From 303a9f7df70b702dfa3df1fa5bdf0a2afe9b1445 Mon Sep 17 00:00:00 2001
From: Andrew Bayer <andrew.bayer@gmail.com>
Date: Sat, 17 Jun 2017 17:00:10 -0400
Subject: [PATCH] [FIXED JENKINS-44898] Add findResource to
 PluginFirstClassLoader (#2916)

* [FIXED JENKINS-44898] Add findResource to PluginFirstClassLoader

This fixes GroovyClassLoader.loadClass for a .groovy file in a plugin
with a PluginFirstClassLoader, specifically by fixing fast-loading via
the UberClassLoader.

* Move common code to AntWithFindResourceClassLoader.

* Adding testing of new PluginFirstClassLoader behavior.
---
 .../java/hudson/ClassicPluginStrategy.java    |  50 ++-------------
 .../java/hudson/PluginFirstClassLoader.java   |  13 ++--
 .../util/AntWithFindResourceClassLoader.java  |  60 ++++++++++++++++++
 .../test/java/hudson/PluginManagerTest.java   |  18 ++++++
 .../test/resources/plugins/plugin-first.hpi   | Bin 0 -> 9523 bytes
 5 files changed, 91 insertions(+), 50 deletions(-)
 create mode 100644 core/src/main/java/jenkins/util/AntWithFindResourceClassLoader.java
 create mode 100644 test/src/test/resources/plugins/plugin-first.hpi

diff --git a/core/src/main/java/hudson/ClassicPluginStrategy.java b/core/src/main/java/hudson/ClassicPluginStrategy.java
index d4745a7653..5981ade069 100644
--- a/core/src/main/java/hudson/ClassicPluginStrategy.java
+++ b/core/src/main/java/hudson/ClassicPluginStrategy.java
@@ -26,6 +26,8 @@ package hudson;
 import java.io.InputStream;
 import java.nio.file.Files;
 import java.nio.file.InvalidPathException;
+
+import jenkins.util.AntWithFindResourceClassLoader;
 import jenkins.util.SystemProperties;
 import com.google.common.collect.Lists;
 import hudson.Plugin.DummyImpl;
@@ -830,53 +832,11 @@ public class ClassicPluginStrategy implements PluginStrategy {
     /**
      * {@link AntClassLoader} with a few methods exposed, {@link Closeable} support, and {@link Transformer} support.
      */
-    private final class AntClassLoader2 extends AntClassLoader implements Closeable {
-        private final Vector pathComponents;
-
+    private final class AntClassLoader2 extends AntWithFindResourceClassLoader implements Closeable {
         private AntClassLoader2(ClassLoader parent) {
-            super(parent,true);
-
-            try {
-                Field $pathComponents = AntClassLoader.class.getDeclaredField("pathComponents");
-                $pathComponents.setAccessible(true);
-                pathComponents = (Vector)$pathComponents.get(this);
-            } catch (NoSuchFieldException | IllegalAccessException e) {
-                throw new Error(e);
-            }
+            super(parent, true);
         }
-
-
-        public void addPathFiles(Collection<File> paths) throws IOException {
-            for (File f : paths)
-                addPathFile(f);
-        }
-
-        public void close() throws IOException {
-            cleanup();
-        }
-
-        /**
-         * As of 1.8.0, {@link AntClassLoader} doesn't implement {@link #findResource(String)}
-         * in any meaningful way, which breaks fast lookup. Implement it properly.
-         */
-        @Override
-        protected URL findResource(String name) {
-            URL url = null;
-
-            // try and load from this loader if the parent either didn't find
-            // it or wasn't consulted.
