java-1_8_0-openjdk-headless-1.8.0.402-150000.3.88.1<>,oЉeCp9|x+̂Xm~Ѳ^~07Uhg܊*cL& xw6X>)YLN3RЏ}b3EGmzZѓNk>G3?3d( 6 T  d$    4T 8;>BhBE\RM>N>T>(U]8Udq9W(q:^`q>$@,F4GHHIXxRYR\(]^gbc^defluv8w#x&y)Hoz//3~3333333Cjava-1_8_0-openjdk-headless1.8.0.402150000.3.88.1OpenJDK 8 Runtime EnvironmentThe OpenJDK 8 runtime environment without audio and video support.eCs390zp386SUSE Linux Enterprise 15SUSE LLC Apache-1.1 AND Apache-2.0 AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-only WITH Classpath-exception-2.0 AND LGPL-2.0-only AND MPL-1.0 AND MPL-1.1 AND SUSE-Public-Domain AND W3Chttps://www.suse.com/Development/Languages/Javahttps://openjdk.java.net/linuxs390xext=.gz update-alternatives \ --install /usr/bin/java java /usr/lib64/jvm/jre-1.8.0-openjdk/bin/java 1805 \ --slave /usr/lib64/jvm/jre jre /usr/lib64/jvm/jre-1.8.0-openjdk \ --slave /usr/lib64/jvm-exports/jre jre_exports /usr/lib64/jvm-exports/jre-1.8.0-openjdk \ --slave /usr/bin/keytool keytool /usr/lib64/jvm/jre-1.8.0-openjdk/bin/keytool \ --slave /usr/bin/orbd orbd /usr/lib64/jvm/jre-1.8.0-openjdk/bin/orbd \ --slave /usr/bin/policytool policytool /usr/lib64/jvm/jre-1.8.0-openjdk/bin/policytool \ --slave /usr/bin/rmid rmid /usr/lib64/jvm/jre-1.8.0-openjdk/bin/rmid \ --slave /usr/bin/rmiregistry rmiregistry /usr/lib64/jvm/jre-1.8.0-openjdk/bin/rmiregistry \ --slave /usr/bin/servertool servertool /usr/lib64/jvm/jre-1.8.0-openjdk/bin/servertool \ --slave /usr/bin/tnameserv tnameserv /usr/lib64/jvm/jre-1.8.0-openjdk/bin/tnameserv \ --slave /usr/bin/pack200 pack200 /usr/lib64/jvm/jre-1.8.0-openjdk/bin/pack200 \ --slave /usr/bin/unpack200 unpack200 /usr/lib64/jvm/jre-1.8.0-openjdk/bin/unpack200 \ --slave /usr/share/man/man1/java.1$ext java.1$ext \ /usr/share/man/man1/java-java-1.8.0-openjdk.1$ext \ --slave /usr/share/man/man1/keytool.1$ext keytool.1$ext \ /usr/share/man/man1/keytool-java-1.8.0-openjdk.1$ext \ --slave /usr/share/man/man1/orbd.1$ext orbd.1$ext \ /usr/share/man/man1/orbd-java-1.8.0-openjdk.1$ext \ --slave /usr/share/man/man1/policytool.1$ext policytool.1$ext \ /usr/share/man/man1/policytool-java-1.8.0-openjdk.1$ext \ --slave /usr/share/man/man1/rmid.1$ext rmid.1$ext \ /usr/share/man/man1/rmid-java-1.8.0-openjdk.1$ext \ --slave /usr/share/man/man1/rmiregistry.1$ext rmiregistry.1$ext \ /usr/share/man/man1/rmiregistry-java-1.8.0-openjdk.1$ext \ --slave /usr/share/man/man1/servertool.1$ext servertool.1$ext \ /usr/share/man/man1/servertool-java-1.8.0-openjdk.1$ext \ --slave /usr/share/man/man1/tnameserv.1$ext tnameserv.1$ext \ /usr/share/man/man1/tnameserv-java-1.8.0-openjdk.1$ext \ --slave /usr/share/man/man1/pack200.1$ext pack200.1$ext \ /usr/share/man/man1/pack200-java-1.8.0-openjdk.1$ext \ --slave /usr/share/man/man1/unpack200.1$ext unpack200.1$ext \ /usr/share/man/man1/unpack200-java-1.8.0-openjdk.1$ext \ --slave /usr/share/applications/policytool.desktop policytool.desktop \ /usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/desktop/policytool.desktop \ || : update-alternatives \ --install /usr/lib64/jvm/jre-openjdk \ jre_openjdk /usr/lib64/jvm/jre-1.8.0-openjdk 1805 \ --slave /usr/lib64/jvm-exports/jre-openjdk \ jre_openjdk_exports /usr/lib64/jvm-exports/jre-1.8.0-openjdk update-alternatives \ --install /usr/lib64/jvm/jre-1.8.0 \ jre_1.8.0 /usr/lib64/jvm/jre-1.8.0-openjdk 1805 \ --slave /usr/lib64/jvm-exports/jre-1.8.0 \ jre_1.8.0_exports /usr/lib64/jvm-exports/jre-1.8.0-openjdkif [ $1 -eq 0 ] then if test -f /proc/sys/fs/binfmt_misc/jarexec then echo '-1' > /proc/sys/fs/binfmt_misc/jarexec fi update-alternatives --remove java /usr/lib64/jvm/jre-1.8.0-openjdk/bin/java update-alternatives --remove jre_openjdk /usr/lib64/jvm/jre-1.8.0-openjdk update-alternatives --remove jre_1.8.0 /usr/lib64/jvm/jre-1.8.0-openjdk fi121111131Xpxxxxxx0 IW,`L_M= %"Ssikn>R=:o(o s (9 0,~Z 9 A(Y(hȰ`(8x^i('hP8YP,8 ((0[8`(00yX i٣#uj-KJd [VBE 'qAAAAAAAAAAA큤A$$$$$$A큤A큤AA큤큤A큤$$AA큤A큤A큤AA큤AA$$A$eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeteteteteteteteteteteteeneneneneneneneneneneneeee enenenenenenenenenenenenenexenenenexenexenexeneteneneneneneneneneneneneneneneneeete燷eteteteteteteteteteteteteteteteteteteteteteteteteteteteteteteteweneteenenene燷eenenenenexexenene燷enee牌enene牌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../../jvm/java-1.8.0-openjdk-1.8.0/jre/lib/rt.jarjaas-1.8.0.402.jarjaas-1.8.0.402.jar../../jvm/java-1.8.0-openjdk-1.8.0/jre/lib/jce.jarjce-1.8.0.402.jarjce-1.8.0.402.jar../../jvm/java-1.8.0-openjdk-1.8.0/jre/lib/rt.jarjdbc-stdext-1.8.0.402.jarjdbc-stdext-1.8.0.402.jarjdbc-stdext-1.8.0.402.jar../../jvm/java-1.8.0-openjdk-1.8.0/jre/lib/rt.jarjndi-1.8.0.402.jar../../jvm/java-1.8.0-openjdk-1.8.0/jre/lib/rt.jarjndi-cos-1.8.0.402.jarjndi-cos-1.8.0.402.jar../../jvm/java-1.8.0-openjdk-1.8.0/jre/lib/rt.jarjndi-ldap-1.8.0.402.jarjndi-ldap-1.8.0.402.jar../../jvm/java-1.8.0-openjdk-1.8.0/jre/lib/rt.jarjndi-rmi-1.8.0.402.jarjndi-rmi-1.8.0.402.jarjndi-1.8.0.402.jar../../jvm/java-1.8.0-openjdk-1.8.0/jre/lib/jsse.jarjsse-1.8.0.402.jarjsse-1.8.0.402.jar../../jvm/java-1.8.0-openjdk-1.8.0/jre/lib/rt.jarsasl-1.8.0.402.jarsasl-1.8.0.402.jarjava-1.8.0-openjdk-1.8.0invalid32x32.gifinvalid32x32.gifinvalid32x32.gif../limited/US_export_policy.jarjava-1.8.0-openjdk-1.8.0/jrerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootjava-1_8_0-openjdk-1.8.0.402-150000.3.88.1.src.rpmconfig(java-1_8_0-openjdk-headless)jaasjava-1.8.0-headlessjava-1_8_0-openjdk-headlessjava-1_8_0-openjdk-headless(s390-64)java-headlessjava-openjdk-headlessjava-sasljcejdbc-stdextjndijndi-cosjndi-dnsjndi-ldapjndi-rmijre-1.8.0-headlessjre-1.8.0-openjdk-headlessjre-headlessjre-openjdk-headlessjsselibattach.so()(64bit)libattach.so(SUNWprivate_1.1)(64bit)libawt.so()(64bit)libawt_headless.so()(64bit)libawt_headless.so(SUNWprivate_1.1)(64bit)libdt_socket.so()(64bit)libdt_socket.so(SUNWprivate_1.1)(64bit)libfontmanager.so()(64bit)libfontmanager.so(SUNWprivate_1.1)(64bit)libhprof.so()(64bit)libhprof.so(SUNWprivate_1.1)(64bit)libinstrument.so()(64bit)libinstrument.so(SUNWprivate_1.1)(64bit)libj2gss.so()(64bit)libj2gss.so(SUNWprivate_1.1)(64bit)libj2krb5.so()(64bit)libj2pcsc.so()(64bit)libj2pcsc.so(SUNWprivate_1.1)(64bit)libj2pkcs11.so()(64bit)libj2pkcs11.so(SUNWprivate_1.1)(64bit)libj2sctp.so()(64bit)libj2sctp.so(SUNWprivate_1.1)(64bit)libjaas_unix.so()(64bit)libjava.so()(64bit)libjava.so(SUNWprivate_1.1)(64bit)libjava_crw_demo.so()(64bit)libjava_crw_demo.so(SUNWprivate_1.1)(64bit)libjavajpeg.so()(64bit)libjavajpeg.so(SUNWprivate_1.1)(64bit)libjavalcms.so()(64bit)libjavalcms.so(SUNWprivate_1.1)(64bit)libjdwp.so()(64bit)libjdwp.so(SUNWprivate_1.1)(64bit)libjli.so()(64bit)libjli.so(SUNWprivate_1.1)(64bit)libjsdt.so()(64bit)libjsdt.so(SUNWprivate_1.1)(64bit)libjsig.so()(64bit)libjsound.so()(64bit)libjsound.so(SUNWprivate_1.1)(64bit)libjvm.so()(64bit)libjvm.so(SUNWprivate_1.1)(64bit)libmanagement.so()(64bit)libmanagement.so(SUNWprivate_1.1)(64bit)libmlib_image.so()(64bit)libmlib_image.so(SUNWprivate_1.1)(64bit)libnet.so()(64bit)libnet.so(SUNWprivate_1.1)(64bit)libnio.so()(64bit)libnio.so(SUNWprivate_1.1)(64bit)libnpt.so()(64bit)libnpt.so(SUNWprivate_1.1)(64bit)libsunec.so()(64bit)libsunec.so(SUNWprivate_1.1)(64bit)libsystemconf.so()(64bit)libsystemconf.so(SUNWprivate_1.1)(64bit)libunpack.so()(64bit)libunpack.so(SUNWprivate_1.1)(64bit)libverify.so()(64bit)libverify.so(SUNWprivate_1.1)(64bit)libzip.so()(64bit)libzip.so(SUNWprivate_1.1)(64bit) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/shconfig(java-1_8_0-openjdk-headless)jpackage-utilslibawt.so()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.11)(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.2.4)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libffi.so.7()(64bit)libffi.so.7(LIBFFI_BASE_7.0)(64bit)libfontconfig.so.1()(64bit)libfreetype.so.6()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libjava.so()(64bit)libjava.so(SUNWprivate_1.1)(64bit)libjli.so()(64bit)libjli.so(SUNWprivate_1.1)(64bit)libjpeg.so.8()(64bit)libjpeg.so.8(LIBJPEG_8.0)(64bit)libjvm.so()(64bit)libjvm.so(SUNWprivate_1.1)(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)liblcms2.so.2()(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2)(64bit)libnet.so()(64bit)libnet.so(SUNWprivate_1.1)(64bit)libnio.so()(64bit)libnio.so(SUNWprivate_1.1)(64bit)libpcsclite.so.1()(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2)(64bit)libpthread.so.0(GLIBC_2.2.3)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libpthread.so.0(GLIBC_2.3.3)(64bit)libsctp.so.1()(64bit)libsctp.so.1(VERS_1)(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)libverify.so()(64bit)libverify.so(SUNWprivate_1.1)(64bit)libz.so.1()(64bit)mozilla-nssrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)update-alternativesupdate-alternatives1.8.0.402-150000.3.88.13.0.4-14.6.0-14.0-15.2-14.14.1e@eSa@dǢ@dRLc=@c@cbb@bJb#PbaX@aa(@af@ad'@a @aF`@`f@`!'__@_@____]@^@^^@^9\^.^&]Γ@]]W]1];\\O\~d\3?@[[t[@[:@[5@Z@Z@Zo YZ@YY@Y*@Y@YéYéY@YY@Yn@YYx@YqY;@XX+XX@X#Wv@WPW~D@W_WQq@WM|W!@VV>@V@V(UoU@UUUx&Uq@Ud`@UHU/@U.RU%@TE@TT-@TT[@T}TT@TT@T+@TTq@Ta@T`TXTPTAT?@fstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comschwab@suse.defstrba@suse.comfstrba@suse.comcoolo@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comschwab@suse.defstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comarchie.cobbs@gmail.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comjcejka@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comguillaume.gardet@opensuse.orgguillaume.gardet@opensuse.orgfstrba@suse.comfstrba@suse.comfstrba@suse.commliska@suse.czfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comasn@cryptomilk.orgfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comagraf@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comtchvatal@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comschwab@suse.defstrba@suse.comschwab@linux-m68k.orgfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.comfstrba@suse.com- Update to version jdk8u402 (icedtea-3.30.0) * Security fixes + JDK-8308204: Enhanced certificate processing + JDK-8314284, CVE-2024-20926, bsc#1218906: Enhance Nashorn performance + JDK-8314295, CVE-2024-20919, bsc#1218903: Enhance verification of verifier + JDK-8314307, CVE-2024-20921, bsc#1218905: Improve loop handling + JDK-8314468, CVE-2024-20918, bsc#1218907: Improve Compiler loops + JDK-8316976, CVE-2024-20945, bsc#1218909: Improve signature handling + JDK-8317547, CVE-2024-20952, bsc#1218911: Enhance TLS connection support * Import of OpenJDK 8 u402 build 06 + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion + JDK-8029995: accept yes/no for boolean krb5.conf settings + JDK-8159156: [TESTBUG] ReserveMemory test is not useful on Aix. + JDK-8176509: Use pandoc for converting build readme to html + JDK-8206179: com/sun/management/OperatingSystemMXBean/ /GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value + JDK-8207404: MulticastSocket tests failing on AIX + JDK-8212677: X11 default visual support for IM status window on VNC + JDK-8239365: ProcessBuilder test modifications for AIX execution + JDK-8271838: AmazonCA.java interop test fails + JDK-8285398: Cache the results of constraint checks + JDK-8285696: AlgorithmConstraints:permits not throwing IllegalArgumentException when 'alg' is null + JDK-8302017: Allocate BadPaddingException only if it will be thrown + JDK-8305329: [8u] Unify test libraries into single test library - step 1 + JDK-8307837: [8u] Check step in GHA should also print errors + JDK-8309088: security/infra/java/security/cert/ /CertPathValidator/certification/AmazonCA.java fails + JDK-8311813: C1: Uninitialized PhiResolver::_loop field + JDK-8312489: Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar + JDK-8312535: MidiSystem.getSoundbank() throws unexpected SecurityException + JDK-8315280: Bump update version of OpenJDK: 8u402 + JDK-8315506: C99 compatibility issue in LinuxNativeDispatcher + JDK-8317291: Missing null check for nmethod::is_native_method() + JDK-8317373: Add Telia Root CA v2 + JDK-8317374: Add Let's Encrypt ISRG Root X2 + JDK-8318759: Add four DigiCert root certificates + JDK-8319187: Add three eMudhra emSign roots + JDK-8319405: [s390] [jdk8] Increase javac default stack size for s390x zero + JDK-8320597: RSA signature verification fails on signed data that does not encode params correctly * Bug fixes + JDK-8324184: Windows VS2010 build failed with "error C2275: 'int64_t'"- Update to version jdk8u392 (icedtea-3.29.0) * October 2023 CPU * CVEs + CVE-2023-22067, bsc#1216379 + CVE-2023-22081, bsc#1216374 * Security fixes + JDK-8286503, JDK-8312367: Enhance security classes + JDK-8297856: Improve handling of Bidi characters + JDK-8303384: Improved communication in CORBA + JDK-8305815, JDK-8307278: Update Libpng to 1.6.39 + JDK-8309966: Enhanced TLS connections * Import of OpenJDK 8 u392 build 08 + JDK-6722928: Provide a default native GSS-API library on Windows + JDK-8040887: [TESTBUG] Remove test/runtime/6925573/SortMethodsTest.java + JDK-8042726: [TESTBUG] TEST.groups file was not updated after runtime/6925573/SortMethodsTest.java removal + JDK-8139348: Deprecate 3DES and RC4 in Kerberos + JDK-8173072: zipfs fails to handle incorrect info-zip "extended timestamp extra field" + JDK-8200468: Port the native GSS-API bridge to Windows + JDK-8202952: C2: Unexpected dead nodes after matching + JDK-8205399: Set node color on pinned HashMap.TreeNode deletion + JDK-8209115: adjust libsplashscreen linux ppc64le builds for easier libpng update + JDK-8214046: [macosx] Undecorated Frame does not Iconify when set to + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails intermittently due to NumberFormatException + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still contains some small errors + JDK-8232225: Rework the fix for JDK-8071483 + JDK-8242330: Arrays should be cloned in several JAAS Callback classes + JDK-8253269: The CheckCommonColors test should provide more info on failure + JDK-8283441: C2: segmentation fault in ciMethodBlocks::make_block_at(int) + JDK-8284910: Buffer clean in PasswordCallback + JDK-8287073: NPE from CgroupV2Subsystem.getInstance() + JDK-8287663: Add a regression test for JDK-8287073 + JDK-8295685: Update Libpng to 1.6.38 + JDK-8295894: Remove SECOM certificate that is expiring in September 2023 + JDK-8308788: [8u] Remove duplicate HaricaCA.java test + JDK-8309122: Bump update version of OpenJDK: 8u392 + JDK-8309143: [8u] fix archiving inconsistencies in GHA + JDK-8310026: [8u] make java_lang_String::hash_code consistent across platforms + JDK-8314960: Add Certigna Root CA - 2 + JDK-8315135: Memory leak in the native implementation of Pack200.Unpacker.unpack() + JDK-8317040: Exclude cleaner test failing on older releases - Added patch: * bsc1211968.patch + fix bsc#1211968: SLES12SP5 vulnerable to CVE-2015-4000 (Logjam)?- Update to version jdk8u382 (icedtea-3.28.0) * July 2023 CPU * CVEs + CVE-2023-22045, bsc#1213481 + CVE-2023-22049, bsc#1213482 * Security fixes + JDK-8298676: Enhanced Look and Feel + JDK-8300596: Enhance Jar Signature validation + JDK-8304468: Better array usages + JDK-8305312: Enhanced path handling * Import of OpenJDK 8 u382 build 05 + JDK-8072678: Wrong exception messages in java.awt.color.ICC_ColorSpace + JDK-8151460: Metaspace counters can have inconsistent values + JDK-8152432: Implement setting jtreg @requires properties vm.flavor, vm.bits, vm.compMode + JDK-8185736: missing default exception handler in calls to rethrow_Stub + JDK-8186801: Add regression test to test mapping based charsets (generated at build time) + JDK-8215105: java/awt/Robot/HiDPIScreenCapture/ /ScreenCaptureTest.java: Wrong Pixel Color + JDK-8241311: Move some charset mapping tests from closed to open + JDK-8263059: security/infra/java/security/cert/ /CertPathValidator/certification/ComodoCA.java fails due to revoked cert + JDK-8268558: [TESTBUG] Case 2 in TestP11KeyFactoryGetRSAKeySpec is skipped + JDK-8271199: Mutual TLS handshake fails signing client certificate with custom sensitive PKCS11 key + JDK-8276841: Add support for Visual Studio 2022 + JDK-8277881: Missing SessionID in TLS1.3 resumption in compatibility mode + JDK-8278851: Correct signer logic for jars signed with multiple digest algorithms + JDK-8282345: handle latest VS2022 in abstract_vm_version + JDK-8282600: SSLSocketImpl should not use user_canceled workaround when not necessary + JDK-8285515: (dc) DatagramChannel.disconnect fails with "Invalid argument" on macOS 12.4 + JDK-8289301: P11Cipher should not throw out of bounds exception during padding + JDK-8293232: Fix race condition in pkcs11 SessionManager + JDK-8293815: P11PSSSignature.engineUpdate should not print debug messages during normal operation + JDK-8295530: Update Zlib Data Compression Library to Version 1.2.13 + JDK-8298108: Add a regression test for JDK-8297684 + JDK-8298271: java/security/SignedJar/spi-calendar-provider/ /TestSPISigned.java failing on Windows + JDK-8301119: Support for GB18030-2022 + JDK-8301400: Allow additional characters for GB18030-2022 support + JDK-8302791: Add specific ClassLoader object to Proxy IllegalArgumentException message + JDK-8303028: Update system property for Java SE specification maintenance version + JDK-8303462: Bump update version of OpenJDK: 8u382 + JDK-8304760: Add 2 Microsoft TLS roots + JDK-8305165: [8u] ServiceThread::nmethods_do is not called to keep nmethods from being zombied while in the queue + JDK-8305681: Allow additional characters for GB18030-2022 (Level 2) support + JDK-8305975: Add TWCA Global Root CA + JDK-8307134: Add GTS root CAs + JDK-8307310: Backport the tests for JDK-8058969 and JDK-8039271 to the OpenJDK8 + JDK-8307531: [aarch64] JDK8 single-step debugging is extremely slow + JDK-8310947: gb18030-2000 not selectable with LANG=zh_CN.GB18030 after JDK-8301119- Update to version jdk8u372 (icedtea-3.27.0) * April 2023 CPU * CVEs + CVE-2023-21930, bsc#1210628 + CVE-2023-21937, bsc#1210631 + CVE-2023-21938, bsc#1210632 + CVE-2023-21939, bsc#1210634 + CVE-2023-21954, bsc#1210635 + CVE-2023-21967, bsc#1210636 + CVE-2023-21968, bsc#1210637 * Security fixes + JDK-8287404: Improve ping times + JDK-8288436: Improve Xalan supports + JDK-8294474: Better AES support + JDK-8295304: Runtime support improvements + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h prevents large memory allocation + JDK-8296676, JDK-8296622: Improve String platform support + JDK-8296684: Improve String platform support + JDK-8296692: Improve String platform support + JDK-8296700: Improve String platform support + JDK-8296832: Improve Swing platform support + JDK-8297371: Improve UTF8 representation redux + JDK-8298191: Enhance object reclamation process + JDK-8298310: Enhance TLS session negotiation + JDK-8298667: Improved path handling + JDK-8299129: Enhance NameService lookups * Import of OpenJDK 8 u372 build 07 + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/ /ScreenInsetsTest.java fails in Windows + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails + JDK-7124238: [macosx] Font in BasicHTML document is bigger than it should be + JDK-7124381: DragSourceListener.dragDropEnd() never been called on completion of dnd operation + JDK-8039888: [TEST_BUG] keyboard garbage after javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/ /WrongAltProcessing.java + JDK-8042098: [TESTBUG] Test sun/java2d/AcceleratedXORModeTest.java fails on Windows + JDK-8065422: Trailing dot in hostname causes TLS handshake to fail with SNI disabled + JDK-8072770: [TESTBUG] Some Introspector tests fail with a Java heap bigger than 4GB + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/ /TitleBarDoubleClick.html fails intermittently with timeout error + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/ /4251579/bug4251579.java failure due to timing + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/ /bug8024061.java fails on ubuntu + JDK-8156579: Two JavaBeans tests failed + JDK-8156581: Cleanup of ProblemList.txt + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/ /MenuItemIconTest.java always fail + JDK-8177560: @headful key can be removed from the tests for JavaSound + JDK-8196196: Headful tests should not be run in headless mode + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails + JDK-8197408: Bad pointer comparison and small cleanup in os_linux.cpp + JDK-8203485: [freetype] text rotated on 180 degrees is too narrow + JDK-8205959: Do not restart close if errno is EINTR + JDK-8216366: Add rationale to PER_CPU_SHARES define + JDK-8226236: win32: gc/metaspace/TestCapacityUntilGCWrapAround.java fails + JDK-8228585: jdk/internal/platform/cgroup/ /TestCgroupMetrics.java - NumberFormatException because of large long values (memory limit_in_bytes) + JDK-8229182: [TESTBUG] runtime/containers/docker/ /TestMemoryAwareness.java test fails on SLES12 + JDK-8229202: Docker reporting causes secondary crashes in error handling + JDK-8230305: Cgroups v2: Container awareness + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to recognize unified hierarchy + JDK-8232207: Linux os::available_memory re-reads cgroup configuration on every invocation + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is failing on macos + JDK-8234484: Add ability to configure third port for remote JMX + JDK-8237479: 8230305 causes slowdebug build failure + JDK-8239559: Cgroups: Incorrect detection logic on some systems + JDK-8239785: Cgroups: Incorrect detection logic on old systems in hotspot + JDK-8239827: The test OpenByUNCPathNameTest.java should be changed to be manual + JDK-8240189: [TESTBUG] Some cgroup tests are failing after JDK-8231111 + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039 and C2873 + JDK-8242468: VS2019 build missing vcruntime140_1.dll + JDK-8243543: jtreg test security/infra/java/security/cert/ /CertPathValidator/certification/BuypassCA.java fails + JDK-8244500: jtreg test error in test/hotspot/jtreg/ /containers/docker/TestMemoryAwareness.java + JDK-8245543: Cgroups: Incorrect detection logic on some systems (still reproducible) + JDK-8245654: Add Certigna Root CA + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit Windows + JDK-8248899: security/infra/java/security/cert/ /CertPathValidator/certification/QuoVadisCA.java fails, Certificate has been revoked + JDK-8252359: HotSpot Not Identifying it is Running in a Container + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if manually mounted cpusets exist + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using memory.high + JDK-8253727: [cgroups v2] Memory and swap limits reported incorrectly + JDK-8253797: [cgroups v2] Account for the fact that swap accounting is disabled on some systems + JDK-8253939: [TESTBUG] Increase coverage of the cgroups detection code + JDK-8254001: [Metrics] Enhance parsing of cgroup interface files for version detection + JDK-8254717: isAssignableFrom checks in KeyFactorySpi.engineGetKeySpec appear to be backwards + JDK-8254997: Remove unimplemented OSContainer::read_memory_limit_in_bytes + JDK-8257620: Do not use objc_msgSend_stret to get macOS version + JDK-8262379: Add regression test for JDK-8257746 + JDK-8263404: RsaPrivateKeySpec is always recognized as RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec + JDK-8266391: Replace use of reflection in jdk.internal.platform.Metrics + JDK-8270317: Large Allocation in CipherSuite + JDK-8275535: Retrying a failed authentication on multiple LDAP servers can lead to users blocked + JDK-8275650: Problemlist java/io/File/createTempFile/ /SpecialTempFile.java for Windows 11 + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu 21.10 + JDK-8280048: Missing comma in copyright header + JDK-8282398: EndingDotHostname.java test fails because SSL cert expired + JDK-8282511: Use fixed certificate validation date in SSLExampleCert template + JDK-8282947: JFR: Dump on shutdown live-locks in some conditions + JDK-8283606: Tests may fail with zh locale on MacOS + JDK-8284102: [TESTBUG] [11u] Retroactively add regression test for JDK-8272124 + JDK-8284690: [macos] VoiceOver : Getting java.lang.IllegalArgumentException: Invalid location on Editable JComboBox + JDK-8284756: [11u] Remove unused isUseContainerSupport in CgroupV1Subsystem + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile fails when named value doesn't exist + JDK-8286624: Regression Test CoordinateTruncationBug.java fails on OL8.3 + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts with freezer controller + JDK-8287109: Distrust.java failed with CertificateExpiredException + JDK-8287463: JFR: Disable TestDevNull.java on Windows + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer controller) was incomplete + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on cgroups v2 and crun + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u + JDK-8292083: Detected container memory limit may exceed physical machine memory + JDK-8292541: [Metrics] Reported memory limit may exceed physical machine memory + JDK-8293472: Incorrect container resource limit detection if manual cgroup fs mounts present + JDK-8293540: [Metrics] Incorrectly detected resource limits with additional cgroup fs mounts + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS markings + JDK-8294767: 8u contains two copies of test/../FileUtils.java, one uses JDK9+ features + JDK-8295322: Tests for JDK-8271459 were not backported to 11u + JDK-8295952: Problemlist existing compiler/rtm tests also on x86 + JDK-8295982: Failure in sun/security/tools/keytool/ /WeakAlg.java - ks: The process cannot access the file because it is being used by another process + JDK-8296480: java/security/cert/pkix/policyChanges/ /TestPolicy.java is failing + JDK-8296485: BuildEEBasicConstraints.java test fails with SunCertPathBuilderException + JDK-8296632: Write a test to verify the content change of TextArea sends TextEvent + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2 + JDK-8297329: [8u] hotspot needs to recognise VS2019 + JDK-8297739: Bump update version of OpenJDK: 8u372 + JDK-8297996: [8u] generated images are broken due to renaming of MSVC runtime DLL's + JDK-8298027: Remove SCCS id's from awt jtreg tests + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA for 8u + JDK-8299445: EndingDotHostname.java fails because of compilation errors + JDK-8299548: Fix hotspot/test/runtime/Metaspace/ /MaxMetaspaceSizeTest.java in 8u + JDK-8299804: Fix non-portable code in hotspot shell tests in 8u + JDK-8300014: Some backports placed the tests in the wrong location + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report invalid results on 32 bit systems + JDK-8301122: [8u] Fix unreliable vs2010 download link + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was backported to JDK8u without proper native wrapper + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on Linux without installed fontconfig + JDK-8301332: [8u] Fix writing of test files after the cgroups v2 backport + JDK-8301550: [8u] Enable additional linux build testing in GitHub + JDK-8301620: [8u] some shell tests are passed but have unexpected operator errors + JDK-8301760: Fix possible leak in SpNegoContext dispose + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391 + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391 + JDK-8304053: Revert os specific stubs for SystemMetrics + JDK-8305113: (tz) Update Timezone Data to 2023c- Update to version jdk8u362 (icedtea-3.26.0) * January 2023 CPU * CVEs + CVE-2023-21830, bsc#1207249 + CVE-2023-21843, bsc#1207248 * Security fixes + JDK-8285021: Improve CORBA communication + JDK-8286496: Improve Thread labels + JDK-8288516: Enhance font creation + JDK-8289350: Better media supports + JDK-8293554: Enhanced DH Key Exchanges + JDK-8293598: Enhance InetAddress address handling + JDK-8293717: Objective view of ObjectView + JDK-8293734: Improve BMP image handling + JDK-8293742: Better Banking of Sounds + JDK-8295687: Better BMP bounds * New features + Support for building with autoconf 2.71 * Import of OpenJDK 8 u362 build 09 + JDK-6885993: Named Thread: introduce print() and print_on(outputStream* st) methods + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in the JTable + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with timeout + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size. + JDK-8071530: Update OS detection code to reflect Windows 10 version change + JDK-8073464: GC workers do not have thread names + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/ /RobotWheelTest/RobotWheelTest fails for Mac only + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/ /RobotWheelTest.java fails + JDK-8148005: One byte may be corrupted by get_datetime_string() + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/ /ModalInternalFrameTest.java + JDK-8159720: Failure of C2 compilation with tiered prevents some C1 compilations + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in globalDefinitions_VisCPP.hpp + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems without cpuset.effective_cpus / cpuset.effective_mems + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image on AArch64 + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails with exitValue = 137 + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is failing on 32bit Windows + JDK-8253702: BigSur version number reported as 10.16, should be 11.nn + JDK-8255559: Leak File Descriptors Because of ResolverLocalFilesystem#engineResolveURI() + JDK-8265527: tools/javac/diags/CheckExamples.java fails after JDK-8078024 8u backport + JDK-8269039: Disable SHA-1 Signed JARs + JDK-8269850: Most JDK releases report macOS version 12 as 10.16 instead of 12.0 + JDK-8270344: Session resumption errors + JDK-8271459: C2: Missing NegativeArraySizeException when creating StringBuilder with negative capacity + JDK-8273176: handle latest VS2019 in abstract_vm_version + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java fails when GC cycles are not happening + JDK-8274840: Update OS detection code to recognize Windows 11 + JDK-8275887: jarsigner prints invalid digest/signature algorithm warnings if keysize is weak/disabled + JDK-8280890: Cannot use '-Djava.system.class.loader' with class loader in signed JAR + JDK-8283277: ISO 4217 Amendment 171 Update + JDK-8283903: GetContainerCpuLoad does not return the correct result in share mode + JDK-8284389: Improve stability of GHA Pre-submit testing by caching cygwin installer + JDK-8284622: Update versions of some Github Actions used in JDK workflow + JDK-8286582: Build fails on macos aarch64 when using - -with-zlib=bundled + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport of JDK-8185041) + JDK-8289549: ISO 4217 Amendment 172 Update + JDK-8292762: Remove .jcheck directories from jdk8u subcomponents + JDK-8293181: Bump update version of OpenJDK: 8u362 + JDK-8293461: Add a test for JDK-8290832 + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java still fails when GC cycles are not happening + JDK-8294307: ISO 4217 Amendment 173 Update + JDK-8294357: (tz) Update Timezone Data to 2022d + JDK-8294863: Enable partial tier1 testing in GHA for JDK8 + JDK-8295164: JDK 8 jdi tests should not use tasklist command on Windows + JDK-8295173: (tz) Update Timezone Data to 2022e + JDK-8295288: Some vm_flags tests associate with a wrong BugID + JDK-8295714: GHA ::set-output is deprecated and will be removed + JDK-8295723: security/infra/wycheproof/RunWycheproof.java fails with Assertion Error + JDK-8295915: Problemlist compiler/rtm failures specific to 8u + JDK-8295950: Enable langtools/tier1 in GHA for 8u + JDK-8296108: (tz) Update Timezone Data to 2022f + JDK-8296239: ISO 4217 Amendment 174 Update + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA for 8u + JDK-8296715: CLDR v42 update for tzdata 2022f + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/ /DefaultUseWithClient.java for 8u + JDK-8297804: (tz) Update Timezone Data to 2022g + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java fails for hr_HR + JDK-8299483: ProblemList java/text/Format/NumberFormat/ /CurrencyFormat.java + JDK-8300178: JDK-8286496 causes build failure on older GCC + JDK-8300225: JDK-8288516 causes build failure on Windows + VS2010 * Bug fixes + Don't run check-aes on Zero builds (pointless and slow) - Removed patch: * java-1_8_0-openjdk-autoconf27.patch + fixed upstream- Update to version jdk8u352 (icedtea-3.25.0) * October 2022 CPU * CVEs + CVE-2022-21619 (bsc#1204473) + CVE-2022-21626 (bsc#1204471) + CVE-2022-21624 (bsc#1204475) + CVE-2022-21628 (bsc#1204472) * Security fixes + JDK-8282252: Improve BigInteger/Decimal validation + JDK-8285662: Better permission resolution + JDK-8286511: Improve macro allocation + JDK-8286519: Better memory handling + JDK-8286526: Improve NTLM support + JDK-8286533: Key X509 usages + JDK-8286910: Improve JNDI lookups + JDK-8286918: Better HttpServer service + JDK-8288508: Enhance ECDSA usage * Import of OpenJDK 8 u352 + JDK-7131823: bug in GIFImageReader + JDK-7186258: InetAddress$Cache should replace currentTimeMillis with nanoTime for more precise and accurate + JDK-8028265: Add legacy tz tests to OpenJDK + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 - java.lang.AssertionError: expected [d:1234.000000] but found [d:1234,000000] + JDK-8049228: Improve multithreaded scalability of InetAddress cache + JDK-8071507: (ref) Clear phantom reference as soft and weak references do + JDK-8087283: Add support for the XML Signature here() function to the JDK XPath implementation + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java fails on Solaris11 Sparcv9 + JDK-8136354: [TEST_BUG] Test java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action for script + JDK-8139668: Generate README-build.html from markdown + JDK-8143847: Remove REF_CLEANER reference category + JDK-8147862: Null check too late in sun.net.httpserver.ServerImpl + JDK-8150669: C1 intrinsic for Class.isPrimitive + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH) throws java.lang.IllegalArgumentException in windows + JDK-8173339: AArch64: Fix minimum stack size computations + JDK-8173361: various crashes in