java-1_8_0-openjdk-1.8.0.201-lp150.2.12.1 4>$  Ap\/=„{~x;yÉ.<~a(toE^;cJ3 }" He: As %Ln70ڞU؍H=o'mڀvҟn~a۷j;E7D_AuDnC-B@\Ms%&qDM$KV0kc l*vB s {Ѵh1#Ұ/&:͌>p>[X?[Hd , Jpt|J c~       (  s     L x +`+ +( 8 Q9LQ:QFPKGP` HP IP XP YQD \R` ]R ^SHbTVcTdUeUfUlUuU vU wY xY yY>zZZZ[[DCjava-1_8_0-openjdk1.8.0.201lp150.2.12.1OpenJDK 8 Runtime EnvironmentThe OpenJDK 8 runtime environment.\Ylamb70ŝopenSUSE Leap 15.0openSUSEApache-1.1 AND Apache-2.0 AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-with-classpath-exception AND LGPL-2.0-only AND MPL-1.0 AND MPL-1.1 AND SUSE-Public-Domain AND W3Chttp://bugs.opensuse.orgDevelopment/Languages/Javahttp://openjdk.java.net/linuxx86_64ڰ #[AA큤\n\\\\\\i\f_\f_\f_\f_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-1_8_0-openjdk-1.8.0.201-lp150.2.12.1.src.rpmjavajava-1.8.0java-1.8.0-64java-1_8_0-openjdkjava-1_8_0-openjdk(x86-64)java-64java-fontsjava-openjdkjava-openjdk-64jrejre-1.8.0jre-1.8.0-64jre-1.8.0-openjdkjre-1.8.0-openjdk-64jre-64jre-openjdkjre-openjdk-64jre1.3.xjre1.4.xjre1.5.xjre1.6.xjre1.7.xjre1.8.xlibawt_xawt.so()(64bit)libawt_xawt.so(SUNWprivate_1.1)(64bit)libicedtea-sound.so.1.0.1()(64bit)libjawt.so()(64bit)libjawt.so(SUNWprivate_1.1)(64bit)libjsoundalsa.so()(64bit)libjsoundalsa.so(SUNWprivate_1.1)(64bit)libsplashscreen.so()(64bit)libsplashscreen.so(SUNWprivate_1.1)(64bit)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    filefontconfigjava-1_8_0-openjdk-headlessjava-ca-certificateslibX11.so.6()(64bit)libXcomposite.so.1()(64bit)libXext.so.6()(64bit)libXi.so.6()(64bit)libXrender.so.1()(64bit)libXtst.so.6()(64bit)libasound.so.2()(64bit)libasound.so.2(ALSA_0.9)(64bit)libasound.so.2(ALSA_0.9.0rc4)(64bit)libawt.so()(64bit)libawt_xawt.so()(64bit)libawt_xawt.so(SUNWprivate_1.1)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libgif.so.7()(64bit)libjava.so()(64bit)libjava.so(SUNWprivate_1.1)(64bit)libjpeg.so.8()(64bit)libjpeg.so.8(LIBJPEG_8.0)(64bit)libjvm.so()(64bit)libjvm.so(SUNWprivate_1.1)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libpng16.so.16()(64bit)libpng16.so.16(PNG16_0)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpulse.so.0()(64bit)libpulse.so.0(PULSE_0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.8.0.201-lp150.2.12.13.0.4-14.6.0-14.0-15.2-14.14.1\~d\3?@[[t[@[:@[5@Z@Z@Zo YZ@YY@Y*@Y@YéYéY@YY@Yn@YYx@YqY;@XX+XX@X#Wv@WPW~D@W_WQq@WM|W!@VV>@V@V(UoU@UUUx&Uq@Ud`@UHU/@U.RU%@TE@TT-@TT[@T}TT@TT@T+@TTq@Ta@T`TXTPTAT?@T3T->@T)IT%U@T!`T @SSϣS @SFridrich Strba Fridrich Strba Fridrich Strba Fridrich Strba Fridrich Strba Fridrich Strba fstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comasn@cryptomilk.orgfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comagraf@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comtchvatal@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comschwab@suse.defstrba@suse.comschwab@linux-m68k.orgfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.com- Update to version jdk8u201 (icedtea 3.11.0) * Security fixes + S8199156: Better route routing + S8199161: Better interface enumeration + S8199166: Better interface lists + S8199552: Update to build scripts + S8200659: Improve BigDecimal support + S8203955: Improve robot support + S8204895: Better icon support + S8205356: Choose printer defaults + S8205709: Proper allocation handling + S8205714: Initial class initialization + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel transfer performance + S8206295: More reliable p11 transactions + S8206301: Improve NIO stability + S8208585: Make crypto code more robust + S8209094, CVE-2019-2426: Improve web server connections + S8210094: Better loading of classloader classes + S8210598: Strengthen Windows Access Bridge Support + S8210606: Improved data set handling + S8210610: Improved LSA authentication + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG processing + S8210870: Libsunmscapi improved interactions * New features + PR3667: Use the internal copy of the SunEC library rather than statically linking against NSS * Import of OpenJDK 8 u192 build 12 + S6730115: Fastdebug VM crashes with "ExceptionMark destructor expects no pending exceptions" error + S8022177: Windows/MSYS builds broken + S8026331: hs_err improvement: Print if we have seen any OutOfMemoryErrors or StackOverflowErrors + S8026335: hs_err improvement: Print exact compressed oops mode and the heap base value. + S8027584: Disable ccache by default + S8031759: Improved tool overriding in configure + S8033292: only warn, not fail, on unknown variables in configure + S8034199: Add 'reconfigure' target for re-creating a configuration + S8034788: Rewrite toolchain.m4 to support multiple toolchains per platform. + S8035074: hs_err improvement: Add time zone information in the hs_err file + S8035495: Improvements in autoconf integration + S8035725: Must keep microsoft VS_PATH on PATH after toolchain detection + S8035730: Configure fails in cygwin if current dir is in /home/user + S8035751: Clean up Visual Studio detection logic + S8035825: Warn instead of fail when calling the configure wrapper directly + S8036003: Add - -with-native-debug-symbols=[none|internal|external|zipped] + S8038340: Cleanup and fix sysroot and devkit handling on Linux and Solaris + S8039030: 9-dev windows-i586 build failed with mktemp: command not found + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS use of class oop's copy constructor definitions causing error level diagnostic. + S8042707: Source changes needed to build JDK 9 with Visual Studio 2013 (VS2013) + S8048128: Fix for Solaris Studio C++ 5.13, CHECK_UNHANDLED_OOPS breaks PPC build. + S8057538: Build the freetype library during configure on Windows + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java failed + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in nightlies + S8077420: Build failure with SS12u4 + S8078437: Enable use of devkits for Windows + S8079788: Fix broken CL version detection in configure for some Visual Studio configurations + S8081202: Hotspot compile warning: "Invalid suffix on literal; C++11 requires a space between literal and identifier" + S8081323: ConstantPool::_resolved_references is missing in heap dump + S8114823: G1 doesn't honor request to disable class unloading + S8134157: adlc fails to compile with SS12u4 + S8138692: libjsig compilation is missing EXTRA_CFLAGS on macosx + S8140470: javax/xml/crypto/dsig/SecurityManager/ /XMLDSigWithSecMgr.java failed with AccessControlException + S8148175: C1: G1 barriers don't preserve FP registers + S8150426: Wrong cast in metadata_at_put + S8150688: Fix os_windows siglabel + S8153194: PreserveFPRegistersTest.java runs out of memory in the nightlies + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its context class loader + S8158012: Use SW prefetch instructions instead of BIS for allocation prefetches on SPARC Core C4 + S8160748: Inconsistent types for ideal_reg + S8162362: Introduce system property to control enabled ciphersuites + S8162540: Crash in C2 escape analysis with assert: "node should be registered" + S8165463: Native implementation of sunmscapi should use operator new (nothrow) for allocations + S8173013: JVMTI tagged object access needs G1 pre-barrier + S8176033: New cygwin grep does not match \r as newline + S8176192: Incorrect usage of Iterator in Java 8 In com.sun.jndi.ldap.EventSupport.removeNamingListener + S8178370: [TEST_BUG] java/security/Signature/SignatureLength.java fails + S8179079: Incremental HotSpot builds broken on Windows + S8179675: Build with error on windows with new Cygwin grep + S8185855: Debug exception stacks should be clearer + S8186171: HashMap: Entry.setValue may not work after Iterator.remove() called for previous entries + S8186646: Nashorn: "duplicate code" assertion when binding a vararg function that just passes arguments along + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource .startProduction JDK-8079607 + S8189170: Add option to disable stack overflow checking in primordial thread for use with JNI_CreateJavaJVM + S8189760: sun/security/ssl/CertPathRestrictions/ /TLSRestrictions.java failed with unexpected Exception intermittently + S8193171: keytool -list displays "JKS" for a PKCS12 keystore + S8193758: Update copyright headers of files in src tree that are missing Classpath exception + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken + S8194642: Improve OOM error reporting for JDK8 + S8195095: Images are not scaled correctly in JEditorPane + S8195738: scroll poistion in ScrollPane is reset after calling validate() + S8196108: Add build support for VS 2015/2017 + S8196880: VS2017 Addition of Global Delete Operator with Size Parameter Conflicts with Arena's Chunk Provided One + S8196884: VS2017 Multiple Type Cast Conversion Compilation Errors + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly Converted to 64 bits + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in share/runtime/os.cpp + S8198304: VS2017 (C4838, C4312) Various conversion issues with gtest tests + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017 + S8200353: Shift or Capslock not working in Textfield after accented keystrokes + S8201240: Improve releasing native resources of BufImgSurfaceData.ICMColorData + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on Solaris only + S8202600: [Zero] Undefined behaviour in src/os_cpu/linux_zero/vm/os_linux_zero.cpp + S8202696: Remove exclusion range for phonetic chars in windows fontconfig.properties + S8203349: 8u hotspot should recognise later Windows compilers + S8203368: ObjectInputStream filterCheck method throws NullPointerException + S8203499: Uninitialised memory in WinAccessBridge.cpp + S8203790: MSVCP dependency introduced in awt.dll + S8203845: backport of JDK-8034788 inadvertently rolled back JDK-8187045 changes to toolchain.m4 + S8204053: libsaproc.so not linked with -z,noexecstack + S8204872: [8u] VS2017: more instances of "error C3680: cannot concatenate user-defined string literals with mismatched literal suffix identifiers" + S8205104: EXTRA_LDFLAGS not consistently being used + S8205440: [8u] DWORD64 required for later Windows compilers + S8205677: [8u] casts and type change for 8u to enable later Windows compilers + S8206425: .gnu_debuglink sections added unconditionally when no debuginfo is stripped + S8206454: [8u] os::current_stack_pointer() fails to compile on later Windows compilers (warning C4172: returning address of local variable) + S8206914: add jdk8u-dev test failures to ProblemList.txt + S8207402: Stray *.debuginfo files when not stripping debug info + S8207853: Need to regenerate configure in jdk8u-dev + S8209002: 8u192 installed exe and dll files have wrong file version + S8210423: Backport of 8034788 breaks GCC version detection + S8210658: Remove and retag jdk8u192-b10 tag in source repository + S8210951: Test sun/security/ssl/SSLContextImpl/ /CustomizedCipherSuites.java fails * Import of OpenJDK 8 u201 build 8 + S8027781: New jarsigner timestamp warning is grammatically incorrect + S8159805: sun/security/tools/jarsigner/warnings/ /NoTimestampTest.java fails after JDK-8027781 + S8171049: Era.getDisplayName doesn't work with non-IsoChronology + S8191438: jarsigner should print when a timestamp will expire + S8201818: [macosx] Printing attributes break page size set via "java.awt.print.Book" object + S8205330: InitialDirContext ctor sometimes throws NPE if the server has sent a disconnection + S8207775: Better management of CipherCore buffers + S8208583: Better management of internal KeyStore buffers + S8209129: Further improvements to cipher buffer management + S8209862: CipherCore performance improvement + S8210695: Create test to cover JDK-8205330 InitialDirContext ctor sometimes throws NPE if the server has sent a disconnection + S8211883: Disable anon and NULL cipher suites + S8213085: (tz) Upgrade time-zone data to tzdata2018g + S8213368: JDK 8u201 l10n resource file update + S8213792: Update THIRD_PARTY_README for LCMS to 2.9 + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the Classpath exception license text + S8214357: JDK 8u201 l10n resource file update md20 + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the Classpath exception license text + S8215377: JDK-8171049 Breaks JCK signature tests - Era.getDisplayName doesn't work with non-IsoChronology * Backports + S6424123, PR3696: JVM crashes on failed 'strdup' call + S8059847, PR3696: complement JDK-8055286 and JDK-8056964 changes + S8074859, PR1937: Re-apply warnings as error switch removed by 8034788 in 8u192 + S8076475, PR3696: Misuses of strncpy/strncat + S8145188, PR2945: Re-apply --with-java-debug-symbols option removed by 8034788 in 8u192 + S8214059, PR3693: Undefined behaviour in ADLC + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels * Bug fixes + PR3667, PR1983: Backed out changeset 48c15869ecd5 + PR3667, PR1983: Backed out changeset f0635543beb3 + PR3667, PR2127: Backed out changeset 0ff7720931e8 + PR3667, PR2815: Backed out changeset 26e2e029ee25 + PR3667, PR2899: Backed out changeset 9dc0eca5fa89 + PR3667, PR2934: Backed out changeset 7513dae3426b + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1 + PR3675: Update CVE URL + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport + PR3691: wget not detected by configure * SystemTap + PR3341: jstack.stp should support ppc64[le,be] * AArch64 port + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg + S8189170, PR3682: [AArch64] Add option to disable stack overflow checking in primordial thread for use with JNI_CreateJavaJVM + S8209414, PR3682: [AArch64] method handle invocation does not respect JVMTI interp_only mode + S8215951, PR3682: AArch64: jtreg test vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults + S8218185, PR3682: aarch64: missing LoadStore barrier in TemplateTable::putfield_or_static + S8219635, PR3682: aarch64: missing LoadStore barrier in TemplateTable::fast_storefield - Removed patch: * icedtea-3.0.1-sunec.patch + not needed any more- Update to version jdk8u191 (icedtea 3.10.0) * Security fixes + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support + S8194546: Choosier FileManagers + S8195868: Address Internet Addresses + S8195874: Improve jar specification adherence + S8196897: Improve PRNG support + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses + S8201756: Improve cipher inputs + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections stability + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine support + S8203654: Improve cypher state updates + S8204497: Better formatting of decimals + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading support + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to libpng 1.6.35 + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile * New features + PR3655: Allow use of system crypto policy to be disabled by the user * Import of OpenJDK 8 u191 build 12 + S8033251: Use DWARF debug symbols for Linux 32-bit as default + S8049834: Two security tools tests do not run with only JRE + S8074462: Handshake messages can be strictly ordered + S8130132: jarsigner should emit warning if weak algorithms or keysizes are used + S8142927: Feed some text to STDIN in ProcessTools.executeProcess() + S8146377: test/sun/security/tools/jarsigner/ /concise_jarsigner.sh failing + S8152974: AWT hang occurrs when sequenced events arrive out of sequence + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh timed out + S8164480: Crash with assert(handler_address == SharedRuntime::compute_compiled_exc_handler(..) failed: Must be the same + S8168628: (fc) SIGBUS when extending file size to map it + S8171452: (ch) linux io_util_md: Operation not supported exception after 8168628 + S8172529: Use PKIXValidator in jarsigner + S8180289: jarsigner treats timestamped signed jar invalid after the signer cert expires + S8189762: [TESTBUG] Create tests for JDK-8146115 container awareness and resource configuration + S8190674: sun/security/tools/jarsigner/TimestampCheck.java failed with java.nio.file.NoSuchFileException: ts2.cert + S8193892: Impact of noncloneable MessageDigest implementation + S8196663: [TESTBUG] test/compiler/loopopts/ /TestCMovSplitThruPhi.java fails on 32 bit Java + S8197518: Kerberos krb5 authentication: AuthList's put method leads to performance issue + S8202478: Backout JDK-8152974 + S8204667: Resources not freed on exception + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo + S8207336: Build failure in JDK8u on Windows after fix 8207260 + S8208350: Disable all DES cipher suites + S8208660: JDK 8u191 l10n resource file update + S8208754: The fix for JDK-8194534 needs updates + S8210431: Complete backport of libpng 1.6.35 TPRM + S8211107: LDAPS communication failure with jdk 1.8.0_181 + S8211731: Reconsider default option for ClassPathURLCheck change done in JDK-8195874 * Backports + PR3646: Backed out changeset 6e3f4784affc (S4890063/PR2304/RH1214835) + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in SunPKCS11 provider + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32 intrinsic + S8172850, PR3643, RH1640127: Anti-dependency on membar causes crash in register allocator due to invalid instruction scheduling + S8202261, PR3638: (fc) FileChannel.map and RandomAccessFile.setLength should not preallocate space + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp: attempted to spill a non-spillable item * Bug fixes + PR3653: Detect whether -Xprefer:source and -J-Xmx can be used, rather than assuming + PR3673: Alternate HotSpot builds need fix for PR3094 * SystemTap + PR3625: arc_priority representation creates an implicit limit on character sequence within regexp * Shenandoah + PR3634: Shenandoah still broken on s390 with aarch64-shenandoah-jdk8u181-b16 + [backport] Adaptive CSet selection overshoots max-CSet + [backport] Adaptive CSet selection selects excessively when memory is tight + [backport] Adaptive/Traversal heuristics rewrite for allocation rate + [backport] Added logging for the number of workers used for GC cycles + [backport] Add task termination and enhanced task queue state tracking + weakrefs + [backport] Allocation path should not touch GC barriers for metadata + [backport] Allocation tracker should really report bytes + [backport] AlwaysPreTouch fails with non-default ConcGCThreads + [backport] Application pacing precision fixes + [backport] Apply ShenandoahEvacOOMScope only for evac-taking paths in ShenandoahBarrierSet + [backport] Assembler write barriers should consistently check for forwarded objects + [backport] Avoid indirection to next-mark-context + [backport] Avoid using uintx in ShenandoahHeapRegion + [backport] C1 shenandoah_wb expects obj in a register + [backport] Check and ensure that Shenandoah-enabled compilations succeed + [backport] Check heap stability in C1 WBs + [backport] ClassUnloadingWithConcurrentMark should be opt-in with Shenandoah + [backport] Clean up obsolete c2 code + [backport] Cleanup: remove unused root processor's sub tasks + [backport] Cleanup UseShenandoahOWST blocks + [backport] CollectedHeap::max_tlab_size is measured in words + [backport] Complete liveness for recently allocated regions outside the allocation path + [backport] Comprehensible GC trigger logging + [backport] Concurrent uncommit should be recorded as GC event + [backport] Constify ShHeapRegionSet and ShCollectionSet + [backport] Convert magic value to ShenandoahPacingSurcharge + [backport] Default to ShenandoahCodeRootsStyle = 2 + [backport] Degenerated evacuation + [backport] Disable UseFastJNIAccessors for Shenandoah + [backport] Elastic TLABs support for Shenandoah + [backport] Enable ShenandoahEvacReserveOverflow by default + [backport] Evac assist should touch marked objects only + [backport] Evac reserve: make sure GC has untouchable space to move the objects into + [backport] EvilSyncBug test is too slow + [backport] Explicit GC should actually uncommit the heap + [backport] Exponential backoff with pacing + [backport] Fix aarch64 CAS predicates + [backport] Fix CAS-obj predicates and add expected-null-versions for cmpxchg-narrow-oop + [backport] Fixed SA due to code refactoring and merging + [backport] Fix Minimal and Zero builds + [backport] Fix ShHeap::notify_alloc usages: it accepts words, not bytes + [backport] Fix TestCommonGCLoads test + [backport] Fix TestFullGCALot test failure + [backport] Fix TestGCThreadGroups test + [backport] Forceful SATB buffer flushes should be time-periodic, not traffic-dependent + [backport] Full GC always comes with liveness data + [backport] Full GC should not always update references + [backport] GCLAB slowpath allocations should fit the object into GCLAB + [backport] GC trace messages have to be immortal + [backport] Handle missing ShenandoahWriteBarrierRB case + [backport] Heap region count selection should only consider max heap size + [backport] Hook up GCLABs to Elastic LAB support + [backport] Improve scheduling and interleaving of SATB processing in mark loop + [backport] Including metaspace info when reporting heap info + [backport] Incorrect label for static heuristics + [backport] Make in-cset checks use signed bytes to match C2 better + [backport] Micro-optimize AArch64 assembly write-barriers + [backport] Missing Shenandoah entry in GCNameHelper::to_string + [backport] More detailed pacing histogram + [backport] More verbose profiling for phase 4 in mark-compact + [backport] Move heuristics from ShCollectorPolicy to ShHeap + [backport] Move (Java)Thread::_gc_state to lower offset to optimize barrier fast-path encoding + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots + [backport] Move periodic GC decision making to GC heuristics base class + [backport] Move Shenandoah stress tests to tier3 + [backport] Non-cancellable mark loops should have sensible stride + [backport] Off-by-one error in degen progress calculation + [backport] Only Java and GC worker threads should get GCLABs + [backport] Out-of-cycle Degenerated GC should process references and unload classes + [backport] Pacer for evacuation should print "Avail" to capture discounting + [backport] Pacer should account actual size for elastic TLABs + [backport] Parallel +AlwaysPreTouch should run with max workers + [backport] Passive heuristics should enter degen GC, not full GC + [backport] Perform gc-state checks with LoadB to fit C2 matchers + [backport] Pre-filter oops before enqueing them in SBS slowpaths + [backport] Print task queue statistics at the end of GC cycle + [backport] Process remaining SATB buffers in final mark/traverse loop instead of separate phase + [backport] Proper units for allocation failure messages + [backport] Prune undefined and unused methods + [backport] Purge partial heuristics and connection matrix infrastructure + [backport] Purge support for ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst + [backport] Rearrange Shenandoah tests into 3 tiers + [backport] Reclaim immediate garbage after mark-compact marking + [backport] Recycle the regions only once + [backport] Refactor alive-closures to deal better with new marking contexts + [backport] Refactor allocation path to accept ShenandoahAllocRequest tuple + [backport] Refactor and improve ShenandoahCodeRoots strategies + [backport] Refactor FreeSet logging: support evac-reserve, denser printouts + [backport] Refactor gc+init logging + [backport] Refactoring ShenandoahStrDedupStress test to reduce test time + [backport] Refactor to group marking bitmap and TAMS structure in one class ShenandoahMarkingContext + [backport] Remove C2 write-barrier from .ad files + [backport] Removed racy assertion + [backport] Remove NMethodSizeLimit adjustment for Shenandoah + [backport] Remove obsolete/unused logging usages + [backport] Remove safe_equals() + [backport] Remove ShHeuristics::print_threshold + [backport] Rename and move ShenandoahPrepareForMarkClosure + [backport] Rename "cancel_concgc" to "cancel_gc" + [backport] Replace custom asserts with shenandoah_assert_* + [backport] Replace risky SBS::need_update_refs_barrier with straightforward check + [backport] Replace ShBarrierSet* casts with accessor + [backport] Report actual free size in non-verbose FreeSet status + [backport] Report heap region stats in proper units + [backport] Resettable iterators to avoid dealing with copying/assignment compilation differences + [backport] Reshuffle tests: verify STW GC is working first, then verify under aggressive, then the rest + [backport] Rework ClassUnloading* flags handling + [backport] Rework GC degradation on allocation failure + [backport] SATB buffer filtering/compaction hides unmarked objects until final-mark + [backport] shenandoah_assert_correct should check object/forwardee klasses + [backport] shenandoah_assert_correct should verify classes before claiming _safe_oop + [backport] Shenandoah changes to allow enabling -Wreorder + [backport] Shenandoah/PPC barrier stubs + [backport] Shenandoah string deduplication + [backport] SH::make_(tlabs)_parsable() should work correctly with/without TLABs + [backport] Shortcut regions that are known not to be alive + [backport] Should cleanup previous/bad versions of redefined classes during full gc + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded objects are in heap + [backport] Soft-refs policy needs reliable heap usage data after the GC cycle + [backport] Soft refs should be purged reliably on allocation failure, or with compact heuristics + [backport] Some trivial-ish cleanups + [backport] Split write barrier paths for mutator and GC workers + [backport] StringInternCleanup times out + [backport] TestHeapDump runs much faster with small heap + [backport] Tests should use -XX:+ShenandoahVerify in some OOM-evac configurations + [backport] TLAB sizing policy should converge faster with Shenandoah + [backport] Trace and report total allocation latency and sizes + [backport] Traversal should resize TLABs + [backport] Trivial enhancement to avoid costly deletion array element + [backport] Uncommit should relinquish the heap lock regularly + [backport] Unreachable assert in ShenandoahCodeRoots::acquire_lock + [backport] Verifier should dump raw memory around the problematic oops + [backport] Verify global and local gc-state status + [backport] VSC++ requires space(s) in between two string literals + [backport] WB slowpath should assist with evacuation of adjacent objects + [backport] Wiring GC events to JFR + Restore heap occupancy in GC logs after JFR changes + [backport] Wiring heap and metaspace info to JFR + [backport] Wrap worker id in thread local worker session + [backport] -XX:-UseTLAB should disable GCLABs too + Cleanup undeclared methods in barrier stubs + Disable evac assist by default until bugfixes arrive + Fix build failure: signedness mismatch in assert + Fix MacOS/Clang build failure + Fix x86_32 build + JDK8u: Silence compilation warnings on implicit type conversion + Move JNI Weak References workaround to Shenandoah-specific root processor + Fix code differences against shenandoah/jdk8u * AArch64 port + S8155627, PR3651: Enable SA on AArch64 + S8207838, PR3666: AArch64: Float registers incorrectly restored in JNI call + S8209415, PR3666: Fix JVMTI test failure HS202 + S8211064, PR3666: [AArch64] Interpreter and c1 don't correctly handle jboolean results in native calls- Update to version jdk8u181 (icedtea 3.9.0) * Security fixes + S8191239: Improve desktop file usage + S8193419: Better Internet address support + S8197871, CVE-2018-2938, bsc#1101644: Support Derby connections + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern Syntax + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass mitigation * New features + PR3623: Allow Shenandoah to be used on all architectures + PR3624: Sync desktop files with Fedora/RHEL versions again + PR3628: Install symlinks to tapsets in SystemTap directory * Import of OpenJDK 8 u172 build 11 + S8031304: Add dcmd to print all loaded dynamic libraries. + S8044107: Add Diagnostic Command to list all ClassLoaders + S8055755: Information about loaded dynamic libraries is wrong on MacOSX + S8059036: Implement Diagnostic Commands for heap and finalizerinfo + S8130400: Test java/awt/image/DrawImage/ /IncorrectClipXorModeSurface2Surface.java fails with ClassCastException + S8136356: Add time zone mappings on Windows + S8139673: NMT stack traces in output should show mtcomponent + S8147542: ClassCastException when repainting after display resolution change + S8154017: Shutdown hooks are racing against shutdown sequence, if System.exit()-calling thread is interrupted + S8165466: DecimalFormat percentage format can contain unexpected % + S8166772: Touch keyboard is not shown for text components on a screen touch + S8169424: src/share/sample/scripting/scriptpad/src/scripts/ /memory.sh missing #! + S8170358: [REDO] 8k class metaspace chunks misallocated from 4k chunk Freelist + S8170395: Metaspace initialization queries the wrong chunk freelist + S8176072: READING attributes are not available on TSF + S8177721: Improve diagnostics in sun.management.Agent#startAgent() + S8177758: Regression in java.awt.FileDialog + S8183504: 8u131 Win 10, issue with wrong position of Sogou IME popup + S8184991: NMT detail diff should take memory type into account + S8187331: VirtualSpaceList tracks free space on wrong node + S8187629: NMT: Memory miscounting in compiler (C2) + S8187658: Bigger buffer for GetAdaptersAddresses + S8187685: NMT: Tracking compiler memory usage of thread's resource area + S8187803: JDK part of JavaFX-Swing dialogs appearing behind main stage + S8187985: Broken certificate number in debug output + S8188855: Fix VS10 build after "8187658: Bigger buffer for GetAdaptersAddresses" + S8189599: InitialBootClassLoaderMetaspaceSize and CompressedClassSpaceSize should be checked consistent from MaxMetaspaceSize + S8189646: sun/security/ssl/SSLSocketImpl/ /SSLSocketCloseHang.java failed with "java.net.SocketTimeoutException: Read timed out" + S8190442: Backout changes for JDK-8087291 from 8u-dev as it didn't use main CR id + S8190690: Impact on krb5 test cases in the 8u-CPU nightly + S8191969: javac produces incorrect RuntimeInvisibleTypeAnnotations length attribute + S8192987: keytool should remember real storetype if it is not provided + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753, JDK-8085903 + S8193807: Avoid UnsatisfiedLinkError on AIX by providing empty basic implementations of getSystemCpuLoad and getProcessCpuLoad * Import of OpenJDK 8 u181 build 13 + S8038636: speculative traps break when classes are redefined + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails intermittently + S8055008: Clean up code that saves the previous versions of redefined classes + S8057570: RedefineClasses() tests fail assert(((Metadata*)obj)->is_valid()) failed: obj is valid + S8074373: NMT is not enabled if NMT option is specified after class path specifiers + S8076117: EndEntityChecker should not process custom extensions after PKIX validation + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links + S8157898: SupportedDSAParamGen.java failed with timeout + S8169201: Montgomery multiply intrinsic should use correct name + S8170035: When determining the ciphersuite lists, there is no debug output for disabled suites. + S8176183: sun/security/mscapi/SignedObjectChain.java fails on Windows + S8187045: [linux] Not all libraries in the VM are linked with - z,noexecstack + S8187635: On Windows Swing changes keyboard layout on a window activation + S8188223: