From 647c21f1cb4965145fa298bd093ce9a2d955d04f Mon Sep 17 00:00:00 2001
From: Addison Crump <addison.crump@cispa.de>
Date: Sat, 15 Jul 2023 16:00:21 +0200
Subject: [PATCH] fuzz: institute sane limits for arbitrary-based fuzzers

Closes #1043
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61570
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62436
---
 fuzz/ast-fuzzers.options                       |   2 ++
 fuzz/oss-fuzz-build.sh                         |   5 ++++-
 ...e-minimized-ast_fuzz_match-5990349284442112 | Bin 0 -> 169710 bytes
 ...e-minimized-ast_fuzz_match-6114393576046592 | Bin 0 -> 51466 bytes
 ...mized-ast_fuzz_match_bytes-4820641084473344 | Bin 0 -> 47681 bytes
 5 files changed, 6 insertions(+), 1 deletion(-)
 create mode 100644 fuzz/ast-fuzzers.options
 create mode 100644 fuzz/regressions/clusterfuzz-testcase-minimized-ast_fuzz_match-5990349284442112
 create mode 100644 fuzz/regressions/clusterfuzz-testcase-minimized-ast_fuzz_match-6114393576046592
 create mode 100644 fuzz/regressions/clusterfuzz-testcase-minimized-ast_fuzz_match_bytes-4820641084473344

diff --git a/fuzz/ast-fuzzers.options b/fuzz/ast-fuzzers.options
new file mode 100644
index 000000000..678d526b1
--- /dev/null
+++ b/fuzz/ast-fuzzers.options
@@ -0,0 +1,2 @@
+[libfuzzer]
+max_len = 65536
diff --git a/fuzz/oss-fuzz-build.sh b/fuzz/oss-fuzz-build.sh
index f96474739..81f619dcb 100755
--- a/fuzz/oss-fuzz-build.sh
+++ b/fuzz/oss-fuzz-build.sh
@@ -14,5 +14,8 @@ targets=(
   ast_fuzz_match_bytes
 )
 for target in "${targets[@]}"; do
-  cp fuzz/target/x86_64-unknown-linux-gnu/release/$target $OUT/
+  cp "fuzz/target/x86_64-unknown-linux-gnu/release/${target}" "${OUT}/"
+  if [[ "$target" == ast_* ]]; then
+    cp fuzz/ast-fuzzers.options "${OUT}/${target}.options"
+  fi
 done