JvmtiExport::post_compiled_method_load + JDK-8175797: (ref) Reference::enqueue method should clear the reference object before enqueuing + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue property is ignored + JDK-8183107: PKCS11 regression regarding checkKeySize + JDK-8193780: (ref) Remove the undocumented "jdk.lang.ref.disableClearBeforeEnqueue" system property + JDK-8194873: right ALT key hotkeys no longer work in Swing components + JDK-8201793: (ref) Reference object should not support cloning + JDK-8214427: probable bug in logic of ConcurrentHashMap.addCount() + JDK-8232950: SUNPKCS11 Provider incorrectly check key length for PSS Signatures. + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong result if Klass* is aligned to 32bit + JDK-8235218: Minimal VM is broken after JDK-8173361 + JDK-8235385: Crash on aarch64 JDK due to long offset + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client roles + JDK-8254178: Remove .hgignore + JDK-8254318: Remove .hgtags + JDK-8256722: handle VC++:1927 VS2019 in abstract_vm_version + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*) + JDK-8280963: Incorrect PrintFlags formatting on Windows + JDK-8282538: PKCS11 tests fail on CentOS Stream 9 + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee + JDK-8285400: Add '@apiNote' to the APIs defined in Java SE 8 MR 3 + JDK-8285497: Add system property for Java SE specification maintenance version + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it always throws UOE + JDK-8287508: The tests added to jdk-8 by 8235385 are to be ported to jdk-11 + JDK-8287521: Bump update version of OpenJDK: 8u352 + JDK-8288763: Pack200 extraction failure with invalid size + JDK-8288865: [aarch64] LDR instructions must use legitimized addresses + JDK-8290000: Bump macOS GitHub actions to macOS 11 + JDK-8292579: (tz) Update Timezone Data to 2022c + JDK-8292688: Support Security properties in security.testlibrary.Proc * AArch32 port + JDK-8292599: [aarch32] Crash due to missed CPU specific part of 8233019- make-jobserver-detection.patch: Fix detection of jobserver support- Update to version jdk8u345 (icedtea-3.24.0) * July 2022 CPU * Security fixes + JDK-8272243: Improve DER parsing + JDK-8272249: Better properties of loaded Properties + JDK-8277608: Address IP Addressing + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class compilation + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance MethodHandle invocations + JDK-8283190: Improve MIDI processing + JDK-8284370: Improve zlib usage + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan supports * Import of OpenJDK 8 u342 + JDK-8076190, bsc#1195163: Customizing the generation of a PKCS12 keystore + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/ /bcel/internal/util/ClassPath.java + JDK-8168926: C2: Bytecode escape analyzer crashes due to stack overflow + JDK-8170530: bash configure output contains a typo in a suggested library name + JDK-8190753: (zipfs): Accessing a large entry (> 2^31 bytes) leads to a negative initial size for ByteArrayOutputStream + JDK-8194154: System property user.dir should not be changed + JDK-8202142: jfr/event/io/TestInstrumentation is unstable + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error + JDK-8221988: add possibility to build with Visual Studio 2019 + JDK-8223396: [TESTBUG] several jfr tests do not clean up files created in /tmp + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java fails at-run shell MakeJAR.sh target + JDK-8235211: serviceability/attach/ /RemovingUnixDomainSocketTest.java fails with AttachNotSupportedException: Unable to open socket file + JDK-8244973: serviceability/attach/ /RemovingUnixDomainSocketTest.java fails "stderr was not empty" + JDK-8248876: LoadObject with bad base address created for exec file on linux + JDK-8255239: The timezone of the hs_err_pid log file is corrupted in Japanese locale + JDK-8261107: ArrayIndexOutOfBoundsException in the ICC_Profile.getInstance(InputStream) + JDK-8266187: Memory leak in appendBootClassPath() + JDK-8274658: ISO 4217 Amendment 170 Update + JDK-8274751: Drag And Drop hangs on Windows + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after upgrading compiler to VS2017 + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses wrong condition + JDK-8281814: Debuginfo.diz contains redundant build path after backport JDK-8025936 + JDK-8282458: Update .jcheck/conf file for 8u move to git + JDK-8282552: Bump update version of OpenJDK: 8u342 + JDK-8283350: (tz) Update Timezone Data to 2022a + JDK-8284620: CodeBuffer may leak _overflow_arena + JDK-8285445: cannot open file "NUL:" + JDK-8285523: Improve test java/io/FileOutputStream/ /OpenNUL.java + JDK-8285591: [11] add signum checks in DSA.java engineVerify + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with version from head + JDK-8286989: Build failure on macOS after 8281814 + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build * Import of OpenJDK 8 u345 + JDK-8290832: It is no longer possible to change "user.dir" in the JDK8 + JDK-8291568: Bump update version of OpenJDK: 8u345 - Removed patch: * JDK-8076190.patch + Included by upstream- Update to version jdk8u332 (icedtea-3.23.0) * April 2022 CPU * Security fixes + JDK-8269938: Enhance XML processing passes redux + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath expression handling + JDK-8272255: Completely handle MIDI files + JDK-8272261: Improve JFR recording file processing + JDK-8272594: Better record of recordings + JDK-8274221: More definite BER encodings + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object Identification + JDK-8277227: Better identification of OIDs + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation handler handling + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario processing + JDK-8278356: Improve file creation + JDK-8278449: Improve keychain support + JDK-8278805: Enhance BMP image loading + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo * Import of OpenJDK 8 u332 + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl and DurationImpl + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java + JDK-8037259: xerces update: xpointer update + JDK-8041523: Xerces Update: Serializer improvements from Xalan + JDK-8141508: java.lang.invoke.LambdaConversionException: Invalid receiver type + JDK-8162572: Update License Header for all JAXP sources + JDK-8167014: jdeps: Missing message: warn.skipped.entry + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5 + JDK-8202822: Add .git to .hgignore + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/ /trace001/trace001.java fails with Debuggee did not exit after 15 commands + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY when retrying POST request + JDK-8210283: Support git as an SCM alternative in the build + JDK-8218682: [TEST_BUG] DashOffset fails in mach5 + JDK-8225690: Multiple AttachListener threads can be created + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due to "exit code is 134" + JDK-8227815: Minimal VM: set_state is not a member of AttachListener + JDK-8240633: Memory leaks in the implementations of FileChooserUI + JDK-8241768: git needs .gitattributes + JDK-8247766: [aarch64] guarantee(val < (1U << nbits)) failed: Field too big for insn + JDK-8253147: The javax/swing/JPopupMenu/7154841/ /bug7154841.java fail on big screens + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node + JDK-8266749: AArch64: Backtracing broken on PAC enabled systems + JDK-8270290: NTLM authentication fails if HEAD request is used + JDK-8273229: Update OS detection code to recognize Windows Server 2022 + JDK-8273341: Update Siphash to version 1.0 + JDK-8273575: memory leak in appendBootClassPath(), paths must be deallocated + JDK-8274524: SSLSocket.close() hangs if it is called during the ssl handshake + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString() throws NPE + JDK-8277488: Add expiry exception for Digicert (geotrustglobalca) expiring in May 2022 + JDK-8279077: JFR crashes on Linux ppc due to missing crash protector in signal handler + JDK-8280060: The sun/rmi/server/Activation.java class use Thread.dumpStack() + JDK-8282300: Throws NamingException instead of InvalidNameException after JDK-8278972 + JDK-8282397: createTempFile method of java.io.File is failing when called with suffix of spaces character + JDK-8284548: Invalid XPath expression causes StringIndexOutOfBoundsException + JDK-8284920: Incorrect Token type causes XPath expression to return empty result + JDK-8284936: Fix Java 7 bootstrap breakage due to use of Arrays.stream * Backports + JDK-8031567: Better model for storing source revision information + JDK-8170385: JDK-8031567 broke source bundles + JDK-8170392: JDK-8031567 broke builds from source bundles + JDK-8253424: Add support for running pre-submit testing using GitHub Actions + JDK-8253865: Pre-submit testing using GitHub Actions does not detect failures reliably + JDK-8254054: Pre-submit testing using GitHub Actions should not use the deprecated set-env command + JDK-8254173: Add Zero, Minimal hotspot targets to submit workflow + JDK-8254175: Build no-pch configuration in debug mode for submit checks + JDK-8254282: Add Linux x86_32 builds to submit workflow + JDK-8255305: Add Linux x86_32 tier1 to submit workflow + JDK-8255352: Archive important test outputs in submit workflow + JDK-8255373: Submit workflow artifact name is always "test-results_.zip" + JDK-8255895: Submit workflow artifacts miss hs_errs/replays due to ZIP include mismatch + JDK-8256127: Add cross-compiled foreign architectures builds to submit workflow + JDK-8256277: Github Action build on macOS should define OS and Xcode versions + JDK-8256354: Github Action build on Windows should define OS and MSVC versions + JDK-8256393: Github Actions build on Linux should define OS and GCC versions + JDK-8256414: add optimized build to submit workflow + JDK-8256747: GitHub Actions: decouple the hotspot build-only jobs from Linux x64 testing + JDK-8257056: Submit workflow should apt-get update to avoid package installation errors + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could not configure libc6:i386" + JDK-8260460: GitHub actions still fail on Linux x86_32 with "Could not configure libc6:i386" + JDK-8263667: Avoid running GitHub actions on branches named pr/* + JDK-8282225: GHA: Allow one concurrent run per PR only + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only * Bug fixes + GH002: Only add -Wno-unused-parameter on gcc and clang compilers. + GH004: Fix naming of sockaddr_in6 variable (sa6->him6) in SOCKETADDRESS union on Windows + GH007: Fix NetworkInterface_winXP.c variable declarations to compile on VS2010 + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk + GH012: Building from tarball broken by bad backport of JDK-8210283 * Shenandoah + JDK-8260632: Build failures after JDK-8253353- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71 as autoconf 2.59 or later- Update to version jdk8u322 (icedtea-3.22.0) * January 2022 CPU * Security fixes + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM serialization + JDK-8268488: More valuable DerValues + JDK-8268494: Better inlining of inlined interfaces + JDK-8268512: More content for ContentInfo + JDK-8268795: Enhance digests of Jar files + JDK-8268801: Improve PKCS attribute handling + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String matching + JDK-8269151: Better construction of EncryptedPrivateKeyInfo + JDK-8269944: Better HTTP transport redux + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String constructions + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction of Identity maps + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of URIs + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser configuration management + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of XML entities + JDK-8271962: Better TrueType font loading + JDK-8271968: Better canonical naming + JDK-8271987: Manifest improved manifest entries + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array indexing + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar Verification + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms for transport + JDK-8272272: Enhance jcmd communication + JDK-8272462: Enhance image handling + JDK-8273290: Enhance sound handling + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image support + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP processing * Import of OpenJDK 8 u322 + JDK-6801613: Cross-platform pageDialog and printDialog top margin entry broken + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/ /MetalUtils/bug6190373.java fails NPE since 7u25b03 + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/ /bug5076514.java failed since jdk8b108 + JDK-8041928: MouseEvent.getModifiersEx gives wrong result + JDK-8042199: The build of J2DBench via makefile is broken after the JDK-8005402 + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with ENOMEM when joining group (OS X 10.9) + JDK-8048021: Remove @version tag in jaxp repo + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on lzcnt and tzcnt use incorrect assumption about REXB prefix usage + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and java/beans/XMLEncoder/java_awt_GridBagLayout.java + JDK-8066588: javax/management/remote/mandatory/connectio /RMIConnector_NPETest.java fails to compile + JDK-8066652: Default TimeZone is GMT not local if user.timezone is invalid on Mac OS + JDK-8069034: gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java nightly failure + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm failing after win compiler upgrade + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and BufferedImage.TYPE_INT_ARGB_PRE is blank + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java failed because image was not generated + JDK-8140472: java/net/ipv6tests/TcpTest.java failed intermittently with java.net.BindException: Address already in use: NET_Bind + JDK-8147051: StaxEntityResolverWrapper should create StaxXMLInputSource with a resolver indicator + JDK-8148915: Intermittent failures of bug6400879.java + JDK-8176837: SunPKCS11 provider needs to check more details on PKCS11 Mechanism + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be 25% black + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in networking tests + JDK-8182036: Load from initializing arraycopy uses wrong memory state + JDK-8183369: RFC unconformity of HttpURLConnection with proxy + JDK-8183543: Aarch64: C2 compilation often fails with "failed spill-split-recycle sanity check" + JDK-8187450: JNI local refs exceeds capacity warning in NetworkInterface::getAll + JDK-8187649: ArrayIndexOutOfBoundsException in java.util.JapaneseImperialCalendar + JDK-8190482: InnocuousThread creation should not require the caller to possess enableContextClassLoaderOverride + JDK-8190793: Httpserver does not detect truncated request body + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java fail + JDK-8202788: Explicitly reclaim cached thread-local direct buffers at thread exit + JDK-8210058: Algorithmic Italic font leans opposite angle in Printing + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs instead of aliased B&W glyphs + JDK-8225082: Remove IdenTrust certificate that is expiring in September 2021 + JDK-8225083: Remove Google certificate that is expiring in December 2021 + JDK-8226806: [macOS 10.14] Methods of Java Robot should be called from appropriate thread + JDK-8231254: (fs) Add test for macOS Catalina changes to protect system software + JDK-8231438: [macOS] Dark mode for the desktop is not supported + JDK-8232178: MacVolumesTest failed after upgrade to MacOS Catalina + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/ /EqualityTest/EqualityTest.java may fail + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/ /DrawImageBG/SystemBgColorTest.java fails + JDK-8236897: Fix the copyright header for pkcs11gcm2.h + JDK-8237499: JFR: Include stack trace in the ThreadStart event + JDK-8239886: Minimal VM build fails after JDK-8237499 + JDK-8261397: Try Catch Method Failing to Work When Dividing An Integer By 0 + JDK-8262731: [macOS] Exception from "Printable.print" is swallowed during "PrinterJob.print" + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/ /PageDialogMarginTest.java catches all exceptions + JDK-8273308: PatternMatchTest.java fails on CI + JDK-8273342: Null pointer dereference in classFileParser.cpp:2817 + JDK-8273826: Correct Manifest file name and NPE checks + JDK-8273968: JCK javax_xml tests fail in CI + JDK-8274407: (tz) Update Timezone Data to 2021c + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b + JDK-8274468: TimeZoneTest.java fails with tzdata2021b + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient incorrectly check request method when set to POST + JDK-8275766: (tz) Update Timezone Data to 2021e + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e + JDK-8276536: Update TimeZoneNames files to follow the changes made by JDK-8275766 - Added patch: * JDK-8076190.patch + backport reviewed fix for JDK-8076190 Customizing the generation of a PKCS12 keystore (bsc#1195163)- Removed patch: * comment-nss-security-provider.patch + there is a configure-time option to do exactly the same thing - Modified patch: * fips.patch + allow plain key import, unless disabled with - Dcom.suse.fips.plainKeySupport=false command-line option- Modified patch: * fips.patch + When system crypto policy files are not available, use the information from the java.security file that we distribute with OpenJDK as a fallback. (bsc#1193314, bsc#1193444, bsc#1193491)- Modified patch: * fips.patch + return in native code after generating java.io.IOException- Update to version jdk8u312 (icedtea-3.21.0) * October 2021 CPU * Security fixes + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM permits wrong Throw ClassFormatError if InnerClasses attribute's inner_class_info_index is 0 + JDK-8161016: Strange behavior of URLConnection with proxy + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default enabled cipher suites preference + JDK-8254967, CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session close + JDK-8263314: Enhance XML Dsig modes + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors + JDK-8265574: Improve handling of sheets + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for RTF kit + JDK-8265776: Improve Stream handling for SSL + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing support + JDK-8266103: Better specified spec values + JDK-8266109: More Resilient Classloading + JDK-8266115: More Manifest Jar Loading + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore integrity + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained Delegation + JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic + JDK-8267712: Better LDAP reference processing + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client handshaking + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support + JDK-8268193: Improve requests of certificates + JDK-8268199: Correct certificate requests + JDK-8268506: More Manifest Digests + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session identification + JDK-8269624: Enhance method selection support + JDK-8270398: Enhance canonicalization + JDK-8270404: Better canonicalization * Import of OpenJDK 8 u312 build 01 + JDK-7146776: deadlock between URLStreamHandler.getHostAddress and file.Handler.openconnection + JDK-8004148: NPE in sun.awt.SunToolkit.getWindowDeactivationTime + JDK-8027154: [TESTBUG] Test java/awt/Mouse/ /GetMousePositionTest/GetMousePositionWithPopup.java fails + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should check that the subprocess hasn't terminated + JDK-8035424: (reflect) Performance problem in sun.reflect.generics.parser.SignatureParser + JDK-8042557: compiler/uncommontrap/ /TestSpecTrapClassUnloading.java fails with: GC triggered before VM initialization completed + JDK-8054118: java/net/ipv6tests/UdpTest.java failed intermittently + JDK-8065215: Print warning summary at end of configure + JDK-8072767: DefaultCellEditor for comboBox creates ActionEvent with wrong source object + JDK-8079891: Store configure log in $BUILD/configure.log + JDK-8080082: configure fails if you create an empty directory and then run configure from it + JDK-8086003: Test fails on OSX with java.lang.RuntimeException 'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3' missing + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java failed due to unexpected IP address + JDK-8156584: Initialization race in sun.security.x509.AlgorithmId.get + JDK-8166673: The new implementation of Robot.waitForIdle() may hang + JDK-8170467: (reflect) Optimize SignatureParser's use of StringBuilders + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails with Sequence tag error + JDK-8214418: half-closed SSLEngine status may cause application dead loop + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE parameters cannot be read in Java 11 + JDK-8220786: Create new switch to redirect error reporting output to stdout or stderr + JDK-8229243: SunPKCS11-Solaris provider tests failing on Solaris 11.4 + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong handling of stoppedMixers + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in Windows Print + JDK-8241248: NullPointerException in sun.security.ssl.HKDF.extract(HKDF.java:93) + JDK-8248901: Signed immediate support in .../share/assembler.hpp is broken. + JDK-8259338: Add expiry exception for identrustdstx3 alias to VerifyCACerts.java test + JDK-8262000: jdk/jfr/event/gc/detailed/ /TestPromotionFailedEventWithParallelScavenge.java failed with "OutOfMemoryError: Java heap space" + JDK-8262829: Native crash in Win32PrintServiceLookup.getAllPrinterNames() + JDK-8263311: Watch registry changes for remote printers update instead of polling + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after JDK-8211301 in older xcode + JDK-8265978: make test should look for more locations when searching for exit code + JDK-8269810: [8u] Update generated_configure.sh after JDK-8250876 backport + JDK-8269953: config.log is not in build directory after 8u backport of JDK-8079891 + JDK-8271466: StackGap test fails on aarch64 due to "-m64" * Import of OpenJDK 8 u312 build 02 + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some offline cpus are present and cpusets.effective_cpus is not available + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns incorrect CPU load inside a container * Import of OpenJDK 8 u312 build 03 + JDK-8237495: Java MIDI fails with a dereferenced memory error when asked to send a raw 0xF7 + JDK-8264752: SIGFPE crash with option FlightRecorderOptions:threadbuffersize=30M + JDK-8266206: Build failure after JDK-8264752 with older GCCs + JDK-8270137: Kerberos Credential Retrieval from Cache not Working in Cross-Realm Setup + JDK-8272214: [8u] Build failure after backport of JDK-8248901 * Import of OpenJDK 8 u312 build 04 + JDK-6847157: java.lang.NullPointerException: HDC for component at sun.java2d.loops.Blit.Blit + JDK-8176837: SunPKCS11 provider needs to check more details on PKCS11 Mechanism + JDK-8194246: JVM crashes when calling getStackTrace if stack contains a method that is a member of a very large class + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header files + JDK-8263382: java/util/logging/ParentLoggersTest.java failed with "checkLoggers: getLoggerNames() returned unexpected loggers" + JDK-8268103: JNI functions incorrectly return a double after JDK-8265836 + JDK-8269594: assert(_handle_mark_nesting > 1) failed: memory leak: allocating handle outside HandleMark + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as unsigned short + JDK-8269882: stack-use-after-scope in NewObjectA * Import of OpenJDK 8 u312 build 05 + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline + JDK-8022323: [JavaSecurityScanner] review package com.sun.management.* Native methods should be private + JDK-8131062: aarch64: add support for GHASH acceleration + JDK-8134869: AARCH64: GHASH intrinsic is not optimal + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports incorrect process cpu usage in containers + JDK-8272124: Cgroup v1 initialization causes NullPointerException when cgroup path contains colon + JDK-8272714: [8u] Build failure after backport of JDK-8248901 with MSVC 2013 * Import of OpenJDK 8 u312 build 06 + JDK-8268965: TCP Connection Reset when connecting simple socket to SSL server + JDK-8272643: Backout JDK-8176837 from 8u312 * Import of OpenJDK 8 u312 build 07 + JDK-8157404: Unable to read certain PKCS12 keystores from SequenceInputStream + JDK-8222751: closed/test/jdk/sun/security/util/ /DerIndefLenConverter/IndefBerPkcs12.java fail + JDK-8269763: The JEditorPane is blank after JDK-8265167 * Shenandoah + [backport] 8269661: JNI_GetStringCritical does not lock char array + Re-cast JNI critical strings patch to be Shenandoah-specific- Remove the icedtea-sound backend, since all its functionality is in the default java sound backends- Added patches: * comment-nss-security-provider.patch + Comment this provider since it is not passing the compliance tests * fips.patch + Implement fips mode- riscv64-zero.patch: Add support for riscv64 (zero VM)- Update to version jdk8u302 (icedtea 3.20.0) * July 2021 CPU * Security fixes + JDK-8256157: Improve bytecode assembly + JDK-8256491: Better HTTP transport + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file transfers + JDK-8260453: Improve Font Bounding + JDK-8260960: Signs of jarsigner signing + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file validation + JDK-8262380: Enhance XML processing passes + JDK-8262403: Enhanced data transfer + JDK-8262410: Enhanced rules for zones + JDK-8262477: Enhance String Conclusions + JDK-8262967: Improve Zip file support + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler validation + JDK-8264079: Improve abstractions + JDK-8264460: Improve NTLM support * Import of OpenJDK 8 u302 build 01 + JDK-6878250: (so) IllegalBlockingModeException thrown when reading from a closed SocketChannel's InputStream + JDK-7059970: Test case: javax/imageio/plugins/png/ /ITXtTest.java is not closing a file + JDK-8030123: java/beans/Introspector/Test8027648.java fails + JDK-8033289: clang: clean up unused function warning + JDK-8036095: RMI tests using testlibrary.RMID and testlibrary.JavaVM do not pass through vmoptions + JDK-8042891: Format issues embedded in macros for two g1 source files + JDK-8055754: filemap.cpp does not compile with clang + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError + JDK-8066508: JTReg tests timeout on slow devices when run using JPRT + JDK-8066807: langtools/test/Makefile should use -agentvm not - samevm + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers crash fastdebug VM with assert(limit == __null || limit <= nm->code_end()) in RelocIterator::initialize + JDK-8073446: TimeZone getOffset API does not return a dst offset between years 2038-2137 + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java heap space: MaxHeap shrinked by MaxRAMFraction + JDK-8077364: "if( !this )" construct prevents build on Xcode 6.3 + JDK-8130308: Too low memory usage in TestPromotionFromSurvivorToTenuredAfterMinorGC.java + JDK-8132148: G1 hs_err region dump legend out of sync with region values + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java might fail on embedded + JDK-8134672: [TEST_BUG] Some tests should check isDisplayChangeSupported + JDK-8134883: C1 hard crash in range check elimination in Nashorn test262parallel + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed regtests for jigsaw + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java timed out intermittently + JDK-8159898: Negative array size in java/beans/Introspector/Test8027905.java + JDK-8166046: [TESTBUG] compiler/stringopts/ /TestStringObjectInitialization.java fails with OOME + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with OOME + JDK-8177809: File.lastModified() is losing milliseconds (always ends in 000) + JDK-8178403: DirectAudio in JavaSound may hang and leak + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows because of extra-'' + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails intermittently + JDK-8190332: PngReader throws NegativeArraySizeException/OOM error when IHDR width is very large + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails with "Initial heap size set to a larger value than the maximum heap size" + JDK-8191955: AArch64: incorrect prefetch distance causes an internal error + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails with OOM + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined + JDK-8203196: C1 emits incorrect code due to integer overflow in _tableswitch keys + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java failed with "Read timed out" + JDK-8209996: [PPC64] Fix JFR profiling + JDK-8214345: infinite recursion while checking super class + JDK-8217230: assert(t == t_no_spec) failure in NodeHash::check_no_speculative_types() + JDK-8217348: assert(thread->is_Java_thread()) failed: just checking + JDK-8225081: Remove Telia Company CA certificate expiring in April 2021 + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails intermittently with NPE + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64 line for pns + JDK-8231949: [PPC64, s390]: Make async profiling more reliable + JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater() + JDK-8241649: Optimize Character.toString + JDK-8243559: Remove root certificates with 1024-bit keys + JDK-8247350: [aarch64] assert(false) failed: wrong size of mach node + JDK-8249278: Revert JDK-8226253 which breaks the spec of AccessibleState.SHOWING for JList + JDK-8255086: Update the root locale display names + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too + JDK-8257999: Parallel GC crash in gc/parallel/ /TestDynShrinkHeap.java: new region is not in covered_region + JDK-8258419: RSA cipher buffer cleanup + JDK-8258669: fastdebug jvm crashes when do event based tracing for monitor inflation + JDK-8258753: StartTlsResponse.close() hangs due to synchronization issues + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails "assert(covered_region.contains(new_memregion)) failed: new region is not in covered_region" + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use condition is incorrect + JDK-8259886: Improve SSL session cache performance and scalability + JDK-8260029: aarch64: fix typo in verify_oop_array + JDK-8260236: better init AnnotationCollector _contended_group + JDK-8260255: C1: LoopInvariantCodeMotion constructor can leave some fields uninitialized + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail with jtreg 4.2 + JDK-8260704: ParallelGC: oldgen expansion needs release-store for _end + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption when the underlying mechanism has no padding + JDK-8261867: Backport relevant test changes & additions from JDK-8130125 + JDK-8262110: DST starts from incorrect time in 2038 + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt stack + JDK-8262730: Enable jdk8u MacOS external debug symbols + JDK-8262864: No debug symbols in image for Windows - -with-native-debug-symbols=external + JDK-8263061: copy wrong unpack200 debuginfo to bin directory after 8252395 + JDK-8263504: Some OutputMachOpcodes fields are uninitialized + JDK-8263600: change rmidRunning to a simple lookup + JDK-8264509: jdk8u MacOS zipped debug symbols won't build + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting to write an uninitialized event field: type + JDK-8264816: Weak handles leak causes GC to take longer + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1: possible overflow when strength reducing integer multiply by constant) * Import of OpenJDK 8 u302 build 02 + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc header * Import of OpenJDK 8 u302 build 03 + JDK-8019470: Changes needed to compile JDK 8 on MacOS with clang compiler + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1 + JDK-8241829: Cleanup the code for PrinterJob on windows + JDK-8252883: AccessDeniedException caused by delayed file deletion on Windows + JDK-8256818: SSLSocket that is never bound or connected leaks socket resources + JDK-8257670: sun/security/ssl/SSLSocketImpl/ /SSLSocketLeak.java reports leaks + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/ /SSLSocketLeak.java as automatic test + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java again reports leaks after JDK-8257884 + JDK-8264640: CMS ParScanClosure misses a barrier * Import of OpenJDK 8 u302 build 04 + JDK-8032050: Clean up for java/rmi/activation/Activatable/ /shutdownGracefully/ShutdownGracefully.java + JDK-8043264: hsdis library not picked up correctly on expected paths + JDK-8130430: [TEST_BUG] remove unnecessary internal calls from javax/swing/JRadioButton/8075609/bug8075609.java + JDK-8206243: java -XshowSettings fails if memory.limit_in_bytes overflows LONG.max + JDK-8206925: Support the certificate_authorities extension + JDK-8228757: Fail fast if the handshake type is unknown + JDK-8242565: Policy initialization issues when the denyAfter constraint is enabled + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209) + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect + JDK-8262446: DragAndDrop hangs on Windows + JDK-8265666: Enable AIX build platform to make external debug symbols * Import of OpenJDK 8 u302 build 05 + JDK-6990210: [TEST_BUG] EventDispatchThread/ /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome + JDK-7106851: Test should not use System.exit + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/ /bug4202954.java fails + JDK-8035000: clean up ActivationLibrary.DestroyThread + JDK-8037825: Fix warnings and enable "warnings as errors" in serviceability native libraries + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9 with