2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-11-20 11:29:13 +09:00
|
|
|
|
2025-07-23 12:49:25 +02:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-09-17 19:03:01 +09:00
|
|
|
|
|
|
|
|
|
2025-07-10 11:24:17 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
2020-06-16 19:14:17 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2020-06-16 19:14:17 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-06-02 17:18:58 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-06-02 17:19:07 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-06-02 17:19:07 +09:00
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2021-06-02 17:19:07 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2021-06-02 17:19:07 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-06-02 17:19:07 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
2021-06-02 17:19:07 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-06-02 17:19:07 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-06-02 17:19:07 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-09-05 00:54:38 +09:00
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
|
|
|
|
|
2021-09-05 00:54:38 +09:00
|
|
|
|
|
|
|
|
|
2021-06-02 17:19:07 +09:00
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
2021-06-02 17:19:07 +09:00
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2020-08-10 17:35:01 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
tools/bootconfig: Fix integer overflow and truncation in size checks
Sashiko reported that on 32-bit systems, if an attacker crafts size in
the bootconfig footer such that adding BOOTCONFIG_FOOTER_SIZE wraps around
(for instance, if size is 0xFFFFFFFF), the size check in
load_xbc_from_initrd() can be bypassed:
if (stat.st_size < size + BOOTCONFIG_FOOTER_SIZE) {
pr_err("bootconfig size is too big\n");
return -E2BIG;
}
Furthermore, on 64-bit systems with an initrd > 4.29 GB, comparing a
corrupted 32-bit size (e.g. 0xFFFFFFFF) against
stat.st_size - BOOTCONFIG_FOOTER_SIZE can also bypass the check if
size is not bounded. Similarly, load_xbc_file() passes 64-bit stat.st_size
directly into the 32-bit int size parameter of load_xbc_fd(), truncating
large standalone files (>= 2GB).
In both cases, passing 0xFFFFFFFF to load_xbc_fd() truncates to -1,
resulting in malloc(0), an integer overflow in read(), and an
out-of-bounds null-byte write.
Fix this by:
1. Rejecting size > XBC_DATA_MAX or
size > stat.st_size - BOOTCONFIG_FOOTER_SIZE in load_xbc_from_initrd().
2. Rejecting stat.st_size > XBC_DATA_MAX in load_xbc_file() before passing
it to load_xbc_fd().
3. Checking size < 0 || size > XBC_DATA_MAX defensively in load_xbc_fd().
Link: https://lore.kernel.org/all/178905332413.213925.3179977110281463499.stgit@devnote2/
Fixes: 950313ebf79c ("tools: bootconfig: Add bootconfig command")
Cc: stable@vger.kernel.org
Reported-by: Sashiko <sashiko-bot@kernel.org>
Closes: https://lore.kernel.org/all/20260909161113.16C691F00A3A@smtp.kernel.org/
Closes: https://lore.kernel.org/all/20260910010137.EE0431F000FF@smtp.kernel.org/
Assisted-by: Antigravity:gemini-3.8-flash
Signed-off-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Reviewed-by: Sang-Heon Jeon <ekffu200098@gmail.com>
2026-09-11 00:15:24 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:35:01 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2026-03-19 08:43:06 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
tools/bootconfig: Fix integer overflow and truncation in size checks
Sashiko reported that on 32-bit systems, if an attacker crafts size in
the bootconfig footer such that adding BOOTCONFIG_FOOTER_SIZE wraps around
(for instance, if size is 0xFFFFFFFF), the size check in
load_xbc_from_initrd() can be bypassed:
if (stat.st_size < size + BOOTCONFIG_FOOTER_SIZE) {
pr_err("bootconfig size is too big\n");
return -E2BIG;
}
Furthermore, on 64-bit systems with an initrd > 4.29 GB, comparing a
corrupted 32-bit size (e.g. 0xFFFFFFFF) against
stat.st_size - BOOTCONFIG_FOOTER_SIZE can also bypass the check if
size is not bounded. Similarly, load_xbc_file() passes 64-bit stat.st_size
directly into the 32-bit int size parameter of load_xbc_fd(), truncating
large standalone files (>= 2GB).