-            Enumeration e = pathComponents.elements();
-            while (e.hasMoreElements() && url == null) {
-                File pathComponent = (File) e.nextElement();
-                url = getResourceURL(pathComponent, name);
-                if (url != null) {
-                    log("Resource " + name + " loaded from ant loader", Project.MSG_DEBUG);
-                }
-            }
-
-            return url;
-        }
-
+        
         @Override
         protected Class defineClassFromData(File container, byte[] classData, String classname) throws IOException {
             if (!DISABLE_TRANSFORMER)
diff --git a/core/src/main/java/hudson/PluginFirstClassLoader.java b/core/src/main/java/hudson/PluginFirstClassLoader.java
index 41ca562e6b..018e5ea198 100644
--- a/core/src/main/java/hudson/PluginFirstClassLoader.java
+++ b/core/src/main/java/hudson/PluginFirstClassLoader.java
@@ -33,7 +33,7 @@ import java.util.Collection;
 import java.util.Enumeration;
 import java.util.List;
 
-import org.apache.tools.ant.AntClassLoader;
+import jenkins.util.AntWithFindResourceClassLoader;
 
 /**
  * classLoader which use first /WEB-INF/lib/*.jar and /WEB-INF/classes before core classLoader
@@ -42,10 +42,14 @@ import org.apache.tools.ant.AntClassLoader;
  * @since 1.371
  */
 public class PluginFirstClassLoader
-    extends AntClassLoader
+    extends AntWithFindResourceClassLoader
     implements Closeable
 {
-    
+
+    public PluginFirstClassLoader() {
+        super(null, false);
+    }
+
     private List<URL> urls = new ArrayList<URL>();
 
     public void addPathFiles( Collection<File> paths )
@@ -100,6 +104,5 @@ public class PluginFirstClassLoader
     {
         InputStream is = super.getResourceAsStream( name );
         return is;
-    }   
-    
+    }
 }
diff --git a/core/src/main/java/jenkins/util/AntWithFindResourceClassLoader.java b/core/src/main/java/jenkins/util/AntWithFindResourceClassLoader.java
new file mode 100644
index 0000000000..048dbcdf1c
--- /dev/null
+++ b/core/src/main/java/jenkins/util/AntWithFindResourceClassLoader.java
@@ -0,0 +1,60 @@
+package jenkins.util;
+
+import org.apache.tools.ant.Project;
+
+import java.io.Closeable;
+import java.io.File;
+import java.io.IOException;
+import java.lang.reflect.Field;
+import java.net.URL;
+import java.util.Collection;
+import java.util.Enumeration;
+import java.util.Vector;
+
+/**
+ * As of 1.8.0, {@link org.apache.tools.ant.AntClassLoader} doesn't implement {@link #findResource(String)}
+ * in any meaningful way, which breaks fast lookup. Implement it properly.
+ */
+public class AntWithFindResourceClassLoader extends AntClassLoader implements Closeable {
+    private final Vector pathComponents;
+
+    public AntWithFindResourceClassLoader(ClassLoader parent, boolean parentFirst) {
+        super(parent, parentFirst);
+
+        try {
+            Field $pathComponents = AntClassLoader.class.getDeclaredField("pathComponents");
+            $pathComponents.setAccessible(true);
+            pathComponents = (Vector)$pathComponents.get(this);
+        } catch (NoSuchFieldException | IllegalAccessException e) {
+            throw new Error(e);
+        }
+    }
+
+    public void addPathFiles(Collection<File> paths) throws IOException {
+        for (File f : paths)
+            addPathFile(f);
+    }
+
+    public void close() throws IOException {
+        cleanup();
+    }
+
+    @Override
+    protected URL findResource(String name) {
+        URL url = null;
+
+        // try and load from this loader if the parent either didn't find
+        // it or wasn't consulted.
+        Enumeration e = pathComponents.elements();
+        while (e.hasMoreElements() && url == null) {
+            File pathComponent = (File) e.nextElement();
+            url = getResourceURL(pathComponent, name);
+            if (url != null) {
+                log("Resource " + name + " loaded from ant loader", Project.MSG_DEBUG);
+            }
+        }
+
+        return url;
+    }
+
+}
diff --git a/test/src/test/java/hudson/PluginManagerTest.java b/test/src/test/java/hudson/PluginManagerTest.java
index a19792b3a7..b384c387b8 100644
--- a/test/src/test/java/hudson/PluginManagerTest.java
+++ b/test/src/test/java/hudson/PluginManagerTest.java
@@ -43,6 +43,8 @@ import java.net.URLClassLoader;
 import java.util.Collections;
 import java.util.List;
 import java.util.concurrent.Future;
+
+import jenkins.ClassLoaderReflectionToolkit;
 import jenkins.RestartRequiredException;
 import net.sf.json.JSONArray;
 import net.sf.json.JSONObject;
@@ -515,4 +517,20 @@ public class PluginManagerTest {
         assertNotNull(r.jenkins.getPluginManager().getPlugin("Parameterized-Remote-Trigger"));
         assertNotNull(r.jenkins.getPluginManager().getPlugin("token-macro"));
     }
+
+    @Issue("JENKINS-44898")
+    @WithPlugin("plugin-first.hpi")
+    @Test
+    public void findResourceForPluginFirstClassLoader() throws Exception {
+        PluginWrapper w = r.jenkins.getPluginManager().getPlugin("plugin-first");
+        assertNotNull(w);
+
+        URL fromPlugin = w.classLoader.getResource("org/jenkinsci/plugins/pluginfirst/HelloWorldBuilder/config.jelly");
+        assertNotNull(fromPlugin);
+
+        // This is how UberClassLoader.findResource functions.