diff --git a/fuzz/regressions/clusterfuzz-testcase-minimized-ast_fuzz_match-5990349284442112 b/fuzz/regressions/clusterfuzz-testcase-minimized-ast_fuzz_match-5990349284442112
new file mode 100644
index 0000000000000000000000000000000000000000..8de974975d4227f6da75038a92caa08dc6feac23
GIT binary patch
literal 169710
zcmeI5F^=Rm7KRJh#20YS8C(koK0yPUj2C+e!*FE4FyO?Q53n875h|J!IGAH7oowR?
zeE_4EeAFZPC_VK^WYx~Pzk(sY$C5bG&yT-IRdxCF_U-fE-abA)o*v))=ed48{^Q^A
zzsE~@{e3Q1i*Vd({Z{3;2IE=xpX!r;va6?ho%grb9?zwIo$BOPv7AY0+`ocp{jJpt
z(_J?k)Sa}9m-a#*s9=|i+w$H%sQz^gLmAKI?l1ZG-*3PE`R%v=(mkF(emp%sKm2sc
zuXi6FPt{eFaJ83I&2XV*&&8#KUlvCN1HXtM_+2im<4Sq4<4S9tGP(`!r`G0_xSyp5
z{Nk_~@)BVk?6eyEz;6g_%SOPjo`YJ<E>n}wDekxA=wOW~sy648xSz!k{0_plJPiDB
zzcjd(Y}}y+{J;<Vnt{f1zl22C^4yQPUxq;f=6;P^98X10XUU<};0J!k3EMmp{FwWt
z!L^CWt=<Gb@B_bQbg}eENQ5m*59WRu1_@YtG;VP`6+Ly0;gsM9e#Z&hJQDnv`=!CP
ziOH?r1V8Wtzh-o?^hijAElUsPei;S{Sb8*WaXb}0oh64>gCF=ECv5Xb@MG?m2G=Gg
zw|W!&zz_VI(Z$juArZDLJ(&At7$jin(YVF&RP@v}hEswc_#G!~^GNVx?w1DFCMLIf
z^A+Q_kW{n?wW&MSw$oZAKYOrH@_2;^?A(R5n!B;Zkjdb2-kKx95BE!hs{!LaDfodO
z_%&mV2Z0HRu)XFeXq00UJekZSJLU;Z7u+Y6lhsL{Q!@86UCJ-6jYAXsRxD+QXIL;7
zS?nl&(a*6pt;XIgH{dtS->|n8dsEsb4QvU1;McE!Fcq4yY}MIRCnW~Ie(~oPL{z=Y
zIwd#Xf?kZk5B&NS5T-&imaRIQ>ZHWr*DwCuf{5z4o>t?21-%%7ANchvAWVg3EL(Lp
z)k%rLuV4JR1rb$k&M9%ff?kZk5B&NS5T-&imaRIQ>ZHWr*DwCuf{5z4o>t?21-%%7
zANchvAWVg3EL(Lp)k%rLuV4JR1rb$k&M9%ff?kZk5B&NS5T-&imaRIQ>ZHWr*DwCu
zf{5z4o>t?21-%%7ANchvAWVg3EL(Lp)k%rLuV4JR1rb$k&M9%ff?kZk5B&NS5T-&i
zmaRIQ>ZHWr*DwCuf{5z4o>t?21-%%7ANchvAWVg3EL(Lp)k%rLuV4JR1rb$k&M9%f
zf?kZk5B&NS5T-&imaRIQ>ZHWr*DwCuf{5z4o>t?21-%%7ANchvAWVg3EL(Lp)k%rL
zuV4JR1rb$k&M9%ff?kZk5B&NS5T-&imaRIQ>ZHWr*DwCuf{5z4o>t?21-%%7ANchv
zAWVg3EL(Lp)k%rLuV4JR1rb$k&M9%ff?kZk5B&NS5T-&imaRIQ>ZHWr*DwCuf{5z4
zo>t?21-%%7ANchvAWVg3EL(Lp)k%rLuV4JR1rb$k&M80D{q~=f{Ob^)WbYSnz!4(}
z&<mN%)p2^A-?ZJ{UI;&6o3&KIE*C3V-r;h2s^TVG?E~G%HrV#TU2-`U$9S~*Qw>Nj
zYc5wWUDe#abnwess$k$3aeV&x@$~ro@Y5;3-hFsHWwGi2{Ax8;<LEH_zOCAvQ{sM>