In both cases, passing 0xFFFFFFFF to load_xbc_fd() truncates to -1,
resulting in malloc(0), an integer overflow in read(), and an
out-of-bounds null-byte write.
Fix this by:
1. Rejecting size > XBC_DATA_MAX or
size > stat.st_size - BOOTCONFIG_FOOTER_SIZE in load_xbc_from_initrd().
2. Rejecting stat.st_size > XBC_DATA_MAX in load_xbc_file() before passing
it to load_xbc_fd().
3. Checking size < 0 || size > XBC_DATA_MAX defensively in load_xbc_fd().
Link: https://lore.kernel.org/all/178905332413.213925.3179977110281463499.stgit@devnote2/
Fixes: 950313ebf79c ("tools: bootconfig: Add bootconfig command")
Cc: stable@vger.kernel.org
Reported-by: Sashiko <sashiko-bot@kernel.org>
Closes: https://lore.kernel.org/all/20260909161113.16C691F00A3A@smtp.kernel.org/
Closes: https://lore.kernel.org/all/20260910010137.EE0431F000FF@smtp.kernel.org/
Assisted-by: Antigravity:gemini-3.8-flash
Signed-off-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Reviewed-by: Sang-Heon Jeon <ekffu200098@gmail.com>
2026-09-11 00:15:24 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:35:01 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-09-17 19:03:08 +09:00
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
2020-03-03 20:24:50 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2025-07-10 11:24:17 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2025-08-17 16:21:46 +02:00
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
|
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
|
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2025-08-17 16:21:46 +02:00
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2021-09-17 19:03:08 +09:00
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
2020-11-20 11:29:13 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2021-09-17 19:03:08 +09:00
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
2020-11-20 11:29:13 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
tools/bootconfig: Fix integer overflow and truncation in size checks
Sashiko reported that on 32-bit systems, if an attacker crafts size in
the bootconfig footer such that adding BOOTCONFIG_FOOTER_SIZE wraps around
(for instance, if size is 0xFFFFFFFF), the size check in
load_xbc_from_initrd() can be bypassed:
if (stat.st_size < size + BOOTCONFIG_FOOTER_SIZE) {
pr_err("bootconfig size is too big\n");
return -E2BIG;
}
Furthermore, on 64-bit systems with an initrd > 4.29 GB, comparing a
corrupted 32-bit size (e.g. 0xFFFFFFFF) against
stat.st_size - BOOTCONFIG_FOOTER_SIZE can also bypass the check if
size is not bounded. Similarly, load_xbc_file() passes 64-bit stat.st_size
directly into the 32-bit int size parameter of load_xbc_fd(), truncating
large standalone files (>= 2GB).
In both cases, passing 0xFFFFFFFF to load_xbc_fd() truncates to -1,
resulting in malloc(0), an integer overflow in read(), and an
out-of-bounds null-byte write.
Fix this by:
1. Rejecting size > XBC_DATA_MAX or
size > stat.st_size - BOOTCONFIG_FOOTER_SIZE in load_xbc_from_initrd().
2. Rejecting stat.st_size > XBC_DATA_MAX in load_xbc_file() before passing
it to load_xbc_fd().