+        URL fromToolkit = ClassLoaderReflectionToolkit._findResource(w.classLoader, "org/jenkinsci/plugins/pluginfirst/HelloWorldBuilder/config.jelly");
+
+        assertEquals(fromPlugin, fromToolkit);
+    }
 }
diff --git a/test/src/test/resources/plugins/plugin-first.hpi b/test/src/test/resources/plugins/plugin-first.hpi
new file mode 100644
index 0000000000000000000000000000000000000000..71157eb83180e97bca7463703deb068bb3964951
GIT binary patch
literal 9523
zcmbVyWmH^U(lroVg9LX7?k>UIrIFz7Zo!?#HMj@Y#@!{jTX0B%ySu%~Jd;VjdER-~
zx90S^xBExcu3J@o&pvDIQj~cG2@m#jp({;D|KrC$Z*V`p<-}Bk=%wVv85RF&1`CGv
z!|Ys+OHL9T3``3G3=HE>GdUr7DRD7?3WJ=uP293P1oP|Qlk`ghj}qq9SI}?UH}d^5
z&?X;Rc&iepZI+H9>`pK-p|(noMg?BHW>W3ns_7Fvff<QaV21_5<~2yMC<WXhO}srs
zkQs-IY=LeHO!$BtS;wxxLX55(&{GV6-HUd39zxMQAfqNIz_VLFN4ocf8Rng#UWXvl
z#I(xUmBv0`(lnR+EKR=R-lxn3m(?XRDBo1x(dp)*?r1f@t>B&aO-*JYz)?MMe%qHV
zIdG=0j!zHKR3=haPS>1A7H4RT=N6(Kb$D77l9E+R$h6sk^K775b3P3BUQ$zl$%FG_
z+$gt=2KMo1aqWBcqaKy_^mioqS4DQcd!*Xq9<?D(S9@(^a>sS3CiPgjd_V_QYtb{-
zFfz>gT??!mY^3m6-HE4JbLbfCD9g~7)aCWDP*$i%u&YmysRyMgsF6(f(7!7G_XffK
zsJyzE@c+}Fzgr>xVP$P$_(vyyHe4=ZhL{l>3{0043=IF@EbXmb%q(o_O)VUqoEa<)
z96=gzT(bu^jmEJ;Utklx%}C=4VqN+d8edZ^%cgWM2wxXepJ)Ze@+~hk=36hi<_e1r
zCuN?`JDogXH6A-<AD?9IcyGIN?>Kd=JFRh_c#caD1o-Z=jW-GvOd<5&8N4QvD{gB*
z?5rsb_;jCbD9V)}VR)d(T#Uwm98E%qjC>VisEDI#0_9F`16~|pGfS)5CSwMnPH4^4
zyrq-Y15?F0YU*C3czrZ4o$wiHL7r|SN6p*<Zu?xoMMvNgTeik%p55d=z=+}{2zf&y
zL8F8&|68lf(#Ufh<g^IBCPMLbgbM{iUwAQ`PCm=EcT$;H9k%UDec*~)SYkSLI{1}o
zrt?H*6~Hj|0g12-9OTjukzxyH45sdZY?|KoAPk7S{RWV1wRABsiZ6@L3Upakt@liw
zX^CalgK2M?a<3eL^9f|EQl=1;kt}AO#b&4wUZ0}x2virE;wE+t2P`P|*YxW;gFyZI
z7*4hdLtl9Y<=A*i4@!^ZTDErJ#XUW;vn&oSPFPrNw?AoOYD9Xh3<pl8M_jE=n$Q8o
z`WBs(!LNHb9Ibk=)t17cJ}=tvOn)WWSYs5i7lhPV$b1Nqs$6qk$D-isT9g$?tV_t2
zM1@~^Rs7=X2P+R5x-Bu$8!MSWHj3&moD1a(a@;r1#V>yr3OG~<<HeM;f<&_kzJ<|P
z>Ks~H<kBFC<^%s4ggnCN@_gGM%JqrhrF(nJx1iG4z$kE9gnJ=ngong>lpfz_p=<s1