zoz-!ryI5P-TBiiRD2#)hR)e3V2mIo&8S)Zgl{2RVKkyp@+p-bxd$w%V*;FSb#{HHY
z9jp;i9oN%p+^?V)Bk(&2+ww5*!~Nu$&JvB=)&L&h2?OzY_WfVr2Y%q!j5|K>NJxb3
zHAg|C9Gl?DWG2}$L2bI=KB=6nt}dLCMThB979Hcz1V6`8qA-)Fv)Jsgl*O^OBK9L6
zw>hq-)i1l>!^4N)^>upq<K36;>&;hx=Ff@0i&4nGNHt$eQH`u`&gb*5KmYQ>_var&
zq_1Vo`M0y#Bj)GxU2foVwt|$3<&-aLXu+JbRnql-9RBg@ph`Fi?{fX}@7wdJPAP^{
zlh5huh3T%F4eCx>#*1YLJJ@M8_$e-_1iv_JhP*^j<;*F;5B!F}wrm9a>PdjbjGOP0
zm%%mQ2YzYL4F>Dengc)Z1HWdhu<}hvgzYs)L8Ba-;K^hr*|AD$y5K&koUF6t&}x<*
zrb~HrKMqasb1WqaGl@Ej%??Xh9BV6LKl0p9ZO$oiKMM``4YNNH*1=Az!S7Y#S6%cl
z-1amCn%tNZgL|kMwlDaBANV!HiH9-?iLkxqC}@;p6Yx;R$T26Yvv*a~YT3~D41QTq
z6^x%RiOUpzzJ$LaY|Wx0mr<t6U#DbMoV`ebRa@6xtgUOUQ^t<tnV^H6R)e3V2mCtx
z&K@elDrZg!e&A=R8J2;cvz&~=Orp+WgZqJBzXF0)Xl8*|u9$LU0`Th>e{Ml^b#A&^
z&CS=)$G2gI(U*q4a^{ra2Y%y-GcDnM+<epEGFaRz0YC5qzh<=Yp<6;CY_B;A8s*po
zPbM?Tj#X0A1@}qiWSu#mRx|fAUCPp99Gc+gSV|OT5_J}v9hR~<)>g!R<U=>LIj6+^
zEHvOZ%>G1J2Rp3>Kkyp{oNWmFxcR2RWx2Rh27cfNe$8Ox!An9SY_B;A8s*poJa{p3
z%*pBuUDdQ&HuUjj`=X}`#+U8mQiLzt^JV+iEIM)-X1c_6N>;wbjAFEE>$;1zb***E
z*l|4fbFkBD@U!%QUx(k>Lq%BS%qhVS{46!YGVpVjlTnyS)LCqBKk(~UK(GqUEbz(|
zQ;tjke*NOlEr_npO;@YA`5O9IdJLm44SnUzDZvl?#t~;)!u?+F&G$NwssKbaz6>5A
z;S;DVjta&{0P#k}M*uv7ZOx)1=T20+aQ2)OOiezgECV}$vxkbJ&iq@enTJ~p!Ot?(
zk%8a;#{D|FOb?Z=3yB>YbvD&Wi5WgBVRtE_s!cm3?p@G}5%_gurwxD~?w1Ca5^>iO
z{J;<Vnjyz?%Y;POUUL*Q%CQNaOlFcD^Ms}g?vu*NI&(g)X6|RYl)2wHG{MiYlqk$3
z>MS-pEM;-5t%&`|SC`f1oD%o5(171C`x9Xu?6eyEz;76EwjuE2=9>nW<>F2m_<<kz
zHG_=@FA0gTz2+!rlw%X{;Kj%>C#y4bRnuzO(8u=`i=HYN-&c%F5x%d;XTGgjbmTJ3
zbcySftbB_Z#c0*mbr);vTI-at<9P1pV5imKXXydI4!^U9im=L=Q-UA(S!#x5;O8tS
zqcD@Gv)JH%;McE!U=^BK;FT+;9GL+8`o*7H5M7;{u2ysNHT1Fc7)D<j`pTJ8f*<&e
zBhIvh`*HJ4gUeuXuLS(S5B!?Z#%I0>iLkxqC}@;p6FiyBBs*3~O&8oJm6LVmd|J)i
z&vYqEk8x;%pJORem`T)GY<5`6;#gY|`;iab)aINL_p{J|-!S_VVIAzW8vMX-7;v^B
z@Z;v22AAdHP8s-tANVzcjR!9YiLkxqC}@;p6Y${0$T26YGjvtcYT3}om+gz5Di~k3
zk4q80Y|poyTeIlMWtiy_*C|=~7Bh;`s;%oT*4DMwDPza++|R*ItHICG1AZNTXAc!&