IfNode::range_check_trap_proj() should handler dying subgraph with single if proj + S8196224: Even better Internet address support + S8196491: Newlines in JAXB string values of SOAP-requests are escaped to " " + S8196854: TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM + S8198605: Touch keyboard is shown for a non-focusable text component + S8198606: Touch keyboard does not hide, when a text component looses focus + S8198794: Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3 + S8199406: Performance drop with Java JDK 1.8.0_162-b32 + S8199748: Touch keyboard is not shown, if text component gets focus from other text component + S8200359: (tz) Upgrade time-zone data to tzdata2018d + S8201433: Fix potential crash in BufImg_SetupICM + S8202585: JDK 8u181 l10n resource file update + S8202996: Remove debug print statements from RMI fix + S8203233: (tz) Upgrade time-zone data to tzdata2018e + S8203368: ObjectInputStream filterCheck method throws NullPointerException + S8204874: Update THIRDPARTYREADME file + S8205491: adjust reflective access checks * Backports + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as int + S8064786, PR3601: Fix debug build after 8062808: Turn on the - Wreturn-type warning + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo + S8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 + S8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails + S8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list + S8207057, PR3613: No debug info for assembler files * Bug fixes + PR3597: Potential bogus -Wformat-overflow warning with - Wformat enabled + PR3600: jni_util.c does not import header file which declares getLastErrorString + PR3601: Fix additional -Wreturn-type issues introduced by 8061651 + PR3630: Use ${datadir} when specifying default tz.properties location + PR3632: IcedTea installing symlinks to SystemTap directory rather than individual tapsets * AArch64 port + S8207345, PR3626: Trampoline generation code reads from uninitialized memory * Shenandoah + PR3619: Shenandoah broken on s390 + PR3620: Shenandoah broken on ppc64 + Allocation failure injection machinery + [backport] AArch64 shenandoah_store_check should read evacuation_in_progress as byte + [backport] Account trashed regions from coalesced CM-with-UR + [backport] Adaptive collection set selection in adaptive policy + [backport] Adaptive heuristics accounts trashed cset twice + [backport] Adapt upstream object pinning API + [backport] Add comments in shenandoah_store_check on direct heap field use + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot + [backport] Added missing header file for non-PCH build + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic + [backport] Add new pinned/cset region state for evac-failure-path + [backport] Add ShenandoahRootProcessor API to report threads while scanning roots + [backport] Add test to verify Shenandoah is not enabled by default, and enabled with the flag + [backport] Add -XX:+ShenandoahVerify to more interesting tests + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock intrinsics assume non null inputs + [backport] Allow use of fp spills around write barrier + [backport] Arraycopy fixes (tests and infrastructure) + [backport] Assert Shenandoah-specific safepoints instead of generic ones + [backport] Asynchronous region recycling + [backport] Avoid notifying about zero waste + [backport] barrier moved due to null checks needs to always fix memory edges + [backport] Basic support for x86_32: build and run in STW configuration + [backport] Bitmap based ShHeapRegionSet + [backport] Break heuristics out from ShCollectorPolicy into their own source files + [backport] C2 should use heapword-sized object math + [backport] Check BS type in immByteMapBase predicate + [backport] Cleanup allocation tracking in heuristics + [backport] Cleanup and refactor Full GC code + [backport] Cleanup and strengthen BrooksPointer verification + [backport] Clean up dead code + [backport] Cleanup: removed unused code + [backport] Cleanup reset_{next|complete}_mark_bitmap + [backport] Cleanup SHH::should_start_normal_gc + [backport] "Compact" heuristics for dense footprint scenarios + [backport] Compact heuristics should not shortcut on immediate garbage, but aggressively compact + [backport] Conditionalize PerfDataMemorySize on enabled heap sampling + [backport] Consistent liveness for humongous regions + [backport] Control loop should wait before starting another GC cycle + [backport] Critical native tests should only be ran on x86_64 platforms + [backport] Degenerated GC + [backport] Degenerated GC: rename enum, report degen reasons in stats + [backport] Demote ShenandoahAllocImplicitLive to diagnostic + [backport] Demote warning message about OOM-during-evac to informational + [backport] Denser ShHeapRegion status line + [backport] Disable verification from non-Shenandoah VMOps. + [backport] Disallow pinned_cset region moves and allocations during Full GC + [backport] Disambiguate "upgrade to Full GC" GCause + [backport] Do not add non-allocatable regions to the freeset + [backport] Don't treat allocation regions implicitely live during some GCs + [backport] Double check for UseShenandoahGC in WB expand + [backport] Drop distinction between immediate garbage and free in heuristics + [backport] Dynamic worker refactoring + [backport] Eagerly drop CSet state from regions during Full GC + [backport] Eliminate write-barrier assembly stub (part 1) + [backport] Enable biased locking for Shenandoah by default + [backport] Ensure tasks use correct number of workers + [backport] Excessive assert in ShHeap::mark_next + [backport] Excessive asserts in marked_object_iterate + [backport] FinalEvac pause to turn off evacuation + [backport] Fix || and && chaining warnings in memnode.cpp + [backport] Fix broken asserts in ShenandoahSharedEnumFlag + [backport] Fixed code roots scanning that might be bypassed during degenerated cycle + [backport] Fixed compilation error of libTestHeapDump.c on Windows with VS2010 + [backport] Fixed missing ResourceMark in ShenandoahAsserts::print_obj + [backport] Fixed pinned region handling in mark-compact + [backport] Fix (external) heap iteration + TestHeapDump should unlock aggressive heuristics + [backport] fix for alias analysis with ShenandoahBarriersForConst + [backport] Fix/improve CLD processing + [backport] Fixing Windows and ARM32 build + [backport] Fix Mac OS build warnings + [backport] Fix Minimal VM build + [backport] Fix ShFreeSet boundary case + [backport] fix TCK crash with shenandoah + [backport] Forcefully update counters when GC cycle is running + [backport] FreeSet and HeapRegion should have the reference to ShenandoahHeap + [backport] FreeSet refactor: bitmaps, cursors, biasing + [backport] FreeSet should accept responsibility over trashed regions + [backport] FreeSet should report its internal state before/after GC cycle + [backport] Full GC should compact humongous regions + [backport] Full GC should not trash empty regions + [backport] GC state testers (infra) + [backport] Generic verification is possible only at Shenandoah safepoints + [backport] Get easy on template instantiations in ShConcMark + [backport] Heap region sampling should publish region states + [backport] Humongous regions should support explicit pinning + [backport] Immediate garbage ratio should not go over 100% + [backport] Implement flag to generate write-barriers without membars + [backport] Implement protocol for safe OOM during evacuation handling + Use jint in oom-evac-handler to match older JDKs Atomic support better + Missing OOMScope in ShenandoahFixRootsTask + [backport] Improve assertion/verification messages a bit + [backport] Improve/more detailed timing stats for root queue work + [backport] Incorrect constant folding with final field and - ShenandoahOptimizeFinals + [backport] Increase test timeouts + [backport] Introduce assert_in_correct_region to verify object is in correct region + [backport] Isolate shenandoahVerifier from stray headers + [backport] keep read barriers for final instance/stable field accesses + [backport] Keep track of per-cycle mutator/collector allocs. Fix mutator/collector alloc region overlap in traversal. + [backport] Little cleanup + [backport] Log message on ref processing, class unload, update refs for mark events + [backport] LotsOfCycles test timeouts + [backport] Make concurrent precleaning log message optional again + [backport] Make control loop more responsive under allocation pressure + [backport] Make degenerated update-refs use region-set cursor to hand over work + [backport] Make heap counters update completely asynchronous + [backport] Make major GC phases exclusive from each other + [backport] Make sure selective barriers enabling/disabling works + [backport] Make sure -XX:+ShenandoahVerify comes first in the tests + [backport] Mark bitmap slices commit/uncommit + Aggregated bitmap slicing + [backport] Match barrier fastpath checks better + [backport] Minor cleanups + [backport] Minor cleanup, uses latest Atomic API + [backport] Move barriers into typeArrayOop.hpp direct memory accessors + [backport] Move ShHeap::used increment out of locked allocation path + [backport] No need for fence in control loop: flags are now ShSharedVariables + [backport] Only report GC pause time to GC MXBean + Re-fix memory managers and memory pools usage and pause reporting + [backport] Optimize fwdptr region handling in ShenandoahVerifyOopClosure::verify_oop + [backport] Optimize oop/fwdptr/hr_index verification a bit + [backport] overflow integer during size calculation + [backport] Pacer should account allocation waste and unsuccessful pacing in the budget + [backport] Pacer should poll FreeSet to figure out actually available space + [backport] Passive should opt-in the barriers, not opt-out + [backport] Pauses that do not affect heap occupancy should not report heap + [backport] Print message when heuristics changes the setting ergonomically + [backport] Protect C2 matchers with UseShenandoahGC + [backport] Provide non-taxable allocation slack at the beginning of the cycle + [backport] Record cycle start/end to avoid continuous periodic GC + [backport] Record Shenandoah events in hs_err events section + [backport] Refactor allocation failure and explicit GC handling + [backport] Refactor allocation metadata handling + [backport] Refactor FreeSet rebuilding into the single source + [backport] Refactoring GC phase and heap allocation tracking out of policy + [backport] Refactor uncommit handling: react on explicit GCs, feature kill flag, etc + [backport] Refactor worker timings into ShenandoahPhaseTimings + [backport] ReferenceProcessor is_alive setup is racy + [backport] Region sampling should lock while gathering region data + [backport] Rehash VMOperations and cycle driver mechanics for consistency + [backport] Relax assert in SBS::is_safe() + [backport] Remove BS:is_safe in favor of logged BS::verify_safe_oop + [backport] Remove CSetThreshold handling from heuristics + [backport] Remove FreeSet::add_region, inline into FreeSet::rebuild + [backport] Remove obsolete check in FreeSet::allocate + [backport] Remove ShenandoahGCWorkerPerJavaThread flag + [backport] Remove ShenandoahMarkCompactBarrierSet + [backport] Rename and cleanup _regions and _free_set uses + [backport] Rename dynamic heuristics to static + [backport] Rename *_oop_static/oop_ref to *_forwarded + [backport] Rename ShenandoahConcurrentThread to ShenandoahControlThread + [backport] Report all GC status flags in hs_err + [backport] Report fwdptr size in JNI GetObjectSize + [backport] Report how much we have failed to allocate during Allocation Failure + [backport] Report illegal transitions verbosely, and remove some no-op transitions + [backport] Rewire control loop to avoid double cleanup work + [backport] Rework shared bool/enum flags with proper types and synchronization + [backport] Rewrite and fix ShenandoahHeap::marked_object_iterate + [backport] Rich assertion failure logging + [backport] Roots verification should take the special roots first + [backport] RP closures should accept NULL referents + [backport] Set ShenandoahMinFreeThreshold default to 10% + [backport] Setup process references and class unloading once before the cycle + [backport] ShConcurrentThread races with set_gc_state_bit + [backport] Shenandoah critical native support + [backport] Shenandoah region/set iterators should not allow copying + [backport] Shenandoah SA implementation + [backport] Shenandoah/SPARC barrier stubs + [backport] ShenandoahVerifyOptoBarriers should not fail with disabled barriers + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix + [backport] ShenandoahWriteBarrierRB flag to conditionally disable RB on WB fastpath + [backport] Shenandoah/Zero barrier stubs + [backport] SieveObjects test is too hostile to verification + [backport] Single GCTimer shared by all operations + [backport] Single thread-local GC state flag for all barriers + [backport] Some smallish ShHeapRegionSet changes + [backport] Speed up asserts and verification, improve fastdebug builds performance + [backport] Split live data management for allocations and GCs + [backport] Static heuristics should be really static and report decisions + [backport] Static heuristics should use non-zero allocation threshold + [backport] Store checks should run most of the time + [backport] Tax-and-Spend allocation pacing + [backport] Testbug: VerifyJCStressTest leaks memory + [backport] TestSelectiveBarrierFlags should accept multi-element flag selections + [backport] TestSelectiveBarrierFlags times out due to too aggressive compilation mode + [backport] Trim/expand test heap sizes to fit small heaps + [backport] Trim the TLAB sizes to avoid wasteful retirement under TLAB races + [backport] Use leftmost region in GC allocations + [backport] Use os::naked_short_sleep instead of naked Thread events for sleeping + [backport] Use/sort (cached) RegionData not ShenandoahHeapRegionSet (infrastructure) + [backport] UX: Cleanup (adaptive) CSet selection message + [backport] UX: Pacer reports incorrect free size + [backport] UX: Shorter gc+ergo messages from CSet selection + [backport] Verifier crashes when reporting multiple forwardings + [backport] Verifier should check klass pointers before attempting to reach for object size + [backport] Verifier should print verification label at liveness verification + [backport] Verify fwdptr accesses during Full GC moves + [backport] Verify regions status + [backport] When Shenandoah WB is moved out of loop, connect it to correct loop memory Phi (back out and revisit previous fix) + [backport] Wipe out ShenandoahStoreCheck implementation + [backport] Workaround C1 ConstantOopWriteValue bug + Bitmap size might not be page aligned when large page is used + Changed claim count to jint + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1 pre-barrier + Defer cleaning of system dictionary and friends to parallel cleaning phase + Do not put down update-refs-in-progress flag concurrently + Fix AArch64 build failure: misplaced #endif + Fixed Shenandoah 8u build + Fixed Windows build + Fix non-PCH build + Fix non-PCH x86_32 build + Fix up SPARC and Zero headers for proper locations + missing barriers in String intrinsics with - ShenandoahOptimizeInstanceFinals - ShenandoahOptimizeStableFinals + Missing event log for canceled GC + StringInternCleanup times out + VerifyJCStressTest should test all heuristics + Workaround VM crash with JNI Weak Refs handling - Removed patches: * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch, 8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch, 8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch, 8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch, 8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch, 8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch, 8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch, 8203368.patch, 8205491.patch + Not needed any more - Modified patch: * java-1_8_0-openjdk-suse-desktop-files.patch - Rediff to changed context - Do not run standalone TestECDSA, since it is already run during the build- Removed patch: * s390-java-opts.patch - Not needed any more- Added patch: * icedtea-3.8.0-s390.patch + Fix out-of-memory problem with bootstrap javac on s390 + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)- Backport Oracle July 2018 CPU - Added security fixes: * 8197871.patch + S8197871: Support Derby connections (CVE-2018-2938, bsc#1101644) * 8197925.patch + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645) * 8199547.patch + S8199547: Exception to Pattern Syntax (CVE-2018-2952, bsc#1101651) * 8200666.patch + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656) - Added security-in-depth fixes: * 8191239.patch + S8191239: Improve desktop file usage * 8193419.patch + S8193419: Better Internet address support - Added patches: * 8038636.patch + S8038636: speculative traps break when classes are redefined * 8051972.patch + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails intermittently * 8055008.patch + S8055008: Clean up code that saves the previous versions of redefined classes + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links + S8057570: RedefineClasses() tests fail assert(((Metadata*)obj)->is_valid()) failed: obj is valid * 8074373.patch + S8074373: NMT is not enabled if NMT option is specified after class path specifiers * 8076117.patch + S8076117: EndEntityChecker should not process custom extensions after PKIX validation * 8157898.patch + S8157898: SupportedDSAParamGen.java failed with timeout * 8169201.patch + S8169201: Montgomery multiply intrinsic should use correct name * 8170035.patch + S8170035: When determining the ciphersuite lists, there is no debug output for disabled suites. * 8176183.patch + S8176183: sun/security/mscapi/SignedObjectChain.java fails on Windows * 8187635.patch + S8187635: On Windows Swing changes keyboard layout on a window activation * 8188223.patch + S8188223: IfNode::range_check_trap_proj() should handler dying subgraph with single if proj * 8196224.patch + S8196224: Even better Internet address support * 8196491.patch + S8196491: Newlines in JAXB string values of SOAP-requests are escaped to " " * 8196854.patch + S8196854: TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException * 8197943.patch + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM * 8198794.patch + S8198794: Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3 * 8199406.patch + S8199406: Performance drop with Java JDK 1.8.0_162-b32 * 8200359.patch + S8200359: (tz) Upgrade time-zone data to tzdata2018d * 8201433.patch + S8201433: Fix potential crash in BufImg_SetupICM * 8202585.patch + S8202585: JDK 8u181 l10n resource file update * 8202996.patch + S8202996: Remove debug print statements from RMI fix * 8203233.patch + S8203233: (tz) Upgrade time-zone data to tzdata2018e * 8203368.patch + S8203368: ObjectInputStream filterCheck method throws NullPointerException * 8205491.patch + S8205491: adjust reflective access checks- Update to version jdk8u171 (icedtea 3.8.0) * Security fixes + S8180881: Better packaging of deserialization + S8182362: Update CipherOutputStream Usage + S8183032: Upgrade to LittleCMS 2.9 + S8189123: More consistent classloading + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest entries + S8189977, CVE-2018-2795, bsc#1090025: Improve permission portability + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing portability + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data portability + S8189989, CVE-2018-2798, bsc#1090028: Improve container portability + S8189993, CVE-2018-2799, bsc#1090029: Improve document portability + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore mechanisms + S8190478: Improved interface method selection + S8190877: Better handling of abstract classes + S8191696: Better mouse positioning + S8192025, CVE-2018-2814, bsc#1090032: Less referential references + S8192030: Better MTSchema support + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes implementation + S8193409: Improve AES supporting classes + S8193414: Improvements in MethodType lookups + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection support * New features + PR3493: Run AES test to test intrinsics * Import of OpenJDK 8 u162 build 12 + S4354680: Runtime.runFinalization() silently clears interrupted flag in the calling thread + S6618335: ThreadReference.stop(null) throws NPE instead of InvalidTypeException + S6651256: jstack: DeleteGlobalRef method call doesn't lead to descreasing of global refs count shown by jstack + S6656031: SA: jmap -permstat number of classes is off by 1 + S6977426: sun/tools tests can intermittently fail to find app's Java pid + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112) + S7124271: [macosx] RealSync test failure + S7162125: [macosx] A font has different behaviour for ligatures depending on its creation mod + S8023667: SA: ExceptionBlob and other C2 classes not available in client VM + S8031661: java/net/Authenticator/B4769350.java failed intermittently + S8046778: Better error messages when starting JMX agent via attach or jcmd + S8066185: VM crashed with SIGSEGV VirtualMemoryTracker::add_reserved_region + S8072428: Enable UseLoopCounter ergonomically if on-stack-replacement is enabled + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly + S8074812: More specific error message when the .java_pid well-known file is not secure + S8078269: JTabbedPane UI Property TabbedPane.tabAreaBackground no longer works + S8080504: [macosx] SunToolkit.realSync() may hang + S8087291: InitialBootClassLoaderMetaspaceSize and CompressedClassSpaceSize should be checked consistent from MaxMetaspaceSize + S8132374: AIX: fix value of os.version property + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an interface + S8139218: Dialog that opens and closes quickly changes focus in original focusowner + S8147002: [macosx] Arabic character cannot be rendered on MacOS X + S8148786: xml.tranform fails on x86-64 + S8155197: Focus transition issue + S8157896: TestDSAGenParameterSpec.java test fails with timeout + S8158633: BASE64 encoded cert not correctly parsed with UTF-16 + S8159432: [PIT][macosx] StackOverflow in closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest + S8162530: src/jdk.management/share/native/libmanagement_ext/ /GcInfoBuilder.c doesn't handle JNI exceptions properly + S8164954: split_if creates empty phi and region nodes + S8166742: SIGFPE in C2 Loop IV elimination + S8169961: Memory leak after debugging session + S8172751: OSR compilation at unreachable bci causes C1 crash + S8175340: Possible invalid memory accesses due to ciMethodData::bci_to_data() returning NULL + S8177026: jvm.dll file version not updated since 8u72 + S8177414: Missing key events on Mac Os + S8177958: Possible uninitialized char* in vm_version_solaris_sparc.cpp + S8178047: Aliasing problem with raw memory accesses + S8179086: java.time.temporal.ValueRange has poor hashCode() + S8180370: Characters are skipped on input of Korean text on OS X + S8180855: Null pointer dereference in OopMapSet::all_do of oopMap.cpp:394 + S8181659: Create an alternative fix for JDK-8167102, whose fix was backed out + S8181786: Extra runLater causes impossible states to be possible using javafx.embed.singleThread=true + S8182402: Tooltip for Desktop button is in English when non-English locale is set + S8182996: Incorrect mapping Long type to JavaScript equivalent + S8184009: Missing null pointer check in InterpreterRuntime::update_mdp_for_ret() + S8184271: Time related C1 intrinsics produce inconsistent results when floating around + S8184328: JDK 8u131 socketRead0 hang at SSL read + S8184893: jdk8u152 b06 : issues with nashorn when running kraken benchmarks + S8185346: Relax RMI Registry Serial Filter to allow arrays of any type + S8187023: Cannot read pkcs11 config file in UTF-16 environment + S8189918: Remove Trailing whitespace from file while syncing 8u into 8u162-b03 + S8190280: [macos] Font2DTest demo started failing for Arabic range from JDK 8 u162 b01 on Mac + S8190542: 8u162 L10n resource file update + S8192794: 8u162 L10n resource file update md20 * Import of OpenJDK 8 u171 build 11 + S8054213: Class name repeated in output of Type.toString() + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java fails if SA not available + S8150530: Improve javax.crypto.BadPaddingException messages + S8153955: increase java.util.logging.FileHandler MAX_LOCKS limit + S8169080: Improve documentation examples for crypto applications + S8175075: Add 3DES to the default disabled algorithm security property + S8179665: [Windows] java.awt.IllegalComponentStateException: component must be showing on the screen to determine its location + S8186032: Disable XML Signatures signed with EC keys less than 224 bits + S8186441: Change of behavior in the getMessage () method of the SOAPMessageContextImpl class + S8187496: Possible memory leak in java.apple.security.KeychainStore.addItemToKeychain + S8189851: [TESTBUG] runtime/RedefineTests/RedefineInterfaceCall.java fails + S8191358: Restore TSA certificate expiration check + S8191909: Nightly failures in nashorn suite + S8192789: Avoid using AtomicReference in sun.security.provider.PolicyFile + S8194259: keytool error: java.io.IOException: Invalid secret key format + S8196952: Bad primeCertainty value setting in DSAParameterGenerator + S8197030: Perf regression on all platforms with 8u171-b03 - early lambda use + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux Platforms + S8198662: Incompatible internal API change in JDK8u161: signature of method exportObject() + S8198963: Fix new rmi property name + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails in compilation + S8199141: Windows: new warning messaging for JRE installer UI in non-MOS cases + S8200314: JDK 8u171 l10n resource file update - msg drop 40 * Backports + S8062808, PR3548: Turn on the -Wreturn-type warning + S8141570, PR3548: Fix Zero interpreter build for - -disable-precompiled-headers + S8143245, PR3548: Zero build requires disabled warnings + S8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile + S8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 + S8185723, PR3553: Zero: segfaults on Power PC 32-bit + S8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe + S8187577, PR3578: JVM crash during gc doing concurrent marking + S8197429, PR3546, RH1536622: Increased stack guard causes segfaults on x86-32 + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux builds + S8197981, PR3548: Missing return statement in __sync_val_compare_and_swap_8 + S8200556, PR3566: AArch64: assertion failure in slowdebug builds + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong * Bug fixes + S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build + PR3549: Desktop file doesn't reference versioned icon + PR3550: Additional category used in jconsole.desktop.in is incorrect + PR3559: Use ldrexd for atomic reads on ARMv7. + PR3575, RH1567204: System cacerts database handling should not affect jssecacerts + PR3592: Skip AES test on AArch64 due to VM crash + PR3593: s390 needs to use '%z' format specifier for size_t arguments as size_t != int + PR3594: Patch for bug 3593 breaks Shenandoah build + PR3597: Potential bogus -Wformat-overflow warning with - Wformat enabled * Shenandoah + PR3573: Fix TCK crash with Shenandoah + Remove oop cast in oopMap.cpp again, as oopDesc::operator== has additional checking in Shenandoah. + Fix new code for Shenandoah after the 8u171 merge + Revert accidental OpSpinWait matching + UseBiasedLocking should be disabled only for Shenandoah * AArch32 port + PR3548: Add missing return values for AArch32 port - Removed patches: * no-return-in-nonvoid-function.patch * zero-atomic_copy64.patch + fixed upstream * java-1_8_0-openjdk-gcc6.patch + not needed any more - Modified patch: * java-1_8_0-openjdk-suse-desktop-files.patch + rediff to changed context- Added patch: * no-return-in-nonvoid-function.patch + fix broken build with gcc8 (bsc#1087066)- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366 * Security fixes + S8160104: CORBA communication improvements + S8172525, CVE-2018-2579: Improve key keying case + S8174756: Extra validation for public keys + S8174962, CVE-2018-2582: Better interface invocations + S8175932: Improve host instance supports + S8176458: Revise default document styling + S8178449, CVE-2018-2588: Improve LDAP logins + S8178458: Better use of certificates in LDAP + S8178466: Better RSA parameters + S8179536: Cleaner print job handling + S8179990: Cleaner palette entry handling + S8180011: Cleaner native graphics device handling + S8180015: Cleaner AWT robot handling + S8180020: Improve SymbolHashMap entry handling + S8180433: Cleaner CLR invocation handling + S8180877: More deeply colored ICC spaces + S8181664: Improve JVM UTF String handling + S8181670: Improve implementation of keystores + S8182125, CVE-2018-2599: Improve reliability of DNS lookups + S8182387, CVE-2018-2603: Improve PKCS usage + S8182601, CVE-2018-2602: Improve usage messages + S8185292, CVE-2018-2618: Stricter key generation + S8185325, CVE-2018-2641: Improve GTK initialization + S8186080: Transform XML interfaces + S8186212, CVE-2018-2629: Improve GSS handling + S8186600, CVE-2018-2634: Improve property negotiations + S8186606, CVE-2018-2633: Improve LDAP lookup robustness + S8186699: Clean up extra Derby files + S8186867: Improve native glyph layouts + S8186998, CVE-2018-2637: Improve JMX supportive features + S8189284, CVE-2018-2663: More refactoring for deserialization cases + S8190289, CVE-2018-2677: More refactoring for client deserialization cases + S8191142, CVE-2018-2678: More refactoring for naming deserialization cases * Import of OpenJDK 8 u152 build 16 + S4953367: MAWT: Java should be more careful manipulating NLSPATH, XFILESEARCHPATH env variables + S6772009: java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java test failed with 'Completed != 2' + S6947916: JarURLConnection does not handle useCaches correctly + S6980209: Make tracking SecondaryLoop.enter/exit methods easier + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails intermittently + S7102702: java/net/PortUnreachableException/OneExceptionOnly.java failing + S7131356: (props) "No Java runtime present, requesting install" when creating VM from JNI [macosx] + S7172652: With JDK 1.7 text field does not obtain focus when using mnemonic Alt/Key combin + S8022291: Mac OS: Unexpected JavaLaunchHelper message displaying + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path) handles "null" incorrectly + S8025306: Inet[4|6]Address class and fieldID initialization in networking native code + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when offset is less than 10 minutes + S8028725: [Parfait] warnings from b116 for jdk.src.solaris.native.java.net: JNI pending exceptions + S8028769: Check src/share/native/java/lang/*.c for cases when JNI calls are used with pending warnings + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI pending exceptions + S8030116: (process) Check Parfait warnings in src/solaris/native/java/lang/* + S8031586: Check jdk/src/*/native/com/sun/security/auth/module for pending JNI exceptions + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c environ doesn't check for JNI pending exceptions + S8033372: Check jdk/src/share/native/java/lang for JNI pending exception issues + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c for JNI pending exceptions + S8034249: need more workarounds for suspend equivalent condition issue + S8035158: Remove dependency on sun.misc.RegexpPool and friends + S8035568: [macosx] Cursor management unification + S8035653: InetAddress.getLocalHost crash + S8037346: Need to terminate server process if client runs into problems + S8037909: JNI warnings in jdk/src/windows/native/java/nio/MappedByteBuffer.c + S8038075: JNI warnings in jdk/src/share/native/sun/misc/VMSupport.c + S8038348: Instance field load is replaced by wrong data Phi + S8039412: Stack overflow on Linux using DialogTypeSelection.NATIVE + S8040322: TextArea.replaceRange() and insert() are broken with setText(null) + S8040635: [macosx] Printing a shape filled with a texture doesn't work under Mac OS X + S8043913: remove legacy code in SPARC's VM_Version::platform_features + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails intermittently + S8046893: JNI exception pending in jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c, PlainDatagramSocketImpl.c + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait flagged uninitialized memory + S8049717: expose L1_data_cache_line_size for diagnostic/sanity checks + S8050478: [macosx] Cursor not updating correctly after closing a modal dialog + S8054214: JapaneseEra.getDisplayName doesn't return names if it's an additional era + S8055204: Memory leak in jdk/src/windows/native/java/lang/java_props_md.c + S8058316: lookupDefaultPrintService returns null on Solaris 11 + S8061258: [macosx] PrinterJob's native Print Dialog does not reflect specified Copies or Page Ranges + S8064470: JNI exception pending in jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c + S8066250: compiler/dependencies/MonomorphicObjectCall/ /TestMonomorphicObjectCall.java fails product + S8067059: PrinterJob.pageDialog() with DialogSelectionType.NATIVE returns a PageFormat when cancelled. + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind crashes on Windows + S8075516: Deleting a file from either the open or save java.awt.FileDialog hangs. + S8076249: NPE in AccessBridge while editing JList model + S8076554: [macosx] Custom Swing text components need to allow standard accessibility + S8080486: JNI exception pending in jdk/src/java.base/windows/ /native/libnet/DualStackPlainSocketImpl.c + S8081219: hs_err improvement: Add event logging for class redefinition to the hs_err file + S8087144: sun/security/krb5/auto/MaxRetries.java fails with Retry count is -1 less + S8087342: Crash in klassItable::initialize_itable_for_interface + S8089573: [macosx] Incorrect char to glyph mapping printing on OSX 10.10 + S8129361: ISO 4217 amendment 160 + S8130041: TsacertOptionTest.java intermittently fails on Mac + S8132209: DiagnosticCommandImpl.getNotificationInfo() may expose internal representation + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at handleNamingException + S8134119: Use new API to get cache line sizes + S8134389: Crash in HotSpot with jvm.dll+0x42b48 ciObjectFactory::create_new_metadata + S8134918: C2: Type speculation produces mismatched unsafe accesses + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed intermittently + S8136570: Stop changing user environment variables related to /usr/dt + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED + S8140309: [REDO] failed: no mismatched stores, except on raw memory: StoreB StoreI + S8140525: AwtFrame::WmShowWindow() may steal focus + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed intermittently + S8143897: Weblogic12medrec assert(handler_address == SharedRuntime::compute_compiled_exc_handler(nm, pc, exception, force_unwind, true)) failed: Must be the same + S8145207: [macosx] JList, VO can't access non-visible list items + S8145732: Duplicate entry in http.nonProxyHosts will ignore subsequent entries + S8145952: ISO 4217 amendment 161 + S8145981: (fs) LinuxWatchService can reports events against wrong directory + S8146961: Fix PermGen memory leaks caused by static final Exceptions + S8147772: Update KerberosTicket to describe behavior if it has been destroyed and fix NullPointerExceptions + S8149521: automatic discovery of LDAP servers with Kerberos authentication + S8149714: [parfait] char array lengths don't match in awt_Font.cpp:1701 + S8152000: Java FlightRecorder does not run on Java 8 compact 3 profile since u65 + S8152172: PPC64: Support AES intrinsics + S8152730: File Leak in CompileBroker::init_compiler_thread_log of compileBroker.cpp:1665. + S8152981: Double icons with JMenuItem setHorizontalTextPosition on Win 10 + S8153134: Infinite loop in handle_wrong_method in jmod + S8153176: ParOldGC: Use correct TaskQueueSet for ParallelTaskTerminator in marking. + S8153267: nmethod's exception cache not multi-thread safe + S8153925: (fs) WatchService hangs on GetOverlappedResult and locks directory (win) + S8154945: Enable 8130150 and 8081778 intrinsics by default + S8155691: Update GIFlib library to the latest up-to-date + S8155781: C2: opaque unsafe access triggers an assert + S8156116: [macosx] two JNI locals to delete in AWTWindow.m, CGraphicsEnv.m + S8156723: JVM crash at sun.java2d.windows.GDIBlitLoops.nativeBlit + S8157035: Use stronger algorithms and keys for JSSE testing + S8157181: Compilers accept modification of final fields outside initializer methods + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java failed with a fatal error + S8157548: JVM crashes sometimes while starting + S8157665: ProblemList.txt needs to be updated as 7041639 closed + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu + S8158356: SIGSEGV when attempting to rotate BufferedImage using AffineTransform by NaN degrees + S8158639: C2 compilation fails with SIGSEGV + S8159035: CTSMode.java test crashed due to unhandled case of cipher length value as 0 + S8159696: java.beans.MethodRef#get throws NullPointerException + S8160024: jdb returns invalid argument count if first parameter to Arrays.asList is null + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid + S8160174: java.net.NetworkInterface - fixes and improvements for network interface listing + S8160370: System.getProperty("os.version") returns "Unknown" on Mac + S8160551: assert(c == Bytecodes::_putfield) failed: must be putfield + S8160570: [macosx] modal dialog can skip the activation/focus events + S8160623: [PIT] Exception running java/awt/event/KeyEvent/KeyChar/KeyCharTest.java + S8160664: JVM crashed with font manager on Solaris 12 + S8160696: IllegalArgumentException: adding a component to a container on a different GraphicsDevice + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java fails due to missing keyStore file + S8160941: "text/uri-list" dataflavor concats the first two strings + S8161039: System.getProperty("os.version") returns incorrect version number on Mac + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI removed progress bar still referenced + S8161733: [parfait] Memory leak in imageioJPEG.c:2803 + S8161742: [parfait] Uninitialised memory in isXTestAvailable of awt_Robot.c:65 + S8161761: [parfait] 2 JNI exception pending defect groups in GraphicsPrimitiveMgr.c + S8162101: C2: Handle "wide" aliases for unsafe accesses + S8162488: JDK should be updated to use LittleCMS 2.8 + S8162496: missing precedence edge for anti_dependence + S8162598: XSLTC transformer swallows empty namespace declaration which is needed to undeclare default namespace + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints' + S8162766: Unsafe_DefineClass0 accesses raw oops while in _thread_in_native + S8162795: [REDO] MemberNameTable doesn't purge stale entries + S8162796: [macosx] LinearGradientPaint and RadialGradientPaint are not printed on OS X. + S8163104: Unexpected NPE still possible on some Kerberos ticket calls + S8163181: Further improvements for Unix NetworkInterface native implementation + S8163518: Integer overflow in StringBufferInputStream.read() and CharArrayReader.read/skip() + S8163877: Tests added in JDK-8163518 fail on some platforms + S8163896: Finalizing one key of a KeyPair invalidates the other key + S8163945: Honor Number type hint in toPrimitive on Numbers + S8163969: Cyclic interface initialization causes JVM crash + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla input method + S8164002: Add a new CPU family (S_family) for SPARC S7 and above processors + S8164119: MoveToOtherScreenTest fails due wrong key attribute + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject invalid input + S8164501: Uninitialised memory in byteArrayToPacket of SharedMemoryConnection.c + S8164508: unexpected profiling mismatch in c1 generated code + S8164784: ISO 4217 amendment 162 + S8164846: CertificateException missing cause of underlying exception + S8165153: Crash in rebuild_cpu_to_node_map + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with incorrect arguments should not produce output + S8165320: Small flaw when integrating 8160174 to JDK8 + S8165428: Security Warning dialog should be always on the top when multiple applets with APPLICATION_MODAL dialog launched in a browser + S8165482: java in ldoms, with cpu-arch=generic has problems + S8165717: [macosx] Various memory leaks in jdk9 + S8165751: NPE hit with java.security.debug=provider + S8165829: Android Studio 2.x crashes with NPE at sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent + S8165988: Test JarURLConnectionUseCaches.java fails at windows: failed to clean up files after test + S8166248: tools/pack200/Pack200Test.java fails on Win32: Could not reserve enough space + S8166507: ConcurrentSkipListSet.clear() can leave the Set in an invalid state + S8166747: Add invalid network / computer name cases to isReachable known failure switch + S8166799: ASSEMBLY_EXCEPTION contains historical company name + S8166840: Synthetic bridge constructor in ArrayList$Itr blocks inlining + S8166872: GPL header in /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp + S8166902: Nested object literal property maps not reset in optimistic recompilation + S8167102: [macosx] PrintRequestAttributeSet breaks page size set using PageFormat + S8168115: Remove and retag jdk8u122-b03 in 8u repo + S8168364: [macosx] Delete unused class NSPrintinfo + S8168373: don't emit conversions for symbols outside their lexical scope + S8168405: Pending exceptions in java.base/windows/native + S8168751: Two "Direct Clip" threads are created to play the same "AudioClip" object, what makes clip sound corrupted + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do during concurrent marking + S8169056: StringIndexOutOfBoundsException in Pattern.compile with CANON_EQ flag + S8169112: java.lang.VerifyError: (class: GregorSamsa, method: template-bash signature: (LGregorSamsa8;)V) Register 10 contains wrong type + S8169229: RSAClientKeyExchange debug info is incorrect + S8169355: Diacritics input works incorrectly on Windows if Spanish (Latin American) keyboard layout is used + S8169481: StackOverflowError on start when parsing PAC file to autodetect Proxy settings + S8169556: Wrapping of FileInputStream's native skip and available methods + S8169865: Downport minor fixes in java.net native code from JDK 9 to JDK 8 + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance due to non-optimized compilation + S8170278: ticket renewal won't happen with debugging turned on + S8170409: CMS: Crash in CardTableModRefBSForCTRS::process_chunk_boundaries + S8170465: JNI exception pending in jni_util.c:190 + S8170466: JNI exception pending in jni_util.c:190 + S8170536: Uninitialised memory in set_uintx_flag of attachListener.cpp + S8170552: [macosx] Wrong rendering of diacritics on macOS + S8170565: JSObject call() is passed undefined for the argument 'thiz' + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2) + S8170594: >>>=0 generates invalid bytecode for BaseNode LHS + S8170913: Java "1.8.0_112" on Windows 10 displays different characters for EUDCs from ones created in eudcedit.exe. + S8170950: Text is displayed in bold when fonts are installed into symlinked folder + S8170977: SparseArrayData should not grow its underlying dense array data + S8171151: JDK8u ProblemList.txt Updates + S8171155: Scanning method file for initialized final field updates can fail for non-existent fields + S8171194: Exception "Duplicate field name&signature in class file" should report the name and signature of the field + S8171219: Missing checks in sparse array shift() implementation + S8171808: Performance problems in dialogs with large tables when JAB activated + S8171849: Collection and Queue conversions not prioritized for Arrays + S8171909: [PIT] on Windows, failure of java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/ /NoExclusion/ModelessDialog test fails as DummyButton on Dialog did not gain focus when clicked. + S8172053: (ppc64) Downport of 8170153 breaks build on linux/ppc64 (big endian) + S8172145: C2: anti dependence missed because store hidden by membar + S8173373: C1: NPE is thrown instead of LinkageError when accessing inaccessible field on NULL receiver + S8173423: Wrong display name for supplemental Japanese era + S8173581: performance regression in com/sun/crypto/provider/OutputFeedback.java + S8173654: Regression since 8u60: System.getenv doesn't return env var set in JNI code + S8173664: Typo in https://java.net/downloads/heap-snapshot/hprof-binary-format.html + S8173853: IllegalArgumentException in java.awt.image.ReplicateScaleFilter + S8173876: Fast precise scrolling and DeltaAccumulator fix for macOS Sierra 10.12.2 + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with language set to "Chinese, Simplified" while region is not China + S8174779: Locale issues with Mac 10.12 + S8175025: The copyright section in the test/java/awt/font/ /TextLayout/DiacriticsDrawingTest.java should be updated + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection close connection on timeout + S8175345: Reported null pointer dereference defect groups + S8175915: NullPointerException from JComboBox and JList when Accessibility enabled + S8176287: [macosx] The print test crashed with Nimbus L&F + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs + S8176511: JSObject property access is broken for numeric keys outside the int range + S8176530: JDK support for JavaFX modal print dialogs + S8177095: Range check dependent CastII/ConvI2L is prematurely eliminated + S8177450: javax.swing.text.html.parser.Parser parseScript ignores a character after commend end + S8177678: Overstatement of universality of Era.getDisplayName() implementation + S8177776: Create an equivalent test case for JDK9's SupplementalJapaneseEraTest + S8177817: Remove assertions in 8u that were removed by 8056124 in 9. + S8179515: Class java.util.concurrent.ThreadLocalRandom fails to Initialize when using SecurityManager + S8180511: Null pointer dereference in Matcher::ReduceInst() + S8180565: Null pointer dereferences of ConstMethod::method() + S8180575: Null pointer dereference in LoadNode::Identity() + S8180576: Null pointer dereference in Matcher::xform() + S8180617: Null pointer dereference in InitializeNode::complete_stores + S8180660: missing LNT entry for finally block + S8180813: Null pointer dereference of CodeCache::find_blob() result + S8180934: PutfieldError failed with UnsupportedClassVersionError + S8180949: Correctly handle exception in TCPChannel.createConnection + S8181191: getUint32 returning Long + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog() hangs on macOS + S8181205: JRE fails to load/register security providers when started from UNC pathname + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails with jArrayIndexOutOfBoundsException + S8182672: Java 8u121 on Linux intermittently returns null for MAC address + S8185779: 8u152 L10n resource file update + S8186532: 8u152 L10n resource file update md20 * Import of OpenJDK 8 u161 build 12 + S8035105: DNS provider cleanups + S8137255: sun/security/provider/NSASuiteB/ /TestDSAGenParameterSpec.java timeouts intermittently + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS + S8148108: Disable Diffie-Hellman keys less than 1024 bits + S8148421, PR3504: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java fails on solaris + S8156502: Use short name of SupportedEllipticCurvesExtension.java + S8158116: com/sun/crypto/provider/KeyAgreement/ /SupportedDHParamGens.java failed with timeout + S8159240: XSOM parser incorrectly processes type names with whitespaces + S8159377: JMX Connections need white-list filters + S8161598: Kitchensink fails: assert(nm->insts_contains(original_pc)) failed: original PC must be in nmethod/CompiledMethod + S8163237: Restrict the use of EXPORT cipher suites + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java failing with cert error in 8u121 b01 + S8169944: sun/security/tools tests fail with CompilationError + S8170157: Enable unlimited cryptographic policy by default in OracleJDK + S8170245: [TEST_BUG] Cipher tests fail when running with unlimited policy + S8170911: 8170823 changes in 8u131 causing signature-test failure in jck runtime8b suite + S8171262: Stability fixes for lcms + S8172297: In java 8, the marshalling with JAX-WS does not escape carriage return + S8173631: Backout three hotspot fixes from 8u121-bpr repo + S8176536: Improved algorithm constraints checking + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java should run in ovm mode + S8177750: Forgot TestSocketFactory testcase in 8163958 changeset + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO 100% + S8178728: Check the AlgorithmParameters in algorithm constraints + S8179223: Integrate 8176490 into 8u131-bpr repo + S8181439: Test the jdk.tls.namedGroups System Property + S8181975: Run sun/security/pkcs11 tests on Mac + S8182614: Backout JDK-8140436 from 8u161 + S8183939: Import JDK-8182672 into 8u141-bpr repo + S8184016: Text in native popup is not always updated with Sogou IME + S8185572: Enable AssumeMP by default on SPARC machines + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java to jdk8u which is helpful in test development + S8185719: rmi TestSocketFactory does not flush + S8185909: Disable JARs signed with DSA keys less than 1024 bits + S8186539: [testlibrary] TestSocketFactory should allow triggers before match/replace + S8187482: Backout JDK-8159377 + S8187556: Backout of a fix reintroduced a dependency that had since been removed + S8188880: A JAXB JCK test failure found after 8186080 + S8190258, PR3499: (tz) Support tzdata2017c + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is broken by tzdata2017c + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java throws java.util.MissingResourceException. + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java fails on Solaris x64 5.10 + S8190497: DHParameterSpec.getL() returns zero after JDK-8072452 + S8190541: 8u161 L10n resource file update + S8190789: sun/security/provider/certpath/LDAPCertStore/ TestURICertStoreParameters.java fails after JDK-8186606 + S8191137, PR3503: keytool fails to format resource strings for keys for some languages after JDK-8171319 + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan. internal.xsltc.trax.TransformerFactoryImpl (unknown type) + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include 8191340 for b07 + S8191907: PPC64 part of JDK-8174962: Better interface invocations + S8192793: 8u161 L10n resource file update md20 + S8193683: Increase the number of clones in the CloneableDigest * Backports + S8165996, PR3506: PKCS11 using NSS throws an error regarding secmod.db when NSS uses sqlite + S8170523, PR3506: Some PKCS11 test cases are ignored with security manager + S8187667, PR3517: Disable deprecation warning for readdir_r + S8189789, PR3530: tomcat gzip-compressed response bodies appear to be broken in update 151 + S8194739, PR3520: Zero port of 8174962: Better interface invocations + S8194828, PR3520: Fix for 8194739: Zero port of 8174962: Better interface invocations + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c + S8196516, PR3523: [REDO] [linux] libfontmanager should be linked against headless awt library + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6 * Bug fixes + PR3489: Incomplete reading of directory containing tzdb.dat + PR3501: Revert 8165320 so as not to revert the work of 8034174 (PR2290) + PR3526: configure fails to parse GCC version * AArch64 port + S8164113, PR3519: AArch64: follow-up the fix for 8161598 + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be in-heap + S8194686, PR3519: AArch64 port of 8174962: Better interface invocations + S8195859, PR3519: AArch64: vtableStubs gtest fails after 8174962 + S8196136, PR3519: AArch64: Correct register use in patch for JDK-8194686 + S8196221, PR3519: AArch64: Mistake in committed patch for JDK-8195859 + PR3519: Fix functions with missing return value. + PR3519: Fix further functions with a missing return value. * AArch32 port + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always runs verification code + S8174962: [aarch32] Better interface invocations * Shenandoah + Fix post-CPU merge Shenandoah regressions - Removed patch: * tzdb_dat.patch + integrated upstream - Added patch: * aarch64.patch + fix aarch64 build- Fix build with gcc 7.3 * add -fno-delete-null-pointer-checks -fno-lifetime-dse and - std=gnu++98- Added patch: * tzdb_dat.patch + Patch also the other place in jdk that loads the tzdb.dat file- Update to version jdk8u151 (icedtea 3.6.0) * Security fixes + S8165543: Better window framing + S8169026, CVE-2017-10274: Handle smartcard clean up better (bsc#1064071) + S8169966: Larger AWT menus + S8170218: Improved Font Metrics + S8171252: Improve exception checking + S8171261: Stability fixes for lcms + S8174109, CVE-2017-10281: Better queuing priorities (bsc#1064072) + S8174966, CVE-2017-10285: Unreferenced references (bsc#1064073) + S8175940: More certificate subject checking + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075) + S8178794, CVE-2017-10388: Correct Kerberos ticket grants (bsc#1064086) + S8180024: Improve construction of objects during deserialization + S8180711, CVE-2017-10346: Better invokespecial checks (bsc#1064078) + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082) + S8181323, CVE-2017-10347: Better timezone processing (bsc#1064079) + S8181327, CVE-2017-10349: Better X processing (bsc#1064081) + S8181370, CVE-2017-10345: Better keystore handling (bsc#1064077) + S8181432, CVE-2017-10348: Better processing of unresolved permissions (bsc#1064080) + S8181597, CVE-2017-10357: Process Proxy presentation (bsc#1064085) + S8181612, CVE-2017-10355: More stable connection processing (bsc#1064083) + S8181692, CVE-2017-10356: Update storage implementations (bsc#1064084) + S8183028, CVE-2016-10165: Improve CMS header processing (bsc#1064069) + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843: Upgrade compression library (bsc#1064070) * New features + PR3469: Alternative path to tzdb.dat + PR3483: Separate addition of nss.cfg and tz.properties into separate targets + PR3484: Move SystemTap support to its own target + PR3485: Support additional targets for the bootstrap build * Import of OpenJDK 8 u151 build 12 + S8029659: Keytool, print key algorithm of certificate or key entry + S8057810: New defaults for DSA keys in jarsigner and keytool + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0 can hang even with soTimeout set + S8077670: sun/security/krb5/auto/MaxRetries.java may fail with BindException + S8087144: sun/security/krb5/auto/MaxRetries.java fails with Retry count is -1 less + S8153146: sun/security/krb5/auto/MaxRetries.java failed with timeout + S8157561: Ship the unlimited policy files in JDK Updates + S8158517: Minor optimizations to ISO10126PADDING + S8171319: keytool should print out warnings when reading or generating cert/cert req using weak algorithms + S8177569: keytool should not warn if signature algorithm used in cacerts is weak + S8177837: need to upgrade install tools + S8178714: PKIX validator nameConstraints check failing after change 8175940 + S8179423: 2 security tests started failing for JDK 1.6.0 u161 b05 + S8179564: Missing @bug for tests added with JDK-8165367 + S8181048: Refactor existing providers to refer to the same constants for default values for key length + S8182879: Add warnings to keytool when using JKS and JCEKS + S8184937: LCMS error 13: Couldn't link the profiles + S8185039: Incorrect GPL header causes RE script to miss swap to commercial header for licensee source bundle + S8185040: Incorrect GPL header causes RE script to miss swap to commercial header for licensee source bundle + S8185778: 8u151 L10n resource file update + S8185845: Add SecurityTools.java test library + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java failed after backport to JDK 6/7/8 + S8186533: 8u151 L10n resource file update md20 + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds * Backports + S8035496, PR3487: G1 ARM: missing remset entry noticed by VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0 + S8146086, PR3439, RH1478402: Publishing two webservices on same port fails with "java.net.BindException: Address already in use" + S8184673, PR3475, RH1487266: Fix compatibility issue in AlgorithmChecker for 3rd party JCE providers + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect owned monitor + S8187822, PR3478, RH1494230: C2 conditonal move optimization might create broken graph * Bug fixes + PR3479, RH1486025: ECC and NSS JVM crash + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot + S8165852, PR3468: (fs) Mount point not found for a file which is present in overlayfs + S8188030, PR3459, RH1484079: AWT java apps fail to start when some minimal fonts are present * PPC port + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply intrinsic + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of li/cmpld + S8170328, PR3466, RH1498321: PPC64: Use andis instead of lis/and + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for bitfield extract * AArch64 port + S8161190, PR3488: AArch64: Fix overflow in immediate cmp instruction + S8187224, PR3488: aarch64: some inconsistency between aarch64_ad.m4 and aarch64.ad * SystemTap + PR3467, RH1492139: Hotspot object_alloc tapset uses HeapWordSize incorrectly * Shenandoah + Add missing UseShenandoahGC checks to C2 + [backport] Add JVMTI notifications to Shenandoah GC pauses. + [backport] After Evac verification should run consistently + [backport] All definitions should start with Shenandoah* + [backport] Allocation latency tracing + [backport] Allow allocations in pinned regions + [backport] Assorted monitoring support fixes + [backport] Avoid Full STW GC on System.gc() + related fixes + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace + [backport] Cannot do more than 1000 Full GCs + [backport] Cap heap size for TestRegionSizeArgs test + [backport] Cleanup "dirty" mentions + [backport] Cleanup unused methods and statements + Trivial cleanup: removed unused field, etc. + [backport] Common pause marker to capture everything before/after pause + [backport] Consistent print_on and tty handling + [backport] "continuous" heuristics + [backport] Disable biased locking by default + [backport] Fix build error: avoid loops with empty bodies + [backport] Fix build error: switches over enums should take all enums + [backport] Fix build error: verifier liveness should not be implicitly casted to size_t + [backport] Fixed assertion failures when printing heap region to trace output + [backport] Fixed C calling convention of shenandoah_wb() on Windows + [backport] LotsOfCycles test always degrades to Full GC + [backport] Made ShenandoahPrinter debug only + [backport] Make sure different Verifier levels work + [backport] Make sure we have at least one memory pool per memory manager (JMX) + JMX double-counts heap used size + [backport] Mark heuristics diagnostic/experimental + [backport] Move Verifier "start" message under (gc,start) + [backport] On-demand commit as heap resizing strategy + [backport] Periodic GC + [backport] PhiNode::has_only_data_users() needs to apply to shenandoah barrier only + [backport] Pinning humongous regions should be allowed + [backport] Reclaimed humongous regions should count towards immediate garbage + [backport] Refactor region flags into finite state machine + [backport] Refactor ShConcThread dispatch + [backport] Refactor ShenandoahFreeSet + Fast-forward over humongous regions to keep "current" non-humongous + [backport] Refactor ShenandoahHeapLock + [backport] Refactor ShenandoahHeapRegionSet + [backport] Region (byte|word) shifts as the replacement for divisions + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation tests + [backport] Rename inline guards + [backport] Selectable humongous threshold + Humongous top() should be correct for iteration + [backport] Shortcut concurrent cycle when enough immediate garbage is reclaimed + [backport] Templatize and improve inlining of arraycopy and clone barriers. + [backport] TestRegionSampling test + [backport] TestSmallHeap test for Shenandoah + [backport] Uncommit heap regions after given delay + [backport] Underflow in adaptive free_threshold calculation + [backport] Unlock more GC-specific tests for Shenandoah + [backport] Update counters on slow-path more rarely + [backport] Verifier should avoid pushing on stack when walking objects past TAMS + [backport] Verifier should walk cset and humongous regions + [backport] Verify humongous regions liveness + [backport] Verify liveness data + Correct way to fix Windows call convention issue + Fix build error in release config. + Fixed Fixed message logging + Handle Java heap initialization and expansion failures + Make sure -verbose:gc, PrintGC, PrintGCDetails work consistently + Missing barriers on constant oops + acmp rework + cas fix + write barrier on constant oop fix + Missing UseShenandoahGC check in LibraryCallKit::inline_multiplyToLen() + Missing UseShenandoahGC check to C2 + OOME in SurrogateLockerThread deadlocks the GC cycle + Properly unlock ShenandoahVerify + Remove unused memory_for, fixing the build + Remove useless code following acmp rework + Revert accidental G1 closure rename + Test bug: test library and flags in TestHeapAlloc + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify + Write barrier pin and expand cleanup - Removed patches: * alternative-tzdb_dat.patch * java-1_8_0-openjdk-linuxfilestore.patch + Integrated upstream- Enable improved font rendering on systems where it applies- Change the requirement of tzdata-java8 to Recommends, since it is not strictly needed.- Added patch: * alternative-tzdb_dat.patch + Allow specifying alternative path where to find the tzdb.dat file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat - Don't symlink tzdb.dat in postinstall- Update the provided jdbc-stdext version to 4.2- Allow bootstrapping by itself (BuildConflicts: java-devel >= 1.9)- Make the requirements for mozilla-nss requires_ge instead of requires_eq- Don't require java-bootstrap-devel, build with the non-bootstrap java.