clang + JDK-8047939: [TESTBUG] Rewrite test/runtime/8001071/Test8001071.sh + JDK-8074835: Resolve disabled warnings for libj2gss + JDK-8074836: Resolve disabled warnings for libosxkrb5 + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/ /bug8032878.java fails in WindowsClassicLookAndFeel + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/ /CustomComboBoxFocusTest.java fails on Windows, Solaris Sparcv9 and Linux but passes on MacOSX + JDK-8172188: JDI tests fail due to "permission denied" when creating temp file + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java fails + JDK-8202299: Java Keystore fails to load PKCS12/PFX certificates created in WindowsServer2016 + JDK-8239053: [8u] clean up undefined-var-template warnings + JDK-8239400: [8u] clean up undefined-var-template warnings + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is unstable + JDK-8250876: Fix issues with cross-compile on macos + JDK-8254631: Better support ALPN byte wire values in SunJSSE + JDK-8265462: Handle multiple slots in the NSS Internal Module from SunPKCS11's Secmod + JDK-8266723: JFR periodic events are causing extra allocations + JDK-8266929: Unable to use algorithms from 3p providers + JDK-8267235: [macos_aarch64] InterpreterRuntime::throw_pending_exception messing up LR results in crash + JDK-8267426: MonitorVmStartTerminate test timed out on Embedded VM + JDK-8267689: [aarch64] Crash due to bad shift in indirect addressing mode * Import of OpenJDK 8 u302 build 06 + JDK-8267545: [8u] Enable Xcode 12 builds on macOS + JDK-8268444: keytool -v -list print is incorrect after backport JDK-8141457 * Import of OpenJDK 8 u302 build 07 + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs with warnings as errors on format-overflow + JDK-8269468: JDK-8269388 breaks the build on older GCCs * Import of OpenJDK 8 u302 build 08 + JDK-8270533: AArch64: size_fits_all_mem_uses should return false if its output is a CAS * Shenandoah + [backport] 8259580: Shenandoah: uninitialized label in VerifyThreadGCState + [backport] 8259954: gc/shenandoah/mxbeans tests fail with - Xcomp + [backport] 8261251: Shenandoah: Use object size for full GC humongous + [backport] 8261413: Shenandoah: Disable class-unloading in I-U mode + [backport] 8265239: Shenandoah: Shenandoah heap region count could be off by 1 + [backport] 8266802: Shenandoah: Round up region size to page size unconditionally + [backport] 8267561: Shenandoah: Reference processing not properly setup for outside of cycle degenerated GC + [backport] 8268127: Shenandoah: Heap size may be too small for region to align to large page size + [backport] 8268699: Shenandoah: Add test for JDK-8268127 + Shenandoah: Process weak roots during class unloading cycle- Added patch: * tls13extensions.patch + make tlsv1.2 client hello not emit the optional tlsv1.3 extensions (fixes bsc#1184639)- Update to version jdk8u292 (icedtea 3.19.0) * April 2021 CPU * Security fixes + JDK-8227467: Better class method invocations + JDK-8244473: Contextualize registration for JNDI + JDK-8244543: Enhanced handling of abstract classes + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous processing + JDK-8253799: Make lists of normal filenames * New features + PR3835: Populate unique SystemTap suffix from configure * Import of OpenJDK 8 u292 build 01 + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/ /PDialogTest.java needs update by removing a infinite loop + JDK-8031126: java/lang/management/ThreadMXBean/ /ThreadUserTime.java fails intermittently + JDK-8035166: Remove dependency on EC classes from pkcs11 provider + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/ /LogGeneratedClassesTest.java - assertion error + JDK-8078450: Implement consistent process for quarantine of tests + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java fails due to wrongly typed bugid + JDK-8081547: Prepare client libs regression tests for running in a concurrent, headless jtreg environment + JDK-8141457: keytool default cert fingerprint algorithm should be SHA-256 + JDK-8150204: (fs) Enhance java/nio/file/Files/ /probeContentType/Basic.java debugging output + JDK-8160217: JavaSound should clean up resources better + JDK-8163363: AArch64: Stack size in tools/launcher/ /Settings.java needs to be adjusted + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and NodeList.item methods + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false) failed: unexpected yanked node + JDK-8185934: keytool shows "Signature algorithm: SHA1withECDSA, -1-bit key" + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64 + JDK-8195685: AArch64 port of 8174962: Better interface invocations + JDK-8202343: Disable TLS 1.0 and 1.1 + JDK-8211339: NPE during SSL handshake caused by HostnameChecker + JDK-8216987: ciMethodData::load_data() unpacks MDOs with non-atomic copy + JDK-8217338: [Containers] Improve systemd slice memory limit support + JDK-8223186: HotSpot compile warnings from GCC 9 + JDK-8225805: Java Access Bridge does not close the logger + JDK-8226899: Problemlist compiler/rtm tests + JDK-8227642: [TESTBUG] Make docker tests podman compatible + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642 + JDK-8229284: jdk/internal/platform/cgroup/ /TestCgroupMetrics.java fails for - memory:getMemoryUsage + JDK-8230388: Problemlist additional compiler/rtm tests + JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests support TLSv1.3 + JDK-8234728: Some security tests should support TLSv1.3 + JDK-8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property. + JDK-8238579: HttpsURLConnection drops the timeout and hangs forever in read + JDK-8242141: New System Properties to configure the TLS signature schemes + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText warnings on Catalina when building with Xcode 11 + JDK-8249183: JVM crash in "AwtFrame::WmSize" method + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows + JDK-8250984: Memory Docker tests fail on some Linux kernels w/o cgroupv1 swap limit capabilities + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/ /DisposeFrameOnDragTest.java fails on Windows + JDK-8253368: TLS connection always receives close_notify exception + JDK-8253476: TestUseContainerSupport.java fails on some Linux kernels w/o swap limit capabilities + JDK-8253932: SSL debug log prints incorrect caller info + JDK-8254854: [cgroups v1] Metric limits not properly detected on some join controller combinations + JDK-8255908: ExceptionInInitializerError due to UncheckedIOException while initializing cgroupv1 subsystem + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/ /StreamFlush.java + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/ /DefaultProperties.java failed + JDK-8257192: Integrate AArch64 JIT port into 8u + JDK-8258079: Eliminate ParNew's use of klass_or_null() + JDK-8258241: [8u] Missing doPrivileged() hunks from JDK-8226575 + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder .rotateDisk() + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/ /swing/JRadioButton/8041561/bug8041561.java changes + JDK-8258933: G1 needs klass_or_null_acquire + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert will + JDK-8259384: CUP version wrong in THIRD_PARTY_README after JDK-8233548 + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport * Import of OpenJDK 8 u292 build 02 + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI .getbaseLine fails with IllegalArgumentException + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails in headless mode + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not highlighted in GTKLookAndFeel + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11 after failures * Import of OpenJDK 8 u292 build 03 + JDK-8145051: Wrong parameter name in synthetic lambda method leads to verifier error + JDK-8172404: Tools should warn if weak algorithms are used before restricting them + JDK-8209333: Socket reset issue for TLS 1.3 socket close + JDK-8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl + JDK-8239091: Reversed arguments in call to strstr in freetype "debug" code. + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use fiber-friendly java.util.concurrent.locks in JSSE" + JDK-8255880: UI of Swing components is not redrawn after their internal state changed + JDK-8256682: JDK-8202343 is incomplete + JDK-8260930: AARCH64: Invalid value passed to critical JNI function * Import of OpenJDK 8 u292 build 04 + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder .toString when using Shitft_JIS + JDK-8158525: Update a few java/net tests to use the loopback address instead of the host address + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead of 63 + JDK-8225435: Upgrade IANA Language Subtag Registry to the latest for JDK14 + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions + JDK-8235311: Tag mismatch may alert bad_record_mac + JDK-8236500: Windows ucrt.dll should be looked up in versioned WINSDK subdirectory + JDK-8260349: Cannot programmatically retrieve Metaspace max set via JAVA_TOOL_OPTIONS + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to build with VS2017 + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java timed out intermittently * Import of OpenJDK 8 u292 build 05 + JDK-6345095: regression test EmptyClipRenderingTest fails + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java fails with OOME during System.out.println + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream readDouble() conversion to long mishandled + JDK-7112454: TEST_BUG: java/awt/Choice/ /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html failed + JDK-7131835: [TEST_BUG] Test does not consider that the rounded edges of the window in Mac OS 10.7 + JDK-7185221: [macosx] Regtest should not throw exception if a suitable display mode found + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not support OS X + JDK-8078024: javac, several incorporation steps are silently failing when an error should be reported + JDK-8129626: G1: set_in_progress() and clear_started() needs a barrier on non-TSO platforms + JDK-8211301: [macos] support full window content options + JDK-8240353: AArch64: missing support for - XX:+ExtendedDTraceProbes in C1 + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit + JDK-8257746: Regression introduced with JDK-8250984 - memory might be null in some machines + JDK-8261231: Windows IME was disabled after DnD operation + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer memory * Import of OpenJDK 8 u292 build 06 + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f * Import of OpenJDK 8 u292 build 07 + JDK-8263008: AARCH64: Add debug info for libsaproc.so * Import of OpenJDK 8 u292 build 08 + JDK-8191915: JCK tests produce incorrect results with C2 + JDK-8256421: Add 2 HARICA roots to cacerts truststore + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a * Import of OpenJDK 8 u292 build 09 + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register allocation failure with T_ADDRESS) * Import of OpenJDK 8 u292 build 10 + JDK-8258247: Couple of issues in fix for JDK-8249906 + JDK-8259428: AlgorithmId.getEncodedParams() should return copy + JDK-8261183: Follow on to Make lists of normal filenames * Backports + JDK-8250825, PR3837: C2 crashes with assert(field != __null) failed: missing field + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop() const+0x0 * Bug fixes + PR3822: Update elliptic curve patch to handle jdk.disabled.namedCurves (JDK-8233228) & file movement (JDK-8035166) + PR3836: Extra compiler flags not passed to adlc build + PR3838: Bogus -Wnonnull warning on Zero builds + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for now * Shenandoah + [backport] 8202976: Add C1 lea patching support for x86 + [backport] 8221507: Implement JFR Events for Shenandoah + [backport] 8224573: Fix windows build after JDK-8221507 + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs + [backport] 8229474: Shenandoah: Cleanup CM::update_roots() + [backport] 8229709: x86_32 build and test failures after JDK-8228369 (Shenandoah: Refactor LRB C1 stubs) + [backport] 8231087: Shenandoah: Self-fixing load reference barriers for C1/C2 + [backport] 8232747: Shenandoah: Concurrent GC should deactivate SATB before processing weak roots + [backport] 8232992: Shenandoah: Implement self-fixing interpreter LRB + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call should match all LRB shapes + [backport] 8233165: Shenandoah:SBSA::gen_load_reference_barrier_stub() should use pointer register for address on aarch64 + [backport] 8233574: Shenandoah: build is broken without jfr + [backport] 8237837: Shenandoah: assert(mem == __null) failed: only one safepoint + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails with "Unknown node in get_load_addr: CreateEx" + [backport] 8238851: Shenandoah: C1: Resolve into registers of correct type + [backport] 8240315: Shenandoah: Rename ShLBN::get_barrier_strength() + [backport] 8240751: Shenandoah: fold ShenandoahTracer definition + [backport] 8241765: Shenandoah: AARCH64 need to save/restore call clobbered registers before calling keepalive barrier + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset condition + [backport] 8244663: Shenandoah: C2 assertion fails in Matcher::collect_null_checks + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails with "unexpected infinite loop graph shape" + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer roots with I-U + [backport] 8252660: Shenandoah: support manageable SoftMaxHeapSize option + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue destructor calls virtual num_queues() + [backport] 8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint should not access VMThread state from other threads + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask + [backport] 8255760: Shenandoah: match constants style in ShenandoahMarkTask fallback + [backport] 8256806: Shenandoah: optimize shenandoah/jni/ /TestPinnedGarbage.java test + [backport] 8257641: Shenandoah: Query is_at_shenandoah_safepoint() from control thread should return false + Fix racy update of code roots + Fix register allocation for thread register is 32bit LRB + Fix Shenandoah bindings in ADLC formssel + Normalise whitespace in AArch64 sources prior to merge of upstreamed version in 8u292-b01. + Revert differences against upstream 8u + Shenandoah: Backed out weak roots cleaning during full gc * AArch64 port + Normalise AArch64 sources, prior to merge of upstream version.- Update to version jdk8u282 (icedtea 3.18.0) * January 2021 CPU (bsc#1181239) * Security fixes + JDK-8247619: Improve Direct Buffering of Characters * Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/ /bug6738668.java fails under Linux + JDK-8025936: Windows .pdb and .map files does not have proper dependencies setup + JDK-8030350: Enable additional compiler warnings for GCC + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/ /DisposeFrameOnDragTest.java fails by Timeout on Windows + JDK-8036122: Fix warning 'format not a string literal' + JDK-8051853: new URI("x/").resolve("..").getSchemeSpecificPart() returns null! + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/ /DefaultNoDrop.java locks on Windows + JDK-8134632: Mark javax/sound/midi/Devices/ /InitializationHang.java as headful + JDK-8148854: Class names "SomeClass" and "LSomeClass;" treated by JVM as an equivalent + JDK-8148916: Mark bug6400879.java as intermittently failing + JDK-8148983: Fix extra comma in changes for JDK-8148916 + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java fails + JDK-8165808: Add release barriers when allocating objects with concurrent collection + JDK-8185003: JMX: Add a version of ThreadMXBean.dumpAllThreads with a maxDepth argument + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on windows with VS2017 + JDK-8207766: [testbug] Adapt tests for Aix. + JDK-8212070: Introduce diagnostic flag to abort VM on failed JIT compilation + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash + JDK-8215727: Restore JFR thread sampler loop to old / previous behavior + JDK-8220657: JFR.dump does not work when filename is set + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java fails with access issues and OOM + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread + JDK-8231968: getCurrentThreadAllocatedBytes default implementation s/b getThreadAllocatedBytes + JDK-8232114: JVM crashed at imjpapi.dll in native code + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect numbers for Compiler area + JDK-8234339: replace JLI_StrTok in java_md_solinux.c + JDK-8238448: RSASSA-PSS signature verification fail when using certain odd key sizes + JDK-8242335: Additional Tests for RSASSA-PSS + JDK-8244225: stringop-overflow warning on strncpy call from compile_the_world_in + JDK-8245400: Upgrade to LittleCMS 2.11 + JDK-8248214: Add paddings for TaskQueueSuper to reduce false-sharing cache contention + JDK-8249176: Update GlobalSignR6CA test certificates + JDK-8250665: Wrong translation for the month name of May in ar_JO,LB,SY + JDK-8250928: JFR: Improve hash algorithm for stack traces + JDK-8251469: Better cleanup for test/jdk/javax/imageio/SetOutput.java + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData should not be in make/mapfiles/libawt_xawt/mapfile-vers + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider rather than JRE + JDK-8252395: [8u] --with-native-debug-symbols=external doesn't include debuginfo files for binaries + JDK-8252497: Incorrect numeric currency code for ROL + JDK-8252754: Hash code calculation of JfrStackTrace is inconsistent + JDK-8252904: VM crashes when JFR is used and JFR event class is transformed + JDK-8252975: [8u] JDK-8252395 breaks the build for - -with-native-debug-symbols=internal + JDK-8253284: Zero OrderAccess barrier mappings are incorrect + JDK-8253550: [8u] JDK-8252395 breaks the build for make STRIP_POLICY=no_strip + JDK-8253752: test/sun/management/jmxremote/bootstrap/ /RmiBootstrapTest.java fails randomly + JDK-8254081: java/security/cert/PolicyNode/ /GetPolicyQualifiers.java fails due to an expired certificate + JDK-8254144: Non-x86 Zero builds fail with return-type warning in os_linux_zero.cpp + JDK-8254166: Zero: return-type warning in zeroInterpreter_zero.cpp + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/ /WorkerDeadlockTest.java fails + JDK-8255003: Build failures on Solaris * Import of OpenJDK 8 u282 build 02 + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals implementaion + JDK-8255269: Unsigned overflow in g1Policy.cpp * Import of OpenJDK 8 u282 build 03 + JDK-8163161: [PIT][TEST_BUG] increase timeout in javax/swing/plaf/nimbus/8057791/bug8057791.java + JDK-8168292: [TESTBUG] [macosx] Test java/awt/TrayIcon/DragEventSource/DragEventSource.java fails on OS X + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/ /ClassForNameLeak.java fails with -Xcomp + JDK-8223108: Test java/awt/EventQueue/ /NonComponentSourcePost.java is unstable + JDK-8255603: Memory/Performance regression after JDK-8210985 * Import of OpenJDK 8 u282 build 04 + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/ /Test8017492.java fails + JDK-8043899: compiler/5091921/Test7005594.java fails if specified -Xmx is less than 1600m + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/ /NoPermissionTest/NoPermissionTest.java fails + JDK-8068275: Some tests failed after JDK-8063104 + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if entry output stream gets closed more than once + JDK-8130772: Util.hitMnemonics does not work: getSystemMnemonicKeyCodes() returns ALT_MASK rather than VK_ALT + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic + JDK-8160761: [TESTBUG] Several compiler tests fail with product bits + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/ /Focus/ModalDialogActivationTest/ /ModalDialogActivationTest.java + JDK-8166583: Add oopDesc::klass_or_null_acquire() + JDK-8166663: Simplify oops_on_card_seq_iterate_careful + JDK-8166862: CMS needs klass_or_null_acquire + JDK-8179083: Uninitialized notifier in Java Monitor Wait tracing event + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java timed out + JDK-8217362: Emergency dump does not work when disk=false is set + JDK-8217766: Container Support doesn't work for some Join Controllers combinations + JDK-8219013: Update Apache Santuario (XML Signature) to version 2.1.3 + JDK-8219562: Line of code in osContainer_linux.cpp L102 appears unreachable + JDK-8220579: [Containers] SubSystem.java out of sync with osContainer_linux.cpp + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix for JDK-8219562 + JDK-8221710: [TESTBUG] more configurable parameters for docker testing + JDK-8227006: [linux] Runtime.availableProcessors execution time increased by factor of 100 + JDK-8229868: Update Apache Santuario TPRM version + JDK-8233548: Update CUP to v0.11b + JDK-8242480: Negative value may be returned by getFreeSwapSpaceSize() in the docker + JDK-8246648: issue with OperatingSystemImpl getFreeSwapSpaceSize in docker after 8242480 + JDK-8249846: Change of behavior after JDK-8237117: Better ForkJoinPool behavior + JDK-8250636: iso8601_time returns incorrect offset part on MacOS + JDK-8251365: Build failure on AIX after 8250636 + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due to object not initialized + JDK-8256618: Zero: Linux x86_32 build still fails + JDK-8256671: Incorrect assignment operator used in guarantee() in genCollectedHeap + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM folder + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java refers to -Xlog:os+container=trace * Import of OpenJDK 8 u282 build 05 + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c * Import of OpenJDK 8 u282 build 06 + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d * Import of OpenJDK 8 u282 build 07 + JDK-8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs + JDK-8239105: Add exception for expiring Digicert root certificates to VerifyCACerts test + JDK-8258630: Add expiry exception for QuoVadis root certificate * Bug fixes + PR3819: Installation can't handle existing tapset symlinks * Shenandoah + Shenandoah: Fix racy update of code roots * AArch32 port + JDK-8253036: Support building the Zero assembler port on AArch64- Update to version jdk8u275 (icedtea 3.17.1) * Import of OpenJDK 8 u275 build 01 + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate failed with "javax.net.ssl.SSLPeerUnverifiedException: hostname of the server "does not match the hostname in the server's certificate" + JDK-8223940: Private key not supported by chosen signature algorithm + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal and NoPadding + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool) * Bug fixes + PR3815: Fix new s390 size_t issue in g1ConcurrentMarkObjArrayProcessor.cpp - Removed patches: * JDK-8250861.patch * s390.patch + integrated upstream- Modified patch: * java-atk-wrapper-security.patch + Fix errors introduced by manual rediffing of the patch- Add missing /etc/alternatives link for "jcmd" utility- Enable Shenandoah garbage collector on supported architectures and distributions- Added patch: * s390.patch + Fix build on s390 31bit- Added patch: * JDK-8250861.patch + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)" introduced in October 2020 CPU- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU, bsc#1174157, and October 2020 CPU, bsc#1177943) * New features + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7 + PR3796: Allow the number of curves supported to be specified * Security fixes + JDK-8028431, CVE-2020-14579: NullPointerException in DerValue.equals(DerValue) + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in sun.security.util.DerInputStream.getUnalignedBitString() + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233255: Better Swing Buttons + JDK-8233624: Enhance JNI linkage + JDK-8234032: Improve basic calendar services + JDK-8234042: Better factory production of certificates + JDK-8234418: Better parsing with CertificateFactory + JDK-8234836: Improve serialization handling + JDK-8236191: Enhance OID processing + JDK-8236196: Improve string pooling + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior + JDK-8237592, CVE-2020-14577: Enhance certificate verification + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts + JDK-8237995, CVE-2020-14782: Enhance certificate processing + JDK-8238002, CVE-2020-14581: Better matrix operations + JDK-8238804: Enhance key handling process + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable + JDK-8238843: Enhanced font handing + JDK-8238920, CVE-2020-14583: Better Buffer support + JDK-8238925: Enhance WAV file playback + JDK-8240119, CVE-2020-14593: Less Affine Transformations + JDK-8240124: Better VM Interning + JDK-8240482: Improved WAV file playback + JDK-8241114, CVE-2020-14792: Better range handling + JDK-8241379: Update JCEKS support + JDK-8241522: Manifest improved jar headers redux + JDK-8242136, CVE-2020-14621: Better XML namespace handling + JDK-8242680, CVE-2020-14796: Improved URI Support + JDK-8242685, CVE-2020-14797: Better Path Validation + JDK-8242695, CVE-2020-14798: Enhanced buffer support + JDK-8243302: Advanced class supports + JDK-8244136, CVE-2020-14803: Improved Buffer supports + JDK-8244479: Further constrain certificates + JDK-8244955: Additional Fix for JDK-8240124 + JDK-8245407: Enhance zoning of times + JDK-8245412: Better class definitions + JDK-8245417: Improve certificate chain handling + JDK-8248574: Improve jpeg processing + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit + JDK-8253019: Enhanced JPEG decoding * Import of OpenJDK 8 u262 build 01 + JDK-4949105: Access Bridge lacks html tags parsing + JDK-8003209: JFR events for network utilization + JDK-8030680: 292 cleanup from default method code assessment + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java and some tests failed on windows intermittently + JDK-8041626: Shutdown tracing event + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp + JDK-8149338: JVM Crash caused by Marlin renderer not handling NaN coordinates + JDK-8151582: (ch) test java/nio/channels/ /AsyncCloseAndInterrupt.java failing due to "Connection succeeded" + JDK-8165675: Trace event for thread park has incorrect unit for timeout + JDK-8176182: 4 security tests are not run + JDK-8178910: Problemlist sample tests + JDK-8183925: Decouple crash protection from watcher thread + JDK-8191393: Random crashes during cfree+0x1c + JDK-8195817: JFR.stop should require name of recording + JDK-8195818: JFR.start should increase autogenerated name by one + JDK-8195819: Remove recording=x from jcmd JFR.check output + JDK-8199712: Flight Recorder + JDK-8202578: Revisit location for class unload events + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on missing events + JDK-8203287: Zero fails to build after JDK-8199712 (Flight Recorder) + JDK-8203346: JFR: Inconsistent signature of jfr_add_string_constant + JDK-8203664: JFR start failure after AppCDS archive created with JFR StartFlightRecording + JDK-8203921: JFR thread sampling is missing fixes from JDK-8194552 + JDK-8203929: Limit amount of data for JFR.dump + JDK-8205516: JFR tool + JDK-8207392: [PPC64] Implement JFR profiling + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first classloader which calls it + JDK-8209960: -Xlog:jfr* doesn't work with the JFR + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread() + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD 1.0.7 + JDK-8211239: Build fails without JFR: empty JFR events signatures mismatch + JDK-8212232: Wrong metadata for the configuration of the cutoff for old object sample events + JDK-8213015: Inconsistent settings between JFR.configure and - XX:FlightRecorderOptions + JDK-8213421: Line number information for execution samples always 0 + JDK-8213617: JFR should record the PID of the recorded process + JDK-8213734: SAXParser.parse(File, ..) does not close resources when Exception occurs. + JDK-8213914: [TESTBUG] Several JFR VM events are not covered by tests + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by test + JDK-8213966: The ZGC JFR events should be marked as experimental + JDK-8214542: JFR: Old Object Sample event slow on a deep heap in debug builds + JDK-8214750: Unnecessary

tags in jfr classes + JDK-8214896: JFR Tool left files behind + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java fails with UnsatisfiedLinkError + JDK-8214925: JFR tool fails to execute + JDK-8215175: Inconsistencies in JFR event metadata + JDK-8215237: jdk.jfr.Recording javadoc does not compile + JDK-8215284: Reduce noise induced by periodic task getFileSize() + JDK-8215355: Object monitor deadlock with no threads holding the monitor (using jemalloc 5.1) + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails + JDK-8215771: The jfr tool should pretty print reference chains + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work properly + JDK-8216486: Possibility of integer overflow in JfrThreadSampler::run() + JDK-8216528: test/jdk/java/rmi/transport/ /runtimeThreadInheritanceLeak/ /RuntimeThreadInheritanceLeak.java failing with Xcomp + JDK-8216559: [JFR] Native libraries not correctly parsed from /proc/self/maps + JDK-8216578: Remove unused/obsolete method in JFR code + JDK-8216995: Clean up JFR command line processing + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some systems due to process surviving SIGINT + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR TestShutdownEvent + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly + JDK-8223147: JFR Backport + JDK-8223689: Add JFR Thread Sampling Support + JDK-8223690: Add JFR BiasedLock Event Support + JDK-8223691: Add JFR G1 Region Type Change Event Support + JDK-8223692: Add JFR G1 Heap Summary Event Support + JDK-8224172: assert(jfr_is_event_enabled(id)) failed: invariant + JDK-8224475: JTextPane does not show images in HTML rendering + JDK-8226253: JAWS reports wrong number of radio buttons when buttons are hidden. + JDK-8226779: [TESTBUG] Test JFR API from Java agent + JDK-8226892: ActionListeners on JRadioButtons don't get notified when selection is changed with arrow keys + JDK-8227011: Starting a JFR recording in response to JVMTI VMInit and / or Java agent premain corrupts memory + JDK-8227605: Kitchensink fails "assert((((klass)->trace_id() & (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0)) failed: invariant" + JDK-8229366: JFR backport allows unchecked writing to memory + JDK-8229401: Fix JFR code cache test failures + JDK-8229708: JFR backport code does not initialize + JDK-8229873: 8229401 broke jdk8u-jfr-incubator + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on Windows + JDK-8230707: JFR related tests are failing + JDK-8230782: Robot.createScreenCapture() fails if "awt.robot.gtk" is set to false + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on unix misses ReleaseStringUTFChars in early return + JDK-8230947: TestLookForUntestedEvents.java is failing after JDK-8230707 + JDK-8231995: two jtreg tests failed after 8229366 is fixed + JDK-8233623: Add classpath exception to copyright in EventHandlerProxyCreator.java file + JDK-8236002: CSR for JFR backport suggests not leaving out the package-info + JDK-8236008: Some backup files were accidentally left in the hotspot tree + JDK-8236074: Missed package-info + JDK-8236174: Should update javadoc since tags + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport + JDK-8238452: Keytool generates wrong expiration date if validity is set to 2050/01/01 + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when there are external FIPS modules in the NSSDB + JDK-8238589: Necessary code cleanup in JFR for JDK8u + JDK-8238590: Enable JFR by default during compilation in 8u + JDK-8239055: Wrong implementation of VMState.hasListener + JDK-8239476: JDK-8238589 broke windows build by moving OrderedPair + JDK-8239479: minimal1 and zero builds are failing + JDK-8239867: correct over use of INCLUDE_JFR macro + JDK-8240375: Disable JFR by default for July 2020 release + JDK-8241444: Metaspace::_class_vsm not initialized if compressed class pointers are disabled + JDK-8241902: AIX Build broken after integration of JDK-8223147 (JFR Backport) + JDK-8242788: Non-PCH build is broken after JDK-8191393 * Import of OpenJDK 8 u262 build 02 + JDK-8130737: AffineTransformOp can't handle child raster with non-zero x-offset + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation in java/awt/image/Raster/TestChildRasterOp.java + JDK-8230926: [macosx] Two apostrophes are entered instead of one with "U.S. International - PC" layout + JDK-8240576: JVM crashes after transformation in C2 IdealLoopTree::merge_many_backedges + JDK-8242883: Incomplete backport of JDK-8078268: backport test part * Import of OpenJDK 8 u262 build 03 + JDK-8037866: Replace the Fun class in tests with lambdas + JDK-8146612: C2: Precedence edges specification violated + JDK-8150986: serviceability/sa/jmap-hprof/ /JMapHProfLargeHeapTest.java failing because expects HPROF JAVA PROFILE 1.0.1 file format + JDK-8229888: (zipfs) Updating an existing zip file does not preserve original permissions + JDK-8230597: Update GIFlib library to the 5.2.1 + JDK-8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical call in early return + JDK-8233880, PR3798: Support compilers with multi-digit major version numbers + JDK-8239852: java/util/concurrent tests fail with - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed: verification should have failed + JDK-8241638: launcher time metrics always report 1 on Linux when _JAVA_LAUNCHER_DEBUG set + JDK-8243059: Build fails when --with-vendor-name contains a comma + JDK-8243474: [TESTBUG] removed three tests of 0 bytes + JDK-8244461: [JDK 8u] Build fails with glibc 2.32 + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion() returns wrong result * Import of OpenJDK 8 u262 build 04 + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't throw NPE if timeout is