`„ axË,³Œ>|xÕYÞBâ ÒcµÕVs_|q³^.ùHV\û¦èXŸ>}ÜÉ'Ÿì¸¾÷ÜsOH*ÞíÖ· ˆÛ_|ÑuïÞ=XÖs Qxzê©õ­Jå…@£#€buýõ×GuTH€ÌýŠGù¶N:5z?ªµ,Òcüøñ®sçÎy‡Ä»| ¹˜æB„#yúâ‹/®ÄÈlŠ’‹$-_~ù¥Ûm·ÝÂ;OWXIÓ!`á©ðˆŒ½7 8>øàƒ:ÃSñ;oĆ„§‚Ä’! „@݈ø¨#•B@! ÊŒäÆÀáAÜpr(?G™AVu”#GŽ ^ X΢@"DÔСC«2qïé§ŸsÍ5WÈïqsJs„)#‰ø¥—^ê.¿üòŠ%>¸FK-µ”{òÉ'Ýàð<:í´Óù‹[&%VsÞÅj».0N ÷Ü¿’ÚðÛa)M²h 6ÿüó»G}4x°Ö>ë?{þøã7vìXwà&E¨oÁ õð;¹ þ(Ë!?Ò¹¨~þùgG[±üúë¯ô`a¶vÜqÇø°Öˈ€…§Š=7X'<׎ãY³µä’KÖOeDžÏ—! „@éˆø(;)„€B@”ˆÊZbòK„@c"€Eeß¾}C˜Ú!±ç5×\ã:°ºmÌþ4´nÂÍØssÁkì†ÖÙÐó››ø ÿ—]vY „ðª ÿO¥ Ç­·ÞêÚx6®%9RfΜ¡ü’!P Ø&Á4^hFz~ ¯. <ò ¤aÄŒôàœ3Ï<3ä,Bé׊pê„TÁÚïÊABÝxã!1ý½÷ÞÚ¶vq±Š ‹p„• Ðú\ Kp5kV’wü8OEþ°|2÷ÜsBÌH óÞÀ£c±ÅËwšö ! „@PލӅ€B@! * ¬gQ*ŸsÎ9A!„²çØcuguVÕZÖ£ðZwÝuÝL¯$' ù4*ÁO­ï¿ÿÞ¾n»í¶k¶¡GʼnÖÇ×lý¨OÃXx|ðÁî·ß~ 1Bá´k×®>U¨¬͈@œã#_7CÅ;Ž,!äçž{îé~øá@P\yå•°Ëòþ'œ ä^ x}ðî}óÍ7]ûöíCݼ;^ýõä4’c“GhòäÉnÙe— K”î’º°ðTxk±ažņ§2bÖxèȳ¯nìUB!PnD|”QÕ'„€B@!ÐlL™2%(ÌÒµcÇŽîúë¯ÉÀ›­Seh˜œ(ôQv¡ÜZn¹åÊPkêÀòÕ꿚撧Ÿ~ÚmµÕVŽ`ä"¨|ŠÁ/bðýõ×n!°êJ~\L½*#„@ã#P ññ¾Ç{ﮬá½±È"‹ò‚ÐFx¤%Îÿ÷†‘#!„ûC F B,ÜïÁ¶mÛ†c„Þb;ù µÂž ïP#6X‡ðøôÓOë O‘dĆyr‹¥ŒZáåÔ…€™(ÔU&,Ú)„€B@!PM`5;xð`wÅWeÊ¡3Î8à 4ÈÍ1ÇÕ4”Z}%”‰y1\{íµ£Ô'¬‹ÉÒK/m«Í²ÜrË-ÝÚk¯$­?ÿüó›¥õmtÓM7 1øI8ûìпxà=‡¹‚ÁóC¤‡ sˆ¥‹/¾8$Š'<Õwß}W oÛAx*©a$$¿ÂSJZ ! *y|TöõQï„€B@! ê@€PGqDˆ¹MQBAA¤“¿ÖQMEÆJ·C‡!¶û€܈#*¦Ÿ(ÙðN 7ÅW_}Õìýºé¦›ÜþûïR$“…üªAùÙ³gÏ™>80xÕNÚU þê§(´Ç‡…¡"ùxžŠº yE.’Œ›@bài°ÖZkÙ®:—„r<òÈ#ç“g å<ž%m´‘{öÙg]æ ï·^xÁá‰ÐÚ…ðü†žx≠Bä[}õÕï ¶ž*I+B@ªE@U{éÔq! „€B@´n°Ô$q,¡¬ÈëAÈ‹.ºÈõëׯECx“}÷Ý7(ÐH€Š•j%I%$6ñ€8 — VÓ7ß|³ëß¿|¸¢×QŠNœ8Ñzè¡îºë® ^xÔÜqÇ!¦Ew^B „ª#t¤ BÈEÂW!!(Ô³BY…þž묳Nâbûm ÑÉ[lv¡´'LïÈSß_ý5x„`€@ˆˆôP‚ïæ \óä€Rxªÿ`¤ÿB@–†À_ZÚ€4! „€B@–À=÷ÜãÖ[o=7jÔ¨ Ä T±¹[ éÁ$L Š4òVê «ÔJ’J#>°„Æ !äYµ Þx*ÑwÖyäG(,ÚK„€¨|ÈÓËRK-åFvAZà‰A~Ž,AñÎóþÚk¯…|xû¥ÿx{‚ß>Þ{C† ›ÿþ÷¿ÝSO=Îc„ÈÑGmE[ý¢ƒ ¼D·ß~û@L‰ôhõ·†B # â£_\ M! „€- ”>Xöïµ×^!ÄŠ¥±cÇ:ˆæÎ3QN¬!<g‚\pÁnýõ×/gõe©«ÒˆÕ·oß@cÿÑG-Ë8›ºÈ›x X“¬xà 7 XS÷Cí !Ð0 ­IlŽ1qÚi§…ß.¶QÄÛ§OŸÂWq,Ž=ÿüóÁ»ƒ$æß|óMr˜<´àõgàå—_¶ñj8ðÀúþ ! „€hˆøhW]cB@” båâVZ±ï¾ûnHºX¦.´èjˆbQ˜µèˬÁ‰Ö²„‚¸óÎ;a öÛo?÷ꫯ†Ä­(˜ZŠeŸ}ö c$_I¥ZìZÈq•"Ë.»lFLùW)}«O?vÚi'÷ÜsϹW\Ñ}ýõ×n›m¶IÜ×§•B yÀ dÒ¤II'˜Ûµoß>!8EeïP’’º1-̷ɧôÃ?„?KnnåÈgDžß~ûÍ=þøã8µzñú! „€h­ˆøh­W^ãB@”¬¬×]w]·ÒJ+ýG²À3Ï<3Ä:.CZLXó¡Ø…ðàÅV€”‘ÖˆÀ;ï¼ãºtéò*„„£&L "³–mI¸Ä2yÑE ¹**5 G%z|p€Bòuîj¬Ä§L™£Ð„ ;÷Üs«u8ê·hµ,¶ØbJÆÿË/¿¸^½z…mBⱈŸãðÃ^~Ìùøcþg9<ø-hã™QNòÿH˜~ÖYgÙfX’û㤓Nª±OB@! Z">ZÛ×x…€eD€-Üôë+|ØI‰ÿÔ ;HÈLR±ô6)_;_K!P퀔°„úÁb–÷ÍQGå¦N¬_±hmirã7&–ýä{ éj¥ÊW_}º–VÂ5w;uêäð”áýZ¹>büåöä“O†Ðnìùä0/ä<¼CLðy饗l3YR.‘9¤µ—ÔŠB@V†@ËûZlePÃB@T„ŸAyŸö\ˆûˆ²†ùçŸ?Þ­uÊØHBá‰G !|V]uUW©VߺxB 1€Ü8p` 9 JyFŒ¬ßQò´D!‘-Är衇º=zTì0?ûì³`L+ø O„{â‰'ܘ1cÜyç~›Ø_Bòâ[o½5xV’ïå¶Ûn A÷ß¿[rÉ%«qHê³h0/c®†Wë‹/¾xÞqáÙÁsÌ<1¯ÂWñŒŸsÎ9nã7v»í¶[­:øÍÛa‡‚gÈ<óÌSë8;¨Ûm·u“'Ov”Ùh£\K4ȼv ! „€ȃ€ˆ<Àh·B@ÔK.¹$X–‰Ð¨n…JÏ™?‰hM  BQM~¼Ãˆ]~â‰'ºã?>„óh©X³dß}÷ ^_«­¶šãZÉba®PÈRö5×vÞyç@ÈÐOø ³„[mµU°|ÃÕ?Bàu2÷Üs…ê?þèyäGÿ÷Þ{ïÐ~Ü—ø\[ç”P”[pÁÃ9ÔË6VvôóóÏ?ÖÆ”EHTK’ÚØ£+?ŽsÂ:I/ 6”¿ñ¹á ÿGùÛo¿=$@§ˆ§=÷Ü3$¹Ì‹úHžÉÇ4ôûùçŸwo¿ývØ^sÍ5]ÇŽƒ—‰µ¡¥h*°T=âˆ#B^îgBƒàåAÒÖ¬û¹©úÕíœ~úéîŸÿügxöƬw›¢ÝRÛ0âƒO•èCŸŽ;î¸àA3lØ0wì±Ç¶ëgò|€9Vá$—ßtÓMÃo€HòRïd'* ~ëÖXcðWŸža4Ào(‰Ò¶mÛúœ®²B@! Z&^á$B@!P7ÝtSÎ'ß%#wÎÇ#ÎyÅ}½ë9rdλý‡:üñœÖ©3þó.û¹/¾ø¢VýŸ|òIÞs8ß+¼rþc0œç©9O>„z}HœW.æ–Xb‰¤ObäügØöIqsž ¨Õž'+rÞò.9gæÌ™¡_Ë/¿|Øçã)çºuë–óIÇf›m–ó$O¨Ó[wç<ÑS« eÙ–ÞJ9ç PƇýÉqN,§žzjÎ-™uPÏû￟cÌ&¬[›>áe®Jê·>Ú2«=«GK!Pn<ñ˜ó¡r>¬[¸Ÿ¹O¯¼òÊœ'æÊÝTEÖ÷ÜsÏå¼¢>Œ}èСÙÇt§.ºè¢Ðßm¶Ù&}¨b¶=yžóÙ¡Ÿž ®˜~•£#~øa΂alÜ;W_}u9ªUB@TÌ ½wd®_¿~á}àÃßå{ì±*…º+„€B qPrs¯á‘! „@Ã(5w|žW ×þ¬ÞL™2Å]wÝu‰GeðR †1áLÌö?üp÷Ì3Ï8’$ÇB‚ØÞ½{»¯¿þ:ÙÍ>‹½LBe’!Ðòðê¡àõ…w^Á„ôCXßn»íZ>¡B@"ñQH*"„€u#ðÖ[o9ï‘Bn0W„cBÓ³gÏ$®1d„‘|ðyïŠÐç’ÐEᢠ:è ðñÇ1êøòË/Y­%%„•yóÍ7Ý!‡’„—!\€…™ŠO>|xBxàȈC@@>Tòƒ~B>ĹO®¿þúp쫯¾ a¾bòä›o¾q¯¿þzê*®ÛÖï½÷Þ„mª ¢"ƒ°Z|#>ËΗÞó#`šÕÏiÓ¦…k—׺(„´ãÙÜk¯½Â³Kó±cdžä­(uc¯\mVb=(¬½ç˜óÞsîæ›o®š^Õ@|p½IϽDH¿_|±o’ûÄoÇĉ·ôuŽÜ&i! Z6ÌÛÒÏú2Ë,ãxà–=pN! „@=ñQ°TT! ò#y°ú꫇\>ì“Ë÷·êª«ÖðÐH×èÃw8*Ĺ'Î1ù+–^zéPŒ<ó¤À{‚\äÅèÑ£CòG¶‰m ¹àÝýÙ †)iÁ[äwÞq½zõ 9È«±öÚk'ù-8{Š@ª@¼{€6ñIç ŒÙrù€5ûÓO?ƒ ¤ ù@bBduÖ)ÊÂÂÅHpØrË-¢ƒ:'L˜®ƒ)ŽI¼i¸Å<ù¬³ÎJ¼Vè§_–$ÆS&뼸­ ú"€²ï­õ×_ßÝyç\Ûo¿ý‚—^X>ÜU}«¬Úò7Þxc ^Öº>Ô_ÕŒ¥ZˆÅ“0ii^Œ‰ß™k®¹Æ]qÅaœU›l²I Ó8.B e"Àüså•Wvä0Â0h̘1!ß[ûöí[æ€5*! „€% â£ÐtŠB@”Ž@:U\oX}§…ÄÆieèùçŸï¾ûî»Pô¾ûîsX¹¥ÅçñpmÚ´q„bÉ ™ƒ’ßH;÷”SN –×lc= ‘a‡¹"±…Ųã,±À%9¸‘v R‹n##²ˆ˜¸-;/½$i:Šc„qA–¤ÉŽñl‰Ýß{ï½LϾ}ûÖÂ2âH"ÈÄvØ!Xáãý…Ò¢¢2ý,6Fû•TçG}oÓ'¼zôèQIÝ«³/F|ø¼Iu–mî>ì®»î*H¼7w?Òþ‘G,½!ðg̘á6Üpà «!uê\! *æytÔ`@ÓTvÏÕ;! „€Mƒ€ˆ¦ÁY­! Z/¼ðB°6C¹™ï¼ù¬š Ë„ÇB} KYß§O‡rqÖ¬Y‰7ˆÕ ™’õ¸ñÆ»yç7#\€åó`GæŠp">i®U—,;c ¤0>){!¿’Jó¬dV´C‡ ùBø´çF>ÂÄÎ×R”<§°HEë“®𨣎rS§Nu]»vÍ|~ËÙ~¥ÕE¿}÷Ý7x£á‘€÷U5 Ä­Ï•œãÃ0Ýj«­‚7÷!ïñ–*„9Ä 2ŠüUäÍÂS"„€B@! Z#">ZãUט…€€Þ „²B‘—ï/‹,°î œ7oÛ—o‰E«…¡ÊòxÈwží'lVV[(ä !9$qB¿â0WŒÏóÞ°:ëZ.¾øâ‰w† u“>N’w#1ègÚÆÊljÎÁŠð\±ã]—׺(ÈÍ7ßÜ‘O†çnÝu×uO=õ”:t¨ã>mrÆgk|ž_Ó…Þ‹•ˆÏ|t«ZîIÈ7÷ïßßµÈ%¿{·Þz«kÛ¶­ƒ`#G¿A÷ß¿[rÉ%[ä˜5(! „@!ð˜ž6mšÃë’¹ †AxpcHDø[rñ±mû8—aîÞšç0…°Õ1! „@¥" â£R¯Œú%„@‹C€ 6¤Êxè1ajLb¤sÎ7ß|Âs˜µ>€hç€H[ç+×’ö¿ûî»nùå—OÈ [¯^½Ü¤I“BH,rކ«¸èÝ»·»êª«Âu¹å–[BB\°%¼T!O‹+¯¼2(ԲȒ·zÁò˜v꺞…ú[l[…êÐ1!PN dñò¸á†Âs‡Â€0;(™³ž‰r¶] uvØaAùŒr¯ƒjU T#ñÁýѯ_?wÞyç…äßÇÉ-Yø9ÿüóC~“ƒ>Ø‘‡‹<;ãÇwíÚµkÉCר*”Î~øaø-àÞÄÀdÙe—­³§Ì½ìÃy„$t¨DÔæàxÃM˜0¡¾§†òÜi2Â/qÈŽñ`d‰‘(ñ6Ç!Pæ˜cŽ’ú “„€B ~ˆø¨^*-„@+Eë\#-Œ¸øþûïþ˜ÀàXšÄ°}„‚*·0y¶‰6“jòj È±äÜån¯P}¥z0ª³Ð1¬v±œž={¶#„Éo¼Q#9×}–¤¾a±Ž<òÈD1i–aô'ƒ•Õ?>Î_~ùå`áÔ@RéA öø˜ÕÃ5¬KVXa…DYš¯-îµo¼Ñ‘€!É;Jç†,uõKÇ…À=÷Ü<>ùä“p¯uëÖÍqß·iÓ&¯TkBm̘1nìØ±aÈä™Xn¹åªvø³fÍ }¯&:Œ’•ß Þ„1léćÝ`Œy¥•Vr»í¶›ãÚjîöÛow]»vµ"Z FEòâ­·ÞríÛ·OÚa΃Q¹Õ ¬Ü¿&œÉ^­Ä±CËÒà~Bê{@šA€ó[€ßh|ÇñçÙ6K›»ÓóhŒÓÌœ}¥JL˜Y½MÉƺ}ã±´2¶OJ)Èë! Z#…g­Y‡fñdÖˆ &³¬gýÅ|\5iÁÄÕ&¯LnÓLzóÇ[€ 3çJBAMœ8±–×Eº\ žFŽ™$3ŽÉˆéÓ§;þP&æSŠrÍ© b†½„Ë=ztðPAyðé§ŸK^pFè÷ŠD4ÜsÇ{¬»÷Þ{ï[ž—vÏBÆ5VÛÕR/ žYäÐCu{ì±Gµt=³Ÿf}]măÁëâãᇡØmØ„ßH’žCHΘ1Ãí²Ë.Á«qÀ€­aøc3#ÀÜ%Mpð{ñì³ÏºÎ;çí÷Ýw_Þã:кÀ;~Ô¨QnРAažŒßõ¾­ð/V0 â»ïEûžäÛÀþØoë¶Œ÷qûãKÌýÙosõbû’.Çseß“¶4„mÈûž´mûÞ´ò”lÉ2ÈJ·§m! „@5" ⣯šú,ZL6m’11ï·u;ir¸œÂ$3žHÚ2½´‰fz?¤LêiI¤þùçŸ/jH_ýuPü5D!~|0“oƒ|(_!%ÒÂÄÅK³K—É· aÂÞ=VbÔSH¸‘<0ü¥ËBDtèÐ!±RK[«m¶Ùf3Åbú|¶ûöí,éß|óÍ0¦|mqï]wÝuIس˜dɪ—}("Š)—ï|ío=pŸ\ýõîÔSO žW<“ûí·Ÿ»ð ùÑz(xð`÷Ì3Ïä­kû .¸ ïqh]0ï(÷w]]bÀ±ÄK„¿ºÊ:nŠ}×2'à›ez_¼Íñø/M Ø·o¡¶ë:fß¶|7ðËÒˆ‘¬}‹ËØ9"PêBZÇ…€hD|D¨cÑrË¢D‡ò®RWI^ò’ºˆ1Æ"´áx¬N–Ë,³L‹T(×le–ÀJË&n6)³¥¶^rœ¿rOnQ2Ûä,1ÁDŽ¿¬ãÄeo‰¤E©w1mKQ–0a6⧘: ž{î¹ð~¶óè3V^(ÿ9N…4±qôÑG‡†\K$>7îC8˜ñe%ñÑø8üðÃý‘Q4Ù…7 ÷þwÞYë÷…'ÉuÓ¹žxâ ·å–[†|"TÄýG_-ûÒý}ýõ׃2€_±>eúB„¾&ñøñJI[_RޏÙFÆÄaµ¬-…3‡{ùñljºW^yå`=¾ýöÛgÞW­5BåýóŸÿ Þ/ãÆksFó¦«Fâƒ{‘߈‘óƒß¡Ö"ü–à‰AÀµ×^~'>øàwÇwÔIì·Œ4ÎÆG€ùóq¼\™Ãä GÊ÷á™±.iÝpߨ¼–õ¬yl¥"T.%¾‘ùƶïé˜<á91¢Ä¾ÃÙf¿m³Œ¿±!”윆àgÏ5¿3ö½Í³o³žµývŒðÉÕtm‚Y¥Ë7,á¹'xÖ ý ‰•ç¾D'@Ä‚Rt…Úh‰ÇꋺN =y G@'U]jKÄ6kLÿãoè\ÖÖ¸ï¶Ûn V‹$]«²€Dž(ˆ$ÿAå#?|üÅcÌz÷îÝüÀÆu’(”ð6!¢í|}‰û¥õÚðb“#&Jé?›h¥÷Û6ŠâØ"¥v õßÃh<‰Ê"&˜HÙ_ú8?M‡¢þ£Ô¥"@N&jÜ'SK-µTƒÃìàR¿öÚk‡¤š,¸Ôg… B ˆ1^'Fnð ½ÿþûA)Ì}‹b¸Ð$žŸc>Bè?šôû3.´Ch/&Düñþ#y-!Pn0ø 7 ËùHæž8p ƒ€3‚±ÜmVs}šx}ðn8î¸ãªy8¡ïŸþyòüâ‹/ªÒ»‡ë÷ U<”N8ᄪ¿.¥ OÂÔÇZk­þ¶iÓ¦”ªtŽ(ˆsœ·ß~;ÜgqAækŠdå›A1tÕUW…°Fñ9Ìó³r|ðÍ7mÚ´àÕD{Ì:vìæDÌÿÓBy¾[˜oñûÅ6z¼‰™1äý](‘z}ÛŒûÀ¹?ä9AExéJD„9aÖ|ãä“{õÕWÃü’o¶­¶Ú*ÌÄm°Ìùýæ7Ìñ¼žÜ;ë­·žŒÒ"l‹]s#PxŒø`oÇú+cûØŽ ”bÛ®«÷<÷[L†Ø:ßTöÏ>Ó °Î½ïã^/ôíUW?ZãqŒBxÞÞ)8™A\&î¸ãŽÁxïÏ»îºKzÑ, RûꃿIüF¢—@xÇòÝu€7r”‡€<>"œ˜p0¹¨¯ð#Ì·ä?+^”O=õTø±"~2““R1¶ó³–ùêd’W¨/Yuµ”}L>mÂÂ2ë¯qiAå&61ÉGLØ~[Ú¤†m¬1EZ”óŠ´¼ºø¸Ê÷UêhIDÌä¹ì²Ë ~üZ|\òþá~çc¬Xa’Ÿõa^×ùXIn²É&uÓq!Ð`Pj@r°Da³îºëkñ6Ú¨¤ùSƒ;Tá ÀkŒ9"ó‘cŽ9¦Â{\\÷,ÌÂuYWcÓ—b¾ …çǰaÂò¿5*GÈ;³êª«º½öÚ+(,QZO| !ÐXð¬m·Ýv!ÏJSÊò.àÙ@X²?¬ÜK#PLÁ}lIzÛ¦{ˆÉô"Pò_žS"¹@–‚·rûåÇ*>R,niÒƒ9¿]»í¶[\Öë@@ÄG€°0Áê‚û|¤©·Œâa—ÔDLx [–\rÉ`‘ÍÇ7×+öö°¶›ª/Ö^C–ÜSüȧ‰‰b·)WnË ~Àlr`¤K›Äûâu;iÁuáÇP"ª&ÜLÆ ba®ðèhŠwZ5à£>¶.~ùå—ð,àéÁï ïóO<Ñüñ%‘u­=ò'Ìœ93¸£ßtÓM-æª S<â1QŠÁP¥Œuÿý÷J<¼>î¹ç׳gÏJéZ“ö…3–‡$;GAŠò†n Ð&íˆk5ð]Ñ£G0^ŒäðzÀh$müaJQæ^„fƒ,°÷ÅwúK/½Tƒô@á“$”áÇó–{á›ÄÚã»+‹ô Ä5¤dùÕRÛ´sñÒÈ׿·–x;î#çf‘-”AI‹Ò™~þ£ÚˆÉ0Á‚žñ§IêëÓN;-ü±Ž£Á|óÍ7‡¹f£GVÞÚ¡|¾þÄãB©EzPßÄ“&M ÄH>‰ëËWFû¢*ð×Á%Öp±]ˆPáX\†u3@£/1‚·j©Â=ùëCbr„uôèA¬Œ-9fûy«yÞT*~:¯4Ò¤Çꫯ¼îñ°‘Ôy𲂴"4òTA»±à¹÷Þ{+¨Gÿé 9b&~‡åbˆ Ê1É3k‡r Š9öÃkD„‘émÛoKûiQŽ+¡:ªƒ>ØÝzë­5D>x!Y%B µ!@( ryÓ%Æ[l¼<04@Á!ÉF€ÜX #×\sMPÂe—¬¾½¦x¬Öü†8sœ~ýú…HH½ÖJ|€Ç:ë¬ã¦L™¬«Yâ©ÄE( ‰(7xìC C| ÐÇk`÷ÝwOšÁ“K„ožÕþýû'Çm%§…ªƒ 4hPÅÈq~³ŒdàÛŠï,”«æõauØ’ï¥7Þx#xE @Ýi§abž'F|4¤M”¹FzРQ£FÅ(¿³o¼qè§õÉ–ôÅ­yµ0Ö3½7cç·˜«(Ũ2wýõ×w3=ñn„IA K»¼óxΩ–3fXÑàÉùÉø© 0Þ 2䂸 >,¼ ;…ðíHð"ãñÞ{ï…°ùú“4öß¼6,œ,!Á…6ù~¾øâ‹]Ÿ>}ÂuåúâDÿ™—ó; q¢ùHÑêÛæ¾ÄX²¡9·Œ@áyçþãçÙt1¶ÍñtÛ—E ðüðÇýYªpŸB ÄdÏŽéjÒûÙNï£,J¾÷X©}Óy•…@šôà» å,o¿ÊêyeöFÄGžë‹‘IX}…I /D^¸¼”x!1ᇜ%ûp#oã½D ¹aù2a„ó“>pN{ÓúŤÉí œ¦mÂLg~×]w íÑ&Gù”×X²0‘aiå;Ûô‘º‰§IœO&GLt_…+-Q~ ø± ?}aXÔÔÅnsJÚ¤¯ôä½`®XéàzËCZ8—~ÑÚih_Òõ×w›>cIÈd»!¾ü°ÅD„ýø±/M\Ø6”c,%B@–ƒ¼‹L°IJ¢Ð³Ä{–÷[YZ jC€øéä/CùÁï1¿9äõ@ñÿöWÛ¸š¢¿(›Pþ ‡rHÈ=Öí6U-…ø/òô]qÅaŽûâ‹/†ùvSáXiíÏàIÛû3…3!€P†bÑ’Z"ʉó,¾ë¾ãÎ8ãŒÄûâ0W„hBa™¾Wñæ@¸Où2AÉ©G~%æ|+ò-›EÚòç á;Šoq¾¥˜ßñËùÔYj›ÌùNG¨‡oi#wØ·Æk8~?²¿Ì-y_!ÌGÉÏcD û0Ö„´i×®]À‰¾b|{}°Œ 5†0Ç%_Æ*«¬¶É­Õ¾}û°M,yÊsœkBH)„¼$äBøî„ˆ€œ0YmµÕêì•¥ r«€ BNpA_BŸ¹î†=zsÆkçY}Z¶nÐ]•ƒ@á97÷ ï€x›}¶ŸeL¬XYöÇ!¼¸©ƒ¿†„ðâžç=†a’=‡•xÕù~@'È5AÊ;Ï=rS‚/Ï>zNÞ³&v:=H¢X‡~¼ )CŸÞÕàÍiûxÿòþ£üG}äÈ»+EŸø€t…à²>BVçËçLÚ£^êç½K~?ÞåìÃB;î§5ß2Mz𞃠¯+ )÷¹Ÿh›w9m¦ñ¥M°à[úœõ]nèšÁ»P¹|c¨¸ý~@’ÿ"à½r>fš«œŸXäü‡]½±ñVÂ9_2ÔáãUæüÖ©3þóq±s^)^«~ÿ€å|¬ìeãóü¤07{öìpžðsÞÝ4”õ1Šs·ÜrKÎ3ɹ>¬B·fI¶ýÇL­öØá?Îs~²ÊQ¿w‘Íùxña›e·nÝr~‚‘Ôcýa þ¥êô|Ò;nK¯¸Ïù‡7”‹1öIÉsþÅöÇcñ\9K?¹V-ÁÕ?€á<þÅurÌ¿\‹êKRA#¬ø²œO²žóÖ+á~ð/¼\çÎsþÅšÛo¿ýrþG*ç­èr~"žó– 9?¹ËùIfÎd9ÿ‘™ã|Æ.! šŸ3ç=¼L¾"­j?¿_žôLæýþƒ=ç·Zlùà¾â‡ï9¯hÉyÂ1ç/9oLöñ-ê ñBÔõŠ›°ß+drGuTÎ+tržÄHÊòí‰PÖ‡oÊyïİ ;£Ôé£8„ó¼â-)ãUá;Œþx½œwõŸÕr·×牕œ7,¬Õ¦Wèå|žÐ_ÉB>ìjØÇï2¿ÏY˜<‰Êy…^]òÑG…}ŒÕ+þøŸ÷J²€q|Œu;îI‡œÛ¾|çP(_ÀÁ“Z¡O>TuîÁ uÆÿø6½}¶ëŸËw¶÷H‰OÓº¨8x¦½2<ç†Ê¡ôQxÂ~û‡>ÓÎå½à 3ìPX¢K/ÊXßm<èyÑ»¡ï´:¬ ¿#ž@OÆaÇã¥'B™¸Áxì\+úŸcëžäÏyƒîøÔ\|nŒ÷úS;דÐ9Ÿ[±Æ¹é Þ‹žIαsYz(×¥K—ðÂyèQãkY‚®}/uð.öIUÍ>y|ø+™%0_1»˜U&k_|^lõ.ëdŽ0¸hbÕ€`é€+)ICM°ö‡…•CÎ:ë¬ÀŒâŽoqIÙ•EZpËÀÖùWqù‡ÜÑXi„aq‚+¼<ò çuìØ1Ä=å¼|‚ žÅÊ7ÞX°(¸2¶,7/¬@ ¹ä×·/;Rà ×Ô+Ž ”Ð!! *¬ÜÌÒ­>},åœúÔ¯²B ±À[Ë1ÂG2ïà7Ó€¸üã½T»_ÕT¿ÿ  –^ÌG°’Å­¥‰y|øÎ14œßÿýaÞFH昭Y˜G“ߊ° „~ÄkÝ”;¯¨ ÖÕ­½¼à¹@85òÌ`Yêþ!· Ö¼öÅ7¤…SÊjûËgþ¨ã­·Þr^¹¼•°|ÅòÖ¾s³Îg–ÁÜãÅJ9Ú¤ó\ˆÛ¥/XèÆâ5KÉXǢؓq‘°n#FŒë”ãÛ?~—x®ó º<@ò uz[â…A9t $O÷‡ñq= õ‡ó¹¾ú‹m‰hiðLãYÀ_C„y9Ï–ú,óÔjH½u®y P?µùt£¼Ÿzè¡ Û#—^zï¹XÉû]¦ ï¼ÓïóŸÿþ.]ÞsÏÌ{ïôYëó¹wfNÙgïß9g—U~+Ž.‘“'`w :áž¡‡sÝFD6Þ`%´‚r`ðªÂo¼1زá+cRçÎÓFmPOð"z‘ñP¯IT$9“ %nø3ÏĉEO¬[©?Pmxâ‰'Ü)§œ’Œb ûy0e¬õÆ”CŽSô½úáLú^9¨Äÿ9sš¯- BCK÷ç£/j¥Äò‘ ò0ñPA}@(-g¼÷–ï¼È={öL=|¤…„)Ñ©aø€U'G”ÁË'¼ „ìóR‰ sBxàé B¡ óD8C ÊãÅ!´ŠºPOÂÓ0x¨°X¤ƒ¡|^.MxÆ~¸Á׬YS¯ ˜rŠG¯Ö[롟t¹®‹–mŸ†€!`†@¥!ÀØÎœNðyóæÉÂÂ{‘ ]#u”%&µ#ÀÂI=$­TeŽ>P4V‚øˆ\Q¢4dñhòðÿ{?áû'!2 ('L \!€¢G P…hÿÉÚ7¤¹ªM¹‡‚Œõ'JtûŒ[P^ñ¼Öfô -Œ(‡ê"õ¹&×Ñþ3ÓµPXE%4b@Q ¥uôϳ ÈÚ;z®þæúª0ÕmágmûõXŽƒNF}H´.è j«çSV]±×ëÚ§!PM¨§áüe¢a.Elèï¡Â`ŠaÚGH5щ²A Í F „ã>Ñͪð$Ç ü¦/BÀ]bœ€#ó¨®|䃬y îSc:Q®ƒâŸþ {R QcL´|ôµèmÏ´”‡`8BXëžËñŒWä˜ÖzÐí˜ÑèAß -Îñç@OJyŒ}ž¹B 8ìc¢´^8iÓG#è‡Ñ†‚~}+B›À‹ñºœÅ iî^ ¼˜x}aK÷GÞ ,˜é„QtJ(ä1J(Ÿ)5ž6’8 K§?ˆ6Á¸7–B})˜¤Òq…†””Â3üÀûo3øA9ŸkÂϪ^*ä΀G1ä².é®aÛ CÀ0 rG›Â΂y ¼æ3fÌH.<ʽ…¨?‹#æ\8¹‘zÙe—ⲿóVxð_¼y¸àÀ¥Tч ½<\ª¬Šd±Ë¢šù7 aÊêÁ]V ±Ê–,Öɉ2£ ~úS”6¬çÒ)¯´A¬ŸñFÕ<lgÍÍXF¾EòWdò–ÕrêòYßk²v§]Ôþ3Ý#l&á|ÖýMš4‰ý£lœUá–©¬\ìã¢{(•úä¢MV†!`äO©$ÊwŒô}èÑ"(ðÑ;2 ”W}¨€GASu(¡±ƒÈO…%»W¢‚ú…^(ãÆrÍE>3‡%Ÿ>@>øM=ÑÁzjW~Š‘€(“8Á B.ô¶Œ]ÚFôºèwê¨yžÂ2Ð3^aÈQAG‹®6ªóÕý|â>jÔ(Ù䩼„ˆ1“1‚? 6ÔW¯ÏØ‚•1‚5 ¢F'ùñã?½6?Ñ£'.w1ÃGï FDÄÝ+Âý¢Ô“'OvD™ |W£BxÆ’ã`„Á¨,ñR©ÕTÏ£cQ¯:&’"FÇBø–K„‡:Z/Ú·ï¾û&Z.†"IxÁ^¢èKÉõôZz^¶ŸtvJ¦ç€¥FËè¶l?R—l¯adž€!`å‚ã6óœ<ž|òI™SàYÝ&aÖ:¾—K{Š]ORúd‚P–΂£ZVï©G^%´'%¼Ú˜ãh²Ö¬02¯¿è¢‹ä¯¾sü %Û7Cà‡DÝšåã‘Ò&Á‘)q/†X˜THž‹Â†gsݺu¢4â¹íÓ§Òàφ\“q#ŒyøŒ ý«®Í£ûøM$a@a÷(Ä AÁŠÑƒDé°MÄÕ…m…¬Of¶Í0Š‹ÎèF£sctш¾í·ß>aF#ð=jtDi@—ˆ°†a<ˆ ºRÖ>¡0÷»à‚ dìñ9Wj8‚3.)CÞjDËà;ý-ôÀQA¯‹~AKßœ­h”Hºã‰Ta~F{qWƒQx|X/ÅK©À8Žöa£ 9ŽrîóÀr—Ê\•åè®@÷À¤ oÈt<¸QN½|}õ(üÕX– Y@IDAT¡eñɃŒ5Ð'ñªáÁA‡±ÕV[Õ0†p^œ>á:_ÝsÏ='–F¾‡tQxpE Ó¥K—´}„b)2×\Hœa(åZ†€!`†€!àĸ§“OÂ'“]x 1aßrË- ¢:"@Î6òy D „ܹu,ªäWš¼éêëŒRŠÄ¡Hó¨b)Ö³Xu"‚›H0åÇ&ê¾hñ&†@C@‘¤Ž{P8±ÞÅŒ $ËY¦ŽEÅ8=#?Q¹’†^‚#ôîÕúÁê€ñ<œÕÐÌõ¡^QtxmÅp„N=D&Jx^]¿sψ(A¸&ÞÒŬO]ëodž@~  Oˆ óÅ8‡ðèqü&Z¢Q£F² ¼ON.ý ã}&å0OCg¨Æ®«ûqÎV§°|øDEP~TpZ€ËXDŠƒÅ‹»Ñ£G ëÍÞ{ï,£:Õq‚¡…ò£‚^c‚¡".âCÏÁ¨í“ ‹þ–môá?þ¸Ð‚é1ú©Q2üæ;fœÂ?æm>ø 8põW-úaôÄ8£'FÂ(Å2êp/–Ù?3|¤¹aDWðà&‹õ,Ý/qº+Γ#î’XxYÊKWfܹlËÑÀÂDó|.ÅK„ßCJ,Ù™Å?”#ÚqàíQ×:§»D¦¶¤;Ƕ†€!`†@f˜g\yå•’ šN¼iá……÷•9RUf.Åö†åÅ(‚Çœæ•,jøˆ*+¡Í„òã5‡/Êw\ íkhèÈù‡Âï( ÒÁ£ÛÄh¬'I, ã“#Ãíáw”]j<à»ôÖá8)F½„u}>rMÚ¤ãëÝh›©/މšë$¬}“ö»D@G°À1*þòIÛÇ=S#?Š2èa¢’ïú {CÀ( èãÔhÖˆ¾ Ýh¶‚aš&¶`ý¢ù=0ì¶nÝZò:¡Ä§Ÿa¿ê8qÌ>ãŒ3j\*“ѹùÐiBEßL®" ÑÓ6Dè§(aî”.b„u† ¢q>×ã0„@Ÿ« ­ ˜†Ûˆ‰æZ:õÔS]O}¥Ñz.Ÿè‡Ñ#`7Û뉣ßs”Kv–ñ?3|¤¹yêÃ=TJÚŠ1öã?nÐ=Í14Vœ!PÖðŽÕEBƒQzôs •0ÏzYúG’¡#\ãÄ1Ç#¿1¿óÎ;ɈúJú¿lý(¹„I<®BÊœCÂ-·Ü’³ù}ˆ•^‹Or‹@³ªQ÷ä ™;wnòô¶µ3 íf<¤íqŒü‘:¡‘0°€1†%>•>‹cBJ,~—³˜á£DîTQ„¶f¼)xéYdÔÕƒƒÉÑ+tYLŽ´ ¬€;ï¼sì¥yØ™àÅÉ'Ÿ|’,#ÓqqçÚ6CÀ(xÄ1È3øš†@e#€B‚Pfòv°0@Y9a·dÉñ*ŠòíV6¹mÝðáÃEá‹'×½÷Þ[#OZn¯V¥UrÄ+ÅâÐÜšÄ#@‚±ƒõ æãŽ;NÞø£m«!Öšûï¿ÊAµÑ\q0 ¶®]»&ÏC޲ŠsñŽFNeAÂ[]'O¬Ã—†^GGMÄ®Ærg¢°6lXÚšÐ&ònBQ‰ 7 ‚ìø &`&®«"3Z‰¸óQš¡@ƒ%amW2uaL„NS%ZÝ^ŸOtš´ûÍ8Œ’PǦú”iç†Àèã4Ú£‚:Jo8bÃ7úŒÎèr)ÐkÒ/"èIï»ï>¡¼"ïÿ/~ñ‹¤þ’ýsæÌqË–-“y8XuYÛ¨csšY³fIÿŠAõᇖ~­yóæY5/ŽŒ”þ ãD\¾ úMÚ¤ÂoŒ!äEA0&³† sZé±|RîYg%:Þt¹–H—Í–âÊyŒ…Y¹~ýz›h7=¼ž¸RÄ %x'¡M ‰ “ ¼ª˜ôðbÇMB¢çèo$Ê-GÇ0räHÇuhÒy„ðrñ’Ä åè‹Á$NC¸â޵m†€!P\>ÿüsñÌêØ±£ dxa1ø5Äë­¸-²«†@mÌŸ?_ä`Ò çíêÕ«%1q.<²j»~%ïGéKX<2jÔ¨¯âJn·*—*1âƒûFÞ¾c=VæØ–ë#󓌢vÅŠ¢tD K´ÌM7ÝT§õIæ+ØÞJC@Ç”C¡’‡vB‘¢J¾«‚¿6  UIGEÂ5ˆ’@)eV (Ñ2 k[úUjÕ÷š”ƒBJæåQª+ðA §}œ ôg ¯ |£Ç€ó|Œ¶|WÑzs¾zIë¾ð“ãP8F#Û£ûñNfŒ£¹¢ŒtõA©‡§q&!ïF*m‘,˜dÉ¡è³n³ï†€!PwèßZ¶l)'¾÷Þ{Ž„ßé„èÍ Aÿ‹L]ŒéÊÕ¾†òˆ4f>öÚk¯ =kö£ìgÿûï¿/Œ(ë5r7]Ùávô© Ušøh Æ¡° èJ4¹¹÷‰S¹êFÃý`¤Ænr‰ ÏÍF¸PUaÈAh'ÑÈjd¢ÏÓ1 Ý1íÓ³húÜ6mÚû^ý0zb/s¸Ù?R^¡®$úÞŸi£í3^\åB aãDsÀÍÆwrŠ„ƒ=ôTXùÔ Âƒ®€lêÈñÐ0"F§ÁBgÁKÅ„&Nx±8–É^¢*¡A„—Q­ÂºŸO¶ÃðÚÑï¥T—hÝì·!/˜¬ÀùØc¹çŸ>…’‰ƒo8°ç«”‹7ÅË/¿ìN>ùd¹n>¯eeÕŽïþýû» ˆq“±¦:˜“B¼LYX5Ç⬫E*ÝðÁ}ăÇ’ÖC=S›‚®Zî}\;Y4£¤EQ€CÔÕW_-JW’Ÿ³–21Ö­x—Æ)f8E7ž¶üÅ ëP¸Î£¢åÒ£ ƒÊ ƒÆÙm·Ý6y8Þ¬( 0f ÄgþËsË_:á&B’¿Pê{Ͱ Öß .<4›õ8ø0gFXGG“år ”^œEí¥ž¼‹Ð¿„½ʼt¸sLmû)7š?EËæÚŒ‡:u’úÀþÔ‡H¸ú°ÿ¢‹.’?-'úI¿‹ÓQ¡\ô&вÐ.îi:]Fô\<Øq\àžB5Ž•h™RÑYDëk¿ B#@îîPZb }àdýzà]b®D®@„~‚¨ƒ\‰–RblÕè@¥Ã 3u1,POúÆHWoô³Ð#ôqzOö1> 80%*ƒòaÚQŒ¨jÙ ˜3Ÿ"§ ‚³ 3ïb¢/e‡Îª*"TN?ýô”â_}õU‰f&â‘~œ~S…2èkÑçb8yòÉ'eý:†Pÿ«ç”ë§E|¤¹sÓ§ON7¼<2ý‚tÝu×%-oiŠ«u3![j±ã¡„Ú‘—……5ƒ4eÅ®»îZk™ÑúõëWcòD"ÎLeñb31AaÂÄ .^>^j¬Ž|x{ï½·|'U¼<ÔýCYBÇXh)¥ººív½êD@W¼¯(÷Úk/Ç{Ï Æ ‡±£OŸ>’C*‡|>PÀ4H¼h¡# o¥31 Ü#@À;Æû?oÞ»®×ij%uÀø‚òžz¡´WÅ=óõÑ£G l(ÙPÎÇ ×fžO`œ%Q\ÅâÎÍÇ6ê£$õA¯~!ßõ¡ïÁ`¦ØeÓ.¼²18  º]=òÈ#zPC š@Ù ÃŒ*øQèã¸HÆVæ8V² ‡* äÄÈ•Ð_·hÑ"¥8úD”ýHmûSNLóƒ~4짘Ûñ@_M”‘äDT§q ÎlG·ê)ž¾gÓîÝ»; íî¹çéÙO?Ÿ„¡"[a| 94¾3†h>Œ¶cÆŒ‘âÖ®]+Ž;ZêƒC c"ºúË&Þ½>ÆuôE¡Ð£'®(ñ7ÌäG¼gdÂßø„¿ÁuúóOâÅ_”RÂ2|TD®5ð=ï¼ó>4K®ñôÓO'÷{‰„}Êxmß%<Í•œã_¼„7ÊÈña’F¾„Çk=ÿg¿Ø)Gú…JÂOX2ÖCÏ÷“›„Ï9’r¾ÖI 뜟°néÚâã? ïu(×MW&;3Õ%¥ÒöÃ(S¼1Rúo\HxOº„Ÿ¤¼»ûí·_Âs'¼‡@ÂÒk¥çM ><á'%Éúø;áëﻉ!`äï!š8á„’}ýÁã?žðŠÈÜ^¨ÊKó ŠdŸæ½àª ïM–l;ß+YÆ'mõ{‡êp£½¡(á• ¿XOxÅIÂ+vëp¶jT6ž2%á¥oáñä”þ…ý^)Ÿìg==WeR¤Öù¼D Í—8øàƒ^™ÄÝ…Wª&¼wuâöÛoOxEb‘jh—5Š‹úÁ'žx"åÝPÝ^Ü':Ltu¡x§é„ •2âösìK/½”ðF[9½]TGðÌ3Ï$ëàó6%FŒ^".Uëã#ÞA;e??ô¯øOøÈ´û}NŒD=’åhy™>Ñi ‹ ëŸéxöyuÂGŒ'¯ž›=Ø;“§èg=ÕhÂÓgÉîlëïièâD1Ò6p,ãQ%‰E|ø»«Rß<XC±>"Ù”'¦†ÍcÅSÁú†g6Ükqž þ…” ¥À Ï ë åE?±h†‘%xà­–=¯·.]ºH‚¸è>¨ðêÒhÝ?uêTñ´ÑßÔMÛƒ¥‘zD%¬ƒŸ„$ñ Ã;Fù; Ÿ¥,$Ä®?½û2Õ…ý&†@9"€§WhŠ%/%<ðƒÚŠw‰>ŽFBåáó‡oBäáÁC–¨0¢Ië$é)^h¼‹~±'$q}@9Þ«³!P àa·Ÿ4Ë‚>ϨåH@މ¥Pßr®ž`Б"xBU÷m6÷Ei®èÃI\É‚Ç^…pãl’çž{®ÐcÅŽ7;ÞßJ] v”!P¹„^¡$ ¹ég ŠêÙ³§°?0n#¬iÓåò¨\„ Ó2¼®ñ˜†6†qmÆŒîw¿ûàÏ:Æ+|%× 5è9ðt÷ ØŠ˜ÂÔÔ®bÖ­ZµrÐ$1ާôpDA3Î£Ë ½û3 :Qt£*¡NmÐn¡D”ÚJ~üøèô û‰6Š–Iÿ‹^2*M|TVÐõE…ú_|ñÅÁF]PfT¯BÄ›&#ËAg ›ýJHÅv¢Vtœè:Ó 9ÕÐ稄QÔÿ–[n†Ý~j¸GªK ÷óz 'F8=Žê·ecüû¬8ÐŽŠk9=>ûì3 ¡bBÄSý i¬÷ü–°}ï-¡[,Ú  E%Ü¡/¼ð‚„KAkŋȂŸÉõAÙÊ„,ðXA‹…ð‚SÑYJuI‡—m7jCÊ,¸8C®]ÞÉ>”÷–Ÿ‰G¡ß9”¯sçΕ¤‹„Z"Ê%!ô|µM|jk¿í7 š`܀ޒOÞ90\(0pÀ@Ñà#hÜù矟‹â­ C ¬`] ]´*ëâÃÚ|üøñöÎÄ“ÇmÐ`‘„ºÖZЫ èD‚ƒê)§œ"4ää11ªt€šC‰ö¢—„ò”w RÖÌ]БÒNô(è. =UcûÁõôX`Àúëì³Ï–ü>bE ¤£zSúrp ù|^èÃÐÃÏŠ¹:!þ´ é®!¥wïÞ¢ÿÅY–¼.´½’$>£u%µ°LÛÂÀšÉêWŸfñ²bÌà…Fx˜£Fh¹pÃñr£XÅŠ™­09È…¡&Ûëe:®”ê’©ž¶Ïˆ"À Id_Ñääx+yZI`EÂ+gžõB 8x>ñp€Ô‡EJÄÆ”F•î\h¼íz†|ûí·’_ ¥,“\Ær< ä¾5¤r‹€§îå7^÷Þ{oÕ=@S#>*9¿GøÔ å#sç•+WJäd¸ß¾Ç#€ÂïDOàÈíåiuÅ@‹„hÔJQ’Ä·Þ¶™`®N’wæËDÌœ9SU¼7ô­$¦…;?äÏ\¢íÍÌ¥ðrçý‡§‘6Öb¿áí÷Tæò‡"OuŒ Ü/Kž«»`å”"è‰~Š2½”b]ë['ú`"4 #Zûã"FÂãзÖUožßÐïôaôEuß™ë"”QiFÚe†P¨páäE…jF=ô•bQbb¥ƒFÏá(žFóçÏO´†DZ1¹fQ½S1c̰aÃÄ;Šˆú^½z‰–³†˜bâa×6 JD®ÿô§?I”}ÁĉF.à£ð¸á†ä ÌŸH†ZRm†=÷ÜS(Hx{ë­·ŠÁ«ï{}Û EŽD~Κ5K¢gP$òÄÎ&†@5#€ðˆ#Ž¿jÆ¡TÛÎý!*ç²Ë.“?Ø8˜ ²dÉ÷ñÇ‹¢e!k!ú;¢î¡*Ãó;׬¥Š“ÕË0ÊôÄÌËÐ#QJ­òmYÍš›á£&&µ…\ À„m†ÂD þ]CÀ(.>á¸x’¢XÁØAx%^F*>9¹L¤1vpÀ5ø$õ¸B~®ZµÊùäbnÑ¢EBi‡4ažLü›6mZpš­B¶Ý®e ¯¾úJ8©ñÅÐH”×u×]'¡Éµ…0«Î•p]ŸˆPø×é—[¶léú÷ï_ ͪWÔð¾Z„ÈEÆgÂþÉ¥cÔ&u»óxGN™2ÅÁ•§>†ò¦@›VMÏQÝP³£ C ÔÀE8ÌÁ †¡?c-ĺÈ'rå! DÁ0~à¬5ô˜&†€!`” DÒwiþ­úaôÄ•(fø¨Ä»´ : ìP<ðÀpSÊw÷Xÿ¥ºJ9À~†@ƒÀ ùÜsÏI¾*äï Ú!1ÉÉÛ¶m+9;ð6*Zˆ5kÖHõûî»O8.‰è`ROs’`Yå=v²!Œ¢(ÜQÒW0Q…檉Ohg‘UiaËÉ’6B;Hƻª »jø¨ª+ Œ]P½’³‚Ȫ0¹dN°*(Ã,ý¹aHà 'v Ÿ— Êò™†€!PNàð…3Ð`~úé§¢D$äÙgŸZñ… :þXÃaø`ÞÆšé°Ã+:ðrÂÜêj”"ä4æý/7A?Œž8ôÃùn¯”ï–ܼRîdšv`Ä@±Jƒ4Ñ»ì²K­ŠT(4È?? \ó&M°m6²Dà³Ï>KINޱ žA(Š™œ\ë÷‰4Ó¦MsZoŒ3#GŽ#õq¨Ù6C á@¥€ÂpÁ‚âÄ@‚º±cÇJÒ`Æt“ü"€¡£{÷îr<þñô¬f÷˜„‰‹/vä–ªš …=žp‹M3Y®¸ãTE®”N:I¾Œ‰DƒtìØ±\›dõ6 C ò®A‰„±2]‚tŒ ÇwœE¦ g? òB†¤ˆÄ‡©£':Ö˜D­ÁF.zbtR•*fø¨Ô;kí2 ¢#€ÁQ““/[¶L"¨´R¥’œ\ë÷ µÎäɓųœ¤WÞMPZ18ZâÅ8Ôl›!Ðp˜Î˜1à 2D"ˆê I0‰1~˜ä1Íš5coïÞ½+Ú *4YÑçól¢Èº¨ZEy«pÂŽçÁ¤~ðü07:묳ÜK/½$žÏxL4È¢×ê©e%ЍÌ%pB%úƒHèe 9ÃHκŠ9G©Dù—(¤V-CÀ0ê…€>ê›d†@MXпþúëÉää$*©æJ-9yÍü°…IùìÙ³EÉŠ7í‚r ÅÄ9çœSÑÞé0±í†@¡ â’äåO?ý´äûÙm·ÝÜ„ Ü 'œ`trº (+Ž9æQR@Q±zõj·é¦›èê¥yžK5vä϶j’k®¹Fr[A{õÖ[oUSÓóÒV+0 Aã‡ò¯K—.nÒ¤IF“´­PCÀ(þþ÷¿K‚ô?þñî‰'žk­×O~òIŽ„hK®Èا!` GÀ  ÇÐJ0 *F€ää+V¬ož|°,’“§»]xôÎ;W”;ëÖ­“\?7výúõs\pAÕ)ºÒádÛ | Àû¥Üõ×_ïX“3碋.þh’j𫝾ZÇ£ÅCÌj—'Ÿ|Rè­ {‚îªÚÊGrêàÌPmT_ùº×DÒAzóÍ7‹—3Š>rˆA³kb†@%#Àœé?üp2A:ÛT œÁ#ȉ'žh Òû4 C ˜á£ Ù)†€!PÝçB““?úè£5’““¬³““§»kDtÀE Ý+(vàÞþýïï.»ì2¯»‰!`ä’ýbäà|èð~¦/1ÚƒüáW2†” D}Œ3Æ 0 î°ªÛ6}út׫W/¡;\µjUÕµŸ“ï…¼/P’@ciÒpPôÝyç®oß¾G"jæÌ™ãöÝw߆n%†@Õ!ðÝwß9ò*’Ó´\„uu†‹h¤‡Ì‰¼×é‡~¸EÇ•Ë͵z†@I `†’¸ V CÀ(u˜–Œgž¯šä›z—zròLØbÀÂcùòå’ÜŠ¶ôèÑà óÐçáÜ5jÔ(YÏUŠDŸ%rÀ!%ù¦‡Tpš!bŽéüY‚tEÆ> C Ú0ÃGµ?Ö~C Ê ÚA““£ÐÀ«ï•ýöÛÏzê©îôÓOns’Ý–£˜•ÄÉÓ¦MKÒtuÔQõqä‘GšÂµoªÕ¹ì˜?¾ëß¿¿û裄¶¾æÛn»Í5ñI“V®x·óÃ?”¼*P]a€š:ujñ*S¢W†_ü½÷Þ“ü ;v,ÑZæ¿ZäÀÚu×]åF!?hРü_´Ê®ðÍ7߸~ýú‰qg úÉÙ³g»-¶Ø¢Ê°æåŠzœ;n¾ùfÉKqÆgHT‘óù”J7€€ãNz<òˆDð¿òÊ+âP£¸B™J41F6mÚHD¿î³OCÀ0ª 3|TÓݶ¶†€ €r‹Äqäë ©÷矞äNe‘]nÉÉ3ÝV¼Ë'Ož,ÊÕ/¾øB=à€„¯è7Þ8Óé¶Ï0r€y<0®²PÅ#oìØ±BëR®ÆÔÀRE`è&™9ô{챇[½zµÛtÓMK¢n¥T 0!Jð…^p‡vX)U­àu7nœ¼Ï;í´“ƒÓ"%s  ÆÁYïp¢q›7o.¼ý;ï¼sî/f%†@^ÀøAŽ(Þiœ<<ð@7kÖ,·Ï>ûäõº^ ÚI?Éz:,þžyæ™Øé8óa±é fbÕ‚€>ªåN[; *GàÓO?M&'_²dI2êXÊ99yºÛJÒd<$o¼ñFG´bøà×¢E I¦Œbߤ&${ïСƒÛe—]„Ú©æÕ·åÝwßšÆ^ò„rÈ!ÕBZ Ƽ§gu–{饗$OýéàÁƒ-7Rî]ÆÈ¼ÏD2/‚rx“M6qäý úƒuK¡¤ Š-󟧞zJ¤“tž¼s*š õ²&H/ä}Ñzا!`¹DÀ ¹DÓÊ2 ‚#€÷é‹/¾(‰Ýˆì I-•JIN®í‰û|î¹çD©Šy¨»ð¦B)¹%MŽCͶ¹Gàå—_v]t‘ã“~¨Y³fnÒ¤Iâ-oÞs¹Ç»!%véÒÅÝsÏ=¢hÁX í†I<·Ür‹»üòËݱÇ+¼áñGUßÖ¶mÛºG}Ô}öÙîÞ{ï­> Übr–õîÝÛÍŸ?_¨éx‡é_Qœš†@y!P̼!RÕlMÎXF4HºéBH¾çž{†ðÙwCÀ0Ê3|”Åm²J†@ˆž*$mÓää$íÆƒÁ»º’’“‡íŽ~_µj•»öÚkÝâÅ‹…~„Pe¼r¯¾új×´iSgÞËQÄì·!  ¸îºëÜm·Ýæ¾ÿþ{‰&»âŠ+„: C¤Ii!p×]w¹îÝ»K¥ˆfhß¾}iU°Äjs饗ʳݭ[7wçw–XíŠWhìŽ?þxQ‘°ãŽ;¯2UreúW¢= ¦Ã˜Œ1î¾ûîsÛm·]• `Í4*¸¼·ß~»Ã¨\h©vx³–&A:¨¢—.]š6A:†¨+‰=¡ÐÏœ]Ï0 ‡€> ‡µ]É0€€&''ªƒää_ýu²´JLNžl\Ì—5kÖHrd’|’\•ˆ& Að07þõÐl“!'  —9=ˆò€Fʆ}÷Ý׌y¼!ÅH?‰ïñ©S§6¤¸ª8÷w¿û[°`:t¨$‚¯ŠFgÙÈ}öÙG’Æ^yå•Bo—åivX@A‰ªœÿûßB9F’yú\CÀ(/È?#‘êš÷. îň”5ȆçÃÔ /¼ ”X$Hçþ¨£!kOòF¶jÕJÔ[‚ô ¸Ù7CÀ(=ÌðQz÷Äjd?"ðÞ{ïÉdK““Ck¥²í¶ÛJ’`òu´nÝZ&_•Né'.¹î¸ãQÚÅQG%‰Ì<òH·ÑF)<öiyFÚ•«®ºÊÍœ9S(æXõ2ÝÞÅ<ƒ_ÏâQ°ÌœdÔ{챇$YÝtÓMëYZõœvÐA ýÅ´iÓ\¯^½ª§áY´”÷ÿ¼óÎsÛl³ð¤›÷k åàÞe"n:wî,É;ì°ƒC˜š†@y!P*y?BÔÌ¢±!AºRb-[¶¬F‚ô}úˆÑ£Q£FéNµí†€!'HZŽ1|ò,ÆwÛm77aÂÉ1„‚ͤôèÒ¥‹»çž{„jáõ×_j¢Ò¯uiÔðÉ'ŸEþÖ[oí¾üòËÒ¨T Ö¢[·nîøƒÐOâñjRxHt~ë­·Jî%”oÍ›7wóæÍs;ï¼sá+cW4 !À;ŒQ¹oß¾â(·É&›¸3Î8ÃMœ8±$h“Ì’Ýí…Ùˆ[ÆÅ… ¦MŽ!„DéPGš†€!kÌð‘kD­p¡*,@ k=ýôÓÝÑGm¡­xPGŒ!ô†ÈбcG7tèP×´iS£cчÇ> "ðòË/»‹.ºÈñI¿Ö¬Y37iÒ$QžÙ"¬€7¢—úðÃåÞAuÕ«W/7mÚ´–X}§cècŒjÛ¶­xÝVÙ·˜2Ï?ÿ¼DiÒ_˜úì•+WºN:‰’ÈÙ)S¦Èܪ85²«†@C(Õ¼a›Ì¢‘ÝwæfDSk‚tò|ªh‚ôO C >˜á£>¨Ù9†€!De=ÑäëàÏ’“'¡ÉøÞtòà‰øÝw߉—(.D} d5 ŒðÙNC /|ûí·îºë®s·Ýv›ûþûïÅ8KÔÕ€QX&僞…(¢¡XØc=Ñ ›nºiù4 Djzî¹çºÙ³gK´o&éÀ჈"úŠ?þ¸$èXÒ×¶²÷@“ƒáãÇK/½ä6Þxc™_ ²AÉŽ1 ÔCC¡ª–œ<žŒ?à«…>çŽ;îpàˆýríµ×Ê„n£6Êx¾í4 ü @î!ryÓaÞK¸¤÷Ýw_‹¼Êäy-uذanäÈ‘E‡ñã ƒÊëõ*µðã?^<2GíX©ÍÌI»PÜìºë®î£>džAƒå¤\+¤þ|õÕW®wïÞnþüùÒï‡hò˜†@y!Pêy?B4Í¢Q·ïÜgMŽdéÒ¥5¤“oO¤cÁ0bb†@:Ìð‘Ûn)œ|ñâÅÂLXª%'O§Ö,¾Yl?>9yƒÇå<¦x#š†@áàݼꪫÜÌ™3Ż엿ü¥D} ,3CdáïG.®ˆ¡ƒhùdg Òs‡½•d”"fø(Å»bu2ò€‹<‚=ôÐC¢ø ù0QÐþÙ®];™þoœèÙß„W^yÅ1B&WxÅÓ±cGñ*oÚ´©a™=”v¤!sXTŽ7Î5ʱ0ÆÈg QY[n¹eίg YÐ,Y²Ä±…²qÓM7-|E*슼7P‘ ú™gž©°Öå·9(Ô[µj%óòÍMX~ñ®Oé̃¡1c†Œ «ÈÉfT¤õAÓÎ1Š@¹åý3HˆFî¿k‚t>ч¼ùæ›5¤wÜq2—$ä׿þuî+a%†@Ñ0ÃGÑ · ùG`Íš5Éää/¾ø¢³ää¹Å|¡È!)‰L‰è@ùFÔG³fÍÌ‹<·p[i†@xùå—ÝE]äø„â„÷rÒ¤IîÐC5ÏÞ:£Yº'Üpà îÚk¯•{LN…ƒ:¨t+[F5»ì²ËÜ­·Þ*žñwÝuWÕ¼4ªJmè”®¼òJ1¼–F­¬!Ì‹yƯºê*Q‚5oÞÜÍ›7Ïí¼óÎáaöÝ0ʸ¼Л2žýô§?-ùV˜$ÿ·ˆg„(a(±ø[¶lYé¬4A:ã‚E†çÿ¾Ø |"`†|¢keFÅÞ[o½åà6'i/ nø.UXÈÎI¾Ž£>ÚÁuiRw R¹å–[$W´ax¢x#TÚCÀ(ß~û­»îºëÜm·Ýæ¾ÿþ{éë œ0`€PЯfvå\#°råJINL4‘wW_}u®/QµåµoßÞ=øàƒnÈ!ò>U-õl8‘矾Ûf›mÜG}ds®zâ˜ïÓ˜' ݳgOQ~1W&_rCÀ(?Ê5ïGˆ´@B4òûµýôÓIÇGj€ÎE¤ã‰#Î&›lR˜ÊÙU C N˜á£NpÙÁ†@ñ@ùÀ€K8> \Qò1 #PV©±aKNÞð{E4 ù;PZ¬[·NŒK7žØ^½zY̆Cl%9A`þüù’„:úE’ÔÂÛ¾Ë.»˜Â*'—^!PÑœwÞy’_éÎ;ï#ôþç–^EË´F(YPüò>¡°7¯ÆúÝHSè‡ð"]¼x±xˆÖ¯$;«P0¿Æ`θBŸÒ¥KÉ e ­BÝ»Ž![Ê=ïGˆ†@B4 ûéäLÕéo¼ñFRƒqg‘ã?^(±Z´há~õ«_¶‚v5CÀH‹€>ÒBc; â#ðÁÈBcÇòåËSo†ì±ÇJTG›6md°5cGnî”xvàéǤ…x_xá…®_¿~®Q£F¹¹•b B¥bÿþý%§ïé;ìàÆŽë:tè «n'—,$¥„ÚŠ|KÝ»ww“'O¶ü 9¾[kÖ¬q{î¹§”º~ýz·å–[æø ÕS\×®]ÝÝwß-”˜(LLJ¼Ä¯¹æ‰ôÅ«—ùö}÷Ýç¶Ûn»Ò¯¼ÕÐ0j €Ÿ9Cß¾}ÝÃ?,žù伜4i’¬ñjœPâÌRܤ ÒÓ¡ÅzþùçSô4°Aý”SNqèi g,11 â `†âànW5bÐää  ;^{í5ÇâKeÇwt­Zµ’ää,ÂPÆ›ägŸ}V»Ð¦0©dârî¹ç Õ\ÝFw[¼­4C ¾@õ‡WîgŸ}&ïe·nÝÜ7Þ(Æú–iç•>,6YHùؤI¡}Äàe’[À÷„Nyð&õG`ÅŠ•ËüáwÞI”ê_¢Y˜M†¢”`¢žˆ&_”‰!`”'•÷#DÞ !ÅûNιE‹‰ãäÒ¥K…†\kó³ŸýÌí´ÓNâüpòÉ'»£Ž:ÊX#û4 „€> ´]ÆH‡€&'ôÑGÅå½÷ÞKINŽÇå‰'ž(ÆÂen’{^yå7bĉ°!”zƒŽ;:ø¹ÉçaÑ4¹ÇÜJ4‚À1Ç#yvÞygwûí·‹’–Å…Ie#pà 7¸k¯½V¨á]†SÙ¼èrÏÉ••X³fÍÜ«¯¾šû TY‰<§Ë–-s}úôã*k~Ù6C+4³;wvûÛßİŽ1„¤¶&†€!PžTJÞ}3€„h÷û÷ß/Ϋ°G@q‰#+÷G…ZŒAp0!«‰!`ä3|ä_+ÝȈÀÊ•+ÝÅ_ìPº³¸BPàpÀâÑÚ®];ñ0ƒgÛ$?@ç—8^|ß}÷xŽ“'Š>¦HÍîVª!ÐPV¯^- ÙöíÛ»-¶Ø¢¡ÅÙùe€c& G<61~tØÆÇüÜ8¨Á˜|9DW™4 òEœyæ™E EŸEì6 ÏBžM46‘:P(ò¹Ùf›¹›o¾Ù]pÁ…¬†]Ë0rˆëîU«V¹=z¸·ß~[<ð‡*yËٙ 9|HrPÏk@”+Œ¢Ýh£Ü^{í%z¤tÐAFݚܭC Š€>¢ˆØoC €œuÈ!î“O>IIN}‡)Üó{#P<Œ7ÎMŸ>ÝžŠàA޲/ K’›_ü­tCÀ0ê‚ý4^óo¾ù¦ä÷€WyóÍ7¯KvlèÙ³§›5k–»è¢‹$¢ª§Ú¡1ƒˆ$çÌ=nºé&7hР˜£lS)#À\|-O=õ”CY…ãŽ36_/å»fu3Ò#Piy?–š$D£t¾3—%A:Ñ D-ã€Ésˆ`p;äCÜÔ©S%'HéÔÚjb”?fø(ÿ{h-(cð I+!¿üå/N©÷/‹‰'º &¸/¾øB®H„ͰaÄ{Ó¼‡ p솀!`Ô¼«QÄC÷H&<ä,çRA¬ÃáäCÁkJú:€VË¡cÇŽu ®ï÷ßßæµàUŠ»¿ùæñÇiƒQôKÌáM C <¨´¼á]0HˆFi}çÞ¬]»ÖáȳpáB1ˆàü }oË–-K«²VC Ì0ÃG™ß@«¾!`d‡À·ß~ëà,=z´„œâ]Aî¨RÎ>ûl¡ŸÈ®$;Ê0 C @EHt„ðëÓg[T^~ï@Ó¦MeA~ß}÷¹³Î:+¿«’Òq¼ Á)Ï1Ï4yÄLÊróÝzë­îª«®OÝæÍ›»yóæ9òM™†@y"P‰y?Â;aÒûŽ^‚¹5*½ Z 2GÀ e~­ú†€!¨(®»î:·nÝ:IˆÛ¸qcñØëÕ«—yée†Ïö†€!PTˆŠ<âˆ#Ä`ݽ{w7yòdã?.À!Ë—/ü pɪ¸ôHxs~øá¹T®ÀFB]öÐC‰A–(ŒÐ×zè¡ØZk’!PTjÞðî™$Dþ†@µ `†j¹ÓÖNC Ê %ü™äìxã7‹T’‰^xá…®_¿~æMQeσ5×0Ê”§œrŠ[²d‰#üÙ²en‡v(¿†”Y?ÿüs·ýöÛK­?úè#÷ë_ÿºÌZPºÕ}÷ÝwÝ>ûì#‘+V¬>ïÒ­­Õ,Ì3W®\é:uê$´µÌ1§L™b‘<™@³}†@‰#PÉy?BèÍ¢aß C ÒøI¥7ÐÚgÕ‡À³Ï>ëŽ;î8wæ™gºÕ«WKJ´¾öÚknäÈ‘fô¨¾GÂZleˆÔ„Ï<óŒä¿‚SßÂÿ s‰²A~ò“Ÿ˜¡)Ç“›æä“O–R¡K2)_x?ˆð :øàƒÝúõë]·nÝÜ 7ÜLV[¾­³šÕ‰¹Ã0öC«9pà@‡àp'žx¢{ûí·+èBé¿hyÓÚ¶m+N‚}i'@IDAT$ܦ­mÚ´qK—.­˜öZC C º0ÃGußk½!PQ¼òÊ+®]»v2YÃøœsÎ9nÕªUnüøñ­mÉp+ê–[c C BÀ“šÄÚÿú׿ÜСC…è§?ýi…¶¶´š¥†ßüæ7–€;·æÒK/•RÉ ñ׿þ5W°" …sÊ]vÙÅ-Z´Èµoß^ú«k®¹ÆwÞyŽœ&†€!Pžüò—¿t#FŒpwß}·Û|óÍÝK/½$Gy¤<”¦ÖfIŒm6 ŠBÀ u;­1†@u"°fÍwî¹çºcŽ9Æ1!%¯Çi§æ^xá7{öl·çž{Šçju¢c­6 C ¼øÇ?þáÈÁôõ×_»£Ž:Jr2m¼ñÆåÕˆ2®mhø(ãf”lÕ?þx·÷Þ{‹wíĉK¶žV±ìØzë­EA:xð`ñ¿ë®»„¦Ú8CÀ(O6ÙdסC·xñb鳡~$ªk̘1*ÎJ3€TÒÝ´¶†@3|D±ß†€!P6|üñÇ®ÿþB1€ã»ï¾ãÇSO=åæÏŸïš7onÞªes7­¢†€!`ü€ôï¼óŽÛb‹-Ü´iÓ‰¶M ‡€>ò‹5QÌ]žïï¿ÿ>¿´Ò ‚JRèTï¸ã™{BÓ²eK÷Ö[oäúvCÀÈ=DštÐAbü€Uàïÿ»6l˜ëÒ¥‹ÐÛåþŠÅ-Ñ ÅÅß®nùAÀ ùÁÕJ5 <"ðÕW_IøñèÆçð>à€Ü‚ ܤ,4™¸™†€!`”sæÌÏixµo»í6·ûî»;£(,ì=4ÃGþñîܹ³#JàË/¿tøÃòA»BA`îIò£>ê¶ÙfÉ ÐªU+™›¤vCÀÈ9ÌA4ïÇ Aƒ*6ïGœ@B4ì»!`”;fø(÷;hõ7ªo¿ýVru4kÖÌ >Ü}ñÅn=öp3fÌpË–-s§Ÿ~º3:”*z ¬©†€!PQ p0`€DïA'Å„± ‹Íð‘Ìñ‹_¸>}úÈ…0ð™TxˆCgFÒs(Í>ýôSÉÿ1eÊ”Êi¤µÄ¨BÈûqíµ×V|ÞðÖš$Dþ†@¹"ð /åZy«·!`Täì¸ÿþûÝõ×_ïÖ­[çþßÿû®qãÆBqþùç;&¢&†€!`å‹|Ù§œrŠ[²d‰kÒ¤‰³wØa‡òmP×Ü?ûì3÷øã»“N:©Œ[RÚU‡®“ÄØÿ÷ÿ'4*­[·.í [íêŒÀ'Ÿ|âºvíê `Ýh£\ß¾}ÝM7Ýd4¬uFÒN0Jæ+«V­r=zô¨.Ö¡C† ‘u)†ÏJ¢qiû¨Q£Üc=&krú¶-Z¸+®¸BX*¹ýÖ6CÀ(O,â£<ï›ÕÚ¨ 0p<üðÃî°Ãsçwž#‰9“Ë¡C‡ºW_}Õ]~ùåfô¨Š'Ái•ŽÉBñþÉO~â¦OŸî5jTéM.Éö¡Ô šùÍo~S’u¬”JAÒ©S'iέ·ÞZ)ͲvüêW¿r=ôëÕ«—Égüøñ®cÇŽ’' 8̾†@!Pmy?Â[c !öÝ0Ê‹ø(—;eõ4ª `ÐYý÷ÿ·p©B ѳgO·*Êã|¯²šk‹ÀÊ•+Þî$ …FbðàÁF[X¤»½víZ×´iS¹:ù´¶Új«"Õ¤:.»bÅ qî`NóÎ;ï¸=÷ܳ:^e­Äèq몫®r-4oÞÜÍ›7Ïí¼óÎU†„5ר,˜·ý0vìXY›’rÖ¬YnŸ}ö©¬†¦iE€¤Æ6†@I!Pµ†ï¾ûέ_¿^ªÙÞ:vèu6ÝtÓlO©êãðüþûïe°ýöÛKˆw&@ôøýë_)p.„rûOú“ûúë¯u„ÞÁøÄ3Ý¥üï{å•W$qùâÅ‹Ï÷H¢<Èç7°‰!/ v$ ¼ÀG_ñ³Ÿý,Ýa¶½È!@Dî¸ãŽéëk©’í.ÿøÇ?ÜÑGíÞ|óMwÄG½Òæ›o^¤ÚØe¡ä!ó–[n)ódC$ÿuÔQnùòå’ócÒ¤Iù¿ ]¡(0· ú'žo¾ùFŒ÷ÝwŸ¾ŠR!»¨!`äþóŸÂP@Þ¦ÿýßÿ½Ûo¿ÝµmÛ6'å—C!f)‡»´¡Ž<³äŸB6ÙdY×nØ»á÷õË/¿tNgÖÁq‚~õ¯ý«ûùÏ.Œ¥:—g-+c2Ñ[¬C3QÔi»h?´n[o½µ`‡m+aÈñQâ'š‰]wÝ•ü&uúûýïŸð ›j„,m›=ÏeÂ+°RöóûØcMbûôÓO§ìûá¹½^ &çüáHøN&î°œn£îZOÏÓ™øàƒrR>åòg’=Þ•àøÁTžoôJœvÚi oIøA7û‚ìHC žðÎzïËd¿UÛøpå•W&¼§W=¯V§it|`›§¬œù4 «ãYH×ÊÞ½{'üb"á퉷ß~»Æó’î<ÛžfΜ)ïæoûÛü\ÀJ­€÷üÌ™ÿø(›ûmCå Àø÷ /$<œÜs¯DJÌ™3§rh-1ª¯DMøèÕ„ôHÎoG`{5‰W*'^|ñÅ„7ú$¼³¢`á•Å Õ›ÈFTMX«­ŒC‹-’{ÃZ×;%¼³rlu<Gò8ðÔã±Ç¡·C§kgôkÑõ_ì‰EظlÙ²Äf›m&u=äC2êvŸþùä±´ =è*B­í’ E j]§±lf²ìù;V°vúÎ"v_µmôŸ$²Ç-¶ØB¼Õ‚Ôo¼±EµÑá5êûLDÛì o¿˜ yôû½<ìû÷ïï>ø`7{öl‡UÝ–’rþüùŽaó¬ß€—}ËaÍUn¸áñh!÷ŒI*ŒxŒÓâ„W¿J]qÖóì³ò`Œ¼ûî»%úö¶Ûns»ï¾{AÆþÊC2w-" ±ü¹Ã´¶’N?ýtñfþsÇwÔv¸í/cˆZ>ôÐCt®Ì{aèÖ­›På0nš†@y"À|÷ ƒr0´k×N¨;‡ æºtéRUÑ“èpèãxà¡«&êÏú'žxÂx≮M›6néÒ¥åy“+¤ÖŒCè½T`>æ4*Ü7ö©|ûí·nݺu±¯Ûôóoû[RH>ÖfÍš•ì|}#zG„5)Ïlœx‰;餓$B“ý0@YÙ£G¸Ãm[‰#Pµ†è}™0a‚(ZŸ|òI—îï±Çs H¾(Ñ2ªùwh´¨fh;Æ1oá®vjm?Üá#FŒÃƸqãD1zÀ¸ Ȥ±eË–i¢Z · "€1—ü2PáéßG}ä¼§¦,lBcœìï½÷^¯X¹§£@;öÛo?™O›6-mÈtå"b-ìÌ©Pö¢øëСƒõù%ðh˜á£ð7ñ¤_¿~raèQP6˜T.Œ‡»ì²‹ÃQª}ûöBëJN;ïIkÎR•{Û­eU€ï6y(ï¼óNÉI Mþ>¢µ ØÐD3€lÀ¢¿A+ï™5¤j-PòGÃüË/¿œ²{謢uÔ’%Kd3ÔQ8t”³D¬õÇ_öí*ç{Òк›áÃ#xÅW¸3Ï<ÓwÜqÂk ·qÜŸ§brûî»oŠ…´¡7ÀÎ/.ùð®Â‚®y(ðþÐïÅmié\o<Xè‘Û úŒ3dÐe ÔÈŸÒ©µÕ¤Ú`áâÃY%É/‰~ùcÛa‡æ^zé%1Ð5jÔ( QKLMjG€…¡v¯¾úªëر£EtÕYÅA䬧¸rŸ|ò‰Ûm·ÝÜM7Ý$œÀ×Ð2l>ŠsÓÈûo6ö|°8•°«x‰x$&BÙfµ Þ¨$Üæ|Ú ¾ûï¿¿û¯ÿú¯Eâ¸bÅŠdH+ ð$q:؆¢uò| B Ã3ˆtmÏKXF9}Ÿûï¿ß]ýõÉ0IîÝe—]æÎ?ÿü¬îE9µ×êZÞ@ÍÄ;šN˜,Þ{ï½îœsÎ%‹¢˜¶ÝvÛ§PJ~Þu¼<éGHfK¤F€LB_LÙ:Fa”§¿£ …>/úHþטÄr-Þ/ú1êÁØ¡ýhx>ßËèËÃã(—ñsè×Q§\ää“OQØ®Í~|ã;cBÿ‰p-úŒÃq†Nއ‰~WÇ+˜|Æ/´ò´ýÔìÞ}÷]ÙÆm^ºpf®ñÜsωñlé·‡ùKwŽ4ÄþÕ 1cƸg<Õ ÷rúôéÇïz]ÀNª7fø¨7t :%ø¹çžë&Nœ(T …M*Ƭ‘#G Í_ß¾}e|%âyîܹâlWùX ÊD€w›y«Ï)+Ô8D|Ý:dÈ¡xfþ[M@V­Z%ô~°©@Å|°E‹âŒLÿg’в&EX“±îb½>—D|¼öÚk)•ÁBS€î‰õ—ê19W¸Þ£lÝÆš])kfÖÂ;í´S²|œcUÇG]8 ú1Þ§¨p ë=Öì' ;l èûØ“‹qëÆhYú;jô@ß7uêTwÄGè!±Ÿè ÐrmŒJ\.´Ï¡(ÖàL£ëyŽe¦¬m3–kß³@À[•âét^ñ-Imê›°Ô,Y®–ϧ§+Kx…[vgÂ9,/úøŽ4á=ð’u ¯¥ßG•ð½\3|t¿~F“µ{e\Â+ábÛ†~"ð^¶”ãžï-ðƒOò%™ãСC“Ïw9¶Ëê\yÐÏ’´Œ÷ÖGw$¼Q¹ÖFêñœsóÍ7'üä.åúMÞií ÂOoxMxЬØäoþóŸ~Ò{eXMûêMYZúO’äêµH¶–×ORioÄHø –œGù~ò–ð”_òÛ{ªÉø ãŒ–Í'ã ã Âû®u á;Ûý„WÚ«Çè69ùÇ~Q˜ðÆdý£åx¢ÌÂöÓ§3xOìù>d[ê^ïñÇÏØÏÇžoß놀wH>#ÇOx‡Žº`Gçí¯˜Ë™¯Kx#²ô]¼'&Õƒ€W†$<ÕrÂ;OÈý÷Ž Ÿ+ z°–ŠsTÉ—ðy?äÝöÊÎÄYg•ðŠß mqvÍb cIгÃ*_G1ÏÓ9zLïø’¼”Wº'“•£{óyøžKžáh2ttm¬¿X¯¡Gä;â$ ô–l÷†Ñ階õ3kM}'zOÝýD?ˆNŽqRÅGQ%|^@9‡úéõ£çzgå„w–ÖÓä3<],õG¢‰ÌûÛß&XfÖ¿Þ0[wÖÌ­[·Nx’bJ=Ñ•Æ zct¯ãþÙèQãʱm©`QªJ ¼¼˜u•°ŒèKý½Ê.oÁLyIèx¢J%5b0hòrDËÕß>L:iÀ€á£Hj4'TÌ{+mâƒ>H1|hY™>½§¯(ÒÕ…ˆÎ$Zßl^ØÐÀ‘Îð‘©nì @žÎ -+jøðQ4)÷ƒûã­¶)Û(ƒÎŽN/Ä7Zö¼yóR°  ‰»÷ T±)'–á?žžïå!íEë=Úä¾ðŒ˜¥„Ϥ2²5|xjŠ„÷Ô•çÛG$|p²Iž®$ÅÁ;¢_[ÚDùo¾ùfŠ¡"ÝyË—/—þ˜z«!AË ?½LÊ~`Q‰,0è2.ªá#,/Ýw&vÑrÂc½ÇŽô•a}u›ÖÇ{ÿ$¼—L²¤]ô»QÌBcDX^x½tßÃÅfœaÊç$I©å0i¦m& Cà î1÷Z f +ÕÎÎ,>õ½ À¹*ßÊ© Ð܃³Ï>»öƒíˆŠB€1†ñßG(Ê3ÀÚÇ)CÀ(p:4h8¡ïA?ñÖ[o•ÃØ3€4ÀœŽ. s™$º,-.܇Ñg8Ë86j@﨎Ôá¾Ðð¡sKýTÃÎÚè;u;Ÿ1þ‡ÛxgÐÍ©„Æ‹ð¸¸ï>j#ÁšY%<—z3÷ @”g0Ñóõ3Î`C=»Ãz€Ÿ?Ðé>ÖA>ÊE‹K~¢+ÔcŽ9昃Oò ûRg,LJªHJ ]þMûçî$݈?-V ò!,ÉO^Ý%—\’¤ïÊÁw rŽ¿K._¯¸‘ßþ…“Ð(¯ê(¸^•æŠ2 H‰ÿR9o}•4ÎÙn»íä0è=Âp3=Y¥0 ™|õ¡PžY%œ‹ºPOhB Qyøá‡…Æ‹°D(QQSïZ’|sú)^^Ù%ám!^W]u•P`iºví*ô2ü¦} .”{HûÀ€³8ª…ð>ÂÑo¸ð9¶A7ogˆ7¡uЬ]»ÖyëµP¿pž7Ä ¡®„²êwõÕW'œ&ÈóÇvþN:é$¹œK® ÂõÊQõóž-Â…Ò¥KGh+Ï,a!5N9¶Ñêl€À 'œLÎMt¥¤¢áýf<@¼'Š#„—íôaÂoo0vôIý.ô‚ôœÀô/œç®S§NÉ>š)ÊŠo0pô×ï¼óŽ„ÙR §…BвB!”™q ášÑ¾‘òxgý„MúEêÉûL¿ªBžúLø_iç¨0&AO¨¡ÏºgïL eÒ·#\‹¶ÓïBãE{5›qF1ÒóÃOð³¸z†míÞ½{ò1>Pm#÷:¥á‚ÒŒûgÒ0(Ϥ7¨9Û‡ÏOÃJ¶³s€Î чŠÏ¤ðxG)¹(óNÖ$&Õƒï¹$YOA³ÈüÁ+šªk©!PÁ0'¶¼5opH…Þ£mÛ¶2G×Äz¤M›6²¨y¦mi(P±3Ö arr~3ÿ€Ò á¡»& ÷ñ›µúG„ù=ôÂéý#yý-Zä:wî,º3tCû&Mš$k>…!c 7þË>Ög¬ût­*ƒèNÑ B}Å:]:CÄ;8t„º¾ N“ãYÿ¡«Ó5µ7ʸ~ýú ÅVxløú@oÏ;p:@®ÏÚ–DïºÆá¹Ödï7N&•sžóPh#úD„6A±¥kßð8û^¼R *¥.ÑV±ºù‡W¬ X´Œ¸¨†02B÷㩊5”r£ejÙáy~\#Ê"Ž>+Œ˜ÐH-Ï+¡’4Wá5±TbéÔ6jô‚žÇg”– K%â;ñæç\ô‘}ì×¶ëþ¸Ï°þé">º‡e„ÑJ– ÎáyaÄVa¬ÃÔ=Š¥^WïiB5UÂç"Œô`?ax„Rn4 HÏëTnQ^ñ+žJ3ƒ—6a‘~ðIx…°6Ñ> ’D€> ÞÏl#>åØè9Þ@‘ŒƒK#¾Â†Y ‘ õAÿª”~‘$ÔPá9|g;×ãÈ ênƒzÊOœRN ©³âÊ ë«‘$~b›ñAÝüD/¥ÜhÄ„z´„uŠFu„ûÀ€ñ Û uH¹˜ÿbF”ýJX˜ÄáFߌ1Bè•ð®ÕkÆaÖ)¬g´Nö;;¼Á-uçw–}Dcv­.¯£xOx‡èMŠƒýÙ^{í%÷áÊ+¯,N%ìªEGJ ¯DIY_½RVCÀh0Ì£¡ UöæŸ^\c~Ýà •iRØF ÛbÂúÈ&d‚Þ ýFEp,Âó e°®Ku;ûXG¢ïÒ}Q:-Žz_÷‡ç² Ëi©Â¨h4Èg¦Ö7¤Œ ÏÕkG? -+úF¹>ý_TB¼4êÃ;ò ¥?׋«wX.ì@°™ä‹øðO]¶â•îIOÛè9^Ù.É®£ÛñäõJ¬”Í“'O/6ò=Œ¨Ðñø"!–O’ÑF½ãI êz¸|öéÓÇí¶Ûnòýž{îIFw°$·XN’çéq²áÇ´O£¨G®çÍ“$=Dƒ x4ûÇïdz~øÀBšÎ›r`Œ;Öy£QRB‰RÁÛ8œÓ•‡…xöìÙÎóíJäBôbÅÒ‹€[:K,˜øDŽ3¬áXÅ9Ë2Vߨ„u"ÙIvK]ˆ˜"IùÁ,¸áí ñZ›?¾<ãúü”z[¬~†@Cà]Ç“…>Â/h\¯^½’ÑaÙÞ°™øNßJDï‚×'}ET¼b_¼±½r2vLòÊËçyÅ}2¹ž(ô‘*ôQZ_¶ùÉaòX=†v0VEû:Æ)’òê$áü0ªCË‹~q©ã u%‘Þ¯Qñ ód„ 1qãÉÜ5ºEÏ÷“åXi9†:âq„§N(xãéñØŒŽáqö=3D\~ùåâ½ErÏ:XÒøÌe¯F|ðšú¥þýûËʼnŠÒñ 8µ±« Ö~Dj2v™†@å À<š¨eŸÃGt Ì?Ñ#ÁŒ@„sµ‹E€ö ð4äÉ_Ö¡<üy6©‰º½«|ßqÇEÅÖ{è¨XOÂ.€„Çʆà:MÆ´0™9»Ñ¹Á˜à木Po ˆnNùnýYTX·¢D¨':ÂlE£DÒ“z=ô[M›6MFt„LJõ+ôz0*hD5zÚ§ìœËq=ƒþQЇåÚ÷ú!PS«P¿rÊþ,Bʽǭ¼x¼|q¼,ÞRÛVBë{PÌFßQJ# ÏÅž ÓÒÓ1¦øäÐIE“n÷\tBiÂof(lTBš«-Z$išt?Ÿ ¸é»(ééìÊ…î)Ÿg\áz„ØÅ)ŸÕS¡V¢3 1ÔEDTè¨âÊcáÙ¼ysתU+QÎø$C…Šϵ'»÷H–âÂëDËsœKøþÜsϹG}4åp·qãÆ Õ ç‚sœb/,·˜ß=W¾„ø1°Üzë­2¨ðÝ[½eBײeKSnóÙµ‹‚“UâóÝ{¤¼ç¼÷„À^ýõɾ”Iž£•nÒ¤I¬òÅ>†lÏ·ZcÜÁ`××Q¦tHö“ÔA!õ“R¥wÒzðIß·}ÝÕÐÀ˜¥Æ^öÕGâ Zãœ_Ö>U÷§3˜èþð“~Z1-oذa‚”ƒŒ™L>i‹‚8#LX–}OcXïÞ½å™Åé‚÷tÏhúRlO!0ÃG!P®ýPë1ÏÇQFij?ËŽ0 CÀ(˜¢F·=zh… vzûí·Ë¡ y¯£@ò±\CÄYg%ß¡FçRY1A·ƒ„ÔXèÚÐ…©BŸý>N=õT¾ÖtqgœqFí¬³ÐÇA鄳úOíè  :7t¯è53 º<¥á C7Hê«ôëá1úëCÉì`dó/ÖïPfE…µ'º<„ïP$Guz8㈈#5ÂZHõ§>ŸJò:à‡N i®ÔˆD_a’~páÏMYe[ Ñ<ìqÞ÷Ù6Ї9[eå ça®ëNÑŽò†v`¡åeÅ O1^H:2>1šÀWW%ŽO.›Tl1ÕµÎÙâ¨Ç5jÔ(­’M ?Ã:ÑiR¿O?ý4ÙÁÔµ½”Rí‚ .^ÀðZõýNg>#p –«ðü’·ÏsG¶ 8ž–Ar (41ªImÖPàÕ¢ýD}ú- -éO{"Jè‹n¼ñF1v3áD­“1<Ó8Ò•»í¶Û&Ç5€¤;6ÝvxR£øféÓㄱHÇ‡Š•›©ýzLøÉDc 㦖Eô *Œ|BÊ:ã¢çWû'ªÏx/'žç;î¸Ã1¾›”&fø(û ƒ2yâˆDÃphb†€!PYM=|øpaù Ï÷”^$ §#S¡³$ „dGxeÄQné±Ù|b„Âûµ‰÷êŽûc ‚:ŠN¸T/Þ)XþQb\Ã`Hx!ƒÖ¹çž›¤¡)•:[= |"àóL$“lÓg0AŒ Qqï¸nÛ†H2ÂeÄh9 ýM_¢†œô•ôÕ!Í­úö½ ©Æz7â¢ð´l¼aTr1ŽÒV&¶Dyb¸3ú ‚7Rxm­ƒ}fFÀóX‹‘ 1’ų¸Ð›ÌgÚÞb `†b MæëŒ x£É/ãϰ­†€!`å† U˜5 ¾")4 e•F]PýT©ã@, zîî:7tNÎcèspF dBA kVt™èOyV•e…ù ë·º:Àa¼‚Ò14zðN gÃè€qYC]/ëÞ¨@;Gd­êÛ;ì07wîÜäa€x?3 ”T°ÿèº>úItÐC#`ŽèÁºg>ÁRi®À@)±2]Ûöe€>²Ç*gGbMòˆG GÁ‚* žºðûbôÐ|Jw…g>üäHH‡½&/X:…´*ZLÇi™(“x™y±”Zê­Ç„ŸtF\ƒ—>“¨§oô˜ èxÃë«'oô<¶«²M÷ñohaÔ/>±(½|Ât±ˆ·oß^:,=§®Ÿtà(L‰þáÞÄýú†"5“°®×­ïñàDhhÖ¬Y#Æ;¼Ç ‰Ä’ %d}ëgçÅ@€úYíO8ᄆ?Œ„ǽ㺠Ê8râÐÿ2‰ŒöIѶÁ‡×}Tº¾-zŽþ¾á†’^+„ü†eà1§øç\<Óõ¿ص™ŽÓ:Ä}¶nÝ:9^ äÓè豌Ÿz­îÝ»§­oô¼Ú~Ó'ãEÆDD‹*xgÕ„B8lgmåÙþøtqÆ`>sÔQGÉ8‘îù2¼J¼Ít´§¥QËꨋäŽ;JcñÄ41 CÀ¨L˜ÿ[Þìî­@²Ã©.G¡ôǘÁÚëÅ_tC‡•ÓqnRWñ%?‚®’ü4Ûk3ÈÁ? ,¡cÕ9b¹å–[$N6寭QYO£#DÒåËàÝ ™Jô]Ôv 9Lâòh¹P…ÁØ ëúè'k{ÖÜäMVÁù™¼Ë¹}ÐàPŒÃ³‡×?šä3|äÏ:—†"Ei¯Â“±pòò“lœd?µ)Âô\^zB…<üðâ¤æ¥E‰³ÝvÛ¥U^ñBóbÆÉœ9s’/# n ‹;V·r¨”Xk1¤¸í°r"X7Ã(ìw(“‰–*ùù­BO4Ø^{í•ì÷t_mŸmµ"”~¸±Wƒ3¼¦ÚgFË?~|Zƒ=å¨1Ÿ~NÛ-#ÛßÙ^+ÛòÒ‡ /øݧX3þ0^bü çÆ~“º#0pà@y†y7HÒŒ3‚Ié"Àœ‡ Ä ¥qŸ˜k!Då©3NiÔÌja†€!K˜;[Þì5HöXÕv$ëVò"è%Ñ›1g©­´ ÖLépnf}«‘aþ=¶¶OÖŸ]›¬"Ô%ô{™rsp,ˆj4ˆž‹ŽA7ˆŽ0A‰ÁG#MX£ã€¢ueÍz/ôzÑ5¼î#šÌÚ´i#©ä$ÿ¼Ð¯!è_¡Vš+úÖë&¹EÀ Ïl"r û%—\’|‘øþꫯ¦2…—Dx¹ê¢H"<’+:,Rk×®•òC¬” þøƒ—™Î+JçDèâ”lÃB †`ðŠ^¸p¡X4ÃcøÎB Mæ…Õe`œ H–$:]”wz>Q tn\_ó¶Äጒ‹<!å†Ñ#áuÂïXÂõ¼¸¶ë±`¢êU%F)Ušêñ|RWŒ]<¹ í Ë®Ëw’9µk×NBpºví*žætþÜ£º<—u¹¶k”µéžo”ü:urO?ýtÒ0I4íïx×Cʨ3fÄF¼|òÉ’#‡wþžIS˜ø™ýQ)@ú@UÒ§3T¤Ãã58“AŒÚôyÔ—~3]›‰x OˆqB#åFÇê‘M4ý‰ö•é®Eî&…=H¤FœtíÍ´ýÿø‡ô³à]ŸoÂsÂz…Ûí{f‡#—g‹ÌÒ=[™K²½…B€…®ö+Êá\¨kÛuâ`> =c!`†@e#Àœ½Æ=÷Ü#¬š÷ã‘G©ì†×³uf©'pÁi(ñ™o¨àüƒ¹»®ÍtŸRZqL¸FE¿¥z7=¶¶OÖs°Â Ñò؆A=©Ò?±-NX£# …úã|ˆ“.Â7lcxlÜwèí'Mš”Ü…³4:JÊEp’S# ú<ôzQ¡î^x¡¬5¡SGCŽcM„AŒÙ÷ä“O ‹8bø(Æ—h{Êþ·¿yU) ,HødÌ<¹ ¯¸Nø‡;á9Ö3þqÌÈ‘#>K0 ËðÆ„9k`yÞyç%|h•\Ç+Éd¿_X&<­‰lãúþ¥I°Ï¿ü ÿâ&<UrŸ÷ÀMx%P"<‡ã}Zk…Âò¹žC/imÂ'¤ ½÷ZbðàÁ …’,Ÿã'-$Äý¾ƒHøÎAêái‡rHò|Úà±õcŸ7¾$¼"&¶[ë‡5û|ÄGÂG«$h/Ÿ-Z´Hi÷ÃG¬È~.ì)¬>BDêä•£R0ãr/ÃújÙœÇså-ÑɶdsŸ9/×òî»ïJ›½•_êâ;æ„÷lOx¥§`—ëëYy†@© À;êÃK“ï ϽOLžòçÃTSÞúoTNøÈ±”fxƒsÂOZ’ey©„7nÈ1ô[á>otHx%¼ì£~Ñ“<}ýë_¥ñ2^iŸå“nK?ž–•R¡àG´Ê›5k–ŒAÁar]o’ºP'úŽóÆq¹®7X'¼!%YWoHIöƒô—a;Øç=Z¤LW_Ÿø:¡ýŽÖ‰ñ„²¢˜ù°ç$žéÊK×–8ܸž9N–É5½1+9~³ßOlÃ"í{¸W:oðÆ©„7X¥9Ò6—ÞA%ù®—R½ª½.Þˆ(÷Å/²kŒ3ÕŽµß0 JEÀ+‚>OZbŸ}öIŽÍÞ9*Áv“ô OCOÆÎ+í;ï$•ð”º5tLéK©¾=è YëèÏ]T'§¨ ÃóìÉc½²>Î+*¬_/½ôR9—êPõ¸p?×E'‰Ž]gE}”Ö‡Ot¤ÞI[Þo îGßê¿ežäÚ>Ò"Y?ô›è$UÂsãê¥ÇQ΄ ’åxQ‚õ<ÂÚ&¼úÖȬÑ £Öº¥Ã'Z>ÇgÂ]ëeŸõC«UUJh´Ð‡2›ÏP–QÀG•Üq×N§Äëîæ…Êwʦ3òaX53ÄÕ…m-|TEJQKXgDi…A)]™Ñíq8F ÑsÂß>úhŠr%¾Ëêújø Þt\¡4¼Fºït~t‚q×Ô}u)ÛsŠ’s !(%œTÑI;¹¿K—.­¡-D}ì†@¡@^×÷>Îè¡õöù4R éúŸ·BO‘Ϩ’?î<Œ ÞCDŽ Ù>ÂãµlI’R~0! û=6î34DhA¡áƒs´Îáõ£õõQ#É…JÜu´&‹*™ÊÓcBLÕðÁ¾|0B1ݵt;Ý8ç-ß>@€¹çNøÈŸ„ç¯5cQ=Ì{xÞyMJjHDéeb†€!P°.a}îd|Fê½ÎÍžÅí7H ‡øèˆ¤34sÁ#<2é”&_qÖ›:ujrí„Ã/ºÇ¨„†8Ï7ú.]keó©FŒÐxQÛyѶ„çÆÕ+lGŸÄ<3òwøÆ‰¹¶ë£ ÃÃò1.…çs¬7C„r÷½j©®¼&«<þAL¯ØORydSaR„1!!̓7^HH|o„ŒEÅ¿Džå_TÙžÖ!zžþ†{> 7ëÒ¥‹$ÊÑýqŸðÆsy@¢ââî®»îr{ï½wÊ.ßé98ùT¨[ØhHÝ"Ì,®\=„Jäù€Ïޝtâ£Qœ·„ÖØ ž¾ãZ¦ðú$"O†ïÔjœÃohqçœsŽ$<‚kO¯ þ>EBÍ¢'RWÂÝ #Y¼ ¡–ܧ¦M›º8 ™džýºï”=þ|÷Ûßþ–Ÿ5DËoÕªUÊ3SãÀm Ç ÷‡û…ô/|'™ùâÅ‹p©×»’£êY1†@É!@ꀄªŽ>PûøhEI7; Õâ„þêªhß躧ttr” 5!t\H8>0.Õ&„-Ÿxâ‰É¾šzÔF™E¿Õ¹sçØ¾àæ›o–|Â~CñFÓjDêF]Ãúú¸ä˜Ê¹„+_ýõiëC=¼ã@ }VX|©á õÙvÛm“áÚ!}Õgœá|¤‰ðØê±ÑOBé#u|ˆî·ß3fŒó^c‚5¸FŸí GÚ·RC€>¡ÿ1)èÏ @E ¯õ âÒ©œÕÄ0 C o0¿eÍAîôЇ>ðÀ’/@)¾óvñ2/Ø(°êv¡kFˆ0ï áy:º%ô}P4©¤ËïÁ=È´.åùFÏ„Î)NÐù¡ßƒžk¦ŽCGÖm$F'zضkbt•´5xC‡5jTr7T÷På#M|j°C—'´\mèBÓQ3Sé"§s<ºÅ8Úè¸òm[Ýøl(u;ÅŽÎ5ÞsÕy_áŒCq„¢ ¡ ¸Ð1ªÐQ` C‰Sþ“_ƒ<pçaÜ€—®gÊ >Þ:­â,x„¼S`᥎r*^Þªë|„‰$9‡³¡­$G1*¯ô>Ï?ÿ|1PÀBÅ[B%œ€,1ðPNœ²+,‡ÄAÞëW8¬9‡Å}ºNHσ‹Ï[s…ŸÎ›sÀGëÊ~ÚNVaÛá-ôžÈR/ê¦çhÙ|†u‚{…Ê̸cÃórñ<§OŸîPZz‹¼ÜGOÿ殼òJÉ_UbæâšV†!P­ø Å"ýý} Iãj #9è«x'™˜æbBO)XúЗ_~YŒµaÿE½à,ÅØ1”~‚Éým¡océ½ú3ö½Œô÷Ô™6dÛ·qU«VÉ8ÄXVIÔØSnuÝÏøDn-Æãõë×KéÓå-©kùÕp¼§dpžJ@¸j‡{~j tµÔª—ri#s-òõéÓçÿ³wàRY߯Ýuu+Ѝ`@L˜ÅD’  ¢ATP FE”5`&¨`@%(ˆ‚ ˆňpM0€º¸®9‡]}Ÿ¯¿ú÷­Ùš¾3s'O÷Ì9ÏsïÌt¨ðïîêªþ'‰×8.í¯ævâ ‚ò‹±”¼L={ö¬æîjßE@PB s ïh檼0†ãìªR?XW Ä¶´ë¢b]‚âùj‡ê/D(ÜßèéÐï±Öãþö \?ra°®@oȵ´tÔ²&µ %f¾Õ²^t:LÖ¬µ}ƒGÉo f~F^eÖíiпòWŸ®CJÿþýEË:Ã&ú@•â#P7Ô øuh‰õ ÀCí?ØõžÕn`¡´BHÞ¼yózÏcÀA™…r-UTEºPdec¨A©æteÕ·åõ1 ä:(äsý G¹ømdº¾×7ÐQN>mòëÏç;Ž(/~˜`J"ÓAƒK+–Ñ2ŸO}zŽ" ñŒñ½c²Å„HþŠ)<óD¢8ÏaÚ6z„ëc2‰ƒ $mÙ ãu>FT&¶Î&Ûº 9Žþï´ÓN…QÓçb³´oÆæ1mÚ´‘÷‰=âuKhÄGt¯Ž1'žx¢¤ˆÌUÃGt¯•¶LPR €¾ïuF‰~&âÃæ4ïóóÎ;¯(NQ¥hwTÊô#@|Ñ(ÍÕRÙ+Åý SK:áúeZ³¶ÍU‡™®®|¶chIÇæ’©<œÐ]òvÊÈU¿™©lÝ—ŒÀï“꯸#€b Å+V¬îౚ)Ì,î}Öög‡/"öÙg‰¢Y¶l™Ü—\r‰Y¼x±(ªô>ÉK=Jˆ#ŒÈ¥—^j0t#AÓQqÉúOȨ߈˜ÁKküøñCÒ³(N©jø¨è9Tyæ™gŠã d¢«TE@Pj ¢§[¶l)TÔ0vàÅTåD+«Ô€oY¸p¡DÌà†`S êUQJ‰kòåË—(³‘0¥V)ë®Õ²ÕðQEWŠ"xâP<ؤ;Ò3ÂùxTj^àpßã%ˆ‘ƒhhkÈSw½ã9¬m”´÷Š@õ"@X<¹HˆÀ ‡†£'ìÚµkFªªêED{V,Ëž:uªpOßxãÝÄ}¦/ ¼D P‰D£”AˆúPQE@¨=˜_iÞ¯»@ ÇPKÈŒlP­aÄ„qúRdà 74­ZµÊ½@=#kÔð‘5TÑ?ð­·ÞË¿k)´R(»yÒ ÔVÎ ØQ]¥;¶RÛá·wJºJµ!®õ¾úê«’Ãåæ‚ ¤}úô^D΄ө‚*®WWÛ­dTDDúN>îïã;“3wŽ£º £¿k¢Î=÷\áÕåÝÒ£GÉcSۨį÷pÿøãÒpòº©Drñ!3gΔÜlÑl¥¶*.à-z¦?(qaˆš°v¥Ý´ÏÑvF­ÚE ”ÀÒ@>5O ¡%_ÆqèÎU²G@ Ùc¥#Ñ ¢#Œ›ð¾"Ï®/»ï¾{"òÃ߮ߋ‹€&7/.ž-méÒ¥þW9=Z·nÅç‘HÈ%ÜÍ&7E9;Ê„›‰-ƒ„Òve‡<×ôÚk¯53fÌdK79ä ‡…°¾DðÙÕ¢G)Š@\`¢5yòdIˆ‡(ÉÍ3Å]¿ˆcìEЇ™J2ú‰ãD·nÝÌܹsMÓ¦MÍsÏ=g6ÝtS&†Àw½Ç{H®œ`P¨D Ñäà{ï½÷ QÞDu«(ù €ÒhäÈ‘B}YßùäÀâ¾{â‰'LãÆë;¼,û¡õ!÷ËÏõæ›o–¥^­DˆÌÅx‡»¼Dx?@AŠW¹JnhôÜðªÔѬk1|`çžGGa÷ñÇ ý<÷ëk”óɇ‡þF©jøˆÒÕж("À ®À믿>ᡵß~û‰G†0Uf°ž®(Š€"  >\¨Yt£k×®.²czoÿëðÚ«>ú(¦½¨f“CçÔSOÃõªU« †lE W~ýõWsóÍ7‹r4Ûs¹×&NœhŽ=öØlO)Ùq޾S %ƒX Ž(S¡«$ÔC=dH}Øa‡™[o½UhncÔ•È4U ‘¹ÚE ((ÕUQ`ÔBÊ"@¸úèÑ£%ʇœDÉ6‡2…TûöíÕèQÙK¤µ+Š€"P5\ÃÑC‡^Zõ,ŒïåÕÄæñ¹v$±%_‘Úwß}w|®-,4¸—V®\iˆçÏ}¿ð íþå—_Ì)§œ"ÆÄFý¢(GÀåý˜2eŠ2dˆä\#ÿ‰ºßy犷/Ž P ¬8^5m³"5|¤ÇF÷(‘G€EÈwÞ)J§Áƒ›+VHÈܤI“„väÐC5k¬±Fäû¡ TE@ˆä‹éׯŸØÛ´ic ¤ï™x\º´­TÃGZh"·:„H»n¼ñÆÈµO?Pð‘ÊÂí¶ÛNþÜwhs?ÿüóu2ë(t¢˜÷#~Èk‹â"°ÞzëiÞâB*Ž£{ï½·Á´páBÓ½{wÉ+ôä“OJNŒKäLTQh# †h_m"Â/gÍše ±bŒ7GÆ …«÷…^žOå L nTE@(”^ï¾û®a µ"I5Uâ€>âuýN;í4ÉÕÆÜ勊"PÐädJ¾ÑFŸH¿#F$ªä|rn@?•É ‚Ñœc8>•P4=cÇŽ5×]w¹çž{$Çcªcu›" ¤Fš«£Ž:JvØa%âñÇ/Ï,Ô¤*ù!MÈ‹/¾˜_áz–" ”5|”b­@(ÿïÿý?óÔSOIè*t/¿ü²$C:ûì³Å aذa‘I}úÈ;Ư;éDý¡()€z´eË–bü€ýJltè00ªä€oÁÙÔéܹ³9úè£@òÇWÏTJ…€>J…¬–«E‹™#Ž8BR Ÿç 'œ`xéÞpà ¦Y³fª€*2æZœ" (ŠÀÿ"@T´V?ÿü³(¤P¼²T‰?ñ¿kˆÃ òøãKN†øõ@['P¤B÷âcÊT„õˆûÌÆxºúê«Ëñü# d›m¶1o½õ–l£¬õ×_?A­ÅÆŸ~úÉôìÙÓ,^¼XŽÑŠ€"P?š÷£~Œ 9‚ùï>ûì#XÎÂX5cÆ £BÕsÒ  †Òથ*EC€ÅŽ®]»J8žV@0~L˜0Áì´ÓNF“Ê n-HPE „ôýû÷7Ÿ|ò‰Ùzë­…2„¸*ñGŠ8ü‘l”–ñïquô…˾ûî+^÷šë£:®iÔ{±Új«™]vÙEš‰á£EXœ1$¼=ÕoÊøâ‹/è?þøãmeAÙƒ@ñûÄO¤*F·)Š@4ïGpаË7€Ì™3ÇtêÔIŒµj)¸Z„"PDÔðQD0µ(E ˜¬\¹ÒœsÎ9¦C‡fÊ”)²ÀØÿýÅ»ª<¯ÔÛ¶˜ˆkYŠ€" (©5j”Y°`ùýï/÷F¥:L·Åh® ÑDÔð¯ ȹ뮻”¾$^—N[kÀ e/B®(7nÜX~ó…íĉå7†iÓ¦%öéE@ÈÍû‘=Vù‰NæÀ4³gÏ6jÉE=O(jø(¶Z²"Ÿ~ú©¹üòËMëÖ­ ^|_}õ•9HfþàƒŠ'E@PE Ô¼ôÒKføðᆄ¶C‡5­ZµÒ(ÃRƒ^ÆòÍÕÚk¯D/SÆ&hUy"@ôo“&M„~Ž`E NArä‘GJîB”…;î¸cRó‰!ˆr„¨(Š@~hÞüpËõ¬µÖZK ¹‚¦Ç+e@@ eY«P²A€ÉýèÑ£E©„áã_ÿú—ÐXMš4I»?üpƒbBEPʃQW_ýu"g±kå™ÇÛšÅ}¶‚ò™v9ílÏÓã|øá‡L¿~ý ŸmÚ´‘k¬±F>Eé9EÀ>¶Új«ˆ¶P›•Ç.×ɦ¡-SQâ„^ÒD³ï·ß~2ß"²ðæ›o6'Ÿ|²Ùm·ÝLÓ¦MÝÉ…F+q’~Qš÷#EÉ¿¨¤äkŠ@N¨á#'¸ô`E øüòË/æÎ;ï”Áƒ‹RsË-·”„åóçÏ7}ûöU/Ìâî%*)À°0}útÓ±cGÓ¼yssÐA™Ï>û,å±…lœ9s¦”¿ÝvÛ™÷Þ{/+ã Ê=÷ÜS’HšE ”œþùæÝwßÊ‘qãÆ I)ëӲˀ3|(ÍUù±/F§œrŠ!ßΪU«Ìý÷ß_Œ"µ E %8\øIÈ1¼*ëþö·¿ bÆ MûöíŘǺÈÕUhz¾" $# y?’ñ(å/5€”]-[È5|d•©øj¡¯ÂËiÀ€æwÞ1Lú/½ôRƒRóÜsÏ•ßE­T S”,_¾Ü\rÉ%fÛm·5Ç{¬™7ožùõ×_M‹-L1=ÜQNAí@Tð²nРÁ +“‚ÆЛoAE(÷ÝwŸ¹çž{$©,´‹<õݧ¥j‹–[:ÔðQ:lËQòl 2Ô5f̘rT©uÔ aÚ)Þ›nºiVH`Üøûßÿ^çXæXP´sÌ1‰}”Ë=óÉ•W^)¿‰úEPІ€æý(”Y¤¬`Òƒ’! Z“’A«+©ÀcEUš@IDATê©§ž2;w6½{÷–Ä~¼ (‰ý† –”Ü/u)ºUP E€Åø“O>izöìivÞygsÕUW™?þج³Î:¢H"·” &Š!Dyì½÷Þâ•K´Æ 'œ`ž{î9³É&›d,ÅäÁ,ž÷(zè!ÓÔÒ?¨:#lº³¸ç $¹xOõèÑÃ@I¢R}¨á#þ×ôÌ3Ï”N,Z´ÈðÞRQŠÀþósÝu×I±DzÄ7Û9Fò†åçŸ6§Ÿ~ºlÆÁäÚk¯º6Ž}úé§ÍÅ_, áóô·" ÍûQs)E ¹ ¥Ç*ÅC@ ÅÃRKRêE€E)É(É׋”ŸDx\ýõ¦Y³fY/$ê­LP”|úé§â‹±ƒ( P\‘XsäÈ‘æƒ>ú9h¥ŠAåðÉ'Ÿ˜£Ž:J¢<ÈÝ¥ÌÃ?l&Nœh6Úh£”mtQJvëÖM"=0zpÞ^{í¥Ñ ý,:åú÷ïo¸oy'ñL@¥£R¨á#þוwŠhD£>â=£Ö¶Þ~ûmC„÷²©$Ur"ÜçÎ[çpŸ®ïó /¼0inŽ2©S€nP‚@±Ùf›™)S¦˜!C†H”/¿]ºt‘µGÁh)PHJXt£"P2ÔðQ2hµ`Eà¿ÀS‹£k×®â­çètóÞi§ ^*Š€"PX@¿øâ‹>ôí·ß^¨ä–.]*^ì<‹,Ê/^lȳƒ1"[OÆúZ‹Q¥eË–Bkç¢<^yå1fÔgTQ£G}èêþR 0jÔ(C‚Y¨Ô0Î5jÔ¨Õh™AàŸÿü§´„Üb*ñEàœsΑÆóÎq×4¾½Ñ–—æ;éæ#Ì[ˆŒeƒð^hj#NY·8a~…¸ |:áûo¼aüq·)ñ ÕU&ùé§ŸÌqÇ—8$•Q%±S¿(Š@AhÞ‚àËûd5€ä ž¨ä„€>r‚KVrC`åÊ•BaÕ¡Cñ¤øþûïÍþûï/ €©S§ í҇䆩­ä‚Àwß}'ÑDI´mÛÖÜqdžçÜÐ(,[¶L">:uêdV_}õ\ŠÎxl!Q¬FŒðêÎ!MΈ#$jèС¦U«Vj”/ÖQ(J™~øAš¢ÉÍ£pEòoô©õ¡p;vlþé™5‡À?þhÚµk'Q©äã¯W¯^¦M›6bÁiËɺë®+N$î7Ÿ8n9£ó+ #_~ù¥Ð[=Ú´nÝÚ?<ñÝ$$êvøðáb<á&B/t"â0ŸÃqÌZÜvýTâ *ïGŸ>}d^èGh§6-ÅG@ >ú](>¿³“‡ÿuÓ(~ÙZ¢"PÓÏY’#pûBÊâtíµ×®il´óŠ@©€–áÎ;ïƒ#Ê=^u,Î1Böë×Orf0É,…àqKÎh­ð¤<þøãe,¨ÖʵE ý,'(ÀQt-Y²D sæÌ1xªT/D¹í¾ûîâÅâQ1â}­Çg `6ÜpC™{úŠåx÷L[_lˆ¶`rþùçg]4ïƒåË—›† &ƒ¡‚÷Åa‡–´=Õ '¼c0´2æ\~ùåbðHulªmœÿÚk¯É=ý'(DŸ¼ù曩×mŠ€"¬™ˆ$y1ˆð|ßzë­EË{˜G³jêr =ûì³’[ †¢çÿŽ>úh1D1þ©(Š@öhÄGöX鑊@Öžò£òI“&™'žxBr{¨Ñ#kõ@E 'XDÃKÛ±cGQæÝpà âuˆÁáì³Ï–Å6t $3/…уÜ!xFá-™k.×Q5z8$ô³Ü {÷ÝwÅØ•–Ju#Àxƒ4iÒDUp©yÿ4hÐ@<íï¾ûî*è‘v¡”d3‚‹e .4D\„´cˆ qÉÏý6IËü‹ÜiaA™zÙe—‰r5¼Gr°±žzì±Ç’vS¦OGê¢M’ÒŠ€"7<_.ï¹wÈÓ£y?ò†3¯ÓE€<ÿüó†èlE@È øÈ /=ZÈ<)¿þúkQÀ²UQÒ €â=÷Ü#ù ˜rüÒDY|òÉbè(õ¨Aƒèí\£<8G  R XÐ’‡ ³É“'‹ñN½ÿ+q%Ê['ß(%¡¢a1­.ºè"ñ 'á9‘*Š@9`þÍï¢17nœ6ˆß."É»†ÂƒÈ6ÛlcÖXcÄ!@P¾bôÈÆ`“8Q¿(Š@AàTÆç´ÓN3ß~û­Dn¹åÓ½{÷‚ÊÕ“sC€1õwÞÝôÌš67üôhE@ z(Š€" Ä¨žyæ3aÂóÈ#e€Šdå§Ÿ~ºiÑ¢EV îB:O” ÑgÍše~ùåYÜ~ûí¦K—.9Õ­FB®‚ž[Ü{P\¡Ø»wo3~üx£9… Ÿs»ðÒ>æ˜cÌ´iÓâÓpmiZxŽ›5k&¹>ˆ4†^UEPE@Èò{@1×·o_Q¾³Ö"‘ª€ÏU=OPʉ€R]•m­KPE  04,sçw<ÕñF»•œ:Ð)ÛcÏ=÷ÌÉðO£ð€ÂSzêÔ©Ò”‡$âìÖ­[Nu«Ñ#ôõœb Àb¶ÿþ†H)”¥#GŽT£G1€I}ô‘´T›Çä‚eÑÌÍ7ß\¨‰8t̘1Yœ¡‡(Š€" (éÀ¸Ñ²eK¡í>ôÐCÍ÷ßo† &Î2ß|óMúu" (A@ ¹Ú E@PÔdoÑ¢EB[µÝvÛ ¥”PñÝ1wî\µžGäóð¹ŸS—XØV—ËCÇŠ+„ÆŒbpÉU¨F®…ž]xû/X°@(I&Nœh5jTXzv¬`üAr·bÕÉl,ôe9­xWª(Š€" (…  y? AOÏUJ# †J_­_PE %$Ò¼ãŽ;$z£]»vbX€z«­¶2—\r‰Y¶l™™9s¦ëÞçrHº(#|¸D+‘ U«VJYPl#^ž>"~òlÞ¾ûîköÙgƒÓÀ7Þ˜g)zš" (Š€"Œ4W—]v™D»¯»îºæ•W^1x ™={vòúKP! 9>"t1´)Š€" (Æ,Y²DŒwß}·ùꫯDyC˜uÇŽM¿~ý„JªÜÉ-Såò€rëàƒÎÙàÁ5V£‡Þé•DbÛ¶mÍ[o½%9sæH~œJ¶Ië./äI"y0Ɉßx㠳뮻–·Z[I˜>}ºéÕ«—$‚þøãMƒ JZŸ®(Š€"P;hÞÚ¹ÖÚSE PÃG5\Eíƒ" (1G€Äà$)¿í¶Û$OƯ¿þ*=ÚxãEy3`À³í¶ÛVÄ#(Aƒ™•+WJ›P&á)—z>´ZjôˆùÍZÍ?õÔSͤI“ÌÚk¯-ÏÛ;ì×½\PÔl éÛzë­¥ÿpt¯¿þú5‹E5vü·ß~“èÈþóŸfĈæ‚ .¨ÆnjŸE@P*„Q…¼cÎ<óLÃZéOú“9ì°ÃÌ­·ÞªÆö ]­VPR# †Ô¸èVE@P2 °|ùrsÏ=÷ò `ïcšŽ“N:É}ôÑóD/v”ýR£(¨Tûî»Ïœp æçŸ6“'O6Ç{¬äË©d›´îò#0þ|Ó¡C1~ýøãåo€ÖXr0x\xá…b¤ÇеÚj«•¼N­@PE ¶ Ùùµ×^kF%N4-Z´ùåŽ;îX[@hoE ²¨á#²—F¦(Š@u"ÅÊ3ÏhÎ;ï¼¢EyÐA5zTçý§^q¶iÓÆ¬ZµÊôîÝ[žÁ5×\3N]ж )S¦ˆl§vzÁ"«ÅD¨"‰L$¢꫞={F¨uÚE@PjA€µQ¬á¾ýö[³Ùf›™[n¹ÅtïÞ½Zº¨ýP# ÉÍc|ñ´éŠ€" Ä "(È‹¢í ƒ2³fÍ£A×]w!úÃ%3¯”у6öéÓG¼àñmÒ¤‰™1c†äÙb‹-ò¦R£GœîÔêl+|ÌP\YÕ¬Y33räH£Fê¼ÖÙôŠ1 a\S©N6ÜpC1nÑ»1cÆTg'µWŠ€" (Gš«£Ž:Ê<ñÄúTlXOyÈüSEPJ" †J¢¯u+Š€"PåÀÿºhÑ"¡­Ún»í$WƲeË„Z‡è޹sçšÅ‹KtEÆ ó6,F¢üðC9hgE šøÃþ`Z¶l)ÆC=Ô@5lØ0‰0&—˜Š" (•B@©®*…¼Ö«(Š@#Àb\$+ã7Œ[ðái~ÜqÇ™~ýúI4JØJK)ry¸>©ÑÃ!¡Ÿ•DE]çÎ…~àÒK/5C‡5k¬±F%›¤uWæ˜cÌ´iÓJXSuM_"V™ß¤æ4­Zµ§Ž¸Œ±.·Zæcép­äv¶l°8æ@÷ÑGeÕœÿüç?YÉ;wÝu×5¯½öšÙf›m²:WR⎀æýˆûÔö+Õ…@å5NÕ…§öFPšF`É’%æÜsÏ•ÅÆ ¼ä8@(£ØÅWïxÙ¥Šò Ïa£ÇìÙ³Í^{í%÷ìWQÊÀ?ü †F¡ä÷ wM\råÀ§Vëp[n¹e­BP3ý>çœs¤¯3gÎ4(ïUrCÃÀÂ… …³Þ7z0‡iÚ´i]Ç>ÿüófã76Œ½Q–_ýUœSðÒ^ýõeÎåöVªm¿ûÝï¤j>ÿüç?gÝ Ž_k­µ²>^Tª ò6^vÙeEáï•W^1áY ©(Š€"PnÔðQnĵ>E@Pª §¢PéСƒÙc=„KüË/¿4Pé 8Pè{ì1Ó£GÈäH—˃#…äòp—6•Ñcï½÷V£‡H?ˆÀàÁƒÍ;ï¼cX„Ž7Nþøci›æøˆì%*Zútéb¶ß~{‰¼;vlÑÊ­…‚ ë\¹r¥Ð`ºþ¢Ì¾ÿþûOö@bßI“&¹C$*„耨ËÏ?ÿõ&ƶ}Ƹ BkÛ¶­äÖŠmg´áŠ@øy?Èçèò~ >\ó~ä§ž¢(ù# †ü±Ó3E@¨iHFw+ÜÖ½zõ’üxî³Ï>f„ †\$TmÞ¼¹Á£0*RÊ(ú¨F¨\imtswß}·ùí·ßäYÜvÛm+šGG¯H4øúë¯ÞèjøˆÆ5)e+ð8I½¬)‡¨f°ãyhL‰ìàú…ÅEÕp]Ãû)ëóÏ?7wÝu—|rpP`©csIýW¸ï7Ûl33eÊGŽ)y q ›è*BÀ> Á~ûíØ0ç?;ÙªP«£Y-Xò–{ï½7°É”sÆwÞ¼yRž»>vØÅI¸ø²ýöïkô ^|ñŲխ) `'„Áõ×_ØèŽÀN8Ï”¬ÊvëØEhdÁzàd,°“c=6° ¢¶Ù†pVØ F`'/]ì§—" ’6¬j°ÊÀr)˳Ê;ð“O>©š¾iG GÀ.ìe ·ŠˆÂ ÓbƒÀ!CäºóÞV©kZ·n-˜Yå|pôÑG×’=‚ùRƒ ë’8Ç*åƒë®»Nʲ”àƒ>שּׂR&°†¨Äo«\OYß«Ø,ÝV`*Á.»ì"çZÅIpë­·&Êñ×—¬c˜“ VØ\k)³F‰ÀLä8æt~;ýòøn£\‚k¯½VŽ ÿ³J§ oß¾uêp}uûè«[¿eÂȯË*ÀK+V§l×>æ`6ŸU`D‰f僓;Ùl¤.ʵF‰àÌ3ÏLY7Ø1¯tâ÷ÇÇÕíO‡ý .®«ßwž~*qFÀiƒ¿ýío2F²³Nhs’J‰5bÊšÐé>­Ò8xøá‡+ÕÌØÕ›N7—oGÐÃñãúXCs`xÒõÜsÏ%Žåx›ËNÞiO(ÑÚhBS¾/RÝgÅn'úbêaþbé%êe|ŠUª+{7TJ°~«Ž¡“x `ý>}zÂ’±ì²=W±p¯œ\Ë(æñz¯M-+[xðÔ;餓„Ί¤Èxâ=AtÇܹs%„¯òb{)dÛÆúŽÃÓOWkè0+V¬£3f˜båòpõéA’÷i¤‡CE?+…€U°‰Ç/'J¾JµEë.âCi®¢wmJÙ¢3Î8CE v0¦0¾T2ï´…þ˜ÎsÈxÈ8ųÇFRtoÐ"Œ)#FŒãkì@/SƒÑÍUBÂF®ïM7Ýd;ì°J4'©ÎF Ý(N˜Ð[º?ÞŸ¼Oœ“ï, rè0 Þ¿è1¡ôf=Xóbj• !`†ÀQ)Ù1°|¬jI¼«µ‰;°I(×Ì™3B‹@oCX2øÚ—™„Ÿ»}qúô梁ŠÓ•‹W[ß|óÍÀ&@ 6ÜpC¡ƒâ¹!<²sçÎ’˃@3a½rhèaÔŒ „W[l¤‡Ð[¸Y/ÚmC±ëÒòú€ÎÃNr…&ª»H«ïÝ_ƒØ|/26Zb ö¾¶»l•ìrí­'`ðî»ïÖ6õôÞQ1ð)™ê9-ånŸöˆòÂÔGVá0cׯ%“ʱޫB_èεѲŸ1ßQ]¥:ƒxÐ~ÎuYl÷Ûý–uâ`³Ð+Y¥‹ï(—d‡÷:EÖ_”Éå#Öq&±-ÜGöCÝ ±}Güö°?Õù~ù®N9ùÿþùep¾5ˆÈžBpòï?W/}rxY£H`•X²+][ü>ød©Ê³Æ´tbîxýTâŒã“jVÖRÖé.°Æ¾’v‰gšõ®‡lþÔÀ–ÓÖisKÖÙOŽO7&¦=¹Æv°Gç¶ûî»o`sëÔX〔k# ëèôÂôVPzV:5ïTwŸ¡D/™N¬!$°QœÒ?Þ#ÙRk¦+O·×E@“›Û§2*‚…4Áªj'WâÁC(6Þ6vò,Þ6ö’K˜, ×ì1mñxöÌ /)hªÑ"¬È;›ñ äZ'Çó~quÒÆM(­Ó”¬™]]n\Gßf¢{£MDì°¶vÂØ†>’cˆÃ‘èÒXñžNr©ßáÅXOÄ_X7JôŸ÷4ú=wœ_78fŠ„áþ8묳ŒÍ##ÇAF™¾î"Ûkáêå|ÚÎmríf;÷/Ûé÷%×Éä…ׇ¢~ÚŽ«Tß‹ß^Ô¼¬’~}m¹Ñ£G'"(Óÿ»ûî»Szl“lK·¬ûNt áM$ö#(ðn±Jâ<; š4i’ø.‚ÅNöžG—]v™Xõ±S'Ÿ6K<§]Ü'^¬ÖÀ’¸Z™—»¾úí%¹I†²[*úY$¬´Í€ä¶ö…—¸IÎmi®bç)^Î(p÷#=ìÂU"=ì„§K¢ç*!@TÞ¨¼G,ox ÷cApVõÉ–ÊFîKËWÕýÔÎ¥FÀyÜ3^XEGêƒtkà{ú]`•y£’Îûß/Ð*EIÇ­’(˜:uªì¶Ê‰`Þ¼yòÌZÅE0pàÀÄi~$C¦6â±Ì»ù"Hº6e[¦…b•—r/Y:©‡öO˜0!ÑNÿ‹U¸$„ûmN×ÿ\ÿ;ÇSŸåç.¾øâÀTëKúj•ˆ)#>ü:ýòøž 'w€‘”aaæú]_ć¬5îh4GLý]³0ÎYcA°ÓN;ɘb×¶S¬Â?@÷åt.$”ÎF¬cm`ÂíBßµjÕª:§µçtZ®|÷I=“&MJ:½”K~MÂnôWîxÿ“1 ýY*ɵN? =ž‹V£>¿ŒUè]”…ß÷ÝäÚå÷ÅíwŸádä¹¶™òÓE|„#=¬+°Æ3NI+¹ÔÛ…]¬Q:e¹–²J"î鳋6ñ±¶táí˜òäÿÛè’‘Sõ¸9G®×ÂÕáæ ÖÀ•”ÜÜm' ÅæÜ ÐǺkå×ëÊ©–Ïd—xÛc•Ê!à[ôòiEºi®,üÚÚtèÐÁm2½zõ’HtH¬]ºt/#¢.| [±Øc9v‚ÅË$F'öÁŽZ,ËH»ví$©”ÛO”G:Ûv÷Ýw®X¼ª3 ÖK¿^ŽMµ-Sþ>’)á}–|0?âˆ#ÌO¯>œÜú5|^¶¿ñœFX÷gÂ(Û2õ8E @oãò~œy晢ŸºüòËEoDdbƒ ŠÒMôS¬¢=È·“Ý:Ô¦=ùLQ#Dªþù’Û&„>£ŸBˆAW—Jwh3:<_ÿfئcÇŽ©N‘m©êôæ=å—ÞGä ú)Ýã6c˜Ûf)%Jäð™Æ2¿Ÿ…¶™¶ðN¢Lò+ù‰ÌaN™2eбÆ}K)¹ÖO¤ŠuM”Åû‘{(Ü_k Oäáâ^AÇéæÚ‰“3|W"d‡µ{÷rr¹á(Aæ è2Ãòþûï›þýû‡7WíïÔ3™ªín´;Æ€ùá‡ÊB„ÅHª?è xØ2Iß¾}ePÅÈ@¨Æ'Üà„¶!LT_ýõ„òe¨õò‘ÉëòåËååÃq nLdÝÃÈ6_H¢7gÎsýõ×^TÐd!–ë¾Îï×o-â†D?¾ÁÇü¶„û%J;”g­çH6RÂX.AQâú“WöÑ'ë¥-ç¦Â–mœ›Š èÒI¶˜C·ÅÀÈà†X]I<È66¼àÁÁÄä^E(ÂNy>­éÖ­›L܏߸Ívž ’™3ጓÑÃ,“D$ cbB¸òwÜ!‹ul)Cw>ã„Oo¥F‡Œ~VL¼/¬G‘5jTÊðûJ¶OëŽÖK11ŸQÃGt®K9[‚šù:}‡›“–³ q¨ ÅŠS €‘õÆÌªÙŒÅ(=,'¼Ì«0 d#ÌYPîa˜` çÖ|¬K|š«BŸÛú”÷Ù¶×Ç„¶ƒë„¹$”jéÄ)ÎÒíO·òQ*ù ÅQm½õÖæ„N06Š-qÍÒ•‘íöúpʶÿ8®+c°Š" ÔE€q„µÊk›÷Ct2÷ÝwŸ8áBÇ^ aÜb]Œ0N5mÚT¾òõ(ôÐNÐq¡Sb,åÓzÔË.Þ Œå–Ó‰Í_!íc¬€– 0=!ku'èðÎ=÷\÷S(óò­Ì1®Ó6ÖÔ¼s,óHÂÀAн1þ¢+¤ý¼ßú„Î Ú«±cÇŠN½åc5TTÐ…«Í8`b=îÞ%6ZÅØhÈŒã¾õÛ(icóoHŸ0f ãôÝ*:IÇe(¶xúÂogäò·ók½`Á‚Ä=5ï4$Ÿk!'zÿÐa:œ¼Í‰¯<´ª+Ý’ÖÙ!qB\¿ØR¥BØ›\˜콓/Êæ»£q¢Ùá2H csI="lŠ+ÊöéžerõÝ|óÍ’Î?‘01ÂÅ8Æ`p%)aQî<¿-œ Ý ‡Øo z(W.ÉŽHÌþ;ï¼3°¡$=òíÑ# ÌÚkü¬'Q/!ZN|:«LÉÍ]›3}úmö±õé¥ü픕 æ„ è÷ßõÃ}ºë’®N»;G?0ܧÜo<»„û»ûÞ¾t;Qlä‡Ð„Ï‹Ëïûï¿? lÔN’åÏNÔ„Ò€~—J”ÞªTÈj¹…"­´(„š—ò(´z~倆”÷õV«|c´C:U舸¦OŸ^±vD¹bŸz‰¹†58ÔÛ\ÆbèLÀÕ*äÔH~Y>S¸@޳ÞÍr>”¸<òˆÐvPžõÚ¬C¦¥J7þ; '«àH$MMצp™Vin¦üæ80¡mP±X…bJʧðÉéÊO×w¾ u¦ÂÑ?Æß®3œ¬²/q=M˜kŸ”•-ÕXB³Bû™»Dè~y|K¨] x¶ŽJáÝú[¨z Ä³ÎetÂŒ¿V±XçׂûÍZÎ*úå¤Lë”Z§L( ­3j0räÈ:ǬÓ`â<žik òx®Ñã„ÇL޷И»±ÒÑV¡³sɯÓëælþ~Þ3>EU!u†i¨Ão¯uŠ ¬ƒdŒ\»ÇüDÜ~ŸÐïYcŒœ[H›)À§º‹Tànl/¤~w/R'ïPëDš„‡5%(Î|¼|,xŸ[c‘ÐJA-åþ ®„Îßï[!×})冯‘ÛξL4jI¬‚ÿå%²=W‰xjaO%„«a•ôkk8¬™àvȲhÑ¢Ec؆õ#¬ŽX}!Ò 0!`N£²—üIJh'š º+;%E12ýÚ‚º¬º"å“-"I°Hb©ÇúiŸ¿:8ØXM“NÎáõSG.’-æ” ^“'O‹9‘8aL±Ó?„¶„­Å²Cÿ) ªï˜Ûn»ÍØÅUâ~œ舓O>Y(.\ød†¢"¹ ¯8Ïš5Ks1FÝpÃ ÆæJŒ=¥h¸¼h¤G)€Õ2‹‚ó¼´Tú`N‡Ã˱¾ºttÀ+Z%"¬IòJµJ2DŽ³Öž„5ž­x™fJÎͺçÄO”‚XåJKEP‘‘ä—È\ËEŸ †®Â:°%7ÒûÅ:‹Þ0µk¦G}TŽä]±ÿþû{g¥þê¢(“hùTQ&$Guã‰+Å­aXcÕN÷°p^&çðñî7mqõ±FÂC6Ü.úJÔG&)&N™ê©oŸ5ÒHÔu#î5 öÜsOIF ­KÄ\_™º_¨?ñègýʘúöÛoË:–HÖùêH›ÓÖÂÐ=‡…µ´UL‡7'~£Wã\k´F7¾Bµd‰ëxÌó¾% q‹±úvžs_¬“²Ô^Ÿ£+bL·¹9‡£Ç³†ù]HDzXɤ$åJ{O=õTƒˆBDgç ã¼cá:ЯTÂX‹n)¤Íéôžá:¡Þ‚.ÞQ‰ùû ©Ÿ{'Bß¹†>Ýe;º~®W/΃9ºqþ2 :O›ƒU"d8®X×"]DÁP ’›†·©`¡œa2â=<ºf1aÅàŒ n;Ÿ ŠaEº¿?Ýw^*pý†…×z…7'~Ûdæ)ÏcRN/Ô3Ï>û¬U,|š+ÂÅ îÝ»wI¬«v2 ÁWH˜ ßèâŽËôIø† 71÷åEh£Y _ºï¹bÎÀ½Ç{Hq¼0l"$QN£ ¶–lc={”bŽÜË"]ýº]ppÙ(*á*µž*2†0–tîÜÙôë×O(®r}^\ÙQù„[„>“&‘Ëz;ŒÙNŠòé F=z'd¥·ÊE=GP¢€€S††Qh›¶¡¼œuÖYbø`Á]^&j¢ò¶,:µYocQ¾áP‚₵œð¬ÂÍœñNX³¥:ÎíO÷É\ Š-ŒN¹Åš *õ×_?ÝiÒ>ò2ôÅ7Ƹy¡¿ŸïÌ¡œã¡/ÆúŒcI¸LŒC† ‘b8ê4`(Ò^(÷PVâÐæ„µ mÌGXãü‚ðÝg\YÔ =²£sÛßô)_œÂeåú›ëÈœ¡Ì×yþpŒs‚BÍQÑq¥ãàwÇë§"P­0¦;ïÆeÆ)ŒŒ<ƒ(—}a,Ä ÂØ™JxŽÝšš±ÐÓ¬OQ"£Ï°é„ã—.]šD7ÖõaLAG•Ðf—+¨:Ñÿ¥{GñîÃHŽÎŒu0c9c:º+ÖÃ΃®Šq½>)¤ÍéÖøÐ3Ý~ûí†0|✀Š÷´Ó·¹vZ?8tœÔƒ¡'y7|š+t´è8Óµ×µ%Õ'׺´+®¸"aôpÇûZ¸rÑ£û §pû«íS º¢Dì°Ãy·(E97aĈ’¯Õ 'ÅÅÂïoî3ŒsÅ|¾ io¾çV*ʃö:£†I&ÁjôÈ÷*êyŠ€"Ôð…«6 Æ9¾j<ÊIPª’Œ LQt`ø@PJ£TiÞ¼¹ðГoQ¨8f8!råP>B–b%)²„µy3 J<”SmÚ´1–EœáàÅGqˆ°nÂ{×­¿h·‹ºGIÇÚ ÅŽi½zõÇ+“¤½pµãÙ‹2ÐҽȺŽri›3‚Ðv7x¬¢"j{ËRˆÓ‘Çn âÜ\„¹¬S b¼ Áù»ï¾+–D¢i—úÇ.ìhçú”-N®¼b}¢l²thâÅÎ:’µ)Æ4úƒñ ïvg¼A‹§¸Š"P«0na¨ ïÏ7c#ã1Ñmè–ˆ”ÈE(ÏEy0°– ÆIôdŒ!NßD4yžPvû‚aÀå áœlùËUhK¶¯8ÿ¢|G ©3S1"Œ?^"(2—í¾b·£9†Ñbhb e<ÅHOîæ5¾£x¡õcÔ@ÇÉ|}&÷÷‚û¼[Ñq¦ 'W_}µ¼[Ãûýû,¼ßž®ŽlVîø¸ªá#BW›¾\â"&JQ“}!&k(, äÁB1˃‹`|ð£R´#\&íà¥UIa"KX$V',"kcÞ¶m[Y0„=«Ü±ú©€“½»îºKN$c²ÄÄ ±SN9EånRwÄREyÂÊ$ØMFKÕG5z” Y-WP*…€S:â=®¢0'EA-žª©"Àk%¼‰dwžú̹|ƒBÖA¬yp<ÉGPð“àÖ¾\rU{ø;mÃ@A"Ù°Ð.çZb<#Q1c|JÃúj5¼ÅUZG€ñƒ*Բȟ:uªôã^qŒLzK-jô(5ÂZ¾" T 7RÃG¥®@´êEÉ:pà@i´ÎÁ(Z­ŒFk0àኂ z‹¹sçŠÃ ^¥DàÊ:†¨‡°°faÞÏ:€H…\ž?¡”‚6Šþ €ôÅÕ“-N‹hŠ¿TIÆiTÕãÚ@}®¶CGãØÏ}‚Ò•rqŠã\9–µ°»«¢(ÿ‹€Srcü€Žq"tG<÷õ FGŒ'Nˆ¸ÊÀqèpððŸ={¶;-ñIy´a¼a<˜ú4^2©„—¡?0§:¦RÛ˜ô3€e’‹/¾8ŽMéJí!À}‚¢ƒ#ž˜„õ/[¶LQ$ÙÆKŒ‰–ðK—sì(åÕ¨t”}S£G)¯°–­(•D¥JD•j•¼Ѫûøã¥,ÑÝùp“G«7¥o ë žŸN: U¼ß8§¤2xäÛr¶¡ØC¨Ï)sê+…kæŽxÀ¢d +ÜS•AÛ1°¤ZŸQ?ŽZ(Ú8àQî¤kJD¢^¶Új«eòçÖg×`àw8Ú$UÛRmã\ê€&˜>2ö…y1ëMúîêõ÷ç‹“_F±¾³fÞn»íä\S¨ŠU—–£T<ß(šÉû1tèP1¬bíÒ¥‹Ðfê£È…‰`4íׯŸŠS‡á#2ÛTB’sr!è͈”ð lgîE~’‰@y…É®÷Úk/)¢Øu¢ƒ¨C?:+„÷M:½c¯Óe•²ÍÒû(;og€/FýÜ;0³0N£7Å :UîÇbÝż“ZþTÃG„®>ƒ.^Î ž™þ˜È’ »>%z¦®ñàæBuÖYfôèÑ’xŽIë\ ^ä.'G‹-r¦`ƒ ã‡/𼆣üý œgœq†XÂQ@âÃ6xð`¡»áX^p~x¼”\x#/=^&xÜ‚ߦb}gQáO¾±cæåÈg‡¤¯Î…AŠÅAøåY¬öh9ÑC€(+Â_&÷F@žžWŒñ6`¡TMRé(°T£G5ÝQÚE@#à¢{™†þ†ÕßµƒNJýû÷—gYP;È”¿§ÌùY×Àe¸åoI~5¢0ƒ–ôCåS9*|aã<•Q 4Èß­ßE@È¢»ˆš‚!€ï.ïGªÈ ¿P(õ®ºêªÄ&ïÐÁ±¾†6šõ8Æ ¾cL!R#Ù ƒc3Y°`d1¨ ‹"ZŽqÎåÃØu×]%ŸVºò²ÙÎ{žË%RÌ:ÑUùF|Ærô¼›ÐIàAn(—/ Û1ÖÓ_~óCˆŠ€Yö ÆûRµÙaÆÜƒÐÍ7ßì6‰C1ºÃba†nÓEɺJÐÓ+—•+“ÏB¯…_–~·ØT¥BØ!°Brþ³ƒN` _†ü‚_|±Noì`Ø$yRÇ€»ðMsöÙg–6*cývðì @αÊÉÀ>ðr¼UÀV1Ÿ(+üÅo›ë£µŠvàL:ÔF‚–k/cÜùÖ»*° “ηáÜõöI:ßáã·7Ü÷¤BRüðÛïc›n»_D:Ì-Gb`9“Úêú–X#Hâ^ñÛâשßã‹€<<‹v"Ø—¶ÜÖ;.èܹs`yò¬Ç·w™[γbÓë1#ý¶ÜÈMŠ™qlÉ\b~{-ý‚ŒCàn½B›ì5°“¸ü Ó³E@ˆ V ã¬åÙ`ë´I•DÀR7Ö3Sî'žx¢’M©ÉºYY“àï¯X£eÁب 9cY£TR¬ÃZ`Öý°ŠY7Ú„çÍY’ØNëë[1û5œŠÙ7-K¨u,õR`s]6òNÆk ®¹æš€íé„1×F.$IþØþn#È‚qãÆVyX¯ÿàöÛoOMY6’£Þ²Ð¡ rbîÆFêBWÇš8,Ö¡7°r zC7Æói£KRçÊ•+ƒ¾}ûÖ[¶‘58ˆŽ‘±œRíË·Í`âã+‡(LÒ-ZÃT`™4»|0såºO½“Ô¿víÚ¥¼×üëk#Í{åŠÈú³káÚiNÄLÔ™n{â€*ý¢ö©¬”`•ÌW°.s¾_¹8R%Æ&Ì×y‡ûWÔg—¸SFa}AÅ)§œbìäTšÊ'ug#X)IäÕ"H˜™ßæp9‡rˆp46jÔ(¼Ë؃„4úÑDx0)Xr8|üö–î'BrǦûôÛI;žˆ¿=WÌíKÄ 2$áà× >„äaAÿË_þ’ØE_ÀÒ‰R`9$âýI4^qíÛ·—<:7Ýt“ð0sïCaEé£>*”„ÑV£D!Ê\5Ò£ï.í“" „ /¢4Wadô7÷„ã§N•Ç@*-VÏ ¡s51ߟ7ožû™ò“ó\$WÊʼ‘õ&4­.¬UJÞ î)GÝE“XŸ}öÙgek]Ôp*[ǵ"E €N FƘló~ ÏA¿ýç•W^™%ô0ÖQr!sÌ1†?ÎõuJünÞ¼¹Dœ¤£Ä"*dÚ´i]Êv:6·-ü‰nÏO$îôPè†hQ.Å®³©Íë•´…a¡½0Å@aïGVÐ.úÝz9ŸÑíË·Í´ˆè Þ3™(ÁÚ¾äXþ¡S!ê£ú…Ù/´'èí¥—lü¿þõå~Égî]ȵp÷ :Lîu'n;mfžQ+ò; :µÒYígz¬V”.4 cJª‡8})u÷\tÑE Ê,BãXT…•¸„ò’Z´h‘7 µ¢nBë Ýb °ò$ÃFÝšŒ„ØÑÇ%ëêTÇVz8[ ®Pr1(2Òg×föCóþôß7|TºíZaò:Ù†Œò‡Â!˜ëN-tw<#ÎÈVXMÑ=Ûz´Þ¬Y³„ÎÍFyH¢v’’1±)§¨Ñ£œhk]Š€"PI 15j”,f¡MTQ|˜‡·jÕJæ$6ºZ9þ~ý^ZXóXo`™±&@éTg8sH’ÛÂÏšÁ)cJÛÒìJ‡.š’À#´’ž={&)Ų+­°£¢ŒSa=Ó³EÀGCyjùc}ž5·£w÷õ¿£C‚šéƒ>ÍŒW›nº©äò©ŸüsR}§Œ¬÷Ñß°¦‡‹1½TRª:1\3Žã4C_Pò³fwÕìç½Eý`ä¯ásÑeñÉñàéK©Úìבé{!õcH”9ï4ÅÁ¥”Rȵ(e»âT¶>âtµbÖVP¸áDæÏŸŸHþäwÅ7|X:*±È–zððë×ïŠ@©°¡¶’küøñââ ŒL Ž:ê(Ã}·F»j¢]ò¦92 MÒ6D ñäÊ;í´Ó’’„F¬™ÚE@PE %¬³zè!súé§K® ·Ür‹éÞ½{Êãu£" Db¢ãD,ý˜è8s9_­ ÿåÏ©LýZk"€Á±ü~bíæ;áf„©(µ„‘ ×_½x™@ãöàƒJÂ/ž…Ñ£G‹WÉ„ $<·Ú`ѧOsÜqÇ™+Vˆ¡ª/’¹cèT£G-=ÚWE@¨Ž'ŸpûJ´Wë,?Pm"wÝu—(ŒÊß­QPE@È"p,„úŠH"9Xƒâh‡§¿Š"è8‰äAlj„)µò)SÏ)êÕ÷@IDATjø(Ö5QÓ?ü`l‚Qbbe· ƒ¥ß„λ\5„v²f ¤óùçŸ7}-‡çöÛo/Ñ ï¿ÿ¾ð^öèÑÃØ„RæÕW_Z·† –]á_‰ C”G›6mÌÔ©SÅðƒñÃ&Z/?,¶\mÓHr!­õ(Š@”PÃG”®F4Û‚²¨qãÆB_c†Š" (Š€"7 Vry?;ì0ÉåqÅWH.Ùo¾ù&nÝÑöV˜;yä¡ë"w ‘ÓºMtœ*ñ@@ ñ¸N±iåO?ýd|Á*ºûî»û›’¾cywQ"„&ª%> ý¾ýö[ÉgC²:ˆ·$†ÀfÍš™aÆ™eË–8ÕÙç¸1cÒµ¼›µ(:¢F¼/gIOüä“O„C–ÜN<+¿þúkVõÁ‹2×~ÿdUˆ¤Ô<Ÿ~ú©ôT#>jà‚çÙEòιÄÔPƒè˜š'zš" (Š@E€Mš+"InýÛo¿I>†.]ºòX©(Ù À<§/è6]䇿]¿GÍñÝkË–a´˜={¶ð÷³xêÚµ«$… '4 wnéÒ¥’<©Q£F’è»VÃaôwüxã7ÌwÞ)Ñ $˜$âÚªN:Iâ+ž5×\3~+°Å÷ß¿ðÈG!—‡ëŠ=ÑûÜrË-%çAñFæú"‚N9å3eÊYÌpÞ\$pÎ%!ç©(ÕŽÆÁ­¶ÚJºI²Ê 6Ø Ú»¬ýËî((ùåñl$µŠ" (Š€"W4ïG\¯\åÛÍÚ(Ë1ž±fE¿³ÖZkU¾qÚ‚¬PÃGÖP銀" ü/(0ðÝvÛmfÑ¢E ïôM6ÙD’u÷ïßß YŸÁ¯ñ$ÊÅó¬Y³Di‚ò„|&ݺu«W‰]J<ÔèQJt /»mÛ¶fáÂ…‰è?J$ŠêÏþsÚ™ˆ6hÐÀ|÷Ýw‰cÔð‘€B¿(I<ûì³’„‘…ZØs-é@ý¡XN=õT3~üx³ï¾ûÊØ¬ (Š€" (qFÝ×^{Íœxâ‰æí·ß6ë­·ž¹ð eÝZ‹kö8_Km»"+Ju•+bz¼" Ô,$´ºä’KÌvÛmgŽ9æ³`Á±üÃïHÔ‘K$3'·G-N ˆòçò@™}ÄG¨Ñ£fŸšü;ý•‹IU aêŽ&1Õ~ݦ(ÿEÀå÷ÀSME¨³Ï>[Á¹ã¥—^ªïpݯ(Š€" DÖæš÷#Ò—H§” 5|” Z-XPªB{ì1Cb´wÞÙ\uÕU4;(0€à=¶Z—Ë£wïÞfÅŠ§:sæL3qâDùÇj¥D#=*…|áõÞzë­†é„H"B×UE ~œáCó{Ô•aÌN;íd8àb̘1 ‰" (Š€"{4ïGì/¡v@È Õò:KORE Ê@™?mÚ4I\…2ŸðXd—]v1't’AɿᆚJ*õ£p ¹<Ž;î83|øpÓ¤I“Šc£F(Ü!ù·ÄºSåù ä¾ûîKäöȦ¨³æÌ™cÖYg¡§Ãó½E‹†|T鄈(‚žþyCî©/¾øBò÷Ã'ÝyùœCý?üðƒÔóÑG™üQÆ—½÷ÞÛ4oÞÜüþ÷™ýTܹ7–|Yô 0prc¹‡RI>¸¤*G·EgøÐˆh_§(µîœsÎ1O=õ”Á‘œK¼×UE 2ð>'—à‹/¾(´…ÌeTE ?pV„Åa×]w5§Ÿ~ºyå•W IÏÇŽkºwïž_¡z–" DûUQE@°X…eðÜsÏÇ|°îºë’eYþ¬â5èÑ£GðÌ3ÏÖ]±²X¢À›¸]0²¹<«ˆlþ“Hàc“–›<°ÊÞÀ&ñ ž|òÉà×_DÛ´u°iUî˽tàÊuãù{óÍ7«¸¯sÂ’%KϨõ`Oœks|6 $éxžë£>:Q¦{®Ý§å÷Myß>úè£ÁÚk¯ÜñîÓ.’ê´-Ÿsh¯ßW¾ÿyï½÷6ú,©_îÇÀk”©Óξ}û6ßPbŸU˜¸Sä3_\’ ѱAÀ&b”{ÄcÓfmhe`Œ°Ôžrß\tÑE•mŒÖ®Ô8?ÿü³¬O˜l¼ñÆu2 ¾üòËGE»¯†ÀÿüÏÿ–½!°QŽò®³‘àꫯØ®¢(ÕƒÞ€*Š€" Ô4ß|óM0nܸÀzI')G·Þzë`ذaÁªU«ê(8k0›¸ø`À³èÞóÌ0J~øá‡%¨Q‹TjÆ Öú–ÖZž-{õêøóæÚ@B{©T/jø¨Þk«=Szxýõ×eÁÂ"Â)‰°¡®¥pJé^O‘U½;êQ€¯FxÞ‚¾FßXa©˜’:ÅÅí·ÔsÁ{ï½à¡…" lø8è ƒ›Ì0¡$° Ñ%²‹yÆ×Zk­Ä>›Ë'aX \âoÇ`ð׿þ5Xc5ä<Žûþûï¥}ùœc©³m§ý~ûPrœ|òÉ¥Ô’ºÂ‘)áö£!"6Þxã 7prc›¿€Ë—¤ ¡?b…€{FæÏŸ«vkc+‹a”«ŒO8ˆ¨(qB€wâÈ‘#åþµTmÁòåËå½ýöÛ‹£Ó¡‡šw40Χvš”Í32~üø²@ûôÍ6ÛLêæÙÄùãŒ3ÎÞÿý²´A+Qªï¾ûNæø¬Ðì¹çžÁÛo¿]]Õ>)5‡€>jî’k‡ÚFïq<ÄÛµk— €aѰÉ&›çwž(Q5¼µî=õ(Z¬Fº×-.[|ÆŽk¯½6a\SJù‘<˾ñÀ7|øÛyÆ}Å¿Ãŧ¦jݺu`seˆáÀVød!·Ÿh ~E¶çP¦_?‘.”–p]n¿ÛNßÂqŒ_¶ßÿ|qqõêgü ª‘{€?›³*~ÐWÁƒ˽³ãŽ;V´Z¹"+Γ›nœPd~õÕWÁÔ©SÅ)Ç"KS½{ë«‹²—.]*Ñ⌭(J‰Fe¼-‡`”´¹ÐŒ8n|Ç‚Ãó$E@È šûÛß„&Ç! Œ=ôPî銀")Ôð©Ë¡QR!€ÔÅ_àñå< ùlÕªU0iÒ¤”ÊÍRµ%Nåå•UTsy8,Õèáˆç§oø@ià+çÃtW>ÍÕgŸ}Ø$ö‰¨ ßð1a„Ä}ëGm„ò©¦¨Û(A™à—éÎ%/ÇO?ý”P–äseqÞ%†£Û¢~×_Îñû|Ýu×¥Ufû´\®o…àâ·W¿Çî{î¡ÆǧÑÚÒH!УG¹‡ºví©vicl`®O„(† ¨*‡*Æ+¯¼Rîk¶]uÕUÙ•òÊŸ9sfаaC)yŘ1cÎ)O*òFÚ0cÆŒ`ß}÷•60æcÔéСC€Á2Ÿ¨–"7Q‹SbƒŽIš÷#6—KªÔ‹€>ê…HP¸!@”¨Q£‚m¶Ù&á¥È`×]w•…ÞäLhTR#—(Z¯FÔ×0n[S>\ž ž]GåäÓ\©…qÓ7ø†¿LÊÈæÏPø9;Rë×ÞùœÃyaJªTu±Í7|%â 6·ÞzkZÇOæúV.´W%~@‡Â=´Ï>ûįñÚâH €Q–{Åñ»ï¾‰6i#\ ʃÜÜÇä÷zà$—ß!CdR+òÖ|ðAжm[)è’nݺÌ©Ë)D€<óÌ3AçÎδ¥eË–bœÑ¨¿r^ ­+îhÞ¸_Am¿"ð¿üÞ¾üUE@ˆ=vH3Ï=÷œ9ᄌå»5–“ÚØˆ±ÞN¦gÏžÆ* ÍË/¿lh¬G–±‹÷Ø÷¹° “UŒšiÓ¦»H4–æÊØ}sÄG»(,E•y—iÞÆz¡Êuµt@Ær²šöíÛËÙœw™zbt8þøãåù¥EÇ—ûqĈòɶ.]ºät­­áÀ4mÚ4íßn»íf¬r€¢´0o¾ù¦±üÝæ¢‹.2ÖT¶ûÿ.½ôR³ÝvÛ›D6çsÏÙ‘Gi,mV¢hé"Ï Ö0–¢ËXGbŸûb£Cp\‘Ÿ{íµW¢Ýn¿û´àîkÚÏ\pI[ˆîˆ4ÿøÇ?¤}\kE ,-¨±ùdܹ馛ò)BÏQ*ŠïñsÎ9ÇvØaÆæû3 0–×\vÙe†ùs^Þ»Ì%óÖ6—ˆyüñÇÍ\ ÏŠul0Öàlž|òÉ|ŠÌëÖ=6ÊÃØˆwóâ‹/Ky%së@b,Í—ùË_þbî¸ãޤyG^éIŠ@ ÀúÒRe›Èðçˆõ‡ÍûQ½×.*U„€Z€E@ˆ3ÐÃŒ7N’ âÑd‡gù#‘áå—_.aªÞ]ÿŽS”½ÑHú¯iœŽð£\dí'ÊcžkîQGÅv’Š#ÙD|¼óÎ;Gy‘ÓÞnh$| *k IK!‘é8„]èß…^(yC¤SÞ?wL6}öN“¯©põ·—pú;zÀiÏ=vþùçG¯qÚ¢Ø @Bhî#¼åýq:6І*O?ý4ѹóÎ;_~ùe`‚îÝ»ËýÍ;—¼`…ïwè¥HŒÌ3•–5°¤Î,¤®úÎ¥-¼ëO:é¤D¤(s˜-·Ü2¸á†$Ù{}eè~E Öмµ~hÿ㎀F|ØÙˆŠ" Ä×_Ýœ}öÙÆÒY‰×ÖâÅ‹¥–‡ßµ°dɃG¶]tˆ§SüzX¾Ç)ÊT4Ò£|÷F¥k:ï¼óÑ;ì°ƒ±Æi‘k®¹fÆæ „ç#2þ|cù¯So©(L³fÍÌÉ'Ÿl~ùåóí·ß<ã4h ㈥¯ó¬²ÏX£‡D@=:)*Ÿs¬A6©=Öða¨ÃʵM“|· °ÄvË+n,åWc,…yë­·Œk¿; _\Üùú?4â#~×,Š-fì°ybÄ[~„ Ql¢¶I¨6ÚH¢šyÇ¿÷Þ{)NDóäÉ“Í~ûíg,µéÓ§¼ëë-,ÍøÃÌ`lRuÃ÷±Í!böß³bÅŠ4g•f3maþÄ3ûöÛo›Èݬ¿þúæ£>2̱vÜqGcÅdn]šh©Š@üà9²tqÑEÔë›#ÈôîÝÛ…­¢(ÑF@ Ѿ>Ú:E@ð 4t&{ï½·¹ùæ›ÍW_}e6Þxc™¼cìxä‘GÌᇞ¤”ôŠÐ¯ÿú׿dÂÆ¤…F"”¨'N”ïQ¤S£‡wkà«Ow…2Â:v옖ÞÉÁÒ©S§Öé§Ÿž’փȂ ÌÊ•+Íܹs 3ø»þúëEaáÊtŸ›o¾y’A5ŸsR+\ùîª9Gƒe½PÝæ$ƒ.ÆTèéRQ]å‹K¢rý;Ôð»KÉC#yÆgHÛlÞ/#ÙPm”"h)›7onîºë.9ê©§žJK !¬1vß}wc£@„&—wk¾ÂCá¬Y³ŒÍ·%s(y¡{ðÁó-6ïóè·òyНM7ÝÔ|öÙgfذaÆæ53ƒ šà¼+Ñ*F€gšµ2c´x8TÝwß}B}Å3¥¢(F î!+Ú~E@¨~,o`'A“&M´7Ðß´nÝ:˜d“xL%7ìD-°^î‚'XZ«Ð‚E9é»Ò[åvãt´O¿¦Pñé®ìtJ(*¬¡!ѽtTWNPî¨ìb%ðS®K Î3àè¥Ø~æ™g&(¨ Í '#‡‚«ç8ª+ê°F\¡ÈàÙ¤ üÃ_|‘ ìò“¿³ÿºë® ¬7§ôÃzp&Ñq±ßÇ5\€ë—X!=ƒõT”{èµ×^‹UÛµ±ÑC€1ÈFÛÉý4}úôè5P[¤d‰I¾G%÷2÷4´¹¼Ë?üðÃÀæï’ù1´¹Ë—/ϲÄô‡ñ^‡*“ryÛhÔà´ÓN ¬sBú“ʰ‡ytW6z^ÚEÛl^±ÀFÀú¾(ÃÐ*b‹€¬¡4Ø`ƒ d¬€ÖÎQcÛm¸"Píà=©¢(Š@ä°ÞÐMÌ'œ»6=1!G!yÊ)§¯¾új€òR%7â–ËÃõN‰êüÌdø°ô E‹ò{ï½7éÙÏdø džoÄàüTXÄ8±ôoÂcŸêX›^>ç„/~Ùé¾; mõqKw¼Ûî>òÅÅᣟñA%ž»à²WQ E _¿~rO‘ïHEˆ36’<èß¿¿ÜÏ(0m2p1~à$a#;Å€< Ì‹!{öì)õ‘gÃF—ä «´`€±ÑÞM|žx_°ö²‰Ñƒ^x¡ÒÍÓúH"ÎûÁ˜që­·lWQh! †h]m"Pó Ä9r¤x9/U”6»îºk€‡³ïñ\ó`å@8ÊÃR\E>ʃ.ªÑ#Ç ÃÃ:è „Wº¯ §+DwøÆ‹°òÖ7|õ€§/HýòØ}† )î\ù:Ïfw¬ÿÉâ&\W>çÍFâS¿l¾ÑF_ñ]guûÃÉÔÃ(œ ^–ÆK”«­¶šœÆ5_\>úž}öY¹þ$¤VQŠin¼²9 ŠQ¤–¡T K™Xú\ñÚ&ò98l¸á†bü`¿åñ/JqìÂȰîºëÊsdómHôzQ /°@,åm`é¸Ï8Ñ):tüqÁ¥À*ôtE ª JlÕªUÍû‘xžmÒÀÒåVU?µ3Š@Üø°“WE@P*†Ã¼·ä–€÷ö‡~¶¼øC16\8q]¢âŠ54¦“ËcðàÁ’ôäÍä' 93 Ièe± PCBÕ—_~Ù¬·Þz¿ܾ}ûDî†(·]Û-WÈdrßó4jÔÈÀÙ›Nì‚Æ¼ûî»’ïƒä…¸øçë÷h#`q’Ë N{îeE ¸™¼HÇsŒ$Š.F™Z†"P XƒX:+ÉH¾ Þ›=ö˜¼oŸþyY‡ð¶ÊY£¤{çÒvÞÉ$?á„ÌâÅ‹¥.]aÆŽkÈ5Ria¾a#=̈# 9Ph¯u¢06"Ä 2ÄtïÞÝ蚬ÒWIëäú³Qàfüøñò<“Oo̘1ÆS£ÔLm‹"P³¨á£f/½v\¨<(g̘a,¯®$çuŠ;Ë©+‹OX”¡–NMæåo…Ö¨"pÀêÚµ«8 °þ`mº„q£Ç ð':NÅ”¥ÌÑQ–"Ûo¿½¹óÎ;¥‘+Fñ—Aÿ_ýu1€Ìž=[0pú°¹JÌyçgzõê•Ö£àʵE fà`tÏ=÷˜‹/¾Xœ8-[…±y„ÌþûﳞhsêCàìT_·´GŠ€"eðnBcy¢¥_2D$`ÜèÒ¥‹Ll¢=ƒ§þ™¼±£ÜÇJ· L‰”¹æškŒ¥“(;î¸C*–Ç8ò¸ªÑ£ÒwÖuŽ?þx;ñPeq…G¿3ãÙ±cGñbÅ›¯MË%nÒE©D½¯Ú¾ü˜6mš±”-r?A©¢¢Ò,M Ì/,UŸÌÙŠQ®–¡TÞ8m²É&桇’h îk¢?¶Új+‰Â|àÌûï¿oþñHH1Ö'ÔqàÊ;ü™gž‘²1¬XjB³×^{U|®.76Gy¤D_ÿûßÿ6ï½÷ž±9OÌ#<"J^ælü(ÕJ\C­S¨4°(ì¶Ûn¦E‹楗^26W™7ož<ÌÁݽÒíÔúZD@ µxյϊ@ L#Ç™gži°·.Z´HhcXdœzê©âátÆg˜wÜQ<+ÐĪ©’(è'ð^Ã[Ëæò…å(.š—Z)ÁR£G)ÑÕ²«-¶ØBè8xÆyæïºë.ó¡õ¼ÆK£ßQH ìC‘¢R{ÜvÛm¢¬;üðÃM»víjíqI@é‹Çæ26‘ÌíJR‘ª” vÚi'‰j°¹‘ŒMtn˜7CUƒbjL”ý(3‰¤ÄY«Âs´Ã;ˆqèŠ>øÀ<ýôÓBñ ½V"5iãFm$Q^¬)xþ¡çüôÓOÍ“O>i&Ožl~úé'1á´¦¢Ô*PÂ1f0ßZ±b…DLqͳbsçDžbºV¯›ö»úPÃGõ_cí¡"PQ˜ÀÁqòÉ'‹òí£>®Ø6mÚ˜+®¸ÂØÁâ9eª'DW*îQt_ÞzzÍ }9Gð*ƒ‚EŒM4,Ê">œÂøªR› >Ü|þùç¦oß¾â‰X›(h¯Kž­==ôPÓ²eËRT¡e*eE¥å>ûì#ïÒeË–‰Â&-6 6”ñ“ rÛ¼öÚk¢ü/–1CÑØG}´¼Ï.\h¨ß&‡°¨ä  6»éܹ³¼SÈwB ë¨7'Mš$ ^ÚKTZD€çÇN —ÐÎòWÍñQé+ õ+UˆÀo¿ý&@pÖâ Dh4BbÝž={šHX7 •â ç\°Ñ &ÅâRvõè§"PMœ|úôéâyÍØ‹€ tZ_MW;÷¾ðÞ…Gº…öíÛç^€ž¡(Š@ !@¤$óÑýöÛO"'1êaì ò‚õÌe—]fFŽ)žÛ–XTtpd âƒ<^«V­2[HšL®¦(&'_#8²áì†`aB”?´?*Š@­" y?jõÊk¿£†€>¢vE´=Š@Œ€óuêÔ©’¤oåÊ•âµDwð <餓̱Ç+žÇxB¨¼¬lî¿ÿ~ñþ†þ†›nݺÅ*œVŹ´E@PDá‹,_¾Ü4kÖÌíÒOE@P45In$’YIrsò%±~á7\S¦Lÿĉ%Éwš¢òÚŒñ…ù=TÀÐkAÃM†¨ŽãP]‘ŸdìØ±âÙNÇÉyÀzdРAÒþ¼ÀГ˜#@ÔÆÓsÏ=W"¤6Ûl31döïß_sïÅüÚjóダ>âs­´¥Š@$`rN. &þ$þûñÇ¥$¹ëÞ½»,˜¬GÑK)’€æÐ¨jˆò »jôÈá¢ë¡Š€" d‰À›o¾)Ž(ëðTÖ÷p–ÀéaŠ€"Pó?‹Ü„8m1vžþù檫®\ˆ´<î¸ãÌÃ?,Ñì(üIR^lAa:zôhsùå—˾ñÆ›Ûo¿Ý@¿Uá]3gÎq‚â¿Ö­[› .¸@h²45ªWOÛU*0¦2'ãxê©§Ä)…||Ð~™«¢(¥E@ ¥ÅWKWªB›g̘!ð%K–Hm:»õÖ[›N8Áœx≦qãÆJ³R‚; Z¢<€F%¸A´HE@P,x rÈ!fÓM75Ddª(Š€" d†‡ë®»Î\|ñÅf­µÖ’¨rÚ _ýµ9âˆ#Ì‚ $ñ÷ƒ>X’¨¦äï"Oy?0"7qÔ¨Qq’}oÊ{䯿þjHê˜ÈpÀ’Ý¥K—XQ,•¤Z-Q@¤FÞ(Z´" Ô<p®ŸqÆfï½÷6/¾øbÍã¡(Š€"+?ÿü³D}<ôÐC’°oíwÞYŠùôÓO…ʉdçMš41=ö˜Ùe—]r­"«ã¿üòKÉ™AN/"&0 @}Uªú²jT9Cbg ³gÏ6D îÚvÛm%ЦW¯^‘6àdÑE=DÈ Íû‘\z°"PÔðQµE º`Ò'Þ (O˜´"›l²‰„zÃA ç,Y•Ò PMQ ¤FÒÜ'q,õÿø‡Á00ÞàiY_Ôc¡YhÚ´iÕy:œ04£`Ñ\IéîÝî !.ʦ=zH„¦Û®ŸŠ€" (Ù#€¯wÞyÇì¸ãŽfþüù’³ç/ÞÍ;wî~ÖBO>ùdÉòpüöÛo’[„\ÌyÈáD^?¢ì£.$mÿý÷%‚j0r‚`ÀÙ|óÍÍÙgŸ--l°AÔ»¡íSŠ‚€æý( ŒZˆ"5jøÈ*=P¨=>øà3iÒ$s×]w M|”mð´öë×Ï~øáfÝu×­=`ÊÜãjŠò:5z”ùŠpuHJÚ¢E‹XRí ã¬oØðq‚ EËzë­WÝ øÀMï½÷šóÎ;O”Mþ>ý®(Š€"¼ƒ1z´oß^æ+D·ã†#k£÷Þ{OŒP bÁøÅ`)„¶¼ýöÛB+L>mÀ¸MRñ ”¢Ê¢–IûW­Ze˜³±eóFI^HÖ—8w¨(ÕŽÏ‚æý¨ö«¬ý‹ ¿JC´Š€" ð&‚œÄä„O_sÍ5¢¨FÙÖ¿ƒBqÞ¼y†„\jô(í5#Ê£wïÞ¦OŸ>fÅŠâ5sæL3a³Ùf›%)FKÛ’â•®FâaY %ùÊýlús饗 •ÞçŸ^çp¢Br-¯N!Ü€òïM"çP^|ÿý÷‰ÖĹ_‰Nè—²#€ Ùb‹-Ê^·V¨(Š@µ @dBóæÍÅŒ>Aw5tèPéïçí·ß^ !¼»1û:›Rma}FÔ ÷DRAѪU+óòË/—¢Ê¢–Iû·ÜrK1ƃհaÃ$¢÷³Ï>“$îôˆœïTjF€gÊ:(ÄO?ýt‰â?~¼°ièý_ÍW^ûV ÔðQ ÔµNE ‚à¥4räHñT:ì°ÃÌÃ?,žÓ»í¶›xåž|ûí·›Ýwß]¼‹"Ø…ªjÒ}÷ÝgÚ´i#¹T îÁB’@SúÓŸbÙW5zÄò²•­ÑWßzë-³téÒÄ^Ü÷xP²@p²ñÆ›¯¾úÊý”O<¯Ú¶m+ÜÑþñIÆàŠê°±eýcQ„‘GE¨5|Ô‡îWE ;\>C à¼å–[ĉ³“íµ×^[ Da@\*!ê“6àµá†JÔI×®]Ím·Ý–‘>´Tíɵ\æ8Ìå.»ì2™û=Zû¬¹ãŽ;Ì<`~üñGiàšk®i=ôPñ$ƒhõÕWVë¸5Õ–ËÃ]*5z8$ôÓG€1I¨®PìcäHIÆ…Ð)Ž:ê(ñ¾¬#@.XøêwE x³€æóÕW_§…TÇé6E@Pìøå—_ÌÀÅèUç£>jöÞ{o)€DÞ?þ¸a~ÂØKô<Ñü㳯 Ç#™;~ÒI'Éš稃>XŒ"â$äý y;gð ?ݺu“(¨–UjE@ó~Të•Õ~E5|Dá*h2#€7 K’•/Y²Ä0QG¶ÞzkI.G’<¸iãì1]fH‹RQä(X¹r¥”‡’ϲ¸'2V£GQnª,ÄWöåÀx”ÎðÎ ŠÅ15¼ÐNœQãm8b‚cHúüóÏ ­#äÁðB;PR xu¦h+æÌ™cÖYgñö„ªó3)4àïŸL¿øâ Ó©S'ùóÏ£lgü¡`±hÑ"Áâÿ³wÞÑvSWþ?¿É$3 ³èÆ@ÓKŒé$ØTÓ{¯Æôz =&˜L ½J‚éÍ †ÐbZ(ÓKV€6a˜òÇè·?