z-3dqdx`3uCf!xQuFu^pfCioTZ=@!~)sDeu<aJaQKK;9%RB0nvkS|bq4g?>Z3|0{4%
zy;A&e;~4%!<j2xgvrCx7J9ga^x8?G8@lnl5LMI#<;d6;)xG=J(+^+EGlTa6HTd&?_
zfF}tZUx>9jk@7G{TAnt=k;h(48_@1!UTqXn$ukUFl^W({TcMY(;^Yoy@8Y5Cl)drZ
z4O{NzeeR+z4vwzROPrjljDAvg2;oi5Q<4OCSC>E_zu#q?gr&mP+m;18;r`%96+=tt
zzl*ui7van{i!Yf3h=0@LWMrC-+Dn=|TEu+y40nAZK~u<etiCx`?)~0s1rr|u+VSI%
zdK2H2yKOambyYJJsqa_;Wl%#^N~qq7ncIeR3l=y38_HzOJTSTtphZLR$Fk4H{3BRa
z1R3gv>zN1HB%LRjJ>*UB=AX*FvgruJB?b@raIooeVr#%yxLktA2}%fR-syrA6ymM;
z6wi1_nONu3Y;>B`d4<0R4|)iAS}|S9R#FA0f?B%sgR0$(LB~CKWf=_$C-ljTZ@$D+
z@E&EN@?vMED*>E5OubhXPI2xWvZWH7NHL-x-#R7~<oh};r{qLGn_LZyPlhqLoWg)_
zt>BrkT5{!k;zZ?E2muW#WF6@FDpFi#M=Poz#_|-55M1UoCG>#N@6HHmh+&1!^(Z!&
z1>u=$u*qyP0m+5@^LRA2@*N|z&YfT_44ip=6?o@8<F$+upX#ngvTP#PLX9%yg@PnH
zBr3j4wwAoBAwDB$T~qIB^h}#Q;Nqq3+9m{g5~FqIP`L=Gzpv%db2>>m?YB}MQB0k#
zr_@PX4x-B;W5_%^29aqLItsCHK0w?gEWDco6m+tf2b!=~ZBPuUu5~L}cUTb+^Bi)k
z%YEI_=|NsIQ#HXD+jKuFsb^#sP2D?yjxmY|OPv*9fSI;CpN4`?oDP2&xlw01L^*5J
z3C-8(UYbzTJtWp^u`(AGw1(RpO`<?YrQD$R2MTubZ+`W%U4$lb)~?l&yZRWlJTfus
zM!Lba=W0T9;})rnR-hM$-v<-%^1xhEBeWX4_=uXPrODW<=kIrQ;(o<i0CmVWn0I$i
z2(*7~ebuf&1H?1D-6b+$en?;3J`TpysBq-#`ZQh{@%4+MMV`hUHv&H{Do^qI96iV{
zfXAUPy9w7jz^djFxhvQ9Mt-Sj*v4MtiVk)gtaqM8+=4f%iFj!dlmMoR<`*$39@!iQ
zSL=+fFKAZlRM_JOPX!fpm@gntWbX;C-eP9%V_rBCTT+&;@DC)_<%a9rSU8X2=S;??
zS{^k1=1CelMGdN{#q^pOL<$IID)-c&713>~EKRj)aG<sjB6_?q(UISh)tsAn#f-Jb
znVp_Q33%4QN;Jo-k%ht=fzL#SxE1#cu3B;|-a8{p6b&MH6#y;MH02QY&%zzk>82|w
zhAYK@j5cdyUOperOnX`ntg1PJtfJCBXUVf^FVprt_J=Nl&D%DWM(<(Pz~xUd*5Ftc
zi{H6F8fAyG9rH|Fer3dAwf2JM@>6|1-bKzd@GxQ%CY@N;gY8uX=A|Jkc{rB$jRGO)
zc?5ebOnMaQV-t@^xVAD$Jyok2Kbl#umy|smnWezpheg`LDEO)lqUB!k1Q*cg*$i6P
zOc<a@!yKKXAVZE~UcXD*f`%<Xd$D@rVu3}^!?9n`oNuisyTj;~v>i9inA3=Isyy2n
z&7nj@mcw8HpQzoqQx@>~_86$*ajxAxcJQFk!H`EAzLQ>f#0eK;$Hqx{4nrV8+npCg
z{E&`^WNTnF5EHbh3EM?rW3x%dNTMYucz2Y5qehRmPagniXL%Y-7Zy&CE%>mw7E^fL
zP&39Lj|!>)^)b1^GJ60@nuFkVEXO!?qxgzME3FkJdqzqGNT0=F<s}^zZaD;o7O`KQ