less than, or equal to zero when unit == null + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering + JDK-8171934: ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification() does not recognize OpenJDK's HotSpot VM + JDK-8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java causes NPE + JDK-8243539: Copyright info (Year) should be updated for fix of 8241638 + JDK-8244777: ClassLoaderStats VM Op uses constant hash value * Import of OpenJDK 8 u262 build 05 + JDK-7147060: com/sun/org/apache/xml/internal/security/ /transforms/ClassLoaderTest.java doesn't run in agentvm mode + JDK-8178374: Problematic ByteBuffer handling in CipherSpi.bufferCrypt method + JDK-8181841: A TSA server returns timestamp with precision higher than milliseconds + JDK-8227269: Slow class loading when running with JDWP + JDK-8229899: Make java.io.File.isInvalid() less racy + JDK-8236996: Incorrect Roboto font rendering on Windows with subpixel antialiasing + JDK-8241750: x86_32 build failure after JDK-8227269 + JDK-8244407: JVM crashes after transformation in C2 IdealLoopTree::split_fall_in + JDK-8244843: JapanEraNameCompatTest fails * Import of OpenJDK 8 u262 build 06 + JDK-8246223: Windows build fails after JDK-8227269 * Import of OpenJDK 8 u262 build 07 + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and Jfr:on_vm_start() start-up order for correct option parsing + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a + JDK-8245167: Top package in method profiling shows null in JMC + JDK-8246703: [TESTBUG] Add test for JDK-8233197 * Import of OpenJDK 8 u262 build 08 + JDK-8220293: Deadlock in JFR string pool + JDK-8225068: Remove DocuSign root certificate that is expiring in May 2020 + JDK-8225069: Remove Comodo root certificate that is expiring in May 2020 * Import of OpenJDK 8 u262 build 09 + JDK-8248399: Build installs jfr binary when JFR is disabled * Import of OpenJDK 8 u262 build 10 + JDK-8248715: New JavaTimeSupplementary localisation for 'in' installed in wrong package * Import of OpenJDK 8 u265 build 01 + JDK-8249677: Regression in 8u after JDK-8237117: Better ForkJoinPool behavior + JDK-8250546: Expect changed behaviour reported in JDK-8249846 * Import of OpenJDK 8 u272 build 01 + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY test/compiler/7177917/Test7177917.java + JDK-8035493: JVMTI PopFrame capability must instruct compilers not to prune locals + JDK-8036088: Replace strtok() with its safe equivalent strtok_s() in DefaultProxySelector.c + JDK-8039082: [TEST_BUG] Test java/awt/dnd/ /BadSerializationTest/BadSerializationTest.java fails + JDK-8075774: Small readability and performance improvements for zipfs + JDK-8132206: move ScanTest.java into OpenJDK + JDK-8132376: Add @requires os.family to the client tests with access to internal OS-specific API + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/ /appletviewer/IOExceptionIfEncodedURLTest/ /IOExceptionIfEncodedURLTest.sh + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/ /MTGraphicsAccessTest.java hangs on Win. 8 + JDK-8151788: NullPointerException from ntlm.Client.type3 + JDK-8151834: Test SmallPrimeExponentP.java times out intermittently + JDK-8153430: jdk regression test MletParserLocaleTest, ParserInfiniteLoopTest reduce default timeout + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary public + JDK-8156169: Some sound tests rarely hangs because of incorrect synchronization + JDK-8165936: Potential Heap buffer overflow when seaching timezone info files + JDK-8166148: Fix for JDK-8165936 broke solaris builds + JDK-8167300: Scheduling failures during gcm should be fatal + JDK-8167615: Opensource unit/regression tests for JavaSound + JDK-8172012: [TEST_BUG] delays needed in javax/swing/JTree/4633594/bug4633594.java + JDK-8177628: Opensource unit/regression tests for ImageIO + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/ /AppletContextTest/BadPluginConfigurationTest.sh + JDK-8193137: Nashorn crashes when given an empty script file + JDK-8194298: Add support for per Socket configuration of TCP keepalive + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java throws error + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java fails + JDK-8210147: adjust some WSAGetLastError usages in windows network coding + JDK-8211714: Need to update vm_version.cpp to recognise VS2017 minor versions + JDK-8214862: assert(proj != __null) at compile.cpp:3251 + JDK-8217606: LdapContext#reconnect always opens a new connection + JDK-8217647: JFR: recordings on 32-bit systems unreadable + JDK-8226697: Several tests which need the @key headful keyword are missing it. + JDK-8229378: jdwp library loader in linker_md.c quietly truncates on buffer overflow + JDK-8230303: JDB hangs when running monitor command + JDK-8230711: ConnectionGraph::unique_java_object(Node* N) return NULL if n is not in the CG + JDK-8234617: C1: Incorrect result of field load due to missing narrowing conversion + JDK-8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version + JDK-8235325: build failure on Linux after 8235243 + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink + JDK-8237951: CTW: C2 compilation fails with "malformed control flow" + JDK-8238225: Issues reported after replacing symlink at Contents/MacOS/libjli.dylib with binary + JDK-8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD + JDK-8239819: XToolkit: Misread of screen information memory + JDK-8240295: hs_err elapsed time in seconds is not accurate enough + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system property with a security one + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads to JVM crash + JDK-8243489: Thread CPU Load event may contain wrong data for CPU time under certain conditions + JDK-8244818: Java2D Queue Flusher crash while moving application window to external monitor + JDK-8246310: Clean commented-out code about ModuleEntry and PackageEntry in JFR + JDK-8246384: Enable JFR by default on supported architectures for October 2020 release + JDK-8248643: Remove extra leading space in JDK-8240295 8u backport + JDK-8249610: Make sun.security.krb5.Config.getBooleanObject(String... keys) method public * Import of OpenJDK 8 u272 build 02 + JDK-8023697: failed class resolution reports different class name in detail message for the first and subsequent times + JDK-8025886: replace [[ and == bash extensions in regtest + JDK-8046274: Removing dependency on jakarta-regexp + JDK-8048933: -XX:+TraceExceptions output should include the message + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/ /fileaccess/FontFile.java fails + JDK-8148854: Class names "SomeClass" and "LSomeClass;" treated by JVM as an equivalent + JDK-8154313: Generated javadoc scattered all over the place + JDK-8163251: Hard coded loop limit prevents reading of smart card data greater than 8k + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java fails with compiler.whitebox.SimpleTestCaseHelper(int) must be compiled + JDK-8183349: Better cleanup for jdk/test/javax/imageio/ /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java + JDK-8191678: [TESTBUG] Add keyword headful in java/awt FocusTransitionTest test. + JDK-8201633: Problems with AES-GCM native acceleration + JDK-8211049: Second parameter of "initialize" method is not used + JDK-8219566: JFR did not collect call stacks when MaxJavaStackTraceDepth is set to zero + JDK-8220165: Encryption using GCM results in RuntimeException- input length out of bound + JDK-8220555: JFR tool shows potentially misleading message when it cannot access a file + JDK-8224217: RecordingInfo should use textual representation of path + JDK-8231779: crash HeapWord*ParallelScavengeHeap::failed_mem_allocate + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c "multiple definition" link errors with GCC10 + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/ /SctpNet.c "multiple definition" link errors with GCC10 + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple definition" link errors with GCC10 + JDK-8242556: Cannot load RSASSA-PSS public key with non-null params from byte array + JDK-8250755: Better cleanup for jdk/test/javax/imageio/ /plugins/shared/CanWriteSequence.java * Import of OpenJDK 8 u272 build 03 + JDK-6574989: TEST_BUG: javax/sound/sampled/Clip/bug5070081.java fails sometimes + JDK-8148754: C2 loop unrolling fails due to unexpected graph shape + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests fail with error : revokeall.exe: Permission denied + JDK-8203357: Container Metrics + JDK-8209113: Use WeakReference for lastFontStrike for created Fonts + JDK-8216283: Allow shorter method sampling interval than 10 ms + JDK-8221569: JFR tool produces incorrect output when both - -categories and --events are specified + JDK-8233097: Fontmetrics for large Fonts has zero width + JDK-8248851: CMS: Missing memory fences between free chunk check and klass read + JDK-8250875: Incorrect parameter type for update_number in JDK_Version::jdk_update * Import of OpenJDK 8 u272 build 04 + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws IllegalArgumentException for flags of type double + JDK-8177334: Update xmldsig implementation to Apache Santuario 2.1.1 + JDK-8217878: ENVELOPING XML signature no longer works in JDK 11 + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR exception on OpenJDK 11, works 8/9/10 + JDK-8243138: Enhance BaseLdapServer to support starttls extended request * Import of OpenJDK 8 u272 build 05 + JDK-8026236: Add PrimeTest for BigInteger + JDK-8057003: Large reference arrays cause extremely long synchronization times + JDK-8060721: Test runtime/SharedArchiveFile/ /LimitSharedSizes.java fails in jdk 9 fcs new platforms/compiler + JDK-8152077: (cal) Calendar.roll does not always roll the hours during daylight savings + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed + JDK-8211163: UNIX version of Java_java_io_Console_echo does not return a clean boolean + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in docker container only works with debug JVMs + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo + JDK-8236645: JDK 8u231 introduces a regression with incompatible handling of XML messages + JDK-8240676: Meet not symmetric failure when running lucene on jdk8 + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program + JDK-8249158: THREAD_START and THREAD_END event posted in primordial phase + JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and Solaris builds + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol: AgeTableTracer::is_tenuring_distribution_event_enabled * Import of OpenJDK 8 u272 build 06 + JDK-8064319: Need to enable -XX:+TraceExceptions in release builds + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11 v2.40 support + JDK-8160768: Add capability to custom resolve host/domain names within the default JNDI LDAP provider + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions() not working + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface license + JDK-8184762: ZapStackSegments should use optimized memset + JDK-8193234: When using -Xcheck:jni an internally allocated buffer can leak + JDK-8219919: RuntimeStub name lost with PrintFrameConverterAssembly + JDK-8220313: [TESTBUG] Update base image for Docker testing to OL 7.6 + JDK-8222079: Don't use memset to initialize fields decode_env constructor in disassembler.cpp + JDK-8225695: 32-bit build failures after JDK-8080462 (Update SunPKCS11 provider with PKCS11 v2.40 support) + JDK-8226575: OperatingSystemMXBean should be made container aware + JDK-8226809: Circular reference in printed stack trace is not correctly indented & ambiguous + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM + JDK-8233621: Mismatch in jsse.enableMFLNExtension property name + JDK-8238898, PR3801: Missing hash characters for header on license file + JDK-8243320: Add SSL root certificates to Oracle Root CA program + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest release 1.8.26 + JDK-8245467: Remove 8u TLSv1.2 implementation files + JDK-8245469: Remove DTLS protocol implementation + JDK-8245470: Fix JDK8 compatibility issues + JDK-8245471: Revert JDK-8148188 + JDK-8245472: Backport JDK-8038893 to JDK8 + JDK-8245473: OCSP stapling support + JDK-8245474: Add TLS_KRB5 cipher suites support according to RFC-2712 + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello message by default + JDK-8245477: Adjust TLS tests location + JDK-8245653: Remove 8u TLS tests + JDK-8245681: Add TLSv1.3 regression test from 11.0.7 + JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is set to either true or false + JDK-8251341: Minimal Java specification change + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u * Import of OpenJDK 8 u272 build 07 + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ * Import of OpenJDK 8 u272 build 08 + JDK-8062947: Fix exception message to correctly represent LDAP connection failure + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to timeout on DeadServerNoTimeoutTest is incorrect + JDK-8252573: 8u: Windows build failed after 8222079 backport * Import of OpenJDK 8 u272 build 09 + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java : Compilation failed * Import of OpenJDK 8 u272 build 10 + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed by the fix for JDK-8249158 + JDK-8254937: Revert JDK-8148854 for 8u272 * Backports + JDK-8038723, PR3806: Openup some PrinterJob tests + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when JTable contains certain string + JDK-8058779, PR3805: Faster implementation of String.replace(CharSequence, CharSequence) + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several client tests unaffected by the automated bulk update + JDK-8144015, PR3806: [PIT] failures of text layout font tests + JDK-8144023, PR3806: [PIT] failure of text measurements in javax/swing/text/html/parser/Parser/6836089/bug6836089.java + JDK-8144240, PR3806: [macosx][PIT] AIOOB in closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java + JDK-8145542, PR3806: The case failed automatically and thrown java.lang.ArrayIndexOutOfBoundsException exception + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when displaying Devanagari text in JEditorPane + JDK-8152358, PR3800: code and comment cleanups found during the hunt for 8077392 + JDK-8152545, PR3804: Use preprocessor instead of compiling a program to generate native nio constants + JDK-8152680, PR3806: Regression in GlyphVector.getGlyphCharIndex behaviour + JDK-8158924, PR3806: Incorrect i18n text document layout + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for javax/swing/text/GlyphPainter2/6427244/bug6427244.java + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/ /GetGlyphCharIndexTest.java does not compile + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/ /GlyphPainter2/6427244/bug6427244.java - compilation failed + JDK-8191512, PR3806: T2K font rasterizer code removal + JDK-8191522, PR3806: Remove Bigelow&Holmes Lucida fonts from JDK sources + JDK-8236512, PR3801: PKCS11 Connection closed after Cipher.doFinal and NoPadding + JDK-8254177, PR3809: (tz) Upgrade time-zone data to tzdata2020b * Bug fixes + PR3798: Fix format-overflow error on GCC 10, caused by passing NULL to a '%s' directive + PR3795: ECDSAUtils for XML digital signatures should support the same curve set as the rest of the JDK + PR3799: Adapt elliptic curve patches to JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7 + PR3808: IcedTea does not install the JFR *.jfc files + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has fixed its use with Shenandoah + PR3811: Don't attempt to install JFR files when JFR is disabled * Shenandoah + [backport] 8221435: Shenandoah should not mark through weak roots + [backport] 8221629: Shenandoah: Cleanup class unloading logic + [backport] 8222992: Shenandoah: Pre-evacuate all roots + [backport] 8223215: Shenandoah: Support verifying subset of roots + [backport] 8223774: Shenandoah: Refactor ShenandoahRootProcessor and family + [backport] 8224210: Shenandoah: Refactor ShenandoahRootScanner to support scanning CSet codecache roots + [backport] 8224508: Shenandoah: Need to update thread roots in final mark for piggyback ref update cycle + [backport] 8224579: ResourceMark not declared in shenandoahRootProcessor.inline.hpp with - -disable-precompiled-headers + [backport] 8224679: Shenandoah: Make ShenandoahParallelCodeCacheIterator noncopyable + [backport] 8224751: Shenandoah: Shenandoah Verifier should select proper roots according to current GC cycle + [backport] 8225014: Separate ShenandoahRootScanner method for object_iterate + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't work for Shenandoah + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to ensure roots to-space invariant + [backport] 8225590: Shenandoah: Refactor ShenandoahClassLoaderDataRoots API + [backport] 8226413: Shenandoah: Separate root scanner for SH::object_iterate() + [backport] 8230853: Shenandoah: replace leftover assert(is_in(...)) with rich asserts + [backport] 8231198: Shenandoah: heap walking should visit all roots most of the time + [backport] 8231244: Shenandoah: all-roots heap walking misses some weak roots + [backport] 8237632: Shenandoah: accept NULL fwdptr to cooperate with JVMTI and JFR + [backport] 8239786: Shenandoah: print per-cycle statistics + [backport] 8239926: Shenandoah: Shenandoah needs to mark nmethod's metadata + [backport] 8240671: Shenandoah: refactor ShenandoahPhaseTimings + [backport] 8240749: Shenandoah: refactor ShenandoahUtils + [backport] 8240750: Shenandoah: remove leftover files and mentions of ShenandoahAllocTracker + [backport] 8240868: Shenandoah: remove CM-with-UR piggybacking cycles + [backport] 8240872: Shenandoah: Avoid updating new regions from start of evacuation + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers + [backport] 8240915: Shenandoah: Remove unused fields in init mark tasks + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects paths after JDK-8240868 + [backport] 8241007: Shenandoah: remove ShenandoahCriticalControlThreadPriority support + [backport] 8241062: Shenandoah: rich asserts trigger "empty statement" inspection + [backport] 8241081: Shenandoah: Do not modify update-watermark concurrently + [backport] 8241093: Shenandoah: editorial changes in flag descriptions + [backport] 8241139: Shenandoah: distribute mark-compact work exactly to minimize fragmentation + [backport] 8241142: Shenandoah: should not use parallel reference processing with single GC thread + [backport] 8241351: Shenandoah: fragmentation metrics overhaul + [backport] 8241435: Shenandoah: avoid disabling pacing with "aggressive" + [backport] 8241520: Shenandoah: simplify region sequence numbers handling + [backport] 8241534: Shenandoah: region status should include update watermark + [backport] 8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure + [backport] 8241583: Shenandoah: turn heap lock asserts into macros + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not derive from ContiguousSpace + [backport] 8241673: Shenandoah: refactor anti-false-sharing padding + [backport] 8241675: Shenandoah: assert(n->outcnt() > 0) at shenandoahSupport.cpp:2858 with java/util/Collections/FindSubList.java + [backport] 8241692: Shenandoah: remove ShenandoahHeapRegion::_reserved + [backport] 8241700: Shenandoah: Fold ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier + [backport] 8241740: Shenandoah: remove ShenandoahHeapRegion::_heap + [backport] 8241743: Shenandoah: refactor and inline ShenandoahHeap::heap() + [backport] 8241748: Shenandoah: inline MarkingContext TAMS methods + [backport] 8241838: Shenandoah: no need to trash cset during final mark + [backport] 8241841: Shenandoah: ditch one of allocation type counters in ShenandoahHeapRegion + [backport] 8241842: Shenandoah: inline ShenandoahHeapRegion::region_number + [backport] 8241844: Shenandoah: rename ShenandoahHeapRegion::region_number + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions to cache lines + [backport] 8241926: Shenandoah: only print heap changes for operations that directly affect it + [backport] 8241983: Shenandoah: simplify FreeSet logging + [backport] 8241985: Shenandoah: simplify collectable garbage logging + [backport] 8242040: Shenandoah: print allocation failure type + [backport] 8242041: Shenandoah: adaptive heuristics should account evac reserve in free target + [backport] 8242042: Shenandoah: tune down ShenandoahGarbageThreshold + [backport] 8242054: Shenandoah: New incremental-update mode + [backport] 8242075: Shenandoah: rename ShenandoahHeapRegionSize flag + [backport] 8242082: Shenandoah: Purge Traversal mode + [backport] 8242083: Shenandoah: split "Prepare Evacuation" tracking into cset/freeset counters + [backport] 8242089: Shenandoah: per-worker stats should be summed up, not averaged + [backport] 8242101: Shenandoah: coalesce and parallelise heap region walks during the pauses + [backport] 8242114: Shenandoah: remove ShenandoahHeapRegion::reset_alloc_metadata_to_shared + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier dispatching + [backport] 8242211: Shenandoah: remove ShenandoahHeuristics::RegionData::_seqnum_last_alloc + [backport] 8242212: Shenandoah: initialize ShenandoahHeuristics::_region_data eagerly + [backport] 8242213: Shenandoah: remove ShenandoahHeuristics::_bytes_in_cset + [backport] 8242217: Shenandoah: Enable GC mode to be diagnostic/experimental and have a name + [backport] 8242227: Shenandoah: transit regions to cset state when adding to collection set + [backport] 8242228: Shenandoah: remove unused ShenandoahCollectionSet methods + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion liveness-related methods + [backport] 8242267: Shenandoah: regions space needs to be aligned by os::vm_allocation_granularity() + [backport] 8242271: Shenandoah: add test to verify GC mode unlock + [backport] 8242273: Shenandoah: accept either SATB or IU barriers, but not both + [backport] 8242301: Shenandoah: Inline LRB runtime call + [backport] 8242316: Shenandoah: Turn NULL-check into assert in SATB slow-path entry + [backport] 8242353: Shenandoah: micro-optimize region liveness handling + [backport] 8242365: Shenandoah: use uint16_t instead of jushort for liveness cache + [backport] 8242375: Shenandoah: Remove ShenandoahHeuristic::record_gc_start/end methods + [backport] 8242641: Shenandoah: clear live data and update TAMS optimistically + [backport] 8243238: Shenandoah: explicit GC request should wait for a complete GC cycle + [backport] 8243301: Shenandoah: ditch ShenandoahAllowMixedAllocs + [backport] 8243307: Shenandoah: remove ShCollectionSet::live_data + [backport] 8243395: Shenandoah: demote guarantee in ShenandoahPhaseTimings::record_workers_end + [backport] 8243463: Shenandoah: ditch total_pause counters + [backport] 8243464: Shenandoah: print statistic counters in time order + [backport] 8243465: Shenandoah: ditch unused pause_other, conc_other counters + [backport] 8243487: Shenandoah: make _num_phases illegal phase type + [backport] 8243494: Shenandoah: set counters once per cycle + [backport] 8243573: Shenandoah: rename GCParPhases and related code + [backport] 8243848: Shenandoah: Windows build fails after JDK-8239786 + [backport] 8244180: Shenandoah: carry Phase to ShWorkerTimingsTracker explicitly + [backport] 8244200: Shenandoah: build breakages after JDK-8241743 + [backport] 8244226: Shenandoah: per-cycle statistics contain worker data from previous cycles + [backport] 8244326: Shenandoah: global statistics should not accept bogus samples + [backport] 8244509: Shenandoah: refactor ShenandoahBarrierC2Support::test_* methods + [backport] 8244551: Shenandoah: Fix racy update of update_watermark + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state takes loop for wrong control + [backport] 8244730: Shenandoah: gc/shenandoah/options/ /TestHeuristicsUnlock.java should only verify the heuristics + [backport] 8244732: Shenandoah: move heuristics code to gc/shenandoah/heuristics + [backport] 8244737: Shenandoah: move mode code to gc/shenandoah/mode + [backport] 8244739: Shenandoah: break superclass dependency on ShenandoahNormalMode + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode to ShenandoahSATBMode + [backport] 8245461: Shenandoah: refine mode name()-s + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings constructor arguments + [backport] 8245464: Shenandoah: allocate collection set bitmap at lower addresses + [backport] 8245465: Shenandoah: test_in_cset can use more efficient encoding + [backport] 8245726: Shenandoah: lift/cleanup ShenandoahHeuristics names and properties + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch + [backport] 8245757: Shenandoah: AlwaysPreTouch should not disable heap resizing or uncommits + [backport] 8245773: Shenandoah: Windows assertion failure after JDK-8245464 + [backport] 8245812: Shenandoah: compute root phase parallelism + [backport] 8245814: Shenandoah: reconsider format specifiers for stats + [backport] 8245825: Shenandoah: Remove diagnostic flag ShenandoahConcurrentScanCodeRoots + [backport] 8246162: Shenandoah: full GC does not mark code roots when class unloading is off + [backport] 8247310: Shenandoah: pacer should not affect interrupt status + [backport] 8247358: Shenandoah: reconsider free budget slice for marking + [backport] 8247367: Shenandoah: pacer should wait on lock instead of exponential backoff + [backport] 8247474: Shenandoah: Windows build warning after JDK-8247310 + [backport] 8247560: Shenandoah: heap iteration holds root locks all the time + [backport] 8247593: Shenandoah: should not block pacing reporters + [backport] 8247751: Shenandoah: options tests should run with smaller heaps + [backport] 8247754: Shenandoah: mxbeans tests can be shorter + [backport] 8247757: Shenandoah: split heavy tests by heuristics to improve parallelism + [backport] 8247860: Shenandoah: add update watermark line in rich assert failure message + [backport] 8248041: Shenandoah: pre-Full GC root updates may miss some roots + [backport] 8248652: Shenandoah: SATB buffer handling may assume no forwarded objects + [backport] 8249560: Shenandoah: Fix racy GC request handling + [backport] 8249649: Shenandoah: provide per-cycle pacing stats + [backport] 8249801: Shenandoah: Clear soft-refs on requested GC cycle + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests should account for corner cases + Fix slowdebug build after JDK-8230853 backport + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR + JDK-8252366: Shenandoah: revert/cleanup changes in graphKit.cpp + Shenandoah: add JFR roots to root processor after JFR integration + Shenandoah: add root statistics for string dedup table/queues + Shenandoah: enable low-frequency STW class unloading + Shenandoah: fix build failures after JDK-8244737 backport + Shenandoah: Fix build failure with +JFR -PCH + Shenandoah: fix forceful pacer claim + Shenandoah: fix formats in ShenandoahStringSymbolTableUnlinkTask + Shenandoah: fix runtime linking failure due to non-compiled shenandoahBarrierSetC1 + Shenandoah: hook statistics printing to PrintGCDetails, not PrintGC + Shenandoah: JNI weak roots are always cleared before Full GC mark + Shenandoah: missing SystemDictionary roots in ShenandoahHeapIterationRootScanner + Shenandoah: move barrier sets to their proper locations + Shenandoah: move parallelCleaning.* to shenandoah/ + Shenandoah: pacer should use proper Atomics for intptr_t + Shenandoah: properly deallocates class loader metadata + Shenandoah: specialize String Table scans for better pause performance + Shenandoah: Zero build fails after recent Atomic cleanup in Pacer * AArch64 port + JDK-8161072, PR3797: AArch64: jtreg compiler/uncommontrap/TestDeoptOOM failure + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java generates guarantee failure in C1 + JDK-8183925, PR3797: [AArch64] Decouple crash protection from watcher thread + JDK-8199712, PR3797: [AArch64] Flight Recorder + JDK-8203481, PR3797: Incorrect constraint for unextended_sp in frame:safe_for_sender + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall fails with SIGILL on aarch64 + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java fails on AArch64 + JDK-8216989, PR3797: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier() does not check for zero length on AARCH64 + JDK-8217368, PR3797: AArch64: C2 recursive stack locking optimisation not triggered + JDK-8221658, PR3797: aarch64: add necessary predicate for ubfx patterns + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a BufferBlob + JDK-8246482, PR3797: Build failures with +JFR -PCH + JDK-8247979, PR3797: aarch64: missing side effect of killing flags for clearArray_reg_reg + JDK-8248219, PR3797: aarch64: missing memory barrier in fast_storefield and fast_accessfield - Modified patch: * java-atk-wrapper-security.patch + rediff to changed context- Ignore whitespaces after the header or footer in PEM X.509 cert (bsc#1171352) + JDK_1_8_0-8208602.patch- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU, bsc#1169511) * Security fixes + JDK-8223898, CVE-2020-2754: Forward references to Nashorn + JDK-8223904, CVE-2020-2755: Improve Nashorn matching + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues + JDK-8225603: Enhancement for big integers + JDK-8227542: Manifest improved jar headers + JDK-8231415, CVE-2020-2773: Better signatures in XML + JDK-8233250: Better X11 rendering + JDK-8233410: Better Build Scripting + JDK-8234027: Better JCEKS key support + JDK-8234408, CVE-2020-2781: Improve TLS session handling + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers + JDK-8235274, CVE-2020-2805: Enhance typing of methods + JDK-8236201, CVE-2020-2830: Better Scanner conversions + JDK-8238960: linux-i586 builds are inconsistent as the newly build jdk is not able to reserve enough space for object heap * Import of OpenJDK 8 u252 build 01 + JDK-8028480: (zipfs) NoSuchFileException on creating a file in ZipFileSystem with CREATE and WRITE + JDK-8031191: Warning exception when XMLSignature logging is enabled + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no options specified + JDK-8038431: Close InputStream when finished retrieving XML Signature HTTP References + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior for placing friend declarations within surrounding scope. + JDK-8046044: Fix raw and unchecked lint warnings in XML Signature Impl + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java fails intermittently + JDK-8144732: VM_HeapDumper hits assert with bad dump_len + JDK-8150432: LocaleProviders.sh fails + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table may become large or may not work at all + JDK-8216354: Syntax error in toolchain_windows.m4 + JDK-8218553: Enhance keystore load debug output + JDK-8218580: endpoint identification algorithm should be case-insensitive + JDK-8227397: Add --with-extra-asflags configure option + JDK-8227662: freetype seeks to index at the end of the font data + JDK-8231201: hs_err should print coalesced safepoint operations in Events section + JDK-8231991: Mouse wheel change focus on awt/swing windows + JDK-8232003: (fs) Files.write can leak file descriptor in the exception case + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1 + JDK-8232355: Two obsolete flags have the wrong obsolete version in 8u + JDK-8233023: assert(Opcode() == mem->Opcode() || phase->C->get_alias_index(adr_type()) == Compile::AliasIdxRaw) failed: no mismatched stores, except on raw memory + JDK-8233404: System property to set the number of PBE iterations in JCEKS keystores + JDK-8234107: Several AWT modal dialog tests failing on Linux after JDK-8231991 + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677 + JDK-8234288: Turkey Time Zone returns incorrect time zone name + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if prelink is enabled + JDK-8236873: Worker has a deadlock bug + JDK-8237523: 8u backport of JDK-8216354 didn't include generated-configure.sh changes * Import of OpenJDK 8 u252 build 02 + JDK-7143743: Potential memory leak with zip provider + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use uninitialized field _out + JDK-8143849: Integrate Marlin renderer per JEP 265 + JDK-8146792: Predicate moved after partial peel may lead to broken graph + JDK-8193255: Root Certificates should be stored in text format and assembled at build time + JDK-8233995: java.vm.vendor (and potentially other properties/fields) not correctly set in Windows/Hotspot build of OpenJDK8 + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10 * Import of OpenJDK 8 u252 build 03 + JDK-8005819: Support cross-realm MSSFU + JDK-8046724: XML Signature ECKeyValue elements cannot be marshalled or unmarshalled + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged when it reads system properties + JDK-8134579: [TESTBUG] Some bmi tests fail if can_access_local_variables is on. + JDK-8145055: Marlin renderer causes unaligned write accesses + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always return null + JDK-8146293: Add support for RSASSA-PSS Signature algorithm + JDK-8158978: ALPN not working when values are set directly on a SSLServerSocket + JDK-8162723: Array index overflow in Base64 utility class + JDK-8170282: Enable ALPN parameters to be supplied during the TLS handshake + JDK-8171443: (spec) An ALPN callback function may also ignore ALPN + JDK-8175029: StackOverflowError in X509CRL and X509Certificate.verify(PublicKey, Provider) + JDK-8200400: Restrict Sasl mechanisms + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI + JDK-8205720: KeyFactory#getKeySpec and translateKey throws NullPointerException with Invalid key + JDK-8206171: Signature#getParameters for RSASSA-PSS throws ProviderException when not initialized + JDK-8213009: Refactoring existing SunMSCAPI classes + JDK-8213010: Supporting keys created with certmgr.exe + JDK-8214096: sun.security.util.SignatureUtil passes null parameter, so JCE validation fails + JDK-8215694: keytool cannot generate RSASSA-PSS certificates + JDK-8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange + JDK-8221407: Windows 32bit build error in libsunmscapi/security.cpp + JDK-8223003: SunMSCAPI keys are not cleaned up + JDK-8223063: Support CNG RSA keys + JDK-8223158: Docked MacBook cannot start any Java Swing applications + JDK-8225180: SignedObject with invalid Key not throwing the InvalidKeyException in Windows + JDK-8225392: Comparison builds are failing due to cacerts file + JDK-8225745: NoSuchAlgorithmException exception for SHA256withECDSA with RSASSA-PSS support + JDK-8229767: Typo in java.security: Sasl.createClient and Sasl.createServer + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol Negotiation Extension (Java SE 8) + JDK-8230978: Add support for RSASSA-PSS Signature algorithm (Java SE 8) + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java fails due to wrong checksum + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION * Import of OpenJDK 8 u252 build 04 + JDK-8047212: runtime/ParallelClassLoading/bootstrap/random/inner-complex assert(ObjectSynchronizer::verify_objmon_isinpool(inf)) failed: monitor is invalid + JDK-8135318: CMS wrong max_eden_size for check_gc_overhead_limit + JDK-8144445: Maximum size checking in Marlin ArrayCache utility methods is not optimal + JDK-8144446: Automate the Marlin crash test + JDK-8144630: Use PrivilegedAction to create Thread in Marlin RendererStats + JDK-8215756: Memory leaks in the AWT on macOS + JDK-8219244: NMT: Change ThreadSafepointState's allocation type from mtInternal to mtThread + JDK-8225128: Add exception for expiring DocuSign root to VerifyCACerts test + JDK-8229345: Memory leak due to vtable stubs not being shared on SPARC + JDK-8229872: (fs) Increase buffer size used with getmntent + JDK-8236179: C1 register allocation error with T_ADDRESS + JDK-8237368: Problem with NullPointerException in RMI TCPEndpoint.read * Import of OpenJDK 8 u252 build 05 + JDK-8022263: use same Clang warnings on BSD as on Linux + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation, removal and some unit tests + JDK-8068184: Fix for JDK-8032832 caused a deadlock + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to XML Signature + JDK-8132130: some docs cleanup + JDK-8144526: Remove Marlin logging use of deleted internal API + JDK-8144654: Improve Marlin logging + JDK-8144718: Pisces / Marlin Strokers may generate invalid curves with huge coordinates and round joins + JDK-8166976: TestCipherPBECons has wrong @run line + JDK-8167409: Invalid value passed to critical JNI function + JDK-8181872: C1: possible overflow when strength reducing integer multiply by constant + JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT + JDK-8191227: issues with unsafe handle resolution + JDK-8216472: (se) Stack overflow during selection operation leads to crash (win) + JDK-8229022: BufferedReader performance can be improved by using StringBuilder + JDK-8231430: C2: Memory stomp in max_array_length() for T_ILLEGAL type + JDK-8235904: Infinite loop when rendering huge lines * Import of OpenJDK 8 u252 build 06 + JDK-8225130: Add exception for expiring Comodo roots to VerifyCACerts test + JDK-8230235: Rendering HTML with empty img attribute and documentBaseKey cause Exception + JDK-8235744: PIT: test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java times out in linux-x64 + JDK-8240521: Revert backport of 8231584: Deadlock with ClassLoader.findLibrary and System.loadLibrary call * Import of OpenJDK 8 u252 build 07 + JDK-8197441: Signature#initSign/initVerify for an invalid private/public key fails with ClassCastException for SunPKCS11 provider * Import of OpenJDK 8 u252 build 08 + JDK-8241296: Segfault in JNIHandleBlock::oops_do() + JDK-8241307: Marlin renderer should not be the default in 8u252 * Import of OpenJDK 8 u252 build 09 + JDK-8204152: SignedObject throws NullPointerException for null keys with an initialized Signature object + JDK-8219597: (bf) Heap buffer state changes could provoke unexpected exceptions * Backports + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean up Unix version of net_util_md.