3. Checking size < 0 || size > XBC_DATA_MAX defensively in load_xbc_fd().
Link: https://lore.kernel.org/all/178905332413.213925.3179977110281463499.stgit@devnote2/
Fixes: 950313ebf79c ("tools: bootconfig: Add bootconfig command")
Cc: stable@vger.kernel.org
Reported-by: Sashiko <sashiko-bot@kernel.org>
Closes: https://lore.kernel.org/all/20260909161113.16C691F00A3A@smtp.kernel.org/
Closes: https://lore.kernel.org/all/20260910010137.EE0431F000FF@smtp.kernel.org/
Assisted-by: Antigravity:gemini-3.8-flash
Signed-off-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Reviewed-by: Sang-Heon Jeon <ekffu200098@gmail.com>
2026-09-11 00:15:24 +09:00
|
|
|
|
|
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2025-07-10 11:24:17 +09:00
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
2021-06-02 17:19:34 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2025-01-28 23:27:01 +09:00
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2021-09-16 15:23:20 +09:00
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
2020-03-03 20:24:50 +09:00
|
|
|
|
|
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
2020-03-03 20:24:50 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:41 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-09-16 15:23:20 +09:00
|
|
|
|
2020-08-10 17:34:41 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2026-05-08 06:55:04 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:41 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:41 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:41 +09:00
|
|
|
|
2020-06-16 19:14:25 +09:00
|
|
|
|
2020-02-09 22:05:13 +09:00
|
|
|
|
2020-06-16 19:14:25 +09:00
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:41 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2026-05-08 06:55:04 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2026-05-08 06:55:04 -07:00
|
|
|
|
|
|
|
|
|
2020-06-16 19:14:25 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:35:01 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-02-09 22:05:13 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
2025-07-10 11:24:17 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:35:01 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2025-07-23 12:49:25 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-11-19 14:53:40 +09:00
|
|
|
|
2020-11-19 14:53:31 +09:00
|
|
|
|
2020-03-03 20:24:50 +09:00
|
|
|
|
2021-09-17 19:03:08 +09:00
|
|
|
|
2020-11-19 14:53:40 +09:00
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-02-09 22:05:13 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-06-02 17:19:34 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2020-11-19 14:53:40 +09:00
|
|
|
|
2025-07-10 11:24:17 +09:00
|
|
|
|
2026-05-20 11:01:26 +08:00
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2026-05-20 11:01:26 +08:00
|
|
|
|
2020-11-19 14:53:40 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2021-09-16 15:23:20 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2020-03-03 20:24:50 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2020-03-03 20:24:50 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2021-09-16 15:23:29 +09:00
|
|
|
|
2020-02-05 22:50:13 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
2025-01-28 23:27:01 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2021-09-17 19:02:39 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-02-09 22:05:13 +09:00
|
|
|
|
2020-05-07 17:23:36 +08:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
|
|
|
|
|
2020-05-07 17:23:36 +08:00
|
|
|
|
2020-11-19 14:53:22 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2020-11-19 14:53:31 +09:00
|
|
|
|
2021-05-08 11:42:16 +08:00
|
|
|
|
2020-11-19 14:53:31 +09:00
|
|
|
|
2020-05-07 17:23:36 +08:00
|
|
|
|
2020-02-20 21:18:42 +09:00
|
|
|
|
2020-11-19 14:53:40 +09:00
|
|
|
|
|
|
|
|
|
2025-07-10 11:24:17 +09:00
|
|
|
|
2020-11-19 14:53:40 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2025-07-23 12:49:25 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2026-10-11 18:33:41 -04:00
|
|
|
|
|
|
|
|
|
2025-07-23 12:49:25 +02:00
|
|
|
|
2020-11-19 14:53:40 +09:00
|
|
|
|
2025-07-23 12:49:25 +02:00
|
|
|
|
2020-11-19 14:53:40 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-11-19 14:53:31 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-11-19 14:53:40 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-05-07 17:23:36 +08:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-05-07 17:23:36 +08:00
|
|
|
|
2020-11-19 14:53:31 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2020-08-10 17:35:01 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:41 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
2026-05-08 06:55:04 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:41 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2026-05-08 06:55:04 -07:00
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
2026-05-08 06:55:04 -07:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-08-10 17:34:51 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2026-05-08 06:55:04 -07:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2026-05-08 06:55:04 -07:00
|
|
|
|
|
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2020-02-09 22:05:13 +09:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2026-05-08 06:55:04 -07:00
|
|
|
|
2020-01-11 01:03:56 +09:00
|
|
|
|