zB{*8Y@^oFX4c>Saq4qEu+OnT?nDwv}2fIM+QSg2F>yn_6ptQmg&`JzuQ_pE{ADZaA
zVM4xWn|M>iP5V*!Diu<|@--PpFI8FFj>9~@@=U_{xAgqvI!pdN2;@Eq<iX1=A;kK=
z$qU;63KvdH2GPTBM6N0!t{pbxQ<i7uG|yNP+&T0Z_;j(Rrvhznl%($vA=|!9Q;q01
z9XRP?>lHv^P?=ffpGRhD?H}CHe1wTUvk;qKT36p7V|P<2)16+g%0?OrRN9q9qXw+9
zzPdudsd6vA2j(8-AlIaW(}3>j0@bJ8r1k^b#aq<hbK(W`M+Ukv<7R8U&c#h988yqE
z$D(<7+roMyBr8UEv{GqEoJ56-vTLxIWL<Kh*R+koyhvq;>s@;ia&~Uv8;swsh~xFt
z%GjZ!jYtiy|B}Z$gGGvuU$A}wm7W2$GzxC86Y8kgP+yD6RO_EJwb(LjP9wHo2|cAe
z<%}3?lr)UxjlPaH*(U?&h_A5Qa{B<}I8)JBcaH;qlD&VXW^HYD>wPpg$Sk`cdaC<w
z|J~M2+SBp^gEk3-YhF9?))R9+)h*}RY9|fZRRH1pE^{(Ho9ji~*#2~3H+e6U7k=`0
z&1$8dB;Jn(8_BD~=vw^Xb{;(~!rSXCaj}!r(+FZp@K#yE{dbb7j7&cL08gU|QE?io
zjJ_#lQySAcf7iX9sw`jc^sEpen6ap!r(|*4q)H?e%nPSoOQ%PI8i@xMWq46Ouww|(
zXKFn5v<@xqZXBQ?6kW5cH-5fj;TsER#4pSl4&zDSv_hLT5pWrF?E&QKWhGS#M~*nE
zF0T-Y+FUg|Lk2;|_@Jz(41V;8)l;b6(yLw`cRy<B<ES2$Oi$ruB;mY%XS4j}aT~Mn
zw~`Li^8xV(H01jaymxOqWT#_u+3nP{dYNW)(q>N${oP8Mi*1u2EfGP1<Z*QIqQTtX
z%A46`C3KC`%F=U~Ys{oeyqyr{yN93Ty<bXI<_uAXpTeIm_mT$CK9XJ9E_3vB#c&YV
znnFE#j3c5NNTv;xW^(}M&1)8QIEcWnAmAlM!|v+8xZ6wQEwq7FiB=O&-&T|wEryP9
zyN*G+yhVX>wPC4Bi_Bo^UrFcTR5D3>S_oB+V((=RjNSz>m?`j|)v-cs!x^pDRO}3X
zZ~<gHT0ol=WPbD3=0mY2>n*E_;G$G#-2;BnvX7wCXPVt(#f>hQE*<=s{dUf3nMMx9
z%YF$S!l>27f@AO9p2YSmclwGh4Y)07fnMC_xxO3dA|4qEO=^z*t2fgSu$655^YIbM
zoYh8pFpQGdXvnDXvCGo@fNQxK%Z@ajQW1ZT9Z}9oGPG7KA~kD)Ntzb)&O;!zk6zc=
zp<v3sQdf8s`KM9=^0$$uA2OA@CZn@94!&iWcmk%-KYh1JYQ^bM^^O|q%BVmw7yF*(
zPOk*({3spPQt&=gj~-rhK~7m(Q=gB98!G{=<7o<w4T_mtj5YBppc-l;xqowelW62y
zvuHN)28ld#Pkow_YGp*H9^nSfe4?=PMsGpnQKAiTL6Vw1v)E01rO*Yjc!~3jWg>-q
z2~ypPDo^wvs>zv594KpuO<H(LO39<JJV1%p0RMAWM>SJJRVdZFK4YGN_cA*|Ee)!w
zU$guyo$+m-_18+GZJ^MTbkK6rNUS8%jYlc$8k?j>f+QB8CD76rkt>Xduw*F$$u-iT
zPSgf5P91~6S!TI!aS>)nIkjv+nQkcQF;xdpopd76RgRvC2zEF&=;-uj)hiYv@Rime
z<+MgUxf(fQ>b)#~eldNZm>X-YG8u<djqM%Exh&K!gZR9&#+U9KUMw05w*e^gqBLhY
zvah|fs=6odAg`$dJ3K^a)yAh}2(q#ai_!H==$E^#^HZ<fy*Lt6ZrFyoFs2yWT-TQz
zR;NPg?JYL4e1i-+-B7iKyIG5K5^k;*)mgK@vT#EW>vkX(cohOMLske>@SINNCfmG+