{c,h} + JDK-8167481, PR3784: cleanup of headers and includes for native libnet + JDK-8195607, PR3776: sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with "NSS initialization failed" on NSS 3.34.1 * Bug fixes + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug tracker * Shenandoah + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject + [backport] 8221751: Shenandoah: Improve SATB enqueueing + [backport] 8221848: Shenandoah: ArrayCopy post-barrier improvements + [backport] 8222766: Shenandoah: streamline post-LRB CAS barrier (x86) + [backport] 8223951: Shenandoah: Only need to update thread roots during final update refs + [backport] 8224179: Shenandoah: CTW test failures with traversal GC + [backport] 8224495: Shenandoah: Do not rescan code roots in final mark pause if it is not degenerated GC + [backport] 8224508: Shenandoah: Need to update thread roots in final mark for piggyback ref update cycle + [backport] 8224525: Shenandoah: Eliminate shenandoah verifier's side-effects + [backport] 8225171: Remove leftovers in shenandoahBarrierSetC1.cpp + [backport] 8225341: Shenandoah: CM::update_thread_roots() needs to handle derived pointers + [backport] 8226586: Shenandoah: No need to pre-evacuate roots for degenerated GC + [backport] 8227327: Shenandoah: Faster and more parallel tests + [backport] 8227676: Shenandoah: More consistent naming of LRB entry points + [backport] 8228364: Shenandoah: Remove unused code from ShenandoahBarrierSetC1 + [backport] 8229865: Use explicit #include debug.hpp for STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp + [backport] 8229919: Support JNI Critical functions in object pinning API on x86_32 platforms + [backport] 8231086: Shenandoah: Stronger invariant for object-arraycopy + [backport] 8231293: Shenandoah: Traversal should not revive dead weak roots + [backport] 8231410: Shenandoah: clone barrier should use base pointer + [backport] 8231447: Shenandoah: Compilation-time regression after JDK-8231086 + [backport] 8231499: Shenandoah: compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails + [backport] 8232205: Shenandoah: missing "Update References" - > "Update Roots" tracing + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue checks wrong register + [backport] 8232908: Shenandoah: compact heuristics has incorrect trigger "Free is lower than allocated recently" + [backport] 8233387: Shenandoah: passive mode should disable pacing ergonomically + [backport] 8233520: Shenandoah: do not sleep when thread is attaching + [backport] 8233850: Shenandoah: Shenandoah thread count ergonomics should be container aware + [backport] 8234232: [TESTBUG] gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp + [backport] 8235636: gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after JDK-8226411 + [backport] 8235729: Shenandoah: Remove useless casting to non-constant + [backport] 8236106: [TESTBUG] Shenandoah: Make TestThreadFailure more resilient + [backport] 8236181: C2: Remove useless step_over_gc_barrier() in int->bool conversion + [backport] 8236732: Shenandoah: Stricter placement for oom-evac scopes + [backport] 8236851: Shenandoah: More details in Traversal GC event messages + [backport] 8237007: Shenandoah: assert(_base == Tuple) failure during C2 compilation + [backport] 8237038: Shenandoah: Reduce thread pool size in TestEvilSyncBug.java test + [backport] 8237570: Shenandoah: cleanup uses of allocation/free threshold in static heuristics + [backport] 8237586: Shenandoah: provide option to disable periodic GC + [backport] 8239868: Shenandoah: ditch C2 node limit adjustments + [backport] 8239904: Shenandoah: accumulated penalties should not be over 100% of capacity + [backport] 8240069: Shenandoah: turn more flags diagnostic + [backport] 8240070: Shenandoah: remove obsolete ShenandoahCommonGCStateLoads + [backport] 8240076: Shenandoah: pacer should cover reset and preclean phases + [backport] 8240215: Shenandoah: remove ShenandoahAllocationTrace + [backport] 8240216: Shenandoah: remove ShenandoahTerminationTrace + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist + [backport] 8240534: Shenandoah: ditch debug safepoint timeout adjustment + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject + Fix tier2_gc_shenandoah group definition + Rectify JDK-8191227 workaround for Shenandoah + Revert leftover changes in type.{cpp|hpp} + JDK-8233500: Shenandoah: Shenandoah load barrier should save registers before calling keep alive barrier on x86 * AArch64 port + JDK-8224851, PR3785: AArch64: fix warnings and errors with Clang and GCC 8.3 * AArch32 port + JDK-8240219: CPU specific port of 8229345: Memory leak due to vtable stubs not being shared on SPARC- The pack200 and unpack200 alternatives should be slaves of java and not of javac, since they are part of JRE.- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new compilers (boo#1160398)- On platform where OpenJ9 exists, avoid building with it in order to prevent build cycles- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU, bsc#1160968) * Security fixes + S8225261: Better method resolutions + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets + S8225279: Better XRender interpolation + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities + S8227758: More valid PKIX processing + S8227816: More Colorful ICC profiles + S8228548, CVE-2020-2593: Normalize normalization for all + S8229951, CVE-2020-2601: Better Ticket Granting Services + S8230279: Improve Pack200 file reading + S8230318: Better trust store usage + S8230967: Improve Registry support of clients + S8231129: More glyph images + S8231139: Improved keystore support + S8231422, CVE-2020-2604: Better serial filter handling + S8231795, CVE-2020-2659: Enhance datagram socket support + S8232419: Improve Registry registration + S8234037, CVE-2020-2654: Improve Object Identifier Processing * Import of OpenJDK 8 u242 build 01 + S8010500: [parfait] Possible null pointer dereference at hotspot/src/share/vm/opto/loopnode.hpp + S8067429: java.lang.VerifyError: Inconsistent stackmap frames at branch target + S8073154: NULL-pointer dereferencing in LIR_OpProfileType::print_instr + S8077707: jdk9 b58 cannot run any graphical application on Win 8 with JAWS running + S8132249: Clean up JAB debugging code + S8133951: Zero interpreter asserts in stubRoutines.cpp + S8134739: compiler/loopopts/superword/ /TestVectorizationWithInvariant crashes in loop opts + S8212071: Need to set the FreeType LCD Filter to reduce fringing. + S8230238: Add another regression test for JDK-8134739 + S8230813: Add JDK-8010500 to compiler/loopopts/superword/ /TestFuzzPreLoop.java bug list + S8231398: Add time tracing for gc log rotation at safepoint cleanup + S8231988: Unexpected test result caused by C2 IdealLoopTree::do_remove_empty_loop * Import of OpenJDK 8 u242 build 02 + S8057986: freetype code to get glyph outline does not handle initial control point properly + S8068736: Avoid synchronization on Executable/Field.declaredAnnotations + S8073347: javadoc of Formattable messed up by JDK-8019857 + S8206173: MallocSiteTable::initialize() doesn't take function descriptors into account + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/GE_init5.java + S8218558: NMT stack traces in output should show mt component for virtual memory allocations + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap when change keybord map + S8228888: C2 compilation fails with assert "m has strange control" + S8229020: Failure on CPUs allowing loads reordering: assert(_tasks[t] == 1) failed: What else? + S8229169: False failure of GenericTaskQueue::pop_local on architectures with weak memory model + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n) return false if n is not in the CG + S8231887: ComodoCA.java fails because certificate was revoked * Import of OpenJDK 8 u242 build 04 + S8048556: Unnecessary GCLocker-initiated young GCs + S8073108: Use x86 and SPARC CPU instructions for GHASH acceleration + S8130341: GHASH 32bit intrinsics has AEADBadTagException + S8139178: Wrong fontMetrics when printing in Landscape (OpenJDK) + S8146238: [macosx] Java2D Queue Flusher crash on OSX after switching between user accounts + S8196681: Java Access Bridge logging and debug flags dynamically controlled + S8204288: Matching the end of a string followed by an empty greedy regex and a word boundary fails + S8204290: Add check to limit number of capture groups + S8219914: Change the environment variable for Java Access Bridge logging to have a directory. + S8225505: ctrl-F1 does not show the tooltip of a menu item (JMenuItems) * Import of OpenJDK 8 u242 build 05 + S8029629: java/lang/ProcessBuilder/Basic.java fails intermittently + S8055351: sun/security/provider/DSA/ /TestAlgParameterGenerator.java failed with interrupted! (timed out?) + S8131778: java disables UseAES flag when using VIS=2 on sparc + S8133489: Better messaging for PKIX path validation matching + S8134424: BlockDataInputStream.readUTFBody: size local StringBuffer with the given length + S8156028: G1YoungGenSizer _adaptive_size not correct when setting NewSize and MaxNewSize to the same value + S8170641: sun/net/www/protocol/https/HttpsURLConnection/ /PostThruProxy.sh fails with timeout + S8173956: KeyStore regression due to default keystore being changed to PKCS12 + S8185898: setRequestProperty(key, null) results in HTTP header without colon in request + S8189762: [TESTBUG] Create tests for JDK-8146115 container awareness and resource configuration + S8194653: Deadlock involving FileSystems.getDefault and System.loadLibrary call + S8195088: [TEST_BUG] StartManagementAgent got unexpected exception + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java and tls/TestKeyMaterial.java due to JDK-8180837 + S8198649: Switch AWT/Swing's default GTK version to 3 + S8208715: Conversion of milliseconds to nanoseconds in UNIXProcess contains bug + S8213119: [macos] java/awt/GraphicsDevice/CheckDisplayModes.java fails + S8215210: [macos] Hangul text does not shape to the precomposed form on JDK8u + S8216401: Allow "file:" URLs in Class-Path of local JARs + S8221172: SunEC specific test is not limited to SunEC + S8221246: NullPointerException within Win32ShellFolder2 + S8222496: [8u] Switch on GTK3 as a default GTK L&F in client-libs + S8223490: Optimize search algorithm for determining default time zone + S8225141: Better handling of classes in error state in fast class initialization checks + S8229420: [Redo] jstat reports incorrect values for OU for CMS GC + S8231124: Missing closedir call with JDK-8223490 + S8231584: Deadlock with ClassLoader.findLibrary and System.loadLibrary call + S8232984: Upgrading Joni License version to 2.1.16 + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java hit hardcoded expiration date + S8234591: [11u] Build with old C compiler broken by 8223490 + S8236178: Debug build failed after 8236058 * Import of OpenJDK 8 u242 build 06 + S8227715: GPLv2 files missing Classpath Exception + S8232019: Add LuxTrust certificate updates to the existing root program + S8233223: Add Amazon Root CA certificates + S8235850: [TESTBUG] Remove test/runtime/RedefineTests/test8178870.sh * Import of OpenJDK 8 u242 build 07 + S8037550: Update RFC references in javadoc to RFC 5280 + S8039438: Some tests depend on internal API sun.misc.IOUtils + S8044500: Add kinit options and krb5.conf flags that allow users to obtain renewable tickets and specify ticket lifetimes + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal logic, relies on clockskew grace + S8080835: Add blocking bulk read to sun.misc.IOUtils + S8138978: Examine usages of sun.misc.IOUtils + S8139206: Add InputStream readNBytes(int len) + S8183591: Incorrect behavior when reading DER value with Integer.MAX_VALUE length + S8186576: KerberosTicket does not properly handle renewable tickets at the end of their lifetime + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib in one test + S8193832: Performance of InputStream.readAllBytes() could be improved + S8196956: (ch) More channels cleanup + S8201627: Kerberos sequence number issues + S8215032: Support Kerberos cross-realm referrals (RFC 6806) + S8226719: Kerberos login to Windows 2000 failed with "Inappropriate type of checksum in message" + S8227061: KDC.java test behaves incorrectly when AS-REQ contains a PAData not PA-ENC-TS-ENC + S8227381: GSS login fails with PREAUTH_FAILED + S8227437: S4U2proxy cannot continue because server's TGT cannot be found + S8232381: add result NULL-checking to freetypeScaler.c + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field package private + S8235909: File.exists throws AccessControlException for invalid paths when a SecurityManager is installed + S8236983: [TESTBUG] Remove pointless catch block in test/jdk/sun/security/util/DerValue/BadValue.java + S8236984: Add compatibility wrapper for IOUtils.readFully * Import of OpenJDK 8 u242 build 08 + S8031111: fix krb5 caddr + S8132111: Do not request for addresses for forwarded TGT * Shenandoah + Add missing include in shenandoahOopClosures.cpp + Avoid initializing unused SharedHeap::_workers for Shenandoah + [backport] 8221435: Shenandoah should not mark through weak roots + [backport] 8221766: Load-reference barriers for Shenandoah + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N case in get_barrier_strength() + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when running cometd benchmarks + [backport] 8223448: Shenandoah disabled barriers blocks omit LRB + [backport] 8223450: Disable Shenandoah C2 barriers verification for x86_32 + [backport] 8223567: Rename ShenandoahBrooksPointer to ShenandoahForwarding + [backport] 8224496: Shenandoah compilation fails with assert(is_CountedLoopEnd()) failed: invalid node class + [backport] 8224522: Shenandoah should apply barriers on deoptimization + [backport] 8224584: Shenandoah: Eliminate forwarding pointer word + [backport] 8224667: Shenandoah: Post-LRB cleanup + [backport] 8224881: Shenandoah: trashing "Collection Set, Pinned" region during Degenerated GC + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock, make it general purpose lock + [backport] 8225017: [TESTBUG] gc/shenandoah/oom/TestThreadFailure.java takes too long + [backport] 8225046: Shenandoah metrics logs refactoring + [backport] 8225048: Shenandoah x86_32 support + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs + [backport] 8225229: Shenandoah: trim down default number of GC threads + [backport] 8225357: Rewire ShenandoahHeap::maybe_update_with_forwarded for contending fixups + [backport] 8225441: Cleanup ShenandoahHeap::atomic_compare_exchange_oop + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should inherit from AllStatic + [backport] 8226757: Shenandoah: Make traversal and passive modes explicit + [backport] 8226957: Shenandoah: Remove obsoleted ShenandoahStoreCheck option + [backport] 8228775: Shenandoah: Remove useless null-input-verification in Shenandoah/C2 verifier + [backport] 8229002: Shenandoah: Missing node types in ShenandoahLoadReferenceBarrier::needs_barrier_impl() + [backport] 8229231: Shenandoah: Non-PCH builds failed after JDK-8224932 + [backport] 8229350: Shenandoah does not need barriers before CreateEx + [backport] 8229416: Shenandoah: Demote or remove ShenandoahOptimize*Final optimizations + [backport] 8229419: Shenandoah: Cleanup LRB strength selector code + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume Server VM by default + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup crashes with NULL forwardee + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed: Null dominator info + [backport] 8231583: Shenandoah: Fix register clash in SBSA::resolve_forwarding_pointer() borrowing + [backport] 8231667: Shenandoah: Full GC should take empty regions into slices for compaction + [backport] 8231932: Shenandoah: conc/par GC threads ergonomics overrides user settings + [backport] 8231946: Remove obsolete and unused ShenandoahVerifyObjectEquals flag + [backport] 8231947: Shenandoah: cleanup ShenandoahHumongousMoves flag treatment + [backport] 8232102: Shenandoah: print everything in proper units + [backport] 8232176: Shenandoah: new assert in ShenandoahEvacuationTask is too strong + [backport] 8232534: Shenandoah: guard against reentrant ShenandoahHeapLock locking + [backport] 8232573: Shenandoah: cleanup and add more logging for in-pause phases + [backport] 8232575: Shenandoah: asynchronous object/region pinning + [backport] 8232702: Shenandoah: gc/shenandoah/TestVerifyJCStress.java uses non-existent - XX:+VerifyObjectEquals + [backport] 8232729: Shenandoah: assert ShenandoahHeap::cas_oop addresses are aligned + [backport] 8232802: Shenandoah: transition between "cset" and "pinned_cset" does not require cancelled gc + [backport] LRB right after call, use is Bool + Backport per-region seqnum tracking + [backport] Relax Shenandoah/C2 verifier against JDK11 shortcomings + [backport] Remove to wrong handlings of Shenandoah LRB in escape analysis + Backport Traversal GC + Cherry-pick JDK-8231201: hs_err should print coalesced safepoint operations in Events section + Cleanup weak JNI refs when not doing reference processing + Correct order between load, LRB and membar nodes + Disable JNI tests for 32-bit platforms, due to lack of jtreg support + Do not enable UseCountedLoopSafepoints in Shenandoah by default + Fix ifdef -> if INCLUDE_ALL_GCS in Shenandoah x86_32 code + Fix leftover commented out code in ShenandoahRuntime::load_reference_barrier_JRT + Fix lock ordering issue when calling JVMTI GetLoadedClasses during marking + Fix naked heap loads in HeapDumper + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity} signatures after LRB backport + Fix Windows build after LRB backports + Fix Zero build after LRB backport moves, remove other stubs + Remove some obsolete Shenandoah code from C2 + Remove StubRoutines::_shenandoah_wb_C and related code + Revert obsolete shared-code changes in runtime synchronizer code + Revert ShenandoahVerifyObjectEquals additions, not required after LRB + S8236829: JDK-8232102 backport breaks s390 + Save vector registers before LRB slowpath call + Shenandoah: JvmtiExport::weak_oops_do should not be entered by multiple threads + Shenandoah SA: support live region iteration + Use correct flag to guard implicit concurrent GC * AArch64 port + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU instructions for GHASH acceleration + S8135018, PR3772: AARCH64: Missing memory barriers for CMS collector + S8209835, PR3772: Aarch64: elide barriers on all volatile operations + S8233839, PR3772: aarch64: missing memory barrier in NewObjectArrayStub and NewTypeArrayStub- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU, bsc#1154212) * Security fixes + S8167646: Better invalid FilePermission + S8213429, CVE-2019-2933: Windows file handling redux + S8218573, CVE-2019-2945: Better socket support + S8218877: Help transform transformers + S8220186: Improve use of font temporary files + S8220302, CVE-2019-2949: Better Kerberos ccache handling + S8221497: Optional Panes in Swing + S8221858, CVE-2019-2958: Build Better Processes + S8222684, CVE-2019-2964: Better support for patterns + S8222690, CVE-2019-2962: Better Glyph Images + S8223163: Better pattern recognition + S8223505, CVE-2019-2973: Better pattern compilation + S8223518, CVE-2019-2975: Unexpected exception in jjs + S8223892, CVE-2019-2978: Improved handling of jar files + S8224025: Fix for JDK-8220302 is not complete + S8224532, CVE-2019-2981: Better Path supports + S8224915, CVE-2019-2983: Better serial attributes + S8225286, CVE-2019-2987: Better rendering of native glyphs + S8225292, CVE-2019-2988: Better Graphics2D drawing + S8225298, CVE-2019-2989: Improve TLS connection support + S8225597, CVE-2019-2992: Enhance font glyph mapping + S8226765, CVE-2019-2999: Commentary on Javadoc comments + S8227129: Better ligature for subtables + S8227601: Better collection of references + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations * Import of OpenJDK 8 u232 build 01 + S6913047: Long term memory leak when using PKCS11 and JCE exceeds 32 bit process address space + S6946830: javax.crypto.Cipher.doFinal behavior differs depending on platform + S6996807: FieldReflectorKey hash code computation can be improved + S8030993: Check jdk/src/share/native/common/jni_util.c for JNI pending exceptions + S8075136: Unnecessary sign extension for byte array access + S8075544: Add tiered testing definitions to the jdk repo + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test definition + S8151486: Class.forName causes memory leak + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on Mac OS X + S8168417: Pending exceptions in java.base/windows/native/libnio + S8170494: JNI exception pending in PlainDatagramSocketImpl.c + S8185900: hotspot build failed with gcc version Red Hat 4.4.7-3 + S8185979: PPC64: Implement SHA2 intrinsic + S8197930: JNI exception pending in initializeEncoding of jni_util.c + S8202353: os::readdir should use readdir instead of readdir_r + S8205587: Implicit function declaration in jni_util.c + S8210761: libjsig is being compiled without optimization + S8214002: Cannot use italic font style if the font has embedded bitmap + S8218721: C1's CEE optimization produces safepoint poll with invalid debug information + S8218854: FontMetrics.getMaxAdvance may be less than the maximum FontMetrics.charWidth + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool) + S8221304: Problem list java/awt/FontMetrics/MaxAdvanceIsMax.java + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to duplicate -fstack-protector flags, overriding - -with-extra-cflags + S8225636: SA can't handle prelinked libraries + S8226392: Launcher should not enable legacy stdio streams on GNU/Linux (glibc) + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers + S8226928: [TESTBUG] test/java/net/NetworkInterface/IPv4Only.java fails intermittently on AIX + S8227018: CompletableFuture should not call Runtime.availableProcessors on fast path + S8228405: Incorrect format strings in PhaseIdealLoop::rc_predicate * Import of OpenJDK 8 u232 build 02 + S8075546: Add tiered testing definitions to the langtools repo + S8202252: (aio) Closed AsynchronousSocketChannel keeps completion handler alive + S8216597: SIGBUS in Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after JDK-6913047 + S8220513: Wrapper Key may get deleted when closing sessions in SunPKCS11 crypto provider + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK 8u + S8224580: Matcher can cause oop field/array element to be reloaded + S8226543: Reduce GC pressure during message digest calculations in password-based encryption * Import of OpenJDK 8 u232 build 03 + S8213561: ZipFile/MultiThreadedReadTest.java timed out in tier1 + S8217785: Padding ParallelTaskTerminator::_offered_termination variable * Import of OpenJDK 8 u232 build 04 + S8188868: PPC64: Support AES intrinsics on Big Endian * Import of OpenJDK 8 u232 build 05 + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer memory + S8087128: C2: Disallow definition split on MachCopySpill nodes + S8139965: Hang seen when using com.sun.jndi.ldap.search.replyQueueSize + S8147502: Digest is incorrectly truncated for ECDSA signatures when the bit length of n is less than the field size + S8147611: G1 - Missing memory barrier in start_cset_region_for_worker + S8151066: assert(0 <= i && i < length()) failed: index out of bounds + S8155951: VM crash in nsk/jvmti/RedefineClasses/StressRedefine: assert failed: Corrupted constant pool + S8202948: C2: assert(init_offset >= 0) failed: positive offset from object start + S8203324: Use out of scope in getMacOSXLocale of java_props_macosx.c:120 + S8206879: Currency decimal marker incorrect for Peru + S8211232: GraphKit::make_runtime_call() sometimes attaches wrong memory state to call + S8214687: Optimize Collections.nCopies().hashCode() and equals() + S8214702: Wrong text position for whitespaced string in printing Swing text + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8 + S8215265: C2: range check elimination may allow illegal out of bound access + S8217359: C2 compiler triggers SIGSEGV after transformation in ConvI2LNode::Ideal + S8217731: Font rendering and glyph spacing changed from jdk-8 to jdk-11 + S8217896: Make better use of LCPUs when building on AIX + S8218201: Failures when vmIntrinsics::_getClass is not inlined + S8218280: LineNumberReader throws "Mark invalid" exception if CRLF straddles buffer. + S8218780: Update MUSCLE PCSC-Lite header files + S8219517: assert(false) failed: infinite loop in PhaseIterGVN::optimize + S8220072: GCC 8.3 reports errors in java.base + S8222980: Upgrade IANA Language Subtag Registry to Version 2019-04-03 + S8223177: Data race on JvmtiEnvBase::_tag_map in double-checked locking + S8223227: Rename acquire_tag_map() to tag_map_acquire() in jvmtiEnvBase + S8225423: GTK L&F: JSplitPane: There is no divider shown + S8226798: JVM crash in klassItable::initialize_itable_for_interface(int, InstanceKlass*, bool, Thread*) + S8226964: [Yaru] GTK L&F: There is no difference between menu selected and de-selected + S8228440: TestAESCiphers tests fail with "access denied" trying to access ArrayUtil * Import of OpenJDK 8 u232 build 06 + S8178870: instrumentation.retransformClasses cause coredump + S8216965: crash in freetypeScaler.c CopyBW2Grey8 + S8217676: Upgrade libpng to 1.6.37 + S8222108: Reduce minRefreshTime for updating remote printer list on Windows * Import of OpenJDK 8 u232 build 08 + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find dependent libraries + S8226607: Inconsistent info between pcsclite.md and MUSCLE headers + S8228469: (tz) Upgrade time-zone data to tzdata2019b + S8230085: (fs) FileStore::isReadOnly is always true on macOS Catalina + S8231098: (tz) Upgrade time-zone data to tzdata2019c + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java test in 8u * Shenandoah + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving even after explicitly disabled + Missing include precompiled.hpp in shenandoahSynchronizerIterator.cpp + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS + Prune unneeded (jccb|jmpb)_if_possible + Revert parts of x86_64.ad to 8u upstream state + Revert Shenandoah/JDK8-only changes relating to MonitorInUseLists + Revert Shenandoah-specific assert after JDK-8211926 landed + S8228746: Revert incorrect StubRoutines::contains change + S8231366: Shenandoah: Shenandoah String Dedup thread is not properly initialized * AArch64 port + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic operations + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are not sequentially consistent + S8205421, PR3762: AARCH64: StubCodeMark should be placed after alignment + S8206163, PR3762: AArch64: incorrect code generation for StoreCM + S8209420, PR3762: Track membars for volatile accesses so they can be properly optimized + S8211233, PR3762: MemBarNode::trailing_membar() and MemBarNode::leading_membar() need to handle dying subgraphs better + S8213134, PR3762: AArch64: vector shift failed with MaxVectorSize=8 + S8214857, PR3762: "bad trailing membar" assert failure at memnode.cpp:3220 + S8216350, PR3762: AArch64: monitor unlock fast path not called + S8219011, PR3762: Implement MacroAssembler::warn method on AArch64 + S8228400, PR3762: Remove built-in AArch64 simulator + S8228406, PR3762: Superfluous change in chaitin.hpp + S8228593, PR3762: Revert explicit JDK 7 support additions + S8228716, PR3762: Revert InstanceKlass::print_on debug additions + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to 8-aarch64 + S8228725, PR3762: AArch64: Purge method call format support + S8228747, PR3762: Revert "unused" attribute from test_arraycopy_func + S8228767, PR3762: Revert ResourceMark additions + S8228770, PR3762: Revert development hsdis changes + S8229123, PR3762: Revert build fixes for aarch64/zero + S8229124, PR3762: Revert disassembler.cpp changes + S8229145, PR3762: Revert TemplateTable::bytecode() visibility change + PR3762: profile_has_unique_klass gives wrong result * AArch32 port + [aarch32] Fix debug build failure introduced at feec5f4cea8b + c1: misc bugfixes + [c1] [Spec98] _228_jack crash + CCC: align doubles on stack + CritcalJNI support + Fix ARMv6 target causes some asserts to fail + Fix ccc: float args should go to stack after first double allocated there + Fix for jtreg TestArrayCopy6769124 -Xcomp + Fix for single-core config crash + Fix JVMTI PopFrame: should skip runtime call if next bytecode is not invokestatic + Fix native_wrapper faste unlock register used for temp, avoid clobbering lock_obj register + Fix operand value corruption in arraycopy + Fix SIGSEGV in System.arraycopy + Fix wrong fault_pc in safefetch stubs + Follow-up the fix for 8161598 + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM assert + Raw long address should be converted to sizeof(ptr) one when it is required + S8207838: AArch32: Float registers incorrectly restored in JNI call + save_args/restore_args misses second part of VMRegPair - Removed patch: * hotspot-aarch64.patch + not needed any more with this version- Apply hotspot-aarch64.patch only for aarch64, as some other archs (armv6/7) use other hotspot sources- Add patch to fix boo#1138529: * hotspot-aarch64.patch- Update to version jdk8u222 (icedtea 3.13.0) * Security fixes + S8191073: JpegImageReader throws IndexOutOfBoundsException when trying to read image data from tables-only image + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC Implementation + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol handling + S8213432, CVE-2019-2769, bsc#1141783: Better copies of CopiesList + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege usage + S8217563: Improve realm maintenance + S8218863: Better endpoint checks + S8218873: Improve JSSE endpoint