{²Å¹zÒmïö»÷ZïIW:eŸ¯¤££] æi¬L …e9Nà›zl “رò§OBeaºÎ:ë„!C†äâaã .Ö†o; îîQˆûnÞyçí,GÀpºòRlºé¦á…^P/ÂN :TGCÈà;î¸CspðÅZþꫯnú7ëŸO<1\|ñź&Xzé¥5ïÇzë­×u(ãéÎz / b ÖP(>ÈóF2yÿFíºËê W€çý¨$/âÔƒ€|,;9Ž@Ÿ ðÒK/%|p"J‰È™3ò%²xO$I_"VL}‚Dg SÂŒ%»í¶["ÂZ½&"ôLD Ò×ãÓO?MÖ\sM½Ï¸ïyä‘D„·uœ›¶! üDB\¥÷½ë+òb噿.»ì²D,¤´Žä¾IŸ!ÉE”ˆ"£¤-±ÐLäÃYû¢®ý;6‘üEé9h”ÔƒÇvÚIïa«o;î¸ÜgU¬@ y‘ö×aßx„ÏxLq9Ž‹b#‰q²c0yÑE%b ©}О(IrûaA"Ê’qÙzq±ú¾íLžzê)½x¯89Ž€#à4ÞɳfÍJDÙ‘ˆ1B2zôè’uëñZÐ9˜uÇ‘GÙ¸ÎË´$ ƒD¼c1˜Ò¾%Vræ™g¦ë¤2U;ò8>þøãÉÆoœˆ¢CÇÄwë*«¬’ˆr©kÇÕ‘`;S…€„úM$ï‡Î/¬óÅë)‘°ãÅ£3ãtX89Ž@# @É-·Ü’HÜûT°‡`M<:’£>ZîbIÜÃtöÐ$6o2lØ0UD¡Œ’Dæ ‹>ªº\éÑíW°ùüÇ}~Õ(>bâOÿîw¿+Q|H¾œô£9V,äíÇŠrJ‰¸nÌÌ dÏýH·rŒÏ>Üí|Šuh¡âCÂ)&1NvŒ~â1[›EÛóÎ;o€ ^\èÛ©³à½Ï½ y;›QçÎp.D€o§iÓ¦©ñxpªE< ”?ÿùÏu/Íä”SN‰O7mŸu Ò1cÆhß(^X£|ðÁMë³Ù ³N’Äí‰ä=H¿eQ8ñ~oštØl>¼}G •H„ŽD<¸ôïÉ{“L:µ•,x_Ž@Ï ðM¦Pù:rrÞC`×]wÕ¸¯býp¿&ñï 7ܠɃÏ=÷\MLè§Ö"@.Üß÷ÜsOÍ»È"‹h‚B“ä,/LOk9\oÞjpøyíb/aa¢Þ|óÍŠI<É "Šˆ´œx·âèŠp ˆÇD ~´xQä>s[l±Ešûެ?Y†É“'§IƉéÍK›Ð^{í•æ"!<aª>úè#ƒ Ea¡ªÄÓ+/œ]„¦‚£/¿ü2ˆbd@è/B[•#ê숕Íï§vZ |„Ñ`p±6|Û¹xbóν6Ι#àt?¼[ ½Ä:‚ï«o¼1ˆA:0ÞóÇsŒþ±æà›‹ÄãÍ&B@-¹ä’úMAâp¾'ÄÛ:òêþûïov÷MiŸ¤âån½õÖðꫯjÒsÖno½õVݰ +„‰'B99½‚!l÷Ûo¿ †,Žü•W^ GuTï^¢Ãh®øhÔÞ‘#ФŸ…!/JqVa»ÅoWýÝ+¹<ÄÒ:üò—¿TA¤xyh Ûm·ÝV…°ÝŽŽ+=ºý öÿä,²ÜÌ(3ˆpàÐCUŠ”1¡x 7‡)3ø ^n¹åRÉ6Ûlx–%œ•V›0a‚*1Ä;Cól°eþ]k­µRå}RŽvÈ”HÈbD¢wx¬•à‘ºdèËr’Ð}ÙXø]/.Ôuê|\ñѸkÄü am‡~x¿UK”¯µNµmgËUꋹL¼|ÃøñãÃk¯½–­^õoòY_Õl¹©ÓKÄ\ÊØß}÷Ý4G^/ÏÇR=a`Àij…a|gñ®?õÔSë|ŒP„ì¼Äw†¬ij\óî²Ë.*8µ5Q+øhd¬mÄË#`$öÆo !¦ùÍ0,á,¿üòeO-ót#ùó¶F#À÷Á&›l¢ß›o¾¹Þïä1trè߈#à8Ž@Q.Üá{…<¼U¯\ÉÖŒ#áTm¨+ù Mˆ[-Ë$®‡}²PWqÙl8ªx„¢ ÐöhÓB]Åí‰×F"ÂϸJº–3 ·ôxL´G¨‹ì3ÎoIÐ^Ž+®‹ŽŠÎÅ<^wÝu¹ùsâpV6¶Áà’Üw:âAÛý×ÑŒvs÷Þ{o:?€)Ïc%"¬ eí¯š0~•Ú,:/ Í´±Pì?øAz~D08 LµÎ9眒¶l|å¶Ì¯Õ`V-­,¶1ïÌݾˆœJs½•W£sûeX"ºîä½÷Þ+a–ç_Œ.ôÙáy`MÑ*âþd"ÆUÚ?92,ŠƒV±Ð´~ÛgŸ}–ˆB7ÍkÂ\ÄV7HÞ ‚iuI_wÝuÓ°DÍîßÛwÊ!°ÁÞ‹?ùÉOÒðSÖÆ£>ªá+ø—!«î»ï¾’?ÊüéOJ½EdY©!„¿°S×[=<°Øºùæ›ÃÿøGõæ˜m¶ÙÔ+ÃúìvõÕW„ƒ¨•jÅ¥Öö½|{pÆáγ“»ãŸ¹û’Ø8=¾Øb‹ Y—žlÀN¹Ð˜¼— ÓÈ‘#ãŸ5훇[M•¤0sc7Ñ_ÿúWË™S¹~F`ÍÜíäÄà]AáÅ_\½ 3{:qþú믣FRïK¼Džy晸‰¦ísÏN—P\’/@×#„æÜpà 5„NÓ:nAÃŒmP/<Ù.¸à óÅóK²#Fh¸ç—_~¹ÜxŽ€#à8Š@í_È:çËpD€\¸¶“7w±äÖ8´¸«öŠÂØ]éÑ7_²„ÏB6JªžÆÊ–VÅa¦¬=îi±&ÔŸ¿ùÍo4D–«´EA"I5ƒµAþŒÄj8{ì± ›,\‚€J4\*µíç;W|4î: üæmññźXCU–ëáüóÏOOOš4)ÝoÖŽxuhÓ„Ú‰‰üFF—^ziøñl?²E€*^eÛ"ÿ¡÷º‘˜OY·1„ÈÌïC‡ÕBvηý‹÷ ÷!lQ(¼øâ‹á€PÅ‚½“çž{n sEî-ñ;Tž²„ÒòÀÔ\ðF>0òH‚vÍMB>n¦¹æš+~øá:¦;î¸C•<à,Þ°jˆîGq„†îæq:#à8µ#ЫÐÚÇé5GÀh9ýà娮ôhù­Õ×bUI¢Pè ƒ*«8ÐS©¥ñj«­VèñÕW_UÄá×bbù[ô‡àÑ<.Ž!Txûí·ÃñÇŸË#ž K/½t‰UhE&T ‘¸4ˆ%o¦ƒ€?(Ú6°‹¾kêŒ3ÎHÇL‚Ýr äˆ)ë1ŸkÄ>‚U’žòG£˜>ùä“ôçV[m•î7b"ùÊð+÷×ìñ7b,Õ¶ÁÀ*¹ºU¡Síx½\õp/àMuÅW¨ÁO¼çcÂ;ã¼û%üm WØûï¿iê>÷ïk¬¦L™¢y¾PZ≲þúë«·vS;oQã(xÈa†GÍwÞ© è'¸3N’¼ãÁkF)-bË»qGÀh#îñÑFð½kGÀèMúÅ˃«çJÞ¼‡;uTx5à5Á‚ä¢E‡zðÁÊ+®˜«„xòÉ'Ó°Vym½ù曚PÓ,7óÊä[rÉ%SþH&Š·ÊQGžþyýèÆ*!é +¬&MÏk§ÑÇ…K£ùòöƒ€y{p¿.¼ðÂi´Ï[ÉZe¿þúë!{Ì ŠÃ\á)b Q;Ò‹ð^xA ’{'r¾ùæ³"¶(+!¬š!’•£\Eပ9ñþç4ÄÞ¤ô·åŒ$ïH˜wÞyuÎ4ÅžpEÞ§´iázòʶ¯‚' !E(@Âÿä‘äCÐù¾xΕ¼H:O“Øžù7IÆi‹ùt‘2‚þ¿øâ IÄ–rK-µT|8j­/”kÖ6F`e8Ï–^b­!Q}ø%Öþ(Lx'äÑ`ÇÆµ'©6ïxâž’¼VZ)¿<üØààY—\ΓO>Y=¼WYe•`JG®Å¢‹.îºë®0fÌM8Î9 .¸àਲ0x€1ïàg JøÆ+¤èª²ùŽ(Fby®s0ó„ä'RœñpÁS ¯-<ò·Þzk ?ÚL;Ž€#à8ÍA@xNŽ€#à8 BàW¿úU2lØ0Mp(8É{쑈ÅeIrÌuÕöf<‘yÛ/A×3@bJ}Ê §$QyÑÀâDÝÔTZ4NômÉÍ?úè£DUÚ¾)“¼Ã$«5àÀK|èD>œµîe—]–ˆ—IÚW¼#Ê—Dâz'ãÆKD–ˆÐ,!¹)É5%ætIs«·m¼–âè\Þ˜­ÛÆ˜ÙØƒ‹µëÛÎE@B2é};dÈÎe² 9¥¥âÊ<±Ë.»Ž€óöÇó“äÀJÏYÛ2gˆ@>.®û" LëpÞʳ%Q9óƒ£ H”é1;g[ÉiTrN+äü[guÒr·ß~»–ˆy!Ñy-Äü¬Äi@UÆ!Jf-ü'g^¥®(<’SO=59ï¼óRÞl\l³õ¬ææ±cÇæÖ!oÂûABréü·gûÆ3ïë;¯/ išdñµ6ØJþ³DFÆ–n36xKî¸è/Ç’ÎýGSEV" ½.Ììb¥d2cÆŒdžyæI¸ÿÄ C×q™Vì‹r3aŽZk­µ”WÖ<Ûo¿½& oEÿ­ìƒg…ùWÉw¾ó¯(`“e—]6a-%ž¿­dÇûrGÀh!êJV…NŽ€#à ¼sÆüóÏÊyRp¾aM^‰O“y3Äǘ'§OŸžÂr:Kµ&:·uÛjîMNf»ÔùT”=áè£pŽŒ ûxžç˜75¤O^%ÊâÁ³ÄKäÖcE<Ç<Ò!Íã‡:\ßx>çý Æ1ꥒíŒwE-c3QÂ¥Mñ^‰±…§•W^9Øœô¦"€‡Ôå—_®^HxqðÂ1â:áq@(&ž#È«GyY¹foñ¼Âs¼däÇ !¡F­DÍî¿•íãÃÜ@¼o÷Ýw_MôþÖ[oi>–å—_^=tâëÔJþ¼/GÀpæ!àŠæaë-;Ž@Ÿ Ð/¹<ìr—˜ |¨‰õ¢†sÀ]Þ„ÄVηŽ@- ”¯‰°ë®»–ü!¡ª,Q¹XÔjˆ’rÊúæ<¡y­½öÚá‚ .„®"Ô !¦eíj¡üãÜb’ÓÃú TÉÌ™35 ޳Î:KC‰˜BaŒX©Aìl˜›0±¥Å,=Fèú£—´{SÒˆWUÉñ´À wƒË »öê-@À„œ±´Ýö|„¢Š˳dBoŽï¿ÿþi$Â'í´ÓNiqÜÌ;g‰Û­¤Ü Bæñ&‡PLй‹öéÇèÞ{ïÕcðoF7Ýt“í¦Û8)z^¸. "€87 Š ”(Û‹1Blænˆ~xÇÐ& -pàý™rFäü«vl¼WöÚk/mþÈiÀ˜Ä£Oï)Þ“÷×n»í¦ûþ¯uð£ åÙF¸Îµâ^5BéÀ= ¡<÷0kî¥VëÖ4|Ïr ~É?Â3Æ3ÔKî(BÉÅÂZðÈ#ÔkÄ{…* æÍ8Ü]/ßÇâ8Ž@_"ÐBïïÊpžB@>ù˜L$ž2K Ý  ¡sz•äC@]âå#-‘¥ä‘GI䣨W‡ëãj2¢( 3ÅsTé0"„ÉR¹°Oq¸§Jí[8(ÚQUüwÜq%<‰$eMűd뉀­¤¿ ç%¬”f§!»ÊÙð‰Çóñ¹Zp±¶}Û™ˆòPï#èt&ƒ]ÌUêIF?G„ƒ4¢¬£<iZ&y÷Io¿ývIuæQk[%çâº1?⥖֡ß,ÅüÆáºâö¬Ï¢­x<”„´%€ö)ŠW -•í“qÄ¡®Égdué‹5s_L¬C$Ùº¶O¸ B¢tHÇ)ÊD”q5 ou÷ÝwkÂh‰ WÏ[ðÊšw=ÆŽ›6Μ"B³ôw6Ì•Ñôœ|Uêüì¿ —GS§NM*3ðô ™y=[’ãb„G^FŒ‰±ÅáºìX5[ææ°Fá¥S󫯾z|H½8X·@ð‚Uûšk®YR†zÌ‘\Î/³Ì2%çùQÉ;…ëkýàM¶x f‰÷É 7Ü ‡ñÌs¶ˆ&Y®flT´ùœþ §4iÒ¤’öÀžõ)×ö•W^)9ç?Zƒ÷×FmÎ8ã õœÀ#ìꫯ.éoiÖÖ¢¬So[n¹E“n—jÑî_¼l™Æ¯÷˜8…õÖ[OÃaµˆ–vÃsD²÷SN9ECÞ]xá…êQ̼È51b„z#¿üòË-åË;sGÀhÿܸ¦¼%GÀpzryˆÅ–ÆÀ«s¥šw^ÿà?HC)6‰¸ñPæJ<#R&âg—}âég %)B6£¢¹ÌÂY¹Ál%9¹†â£ Â4™R's‡ëÊëK¼OtÎÊ;‡¢…ü$ægrÔJÌ¥tPn5”ÌÏ <¥ŒµËœN^ˆ÷¡©=ôP;­ï£ZÆÆ» ŒnPpˆuº†@ÛrË-5´ÂjÆæÔ^¸'xnÅs@•ä >|¸æƒ1Îì¾!¿xæñR僕iå–¾16o'ÍñÞ{ïiž’8@ =˜{‘x^xŽP>’“ CâM¦aËX/ \œGÀpº¾ñmñ:Ž€#0HÄ*Y|ñÅ5¬€#IdžHè7é^&oÕËW·÷ǶÏ>û$’´6ae"*5¡éÄ2VÈÐ)·L\¾Wö—^¹’¥ãª†U‘O‘dÆŒ¥'ýWCÏŒ4Jî ÌíO˜i_„˜²ãÕnE)‘ÖÃKå…œa b튷AZru-Tuãzq˜«lq{„–ª…,¤“(/êuUM] uUþªž‹xÍ u÷SæÊúÅ—^«xE}Y®¯…³±Ù9Ú#ü¡]ÿì6[Þêù¶õˆÇj"›ú ! kë,Æ“pX\GBº‰gh¶HK@m¹×@IDATsï‰"=Ùn»í”'Q¶iè·7Þx£¥|´«3®‡(…uÌöl‰’*=z´†ª#4˜“#à8Ž@ç#à¡®ä-æä8Ž@9ðòØ}÷݃(:‚ÔÒ7ð+¯¼2,¼ð©Ev¹6ºõœ{ztë•s¾ ÂÒa­H²[<7ÌãƒóòQ6Ø`ƒ4Ì –|xsô9.½y•™³í÷äæÍ¹ÆXÒJ>÷JáŠA­µ­Lv‹ÇeŠþ°:^wÝu³Õþ{®¹æJ=ÓE²lƇ¹‚Ç""±y#‰ûöùçŸoX“Ìïq’ò†5œiÌÃh„µ|Å!ÅŒ6X—’T=ÏO#Ž8B= Šxòã­A€çMryhòð÷ß_¿+¸>1±þ &ásñüÄÃüöÛo‹´tS¼[ ц÷žiO?ý´®›ÉÕëÄõ „ñc=üñ€ÇóÔ"Ï*Âëá"ÊÏ^‡ÂÇç8Ž@W#àŠ®¾|μ#à4l.”½žËÃ0u¥‡!áÛnF€\–kc—]v âý¡¡ ¶Þzk OÇG<2ˆÐQÄÛîr\zó*[˜+îùù曯7ÙæQn‰ð–Fäj §Q¼oÇl‹Òƒ| «‹þ»dᳬ^³¶\pAÚ4½8ïÄÏ~ö³ô\+v² „ÁöÉ\Î<_‰_(ÞQÒF<:*pžSäq€ŠN™2e@ðžùüóÏõ¡Q÷Úk¯Ürµä~$ ‚i0$\"y,lý¢Ø²¹¡Öö½|c@‰0lØ0U~po²ö ¬R–˜» uµÅ[høNÂK=üðÃÙb-ý=û쳇Váü5Ú›"¯?Ž¡ 6:ï¼óJr ä e­ì`·ys-9A}ôÑÁ6[…ÆùçŸ?àׂï UW]5¬±Æü ƒ!úÉ&·ö8ç±ãõlá›g{‹|{îi 1¿ýíoÃÏþózš÷:MB€jb*ÇK\Î÷Ë#ÐÏ^ ãJò÷‡Ÿí>HðÍÂKl¼:°Öæ¤æQò“¨¼ßÈqé½+nPW|4÷Úš5=½ Ì0«gæ„c1a‘‡ŒúÅ/~ŸN÷Y/Ò­²F!Œµ24}útMàË>ü"To$™Â‡µ*ón¼vfiÙî( úFùì³Ï– % Uä!’§¤‰‰ûaxò9K\WÅä„3ª—qÚüâ‹/Âĉ4ó5à¤hÜgxuÔQú]ˆrŠ0JYš{î¹5ÌÕˆ#tý‚Еç¦Ý´À ¨ðW„å{饗¦›nð"ŸévóÙÌþQ`!¿âŠ+‚äßQã°àýKx²å–[.à1‡¡©S÷ €ÇÞ´iÓÔPjà 7T%ßÛo¿$ÏKxñÅ5¬†<›Üóõxv唹ÁÖƒmyòIä•xñï½÷Þ…MâA‹7$(&ûd.uÙf!d={Â={i‹†e/ìj(®¶¼¼];:1>ÐP@€'1X³ŠZ°ØúÀ#¸IQÌ ¡˜xy;Õ†@¿{y€–+=j»g¼t÷ €%Öy“'O÷ÝwŸþvÚi"Q¿’ãÒ[WÞ­»ž.³{‚Äç°’6:øàƒÕ³Â„„X ²¾Cˆ ¡tà¯U”ç…pöÙg7¼{ÖʦD cüòË/ÕÜ[k¯½vÃû$D$a×v±Ò%§Ó]wÝ¥Z¾k°ä5e +”O h¸F(d^ýu]éÉœ³Í6[Àc¢¬úé‡vX#°:t¨žGðM¿æ…¨kü+5à\~ùåªÈ·{ŠcëL Dy Úœ:¾O9å”@¾ ò¾Œ;6÷#K(X³ àCˆŽáF^¹l½fÿ&Þ´‰×Zk-}†™(Z8·fóÐ íó\adÀ³„ü,<ç(#Qh‚Ϲ8„`'ðí< D€çð¬³ÎÒgràÙÒ#x<ôÐCú\’‹Ç©òá°¾á}‡L±Äsg²LÚ2dHn³(=xÿÇk5ÞñS§NUãƒÜJ~°gèß/ýž½¤µ ì¸ãŽS«¤Y³f4Ú,¦°TÂmÑEMãEÀGBQ§o@ÑaßmîÞ’K.©Öy§Ÿ~ºZ›XoíàÅúî…m¿{yp ]éÑ w²ÁpúW|´îêç…EŠ=AbN\Æ93ñáŽ@+Ę›R ™¾–:qY—Y"¡o£ åVâ<²•<4ä>úè²ÝU£)²˜’Á”*xx06°ÇÔ”sÌ1‡ ²¨@¶eØðáÃÚk®ÉÏ\ƒcÿý÷W!(¬ÚêC\oúóÀÔ;¶X©ƒå1ßvO! ²0fìó½þNƒ€…³âùG©"{-&î¾ÇQ¢-´ÐBúNÞ µÚMÜkÌwX^~øáa0JšÑ£Gçz°´›ßföÏuBI…2 %)¡Ì–Zj)Ufú¯±¢ÜÊók&_Þvu0_vîä“ON+0O[hJæhä=¬¯Èmcôé§Ÿj‚{ûíÛbÊ)(ŠkU>ƒÇ~^è±"¥Þu¼¯úW|ôß5/ñÈ‘#Õc—3e,¾ ,˜¡ ÁÏ\ö/¼ðB}xÞo ÄbÇ>ŽXÚþ7%»ÇŠäi$Æ<ôÐCÃ<óÌ“vóÂ5£¬SeÜËãÿ0r¥Gå{ÅK8Ž€#Ðé˜×Itš‹B{›ÅV…v,ÞŽ?^- ãcñ>–ˆ± ˆ©’¥~¼Þ+'œ7o‹¸möY»ÆÉÚáÃÖþÙ²1/„z©…hs“M6I=#âº"X×¾ûî»ñát߯HXÉg‰1oì[ˆ+Ê¡Ô q{^¾ Ú]xá…Ão¼Q¢Ø ÖìF”?¶¶öfÎ9ç´"š[#2” ydcüè£JÖè´Õ:6*Ë 1TDXæ_{íµ…<ÕóãÍG€ëŽ2ƒ|(±¥C"ó¬"Œrp'¶( ÂVXAûE1cç­xK¦¹çÆ K)xFy±XùÝï~˜8Y”ò‘Å®|ÒÏ9眣¸´’4|°ø€7¨kúG;—{^¤láµÕV ‹‰Š›˜è—þyóqŒ…M–—›o¾9Œ3FcP6[óÖmûxyð,|(a& â-ssÍÁ·_È•ýr¥}œŽ€#ÐëàÂO(7Ö'¶¦éõ1wãø0.Âz”kD~!¬º³ VŽ‹XnCï1†j&±æ&Ì–¶¬S ckçföËúÙÖ|ôËš5w±^'” ß |“T»6d\²ù¾ ¾­ë›åuÁ÷ßQäýàÛ…o¾Ç[-ÏEøñæ"Àµ#aòn»í¦÷ß%yJ:¾õ˜o¹å–úÜðmÊwf³î©ZGÍ3MäÈ„öãyGÅ|Ïö+¡Ì&,yxž~úi…lP‚„Úþ­Þ¾»ƒ°‹(îPÔA¼‹íQÄÊ”[(-‘%rÈ!¡(Ì%íó. Md\\kd<±Ñ„õÃ3Ä»ÃdRÈ€1½ð ê†Òe Ëåî™Zú¤oæ äc¼ƒyWñA&E^,Â6Ɔ(ñLNÆœDUVYEe~ñš“6yáaA~ZÎa`"ž÷ivÞ¢C@Üe™0Qx%2I$² /‹€(’•VZIËSG, JÊË䜈uS"“qZ†rö7vìØD&²’:öCbb&òHËZ¶¢8I$WEBûPÌ·,ôY0¤õèC‰L@zL&ÕD&ë&ÝÊ‹ w÷´ÞO<‘ì³Ï>‰XÚè1Æ!“lz>æG#%b]£mÝzë­‰XS斻馛™ µ\ÌsŒu\ŸòòÌmKN&òrIù ÑXkYy)$²€Jâ¶b~Ù——M"?i}ßù?DПÈF"–pŠ¥ÄgMD ’Èâ´ï ÷z}–xv$Y["+‰¼Ðû°#à8Ž€#Јð¢d Úø˜v"À÷‡(;ô9`"¹ìðM'¿D”¤úÍ+Þ·fç[{üøñÊ£ü‰&¡<稊T¿Ë%šF"ÂP½Ö|{‰ÐXå1œwj=ȨL~‚ìIï™à)Ê }Å8‘„çêð\qÅiÛÖ[®ûFm”ˆ¾¤26΋ò%CÌDBÈåÖGn$†%uùQOŸÈ¬dkÈØŒWø¯%íG0‰„ëLÏYÛ"K7n\"- ÊÎÅ[ƾÙf›iû‡¬Q¼UsËDzý™ÒcbŒŠãóÈð˜§âc¦hÃ"Ås²7£¢rq»Wcœl”§øÈ*=b…ˆÕËÛÖÚ¿„ES^à/Ë—µRJÒ(6†¡ómûpÅGû°o[ϱÐ=Æ—c(VÄuÄÍ/‘PVé¤ ý™HÄÅ:={LˆËgª¤`â@#Ž–BsŠÕ&<óÞˆù¶s,xàUFàeñ£ý(­ÇË#Kh˜™”©o œxlGiÂK%«$¯,ñfa\¼høC ΄F=”"¼tbŠyŽq‹ÛX8Ïh7Æ5VþÄŠ^6(6òx‘< ¹/1oý¶ï^¥WÜ•¥xø/GÀpG _@H`ëÏxÛ/ã÷q:ˆBµW\Q=ØJH\6ù>½ä’KôFxŽR¡ÓˆoV€Ûm·òÉ÷·„ÍI$GI§±Ú~°ŒŸ9sf"ɲÓÈx‚…€ˆE×¾-Ìöh§\d)¼¹?‰ 2XB±[û›àÛä5(c #dWñû˜ºÈÁxÞ³Þ+¯¼r"¹E´ê`úÌS|HÞ«äì³ÏÖû“¾‰>Bxãœä•2–UvEôã[r„©Ñ-Ï?r­|pÀ9«·K}dp&KË*rˆ>ƒgOæñr¯½öJ3lG ®ðPŽêéŸëøðç}åõ{…pO™Œ³/~®ùxrsy2œêC€¤j3fÌÐ8€´ °ýöÛ§y9Ö]wÝpÕUWY¸i$åþ@b÷AÄR$†0$•æÆ°Øw$ä¼üòËÓ„RÓ§OüãµlüO&YMFvb’À˜Ä¢IÖbôEB#bÂ31÷ä…£ âä%g§uËñsÏ=7ÈËDãñƒ^×Xc4ö0yLˆíHÌ>â3R"Þb¥|&Z0ç؉GÇ@»]tQ ^KX‚EDù,/`.šî¢*}wœ\òâÑXœÄZ/ aÔ4Á\;cj·ëBxNv!ïý:Ž€#à8íG€ÞY+äì!ÿí8-D€|?@¿/I˜,=ýnͲÀ·ç¾û@øF¼ôÒKé§žš-ÖÖßĵ'7I½ùÖç;äñ$e¿yÈÃ̃ü<ây§×ÜOäþ ש„ÒÜýŽU³Æ/¢VÍÕ@ûÈÿdI” šï‚¼;Ȉ²äxEÎ`Äskù> ]xá…A¢Œ¨¬yÍúë¯Dp®²(êÐ>ò©,Yݽ÷Þ[eMÈɶÙf½'(KÜkµFõIcäyæ™g4*÷'s ë…W_}Uû"ÏïA¤ûüã¹&—D(Ñc¢”P¹Ï?çøƒÏ1&î{ˆqôÑGi»¢@ÐùÁrê²s§ ×C–˜%xcŽ¡lLÈŸxâ‰øPÉ~½ýs ‘;Š7›¶‡¬Ñä›@ÎHžäwÈ‘šŒ³„ÿÑr\ñÑrÈ{§C&SH° É{Y¸K´Õúà3a2ISÇù(FŒ1@aÀ1KLL°¦Ì0ôPˆV8Lí81å¡[n¹EGÚ9ñ bI£?I¼fåì<[^^$ʉÙl|¼\Ds›-¢ ÆE³<àx¥,jL9—eBÍŽ;>_nŸI——y¿×{÷ÝwWE/%î)±âJÄb¡l’«^Å.Vzð"æ %% ÔœGÀpG ÷` „°ôœsÎÑ-ëZ”:9Ž@û@¨†°A4eÊ”pâ‰'æ2„ ùÑG6Š…¶&Î-ÜÆƒ|ËJØ—0uêÔ Vãú-¾ÿþû«â&OàÛFVÛÒ5×\¼Hh¾’cÙâ)¡Ê;c_d‰< 1¡`U™ò¥ZùÊÄ“O>Y“¶ÇmÚþ`ú•?(*‘9!{BæQ™£Sg PjîÞ<9]‚ÀóÏ?ÄU^¹E‹FWÂ/¥?'X”Iþ„ÔZ%;Yá!²ÐB 1ßý÷ß?à¸@ãW‰e ôØc…Ï?ÿ\-&øu “4zôè€UM–ÐDçieX`Ôƒ^0yŠ“l{ÕüæV¯§H5í÷k¦,|øá‡ ^’(Lï¬ú‘²J/®ôèÇ;ÁÇì8Ž€#ÐÏ`‰øãÿ¸Ÿ!ð±;‰Ï¦$>Öo¾c"@•ÐÌøÅ»á8ß»DB8øÑ€ïäN"Æ´ú꫇Gy$œp ±áúë¯/½ô’z<`eÞïÄ·)²‰SN9%HÈëpã7 g¦ I“&…k®¹&HØ0µ¬Ç@Ôið »ÂÓàÌ3Ï,l¬È$¯†§XúCìãÑ a¯JŠ"ãBŽÄý¡ EL( Í£ >ž·ß¨>iÙZÞÜ×sr2”C<·4Kغ ÉàÕóÄÆÇcÞ1dˆÈ!ŒSñ¤ÁX%®X¡p‰ÛÎÊ­,Ïk¢´l¼ñÆz˜è[l±E®çÇ`úGÖh‘Y$$—ÊO:é$5¨EÖhmð„ÌÑ©3pÅGg\‡ŽçâÝwßMµà¸¨1¡)µ‰šÉ—Ûjèõ×_OÃc±`3—·jêV*C[x™0ŽêÓO? hêy)`U– dÆP-a oÂr¼TÉ3/<³¨–/WŒšv, &Ož¬×+š‰'†Í7ß\qÅ5{ûŒ+=zûúvúèX`bÈbžy>$C,,q%Gq·í¶ÛVí±„÷^{(A™Ë‹«&ú| ³Ð·ù¿¨¼wGÀpG  h$tˬY³Tà¥ù÷¿ÿ} C“má-Þ[|ç"dÅÂxÎ9çÔ:Ù²íþ!!Â|„Gq„ L YM˜.¢6ÔòmÞî±4³«(?Pvaȇ⃰F(Cî¸ãìJ^— ¹M›ÉFÏ·Íýf³„>²0ìñÀù^ÁP7+pG©±Øb‹ÅEUžc²1N óÚrË-KÊTó#ëQ®2¤FôY®ÆN(L<µ,äU¹òÕœƒgd‰Þ(nù«‡\pA G¸8ÚBYl¡¯˜Cñ®á\Lƒéß””xÂà݃¬™#|X˜+¾wQyèùõöî»â£½øwEïäÆ@a`4ï¼ó¦y-ì[¼=Ê=Ü™ð¦@‰OÐqØ—$aAG©âmúÈ‘#õE†FŠÃaÕÓZg^HN‡@Ö˃ظ&Lèk/®’+=:ï^í'Žð’c±Œ›>¸ìFñeï½÷ž*5« ÕFxF”¢X+¡¨_a… ?²à¶…ââ‹/^µb¥Ÿ®«ÕpGÀpšƒ BѱAèˆ54ëBàd‰ïk¾y±nFÇçöÛoÏU”dë¶ú7ãÚu×]ÕbšXä TcC)‚rÄéÿ@xJè¡wÞ9<ôÐCá‚ .O=õT¸û$VcOÖµX¸»Òhpw ².„×(ªÁ’ïŽå—_^ó³õÌõã"öXˆËÒ'á¥éÁÓŒ>y6Éã2?ûä,Yf™eÂyç§2¾¸L-û´‡,±ˆ0:Æx9{m¨G8,SlEžø#ú ±¿üå/õ[>‹¨Öþ¹®È™o?”è"Ì¿(*éŠÃaõéÇ[‹€+>Z‹wWö†»ZmÍ&Š,!pF£…J%b‚'aÑûï¿_¶(Zw”.L,sÏ=wÙ²ñIÊ3éCî*N¬‡ÃŠë±_dÕ‹€iúãö³õýw{p/bÜ]éQŒŸi.Ì›xeàé5 ïòëØü\Oï|<àêÿÊ+¯¨"˜»,V+Ǽò`€ivñlmàzB…9ŸÅ4!œGÀpGÀh%sÍ5—†MÁC‚ïf”¼óÖ=|+“„5ÊŒ¿î¼óNζ’çjúBˆ‰ a­O;í4µÐÆS y¼W²BÖjÚìå2\oBm¶Ùfª(", ²Hã¡Lî 䄌aQ/c˜76îÃXцa.Џþð‡yÅÓc|‹<EÄ· «¼„ÜEu{¼}~öÙgškÈxà Å[¬¤  Âÿ³Î:ËŠÕ´E¾xÏ=÷¨|°¦ŠR˜k˜õà_n¹å¡§L Ah. ðüñܨ-õôÖÈ! wE»Þq8,-äÿÚŽ@õ±~ÚΪ3ÐÈÏ 8„fÓò 6Ø }Y¼øâ‹i¾,ŸX÷’¨mÇwT—Ýø|œw#>Ž»î¸q㪫®öÞ{ïšz¡¼@°…»ÄDŠ›‚/&6âí)8,4VÌ ûÄ$#Ä„_‹"F+ù¿¦!€Òmíµ×Vm> ú\/,Âû}ñçJ¦ÝvÞpPðŽàƒ¥–7(ø(«W‘ð?ÿó?a·ÝvÓ<,­n½õVÓYôV"¬Q– œ‡§<¡µñë_ÿ:ÐJÜØ‹ÞVÞ·Ž€#à8Ž€#à4ÖÆ Såë„܇~xa7”%Ñ.[¾}Y3!ìTB±C~Ö]|·Š?F3¬ÃœJ` ‹ ÙkêvÚIxÃp­1îÄÀ¨Èà´5ÿxKá‘+墻êÁœ„hÊKZÍõ!œ:„w9QNòÚâa¸ÿÇŒ£aêrº©êP³ûD¶‚bZyå•U¹+=8ŽŒ ïþZ…߉žüÜÃyÄ·y;èÛÂÇåŠÂ‚Q'NÄNûp@Zµýã}‡ÌBæ‚¢™g{€ÐûÕ|Ÿ¦ ùNÓpÅGÓ!îìx ‹¬^±Á‹ƒ¤E“.}f­K"2S á9sæ€Á2ÉÕê3‘Ú¸ã‚尌˵bÁb¯ ëðò`q‚¢ƒ¤X‹,²ˆÆA½âŠ+Ôm´×Ç_é>r¥G%„ü|³`¡‰’yúôéªä ñ&V}|ˆ×û\âzNè\ý¡ë®».l¸á†U-*Y°ã‚Íâ9E|Ñ{~ˆ‘· ÊújBh5 Go×pz ¯¿þZx²¦Äb7O Òèÿþ÷¿WÁ'ÂO3ª¦ŒRÇê17V"ë‹Lxl×JÔ!” ÖËxû‰žïºë®†æÃc<Œ vÖKNŽ@§"À÷%è^x¡®Mðê wa±¶ÁÚ™Ð.|·ãAP×Â=çÕi÷1ŒÔ"/ d–ôäü@Á3ê4¾óWYeUr‘sù!ÄPÒ›P®¬{ÉwêTd:'Ÿ|rZˆ÷¹SŠÞÏȲbo‚´â?vf›m¶Ô‚w Jª,!Ì'7†¾ÈÀø> 5³OvaDœUªaÜÆxùTŽ˜ÇbÏ pG–!óC–˜]g€5^(ù3ò¯ZBÖˆ±òX ¡lBqŒ§Ôˆþ‘5"säyD.Å a$Î3éÔaÈCíÔgÈÇC"ÉZ¹Y%â6™ì²Ë.韓‰§ç)c2Q$¢(AK, ™XÒ2b}ŸÈÇR"críµ×&‹.ºhzN4Û‰|ôi}™ÄQ¢¤ç$\I"©D&¥DS‰|è¤ç( Å|‹`-‘‰Vý5jTÚ†AUŠK<¾D”9iY‰˜L:5‘‰=‘¢D&åôœL؉Lšibqœˆ0Oσç¨'·–)â¹èxÚ°ìÄ|´kãâÚ=÷Üsi•˜™lQàTÄ(­Üe;’Ø-‘—J"BTýåG"ÞI)î]6œ†³+‹¶D, y'bM’<òÈ#‰,\Þ7èÄÈ5Ùc=Qèœ( †D\Ƽ7â:ÕîK’ºD¬šôy¿üòËkºŸeQª<ñ>’ÿ²]2÷ó>` ¢Põ9¥,Z~ÒpªE@>ØÓµ¤­I³kêjÛª¥œ„[(éWâ`WUïã“­ä([O”Å%åùލ–øn!]Iý¸oÛgn–0?Õ6[¶œX˜j¬#¿÷½ï•-ë'N@€ï^Ih­÷­$/OìÛ07ÖüÓ¦MKD¸§ë±¬NDÈšW´£Ž‰Ò#¥G"Ê]ï‰`1¹÷Þ{;ŠÇNd†w 2 æw®9s&s›D¹HD¨ŸHD‹Nd»cxâ¾oð’wßÏb<›ˆ"?åD"J¸Â÷ßö>GÖ…ÌËÞ[œc-=Ï3Œ ËÎ!CC~dÄ3˹ìq;Ï»Ye?!ûÓ'2ñ"Ó6EQˆßºÓm|ž~ŰM¿¥xç¿ñƉ(Òñp^¼ŽQÆ©,˜§8Ο(ëQ`¤ßbȱgÙyky—xË”´<ŽkÅ8a¥å²9äwÖò¾W¡zû×Êÿø‡lÑÚ¶-²:§ÎCm¦SŸ! Ýí­´•X~¹‚&&pÑŠxà³í1)"DŠéÐCÍU°Äu/¾øât¡ó]â#VÐ&/&Ñ,Å †¸ï¼}±N˜èIJ"×»’ñÇ ž"ž‹Ž[»lc¾lqËK•ÉÞ²Š<^¨ó·ßûb9‘ˆ+o"V-Š«âˆ¥D7§)<»Ò£)°z£¾D’Üé‡óÊH±ªP«ºÓ(Æù¦] ‰PÓó_¶àå½Qi>”°*$ëCUÄWÇ¡—rG <ð²ëÊò5sV¼'jî¡C–×JŠ„“q³¤â ÄË#‘p¥%uiG,×U!·É> p ¡[±ÝJ|О+>*!åç; °G^ï[ñtO$¬h!{ùne ÄJB¦ˆ…•:àJ›G}4Á‘g…' Œ#Ê#ÀÜ-ášñ´NZh¡t^EÜE¼þÊ7ÐÇgy¶$`ŠYöÝÿưpäÈ‘‰„l×ò±â‘yeq}Û—º*Ä7ØMIP$Ì'±âc0}ÆŠ<Å÷Ô”)SªÂÅÆ>VCYÅ@|¹†ÕV¯hkÊ#mPþÕ¢øà»y0nY㪷ãƒ-ʘ<0m_r'—]vY\Ä÷;u%OA¿‘L¦…a>b,D몮²¸ámµÕV¹!?hK´ÓA¬qƒ¼Tãêé>q:q·Ä,¦‹.º(ˆå®†?‰³/‹4÷Ihk—m-aGp‘%öža‘dâ´Ÿ¹[°å&%ƒºÚm²É&%ñéEÐFŒ‘†ÿ¢Qx”)m¿ëjÆ"/TýHCÖžm9†«|X²«”Ç q{…<—Gå+éá­*cä%‹€,(53¡H£BX’Ûo¿]“»áFpfLæª&?á8u ‡l!”‹|ÖÑJcªˆ £lC„Ç©•D¨VR…ùÔÂ>”œˆ~2ƒÐ6äeƒÓCÎ6Â[ˆ@BÃP‰pB“:“"ìÆ5×\S1¬†.ó¾©E( ¾Eœn@€|„º"” Ï1a¬ŠÂÊñ H }r>@âýD@§kœN+ßÑ$7!pØ~ûí5DͤI“4B¹dÒ<¦Vñ†œ€\¦„nkü€¬E¢|h8%0Df!†If¼UõðVÕa奃tX+IÜVg%¹Z6jĒʼ»ÆW³¥¢ÄŠWwqù8H$þlê†^4zIJ—Hœ\µ.dÞqj?"€MöÞ{ïd‰%–H°\çO”Rêé‡å[amÇ_'„wè$^b¼°tcÝU)üu¬l=c±:lëé+æ¹Ú}B}ª‰0OÌQÜ7"Ð0 í¸'˜åPÿॕDÖ·m+…»Ê†¹¢^9 eíÛV„)…Cåž…GÊó´é ˳Ǝ-h˵]؈ŸpzžB´ˆDCÚò¼–[wñ=,‚G]«á=!I™+®‡:&ÂGnˆ±2¯Ht #Ô)üu`(ʲD”%ó-@’º†Ðryž ‡<‹¸x ñÌ!£ª•xwúé±ÇÓöy!«i&5«OÖÝDáÝ-¹€ÓQ6ä`xz:Œy*&ä}ðÅØóæ+Îóí…±¨ý¸½Fï×Û?õÁÉüÄ:&]Öh½½Á!à¡®‡Ÿ×î`âPWqȬ,˱âC§ÎAÀsyTw-\éQN^ªqHâÌd¾ùæÓ…!p«/'ˆ®µgI†ž~èn³Í6 áPj!bÔš›?ñ« ‡·óÎ;«pz,ÎÚ‡N„Ê1jÑö¸ãŽpßñ±eå|·“:‰—,—^ziŠSÞGh\¥…ajÛJ!ÔGàfåm›ýŽûa_¬òJê`€R-ñ±ÍiaýÆ[”ÕÌ Õö[© ë }ƒM–àŸë‚b‚?°@9UD´ƒÒÁÆÂþuKœ6ŒòðRDÜ Æk¼-§øˆ¯6ÂRaå;3Ûc/-Gè‹j„±‚%/”¼ ÷*k~x?~|"^'…!·¸‡¹†_–QîU”潈Ž"Öžêòg¿©Kyx´øáüfü\B_ \/þ«Vþ³üúïþA€{u˜X>k«SN9¥ìàYC‰÷lú\Jræ²å;é$cEèls1|»ÛsÖI¼v2/¬Ñ µ1€Íí„kþ„5w¥ws'ÍysÚ…@êŠü&Þ8u&Å+ßÎä×¹r*"À‡TqÌ`<9ŠÈEÈ´ïxÖËCÜ=—GÁåp¥G0~¸)ð¡Ù¬æÆðôéÓÓäŒî ®[qå¯:¡9ýÛ—$| ’ÓŠm§ö À=–§ô@˜J²I=öÑΖã¼óXØùv+>:‰ÃǶàÁióÍ7·C…[¼$ SÛbY‰øZyÛV®X9Û"¤©†øØ´:ñ–qÚXããìÇ÷M5}ÔSÆ„uÙ¾ùc¢#¯ŒËzËÄ÷Š 1XRßÚŽûçZ[{(ò(Æ1Æ­œâÃÚd‹p E8ûE xÇcÐêñ¼W#Ĥm y˜°&$¿ë#¦H±vm›Çýqžù„9$&ø“:)Ö[,æ1¬b¥?y§ ”'6n>º#·>’›nºiÜî×Êÿ€ü@ß!À=G"p»/ï¹çž²Ä9 ð˜BÒMDî ¼yfyŽð`À"ß©6°¸Ÿ&I´ÉÁ ¡~ôþaŽ$gs[‘"¸¶^¼´#Ðûàáç%¹Cœ:W|tîµqÎê@ëO‰1_ò±!9Fʺ&ºâ£ ›XŽ<ª7«ô AX5áåªïÁK:ß M`NØ‘F%0·^1H(>ä%¾mòÙgŸÙ©ª·µ&4§a´XÎ;ï¼ SÕŒ{AEá¥}Œ#œÁÞ„¸@XMK+ýÂǺ)«Z"ìå„Ëí¤Nâ%Æ!öÄày©DyŠð­D±àœëÄ_|-³õñn°rñÖ®m¶¼ýŽ=*¬Šð7¢ß¬r€²Í¦r(Æ_¬œ€'êäÕ‹½?¨kcÍÛÎqÛ±Rcÿý÷Ïz¬‰–)>âk†’ ¾$ŸIÊϰñbòÛxÉS*"ãËøi¶r |³}rÌpˆ¯<Å¡½À7KÂy£<Å8à‰+HbÅýÚ¸ã¶òÚ¤^|Ý‹ñ53ÞcE„$1MžyæëB·±’ öš()Tåp4%Š)1잎Ï1^Ÿ&a]àÏœ7ü™âƒñê²ññ¸=«G™˜÷˜ΡÀÍÞë|cp.>׫…ÿ˜'ßïoLy†÷$üÜËå%ÁÆo¬÷âСC5ñr¹òxŽùéˆ#ŽP%Ïë²Ë.«ùx:‘×nà‰ûˆ5ØÑGzÔ ¤E9F®¼O>ù¤†á<:MG€o¾'Mš”\~ùå…k·¦3âÔ„€+>j‚Ë ;Ž@#p/ÚÑt¥Gí˜yúhvsãŠpY„µâÕ,Â]eFV¶Ü¶ž„æ´wÑE©° +ye¸ÆeÙÏãÛødkÊ©l½Ø#Þª!YðÿÕÖ©¦Ý¢2ñ}+qb\ããÙvP²¦€ˆÛäœ)å²ucÅuâ°`Üï1Å×–öbþ¬ß¸|ì­BŽ’˜XßÏ(ÀÜ(öÇÊ;_Ë–¶HN_éÈý‘—@œû'æÁ±‚ƒ2(Ah‹y(¯X9ói¶Ùf˵¢Û7ÅH½üׂ‘—í}¸/‰5— ´¼¹?‹BnºíŠ9¿Ž@ À³…µaÑM2b>²Yp9å#àJ|\ühc@ ´ûî»krp>v°¢#TI‘Àr0½CxÝu×Õ0Sš°\¯×ã‚9äÛßþv²¨Äv¯ÆZÞø¶|äˆ2á¹ómk@ÐhŠî=®I­ž˜±@8+˜…À´_îÏî÷¸½råíœÕ¹¸nÌK9創c[ÊÆTNQbul›'¬Ž…èEÂò¸?öc8^)±€<&[=¼Æñ¸|Œ•g+Gìùëå…zñ5-ò˜ \;)¾bGŒkÑøà;ö¼(n3¾·ôdô/ÆÇ°·kÖv ÎÙqã±ñ5cMǽ¯¼C°¶öÈiqË-·¤\ÅJ‚l¾‹´P•;ðç¡OÖ”óÏ?rüñÇ«Hžõ{%ÅB>Ã&ËŠ)uŠÌa¬×²”§ø¨—ÿlÛþÛà¹?~¼>wxÜ|óÍeAáÞCˆ=|øp}fXë½ñÆeëtâIæ®wÞy'õ`!æ˜1c’÷ß¿Ùí*žXa´ÔRK¥ó9ŠÝ=÷ÜS£etÕ`œYGÀèk\ñÑ×—ßï´÷ò¨sWzÔ‡›×ª K/½´~#@"9‚¬fé$åÄBá ëUzÀ·Å[½í¶Û*†y°ñÊ ëHÆúì³Ï6E¹c}ù¶:8šÀÔ¶XaOœ8Q…•,9æX=àÒslÎyLøCè̱ØKãPÜžµ‹5­) âð@œ·<Ùº1/yŠ$d}ÑoìÅ{ŠdyAnÏ'Bê˜xɦ[Û1?:Ð2ÿb8ŠxÌàš¥x|ŒËú„'Ã5® öãñÆýP7KY<òÜÙ:íøóãß“•”6ŒŸ?«_Ôfv|yŠ»ßiϼ”b¬íšÆ×={/Å×Ìx+Ú¢ˆÀ£Îˆgؼ4Èñqâ‰'Ú©²[ÆŒr”gwš„¯²{‰ë~ë­·¦Ï}–¼:°lÇÂÝ(Oñç&)§ø°±)>âZÖÛ<ÅÇëáŸzNŽ@ZÕ+´¤^= Íáå´ÓNÓd>æð>qj?$c¯¬“ßrá½÷Þðþ(Ç혰7mj‰²&TÛãxÖƒ6bv, ŽëšÀšò±b î‹sF1¿ÆKì­·guâþ¨óBÚ±vQ`TK±Þã~òøˆ0ô‘'|ûF‘”ÇWÜçá#¦ìyÃ).Ó û1Ÿ1^ñ}€‚¨ˆbóî(j3ÛFö&¸Ó]vÙE«ÄÞ5æÅ_÷ì½_3»vå¶<Ó: Þß|óÍôšóVë¥zš[_#GŽT+Ç3Î8#µà·s¾mF 3dÈÔû(+Ä´ßk¯½vIþ‡)ƒö™gžiÕKî“X!‘ÈÙ1Åí…“²jÜg„ºÁÜxyŠ" k“-¸›Ò¦ÑЏŸJüÇe}߈@‘ñÒK/éû“uÖ[lQq}ÃlšxQ"‹¡l°AÍa&cÚ¹Ï3J¨½í·ß^Ÿ}”9ÌCÝÆ«8–ë¯=î—Í6ÛL×Ð̱àÌššü€Ù÷x¹¶üœ#à8­@àŸd¢rrG iÜqÇAœABABA¼<Âo~ó›°Í6ÛùnZ¿½Ð°(ŒÂ;ì$á`Á@«ø°Þzëù(é…áù:î)±î Ó§OòÑÄ"ˆÕV6lX¥DS8<õÔSÕW^äC;ˆÂ!ì½÷ÞußÓŸ}öY8ï¼ótn9æ˜c‚Ĩ"ܪŠož+Ì!Ér+ˆ€ ªz^¨ùpïíºë®A,Uõ>‘øÝA\aÕUWp}yŸl²É&AB1TÅe‹HòQÒã"D.{¾ž“¼ë!ñÊÊ­&!}rsg¡·¾SôGÿN?ýô´&ïy#æ£JxRN¬XqÝ2/ˆPZÿÄ>ˆÅrzžyƒçµéÜsÏ-ÖùçŸ_x®Þ'œpBZUئû“&MJ÷‹vâkƽ$y’mˆÒ$ý“03AÂçñ$ÔfDPÎ:무IÖ"˜Ôßâm§ëÄôdÎ÷ÅÕW_žaŽ õ ÈaŸ}öѾvÞyçô<ïñ0'Ÿ|rëõôx¥ w¥E¸Ïx¿d‰qÜxãÙÃuÿn4ÿu3â{o}ë[a…VÐuÏÉã?$ßMÙññ]Á»C<¦ôÛL”™ú½ÆýÙmĘ^xápýõׇK.¹$ˆw˜~wŠ2'ÜtÓMÝ6œŽä—õ²xyñþÐoTæ^î; ­Ä›;°VºâŠ+ª^—uä )GÀè-Z¡]ñ>G ÿp/Á]s÷ô~^»<X»¶*ỷ()4<ˆ¬¤¼ Ú*l¯:šÃ“(JÔëdÔ¨Q ñ‹º¬9Ÿyæ™D­%Þ XasŽ?î/þ[l1TìQ.ÄS¾Ç<òÚË"Ud_T·šGy–ú±•>mç|Ûøc˜—øx^Ùcyã‹û1œ©óhíäÅÎÅ!–Œïr[¼VŒâ1Q§+S¼¸/òžYûÚÆ|ÆXÅÇá?›õ{cÄcŒëÆmZ=Ûa{æÄxÇæ]wÚ½}Š<–¬ó¬ <;HBl'@a¥æ‰û·rqNÚ!¹îäÉ“õ4^ä2à8!³òê›§H%úáE[qYãƒ{ž\,œç¯õòo<ùÖ(B€u ¹±¸W™—É«S‰e„Å>Z„“#‰5Þ ÝJ„B}î¹çÒp‹Œiܸq ó’SãÀËhæÌ™ ^™–o9t‘EÑ›_~ùeã:ó–GÀ¨êÌ"åéä8Ž@µ¸—GµHå—sO|\ühcxúé§Ãꫯ$”PBµêA²z~`%Û,¢?¬oE0äÃ3œtÒIƒòúbwÞy§Žáì³ÏsÍ5WÕ¬‹Ð0HN­‹W•{QU ]S âˆÖïXVçÖœx)‰P6¬¸âŠ©^²ΫDÈ›/çQ­×HÚX‹wD€«=Š »Ð#‹g:ðš1+ž—ƒ%æ €k3Ö(àå¾ñ(Š]ˆ°D=Ì*Œ Ä^$Ü X–M™2ÅvËn¹·~ô£… 7Ü0,³Ì2…÷MÙFpþE –¶„Gë'îcæ(p•õéy û5¨93mHv˜/ñÖˆ ,+yârÍð4’ä¶¶›»Å2Ø<;˜ûc¯ùæ›/H(*­Ç˜?þøcåé¢ù4@IDAT‹.Òç{Ö¬Yáå—_«¬²Jøñ¬å¸ïð$Ák‚ßãŽ;N÷ñÖ MÚh“yB±èo¼ñš-"xåÝ¿„ÆÑ9>ØÇËiøðáEÕë:ÞHþëbÀ+õ,ÌxÔtÐA:/ã}…'G9e^à™æÄËŠ5–äÈÐç¡\½N=Ç3Ïz—wžaÌAxµ0àõëÔðöÀãZB×ê\‰6ïQn‡Ÿþô§a¹å–Óõ?ó±“#à8mA@…NŽ€#à4÷ò<Œîé1x ½…|°Úkeó˜ ’bí+ DVƒN$'4Çb<Î1÷[´¥7I/‰eýÄ¥ÇzÚ©ý`±Í=Â镈< XpR^„Ÿ Öª\KkCÚD‘åz¶ý<ëø¼ö²õŠÚ/ª[¯ÇGÕò‚%¦á’­SéwÑøâœ!$‡Ç›Æúà¹2*â;N ýP/þãXì±Cû<ÿF1–X5WCq¿ðÖl*º¬_îSíhËØhǨÈãÆÎÛ¶{ÎÇØÑ/×0¦¼ë^+vð)áèÒññŒs̈g–g·hÜñq®%›nº©UM·±WI\>»Oßvï˜Ç VÉ$C7Êò›m#þÝú­‡ã×·Ž@%ø®E¯z1-¿üò‰(T+UÑ5š”èsÉÚM U*Öéô¢œO$ÔU2Ï<óè¸Ø^|ñÅ%óQ§¡[øã]E2 Ÿ›Hرt~g&Ç_+<-»+çÓpZƒÖ0NŽ€#à >†%ž²†!dX”ª#þPt'=Þ€+=zü·qxíH`nÃ%¤ 3‰•]CB &¡9|pÀªô ég­J—o€ä He",¤y½‘,™Ü[V>OÈŒ Ý–E‚nBäX¶Öw^{Y^òÄ”)ª œá-òÖ±€œ>ó(ׇ´²±q¾V*Y»ÙmÜGÞX80ßêB¨Åec=¡‚¬ ¶ñ¹¼ö|ÇåY»4›âû€díy_·˜?ö³IÝ©·YtOS.Ke÷4Ç¡,v¦ø¿³‰®áŒîY(M–šËêÆÛX°Ÿ—”œ±¼õÖ[ª€°þ²[ÕÓ$™nI>Ž4äU¶.Ê æ–x®7žP~‹%ø€fÚm¼ñÆ%÷Šx„$?ùÉO”úˆ˜âAñG}4 M”<Ô§.@ÆmT+ÿVÏ·Ž@%xîIì-ywtݳþúëWe|"T©R’ûEH·!™x×ìœçõIÐ%ŸX·­cù'Ô äŽJ–Zj©t>%\!aÔ^z饎åÛsÞBÀ½u=}4Ž@Ëp/Æ@îJÆàè­ D€xÍþ#ýÈà L+H”$ .¸ ö-a\„;ƒ%>PÉïÀG«„ÎÊé^®Ü^’ÔvuüêrãìÆs±"ƒëK€"bÎDˆJ9þf à‰Âæñ‘Ðç Ùc1í™8¯½,OEŠ¢ºõ*>âz6¶˜—XÁÃLñóW¤0‰ÛÉîÇõ­M+ ÂíZH8*;­Û<ŇYÜ[’ 9?Êe‚µÃ¶H™‘UnQ¶“þ,÷ <]ba}'ñÚ,^PÆH;ã—ÄÌÉÿøÇªºãyãCý{î¹'‘°aÉ<0(e;m¢2¥¿É'Ľƒ2æÁ¬Š·j 5ƒÿjúõ2½Š¹G}Tó/à%¹ß~û•(ÞŠ@A(aæô~Ç€åÚk¯-*ÚUÇyÿH¯DBa©±…„àÉøc ߌ¿ìø8oJŠØ› æ»Úý¢ñQ?we¼eÇ”§ø@9b峊’<¾²Þ v½)›õâ0là ^à?ÆÜúõpyH÷ï1ž¯×^{Mç ¼6^ýõ`.fî¡<ï•ü€#Ð!pï^yå•ê™Ï½+ùvªâŒÄÔ;í´“ÞóÑLž<¹ªz^ˆõÄÝwßÒ€ †A’ªÓYïjþ0¼÷Q£F¥k¼éFÜwß}©ÑIWÒ™wŽCÀwIœ!G óp/Æ]#Wz4Koé°^zé¥õ$¸¬*gÂ7- nAã +¬ ý#”FÀØ¥ãšcŽ9ôcéÖ[oM­pkáëp¬üvÝu×A€Sg!€‚ÌòÁ˜€ºÒ6V`ÅÊXñÁ(c|¥6MñQ®=CẵgÊÎÕ…ðY%µój¼poë«ÒÖx±ry!“¬¿rÛrŠX¹cýdÛÊŽ%[‡ö«¡8Ü•Íêe#ÆKÑ6ÏëÇÚòm"@œiN‹{†­¼»ÌÓD8ÿÐC¥ÏJZ'G › |•$›Ö{xþùç¯Úc OÛ1cÆh½¡C‡&=öX7 »WÞ­„‚µ°và'ÆNÍEó-^£„#dÞem>räÈOuSNŽ€#à4 ’IÆÉpªÐAb£Y”Y”±| [=HÂâ ±R«nÇ † º°Ã; ËDÐD$B˜Ó#P"¤ §Ÿ~zØh£Â¬Y³‚$o â™ÄÊ/Ì5×\uµYk% ! óÁÌ™3üóÎIJ+,¹ä’AIµ6UR^„NáØc ¢¬ò¡¶ÜrË I%e*ýáhÐ)¶vÜqGÖ*Ö†ó"l ÜCw¿âõ9ï¼óô=$áÔRNãûlÍ5×L³óÊ+¯ !TrŒ"Pâ ÷UödÜÏU‰)=¼è¢‹¦ûqݘž‹J´Á¤Eâv$s¹¼ŠbCÇ‘V”.¤?ų"ݯeG„Aiqñ”J÷Ù7ú5ïÛ-ÜŠqzì%t]ú»ÜŽäöIOßÿýé>;¼Cåã(ˆR©äxöskptrb$yz%â^úøãƒÄ¢»í¶[7nœ¾O7Ùd=ÏsÀ»ÍÉè&Ä«!Hˆ§À},!䡇$¿NÅ! 2Dבk­µV%ˆ¾Ÿygv;‰À=,±Äo[ñ.Õ÷Ù”)Sº뮛»Vèöñvÿ¬+ÄË#Üu×]ú,FI9øÅ_ {챇ÎÅW\qEøê«¯:‰mçÅpºÿ‡¥Kyw¶G …°Ð=æ˜c‚¸8qS w&Nœ6Ûl3WxÔq\éQh^¥,ï½÷ž gPDŠ[–ú¡*᦭t(Ûqt’Ó§O†$¾z@àËÇÌ`é / âH›yî¹çTpÉGk-týõ׉W­Â,C³º–ê^¶Å  ’Ð3ABÎ>’²#€o"½v±B VÖhâ²ûh¥•V ¯¾úªï†å1<ò¬C¦/°ð ë1”<[l±…î÷Ó?pá‹òUbˆ û[l± ^p¾^駡ޱr·*닪KŽ„ Ézþûî[TÄ;‹÷8ëEÞ âíV[mµ€"¹’q õ(/ÉÀõ½,y1‚„ Ë/¿|ÇŽµÆ0¯âpÀè8Yò/á¯tÍXK[^¶vXËpaàpË-·¨Âƒµ†‡rHª|®½e¯á8Ž€jÉKÌ~'8Ž@Y°„9î¸ã‡~¨å$Æ~˜0aBwç– TË2Øe']éÑe¬ ØÅëðÃW ><¯N:é¤pôÑG«Ð¯UìKòLõ¢@Ù–b Ð¥‡$¬ «¬²J@¨ËØø«Çà kï‡~X-ÔÏ?ÿü€Ë©?ÐfáÙgŸ žF=?²£Æ3!9„Õ7Þ!F¼ƒ%1høë_ÿ$TS®×‚<¼ !Uµ7E§ÕùqÚ‰B¸çŸ>H2ç y…T9Š7ÚÖ[o6ÝtÓºÞ?í÷íÄ øÇÛœ5Ælxíßxã©=.ïK˜Âðæ›oês aÃðáÃÕó)ötŒËwÛ>b1Ö™GqDøõ¯­x¬¾úêúNíO§_î1®ÁÅ_¬óïŸþô'•5à)‹wé˜wtúXœ?GÀè\ñÑ9×Â9q:÷òhü%q¥Gã1íç€b E8+¬Õ$‰x¸æškjfÅÞ |øP+aïn»í6 7sÓM7©U Y¡–ÚF¹ƒ²•ð ’`³æ&?ÿüó°ì²ËªÐ˜pW묳NC”253âÚ‚@ì’õ„àþ]yå•Sož'B¡u͘1#¬ºêªÊ!¢U?cO?ýtøÑ~”²í¶M)¾ã8Ž€#!@È? í¹çžjÂZ’P©•¥ áˆP–|ñÅúN"ì[ò±R~žp’xãeü÷¿ÿ=NS’Á+VÎ{¯ðÇú…°˜„»âCãBavØae=óz‡#à4W|4GoÅèIˆqŠ …E®{y þ»Òcðz ß À³I¬Qù@æ/†Já ¾i¡q{|€\~ùåª|¹ì²ËªÊÏPmxÔ„Ñ"abaoµíšD’zêÇ9¡“È àÔ? Äà1"ôÑvÛmÞ~ûm óaÇÙvªÂM6lq±¹—ñÌDj4uêÔç ±ã¾uGÀp@¡>–õ'žx¢æ°aýVÒCªò¥Q£F©‡Bé^!¼bPðàEIL<„yß²ÎÆðÀ©uüíoS$îU¾y0d!wà“O>©J©Öqâ=9Ž@·"àŠn½rη#ÐXìî‹õ„–i›]Ñ…+=ºâ2u“|pž}öÙáŒ3Îи“ÐwÛm·­K!0ØAŸzê©áÌ3ÏÔ$Êl Ш¹‚O<39Bx,ñI6[a O¨#B€?> kTO[^§;àÚ#´(GXÁ6êþ-×O½çðò¨dYË|@.'GÀpG „â}òœpnxoR±Þ”Dà;ï¼s`­Æw"ž¹½B¯CxSãIMx/ }ÈâÔZ¾þúk £‹ÈsÌ¡^殄jí5ðÞnEÀÝzåœoGÀè\éÑ5—ªãÍK`~ÕUWiâÞ8”O«2qâDý DXŒ‚ôg?ûYC…Æ]t‘æb<õ&4§.ÉjI\e"Ê>X[ œ:îB±=ôÐC)C#GŽ ä!ùu·a¯xößzë-e™ äØj«­ú v Χ#à8Ž@}|üñÇúþ w‚}Þ ,°@ÅÆ,\Þ”¬©vØa‡põÕW‡oûÛëvSò ·Ž\z(Šæ™g]ï|ðÁ¾–ì¦ é¼:Ž@ß"àŠ¾½ô>pGÀh®ôhÊýÑG6ùÉ'ŸŽ:ꨶy.ÜrË-a¿ýöS¯“qãÆ…K.¹¤¡–~JhÎÝ1aÂý#ÊSO=¥–býq×ø(GÀpGÀ(F€Æ(=ðÚøË_þ¢[ûì E‡D›xy,²È"b`Î9笻ý#<2üþ÷¿?ùÉOÂøÃ¶„«›y¯è8Ž€#à8Ž@“@IòË.«¹:>üðÃ@^…1cÆTì‘u(õX£=øàƒªÀCb½õÖ«X·› €a&YóÚ ïá7ß|3Üwß}º.6lX7 ÇyuG ¯pÅG_]n¬#à´ Wz´ éÞîï„-·Ü2<ñÄk3 `…·ÔRKir¿vŒždã;í´“~óa‹çG£ZÒ1• £@,eBÕk=øÛßþ6’‹xÔ^x¡&BlGX°v\+ïÓpGÀpJ|ë[ßRCr&ÜÿýFeƪ«®Z©jøÎw¾¾ÿýïk¹Ç\“ÓÞÚk¯]±n· ‡ ÉÜW^yeõ þàƒ4/ kô5ÖX#0n'GÀpÎBÀu=œGÀè\éѱÍC 9‰Â8à€ðù矘_ýõáØcm¸gE-C}õÕW54 –WYey o$,éÈ·€Åáf›mN:餪Â-ñ0iÒ¤@X>ÀñøàÝÉpGÀpGàXá½ñïÿþï*Ôùå—5'Ú¢‹.úM¡‚=B?±.Ä3ã•_|Q=$ªI”^ÐdÇþçþgÍ F^­Y³f…7ÞxC×™x)³Öœk®¹:–wgÌp~DÀýxÕ}ÌŽ€#Ð4\éÑ4hû¦a˜o·Ýv3/… 6Ø Ü{ï½a­µÖj«%Ù»ï¾6ß|óðé§Ÿª[?îýC‡m¸çÉÅ_n¾ùf+yMHÚ\¯‡Æÿþïÿ†Ã;,|ñÅáè£Öx·Æë›GÉê8Ž€#à85 €GÊ ¼eÉi0Ÿµž •ˆx=`¸2cÆŒðÌ3Ï„%—\R׌•êvÛyÖ¥sÏ=wØj«­Âl³Í¦Š"” wß}wX|ñÅUÔmcr~GÀèUþ©WæãrG Õ¸Ò£Õˆ÷^ú×\sÍ0}útÍCARn |DÕ+üoJäÇÀ²YrnðaǶÑ<‘ÐüÜsÏÕW(*°<¬7Äãž6mZøä“OK¼GÚ•¥×ÀÛpG ÛÀ›‘÷ÇÛo¿]ÕP’$Ñ÷!QdçÖé„\$'AáIøðÇ×^{­¨HÙãðýÖ[o-ÛOÙFü¤#Ð%¬›0£¬óÞyç°ï¾û†¯¾úª*îÉBrsòƒàŒ§-á¯z•¾ûÝþô§šßd‰%–}ôQØm·Ý¹åȃçä8Ž€#Ð~\ñÑþkà8Ž@ àJ¸ˆmÂ_þò—°Ç{„±cÇê‡" ÌÚüñ ºvÒŸÿügMæˆåa­ZaÁ×h¥cd¼—«p衇*Äíýú׿ÖÜ|€/°ÀMá™~œGÀpÊ#@ ü'$_ÕöÛo¯‚Ôò¥ÿï,I’yß Ã€,ý÷ÿw¸ôÒKõüQG•=­¿QZ ¼ÝtÓMÆnˆÉ_+ÑÏyçvß}÷°ñÆë{ªÖ6¼¼#Ð-`pB.¹«¯¾Z×a„ EϳT ¡8¹òÊ+ÕSùøCØgŸ}Ôƒ¤šºÝX£šu×]W×í;ì°ƒ*<ð^fíIt'GÀpö"àŠöâï½;Ž@ €ÒcÇw /¼ðBÀò‹@’>»uy\Ü æ„ÀbkØqãÆi¬`|xSø"&4Š 08묳#AÕƒ>¨í1qGxŽ€#àÔ‡ŠVrûüóÏðØ@øš%bí“d˜÷!!ÿú׿f‹¨Â{ÁÔ˜üúӟ‰'ž8 L¥¼?÷C Özìùå—•ªùyG kàž'_ÅĉÕ ÷Ž;îçœsNÕãÁ[äzÉMGÒs¼ öÜsÏôù¯º‘.*È\µð ‡ë®».\rÉ%:W0g®öÆo좑8«Ž€#àô®øè½kê#r"`JçŸÞ•-ĽºBPC(+,ˆ Lx>,¯¸âŠA ýùE°n%ìÀ(ôš•g¡‰Û¿þúk(m¹å–žj0ã@é`jöÙgW+_W| M¯ë8ŽÀà TÕǬŠóï}ï{U5†‚dùå—×0W$Îç1@ÈŠ¢åy¡¸'Œ"ï$<ð@^±Âcôƒ˜w4Ê7o±Å®ü(DÌOôÜëv±>#”JBÆUC(ýDζaÆé:—P(Az™XspÀaêÔ©á?øAÀãåÀT¯—<Ål/cácsG SpÅG§\ çÃpºWztÝ%ë†I`ŽØøñã¡<ØÇŠ” X°¶›Pí·ß~ê1/X°m´ÑFMK®N¨’—_~9|ç;ßQeP#Â{Y˜+OV“”³Ý˜{ÿý‰ ÐÞQ(Gf̘Q˜8ëõSN9%Ì6ÛlrçüóÏÏ6Uñ·+?*Bäzùæ›/°\f™e‡~¨Þ 䦫†xfFŒ¡á\çœsN}Fñ&ƃ¤×‰0}“&MÒPWsÍ5—øl¶ÙfzŒùÐÉpG 5¸â£58{/Ž€#ÐC¸Ò£‡.f ‡'0'S'%0a8õÔS5ÜÖã§Ÿ~º&mf˜¨F'4g,wÝu— ɶÎ:ë4MiãæûŽ@-0ì»ï¾ž'ëõq 'hØ·) TRØ8MD ÅárºÊ*γiʑѣG«×ù²òÈBïão’„Þª•\ùQ+b^¾ÛàÙYl±ÅÂ5×\£a}ÉûvðÁë»¨š±±†$T*ï/<{1üÙ{ï½ÕûªšúÝ\…+^.Ó¦MÓpyä"tØN;í0üqrGÀh>®øh>ÆÞƒ#àô®ôè¡‹Ù¡tróâ7“X¡Ðqǧá þå_þ%.ÒÐ}¬Ô™ÐܘûÕ¯~¥Én‰MÍG§“#ÐiàÍñé§Ÿ†yç7Ä^3gÎT¡üî¿ÿþØ~íµ×ôØðáÃKÎá!aÓ†n¨?ñ€rrÚ‰á^PÄ¡¨¨6Çü¢h \N‘âƒ2SwÝuWU|ŠŠ²yD9ž+,×@¢x¯‡\ùQj^§› |ÓÊ+¯MŠòýþûïã%\kµÄ³GX׫®ºJ«+„ÜYŵíuS9æ‹W\1Üwß}ᨣŽÒù ïM”µþnî¦+é¼:Ž@·"àŠn½rmâˬ ‹þÞy絞ª5nn›†Ó±ÝòÁ†.ýÿñÿQ‘O¬è°èüàƒt[ôÁW±¡ à¦üÊ+¯¨Ûr^lñ›ëøâ®ôèøKÔq vzó0BptÒIj5Ž%!Aš©ôàÃù˜cŽihBsƃ`í™gžÑsr¦ð±íät=ô&|…'„H„Ã0:ûì³uÅÆºë®k‡uËÚÊ,Ô³ŠBˆ@YÅy ž 'G ]Ø:•|3õ*>h#/Á9c¢|“M6 äû@¡XN˜È³b‰Îñª5ѹaèÊC·ý‚Ï׿›o® ¿ÿýïáòË/šTKÔ'ïÚE]¤JÊ;ï¼S lx¶ûw…'5?C‡Õ°|Ûn»m8í´ÓZ0`.%Yz‘LÆŽ“S𫯾ª¥i/û§ð>KrLUsŸRçÏþ³ÊdX¯5S>’í++ÿ_ds´q¸ޜoŒYcÊóFÎÞ4VÙu²¼eË7ê7ó!/É'Äóáä¤ÈÍïäT…€LXɨQ£¹yªú+ŽD&ºªÚî×B`*/¥ÿõÖ[“aÆ)ÎÕàø‡?ü!‘$jZ~Ž9æhî²àMd§ýÊ‚`À8ê=P„K½í5¢Þïÿûdíµ×NÄâIÇ,–J‰¼ÔÑ´·Ñ£Èb3‘0K‰GôK·„ç$ï™o7b¹—ˆ0HùÜf›mY86¥ /¼0‘`ýjÂsß’ð%Ú¦X'"nD“Þ†#Ð0äC,Yxá…õY“DË%íŠz"JzîÚk¯-9ÇgŸ}Vωà8ùÏÿüÏ’óÏ=÷œžeeÉq1XÑã¬Ýäc°äœÿpZ…€$báœHÈœdñů©[ÖZb%žp߯´ÒJ…u¿þúëdÏ=÷LD ’H²óÂrœ£¢„ç6%ÿ@"Þ(eË—;)JüD”'Éì³Ï®íI¯DCåªø9G «p­‰äOÓw‹äJ$ôUMãa)J~­ÿÝï~7£›šêw{aÖ»ï¾ûn"ÊZÅ@ t’1cÆè7BµcãÃD<ÖÒ÷{9ù ß®ÌKÈ œŠàºÄß"¢ðHñ•й‰(ùŠ+ÿã k±!C†h=êˆ÷|Å:õ@Άœˆk¿Új«•Èøþ‘\p)ÿ”Aޝ–~§M›–¶UM;O?ýt‚L*·Zú­µìã?®}2/]wÝuµV/[ì:ñ¾,Ó~2EÀ=>äitªÿÏÞyMRVûÿ©[uoÝ"”AAWÁe Âå"`î‚„eKXXp%‹K .A$‰$É Y2®° %.q¡Œ€(×”?Ãý§çsäôïyûí™é™é™é™9§ê}»§û‰ßî~‰ø÷l†ÐÁ”}þüù-K—›©¯ŸÒʨæ­h‹¡y†»—˜Ðˆá^Q"-tL¶Må-ZG^:D6û^ä•c×À²ôg™e–QÍ»×Ë£,.s-Z¤¾mE0¶Øb Õ0ìe»¼îê"€õÄFm”0Gà waø”úÍ”€,Nƒ0‹TSœ÷βX-£èšet" ¹Ufn®ð©ÜÉØ$VŸf8äCRWh½ÆDÌh¨n{²dn®p™Á:!&³øÀ*„¹ÔèSŸúTøò—¿¬?ëiÁ[z?:@ÍS´>Y«6ãæŠ¶°&ÄÕ••&iaÝÇwƒ¥å½÷Þ[WÛ³Œ@çÖÚ'LË€‹-Ê}ì±ÇÂÔ©S±¼œAD€øiXM´xâUam[”Xcâæ —ªhh8ýÌ3Ï,š½ïÓ1Ž;6ÜtÓMaÞ¼yº/xàÔÊóŽ;î(Ô?ößìËÖÂWw[X›8D‹˜³Î:Kçæ'Þi s‡ˆ— QØ™1ó‹µV·»…g|ÐAeR•÷“¹'»´ÒŸþùpâ‰'ÚÏôhü¢ôB‡NðO â]íÖ~ÌøRõ°i¶Ë .Ô>Ð'æv§þDÀýùÜzÞj,Lœ¸b" &o¾ù¦š–Mœ8qÄ ¼õÖ[k@¯x#ÞóT¨L eº“aò¬E#¶kœz¯BÑjr¡G=ü^Šfµ{ì±G˜5k–2=,€9›»Z‹Ó4sNžyæêa–½á†6,ô;MhN›1EÇýžhå¨;wsÕé'éå7ƒ.®~úÓŸj–¬‹+!Byë|ü×ý—¦‹ÿ™àƒkÄ.ˆÉÜ]-X° ¾ìçŽ@×0¡E+‚òˆ´ Mz<ûì³¹í†Ñ!Z͵p=̘Rí:·†¸ðÃðã° À>í²Ë.Ó8U¸•Ùÿý5>\Ñþ3g}ôÑáÀ 0•O;í´ ÚE³D:±vÑ@çjà¥Ìœ9SÝqum ˆB)·BÆ—áœ5Ãw¾óK¦kž“­CÒC~ߥ“,ÁïË@½Ì WOõ܆±—ÂÍ’‚ð1cÆØÏÒ¬Q¨Û`ƒ tîûÌg>“ÖAL-ÀŒ?^]§ÃÀwjð6aNë¥xÎ^!à‚^!ßçõòÑ‹ Y7n\X}õÕõ 9/{&p´³ŒN=õÔðâ‹/ÚO?:}€ =úâ1U¦‘â†Fµµ®»î:Õ8Ý{ï½Õš ËniØ4†˜Ùqk¥ c4øZŽc 4SV3i;М6°ñƒ1ößÿýßæpqo+O;8Àر`ål¤±"ŒéÚk¯U-C„u0‚òȾy‚ nN¾Zq>°Z„íätv´UÜH…5×\S…Úh²Ö" ÄÍ•Îòëßš:‡aeš½õòÔ»çÂzèø½AC€÷ëCq§£ÚÐÖ=öئº‰u?±˜ù„µxhª¢ 'Fžx^âJHq@à Vdµbe»ƒ}„ añš`|Îy>çœsŽÆy0åp&ž_=~¶üAÿ  !ÎÅ5˜ž³‡@̰ãÙˆ«k½—÷a“¸)Õ[ðÉP‚ë$!ðúö·¿­Â,ˆã=)Á2w®±Æ…­ƒ:ÙÞn”mýîF]^G!𯯺¿Úì­­L–hÔÖ"&pñÇ«Úhà^³A6-f‚fy °Á4œ&êlê™°™Å¡É@PB3'ÿ†ÍF&‚˜`„!ùf"cb£ý?ü°¶iÚ´iê¾I>’\îgÛHYô— £¥£­ü¦”M°'˜ŸÁf“'1! ÅXë“^ ´¢-\ã“U’en/h m l¤ÿô…ØoµÕVªIW¯^ÚK´{8gQµÒJ+ÕÄ*n?/‚ªÒ_ñ¿¬1Á<ëgÊåçÁ¸1\иˆÓrŸ´÷ß¿ö‹ç€F…ø~.M«Þ… ìTÞ?ÌŸÑV{ÿý÷Uûí /T¡‚-ž‹”ÓÍ4³&LŸ>=¼!ûøvÄ÷º³ßYÙmâû¶€æ“'OŒ¿ebĆ™çÁ&ºÑüQvß¼X͸^bíÍ‹‰ ¨BX”„Ø£³·@˜[ØÏÛþ9/Ýj«­¦–rðV ¬ÓÁ‹·,1V³–X … Ê%?B”˜±ž—½Ê_ðeXÛ3öâ $»¦¡ž7åQ¼ ú‹Å‹ÄP,à¹Øýl]ü¦ Ö4¤¡ÿ”Ã5ø àÉš¾ü ¬ÁÙÐÞ«¸¤gïÆÚ"Áá= 4àýäýþÖ·¾¥éN>ùä°ÓN;iÚì?ÊaŽ‚xž;î¸c6‰¶ùÉ'ŸÔý¼Úÿ ¾H–è–(<„ú¤E¸ò«_ý*,·Ürº³>sþ}§à Á§‚ŸB?)tàÂóÁâ(¨þi)¯Vº¼¼E®Ñ&ž9åÓ/¬”á±'å.ô°Þä¼ñìá1Ò7žmdì©—ÇÊâÝzúé§õ› -`×ÖÖ±wpà™š?Ò‚+u2×g]ÍѦ¢ÏÖÚâÇ." €“#PX5(’¼ž´‰àMˆàG¤çàN2‘ŽÈ"’dýõ×OÓXZŽ2á$ܡň<ü  æç±sñi˜¼óÎ;š/n·˜{&¢U™Èæ)­óšk®IÄÿuú{áÂ…£êã‚HÔ™T5å‹F" |ýÍqÊ”)‰ ¼i9ÖÑMú×ÊÇõ¬àž ¼Á8Xw¨BF|-jÔ| AùjõÙ¦ò“®!à‚®AÝÿÅ„¢‚¬%‚ K˜ôþÛ@3kÖ¬TêŒ$†{Ì$7íŸ äE˜‚¦×Ù`ˆoÐÔê‚AŸÁ?›‡|ÜOÕ`e‚sCm’sc´ÛS‹-SL€÷Í/Hòéç¡N+WLû”)ÇâÐú …vuBð… Ú¡-aý¦-,6¬ýY‹ 0âí„ᛵn‰bÞ¯Œ`ÊdÑk© ¸2æ'÷Å$TÛ¦,š†‹ÝÓò/.—4¼O¶¡Í¶—66ËXu¡‡!íÇz`Q$~Á¼‡âú-߯#´õò÷êß= VÆV{â&0ý~ºÑ&Æy©,¤?Ë$àl’at‰oätŒ+³/Ëh=öØCÇ qs“+gãjëq9W³ qÇ£å Ø«Ek¯½¶¦Á²5KÌ—ŒW0vYg99ÝB€ñYÜNéû“*O[¶Q[X{¢<Å;ÌzÍäzÄwÓ …¸E­—Tï1?ŠK-ÿSŸúTj‘Ü0cƒ.ühßøÎT°Æc­'.°šVB¡ ´¼%з*è õݬe`•Ž£—õc{oøàÄž¼‹p‰…±°$fìSOÌôÇ"îüóÏ×ú¹[L0–›‚{ðà-@ Maƒ{f½·›ëü1¦Ÿp š—õ ”v÷)æ‘P6ÌyòÆ8q߸nBã'¶f¡\päKx³œ0¡×(ìeb!ŽÝç[… Äb¼–¬õ"L°ºÙ?Æ‚Šÿ¡‚ÑC¢4k8pd­ˆp‹*úCŸ­Ý&\+êF‘×òÒæ"Ú?êÊb NàÕ_(n ùb|¬½ñ1pXÛ¸_§}¼Óðïh3m¯¯ÍÚ×?Юƒ…¸•ÔöÑ/Y¼›v?+ø×V ^X¸Ïû-.©ÓæÚwfy /Úý<,ÉÜγM+÷“®!à‚®AÝÿññ3ø0(´+ø@ÂlŒsdÂDИfõÁÆiÝu×Õ6˜`#›ÏÚH;(00Ç×ôübŠ'ü¼rãöš%I,ø ®Xèaeg…LPŒelé¡7å_'´1zX]YáÇë[}01“‡¿â¼y V4%И l&X&\,oléÁ=ÌhM›•|q}܇˜ôX°p?ždÿu·þzÔÇÇïþ ñAªæçh_ñží¾ûîê&Žw·ÊÄ8¸çž{êf”qU‚¾¦ß]7Ú/¤1=¶o¾¬ºëap±Ùfl¨úó(«ß^Nµˆ]\ašŸG‡z¨Ž%«®ºjÝ$ß/cÎA”WŒ^³Íb¼¡³Äl*aPFžEˆ¥ó£#P6Œ÷õLóž·J(˜0MÌz³Âæ<ñ_/izæ±Ì#¸m)‹\øQ’^NÕ€ÙÍ^ŒõÊA(¿5»ã{Y´h‘2ÊY¯2¯µjÅ_u¼Š´<úšÂ(Ê cB­cÊ|°?ˆÝM±Ï2µO/»ì2]?P?Šˆ{|ÖüÅëB 1¸o–YÁs)eùb!† Lìm37W±"Î_·|c î¸Qš„â6ÅB½ùñ?ø#Ö׬»«ŸØ€¬<;[›á² O–â=RlõßÈê?ܮǔ'ø°û–7ÛžXðuw3òùöbw]Ví¯–}G¬^;ÆõÄ<™øz¶Ëã?ˆù%Ú³Î:Kñ(’/+øˆ…&´?K­`ÙγÍÖï¿;@íˆ1òV;9@@^k N #2h€(™ÔFU%ƒ[!‡^—ÁJ‡_tÑEA&G½Æ¹Ä•O)I&®ÜàÛ1áLj|2Y§ÁŒæ$ ƒ"‘,ØÒöò[6mìŠs#ú!𖣂?ÉJƒ€Ë­IeBAØhÙôH}2yŒ¸ÖÎÚ"›ËQEˆf„ÿŽ­“Œ ¸(‹Í#‹V €nmG™°5`V\¨Ä²hHóÅ÷D³4ðÌ& šø–žË¤§A­F݈.ð b¬DÚ®ÁåI"‚˜÷Î`O4õ´M²h¢¡•XûT_áßøF Á±„1«ÁÏdó[;“ß*øv;zºxñb BwÕUW…K/½T¿ñ¼o®JvØaA¯ O,"tܵq©Óí”M[GšÓ~ÆÆ.ñ‘«c@ÕŸG§1÷ò{…é£ !`¹ÄÕ(a QÐë?·yxTB¹ ,½œØÜÒËÆXO™?³ÄÜÏ÷‰†aö¶ÿv:†ëha8éû- £–ëaÎbýÎúT4Ëë–Ãû. òÊú‘`¾ˆu2ó<ó=ÎÉWÕž‹à& xN`'G``ß$ŒÛ ± 4(óÍ7߬ßT3}ä{!¸1A²ù&Eé1Ìœ93 ÖÜLYƒ<Ê-LúpÄGèø'‚d */ –mw‘@Ï6ÖÁa=]‹0n±~àyˆ…î—YÛ‹åÖOzxðb"P´x¸Ð=¼QöŒokyx`&õˆëî>öØcõk)QæHïÃ7a?-»ì²A,EÒ{v/@.ö3=L\”iõ7ýJzÏNà=з,Á`Nhƒ0Ò$À>ûì³õ7¶E¡%½Ç8ÿè£jmñ ÉÓ›ŸÀ‹ï½ûî»ÊCùøVz`îc~j–˜/i¯‘XS0‡˜—ùÎŒà‡ˆ7ýI:ºw’â~ÇõÀ߃ϱžå=‡ÿg×âûq¾Zå‘^–X媤ïOœ—÷ÌÖÙñõø<‹eYÏ6®ÃÏ;‡À¿¸±+ßKvF!Ààk çâc>ˆwD:Ñ&LêèL¯ÃÀ6F¼%„ñÍ„š¥éÓ§˜Tbæ9.“dSLü1¢-¬mbÑÅ潘rj5S§NÍe¸³ «µ™­ŒðÜsÏi_DcE™ñyíÎö£Õß`÷ÙÊ9øàƒƒ1Eìš%S˜;w®.*Eâ­ D6ª¸é%б|Gyd@Д}~àÆÏ™IUÌ–ƒøO¢QÄW£NêV¾•Õèˆ &$fµzǸ¯üKV‘ ¾§rþ¹Ð#¿4ƾÑ8ÑoC4EÂ\ÖZk­Q›ƒ+ò㤓N b‘¦m—À{a¯½ö Ýê±a+»#J|§çŽÛí@Åæ…Mã Ìnö­v{ÞÁFA†ø¾VÅqM‘ÛY¾K6Ìl¨Å_pn»ÈZª'ø€)±Ë#qó  ]±Ê»í׎ P–à hêZ’5e="­Ä³ (ï huË-·„Ù³g×Ë¢Œ)¾„”0ÿ$nWà7{’v‰ö˜ðC´¥SáÌL‚NŽÀ  –w\܇3Î8Cº0$'NœX¸‹&@AÁhÆŒº/gí “&ü0ü‹yóæqw©{’,ÓºULØ[³Ç†XP ïXy¾ ëŠX©"Þc³†—GbA¢åÚ=ã©ð›|b‘g·Ò#ûyÆoÁŒX©ÖQÖö`X3¨Bšþˆþ±ß@X”%„ç¦)VA¬rƒÄÌ&Ëý E,nƒXÌ« !<Þ‹ÍI¤Cb_Â=;‡¯Å˜B#è¼ëü®{®ÑO*ô«]Zf™eT–rà™°d®[Þ)‰0a„v«Óü¼+(d‰çO¿²ÄóGxÍÃ?¬ÊΆ%c€=Ç8/å!\Ê#°ãõñN=õÔS*øB‰B¼˜è>ÕÊÏËŸ½Vֳ͖ë¿;‡€ >:‡­—,ÄB,Xø3˜ÇLo“èŒEƒÄÍ_3Ä€– X~4¹Å‡¥ >˜| À¼çÜ0âÖ¦¦€ÃÊÉ™`l¢b!×l›³å5ú S–Eg3$nÇôÙ‡¶2Á˜ÉÛÚ_´L‘âb@,œ—A(˜d ,3`p¶K.ôhÁÁÏócΜ9ÊÀä;`qˆÆU-!bÕAëîôÓOW -qÙ°ü(ƒ‰S´Ÿhƒ±9`Ügs!q8J±qaa̸‡Fš >Š>O×)ćrŒZ<ë 6y„à‚¡cB‹¼tâï:Ý…2j‘ ?j!ã× ÖȬQ|“;E¾¬‹kî­¶Ú*\rÉ%ÊTg^EIQ\. í:õû”)S”±¦¬!öÇ(Z è­G0ŸA?AyÙCìÙ2ð׈H‹5ó¾lLlÏ0æi£¸š «¬²Š QXã°Ö‡GÑl½ÆÓ ÿ¶fjÔWáËÄ aåIÌ -‚µm6‹ÒÅB a§M›V¤ºi²–#n6ùƒ~ÓN, °Dßûƒ5 ‚/xeZ0‡–A¼·X%Úh{9æMxˆªÌˆr ã¢e"|ÁãˆÄè̵ô)ZŽ¥+ëÙZy~ì<ÿÖù*¼†aF€EŽM¦X>Ø„c‚æt«Èd–÷‡&¦“lÐ1óëÑ –:˜ØX™Ð˜h˜Ðƒ„”5 ÄdÏ™$M@C} úõ(NÏÄEÚ!ˆL:“•)“‰Æ æÍ±Ðƒg¿Ã;¨ièæ›ožNhEÊÌKCyyï‹]C»¨ƒ×…y¨ú5C€ïÿý÷³fÍRK04D°*À¤ºScÕ]ÖF‚Æ«´½ãWÜþï~÷»K74¾0ý®÷MÆùš977W¸½ožM3ýó´ý…áF.®èî0ßgó&~›ëvÒÌï±,­§n›øZ‚˜Nh2O›;ƒºûMG xßÐ$å]¯e]¤ÖÂX|°>6··õòÁ8ÙqÇ5= º"naXïâvA=kØóÎ;OÛ^¯žfîÅÂvhšbMŽðÞÉ$`tâZ•=áo¼¡V0V›!Ö¬("¢í;Ó[o½U*Œ)ÃJŒ£ðM®¾új;ÀÍ}¬lb÷KY|À,¶e,2­ú8-<ÛKçqùÍ8Lyx‰è±VÁ³ÄžìÜsÏM­?¸»Ãâw³#¼ÖZ©VY´‰} „€—[¼Óææ llý—W,Qòpå¼ þð:ÒIŠÛÉ·y•(ùšõõÆî°¬±…]«wŒ…5¼³&pª—'ï^\NÞý¢×ŠU“Ä!ô`|_„RàÅ_<Ê[ѲIW•gÛL›‡-­ >†í‰w±¿ T8HP®Qv„ÄSÀ’I~Þ¾1ŸD0-f¦çuJ4ÁÐh0«…¼ty×0íd°‡0ƒÙ`eÀ…y—Gõ„0Ø­Œzéâr¿ò•¯è„ε{î¹'Hàíøö¨s´!À‚É™79ÅÂŒllHÍš‚˜¤jaŽ@ˆç.ÊbSA|)¢a‚1¬,`15Mœ·è91D˜¨óÞ»†ßμ8 ÔáB¢Hg:„ļ÷òË/W \Ù±`*C`×-Dajâà ¾9˜7ÍjEµÛVÜÚá^„ï[6 e›ÓC¸ÞêºìvyyË@W Ã&B{ÓÖz!çŸ >ê¹¹"›Í«µ6ó0u±n…ønœn P–à批±à7÷oµú`鱄†iŠ2@B@V( [\¹£«HÞ"i\øQ%OÓï0߬"Ì\ÖÒìáÙOâ6Öö›EûÇþ ¸JÅëLÚ¹sçÍ>°éà)À/€Ø÷³ÏÆõÒᇞzLj;Ð Tˆý– YÅF˜î”c{é¼#îQã¹Øz"®'{ÎØ‹àëŸZü„l~Ç0 Wsw…Áâ\Ðs‡•—?Û7KC{ ¸|»×èˆå1•¨2ý@IDATÛ ðÄå<³¢¡M(ÉæŒqò²žËÕk`× ëw^9e\£-? xð\±¦‚P^o½õôÜþ±¿¢ÿšR°Ý¼<³ØB#¾Ÿç='ò›k,kk\?ùó„ŸäË»N;xà´Z ÆŸƒ_„à å9ö‘­P•žm+í–<.ø–'݃~¢-MLˆ¦Z¸U2æ˜I7“F#ù`âÙhi`|›Û+»Æ©-æ0Ý‹Ò[l‘j?ÜtÓMáûßÿ¾2ØÉÖ ‚>ŠÕ]˜¼ ã–sã'01æZ"ìHy6¢hª|»Çóø®º‡¯ÈîñÌá!Äí¦,ŒÇMu.šýiqYÙ„ðFD(ž¦e¼뉄÷þ |Ë?D\‡¦Eˆ°!ER½_dîܹڮ˜&–“—^zIÓRŽñWâòâ´`-ÖiÝàpå•W*Ìg¢$›Þƒ‡ßÌ衇Ò{ÙëvŸ>Û³wfÏŒûò’FüÒº x}µHLu>´´¢(›ˆ0Rñ n±èñÌIGyü;øz<_±ŒJàCZ>ŽðE‘0ÝWÆï¼9Q²Öüí<Û´S~Ò5ÐÀqr ! âÁ¡ÞyžÐÃ*cÐg𯗟{â“oóŽ5Œäåg“Âà ÅB†"‚8½•ýË_þrD(—Ó–®Ö‘‰ŸÍSLLqú¸Í–®(F”#ß“§Ÿ~Ú²ê¬â…L\_ö\´ÝGm´LPM›÷Û0iŠ<׸  8 lÞø ¶8oÞ9‹ÑÚ×òøçB ?‰à í” 3oAj¿›qï§Ì%¾eŒÙ½ ¤® &¾å¬À¸Ìöˆ9¿ Úéo? ªÊÄÂËê-â¾1—ØÄÖ#6ÔÌ[l™/~Ò³Áf“\Äš2-»^:Ñ,Ôtâϸ^2¿ç´ Ñ$UáëÞv‰ùYÜOê÷s¢!X°oÆ\¼>l”Ÿoô´ÓNÓïE«BA£<­ÜwáG+¨yž~C&¶nÖñ@\Î$(°´Bìoaz27Š&¸®Ý[)§ŸóÄ„¼½pÞ5”¼d‰ýû†¼<ñ5”Q4Œ©_þËc=¦Ùâv|ÄB Ú_ÅÍ,eq»³çàÄ=÷ˆþÇžl]Ù>›À'›Î~£Üše®gÛÄïÍ6Ûl„R¦1Ü;%ø€÷‚¢°µž‘Xì[³GyOàËYúFǬ0†³‚zeÀ‡â}1â\<•ª?|4ÛnÚ ]²¢ø^«ÏÖúäÇî!à‚îaÝ÷51h°i©7@qÉA” 4–ðæ Á®¬DòÊ„‘/~úr™w |,xx²y™X„Œâv£É€Ûˆ°œ‡Zvž@ü±àC|$&YÙöÀ„g2Î’øøNXôYúZB0×¹}µ¼YK«+|ˆÌ„?$ë–ÏŽhŒÄ‹åçˆBKkGÆLbú¨÷bÌYT±¨°´ñ‹4DÐŒ€‘ýX¸„ÝÊä“0L]#¤óhú }—kçâVm„&‹ = 9?Æüæ7¿Qa¡iRóýò®0^ô‰ùn"þsõ{bñ]£±·S}ŒµÐ´©¥-UFý›nº©nžÅŒ¾!C¸Œú¼ G 6Ϧ`kêå¥å{°´'œpB^’Q×Ä'·Îuµ´ ã b¦¯iÙ$×#ñå¬é˜kN"€°N‚íª0«‹v‰¹y†5ÖÅE-wí;÷& ßT3Ä‹65Ĭ£;E.üè²^nUà÷8 BDq­œHl‰B yíǪD¬µÅmOÊXÏK;ˆ×ð¤€7Ûÿ6:2^"„æÔ"¬/j)—¢¬!ñ1r³f…Ööùd„UGl%RDðÁ¾L\z§ýÌ -¬A±àƒ½ük‡áÁS»,Ákˆ-Fêµ-+(AÑ«‘" Ö¾—fT›h¥C9dÔ|fVðnöÙgŸl“•uâ‰'j™Y!åå¹|òÉ£òrwAÕ§mÊ–‘—‰ç!n¡FYvÆÖlòxK±à¼­ýq~Ö°(æð®d)k%çãÝÅâ~e#82BiB\¾¥}óYÚx 7²—¬ ª•gkíòc÷pÁG÷°öšê €ÄùW¿úU">\9°A)€Dk B@´!ë4aÄ­XðÉ]Ö$”ıàÄ ИÌ1¨s4×V# ~ÐGÚÌ_#F¥•ÍDÆÂ¬X Ôc,Æ‚n0Ù3aÑFp+²i$B(žyó Q·ÒSÚƒ-˜ÊÙ>" a²Èö\À\j½q›j•ïBôQøÉǰðÿú©8niÄnî7Þ ñˆß^ @¿»u75ìß1›P6:˜&ç-X˪z z¨ XƘìØRV=^Ž#Т.®(‡±†Í æç"Äf˜,ƒx™gPÊA9¨Á”¢~”į{‘,iæ6Ó†…[ªN‘ ?:…¬—[Øw€dLà{š3gNKMcŽÃý³)Òáâ5ë]¡¥‚(ã | J®s>˜3×[€+ûsöü0‚ñ&‘g%’ûvÜ@ñ‡›ó¢ü‚¼²ìí1ÁÌh˜óy >D@ìùàuÀ󠱕‡&ÈùGàAdy9I[ºDÙ(yâaÞ ü«"¼˜–*k)|d™ù ²êmæw¾9øRüñÎÐÊ­E±à…jÈx\ÜãYç L4aô/Æ‘u@Q<_x‡¯F¿¬(ï îÝhCvoI¿¨—ç•·ÆŽÛÔëgAå§#à‚  r ÄÆÀª!bÁ‡ÅÉK×Ëk,lL»Ë 42†…\è1,Oºx?a–Oœ8Q™Ž|ß|ç,°² ›â%ö6% /´åذ`Å·j½Åf§[+µ´i'q=å”StÓŒE^«Ncãå&æ>‡ñ¤‘‹+0MJü¥ &èzw;E[»4bT#Œ´gœqF£bý¾#Ð2ŒÏÄôÃÒe ´ˆ)“¸rEˆùkHÞy„æ0Ú!3Xt!pÁUO#íÞfÊΦe÷˜YTü÷ !€b Y+w‘Ø‘­ß5±9ÇŽ«BMÜßáNËi$(JiÝ/0†aÁVËzcdÎÞÿŠ­Ib—YÙ–e܃dëî×ß±«+¾¾¥NSVðáϩӈ{ù†À¿ÉÐÉp‘Ü*²1  Õs dÖYgǧÏOzA¤íA6¸A\îÑð ¢eÛg=ñæ–…€= Â@ â?ˆY|æáÎ;ï #È& ¬jºV㕸› b¢¬uJä îÿ‚h³v­ qEÌ9üð‡?  ¢½D󮣸J0Ë ÚXú‹û‘¸)~îtÙŒë7HeÂÕ¿z‹•¦ÎI¤+ÑzIGÜVý-Z­#®çý«¯ô2í«G[n¹¥Þ^°`A½d~Ïh æ*a®è| ñ˜Ú*Ë23Ï1w Ã$ˆ¶©]®{dž—8^A‚ht†ë¯¿¾núìM²qÉ–Xb ­óì³ÏÎ&)í7ýc>¿ùæ›õŠUs—ºA„™¥Õá9½D@,=ÂÞ{ïößÿ ×A\ñ±.hºI|×â¦&\wÝuA\úQf 3fÌ¢œØtYƒœA„KAó™X/êy‘ )LY#ÑŠ·ÓÜã׿þu½Ž‚€)~ä&ô‹Ž@ gn€AY¦àf'ï­¸•-Ü:”_Äeœ >*ÀT+J(LH°Ô X[±pTNÑüͦsáG³ˆyú~Cf¼Äº â†)Hó Þ‚¸Éiº|+3S…™ÿY#JܾÐHøßtE}žuù”)S‚x²Ûn»m` ÖÓ*T}ýõ×+Õ;W(g°¯Ënm‚-‰ãY©vöccÂßb>D ¡ä‹²¯“#0ȸàcŸ®÷­0b® Ä8–,¤j&c°±kfU«Ì²¯Ã…9‰Oô½e×S•ò\èQ•'QvH ß0A¬<°†¿›ºbÁõO?[  Çø„–›´æzÙñ“°¨A{èôÓOlf;I·Ür‹öÍòª«®ªëNÖçe;Y~ñ‹_‰ÿ¥—%€¦jšfÓÄ¿Q¦Wtz©kñÍ­yhH@ϸÈÜs@fõÑHð!n·ÔB æøeÎ-Ï/:í À…Ö¡|°î?ò…›È<9iÒ¤ îUh)>Ö ç%!ŒC)ÄML×1'É…D×Ë®âºH5Ι߰nœ={v`OÞ,ñmÃ̽ꪫ”¡+ñîÂ^{í¥{ßfËäôŒÃâ,ÜtÓMº@ +.¯t_„%uUᲸDJ›ƒÅ5³TMoD'̦¸]öÓ ¬ùlmÉ-æC,(ù~ºA<[NŽ@×0ŸW~t†üéÞvÛmÉYg•ˆötòÊ+¯ò•oÁ‘H¿ý*´Nö†ø<¥ŸƒJÓcPŸlóý"0Ù 08çœs4ކ,’cŽ9&!H[/‰àÝ hN?ec“ÀR6k:VWuÜíå3ñº;‹Á1-v>ÿ‹;4¶€Ꚋ}c>Ð LZ”¬mwß}wÃ,yf, ¸†i=#Ð,̬­¯y÷Ë"¨¨/rÞ]ô%bQR¸h‚î±Ç‰0J“o~ó›…óYBúÔ­@çV'kwùahøqÐ`ÍN¼ ‹?7®¹ƒ‹ô›5±¸½ÒpÄâ§|§Ñ€ ¶E  ëðkò„ø+½&Ööð.D±$!~ ¸ûkØ$öÌØ.’¾aš€Y>ø î¡ˆ­Ó¸1”Ì¡¢¡Ï©ÛuÇíðóáC-'GÀpúzôõã+µñƒÀ<‡Í›B˜=¢É–ÀÀé5u3 9}e“Ææ ¦Õïÿû–7ǽÆÍëï_LÎ7(.® 1\ùN—[n9Í#qšê8Lê:ðÀ çÍ=ÍÃxшæÍ›§i^:9e#óJ\¼iÐa‰­Qjñë…±É|§(!D¸ï¾ûô½_a…‰/P4kš®›Î­R~~Dø¦.¹ä’ŠÚäŒ3Îh¹›”CW,¦t|·”¾V¬&Bd˜Ð(q°ÖËŠd“M6IÄR~ÙpþDÀ]]É(ïä8ý‹€»·êßgWvËñÙk«A `ã#ÚžA˜Ÿê²kúôéS€ §½$ü¶w3 9}57W[o½µºÂLßÉ踸ºæšk´º".®H(Ìu‹³ôÒK‡}öÙ§©¦š;‚"ñ=¬`suUÄ¿¹Åùxê©§.;2ÀÕUÙÍ­}¸¶YwÝu› pN^ÜG‰ /ˆeTÍfS¬Ì¢GæÞ»èÜÚän¯ ?"¸sÜyçÃG¡±9ÄÚ10ß¶B”µû+'ÜfáþŠïÕi4¬¡ q Ìš†± ÷µ[mµ•â6:‡_qG ?pÁG>7oµ#à.ôð×,€9þ|)€¹=]1÷¢ù­‰OÂe©¥–²Û=;v3 9íá€H4_Ã7¾ñ jÞ³'?œ#HÚyÑŽ ü!âñ@ŒO&”(’4ø<‡Z|4ŠñA¹Ä1ƒÑÁ·µ`Á.99¥!ÐIÁ‚€VœÓ9|š‹å–ÆŠºþúë›î/ÌÂn:·ºðÃðã " –*ø˜8qbx÷Ýw÷¿ýíðÒK/µÔUÖÈ( }ôÑáƒ>Pe!qgÝRYà aÑþûï¯ñ>Ö[o=Ý_tÐACP¬â†ï£#à 8.øðìÝsz ê“m®_Ùæâ»; BsCAbô(ƒõ/ùKØpà à 7ÜÐñàáVw½c·šÓqOÞ{ï½À ‹4~n!†À™ââJ™(Eê½óÎ;à /¼ Éß I 1ÕH'Á”‹’ WŠ>þã?þC5;)ÛEötEè†àƒ€¶Ï?ÿ|Ñ&i:æŽvÚI­Ežxâ‰À·Ö,u;йµÏ…†„q?§óëꫯ^ýuµ’D¹©b.DðqÀ¨É©§žêV u€$€øW¿úUµšßo¿ýÔ  W,C-ZT'§ßrG ú¸à£úÏÈ[è8\è‘dJp´ >€ÃäÉ“Âe—]V74hW¯´ÒJa\ ½úê«aûí·WÍ+ èn½õVuïÔëÇÅÅ‘G©n·ÀêÔ© S§ég?ûYà¹O›6- èät V\\Ñ6‰o Mœ2eJ;vlSÍ57WcÆŒ 0ƒŠR3‚Ê4wW?§hžÎ(„@§ÏF…Û«P{,Ñ¿ýÛ¿«›m¶YËV”Å·†»Gæ%„œ÷Þ{¯UÑÑ£ ?: ¯ÞCX»¯ºêªáòË/WËæ'Ÿ|2|ðÁú·Ò,öËJÝhI\ pÔQG…;•¢†&ÏŠ+®$~Ÿºõ¿§Ÿ~Z÷Z¬g4;9Ž€#иࣟš·Ùb\è1Äÿã®KPke~üñl šªVX{ô:îEYOçí·ßV¡Ço¼`|Þ~ûíz¬‚@ç /ÔÚâ§œrJW0G{Æ, &wsUÖ[æåA UWh‘/\¸P«øÎw¾S¤ªiLðÑŒ›+ 0¡`‹Òo¹å–Tk¾UÍZ-Àÿ9ˆC,( ŸûÜç2wÛûI™ãÆÓBøFQh†˜¿vÛm7|¬†‡¸½ûûßÿŽ;î8u×L;ZMëÂV‘ó|UG€ïjƒ 6\p®ùî¾ûîpÒI'µÜìå—_^ùÛl³ºÐBòÐCµ\Þ0dÄàŒ3§ñãǬÎ9昰뮻†?ÿùÏÃ÷Ñp | Øõî8ƒŒ€ =ùéëÛ 07ÐJÃÒ÷¸ÕA; íÔ*=zÐ\ÀF.X]ݰ0±çáÇáF W †EDfbó4K&ø 3Ô¬ÅÇZk­¥shçwKc½™þxÚþD€÷‰˜[I’tDðÁ|ˆfòg>óZ´âîjÒ¤Iïv­Z<õ"й½.ü0$ü8hÀxÇš˜ äÄè@áæ–[ni¹›Ÿþô§Ã%—\6Úh#µ¢Þ{ï½nîœj#Àø²Î:ë„»îºK-eßvÛma„ î³6l~Çp*Š€ >*ú`¼YŽ€#0zŒÄcØ~ zs{ž~ø¡Z4`ÞOpFÜ[ÁøD»µ Ôí€æÖgss…_öA±ê±¾ù±º´êâ K´›nºI;ÖŠµMðѬŇ >Ђ/B0aC­2‹Ôãi† ssÅûµÜrËé|V60æpÞJœÚ‚bÁŽ;îØ–»+ú׋@熥 ? ?K/½t À6ë>,Ž8âµ6nµŸXO_}õÕÊÌÿÃþ°'—S}pwuòÉ'ë~då•WÖ€ó;ì°ƒ^û¿ÿû¿ú™ý®#à8A œ”Š€áÍpj" =`à Z\8 >ƒÀÜž ˆ™3g†GyDw_ýõaã706ª@½hN¿ßyç@ÝÄq7WUx†£ ­º¸ÿøÇtÜé4KŒ¸¹ƒZ|uuEæîŠïÌÉ(|tÂÍ•µÏÔõÜsÏÙåÂGsw… E¬ZuõÖ«@çÖQ~~4°ò=óÌ3×¾ô¥€eÖìÙ³Õ}^+ýDHI¬­k¯½V㈼òÊ+:?¿ùæ›­7TyãˆU†ûÎm·ÝV­ppu‹UAèGÀ¨:.ø¨úòö9CŽ@Vèqã7ºÐcHÞ ˜?øÁ:€¹=J7ûî»oêjæŠ+®ø#®ŠÐ£WÍÁ÷føOÇGü†nXLìÙùq0hÕÅßÊ¥—^ª pÀ†A³´xñbÕb‡i¼Új«5•Ý,>š|l²É&ZÇK/½Ôt¬„¦片n >Zµø`~E¹à³ŸýlÀÚ²W:Ù@ç÷Ýw_WŸµ ?º ·WÖEø>/»ì2µÐBÀɼúÏþ³¥0§®½öÚáºë®SWy”‡r 6Nõ;GX³žzê©ê~wþüùº'Ç–“#à8UFÀU~:Þ6G`Èp¡Çð¾Àü„NÐæ&LPM£A `?ÝÃ?< ÔƒizÞyç©i•âX\tÑE]hnø˜›+ȶÂD¶rüèE UW”¥š©h“xàE«‘îÙgŸÕ߸ñiÖµ[³ÁÍ©ˆ Ñ(ÚÝ]xþ£Eº)ø°ºZq»B,=÷ܳ-wW@dÎwÞygÔï{ßk™9Û"䪀ÂÊŒ=öX˜6mZxï½÷Z-Òó9=G¡±&~ò“Ÿ¤Ìv¾¯V‰òÖ_}«q§õøã«µu3Ê­Ö=ùÀ ·cwQÌÀb†1ô°Ã }ôÑ tÑûà8ˆ€ >ð¡z—A@À…ƒð[ëC6€9‚[£¥…ÆÑ ¾s/¾øbe¼`:NÐÅÿ÷¯L7 hN æüãÍšk®Ùµç€ìé§ŸVíw¾»{»Ê¼Ûv\\ BBh×]w Tm…ZïA]­X|ïë_ÿ:ó¡(ø¿v0as6Öz ʆñ† 4À[qwÅ\K ¬Fvüâ‹/¶ÜT„ sçÎ K,±D ØúÙgŸÝrY­fÌZ~,Z´È…­‚éù*ƒk?\2²F†¹ŽU4ÁÊ[%¾{¬½ˆùAÙ¸˜5k– -[-s˜òßQH{ðÁu­Ã39ÿüóÕRýw¿ûÝ0Aá}u>A`ð8H}¼7Ópj#àBÚØ òlóÕW_]]?wÜqÁ´˜­ÿ?úÑÂi§¦L›£>Z5¦ªfÕ4'Ps7Û‡I=Z¼x'ÖÁ ¾íî÷þ´êâŠ~Ã<ùío«´ÔœÌe>p—$‰¶¥È?óQ%OSn>hË’K.©ÂøVÝ]1§°ÖØl³ÍÚ¶ú°@çÇ{¬ÎéÌïQî6¹ð£Ûˆ{}Ý@€oÅ ýöÛO-ÁO:é¤ðë_ÿºåªxlµÕV©KO¬4q³ëÔÆ;Ü]~ùå*ô@ðKœ00½òÊ+à)GÀè".øè"Ø^•#à4FÀ…1Ä¿ùÍoT{-®¿ýío—V=ôúŽ­’õC™Øã –{íµW8ñÄn7ªD½ hnà7˜M(AÍõ=°¾ú±÷´ãâŠÖŸ{î¹Ú ˜¨cm•ˆµ5Øœ¨&?.á´´ªi ?ÿÙ±8EˆÒ*¡°ÿþû‡5ÖXC¿?zA.üèê^g§XvÙeu­<~üøðç?ÿYã}´#\dÍ=}út»ùþ‰ó3gΜ¦”:Ý窗…cÞ‚ Âzë­ØÇ|ðÁ*¤zÿý÷«Þ|oŸ#à .ø’íÝtúzôÃS*·À|Ê”)á™gž lj0=Ç—ïJ+­¤.,Ê­±¥ýüç?WÍ2„©nGÐZßn»íÜÍU§ø—ß®‹«?ýéOáî»ïVÛ±ö€™ƒðÂÒ©YŠÍø,Ç-~Ï!óÑ,êž>F!Ä[o½¥ÌÃn >Zµø ÝÕ'Mš¤ŠÄçi÷ýïu s{.ü0$ü8H0Wákƒ—_~9Ìž=»­Ø0îgΜ™ºÑºêª«T¸2H˜uº/Ä8úÊW¾î¿ÿ~‚ ø¾æškÂ[lp·çä8Ž@¯pÁG¯Ÿ€×ï8Š€ =†ïE¨Àœ HÕ„e>Lóñ% SróÍ7W_ÅK-µT™U”RV/šÓ4ïÐÀCý _øÂÀ ÁJyX^HÛ´ãâŠÊÏ:묀°pÕUWUA]« 27WŒcÆŒiº˜8FÍ>Ècî®ÚeüZý~NÌÍ®P–[n¹ÐÉùÍ,>|¼òÊ+-þÉO~2ì¸ãŽm»»¢Utn@¸ðÃðã  `îé.»ì2UˆÁ2™ÀÚ͸vÌbÁ…›+\Î~ðÁªŒÔ‹=ÙvõÛïW\Q­gz È¶xñâ0yòd½ÖŽ%]¿áàíuê!à‚ê=o‘#0t¸Ðcèy vñЂ92èÌí cÕ²Ë.»„÷Þ{/l¸á†á†nÐÍݯʱ—ÍÁÆíÝÍUUÞˆÁnG».®ˆ§¥tÈ!‡´‹ÆX_066K0]Íê£YÁ‡8ôÑGõl¶nO >:míA]Ô±öÚk+Ó««wÞy‡ËM“¹»bι÷Þ{1ÇÚ!—q ósÎ9§âÚÊë¶àóÌD+-”bø®˜qQ‡òA;ļ‰àã€X€Hë§æÀ}ØŒ3Ô]1.Éþò—¿„cŽ9F÷>X´:9Ž€#Ð \ðÑ Ô½NGÀÀñÇžzê)Õ ¼ñÆU žM¨Óà!`Ì Pˆ+Œa`nOñÕW_ Ûo¿½ú¿]sÍ5í·ÞÐŽª"{áÇç?ÿùÐí€æàñðÃëûÃfêÔ©ߣŠ/É€´)vqµóÎ;ëæ¼Ù®]zé¥êÏ饗ûì³O³ÙG¤7ÁG+ñ=¬ |зfèk_ûšÆL _;Ac›©ÓÓÝ|àòAC;k6ÞxcuŸóᇪÅa;O¡%–Šèœø?íÄ"h§-äuáG»zþª!€u#s619˜³~øÃª2U;íÄJaÞ¼yWŽYGu”*á´Sæ0æe¼YguÂ]wÝ¥26ßsÏ=ËZ'GÀpz€ >zº×é8#Øh£ \ÛàúÇ…#à˜Ùæ{î¹çÀ0·‡‡Ï~„o¼ñ†º¯¹ýöÛõØŠF·•Ù©#nОCóõôÓOï‰EÊÏ~ö3­›m¶QáPqêþ^nwˆ]\ýøÇ?n©rüC{íµWjmÑRA’éÙgŸÕ¬e>šµø@`²é¦›jýîîªÕ'èùº)øm´¿ù^Ú|PšÊ{ì±G)î®(¯*Îi äÂáàÿO|âáÈ# ¬ß}÷]µ¸|饗ÚêàòË/¯®®¶Þzk-“@Ý=ôP[ekfI'Ÿ|r¸óÎ;U°Ì^ßÉp^ à‚^ îu:ŽÀÐ}ðÁn6\è1šøQ+€9ÌÂA`n­1„Ï?ÿ|À8.œ°t©"3¿×ÍÁŒ¸ç½Ùi§|L°É¥#Ю‹+„Fã /¼ .wÊÐf$X+Ô Áõ𻫠ðÓÉhn >`èñ‹_T[¿ûÝïšn¯e@€Âœƒå‰'ž/¾ø¢Ýjùˆ0Mtæ3˜÷Ýw_Ëe•‘Ñ…e èeT VX! ´Àºúõ×_W«Ëv]Õ@KNópÇŒ•:c‚Só ž4i’îó?üðæ ðŽ€#à”€€ >JÑ‹pGÀÈG`X˜}ô‘šÌ?ùä“êÊ ÷Vë®»n[1¬ìN{М>Á" n иƒåä”@.®h.l )S¦„±cÇêy«ÿÐTÅÍ„;¼VÉ\]5kñA}&ø`ÌúÇ?þÑj<ß#Ð Áq>Úµø ^Èk¬¡VO௿þú¶Ÿb•[g\øaHøq@‰hÕUW —_~¹®³™»°Ò`6Ø`uùóÏþ3¸»«VŸÀpçC`Æ|Òàæ m0:‰¥ÕYsæo\>¶Ë<¥-U tnØÔ~ˆØÉè702w]pÁj]u÷Ýw«‹¥vú@e†k¯½V+¯¼òJØm·Ý›o¾ÙN±ž×pG ¸à£ {•Ž€#à 2ÃÀÜž+¯ûºlJ’$\qÅꃸªBÚÝë€æ´F-.vÜÍh8u 2\\Ñ6\Øð}cÅE|ªvÉ”×µcñãw«­¶ÒêÝÝU;Oa8ó2÷½õÖ[ú]tKðA=¸¹°äzíµ×Z ÃÉ“'«ðïüc)Â?¨U tnàä ?¦N\øaù±Ÿ Fïï 'œ>øà‚;²blÁšìºë®ÓxsÏ=÷œ ?ÞyçvŠõ¼Ž€#à8]FÀ]Ü«sG`ææñsÅí7Þˆ™ïaü†£‘VUªB@s°Á:‚KN˜0¡Ò˜UõYz»ê#Àû…PÚyçÃ.»ìR?C»ï¿ÿ¾~ãÜ.ÃÚƒrLðÑN|Ê1ÁLàVÈÜ]¹ÅG+è wss³¹å–S×3F„ºV\qŰòÊ+·í‹k‡v(-È9eV-Ð9m‚\øñ/üÿ` °ôÒK«›+ÖÜð|þôÓO·Õ9¾‘õ×__…”ÿøã«5w+•m5Ä3;Ž€#à´Œ€ >Z†Î3:Ž€#àÀMÉgžy&,»ì²êwX˜O<ñÄ@¿q•1oÞ< ŠXå8Uhnø™›+6­¸qrÊFÀ\\!\C(Ù*þùáoû›2\qQ•-øh•1³å–[jwÝnØ2pñ2ú|tËÚÃ9I€s\SµàœòÌÝëš{ï½·´oägœQ™@ç1vÛl³ºöbÞ]´h‘jλå‡!äÇ~B€¹kÌ/}éKj}6{ölu½×NXÃo²É&º¯a|À…í¬Y³Âßÿþ÷vŠõ¼Ž€#à8]BÀ]Ú«qG`Pˆ˜Ã$CS¿÷Ä·6æõe—]¦Œ üãuÔQË4=«LUh>¸øõ¯­V2>Ø\:9e"€‹««¯¾Z‹Ä8Zâ­ÂÂK/½T³pÀ¥|ãJ_ýu-³,‹Vk­µ– ¯abßwß}­@äy†^ >¨¿]ÁBâqkçÃ? íºË±W«O„ŠXšÁ0ýÞ÷¾X+TÜò£ OÁÛP&g=Žõ§ÛýÖÌ ä%—\¢®üXOxà*È,«Ý^Ž#à8Ž@gpÁGgpõRGÀ ò˜ßu×]êÏa"˜#ÄÉ °+š`sçÎU?áUÆ *ÍÁk˜AŸûÜç—¿üåʯòóô¶ÕF ,WÔpà 7¨&)ŒeÐâÅ‹U[qsܸqmÙNps*¦ Ûn»­¶ÁÝ]µõ(†.s¯X|<ÿüómãŽÒÆ{ìQª»+E¹¬ –Xb mç9çœÓv[Ë*À…e!éåôÞåuÖYG­¯q…7þ|4¶Û.âˆLŸ>=üèG?Ò±uÿœ9sTÒnÙžßpG s Wªs8zÉŽ€#à õ˜ãwØè¸Ðy÷ÝwuS„ ~°v©B@s{WÌÍ1ªn%cmöcÿ P–‹+zŒ•´ë®»†OúÓzÞî?ss…µE»c‡ÅøhÕ⃾Xœ¬°œ¢ôJð°Ž ÄÔÿæ›o*S²h›óÒáÚËC)O<ñDxñÅó’5}­ªÎ­#.ü0$üØï˜…Æ)§œ>úè£pÅW¤–šíô ¡%íVîUW]¥.nÛ)Óó:Ž€#àt|t_/ÝpCÀ˜|¤¿ýíoÃ~ûíþüç?‡M7ÝT7WK-µÔÈDüU•€æ@ƒ‹Ÿ§žzJ™LhÓ¹›« ¾0}ܤØÅ±9Zuq¿úկ£>ªh”ÔœÂLðÑ®›+Ê2ÁG«ÁÍ)cüøñÂK/½^{í5=÷Ž@#z%ø€a?vìØ€`—6íº»B²Æk蜎ºë¯¿¾Q× ß¯j së€ ? ?ö;K.¹¤ÆÙÛwß}Ãû￯ÖV¬}Û%ÖøX{sÌ1áƒ>çw^¨’õV»ýóüŽ€#à .ø´'êýqG CxóÑÀâ;ø›ßüføÃþÖ[o½på•WªoüÑ)«u%h>iÒ$ dŠÿñ^Ñ7Þ¨º0}×]w]uµÓ«¶x½ƒ…@ÖÅVíй瞫Ù7Ûl3 žÚNYqÞN>Ú±øX}õÕÃj«­¦MtwWñ“òózàêŠp[ØM‚‰°¢,wWàwÛm7›n¾ùf-·¬þT5йõÏ…†„ûe—]V'GAiÿý÷×5{»ýâ&–ŠO(Ì›7/`ýáä8Ž€#P=\ðQ½gâ-rG rxóÑL0wõÕW•Axíµ×†UW]ut ^‰šŸzê©m»Öi·‹·ß~»ˆ$è+.Fœ²(ÓÅÕŸþô§@ #¨LkÊòBð×.™ÅLè$IZ.ÎÜ]¹à£e‡.ã[o½¥ï\/0ë¿øÅ/ª»«v->xpÌE“'OÖX]üãC™ßA•ÛKëÂCÂýŽ.)ò“Ÿ„Ï~ö³áå—_³gÏV÷Wíö ¡ kèo|ãá¯ý« Bî¼óÎv‹õüŽ€#à8%#à‚’õâGÀ4²ÌO<ñDeþáOæÆ0Zc»ï¾{Àâcå•WV7hšöU h냋«^xA™eÛm·»¹ÆªC}¾ÿþûÃÕW_­¥·ëâŠBÎ>û쀵NÞÕ²ˆo¡ T¦«+„¸÷h•¶ÜrKÍêq>ZEpøòaýˆ»©å–[.tÛå£ >ʲøàé}ò“Ÿ ;ì°ƒZ}”é«èœöA.üøþ¿¿`mŽãe—]¦kLÜ]~øám)"Ë/¿¼ººÚzë­5ÎßÁzè!»íGGÀp 0œ« ïMpG êÔ `þ½ï}/ cs{^à‚ÐãÉ'ŸT·V×]wº¹‚AÐT¥€æàEPs|¨ã††2L3'G ]pó„V'„%Q».®þþ÷¿§n,9äR…œææ Fè˜1cÚízøÄ'>‘–ÑŽ»+¾Ièí·ß‹/NËôG >zaíA{bÁG”iî®põyï½÷æÿ²¨êέŸ.ü0$üØÏ`ÁÅœ†ó9J]œ—AX”\zé¥a£6Òùrï½÷O<ñDE{Ž€#à8% Ð;‡Þ%4Þ‹pÊ@àoû›jD²©©EÜC{m™e–ÑU­t~½6~ø¡âŒ&^Qo8lq3€¦-îVZi¥ž>ÚÂ{ƒÿêÿüÏÿ,Ú¾JGóƒ:H-xfı8í´Ó‹ûafLóÜÁ hžý5×\¾öµ¯é{Ù¸JÍÁ‹@¸¸`ŒÝi§ÜÚ£^¢>ic™.®è2𢏲@è»Ï>û”Š‚ >¾ô¥/•"PYb‰%Òöµàœ¹–6=ýôÓêæ‡8FNŽ@=z)ø@à‚%*–Nï¼óŽúÝ…€õÚ]ëLÿ7Þ8|æ3ŸÑïÿ–[nIªµò4sÝc™†ûÌï~÷»eŠªQ,ü@¼hÑ" v÷Ýw4Þ~@€¹q—]vQwWguV8ãŒ3Â:묶Ùf›¶šÏ˜Ã·Œ•ä³Ï>Þxã@°õ×_?LŸ>]/p³•%ò1G#Pe=̾²—ñöØg³Çm–hs^ÿš-gÐÓó¼?úè#Ž¡è¼ÒÈS€¥çý"Ï +¬Ðq˜x˜CQzaÍ‹G'G ïÐÉjn¸á†ä _øN°þ Ó7‘E~òÏþs¨1«×ya’'üeéâ‹/NÄjCŒ³Ïáõ×_×ò>ÿùÏk^ñ]žÈÆ:[|×~Ó7k‹,òY v­înT$š÷Éé§Ÿž³@ñ7‰lÈaøw£úJ×Áw/1=x$²MD[,ú•nsÜ8.$¢–È";‘€æ‰#ãÛ=9wÉ’K.™È¦)yíµ×Ùøõ¤^é`!ð‹_ü"k˜ãË ‰ eŠ@¥ŒâF”1kÖ,-[‚®Ž¸ÞÎÙ¬j™<òH;Å$Gy¤–³í¶Û¶UŽgD€­ó£X†ö¤Ã"œL„9¤óÊÂ… Kióü1Ç“ó?Ù|óÍK)3.„¹Yô;c>Ë’øv¥Î…!–üüç?W|YK°¦xï½÷*ÕFoŒ#Ðq/™ˆ°#E®dܸqÉ‹/¾Ø(KÍûâN2‘˜_úýf÷°ö›oe­µÖJ$ÒˆrD葈°Só \×Á#tù‡_ëöÃú“=²/ÎÛûw¹ù•ª.ÿâ€PŒá=5ZŸŠeRrã7jzöIsª+}ŒÛù?ÿó?¥>Û<\ºÒ)¯dèpWW2r; 7hm£ÉT„ðë?uêÔ@ŒÎF"€&ÜŠ+®¨x¢YŽÆ€Z6­X È(ÝR>«·ìc+}(» */`ŽÒ„ ‚04€7Z&ÃLhbvØaá¶ÛnSëâ0 Ó/Tµ€æàvóÍ7+žøFþÔ§>U©o½_ž«·s$e»¸¢t´šŸþyÕÌÃ’¤l2‹2â{XÛ,Ày;®®(Ëœ?ú裪‘jåûÑÈC —´w6hp sE¿Ù¼66{2 ^L™¸¯&i³EÔM¶4šâÔ ܉ТEÝ<½º[~°.4Ë¿üå/½j’×ë4Zó?þñ5î‡(Ø©g+nìЊÇZùÜsÏMÛÀ>-ù˜·À‚XvXˆ³×2"ml¡i×{uä=n·0…?„åÏkÁ˜_ĵf­îÍ™3g¨cyÄwÜqêÖŠwü‡?üa˜1c†šÇiª|4gA¾æšk64¯îtˆë!š£îæªÓ@Yùe»¸>cjL™2%Œ;¶tD_~ùe-³lÁÓÛ|೜M0L!6ÝtÓÒûï½|ð®âîê™gž eÅù€ù„«ñãLJÇ<äüä“O.õ¡!D8餓Â}÷ݧ›sÎ9'°'©"1®P\p·WU|BÞ¦F°·'¦Üå—_˜×‰ÙGPrÜ×ò~!\´šHÒ³§Å%0®0Ù ãwÇwT7ÏVsò[lÞWXBOÜ[áRR,OÂ*«¬¢×«ðþ°d<­EôpsÅ8éô/¾ð/Ê&ï¸ ïWBø× \úow÷pÁG÷1÷+ŒÀl`°ÃøIÌʶß~ûðÀ¨%ŒÓR.ºHŠËÄs6n¦-ÂbÎγ}=óÌ3ÃĉÃRK-•½Uó7A%ÊGf|J¿‚Íý…^¨Ì-NA…ž\p.8€ì»ï¾áh?QÐË•*Xª PªíÅß·~z£ªÙÖ_þò—_ùVYX ¶K/½ôR—lZŒ¸³h·¸Qùz|ðÁzdYd± Ú|`9Ã÷á‡Ö8.ø(ë ^9X) dgm3¯Äzœu|™ôœ[œ,‚e®ýY/‹ë“À\Í{ŒÝvÛ­g86zvôÝ…PòûUF€}*û~Ö÷{î¹§Zv~ÿûßsçÎ-ÔlæV%q@ùf÷Øc4/ÔY (Eœ#‹£°€}3uóW5bî?ôÐC«Ö¬Ê·YuÄ•ox‡è¸t`/¾!.øh‘'&Ø(!‘Î#6=h'O÷?0 4«¯¾ú( P4 `f<öØcj¥€6šœhr4bîÁ!Ø/n5Ј&¸(&ðât”@†´, 0©e‡»Œ§žz*€Ô´/˜|YXåyYŒÑgKÇÆ•ßô— ¦‰ô— ®ôk«­¶ÒÍY¼á³<¤3iþ«¯¾ª¸°Ìj`_ ç¼vr¶‚#›C[Pp |ꇑK?9G#“b0‘Op¹8ùbBƒ7˜;³¥Ín¸¡nž)cPɘ7~²4&ø!ïÅ!‡¢V0æB¦qîj¤0F ßÚhhqUÌÍqË,³LšämècøFÍ ZÈ»îºk)½Á‹¹oÝu× âß¿”2ãBÌÍsv‚+ÛÆ)pi—pwÅü¾`Á‚0· S¨Ý:=ÿ!€U4ß k¾*>X‡–E¬ÝÑ Ç–à¿YQ~*“XÇJœŸpÕUWéz´ªÎ­Ï.ü0$üد°7Ämíñǯs ¸ÊÃ}U#b¿¹xñbU-@IDATMÆ>\bŽÈÂ>š=ó%—\öÚk/ÝÓHðñÆLö²¶¿Í* ²vÇz½3û\ö¨ìmIÇÞâ[´|”‡"÷èã î‹Ùó½!–&(EÐGþ²û󛔨«7J“&þø¤Œú©ë”òPb/ŽbJ“æ Âê%-ý£ô羇ùEå—_^ï–/>ÂoB–Žrái€+¸ƒ)ë \•ñLÀëÒÿïÿþ¯ò!(Ÿ2á- ,W‹·£™sp¦¯ïÏEx ´ï¬YëC'Všðœà7Ñ/óõˆ¾añôì³Ïª¢ÏÞ ü®8¯µ³.öîRm3xh(Qp÷‹¨ëzmó{Ž@.ò2:9CÀí·ß®ÍäÑR²ø¨‹‡ ð‰4ÐyÎÒ„ÑžÞ'ýÉžÜsÏ= ¤óH,!™xÒô–#Õe"OƒÿÆí¾ãŽ;ñ#™æûæ7¿™X`SòÊB'¯ºD˜C„’4²ØÓ jÂ|Ñr„Ñ‘È&OƒDÆíàü«_ýjòöÛo§eÖ \þàƒ&2‘&¢“ÈbMË&ÝŠ’,>§Q·0sÒàæñuËwÞyiÙ6[;â:ea°U6´)vÙ|ÂøØ;®¬ú1¸9ïŸ0À=€yü2䜋;¶DŒúnˆæe_ðäÛ«Z@s fl"1=[‰ ¤cDÎ#ðKŽ@a<ð@Ëe“›¸´ "P²øßÖ÷ôŠ+®(£ÈQeˆæ¸–_vðp‚L3Ÿ•dšµeÉf6aÞtrò¸ÿþû5X°¸É»Ý•k¬ÑDñHßWÖÁ¯½öZiõ ã+a-Àš‘uv'ˆ9;t.®¯:QM©e £Êž—ЍÖm„¹žØœ¹Ê*«$¢Dذ ˜OĺLÇš1cÆ$bAŸ›GĉĨK„i›ˆ€"ùò—¿œb-,V&ZF6¸9ßÕoû[½—Ý›Š’DÂþ”ëÂìOÄ5^Z·0Óëâ’/-?[F¶> °¼¤eß- ¡i¹EO¬ ÚÕlýÔÁ³`œÍ¶—ßÂ\OÄ’&Ý3Äøñ ÄeYšñŸqÚÊ¡?y$ yåkŽ=ŸÄtKâgËšþŒ•á̓^‹…¯aËã4œå+_QÞå¯àZ‘àæ"ØHØ‹’žõ×.»ì¢uÅ×iüözÙzy¢”òŽâþ‹°#דÍCy;ì°C"A½— n.qm[·fóò[„<‰xIIx¡8Pz6½ábí‚Ç–×òñü®¼òJKêGG iÐÌqr†X€ q’F‚L6x3A²Q`®Û"Èî#ì`¢¶ßTd…LfLjqºì9e‰ÏP­+nw6˜¦¦Lmî=÷Üs£&=úÁ$byE3.aò7Á‡]¯wdqÕ|°hcò‹,òX¬¥Xؾ, øz½vÚ=ÑÒQ¥h%èBÔî#TÍó׸w×]w%,2²uö£àƒç,î ÑÑg/Lú~´²¸æ€ý—v©ròäɉX>õe%x£Ž+Œ-¢™ÖÒ&¦ÿéOªBU„¡lrœvKÝl1^ßpà í5"¯1$`2tŠáÏ“v‹ËÁu·ûƒ'劥Z»Eißm}"–¯m—ç &?ùÉO”±Ç¹— %"„–¬ßÊ"Ö²(/ñ]Á 3æeYå[90J%й®EÅ÷ÇÆ«¯Œ#Ø06Àô‚Á óÊçö2õ2º…{Z¾7„â«¡EÌ0gLÈ$XÛÅCƒ*œ‘†ü 'œ ·bÆ=ùßzë-½_žéý‰·îí.<4ÊÇ}øñþ/ÎË=öÙÍR\F£6dëG™°‚ñ…ý;ã—­ ¦?ü».Vˆ Ï!Kð, íûXða÷jYΟ?_:k >tBðQ«]ñuæäøYŠUH²Új«¥ýŽÓfÏÉkïˆxÈHPŠÓ°6D_ƒïÅÞª'ø0\HWä}G(#±¯Hîä4€G!’¯ÔÉhÌìd²H}ücê' ~õÑ©,æ‚ЬY³‚hšéu\R‰6§šjroúôéjrÊ9„¯{Ìe1M„dó¨®uä‹Ö20„pÉ„ -êÌ#ž¨;.|”tÐAi ’Œ ˆ%ÂÔì7²Q$n2è«lÕ”’¶,SH£k¯½VûGÌÙà‚1ÊBCoã"ˆöŠuÈ(?ȸ¡ÂäQ¬FÔ”U£Ž²@Èu‡%‹u¥`mÈñÁŽ{®¼öÆ}Æd˜ø²Ð"D@£î¼d#«ýÅ­‘ÅqÉXM\³uõÛo˜‹ CãÔ`::W\–ð| \dzvú¼ ¼Ó¼G˜I‹¦V넾ƒ_ë?øÁt\!®‡™/W¡#ææ wœªB“¼ }Šs.®pCÀÜZ–‹+Ùè©‹ `!ÎW§â☫+Ü”Ieºº¢ï¸Ü„pwåää!€Ö½rsemÂí q>Xß•àœ²)¿ý Ôõ­X+Z•¥q‰B sæFÖˬ­«N`c1?hÿ¢E‹Ô…km'G ‹p饗ªk$æeÜΙ+¡¼öã6öˆ#ŽHo±—;v¬î§q‰‡«öÁ.{Ø—}ôѺoþÑ~¤1AÒÌ™ÜéáF â{š%<ö¬ð(׿÷L¶ÜŸìËCà1Ðö}F¸xboœG"PžFÞÝ®ÑNþl/WNÑúÁŠ}*åAðà;°Ÿ§ðJ êb\ú;ûlD°yäaI¬$ˆòá‡Ä÷œá‡à²)KÜ#Ö+ÒÜC‘‚_1{öl}ÆÄ‹÷Ãó‚p‡…Û-Ý×s9¥‰[üG{y¿pë &´u1¼$#ø-¸Q‡Þ}÷Ý ü`® q#%–…Š+éD°`ÙF_yå•À» ‰€Jc‚⦠žkpQjÓ{ÆcÍwÕx`ìSD ¢¸Òð ½Åsç=°u³¥÷£#Py¡œ¡F ¶œ(bñXûì³Oª]jy@#‰–OÍeQ0 W¤ßfý[} M'hhgÍeŸxâ‰Dü‹ë}™L´)âv“ jÌðÐA{„{²HÝCÙ}´Ae"×û2‰¨JÖâM9³t°|²I5á)›¶ÅVfé‘w|þâ6Ë"'A ƒ<±•E|{y–$X䘻¢ØÅÚhiÏúomµc£:ã¶Xž*ÑJ”EYê²E9‰ø§euTŶw»MXGIÜu×K;,dxÏú‘§pÉÁ{Œ¦QU7Dh¨ñíaYƒ¦¨“#Ð*æâ ë!¾×²ˆ9•wë8æÆNó«­ °È*“d£¨íß~ûíK)WàÁZÄÉÈC@‚øªûÔ2Ü«å•_ô–ÛX:1ÿI°á¢Ù ¥Ãò‹õ>Záâ?½PžVQÏ)§œ¢ßn!Å_}+Åt=ó¹[~tv¯°$˜“Ù_‹°?ÁË‚0ê–Œ;LQ”Òï”ù1ï²pľS·É~ûí§éX³°ç7ËR³ø`üÅBMÃú×NYbïmuÕ³ø öæ1aQ†{kò×Ëkå7:ÒîØ¥`ܶfêÇ-·Õ»²¶Ç¸`ÍÁš$kñ‘m ÖxÊ \ʧ–"V&ûs÷´òÊ+'"hÖ[ðp̃G^>aɯ‚²ÍE×Ékî¬b‹†ì½²\]Q?.ÖqµØ`…i˜Âkb?»páÂôû\ÜKÅŠ÷2Îgq^ÊËRÜwÜ¢Çkçø^Œ Pà‰åÕgåc=xê©§jž=fp_ùÊœvOƒc#‰FꎳL £Š=묳4@*7dòP©;’w4 òŠ™mj5¡åטm³D°ûXz G#ÁIºåG¥7®ìy±n¡£Zˆ[Ÿ€ƒZ„ÕVáh O›6-7V¢„§Î±°eCDhŽ=öXµjˆ3r]˜¼z «ÓÔÓ°&aÒˆðæÀÞ8&Æó$_oç<Ë+°²ŠÖÏX•=Äz뉅bÅèQ\*…ñãÇ+/>û´˜Xóˆ"LBz>üˆ==k³Âá4XGBŒíðC²„ÅÖ<aØkrž1ë¹,Q'}+ƒ[áe‰>Ò–lÛÁž÷ÍòÀ“¡¿ð ð$OÖÚ øN–/®^Ô±`Á:'Kà[Ä#Æ…öÀƒà;‰ÐeÿG‹•WC›¨Ã,4“ÿs "0Ú–«`FOæ8ÿ&Q˜ç˜W²p‰‰…Æm·ÝDkK/c.Éd3Ÿ˜ˆ¶BœMÏY`–X‹XDåå ‡Àî›0 ÍoÈb—O˜€fÝ\QÏÁ·A=p³³ÖZk©›»¼vó¾3Þ  `ÌÁ5Œ\‰76­yÙkàJ—==s³X=r¿×Áx#Vñ%=‡§ qHF]/°boÜ*Áð‡¹-ÁÞSͼ²pÉgÂ…ø~«õÓÿ<‚ÁÄWâFäC¹/K¬[à… ã~üæö|Ïœ=`ž’#sÏ7K쫌÷Â~‹u‘X;f“•öžQ,´±‚Qø™9s¦ýq¤}ôõª«®R7]¸3ÌØëâ6PúÃ}×¹çž;â6X Œ7nœbùÔSO©—’Æ;ÉkãˆB2?à—1G@( 2çÑxAF|\â²ää=/ËãGG ‹€ >²ˆøoG øEdò„Xð0yÆ |48ŠR¬=‰ôòÊ"h­°H`òâ7“;þñ ásD3ÄÆÅÚÙÊfòÌ3ÏTMÚRµ"œ`‰†?‹ÔA"ü‹"¸Â²ƒws‚X|ˆY³.ÜY<8D€o÷àÉ'ŸTÆš=hØ;>2uõ]|ñÅÅ(ß&Zce3TÛA€E-8³€G`ÛÊøÑNýžwpÀ1þ†ÙÔ2§”ùžÛfk@4ß:E&øÈjÜ•QŸ >ʲø`î˜8q¢2sÐtÁGOipÊ€ISu]™–W­ ÄÜu4LÚ…ÕszYļ“ ËJâUÁíÄzÆ‚V°PF¡,LϪxXÌ~Týiyû²°® Î1vøæˆ÷qï½÷6Û˜'±Æ`~äæ,Ìfbo?"þŒx~㱸‚1±>¶8ñõøœ±­Ñ8@ÝíÌÿð$ÄQËÌåfêgœÆ‚Ã2×sÌI< ›Xß! `ïgñ*àƒÀi–lÃó°5W³eM#Ï£¢}x h#B¸ Àh†x¦üÅ][®…K3eYZÍ …çCœ‹biü蔀sÀÊ@ÑË*˜4̺ƒŽ3ÙÄg@`~ɦkÑ’Èû#&œLF,€ô;ALäÔÁ"¤üh`Z˜›«Ø%V'ÚW&fû± (/M§¯án‡…P,ô`Ñ‚'ÁçÐLëÇ€ÖhçLAZD,r°Ìñæµß&´tfI:4¼Yä_}õÕúTÉB¢vëGßa<©j@sZ‹û-„q0zq›ÇØää4‹@ž‹+Æ»2+Fs-ÑIkÚj‚¾…²É6áí0>²m2wWŒ—NŽ@ŒÖÌ0EÓ{-ø ]0uÐL…‰Ø wWS¦LÑ5kks•ãQÖ9 À~ tn}…ôÃ,?Ø89UG¢Ù'¿üò˪oJìaóØc¡xQKPÁºWÕ¸ïÁÚ2Á×qClVX꣸FÙÌÛìC¨»ÖÚ†ô&Æôn|Ö^ æ$Y¬‰¨Gb *„ýŸÝ†u«õòðìçÃøÈ¾³ÅéCqiÕÅu‚K–Õ¨ì…bÉ$±;F=èkX‚“£x—uAÖ¨Ìì}Ê[¥ÿŒëðרÃ÷Yäüw#œãÐ!¿ïd@ÜÜUÁ$Gˆƒ1æ­X… Ýœ÷‡d3NÌ2'“_–?´!Ø04³9á„t§|´ÓÐ^1Á LZÖ˜®ÖZlI@¯´ &â~›|Àïˆ#ŽP,ÁÀMbbàÊ6µÜïBsói h­ p6üh'a}”çʬúÔé6€G‹ëþûï×w“v{Í.;ÝÎfÊÇÌáæà,Bi„5Sviq÷Çf ֲܕÑ./£€!Ð)W  3u~ÃÔ3$\i@ý`ñA;7ÝtSꄵ“#`àR Â- B‡^ ܼÀDÄ GÙÄÚ«EÖ¸Æì±Çg=â0ÌÐVf Þ/äÂ~yRÞÎ,ìmÙK±7`_ÀúðÃ×=8ûh\$#”œ7ožÆ®Ëæ³·˜&Ø€©»!‹Á!œum#¡uì¢*¤Ïyc—OÙûýöžÃäÉ“6›ñ^ØÇ®eDð?b}øá‡•?Ãoø ”\jñChÄ~&cCodþ1?Ûzûí·ëº1' û9ÎÄBîÅ »fG”\yŸ Ò7ˆµt­¹‘~™gM,ÿ°èD©ÒeSnÂÏ>ûl]3cMÓ*ÁWc~ËãÙ5økõâî´Z·ç|\ð1øÏØ{X"h à'Ñ4;`4ÃÁõ“1Kc„qõ¿ÿýï5¨4ÏÏþó4†„¥A¨’·¡aòAP¢i¯½öR÷–§ÑqêÔ©é&³Zi6™Q–i…fËAË¥–¦(åØ=&ñ~|°xˆ‰OÖ‡*B¼Åfœ¯*çÙæX0xóúO‡g‹`Àñhcñ­TMPP¿#ïV9 9-Åý‚Wø•µ1sd/ü—#P\\1Ï2–í⊠s#~Ó³Š$¾ 1òxy°ô3‚WdÂ6»ÆñîŒOd÷bxᑞ¼ˆ÷ˆ4YAïà³ÄºÛÜ’7«ä‹`á1qQŒKlCàkØûoå°†å™ÁÇB.ûnX:?:õpÁG=tüÞÐ!€†ç;ì Úh\ð·õÖ[kœ ü2 !7³U®±!1?Ý,Fp9ƒ…Ä$‚”+& „$ø)dcQA`D&cˆ6 MÂD‹“<6ÙhÕ[š¡À?´"l¢³ähÍÖ+‡MZÙÔÍ„ÃBEí1& f±†öÚä ‰Í&rÕÈp·vñ¼Ð2`¢ÅõÈZk­¥›X3£Åº…~Xß,_/øE{…w‡…øˆ¡e1sæÌ¾fàwS6-h±hã;Årˡݨ¿uÄÍùNY„W‰ø¶³pÆÍU-i•Úìm©ŒÃ‡z¨Î‹ÌMÄh*Û]ÚE]¤®g Y*¸j€ºÌ&°l2Áåš…fu˜fžÇù(ÍÁ)£j‚¾©µ×^[×m¬§³ Ee ÏZ75ÌktwE[aÐY sL¬ÅmZF_ºQ† ?º²×Ñ `ŒciµÍ6Û(Sž½:ó*AË!ÎÙk£@ðh¾QÆöÿÄñÀ](<¢x•%Üç¡ÉθB>žÌ^xÄ˦ñãÇg³—þÎ 6Ø@jT»Ö.0B´;ÁÔ?ÿüóµô×W÷Üs*‰ÂO'c `„U3$k%~H=âðL'Nœ¨¼”Gñª`±,˜k`Þ£P ¡Ôj¼ XU $á:Äšï¼óÎÓsʆ7´Î:ë¨).QŠ9þøã5Þ¤ p£E;óÖŠÌ ¼ð¯ðyä‘sƒŠàkàú¢ÝXB¬Cwß}wtÀã@€F²Ä>Ù,~ÉÇ7€€Š>Àï!8¼¹m#/í ?ÖïZ¸ð,á™õ¼ ÞoʦMð;p17gÎm¼6xnNŽ@ÓÈ åä 5·ß~{2nÜ8¢wþ»ãŽ;YÐŒÂM7‰øÖoXŽøHL„8"¿Xƒ$²°ª›WÜñ$b-¢ùâv‹‰c"‹¬åÅ?d²Õ®ÿÇÞyÉQ]ýþ¾ªG… À &ƒ T$& ‰ú"Š$ƒÈ>@d„EŽ"‘MB"#P69 ŒÈ&0&¹ÀØ.û¹ßýû w{{fwvgºo÷œSµ;3nøß'Ÿ*$"‡×۶噎Ä{‘të×—zÄ[窟ÌÅ¿ÈkX†c ûl÷wÏ<Ë:y£Yâ½7’‰'&žénw·•hßòÏèÊõà™¶ÄñJ?// Ôî[î-ÏpG7'/$$Þã(ñ zâ™ØnÏ¿èlŠ8 ñ3yðþJ¿Cû;`ïE-Ï/X&YïÇþ¶Ÿ>ßW¤?]˜ÞÕ’ß¼wõÝÅ»¹Uä•!µv½¦UÍZ;%GÀçæ–ëÂGG3ïÐ’x¥Š¼{¼2¥åã‚õùæeÞ>J,ñʦ–÷6È3Ï+˜¯€’yyæ™áîÒ|÷вÄ+ûd]xÞríxoîÒŒßÚ™pÿysâ•ÐÂËúˆ¯Ä{¨'ÞØQ{'ê;·Þ'r>ò§²›7žÈùȪÞs?ñŠráu굑ގL㟴ÉÄ ¤=ømƘ&xï¸ ÇÔ;7ÝGO¿;¼=ÔŸþÑCøÚ ñô òÄ"¤¯4~ÈüHǦóAgiòiH¯Œo8mÃ×̨éfh‡1ñÔý|úº‰ä©uãSg%ãÆërLx|økQHè"|}¯Î÷¥ä”SN OO|¤IŽa?õ¾{ƒW»ŽëýU½ã²¶s z–ôÝÚ÷Q&=¶Íz¡k32ú‚@ë]ÌüUod” ,ÍYôô(¸„·iª(xšåiê_bnúôéµÈt«®ºªxnൕ½è¢‹Ä2WHš°²F¿÷Þ{×Â1ñ>ÉCú\~3?¼PÔ œ‚T„=6"xÉ:<Ò…ÝÉSŽ'C8.õìÆ«BÃ=ñi4ö…X‘W’PÍôö¡C‡ÖR†ÉÎÿþÃÃCû%ŒÏˆºxC„^±ÿ=ÅÞ‹xx¨û˜K8Î ëùíúäÚ#:ë€Tdä[ðÁ­€y/çÂã…ˆ%®ï_ùh™ù曯—gÇ{XìÍANÓ\1BÒûåyßÄ»r6²Þ"ÐîWŒCÓFl¹å–5¯¶Þޝ/Çiª«vÔ÷`<¼ë4’Í œ}bæ9Þ¹AÞóìTïËÌmcG![ÄàÃgry…M[ê|À[㉋wjQ¼7Ë\è\o‹üP$ì³LpÿQדŒ¼[IäÊ’2 ·!·n¿ýö’U ,¤Í½€| ñÔP¼Hð$Á Šmý%_=ñ†±¦kFºÍ0â¬ó¾€Z‚W§g4Ä› /ƒžsŸö*3*¦§sóÞÏ8u~xÅ2ߨOT€O‹Ôrã°Ÿž¾ûÂÕ‰gÏäÉú‚çmo®©žÚî„ýx©h4’ÉNˆ’¨áµåL¹&ˆÊò\*zž<3|ÝÄ3͉/YŠçBјYÿ?"@t OY#×Oq•ø4?îlÑ7ŸâPÚ÷ŒtÂû1ÂCœþ{ì±¶u‡&}à]ÝJ?~¼´Ë³ÔÈ€çãùεæsÏGüÛî»ï.ÞÓ>{[ÆÅûÍ×U“ùã Þ ~½§úÔ·‰w|¯sŸò¯§Ã£Ýo‘Ñ. ¬dX *yŒ÷øDuáµNÄ|½ÅdêÔ©‰wN“HˆfysdQ"ºx¦Ò‡Oo%ü½¶Ã½ƒ×>ûñè÷E¶Œ¸œ»À=Dá¦åó¾Ìʧ=¬Eè„Q*é¶Âˆ¢ 2}Õ‡>Ä×cíå!¤þ!Ÿ3ÞCÞ ìC&õi­d½CIâk¬6ÌäF|µ„kNÛÑñ¡‡âšlDœƒ.}ýƒsoô<Ì ¾Ý:®tö°"+z¤ôzÂ%S½öÍÉöõ wš‘!`T^:¼¸aøóžy™3 ͦ£ÊlÐ6ö˜˜_B]Y;e# 5Œ”QãúG1ãsÑv 7î] q…ä½ï)“ €Ä8#ùÚ‰/)F†@3´;ÅcñQtò|õ¹ƒ›ZŸ%]†¾ÄÛEÞ;Rú¹í¶ÛZÚÊÆï#æº µ-íÈ+(¦ôzn…rªU“Fã=WEA¹ñÆ·ªÙní `±ˆtŽ3gÎì¶¿Õx÷ó^sú,³Ò%—¥½jõbíµº>j\îAä2ÒµŠ¸¿Ÿyæ™Äg¨=W‘ÃY8EúÈuÙOÚeäw£žS]!Ö£´á#­¼¯w^^ÛCÇLZÍãå5ëÇÈKuå¹F#C ªx«ºLÍ+Îkɯ¹æG1£ø°æý_#ï}ê¼Ç§óŠ Ÿõµtýo½Øb/h®èhš+Bª«ZLçeŸíG W¤ôB£L&LAÑÎÙiš+RL´ó}¬©[]ؙԟ¤˜;¯ i'TÖv Ð4W¤OÉJqQÔHŸAs¯´r>w~Û†Á¼IO“Gº+&AŠ•²:×Åà9BÁhï/éx)ä ¯à£Zôû4¢C€´=>ŠÌí°ÃÎ!$u²hÉ8‘ÝiSST’’‰w8i¦}$‰þ­/®MÚˆ{(«%©P#`Jšcô!|ú#CÀèÌðÑ9km3í0`’È!INÆO<±Æ@!,i­ƒ¤TÓEHG$×)kxòÉ'K>Wrh"ÌõŒ€/çÆŽë|è®äZ¥. ù±Á³ìä½Ä%«O1â?üpÉ{ãuá½Ý£>ê¼›=z´ÔÉ);ö6þ|@è?ì°Ãœns>Å•ó)]ºäHnÕ(.»ì2çÓg‰ LíŸtêB£V=ò!礿“Ý>c·óëgÛ[Þn(ü´€9…Þð02ê>_ª("^ýu·È"‹ˆgÔàÁƒ+c4 šã¥ŽGXŒäÓqˆ§ǰaÃz,"ãlLÅ pì±ÇŠ—6…?Ï;ï¼¶ìñ׎ûï¿n÷QÙ \ZHæQg#«á'ƒxCs¯S„¶D†@"¸|ÊI7mÚ´vtÓ¥MæV…Bç:)3~(öY&_|qQ¦õÅ{}¿ýö“ˆŒþÎÁ§a’âéévÑqÔ€à«1¼l°ÁéÃì÷@‚>$$ô õ Ãëq¼/>ùäýÝ'óbŒŸ8Á†@cþoãݶ×0ÊŠ‚!x†ãÙ°ÝvÛ‰ð×ÈÛÝç o5˜¾›¢½¸Õ_guœ/ºîPúÍ1ÇÅ ¤„=ãÙI¤Ç‹/¾(©•ˆôXmµÕÄã§„Óé6d_ìÍÝ~ûíâ]Ê=Žð+iš«]wÝUzî‡*QYG}´Dm¶Ùfnë­·Žvn„ü?ù䓎1[š«*\}ùÌ!Lq…’’k§]ÆßË/¿\&…Â"¯ÙÔ ÔnÃG»R]1ö5×\Sž±xþæ7¿q<Œ:2>xµ+âƒUÇxJ¾ÿ³Î:KŒ³gÏvD™¶›¸Çñú5j”Ã@€âµÌ)\ÌøÑî+ÆÚo5ÜûÜs§Ÿ~º?~¼£–àŠ+®èöÚk¯~wEÛÇ—¿~7Ö¡ à@xÐA55{ Èà1Ëá8§®½öÚMÍË6:KuÕÉ«os7 C B P$Ì|æÌ™âNá:¼’ªBaAó3Î8£-éZ…ÕôéÓÅÊT0ç(4Œ žS\‘·¾]5©ð¢ÔÂÜy5gîD{` $úRëô„I_÷«á£ÕÅÍÞæ–+S­ób7|hóv>P”á‰MÚ™¼ŠœsáÔÒ£ Í8FhM€²^e¡ñƒç¿F~XÁó²®hõÇMÁž{î)ÆŠhŸtÒIÃÈ0 C ÌðÇ:Ø( CÀ0úùN)ò}çwJ ¨K.¹ÄmµÕV•  š£¨Å£,¶ðëp §N*kAÊ Kƒ"cßë!NqEžëFéëµÓ›í^x¡6tèP)NÚ›sZqŒÖ÷ÀœÂÄí$5|´#ÕãVÇ8oç*ÆÝ6JvjjAKEVÜœ1ñŽÄð@¤ÈÛE8YPäÃï?ÍÁÞ®þ´]Œ§œrJ% ëœÌø¡HØgY ²€ûz?<qÄúè£Ê2|§!`•FÀ •^^›œ!`À„ $­gŸ}¶ÛyçÛæ)^¢aAsŒ<1P0QcÅùt«uSÔúW½ßµ~´ylcµñ†€!ÐI˜á£“VÛæj†@ÀÐqÙe—¹ï¿ÿ^Š î³Ï>=®+ e*h¶Z|üÅ™R¶k¡ªãÍ+Åø‘B Ï綾^Zrã物>Ú]߃9µÛð1dÈ7ß|ó‰7=):MsµÀ DûÞ% ÍrË-'×)ÎÛItÛn»m®é®˜:'}† WÒÆçž{Nj›™ñ£ «[½9Àër’jC(¼û‘GY3WoÆ6#CÀ0Ê€>ʱN6JCÀ0 ®½öZ‰ðÀÛøàƒC•}‡—rS™ š+À¤#ÝyÇ-ÚCQ±Ïzä™âЍ°ë¯¿^†rÈ!‡än”ËÓð1ï¼óÊ<Û•ê %ÏÈ‘#¥Š*ujøˆ1ÚCWåùJ+­$ˆí6|ð¾#݆Õ3f¸o¿ýV‡ÑöOx Ã3h¡ó¶wšCfüÈdë¢eÌ1Ç’îjÒ¤IRwgÊ”)NSk¶¬kÈ0 C )ÌðÑ\v°!`†@,L›6ÍwÜqŽB‚(&Nœ(ÞDZŒ¯Uã lþ¥—^rS±4gÎ/¿ü²{óÍ7Åà ÏW3|´êJ¨f;y¦¸Áë®»N<¢ç™g)Dš'ª(A©ÕåñÑÎ4TVç#Ï+(¾¾Êføhgª+V‡bãäø_tÑE% >%/J:'ê£ì…Î;3~(öY¨ß5fÌG*MÞ¿gu–{øá‡Ë0t£!`•DÀ •\V›”!`ÕFà‘Gq‡v˜ûóŸÿì6ß|swþùç;RmTP’"0ýýï—âí±4ÿ;î¸C¼]×[o=I%Ô®âÔU[ëNOž)®ÀøŠ+®¨÷ØcZ*¨¼°§î D1b ··›4ú(­ÃÐê>7ÜpCiòý÷ßwÔN1ê,Ê`øÐçÔœj·áƒÕŸsÎ9Ý®»îš{º+úæÙròÉ'Ë's%­_UÈŒUYÉΘ—ð7›l²‰È*D¥S÷ÃÈ0 C Ìð‘?æÖ£!`†@? Ç3u<>ûì3·Á¸É“'»Aƒõ£ÅxO-SAsPü÷¿ÿíî¾ûnKsï%ÕÈòLqÅÄxàGª¡‡zhîXhš«UW]5—[jøÀèÑ®”;+¬°‚[f™eKRûue0|hª+îƒÏ?ÿ\<°Û¹JD9Ž=ZRkÍš5ËÍž=»ÝuiGƒŸýìg ‹ÃÄE]ä>úè£.Ç”ù‡?ʼz7ö\Ð]zé¥Rcèƒ>(Óv½‹;]›±!`½GÀ ½ÇÊŽ4 CÀ(”–»ï¾»ò(ÉÕ¿Øb‹<ªöt_¶‚æ ðä“OÊÚ œØzë­%=W{бVËŽ@Þ)®ÀKólo¹å–¢ÌC5|䑿й©áƒïíªóAÛ–î :“Ê`øÀÐI„‘D}¼öÚkm],úà HÊ+j]Ýzë­mí/Ý8…Î8à)²üå—_V¦Ð¹ÎÓŒŠ„}ÆŽ†È¥—^ÚQpî¹çvB‰üà9dd†€!føÈkëÉ0 C à-5vìX÷î»ïºe—]ÖÝ|óÍâi\ÅTJe,hÎÒjš«#FHNצ—° wŠ+RLa‘w»ÊÛð1`À€Ú4ÛiøøŸÿùéçQç @ý"( ˜‹›3>jd 2D¢Û]àœþ´È9†©S§æ®è¬j¡s°…ÌøñìüP{gÍ5×”ÈþóŸîÞ{ïu§Ÿ~zü·†€!P!ÌðQ¡Å´©†€!PUP®PÀüõ×_w‹,²ˆxP<8—t1E`Z¶‚æ`„‚çþûï—ú;ì°ƒ5/âÂ)IŸy§¸–óÎ;Oê\¬²Ê*nøðá… õÖ[oI¿Œ!BÙ‹—)ÔNÃ)¡?þñm÷¦—Žì_|øá‡µÚ1±>P”¯´ÒJb€È£Î†"ˈ¾øä“OjF×¼®Ê…ÎC3~(ö;D›MúÚï¾ûÎ]rÉ%nÚ´i±ÛÆg†@e0ÃGe–Ò&b†@5 .‘žo¾ù$ÒcµÕV¿*θŒÍY‡™3gJGŠ«Ž9ÒÒ\UñâlÁœŠHqÅ3DÓÍíA¤š0ÚæEšîê/ùKÛºÄMêAH£jÚÖ™5 šæj¨Ø¢\j y>è~àÀnÛm·-$Ýý§ kª?öU…ÌøQ••¬þ<æ™gwÈ!‡8ƒHAwÔQG¹W^y¥ú·†€!føˆ`l†€!`ÙüðÃnܸqî©§ž’üÜ7Þx£[wÝuÞŒU¥O<Ñaü 'ùá‡.£e˜«¦¹Új«­Ä@U†1ÛóGà¸ãŽsï¼óŽûÉO~â.¸àQε{—_~¹ûë_ÿêZh!‰kwYíkš+Œƒ Ê:¤-ÛÔð¡F—¶tâÕtWføhÂñµ«†Ø£=@Žº+¯¼²D|ö.ÒtW¤·™1c†Ë»¨1©&ÃBç>ªTè\×ÐŒŠ„}ÆŽÆÐsÏ=×á¼õñÇ»½÷ÞÛ}ñÅ±ÛÆg†@騮æ¨ôKc0âF€Ð}êÔ#ÒÞÌ5×\ná…n¨¤þþûïÝ7ß|ãþö·¿¹%–XB”ÛõÚ,ëvÅjÁtaÎõ¾Î§0®¡ýöÛO" ௹æ·ñÆW:…Ò3Ï<ã¦L™"é¢Î<óL7ÿüó÷õ2ÉõýôS¹7VXa…vwií†@#üÃÑÈ0 ¦ðФÄ{£'þÙÒ«?ïá›x&,³É“''ÞóWÚùÍo~“xæ9ó¸Ø7‚‰g0» 3ÄÊ+ ïm×í˜f7ô„Y½±4ÛO‘Ç3‡<0ñÆ³Ä ÉUW]•øè"‡Ôö¾¹ö×[o½Ä3ðÉf›m–xWÛûlU¾Ð|âÓj$ÞP“øþV5kíTÞÞã:ñJ‘Äç¾O|F.³»å–[äý⽯“Ï>û,—>³:Ù~ûíeãÇÏÚݶm#FŒ~½—iÛú a¯d‘g|Ðkk_Öxì¼óÎrmyä‘q ¨‡Qð òŠYá+|=ªŽnÍnïÔ“sÌ1ÂÇøÚB­i´ÉVà-î¹çY+ï|“x'…&[(Ïá^Ù˜<ðÀ ó„—‚§2ž¤ëç fríôFæCžCF1jŒòÌwÞ™x%|âëp%ð­Â™çr7ëå®É{ï½×x0ïÍ’gÃùõæzãùO<¼óI.3FÞ÷Î6ÒïFm”0—VQ.­jÛÚ1ªŠ€¹cù§ ‘!`4‡@³Þ~ÿûßç‚")Xàm×_ýŠœ3ÑN(t® jÆE¢µŸ\Ë+®¸¢¤‰S™‡6žwÝuW…ò‡~(×}£”È­]¹Zã}útñ"%oñ/~ñ‹–D5•w%mäi2;ì0çS;8ŸâÊ‘/¾<ˆb¾ÐСCE GŸY}íÏüó<ëó3aŸ:ï~óöͺª³õýüóÏeBeQ¬¡D#âç qy>g€]vÙE D"ÐÞij§ +®füP$Z÷ ¦Üëü©¼·Ürˉ ¸Í6ÛˆóÛ¥—^ZëY™Ï¨>>U“;å”S$ZRDýÅ#çn»íæ^zé%wûí·÷Xÿ¢þèl!`ÕAÀŠ›Wg-m&†@!ôÅ€¢‹BŠcÇŽÏp RäqàÀµñz!¡xº¤ Ï"H8‡bmxÌj±B ëEŠàå:sæL<}žO‡rvµÕVk~J¼„}NPQT1^ Tbp€¡T¢mþ”Y Š<óG3‚f#bÞ(ðÜ ]¾£0zóÍ7%òÙk¬‘9Ö4fýK£qæµoÚ´iŽt8„p“Úêä“O–ôayõ_T?\kZУOY š+^šæ …6ײ‘!"PTŠ+ JÞ}÷Ý2”"£=€¦¹ÂÃ3ïy>ÖZk-y_QxãüÈ‘#ÃKÁ¾W<º5‚Ehþ’ˆx<Š›Ãæa„Åð/LjŠ·É&›äïç8@ÒˆV¹Ð¹?¬à¹¢Ò÷Ïž¼åy·½€,·÷Þ{;_ÇË!óùúR™¼!2éß0Bâ@Ç{ƒÈ(•ïê”óüq÷ðÃË!ÈO¤7#ÕbZ†DV"â’1q¯û:_r2ãN;í$cäR5fÏ d;Žaþzcå7÷ŸŠÂ…Ä=.—õœðÓ+ÂÏD„§ÈwŠ>.´ÐBµ~Âsø®côLG ƒô1^ÑT+b^«p;c¹øâ‹k8¤ÛÓ>u°i̼Ы±èù1~z&ñ?‚»gþïIã0[>&Šî•µ 9`pßy¡MÖâÜF†€"àSI‘Yži>u⺫íŸGu”\—K/½tá×¥÷z•±xå[Ûçæàï ÷é]mùÍó›þò.âÞ–ÉX£uð%²Î^IY÷˜wxÅcâhÂ;¾ú꫹ Ñ+¸ŠÁ{åk²ûî»çÖoº#xŽN)t®s÷J@+x®`ôáÓ+På^÷JÙÄ+©{láøƒÏ{€çƒwŽér2‹7ˆÔŽá8ýóJÙÄ'3 Òsíj‘j=>üôÙ’û֗ŽÛ;IÁuÒ¥d5ÎGöðgµóô ü,Ïí9–kÉ+¸e›7¸$Þ ™øHÇÚ1z¬7ˆ$¼ï‘õ xeÝ~2_ŠmÃ=øàƒr Ï'¯8¯«ãIÖÃÙj’SO=UÚÊ*nî  2t8¾#q¯œ@IDATk#Wë>æ›æé‘ͲæËùÞ(”\pÁéa&r¿æškºõ§ý‡cì 'ç×›âæáš…×p¸½™µ 'øç?ÿ9Ùzë­»Íë~»í¶K|Ù—.nîS'¿úÕ¯º§˜ 0@tŒB ûÂOæ³Å[„CJ¼%YwÝu3gM¯÷¼¸‘!Љ`Õ52 C )B¥}o ¡²¦É{-HŸávZ[¥Í6ÛL„Äð%_ï{høhd”ÏÇAŸ0¸Þó¥ ³Àü`,Âóg#cƒO¥ \Cõ° ·‡m×ûÎ/YoÇ"ŠðBÌ̾¬©"jˇ„ æ½z„$ïõÓMÈhy‡-nÐç$–ñ{O/FZܼ5Wb¼7š(0¸¯Q øË‹´¶Òüið¶(ey&¡ Ír¼i¾Õ¾Á³Ø×ãJPºú¨âÄ{<÷­¡…ñC<óÆá°QϨ!T7:+TL£PÆ M‰k/4@p?°j„PÈGçwY =ôÜ?zLÖy¡CǭLJŸð꣎ç;ÎS¥~¨,Û«÷Ùy.ë ¡ÈºP8^íOÇ’õYçp;FER;Ù5k,émŒ=4|Ô›Cx^Ë,#ײuxžŽ³^!NáüZeøÇRï»®¥‚Ù –¡áÃg±H®»îº.óGôB]¶…Fz† $¾NŒ©®$œ×þ±Ç[;Ǿ‚@÷œ2þÎ02 C ÕxÅO-“¢x^lØÅý÷ß/!¸zÜÍ7ß,a±ž s“'OväE%…‡g|»µCš$Í=ÍNÂO=³*á»^ðtZs„teöŒ™´qà:ï½!ßIßCø+aÇì?í´Ójµ&¼GŒ„3ƒ mUz÷ÝwÝo¼Ñ§z%¤caÜþä¼FµÝ×_]µõwø ­KØ~;¿ƒ¹h?úè#·êª«:ï‰Ò¥@b;û.ºí24Wìî¼óN¹.­¨¹"bŸŠ@Q)®èŸçÈW_}%)$(Z4iª«¼ ›3oÞ“P£Ôr@‹þy‡i‰9çÕg‹†nÍ4€÷6–£Ë’æJ§FZ"ê|x%–¤Lõ >GúVR{E^9)©Dù$ÍÖB*j¼À!#|ðÁò›´Q>B@Ž!1Çéû ÙËUå8þy%s-u"ëGJ-R'ñŽaŸ¾w¡Hk–EÈJ¤ú! ãóÏ?/éç8Ž”PȃÈ^!Ñöe—]&›×{ìîù“í¤ŠBfã|äEÒ{)!#"¿úÈSéYNÉ+Òe3fÌÐMµOú¦Ø¹¦óªí¾ÔÃ98¤ËWð¢½Ö74h¤çB®&<é„'ƒ+²µ’7\Hº+æìYNk»€%ó!m3„Ll ‘ú‹ÔK\¬/©¶öÙgÙç# ²u³8ÉÉ-ø§óîÍZÒ]KoLpè ¸ÆI³ê uGõÎ;︋.ºHöƒãå—_.×éÃh÷¦›n’}è-¸~XŸaÆu»V¨]Çuâ£iäøW^yEjDjÇ>êCRŒ³Fàë#Ld¼±7"ÖR°êñöiTîÃªÏØæg¥@ÆXÞÓAr±ÂäÁœì·ß~Ž‘ä¿„É‰:õ@Ô˜á½Gº\Öš#>•œæÓn ÃG;ä^†Ñ€é£H3¹[!ú<á„ÄØÂoïm" .û½·E-7)Â4 y_È{K;Qh•UVqÞS·f¤aNbêQ+ÇR¯Vo÷ÞMRûAˆ¢›Ë,³L ÏV÷[{e.h–0ÙÔ£©ö!ݹäJm m<Ù D¸á†Ä(æ#$·üÈ>¸ [$!YB|º¬Û$ 5Äiøà½•1Çùæ›O„õFJ›<Æb}´3|4-<+õî¨9@í»¢ˆgq':WœÍø¡Hó‰¢[‹SËî’K.q8|!cqMR0À¾³‘Ëé}ž~úi4ÇROâÚk¯­Éh>ÊC~sçð®C–  ·ß~Û óJd®úAnƒB ¿icmÑ'ï4 5!q 2 Jdd6ˆÚÔ­Pã5"'L˜ |2÷?ÇCÔ¡o ¢i dId`daÆÜ Òöh ,õ©_©ócœÈi^y¢ÌÇXa°¡Æ“Ö0A6Ç¥ xpC¶†xÖ![ÓN‡ÔSÂX€l !Gh¿½ÅIÛiÅg³kb >M™\_¬Æ \ßY„±CÄuHÝ%%Ö}ã7–û‚mè2èK¯ Õ1paÄã™qý²&Ú®0‘:¥êèÉç!