z=P6U49}M-NV$52;CYUb<<ng}eBS9XYTOV=uE#%1L^gukH)#H9d;r|MyQYz3HpFFa1
z6Vx?1qJ?)--IkPbveiy&9k_jzG~PY}+(9WpIg{nUseMzhWI96DF`S{N6sE4eG}tuH
z&&^PM)coX8KzXHKi?s#Jdl81_EaU-=<?1qeA0rSBShBVbJi&LMe!OnXGRE4q%GEs8
zs6<Fn9%EJu9_N`UOto?z?J_6Z)hyc#38kCvT-ai2g7EBN*Pxi!DPg`zjnKXlq~Sqr
z&5ci=bF~yr>FR|xJp#VImJ^ie8(pr)*)A*ADempnW@^1Sbi_ctlTVnt1lLbLWKeG$
zAxkV6E`M0Q%Q8Yn1t&@{7p=k8J`%}bCVWRP?SlGz;yQ<XU%oMhDYlu|-<q`C#h4x1
zCtf`#Qp?vu%VDm6=9OeaCFa?;U+hjKuaOM%rC-amH=eFs7L-rNzh?4?!_d&{K|(@L
z<N-!UNEBcT<<qRwO+IX?>_qDeJ4T?G1C{97N>IINoy)B50W-pPe}|j131bsM7m#-V
z6POSS>&^Bl$meN{F!G|VY`yE1crI34c3!hbYQq`PXpK^XETJiT;4%A}n@Fq^?VZ;{
zCiGEQ1Zu(1g#n-G&LV_syiHT~sJJcEozxngd`c(!{`Tgf#00B~N5eht&;$O-Bl#C+
zXK}`L2(_mRYq;9s&levuq$t<|sz>TT8lqykJVC)sHia3C*@tZ!5Y|40;MPGUG_=T+
z*DKzK^IA*S&RIjfX32ID7K02f+))^7wT`?D8~T}oO;xBNp(;`w`wn^d)0>2}3~nN#
zsf&80utMPQ1;G_eJ}J_n!&f)#RZ*-s`TTX3J(Ikf$8Y*#ZVH10)>1yEDdoYRx$H5x
z9aD}aW?Yx{apAeT;R|?70*-*0P^cV3PZ#*E^ZLz@4mI~a6pQ+q<Zjt(l4s6$!N^W%
zBXSJXUb@eW9U_)^4ij$G-%Ov$5?<Zc?C4RLVlwh$F#8DIJL3$_7)BjMT}ql*`9r&&
zu?y$MJJ!zRUP})FWOywkF**Gbr2T^{%7;g&sw~Rg1M}=KRMh~>eq&j>#gjsA$+~vN
zmS+26D)}|=NRO6I9El58&hw`Ea<(*$p+`I9nBRq?%4Dj0{X*=#TLk2Ah}^z#owWn`
z1(|aSZAjo{&%L1Uh&IKkQtuiOf*ML+GuXg?CGB7x_4i?r4&OS9Ti6|3kd2-cL8K5>
z-uXs%vpdp!H6Z2QG?kJOOZX8_x)hgbB=}Rn@TVvxv8m>nq!7q~6Ym%?=K==rR$?N#
zu=P<ebBUD9C}1F_22AoejY1>lZVmFTW0;~;*rbUIFQp+;?CafgPkRN%N-$0ol}{p7
z<#^LjnZ3PAFDB?89|v?p=tmbJsBf(dqB{|Y+JRl!cHMTtuWvnl_sN4#JNs`p(qG(q
z!(q*2+ObA=1nx9<cGm_GKX;?P@CouJfc(lpa=;3baIu7?i*{WX21_@(8gRlcC4PRF
zEw%tOWLk5&eRyC2SYvQQ{v7SKUb81TbHb+8Hnq-U=$c)ISO_b-dwU_Uv2WZ8H?F=}
zHwiF=mewBC;i0HU^qh8yRHRpb?V-ZaRaC>6W5O~e)WGM%eMZfJFa^jRBTnFW!@6&|
zM*L+}iJz!pYjL)rvZ%%J;k-HJfR?tdaBdO9jB++_xX>Y((NFnn1`_iMsWCtf{@f1w
z2>U*n6a5~Y>YYTt5WlolOA?Tm-n<^8^K%rvpRJG@lS3r7ms}2+K;OsrhhjnD<i|Yo
z+U$D#dqOEJFV{gF-Wwb5h^7t0Q?hQAzT>j{tE%^7H*!bl<L-IdT!@@xjo6=3Ql{u8
z7SWaBq!a-zUS*ha#9m5bh-!Aco5;&=qMTnDodOrCKoXk1T_6GTCugyoc%Z{ma&<mR