checking + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support options + S8219018: Adjust positions of glyphs + S8219020: Table alternate substitutions + S8219775: Certificate validation improvements + S8220192: Better outlook for SecureRandom + S8220517: Enhanced GIF support + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support * New features + PR3743: Support EA builds * Import of OpenJDK 8 u222 build 01 + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java fails intermittently + S8025209: Intermittent test failure java/net/Socket/asyncClose/AsyncClose.java + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails intermittently + S8031563: TEST_BUG: java/nio/channels/Selector/ChangingInterests.java failed once + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed because of SocketTimeoutException + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can cause RasterFormatException + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with product builds due to missing UnlockDiagnosticVMOptions + S8073078: java/nio/file/FileStore/Basic.java sensitive to NFS configuration + S8129988: JSSE should create a single instance of the cacerts KeyStore + S8137231: sun/security/rsa/SpecTest.java timeout with Agent error: java.lang.Exception + S8150013: ParNew: Prune nmethods scavengable list. + S8151225: Mark SpecTest.java as intermittently failing + S8154156: PPC64: improve array copy stubs by using vector instructions + S8156035: Remove intermittent key from sun/security/rsa/SpecTest.java + S8157287: java/nio/file/FileStore/Basic.java failed with "java.nio.file.AccessDeniedException : /zones/zoneone/root " + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in + S8202768: [macos] Appkit thread slows when any Window Manager active + S8203627: Swing applications with JRadioButton and JCheckbox fail to render correctly when using GTK3 and the GTK L&F + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle both, RPATH and RUNPATH + S8206955: MethodHandleProxies.asInterfaceInstance does not support default methods + S8207760: SAXException: Invalid UTF-16 surrogate detected: d83c ? + S8209951: Problematic sparc intrinsic: com.sun.crypto.provider.CipherBlockChaining + S8213825: assert(false) failed: Non-balanced monitor enter/exit! Likely JNI locking + S8214109: XToolkit is not correctly displayed color on 16-bit high color setting + S8214111: There is no icon in all JOptionPane target image + S8214112: The whole text in target JPasswordField image are not selected + S8214252: Expanded & Collapsed nodes of a JTree look the same on GTK3 + S8214253: Tooltip is transparent rather than having a black background + S8217263: Automate DashOffset test + S8217597: [TESTBUG] old version docker does not support - -cpus + S8218469: JSlider display issue with slider for GTKLookAndFeel + S8218470: JScrollBar display issue with GTKLookAndFeel + S8218472: JProgressBar display issue with GTKLookAndFeel + S8218473: JOptionPane display issue with GTKLookAndFeel + S8218479: JTextPane display issue with GTKLookAndFeel + S8220349: The fix done for JDK-8214253 have caused issues in JTree behaviour + S8220718: Missing ResourceMark in nmethod::metadata_do + S8221789: make reconfigure broken (jdk8u only) + S8222965: Backport of JDK-8129988 broke the build + S8222975: Fix 'release' file to reflect actual repo checkin used to compile JDK * Import of OpenJDK 8 u222 build 02 + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to verify the dump + S8151539: Remove duplicate AlwaysTrueClosures + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference of weak JNI handles + S8210416: [linux] Poor StrictMath performance due to non-optimized compilation + S8217315: Proper units should print more significant digits + S8218674: HTML Tooltip with "img=src" on component doesn't show * Import of OpenJDK 8 u222 build 03 + S7100957: SOCKS proxying does not work with IPv6 connections + S7102541: RFE: os::set_native_thread_name() cleanups + S8144332: HSDB could not terminate when close button is pushed. + S8151322: Implement os::set_native_thread_name() on Solaris + S8154387: Parallel unordered Stream.limit() tries to collect 128 elements even if limit is less + S8189131: Open-source the Oracle JDK Root Certificates + S8189949: Remove Baltimore Cybertrust Code Signing CA + S8191031: Remove several Symantec Root CAs + S8191844: Remove SECOM root (secomevrootca1) + S8195774: Add Entrust root certificates + S8195793: Remove GTE CyberTrust Global Root + S8196141: Add GoDaddy root certificates + S8199779: Add T-Systems, GlobalSign and Starfield services root certificates + S8204923: Restore Symantec root verisignclass2g2ca + S8209506: Add Google Trust Services GlobalSign root certificates + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization + S8210432: Add additional TeliaSonera root certificate + S8213213: Remove src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h + S8214770: java/time/test/java/time/format/ /TestNonIsoFormatter.java failed in non-english locales. + S8216577: Add GlobalSign's R6 Root certificate + S8218152: [javac] fails and exits with no error if a bad annotation processor provided + S8222136: Remove two Comodo root CA certificates that are expiring + S8222137: Remove T-Systems root CA certificate + S8223555: Cleanups in cacerts tests + S8223664: Add jtreg tests for 8223528, backport to jdk8u of 8176100 * Import of OpenJDK 8 u222 build 04 + S8158232: PPC64: improve byte, int and long array copy stubs by using VSX instructions + S8190974: Parallel stream execution within a custom ForkJoinPool should obey the parallelism + S8203190: SessionId.hashCode generates too many collisions + S8223499: Remove two DocuSign root certificates that are expiring + S8223883: Fix jni.cpp copyright date after 8223528 * Import of OpenJDK 8 u222 build 05 + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/ /DashZeroWidth.java not on EDT + S8044289: In ImageIO.write() and ImageIO.read() null stream is not handled properly. + S8055705: Rename UnixPrintServiceLookup and Win32PrintServiceLookup as a platform neutral class name + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation level transition tests + S8075939: Stream.flatMap() causes breaking of short-circuiting of terminal operations + S8143097: java/net/ipv6tests/UdpTest.java fails intermittently with "checkTime failed: got 1998 expected 4000" + S8151226: Mark UdpTest.java as intermittently failing + S8166684: PPC64: implement intrinsic code with vector instructions for Unsafe.copyMemory() + S8185969: PPC64: Improve VSR support to use up to 64 registers + S8193830: Xalan Update: Xalan Java 2.7.2 + S8196775: java/net/Socket/asyncClose/Race.java failed intermittently on Windows with ConnectException: Connection refused + S8202414: Unsafe write after primitive array creation may result in array length change + S8202651: Test ComodoCA.java fails + S8204929: Fonts with embedded bitmaps are not always rotated + S8210886: Remove references in xwindows.md to non-existent files. + S8210985: Update the default SSL session cache size to 20480 + S8213183: InputMethod cannot be used after its restarting + S8214765: All TrayIcon MessageType icons does not show up with gtk3 option set + S8218020: Back out accidental changes that belong elsewhere + S8218020: Fix version number in mesa.md 3rd party legal file + S8220495: Update GIFlib library to the 5.1.8 + S8222670: pathological case of JIT recompilation and code cache bloat + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails with Agent timeout frequently + S8224727: Problem list test security/infra/java/security/ /cert/CertPathValidator/certification/ActalisCA.java + S8225065: Revert 8221166 (8u backport of 8048782) * Import of OpenJDK 8 u222 build 06 + S8173910: (fs) java/nio/file/FileSystem/Basic.java should conditionally check FileStores + S8176237: (fs) java/nio/file/FileStore/Basic.java should conditionally check FileStores + S8202884: SA: Attach/detach might fail on Linux if debugee application create/destroy threads during attaching * Import of OpenJDK 8 u222 build 07 + S8153732: Windows remote printer changes do not reflect in lookupPrintServices() + S8212202: [Windows] Exception if no printers are installed. + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard to use + S8221412: lookupPrintServices() does not always update the list of Windows remote printers + S8225716: G1 GC: Undefined behaviour in G1BlockOffsetTablePart::block_at_or_preceding * Import of OpenJDK 8 u222 build 08 + S8040211: Update LSR datafile for BCP 47 + S8177472: Remove hard-coded IANA Subtag Registry map in LocaleEquivalentMap.java + S8181594: Efficient and constant-time modular arithmetic + S8182999: SunEC throws ProviderException on invalid curves + S8187946: Support ISO 4217 Amendments 163 and 164 + S8191404: Upgrading JDK with latest available LSR data from IANA. + S8193552: ISO 4217 amendment 165 + S8195478: sun/text/resources/LocaleDataTest.java fails with java.lang.Exception + S8201317: X25519/X448 code improvements + S8202026: ISO 4217 amendment 166 + S8203228: Branch-free output conversion for X25519 and X448 + S8203872: Upgrading JDK with latest available LSR data from IANA. + S8204269: ISO 4217 amendment 167 + S8208648: ECC Field Arithmetic Enhancements + S8208746: ISO 4217 Amendment #168 update + S8209775: ISO 4217 Amendment #169 update + S8210153: localized currency symbol of VES + S8213294: Upgrade IANA LSR data + S8214935: Upgrade IANA LSR data + S8219781: Localized names for Japanese era Reiwa in COMPAT provider * Import of OpenJDK 8 u222 build 09 + S8135248: Add utility methods to check indexes and ranges + S8142493: Utility methods to check indexes and ranges doesn't specify behavior when function produces null + S8146458: Improve exception reporting for Objects.checkIndex/checkFromToIndex/checkFromIndexSize + S8155794: Move Objects.checkIndex BiFunction accepting methods to an internal package + S8179098: Crypto AES/ECB encryption/decryption performance regression (introduced in jdk9b73) * Import of OpenJDK 8 u222 build 10 + S8157792: After Integrating tzdata2016d the test/sun/util/ /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and "Asia/Qyzylorda" Timezones + S8215982: (tz) Upgrade time-zone data to tzdata2018i + S8224560: (tz) Upgrade time-zone data to tzdata2019a + S8225580: tzdata2018i integration causes test failures on jdk-13 * Shenandoah + [backport] 8210879: ClassLoaderStatsClosure does raw oop comparison + [backport] 8216973: Kick up cleanup phases in the right places + [backport] 8217016: Shenandoah: Streamline generation of CAS barriers + [backport] 8217043: Shenandoah: SIGSEGV in Type::meet_helper() at barrier expansion time + [backport] 8217213: shenandoahTaskQueue.hpp includes .inline.hpp file + [backport] 8217319: Cleanup Shenandoah includes + [backport] 8217343: Shenandoah control thread should be able to run at critical priority + [backport] 8217400: Optimized build is broken by Shenandoah changes + [backport] 8217874: Shenandoah: Clobbered register in ShenandoahBarrierSetAssembler::cmpxchg_oop() + [backport] 8219524: Shenandoah misreports "committed" size in MemoryMXBean + [backport] 8219857: Shenandoah GC may initialize thread's gclab twice + [backport] 8219976: GarbageCollectionNotificationInfo always says "No GC" when running Shenandoah + [backport] 8220153: Shenandoah does not work with TransparentHugePages properly + [backport] 8220162: Shenandoah should not commit HugeTLBFS memory + [backport] 8220228: Improve Shenandoah pacing histogram message + [backport] 8220350: Refactor ShenandoahHeap::initialize + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/ /TestMaybeNullUnsafeAccess should run with Shenandoah enabled + [backport] 8220714: C2 Compilation failure when accessing off-heap memory using Unsafe + [backport] 8221278: Shenandoah should not enqueue string dedup candidates during root scan + [backport] 8222130: Shenandoah should verify roots after pre-evacuation + [backport] 8222185: Shenandoah should report "committed" as capacity + [backport] 8222186: Shenandoah should not uncommit below minimum heap size + [backport] 8222403: Shenandoah: Remove ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead + [backport] 8222425: Shenandoah: Move commonly used closures to separate files + [backport] 8223446: Shenandoah breaks alignment with some HumongousThreshold values + [backport] 8223447: Stabilize gc/shenandoah/TestStringDedupStress test + [backport] 8223651: Build fails with - -with-jvm-features=-jfr and --disable-precompiled-headers + [backport] 8223759: Shenandoah should allow arbitrarily low initial heap size + [backport] 8223762: Shenandoah: overflows in calculations involving heap capacity + [backport] 8223767: Shenandoah fails to build on Solaris x86_64 + [backport] 8223980: Shenandoah: Refactor and fix ObjArrayChunkedTask verification + [backport] 8222838: Shenandoah: SEGV on accessing cset bitmap for NULL ptr + [backport] 8222843: Print Shenandoah cset map addresses in hs_err + [backport] Added a few missed worker sessions for worker tasks + [backport] Add JFR parallel and concurrent events (infrastructure) + [backport] Adjust metaspace size during each GC + [backport] A few more missing object equals barriers + [backport] Always copy forward for disjoint arrays (test) + [backport] Assert that Shenandoah does not trip JDK-8211926 + [backport] Avoid false sharing by padding the ShenandoahEvacOOMHandler field in ShenandoahHeap + [backport] Avoid write barrier during full GC + [backport] Beef up and parallelize EvilSyncBug test + [backport] c2 verification pass fixes for CAS + [backport] Cherry-pick bulk MarkBitMap clearing methods + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast + [backport] Cleanup .ad files includes + [backport] Clean up and regroup Shenandoah flags + [backport] Cleanup buffered queue handling + [backport] Cleanup C2 debugging leftovers + [backport] Clean up dead code + [backport] Clean up declarations and uses of marked_object_iterate + [backport] Cleanup header files and forward declarations + [backport] Clean up Shenandoah configurations in shared tests + [backport] Clean up ShHeap::heap_region_iterate uses + [backport] Cleanup unused bitmap methods + [backport] Cleanup up superfluous newlines + [backport] Coarsen Full GC use of heap lock + [backport] Code root iterators should not be instantiated in worker threads + [backport] Common liveness cache in ShHeap + [backport] Compact heuristics adjustments + [backport] Concurrent cycle by default on any external GC request + [backport] Disable heap iteration for Shenandoah in SA + [backport] Disable ShHeapUncommit on too-large large-pages + [backport] Drop Shenandoah from test names + [backport] Eliminating Shenandoah exposure to CLD + [backport] Enable NUMA by default + [backport] Enable string deduplication in all marking phases + [backport] Factor out implicit/explicit GC requests + [backport] Fail early when critical barriers are disabled + [backport] Filter out TestPromotionToSurvivor.java test for Shenandoah + [backport] Filter upstream tests for Shenandoah (part 1: tier1_gc) + [backport] Fix build failures when Shenandoah is disabled, after #include reshuffles + [backport] Fix call to is_g1_marking_load() with is_shenandoah_state_load() in ShenandoahSupport + [backport] Fix compilation errors due to missing spaces between string literal and macro + [backport] Fixed ShenandoahStrDedupStress test that causes negative index OOB exception + [backport] Fix inconsistent "process weakrefs" logging + [backport] Fix indentation of CriticalNative* tests + [backport] Fix indenting in ShMarkCompact::do_it + [backport] Fix up superfluous changes against upstream + [backport] Fix various formattings and namings in shared GC code + [backport] Fix Windows build failure + [backport] Force termination logic is inverted + [backport] Handle metadata induced GC + [backport] Handle ShHeap::time_since_last_millis for RMI users + [backport] Handle update_refs, class_unload, ref_proc in ShConcMark better + [backport] Homogenize unimplemented stubs handling + [backport] Improve liveness count during marking + [backport] Initial committed regions count can be more than max + [backport] Inline/rename confusingly named methods in ShConcurrentMark + [backport] Inline ShHeap::do_marked_object_complete + [backport] Inline ShHeap::monitoring_support into header + [backport] Inline ShHeap::prepare_concurrent_evacuation + [backport] Inline trivial ShHeap methods right in header + [backport] In update-refs, update all code-roots when in degen-gc + [backport] JVMTI lacks a few GC barriers/hooks + [backport] Make heuristics tell if we can process references or unload classes + [backport] Make ResourceMark use consistent in ShenandoahCodeRoots + [backport] Make Shenandoah to use ShenandoahOWST only + [backport] Make sure bitmap is marked incomplete before bitmap resets + [backport] Make sure debug builds fail predictably on safepoint timeout + [backport] Micro-optimize ShHeap::get_region by moving the most likely branch first + [backport] Minor cleanup of Shenandoah SA + [backport] Missed VerifyObjectEquals in VerifyJCStressTest + [backport] More AArch64 assembler cleanups + [backport] Move HdrSeq and BinaryMagnitudeSeq into Shenandoah utilities + [backport] Move ShenandoahAllocType and ShenandoahAllocRequest to separate file + [backport] Move ShenandoahGCTracer to gc/shenandoah + [backport] Move Shenandoah tests to proper locations + [backport] Need to step over GC barriers in Node::eqv_uncast() + [backport] Parallel heap region iteration + [backport] Parallelise "Clear Liveness" + [backport] Parallelise "Complete Liveness" + [backport] Partial infrastructure for suspendible workers + [backport] Precleaning should use GC workers to do actual work + [backport] Pre-evac JVMTI roots + fixes + [backport] Prefix Shenandoah tests with "Test" + [backport] Prepare tests for making UseShenandoahGC experimental + [backport] Print number of threads in Shenandoah SA heap summary + [backport] Print "process weakrefs" to disambiguate vs CM-with-UR + [backport] Protect more internal code from false sharing + [backport] Protect risky conversion in ShenandoahHeap::millis_since_last_gc + [backport] Purge some G1-related cruft in C2 + [backport] Purge unnecessary time conversion in ShenandoahPhaseTimings::record_phase_time + [backport] Readjust ShenandoahStrDedupStress test to avoid timeout + [backport] Record location when asserting the code root correctness + [backport] Refactor bitmap cleaning + [backport] Reformat Shenandoah tests + [backport] Rehash and cleanup usages of ShenandoahHeap::heap() + [backport] Re-label Shenandoah GC causes (SA&GC) + [backport] Remove dead-weight ShenandoahPrinter + [backport] Remove fix-roots pass in ShHeap + [backport] Remove obsolete and ignored TestHeapAlloc + [backport] Remove obsolete code snippet related to barriers on constants + [backport] Remove obsolete unused flags + [backport] Remove old code from escape analysis + [backport] Remove Parallel Cleanup counters + [backport] Remove ShenandoahCompileCheck + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag + [backport] Remove ShenandoahWriteBarrierRB flag + [backport] Remove ShHeap::_heap_expansion_count + [backport] Remove ShHeap::region_in_collection_set in favor of SHR::in_cset + [backport] Remove ShWB from formssel.cpp + [backport] Remove unused SA ShenandoahHeapRegionSet.java + [backport] Remove unused ShenandoahEvacuateRootsClosure + [backport] Remove useless change in loopnode.cpp + [backport] Remove useless ShHeap::heap_region_iterate + [backport] Rename BrooksPointer to ShenandoahBrooksPointer + [backport] Rename concurrentMark -> concurrent_mark + [backport] Rename fields in (SA) ShenandoahHeap.java to omit 'Regions' and 'Field' suffix + [backport] Rename ShHeap::shenandoahPolicy -> ShHeap::shenandoah_policy + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W + [backport] Rename VerifyObjectEquals to ShenandoahVerifyObjectEquals + [backport] Rename vm_operations_shenandoah.* to shenandoahVMOperations.* + [backport] Renaming ShenandoahParallelEvacuationTask to ShenandoahConcurrentEvacuationTask + [backport] Separate "passive" heuristics from "adaptive" + [backport] Several AArch64 cleanups + [backport] ShenandoahMemoryPool should support usage threshold + [backport] Shenandoah should @require Shenandoah, @key gc, and have good @test + [backport] Shenandoah test groups should not include each other + [backport] Silence VSC++ about multiple assignment operators + [backport] Simplify Shenandoah task termination in aborted paths + [backport] Single marking bitmap + [backport] Skip pre-evac verification and pacing on shortcut cycle path + [backport] Some Shenandoah related additions to SA + [backport] Sort ShenandoahConcurrentMark methods/fields into logical groups + [backport] Sort ShenandoahHeap methods/fields into logical groups + [backport] StringDedupMode enum for closures/method templates + [backport] Support VerifyBeforeGC and VerifyAfterGC VM options + [backport] Suppressing VSC++ warning locally + [backport] Trim down oop-equals verification + [backport] Trim unused code from Shenandoah SA + [backport] Turn TestReferenceCAS into a standalone/no-testng test + [backport] Update copyrights + [backport] Use ShenandoahAllocationThreshold in ShenandoahStaticHeuristics constructor + [backport] Use s-macro to keep GC phase enum and names in sync + Enable heap inspection for Shenandoah + Excess barriers before JNI accesses, already covered by "Move barriers into typeArrayOop.hpp direct memory accessors" + Fix build failure due to unknown INCLUDE_SHENANDOAHGC + Fix dangling write-barrier in acmp + Fix force termination detection by spin master + Fix minimal VM build + Fix non-PCH builds + Fix shutdown deadlock due to blocking SATB flush periodic task + JDK8u-only: Use WB-based acmp barrier + Prettify Shenandoah JDK 8 logging + ShenandoahSATBBufferSize cannot be size_t in 8u + Adjust code stub sizes for Shenandoah and future backports + Enable weak JNI handling with Shenandoah after JDK-8176100 * AArch64 port + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre barrier on dereference of weak JNI handles + S8186325, PR3745: AArch64: jtreg test hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization + S8224671, PR3745: AArch64: mauve System.arraycopy test failure + S8224828, PR3745: aarch64: rflags is not correct after safepoint poll + S8224880, PR3745: AArch64: java/javac error with AllocatePrefetchDistance * AArch32 port + [aarch32] fix crash 'guarantee(sect->end() <= tend) failed: sanity' + Remove debug output + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on dereference of weak JNI handles - Removed patch: * aarch64.patch + not needed any more- Do not fail installation when the manpages are not present (bsc#1115375)- Update to version jdk8u212 (icedtea 3.12.0) * Security fixes + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI interactions + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts: setCurrGlyphID() * New features + PR3734: Make use of branding options * Import of OpenJDK 8 u202 build 08 + S8064811: Use THREAD instead of CHECK_NULL in return statements + S8068440: Test6857159.java times out + S8073139: PPC64: User-visible arch directory and os.arch value on ppc64le cause issues with Java tooling + S8073159: improve Test6857159.java + S8129560: TestKeyPairGenerator.java fails on Solaris because private exponent needs to comply with FIPS 186-4 + S8130655: OS X: keyboard input in textfield is not possible if the window contained textfield is owned by EmbeddedFrame + S8131051: KDC might issue a renewable ticket even if not requested + S8134124: sun/security/tools/jarsigner/warnings.sh fails when using Hindi locale + S8139507: WARNING: Could not open/create prefs root node Software\JavaSoft\Prefs + S8141421: Various test fail with OOME on win x86 + S8145788: JVM crashes with -XX:+EnableTracing + S8155635: C2: Mixed unsafe accesses break alias analysis + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is /dev/urandom + S8160928: javac incorrectly copies over interior type annotations to bridge method + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/ /MenuBarPeerDisposeTest.java fails in unix enviroments with NullPointerException + S8163083: SocketListeningConnector does not allow invocations with port 0 + S8164383: jhsdb dumps core on Solaris 12 when loading dumped core + S8170937: Swing apps are slow if displaying from a remote source to many local displays + S8174050: Compilation errors with clang-4.0 + S8182461: IndexOutOfBoundsException when reading indexed color BMP + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failed due to libnss3 version cannot be parsed + S8187218: GSSCredential.getRemainingLifetime() returns negative value for TTL > 24 days. + S8191006: hsdis disassembler plugin does not compile with binutils 2.29+ + S8191178: [macos] Problem with input of yen symbol + S8191948: db error: InvalidTypeException: Can't assign double[][][] to double[][][] + S8193879: Java debugger hangs on method invocation + S8194864: Outputs more details for PKCS11 tests if the NSS lib version cannot be determined + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes C2084 Already Defined Compilation Error + S8200719: Cannot connect to IPv6 host when exists any active network interface without IPv6 address + S8201801: RTL language (Hebrew) is presented from left to right + S8202264: Race condition in AudioClip.loop() + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after upgrading compiler to VC 2017 + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/ /IsMethodCompilableTest.java test fails with - XX:CompileThreshold=1 + S8205479: OS X: requestFocus() does not work properly for embedded frame + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK + S8206392: [macosx] Cycling through windows (JFrames) does not work with keyboard shortcut + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails in 8u-dev + S8207060: Memory leak when malloc fails within WITH_UNICODE_STRING block + S8207145: (fs) Native memory leak in WindowsNativeDispatcher.LookupPrivilegeValue0 + S8207150: Clip.isRunning() may return true after Clip.stop() was called + S8207322: Backport GTK3 support on Linux to 8u + S8207750: Native handle leak in java.io.WinNTFileSystem.list() + S8208091: SA: jhsdb jstack --mixed throws UnmappedAddressException on i686 + S8208183: update HSDIS plugin license to UPL + S8208541: non-ASCII characters in hsdis UPL text + S8208638: Instead of circle rendered in appl window, but ellipse is produced JEditor Pane + S8209184: JCK Test Failure due to ResourceBundle + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to build with VS2017. + S8209863: Add a test to verify that -XX:+EnableTracing works + S8210350: -Wl,-z,defs JDK 8 build failure + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java slow on linux + S8210891: Remove unused extutil.h from JDK8u sources + S8211124: HotSpot update for vm_version.cpp to recognise updated VS2017 + S8211150: G1 Full GC not purging code root memory and hence causing memory leak + S8211394: CHECK_ must be used in the rhs of an assignment statement within a block + S8211909: JDWP Transport Listener: dt_socket thread crash + S8211933: [8u] hotspot adlc needs to link statically with libstdc++ for gcc7.3 + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev + S8212821: CHECK_ must be used in the rhs of an assignment statement within a block (round 2) * Import of OpenJDK 8 u212 build 04 + S7127191: SA JSDB does not display native symbols correctly for transported Linux cores + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork + S8028254: gc/arguments/TestMinInitialErgonomics.java failed with unexpected initial heap size + S8042131: DateTimeFormatterBuilder Mapped-values do not work for JapaneseDate + S8043387: java/time/test/java/util/TestFormatter.java failed. + S8044047: Missing null pointer checks for streams + S8059038: Create new launcher for SA tools + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java fails at nightly + S8068269: RTM tests that assert on non-zero lock statistics are too strict in RTMTotalCountIncrRate > 1 cases + S8076164: [JTextField] When input too long Thai character, cursor's behavior is odd + S8076274: [TESTBUG] Remove @ignore from runtime\NMT\JcmdDetailDiff.java + S8076458: java/util/stream/test/org/openjdk/tests/java/util/ /stream/FlatMapOpTest.java timeout + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in agentvm mode + S8080932: [TEST_BUG] Test java/awt/BasicStroke/DashStrokeTest.java fails with Bad script error due to improper @run notation + S8132136: [PIT] RTL orientation in JEditorPane is broken + S8132985: Crash in freetypescaler.c due to double free + S8133108: [PIT] Container size is wrong in JEditorPane + S8133731: [TEST_BUG] Unmappable in ASCII character such as Thai should be escaped in the regtests targeted for a regular non-I18n runs + S8133802: replace some tags (obsolete in html5) in security-libs docs + S8133984: print_compressed_class_space() is only defined in 64-bit VM + S8139803: Fix for 8132985 breaks OpenJDK build on windows. + S8148928: java/util/stream/test/**/SequentialOpTest.java timed out intermittently + S8164656: krb5 does not retry if TCP connection timeouts + S8170681: Remove fontconfig header files from JDK source tree + S8175120: Remove old tests on kdc timeout policy + S8180469: Wrong short form text for supplemental Japanese era + S8180904: Hotspot tests running with -agentvm failing due to classpath + S8185975: PPC64: Fix vsldoi interface according to the ISA + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol in Swing text component + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR, but no configure flag + S8193764: Cannot set COMPANY_NAME when configuring a build + S8195153: [test] runtime/6981737/Test6981737.java shouldn't check 'java.vendor' and 'java.vm.vendor' properties + S8200109: NMT: diff_malloc_site assert(early->flags() == current->flags(), "Must be the same memory type") + S8200115: System property java.vm.vendor value includes quotation marks + S8202088: Japanese new era implementation + S8204142: AWT hang occurs when sequenced events arrive out of sequence in multiple AppContexts + S8205432: Replace the placeholder Japanese era name + S8206075: On x86, assert on unbound assembler Labels used as branch targets + S8206120: Add test cases for lenient Japanese era parsing + S8207070: Webstart app popup on wrong screen in a one-screen setup changing to multi-monitor + S8207152: Placeholder for Japanese new era should be two characters + S8207258: Distrust TLS server certificates anchored by Symantec Root CAs + S8208480: Test failure: assert(is_bound() || is_unused()) after JDK-8206075 in C1 + S8208656: Move java/util/Calendar/CalendarTestScripts tests into OpenJDK + S8210633: Cannot parse JapaneseDate string with DateTimeFormatterBuilder Mapped-values + S8210647: libsaproc is being compiled without optimization + S8211106: [windows] Update OS detection code to recognize Windows Server 2019 + S8211231: BarrierSetC1::generate_referent_check() confuses register allocator + S8211382: ISO2022JP and GB18030 NIO converter issues + S8211398: Square character support for the Japanese new era + S8211435: Exception in thread "AWT-EventQueue-1" java.lang.IllegalArgumentException: null source + S8211926: Catastrophic size_t underflow in BitMap::*_large methods + S8212110: Build of saproc.dll broken on Windows 32 bit after JDK-8210647 + S8212178: Soft reference reclamation race in com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator + S8212914: Test javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails + S8212941: Support new Japanese era in java.time.chrono.JapaneseEra + S8213151: [AIX] Some class library files are missing the Classpath exception + S8213154: Update copyright headers of files in src tree that are missing Classpath exception + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1 + S8213583: Error while opening the JFileChooser when desktop contains shortcuts pointing to deleted files. + S8213952: Relax DNSName restriction as per RFC 1123 + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d stops working properly if popup window is displayed + S8213992: Rename and make DieOnSafepointTimeout the diagnostic option + S8214061: Buffer written into itself + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/ /MulExactLConstantTest.java fails on Windows x64 when run with -XX:-TieredCompilation + S8214206: Fix for JDK-8213419 is broken on 32-bit + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while using Swing-FX interop + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values don't reflect mixed GC results + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with linux header files + S8216037: Avoid calling vm_update with a NULL name + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails after JDK-8215992 + S8216396: Support new Japanese era and new currency code points in java.lang.Character for Java SE 8 + S8217305: Missing 0 in java.dll file version cause issues with patch management software + S8217432: MetaspaceGC::_capacity_until_GC exceeds MaxMetaspaceSize + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from TestOldGenCollectionUsage.java + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883 + S8217609: New era placeholder not recognized by java.text.SimpleDateFormat + S8217710: Add 5 currency code points to Java SE 8uX + S8218613: [TESTBUG] runtime/ErrorHandling tests are building incorrect testlibrary classes + S8218915: Change isJavaIdentifierStart and isJavaIdentifierPart to handle new code points + S8219636: Windows build failure after JDK-8207070 8u backport + S8219890: Calendar.getDisplayName() returns empty string for new Japanese Era on some locales + S8219961: [ppc64] Increase code size for interpreter generation. + S8220397: REGRESSION: JDK-8036003 backport regresses no_strip builds + S8220641: [TESTBUG] New test KdcPolicy.java introduced by JDK-8164656 needs same change as JDK-8190690 + S8221355: Performance regression after JDK-8155635 backport into 8u * Backports + S8222286, PR3727: Fix for JDK-8213419 is broken on s390 * Bug fixes + PR3718: Change policytool.desktop.in category Development to Settings + PR3719: Use JRE bin directory in policytool.desktop.in + PR3722: Use SDK bin directory in jconsole.desktop.in + PR3723: Use shortened Java version first in Name field of desktop files + PR3728: CVE-2018-3639 fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE + PR3736: Use https URLs where possible. * AArch64 port + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE patch is merged + S8213419, PR3724: [AArch64] C2 may hang in MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1 + S8221220, PR3724: AArch64: Add StoreStore membar explicitly for Volatile Writes in TemplateTable * AArch32 port + S8213419: [AArch32] C2 may hang in MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1 + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/ /mathexact/MulExactLConstantTest.java fails on Windows x64 when run with -XX:-TieredCompilation - Modified patch: * java-1_8_0-openjdk-suse-desktop-files.patch + rediff to changed context- Disable LTO (boo#1133135).