‡âÎ8ã 9ù[×K6Ø?C 0ÃG,²MÑ((‰ðp€ðâ¡eš9L×9âi‚÷ „÷ qš8ŒŒL5L…Ì×W\QcÂt;ÞHxc ðÃ4¦‰ó`ÞúB¿üå/Å;9<—gj| ·÷æ{ÆÒ›öû{ kìóÈŠ“ˆ@‹Áõ·í2œ_ö‚æ`Œñf¯"¼´¸ŸŒ ž=‡v˜<+14ã}‰Ÿñ ’ŒëñÐCͫۺýPÈB˜_ª€"ЪDb]ò pGñù/yti}€@Y \Ÿð”ð˜êùœ|(EyÒ7E…gÏžW×Ýú·Dᆲ…t#ån'—xƒ?Š[<ä'œ"¸‘¡{Ò„l†„,Çûã*l‘î¾ûîôiCÊé§Ÿ.ŸxÑÓGH(§}šàp“{üñÇË6”Ñê0Á¢²¦L™"ûÈ0pÒI'É÷ð} 8°fôÐ}Üç>ÕcÍ€Ãv !…Šþp;ßiPl£ &jŠþÏuÀ@yÎ;G³ØŽ|œ&]¶ƒ#²u_ÎÝd“MdÎ(ë‘­™£ÊÖ0€PÄ=$Œ(D‰ÀŸ!MpJۛߌGy¢ðøfÖ’ñ*–è&0^„ÚÅH¦ÅâÃ~øŽÌ„>Á§Í®]cá1\‹%n¿³ž\£JG{ì1ùɵ‡Ñ%½Fšˆ¡@¼_úª³Ð~íÓ(]ß e¹Õ0:aÆբ D6ÍÀðâ‡)ð8!µi³øÔ?_À\Â>aÄ eÎÂ(BŒa\`}.N éEys§rr þáõ“§b°CîW0ð»îº«{ñÅÅ‹ÊçÙ±Õ¸ökm<O4_xYÃ#GŽ”t iÃ^»oIÓÜ;Ÿs–æª%V¦‘"S\¢¦mÁè‚@Z4©K*¿´ šÇØô‰Ò)/!WÓŽ ä2ª&e5|Àg`øà^@y…(/âþ_a…œ¯/QxÔsæÙàëˆw<êb¨4ãG^WüýÀ3ªñï¤zU™L?‘ÕøÓ4@Ü£¼·B‚WÓ ë¾yæ™ÇaÄ B…rø®Õ芴#Î묳Ž4rŸ{@ß‘<4ÍÞõ¾€´vUûDF<è ƒj¿Ã/Œ‡(žŸt\½%”ó>ˆjAI‘”Ȕݭ äXdë,â™ é§t?2µ*Õ‰æ õ3r´®Ÿ¬† ]cÎK0F¶†8wÿý÷—´×¤ÍopæÆ®™œÐ†Œ)£vÑÌZ’¦K Q¬s–vqÛ{ï½µ‹Ú'†1 μX_œcHÏ:~üx1Løzlb ¬Ð‹/5"cÏu"nÃ5ò5Žä˜Ð`¢×{/º°C Ò#Ð=¾®ôS² †@Œ„5*`¬Ô $k¬¤>“‚ªw,Ìhz925Ä&`ôèÑY]dn»í¶Û„éà໸Wq^ ^×1Ç#éoÒ â¼°É³ŸÐøAŽÖü@‹g´QßÀ!FkY £!/ñþQ§4Z¦æ5VzCȃatV³ rúÎRvÓ7Šk õÈy<PóLÓ4WðéJ›åÓ¹¾Âëˆû¾âÞ$êŸÚ»ï¾»(°‰h #O²p®×ÂA¬I½ù°OÓqi[à‚l ñìçá¯7¤"(ù‰ø€¸ˆ¦ #j…HcÝn"-—/&ßT7éµÄõøãK¬+×G3ÄõH jšhjªfÎÏ:–ÌD}@ðyÔ ÑZ!YÇÛ6C °ˆN\u›³!P(ÒáÓÈp€'…Fc¬±Æ" f ˆFDÈ3Ll½?ò²ª3B—Ô‰'fŽæ &§ïFãë¤}0éxûÌœ9Soò‹’Ë´Y Ì˜U¡ 9økš+”&x¦¥ e^#{ß@±@j)Œ›E¤¸bÔ( x'ð\>|xß&Òâ³Ôð¡9À[Ü|Í…ïÚzÊŸiò<5$©JŒª…¹Ä•÷‚·*©² >“´xy}oµÕVÂw¢ kò‡ö…ôä“OEh§:×¹‡ÆpPãQF}GY™âý£‘a‹x'Ö“Í0NR‹Ç(d4ÛhÅwÒX !{1ªÑl#…–¦Ãâwž„q–gu0xw“¾húôéµ!ôg=˜gF)Ð.²uñ\gþ£L½uc;ï2¨jñŃ‘+éhúÁÈDDKo ÐŒQ#=0f4¢ðxÆž1Ôèüô¾°O¾«!}\½ßùÌ\ϡу5á~8üðÃÝäÉ“¥ŽM½ó{³öX‹zDCS+Gר7mÚ1†@Ù0ÃGÙWÐÆo”¼EîÔÛgĈ •°¶á´ÊधJ±;m3½ß1¤cÀƒ§ÞŒGºyOñÂÃk‚¾‰AA£!¬Ò.ó2ê0Ý5„iÇó†欓¨ìÍY+ X„µ³Ž–檓®ÞÆs-:ÅÏk rP,ÑŒEóøñzo‚Q^¤^•E+vóšo'õÿáÑLªŽ² osxäy̓ºÛl³Mé®PÜ¡ãù×0Š_¢9;…ÌøÑú•F!¯Ï}”ÒÈ|!!Ká4ƒüUO6øʻe0÷iOÎfÈx¼Mýþûï‡Ý5üÎXH?©ÁE<©‚ dM‡%‚¡<Ø,_‘õ>B¹\/Â"}^ú7†#ŠRo¿ýöR‹‡tH¯¼òŠÖÎa[(ç‘­!äZdë,B¦ÖBòYûq&$ÕS½uc;ø§08üüç?—â鬓.—ç0^¼W4*$«oÝ–ï†BãîO’ÚI#TB#Hx\3kÉš`܈€Ñ:na{|GVRc“î#R’TJ@ˆ¦wî‡óÏ?_¢è‘­úJ ¹ö­Ñ?Vܼ¯ÛyeEÀ e]9·!P"gþôÓOeÄ0 xØ4ò2€‚9î¹çž.¼d£ÿ³ÀŠò5$Òî¨ NôF=ÃÈN;í$Þ„ãÝ…BhÈ!26R¨QKóm¢¬gìFÍ#0aÂIÃzœ}öÙŽü®}šï=Ž3‚æçœsŽx’Å1²æFÓŽ€Éú¡ÜTƒ`s­ØÑUB èW`I>l„i¼DI%‘êI£,V\qÅB†Äý©ÆKÑtWO>ùdÝY9" †¼IËH¡á#ïˆð"êƒgü+ ´r,oLQŠvb¡sÅÙŒŠDÿ?‘õ4…r©I·Ƽ›!®{ä7•óÂ^Ù‡RY ™,}Ãþ·ß~;†ç¼:ŽZ {Mƒö§ß9–è†×^{M7Ég¨DÇñ¥ZNn„eÖ>ÒEá¡O”C‡­Í7s—Áü÷ÏÍn€ÄTúãä°]Ïð'žA“6ëm—ÿýçÃ_Î;ï“xRöÔì§±„mçõÝ3êµu<ðÀÏxåÕuTýxÃOâCæ/Œ%/¿ü²\7Q °—ƒñ]⽓äšôÚýÚËÓí° "À}íò÷JDyæå=Í;î¸#ñž|2ž›±Ï/÷Š7v:¤ÁƒË8|1Ñ\ÇáÓ”H¿¼wªƒü|É‘GYÊIÁyåÌÁ{{'|ðAîóð ®äè£N¼+ñõˆrï?«CŸê'ñ)u¯N¼Gpâ•™Y‡Uz²ÂÖÅOŸ¶)áý¯ç!7"?BzNº-m3üôÆÜZÚ²]š¸>)9†û„y.¸à‚É}÷Ý'÷ üò£¶á ò¢²j¸ÏGD$ʳèxÙŸ…ó¶ÛnÛEå¸,œáÓ‘™Ùï ‰7:H÷ÈÈ’Ú?²÷u×]'ãóªnkÈüYÙUåQÎ绎Û;&>½h­]úôŽ…r^8'«¶é•þ 2¢ŽÇ×ÞõäÄF8±ßäm=—OÖÁG²$¾–b/êÓF >zŒ7ɵÂùPÖ2¥¶Í»…kÉ;àt›7 –>e[¬|ZªÄNäú÷‘+ɸq㺜ç£|o¤ªéÂûǧ.“µã|ˆëRå3æ¬m3&oŒêÒ¶7’ˆ®BN´†@‡ €uÔÈ0 ¦•öÊPôô™eô ÓzJ|öù4:‰÷–éÂÔë'4|ÀÃ@Õ;V·Ã¨…ŠxW'Ý_ï3}^høà˜;ŒPˆUhøáv9é¿ÿ`Va i³7†Nk4–°í<¾{/ÆžJjHÊ£ï˜úðž?5áØcMPx”•n¹å–Ä{‰’»S׳¬k׎q{?ÐyF]ýõ"Œ¶£ŸžÚÜtÓMEÈs&&òž«òü.ZAŒË]uÕU¹Âã uJ¿>:,×~­³ö"€B…ëɧÿloGmlÅÎ,(}ͪ6ö”Ý4<à /¼ 8b| •£Ùg´+ü*Ê70ÁQÃ{ ·¿Ó{0ãG×E •×Ü÷=ý©‚»k+ÿù…Ì*Éëµ…,ÞÒ†‘¬ó0DøZZµnUyÞÃGZ‘]o¡²<¼•¦» SäÈÄrøè#±$E éOn½õÖzmÜ|)…νƒFG:Wt¸6¼1Ý‘ÖyÂ{RK=MQ£ÇÙç Ÿp?Qœ™4?'œpÂ;ƒo¤•:óÌ33Ó\q2²ézBùö)ÚÌ;UßgA³RG„šaÚ)•³øÌ:'<ùsìØ±µMÔ%9øàƒk¿³¾jÈ;õÕjm„ÇzèŠ+®p_|q¸YdE-´Íž=-l–Yf·úê«Ë=J -ê†Äõ«ò6í37%Ò]Íš5«[akŽ£È;²uMÒ†<¯HYEAî,BV'mŸ7FÔv#'PKÙ¹!ë"“‡ç!S÷„“^K<;aHû¤U»ýöÛë AÒF5»–È夥Òú0aãè?¨gÖ€Cþ†ùZ4vÏ"Ò¢‘ŽŠÔYa*+=–Úa›\zkH*eÖwÕUWÕSº|R7¼Æ×e»ý0:ÿƒ¥§&js4 r#à=3d¼ØùƒP¨?ú裢ˆE÷^ ²=üGþL„ZK˜h˜r­ká±ú Åó(FNLA" 9j³ˆG)9Najè‡Ï¢¨è±?”Ú.>êÅùPua²ÈOÛ‰„@‚ÍuxÛm·IîbÕ2F,#î r×¢ÔTÃ\çccît«]Üó(ÌŠxîí±ÇÎG"I~c®Kû7»þŸÍ;Ç{|Jîh M"°E>}»óÎ;%wù)§œ’Û0ÈíÒw*Æòp•êè  †Ï@ _TF‚_#W½‚…§÷€Í}<#(€ì½ÂÝòË//Ezcx§Âû¢döónôèÑQer_ß!Æô™3gŠ"žÜûFË3ͨÿ ×!kù”IâHƒl†294xdõÂû„º æXû(ÝÉuYí„Ûxž!+ò<ƒGG¹Ÿ®ÛÀñ\(–¹0nP4'<øbîÆ€B~)on4æÀ³”c+›å|ä†\—åP–ã$Ø9+-[ã¨8bÄÁ™úÿ5r§±âá#@dÜð9ôÝÓ}Á|©+‚¼XR¹¢Þü{‹ëÇP_§ÚƒÄXƒ+‹Zµ–ô­xpíøÌ‚G=}Ž…wuq0¨b¸A?Áµ£ä£œ+®q0¯'ÆÎûƒ÷udÒø±Ÿ{'PÎËj_û±OC cð7«‘!`Ñ!@x0uBÈNhnšöL™„|¶›uLúûÝ~ÈWëøÄ3a ¹I‹Êùßþ™öÜ¡ùä!öLgBŽòÙ–™|4”¤¹òNâ…–2OÅÆÞObIqå…ôÄ Ûòð}…¥ÚÊ‚“zT^˜g!éŠ$ïÝ'c9ì°ÃryÚÁÁ\rïÛ:l=Zƒ5%Ç~YÉ+áÞi¼ŸIWyÅ—¤•"-ŽW²5Œ.ý»+Ÿ5f\Ô¸ëT"ŽÕü¨þꇩ®¨“à#I3'Íõ 5>|TE­žHæÁmÜèÛ‰7<'ð㤄FÆè‰Ï õX–^ziI%5<}¾Ó&馫L±¬e•1¶¹1!ðcNÏ݆€! xUêLØòƒ>èð¶RÂÄysx¦@¾¸n/ =Î>óEÀç§ÏI¹N,íUÑ«ÐÞþñŽç¹F .þv­µÖjo§ýl/~x RDÁ÷rÄGH$^½¦½aD"?‘ÕˆB%cBH¾f…ÈÖl#òÙÚÈ0 ª `†ª¬¤ÍèäÕ°Ù½÷Þ[ÒÀ„Q[acˆ ª(¼ŠV,U þ¦§CN_òœú˜’Þc˜óN¤?ýéO"DÊì ü– „B_ˆUBÓ¹{ áîÄ5ï”9üñÎGrIij÷eÐãÞ¸Š1n¿ýöˬ“T䚨á£èú` ©Š0|h¾pÒ¡‘ê¨Üð.€HåRfB¡½ÜrˉcÏÒ¶A¼KáàgIWC ˜ˆç:iñø$ÐE]ð ƒ? ½í’ †>­‰@Ê,Œ e l°ÔUÁ@I ‹F÷)2µÖÚ`î>¢Cê²øHPÁtUZï™ÙÚÈ0 ª Й©ª¬žÍè0;ì°ƒ(ŒÕSO ÅÝu×]]¢?ˆ ÁÛר8ÔÉq‹ 6òíSxa±Si„ ãÇK,!×q™ š³†T(f(^éÓÏu¬A«S¯g7Eýë_‹±šgoQ]ô=šwqs®pÚ(‚Pºn¸á†Ž¢ÃÔ#²2â¹:ÇÈMݶN%3~Toå1ÄãУĽˆ1T£u{øéÓ¶HÝ.¶ñܳ„Çåõ51^ ‹uÖYîá‡Îì^iÏ=÷”‚ì@} `#2áë­«N±­eÕñ¶ùE#`†¢WÀú7 ºœp Žn7Üpƒ¤×Áû„¿ãŽ;N”ì(b)iT~7nœ{òÉ'Eñxã7JQLˆN% šSÈœë“W@,;QYÓ\Y´GÙW³oãO§¸BØ.2µ^™(.ÆŽëH‘¦Š!âC ED|`ô>|¸`*Wdƒý+U2| Ì&Ý©nÔÓ¹ˆáá9Æ;6–tWà€1™Hkøl I{ì±EÀMŸfüˆf)Z2Š©eu饗J¤¼{VAó°3dŒù¾ˆ{衇ܘ1cÂÝ…|'-÷¦¯ó!­}L)Ÿ5_—Ä]yå•’*ç•«‰ä>÷Üs¥6ÏøØI²æÒßm1®eçdç†@}þGêï¶=†€!`†@6é¤!»ãŽ;$¯,F­·Þ:º”3Ù£oÏV<¨6Úh#狊×_´=åÔê+¯¼"©ä~õÕW%ê£SS˜åy”Ý|ðÁîꫯ– Òá \T´‡/¶+¹¨ñ¶$Ò,¶($½éà9Î}B•(”ª¤ àiP5Jx™»ï¾»¡G| cn÷0”ùBônÇwÿuÖYÇQ—PÓó¶»kßH#€:¤[mµ•Ô,âš¼ÿþûki.ÓÇÛoCÀ0: ‹øè´·ù†€!ÐÔ)¤‡¢€È” 0ÜeOéÔ_hˆNªRAsðÀ°Å#H-½ôҖ檿I Ï)Åð‘ö¥åÈ‘#%5El†¸—_~YV™ç!÷LÑTdÄs×:DÁ‘n«hü«Ô•">xn 2¤ðˆÆ¡cÝu×.ê¯h+tÞõ¶È®xدâÀ e™e–q×^{­(gÍš%†iŒtF†€!`ΙáîCÀ0 ¦ †J~<®É)‹7qQEŽ›|›NøóŸÿìðl®JAs`‹ OKsÕ¦‹¦ÍƖ⊠R&á‰|ÀD™’Aë{ĉRdqs.qp J¢uŒÊ‰ÆÆÏ?ÿ\_öâæLBS]ñž£^P‘F9-rλvêÔ©r¯Är•X¡óî+aÆî˜Ø–bÀH¹æškJê.œ•ˆB:ãŒ3Š”õn†@$˜á#’…°a†€!PÈ{Ùe—I!Îã?Þí»ï¾’þ¦,ão×8O?ýt)þY•‚æàDí–?üPD¤)²¦C»ÖÍÚmŒ÷8)HÝDÛ¢ œ<{0.â©MZ9„ýØ(4|Ä06ø ]]nñh'ÿ8ôè£Æ‰¡ð.Ðë§ †®K ù™…QNïÛ>@ÓïS0|ðŽ%·þ'Ÿ|Ò¥Øp¿ïgVè<@3~dãb[‹C€gÏø6œV(\^T ¿âP°ž CÀ莀>ºcb[ CÀ0ê @õ™gž)ž‘½$o»*ÕêœÒ›ÉÉ}ûí·;‹U)hÎÂiš+RÕ,¼ðÂ…Õt舋(ÂIÆ–â lî3¼¢cö`UCasÆ£Ïh”ÖEyµkº++pΊ”“4͵ æž{îrN"5j 18gX”Z<ßb*rÎØÒ…Î;î86w<Õ3~|ýõ×P ¼ï=ôP·ýöÛ»¯¾úJä4jõ†€!ÐɘᣓWßæn†@à5„°ûÍ7ßHj«SN9EÒ—4ÑD%%åÎI'$ÆðáÃ¥ÖIŒ^èÍ‚òå¾ûî“ú£Gv(ˆŒ:ØR\üu×]'ÏŸ\ÐÅ|MjñØ `ȺAÔ €HUFZ!£ò! †*D{(úšîŠˆ7ÞxC7ò©é®HSCAño¿ý¶qÔë…*¿ð<÷ÜsEoý¨,ã5ïÌøQïJ²ííFãôyççV]uU÷ñÇ»½÷ÞÛ}ñÅíîÖÚ7 C ZÌðíÒØÀ CÀˆÒ“àAD‹Í7ß\RÞÀX9©uBÄi3&NœXx* V­ÉÃ?,ëMj#ŠH[š«V![ŽvbKq…bòú믗¢æ{î¹§›gžy¢òý÷߯V\qÅ(Æzçeø ðê"‹,"x<øàƒQàbƒh*>xo¯¼òÊ…8g%p˜:t¨Ü'ßÿ½›6mZs Ôæ£_ºÐ9Fÿ©³é¦›J}x¦çž{Nœ`ÌøaWGžnñÅw×\sCV{ýõ×Ý~ûí'üSã±> CÀ(3|½Ö¿!`‘#ðüóÏ‹·^ºl°›ØÍ;5˜õwß}çˆø åFÌ)…*vd“ˆ1Å]}õÕâ­HÞjžAx4ÆH±Õ÷PŒ´ÎG‘†­óñÄOè°ì³DTÕð±Â +È*Æ“îEé®vÜqG‰@™5k–›={v‘ÃéÖwV¡sRéý3~Ø•8ˆ¥uÚi§9¢ÈHŠgd†@§!`†N[q›¯!`½Dàƒ>ÏCr²ÿìg?s7ß|³#]I¬ Ç^N«e‡…ÍIqE—ª`Cm¤óÏ?¿Ûxã%GË€³†¢F ¶W€õ /¸§Ÿ~Z”15g¬±>Š*n6¤ñ>ùäI½!?ì_i¨¢áƒwöOúS·ÐB ¹ÿûß…×ù õÖàÁƒÝºë®mÔGºÐù±Ç[šk8šñ#”­Þ"@ªK¢d÷Øc©;3aÂ÷Ì3Ïôöt;Î0 J `†J,£MÂ0 Ö"ð§?ýÉí²Ë.¢@)@Ê„q„r#'Å=ÓÍIQ"͹»·Ýv[7×\sUeZ6ˆ1ÅC¾âŠ+$Úcýõ×w«¯¾º¤pèa*…íŽÝðQdÄ‘qZðÝÒ]v‰ö©ãüãîóÏ?—s«TÜœ ¡¨^i¥•¢¨óÁx´È9ïà©S§Ê¸ØY¡óÆ«aÆÆøØÞ|À‰éÔSOuë­·ž#m1õ>,R+ß5°Þ C XLƒU,þÖ»!`Ñ!@½ rL¿øâ‹’ºé–[n‰^Ù˜7ˆ7Üpƒ š#TT…¨[òøã‹qÇÒ\UeU{žG˜âŠº.;í´SíQ¶Þ{ï½’v-öhRÃQ‡¢ÞOLCª+ðÐtWføˆéêèy,¤€J’D4ÃGÏxõç [o½µÔ1":*Æ{Å ÷¼Âfüè#;"?pb£Þo½õ–Ônüá‡ò€õd†@˜á£@ð­kCÀ0bC&xܸqî©§ž¡ûÆo”” ¹FÿA « y•ð™>}ºûûßÿî_|q·Î:ëDí]o×dëS\Q°6–¦É“'Knê%—\Òm¹å–Qcê¡þú믋†ô9Z7 Þ±yoÅðA¾qˆw ©…ŒÊ€¦¹Z`©SªDD²®¼òÊÑD|€íÀݨQ£¢MwÅ­Ð9(4&3~4ÆÇöæ‡Ï9ø’k®¹Fø(ÞÁGydÍ ßH¬'CÀ0òGÀ ùcn=†€!%¤UØÿýÝÌ™3e|0ÇÔwÀûÐèGªZÐ\g¨i®vØa1~évû¬.±¦¸ÂwÓM7‰òÔ sÎ9gÔ‹ i®–_~y7`À€¨Æ:ï¼óÊxŠLuÅHW††BÒÏ?ÿ|TÙ`ê# †ªE{0cMu…!Žˆ-"·Š&MwÅXf̘áˆÄ0ðRÿ<«/¸àKŸ“±HfüÈÅ6‚ÀsÌá6Ø`7iÒ$÷·¿ýÍM™2Å]|ñÅ…ŒÅ:5 C OÌð‘'ÚÖ—!`‘"€ÀÄG8¼ý´/¹ä·ÕV[E¯hÌÎ*4K”[’þÿïÿ¹í·ßÞŒ^y_`ôkŠ+  ¶ù¨ñ0ßu×]£7Ä©áCëX°œu»Ôˆ"‹›3¸ùæ›O"Éøc ÆeÔª>0V¢ÈG?{öìîä¼…(Ò¡C‡ºEYD"Þ¦M›–óz×:ïNfüèNvTû nߘ1cÜ¡‡*Õ3Ï<Ó=üðÃíïØz0 C @ÌðQ øÖµ!`± 0aÂGZ+<€Î:ë,·óÎ;[QëÔâüë_ÿrU.hÎt)¤Šá‹´Ô(°bö©‹ ‚?cMqÔDQT™šC¤~‰^{í5b̆¢#>HÓ]™á#ö+úÇñUÙðÁ,ç™g·Ì2ËHúµ7Þxãljø·]vÙ%êtWÀƒQõœsΑº`÷Üs4ë\3fü¨ŒmÎŽ;î8·É&›¸/¾øÂrÈ!îí·ßÎ}Ö¡!`y!`†¼¶~ CÀˆ”ݼûî»ïJÐ}÷Ý·r9¼[}• š+>DüòŒ4W–âLQ©îg¬)®@üÑGujH ͞űS">b0|hsR]aØ2Šª>4ÝÑŽ¿ÿýï£XÞÁ;í´“D`Κ5+ŠH”,`ˆN1b„Ûn»íÄyæè£>"ëØNß–eü ý×_ÝéÐØüsF`¡…’èþå–[Î}ðÁbüÈyÖ!`¹!`†Ü ¶Ž CÀˆR;â°çñãÇ‹÷^œ#-nTaAsê  Q¥‚æ ûꫯŠÂ‡´g¤¹"°Quˆ9Ũ_qÅ¢9r¤C0=úˆR¤å‚,âC`¨ûoíµ×C†?þxÝãlG<t‚á#¶ç<ó,©ápH õ_¬D¡óSO=U žc8ºð cjáãJ?ž}öYgÆÂ—¥ã€ÜG”Ûu×]ç $[ðÿF†€!`T3|TqUmN†€!`4Àn»íæPj ¨þlÔ° 9!áZ(¸û‘åÝBQsÒ\­»îºn饗Ž^Ñ\^¤ãyÌ)®(0LÄéå8à€RD{¼üò˲°¤§áþ‰ô™CÄ >\ ²tW±])ÝÇCTÎçŸ.;–Zj©îT` F†Ø ÀªEÎ1|KDJŒd…Λ[3~4‡—ÝpàZo½õÜ»ï¾+u>bw0i Öª!`tføè„U¶9†€!Ð ¨ëÈÝU/h΢&Iâîºë.KsÕ!WxÌ)®X‚Ë.»LŠ 2Äm´ÑF¥ˆ®Ò4WDƒ¡ÔŠ´¸y †°ÑtW¸ŒâFàÃ?”w£¬ªáƒ{v¥•V’y~úé§Ž®ˆÈËQ£F‰ñ÷“O>‰º~†:oîŠ1ãGsxÙÑíA£%÷nŒ|K{fl­†@'"`†N\u›³!`†@¯è„‚æñÔSO9”[>(Y,ÍU¯.R{Š+ŽS¦L#\Y¢=¸Ôðcš+Ƨ†Xºjø Å^,Æp2ꎀ¦¹Z`*[ÿ OgŒ:(‰ªxýõ×»QÀ”’”TH±§»+tÞÜEbÆæð²£ CÀ0 ¾ `†¾ f熀!`t7Þx£#â¥ÈĉÝüóÏ_Éykš+”‘ /¼°EÿTr•ÿ3©N8Á½óÎ;î'?ù‰¤·#7{Ltýõ×»o¾ùÆ-¸à‚nôèÑ’ê%¦ñÕKY ?üðC½)äºÈÒo¡d~ä‘GríÛ:k5|`¨2‘VЍ®É7Þx#š©jº+RQΘ1Ã}ûí·ÑŒ-=+tžF¤çßfüè#;Â0 CÀèføèzv®!`†@e  ùyç'J†ª4gñð"½÷Þ{¥¾Ç;ìPEse/¼6NŒWXósÏ=×-¹ä’Q¹P8Rh“š{î¹§›gžyÚˆFk›~óÍ7¥ÁØ#>(^CÔʾM6ÙD0³tW­½[ÝZ§>¸&ÕðAîXc)ÿYd÷ý÷ß»iÓ¦Å2´Ìq¤ _tÑE™ÇÙÆ0ãÇXØ7CÀ0 C Õ˜á£ÕˆZ{†€!`•@àŒ3Îp}ô‘[tÑE]U š³Px[cäAY±Ùf›Yš«J\½Ý'‘Nq5f̘èÖúž{îq6'Õ†ÒΔÞÿýš1ÅiŒ¤ÅÍ[,©¥4Ý•8ñŠùqLbøˆµÀ9+1çœsº]vÙEŒÖ·Þzë‹á7-t~Ì1ÇH­¦óÏ?ß}üñÇŽ4®!™ñ#®õ°Ñ†€!`T3|Tg-m&†€!`-B€ôVÔøë_ÿê~õ«_‰§%Â|IÓ\m±Å’þ¨Šs´99{Š+ÖèŠ+®hí·ßÞ-¶ØbQE£4º†4ÍÕ Aƒ$U\£c‹Ú7`À€Z×±>H½öÙgŸÕÆg_âB S aÄÇ[o½Õ"îj§v’4\³fÍr³gÏŽj|éÁ`´>è ƒÜòË/ï¾üòKwì±Ç¦±ß˜ñ#Ûd†€!`ô3|ô@;Ý0 C Zn礓Nr_}õ•>|¸­B«ÿî»ïÜÌ™3-ÍU«´ØS\Û+¯¼âž{î9Qì•©¨9cWÃG¬i®#ŠÓ¹æš‹¯µèùQà¿e—]VŒÊ ᡇ*p$Öu#:Éð±òÊ+ Ô"â3"eðàÁnuÖ)EÔ¸Y¡ó¾]=füènv–!`†€!P3|ÔCƶ†€!`t$7ÜpCG4gqï»ï>I{C¡kÒÎKܨZ”!ň_rÉ%í±þúë»ÕW_Ý¡ü) •Áð–("¡X">ËÈ‘#ùp–îJ`ˆîõv>ÿüsWÕ‹›Õ¹ÐB ¹ùçŸßQ '¦ç,€9§FÓÔ©SÅHÝ È `4ùÕŒMf‡†€!` 0ÃGpl—!`†@g!Ð)ÍuU)’Še»í¶«yƒë>û¬eHq…b•úÿüç?]Ù¢=¸JÔð±Ê*«D}ÑÄhøÐ:O<ñDÔØuêà>üðC—$‰L¿ê†&‰Â™È-"?c*pÎØ¨}4jÔ(©}ôÉ'Ÿ”ÂXh…ÎY¹¾‘?ú†›e†€!`¤0ÃGûm†€!бtJAs#Ïc=æþõ¯¹vØA¼I;vá+:ñ2¤¸ú+¯¼Ò}ÿý÷nÉ%—t[n¹etE×]kÞ}÷]9$æTW 0FÃÇFm$ØQü86E³ ¬Ãÿiš«XÀÍ=÷Ü•GeóJ+­¥áƒˆ”JúMb/rÎÅb…Îûw˘ñ£øÙÙ†€!`†˜áîCÀ0 CÀ#ÐIÍYðéÓ§»¿ÿýïRDzÝu×-Uj!»`{F ,)®¸o¼ñF‰<Úo¿ýÜœsÎÙóä":‚t8?Pð‘ƒ?fšwÞyex1¥ºZtÑEÝ!Cd\>úhÌðuäØÔðÑ Ñ,0µ4¨óAÄGl©®Ÿ¦»â™3cÆ ÷í·ß²9j S;Í 7·\füh/;Ú0 CÀH#`†4"öÛ0 C ã褂溸šæŠhFÕB@S\Í7ß|î /t¤‰‘n»í6÷ÙgŸ‰7ù®»îZºkQÓ\-·ÜrnÀ€1B\“F|üå/©m‹á‹¦»²:1¬F×1tšáC#>¨ññÞ{ï‰Q³+"Åþ¢nQR‹,²ˆDÉñ/ñì9çœsOÒÚ½Þܪ™ñ£9¼ìhCÀ0 C DÀ !öÝ0 C #褂æ,0Ê,"\0øŒ=ÚÒ\UìªS\wÞy’BŠˆ„éꫯ–¢æcÇŽ•4.1Ž±Ñ˜^{í5Ù{š+©†˜">×ÿüÏÿðážzê))*-?ì_t¢ácùå——. »Ïž=;ŠuATÜÎ;ï,QreHwÅØ­Ðy¸‚}ûnƾáfg†€!`ÿ× 0 C OÈãþÍ7߈µ^¿ä.^h¡…i9)ë(îH}ªŸþô§•KÕCÁ_o„ÞÌOçœ%–X"·”1(þX3R– 4HREÔ[Û·‡Í=ôPGb®©*ÓÔ©SÅórÅW”B®¤÷0ª(µ;ì0÷Ã?¸-¶ØÂ3&Úšxýªá€4WeŒ<Òˆ3|ôýþÙ`ƒ ä½ñõ×_‹AvuÖé{cvfKè4Ãàa \zé¥<ugb»·IwµÓN;¹I“&¹Y³f‰q&ö4{અÎgΜ)¸^tÑEŽb—Q/;{öÙg¥æË½÷ÞëæŸþ^¶RìaÈmÈoˆTnóÌ3ÈõäÀ$IÑ‹¤{#B ¹§J¼{8¿FX¥÷© ¯O#“ý›t«}ô‘\;½Á y—÷"ü* /¼pvÃ-ÜÊ=óÅ_¸O?ýTî‹VX¡…­[S†@g `šŽÎXg›¥! ·Ür‹[uÕUE¨D°Ìúã…þ“ŸüD˜Ø_|1ÓHc‡²„óÉÇ 3PFbü¥ †åLØâ‹/.LYú˜ôïM6ÙÄ-³Ì2ü†`”ÚMŒ}ë­·vk­µ–¤1h•'q=\Ú1ŸN*h®øQßæÝ¢=‘ê|’âêí·ßv±§¸ñ+®¸BŒ»#GŽt¤Š*£ n†þß;\«¿øÅ/¤!KÓ<[Ù ^¤Så²ÖùÀðñœÄi{†÷xY¢>P`ÿìg?sÇsŒÔ;ÿüóÝǼÑ'4~`LRã†ã2kž%û…ÛˆºÂákpW^yeæ´¾ûî;‘;8oèС½’“2Š`#2r_HáüBlzú¾æšk:"iº"…12ë)§œ"rsopC®~á…äxämäî<ˆt°§žzªÈÚ8 1—VQ.­jÛÚ1bBÀ 1­†Åèæšk®†Q!xÁˆŸžH‘êy…ÇÄþÜÌD¶ Ä<ýôÓý6T,¶Øbµ¨<ó pÀZ¡¸l5.pè´‚æ`‡=ʘÝí·ß>Úh€Fëfû²(SŠ+òç?òÈ#òÜ;à€Jí·©Ýcó ϺBb,n®ãÔtWføPDŠÿ$z”¨¨“ ð11>X-rŽáƒNÒV–ð>è ƒŠm+tÞ÷«gü ¢>v 冞ÆÊ|ößyþð< ‰v)ËL–™ÇsÌ!Ná\ú:?xû¿ýíoaSý½•³&UÄ=ˆÜÑ)[I=ö˜\{<“·Új«V6mmQ"Pí\QBnƒ2 E€Üó¤bQe¹*ëQ|ŸvÚiÂ̱ãÇ&Žô-„>+­´ÒJâÕ|ÄG”27<ŒiÚÃGçÖÉŸyáÒ‰͹®4ÍEx,éý×É×\æ^¦Wà}ùå—‹×ï!C¤X¯ “eZ‹W^yE†‹@ʽ;ÅZãÜ(pŽGãsÏ='Q@ãFÅ"ðá‡Öx”¥:,âþ!ƈ® ¥Ûl³DOà$„Á0/ïãþ^•Zèœñk¡sî£æšöŠÚ/·Ýv›DÍ7×ZþGÃ{¡>cÆ´|ÙÝ@IDAT ‰\b(–‘_~ùewÈ!‡ÔRbñ,âØwß}·¦x†g ½Õꫯ.£e~FõF‰NJ%ø÷´(\9dJž[ðUF]è Æ]Ïhü ¬[•å qOíÝ›Wº®öÎÂZ7zFÀ =cdG†@› UéM`FBÂÐÃKú¤7ÞxC<Ó'L˜à¶Ýv[‡0 cÌÌr™‰ æÁÀë÷2Í©†›¼pé´‚æ\W¬×]wÝ%Bæ;ì`EÍËt³õ0Ö2¥¸"RâöÛo—ë°¬Ñ,G˜æ*ýëa¹ Ù­†ðHÛƒŽáû‰'žp#FŒˆmˆ7…Ï>ûìš'çS°^èìÙ³¹1´\É‹Œp¥õ/`¼³ Œ ¥¹<Yd÷׿þUò)SÀ»‘‡ŸÏ<óŒ{óÍ7%ªOe§ÔíNñÀ³Üð(ª‡{ØiÊÈAüÁˆ9’ Åë¢Ô,.:¦f׈þ:± 9ó&¥÷뇷%^£FåG LqEÝ ž7YϵXfúë_ÿZÒœ,¸à‚¥®3>bÁ¶Ñ8Ty£—"ï’aÆ9 ã½n†F+™Ï>5|d)&óA1½Àƒ‘G>>Žû|ýõ×/f0 z…—Ýe—]ÜwÜ!Ž@y¦^N^”/+tÞÿÕ‚ŸSãuÛÊbü€‡oô."Õž{î)rÆÞ{ï-rEÜÏ=÷ÜZjLÚÀX®r`šïa?“Y³fIÍêf!‚!—}ÜßP(‹èŠ §!?‚'i"‘—]vY‘}Éi?üðƒœóÒK/‰¼‰üÈúð ÑñÑ6i¼0¬BŒ‡ÆÇ1iC3Ç“®/ÄÁ™1ë<9‘ËH•G-ƆlWÏY~øa9„û—9­·ÞzÝdVÖƒvy§#c€!çñرcežŒ…ý’*ñÊ’Ä{†&Þ Õ S®ü¹ç¼2ñÂrâS&^ø‰zÎ^èJ¼ &ãõEn/$G=ÞFƒ[wÝuå¹xÁ4:,š}>’BÆëSFF3¦p çœsŽŒïç?ÿy¸Ù¾„ïtÞÕ¾TA#(®[¯€LV[mµÄ+ø’«®ºª¸ôÐ3ü+ü*ãô{8:®Ýðˆ¾°°\cðùi>>®ÑÆ?Þ­>Râ—"‹xÅtâ žG7pä8ž+^1›x…{ãó W9žs_U ¯M¼ñLö!£øºa]ÚòÄkçªÜá ɾûî[Û‡,™–é¼[‚ܦ焟Þxd½ó‘eiÂcÃïá‘éÂ}úÝ+•…?JÏ™©Y‚?Ôç8ý#cj_á§7&$ÞI¯[óȶȓá±áwï¼’Üwß}µótm‘ó綾^Z;×;&Þ©¡öܳùÝG€Êq´ï£ÂŸS~óœÛrË-3×Fç ò\;0æÓ±„ׯ7`%Þ™OÆèS²%Ç{lmž!^¼S¼a"kÚ‰7vd΋kÞGÇ%¾‡´¹ÑFu¹^¿øâ‹äW¿úUfô¬ë ˆ c‡ê]ÌB‰ûëÊ+¯Ìl—c‘#Óú=×> ¨orôwŠ‘!`E#à ]ÅñFT,iƒµxôÑGÅ;HÛÌú qéëi»XМ¹ãAåYKs¥WCù?˔⠴ñؤ°9ž€xsÖóø+ÃÊhþÿ26O-nŽg`Œ¤yþy¿ò®5*<<¡N‹ø`Îx¾•Š7¬Þçlðä%êƒ÷û­·ÞÛðއg¿:oQS;¹f·ÞzkGD%ïW"H{…ww™ YŠè ˆhŠ|0s:aª´O?ýÔ :4óž Ý33÷ѰWÞKär[áüñÇ»½öÚ«¶›ûY™FÉ+‡»¿FŽbLõdSÎc ³ f#¦=ñµŸFŸáyô¿ñÆgNDã¿é¦›jû‘ÝÀ€´ÔJÈoÈrJDÏï·ß~Žì !yƒ›¥×4eìãš ß%^1êX‹41òüóÏËfæL$‡û³Ö†9P…h=Ú®Gõ0®w|³Ûßzë-wÖYgežoÃóšHˆHâÞÍš2ûwÞ)ò[xßáåÀãä“O®íâF¾pŒw:u£Fª“õ…籞ǺNš4IÖVåzÖH$oD‘(ê´ihd”3|”a•lŒ†@#“…ð Ã؆‚D™>aìTQ"åí·ßácm…ŠwÎW‚™=ðÀ% Û|T€ ØsFj'=ƒŒ„Sabaòí“Jˆ}0+|÷^6rÂ3ÛQözí=†jŠ(ï%$}禬&„Ò‚a¹ŒÓNº.¥K˜]R> €ÑñÞΙááœËÜ9F׊‚µ`„sJ M­…p†0³Ï>ûôˆK_×HçÃØO:é$†(M»SÕÏGyD®mæ»ùæ›×ηæõÛßþÖ]ïs`#tûè«èS\±&¤ââà½ÈEÀo§¡·×ÊžGÏý2*,x.ÇhXXuÕUåÈs%ŒQ±t²á^oå•WŽÞð²w§v’q¢Bd9}†m!ÿ`,RÂ숼„ÙG0È.ðÔ™$Õ.„¢ùByŒƒcEæCÞC¾pºóÑ&¢œ§×_]¶óÏG@ˆ,”U¿š—œ|[ïƒO=ç6í™”qÁÐr'„ÌF1%ö©Ñ¹Ylá{Ø§Ž `FJç,â9J-OxUd=œ/PüCÈÕ¬SHÌS1¡Oú@á®D{¬)—|俬 ü$5Jè pâÃÒ Æz~+>Iæ#š…×gRE!3CÌÙÊÇ\;/H?ùˆ1õôÑ#²=ëß;ï¼#iÀÙǵzùå—Ëœ¹fY+5da¨îaÆu»Î0ȱ®è"8ÓS¸.‘3À™càÍÔ‚‡´ÉF†@0ÃGVÉÆh½F€(ó!˜ XÃtÁ,ÁŒÂp,¾øâ™íQ4»ȇàKÔ¿aÀPú#Ós cCsþùÂÉÿ1ÀĤA0(úhÆH½­—!ôã # Œb€tíµ×JÞZã…aòáÍ5,9ìÔøó ÃCÍ=/yFa’ jž£s…‰¥8!…9¡iÓ¦Õr¹ö„K_×H:òÿ:± ¹Îœ*0zø°yÝlŸ%EÅõ¡‡*÷*^WcÆŒ‰Þ˜…·y¥¾Ê\ÔœKFë{ø´‰µç{ì—R¨èQ£MLcæ¡ .3|¿2løàZ„߃Nj٘φò’÷{Ù¢>à¹ç·Ýv[á£)tÎ<ŒúŽ@Í "Y# Pò#«µÀ½BÔù„ $â#müWE³F ðÅyM½à1À üG9 aDÁáâšÅ Ž>¨]FÄ»²‘¹íÏ|uùŠPɯç󉑀—q+ëý!ÛáÔU˜Žoœ,J ËÛo¿]gþŒOähäiˆ9QÛY‘k â<~CzòmHKt9·ü²z’ÈŽj JZ8—mÔó„SŽ:ê(ù®ÿè Ì+WYeÙŒñ—z#jüÀÉŽ5ëf0Ö>úûÉ’)¨ÆÎÈÀ•Ô`À5JÍ|*,©Ù„Á‰óÐ`ø °}ÁÇa‚¨ _­„ÞçEœ8!drú¥]öñ'z•ÑyßqƲí^x¡7nœ\\ £À_ç‚u32bGÀ ±¯Ï0šB€—5L„÷˜´^øx‚À<†ƒDˆ) ”C»ï¾»óyÐÃCä{x.<€`hÂ믘3%˜3?Ž¥\c ÃÈÚMáøÃ¾|ÕV0Q0H!–áþð¼zíÁMŸ>Ýe€'‰Fìè¹0kŠx+~º_?C\ú³F´ÇƒFh6ë’µÚw•>š`TaP-ÍU5V¶l)®@oIž-Ò$e  Ze\5|”%Í« ÊwU¾ð=&R/Ò¬”1³êcá>ÕèÏ¥–ZªêÓí6?žM("á;àPÆJ(×4Ý©^0,—‰à¡O;í4á¥Qªâ³Lsˆm¬jüàÚ×ç× qî!±”ÆiBFÓh Œ¾–ˆ({Ãã8××69‘g$Fž*à ×`ñµÂÓ$šù’÷®¯µÕe?h£ïdÓ¡ƒCØx0Ž I.á6ähU~#G#¦‰d§Ÿ~º8bHI· †¤X ™‹c!°BD>Qb ôÝϸˆ~‰>pšS£‡îãˆÑ œ{Ú€Ú*ŒµOÖ<ìO·36ÒD¥ ãÏk1"›Bi˜oš§ÄX¿òor‚ÿG P8*N™2E7×>ÁWyÕÚÆÔî™p pÅA‰µZ~ùå3#:Â92þÇ{,Õªý4âCàÇØ±øÆf#2 C _„56†ÒuCØ¢Šx¾?üðÃOÞ`J~ísçªgQ0Rx«á Dç À .f,‹a Ûnõ÷4çí±ƒ˜&¼¢Ô@þ\_(MæÂü º?<-«=BÍ ã勹 ó…Q…p"BPÂC`¦ý„m§¿÷gh &åsÅSf²SˆÚà‡_ÖZv U˜g˜â A />¼cÊ„gîû²G{€± “iÓÄ3•tcgžy¦8â”…CÏYMs…ÌŒ17Í×"·Q(‹9D(à4G:®´Ñ+ë¼¾ncÝÃë@ÛaDJ¤‰kD.1.ñ±Ûn»I *Ž%Ц^Ú(Òv‘Šš¹…O‡q‚þ0½ôÒK‚¦ÊÚ¡Q#<7ë;¸éñ|‡@~ ããGa8 ïÙhÿ 0ÃG„‹bC2 ® pª’,Í…G#ôõäí#–n†W…|Ú Ô…íg}‡»îºëÜØ±ckEÓa†ðøQ¯<I1…ÇGJgPÚ“' ‡ô6R•„˜¤÷7û»?k4‡q„ÁL_ÍŽ§LÇkš+” éŒÊ‹Ï–²¥¸mЉ"Pa¤ÙrË-»E•mEÔð‘ö΋}<ßc6| Àó|&·õÌ™3Åy vL«8¾?ü·°9iZòv܈Ox(îoøøPÍwËøtð2xAoµÕVb\&ÝU™ ̾…&QÄÔO"½Ë-·Ü¢S´Ï>"®Z󣬯P!εÎ;¬!+j­ŽÅø‘EìÓ4Sºy‡ÚѤNÒôIzL½O!ªÙ â=‹¾zâ£ðGÙOÄy³„#Î[-Ñìù\§2]Oçƒ#Ï<¥feÀzFÚã}‚,‘É0|àT¨Ñ^ÈÕšKÇÐÓ'ÏkÞWJ¡\«ÛZù‰,µÙf›õºI®9 Bc"kx¿@üÎ2˜ÈÎ:ÿÀ™:3ÔÑ”WuíÕf@C#†(žF†@èëV…Ù C RÀi$Ã[¢‘B¥ ÇÃ*ƒ‘D(éíáo xX,å=³þ`BIׂ„=Þ%xFàÙ“îo <ñzÓ?ÌL³ÄÜõ¼,ãNoÛ Ûéí9éãP´ÃØRˆO a…°\¼úÀI=_t³Ÿ½]#Ö¢S šƒ©†!#ðXš«f¯²øŽ?ñÄ%u¹ªë ö1AŠ”(0úõ¹Ó› ÏpŠJBe3|h¤ÏùX‰ô$Õù(n…ÔðÿÓ©„²O œãA3¡äÃCšgéz429æ1§Çh…ÎÓ¨ôÿwhü€ÖÈ"Ê@e&JâÁ«¿!ÿ鵟³Y!+á!߈pRË’ÿt2"rˆˆPÂh7kÖ¬Z1ó°}ð&‚D£áÃ}=}g¼"=z:¿Ùý\3Zô¼Ùs{:¼0±–È%ZÇHÄü4ÍØ÷ÇÈÓÓtˆ+†‰žÃÂãcV$Œ¶ÝèSÓK¡ÏP~\š5Ö¡Ä:…FÚ#™ˆ£É“'K}–Fci´ã ™"ôšO²Fü‘éÂȈ3|ľB6>C Ã )ƈ=1%0¡0öxÜ dË"˜ÏFQ!´AmŠ÷ß_˜XÙôi­((2)0Ax2Èà-„çÐe—]Ö%¤œH’Ð5>¶ÁÁ*CÍ9Æ óFhÔkÆ.‹B¬È1 ÓöŸÂó³Æc8~üxIýűV/Ö‘"ƒ|'eöÂözû½™5B`Â#,'NœX+XßÛ¾Ê~ÜwÞ)BÌ)Þh ‡eŸkÕÇOŠ+¢Ë¸_)”X†W¬ xðãÑ¶ë®»Ö d–u½4 ‘ç)……ËD<×!}¯Æ8vMw¥Å?ccÕÇd†ÿxåÂkÀç„ÞÏ1®=ü'N7DûY‡óIÙˆ9X¡óö¬Z™>T!Ž È5R˜§¦sB‘Ž,—E(ÚµxwÖ~øeòiÙ/üŒ¨5A´ ®aÒ)áŠÜ„¼IŠOž#²ÏV Ñóbû䙇3_#b~8V‘^ ,š! 8¤A8Æð®[ç -È-‚Œ`«µ˜÷zãÄ1<7¡ÐÀtÙå+ÏV ]ò?²dmŽWÇG Îè_SúáŒRÏÀϯ=í‹T ¤åV‚ÞkC)G%ozL3ŸŒF¢›Ãë>üÎ=ÂÚ¥k±4Ókä…€>òBÚú1 ¦€‘"½z¦uÔQ]ŒY †Ñ õŒ(á`pB¢ž‡*„ÿ?{çmGUýÿñ·týPd‰B@@$ „P Bh ,@AJh¡!$?šJ‘"]$tB•JÀ ½7é‹z“Ž€k)â_—óߟ {8wÞÜöÞ-3s÷^ë½;wæœ3ç|gîÌî74„í(F†¢ ¦mÖ¬YÊØ’ß”}¤A0£L¡Ï„ꈠ l–0˜¡‡çZÞYäH5o öÐ ž†æ0MÖÔ¨QÊŒ1ŽaB¾ucØÂ¾y`²BJC``‰ )É«¶ÝŸk„°„!ØõZAsÃÑÒ\íPèTLxf…)®ÈŽ,ËëÊÈ£1˜Ôw¤d):Q³Z|ñÅû¤ËÈûÚÌðaïÕ<Î×Õ/¼ðB§Xú9¡œƒ÷pÄü K|¯¾új&¤ åäJ4Þ ð¯¤»*"±/tÞž+WDã–je6‘®µ˜…Êe“qPR_ýõYÍÔ8˜6f☢B®¡`t¡p&j¹ùç) y^˜Q9ù2&µ9¨kQDBöCL8 /bèYgu”ÇK·©ö¬IÍ!âÈcõ+àQvÙe—Ì®ð-–B:Ý€cV³…{%-w¦ÛóC•Éç¬Ã÷M5b®6Oäs ÓĽc÷@xŒºflcn*0.XÔFRýeµ6¦L™Rqƒ×"²é’K.éSÍj‰Tt¬ñÝ¥ #"Š´qü¦ÒıË.»Lïy"tÓF™t{ÿîä7|äá*øE†#Ë+8ðÐ'•”yœ „'ܲž¢å¶)vPôS`ÃŒœtÒI}¼]a’8s‚`>ÒÆöoµÕVÊò’çÅÃ{ÿý÷+s@>ò¬—#Êæ,,ð´ H„‡ ㇹ7õ€üc Æó 1ÐÁ? ©}ðÁÁž/=¿¶þk¯½¶> íü¬;%kÏŠ`yÌb”“’ÔŒD\¯j÷AˆK®F”g½Xмa–)¶ˆ1ÊÓ\…w`ñ¶=ôÐÂ¥¸eÒjX>ϦFž‡y¿:E­ï®ö~̳áƒw1)† Ow¥0tüŸ>¾ŒøÀ“þÞëÅ_ìøuhæ„(­àyß“nG¢XSèüÀTÌñZ†‡sj y2~p­í}”µ:ø×Í7ß<‰¶"š)a‘î‡Ì@(YÞ#ý;@–AJSèýO”:‘ëÈ9!ñÀ¡ 6Jaä?Ú Gþã^=ûì³Ã.ºÍ¼ª§A=,8nŽp}oÃóGJ„<^È€!±fö‡Æ£fy;ŒŠpŠODÎ' ÕŒ[µpŠ4ç›ShAOÀ¸`RÆìÃø`÷!:"ã³dXdÖÝvÛ-2¼×’²ÁÜpÔ ‰ñà:ê(Ý ¾«®ºª:)š¡µqÿ<ñÄaWÅçÆ4aàæ>…è›6Ø`€ÁA£[-ÂÀϵ0â>ÃqÂð˜e]ïkäñÚŽ¥ÐrkORe4‰<×g òòK(²\ˆ\ÊÈ T1"¿ÍcŽ9FÛ!»!@ÈtÈvÖ™SR„ªü!†“>c#K"Ÿ@Èuá¹ÙFÞ»9l\ΉL…k²¹Ú˜ð=ðmÖOû‰<‚¼fûÅ`KäHr¾p}ÈÈ4k­µVÍ?‰D‰×\s͹ Ç1Òƒ_ýùy„X„k‚‡ƒ@ÌóYŠñmÞÈÕÈmõ¡½8/~u†ìîÁpÆcéwŽ(õãGyDÏàkíƒëƒ móGdM£ZÓ~Z I›‡(ücqŒ¥ž[,X=¯™ß0fŒCÚp_Ãkñ›B ÑÉø`#‘"tSBæF–·±ÅØßrË-*‹BÅ1ÚHD¬Þ¯œ3¼¥†f,ÆÕ? Øyç“1é·Â +ÄbŒÁB®°sJz8ÅŒþ\ßp¾Ü_|±ž…dÍHú!_n½õÖ:žÿsòŽM'GÀp:†@hø°n½Oñ~H˜R›( %/cú˜š‚ã0<0>õÆåxhø ï©§ž‹§IݾRŒÒŠþZç!ë¦ ˆ)¬ŒˆMhSgë´6µ>C£‹(mø¨Õ¦È˜uúó==ÇjýC,Å1ËÖžuN;ÆœæN"X”y¥o¯‘„R«‘Iréê½Ôkë/Ãz\%Ú-Ï4–$Ò¬0Ëây‡Êïa6|¶f5¹¤‘Ë8šï]{ï½·^ñ\ÌõDÅûSç‰Ò*|'åzÒ%™|Ï~·8;ô2ñ¼•´£jH(‚¡S¼§cIÅ¢×È”\E»†¼+¤6‚Þƒ(%ò«hKÈý|ùwÃøaÊñÿ¯µm†„4 µ”úiEt­ñ‘±ìƒ<‡ Y«=Ç‘EŒxNà\×l?Ûaû8¼AáúÂ6õ¶C£C8F³†~ƒÈ”µÎΗ9›‘!œû«‘µ·sp-Ò|bhø°vÕ>yVÀã„T ck'é+ŒÕÆg?Ιc]õ³™û ƒ×%$ ;eQk›“>¸W¥ÆGC}¬oht‘TÕ}ÃcüFÓ†#üÄÇ;ÇÉ(žêJ~½NŽ€#Ð9%&´´QÜôÆoÔðIrW sUÑ%ƒãaˆ­Dh29B9_Hâ9¦!µ„Lg‘xOèyçŸþ¬Ãš““≖g.Â(kx¬0Éþpƒ°[¢Ås0Ù-Ìm$é»Òµ9Xé„‘«™Kž\¡„s‹ÇG’®+9Q°A±xñ” ö|¹)Æ#íÏœB¬—[n¹è±Ç«¢M\ Z,Lurnp$ÔW–>çb®`ȸNK#[{=\¹FG}´¦Òb-„kVÜkD¸5ùj…9ŽÆŽ[qŸõE^o˜âJí>Ï´<¯M¢\Ñ4…"¬%χ<ϹÞÜë!W›ñ|,Ù3Yï\Oê<¿ÅcRS_æz²%›)fDˆÕU <¸d«kn9܃¤]ÅhEZ—æFé\kx±Í6ÛLybqJŠBwn­9¼´:o –ÕFA¾ ~Æ©À}#FZ#¦V=Ájcµz?ןß©ÎH©”&RôPWâwj©yùNº+Ò½I¤_¢éë¨kˆœ™&ä9dHR!«dõ©‡,bDz vÚIS)Û¾ô')˜OØYÔŠeÓžùÙ;:\_z¬ZßYC3c '“ZÚÈäk®2%)šlù䊴SÖ7œCØ'½-†Šä:p?‚y59š¾¤d’莤îK8r<çäÉ“ÃÝQ-Œ­!µX~ÿûßkm¤¬µZ;®!©°%úÏvõùDÞ#yŸý¡)‡)HÞ«4dÝ ·º'agäóI“&UÔ6_þF‰8lžl3~ÓÈéa*+k€î$¬—îÖn°¼÷ùíq}³ˆk^‚ß‘ÉîYí|Ÿ#'¾u&Oò¹8Ž€#ÐJxÄ!°BÆLÁD>\‹Á„b IHh/ž(ÅÆ`>)ÈKÞQ˜´ZD¾MfòbRFNÒD0Ê0´YD~S”ÓÌá£цq1 ˆŒ6ƒ¹Ç˜CU$ÅŒæI/šè 18°ñæÐÜœŒ)6Z̬ÚülÜÆ€›ZDŽQ+ŒsÄ\±¢ÇY?ëFp0¦™càÎÉ®‘„éF(Y1Á˜‘S¦¶×HÒ\hÁ@ŒkäÉqï5,ŠºÞ{î¹G!ž%<«ÈK]ë‘§ub @q‘ଳÎÒz@eÈéÍó…g.9•ë=ótM˜ u:è hýõ×׺Qy›_8”.â ýîw¿Ó"²á1ßn(f(XŠ’‡â¨½LðMW^ye´óÎ;kÞxŠçàPÂ’›þvJª(nÞçoóƒÇ©>^ÒiÝ;A^å;÷8÷;…ª¹çͨК³tw“™søC–°F d d£4qÿaxçD6Aþ[xá…“âÏéöö<‘?à¨À½K!t .¡ŒcíùD£sƒOªÖ.ìÓÉmæG Þȵ(îkɵÎ1yFÝ%uSpžƒ¿ ü0bQãÅÅ·ß~û2 ˜!㡬g»5Š1×±‘µqáZ ?aCáŸEáý(ÑÏaî+>Ñ1 7§ é±X+˜H 5Õ à¨È=WwÆÁ‡tnÏC¹—ß5÷#׎û8ĉsR/^ù"}ï!§Kº/½öà€Ã"õæ”^›wº@¶kr·gåçwG Ÿàá†B‡( ŠàÁÀ§…xƒÀŒBL¯öò†ùJ3`õ¦…¢€?”ÍŒH#£3Ã_ Ʀ¦Ùuq¾þà³·üòËW.dzŒNth—¬9¡ðÇ`-yâ«2ªU'U‚0î3fÌPfvË-·¬z—`©¥]‚äRÖû¡Iò«'fúY–çÅ_rÉ%*„!¸•éÄûâÝQ4£ó6oƼG|0×u×]W (E9äv9u”5Ф^'~ãxÎòN…¿äwc¿¡¼bO‹2¯tø`øÝP –×y§ç¯j…Îñ ÆûXòÉ«"0ÝÖ¿÷xm‹üÀøa‘E5~ œ?~|ôÔSO©²šß€9¾J8-`ô€§â÷EÜÈsD6CàYKîÉ ù®š,”Õ¾Óû˜Ÿ)¼[ynœzx¿C\£z²)Ïaxb® Ff¢ùÅØÆÆàÚ_BÖÆ™¯Ú½Um\Þ7D¨TËJQ­Ž8Öª÷9ÎYÄ9kÝ{+btsÖZ}_o#PÝ,ÚÛ¸øêG  àƒÓ!98UP —òøãGR¤K=uÙ#WDåU¸&ßþÒg!¬ÁLK] w‡‰í5zðÁÕû‡{{ÓM7ícüë5<ЏÞ"§¸ÂƒŒ¼ÈvÝu׺^nEº>fø %_É”¶E0|X*’‡~Xï¥"â]Ä9»áã뫆² eÊLžkEˆø@8JR  ,UC 使Þ!Õ)0œ:ƒÀñQ4¤9Áð—xÞgܸqú¹âŠ+Š0åªsÄXKŠ>ÒµÏÞ<Ä«vðýB mü€Ùn»í÷~ Ø¥NDiœtÒIzvÒm¸á†švsß}÷Õ(BRÙï¯ü1cÆti¦½wZ ðP8e­qþùç+<¯ˆðtrG ]¸á£]Èú¸Ž€#ÐðÎÃÃÆÖˆÜµ0Wäà„é‚ÈLhw­ÚÖ¿èŸx7!°—H DRîêz4]&lð²çžGIP¦CeºFµÖRôW¬“ä«;v¬¦æ+’Ѧֵá˜)LŠjø(RÄʵÖZK/‰+;ëÝ™­;î†J,á)ŠTàœÙc¬Ùf›m’üøÔ(*Áâ…Î;sõBã¸?ýôÓ‘=:3ƒŸ…:8\P¢¾ïmÒ‡ïj{Ù©s ƒÃ㆔.>c§6«ÑB!òFÈØÈÚNŽ€#_¼¸y~¯ÏÌpˆ^%—^zi4kÖ,UÝA¡o"@ÊT´¯L4CèENQ÷2y_§×N<<‰ˆü)R=„ô:ò|ƤyCX °<µNœŠƒuiþð‡?hÂG}4Z|ñÅ íÁóvÍ5×Ô+x鯶Új¥I'ˆhÑEÕ›‰ÈÁ"F ¢È¢ÊÜ"Ä­ûÊ+¯‘ªÒ©ý,¸à‚Ñ{ï½¹åÞБq©/AD)^É·Þzkû/B Î@š+ÒÅñ›?ðÀ££>º£vgø/tÞ9ìQ4ãHôÁD£Fê܉[x&îÞÓD<Ý+Ŧ! ‚#FŒˆ6ß|óºõ$´ƒÿk9¤¸âš`À Å×cU-¡‹ç< ÐD²ç‰0ÈP[™‹¨Ú¢:Æä SŸ‹#ÐjÜðÑjD}©éFwâ¢ø$GÀpG ãxª«ŽCî'tGÀpÚƒž(›=ÍU{ðmç¨éW¤))ZÔÞ•ä`çþ›0aBé¢Ë¬°9E¥ÐpP„:`%žžaš’¢âŸ÷y£ÔÇèáY멱`饗V\>ûì³èí·ß.,¼?(âL”/iXŠþûa^è¼·žOÒpGÀÈnøÈÕåðÉ8Ž€#à8ýG¯T”™¤r#%9šŠÀ¡‡ªaòsÏ=wtê©§2R‡ZJpÈMŠœ¢nêÝ)fø(rƒ¹æš+Yf DzXÑÓ¢+nàs¼aùü‰j*S´Ö@ §F¼W1ÀYŸŒÙ‰¾Ì{ÞyçÕg1ÑE/rfn½Ðy'î?‡#à8Ž€#PÜðQžké+qGÀèq®ºêªǦ›nZHÅy¯^>R\]tÑEzíN<ñDõ´.ZAð/¾øBS\qÿ?>šcŽ9Jw9Ë`ø Ç9©Œ ">˜'u  ;ï¼S?ý_û0ÇG{TblµÃ0|2ª(Äï}Ûm·Õ(<ê±RdòBçE¾z>wGÀpG ;¸á£;¸ûYGÀp–"@Í{¥€#ùÈ·Øb -âØÒø`mA  )®fÚ´iѻᆱ^âÛo¿}éÒ\‘¾‹Â•P‘#>˜¿¥»¢ÆGÈ /¾ø¢«-œ‹:G7|d_¹ÿùŸÿ‰–Yf™BE|° §^`"Ra^}õÕÙ ,Ð^ ·Ç{¬p‰¾™¸—~ö³Ÿé-åé®ÚûËrÃG6¾føøïÿ½òÊ+Y™Ý2{Iw…á£ÍÌ™3£Ù³gço’MÎÈ 7 ˜7wGÀpz7|ôðÅ÷¥;Ž€#à”7ß|3zôÑGU±ái®ŠqMË’â ´Ï9çöØ`ƒ ¢%–X""-LÙÈ EOsÅu)¢áÃÒ]Ýwß}e»µrµ7|d_ K.¹¤F|e@Úµ¢Ïc¢U†^š¨°ç9æ…΋rú<GÀpî!P>É´{Xú™GÀp® @´ix†-¿üò¥TÀ|Ýu×Uèï¿ÿþ$2¡è×"Oó7ÇG{d_•0âgƒ¢‘¥»"-æÍ7ß}öÙgE[Bæ|­Ð9õ¥x|ðÁ™í|§#à8Ž€#àô&nøèÍëî«vGÀ(¤%™1c†zpzQóü_PR\]xá…z½(ÊŠ‚Õ"é^Î?ÿ|]Ë®»îÍ5×\E\FCs¶4WË.»l„ò³èTTÃÇšk®©†ÝO>ù$züñÇ‹~r77|Ô¾$føà½KX‘jä°2jb¬½öÚÑ ,ýýïH‘Yâ™vâ‰'j­³ë®»®4©¼Êr}|Ž€#à8Ž@7pÃG7Ñ÷s;Ž€#à8@àÁŒÈËŽBf³Í6ó4WÀ²Ý]Ó)®ÆWèëuã7F¯¾úª*Ó0|àu[V²ˆ2¤¹â±¸9óþþ÷¿ >œMWl* ­ýç†Úx’ꊨJžu~‹õAMŒm¶Ù¦T鮸jVè|ÓM7þùÏFx ®±öõ£Ž€#à8Ž€#Ð |³éktG  à¡÷é§ŸªÀ]m=¸žo¾ùT±UÍ“ÜÆA8üñÍ1ÇÕ†+äþ÷ß?ú׿þ¥õÖ‡çæë¯¿ž¤‡²ÜæÕ°Ë VÔ/Îþð‡…È®í˜O™R\EÍùmµÕV…§‹ò›éϵµˆ²>ŠñÁµ£ÎÇ£>ª†OiÓŸ»¹z7|TÇÆŽ`ôXrÉ%£—_~9zþùç£#FØ¡B|’î ÃigΜÍž=;:th!æ^o’u~÷»ßEwÜq‡^›É“'Gû�n:ùÎ;ïDÿùÏô¯Ñt£ÔW‚Ÿ§ß /Ü6ÇæÇ¹HkF8xbŒDFÿðã)S¦èû|þùçöØc~½Ï1¾÷Þ{º&?ëâœsΩrJ8—¬¶¾ÏpGÀhñÑ } GÀp:€ÀÔ©S£å—_>ZtÑE«þ!ã‹póÄOdIlÚ>üðÃu…”,­_§@ˆChKÓú믯^™õÖG_ð$/´azøá‡«˜3ßÉÓ}ýõ×kjOs•Ç+ôõœÊ”âŠU=ýôÓÑF(:&L˜Ð6¥Í×vw 'T6ÃGÑŠ›s ¬Îï. ýN­CÀ õ±DiKÊ;ž}ö\¨ß+?-˜ÿÒK/­‘Sü~®¸âŠüLn€3ÁøN ¦8 úâ‹/¢“O>9zûí·8jíî¤;Ãp¹ÜrËEüãkw£DÒ–>K-µT´ÓN;ÕíÓßœ‹´šœk­µÖŠÞzë­d(®?‘›8Íüæ7¿‰Ž8âˆè÷¿ÿ}&_tª±ñî»ïFË,³LÂO_þ\d‘E¢yç7ÂPµêª«F¯½öZQý#à8Ž€#0pÜð1p }GÀp:‚Eõª&ÿôÊ+¯vÚišË9œ`3ã„ýò²Á‚Ú¤w¢@tZ°ÅûÜòðãݘEfô Uè˜cމŽ>úh3«OÞöáÕøÑGiÄÎFmTè´Iyö•ó)[Š+°9묳Ô;tõÕW† –üÞZ‰[^Æ"•œ.›á£h5 ¸'P”áuÿùçŸG<ð@^n“Âσè-¢%!Þ¯NÙX¢>X•9Gñ=}úôL™ìÕç/φ½÷Þ[Z:Q蜈iøFˆßÐñÇ_$¢­ÍòÿØc­Û§¿ àù³þqâĉ}aëñÛ€ÿn”ˆv!z>Âk65Šš·sGÀèý{³õçLÞÇpG eœtÒIÑ /¼½øâ‹úGº&þ(îhùÛ9aþ?P¾QØo³5ÖXCS69Ô<4rØúê}f=Às¿ýö+TfKs5zôhò©·n?ÞÊ–âêƒ>ˆ®½öZ4ê…hKsE< #à8íG£)š† ¢3üaè@1‰g²ymýö·¿UaÌ”¤ !õÞ² .¸`û'›£3d=Î<óLM×óÝï~7G3­=–·Þz«§¹ª S×–-Å€žþùª !]Ř1cJid†Òâ•…Ì𢮖’.¯ëµtWeSØvoSxZ«nÎ%Ïç6ü5Lqœç9§çF©†x~—-ÝkEÙ¿ÞzëE(t–¤—5‡#ð¼á†Ò'߉ö8î¸ãô;Ñ)¤˜j'a(Æ0óä“OFÓ¦MKäÎi2†0RTµ’Æ „±Ådû$-Q{¤!Ã0balŸ:Ž€#à8­BàëêV­ÑÇqGÀh; &´¤O†0õÌ3Ϩ!/NèôÓO&Mš”D |ÑŸ0}3„ã XÇ+ á˜4/RPˆ@¤x€ªEŠ7þ¶ÛnSoBêPÿx…V¨YDÜC=ýùÏÖt^Ÿ|ò‰F¤ àBp3blþX?Dªwü!´ÕJÆzQ^†é­.¸à‚hÛm·­8‡Ë>é‡ò“P| EÿøÇ?¢UVY%Zh¡…ú`ÇÜX s®V4ž¹ƒ/ãÖjgçÏú$/3çBà£j×"«¯ïë Ü“û쳦ä!Ù¸qã o$ •EPQîŒ?¾ê=Þ„;s3|”%ͨ™’Žmž¡sÍ5›…! œC(óømþyÚ 8P8UGovÞ½<á'šIïS}äαtW×\sMtóÍ7+ŸGêв¼UXèüŒ3Έ~ýë_·eyœ‹Èê]vÙEk‹|ðÁÊWf ÞÛÞ)ðê{î¹gE3øBRPáØÂõà£n ¼k¯N{xtîKÚóަþ¼ÿÈ‘#µÞm8/màKù„O…φ8Î{€º(lc܃Ïå|á»"œ(ýéCúdµc?çÊ"úÁOÃK“¦™3gjM.˜'Ñ+&“TëK¿ûî»/ºýöÛµ ×ég?ûY´Új«ebI#ðFö1ã×hĈjHc;$xyÞ?¬\ÓÇ­-cžévàHAx¢€À1‰¢Ž㦉öðþ£}ÖõN÷ñ#à8‚€¼”œGÀp €À¥—^ÿà? E,‚XŒ 5gýØcÅ’šEÛÓGRaiûpa¶ûŒ#B[,F„¤}ùA¼Ç{$Ǥ aÅù…!wÝu×X„‹>}é/¡í±xHVôá‹Ôªˆç›o¾Ì>ô³9ŠÁ%¡'³x0Ç’b@ÇÞpà cñ`Óv†sÅe,ÂBÒÿòË/Eì3Ÿp‡qŽEÉ‘ô1,øäœO=õT̼ W_}5cHÒV„Ñp¨d[RSÅ"Xj»‹/¾8¡(9ÖèÆØ±cc1vÄ;ï¼s,¹îíæí:ˆ€=bQ.Å¢ ‹_z饘{°ètÉ%—èï[ÍÉï­èkª7Q@èoUŒ¤õšæ¸(Ž’ç”(n 3o›¨(‡ôùËsXÒ®Ùnÿ¼÷Á“w‹SmÄq!–¨ÛX”˜ñ)§œR»qŽŠâ[ùx6‰äËñLû75žsGy¤Þ×ðÂÆ#öo´Ú½$Ò:y¦ŠB:£@ŸðìW^y¥¶ƒ@,é¥*Úˆ=Þ`ƒ ’qB~S”걯h/JïXÒ´j{øÑW^y%éËN=õT‡Ô¯Óýð§ð©ï¼óN,î“¶áyà‘‹}b˜ˆ%[Å9ùÏ olýàË¡p\öo¬3þqÿí¾ûîÉܤ^_E+Ö÷§?ý)9Oæ)Q*ñÇ\ч/à ï¶· ‹a£¢s•”ª} Oëĵ2ìáÅÅc‡*>¹/ÄP¯ãŠ¡&¾êª«’ã’â+9ÎíôùèÄ=e×RÊ*æ›Õ>9‘o8Ž€#àÄ}MÉò´urGÀ(>+­´R…ÞYx …„×_HÔ‹ Þ iºâŠ+¢óÎ;/óã.ºè¢ÑE]¤žeé¾|Ç#n‹-¶ˆ>üðÃä0‘)„á‡ûðž #ÖYgõêU«õÁ8xœ¥#=DøÐ¹à}Uˆª šo,#/,ð$”Ö¬YŠ+ëç'XšÀ o<²ôÐÆoÜt€zšª <È‹œ¾†ésú÷Î#p¤’»ð Õ{ð„N5×¥Õ@IDATˆ‹u5ÏÇÎÏ®ÿgä÷‡ávÛm§Ñ`ý©=‰X£•N¶Lx¦Ú³çXÑdžÍ§»jÍÕ{ã7t žUNµÀÛšÔ@¼ÇŸþùÚs|ø­·ÞZßSðwe#žs*tNq¢ <üI+•&¢.,ÍÏ_1d$MH›Fä‘YÄ{—´µÛl³MÖa¾h¤Vü"÷mµmD2~øázæDÝÀ4!üñÔÝ¢p¯¨×‘n[ë;ãdáDqèÑ´š?ÿùÏ“!øÝÁƒCðÒD[ÁƒSÄÞˆw6ïÒ…ýØGD «Ôॉ Af2‚—#¹ˆ²8ðÀ#d$ˆsøwˆþàÉ5Jë°w}H¿‰#šÖ ³cé~œïC‰vÛm·ô!ý.F¢Šùf6òŽ€#à8 nøH ð GÀpʅ̾xu%ŠuñiÃG¸bý„“#8@¡áÙIçž{®¦vÿa_ÒøP Ðè‘GQa@ 4d\<¬ôLþý÷ߟ'NT!„ƒ#a‡¡G€8öØc!G"M"þHdb4/7€²ê•`P!L"¤¶vŠ*¢4«–θáÜèƒpÅ~„µ0 a‰9£Ø&m–"è€C/¹Äè!ž}‰ò1lSo{ÆŒj\B(CÐF 蔸?Ë–â tï½÷^5ò±Ò Öï‡6e žü†ùmó,-™©ˆ†®ƒ¥»ºóÎ;ËtYº¶7|4=ï\žE7|À«À»±x?S7ŽDþ[òœCy_{Ýu×%JèVÏ#Òa‡¦ÃÂÇŠg~ŸS„i®À^¢«´ <¥)ÑÙÁœ%zBSHñþ‘È`m‡‚ý¦›nÒTLº#ã}1\ÀgO˜0!£E¤égá§Ÿ}öÙä¸Dh(FÔ$5'Ä|áÙáãC‚>묳tç#ÅW!ƒT#Œ*-¥Ú`h },¯_¿×^{éwŒ+½¢ó#­rç…Òpƒ·†¸&…®FæÌ1{o ¯lµÕVÚŽý8XAð5ìGal®%² Ä=DzERòBÌT]XQ71$®¥5c.œ›urn~wFðò8X3)±¨;1&ièH³[¹ÞÕúú~GÀpz zqGÀ(aŠ*KáToæYiŸªChº¼õÏÒK…ã§SRYª+BÍ »¶¾¶¿Z_baò5 ÞÎ)Ì{f;.‚A,U:¤E±í'\_„–ðTq¸f›SúS¼­*ú¤¿„)»-å`ºIEê,BäEy‹ “ˆóz.ÂVE?ñ®ÔU—Ⱥ©*:õEŠvjª,R)‰`”ÕÄ÷u2¦¸NQè½Kª6QÔtáΚtxüV%ÇzçNÚ¡3‰w°®-L½Ñ¡S·ä4¢¤MÞ9¤ q–Ò1f`£–³·( c1¸éýGÚQˆv¡b¨W^yåX¾±Dvµ&.ÊäX<í5=ÒŠ+®‹R»Vó~#•«ñšð!ßÈ=bi®Ä  ©Ò8ül:E¼dHa_Ò¤ò†X‡¥[â¼ðž¤² ‰9Xz$R]Á£ÁÓÔ°ðÍFðÔðÖK§»bn–æŠuBÖ(ì'ŠþX¢5bQðWüI”rŒ `8e#LEz_d–4‘¶ ¹þÈÈ!ðÃöÎNÏÍú‹797r÷¿õ£DfÊ*R¦ñž´9Ó ÷§1äx¸K3~aJ-ÆJ_oÒ×’Z“óñ»„÷‚ÂkÉ1Sú?GÀpšT7ÅËÕÉpG 7ÀI˜o],^I¤qÀ3)$¢$ðZJIx)AxFeE^Ðwþùç×4Q2Ä‹*Lý# }tÎ9ç$Þ_v<»ÇÕ¼ÁìŸô“·\¸«¡í_üâéµÂNŒ‡—ÞVxSí´ÓN™Ås‰ˆaMa€ç–y¹áaÆüŒðb#^{£ÖÖÚÔû¤`%Ñ4\+OsU­Î¿§¤)®Ä˜ÝvÛmzïâEÚ ÑÜ=æ­Y¦4Wö«À‹ ŸQv¬ŸK.¹¤™f®V¼¶óÎãñn†€<ÕUý+DÄ÷< ¼Œ¥Ã«ß3-ˆ< RïôéÓ§'|`þfÚÿÁ·RèœOR“Qè¼Ä{qçwÖ¡Á3Lã?ii®H‹E Lˆ("Q R!ÝrË-}øBxqR,ñ̆÷#]jšïåÜDš.¶Øb:V3ÿ+|ˆ±AÓ,1|ìÙgŸ GtŠ¥¹ Ób% ¾Ú`½RŸ#cOÅ2BXÌœµ‘&vèСÉ– þ¾‡vHŽÙ¼7<8„üN±vÃX ¹ ®Ö‡OÖÆ½À'ü:$ÖGj Fbp›ë6Ø>¼b?ü<ûÅh¨û¹ŽÜ[úè$…퀡0ͱ­[6ø¡ !‘º%i©Áa¼Y(kŠ+ "Õ¿q #GŽìcmœ¹Ò Ë-·\.æÓÊI 8B…W+ÇïÄX(‡ Ow50´1¨ÛûË a ¯"ÞÚªˆ.rx¬Í7ß\StR§Àµ¡PŒVðšµpÀÊóÁ§’ƨÕO÷«_ýJ‡…· Ó]ñþ´÷ ü¬¥H‚Ÿ³çmŽ<òHýn¼¦}âTÂÈ~¯ö)a[AÔYuÕUu(õ0ì|ÌÁÒ\Í9çœIZ¬¬óŸÎ=÷ÜöÞ±ö8‘Rò²Ë.Ó]ðÞöNb›Ô[†}"_ðwúé§k憆0%®£Ž µ3H]Kʪ‡æ·0dÈkZñ‰1ÂÒd1/ø=ˆñ0B\sKK…Á¹âYAº\ˆkŒÌ‘î‹”¾È¶6>Y©Ê ÚþlCœ§,'GÀpƨtçm¬·rGÀ(äV‚@e.|ºÖ¿Z;ô1 Å€g‘Þ`k­µVEñrïPø>øàƒ£ßüæ7} .žác…Vˆ$ÅF• ¸!¸l¿ýöZÐ<7m<“PÈ :¤¢X;E(‚Ž?þx=B)†3´ ÷ÇðqõÕW«!…"ñŒé”Èïç/‚>ù¨ñê,ñ{¡ð-¼=÷ܳ_÷mQq0EU#>L*ÓŠvPD]rÉ%‰"©hóÏË|ßøª°ù<óÌ£^çy™Wžç”ÈXøŸ">àç¨ÁF]”®<ëÍ ˜gü›ü…ΧNq¿£ü6e{³cUkÏ=aÊvxH¢ ø#’CÒÇj7”ëðo¦p‡¥ÆD4Ž6yˆ`C±Îó^þ^ÒbEEQÖ£gÜÿÈ Y„QHQ[gØl$%W´öÚkkQp0¢ ‘ƒ7¢N_XàÜög}"ĿŬs§ûÁ×Ðù(ŒØN·ƒŸ“t`Ї>0hÀïiÃïÆ"Nˆ>' lïZ«ƒ–<3 Œ#•øsrGÀh/nøh/¾>º#à8]CÀü6BëEN xÀÌCðøÊ"¼¿B£@V„„ˆj„`J¼®BÃb‡ÖŸHŽ‘â)+Ý•µËú$µJK€zè!Ö$?°6Ç뎒#8«»î#%UÚ6F¤È¸afnx„qR ø†i®ŽmNáXµ¶QÂ" q0.!x:å0ÅÞ(ÒÂ|Ì´ùYðÛÃ;åX/¥Wãwm^Áe6|„^¥ÍßÝí1J¢!ž³¤EĈíÔ<føà¹åÔðRð¤|î¹çë”ÓV–îjÆŒš2~>¦l]ê}D×^{­*±Í‹¿Uk…$ê—ã(Õ¥>…*½-Ç9Và ÍxR­M-}µ>Íî':š ܧvš¦ˆ2%}˜«Ù±á¤Æ”ŽÍ3ž–÷É áxð¹K-µTEôCxœ>_FŒ¡r<}˜J+l›µ]Ož±>8-…1“qx² 2Ã Æ dæA;®'F’,2ƒKÖ1öq."¼›•ªçûGÀèUªk¦z_·#à8%AàÌ3ÏLBãîjy “§ÖŒ„]¯´ÒJ™ä½±ÒPaœ`¬j–t{ûNžÚ#Ž8Bÿ%?‘<ð€ ¤`@9SËxcc…ŸB4ßQLKñòè£>RaŠÚ"Õ"JPl€GVÝ’ð<émŒ5Dа–ûî»O#NL¨ã\†uº_­ï¤¹BþéOªy}]ª…V玕9ŨçwžÞwüfðízæ™gt©üVQÒ”,â£È† Ö(ÅH•Bº7|ôï.uÃGó¸™áƒgdèeÞüHÝïòuuÖQ.3D–6éÚýUÔŸë\o½õÔðÿ ƒŠp†ieô,cõ‹qþ“O>9Úf›m’4Wµ <“y–5ËoÖ_yó-08ØóÔÒ]í¿ÿþj8b4 8–«ùÑ¿ìQf¤¾%‚¢"rÆ¢gªµ‡Ç‘§Œ{¬>Ÿß0rdzxk®å“O>©ÃòÛ§ˆF Òšé >kÖ¬$ªƒcGy¤5­øÄ€Ej,3œTô/Ž€#à8-EàZ:šæ8Ž€# ˆ ‹…ã¹eõ-²&ˆ‡’y>]ýõ¥nãp`)±ìø&›l’¤Ç z£šadë­·V"yi<°—]vY×Ã?œ¤ËÂ{ å>žf¡¬5o›C3ŸcÆŒQãŒEL`¤ÀÐnX/‚LÍž=[•nÌAÇ ´;vl"Lc€Bð±4WýIĵÁ“¹xš«¬«Ñ½}eMq¢7Ýt“¦¤@a„ᣞ¢¢{W¡õg6Ãé<ìyÐú³toDó@-²áôÌc;LØ=T‹yf7|4ÝÌðÁ»%ªåüo~¤|ô€ïBAAÚž²ë´BçDê´ºÐ9Ž6(»ñòçÞ@O ˆ÷'Ž/!a(±ô°ðÖ÷~Uÿ!lÃ6‘ä…]b‰%’zé6­þÖ¯àþ&z…÷òÜ…/Áƒct)4*X…É&a;Žá”ÿLÇI=š¦÷ß?"Rç.Œ}ðåöDx÷ÝwÓ]ô;Æ #Fi‡ªÍ6ÛLsÔQG%õGÀŠóá|…Ì!+!3eó\c5TÆ -›“#à8ŽÀÀpÃÇÀðóÞŽ€#àtŽñ'©—Ìó ¯"Sô‡mm3bPöc@p /6˜ñ4QìæÂ#ŒHŠ4ÁÜù@^_r#l H!$ðF§„}Imeó ÷Û6rÕp°6YŸ¤9½ê0L¨ÁÛ+L×uùå—g*5¶Új+¬˜?BQhø@Àµ[DÉL›6MñDF(nvÎx%R€¡«ÖµÌZ¯ïkaŠ«N8!\¢W †ñƒ'†<~ÍÞ·íA½3£ò „ʘæŠu•!âƒu˜áƒ4$Y 2Ú8ÕFÀ µñÉ: Ÿ@ÁlÞõD}”!ÝÕ¸qãt-3gÎŒpì(#ñkw¡s¢P~CÜðoš¹Wp| ^Ξa(Â'NœXÁKÒ…<†]" qj²z!á8íØ¶úÜë̈cÎT­&ã¡1Áo@È ðàiBÁ Èd° £+8ã³ÇG'+„%rePá5FʪШ‡!ç7¯-R—ì¶Ûn‰!…«(þCå–ið¸ä|(©£ÂsR;PH²9²°GÚ BHpPŒ2O¶Qx§ 4(ÂÓéÅž¸FÍ’5%žc ,°@…ÐÕìXÞ¾5 SÔòóÏ?×°(Êdâ·Á’ßÕ„ z*Úƒ;¤W E.nÎu š÷ï¶NÍ#à†æ1£|é€xF†ÊÔþÖÝ^ü†ð¾'UiÙ£>¸n{íµ—FOðÜhµG=|ÀèÑ£õ‚¢GYNTÊqþBwŒëV׃ç1|¸EéJ]hÎ9çT^<£]ÛðÛðÈð¹Á¹X|+ YÁääxp¾›¢ôÈ̃vÀ‹9ÁwÃÇ›¡~´%mN``ˆA†HŒ‘9ˆÀ°ˆÆFv±>ÈÈ-Ç{lÅõÛwß}uŒðòÉñÇîRCÌ¡‡Z±ìpDc¾M‚·µüñÇ:¯í·ß^‡Xèÿç8Ž€#Ð?ä¡îä8Ž€#PDˆÅ£)–§}ÃO<ñD,ByÅêÂqD±KdGr|à 7Œ…1oh|ñ D ‹‘§…#c(Qpèo_ŠcÂMÎR¼hu}’ʫɞùk.†y]‹¤-Ìßär>#ñ.Öw ï71öå|¶ùšžDzÆbðÖ÷À¯ýë|M®³Ç–ø”SNÑûA :±(‚û1J1ºÀ÷^wÝuúÜcB,Ž6-8ïLÞÆ7ŠL,Š÷ªçCGÒÖú¤?Å`‡Ï8®×I'¤ý$-U,Jô>ã‹q –úÚFœbqJÚ¼þúëº_Œ:×ä@°!†˜X ÉÜàµÅ´øzS¢Ìc1ži[xô´ìñuË/·Âöéq‘Ò¤¿sžaF\Wøþt»ð»›b16Yå©o½õÖš}è/Ñ!±8’%ýÒÈDáy˜[Á+ŠQ¦¢mØÏ¶‘CŒj]Kk㟎€#à8Ùxć¼]œGÀ(x3á=Vˆü ÔšpéW\±O¡><ðä‚Èá‹Ç™Eù ÷q 5ÆÄ ‰y¤‰}¤±" oº,£BtÜqÇUx¼ röÙgGxKU#ì´p`è)GaJ"Œ˜Ÿ­ƒý}aQ"Ö.ýɜµ†Q„¿³f<®²h•UV‰Þ‚ëC† É:¬ó!rÆæ‚Y5l2øj'‘/¤#R¼ðsê.eOq…—#Þ‘¤»ëÅh1¢j î²å–[®»7[›ÎÎ3 =yÛtª¶k©bHâÔx‹ˆ¨ðœvjø(¢$ÊñÁªá-ð~'Õ‘­eþ=Á—Y¡s¢(tN¤K«ž˜H#°µ(Û~Â·Š²_£ Âý¶M¤)ZÃ!ȵxgúrÂóCðÈðüi‚/EVÈ"Úo·ÝvÉ!Rv-“EéñëÉ+a½ ÞCçŸ~ò,‚ß§þ^Vš+ÎÍœ‘7Äñ¨‚¯æºŽ1B#6íΕùSpÞjxqŒký ŽbaÓŠm"Ô©EH±õjV?ÿùÏõ°E”dµ"fˆTGŽÈ"ä"½- mÂk™ÕÇ÷9Ž€#àTGàØCªö#Ž€#à8½ŠaßÂŒÜPÄ£Eé/M}à!¬œ´‘'„tc<°1út„¥Sˆ°v„?Ò‘‡™p„ð,âõ…q!‚óÔ²²Æhty•Q†"xÌ;ï¼f ZÈ|Í5×hx>iX† V‡¬ñH÷uÙe—Eo¼±~¦Ógeõñ}íC€W«­¶šætç÷@ý–Fî…öͨõ#SüU¼D5Í)¯PôQÔ##9Ã-ý^ÙÖOÍ¥Q’:kKžô"9ï1~ðläýQíQä5¶kî·ß~{ô³ŸýL¨¤Yqjx$œ0H=Jêx¢¢¼×;ìI4®¦Q2eJÑ—Tuþð¤C"•+Æ+ ¹Sµ}§ð<~öÙgõt<Ó¸·à;»A`?/ŽQE=)0;IüÎÞ{ï=}Æ#O`ˆ€ï¯EȤ¯å¹F[ jÉ"œ‹ß1ôç÷€ó)|ÛAà‹ÜÃ}ˆ /¹ð ×5hµc.>¦#à8eFà›e^œ¯ÍpG q¨W€á–[n©(þÍ(Ô÷@Âè—cµÈ¼¸$›!‘fs#$dEŸ4sÞFÛ"ô4+ø 4Iø¼=8Ïâ‹/^SàÊš F$®˜£\q…^JÝG¾m„p<% AŸ:.MëÏÆïüâ‹/VÃåøñãûU“¦õ³êìˆVßcùå—ïì‰;x63fñŒ):ááË{ %J¹uÖY§èKêØüQðAƒ=ÚCqhæŸE| ¼Äàfõ¿š#omá1¨GÄÑ¿(áÃhÛ¼Íw ó‡´BçGydDt1Q(ž»Ià½Ækts ɹqô˜:uª~ÇøÏÓiÂà‚ÌÁ_3„\A’°–_½þœ ^¿N÷ Q;y¹ÞX³ŸÃpn ðu~“nœÝÏé8Ž€#ð\$lœp”í„ÿ¡Äßl³Í’‚‹'N,­0lkîï'XAD'"ºòÊ+û€ç¹»$¡Ì©{Ü{ï½éшfš4i’* \ËDÓ§O×ß9LRÛÕóª,ÓÚm-fø èlYÉÒ€àéŒr«È„ÜGeNÏÓŽkä†þ£Ê³ÁT^¨,é®à10¢,Æ(Jº2ï·v:/2vÜÓ<H9Õðá˼$Ÿ»#à8Ž@"à†½ð¾lGÀpÒàífù‚©uAí ä|F j‘ô# Œ§\J#%F "¤ Â{’‚ëý2Z<øàƒ1²É&›ôËpÒw†¾§¿ Þ{ï½Õ«|£6R¯ØjQOý=GúýáÐû–¼ÞÝJ¯Ñm,ÿw/>Àº u>,÷º>šûõ Ø„{ćâÐì?¼ÊITÃëǸõÖ[«ÿŠ+®h’µ'úíÄOÔÈZ€ÊšÞ°Ñ Cz(ž§Á,ê‘Q8}89Ž€#à8EDÀ]G‹xÕ|ÎŽ€#à´R)ñq '¨"Œ´ çœsNŸ3Ñ&«¶GŸ†=¸å8i/B¢6†£þÐŽ;î¨Jh oRÜÜ©{”=ÅÈR÷aÖ¬Y 2i®z1ÚÃò‰B™ a‘[ äL/2Ys Ôò×Wäuµ{înø–îêÑGÕT -½-ÝÕé§ŸQ›löìÙM§"ÍÇJ› ~œSHãôü#qj¬wùZá°óøã' Ÿ%–X¢fa櫓o8Ž€#à89DÀ 9¼(>%GÀpº…À¡‡í»ï¾šßùÆoLÒ]¡Ä0B‘?„ §lHqÊ)§h^l¼&)nnQ4Ù=jï]yå•#þœº‹@˜âêÌ3ÏTïè²¥¸a (=6Ø`UtÔ*ÚÝ+Ò¾³Sd”Tf\ße–Y¦}'êòȵøãz—!âcÅWŒHßÅZ(vN”œS}ÜðQ£Z-0|ðœ(SÄÏ}ê)¬´ÒJZd›¨£>º …?†±g¿ýö+ü:Z±Š‡Sß'îkj(yŠ«V ëc8Ž€#àt oˆgj¥kj·fâçuGÀpG gà=¾Új«EÏ=÷\4zôèhÚ´i¥L;öúë¯GÆ Ótm7Üpƒ?zÑȉ’4_‹-¶XôꫯæìnlítPp‘ÖäöÛo¨!Tt"-ãµ×^«)é&Ož\ôå´}þ½0Ð# R׆”MNÍ!€b˜¨N~?ƒ ÒúHexnbüÅÈ¿ÿþûkÚSÞyœGÀpGÀ(^ã£hWÌçë8Ž€#à8C R\æ¹çž«^Dw9²g#»¬°9Ñme'+p^†ˆ®•¥»ºóÎ;Ë~éZ²¾7ß|3IÍè5>ú)Æ€¡C‡j„Ø_|½üòËý(g½¨_5vìØˆHÒžz휜] ŸŽ#à8Ž€#à4Œ€>†Ê:Ž€#à8Ž@/!¦¸š4iRiS\¡ø&Ò/ß=÷ܳ'k{Ø}m†2×÷°µšáãoû›í*ô§>HWöÁz-˜¼¥¹"cëPubžy?űüã—*Ý©þˆ`!Ê‘÷B/9Ïû}æósGÀpþ!à†þáæ½GÀpG Äâjï½÷Ž>ÿüóh£6жÝvÛ/Ø2Òe—]}üñǪèÚrË-ÕË·ŒëldM½hø(KÄž÷ÔY‚î¸ãŽF.wO·1ÇG{ ì6 &†Õù %TYÈŠœÿûßÿÖšŸ}öYY–æëpGÀpBÀ =t±}©Ž€#à8Ž€#н’âê¿ÿýotÞyç©Wï®»îÍ5×\TÂVÞzë-]Y/E|”ÅðÁ…[ýõõúyº+…¡æ?7|Ô„§áƒ¤»¢x™ œ³xj•E…1ñïÿ{tõÕW7Œ‰7tGÀpG /¸á#/WÂçá8Ž€#à8¹@ WR\öM7ݽòÊ+ªäÚm·Ýz:ÍÕ3Ï<£÷ßÿþïÿF‹/¾x.îÅvN‚=P™ –îŠß°SmÜðQŸF–ÕðÁú¿ýíoG[o½µ§»jôfðvŽ€#à8Ž€#;Üð‘»KârGÀpn!ÐK)®ÀøœsΉþõ¯i!Û…ZH‹ôv ûnŸ×Ò\á½·sÙÉj|”Éð±öÚkëe£p÷K/½TöK8 õ¹ác@ð%ÍðÇqôöÛoG¼CÊB¤»7nœF³Ìœ93š={vY–æëpGÀpAÀ =r¡}™Ž€#à8Ž€#P^IqD8<ðÀªÔš0aBOG{€‡>z!Íë5ÃGYŠ›³¦…^8¢Öä鮆ªÿÜðQš¦Pãƒ1ŒÿùϢ矾©þynlõKVZi%úÈó…ò¹9Ž€#à8Ž@UÜðQ?à8Ž€#à8½„@/¥¸âºž}öÙí±úê«GÆ ‹ð\îeêUÃG™">¸-ÝÕ]wÝÕË·s͵åõþûïk/n^ª†’oÉ%—,]oEÎÿßÿûÑôéÓu âGÀpGÀÈnøÈÁEð)8Ž€#à8Ž@wèµW|ðAtÍ5×Dÿþ÷¿#öøòÞ{î¹çtc¹å–ëîÍØ¡³[ÄGY ÷Ýw_Dú!§¾ ̰qÃG_|šÝc‘e+pßúÖ·4"¿üå/‘›½;¼½#à8Ž€#àt7|t}?·#à8Ž€#àä^Jqà^x¡æ¢_d‘E¢1cƨr+¢K“ 7ÿ§Ÿ~ªgïµTWe3|Œ92Bý׿þ5zòÉ'»tGåû´–æjžy找ûÝïæ{²˜Õù(£áãßøF4hРhôèÑžîª÷¢OÑpGÀp*pÃG%þÍpGÀpz ^KqEš›‹/¾X•XãÇæ˜cŽ»â}—ki®~ðƒD ,°@ß%Üó½ï}OWU6Ãך×ùPúü3ÇG{ô¦_;Ìðñßÿþ7²È±~ ”ÓN–îŠÁ›o¾9úì³Ïr:SŸ–#à8Ž€#à8•¸á£ÿæ8Ž€#à8=„)®öÙgŸèóÏ?WÖm·Ý¶ôÑW]uUôÎ;﨧÷öÛoßóE͹ÝÍðÑ+i®X³¥º*SqsÖy/q¨öß Õéß~3|>ŒÈ1ž¯e¢o~ó›ú›úáýý﮾úê2-Ï×â8Ž€#à8%Fà›%^›/ÍpG ç @£$ =D5¢ æ|óÍáLÊ…jDîéÿüç?:Ûe*ÔŒrœð&m”¾ÿýï+f´ë­·´/Ø,´ÐB5qltüþ¶c._|ñE„§1^¤Ý&R\½øâ‹ÑÜsÏvÚiÑw¾ónO©íçÿÃþ EÍwÚi§hÞyçmûùŠp‚gžyF§Ù+i®X¬>x—Ö]wÝèøã|ðAlÊó&O»á£µWÞ„w+ï¢"žþyýÞª³ÀqÍ(¢NÍ\°îÐð ¼o™[£}j úío;Új«­¢³Î:+ºâŠ+¢_üâIózç‚9ÿüó£þóŸ¼ÉÞ{ïÝo>>ïµ×^«É?Øšçšk®ˆ?§î#€Q#;ÑBð¢?úÑ<©pLîÁÿøÇ:ö€öGÀpJ…€>Ju9}1Ž€#à ©S§F|p’[¿Öì’®»îºh…VècÔ@àYc5" ¶¢Ì{öÙg£…^¸Öp¹<Æ: òÓ‡DZ¢ƒ:H áþzÛ(À/vNŒG(BLáY¯«³>› *ש›J‰0ÅÕ™gž©Æ˜ZƵVãÑñî¿ÿþè©§žÒS“æ EšÓ×½høÀðŒñ£LµV[m5UŒÉ…ñcíµ×öÛ<@%:4X ÐN­AÀ œ?ñÄjøXo½õZ20Šþ3fDãÆÓñxón¯õ®â]KÊ-‹`£uŒò¾µtW“'OŽfΜÍž=;:t¨Î þbÑEÕ9Á{Á‹A<[xàŠßsÙk¯½jÎ_;güc]/¼ðB²®Œ&}vñŽÛÿý£cŽ9¦_çì3 ïè8ðœp Ñïÿ{5 >òÈ#6~¤Ç„¿Yl±Å*æÇ=Ão¥Ö異ƒqGÀ(•š•Ò-Ïä8Ž€#gð®oT!¢cå•WV¯ü´‡r£cä <(Q<©BÚ„5£fp²>|â —'lò4—^LqÅ=qÎ9çh´Çl-±Ä}Œl´é5B±HÔÔ‹†Ö]¶:x§c ‡îºë.ýô_#à†¯±hÕïîe–YF•ýD|´ŠðŽ(ð¯¾újÍá‰9ï¼ó´  bô` 3쬸âŠ}ŠœW{·cx$²0MiçŽôñjß9x4CÔ´:î¸ãÜÈ× hmh˵kuDm­1yÆqœh§å—_¾ +ò!GÀpŠ‚@sœCQVåótGÀ('tR´ÑF%ŠXKMB.éc=V#Xž{¤KØwß}+ù¥—^ZÓLüêW¿*dúÒ-·Ü¢Â†jF¦è@™‹¢ÿCi¹àYíüyßÏ=Õk)®^ýõˆ{Eÿ„ <Úã«›Ïe…(IP\ö …‘_>IŸS$lHwu÷Ýw«áƒß»Ó— ~ÿý÷õË`øhÙmau>ˆrh¥áƒ Î1ÇÆê[o½U#?IãvÁT;ט(F#à¤I“ª¶mæ€E}pÀÑôéÓ£#Ž8B50d \æ\‡~x2$F¢L¡VD$Ë mjTq>žß!qÞ—_~9:ôÐCÕ‘^éã?Ž®½öÚh³Í6 ›úvÀ†QoذaêÈ‘õ<ãwÙŠ´Z†É§î8Ž@Ï#à†ž¿GÀpòÞ¹x #¤„„¡ƒ|ÐÇ×Ô ´Ôe@xÅØ²’¿›o¾9ìV¸íÐaŽ5eÑÙgŸ­³Î:5ó[§û‘j©j:  "õÂ`QþUû²W±¿QÛƒ†°‘#G6í9[ìÕWŸ½6'U‹ «·.ÏRÀð‡’´l\%+pNZ ¿½tmkÝ¥(¹î(Óò“ŸÔjêÇš@À ð(/½ôRRs¬‰!ª6Š߃áƒ"8„P3#ë½01Rõ$ ÀذÅ[hÚ(Òmap`nQgÍšÕgsÎÀ0Â{§•¿AÖEJ;ÞßYD.ŒŸ'NŒ¦L™¢# 5nøÈB«˜û¸÷vÜqGý+æ |ÖŽ€#à8@À @ÙÏá8Ž€#P¼ÐMHN7FIƒ¢×rGŸ~úéêÅH¡Lˆþ(P ÐIé±~øa¡¸"Bø<óÌ£ÍP€CÒYDþêÛn»M œƒÖÔÉ:OØÿÝwßnºé¦è½÷ÞÓÔU7¶Ûn;õ¬6…JGÎg2k€Pšüð‡?ÔkgãâµX 'k“þd\(fÀÒˆ(ö³þ˜ áÏ÷¥–Z*"­ÊŽj„BñÏþ³^0ÓUVYEs÷7EµsµrÿE]‘>õ¥m­x&ô¡°ü裒ˆº2­¥•VR…,÷þ=÷Üýüç?/Óòú½žíƒxß¡8tj ¼GP¶óÎÆÀüÊ+¯$50zÞ¥a4Æ ¢JÂ}vžñ–æŠkL¤Hš·'  õž0~ñ_k­µªFË~ñÅj8à~Á{ < ï+ržæ3àSþú׿ڴôcüãÀ‡Û!_’t ø-ø kg‘À´aüz‘²Üë‡v˜>ÂqÓÛŒÅsuQ  Á…(–Z| ý>üðÃè’K.ÑOÚâÀCôr­:p¹òÊ+£7¾ªµóƒü@ Ç/¾øâSƒ7äùe믇çgÍévàÎož{f‘EÑk¹úê«'’ºGÛ‹‹0§ûE‘Kj…Šq¤€z,ÂNÒ¾üm»í¶ñ{ì‘{íµ×*ú1î®»î‹`Þ§/ý÷Ûo¿X¬Š>|aÁ‹€–ÙO±óÚO 8±k™íDPEðų3™ÃÑG‹¢Ï9«í` "4êø|ЍMÃý¿ùÍoâ3Î8#9‡ácŸ6ðÌ¡Öé+‚}Å5 Ï)é bŒÃ!}»œuÖYzŸ 4(EMÏT¼¡ÇŒ£¿Qoòœ±(÷tíâA>À‘òÙ}ÓM7Õõí³Ï>ùœ ÏªTðNãÝ&Nq«S¢Ü¥(¸ÞÏ¢ŒŽwÛm·LìÄ  mxK„Eüì³Ï&íD±‹09nïx>E)‹SG,€¤=ð8‡’ˆÓøâ‹/NúÃSÀ£Xưw»’“váy˜¼œícŒ,Eu,ÊymžRà=†‡å½îƒo‚ªG|𶇃gIç'³ù„Ÿb@ˆ¥wº‹~£K¼óÎ;göã\¬?ÍÓ†×0øàƒÉÜÈALd Þf^…#FŒP´°_z›ëcDzöÙ±zŸÌ#=}ÈN:±j뤨<s! 2¤b"°ö‰P7nœFƒàµèÔ=¸—Is…§òZšn¤{«jÝ™{=â$y––‘,ÝÕwÞYÆåùšr†€(WÛRàœeÂûˆ³…®˜HÒ]‰v¢žõVSƒ̇” }.»ì²híµ×ÖïüƒàÝ 1–(£5ÒÈÒ4Á6j—]vIJ¾3|c…óHÈsJG6àŸ&æ u°ñƧ›ÔýïÖ[Ió1D~ ž,‹ˆ” ÅØ6ÛlSq˜ùÝ3ERhe×A N©äèóÓŸþ4©½VD—þŒÃsx±ÅÓh!¢[ÆŽ«ÃÛue>i'›?Ñ bìÕ&DÃ-Œt{¢ü Æ|î¹ç´>F™£åß'Ÿ|¢Ñ¡bl³]ÊÇ‚v'žxbrÌ6à§ÿøÇ?êWÖf÷¬¯õÉõ¡f‹#Ý–(R½2÷, #‚ÒÇ‘ ¼ÖGÿî8Ž@o à†Þ¸Î¾JGÀpJ€ ñ–z A2-!8š2àÆoÔð~CèòË/×}„añdS!!qÓ„ÒÞ Àrì‘GÑTTŒ}à 7Dâ9¯]îºë®èþûï×4Qì@ØG ¤©sIÏÅ'i ,Ç5ÊVR-ýßÿýŸÎI¼ £)pI5•6T L‹£†ñ#fý‘²Á0ÐI~õ/-ô‡ÇØ–ÈM?Aß'Ÿ|²"%€xðiJ.Ú¡!M…Åkæåºx¢&é±HføÓשóPÿ†´+¤;áÚ„ÆÃÎÏ&_gäyaéóz1Õ•)ÝÊnøàÅsÓÉh'(W14¤î­8'¼|‡ýfá}B¥>çàýki®PKD‚ò¼«I½iF Þð¤â]N*#—gAÚ0ΟyÆ Þ‡ôIiþ >¾ >CŠãà À ‘’ˆ¹AÌyÚ´iºmÿÀžª–®‹yàRX3iCÍÐÚáqŒPЇÆæ ?E?æ$‘-ÚŒHYJPˆcð’fØÁØ¿D?æmƾÃa\`Ý×\sZg újŒãàV¤ž‚àkq6XŸíg¤ ‰óYmpÂÐË'÷ï|3Z€ý©§žªóà|/¾øbbááTT¸¾¤ï’H¡èÑG$BR›bã`!qý%ÂTw©Ýsa›zÛ6_R¬Á KÔJÒüძKÌ-l#Q'š­èµ«­Ù÷;Ž€#àÔA@^VNŽ€#à8Ž@Wh6Õ“Üpà cÒ<Èë-I%B^L8=ûÄ£+ƒ‚®Çö±_Æ>iî¸ãŽx¾ùæÓ~´±TW"„jÊö…ûC¾RÓ"ÅÓR‰¬aÿa?“ÔZR·$9öe†¦t°~á1›S­O3SZY Æ3ÚÙ8‹€i§ÔORKˆà­mÂ["<ÆsÎ9§îÏZ#mìjç ÷WœÔ¿´‰zŠE!‹1/–ÜÜ-¿È’b߀(Åú<м®Fç.ÞÀÉï»Ñ>EkgéEYY´©û| †€(eã /¼°fj¢,‰w4ïjžY¢àŽ¥ÞBÅp¢ÔÖc¥s,Š|=.Jþ$)«à)Ò$ ëä½M_K¹$ÊùdLÞ#¼OÒdmDI®)žìx¸?L3% ûþ‡yŠCÓcY>Ãù†éºà[àèǹHÕÇ{-ý·å–[&k±¶áùG ɺàW˜SHb¬Ðtô×bL U©CvÓ÷Èu×]§có^!UVØ'\OØ1Äþ >‹Ôd·ÜrK²Þp ôMãdi Hï%FíGÊ*xí4‰á&I[EŠ3ø^èõ¯R]±næ¿ÕV[Utåž㞎Nw†–æ*}/ˆA-IaU-ÕçÌš/|‹¥Ü’èiMÁŤy¹ÁÉpG wèëâ*o'GÀpG è­7„E@ñ„ iÝu×Í,îŠWÅ!É—œY¤’¾óÏ?¿z;â‡gz ’f‹(a3ôÿ† ¦ž—Œ‡9Þti³/ì“>^ï»ñ}"Eêõ¡@i:MEÊÓ˜1ÅR‰¦ãO4|øð>kÀ£ÐæÏ\œº‡€(—4"‰ß„ <Ú#u),ÍÑUY÷zªyé¾â‘ á¥[VZo½õtižîª¬W8?ë"â^Cëí€÷~+‰w´Ô&Ó!áHqĹ >- ï™Á6´eQ#VœcF¢lDa¯_ioÛvœO"Ä!"ÜÕðvøŒï!%¯À±+¼ú-}m-]Wx2Ö+Š~-N”løßžH[¢OÂõ±&1.ôácxÀÃÁÃðþ$’ƒs9¥(é5m©Ë'ýFŽ©i¬8NZPëÃZœY”Þ‘"éç{ùå—5m몫®ªû87ï+" ŒÒ8‘& "ÍÑœOŒ Ñ;ì`]’OøW"W øÑ¬h1Gb4Iú°Áš9äÝÆR÷%9N¥¹"½+i«š%®Uz¾DëXL³ãq•5¢±Y,¼½#à8½Š@¥¨WQðu;Ž€#à”Q£Fe8Xôî»ïp ‚ѽ÷Þ›Ô» >DjSæÛwj{ ŒBv A™T\„Ú#RïÁyÇwŒvÚi'5v Ø „H/Ù9ñ0À¬¸âŠ˜ðxÖv5LV[ö!ðƒ)„‘ƒt䤦¢¥ÑSO=•à*´ƒÿë(çœsŽ*JH—Ñ ÅœÓטá£Ó\‚>ʬÂðMmRµ89íDE3i¢0P`˜âÏZס•çDQÏóŠg rÞ»<ÛQ‚[š+‰êÐÚfœ>ÁÞÃlSÏtibîâU¯»i‡ò<$Žs^”Э x*‰$Uå8sgNulMœ#LוuNæ$Ñ Éú¬M¸fö±~Òs‘R Æ3„«yä‘Ñð}6üaÇ>Æ5bn8dµ;HcÑgöìÙºMŸ,£y7¯°Â ÚŽ{G"I¢}öÙGñ&-õDØOÊ­QÂN7×ÄÒx1g{ž³MŠ¿ôõ†‡s3Zd]oøX NéëÍu3c ÒPI‘yå ÁÊÒ\aHÛh£t~þ³s6ÚÞÛ9Ž€#à8 à†FPò6Ž€#à8¹A%;B+„‹—Eä7¶v(ªµC8K#ß5&„`)i²N‘¹7úXÔÂàgœ¡tBy€w"^æîÍ‚*ý [E¡`ßè˜xH†kl´Ÿ·ëæ(€ËïÀ£=²q7ÃÇrË-—Ý ä{{Áða9þ©å‚5ùêv!À»yÉ%—Ô ð+´n%ÁÏsÌ1ZÄG‡I“&)ÏA$€.˜ƒ¤ÁJN1àK‚×I£6úÃ+T–9âBTs?þøãÕðak¢J÷_ýêW™C €gí²ˆ÷u5¨×a ¶…EäPÏ€pûí·ëŸî¨ñ¾ÐŒ ða„oµnaûb³ˆñà!æÊ½±Î

H©ƒ"¥'Š:7|ôâÞ¹5Óà)ÏýfÊëVž‡µÖZK‡Délé®ÂtJÜóÕ"K-r£šþ‚q×\sÍVN»ÏX(úI‡ïÀ\HÓ…ƒE˜æÊRbõ ÎÞw›l²IdÑŒËï…|šÀ¤Þyà¡°`{zœ¬ïàI”QµëÂñ0ݸ@àD´ O ÿÈõa=¤ßbî¼ãÍh¢ ƒà€“M5#cb 1bDЫö&×ð„×>í´Ó¢ßýîwIò0Ví‘ü¨#à8Ž€#Ð~ÜðÑ~Œý Ž€#à8-BoFÖñ6«åmG>`3FP‹b¥•VJÒº„ÓAp øá1¶yäÍ-ÜlŠ ”›m¶™þ!øEBÞiÒX=<Q¼Ö„ÓóéöwÖ2qâÄ3ÖƒbúZ°~§î!€íE]¤é,Æ_Õð×½vÿÌùË_’t$½jø0åZ5¥X÷¯RkfÀûE4émÌ3º5#û(Ž@%fø Úî¹çž«<Ø¢oDKPkËŒX¦Nª££ÄžÀe7|ÆvÛm§üßQöuiÿaÆæÄsÏx#kÃ'ǨÁóè¢KÛMpÆŽ«§Á!å>)¯ ”ÿ5R‚Å*«¬¢ã…ÿ8¯¥0…ÿ»WêºeÆ¢kˆƒ· þñä“Owé6ؾñÆÑðáÃUùÐA%mèSÍ(Å1KU–tøjƒùZê2p:ꨣck\o½õ’.ÜóÍ7Ÿ~gm܃Y×›c8q½‰@66¨Î;ÔdˆT¡:ü9÷&Ï[æåä8Ž€#àä7|äá*øGÀpjÖë UÅ™-'3)Ôð:«F(2MðBðCØO8È/ýþûï÷A„7/¶>ú¨O "(Ñ^}õÕèî»ïN¢8ØÆHƒ‡>ÂÎ…îKo3o”y$ bÖ#”0¶ö"yê­3ÏÇÏ=÷\͛ε˜wÞyó<Õ®Íí™gžÑs÷j}o†3(wíb´ùÄ£¤0Þî(sñÄvrÚ…€>P6òÉ'‘¥ jåù¸—-e že/áˆ1ÞÇÎÉwKåÄ;œ4ˆiBÉoi:q^낤۶ò;¼w8U`€Àh_/}SÎÏõ°5Á;š1”ˆ_¢XÁ1½Å³É@IDAT$œgHåD= x:x;æE1uÈ®/Æ¢8Ç^{í¥»8Ïæ›ožôáÔÃÈzù”¯"S0tì°Ãá°šŒkȼn¼ñFö©v½éo©¹0J\~ùåcñÞ—”¤œ—¿Z‘Ï}:ËRkQ_L˜“â0¤à˜”‚—¶÷\^æäópGÀè,nøè,Þ~6GÀp* €mµÕVêA†¦„ÌS44Pà¥VÏCaìàƒN¢BPàé§ŸŽž|òIsÆŒªNO‰Ô‹.ºh¢PÔ˜b…4Wv?¶ïŒÅÙ">z5ÍWÍBe7|sžZO鮜v!€¢¥3ŠaÞƒíŠúà¹n v[ ïgS@Û>>çœsÎ~BÁM?Þݼ·ùãYˆ“ïkx§ÁR¨Ú %Ú©ÿˆ=á„*ÎßGTC+ Çê“A¬‘ç¾­‘u£°7#F p$­âÇöÅ_¬ûiG*©k¯½Vq4c‚Õ(Á0AÄk$š¢9ô/‚§ãi1–À§ßÛ\Ût´û¬À¹þÕ?xOøRãÛÞ{ï­|+ךó‘╵óÜgŽ\o3”|5DÝ |D1føþ`þðÐÝ&ã9¹îðýð§¡ÑíùùùGÀp:‡€>:‡µŸÉpG äÛG0¿òÊ+“?<ìPš‡ôÄODC† ©ˆˆ0'lÇ6J_ò #ˆA²+¬°‚Öû а¥+Œƒ€ÈX¿üå/“Z#¤?6lXbÀ nÞvFx“# ¢ A°ÂfH (ãC¤; rh4±ñšý¬†Mµýáøà“nÇ:Bãʬ‘(®c؇‚¥ƒ Rc“CÂsøvë %¿Œ}¤è@ÉãÔ7||mø‹êöEª{ÌÃ/n'G ðÌ%"£Ý†tú%;ozm¶ßjfð~À1„÷6aÔ)ŒàŒÂ÷¹íK6Ò&ÝǾsþt:*ø¬7ÞØšôû“yŸ‡‚Þ ¨3 뤆›Êû…ZHy5Ž…)·9äMkJ[æ†a‚(dÇ¢:XÇ ,f'Í$üØÃî±Ç‰¡ÅúpŒñ ø+Æ8ÿüóuìðŸQÂ}ô'Ýjšh _j÷†øVæÈùÂTh¬9|&6s-ái¹Œ0¤ï¾ûîöµáÏzç ¯c£ƒ‚-0¶Z+¶ß?GÀpz¯ß½±^_¥#à8Ž@Ž@é WPXÚOnc¼vC†¾á=åH9ÅŸå<¶s! 1&õÌø`Çødi¬ˆB Ç Û\pÁÑqǧž¶Ÿ¹ dáM˜ž§µážgóÌ3íRƒ F™°PhgkD‘ðÚ(Y?Ú9c}ÃýaäI8.)’l>DrØ6ÊR€eá‚2€t2=ôPR'…1YKxNO"ݺmÒhp¿£ì™0aBæ5jÝÙŠ;øÌž=[ÐËö;DAkééŠ{UkÏÏloçxŸâT`¿aÞÇé3¢(Ž9æ˜èºë® w'ÛÌ™ˆT"YÃw{#ïmkÃðiª¶ßÚÁ`¨‡h aŽ Ö&ý ?bi§ÒÇì;m,’‚}üî-êƒï>ýôÓĈÁ¾pê 2à Fv £Æ‚£>Úv%Ÿ`Aô#FŒHöcLyñÅûŒe À€ÔQo¾ùf¯dÇùäº`t¸žYç׃òˆ# Çg¥¹¢ cÁß2§¬ëÍ:,"ÐÆL²&Òiq/V»/‹×¦¯Ý?¬‰™4qO¿Ì}±b?ƈkÍ|Œ¸¶úӟ쫯·ž¤±o8Ž€#à” oˆýËʯ¥Z–/ÆpGÀè‹€yþ! ñ!è“ú„pø7¤ å"‹,Ò§#© HWÐŒ€ˆPK*£O‡¯v`ÀÃCé%è»Új«©g‚^º/ž˜(!‚ë þé¾­þŽàNñÎûï¿?1b‰‚°Lñv<(šm¾elY3ÇØPʺQ tƒðdG±Á|HíPïš52GCÜ`IÁµÊ á}yÊ)§hÄ ÞP—9æaÜÛD(ñ;ĶWq¢~‘…yN¡,*+áeÍóˆçø=÷Ü5ª¡¥òÞ Ç?¿s¼¥MéV¯3神>Ú¡ÿꋚT(¼QØRLz Æ>;÷J¨0íÇ´µ‹yâó[«PQÝß1»Ý{Œ”•8 ü&ý "7uʸŸø#…f#ï#žO¼Ã胢¿U˜¿ôÒK:”Íð3ŒÍ;ÍÎÅ»-äAxŸÃ ÜtÓM©ã6Ùd“¤ÎH³xÛ5·~ðG2g|xΑæÅÀ*LMUmž6f³Ÿ¤"}öÙgµ©©8W½úX\SЂӬHý–õÞ'<‹ˆ^†ßcí´Ç`ÄyÛAÜ;\ï÷Þ{OÏÁyŽ ô^býðƼKY?‘;EiSq¼Ó_N?ýôX;:)3¿R8æÌ™3ûŒÉ9DØèišîÖb”ÓµžuÖY±ûMÑ+$¥žâ$µ|zeÉ™ëäh¿ï^x!³M™v®½öÚºÞÃ;¬áe‰×p‚X5òÛ–È«Š>’F§áó5Ûç]CñòîÓ}ùå—OŽÓîˆ#ŽèÓ¦ÑõÎÕè8a;©A ó…d,ÊæðnsNþŠD¢hŽo»í6]—cq¬ˆE±ž\qˆ§NZwIÜ7`ÂuÅr¼õÖ[×íÓß< $‚@Ï%ŠøXêŒ%C11–%ó…y,ÑÉñf7ìšÛ}ÛÈ'˜I ¨¸Ö<›Ç@Û‡sgÊâ3zŽ<÷‡çg ½/Äè?öØcyž®ÏÍpG GðTWÂi99Ž€#à”Â܉H…·æZƳÎ/°Í6Û,)f9qâÄŠ”UÖ®×>ñzüÉO~RQ¬ ð~Ä[:ô–#6 a}€ðx°Ãƒ²Õsª6¦ð’zYúr†w’D‘¦iÆH²å–[æ*¥“84r.¯ïñ%Jxüâeuú~ýrýoé®Âœöõf°á†V4…pÅ÷¬/Ôi2Âs¾ž¸µíÏg­çö i¥•V ¿6µžKœšê[­q8f؆¨ êñ<%m‘„E!æ¼ÔRKétá;^y啊ÔDx [ ‰Zk¢¯­›hʬBÖµú7sŒëqÀ{Ú]öÌdL¼ûÅ ÖÌðm«]óŠF©/ðlDÑV›gªyG¾†s'"+z…ÄýE:-ˆwÉðáÃ{eù¾NGÀp!à†],Ÿª#à8Ž@sP<Üòÿâ¿Ð¢è8(Di…'Iq3&SèoîŒÅoM~eR{AäkFÙ€KÞiñÒÔ´@Æ´(eHK ü¤QA)rÞyç•SRD°> ÒW+Ž¡¨?ÊÜAäòFY¸ë®»¶UÑ:9楯)ñ’ò'/kè<øC½`ø°ço ¶µ0DÉËûÁèÈ#´ÍªŸ¤4šé®¨5Æ»T\ó7ãÆ oÃ#¤ ‚<½v'ÍÕwÜ‘ùwÍ5×DÛn»­òYólÅù}Œú|øá‡äÐøEºDjÞ99Ž€#à8yDà›yœ”ÏÉpGÀh$âã„NP¥^‹x¦‰6­ò^M]¤ï(™PÆ ”(”m…#mx.“¯|¿ýöS,Q´SàšCÙÏñ2 Ÿv(}ŠÅtQH?~À¹»:—¼÷' rÃÇ—N<©{ÁðA´nYë½÷Þ5jàwã7ê=#iÒ"¢«ª6ñ‚©ÝÏ æ1kÖ¬ð”ÉöÛo¿lS“!Äõ¨6‹@`(Z‹DxÀï´ÓNÑUW] :TïÞ§D0ñî¼á†T™Ÿµ.¢=¸ï ÆJØÎê3}àKý.þB‚ r":Œºhí œQ¨ñ1lذºÃgͳn'oЈVÂplÄ}ƒˆEÓÙ~ÿtGÀpò‚@±8ȼ æópGÀ( ‡zh´ï¾ûF3fÌPÅ•¥»Bá‰aDêN¡Ò.ðQ~šÑCr}׌Ö@!3eÊUÞ¤=ñTE©Cº6iÂË•˜±¥0(ŠB¤ŠÀ» •\d"¬ü!x?üðÃÑìÙ³õ;)EV\qÅ$eOú|Õ¾d\óDÆ¥)ÂÀÁðcÛ¼yÛ™æ&\ž¸NõàºXú7|Djµ^0|ð\5jTDDÒ]5jøHß'3Nï³;/LsE¤Hø,³6f¾þúë5"‘wÞõ<Ã,’ÎÚÙ'í!3DóüÄx‡²qÈ!q>síYÆM±f”×öÌÆ°õŒæ\<ÇíV«m!ÎÉsç!©©xRž9°F *Q˜U0:ýÎàϹ-âÁ¢&x–¢ çy'på=ÊŸï‹ÓN;-Úe—]´¸ÔG¨iø°È4Æ¢øwHà-õ¸¢[o½Uñæú“¦’虬û(}}À”kƒãÇ:묓D“„ï6Î'u,¢GyDOÍ5%ú“HZî#ÆÀØn×<œŸms^î7æDîÀDêfEÛl³MS‘Šá<í~`|Îeóiæ´9чx æÎ½Èo³ÅÇíÜEøäw|óÍ7«±’ë?bÄOqU„ çstG —º“#à8Ž€#à8Z˜ÓŠšo°Á±(4j¢²Ûn»Å»ï¾{|øá‡'EÎEiP³¸¹¡bIù‘IL·wÞyçx=öHŽQü Ç£˜úgœ‹¢¤OÆÉ*4N1Tk7ȸᘜ“µâÅ›9'ö‹"¦&Ž~°³<øàƒz­¸¹v½N#GŽTyæ„ÄsGŒ!É8a[¶È(<.)ª’ö’f&Ù¶öŒiãXqs1r$ûì˜}îµ×^ÇÂù…Ûb¤HÚM›6M…çQ ëþFþ¥çi÷Cxß4{r^1Å_|q2×ôºÅpKšÏŠwFz.bjd ÞÆpGÀp:ˆÀÿÈKÝÉpGÀpŠbØx‘RHÕ<ƒ³à!§3u<Ž:ê(¼H·I×¹ o¸.4z#Ý–èÆÂkµQ vï½÷Vïá¬6+¯¼rÍùfõaß@Æ%o{-JcP«­ë æEM¤P–7~gf‘Ÿ³jê…ˆÖiu>žþùˆ|õÒA”4%Ý•ÈkÉwÛ%¯mêç²Ë.›|%°z½[ʬä@°Á³´V ¹ôkQ#)©Ñ’Eu„û˜+i‡Œ¨‹U¨Ï1Ïâ,ÂCüž{îɬ€—>ÏËZDKU«]ž1ÿÕW_]§ÈûNŒJ}¦¦¹úÿí ”U–¿ßüÝEZA@l–QpEÙDhpAP„VuÔV7p_p·QŽK»Œ¢ÚGÜ7@pC\P@TÏ´¢LÛÎüë{z£_FFdeUe-Yù»ç$ñâÅ‹_DEêýŽ—(G+ MG¢Êû>Ò#kDz†2g¼»øâ‹}EÒvþÎó©’ë·hN"Kl^Ì÷Š+®È:çgugˆZIK×Åu­¬Ù<Ã{£¢÷ ÷;雈Ä1#B%¼éS&šû¨ë£oºO@ÂGÝ¿Fš¡ˆ€ˆ€ÔR„ÒRì†npeo‰æ&â“ E“'žxÂQhçöä“Oz Ž0Ò\àÜ){ó3ãøññlç )Up<2&©OÌHQÁ˜•±ÊŽ‹ƒ¤ì-^ï8æÌHF:œT²ºCÀ„îkYi¥ºâzS gë­·öÏçž{.ï[ iÓ¦izHw·0ÍUY[Æó¬wïÞÝ©9Å3ŒOèüF STeìôÛJYô‰wÔ’*)4{æ–Ecøç`YI´™ô^<‡ꘛÙßþö7[Œ¾Ã¢èi麢Î) <÷H‹Ä3Ÿy™³ŸÔIINr†¡rRT®]»6r”#ª^§?)‹ÙHítÑEùSHc`Ï)ûƒöýI+ cˆ–ÔßàBd(‹XðýHöôÓOûtMi¬Lˆ ¥Ó™gž™Õß5Ò¹%]„î£FÇãe æ"Ìøñã}Ç‹§ëb÷Ç¢E‹üyp.ñ'aí±püò–ó½I›uÎ9çøáìþão…û—ï²ÈN¿óã…¯LD@D@D 8Hø(Žë¤YŠ€ˆ€ˆ@àe{܈欳Îò,q †Œ5Êço;:lŸø7oRZNnœ8opèà\a,j°àL(o¼²t>ÂÄêƒðF©½LaõÊ8%ª:.\B‡‘½‰g¡õÚ%`Å´ µ;»š?ºý½—JÄ„­/u>*bW]uUÔý‚ .ˆ–mÁœ¼¬—¥´f_‹!Œ À™Ú¢E‹h;Åš&Ìpü§5x^UÁs'Íx¶†"a ‘P0I:‘'fV`ÛÖóùæùŒ8moÜc8â1s›ž4s'ËêX„íÅnœËÞ{ïíOÃX„Q7ü~YmΗç×™¾ìD`0… jnuÔQŽh$ ñ„¨Í$C@¸#bƒßÐ\÷Q®ëÀož=G¹žDQ™1_æ‡PÀ üwŸ¸qîŒÑ²eËÄ϶Ûn눜¢^LE¬"÷ Æ•—0Bnv ø›Ã8ÏU«VUd*ê+" " "P‹Šÿ¿kž-" " õŽ V÷ß¿+:Œ±sÅ‘AÊ* ©’¾*tÚXŸð'N¬,/¹Ûa‡²Š¯xày¥:ᄲ….]ºäµo8§ør¡Ç…‘¬nð‘y]LD,%áÃÒ]™ƒ9“HúZY-¢h#‘¡óþãXš«PØxä‘G¢ýg“øˆÁæF$±gf´cÙ‘3¯Œ•Õˆv#"ÄŒç}ø çœÂt\aº.Û'×7"4‘ñs4r®}Ó¶Á¢2‚vÚxµÝŽÐ`÷R<ÝU˜æ –eµSüt¹~DJbÏ<óLcDв*^1g~ü>âØ¼lOº+°àŸøu zÅ¢wˆ^!2Ô,LsO×e}*ò]‘ *z"ÌÝJ”fܸ÷¬À{|›ÖE@D@D@ê6õëöô4;š&€Ø1|øpÿáøqèá›4i’›?~†³·$-HsF<¤Í™7­y35ÉÊŠîú7™I‘d¼w¦%õ«h[u[Ñy¨õ o!cö¦rõµnÁ">JI¬ëÓ§¿(<ÛHá—¯‡*µ H©‡‘ÊêY„i®Ê ’ûíöNj3",¨Á€ƒ;4œÈˆf8™ãÂ3ÏÈBuKïóØcEŽø0ÍU<]W>ÇÆùŽ-K'€ø@%µ­,Ýâ;¦¹":ÄX"|Xj6úŒ;Ö3&ë>B¸ ÿ–ãÂB˜ê,}–åoáZ[Íæ÷裺 &øû6LsÅ1--V|Tþ¦î½÷^ŠqaþNÂzáö¤åŠÞƒƒñù ؼÿþûnÁ‚>‚…ÿæyíµ×2˜&Sm" " " u“€„ºy]4+¨p à<ãŒ3ü' o>~øá>Ýëˆ+W®ô‘I“^ºtiTw'Gš•'œ„Μ´1*Ó^]ãVf.Ú§z ØÛ¼5ÊH5T½G­Û£›ðQJ88‰œàÙÄ[Þù \IRÞôë×Ï_TRBM™2Å/‡i®Ž>úhßfÿð|4#šÃö·¶ÚøÆÑnÂçaaš«0%V¾sä7¡>Egä{Þ釀oŽ|x!xñá7ТxA`È!‘Ø p‹Í1cÆ ÿ©Èq«£/¢‘œ¼üÀ?úè# ji®,Ò'í·ßγs«Ì=øí·ßºC=4JyUÈùh,Ú# TWµÇ^G:E€ˆœz×]w/<ž49ÞŒìÚµ«£à()P,'Ά$ ·uîÜ95-…[e"P”æ*›n) P°tWö}6™ä‹a+‘p<÷Ì!M[ë²4RÔPÈeôÉõ!ªÄž­¹Æ©Ê6Ä?K­Eä 5˜8—0Ís”UƒË/¿Üni¡Â4WlëÄÄgÁý‘ëb[MD3©DFôʵ×^ë,úƒ¶0ëI†`R›Æ£POÆê|0ø’Îó˜cŽñõw!X›WHÇÊPÄGåÙiO¨WN9å”(oç*xʉŸwÞyŽ~8kxë™â¹Iû„58¦M›æ“¤~³fÍò“zU'S§HøÈ¾¥,|Ü~ûí^òÿxZ©lR¿¶à=äC"`Ù²e>  õ'ÕO.C4ëäê[ÝÛ¨É0räH"_Ú·oòÒK/–µPx¤1b„7,-Ô‘GéìÅ}fQ!ñ£ó7K:¦m¶Ù&¾©Æ×™çN;íäk‚ÑOVû#L‡Uã“Ë〈N>ø`ÔÓ ¿‡ìéÃß-ÿ$(.Šø(®ë¥ÙŠ€ˆ€ˆ@µßÅ©RÞ[˜Ÿ~úiԇ¼iÅGI{bÑ ùʼn7?8|Ê;f|?­‹@E˜SQoïþ‹Z)7çì÷Ýw__‹à›o¾ñùüÿE¤ü¥«¯¾:êtÄG¸›nº)ZgܸýñŒšfΜ-ÇzõêåÚ´iãN:餸¦jY6lX4.Ñ~Ô0;ýôÓmQßÕ@¡­qãÆ^ܰ¨¡Ã;̉x± 4~_I1‰!0 Ø%‘“ûì³Û~ûí}zʤ>…nc¾–*ß÷»îºË¿DèA,¾ëªñßü· Fª1^ÀEÚá=yòde" " " EF@ÂG‘]0MWD@D@ª‹ÀÁïÞ½»¯á‘v¬U«V¹k®¹&J‰•+µKË–-£´-8ž“>õ)Õ•9“Óø©½æ À}ðÁþÀ:t¨ù ÔÑ#–jÄÇ–[né£Ô¸,Mw g:·¢äD‚$9yqþša‘$ð2êvŠú 5a8¬I«…qìxÀ/“&‰TXuÅ ’¸Ö•ùUv¤³²š*Ôí ˆ6¿\—“O>9cXjaXz6¢,‰>ˆßG<ãˆÜ™={¶[¾|yT/$c jXá<¨ÃuB =z´?J˜«[!¾üòK?Ëñš_0æwƒ&2â# á£ø®™f," " ÕBÇ ³m·ÝÖ§«X±b…ÏÝMTƇ~è.¸à×¶m[gÅy;G)/’Œvr™Û؈*¤XY¼x±›?¾Ûyç½SÇO1›Eµp&ð#l/æó+ö¹SÈš{ç÷œìW&|ð÷·víÚ’ÂbŽdœÅµ³Ï>;k—0$܈PÂ3Òl½õÖ‹ê‚à¬&Ò",x>}útëZíß·ÜrKÖ1þüç?gµÕtÏMêŽ`üÝ2OÞ̇W}1ÄŒƒ:ÈŸÏ%þù]¥öŠÕ_±såw”ûÈ¢pÐ#NñÆ‹ÔÚ8p _oР{üñÇýruÿÃÜI»˜s]Öò·H½2ŒçÎaʹ¬^½Ú]xá…nÏ=÷ŒÒNMŸútF'§¨‡’=õðDuJ" " " ¹ à¤X¸paFa^Š«"rðæ&Âé3ÂHFœ3gN´N$5j”wp Œ7BqˆàP@‰¿¹jc¤gÛùÆ‘O¿pŸ|úWt\;7;•ï¿ÿÞšô]‹,ÍU«V­¼ƒ±§R§m“21³NM°'Ó·o_?ú+¯¼RáúBçž{nÖÌÂHøÆE‹e4 ‡Ãç·½õOjk´k×.£o®•|že¹öïÖ­[ÖfK¹”µ¡ÒæO„GÏž=ý>øÝáyJDL}²M7ÝÔñ[Ä ~ko¼ñÆÄS$²’ß[3þ^©Ã}Ä6 ‹cDŒð‚ÂvÛmg]«ý›ÿ>°bí6‡ÓN;-ñ¸i×<±s57¡rôÑGGG1¦üž7kÖ,bj˜¸^>—‰€ˆ€ˆ€Ô}>êþ5Ò E@D@D Æð6éš5kÜñÇ¥½J;89á×­[çš7ouÁcÖ¹sgÇÛ”f¤ß˜:uªãMÔÐHíA¾ò!C†d¥3 ÇëÓ§OÖvÆiÒ¤ImB”J(@àTJ²ªŒKŠÛ§±-ãØìÝ»wÆO(è§4ã-fœyŠI#T˜v>r9§ s¤â¥”…˜8>yÓ›4C±¦M›f¼•ŸŽÇ³ˆZÔ_H3êýÏ·\fÏútíÚ5µkZú=ž—¤è2c~ù¤•Š>w“„lj˜˜1oý+W®ôMüVð›aÆz§N|”ƒµñÍõªŒq,ž³D-&½­ÿÝwß¹qãÆyêæ›o®°˜ns©ϳü“O>‰¢1l[Ò7‚AXO%ŒIêÏï-såÞM2~_Ÿx≌!°æw+4"¼æÍ›çÞzë-G›°ËásÁöKkg;b iÜÌX·”WÖfߌZxï„íIËió Û“ö£-餿eî‹$ãï–ÈîŸø=ŸÏ1“ÆT›ˆ€ˆ€ˆ@Íø·²ÿ8K~5³ææ #‰€ˆ€ˆ€ÔA8‡p¿÷Þ{ÞÙÄÿäo½õÖ>Rƒ¢¬¬WÖÌñ„Ãܼ݋ó§9óãN†Ê«º÷ÃiÄÛŸå½-O±ZÞæ¶”_Ì‹s…¥9UA’NÕ}¥0þ€Ü”)Sü›ÐW]uU)œrÞçˆ3§ü›o¾éöÚk¯¼÷«+_*^I¾±^çFµA0žD!á|­-ëß¿¿¥9þ’%K*qbs¶ß"(n=|øpÛ”ø "8xæ!´ <Ø=øàƒ‰}‰øÀQÏ}š(„ý5ˆ`$2g¿EC0.¢<÷¿=¼`¿MÖžÏ7¿]V%ŸqøÝà…~âs+ïx‹ßg =ã”'”Ù˜ˆ'üö P ¶Å‹©[¿Š|#øØËDtAZLÆï1‚©¬’xâ6á÷…ßéÊÜÅÄCsú@`ýúp:ÂÀÁ´ûî»ûOUG?ᄼsq³Í6óN&<¡á˜BdÁñÀùÅâPÀñ”$zà€Â±Çv{Ç„4$“&MòŽ*;s†,´\=ñ‘Î-½òÄ»ôŠw u>>¨óQSÂÿ=zô¨Ðxæ‰gV‘4[¶ß Ô‰âYγ®<áƒ݈bÉ•W^é—“þÁ9_ã9‹#;ɨ#rÌ1Çdmª©ß æÆï…=Ÿ*ÑBÊÞGöÛ“‹M” \÷¿þõ¯¾÷ÂQ±×¼M›6þ“4wXÕ¦@™4'µ‰€ˆ€ˆ€ä& TW¹ùh«ˆ€ˆ€ˆ@<úè£î£>òo9?ýôÓ©Fp’kßjaœuÖYQ8|µ AZr~c8q^ñ1oâøá-^SæDÃÑ?„žŽ;º;ï¼3Õ9Wm'P"soqM0¥ºÊ¾èeÄýZjfu>ˆv±¿åR`ÀsC¬0#ÕVe qc\žsö‘»í¶›¯BÝ*3›/ë<Ãÿ¬eù€á—_~é#ÙË„üGPO¨>ª‡«FÜvÛmþ­^š† æ£$Èk>pà@ŸjƒâÂæˆ4hP¹õE‚¡km‘7…qðÙ¼W¬XáS·˜ÈÁÄx³›4*ÿùŸÿ妿úê«o;c¼AÊö ¸#Ž8¢Ri\ü@ú''œrDÞðÖwûöísö-Å&|”bÄÇž{îéÿNqÆùQ Fš#jhðü?~|tʤ¼ª¬‘Þ áûÇ?þáÓÊ¥Åóç F4G!Ò,¥‹v¢y¾¾ýöÛ^xŸÑ‘G¢¨Eãå¯>l³ó®Ê¹PçÀô÷RëÖ­«2”öj! TWÕ‚UƒŠ€ˆ€ˆ€„H{²xñbGAtRb P@6n_}õUä<‹o«kë¤2у9i©T˜7N¾{î¹Ç;ãoÕãpÅQˆ#2-¥ …ÓaCnqœ‹äO§¿ÕJ1'&Ç¡Å1ø& ÎMx¿üòËþmfŠÜ©B½¶•‚‘ŽìŠ+®p;ĥ„ ^ÊÂNñ}÷Ý×;êIwúN@U/šâÏ NjîܹU>·o¼Ñ¸^·n;ÿüóSÓ]!|Xj'žy'Ÿ|rƱyv­^½Ú=ûì³þÆó‘¿a"ãBÑ"܉cò!m風Ú´iþiÑ(ˆÕ}xöqœo¿ý6.ü>µÇ³– úñM2{Ö2'~ Òú%í›Oã›HÎï ç–-[æçÉólÿý÷OeÂ1ø@ðá÷ƒg>¿¹8†ó✨Eóúë¯{V°¡à¡*ˆÃÔ„вãÌI.p 2ÄŸ_óæÍ£ˆ[8{p!h P˜šé­ZµÊ;ë“ÞÄà=Þº §ÿå/ñœqΛ7Ïí5TxÊÝ»w÷ŽEê®ÔwÃ1yÑEÕ÷Ó¬ôùÙ=—tŸUzÐ"Ú‘tW¾Gø(kÙ²¥»õÖ[ý³£Aƒîè£.H¤ÃAäñ™ Às'Éémi®LTĆÃ?Ü?›âׂçëØ±Ù…¸IMEÄ ‚,|9ÒïÎsõ¨£Žòç;zôh?Š›oµÕVŽg  08ùY¦Ø<óâo‚ç2óǹØçÈóºõo‘§)²`gó³ó:å”SÂ)øežß3fÌp]»vÍØÆù ˜wèÐ!£/kÃo ü6ßÿýÃx?ž§ÝºusÏ=÷œ›>}ºZ3fLÔÍX„c–f0©¼ísîK®£¢oªðQU‚Ú_D@D@D o8‘pÖÛ¸yïX;†Ehy3agO’Ýu×]IÍQnMH¡ñÃ?ôo×&‰l'e˜Ší.“Æ'Í^}õUwÇwd¤áJë«öúMÀîÙR>(p޽÷Þ{î믿vÍš5«×Ñ6ɉ^Õ“æÙƒ³žg Ñ ˆÜñg}˜æ ‘ášk®‰K ®ÆGëñ".¾øbŸðÁŒoöÑùœÏn.²)k°y1ó%Z,~<Îï¾ûîó»#ÈTgº.æv^Eýúõs<òˆO;Å„ˆòH{þç}‰þ1áˆñ:%z0úpÛµkçE ¾CáÃw*û‡ß$~×°$1…í&0q=V®\é#{¨&ñÃcÓ?" " " U$ U¨ÝE@D@D@J“Ž píµ×úT'¼a{à 7xáçX¾ÆÛÅf8pZ™èqÀ¸Ï>ûÌ;œ>ÿüsÿmxlÛ/í{áÂ…>"…7ny+›t'="Cd¥MÀ">Â{°”ˆð6?üÝ•JÔGu\_" ,²Šç Ï—¸át·( ˆÁƒû.8ðÃ#Ü“<ë¸&õi\Få–/_žåL×eý õmBQ'ðˆŒ!¢Æ¢µlžzê)Ϙ: ˜‰ˆÌÏÖù²ý|Çà~ì:ùr6FÔêÂà‚ 1¯$–lCL±:.ˆc·Ür‹a<ŒÚ#ÌÑæ_D)™ˆ€ˆ€ˆ€T•€„ªÔþ" " " %Kgo¬’=­X8Î1ênPĵgÏžQG.h¤sÁ¹‡á(4‡’íƒëÉ'ŸtäçÏe¼%ß—þ8ôÌé”km+ >œ³tW>ªvÏã?öØcý –îÊFä™võÕWûUÒb7Î/ã´çy†ñ¼zæ™g²žOD«á7ç<ò¸±ÿã?oÎkgµz‹X!š(>³0Í•¥Å²mÕñÍsÞø„ãs®v¿Â„‚á0æ÷ ·‡û¥GžëŒK¤`ܯæÌ™oÎZYr}‰šáw«iÓ¦YéÏØ9œSx?d ¬¨Õø¨,u8œ9Ç÷œB—EL:ÕMš4É;¢,ýûñ&-o#ãÂ)•m¹å–ÞaïÛ¹sg‡30—uéÒ¥Ü>¹ö×¶Ò áÃùè®6¿Ô@¨”UœÂo÷ÜsO„x`u>pÊ[š+"3x>a8º)”ÑgìØ±¾fË¡ñ, ê<Í,"Á¢"¬½2ß<[{ôèáwe~>ú¨›0a‚?^˜æŠt]–«2ljV;vŒwõâi¬0æ8yòdwî¹çFŒàѶmÛ¬ýo·ÝvËj§žDòa.ï¿ÿ¾¯©BÄ ÂÊk¯½Ÿ8@¬‘kd׌eRtM™2%Öë×:"D‚`ô#JD&" " " U%ûÿ–«:ºö"€³Œüägœq†ÿàÀáíØÃ?ܧañƒ\è;ì°C*Ò~Ð7—ñ¦qy†Ã8¡s°¼}´½ôXŠ™RNuÕªU+ŸžnÙ²eþmw •û;ÀÙn5$xöÇ¡×Ò\‘ºjÈ!QT‚©©0"f̘á?•™9Ù+³o|ž±ÔÑ@¨fŽ&ˆYš+Zˆ^)„1ž¥÷Êw<„3þŽyæóûaƘ5ĉC=4JyUÑýãýCƒz$ ˆwѺˆ€ˆ€ˆ€T Šÿ—PµLCƒŠ€ˆ€ˆ€ˆ@q ¢ƒ\ç×]wã à$CpèÚµ«/L¾Ë.»DŽ>g¹„ œwlÇÈÛ¹Iƾ2(E|üJÑÒ]YôA!Ø–â—_~¹?uK Eô†¥¹bû%—\’Šg}ëÖ­s~j"]é®,mé®®½öZYAô¦Ã²“Éõ\·>ñïP¬ÉGÐŽïoëá8ÖVÑo~›š4i’!zp=9æUbµO*:6ý‹è•´ë‹I”#i!e" " " "PUŠø¨*Aí/" " "P’N9å”(…©\ÊK¯rÞyçù”/8IõÑ©S§Ô}p,‘R„7wyƒ7Éx+·2N¶¤±ÔVÚLø(„ã´˜I"|ü×ý—{ñÅ)U… Iˆ#¼¸ai¡Ž<òÈ(ÍÎo‹ ‰†{‘ôJ|ˆSˆuæ¹ÓN;ù¡,ÝÕøñã£Úa:,;B5‘&^ùå—9Ïa(ŒÐ°qâßiQ{–ËæŸ1ˆTa[܈¬‰cQ@ݬaÆî½÷Þ˸Vôùì³Ï¿5æÑ­[77{öìŠîªþ" " " "P)ÙÿT©a´“ˆ€ˆ€ˆ€”ðcu8˜rÎ-ëÓ¿¦(‰ï: qœ% ÷Ýw_j¤I|<­‹@.&||ÿý÷¹ºÕûm½{÷öiá¾ùæ÷Î;ïÔûó­®ÄI߸qcï0çÙE«Ã;Ì84ž…¤Ä^zé%¿ÿç‡~pûì³OIF:Áš0æ{lP¬ý®»îò¢¢i°ø4^ƒ òMˆÜ¹"[8W«w(€”$RXš­ð8,³ÿ´iÓ|3ÇíÛ·oT£ƒFöã·)nˆé3gÎŒ7ûþ&šlÖ¬Y¢;pLj‰äkÜ [o½µïÎ|¨ñ’ô{ƶ×_Ý5jÔÈ“¿A™ˆ€ˆ€ˆ€T•€„ªÔþ" " " %Iààƒv8›°îÝ»ûi V­Z容æšH¨àMÚ\6jÔ¨(ç¿ÐpN‘6&-ÅVØWË"P>pˆ†ùøËÛ¯¾m'ÅÎî»ïîOK鮪vuIÙtÙe—ùAˆ. ‚H„„“O>9cpž£–f ±€há¡qo>ÿüó>Z`ùòåQ½°Ou,sçœsŽhFí¦Á KRBaˆDP$ 98ÿ?üðC7räHß.<÷“Œº&…Û©Écû#Àì·ß~ž¯Ÿßƒ:(ÜÅ/#p6,«9!´c,‡øÀ×I†à°hÑ"×£GG$âÐüùó}-ú3G‹”ÇaÎ+W®ô\)0Ï: Dã$sç·cÞ8ç°ßêÕ«Ý…^èöÜsÏhWÚ‰æ±tŒ¬cÌ—ˆ)ΗýÃëÅÜO;í4_/…~|ˆ×®­Ë~í^ˆ¦¨ •€¦]D@D@D@DÍÂ… ]½AZDÞFÙ~ûí3"= 6gΜhsÅi2ö«¯¾õCüÀ™†àqæ™gza%¾ÖE ²,âƒý%|üÁc¤oìË*O`ÓM7õÑp<çpjó\D¸M2ž£<͸[´háúl£°8FdbòvÛmg]½c>Z©†žåV¬á™Îû4ãï ‘ÚŒûhâĉ^Ü!ª¨sçÎÎ ¤Ó‡óã·„ç~š!ð›Ð´iS×P€`ÿ05ǧN {ĄƷš%IÇA49ú裣Mv دY³fÑ5°RD;Rø ç0ß¡C×µkWߎHd)Îx)àüóÏw-|ègƹ ÉD@D@D@D Òÿ몣k ¨Çx+•7x?þø(íUÚé^ýõ^°hÞ¼yÔ…7uÍp†á2ÃQDÚ‘¡C‡få‘?¶,çÃ,Ò¶ñÍvž‹¶ }¾±ìž½<ƒ“ ¡ÃRJ±uKy•ÔŸ6„~† ’ÖÅ“ôNÛ¹":Nâ†Ð@¤ ÅÆ‰¤1ã\¨…‚˜’dˆ DcX*¢ÍVˆTL2æA¤ ψ$Îü™àÂþp·~oêâ|$]Wë²”#œKmçÉÓ8óì ð\ó!õ ýÉ%OôMÈ$×~UÝ6oÞñ&šÂÒ@ÁƒßD ¶1Ï·PðH:6‘"DŸð\Dˆâ˜¤î*ÏØï“O>ñû%ñç÷„´[ˆYü®„¿%l#¥Ïlû- Î Ad«­¶òl”d" " " "PH> ISc‰€ˆ€ˆ€ˆ@à$Ãé…³ê•W^q{ï½w†c‰CœqÆîöÛo÷þÅ‹»vØ!WH 3vìØœÅÏy—±I}:­n¾ùfwî¹çzág>ÅžÃí8½¼‡ÀFŠ‹Bà jÖsÛqbK–,qíÚµËÕ½ ÛpäáäÃ.½ôRϾ3.Vüq¢RŸ†7º Tˆéí¼™ŽèÁß #²Ò&@j¦qãÆù{‚¨†3føNÕI%.|ð쫉ç@už“Æš& TW5M\Çrðæ½£%ý‡9òm7RðÜ}÷Ý^ô 7x-¢äÈ#ô…€qÖ™!r‰:ÎHuBÑts°ÓŸ·{m,Û¿˜¾9O³šŠV y‘ާvÏ=÷x1Aåã?.Ä9ǰô?¥^ãH}ûöõ¬Þ|óM_X;'8m¬×x6’r! ã2ºO@ÂGÝ¿Fš¡ˆ€ˆ€ˆ@‰èرcA€@A~úÃ?Üxâ‰>w_<ƒe‹6 n˜ÆÉú!BíRl‘–‹: ÔÖÀY/ÂnãQlœB¶|gp*~ðÁ~"í:uò…rí…þfnÜÅz^xá_ø—·»©‘rðÁçŒpa ñÅþ:0óÎ'*f/½ô’[¹r¥ãxM›6uݺu˪ARGÀìý÷ß÷"×;~=lN¤e¢ž µz÷î]áë7Üpƒ(âZÊ~Mw5uêT'á£4ïãéÓ§;êñì¢ÎRM¦¸jذ¡ûè£ûDäóŒ)Í+¥³t>ÒÙh‹ˆ€ˆ€ˆ€Ô:ÑùË_*<DÒÅå6Âv„‹ÆGýîºë.7jÔ(/$7‹ªÛX|{ì±^h¡6ŽB+DŽc„ùœwÞyŽTZçœsN$B„c$/Ü^•e8¾óÎ;~ˆ‰'º‘#G&7{öl×£G¬m¤ kÓ¦MV; Œ—f]ºt‰ŽÔoòäÉ^ÌbÅåáZ¿~ýüj¼X;¼HË”dˆ[K—.Í[A’èñ/’øÃüÊ»ï¾ë£¬ªd¥C±¿[>µa<·Iq˜ô,ªùè˜" " " "PŒ$|ãUÓœE@D@D@D é«Lè /}.!·—Ë{ƒ9^œº¯½öZ”+œ‚Gyvíµ×æìB½Lrv¬âÆ4уa9ÇPˆ  ¡}ûö,&Z®ñ¶ÞzëŒâôXX°~À€nîܹ¾ÞJâ~k Ó–=üðÃnèСÝÛÆå»Y³fî믿Î[üȬÄWvÙeŸö뫯¾òQGyd‰Ñé‹€ˆ€ˆ€ˆ€ˆ@qPâº^š­ˆ€ˆ€ˆ€¤¸è¢‹é©ÌxsÇ”îªrü´—ˆ€ˆ€ˆ€ˆ€Ô& µI_Ç ‚ãôÓOwm´QƨDcàÄ¥!¤Oyä‘Gë{dì¬ žXí"I¨3BD¹çIõøãûú"¹Œ¢ë—]v™OÃE?Ò+QkÄŠy“jêŸÿüg®!ª¼ a`Ê”)'x± “Çž{î¹èxlG\€#Æ÷Š+2ö‹:—-Ì™3'Z]¸pa$\ÐHíI“&EÛï½÷^¿ O>¡`¯#2bĈhß>Ž)/IDAT¿[o½Õ;6ªGæž Œ¬â$|Tœ™öºB@ÂG]¹š‡ˆ€ˆ€ˆ€€À•W^é–/_îŽ;î¸Ôb᯾úª;âˆ#¼pñì³Ï–a±jÕ*áÀô8à_<^l÷ÀôÎüòNá„NÈ*ºN}„€š²™3g&ê7ÞˆÚ)Ž=:j ·Ge iãEÂ6>¤NŠ…Ñ2iFtˆÂ’E‡ nœrÊ)¶)ã;œ"—¬âLø@ÜâoJ&" " " " "P<jîÿ0‹‡‰f*" " " EM€bâwß}·ÿj‰ºÔ„  t¢s’‹/öb†ÕÉuò}ûöMTN;í4GD)°’l×]w"’¶º"ëIFE’µjÕ*j~ì±Çü¹P”Ýl»í¶³ÅŒï=öØ#cÝVà / ‘cÑ¢EŽÈÒy!¢X±u¶‡Ça=ÍÂÔY,©7Ò‘~ÌŒôW²Šà~àšøá‡¾ÎGÛ¶m+>ˆö¨>j»*" " " 5C€¨€ƒ:ÈHyõý÷ß»?ÿùÏõ"ˆiذaâ¤(îmu7,%URǰVGÒö|ûIûV¦­eË–Ú-,æNu>>þøãhŒx”K´!ÇÂ5C e–nÌÆ+äØ6¦¾ÿE€¨„RžýÇüÇ¿6hID@D@D@D@D NðQ§/&'" " " ùàíÿÛo¿ÝG[ >Ü¿©žä¨GÜ ÖÁìöÛo?÷Ã?¸O?ý4Je•t4¢¬vGçÎSÓR1V!ÍŽY‘1Cqeã7®È®}Ãq26T`¡‰Ú(¡!DuèÐÁõîÝÛ×Zéׯ_¸¹ÂË;vÌ-Â}Á±d•#€ðqÇw¸_|Ñÿ äU¹#i/BðQHšKD@D@D@j‰u®¾új/djêÒK/u¹ÿB_o½õülqòÇS`…§Öà˜6mš¯W/ NÿY³få'3Ÿe„"/þþ÷¿{§ó—_~é‹v§9Ÿ)ŠFh¤#mÿ05598>B…¥—"$IL²h˜ðxˆ6¡èÁõ¸ä’K÷÷«È2¢Ç‚ *²‹úV¢÷ âISs™ˆ€ˆ€ˆ€ˆ€ˆ@Ý' âæuÿi†" " " "P.­¶Ú*rªù:ñ“vƉoöûßÿ>«à¸mãAÁ¢/(”46bË»ï¾ëÓC…ûVuyРAQM„ƒŸ~ú)uÈÇ<ÚÖºuëˆGÔøÛ²eËâM~ý©§žŠÚ©}‚…u?¨Ñ‘dÏ<óLVs\ ;vlÖ|ÂâæY¤44oÞ<ÚB».Qão \‹FùN{Yå4iÒÄí¶Ûn~gÒ]ÉD@D@D@D@D@Šƒ€„â¸Nš¥ˆ€ˆ€ˆ€ä$°å–[ú7ÓéDÇ…^èÖ­[—ºÏYg•SDw¤V†E:àPO8;ì0mîWˆåcŽ9&e}ôQ7sæL/ÄÄÇ^µj•£V‰Ù˜1cl1ë{ÿý÷ÏjCÜ ÷§. vâ‰'F}÷ÙgŸhÙ’êl$‰C¶}8Ð}dK´[Ø`ƒ ¢®¢Ž"W’1W"Uø¨¸y¡üÛHw…=ÿüóù爛" " " " " µJ@ÂG­â×ÁE@D@D@D 0H=uýõ×»M6ÙÄxË-·8êq̘1Ã4DZœTU-Z´p7ß|s¹A¤Dƒ R'‚³ýòË/RguïÞÝÝpà nñâÅnþüùnçwvÏ>ûlT=u JlØ}÷Ý]ãÆ#Q±`ذanîܹnÍš5î½÷ÞsÇw\†ÀaN>ùäÔ£‘‹·ø‰„ R…âí¡¸@z+ÂqàG…Ej|þùçQº°øÁì:X;ˆ$|,ãå—_¶Í^¬b.ÁаfÎ\ClúôéÑ~§žzª³±i¤©™˜+Æyð‘Už€ \¯\)á*í)" " " " "Ph> MT㉀ˆ€ˆ€ˆ@-8á„|ôÁúëÿZÆ ;Ñ ¿ûÝï¼c§=E͉Ž0ûyçç… ‹èH›ú¨Q£Üž{îE~Œ=ÚïGH˜:+ÃŽ¶Å—ÃTZñm¬#LpfD~ êå²ë®»º‰'f8¤©wRÞù&ªY³f^Ìiß¾½ í¿—/_­3"‹‚‚ 1D¤âu=Ì.»ì2/’PW…âæ&LØv j²X®° ùøñã]›6mœÍ«]»v‰csLú…öÁ„«Z®ž={ú¨#Ĩ7Þx£#hš& ᣦ‰ëx" " " "P|ðAÇ›é›m¶YΣµ±dÉ_=,‚¦ÌBlÀ™n6{öl7uêÔ¬è ¿ôÒKnÈ!ÎDÛ'Ü¿OŸ>YÛéG*¶ÝvÛhÙÆ šå«¯¾rÇ|Fd†m·oÒ;Òºœ‡‡zÈvÉøf? ©#…†¸ƒ˜’fl³¢×aM"1Î>ûìÄݘ+©È`Ú†nèW÷ØchLÛnÛXglÒ~¥™ŸT„>mµ' jï½÷öUç#™‘ZE@D@D@D@D ®ø·²·ðþ¯®MJó¨:o¾ùƽù曎oà¤_"Z mÛ¶QÝŒÊÅÒ.!X˜hÁ›ñ¯½öšþ ¢A¤ÐFdÉgŸ}æ>üðÃ(ʄȋòΉÔVDy`üç/¢+:°ÿ÷Ï<ü†Ø?DŸ|úé§>:ƒè Ò†™asÍ5׸×_=:÷vÚÉQÿA‡h®× $Þÿ}Ÿv ±Šy„Fú+ ¥#zÄE%ëΉ(Ä—p|ë—Ï÷÷ßï¾ýöÛ|ºF}Ë6lè׉\ÁH²ñ5üs¡Ö ÷F»|§Dª7"xzôè‘%Vå;†ú‰€ˆ€ˆ€ˆ€ˆ€Ô 5ÇZG¢%@-¢:pÎ¥`Žn;!ô[mµ•¯UAú©W_}5«õ­ïPø@H0±¦s¡V‚Cy†ãœHÐrD0j‹Xý°OM._wÝuîœsΩð!9Ĥºr.!W"yrEìäs²zDI!èUT^DU>cªˆ€ˆ€ˆ€ˆ€ˆ@õPª«êc«‘E@D@D@D Þ ®ÆG}ä£&ž~úé¨Ð6'ˆ“¹oß¾¾ˆ:ëguVTõúlI¢Îv„ŒÐ¨ó¯Á¦ ûÖÖr®"÷¹æ„èQ—Î¥Ðs¡¦ bÅÍâô¹˜h›ˆ€ˆ€ˆ€ˆ€ˆ@íøµòeí_G(·Ýv›#êã§Ÿ~rÆ sçž{®8p ûä“O\\4hPÎZEpºyO±S§NQ_„Ž·ß~Û!z˜‘:Š`–f‹ôKS¦Lqýû÷·.Q-+®¸"j«+ D÷P‹$—qOAƒøaµNêâ¹ä:‡ò¶‘*‹º)ÜëDtÐAåí¢í" " " " " µH@ÂG-ÂסE@D@D@D X >Ü-^¼Ø]ýõŽ´VÔ¹¸ù曳¦Oòê¨í‘u  6 ÐÚ~üñGg5-›ÚñZD ,X°ÀtÒIîÎ;ïôS¸øâ‹#áƒÈ¶×E›8q¢¯i‘ïÜêò¹ä{¹úyæ™nÉ’%b’k>ª­FzEàÊ+¯ô‘=ô›6mšOûà R?cèСŽBÞqÇ]°|ùr·hÑ"?BÍñ믿ŽNoܸq9Ïý†nˆ„ÿþïÿŽöcBñá¶âç[¡p:¢ÒÆoì…¥]vÙŧ–²"óìk鈼 ¸<Ö¨Q#ÿ@CÄš&Mš¸Þ½{»¦M›úmiÿP»¤¢–t.…šÑ3œÃÊ•+ÝÚµkýü»uëæ‹ÅWtž•éÿ‡?üÁ-[¶¬2»j& ᣆëp" " " "P̈` åŸb2€=ztʺ6£îØ1cl5ë{ÓM7õ)Âà×¼yóh;¢€“TÜüóÏ?w-[¶Œú‡ “'Ov ðMaát¢r¬@9 íÛ·w‹–IÝ4kÖ¬h½ª içRÕùaÔ¥K—(]XÒJì‚ëtE@D@D@D@ C ž*ê²Ë.ó©¨Hý… @z)KE•ÏÃXDO„"Á!‡âÖ¬Yã ˆöÙgYŽÿòÆ_±b…ûßÿý_÷Ë/¿ø"ÝÖÿ /´Å¬o ²““´OZ:¬ð\².kÈw>Œoi»‡sÿî»ïüççŸöQ46>â“LD@D@D@D@D@ áC÷ˆ€ˆ€ˆ€ˆ€T’bDÜ N=õTצMŸÆŠ4[£GöâA¼oÚúóÏ?mjݺµ›2eJT¯£E‹^‰:”³€ØÁÔ¡¾I˜Þ QA$É(ÆÞ¬Y3uBº­¤O»ví’vÍÙV‘ùÌ™3'káÂ…Žs7[ýõQ4f÷Þ{¯-ê[D@D@D@D@D Ä Hø(ñ@§/" " " "Pyˆ'NLÂ@\?~¼zõêå£6Ê;"B‰Ù›o¾i‹Ñ7"ÆÌ™3£õ´ Ñ'sïØ±cÚ.j§œ*oçŠÎ‡HΓÝãFô‡Ùæ›on‹ú(q*n^â7€N_D@D@D@D j!Ž=öXÿ!µÕòåËÝSO=åî¿ÿþŒÚ…ºûî»oFÔEyGoÒ¤Ib—nݺ%¶‡Ý»wW+¼Lqô¿ÿýï‰û­[·Îíµ×^‰ÛÒ+:ØöíÛׇȱhÑ"GäQ5o¼ñFßòÒk¥ÍIí" " " " " õ€„úwMuF" " " " µD€ôK¤3fŒÿP«ãÕW_uýû÷jU ~P3#LÛŸî'Ÿ|oÊZßxã³Úâ ÔÁ¨¬ÅR™TV¹ŽW™ùæ+,äžk|mHøÐ} " " " " • pÏ=÷øâßìŠÐ‘dD,ôèÑÃã¦æÏ1jƒä>¬ wëßjsøbÿTFDˆ ‘s5­pyÎ ¼Æ#GŽÌ•ôZ:tp½{÷ölûõë—±]+" " " " " " áC÷€ˆ€ˆ€ˆ€ˆ€T‚@è?ûì³ki„Ã^z饑ÿ±Çs»îºk¸9c™¤sB(¡†HRŽo¾ù&cŸú¶B´LÈ~—\rI"‹úvî:ªPqóªñÓÞ" " " " %J ,Ní‰òÌ¢=è7xðàœÝÃz_|ñEbß &$¶×—Æ_~ù%ãTÆŽ›%z„ÅÍ3:kED@D@D@D@D ¤ Hø(é˯“¨,F»’zéûï¿Öã Ôô¸ì²Ë¢æ† FËI aê,ReÅ %/¾½>¬ÿãÿ(÷4Âk°ùæ›—Û_D@D@D@D@D@Jƒ€„Ò¸Î:K íRh¿ûÝïÜu×]ç —ÿÏÿüã³téR7zôhײe˨+u;øä²“O>9ÚŒÈA}ÆâÃ1X¯ï¶É&›dœ"¤ýâóî»ïºF9 Å›%sRdÉD@D@D@D@D@J›€„Ò¾þ:{J îÆŠ+2ö>çœs¼È±ñÆ;>íÛ·wãÇÏè¦ÅJsÒ3öÂ… £ý?‹Ǩ‹–v.•+…á©ëaF„Ëzë­ç?DØXxÛ#˜/[¶Lâ‡AÑ·ˆ€ˆ€ˆ€ˆ€”( %záuÚ" " " " U'@äÆÏ?ÿì† Vî`·Þz«VØtÓM£¾8÷ͺvíj‹þ›âçk×®u‡rHF;+'žx¢›;wnV; Mš4IlÿñÇÝm·ÝæzõêåV­ZõAP@4ÀÂ}wØaßF /¶mòÏþÓ·%ý“v.á˜IûÑÖ·oßhS8QŽO²Î;»%K–¸‡~8có×_í>ù䓨M)°"]àžàC”M!ŒHÆãÚ…÷g!ÆÖ" " " " ¥GàßÊÞÌR,xé]w±ˆ€ˆ€ˆ€ˆ@ ,X°À½÷Þ{ÎÄm¶ÙÆí¼óÎ>-SUDz[±ïõ×_ßEÝK¡5yòd׿ÿÔC ”Wd‹-¶po¿ý¶CÌ ÔZe‚ÐЮ]»ps,#Ú,^¼Ø«OŸ>9ë©Ä'ÄùLŸ>½VæŸK}YG¤ úã¾)D‘yÆhܸ±CøÚvÛm3Ä+ŽÃ11¢¡d" " " " "P_ÿ¯©¼^Ú." " " " "“‚Äž{îé?9;汑7ßwß}wŸÎ‰”WD˜àa»_~ùå¶è:uê-ÇD¦NšÑŒ³šÇ1#uµCââFƒ ¬K­}#$ÁkÛ¶­{çwòž çHŠ°Ù³g»¤Bñy¤Ž0*§U«VQ{UÂ1Ãq(r÷Ýw»SN9Å5lØÐ ‹¿ÿýïÃ.Z,>²¨AD@D@D@D@j—À7ß|Õ°ØgŸ}ÜêÕ«3„W^yÅÝyçÑ$[´h-‡ EqãÆ¹3Ï<3‹H¶0 Ú ‘ çíûŽ;:RFm·ÝvQ¿º°@º/ŠÊÇôK=öXF”KÏž=3Î+¾Ö+G€¢ò…0"9¸Ï(jÉ%—d IÄLD@D@D@D@*B@ÂGEh©¯ˆ€ˆ€ˆ€ˆ€Ô0‚ƒHŒ 6ØÀ×áwjZ„…½gΜ™:£[n¹%ÚFÞš·ì‰Y³fO3dÛˆ’ EÆö\i´|§Zúg=öð©‘’O”Ì©§žêš5kmÏ+jÔB €€Eª¸$³Ôqܯñȧ¤þj ºD@D@D@D@D ŽàíwŠt‡Nûx k–ˆaaðx‡7Þx#júÓŸþ-Ç5jä…•¤cÐ×Þ¸çmü¤”D@饗¼XòÕW_¹.]ºø´DIµIl<¢2pho´ÑF¾@6©¨( NÛ.»ìâÓw•WÏñ“æcç×´iSGÄÌË/¿lM‰ßŒ3þ|÷æ›oúZ A½{÷vì_ž}óä“OFÝ8àG’\sŸ7ož{ðÁ£}(Ô~衇zQcÙu-,¢ÂX…Ûm™ú2\,©õ3žzê)·å–[ºŸ~úɧ C\K›£Õìà¾À8GR®q¯•WãÅæÌu!ëË—/÷cpì­¶ÚÊ_“¤¢÷œ©­¨b÷çõ /øyPç†{p³Í6ËyíýúGD@D@D@D d Hø(ÙK¯¨ËpºãÇI>aÂ÷Áøé’ÖjàÀ‰Žò\çC”ˆ9²“úY4ŽfÒZ™ÝvÛm>r‚õxýÚN:餌´[´a'žx¢ÿ¶”\8­q´sNV7äÒK/õâ‘I–t¼¤~¹ÚöÚk¯œÂ|é“d8îq´' DP%nãÇ÷M=ô;âˆ#26“²,³26–­ÀƒBôf÷ÝwŸ9r¤_%gÅŠ¶)ã{РAQJ³‰'ºc=Öo‡5iÌÂtgáŽñã±-¼Þqñ-©8béÔHU…8ñâ‹/FµYÂ~ûï¿¿{úé§£f»?LH¯wË:­]»Ö RŒýÖ[oÕ¹Ôk6O}‹€ˆ€ˆ€ˆ€Ô> µ 4H%P•‚顀ѸqãDáÂLáïòŠo¸á†ÖÝï¶Ûn©…ÆMðÈØ!¶rÙe—ÅZ2W©7b‚Iæ–ü×(Œf¤ :thÆfÄK%Æ7B@(~P;¥C‡©û±qwÜqG_˜žuùœOhˆ(fð zÄR> 6,>臰@$Dhˆ¡°qÔQGùÍDZ 0ä2ŽG¤Ë”)S»åi’v@´ âC@³‚ôñ¾\SD‘»îºËp ›£¼âåáq2vÖŠˆ€ˆ€ˆ€ˆ€üFàÿ‰„ˆ€ˆ€ˆ€ˆ€ˆ@ý$pÕUWeœŽwœÆDi¾ÈÒ#etÊsÑàwÞ‰zSk‡6ÞÔÇò1" Ö­[ç£A(Xoö§YZª&ú#=a"m­ZµâËéœBу90wÚ‰,ç ŒŠ‡rˆŸ;ûýüóÏŽu3Òl™…¢í‹Æ#Í—LŸ{î9¿ŠÈŽ1cÆ ë}#\˜ql«Aª®Ð>ûì3,ŽG4Š¢ ÷B.;ûì³×åüóÏÏÕ-qÑŸ|òI”¶«{÷î¾×ûŠ+®H܇ô^œû…^è¯Åyççû)4mÚ4¶Ùf›Ä}Õ(" " " " PćˆàÀimé—ì4‰Æ#2p®=Ú;íFò±P4ˆ§¤3fŒÛa‡|š¥òÆŠ]'JǼŸ–.‰q)ºŽc=nŸþyVz+jT„ç6bĈh·øˆZ@È 5˜ '¤©"êãùçŸöC £%X·ã°/u+¨bÖº,ÊcÖ¬Y¶ê¿¹Nˆ={öôëýúõó"+ˆWÖ~ñÅgš£fì:3×°® "K(‘‚‹z-¤ÁÂâsòÊþ‰_[kÏ盈#ê¥Ø±)`Nz+¸!À p™bÛãcÒS«BKÇŽSûÇ÷׺ˆ€ˆ€ˆ€ˆ@éPÄGé^{¹ˆ€ˆ€ˆ€ˆ@ ¸þúëoû“6)Íp’ãÇÑ\ÞÛÿŒ°`F”ARÁkD‰|Ìj‹„}-* lKZ&Z‚ìñOèôg?Ć]wÝ5§»¥‡Â Ÿ4:ÅböÈ#øE"³°x¼µñ¸¦á>“'O»FËñ4cXÈ‚hÒ]™ÑÇ΃6»6WÚT’„®sÄà“¸!šÙ˜ñmå­#Qo$~lÖÃkQÞ8ávæˆ$ò(⣅miËa]“x4CÒ> ¶E€$õ£mðàÁYÂí—\rI$|=bÅÏ9'³ÓO?ÝÝÊ•+£e¢9HUӦ茚&®ã‰€ˆ€ˆ€ˆ€„$|„4´," " " " õ„‘±pì±Çú´KI§F Òa 80ª%A1ê\FݳnݺÙbÖ÷?