zdkDv{i)IOJ%>E)}YI-!09fzW_7iNvH-$=^the!H||G7e}BFg-{DvEEjVSHx~!Pgnu
zI9k2ne5t9U`L^K|kr(K}Fo&+wD3(14zXDTH+MhMOZ#_ygRC5~*8=)v?SbDkzuZESm
z`$$smmed~>V~IkHO9u&mb9XdP1r_SEy&y?k3^rr|S`es+c!N~K$<PLSy7!JcH+1$)
z;lNL8ntLsYFINFa`!GEZBhBt!18swJrygJFSah{yft>~1pu8!sA3CpG3c^20wN#KV
zJEhBqYs{y6G-QW8Ti`0I6;N)n;guId6mT=Ubjn@<k{-VBa!Snj3b_*^GITt6bqSob
zVq20y8}5m*LqSxx={r-DPB8+2keL_|+l_~EWK8ygkRKSe!eIhoZLi(<A9FJ`rlpfc
z7@xZ+>tJ(4irS?KsO*hO%o@`<KI4rJyHs^brc&!MzrOu6qq@_r5$FaeChSI%cF?cl
zq3Wm`>C1NJH`!x$ig@iX-iqCI@H|_)fE<!)JZb624M#oJ+fE+n{Q=OwUq=2ag`Zy{
zbRdMUA?j8kRNHB0Tl<}$8)8C?S+#0VSey@;lqHEqVcYt{>R65ZLaIaQV!8!-ID3s8
z6Ia<+$AtAVzuGqu4spi_LH>|F><H)lxB-nI%n8VqZe*Rn^%~$554yh*iMC_mIGg@;
z^Qqfh>9*%P@HLm-GiQ!cb&4{mRCS`=vqI-{GHV{vwt)TJQkEM~k*qAWVNW{C(@7XB
z-F67vx~jYo85|zr6%q8Hg%HD5P6<20RkN5VJFPg$mOMh84?vlyCDI_;s^sYq^G!$n
zA=2GQI1&6A`Tz?`r{aWo`<1dYy4$Kh;_`^0iMm0EopT?SZN`{v{MaW(2<Uym@PQM3
zT+HvmZOXNR*+t%(uW>A~h>=cUFh9_2UMGA`wx=Ol(_`3A*3Vd4)OB2Lr~EX@jb4_4
z`F%@e@BCY-^~Sg25X_sPS|0a#O(nWa`Ms>VG~c+e-q7}=_sk%;*s-=NHKhU-*$Wi0
z<Hp1JafaLL<Eh~b^WjIIni?m;MGY=4Qo2daam&@$K1|sxDk9W+o^OU>_Oj+4AL8uA
zPF`Xl31I~k6x8jS2V?Dt_AqfJ>*}TXkuVQ2HuY4gk1!!)Iv`y;5BI(k_+KNQH8_dD
z0WGOSx`YE0m|xpvMby-XlHXw+ic1W@G7z#qS1y(d^y6eGtm|G#*d8#}XV+@^M$r+;
zXJk9+2;e^B$Xu-2LmxA8r|XGi@IW&MJz#}gSRvII;c7Mc?l}8^WISb)p-$%UCtM@5
ztKY3NJNt$?WL(@`vFh*#W4%<K`t*Z)qg+nB|I{g-Gy$>3EWexoU5aD7)e!BubJJ8_
zIE$RNL*zsD{mE>flojRj@j7Vn)w3u1bAEk%`~1lliqL1Q%!T-C`39!W<p+vO0Za2|
z^Gmb#o)hsQsb|;B-gq^IFGuU3<Bu;PG|%}G3YakKV~2pJBIR${${csqMBZRm3N-$D
zv`+W{hKJU3M%q9<BY2|TmHYV=N*drv#ghi;bhSR5?WMr+c4~Yg`tIZd$L<SENC!_4
z*eO!<_3nm49Zu`Gx7HKUFX00AAIj4AO?6eoACl4YkL#yo^h>y~wlFfWbuw{caI>+l
zj}wybWqK`klhHHWkC1@<fl6AL<P)jlM`<LODtu0Y{iURVoXhJbsqpDnRTm4-FP*7F
zm;x|j9R(sxJTb@dt)Y_ivIs3Bc@w5M0-_P$DF7C<pjjKYS7GF#Y=tyM@IkXwaUaK1
z*OF}HqYgeYmfU<|#*BSG=lV?&&Xur1`}QLHjAboAMB(MTMQ9A?+=j=6CTCqrNLJ`J
zOzO-PG5JVsY-FE+X#5&*?ZcXuEDmoE;dTQFu-;GY4BgYSWNpN<H|@T;BhyXX9s{`?