zl{2RVKk&2E49mdJSx!b_CQ)ax!TrFmUje}?G_$}fS4=rF0r>TcKer&dIyYUd=H_eY
zdu>Y(d-3uBi1pG%2ZvKKW-K;XHkRG5fG`!Bv24}ZR3{|{zkc!O7DQCX^|TuIE9k`t
z{5~`M9v(jYuCLR>AMd_&UvIwp^Q5ouVi58#QpML&R9E)R`F#HM=U;yK{`_Nz^tG%x
z|8_Qe#Qc0dS!P1Uhi({&g#sg~hFf1K!s-pnDZ%friJuy4AgH>)mM6Y_l*LiO`1(h5
z3cmiql(sdCj+{GD?ZVk}QZP07oH7yW0L~sNiaHY@t!5%*F$6!$P)7!SxL+Dv9S|Kq
z6#T#s{F?E@$~Peqwyb=a`(+p;VD8tr#qm`1)HQ}vf*<%DCv5Xb@MG?m2G=Ggw|W!&
zzz_VI(Z$juArZDLJ(&At7$jin(YVF&RP=O~99j*2;CGy`%_G5&xnCMwo0#0{P4ELh
z@M}gFOOJ#^*s}Cs?w4VZfTc&{7ROW3Q`Z<y34Y*roUqL!!H>CL8eE&0-0ICS`2BzU
z0iX3S$)c?M+MILO(`xR1mK-Ku!`x_${n+lAv(;YGl~lNZ>Y(;=SbAo0R51S3EV?0o
zYQ~?MwPw+g%P7;ktW$FH&0ZwIs;%oT*4DMwDPzYm_j9n*YVfo4fM18-*+WHG<;*F;
z5Bw}O!!q!zmp~RXerb3ZW?n<D5<j`<ph!bol}=S$h1_;Mj&|3Js?P0JtGVq~?1d2g
zc4Oup0Dib%8eASBH?0Rh@B_bQi1B$xLLzLhISLx(*aS}|Gs%v5LemBJN#$g9lIN7n
z{Y;lK_Zx>M_&Jsmg_%U1#b$@4ERMAmu^;)o!*M;W#{Dcb;5W?vL|Em_DZvl?h5=_A
z0zYoPX>eIC?v#Na_<>(D*m&@gkO<prj)F!xHUSS_j2v^aIzv}At(Faa&)}B@Rl)e4
zb6lD5J?C3~=9{6z_1?c{#arPJ!c{xhU96pJty4y~=Xsy=phc^}&(Z^a?Ih`NF2X8j
zP6>YCcNnnk1HsQ(Mn+*KQD?Ei{kECf@vdm=xSm$yewIM++X2}2uHg52-A|w81VXCu
z)$+o_uPlxV#>208XX4=(Pa#^f=*YPf)h?VpCk0cJ&nXk34&dyeqNq-|osxOD#Sr`~
zLme6T;eKgwbwG6dQ1Amk@N32oE8m1f*s}6v?w4VZfVp4e7ROW3(^+z8HTZ$wal$r_
z1V83}X>e^~a;rDN5B$Kd8C@(r5)xs{(u28QhCu?B9*tWZPeo5%V>l)Ff!}e$Hje~9
z=6-2#ZDMk(H^C45z^@ryEIkquVaw8kxnG7s0+t?)TO3bCPiM)Y)!+wy#|hg!68xC^
zrNOm{$*tZTgWqTQ|C4=5vN4yQ`mWio-kx<97tX8Ny**2&y;&R;j6ZXU^AP^bg+Fs?
z&7vchQKs`-r)1ijy-0#pTi0Ezt!u4Q#*X8+UL5SS8vHCh;Md`I_D~U4Ide+z`)lH-
z)5<_Zb%B<TXMSt3XrqEL506gq+0VmE$5qi&6*u9I+e$k~?vl&tIv%anc(v`+9ervK
zTx79}nW-vgP6>XN8}J+Ej3TUqomPV%_zeTjHUxh4BEe$DuM%2TZjgZ=_@zO21Grvp
z68yjq{F-sXC)5dvu;s}ZOOFhL1gv};w>X}Pp1Q<!O7H`}<AiM<34YA|(%{;}<W_Hj
zANYY^GrCxMBqYL?r3Z7r41)wLJsP(-o{FB%l0&P(5B!c3ws|D@G51S@YZH@Oy$OEc
p2Y$`yV(F2P2wRpO%>6P960r1W+~RmDdg>a(DPP9#v;2eX{{n8r{}2EG

literal 0
HcmV?d00001