üÕVS 2|ðÛxãý!‰nH«'AäI.†}­X8õPâ©´r@¾/ß`ƒ ¢ÝÂèDÒ=!ºØ<T´ÒŒí¹ŒZùˆ8¹ÆÐ6¨K$|Ô¥«¡¹ˆ€ˆ€ˆ€ˆ€ˆ@|ôÑG>’Æ;v¬-&~‡5&pôã\']Q’…u'žzê)G1ó${î¹ç’šk¬m£6*÷XˆAQn粟~úi¹ÝàO1ojdp  ¢OÒÄ}ýõ×£±›7o-³@ÝSO=Õ·Åç{óÍ7gô W*’¶,ÜOË" " " " "PÌTܼ˜¯žæ." " " " )BǹE~¤tõÍVL›"ÒD¶ÿüóÏ|y»ÿþûm1ã›"Ü–â)cC ¯$Õ Ù0Ç´¨Œwß}×GRM±zõ꬙/Z´(«¢CöÚk/×¾}{_Œ<Œ&INà…0b¯·qôÑGÛ&/h‘žÌ,^gåü£mÊ(Ð5þ¶Ð«W/צMwÒI'Å7i]D@D@D@D@Šš€„¢¾|š¼ˆ€ˆ€ˆ€ˆ€$hÒ¤I´jCä²?ýéO¹6glûýï­# Äm¿ýö‹7Õúº‰;¤u Ó?Ý~ûí‰s#­ìø¬]»Ö÷ £+Ø7’Pð!ê$,ªáÎ;ï´®núôéÑrÒÂÁ¸qã¢M:tp·Ýv›[ºt©›7ož"°úQ§:°@Ú'³ðI!E*0Fp²#x`|0„3¶1Axö…m³fÍlsÄhĈQcÛ>DšéÁ±Cþ¡PíX¶0a„pÕ/‡Eémã®»îÍ—¶õÖ[Ï}þùç~3×ã…ÏC6F]ù†‘£‡Õ-·ÜâÓq2H# á#ŒÚE@D@D@D@D È œrÊ)Žz"zöìé4hà(žÝ¸qc7`À€ÈÁÏéât§.EyF]0â©Hñ„s?ÍÒÒJ…ýÃTZa{U—qš›qŽ¡À@ê(„‰Ð(’nÆö+Vت?Wjy°/lͶØb‹¨ö BÑÂ… mS´í_ÓVMž<ÙÝ‘d}úôÉjN»Vñ4\-[¶ôçÆu—ïõÎ:pÒî "<Œ+ÂÇ5×\ãvÙe—œ÷X§¦áD@D@D@D@Š€„"¼hš²ˆ€ˆ€ˆ€ˆ€äK€ˆŽÙ³g—Û´MDD Z˜2kóÍ77ù¢à8êã†Óîܹ¢‹õA80KK‡FM´jÕʺûïpáX‚•°ÞÑ¡ƒs9sfÐ;s&ëÖ­sñ"é­Ë¢?Ö¬Yã8Ï$CL š&4¢0¾þúë°)kyÉ’%®ÿþYíÖ€P2lØ0["J¢†`aÓM7õµX’ÒqY7®]®ëmýr}ǯǖ[n™«»ܨ-bf×о:wîl›½ Ô©S'¿Ð6ÜpÃpUË" " " " "AàßÊþÃÿÿ2Z´"" " " " "P/ PbΜ9îÛo¿u8Æ7Ùd¥Ñ¶mÛ*×N°ÔC8çù`¤Ö²zuý;HÓEáq"0^\â‚GÒMÓ/¿üÒ÷%’†ÂévþIýiû¸,"æÃ?ô›Pà”¹‘6FEÚIÅe×óãÜš6mZ‘!êD_">~ùå‡è¡Zuâ’h" " " "Pg Hø¨³—FºK`øðáîõ×_w¼ñ¿`Á‚¬‰â¤ÆÉŽ‘+©OÖNjX¿ch#ðÀDgL:­0E…¾»tém¿à‚ ¢e-ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@uPÄGuÖø" " " " "P ÜsÏ=näȑљQ÷bðàÁŽ:S§NÚY¨ëi®2&«¢' á£è/¡N@D@D@D@D@j‡ÀèÑ£ÃsYRqð\ýµMD@D@D@D@D@ªJ@ÂGU j(aÎþÛßþæžy晈Â{ìá¨R»£ƒiAD@D@D@D@D@b$|Ä€hUD@D@D@D@D@D@D@D@D@D@D x ü¿âºf." " " " " " " " " " " ™$|dòКˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@ðQÄOSÈ$ á#“‡ÖD@D@D@D@D@D@D@D@D@D@D@Š˜€„"¾xšºˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@& ™<´&" " " " " " " " " " "PÄ$|ñÅÓÔE@D@D@D@D@D@D@D@D@D@D@2 HøÈä¡5"& ᣈ/ž¦." " " " " " " " " " "I@ÂG&­‰€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€1 E|ñ4uL>2yhMD@D@D@D@D@D@D@D@D@D@D ˆ Hø(â‹§©‹€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€dð‘ÉCk" " " " " " " " " " " EL@ÂG_Šøâiê" " " " " " " " " " " ™$|dòКˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@ðQÄOSÈ$ á#“‡ÖD@D@D@D@D@D@D@D@D@D@D@Š˜€„"¾xšºˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ€ˆ@&ÿ%ãP±âB.IEND®B`‚tpm2-pkcs11-1.9.1/docs/illustrations/policy_model_nv_objects.png0000644000175100017510000017575414535673717020501 ‰PNG  IHDR ü?zDsRGB®Îé pHYs  šœ iTXtXML:com.adobe.xmp 2 5 1 2 †Ò®$@IDATxì˜$UÕ†É9縻äDp—$I’ ‚ˆd ˆ(þ A1 A2‹I*¢ (+(’U¢Ä%.9çèÿ½³uvïÕ5ÝÓ©fú;ÏóÎuï¹_¥{«º{&›Ìf¬€°VÀ X+`¬€è“gý Sx†ø„˜&Ës`¬€°VÀ X+`zIw4ØkÅîâÑ^x'Ç «ÔéìØ}Y+`¬€°VÀ XŠ*pµüÚ°¢¾ z·bò¶Fâ7ƒ~wzVÀ X+`¬€°-P€7!Ó¶ 7Q @,@þWPæ,+`¬€°VÀ X+Ы Ä<¹WÇß¶qOѶ–ݰ°VÀ X+`¬€°V §ÀT¹tšôª/UÃq+`¬€°VÀ X¡ª€? ÔÁ=ë7 Û]Y+`¬€°VÀ X^WÀ ^?<~+`¬€°VÀ X+ÐA¼é ØîÊ X+`¬€°VÀ ôº^€ôúàñ[+`¬€°VÀ X*àHÅvWVÀ X6)° Ú!|Mo“ÀnÖ X+`Z¯ßüÏÓú^Ü¢°V z '—¸þ}#qm,ï–,/­³NV–¿f’ÞB•óÏ^ÿ)V©}U ¶{]ÌœDi/©|´˜>©·‹âO‹¨÷”â_aã¡láÈPxL–w€ÂS²ø ÃæQäÁv›E¦C+`¬ÀW ®£i8ćܽá•ý o÷¼rÏVÀ XÎ)?9!=§ñ4æ?§‚tâN½GE,$žTü\1¥ø¸`Qók±¼‹ÅÂ ÊØFœ•D?c”¾YÌ$¶»ˆ‡Å÷Ä^âÁbáDÑÞYâYñ'QôFÂVä³b#±­¸H#f— ›°VÀ X¶(®ö"Þ–ŽÜ¨°V b /¸îí—øµf–wK–—Ö‰77$õÓhQ9o èãM‹‹%³¼;²ð/ ÃÒþ"ÿhã1x5K¯¢0ŒEÄã"$¼aúû©"äñÛWf»M³8ol–6+`¬@¯(Àu0O¯Œ½ããôŽKî­€¨¨ß–_é‰þÜd‚~aRé5ÅwMÒ¼ÕXNpÝ!Ë¿Q!78l§ñÁd?VøM1J,$X„- mðFb«,“…Ï¢‚·"ˆÛDo0 o¼©y7ˤÍÔx‹²‡ ŸË²‚Ÿ(¼?‹;°VÀ X+Ðò+¾¸A¶¥37j¬€¨ñ¶¡è:xKægÔá-Ä:¢¨î‹YÝZåo©|ŬoAÆŠw‹ >RE›,‚°è/ßþðöc” ìŸ¢Ìâ H¾Òñ„í×Qç1Åg$Óf¬€è!☆=4üÎuŠÎvçÞ¬€°•Uà`y6G߉èÏnU¾°,žÛàQ¥÷´{§˜V°€ÁX¤Œ|Ôéd±À>?>˜ð—7´q¬xY|TPw¬Àéu|¥%~ R[Y‰ÛIiAÿ«Â¿eñ#ò¥x›°VÀ X¶(0U[Zu£VÀ XÁ§Àr9Þb¼Z‡ûï©Î³%õžTeÂXHü[ð¦‹zͤøv}9ãÿ¬ `¥$=Fq¾³áßb}ÁGª|dk'ñKí#ø¸×i${AñobŠì¥,ó¹¢BçY+`¬€h•铳Vµév¬€°½ ß™¸>Ç–5~»òY°Ì)øÝψ÷ÿ¿ƒ7# EÆŒ6>‡.~/n_ôsª°Y+`¬€¨¤^€Tr·Ø)+`:¨“ù¼EŸÆ"M<òx{±fŽy“rE'Û<(øbúnbñW1Nð=¸P`¼ÁHûëËÔŸøRøòYÆh…´õ¼Ø\¬*xëò9q‹H-|Nóòñzêä·qÚ X+`¬@à LžmQt㉲†õVÀ X+ÐQx“Âÿ÷à äE×óŽ:ãά€°ƒP¢k§çÂmÚ‘!¬Eo“ÀnÖ X+`¬€°V ò x.ÜÁ]ä`uPlwe¬€°VÀ X+`z]/@zýðø­€°VÀ X+`¬@ð¤ƒb»++`¬€°VÀ X+Ðë xÒëG€Ço¬€°VÀ X+`:¨€ Û]Y+`¬€°VÀ X^WÀ ^?<~+`¬€°VÀ X+ÐA¼é ØîÊ X+`¬€°VÀ ôº^€ôúàñ[+`¬€°VÀ X*àHÅvWVÀ X+`¬€°V ×ð¤×ß X+`¬€°VÀ tP/@:(¶»²VÀ X+`¬€°½®€ ½~xüVÀ X+`¬€°V ƒ xÒA±Ý•°VÀ X+`¬€èu¼éõ#Àã·VÀ X+`¬€°TÀ Ší®¬€°VÀ X+`¬@¯+àH¯¿°VÀ X+`¬€è ^€tPlwe¬€°VÀ X+`z]/@zýðø­€°VÀ X+`¬@ð¤ƒb»++`¬€°VÀ X+Ðë xÒëG€Ço¬€°VÀ X+`:¨€ Û]Y+`¬€°VÀ X^WÀ ^?<~+`¬€°VÀ X+ÐA¼é ØîÊ X+`¬€°VÀ ôº^€ôúàñ[+`¬€°VÀ X*àHÅvWVÀ X+`¬€°V ×ð¤×ß X+`¬€°VÀ tP©:ØW=] S¥3Ä'Ä4õlà:VÀ X!¢À;ǵbwñhƒcòµ³AÁ\Ý X!£@3×Î!#Â`Èä™Ãÿ+p<Ê ŠÚ–u•ZÞ m­»a+`¬@õ¸Z.nØ ›¾v6(˜«[+0äȵ3¡*sáÔ§!EFUD[JûÍÇ=Ü<0+`êP€§yÓÖQ/­âkgª†ãVÀ ô¢¹v¦:Ue.œú4dãU[€íü!+¾f¬€¨¡@\›k(Û×ÎIâ +`zPF¯©DE×ÑfÚKÛv<§€¿„žÄI+`¬€°VÀ X+`Ú§@Õ¾„^4R¯>‹Tqž°CE¢§n­›¯­PÑmX+PUÚuí¬êx‡”_~2¤v§c¬€°VÀ X+`ª­€ ÕÞ?öÎ X+`¬€°VÀ )¼R»Óƒ±VÀ X+`¬€°ÕVÀ jï{g¬€°VÀ X+`†”^€ ©ÝéÁtHÕtËfVÇK‹é»å€ûµV !¦Sí¥ÿ±¾Ö}—ózI1~Fn Ck4ŸkHŒÆƒ°ƒP~I O7†‘÷Á¿pнPŸÇ厛·”¾Mlœ5‘/g¾$F‹˜×›GD\+£Í(OC®Uùë`”ÿ¢¤ì •aEÛÖºgD»ž­í÷þÆ‹¶§ ´Žíÿ¡ø²+òƒzág_%ÿ麱ïÒ°§Òv"ÞL{Þ¶D?i)ÇEý*?ó9F5os‹7C.äiùÍJÏ$¶»ˆ‡Å÷Dú40ê+{²ÏˆÑDd[‹´¬/3ûó…,œAá6â¬,‹‰sÅ”âãb q–`RpŽ8Zàï{âÇû?Á ,µ½”8Ap³?1+`¬g nf”…cg¼³ˆÏ‹CÅâÑŸ=§ ÔMíQ%˜(Ü(èëbq¿@Ë/‰©Å1‚qb£“8‰W„Í XÎ+°¡º¨ÏS/n0ܰHs£åæLüŸ"n>ŠöÙ4úûª œ›}qò¸ R'üOõ£|ê¬)òƲ‘¢Èß´þyYÝ&™,p!a,PhwûÈpXiØWyu8¿=i[÷ˆëÝïä 0üH Eç5×’»ûp+‘·ôšI×+®iˆiEZו8>6U9×¾EÇ''ù›n\Giƒ7Ñ&yEVtŒzeeÔ)* ‹îÑn„á[ÙxYhPŽÆhv–"‹MD‘ʶULØÏiØŒ‹i;o¦=o[¢ÀT%e.²*0LÄ.žŽ…ñÔo9Á‚"n¨µn^ls›`rÏ‚§S<%\]¤¶S–ø±ÂoŠQ‚§uÜDÂx3Bßë¼±Àh‹‹Ë>â±»À¸ï-(K›ôL‚‰>¾…¿_,!xZF?ô9¿à†Ènõm]˜Tdq³«X1Ë» ){Eñ´ß¤ÈQ+`* À_åÃûb ñŒ ÍÓ÷C‹†¢óš‡/—Še²ržôײ)U°‘˜Np=x[Ù?•¹’`bù‡,Êú-¥œYÄ’‚ë×Ç›×(¬Öµj|éd“m¦H½¶¯UvJÖv­ò¢{F¾ýõÕFøV6ÞUm÷Ëú, jù~mã¼Î+?H7c­n¯_†ü¶S ùz€PàAuò7q¥8F¬%Þa—)²¿8V¼,>*6µì>Ü)6» <5LÍñ¶àIX´÷yÅS{T ú>XÐæ´"½ñpS;0"¹ðá,=\azΑ•ÍB‚ƒÄlbV1Z,-¾$6G‰¢Åˆ²ûìVý'aññÙ}‹-¢‹féû¯ÄÜ‘áÐ XÊ(À‚ëÙª‚óž$LÔ—Û‰G¶Èø`Âßx³™^W&f‘›þMðÀá+âQf\›éFˆþìHUø–¸$«øu…Óeq‚Zת¨ÂDÿ \«ÃU$½Î±àJ­ž{÷‘´1iŠ×ïÃY½Ð86ÛU®¥,Ãúó3ê9´V`€ üOÛå`SMm–÷´­º /רGé„>õ¶¨üˆl›ŸdãiÛÂJGým?4«Gû— >ZE<Þ€œž¥É˳’òX ƒ#Ÿ<%aS+ÛG^>d¡ñXVoç¤ð YÞã ©þ§zì‘Õù½BžPÒ×çv‡ ý1Q䯲'‹7êþNж® ï1¹cBBþö‘á°Ò °¯ò4êp~{Ò¶î+p©\`_¤çâaY×¢óškÝsYæä-½fæËH§åq]á¶H•Eûr'ý“n%,¢Ønum¦×Ö¨GXtŒò²²ZÛ–Ý3¢Ý÷²ñ¢)cy^ 5ƃ)®ãäo(úóSUlP =–#ÞŒ[ÑF6Óž·-Q`ª’2Yv(ÀS3lÎñAÍ¿L¢ËJã \Tž^‘ψ÷O¹Yc?LþwLÔóv»2Þýõßîe"Î,|>-°MÇ}eÔ £ÿUÄtâ“Yæ?rƒÃðsK±¼xKps_A`ˉëûbÿ­èQbw±…¸E<*¢ÿ“ç‚i³V Z üYîl%xÀ9Λá½vø·HÏë»”fÌ5ê Áu£•ö5FÿŸh°Q®ÛKˆ¹Ä+Ù¶µ®UYqið5•ò )µÒD§o,Ýþ­òÒ·*7+}+/šþIl"¸–^#Ö¼M¹SüMpÅjùùêøbÿµV`  x2På¼ ¤“î"EŠÊïÏ*2ùN tÔ'äFÀÄ|1Áb‚'Tõ>%fW‰q"ìBEö;nNycÛÅRb1V‡E8>õá¿£³,qszFñÿgfeáÿÊJm>)N?ØÆbG1L¼)¸Á½$¢ÿ™_S¤6¯O òÏ«‰&3?ß©E[áOZ渰S€‡"•ÚÃJü[Ì,XˆðŽ+Ä›"µ‡³Äp…éü€øˆ¬ll$f³ Þ`,-ø®Ææâ(Á‚¥–ݪ‚yx»Eû‹ŽONø{²b¿,²lVÀ rÒ Ì ŠÝ·VÀ X+ÐÓ ŒÑè/ùÉ;¢ü–?²-Æ}_ð΢‚Ç{\ð&d§ ¹ã¿`Λ‰'Ä£I~DßV„ïy`K >Žu€àM ÆÂK<ï)ýlÂóTE;|¿$æ(ë*Ά78Ï ›°CDÿiyº1´¼¤mVÀ X¡¬@+®{­hc(k<”Ç_3Ð`™èsLÜ"ÂVR$Ž ³DA.äcPÔã»|t ˆ“·›À¢Ï)~®`ÑÃ÷4¨ÃÂcÇ,þˆB¾ËA>>ñ¶„Å éW‹¾£ÂB‡2êÜ&X8½“¥P˜ÚÅJPoû4ÓñžQ€}Ÿ§™ÁçÛ"mk³U½*~´Yn7o¬€˜ @+®{­hc‚CŽ *~.oÙÿŸN¼þ~–—ÿB8?UKÝË“ºEQ!O‰8®øŸ ±ø ~ôå(·#?| ÎäSç ±‡ÀÖ±]>üb_É&[^!?ÅÛ³9VL#RcáCÛ¥™Ž÷Œùã‡t3Öêöšñ¥g¶­ŠèUñ£gv¼j¬@×hÅu¯mt];P9”G0P›K.)X Äøèß#É/<Ò–·z ´úº×êö†žâ-ÑäY[ˆž·(Ëç·3]?Ú9F·m¬€HhÅu¯m¤>9n¬€¨º­¾îµº½ªë×Uÿâ ^]uÂ[+`¬€°VÀ X+Ð xÒûÙ£´VÀ X+`¬€°•PÀ Jì;a¬€°VÀ X+`zC/@zc?{”VÀ X+`¬€°V  xR‰Ý`'¬€°VÀ X+`¬@o(àHoìgÒ X+`¬€°VÀ TB/@*±ì„°VÀ X+`¬€è ¼éýìQZ+`¬€°VÀ XJ(àH%vƒ°VÀ X+`¬€°½¡€ ½±Ÿ=J+`¬€°VÀ X+P ¼©Än°VÀ X+`¬€°V 7ð¤7ö³Gi¬€°VÀ X+`*¡€ •Ø v X+`¬€°VÀ ô†^€ôÆ~ö(­€°VÀ X+`¬@%ð¤»ÁNX+`¬€°VÀ XÞPÀ ÞØÏ¥°VÀ X+`¬€¨„^€Tb7Ø +`¬€°VÀ X+Ð xÒûÙ£´VÀ X+`¬€°•PÀ Jì;a¬€°VÀ X+`zC/@zc?{”VÀ X+`¬€°V  LU /ì„°VÀ XÞU`N }Gqª˜1‰¿¥ø@lKm4<ÙðuÅÿ(žLòct19½ž8­†ó3+ ÁÜæây‘· •±¨ø§¸=_è´°Uàê.Og=ß[ÞÒ6+`¬ÀPV ×½V´1”5®úØVƒìC"i| ~ÿY>#®Í þ¾8I fû¬œºÆ¦Tþâ)ñˆ`±…ž©}O‰·ÅÄb+a¼ ´úº×êö¯²ô¼*¢WÅJﮬ€èqZqÝkE=¾º:ütÑÁG£óçFcr~²m(˜|Ïžä¶hÙ„·#œ«‹Y ŒMDj·)ñã,ã …g¦…Ž:Z}Ýku{ƒNÐN:ÌEÉf¬€°VÀ 4§À²Úü¿âhñ˜xQ\"æa{+rxCÜ"6y[\ÿ³‰ÉÅþâ>ÁDZ˜@¯/–ôµšÛH>R4]d$!“ñËÄ4bUA3QzWÜ-F lEq½`±ò‚ Ûa{б‚m»Š¹cZW`K|ÛŽ„lq—ø8 Y- ÖRÙubkAý/ ÚD'ÆNŸµlœ ^ÔÙFà#í¤ã\Z™ÿJ ·V ó TeÕW?:¿Ü£°½ª@+®{­h£WõoÕ¸™Ø³˜ä®—Á˜ÅÆdý=±¯`ò{¼àcQ+‰ô HßCeL¾¿"Vç‹×Oøï´vž"g‰üaÊçiÿË‚ÅÇwÅ+âSbyAý¿ ŒôrbSÁ6,<æŒï;b)q¸Àÿ9Å­âgcá@½sHÈhã51½(Ó`c•¿#ŠucÇïŠÝ‹¢§E-c;úF£ *-©¼uF ¾+b¼ °ó43š|[¤mmV *¢WÅ6Ëíæ­€°hÅu¯mLpÈ‘) µ“­yªÏ¾áÅb´›\ÞXœ ÒEG¿Ae§ˆ0ÞŠì/ûˆg“h&÷¯ &ûØŸí73ðáQÁÛl¤àM >  NØŸÄÅæbÁ‘EÅì‚· ,t+ Ú™Y$b{Êÿ XH`ÇŠ‹úbå°ÁÏÃгØH ?Ìò|È>¯œ7o5^,6>#6Øbâ>q§xGì%Ø/ôcœ p¼äif$ù¶H—Ù&*|Lmç¼þuéÓ¶H¨2ÑÛUV?šß0m|•àIMÑxœg]| töà\äœäܬ¢úÙŠ6íÓõ'U€I9û y¿hE“ê§Ä×Ejg+q¹XAP· iœ 8å"c1„› 6m&üS ŒÇüê,"Xl„ñÖƒ~y»ñ°`b ,XÐðÆfŒ >¶µ¸QðæƒmO,D–ø¿°Àµ¾±¸G|N`el¬rÚ =ìqm_lâŸíE“¼-  Þ–ì-Ѐ±Ý+o{°¿ˆ«ÅÔbwñ®ø“ø° N8^ò43’|[¤ËÌ‹ë_¤aaÞeʺl@ œ¡­6Ó hkod¬@«à\äœäÜ´Yv+°XÒÁ"YœI3“ïHGꎋDAø¬ò˜Ô‡±èàí¼$~#vLÌ)ÞaÏ+ÂbxÓ’N¦ÎRš7$ÃÅq’c¡þ%1»XOÌ+N,Žx³°º˜C|C0‘ßCðÆäÁbi&qƒø‡ØE° áÖŸï¨ ìIé<%¯õ0XÓŠ_ 4ØA°xZBDßSœ… ®lj‹›ˆ d#o3©E«“Ikt&U?š-O[‹Æá<ëâc »Ççf­è¸hÔÏV´ÑhŸ®?©ñdŒ²Y40q¿B< ¦ˆ×“ÞÄ>‚ý¶¾Hßz¤ñ#TÆB‚7 ´w’¸WĤ|MÅßÌX\aØŸ9?á£Ê;Yð6`%A›cíòÖ`´`!1£`Ï›êáï¶‚zLîY±XÁ¾/8Ç~OBö‚ôIdV¦ºP?l)EXDü@Ì,Ö,ä o#”AÝ£>¯!øËX°ÄM‚ÖBâW‚rêÍ#lƒOö_žfF‘o‹t™ÕwÞ‡÷I-Mú´-*,½]eUñ£™ñÁyõÖÊZµóhæÜn×¶Eãm´¯V´ÑhŸ®?©±¹DÙöÉ=â#ãMOÝyÂO“w>2„-/ÈãÍBg2}®à©=m^'֩ݩĘ4Cñþ _S&ûôùœ8JÐþ‘‚Ñã‚2xP06ŒþSXlÌ$0ÆI}ÞŒ`,HïA"³2 X€°˜JísJ°£>Òu•(Z€(»ï‹ò/+¤îëâ炱¼#þO ëí‚r|ÿ» ï.q£`1f\ °/ó43‚|[¤Ë,_¿¬®Ë&*ºõåD" 'Ví\,í?âë½5=…ß?|a°&Ö¤ÛÇ@kÎòÖ¶R¤I£=´¢FûtýIˆOëù¨ÔÜ“OHM¥Ø‚bò 9ýGøxÊm;å êH³¸Iý˜KiÚÃxñ€˜DΦSz¸˜%—ßH² Ð ?§¬£êŒ1Ž¢MØ7Íø^Ô¦óº£@«¯{¶—¯ß_¯¡[Ÿç‘HÃn )í?âÝð£™>Ãï4l¦=ok¬ÀÀHÏÁˆ¬¥ön¾¥a£=¦ÛF¼Ñ6\¿9ÒHs-Õ·õªv¡xB°@±Y^S ®uiØŒi;/k/êDXV×eèÓ‹§6+`¬€°V 9øhб‚ütÂø¸}m.ø8•Í X+0hˆWÀ¬Fòeùüv¦«âG3c chfüÞÖ TEÁr.¶ÂÏV´Q•ýf?¬€°õ(Ðêë^£íåëwcÞ\NU«Ó§›ß€Tm·Ø+`¬€°VÀ X+0„ðdï\Í X+0Dà Øür_€NãÍo#5p¸8S$øyÖ¡d{k0|;µVŽy15¼gÚø ‰ï!?$¾6âæ'Ty³F6p]+Ðmx’§>å}è{MÓ Gšès°úRb˜èÄ‚”Ï-/+Š~ÑEÙu7Ô¢–¿üÊ’‚_£jV…±õ§U4,çb+ülEUÙoE~¬ LÆÈu#Õ­'/mŸ'øîÄ•Yü…üÄ,?Ý:Œë#šÌÓŽ1Vm×úYܬÛJø¼}%=kÌ©ETý1¿Vv¼â7ÖÄ ®Ýêë^£íåëj1;è|èÖ×e$Ò°ƒ¾Lè*í?â I$üNÃn¸þ‚:Å~Z1Œ'}ä–eðO¡^áëÊo*°uDäçÃ-Tv\A9¿k?ZL/òÆÏþ^ðûëÑÞ_ '?%ùix¶òÃvQ„G”?¥øD?+yºà·ä©C_7 ~ë=,úùRd(ä)!õÑ‹:Ñé߈áæì¥©wI.?m#ÚyDuv|{E¤O'«4uÏykdl´L¦þ#è/o<é¥NLŠö'åüö~Ø.ŠÔÒŸßÜ~ó!7ÅnXÞÒU´VøÙŠ6ª¨Mø”.:˜X³iƾ¡9¶G%°¸ç|á<<ɬQt⸙  cö¤»GÇÙ>Žûˆ ÍíF¯£ùúÍõÞ;[‡n}#ŽDvCŠ´ÿˆwÃfú ¿Ó°™öºíËÚÒÈYÞa 7ÌâÿU¸— Œ§Ü”ùôX€<«ø99VVš í_#~$~!žä*òvª2(c"ÿeqi–þBŒÅåä§ý}Qi )^œÁž‰ü&‚ Ã5‚:ÿøta–~Mᢋ~X Åïô]q¶‹HÔÁÚ¸/+G‹DØpEèŸmÑnm0n|ù•xO¼/–¿l‡اiÆ‹2Eû¬Ñ±Ñç1"úà YÞò ØŸ·¨bªÿ™Ù†{)Ä¿Zú!Ûîܬu‰ÓeÝ0|ÈÓ ?úë3ï#éF­m4Úg£õ÷×,Ô9ç9ÎÇŠCå0Ü#¸q,n,°t²¤Ò\·¸NqnÐ.ç( îÛÄúbAÕDØFŠÜ.¦\«¸Žäí#Ê8Zħ–?«ªÎÍ‚kç×3‚ëÈ·ÄãâUÁ¹cû»âøÉµéuÁÆOüÅoÚZL`+ŠëÀÄ£ú¹U¼#ØniÍ#./ŠçÄ‘‚ãb¤Àš3m¬+Ø/øÌ~:CðP"쫊°/Ø¿ÃE³v8V\(h÷I±³À¸~²¿ÂfQä.±–@³óij‚ûá%0|Æw|府êÈñA׺wÅÝb”ÀÊ|¡|mq½`ß(~*Nج‚c?S ¬¿}α¶«"Œ…ýúøŸx@  ×qŽ+÷¤T+%‡œ1ö<Í 2ßé2Ë×/«ë²‰ „n}9‘HÉU;KûxçzoMOáw¶¦åÆZá‚‹s%›‘å¦p¿,Îd`F}IüH ë¶¿AYLXi',Ú<'2’ðŸŠÓ}0i Oú₎=%(_˜DΦQš:å«$eÛ*ÎÍþD±¥ œ›õÃ~¨ù܈°è‡¼Ñ}9ãoè¤ó ð…›Äå‚:ÜPÂð¼;²ðËQ 0ú‰6(ºAP ±¨à&NßãFòMÅóÖèØ¢Ï¹Õí£QÞj-@ÒýÛÔ£ÔE+ú„˜|EY§Ãð# ;íC=ý¥þE¼žíÒ:±]¦åUˆ3QÄ¿3ÄGÅÅ›b_1±b2Hš…Àñâ}±’H i|•q}E¬.ÎLþfœ—´Æ5àb1»ÀÎÃ2+ó‡Åm0Ñ[M&H3‘ÝX윥G)Ęð>#6ë |„=Åâaq¢Àþ#þ*Ï(ñ¢`!„ÑÎKb1JÜ+3ö7ÁõoÝ ÚÁ§‘¢c¦vÐúLñQ±»`’‹OØŽâ±½ ürñ_‘¿L­¼åk0¯òóÆ>d‡ Ú=[ Ýt‚ëÕó‚61| Í5ëJAÿöɃ‚‰;†Ïèº%R¿«4ãø”ÀÏ? ´ÅÊ|YPåÏ'‹U Nüf‰ýNÜ(Ö› ®ËG¬¿}ަaßTä6Á>ÝMÐÇçÄpQ柊‡œ1ö<Í 2ßé2Ë×/«ë²‰ „n}9‘HÉU;KûxçzoMOáw¶¦åÆZyYÕñ¡Öde•q³§óË‹ƒé¶Ž Œ‹ù… £ÇâB÷cÅ—k‹kÛì%òv¸2(ƒÇÄ©bCö”"”qÓJû[A饳²ûÖ²CTÀöqAzL^È¿3Ë ŸÄÕYˆß_Ô9@`áËÂã“}·Õßð/²¹¹qf¢@ÙßEX´ÁÍ}¶¯ &Tó ìû‚íÈ#dò7RE'X#c£ “ÆLúË"o )ƒ2nÄXìOn„©þL—Ô-Ó_Å}6¥þR¦èËéÞŸð# »çMížSÿ"^»vqIl—†Å5»—{´ºæÜç ;V‘87oT|t(œ\Ü.N\Ûœ¹ø JŸ"ÂfSd±€ØG0éŸJL/8ÿ6K Ú%ʬ̟OhCÚ Œôæ$2c¡ð™,þ´B®3a\+ÎŽ„ÂÓÄo²ô. L¢WãÄ÷F;õÅÆÿ9XÁÍbQAÿë‹0&Áä­3×GúGϰ*Bv½8],–±ªÂè_Ñ 6¿b÷ÕàÐ µ&F¸6ý{brÂõh„òæïŠv©ø…&è›ëo×iîqX-)C/täø..\›±2_¾¥òÇEz|_©ôÄ‚>-B®ëŸØ.¢lŸ-@Øn A»´•ù7¾ÆÐúËØó43Â|[¤Ë,_¿¬®Ë&*Ч[z!™XäX/(À}+q¤àæÎÓà&ɤŸ¥¹Q¥¶¯hÀÍ*¤uÒø³Yb®,ü˜Bnê7 #k &‰°«"’…ÜtžÊâܼw gi´7‹§A£cÛD fÉÁ¯ÓDè˜e+*ÂГÉV¦ÿøþkʸKÅéqÈcl“á •Å ¸IqŽ21«e”“r}úq–&ÿh±‘˜AðP† !‹|Úæ\#Rã\_F(|@¤Ç7×NŽQ´Áx¸å“+Î>™^| Êö¹Šë¶ZþÕÝ€+ZN('\'úrU .r\¤ÃfÌ"\ì† .Ž« ž¢|[p±]Fl'ÂXP0‚,¼LáþâXÁ þ£b‘ÚTJp>CÌ/>!ÎØÞ"&õ¤Ù>ú"#âFMé1‹¯LX~ آムãÂÿð„œñnÔ,nVøÐŸÈ*<–…_ÈBò/¡íŽY~G*“1nfØ×EL(ÞPüh2ecÄUD ¬Ñ±-§6f ˆÇÅçº~G&ÊìP¦úCézô/kÓeV ÈŸŸÃUðtVÈœs<5ÎßqiF.þ¬Ò 'y÷§Úa1Â[ÎÉíÅ/×Å·Ä-b‘·­•A]úˆ?ùöM£ÏYâT1»àa“þÔþ—&Ÿ\0©ÇRýÒx+ÆLì¯ôœöÁµæ`1M×¹ÍiR›U‰ŸÕ€7E–sZç—Jl%Øw\ŸoXzl¬¯ôQ}¹ãÿäÛœ<+;KႱŽ'‰ÔòÛEÇ û/Ú!Ÿk1†6ز"ô¦øÆ‚{âY¢Ö>Ç—©EØ|©Öò¯Fug[î(^Hºã{m—d ¯’tðñ,þ„Ÿ nl\ðyjsŒ8N`éE›'?\̃x£@=lŒø‰ø†8Q`\èS›J ž|Þ-¦׉ݳ´‚I~{?ú‰ Ãc‚ ø¼b'¶";&Ì×g™LÊâßûeñ(Ï’}Á!úË~n4eÆD€ña´ÃÍ€~0AۉЌÉ~j'+ÁÙmÄýbN±’{1‹<aøÞÈØh†â=Y{K*ü’ø®`Ì,°·Çþ¾¦XhOø†¨Gÿ 8bJXBeƒkНˆXœÿZñ=“2ÞXp~sÍ:_Բߩ`O±–àúðC1JÄõïÅ·›ŠÑ" Ö牥ým+lóºˆ?Ú¬)ãZÆö1¥ø¼XMÌ(ÊŒkËmâ§‚ëÙ|"®çŠöY³c¾H­,(Ð(öß¾}-ÿs‚½ûbq 8Kä¯1LŸªןFí2mÀ$ëìÙÙÆ÷)ü¯8Z ×Ücõú3öÁ‚c€í¾,¦Sˆ2CŸÄ÷Å"âëb]·ˆŸ êp¿ø•ØQô·ÏÇ©Îö‚{Ç‚ã=Œû#¶¼èïé«è?V j pAÈÓ ó>lV•1!áðåEÁE™i&”Ã7~ÒÏ ê&˜p’·±X'‹¿ª pÊ–JŸ•Ç_ɾŠ۟E"gUš2.ˆÓ7ƒgÄ´‚å·Š´¯Ÿ+í*(Wü^Üœ¤WUû£ m#¸!“æ¦ÆM£,½ í­4u¿°Ô—›”æI*åÜfŒŸô_Ä4 +NþÇD´Á&Œ å›E†ÂÏey&yEÑzÇFû—Šsþ‘F³%Åo³ô5 C?´Äb>¬xª?q&õè¯j}“&ú„þnØÔo§…iØÎþÚvê_Äm+¶KÃFÛhw}&ƒwgàç{â7‚s ã\bÒü– œóŽó[^7G.>£Òëãœ×׉õDjw*1&ÍÈ✇‹ÐŒ6èŸÉ&VæÏÚ*§¿8ÆçRœv–a\Û>“%žTÈ$2lŒ"ß‹„ÂZL-þ$§³|ÒùvöSÞ-[Bpý¤.¾Åù>Rñ°fÆL\¯¸gÐÇâ*ñ´À¦' ”ß.>%š5®M%,¤8í/šä¡c‘ä­¨8>P—ûدû +Óñk*1<§øQ‚¶ýù²ê<,¨ÿq¾¸X`쟛þÐþ‚Esûœû ÷0¶ã˜âÞûœc”ûýq,ô矪 )C“<Í 0ßé2Ë×/«ë²‰ „n}9‘HÉU;KûxçzoMOáw¶¦åÆZá&z¦x_„/(¾¹;B.ÌQþ²âßÎ ¹ÁF~>ü¢ÊXÏE/lEÈ‹‹cäÎ/þ(Ò¶îVš~°˜°§åįî+ÿ‡IpZoœÒqƒ§ÆLâ4ñ†`[.Ê\ðñ+ŒíÉ›J&(ÔÏ/@—ÇTÆ„'WØ…‚²=I$öÅÉG›ðs¡¤üð¬<4¦( $õŠ¢õŽ-|&ä&ÇMðÓYƒ‹+Dó¨s¿âËde±?£, gËêô§?Õ¦±mLβÍ;„iØq'êè0õ/âul6I•Ø. '©PÄÑòÉ5ÆyÁ5ªÈ8'“ÖÈcò;gAmqØ© ,²æQdYAE6ŠÚi$ŸfÏ6@‡ùظ^”Y3cÆöçz‘1¡¦ýªzL× 3,lÓc… ÇA™-¢BîèÇÒ5ŠÿL¤6«Eû§lŸÓ^ú0+m¯—ãéõ.âÍèm¤aY{i=â¶úÝújG" ëk¦µµÒþ#ÞÚÚßZø†íïµv\x—,¸0æme,.FˆZ7µÌ¸ør³Ÿ»‰¹1 Eã¡YƱ¤˜™Ä³fÇÆ¢`†µþôh»­Þ.=#Þê>ZÑ^ø–†¶›nñFÛhwýtÒî¾hÁÂ'DLµY¶(À¢úuqŽ`Á{–xOð&ÆÖâZ—†Íô”¶ñ²ö¢N„eu]6Q>½ú[ÑO¬îØ`Uà-9þßçßQÙ%å­.zY B3Æ„¢Ìxës_Y…A\ÖìØxû3¶Éñ÷§“Í{ó!ªÀß4®‡:8¶9Ô×·ÍomV  <®Æ×_Û Ò· ›h•<ÄåMÛÚb„xS<&þ"Îoˆ"ãáã‚crÁ[UŽM>Âw¥¸GtÅbõ–†Ýp$í?âÝð£™>Ãï4l¦=ok¬ÀÀHÏÁˆ¬¥ön¾¥a£=¦ÛF¼Ñ6\ß X+0˜ˆk]6ãÚNÄËÚ‹:–ÕmEÙ(5ÂÜè/>§²Š¼ñ©…¿Š|ýHó€f_QëS%*j©E¿}F" [Ú[¥ýG¼ÎM+S-üNÃÊ8gG¬@)žƒ¯âð÷4lÔÏtÛˆ7Ú†ë[+`“q­KÃfüOÛ‰xY{Q'²ºÍ–PéâƒOCðéÑ?!ß?W„P$_'­ŸÆOÚFŸ}ÝD" ÛÜaóiÿ/¬XáÌð; +ì®]³CVôŒx¾¥a£~¦ÛF¼Ñ6\ß X+0˜ˆk]6ãÚNÄËÚ‹:–Õm¶l/5ý<­8ßsÅxk±£xOD9é°‹‰|Âãä{´Û>z•–óÑ®v[ô××O$ҰݵŸöñ¢zUÎ ¿Ó°ÊþEßø“•Ÿ•ì”ñys¾\Ï/®„qˆ‹Dä9ìœé9ñÎõ^Oá[Ö¿õøšé¶o´ ×·VÀ &âZ—†ÍøŸ¶ñ²ö¢N„eu›-;S D?W4ÆG¬øÎ••³˜ˆmËòÓ€_x{PD½›ÓÂ6Å£¯¾æ#‘†mê·´Ù´ÿˆ—nPÁÂð; +èæv‰>ú3ù—ÅVˆ­&xùà3ëˆt_¥ñƒ³z¯(ä3”a¿U„zg‰YÄïíŶQœ/x(øleº­’¶)û# ;ÔuCݤþE¼¡T9¶KÃFÛ(ªÏOåŽ?Üàî<}{W¤}9^[´B3´»F %𢭭5 ð‹‡ˆŠ1ÂÇiíã±Ö¹Ç)?K†h‰¦Uþ5É¢±Èå[£íåë¸ã:6ïãT"Ôih…fË 4DK4}I 1ZWÍþ'‡ò4ãc¾-Òe–¯_V·Ù²åÔ¿p•?‹ïˆa"µß(õ/I rñáI=êó­vZøÔ×G$Ò°×j;í?âµêV5?üNêú:ýb€ö{dƒ‹ÈÆJ?“•í“•Ää†$/.ªÄ[‚6·eño*Äþ)(ã§¹€ó„áGâ Ý'¸9Ú:¯@zF¼ó^ôßcø–†ýo5itÛˆOZ£¾Ôªvx^)f¶ö(€¶hŒÖhŽö¶úàÒ‚ë;O†k=ÙU‘­IÐÑÍѾ*׺4lÆ·´ˆ—µu",«Ûв-ÔHÌc¢Ï4|Gå\SÂnU$ÊùDF-›Jˆ¨»K­Š-Ê~úš‹D¶¨Ÿ†šIûxC T rø†p«g\8U#E{^Mb\4I¿–…W)L- L.LTú¾â´ñ~Þ­pj.(ƒÇýo(¸`S6Od8옱_Ò°c7ÐQê_Äؼ¯jl—†¶Á93NðäsæF7vý+€ÖhŽö|DÔV®ÀçUü¬øš˜¶¼ªK[¨Z£ù«‚‡qU°ôzñfüŠ6Ò°¬½´ñNØ,êä+âJQôF?X0b׊ðñŒ¾œâ?\ƒ¢áÖÅÕZ–}õ5‰4lYO 4”öñ6¯DÕð; +áX8ñ'í—ÉÆ tlh ´œ8›A‘GEÔI,DX pCŒrÂãv¦ ÝîWšôe›TtD|ÒÕH…oiبgé¶o¤íU™vzl7²½ë6¯Àj‚}·góM ÙÖÈøHÐG†ì«?°ÊÅ7oú»mq­KÃf|JÛ‰xY{Q'²ºí(cQÈ5›Å×ïðã^ű“EäÝЗSü‡ùIÔ#\ª¸ZËr£¯¾#‘†-멆Òþ#ÞÀ敨~§a%ë'bÅ?6ÞX€œ§ôq‚ý2VÌ$°uy·¾?Ì©xj{)A½k’L^[.)Fâ´Å…€z0—øqßJ¡­³ Ä~HÃÎzP_o©¯oˉµb»4œXZÛCÅl·Xy5—v@EÕÇ#‚}b›T>Zò–È_›'­åT'àã‚ÿGt¢³’>Òë]ÄKª÷[m¤aÙFi=âí2ÞP°èãø‡µDÞöVFêçI>¯ÖÂý—ɶôÃ|¦~öõ‰4lgçµÚNûx­ºUͿӰª¾E¿~­A¡ýJÙàb—³fñ&#> ²§4õ9A»|L+l:Eøå^ƒÒvØ]ŠPweqVçã-¶Î*žƒï¬õõ¾¥a}[N¬•nñ‰¥µcÛ¨èa1_í*.é°싇ûÆ6^¯+¸ULoA*£û‚}ÂDzZm|dy?±n? ǵ. ûÙ¤´8m'âeDËê6[ö°ˆ~X0ämeDù«ŠO!féwFîSz„Hm%ÒïtâÍVøÙçG$Ò0u°Sñ´ÿˆwªïVõ~§a«Úv;ý+ÀÇ¡Ð~ã¬j,@ÎÒ[dåœp#E,@8a¯Ï‘~εh¢ê}¿¶E·ˆÄé‚¶9é§W Êy²ië¬èž§³Ô×[ÞGÒÚ@Ú˜A<"6h´3×o»쓇Ōmï©úÌ+ùˆëŠÕwµç,ó1w‹´ìI¥gí¶è³¯ŸH¤a»dÝì@IDAT(j?í?âEõªœ~§a•ýj¾m¯¡ý7²Åd¡d guP¸nO÷WÄ¿˜l ’<¢|Ôë"¶!ä¤^[L.x㚸­³ ¤û$âõ ¾Þ·4¬oˉµÒm#>±´8öeŸQ\äÜ (À¾aõº](êu*<~öÍošðoYm{Œˆ{u\¿wî§Ý´nÄûÙ¤´8ÚHò ÒzÄÛi<0ºYäû̧ŸVGxr”x_äë¦é±*_CtÂúúI‰¼EY>¿éªøÑ̇š··N<"˜ø¯ÖAgfU_œô,6[G\+xrña묃å\l…Ÿ¶ÁyÂÓ.nþ„4Þ,O:|]qñy?8§¨ËyüŽàæ{©x[`ˉuÿK£ÈöQ&OúîI 7R|-Á‰Å/Åãb„àíèU"­¯dßÄUž&Þ$£CÆÃ fòt³ï<$†‰Wš ÞcnCõ±ŒàšÍ1—ŸŸÿ¬˜G0Éû•¸C„ñ¿]çÇôßÄ%‚7âsKŠÑ"ŒcŠUg‹—²L>2óÁqþX–Ç,ÇÁ¿Äå⑬l…_ÎâÐ÷•‚ãË×á~@ðÖž7ÿÍÚÌj€¾/ÔÙØ¬ª‡–»‰ÕK¶¡<Õ,_µÑë^~û|ºÑöòõ'Ï7Øâ4Ço=¸¶q¼¥ö®gŠˆØ÷iù(%Ž+ މ0æ+¼1ÙO¼™m'ÑDž6÷_Ø|Þ‡Iœ,Ü¢z™Ca ÕSµ1Uuö7‚nÚéꜛØâÝt¢‡û,çb+ül´ nþLRºaV§Ïç@œ§s'‰0÷ &zç &r/Š›‹Œ°]‘M¡L4Ù%+œVáyâmÁ¸‰Ó/ûõå÷ˆÛÄ”"lvE¨wvdt8ÄWöU6£* ÅëÌW5®_õ7ø:Êë9æØïLÜ8nòšï¬<,”¹®?”¥7WˆO‰ÿŠ_ˆëÅ{â—ÛMp¬ÎB"3ÆE_ÛE†ÂO úa‘3½àØç˜½JŒœ,V¢_&ò´q·à\‚mà–¯Ã1Î"…sk[Ñ c,ì«2cr¾ž8G¼!ð»?Э̊¶/«ß_Y£íåë÷×~«Ê§RC‹‰õÅ'ÅbQQÅôÆbÁz6hCЭ¯éH¤aúì·É´ÿˆ÷»QÅ*„ßiX1‡¼;3h„Ë žÌtÓUç\$lÝQ =#ÞOÊ{ ßÒ°|‹—¦ÛFüõ&æ\ªh~’5±´½1&ƒL¬Â¦Pä@ÁD‹ ?• žÐÎ)ÂF(Â[ žÖa,@¾¡úLzF‰0nâÿúü¸`’È“À°Sa’úeÙGì«Z¶¶ ˜ü¡ 5»BÚ´ƒê úáa±Ë„?µ»•8-Éàx¹CÜå}Oá“‚{OØ¡Šp.‹dqÞf`lÏqõ¼8U„ý\Ž}컂…Â(Æ1{®xUÌ-bq±â©}S އyDQ7±à>Õ¬m¦ØWE6\™h1V G#pÞÎ'æL– 4!ŠÚZJùK‹e2˜ ¬ V+‹Þ>­*V«‹5EQ{£”¿®`²¿ØP0égŸ¯¯,[ „n}U#‘†u´Ñò*iÿoy'mn0üNÃ6wéæ­€(P =#^P­ëYá[6êTºmÄËÚ`rÏÍ·–Ÿ âüææ7v&yÛNÔcrÑÈä Õ?AäÉÈÑbά€ àk‚ ýó$y{Ñ-c±¯Rc"ÆätœxE¼'ÐäE1Ôìv ˆ‰c³Öß1Gû,<΃ìw a,.Î,Â8>öÊÇ)äÂYš`6ñ-Á„+~Ð?fÀû¡,à_â1¥xIüDämVe¼,ÄÙ÷ùÈ*Y>îZufRÙ‹âpѬ­¤ØWa,p>'®h‰½€†i«C¾cÕ´Í X+`zKaî£2¾0{E\'öωEÞþe0á©×fWÅ“мýKv "›‹SO^éIi·Œ}„>ØŽâ«"&—LòRcÒŠïL’kAýZeõäwz{žÎ?B§-¶ü17¯Úÿ”ØZüU<%v ìDñ}öqŒþRñ]ÅârÁqÌä›ÅDí®%XäüC\*~*ç bEñ1\Ì*.ycñAû+%øOìCÞz", fEÆB›cÉ¢ÂóØGøÌÛtcÑŽÿ6+PS/@jJã+`¬ÀU`FìÅ.ŽŽ7[fýO§ÉÒAâ-1‡`’Udo(“'Çs êÖcLȰWÆ¥_WéÅU‚úLè»iì#öv¬@›÷ÅÔ"oÜÏñ½ìI3Û”•÷WÖéíéïþ´ÀÊŽ¹}Ô>o®èË¢“Åa‚ô ŽÏŠQâë‚ãﻂýr«`"¿³XOüX0ñÿ`áÈquØAL#X€° ~XÜ/H?!Þ,.–X­ó€ãbx_ñX ¥Æ~ü´èO;üâükÖè8.§h¶1oß[ ÄÁ“†ÝP í?âÝð£™>Ãï4l¦=ok¬ÀÀHÏÁˆ¬¥ön¾¥a£=¦ÛF¼¬ûTÈg¥»aL¼˜àóà©/Onþ¬È›¢hb4LùŒo±§`rXdL‚¨·‹ &b»‰¼-¬Œ³Å¹‚)}Z.¯Iöû*Œ‰)^&ËLNWìïZ“UU´v‡<çøhÖú;æþ«БE„®›)ÎBâ#"X³æø`›e>’ÆD|GÁbù,sA…Ô_W°¦MŒÅÃ…âGâ¯ã#Ôý ‰ãÍËh1« }ñ‘*XHðöe¬À¢NþcZ”Ý%8žš5ÆÏ¾ ãœc±v¹xOàã@à˜æãoãÄã‚ Þ¸0¾¢6Ù—÷Æv§À¯ÛÅ¿çõm‚ãÍâ&–7ˆëEQ{×(Ÿý‚¦W Ž%ªùúʲա@èÖW5iXG-¯’öñ–wÒæÃï4ls—nÞ XÒs0âÕºž¾¥a£N¥ÛF¼¬ n¤”Uhc7ðóKÚg1ð®àãFy;ZL¾gõ.@hƒ‰Œ¼}MïˆsLNNÊåu#É>b_åmJel".oŠ×“Ú¡fWh@Œ³Y+;æÖQãœ3Lö?–ÀäõRÁñHùÇEj#” sÁä¶h"ÏqÄ7ì^E˜¼>-bѽ¥âÏ ê(ÂH_‰$\Uqúý¬¨µ¸ MêÌVRgTVg+…Íûˆ}Udó)s?ñOðÕ/³¢¶Êê÷WÖh{ùúýµïòñ „n}©H¤a7„Jûx7üh¦Ïð; ›iÏÛZ+00Òs0âk©½[…oiØhé¶/kãH]V¡ee“ÁèöçŠðô˜EÈ<‚7 žL3™ÁX€^9ÇòJó´vØ'uÏK‹Ķâ%q¼È[U ì#öU™1 e¢vDY¥AZ¶ü>§¾—sg©}&Çyû–2X3æ):OÔ×S‰yÅi‚ÅßÜâPÁñº»à-Ä´bGAÞn"ì$E8.Ï …³ú!56Jò©»Œ ‹§‹i0µ œ´Ç´¨³¿âä¯!8‡^­0öûª?[I~*þõÇ^ªSfEÛ—ÕﯬÑöòõûkßåãÝúR‘HÃn•öñnøÑLŸáw6Ó^l;§"<­›N¤ñ(Hømt”8SüP¬ lV`¨(žƒ¯âØÂ·4lÔÏtÛˆ—µ±¬ ñ¶¬n«ËÊ&ƒÑ~$ž1>ŠÁ/Œx”¥!õbò…¨¬p3ñ°ˆºLîŽÓ‹¼ñÆäù̧р}ľêUã^÷²`RߌÕ:æh÷uñ‚ÆPÞû‚‰û"âJÇá½bq¼#h+êà÷÷DjÛ)Ayz\Rþwñ‚ Ôx;sˆ6i´˜Q`,J(ÛšDb,XpUD´[•oÓˆf YÈÏÕ@CS©.çãâ-¾åýUVfùú¤›±FÛË×o¦ï^Ú¶O7.pXÑN‹²ñ5:ó·*~43ÚvÅÁí‚“œ cĹAÄvÖF£ÅbœXOŒ[ŠËD'lur­à©ODlV • ´ë\l¥´Õ ?mcJõûÁ ~Œ¨²qxG<Ñ"'y£ÂuôAÁêªÚºrŒO­™÷ª]ªÿSü¨Ì&† &܉üy7­òFˆÉÅXѪãkvµÅ›˜ûDÕŽ…o˧5E~¤¬º MY˜í,>žÛ‚‡®ÇçòÒd^ÊÐ~ Öh{ùúÍô]äó‚ÊürQò¸&²¾M< RÛI‰%³ ›¿Íâiþ£Ê;-ËOƒÍ•øX–ñ…Ì[m“èF"O«;¬§½¼“8YO¨Ó®1°¡mžñ”„°»[§'Îâ†fmpÛ%TŸ1q’5kh²¢`Bõq³+^\°‹ö‹ó>¬ËÒŠë¿ÄÄ·Åê¢OÊÔLG­hÿvÔ:;k…Ÿiccù÷ `Òd«–ìö û¨×m ð¬X®×…¨àøÙ'ìöQ+lq5r¸+¸¦}]”Ù@®{­l/ßYÛ)[[åû(JŸ¬z3&ð…ù¨wv|ÊG&e=C‘Øö§‘Ùâ0Úïk6iØâþêj.í?âumX¡Jáw†{¼Jÿ¯8Z0É{Q\"x]ÆšW®LoqJ ¬li‡'OxBÄ6‹ƒv¥ˆ8injL,7OŠóDºbg¢¹—ãõí}âñG1\`l³¿ ì-Á |}}_Ðç±â1‡(jg¤òèÄê}g1›G < `Qµƒà­Ê"b&a«_Ž‘…ÅGÄâçâßâ9q”XH ãØÊSEßó>’nÔÚÆEêè°F;sý¶+À>aߨÆ+ðM7Šé,He`_Ü$ökƒGÌ1F æ6e6Ðë^­6m/_¿V»ͯw‚,BÂê]€0×Ì?\*.,zhkÁÂã+‚EËù‚vg¼/ .L__Eí°0ÙMàÃçÄpшqÒ°Øy^ŒhbkŸ ©i.FèÍ>f_WÝ8¶òTÑ缤µ¶Á~}T|¶Ñ]¿m 줖Ù'ìÛD~¬èÍbö‰YŽuIîß<ðäaj7m ×½Z>7Ú^¾~­vš¿¶6Lûø¤ÒK æ;›‹ëE”3WŒO“\䟭xXšÛ…YÈý=ʼɉSõdì¸4 ŸcÂA¶–"Ô]Fð„g´ã)ÀíâÁG½9sqž =-¦aÜÀF Æ÷Äc¡p‘Ìxºp¬¸UPï5ÁâãÀ>],–¾TúqŠ›M‘ý¯a9xyó1ƒÀÊÚYBåŒ)Nê×chv—¸T ‡­s °_OOˆí:×í€zâØÊ3 †Ú¼QÞGÒZ3m,«Î¸†lÛh§®ßrX²/Ù'¶+ÀýêU±ò‡‹œÓ!VT?Ï‹ý:Ô_Y7Í\÷ŠÚm´½|ý¢6›Éc®˜ö±h®±¹•æsÔÙ$+¿:Éëoò¦ê.žmGàˆDA]E4üNÃp<&ñ3G†B>·GÝMÅSâë"5žËE­È *#jÙïTp– Ÿ×Å:‚þyÃ2…›K‘Ó¾,#˜'á]Å?/(K?ª¥äãàýý„Ty;Y€ðQ/tòÛDä.D?¡>»u¡ïz»LÏÁˆ×»m'ë…oiØhÿé¶o¤ n@l7º‘\·¥ |W­1¹^¸¥­½ÆX(?'¸M3ô†WÙ¡5š£ý.¢ ׺4lƯ´ˆ—µu",«;²þ S«QæhÑ<ld¶W%Îul’N@“þm³¼U[$‹0©gbé(§î¸H„Ï(/Ãú¶ò>“ÕåMŧvžZ_'æ·‰5D•#²“‘ÇÅÁ‚‹L'6ÏŠ´OÞ€ÐOøþ²âaeíDzCžz/6Ô»‘ëµEkÕêê‚‹Ç—mp+ð€Üçiçþ%bIaëŒh扥ÄcÂV[‹TôQ±µà!Èÿ‰„­=  -£5š£ýYÂÖ]˜¿óŠEHؽ©#<^uÞÌêm pÇ:¶iK•X=¥a[:ê§Ñ´ÿˆ÷³IåŠÃï4 'ã Èe0ŸW\!¸ùO%¯‰'ý>‚vÖµÞ€¬¢2^Á±èàsù<z_ð†ã åÂñ’øŽÀ&wˆ»Äš‚¾ñ…7 LDhÑZbñ]1NÌ$X¨}1!=G„•µ³¨*1>n¼3Æ5¹”OÝuk”;»; 0yâxã8¬š¥ç`Ä«æ#þ„oiبŸé¶o´ êO)÷&îu¶ú@+4C;4Æ„§]ñ¹½{ÅÂ4Š'ÞlÏ¢aoqò“7G.®äd_Ô¥|¬8P¤v¨ï‰ù“ÌE¿R°MÀ"bñkH'‹·å·‹O ŒÅ7Îwãà"µžÀ8xÓ¾¬Æ{› ýD™ý^…ç”UpY×ø¼zfAËþ¬’Åq†Uò/|Iý‹x”ÕÆviXï¶Eõø˜&בqâ>q¬àÁO?q£SÔÖLìÐ íÐ-ÑmhmkN4ÜP%ƈ;*îQé9áxm=Ð ÍÐnŒ@K4­òñY´?åò€­ÑöòõÜq ×V~¾¢ôª·JÒFºÐHçci> ©‹šhóŽIQtPYìÈ4ŒÄ„z6Á›†"›J™ ŠFžÞPwþ¢Æ”w¢¸¬F~¬(†‰¢þ8@çEÆâb΢‚‚¼²v ªO’µ‰R¬ø‹ü›¤b‹Ó¨½¯åØJéé úá-Îáâ4ñU1\¤¶¥Ô)²Å•I?S&…#;‹ãÅ/Än½±  SüËÛ®Êøt>³éߨ};ÐO#]¤ç`ÄÙ¾Su÷4l´ïtÛˆ7ÚFQ}ŽÉ•å+ žžØM¼i‡ÞµB´B3´CC´DÓô|WÒÖC p¬ØšW èœk¦ÕFÛË×o¦ï¢mó 'Té‘ bð`ö{b6‘ZºÐ([€°Í:"ˆþWĸ~ªx;,Úïk;iØŽNûk3í?âýmSµòð; ÃÇtyí WRãGŠ·Åzíì¨ÍmÿRíwcr;«úe?Þ-®7´|El!°éÅù‚ü«Ähq¿xIl.Âþ¬õŠì³Ê¤ŸøÚÒŠß+ž¿W ÚçÉÔbuñ¾8X¤¶µ´“ö›–·3Î"ñ†vv0€¶Ñ"Ïšiû&yI7j­h£Ñ>]ß X)0s|`= í­Z}Ýk´½|ýV«_€,Zg,@hòt‘ i/@PgYÑN ÷Väg"ždG~»ÂUÔð…bÏvuÐD»Ëh[´BⵌIù ‚Ï&vÚb²MÒ1þüC\žå}WáëbT–&à Q{UÄ[®F ×k»[Eúvi%¥ß?!Õ[‚„ ¿µ9Ôi§M¡Æeû²ýµ]v.ÕïV^+ülEÝ¿ûµ½¦ç«­yZ}Ýk´½|ýæG4i k+™öÑ®6ŸÉõE¿^€H„ÁdéÁñÁä§|ý´:zEðdŸ <ß…á£KùW‰+*ïÑ +Z€àÇá‚7|„‚0ŠN0¶}YšåÔ»ù¸ês܌̶Kƒ•øZ–1ƒÂÄ_²ô1 Ÿµ>.—Ukkp‘ZÿL[{h¬qtÌÓX ©÷‘t£ÖŠ6íÓõ­€˜9ÇÖÓÐÞªÕ×½FÛË×oµÚZ€à÷D~*ÒKÆ„wò. ø]è³Ê]²˜Ìó¥ÔfÊ›(ÜHð4}A1VtÓøß¹àç ßuø™ˆH±Ø(²•Ùè„|nmƒ.õ3cTïT±¿à{"çˆnûiÉn:ྭ€°VÀ X~`N“·¯(ãvÁÃߎ“<ë<é(ïéVZ«Û+ò­Ýc(ês0æñ,>¾”êõšÒ|¯· ,B8 ¶¿Ý0ÞnàßA‚/~ßã cBy­ݨ²ÑYåz?‚õù¬ÍY²íÒ`%~žf(¾¸À‡Oæò»‘ü‘:= ×è]òÔ¨ÚÕ켤µV´ÑhŸ®o¬ÀÀÈ9>°ž†öV­¾î5Ú^¾þÐV»u£ëÓ§Ð6+Ð-X`¼#ø8ßù–˜O|JüIPV…õð³t,&à1ö¼"·ˆ¯FF®ª8׺"É«'úOUâÉÄî•ù˜Õˆ\þ{Y:Â\qG“ÃÕûËf¬€°VÀ X~ȯâHwÃÚíG'ÆÕî1tc¿´£ÏeÔ(Zñ%'âµlvðQ¦éjUhc~¼áÍC-¥‚wŹ‚qðæbsÁwY®ñ‘?Þ€ð1©•sð³Ï ´à—¬°Sßaa3O:ñѵQ"µJ°ízif—âwª_^U±Ár.¶ÂÏV´Q•ýf?¬ÀPW€óÕÖ¼­¾î5Ú^¾~ó#êB·¾ÑF" »!CÚÄ[ém¶ÛÂï4lwŸC½}>‚µsÉb‚ý¸u?}¯£rÞàÄ>]ñÑ"ŠNÆ$ÊÓ/•ç |Ïähß¡> šDÞ†+ƒòuóN¯¡þxST%KuŽx•ü _·4Œ²zÃtۈ׻­ëY+ÐY8GmÍ+׺4l¦Õ´ˆ—µu",«ë²‰ L¢W$ÒpbÕÎÅÒþ#ÞÊÞi³Ý~§a»ûêío¯òö êÆÛÞ‚ðeõV‘\R ñ&¥í¶£ R‡´£á&ÚLÏÁˆ7Ñ\Û6 ßÒ°ÑÎÒm#Þh®o¬@gàµ5¯@\ëÒ°™VÓv"^Ö^Ô‰°¬®Ë&*0‰^‘HÉU;Kûx+{§Ív[ø†íîs¨·ÏwExÃÐß›ˆ¡®CUÇ·¢{Vð ^U²ôŒx•ü _·4Œ²zÃtۈ׻­ëY+ÐYŠ~¨³ ÞâZ—†ÍŒ,m'âeíEËêºl¢“è‰4œXµs±´ÿˆ·²wÚl·…ßiØî>{¡}>æô¸˜¹;ˆÆÈ[šEÑ—æ»=ŒôŒx·}*ê?|Kâzeyé¶/«ï2+`º§ç¨­yâZ—†Í´š¶ñ²ö¢N„eu]6QIôŠDN¬Ú¹XÚÄ[Ù;m¶ÛÂï4lwŸ½ÒþèÅ‚ïHت¡ÀåÆ_o©ªfé9ñªùˆ?á[6êgºmÄmÃõ­€èŒœ£¶æˆk]6ÓjÚNÄËÚ‹:–ÕuÙD&Ñ+i8±jçbiÿoeï´Ùn ¿Ó°Ý}öJû|·â"Áÿ ñ"¤û{}¬\àíÇLÝw¥ÐƒôŒxaÅ.g†oiبKé¶o´ ×·V 3 pŽÚšW ®uiØL«i;/k/êDXV×e˜D¯H¤áĪ‹¥ýG¼•½Óf»-üNÃv÷ÙKí³ð¸F ïB½4ð •Ÿ'þ½àÿ´L]!¿ò®¤ç`ÄóuªßÒ°Q¿Òm#Þh®o¬@gàµ5¯@\ëÒ°™VÓv"^Ö^Ô‰°¬®Ë&*ЧŸß¶YÁ¤ÿpŸœýޏMð?:|K„Úÿ[<*xóÁÿ@±Y+`¬€°V abõ–† 7Ò‚ Òþ#Þ‚f'4A›í¶ð; ÛÝg¯¶Ï¿Aðÿ'>'ªü4^î Zc·à¿´ókd[ˆÁ`é9ñ*ú¾¥a£~¦ÛF¼Ñ6\ß XÎ(À9jk^¸Ö¥a3­¦íD¼¬½¨aY]—MT O¯øß$òeùüv¦Ûíí·{\íC;õŒm39%«‰1ârÁDùiÁ?ð{YØêS`U›_Ì+F Þx)øNÑ1®ìÊY‘Ÿí>ÿ"B+ü,jc ¾x+`¬À`V ™k|Ñu´¬½|ý²ºƒYÓVûÞ§[ˆ•‘΢¬Õ—µ×n?h¿Ýãj÷Êôëõ²9$“åÄ‚Iô|‚ÿHÎBÅÖ¿ü÷g‹7Wþ ä81Øl°œ‹­ð³¨Á¶¿ì¯°V Yš™ã]GËÚË×/«Û츆Òö}º…Xyh”urÐíöƒöÛ=®v¡“ûÃ}YÁ¬À`9[áçÛÚQUü)äÁ|üØw+`—ü0Ê´M¸Üèµ8_¿ÝóË&†V©MûtóSáJí;c¬€×h+od¬€: ø:8ˆöe¬Öò«8†eN»ý ýv«Ýcèäþp_V`0+0XÎÅVø9L;ŠÔù á7!ƒù¨µïVÀ 4ªo>X|ì.mtã¤~£×â¢úIsŽ–)“ñ"£¬lûV—µÛÚo÷¸Ú=†Vkîö¬ÀPU`°œ‹ƒÅÏ¡zœx\V Ó tb.Òé1 …þ½Õ :td St¤wb¬€°VÀ X+`†Ž¡t~$^€t^s÷h¬€°VÀ X+0¸ø¢Ü÷"d€û0>ŽTô)ÊØô€6k·´ßîqµ{ ÖYT`°œ‹ƒÅÏ<„æÔð¿&¦+aÁ¬¬Ýß™áÿlVнYüσ‘b[±x½¹ž°VÀ X+`¬@wà‹7yºáQÞÒ­´V·Wä[»ÇPÔç@óVІøËB»BìÚÿÍ(›2K·*ØG ]š4v¼â'éF¢3«òÄ«â¿â}±¯°Y,çâ`ñÓG•°­Q€sÞV=|-îà>ñŠ]Á®î’Os‰ç3ßæS8[oW0‹ž·E³˜á?@/#–‡Š£ÅìÂf¬€°VÀ X+Paª²êk·´ßn«g —%ŽðÖá’,½§Â±â]ñˆ7ŠN¶Š¸N¼.nÛl-AþÖ‚EÅâ6o/˜¨ß#fØVâF±¤àÍ‹Ž‰·Ä³âׂF1–Š}ž-¦ØŠ‚>ßÈøƒÂ9Vk|´Eûo úeÁÃÚ¹B¼-ž;‹zìjUTdˆf>Ò•4çè W€ã7O‡”÷‘´Í X¡«€Ïñjî[_‹;¸_ü¤ƒb']-¡xú”ž‰ûÁ›SÅ)byq®8]Ì)æ7‰‹ Äùâ£bf±º`2^ÆG~L`[ÞŒ$!ÛRŒÓŠ¥ •ýÅSâbq¬[S‘MÄÞb'Á¶Ø9‚EÒºbSÁ"ès«5>|c¡Bß_/ lmãºJñ_ˆéÄbò°pÂöÅÆÿ¡=K &yŽZ+`¬€°VÀ THxš]!—zÚ•w4ú÷Ä ‚§ûG äï!xÛp’`•ÎB7»‰ËÄÔâ‹âûØHÜ">..,~/>)¾!R£&ð÷ ÞŽð£Íûyû‰Eö3ñ7ñ„XIðVcnQfwªðÁ¢çÏIE|=$K3f:¼ù¡XYäEÆ‚ã½RcQ„6+`¬€°VÀ X *àHµvÊ‹rg;ñÁ„ÿ5qAgâ?¿¸[„M®Û„ý5" Y ðQ¤+Å3âLq¨àmo\X¨,"ú³‡’ | ‹·%ØâRÁ[ ÞhðÆb –öñFÖý E™½­ÂrfTú­\ž“VÀ X+`¬€°QÀ îì&ïéSzžöc|ÔŠ§šUl#N·‹ÇÅb%ÆÛÞŽ ËÂtâ}‰òŸ׈1â7bGq•`qSñ¶%o,†Î{‹So!þ)Âj/ÊóaQÔÙW ÏWVúUqˆxDð¶(Œº3 òmVÀ X+`¬€°T`Š úÔ .Ó ·,8Ö{ l!qØV0ɾ. ùXo–LÊgk‰¿‹…E‘Ý¥Ìûßµ M>¶Ä†Q±8)²÷•9BÌSTøÿì Ütcýÿíkö%ûóX“H‰²3øq*ŸTìë€O´fó³ÍÅŠóöɉ۶2cö{)eî+6ú?Ò­ÁEÖRð pu BP BP ècþEleÆ#Ür –«´ªý5Š­9¼• }a_?õ¸´/O2|Š ^d»àÐ\´xñív÷Â×@ÛüFÙü>…}—)!u1³pQ^ÔöT>ˆ¼í>ÍØ?_¤^HyðéÍéà¶âÇÅ|ºbþµÐj~¯§ÝE‚}—†ÃáçÌXmó)ËXææ8páä6j¢a¡€ øš(ÓÊ”c´ „ë@¼Çûs߯±xöK¿ˆ^w½xÓ·;‡9ÙÏÍž^ÌEÛ$˜¿ÉkÁï‚ä ƒ&Ýj¯öIÈBÅ(>Y"±Õü²n•dçÆ‹‹c ’í¾SÿñJ%ÎñÒ'Æ †Mßóaý§@‹{¸OÒ[£7Cjëa8#w+ËãU‡ó¬Ò_9VËý¢e£Ø¢.˜H Ê{qPâœH¯˜k(P§½¸©3þaõÇâîÙ~¸‹ÞÃéÆP¡@( „¡@( „¡@(0ž Äd<Õ±CP BP B ¦@,@&Øé†¡@( „¡@( „ã©@,@ÆSý;BP BP ˜` Ĥÿwøî„è/4çþÎ`Ë7&5Ʊþ©`ѽ£ÄÿKrV±E>~GN:ì<™þÁû:Ü.º÷ŸU¾ëœÝ ÄY§á;˜H øžë?âXÜÃ}2[ÇŠ¡z«Àz ÷d…Cæþ–Àï‚únÇU>~;ý;íãÓ¢¯ÀHÿѽSÑ?BP BP` â#XcTCó«ñy¸8ß@úOäþc?ÿ+¸wàï‡/B²µÉ\{ÃàPÿ$|î„ÇàHûô$òo‡´Ý§ÉßOÀ àâs¸ÒÓ‹“¿ímà9×’¿+ȯ ÿ?‚dÆú äþmûW‚ó½6dÆw.<7Ã`leKã[¯^–ý¯ðÀ) vŸµÍ?ö-Êþ·õ±L?þw÷}àá±:G{( „¡@( „¡@w ôËc§ºãÐÝ6Ö¼÷cEëÂTxüž‡v\ o(°¯þ¦ÀÆEþ Òuà EÙEÉæðþ¢<•T»vƒ´Ý4ò޹3èó°b‘_ŸTû=ضµìXøñHîßþ6¥|+ úkåŸæ™ngàCð:8ž…ɰ¸púØö¾¢ì"D;ÎÉý{|‹g‚óÛ œûßÁEÈ+ÁøI› …íÀ¹®Þ€U¨+ÛíTKØ`+àk¡L?Ψ£å°P ^â=ÞŸû6ŽÅã°_úEôºãèÅ›~¬9ìÄþ]æwð¸­øÉÖ"cÝð¢ÚüR ™ZÞÊBa޹߶È{ž/@ò í«iûlÑï/¤_€Ùá ø øÔ@» Þ5’›~à6>mÐR\ÍüßBŸoôý3+Ém°?||Š17$ÛŒOw´F å¨wÞ.>’¹úpQ8—ôûEþí¤ÀœðS¸¡RW¶X€”̲¯“2ý8“rŒ–ÃBP`xˆ÷xîÛ8÷p¿ÌÖñb¨Q^$ù%xGþð.½¶ìh2Ó_‹ÔÄ' e»·¨x®Hõ‘ìù”iޜչÐp! ý¶Ÿ*xá ì>-ð£N¿…v¬™·ÍçñeŸòLŸ~¸(x ’]Af1˜'U”ÒÉEùª¬þ"ò¢}Ÿ*½ü¨Ö3RdÃBP BP ÆKX€ôVyŸr^{—ÞßAûÇh2òt$-2|RR•¹²od~té àÓ‚³aø´`{ð#Y~7£kæßm]lå6‰‚‹’Ga9˜^M'-40Ÿ˜h.Ø\0i›ÂapAuø±+V¯mpܲ¹Ú¯\åP BP BzðÂ/¬w ,ÎP3ÃMà¿¾Ì 7ÂåðMðBy ðBºn»†ûp6<Wçáhd>Ř ΧÛN›ÀËàSðJз‹çù°ÍRí ?†fæ“ëá«à¶k¡0O“?Ôî:ðãbšóº§iAcŸ°P BP B)ð/Æ)Ó£¡§¦ƒå*­jbk5‡ÙÙàtH}."ïÓ˯…•á²¢ìõ©E~ é†`]Z4.Z´­FšÌ'Û/Òý^Dy;›/„}Ìv0©1,S”!}.Ê&ÉŸùƒÀvŸÞŒåÿúüÇ0ý${ŸþئOóƒvœ5’›~üWSw¸O0~ê‘ÌŽmù8©­ô6:íØNÇèÓ× ø(Ó—c´ „ë@¼Çûs߯±xöK¿ˆ^w½xÓ·3Ÿ,Tìç™I—(íóE(ûD`ì&± Ì~l*- ÈNgKRšsºš± ê4WƒnS©{ lÐUGvÞ‹ý Æ ÄÙZE ¡À0(à{>¬ÿˆcñ8ì“~½î8zñ¦¯{ãðòèjÈ[ØÚH¯lò£WßíÕ€1Nß*0(ïÅA‰³owt ˜¾çÃúO8÷pŸ4»ÝÃb¨!Wàæç÷Lze¯` 3`¯^ ã„¡@( „¡@( ´¯€ÿÑ­ÆSÛhÞü­;ý×=¯ºçЛ=£„ƒ¯À ¼%ÎÁEÄ BþP ×"ý1ÓÁŠ"ŽÅ=Ü_ñ3¼=;† BP &–ÃïѰ1ø}«°P èo]ìöwÄýݳ„v.|nïß0#²\ô4 Ñ!µåýëÎׇþëžWÝs¨{„ÿP`X”÷bqúKs› ËŽ‹y„¡@(0 ümüŸ`3jU‹gtì ·]ºïÑëŽCÿiÎuíìºçPWÜá76å½XEœÏ°óâÉǰ½‚c>¡@(Љ> éô×4sÿU‹s‘o¡@|«…865zQWè>\…¡ÀW üÓB¸ 3H¯ø¬AÚ[k( „¡@( „¡@(0à Äêw ãndõº†ÇP [|oN$«ûã¦I˘k(P¥~*"ÞŸÝ+Ÿ.é^ÃqóO@ª—Þ_b BþS Þ›ý·O"¢P B ¨@,@ªßéþ œ¿Ä0Ñî¶V¯dx ªQÀ÷¢ïIß›a¡@( „¡@(0Î ¤G€c¥¶^†Xwñس—{3Æ Bv¨â¸W…vb>¡@(нq-Ò½†z¨ú¸Wµ¿jf9¤^â ÈîØ˜V( „¡@( „¡@(РĤ÷JÄ „¡@(0l ÌÅ„^þ×ú8÷ÆÞõ‡zVE#܈2<|ìTfÅ\Ž'ùLíyº5~šÍ÷[´%-mû0Û sƒVŽ/m)¶±æ;/}OAÚþOäW­QöKqŽtjñǾaÝ+öMžvã5÷“òÝø‹m[(?ÃÛBœh BP Z(0k“¶ü;”o¤ÏWÀEÉá°ì ?/ò©ïe”¯ƒdÏ™ô´ä(Ê^l»x|.„k ·¼¿ÚkÁ[a1ØR;Ù—ìeä¾ o©¦y&mß,ž´åýdÎH…"½´Ù|Ë:E¿fZ¤m§Ñï0nç¶Ü @ŠÏE×ãÌEU²VóuŒßÀTø ü|rå8¿‡U!ÅÑ,Nº„…¡@; ¤•^ž¶³]Õ}òñS¾Ê1ô „¡@?)ŽuyÚi|ù¶)ß©èß¹obõ.?¹¡¨÷ ȧ‹ü¯H½³®}¾“ÀE‰>ì×Èî¡Òöü …ëÖùD¡låþ^,{'ß'sBÞžžèKÒS™VO@òíÙdÄòx’OëY«ù¶jÓW£ö¤ï‰Å`âKq¤ØZÍ×…†í×ÂiCÒãàNØÅAuÛ¦ÿ°îHû1O»ñšûIùnüŶ-ˆ' -ĉ¦P BP K\œ¼.þ –½Ã¾?¸0Hö~2ë§©wÛ}ʑ̻ðóÃ*àÂÆÅÅÐÊ|Bã"i.xžFög*×/¬/Ýá'ÛԚųr±…éϲ­}±sVÞ’üBYù€,?–KÑW ÜþmÅvåÏ‘Ôç‰:°ègÒj¾ê ýžÉþÙ)˧…ÚXqf›D6)ð/*Ë4êWw]9ËUZÕþªŒ-|…¡ÀÄT Šã^>&¦úÝÍÚ‹{µ÷¢=·ü ˆõo« ßOÞa_ÒÝô¼Íü÷@KwôËíûŽ6ÿÇßfý¿VôLíËRNO~B~?p /ÔÿTäW -[Ú¾Y<Ég¹ý¡ÂQ³ùúŽfmI‹fí—²mzZÑ,¾Mé“bk5ß#ègì>YifÍâHq6Û.Õë?¬{ʯ±nu­Ú_÷3bñdˆwnL-BP Vž/¼—Ï¥óõ>¥X\¬]ä·!ýðJð»Éö'óÝT }"Ë›=¼ˆ_ÞŸ„¯ÃÓÐÈ.¡Ò'÷Ã`¬‹c}í{Á0–5‹'mç÷#¶HRµÈÍ }ÉžIÒ±´ø5}οãS•×Áfð[HfÝ©@ú ¼>+7›ï­EŸ³¾fçp²…ÂÆŠ3õ‹4J ”š¥æ(†¡@( „¡@n+ê]LÌ ~¤j2,ÞM½Ž?&ôø1xá;/xñêSˆd~Dé¾Thú‘¢tAí‚Æ8­ A#{•©£ör±»øpQ`ücY³xÒv.ÎZÍçfÚÏKKéXZL£ÿ7‹m\dýl ùı[ßl¾°¶|î„9á XŽ…dcÅ™úE „%bR$Š¡@( „¡@› ÜB¿ëÀÈ%p%lÚ¹ðü\€xÇ x>šà[Žäfšé¤ï,ò)ñ#^̧ .@mÔØEÝOÙÖØ6îÐGϣŶ¯"MóÉÝWSfŒ´S-t·HÉç©”ó§*—Pþy©O£ùþ‰>§ÃàG»Î†M`qø+œ[ƒÖ,ÎÇF›ão( 4S  Í”‰úP BP µ/Ðìò£amð¢[ó äÉ~¬Ê y±êzÍ‹ô½á ðBW›T0R(þÌšþ•åo,òŽwZVŸgóþy}ÊÛžú¤Ô6?Úå‚bÈë)Ngy[OZt¼ŒÞëO·ÅL3½œrù£Xy—Ô6‰JÉM-R{^ŸÆ^=¯$¿V©ì“’Ÿuyìæû.ú} ¶÷¯æ‚Ò}ú,¤8šÅI—°P hGߌeÚÙ®ê>å,WiUû«2¶ð „S*Ž{Uø˜˜êW7ë…qµ*ÌßÄåÔ¯“!_XP ëSÜO«€¿¶U¥ÅµH5jV}Ü«Ú_5³R/3ójôfHm½œzÝqè<æÕK c¬P ,ª8îUác°T‹hCÁU ®EªÙwU÷ªöWÍ,‡Ô‹XÃBP BP BP 艱é‰Ì1H( „¡@( „¡@( ¨@,@âu „¡@( „¡@( „=S  =“: BP J¥‰VÆËæc`¿Ø?÷xㆡ@½ øÅ›2õŽØØ{9†F_j¼e{µUûkoÔè „¡@sª8îUá£y„ÑÒÏ FpîÿÛy²¥ÈXçÿ±Ø¡ÈçíTüÿû¼ÑBÉv¢|/¤×Õ?Éï ÉÒ˜©ÝŸ#¾¾:”Rš×¾S`£"Ÿ¶ÍÓôÿ5üyá‹ÁŸ»µý98ü‡€B¾Mž¿‡¶A0cë^|ß§|7^“<íÆ_lÛBÙZ´ES( „¡@( ô·é—7%LÿÛúJáúOõ\ Láa𩂘Ÿ¹}ŒÂwàAðŸ'jú=æÛÒ˜ÓÈ_þô° ýÁÿmr!Œe÷ÓÁ¾¹ÝNa¸ëp#¼> ³Ã×ᇠM…eÀÎÍð(„…¡À)¯öR~<ÂOcçi•qè7,B~R ?Þ¥|§ñ¥íò´SÑ08œ°Ó~÷)„‹ü ˆ³:ì³½l°|‚…Ìæ ïñ¶m­¬Þ¼uƒ}Ò˜Ÿ&Ÿlû”ÿù í.l›é H³EÊIEß/“&sN‡›ÀEH2(úÝ.U HjÌaÝ+ ŽeºñZöû©5ÇØv–1Ú£9BP ú_?â’p`ƒPO-ê|’ m3šÌtJ‘¦d2þs/ô/O•EÞ'>•X1«÷ÉÈÑð[pañ;ð‰H;¶2~–ql±Ñ«‹ô'Ejâ“ Çõ9úq¬°P pâ#X¾#üP BP~‹ÁîàB ·_Q86‡åax΄Ü^^Ì+‹ü¤.–ÈÚV/êæ"õ†ær +cÙÂtxgÖɃí ɿㅅ¡À*O@†tÇÆ´BP &”/0Û=`Vð#R¹ÝJá/0¸ñ;gÀSÛ­Eai~}`~rÑvK‘š|„À'«‚ßÕØ ¾.XšÙe4,žáÓ -ù_a´øÒß#É .²ÂBP`ÀÈ0>•?BP ˜Ð Lcö?‡òÅ»¢œêlëÑdä ÞEö¥ärw‚OBv|©vô æ>™¸ nÏêSö2~ÏC[ü8ÖÞà“Í…–/xž§|_ÆvÀ’¿_’®QÞ@Þ…OpP þÅ<ÊŒÇÔÊ1X®ÒªöWelá+&¦U÷ªð11ÕüY§/„§3MfJ^èûš¸’­I&½N\0ÌŸJ©ƒ²Ÿßµð£[bÞº]@Kc^Aþ‡à¢ÇïiØÇ…ÇöEþ6R¿Ëa½1ù´ÄʼnåÇÀÅFŽßQq¡c›}.NÏå/‘æö öÛ.¯€¼1‡u¯€:–éÆkÙWì§nÔlsÛ~½î8âÅÔæ "º…¡@Ϩâ¸W…žM8ªToãÍýÿöÌëAE]ù áþT­}OËú6ʺ¹ÒëÊÿ ’öOc¦ö©óéÈ×À€É‰`½}ž„‚¶!¤íÊé®#=fšiuRŠ7mïäP˜rsá£wå•7æ°î(¿~ºÕµjÝÏpxèÑ뎣Ûçx)ÄCP Ç TqÜ«ÂG§à €K£Ì¨-ʆ«€ ’1?ºå÷HÊ ñÕOÛĵH5{£êã^Õþª™åz™¹˜W£7CjëåÔëŽCÿã1¯^jc…¡À`)PÅq¯ ƒ¥ZD ®q-R;«ú¸Wµ¿jf9¤^Ò¼†tz1­P BP BP è'bÒO{#b BP BP †\X€ ùŽé…¡@( „¡@( „ý¤@,@úioD,¡@( „¡@( „¡À+ !ßÁ1½P BP BP ŸˆH?íˆ%BP BP rb2ä;8¦ „¡@( „¡@( ô“±é§½±„¡@( „¡@( „C®ÀlC>¿ñšÞr |4l Ãö\ÇKÓ7èFgÙø\øÜÞ£Ø6BP ºS ýWð~ùïuÇ¡ÿ4çî”k½õïiÞ¬u—h BqPàŒùÆq·ÕU÷ªðÑ*Æh BêèÕµHu÷§§ª{UûëOÕú$ªt1Þ/¢×‡þÓœëÜÏà<ž|Ô©pøfLŸ„Ì9c›Ö¶Uǽ*|Ô6Áp „Ó)Ыk‘éÂBÕǽªý ¡äÕM)¾R–¹§X|äjD>èâ½Ù?û"" BP ˜  Äd‚îø˜v( „¡@( „¡@(0 Ä—Ð{§z/>úÕ»ÙÄH¡À`(Ðè‘ú`DQ†¡@( „Cª@<ÒÓ BP BP úQxÒ{%b BP †K˜Î•p7l߇§aFmQ6Ü Vƒ'à8^„~2uoø3\Õ °WPçOö«ËéÐoñRX(PŸ~L¡L}£5÷\Ž¡êOTí¯ÙLêžG³q£>¦W`Þ‹UÄX…é•‹R(P­×ãn7X|½.3j“ÙðÐçÿÂð<½´3lç@›¿ŠéÂË…ÅÛ@sþÚZà/óý‡“ ¬}ª>îUí¯ý™Làžý"zÝqè¿V÷áu1®iâq¸›Å‡ xaÿ˜ÇBaû“ú>ðXÚ+û }ªÅ`—Óö¢ÝÅÊ1EÞ8µ}àVð° <aí+Põq¯jíÏd÷ìÑëŽCÿ½°ºçÑÍ6acã;?sâ?g³î#E¶½[s?låùxGçÏà¬Ü>JÁ¾>÷5YÙÇ 4ÜÁ¬Ðn»w¹´ÃÀqŒ;ÙRd¬»4Uî÷‚õr'l ­ÌÇàö]¶è´é# {@9ÖäÛôp˜ÿ$óãÖyÂÌu±}¸’Ÿ'É’¥xR÷kç@IDAT{JOHH—€çÀ¶÷@niû4Ÿfmi^žó¾¾Nô»B±á«H/õ°Þ×·¡_?ΙôÊSÂí+ËcKùNLÛåi§>¢(ÐJ?êä"ÂãÓðø‘§—C²ÝÉ\Ç<oÉÜv7XÌ/ÚúàùÄmÕ¶Ÿ€¼~çBXû äÇ»”oëÿì™|äéöŠšJÈÅNùJhÓY;OÛÜ´­núí…åñ§|/Æmg ïyÑèsŽüÆy2h-ÿ6*òw“~ O¶ûØ8· )¤ùî”5”}NÛ­`ßü¢>Ѭ]ÿšíiœ÷ŒÔÌ4Syò±¢Ï¤ß£Á‘é§™ÝCƒ¾—…×ÀƒEÙ8µ4O:'–°ÿàö÷Ã"°ü¬Û ró¢]?îýÀ1ÒbD?ZŠç—äóñviýó’¤Ço³z³i{çS¶¼-ÍK?^T$;ŸŒu.@äñ¢ìkã›pcQþi?ZÒ%Oû-Î<¶”ï4Æ´]žvê#ú‡­X›F__×Â&^¤ÿ ´Áã«Ç±×‚Çé`MÐÒd òúñø¸$x\>ÖÝÁ›×=&zN˜´·}çƒ×ÁcàñÙã¢ÇCOÉ'óx¾rü½À›4n×jÌÍiwAàBèà¿ ™ŸMi»Ž„u¡‘­BeºYs,yùšóOv9Ëê“Ï!µGÚ\u+Ó¼÷Ø-e_–ÃjV _D¯;Ž^½˜êžG·/‡óp`ŒëC~áéAWs¡aûG!µ_H>Ù²dl |t¬y µîê"ý#i²F>ÞJ£ýO…NÛ/¶u{OPóC¾™ƒ²''Û½{•ÌE‰ñybifé¢ÜÑ?AÏ:7Š5kÑ#]´EƒOôá¢-iEvÄ–á¯mÀÊ#5£ûDý·*Ê)že‹r£ä/T>7€'YO¾ÉZmŸ·¥y¼¹pæâ‰ÑÏ'Ûöå¢ÍÄý~œc¡-Í'Oû-Ì<¶”ï4Æ´]žvê#ú‡­H ³N÷5÷J¸Ž…dï<6xHk´ù õ>˜Ý…íH:–4›öc8ÎLa.$ößÁ£`žOæ…OÁ]°¬Xà1øh5ææ´ë'ÿZù¡ÛL{íÓÈ×cò_áYðü£N{ƒcÌS]DÝ 뾓 llÔ±ÌØ[5ïQöe9¬&|±‡M<ÎbÊžD^sÓ?¿¨óBÓ“ŠöGH³óøšyhžpÒÔ“†ö ð?–;¡lž <Ðk>)(ÛXí©¿ìÍà@ð¢=™sxÜÞ]ÒœÇ/ ž·b û9íÆá‡7è»2u?Ëê'¿3¨‡ –Ká ylwHZY§©'åUáopœGÂÍ›uOfÎùjx5x‡ï4¸÷ Ÿ1OÒúsξNòE“ci?MFžî8ï´/}m´£m±y$¡@(0€ \™Å츶πÇZùÎxšÛÓ´¥ Rì·€wy‚À~{Ö̇«ëuÐ~¡Î0/Žõÿnð§ïXYç…ÿÔ"ïI+Ùýdl—tÒ܆¼ Ù ´{ õKéf#-£šÍÅ[nߥ¶÷D¤5o2õ§€Ú¥þêŸÆlý6íë`ygX½È_Bš,m¿lªÈÒ¼-ÍËÅÅ~ O9*òžˆï+òÉW>Gû»(ë73®2ÃcyŽ–ÃB*Xg¾®^“9MÇœ×QçqõÐ¬Í¬Ç£ŠºëI=ήúY<Öüró¼±mQáqݧ»À EI£±¬÷Øwì ùB‰âHÜ«‘¶ssÚ=þ&kåÇ>Æñ©Ô¹”>Fù#YÝ!ä÷ÁEz4éYÌc°çSE¤c* žeÆÜ¨E‡²/Ëa5+Ð/¢×G¯^LuϣۗÜ8x €'álð.q{ð3õ ®yP´||>WƒuǶ1Xö€ëlºhõñ»–|x"™gƒß @k·ýÂÑî/-@ÞIy*8öß‹ôRÒIEÞ ìY@û*›}=ihçƒeq£¹å“à°" éË@K±:Žwًؘ™õÉ÷¢E}y¼…¨_ÜvAx7\ n—NL)žµ¨Kc™ÎZp7©ýÏç÷bQ^•TKÛ/;Zœîoޖ楹áVp‘yèH±M!¯m ß÷«}V†~3ã*3Œ1–çh9,¨R´™†S'/‡3à&˜ ¼X6‡yàãàë0Ý,i´ñ¸æ1ËEÇðNx^ šÇoÏ=Ã>l2.>›=§mÖíWŸƒ=ÀvÏ5Æö&h5¦±ë#Y+?ö¹ ¾ ‹[(Ù…”=f.ËÀÉ 7é§I=ÿ¾æƒ]Á¹ËV6¶êYfì­š÷(û²V³ý"zÝqôêÅT÷<ªx9ü')Î/ÿžÕ½¿¨Û¨¨ó`šlM2n{{Qñƒ¢œüå©}ù(6I:m?¼Ï“•ö3Hcº0ð¤uGQ÷~ÒdŸ%c¿´™J^òvÐîûxÒðÄå-ÚX±ŽöýL³ÛI²©dòñv lû/ Ùjd¬»±¨Hñ,›:d©'Ó4F9Mû´Õöy[š— í]û\ò¡EݯHÕX[^ûz²î7ËçòÃcš[žöÛ<#žÁV`mÂ÷õå[ 毃´X˜ƒüaà Û\4ìÉ\€|VÛÍ oûZw üä¶?…çaɬÒãÏ×á p;y€dÛ‘IOmï%ÿµÔ@ÚlÌÍi{*ëg¶•Ÿƒhw¡óg;–Ìy^Ʀ^Þ€²î°ÎEÇÉàÜ,ß [÷àqðÜÖZu+Óz‹Ö­e_–ÃjV _D¯;Ž^½˜êžG/‡Ïá$ÅùæÂá Y]ºàM¦fƒÎLÞƒ®ï–{à÷ ºÌQp©þ¿|Pý’uÚ^^€LÆ“' Ç»´Á²qzÁ|¤“fZ€Põ–_”Ûè A?n;R¬‘¿ Ä[)'›ŒÛI3[ކtUûÏ‚'2·9´Ïeäóñ¾Mù‡`ßÝ éþú¢îVR÷S³í×ÏÚ–%Ÿæ• Th–æ°å%Ày[w9¸ðKeëV~³žcŒùüR¾ßæñ ¶iâ…ó‚°X“éÌFýÒàñ§]³o¾ÀÈ·;‚¯óŠ,?'ùWÀª`¾‘é×KÙZYîk¹™ŸF}ó:µš?¯ ï{4™zzî ë\t¬ËÓνü{‹ÜOÊÿ»5rµ(„ÎÓZÃi>~ʱIGÍúì…¥Øó´ãv2FºPõÂz¡bÓó EÙdC°îB ™y7Ëúéï²6³ëõ~„§™ûi¶{ñíØé©…>¼eÝ% Û™4]€Ûv6œW@3Ký—É:ü‚¼Ûßo(ò–ËìJ]2O¶«o+Û‚Æ!ù²ÿ)àIKKñ¤ö”žEÛàkQHæIõ6°Ÿº6ÛÞqS›sµ¯Ûü’½†Ì `ýòE¥wð.ã´þ^ð΢ù• ßÌ¸Ê cŒå9Z ªT _€Té·™/Ÿ ÏÀ&Í: h}¼?«ÙqU÷ªöWÍ,‡ÜK¿ˆ^wúï…Õ=^Ìa˜Æðn\?ßarÑ`|>A˜Á¼k·"4º³ØOñÂ{±Š«ðÑOû-bé?|Rú-hö¤¡êˆ×¡OY?Tµã>ðçû5¬{ª>îUí¯û±/|´Fo†Ô6Ú£7ëŽCÿ½˜WÝóèÍÞˆQBÁW`Þ‹UÄX…ÁßÛ1ƒP`0ðýÚ‹k‘ÁPcÆ£¬ú¸Wµ¿ŸÙزßï^N€]S BP BP &ޱ™8û:f „¡@(Ð{v`È5`øÌÝÚ›pp Ÿ¿Ç5Læ£L-M¨ê9ïŽ?ž;H¶1Án9H·«ûÁ÷F<jS°aêæc§2ã1¿r ‡uWÕþšÅR÷<šõ¡@(0½ƒð^¬"Æ*|L¯\”ªRÀìØ \„¸Ÿ\ˆÌ¨ùý‹“À/fŸYäÿIú4l ÃbþðÇwŠÉÔ1go¾º/¦cô:qì±ÃÙHmÝ–gwÀÅD\X©É¬E¹ÝÄmÊ´»m£~e_–ÃjRÀ_ê BP Bz¸÷þbÝ] óQ¶Ý|0 4Ïã—OC&ð]4MÄ9³‡Ú|ÍúÔ®ÓÇP‹2Ñ&Ášh{|Æçë£ÑåÀ_jš{ÝxÐqûügcË®RŸùÊ CPvNÎß9އ%m[é?qŘ¡@?+°Áùã«à]Û‡ÀŸÊ~9$óã<þS>ÿ³µÿ‹hs(ÛJTü ÒOl¯OþÏà6w¾ ùd#å-ûÀŸ÷£7{‚ iìy2;?¡þ¹ßÚäÏ…Çáf8Òqç|òúѧ?å}*l —ƒORü)óA뤯-;\`=×ÂTÐôóIp¡ô,8ƪ yòy¸|²ãO¥çÚ¶;çVû`q|þÜw÷Ã!7që`ß—C«X–¦Ýs’º¯{‚Ûý´íÁýº8æip=Ì­ö¹±þ’-GF¿¾Gv)òï%­â£¹©é¯LÓÎm4”}Y«Y~½î8zõbª{5¿¦sïšûàØ<ɦÅÈäµ{À9ÿNÌØ•üÌp6Ø~|N-Êw‘zà-÷ùuž<ÝæqX´4Žû‹ÔŒÞU³ßÞ.ä×8

¶;fnŸ¡`½ü6o ŸÆù>yc9¼Àð¢Â1<‘ºÝ;A;,;^ÙŒÝ9ØþsÐßåEy©sOqßMÞöo‚'K·ñ¤X¶OQaÛwІïŒê¯õ:ô{{Q¶nds>eúm>åø,wjUøèt̉Òm&ª¾fÞ ¨{%éEplÖæ{ú*HïO/Ö¼˜\ô³xü¹f‡d;’™ ^z¼Ù ´Ãqð pû©ÐÊôí1pÇîeÇýdÖv>ù²òQäZ”;é;…m6ç? ¼øô8¦éçs#¹Ñ?û’\R”/%õâ7™Ûßê×îœ/¢ï±,ß+P©nÆ–Ì m릀ÇSÏE+ÁŠ&=ʦ.žÿÊ\XîH9]TçÇЫ©ÿ,8öáÐÞ Çg}}’-HfOX ‡¿@²UÉèk2, ;Ã,°|ls1Ò*ã¹;Ù™d~S. ý$mÖ&¯ß)›’ª÷$È÷¹±ZN¶·ÓÏÊEÞ׺Ö*¾Ñÿê¯LãžíÕ–}Y«IÙjòn‡G%˜Ê¢àEÿÀƒûmàÈíîÈ+È¿¦Âu°.< Úq°xRŸ¦B¹Ï—©Û‚í!™W/Ô=Ø6²¿S¹cÑàN¿Æ±¤…íÆr¼‡t‚&;bŽ›æãIÌøû ð-8ž„÷¾ö€²éc^ø ü¿¢Ñùz™Æõh·Ã^#¹™frßìíÚŒê¿{1Àv¤î/ ’~ES$¡À„WàÊLt¸5:GpZ'sn¶ÔFûëh2ò7ß—ê¹$\›µÏLÞ9”í]åŠ6Êù¼Ÿ ÿ¬Å6ÎùPp¡ðN8 ^€å!-ïV¾憼ÅËëR,ês8v2_?Æ¡­ëÃû,æ~u;_ç­öyѽí¤Q|moKt¬¨#Ú^*à‘ëaaøxqº ¿†Ü¬ûYÆä×,:ü’ÔR²È,§C³>?¦MKíæ=9ýÞÂXvC[u4™éÕ¤úü=œ.Äße{¯‚mŠôEÒ‹Á…Á5àâ&ipù¡lŽ¥ýd4ù«ê¡¥vóèO¤‚ ¢£ ]›QýÛõýB‰¬€ïÏdéâì^*¼ðKåÔnß»S¡Aê{Û ¸Üö¢°mQñ=ҷûÁcØyð4ø´àƒP6QÛcÏrŸßW ü¤ V²•Ûqxô9 &Ãw!7ݹÍ\Œ¹¬Ÿñj̹ì#탌ºšnŒ¼¯ç¸«aŽŒuÈï eÛƒŠo5Àãu3+Ï;õû™ÙÁý¼9œÚ}¿6¤ìë!ÅÜÌß'èãkàͰøš([£m}½¨÷ÌYgÏ{ÉÔg_HúÌE~Kð¼z4ÛçŽåü’-‘2-ÒFñµèMƒ¬À,ƒ|ÄÞ3\pxÁì]µÁƒÑu°äæÏ;9‰ÅÉ¿¼èàݱff?íÁÑ䥿i›ä#5xð ÷¿àR{9õ€®-:š¼twßÀ©EÝEš'.Pþ §ÀËà àÁZ<Øk¾‡<@ÉBk6·û‹¾ùAy!êÞ[ ¾ù`-h×fTÿvýG¿P`"+p(“÷ÂÐã‘w¤ÿWÂàƒàEä<ðqx=üšÙohð‚r/XShsÛK@sÚwÀ¶[‹toÒŠü…¤¹ý†‚}߯äÑò™àÁUŸ–W-ÍÇøžà Ýöûa.H6Œõ»¥ŠiÒjJ©-ÅïÜÅý6êõíIg2|\œhŸÛô¡¥xgTÿQ/£wÏôë|‡ÅœO™~›[9>ËZ>:s¢ô_›‰ªï)Žב-hs€‘Oƒý/Ø’]OæÃàÅ–í ƒ¶+Ø×º[À »Üö§ð<,™W’ßn·“çÀñç†d+þ©ýÇä½xÔ¬ßn$7úgÉYÙcõO‹r'}?Á6^”:¦ÇJYêu0”ý|šºKA›~i[/Ư†Ã!ÙXsk¬Œ£ËÀØŒéÔ"?…TSûÀö{ákЭmˆÇÊ`RÞG› æ=Ï$›—ÌÁýêöçÁ& ©ÉÏGr£–!qûÀ××]EÙmÝ·ƒz¶Š…æ‘sã­¤Žw%øzIç÷Ï‘öÏUäßZ«}¾íׂñ¹í·Š¼±º¿.Çóµ0V|tihú.Ó°c›•e_–ÃjV _D¯;Ž^½˜êžGÍ/‡éÜï@Éù¤ƒ‘«u7ZÀîû4ºc´AÑöé2 y@ó.Û¼õ™…ú_}¾Mª9Ž,maÐgÒºÙÄ;‘ÏL&}¤mÊiºCÓh>7Û­Kš,ĶM ÒC©sçâœ4u¸¬wî íÎ×9Ø×;uÚ~`ùë°Fñ޶4Ö¶¬êëIX¿ù¾Nmƒš:Ÿ2ý6—r|–;µ*|t:æDéŸ ó1áa±&Ÿú¥aæ&íªí»d£ê¼€üu“6«½ûì±Ø÷s3Ów«öfÛÍh½Ϲ‹RV—vÌ8½hmecÍy¬}°Î_ÖbõJÇéݺnjç=®ÆÛ‰yƒÍó°øÚ<ž# þ,OÝ®àk1½VÎ&ï‚!·Ù)¨ÙZís}Oò[Þ¶ÛrÕǽªýu;¿ ±}¿ˆ^wúï…Õ=^Ì!±™'À9Ÿ…?å£Iµt|ù 2ÒÂá·Ô¹½ý~Þa²|5¤eÞçDê½;bŸÇ!”Ü>-@ÈŽÜe´ä ·1Ž+ÁŇí)ÖeŸZ8¶¤ ü[É{ÀLóñÀ™Ì¸õ³eª mgbìÛ:'ç–üŸN^ÛlwAe|'ÃßÀºKÁæ3ð¸ý}`ÛŽ %Ý诟X€¨BïÍ}Y¦Ó(ÊÛ[«F|RÇÖ^Ö¤ù`ð=¿Ië®Ñ:  ôÓûÓbžã=·xN9îUí¯ßõë‹øúEôºãÐ/¬îyôbù[P¸Ò¼\œÞ ÔÒpjOéF›G. "ÿ$¤¶sȯ\´›x‘÷qŒ‹a Hæ8ùÄ»]}ºÙ°È§1¼`w‘³?Ì Þ ò@ký¢ÌEÇmàvúHóY†|²ÉؾWª õ‰„uÛfu²«Sy»ýŸ‚£Á9kå¸íóüVí}`múù)¤»J)^Ûrþ@Y+kkŸ²þö‹ˆ*ôÞò}–òF‘¶ËÓN}DÿÆ ,KµwƒÓû­q¯êj×ÂÕÏàCÕ¹ O}¦€ïÓ~2GÀ¯ŠÔ×à X~¼KùnâN>ò´±m äb§|›UÞ%§U¢ß^XÊ÷bÜ:Çð"})X¼Ÿsàö µØ8õ™¯EŸAmrN+sœ››V…´péÔGÒ¶•þúì÷þéý—§ýs[ÊwcÚ.O;õýCP 7 ø> ë^üx—òÝxM>ò´±m ¼¨Ô»l©­\_g¹î8ôß‹yÕ=:÷Aø†IAx/Vc>†i¿Ç\B~VÀ÷k/®EúYƒ*b«ú¸Wµ¿*æ8´>fÚ™ÅÄBP BP BP ïð3ôa¡@( „¡@(0¶Þ´ó#Œ~‡¬Œ¿Ìç÷â(R?riÞLš7õœ[å¿Wâïz BP` ˆÈ@í®6BP &æÀ¯?ú°, þEžú¸E฿þ:ÝÍEûäòx¿„gÞ_¶ªÂÞŽ“ÏA,>ªP3|„¡@ÏHŸAì—ϽÕ‡þÓœë»îyÔ{ø†IAx/Vc>†i¿·š‹‹Š5Á_á˱þ¸î‚;Kéí”…n<Ís˜¿îç/òùóåaƒ§€ï×^\‹ ž2E\õq¯jÍf‚õŽ' l‡ÇtCP ˜@ ¬È\ÿ ^[ðR—ÃMpœ7‚‹ ßÍŸý~bñÑï{*â B¦ ¤x¿¬úêŽCÿiÎME© ¡îyTb¸&„ƒð^¬"Æ*| ú Âcû°l\¤.6·«à ø üÕf'p?võA8{P'qüòh/®E†]êª{Uûvý+™Ÿ¢—©Äq‡NÊ14z1tèrºîUû›ÎyV¨{ÙP‘ B Â{±Š«ðÑBƾmòãl Gÿó:ø¼–‡a³Ý™ÐéÃ6© 8߯aÝ+Põq¯jÝÏpxèÑëŽCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂÇ ìï¹ô]ðà»ÿ{€_ f›—ÉùôƧO߯aÝ+Põq¯jÝÏpxèÑëŽCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂG?îo×Sù¥ñk`/X &š-΄€ImâC:_߯aÝ+Põq¯jÝÏpxèÑëŽCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂG?íoÿqßçÀ [ÀD¶C˜ü7'²C6w߯aÝ+Põq¯jÝÏpxèÑëŽCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂG?ìoÿ[øÿÿ©ß±°Lt[ ‚%±u_÷ÿ6 ¸¿ÂºW êã^ÕþºŸáðÐ/¢×‡þ{auÏ£sˆ1BaP`Þ‹UÄX…ñÜß³2øÇà^8^a£ |™äÛ™óß.†§ ž'õãiaƒ¡€ï×°î¨ú¸Wµ¿îg8<ô‹èuÇ¡ÿ^XÝóèÅbŒP`„÷b1Vác¼ö·wîýÿgÁªãDŸŽëw`þ þÇö ÁÅÙ“à?"Ì÷ù³”c‚bî»°îÈß)ß×ä#O»ñÛ¶¡@.vÊ·±Yå]ÒØyZå úí…åñ§|/Æ1BP`zÒû/O§ï1þ¥<¶”ï4ª´]žvê£×ý—`ÀáxW¯ñÞKœþâ×Âà¾}®HóýlÞˆé‹MÚËý£<ý®×z¸ŸÂºW Ñ~ëÆkÕþº‰eÂlÛ/¢×‡þ{auÏ£sˆ1BaP`Þ‹UÄX…^íïÙè3à¯: þ‹°Æ øThk˜|rÄD P êã^Õþb'µ¡@¿ˆ^wúï…Õ=^Ì!ƆAAx/Vc>z±¿7fká·°R/à1!öGÀ¼˜›ßÙ.‚ôøV®Pä'ŠU÷ªö7QöCWóìÑëŽCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂGûÛŸÕ=î„­êhˆ|ïÌ\~6Æ|–£}pÿǯ`!V4U÷ªö7t‚×1¡~½î8ôß «{½˜CŒ ƒƒð^¬"Æ*|Ôµ¿ß„ãÛá°@]ƒ ¡ßÿcNñݘ!ܱ1¥Ê¨ú¸Wµ¿Ê&:ÌŽúEôºãÐ/¬îyôb1F(0 Â{±Š«ðQõþv±q4Ü ›Tí|Èýù³ÄþÒ•à BÆ T}Ü«Ú_㨣vD¿Ø „¡@( T©Àæ8û+<«ƒ_¦k_µéz#øEý°P †V~YõÕ‡þ{auÏ£sˆ1BaP`Þ‹UÄX…*ö·O=Ž‚[á 0L63“ñ$¾ ê¾y範a¡@(Ð\ª{Uûky´Ô~ ‰CP &†[0MŸzø‹L^¤Ÿ ½²ÓÈÿ—¡í^H,h¡›߇‡ázpŽ~<ê‡à—ës»‡Bù"æ>ꎅÍòŽcä×£ýü1úDs( „¯@ù€iy<¬î8z5¯ºç1û&Æ QAx/Vc>ftÿÎφǀßõ¯§g0vZ€¼™üàÏÕvkþ'òËA}ƒMa |^$ù"ÄÿZîuÆ!äï‡çáµÐŽÝJ'ÿûyX( 4W êã^ÕþšG-/)Ð/¢×‡þ{auÏ£sˆ1BaP`Þ‹UÄX…Ùßoa£ÛÁŸØ}ÙŒ8¨h›|ÒÊ¥£êÄ>DgµÝ¯ÁF»m{em.@NÉÊ)ûN2úÙ;U´H¥í¡íÑ „£ T}Ü«Ú_ì§6èÑëŽCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*b¬ÂG'ûÛ‹ä“á&ب“ K}·¥||ü…~iÝ'þ£½ÜV§àǬ„ûá×° $Ë ÛP©Ïôdb~ò~/åÐÿðÐNƒäþýg5²nŸ>Ræÿ.™ýßÍ/å\Ì\w½T3ÓLÍ +ÐÇ}ÔÎħ,çd># „¨ú¸Wµ¿ÆQGíˆu‘.dBP è?ü¨Ôv°&ÌÖaxnç÷ ¼ð^΃µÅØP‡ÀOÀ'.0N„íA[.ûÀ¾ð¸–‚²-D…>g ~4K_.B>OÀOaCÐÇ»ayHö^2Žy¼N…ç l^¬üŒañrcVö?™²(ÿ1«o–}5 .€ÂBP zúeÕWwúï…Õ=^Ì!ƆAAx/Vc§>ìÿ3p!áSFÛ7«»—þgC£‹ª;²ÒÛqvͶráà¸O4ÿ—È“°œ…ÂV%uQðÍ¢œ?É¿„î?AÔÿÎE? À§`x\Ô$û;™ãaep[=ÍÌ“}Ö+:øÄÎ-~<í)Ë]^2ç´×K¥È„¡@3|_•iÖ·ú²/Ëa5)O@j6܆¡@(Ðç lK|~´É;ô>)h—¥é; \$|ª0Ÿ$${Ì)àOÞÎ >í¸¼˜Ov=ÇëKÝ>áÑ~9šŒüu‘ðzøøñªÓ }äë¿È¯.zì§-2š4ü»XQ{OÖz+yŸ¶È‘ ¯§á=àâj,»”kÕ)ÚCP d:}ô>ÈsØCP þSNïòùÄàpÑp,l.Dn…5ŸfäfÙÑ0;< e³ÎöV6oÑè ™}!ë‚‹„à\Ðî†ÍFrÿØöä‹£¿Q>¸ÔýÊ_8.µ•‹WRñùre”CP &f¦ÉÄ\BP z¦À5Œ´>œ~_ÂS¹h˜{ci£7Pö£^€ÅòÂ}AH¶¿+qmªh’º˜Ð6MFþúDãaØ·¨;ƒô6x?¼ Žd‡‘ñ ÌŽ©"KßBÞ8¿/fõ²ç•Ë4j,Õ]Oy2¼¬TÅP †NI–c°\¥Uí¯YluÏ£Ù¸Q „Ó+0ïÅ*bìÔ‡ý«´Upæý³a2´k.ZŒå>x/¼¾Ö¥§.>¼À÷"~#x\ >%Y 4¿ÉMÿ}âSŒÛ`kp¡ókx…dŸ#ã˜útq“̧]/À×a“‚ƒHíëÓŽ Ù?Éøñ±²M¢Bÿ{”š”/ ~J“¶¨BQ|O•éF›²/Ëa5+Ð/¢×G¯^LuÏ£æ—C¸†FAx/Vc§>ì_µùDý3àEøGafËìg,GÀ³EþIR+ÿˆ°‹?æ”æùwòùS“ßR>´À~óƒ¶&\Ö¹˜ï„Ü\tØvj^YäýÊ‘àS“4þcäO€ù 7çîGÓÊ6OÃË MÊ~?eÏ&mQ „£ ¤÷cžv£Mî'å»ñÛ¶¡@:OÛØ¬ò.ùø)_å úì…¥Øó´ãÆ¡@(0½ù{0å§ï1þ¥WžvU¾mÊ·òaŸºle·û4$-@|ÒàGŽV„Y¡™½œ†üÉE³~ê}R±X£ê^ jò–&íV» rn¯[uÚ¶8ÿU„ïP`HǺ<ífZ¹Ÿ”ïÆ_lÛ†IèIñÉÄß¡Õâ‡æž™ ­û¡™n= $ úXt¬ËÓnÂÍý¤|7þbÛ6HBçi›UÞ%?å«DŸ½°{žöbÜ#¦W ¦üô=Æ¿”âÊÓN£Ê·MùV>ìÓ ó»!~Ÿa¬eû~Ñ|ŽrCÊë2ŽZC«_»êQ8Ó s5¥µ¦«‰B( ä ¤c]žæíæs?)ß©èß¡Iè<íÐE%ÝóñS¾Ç…}öÂRìyÚ‹qcŒP ˜^ü=˜òÓ÷ÿRŠ+O;*ß6å[ù°O¯Ì»ø~ùÚ;ú~G¤ßÌeÍÞoA_z? ãŠB~Q ëò´›Ør?)߿ض ’ÐyÚÆf•wÉÇOù*Ñg/,Åž§½7ÆBéÈ߃)?}ñ/¥¸ò´Ó¨òmS¾•ûôÚ–gÀ³à"X»×ƒàxþıOAZÙr4~ÜŸ@X(0‘HǺ<ífþ¹Ÿ”ïÆ_lÛ†IèìßO¶ÁÜÇ ýXÄr>1øÔcC8 ž„G!ßçþǽ ¬ÿðFŸß… ë^ü=òÝxM>ò´±m ¼ˆ ë­ÞѺ¾ wÀCp ø»ïÉv'sx¢¹6‡²ù¹à?Á‚àÂaO¸ü8–ÿõwSx%8–O’½‰ŒOQæ‚…`Hw |Ó}N„d%£_Ox¿…I 5Ó6?.àÇ*ïÚ- üL¡ÞGÑÚ9ðþ‘ÜŒÿñÂeWø \7Ããð8· µê¤^ê¦~ꨞqAˆaµ*ðc¼¿nKÀ#Ë@ØL3} ö"ÛƒOÀ=ž^ ï%lpð£†qí58û+"­YFf5ÙÐ}Ýqè¿Öjk€í×Â&׺˜Ðv³ï~?ãpðÂÐGðù<ï¢Á“Ðn°.x2Ÿhè#™wÐ~Q>Oj,.vm`~HæÉÎ…Çvð:8 ®ž­Æ<šö‡ÁäGà}ÐÈ “]ÀÞ “ Ss!e,ÎÁ‘úR‡àeÖ¾ê¥nêçþWOuU_uVïA2_[eú-þr|–;µN}ÌÈÆ4£ý½©òE¸Ž…Õa"›7{|ÿyS©lËQ±?¸?7(7F¹/ؘ¨ÎíËÈ/(_÷eº™EÙ—å°šèÑ뎣W/¦VóH §'óÄá6¯ï< É<ù\ß|Ñ‘ç/¤Í/q&ó¾',‡Âl07<o†dë“9.>à]?€ RìS(·ÓˆcÎZ+?+ÓîÜ—¶c‡¶+ý½8vaôú·î) ¾êì¯ò¨û ˜¯­2ý{9>ËZ§>fdŒNcê¶¿7(þøšûøôv˜ˆæMœ³'âćpÎ1§ó†p^ã1¥N{cÅXµ¿±Æ‹vèÑëŽCÿ½°VóHñóeø‹VnãÂàø$äæ]h/þòEGž¿—¶ådy#~”kKØî„YÁñ}Â’ŸÐ¥|‹‹!ýš6ã9ò;@«1]€ü$kågF ^˜¨Çe`œa½S`U†ú œsönØ©Õ{q†V¼a1vêÃþƒb³¨Ç?šåñë`X&’yœöéóO¤Ié\½áø§![¯§Õéqo¬øªö7Öxº=¿øœÐBŒÃä}ªlù"ã…º TNíö½;¤÷Q·lVï¢Ã'"úy~ Ûƒ¥:^€%ÀÉüÈ׊ÂJ¤žì÷…9 æ"u!s:´“æ™ñOa­ü¤>í¦‹Ðñ¸ü˜Më^¹ˆ¾_'a¡@ xÓㇰøÄɹà]äOÁ 0ìö"ü<|qØ':æç¾Œk¯ °£cŠí)Ð/«¾ºãÐ/¬Õ<Òiâ¢áåpܳÁÞð8l~„éã ¿Ma"ïExžwÑàE¹wVô÷]ø¤ƒœ³zª ]0ÎLùj¸lwl·= ì»ì.ˆôëwC<ºò{­Æ<šö!Y+?^<8?/,æM4I]P݇4iêÞ*°+ÃÝîÃ~µVïÅ~‰¹Š;õaÿA¶Y ~ ø>xŒú+xLò†Š ”a4ÙWÀÛ†qrhNë2׋&Ð|ëœj§Ç½±b©ÚßXãE; ô‹èuÇ¡ÿ^X«y¤È)âû^~JóiÃað4ØæŒÝAó˘Öù¤<ï…ûÁ;…ú<6ÜÅ<îù„d7øøÄõ ¸~.T>âÐïæêka–~4âk¨ÀZÔú ë^t¬ËÓn¼æ~R¾±m ¼3Ö[îe¸CÁ_–ê…ùÑÇòŽ ¥D{A÷8xï’zÇ4·Û)œOç•äß~ÜcIðsÚ§Ámì­dÜæÌT‘¥+‘3/õ>!{;¸`õóîÞ1; ܇o„W€Ÿ/¿Žv¦Î8zeî÷OØ®ìÕ 1N(Ц¾gü̽$›ÌŠàûhUXvËsƒïó2·Rwx ¼@ûƒúxs)l°ðuÓ蓃5‹ˆ6¨H´ÒËÓŠ\wä&?å;r0Fg}öÂRìyÚ‹qi /î?KŒ´ßÿ€UÆèWG³åpz·ñ\¸¼˜y¶Í‹•ƒõ¿‡cÁ;«^”»èKö;2ökdï¦Òqæ-½ úÜ?‚3Aÿ”ÞÍu¡²/ä¶ ýäãæíuæÝ?î'÷W?™z”é§øŒ¥ŸåN­S32F§1 jÿ—øj°9ì _„àl¸\|<¾Þÿ¾·O„¯Ãç`7ð=í“ ?îõ ð8ç±¢*ó†…‹ý¸­JÑÞùñIqܨ©FïN{cZµ¿±Æ‹vèÑëŽCÿ½°ºçÑ‹9Ô=ÆN à…¼O΂·A£'rëQŒ‡¥ˆw“¹Høø„Có—Áü8ÇTHæ<~ÁbEe' Øæ2X¤ØÖÄ“ÖópˆÌTíV¶€—wl›-rìS·]Ìî¯~²Ax/Vc§>ì6ã øe)x-¼ |Jë •/Áwá'àßéfÂSä½qÐh_Íh‹›°ÁR` ½z°BîÛh½oº ¶jÝÄ2ôÛ6ºàöI{×øEðD`Ún¾Ý~úmd^˜u:fÞ¿ñÛ¯u³˜Ì o€×v |®·€y’¿{$×\lü>Þíߎ„iÌ…ÂÇ`+ø(íÚëé¸>L… ™wÌ>.Š´}á­àØ›Â`0®ñ²»Øý »>ñ¸ÔOǦ^h¾ƒx,rÞÛÃ÷ái˜{yìJæÅߟa¾ ½;óø%xL,›óô)Û‡Áù^e{ƒ:ŸžÿÃB¡R`".@æ`záëÅcºn'ßÉ6^$‡ÎÀ˜y\cï£xlù¢%Ï·³€iÕ§U[>N³|yû•‰5ÿøÀü”5/Ø=0ßëÁ$¸ úÁÜ~'ã]ð06¿†²=BÅy°f¹aŒ²wÇžsô;>«{’üá,ø:ì»À?a¼Ìý¤&a¡@(0œ øÄ÷Ûp~‘žD:£ o¶èË㤶(‡µÀ'äƒhž'Ÿr4Z€ø=“žë|Zöv8’9÷ ᘠ¿{a¡ÀP)0 ûö`þ«Á^L×møòEKžoÕ–÷k–¯z{‚é©G®‹ •™Á;Œ¦š‹šñ´1¸1¨ïOß‚E@s±ÑÈ¢²Ó r?²õ4z •ǘF…w } s&œãi㽟Æsî1v(0‘¸†Éº`ÈŸÒÎÈü=Þoœm¸ù«À‹òã`m*“òÜàÍ©3`kÈ ÿMÙ'ÞŒÚ\¤……C«€;eÆc²åÚ¹ë$Ϊý5»îy4wê½ûã]|µr±áE÷à¶å Ù;Èœ’ =N`<ãû¬[°,i2 ¶o›*J©ß]9¶¨ûi³ïg¼›6ýÌ ~ÄÁ|z"Dö%S‹òÉh%êìïIk¼ÍýdŒýdjS¦Ÿâ3–r|–;µN}ÌÈÆýûO/𯇯Âà…°ïÛ—C2?>tx|öãP›C2·õþ*`~AÐüب'rãû‚æ‘”·<'\[‡ ÑM ýzcEû Üž#þ û67ÃSð'pnš~o·¹¼ˆ×~Î;ÙidŽMÒ#áÀ¢ÜJƒËèóVøècqø9¨åýp0øþšÌ'Ƽ*Ü ‡Ü¶¦ð,¼ì{.„5V@Ë4îÙ^mÙ—å°šèÑ뎣W/¦ºçQóË¡'î?À(êô|ÖFöz*/jÔЃºÃ[]T_BûÙ bY»ØöÝE[» éÿ<|ªØ.OΣà )·ÉŒq“¼rœò3®"ýdjS¦Ÿâ3–r|–;µN}ÌÈÆýûOt\º–Ð`ÛËÁ1\|L×À9ð{°Í>ö}ÆoœÖ¹èÒû=³èï0–ÒÇÅÆÑàÇVÏ7\Iªockdo¤ÒyÙçXpü²]N…íê½B¹1Ê/) Fe^jœLÙ—å°šèÑ뎣W/¦ºçQóË¡gîßÄH¾y¶{—È ó^[; ©å¶Â+a~Ø î `fÐ\€œ ž,s–¦ì"Å׌O@´ïÃ3ðQðîš| öw1² < Ÿ„Ià"h]°ŸÇã“À¹ÎSÀÏÊàö¯‚·7¿”o5Oû„M<ÒÄ òdw|=¼<ÎxQŸÛ N+*-@\œL+Ú%¿¢ò8p/µ7U\8ÈA:’Y<Nz'<—€qº™¾·u7ƒ‹Í㵋4€7t\ˆhWçá[ð5ø|<~ý´±4p²ãHÏÑE†ã¿¼(›Ì ÖM±P²?R>Œ÷àbét¸´€þW‚à>ø5èo›^u)3}ÎJe_–ÃjV _D¯;Ž^½˜êžGÍ/‡¾sÿZ"ò$ä‚ Ÿm!‚ón–' *lœxÒYf®ÂaM>Ü/î÷S¿Ù ¼«ˆ±Sö›x ¤ˆOa“yAïëáuð8rû…£ŠŠF ýhû{¾ù½`ۢ΅Õ»À E‰  ÍL^€¿ºè° ©qïj$#êǓڶ*LmpLÇØ´/À™p9l»‚‹‚ aGÐÆÒÀ¹l=Òsôøì¸ëeÖM±P²Ç(ÿÜZÔBj߃‹òѤgy“À'%7ZûÔ®Ìtê ¢ìËrXÍ ô‹èuÇÑ«SÝó¨ùåЗî¿NT'õed”ûÅýÓ6ïÅ*bìÔ‡ýÃ&ži2©/ Þ¹?n‚Ù`ox6‡yàãàkeSÐ-@Ö¢þEpÁàEÿ;áH7$¼‘Ⓤ‡aH6ÖÄ‹ó›aaXÒ"c]ò_‚¿ÃŠ ŸÃÆ`¼Æ`ýÊà¸ÍÅŒOüÔËÀÅ‚å§aAÐÆÒ _€xcè2¸&Áð[0†)P6:.pîT'ƒ}çâðixÞó $µ”­ lzÔ®Ìô=:+•}Y«Y~½î8zõbª{5¿úÒý"DåAúí}ÝÄ Êýá~qÿô£ Â{±Š;õaÿ°‰§ÀÚLÙ} ¼Xä¯#M‹…9È^ÛÏ‹÷ôô€ìÈÄ‹yŸBؾ0h^(Û׺[À»ü¹íOáyX2«ô#H^X73ÇðB]Ÿ.Ž€ÛÁÅ’ãNۜǣðоÆo½ü¸ØHæÓ„?§©>}*’l, ¡czâ6+ƒ‹1Äq9VIDATË©E~ iٜӵúžOÞºkÀ¹è8ÔÊ>wƒcù‘±ÇaMû·jTæß­çʾ,‡Õ¬@¿ˆ^w½z1Õ=š_}ëÞ»UžvéÛ'V`3]Oî—~µAx/Vc§>ì6ñH /t„ÅšH0õKƒwøÛ5ûæ Œ|;¿Î+ÚÌûqÖeaŽ¢¿Oeæ/ò& ÁrÚ­Óæ‚I÷µ¾ëToÂä fc©«ÇÍV±¹–jæ ê_R ÓãÞK6ÉTí¯É0Q+Ð/¢×‡þ{auÏ£sè×1V!0ïnyBóÖ{ÔÝ\ù:ovÓû¨8ïÅ*bìÔ‡ýÃ&žù¤³÷ŽýÁàGž6éÅ€0†‹´ @œƒb§Ç½±æTµ¿±Æ›Ðí³LèÙÇäQÚ»^~dàpAÖ;ÔûOðjXP  î%ÌCÁ/6÷Â|‚áG”v‡³z1àŒáÇÂâÚkvT„ØúeÕWwúï…Õ=^ÌaÆØ ½“ä£ýõ!àŽQ}ÕY½?:@ó„÷b1vêÃþa¡@(Ð{ü²ù?{?ìPŽØéqo,ªö7ÖxÑŽý"zÝqè¿V÷ìß‹cá ¾f"æP Nü¯ôK^uŽ3|wzÜK“ªý5^´£€¢—aÊ14z1tWÕþšÅR÷<šõ¡@(0½ƒð^¬"ÆN}Ø?¬zvÀåà/"}ü5¦níM88ŽÏÁ20Löf&3µ4¡ªçìwPüõ©~0¿ÃøPlLŸ-Ûè7h]ܾ7ª¸Òéqo,­ªö7ÖxÑŽý"zÝqè¿V÷ýv_L)Æïdx¤ §Ú º-Ïî€%Љ¸°røÝš~Êtã³ìËr+Û‚FçÖh»¨CN3,BP ªSà\ùYÿºpùQ¶Ý|0 4ÏÙ—OC&ÃXHt(›s~‘=2‘>ìkÖ§vU,8úíÅüýbný×@Ä3‘Þ±C"ÈP BqS`5Fö)ÆWÁ;›~Tæx9$óã<×Á“p)leóûhþ\µÿìO[þ ns'ì šO6RÞ²O®?z³'¸Ð˜Éž'³üü.¶6œ ÃÍp xѧúÑçàéÞ.Ÿ¤\+‚ÖIßWÓÿ

òHñèç“àBéYpŒUAóšãóp ødç4ȵ5ÖvæÜj,ŽŸƒûî~ø"ä¶cWc|tkkãÀy~n}Ÿ³Á.àë¬Ñý|ø1$çì|¸?Ü/›B2çr¨Õ?àýìƒdn‚çÀ'cûÖ*Û7„ À/‚o‘ÌE ñ< ¿…I ùq£ÁEµc^ SAsŸ6’ý³$ÉõðNð5®yüî—!׊â@Ù2mŸë¢Ìx„ZŽÁr•Vµ¿f±Õ=fãF}( L¯À ¼«ˆ±SöûO¼xS/®6)¸†ÔÅ„¶3<{€ÿ‹Èɼk‚æEWù#X^Œy‘u<¬^<¿ï/ï†Y@{ØwY0Ž­¡•-Aãcð3x¼¯(HªÝ ^œn^Øê[>ëÁ­phô½’þgÁº0¼Øw^š~/ì§ÂßÀ“fŸ§Áñ÷Hpžß…ŠüXskx¡ëþ{C±:ÆXŒõpŸí^LKÙV¤bõ¬RîHycpŒi &ÆhY &Á‹ð&ÐŒÁòà"B=v·S'÷Ïp8èÃ}i|'€m.V}ƸØ×Å\«XüþÅS î.Äö·û hÛƒ íÀ1Oƒëap‘aÛ[À1j­ë/Fr£–#ѯï‘]Šü{I'A«øhîÈ£LGJ˾,·²Fý£î?÷I3MF´mÔØJôºÚêŽCÿ½°ºçÑ‹9Ä¡À0(0ïÅ*bìÔ‡ýÃþS´Ù0kÚ€¼z½.‚c!ÙÌd®/ 5/Ö¼˜\Üfø Ü ³C²ÉL/]Ðlš ÇÁ+Àí§B+Ó÷}0wÖi?ò.:4ÇýäHnôÏù$'då£Èÿ´(wÒw'¶Yæ€uÀE”Ú~>7’ý³/‰O´KÁ‹ßdêw#¨_»s¾ˆ¾ÍöÁ ´©[þÁ më¦À§à.X \`ÈŸá(›ºø$ Ì…厔ÓEu¾8¹šúÏ}ÿHzL‘?é‹0+èë{lA2{ÂRp8ü’¹èp“ÁêÎ0 ¸pû0ØæÂ U,Æs'8v²3Éü¦(\@úHÚ¬M^¿S 6%uŸM.ô4cm´ÑÏÊ _ëZ«øF{´ÿW¿eÚßú?{–}Yneåþ­úFÛ¿ÑÍoX( „¡@( ü[ïš'KËS1 RÙvO¤–mkf¶]ÏeN$? ¼> v€ya+8n}{A]6/>O/ìŒÇ dïj'»‚Ìb0OQá‚ ™‹[RÔrníöõú—ðï\ÛÍYáIòéZc9ò×dmÎÑœÖÉœ›íµÑþ:šŒüÍ÷¥z. ^8»OÄ‹ìFûï]Ô» (³uÍ,Ÿ÷tšµèx<éÛ`vØÔïpÜ4²#O޾Az·,÷§Žš>]tº°ºn‚BÙòmS,“édÇNæë'™ †@Òæò¾FÔÕ}ýixÎ5 k_7þbÛS ,ì7BP ¨M/Ä’¥‹S/ÎïTNíöMŒ©.O}‘.ŒSý^d¶- Þ;¼\œOƒO ]Xz»8¦ñ,ù¹Ü‹ìG ]°’­Ôô|‚WÃß 7¹Í\Œ¹¬Ÿþ´Næ\ö‘öÁ?F]M7FÞ×»ÿ>™˜#cò{BÙö â[ 8°Ü1+—çš~AÆÅ‡ûù¿!õs!‘¿6¤ìë!ÅœúQ5}‚’¯7Ã"àk¢l¶õõ¢Þ3g_•åÕg_Hú¸°ÜN‡ãàE˜“á»ðÿÛ;pIŠr _raÉಠT” ’vA® IXED ŠˆA¹ ¤½‚HºŠˆÄE@%‰ÙÉ’‘Œxßo¶·Nï¤>ÓÓ3sæûŸç;ºê¯ª·»kªºçœ¦¶4¾°e"Ò$¬×¿&Å}h¬˜s¬ Èã100 |úZ.ôDúoè&t:Ò¦`+¤7 ŸA¢3P#;ŸZPjÓ±(úú6Ò“hÙ…èqt$: …@dtZ©=ÕÕX‹T=ÕÖÂV‹½CÑÂè-èK¨Y8Ü‘-Em-`Õÿ¹ÐNH‹ø…P+û)ÄO‹põW‹üµQX;cnvôu®ë‘Xj¡,6G¡0½µy=R»j#ô[”nHÖì1~>XGÚ45«³ú"n±öú?â»!õCך®‹ÉènÔÌTöi¤ Ãè[HÖê¨Ë¡o ]“ŸC›¡0Ÿ=‘úó*´?šŠ^@:ï÷!e-ôI´ÒXîG“ÐúöMö¯,²a«þE‡CD@;Ѽz1ü|”.ÓÊöרoÝG£vo&0’À Ü‹eô±¨•·ÍN`]²Ä椧½ŠßŠÞ„dz2¬EäóHÇž@Z°…ÝFdw¤Å–Ž/ŽdŸ@*«¼éH »Ô$ñ2Z6Í$þ.4©žôRûZø…mKäǵùÐâQ¦üíj±™?¦œ¤!~f–n·ì<”ÿŠ>]›ùPZœò~ö&ïH6:iA«òZŒëÄÑ(¬Õ˜[ƒUpt’Ãó²ø$B™xüéøCèpÔ©mŒµ ù»í§Hf“ Õæ² ¶ ?•PçUõõöks$“³j±™?V Pý•®/m”V]Ç{x¶êˇ(3©=mªu½h#+Óù9Åùùñw#ÙgQä?BüP$‡ eÐ-HýQ™ïfqõUçëz¤²ºZõ"m›ÚË«íÊu æ})ÝÌò囕õ±Y‚[-'i8«hu±´ýˆ—Ùº|VaÑ÷4¬¢]·a&0’@zF|d‰Þ§¢_iX´Wi݈7ó¡2¶Ù Äd½-9{‘ZÎÜü\ÍÑàx½l•]¶Þò´€üEƒcÊÖÓg=¹×±‘Éw³ãê6_}Z,«¬±iÚ®©Ÿ­Ê·s«s0Ž6nÒ!ñš³ÉñnŠ·цx¨¿ELoŸôæF |Ù‚(6žµŒ:?&’÷ ¤ó×ÊåĵaHM›LñÏ›Þ`¤×½Þ¾è<ÈäSý ¿Êë¶Å\—†´™ú‰x3Q&Âfe}l¼"‘†³ŠVKÛx™­Ëg}OÃ*Úu&`# ¤÷`ÄG–è}*ú•†E{•Öx3*c›@º™ýhù9ú*‹ž ë©ñæå»·Ç>%ЫûOoQžA?FASÑËèh-æº4ìd©Ÿˆ7óe"lVÖÇf¨ñêÕîV7300þ  ¯ä|½XQwô[_Ú]VQ›nfx ÜËÐߊžB@ÚŒ¬ôU+› TJ@¯ÌdÚä-Žåó»™îv?俊qu{Ý<ömc‰À Ü‹eô±¨•¯b.K×’ÇbeðýWÉ¢ó^«V‹úË—÷œÚŠðÌã5n~Ò,—20000(€7 %@´ 00000öxÒ'—20000(€7 %@´ 00000öÄßon¯´K™€ ˜€ ˜€ ˜€ ˜€ Œ–À'©¨ÿ§"Ó?¬üe-6òÇN$W˲ô5õ5SÓ?tœ‚VE‹#ýcÊ;Ð èF”šþä²Êµc? þ`«:ORF=M½OÊyÔ¦ßHÏkÔÎ:¨˜ïCí7å;ð—¯Z¶¿¼ÿHw{ÑŽC0æá^,£E}¨¼ÍL 7|ÿ•ýè¼×ªÕ¢þòå[ùã uõïëÙdF™“zq ÿ\Çê…'s<ý‹\—´(ŸúX“²²vëh³£?%^Äjíù+XE¹¬ ˜€ ˜€ ˜€ ˜€ ô†À4»MÒôcÄïBé[ˆ)¤DU˜þ™êéHÿÓ¨ù+X…p¹° ˜€ ˜€ ˜€ ˜€ ô„ÀöI«ÚŒ| ý -~†6A²ÑAŠäì*ÒÇåò"©7wF" N\íÈôfem¤žº!’­ƒ”wíš7 í’r9000~$° Z½ mŒ–@K¡qhÔ¦Å^?™ž ?F }MèRô;¤ïûÛzO`<]X2éÆYĵùé÷6ôÖã×J`*»0ú§‰émÉ©Iº¨ÎÿmIÁ[‰Ï@º6Âô5,o@‚†C00žÐ.½ž×¢p3¤'tZêt^dkMàŠ<…´(”þŒ´(¼=ІÝ&`oôôW$6‡ - ÅK‹21´µG@÷¦îÑÅÑ$ôEô&t!:Ý€úmãD—†Æîg¤Ï¢³ŸAx$:݃4/T5·¾D[©in•é‚ÊkTŽ:¬”ïƒÒeZÙþõ­ÛãhÔ®óMÀF„{±Œ>õ¡òÝ2=}>iøtz'z3ZùÍ; Øb”Õ_ÃÑ×öBç#}ïûbôTø»×ÔtÓ› }ÝD›0m8ÄÈÖ àV×ÝßѨè/S¥kVtÞkÕ‘¢þòå[ùãüú)8É·«´þÖÑÖ(ÿûÝ—u4wh#YOû–Öù)™‹dzá$t ŸšëõÕ¬v-êÕÊG" ÛuTf¹´ýˆ—í¿L|EßÓ°QY盀 t@zF¼{­Îsô+ ‹zJëF¼™•)ÛæÇá÷ÐãH„+"[whÓ±3º9S|»;­õ—×ÿ¦;z| Z¨¿º6¦{£EO¢)¨,æº4ì¤_©Ÿˆ7óe"lV6=ÖÉDÂsQ´Y/Ô×¥VOL7õÊGžÞ¦„µ[çA*l•Ú £½ZñH¤a›~J-–¶ñ2Ï*,úž†U´ë6LÀFHïÁˆ,ÑûTô+ ‹ö*­ñf>T¦L{ÎnASÑRÈV­hJ_9úNuMö¬¥hYßy߬g=pÃZØêÍÓ ¨ÈSïn‹¹. ;i'õñfþ¢L„ÍʦÇ:Ù€„Ÿ ˆèíò(ÚOCmÒõ¦P–n&ž"­:õ´¿ g–ÖIýæã×Q~ŨÔf>jÅ#‘†mú)µXÚ~ÄËl@>«°è{VÑnÑ6tq~Í_§âòÙ±nO0›Òλê´ßnÖ¼œ„>€^Ûn%—é=ñ~|ô+ ‹ö1­ñf>T¦,[Gò·KYí§0}wÿv4 é éX´O3(]gÆâàlL Ñ߫б=î·®‡¼:éRÞ—ÒÍ,_¾YÙôØ5$¢n#†W'eŽK+׉O oO¤¯a…_…Û#Yº™ÐW¸Ú±´ÎµTÐý'ékZúúÕ (ÚRÙ"õju"‘†Eœ•U6m?âeù–ù¬Â¢ïiXE»EÛX“ êcì’õ‹fÍœhc ce¿ø3øÔë𣉜‰‚á"”¿ =ôÊQOÆ>l&Ò{0âq¬_ÂèWí[Z7âÍ|¨L¦Wïºÿ6*Ù}tD@ßû>]„æëÈSÿUÖ¦»P|Võ_‡¯Gó0äih.}á¾c®KÃUšNýD¼Y…(a³²é±ÓID_¥’ø}I™ý²üC ŸÏ¤ßË›&ëwu·ÖW²t31š H½:‡à7Úy…øbj¨M«ÕÓ„e^úÑ%У‚e_Å»è˜ô×pÊ0mfƣסÕÑè0TäF ¸ÍL`Ö¡ÎÑúHOCm½% EÀNhÒƒ˜±òù®Eèh7ŸUDm=&ðíOAßD+£²Lë}¶_þ§,§}æGLÃÞNdƒHd¡6ÜË%y·fqÕÓÃisô”ÚË$žO2´é–˜8Ö7e&$éBÑØÅ¤a!%NÛxI®knä³ ‹¾§aÚîoIl™dè­Ã9YZ“ìt¤›[O|âÑÚ_‘ù á3è:´-’éé£òß´©Ð…q=š Ét3ë^T ì}H¯ÔVEº µé¸éÂý:mŠÔÿo£ÇÚÔ.xn${#R›ÏfÒn|q$k4>ù’ÿçÚ]i‡.?"½Ò{í‚Ú1íêON jú~W’çèpÐ5œW¿É÷Oé¢VÔÇhÚHû¤œ+‘æ[Xˆîܶè¯nº7ß§æF]Û»M`w¸´ÃF´6™‚ôöN‹è˜ÏÒE.Ù³Y”KÃÙ ÈHýD¼Yõ(a³²é±5I¤_aÒÚK_kÒ†K¡Ö1áó^â±v›H\ë§8ö8ñ#Ö‰ŸC¿GqL>ÖC2­•"_kËéMë§´ŽÖ~yÓgÀ‹(üjCÔ®EZùH¤a»ŽÊ,—¶ñ²ý—鯑¯è{¦e"±]’±qm–Fª³Z }ý CK¡¸ØÖ"þE¤ i´Ò…  u¤ A~ÞŠd#¥ß«v2:é&P¾ü¿ Í@Ç¡· Ø€LËÒºÀUv[$» ]†Tv2RßôDY£ñ­Á1µ} zÒ룑üj¬Ë)H›[©N^Ú8Éäç€ZlÖGˆ~bVÒ±!' k+¯~C’ïŸÒE­¨Ñ´‘öI‹Ýÿú²õÍßÓÑ|ý×µB=š—ÒšÓǪ5{á7õÙDÚ8¯;{±ÿÒÓh•S»y{‡¢“з‘>?S›‹Ä‡‘6KZ8ïƒôPL¦‡„ú MM–ZmES\y¯Q"³- õùx<úZ¥¶5‰üØ´ðŒ{ScIë!çfhT†ÍƒýÖ‰é3þèl¤x½9ìXò›Y½:ÍÊ·:VÔ_¾|+ÿéñ¯È×ϧ_¡ŒÎjºÆ”Ÿ/›O3©”n&òåòéeõÒ:Z—Õ³¿‘õw©W A^Ô©ŽD6¨×Õì´ýˆ—Ù |VaÑ÷4LÛm´@_ŒB/¡Ó&GÝ “&нÐ}èµH séjt Ú ©­w¢°‰„49hA>ú.’É.2M ª7ÉTGíÈ6E:¶ª™ÝL¸oŸB¨ G“›&»ûÑÁHÖh|:¦›îwŠdv4¡Ú [ˆÚ€ÎD­£kÈ“é˜6k©=@âÓi†ãCM@×R^ý$ß?¥‹ZQ£i#íÓµ$òŒéñnÅÛ]H.JvFš_Ž@Û¡ùP˜æ--Ê4ŸÖ3Í¥ïÍX´æÇ“Ðáh ÛƒH¾¼Ž-ÔŽæÚªí*Œ§™U·]V{ïÇÑå%8Û ºæ¯Ì¤‡WJ߉^…dÚ@Ü‹”¯E^j»Ð¢ïtº+K¿‡P6ú9zMEçdñ» —DCz˜mý¯Ÿ µ >åmƒÔÎRhtÒ“ò‹ÑÉèôŠv‰ÖÞ„ÚpèóGŸ‰2w]ïP"3]‡úÌÞMD:¾%’©þÃèQ¤Ïø0]OºÆd m&£0}ŸŠžFÚØÈ.BºÎS[‰„Ʀq×»Ö ÿÇHãUÙNm=\ßÀ‰Æº!:鞇võÊ6³z~š•ou¬¨¿|ùVþÇõÑÛÑZHë³vlq ­ƒÞT 4Vã–..¡Óc¥š”æI³L×E¨Ê· MÛ"Mzú°»ÝŒtq†­MDzZ´+|…i=mƒ.GÓЙhG¤ÉõŸ¨Ó…’7MXSÑžèGHÝÕ(¬Ñøâx>¬×†Ê|­˜/Lúiô5t7Ò&*LeAÊ·™€ # \ì~‚4Õ³­ÉÔñü‚®^Ùnäi~Ù4q¬…¤æHÍuÿ‹NCzx³ÒO6]ŠŽEïAEl"…5Ïiq¸oRñ`⚇NG¢÷#•ÛiNÛm‡4?ª6£Ã‘>ç5G¢-O§ÿÞ¥ŽkSq'ÚMEG?G'¢_#÷éH¶ZÍtn%•_Ét\¶ÐÌ öó/üü(ºÉÏ ´ ’o}Ž/ŠöCŸAaº®õù<ú:MCa:ŸFº†?…t Ö³»Èœ4†z¦ÍôH ×)H×q'v/•—Ë9X“ôH÷À4Ó¢úËè%ôbFœ¬ÙLuâ¸ÂFñ^Í_³u˜ŒG3Õ;Ö,ï1Jiš˜lÕ¸Ÿ&uS^€VA»!M+ ËÑ‘6¿AZlëæ;}iQ~Ò¦‰LnõL“ßè³H¥.Ò›‘»£z¦rZªÞÁ$OÇç@š¼5Qj,ë¡«¬ÑøtLè8´2šš™ú<_Ïfyú°Ð‚B =‰úRß"› ˜@1ëS|^t:]†ŽA¢ôÃzyÒZPõ‹ÝBG4mˆDš7@úP›AD ™Ÿ"mX´(l×4‡>ŒöÏUø6iÍó£çÑ®è ¤ùõd$vçd"¨ÜôÙñ zÒ¼8ˆ6žNßÓ…Ž/ŒÏ­ÑjèKhi¤Å¸6‘ºîu} }Ét.¿ÞŒ.@úŒ¹]‹d¿GzÃvR}}ŽOC§¢¸w”¿1’½éóRŸëG"=ÔÓ9z#Ú­ˆE¿@y{’Œß ]ça*+²ÑûÐDôKÔÈôò´j£òÅK›0ñÜmÖ@Ú&8ŠXœ“VuþMü¥^§Ø¥›åÙJ  ‘W n »È÷Aé2­lúÖj[SQ7¿ÊéƒíôG$ûÒ‡Ù+™´È^ɶCÿ@ª÷:ɶBz¢‘·CÈPÙ²ZTè¦Y2^“ÏÌÒó®ˆ^Õà¸>ÔÒAƒb]Ï^ŠËZÑ‘e’›/)VJt¼,Ô› ¤Ò{0âéñ~ˆG¿Ò°h¿ÒºoæC›‹(ø§“¼8¡mŠË´QÑb©Öj!y8º³IÇ´Àû j¶(Sõtréc”Ù†iC‹Ï]Û(ßí"z*¿N·é¢ÿKñ½E þuÝèšK¦õ Ba·Ñõ­ëCŠûã]ÄAÚ¤Ÿ¹K>©Îë>ËWA©­MâÏ™”¯Ï(•ß i#› ][?Cºv/C²qHe?¨DÓC¿“³|m@ÎBºö$}&©¾6?Í®õ¿p\›ªNmih&>_@·#õcXÄPmm¨]±Ûo£¼‹”L@OþÞÀ§&@}ˆ5²¨8?ptA=˜´ßl|I±R¢ZÝWŠ';1á .¦bÄÚX¼'„º§cSr2ñX„knZ õÊÔ¯ÉYãŠkõL–¾‹P ==ÄÑ<šÚxz0Òlƒ’–ø "+G"jѨ ÊiYþ? ˆöE'fy½ tžš}–ô²oí´}?…t>Ë0]+Z¸çm2VCB)«“Hé Åõh#ô;${} éøkÑšh´"zÉnD§ ƒÑHŸQòµÒ}¥ã2m ÔÖ]è\${ý} is’š6Ú@é-MX¼‘‰ôDBÚäÜêÙd2_¾Rï`Á¼å(¯s&>ßAêÇd´;z?š± )|R½y²0˜¼¼ýŒ(aZ'âså+:ݺ1óêEOò}PºL+Û_£¾u{Úu¾ ˜ÀHƒp/–ÑÇ2|ÄW°´ˆÖâý—è(ÿAýeòC½°Ýhô_M^…c/!-Üò¦>?ô„¸ÙSaÕ;iü2m&äsJmZøí˜f×Óg-Àzm Ò-tçîuG:h{êþªƒúQµÙu3•BÚDæ-Îû2¸ý½‰§žøôðkI´zŒÆ£9ÑÚè”öÿXÒºWOEaú¦ƒ®/寙„“‘òUöuHåÞƒô ïwH›™60gÔb#h³sŠk]o$Ô§ ÐÞèqt*ÃÇÉ!-‰Ó¾Hýª7_ÕË«w§ÍÔ«“o×9Ò‰EÐ8¤ó\Ï߆äOFoGz#¦”6«;¡|y²lmnµ¢‘HÃ6|”^$m?âe6"ŸUXô= «h×m˜€ Œ$ÞƒY¢÷©èWíUZ7âE}h±2éC_‹ôF¶&îA±jT®ùÍ’ÑÞ÷‰h1¨q,…ôõ˜¯"=™ÖÂK–_”iaZˆxºQú^tšŒDoD×¢;ÑÂ(µ~Ù€L¡Sç¥À¸Þdi¡¼l‡}ß•úõ6®:wÏ ½êø_.«£…ûDôk÷–ÂÛÑ(ì}Dô#Êèzû%ÒÂ;L Wß92²ð·„!-ŠSÛ„Ä­(|ª¯'#]“a©·™F¾¤KÔW(סƒ‘Þtjz@q?Ò[¤vLóÆæH}Ö}šö-×ýÞÌòå•îÄŠúË—ï¤íaªÜjcŽDöFÚ~ÄËì‡|VaÑ÷4¬¢]·a&0’@zF|d‰Þ§¢_iX´Wi݈õQ¤üž\¤BIe-$S÷Zà|=Š‚ÅÄU7,¿(‹r 7B?CçGaÂÐ¥èeeµh\åM Öä3{¾œ6õ´vÐíxЫ7nyv¯&C›ÏñH×YÞ”§kEešmâóõZ¥åKoA´Øï7Û‰]êñhÕWmÎöEÞŠìÒÂAÜ‹iØ¢JÓ韈7«e"lVÖÇfÁ+i8«hu±´ýˆ—Ùº|VaÑ÷4¬¢]·a&0’@zF|d‰Þ§¢_iX´Wi݈õQ¤¼žÿ¢H…•H»Ë—ØöøÒ 2—%vï?®Ö!vJŸ”ÿçà€E´è×vm mýE@o‰´Ñ}‡ÝÒæ¥Þ[‘í[ø¹. [Tiz8õñf¢L„ÍÊúØ,5^±cU"oq,ŸßÍt·û!ÿUŒ«ìqìI¿ÏEú@)b;PXß]•ʰFþô¿-:Õ{'mëûªË"¿QûøoTw3ÜôJÝ6¸ê]UÌEˆ•ÑÇ2|鳞Ä^ƒŽC'©è²]'0?-hÎßé÷zÆ‚í ¾ŒÖGO…1høú3Ò×Ë2½™‚ôõ«ýÑY¨‘•=ïõ—/_ög‹ÖVŸl0øÉ¿]îÌ•ùéU³<}Ýî¼,žæßCÞñY~¼‡„î3ÙUèÂZ¬Ü#¸)‘W¹Íµç-߇lÏEÓReûkÔX™ã˜“FäoR£Æšä߯±Fo“j ¥þtQ~4+¹)¡úØ×ÃßÀïeY;iûYVW‚ xÕ÷ŽwîŠw;­’@™÷b·ú]FËðQt|o¥ÂChbÑŠ.ßUGâýÿÐÜ]m¥zç_¢I-¸–­¾i·˜# 7úZã)Hk”n˜ój§™•=ïõ—/߬¯£9¶1•òmÔKG¹ômç%I=£°4_~&Å$Ô¥hCsI7¬æ¬MPÝ5È>7 óÏ–8€Ôß2øÕ«ñ*-m¿í꫇"Ý”éÍܶìÓ€¾÷­× -ÑÈÖ[:/¡­Ð˽íJé­†G=äÒ×±´0ÓÓY[õV¢É‹ÑIè¤Åd7L~Ÿë†ã1ès÷lLš‹Øq^ émJåÖ­kå°õ j¿AÚHúeÇÅ‘l)¤WŽzÿú& [—Èžý=Œ>‡ôK\÷¢§‘&…8¯§ßE½½‰ßžAÚkºÒ+†Rÿ:v: Ý„4Þ?¢ÍQ˜úw%ú'º }©oy‹ñ(q¤ô?Гè$v{!±ÕÓ“°ï9:MBùùÚ=Ѥœ™€ Ì$p.Á§‘æ„ffùg,F›—¢¿¡-æà±h‡0(}vh¬úüiõ„œ"¶’̉ŸÑïÑ1è+¨[›\ÛêЃž×!­!ß‹®Fa»Y>m†ZÇi=ÙSÓE”W/:”ïCÙwÙþ1j5Ž›¨xz šŒG{"Ùè´Y&••¿IhÓ,~!ázè ,­M‰žxí’¥'ÊnC{ ¨7¸Úü(’ÏmÑÊY\_§éɆŽé▌ΨÅfù{éH»gùkæŸÃµ?íù¡nuÐIèE4-ƒ´qúÒ±³´6!²o Ëj±Yí+ùk¤ñéÃVcׯ6!º9ÕõI6?z m‡4Ö5ê(¾+É¡ÿØ=ÄÔÛ`еW¿(ß?¥‹Z>ж™–-‰ÇÐت# ÏŠû´Ì]]³=miiZÿ9Ò(}V,ŠlÝ!0nõ`r:ºuú ç¸(ÍÊž÷ŠúË—/m`™#½éKÛX)×À’¤_IÊüwvü’$ï”,OAš~Ÿ#_ów؉DâØ‘‘Yrþkn#‘†%·×–»´ýˆ·U±ÍBòY…EßÓ0mw ‰‰h^¤„^)Œtq©Žøao&¢¼IH‹jÅ—C2…Jë—†ÂôäþƒYB ôt’.´oæØ¾Y9}uâ 4zôa&ÓÛ‡j±‘ÕÙ+Ë~5ò?rßÏÊ*˜ ÝDû }ˆ,€Â¾FDowdõ6 ãÉ׸·PÌ´Ú=‹_I¨…lô(Ò$z&úkiRÍÛ=dìœÏtzàè:ɫߑïŸÒE­ EÛÌ—_Œc‘æ cPѧqT±µI`NÊ퀮G·#mB†ÑVaÐqÍi?mŽÞˆôpKœlíX’¢Ú`l‚öGZ°ê~> m€úgÙó^Qùò *ÕZm@´f{E?b­–n4NIz”æG…zðVÙdXž–Ø~ _¡#ç"=‘ŸŽô”^öš™Aí¯JdѺÿ¡õ¡ìàKY(a/G¤NxW’§†6²³Ñ»Þ*há:émžf^€Ú±FþUWorÂþEDoy& ½ýЦ@»ð°ˆh"Ô‚¦žMÈ2ÿ”¼–¸$û!:é­Òöè4ôŠ›“¨ÍL dÏâotÒSÝó ËæÅõ°áAÔlžâ°-!°ñ¥Ð8´Ò{c¤ùï«Hl‡•çŒ]×ÜP°9€øHÌôù¥Eš­5}.?Žt>‚þˆ¾‡®BÊ·õm÷Féõ}{.jôq´ÒÃÜ‘ÖJ•™7 •¡þOC+›Š´8þÒÇÕH¦hÙDôP-Vî_˜ÑN·žCæAht9š†ÎDº /FúÝŒv¬‘ÕÕf+µIhòt3½‚dbô$Ò‚¦ži‚”iæ “ìmèíh?¤ ÕQh;¤Õ†Höy¤vó¦MÐ×ò™N›€ ŒŠ€æ.-¿ŽÖB›£Ï¢¥‘,Hó"[kš5Gjž“nA?AZ8Äè4¤ ‰ß3ž’ü…éâRž$‹0½èÒ¸Ê(¯§ü¼©_F—g.#\¥íëPø¿€ø~h}´/JûEr6Ó¸ÏC‹ §‘Þiì2ùH~^Fg£/"Y´7353­ÍχѩHoô†æ|t$ ;žÈ^è¤È <%‰·Š¶O«ú>n&`&`&`eÐFCk$™P߆ô•õï¢'PQ{‰ ŸDW 9ëo¥‹­4¬´Yciû/³òY…EßÓ0ß®v›‹e™:ñËä Œ#½p.oP“ÓéøÇмè5hNTÏ–%³ÞŠze#OœæDN&þzu’çèðHïÁˆ÷…èWícZ7âE}¸¼ ˜@5tÚ:'s]vâ5õñfþ¢L„ÍÊŽæØÆT ß WjÓÉ%I½ôÁkšÿ¹Ä× Iù´½ô¡nR¼ãh­F Á޽ÛAKSâñ¬”Nƃ¹’n÷w/rUû6©¯düåßjD‡õ6C»ú"&NÏç*HúX4æ©Õl&`&`&`&0æ è'•ÿN™7 cþºê‹êkPú=“ªl5ºÅ׸ªj×혀 ˜€ ˜€ ˜À xŒÎ~¡êûw@ª&>œíé/-Ti;TÙ˜Û2000& ¯jMA›U5¿©Š´Û10000ÞÐóÉ›þZ©¾*_‰é—Ÿeú„¼Å±|~7ÓÝî‡üW1®n£›çÀ¾M`,„{±Œ>–ác,wÅú™€î×*Ö"ýÌ Œ¾•=ïõ—/ïsÚÞY­qóW°ÚƒUF©ü…Z†Oû00000"à È@.wÖLÀÚ&à‡m£rA¨œ€ïÏÊ‘»Á~"àßéÎÙ¨ì;tÝé¾½šÀ˜%à{sÌžZÌLÀL`PxÒ3uewÜÚ« ˜@‡Æê½éU‡†«›€ <σt ½éÎÉÚ·ú“¾ºÃ×^M (Ý‹º'uoŽE««±x®<&0îð<Ø®]ñ¿±_ﻈq¬+ 7pÚí~È/ÆÕ`¸Î60Rþ áx8žˆ6Eóš© ˜€ =`ÒæC˜îé`ÜE× ùò^_¶¿Æ-`å!ÊEkÏ]9¥ºÝùïŸʡc/&`c‘@·ç½±ÈÌc2A&àµHž½¢sq¾¼×—í×·9Û+ëR&`&`&`&`&`&Ð9o@:gh&`&`&`&`&`mð¤MP.f&`&`&`&`&Ð9o@:gh&`&`&`&`&`mðBo”‹™€ ˜€ ˜€ ˜€ ˜@ù_JoPÌÙ"à7 ¾LÀLÀLÀLÀLÀ*#à He¨Ý ˜€ ˜€ ˜€ ˜À!pïGO†á HO°»Q0000&ð úîMÈ(O`üÓ”zß[‹c£t=ªjÝî‡ü÷b\£‚áJ&`CA ÛóÞP@ô M`€x-ÒŸ'Ësq…çÅo@*„í¦LÀLÀLÀLÀL`Ø x2ìW€Ço&`&`&`&`ð¤BØnÊLÀLÀLÀLÀ†€7 Ã~xü&`&`&`&`&P!o@*„í¦LÀLÀLÀLÀL`Ø ÛB×_8¨÷W†ý:ðøMÀú‹€ç©þ:î ”IÀ÷w™4ík ÛÄo|ò2u§M`L¨·ñŸ ӧ܃30á&àùpŸÞLÀLÀLÀLÀ*%à H¥¸Ý˜ ˜€ ˜€ ˜€ ˜€ 7o@†ûü{ô&`&`&`&`&P)o@*ÅíÆLÀLÀLÀLÀL`¸ x2Üçߣ70000J xR)n7f&`&`&`&`ÃMÀá>ÿ½ ˜€ ˜€ ˜€ ˜€ TJÀJq»10000nÞ€ ÷ù÷èMÀLÀLÀLÀL RÞ€TŠÛ™€ ˜€ ˜€ ˜€ ˜Àpðd¸Ï¿Go&`&`&`&`•ð¤RÜnÌLÀLÀLÀLÀ†›€7 Ã}þ=z0000¨”€7 •âvc&`&`&`&`&0ܼîóïÑ›€ ˜€ ˜€ ˜€ ˜@¥¼©·30000á&à ÈpŸÞLÀLÀLÀLÀ*%à H¥¸Ý˜ ˜€ ˜€ ˜€ ˜€ 7o@†ûü{ô&`&`&`&`&P)o@*ÅíÆLÀLÀLÀLÀL`¸ x2Üçߣ70000J xR)n7f&`&`&`&`ÃMÀá>ÿ½ ˜€ ˜€ ˜€ ˜€ TJÀJq»10000nÞ€ ÷ù÷èMÀLÀLÀLÀL RÞ€TŠÛ™€ ˜€ ˜€ ˜€ ˜Àpðd¸Ï¿Go&`&`&`&`•ð¤RÜnÌLÀLÀLÀLÀ†›€7 Ã}þ=z0000¨”€7 •âvc&`&`&`&`&0ܼîóïÑ›€ ˜€ ˜€ ˜€ ˜@¥æ®´µÑ5öïÑUs-00000~#à7 ývFÜ0000Ãúmòâfí¡™€ ˜@;<¶CÉeLÀLÀ–@¿m@®X’î¸ ˜€ ”CÀó`9íÅLÀL O ôÛdW8]‚ü°O/wËL k4ïiþÓùº ˜€ ˜€ ˜€ ˜€ TMÀª‰»=0000bÞ€ ñÉ÷ÐMÀLÀLÀLÀL jÞ€TMÜ홀 ˜€ ˜€ ˜€ ˜À˜»ÉØÿÝ䘙€ ˜€ ˜€ ˜€ ˜€ ˜@a~R™+˜€ ˜€ ˜€ ˜€ ˜€ Œ–ÀÿDP2öǪIEND®B`‚tpm2-pkcs11-1.9.1/docs/illustrations/policy_model_transient_objects.png0000644000175100017510000015454014535673717022053 ‰PNG  IHDR ü?zDsRGB®Îé pHYs  šœ iTXtXML:com.adobe.xmp 2 5 1 2 †Ò®$@IDATxì¸$EõÅa—œ$‹¤]²d’–$*ŠäŒ€P0!Áþ0 H`B@A%£$ ‘¸,HÎ9óÿ÷ú.µ½=ýfÞ›éé™wî÷W·ªnÕ½uº»ºª{fÞ4ÓXÌ€0fÀ ˜3`Ì€010mægQÒãÀZ`†¬Ì‰0fÀ ˜3`Ì€M ¼Ì`/»‚I£iàUŽ56 çátý*Û—0fÀ ˜3`Ì€¨)ç×5­çÊ ÈKŒÄo>zþpzfÀ ˜3`Ì€0m`@oBflC?؀¼QPç"3`Ì€0fÀ ˜30ZˆuòhÇÆ=¦c=»c3`Ì€0fÀ ˜3`Ì@Žérù4ë]_ʆu3`Ì€0fÀ ˜~eÀŸªðÈú H…dÛ•0fÀ ˜3`Ì€í x2ÚÏß ˜3`Ì€0fÀ TÈ€7 ’mWfÀ ˜3`Ì€0f`´3à Èh?<~3`Ì€0fÀ ˜3P!Þ€TH¶]™3`:ÄÀBô;xNïÁîÖ ˜3`ÚÏ€¾ùŸGû½¸G3`Ì@ý8Š4ÿí„ö¾¬ìš¬,µY3«ËÏ™ÊoŠêõÏ^¯+‚T>EFíž³'á/õñ$õ'€™»Ða÷ ú ä~Õ-¤ßËÊö'ýY¦ŸK2?Êã@í6‰B§fÀ ˜>g æÑ4íó!woxe?ÃÛ½¨ìÙ ˜3Pñ“ã‘Êsª§ù´üQ*Ò…»ì&ØH<€~  Þ´©ù5X„Äfa ¶'fáçbòWƒÙÀæ`'0 > ~´Yø1¨¿Á#à/ èˆâ 9å`Cð1ð{ð=0ø38XÌ€0fÀ t„t·zG¹S3`Ì@Í8šx4ïí“ĵZVvMV–ÚÄŽ+ûT-ª×ùxÄæbé¬ì¦,½€4$õeŠO}œ fÏdùUHC´‰¸ĆDoDÔFþC¾¢2½‘|(¯vgºÞØ,,fÀ ˜Ñ€æÁœjã³8Ð[‘;Àu Do0„¼èMÍ+Y¡úLEoQvòsvVqéí™îÄ ˜3`Ì@GÈïøâÙgîÔ ˜3P#âmCÑR¥>µ ’„¿¼Å£·€ê®eo@òý(o@Ô~]6÷¢ÏªB‹0f`1s`šŽ¢áW;Ô1Õº³73`Ì@m8€ÈæÎ ïD %×b /l–Ì5˜Dþ‹@ýþÌ´‘h“2è£NÇ€õd»Ádò_½‘P?OUlï’Å@:/KþWà[ •w‰±ý4­Èô I/ÉôïêKñ3`Ì€0a`ºŽôêNÍ€0½ÇÀó„o1ži"üW±y¤ÄîêôQ&‰6×½iÄG½fCßr dðÏŠ$+'ù‹Ñõ ‰âû*Xè#U÷}dk{ðK ù,ÐǽŽU&‘ÇÑclzS$Of…UºÌ ˜3`Ì@»HŸœµ«O÷cÌ€ è;—ç°yƒßH¹6,óýŒîÇÁk@ÿ¿CoF„ØhhCQ$zã"Q¯ƒo(ƒüœ®{ùù9°˜3`Ì€¨%Þ€Ôò°8(3`*d@‹ù¼D™> ,‰¼ô(ÓÛ‹ÕrxkR:YÔæN /¦ïæ‚û¾"œ$zƒ‘ú(äO|)|…¬àRõõؼ è­Ë6àJÄœ–åõflòmœ7fÀ ˜3Ð2Óf-Šn’PNcÁûÁûÀ¯Áºà`Cð1ð{ð= ŸÚüœRYœÌU@›ÓÁ]@1îß: $|j~×flð°/JÅ ÝÉ~Èû¿2q¹˜(vS2, ´ÁQœO‹0fÀ ˜©¨Ë®¯.qLE Ì€¨G‘æŒ}’È´VÙ¶ ¨^¶ª?Hôt^ùE@þ-ÀΔI´p—M`<ºDƒRÙMYziHôueʇìõæB›£/dùûH7Ît½%Y äåT ÔöФbô[²ò“ùütVÿ}Ò¼½IãMí‹üÏÁà MHˆ6HŠu«(pjÌ€hÀ€æŠ<˜v¼8‡ò–10¦Cýº[3`Ì@Õ ,ŠÃwgNõ$?dA”å>&¤…º¤ÑB[u×éòñÁd 6 Úh¤²}–9œTu€žü§¢7#ò½2Ðf@¢7º±ýÜ gÉ@oòo`~›T¼Œ~f–zeõFä8ð+px šm~NKpBÖ(úOýë͆|- ^É윘3`Ì€hšºìúêGÓÄÙÐ ˜®1p4ž‹æŒÿR®'òꯡNo$Eo@´È¾h¿ x h¡¿ñ@o0î²ÑǦªÛHÖE±½Hy,æe·nbw/ú¬*,‡(SÚd¥²7•ÿ„ÏWÑŸÏÕ=¶y)z’ù‰¬Ñ#¤ª[$ßIAÞo@ Hq‘0… äçå»%uŠ¥[Tæ×o@*£ÚŽÌ€èwÒï%à¯à{`u>‘×Û…/‚‚§Àª`}P&ZDks<Ð}ò‹¤>?oéãVÚ ¨<ý¨—ÊU¦MI* £òøÈWZº6O²ù#ІH¢{é£f*צ«Èç[²ú×I5fÙn$7åߊÚRl?