- Added patch: * zero-atomic_copy64.patch - Fix wrong assembly for ppc and (maybe for) s390- Added patch: * java-1_8_0-openjdk-linuxfilestore.patch - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and overlayfs- Update to version jdk8u144 (icedtea 3.5.1) * Import of OpenJDK 8 u144 build 01 - S8184993: Jar file verification failing with SecurityException: digest missing xxx * Shenandoah - Amend "ArrayCopy verification code fix" with 8u-specific node hierarchy test - Amend "Refactor asm acmp" with a few missing changes - [backport] aarch64 store check fix - [backport] Account "shared" out-of-LAB allocations separately - [backport] Adaptive should not be scared of user-requested System.gc() - [backport] Added assertion for page alignment of heap's base address - [backport] Add "verify jcstress" acceptance test - [backport] "Allocation failure" cause should not be overwritten - [backport] ArrayCopy verification code fix - [backport] Assorted cleanups - [backport] "Before Full GC" verification is too strong for OOME-during-evac - [backport] C1 stores constants without read barriers - [backport] Cleanup AArch64 code - [backport] Cleanup class unloading and string intern code - [backport] Cleanup duplicated Shenandoah task queue declarations - [backport] Cleanups - [backport] Cleanup ShenandoahBarrierSet::write_barrier - [backport] Cleanup ShenandoahHeap::do_evacuation - [backport] Clean up unused fields and methods - [backport] Cleanup: update-refs check in_collection_set twice - [backport] Code cache roots styles - [backport] Concurrent code cache evacuation + bugfixes - [backport] Concurrent preclean + Fix weakref precleaning - [backport] Correct prefetch offset for marked object iteration - [backport] Deferred region cleanup. - [backport] Dense ShenandoahHeapRegion printout - [backport] Detailed ParallelCleanupTask statistics + Split out Full GC stats for parallel cleaning - [backport] Disable aggressive+verification test configs (jtreg eats up last configuration) - [backport] Do not abandon RP discovery on conc GC cancel, do that only before Full GC - [backport] Eliminating _num_regions variable in ShenandoahHeap - [backport] Ensure collection set and cset map are consistent - [backport] Fallback to shared allocation if GCLAB is not available - [backport] Fast synchronizer root scanning - [backport] "F: Code Cache Roots" is missing from gc+stats - [backport] Fix DerivedPointerTable handling when scanning roots twice in init-evac phase - [backport] Fixed a few of early returns that calling register_gc_end() - [backport] Fix live data accounting for humongous region - [backport] Fix memory Phis with only data uses - [backport] Fix recycled regions zapping - [backport] Fix up pointer volatility - [backport] Generic verification should not trust bitmaps - [backport] Heap/matrix verification for all reachable objects - [backport] Heap memory usage counting not longer needs to be atomic - [backport] Heap region recycling should call explicit clear() and request zapping - [backport] Heap region verification - [backport] Implementation of interpreter matrix barrier on aarch64 - [backport] Implement early update references phase. - [backport] implicit null checks broken on aarch64 - [backport] Increase timeout for EvilSyncBug test - [backport] Lazy parallel code cache iterator - [backport] Make statistics gathering span more operations - [backport] Make sure atomic operations are done on "volatile" fields - [backport] Make sure new_active_workers is used - [backport] Make {T,GC}LAB statistics unconditional - [backport] Mark-compact and heuristics should consistently process refs and unload classes - [backport] minor fix to optimization of java mirror comparison - [backport] more barrier on constant oop fixes + couple small unrelated fixes - [backport] More collection set and matrix cleanup - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should announce itself as "Phase 3" - [backport] Optimize heap region size checks - [backport] Optimize heap verification - [backport] Out-of-TLAB evacuation should overwrite stale copies - [backport] Parallel code cache scanning - [backport] Parallel verification - [backport] Print correct message about gross times in stats - [backport] Print heap changes in phases that actually change heap occupancy - [backport] Print more detailed final UR stats - [backport] Print more details for weak ref and class unloading stats - [backport] Properly react on -ClassUnloading - [backport] Purge ealier version of redefined classes during class unloading - [backport] Purge ratio, global, connections heuristics. - [backport] Purge shenandoahHumongous.hpp - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace. - [backport] Reduce region retirement during tlab allocation - [backport] Refactor asm acmp (x86, aarch64, renames) - [backport] Refactor BrooksPointer asserts - [backport] Refactor heap verification - [backport] Reference processing deadlocks with - ParallelRefProcEnabled - [backport] Reference processors might use non-forwarded alive checks - [backport] Region sampling may not be enabled because last timetick is uninitialized - [backport] Rehash ShenandoahHeap section in hs_err - [backport] Reinstate "Purge" block in final-mark stats - [backport] Relax assert to not fire at safepoint - [backport] Remove heap printing routines from ShenandoahHeap - [backport] Remove obsolete compile_resolve_oop_runtime() methods - [backport] Rename final mark operations - [backport] Rename ShenandoahBarriersForConst - [backport] Replace ShHeapRegionSet::get with get_fast - [backport] Report correct total garbage data. Print out garbage and cset data with -Xlog:gc+ergo - [backport] Report oops and fwdptrs verification failures fully - [backport] Result of write barrier on constant not used - [backport] Separate Full GC root operations in GC stats - [backport] ShenandoahCollectionSet refactor - [backport] ShenandoahGCSession used wrong timer for full GC - [backport] ShenandoahHeap::evacuate_object() with boolean result flag. - [backport] Shenandoah options should be uintx - [backport] shenandoah_wb should fallback to slow path with - UseTLAB + Fix aarch64 compilation error due to shenandoah_wb change - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths() assert failure when compiling methods using unsafe - [backport] Shortcut reference processing when no work is available - [backport] Simplify parallel synchronizer roots iterator - [backport] Skip RESOLVE when references update is not needed - [backport] Stats should attribute "Resize TLABs" properly, and mention "Pause" for init/final mark - [backport] Stats should not record past-shutdown events - [backport] "String/Symbol/CodeCache" -> "Str/Sym, Code Cache" - [backport] Tests should use all heuristics and pass heap verification + Disable aggressive+verification test configs - [backport] Total pauses should include final-mark pauses - [backport] Trim down native GC footprint - [backport] Update region sampling to include TLAB/GCLAB allocation data - [backport] Update roots should always handle derived pointers - [backport] Update ShenandoahHeapSampling to avoid double counting. - [backport] Update statistics to capture thread data accurately - [backport] Use CollectedHeap::base() instead of ShenandoahHeap::first_region_bottom() - [backport] Use lock version heap region memory allocator - [backport] Use scoped object for gc session/phases recording - [backport] Variable steps in adaptive heuristics - [backport] Verification error log is truncated - [backport] Verification levels - [backport] Verification should assert complete bitmaps in most phases + Disable complete bitmap verification in init mark - [backport] Verifier performance improvements: scan objects once, avoid double oop checks - [backport] Verifier should not assert cset in forwarded test block - [backport] Verifier should print extended info on referenced location - [backport] Verifier should use non-optimized root scans - [backport] Verify marked objects - [backport] Verify TAMS and object sizes - [backport] write barrier can get stuck below predicates resulting in unschedulable graph - S8140584: nmethod::oops_do_marking_epilogue always runs verification code - S8180175, S8180599: Cherry-pick/synchronize - Cleanup: Removed redundant ClassLoaderData::clear_claimed_marks() calls - Cleanup shared code. - Fixed memory leak in region garbage cache - Fix return type of ShenandoahHeapRegion::region_size_words_jint() - Improved comment about AArch64bit addressing in assembler. - Leak mutex in ShenandoahTaskTerminator - Make sure C2 arguments are not used when C2 is disabled. - Refactor parallel ClassLoaderData iterator - Revert G1 changes and bring shared BitMap - Add missing cmpoops() declaration to AArch64 macro assembler. Back out matrix related code from AArch64 interpreter. - Fix build without precompiled headers. - Fixed build issues on Windows- Use aarch32 instead of arm as a directory for JIT arm 32-bit virtual machine.- Upgrade to version jdk8u141 (icedtea 3.5.0) * Security fixes - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage collection - S8167228: Update to libpng 1.6.28 - S8169209, CVE-2017-10053, bsc#1049305: Improved image post-processing steps - S8169392, CVE-2017-10067, bsc#1049306: Additional jar validation steps - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue - S8171539, CVE-2017-10078, bsc#1049308: Better script accessibility for JavaScript - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool execution - S8172461, CVE-2017-10089, bsc#1049312: Service Registration Lifecycle - S8172465, CVE-2017-10090, bsc#1049313: Better handling of channel groups - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer Exceptions - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text catalogs - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations - S8173770, CVE-2017-10074, bsc#1049307: Image conversion improvements - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching - S8174105, CVE-2017-10108, bsc#1049319: Better naming attribution - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code - S8174770: Check registry registration location - S8174873: Improved certificate processing - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA operations - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA operations - S8176055: JMX diagnostic improvements - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup processing - S8176760, CVE-2017-10135, bsc#1049328: Better handling of PKCS8 material - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic curve support - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm constraints implementation - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain connections - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion improvements - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image conversion improvements - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle arrangements - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in subcomponent JAX-WS - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in subcomponent deployment - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in subcomponent JavaFX - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in subcomponent deployment - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in subcomponent JavaFX * New features - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider * Import of OpenJDK 8 u141 build 15 (bsc#1049302) - S8139870: sun.management.LazyCompositeData.isTypeMatched() fails for composite types with items of ArrayType - S8155690: Update libPNG library to the latest up-to-date - S8159058: SAXParseException when sending soap message - S8162461: Hang due to JNI up-call made whilst holding JNI critical lock - S8163889: [macosx] Can't print from browser on Mac OS X - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc - S8165367: Additional tests for JEP 288: Disable SHA-1 Certificates - S8173145: Menu is activated after using mnemonic Alt/Key combination - S8173207: Upgrade compression library - S8175251: Failed to load RSA private key from pkcs12 - S8176329: jdeps to detect MR jar file and output a warning - S8176536: Improved algorithm constraints checking - S8176731: JCK tests in api/javax_xml/transform/ spec conformance started failing after 8172469 - S8176769: Remove accidental spec change in jdk8u - S8177449: (tz) Support tzdata2017b - S8178996: [macos] JComboBox doesn't display popup in mixed JavaFX Swing Application on 8u131 and Mac OS 10.12 - S8179014: JFileChooser with Windows look and feel crashes on win 10 - S8180582: The bind to rmiregistry is rejected by registryFilter even though registryFilter is set - S8181591: 8u141 L10n resource file update - S8181698: Remove and retag 8u141-b12 tag from source repository - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup - S8182054: Improve wsdl support - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher updates source base * Backports - S8164293, PR3412, RH1459641: HotSpot leaking memory in long-running requests - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument" when -XX:+UseNUMA is used - S8175887, PR3415: C1 value numbering handling of Unsafe.get*Volatile is incorrect - S8179084, PR3409, RH1455694: HotSpot VM fails to start when AggressiveHeap is set - S8180048, PR3411, RH1449870: Interned string and symbol table leak memory during parallel unlinking - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument" still seen after 8175813 - S8181419, PR3413, RH1463144: Race in jdwp invoker handling may lead to crashes or invalid results * AArch64 port - S7009641, PR3423: Don't fail VM when CodeCache is full - S8182581, PR3423: aarch64: fix for crash caused by earlyret of compiled method * AArch32 port - PR3391: Revert PR3385 as -Xshare:dump does appear to work on AArch32- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849 * Security fixes - S8163520, CVE-2017-3509: Reuse cache entries - S8163528, CVE-2017-3511: Better library loading - S8165626, CVE-2017-3512: Improved window framing - S8167110, CVE-2017-3514: Windows peering issue - S8168699: Validate special case invocations - S8169011, CVE-2017-3526: Resizing XML parse trees - S8170222, CVE-2017-3533: Better transfers of files - S8171121, CVE-2017-3539: Enhancing jar checking - S8171533, CVE-2017-3544: Better email transfer - S8172299: Improve class processing * New features - PR1969: Add AArch32 JIT port - PR3297: Allow Shenandoah to be used on AArch64 - PR3340: jstack.stp should support AArch64 * Import of OpenJDK 8 u131 build 11 - S6474807: (smartcardio) CardTerminal.connect() throws CardException instead of CardNotPresentException - S6515172, PR3346: Runtime.availableProcessors() ignores Linux taskset command - S7155957: closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java hangs on win 64 bit with jdk8 - S7167293: FtpURLConnection connection leak on FileNotFoundException - S8035568: [macosx] Cursor management unification - S8079595: Resizing dialog which is JWindow parent makes JVM crash - S8130769: The new menu can't be shown on the menubar after clicking the "Add" button. - S8146602: jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test fails with NullPointerException - S8147842: IME Composition Window is displayed at incorrect location - S8147910, PR3346: Cache initial active_processor_count - S8150490: Update OS detection code to recognize Windows Server 2016 - S8160951: [TEST_BUG] javax/xml/bind/marshal/8134111/UnmarshalTest.java should be added into :needs_jre group - S8160958: [TEST_BUG] java/net/SetFactoryPermission/SetFactoryPermission.java should be added into :needs_compact2 group - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is enabled - S8161195: Regression: closed/javax/swing/text/FlowView/LayoutTest.java - S8161993, PR3346: G1 crashes if active_processor_count changes during startup - S8162876: [TEST_BUG] sun/net/www/protocol/http/HttpInputStream.java fails intermittently - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java failed with "Error while cleaning up threads after test" - S8167179: Make XSL generated namespace prefixes local to transformation process - S8168774: Polymorhic signature method check crashes javac - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections - S8169589: [macosx] Activating a JDialog puts to back another dialog - S8170307: Stack size option -Xss is ignored - S8170316: (tz) Support tzdata2016j - S8170814: Reuse cache entries (part II) - S8170888, PR3314, RH1284948: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments - S8171388: Update JNDI Thread contexts - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with error: The bitwise mask Frame.ICONIFIED is not setwhen the frame is in ICONIFIED state - S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog test fails as DummyButton on Dialog did not gain focus when clicked. - S8173030: Temporary backout fix #8035568 from 8u131-b03 - S8173031: Temporary backout fix #8171952 from 8u131-b03 - S8173783, PR3328: IllegalArgumentException: jdk.tls.namedGroups - S8173931: 8u131 L10n resource file update - S8174844: Incorrect GPL header causes RE script to miss swap to commercial header for licensee source bundle - S8174985: NTLM authentication doesn't work with IIS if NTLM cache is disabled - S8176044: (tz) Support tzdata2017a * Backports - S6457406, PR3335: javadoc doesn't handle properly in producing index pages - S8030245, PR3335: Update langtools to use try-with-resources and multi-catch - S8030253, PR3335: Update langtools to use strings-in-switch - S8030262, PR3335: Update langtools to use foreach loops - S8031113, PR3337: TEST_BUG: java/nio/channels/AsynchronousChannelGroup/Basic.java fails intermittently - S8031625, PR3335: javadoc problems referencing inner class constructors - S8031649, PR3335: Clean up javadoc tests - S8031670, PR3335: Remove unneeded -source options in javadoc tests - S8032066, PR3335: Serialized form has broken links to non private inner classes of package private - S8034174, PR2290: Remove use of JVM_* functions from java.net code - S8034182, PR2290: Misc. warnings in java.net code - S8035876, PR2290: AIX build issues after '8034174: Remove use of JVM_* functions from java.net code' - S8038730, PR3335: Clean up the way JavadocTester is invoked, and checks for errors. - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests - S8040904, PR3335: Ensure javadoc tests do not overwrite results within tests - S8040908, PR3335: javadoc test TestDocEncoding should use - notimestamp - S8041150, PR3335: Avoid silly use of static methods in JavadocTester - S8041253, PR3335: Avoid redundant synonyms of NO_TEST - S8043780, PR3368: Use open(O_CLOEXEC) instead of fcntl(FD_CLOEXEC) - S8061305, PR3335: Javadoc crashes when method name ends with "Property" - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits - S8075565, PR3337: Define @intermittent jtreg keyword and mark intermittently failing jdk tests - S8075670, PR3337: Remove intermittent keyword from some tests - S8078334, PR3337: Mark regression tests using randomness - S8078880, PR3337: Mark a few more intermittently failuring security-libs - S8133318, PR3337: Exclude intermittent failing PKCS11 tests on Solaris SPARC 11.1 and earlier - S8144539, PR3337: Update PKCS11 tests to run with security manager - S8144566, PR3352: Custom HostnameVerifier disables SNI extension - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command - S8155049, PR3352: New tests from 8144566 fail with "No expected Server Name Indication" - S8173941, PR3326: SA does not work if executable is DSO - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes breaks with irreducible loops - S8174729, PR3336, RH1420518: Race Condition in java.lang.reflect.WeakCache - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the test * Bug fixes - PR3348: Architectures unsupported by SystemTap tapsets throw a parse error - PR3378: Perl should be mandatory - PR3389: javac.in and javah.in should use @PERL@ rather than a hardcoded path * AArch64 port - S8168699, PR3372: Validate special case invocations [AArch64 support] - S8170100, PR3372: AArch64: Crash in C1-compiled code accessing References - S8172881, PR3372: AArch64: assertion failure: the int pressure is incorrect - S8173472, PR3372: AArch64: C1 comparisons with null only use 32-bit instructions - S8177661, PR3372: Correct ad rule output register types from iRegX to iRegXNoSp * AArch32 port - PR3380: Zero should not be enabled by default on arm with the AArch32 HotSpot build - PR3384, S8139303, S8167584: Add support for AArch32 architecture to configure and jdk makefiles - PR3385: aarch32 does not support -Xshare:dump - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build - PR3387: Installation fails on arm with AArch32 port as INSTALL_ARCH_DIR is arm, not aarch32 - PR3388: Wrong path for jvm.cfg being used on arm with AArch32 build * Shenandoah - Fix Shenandoah argument checking on 32bit builds. - Import from Shenandoah tag aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25 - Import from Shenandoah tag aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20 - Import from Shenandoah tag aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06 - Import from Shenandoah tag aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09 - Import from Shenandoah tag aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed. Fixes bsc#1026102. - Clean the mozilla-nss requires and move them into the headless- Add a test to check that ECC is working * new file TestECDSA.java- Don't run bootstrap build for s390, since it is broken, instead introduce a little cycle on this platform, in order to have working openjdk8- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905 * Security fixes - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution - S8156804, CVE-2017-3241: Better constraint checking - S8158406: Limited Parameter Processing - S8158997: JNDI Protocols Switch - S8159507: RuntimeVisibleAnnotation validation - S8161218: Better bytecode loading - S8161743, CVE-2017-3252: Provide proper login context - S8162577: Standardize logging levels - S8162973: Better component components - S8164143, CVE-2017-3260: Improve components for menu items - S8164147, CVE-2017-3261: Improve streaming socket output - S8165071, CVE-2016-2183: Expand TLS support - S8165344, CVE-2017-3272: Update concurrency support - S8166988, CVE-2017-3253: Improve image processing performance - S8167104, CVE-2017-3289: Additional class construction refinements - S8167223, CVE-2016-5552: URL handling improvements - S8168705, CVE-2016-5547: Better ObjectIdentifier validation - S8168714, CVE-2016-5546: Tighten ECDSA validation - S8168728, CVE-2016-5548: DSA signing improvments - S8168724, CVE-2016-5549: ECDSA signing improvments * New features - PR3300: wget not required when downloading is disabled - PR3301: Support RHEL multilib installations which use the /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming - PR3303: Allow Kerberos to be detected by old libs & headers method if pkg-config check fails * Import of OpenJDK 8 u112 build 16 - S6477756: GraphicsDevice.getConfigurations() is slow taking 3 or more seconds - S7172749: Xrender: Class cast exception in 2D code running an AWT regression test - S8017629: G1: UseSHM in combination with a G1HeapRegionSize > os::large_page_size() falls back to use small pages - S8022203: Intermittent test failures in demo/jvmti/hprof - S8022582: Relax response flags checking in sun.security.krb5.KrbKdcRep.check. - S8027575: b113 causing a lot of memory allocation and regression for wls_webapp_atomics - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves HelloServer behind - S8036630: Null ProtectionDomain in JVM can cause NPE because principals field is not initialized to an empty array - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with: assert(index >=0 && index < _length) failed: symbol index overflow - S8044193: Need to add known answer tests for AES cipher - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java failed: assert(!res || TypeEntriesAtCall::arguments_profiling_enabled()) failed: no profiling of arguments - S8048601: Tests for JCE crypto ciphers (part 1) - S8048621: Implement basic keystore tests - S8048622: Enhance tests for PKCS11 keystores with NSS - S8049021: Add smartcardio tests with APDU buffer - S8049312: AES/CICO test failed with on several modes - S8050402: Tests to check for use of policy files - S8050409: Test for JAAS getPrivateCredentials - S8054326: Confusing message in "Current rem set statistics" - S8055772: get_source.sh : version check assumes English localization - S8057791: Selection in JList is drawn with wrong colors in Nimbus L&F - S8058865: JMX Test Refactoring - S8067964: Native2ascii doesn't close one of the streams it opens - S8071487: javax/management/monitor/GaugeMonitorDeadlockTest.java timed out - S8071909: Port testlibrary improvments in jdk/test to hotspot/test as required for DCMD test port - S8073542: File Leak in jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c - S8074784: Additional tests for XML DSig API - S8075007: Additional tests for krb5-related cipher suites with unbound server - S8075297: Tests for RFEs 4515853 and 4745056 - S8075299: Additional tests for krb5 settings - S8075301: Tests for sun.security.krb5.principal system property - S8077276: allocating heap with UseLargePages and HugeTLBFS may trash existing memory mappings (linux) - S8078268: javax.swing.text.html.parser.Parser parseScript incorrectly optimized - S8078382: Wrong glyph is displayed for a derived font - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump to parent frame on focus - S8085903: New fix for memory leak in ProtectionDomain cache - S8098581: SecureRandom.nextBytes() hurts performance with small size requests - S8129740: Incorrect class file created when passing lambda in inner class constructor - S8130127: streamline input parameter of Nashorn scripting $EXEC function - S8130309: Need to bailout cleanly if creation of stubs fails when codecache is out of space - S8130317: "ant test" fails to complete on Windows when run under cygwin shell - S8133070: Hot lock on BulkCipher.isAvailable - S8133309: Some unicode characters do not display any more after upgrading to Windows 10 - S8134232: KeyStore.load() throws an IOException with a wrong cause in case of wrong password - S8135322: ConstantPool::release_C_heap_structures not run in some circumstances - S8136998: JComboBox prevents wheel mouse scrolling of JScrollPane - S8137240: Negative lookahead in RegEx breaks backreference - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js intermittently fails. - S8141148: LDAP "follow" throws ClassCastException with Java 8 - S8141541: Simplify Nashorn's Context class loader handling - S8143640: Showing incorrect result while passing specific argument in the Java launcher tools - S8143642: Nashorn shebang argument handling is broken - S8144160: Regression: two tests fail on Windows with "ant test" target - S8144221: fix Nashorn shebang argument handling on Mac/Linux - S8144703: ClassCastException: sun.font.CompositeFont cannot be cast to PhysicalFont - S8145305: fix Nashorn shebang handling on Cygwin - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks - S8146975: NullPointerException in IIOPInputStream.inputClassFields - S8147026: Convert an assert in ClassLoaderData to a guarantee - S8147451: Crash in Method::checked_resolve_jmethod_id(_jmethodID*) - S8147585: Annotations with lambda expressions has parameter result in wrong behavior. - S8147969: Print size of DH keysize when errors are encountered - S8148140: arguments are handled differently in apply for JS functions and AbstractJSObjects - S8148984: [macosx] Chinese Comma cannot be entered using Pinyin Input Method on OS X - S8150219: ReferenceError in 1.8.0_72 - S8150234: Windows 10 App Containers disallow access to ICMP calls - S8150814: correct package declaration in Nashorn test - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh should be modified - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128 - S8153192: (se) Selector.select(long) uses wrong timeout after EINTR (lnx) - S8153781: Issue in XMLScanner: EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping large DOCTYPE section with CRLF at wrong place - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with "Field length overflow" - S8154009: Some methods of java.security.Security require more permissions, than necessary - S8154069: Jaws reads wrong values from comboboxes when no element is selected - S8154144: Tests in com/sun/jdi fails intermittently with "jdb input stream closed prematurely" - S8154469: Update FSF address - S8154553: Incorrect GPL header in package-info.java reported - S8154558: Incorrect GPL header in ProcessEnvironment_md.c reported - S8154816: Caps Lock doesn't work as expected when using Pinyin Simplified input method - S8154831: CastII/ConvI2L for a range check is prematurely eliminated - S8155001: SystemTray.remove() leaks GDI Objects in Windows - S8155106: MHs.Lookup.findConstructor returns handles for array classes - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to exhausted code cache - S8156478: 3 Buffer overrun defect groups in jexec.c - S8156521: Minor fixes and cleanups in NetworkInterface.c - S8156714: Parsing issue with automatic semicolon insertion - S8156836: SIGSEGV: Test test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG 4.2 b02 - S8156896: Script stack trace should display function names - S8157160: JSON.stringify does not work on ScriptObjectMirror objects - S8157242: Some java/lang/invoke tests miss othervm - S8157444: exclude jjs shebang handling test from runs - S8157603: TestCipher.java doesn't check one of the decrypted message as expected - S8157680: Callback parameter of any JS builtin implementation should accept any Callable - S8157819: TypeError when a java.util.Comparator object is invoked as a function - S8158059: The fix for 8050402 was partially committed - S8158072: Need a test for JDK-7172749 - S8158111: Make handling of 3rd party providers more stable - S8158178: java.awt.SplashScreen.getSize() returns incorrect size for high dpi splash screens - S8158338: Nashorn's ScriptLoader split delegation has to be adjusted - S8158373: SIGSEGV: Metadata::mark_on_stack - S8158467: AccessControlException is thrown on public Java class access if "script app loader" is set to null - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to sun.java2d.opengl.OGLSurfaceData - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong hash code - S8158871: Long response times with G1 and StringDeduplication - S8159822: Non-synchronized access to shared members of com.sun.jndi.ldap.pool.Pool - S8160122: Backport of JDK-8159244 used wrong version of the JDK 9 fix - S8160518: Semicolon is not recognized as comment starting character (Kerberos) - S8160693: ScriptRunData.java uses bitwise AND instead of logical AND - S8161144: Fix for JDK-8147451 failed: Crash in Method::checked_resolve_jmethod_id(_jmethodID*) - S8162510: 8u112 L10n resource file updates - S8164453: 8u112 L10n resource file update - msgdrop 20 * Import of OpenJDK 8 u121 build 13 - S8037099: [macosx] Remove all references to GC from native OBJ-C code - S8059212: Modify sun/security/smartcardio manual regression tests so that they do not just fail if no cardreader found - S8139565: Restrict certificates with DSA keys less than 1024 bits - S8140422: Add mechanism to allow non default root CAs to be not subject to algorithm restrictions - S8148516: Improve the default strength of EC in JDK - S8151893: Add security property to