diff --git a/fuzz/regressions/clusterfuzz-testcase-minimized-ast_fuzz_match-6114393576046592 b/fuzz/regressions/clusterfuzz-testcase-minimized-ast_fuzz_match-6114393576046592
new file mode 100644
index 0000000000000000000000000000000000000000..a34eeaf2c0d2ba02b5f35ae85b06cfec4f1089b0
GIT binary patch
literal 51466
zcmeIzv2Gi60LSrbDi(x?A|#eFAdnbH!Eqc1q*^DsWbKp=nM~z~LNJv8DH0M=pCE5w
z1`ln=NGv=;o}v;9D?Gt*=S#x*n{Px!1ysuKKREt<UB{PCqf4=~Q{CJt%d#lneo@uu
z$D%!p`aIa(-F=SpU=N`?KWxXM+nzt|uBz&;v*-0^HP>+ei}o6-qvq3B&eq}PMt{5i
zdv#vdZZsF#FBawEhs9!k-WQAan-})?o5$|?>ftwEKc0N|=<{w|{`4m&Cr3v|H|u^}
zpI?rT$Fur;G<#9KRkznZKD^V&H0QVWOXsnus`7qyx2h&`ewxqA?+@qm`3KJ?v)Oq3
z$LSmE&w2OD$?Q@0O0NEVttjqn4n|v_)^91_C~g(&r>FTAH*OVgo`0*`opZN-TXXjH
zw69(9aX1_nwbsGG!A5_p*PN9%{`K-;`Qn9#d;j39{q1`$d<?@oz1|+%%7tGTz2UGw
z9Mrii#zpgEEzc|D-vX~(cl6IVI=}q4|CQhVYpTD!(f?$7I2w(%Hb?bcx#s?#??V68
z|HI|CAl_DNzs$X7W6<2}>$7t2SzmAC^6~7CKpQXpGqAjEH@CFYV^`X{{0DuRSM;M0
zg9H$pK{6GzAOXZ?kW2+FNC2@JBvU~P5<qMQ$yCsS1Q44+G8MES0mNpIOa(1S0I?Y)
zQ$Y(7Kx_udRM3J15Su|V6|^7$#Ac981uaMbu^A*&K?@Q<YzE0x(1HXIn?W)av>*Y*
zW{^w;El2>d86;Cd3lczV2FX;=f&>toK{6GzAOXZ?kW2+FNC2@JBvU~P5<qMQ$yCsS
z1Q44+G8MES0mNpIOa(1S0I?Y)Q$Y(7Kx_udRM3J15Su|V6|^7$#Ac981uaMbu^A*&
zK?@Q<YzE0x(1HXIn?W)av>*Y*W{^w;El2>d86;Cd3lczV2FX;=f&>toK{6GzAOXZ?
zkW2+FNC2@JBvU~P5<qMQ$yCsS1Q44+G8MES0mNpIOa(1S0I?Y)Q$Y(7Kx_udRM3J1
z5Su|V6|^7$#Ac981uaMbu^A*&K?@Q<YzE0x(1HXIn?W)av>*Y*W{^w;El2>d86;Cd
z3lczV2FX;=f&>toK{6GzAOXZ?kW2+FNC2@JBvU~P5<qMQ$yCsS1Q44+G8MES0mNpI
zOa(1S0I?Y)Q$Y(7Kx_udRM3J15Su|V6|^7$#Ac981uaMbu^A*&K?@Q<YzE0x(1HXI
zn?W)av>*Y*W{^w;El2>d86;Cd3lczV2FX;=f&>toK{6GzAOXZ?kW2+FNC2@JBvU~P
z5<qMQ$yCsS1Q44+G8MES0mNpIOa(1S0I?Y)Q$Y(7Kx_udRM3J15Su|V6|^7$#Ac98
z1uaMbu^A*&K?@Q<YzE0x(1HXIn?W)av>*Y*W{^w;El2>d86;Cd3lczVUU#HZlk3iK
z&we-9f<zJ7K@t?EAW=kikOYM(NEDGBBtc<%HIa(?eEWFvu>LY_p0A!?e||C<)DNGn
f=FS>-p3BoI6|S`Rdhg-iy<W6IKH~B;olgG*tn6yN

literal 0
HcmV?d00001