˜Lõ÷FJôñ¨¡|OÕ½¹xlô†ãä,U_ç‚Ë@ˆÞpœôfâŸYáu¤‚äP ™­^·åQ.ÏasòyÿÚ4é“ä§À7ê*üÇ ˜3`šaÀfX²0ud@Oõˤ¨þö¬ߩē/•ÅbúôÌàŒÔ}=0ÐÆä~ 7$Âi@²5ˆ> ²?*»è‹ééG©Šl³&“½©Y hCñ zéíÆñ ÞœD?sS¶-P €?-Áo€6&‹dy}±þ³@›«h;ºü¤x+ù¼mJ$G‚ƒ´7ÿD_Eü¿ieÍ ˜3`F=ºaäÑ Rò1Ĭ±Ø§0f Ž ÌNPúnÆØa7/í–A{ù×[–€Å ˜30ê´î«S,#á´'ÚÆçv‹úQWå@êG•c¶/3`Ì€0fÀ ŒFê´î«S,}.ø#X}ˆ=@3`Ì€0fÀ ˜3P¼©Ï±p$fÀ ˜3`Ì€0f ïð¤ï±hÌ€0fÀ ˜3`êÀ7 õ9ŽÄ ˜3`Ì€0fÀ ô=Þ€ôý!öÍ€0fÀ ˜3`Ì@}ð¤>Ç‘˜3`Ì€0fÀ ˜¾gÀ¾?Ä 0fÀ ˜3`Ì€¨Þ€ÔçX83`Ì€0fÀ ˜3Ð÷ xÒ÷‡Ø4fÀ ˜3`Ì€0õaÀú GbÌ€0fÀ ˜3`úžo@úþ{€fÀ ˜3`Ì€0f > xRŸcáHÌ€0fÀ ˜3`Ì@ß3à HßbÐ ˜3`Ì€0fÀ Ô‡o@ês,‰0fÀ ˜3`Ì€è{¦ëûV?ÀEqyX ÌP½{{4f x™1\ v“JÆãù¦„W™3ÐÍÎ7Muf#3Ð ÓfFoG]AUÇŠêÇHx×InkÌ€È8Ÿtƒ6<ß”ã*3`Zb`¨ù¦¥Îš4®Óº¯N±4I_ïšÅ&£.¤×%Ž‘Ñ—hì7#aÐmÍ€ôdrÆÈ¤žo Hq‘0Ãb`¨ùfXѨNë¾:Å2m½_í HûaÑ Ü~/îÑ ˜ÑÂ@ÌÓEãõ|SÄŠËÌ€.eóÍpû,kW4‡UCÄW§X"¦¾Mý%ô¾=´˜0fÀ ˜3`Ì€¨þz5Ǥ[»ùjFg/fÀ ´‹¢'p­öíù¦UÆloF'í˜oF'sõˆðSèÌ€0fÀ ˜3`Ì€h–o@šeÊvfÀ ˜3`Ì€0fÀ Œ˜o@FL¡;0fÀ ˜3`Ì€0f Y¼i–)Û™3`Ì€0fÀ ˜30b¼1…î „¹©[ÌSbÓ®ª™èh ÿ =ÜózvÚ¾Ì ‰l–ýø 1.¡[Ò ÿÝŠÍ~û—fæŽ~¾îëzd=ÔõÈ8.3ÐFôKy´±û¦»ÊÇЋ¿ÐÐc(;`ÇfçÊ^‰ÑŠYÙÍYÙ¤g׳rqrXHîE”?ïBÿPÙ® d[•=Ò¾¢~'”‡@ôù0úÎ $÷kTè¹ôròêkmPoøi†ÿ5²¾¢Mš>H]¿I:¾ÐËÆ6iZfïº)(›;d9Ôu?eoSÏmcð°pfsŸæˆ¸6ÊæŒ¬Ù@ö鱎k?æÆüµ¶Ïg5ªÿ õê¢mÄ}j¾¼Ä\S_ØêZú¡Æ›ç™¬¢u²”Í“¥èÚ¹1®UÍ1ÿIÚh/iT¯køÝÓLÓ¨mÄ®±= t-n ~Ò9 Ñµ>;v’²ñ.N}Êùíäóóq£1ÄåÃbÌ@0îöBïFèá;M»ÇH|¦±‡>’þêÖö¤qí•¶rVvKVvE–߃T7 -dÿ| HêC ð¼ÄS²ô†&;Ùë­CÜ|¢Ý>YÝIåG"¿ò7õGñdÑ¢_}:¹dp}'ù;Àô ÈfÊ5^µÕæ*ü(/l $ÚT)¯«6HÒsˆ68*»7 H—ÎÊnÊÒ ’ºðSÆOøÔBA›!õ¯c’çNcÐ"IõZ(…HW™6‡²)ŠûbÊe³ÈËå¨nmPoj_Ä­68w‚à?ìOGQ¿[EA¦_eÃÌÛ*oiŽ¡æŽ¢sS×CzÝç=åç6]sš·^3‚´>®8†EsM&KØ—]ûE×êäPÊêËêÔG{ô©Xú†#/ì”Füeã-âDîFÚë)åÜ QOP'‰Ìþ}ˆRõ½h®vï¬\ˆð£Ì7²rm¨.Ët-ö=¹ÓÆ)ú׆ån  ŽZ¨n? ?*K‘çç§I}ºðP!k£¨«¢ Iµ(RÝ: âÖ†N½/ÕýÄ¢u²½‘}ŠVøŽý$˜x3M9 ýÍZkC1P6w4sÝçûo4·ý_fõšoâZ.›3ÒþÃ>Žs¤éµ×jÔEú³¬£Fõ3Sߨ.ÚFìÑg¤d}7Š/®õ¨/o3óñPq¦œY/g Žaš–·hmê;ôö{i®ÇðŸ¦Íµ´UË Œi¹…Œv^ËHߞ͚•é¢Uùbà8ð6°8Hô~ÞmðϪ$ó'¸x°xàï$þ~þ fû€¼hSpxÐbX uÝð–[‚kQR_Kfwg©6©CæW@ŸÝ¾'«Ð¸R‰·ÑGÔ}EmËxP&âNœˆ×ûÁš`Žª¡â ;§fÀ Ô˜7ˆ-n„›Aù^“~CçZÌjŒ'$Fº©ì\ Ñ+ày ÷„ÜŒ"›w€3}Ò¼h.»+“Š•³2Ýxór&²ß*©8(+û6iQ‰é4?ÌlÿHª…·d >Ó‚"}$êQ »ÕAøÑÓ=É–@uÝPãÉ]l¤Ô·nIJÑI¼aŠvi*ÂÏPüLm´U¿E¢ñÞ d·cb°CVv©lòqËt7 vg=Ý•¾ Ü”(Š—âÉRÄmžÿ0ÖbNý¦Ç:êú%Õøò([ÞVyKs 5w›ùë>ï©ln“mZ×FÙœ‘ööe×~ѵšöQV_V—=úÔÃsïEñ…Ò¨/oçùù`¨8SŸÖ˨ÃüQ‡‚¥:Å1õ}ZÒëÇHx?Œ¡lü«PùÐ8ÿþ´áPþS@r!Pþ 'ZT¿ôQ#½Éˆ›°ž”éã:#Ñã&•ÞdµP—ç@^ôtQ¾Úp*ÛDÏ ‡ŸH7§l :Ù_þ^ÎòêO’·9™²ƒÆ/ ?qsUÙ%@ý éäòŠa"P¸ÙÌ ž¯‚Á Ž •Ýá ü ÅO3ºøŒú¿Ú„ q­k£lÎH» û²k?®Õ‰4Œy.ÒÙ)‹úx’öuÚ¦±G»_£èüÛD|®õ¨/ožó¢ùx¨8#6§C3Ÿ;”¯ZêCŒ¹N±DL}ŸÖ…ôºÄ1’Þcjü»bOÿ5ÞÁwž–KôÑ«?ƒ”‹[ȯ$q#K륟d#=½É’æÖ¬|1er¢‚nzÑŸñûe6Ñ_Ô¥é'3›H¯Ú¨^=‰Ó $o£öq`¶Ì üü&¾¼Ô§â>2Ó#-â/ÉÇêþ¦L"ïCWùÿ@øŠŸé²6ÓP²3é1yˆ|l>Ô6·úT,zó16ƒ6eÁßóèzC"‰xcÌiÚ ÿêë÷@í·T¦O%å'ô²¡†Mš–Ù»nJÊæYuÝOÙÛ›×ÑÂùŠ,×™êãÚ(›3Òn¾ìÚÏ_«éy¡Q_´‰º´Mèj›Æq‚"Í·_´IS]ëQ?Ôxóœççã¡âÄ•¥IÒcz“MÛf~Ó´m·ØQCèe]|Ê{AØ:m‹n‹H+#½Suu‰c$ãë‡143~m6Ké4x åËùÔ·³X›…%Áx EñpDO5žtã‘ïG6ò3\ùþê”_ˆ`„ኾ˲4.7Íð?ÜØz¥]«óG«ö½ÂC•q63wôóu_%×­øò|Ð [ó­ÃüQ‡‚½Vcñ棵 ÇüN›±®Â¼D]¾¼“ùºÄ1’1öÃF2~·5f`ø ´:´j?üÈÜÒ ˜~c óGbˆãÚj,EöÑ—Ó!ÐSl‹0fÀ ˜3`Ì€0f ô9q‹0fÀ ˜3`Ì€0Ãg Ÿ~´Ýk9ðæÈo@ºwìÙ ˜3`Ì€0fÀ Œ:¼u‡Ü!ú…–q#죕æ3a¼ ÐþãzÕ—fõ [ó‹0Í307¦úaŒyšo2•¥~¨a<ˆëq* FúƒE}Ö¡LŸšÐMè âÝ’føïVlökÌ@‹ èuH-vÑó| Ê÷šôÃzóªâ] G:¾_GeúÞ¤’ÙÀe@õçƒÁýY>NœJùÿ²º]IC¶E‘í@7xýôç…'’×ÿ ѯL©ï‹€¥¿ÈŸ+Ê—I«öe}õsÝ î,?-Þ.ú¿’¸žó|ê'¥CvBÑOT‡~–vÊNdR›‡ÉÍ!úŸ?êóš¬ 7¯ò¿ã²ú4¹ˆŒÚÆ%ºð£ºÀ“è'Í!ê÷i Å|ÈPd{b$é¬è¿úùqÙ¨ýÕ@dBÒ¸e£Ÿg¿¬Iº0ºlÄ•¤(^Õ7ËÙOóêÿ†XŠÇy[v®4ï_ùnI«±äí»w¯ù ÞâŽLšvc@©ÿлÇH|FÜi:’þܶ> èÿs¼´hÑMMÇx03¸(ËŸ—åI&ÿn¾þãòÉ >‰¾PûGžÆê'‹µñPÙN`ƒL¿•ôÓàÛà% ²~“ÿ0 ÛÕ¥Ð1Í£lty[å-S3ðsŠÄò{]“ÊÿHâzÖ& ½V¨¼eÿøQ-àµÿ è:ÍÛÈ^eŸ’𣲭Jÿé¨òò-ÑÆFyÅx¸-Ë?BªÍJÈ8ù—­æ†¹AHø¹ˆ‚ÿ?ñÐã@ô³€Ú‰ɇ€òSlÊPDŸkW?ªÿPŠKùgÁâ@q‹ëïðq¯*s’߀D¼Ãåú×q;(.AºÊTg)f ¸JÓbËΕ¦¾CòžÃš–µHí¤[šc x°ŽLš6×M{­Rÿ¡·×Cç{‹¸Ó´ó^í¡Ó è\èfÿ·ÌQÜ0¿Jþ\ ã­t&7äE¢ IuSÿP»cA<Á»]uûÕi4+ìtóVª×SIKÿ0 cšGÙèò¶Ê[¦f@ו¸Ñ5¤ëK×”®¥¯I\Ϻîò2ϵ_%©üú}àÇ ‘ìÕN uÙ„•ÝôfF› åó˜7ÆRwNfó}ÒÅ®v7eéžQA~ÒñH—½åÚ4¼˜å7'½+Ó÷%Í‹êÕî 1„Š¢òS³‚ü|§ÿÿ¤zq”—F4ÞhÓˆÛ”ÿ°Wò)”}D.ìG{\¥iÕœ¤¾C¯:†ðþÓ4êŠÒÔNº¥9‚·ëȤisÝ´×*õz{=t¾·ˆ;M;ïÕ:ÍÀú8Ð1ýYæ(nðñ‘„W(Ïÿß!kñ '†³>ÞIªÿ”® }U Ñw<^òù8hñ¤·-}DKu—(céÒy#ô²Á…Mš–ÙÖºCxpt/ºžÒë-cH\Ï7PשÒO‚·µ½4’2›Ûh¤öË‚ðs^VöCÒ¡6 ˜L£Å¶úÐ\r+ŠÞ|¼¨N4BÂÏá,Ö—Ù}H¾ ”×¼£TŒéA^¾Aê¿«ˆ‡ ÿÎÊc¾û-ùãÊÕnO—Fáòý{L4—êøäÑ\ËöYåý+ß-i5–¼}·âî5¿ÁÛ@Ü‘IÓn (õz7â‰Ïˆ;MGÒŸÛÖƒ]CÇôÀ,œ¸Á§Çù˜\¨qCNm¤¯—Øý=êµ(JE‹¸D½R-æ’gAÑÓÅJÿéIÒczÙ@Â&MËìGkÖZp?R®tKŠ®gÙéà ]oQÉÚTÈæªµSÝ: ü|ýz ‡ Õ7zBÕ4ùþß“µù³*‘ÿõ±¸2HøQY ùˆ·³ OJêÓ Å“åGhêcßÉ%ƒJl"Ä©$æ»§ÑŸz¨¢v'm R‰¶e…âm–ÿè[~b¼c¢ÐiC‚«4mhÜ¡ŠÔwèr5d·á?MË¥vÒ-Í10À›/ÐæÈ²•˜5£à‰ºo tAéiéº /«R0‚‹=] ùj(¤‹=9}X ìä[OQ·}¾ü­šÿ˜3Јé¨X ÞÖÇÉgÀ¼ÚàŸIÒkuoòwgõê#½gêZüø˜$ã@j#}†.9 ¨^hôd.ê®ÏlŸæŒG³|´ô¿”KÂO:Ͳ;B™lCª2ÅÑHV§B6zà¡7å@åGIÑ|÷7Êe£MÈÝàU ã¡Í›Ê'IQ¼ƒ5¹Mù[mèÔ¯ -å WiZÞ¢ýµ©ïÐÛ凉Ú–µLí¤[šc x°ŽLš6×M{­Rÿ¡·×Cç{‹¸Ó´ó^í¡Ó ¬„Óxrš¿aj‘7`ÕI"-úå â†-›F½¨“?Ýôµp8<T¶?éêÛÒ? è˜æQ6º¼­ò–©¸"q£Eþþààuð0˜Äõ<=½V¥Ïvj¯ÌYàê$¯·”’ÔæäÙ«Ý.@~b2ž²@Ć:żñOòOfõ÷“jµy–¿€t†³ò÷†ŸtòѬþDÒf6 ²ý3PŒšÓN×eùgI’˜ïôðä ø‚³¥Ñÿå/" þÄ¥$âˆ.ÎS4Ë?ÍÞ(É§à ˆ)—à*MË[´¿6õzû½4×cøOÓ²–©tKs oÖ‘IÓæºi¯Uê?ôözè|owšvÞ«=tš}^úE £D›ãô¯·*ÓÂæý nÈé¹ ý|2J´‰²Hµñx&«—ÍS`? Y ¨ì§ÊXú†Ó<Ê—·UÞ25úèU,¢ƒ³[([#3ë9êÒtÎÌFŒôš¾ŸüdzºHò6Q›Ù„mB¾‰"Z”KR*×ۗ߀ä4 òÝ•Iät•ËGøIç§³úxÓBvšØ€üV™ÑÆçXð<ÍqÚ©Ï|Ü/Qqˆ±.‰.ÎÕ^¸èMˆ$âº4m…¿ä³Ù¿)Ï¡7Û¶]vá7MÛÕw«ý¤1„^ÖGØDZfëº7˜‚¯È¤é›¦Õi©ÿЫóÞOwš¶§g÷ÒmôÔTÇuñ ™_ºqº¹†…¢XÖ§}Á@:o„^6°°IÓ2ûÑ^÷XÌ7"¢í¢`Ú’>d#ô›hZè­ÄpDo%#á¦þ‡Ûhl“ΡWÍCøMÓªci ¡G]Q6‘Ù¸lj¦à+2i:u“Η¤þCï¼×özˆ¸Ó´½Ü[·XÇzòw`·Èüêc[€+AÙ"(3wÒC ¤óFèeá‡Mš–ٻΠ˜3 ¤óFèQWU~Ó´*ßy?i ¡çmÒ|ØDšÖYoÌÀ|E&M7í\Mê?ôÎyëLÏwšvÆ“{íËàtán8N|j²˜7)³Ú ¤óFèe# ›4-³w0f HçУ®ª4ü¦iU¾ó~ÒBÏÛ¤ù°‰4­³Þ˜¾âé©2y‰º|y'óu‰c$cì‡1ŒdünkÌÀðhuþhÕ~ø‘¹¥0ýÆ@æ:ÄǵÕXòöÝX7Gì½”ð¦ÏcZÌ€0fÀ ˜3`Ì€0•0 _ౘ3`Ì€0fÀ ˜3PoôCŸú¿ñ@?ã­_ÊÓÏ^ŸôKuE¢›÷€U€~>ûF ŸÔþ+øèŠèuHÝ$ÃÀkšn2Ÿý0† ßMÍ€­Î­Ú 475f Ï¨ÃüQ‡â°¶KÞ>úéT:ŽŸy¿‘”ºUA^ôËq‚°Ë§úÉì/€ª>BþqYÔ@EÅ"¨4­8„»Kc}ĺ3`F1g¤iÙÀS»ÐËì]gÌ€bÎHÓ¨«*M}‡^•?ðŸ¦y›4ŸÚI奈§ótóñù;€6iúRÿ¡çmꞸӴî1;>3`êÁ@:o„^Yؤi™½ëÌ€0Á@:o„uU¥á7M«ò÷“ÆzÞ&͇M¤i]»õOÓaøÑ?8Õÿã‘è­Å¶àUõʇü%Ê• Vú_F[}ô*­×G»:-áoÀOdÒ´ÓõŸú½È®Îewš¶#Þyèäs`&ê#éû4> éµ%k1f bÒy#ô²Â&MËì]gÌ€Òy#ô¨«* ¿iZ•?4†Ðó6i>l"MëÚ­k~Î-è\±z9ƒÖum&¢Òƒ@^ôsþw‚°»:oÐ|øè:2iÚŸCv™ú}ÈF53ˆ¸Ó´!js >µùHõáö½# _zívW–ß”´*Y Gúò”¾ e1fàÍ›@³óGjºy4fÀ 4Ã@ÌiÚL»vÚ¤¾Cogÿ­ôþÓ´¬}j'½“òU:Oýé çëJœD]´y}Ö¶ŸIìd?g»vGLýE&MÛ娕~Rÿ¡·Ò¾¶wš¶#®tÓ¡_3ÐFd$r M:Ðk¼›À•IY§Õ¥p žô©‘Š~ÑM¿ì°78\ îÏ}V2=Ö‹ùOâK¼‰?ñ(>WþÅU÷Mpø!xÌ ŠúY›r½uOw€Ápäm4:<n?[-šÇF;~ª, ˆ/ñ&þÄ£øü7¿âY|[:ÇÀtG™·¼­ò–Þe@óµžl> .šOךÿuí–æ˜ S=è¯{_ƒIàz°+˜Œf©ÃüQ‡âh5–¼}ôÓ©t3:Öº*ï7òz@ñĹ$FÝ“ò¼ªŒ¯'¶;å Úœ˜ºLš¶Ù_SÝ¥þCoªaŒ"î4ðÞ…¢ò[€n*‚Í—ÉÎ@Om¾ôýŒ£žJ¯ Ò HªïF6š\µø xè ÚM@}„hÃqz–ù:©bÑfçðNÆú“6[UÁ9@š1 ÌçqÔëæùO°'Øõ£É.@1lÆVdŒ?KKç¿âY|‹wñoi?ºò(ó’·UÞÒ{ è¡ÒßÁÝ@”|}ABEo—ÎmDF«Ôaþ¨C qü[%oýt2Õ:M뽿‚çA>å¿ $—‚¨×Ú¬‘ÌNEØ)Õz°“¾|D&M;é¼Qß©ÿÐÙÖµ<âNÓˆ56 kDéê@¶zcq8„èMÃàG`E »yrú•äBæDÑ lAðYð0Ðîvfð Ø„¬†¢Åäµ@ŸgÁ€ärð  …§±¯^æS'¹|Æ ´¬=™Ò˜ZýÖF´ÑÛ““@ºi"ké0â[¼‹K{ÐõG™‡¼­ò–Þa@sü!àQ ;c€¥:–ÄÕÕà|°Xunkã©óGbˆÒj,yû觪tFm´îz D<ÿE—¢Lë¶F¢µ`Ø)]¦‘a›ÊÃ×@w‘IÓ6ùi©›Ôè-uPãˆ;M#¬XÄk·¢¼ÈVƒÁçA*ZìéíC£ ÈCÔ}:mèÚŒh‡¼ ø8¸Œò¯7,éÍn^òÇÅ¢Íú•®WzWзe>u!œBÊúÎä£t|?H7RáËiu ˆKûHçÐËz›4-³w]}Ðü«ùR‹ßqõ kÔE¢{â—À=@’Ñ$é¼zÕã¿iZu á/!ô¨+JÃ&Ò"›v”iÍöЧ]=¸ÎKþ‹äzX/Óº¯H~IaŒA~¦+2jcYøè22iÚF_Mw•ú½éÆ51Œ¸Ó4B‹ È;¢€t ÛUÁõà‡ •ËÈhcÐhòoêKhÓ¡7"ñ4çDô_ÓÁ·$þïÌNþ;M±l ®_!ºY~è¤.ó©êÉ ¤¬Ÿˆc¡0"]‡zmÒFÛMbZºV­ã óeí®EÐŽÅge£ÌÛ*oé N!Ì A§oö½ÁF÷£Ü“týè×)édßɹóGbîZ%oýt"H§áO†¼ìDAÔ?ƒ®5›Öƒ'å·¡©|–Ìë Úþ_ZÙ!=| t™4íßÒnSÿ¡—6¨aeĦfl@.¦`ðVp.¸è&´?xlf:1ÔÏz`ÅL×–êÚT<´#V?zýo7ôjí… Z0J¦7›êå[mµÑ‘í|`? Å¾úÕÇn´ÑïÙ@™Ïü¤¬ŸÅéKãÛèMP™Œ£R¶«–¹®rtN¿ âܪ<€>s¨s<²!æm•·ÔŸ ñ`¦ú‡:ª"܇ÑÞ¦oã¨uoÝèž«ÄÔIê0Ô!†8&­Æ’·~:‘êÜIý]Bþs`Gp$Л‘¨?=dw”(Wª5æùà—àÖ=@~vÐi Ÿ~"“¦ ¨ÿÔèEvu.‹¸Ó4â ÈÄŽó?èñZlô£@œHO¢ëš$Þ”ÌÓµp?¼ÔçßÁº •“¹8-@_ ü¤qjã²>è³…:á_²Ñ¤ü! )ó© ÈIVƒÊúÑx¯Š{ŸAó¿ÓRz¨bg^€ KØ›Zw±é-5ve)éõzYƒ°IÓ2{×uŸ=xy,ÓýPAgQvHAy+EÚÀ|üèÞ×§î©u’ˆ+M«Ž/õzÕ1„¿ðŸ¦QW”¦vÒ;)z(}5ÈûÌçõ±÷…’@t_> ¼ò¶iþnêߪ¿ZØI”ÉKÔåË;™¯K#cÙ´Ñ ¤7 c&©G@^â„Þ8õ—·W^ }½ÐÛTÔ×$°?89­Èt½¢[h³s/ÈûSŒs‡A^ùÌÛ)_ÖO‘}Z¶™Áziaº6H{æüˆËsÁ‹¹ò ÉëmÑÛÀ¿À9à²9ŠÚhÓ——%)Øüh’è)ÄGÎ+×€S6„-^~ôýœTÄÓS@›Ü*åœN©ÒiúÊ_bÙ\ܪ}RÖsC:ˆ/G òåi›Î‡:®š'RÑ\±,8äçŠy)Û ,´!ºÄÃ1Ôyçc¤k‚™ž–t¯Ð\·4Ð5² Êà$ ‰î/;€3Á½@ÒÌ\9nÐtà¯Æv%ÐØ¤K4Ÿ†`i^¾¤s.Ùa‰b¾¬ îk±µÙ èž%~ó¢9{|aóÁgBÙ|“ÚµK¯C 1–VcÉÛwš;›ŸŸùóKÝãÁ·@Ñy;òï•€Ö6!Zƒê‰kíP…LÁ›2yTDÞG>†)‚Ì×4_6†w³ê«xÅ%z¶ºÙýÌzUþDàÛw!ø·àSÇK7^-tÔài°èÆü òóÀ àv ð¦ äo(²+’OP(?³f•o'ý/xüü¨ÿƒ¹Á{ÁkàÊGȨŸÔoZßI]7\mº,#c@Ç/²ó¶Ê[êË€æ~Ýäçaˆ»Ó^ÇZ󒥸}  ´‘æ˜TÆ“Ñür+ø ¸¼ ~ $ZHë‰àŒL¿‡t>° оP¾k(_[*“ÉGIµA˜´2WêWŒíŸèòu7˜H4Ÿ†ÍeèůMÝ0R9™>×d'ZÊö: ñ—A:IQ¬UÇW‡bÌ­Æ’·~:N‡ƒ%Àzà`)n*È6Ù½ljhÕÙŠàmÀKdÒ´³î‹{Oý‡^lYßÒˆ;M#ÚEP~ªÚ |_§‚U@ÝdUG‡]Hd*t£™©‘AËc²EâC›Ýðb±ýut==œB49œžºYKZÙ€h1p-˜G 3Ñ“5Ý`ÈòJõFEDqM¿Q¦ ¢ã£ã¤ãe>é¼zYoa“¦eö®ë.»ã^sòHEýhQžÊrd4Gì”nLú<8èáH*“yÌ’ˆ®óhQ°B¦kq²<Š6û‚Å€l7mXtý?ÒEö‘䯒‘Ì•‹Ó^cÓ¸%Eó鶔˦كúi$«Sñ¯F•”kŽÿ8èáPzý•é)74ëºÅZuPuˆ!ÆÜj,yûèÇi9¼é"²TÇÀ½¸Ú»:wéùq…þZqµ*Æ/ññyp8ü<B–C¹h±]Ñfã ›ÜXðEp ¸„è&¨ÍߦàS@7ûfåý®&ÝÌCn@ÙhS$9lä{=p˜´ãæK7-‹ŽÏ-`Yð`Ë­ÝÀ Œt}\ס¡êú»h9ìôã8 ·¨Ú4Ü $s1@´I‘ ¤kq z‰l„hÞü¨Ÿ‰`M ¾W𛾠> BÖBÑæg¤så]ô1h äT*6{£5Y®côv0-!Ú„í¶o­ŠÞ^Ô¯$Ÿ•…MY]36EíU–—²‚è3R‡Þ(-³ªNõ!§£ä}¨._–Ï—Ù”ÕE?²ÉËIAØEšTY.ºÀòn_#i—Aù^“~Cœ'Z̧|=M^›M>ZTkƒ¼38tCtCU|[dÎuÃ~¸œôTNõ@‘è£cgd#ýM‘eŸêG7û=€óÍLp°ÓÉïW€nŠÝ”_â|§nоÓë!ô²a…Mš–Ù»®» hnûXBØ>^Kú™ ]otèÁ„Ç/-ȵø¿|„èô<Nš5Ÿ…̈òO Ú@|hc£¾BŽC¹8Ë|‰ôB0(õ¥Ï««ý†Y^å@‘äçÊ¿`¤>½ù:P_«I£ùtOê4î4NÙG¦‘xÔfL’ÄGzY7ùs€SÄÒ¼i7E‹¶fxíâFd[Þd@üñä-jfÏÝ@? tãYLÝ”_ã\7?ÝÔtÍ\ ~æ’§“©þ>Aɸ©JË æ£Z ƒfΙ‹±û9Ð[=…ÔB¢›r7Î[o7ãµo3P5 ãpb›œj}!ëkR=¸ø-Ðâýó@ßCÓ¼ ¹K?vå¯KƒÁºàp ù÷@=Z|l ößzò5¸\”éò½Ц`"¸(ÿ?ð ø;ЛI³såFØÞ9ÐâÍ?§¢^öf¶PSÜš£s$2‘Æ«6?1×£ZÌ€hšÀF£hóÑ)ñÙ)_½Ú¯òº¡ååY týXüÜ´ 馌ó `M öûnàwÉ’ƒÉTuƒÏßD§2ÊL$?/˜#W®ìàÈ\¹’ï&]ý«ã¤ãe1f ˜{)^¬¸ªåÒ7h1!Ãj¤óƒ­€Þì ô0#æÔ/ /´°—¬´98 |h½ø Ø,4×iÑ¿m¦¿“ô%p"h23Xh³òW 9¬Ö—=hju®<6Ú sƒýâx(“%¨|(ΑÊx:ø5Pº3¸ˆs‹0m``º6ôá.ÌÀpÐù§Åëà¿àhpx„LBÙ:2]JoÅïU¾£LOõz^q§¢¥>®ÕêÆà ÚèÉzË’Š§è¯fùHsÕ•fµÑ ÛbÌ@1šÏt´C´.š—ô d°%¸„²8œ.šS$¯m6”_löÚ„h~–\Ôî`0-ø¸ |hÎV½DoBäë.p&´:Wj>Óæ)䔃€6Ašs‹d6 wU¶X¦•6?ñ|b†ñ¤;ùY´*:^¿êS’O‹Ê¦¬®›¢ö¿PaN´Ù’DŸ‘•E]¤e6êò÷NÙm¢ÏHU®{㘂ºÔ&ô|ªöù²|^çn^ÖK òö%uV‡É€HÍc˜]¨Y>å;!êW±V5†NðReŸ«f\}‡TO­‰&yÝè4éT-oÁ¡Ž§&ÃF2 ݼOË‚9À¦àAp9ÐZ¢‰í¯à9,Dþ@~f’ŸmÌ´±ÑSMA-&€TÆ“QÛuÓÂ.è:>:N‹wÁw?¹luþhÕ¾Ÿ¸êűìAÐ'µ!ðÝéC‹±"9‘ *¾D™æªÀ@sŒthá>#بl°r¦Ÿ@º(Ðõ­¹ë x…üEç æ¿Íò£òwG!é òfæÊß`——Û(øzV¨ùTPL«€mLô=Â%ÁHå}tpcI'š×µÑ;ȧÆÚ d_')йêøêCŒ¹ÕXòöÑÓr‚·«È¤iyóÎÔ¦þCï„'õÝ)‰¸Ó´S¾FK¿ÿ` êÂ`u#ÕqüȾu#úOf+ûçÀ 6¨7Ëôœý(êòé(û.ÐSŰӆfk—qÈf|EÅùMðwYÅ>ûÑ]ï4-gjz™½ëºËÀœ¸×‚UsËHD‡× :ÐfBóÏÞu R¦6_ÚP|È6Λ§Ð!FÑ[Œ¨×sÀ| DoYT¿Cd©æìÇü¤Òì\Y´¹˜Ž‰6—Þ–Üôöuh‡K'_j²£Y°Óæí< ~#®¢ô8êë$E1V_bˆ1·KÞ>úqZÎ@ð6`™4-oÞ™ÚÔèð¤¾;%wšvÊ×hé÷3 ôW=0عˆQoAƶ)Vݼ—zoRÚÔuÛ»ÑñÑq²ŒŒtÞ½¬Ç°IÓ2{×uŸ³a§î‡1Þ|,Þ¤çEóÎÂ`% ù­]Òî¹²]q©ñð§L‹²ö_ÿé5úñ-ö×ióˆ+M;í3ßê;ô¼MUùðŸ¦e¾S;é–æà-5EÄE]sݵǪª8ä§Sã«j ía¼7zÑS=}cpio„<ª¢\‹Ñj¢ELú¹íQEB›ÛêüѪ}›Ât7#`àÝ´=èzyrý¸igÐwïôóo¢f@IDATñÛ]FØýj´ßè ·Þ|IN#íw £6ý©ÃüQ‡‚ÎVcÉÛ·{]¹íÁåÒ—Ék£{¸#W·=y=¼”\ þ0  ~·+Ê'Q¦7}yÑGÈß“êS çæ ÚŸ‚7eòhƒ–»ÈÇ0E-÷Ö¸A§ú•ǪÆÐxtýY³ÃÒköúsx=;*M‚›÷ìêx«óG«öõíèæG ýg£wøµù;‰ì!0O#œ‰¾´ ù3(ZðµÑUË]Õaþ¨C A\«±äí£Ÿv¥kÐQÞGQþìÒ|ŸŸ´;) &-W?k'u¡êc‚áãûQØæ4úè62iÚfMu—ú½©†-©ïNIĦò5šúÕǚκ8Úý”a4ñØÎ±ê8è#§ƒv}ì¬ñõb_é¼zÙ8Â&MËì]Wô=Š;ÁõÇQÀÀüàv°cÙ¨Û´tÞ½ƒÃ/ì:ü¦i¡a…i ¡—¹ ›HËl‡S×ìDþµ I7e}w5NV¶Ñ:55gà5âÛŒ'oB ¡‹"þŸ‹}4NÇÇbÌ@s è;ëï€Ýškb«2ð6úÖ›½™úeýèc330\6¤¡¾gºЧB®!úe<}d«ÑÇ@÷o¥A'lc÷–¦ð3TŸ©ÿЇj3œzõÝ)‰¸Ó´S¾Fc¿33軀øMe4rÑ­1‹÷‹Áïß|@B%7B/ë>lÒ´ÌÞuõb`<áèØýøZ‚„.ˆž2?Fãh¤óFèU‚ð›¦UÇþÒBº¢4l"-²IYþ Èâ¹Ît/~„ÿfõ;Q»À’Y;%~’aÕ ¤ èbY ®qÁ¡Z*``c|ˆ÷ËÁ'€ß|@‚Å “‰´›è'·µhXXªa@Ÿ™ßè#¤z»®·3ÐK Ð{p%xèiÖÎ@îR@7Kó è ŠxâQ|ŠWñ+žÅ·¥s ¤óFèeÞÂ&MËì]Woô4Ršî?Úü¿, üZy±]L_ú¨›žŸ–£]Òy#ôª9 ¿iZu á/!ô¨+JÃ&Ò"›‘”é>}+½üü < ÒºkÈkS"9D]£ Èç±ùJb÷ú\ ² ˆ'3ضô4ºÈÎÉ0?éÀF`7ðÖ úOµqa¢Z0 Ï’¾šŒîg‚½ÀÃÀbÌ@gx‘îõQ }$B6ŸšËÈÒéI-C3 ‡>4Ÿiþº|üèɯŠôË5ø~Ê5OèÞŠŽñv@ýjýt¨L¼©Œj;ª€ÝdNÉP;»0fÀ t„-žoÍpdG<´·S=òÛÑörêÞÌ@žm4^Í _"Õ¡·!?z³×ª¼Bƒ=Á%@×ïî@ÿo­ñ¤šíÄ ˜3`Ì€0fÀ ›5iy×°[7ÔÇ»mB–•ˆ?–R ÍvbÌ€0fÀ ˜3`jÇÀ~D¤e¨T¼©”n;3fÀ ˜3`Ì€0µaàq"ùbÕÑxR5ãögÌ€0fÀ ˜3`êÃÀI„rQ•áxR%ÛöeÌ€0fÀ ˜3`ºË€~è"/úÅË—ó…ÊǯVè,òuùòN櫊£“¿ØQÕ:yÜ·0Ýa Õù£UûîŒÊ^ûNÞSû»nޝóGbˆcÐj,yûn¬›#ö^Jxó^:dŽÕ ˜3`Ì€0fÀ ô8Þ€ôøtøfÀ ˜3`Ì€0f —𤗎–c5fÀ ˜3`Ì€0=΀7 =~¾0fÀ ˜.3ðz—ýÛ½0=Æ€7 =vÀ®0fÀ ˜š1àµD͈Ã1ugÀ“FÝã3fÀ ˜3`Ì€0}Ä€7 }t0=3`Ì€0fÀ ˜3Pw¼©ûr|fÀ ˜3`Ì€0f ð¤¦‡bÌ€0fÀ ˜3`ê΀7 u?BŽÏ ˜3`Ì€0fÀ ôÞ€ôÑÁôPÌ€0fÀ ˜3`Ì@Ýð¤îGÈñ™3`Ì€0fÀ ˜>bÀ>:˜Š0fÀ ˜3`Ì€¨;Þ€Ôý9>3`Ì€0fÀ ˜3ÐG xÒGÓC1fÀ ˜3`Ì€0ug`ººèøÌ€0fÀ ˜3`Ì@Íx£æñÕ*<¿©Õáp0fÀ ˜3`Ì€0f ¿ð¤¿¯GgÌ€0fÀ ˜3Ð~îk—£§Go@FϱöHÍ€0fÀ ˜3`ÚÃÀ'鯛r©Ï­å1Â.‡Õ<C§>Oש~5èvá3ô¹P‹l΃ýçÀL-¶kd^ÖŸb“¯i5Aùv´]1k¿M¢ Ë¦š®ƒÕâMYÚ¨*ºu¦ã[‹Ì&iA‹ú د >–lжÕù£Uûn]lFÄ€ÎCKï1P‡ù£1Ä‘«S,Sß§u!½ª8ä§SÒÎ1è •ú[»Å`µhW;-ÚÚ!ùþÎ¥Ó³Žµ(“¯±Y¾É­t¶WÖ¡ô=ÛÙyƒ¾ÆSþØ¡A½‹»Ã@7ÎÁÏ2Ô3“á~z’oEãÀ3@çòkà /º–òÈÛ¤ù¼­ò#•%è`÷atR¶IFwóW£)ýôàc~ÈÙ|Ì9¢jЦç] †1êBèÄüÑ*‰uˆ!b®S,Sß§u!½ª8ä§SÒÎ1 w¢víÚ|ˆ§|×S¶·*ª6 º1ë r§dE:>< t ½„I7ÎÁ¯1þËF²ù*ýhc»pÖß×I_seùHZ?Zµ?eé'¨|¨Ì A®!ÅÓ®¹'ío1ú½,$UÍ;~ð¡·­OíAð0X ôšè¸÷“”m¦;¹ùM9ÜL£7¥©]™®ƒú$æÏ"éÄüQ䧬¬1D|uŠ%bêû´.¤W‡ütJ†ƒn.ÏgøéÜ@¢'a¿Z¨< ¾ÔßÚà]àj°?ÐÍJ7ªÏƒ/}ñp<ÐD³4ÐS‹öh·ú=à9p˜hbºh’’|ü¼EäÃà*ö÷/ò/‚GÀ¯A,E¤ý“æoà( §¿ó5`]¢ø.Ï‚»À!@±I4†x¢ÍÁV*DÄש@1<ÎâN›"q;-ùŠŽCÉ¢èãnÂ``™fš@† ;£‹o‰ž’ß ^:vª YEÇBçõ` Y¨ü#àfpèô9¸>ä³èšk4>Ï:¿^::ÔϹ@›‡ÀŽ 9£C]›¯ƒM’2©o g2E¶Uû)7È w2†þæiÐçpŠÓþ–¢U‹?ÉZ@ù±Ê´Yt¼cÞéôƒëñõ' qè#³šo5×õšèXô“tcó«ûï™ ‰¡o•䇣jŽÖ±™¹AcÕåÑÀ´cÅyÿÊwKêK·8¨Üo]H¯*ŽNžàCA ñ Á{Á Å®½’KÀ-` ²Ukƒ¸ájñónpPÝÕ`#°c–Ÿ@šNžÑîbÊåS‹DµÓ‚p‰L_TrPÝfÊ '€ß€´¿õÈOÇõWÖ?Õ T-Ö4® Ž/ƒñ`ð 8 ¨n‡,¯MˆäV TÿkV·>©Æ~'ТxY ø“D7ô§ÁV@c]¡Ú\åeŠÅ2ø$\ü…ì‹¢ Ã[¸þ2Xè˜écEómu^VûmRtŒu¼tüïz+°.P?<Ë®¹üM>ƧsEç¿®ÇKGŪ±j,'m°T7Ôù¥~ôÖ#•GÉ|2-@WÿyäL¦Èæm•/’²M˜æ›kÀ‹à?@›Bñ"‰û£ß Úñàãúù.Ñ‚û„ÈÄq<øÐ&í. ±ÝvºÆ•×Fñq ã ã1XÜ äC1ë\Ôü s6d8>tŽ^ž:ÍG¡+?#øÈo.U—Ê\d4†&…»¡k,½&G?É3O6 ª6¿_Ãßå ‰º·Jò­¨šWt®¾tlfE¢º<Šì:Y–÷¯|·¤N±t‹ƒÊýÖ…ôªâèä >Ôvâè.fï÷ƒƒÁâ@m×!zЬ²µAÜpÌ*•ªnÓ,¯äIðqn¢ÝÒ2Èä&Ò/eºžÀ¦ºñéiÜ€ä`Kö§rµÙ[ 2Tÿwcsä€åàŸ±$÷€Á¾àNŽß ¯EŽD‹ˆ½´7õEÉkÜëgåJÞ öÈò—’þ<Ó?JúЂàwà¶\IY^&Q°C¾p”æó7A3m@´xÒ¦âT ÅœákƒÙÎ ;K‚%2èføc°ÐñÛ„túÜ GEלü7Ÿêò ‚£)S¬!oGÑXƃ¡Î/{_©<@æÓiºúË#g2E6o«|‘Ü@á…@×Ê Eùg€®§Áñ`U°+x ˆÉZ@}ž Þ Ê_ t,wÌòHÓy"Ú]L¹|î Ôn ʟÓex’TvÑŸæÆ]€ì¶ã@Yÿ:e«Mߺn&½ HòwXìå!•Ü òóÎÛ(ÓüøK ÄÝë`kð  y| |ÈVׂÎÿ  ùxy 8—!ŠWesFA¤Šy¤¢ã&îƒGõ÷[ sR²;¸hÞ¹ èœ ùŠ®1=pú3$ßÚþ< t~„œƒrBdH:t|Ë&@¾4¾f6¿˜M³[f«8åS燤l|‡RÿxÈï@× h\¯‚«æœfDç‘ÎÑÃbŸ‰êò(²ëdYÞ¿òÝ’:ÅÒ-*ó« ßR-¯ãîL ÓÝ`& Yd0™æßYªD‹†¼hR’hr“¨MRD“hˆnŽc³Ì餚dõO“åñà@ ›¦šÌCI£þÕ.Çkäµ0´ÐäªI7DOç³DA.ŸåoLʯB$?GM¾ZhüØXÚÇ€°âôË@Ü? ~›é‹“¾ è8‡L‹¢6!†BÚésðu|]sIM«éyþ|ÖJ×ÒPç—ÎÁü9=+e/f}t:ù.Ú® tÍé:Ó5òø$Ðüq-XìRQ^‹lµ×üp8HŽêë1er¢~uëÙèÜÐñÖ‚ky°¸hþ{Ðy2ø Ð)Q|ÐÞø,_Ôÿ=IÝ?rú²ä7â} 4æñ@sÆ7@‘lC¡Îq-.5÷j1¨¸´‰¼¨Ýºà|°8 h~Óò /zk³GV˜ÎÛ/geâ`´‰®e€Îg[o?_º–·¿gm„:n:7ÿ – ‚-Àm@ÇH÷´½Àþ™®sAÇuw ѱÛÌËÀ·€Ž£Ú_âÜ[ ýƒ@~Ž7ÅùM sàCàPð3P6¾S©_¼|< $:çtm©ƒ€bÔµ13ÈËËh¬fxé¾ÀbjÇÀtµ‹¨¿ÒÍ÷D &)Ýx®’“ÅþC‰ž©#NÞhЃ>špÐDw¸üh‚?hrnFõ¯¶š,SÑ~x, Æ€×D鯋;•¥òH–Ñ‚åáL_tðe ÅÍQ@“ô&àý@¢I]~ó¢EÂ7ò…ÎOf@ÇeúɹÁ›¤²ó€'€n˜oºÉ n÷›€º!Z„鿍ã­ôEÒÉs°ìš“ÿFã‹Øòi£ó|¨óK‹â“Ît.Îb±œTuDÕ8µpÓµx7H|ü—|ºÖµ™—˜“^É*ÔGHÚ6Ê"½+ÒçÀXp;ø7Øè:¾(K×%ÕÂû¯ ÑõOÕRÔ¤ã¸>+\ŒTÜß^ÈÊ”ü h¡«Eb‘¨£1~Ùœ¬?™œCºÐ|¾)ТXR¶1]vÐd Ÿ³eeéõ‘êDs†Î3]Cçƒï€ €Ê? tϺHÒ×T‘Í sj)ðm°|¦_Cªsð=`Z óï/@׉D÷¢¿hÍm~ÿ‰í®à—@óâ@¢s«Lt=Ü–K G?=ËŸBºY¦Jª95/ÚØ¾/_輨#cêTÇ4?cÓ$§‰f,Ø¼Ì tS¾|è¹ÐBºÓr3äûs@ M`Z<îÎEò…ãÆÓŒì…‘º¹î tãUßšX5N=½R³ûƒß€Fr·‚ïµ]üh%yhòwZ0ÄÂCãz°PfiÌÀýTm´áxØH:_>žºI+ÕíL°øÐq]üèF_$<Ë®9ÅÒh|ª{hÜK]¯e2Ôùu7 -,ÔF¼tZÇÁ‰àç`.°ЦCòÐ|“Þ SE›äýèÚ߬ t 뀀3@³Ò¨µ×q ‰1=DæEA:fq¤Åæó H¦0þîGÙÇ3c=Ö±ýøÐõ Ñ5ðƒBÙ½@ó–Õ!Òµh}: œ0 N¶K‚«€Žã¶@óŽó®@ó½p9еÇëJô8®·£Çæ7=÷Ö¥\çãH7¿ºŸ¬&;Àn`$’n°5†1Ygâbéh޶˜ž``ºžˆ²‚¼–¡œ 4ÉIô´D7Û}Á©@ =-¾'ÝXÏ!ºQ©,n¸‘ª<$ô¨Sšo¶iª¾.Ê /$]„ÿ´?™ü|¼| ¨>lP§û`v Eêg€Æ.јÔn§ƒý@HŒIyéÚüè& ÐâéYð'ð}r,Š6:ÇGéI‰>”:Ôx†jßOõ‡0›Ý\Þnß:3‰ŽƒluL¶G-¾´xû Ðy¿H)ÙéÔ98Ô5×h| J‹Èý IzžÇ8T6Ôùu6ï§1@œhõ"è´ÌƒiÆ1èš{7¸ ü  ă6õºîµhî´èx ˆCñ¼ø1Ðõ}6È‹Ê%ŠïÉmè??ÄDçáËàpp'Ðy«óSc> hÜËgͽDçöA@sÓÏÀàPð. 9h‘¬yHý†<Ž2cd’ôytÅq!י歘wQG•ĵ¥uIo’y€ø}/x Øhž¿Ü4×| Ht}­tí¯ž©è³!˜ˆûE€î)³ƒÍJěڎŒ®¯õ€bÓ¼q/„}Ñø-¦þm¢F×±D×è¸mÊ?ÏýÆ”EΙz3 “’÷¡È¿æ"Q]Ev,ËûW¾[R§XºÅAå~ëBzUqtò¯j •Ÿ$Ãtx7ívfÛá4;FZlüt8ÝÆ t™VçVìË6aÚ-ÒEU—©¶ûØ€ÌNZPêIw#ÑfaÆF•åâ©ÑCOÏÏ.hÓL‘«±ømƾn6:Û!?£“8§/A¿h"ù6Ð&A›Já,  „Žß1à% ¶7‚‰6 ' hSþ¹¬ú™„ò×Ȯԗ6­l~ÕîY[mrtN¨ï;€¤l|zCú8_]‹€­@È>(×D¦Éô}Ø©?o@š#L\åÑ\K[ ›<áÊwCªŠ£“ã«j Ý8>Ãñyôô§*ùŽ~´ø°˜^c Õù£Uû^ãc8ñ¦á´oµžÎh¼n«ûľ÷T-úõæ¡Hf¢pÐ›Ž¼LO6ÙÝmâõÆXÉ, ·l| *üS‡ù£1åuŠ%bêû´.¤W‡ütJªC§âw¿fÀ tVçVí»7²êÞ€´ÿê¿îZÌ€0í``¨ùd¨úvÄà>Ì€ x>ǹ£ô¤ý‡áÒöwéÍ€¥ 5Ÿ U?Jió°Í€žO†Aš› 1ÃkæV% ìJÝùÀOJHr•0¥ hþÐ<¢ù¤L<ß”±ã:3`ša Ùù¦™¾lcšb þFÑ—Ç¢®©ŽÚdTUòÓñµ‰&wcÌ€0f 6 øžZ›CÑsTµîk†˜:ÅÒL¼=mã7 =}ø¼0fÀ ˜3`Ì€è-¼é­ãåhÍ€0fÀ ˜3`Ì@O3à HO>oÌ€0fÀ ˜3`z‹o@zëx9Z3`Ì€0fÀ ˜3ÐÓ xÒÓ‡ÏÁ›3`Ì€0fÀ ˜ÞbÀÞ:^ŽÖ ˜3`Ì€0fÀ ô4Þ€ôôásðfÀ ˜3`Ì€0f ·ð¤·Ž—£5fÀ ˜3`Ì€0=Í€7 =}ø¼0fÀ ˜3`Ì€è-¼é­ãåhÍ€0fÀ ˜3`Ì@O3à HO>oÌ€0fÀ ˜3`z‹o@zëx9Z3`Ì€0fÀ ˜3ÐÓ xÒÓ‡ÏÁ›3`Ì€0fÀ ˜Þb`ºÞ ·'¢]”(kz"biÌ€0f`d ¼1²ænÝE^Æ÷¥`W0©‹qØõ(b`Úl¬EGÔUIGUqÈO§Æw}¯_%iöeÌ€0fÀ ˜2p>í7a­6¯jÝ×L\uŠ¥™x{Ú&áu!½ª8ä'ÆÞîøúÍG»YufÀ ˜3`Ì@'Л;é  ïªÖ}®§*ªS,S×o±¯ éUÅ!?1övÓ¢1´Û‡û3fÀ ˜3`Ì@»èÔÚ¨QœEk¦ªcˆØêKÄÔ·©¿„Þ·‡Ö3fÀ ˜3`Ì€0õcÀ_B¯æ˜tk7_ÍèìÅ ˜3`F3üTÁhæµÓc/zâßiŸîß 0à7 >Ì€0fÀ ˜3`Ì€¨Œo@*£ÚŽÌ€0fÀ ˜3`Ì€ðÄç€0fÀ ˜3`Ì€0•1à HeTÛ‘0fÀ ˜3`Ì€0Þ€ø0f —˜‰à—‹Ïg½q$õã'KƒyÛîrô£ão1fÀ ˜c@¿„G7†¡S¿ÐЩ~ÅYUcèÆñ±O3PãH×RºH=$+;ˆT²?xÄ57}c YDy>ÝŒº£ ꟤ì03ÈKÞþE ®e†Q¿w–¿ŸT~÷ÈòJ>T¦¸óöëëÜvÍ ‡O£úGhߨN¾šå"_ÄyR_Ô—wVl^Ñþ2tm $CÅ9h5å߅ɾö²Ø¹ŠÐñ´ôq¦iÕ£H}‡^u á/ü§iÔ9m3þÞ6êîÌ€h c zIË6 þ0ð_p4X|ü>ÓIäQþž›é‘LB‰ŸÆ¾ýj0Øì&‚ƒA*©ý5T̶Z@G}¤ñ6æPêÎÚ¤ñ“BÂþXJµÒÂzKðsp%i4žÙ3ƒ|ýSÑ4_§ªf¹ˆø4ÞgÕ0“diÔ7¯xù˜®Ëq~x;igÔ§é6YæWi¡u3`Ì€¨7Þ€Ôûø8:3`ŠX1+ÖäDðÐbz ðr'Êö‘)HϦìûYù¤G€%³|Q’ÚkþܬVd˜•ÍEú`ç›´ê›dîÍ '}/ИžÈÊgÍ’ú²º¬Ù@’Ž­ŸÃ2âKÛ†Þh¼zÓ2ühL/ɉ`}°ˆM£1b2•lOÉà©j\`Ì€0µeÀÚfÌ@ R÷ÐÂöa ¼ž°ôŸøNÀRè§-rÓÍÀ‚ä—Z8HÒ7ƒ%SÿUÿïΊõľHô_qíŽ+2((Ó[9ÀÒ@q½þ 4ÉPã‡61!§‡B:TÛf¸8†~žOú<ý¦,_6Þ•3›3Icó¡¢ô'“5³t¨8Ã^}®´Á³˜3`Ì@2 GÝF>å;!êW±V5†Nðâ>Í@]ÐG‡t-Í›ôí¬ì ¬ìC¤7feqÝÝB~n Ål”¥i¼I8ºAý5”ÏòÒÈ^o`¦Q¿OÖðARm´@~(Î/Ų?È‹ìÓ8C? 3j<êw }£ºV¸hßzY|C÷ÇÙø‚Ÿ¬ÙÉPqNaLæ{@ÊÙòÎW΀ÎWKï1óLšV=ŠÔwèUÇþšFÓ63à7 m&ÔÝ™3Ð^Ëz›ô6k¦ka¿(¸ ¼+Ó?Bú°,Ðw'n’kÁ´Á?j›ÊÙd. ½Yè#AEr'…÷} ]› =}4’S¡·ŸŸid””]}¬ë£àó@ í¡Æ£ ØžaLª ’ÞªH†jÛ âçÞÞÿ<žèRwbf·D–F"Î7ú‡6’¡â”Ͱ È'Eu3`Ì€èÒÝ^èÝ=|§i'âPÿ’4öÐ;åËýš~eà_ L×OºyÐG‘T¶+83Ó·" 9EõzSOÓ¯D/’£)”múD>Þ°QРÈ>5Ë×ÇÙÌ ò'”½Y„úm°d¯ïL 5ž²ú²:ùÊÇ®²<bIã“]ÈPã]CµÚìIfÚÌ©\›¡âÄd²h“¨vN.±ÒMt,,½Ç€Ž[U"ï¿›çRb©ú8TîoºÊ=Ú¡0f`hôâ@OÆÏ«‚倾ߡ_MÒǤô }´gE ·zË ùû`2ðwyþ^žä¥~7—ìµ™2O´)Õ[‚ú­ˆâY Ì žÎ6OþMDf>EÒ¨íFY¦zãðRÒàjt½¥I¥h¼—að  ¥>ævXÌôÖDo¡´Ñ’4ŠóƒÕ·ã¯6=ç'eVÍ€0f Gð¤G”Ã4£Œo1Þ·ÁöÙØ'‘êcLJ ô$ýsà«@¢Eúþà\°èûú8S*o%“ÿ(–êoÏŒVÈÒ4)²o¥^ÃÚhq]&zñ¤ òFãy,¤Ñg£¶Ec ßy.VÉõÿ|.Ù¢ñnIåÀ¶ Þ\]оx '&2 ·Ç‚×JüÇ ˜3`z’Müytc ùâ†ÔîX:Õ¯â¬j íæÄý™:20A½h32mA€z²$ÆKýÐqZÌ5ÌPuÌß æf{7k?¼§¶?Z÷ Ôa½R‡êÄGÄÒ÷iÜЋ&¨«’„ªâŸN¯ª1Ty\ìË ˜3`Ì@#:yOmäÓå#g ë•:ÄLÖ)–ˆ©oÓ1};2Ì ˜3`Ì€0fÀ ˜Ú1à Hí‰2fÀ ˜3`Ì€0ýË€7 ý{l=23`Ì€0fÀ ˜3P;¼©Ý!q@f ïXˆŽuôÅwýó¾Ek#¡M!­pªÿK¢Ÿ4ÉÏ 7ãO6B¿‰~=R_¢Ÿ½‹k†ÿ.†g×fÀ ˜æÐoòh®e{­ò1}!¨;Õ¯b«j íàÁ}tŸu³sæI(úß:ô³­ýýTê£ þY[zžéÿ2\V©|ŠŒìžéb騬<úx‘üu`# i¶~ïAóiî'U_{dy%Ÿ*ÓÏâ†ì„ò¿÷¡4’ëå‰ÁèjÿÐxó±FßúyØõx{¤ aý/ Ùò¢xŸÑÏDô¤Ì× Åàß¡xÞÒ6ù±v‚Ó9px'1¾ Ð’fÆ·vé1|ü •Ȥ6“ß91?éÿðXzÅtMfãW™âUþw`ÈËEÈîŒ\EøQ]àIô€Ži«çƬ´ùx¨?µÿöÎî¶©þÿ¦ ™ç1÷** %ÿ4Ò ”¡ Jü(B“FÑ€24RB“JŠ‹I†ÊT¹æyVfú¿ßÏÝ‹e;ç<çœçì}ösî÷ûz½Ÿ5¯õ]Ÿ½Ï9kí½Ïy·ü§Šs¿­ãkëbð\,Û dXG­´VþZžÿÔñޤsmsý¿J™õ[Ñëÿ ¡›žÌ1Ã&Ÿ­Î•ºgÑÒœ›äKòidùFvf1±P`r(p.nú?Ö…¹ —_Z„¦ýÕ¶éì&"ßÒÔòõá8ÈCÛ“Öž þß„cAK¿7¸ ¾%á­àÂ|Mè¶<ÕKw2>K[nÊ?‰û^ò¾w‚ÿ

ØôÙEÔÙÐÎRÿ¦Âp;lƒäÃÄ/ƒdqûKx øÿ'ü?¯†×›Œ½!·Wø\.Ø–ÇüIï4Už°ñtOý<Ñ ‹¤¹¦pš~‘qÔâ8^ ¯‡#@M’_­´¤xì=æÇÐ<çz,xÌ åãLÖØ¹u4áü`û4ŽÇÐóÎs liþž“ÂÚàfuÓ"îB_››ŒÅf›m+ÂÅÀsLKãL'~>,ÎsG¸z97ìËúÓà"8 V‚7‚¯áµà*H~‹ø=ðPócàYÐÉ’¿ýêo;ßìg»b º¨rþa¡@( 4Nß Ê Ãɲ¦«°ªúÕ׺æP….Ñçppñíy³¤+᦯íó`ú=Ê]ô$sac¹WfÓ"fµ"ÏEºe¿‡d.®ÍûPÊ tábž —^ËÝ@ØVŽí`úcàÆê¾"ý"Âdï%¢û¤ŒR˜ÏÕºöw+?ç¥ušß4Êm“C’O±MHYÇpÙlgÙ¦Æy q½çŒ Ëÿšó7ý,…mBh^êߎé_v˜^Ù–Æ1/Ç1Ò]Œnϯ}ìE˜Û $ì[Mµä÷½Äï_–{ÇÅ;¹¥¶·™íüõ\žöÓIŠÇÌqÒ|ç(òª/lò)Γ<¬{ùØ)^·i¼4~¦²¬@]oNv;º FJn ¦ÁKá|84<.–¼žÛµ$\äþó@Zغ˜ n\¯2koŸ<ñ÷ßÄçTøl@²ñÊS½ê‡ã=ÜL$›QDV"Lï9Gÿqª@¸0¸K씕¹ˆÛôgE8ʶ?Keì™U¸Ÿxj3xùŠªjßWºðlø(ÜkÀ›!Y»±6¢ÂTO÷ÔO7áD4ÍûŸ‹„ú«û²°1 šÇj‰±ØÌ?­æ×êZ[m~^á¿´)޳iãS`©ãÁÁ³Ç}<›ZT¸®·/BóóéíŠ0¿ òa8îu ½&º=7®¡¶òÌà‰¿«±«ŸÈ™y.Á"°\¾öwoø$t²~õïÔg”…¡@(ÐHþ‡We†áhÙÓUXUýêk]s¨B—èsx ü>;w\Ìiÿ†t>í0–óä]t¥Ülÿ°Þµ&°oCjW­ëbÏü´a!úëµ<]­·“ÅàHãzĨ‹Fóv€d!bÞEà&kxcÁ‹ 7ËÏÍ;¦‡i çëÌZ³Íö6"¶=!e´O.êl›•}²Èû4áxcMD÷4×t\¡i6Ùæ%áæÒ÷YÁ?ˆ«Ë  ÓüÚÃoí$lWÇ‚c¸·NÇc­yL,ïNhÎßô³L`ÞÉó<1ÏóÖ»9·éÔ6…W¯¥qòóÜãh½/Y¡°nÎ ©k;ÏíŠvÎåg`þW‹¼²ßfÿ¬ã&d< 7oæ_ Z+g–´×6×?ÕuCg¿¢u˜c…M>Òy’‡uÏ";Åëö!—ÆÏÃTaE äb§xECuì6‡ôYhÿUYî{ŠW5Vô;: ìËTÒùâã(Úw!奅Xy¡j½ÙÁťϜÏ^åu‘³¸°\öõEè´Ð¡¸çr]n ’½HòÛ ˆ¶˜§Ÿ.ÚÎۘ粕µšë÷©h›ƒÏ¤¹\Müœ ’NÖÍ"sw*Û·‹LªŸ„ÛÀ¼-¡ÓXKRÞ­îWS7÷Õc_žkšžÎ8ÎÅE¾ÇåÛà1¸¼ƒÖi~j™ß“>ìÏcº.hy³Xn½w‚–ÆI©ä=É7¢Ol@. þg¸,¿€×éßz~'®.òÝÀ¦qò ÈÖEù±„ɺ97¬û+ÐÍ÷Àﶘþ,šeæ¹™õ\Õ?Ój°ü´HŸA˜ôSK-ù{5ñsJt«?ÍÆî(9¦ÄDEÂÚ)Γ¬–tt3ì "úä¢\ËÏó½ƒv<,Ú `þ.&2ûqó#“ŸçÏ/ÊÝ„%ëöÜpãó-¸Ãת›#ûLVöÛÇñ.†4×U‰«¹í埰hÉßT–‡é\.kÛJÿ¸2SÏø;¾ù9–âã·l4nv„î{Ë}Hñî[G;HBça_M°Q>~ŠO°Ë–Íí»*K~çaUcE¿¡ÀdT`yœN É&ú?7N¹Pœ .æ&ƒõ¢éÂLhMp3ׯ9ÞŠ0{‡¬#£fž«Á‚}NÌ»+ÁD´éFÿ>Ýë«Y•Ÿ©}9ºR _§¤xW X)›‡ì¾§®rR¼§¢r÷ ¤….[*+çW™®ËÇ©j~uÍ¡Êã}‡¡@( „Ý*Pågj·>D½ÞhÂz¥ >$åšäKòidúžYcb¡@( „¡@( „¡@(н±é^«¨ „¡@( „¡@( „T 6 0š‡¡@( „¡@( „¡@÷ Ĥ{­¢f( „¡@( „¡@( LPØ€LPÀh „¡@( „¡@( „Ý+š¡@( „¡@( „¡@(0Ab2A£y( „¡@( „¡@( t¯@l@º×*j†¡@( „¡@( „¡Àˆ ÈŒæ¡@( „¡@( „¡@(н±é^«¨ „¡@( „¡@( „T 6 0š‡¡@( „¡@( „¡@÷ Ĥ{­¢f( „¡@( „¡@( LPØ€LPÀh „¡@( „¡@( „Ý+š¡@( „¡@( „¡@(0Ab2A£y( „¡@( „¡@( t¯@l@º×*j†¡@( „¡@( „¡Àˆ ÈŒæ¡@( „¡@( „¡@(нsu_5j†¡@( „S`}zZN†·Áß ú²%hµ#¬ ÿ…3á$xšdÏÁ™áFø5”ý¯œ&a¡@( Œ†ÿce†1³²¦«°ªúÕ׺æP….Ñg( „u)p^ v9ánx*moûùœÂw N{?ƒ¹¡jg/¢àaø;ü~¹Wž×mR¼ÊÏÔ&ÍsÔ|iÂz¥ >¤ãÚ$_’O#6Eôºüpœª¬®9Tåô „¡@ äEpî zmo‚gf}ìOÜ÷ã³¼ª£û2€›Ÿv¶7WÃìðN¸r¯<¯Û¤x•Ÿ©Mšç¨ùÒ„õJ|HǵI¾$ŸF6Œï€Œì¡‰…¡@(P¹¿e„Cáb¸þ›A²u‰œ^í¿ „Vþz'`kÐÓ·Á=àcTKÁžp6¸xOö"‡Á¢àçÙ¼ì«D> iq¼0ñ£Á~¯…/Áœ µsCÊó ðx7´ëç³”}^Þ‰YÊv)ËÁ‹àup!ä6^y^7â¡@( Lzš²ë«ËôTÅ«kUø}†¡@(Ћ3¨üìë€ |1š .À½ÂX¶}‘v¢åw@\°ï>–;Ûl§š~9l ÿ7!k€ï¯ƒæfã^Øìß±î„ï…•!·Ÿ‘86€­àzø4híÆt|çcÝ}`Uh×Ïó(;ÜDlùfˆäöWbÎÃ9–}´ÒxåÖiš9Ÿ°É§€Ç­Lݳ(?Ìs©I¾Ô}†6^SD¯Ë*Oðºæ0´“%BP P`áW35¼£p ì{wæƒdû¹µH´Ú€¬H™ï¡n>’½„È®Eâ,Â#‹øÖ„wÀµ7Gí#Æ€¡@( „£¤€wr›Bâ¸V„üsÆ…÷=p?´2åÚ³fc7çïçŠô‰„.|ìj+8´ïÂÇÇb3ÿ¸¹ðnÂ%à‚ÿzÐÖ7/¢o[  µÓÍʃc5:÷ó@Q§]°~Gæ_pl ¯,ÒWŽWN•°P FCüƒa4f³BP ¨SÝl3Xö„5à$p³° ¸y°ÌG©>ÇC;s!~9 ¶]ÇAs#ððÎÇeph'ƒ~¼ ËDz¼â‘é0\ü–7?ëŒ7&Už°NýXÉŸþ]Ü”Í ¹ù%öõá° ¨“uÜ”ygh¼rª„…¡@(0Z xE©Ì0fXöÁtVU¿úZתÐ%ú BP fPù4ðÑ"ßû ß É¶!rXæ] 7 vœ>›¹éصˆ»i¸lsùãU.Ü-ËÇñbÚà¿E™åÞiqŒdÏ&òg°ÌG³~KƒÖnLï<0VãÉ?úy)ÕîÇXþÉ&c±ùøë¦ÇMŠå7ÂkÁM‘¿öbèTîf¬©æ|Â&Ÿ·2uÏ¢<þ0Ï¥&ùR÷qÚxM½.?ª<ÁëšÃÐN–8BB„Á» nZ™_÷®D/æ„y[4˜Fž›‚EZ”9Æs`uh7Þ”y—¤•µ³UÝNý´ªŸò¼ûá]˜v6^y»vÃ̯ò3u˜óõ±›°^i‚é87É—äÓȇM½.?§*«kUùý†¡@(Э3¨è¤.ÛŸ|ôê›u ãt¥@•Ÿ©]9•úR  ë•&øÄk’/ɧ‘ Û]­Ù ÇÄBP ¦ÀÑôäwê2ïnøèÔGë0Æ BP ¼³]¶ºz‘Ê?jûëòÃqªš_]sh¯b”„¡@( „õ)Pågj}³˜õFjÂz¥ >¤#ß$_’O#Æ‘=´1±P BP BP y ĤyÇ$< BɧÀÛqùù…ÛoË♉ù³¶>æôyØFÉ^Åd¦•&ôJÒ‚sÞV€‰Øûh\þ5ª‰ô×kÛ ià/]µ³A+íúÏóÕa¨êî>VÝñÐÿ÷ „“Lo;•ÆÊ>˜®ÂªêW_ëšCºDŸ¡@(П—ÓÌÿC¡ßm,ÖÿŸiê/=ù.\Œ§Ÿ¥ý*ñQ±™È×ŠÉø‹U?÷Ô"~+ჰ9ôc^`óýx“~¨ÍÁôóë} â\ù ýïÔaŒT´1õ(ÿ’T>‘Ð~ë´÷3ØÉÙ€·ß6KG´;—ò™4ɗܯ‘ŒÏ5’³ŠI…¡@(0<Ögèvÿ黯V¢Ò‘àfã#YƒˆïÇÁ¹Yþ(DßÃ$ÞÞ™šŸO€°©0Ì… ÃWb=Wtjhõ“Ä•8ÜNÂ¥âK¸ „}(`õ!Z4 B‘S`Mft9xÅú:¸ N‚|‘ãã<—› ÿ«ö–Ðʼ’¿uQ°áŸÀ6×Ã'@ó*Š›öÀ…°ø˜ŒWÿ÷Ü>KâÓ0o‘¹.áYà?±» |t)]Túñƒ}úÏù~ ^ÿ+<çÃ* õR×±‚;ฦ¶/'€ÿð&Ø4?k>3À»§@®­¾ºÑ˜Éü‡};Âñ°hæ¼å?Ýíð)ÈíE$Îõpcã?I„uòÉþ—„Ÿš8ÿý@=4ÿñàÖc±Ùfëä_»óÈã»:x®WôÓ®nQ<¦Ë$Ôá»Î™µˆ«çªüÍsä nƒçãæv‰{Àãø+x hæµ3åÿÏ%ÏyµÑÔÔ×cÒɼÁ»À×Áá…`e@{\ ž7­ü#;,š¦€W–Ê ÃDz¦«°ªúÕ׺æP….Ñg(0«*à‚Ç×YÁ?ÿš¸¸°I ŸÃˆ?kƒæBh÷±Ø“ñeI»Èû¬n`‡·‚ ­!-°^Oܺ ÂïàûÐÉ\tÝ.ö×í‹ô„𤏠s¸9Ø·ìëÃÕðuÐz©ûqêß ¯†çÁoáLÐÔD õAŸ¾ Žé¦Å¹?ŽoÙá`ݯÁ¢Eüµ„l¼9ë‡ÇoÓ‚‹ cX ܘ| <6ãÕ¥JK³­ vÏÍ9áí°Ìã™ÇVÛ VW::ÍËט›ºëa ø4hŽé†UÛ<^{Ç5Ù£D‡U@ÃBP`’*à•ƒ2ØJÙÓUXUýêk]s¨B—è3˜ˆóÐxyx>Lƒmàݰ7 ߆Ãoà¸\àßÿR­^?ýæGÝÚºTt†ÞQ0~¼´¹Áíƒ`ÙÝð>Hv9KZwþÖµÍ ØrÛŸ„‹©eóLâ+ÀïÁ2ÛŠ fçÉÔ÷&°ì8ÍümÇb3ÿL'8 K¸ÇBë¥îÔóvø¨×gà0ø $sÖ[æoCjû/âÛ$s{5Ø&ÍIÍçƒdæìBÿ°­>ý´ˆoB¨©Çm`¹çÜçaÖÉ'õ¹´Àq=žêî¢Zó\Ù},ÖÙ¿NçÑA´÷øÿ©è§]Ý—Q®.is`õsaoxüôQÎý4îk |Ž|ˆ¼¿€67Xïx¾3à­ µÓýy”ݶÕÏÉkÁsC;,“3Áù髿æÿN°Ì÷œNþQÖF¤o¶©ZYv>vŠW6Ø8§ñópœ&Qܯ^ñлl©¬œ_eº.?§ªùÕ5‡*Cô ”ðê­ ¼)°,~ðç¡‹˜»À…Á¦oâ÷fÜGü~póánÃA˜ ¬‹ÁÅÊ)]vèä|X¼¢ê\\¬–m.2¼r{#´z­—ë›ö½fp‘T6]+ÂkÊEÚÅ÷ªàUbµmeË’©Æ.îë°ùdH,AÜcëâz<›‡ ‹ÂÍ*z5Þ>Ýœ¶›S§9/^´kw>ÙÖ ˆ‹ñAZ'ŸÇׯ‹LæÝ‘2Ûù×é<ÊšE{©›·U{7žköá¹ÞéXQ<öC §úºóõá±s#± œÉZÍËךï!‡á™`¾Oh‹~¨[Øàhõ¦ÞuZ|Hóm’/ɧ‘½Ì0&]ö¡ÕÉ0¿ªêWßêšÃ tˆ>B\«Á›àð]pq+¸A¸N‚¯Á>°¼Ö¤M±ípä=:³.õ}í.Øc»~«¯MÃÏÀC°Y¿D»I­À—ñþ1XoRÏâÉ_¯ú?æ±3\—€ï'aÍV  ë•&øŽR“|I>l蕆°P ˜õð*—@l/ÄÏ7Þ=ø;œG‚DŒw”*0¯¨~ÞÕ£7^=¼ [‡éç³á} Îa³žÞeðñ-ï¼Mf;çß?憟ÃW`Ðw˜è2,FEt«Í]_ÙRY9¿Êt]~8NUó«kU‡è{ôðjäK`cØÜxøˆÑtðj¥›¹&³íó[«&ó$Â÷P`’)Pågê$“bR¹Û„õJ|H­I¾$ŸF>Tô2ØtÙ‡V'à üªª_}«kƒÐ!úmbzo¥ò;€Wù½êê³Ý£f 3!ïà|ØÑëòÃqª²ºæP•ÿÑïäV`^Ü œÞÍ0Üž£nŸe‚>2 „õ*Pågj½3™µFkÂz¥ >¤£Þ$_’O#6Eôºüpœª¬®9Tåô;9X·‚»áTð‹ØnFfó†î„eg• ÇlŠèuùá8UY]s¨Êÿè·ù xgãƒpü^ ³òO^úkRþŠ•ÿŸ",êW ÊÏÔúg3ëŒØ„õJ|HG¼I¾$ŸF>lŠèuùá8UY]s¨Êÿè·¹ ¸ñx?Ü'A|Ù°ïÁ>c±§þñÑkÀGÒîxjQ¤BP`€ Tù™:@7£«’MX¯4Á‡$K“|I>|ØÑëòÃqª²ºæP•ÿÑo3xn] ?ƒ4ÓÅ¡xµ£úËWÏÌF÷ÿ›÷øš| ÂBP ªüL­ÆãèUš°^i‚élh’/ɧ‘›"z]~8NUVתò?úm–kâŽÿ¨ÎÿÑáÍÞª€¿|õ%Xö€+á¿ð0ä¯EÓa¡@(PU~¦Vãqôªù{dŠ×­L7ëö!—ûâ©,ŠHBçaECuì6?Å;6è³Ð¾«²äwV5Vô;º ,ÄÔüoÂþ³À÷‚ÿ9;ì© ø_—ýî‡ßñõv_毽´(ó¿3§¼C‹8sÄ=çeZ«ó¿îi4Á‡4ç&ù’|ù°)¢×å‡ãTeuÍ¡*ÿ£ßá*0;Ãï7Ѱ„µVàudÿ®(òˆß¹âH!J¡@( tP  ë•&ø$j’/ɧ‘›"z]~8NUVתò?úžk0ôÁŸÕ]gxnLš‘¿ƒ§ïká­ß9òï€<Ò¢^d…¡@(0++ЄõJ|Hç@“|I>|ØÑëòÃqª²ºæP•ÿÑoý øxÕ¾p;¼¼ ÖYáê.X®C5ë¼¼K¿‚ÕA¨( BYR&¬WšàC:øMò%ù4òaSD¯ËÇ©ÊêšCUþG¿õ*à/Z]¿ÿ›wXw lJ5ï……¡@( ô§@Ö+Mð!©×$_’O#6Eôºüpœª¬®9Tåô[Ï`˜À/™¿½ž!Gj”O3›øÏç#uHc2¡@(P³MX¯4Á‡${“|I>|ØÑëòÃqª²ºæP•ÿÑoõ ¬Å—ÀÏa™ê‡ÉþÀ¬¦äÌbR¡@( Ô£@Ö+Mð!©Ý$_’O#6Eôºüpœª¬®9Tåô[鮇?;Šw=æc^ëB§ïe BÝyèÄ_ºÊÿùà ú>BP ˜•hÂz¥ >¤cÞ$_’O#6Eôºüpœª¬®9Tåô[/¤Ût×c©j†hÛë;)ñ¼ô§j,â;ÊV§£sÀ_šJçÿ Äýÿ%¹ùßÉSy ý§ÂîàÆ¢{ •Îï¦bÔ BP h«@zÎö•+*ÈÇNñІ·Û4~ŽÛ(*ô§€¿ „Õ)à?ËÛÞ‚ïÃ0í1?înü•)7„?ʰ+| ž æksÌ f{¡~hþŸ“íáà“OÀx¶þ:^¥(BP Bf+ïöR|§±ó° ?ì¿*Ë}OñªÆŠ~›­€ å¿ÃOa˜ßõÈï€tR¬ŸŸÿý-Þ/*uìÆë4xV-ʾNèk¢ü_Ý}tËGªþÝØ1Tr „¡@(пi’‡ý÷Ö_Ë|ìﯧ‰·JãçáÄ{:*‹âTT˜ÆÎÃ*†²ÿª,÷=Å«+úm¦.¨¿·À[&èâQ´ÿvÁM„þs½_Ãs ÙD|¼é*x¼ ‘›o@ôÍGÁÞɼ;s1xã:8ü¾ÊÀºËCnþdðW`Mð÷NG+[›LË) Ûm@,¾  ¨Ú1ðîÇ‹;ÖˆÂP BñHk”<¯Í Ëó±S|ÐctÛ_?»mõúT ;ÅûìjBÍÒØy8¡Û4¶ÿª,÷=Å«+úm¦÷Àâpï ú°¿ËÀÇšÞ~¿â.X4ê!øl~§Â6é{ù$}dʵƒu…úf‘vƒñÜ"þÂdiSñ62˶›¤ÂáåäYä·Û€¼Šr7?Ÿ/êu ¼{â&ËTX( „¡@ÿ øþ]¦ÿÞúkYßô°¬I¾ KƒÚÇmŠèuùQå ^×j?I: ø8e­æ=*y~_¡×¹Nûµ3èàX6ëèyÄÕü@x%è›w1’ÍAä/àÝ ­ÝÄżßñŽFnúžòÎ&î]dŸ#b›ya_pìU FAò#m@®&oº‘²3`aÏôù~˜g¼ŠQ „¡@(ÐQß{ËtlPAay|Óò&ù2, j×…JX(0QüîÀ(㢷—ù¹¶¾w-¼º?Qû#Ü”uâ÷JìÛ_ÖíÇ3ƒ±¿nN~+Àc9­ÿ¬Hö¢pr©x7ÒÉï#ˆ?Öç´-xwÇ»·‚¶ØÌ å_Ç¿¹Tâ#eß‚#áðOX:md(37ƒW‚>……¡@( „¡À$T 6 “ð …ËWà^<ÜÞ~7ã{Ði‘NqG{´E©yÞ˜«(ó¦ÜRÚ/ƒ·³ù‹7íì î€wÀ0Ü@hÿ˜ÌöŠ",Ë‘±&\Z*ø,éÏxeKðŽŠzuc~_%6 Ý(uBP B*”pid˜ÎL\({§À»¯…~Ì» f —&¾:\—ù[a Lß 7¦Œá¿ÉóŽÂÆ¥2µë¢"ï!ÂïÀÛÀ Âà@ûø¨×Á»)¹y·ÄMÆ3ÀMX'»ŠÂëa…N•²2¿„¾^–Žh( „¡@( LBšòÜ[]~8NUVתò¿Ÿ~«Ô³šØfCœú||ì©[;ƒŠêk¸)l>’åÆa pïFÄMÎvðbø*ØÆ» Z»ï€Xö-x> ú¸?<ÛC²ÕˆØŸìž2‹ð¥„÷ÁM`™›¥7ÀÏÁúùæ#}ÄGÚÊög2Î)g¶I;æ¹mÊ";BP ;Òûzv×rpµò±S|p½÷ÖS?{ë!j÷¬@.vŠ÷Üɤ±ópÝ>­ û¯ÊrßS¼ª±šÒo•z6eŽƒðÃ_nú xµ¿Û»!gP×ÿúí¦#O7 $›JätpSb7BZèïHÜü…À;)ÆwÍô±àóÝ$ùˆTz´‹è˜Mçïýà÷[ÊæÝ˜?ÀÃ`r¼rë´9‘Šú°lÞ MÜǵþ ê „¡@(Пéý:ûë©ÿVùØ)Þok™ÆÏÉõ­ÇU ;ÅÇmTA…4vV0ÌØ©Š~í3÷=Å««)ý:ϰîð ¾ ýïÁxwCΠÎ/@[–‹µþóL²§‚?õjÏ Á”|Ôë»Ê-rcð"ÐϪÍÇ¿6ªzè?BV ­Qò°îéæc§xÝ>¤ñÒøy˜Ê"¬H\ì¯h¨ŽÝ¦±ó°cƒ> í¿*Ë}OñªÆjJ¿UêÙ”9Ú¯Þ~GãÕ:?ƒ²´éP­²¢ÍèyðûxWSì`ѯ°P Bþð}½L=õߪ<¾éaY“|–µÛÑëò£Ê¼®9Ô~’t°J=; ;E/cW¡ÕOæþš|‰jXv {|¿0,ÚŒ»ùÓÛ”Ev( „¡Àø 4a½Ò’RMò%ù4òaSD¯ËÇ©ÊêšCUþ÷Óo•zöãÏdkã£K.ðo76Ìy¿#âwGšfóàÐݰdÓ BP ˜$ 4a½ÒÒáj’/ɧ‘›"z]~8NUVתò¿Ÿ~«Ô³&k›uqüop*¬6Y'Q£ßÇ3ÖÎÆó‹ô¯õ¼£C½( BP`VT  ë•&øŽ}“|I>|ØÑëòÃqª²ºæP•ÿýô[¥žýø3™Û¸hÞnÊ/–‡µVàMdÿ²EÑóÈ; î)ðüôÂÂBP žT  ë•&øi’/ɧ‘›"z]~8NUVתò¿Ÿ~«Ô³F¡¿$å¯d]M{,«)úº9»üe°E`ðû4þDoþ“ÀžŸ¦ÃBP žT  ë•&øi’/ɧ‘ ÓÏu*zÙRY9¿Êt]~8NUó«kU‡^û®RÏ^}µú~Iý›à÷Cv‡BØ“ |¨Úÿ •yÄÿ‹çj+u"/˜˜¾®æ˜XÑz 4a½Ò’ôMò%ù4ò¡¢—ƤË>´:áWUýê[]s„ƒê£J=åãdîÇ…³W÷oÜËAØLÖ"¸ü*ï‡+ î€ BX(P£ñP£Øª ë•&ø$m’/ɧ‘›"z]~8NUVתò¿Ÿ~«Ô³FµÍâLìóàcGþGuÓa³Ív"ì˜ áw@…ü; då BÁ*ŸƒÕ³®Þš°^i‚Iï&ù’|ù°)¢×å‡ãTeuÍ¡*ÿûé·J=ûñgÔÛ,Íý'†þ²Ó‘°:ÌÊæ?Kô?µ—«ô ý¯†ßAü "„…)Ÿ [q·MX¯4Á‡$s“|I>|ØÑëòÃqª²ºæP•ÿýô[¥žýø3«´Y‚‰î~âWà?ç›UŸÃ>—¹Ç—õ!,‚ñ0Ñ0dÖ+Mð!IÙ$_’O#6Eôºüpœª¬®9Tå?ýV©g?þÌjmü§|ï„?ÃàÏ÷ÎjÿGäÌÙ» ³êŒ©‡…CS >†&ý„nÂz¥ >$›äKòiäæˆ^—ŽS•Õ5‡ªüï§ß*õìÇŸY¹ÍLÞï‰Ü ‚ÿóf;‹I¾mV˜hÌ1h˜ñаÒ¥;MX¯4Á‡$W“|I>|ØÑëòÃqª²ºæP•ÿýô[¥žýømfþäìæá?ä»®ïŒx§à™0ж1“º üÕ°°P ¨Oø ¨OëAŽÔ„õJ|Hš6É—äÓȆéK›­ÞªÔsP>F?O*0їçálðÿfx‡ä‡°l Ád4Ã3À]Xu DקݘÅûqaùr)œþ ÀCà¦ØÅùd¶·à¼?ÑʼS÷7ðqÉkà&ÈZ{¼rª7Æâ3 1‡¢'Gnå9¡éˆ›ÓcÌÄ|´Õ~½£æãS…ÍÁBð˜¬É^IäX |É7 $ÇΫ»`kÁÙp+-Ú. ïþ³É«`'мӧÿöñ¸¡YÞú•ÎQÏïËÀM€öz8o,6Ûlãið ê·‚þxîýœ»}·@+Ó¿»À>Þ ÞõY’Wžê5!ôø…M>Xl»7<„Ç`q°ünØ^g‚wÇVÛlšy¦_k;ô[뤺ÙÿŸa7ð°ÿ´y˜¸ ÃÇáp!¯ínzçï¢ÜÀ¢àyãff]˜ôoAx'Ø×` , n`´‹à“ð pñÿKø h7À›a< Ü€8Ÿg‚ö1p³áü’}–ˆy­Ì;1÷Ã…p¬o‚­@¯|f­füõ¼›| xÜÊÔ=‹òøÃ<—šäKÝÇahã5Eôºü¨ò¯kC;YZ \¥ž-†‹¬P €ÓÇoJý¸hÿl¾®Ý8äæaÈ7yÜÅö{óYÜ͈ nØ.´¯‡9aap¬}Á ‚< rÛž„›7-—€V7 ÚàƒÄ¯Á:rè§ñ‚ÁñÄÇ¢œƒwD¦ƒõÌ¿ö‚dŸ!bÙ EÆ—õÛvÉ:ià仩b¾Ð ˜ýú¸™wSZm@Èûõ.ï X÷¿ðU؆ÿƒ] S9Å1ç6ù𸕩{åñ‡y.5É—ºÃÐÆkŠèuùQå ^׆v²´¸J=[ Y¡@(0Ü€¸°×\„Ï7{ú7ù¢üé5žžãŠt§!/‹Äî:äe㎠³hQÉ»Ëd |4l èkÙl³"Ì].è!Ý‹ú¶<ÌÙEÿÖ™ êÒÊÆ+oÕfyñ0 Õ'>fÖ+Mð!)Ù$_’O#6Eôºüpœª¬®9Tå?ýV©g?þD›P _|2~í‰×x+]œ7€”°ÑQ >&ç±lÂz¥ >¤£×$_’O#¶»ê2²މ…¡@( Œ)p&¯ªQ ï¢øxÑkÀïZ„…¡@( Ì¢ x«Xkuõ"•ͬQÏߺüpœªæW×ê9"ÝR¥žÝyµBP †¥@| Kù‰Û„õJ|H*6É—äÓȆsŒìÌbb¡@( „¡@( „¡@(Ð8bÒ¸C…¡@Cð§RßPøæ¯=~úÓ­{ÂÑðyØFÉVa2þšSnƒžó«è|Z>@Íñ ïµÆÔ¹Òaˆ§íLjÕ§äŒFbc¦±ÕhL%f „Io;•Ieu†eLWaUõ«¯uÍ¡ ]úí³J=ûõ)Ú…ƒVà :<½èôrBÿ¯ÄDlGû?1üßn@._K_…Q±·0‘üghw$=è9ŸHŸ_ƒaÙx_æĹò~&wr—Tïm»¬;¨jU|”ç|Îz¬Ã§@Ö+Mð!)Ú$_’O#Æ—ÐGöÐÆÄBP B¼âÿyè×V¢á‘àfã#Y'ߎƒs³üQˆÎŠsö¸Mô\±xi#³ÍŠsž…oLuVW ÁšÕÏ€˜(0k)ð[¦{(\ n þ›A²u‰œÿ«à@hu¡æäo š¿îdú6¸NÿgÅžp6ä?xñÒ^ÉÝn…} ·Ï’ø4ø-´EÀ»#7ÃàUðôóö% ß —ÁF𸮇í@륮cûOöî€GàR˜šýþœ®cÞ;@²M‰¨éƒ ?[@²nçÜéÌAg‡à/iùÂ|aÒê屸¾þ/‰Z§ã`ßKÂÏ@MôÍM¤¾j?„­Çb3ÿë{;ÿ£N«óÈsâƒðB¸–vu)³Wð÷Jx·ÕA›È±ýí¯Ïqçð+x $k7¯µ¨àëÀ×›üô_û¼r,6óÏN'A«9[c)ø xìËçYa¡@­ ü?F»ZÝ9‰¼ñu;X­„ªõ(ƒÕå‡ãTeuÍ¡*ÿûé·J=ûñ'Ú„í˜A‹—]`pÑô0Lv.Ü]\[¶}‘>P;N‹Í\î^ÄO%taørØþ .¢Ö_ƒæâï^Ø~߇ñÌEÞU`¿n..€¿ƒ‹êÃÀþÝļ\ä™>^ öï&G륮 |ý|5<~ g‚–úQ5ú.ø_¼ÛŠð  –½ ÔÚG‚´næ¼ õîƒvÇà}”9F:~ÎÕ9»ÓÜœÀVp=|ʶέó—+“ît¦\Ü´9ïwÃà¦A»v‹uö¯Ýy¤ÇÀ¥à†N­ÛÕ¥hLï»·ipZ¿ÇvWÚÞnÖuvÎ;€f¼îSv:¼¦¾yµ[`Û±ØÌ?{üZÍù0ò§Õ¹GvX ¨g™>º™P“òø¦‡e½úr޶jyÝé2vœ[‰5Œ .?§*«kUùßO¿UêÙ?Ñ&h§À ¾šº¿ö?·Á|l?"iqRZZT®HÜóßÍG2Z.Ø´³àȱØÌ«àÞU˜\”}½Èo¤¾ý’u²5ˆ8Þ&à‚ììDîû×\¬ZW륮}o³Ã8\üjösÑXlæŸÕ c*x…Üå\ì³DÌÓº™óxÇà/ôã¦#™>þÜ€,ú²5¬R?²ž°ˆ]Ùعw¦òu0gÖèânµt®tò/Ñî<òÎÓ9c½ÍÜè9ÏvuÕÛúÉ>Aäü"± a?ÇÖö‡},ÀÐi^϶#¬sƒÚÞ€¦¯­6 –ås6Ýéܳ<¬w<ÊôÞËÄZ”Ç7=,ëÕ—Võ#ïéçTKMòŠað7B:p!œì1".®§Â}à¢Ô«×É.$²$<3e”©Eú’,ÿ<â¢.œ¼âûVø<WÃ*ÐÊ>O¦>^[æ þËÈ{¦e.à’¹ tqgÿšéܺ­ë&é`ð.ŽW«†G!ÙU)BèUqÍÅ÷³à ÈëæZ_MÙxsžBNÇÀ…úw ™lIûÔ÷ äy\µÙÁ:óA~\!-ÝØ”¢R§ãðê¤1­®O;ɬ“«õÒ\LžWP=L-bê–ÑE›~­äzÙÏEŸæ¥îÃÉ`½àœ~­Å¼c¢¹øN¶9‘Ï ïü¼Ê» ÚÀzS!·H|¨ÈÐm¥™ÁØßåøëî¦,oÐÑcéÐE£ºL…oBnΧ•é“mrýrß»s§cà+ïS?»Á|0ÞçÅO¨³< ÂðAHÖÍœÇ;?¢³a ðÙÿ @›êåÆÂš‹ùÂvP¶ûÉpQÝŠJ•»9ϦÍÇ!Í{wâžS¹uòo¼óèQ:ò±'7ÏúÓ霣¸­õ{lÕý]à&z5ðöó(÷㬧ŸÚÛà0ÏE¾Zßɺ™ó6Tnw æ¡ìÛüûñ¿~inþ ŽoßÀÒ0QëtÔGÝÅq…ƒ$ÍÍ‚­“Σ—ÒöN°ÿå¡S]µsQŸìCDܘiýÛ¹iû5ðnàƒð˜oM¿Zéþ ò]”[ç´²eÉt±Û‹-Nåy[4˜FžWÕiQfÖ|ð|XÔD[ˆüÅÚ”U‘íjº^½ÖÜPÍ5ÿmlÛéªu7sît <6ËtpeaÊÒ Cµž‹Æ;+УsËíß$vÍ3ˆwò¯ÝyTêb,ÙKÝÔ¾Ÿcûr‹ÇÖM…Çæp“ ¥Ï€vóZŠ:éü¶üØy,}-†Õ¯@¾NIñº½HãæaÝ>¤ñrR<•µ S¶ªyOWà)z¥D>½Iõ9ùø)^Ũö]•%¿ó°ª±šÒo•z6eŽáÇh(0ƒi¸©Ëög Ëà›u ã4J/ãÍcàcG“ÙÜ@y§âÿ`g¸¼ë—6ðñ€“ЕIÅuµnÛ¸ÙyöX‹îÿŒ`u/XÔ BP BP †¥À—xëlð;‰_ù]ˆIïuØÚ rôüHã¬:OŒ „¡@( „¡@( LL·fÍÝŒ| ƒ¥áØ´íà“FJöGÒ‡—òRÒ;ÿJ‰,ü9qÇѼ³òx¼´uÀ¼ Ltk±éV©¨ „¡@( „¡@( GvÉlèŸwó¡ù½ ïzœj³îð™y·äûYº›¨ß÷¸<«xñ«áœ,ÏǰzÚ€Ä#X™z BP BžÈ"=7Ž¡@(Е7Rëþ¬æñÄ÷7Ú0wÁ<„åÍY³GJ=ý½”7w@Æ•(*„•(àó’Ï…M`¤+^ݘââ"ŒcSþ Ü·Ã50üòÞ? ]" L*ÇÛ àeEhz ð×nžM4ßh’ùúwæ{ƒÏÉ{Õöà#(—BX(0Ùð{'Â; ǧ~µÀG§N‡_Á/ÀÏÇVöj2/lU@žwF|¬«lnf,2}ë…É2ÛÏ`?sû2ß8ÊôÕÑ•}0]…UÕ¯¾Ö5‡*té·Ï*õì×§¦¶s±7\WÀ‘ðfX¦ÂüÖ½ê5ÖuTOuU_uVï°P`2(àE‰ipÜ §Áþ0 žË@Ï_ô¤Í¬l‹0ùUÁ÷‡wÃwÁŸ*½ÞnêfekÂz¥ >¤s W_ÊõS?ã…çS!µ=¬Me/¤¥:Geuæ#~rV–êä¡ç÷êY›ßS?µýrmn¦Í+³vÝDÓxcuS"»édÐuòñS|ÐcØŸ}WeÉï<¬j¬¦ô[¥žM™ãDýð¶èAà•¸c` «NõUgõVwõ šªÀ‹pì"ð*â{À+ŽaÕ)°]ûøÊ°̪»|’âÈQ«¥qó°V²ÁrR<+~Z4ÕIáÓ*´É˜È$u¹>‘CÁ;iü<¼‘|ïœjùä^Ò¶iÅ>V.,o“÷[Ž_@ý)©Q—aêc¬zJäa—ý ´Z>~Št€¢3û®Ê’ßyXÕXMé·J=›2ljøá/E\?…%'ÒQ´íYõVwõ÷8„…MR`.œù&Ü oj’c³ˆ/Ë1Ï߃‹¨çÏ"sΧ™¯SRî—?Âä] kúFzG!õéª, š›ã •ÝEüK°|þ ©Ì>Ö-߀£›P ¼jxø…Q¿sЯùèE~wÕt¿´ú—R‡¯ ½^­ÌÍïì>’ø_8N7ڜ࣠þbÔ|p)wưÉ^DäeàbÅ:Ú"°=œ ׿‚ÊöËÂ…p \É|ÿœ’„Îí\pnƵ¼Žþ^ CÞɾÌc£¯ƒ ¬nÍG¬^ ;« ÖWˆÖVOSò7ð{¾FËv…‹J?"íÝ´ÿ_ße»œ 7~Ϥ{´‡F¾~W.êûºþNmŸ¨ê‹ºÌ…5FÊ>¤7›A»PU¿úY×­ÉDú«Rωø5¬¶Ç3ðîC|nÆÜ£ÄëIÏÛÂß,„oÁ{` äæ¼uZÙªd:Ž ”d ÙƒoÀ;aÐ|“ôC]ÿʶ[—3kH{|H|yØ´µÀ‹Ÿƒ-À÷7ÿö‚gÁpóá&ĸ›‡‡àXÐοS¶!¼ Ní4x9l 瀛”«@[ufð´¿«‘óï,×»Ê ,Fø1Ðu¡“©íM Ÿ5ûrÓ³&¸i<P €s  è"˜Uðõâ›WØ®€ÃàpžÌ+…¯O‰!…0îo$¼®ˆ»ÈÐ\\8{ê^íëÅ®¦²›–…À«¨¹mCÂEȲÌ/w3÷å,oXQUnÃBº¸–VÐ`ÿ£ŸóZôµyÏ7ƒïGÉŽ&²3œß…éàÆD{Ül˜öýáàw)|ø~§]¶óýev¸®„½Á÷@Ë5ïN8ÖUp2hw€wÞ¾gææ¦âÅ¿'×í_|HsîÕ—rýÔO„HºÕJ‰<ìܼšÒ|ü¯b$û®Ê’ßyXÕXÑo3ðJà´!¸ÖÍD¿º]œJ]?às–'o@HŽ=VåÂÅ«›Kx5óq˜¹M%ákc³–„dÞe±|û”Q„ ôîã䶉|ÁîøÇ€3’¹±huñc:ù¢Y'ùå+á8˜ƒ°ÑÉ»{èh}êwCò«Uxd}ÖQµ•uŒ›Ñ’?½úR®Ÿú‰°³I·±Z)‘‡›WSšŸâUŒdßUYò;«+úm¦­o Á5¯(zÞ½aœ±»]äçpŠJßå È\ä >†‘êyUó­P¶)dXgÓrAÍiÇ),¨[Ê{Ô=h›ñ¼óñXŒ—Í»+ÀZ°h¹piûò.Èœ裪¦¾úȘwŠzµyiàûžoÜì¥÷ÃÆQJ–´ÉÃR•Ú’¹)ÞiðT'…êFÙ“ Œé囋f¢l©¬œ_eº.?§ªùÕ5‡*Cô=1¼Bøðá‹'ÖU¥­]ø!ëÕC?,'j^íôñ‡á:hõZ {èæã%§_Ý6toÂYM_#ç‹z¿GÖ,¾;×ÃÞtËÛ;`GX 4/|ôrge¬Q…Z½GWµ6j7&ø|ëÕ—rýAk·<Ží–œ+…“¾þ ÿ*•yÞ¥sîâ?-ÊóükÉó|,›Eú,íð›±Ø`ÿç£/—°P`Ø ,>þ¸ï°‰ñÇWñ3»Õ÷ÖFYž|’âuÏ7›‡uûÆË}HñTÖ*LuRتÎDòÊ-èlux>[c­{ÊIDATø¨Ô9Æ~Œ¸liÝn@lû‰±Oþ‰ Z$QŸ”ep1û®Ê’ßyXÕXÑoóð—©|VÓóÁ/7†Õ¯€ºÿ…òÕžú½‰C'pâ{ƒ‘87ŸÔ¥ÎØV æ¯q½¡ÎA2V¾NIñº]KãæaÝ>¤ñrR<•µ S¶ª3‘¼òdåRg~ßÔ_§Kãÿ¿¢¼— È´ñ{iÉjÛ€ÄóéIòCj¸‡nç…oÀß`c«OõVw¿ïsÝnÃB¦(p;ŽøþàãX€õ!¬üŽƒÀGWüÁ“!,˜L ø³Ï^XKÖÏÝ}ß¾™:F˜vOy8Ê~8Ϫ,×0Å«+ú\ ¼w½Òy.l q*0uU_uVou š®ÀÎ8x5ø®ëBX5 ,F·Ÿ‚;à{`zVµ´FÉúµÈÇNñº}Hã¥ñó0•µ ózÆmî€ø9÷1È}ðµnî€J½û!µßΆXmw@f÷¤É‘*„Lcu óñS¼Sý~˪œ_ò;ûõ3Úž³3¥mà¸~ ;À†àmÐ~®`Ðl–5õR7õSGõTWõUgõ &‹þx…‘ÂÍp4øhÐK` ÌM´Ušè>ùˆÊóa3ؼ(áUã#@=guû”©[“òø¦‡e½úR®?h¿Ë¿Çøg¸¼{šï]ÔtQ³› ȨÿY·÷®`m¦¾™¡AX(0’ ø†qbÁ²„~©Lv…¥ æ#Lo$DÃÚ(೯€oœ2NßXo‚°P`²)ðÜxL…WÁN°L†›”°ñxŒ*n6ÜÈùþðWØþñ(&"„M:Ölãñä¿üLìžHå·ƒý.ŸƒÚ-ßE¥xíN0`;«ðÃþ«²Ü÷¯j¬è7BP ¶U~¦{n£<~Z£äaÝóÍÇNñº}Hã¥ñó0•µ ózÆmå; 70À5>^ì«‹@nÝÞ±ÍFàÆEÿ //⦿ Uؘnq¤ i£ÏP BP BP`p ¸Y¸jpÝõt6†wÁìð¨Åâ1ZdŽABP BP BÆ)ðQ<º­n¯bR·â1^( „¡@( „¡@(Ð üá–×íJl@êV<Æ BP BP š£ÀwqåŒ:݉ HjÇX¡@( „¡@( „¡ÀpðWâʶ;µýBœ_8ÑüFzÙRY9¿Êt]~8NUó«kU‡è;BP èV*?S»õ!êõ®@Ö+Mð!)׫/åúU­+“£Žéw@FåpÆú\¾~ßF›ç÷Ñ®]“výéÛ0{»†È_Ÿ¶o(Ú·Ý·mº)%+·-‚P BQV`q&ççÚ¼-&Yåg^>ÜÎ$VÍ3úˆÏI›·C¬õú/šÔ£Àÿ¦L=#?u”²¦«°ªúÕ×AÎÁ7 ûÛÄŽ{´Ë©¿[m:UÏûû w**oL¨¾Ñ Ú¢ÃÓ‹Nóñ=NÞßTwÁöyfÄCP Ú*àgÀ(™‘•à:X´ª>óÞOß'0óÏ-Ûfé~¢»ÐÈyÌצ±eeÚT­,»<¾éaY¯¾´ªyO?§Zj2×°ŽrŒ[¹ë3Âý%ïÏ7âEØw7]åãwS¿×:~à|6ù{mõCP FF0“%àX V€*.²Ñí¶±¥ŸHM,ònš{‘ð%ë&Z‡Õ)·åªÓ¶]ÏkQp6¸9_‚opÚRðð üíð)H¶.‘óácàÕ˜[áð¸!ÓßR»¿þ ß7ŸÞšý+¤7V¯À\ ƒöz8o,6Ûl©¿ I¯ûÀqE™¾Þ yÿæÿ…‹Áùþ6ƒdúwü®‚AßÊ–Æ7_½Lß÷ÀI v{‚ÚÎɾBä°”èÚϯao¸»C½( BP ¼~\sd]ÿˆø»Šô.„3àð³Âv²÷¹î…_ÁЂOÀ!àgæá`Hv ‘cR‚ðpð3hUø#l§‚v&ì0›ù§ÝgÞÎÿ ôÓ1÷­Óü>Kùᅠˀö p^‚Ÿÿ~övcŽïgä—»©uúVàú¾[FÃ'ø±2OÖ)û`º «ª_}oSçtðÊÄ4¸ üž‡æÜ¥°iuíoظˆÿ†p=ød‘öMiKØ¡HO#Ô|ÛR»éÄÓ7mûÜV)âj§e¯5ÇÅžìosÒWÃá`ú§xìã!B?<Ö£áa˜ ¾Éºq:,Û¾Hû ùáqúXìÉñMúàü^Îýßà&d Ð}Òæ?¶çú¼¬F^Ù®%C_ÂBP ÆWÀ÷݉šïÛö3gÖѹÄ÷†¥Á2ãÏ?#ƒÅa;Hïó~ޏ©ðóa8 ¼ ôgØ öë@óB–}ú4Wu·ïˆ[¶2¼³ˆ¿p $?§/¦®NÞãpøy£¿ö£ÿ©]«ùY÷ðó ð³ëp} ?Óà 8´n?ÏÖ§®ãÏg£fY™Õ*Í*ozXÖ«/ÿG=ŸZµ‹¼ñu;έ„Æ P—ŽS•7‡x%˜ÜHܾYùFgÛÍ!Ù‹ˆ˜· ¤7¯åŠBCË^S¤ |ó|S‘ö xwHíò…ößÈÿHQï"ÂOÂ3à¿ðKð®v¼y,öÔ €mö,òÇëõ¾ZÔ5ðÍ÷Øö‚Û sÜ´W´ƒàô±Ø“ã¯HÚy»ùHæ‡À®Eâ,Â#‹øÖ„ÞBŸ¼òue Î%¯l×’±}93Ò¡@( „-ð=y¢¶1ØŸÉ|v¿(xGÁ«úÞIp¾ ,çÀ·a•ËíÇr7 ~ž<´gƒeυ׃ðn†—†p?X7m@'žÚ,O\K~¶úL}å;Á Ï~.9žŒÔ®Õü(žm_p.Én!b^²OÑ_­Ûϳ؀ÌÔ«Û¿«2ݶz=*à®?¬^g¸“Á7Ëà©æ—ö÷™ÁØß‹³xŠú¦¤=23룈ŽÝ¦MñrxU–áF#½ žH|+ð®‚oÔGÃþà¦Wˆ~ÝX»þm›Ïã1Ò^å™ ÷›‚ Ù…D–„ô‘òS8µˆ\’2Ï+0ë8 Þo?°‚´‘" „¡@(0‰ðN€ïánF|¿ÿü¨ˆûYºlÉ|d)}¦º‰¹¿(ø'¡Ÿ±¯ËÏ(ÂÍç†S!Õ%ÚÑZ}æÝF /óA^‡dÏ–·×/76šZ„…“ZØ€Ô{øVf¸cÁűWé}“üh7Í ÆîŽÜ’Å‹è„wõ­ÌG—> Þ-ðÍx:xue;8 |£ïÆÚõo[? r›BÂMɽ°"ø¦ú8hjt´ûð ^óÃà “¶9¼üprCu(l n¬¼²¥}·ln‚ö+gF:BP VÒgˆë/TiËÌ ÆµrâÝî…aø\׃>šŸ'/‡ `Sðó$7?#Ü€x¡k_ð³ä-0?|ºµäo^~öø™¤o+Àuÿ¿½» •äªâÎĉF ¢Ið‘!ˆäc!×îTp¡³Á•T܈HB\²K\(ѺÑ…‚A1.D Š$ÀAãÊ…. QÏÒÏ—ž¶gì¾ïÞº¿ çu÷«êºçþΤ«N× ©ÈXöß¶¾—öxùÏå=Ë–s›'Îg‹ˆÇaòªÑNà 5U>@ž­xEÅ'*ÞS‘¾g*ž¬x¨âæŠ|ðæBúØã5AæÎçÏ+þZñûŠû*¾_±mää𶊬gŸqoíô¡Šë+>SñŽŠ;'‚¬óÁŠlËÉåóß­¸ÜÈ“§+¾Z‘÷Þ^ñpÅÒÀ¼PÏ¿U»§*~[‘‘uýeK, Mö1 @àlþ¼™öžzÌùà³9fäB>ç§Vü½â—›ÇÖã÷*ò¥Þ]¯­øbÅc¹ó½mäÜ“óÑ»*rœŸU¼¿âŽŠUœK3ôîÚsõ®ñÆÚ˜üÒÝTqEFÞ·k}Ùç_7VÜR‘ëƒ]Ãùl—ŽmC \¬lOÇY,àty}Œq¬ã&×]k¸¶¶ÿøÄ>¿®ç¹Û÷ÜYqkE¾µÉë\Pÿ`óüõø¾Íï–¦1nÙïËÈm^ä"=ä§ß—͹%ý…<ÙŒê1Çʇ|Æ×*òÁ~C^lÆr¼¼üJE¶ÿªâÿBíóÓŠ¿UdŽ<~ºb©'ÏWd[Ž™æ#'‘Œ/WääqrþÛêõï*òž|ا"ËHƒ“m'çY¶íóø\íôÉ}v´\ú¼=Ã×ë ùìNü¢"ç˜å\•‹ù*rnLü°"Ê«*­HÑ÷åÜðኌoT|ûÒ³ÿþñL½Ì±—ñÇz’¿~µŒ49Ö ¯¬x²"sÞW±ëœ—÷ý©"ïÍù,wTrìg+2v­/wëÓXä½o©x¾âãËÈÜ¿Y^ìùøÞÚ/Ç{õeö϶Óq™]öëÓóçõYžr9+ƒæóö‚Þ*cþßg ¹sðúM•ÏÕã›NU<ß‚\êw£¾¼P‰ª"âo­¸¦bÛxsý2'’+qºnË>X¿ûGÅë¶ló+8¬À!Ï©¹èÏgû¶‘Ïû›+–/©Nî“/øö½+ò}‡~ž»9×圗ñšŠ“ùîZߥ74ü±ÏõʱÓé!‡e=å²ä´úÇ^Ð[å‘yŽ5Z­áXùú¸ê€i@Z/ÕDù«W´šÐ<˜\à˜çÔÉiºü®WzÈaAî)—%§Õ>^îÛèÕ.ØÂš |³fÌ¿3i5Þ^ý¤âs­&4 @€Àþùë?Û¾½X¶½´G›Ÿ­òÈ<ÇZ_«5´©ˆY @€ÀncžSwÏlëÿ#ÐÃõJ9,†=å²ä´ÚGw@V[Z #@€ П€¤¿šÈˆ @€Àjò?Ä1Ž/°í¶Þñg5h#à<ׯÙ,V!àÈ*Êh @€ÆЀ¾N/þŽH€8ª€ë—£ò:øI ÈIÃ<â0‡q @€@3×/ͨM¤9üŸ»ëWø&áð¶ŽH€V ×+¹nÉõ‹A ‰ÀòÿÂØöÇ–mMÙLÒ*Ìsëkii. ÐBÀ9µ…ò:çhuÝ·^O¹ì“ïÐû¸2tù$O€ @`, ÈXõ’- @€¡4 C—Oò @€ÆЀŒU/Ù @€Z@2tù$O€ @`, ÈXõ’- @€¡4 C—Oò @€ÆЀŒU/Ù @€Z@2tù$O€ @`, ÈXõ’- @€¡4 C—Oò @€ÆЀŒU/Ù @€Z@2tù$O€ @`, ÈXõ’- @€¡4 C—Oò @€ÆЀŒU/Ù @€Z@2tù$O€ @`, ÈXõ’- @€¡4 C—Oò @€ÆЀŒU/Ù @€Z@2tù$O€ @`, ÈXõ’- @€¡ÎýÕ'±Þš0X§À¿kY¾`Ygm­ª?çÓþj"#] ÌÚ€¸0éú¥ä @€Ö*àB|­•µ. @€ h@:,Š” @€¬U@²ÖÊZ @€4 EJ @€Ö* Yke­‹ @€@‡‹"% @€kЀ¬µ²ÖE€ @ C H‡E‘ @€µ h@ÖZYë"@€ С€¤Ã¢H‰ @€ÀZ4 k­¬u @€èP@ÒaQ¤D€ @`­µVÖº @€t( é°(R"@€ °V ÈZ+k] @€:ЀtX) @€X«€d­•µ. @€ h@:,Š” @€¬Uàü »8@ŽR$@€ @`w@ö@²  @€‡è­yñ0Ër @€Á\V°«M··䉫]ˆ÷ @€ -à:pèòíŸ|o ÈÝ•úã:àýkhO @€ÀȹîËõ_® ÎmÖ¸íz/Û&`°D @€‰\ 7,~ow@.ÝT @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´Ѐ´7 @€‰4 ßÒ  @€´8¿c‹;¶ÙD€ @€+päŠÉ¼ @€«ø·$â¾Ü—üIEND®B`‚tpm2-pkcs11-1.9.1/docs/illustrations/reader-slot-token-obj.png0000644000175100017510000003245514535673717017703 ‰PNG  IHDRîF“Í`sRGB®Îé pHYs  šœ iTXtXML:com.adobe.xmp 2 5 1 2 †Ò®$2»IDATxí} ˜]Åufu·ö}Úо€Ø6B1ˆÀ,6ìá›{â„x>Ï÷Å/3“Y2ù˜$æ‹ÁÁàƒ c ıï»ZоtkßÕjµz›ÿ?UçÞzO¯¥–Ôï½Ûô)©ï­[·ÖSç?çÔrë9gÎ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(ÐF Th¼›{¬ªûÒæ;úõéùµÆ¦¦±--®JßÙÝ(О¨¨pM]ªª68T÷È?ÿ·[ZQQÑÒžù·G^†‡ö ¢åÑ ÚB%‹ÓY(Ðað°öRO³—: _–«…ð †{KKKÅí?zôåQÃŸδ±½ûõíå*ÛÁzwñ]kN3+1ùC`Á0Koô‹ø(°Jss‹;pè°{ýÃUõû~»~VÕ o¹¥IÙ«ÜwÃzÀð\@ÆGž]øy/Ñ9Åé¼oå—Šþ†ÃØM&„…ðÐ…o¾öÃ_ÜÙ¯WÏ‹gMݽ©©ÙíÝwÈì`­0fDpò™~Ì’J¦Ÿ[(ñð_œ¼·ôF¿ˆOàùçÒ9“»¿¿lÝÛ–î¿>¸_ï=j¿.ÊŒánx2ÀðœÊ¶É3Ã7VL¿À`'Ä£áÁðÛ Þ4-€Éçr—¯xÃýhCÄں#îp]½˜4Ï…XAPx2á!Op0œŽq½IŸú-}J/£_>ø‡|Óp´a¼0RF.†Ãs¹ä™á!(åD£¤:…âAué—Ρ_ †¢žy³7=h/‰áŽQ»ìÞ[ë—%Eèv?á$Ët2«,+OG¿}›A hÇÒ{å"Û‰Œ~d›„7û&üCþÓWY¸¢>3<—φÕ)¢ZL¿Ä2´âÑð`xð6¦É^ˆ‡`¸7»{êÀÆÛNÁ8W#KC˜~¯ê#âzœ¸É;F¶ôA áÆP×Éé×Üܬ”ÈĽßyÐÊ—ìõë= 3yоx6<´/=Ç»É;ãçãYóáÁð`ö”wăÎtbR”.Üd:T'¦h®„_fägæ™,M'O>¾¥÷Ä0úˆ”ëó”ýfxÐIîô„Ñ&½&¼6-ŽÀ©±…pÎÊË ›’ï,½ÑlÌÎ_NÀ? _1nYÝðàûÍð\r<‚¢1ýbú•¶F`‡,¨©ƒéß'Ôë¦Ê¢’wÙ#Á³KêõÆ<û)èb„¡ÃB§ÑSÑBNF˜&²ô )Œ~÷ñù12ç èó'B‰åYæÀ@*$˜¢Äô0ýš‹†PÀì-$˜½IFˆ¶ÊT`ß”, ‹€à6˜`¡‹°ð‘+ÄÓðpg.‘@ñÆÒý”OÈ 'àFɘ3<Ô0Ð Ï`LÊÆRÊÃŒaÕ1<Ê&  Ù[^Q‰Dê¼ú Í—wΦW&_ì*ƒäßUp© w™mJxå§ÓgKïŸÑÏA)ÿøÍY}2p3<žS6Tù•/ž<3<Ö©|À¨!í@s/^Xù奿áÁð`ò •‡ÄCîV†Œ@§`Õ;ƒÔïxIfa4HÒ(ƒYz£Ÿ2†ÞÛÂ?ÂD™¸ÈÖÃúÂägHåc½#´èò0PJHÓo商‡Ä,R?–—ËGÿ<Ã=RJFdÅ<ï•äQ$ñæE ¯-}¤ãMŒ~…y%Ÿ£Êõìû§pŸŸ›½¨x.÷[®á41yp,g„ y¤)Ž~+Tzy ¤{^§‡®0ýX|ý˜g¸{Ês‘v &æeUèyƒÔ\è¡Ü¸–žÈ¥‰ÑïDü£œ•¥{¬x¬?M”Rf ZÃRÂä{©åaJùìø i_”šRYìëÐÙÊg«½áJ¤#Èp¢LÚ/0D¹«†äRC=Æ»†ûè>Nx›ä`éS:y&3ú s(ÿä3LÂ9eò >†Òžcò Ÿ=‹.Ïò , ’b †‡²ÈÃç?Õ—25È ãDzðc¹énOfÜ9ƒîñQ)æ¹øÆYuŽ+ãp$0Œúøœú-=‡7F?²I[ù‡B(cÎðpox.=ž3†VÇð`x¶,‡<0<Ð@Mm,³·RZ”ƒËMÿÈpç©2-b¤Ã8‡V¿?4Æ`B,cÁP¯ ¢LF=QKoô;9þÉž`6<¤Ð !-Œ~mãÆÊ–3<ïÒX0y@4—φÓ/¦_½Nˆç™³£#L?˜~€Œ*“~¤~(°U†Á´Ìe— opT\é³€  £€Qpù¸ÅO?wæH×µkU¨ç#¼cùuË×írõMÜå“ÔÿÒY£\×.~ðÇgJ}Þ¼ý [[³—­•„L?iÔ7jX_Égó¼¯ÞçÛµÄÞnò˜A‡y)šZ\Í΃n3þ›š“ú^—Îíºuõ-Ÿéâô›PŸu5ûÜÈ!}Ý”1“wqüææ·u®ÞY›”×ß×%[ý—Ï?ìƒb»;ï¼s\CCÃu]ºtYôÀ¬:ayìß©£Ñódð8|`/wñŒ‘nøÀÞ®G·*·çà·iû÷öòרØ,`ûçü444»7—U·I0ïÉàÛ #¸}º»ê]‡ÜÆmûÝŠ »]ÝÑFÁC¯n]Ü…3F„r<ÁcþŽñp¨®Á}°r"e›ŸO†þóhe$O<Š{íLx __Ï—¯Ê[ñý0x콕[“þ芕è©ã»ñ#ú»±Ãú¹#àÛÛˆÌݰõ@žG î“ÈéU›ö¸m{ “#ý8ù ÔKÒl ºäÒ™ÐKÐqÝX:•?ÄãÚšýnÂýݸý$| tÊê-ûB_~ß^ÝÜy“‡Ëjù;+¶ºú†¦œò5?â™ÿcýH]®ÏùòùtùùtÓ{j÷úyÄÃнÜTØ%äÝþ¿[wr¶Rþîr‡ëÁ¤ä•ï ‹ñÀçjðù¯ ósœž™õÿKþCšÏ6ïq5»jݨ!}Ü$è:ó7ý-°aÞ‚¾i€¾ñq*`«U¸©c‡@wôs£a5Á–Ú±÷°Ô}òfnª;â|éϯ?Ÿk©;Vm“úØÓ]2c”è¼î {¡ó6ï8àÞZ¦:Ïã)Ëxí$rùŸkÁpll%½üÃxigŠ?ÃÔ4¥JÓ¼)ŽBª5wkéºî‘>uµG¤Î7]6ù¸i˜;ð{÷½&Ùjû¿~Õ 7™ŽŒÿ_| ÍÌmÿ”1ƒÝmWL“8….4®_úh£ûåk«ýLÓ¼6Öç'¯É àxùkÝ~ûÞz÷Îr(8­¿T5cý—O?OM©vÑ.0ڃ̧5666}ãßøÇž={þèÞ{ïÝQ¨@Ö§#ááz ³ï›…øáڹ݂¹gú¶æâË—žåþáW‹!èÈÅÏþÚz²¤‘þ h¡ò¯<œ»á²I®*ùa7çfN*yg÷?ý‰[»uŸëíŠéy¥~¬áÿágÛ3' µ_Zpú·J¿ÂÍo×Ð΄‡¾½ºŸ}° <7¤O÷ï¾|¶;¼_í/š>Rž_ûx³{ì••08(ÓŒöA‰xøù0Ü FˆÁó¦ ww.˜:dLçž{w½[c¨ÍzziÖYCݵ—œ)éiˆüð7ýÆ\i¨Ý°Ô«G7÷”Qýlx(¿½ô»äï¬òWõƒÊwa®—ºúF·xõv÷sð5mqyòm&”ÿ^Y¼É=úÒÊ6Ù.Ì‹Y¾¹´Z7´_aÜ1Þ5OtŸnÜíî{j tGדÆõñtÞus½Î[ä­Êç6ê×¢¥ü”/<~k{°ƒp‘_R¥Ÿÿx§a/–ü>x¦qÃ’&ï}1Ó£"‰kjnvú§Ý0Þ”3ÜïišÔÏ×]ß¶~¡Ê6…ös¤ªF;SqFeÂÈǶ?Ê’£RÖ'vÌ÷ŠóÇ»oßtnBßø}k~¦ N¢hþ,ƒ~u¬Ûb1#\­¿ô s`›òú‡ïÊÕÇð6¢¸wYUaÿý7ëêêÖÜ~ûíÿù;ßùNÏBÅæÓ«˜ü| = ôW{—?cÂwŒs €5”îØ[›¢_ïîî[×Ïq=ºwõüž¼! ŸŸ¾:ŠûÊåS£ý0Ï`ð7aÕ‰n`ßî?þþù"Ô1‘’*‚¨Œ‚^ŠšŽÀÏèsRýW°ñíØiðpÒ<¹;°_÷·_œíüfçVsÉÇê.;gŒûöçFxÐ7¸ƒWU¾ž=i˜û£³£ý¥6¹§Þ\+º JѪWôx*v½{vu_ÆŽÁCˆDŒjù”õZžÅ /žÿsƒ‡›OBþ o€ßc§öTlÇôìÞÅÍÅêÐåàùãñ“æ“ð›œà^YÅà 7º!w\¹¢~R7 +Wß¼þlè“Ó3 è¼ít^Oê<Á°Cúàž<ÉV™ ÎŒA8± iòÎ0 ¬t!õÇŒÒl“ i4¼$éQ7:Îþýù}¯‹ŸåWÀ—Ÿ3Ú}³Ùtì`!¸´F‚ÜAßÿþÐ;¾HÃúÓ1}38£íÿ¶³ä»/Ì%K¥qûY†ºG_\é^ÿ¤Úõ£Ú×ÍÅ6€K°LK7}ü`™u\±~—F—­=¬ËWZjùR3„ mCŠG_\åÞødKRÿa0:½n6¶ÓôCiêØA~¦ñ3Ûyü“£„к/Šû»wïþfàÿâg?ûÙ?ƒÎžíÈç%áçèåû&(«/š ïxItüƒ0HÏÕyeKãizB/®³†—O¬—7ܽI8“@öÝæ+ë+Ìéù¢sªžÄ”Î P²ô¬ypqùTì/~´Y:¨7:±f%¸¯=LôI ÎRÄ2cLpôˆg"Üég;»`—7évî;ìª ô9$ó,|ù3Ù¥í—N”˜¼pdV‰=¼M²ž{â¹ïþª ÆKŒ+Î+{|åÒ»ö÷ûzÁë™9—þ¬SŽ“:zúïÜWçÞXZãn™ï+úôò3ÝQý·}ìzl_6 ³ß$gI\Ÿ>}ª:4*64ÿ'ïvÇw|÷Á|I˜/KÆÏ=b~.fùð¬®nïÁzÁ1;€þW—T»›.;K^ÆàóÓ{5ªÜ9v-(®p$Vè^[²Å½ðᦄ¹çöÇXâüf2¹ a¶ Ìœ0Ø-[¿ÛUàËonJæd_£Çj.2'Ú¹ÿ*šê àòC{ááäqE¿3j‘™:d-Ž{gaE(–»´^4ÝwÁ}·÷üòc·Æ¿âqÙºÝb|ßö¥©’Ç‚K&¸¥˜Œ‰ kêÉ£Ê@•º7°à_ ;¨T>Ë \¨—jë ¤ÕÔ"¾ý"ùÁ_t¹zF‚ÜmXUþŸ0¾¸š%´òÁIÜö¢é£íOì€P§bãÑðÐv{‹Æi¾ü¥ý@¤ü½ò÷û±ü8Ä-_Ï=ã©‹åû®ýG°7|{b¸“—>(`/&¹°L™àIBð}H“ì5g}oz·“ïÀÎÁÝwZÿVïpS0)úųý„*'f7â;À |wÅô4ÎÕ×ùxâ$§:Ñy¡þ{…ÎÛ7I^ÖÇ­Àvœ„ÏýÚSžÔp§ÈAåèx?öñHjK¢h8…“ 9¾ñq™P’'ñ\Óû’By >ª‘”Ïâh´ÓqôØÜÌŠ¥Ê'Ý‚¢íâkn[¢1¢íäGœ™¡{åvpß.G­Ü†óî ~$è¢Gi&K+QûŸ£›fcÚ±Ãñ¡k 5ó–úà™åË3ü|ߢiÕsÞ³´ü‰ØÒ£n÷#Ç”¯í”¶!]¹û/.ÿèŽå¬Qh½¶¢xw¦{î¹çé… N|饗.9rägÞéæ455½ˆÄ3G몴„f쯨?³LO©7y&ŸòëÏYHuô1¸·ûxÍN|˜zн‚~€JǪ…ŸCdí(¥K¾<˜x‘†È"íOËojrîåÅ›ÝÍ—ûæDl=[¾aªËœ'â9rù髊;bÿb~jkû5ßL¦÷Ĉ¨PŠ.j½?&‚wé(_øpsbdkzž7ðÊâ-ØfåÔ‰88`E41£l¦ý<N=CòäeÕæôð>k<á‡Hv 'ƒ?cyΪ˖òL(Hy¦Üš¬¸{‡ì«=zLýŸŸ¯®Þ/<ÇÄãò9 ˆõÿ©~8Vçõ‚ÎÛ%:ïå«ñíVP·()Í7NŸ< MÉô–E±#P=t:ï‚Vìàx͇3ŒïH ΈµË™úK“žµ ë½ìW]0Î? ¾Cû÷r³0ƒ§n :•—úk÷îþ¿»~Gsî?_´Ò½ûé6i·¸¨û`Õǯi¸ÓñãÅí׸ìpº˜~õ -ø°µ_H÷Çš®X¤Ö²>÷Ü5_“çÜY.-iž|9cü YI ŸJaÊØ2sÉg~”»À¢‹ËÏZÿÅüƒOÊ¥¾¥¸€ŽsçÎ]^pë­·îZ°`Á£÷ßÿØ%K–ÌÃ6©¡×vß³¸¡r̤’ñsLRáéu¬Òpv£;0ÄoB¸Ä?žš±«DK1«H§@%ÖcÇú’]ªªðœŸÕ؃$g2¼\É•'k xÕ1¨7òJ剆ËEJŸe~n—þË!BñÚŠ‡Š¦£ I?ÄüT¨?r( Ëçg~/¤î³-§äÃ<ýFÃh=NH:Ûfh@Ÿ1(MôMO>/Æ 8-'Â_Âõ§øÓùþ!ïúóEŸ‹ÛU¨ËÛG°%ó¶/ùïH®¾h¼ûhõN„£¢‘SìªGÑÒQ›Šéíèx`óÄ:Êß=X=¥ËÇÃêjo#ðOÄ‹ý¸û[—%A<‘IíêNb—Ÿ4¥0X.?r…JW©4ï¬ë|Ûˆ0´n{~ε7÷ØçÌ;ëD{Sy<áçqúœ¦?VçƒÎ—è¼OÖî–¥š0ÙKL3ÿ,Ø»ùýÇZ%†»ïÖc ßjÜE@"¡aæQg„5ÞK‘žŒCÇ=³×ádŒÖܯ±oWNkqŽ ¯ãƒ{{éxäN,ÑmÇqDœÑ?ïø5·©°Ý¹ìIúÑ%"úq™J¿†n‹czÖ?.a6ÿ ¹_áƒ'K…Êgü¬ôÛ¥üS¨¥ ÃÑ-UUU(/×2•Á);¯cà!¦§âPï­áqÛž:÷wØ·{Í…ãÝ vù}W…øÿæ=Êýß_.q‡±•+u©|Èç§Þ”ê)2‡q ò¿¯KЇ:E¦ŽGˆy!éËWÞåû‚|ôõ5›ü¬t×{kôgKòé'­ m¥¿Ô®5<ú§×*Oæ’ ú·.OS Ó×V<´Tuû\á!WÁËÏ»„'=åÉ«){æT~$«ãï ³¶ßnŒÚÇ DœQÿúSÝOžÁÖ@dËgÆW½¤iã8©HÁAÙô›÷6¹98"’{ògàcó{±©)8¾÷ò«<úYñ,úñ´ímUqï1(Œå/©¥:,î~§ŽòWðX‹ÇŒþøée"ێgcü¥3GÈJÿM—é>^Ëï9hÂH y~ÎåOy•¹·±½ø³°#@Ëç]Îo¿Æ¸ˆCèòëß§gYåâ;·ÊóåS¬D…1\~úì|P7:oŠè<ü¾BX)Žu^ëò¹ôönÜl—̸³¹~_6ƒ¼“AX°IUÈ(B¯ Áxazé@íE<3½v?êüû'ñåpTþçv×ác!ºY»7–mÍ’üQ™¸…FëŠÄqz2ã…Ó†Kz^(t/Î[ödø…S‡»gßÙàø“ ]μxÛÏZG†%).õ4*A“õYŒúäÓO+Åúx KÆî%̲¼Åýõ¡þýûtszãlùØuƒ+XϽ_ä-ÄI™š~_;Í[ËÐqù=FÌvu5K°Ž#{2|#‹xÅ–˜ª»îºkÁÆæ³ «ÿ §Ë7þŒ¾òcJÈŽÁÇ›w^3]NcÙùþ·/~âî€ØqÀ›æìd/9m¯ÂüXá¶ÃWw¤o-Ƕº¨þ31ˆ¸u¾ßŸÿV˜Ö…ß!?+Ž}">‡ú =OùKt~„ê‰××É¡ Ö#Kþ4˜%†¾ ••4iªQ¦(¿òÈ@În+ch¤ÉÄ<‡šË:œåX†ëbGú©!ª‘anŸž—ýéFý/®@h‚ Ñ?4ÑWù3 $?PÛ€‘ìv VÆË{žÖ±Û{²Ý¨j¨ÏѸ}nXõcõc¤EºÄ§ÖÄF;è½ #ë\{íµÞrË-É¥q¡þÈRz*ù„¼dT6ÏTøþøÐ áõçÞß,3~š–‹ªáν¼ÂÏÚa,J À{ž!=óÒ{~N3Ïçç Û (»ù‹ÕÓq¤£|À•Oy«+ŸnžaV"Zª—ï8¶®æ€{¾©Q}ýÜ 2K¸[]îüÈôê 9ÙªÔe#éøÜ‚$Òí0‹ðUöûŸ…YÐÎËÎén¼t‚¤àHË1b‹f"~¢—Q{cIg8¶±pû24ë¶è#þ\¼–_­‹d/—ç?䙩aäȤ•ôš ÓPøšG`þl`T>Ë•ç@£S*_2)Ý4äðþî¡C‡þõÝwß] C)§ð…‡“ìž,P½óœpD~ùcÌ>^ß±ïˆл«»æ‚t1býVlK°¢ü:´R^õ¸!~øa4¿Î¿xúpp¶þ¯Ÿ)ÛÕxBÀh¬:]¼U ¼·r‡«Á¾Ã˜Ÿclh¹§ÄOäÏÓáÇr§ÏáÆâ?t:<’’·b¬Ãcë~ûÁæDÎßù{ÓÝ mÁñ¾ûE\8e˜¬æ2 žºôôÛ…‡S©ŽàÍ÷Ùw7á· Ê 04öoÿÝ©2KÉ™zu¢—.àX-Å“çq&z@#3WbÉ£ø{òÍ ŽN9{“£ò%ã" ßÛQñðò’šTþŽô«=Ü.¼|£‡Bþžï'5ÙzÊ_n—'%Ä ÊÄJïü¡¯ÙÉQŒDc¿ƒÎ}øð•çŸS–ßpéDØA{Ü®øÐ&a®±í2ù¤ûØùVuˆ“•Ï0ˆÈÁÝ5ÓÜñˆË«Pwž¢DÇc*©›è¤þ0‘òu‡´*Ø«¢óðËÛ\ Nt0¾“³°ká± %;ÔÅo™–§,Ø»ô»7ÜÑBßxxܨÒòà×¥hH¢'áˆÇ‘[)Ò{úÊU…#[ åëÇd*î]â̹:î¿¥ñК£ ¦ã,áRœoê™m íüË™×c¶…£¿é㺾Ø3þùêüËw<ñå_^áÇ£`èÈ?Q}^ü˪Qfôûô)ýy>ªº±Ãû¤ï%!/iý%ž”Ÿ¦Oú¬Tý—_~Ü@mHûß?C–“n ¨[~†RðÀÔ,õéPxȧ§bð8ý¹ðõõîOn˜!'‚A}ÇUS!ÏPsÙ¶üZx2˜?‹½iG­ûÅKk`œL–ý‘ãpüé^鿉 àù»Ï¼³ÑóvTÁsÑ ãÀÃÂ'ÁŸÈDŽÒ+Ncy ~b £¤—zFD(Ž·Óâ!–¿$­;ŸÈ÷±=àì3‡È‡Û4ÿ"G]ñpäàÍÝÀ<5_Îà=üâ÷g_ñ?ÚÄÉ!μs¹^][ô€¨Ñ宨à¾ä§¥[æùím|—_vùÞy”▕ϳ/r›-m/Âås‡†Æ–¶Ë_ (•‡”žüÝzùYúxÌýÅÅÕXjroºÃ-¸ÈÛQó0™É?u´u>^Û‰ƒG Ä}V®øWȽˆñê- o¶Ÿwü¶ñáWcË1XE0ÁRÒï4ÿOŸ¾ºÎýÉ3Swuw:o)t^ž<(«½[aÆ ÷ÿÅ@å¨ Ÿ‹IXzFPC@Fï¾)$ Ãåñ£ÁÅN4ÌT‚À*TþvêÜ“E7 ³~i lå¢vðõr,ùÓö²’¥àíçxÞIKoùÞÛnj?“¿ éƒØNúÑ`½S@$G,$Þ¬–Þè',u’ü³yÃÚ-ý¯¯çNgyÎ*˵³á{öë.KˆµøIt9«ÒxÆ/÷àÇz9UÆeIYB¥Ü0yÒª<5¥€Ñ¯mü“R,;>Ý«×Èú³mýIe«rÂè—R ­ü“¦ÈŽÏðà'bâikNOÄ4ÏŠßð`xàÄdìJ%X¦7ÜÃl{!fä+ùÐ4ª¤~xÊ èW%méýÑJ¤‹:£ß‰ù ¤äÊÆ=ÔÇøÙø9_8—φ‡T˜~1ýjx0<¨a`ò@ òt; B†~U\þ=…—mtþ=ïÈHKoôƒ(ßè]ù ÜUø>kÎó»átÐ~Ô;ûÊÓ§pR>ø÷F?ÒAé¦÷Ñ/kXHëkýy*ýix8=y`x0{ ’l`ö&å]´U¦JüŒB…ƒ>¡›_H¹“»Ï4®ÏÐÒ“J£_›øÇ3M¦®••†‡´CŒŸK*SÂgÆgx0ý–2c‰åAZpf|†ÃCÊŒ¥ÇCb¸'çÑJmäܘ´^âcåRCÝákbïhàûŠËÌ‚Zz¥N nF¿Öø'¥Qv|†¿ÚæùØð\JcÃCçåÇrã‘PóI**#!Á ‡-–8aØ`г2Å âP¨YúTÈ’hF¿óðPÂaå÷°>†Ãs¹ä™á! M¿˜~¥,.¿JÈ©éÃì½²Ù»ä¿0ã/ t1Ã*B^ ³î´Üý{úèWý’KO:‚8F¿ÀmãŸLŠfÃá™`.ž ¦_L¿¦ö…áÁð`xÈŃ7Ü1IÌ_SC?‡ sί6é»°Ë=„‹J;ñS¿¥7úy µ‘ü"…ðQ&.†Ãs9å™áÁô ø/ŒE$vjýjx0<Ry<${ÜýŒ»ß¹ãÜXpø·%GÁ§q,½Ñ¯íüã9)cW™q7<øÁ¼á¹”xÎ|u ‘®3<üNg“)'´f¶nöâ©Ù¤xb¸ËÜ((ÙÏ´'óð\œyçö‡P _išØÏœá,½§—§†.wýòùGé“¥»áA,X×~1<—ÏJï,Ý †‡Dׯ,•<È´.†ÃC9ñîò+‘a³L HøÄ ¦üò±¥ï3>ÀÇ>œF½øÑ"ï·ôF?a\ÀÇáaœ ] Šáxnx.ž3©ŠáÁðPNýnxÌÞÌÞ$ÃÝâÅ åpzv»DPC]ï‘ðÇ™dKŸ0–ÐÄè×6þ!eÌ¥Ÿ ÏåÁsưÀêL”M¿Ty[Ëì­ÎmoF†»Î¤·à‡•d`'†§ÝÄÌ éO8{‘ïÉL¼¥7ú,ÿdP,?ûNÖŸO–ŸOW0 $D7ýBåtù©£§7<LPzyH<ÈŒ;ˆÒÄ@Ç+)œqƒèò}¸ŸS"úpì|÷ëÇ×Ò Å‚°5úˆßÿ²ã °SHà*7“Þø)>ž ©‘bú…´èÜúÕð`x0{Ó픇ŠÑD-MÍ5õõGDQ{eŸQªôJÊó4èý³OèýŒ£DõwŸãZz£Ÿç%柣他–š„ù2à1<ø>Ó®0<—NžR]cúÅô«áÁ𠶧ɃJ§x÷}{·>µ½zà9ã'Mëé'ã½eïÏvÇ™ä0Ä%/ÁFªÏÅh—Y‘J†ò¥ë?bÁa<Óoé~­ñÏÆu«îݹ婄©2à1<žË%Ï ¦_Tr2¬³ëWÃáÁðà)@y x¨bPõÚ÷7ö…yöïÚ»o¿ª®]»%æ9G;:›.#$¦«àŒ<ü|G.½ëì*£Xz£_àðy†ÊèH}Û²aMÝÁ}»?yþ¿ûýÆÆÆÂD¸ Ï¥”g†‡\ù@Ú›~é¼úÕð`xì…Î. áÁsˆsýºwï>ì‹·}ÿÆž}_ÕµÛh×R!F=‰fÎ(Ю¨hijj8º¥îàž^⯟ª?xpòόᎺÚµÃ-³ãRÀðp\òØËNFÃC'ëpkîq)Pj¸3ÝhüõÀ_:]ÎPsFâQ YóãŠ-Å+â”s6<œ2é,á)RÀðpŠ„³dŸK >—Ýj:E $xˆ wæÕ½ðǽïùïdÎ(Ð.à–÷FüÆßÁvɱ8™ŠCWË5—†‡\zØS禀á¡s÷¿µ>—¹µ¶'£€QÀ(`0 ŒF£€QÀ(`0 ŒF£€QÀ(`0 džÿ(µÄŸ!RY#IEND®B`‚tpm2-pkcs11-1.9.1/docs/tpm2-pkcs11_object_auth_model.md0000644000175100017510000006431014535673717016200 # tpm2-pkcs11 object & authorization model ## Introduction The objective of this document is to present an architectural overview of the tpm2-pkcs11 object and authorization model **TO BE IMPLEMENTED** in the design. The topics covered here in are: 1. [PKCS11 Objects](#pkcs11-objects) 2. [PKCS11 Roles](#pkcs11-roles) 3. [TPM2 Objects](#tpm2-objects) 4. [tpm2-pkcs11 Objects](#tpm2-pkcs11-objects) 5. [NV Object Diagram](#nv-object-diagram) 6. [NV Policy Diagram](#nv-policy-diagram) 7. [Transient Object Diagram](#transient-object-diagram) 8. [Transient Policy Diagram](#transient-policy-diagram) 9. [Sample tpm2-tools implementation](#sample-tpm2-tools-implementation) 10. [Important note on authorization](#important-note-on-authorization) ## PKCS11 System Design The PKCS11 system design components are illustrated in the following diagram.



* READER is a medium through which information is exchanged with TOKEN. * SLOT is integral with the READER for housing a TOKEN. * The TOKEN ultimately protects the PKCS11 objects defined in the specification. It provides an authorization model to distinguish the SO, USER, system or adversary role based actions. * Following is a broad classification of PKCS11 objects: 1. Hardware feature objects - Clock, Monotonic-Counters, USER-Interface. 2. Storage objects, Data objects - USER defined data with choice of attributes. 3. Certificate objects - X509, WTLS public key certificates and attributes. 4. Key type objects - Public key object, Private key object, Secret key object. 5. Mechanism objects - various mechanisms for operating on the token objects. 6. Domain objects - Extended algorithm parameter definition. 7. Profile objects - Info on subsets of functionalities grouped as profiles. ## PKCS11 Roles The PKCS11 design describes two specific roles: The security-officer or **SO** and the **USER**. Following are some relevant design considerations when comparing the roles: * The SO-PIN and USER-PIN info differentiate the role based accesses for the security officer and the user. Hence, PIN information should remain a secret to the specific role. * Either SO-PIN or USER-PIN can be used to modify USER-PIN. * SO-PIN alone must be used to modify SO-PIN. * The SO-PIN cannot be used to access mechanisms or modify objects requiring USER-PIN. * The SO-PIN cannot be used to restore or read a non default USER-PIN. This is intentional in the design to prevent the security officer from having explicit access to USER objects and also to bring traceability to security officer's action of changing USER-PIN. * PINs should not be easy to brute force. In the design **TO BE IMPLEMENTED** there are two protections in place to deter brute forcing of the PIN: 1. Use of PBKDF2 to enhance a weak PIN. The SALT used in this operation adds to the list of system or user secrets. 2. The SO-PIN and USER-PIN reference TPM2 objects are dictionary lockout protected, thus rate limiting the attack even further.
An attack would need to: Access SALT--> Guess PIN--> Run PBKDF2--> Attempt auth on a dictionary attack protected TPM2 object. * PIN changes should revoke accesses to mechanisms and objects created/ defined with the older PIN. NOTE: This is currently only possible with NV Indexes being used as SO-PIN and USER-PIN auth reference objects.
**Example** A token is initialized with default SO-PIN and default USER-PIN. The user changes the USER-PIN to a non default value that the security officer cannot know and thus cannot read/ restore. If the user forgets the USER-PIN, the SO-PIN can be used to reset USER-PIN to a default value. However, if the security officer uses the SO-PIN to reset the USER-PIN without user's knowledge or request, the user's original or non-default USER-PIN cannot be restored or used; thus revealing the security officer's action of changing the USER-PIN. ## TPM2 Objects The TPM2 standards defines various types of objects - permanent, transient, persistent, non-volatile or NV, etc. There are TPM entities that have a parent: child relationship and hence embody the intended hierarchical relationship defined by PKCS11. The hierarchical arrangement of objects is manifested by the protection of encryption keys derived from parent seed values. These encryption keys protect the sensitive portion of the child objects. The hierarchical arrangement can also be manifested simply as an access control to define or access non volatile objects. In general, parent authorization is required to be able to authorize creation or defining of the child object and or operate on them.
Generally, there are two types of actions that can be performed on TPM2 objects. (1) Administrative operations like changing the authorization etc. and (2) USER operations like unseal, encryption etc. These two roles can be restricted to two separate authorizations at object creation time with attributes - userwithauth/ adminwithpolicy.
Generally, there are two authorization methods: (1) Authorization password that can be sent as a plain text or an HMAC and (2) Policy based authorization that validate certain TPM metrics or parameters.
It is also possible to associate the authorization value of one object as the authorization of another object through an authorization policy. One caveat of changing authorization value of a derived objects is that it does not invalidate the old object's auth; instead new object is created that protects the same sensitive information. Also, while auth values can be altered the authorization policy cannot be changed. ### The TPM2 hierarchy authorization This is the parent node of all the possible child objects to be created. At the root of the node is a seed value called storage primary seed used to derive keys to protect the sensitive portion of primary objects. There are 4 hierarchies: Platform, Owner, Endorsement and NULL hierarchy. Only Platform and Owner hierarchies can authorize defining and managing of NV objects. Hierarchy authorization must be satisfied to create/ access primary objects and define/ access NV objects. ### The TPM2 primary object authorization Except for NULL hierarchy, the storage primary seeds remain persistent across TPM2 resets. Thus the primary objects under all other hierarchies can be recreated. Once the primary object is created it can be made persistent. A persistent and password-less primary object does not require any further authorization to use even after TPM2 reset. This is ideal since it addresses the need to have a password-less parent in a scenario where multiple child objects ought to be created without requiring the TPM2 hierarchy authorization. NOTE: (1) While NULL hierarchy does not need authorization, all objects created under it are lost after TPM2 reset since the NULL hierarchy seed is valid only until TPM2 reset. (2) Primary objects can also be defined with with a password which will need to be a well known value for the system.
In the design this object type is used simply as a necessary parent object to be able create the derived objects which define most of the design. ### The TPM2 derived object Primary objects are also derived objects created using TPM2_CreatePrimary. However this paragraph describes the objects protected with keys derived from the seed values of the primary objects. Such an object is created with the invocation of the TPM2_Create command. Every invocation results in creating a unique object. The uniqueness is a result of TPM generated data in the sensitive portion of the object. This object can be saved off the TPM or made persistent into the TPM NV memory to be reusable between boots.
In the design this object type is used to define the SO-PIN/ USER-PIN auth reference objects (transient object auth model), USER (keys) objects and the Wrapping-Key-Sealing object. ### The NV Index/ object There are two types of TPM NV objects - those that remain persistent after creating/ importing the objects under a TPM hierarchy OR those defined as NV indexes to hold user defined data. NV index of size 0 is a valid definition. An NV index can have an authorization password and or policy for administrative and or user operations. Unlike the derived objects, the NV index object authorization is not used in the encryption of sensitive data. The NV index object authorization simply protects read and write access to the object. Thus no new NV indexes need to be defined when changing the authorization.
In the design this object type is used to define the SO-PIN/ USER-PIN auth reference objects. ## tpm2-pkcs11 objects This section gives a general overview of the object and authorization model design with TPM2 objects. The SO and USER role separation is realized in the tpm2-pkcs11 design by two unique TPM2 objects, either transient objects or NV-indexes. The authorization values chosen for these objects are further utilized in creating specialized authorization policies that render the special properties of the SO-PIN object, USER-PIN object, Wrapping-Key-Sealing object and the USER(keys) objects. 1. SO-PIN authorization object: The auth value of this object authorizes auth value change of SO-PIN and USER-PIN objects. This is either an NV index or a transient derived object with the primary object as the parent. 2. USER-PIN authorization object: The auth value of this object is used as an auth value of USER-PIN, Wrapping-Key-Sealing, and USER(keys) objects. The USER-PIN object auth value OR SO-PIN object auth value can authorize change of USER-PIN object auth value. This is either an NV index or a transient derived object with the primary object as the parent. 3. Wrapping-Key sealing object: The authorization value of this object is referenced off the USER-PIN object with a policy. The object itself doesn't have an auth value of it's own and so the unsealing user operation would need the auth satisfied through a policy requiring USER PIN. It seals a wrapping key used to encrypt the auth value of existing TPM2 objects to be assumed into the tpm2-pkcs11 model. This is a transient derived object with the primary object as the parent. 4. USER(keys) object: The authorization model is same as the Wrapping-Key sealing object and thus requires the USER-PIN object auth value via a policy. These are user created keys and objects that are used in user operations like encryption, decryption, signing, verification, etc. These are transient derived objects with the primary object as the parent.