configure XML Signature secure validation mode - S8152438: Threads may do significant work out of the non-shared overflow buffer - S8153438: Avoid repeated "Please insert a smart card" popup windows - S8154005: Add algorithm constraint that specifies the restriction date - S8154015: Apply algorithm constraints to timestamped code - S8159410: InetAddress.isReachable returns true for non existing IP adresses - S8160108: Implement Serialization Filtering - S8161228: URL objects with custom protocol handlers have port changed after deserializing - S8161571: Verifying ECDSA signatures permits trailing bytes - S8163304: jarsigner -verbose -verify should print the algorithms used to sign the jar - S8163583: [macosx] Press "To Back" button on the Dialog, the Dialog moves behind the Frame - S8164908: ReflectionFactory support for IIOP and custom serialization - S8165230: RMIConnection addNotificationListeners failing with specific inputs - S8166389: [TEST_BUG] closed/java/security/Security/ReadProp/ReadProp.sh failing - S8166393: disabledAlgorithms property should not be strictly parsed - S8166432: Bad 8u112 merge of sun/security/tools/jarsigner/warnings/Test.java - S8166591: [macos 10.12] Trackpad scrolling of text on OS X 10.12 Sierra is very fast (Trackpad, Retina only) - S8166739: Improve extensibility of ObjectInputFilter information passed to the filter - S8166875: (tz) Support tzdata2016g - S8166878: Connection reset during TLS handshake - S8167356: Follow up fix for jdk8 backport of 8164143. Changes for CMenuComponent.m were missed - S8167459: Add debug output for indicating if a chosen ciphersuite was legacy - S8167472: Chrome interop regression with JDK-8148516 - S8167591: Add MD5 to signed JAR restrictions - S8168861: AnchorCertificates uses hardcoded password for cacerts keystore - S8168963: Backout JDK-8154005 - S8168993: JDK8u121 L10n resource file update - S8169072: Backout JDK-8154015 - S8169191: (tz) Support tzdata2016i - S8169688: Backout (remove) MD5 from jdk.jar.disabledAlgorithms for January CPU - S8169911: Enhanced tests for jarsigner -verbose -verify after JDK-8163304 - S8170131: Certificates not being blocked by jdk.tls.disabledAlgorithms property - S8170268: 8u121 L10n resource file update - msgdrop 20 * Bug fixes - PR3271: Always round glyph advance in 26.6 space - PR3271: Fix compatibility with vanilla Fontconfig - PR3271: Fix glyph y advance - PR3271: Replace 'infinality' with 'improved font rendering' (--enable-improved-font-rendering) - PR3271: Simplify glyph advance handling - PR3286: -ffp-contract not available on older GCCs - PR3302: zip should be optional, as it's only used in the manually invoked dist-openjdk and dist-openjdk-fsg rules - PR3304: zip still a requirement of the underlying OpenJDK build * PPC port - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance due to non-optimized compilation * AArch64 port - S8130309, PR3280: Need to bailout cleanly if creation of stubs fails when codecache is out of space (AArch64 changes) - S8132875, PR3280: AArch64: Fix error introduced into AArch64 CodeCache by commit for 8130309 - S8165673, PR3280: AArch64: Fix JNI floating point argument handling - S8170188, PR3280: jtreg test compiler/types/TestMeetIncompatibleInterfaceArrays.java causes JVM crash - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance due to non-optimized compilation - Modified patch: * java-1_8_0-openjdk-gcc6.patch - rediff to changed context - Require the exact version of mozilla-nss that the package was built against (bsc#1022053)- Upgrade to version jdk8u111 (icedtea 3.2.0) * Security fixes + S8146490: Direct indirect CRL checks + S8151921: Improved page resolution + S8155968: Update command line options + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522) + S8156794: Extend data sharing + S8157176: Improved classfile parsing + S8157739, CVE-2016-5554: Classloader Consistency Checking (bsc#1005523) + S8157749: Improve handling of DNS error replies + S8157753: Audio replay enhancement + S8157759: LCMS Transform Sampling Enhancement + S8157764: Better handling of interpolation plugins + S8158302: Handle contextual glyph substitutions + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525) + S8159495: Fix index offsets + S8159503: Amend Annotation Actions + S8159511: Stack map validation + S8159515: Improve indy validation + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526) + S8160090: Better signature handling in pack200 + S8160094: Improve pack200 layout + S8160098: Clean up color profiles + S8160591, CVE-2016-5582: Improve internal array handling (bsc#1005527) + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528) + PR3206, RH1367357: lcms2: Out-of-bounds read in Type_MLU_Read() + CVE-2016-5556 (bsc#1005524) * New features + PR1370: Provide option to build without debugging + PR1375: Provide option to strip and link debugging info after build + PR1537: Handle alternative Kerberos credential cache locations + PR1978: Allow use of system PCSC + PR2445: Support system libsctp + PR3182: Support building without pre-compiled headers + PR3183: Support Fedora/RHEL system crypto policy + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries * Import of OpenJDK 8 u102 build 14 + S4515292: ReferenceType.isStatic() returns true for arrays + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command + S6976636: JVM/TI test ex03t001 fails assertion + S7185591: jcmd-big-script.sh ERROR: could not find app's Java pid. + S8017462: G1: guarantee fails with UseDynamicNumberOfGCThreads + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong object + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java fails: Process exit code was 0, but error was expected. + S8041781: Need new regression tests for PBE keys + S8041787: Need new regressions tests for buffer handling for PBE algorithms + S8043836: Need new tests for AES cipher + S8044199: Tests for RSA keys and key specifications + S8044772: TempDirTest.java still times out with -Xcomp + S8046339: sun.rmi.transport.DGCAckHandler leaks memory + S8047031: Add SocketPermission tests for legacy socket types + S8048052: Permission tests for setFactory + S8048138: Tests for JAAS callbacks + S8048147: Privilege tests with JAAS Subject.doAs + S8048356: SecureRandom default provider tests + S8048357: PKCS basic tests + S8048360: Test signed jar files + S8048362: Tests for doPrivileged with accomplice + S8048596: Tests for AEAD ciphers + S8048599: Tests for key wrap and unwrap operations + S8048603: Additional tests for MAC algorithms + S8048604: Tests for strong crypto ciphers + S8048607: Test key generation of DES and DESEDE + S8048610: Implement regression test for bug fix of 4686632 in JCE + S8048617: Tests for PKCS12 read operations + S8048618: Tests for PKCS12 write operations. + S8048619: Implement tests for converting PKCS12 keystores + S8048624: Tests for SealedObject + S8048819: Implement reliability test for DH algorithm + S8048820: Implement tests for SecretKeyFactory + S8048830: Implement tests for new functionality provided in JEP 166 + S8049237: Need new tests for X509V3 certificates + S8049321: Support SHA256WithDSA in JSSE + S8049429: Tests for java client server communications with various TLS/SSL combinations. + S8049432: New tests for TLS property jdk.tls.client.protocols + S8049814: Additional SASL client-server tests + S8050281: New permission tests for JEP 140 + S8050370: Need new regressions tests for messageDigest with DigestIOStream + S8050371: More MessageDigest tests + S8050374: More Signature tests + S8050427: LoginContext tests to cover JDK-4703361 + S8050460: JAAS login/logout tests with LoginContext + S8050461: Tests for syntax checking of JAAS configuration file + S8054278: Refactor jps utility tests + S8055530: assert(_exits.control()->is_top() || !_gvn.type(ret_phi)->empty()) failed: return value must be well defined + S8055844: [TESTBUG] test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java fails on Solaris Sparc due to incorrect page size being used + S8059677: Thread.getName() instantiates Strings + S8061464: A typo in CipherTestUtils test + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests + S8065076: java/net/SocketPermission/SocketPermissionTest.java fails intermittently + S8065078: NetworkInterface.getNetworkInterfaces() triggers intermittent test failures + S8066871: java.lang.VerifyError: Bad local variable type - local final String + S8068427: Hashtable deserialization reconstitutes table with wrong capacity + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs to be updated for JDK-8061210 + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac + S8071125: Improve exception messages in URLPermission + S8072081: Supplementary characters are rejected in comments + S8072463: Remove requirement that AKID and SKID have to match when building certificate chain + S8072725: Provide more granular levels for GC verification + S8073400: Some Monospaced logical fonts have a different width + S8073872: Schemagen fails with StackOverflowError if element references containing class + S8074931: Additional tests for CertPath API + S8075286: Additional tests for signature algorithm OIDs and transformation string + S8076486: [TESTBUG] javax/security/auth/Subject/doAs/NestedActions.java fails if extra VM options are given + S8076545: Text size is twice bigger under Windows L&F on Win 8.1 with HiDPI display + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java failed with java.lang.RuntimeException: 'new_active_workers' missing from stdout/stderr + S8079138: Additional negative tests for XML signature processing + S8081512: Remove sun.invoke.anon classes, or move / co-locate them with tests + S8081771: ProcessTool.createJavaProcessBuilder() needs new addTestVmAndJavaOptions argument + S8129419: heapDumper.cpp: assert(length_in_bytes > 0) failed: nothing to copy + S8130150: Implement BigInteger.montgomeryMultiply intrinsic + S8130242: DataFlavorComparator transitivity exception + S8130304: Inference: NodeNotFoundException thrown with deep generic method call chain + S8130425: libjvm crash due to stack overflow in executables with 32k tbss/tdata + S8133023: ParallelGCThreads is not calculated correctly + S8134111: Unmarshaller unmarshalls XML element which doesn't have the expected namespace + S8135259: InetAddress.getAllByName only reports "unknown error" instead of actual cause + S8136506: Include sun.arch.data.model as a property that can be queried by jtreg + S8137068: Tests added in JDK-8048604 fail to compile + S8139040: Fix initializations before ShouldNotReachHere() etc. and enable -Wuninitialized on linux. + S8139581: AWT components are not drawn after removal and addition to a container + S8141243: Unexpected timezone returned after parsing a date + S8141420: Compiler runtime entries don't hold Klass* from being GCed + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can generate unknown signal in hs_err file + S8141551: C2 can not handle returns with inccompatible interface arrays + S8143377: Test PKCS8Test.java fails + S8143647: Javac compiles method reference that allows results in an IllegalAccessError + S8144144: ORB destroy() leaks filedescriptors after unsuccessful connection + S8144593: Suppress not recognized property/feature warning messages from SAXParser + S8144957: Remove PICL warning message + S8145039: JAXB marshaller fails with ClassCastException on classes generated by xjc + S8145228: Java Access Bridge, getAccessibleStatesStringFromContext doesn't wrap the call to getAccessibleRole + S8145388: URLConnection.guessContentTypeFromStream returns image/jpg for some JPEG images + S8145974: XMLStreamWriter produces invalid XML for surrogate pairs on OutputStreamWriter + S8146035: Windows - With LCD antialiasing, some glyphs are not rendered correctly + S8146192: Add test for JDK-8049321 + S8146274: Thread spinning on WeakHashMap.getEntry() with concurrent use of nashorn + S8147468: Allow users to bound the size of buffers cached in the per-thread buffer caches + S8147645: get_ctrl_no_update() code is wrong + S8147807: crash in libkcms.so on linux-sparc + S8148379: jdk.nashorn.api.scripting spec. adjustments, clarifications + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit platforms + S8148820: Missing @since Javadoc tag in Logger.log(Level, Supplier) + S8148926: Call site profiling fails on braces-wrapped anonymous function + S8149017: Delayed provider selection broken in RSA client key exchange + S8149029: Secure validation of XML based digital signature always enabled when checking wrapping attacks + S8149330: Capacity of StringBuilder should not get close to Integer.MAX_VALUE unless necessary + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an array containing two elements + S8149368: [hidpi] JLabel font is twice bigger than JTextArea font on Windows 7,HiDPI, Windows L&F + S8149411: PKCS12KeyStore cannot extract AES Secret Keys + S8149417: Use final restricted flag + S8149450: LdapCtx.processReturnCode() throwing Null Pointer Exception + S8149453: [hidpi] JFileChooser does not scale properly on Windows with HiDPI display and Windows L&F + S8149543: range check CastII nodes should not be split through Phi + S8149743: JVM crash after debugger hotswap with lambdas + S8149744: fix testng.jar delivery in Nashorn build.xml + S8149915: enabling validate-annotations feature for xsd schema with annotation causes NPE + S8150002: Check for the validity of oop before printing it in verify_remembered_set + S8150470: JCK: api/xsl/conf/copy/copy19 test failure + S8150518: G1 GC crashes at G1CollectedHeap::do_collection_pause_at_safepoint(double) + S8150533: Test java/util/logging/LogManagerAppContextDeadlock.java times out intermittently. + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when transforming with lots of temporary result trees + S8150780: Repeated offer and remove on ConcurrentLinkedQueue lead to an OutOfMemoryError + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails intermittently + S8151197: [TEST_BUG] Need to backport fix for test/javax/net/ssl/TLS/TestJSSE.java + S8151352: jdk/test/sample fails with "effective library path is outside the test suite" + S8151431: DateFormatSymbols triggers this.clone() in the constructor + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java should be modified to run with JTREG 4.1 b13 + S8151731: Add new jtreg keywords to jdk 8 + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round': identifier not found + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java reported + S8153252: SA: Hotspot build on Windows fails if make/closed folder does not exist + S8153531: Improve exception messaging for RSAClientKeyExchange + S8153641: assert(thread_state == _thread_in_native) failed: Assumed thread_in_native while heap dump + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command + S8154304: NullpointerException at LdapReferralException.getReferralContext + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java fails + S8157078: 8u102 L10n resource file updates + S8157838: Personalized Windows Font Size is not taken into account in Java8u102 * Import of OpenJDK 8 u111 build 14 + S6882559: new JEditorPane("text/plain","") fails for null context class loader + S8049171: Additional tests for jarsigner's warnings + S8063086: Math.pow yields different results upon repeated calls + S8140530: Creating a VolatileImage with size 0,0 results in no longer working g2d.drawString + S8142926: OutputAnalyzer's shouldXXX() calls return this + S8147077: IllegalArgumentException thrown by api/java_awt/Component/FlipBufferStrategy/indexTGF_General + S8148127: IllegalArgumentException thrown by JCK test api/java_awt/Component/FlipBufferStrategy/indexTGF_General in opengl pipeline + S8150611: Security problem on sun.misc.resources.Messages* + S8153399: Constrain AppCDS behavior (back port) + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp + S8158734: JEditorPane.createEditorKitForContentType throws NPE after 6882559 + S8158994: Service Menu services + S8159684: (tz) Support tzdata2016f + S8160904: Typo in code from 8079718 fix : enableCustomValueHanlde + S8160934: isnan() is not available on older MSVC compilers + S8161141: correct bugId for JDK-8158994 fix push + S8162411: Service Menu services 2 + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing after JDK-8155968 + S8162511: 8u111 L10n resource file updates + S8162792: Remove constraint DSA keySize < 1024 from jdk.jar.disabledAlgorithms in jdk8 + S8164452: 8u111 L10n resource file update - msgdrop 20 + S8165816: jarsigner -verify shows jar unsigned if it was signed with a weak algorithm + S8166381: Back out changes to the java.security file to not disable MD5 * Backports + S8078628, PR3208: Zero build fails with pre-compiled headers disabled + S8141491, PR3159, G592292: Unaligned memory access in Bits.c + S8157306, PR3121: Random infrequent null pointer exceptions in javac (enabled on AArch64 only) + S8162384, PR3122: Performance regression: bimorphic inlining may be bypassed by type speculation * Bug fixes + PR3123: Some object files built without -fPIC on x86 only + PR3126: pax-mark-vm script calls "exit -1" which is invalid in dash + PR3127, G590348: Only apply PaX markings by default on running PaX kernels + PR3199: Invalid nashorn URL + PR3201: Update infinality configure test + PR3218: PR3159 leads to build failure on clean tree * AArch64 port + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic + S8167200, PR3220: AArch64: Broken stack pointer adjustment in interpreter + S8167421, PR3220: AArch64: in one core system, fatal error: Illegal threadstate encountered + S8167595, PR3220: AArch64: SEGV in stub code cipherBlockChaining_decryptAESCrypt + S8168888, PR3220: Port 8160591: Improve internal array handling to AArch64. * Shenandoah + PR3224: Shenandoah broken when building without pre-compiled headers - Modified patch: * java-1_8_0-openjdk-gcc6.patch + rediff to a changed context - Build against system kerberos for openSUSE 13.1 and greater and SLE12 - Build against system pcsc and sctp for openSUSE 13.2 and greater and SLE12- Added patch: * s390-java-opts.patch - Solve memory issues when building s390 version- Upgrade to version jdk8u101 (icedtea 3.1.0) - New in release 3.1.0 (2016-07-25): * Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking (bsc#989732) - S8145446, CVE-2016-3485: Perfect pipe placement (Windows only) (bsc#989734) - S8146514: Enforce GCM limits - S8147771: Construction of static protection domains under Javax custom policy - S8148872, CVE-2016-3500: Complete name checking (bsc#989730) - S8149070: Enforce update ordering - S8149962, CVE-2016-3508: Better delineation of XML processing (bsc#989731) - S8150752: Share Class Data - S8151925: Font reference improvements - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733) - S8153312: Constrain AppCDS behavior - S8154475, CVE-2016-3587: Clean up lookup visibility (bsc#989721) - S8155981, CVE-2016-3606: Bolster bytecode verification (bsc#989722) - S8155985, CVE-2016-3598: Persistent Parameter Processing (bsc#989723) - S8158571, CVE-2016-3610: Additional method handle validation (bsc#989725) - CVE-2016-3552 (bsc#989726) - CVE-2016-3511 (bsc#989727) - CVE-2016-3503 (bsc#989728) - CVE-2016-3498 (bsc#989729) * New features - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3 on Linux - PR2821: Support building OpenJDK with --disable-headful - PR2931, G478960: Provide Infinality Support via fontconfig - PR3079: Provide option to build Shenandoah on x86_64 * Import of OpenJDK 8 u92 build 14 - S6869327: Add new C2 flag to keep safepoints in counted loops. - S8022865: [TESTBUG] Compressed Oops testing needs to be revised - S8029630: Thread id should be displayed as a hex number in error report - S8029726: On OS X some dtrace probe names are mismatched with Solaris - S8029727: On OS X dtrace probes CallMethodA/CallMethodV are not fired. - S8029728: On OS X dtrace probes SetStaticBooleanField are not fired - S8038184: XMLSignature throws StringIndexOutOfBoundsException if ID attribute value is empty String - S8038349: Signing XML with DSA throws Exception when key is larger than 1024 bits - S8041501: ImageIO reader is not capable of reading JPEGs without JFIF header - S8041900: [macosx] Java forces the use of discrete GPU - S8044363: Remove special build options for unpack200 executable - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value for hotspot ARCH - S8046611: Build errors with gcc on sparc/fastdebug - S8047763: Recognize sparc64 as a sparc platform - S8048232: Fix for 8046471 breaks PPC64 build - S8052396: Catch exceptions resulting from missing font cmap - S8058563: InstanceKlass::_dependencies list isn't cleared from empty nmethodBucket entries - S8061624: [TESTBUG] Some tests cannot be ran under compact profiles and therefore shall be excluded - S8062901: Iterators is spelled incorrectly in the Javadoc for Spliterator - S8064330: Remove SHA224 from the default support list if SunMSCAPI enabled - S8065579: WB method to start G1 concurrent mark cycle should be introduced - S8065986: Compiler fails to NullPointerException when calling super with Object<>() - S8066974: Compiler doesn't infer method's generic type information in lambda body - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for out of range years - S8068033: JNI exception pending in jdk/src/share/bin/java.c - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c for JNI pending - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed: OLD and/or OBSOLETE method(s) found - S8068254: Method reference uses wrong qualifying type - S8074696: Remote debugging session hangs for several minutes when calling findBootType - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421 correctness, as jdk7 did - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java relies on system locale - S8080492: [Parfait] Uninitialised variable in jdk/src/java/desktop/windows/native/libawt/ - S8080650: Enable stubs to use frame pointers correctly - S8122944: perfdata used is seen as too high on sparc zone with jdk1.9 and causes a test failure - S8129348: Debugger hangs in trace mode with TRACE_SENDS - S8129847: Compiling methods generated by Nashorn triggers high memory usage in C2 - S8130506: javac AssertionError when invoking MethodHandle.invoke with lambda parameter - S8130910: hsperfdata file is created in wrong directory and not cleaned up if /tmp/hsperfdata_ has wrong permissions - S8131129: Attempt to define a duplicate BMH$Species class - S8131665: Bad exception message in HandshakeHash.getFinishedHash - S8131782: C1 Class.cast optimization breaks when Class is loaded from static final - S8132503: [macosx] Chinese full stop symbol cannot be entered with Pinyin IM on OS X - S8133207: ParallelProbes.java test fails after changes for JDK-8080115 - S8133924: NPE may be thrown when xsltc select a non-existing node after JDK-8062518 - S8134007: Improve string folding - S8134759: jdb: Incorrect stepping inside finally block - S8134963: [Newtest] New stress test for changing the coarseness level of G1 remembered set - S8136442: Don't tie Certificate signature algorithms to ciphersuites - S8137106: EUDC (End User Defined Characters) are not displayed on Windows with Java 8u60+ - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory in HotSpot - S8138764: In some cases the usage of TreeLock can be replaced by other synchronization - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java failed with timeout - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc] void InstanceKlass::oop_oop_iterate_oop_maps_specialized - S8139436: sun.security.mscapi.KeyStore might load incomplete data - S8139751: Javac crash with -XDallowStringFolding=false - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to 8u-dev - S8139985: JNI exception pending in jdk/src/jdk/hprof/agent/share/native/libhprof - S8140031: SA: Searching for a value in Threads does not work - S8140249: JVM Crashing During startUp If Flight Recording is enabled - S8140344: add support for 3 digit update release numbers - S8140587: Atomic*FieldUpdaters should use Class.isInstance instead of direct class check - S8141260: isReachable crash in windows xp - S8143297: Nashorn compilation time reported in nanoseconds - S8143397: It looks like InetAddress.isReachable(timeout) works incorrectly - S8143855: Bad printf formatting in frame_zero.cpp - S8143896: java.lang.Long is implicitly converted to double - S8143963: improve ClassLoader::trace_class_path to accept an additional outputStream* arg - S8144020: Remove long as an internal numeric type - S8144131: ArrayData.getInt implementations do not convert to int32 - S8144483: One long Safepoint pause directly after each GC log rotation - S8144487: PhaseIdealLoop::build_and_optimize() must restore major_progress flag if skip_loop_opts is true - S8144885: agent/src/os/linux/libproc.h needs to support Linux/SPARC builds - S8144935: C2: safepoint is pruned from a non-counted loop - S8144937: [TEST_BUG] testlibrary_tests should be excluded for compact1 and compact2 execution - S8145017: Add support for 3 digit hotspot minor version numbers - S8145099: Better error message when SA can't attach to a process - S8145442: Add the facility to verify remembered sets for G1 - S8145466: javac: No line numbers in compilation error - S8145539: (coll) AbstractMap.keySet and .values should not be volatile - S8145550: Megamorphic invoke should use CompiledFunction variants without any LinkLogic - S8145669: apply2call optimized callsite fails after becoming megamorphic - S8145722: NullPointerException in javadoc - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not match AddI - S8146147: Java linker indexed property getter does not work for computed nashorn string - S8146566: OpenJDK build can't handle commas in LDFLAGS - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u because 8072383 was badly backported before - S8147087: Race when reusing PerRegionTable bitmaps may result in dropped remembered set entries - S8147630: Wrong test result pushed to 8u-dev - S8147845: Varargs Array functions still leaking longs - S8147857: RMIConnector logs attribute names incorrectly - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC - S8150791: 8u76 L10n resource file translation update * Import of OpenJDK 8 u101 build 13 - S6483657: MSCAPI provider does not create unique alias names - S6675699: need comprehensive fix for unconstrained ConvI2L with narrowed type - S8037557: test SessionCacheSizeTests.java timeout - S8038837: Add support to jarsigner for specifying timestamp hash algorithm - S8081778: Use Intel x64 CPU instructions for RSA acceleration - S8130150: Implement BigInteger.montgomeryMultiply intrinsic - S8130735: javax.swing.TimerQueue: timer fires late when another timer starts - S8143913: MSCAPI keystore should accept Certificate[] in setEntry() - S8144313: Test SessionTimeOutTests can be timeout - S8146240: Three nashorn files contain "GNU General Public License" header - S8146387: Test SSLSession/SessionCacheSizeTests socket accept timed out - S8146669: Test SessionTimeOutTests fails intermittently - S8146993: Several javax/management/remote/mandatory regression tests fail after JDK-8138811 - S8147994: [macosx] JScrollPane jitters up/down during trackpad scrolling on MacOS/Aqua - S8151522: Disable 8130150 and 8081778 intrinsics by default - S8151876: (tz) Support tzdata2016d - S8152098: Fix 8151522 caused test compiler/intrinsics/squaretolen/TestSquareToLen.java to fail - S8157077: 8u101 L10n resource file updates * Backports - S6260348, PR3066: GTK+ L&F JTextComponent not respecting desktop caret blink rate - S6778087, PR1061: getLocationOnScreen() always returns (0, 0) for mouse wheel events - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS string - S8008657, PR3077: JSpinner setComponentOrientation doesn't affect on text orientation - S8014212, PR2866: Robot captures black screen - S8029339, PR1061: Custom MultiResolution image support on HiDPI displays - S8031145, PR3077: Re-examine closed i18n tests to see it they can be moved to the jdk repository. - S8034856, PR3095: gcc warnings compiling src/solaris/native/sun/security/pkcs11 - S8034857, PR3095: gcc warnings compiling src/solaris/native/sun/management - S8035054, PR3095: JarFacade.c should not include ctype.h - S8035287, PR3095: gcc warnings compiling various libraries files - S8038631, PR3077: Create wrapper for awt.Robot with additional functionality - S8039279, PR3077: Move awt tests to openjdk repository - S8041561, PR3077: Inconsistent opacity behaviour between JCheckBox and JRadioButton - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests to jdk - S8041915, PR3077: Move 8 awt tests to OpenJDK regression tests tree - S8043126, PR3077: move awt automated functional tests from AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC functional AWT tests to regression tree - S8044157, PR3077: [TEST_BUG] Improve recently submitted AWT_Mixing tests - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and AltPlusNumberKeyCombinationsTest to jdk - S8044429, PR3077: move awt automated tests for AWT_Modality to OpenJDK repository - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out - S8044765, PR3077: Move functional tests AWT_SystemTray/Automated to openjdk repository - S8047180, PR3077: Move functional tests AWT_Headless/Automated to OpenJDK repository - S8047367, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 2 - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional tests to OpenJDK - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out again - S8049617, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 3 - S8049694, PR3077: Migrate functional AWT_DesktopProperties/Automated tests to OpenJDK - S8050885, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 4 - S8051440, PR3077: move tests about maximizing undecorated to OpenJDK - S8052012, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 5 - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3 of 3) - S8053657, PR3077: [TEST_BUG] move some 5 tests related to undecorated Frame/JFrame to JDK - S8054143, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 6 - S8054358, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 7 - S8054359, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 8 - S8055360, PR3077: Move the rest part of AWT ShapedAndTranslucent tests to OpenJDK - S8055664, PR3077: move 14 tests about setLocationRelativeTo to jdk - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK repository - part 9 - S8056911, PR3077: Remove internal API usage from ExtendedRobot class - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK repository - part 10 - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java failed automatically - S8062606, PR3077: Fix a typo in java.awt.Robot class - S8063102, PR3077: Change open awt regression tests to avoid sun.awt.SunToolkit.realSync, part 1 - S8063104, PR3077: Change open awt regression tests to avoid sun.awt.SunToolkit.realSync, part 2 - S8063106, PR3077: Change open swing regression tests to avoid sun.awt.SunToolkit.realSync, part 1 - S8063107, PR3077: Change open swing regression tests to avoid sun.awt.SunToolkit.realSync, part 2 - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java is asocial pressing VK_LEFT and not releasing - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java 100 times press keys and never releases - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java contains a lot of keyPress and not a single keyRelease - S8067441, PR3077: Some tests fails with error: cannot find symbol getSystemMnemonicKeyCodes() - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest fails with GTKLookAndFeel - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not include scale factor - S8073320, PR1061: Windows HiDPI Graphics support - S8074807, PR3077: Fix some tests unnecessary using internal API - S8076315, PR3077: move 4 manual functional swing tests to regression suite - S8078504, PR3094: Zero lacks declaration of VM_Version::initialize() - S8129822, PR3077: Define "headful" jtreg keyword - S8132123, PR1061: MultiResolutionCachedImage unnecessarily creates base image to get its size - S8133539, PR1061: [TEST_BUG] Split java/awt/image/MultiResolutionImageTest.java in two to allow restricted access - S8137571, PR1061: Linux HiDPI Graphics support - S8142406, PR1061: [TEST] MultiResolution image: need test to cover the case when @2x image is corrupted - S8145188, PR2945: No LocalVariableTable generated for the entire JDK - S8150258, PR1061: [TEST] HiDPI: create a test for multiresolution menu items icons - S8150724, PR1061: [TEST] HiDPI: create a test for multiresolution icons - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should be taken into account for OS X - S8151841, PR2882: Build needs additional flags to compile with GCC 6 [plus parts of 8149647 & 8032045] - S8155613, PR1061: [PIT] crash in AWT_Desktop/Automated/Exceptions/BasicTest - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD incorrectly - S8156128, PR1061: Tests for [AWT/Swing] Conditional support for GTK 3 on Linux - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can lead to the generation of illegal instructions (bsc#988651) - S8159244, PR3074: Partially initialized string object created by C2's string concat optimization may escape - S8159690, PR3077: [TESTBUG] Mark headful tests with @key headful. - S8160294, PR2882, PR3095: Some client libraries cannot be built with GCC 6 * Bug fixes - PR1958: GTKLookAndFeel does not honor gtk-alternative-button-order - PR2822: Feed LIBS & CFLAGS into configure rather than make to avoid re-discovery by OpenJDK configure - PR2932: Support ccache in a non-automagic manner - PR2933: Support ccache 3.2 and later - PR2964: Set system defaults based on OS - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF line endings rather than system line endings - PR3078: Remove duplicated line dating back to 6788347 and 6894807 - PR3083, RH1346460: Regression in SSL debug output without an ECC provider - PR3089: Remove old memory limits patch - PR3090, RH1204159: SystemTap is heavily confused by multiple JDKs - PR3095: Fix warnings in URLClassPath.c - PR3096: Remove dead --disable-optimizations option - PR3105: Use version from hotspot.map to create tarball filename - PR3106: Handle both correctly-spelt property "enableCustomValueHandler" introduced by S8079718 and typo version - PR3108: Shenandoah patches not included in release tarball - PR3110: Update hotspot.map documentation in INSTALL * AArch64 port - S8145320, PR3078: Create unsafe_arraycopy and generic_arraycopy for AArch64 - S8148328, PR3078: aarch64: redundant lsr instructions in stub code. - S8148783, PR3078: aarch64: SEGV running SpecJBB2013 - S8148948, PR3078: aarch64: generate_copy_longs calls align() incorrectly - S8149080, PR3078: AArch64: Recognise disjoint array copy in stub code - S8149365, PR3078: aarch64: memory copy does not prefetch on backwards copy - S8149907, PR3078: aarch64: use load/store pair instructions in call_stub - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when comparing narrow pointer with zero - S8150045, PR3078: arraycopy causes segfaults in SATB during garbage collection - S8150082, PR3078: aarch64: optimise small array copy - S8150229, PR3078: aarch64: pipeline class for several instructions is not set correctly - S8150313, PR3078: aarch64: optimise array copy using SIMD instructions - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS instructions - S8151340, PR3078: aarch64: prefetch the destination word for write prior to ldxr/stxr loops. - S8151502, PR3078: optimize pd_disjoint_words and pd_conjoint_words - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic operations - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when comparing unsigned values with zero. - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub routine - S8153713, PR3078: aarch64: improve short array clearing using store pair - S8153797, PR3078: aarch64: Add Arrays.fill stub code - S8154537, PR3078: AArch64: some integer rotate instructions are never emitted - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads in wrong mode - S8155015, PR3078: Aarch64: bad assert in spill generation code - S8155100, PR3078: AArch64: Relax alignment requirement for byte_map_base - S8155612, PR3078: Aarch64: vector nodes need to support misaligned offset - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed with 8155612 - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails due to _generic_arraycopy stub routine - S8157841, PR3078: aarch64: prefetch ignores cache line size - S8157906, PR3078: aarch64: some more integer rotate instructions are never emitted - S8158913, PR3078: aarch64: SEGV running Spark terasort - S8159052, PR3078: aarch64: optimise unaligned copies in pd_disjoint_words and pd_conjoint_words - S8159063, PR3078: aarch64: optimise unaligned array copy long - PR3078: Cleanup remaining differences from aarch64/jdk8u tree - Removed patches: * compare-pointer-with-literal.patch * implicit-pointer-decl.patch * hotspot-aarch64-fix-48bit-va.patch - Fixed differently upsteam - Modified patch: * java-1_8_0-openjdk-gcc6.patch - Rediff to new context - Remove hacks to make build on ix86, since it seems they are not needed anymore - Remove special flags for gcc6, since they are handled upstream- Fix script linking /usr/share/javazi/tzdb.dat for platform where it applies (bsc#987895) - Enable SunEC for SLE12 and Leap- Fix aarch64 running with 48 bits va space (bsc#984684) * hotspot-aarch64-fix-48bit-va.patch- Added patch: * disable-doclint-by-default-patch - Disable Doclint while building javadoc by default. OpenJDK 8 adds and enables doclint by default. This catches issues in javadoc comments. It is too strict, breaks javadoc compilation and, in general, breaks the build for old code known to build with previous versions of OpenJDK. - Cycle make on i586 in order to prevent some random build errors that are not easily reproduceable and thus fixable.- Added patch: * java-1_8_0-openjdk-gcc6.patch + Fix build with gcc 6.1 - Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to avoid some crashes- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340) - Icedtea changes from 2.6.5 * Security fixes - S8129952, CVE-2016-0686: Ensure thread consistency - S8132051, CVE-2016-0687: Better byte behavior - S8138593, CVE-2016-0695: Make DSA more fair - S8139008: Better state table management - S8143167, CVE-2016-3425: Better buffering of XML strings - S8143945, CVE-2016-3426: Better GCM validation - S8144430, CVE-2016-3427: Improve JMX connections - S8146494: Better ligature substitution - S8146498: Better device table adjustments * Import of OpenJDK 8 u91 build 14 - S8002116: This JdbReadTwiceTest.sh gets an exit 1 - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when invoked with NMT explicitly turned on - S8036132: Tab characters in test/com/sun/jdi files - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes misses processes - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when run under root - S8059661: Test SoftReference and OOM behavior - S8067422: Lambda method names are unnecessarily unstable - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java got OOME - S8074146: [TEST_BUG] jdb has succeded to read an unreadable file - S8130212: Thread::current() might access freed memory on Solaris - S8132890: Text Overlapping on Dot Matrix Printers - S8134297: NPE in GSSNameElement nameType check - S8134650: Xsl transformation gives different results in 8u66 - S8134828: Scrollbar thumb disappears with Nimbus L&F - S8138589: Correct limits on unlimited cryptography - S8138811: Construction of static protection domains - S8140268: Generate link to specification license for JavaDoc API documentation - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp of cmserr.c - S8143002: [Parfait] JNI exception pending in fontpath.c:1300 - S8143959: Certificates requiring blacklisting - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again - S8146518: Zero interpreter broken with better byte behaviour - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java should use 4-args ProtectionDomain constructor - S8147567: InterpreterRuntime::post_field_access not updated for boolean in JDK-8132051 - S8148446: (tz) Support tzdata2016a - S8148475: Missing SA Bytecode updates. - S8148487: PPC64: Better byte behavior - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo - S8149170: Better byte behavior for native arguments - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with IOE: Invalid encoding for PolicyQualifierInfo - S8150012: Better byte behavior for reflection - S8150790: 8u75 L10n resource file translation update * Backports - S8148752, PR2943: Compiled StringBuilder code throws StringIndexOutOfBoundsException - S8154210: Zero: Better byte behaviour - S8154413: AArch64: Better byte behaviour - S4890063, PR2304, RH1214835: HPROF: default text truncated when using doe=n option - S6425769, PR2859: Allow specifying an address to bind JMX remote connector - S8000650, PR2462: unpack200.exe should check gzip crc - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly resolves symbolic links - S8035341: Allow using a system installed libpng - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility normal behavior - S8042159: Allow using a system-installed lcms2 - S8042806: Splashscreen uses libjpeg-internal macros - S8043805: Allow using a system-installed libjpeg - S8044235: src.zip should include all sources - S8074839, PR2462: Resolve disabled warnings for libunpack and the unpack200 binary - S8074859, PR1937: Turn on warnings as error - S8087218, PR2740: Constant fold loads from final instance fields in VM anonymous classes - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow using a system-installed libjpeg] - S8140483, PR2740: Atomic*FieldUpdaters final fields should be trusted - S8140620, PR2769: Find and load default.sf2 as the default soundbank on Linux - S8145096, PR2854: Undefined behaviour in HotSpot - S8145982, PR2859: JMXInterfaceBindingTest is failing intermittently - S8146015, PR2859: JMXInterfaceBindingTest is failing intermittently for IPv6 addresses - S8148351, PR2842: Only display resolved symlink for compiler, do not change path - S8150954, PR2866, RH1176206: AWT Robot not compatible with GNOME Shell * Bug fixes - PR2933: Support ccache 3.2 and later - PR2934: SunEC provider throwing KeyException with current NSS - S8041658: Use of -fdevirtualize on macroAssembler_x86.o (via -O2) with gcc 4.9.0 creates broken VM - PR94: empty install target in Makefile.am - PR729: GTKLookAndFeel should be the system look&feel on all GNU/Linux desktops - PR1275: Provide option to turn off downloading of tarballs - PR1281, RH513605: Updating/Installing OpenJDK should recreate the shared class-data archive - PR1289: Allow JARs to be optionally compressed by setting COMPRESS_JARS - PR1291: Ensure unlimited crypto policy is in place. - PR1325: Only add classes to rt-source-files.txt if actually needed - PR1341: Remove Rhino support - PR1346: Filter out -j option to make - PR1347: Update list of checked JDKs - PR1348: java -version output is broken - PR1357: Make XRender mandatory - PR1359: Check for /usr/lib64 JVMs and generic JPackage alternative - PR1364: Replace hgforest support - PR1367: Support using the system installation of LCMS - PR1368: Ensure debug data is available for all libraries and binaries without redundant files - PR1369: Remove outdated bootstrap configure tests or make them fail on error - PR1377: Forwardport javac detection / usability test from IcedTea 2.x - PR1379: Add build support for Zero AArch64 - PR1413: Undefined reference to libz during link of unpack200 - PR1741: Break PulseAudio provider out into IcedTea-Sound - PR1766: Expand architecture support - PR1774: Support GIF lib v5 - PR1774: Correct #ifdef to #if - PR1796: make fails with "computed checksum did NOT match" - PR1806: Support Debian/Ubuntu 7 & 8 OpenJDK Installs as Boot JDK - PR1812: Unable to locate HotSpot checksum when downloading - PR1813: HotSpot URL should be used with --enable-hg - PR1815: Split download/extraction rules for OpenJDK so they can run in parallel - PR1829: Support AM_MAINTAINER_MODE - PR1834, RH1022017: Report elliptic curves supported by NSS, not the SunEC library - PR1845: jstack.stp in OpenJDK8 is broken - PR1869: Avoid x86 workaround when running Zero rather than a JIT - PR1889: Allow tarball checksumming to be disabled - PR1935: HotSpot extraction needs to depend on the tarball being downloaded - PR1937: Add configure option for -Werror - PR1938: Zero broken by enforced use of -Werror - PR1942: Bug reports lack IcedTea version & distribution packaging information - PR1950: Add build support for Zero SH - PR1965, G498288: Allow builds on PaX kernels - PR1968: Move to new OpenJDK bug URL format - PR1975: SystemTap probes for the garbage collector. - PR1977: Support using the system installation of Zlib - PR1979: Support using the system installation of libjpeg - PR1980: Support using the system installation of giflib - PR1981: Support using the system installation of libpng - PR1983: Support using the system installation of NSS with the SunEC provider - PR1994: make dist broken - PR2001: Synchronise HEAD tarball paths with release branch paths - PR2066: Unset OS before running OpenJDK build - PR2095, RH1163501: 2048-bit DH upper bound too small for Fedora infrastructure - PR2126: Synchronise elliptic curves in sun.security.ec.NamedCurve with those listed by NSS - PR2127: SunEC provider crashes when built using system NSS - PR2199: Support giflib 5.1.0 - PR2212: DGifCloseFile call should check the return value, not the error code, for failure - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc. - PR2237, RH1194378: ppc64le should report its os.arch as ppc64le so tools can detect it - PR2248: HotSpot tarball fails verification after download - PR2256: Add SystemTap tests - PR2257: clean-extract-nashorn rule is never run - PR2321: Checksum of policy JAR files changes on every build - PR2329: jamvm parallel unpack failures - PR2339: Fail early if there is no native HotSpot JIT & all other options are disabled - PR2348: Avoid following symlinks for CACAO and JamVM patches - PR2351: Split CACAO rule into configure and make stages - PR2352: Split JamVM rule into configure, make and make install stages - PR2358: Add aliases for all stamp targets - PR2362: Update HACKING & fsg.sh.in - PR2363: Remove EC source code prior to build - PR2369: SunEC provider is partially installed - PR2377: PaX mark the installed JDK so it runs on hardened systems - PR2383: Location of docs directory in install-data-local is incorrect - PR2392: Make elliptic curve removal optional - PR2400, RH1206656: Zero JVM crashes on startup when built with GCC 5 - PR2407: Fix automatic enabling of the Zero build on non-JIT architectures which don't use CACAO or JamVM - PR2408: Enable Zero when Shark is enabled - PR2409: Update Zero macro to match one in IcedTea 2.x - PR2410: Support PPC64 JIT on ppc64le - PR2411: Fix references to hotspot.map following PR2001 - PR2413: OpenJDK doesn't auto-select Zero on architectures where no server JVM is available - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to OpenJDK build - PR2415: JVM -Xmx requirement is too high on s390 - PR2428: OpenJDK build can't handle commas in LDFLAGS - PR2429: OpenJDK build does not copy a symlinked cacerts file - PR2432: ppc64 JIT doesn't support class data sharing - PR2433: ppc64le does not support -Xshare:dump - PR2434: SystemTap support is no longer optional - PR2439: NSS PKCS11 regression - due to java.security automatic loading - PR2443: install stage fails where BUILD_ARCH_DIR != INSTALL_ARCH_DIR - PR2447: Allow greater control of Javadoc installation directory - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec file does - PR2454: install-data-local needs to check that classes.jsa actually exists - PR2456: Installation path for hotspot_gc.stp is wrong, due to changed j2sdk-image location - PR2459: Policy JAR files should be timestamped with the date of the policy file they hold - PR2511: Reset success following calls in LayoutManager.cpp - PR2541: Allow the user to specify the cacerts file to use - PR2544: Desktop files do not allow installation from multiple versions of IcedTea - PR2547: Extend tarball checksumming option to allow the checksum to be specified - PR2631: jvm.cfg missing for ppc64le - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set - PR2675: Update ppc64le autotools infrastructure following PR2237 - PR2691, G564746: ./configure is unable to compile using distcc for icedtea-3.0.0_pre06 - PR2737: Allow multiple PKCS11 library initialisation to be a non-critical error. - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in java.library.path - PR2743: Remove bad AArch64 merge fragment - PR2759: LCMS library should be named javalcms, not lcms, to avoid potential conflicts with the system library - PR2766: Remove all references to GCJ - PR2767: Remove remaining rogue binaries from OpenJDK tree - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or discard if no longer needed - PR2777: Fix MAX/MIN template usage on s390 - PR2804: test/tapset/jstaptest.pl should be executable - PR2815: Race condition in SunEC provider with system NSS - PR2825: Placement of -lfreebl matters when using bfd linker - PR2826: Provide option to disable SystemTap tests - PR2841: Parallelism issues resulting from PR2459 - PR2863: IcedTea doesn't pass through build and host triplets to OpenJDK's configure - PR2865: Handle uninstallation. - PR2869: Revert CRC fix (S8000650) backported as part of PR2462 - PR2873: Fix make distcheck. - PR2880: Add missing test directory in make check. - PR2885: Location of 'stap' executable is hard-coded - PR2888: OpenJDK should check for system cacerts database (e.g. /etc/pki/java/cacerts) - PR2899: Don't use WithSeed versions of NSS functions as they don't fully process the seed - PR2906: Support prefixed variants of GNU tools used on *BSD systems - PR2907: Replace --with-abs-install-dir with usual --prefix - PR2917: Don't pass --with-cacerts-file to build if USE_ALT_CACERTS_FILE is not set - PR2918: Makefile handles cacerts as a symlink, but the configure check doesn't - PR2920: PaX marking fails on filesystems which don't support extended attributes - PR2921: Uninstallation of docs deletes too much - Don't substitute 'j' for '-j' inside -I directives - Extend 8041658 to all files in the HotSpot build. - Remove jcheck * AArch64 port - PR1970: Imported from aarch64 jdk8 repository. - PR2853: Fix build for aarch64/zero - PR2853: Remaining miscellaneous synchronisation changes from aarch64/jdk8u - PR2853: Remove AArch64-specific code in generateOptoStub.cpp. - PR2853: Remove some AArch64-specific code in share/. - PR2853: Remove some unnecessary divergences from jdk8u. - PR2853: Revert AArch64 jvm.cfg divergence - PR2853: Revert changes to libpng source code now 8078245 is in place. - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u (aarch64-jdk8u77-b03) - S8150652, PR2922: Remove unused code in AArch64 back end * JamVM - JSR 292: Invoke Dynamic - JSR 308: Type Annotations - JSR 335: Lambda Expressions - JSR 901: VM support for method parameter reflection - JEP 171: Implement fence methods in sun.misc.Unsafe - sun.misc.Unsafe: additional methods get/putAddress. - FreeClassData: adjust method count for Miranda methods - Fix invokesuper check in invokespecial opcode - Fix non-direct interpreter invokespecial super-class check - When GC'ing a native method don't try to free code - Do not free unprepared Miranda method code data - Set anonymous class protection domain - JVM_IsVMGeneratedMethodIx stub - Dummy implementation of sun.misc.Perf natives - JVM_NewMultiArray: element class may be an array - jtreg test java/lang/reflect/Array/ExceedMaxDim - OpenJDK: Fix Local/Anonymous class checks - classlibMarkThreadTerminated should return Object* - Fix race-condition in constant-pool resolution code - JSR 292: MethodHandle constant-pool refs may be resolved - JSR 292: bootstrap method args error handling - JSR 308: update to match OpenJDK changes - JSR 292: correct intrinsic cache COMPARE function - Race condition in setting up imethod table - GC: Minor performance improvement - PR2034: --enable-jamvm builds broken, missing JVM_GetTemporaryDirectory impl - PR2336: JamVM lacks JVM_FindClassFromCaller - PR2523: Add executable stack markings to callNative.S on JamVM - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced by jdk8u40 * CACAO - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where possible - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where possible - PR2035: --enable-cacao builds broken, missing JVM_GetTemporaryDirectory impl. - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on Gentoo - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low max heap size - PR2335: CACAO lacks JVM_FindClassFromCaller - PR2347: Fix CACAO patches to apply again - PR2349: 'struct jvm_version_info' has no member named 'is_kernel_jvm' - PR2350: Update to latest CACAO - PR2354: stamps/cacao.stamp tries to touch a file in a directory which doesn't exist - PR2355: CACAO build fails to use JRE layout - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced by jdk8u40 - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays: Assertion `dest && result && x.any && y.any' failed - PR2908: Add missing functions for CACAO OpenJDK JVM implementation - PR2909: Install CACAO in same way as JamVM - PR2910: Add rudimentary support for OpenJDK 8 class files to CACAO - PR2916: Update CACAO drop to use the latest from cacao-staging - Removed patches: * PStack-808293.patch * aarch64-misc.patch * disable-doclint-by-default.patch * include-all-srcs.patch * link-with-as-needed.patch * memory-limits.patch * multiple-pkcs11-library-init.patch * ppc64le-8036767.patch * s390-java-opts.patch * s390-size_t.patch * system-lcms.patch * system-libjpeg.patch * system-libpng.patch * zero-dummy.patch - Fixed upstream - Added patches: * icedtea-3.0.1-sunec.patch - Adapt the nss detection to SUSE packaging of mozilla-nss * java-1_8_0-openjdk-suse-desktop-files.patch - Adapt the desktop files for SUSE needs - Modified patches: * 1015432.patch * adlc-parser.patch * compare-pointer-with-literal.patch * implicit-pointer-decl.patch * java-atk-wrapper-security.patch * ppc-zero-hotspot.patch * zero-javadoc-verbose.patch - Adapt to new directory structure- Update to upstream tag jdk8u77-b03 (bsc#972468) * CVE-2016-0636: Improve MethodHandle consistency- Added patch: * ppc64le-8036767.patch + Change archinstall for ppc64le from ppc64 to ppc64le directory.- Upgrade to upstream tag jdk8u72-b15 * Oracle Critical Patch Update of January 2016 (bsc#962743) * Using aarch64 hotspot tag aarch64-jdk8u72-b15 - Security issues fixed: * CVE-2015-7575: Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision. * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. * CVE-2016-0402: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking. * CVE-2016-0448: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX. * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP. * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. - Modified patch: * s390-java-opts.patch + rediff to the changed context- Upgrade to upstream tag jdk8u65-b17 * Security fix release of October 21, 2015 (bsc#951376) - Security issues fixed: * CVE-2015-4734: A remote user can exploit a flaw in the Embedded JGSS component to partially access data * CVE-2015-4803: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions * CVE-2015-4805: A remote user can exploit a flaw in the Embedded Serialization component to gain elevated privileges * CVE-2015-4806: A remote user can exploit a flaw in the Java SE Embedded Libraries component to partially access and partially modify data * CVE-2015-4835: A remote user can exploit a flaw in the Embedded CORBA component to gain elevated privileges * CVE-2015-4842: A remote user can exploit a flaw in the Embedded JAXP component to partially access data * CVE-2015-4843: A remote user can exploit a flaw in the Java SE Embedded Libraries component to gain elevated privileges * CVE-2015-4844: A remote user can exploit a flaw in the Embedded 2D component to gain elevated privileges * CVE-2015-4860: A remote user can exploit a flaw in the Embedded RMI component to gain elevated privileges * CVE-2015-4872: A remote user can exploit a flaw in the JRockit Security component to partially modify data []. * CVE-2015-4881: A remote user can exploit a flaw in the Embedded CORBA component to gain elevated privileges * CVE-2015-4882: A remote user can exploit a flaw in the Embedded CORBA component to cause partial denial of service conditions * CVE-2015-4883: A remote user can exploit a flaw in the Embedded RMI component to gain elevated privileges * CVE-2015-4893: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions * CVE-2015-4902: A remote user can exploit a flaw in the Java SE Deployment component to partially modify data * CVE-2015-4903: A remote user can exploit a flaw in the Embedded RMI component to partially access data * CVE-2015-4911: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions * CVE-2015-4810: A local user can exploit a flaw in the Java SE Deployment component to gain elevated privileges * CVE-2015-4840: A remote user can exploit a flaw in the Embedded 2D component to partially access data * CVE-2015-4868: A remote user can exploit a flaw in the Java SE Embedded Libraries component to gain elevated privileges * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX component to gain elevated privileges * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX component to partially access data * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX component to partially access data * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX component to partially access data - Modified patch: * s390-size_t.patch - Account for an additional uintptr_t <-> size_t mismatch- Upgrade to upstream tag jdk8u60-b27 * Release of JDK 8u60 - Removed patches: * hotspot-support-kernel-4.patch * cplusplus-interpreter.patch * signed-overflow.patch - Integrated upstream * system-giflib5.patch - Fixed differently upstream * applet-hole.patch - Not needed any more with recent versions of icedtea-web - Modified patches * aarch64-misc.patch - Rediff to correspond to the new context - Added bits from aarch64-port/jdk8/jdk- Add constraints file- Upgrade to upstream tag jdk8u51-b16 * Security fix release of July 15, 2015 (bsc#938248, bsc#937828) - Security issues fixed: * CVE-2015-2590: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). * CVE-2015-2597: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). * CVE-2015-2601: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JCE). * CVE-2015-2613: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JCE). * CVE-2015-2619: Vulnerability in the Java SE, JavaFX, Java SE Embedded component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2621: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JMX). * CVE-2015-2625: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). * CVE-2015-2627: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). * CVE-2015-2628: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: CORBA). * CVE-2015-2632; Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2637: Vulnerability in the Java SE, JavaFX, Java SE Embedded component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2638: Vulnerability in the Java SE, JavaFX, Java SE Embedded component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2659: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). * CVE-2015-2664: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). * CVE-2015-2808: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). * CVE-2015-4000: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). * CVE-2015-4729: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). * CVE-2015-4731: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JMX). * CVE-2015-4732: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). * CVE-2015-4733: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). * CVE-2015-4736: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). * CVE-2015-4748: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: Security). * CVE-2015-4749: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JNDI). * CVE-2015-4760: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D).- Use priority matching to ibm-java, always 5 bigger than it- Added patch: * zero-dummy.patch - Fix crash of ZERO VM built with gcc5- Added patch: * signed-overflow.patch - fix OOM due to signed overflow shown by gcc5 build- Use the tzdb.dat from tzdata-java8 package on distributions that have it.- Added patch: * hotspot-support-kernel-4.patch * fix build on systems having kernel 4.0- Update the aarch64 tarball to the recent tip * The revision has merged changes up to jdk8u45-b14 - Apply cplusplus-interpreter.patch to the default hotspot tarball only (aarch64 tarball has the patch integrated)- Upgrade to upstream tag jdk8u45-b14 * Security fix release of April 14, 2015- Build the accelerated aarch64 hotspot anew- Update the aarch64 tarball to a recent tip of the jdk8 repository- jdk8u40-b25 became officially jdk8u40 release * Modify the package version- Modified patch * system-libjpeg.patch - correct the case mismatch that prevented JPEG decoder from working correctly (bnc#905950)- Upgrade to upstream tag jdk8u40-b25- Upgrade to upstream tag jdk8u40-b24 - Upgrade the aarch64 hotspot to new tip * sync-ed with jdk8u40-b23 - Removed patch * aarch64-b12tob22.patch - Not needed since the aarch64 tarball is on a recent enough tag - Modified patch * s390-size_t.patch - Adapt to hotspot changes- Removed patch * aarch64-b12tob21.patch - replaced by one that forward-ports to b22 - Added patch * aarch64-b12tob22.patch - forward-port the aarch64 hotspot to b22.- Modify patch: system-giflib5.patch * Fix build with giflib 5.1.x- Upgrade to upstream tag jdk8u40-b22 * Security update from 2015-01-20- Upgrade to upstream tag jdk8u40-b21 - Removed patch: * aarch64-b12tob20.patch - replaced by new version - Added patch: * aarch64-b12tob21.patch - port the relevant changes between builds b12 and b21 to the aarch64 tarball that is on the upstream tag of jdk8u40-b12- Upgrade to upstream tag jdk8u40-b20 * Switch to the jdk8u40 stabilisation branch that will result in the jdk8u40 release - Removed patch: * hotspot-build-j-directive.patch - integrated in the jdk8u40-b20 version of hotspot - Added patches: * aarch64-b12tob20.patch - port the relevant changes between builds b12 and b20 to the aarch64 tarball that is on the upstream tag of jdk8u40-b12 * cplusplus-interpreter.patch - fix a build of C++ interpreter that is used with Zero virtual machine.