diff --git a/fuzz/regressions/clusterfuzz-testcase-minimized-ast_fuzz_match_bytes-4820641084473344 b/fuzz/regressions/clusterfuzz-testcase-minimized-ast_fuzz_match_bytes-4820641084473344
new file mode 100644
index 0000000000000000000000000000000000000000..ce5b868b95214c4b19caf2292a61087eb7cc8d37
GIT binary patch
literal 47681
zcmeGl3v3+4b=Hj&=V!-6RVu!52{Z|Huzj}I`5d-V6`W97D1uNq5x&^hOB(<0atVQw
z3#uCR5@ATNE-?Y8M1W}3AeYi46a>Uo>x&9asVEJiu`sPrYNauaQXt@)zBjvj`?=lw
z?)f{<zMa|myqS4B^Jd<B-UMlPcX2mDb9cC$bT?BOmN9cVdxFnDX?K{?wQGGrpYLzM
zAf*oz<^_(k3BaDM_#_nGDFsX3+O@ApAr`i=fYcX6cZ(1L3Hm50CZxo@(dBiQmkHHN
zN`otI{1lx_ifc$oNlBTb$_dUzD}s?vFeC=u!h$Y>pb-|dnAAYX*q}F;lx%~f83^Ia
z)560l(1J&Yhr_<OS%~6YuFpbzypTp%Adu+A!(Fj391f4r;Z!iFl!*XM4^TQncZd~~
z!skF(EL@~3d_lK61Ryyje3H)-1~CM<v;;pRA#M|BMeq&=c0~ryCk5xEP@58hi^J5W
zfZTY)!#(?6U^Oy4FAQ#mSE+@=Gh=swtP29qlIl7kUtpR8(B7Jxn`bDFB#-5UP$#8g
z`7)7yRw`CG#QZ&Ur2p=tM~}Wum*x0^W$S<=UJwW{Kx=%9orqL}uS!I8tURnNGcYNs
z%%+75BQ*f-EiJjfL@@;7cqkkO#29(`PBcgWUOg6IU{V)ObaqvLf4jl8Kmouu2LN%K
zLLb7ZK2da3Ivj-55K`1nBN60XtdH0UIYDU4fs!kksxr@7!xq3Ld8J%PlgynlaZACe
zHx4956DM+S;@IOc1gm*5jV|LhXpS}veX6EyW<ZZLoAvA~>+0%gh~{p>v}^BMQ&$%X
zk&slGBeiHw4~1@ZB9s$m#6FfYrwYlV2%<Qh-*%QcBegXcA74L0zlx=Z0K0Q&#5a?F
zV?z7)3o}`%FCO0UthV^jFs~>mn2YT*8X}+z0e%pI0Y;Rq1qGrgMqBwW(B}d^0A>MK
zsWESolIzFjo=G%P^N5OTnQU1kkwalwj1MrzB0rpced0`WXl(U#%$!3CNiY~KTo<xo
zMCmvNW!98h4bdeKQmT1n)+nWbCcyLR7;(~hoX1ol{fJlzCNliUTX6wGl)fAVj4i<h
zh6(LSVkuLQm?o!B=4C31DJP)GrlU#$1<UVJg`~@+N!E~UY$b`Q8>I`-2O<CzoTC2n
zQtG3ADs@)50{PjMP;G?O4kWk~C}<LBtI*#+?~4BZQy5J1VdVIPXlM^ubXm8?ib+F_
zMU?tLhsxJ~@aB&%&#(R8x&0dszWwaA-`w?+{E=HDZ+-dZ)!Uz5@YQ7t-njE$f3JRF
z&5W16epT(k_ZP0;aMS7jLtmCZz3qms-GTY;pDtPS)A0FM3;!GW{i{!P-Ij|<X!EVf
zuEDC$ef`Tz^%W)wG{8jv3Y>E%aI_D#P^|#8!x_cJ#qJh&hpXxSZ;@%CoH{wE*VXLm
zkRn|#2d^u}k;wB%pxa#!xEOE77l1u7)IPo^gn!Gls7$de#b`z};Dl`PE9e&krfJ+^
z2PkERjIPIIg;iJ^=7U`9Uc7j5^_{Cup2Pv($&*43^@7Dub7>@(Wl*ZUQeHLDj1e9?