NOTE: * All derived objects with the primary object as parent are saved off the TPM. This involves saving two types of information about the derived objects to be able to load the objects back again to the TPM. Sensitive information which can be private portion of an asymmetric key or the symmetric encryption key. This information for convenience is called private. Sensitive information is encrypted with a key derived from the parent seed. The non-sensitive information like object attributes, auth policy, public portion of asymmetric key etc. which for convenience is called public. * If the auth value of the transient derived object is changed it encrypts the sensitive/ private portion with a new key that is derived from the parent seed and that does not invalidate the old one. * Tampering of the public and private files can result in a denial of service and so must be protected with appropriate methods like MAC, file/folder/disk encryption etc. * USER(keys) objects that are defined without using the tpm2-pkcs11 library can also be assumed into the tpm2-pkcs11 objects. These in the design are called **Existing TPM2 objects**. These are essentially derived objects with the primary object as the parent. The auth value of these objects are protected by encrypting/ wrapping with a wrapping-key that is sealed as the Wrapping-Key sealing object. It should also be noted that while the auth value of such objects is wrapped, the tpm2-pkcs11 design does not guarantee the protection of an already compromised key. The attacker can load the compromised key under the primary object and authorize with the compromised auth value. Also noteworthy is the fact that while auth values could be changed authorization policy cannot be changed. ## NV object diagram Overview of the use of the TPM2 NV indexes in the implementation.


The illustration above is the key/object diagram showing the relationship of the tpm2-pkcs11 objects. The SO-PIN and USER-PIN objects are NV index objects while the Wrapping-Key sealing object and the USER(keys) objects are transient derived objects with the primary object as the parent. ## NV policy diagram Overview of policies used to satisfy standards requirements with NV objects used as SO/ USER-PIN reference objects.


The illustration above is the policy diagram showing the relationship of the authorization model used by the tpm2-pkcs11 objects where the SO-PIN and the USER-PIN objects are NV indexes and the Wrapping-Key-Sealing object and the USER (keys) objects are transient derived objects with the primary object as the parent. ## Transient object diagram Overview of the use of TPM2 transient objects in the implementation.


The illustration above is the key/object diagram showing the relationship of the tpm2-pkcs11 objects. The SO-PIN and USER-PIN objects along with the Wrapping-Key-Sealing object and the USER(keys) objects are transient derived objects with the primary object as the parent. ## Transient policy diagram Overview of the policies used to satisfy standards requirements with TPM2 transient object used as SO/ USER-PIN reference objects.


The illustration above is the policy diagram showing the relationship of the authorization model used by the tpm2-pkcs11 objects where the SO-PIN and the USER-PIN objects along with the Wrapping-Key sealing object and the USER (keys) objects are transient derived objects with the primary object as the parent. ## Important note on authorization While both authorization models discussed resolve the issue of isolation of SO and USER roles there is a serious problem with the authorization model where the SO-PIN and USER-PIN reference objects are transient derived objects with the primary object as the parent. In that, when the authorization of the objects is changed it creates a new sensitive portion of the object while the old sensitive information cannot be invalidated. To that effect, anyone who has a cached copy of an older object whose PIN may have been compromised can still access the USER objects. This also violates the design consideration set out under "PKCS11 Roles". A malicious SO could create a second USER-PIN object for their own use, which the real USER would never know about and thus SO-PIN can be used to access USER objects.
The issue can be resolved by using NV indices as SO-PIN and USER-PIN reference objects instead. Although, we still need the sealing object to seal the wrapping secret for bringing the existing TPM objects into the PKCS11 fold as well as the USER(keys) objects. However their auth will be tied to USER-PIN NV index and so despite the fact that the sealing and USER(keys) objects are transient derived objects with the primary object as the parent, a new sensitive portion is not created when the auth ought to change since these object simply reference the authorization of the USER-PIN NV object.
The authorization model where SO-PIN and USER-PIN reference objects are transient objects should only be used as a fall-back in situations like if the NV indexes are unavailable or if the choice of hierarchy is the NULL hierarchy or if the owner hierarchy is disabled, etc. ## Sample tpm2-tools implementation Demonstration of an implementation with tpm2-tools. The tpm2-tools utilities and the arguments and command line options referenced are from the upcoming tpm2-tools 4.0 release. * ***Setting up the reader and slot*** ``` tpm2_changeauth -c o ownerauth tpm2_createprimary -C o -c prim.ctx -P ownerauth tpm2_evictcontrol -C o -c prim.ctx -P ownerauth 0x81010001 tpm2_flushcontext -t rm prim.ctx ``` ### TRANSIENT * ***Creating the SO-PIN-reference-object - Its a keyedhash that seals some random data that will not be used. The choice of creating the SO object as a keyedhash object is simply because it takes minimum object attributes required for this design.*** ``` dd if=/dev/urandom bs=1 count=32 status=none | \ tpm2_create -C 0x81010001 -u so_pin_ref_obj.pub -r so_pin_ref_obj.priv \ -a "fixedtpm|fixedparent|userwithauth" -p sopin -i- ``` * ***Policy to enable USER to change USER PIN*** ``` tpm2_startauthsession -S session.ctx tpm2_policypassword -S session.ctx tpm2_policycommandcode -S session.ctx \ -L policy.pass_AND_ccobjch TPM2_CC_ObjectChangeAuth tpm2_flushcontext session.ctx rm session.ctx ``` * ***Policy to enable SO to change USER PIN*** ``` tpm2_load -C 0x81010001 -u so_pin_ref_obj.pub -r so_pin_ref_obj.priv \ -c so_pin_ref_obj.ctx tpm2_startauthsession -S session.ctx tpm2_policysecret -S session.ctx -c so_pin_ref_obj.ctx sopin tpm2_policycommandcode -S session.ctx \ -L policy.secret.so_AND_ccobjch TPM2_CC_ObjectChangeAuth tpm2_flushcontext session.ctx rm session.ctx tpm2_flushcontext -t rm so_pin_ref_obj.ctx ``` * ***Compounded policy: USER (OR) SO can change the USER PIN*** ``` tpm2_startauthsession -S session.ctx tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccobjch,policy.secret.so_AND_ccobjch \ -L policy.pass_AND_ccobjch__OR__secret.so_AND_ccobjch tpm2_flushcontext session.ctx rm session.ctx ``` * ***Create the USER-PIN-reference-object - The auth of the USER object can be changed by either SO or USER. Its a keyedhash that seals wrapping secret. The wrapping secret is used as a software wrapping key or the auth to a wrapping object that then encrypts the auth of the existing TPM objects to be assumed into the PKCS11 token. NOTE: NEVER UNSEAL THE WRAPPING SECRET TO STDOUT.*** ``` dd if=/dev/urandom bs=1 count=32 status=none | \ tpm2_create -C 0x81010001 -u user_pin_ref_obj.pub -r user_pin_ref_obj.priv \ -a "fixedtpm|fixedparent|adminwithpolicy|userwithauth" \ -L policy.pass_AND_ccobjch__OR__secret.so_AND_ccobjch -p userpin -i- ``` * ***Policy to use USER ref PIN as the auth for creating user objects*** ``` tpm2_load -C 0x81010001 -u user_pin_ref_obj.pub -r user_pin_ref_obj.priv \ -c user_pin_ref_obj.ctx tpm2_startauthsession -S session.ctx tpm2_policysecret -S session.ctx -c user_pin_ref_obj.ctx \ -L policy.secret.user userpin tpm2_flushcontext session.ctx rm session.ctx tpm2_flushcontext -t rm user_pin_ref_obj.ctx ``` * ***Create a sample user object*** ``` tpm2_create -C 0x81010001 -u user_object.pub -r user_object.priv \ -a "fixedtpm|fixedparent|sensitivedataorigin|adminwithpolicy|sign|decrypt" \ -L policy.secret.user -G aes ``` * ***Load the sample user object and use it in an operation*** ``` #load the user object tpm2_load -C 0x81010001 -c user_object.ctx -u user_object.pub \ -r user_object.priv #load the USER PIN ref object tpm2_load -C 0x81010001 -c user_pin_ref_obj.ctx -u user_pin_ref_obj.pub \ -r user_pin_ref_obj.priv #satisfy the policy of referred auth of the USER PIN ref object tpm2_startauthsession -S session.ctx --policy-session tpm2_policysecret -S session.ctx -c user_pin_ref_obj.ctx userpin #perform an operation with the user object echo "plaintext" > test.txt tpm2_encryptdecrypt -c user_object.ctx test.txt -o test.enc \ -p session:session.ctx #close auth session and clean up tpm2_flushcontext session.ctx tpm2_flushcontext -t rm user_pin_ref_obj.ctx user_object.ctx session.ctx ``` * ***Change USER PIN with USER PIN*** ``` tpm2_load -C 0x81010001 -u user_pin_ref_obj.pub -r user_pin_ref_obj.priv \ -c user_pin_ref_obj.ctx tpm2_startauthsession -S session.ctx --policy-session tpm2_policypassword -S session.ctx tpm2_policycommandcode -S session.ctx TPM2_CC_ObjectChangeAuth tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccobjch,policy.secret.so_AND_ccobjch \ -L policy.pass_AND_ccobjch__OR__secret.so_AND_ccobjch tpm2_changeauth -C 0x81010001 -c user_pin_ref_obj.ctx \ -p session:session.ctx+userpin -r new_user_pin_ref_obj.priv newuserpin tpm2_flushcontext session.ctx rm session.ctx tpm2_flushcontext -t rm user_pin_ref_obj.ctx ``` * ***Change USER PIN with SO PIN*** ``` tpm2_load -C 0x81010001 -u so_pin_ref_obj.pub -r so_pin_ref_obj.priv \ -c so_pin_ref_obj.ctx tpm2_startauthsession -S session.ctx --policy-session tpm2_policysecret -S session.ctx -c so_pin_ref_obj.ctx sopin tpm2_policycommandcode -S session.ctx TPM2_CC_ObjectChangeAuth tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccobjch,policy.secret.so_AND_ccobjch \ -L policy.pass_AND_ccobjch__OR__secret.so_AND_ccobjch tpm2_load -C 0x81010001 -u user_pin_ref_obj.pub -r user_pin_ref_obj.priv \ -c user_pin_ref_obj.ctx tpm2_changeauth -C 0x81010001 -c user_pin_ref_obj.ctx -p session:session.ctx \ -r so_new_user_pin_ref_obj.priv sonewuserpin tpm2_flushcontext session.ctx rm session.ctx tpm2_flushcontext -t rm so_pin_ref_obj.ctx rm user_pin_ref_obj.ctx ``` * ***Change SO PIN with SO PIN*** ``` tpm2_load -C 0x81010001 -u so_pin_ref_obj.pub -r so_pin_ref_obj.priv \ -c so_pin_ref_obj.ctx tpm2_changeauth -C 0x81010001 -c so_pin_ref_obj.ctx -p sopin \ -r new_so_pin_ref_obj.priv newsopin tpm2_flushcontext -t rm so_pin_ref_obj.ctx ``` ### NV * ***Policy for SO-PIN ref NV object*** ``` tpm2_startauthsession -S session.ctx tpm2_policypassword -S session.ctx tpm2_policycommandcode -S session.ctx \ -L policy.pass_AND_ccnvobjch TPM2_CC_NV_ChangeAuth tpm2_flushcontext session.ctx ``` * ***Create SO-PIN ref nv object*** ``` SO_NV_INDEX=0x1500015 tpm2_nvdefine -C o -P ownerauth -p defaultsonvpin $SO_NV_INDEX \ -a "authread|authwrite" -s 0 -L policy.pass_AND_ccnvobjch ``` * ***Policy for USER PIN change with USER PIN*** ``` Same as Policy for SO-PIN ref NV object --> policy.pass_AND_ccnvobjch ``` * ***Policy for USER PIN change with SO PIN*** ``` tpm2_startauthsession -S session.ctx tpm2_policysecret -S session.ctx -c $SO_NV_INDEX defaultsonvpin tpm2_policycommandcode -S session.ctx \ -L policy.secret.so.nv_AND_ccnvobjch TPM2_CC_NV_ChangeAuth tpm2_flushcontext session.ctx rm session.ctx ``` * ***Compounded policy: USER (OR) SO can change the USER PIN*** ``` tpm2_startauthsession -S session.ctx tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccnvobjch,policy.secret.so.nv_AND_ccnvobjch \ -L policy.pass_AND_ccnvobjch__OR__secret.so.nv_AND_ccnvobjch tpm2_flushcontext session.ctx rm session.ctx ``` * ***Create the USER PIN NV ref object*** ``` USER_NV_INDEX=0x1500016 tpm2_nvdefine -C o -P ownerauth -p usernvpin $USER_NV_INDEX \ -a "authread|authwrite" -s 0 \ -L policy.pass_AND_ccnvobjch__OR__secret.so.nv_AND_ccnvobjch ``` * ***Policy to use USER NV ref PIN as the auth for creating user objects*** ``` tpm2_startauthsession -S session.ctx tpm2_policysecret -S session.ctx -c $USER_NV_INDEX \ -L policy.secret.user.nv usernvpin tpm2_flushcontext session.ctx rm session.ctx ``` * ***Create the USER PIN NV ref sealing object - Its a keyedhash that seals the wrapping secret. The auth of the USER object can be changed by either SO or USER. The wrapping secret is used as a software wrapping key or the auth to a wrapping object to encrypt the auth of the existing TPM objects to be assumed into the PKCS11 token. NEVER UNSEAL THE WRAPPING SECRET TO STDOUT.*** ``` dd if=/dev/urandom bs=1 count=32 status=none | \ tpm2_create -C 0x81010001 -u user_seal_obj_user_nv_auth.pub \ -r user_seal_obj_user_nv_auth.priv -a "fixedtpm|fixedparent|adminwithpolicy" \ -L policy.secret.user.nv -i- ``` * ***Unseal the wrapping secret from USER sealing object with NV PIN ref DO NOT UNSEAL TO STDOUT*** ``` tpm2_load -C 0x81010001 -u user_seal_obj_user_nv_auth.pub \ -r user_seal_obj_user_nv_auth.priv -c user_seal_obj_user_nv_auth.ctx tpm2_startauthsession -S session.ctx --policy-session tpm2_policysecret -S session.ctx -c $USER_NV_INDEX \ -L policy.secret.user.nv usernvpin tpm2_unseal -c user_seal_obj_user_nv_auth.ctx -p session:session.ctx tpm2_flushcontext session.ctx rm session.ctx tpm2_flushcontext -t rm user_seal_obj_user_nv_auth.ctx ``` * ***Create a sample user object with USER NV ref auth*** ``` tpm2_create -C 0x81010001 -u user_object_user_nv_auth.pub \ -r user_object_user_nv_auth.priv \ -a "fixedtpm|fixedparent|sensitivedataorigin|adminwithpolicy|sign|decrypt" \ -L policy.secret.user.nv -G aes ``` * ***Load the sample user object and use it in an operation*** ``` #load the user object tpm2_load -C 0x81010001 -c user_object_user_nv_auth.ctx \ -u user_object_user_nv_auth.pub -r user_object_user_nv_auth.priv #satisfy the policy of referred auth of the USER PIN ref object tpm2_startauthsession -S session.ctx --policy-session tpm2_policysecret -S session.ctx -c $USER_NV_INDEX \ -L policy.secret.user.nv usernvpin #perform an operation with the user object echo "plaintext" > test.txt tpm2_encryptdecrypt -c user_object_user_nv_auth.ctx test.txt -o test.enc \ -p session:session.ctx #close auth session and clean up tpm2_flushcontext session.ctx tpm2_flushcontext -t rm user_object_user_nv_auth.ctx session.ctx ``` * ***Change USER PIN with SO PIN*** ``` tpm2_startauthsession -S session.ctx --policy-session tpm2_policysecret -S session.ctx -c $SO_NV_INDEX defaultsonvpin tpm2_policycommandcode -S session.ctx TPM2_CC_NV_ChangeAuth tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccnvobjch,policy.secret.so.nv_AND_ccnvobjch tpm2_changeauth -c $USER_NV_INDEX -p session:session.ctx usernvpin_so tpm2_flushcontext session.ctx rm session.ctx ``` * ***USER-PIN change with USER PIN*** ``` tpm2_startauthsession -S session.ctx --policy-session tpm2_policypassword -S session.ctx tpm2_policycommandcode -S session.ctx TPM2_CC_NV_ChangeAuth tpm2_policyor -S session.ctx \ -l sha256:policy.pass_AND_ccnvobjch,policy.secret.so.nv_AND_ccnvobjch tpm2_changeauth -c $USER_NV_INDEX \ -p session:session.ctx+usernvpin_so usernv_pin_user tpm2_flushcontext session.ctx rm session.ctx ``` * ***SO-PIN change with SO PIN*** ``` tpm2_startauthsession -S session.ctx --policy-session tpm2_policypassword -S session.ctx tpm2_policycommandcode -S session.ctx TPM2_CC_NV_ChangeAuth tpm2_changeauth -c $SO_NV_INDEX -p session:session.ctx+defaultsonvpin sonvpin tpm2_flushcontext session.ctx rm session.ctx ``` tpm2-pkcs11-1.9.1/docs/BUILDING.md0000644000175100017510000001401314666345037011653 # Building Instructions for building and configuring tpm2-pkcs11. ## Step 1 - Satisfy Dependencies The project depends on: 1. [Automake](https://www.gnu.org/software/automake) 2. [Make](https://www.gnu.org/software/make/) 3. A C compiler. Known working compilers are: 1. [gcc](https://www.gnu.org/software/gcc/) 2. [clang](https://clang.llvm.org/) 4. [SQLite3](https://www.sqlite.org/) 5. [tpm2-tss](https://github.com/tpm2-software/tpm2-tss): **Requires >= 2.0, recommended >= 2.3.0** 6. A Resource Manager, one of: - [tpm2-abrmd](https://github.com/tpm2-software/tpm2-abrmd): **Requires version >= 2.1.0** - Linux kernel version >= 4.12 for `/dev/tpmrm[0-9]+` nodes. - Note that the device TCTI must be configured for this. 7. [openssl](https://www.openssl.org/): **Requires version >= 1.1.0** 8. [autoconf-archive](https://github.com/autoconf-archive/autoconf-archive): **Tested with release v2018.03.13** Others may not work, some distros package versions too old. Either install or just copy the contents of the autoconf-archive's m4 directory to the m4 subdirectory of the tpm2-pkcs11 project. If the m4 folder is not present, simply create it with mkdir. 9. [libyaml](https://github.com/yaml/libyaml) ### Optional Dependencies for tpm2_ptool 1. [tpm2-tools](https://github.com/tpm2-software/tpm2-tools): **Requires version >= 4.0.1** 2. [Python](https://www.python.org/): **Requires version >= 3.7** and the following Python Modules: - bcrypt - cryptography>=3.0 - pyyaml - pyasn1 - pyasn1_modules - tpm2_pytss ### Notes The tpm2-tss and tpm2-tools projects must be obtained via source. Packaged versions existing in known package managers are likely too old. ### Optional Dependencies for Enabling Testing 1. [CMocka](https://cmocka.org/) 2. [swtpm](https://github.com/stefanberger/swtpm) or [tpm_server](https://sourceforge.net/projects/ibmswtpm2/) TPM 2.0 simulator 3. [tpm2-abrmd](https://github.com/tpm2-software/tpm2-abrmd) 4. Dependencies for [tpm2-ptool](# Optional Dependencies for tpm2_ptool) ## Step 2 - Bootstrapping Run the `bootstrap` command. ```sh ./bootstrap ``` ## Step 3 - Configuring For people wanting to just build the library, the command: ```sh ./configure ``` Should be sufficient. However, the following configure options will be useful for those wishing to do more, like testing, or those running into issues to work around. The following are known configure options that can be added that *are outside of normal autoconf/automake options*, which are documented [here](https://sourceware.org/autobook/autobook/autobook_14.html). ### Configure Options 1. `--enable-unit` - Enables the unit tests when running `make check` 2. `--enable-integration` - Enables the integration tests when running `make check` * Requires the following items to be found on `PATH`: * [tpm2-ptool](../tools/tpm2_ptool.py) * [tpm2-tools](#step-1---satisfy-dependencies) * Example: ```sh export PATH="/home/wcrobert/workspace/tpm2-tools/tools:/home/wcrobert/workspace/tpm2-pkcs11/tools:$HOME/workspace/ibmtpm974/src:$PATH" ``` **Normally** only tpm2-tools, swtpm/tpm_server and tpm2-ptool need to be added to `PATH`. Most other things, like CMocka and ss, are already installed and thus on `PATH`. Your results will very based on what you build from source and/or install in non-standard locations. 3. `--disable-hardening` - Compiler flag hardening options, this is enabled by default. Disabling hardening is **NOT RECOMMENDED FOR PRODUCTION BUILDS**, however, is often useful when adding in compiler flags for testing via `CFLAGS`. For example, one would need to disable this if configuring [clang](#step-1---satisfy-dependencies) with [ASAN](https://clang.llvm.org/docs/AddressSanitizer.html). 4. `--disable-esapi-session-manage-flags` - Disables ESAPI session flag management and causes the PKCS11 library to do it. This is autodetected and overriding it should only be done in specific conditions This can also be configured at run time by setting the environment variable `TPM2_PKCS11_ESAPI_MANAGE_FLAGS` to any value. **These options may go away in future versions**. ## Step 4 - Building The next step after [configuring](#step-3---configuring) is to compile the source code. ## Step 5 - Testing To enable testing, run `make check`. **Note:** If make check runs 0 tests, you likely need the configure options `--enable-unit` and `--enable-integration`. See [Configure Options](#configure-options) for more details. ## Running tests in a container Sometimes it is useful to be able to run tests in a fresh environment where everything is configured by default. Using a container is a light way to ensure the environment of the test is quite clean. There are several containers provided in [tpm2-software-container](https://github.com/tpm2-software/tpm2-software-container) project. For example here is a command which builds tpm2-pkcs11 and runs continuous integration tests in a Fedora 32 container with [Docker](https://www.docker.com/) or [Podman](https://podman.io/): ```sh sudo docker run --rm -v "$(pwd):/workspace/tpm2-pkcs11" --env-file .ci/docker.env \ --workdir /workspace/tpm2-pkcs11 -ti ghcr.io/tpm2-software/fedora-32 \ bash -c .ci/docker.run # NB. sudo can be omitted if the user is added to the "docker" group, but this # configuration impacts security in your system, as documented in # https://docs.docker.com/engine/install/linux-postinstall/#manage-docker-as-a-non-root-user podman run --rm -v "$(pwd):/workspace/tpm2-pkcs11" --env-file .ci/docker.env \ --workdir /workspace/tpm2-pkcs11 -ti ghcr.io/tpm2-software/fedora-32 \ bash -c .ci/docker.run ``` Building the project and running tests can be also done with specific shell commands inside a container: ```sh # Configure tpm2-pkcs11 to build unit and integration tests ./bootstrap ./configure --with-fapi --enable-unit --enable-integration # Build the project and run tests make -j $(nproc) make check # Run a single test, for example to debug a failure make check TESTS=test/integration/pkcs-get-mechanism.int ``` tpm2-pkcs11-1.9.1/docs/CONTRIBUTING.md0000644000175100017510000000623714666345037012376 ## Guidelines for submitting bugs All non security bugs can be filed on the Issues tracker: Security sensitive bugs should be handled per the instructions in the [docs/SECURITY.md](docs/SECURITY.md) file. ## Guidelines for submitting changes All changes should be introduced via GitHub pull requests. This allows anyone to comment and provide feedback in lieu of having a mailing list. For pull requests opened by non-maintainers, any maintainer may review and merge that pull request. For maintainers, they either must have their pull request reviewed by another maintainer if possible, or leave the PR open for at least 24 hours, we consider this the window for comments. * All tests must pass on Github Actions CI for the merge to occur. * All changes must not introduce superfluous whitespace changes or whitespace errors. * All changes should adhere to the coding standard documented under misc. ## Testing The Github Actions setup uses a docker container, thus this docker container can be used to run the CI testing before submitting. The rationale for using a container versus Docker directly is that: 1. Debugging build failures on Github Actions can be frustrating 2. Github Actions doesn't have support for many distributions and versions. With a container we can trivially add additional distro testing. ### How To Run Docker Locally You need to have the docker tools installed and this is not meant to be a full docker tutorial. Docker installation and usage information can be found here: - https://www.docker.com/ You can either test with CC set to gcc or clang. It is not recommended to specify versions as the container may change compiler versions and reconfigure the default at any time. If CC is empty, it defaults to gcc. It is recommended to test with both as they perform different tests, such as `scan-build` and `asan` based unit testing. **Note**: We assume that all commands are run from the tpm2-pkcs11 repo checkout directory. To test with a compiler do: ```sh # either gcc or clang export CC=clang docker run --env-file .ci/docker.env -v `pwd`:/workspace/tpm2-pkcs11 tpm2software/tpm2-tss /bin/bash -c /workspace/tpm2-pkcs11/.ci/coverity.run ``` If one wishes to test multiple compilers, it's advantageous to enter the docker container and set CC before invoking the `coverity.run` script. It won't resync, build and install the tpm2-tss, tpm2-abrmd and tpm2-tools dependencies on multiple invocations, thus saving time, for example: ```sh docker run -it --env-file .ci/docker.env -v `pwd`:/workspace/tpm2-pkcs11 tpm2software/tpm2-tss export CC=gcc /workspace/tpm2-pkcs11/.ci/coverity.run export CC=clang /workspace/tpm2-pkcs11/.ci/coverity.run ``` ## Guideline for merging changes Pull Requests MUST be assigned to an upcoming release tag. If a release milestone does not exist, the maintainer SHALL create it per the [RELEASE.md](RELEASE.md) instructions. When accepting and merging a change, the maintainer MUST edit the description field for the release milestone to add the CHANGELOG entry. Changes must be merged with the "rebase" option on github to avoid merge commits. This provides for a clear linear history. tpm2-pkcs11-1.9.1/docs/INITIALIZING.md0000644000175100017510000002314614666345037012357 # Initialization In order to use the tpm2-pkcs11 library, you need to initialize a store. The store contains metadata for the library on what tokens and subordinate objects to expose. PKCS#11 was designed to work with smart cards, and has a few concepts that are pivital to understanding how to use it. The first concept is a *slot*. The slot, would be the physical smart card reader slot you would insert the smart card into. Then, for each slot, you can have a smart card inserted or not. So you could have N reader slots with X smart cards inserted where X <= N. For each smart card in X, it provides a *token*. The token is the actual device the PKCS#11 calls operate on. The token itself can be in one of two states, *initialized* or *not initialized*. The tpm2-pkcs11 library will always provide at least one *not-initialized* token that can be used to initialize the token. You can initialize the token with an external client via the PKCS#11 interface call C_Initialize, like [pkcs11-tool](https://linux.die.net/man/1/pkcs11-tool) or you can use the provided [tpm2_ptool](https://github.com/tpm2-software/tpm2-pkcs11/tree/master/tools) to perform an initialization through a side-channel mechanism. Note, that most initializations can be done through C_Initialize() calls via tools like pkcs11-tool. However, more complex initializations are better handled through tpm2_ptool. The tpm2-pkcs11 library requires some metadata to operate correctly. It stores this metadata in what is known as a *store*. The store is automatically searched for in the following locations: 1. env variable `TPM2_PKCS11_STORE` This is optional, and if not set is skipped. However, if you want a store in a custom path, this is how you set it: - Example: `export TPM2_PKCS11_STORE='path/to/where/i/want/the/store'` 2. `/etc/tpm2_pkcs11` or whatever was configured at build time with `--with-storedir`. 3. Users `$HOME/.tpm2_pkcs11` directory. 4. Current Working Directory. If no existing store is found, it will: 1. If env variable `TPM2_PKCS11_STORE` is set, attempt to use that path directory or create it if it doesn't exist. On failure, it continues to number 2. 2. `/etc/tpm2_pkcs11` or whatever was configured at build time with --with-storedir. 3. if `$HOME` is set, attempts to use that path directory. If the directory doesn't exist it will be created. This almost always exceeds for most users, so this ends up as the default store most of the time. If it fails, continues on to number 4. 4. Use the Current Working Directory. To facilitate creating this store, a tool called [tpm2-ptool](../tools/tpm2_ptool.py) exists. The store itself defaults to `$HOME/.tpm2_pkcs11` unless specified via the environment variable `TPM2_PKCS11_STORE`. **IMPORTANT** * For all the illustrations below, we create a store under `~/tmp`. * We assume some working TPM connection. Under the hood the `tpm2_ptool` command calls `tpm2-tools` binaries. Thus configuring the `TCTI` is important. The easiest way to do this for testing is to use a TPM Simulator and tpm2-abrmd as documented in [dependencies](BUILDING.md#step-1---satisfy-dependencies). Their is no requirement to use the simulator and abrmd, this is all configuration dependent. **LOCKING** When the SQL database is on the disk, the lock is set within the same folder than the SQL file. It can lead to some issues if the lock is not released (system crash, reboot), mostly on embedded systems. Another folder, for instance a tmpfs one, can be enforced using the env `PKCS11_SQL_LOCK=/var/run/pkcs11_sql_locks`. ## Example Setup With tpm2_ptool I use the simulator and tpm2-abrmd to set all of this up, like so: ```sh tpm_server & tpm2-abrmd --tcti=mssim & ``` See the respective projects for details on how to get them running. Note that `tpm2-abrmd` uses dbus, and dbus configuration is required. ### Step 1 - Initializing a Store and Creating a Slot Initializing a store creates a primary object under the owner hierarchy. Each primary object is mapped to a slot, and multiple initializations can occur for generating more than one slot. **Example**: ```sh mkdir ~/tmp tpm2_ptool.py init --path=~/tmp action: Created id: 1 ``` The output of the command to *stdout* is important. It describes the id of the primary object that one can associate subsequent commands to. Again, to create N > 1 slots, just run this command N times. ### Transient Primary Keys By default, and suitable for most users, primary keys are persistent objects in TPM non-volatile memory. However, under certain situations, one may wish to use a transient primary key. The upside is that this consumes no non-volatile memory in the TPM. So this would be suitable in situations where all NV space is consumed. The downside is that initialization of the token will be slower and that it requires authentication to the owner hierarchy. `tpm2_ptool` commands that need to leverage a transient primary object have been augmented to take the `--hierarchy-auth` option to supply this. However, token initialization will need this in tools consuming the PKCS#11 library. This can be supplied via the environment variable `TPM2_PKCS11_OWNER_AUTH`. ### Step 2 - Creating a Token After creating a slot or slots, now one needs to create a token. This is accomplished with the `addtoken` command for `tpm2-ptool`, using the primary object ID from [Step 1](#step-1---initializing-a-store-and-creating-a-slot). A token is created and a unique name called a *label* is provided. The *label* is used in subsequent commands to reference the token. **Example**: ```sh tpm2_ptool.py addtoken --pid=1 --hierarchy-auth=mypobjpin --sopin=mysopin --userpin=myuserpin --label=label --path ~/tmp ``` To create N tokens under a given `--pid` or primary object id, just run the command N times. Thus it is possible to have *S* number of slots, with *T* number of tokens under each slot. ### Step 3 - Creating Objects Under a Token To create objects, like keys, under a token, the `tpm2-ptool` command-let `add` is invoked. You can direct which token to create the object under by using the `--label` option. **Example**: ```sh action: add private: CKA_ID: '62663630653733656336316363386535' ``` This command can be run N times to create N objects within a token. Tokens can have an arbitrary number of objects. The tool outputs to *stdout* the objects CKA_ID hex encoded. **Note**: To view all the types of objects one can create run command: ```sh tpm2_ptool.py addkey --help ``` And review the enumerated options allowed for `--algorithm`. ## Example Setup With pkcs11-tool We start the simulator and tpm2-abrmd as shown [here](#Example Setup With tpm2_ptool). I add an alias in my `~/.bashrc` file so that way pkcs11-tool is setup and running the tpm2-pkcs11 library. The alias is: ```bash alias tpm2pkcs11-tool="pkcs11-tool --module $HOME/workspace/tpm2-pkcs11/src/.libs/libtpm2_pkcs11.so.0.0.0" ``` Alter that alias as needed, so that `--module` points to the location of the tpm2-pkc11 shared library. ### Initialization Details This method of initialization does not provide the granularity of control over the primary key that `tpm2_ptool` does. The initialization will currently look to see if a *store* is already configured with a primary key, and if so uses the first one. If it is not, it attempts to use the *SRK* at address 0x81000001 as defined by various TCG specifications: - https://trustedcomputinggroup.org/wp-content/uploads/TCG-TPM-v2.0-Provisioning-Guidance-Published-v1r1.pdf - https://trustedcomputinggroup.org/wp-content/uploads/Credential_Profile_EK_V2.0_R14_published.pdf - https://trustedcomputinggroup.org/wp-content/uploads/TCG_PC_Client_Platform_TPM_Profile_PTP_2.0_r1.03_v22.pdf - https://trustedcomputinggroup.org/wp-content/uploads/RegistryOfReservedTPM2HandlesAndLocalities_v1p1_pub.pdf ### Step 1 - Creating a Token Optional, list the current tokens to figure out what slot to use: ```bash tpm2pkcs11-tool --list-token-slots Available slots: Slot 0 (0x1): IBM token state: uninitialized ``` Initialize a token at Slot Index 0. ```bash tpm2pkcs11-tool --slot-index=0 --init-token --label="my first token" --so-pin="mysopin" Token successfully initialized ``` Optional, list the tokens again: ```bash tpm2pkcs11-tool --list-token-slots Available slots: Slot 0 (0x1): my first token IBM token label : my first token token manufacturer : IBM token model : SW TPM token flags : login required, rng, token initialized, PIN initialized hardware version : 1.46 firmware version : 22.17 serial num : 0000000000000000 pin min/max : 0/128 Slot 1 (0x2): IBM token state: uninitialized ``` ### Step 3 - Setting a User PIN One must set the user PIN for the token after initializing, like so: ```bash tpm2pkcs11-tool --slot-index=0 --init-pin --so-pin="mysopin" --login --pin="myuserpin" Using slot with index 0 (0x1) User PIN successfully initialized ``` ### Step 4 - Creating Objects Under a Token Optional, list objects: ```bash tpm2pkcs11-tool --slot-index=0 --list-objects Using slot 0 with a present token (0x1) ``` Create an RSA Key pair: ```bash tpm2pkcs11-tool --slot-index=0 --login --pin="myuserpin" --label="myrsakey" --keypairgen Using slot with index 0 (0x1) Key pair generated: Private Key Object; RSA label: myrsakey Usage: decrypt, sign Public Key Object; RSA 2048 bits label: myrsakey Usage: encrypt, verify ``` Optional, list objects again: ```bash tpm2pkcs11-tool --slot-index=0 --list-objects Using slot with index 0 (0x1) Public Key Object; RSA 2048 bits label: myrsakey Usage: encrypt, verify ``` Note: To see private objects you need to login. tpm2-pkcs11-1.9.1/docs/MAINTAINERS.md0000644000175100017510000000021614666345037012230 # Maintainers * Juergen Repp * Andreas Fuchs * Bill Roberts tpm2-pkcs11-1.9.1/docs/RELEASE.md0000644000175100017510000001436414666345037011547 # Release Information This document describes the general process that maintainers must follow when making a release of the `tpm2-pkcs11` library. # Milestones All releases should have a milestone used to track the release. If the release version is not known, as covered in [Version Numbers](#Version Numbers), then an "x" may be used for the unknown number, or the generic term "next" may be used. The description field of the milestone will be used to record the CHANGELOG for that release. See [CHANGELOG Update](#CHANGELOG Update) for details. ## Version Numbers Releases shall be tagged following semantic version guidelines found at: - The general release process will be one of two models: - Tag releases off of branch master. - Tag releases off of a release specific branch. - Release specific branch names can be for long-running major versions, IE 3.1, 3.2, 3.3, etc. and *SHALL* be named `.X`. - Release specific branch names can be for long-running minor versions, IE 3.1.1, 3.1.2, etc. and *SHALL* be named `..X`. Release candidates will be announced on the [mailing list](https://lists.linuxfoundation.org/mailman/listinfo/tpm2). When a RC has gone 1 week without new substantive changes, a release will be conducted. Substantive changes are generally not editorial in nature and they do not contain changes to the CI system. Substantive changes are changes to the man-pages, code or tests. When a release is cut, the process is the same as a Release Candidate (RC), with the exception that it is not marked as "pre-release" on GitHub. The release notes should include everything from the last release to the latest release. ## CHANGELOG Update Before tagging the repository with the release version, the maintainer MUST update the CHANGELOG file with the contents from the description field from the corresponding release milestone and update any missing version string details in the CHANGELOG and milestone entry. ## Testing The tools code **MUST** pass the Github Actions testing and have a clean Coverity scan result performed on every release. The CI testing not only tests for valid outputs, but also runs tests uses clang's ASAN feature to detect memory corruption issues. ## Release Checklist The steps, in order, required to make a release. - Ensure current HEAD is pointing to the last commit in the release branch. - Ensure [GitHub Actions](https://github.com/tpm2-software/tpm2-pkcs11/actions) has conducted a passing build of HEAD. - Update version and date information in [CHANGELOG.md](CHANGELOG.md) **and** commit. - Create a signed tag for the release. Use the version number as the title line in the tag commit message and use the [CHANGELOG.md](CHANGELOG.md) contents for that release as the body. ```bash git tag -s ``` - Build a tarball for the release and check the dist tarball. **Note**: The file name of the tarball should include a match for the git tag name. ```bash make distcheck ``` - Generate a detached signature for the tarball. ```bash gpg --armor --detach-sign ``` - Push **both** the current git HEAD (should be the CHANGELOG edit) and tag to the release branch. ```bash git push origin HEAD: git push origin ``` - Verify that the GitHub Actions build passes. **Note**: GitHub Actions will have two builds, one for the push to master and one for the tag push. Both should succeed. - Create a release on [Github](https://github.com/tpm2-software/tpm2-pkcs11/releases), using the `` uploaded. If it is a release candidate, ensure you check the "pre-release" box on the GitHub UI. Use the [CHANGELOG.md](CHANGELOG.md) contents for that release as the message for the GitHub release. **Add the dist tarball and signature file to the release**. - Update the version matrix in the wiki ensuring that the CI is building against a released version of: - [tpm2-abrmd](https://github.com/tpm2-software/tpm2-abrmd) - [tpm2-tss](https://github.com/tpm2-software/tpm2-tss) Configuration can be modified via [docker-prelude.sh](.ci/docker-prelude.sh). - After the release (not a release candidate) add a commit to master updating the News section of the [README](README.md) to point to the latest release. - Send announcement on [mailing list](https://lists.01.org/mailman/listinfo/tpm2). ## Verifying git signature Valid known public keys can be reached via a PGP public keyring server like: - - **Example** for William Roberts (key [`5B482B8E3E19DA7C978E1D016DE2E9078E1F50C1`](https://keyserver.ubuntu.com/pks/lookup?search=0x5B482B8E3E19DA7C978E1D016DE2E9078E1F50C1&fingerprint=on&op=index): ```bash curl 'https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x5b482b8e3e19da7c978e1d016de2e9078e1f50c1' | \ gpg --import ``` Verify the release tag: ```bash git tag --verify [signed-tag-name] ``` # Local Release Configuration Below you will find information how to configure your machine locally to conduct releases. ## Signing Key Setup Signing keys should have these four properties going forward: - belong to a project maintainer. - be discoverable using a public GPG key server. - be [associated](https://help.github.com/articles/adding-a-new-gpg-key-to-your-github-account/) with the maintainers GitHub account. - be discoverable via an annotated tag within the repository itself. Ensure you have a key set up: ```bash gpg --list-keys ``` If you don't generate one: ```bash gpg --gen-key ``` Add that key to the gitconfig: ```bash git config user.signingkey [gpg-key-id] ``` Make sure that key is reachable as an object in the repository: ```bash gpg -a --export [gpg-key-id] | git hash-object -w --stdin [object SHA] git tag -a [your-name-here]-pub [object SHA] ``` Make sure you push the tag referencing your public key: ```bash git push origin [your-name-here]-pub ``` Make sure you publish your key by doing: - - Select "Publish your key". - Select "Key block" - Copy and paste the output of `gpg --armor --export ` - Validate your email account. After that, you can sign tags: ```bash git tag --sign [signed-tag-name] ``` tpm2-pkcs11-1.9.1/docs/SECURITY.md0000644000175100017510000000310714666345037011727 # Security Policy ## Supported Versions Currently supported versions: | Version | Supported | | -------- | ------------------ | | < 1.5.0 | :x: | | >= 1.5.0 | :white_check_mark: | ## Reporting a Vulnerability ### Reporting Security vulnerabilities can be disclosed in one of two ways: - GitHub: *preferred* By following [these](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability) instructions. - Email: A descirption *should be emailed* to **all** members of the [MAINTAINERS](MAINTAINERS) file to coordinate the disclosure of the vulnerability. ### Tracking When a maintainer is notified of a security vulnerability, they *must* create a GitHub security advisory per the instructions at: - Maintainers *should* use the optional feature through GitHub to request a CVE be issued, alternatively RedHat has provided CVE's in the past and *may* be used, but preference is on GitHub as the issuing CNA. ### Publishing Once ready, maintainers should publish the security vulnerability as outlined in: - As well as ensuring the publishing of the CVE, maintainers *shal*l have new release versions ready to publish at the same time as the CVE. Maintainers *should* should strive to adhere to a sub 60 say turn around from report to release. tpm2-pkcs11-1.9.1/docs/FAPI.md0000644000175100017510000000357614666350663011212 # Integration with the Feature API (FAPI) ## Introduction The feature API is a high level API for interacting with the TPM 2.0 device. It exposes a subset of the TPM operations as well as provides on disk key management, automatic encrypted sessions and format conversions, like PEM, where possible. The tpm2-pkcs11 project predates the Feature API, and the original code was implemented using the Enhanced System API (ESAPI) and for on disk storage of TPM protected keys, a sqlite3 database. ## Configuring ## Build Time At the time the package is built, it will detect tss2-fapi library and automatically configure it's inclusion into the tpm2-pkcs11 library. One can *explicitly* configure this with `--with-fapi=yes|no`. ## Run Time If the tss2-fapi library is configured, it will dynamically attempt to locate and list tokens provisioned with tss2-fapi. Because FAPI might be in a bad state, this could cause superfluous errors and warnings. The library is built to ignore these errors, like: - You can take a few actions if you run into this issue: 1. Ignore them, and optionally disable FAPI error logging: - `export TSS2_LOG=fapi+NONE` 2. Reconfigure the package with `--with-fapi=no`: - `./configure --with-fapi=no` 3. Provision FAPI using `tss2_provision`. See the tpm2-tools project for more information: - Additionally at run time, the token creation function, C\_InitToken, may be invoked to create a new token. By default, the token always using the original mechanism of the SQLite3 database. This is to preserve backwards compatibility and behavior. To use the FAPI backend, one *must* set the environment variable `TPM2_PKCS11_BACKEND` to `fapi`. If empty, or set to `esysdb` the SQLite3 backend is used. Any other value is an error. tpm2-pkcs11-1.9.1/tools/0000755000175100017510000000000014667633200010416 5tpm2-pkcs11-1.9.1/tools/.gitignore0000644000175100017510000000011614535673717012337 # SPDX-License-Identifier: BSD-2-Clause *__pycache__/ *.swp *.pyc *.egg-info/ tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/0000755000175100017510000000000014667633201012463 5tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/__init__.py0000644000175100017510000000031614667615111014514 # SPDX-License-Identifier: BSD-2-Clause import sys # Requires python 3.7 or greater if (sys.version_info[0], sys.version_info[1]) < (3, 7): sys.exit("Python 3.7 or a more recent version is required.")tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/command.py0000644000175100017510000001137214667615111014377 # SPDX-License-Identifier: BSD-2-Clause import argparse import os import textwrap class commandlet(object): '''Decorator class for commandlet. You can add commandlets to the tool with this decorator.''' @staticmethod def get_default_store_path(): # always use the env variable no matter what if "TPM2_PKCS11_STORE" in os.environ: store = os.environ.get("TPM2_PKCS11_STORE") try: os.mkdir(store, 0o770) except FileExistsError: return store except Exception: # Keep trying pass # Exists, use it return store # is there a system store and can I access it? store = "/etc/tpm2_pkcs11" if os.path.exists(store) and os.access(store, os.W_OK): return store # look for a store in home if "HOME" in os.environ: if "XDG_DATA_HOME" in os.environ: data_dir = os.environ["XDG_DATA_HOME"] else: data_dir = os.path.join(os.environ["HOME"], ".local/share") stores = [ os.path.join(data_dir, "tpm2-pkcs11"), os.path.join(os.environ["HOME"], ".tpm2_pkcs11"), ] # Try to find existing store for store in stores: if os.path.exists(store): return store # If neither path exists, try to create one for store in stores: try: os.mkdir(store, 0o770) except FileExistsError: return store except Exception: continue # Exists, use it return store # nothing else available, use cwd return os.getcwd() _commandlets = {} def __init__(self, cmd): self._cmd = cmd if cmd in commandlet._commandlets: raise Exception('Duplicate command name' + cmd) commandlet._commandlets[cmd] = None def __call__(self, cls): commandlet._commandlets[self._cmd] = cls() return cls @staticmethod def get(): '''Retrieves the list of registered commandlets.''' return commandlet._commandlets @staticmethod def init(description): opt_parser = argparse.ArgumentParser(description=description) subparser = opt_parser.add_subparsers(help='commands') commandlets = commandlet.get() # for each commandlet, instantiate and set up their options for n, c in commandlets.items(): p = subparser.add_parser(n, help=c.__doc__) p.set_defaults(which=n) # Instantiate opt_gen = getattr(c, 'generate_options', None) if callable(opt_gen): # get group help g = p.add_argument_group(n + ' options') # get args c.generate_options(g) g.add_argument( '--path', type=os.path.expanduser, help=textwrap.dedent(''' The location of the store directory. If specified, the directory MUST exist. If not specified performs a search by looking at environment variable TPM2_PKCS11_STORE and if not set then /etc/tpm2_pkcs11 and if not found or no write access, then $HOME/.tpm2_pkcs11 and if not found or cannot be created, then defaults to using the current working directory. '''), default=commandlet.get_default_store_path()) args = opt_parser.parse_args() d = vars(args) if 'which' in d: commandlet.get()[d['which']](d) else: opt_parser.print_usage() class Command(object): '''Baseclass for a commandlet. Commandlets shall implement this interface.''' def generate_options(self, group_parser): '''Adds it's options to the group parser. The parser passed in is a result from calling add_argument_group(ArgumentGroup): https://docs.python.org/2/library/argparse.html Args: group_parser(): The parser to add options too. ''' raise NotImplementedError('Implement: generate_options') def __call__(self, args): '''Called when the user selects your commandlet and passed the dictionary of arguments. Arguments: args ({str: arg}: The dictionary version of the attrs of the parser. The args value is obtained by: args = opt_parser.parse_args() args = vars(args) So to access args just do args['name'] ''' raise NotImplementedError('Implement: __call__') tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/commandlets_keys.py0000644000175100017510000006757414667615111016341 # SPDX-License-Identifier: BSD-2-Clause # python stdlib dependencies import binascii import io import os import struct import sys import yaml from tempfile import mkstemp from tpm2_pytss.tsskey import TSSPrivKey # local imports from .command import Command from .command import commandlet from .db import Db from .objects import PKCS11ObjectFactory as PKCS11ObjectFactory from .objects import PKCS11X509 from .utils import AESAuthUnwrapper from .utils import TemporaryDirectory from .utils import hash_pass from .utils import rand_hex_str from .utils import pemcert_to_attrs from .utils import str2bool from .utils import str2bytes from .utils import get_pobject from .utils import dump_blobs from .utils import dump_tsspem from .utils import dump_pubpem from .tpm2 import Tpm2 from .pkcs11t import * # noqa class NewKeyCommandBase(Command): ''' creates a key to a token within a tpm2-pkcs11 store. ''' def generate_options(self, group_parser): group_parser.add_argument( '--label', help='The tokens label to import the key too.\n', required=True) group_parser.add_argument( '--key-label', help='The label of the key imported. Defaults to an integer value.\n') group_parser.add_argument( '--id', help='The key id. Defaults to a random 8 bytes of hex.\n', default=binascii.hexlify(os.urandom(8)).decode()) group_parser.add_argument( '--attr-always-authenticate', action='store_true', help='Sets the CKA_ALWAYS_AUTHENTICATE attribute to CK_TRUE.\n') group_parser.add_argument( '--hierarchy-auth', help='The hierarchyauth, required for transient pobjects.\n', default='') pinopts = group_parser.add_mutually_exclusive_group() pinopts.add_argument('--sopin', help='The Administrator pin.\n'), pinopts.add_argument('--userpin', help='The User pin.