- zero-javadoc-verbose.patch: Avoid triggering inactivity timeout while generating javadoc in zero VM- Require version of tzdata-java compatible with this version of Java.- Define bits to %__isa_bits if defined- Modified patches: * s390-size_t.patch - rediff and drop unnecessary chunks * s390-java-opts.patch - modify to correspond to the changed context- Put manpage alternative for policy-tool to the right package- Upgrade to upstream tag jdk8u40-b12 * Unstable snapshot in view of jdk8u40 release * aarch64 hotspot merged to the level of jdk8u40-b12 - Remove unneeded aarch64-jdk8u40-b09_b10.patch: * the aarch64 hotspot merge contains all the changes- Update config.sub and config.guess to the recent master of http://git.savannah.gnu.org/cgit/config.git- Upgrade to upstream tag jdk8u40-b10 * Unstable snapshot in view of jdk8u40 release * Contains security fixes from 14 october 2014 - Add aarch64-jdk8u40-b09_b10.patch * Manually upgrade the aarch64 hotspot tarball with the changes between b09 and b10- Allow building for SLE11 * Conditionalize BuildRequires * Conditionalize cxxflags not understood by gcc 4.3 * Conditionalize javadoc noarch build for distributions that understand the per-package BuildArch - Try to make the jre-32 and jre-64 provides more automatic - Disable brp-check-bytecode-version during install * java8 will have bytecode version 8 in its jars- Force Zero VM for aarch64, since from the beginning we did not manage to finish a build of Hotspot for this architecture.- Upgrade to upstream tag jdk8u40-b08 * Unstable snapshot in view of jdk8u40 release- Build template jvm interpreter on ppc64le * It was ported for this architecture in jdk8u49-b06 - Build depend on the generic java-bootstrap-devel * Allows to build against java-1_7_0-openjdk-bootstrap - Reformat the spec file with spec-cleaner- Upgrade to upstream tag jdk8u40-b07 * Unstable snapshot in view of jdk8u40 release - Removed patch: aarch64-jni-update.patch * Upstreamed changes - Modified patch: aarch64-misc.patch * Do not patch generated-configure.sh that is anyway regenerated. - Modified patch: system-libjpeg.patch * Do not patch generated-configure.sh that is anyway regenerated. * Rediff to apply cleanly - Modified patches: link-with-as-needed.patch, system-giflib5.patch, system-lcms.patch, system-libpng.patch * Rediff to apply cleanly- Add provides jre-32 on %{ix86} and ppc * This satisfies libreoffice's requires- Add provides jre-64 on x86_64. bnc#895191- Upgrade to upstream tag jdk8u20-b26 * Tag corresponding to jdk8u20 public release - Do not include the build number in version information, since this is the official 1.8.0.20 release- Use icedtea-sound-1.0.1 release tarball- Upgrade to upstream tag jdk8u20-b23 * Security updates from 15 July 2014 - Removed patch: voidreturn.patch * Integrated upstream - Re-diffed patch: java-atk-wrapper-security.patch * Re-diff to correspond to the new changes - Modify accessibility post script to actually create the corresponding symlinks- Initial package built from upstream OpenJDK * Version 1.8.0.20~b22 * Sources from http://hg.openjdk.java.net/jdk8u/jdk8u20/ tag jdk8u20-b22 - Initial bug-/build-fix patches * 1015432.patch * aarch64-jni-update.patch * aarch64-misc.patch * adlc-parser.patch * applet-hole.patch * compare-pointer-with-literal.patch * disable-doclint-by-default.patch * hotspot-build-j-directive.patch * implicit-pointer-decl.patch * include-all-srcs.patch * java-atk-wrapper-security.patch * link-with-as-needed.patch * memory-limits.patch * multiple-pkcs11-library-init.patch * ppc-zero-hotspot.patch * PStack-808293.patch * s390-java-opts.patch * s390-size_t.patch * system-giflib5.patch * system-lcms.patch * system-libjpeg.patch * system-libpng.patch * voidreturn.patch - Added aarch64 hotspot from the tip of http://hg.openjdk.java.net/aarch64-port/jdk8/hotspot - Added pulseaudio provider from the tip of http://icedtea.classpath.org/hg/icedtea-sound/lamb70 1552059481 1.8.01.8.0.201-lp150.2.12.11.8.0.201-lp150.2.12.11.8.0.201-lp150.2.12.11.8.01.8.0.2011.8.0.201-lp150.2.12.11.8.0.201-lp150.2.12.11.8.01.8.0.201-lp150.2.12.11.8.0.201-lp150.2.12.11.8.0.201-lp150.2.12.11.8.01.8.0.201-lp150.2.12.11.8.0.201-lp150.2.12.1amd64libawt_xawt.solibicedtea-sound.solibjawt.solibjsoundalsa.solibsplashscreen.sohicolorjava-1.8.0-openjdk.pngjava-1.8.0-openjdk.pngjava-1.8.0-openjdk.pngjava-1.8.0-openjdk.png/usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/amd64//usr/share/icons//usr/share/icons/hicolor/16x16/apps//usr/share/icons/hicolor/24x24/apps//usr/share/icons/hicolor/32x32/apps//usr/share/icons/hicolor/48x48/apps/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:9797/openSUSE_Leap_15.0_Update/09e477fdcca393d852134e57cc813aac-java-1_8_0-openjdk.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linux directoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5967ad5e39d39c62099d49367135caad6fc1032c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9046c7eda317247c123a7251160626464f2fa50f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=198600b127862c9e15df6714999a5e8a00c67602, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=728aa3834a2fd28e3b7e0cd16a7e644221ec2df8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9385781ad79d72ee9f750568f95ad9dda1ce2198, strippedPNG image data, 16 x 16, 8-bit/color RGBA, non-interlacedPNG image data, 24 x 23, 8-bit/color RGBA, non-interlacedPNG image data, 32 x 32, 8-bit/color RGBA, non-interlacedPNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced$. PPRRRR RRRRRRR RRRRRR RRRRPRRRR&R%RPPRRRRPPRRRRR R R RPPRR$RRRRR"RRR#RRR!Rr\4JǨlutf-86e9f0104bcc37c729ec6ee4afb74bed7e1f37218e1e2618e15451fd2c37b1908? 7zXZ !t/♖] crt:bLL .[`Sk`g:LM tX}5 ]/:%FwθUoR +٧` T@lUdC5~H~fS" = p-3!R'{5~&w Bz@ ) J+zxOPVz7w|{JeվʅY$Sy8'`JCʓ&$=BD ZܦL,`vB{zdj+$a7&5| \M^hR.bBHv& mG%DME0.>u[DX-9QhLu ۦ)yK|ik{N-Fq[ZOڏze֥59zHWEX"̀F]ZKJ2\)jOn?!`Hit">M8't.p:3[ P@*&DU`So"_#}Ë16Q_ Q^Kjٞ#V@㮯k6S1 ˵&/^qwM!Iv4F*ڙ{kߑ1\1A˻\6@4v*r}7Xݬ~xǟsl_#IR]Igst%ŭYO~z$2yy8$˲.]tXCF>"!oc#G,w 9j*Yȍ/4?XĆMU3-)@V`VsW87 '|!QDB(K%RlvOw?FkT=)r4#$]4(<5C~̸!TEJ4Wsjњ~uh4/8O)NI027›&K?۷^~MoFq'[ă w(pxKl朼 K]-xd p'8rh"L6 7[{/`-B3 |jHllCa.;\Գ~JX:FW䆱#jny²htsszDw^)B7];Pjaov%ΚsUq_+@s;N; zd'ϣ0ԙ/BlSܕE/,պ^>rҌgI)@qpvssrّTxhw fq̔{B*1NɸQ Rbb9*E]"-*1P(U:{qUt>s*Ґq3α`~~B꾺"nTlbdR(܅*maXQ`L?;p k|;[Mil0# ֶv#%DH#@746̡OWͽ=<+mv`KQm8O öPrmxd'g_׭e 9`ܸAejX2x%.猚'Hm.1YEX cՁyȪP h.>IW1<LRwOf*-pV%Qca'UPu;}YUY5Wy U<B_ؓh>,Sf:ݐlkEO෋ߪ4'ۉ߈@GE $dh-#?6 YF90~Nh tKsh;v?d%/`:~\XaE9-#jpqcߍ\qt%"maF^pWj'WdrB5ч;_BtшJ:'N`C|v֍ SRf4\?OQ%8?N~#T"e>W-FyX1h` f')=SBQcލckF+ {1XBab'Y0<6([HϽ߀ H&~&kv c.x$m,huo_M Q16왭"-;^p2zJlWY Բ$Q!s5G35FA_Hnicdf<:|qY&H -#ʊ<,~Qq 'ݒo}2&_cNQ  4}PGhw]~]+9P!V7Tx\4*RXALȕ(P;JhVS,%4|LA@BhWqQn&("]J2uUJZ:~Y;32D{{(dz}(?`oTeJcÌM &Հ9 W^,'sޒ^,?sRH ,rs}u㽞|gpr˜P{/ ]4[+xbeU:D {}pxq&G'59.2 )tX2po̊90 y}@oq@*W3Xxo#DI-Blw5((1B]3ɷL]u!n t4uZCMgNYh9xyOE.rD&qQ ;; f Mw`: biȚ^&??L)q28ڝl"o oP8&IK7kYJy8P{ݧb*?$OIfٹL ⥴@ mvKy̥\~Ndq%6 ~bیg;T\7 ћ.KxiݔtnɾڊH;F0?j;&; !b ڢ^ΨDL ߨo=e",P˽iТ0y 3+pwoQS\CtOUrh[gP3B"%&Kz+u}:zCa\Z2 C[#5 T^j>.9zjaT:pyY 8PNI!E:wZ""!J+Xw^ , J-$Waph+0=M8) np%WvQ_P3+ rHǡ+Cv%!7 ղplWdlsSfI9 f~b#XK;a[ \QVYK?V9/ԕA4lLiN= DwĪ܍ЯB|@&iY~lgh2N{XEav`@t7@Nz]@h;rW0gktWEcfS x(4WRDvi _7|k7-iLOP_p]hÞ>+?8PubOYojz27Lru딅4|#UCYɘO~{yU|!p3z@zR,ɰr8P/^#a,M@׹ بa+r|fX\?}HkU'%ʞi  <#=i= 󋔷Z]3mOĨ X3 $|HbAoB뢀69F-|_0LON9;_KG7a#x ѡ[nKy\{6@;0w1p/0|ҽK2û됪m\}K4z!X.t . *HCݵ1 ܰo? S *&bv'Ҹd$lIU.j"la֨:obtz96!d}%j~O^W 5cSY:Z?ǓͬVEWkNL9~%s,?dm;2Fg5ř>ճQp/) - ѽ*}qԧv|wh&I) "Õ[˭6)^Ëf[_2r}w wSt%iѿM9^g_vj :F )Q0#m, 06 oS8kt އ C'uF_] KsΕF.TNSӻ0(%Ԧsq|zV[%+_R9 @[hSgrsL3rT!RevD6"0a0~Ll^&.,Rb OÊIeGr^ Demu+wL)oz򩰧zKTx) Mc`gX+P baojVĎP@zN0=?Qg ܙqDhCLIPj,`-1I"؏Yy0:xf;2z7{ڮ5v\~ *pgKf싞|:93oݢb2!P"t?m2e zFF$u1up.x{!9{[U?UNGDѢiԇs wzF=1՛~\uT1TB̑0 McO{Ll>R <5Ʀ%) Ҁñ*~ r@] XWc>jsGh 2p ^[5T6:L[ܫ}vqS鈵&l:neϧqoNLN5nUNcI{ ײ"٭h]RV(Y+YKVM@esc5~~%J!-]: pؔʛ%AEhohGKd]Jce%n^(LzUgE lSLCxv9Hpj W9u0.+Ok_&V+abHxu-}ctvPQhG PHiVqq.ʪɯK\v܇w(&_V^c M-~|>4&梺1Yn"^8s5)w/pvō69e4g.>E'&h1 @@:?R$?<"2b/9G[e˟rQUIGWs´alvy`7Wv2݌HBg{ Ci/Q\韙2k DUl$t)Rm{!hDb`,*wq '@6qCc@Ȋ,T(X (3*qϙT,pjz ITlT'Y*Ѫ0\9U{Wh=Ӳgwk,E{ ɉ8`,Vj`nϡ=taf^{ibtS'(0[BzoSỸu@ 5%f>Gڭ caO,%-">XR~H碛?#C&+]Mqw`PG,6Jmv !ILi~2oX;?98fv]륄=2OgPQ"f> &(Q5*5/+q"1d)&sl˃7tP?twn (vK J5aW2afGc&Ì._P-_X(06o_Y@sܥ0 =mоÄ@͞v9OM]l@f_weFsS]!#$]Z)5~LRm7eDz>K3jS1b\PN`〧3̧}I 1pn%W7lJb0JĢ(h#㱴әB2׫@Daj@V/e)`;HMߐ/33cUtl:J5Uq-th}`ͭ\r89RP׳DuZ+P;`߇c/LgIf#(ZZ=!mug5 .h 0$퐫r`eL f”7PI7tֻie[5C "ۂMOwp -2)NNGM(~4yrV8yЯ%|8Y^Q?Ʋ0Q?3j(,@&LCX׌9ѐ!?h6A@U,\Qշp4b[/x29C 8>I|;pe gsϷ6KR1i`FƉwbgv~)9_ a5-_ ?ҹO(U|yН^@`ofќ>*YF0cLqf*QSL;G[ g~bOB[inyR>R5kMDpȋH*lB*5lD`PATjp|[)Qսv ¹䔼sņǴ@\ġ=6_EdH!(,nr \PY8%轓]ܔlN@#`f}@Yws` ;^-ObHDS.9z4j;i ;ipiEO}%yZMW|O (~̧YM3L9T揧iI/G |Rsw> 11I۾BS˷>W͠sCѵo C5jm6q q)Li.QQRbc=[=G!!Ԕo(u>0hx4n9sϧsG{\'hb_p,-!ֵ8`wJ_&e Iϋe(0.==7:W!Apzl NAkfC1]3 "Yh_OҚ֐ xWhf1l(ގV 9t^y'UF`L4`׭*s4m5,8 mR3[C.h_lFݣ]`#Ag@`U=L3 iƽL?eH3g惁<Ɂx|Eh@G>\ A8le?:+6_X}Kɂo ]!L˚v:B :&h _˾ MI넳)Rl*Z8r՚,cf/b txYN9>s˒0-:2?S0!;E <\a\k6=qcB\@m$擟X})VcBo/Uu*jD TpχM+B:RȺTj*[SXKpnc JǁMDͦu >1=?ťy WZ-H`Wc]ưFҫ^ZrEj7s* 4%W3/{oߑiߟNv;0p%1ok']4j`XJ5)04S)Ey3J.ЩXW wPA_Y;%P$d>)pwG"BUB'x4_ט L_C"b<,OquXxhPiuF}:ضj@~ˮby[)9f}<|<%|ętNLL'NwÏX@ q]=OUtQW/xTʓҰg{H2PO=ݗ* [xEY-6Tc`őO(,-qMEHl`\h [X]̗\΁gJE|/9QMQ o;Wھw'q*#>MWt.i#/H9F+p+:ЛL/_˟x`RѠEB)p0m 곺GyvMUjgRRp*GM\g:v25RYyZIՐϏ}!"9]2 ȑ\QYHB=5Tl~ɔ0am5U8e4ufFjV^#3Gw s#|ϟOޔP_DߟiAWlΏ$cZfc}b+z'.Ngg>qm,㴈dD9vzŭLEKa}K f.grHt)OXߚGL!w)GGsNk,lŵ "FӗZHMLږ8) BɐM;Q~`ݙ~ØD .|rGi4{BŽJ/Hrm{CƀM&r_~7OoWȚB #HeQ+ceJT H㗆SC7OMd 9/=qjTlٕjߴx{N ~: O;'ɨ}/Ipm:\f4-J4@SzfҿHM}7")P}Kܹr{$j,&w,r _¼qcαL卂: i#¦ +|i^a&}^6JK<N\V4m?rȅXͦ "9'n2SvܳXnߎLRkeϐz)FLBd)0d->͸[}z h:q?x%IsH}D]{qS lN[D1 e h sKwìO~(XiQVퟴpSt;;?G7(WĻ<Ր`g`زI;ޞI'E4i:g2 U}S_3.d[m@ Uax:%p$R·c4rx1t,+&L&҅5pocյzKb؞5Jadq\0x1rPCUgb]lӦrRyswRfoj4PXyh%QYޠXnMTOf$m=*`CE0R0b$NDUGl|"!024R)TK#@ag^.:N '.}y28YCfvPh4D)$P1rp ,!eh çD!~rT_yGr 9ۄ=]hGa)s#|ڲdR;!/]nF+wAsoMsԜ.NҴyY3@=<$J6?omʊIxQڸ8q"fc`:ZXf]j ;/74w %/e'zo^`{T0N\fGum}}mAxoDŽ1έmln_.u vҵOB!,gVeK&%BB}b!zGNX*_<{5=u (m{0 ND{JQҀ2iΌoZ+ vȓtCj# 9dB0ACgAPE瘑=tЇ(B:>{HgO)ܡF &Q =2Z8AN/H,|KEsp b NG?|(^ %B@BJJP/[0 f،ׁZk/oF֏l~ :q󻎳?,aV\&{.{DcsŚuMb6K#5 aIxRgnB9\1/x w=ɇRv=<_pc ZGwאi({]׀RI~KAaidi& $Z)?1i]GuI(?Mq,'kEɆ|ƧADz^l󄠝˜6:'.[7JM'(Y-431C7:[6F_DγVo3\66r=zp4B6=zwdвޝq&ޣ+sM 3T˾d]d2PIԜk³ˤhce)/.H}WbɂHޜglA]| B&W~ʉ;;qN:ɭGޜKY{&zCWzkuxe3 ((هԐ b!JOEiW\ xbkA;cKSţ]G# 5f+H:-#j5WO8jMrl C9(jKx$k$%X7'BtLtBt^ar6OE{a mK@MXlq "8e?w eyi`(õMEQ&f(*xȝYag/xxreI?9YCjU0T2k+Yv5,Uay{q;RQMdk8MƅHM0ɧJF_]_zK%fvp}`8^%w] Sq~|U N&ne|ݍOIC!xHaA&`u^ՇTmcKI[ w} R}'ḩ2'9?"㊁Z^ ,mɺ2MtDTS̈́3ΰ;)ԋ4G/C%:\}!8_zz/T_>7QesrW-zVC< w%ԩ9k9a#u C )Vi Գ\ dHﰐ"S%ʬ|F]z<<#XKX9r|͠DXO yL9$T8 a/DbV凅>K| i6 Ol~ ~.K'w-%m1D(j>R1c%hv |Ϩscl $~*]J4Q B%KNi4><Y7 Ղ%5zaE4B0"*J~&Z[z#Æ&*x|-̽5F N51)Ѹ:tGK[2I:4˯}ѓq5Nejh=,x&,%M3/2<< 1kҶNAن9*!h (|9B˜,iypkf8D xYZ<{ܵKG(=˔dm;ۈ`U03L-6x%< I&RLE o|?"~KoruFkDENW8#S!uuR\ZDlJdx5WD\nYRB\vUNr1S;Hg24Q}Ue$RD}s.|d,J+39^8M9sρqN/Շ#uw2r]E""5PC؈bS1iUgqKa'¯a7z\AcH(`qO:?7p)_ L`izfꧫA  ˠ5]fYzF6kO{drs, m((!ס\FE貒!E#&>BC5j(da#Rjg=G'yKݢ%ˡhFa|gFhao,ĕ$3λI:`~ߟ\ی &@ߖUVHsh T2.iָ p=8UѣG.f1@?y@ghW+sTkax9ޚjQᬭdkj' ?>rA'( .??i9x2gAkUFR!tG,<˯k}zƋd笂}~o\EhF m1ђ뾱p[>Xs0&'Q*Eяl?w8zYQ_;/\~1Z}P3ZB$k_MfK)~cd(k?nX[8( HS;,$l.L08Z6/$׻vc >$ qb>m‰shƸbEמjqLw U`t@\E_ǂPl\ 9JCtc9+!ea NXhE&>G / y$be] XQE7Ā~H+'"Ȃfs‡N"2 `R|Bu-METuS 1L7xlhbM7n_?%X],swӝpSM43 FnO40tbx=ɣl5;T~$mU,85VҪG3G`(zX,!zoW% Й84>^Y.G1~W['1ֿv@Fᑍ20/{ܙ:l`Lw ˯E 1=P'q£1 hDr: T2ŻL狿yHZ8˖0]ð cFZ`7:ɆEd@+Y M(œh3 KpuA?6ҧ%R梆2o0h[%H* ^H'\"7RDѵCf"+(_~P'Sv>sb;%GCfkQ)̔O&TϡBDl1Q}`E~i_0q[Hs?#e*[7v$lZ[8 ,fxև`aJJAqGg,{b1̙8\ qkZGg{OyY mI-B%.8ć򚳉e߷,FfP S RנX}30]Sࡳ'A @߃"6`pbK=p'H8fQ#r !sPC| OvpI]|9u1{ޟy2 L5Z& ?j>rSe}guM:aj>B&4lp!&Y\e&Bjd5k zv5'F<0MSte&\٫|P)c.iPϠIaТS]Pz)1RZ"ht]U0TӔ Z 7-94J~Ϗ>[C1z샋œ&ͬb"\bQ#"4 89n`s A,DAoa'1-!(SƊF1~7x) ]1}3rCvzfp%Ʊ(j< u|ſvdQt‘T._,JDZҌ$@W&_XVHء1@IHACbJ\e68AGkw`k`.:=7d?7?oL<{ńd"RP%Nh~Rf|CfJS06`.7HsE`n4~DOF}Y&W[5άia"W^>%aY|WwFUeĬ*8BUvR&4^>}zEvCȳDW"KWƛj{")h9)r`?XT,ӡ1PӐ)N%ynI|K, (1('%mƾ⑥r B/HtQֽSv"t1s:l?I^sq ItICՕU cG$[>A4D= eczΕ)cD{bx5憽b%Lx)2KtfQOa@mcK 0a!§4BGn[wOSpOhv2hH7<0/~}Sv12:ɂ.(YG77c nsоSdB;M0 tzKǵYgRZQFma[ry{sZ"VRꉯ0Efh BH*7zG.*^KC\."V,"At 6"R;W1 sTY31Lm*KqfKکo&uDJ+^V\)tpC73`|ʂְ+&p 8 NiXo;Wj4핞th#-M`"\HVih}+h'P.e{/\ +J(KZpq\1"PqZ kKKl_ þsK<&nӪ%ڞ@VPjԍdipȒ-ͰsqγtF+9C= /-9iK)[K -B; tu*Ԑ$wmd;.n[^j\(ȸ+ 9C%260&QR&Ｋpb]ROVu2 |]z'HB%9 Jױpy~T)s},% 'Eöw1y$7HU1m/QTjJzucQd}YOS_$ c_3 ֚W2gzu+%8]e+B[ޤj COoWOu3łѷ"Iv;>IVlq@SB"hl)#Q*,Ȭ8CA)VeRk.Ƴf?O$̟?wk. ^QczBNjV?bn[+<(wpKsLfUW71U2k)%cop8޿ d\+%'&H,(ټf%fEn/RLS}JPo[.F|𑠕Ua}*?4DT& *R7!\Fí' t`neh=1a&yWpd>%#9I?q6&gOLO63I x'Y1ٯ2iꅴx@cY%+ |@ss3lvq<1)Xþ'xN8v)}uq[kqE8v%ɝ"4 ]]7l-RrGC2K xWE=FPgrJ8YFV̹SW%EU=nM,QȽ b&patLI 2~HYȭlү]mdO ɧ܅ ?67#0&?\6䧿JY-K.Xæ;cf[eFujr%²\"'Cca[*VQa[ԥWG_q/s'wP,s,煾VVF J`O3]1{xu-߬\I[H5"eO=عP7ӥGL7HҠDJۭ{Y)h_mi'v914c)tJN.'˜@p>y5p<\5B.0pR?x=M: + ̮HD/R-&B6דIByj)ɢ.}9Lzǀzgr5?Ƅ<^sD߅KWJ o/EQ#VJㄪ9s˛X.ӯgU,+nay#FukPa$W/óPg8V ?1Uy>xg";xy~d'_RMTJ*TLQ+U~0m }*Ҷ@!?``, B&}Z4üdwq%ck &#%MEr!,`g7}/dIt) /yƜjU;% qYOa6V#F:Cl(R{$QKz hl՞TG~8A- HL!9jN)SԐb_vlӗ dFZ|!ϥ*?6q>]>rP10R/û?wh*Lq-&67߾1 N@Qߡp)[Ϲ*ެqcEzm~ |S3F6GI;:, .>|ݿi¼8a5n.Z2a$L, dI!qSYz<.cjReJK qH\%{a[R{Dϓ%&&|\xk(4UJf'2y4I%x^ITqۮM|ǹzdiY d`1?ޚY֔@p`ꏨl[-ouj VqsxC f(4E[F_IFEN.}F“OA:g{mQ\!Q>ᠢ':tU0aw`'%7]wyAw[_'\iX-8}3bƊ";4Dtz ϑj5*]!*泻άm$!orԗCIWngytr ʺ:2F.m58i6 9Do :RWhFH'+)C^`eb` rOghPFoUC5Bzm ǎ\BDؙO0-⃋MhE[٢kmtCnp\v.5FnYպC}\ˉWNh11>K~>740%i+CSdDaCaG_[7umJ.ldĠ??CQ[^j@A5/uL 5AgI+1 -䢍|djd5 ZˠT@4og5 MNx 8Xv! i2"UWǰ٦S֒KzΐP _/yr À}qGIS#(?菽Z8(=1C|NrMjVoׇ6rMX_NYmUS tMRd𢡄- P+9$eo>t#WILeYnu@Tp o{$*eٕ# d,I<GPȀ>~jL κȻ=(X\~'1B\w/Mf|~jdJ ?䡔 );B8RV I Q9՛Gø91̨]5 8I_JLFIhjm ?[U "8.P$Xtzcԡl0Kcy*„~}86󿾎6+K=\]Z'$#\bDs%چGPE %v0#[$ ̔IlUd37x-En̸UD뼜l1Y4,14wE/pp!7=kԪqKM!eg!$_álMhfHPq78}& RLi&^ J|E]Xu˭JI^\Ao~>;;].W1$Q {(J29~+V#o^7-+' $6~lC#Yl&bWtu g +-"U/XX,kٲwaxwT|qňJ׺EF`3{l' paYة)G2q;M%h}b48 v덿j?y*Gʫ2l܅K'5$0<. Ov2 _1E y ӿQE<.iCQ9b0z] W rE؂| X3&4e/<޽@N,z4Su9G'S'櫀cW5_1-7~:]k)O$KP;%*CC+6O鿔Utrzq}6U^:| h<*U泓zKk]\S9>\HY&8vvìvnwd/S{j{)(RQ# 9sD<ɺKE֒ ]o20c:AS'O"ŊS$*dŇ+rJp˂na77ڥ~{ۼ; C.~92S!ɋy5ImqmAmH0<1TlK~^#rz]+뭏)85`禴e,&k kuHJ[f㖀n*y-G?s?X /QUѬQup&rh7Q|)G@vе_7 sF}ۂa d8SȠT|go=V1J+ = 1^zY@6Z|ek=g" "Ar"ɜ&ME oR|{ p8/1ȹjєPGI5B$aT$NfB,q"w |a$eOQKEnGNN=I5:Cm$2"V0Z-x) ٠/f}O~O$! 9&1K {2B`:i*%[RiLڣ+.-:zXA`>t^A'üQ`0e!L^؇\BZdz$`hC%3ϭA=v+>㔏1Txw,>QOK){~I33틠 >mQV[&׀qa-d$)0C49eÌǏf>O[r7av[8]EgFj76,."sMߞle kUYQo/ayϐ7j%=>!$ūV<@kb6QY^ NWabԈЫd{|"8]z谞 %)и44Q)Fr\陦XFcrjSA.r񿩺[5@iĝr9"Qa+-3w`Kķ ^,~O0)[i8qd 7x;9| 9"M)bmݳvorpI?ԑ /5<ke+` &“,m]R֌+B ric-g M 3pgoH&Z<=zκU_UPDd&|ISM-scfZ):}+t}ٲ!H<_?r2G 1> $:&~+-^x{mswzVXʦ3t aY^kZ[GNnXK7XB" L0HzYӊ5Sf&&6Oý  DGjmY$>,_ @ʈ ŴSi[ P;4jK+T?T;&iڃ?L_ HI;b JuSNS/,e=B~dLuBxn4C]X I$5p U97*a )E>;΂!&]qFiߠGU"[\Y؅ !$E63l$}-5 1pҍ dC.V-;|G;ů5,t= 9vC?ȊnO<.P?M40j;~~|y[ω ̙^4Jn^;mhxLդE&ޖ@lKk;-\wiD4<ūQ݋^*q#\J|\ב bǁG\ D_~Ö`oCr[qh`2)WN߬ܚ6: ća;~=MP=etLc]T~EB֭e%"3>ZgT=g}Gl vb}o{٣]#*HidV"@Ւq,nwRj0`fG$]{4"mOnmvRPtulK+zz R%Ƨ~ J?b..EA IL 8z![;Fw.] =ťj .tPUrXW{P9+Z;ԓfSM̸}kxiyΪIm9܀%!56ڋu=6L(ƆVJLoF"/A\Zu/eNssI p.9sc\CJח ؑ'܈@҃')DL!e"csg!‰O…'4qv,Fq|k?uS| cE!71Yloj@qyg?T.{H~{/Q]W^]Q*/_UtQ>E 6SZhGQavg{^.0y%lySp ̊יZ QF4(e_ݿ<>=oȤw,w,a׎w{A:#r3=o?$/ܿ Z" hoɡu'RIV-*Z.|wxɼxpS*jVt-~8WB \_Nڣ=F&Ggi]׌;Pp?7WN5)֦}YGP j t&q_4>d@z2$ vJB5R&"kMR۪""`HmWڈXZ1&Yf5-mՋnj( D4^SAr)p;\R]rؒy@:Ui-k6^m&w25geR?Vg/\Y[Ջ"`w@AF iu0oc|e^O7BfM4T.k܍1A{j^٦K_j+'t `5wU M?eaA\kPAX{GYy!Я}X-d2VWCr7x}M/v&lPe+"aD0چԘEp&>Zy,Ӆt d9=*jLa]2=#&/:Pp䙧^V*1\,m◦; 'ƦA>C#˸UxcWl|]D.`60Dvk/IN:J12 go[ jCۄM/9xr܊]lڰ65$]U&Y҃e˓]-z ECBj W@dq,sWeD+8Ӷ_]Ptjbg3;Hb3ǚO)yn6_GJ28^!HV)e#Ke>{NW,+6-4bQ&\}xϹm=7 ƌx'C.tڵ, DP}|;ǝHwO`S g 6ȅqB#3_3qG%; 6wV\V?;t8 oé&˔H:o|?ř}pf-Xyeq韧j1Wgt;"FRh*0]F[vQ&V K#5#1f< $Mu!T<0pEcs Z { r^_wv!L,a<͸ףpO8ӵ)j" r.c8Zsg淉D+ϜD^"@mu0>W0P}tx֜$C<""c x9@U\[-u@*m)P]dx7Bk2 ".N_Mک}g#Eew4 $n*C6lc-"?3A#FCeT6ZzXL8Sn(\~0eY(ŬB 1dp[XU|X)٦3 y k,v#_cd+"3AZM㑱@`KCY5Xx䎨ɯAȽlS8r㾋r6Ȕ/IgeG`P7Yjmag?L|kdxXw-0s.Z #q݊|Wc~m): gW֌ Hl#`%`1gArfJkYeM%~oc6p+2fR|U hSjv<]_5eaлOQtTF<C`vICӃ%25T!-`/T<Ǝhou2}CЛS1P6} r+XBz25bT>ժLѲN/M0bLh,a{&WzM 3 \[0<0׶gYWz"S.&m՘I cMq/if4%XܩZd56Jp KޝuԲRqzrWYM`(4{fF}ӮA i*ނ6јJp ޹+D`BbQ7ȖIƉiJ/e*r= +n}Zk9[UFZG&lR\Ë99;'* Ȓٞ]^)e~KD;Q{7EӬ^|K25H'hn_hV7Z*eUKx : N*')IѲ*0Gc]?Oq`WHBî^l)FeR-T1W,^^X*6sWoVe0g1Ro:ݑ? LZ_) C.XA2n'o򽄟%hGL۟)}NOuʕ0`%ՑWp5VI{ca[O@ [G;c;{rsݢ_hs5)!/":EUjjB PYx6$/wg:OPИVGcm^>=v"' v/l%u U'FkI=g>+r*pA\Iob>- hIG) 5ԏkCWp0xY )s?Q/B-(@L]pN":EK-^=T{\wl%s%ԆyJ#|z0˯UXui nB;!2*\rô>ӖwABQ%6Trt[T;EP9̊JXMCx0 RS3'b"?@ hJGE&Gm}KW e;.!]D. lqB/u+>J<&pv25rreMХ_μ1@Qc3i*/lN\Efw: .??C;F˯ļ峎%(XC(X(j3ܠst; _TpV}TJݷq`TwVÞI;P& Ę{ے8hO]6iRX#6[N.?^"A:_"YWܷ/CB]5WcJAH09Nj.1Vj\+\GtƏOE|@7)Qcn/ۘVRɚY.s5'yLn Ӽt&O$8h}6@#p_8ls5Q~>Ycsu/ǚ&Y" XHl ViJ[u!};ꗫ$\DlF]ߒW@S҅>yR`?-O}1l rwVl#am+;A'eVE,*M plnFA0rf,j&݊N :cE@op; /^]*U5\ 5dbCC_ ,ڨ__9|*-n6M;@FҁFX-14z }J#7@]BZn\o ΩZ\ wrC}Iߘ}v">7WV;(з@cnc؋`2/qJPA*gңHLjp9ܧ W4"olR]G G%,ҡ{~Ӷm݅@LUOm-sa퉬iHOqj3c)*^45Uob C=[2m_șbz".v|>p\@*5ޅh6$Ox4$X1,F(~@6T5;\.raTC+$޴Pl6OZvU6%gƈ</' qIl^bxq;b>D%}J7aFܚ\MYHBਿS b -ȝaI9YvC/EҠ{4e06HhUnl=#GB[8$5֯+ ɫ!i>B,&Ի`'1 *TBfD#rvFbfI=(Lnf=+2 27;W{񩖥R>D9e[]BN+M U{dfRC'#YTFc}Xdǟ}L4(pR(أd뽁Y]4:%ea#oĵLP#c_ #uzԐN3~ij:R-SZTzC6na=Y5YJqz ̝Wa]U R/^ +dɍ ^ L85NDirRUCKσ+Tpd>GȑЉ-zN/0D&Hla~.yDx\Q:.)JuF|rB43e|dљ#f| q'UF0LѤm6o=oL90[`'%L{v;*0H- jF:(e3DœIPL@g:2sVqTt) K2'VXȦmwa)]5%XM6"Y^<a`R ; 08!lޅyLFk?)l?ݿ~WI$Ԕ/Z,;r[>d4uTrgɠ2 B}Y3wͣyB"jԕ@<8tx6>Zkee1&3QXus*z0_%J(L+ї},LkKeQ.E1'y9VbBĬS Aėߖ /%BYⰬgV5A\PSA/g .pHvߨ+]m';I@: 'HtS}bЀzBC0\!06xfbyC.3ĺ]&Is47tqyD.wOWG- dمIaXbnż[W`,.9q]x]3hp< *~qS76} ;;A#='JXcҰ3w \b eh (V mѿ!*9y}!pFr٭q<{$wƚS`*R"|%a&>n}%=P%\o U꜐kjXV5gxMltsvM*\A}:HAk22q57cChEޙE5Ebֲ1 %yμͷ0ή^; ^ NU}XWֈ)-r}JZ=u[e]P=ixo_JT,J, NՔ+sF4"QxjK{AmUҥiL/ǐG y`G" t W&&ħldB=.:H+?/I=3jq 2mgRy7AG=F>4B7NzG |R2yB+Bo?ɼ̂pOFВ--}>'5b9 C Nc 0۪ Nj4j,7žPU;JG|Ku􁊸w&,8H9X"7-ɽbvsf:OK^o;~DsЊba 'LT23{ AiB}.:}dF+/oSP>f!O͈>6\ם_nא!(:!UO֠,66fR̸a {}&+]!4kKVMHk.W 2T͌0w !4eҐyQN\ Q%dNSzvgx'?P02A4&P̗=9Vxa{F<5P鶁 r?iŤ~|ZC#<훃}v1 )JaI,Ui.R8m w.!t?΀剼'H ִOy =D:&ԱZ&TmDǹ׌#vax[U~N[H%r]uRBy@9-M$b1kxK&Cm}#xmAFvă^{NSʺE@0jԿ~֕DD54j0/0\#Ul,9-ؑ?~q[f5vuu[H|/N=$KAk&nef-=dn xg@\ە1gB7-w' "K*]"$YRi|?I܍/۹K*BO~ `7=}m^u=P:6fӟs EÃǗ&.M|GB0:`tx:%ZZQ 4dgD簂Mv~3)J4Ia#u٣2h2QH}%&,bK&@}9pt5#_8$6\%]]|Xl`8¤˩HEI$G8HJn cặڊU6Da5X9FW0GcpH:i9~ϵ!&yfį1 ‘46nY~.YhP'Lȋok'vՎ_S,ڜv;4IvQӔy$E0`j-"F%'D#rҷs81-3K]ލ|G萫iQ/&}N+0K@ؽfjWm^S:1Y2^ ~3ޓN*.daPvSպ\^MK[/(-CCuUߴ]H(Rb":ؤ aD7|h R zAFZ{iͅf `8 S>eZֈ% Z)f ?0_W|fєw݂ӕ??v%0:Nu\71?cb>]T.} 4y  [[jKgy]%޸}]^% PM-2!mcQtZ=d.gjshf )XX]2.teAP;PB"2ϷQ`UqNdYq2)ިM`3nBr6N\]w%qȘ\4aYϦ=Z>ї] "ض#jE{|G9{_!IeY#U0K(Qz];iD@M)ͭF ,{FIlgƱ_S&%Dbq G|Ԕf|/ѩ#=):keSQ~k)@ٜXy?0hCYj21 ;~ͼJ룜3GTg?(,/zɔ\f[5 {d P oe(~C8r[گobz7 bpoL; ޴$Y "Dݹ7|#! kzLB(W8.SVc9`10^5~AtTW~5pACȇ_̉ 6H_|aE!I2eR'So4&4[ n/C:Y|8뎌m5eύG`/[v@6 4B_Y֝ծFS G1< z-S[r0U،?u?q> z(k?R˽NXCY?#V+Kt[VpmR AQ?ؙUxCBtceZ-~ǭG/:ʜY?I'e~Ey%S2xTH=뺃g6]Ԟ-?^FsN +%ƭAh65+? y'`ʊU?Vg_ 1ՄDxܹrZ?F]1eDlLPr` ߴ9&!g ~;3 &Z6tfSfx+:>R:s/GFP8.*+|p$Mcyu?~ a ąQOC/#ԖDOw_ZJ42Q'Z۰6]˳) '#^Yat{;;v/ lx3AYi'NcCLg5_l̨ԲfWKTn:. f~o}RE+ m2w'`kF9֯nJ5+{hˈepg;^`0/B765oE-4}NٯlbK*$ -oZwإV|DJƖ #e'%Bg8E{E<#c)j=iU5,QՃU:$H.vUHQNANnvˎX/nIb_<n><,(J9QtqnV.3Zs@.j}FUNg+cvT52JȨfMvweBf83wt[ok*pAvގa|AM9ɏnI ˹+/,'Ъkqj87$8OP5z u>L ;#vƩڹt?֌}|7Z~UxDZFM_!#Q'ǽlY&d3`hf<+3dWQLxV Rߩ4eR(FihSl?0#vAd6`GLAW`O6( 0 >CZ[rru\}}&^SW(]񏉅wqx+L#F+u J`{(sgÃ$λ/ ufɹ L? XiJQSe)!-15̋"=WM)V !äA|bZTEJ~.|$oi;pgo|;u55æ;WX]hxpKO&_@-ѝǥ6Hb[w.YV!HAUpGloч5tDO7[eI7.`*dKۅ_6w tt(&ʌ=`n7qhSl1$ȖC+U#kXr#9F`3L q6ČQ j@kd b!I+T碎aBu@HvR(YHfgubF{N^l);PK[ H Oȝ(CxOf!%kZ0ߠ@aw &U)`Eor*VI2d 9Èw0*z %Zx&>!՛WTf ;4F#g1;c<7Q-cgB HƗKy 04/]"\{wHyr]%&=9 uz},KGy-9R%MT[6!y[P!3^[RUe  f$-)_*֜%#Kif` S)_;nC8! <'@e`%[gH-HzپONO]fq5IؗtuZ'fCE=B7^!pylρ@[._K4 R-.4mki(` v(OcA_6rImkҽK{/HhY3M!zz訋oRU3 V|(\෫)|luDYa_By 5q#B࢟g `i 쌢븀Gyʷ~# )m|u4bܪ/&%NRȇaO SKq_ Z3vٲL;B OȖ=jwU7NBmo6fPE$4k5laQi9]%q-Fi_x؆@)IDM{EJ316MhXKi/ՖyB͘ln;h*ӫvcH[ [뜙hl̺| OD$8v{WS?5 \"ube+ 3Ğ'NaWs_yֵzrc@ùY(72UUdn5KI QB:!"|64K ^iGy-$nXuQaPq4%@nѵUs TbQh . m!v]YZO*WSތQIGNn$Ɗ K9fSPJ?#~XOg Ð#.g>[ASap6!ªTn`YNJR5j! rJë2\Sq8nևaqbM;NՏx"&IWH[QYTk-gh[z@8wyV5%XZOkbw6ɬ!qӫ> BEND)[KյFɢ|}XpA6%׃. [=@@jOr'l* ;v7v͜Uj^e'E2֔~w x58Ilc3jQd^?^v-="XL6g0:(,63mWn4\o3`h=Ij @"8>7PwSrg5tI"ߟp{FF$W&*נOWqhWi%7wG>̻czfZyK6o!{Bϟ7 s?fL'~_ު 9愲<0ۮUfEd *D|8AzR<&CR%d=nI#a>܄z4 ƈr;FѾ7qiVsk:ߝiG8'mэE :?cxO\\oRTE*[sIqqYz7 Caox9S-Jƅ&JYl|.#H{V_5qU4rJۖTD8BA7o:~XIOٿqW/<O#gҤ; s>D,6kyVdo+9J}ٳn3q!]&/UVdfa󑨂Mnx8ʉ+1bB@ H.şj !^LGe.ɠmGy @|Vԩo< jeʡq:4w4ڴ|ޚFJi 'V~)Bg 'D`0M,}e%Ed!'؀TqL'rrڳ9-qD ߏy?el RIxOxD>sMg?dEChQSNq{ &ە;=XiRp_d1R5n{F)Z@ 8 B9Qt_KyIxEXN~ɕjDJ%֕|dۆCCZ 1 P8\d>#j(Fa}әZ(,PjT7M-\G5u0)8 vw7F}: 'h}RyPƖߖbcյ+ږ_t.Ha9Pqxd ,gw|jA |3,!w0/1K t辁)*p J{mSuʫ櫩1nא!YqbDYGT W{Cy@"N P;:Kz\/;rluw)u_INjсFsm[܏3`VyqvRWgyV|꠿V+MM)* *OeTR;AƜ~xjд1g${ 5C^YB|T͌Zyi49.@@\_"j ͹#b{ #ROVN"J</WoQh>l}AZ({@ ^rBދ) ~zѹ *Fb"hṊ' hV? ֳv8$ k=jb[KV> #F~&PJòZHj{r` TyGKc6~má3Nbfpպ>ە*Qv&c36$|jSLPK"`R!%bt+9sߍE+蛭Gu7l>%\X^WD_'-kV2xfZ2=W>/ᔟF4m5 H&oU[SKeB+RJP"bcOv)E}t1 137ed/#~b8q'AF ; 4NL&H/^xsOj*)RzMu˦6T謐}Yʾ0yA)FAV+ԔkT b-0#ɛ+[KM35n%/ѿN') m[Ƙ[7d@F1Ur[Ī8W9lm$# {X룑fG^7aKlL)I,y_~AhŰBРܝ k*X;c[=Dt'L_#U؃ݛpp׋l;؟6/0UP~<@' Ǫe{?FXϛ:e9~"+]Ҁ" 3NhOhѥ"¯xmGh>*Fu|Jz uIj^^2Lb[?V7?@z1k4] 0ج>~| >)nϮn4)NEnRdu{g {D2%ZjW!ZbLɒn]=]|g=o7*0-فoDwܵAQQsYj+Uo2<ӟZR;@xd#9mF--w?cLt*z1G)D*!Uth h@-$jk`@t'Eԛe~7?<#LycJ7. Yx+˖YmCR?5qdO-<_}aW{XG_R\470@ / nyi]7u0Oa.Tx Y U?Fz)6YgQIRwEtqJ1Ԡ(Q%(jb˸8C7}2>o8 [ZȢb$ߗ"53Ivض$w%*O΅b[āYS V(J:>_/^Q^e=2+:8S c^b@ sև@$Jo(5.nK ˲mx4\>?~?tWxM{6XPGTunQK܎nl"LmW>mqF cJWzAGY'Ȁx_\PK3L$+h`G R]Q"5tt(8(B.vP"iiXtz ΄2 gAZjQ B*k k8ގC(?U"g쩹} xd1MgZ[ח ª<NL*UFYB ֆh^pҊ%x|,5.:[g!'2s?pӈHxt@cF ρz(b\i6|EyWmu5R6xWP i(bӀƦL(qZ4<߯ Ղ&6]źx8V"ȺBIdA.JA^nN2:>;0܀\c1]V {:w=9uc|~(qzdE2i ^qEUYnWg2!3oz4 =&70".4Zk=4AWDmӪmaP _vzleCyvnB XI~gv(U%Qq`30N15¥/}ʱxŘ B}}~#-10}/ԟr)6CFh4WیJP9uS1/ˈ1_{>]0O$Q!6*Q*9-nU ߻?11{3t+% 6~6ޑp JyEY؁4_8`+K^tʪGa:P&ڕIvZTvq&('o"! &[|/9yѐP^mAڨĬ'.D}aբ` 1ig`0W% gUXW/v+;^AHކl؞mRMt4h0@ypz Zª׸,pU)v?f x,r>bgU.!iGŎa@]"MG"f06Rm /v!&aXP9\X`kH58@/-waծ߿ ;r܏V+&e]`=VHF׻1~2;Q |>B^p).t&Н <*YO1Uoe(mʤ^CvSc4aXeK*!w N#ct4 ٔW-^Rb xO5,MAe {Ӿc!HqP%D75 , 3>Ʈ0vqy^8 t@+ P @&ߜ'.#4j niAү!οdA@N OM"stMJReA&a:؍={Ulڜ&^eyϭ#|# "4 o S͘ kFwفzGՋf  ]ԭ6:nYL//A$_֟(xk:U%k2ds-flc(f);G_D6!g"@瀎! fu 71y9n8[tώηJtOt38YWl]H21C?RRQH$g{OPq lаI 47!\w -Wi5s 'hH@ V2 M@fm"0,r;lQ)S'Re'DD9`fd2k]mw_xDx|r¯ꍚ# Zσ"CCֻD9qYbg{0 TLpWn~\H~ӎA[%4*oo(WE cU@=ǻLÀ)-q}< dݜd{P_pql!/}9;Y[+vP5扔eKPk}<^DrȲ;@*"CU@2I9ScO2,/vGkGTEWy ŠSk$[M Vzxi[\OgPK!~YQ>X0ˢtX+^DwSZ!WYb5X)$8g*n$6l?&e'6t2RJ -89fHD7ǜ ٗ.p<+\ Tzm缷B; %PT\^G EJi&"|fg+"lͬmx`\r\-5<Cj3-]ZIaEP0JʤA#+)6~@!Pw[McL o&`}OyFjXO+ZQaP!9\zҴl#&^VSs d< q g,8+ >|S+}] I2YaW&HBEMqǏHR)&5/epi{_e<8:̚ݏ.L g*0$˷q{;/ˁQiV(;[JO8 (:pөMb}!&C(Hw*OYQ'lY-vz ۈ><<<_&xLϻƮCb |;Xpq򐴯 (l=WY%+J)~I\TmBS4HXǂj gǨk\,h4xs59`&&3.3A.}Bbɩ0AFt\G1ҨˤKi;L50VڞM|YRHWm/Ȋ4H:r_CPA$w. j `pV(j4[KtH/{S7hނmaxzklq_sId C~'5y]χ2׾TJ<P*i'ynYlA~k+I`=Zy*@`On0lPƬAPURS0(9Y K8e3mDƝVſBO70t sx1,786@bR!C[>ɮo;ء i'@68Gm]CLzm t5M+y++ؗflrԿ`Ԝe²Jfnw W0hʭCU3u0-giVvMzA Ѐ{W-YjǏ+1%Srcpc۔i*1)j&TOn |:aPG_9 xـm{hšj䝉GPB0_|9AVIضtЀ;@7b(.yBBZK ^R0-t|ٯK87qG) M$'uVԴZiv3?dҨ} >lEmTQBQOIT<@}L˙v_$zS]O;f-E\#eELc_DӃqv_qUPj}hF#fi3.nv@X{K!6[0fj) ٰ?F]9{?ߞWF.ٷv6ZeH0Ek񺏆rʻcj.bPr@ ۸sssk`(ǃqk LGLR% i?+ r R>Y=pF޹lH{lpL05IA\kcK$%TC}^3"9ysu,Y[Iq+G'+ ןorD QȼVoӯ6 5ܕn]- :\Sxڱ) [6H7Loz?5;TF%Lh [.&լsМ/GM0;0ǹJC /8,NAk2C^W<-"tی?8$;g2D|G].JIʅo.?񜻜MNp#@ Ec1NtjPxn!Nz9^~T$=#j3Ss.혯VQ&$,Fl^_oX<&4~s}Ku Uɫ4AA|l17z3'afgx5FhBsBIKso`%#TYLh *rh1VMЗHd%؂T&OűHg[q/$)0u,[/'+mRFX/j ) =X'No0Q IgvjJfV8>my2:ީ˛Oa8Y^;r||Q8s/ODN{u+CcA^ t"5adJW(BK>6}gD@Rn,t竈ͺ$[&9 %erиfLAiIzYe: G'ZE崠"#ր J%s3wQΞʄL}KI1k{5TpWDqY8Wb^7`Eu{:>GQvb0M-|/fg" s,&'>޽B}w`<)_iI4W;qOo3y.:=@6zArƌ6jI;O LR4,gcJ/o4/nI,Ϥ\Ro y͡cp&qnPcld,Z$BxK_IM_]WFFxGS#6C"TlǢn$w+ꟁčAc^ >PR2gf ;#r-.6J*iO/RymVEZҍΣmvΌ_R,O RH ,`ep^~7眕XWPKըlFz=C]1$4NO]\?`uM<#p@Yږvq4^ow6]2rfNz`҉ C8崈dlPp=1&P!bL$]k4qCB!q܈OۂqJL\[QfqGdmv\͍9Ħ~,k Ȥj{?륛$%!F+԰8W;9l xj!LJ2TcRR:F!)l+X \}Czq\Y2K"F}D}i0z}Q {Ot'qH lBؔ8Z+]O I,gOծi:Žy5GߜZu01 ~ ,_s7zK~deF{Jt ?*^k_s@5 kvb~ ˖ڂެ*zT Ě=H|FRPC⺍hB*FH[_[QXYȜ)Wt$?;Q(8B(yïv{Xd[Lʈe 26ƔM' /PMoޱ+7Q;zMZ*I(+5]"4ׇcI;NhYDKGEW:fNDYG zl:#hn6q=EskFa&o'pr -n{^~`bx$-U!WSlCn=VYM-X5]!:m_d;/ż ʯiwn xj'8:>ԳVA¨jÆe8=CK]2HuSk ѱ4C j Rڙ5 PBudM2id:w~y6{NZW³ /u2gB /ejMPWމw%RŭL+Յ !$Q/匼~-MD젖Lv/5;rω ֍^.JDeWّ@SrlMy;G-D|3(Fh.ǵΰCK*&qE8`r%#^ $& 8 Rl]l)@ u4^ᅟPIr|6(7 ria(+q lU[6e0;z) X {FUuVkW]켽r㯅wsc?9G,kCuYkkMPVo9Q/8?37K}1>[ :#ԹcE&a04k%'H$f1UX dNVBp&j!@g>G sltT35,Q фs, /Ymr{憋IZ02=!b 4ȹ~ԧ㻢uӚZ"agAeBsRʞ̜nZy]|¶9i1R*Fêi ,9FM/3 !??N_40G'zTT΋r0H~iT@c p>jX~=( ϻhiJ v̘r`ˢ_z҄1J(@+Xh}?{٦GR(šD rE!s4 miaSl8ྒeFoeR^cJs'k5/wcVjgs'2$fC>ԍ$j1 _yY bOKGx̢r[=p@^hrk`BWɰ{D;(?.'5Sz06+I({Z\y/`{9|neεR{A7N >9vۊ _\*g_NWQ3Ј漣YS:,mn%/ Hu]I-6[h>դ!G#)4P#8jUIď(?OE]ٛ(|O%;Ԯ=}aQ\nͤXgU9Ť'EbA*2h~2G7L2Fm3iIl}8\@up=1pi"ߡ|ď x2v[:'.~KI9v@.ٶӍ"&\wfϳWD d*/OJEح|LּK/%ƪ&PD0PXHqyhn"*d PVwF z]<宼m[<?&YOw;P B2XVg(hpAno `J茾!bgu'߀S[] Ȕ2p7SQπD5d/p9w)}eѭ3+śM v5 xX wS/=0k ujitlH*DH{rLl<{C닇*&'K7~p8?]R~ 5%vۥÀMj8rst$_ѻ( (5IB48܏Cue:2}G퀟>?^ײ#:1"D `+0dn_*/'>0D_(l˄Z:'VOi,È;Rm:6+pVU*0v׷ 5ɵI#:mQa`_>"q z6l7;Add{x0~gnþi'Ò"ēU E+_⪷3g% hG5T::.HݹTgDw~O1Q ± LF1!`XQ&]cUeIh ؖ~GӾcEhh p&r'24x;o>#;כsvf^Q  ǣ+kA;Ze<.$8G{&xDg䭈tT:;WVG/uٯߴ*mu5nE|o ƪ:s`j^Əݡg~b;Gm!}X9kJ[ytB=SR(ϑj}[Gϫ&g+i5B*JV̱8F«>?VlV<rZuLK@k4DžLdQ"VŠo?[ 770ɑ5f6[Q{s+<+IWtڎ M&~OW.EjxҥiOլ{`E$+/1b%+-D[p&uſU nAr<$=_% LAVL4R3W( :YZ@\n@r&ީH13tRgJ s!c|ͮJ8MEhM/08(^2 #"L% \(O<:yՆ1 pUQT[w ֐Y/3֠?RW!N^_<+ ̢V?dY!sl#WEذ)C t3wO}㲌B&昢@.pާ+N:M,b0:z/er&{s ?mD_n?Bυ37l%M(<&X̷1F-"Yf2vJ Fu-*8S.!> 8VZ/1'7J}>LqnGHڐI5 f보]:דǣiRT L|΄:]5g]Ww3s=e8k"ur?Cz[NvE? ]{35lƟ{(.eRq|].rX :"uabeRs5“tH<W,ĕBvEr\*$;u2BӴ+/1#XH텳$67kPb0{?t}N>U# ݓu^YH > 9s&z6+'-@ֱ#?纸W2,PU~)uI ϥ~0AԔF dfG=!t?LbϷs/PkcnSA<3?˖l~*BNH`,'>Y8VlB;#&b\a. ͷt(2-P1eؚGMżBFʃl.yxAj)#*da0pO.ӿ!( g8=J?gFHtc8>1knR/bG16[dD 3hV\Ln2,2H! 0;ѫtg"}QzB.SػOcT}XzU3saF>dk">c꥚Nu|"d DLQ 5e.DEN}nUT"TľeQu  YV fWNhQcnSij+Ϥ(H Ddb_=1*q py4뚪uC5")TA'[`eV (ܧe܈#oQLB zT2N&Q<.H$$ J;v0U>EbBX,gl,~{G$4@Pd?, 6v@y9(@1%d~,╸ڵA rHP18S*|߳N1byZzxLSxR21i,R@6[+8{[ܪPcS /nD2RD-=sagy%!o܂h ʄT$qk(qMe @mއ~߻XS9X #iFmx+f{F* hIN$I$!=c!#f 1ȟRG_pokR~Xw}OsPnԃ#;֗bטcͽn6ƊfMz9ɄXZ}{Csic) EK6w=P^K=ֈe2*%:DEbӾez! kCMd[ zc Lva$)|bK]X ׃g{ރb\@NH=#΄h_6|&7/;V`ٽoc4h@.Y66pP,>$t8) 4 ühV<\`)YQKCk'^OhE6PZš4L xj 5S̃1y^P/ m Y m0x'?R>k aV82U'' \m ![xY ,㹚)GG=`U>GtV[אY?m?ΟmN'?=n!&Ga 6?]UE^q'62dI}=͓Ϝ1=ɜmv #sgJ5܏lP!i]AoZE^iD~UKf;9w.ޥ4rccyӑ)GJvh 0ie,~V|Dx@1I,Sgۛ$T}{泌]I?~~Abk.2[GzSqK7i+Ap掰>B(]P'A["*!EyM:ݜS|mM945AvAd&+rpZ"9Z[f;!* Vɇ＞+)Kq[|vCsh |)s/D_^a_4L+ ȱu$Dw`sf&-XęD%o 4͵-N 3A08oXߥ/Mb+$hFgaMc+RD!7 +/pmlgSM3Zt ӐǟzyY3Wj*d_kc@HR+9qo%zVot*VZY7l^\_EOޕ:#+YWq͊o2S7'i~xA[":( ʹ?. d4 f32/Q]yU †ַ}$"<5r9J].@Z%V إ\E?=ѹ7k9߇|GlZݪgHz9;J؝BǺZ9Ulm܌"lV,,<-tn'&u\@̠0-fC7ʝgPP[Vr ݀<6ٚG6jD:iʇLTi&ƻZ 9ւ-(QB)d@!Rƻ{^*m,f2"v6Eh h"$s qa5Z4ꗭ5@.M.C'~r[^Vc2j?XmO ڬs~ב*_46Q3 %הzW4c°c &ASeФ\QReYbYiNtpF5NϹ540媠zr^U+䦥I210aSEUj?=SV{-ؾϳrrI5BۏOϹu{R>Fu nT.CTmU-DO/\'5{:1T;=4tRPO}}+2$zL߳k8.(#ų71f 2OᗙH!9btTni9 Qu0 -$y{`}q7ڂ/03AxPLMiMXAPV/BPzzŴ=JC||*hYfj~ z0ʉvmAk^3vec~8jTl+kEDl!8:Q/ Z6P7[ZWo_@ ,Nַ.XEū %o taȵ E;uX\tLLrcBU}8lUzS>U "Oy`^oE@p[,fbZ(k V{*E05Nmg|Ȝ㖋b V׹&RnekY۱U=`@ EŽ펯мk2<ˀMFzsȻJImNì=^ I> -U*^͚O*TÒ}h^ 4?; ӅnxZ{e!G ʰu6@D- K8uIŃ:\ӫrf z)nxgg+{@bъ119]&}ŀB'l[H$eywgkLl FjM#UWW/]0G5;mJgj_ 3ז="$Er3_keN8 J6MG|je!j;%[,`jx@G Dcڐr:0}Xeئ i.^T9o.˲9d1]. r=+c}߱O?~doq~g1}kB?R/#ї-XS#>؄[ao6Gijf.ZaoYI+h'ac(?ǬbH#&ՉgweOdw-L|M{gg_Lȣ6CܤrTU#M,-NJxM_ErL׉@)s^f<:g42U*M^CD 03s62>d5sK\1XSIio)y@f|gG%  G,w|WV K%J!Qĺ61 1M+o^ a.I;ROg)-o!* JuUnsuz|}$h4ӟa OL]UڍJl3Wdn`_V{-rRnv!q^gG&5 1nJUBOe,83iMB*\lqV+ ݵnlR0']dzPT߂SpK2#Y!=b(g;f/Y _)Y:e쳄72܋so8;(OWf;Czbruw,o4*cǰ\+c`4% ܬKC`Cn7 ԰լhQ]* _Q5]P!~Gؘғr﹐:Vm)76oׂVdԋx*h!fwV«A:-J؍%֠3v"OpX.uJ h ;/`٫byWwKe-H%k$Qm>Ϳ&. yݓȵK 9v0p7w6՚ GSِ g_;k'u|;8USûo$6l\˴Q@׫P5@(,ʕ6jKmJzQii1¦@ϩ*%hO(,;b=%γ'=Gd-eS z|-ϩ8ǥjk㉭ ;*Ţ҉DM%ѹ$0h8HE]q]XDxOZE?rmzӡeEAFlYEć zCm/q;!΍1pƖ5IB$ :pU> ;e _QLBF.;Iog4TXY}>=nXg=23뷕1۩08 B"nmⰞ9Z8*b1>B]gA*nXwa>`F wH5@lnXD=EAZXz^Bk)CK ^םR<92d~+=7(]2*Jf_F-쐏,WUޗPJҫ@z=T5j༵b"f-y.U#~%P6cFk8[z9~H)d$xsrG]~>kЦ B,K"P+E'tI7jXd3eɡY* l& -[qi//Tq&<k>Lw;Ʈ5+Huq49H$Nb%BOݬ0L+,Y?\00YXQo,8Wh,<`1Hm?R4tRѣ# "դ(Wg:*c##0.(@]5+pۜ' *vF~V"oxU@M5mfaF q*6zgt-Xy _p؈5d+Mc/_忷3KCRM/5h26]! sYJ'U!hO̵ĞQ *ҁFҐ_*UUl%uh wF;מbBqiYk5""fאsc ZꌡB_icpժ@}9/r^t2!u >DHCvlj5K&BBa =qʐ|]oӓI(\?Y-[3Jc(7=j%obg~ؘ] Bqs;qLNগE5~d7S4 JoL#;,)SCڏ $d' J+J$l>-p'~@6wAr2$4u K?8=2%JfR%Ø=}1`O"9{W8U<oD?w(h!\8db wpJOM( F)?uuX 7-w#4AXhO1GG!#p48,m1yeu&7,Vm ʯT399Zއd2%[y֡sޣ{ISB=;-xa Ċo#Eplpu w e'H@H݃+I:Dsn~jb׀)\fjs0>mVdHoF ^Vvݎ ^Ό{'Ա6X/_ S9p;,- eUU'EٓX5kd i璛g[)lܗɶO4rqLlM08G^8s6\§ߒⷸgm/}uuUR4w[A_ Dm?4Qļ R?WՍzrx<"CbI'V;o@A<"Ymj"dפ 5,͈ՍM:ե'ﯟg.AxʪP%$ȭq-=iآlB^`>TN`HۛsisޛjUw e؊i`1[}Aɗm wM20;VPl,6 9r 6H14ayvu?;lxR*,8K:26ͨ8&ʸN%SGζe-V,]%3ޒ!b6N x"x5UM| O{sp <:%8ʒOL1gnҴG;?WU]ޔЙZ>l@3!NCyt~N zs2źIStp9V5zٻw/eaQ~=+6CȽ aڽ,XnXHbgd6`tV;K܈[}ۗ0,R^9F['kgzRqC]X66b""̀vGľNaԤXli+NJ{J4Ij]b>N᧽"_z/+_[[`]Bh /9z+RfS{  ݩx;0 LKOq߮MFS?,-&c!qEBF_/I"|C}p~Zo?8}ގ}D={#?^B.݊:b ދ&_V*mя1Q7il 4hY=b #5Lr/H1u㊷:ÅL,M .4brE [g3PK#ndq_'{&b) O\cXdWxt ;iAukJas3{z߭mHm%:XǛ0'Z#2N ngGFW35CTHC,U,[ Cܠ7wqҊϓ)ckXa~y(\x&I:ZNdD#J8CϞUO4_2ٸrUFSK;I̜vT;6>qi_rQ8p(tһuQ1@bK&6"'X7ƨZHׅȾZS3{_;@B9y.)u OڙS(W ʆU m}Hu$>D1Eɟ=O:x&^/YLͩ,:Mg zLC7}(743ց0)G:kOo^6f 8P 1(W$׌|mjGwz6 7soe#@Dqa40 PR= ޜ_3~s NR=?G쑅 mQv@!+gSKs.1jT;׾AxD`Jyῴ^ >!kUr޵hZP\77dC7P42wr qB.^6×L"*cu&j.bR7ES,uSjѽte}^.Lx&\oPaReC$+`|Yt/6kkKN}4b*^%FAl0Y 0x驧"Xʰ2= "mj&M0vrt]ב:V6fȝMgq ޅtYPwo/{n11;:?*˄Y9O[ifmN1UΖ\t(" V&㓚-E# \f}i`xG0顸[z~-yE"g dHy#^qRDFE#{t5Dީ"WH}dݾppp^666FKo! KbvjcBNH&i5ajri2+/;,Eqiy [v,LȤg/5;>~Ӡz.奶@BEv2e+@8;~<{U FQ 5@7ͺ^~혽dwGUOB+̅"B6t[K ds^EH2JQXHTbآl0>V۲:S9Q#ʅ<1s TDHI\fIRO0wUN3-ғvHabHUWu?6;ٿ!44cr=|iڛjtÊx*4n~$kӷHz -ƝhVv<=& {@圮)Ou4?#o{$)\!FᰗK<=I7Tp]/ZQ=!!{%d<_S. ey"lD)b+X K0] eHb.c vغ=$S94\uv;9J prn46i)`Quo]S%V:dGuK7(#?KV4Ao:A[$petWӘ2W'kIs?;!Ŝ-K~JJtWWxd$!TdU6۷ʃ|{r"Ĺ@ N` MšJPWU9z) YdTݚ y.[ȣRerzاG 6lMEQy$Qy1}heI;oΩanUzgpkۡdZ-aށT٤&7S/Vn o # 9+b6tQ?^-.SXEV89N={2n[wr5O|0 47c!e Bh!ZMN}wxMf$kRL9Ud*Zd%"]$AA󞜾vȉxyifm&&9L`Mpv}K3ьޤGkrxp./%)YCCNqaw,aXQeqm~p.`){!(°B} fKɩppweX,zXi(#^WLƄS_li@5bITƧRkU42XStjr0jW1XwwOaAogtmr]&"6@~<`n ƶ]~4y<"= Zxa 2ex "fHKϖro`j̫&CzS|pXO]Š٩LfH=4f DPuk)vHA 7kSp( @[}ҙ^X_7>skDMcJr<;܍O>\V`.œkh%=ZHƈ@Zyz<ȧ8B41#ڲ@atI)}jLI!J\Uֺ ؒj\g^ 9(0s Gto )]AIၠVk5ha)Jt~{X b h@jFz bT0 o{_,A՚MOljQjZaJ'N-u޹s[P]9PTN~meMhՅց!w3cdPg @GaU3i>#&t$C-RQAb,iîqDTEWm+uywWbKB`Ďwdf4Q5HpdmH{HEW<"@Y݃(Q t@&DSHc\*Dxq  |LV >(V5l5 B5?F'b~>ۋu\3Xqk| T~@||O BNfpr'46w0+J}7 JJ\D(3T-LT>[("8!$'񟐄9&12( `0Qj۬C[W'k~U*kc [P_\?N~yzc9ٞ% gS4R!MG ,EQDҀn!' )ipSA߾. 9 w险DKIy )(l c Q1('(:KDɖËW\Yn\ͧ3g^@^&((udْH}>O}n)('jO?T6C)-wUQPDž?C 9EdT{o.~J`qS+^hP"9r2Xպ.(O#Rzxʱ"vϽxP|Ző.YE1bba"SWDQT qc,N0|%06CMgXNsS>)0~l/N4*,uJ|_lĶi)𚚀@q(&[ryÝ4P"(Vۢ]˵\(0*eu]B@OK/WOwo4Kx=M;ARhI Ld ~ ~7g%A`E* sZr+ϞhHaP#̕m}utGg^4.6n~kcYZf fۥt|^)1Ew}#I 0cܪ8*I!:B/:K 8@X?ӨTM`S wu}uݓb$wuG2~4R+ו>{DH؝+)i"`@AZ[Q{J]'Yч߬:sFN>1Y{c..p U^Lb.o܂Ę_MdrKD|gFⷙtVKȠ<T]gewC|qTL )":-V.v. ׎~J:+E3xCp G4?y_q%=^MUreI^=n,<9n ytb3ʕg"l!hE\)/&^c)[;dZLɹA8z6+&_/[]|CԮ(fV@OX1P)[2I̕ )lj0mu漶yB:3CdZz0n .*cW.qyo{Qt~{P-tg}5kA@Ppe#L<_#l>W'~mڟDጭW64<}I S V=m:m˯m}u&ngu%̾vjl.-Z @.- Qv v΢"Hikww$ȫn-yѸX9F3@&E)rHͩ'*b%?FpǑ5Iib>";ѻ^"pq-oViw~EDiyac A1.T#go't3-0e`;ѫ&ݡ٠M5?='ԼZ xEޒli\ ouKÈ2,2K%.'"_`9N?qO)N첁L`8ˍ<7iMCx-&ālXΩ7pIFȰ#$(SEO$V?fǤ.QmEG~nydjQQ1A,@g3\T> Ԓ%{XS,Zt[Ph#Y _r!FP~T'.ɻ r`} P]uat;tX:Jlۢ*wG`mvntܱdc-{1@G`3Z)YH7I?V-~4-WRdQnɯh1@$F9Qw+fHAؓlE o釕w5tڍ$ Vxp73O ;z煉v0w-Ȋ&Z%oWهe`0ⴰd}+3!S9Oe}azI.34cCR[h޴<纭_0JuiJN=(p T\ D ]{Pvl?L4b tǾ%5MRiw]؁P(\FH`, *L=|)Y6vvF6SR7z\]Z <}pl2G 娔2LJ1֭}%&0c8cP ugDZ[6f`r9C 0wU.;x۩p2eyUnt m9{):pT>Lˤ[u s=|"8$ܙ&$RM-E4&x/DaD+}5TTY3_VT''@ QP)t8b|v1G6m =6_}Z b/j =5EBTN[uqijjpA eQμ 18YFB7cDg*Yun !D?`Zb5.E Z;f>G;ֆ7ぬ#>m1|Y}(`IyO=iA 1A^{]徆d_ޏl SxezBoGvpl(u.젼A^1 ]tT+$0NlḺ..Y |>/PC @A5 $Zo;-FB$wX[$ed&md:p}a;c >c7jE7*h,b5X̚7\A%9 7 C AMN!g3Uf~q~kU=0@R*l3#D}[瓡ق%ڡaS C} .07Aŋc ]uXtdMRb~Ƶ;o(s ؃u?F[{Z)d>ȳXrt[|G_>(mH;K|X7-Bx8mߊdU%?cG ҭ}UTV91S>hkg6>eRᛩQ䦎 .Xj=KԿ{Z~ύ(P'Or$WJJ., #pG;E$pZpuOG`6~4/}oKS][*%:uxw7 V s^&^ >isY.!vU,.;| f,@]Jl-T>[%mQ fL'$;8-K6结NɮƖ+Gw_'=%q3|HsV+ު #hy)'Wyo.ȥ`??[(XMK95uD%18 S>(5 UY(W~.TQSt^g{խ~+9اuQRRhp`7]D6/T'9w  D&+`"/'5c^gnP^xJI W:#S16 8Lk4PGz)qSpHe<JR\J@8_?fͧ|N]$Hf |{y1馸6;X}#uљ]x:c}'V"l7 Jܠ_P\JqKK w}Q4 JsDgp p{.7҄SmSfwԉkOD{a׿Cyōؠj. ])1,iFLMQhmͱ^-ժFg&j\ (m,# D͗L1]z?+.(^tp\ mؼAȰd?FNy,1VxCd8wHR^?t}k)|ncsJR) ղ~_y+ Ns%0~SW3vs|[ۀlHx·VN({nZm w#_4|'\1؃qȺ&2P҇ { bϘz/ _ɿxъI#{M2+^p gp %h } lE*=!QG'N嚬E#ę02gm^ 4$_Q"M_Ş_4X'Tt39 gmuW(QvH;)'ȴQp"yV-ahm QS$!qh] ?,n~9I1\cV4 |` !*F^eP-UW\LU} 'k3Ff|M]t*"P^'4cf%Չ˳~ zR{fM)A*6/!Yah0n/b50!նzK͹UB< +%zĮ|۲TY3NXRWqL\/ԎbmȬ_ph9:VlI``>QaZϙN ;?Mrzny])hԧ"d*+{ofL3ZT >/+gۙi˪4<\-e'&TjҸu"L~/I"u*כ=ar=;-K7kfUg@UU*/,<?iPmp_+J!FTȤ;rlqOL|r+| U38LNeX95aznM j95h>ÄrtN,BwI)TOY r'HV} kw)T[;W в6F)|6r>[ާY)̽!9Yq!9㗧pny&y'EsQD )?l:,'Rӫ DfM+9(8Be9}<܆*s=nBC\/_ZYee-ihggARb; A$aXy扟M+,ZLR^.X>GXXu֐eA؊u$B0FC1'Yѵ1 jV T6K$KQ9~֖O7:zڕ?