zboTC!*_Y}L%z5#%+((A*8QA`5{ku!fTz$)~Cm*@%qwgGfs&M1_W{2yVy$|1Z{Jx>9
zcYosU{9xg8e_1}a^X&I7ugl+F=>OGse{;vVdme49e|Kf~GoSX%-TA@nm#*5oa`j5j
zsc8!~{o(xA&OLF9yX}p<nFogs9qf4NnNugOy@m=8Ro2fq_1+Io<q7%E|F&b`xtiL`
zBWJ&{v;7?@$LT(+=oj@hKDw>7qj6)0+qH$#j~;n4p~Os~N6#k2ip%$;3IrppmcW}B
z8uUTrh=}7^fVQnI4L-D}06uG1-<t_w8ag5_2-Pv+gE?Zo70L-4DplYMxgD4Q@PG*L
zfG2hFQhmXp;+r@Eb&i&J7+0Lbvgw35E8(zwor!SB8m~dv)L~0TG(3k;?Cb4{5jQY%
zGH19B?F!Hmh3Z17Vgu6`fe9u;i^2LZ{2~w>UKE3pSyCq%sovb;ZRptC=G%Ot#nq%i
zfL7>=&*U)qlh7h`7z}ixLF?Hwy$35IdniRnXeO6XdK@GJ{&Df}uAZc_mXM27VEc{>
zHgXZj_R;aqNd^PIOp3CaKv8Cr0xucB$ym+gkfyzsm6nU;RgTJX(Si$HJRCR@H01<l
z(@q-9>Lk%vOf{8NR#t+HzmicdW@_pQ4g5n7YP&VsfL|%_=P?B(7rnj6QZ(GM(cRYJ
zZgBbBjWV}9tEo7ORXk>d_k~#!Z(7)iW*H%uDb4HIcfbfsbq?C8POOy@P^d5`=sflU
z8HFX8ARS<7uOKv+(4YY{)PL~72OeY)kPP;0`%!zl$KU8{Z*Ok%w6wQ-+dA6drLi&A
z!*AlDlp0OO=V6S>IuORJw7$vMSFe_2?Y$ECFpi(zMMg-Z;WY*)Btv-~mn@;2>f1n6
z5I+e7n7H8bxP7f156IGi`~|5ZTU1wn_~G?9^j{VVJ&po_f(=YcqAvw(7UE-NQbKP6
z{jFzPH>5n<nqbPodY)C4%z#vxij<1TYxb$whsl?xLX6*swGtpR4qjfDh6z%Q-`M18
z*&<m<PfvAGk2U<TzP{etSM_OVYV|UVa-)*5r(w8Nq_MWn9xIH0BBb8RPj&|~*frO_
zI|+cV0x3?2`FMRR@)+v<cwBVY=kdgC>}E?V@HLFUR~?KL$>?3}qhoD=IJdXAuSf5b
zQF7*yr}nDsXq0~QXe45D8h=b4Y)+Y@;}l4q0t!#lvq}A%#7bk_l&E%_nuKs91@qjc
zZsUY?$}`*$;YN8}rc8~?(yOV2HQb{SUZ2p2PiQsDtm?Z)dR0q-$;#3P&bGzKk7o4C
zKz`JTj|WUk7fwZfEE_!j6pE7?B5)Z}ks>FI3<+`p6A#QP8*`gLGUVX#plxC#@wQ_7
z<YJ^EVWucX!aP>ZSZ(XdrWiSs;Pw)}cP)lrsQp^3Ehg}UaFC`{jT=TsXYX2?8_*`-
zWWQROkR8VxE}b>0RO4v4G>L{vt*wjLet!0VH3c9%E(IrJ?iI*ZB^<V|!f+VZ0-Bo;
zhK7c$)>nl9CG)TbAg~V&3t(_S<@H>;o03R3*x~d+^pFYt4{h#-UD0{+5fdc_xT`rg
zv)NKGrGRFpNhQtPNo^!-QHt#V%7$d5$!VNTL+Qw1itJ^TLS5<`nKIb+l#LQt6o9~9
zwrHJBny8au^L;i)X_V~&9-UDdV@GE5{7Dv2Q{^SAZrMX#Q<K+lsHUaISRwZ4%xo(;
zj>&=c3|=b7*K{R@m&tViF3TMjrQ^6O<bAx-STZ#=jSc$?-pAwIFYn{ctJNrWe^dGt
zp(K5fxtYlyU5`ls0!fVk=N%DL;Y7c&Q<9XL{QD91u_ru0a?-%^m~HObqXBjZ2GVey
zk6q;<o?-kl9yh9_u}_7MU#%5Ga0L#Dv^a1D4#_XJPwkLgfddTUVs^=^Ck(g(2g@lI
zlhH5VN@+rr^qu%3SW;~>yC+^$*&js%z6hoqM&V~p)G<0VRDR|pdM0Qr&zz{O6_xhD
zl)N6Sc(L|mtrBKx4-9$fM~MO((@F=<_`aA{#0eW|>XmrHeyY*R_y!n|jaFJ&NeA_Y
zg+iMzNnMV-8{sf}bB4pOu<89ZUNY-uzkh?D`u!tx06a&e;P6}%wI#4<dO;k;PSpi0
zg-Tq%YF4T<M`||(`1Bk!Sw1}nlBQn7WF3cvHc8mEWU5UPwEsod%0MB6s!dYiip*T9
zyn*({9jb&2Ht?|a^msZw?8ue3K^MtWuYdhK4&+RqKHbFoGZQ!F1RdFR*nhsmbXWZx
zUXL6(qDfBF*wG648^^hmGmEM;6-5^sl^3tQCZBFf>Tr`Cp%)@pY2dIUfystDp2iY8
z>E*=gF{V{xvVA!_zYc4={OiQk-y_kRQ_7&}h&L<N$BkMKH{t26Q5Kej^)$e*0s8u!