zWv%bC7i4F8EX*TiAF6tA<Fv`4CMsfKx4eyS0+L1)Cu>ueX^+?BrTifHK@Bn{WWt-g
z6O*8MllMkv2*0ZLcR>f`NA>=t%h?!wFtPoYrt^1WioYA%Ihrw8n%G)d*gDZ0Sup&i
z@;Ln;7_9%_7=J28{{n;syH=c#rVCnGQ-uTrBl)36@%(py_I5V^_?M_@*^zQ$`0S`R
z72C}%#I~CQDQXv2Ip8hO%niyqK%<cc8Hm@j*Mf@m56hljsd!bT$|aJ-hfWV28&1&#
zoxW?B<^u`a%G$^SZfv5m`79fTPTY@eZP9B;>y&{_D(7(p(EbgR$-OHnj>3aU$0=QP
z`4;0<DtIi}tMT)0#_e2VL$%vc*FK#C59;zKhHSX;0w*V!`b`C>SWAj=HQ&JIh?p|W
zDcj?z*^yT}#l_ZV?D3|Kuac*dQGLEFGWkoMshO7F_BttK1g2bGL#vhLhr`8lnV*Rd
zm1da2arMQ>z5_p}+G?UJMS6^qqQ6;E!RaV0@kgpejUP{%hig_~ICaC1_t-KCe<SEU
zusyr^S%`u@Em@yi3=Pygy^XC92n|o7`OYha(bjZ?kVaDCUbMTLVo1jJY*r?l?yU?o
zLn<<cPbleSoTZw5_asO{V;+xZ5MDKnglwwxyI8R7c<eyPlo^tyxt2wsBNu<{*%xIR
z@`WsFt5TZD=-k&##t@CNYr1XSm4=RV=4WHX<-+vNAyzUd<_f@SRIrVF`Z2rRxMM1Y
zh3Gfv`KbW+h})$lYG(|XzGPUY$N@f>Z%v3Z6vHKGvYgQI6ml}Lxp<6x$*fkZGK=i_
zTU-NSNH5!~urZm7N9WKwf<=C&<D6Z1t`6OC;y>8h6b{^W8{ll`2|JcqcZSTsTF2w8
zbcrvlmkb3k%VcPy<6?M-e)CZFegAXw#nA+=WhKD+gUBSk3`Cce)*85tY{utOW7(qc
z<PTZ1X`Z&{pLQep->4k$O0gCiPR})7C(@wt8rNl-J%+jBO(3U59@Kn-aeNr*t(*yg
z(ir#2dQ!=&>PIf7=SlaE1X-wJtDIs4Gl(3F-;H5L_(_vdJwEKA<%!i#2d59asitFT
zCh5zmLy4gAAciY4B~_2Q1|e-{92AoDvcMH>#zU`7Wn$G0Iet%LIt3adAic@DPt|;Q
ztB>ErjW8WHN#`u%wSP~3nRH}PY^>j13;`V-FGokS*UwIXk8_#Ix0@zZJLR{jQ8R4t
zdJ%m?BYR1rS-8`{oQ&}}E^rx$Rlk=Q>$wXP3>DbCE9S4nXlS<g8faNJ%Wtk@V}SVq
zRysk3N>u;D8|k-O(Mj@+-QF}nzt*`VY-@Rrl_o}#({y#(jA42U>!BFmkXG!*ya%gQ
zJ$=;p=+3+#Zyvn8(kNDUsSGDunD*SM7oaFWhPlKEL%IAtH9Mzr{k%-A%PwZ%D&PL7
zu7UGe=G0r0`hb?V?WM;O`{l1v7V=)6FgD`8`bu~(tPR;l-RG0Nm3?b|Ihs^{iItZv
zoPz^G3|5t?T(k^p-%XtL&CF-I_~zehk)uE))4nskds{DhFUfNN){qr?44UG_U%kCK
z@VN745Fh@YAe9~A>(b!5&n?{XGVcYTUizSjGI|C|z*eok7gPuW={bIJuvw_Y)I%gU
z?$-e|@Wpov{Mv5+BCEl-j9=Y<Y*IcyE}{Q^v$A)zvo~>cwlHx5d{7vZp_itUl2ei_
zRXLTTlNsAkMjoP4J*61~FtMpJu~o5DRk3iW+q=LiF|jbQ?a;{3(~OT!)UwaAP9j}9
zA;MmtqI{EP9A>0Hm8~9Ql%5}v9vc}SrTro|K1(}DEeFHWj20oyGJ_T`<3~d*++vX`
z*7sH$Oi>0L0^`+x9`N{)+>iAd?C58jziH*S+y6fB@zeO{%J--IasL+^{W1RW8{zMy
z^mB0Guk|x<&W{tpuhYQ)<@Ixr;kVboA6|crHT+8SuNMCMV8bupeE+k5^Zb*vevUc(
zeun@3<nkLy6ZiL%|9Ou2jqvx}f3o*q>u2sMcz;yy7nlD^<nPWu+5ES2-`}18Be(x&
z%%AN38x!uw5XisU`PT#e2h2aq_Jiwx1^D0D{#S^6f6f0cz(2YF&p1EFSN{D){T&B}
g<iASfXPn=!t)dJR^iN2HA0Pf#U|{P%K*7NN2eFy$-~a#s

literal 0
HcmV?d00001