\n'), # Implemented by derived class def new_key_create(self, pobj, objauth, hierarchyauth, tpm2, alg, privkey, passin, d): raise NotImplementedError('Implement: new_key') def new_key_init(self, label, sopin, userpin, hierarchyauth, pobj, sealobjects, tpm2, d): pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) # Get the primary object encrypted auth value and sokey information # to decode it. Based on the incoming pin is_so = sopin != None pin = sopin if is_so else userpin pubkey = '%spub' % ('so' if is_so else 'user') privkey = '%spriv' % ('so' if is_so else 'user') saltkey = '%sauthsalt' % ('so' if is_so else 'user') sealpub = sealobjects[pubkey] sealpriv = sealobjects[privkey] sealsalt = sealobjects[saltkey] sealctx = tpm2.load(pobj_handle, pobj['objauth'], sealpriv, sealpub) sealauth = hash_pass(pin, salt=sealsalt)['hash'] wrappingkey = tpm2.unseal(sealctx, sealauth) wrapper = AESAuthUnwrapper(wrappingkey) #create an auth value for the tertiary object. objauth = rand_hex_str() encobjauth = wrapper.wrap(str2bytes(objauth)) return (encobjauth, objauth) @staticmethod def new_key_save(alg, keylabel, tid, label, privblob, pubblob, tertiarypubdata, encobjauth, db, tpm2, extra_privattrs=None, extra_pubattrs=None, override_keylen=None): token = db.gettoken(label) # # Cache the objects attributes from the public structure and other sources # and populate the db with the data. This allows use of the public data # without needed to load any objects which requires a pin to do. # y = yaml.safe_load(tertiarypubdata) initial_pubattrs = {} initial_privattrs = {} # add the id initial_privattrs.update({CKA_ID: binascii.hexlify(tid.encode()).decode()}) initial_pubattrs.update({CKA_ID: binascii.hexlify(tid.encode()).decode()}) # Add keylabel for ALL objects if set if keylabel is not None: initial_privattrs.update({ CKA_LABEL: binascii.hexlify(keylabel.encode()).decode() }) initial_pubattrs.update({ CKA_LABEL: binascii.hexlify(keylabel.encode()).decode() }) # add additional attrs if extra_privattrs: initial_privattrs.update(extra_privattrs) if initial_pubattrs and extra_pubattrs: initial_pubattrs.update(extra_pubattrs) objects = PKCS11ObjectFactory(y, tpm2, encobjauth, initial_pubattrs, initial_privattrs, tpm_pub=pubblob, tpm_priv=privblob, override_keylen=override_keylen) # Store private to database db.addtertiary(token['id'], objects['private']) # if it's asymmetric, add a public object too if 'public' in objects and objects['public'] is not None: db.addtertiary(token['id'], objects['public']) return objects @staticmethod def output(objects, action): d = { 'action' : action, } for k, v in objects.items(): if v is not None: d[k] = { 'CKA_ID' : objects[k][CKA_ID] } yaml.safe_dump(d, sys.stdout, default_flow_style=False) def __call__(self, args): path = args['path'] with Db(path) as db: with TemporaryDirectory() as d: tpm2 = Tpm2(d) label = args['label'] sopin = args['sopin'] userpin = args['userpin'] alg = args['algorithm'] if 'algorithm' in args else None key_label = args['key_label'] tid = args['id'] hierarchyauth = args['hierarchy_auth'] passin = args['passin'] if 'passin' in args else None privkey = None try: privkey = args['privkey'] except KeyError: privkey = None token = db.gettoken(label) pobjectid = token['pid'] pobj = db.getprimary(pobjectid) if userpin is None and sopin is None: # Use empty PIN if the token has an empty user PIN token_config = yaml.safe_load(io.StringIO(token['config'])) if token_config.get('empty-user-pin'): userpin = '' else: sys.exit('error: at least one of the arguments --sopin --userpin is required') sealobjects = db.getsealobject(token['id']) encobjauth, objauth = self.new_key_init( label, sopin, userpin, hierarchyauth, pobj, sealobjects, tpm2, d) tertiarypriv, tertiarypub, tertiarypubdata = self.new_key_create( pobj, objauth, hierarchyauth, tpm2, alg, privkey, passin, d) # handle options that can add additional attributes always_auth = args['attr_always_authenticate'] priv_attrs = {CKA_ALWAYS_AUTHENTICATE : always_auth} override_keylen = getattr(self, '_override_keylen', None) return NewKeyCommandBase.new_key_save( alg, key_label, tid, label, tertiarypriv, tertiarypub, tertiarypubdata, encobjauth, db, tpm2, extra_privattrs=priv_attrs, override_keylen=override_keylen) @commandlet("import") class ImportCommand(NewKeyCommandBase): ''' Imports a rsa key to a token within a tpm2-pkcs11 store. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): super(ImportCommand, self).generate_options(group_parser) group_parser.add_argument( '--privkey', help='Full path of the private key to be imported.\n', required=True) group_parser.add_argument( '--algorithm', help='The type of the key.\n', choices=['rsa', 'ecc', 'hmac', # Generic hmac, actually imported as keyedhash scheme null with proper attrs. 'hmac:sha1', 'hmac:sha256', 'hmac:sha384', 'hmac:sha512' ], required=False) group_parser.add_argument( '--passin', help='Password of the input private key file like OpenSSL (example: "pass:secret").\n', required=False) # Imports a new key def new_key_create(self, pobj, objauth, hierarchyauth, tpm2, alg, privkey, passin, d): pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) # A plain HMAC key is just a keyedhash object with userwithauth and sign set. # Seal objects don't have sign (ie default tpm2_import -G keyedhash behavior. objattrs=None if alg == 'hmac': objattrs = 'userwithauth|sign|decrypt' alg = 'keyedhash' tertiarypriv, tertiarypub, tertiarypubdata = tpm2.importkey( pobj_handle, pobj['objauth'], objauth, privkey=privkey, alg=alg, passin=passin, objattrs=objattrs) # We have no way of knowing the keylength of an hmac key if alg and alg.startswith('hmac') or alg == 'keyedhash': self._override_keylen = os.path.getsize(privkey) return (tertiarypriv, tertiarypub, tertiarypubdata) def __call__(self, args): objects = super(ImportCommand, self).__call__(args) NewKeyCommandBase.output(objects, 'import') @commandlet("addkey") class AddKeyCommand(NewKeyCommandBase): ''' Adds a key to a token within a tpm2-pkcs11 store. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): super(AddKeyCommand, self).generate_options(group_parser) group_parser.add_argument( '--algorithm', help='The type of the key.\n', choices=Tpm2.ALGS, required=True) # Creates a new key def new_key_create(self, pobj, objauth, hierarchyauth, tpm2, alg, privkey, passin, d): pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) tertiarypriv, tertiarypub, tertiarypubdata = tpm2.create( pobj_handle, pobj['objauth'], objauth, alg=alg) return (tertiarypriv, tertiarypub, tertiarypubdata) def __call__(self, args): objects = super(AddKeyCommand, self).__call__(args) NewKeyCommandBase.output(objects, 'add') @commandlet("addcert") class AddCert(Command): ''' Adds a certificate object ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--label', help='The profile label to remove.\n', required=True) group_parser.add_argument( 'cert', help='The x509 PEM certificate to add.\n') sub_group = group_parser.add_mutually_exclusive_group() sub_group.add_argument( '--key-label', help='The associated private key label.\n') group_parser.add_argument( '--key-id', help='The associated private key id in hex.\n') def __call__(self, args): path = args['path'] label = args['label'] keylabel = args['key_label'] keyid = args['key_id'] certpath = args['cert'] if (keylabel is None) == (keyid is None): sys.exit('Expected --key-label or --key-id to be specified') attrs = pemcert_to_attrs(certpath) pkcs11_object = PKCS11X509(attrs) with Db(path) as db: # get token to add to token = db.gettoken(label) # verify that key is existing # XXX we should be verifying that it's expected, but I guess one could always load up a cert # not associated with a key. tobjs = db.gettertiary(token['id']) # look up the private key missing_id_or_label = None for t in tobjs: if keylabel is not None: missing_id_or_label = AddCert.get_id_by_label(t, keylabel) else: missing_id_or_label = AddCert.get_label_by_id(t, keyid) if missing_id_or_label is not None: break if missing_id_or_label is None: raise RuntimeError('Cannot find key with id "%s"' % keylabel) # have valid keylabel needed id if keylabel: pkcs11_object.update({CKA_ID: missing_id_or_label}) pkcs11_object.update({CKA_LABEL: binascii.hexlify(keylabel.encode()).decode()}) # have valid id needed keylabel else: pkcs11_object.update({CKA_LABEL: missing_id_or_label}) pkcs11_object.update({CKA_ID: keyid}) # TODO verify that cert is cryptographically bound to key found # add the cert db.addtertiary(token['id'], pkcs11_object) NewKeyCommandBase.output({'cert' : pkcs11_object}, 'add') @staticmethod def get_id_by_label(tobj, keylabel): attrs = yaml.safe_load(io.StringIO(tobj['attrs'])) if CKA_LABEL in attrs: x = attrs[CKA_LABEL] x = binascii.unhexlify(x).decode() if x == keylabel and attrs[CKA_CLASS] == CKO_PRIVATE_KEY: return attrs[CKA_ID] return None @staticmethod def get_label_by_id(tobj, keyid): attrs = yaml.safe_load(io.StringIO(tobj['attrs'])) if CKA_ID in attrs: x = attrs[CKA_ID] if x == keyid and attrs[CKA_CLASS] == CKO_PRIVATE_KEY: return attrs[CKA_LABEL] if CKA_LABEL in attrs else '' return None @commandlet("objmod") class ObjMod(Command): ''' Dumps and modifies objects. ''' _type_map = { 'int' : 'do_int', 'str' : 'do_str', 'bool': 'do_bool', 'raw' : 'do_raw', } @staticmethod def do_int(value): return int(value, 0) @staticmethod def do_bool(value): return str2bool(value) @staticmethod def do_str(value): return binascii.hexlify(value.encode()).decode() @staticmethod def do_raw(value): return value @classmethod def mod(cls, path, tid, key, value, inattrs, vtype): with Db(path) as db: obj = db.getobject(tid) if obj is None: sys.exit('Not found, object with id: {}'.format(tid)) s = obj['attrs'] obj_attrs = yaml.safe_load(s) # if we don't have any update data, just dump the attributes if not key and not inattrs: print(yaml.safe_dump(obj_attrs, default_flow_style=False)) sys.exit() # if we have attributes YAML file, then we want to update all attributes if inattrs: with Db(path) as db: y = yaml.safe_load(open(inattrs, "r")) db.updatetertiary(obj['id'], y) sys.exit() # else we have --key and possibly --value # # look in the CKA_ globals from pkcs11t.py file for # a mapping string or raw value map. # filter(lambda x: x.startswith('CKA_'), globals().keys()) keys = [] for k in globals().keys(): if k.startswith('CKA_'): keys.append(k) keynames = {} for k in keys: keynames[globals()[k]] = k keyname=None if key in keys: keyname=key key=globals()[key] else: key = int(key, 0) if key not in keynames: sys.exit('Unknown key: %d', key) keyname = keynames[key] if not value: if key and not key in obj_attrs: sys.exit("Key not found") print(yaml.safe_dump({keyname : obj_attrs[key]})) sys.exit() if not vtype: sys.exit("When specifying a value, type is required") value = getattr(cls, ObjMod._type_map[vtype])(value) obj_attrs[key] = value with Db(path) as db: db.updatetertiary(obj['id'], obj_attrs) # adhere to an interface def generate_options(self, group_parser): group_parser.add_argument( '--id', help='The object id.\n', required=True) group_parser.add_argument( '--key', help='The key to dump.\n') group_parser.add_argument( '--value', help='The value to set.\n') group_parser.add_argument( '--type', choices=self._type_map.keys(), help='Specify the type.\n') group_parser.add_argument( 'attrs', nargs='?', help='The YAML attribute file.\n') def __call__(self, args): path = args['path'] key = args['key'] if 'key' in args else None value = args['value'] if 'value' in args else None attrs = args['attrs'] if 'attrs' in args else None if attrs and key: sys.exit('Cannot specify --key when specifying the attributes') if attrs and value: sys.exit('Cannot specify --value when specifying the attributes') if value and not args['type']: sys.exit('require --type when specifying --value') ObjMod.mod(path, args['id'], key, value, attrs, args['type']) @commandlet("objdel") class ObjDel(Command): ''' Deletes an object from a token. ''' @classmethod def delete(cls, path, tid): with Db(path) as db: obj = db.getobject(tid) db.rmobject(obj['id']) # adhere to an interface def generate_options(self, group_parser): group_parser.add_argument( 'id', help='The id of the object to delete.\n') def __call__(self, args): path = args['path'] ObjDel.delete(path, args['id']) @commandlet("link") class LinkCommand(NewKeyCommandBase): ''' Imports an existing TPM key to a token within a tpm2-pkcs11 store. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): super(LinkCommand, self).generate_options(group_parser) group_parser.add_argument('privkey', nargs='*', help='Path of the key to be linked.\n') group_parser.add_argument( '--auth', default='', help='The auth value for the key to link.\n' ) def new_key_init(self, label, sopin, userpin, hierarchyauth, pobj, sealobjects, tpm2, d): pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) # Get the primary object encrypted auth value and sokey information # to decode it. Based on the incoming pin is_so = sopin != None pin = sopin if is_so else userpin pubkey = '%spub' % ('so' if is_so else 'user') privkey = '%spriv' % ('so' if is_so else 'user') saltkey = '%sauthsalt' % ('so' if is_so else 'user') sealpub = sealobjects[pubkey] sealpriv = sealobjects[privkey] sealsalt = sealobjects[saltkey] sealctx = tpm2.load(pobj_handle, pobj['objauth'], sealpriv, sealpub) sealauth = hash_pass(pin, salt=sealsalt)['hash'] wrappingkey = tpm2.unseal(sealctx, sealauth) wrapper = AESAuthUnwrapper(wrappingkey) objauth = self._auth encobjauth = wrapper.wrap(str2bytes(objauth)) return (encobjauth, objauth) def create_from_tss_key(self, pobj, objauth, hierarchyauth, tpm2, alg, keypath, d): keypath = keypath[0] with open(keypath, "rb") as f: keybytes = f.read() tss2_privkey = TSSPrivKey.from_pem(keybytes) is_empty_auth = tss2_privkey.empty_auth phandle = tss2_privkey.parent pubbytes = tss2_privkey.public.marshal() privbytes = tss2_privkey.private.marshal() pid = pobj['id'] pobj_config = yaml.safe_load(pobj['config']) is_transient = pobj_config['transient'] if not is_transient and (phandle == tpm2.TPM2_RH_OWNER or \ (phandle >> tpm2.TPM2_HR_SHIFT != tpm2.TPM2_HT_PERSISTENT)): sys.exit('The primary object (id: {:d}) is persistent and' ' the TSS Engine key does not have a persistent parent,' ' got: 0x{:x}'.format(pid, phandle)) elif is_transient and not (phandle == tpm2.TPM2_RH_OWNER or phandle == 0): # tpm2-tss-engine < 1.1.0 used a phandle of 0 instead of tpm2.TPM2_RH_OWNER sys.exit('The primary object (id: {:d}) is transient and' ' the TSS Engine key has a parent handle,' ' got: 0x{:x}'.format(pid, phandle)) if is_empty_auth and len(self._auth) if self._auth is not None else 0: sys.exit('Key expected to have auth value, please specify via option --auth'); if not is_transient: # Im diving into the ESYS_TR serialized format, # this isn't the smartest thing to do... hexhandle = pobj_config['esys-tr'] handle_bytes = binascii.unhexlify(hexhandle)[0:4] expected_handle = struct.unpack(">I", handle_bytes)[0] if phandle != expected_handle: sys.exit("Key must be parent of 0x{:X}, got 0x{:X}".format( expected_handle, phandle)) pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) pobjauth = pobj['objauth'] ctx = tpm2.load(pobj_handle, pobjauth, privbytes, pubbytes) tertiarypubdata, _ = tpm2.readpublic(ctx, False) privfd, tertiarypriv = mkstemp(prefix='', suffix='.priv', dir=d) try: os.write(privfd, privbytes) finally: os.close(privfd) pubfd, tertiarypub = mkstemp(prefix='', suffix='.pub', dir=d) try: os.write(pubfd, pubbytes) finally: os.close(pubfd) return (tertiarypriv, tertiarypub, tertiarypubdata) def create_from_key_blobs(self, pobj, objauth, hierarchyauth, tpm2, alg, keypaths, d): tertiarypub = keypaths[0] tertiarypriv = keypaths[1] pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) pobjauth = pobj['objauth'] try: ctx = tpm2.load(pobj_handle, pobjauth, tertiarypriv, tertiarypub) except RuntimeError as e: # Try swapping pub/priv tmp = tertiarypub tertiarypub = tertiarypriv tertiarypriv = tmp ctx = tpm2.load(pobj_handle, pobjauth, tertiarypriv, tertiarypub) tertiarypubdata, _ = tpm2.readpublic(ctx, False) return (tertiarypriv, tertiarypub, tertiarypubdata) # Links a new key def new_key_create(self, pobj, objauth, hierarchyauth, tpm2, alg, keypaths, passin, d): if keypaths is None: sys.exit("Keypath must be specified") if len(keypaths) == 1: return self.create_from_tss_key(pobj, objauth, hierarchyauth, tpm2, alg, keypaths, d) if len(keypaths) == 2: return self.create_from_key_blobs(pobj, objauth, hierarchyauth, tpm2, alg, keypaths, d) sys.exit("Expected one or two keyblobs, got: {}".format(len(keypaths))) def __call__(self, args): self._auth = args['auth'] if 'auth' in args else None objects = super(LinkCommand, self).__call__(args) NewKeyCommandBase.output(objects, 'link') @commandlet("export") class Export(Command): ''' Exports an object from a token to a specified format. ''' @staticmethod def _handle_tpm_key(db, obj, pin, is_so_pin, hierarchyauth, format, output_prefix): attrs = yaml.safe_load(io.StringIO(obj['attrs'])) cka_class = attrs[CKA_CLASS] if cka_class == CKO_SECRET_KEY: if format == "pem": raise RuntimeError(f'A format of "{format}" is not supported for CKO_SECRET_KEY objects') dump_blobs(db, obj, pin, is_so_pin, output_prefix) return if cka_class == CKO_PRIVATE_KEY: if format == "tpm2": dump_blobs(db, obj, pin, is_so_pin, output_prefix) else: dump_tsspem(db, obj, pin, is_so_pin, output_prefix) return raise RuntimeError(f'Object CKA_CLASS not supported, got: "{cka_class}"') @staticmethod def _handle_public_key(db, obj, pin, is_so_pin, hierarchyauth, format, output_prefix): dump_pubpem(db, obj, pin, is_so_pin, output_prefix) @staticmethod def export(db, tid, pin, is_so_pin, hierarchyauth, format, output_prefix): if not output_prefix: output_prefix = str(tid) obj = db.getobject(tid) attrs = yaml.safe_load(io.StringIO(obj['attrs'])) cka_class = attrs[CKA_CLASS] handler = { CKO_SECRET_KEY : Export._handle_tpm_key, CKO_PRIVATE_KEY : Export._handle_tpm_key, CKO_PUBLIC_KEY : Export._handle_public_key, } if cka_class not in handler: raise RuntimeError(f'Object class not supported, got: "{cka_class}"') handler[cka_class](db, obj, pin, is_so_pin, hierarchyauth, format, output_prefix) def generate_options(self, group_parser): group_parser.add_argument( '--id', help='The id of the object to add (mutually exclusive with --label and --key-label).\n', type=int) group_parser.add_argument( '--label', help='The token label of the object to export. Requires --key-label\n') group_parser.add_argument( '--key-label', help='The label of the object to export. Required --label\n') group_parser.add_argument( '--format', choices = [ 'auto', 'tpm2', 'pem' ], default = 'auto', help='The format of the object to dump.\n') group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") group_parser.add_argument( '--output-prefix', help='The output prefix. ' + 'tpm2 blobs are output as suffix.priv and suffix.blob, pem outputs are suffix.pem\n') pinopts = group_parser.add_mutually_exclusive_group() pinopts.add_argument('--sopin', help='The Administrator pin.\n'), pinopts.add_argument('--userpin', help='The User pin.\n'), def __call__(self, args): object_id = args["id"] object_label = args["key_label"] token_label = args["label"] output_prefix = args['output_prefix'] if object_id and object_label: sys.exit("Cannot specify --id with --key-label") elif object_id and token_label: sys.exit("Cannot specify --id with --label") elif not object_id and not token_label and not object_label: sys.exit("Must specify --label and --key-label or --id") path = args['path'] is_so_pin = False pin = None sopin = args['sopin'] userpin = args['userpin'] if sopin: pin = args['sopin'] is_so_pin = True elif userpin: pin = args['userpin'] with Db(path) as db: if not object_id: token = db.gettoken(label=token_label) objects = db.getobjects(token['id']) for obj in objects: if AddCert.get_id_by_label(obj, object_label): object_id = obj['id'] break if not object_id: sys.exit(f'Could not find object with label "{object_label}" in token "{token_label}"') if not output_prefix: output_prefix = object_label Export.export(db, object_id, pin, is_so_pin, args['hierarchy_auth'], args['format'], output_prefix) tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/commandlets_store.py0000644000175100017510000001744214667615111016507 # SPDX-License-Identifier: BSD-2-Clause import argparse import os import sys import traceback import yaml # local imports from .command import Command from .command import commandlet from .db import Db from .utils import bytes_to_file from .utils import TemporaryDirectory from .utils import query_yes_no from .utils import create_primary from .tpm2 import Tpm2 @commandlet("init") class InitCommand(Command): ''' Initializes a tpm2-pkcs11 store ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): mg = group_parser.add_mutually_exclusive_group() # Keep the old --owner-auth kicking around for backwards compat # but hide it in the help output. mg.add_argument( '--hierarchy-auth', help='The authorization password for adding a primary object to the hierarchy.\n', default="") mg.add_argument( '--owner-auth', help=argparse.SUPPRESS, dest='hierarchy_auth', default="") group_parser.add_argument( '--primary-auth', help='Authorization value for existing primary key object, defaults to an empty auth value.', default="") exclusive_group = group_parser.add_mutually_exclusive_group() exclusive_group.add_argument( '--primary-handle', nargs='?', type=InitCommand.str_to_handle, action=InitCommand.make_action(primary=True), help='Use an existing primary key object, defaults to 0x81000001.') exclusive_group.add_argument( '--transient-parent', const='tpm2-tools-default', nargs='?', choices=[ t for t in Tpm2.TEMPLATES.keys() if t is not None ], help='use a transient primary object of a given template.') @staticmethod def str_to_handle(arg): try: return int(arg, 0) except ValueError: if not os.path.exists(arg): sys.exit('arg "%s" neither a handle nor esys handle file') else: return arg @staticmethod def make_action(**kwargs): class customAction(argparse.Action): def __call__(self, parser, args, values, option_string=None): args.__dict__.update(kwargs) setattr(args, self.dest, values) return customAction def __call__(self, args): use_existing_primary = 'primary' in args and args['primary'] path = args['path'] if not os.path.isdir(path): sys.exit("Specified path is not a directory, got: %s" % (path)) hierarchyauth = args['hierarchy_auth'] pobjauth = args['primary_auth'] # create the db with Db(path) as db: transient_parent = args['transient_parent'] shall_evict = False with TemporaryDirectory() as d: try: tpm2 = Tpm2(d) if not use_existing_primary: pobj_ctx = create_primary(tpm2, hierarchyauth, pobjauth, transient_parent) if not transient_parent: # Check if the default handle 0x81000001 is available handle = 0x81000001 handles_persistent = yaml.safe_load(tpm2.getcap('handles-persistent')) if handles_persistent and handle in handles_persistent: # Automatically find the first free handle handle = None pobj_ctx = tpm2.evictcontrol(hierarchyauth, pobj_ctx, handle) shall_evict = True else: # get the primary object auth value and convert it to hex if pobjauth is None: pobjauth = "" handle = args['primary_handle'] if args['primary_handle'] is not None else 0x81000001 # If we get a raw handle, capture the ESYS_TR serialized and # and verify that its persistent. # # TODO: with python bindings call esys_tr_from_public() over readpublic. # TODO: we need a sapi handle from esys tr to look into getcap to see if # its persistent. if isinstance(handle, int): (_, pobj_ctx) = tpm2.readpublic(handle) # verify handle is persistent output = tpm2.getcap('handles-persistent') y = yaml.safe_load(output) if handle not in y: sys.exit('Handle 0x%x is not persistent' % (handle)) else: pobj_ctx = handle y = { 'transient' : bool(transient_parent) } if transient_parent: y['template-name'] = args['transient_parent'] else: with open(pobj_ctx, 'rb') as f: y['esys-tr'] = bytes.hex(f.read()) pid = db.addprimary(y, pobjauth) d = { 'id' : pid, 'action' : "Added" if use_existing_primary else "Created" } print(yaml.safe_dump(d, default_flow_style=False)) except Exception as e: if shall_evict and pobj_ctx != None: tpm2.evictcontrol(hierarchyauth, pobj_ctx) traceback.print_exc(file=sys.stdout) sys.exit(e) @commandlet("destroy") class DestroyCommand(Command): ''' Destroys a tpm2-pkcs11 store ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--pid', type=int, help="The primary object id to remove.\n") group_parser.add_argument( '--hierarchy-auth', default="", help="The primary object id to remove.\n") def __call__(self, args): path = args['path'] pid = args['pid'] hierarchyauth = args['hierarchy_auth'] if not os.path.exists(path): os.mkdir(path) elif not os.path.isdir(path): sys.exit("Specified path is not a directory, got: %s" % (path)) proceed = query_yes_no( 'This will delete the primary object of id "%s" and all associated data from db under "%s"' % (pid, path)) if not proceed: sys.exit(0) # create the db with Db(path) as db: pobj = db.getprimary(pid) if pobj is None: sys.exit('Primary Object id "%s"not found' % pid) with TemporaryDirectory() as d: tpm2 = Tpm2(d) tr_file = bytes_to_file(pobj['handle'], d) db.rmprimary(pid) tpm2.evictcontrol(hierarchyauth, tr_file) @commandlet("dbup") class DbUp(Command): ''' Initializes a tpm2-pkcs11 store ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): pass def __call__(self, args): path = args['path'] # create the db with Db(path) as db: old_ver = db.version new_ver = db.VERSION y = { 'old' : old_ver, 'new' : new_ver, } print(yaml.safe_dump(y, default_flow_style=False)) tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/commandlets_token.py0000644000175100017510000005316714667615111016477 # SPDX-License-Identifier: BSD-2-Clause # python stdlib dependencies import binascii import io import sys # External dependencies import yaml # local imports from .command import Command from .command import commandlet from .db import Db from .utils import check_pss_signature from .utils import TemporaryDirectory from .utils import hash_pass from .utils import rand_hex_str from .utils import AESAuthUnwrapper from .utils import load_sealobject from .utils import str2bool from .utils import pkcs11_cko_to_str from .utils import pkcs11_ckk_to_str from .utils import get_pobject from .tpm2 import Tpm2 from .pkcs11t import * # noqa @commandlet("rmtoken") class RmTokenCommand(Command): ''' Removes a token from a tpm2-pkcs11 store ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--label', help='The profile label to remove.\n', required=True) def __call__(self, args): path = args['path'] label = args['label'] with Db(path) as db: token = db.gettoken(label) db.rmtoken(token['label']) @commandlet("verify") class VerifyCommand(Command): ''' Verifies the userpin and/or sopin for a given profile. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--sopin', help='The Administrator pin. This pin is used for object recovery.\n' ) group_parser.add_argument( '--userpin', help='The user pin. This pin is used for authentication for object use.\n' ) group_parser.add_argument( '--label', help='The label to verify.\n', required=True) group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") @staticmethod def verify(db, args): label = args['label'] token = db.gettoken(label) if token is None: sys.exit('No token labeled "%s"' % label) token_config = yaml.safe_load(io.StringIO(token['config'])) sopin = args['sopin'] userpin = args['userpin'] hierarchyauth = args['hierarchy_auth'] if userpin is None and sopin is None: # Use empty PIN if the token has an empty user PIN if token_config.get('empty-user-pin'): userpin = '' else: sys.exit('error: at least one of the arguments --sopin --userpin is required') verify_output = {} verify_output['label'] = label pobj = db.getprimary(token['pid']) sealobj = db.getsealobject(token['id']) wrappingkeyauth = None verify_output['config'] = token_config verify_output['pin'] = {} with TemporaryDirectory() as d: tpm2 = Tpm2(d) pobjauth = pobj['objauth'] pobj_handle = get_pobject(pobj, tpm2, hierarchyauth, d) if sopin != None: sosealctx = tpm2.load(pobj_handle, pobjauth, sealobj['sopriv'], sealobj['sopub']) # Unseal the wrapping key auth sosealauthsalt = sealobj['soauthsalt'] sosealauth = hash_pass(sopin, salt=sosealauthsalt) wrappingkeyauth = tpm2.unseal(sosealctx, sosealauth['hash']) verify_output['pin']['so'] = {'seal-auth' : sosealauth['hash'] } if userpin != None: usersealctx = tpm2.load(pobj_handle, pobjauth, sealobj['userpriv'], sealobj['userpub']) # Unseal the wrapping key auth usersealauthsalt = sealobj['userauthsalt'] usersealauth = hash_pass(userpin, salt=usersealauthsalt) wrappingkeyauth = tpm2.unseal(usersealctx, usersealauth['hash']) verify_output['pin']['user'] = {'seal-auth' : usersealauth['hash'] } verify_output['wrappingkey'] = { 'hex' : bytes.hex(wrappingkeyauth), } if userpin != None: verify_output['wrappingkey']['auth'] = usersealauth['hash'] if sopin != None: verify_output['wrappingkey']['soauth'] = sosealauth['hash'] wrapper = AESAuthUnwrapper(wrappingkeyauth) tobjs = db.gettertiary(token['id']) verify_output['objects'] = [] for tobj in tobjs: attrs = yaml.safe_load(tobj['attrs']) priv=None if CKA_TPM2_PRIV_BLOB in attrs: priv = binascii.unhexlify(attrs[CKA_TPM2_PRIV_BLOB]) pub = None if CKA_TPM2_PUB_BLOB in attrs: pub = binascii.unhexlify(attrs[CKA_TPM2_PUB_BLOB]) encauth = None if CKA_TPM2_OBJAUTH_ENC in attrs: encauth = binascii.unhexlify(attrs[CKA_TPM2_OBJAUTH_ENC]) tobjauth=None if encauth: encauth=encauth.decode() tpm2.load(pobj_handle, pobjauth, priv, pub) tobjauth = wrapper.unwrap(encauth).decode() verify_output['objects'].append({ 'id' : tobj['id'], 'auth' : tobjauth, 'encauth' : encauth }) yaml_dump = yaml.safe_dump(verify_output, default_flow_style=False) print(yaml_dump) def __call__(self, args): with Db(args['path']) as db: VerifyCommand.verify(db, args) @commandlet("addtoken") class AddTokenCommand(Command): ''' Adds an initialized token to a tpm2-pkcs11 store ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--pid', type=int, help='The primary object id to associate with this token.\n', required=True), group_parser.add_argument( '--sopin', help='The Administrator pin. This pin is used for object recovery.\n', required=True), group_parser.add_argument( '--userpin', help='The user pin. This pin is used for authentication for object use.\n', required=True), group_parser.add_argument( '--label', help='A unique label to identify the profile in use, must be unique.\n', required=True) group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") @staticmethod def do_token_init(db, path, args): userpin = args['userpin'] sopin = args['sopin'] label = args['label'] pid = args['pid'] hierarchyauth = args['hierarchy_auth'] # Verify pid is in db pobject = db.getprimary(pid) if not pobject: raise RuntimeError('No primary object id: %u' % (pid)) with TemporaryDirectory() as d: tpm2 = Tpm2(d) # generate a wrapping key to be sealed to the TPM. # AES 256 key is 32 bytes, or 64 hex chars. wrappingkey = rand_hex_str(64) # We generate one auth for the sosealobj and the usersealobj sosealauth = hash_pass(sopin) usersealauth = hash_pass(userpin) # Now we generate the two seal objects, using the sealauths as their # auth values and sealing the wrappingkey value to it. # soobject will be an AES key used for decrypting tertiary object # auth values. pobj_handle = get_pobject(pobject, tpm2, hierarchyauth, d) usersealpriv, usersealpub, _ = tpm2.create( pobj_handle, pobject['objauth'], usersealauth['hash'], seal=wrappingkey) sosealpriv, sosealpub, _ = tpm2.create( pobj_handle, pobject['objauth'], sosealauth['hash'], seal=wrappingkey) pss_sig_good = check_pss_signature(tpm2, pobj_handle, pobject['objauth']) # If this succeeds, we update the token table config = { 'token-init': True, 'pss-sigs-good' : pss_sig_good } if userpin == '': config['empty-user-pin'] = True tokid = db.addtoken(pobject['id'], config, label=label) # now we update the sealobject table with the tokid to seal objects mapping db.addsealobjects(tokid, usersealauth, usersealpriv, usersealpub, sosealauth, sosealpriv, sosealpub) @staticmethod def do_token_noninit(db, args): pid = args['pid'] hierarchyauth = args['hierarchy_auth'] with TemporaryDirectory() as d: tpm2 = Tpm2(d) pobject = db.getprimary(pid) pobjauth = pobject['objauth'] pobj_handle = get_pobject(pobject, tpm2, hierarchyauth, d) pss_sig_good = check_pss_signature(tpm2, pobj_handle, pobjauth) # If this succeeds, we update the token table config = { 'token-init': False, 'pss-sigs-good' : pss_sig_good } db.addtoken(pobject['id'], config) def __call__(self, args): path = args['path'] do_token_init = not args.get('no_init', False) with Db(path) as db: if do_token_init: AddTokenCommand.do_token_init(db, path, args) else: AddTokenCommand.do_token_noninit(db, args) @commandlet("addemptytoken") class AddEmptyTokenCommand(AddTokenCommand): ''' Adds an un-initialized token to a tpm2-pkcs11 store. ''' def generate_options(self, group_parser): group_parser.add_argument( '--pid', type=int, help='The primary object id to associate with this token.\n', required=True), group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") def __call__(self, args): args['no_init'] = True super(AddEmptyTokenCommand, self).__call__(args) @commandlet("changepin") class ChangePinCommand(Command): ''' Changes the userpin and/or sopin for a given token. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--user', choices=['so', 'user'], default='user', help='Which pin to change. Defaults to "user".\n') group_parser.add_argument( '--old', type=str, help='The old pin.\n') group_parser.add_argument( '--new', type=str, help='The new pin.\n', required=True) group_parser.add_argument( '--label', type=str, help='The label of the token.\n', required=True) group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") @staticmethod def changepin(db, tpm2, args): label = args['label'] is_so = args['user'] == 'so' oldpin = args['old'] newpin = args['new'] hierarchyauth = args['hierarchy_auth'] token = db.gettoken(label) token_config = yaml.safe_load(io.StringIO(token['config'])) if oldpin is None: if is_so: sys.exit('error: the SO PIN is missing, argument --old is required') # Use empty PIN if the token has an empty user PIN if token_config.get('empty-user-pin'): oldpin = '' else: sys.exit('error: the user PIN is missing, argument --old is required') pobjectid = token['pid'] pobject = db.getprimary(pobjectid) pobjauth = pobject['objauth'] with TemporaryDirectory() as d: pobj_handle = get_pobject(pobject, tpm2, hierarchyauth, d) sealctx, sealauth = load_sealobject(token, db, tpm2, pobj_handle, pobjauth, oldpin, is_so) newsealauth = hash_pass(newpin) # call tpm2_changeauth and get new private portion newsealpriv = tpm2.changeauth(pobj_handle, sealctx, sealauth, newsealauth['hash']) # update 'empty-user-pin' in a safe way: clear it before setting a # non-empty PIN and set it after setting an empty PIN if not is_so and newpin != '' and token_config.get('empty-user-pin'): del token_config['empty-user-pin'] db.updateconfig(token, token_config) # update the database db.updatepin(is_so, token, newsealauth, newsealpriv) if not is_so and newpin == '' and not token_config.get('empty-user-pin'): token_config['empty-user-pin'] = True db.updateconfig(token, token_config) def __call__(self, args): path = args['path'] with Db(path) as db: with TemporaryDirectory() as d: tpm2 = Tpm2(d) ChangePinCommand.changepin(db, tpm2, args) @commandlet("initpin") class InitPinCommand(Command): ''' Resets the userpin given a sopin for a given token. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--sopin', type=str, help='The current sopin.\n', required=True) group_parser.add_argument( '--userpin', type=str, help='The new user pin.\n', required=True) group_parser.add_argument( '--label', type=str, help='The label of the token.\n', required=True) group_parser.add_argument( '--hierarchy-auth', help='The authorization password for the owner hierarchy when using a token with a transient primary object\n', default="") @staticmethod def initpin(db, tpm2, args): label = args['label'] sopin = args['sopin'] newpin = args['userpin'] token = db.gettoken(label) token_config = yaml.safe_load(io.StringIO(token['config'])) # load and unseal the data from the SO seal object pobjectid = token['pid'] pobject = db.getprimary(pobjectid) pobjauth = pobject['objauth'] hierarchyauth = args['hierarchy_auth'] with TemporaryDirectory() as d: pobj_handle = get_pobject(pobject, tpm2, hierarchyauth, d) sealctx, sealauth = load_sealobject(token, db, tpm2, pobj_handle, pobjauth, sopin, True) wrappingkeyauth = tpm2.unseal(sealctx, sealauth) # call tpm2_create and create a new sealobject protected by the seal auth and sealing # the wrapping key auth value newsealauth = hash_pass(newpin) newsealpriv, newsealpub, _ = tpm2.create( pobj_handle, pobjauth, newsealauth['hash'], seal=wrappingkeyauth) # update 'empty-user-pin' in a safe way if newpin != '' and token_config.get('empty-user-pin'): del token_config['empty-user-pin'] db.updateconfig(token, token_config) # update the database db.updatepin(False, token, newsealauth, newsealpriv, newsealpub) if newpin == '' and not token_config.get('empty-user-pin'): token_config['empty-user-pin'] = True db.updateconfig(token, token_config) def __call__(self, args): path = args['path'] with Db(path) as db: with TemporaryDirectory() as d: tpm2 = Tpm2(d) InitPinCommand.initpin(db, tpm2, args) @staticmethod def _empty_validator(s): return s def _forbid_set_empty_user_pin(_): raise RuntimeError("'empty-user-pin' can only be set with changepin or initpin") @commandlet("config") class ConfigCommand(Command): ''' Manipulates and retrieves token configuration data. ''' _keys = { 'token-init' : str2bool, 'log-level' : _empty_validator.__func__, 'tcti' : _empty_validator.__func__, 'empty-user-pin': _forbid_set_empty_user_pin, } # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--key', type=str, help='The key to set, valid keys are: %s.\n' % self._keys.keys()) group_parser.add_argument( '--value', type=str, help='The value for the key.\n') group_parser.add_argument( '--label', type=str, help='The label of the token.\n', required=True) @classmethod def get_validator_for_key(cls, key): return cls._keys[key] @classmethod def config(cls, db, args): label = args['label'] key = args['key'] value = args['value'] token = db.gettoken(label) token_config = yaml.safe_load(io.StringIO(token['config'])) if not key and not value: yaml_tok_cconf = yaml.safe_dump(token_config, default_flow_style=False) print(yaml_tok_cconf) sys.exit(0) if not key and value: sys.exit("Cannot specify --value without a key") if key == 'log-level': print('WARN --key="log-level is deprecated', file=sys.stderr) # key has to be set here based on above logical check # throws an error if the key isn't known to the system validator = cls.get_validator_for_key(key) # no value, just key. Print the current value for key is set or empty if not set if not value: print("%s=%s" % (key, str(token_config[key] if key in token_config else ""))) sys.exit(0) # bitbucket log-level sets if key == 'log-level': print('WARN --key="log-level is ignored', file=sys.stderr) return v = validator(value) token_config[key] = v # update the database db.updateconfig(token, token_config) def __call__(self, args): path = args['path'] with Db(path) as db: ConfigCommand.config(db, args) @commandlet("listprimaries") class ListPrimaryCommand(Command): ''' Lists primary objects in a specified store. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): pass @staticmethod def list(db): output=[] primaries = db.getprimaries() for p in primaries: details = {'id': p['id']} details['config'] = yaml.safe_load(p['config']) output.append(details) if len(output): print(yaml.safe_dump(output, default_flow_style=False)) def __call__(self, args): path = args['path'] with Db(path) as db: ListPrimaryCommand.list(db) @commandlet("listtokens") class ListTokenCommand(Command): ''' Lists tokens in a specified store. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--pid', type=int, help='The primary object id to associate with this token.\n', required=True), @staticmethod def list(db, args): output = [] tokens = db.gettokens(args['pid']) for t in tokens: output.append({ 'id': t['id'], 'label': t['label'] }) if len(output): print(yaml.safe_dump(output, default_flow_style=False)) def __call__(self, args): path = args['path'] with Db(path) as db: ListTokenCommand.list(db, args) @commandlet("listobjects") class ListObjectsCommand(Command): ''' Lists Objects (keys, certificates, etc.) associated with a token. ''' # adhere to an interface # pylint: disable=no-self-use def generate_options(self, group_parser): group_parser.add_argument( '--label', type=str, help='The label of the token.\n', required=True) @staticmethod def list(db, args): output = [] token = db.gettoken(args['label']) objects = db.getobjects(token['id']) for o in objects: y = yaml.safe_load(o['attrs']) d = { 'id': o['id'], 'CKA_LABEL' : binascii.unhexlify(y[CKA_LABEL]).decode(), 'CKA_CLASS' : pkcs11_cko_to_str(y[CKA_CLASS]), } if CKA_ID in y: d['CKA_ID'] = y[CKA_ID], if CKA_KEY_TYPE in y: d['CKA_KEY_TYPE'] = pkcs11_ckk_to_str(y[CKA_KEY_TYPE]) output.append(d) if len(output): print(yaml.safe_dump(output, default_flow_style=False)) def __call__(self, args): path = args['path'] with Db(path) as db: ListObjectsCommand.list(db, args) tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/db.py0000644000175100017510000006027314667615111013352 # SPDX-License-Identifier: BSD-2-Clause import fcntl import io import os import sys import sqlite3 import textwrap import yaml from .pkcs11t import ( CKA_ALLOWED_MECHANISMS, CKA_CLASS, CKO_SECRET_KEY, CKO_PRIVATE_KEY, CKA_KEY_TYPE, CKM_AES_CBC_PAD, CKM_AES_CTR, CKK_AES, CKK_EC, CKM_ECDSA_SHA256, CKM_ECDSA_SHA384, CKM_ECDSA_SHA512 ) VERSION = 8 # # With Db() as db: # // do stuff # class Db(object): def __init__(self, dirpath): self._path = os.path.join(dirpath, "tpm2_pkcs11.sqlite3") def __enter__(self): self._conn = sqlite3.connect(self._path) self._conn.row_factory = sqlite3.Row self._conn.execute('PRAGMA foreign_keys = ON;') self._create() return self @staticmethod def _blobify(path): with open(path, 'rb') as f: ablob = f.read() return sqlite3.Binary(ablob) def gettoken(self, label=None, id=None): c = self._conn.cursor() if label != None: c.execute("SELECT * from tokens WHERE label=?", (label, )) elif id != None: c.execute("SELECT * from tokens WHERE id=?", (id, )) x = c.fetchone() if x is None: sys.exit('No token labeled "%s"' % label) return x def getsealobject(self, tokid): c = self._conn.cursor() c.execute("SELECT * from sealobjects WHERE tokid=?", (tokid, )) x = c.fetchone() return x def getprimaries(self): c = self._conn.cursor() c.execute("SELECT * from pobjects") x = c.fetchall() return x def gettokens(self, pid): c = self._conn.cursor() c.execute("SELECT * from tokens WHERE pid=?", (pid, )) x = c.fetchall() return x def getobjects(self, tokid): c = self._conn.cursor() c.execute("SELECT * from tobjects WHERE tokid=?", (tokid, )) x = c.fetchall() return x def rmtoken(self, label): # This works on the premise of a cascading delete tied by foreign # key relationships. self._conn.execute('DELETE from tokens WHERE label=?', (label, )) def getprimary(self, pid): c = self._conn.cursor() c.execute("SELECT * from pobjects WHERE id=?", (pid, )) x = c.fetchone() return x def rmprimary(self, pid): # This works on the premise of a cascading delete tied by foreign # key relationships. self._conn.execute('DELETE from pobjects WHERE id=?', (pid, )) def gettertiary(self, tokid): c = self._conn.cursor() c.execute("SELECT * from tobjects WHERE tokid=?", (tokid, )) x = c.fetchall() return x def getobject(self, tid): c = self._conn.cursor() c.execute("SELECT * from tobjects WHERE id=?", (tid, )) x = c.fetchone() return x def getpid_by_tokid(self, tokid): c = self._conn.cursor() c.execute("SELECT pid from tokens WHERE id=?", (tokid, )) x = c.fetchone() return x['pid'] def rmobject(self, tid): c = self._conn.cursor() c.execute("DELETE FROM tobjects WHERE id=?", (tid, )) def addtoken(self, pid, config, label=None): token = { # General Metadata 'pid': pid, 'config': yaml.dump(config, canonical=True) } if 'token-init=True' in token['config'] and label is None: raise RuntimeError('Expected label if token is to be initialized') if label: token['label'] = label columns = ', '.join(token.keys()) placeholders = ', '.join('?' * len(token)) sql = 'INSERT INTO tokens ({}) VALUES ({})'.format(columns, placeholders) c = self._conn.cursor() c.execute(sql, list(token.values())) return c.lastrowid def updateconfig(self, token, config): new_config = yaml.dump(config, canonical=True) sql = 'UPDATE tokens SET config=? WHERE id=?' values = (new_config, token['id']) c = self._conn.cursor() c.execute(sql, values) def addsealobjects(self, tokid, usersealauth, usersealpriv, usersealpub, sosealauth, sosealpriv, sosealpub): sealobjects = { # General Metadata 'tokid': tokid, 'userpriv': Db._blobify(usersealpriv), 'userpub': Db._blobify(usersealpub), 'sopriv': Db._blobify(sosealpriv), 'sopub': Db._blobify(sosealpub), 'userauthsalt': usersealauth['salt'], 'soauthsalt': sosealauth['salt'], } columns = ', '.join(sealobjects.keys()) placeholders = ', '.join('?' * len(sealobjects)) sql = 'INSERT INTO sealobjects ({}) VALUES ({})'.format(columns, placeholders) c = self._conn.cursor() c.execute(sql, list(sealobjects.values())) return c.lastrowid @staticmethod def addprimary_raw(cursor, tablename, config, objauth, hierarchy='o', pid=None): # Subordinate commands will need some of this data # when deriving subordinate objects, so pass it back pobject = { # General Metadata 'hierarchy': hierarchy, 'config': yaml.safe_dump(config, canonical=True), 'objauth': objauth, } if pid is not None: pobject['id'] = pid columns = ', '.join(pobject.keys()) placeholders = ', '.join('?' * len(pobject)) sql = 'INSERT INTO {} ({}) VALUES ({})'.format(tablename, columns, placeholders) cursor.execute(sql, list(pobject.values())) return cursor.lastrowid def addprimary(self, config, objauth, hierarchy='o'): c = self._conn.cursor() return self.addprimary_raw(c, 'pobjects', config, objauth, hierarchy) def addtertiary(self, tokid, pkcs11_object): tobject = { 'tokid': tokid, 'attrs': yaml.safe_dump(dict(pkcs11_object), canonical=True), } columns = ', '.join(tobject.keys()) placeholders = ', '.join('?' * len(tobject)) sql = 'INSERT INTO tobjects ({}) VALUES ({})'.format(columns, placeholders) c = self._conn.cursor() c.execute(sql, list(tobject.values())) return c.lastrowid @staticmethod def _updatetertiary(db, tid, attrs): c = db.cursor() attrs = yaml.safe_dump(attrs, canonical=True) values = [attrs, tid] sql = 'UPDATE tobjects SET attrs=? WHERE id=?' c.execute(sql, values) def updatetertiary(self, tid, attrs): self._updatetertiary(self._conn, tid, attrs) def updatepin(self, is_so, token, sealauth, sealpriv, sealpub=None): tokid = token['id'] c = self._conn.cursor() # TABLE sealobjects UPDATE # [user|so]priv TEXT NOT NULL, # [user|so]pub TEXT NOT NULL, # [user|so]authsalt TEXT NOT NULL, if sealpub: sql = 'UPDATE sealobjects SET {}authsalt=?, {}priv=?, {}pub=? WHERE id=?;'.format( * ['so' if is_so else 'user'] * 3) c.execute(sql, (sealauth['salt'], Db._blobify(sealpriv), Db._blobify(sealpub), tokid)) else: sql = 'UPDATE sealobjects SET {}authsalt=?, {}priv=? WHERE id=?;'.format( * ['so' if is_so else 'user'] * 2) c.execute(sql, (sealauth['salt'], Db._blobify(sealpriv), tokid)) def commit(self): self._conn.commit() def __exit__(self, exc_type, exc_value, traceback): if (self._conn): self._conn.commit() self._conn.close() def delete(self): try: os.remove(self._path) except OSError: pass def backup(self): con = self._conn dbpath = self._path + ".bak" if os.path.exists(dbpath): raise RuntimeError("Backup DB exists at {} not overwriting. " "Refusing to run".format(dbpath)) bck = sqlite3.connect(dbpath) con.backup(bck) return (bck, dbpath) def _update_on_2(self, dbbakcon): ''' Between version 1 and 2 of the DB the following changes need to be made: The existing rows: - userpub BLOB NOT NULL, - userpriv BLOB NOT NULL, - userauthsalt TEXT NOT NULL, All have the "NOT NULL" constarint removed, like so: userpub BLOB, userpriv BLOB, userauthsalt TEXT So we need to create a new table with this constraint removed, copy the data and move the table back ''' # Create a new table to copy data to that has the constraints removed s = textwrap.dedent(''' CREATE TABLE sealobjects_new2( id INTEGER PRIMARY KEY, tokid INTEGER NOT NULL, userpub BLOB, userpriv BLOB, userauthsalt TEXT, sopub BLOB NOT NULL, sopriv BLOB NOT NULL, soauthsalt TEXT NOT NULL, FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE ); ''') dbbakcon.execute(s) # copy the data s = textwrap.dedent(''' INSERT INTO sealobjects_new2 SELECT * FROM sealobjects; ''') dbbakcon.execute(s) # Drop the old table s = 'DROP TABLE sealobjects;' dbbakcon.execute(s) # Rename the new table to the correct table name s = 'ALTER TABLE sealobjects_new2 RENAME TO sealobjects;' dbbakcon.execute(s) # Add the triggers sql = [ textwrap.dedent(''' CREATE TRIGGER limit_tokens BEFORE INSERT ON tokens BEGIN SELECT CASE WHEN (SELECT COUNT (*) FROM tokens) >= 255 THEN RAISE(FAIL, "Maximum token count of 255 reached.") END; END; '''), textwrap.dedent(''' CREATE TRIGGER limit_tobjects BEFORE INSERT ON tobjects BEGIN SELECT CASE WHEN (SELECT COUNT (*) FROM tobjects) >= 16777215 THEN RAISE(FAIL, "Maximum object count of 16777215 reached.") END; END; ''') ] for s in sql: dbbakcon.execute(s) def _update_on_3(self, dbbakcon): dbbakcon.execute('DROP TRIGGER limit_tobjects;') def _update_on_4(self, dbbakcon): ''' Between version 3 and 1 of the DB the following changes need to be made: Table pobjects: - column handle of type blob was changes to config of type string The YAML config has the handle of the ESYS_TR blob as a hex string. So to perform the upgrade, the code needs to create a new db and copy everything over and generate the new config YAML as: ---- persistent: true esys-tr: bytes.hex(handle) ''' # Create a new table to copy data to s = textwrap.dedent(''' CREATE TABLE pobjects2 ( id INTEGER PRIMARY KEY, hierarchy TEXT NOT NULL, config TEXT NOT NULL, objauth TEXT NOT NULL ); ''') dbbakcon.execute(s) c = dbbakcon.cursor() c.execute('SELECT * from pobjects') old_pobjects = c.fetchall() # copy the data and take the old handle (ESYS_TR Blob) # and convert to a hexstring and store in the config. # add the pobject to the new table keep the rest of the values. # Note: All migrating pobjects are persistent so mark as such. for pobj in old_pobjects: pid = pobj['id'] blob = pobj['handle'] hexblob = bytes.hex(blob) config = { 'transient': False, 'esys-tr': hexblob } objauth = pobj['objauth'] hierarchy = pobj['hierarchy'] self.addprimary_raw(c, 'pobjects2', config, objauth, hierarchy, pid) # Drop the old table s = 'DROP TABLE pobjects;' dbbakcon.execute(s) # Rename the new table to the correct table name s = 'ALTER TABLE pobjects2 RENAME TO pobjects;' dbbakcon.execute(s) def _update_on_5(self, dbbakcon): ''' Between version 4 and 5 of the DB the following changes need to be made: Table tobjects: The YAML attributes need to include CKM_AES_CBC_PAD and CKM_AES_CTR in the CKM_ALLOWED_MECHANISMS list. ''' c = dbbakcon.cursor() c.execute('SELECT * from tobjects') tobjs = c.fetchall() for t in tobjs: attrs = yaml.safe_load(io.StringIO(t['attrs'])) # IF the object is definitely a SECRET KEY of AES and has # CKM_AES_CBC_PAD AND CKM_AES_CTR in allowed mechanisms, skip it. if CKA_CLASS not in attrs or \ attrs[CKA_CLASS] != CKO_SECRET_KEY or \ CKA_KEY_TYPE not in attrs or \ attrs[CKA_KEY_TYPE] != CKK_AES or \ CKA_ALLOWED_MECHANISMS not in attrs \ (CKM_AES_CBC_PAD in attrs[CKA_ALLOWED_MECHANISMS] \ and \ CKM_AES_CTR in attrs[CKA_ALLOWED_MECHANISMS]): continue # Is an AES KEY and needs CKM_AES_CBC_PAD if not CKM_AES_CBC_PAD in attrs[CKA_ALLOWED_MECHANISMS]: attrs[CKA_ALLOWED_MECHANISMS].append(CKM_AES_CBC_PAD) # Is an AES KEY and needs CKM_AES_CBC_PAD # This is a BUG that we add CBC_PAD twice, but we can't fix this # here and will have to do it on bump to version 6. if not CKM_AES_CTR in attrs[CKA_ALLOWED_MECHANISMS]: attrs[CKA_ALLOWED_MECHANISMS].append(CKM_AES_CBC_PAD) Db._updatetertiary(dbbakcon, t['id'], attrs) def _update_on_6(self, dbbakcon): ''' Between version 5 and 6 of the DB the following changes need to be made: Table tobjects: The YAML attributes need to include CKM_ECDSA_SHA256 and CKM_ECDSA_SHA384, CKM_ECDSA_SHA512 in the CKM_ALLOWED_MECHANISMS list. ''' c = dbbakcon.cursor() c.execute('SELECT * from tobjects') tobjs = c.fetchall() algs_to_add = set([ CKM_ECDSA_SHA256, CKM_ECDSA_SHA384, CKM_ECDSA_SHA512]) for t in tobjs: attrs = yaml.safe_load(io.StringIO(t['attrs'])) # Fix the duplicate add of CBC_PAD from version 4 -> 5 upgrade and # replace one with CBC_CTR if attrs[CKA_CLASS] == CKO_SECRET_KEY and \ attrs[CKA_KEY_TYPE] == CKK_AES: deduped_attrs = set(attrs[CKA_ALLOWED_MECHANISMS]) deduped_attrs.add(CKM_AES_CTR) attrs[CKA_ALLOWED_MECHANISMS] = list(deduped_attrs) Db._updatetertiary(dbbakcon, t['id'], attrs) continue # IF the object is definitely a PRIVATE_KEY of EC and needs # one or more of the missing ECDSA algorithms added if CKA_CLASS not in attrs or \ attrs[CKA_CLASS] != CKO_PRIVATE_KEY or \ CKA_KEY_TYPE not in attrs or \ attrs[CKA_KEY_TYPE] != CKK_EC: # It is EC Private Key allowed_mechs = set(attrs[CKA_ALLOWED_MECHANISMS] if CKA_ALLOWED_MECHANISMS in attrs else []) # Needs one or more algs? If not skip if algs_to_add.issubset(allowed_mechs): continue attrs[CKA_ALLOWED_MECHANISMS] = list(allowed_mechs | algs_to_add) Db._updatetertiary(dbbakcon, t['id'], attrs) def _update_on_7(self, dbbakcon): ''' Between version 6 and 7 of the DB the following changes need to be made: Table tobjects: Filter out possible 0 mechanisms from CKM_ALLOWED_MECHANISMS list due to previous bugs in db update code. ''' c = dbbakcon.cursor() c.execute('SELECT * from tobjects') tobjs = c.fetchall() for t in tobjs: attrs = yaml.safe_load(io.StringIO(t['attrs'])) # Fix the duplicate add of CBC_PAD from version 4 -> 5 upgrade and # replace one with CBC_CTR if CKA_KEY_TYPE not in attrs: continue cka_class = attrs[CKA_CLASS] cka_key_type = attrs[CKA_KEY_TYPE] if cka_class in [ CKO_SECRET_KEY, CKO_PRIVATE_KEY ] and \ cka_key_type in [ CKK_AES, CKK_EC ] and \ 0 in attrs[CKA_ALLOWED_MECHANISMS]: deduped_attrs = set(attrs[CKA_ALLOWED_MECHANISMS]) # we checked that 0 was in attrs. deduped_attrs.remove(0) attrs[CKA_ALLOWED_MECHANISMS] = list(deduped_attrs) Db._updatetertiary(dbbakcon, t['id'], attrs) def _update_on_8(self, dbbakcon): ''' Between version 7 and 8 of the DB the following changes need to be made: Table tobjects: The YAML attributes for a int sequence has to be a yaml sequence. ''' import ctypes import socket long_size = ctypes.sizeof(ctypes.c_ulong) c = dbbakcon.cursor() c.execute('SELECT * from tobjects') tobjs = c.fetchall() for t in tobjs: attrs = yaml.safe_load(io.StringIO(t['attrs'])) for attr in attrs: # The allowed mechanism attribute is a buffer of hexadecimal # written as a string instead of being a sequence of int if attr == CKA_ALLOWED_MECHANISMS and \ isinstance(attrs[attr], str): list_hexa = [socket.ntohl(int(attrs[attr][i:i+long_size], 16)) for i in range(0, len(attrs[attr]), long_size)] attrs[attr] = list_hexa Db._updatetertiary(dbbakcon, t['id'], attrs) def update_db(self, old_version, new_version=VERSION): # were doing the update, so make a backup to manipulate (dbbakcon, dbbakpath) = self.backup() dbbakcon.row_factory = sqlite3.Row try: for x in range(old_version, new_version): x = x + 1 getattr(self, '_update_on_{}'.format(x))(dbbakcon) sql = textwrap.dedent(''' REPLACE INTO schema (id, schema_version) VALUES (1, {version}); '''.format(version=new_version)) dbbakcon.execute(sql) except Exception as e: # Close the connection to backup dbbakcon.commit() dbbakcon.close() # unlink the backup os.unlink(dbbakpath) raise e # Close the connections self._conn.commit() self._conn.close() dbbakcon.commit() dbbakcon.close() # move old db to ".old" suffix olddbpath = self._path + ".old" os.rename(self._path, olddbpath) # move the backup to the normal dbpath os.rename(dbbakpath, self._path) # re-establish a connection self._conn = sqlite3.connect(self._path) self._conn.row_factory = sqlite3.Row def _get_version(self): c = self._conn.cursor() try: c.execute('select schema_version from schema') return c.fetchone()[0] except sqlite3.OperationalError: return 0 def db_init_new(self): c = self._conn.cursor() sql = [ textwrap.dedent(''' CREATE TABLE tokens( id INTEGER PRIMARY KEY, pid INTEGER NOT NULL, label TEXT UNIQUE, config TEXT NOT NULL, FOREIGN KEY (pid) REFERENCES pobjects(id) ON DELETE CASCADE ); '''), textwrap.dedent(''' CREATE TABLE sealobjects( id INTEGER PRIMARY KEY, tokid INTEGER NOT NULL, userpub BLOB, userpriv BLOB, userauthsalt TEXT, sopub BLOB NOT NULL, sopriv BLOB NOT NULL, soauthsalt TEXT NOT NULL, FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE ); '''), textwrap.dedent(''' CREATE TABLE pobjects( id INTEGER PRIMARY KEY, hierarchy TEXT NOT NULL, config TEXT NOT NULL, objauth TEXT NOT NULL ); '''), textwrap.dedent(''' CREATE TABLE tobjects( id INTEGER PRIMARY KEY, tokid INTEGER NOT NULL, attrs TEXT NOT NULL, FOREIGN KEY (tokid) REFERENCES tokens(id) ON DELETE CASCADE ); '''), textwrap.dedent(''' CREATE TABLE schema( id INTEGER PRIMARY KEY, schema_version INTEGER NOT NULL ); '''), textwrap.dedent(''' CREATE TRIGGER limit_tokens BEFORE INSERT ON tokens BEGIN SELECT CASE WHEN (SELECT COUNT (*) FROM tokens) >= 255 THEN RAISE(FAIL, "Maximum token count of 255 reached.") END; END; '''), textwrap.dedent(''' CREATE TRIGGER limit_tobjects BEFORE INSERT ON tobjects BEGIN SELECT CASE WHEN (SELECT COUNT (*) FROM tobjects) >= 16777215 THEN RAISE(FAIL, "Maximum object count of 16777215 reached.") END; END; '''), textwrap.dedent(''' REPLACE INTO schema (id, schema_version) VALUES (1, {version}); '''.format(version=VERSION)) ] for s in sql: c.execute(s) # TODO collapse object tables into one, since they are common besides type. # move sealobject metadata into token metadata table. # # Object types: # soseal # userseal # wrapping # secondary # tertiary # # NOTE: Update the DB Schema Version at the bottom if the db format changes! def _do_create(self): # perform an update if we need to try: old_version = self._get_version() if old_version == 0: self.db_init_new() self.version = VERSION self.VERSION = VERSION return False elif VERSION == old_version: self.version = old_version self.VERSION = old_version return False elif old_version > VERSION: raise RuntimeError("DB Version exceeds library version:" " {} > {}".format(old_version, VERSION)) else: self.version = old_version self.update_db(old_version, VERSION) self.VERSION = self._get_version() return True except Exception as e: sys.stderr.write('DB Upgrade failed: "{}"\n'.format(e)) raise e def _create(self): # create a lock from the db name plush .lock suffix lockpath = self._path+".lock" holds_lock = False fd = os.open(lockpath, os.O_CREAT|os.O_RDWR) try: fcntl.flock(fd, fcntl.LOCK_EX) holds_lock = True self._do_create() finally: # we always want unlink to occur os.unlink(lockpath) if holds_lock: fcntl.flock(fd, fcntl.LOCK_UN) os.close(fd) tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/objects.py0000644000175100017510000004624214667615111014416 # SPDX-License-Identifier: BSD-2-Clause import binascii import yaml # local imports from .utils import get_ec_params from .utils import asn1_format_ec_point_uncompressed from .utils import str2bytes from .pkcs11t import * # noqa class PKCS11Object(dict): def __init__(self, objclass, attrs, auth=None, tpm_priv=None, tpm_pub=None): super(PKCS11Object, self).