zeVT)G%6KnAX66xEjW-^!s}zJ;)x>w7?2B;$I@tgc6p6t_FUnYw=_VFM*gCgRvZ^+b
zN}7@39tQZA;T;K-=(xw8xhSUWuQg7eW^af9^8-2L3QP63S(vIR<O)lbx*gwCRYhRU
zN($m5RD7)t)Y)@MkdlhV<O)lTYLabJeasb>Vm%vB)v4NcH_jy8zQI+7a+RT7UDd0K
zaHNBy90t&a;%bAOKpJ0cQ}@EPhAMhqWD{yiqI$v)8NoPhr#x0m>8diWH55DY@dla&
z>KH5Jb#%^F+r4_n@fj(=wT2og!rwUs?4f|d(qs6i#zA7G8V9f{@v>lQ62h*UYYk-=
zP$Yfp1lJl0b&}saAy1Xd5@Z3_8X9{iL{Cpc6W1D=nHb5nhVmP)qaAh@1_Psjk{_5%
zYPaMhopHB&xWu)Fq7qH6H8dNHE6Ql4tL&!gfegLUO|DVQysGiZ{&Xk%jr-<H!UAzT
zWU11^uwh);qa>SA)lxBENf%I&)1);Vt~C_YH6hRfcmVlfjCS!b5X|LumzN3EOG<;N
zQ{e!GV{JRc3JSLxGgvHKq$_+uw;MM2CwqmjZO6K})=;h)Jf@MS?7;hYMl#;VV~+r&
zh`aHF_wn}j@m8u)xz<ozi7{!I;AS=c<{IxOSL2Q8$@utna%jDe`LN)?RU6r}yw0(t
zOaZRiC^?dG)kewDX$pnns*TM0GBY<WW$UP7+Z-6X`heYp;2jL?iVP;wIWGBg&Er#u
zNo7=2uG$FNEmv&>OD=lVM$!_E)$|Qpq0uos>4j?^HzA6t6W=4FZFV%#<(H<{Tn%U_
ztDD{i-2^A;Ng;=NVLHukah0VeGP6b(45JoQz#zS7!m{aOZ=0*ZEjwDa8&nV}Uy4Wt
z-I}H`OE?#Z;B-3Az)u5^e?sc&;O<XCriDU9A+!+kyeXVFbv1F6bFQPA#pRq-R<+Ke
zWFbPlFSH7aI$uXQk4HC2*3}hV4F-2?Q#bilSjifhUovd*@XN^3z?nuA+cN%`orzCS
z8iY9w!kh-c5qLe|G{BBw;?)D_5BxS~+_o+z4Bf7TEDgG*5yi%g+lXqcY4F~B95NBy
z-IeX3kR{c|ng(gtLdz1R?lJyppbn#>;tmY)M{#dV^mf-pQClkw;<iIyBso*NB|cs}
zS=zDJ7{mE){B&BeC)=NLFz_fLk`z{D5XR(J)Rx>Q*@5p^-@znH!vWw>ridtQ*M0kN
zxDXkc`l!wE-Qj9!EOBja2!dc-QBh9C{5^%Wu1%h;P2w>zPo(4+Dk$8B4+-Y%DRi-K
ze}m|(6RUhGHngFPsZBxeD<ypi!YxA&Gf%}0C+ek}iQyVzE0uFXfRcHTA_JDGtY2KO
zyF1ybyE|FAI$60pIe%y<-wt5+Fk6uzc8@Vs1+@w@n_aa#o!!gnu?a_|!$C+5Aw~T(
K5|QUj$o~Ojyp`$z

literal 0
HcmV?d00001