_Es ~]:yiǒ0Icz~^+SuL:rZN&^Z#S|PJ_ oRb+fZ[8|A+ xR0nɰxQӁ/luOl<=VӸ,]Уr!= шs0qW v+mq@MGUWYmnSC),W/Q%axB3상A .7g5e/B}=#E`W/ @pП6*#Bɖf$Ά3?qҖbhܣ>BS 𝇳-+"*5-C8;iH7v|9b_ű C)F spYU IviEaeihiDɸ lS,чmĦ!X%Q?l3BsW 5~ȝǯe;⢦{-_@xX#*do1$ : iW _D?_/k& A>1@8y@Ρyx8W鮸)Ы9ytAQ^2%|'y#oy[:HOQe82:/ܮ.c>BDsoP6X]V?j7/`~V>",L6QI3bE 5vp3pm2i2)÷W?e]?\˷A]Ǥ"#X,j S)J[ǃ LenI7@yEkK ~fs+&68P}E3:rX V[?mݎ}qv73z)Qh hƌ[65Βķ;᪈d~/.J T_} WlؔFp*J-lRovZ6TM F L.هzw;=a&٥1$5)b*^pbE5]]\k,6ѡSM~OȠ[S"8UH ll23r'ktt] wT3[0<\bCȐ(FNrL)l)frYqf<ׂT h몮E=OFBl;,-@ 5SIj'(.N pzx–QuLPy#R*+Imhlڒ`#"9"{(lJPd$d|B6{L%l`7WXlmxw!f Vuy>l=6"ɑ{wHu;AnhhΑzd#tKG.٬7y0?t=Qs"Jx.>a=zyQ wc&].m[n%0k!.4LCINYVH?Da X>M;TDpOH55쵄V5K&5BbY52uݩ=2l7^[syX ~ޟ.xm|K<Ruuns^gD{y?Eﳝma$ 66'zYgbRMCt9/S BT90SU* A3<#S@q ˤ /FMt&2&q͚eq7/R q@'w [!~Q6[rz/j\"MLKzZH[MIȸ\lvt'.u 1r4v!~idn~h䁥() Z.ך&м19Ute>'!{2YA3Cpz:)U#OS:l`1'|6̒)HHؿDj)7]^;ybІpQa0 ͗8bnF<Q-):k 2HڞYxkp覡s# A?S$t-Nb\(p&*.LQUy& 9yz%iA=[h;]ѓ* ȭ* ?[Ɓfn3D3+);Z5jlzO:#P4n{?N)w4IXF Pa07~UY F̚jzڑ> RXAiJv)׎3_fWqҺ3UAA<9rIsB.oWqT*%4]HuW7giVUu 6ˎ E>ሼ!>&t;BFJU rMFmAq3(BOo؋d_Y֍yΠo@nMc{F!*$OkOfR&}P{g_`= RfaK% yz5*X$Q~" M J^ԽbC>D;+&͚9B&nLX? Su2%2y$_ uI=/vhj~b< kNU:(7M=䕷C{bCOJp܁<qӝ:MmWZa‹Iӄ`} jE$F ($ sk1tFp ]bH Xw%`,C(ylN[[om&1ע] 67wf69T+Ħvm#'do^\E'XțBqb:|`^9y'F$埋mP]b =~ʕjH5gP 2O~o#ֻ dE<'s_H XfNO9L+Q^4qxuݕQ|%ɕƦصTPr˼#ɺT n'Q*O.";t9':M2bLW頖;λj>;5x֢ LOYE408e{gCFkҮ[P/۲i(!>*!СmU4T֣`]W)0 q7S|>Gk14& ӴY ĢٻXӪOg'9LK%I-?2t[F "iqVXj,|6gӘ'F!5ztBʰpj2p{_nn7Ნ.Z]s # [Pi$;K=#YSx-K­#o\)7+1_CԠz9i$; &k޿Z=e'āXI.MG"ײQmhMf3{Ag+}{|^ GOP̛S7^㼟p{{B7xĐL \++g’1Q0_S0k)I %w%gWnȻ[un^b42y|J/ Zս b$ Qi)R%EAc8$NSՂ@os' fUjm'KM-yܐgn<<|!fxƪ%ݜ89P[G&ނ'hz~[{0! ! 򋩻#٠`1#v#5ot_Yuwo{P`[Uw[Q?ZfyC>\2F'x[(C$f{WT|}vD@\!mVoN^;!hu,"5X`ZJ'%/W2} c^5WZbҨ?V:KN#<r)v, n^nc8ԋLͩn 7BǼNA^͏v<SH={Ii{~`Pc}@͛R+w3cHꊈQ!A(/MO+[~Xu (kخׄ]Yn,gPV-eY+(Plq=h:̅RrxoW._ 4VA̷-#j*Qӫd͈os@ڂ&3 ̞XͽIހwc6l 4T+OV'%.Tv 2K`;o*WwŦ qSVe%g|(+{g.ޘqOq<'=iHCdSv"Uϫ!b4aG~csJ6'U{c$ .0rݕ>"eM$H'rB21LHHB\A}}G(6 Z( n=`cU1CZhޠPd cJ>"X>PI[RFMѧ05U~ɯ[D~|#X:55xJpMg2!\v }+x`/u)WҪYk톓CH }t'{ƿ.ܘؗPPP%K` c $ B9x1\ ͻg&FK?ap3T!\'ֻqu*ϧiN8~0D4hέ:q$#WP4<)jև2{,=/f^=~l4J 1&lHs>l<2@j?Y8GoNۭtItę7%Ii Q < >mn&#,mҲ[,nR&bK3^f܄s!M"%r^aS-4aI'Y&ߒ;놥7,K ZosKw{M޴vP v eṧ8-biE˯܃VKu WmW?-]Wŝ'RNиwn5⊸vFM0ƞ !ҀVAEc4rS^`>ݫE7̓Cf _RӞS_~Pt \ Umx8N&:† ^_} ɽܑZAbc\,ç֥L~ N*"DV>z(e!`4ϷۢAX^DnK2+! A­/pR? ʘGaN:F,ØltofaA5B{s.o/taV`9=5IWi&::?'1+V K^pd*իorl̍l-'O.XaHf|{_X^C*G{{=۵/ |ȓ5KB;SٵxH׃I 35 ԁ5zm5![ 5m8g{$wͣdӏzR߲}qG"ْ:_>]/`.-)ǥ}3J %pnHVXKPi^DMҪBH^Ivq@v >=o: 'n?yxFA~_: ŮRufF܊f[#g;cCz]\zPP SsA,1Z# Vv,wAm0yݫÁty#òj9Kx-o=#%qx+@{  "D<"U 10*4Y,jSfs9o4S] 0&`&XT6(ҽШ b4SD`4 ~{!`/'W`Ww%q*ՀXqmf_5@l_ġͱ4jO.Cf4@nv[^̊t8E9_ |ʼnw̾jf^c߯S/|\q&j"O3۩hR[%?LY"73od %z{ȶW=V+]i "霈W@3iG F\%i50W`-7B%qw!Ƚq7Vj@DtБyZRQƶ;z Ŭ>ŠstGQDBn "v>i&QW{XTy1`μ[a!ϸ~lߔ>.Z\Tگd: nU9}MḰ [yO&DY_Vb}e=_Lf$45eO"Zey-"!T8iZngDsYT C"M ="fMBUf.#]=ƥs0Z&W("I+I 4)aPV1هz|dbfYD ۨ뎙g*='#fs RgD]7upCcpZB:PJ^k?IB2"c٘ryW:X%;WXW(197C ^ P.W7bT;ץ|4C+'i8JJHoHp]up}0DqFU] P/,ݝsIOAؘ +U,򰩅75Rrn#P:=^(0Dwêc~xjeUqd*99J./J^qK^EEVfB>0m ;޳⺶G=X?!=|W`.蚍zFrt?)wK—"M|ggX^AoYZsefjl_̀vFK'V3)_|bL73(r&[$!eIM-'Uǩʇޝ7XB)ET ,C7ЧLJہ5"Qvgw4ͣRoyFw&(s풹,hql޺@Cצ4R5CDT,]8EX/ $"~I*|';S y;QsyEM­yTr)Z󠊛(8~Y 4'RE"``oĚ+`( (;Cܡ;VrXARܛdGA>ů ݗ@5;E}ȢO*,gЮcxoT*'XP qUͮ2=} Y :L$3 /*vd9X"$!¡e>y#000QiPO6#߯xQNh_MF}),@Rң_8AJ3]?sF-4TeőFc$~Q3̱? (xqb EJIrtl+v8ֺ (č~?`j >!\>4B!]n}~VOQNп0I"&;'W30k.&?F ~iCf2y?yU,z81lxzh=q^)|7cpIg=͊yp=d 5:)c9PIx$9+,z~w$=Bcڸ+LXh@sN7>K/5B#_|jK*Y?Hz> e)o٧рwC#OPVZ@E#m#PO.H,u G]C9M徺D)IRH c7g >]Ó6#yى`?]q)P=͹MH‹|TE`7fk_6QjW2i!ib=2=:E`z>4%Q~RSp^@-*2Pwp6Fs3wi#~aVS?x/[ i:H=cca':ch\RJm#-J~56i[@t(-8~E3m) >;e`/ETUfӟ>lj X<94dǯoo<+8d<·= =m/X!zF]Gw0j_>7e C^=edSɒ~G/VL q݉x?pO orǢ\]Se9JUtWj&=mUp@GoUuBǵt;( db[rم8^+6[8U.Л_pXLny"a6q.̘N}>;fN[ *'$BK/hˎ77M)QZ]QjBmG?|Glx]c͖X[lAwJ8գ)r,xE6g7:NZjϥ' yE@noel? (b4vcxk@ԘW>R6W!Ő[=Y*ܣልGa =*UfEǧ&Sg@qmMܜqwpOg[qXMzփb.M5sӥQl]՘-DN]!82mE|<ӀK›{SхRFoJa4N˿PAQj =yҢ@*H9U̗|VMj%D75_ޚi~kήh< ]mн')^UOܶ.U}ٙ6_oqՐXS3 1)4 !$jIZ@DEb%I7X:Oc"Bk|~Fô]U|*ƉM4bTE{eЋcm3jwpn%F߱Ufpk֞t/Ѽ 0.cmZB9p!=@(B kbrF19y_S1'+䆳   5ur>Ք -?bS?M`2? ry}#>r`S;Jl4En[i3D{!DkI<9QPϔ;mHI/n?zԻ2d֊EI~r&o}[ٴt5ՈP׭tAN(Ic.vAc$^GJ Jm6=SIioH34A")dp.Z, 8(=N+i_'eg Rdr4?s%RcATQVz&wf#F`xȍZGصWl܈*Y?*]da{@Eg/cvVsB̢e ;Bgafms OrYN7aڙW'Coy^2Z*7mrVƇڲl^֡Ü fН~<]qΣ~dX<_7bn "t//"ȨN"'lB퟊'l6Z^m&u-@ӸQMUOl_f xV#5K/8`t–b?gȭiLT|諒)q yzCMh+R=V+2"95C_jI录a![ rٴۼZ#0cHcm]d34k ,&8Tz:l/2AqͱEߠO#.t@S?z |U'y];P*Ơw&T` 6[ 3!=>4}%!-lrOk oXO>g0C! j `#ʳVKm\# Vq!E fJTDPzxV4xv~WKއ+$q?0"{ !5Ö 4hw[ΧN'=1nؕ斝$"Ry&Y5`q< q@$:ɒu/lp%*՜WzHdATck;`X+Bޜ*rఁ=l,B0FWB3{O)4]ѳܢDO$cCb5دK(,R'G= 8ϳ9`d[ 䡛 fgv6hHKZ3U@Ai=W1^2|%|9b_6,3w$Z-L(&E,8NgXڀy733 .8 xۦbttFs}! \n%\trXw"swPA@:%GstR% OJ2ɛ4{AaIexH.Z3h}v =`F̴fh(:<3:s_P$)6b7if z/wjdЊIח|t+]Zw'M4(x'&[ :/)'!e0k|Oί AަQ׹ns6Rkd4fXCDT9OL̦kD!ǖ`}ISͷ/9KT__#jZf+0Y!E9 Dpۖ*ֿfĐZpj?[gh'Ϝ1fs T]:T3$Yfz Ġ0kV ܜ O a6 Ɵf({UQItx Cq;#y's2KCuɕN ?NId[{D`R^Ux%.K#L !{<{maS3}<\ Wz_C )9 趆^YXX_9:_7)ˊ)]AA(ՑAfFܕit3~6o,z,w 6RUyNMAAǠrxlޑ=4k:W9REcT ^1SeK,ICJK56Z0M}=MЉY|G"8`i,;7hw|`:b"pfl\䲕ro7,fDn\CIJ*َuMu74*b OBF2TZO}\4Sz'`1j[40Ҹ\{#AP),op#{[(8>_|t&.1׊ZQ:xՀ[| 7;"?՜E#aO&jd+rX #RQDQ| *`Z{2hnR $vSGB ЙBi(_JXNxP7Sr+`巄zRsz> eG_q E2_gb!+^L]?m^3 "YEW "^]g1 aRfv~_BN{Y=n/BWaQBu,;:{l,oq2z#-BrbL~K QG台 H9_> 8X2N%V*-yiS?<xĉP'3_Ta^%ʔg&ENUS1i*nzz`e d ˣBM|,n"΅2D3 yy]iEf/ciG맡Yw5Sf쒏,pE"Csi-Ml?HD=WA٭!Hi=%oB030鼱{/@c`N&&v筑 tܠ&fXMԠ8BԐrhI*BW{w?qդFUQsxL_B&fH5׸]ѩZn,trqU82V,lYYNEQԫ6߮:AbXtBY[89H1rhSޗ)hL( 9TsGƆ2.*CS 3n짝<\*!( #<6)}{8[eF J6q8xCI[xiN,uLcHq4TXkRZk̠ڏ`N9@s(OLчO_j.2޵f""8r=#lnRQ_5"/Ϯ+g/b 2;V-2an\؏6fU[6FFw֘8S]ٓ%4L2"n:3n' |W,ZP]C&b)r42>ʾ_7fe ~ڈhǙYV:АCl+ϙ*h/Y6'2^19 QlB3 z@ à;}j?2 LIfȟo_BYbGmߺ  O Qot)_h1GCH\z+CZxU S~fC-M7~<l T%5O,9gx9=0 eK9~" ݉4=2#*xnK4p|D ENɤivr웇+KZ%Az'3Qwyz4q ^M]IF_SI.mO4v`XtIwH&@smi("1X& ?~/ݠt&vqλL2QZhPT(TH֜IWG=#-LwJ PH4 R/[Xjq٥sbփPX upaX4炧_>Mzo7 ȺQ0܅E 5><R%Kз`U٬cr~r45blxFybKbQaAٷ9TJNt!>zYh i#+nlS]%ܒ5eu W*Gp,Uws5] B0ac_OBͧhp̳Y[ /(KbOۼP4klZ\- ܓw\.ru(Ćͭ\a_ lG. [װ1/.׉uXi: ?C ҈aEu U\9ټ{ Vs6+eD pGRG&5<(y8ɍ.AٰDG;YtUa!>Ah۞02UsijXHJ!cn\I"!HTl+Sr(ЗBXu ^2Krvbۄ4PfRڊ˺ _tשk)]_* ySmɗZ?raARY*!AL`Z9_q-!usB 5ydpw!d%:6S#ـy52Tv{^LI1M߻ڳ,]F:Dju D:^sbEg.az3zꪤkhZc" %s7lﻓl<8ZRы94堗D.-ĵ$zs?so[""JUWǜ֏?JQa?A#;^y`v{OGަ٧i/sF.ޛ(8~!Y8xSGgJ7{0kGGZ5}<*t=FEK;P)'tm&D\R"]}߁NhKg O˝L2U(2ؙh`F).mK1\i*1]˲p҅G{Xr:>>VDfb4& D6v?i9Dskd(v~)brMT\&~LG\QL gLS6/ʶQgD b'tf6vfˇ Fqsɾ<6BCYy J{(֭uF#?RI%fv6D)ӡ$SJ2{ϹniGB^pӗ c]شVC x2jC,h\ O-۵~ߴ茧D] 23TѨ b2Dy $G”*ѮF "K2j_&gWQMeq7nL82o L0O3y|$W0=CDΰ.,(䃿8"lS>n\}Al{H'/bۦc6ha5R=V"鴺.e{3C#)UǑ,ԤCf:< Q+Z]@FwkdD@D~Upy0 U9YN%꼅2K)'X's{*Y8XJۉhBӎI춎=%D mZ>Um82=cTK9*4& *L.k2koZ(Y3+ە iPa`ʰG?5KʡHF2J a`JG_? &-\id'#z7_K/ӒJO9Ia; 2 gi^F Xl6:Vʍbhɼ`r^C)-aŷ#>Sy%Kp&%GbIpcz{7?zJAf̰t'O6z;+XPW_/O3*o qrBlg8M|ps.X3K$E<E,uЦS4z4J30 ehU"B1BB&9| f܆ow 7]3.+oC{*xtgBc"18Pzx[_ \PsR*n3ұJZiZ^^TIy (Z!9C3Aм( (RXuP{6>a3= /ź74XM(W &;22Asi!decZqZ׹)Z'ZN{J{\6ER%{~!+Ǵe"ARPk^`ĉ(#v|!sHݤ'|5K.gyg xLNH X{mw M]+3"[aOꒄd=GRk0j^ɿ$Jɹ0RA]NQ:ʟ(iօZI$i.K}(M⇤WMf0:^#KF" 0ODo'wA8l]Ij#3՚I]v_#v37"bϐӻzȕhx3C n7k. 0n}EH#gn^8͛_I oiju.g_9:ثfض4GqiFn'4ίBs{%-9Az,lOi+h_WZQd~#2gY^F\$ |?fhG!VH 4\: L% B {fq&ǫO ޟ+}Ā9wh0 qEOX5uZ415Vr"l`sdUHFb.]sX?BEh>n9fӋ4&gf.{ %.jcݨ l\;c=z @G vDF'\/ľh1%,Q#ށ%>J /d kFN/Ցv)Ł.3,2:KVVNx#'7ے..Jp_,RS\c:@܄g9q[7 l+c4u X2⹿o߆iP{{|nQ䔱ioSo*a/c sJ틌HYߢ:QOETC`Ѐ/̉YC3Vxup';fj??wD,$]FLVr5/ CyX$i2m:7@xsb6ѽz="sT\va^>HgfLJw*|문wPKHonL {iK1ZJ׹i%ʩ0<[2PE3 qla1]CY44W*"(t+\w44>R\~VuT|hq~XNnb!:*W~K;EK&3| ~D-j'L7;Wx`9MCw:.FJ)EiC K$Y#Vҕ& /6cFMޤO*pxXA1 d[$ +ϕ0Ǘ "HD[ "1$RWD{@ _ɫ@%5Dr)MyWZ=x"KlC?1lImt̏I~T_%\jXpg{A70(yDsiVYX dӸg ;S/ۘw;3x5g]@/Zp{1 ((d?wwSq[Xg8gv}S7INFu,WȾd,ˍSRH^u5P #zKoV2l\;cָqa:to䪲{&uslߒ!;K+&;J4%ŖpB͠eJ5:`1| gi!4;3@k( b1Ҵհ: 7Y6p i<şZdǃ7UurS-'scC8gBBٳޘȨsJG t mRBP-%? Thh.q.|!I3v 4 E!>xE)=#V),y8ݭ|VˊZXu K^\ `85/אb˰5+oPYӅ^6S(_6Z}͚JqU:l1‡@¬3IO泮3a'UBdzmؔO6F!5BA\#udn)VG`nhڤx)ږ7M6_cRkV QGGSlp^LgjFS #PbT]7CRͨiW(Ym$8|Y2OAB[NF0A/i5ZJ 5kot0kŘ5. +AfLG(vY?q$*MIJ;l kfPYudJD"NzD}4GӶz(r o ֊oYqO"x4#Rfq8'?r05x9B]hΌviO~БkK_{~vhWAuFCxI@0Ԙz 31Zc#W@WQne;HfdN3A]~G8/mYл2f)J` 1gjz.JNNbXl_e.9͙@êfs4̫w.^3֓J4 uD.9`QA\U(aT)IHNЏ(kk ǣ.~ՃFZ+M4߄p鎯wb4( ɓ%doA>|`1=K3Rmk z:jՒg{11Қz'B-++蘦mnmс@[0܄j :*< {@ڲ-廼ԏH$b+ VMCI7h_.(pe=Exdt^iLMS-D'j<-ۋwd:?O}K:FВ:bk44CjvD7b(`:CO9u>YB$SôkBPx:l)5!@aR䄏/\iWc5<="Y.=A`Trd#}vO~< %!c _I(iz-Ы[9~oJI2FO S|/Ce4ًݟ ,k[cBE|,n[gYM7<.>kKsXL07]NJ2CW3+"MkQqȑv𚋟}yr ;OAUf)7!mq+ Jٰvb}]o^Jy޾=,&] 8fb2lpk/Fd`muoHgy+rW0ݕ7'TԷ +vُؠHe5`+)jb9 Ŭ$bMZɍ"[vxٶdVJiU@3P8c 0OqЕU|4K sT\ж /ӑr  δ'd~.1S&}g4&qsP@ z"yyx8/nVDr%,[j=R*u~ya-MH$e~d\kC7jSluuX(-?EwD۝:|=8m] d5W1+Z|N0{|fJs3[cݯs؇G%[Fݷp9Mp5Qԙj~BBߛH)q&QTδga6{ DM̮7++ZBQrîxZX>P.~hώ\5 K_t8R#91RtYkûs!8?K^k|K߃A tDx y@V)[[t&X<3K޷"IY{(U78G-fjEZ:}d>0"4 SӃ_yNaqЪlkЪ.T<;L}D_&tNHc['3ަ<[QT=تBRCvć`M ǥίiz5N;9*cf+(} >>CMTJ,z]%n84TIz^oR"xHhK'YY"y*&nYWk6>aE,E_oK,01Ku Ѕܪe1UQO̲2Kˋ#8oLn/qd7D_(fm&a 657(BGuJ_VUMDQ+.6Ecb2q!Sɒe`_+ul <<:*tq<^* i>h3{8 }k+́wP&xZDƂk2^yN4IU*>3tD )G̯FnJg Am3!$qb~:qzësf;/?_&[YRgCˬG$Apa/nt0%BU b"]Xv4[,7vYjb1Q ϼ/3HEc2~6qV Im!N4Np,n}ڠ1Exq2q95HpcGx9`^TaYoJh*|/>Ȧ\& C$N:4KtpA= v _*H /gyAK1؞o\0W|_Ϭb=:H1-󶟓FәAGa ی=Tp Lr?5QԠAD*c "aF/p~;WtS+Vr*CsjK^cD:+Nq|7SjC93^2˲!Ҍsk[3#9;SvמyG3&(jbO,D%|@D4yzPшnB}"h1>I}NK giʧZ@ KZsԦχ/DQ,@#Z8J8gދ MӬfXGgXS߫!L%*DTLaCU -G{asX2X&xL)Ag:=^]H6=d޽_k~udRE=:COp1)# r_A0p%ks0~uȖT⤧.gy%Ur wVR!ͬwNoQK I(c JyFǐ=i>r~%"d 5rVmBA}K`0wwuCiFbtcp2jqg'#?xm'\q7b&vfVǂK:LrDXtK}zMQBz0[ݚ_//qX $'Cf*n56U7ma8aQ"S@]j@;~Fbl&V'~*)Uf nI&LoUN@#Ղ hOϖC :;=s֒ΧOnVEf<LRx^ t*H1$B723c+*HcVp`rGx[rKFtpG ԝZ4WC!Ց5{x7HSJ.'+#OPҮ=юsAWUX%%q7H)QWAICj9G(ѵ[h!KUy޳M{N61sh. :BS=Ux̟5@ìDߣ2mvf6.c$+'e1_~K˹(w5eh£_i/7;QW'95;j}f-y0cf_A@la_#o{R4hTևY-ǜ$ZNļmtFX éY\8vtBe'>yls𺿔'@3աZU^B# S7Q*IxƞP_sZBE#LqV3ΰ}Sv^`^Z{>~*I e0g1 R`rQ MAryl@=6:\,(!n8P?[0u|}{n}&ޮ6xL䥉396U}'YaK9v箼mon,|GMOmC\@N1BY qfoŭC4x_l$E6fgWLmjjy\ 'R6R}|}Xj>Knmre~(_[T$~dAuRRtoTtADeD'&aMFxE{RQ>ܰg 0SW'̜"b)R"/E/>,3 _SHDFb'uBs^(;m)Tf&8t-A7I&o2z?W%X tY0#/Jy 9TEkk\x1!׾,>rx7Sg?}0 nMzgEFU1F:-LaJWuIC])Ҡ)j7~BF@ǟ}}[ PbU9BgwtXSK/ ӌE\`Rs&xgxrF`fq1=ԊW":MKno(e:R.gs[>N0/=bj2}vU o'O'JfT$ >qO 5p'o/kxc"aܤ&rt.Uo6gX~=v*0pǴΆ:vff4U _c-h& T=q AΕBX1l6QzxjP?SoC00*U|bCj_!>]ï8a ȧv{!YsjjJ y0eM| Ὧ)Ú6A8R)=8qϓ!rn.:gHQe Ruiai 2(OAKs$>Zc_Gc`d!Q6u7Zo3GmO/"X;,D8KM gs&R92f ~quJTyҜN)곻,צ&LӐ.!Y;@"m4X~a2魟H&TZ$w (@}l~ʣ캇f<]V-EX'zinPֽTU&JP]sb; ++e ^rcAAr\(a|%S Y[uL9^ʋj2xFWwG ﯳD$zT1R3MQ[ꭋ}ğ:P_/}ۼ*(wa?})T Xi,RLR}ؿl#hE7Y.0*NpQCx-1%.3N- vl2s'<@z>x'Bj,qOz֕d^O3 nN$(liq{i<+]~ia 3%WLi/;;%"uMAybi=5h'D>H !0'.l3X-S+"?Q|>KHʵqkWFF"ូ 7Q O N7|l#1ro1񣴳ap&c:V'S\#㏡Bu}D nc)fs!c yU˨BA дFMQ̶UrN(jL6)20¶T'̐$ 3ɜ(mu#nvVYn5Df[R̟پ8;# ;ϕնmpY=3IoU=;<,*"V![1ֆ5|!ڡm|ѥ]pb9Qy26NE#Kh/J,HMj,8c")?RʦHu[`G,}jjLf4{x-/:pZk:LD泀Sm|%# 6jK-mԬ1^X0~Y ,Kb#\^Mpe=%dBbeMR 4a(PdZ_RmJO)]P֐Ub=n;I pg}E,Հk ~7ji\ꡐn+{}i_ AeęhՍ=lӚ12]lM__fjPT( 1*gk *ƋiCt*lժd 4[?7?,BXJUNxi릥+)^tOEZ-6֡yd( C Zn:~7YD9mufvGPYb7 ^1/Ԁ0ܹ2S!Rݥa7鮜+`_8=Pշzڥ[7C=π8ٸ;ԬZWCgل;rE2xWɌ|I_,zP|1G[OpR{[燢o\ ]?I+W֐jcuWhA-gIIhf=sLPĸ j\2 ܾJSANamCρ4xzhK$˫U?Kuf-~%#s^{j{>fJ*rv ^fvTLNOZkN,xc5ص P|U!NV_0LufR|@ݔd@:?f  Z6T ;ʤg*KzK&.O%>r]/ͻ!`kk2W=C'$|6?WE(>$S¢Q`Se+,-!NBS|}FX!ә^=$X]4oydP_{ϸ+k =ҸUflKk+a]~|/Q20|8ٰw7.>Uռ^«lj!&rFC&*T9ؐRzJprPlmӜz/y >e(t ׽B7 %9ni% Yafx;Xm \X2NzޛC%}mfu$,^~SHN_()H>FKT/^7 `;s XBSU 6I롗]pyٓjX2\ 0}Ҳ듯PJt0gVcEoeߴs0h"P+,5hr&T2?r,K͘a^ԖOd`ĸ wW2NN%l?1W6 dHޅ?jUai*Du`+67!ޜ UzD|+ˠ"s RcٕIjs`ְ/q nىzX/+e=u.|p ՆM4{/@|:4/it NBE5#QŸz=+tY`% ~VdQ b,;ҳEm(1QpG;(=*! . 7}?HxL>-\ R D9/6 V*A'] xZ :ieY}ia53q~zj ꩕5rٶv H=I3RIV' 85 R +(+"œ/ƈy#q-N;>-p`+1y&U<0R/j/XL+'5aH1OrI FmFu _h yȕ1%ⁱmT[Yw ½A'a⛃hiK|"ʀ&,DN* *7 O\#{YlAW_vI<ͷ*;bp<|N@xQ?3;v=g"e,9g3R)fN" ¨rRCXm+ՔX`[ڬR.p Q\{Hh[{u0肯,ia^X8ځX ri m$\'#ڞg4U|C@PWWR"fPdǧ!j`@Ϋ[$2j SݲaV-=5h#K|c)J$p_?Lj ywOfg!|QE_s/I_`jN:SwUDZO=+D7,7 >~q[z$ *0KZ3ǔd\C*_/?1!@1PG\!hI8I ^!;d-C`Vrvh뭅?ѦAҷ3NAj$ivx041AgnF'`SʡXŐ&oSn;nƆ\E/2.9V7RI[q\w7iC쯶ϰ&^/ ;- HJ'!3@^x]CeaqUx1COHh/(|Ih[(5oI`Nf OQ25ة'cj}`h񔳠ԄYD7[C);'?cO/ *|N*,)G+%SjE{T1v\?w#QSZ(iorM1Et< {X'3`wXL!$ůȼP4V0c:#|{QA}2 T7Ì^!6`cRDz10( $CmnikIC{f]ko~Y ierT!8Ot"'X$Mpun)'WBe)9ZN y`' z RtR"d۫.L\A4EV֪+w}v^ġ`,!^MNllo4ƒn9n!߯D ¡R|܏؛/CtIN7ulJ.vN]4W, d woO7Gm+|I }]FhCF_duBluIҍcgj}tDۻ=k 3ևr)tW[SWcG' /XUY"Nj$m&/0vi&ë]b퀺0 R@lLܢ,d_ Wѡ'0o\: =^$¨^鶱ieEDU8$S"=vG~JwbtV~(q6*Q[EҔ°n+̲?NM n 4{V# Y:FZ·wuo86;^ 1|l]ybyd ֩Ǵ" Q3! z#@1sb|N&c-2C@ D!ʸ($OqLýKӈq藴=j#n o~cYt4oe2L=R3D*bOl~+d?YPպ|ӣp'I"0#a\}eoyg.Syʀ+y.s-q..;3> b_I2}PoF٢v;lj2^"tYʾE5B8Q6heA؍[{g 40? dԲ9%hneuUHd\>rO%&ĈT! uuq( -Q^HzO=SkGXEwbpUST ξmDl()٦c hG|N7ϳp+钄G |I"C&gs=<7v EUNNpI`=\҆aZ.wa+1!eFYk(uzuӲ.\T sQ rOAڝ5bg^o=.-5wsp?{I'/)*Gu6kh~ЫOGXsl_ƗT iឱj"gsYzvKJ0|OSvU~C'kKMNaMD8(Q0kcHL17AΚG)W|MjXI}ږ.+¹ia&$])=16֦"O\ _Æ~+FQ\INl`歓)]pevYсHvhd868@T&Ċ$-ōIG*`vF~CPVײ+zJƱ*CAUMʟh˘Va=Sbe2CEJ.X1ǜgAU1."[Vah,F5e\tXAt<'r^3.%fЍtq̪3iW K+ ?,dڍV3-΁6@Xz4u=߲-l.@FJ 0OM > )EZڂgl ܴ2k9_wź|"`YeW[+N=L hP؎+IzHwc"p%~6M&+2([K<9̡`8~<[{ o06\.%>%XDvL7 5w'p(Ds쏬Q Cf!'A~NpEZ|z}3±6>Xr>WJ: 88W<Wa)Ni  I\FiS)kiSg}A5?뚽'"mjZV-FdTQ  ۲ b9&dJ1a ̉MmP$ 2!\x|'Y'#J_PeQ486|Oc$5aXJa=u'7 R 5-}K/ïbn%.S  95 %91|Urnڗ5S|Wd] ǩޢN3_Pf?I mF꩎ 6FH 6O#ݔVLJZ;N!1TOP5A*lgGG*~;N UlKL7&]9$[=D}XKL%IUhWVnY, X\Ȇ%6h<׾ege V$sBn ~F.xaT&0ΚycnYU鬌͋S"n,cyErBRVɤy zxeցzA.p%ِ#dg k "x7&l=C:zӘs[Ezi YOrZ/mbG'PjD2pF,2r$˴ş?('`F2$9͋Jd5 r'Ph'zw \4$?,lT`笪?,OOڽꐇcl.RÄ7'i1E E}yȫs3;A kغHgOũlC1 J hJ;Xhtu#.p<zy e6b2<ˁ@:7|BZݩ>vN,GM5}J eA3>) a4qE\h][owTu,kN~2=܋%[ײ_d”@8|_/&8pb :2+KAS%E긘 P"?º̷~(I$'dе9.=w+jKrkį 6 >i>=y`' |SIo7L#(s(|(7G? nM}< Z"g)vwY@sxPX,^x&$]d8[3dP2FuģXCzOQσCzҙkZr 5Ҿ0QhiaNDN FwxArBs>0ǹ\H:$yHuүJeMdYgE4f،cW0N KHl\l5asṮ|X0aME7Hm@'%~F/u9y=GLা/ӿFΟY84 ${GZGc4{ٵ? q Rȉ6a7c]ԍS`V,A e?S8l_/]zsӬtS +zXhex##&K-Qx|4{5F x]JNb)g9IRiHuDOcAp1GkI% 5Fy83T Iq!P6ARf&=:!(8U=?1xT<)a}$ R:QlW͍TcO`OTae,V&gLg-h*.\cKno Ds8%,X\%Qx^F!In;ĨE{SЦi/a' *e2f9\I2QwU?#OKJfP;H%A|ʂ-ITZs܋H^50b!mJN ;OKR %+ڼRx9(D$f+.j5ԛyG+y{Pז|B>>טDXڍ[oe-sDKAZYЌRsiˆNH**D/rr<3ݍ{=}y*&)F7yVP=F^+ rZ>bBBZBp%Ԋgic\|$?R=ޫ^lH'"l=Tvm*o-X`oznꬻ&ʌkJ(ޓY:i%ڊ,lC:lg W/S\ (aD053_bu+|.c.GΊS;f;ŐsױJidG݌tck~t<a}DbFȟ0^( U2 nᡫڲz$sgG}7(̀6l쥄k n3b\*(PQLl;+G$[ǹ^.$e{C&E2tU!af;@(*k x=bV5 hb~?#]{WX< O@b!w& l*jE_پksF J6ǵ.egcĝEBǂ)!m] NB2nؼSCiCĉã:cV):F`Źl4?#}n`!93)@Nf[%{3BE/qwuO|?:ȭEY@岄IlPx2=QYĎwOc̟rs^ m{Ep;bk7w%u]ɡh<{I;@?7BJG5i'*!_UE^4f$rǸq ׻žD+ejD=CT8&vRjj@\ᨩF#Jnu|O¸2U)2+J4 a@8:&HU7:P0CQBb}HҟFٸ sEc5E?n1&W4%s\$o?U2Uʥf~I qP/W֖U "﹇|3mi7k9CQ$ |Y$S 5Yr,zM?# |f#H$C]`2C އum#F@<O+p{"HIqֳbǔJܲx_c_;߮&qV]̆`3øV b pss.fORNүJ^Y/(֓IH 8-UW\/:iRgNmﱠMD!#EE Qpl-swf9:*+jnl.`D}^tΣ+hjIZm)6u DYʨIlԡ)IZ[;.@ܡ0м^ģ#`ˬ w9ٕ7I4Zyv=师H4=0P3Jzp2C9V`IJCǝ+k${27lz!1ypfF/s7``nnhwhpWwq PbՑ嬚 ^QV_ԇ5gGx5m ;(VYKo,Njuiy|n ?tmȤo!?}z%E$w6L$b59w ik*Zë`Iu2OU:Ёu/|̲kq75H, euFRϫ.;5 1CE>ng 呛kLgؼs$9ej /T$=ק+2z+pv^f!HQ#R{^=jM۹~],R=1x'P+Xf59MwB[[*pZv`5i{JV끨뎁Z4u!tY̒|p+Kw"j;HbXxC#œܨԜa߿ui !7(XP1hkVV/dB4zڃDCW <8NQPsѾ'81t+Е^a=` 2L9fI=ϡUr-?ÑWrR({ 1b*SA;jŚ/D]#3Ŭ5stdcJDVNjRn9 u]BNZzy,*;u>e$.zk^B5P_ so`{H:{ c] %.tjNڧF- V.WffS3_GfZw >j b+"g+Gm@OxVe Wp%BnU4z,D)+Kp$s"n*طYj sPy|/-O fRX\,5z/$Rx_8].em-{ w36٬¾; qWɂպ9d)?md\BOP"m+mT_0W3XtH[tlBqX?X㘦0zK%|P8޳dg% \fFDKJ.En~+0 lhߣhOUN)v>ܙ:5TI^8nH"`t)-H#~Gy0t+ܬb\"Xc|ZɔtDU] ~<֜fzWRfKP60x|&{"D Fwך@ǰ:eIVuR)^L7n[Z CQkB.zmT,tM /W5kݏgJ=I(r}ʪY9=;b{Nd?#qq#UyURN;Fu@]hk{2,|3g>o WՖ'b-(y5 1 &'RMXV=4nfYdݻ4ij F]DQ!٢տsYl1GW!wqgÎzczIFؼ8U/5 Y77 *\:`oNЬgGq-QơhWq [~DŹ'<&+9[O D/w"C5v%a6,;s58 ZO^6qI~Ac߫y?A4 Zo{bƮtk>u>V[ JZ.$$=:S,GVv\;@Xǵn ȝ`Yf2kU65(N#>pQsːjH H#M oQxiѦri{Úc'em嗐 y+ԮCHbAd=Q^ uIMd+Ⱦq4,LJ&_{gboyᅳ[xBX eekRk4כy$kc#eOVeM -u܋Ud3/:+Đn6Vʺ{Q]=Fuٴ2v u>,E MrYɏ6%O"Ք'\Znt4)ثZx2f,KXQYhҸ*{ό12 _Z)5q  Qc,4I6|ԃ;\m=/ 2mPZ\! ?\c (y|}Dz' `%z@!k*WG:a-XQ] _w¦=vDۥxfUP%ŗ_O[u#A)9[y_)CCw7A( z-t)ȇ/wnڢP*+] 62,WCzWKX=WgZ/X;i[EsX>3d&QDbOBėpvNN,,1 n3*͢./ ꐆsæA GfLu-RH ÈAi8-τ%ɬw)O:<4lXw%b*d+|fKt vwN%\UOϬ@(BvywfPM2uՋ9!m֛I$(%s{)UzV=Ԥ0޼/w)k|nIQEfkNJ5oAȍuL/Yi`etdqs1f!(+Q[},RSiX7lB&"YiH9c|5YacsV+oi'Q\n<`oDNC'Mr*gMqȬ;ѼPI .‰.6 tp躬eHX*:瞝OU5o,^t-;p: 8/Vp}rdGf\m c!=ހp2ǥb=cӱ콰L F 'd;)wׁR@0wuj?вp2*ͯ9AYjv+ZF bA-PJujE~QE@P&n]B϶~uA&-IIlmgLiX>Ugee>gqUO?;1AH|=,6ny!~>; 6oPnV°  { Lc!$PZsv-q'9zDFa=:uw(Z{]08 o;а.׼1H W(he>9tOkFƼRJfb!&ugԈ~M|e|<Ű&-PTNfm -;a %1S *#mq-LWE"Jk)U`/Yq w-i#qSCܔW W~]A0a6&l! "qUw7-Kn}]OX}#?j:Y9B O?TƯG8".w$`j0=ä@Nh`25׈Hϖ`/G'>捥\_jUИ*>bM?kODK=I&=7GLaw% $ÌʴsȹfQ|*̞PfZ#wg6=04Q\hf .Ap"p'K0D#L9|Ҭq*m3 cQ8b#%Ca ^.dc`Y.+hd/`#h7?>T(RpB֕\{j2L~}gDh/b (Dw^3X~m2][Kd]U\r˙UcͰjh/zy UFK~}J^Р܃/28"k pEz΅"+jiͬZHg'F;Ixr;L޴a\)_O/uN@K9&d0Q~85l}Q K> ⼐NFjxsf[O r`s:#EF Ya&YT." = ⺱j*δ9o0'¶a%%DA 1pf_B0b#{a[8!Cb:+0t+d-Ajg Qgjul:DN*W]=*߱4Dd(X5s%"X(VaKc.;) ,b7yDQg36HA[we)NS.Ē,"&[[c'ξ9 -s&iV#qs u{Ir}=ף[+%/\´KT%]OOCeJ*B6 v]w } DsJDWY{;gٮrv//0KFod :LW7 KhEO[S .zlQ49w1Ʊ)V+ gt6& ӷ? hWL-K}$n>sC<]_FHlXmҧ[NNQJahMQ&PEJӰʂLtB\%B_&]+T; t%:Ejۀx*Ee Vڣ(Z.YkY_"[74>0|TdIe_J]c56oecjwEa9G FsFzw֖[/L[slxc$`V6ҕq;kGʼnN("zVwqsBW(VײhBh>kȥdai̔0{=Ʀ B , #6qQ&q=KvRGN˳"H Ÿz]OcA`X t h^W|G5[oI#fB~4?ugx$ثiA+9*ow[f\ug̅kΒ$.#E&Qfl~w .]m(u^'uE&|qlXCA uBB< VS%>1.* uZ6!isEh\Z_/(H։b1=ck6a}Û&Q|-uF//B$x#҈=N&Ҍ$2VJ^2Ej pXj8 b$R4P(F`Gú-vztqeRL!lN| MTS@Z\ݔ)k_̝K+ ݛ߭d>yiTɚױ|闘<I=@/I_e i->TwD;CA<} cw%1}spcL xǪ$^+V|kzdV5xPμHˑ}ӒAB휰X)P!޼aL!Z+Fw0!.yUp֫\LԏF-Gg7cH&n's2,;ZB5I&+9ᜃ9Yw6bToPYra>C_ӣ~% 6wO!]V-T} ekibhO`bBTj2{Ri{K(9)LROlO !] zmG`^m8\|>ls3JjeV^< mSrLsiC7. xsѱݑhy~3`25ZӠbPvuC\GxnmݢqhAȷ IfN>׋Oҡ4@qߩZH?\v&ҵLdT(3Cb 3~P$F9ͬ× PhkK!8$�xűbϏe]44c Y[PkN:uN v >:ZTӀ6poqz%&YuzA+%%ٖO܅\3FN\^1PhSvV򠌖 "9>)c6L?G&46(/ j+Sz,盃A\{^JauC'GmU_TŮ 6W67al(n:0'4.G6muAOaˎť篱[bR+[_YA8YO*e2 a$W|uO ~ /xX뇑O-|&]Z=>1b(#鶣 ' ݶ<˽ @X=8)u"(;+ћS20nC=F $.r{`L1b4Q~W6iGWI k@y2VHoɈv^FF6{kPAgd2oaΟ e6,veuEtdbtu8])(GcHoM?|1C+ Ʒ:_Y9+}‘ O}b"+7 ')׹щVmcjhߔ1Ijrz_ͱ9imd6U7 l[%RKe7{29(u MGإ.SbߋY0Qb mS,B*:p3SQO/qx[A*Mw:ƒȬ9- 2(SI5?UՉn,lZwM:[R/ܱG& ] ߨjAbIC@k591_28rI 𝾍S@wZ 3psw̬MsAbܧz }=펆 _7=$*;XPIC*y $3'J&$}L ۘ:KNqh,ٗۈӉq(S2.ieɱM_-+O3;@pJ޴) Xh2>L@ 58b[M%!*սLmלL} D,^.qh)=,]TmF |(CR V H:5gp|Lq9W6(V Eas`4MiPڡp=N&kSˍ.ǘ O[`ku$Bd8v^!vDkTW1 V4:3V wh;ͳĻykd ( Ś;Jٳ0&ZSHƧpIoXksґ6Q ZΛ4&<⃾-p $4hD}hƷ?FcI.tZlOOɚR&9QڥvZ;U6 x'X Vl!ɚGGdNa|n>:aR W,8E(TJw˽~x:2.t4;$<;$:Ҋ;F)< B1C6H1wah.X.B/;5*䕻5D,i.qZJ h!kjaޜ3en򩊲ml>UI8";M2D5UPZRعliؔh; DNEB2ƀ7Hk,bv02J4uTkjnC@UIU*pȶ(tZ@}9=GW Cd9=Kz݌p?e 7ѯ$s%xtDA !i\  u dתNf.\@OZEj</N0*js[zrF:i3uJ [t7]c-V7 P]Hy՝-RN㺡;`:ZP2 Y 0֖93&*B=uB pj-g8ROcsZZaj|$ȇ+co'mm@*8뙃K@"fj-2PHljѧFPy 诞hz^qV/&":jEK# *B5l:TD]~fw+~ [ -C3Ìff0GNXdor yG[- 0q \vE\gŷe1(q3ː(޺ pP* %AB/n;-ނNV.EF#wo/:01&VDV ~ aȲ=Kp^C'Ȏݭ!S+6spQ5&D.}}1at kԗ]zQ~:X"d~>ȞD#S@aB y@W꾇:#'pw,ܥ- g휅0嫣Y^vJb۳{|ya;-~~#w6\<ܫl뎔dG *<_tL B./*C"4urlrMZ֯|:.;3ANF yH8ghnIZ o!M2ʄ̫nȻUצ)b5:^zOƉ3ܖzhx"/$XF$)=mo e|ԮT iy}C.=hEhع=0nθQNqnP#]?%A1^y {{QvX sr0Q *L]QG} ُ_\Sgw&/pjCsm Ē~]l#m'55nvf୘D|U(6)ˈZ\/Kx{T}]os}60P`D&gSSpXּdp";#^k3vP-[Aؾg&ىUYyKmpd ,".!//pk0PP!<pP+46ӄȃ2ʽ(wnסL0 bkBmJw?HhאF8Xا&F8rX¿+əO/̋!,IE, ^dzX9KjL.Clܼ%A#z#B_LP'\6/I>.jŒN<7$(9V$-9F6o5~eŏM@Ÿ' H(? 绥i54n_.< ZPl- 9`VcYFԪ,GCK=~ CWƍ (^%'h}-ǡTLg_3pnzE/T* oDgoHz{Q>VC VV؛MGOMLT۾eJ8 濤/yWSg#(Pp,.gls}= @ ~Kb4RU"\g$<⧗6 ^0/Q1IsH#h=V/3?|dg=8&w *,u>T}B΃IԩJZugJriv%>*A"(0$ gLol 1ertb2|:6+Fp7E3TI0(T[|p 34iИt@Q"$/*"5řrjd7goj w fN6k}"vtRDyze}c{N`̖ zP>(kZLyd퀤OW&iWNh~5iN3(-p)g[kʼnr?@"!XӲ%Q@/nN{ Z&A. "R['!rjk䩳H$v ވS_+MM1s ;:uL)ap?LeT >4]Kϼ䨢`lĜCl"Rai]9Pl놾kDkW 6GCL lɲ`qš2 й"fXsF.|ybk=v_§=WeA{ebV&$uk:^$FaV?pXX͉PۘN;C_ykV#RX ѨGƱJGQl M{U+Ep>-R'v»:;GQYR9Q4S5 h;Um< :i,xQ5&0b7?="{f$]F)]‡\R cŃG2x*BjHH7(Osп+El@W} OKL{tR9[tr7VqB+iٜ,.c gHjָ^/a>_!T.5j_2`|Z z`Q gn#dEgljHXXp\* R ^XMZY\[ԙ`2Tw <S)&ErU,˙ uWh+@ C X/@pXto1VI0_ :s58mpѤPx0BƗ+ϴzȤ&) T{ps#W/v,@ &0FZ>ی^tj K3(o]aσCZim}ʟQNlpz#6I]P8}~QY%+īZw \OU1Nt,[\={Zˌ]$qK.cܳo+/#E|g}>'wvO=8R¹b =2v{vNJ0k;p4xzt_j8 ds,;gDZU+;  / AXda"~hF;Hg%\Gu&/1BC֙t1ӱ{ ]?ڵ3?لoA݄b@$|T[@묢4-_t5ώrL4.#FLaN\QZLo R1 +̶ i?R貉yUR}}]+b:r$#XGVs: >|CWoThzVIì׈Q!HeۥSj!|-=%>YgkvPcw8\,5ߩ .n^aRD@o:2$B-;uu Ā !njvOq&:pVƻ=u?Ug_(P+ ٰ<YҭLpI㍞2Ͷ:\5jw@&/̩qb85.]Do%ŤivθFC%h¿W+~JVQX]DWFG;#U+뵩-|<1~@64MK6(M 4aQ^Duih/tל oTݢ<4u`߉#QJf1.7Σ)[&Nh< ܊.hYGF/i+TrPRejX 7N kDZ ?Bltto^FQMc;g1?.W;P -Lj,}EJx E;aRtqFY vV,7X>yΌ[%Š0E"`X=LG ioJ#UٶllLYy~/Pk)yMFt>?K5,j7kV@1=2y0eR?pMqcl3ȨbFDX'>X F;YOm^&˲ec07RcCo8FYU^Z-&I=>/du"rflhmzr'I%8 'E'<~RF  ϻs ȮrGg JF`(MlҎ(B#,Gs. IEP_(sF [ƘǖR zPb5PbJkԈM/S1"֠>Z8hOFͪ Gn.i"z[{*bOthL½C>*fَpf#nJl4jT+ v`k 6ԃe9lVL4g V\VLF?=̯ӕ3^J! {ks%gSsͼKe|@١<Ӆ4("O^838Խw^|GVŞǬ_?^2(\՜@|ו0/m.(zWn)ܒ $nMTݎV/:#Se %,]=n3iB k5TJ?J?2\l%pF0 L{춶% EI`+f΀z : .Kތxum5Z C32JRHФ)5j`%m(#q TQy d?Y"}84eޫ/Dx6 ɀ W}`XK#&Bvj/sbdy7VivRciH-?5SF9#j+ƷcfR|~m#';)Q]^k^jP!鍪 ,1 kt2}Ӊտ &LCmM] s*ED|H ;Vp9m^Q,wG+. 噽XZSgE^z@F _YQPg>a?U u4oeygw'Ipu'|r7$m䈀)]ٰ)_ݑBs=:s<Ԝu#Ӹ;yʖ3;x'VT#4S9 P.X-YUbI sPdJZZF7fZ& @IγϑW1I!]̓&4ǎ]s$aogY׭Vϐ#Ė6pzUPB>eG[q%q]cEERD&=#xR΋XڀٓRǤ_I[A ,.%@bBF3g ,x3^IuSv<!̏ \MA ;4<>z 2 V̛#g6 ʟhiRjf=[Ϥ*%m tm6N+ρV!gf:ocTnb~A[MW|VnoClOSQ!‰bWv7gITL1QW3:x?ҤPz_دvS Bۥ~3dqRk=%Suw9, Ww1 cXƪmы D<ɭ8 gVbI\u:Kuu^II"%9} bYI+~هT8QH1Aݗu׻ϝP+ 9 .UPPڙ| ^IYL{ӈt.f~0P_ {!JW7JGjw-Sxj -H}6AU Vv d:G]DˤŤU;Z_}'ۨjr/GÏe{O$/ bf`dmH%BBkpRbk*Iy* lWKqHZ޳Deb^NR6tJ?$r1V$zj+XCqLD khH&V( i!r3~bV׀Ifj W wI9F"r9˝ 9D>[)j!bzՎ 6yp' ʇlxR@qY_=N\'l=/b2E Ц8!zO;)SϩmSZ1^⚜5Os_u85ka5S?}f> ] V ,N -w(& j2Cљ6'Im=†x% F}xlQf ~@@E9`8 ͱu=M" NmkiXGvθ֘-$(`hDW"͝NO.b/ʷm6/ӆ9oEؕBV,o o9u*92o>T-yЈHkaYh?كkOe堑zπ&nDYUf~9̦{=Rw/-XQ/? mG"hB"A5 5gWH*>TőڋŢ5VVk"'evנ%>_!0}Ud: 5Q6)`BUlJFK']F;,lلtZD}}E#C pg:HK?Cn@uoS2ĽMH 2H6aՐWVѢQ? R=I kY+sf tQASLm;fH%ܶ?m!CLӠ)pSb˦G "Ck}Fie k8ŵ!Vy0W,R@o.[aaƇ:x-\PY`u&Wxh2 oܹ'%ZgNGq6afx{r }`iZ tH|eympD %t֭}_t` APFw8>ѫrܧ)zj"'h- ;;ݾH!woa-qN_UrY;VGqH۸T C!z|Q}4oa хR:eBfJL0(/eHàbX'GT֌4RpD-If#o^„ wTt6k4_ P5WM iV#}| M.ju AL;c 1#yY F~@սd!cqeJZ.:\.afI(TmX*dYq8h Qxø-Z "W)HsrL"s#.\Yⰷ~ƚV>ђU<EOթSʀ»!-k#w'A\\l+"\<ߏ0zfgߔVS`Cw2ld_ SkϟB\x7C-wU($ƠFːV$D(Cm"V}~jdF*^ 3U X+z,m ]q|B^3E? 9N0Ys-Y3gD:8itR2 Sc%Mʂc}fWrčMvjXNCUA c0~x d@;Nſz~{ hu]M+TSj⩜PU.J\\9J\3@F=vgzqS 1noEaJ\ټxڔ#VR8Cj!Pi DŽޢ^Y[32 xU@T{PPsN'.,O+΀7^Š,5έeEL+Bh!-:C̶ܢ>;%ģ?ưH@U^b!bdWcX< <(_>]Rsh[!˪ GS| 6A8N}?Z&Mq>(M ~iF= [qǷl. |b qm̞HCv4l0p]ˢT;s?\̙ fPk+Ã^50ǯ|)Vϐ{X&Gh}4 x*BJny;$XlcKpQ,N@#8gZBx鳢& "ҫfz b޸Ȗ/V1TaAOac*ܪh|jhbI1&GE }=f}bcNCF=LU/5!P3R*/ܐk<;G>tyˢaOr'xC)uߤC9&n Ĥ9y& } ^/Q_i^dm /"t Х[wKV0{Hv^2`14ͿvNJkmc-iۓ#4Ą*%{AO On*(m=e='>.tjp8|CJLH6 z"'4-Ǜ 謕,=ww~T>rh<6/Q:;Ewd _p/>Xx f 0xΗz5|O ,wnmcZY?T6z_3g}vOarɷfC;с'"IێD~AvH9u#"z6m0Yv!I >#;ǐL^bL*GZ7.@[ ]+'(B8zu<%j _%рObdկzbH7A}`Bd(V쪝A$PlQM1SBX\K' 7+7{E>]T"ˈƘU"A4(AB $AANIEgv%\ԽĢ4d%(؃f しԨ\1V( }|#쒲/a 9#1F5:A@bx TrZU_S*hevwDTkUSM9dA:Mbݐ+*y9W)sZG(=G,3qG7Y8RT7JjI5l\gZS\l6iAϾLD*. t%A.xp*<+Gvs޾֑N:8b]Z3@EA@v4Pr>F~2grPC}4`$&t+ (U>~L™џ'pa:o\ε/r܁~81kp,叨tC*go/;8'b {xkSKQڣ]PZ}gu&tflx %gC? }4scLvJ\].ap&?UWuLZAO1701F(a~=ἦ6cףZIi$u')"&2*h?E^;Z bf~_-P8rvZ!EPBuS?YzKSpj0ţxKlN4 Fpg'"F5SkN*31WpKeA3 µ9na7ǏE_N2+W 8Ru,VW3S-M;q*nE*ws:"<T0w8fGadS`oy ֎qK{g`fbJ_oQͶr|xmae <Qnt 1QM*Gc{RzMD*{LR0 _xއ;$4]2 1-0>boPXB [5߅44V\ VmG6r:K&Ll vL^YA%B8^noa )`pX*Gx{ɍ<,дT_pjŹn N RR^۟` F٢gp5̸U8q]!u 0?[Pm!DZ7%(yvr?t0@;o^*LQc$gP/P$v#Kղ{n֔9[0{e&`CbFI+y>3U/Y h*iRn33$lvc9uŧɼU*/2$e DܕY4y-ڼj\&HTj'f$ Ojߣ2hkMB’\~$zmU5S8؄ߜ| eBb9^mZ8Wߣu49FI qQ؁^11cQ6z;\Qہ1I@&o9cB%ݻ~.XJ0$Dj|H'0WN18$}B\:#{,D x, sW_@ MSy&ugY'rΠ52Juh$ޤ̐:±'U (*E*]n0=;qL`ed\t"E+;j ?G1TG5]9w޳E5 ƪd$E\ag:~VH j!1G"oVtE1F!?'<37u%xr[`P:B)nª``T479b1t-2z線ů1NgTfì#?M wpPf8lʂ">QN*R۳:9. :2w`HeBOG0 `M2'A(NPxoQGS3S*M~Qr,” N|*:.Myc m--^\§ RnZ&%.Z-|Cݬ@XgH=Ci@͊נ<:gݓTf۶X)*Z}>G_q'KITW*Igm-CH"9ad'Je9؂'b!1nfo bV|+jܽ2ύ$ %$6Р&|EK=,ݍDzɥ[z`O壴.P15܅?(ny 3kF~ ,MÃ],>\t'nM~jG%FS@Q_<|,B]t+vr/){Dx!]L(%0=M̹Nn5OUYQ R'pFqY7ː>>IZsK4Ý;0IФqT8l/7~QEE- ;NvckjD6 z 虿UgA޺n- eD+ X ޲'[y^m͏ ksL7R{ت0F§놸Odk ~mf\Yeǃtq*k hn)F ]܉5!,~*lߜz*ĺOdsHhcUmo4%ȡo:þ)6WV?DM/'e]"*PS)3-B:EkBc8)N;W:җH4;Zv}G^<ɤ4l+ GS7-{MWƛTر3<&[ߞMfnt˸:A~"#*"{-w֟%?P~(v͓JRmnYݯanp%E㍜z(FCh%}j@\6ІduU'TZIA ԍ.]8ԩ{faFE-K:2k0 rʇ aho&'z5%WFEgT^6'0k%@6Rfcn޲r INB0oRQ3tWq9O]'Gz}kuGɻ#LUTo14<|*&yB i[ލ=m@ g}=ˁ2bЉՖ^Ef>wpO>͡uE9.c%Q1H+w4o9a ӳ+` M] ʓdS@.0 K,@@WNDbjڪMER-L^r*X[pe M:7|7;\$\ښgE s: yaD$-jʇDZbmM|ٍǎ]eS&8ni&6ɢ8QfP3 uS]ϡ@X%hJYVY6B;CT欻Ra|]sU9*YJ`6_[%:;Iu#;L9qvs QHċwjBʠQy] }VO2 ʼnNCq}VW˔1Vϓт5{ylYcb h/vG)oE|/ܗ-#EoF92Ąemy$(EcBKP5d\G}چ(UOъ3ثң[%8P28ҹqOxTRtRc:֐ Qrps4CLfr5IDT=.H'.XA[8 5_ȋa5ˇUϱk9dd}<,Olzu+y *)+@ 9䥠n{(zlq}V[̻o}vʰASu抁cW<\tMn+>zh#E3E旧.a^6k7S|\\SE8c^=Ν>@27x'ubAF/yPW‹"EZ@ ѪCKTNuD[sl|W3GhOmThRu50:pҦ2/R}4 ֨'G$ {^Ҿo 5x[;0J)+4f/o0ED/-ZSa ; OZ_btg>ˡMOkC(4`ۘ!WXbvՅ6\p2Fo1B-8y{_;f7lXb:L>cp&2?e`iJb'#PǪ1H"g2"tȏ;u4(BrW69C5|ӑ8ǛKuQasU5CGhr e9q@KR8`hFןPv~}OAz 5=M,r 5])N%\a2B&iq?3#*ORǺHm=nP$'ז1_,Mː[ͼϯt`:4IE OſZ.C>\liֳʟ9 |y>f :J vcš=lmn+I]m?n<^!ّ`4x^%,J`V@Ap\e R e e8.oD#L A~}aNc-اXopn&rM7RQ8D ց(4VXE+97665io&pV+| _Fc 4VF5gr &ngN)IA!fDe?7s.m4v}-IZ\IJt8!Ԩ+˹d:.4YT'c Y΋Bd@C7:,P?͠_ bsݶ`Rs!ɉU:Ww=Vs%N"`{8Y}wwQʈFZ;v䴨vx὜3Z--_/Pj~oku)D>ZPmԲ|m pX\EnDʻ΋C9@_lp̝ȖCTpNp:RlVnMC 9q0#-(6УA\J Ԝv;HeˆT G z-C'v}ݮ8i7=e󎋗D= bU57Fg#c +<94,Ɇ0T=x: ~]Y?1JLBͼ53cL,xO9iCz7:9pWk)R},SS1n $[n*L͓;{ag̶ُ{XY(Wl*ElCbYd#fƺ҉9hO+#!U)tE$w'GW f}rzYm:x A;[g78`т|]%@ t(d!BaRyQr.M1iD*B1!pUuWXiN10 jS; Cۿl3n4%nDό~Fz$S {u"7U3$+X|JƬοuK=I+<K ߤ_m%u%{ýd]GM6f?;>bL[S1/ְsRTisPb dSe8%6fobW 18܈:`TᬘYIʸb|~w~89%ڞlF .]\@蕐>n'j!dvJμz͕#gt}^"!D#ˀF s%{47:*!܁>᪆h,_ZcY', f`h>vB`.=5\U! T߮="Gm2=q?Q~˝D .ž+&6 M~pa7 thm N+ P?o'?mM [N-5Ja %v1)Wr19R璚tl!kSamfIdEl.(:KWn]\Np݇6 xO4}Qc~NX0uj|->yyt~6%K{c/w ~Ku7+d0]c{~u8VJ" C% Ĉ&]8 p2(GE' ~zg)\&>$g%U(1Yj殴&vZʕVD#F{/_CUASk׈P/' ` u{|J 'TGg=\2*|\z?}q1Ehe}Lnߓᘃ{ٸ>+`I[OaMP:7Kg<̨icLT=]h剳Ծ^Va:_Xٱp4s'@C2 [Hqg4 3楮 cG/yGjj@ќfo53 Jpi(^5>ʢ}dT gt Xr 2tV&(bɦ_нH]CCB<~Eޓ RCf{ W|(0C`OHL8׮˛`)݈tTæ*Dq$X'S<$4zh͹ B)({NɗAI/(qZ٠>HR% 5)'&_f]@> /٨䧍p5vnmd8N^RV "yoS:4<Y XNA(!j%]M eqoD XeD~ JnrS%|"\pitT=ç!pzbB o] aNHMai{3}̰Tj1;l:Cb"Ϳ̃a S󁴈pHE"F5}bmd_-Of%tAM;i3:t<5+wSmG.MCUtĿ; !3Ŋa!Zdu"#:#98!|\{G']\OuC+fx>KU脔NiGH!59VJ1.k4L>nH`fe"{JhXN* V_!=]U^Ha(P$ӞA|6`SCLĻ>r'@b Y^*a2^LtjPR6P)&8mTy<|Y;m1䍣 (*%khҠzCLe~xJ`GuTΈR>QGR{&ۻ#WE"cV 4rhώ7}ZJ=h3tS)>P yOtiCϣr 5sR9ViΕmOgŭ^Z}!`:;sZi4KdQ!#p26,.#ls"cyag,QfpES}Sō%IJCD'?4k q0.T_헒 khW_+JRm$lpLHd]6iQ~IK;>Ij>s9Oz֓ 0]ZrNȫ;Tvl Uס|l i%%B":2ۈΚl7aNgbFzZn/%E:AtFA' x"*7zR=\-3t>SL 9 .f ʜK>hUAH6i>['R{ }icOB|I de :8̊Tpj#.cB_c,WT q0b޽WWhfɃ"a7L9ݡO 䋉T |h&Afk͗e4;ܸTך"t/]9+?%h  8U8j (]xӊg:/2JgBA>B!$ۀTwH܆EʨQ^w0zLp3up:(O1;g3i'%W2Z5g>'֚:OH{(>׳L/+Cלʊ jfΜw­$oO{la{9{) Ex6PፋײEm=SEBV I e oa]罡j{f귁dКyޅTsbb>M܈cW繲(o&]f.,&&n&چ7/iM\k/.0:F!7 ޗ#tÅDE6~_F: S~s4>$DAc";,zD1[ '4{O .fw& 17wxv{jġJ*ǯ c]e&3јhDxC21o_aKBx_b cYCي|cyE9q/ٖ K*֯$S0gϨ@~vQ}2_pB{0ǜe; NMA34wڞ`cxhMsmZOy[>2l&Au5mWcX;!|Rmֲ @WjW`&wpEt]w9=)ZC SDq84D^ي)fALPRMαi)`L=yB72'а3'T|n1FQVg; B+96&LYؒ#k 'mf/||tBsmq5HuK(kc D7zJǤ P F fy4bړr|<փ_\;X@dpiT&zU|~F85,DCb>JƊ6<¹3K :Fl'j6M;CuX)57:Raqv+}P!84䬹v%UmN;ÄAiH gCkeLr Hq隼|pnþAճ()fBǣ:NlװgGatFZ2``u䦆.daOb KSoYX+a\0I{.ȶֽ%2RTy]qܡۀAiG1w@: 3`ZjӸjJ;wh6쾘*L+Ky Eb6e" Vrch IiY'=ǒ9*-w/tɩw0xʸN\Ϣ3A Sf.iܻB[kNIr,欖~ ^`r% +wȿB~j-XLUknOfT/!:#V{ZI,9d* SB+ꢜ zG8^F͛x;Oxzȫ!>@*x "̄L5<**E6W$qgxyo4&>rҦ-=s X'6UdDZHzһV(o'пdzM| %׊-$ijx#/ܯ݃fݘ8h~DffhL[[^(􀌜ߔm52l.ѫ<,3Ne73>:֫j82w!I{ZYm"tzbL#Qb FJy߻"*6D^˘> !@Wħ';B4kt\琛nkLc};kmhΓzh3j¨.2NҴxƇYi7r|\ЧO* xjېywsZ5#w2 zF`}.McOXU!%%kڲP|m|_* d'qh4o!@ h4lN;`p+ej}n"O^8jDgee^hc[}cNɠ]U:Ϣt*/BnU"SP5<+5&ED'HyzS~ݳKdԻcQ?i-a= 8-a Q*,,_٬OlFљA)!ͥwaJWވe$_xѐt 2lY g 9$0Ù$}(ο8e2Z' oҵ.=ٯO{uHig,Q>_FyEzиGe7C#`E-nr֦Cx j yc(ssl0/ZH5l־9Q#`^!cҏj6'ǛƳe}{{K~J6J컁 _2rQ:]|@sg>y7_Tb+v+r6ψ\j cj>)2_G:>W^G^,o<%{HJ:1~ ^O*Ѫ-5nWL&5Pn@ Ab^p#~[b&Daހ>ց2}cx/B-Z Oȵ=5cj4fCU-, ?Nxf}V1Mp^~=UVf &=iZxFntiwd2GIOl1>pzV{eA|sRvS;w_#MsXf!,'f!¨LjU:w{ƃ_41jxuا X ?zA!{v˛>M]C_$]Rh|LHn.[B\a)~.-+HBt+MhުȬFϗC0ak꜎aI<61z`kJ$e-8Ggঌ#ڐB dQ=J9ʌ;惻9j9C{ت{}-Q Gd%*`3#@ԻRB0/C-U ..5y*.& ;DS$35 o_gq f0}q?ZC#8r,Y}IS9cu54S@' +9ωXgPW䧐? bS1XFj{-~iGz1o˛0_,&V60T _Sҩμ [+?SQeH ɺ{Fe+n ʈh]ԴF??$)𵅗I.q<1Pw H=tP-5\2HCxۘulG_%sVjTm:k&1fx|:V 6bGx Iio-oBNJԹTWB¨/iIu^) Idŏ(,ޠ[l{g2ߒL E b'5*j8wEhQ#pKfG+Cv4\;P2=F;A V4 # B9u쏲;.恲w=gVi3j%=0CȡE668 NFދm=q䞟Oŏr '>+i0!Q.Ho35D#ޱNk,;քǎ f&z1}=<4[i(]E\qj|AU=OMבYW+t292!݇SY™TY<ɓtR @)!oWgYl %"̄H">҅onM^Ju qlDmi,5&cf,ꃆUfc&JTQi#کz 5&DOrLɆ΋E|cʫurh-ܭO RN~PO.ixY h* >kIوt2Wh > ,uw-՗΂{WiC8OpM*ʞ%)LrKD U^&vn3e"A5U ;Lj~ \˜@5Eu~1%%45cuJIXJ7Rt[0͆&4ʺk' ͯ Ә0BWʹn-*"#ARVOU<:yNOBN~Vi\%B5 39TB\*:cGiLg!=y hyF >q|߱;gu@_a{Mc [J{j8b'k$!ԩhv~ 4ÌNeC_3T1fh7K/Mլsq6[e@@ʃfVfZ-κL-Pg9ra\:0B>O|Jߏ!tb&JF2@i5~EkWdf;tEk*yQ_㥷}֑|)ׁ>聣W|qf5`:[r1SD€޽XR#RF.\ [&k~2ȾUvn6xa~u'_~`,YT~̀@mre&H4 d)(>D8+ ?g̿Ȳ Υ >ɒyhoO9ڈ{j0yL?2uu%bM/a7X rA6 1R(w43 (c6hZq'΢sH1MD4Ǔh]\zd٠0.ɀ#'Mf8E*Ta@x-"Գ;jH6|×jPf9ݺS_Ojyty8Mv•8۷ ^q&sJ.+7t h'3?eZT?xVo:X$"N#撵袭B2<,30VcEPո'욥H&\)f]PiLC/\dPlCARq߄Ó !w$پjVJ$pɎe &˟ֳ@Ftdg )Z+@߶;L&9ggp7X+a2қ B!=Y&.z-}@j/py^htwyahJ:D~8/Rk) ![I'dVJj}F9|$.lFw Hwc/<[(O֫{` w0]nj6Ĵ81m*e0Kp ~ s-lQ@o+VJydB>QO7PS~C$sЈ &Et)8q%'$F^?RֹL?*`Zz{`G ;$'*w"-_ ~u,S\.!Lzv [NQHxڎEP< Q<5\KcW{ "/zd}j[{AZOm'h<AMZZBq79n3v!۬*1sv)Yk_ :t+aM͆bQm6@W?#VX o#qdi4Ȃ@IX_ujC3,yQYS6l}ӍHW:c֙&D'3rGZfg3u*+-$!S;9ʚâΏDiK]eAQzX"^1a|*L(ZoЋ-B /I0dQI@!JB̺>u/zƝ>\Y9~'^Vi~Kƈp=rvQ(A|H6ifUt79#?$EoY+I6 hJa3]L4;3(TyVFk0R l 83/>N}GCedSʚ~~rR4#˦sD\GE ͯ6vczN6C: ?aJ0XxjmeIۊ@2^ ( W3:d}?N^Y'*\/>xgDݭ ὼ !xJ2hc˺}PT1Rx&մ6e̖#-yJY*&gĦcλX%&/\8M'ҵs_uWIAi'v}^0$ ma)Kol )Qe<#S;Ko @|:׊'ܴest5;'h ʩbzGoDV|'^l֎)u~ s;_W(K/dvظbz(I6}ـB[+?%Ӆmz!/ )u`{C"*klA?v^=A;|(R;#Z4FPgj*"=iŅ([ef5T(EA1;ݒ&w~uFZSLG| oP\I+k֠GF",i:MjU~ &.G#O/f8qF٭1O4R&nJow/CS9jR t ?޸ҌUey'd.e)sx+jX7-F1SX'ڙrWEZvh!Kџ7V&oS;U nX GHaBMN3eam<וhЅ7 =V |fNKdy nG[PQUL_APAI.FX Iڍ}gDGmS]NTmB{#90g5NQU+0&jDZO8@ZRqOg͒A=>3vx"1Xf)gf,v'UGt1mQ!Ņ9]rtK7b>}jGjd("ځhu2V vl&6L wa9L1W:Fg_)Knm: W+ mCPf=t#zHs8V6PH6PfI6a]"( Pգ"KJJT/b8NX7@ex_K.'`ma} ! ~h ٍ}zB5[pmk\LӐ[> 5AM&3)G1o~(m9#}LT[nH6%@ް@*;ZO]c]YIGY'ڊnM]+& 6<Ү@y%,9x}GT(+xQ;:d8`{ R wƏ*gWLtl*oS7xjn ]o_ v\)Og)v+0 xrΡ~8URT% jfxD6źXIĘ:2ù9wKuj_Fp'sVxX=yTPxJ;1H),kc4H?fg]D=WǢB"]ΒJR˹Ki4vȺc҅HjNdE&/:KÏ+SVbM}eU fX¨-OQ I57tAc8Un9ٶV`YH]}] d N֣"MC< KQXoDlFUN|R FCsJ, Hl- 2U0Q>&xly#(l?^9"eS>CJ@􌷫ǫDGL4VP+HMzf&FPz|6R*7;re/=.p^L`= -2p#O0s?C$haiΘFֈmԡQ5-.w# غT\UH;B+Z0˘6Ł,Mn:[2!^?iR5+-EW;P'7*uOPc%%Y?.A̮ΐ+ mBT^Zgz;O2nmRJin/w/[8Vp1 v6C?[9mTV0ֵkթRR_:;\PFMq@Yp_ 9{5x ,:!m'{0i3;CP+9#"|p m/^CC҇ K1¢1Wf c;MsܴHt3^]*Um(ȵR 6xVK(򕡢_Г7ݤ{ލa8G:Lc)Z2AxYjGYܡiE@NxA@paDoӠZ9N6"'s Qd&ܺh3y-j83AOO*+P@黏¨>٘C-_? z:ZZܭLn9uG*pP]v44 Z$F;l&IMg||A6@+pѠ½΂Hw:zI[C #]O ) r]/Ěh $}mxa*!*J?ڙl&1L/M[M|3`⎍;Y'!|Gs~ǩ7 [{mZ6 ]]P#kU1Uih4e,Hi6XPW|"E'~bd9{7d%jp{6gR os\O42!j#ҋ \$14+AIȍ-o/iYg(U!IRxg'hU0:%iA.n> ;P fN7HowɗTf>,PVisp{ˡe [y6,EY$?+]TGhbP?0KhɧO'}[bAor[u o?ɹ9lZG(/{NAP;/W.". =HQ;L"cdv”ieb_~*sįόeu!~p&)Atx*s򵍇'6ֽqY؏VAImP4ȨRC^ vS4͋W9K!}w(fiw?K/U3vjo:w}|k*gUo5I:e)E9j}^S^&Ƚ5cx{Er!ht7Gf Z#N0 1vDtCА>q/0"Dxyi^;o^`b"} BinrDSɾ?oG%T%eZriBx=9ie _e: :&X-+Ĭd)Ɏ^N.0c۠^nU ʖsmtZz$TVת9WV(3,GAdeW|Dn"jl)%r+bN~?7=ɧ9_x.{|5r:x $[3y)ɋ#;"QgoD̪!\ *ܨ|Xi/k߈m'Dpha$|e*Ů:[|qWL$ZOc.wzL/A9:؇\e~Nc:p}JqᖆUk.,ٻjXaݪ|Cu'ͷMVd <ȵ>3A8 ]Gkzߖd[Kl-+4ObLnR\%glИ^&껀 FT6}ۃA'ҖfoT{E`9%\co{cX%@ 3>SyBZ#&BzA֍Ab4[n|1FZl^t8mjƏp /تq"E5Ck)TZ|GxYw 6PNU,3m(N Wd$T6VY0;>f=)#ϪSy 0zSYPoA}WFѡ |<1BeoWA۬%FA酳ev?ΏDt'ωXCdsB %[ W,hKugw/pFP *NҼ;[-(uSYtee]xY$ WDaTݿ;M'ZZ:A8aӄah,_3HTYt\/`y$'ĠlCLE}w Z5"Km;pk_8n4R󾏢nׂ L+ݛݨE@e]6g 7(UV%{wW=@A{l !]]링ZCڕ]t:_bDxE 9B/jQ";×G(P> "36/kFP1_3b=?jiU,nwHi4bz4>a]b}̂{b9eOgGt4MRi#|h脯RcrQ2B[oq/1f!:3GKC4Ffiҟ94UOIAOB֌ii!TJN T&$`^ jЅJ 6{%6qWcuR:Q~'jbdRJniHfAoXwacն{t-Gۻ4,IM$N[)[$VvSxXdF0J}dJubi{k})'H8bG[y8TI$@7n3!^Ī|<fկV }LG,{¦/>ꏕ} Y,;8II֘zM|I<&cj =[/=mфk=Y8vso`װA%4.6]l(2նS=6w &34j꧝X,OS+JNC]?*#{ N<0ɡD81sEnxe E9;80&Nq*n6&z+r%ArJZp !+{>/ձ'u޸%ZT'쿛K[r=EeAS0QrvkO\^aռ%S@qVwT"=o])Dך^,6]^i o22ԫkxz;m kTXGI۩꤬šGa:!?"N6rgi& V0(ۆ 3+ UZ'pq6Yl2b L+͟&ƻ<}#˄]'Ӄ0*,VQitAoSY-E5η5!@eHXLHwšNN`c$:O%}"j"3bxFsh|Rd+~ PgL%dޘt3v$O4q<ZI|' %gZ`y݉5󳚝.׵["dM{c: اCΕOGȉDDn!^6X<7"׵}o[zJqeI:7 TQm1s::}*l<:_n,0iHVw$./uZ'㝝euQmZ.Pe,ΌV.׀Lbw;vT@Z%aÉ2Ьq1/Ϲ9n3q#TuE͵Pf:x!JwL~bXpTEС~4x6>ccK|_y"4o $²n\٩_]A R|yDB% g S$zjߍ*/KIi+"-JaHbAs7\UdRuCTi^!< 6_ *L] j=6 Cﱛ%cUlGYn񟙌bxiJܾ!-ofW:79Y$C\J/^/5daN SXiIl#{+avTX~e GVl]nvS(%*)(Ip[$aP&Œ4䜆=8Vx Ȼ*G+)T=q6"ٵ şZ5|5> m3~MlØZɱ±Nu4kLW^.՝3w[Q/b)>ʻRc)  fmo*7 _n.Ilgq9NTgg$zx? .Td*cY4a|o(j_dW#iQ#^&0eIdO^[oVH} h&x}47B ר)wVkKqh2jE6B!lQ52qVd l43#~' {:QXIzO*<@ɜk+v8$b4U=Ϯ^8 2ƘE% -?Uo`z㷅epd]Ro:LE$n$% Pm#RExNCgJ#ʄX6CA 'XFe,Ch鼷[3j?E֟$U]43jW|ӷKssUaMSbƐU+L|띅>}Ү7r(񅹸+ږ 3QDoJNf]ΰ'@gt/evZll)H{Ɋ{2J=}aFo/3PT=4t IX]wI̸ kMl!OԱm,Ǔ!$G8eY{#dϹӦ'"!q9E߇D^Cv?Pq'Uvl2\.!8Iȋ,V}h`h:\-k>#F9cJR^DְewEc- qw./hUʠazZ:]6[wͷçmV,3&梁-\/۝ UR\sz5enE4YP6b y T_FN#@Oլ\A'S D#x(.Ug%ˆ_OK>JvB,I\V]<52XH BvݪLt/2O[ .Z1J H?r6n|aD^3aFXRmvWr_gI;iή>^GIau(\ E;8a|xi&vQXn-ɲt r4׉eL6A082췑rtc3(ߤ7#5Z:5SAP l/\3EPamMVJvZ-ܚN"FHj0PUzBD1d74p9d}+[ yĹhA6g-1CA$YwĝI0ZU>ctq(/LxN ZDH0"J]/1b \TVP9 X8踞6d.~1>"CUK,]K%-@25=N]M=: :,L)=x-4f\7?"EP@vV)0GTqpH%B1L'}P꽫4KeB넿T5I83ؠ1cjz'% ;`ceVqsr#GGA `f %z@P䵛a;N bSVΩ^>UL,TL2BGF hid{}lq/X.uk?\й _`dhڌmRڡz$n&ߍc P؁M8VzC=?N5L]$ _B?ܱ@0.nqxۨ`}~"*0 fNԵsDъnfƢv[bd,hǑ_Cz \׉ZkUҐ~}KT,+9X̯izu|w!`'it|/0ڪ/ ӉMW% ?"~FE Fh0SZeyO)m^]:1M- F=DogN>R6,ޭE) I/_aLUKxkm*yՔ MLTZr%3魳?f's۫&5񩵴?Up&__6=!Bx*K?Qf$tэ8 o^O]("[H@Z !y]Fc$8D?o9&di1iٯP(d~9ndwB| 5ľИ?; a8 .sl1 ߅nَ)<=@y,`4ЯV}ʄ_{Y{i)Nh*(`I*%Bq`+ဌJwrCfQF8zu#e$ dJqţ R.!)~dzqy1icɊb 0hiC%jW,<Mc4YUB=lCF/:8U#[xo̬ [L?0K<5.J"8-c8\[XPK0_yqd诜02 ]Y"1+C$I;U bH'|lXyը#ݰ{m43])Elx/ac ̫%VF; ۗZ7w<~a,]1nnVpI=Gl'* pBڱ efnlޟi^O̓+ Ʊ;@ qF\Dׁ+jeyaVG#QhLD\=yZL1N \%iY9%k{A)pߑ^g0욕2!p ]Kr:x0c#+7TS|%c~1[2 aV> :DR]DxjLUmDk07#}q9uY)F9 ;gY_L 7e?vㅀԇ-asjF]; !1VX/–YޠD/F٭Q~$h@Cmm/:imɆ csϥtFc腙 fDPnR^^.yqk E{E.mh*z4Q;4)v╨VBC΁q! v tGkᢏFΙ[;b%dĨi cޕό jQ.ʪ:KuzF<ݮ1qHKm`V!>S(=VܼĴ3c]a[Z/s"8cٌ6h{R0Me ħJ0Abh|& Nt*Jpk:PJْJ {3ΛDGE,j1ԏ?WZ lH6 οz4uׯNi' j=>G -E9F8"ʥZ`~%;V0 S֚i4kn[>,,̮_ YZ