__init__() attrs[CKA_CLASS] = objclass if auth is not None and tpm_priv: # hexencode the ENC obj auth string because str are hex encoded attrs[CKA_TPM2_OBJAUTH_ENC] = binascii.hexlify(str2bytes(auth)).decode() # # the priv/pub tpm objects are paths to where they are stored, so # read them and convert to hex # privhex=None if tpm_priv is not None: with open(tpm_priv, "rb") as f: privhex = binascii.hexlify(f.read()).decode() pubhex=None if tpm_pub is not None: with open(tpm_pub, "rb") as f: pubhex = binascii.hexlify(f.read()).decode() if pubhex is not None: attrs[CKA_TPM2_PUB_BLOB] = pubhex if privhex is not None: attrs[CKA_TPM2_PRIV_BLOB] = privhex self.update(attrs) def genmechs(self, tpm2): raise NotImplementedError() class PKCS11StorageObject(PKCS11Object): def __init__(self, objclass, attrs, auth=None, tpm_priv=None, tpm_pub=None): defpriv = objclass in [CKO_PRIVATE_KEY, CKO_SECRET_KEY] add = { CKA_TOKEN: True, CKA_PRIVATE: attrs[CKA_PRIVATE] if CKA_PRIVATE in attrs else defpriv, CKA_MODIFIABLE: False, CKA_LABEL: attrs[CKA_LABEL] if CKA_LABEL in attrs else '', CKA_COPYABLE: False, CKA_DESTROYABLE: True } attrs.update(add) super(PKCS11StorageObject, self).__init__(objclass, attrs, auth, tpm_priv, tpm_pub) class PKCS11CertificateObject(PKCS11StorageObject): def __init__(self, objtype, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_CERTIFICATE_TYPE: objtype, CKA_TRUSTED : False, CKA_CERTIFICATE_CATEGORY: attrs[CKA_CERTIFICATE_CATEGORY] if CKA_CERTIFICATE_CATEGORY in attrs else CK_CERTIFICATE_CATEGORY_UNSPECIFIED, CKA_CHECK_VALUE: attrs[CKA_CHECK_VALUE] } attrs.update(add) super(PKCS11CertificateObject, self).__init__(CKO_CERTIFICATE, attrs, auth, tpm_priv, tpm_pub) class PKCS11X509(PKCS11CertificateObject): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): super(PKCS11X509, self).__init__(CKC_X_509, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm2): # X509 objects do not have mechanisms pass class PKCS11Key(PKCS11StorageObject): def __init__(self, objclass, objtype, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { # type of key CKA_KEY_TYPE : objtype, # Key identifier for key (default empty) CKA_ID : attrs[CKA_ID] if CKA_ID in attrs else '', # Start date for the key (default empty) CKA_START_DATE: attrs[CKA_START_DATE] if CKA_START_DATE in attrs else '', # End date for the key (default empty) CKA_END_DATE: attrs[CKA_END_DATE] if CKA_END_DATE in attrs else '', # CK_TRUE if generated in TPM else FALSE CKA_LOCAL: attrs[CKA_LOCAL], # The mechanism used to generate the key CKA_KEY_GEN_MECHANISM: attrs[CKA_KEY_GEN_MECHANISM], # A list of mechanisms allowed to be used with this key # no default listed, but for now just make empty # this is later updated by gen_mech CKA_ALLOWED_MECHANISMS: attrs[CKA_ALLOWED_MECHANISMS] if CKA_ALLOWED_MECHANISMS in attrs else '', CKA_DERIVE: attrs[CKA_DERIVE] if CKA_DERIVE in attrs else False } attrs.update(add) super(PKCS11Key, self).__init__(objclass, attrs, auth, tpm_priv, tpm_pub) class PKCS11PublicKey(PKCS11Key): def __init__(self, objtype, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_SUBJECT: attrs[CKA_SUBJECT] if CKA_SUBJECT in attrs else '', CKA_ENCRYPT: attrs[CKA_ENCRYPT], CKA_VERIFY: attrs[CKA_VERIFY], CKA_VERIFY_RECOVER: False, CKA_WRAP: False, CKA_TRUSTED: False, CKA_WRAP_TEMPLATE: attrs[CKA_WRAP_TEMPLATE] if CKA_WRAP_TEMPLATE in attrs else '', # TODO generate CKA_PUBLIC_KEY_INFO: '' } attrs.update(add) super(PKCS11PublicKey, self).__init__(CKO_PUBLIC_KEY, objtype, attrs, auth, tpm_priv, tpm_pub) class PKCS11RSAPublicKey(PKCS11PublicKey): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_MODULUS_BITS: attrs[CKA_MODULUS_BITS], } attrs.update(add) super(PKCS11RSAPublicKey, self).__init__(CKK_RSA, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm): pubmech = PKCS11RSAPublicKey.rsa_gen_mechs_common(tpm) self.update({CKA_ALLOWED_MECHANISMS: pubmech}) @staticmethod def rsa_gen_mechs_common(tpm): capdata = tpm.getcap('algorithms') y = yaml.safe_load(capdata) # TPM's always support these mechs = [ CKM_RSA_X_509, CKM_RSA_PKCS_OAEP, CKM_RSA_PKCS, CKM_SHA256_RSA_PKCS, # Internally we can synthesize CKM_SHAXXX_RSA_PKCS # so just add them CKM_SHA384_RSA_PKCS, CKM_SHA512_RSA_PKCS, ] if 'rsapss' in y: l = [ CKM_RSA_PKCS_PSS, CKM_SHA1_RSA_PKCS_PSS, CKM_SHA256_RSA_PKCS_PSS, ] if 'sha384' in y: l.append(CKM_SHA384_RSA_PKCS_PSS) if 'sha512' in y: l.append(CKM_SHA512_RSA_PKCS_PSS) mechs.extend(l) return mechs class PKCS11ECPublicKey(PKCS11PublicKey): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_EC_POINT: attrs[CKA_EC_POINT], CKA_EC_PARAMS: attrs[CKA_EC_PARAMS], } attrs.update(add) super(PKCS11ECPublicKey, self).__init__(CKK_EC, attrs, auth, tpm_priv, tpm_pub) @staticmethod def ecc_gen_mechs_common(tpm): capdata = tpm.getcap('algorithms') y = yaml.safe_load(capdata) # TPM's always support these mechs = [ CKM_ECDSA, CKM_ECDSA_SHA1, CKM_ECDSA_SHA256 ] if 'sha384' in y: mechs.append(CKM_ECDSA_SHA384) if 'sha512' in y: mechs.append(CKM_ECDSA_SHA512) return mechs def genmechs(self, tpm): pubmech = PKCS11ECPublicKey.ecc_gen_mechs_common(tpm) self.update({CKA_ALLOWED_MECHANISMS: pubmech}) class PKCS11PrivateKey(PKCS11Key): def __init__(self, objtype, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_SENSITIVE: True, CKA_SUBJECT: attrs[CKA_SUBJECT] if CKA_SUBJECT in attrs else '', CKA_DECRYPT: attrs[CKA_DECRYPT], CKA_SIGN: attrs[CKA_SIGN], CKA_SIGN_RECOVER: False, CKA_UNWRAP: False, CKA_EXTRACTABLE: attrs[CKA_EXTRACTABLE], CKA_ALWAYS_SENSITIVE: attrs[CKA_ALWAYS_SENSITIVE], CKA_NEVER_EXTRACTABLE: attrs[CKA_NEVER_EXTRACTABLE], CKA_WRAP_WITH_TRUSTED: False, CKA_UNWRAP_TEMPLATE: attrs[CKA_UNWRAP_TEMPLATE] if CKA_UNWRAP_TEMPLATE in attrs else [], CKA_ALWAYS_AUTHENTICATE: attrs[CKA_ALWAYS_AUTHENTICATE] if CKA_ALWAYS_AUTHENTICATE in attrs else False, CKA_PUBLIC_KEY_INFO: '' } attrs.update(add) super(PKCS11PrivateKey, self).__init__(CKO_PRIVATE_KEY, objtype, attrs, auth, tpm_priv, tpm_pub) class PKCS11RSAPrivateKey(PKCS11PrivateKey): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_MODULUS: attrs[CKA_MODULUS], CKA_PUBLIC_EXPONENT: attrs [CKA_PUBLIC_EXPONENT], } attrs.update(add) super(PKCS11RSAPrivateKey, self).__init__(CKK_RSA, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm): privmech = PKCS11RSAPublicKey.rsa_gen_mechs_common(tpm) self.update({CKA_ALLOWED_MECHANISMS: privmech}) class PKCS11ECPrivateKey(PKCS11PrivateKey): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): add = { CKA_EC_POINT: attrs[CKA_EC_POINT], CKA_EC_PARAMS: attrs[CKA_EC_PARAMS], } attrs.update(add) super(PKCS11ECPrivateKey, self).__init__(CKK_EC, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm): privmech = PKCS11ECPublicKey.ecc_gen_mechs_common(tpm) self.update({CKA_ALLOWED_MECHANISMS: privmech}) class PKCS11SecretKey(PKCS11Key): def __init__(self, objtype, attrs, auth=None, tpm_priv=None, tpm_pub=None): # If a caller doesn't specify the attribute it matters what kind of key it is. HMAC # keys don't decrypt/encrypt they verify/sign, where as AES keys do the former. def _get_encdec(_a, value, defvalue): if _a in attrs: return attrs[_a] if objtype in [ CKK_SHA_1_HMAC, CKK_SHA256_HMAC, CKK_SHA384_HMAC, CKK_SHA512_HMAC ]: return value; return defvalue add = { CKA_SENSITIVE: True, CKA_ENCRYPT: _get_encdec(CKA_ENCRYPT, False, True), CKA_DECRYPT: _get_encdec(CKA_DECRYPT, False, True), CKA_SIGN: _get_encdec(CKA_SIGN, True, False), CKA_VERIFY: _get_encdec(CKA_VERIFY, True, False), CKA_WRAP: False, CKA_UNWRAP: False, CKA_EXTRACTABLE: attrs[CKA_EXTRACTABLE], CKA_ALWAYS_SENSITIVE: attrs[CKA_ALWAYS_SENSITIVE], CKA_NEVER_EXTRACTABLE: attrs[CKA_NEVER_EXTRACTABLE], # TODO Skipping CKA_CHECKVALUE CKA_WRAP_WITH_TRUSTED: False, CKA_TRUSTED: False, CKA_WRAP_TEMPLATE: attrs[CKA_WRAP_TEMPLATE] if CKA_WRAP_TEMPLATE in attrs else [], CKA_UNWRAP_TEMPLATE: '', # placate pkcs11 tool CKA_VALUE: '', CKA_VALUE_LEN: attrs[CKA_VALUE_LEN], } attrs.update(add) super(PKCS11SecretKey, self).__init__(CKO_SECRET_KEY, objtype, attrs, auth, tpm_priv, tpm_pub) class PKCS11AESKey(PKCS11SecretKey): def __init__(self, attrs, auth=None, tpm_priv=None, tpm_pub=None): super(PKCS11AESKey, self).__init__(CKK_AES, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm): capdata = tpm.getcap('algorithms') y = yaml.safe_load(capdata) mechs = [] if 'cbc' in y: mechs.append(CKM_AES_CBC) mechs.append(CKM_AES_CBC_PAD) if 'cfb' in y: mechs.append(CKM_AES_CFB128) if 'ecb' in y: mechs.append(CKM_AES_ECB) if 'ofb' in y: mechs.append(CKM_AES_OFB) if 'ctr' in y: mechs.append(CKM_AES_CTR) if len(mechs) == 0: raise RuntimeError('Cannot add AES key without TPM supported mechanisms') self.update({CKA_ALLOWED_MECHANISMS: mechs}) class PKCS11HMACKey(PKCS11SecretKey): def __init__(self, ckk_keytype, attrs, auth=None, tpm_priv=None, tpm_pub=None): super(PKCS11HMACKey, self).__init__(ckk_keytype, attrs, auth, tpm_priv, tpm_pub) def genmechs(self, tpm): ckk_to_ckm = { CKK_SHA_1_HMAC : CKM_SHA_1_HMAC, CKK_SHA256_HMAC : CKM_SHA256_HMAC, CKK_SHA384_HMAC : CKM_SHA384_HMAC, CKK_SHA512_HMAC : CKM_SHA512_HMAC } mechs = [] key_type = self[CKA_KEY_TYPE] if key_type == CKK_GENERIC_SECRET: capdata = tpm.getcap('algorithms') y = yaml.safe_load(capdata) if 'sha1' in y: mechs.append(CKM_SHA_1_HMAC) if 'sha256' in y: mechs.append(CKM_SHA256_HMAC) if 'sha384' in y: mechs.append(CKM_SHA384_HMAC) if 'sha512' in y: mechs.append(CKM_SHA512_HMAC) elif key_type in ckk_to_ckm: mechs.append(ckk_to_ckm[key_type]) else: raise RuntimeError(f'Cannot handle HMAC Key of CKA_KEY_TYPE: {key_type:#x}') if len(mechs) == 0: raise RuntimeError("Expected at least one supported mechanism, got none") self.update({CKA_ALLOWED_MECHANISMS: mechs}) def PKCS11ObjectFactory(public_yaml_data, tpm, auth, init_pubattrs, init_privattrs, tpm_pub, tpm_priv, override_keylen=None): objtype = public_yaml_data['type']['value'] tpmattrs=public_yaml_data['attributes']['value'].split('|') # if we need to support non-null schemes we need to map tpm2 alg to pkcs11 alg # and populate CKA_ALLOWED_MECHANISMS and skip calling genmechs() scheme = public_yaml_data['scheme']['value'] if 'scheme' in public_yaml_data else None if scheme != None: raise RuntimeError('Cannot map scheme to allowed mechanism, got: "{}"'.format(scheme)) pubkey=None privkey=None pubattrs = init_pubattrs if init_pubattrs else {} privattrs = init_privattrs if init_pubattrs else {} if objtype == 'rsa': exp = public_yaml_data['exponent'] if int(public_yaml_data['exponent']) != 0 else 65537 exp = '{0:X}'.format(exp) # if it's odd in len, pad it with a leading zero if len(exp) % 2: exp = '0{}'.format(exp) pubattrs[CKA_MODULUS] = public_yaml_data['rsa'] pubattrs[CKA_MODULUS_BITS] = public_yaml_data['bits'] pubattrs[CKA_PUBLIC_EXPONENT] = exp pubattrs[CKA_ENCRYPT] = 'sign' in tpmattrs pubattrs[CKA_VERIFY] = 'decrypt' in tpmattrs pubattrs[CKA_LOCAL] = 'sensitivedataorigin' in tpmattrs pubattrs[CKA_KEY_GEN_MECHANISM] = CKM_RSA_PKCS_KEY_PAIR_GEN privattrs[CKA_MODULUS] = pubattrs[CKA_MODULUS] privattrs[CKA_MODULUS_BITS] = pubattrs[CKA_MODULUS_BITS] privattrs[CKA_PUBLIC_EXPONENT] = pubattrs[CKA_PUBLIC_EXPONENT] privattrs[CKA_LOCAL] = pubattrs[CKA_LOCAL] privattrs[CKA_DECRYPT] = 'decrypt' in tpmattrs privattrs[CKA_SIGN] = 'sign' in tpmattrs privattrs[CKA_EXTRACTABLE] = not ('fixedtpm' in tpmattrs and 'fixedparent' in tpmattrs) privattrs[CKA_ALWAYS_SENSITIVE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_NEVER_EXTRACTABLE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_KEY_GEN_MECHANISM] = CKM_RSA_PKCS_KEY_PAIR_GEN pubkey = PKCS11RSAPublicKey(pubattrs, auth, tpm_pub=tpm_pub) privkey = PKCS11RSAPrivateKey(privattrs, auth, tpm_pub=tpm_pub, tpm_priv=tpm_priv) elif objtype == 'ecc': curveid = public_yaml_data['curve-id']['value'] ecparams = get_ec_params(curveid) ecpoint = asn1_format_ec_point_uncompressed(public_yaml_data['x'], public_yaml_data['y']) pubattrs[CKA_EC_PARAMS] = ecparams pubattrs[CKA_EC_POINT] = ecpoint pubattrs[CKA_ENCRYPT] = 'sign' in tpmattrs pubattrs[CKA_VERIFY] = 'decrypt' in tpmattrs pubattrs[CKA_LOCAL] = 'sensitivedataorigin' in tpmattrs pubattrs[CKA_KEY_GEN_MECHANISM] = CKM_EC_KEY_PAIR_GEN privattrs[CKA_LOCAL] = pubattrs[CKA_LOCAL] privattrs[CKA_DECRYPT] = 'decrypt' in tpmattrs privattrs[CKA_SIGN] = 'sign' in tpmattrs privattrs[CKA_EXTRACTABLE] = not ('fixedtpm' in tpmattrs and 'fixedparent' in tpmattrs) privattrs[CKA_ALWAYS_SENSITIVE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_NEVER_EXTRACTABLE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_EC_PARAMS] = pubattrs[CKA_EC_PARAMS] = ecparams privattrs[CKA_EC_POINT] = pubattrs[CKA_EC_POINT] = ecpoint privattrs[CKA_KEY_GEN_MECHANISM] = CKM_EC_KEY_PAIR_GEN pubkey = PKCS11ECPublicKey(pubattrs, auth, tpm_pub=tpm_pub) privkey = PKCS11ECPrivateKey(privattrs, auth, tpm_pub=tpm_pub, tpm_priv=tpm_priv) elif objtype == 'symcipher': symalg = public_yaml_data['sym-alg']['value'] if symalg != 'aes': raise RuntimeError('Cannot handle sym-alg: {}'.format(symalg)) privattrs[CKA_VALUE_LEN] = public_yaml_data['sym-keybits'] // 8 privattrs[CKA_KEY_GEN_MECHANISM] = CKM_AES_KEY_GEN privattrs[CKA_ENCRYPT] = 'sign' in tpmattrs privattrs[CKA_DECRYPT] = 'decrypt' in tpmattrs privattrs[CKA_EXTRACTABLE] = not ('fixedtpm' in tpmattrs and 'fixedparent' in tpmattrs) privattrs[CKA_LOCAL] = 'sensitivedataorigin' in tpmattrs privattrs[CKA_ALWAYS_SENSITIVE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_NEVER_EXTRACTABLE] = not privattrs[CKA_EXTRACTABLE] privkey = PKCS11AESKey(privattrs, auth, tpm_pub=tpm_pub, tpm_priv=tpm_priv) elif objtype == 'keyedhash': alg = public_yaml_data['algorithm']['value'] # YAML converts the TPM2_ALG_NULL string of "null" to None, so we need to check against # raw to see if it is TPM2_ALG_NULL. If it is, we just ignore it, as we can use any # supported HASH alg. if alg != 'hmac': if public_yaml_data['algorithm']['raw'] == 0x10: hashalg = 'null' else: raise RuntimeError('Cannot handle algorithm: {}'.format(alg)) else: hashalg = public_yaml_data['hash-alg']['value'] # Their is no PKCS11 metadata for genmechs to reliably determine what the allowed mechanisms are, # since inferring keytype from bytes is a best guess, set up the mechanisms now # since it's not TPM dependent. The allowed mechs are intentionally a list for future expansion. # The keygen mechanism should always go first in the list metadata = { 'sha1' : { 'keybytes' : 20, 'keytype' : CKK_SHA_1_HMAC }, 'sha256' : { 'keybytes' : 32, 'keytype' : CKK_SHA256_HMAC }, 'sha384' : { 'keybytes' : 48, 'keytype' : CKK_SHA384_HMAC }, 'sha512' : { 'keybytes' : 64, 'keytype' : CKK_SHA512_HMAC }, 'null' : { 'keybytes' : override_keylen, 'keytype' : CKK_GENERIC_SECRET } } if hashalg not in metadata: raise RuntimeError('Cannot handle hash algorithm: {}'.format(hashalg)) privattrs[CKA_VALUE_LEN] = metadata[hashalg]['keybytes'] privattrs[CKA_SIGN] = 'sign' in tpmattrs privattrs[CKA_VERIFY] = True privattrs[CKA_EXTRACTABLE] = not ('fixedtpm' in tpmattrs and 'fixedparent' in tpmattrs) privattrs[CKA_LOCAL] = 'sensitivedataorigin' in tpmattrs privattrs[CKA_ALWAYS_SENSITIVE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_NEVER_EXTRACTABLE] = not privattrs[CKA_EXTRACTABLE] privattrs[CKA_KEY_GEN_MECHANISM] = CKM_GENERIC_SECRET_KEY_GEN privkey = PKCS11HMACKey(metadata[hashalg]['keytype'], privattrs, auth, tpm_pub=tpm_pub, tpm_priv=tpm_priv) else: raise RuntimeError("Cannot handle keytype: {}".format(public_yaml_data['type'])) privkey.genmechs(tpm) if pubkey: pubkey.genmechs(tpm) return {'private' : privkey, 'public': pubkey } tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/pkcs11t.py0000644000175100017510000000537614667615111014256 # SPDX-License-Identifier: BSD-2-Clause # These CK* values come from the PKCS#11 spec CKO_CERTIFICATE = 0x1 CKO_PUBLIC_KEY = 0x2 CKO_PRIVATE_KEY = 0x3 CKO_SECRET_KEY = 0x4 CKK_RSA = 0x0 CKK_EC = 0x3 CKK_GENERIC_SECRET = 0x10 CKK_AES = 0x1f CKK_SHA_1_HMAC = 0x28 CKK_SHA256_HMAC=0x2b CKK_SHA384_HMAC=0x2c CKK_SHA512_HMAC=0x2d CKM_RSA_PKCS_KEY_PAIR_GEN = 0x0 CKM_RSA_PKCS = 0x1 CKM_RSA_X_509 = 0x3 CKM_SHA1_RSA_PKCS = 0x6 CKM_RSA_PKCS_OAEP = 0x9 CKM_RSA_PKCS_PSS = 0xD CKM_SHA1_RSA_PKCS_PSS = 0xE CKM_SHA256_RSA_PKCS = 0x40 CKM_SHA384_RSA_PKCS = 0x41 CKM_SHA512_RSA_PKCS = 0x42 CKM_SHA256_RSA_PKCS_PSS = 0x43 CKM_SHA384_RSA_PKCS_PSS = 0x44 CKM_SHA512_RSA_PKCS_PSS = 0x45 CKM_GENERIC_SECRET_KEY_GEN = 0x350 CKM_AES_CBC = 0x1082 CKM_AES_CBC_PAD = 0x1085 CKM_EC_KEY_PAIR_GEN = 0x1040 CKM_ECDSA = 0x1041 CKM_ECDSA_SHA1 = 0x1042 CKM_ECDSA_SHA256 = 0x1044 CKM_ECDSA_SHA384 = 0x1045 CKM_ECDSA_SHA512 = 0x1046 CKM_AES_KEY_GEN = 0x1080 CKM_AES_ECB = 0x1081 CKM_AES_CTR = 0x1086 CKM_SHA_1 = 0x220 CKG_MGF1_SHA1 = 0x1 CKM_AES_OFB = 0x2104 CKM_AES_CFB128 = 0x2107 CKM_SHA_1_HMAC = 0x221 CKM_SHA256_HMAC = 0x251 CKM_SHA384_HMAC = 0x261 CKM_SHA512_HMAC = 0x271 CKG_MGF1_SHA256 = 0x2 CKA_CLASS = 0x0 CKA_TOKEN = 0x1 CKA_PRIVATE = 0x2 CKA_LABEL = 0x3 CKA_VALUE = 0x11 CKA_CERTIFICATE_TYPE = 0x80 CKA_ISSUER = 0x81 CKA_SERIAL_NUMBER = 0x82 CKA_TRUSTED = 0x86 CKA_CERTIFICATE_CATEGORY = 0x87 CKA_JAVA_MIDP_SECURITY_DOMAIN = 0x88 CKA_URL = 0x89 CKA_CHECK_VALUE = 0x90 CKA_HASH_OF_SUBJECT_PUBLIC_KEY = 0x8A CKA_HASH_OF_ISSUER_PUBLIC_KEY = 0x8B CKA_NAME_HASH_ALGORITHM = 0x8C CKA_KEY_TYPE = 0x100 CKA_SUBJECT = 0x101 CKA_ID = 0x102 CKA_SENSITIVE = 0x103 CKA_ENCRYPT = 0x104 CKA_DECRYPT = 0x105 CKA_WRAP = 0x106 CKA_UNWRAP = 0x107 CKA_SIGN = 0x108 CKA_SIGN_RECOVER = 0x109 CKA_VERIFY = 0x10A CKA_VERIFY_RECOVER = 0x10B CKA_DERIVE = 0x10C CKA_START_DATE = 0x110 CKA_END_DATE = 0x111 CKA_MODULUS = 0x120 CKA_MODULUS_BITS = 0x121 CKA_PUBLIC_EXPONENT = 0x122 CKA_PUBLIC_KEY_INFO = 0x129 CKA_VALUE_LEN = 0x161 CKA_EXTRACTABLE = 0x162 CKA_LOCAL = 0x163 CKA_NEVER_EXTRACTABLE = 0x164 CKA_ALWAYS_SENSITIVE = 0x165 CKA_KEY_GEN_MECHANISM = 0x166 CKA_MODIFIABLE = 0x170 CKA_COPYABLE = 0x171 CKA_DESTROYABLE = 0x172 CKA_EC_PARAMS = 0x180 CKA_EC_POINT = 0x181 CKA_ALWAYS_AUTHENTICATE = 0x202 CKA_WRAP_WITH_TRUSTED = 0x210 CKA_WRAP_TEMPLATE=0x40000211 CKA_UNWRAP_TEMPLATE=0x40000212 CKA_ALLOWED_MECHANISMS=0x40000600 CKA_VENDOR_DEFINED=0x80000000 CKA_VENDOR_TPM2_DEFINED=0x0F000000 # We will allow these to be accessed, but the values are not stable CKA_TPM2_OBJAUTH_ENC=CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x1 CKA_TPM2_PUB_BLOB=CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x2 CKA_TPM2_PRIV_BLOB=CKA_VENDOR_DEFINED|CKA_VENDOR_TPM2_DEFINED|0x3 CKC_X_509 = 0 CK_SECURITY_DOMAIN_UNSPECIFIED = 0x0 CK_CERTIFICATE_CATEGORY_UNSPECIFIED = 0x0 tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/tpm2.py0000644000175100017510000003157514667615111013652 # SPDX-License-Identifier: BSD-2-Clause from __future__ import print_function import os import sys from tempfile import mkstemp, NamedTemporaryFile import uuid from subprocess import Popen, PIPE from cryptography.hazmat.primitives import serialization from cryptography.hazmat.primitives.asymmetric.ec import EllipticCurvePrivateKey from cryptography.hazmat.primitives.asymmetric.rsa import RSAPrivateKey from .utils import str2bytes class Tpm2(object): TPM2_RH_OWNER = 0x40000001 TPM2_HR_SHIFT = 24 TPM2_HT_PERSISTENT = 0x81 _TSS2_DEFAULT_ATTRS = "userwithauth|restricted|decrypt|noda|fixedtpm" \ "|fixedparent|sensitivedataorigin" ALGS = [ 'rsa1024', 'rsa2048', 'rsa3072', 'rsa4096', 'aes128', 'aes256', 'ecc224', 'ecc256', 'ecc384', 'ecc521', 'hmac:sha1', 'hmac:sha256', 'hmac:sha384', 'hmac:sha512' ] TEMPLATES = { # tpm2-tools default RSA2048 primary, same as tss2-engine-key None : { 'alg' : None, 'attrs' : None }, # tpm2-tools key compatible with RSA 2048, same as None 'tpm2-tools-default' : { 'alg' : None, 'attrs' : None }, # tpm2-tools key compatible with EC P256 'tpm2-tools-ecc-default' : { 'alg' : 'ecc', 'attrs' : None }, # tss2-engine key 'tss2-engine-key' : { 'alg' : None, 'attrs' : _TSS2_DEFAULT_ATTRS } } def __init__(self, tmp): self._tmp = tmp @property def tmpdir(self): return self._tmp def createprimary(self, hierarchyauth=None, objauth=None, alg=None, attrs=None,): ctx = os.path.join(self._tmp, "context.out") cmd = [ 'tpm2_createprimary', '-c', ctx, '-g', 'sha256' ] if alg is None: alg = 'rsa' cmd.extend(['-G', alg]) if objauth and len(objauth) > 0: cmd.extend(['-p', objauth]) if hierarchyauth and len(hierarchyauth) > 0: cmd.extend(['-P', hierarchyauth]) if attrs is not None: cmd.extend(['-a', attrs]) p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) _, stderr = p.communicate() if (p.wait()): raise RuntimeError("Could not execute tpm2_createprimary: %s" % stderr) return ctx def evictcontrol(self, hierarchyauth, ctx, handle=None): tr_file = os.path.join(self._tmp, "primary.handle") cmd = ['tpm2_evictcontrol', '-c', str(ctx), '-o', tr_file] if hierarchyauth and len(hierarchyauth) > 0: cmd.extend(['-P', hierarchyauth]) if handle: cmd.append(str(handle)) p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) stdout, stderr = p.communicate() if (p.wait()): raise RuntimeError("Could not execute tpm2_evictcontrol: %s" % stderr) return tr_file def readpublic(self, handle, get_tr_file=True): tr_file = os.path.join(self._tmp, "primary.handle") cmd = ['tpm2_readpublic', '-c', str(handle)] if get_tr_file: cmd.extend(['-t', tr_file]) p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) stdout, stderr = p.communicate() if (p.wait()): raise RuntimeError("Could not execute tpm2_readpublic: %s" % stderr) return (stdout, tr_file if get_tr_file else None) def load(self, pctx, pauth, priv, pub): if priv != None and not isinstance(priv, str): sealprivf = NamedTemporaryFile() sealprivf.write(priv) sealprivf.flush() priv = sealprivf.name if not isinstance(pub, str): sealpubf = NamedTemporaryFile() sealpubf.write(pub) sealpubf.flush() pub = sealpubf.name ctx = os.path.join(self._tmp, uuid.uuid4().hex + '.out') #tpm2_load -C $file_primary_key_ctx -u $file_load_key_pub -r $file_load_key_priv -n $file_load_key_name -c $file_load_key_ctx if priv != None: cmd = [ 'tpm2_load', '-C', str(pctx), '-u', pub, '-r', priv, '-n', '/dev/null', '-c', ctx ] if pauth is not None: cmd.extend(['-P', pauth]) else: cmd = ['tpm2_loadexternal', '-u', pub, '-c', ctx] p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) _, stderr = p.communicate() rc = p.wait() if rc: raise RuntimeError("Could not execute tpm2_load: %s" % stderr) return ctx def unseal(self, ctx, auth): # tpm2_unseal -Q -c $file_unseal_key_ctx cmd = ['tpm2_unseal', '-c', ctx, '-p', auth] p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) stdout, stderr = p.communicate() rc = p.wait() if rc: raise RuntimeError("Could not execute tpm2_unseal: %s" % stderr) return stdout def _encryptdecrypt(self, ctx, auth, data, decrypt=False): cmd = ['tpm2_encryptdecrypt', '-c', ctx, '-p', auth] if decrypt: cmd.extend(['-d']) p = Popen(cmd, stdout=PIPE, stderr=PIPE, stdin=PIPE, env=os.environ) stdout, stderr = p.communicate(input=data) rc = p.wait() if rc: raise RuntimeError("Could not execute tpm2_encryptdecrypt: %s" % stderr) return stdout def encrypt(self, ctx, auth, data): return self._encryptdecrypt(ctx, auth, data) def decrypt(self, ctx, auth, data): return self._encryptdecrypt(ctx, auth, data, decrypt=True) def create(self, phandle, pauth=None, objauth=None, objattrs=None, seal=None, alg=None): # tpm2_create -Q -C context.out -g $gAlg -G $GAlg -u key.pub -r key.priv privfd, priv = mkstemp(prefix='', suffix='.priv', dir=self._tmp) os.close(privfd) pubfd, pub = mkstemp(prefix='', suffix='.pub', dir=self._tmp) os.close(pubfd) cmd = ['tpm2_create', '-C', str(phandle), '-u', pub, '-r', priv] if pauth and len(pauth) > 0: cmd.extend(['-P', '%s' % pauth]) if objauth and len(objauth) > 0: cmd.extend(['-p', objauth]) if objattrs != None: cmd.extend(['-a', objattrs]) if seal != None: cmd.extend(['-i', '-']) if alg != None: cmd.extend(['-G', alg]) p = Popen(cmd, stdout=PIPE, stderr=PIPE, stdin=PIPE, env=os.environ) stdout, stderr = p.communicate(input=str2bytes(seal)) rc = p.wait() if (rc != 0): os.remove(pub) os.remove(priv) raise RuntimeError("Could not execute tpm2_create: %s" % str(stderr)) return priv, pub, stdout def getcap(self, cap): # tpm2_getcap -Q -l $cap cmd = ['tpm2_getcap', cap] p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) stdout, stderr = p.communicate() rc = p.wait() if rc: raise RuntimeError("Could not execute tpm2_getcap: %s" % stderr) return stdout def importkey(self, phandle, pauth, objauth, privkey, objattrs=None, seal=None, alg=None, passin=None): if privkey and len(privkey) > 0: exists = os.path.isfile(privkey) if not exists: raise RuntimeError("File '%s' path is invalid or is missing" % privkey) else: sys.exit("Invalid file path") privfd, priv = mkstemp(prefix='', suffix='.priv', dir=self._tmp) os.close(privfd) pubfd, pub = mkstemp(prefix='', suffix='.pub', dir=self._tmp) os.close(pubfd) # If the key is an OpenSSH key, convert it to PEM format pem_priv_name = None with open(privkey, "rb") as f: privey_data = f.read() if privey_data.startswith(b'-----BEGIN OPENSSH PRIVATE KEY-----'): if passin: # Parse passin to extract the password if passin.startswith('env:'): password_bytes = os.getenvb(passin[4:].encode()) elif passin.startswith('file:'): with open(passin[5:], 'rb') as f: password_bytes = f.read() elif passin.startswith('pass:'): password_bytes = passin[5:].encode() else: raise NotImplementedError("Unsupported OpenSSL password input {} to read OpenSSH key".format( repr(passin))) enc_alg = serialization.BestAvailableEncryption(password_bytes) else: password_bytes = None enc_alg = serialization.NoEncryption() ssh_key = serialization.load_ssh_private_key(privey_data, password=password_bytes) if alg is None: # Find the algorithm if isinstance(ssh_key, EllipticCurvePrivateKey): alg = 'ecc' elif isinstance(ssh_key, RSAPrivateKey): alg = 'rsa' else: raise NotImplementedError("Unsupported SSH key type {}".format(type(ssh_key))) pem_key = ssh_key.private_bytes( encoding=serialization.Encoding.PEM, format=serialization.PrivateFormat.TraditionalOpenSSL, encryption_algorithm=enc_alg) pem_priv_fd, pem_priv_name = mkstemp(prefix='', suffix='.privpem', dir=self._tmp) try: os.write(pem_priv_fd, pem_key) finally: os.close(pem_priv_fd) privkey = pem_priv_name elif alg is None: # Guess the key algorithm from the PEM header if privey_data.startswith(b'-----BEGIN EC PARAMETERS-----'): alg = 'ecc' elif privey_data.startswith(b'-----BEGIN EC PRIVATE KEY-----'): alg = 'ecc' elif privey_data.startswith(b'-----BEGIN RSA PRIVATE KEY-----'): alg = 'rsa' else: raise RuntimeError("Unable to detect key type, use --algorithm to specify it") parent_path = str(phandle) cmd = [ 'tpm2_import', '-V', '-C', parent_path, '-i', privkey, '-u', pub, '-r', priv ] if pauth and len(pauth) > 0: cmd.extend(['-P', pauth]) if objauth and len(objauth) > 0: cmd.extend(['-p', objauth]) if objattrs != None: cmd.extend(['-a', objattrs]) if seal != None: cmd.extend(['-i', '-']) if alg != None: cmd.extend(['-G', alg]) if passin is not None: cmd.extend(['--passin', passin]) p = Popen(cmd, stdout=PIPE, stderr=PIPE, stdin=PIPE, env=os.environ) stdout, stderr = p.communicate(input=seal) rc = p.wait() if pem_priv_name is not None: os.remove(pem_priv_name) if (rc != 0): os.remove(pub) os.remove(priv) print("command: %s" % str(" ".join(cmd))) raise RuntimeError("Could not execute tpm2_import: %s" % stderr) return priv, pub, stdout def changeauth(self, pctx, objctx, oldobjauth, newobjauth): newpriv = os.path.join(self._tmp, uuid.uuid4().hex + '.priv') cmd = [ 'tpm2_changeauth', '-C', str(pctx), '-c', str(objctx), '-p', oldobjauth, '-r', newpriv, newobjauth, ] p = Popen(cmd, stdout=PIPE, stderr=PIPE, env=os.environ) _, stderr = p.communicate() rc = p.wait() if rc: raise RuntimeError("Could not execute tpm2_changeauth: %s" % stderr) return newpriv def sign(self, ctx, halg, scheme, message): sig = os.path.join(self._tmp, uuid.uuid4().hex + '.dat') cmd = [ 'tpm2_sign', '-c', str(ctx), '-g', halg, '-s', scheme, '-f', 'plain', '-o', sig ] p = Popen(cmd, stdout=PIPE, stderr=PIPE, stdin=PIPE, env=os.environ) stdout, stderr = p.communicate(input=str2bytes(message)) rc = p.wait() if (rc != 0): print("command: %s" % str(" ".join(cmd))) raise RuntimeError("Could not execute tpm2_import: %s" % str(stderr)) data = open(sig, "rb").read() os.unlink(sig) return data tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/tpm2_ptool.py0000644000175100017510000000231114667615111015051 # SPDX-License-Identifier: BSD-2-Clause from .command import commandlet # These imports are required to add the commandlet even though they appear unused # Store level commands from .commandlets_store import InitCommand # pylint: disable=unused-import # noqa from .commandlets_store import DestroyCommand # pylint: disable=unused-import # noqa # Token Level Commands from .commandlets_token import AddTokenCommand # pylint: disable=unused-import # noqa from .commandlets_token import AddEmptyTokenCommand # pylint: disable=unused-import # noqa from .commandlets_token import RmTokenCommand # pylint: disable=unused-import # noqa from .commandlets_token import VerifyCommand # pylint: disable=unused-import # noqa from .commandlets_token import InitPinCommand # pylint: disable=unused-import # noqa from .commandlets_token import ChangePinCommand # pylint: disable=unused-import # noqa from .commandlets_keys import AddKeyCommand # pylint: disable=unused-import # noqa from .commandlets_keys import ImportCommand # pylint: disable=unused-import # noqa def main(): '''The main entry point.''' commandlet.init('A tool for manipulating the tpm2-pkcs11 database') if __name__ == '__main__': main() tpm2-pkcs11-1.9.1/tools/tpm2_pkcs11/utils.py0000644000175100017510000004066414667615111014127 # SPDX-License-Identifier: BSD-2-Clause import binascii import hashlib import io import os import argparse import sys import shutil import yaml from tempfile import mkdtemp from cryptography import exceptions as crypto_exceptions from cryptography.hazmat.backends import default_backend from cryptography.hazmat.primitives.ciphers import (Cipher, algorithms, modes) from cryptography.hazmat.primitives.asymmetric import (rsa, padding) from cryptography.hazmat.primitives import hashes from pyasn1_modules import pem, rfc2459 from pyasn1.codec.der import decoder as derdecoder, encoder as derencoder from tpm2_pytss.ESAPI import ESAPI from tpm2_pytss.tsskey import TSSPrivKey from tpm2_pytss.constants import ( TPM2_RH, ESYS_TR ) from tpm2_pytss.types import ( TPM2B_PUBLIC, TPM2B_PRIVATE, ) from .pkcs11t import * # noqa def str2bytes(s): if isinstance(s, str): return s.encode() return s def bytes_to_file(bites, tmpdir): path = os.path.join(tmpdir, "primary.handle") open(path, 'w+b').write(bites) return path def rand_hex_str(num=32): if num % 2: raise RuntimeError("Expected even number of bytes, got: %u" % num) return binascii.hexlify(os.urandom(num // 2)).decode() def hash_pass(password, salt=None): if salt is None: # get a 32 bit salt hex encoded (hex len 64) salt = rand_hex_str(64) # python 3.5.2 (doesn't seem to affect >= 3.5.6) is dumb... if isinstance(password, str): password = password.encode() if isinstance(salt, str): salt = salt.encode() m = hashlib.sha256(password) m.update(salt) # the TPM auth size is limited to 32 bytes in most cases digest = m.hexdigest()[:32] return { 'salt': salt, 'hash': digest, } def query_yes_no(question, default="no"): """Ask a yes/no question via input() and return their answer. "question" is a string that is presented to the user. "default" is the presumed answer if the user just hits . It must be "yes" (the default), "no" or None (meaning an answer is required of the user). The "answer" return value is True for "yes" or False for "no". """ valid = {"yes": True, "y": True, "ye": True, "no": False, "n": False} if default is None: prompt = " [y/n] " elif default == "yes": prompt = " [Y/n] " elif default == "no": prompt = " [y/N] " else: raise ValueError("invalid default answer: '%s'" % default) while True: sys.stdout.write(question + prompt) choice = input().lower() if default is not None and choice == '': return valid[default] elif choice in valid: return valid[choice] else: sys.stdout.write("Please respond with 'yes' or 'no' " "(or 'y' or 'n').\n") def load_sealobject(token, db, tpm2, pobjhandle, pobjauth, pin, is_so): sealobject = db.getsealobject(token['id']) if is_so: sealpub = sealobject['sopub'] sealpriv = sealobject['sopriv'] salt = sealobject['soauthsalt'] else: sealpub = sealobject['userpub'] sealpriv = sealobject['userpriv'] salt = sealobject['userauthsalt'] sealauth = hash_pass(pin.encode(), salt)['hash'] # Load the so sealobject using the PARENTS AUTH (primaryobject) sealctx = tpm2.load(pobjhandle, pobjauth, sealpriv, sealpub) return sealctx, sealauth class AESCipher: def __init__(self, key): self.key = key def encrypt(self, plaintext): # Generate a random 96-bit IV. iv = os.urandom(12) # Construct an AES-GCM Cipher object with the given key and a # randomly generated IV. encryptor = Cipher( algorithms.AES(self.key), modes.GCM(iv), backend=default_backend()).encryptor() ciphertext = encryptor.update(plaintext) + encryptor.finalize() iv = binascii.hexlify(iv).decode() ciphertext = binascii.hexlify(ciphertext).decode() tag = binascii.hexlify(encryptor.tag).decode() return ':'.join((iv, tag, ciphertext)) def decrypt(self, ciphertext): iv, tag, ciphertext = ciphertext.split(':') iv = binascii.unhexlify(iv) tag = binascii.unhexlify(tag) ciphertext = binascii.unhexlify(ciphertext) decryptor = Cipher( algorithms.AES(self.key), modes.GCM(iv, tag), backend=default_backend()).decryptor() plaintext = decryptor.update(ciphertext) + decryptor.finalize() return plaintext class TemporaryDirectory(object): """Context manager for tempfile.mkdtemp() so it's usable with "with" statement.""" def __enter__(self): self.name = mkdtemp() return self.name def __exit__(self, exc_type, exc_value, traceback): shutil.rmtree(self.name) class AESAuthUnwrapper(object): def __init__(self, key): self._cipher = AESCipher(binascii.unhexlify(key)) def unwrap(self, value): return self._cipher.decrypt(value) def wrap(self, value): return self._cipher.encrypt(value) # XXX # TODO move to the argparse handler module def str2bool(v): if v.lower() in ('yes', 'true', 't', 'y', '1'): return True elif v.lower() in ('no', 'false', 'f', 'n', '0'): return False else: raise argparse.ArgumentTypeError('Boolean value expected.') def get_ec_params(alg): """Return a string representation of a hex encoded ASN1 object X9.62 EC parameter http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html Indicates that EC parameters are byte arrays of a DER encoded ASN1 objects X9.62 parameter. This function will return a hex string without the leading 0x representing this encoding. """ if alg == "NIST p256": obj = "2A8648CE3D030107" elif alg == "NIST p224": obj = "2B81040021" elif alg == "NIST p384": obj = "2B81040022" elif alg == "NIST p521": obj = "2B81040023" else: raise RuntimeError("alg %s has no EC params mapping" % alg) # start building the DER object tag + len + obj in hex der = "06{:02x}{}".format(len(obj) // 2, obj) return der def asn1_format_ec_point_uncompressed(x, y): len_y = len(y) len_x = len(x) # normalize hex input to ensure no odd count hex strings if len_y % 2: len_y = len_y + 1 y = "00" + y if len_x % 2: len_x = len_x + 1 x = "00" + x # convert hex length to binary length len_y = len_y // 2 len_x = len_x // 2 # ensure that the binary representation fits into a byte total_len = len_y + len_x + 1 if (total_len > 255): raise RuntimeError( "Length of X and Y plus uncompressed format byte greater than 255") # The uncompressed point format is: # # 04 s = "04{len:02x}04{X}{Y}".format(len=total_len, X=x, Y=y) return s def pemcert_to_attrs(certpath): # rather than using pycryptography x509 parser, which gives native type access to certificate # fields use pyASN1 to get raw ASN1 encoded values for the fields as the spec requires them with open(certpath, "r") as f: bercert = pem.readPemFromFile(f) cert = derdecoder.decode(bercert, asn1Spec=rfc2459.Certificate())[0] c = cert['tbsCertificate'] h = binascii.hexlify d = derencoder.encode hexbercert = h(bercert).decode() # the CKA_CHECKSUM attrs is the first 3 bytes of a sha1hash bercertchecksum = hashlib.sha1(bercert).digest()[0:3] hexbercertchecksum = h(bercertchecksum).decode() subj = c['subject'] hexsubj = h(d(str2bytes(subj))).decode() issuer = c['issuer'] hexissuer = h(d(str2bytes(issuer))).decode() serial = c['serialNumber'] hexserial = h(d(str2bytes(serial))).decode() return { # The attrs of this attribute is derived by taking the first 3 bytes of the CKA_VALUE # field. CKA_CHECK_VALUE: hexbercertchecksum, # Start date for the certificate (default empty) CKA_START_DATE: "", # End date for the certificate (default empty) CKA_END_DATE: "", # DER-encoding of the SubjectPublicKeyInfo for the public key # contained in this certificate (default empty) CKA_PUBLIC_KEY_INFO: "", # DER encoded subject CKA_SUBJECT: hexsubj, # DER encoding of issuer CKA_ISSUER: hexissuer, # DER encoding of the cert serial CKA_SERIAL_NUMBER: hexserial, # BER encoding of the certificate CKA_VALUE: hexbercert, # RFC2279 string to URL where cert can be found, default empty CKA_URL: '', # hash of pub key subj, default empty CKA_HASH_OF_SUBJECT_PUBLIC_KEY: '', # Hash of pub key, default empty CKA_HASH_OF_ISSUER_PUBLIC_KEY: '', # Java security domain, default CK_SECURITY_DOMAIN_UNSPECIFIED CKA_JAVA_MIDP_SECURITY_DOMAIN: CK_SECURITY_DOMAIN_UNSPECIFIED, # Name hash algorithm, defaults to SHA1 CKA_NAME_HASH_ALGORITHM: CKM_SHA_1 } def _pkcs11_to_str(value, prefix): g = globals() submap = dict(filter(lambda elem: elem[0].startswith(prefix), g.items())) inv_map = {v: k for k, v in submap.items()} if value in inv_map: return inv_map[value] else: return '0x{:X}'.format(value) def pkcs11_cko_to_str(cko_value): return _pkcs11_to_str(cko_value, 'CKO_') def pkcs11_ckk_to_str(ckk_value): return _pkcs11_to_str(ckk_value, 'CKK_') def check_pss_signature(tpm2, pctx, pauth): (priv, pub, _) = tpm2.create(pctx, pauth=pauth) kctx = tpm2.load(pctx, pauth, priv, pub) (details, _) = tpm2.readpublic(kctx, False) y = yaml.safe_load(details) e = y['exponent'] if y['exponent'] != 0 else 65537 n = int(y['rsa'], 16) pub_numbers = rsa.RSAPublicNumbers(e, n) public_key = pub_numbers.public_key(default_backend()) message = b'message' signature = tpm2.sign(kctx, 'sha256', 'rsapss', message) try: public_key.verify( signature, message, padding.PSS( mgf=padding.MGF1(hashes.SHA256()), salt_length=hashes.SHA256().digest_size ), hashes.SHA256() ) return True except crypto_exceptions.InvalidSignature: # saltLen = key_size_bytes - hash_size_bytes - 2; # If this fails, we're in some messed up position # PSS sigs are neither hlen == slen nor max(slen), # so we will fail loudly public_key.verify( signature, message, padding.PSS( mgf=padding.MGF1(hashes.SHA256()), salt_length=padding.PSS.MAX_LENGTH ), hashes.SHA256() ) return False def create_primary(tpm2, hierarchyauth, pobjauth, template=None): details = tpm2.TEMPLATES[template] alg = details['alg'] attrs = details['attrs'] if template == 'tss2-engine-key': supported = tpm2.getcap('algorithms') supported = yaml.safe_load(supported) if 'ecc' in supported: alg = 'ecc256' elif 'rsa' in supported: alg = 'rsa2048' else: sys.exit('TPM Supports neither RSA nor ECC') return tpm2.createprimary(hierarchyauth, pobjauth, alg=alg, attrs=attrs) def get_pobject(pobject, tpm2, hierarchyauth, d): pobjconf = yaml.safe_load(pobject['config']) pobjauth = pobject['objauth'] if pobjconf['transient'] is True: selection = pobjconf['template-name'] pobj_handle = create_primary(tpm2, hierarchyauth, pobjauth, selection) else: tr_handle = binascii.unhexlify(pobjconf['esys-tr']) pobj_handle = bytes_to_file(tr_handle, d) return pobj_handle def hierarchy_tpm_value(hierarchy): hierarchies = { 'o' : TPM2_RH.OWNER } try: return hierarchies[hierarchy] except KeyError: raise RuntimeError(f'Hierarchy not supported, got: f{hierarchy}') def getauth(db, obj, pin, is_sopin, hierarchyauth): from .tpm2 import Tpm2 tokid = obj['tokid'] pid = db.getpid_by_tokid(tokid) pobject = db.getprimary(pid) token = db.gettoken(id=tokid) attrs = yaml.safe_load(io.StringIO(obj['attrs'])) with TemporaryDirectory() as d: tpm2 = Tpm2(d) token_config = yaml.safe_load(io.StringIO(token['config'])) if pin is None: if token_config.get('empty-user-pin'): pin = '' else: sys.exit('error: at least one of the arguments --sopin --userpin is required') tobjauth="" pobj_handle = None encauth = None if CKA_TPM2_OBJAUTH_ENC in attrs: encauth = binascii.unhexlify(attrs[CKA_TPM2_OBJAUTH_ENC]) pobjauth = pobject['objauth'] pobj_handle = get_pobject(pobject, tpm2, hierarchyauth, d) sealctx, sealauth = load_sealobject(token, db, tpm2, pobj_handle, pobjauth, pin, is_sopin) # get the ESYS_TR file into a state that can be used outside of the # temporary directory context tied to tpm2 with open(pobj_handle, "rb") as f: pobj_handle = f.read() wrappingkey = tpm2.unseal(sealctx, sealauth) wrapper = AESAuthUnwrapper(wrappingkey) tobjauth="" if encauth: encauth=encauth.decode() tobjauth = wrapper.unwrap(encauth).decode() return (tobjauth, pobj_handle) def _dump_outputs(objauth, pobj): config = yaml.safe_load(io.StringIO(pobj['config'])) is_transient = 'esys-tr' not in config hierarchy = str(hierarchy_tpm_value(pobj['hierarchy'])) output = { 'object-auth' : f'{objauth}', 'primary-object' : { 'is_transient' : is_transient, 'hierarchy' : hierarchy, 'auth' : pobj['objauth'] } } document = yaml.safe_dump(output, default_flow_style=False) print(document) def dump_blobs(db, obj, pin, is_sopin, output_prefix): tokid = obj['tokid'] pid = db.getpid_by_tokid(tokid) pobj = db.getprimary(pid) attrs = yaml.safe_load(io.StringIO(obj['attrs'])) pub_blob = TPM2B_PUBLIC.unmarshal(binascii.unhexlify(attrs[CKA_TPM2_PUB_BLOB]))[0] priv_blob = TPM2B_PRIVATE.unmarshal(binascii.unhexlify(attrs[CKA_TPM2_PRIV_BLOB]))[0] objauth = getauth(db, obj, pin, is_sopin, attrs)[0] with open(output_prefix+ ".priv", "wb") as f: b = priv_blob.marshal() f.write(b) with open(output_prefix+ ".pub", "wb") as f: b = pub_blob.marshal() f.write(b) config = yaml.safe_load(io.StringIO(pobj['config'])) is_transient = 'esys-tr' not in config if not is_transient: esys_tr = binascii.unhexlify(config['esys-tr']) with open(output_prefix+ ".tr", "wb") as f: f.write(esys_tr) _dump_outputs(objauth, pobj) def dump_tsspem(db, obj, pin, is_sopin, output_prefix): tokid = obj['tokid'] pid = db.getpid_by_tokid(tokid) pobj = db.getprimary(pid) attrs = yaml.safe_load(io.StringIO(obj['attrs'])) pub_blob = TPM2B_PUBLIC.unmarshal(binascii.unhexlify(attrs[CKA_TPM2_PUB_BLOB]))[0] priv_blob = TPM2B_PRIVATE.unmarshal(binascii.unhexlify(attrs[CKA_TPM2_PRIV_BLOB]))[0] objauth, pobj_handle = getauth(db, obj, pin, is_sopin, attrs) with ESAPI(os.getenv('TPM2TOOLS_TCTI', None)) as e: tr_handle = ESYS_TR.deserialize(e, pobj_handle) tpm_handle = e.tr_get_tpm_handle(tr_handle) key = TSSPrivKey(priv_blob, pub_blob, empty_auth=len(objauth) == 0, parent=tpm_handle) with open(output_prefix + ".pem", "wb") as f: f.write(key.to_pem()) _dump_outputs(objauth, pobj) def dump_pubpem(db, obj, pin, is_sopin, output_prefix): attrs = yaml.safe_load(io.StringIO(obj['attrs'])) pub_blob = TPM2B_PUBLIC.unmarshal(binascii.unhexlify(attrs[CKA_TPM2_PUB_BLOB]))[0] with open(output_prefix + ".pem", "wb") as f: f.write(pub_blob.to_pem()) tpm2-pkcs11-1.9.1/tools/setup.py0000644000175100017510000000247214667615111012056 # SPDX-License-Identifier: BSD-2-Clause from setuptools import setup from textwrap import dedent as DD long_description = DD(''' This tool is used to configure and manipulate stores for the tpm2-pkcs11 cryptographic library. ''') setup( name='tpm2-pkcs11-tools', python_requires='>=3.7', long_description=long_description, long_description_content_type='text/markdown', version='1.33.7', description='Command line tools for the TPM2.0 PKCS11 module', url='https://github.com/tpm2-software/tpm2-pkcs11', license='BSD2', keywords=['', ], classifiers=[ 'Development Status :: 2 - Pre-Alpha', 'Intended Audience :: Developers', 'Intended Audience :: System Administrators', 'License :: OSI Approved :: BSD License', 'Environment :: Console', 'Natural Language :: English', 'Operating System :: OS Independent', 'Programming Language :: Python', ], packages=['tpm2_pkcs11'], # Dependencies got here aka install_requires=['tensorflow'] install_requires=[ 'bcrypt', 'cryptography>=3.0', 'pyyaml', 'pyasn1', 'pyasn1_modules', 'tpm2_pytss' ], tests_require=[], entry_points={ 'console_scripts': ['tpm2_ptool = tpm2_pkcs11.tpm2_ptool:main'], }, ) tpm2-pkcs11-1.9.1/tools/tpm2_ptool0000755000175100017510000000017414667615111012366 #!/usr/bin/env bash # SPDX-License-Identifier: BSD-2-Clause "${PYTHON_INTERPRETER:-python3}" -m tpm2_pkcs11.tpm2_ptool "$@" tpm2-pkcs11-1.9.1/tools/tpm2_ptool.py0000755000175100017510000000017014667615111013011 #!/usr/bin/env python3 # SPDX-License-Identifier: BSD-2-Clause from tpm2_pkcs11 import tpm2_ptool as tool tool.main() tpm2-pkcs11-1.9.1/VERSION0000644000175100017510000000000614674407101010237 1.9.1