- Update to version jdk8u201 (icedtea 3.11.0) * Security fixes + S8199156: Better route routing + S8199161: Better interface enumeration + S8199166: Better interface lists + S8199552: Update to build scripts + S8200659: Improve BigDecimal support + S8203955: Improve robot support + S8204895: Better icon support + S8205356: Choose printer defaults + S8205709: Proper allocation handling + S8205714: Initial class initialization + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel transfer performance + S8206295: More reliable p11 transactions + S8206301: Improve NIO stability + S8208585: Make crypto code more robust + S8209094, CVE-2019-2426: Improve web server connections + S8210094: Better loading of classloader classes + S8210598: Strengthen Windows Access Bridge Support + S8210606: Improved data set handling + S8210610: Improved LSA authentication + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG processing + S8210870: Libsunmscapi improved interactions * New features + PR3667: Use the internal copy of the SunEC library rather than statically linking against NSS * Import of OpenJDK 8 u192 build 12 + S6730115: Fastdebug VM crashes with "ExceptionMark destructor expects no pending exceptions" error + S8022177: Windows/MSYS builds broken + S8026331: hs_err improvement: Print if we have seen any OutOfMemoryErrors or StackOverflowErrors + S8026335: hs_err improvement: Print exact compressed oops mode and the heap base value. + S8027584: Disable ccache by default + S8031759: Improved tool overriding in configure + S8033292: only warn, not fail, on unknown variables in configure + S8034199: Add 'reconfigure' target for re-creating a configuration + S8034788: Rewrite toolchain.m4 to support multiple toolchains per platform. + S8035074: hs_err improvement: Add time zone information in the hs_err file + S8035495: Improvements in autoconf integration + S8035725: Must keep microsoft VS_PATH on PATH after toolchain detection + S8035730: Configure fails in cygwin if current dir is in /home/user + S8035751: Clean up Visual Studio detection logic + S8035825: Warn instead of fail when calling the configure wrapper directly + S8036003: Add - -with-native-debug-symbols=[none|internal|external|zipped] + S8038340: Cleanup and fix sysroot and devkit handling on Linux and Solaris + S8039030: 9-dev windows-i586 build failed with mktemp: command not found + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS use of class oop's copy constructor definitions causing error level diagnostic. + S8042707: Source changes needed to build JDK 9 with Visual Studio 2013 (VS2013) + S8048128: Fix for Solaris Studio C++ 5.13, CHECK_UNHANDLED_OOPS breaks PPC build. + S8057538: Build the freetype library during configure on Windows + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java failed + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in nightlies + S8077420: Build failure with SS12u4 + S8078437: Enable use of devkits for Windows + S8079788: Fix broken CL version detection in configure for some Visual Studio configurations + S8081202: Hotspot compile warning: "Invalid suffix on literal; C++11 requires a space between literal and identifier" + S8081323: ConstantPool::_resolved_references is missing in heap dump + S8114823: G1 doesn't honor request to disable class unloading + S8134157: adlc fails to compile with SS12u4 + S8138692: libjsig compilation is missing EXTRA_CFLAGS on macosx + S8140470: javax/xml/crypto/dsig/SecurityManager/ /XMLDSigWithSecMgr.java failed with AccessControlException + S8148175: C1: G1 barriers don't preserve FP registers + S8150426: Wrong cast in metadata_at_put + S8150688: Fix os_windows siglabel + S8153194: PreserveFPRegistersTest.java runs out of memory in the nightlies + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its context class loader + S8158012: Use SW prefetch instructions instead of BIS for allocation prefetches on SPARC Core C4 + S8160748: Inconsistent types for ideal_reg + S8162362: Introduce system property to control enabled ciphersuites + S8162540: Crash in C2 escape analysis with assert: "node should be registered" + S8165463: Native implementation of sunmscapi should use operator new (nothrow) for allocations + S8173013: JVMTI tagged object access needs G1 pre-barrier + S8176033: New cygwin grep does not match \r as newline + S8176192: Incorrect usage of Iterator in Java 8 In com.sun.jndi.ldap.EventSupport.removeNamingListener + S8178370: [TEST_BUG] java/security/Signature/SignatureLength.java fails + S8179079: Incremental HotSpot builds broken on Windows + S8179675: Build with error on windows with new Cygwin grep + S8185855: Debug exception stacks should be clearer + S8186171: HashMap: Entry.setValue may not work after Iterator.remove() called for previous entries + S8186646: Nashorn: "duplicate code" assertion when binding a vararg function that just passes arguments along + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource .startProduction JDK-8079607 + S8189170: Add option to disable stack overflow checking in primordial thread for use with JNI_CreateJavaJVM + S8189760: sun/security/ssl/CertPathRestrictions/ /TLSRestrictions.java failed with unexpected Exception intermittently + S8193171: keytool -list displays "JKS" for a PKCS12 keystore + S8193758: Update copyright headers of files in src tree that are missing Classpath exception + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken + S8194642: Improve OOM error reporting for JDK8 + S8195095: Images are not scaled correctly in JEditorPane + S8195738: scroll poistion in ScrollPane is reset after calling validate() + S8196108: Add build support for VS 2015/2017 + S8196880: VS2017 Addition of Global Delete Operator with Size Parameter Conflicts with Arena's Chunk Provided One + S8196884: VS2017 Multiple Type Cast Conversion Compilation Errors + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly Converted to 64 bits + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in share/runtime/os.cpp + S8198304: VS2017 (C4838, C4312) Various conversion issues with gtest tests + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017 + S8200353: Shift or Capslock not working in Textfield after accented keystrokes + S8201240: Improve releasing native resources of BufImgSurfaceData.ICMColorData + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on Solaris only + S8202600: [Zero] Undefined behaviour in src/os_cpu/linux_zero/vm/os_linux_zero.cpp + S8202696: Remove exclusion range for phonetic chars in windows fontconfig.properties + S8203349: 8u hotspot should recognise later Windows compilers + S8203368: ObjectInputStream filterCheck method throws NullPointerException + S8203499: Uninitialised memory in WinAccessBridge.cpp + S8203790: MSVCP dependency introduced in awt.dll + S8203845: backport of JDK-8034788 inadvertently rolled back JDK-8187045 changes to toolchain.m4 + S8204053: libsaproc.so not linked with -z,noexecstack + S8204872: [8u] VS2017: more instances of "error C3680: cannot concatenate user-defined string literals with mismatched literal suffix identifiers" + S8205104: EXTRA_LDFLAGS not consistently being used + S8205440: [8u] DWORD64 required for later Windows compilers + S8205677: [8u] casts and type change for 8u to enable later Windows compilers + S8206425: .gnu_debuglink sections added unconditionally when no debuginfo is stripped + S8206454: [8u] os::current_stack_pointer() fails to compile on later Windows compilers (warning C4172: returning address of local variable) + S8206914: add jdk8u-dev test failures to ProblemList.txt + S8207402: Stray *.debuginfo files when not stripping debug info + S8207853: Need to regenerate configure in jdk8u-dev + S8209002: 8u192 installed exe and dll files have wrong file version + S8210423: Backport of 8034788 breaks GCC version detection + S8210658: Remove and retag jdk8u192-b10 tag in source repository + S8210951: Test sun/security/ssl/SSLContextImpl/ /CustomizedCipherSuites.java fails * Import of OpenJDK 8 u201 build 8 + S8027781: New jarsigner timestamp warning is grammatically incorrect + S8159805: sun/security/tools/jarsigner/warnings/ /NoTimestampTest.java fails after JDK-8027781 + S8171049: Era.getDisplayName doesn't work with non-IsoChronology + S8191438: jarsigner should print when a timestamp will expire + S8201818: [macosx] Printing attributes break page size set via "java.awt.print.Book" object + S8205330: InitialDirContext ctor sometimes throws NPE if the server has sent a disconnection + S8207775: Better management of CipherCore buffers + S8208583: Better management of internal KeyStore buffers + S8209129: Further improvements to cipher buffer management + S8209862: CipherCore performance improvement + S8210695: Create test to cover JDK-8205330 InitialDirContext ctor sometimes throws NPE if the server has sent a disconnection + S8211883: Disable anon and NULL cipher suites + S8213085: (tz) Upgrade time-zone data to tzdata2018g + S8213368: JDK 8u201 l10n resource file update + S8213792: Update THIRD_PARTY_README for LCMS to 2.9 + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the Classpath exception license text + S8214357: JDK 8u201 l10n resource file update md20 + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the Classpath exception license text + S8215377: JDK-8171049 Breaks JCK signature tests - Era.getDisplayName doesn't work with non-IsoChronology * Backports + S6424123, PR3696: JVM crashes on failed 'strdup' call + S8059847, PR3696: complement JDK-8055286 and JDK-8056964 changes + S8074859, PR1937: Re-apply warnings as error switch removed by 8034788 in 8u192 + S8076475, PR3696: Misuses of strncpy/strncat + S8145188, PR2945: Re-apply --with-java-debug-symbols option removed by 8034788 in 8u192 + S8214059, PR3693: Undefined behaviour in ADLC + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels * Bug fixes + PR3667, PR1983: Backed out changeset 48c15869ecd5 + PR3667, PR1983: Backed out changeset f0635543beb3 + PR3667, PR2127: Backed out changeset 0ff7720931e8 + PR3667, PR2815: Backed out changeset 26e2e029ee25 + PR3667, PR2899: Backed out changeset 9dc0eca5fa89 + PR3667, PR2934: Backed out changeset 7513dae3426b + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1 + PR3675: Update CVE URL + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport + PR3691: wget not detected by configure * SystemTap + PR3341: jstack.stp should support ppc64[le,be] * AArch64 port + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg + S8189170, PR3682: [AArch64] Add option to disable stack overflow checking in primordial thread for use with JNI_CreateJavaJVM + S8209414, PR3682: [AArch64] method handle invocation does not respect JVMTI interp_only mode + S8215951, PR3682: AArch64: jtreg test vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults + S8218185, PR3682: aarch64: missing LoadStore barrier in TemplateTable::putfield_or_static + S8219635, PR3682: aarch64: missing LoadStore barrier in TemplateTable::fast_storefield - Removed patch: * icedtea-3.0.1-sunec.patch + not needed any more- Update to version jdk8u191 (icedtea 3.10.0) * Security fixes + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support + S8194546: Choosier FileManagers + S8195868: Address Internet Addresses + S8195874: Improve jar specification adherence + S8196897: Improve PRNG support + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses + S8201756: Improve cipher inputs + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections stability + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine support + S8203654: Improve cypher state updates + S8204497: Better formatting of decimals + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading support + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to libpng 1.6.35 + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile * New features + PR3655: Allow use of system crypto policy to be disabled by the user * Import of OpenJDK 8 u191 build 12 + S8033251: Use DWARF debug symbols for Linux 32-bit as default + S8049834: Two security tools tests do not run with only JRE + S8074462: Handshake messages can be strictly ordered + S8130132: jarsigner should emit warning if weak algorithms or keysizes are used + S8142927: Feed some text to STDIN in ProcessTools.executeProcess() + S8146377: test/sun/security/tools/jarsigner/ /concise_jarsigner.sh failing + S8152974: AWT hang occurrs when sequenced events arrive out of sequence + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh timed out + S8164480: Crash with assert(handler_address == SharedRuntime::compute_compiled_exc_handler(..) failed: Must be the same + S8168628: (fc) SIGBUS when extending file size to map it + S8171452: (ch) linux io_util_md: Operation not supported exception after 8168628 + S8172529: Use PKIXValidator in jarsigner + S8180289: jarsigner treats timestamped signed jar invalid after the signer cert expires + S8189762: [TESTBUG] Create tests for JDK-8146115 container awareness and resource configuration + S8190674: sun/security/tools/jarsigner/TimestampCheck.java failed with java.nio.file.NoSuchFileException: ts2.cert + S8193892: Impact of noncloneable MessageDigest implementation + S8196663: [TESTBUG] test/compiler/loopopts/ /TestCMovSplitThruPhi.java fails on 32 bit Java + S8197518: Kerberos krb5 authentication: AuthList's put method leads to performance issue + S8202478: Backout JDK-8152974 + S8204667: Resources not freed on exception + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo + S8207336: Build failure in JDK8u on Windows after fix 8207260 + S8208350: Disable all DES cipher suites + S8208660: JDK 8u191 l10n resource file update + S8208754: The fix for JDK-8194534 needs updates + S8210431: Complete backport of libpng 1.6.35 TPRM + S8211107: LDAPS communication failure with jdk 1.8.0_181 + S8211731: Reconsider default option for ClassPathURLCheck change done in JDK-8195874 * Backports + PR3646: Backed out changeset 6e3f4784affc (S4890063/PR2304/RH1214835) + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in SunPKCS11 provider + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32 intrinsic + S8172850, PR3643, RH1640127: Anti-dependency on membar causes crash in register allocator due to invalid instruction scheduling + S8202261, PR3638: (fc) FileChannel.map and RandomAccessFile.setLength should not preallocate space + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp: attempted to spill a non-spillable item * Bug fixes + PR3653: Detect whether -Xprefer:source and -J-Xmx can be used, rather than assuming + PR3673: Alternate HotSpot builds need fix for PR3094 * SystemTap + PR3625: arc_priority representation creates an implicit limit on character sequence within regexp * Shenandoah + PR3634: Shenandoah still broken on s390 with aarch64-shenandoah-jdk8u181-b16 + [backport] Adaptive CSet selection overshoots max-CSet + [backport] Adaptive CSet selection selects excessively when memory is tight + [backport] Adaptive/Traversal heuristics rewrite for allocation rate + [backport] Added logging for the number of workers used for GC cycles + [backport] Add task termination and enhanced task queue state tracking + weakrefs + [backport] Allocation path should not touch GC barriers for metadata + [backport] Allocation tracker should really report bytes + [backport] AlwaysPreTouch fails with non-default ConcGCThreads + [backport] Application pacing precision fixes + [backport] Apply ShenandoahEvacOOMScope only for evac-taking paths in ShenandoahBarrierSet + [backport] Assembler write barriers should consistently check for forwarded objects + [backport] Avoid indirection to next-mark-context + [backport] Avoid using uintx in ShenandoahHeapRegion + [backport] C1 shenandoah_wb expects obj in a register + [backport] Check and ensure that Shenandoah-enabled compilations succeed + [backport] Check heap stability in C1 WBs + [backport] ClassUnloadingWithConcurrentMark should be opt-in with Shenandoah + [backport] Clean up obsolete c2 code + [backport] Cleanup: remove unused root processor's sub tasks + [backport] Cleanup UseShenandoahOWST blocks + [backport] CollectedHeap::max_tlab_size is measured in words + [backport] Complete liveness for recently allocated regions outside the allocation path + [backport] Comprehensible GC trigger logging + [backport] Concurrent uncommit should be recorded as GC event + [backport] Constify ShHeapRegionSet and ShCollectionSet + [backport] Convert magic value to ShenandoahPacingSurcharge + [backport] Default to ShenandoahCodeRootsStyle = 2 + [backport] Degenerated evacuation + [backport] Disable UseFastJNIAccessors for Shenandoah + [backport] Elastic TLABs support for Shenandoah + [backport] Enable ShenandoahEvacReserveOverflow by default + [backport] Evac assist should touch marked objects only + [backport] Evac reserve: make sure GC has untouchable space to move the objects into + [backport] EvilSyncBug test is too slow + [backport] Explicit GC should actually uncommit the heap + [backport] Exponential backoff with pacing + [backport] Fix aarch64 CAS predicates + [backport] Fix CAS-obj predicates and add expected-null-versions for cmpxchg-narrow-oop + [backport] Fixed SA due to code refactoring and merging + [backport] Fix Minimal and Zero builds + [backport] Fix ShHeap::notify_alloc usages: it accepts words, not bytes + [backport] Fix TestCommonGCLoads test + [backport] Fix TestFullGCALot test failure + [backport] Fix TestGCThreadGroups test + [backport] Forceful SATB buffer flushes should be time-periodic, not traffic-dependent + [backport] Full GC always comes with liveness data + [backport] Full GC should not always update references + [backport] GCLAB slowpath allocations should fit the object into GCLAB + [backport] GC trace messages have to be immortal + [backport] Handle missing ShenandoahWriteBarrierRB case + [backport] Heap region count selection should only consider max heap size + [backport] Hook up GCLABs to Elastic LAB support + [backport] Improve scheduling and interleaving of SATB processing in mark loop + [backport] Including metaspace info when reporting heap info + [backport] Incorrect label for static heuristics + [backport] Make in-cset checks use signed bytes to match C2 better + [backport] Micro-optimize AArch64 assembly write-barriers + [backport] Missing Shenandoah entry in GCNameHelper::to_string + [backport] More detailed pacing histogram + [backport] More verbose profiling for phase 4 in mark-compact + [backport] Move heuristics from ShCollectorPolicy to ShHeap + [backport] Move (Java)Thread::_gc_state to lower offset to optimize barrier fast-path encoding + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots + [backport] Move periodic GC decision making to GC heuristics base class + [backport] Move Shenandoah stress tests to tier3 + [backport] Non-cancellable mark loops should have sensible stride + [backport] Off-by-one error in degen progress calculation + [backport] Only Java and GC worker threads should get GCLABs + [backport] Out-of-cycle Degenerated GC should process references and unload classes + [backport] Pacer for evacuation should print "Avail" to capture discounting + [backport] Pacer should account actual size for elastic TLABs + [backport] Parallel +AlwaysPreTouch should run with max workers + [backport] Passive heuristics should enter degen GC, not full GC + [backport] Perform gc-state checks with LoadB to fit C2 matchers + [backport] Pre-filter oops before enqueing them in SBS slowpaths + [backport] Print task queue statistics at the end of GC cycle + [backport] Process remaining SATB buffers in final mark/traverse loop instead of separate phase + [backport] Proper units for allocation failure messages + [backport] Prune undefined and unused methods + [backport] Purge partial heuristics and connection matrix infrastructure + [backport] Purge support for ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst + [backport] Rearrange Shenandoah tests into 3 tiers + [backport] Reclaim immediate garbage after mark-compact marking + [backport] Recycle the regions only once + [backport] Refactor alive-closures to deal better with new marking contexts + [backport] Refactor allocation path to accept ShenandoahAllocRequest tuple + [backport] Refactor and improve ShenandoahCodeRoots strategies + [backport] Refactor FreeSet logging: support evac-reserve, denser printouts + [backport] Refactor gc+init logging + [backport] Refactoring ShenandoahStrDedupStress test to reduce test time + [backport] Refactor to group marking bitmap and TAMS structure in one class ShenandoahMarkingContext + [backport] Remove C2 write-barrier from .ad files + [backport] Removed racy assertion + [backport] Remove NMethodSizeLimit adjustment for Shenandoah + [backport] Remove obsolete/unused logging usages + [backport] Remove safe_equals() + [backport] Remove ShHeuristics::print_threshold + [backport] Rename and move ShenandoahPrepareForMarkClosure + [backport] Rename "cancel_concgc" to "cancel_gc" + [backport] Replace custom asserts with shenandoah_assert_* + [backport] Replace risky SBS::need_update_refs_barrier with straightforward check + [backport] Replace ShBarrierSet* casts with accessor + [backport] Report actual free size in non-verbose FreeSet status + [backport] Report heap region stats in proper units + [backport] Resettable iterators to avoid dealing with copying/assignment compilation differences + [backport] Reshuffle tests: verify STW GC is working first, then verify under aggressive, then the rest + [backport] Rework ClassUnloading* flags handling + [backport] Rework GC degradation on allocation failure + [backport] SATB buffer filtering/compaction hides unmarked objects until final-mark + [backport] shenandoah_assert_correct should check object/forwardee klasses + [backport] shenandoah_assert_correct should verify classes before claiming _safe_oop + [backport] Shenandoah changes to allow enabling -Wreorder + [backport] Shenandoah/PPC barrier stubs + [backport] Shenandoah string deduplication + [backport] SH::make_(tlabs)_parsable() should work correctly with/without TLABs + [backport] Shortcut regions that are known not to be alive + [backport] Should cleanup previous/bad versions of redefined classes during full gc + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded objects are in heap + [backport] Soft-refs policy needs reliable heap usage data after the GC cycle + [backport] Soft refs should be purged reliably on allocation failure, or with compact heuristics + [backport] Some trivial-ish cleanups + [backport] Split write barrier paths for mutator and GC workers + [backport] StringInternCleanup times out + [backport] TestHeapDump runs much faster with small heap + [backport] Tests should use -XX:+ShenandoahVerify in some OOM-evac configurations + [backport] TLAB sizing policy should converge faster with Shenandoah + [backport] Trace and report total allocation latency and sizes + [backport] Traversal should resize TLABs + [backport] Trivial enhancement to avoid costly deletion array element + [backport] Uncommit should relinquish the heap lock regularly + [backport] Unreachable assert in ShenandoahCodeRoots::acquire_lock + [backport] Verifier should dump raw memory around the problematic oops + [backport] Verify global and local gc-state status + [backport] VSC++ requires space(s) in between two string literals + [backport] WB slowpath should assist with evacuation of adjacent objects + [backport] Wiring GC events to JFR + Restore heap occupancy in GC logs after JFR changes + [backport] Wiring heap and metaspace info to JFR + [backport] Wrap worker id in thread local worker session + [backport] -XX:-UseTLAB should disable GCLABs too + Cleanup undeclared methods in barrier stubs + Disable evac assist by default until bugfixes arrive + Fix build failure: signedness mismatch in assert + Fix MacOS/Clang build failure + Fix x86_32 build + JDK8u: Silence compilation warnings on implicit type conversion + Move JNI Weak References workaround to Shenandoah-specific root processor + Fix code differences against shenandoah/jdk8u * AArch64 port + S8155627, PR3651: Enable SA on AArch64 + S8207838, PR3666: AArch64: Float registers incorrectly restored in JNI call + S8209415, PR3666: Fix JVMTI test failure HS202 + S8211064, PR3666: [AArch64] Interpreter and c1 don't correctly handle jboolean results in native calls- Update to version jdk8u181 (icedtea 3.9.0) * Security fixes + S8191239: Improve desktop file usage + S8193419: Better Internet address support + S8197871, CVE-2018-2938, bsc#1101644: Support Derby connections + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern Syntax + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass mitigation * New features + PR3623: Allow Shenandoah to be used on all architectures + PR3624: Sync desktop files with Fedora/RHEL versions again + PR3628: Install symlinks to tapsets in SystemTap directory * Import of OpenJDK 8 u172 build 11 + S8031304: Add dcmd to print all loaded dynamic libraries. + S8044107: Add Diagnostic Command to list all ClassLoaders + S8055755: Information about loaded dynamic libraries is wrong on MacOSX + S8059036: Implement Diagnostic Commands for heap and finalizerinfo + S8130400: Test java/awt/image/DrawImage/ /IncorrectClipXorModeSurface2Surface.java fails with ClassCastException + S8136356: Add time zone mappings on Windows + S8139673: NMT stack traces in output should show mtcomponent + S8147542: ClassCastException when repainting after display resolution change + S8154017: Shutdown hooks are racing against shutdown sequence, if System.exit()-calling thread is interrupted + S8165466: DecimalFormat percentage format can contain unexpected % + S8166772: Touch keyboard is not shown for text components on a screen touch + S8169424: src/share/sample/scripting/scriptpad/src/scripts/ /memory.sh missing #! + S8170358: [REDO] 8k class metaspace chunks misallocated from 4k chunk Freelist + S8170395: Metaspace initialization queries the wrong chunk freelist + S8176072: READING attributes are not available on TSF + S8177721: Improve diagnostics in sun.management.Agent#startAgent() + S8177758: Regression in java.awt.FileDialog + S8183504: 8u131 Win 10, issue with wrong position of Sogou IME popup + S8184991: NMT detail diff should take memory type into account + S8187331: VirtualSpaceList tracks free space on wrong node + S8187629: NMT: Memory miscounting in compiler (C2) + S8187658: Bigger buffer for GetAdaptersAddresses + S8187685: NMT: Tracking compiler memory usage of thread's resource area + S8187803: JDK part of JavaFX-Swing dialogs appearing behind main stage + S8187985: Broken certificate number in debug output + S8188855: Fix VS10 build after "8187658: Bigger buffer for GetAdaptersAddresses" + S8189599: InitialBootClassLoaderMetaspaceSize and CompressedClassSpaceSize should be checked consistent from MaxMetaspaceSize + S8189646: sun/security/ssl/SSLSocketImpl/ /SSLSocketCloseHang.java failed with "java.net.SocketTimeoutException: Read timed out" + S8190442: Backout changes for JDK-8087291 from 8u-dev as it didn't use main CR id + S8190690: Impact on krb5 test cases in the 8u-CPU nightly + S8191969: javac produces incorrect RuntimeInvisibleTypeAnnotations length attribute + S8192987: keytool should remember real storetype if it is not provided + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753, JDK-8085903 + S8193807: Avoid UnsatisfiedLinkError on AIX by providing empty basic implementations of getSystemCpuLoad and getProcessCpuLoad * Import of OpenJDK 8 u181 build 13 + S8038636: speculative traps break when classes are redefined + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails intermittently + S8055008: Clean up code that saves the previous versions of redefined classes + S8057570: RedefineClasses() tests fail assert(((Metadata*)obj)->is_valid()) failed: obj is valid + S8074373: NMT is not enabled if NMT option is specified after class path specifiers + S8076117: EndEntityChecker should not process custom extensions after PKIX validation + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links + S8157898: SupportedDSAParamGen.java failed with timeout + S8169201: Montgomery multiply intrinsic should use correct name + S8170035: When determining the ciphersuite lists, there is no debug output for disabled suites. + S8176183: sun/security/mscapi/SignedObjectChain.java fails on Windows + S8187045: [linux] Not all libraries in the VM are linked with - z,noexecstack + S8187635: On Windows Swing changes keyboard layout on a window activation + S8188223: IfNode::range_check_trap_proj() should handler dying subgraph with single if proj + S8196224: Even better Internet address support + S8196491: Newlines in JAXB string values of SOAP-requests are escaped to " " + S8196854: TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM + S8198605: Touch keyboard is shown for a non-focusable text component + S8198606: Touch keyboard does not hide, when a text component looses focus + S8198794: Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3 + S8199406: Performance drop with Java JDK 1.8.0_162-b32 + S8199748: Touch keyboard is not shown, if text component gets focus from other text component + S8200359: (tz) Upgrade time-zone data to tzdata2018d + S8201433: Fix potential crash in BufImg_SetupICM + S8202585: JDK 8u181 l10n resource file update + S8202996: Remove debug print statements from RMI fix + S8203233: (tz) Upgrade time-zone data to tzdata2018e + S8203368: ObjectInputStream filterCheck method throws NullPointerException + S8204874: Update THIRDPARTYREADME file + S8205491: adjust reflective access checks * Backports + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as int + S8064786, PR3601: Fix debug build after 8062808: Turn on the - Wreturn-type warning + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo + S8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 + S8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails + S8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list + S8207057, PR3613: No debug info for assembler files * Bug fixes + PR3597: Potential bogus -Wformat-overflow warning with - Wformat enabled + PR3600: jni_util.c does not import header file which declares getLastErrorString + PR3601: Fix additional -Wreturn-type issues introduced by 8061651 + PR3630: Use ${datadir} when specifying default tz.properties location + PR3632: IcedTea installing symlinks to SystemTap directory rather than individual tapsets * AArch64 port + S8207345, PR3626: Trampoline generation code reads from uninitialized memory * Shenandoah + PR3619: Shenandoah broken on s390 + PR3620: Shenandoah broken on ppc64 + Allocation failure injection machinery + [backport] AArch64 shenandoah_store_check should read evacuation_in_progress as byte + [backport] Account trashed regions from coalesced CM-with-UR + [backport] Adaptive collection set selection in adaptive policy + [backport] Adaptive heuristics accounts trashed cset twice + [backport] Adapt upstream object pinning API + [backport] Add comments in shenandoah_store_check on direct heap field use + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot + [backport] Added missing header file for non-PCH build + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic + [backport] Add new pinned/cset region state for evac-failure-path + [backport] Add ShenandoahRootProcessor API to report threads while scanning roots + [backport] Add test to verify Shenandoah is not enabled by default, and enabled with the flag + [backport] Add -XX:+ShenandoahVerify to more interesting tests + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock intrinsics assume non null inputs + [backport] Allow use of fp spills around write barrier + [backport] Arraycopy fixes (tests and infrastructure) + [backport] Assert Shenandoah-specific safepoints instead of generic ones + [backport] Asynchronous region recycling + [backport] Avoid notifying about zero waste + [backport] barrier moved due to null checks needs to always fix memory edges + [backport] Basic support for x86_32: build and run in STW configuration + [backport] Bitmap based ShHeapRegionSet + [backport] Break heuristics out from ShCollectorPolicy into their own source files + [backport] C2 should use heapword-sized object math + [backport] Check BS type in immByteMapBase predicate + [backport] Cleanup allocation tracking in heuristics + [backport] Cleanup and refactor Full GC code + [backport] Cleanup and strengthen BrooksPointer verification + [backport] Clean up dead code + [backport] Cleanup: removed unused code + [backport] Cleanup reset_{next|complete}_mark_bitmap + [backport] Cleanup SHH::should_start_normal_gc + [backport] "Compact" heuristics for dense footprint scenarios + [backport] Compact heuristics should not shortcut on immediate garbage, but aggressively compact + [backport] Conditionalize PerfDataMemorySize on enabled heap sampling + [backport] Consistent liveness for humongous regions + [backport] Control loop should wait before starting another GC cycle + [backport] Critical native tests should only be ran on x86_64 platforms + [backport] Degenerated GC + [backport] Degenerated GC: rename enum, report degen reasons in stats + [backport] Demote ShenandoahAllocImplicitLive to diagnostic + [backport] Demote warning message about OOM-during-evac to informational + [backport] Denser ShHeapRegion status line + [backport] Disable verification from non-Shenandoah VMOps. + [backport] Disallow pinned_cset region moves and allocations during Full GC + [backport] Disambiguate "upgrade to Full GC" GCause + [backport] Do not add non-allocatable regions to the freeset + [backport] Don't treat allocation regions implicitely live during some GCs + [backport] Double check for UseShenandoahGC in WB expand + [backport] Drop distinction between immediate garbage and free in heuristics + [backport] Dynamic worker refactoring + [backport] Eagerly drop CSet state from regions during Full GC + [backport] Eliminate write-barrier assembly stub (part 1) + [backport] Enable biased locking for Shenandoah by default + [backport] Ensure tasks use correct number of workers + [backport] Excessive assert in ShHeap::mark_next + [backport] Excessive asserts in marked_object_iterate + [backport] FinalEvac pause to turn off evacuation + [backport] Fix || and && chaining warnings in memnode.cpp + [backport] Fix broken asserts in ShenandoahSharedEnumFlag + [backport] Fixed code roots scanning that might be bypassed during degenerated cycle + [backport] Fixed compilation error of libTestHeapDump.c on Windows with VS2010 + [backport] Fixed missing ResourceMark in ShenandoahAsserts::print_obj + [backport] Fixed pinned region handling in mark-compact + [backport] Fix (external) heap iteration + TestHeapDump should unlock aggressive heuristics + [backport] fix for alias analysis with ShenandoahBarriersForConst + [backport] Fix/improve CLD processing + [backport] Fixing Windows and ARM32 build + [backport] Fix Mac OS build warnings + [backport] Fix Minimal VM build + [backport] Fix ShFreeSet boundary case + [backport] fix TCK crash with shenandoah + [backport] Forcefully update counters when GC cycle is running + [backport] FreeSet and HeapRegion should have the reference to ShenandoahHeap + [backport] FreeSet refactor: bitmaps, cursors, biasing + [backport] FreeSet should accept responsibility over trashed regions + [backport] FreeSet should report its internal state before/after GC cycle + [backport] Full GC should compact humongous regions + [backport] Full GC should not trash empty regions + [backport] GC state testers (infra) + [backport] Generic verification is possible only at Shenandoah safepoints + [backport] Get easy on template instantiations in ShConcMark + [backport] Heap region sampling should publish region states + [backport] Humongous regions should support explicit pinning + [backport] Immediate garbage ratio should not go over 100% + [backport] Implement flag to generate write-barriers without membars + [backport] Implement protocol for safe OOM during evacuation handling + Use jint in oom-evac-handler to match older JDKs Atomic support better + Missing OOMScope in ShenandoahFixRootsTask + [backport] Improve assertion/verification messages a bit + [backport] Improve/more detailed timing stats for root queue work + [backport] Incorrect constant folding with final field and - ShenandoahOptimizeFinals + [backport] Increase test timeouts + [backport] Introduce assert_in_correct_region to verify object is in correct region + [backport] Isolate shenandoahVerifier from stray headers + [backport] keep read barriers for final instance/stable field accesses + [backport] Keep track of per-cycle mutator/collector allocs. Fix mutator/collector alloc region overlap in traversal. + [backport] Little cleanup + [backport] Log message on ref processing, class unload, update refs for mark events + [backport] LotsOfCycles test timeouts + [backport] Make concurrent precleaning log message optional again + [backport] Make control loop more responsive under allocation pressure + [backport] Make degenerated update-refs use region-set cursor to hand over work + [backport] Make heap counters update completely asynchronous + [backport] Make major GC phases exclusive from each other + [backport] Make sure selective barriers enabling/disabling works + [backport] Make sure -XX:+ShenandoahVerify comes first in the tests + [backport] Mark bitmap slices commit/uncommit + Aggregated bitmap slicing + [backport] Match barrier fastpath checks better + [backport] Minor cleanups + [backport] Minor cleanup, uses latest Atomic API + [backport] Move barriers into typeArrayOop.hpp direct memory accessors + [backport] Move ShHeap::used increment out of locked allocation path + [backport] No need for fence in control loop: flags are now ShSharedVariables + [backport] Only report GC pause time to GC MXBean + Re-fix memory managers and memory pools usage and pause reporting + [backport] Optimize fwdptr region handling in ShenandoahVerifyOopClosure::verify_oop + [backport] Optimize oop/fwdptr/hr_index verification a bit + [backport] overflow integer during size calculation + [backport] Pacer should account allocation waste and unsuccessful pacing in the budget + [backport] Pacer should poll FreeSet to figure out actually available space + [backport] Passive should opt-in the barriers, not opt-out + [backport] Pauses that do not affect heap occupancy should not report heap + [backport] Print message when heuristics changes the setting ergonomically + [backport] Protect C2 matchers with UseShenandoahGC + [backport] Provide non-taxable allocation slack at the beginning of the cycle + [backport] Record cycle start/end to avoid continuous periodic GC + [backport] Record Shenandoah events in hs_err events section + [backport] Refactor allocation failure and explicit GC handling + [backport] Refactor allocation metadata handling + [backport] Refactor FreeSet rebuilding into the single source + [backport] Refactoring GC phase and heap allocation tracking out of policy + [backport] Refactor uncommit handling: react on explicit GCs, feature kill flag, etc + [backport] Refactor worker timings into ShenandoahPhaseTimings + [backport] ReferenceProcessor is_alive setup is racy + [backport] Region sampling should lock while gathering region data + [backport] Rehash VMOperations and cycle driver mechanics for consistency + [backport] Relax assert in SBS::is_safe() + [backport] Remove BS:is_safe in favor of logged BS::verify_safe_oop + [backport] Remove CSetThreshold handling from heuristics + [backport] Remove FreeSet::add_region, inline into FreeSet::rebuild + [backport] Remove obsolete check in FreeSet::allocate + [backport] Remove ShenandoahGCWorkerPerJavaThread flag + [backport] Remove ShenandoahMarkCompactBarrierSet + [backport] Rename and cleanup _regions and _free_set uses + [backport] Rename dynamic heuristics to static + [backport] Rename *_oop_static/oop_ref to *_forwarded + [backport] Rename ShenandoahConcurrentThread to ShenandoahControlThread + [backport] Report all GC status flags in hs_err + [backport] Report fwdptr size in JNI GetObjectSize + [backport] Report how much we have failed to allocate during Allocation Failure + [backport] Report illegal transitions verbosely, and remove some no-op transitions + [backport] Rewire control loop to avoid double cleanup work + [backport] Rework shared bool/enum flags with proper types and synchronization + [backport] Rewrite and fix ShenandoahHeap::marked_object_iterate + [backport] Rich assertion failure logging + [backport] Roots verification should take the special roots first + [backport] RP closures should accept NULL referents + [backport] Set ShenandoahMinFreeThreshold default to 10% + [backport] Setup process references and class unloading once before the cycle + [backport] ShConcurrentThread races with set_gc_state_bit + [backport] Shenandoah critical native support + [backport] Shenandoah region/set iterators should not allow copying + [backport] Shenandoah SA implementation + [backport] Shenandoah/SPARC barrier stubs + [backport] ShenandoahVerifyOptoBarriers should not fail with disabled barriers + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix + [backport] ShenandoahWriteBarrierRB flag to conditionally disable RB on WB fastpath + [backport] Shenandoah/Zero barrier stubs + [backport] SieveObjects test is too hostile to verification + [backport] Single GCTimer shared by all operations + [backport] Single thread-local GC state flag for all barriers + [backport] Some smallish ShHeapRegionSet changes + [backport] Speed up asserts and verification, improve fastdebug builds performance + [backport] Split live data management for allocations and GCs + [backport] Static heuristics should be really static and report decisions + [backport] Static heuristics should use non-zero allocation threshold + [backport] Store checks should run most of the time + [backport] Tax-and-Spend allocation pacing + [backport] Testbug: VerifyJCStressTest leaks memory + [backport] TestSelectiveBarrierFlags should accept multi-element flag selections + [backport] TestSelectiveBarrierFlags times out due to too aggressive compilation mode + [backport] Trim/expand test heap sizes to fit small heaps + [backport] Trim the TLAB sizes to avoid wasteful retirement under TLAB races + [backport] Use leftmost region in GC allocations + [backport] Use os::naked_short_sleep instead of naked Thread events for sleeping + [backport] Use/sort (cached) RegionData not ShenandoahHeapRegionSet (infrastructure) + [backport] UX: Cleanup (adaptive) CSet selection message + [backport] UX: Pacer reports incorrect free size + [backport] UX: Shorter gc+ergo messages from CSet selection + [backport] Verifier crashes when reporting multiple forwardings + [backport] Verifier should check klass pointers before attempting to reach for object size + [backport] Verifier should print verification label at liveness verification + [backport] Verify fwdptr accesses during Full GC moves + [backport] Verify regions status + [backport] When Shenandoah WB is moved out of loop, connect it to correct loop memory Phi (back out and revisit previous fix) + [backport] Wipe out ShenandoahStoreCheck implementation + [backport] Workaround C1 ConstantOopWriteValue bug + Bitmap size might not be page aligned when large page is used + Changed claim count to jint + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1 pre-barrier + Defer cleaning of system dictionary and friends to parallel cleaning phase + Do not put down update-refs-in-progress flag concurrently + Fix AArch64 build failure: misplaced #endif + Fixed Shenandoah 8u build + Fixed Windows build + Fix non-PCH build + Fix non-PCH x86_32 build + Fix up SPARC and Zero headers for proper locations + missing barriers in String intrinsics with - ShenandoahOptimizeInstanceFinals - ShenandoahOptimizeStableFinals + Missing event log for canceled GC + StringInternCleanup times out + VerifyJCStressTest should test all heuristics + Workaround VM crash with JNI Weak Refs handling - Removed patches: * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch, 8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch, 8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch, 8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch, 8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch, 8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch, 8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch, 8203368.patch, 8205491.patch + Not needed any more - Modified patch: * java-1_8_0-openjdk-suse-desktop-files.patch - Rediff to changed context - Do not run standalone TestECDSA, since it is already run during the build- Removed patch: * s390-java-opts.patch - Not needed any more- Added patch: * icedtea-3.8.0-s390.patch + Fix out-of-memory problem with bootstrap javac on s390 + Allows builds of OpenJDK 8 on s390 again (bsc#1106812)- Backport Oracle July 2018 CPU - Added security fixes: * 8197871.patch + S8197871: Support Derby connections (CVE-2018-2938, bsc#1101644) * 8197925.patch + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645) * 8199547.patch + S8199547: Exception to Pattern Syntax (CVE-2018-2952, bsc#1101651) * 8200666.patch + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656) - Added security-in-depth fixes: * 8191239.patch + S8191239: Improve desktop file usage * 8193419.patch + S8193419: Better Internet address support - Added patches: * 8038636.patch + S8038636: speculative traps break when classes are redefined * 8051972.patch + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails intermittently * 8055008.patch + S8055008: Clean up code that saves the previous versions of redefined classes + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links + S8057570: RedefineClasses() tests fail assert(((Metadata*)obj)->is_valid()) failed: obj is valid * 8074373.patch + S8074373: NMT is not enabled if NMT option is specified after class path specifiers * 8076117.patch + S8076117: EndEntityChecker should not process custom extensions after PKIX validation * 8157898.patch + S8157898: SupportedDSAParamGen.java failed with timeout * 8169201.patch + S8169201: Montgomery multiply intrinsic should use correct name * 8170035.patch + S8170035: When determining the ciphersuite lists, there is no debug output for disabled suites. * 8176183.patch + S8176183: sun/security/mscapi/SignedObjectChain.java fails on Windows * 8187635.patch + S8187635: On Windows Swing changes keyboard layout on a window activation * 8188223.patch + S8188223: IfNode::range_check_trap_proj() should handler dying subgraph with single if proj * 8196224.patch + S8196224: Even better Internet address support * 8196491.patch + S8196491: Newlines in JAXB string values of SOAP-requests are escaped to " " * 8196854.patch + S8196854: TestFlushableGZIPOutputStream failing with IndexOutOfBoundsException * 8197943.patch + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM * 8198794.patch + S8198794: Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3 * 8199406.patch + S8199406: Performance drop with Java JDK 1.8.0_162-b32 * 8200359.patch + S8200359: (tz) Upgrade time-zone data to tzdata2018d * 8201433.patch + S8201433: Fix potential crash in BufImg_SetupICM * 8202585.patch + S8202585: JDK 8u181 l10n resource file update * 8202996.patch + S8202996: Remove debug print statements from RMI fix * 8203233.patch + S8203233: (tz) Upgrade time-zone data to tzdata2018e * 8203368.patch + S8203368: ObjectInputStream filterCheck method throws NullPointerException * 8205491.patch + S8205491: adjust reflective access checks- Update to version jdk8u171 (icedtea 3.8.0) * Security fixes + S8180881: Better packaging of deserialization + S8182362: Update CipherOutputStream Usage + S8183032: Upgrade to LittleCMS 2.9 + S8189123: More consistent classloading + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest entries + S8189977, CVE-2018-2795, bsc#1090025: Improve permission portability + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing portability + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data portability + S8189989, CVE-2018-2798, bsc#1090028: Improve container portability + S8189993, CVE-2018-2799, bsc#1090029: Improve document portability + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore mechanisms + S8190478: Improved interface method selection + S8190877: Better handling of abstract classes + S8191696: Better mouse positioning + S8192025, CVE-2018-2814, bsc#1090032: Less referential references + S8192030: Better MTSchema support + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes implementation + S8193409: Improve AES supporting classes + S8193414: Improvements in MethodType lookups + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection support * New features + PR3493: Run AES test to test intrinsics * Import of OpenJDK 8 u162 build 12 + S4354680: Runtime.runFinalization() silently clears interrupted flag in the calling thread + S6618335: ThreadReference.stop(null) throws NPE instead of InvalidTypeException + S6651256: jstack: DeleteGlobalRef method call doesn't lead to descreasing of global refs count shown by jstack + S6656031: SA: jmap -permstat number of classes is off by 1 + S6977426: sun/tools tests can intermittently fail to find app's Java pid + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112) + S7124271: [macosx] RealSync test failure + S7162125: [macosx] A font has different behaviour for ligatures depending on its creation mod + S8023667: SA: ExceptionBlob and other C2 classes not available in client VM + S8031661: java/net/Authenticator/B4769350.java failed intermittently + S8046778: Better error messages when starting JMX agent via attach or jcmd + S8066185: VM crashed with SIGSEGV VirtualMemoryTracker::add_reserved_region + S8072428: Enable UseLoopCounter ergonomically if on-stack-replacement is enabled + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly + S8074812: More specific error message when the .java_pid well-known file is not secure + S8078269: JTabbedPane UI Property TabbedPane.tabAreaBackground no longer works + S8080504: [macosx] SunToolkit.realSync() may hang + S8087291: InitialBootClassLoaderMetaspaceSize and CompressedClassSpaceSize should be checked consistent from MaxMetaspaceSize + S8132374: AIX: fix value of os.version property + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an interface + S8139218: Dialog that opens and closes quickly changes focus in original focusowner + S8147002: [macosx] Arabic character cannot be rendered on MacOS X + S8148786: xml.tranform fails on x86-64 + S8155197: Focus transition issue + S8157896: TestDSAGenParameterSpec.java test fails with timeout + S8158633: BASE64 encoded cert not correctly parsed with UTF-16 + S8159432: [PIT][macosx] StackOverflow in closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest + S8162530: src/jdk.management/share/native/libmanagement_ext/ /GcInfoBuilder.c doesn't handle JNI exceptions properly + S8164954: split_if creates empty phi and region nodes + S8166742: SIGFPE in C2 Loop IV elimination + S8169961: Memory leak after debugging session + S8172751: OSR compilation at unreachable bci causes C1 crash + S8175340: Possible invalid memory accesses due to ciMethodData::bci_to_data() returning NULL + S8177026: jvm.dll file version not updated since 8u72 + S8177414: Missing key events on Mac Os + S8177958: Possible uninitialized char* in vm_version_solaris_sparc.cpp + S8178047: Aliasing problem with raw memory accesses + S8179086: java.time.temporal.ValueRange has poor hashCode() + S8180370: Characters are skipped on input of Korean text on OS X + S8180855: Null pointer dereference in OopMapSet::all_do of oopMap.cpp:394 + S8181659: Create an alternative fix for JDK-8167102, whose fix was backed out + S8181786: Extra runLater causes impossible states to be possible using javafx.embed.singleThread=true + S8182402: Tooltip for Desktop button is in English when non-English locale is set + S8182996: Incorrect mapping Long type to JavaScript equivalent + S8184009: Missing null pointer check in InterpreterRuntime::update_mdp_for_ret() + S8184271: Time related C1 intrinsics produce inconsistent results when floating around + S8184328: JDK 8u131 socketRead0 hang at SSL read + S8184893: jdk8u152 b06 : issues with nashorn when running kraken benchmarks + S8185346: Relax RMI Registry Serial Filter to allow arrays of any type + S8187023: Cannot read pkcs11 config file in UTF-16 environment + S8189918: Remove Trailing whitespace from file while syncing 8u into 8u162-b03 + S8190280: [macos] Font2DTest demo started failing for Arabic range from JDK 8 u162 b01 on Mac + S8190542: 8u162 L10n resource file update + S8192794: 8u162 L10n resource file update md20 * Import of OpenJDK 8 u171 build 11 + S8054213: Class name repeated in output of Type.toString() + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java fails if SA not available + S8150530: Improve javax.crypto.BadPaddingException messages + S8153955: increase java.util.logging.FileHandler MAX_LOCKS limit + S8169080: Improve documentation examples for crypto applications + S8175075: Add 3DES to the default disabled algorithm security property + S8179665: [Windows] java.awt.IllegalComponentStateException: component must be showing on the screen to determine its location + S8186032: Disable XML Signatures signed with EC keys less than 224 bits + S8186441: Change of behavior in the getMessage () method of the SOAPMessageContextImpl class + S8187496: Possible memory leak in java.apple.security.KeychainStore.addItemToKeychain + S8189851: [TESTBUG] runtime/RedefineTests/RedefineInterfaceCall.java fails + S8191358: Restore TSA certificate expiration check + S8191909: Nightly failures in nashorn suite + S8192789: Avoid using AtomicReference in sun.security.provider.PolicyFile + S8194259: keytool error: java.io.IOException: Invalid secret key format + S8196952: Bad primeCertainty value setting in DSAParameterGenerator + S8197030: Perf regression on all platforms with 8u171-b03 - early lambda use + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux Platforms + S8198662: Incompatible internal API change in JDK8u161: signature of method exportObject() + S8198963: Fix new rmi property name + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails in compilation + S8199141: Windows: new warning messaging for JRE installer UI in non-MOS cases + S8200314: JDK 8u171 l10n resource file update - msg drop 40 * Backports + S8062808, PR3548: Turn on the -Wreturn-type warning + S8141570, PR3548: Fix Zero interpreter build for - -disable-precompiled-headers + S8143245, PR3548: Zero build requires disabled warnings + S8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile + S8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26 + S8185723, PR3553: Zero: segfaults on Power PC 32-bit + S8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe + S8187577, PR3578: JVM crash during gc doing concurrent marking + S8197429, PR3546, RH1536622: Increased stack guard causes segfaults on x86-32 + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux builds + S8197981, PR3548: Missing return statement in __sync_val_compare_and_swap_8 + S8200556, PR3566: AArch64: assertion failure in slowdebug builds + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong * Bug fixes + S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build + PR3549: Desktop file doesn't reference versioned icon + PR3550: Additional category used in jconsole.desktop.in is incorrect + PR3559: Use ldrexd for atomic reads on ARMv7. + PR3575, RH1567204: System cacerts database handling should not affect jssecacerts + PR3592: Skip AES test on AArch64 due to VM crash + PR3593: s390 needs to use '%z' format specifier for size_t arguments as size_t != int + PR3594: Patch for bug 3593 breaks Shenandoah build + PR3597: Potential bogus -Wformat-overflow warning with - Wformat enabled * Shenandoah + PR3573: Fix TCK crash with Shenandoah + Remove oop cast in oopMap.cpp again, as oopDesc::operator== has additional checking in Shenandoah. + Fix new code for Shenandoah after the 8u171 merge + Revert accidental OpSpinWait matching + UseBiasedLocking should be disabled only for Shenandoah * AArch32 port + PR3548: Add missing return values for AArch32 port - Removed patches: * no-return-in-nonvoid-function.patch * zero-atomic_copy64.patch + fixed upstream * java-1_8_0-openjdk-gcc6.patch + not needed any more - Modified patch: * java-1_8_0-openjdk-suse-desktop-files.patch + rediff to changed context- Added patch: * no-return-in-nonvoid-function.patch + fix broken build with gcc8 (bsc#1087066)- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366 * Security fixes + S8160104: CORBA communication improvements + S8172525, CVE-2018-2579: Improve key keying case + S8174756: Extra validation for public keys + S8174962, CVE-2018-2582: Better interface invocations + S8175932: Improve host instance supports + S8176458: Revise default document styling + S8178449, CVE-2018-2588: Improve LDAP logins + S8178458: Better use of certificates in LDAP + S8178466: Better RSA parameters + S8179536: Cleaner print job handling + S8179990: Cleaner palette entry handling + S8180011: Cleaner native graphics device handling + S8180015: Cleaner AWT robot handling + S8180020: Improve SymbolHashMap entry handling + S8180433: Cleaner CLR invocation handling + S8180877: More deeply colored ICC spaces + S8181664: Improve JVM UTF String handling + S8181670: Improve implementation of keystores + S8182125, CVE-2018-2599: Improve reliability of DNS lookups + S8182387, CVE-2018-2603: Improve PKCS usage + S8182601, CVE-2018-2602: Improve usage messages + S8185292, CVE-2018-2618: Stricter key generation + S8185325, CVE-2018-2641: Improve GTK initialization + S8186080: Transform XML interfaces + S8186212, CVE-2018-2629: Improve GSS handling + S8186600, CVE-2018-2634: Improve property negotiations + S8186606, CVE-2018-2633: Improve LDAP lookup robustness + S8186699: Clean up extra Derby files + S8186867: Improve native glyph layouts + S8186998, CVE-2018-2637: Improve JMX supportive features + S8189284, CVE-2018-2663: More refactoring for deserialization cases + S8190289, CVE-2018-2677: More refactoring for client deserialization cases + S8191142, CVE-2018-2678: More refactoring for naming deserialization cases * Import of OpenJDK 8 u152 build 16 + S4953367: MAWT: Java should be more careful manipulating NLSPATH, XFILESEARCHPATH env variables + S6772009: java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java test failed with 'Completed != 2' + S6947916: JarURLConnection does not handle useCaches correctly + S6980209: Make tracking SecondaryLoop.enter/exit methods easier + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails intermittently + S7102702: java/net/PortUnreachableException/OneExceptionOnly.java failing + S7131356: (props) "No Java runtime present, requesting install" when creating VM from JNI [macosx] + S7172652: With JDK 1.7 text field does not obtain focus when using mnemonic Alt/Key combin + S8022291: Mac OS: Unexpected JavaLaunchHelper message displaying + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path) handles "null" incorrectly + S8025306: Inet[4|6]Address class and fieldID initialization in networking native code + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when offset is less than 10 minutes + S8028725: [Parfait] warnings from b116 for jdk.src.solaris.native.java.net: JNI pending exceptions + S8028769: Check src/share/native/java/lang/*.c for cases when JNI calls are used with pending warnings + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI pending exceptions + S8030116: (process) Check Parfait warnings in src/solaris/native/java/lang/* + S8031586: Check jdk/src/*/native/com/sun/security/auth/module for pending JNI exceptions + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c environ doesn't check for JNI pending exceptions + S8033372: Check jdk/src/share/native/java/lang for JNI pending exception issues + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c for JNI pending exceptions + S8034249: need more workarounds for suspend equivalent condition issue + S8035158: Remove dependency on sun.misc.RegexpPool and friends + S8035568: [macosx] Cursor management unification + S8035653: InetAddress.getLocalHost crash + S8037346: Need to terminate server process if client runs into problems + S8037909: JNI warnings in jdk/src/windows/native/java/nio/MappedByteBuffer.c + S8038075: JNI warnings in jdk/src/share/native/sun/misc/VMSupport.c + S8038348: Instance field load is replaced by wrong data Phi + S8039412: Stack overflow on Linux using DialogTypeSelection.NATIVE + S8040322: TextArea.replaceRange() and insert() are broken with setText(null) + S8040635: [macosx] Printing a shape filled with a texture doesn't work under Mac OS X + S8043913: remove legacy code in SPARC's VM_Version::platform_features + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails intermittently + S8046893: JNI exception pending in jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c, PlainDatagramSocketImpl.c + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait flagged uninitialized memory + S8049717: expose L1_data_cache_line_size for diagnostic/sanity checks + S8050478: [macosx] Cursor not updating correctly after closing a modal dialog + S8054214: JapaneseEra.getDisplayName doesn't return names if it's an additional era + S8055204: Memory leak in jdk/src/windows/native/java/lang/java_props_md.c + S8058316: lookupDefaultPrintService returns null on Solaris 11 + S8061258: [macosx] PrinterJob's native Print Dialog does not reflect specified Copies or Page Ranges + S8064470: JNI exception pending in jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c + S8066250: compiler/dependencies/MonomorphicObjectCall/ /TestMonomorphicObjectCall.java fails product + S8067059: PrinterJob.pageDialog() with DialogSelectionType.NATIVE returns a PageFormat when cancelled. + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind crashes on Windows + S8075516: Deleting a file from either the open or save java.awt.FileDialog hangs. + S8076249: NPE in AccessBridge while editing JList model + S8076554: [macosx] Custom Swing text components need to allow standard accessibility + S8080486: JNI exception pending in jdk/src/java.base/windows/ /native/libnet/DualStackPlainSocketImpl.c + S8081219: hs_err improvement: Add event logging for class redefinition to the hs_err file + S8087144: sun/security/krb5/auto/MaxRetries.java fails with Retry count is -1 less + S8087342: Crash in klassItable::initialize_itable_for_interface + S8089573: [macosx] Incorrect char to glyph mapping printing on OSX 10.10 + S8129361: ISO 4217 amendment 160 + S8130041: TsacertOptionTest.java intermittently fails on Mac + S8132209: DiagnosticCommandImpl.getNotificationInfo() may expose internal representation + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at handleNamingException + S8134119: Use new API to get cache line sizes + S8134389: Crash in HotSpot with jvm.dll+0x42b48 ciObjectFactory::create_new_metadata + S8134918: C2: Type speculation produces mismatched unsafe accesses + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed intermittently + S8136570: Stop changing user environment variables related to /usr/dt + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED + S8140309: [REDO] failed: no mismatched stores, except on raw memory: StoreB StoreI + S8140525: AwtFrame::WmShowWindow() may steal focus + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed intermittently + S8143897: Weblogic12medrec assert(handler_address == SharedRuntime::compute_compiled_exc_handler(nm, pc, exception, force_unwind, true)) failed: Must be the same + S8145207: [macosx] JList, VO can't access non-visible list items + S8145732: Duplicate entry in http.nonProxyHosts will ignore subsequent entries + S8145952: ISO 4217 amendment 161 + S8145981: (fs) LinuxWatchService can reports events against wrong directory + S8146961: Fix PermGen memory leaks caused by static final Exceptions + S8147772: Update KerberosTicket to describe behavior if it has been destroyed and fix NullPointerExceptions + S8149521: automatic discovery of LDAP servers with Kerberos authentication + S8149714: [parfait] char array lengths don't match in awt_Font.cpp:1701 + S8152000: Java FlightRecorder does not run on Java 8 compact 3 profile since u65 + S8152172: PPC64: Support AES intrinsics + S8152730: File Leak in CompileBroker::init_compiler_thread_log of compileBroker.cpp:1665. + S8152981: Double icons with JMenuItem setHorizontalTextPosition on Win 10 + S8153134: Infinite loop in handle_wrong_method in jmod + S8153176: ParOldGC: Use correct TaskQueueSet for ParallelTaskTerminator in marking. + S8153267: nmethod's exception cache not multi-thread safe + S8153925: (fs) WatchService hangs on GetOverlappedResult and locks directory (win) + S8154945: Enable 8130150 and 8081778 intrinsics by default + S8155691: Update GIFlib library to the latest up-to-date + S8155781: C2: opaque unsafe access triggers an assert + S8156116: [macosx] two JNI locals to delete in AWTWindow.m, CGraphicsEnv.m + S8156723: JVM crash at sun.java2d.windows.GDIBlitLoops.nativeBlit + S8157035: Use stronger algorithms and keys for JSSE testing + S8157181: Compilers accept modification of final fields outside initializer methods + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java failed with a fatal error + S8157548: JVM crashes sometimes while starting + S8157665: ProblemList.txt needs to be updated as 7041639 closed + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu + S8158356: SIGSEGV when attempting to rotate BufferedImage using AffineTransform by NaN degrees + S8158639: C2 compilation fails with SIGSEGV + S8159035: CTSMode.java test crashed due to unhandled case of cipher length value as 0 + S8159696: java.beans.MethodRef#get throws NullPointerException + S8160024: jdb returns invalid argument count if first parameter to Arrays.asList is null + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid + S8160174: java.net.NetworkInterface - fixes and improvements for network interface listing + S8160370: System.getProperty("os.version") returns "Unknown" on Mac + S8160551: assert(c == Bytecodes::_putfield) failed: must be putfield + S8160570: [macosx] modal dialog can skip the activation/focus events + S8160623: [PIT] Exception running java/awt/event/KeyEvent/KeyChar/KeyCharTest.java + S8160664: JVM crashed with font manager on Solaris 12 + S8160696: IllegalArgumentException: adding a component to a container on a different GraphicsDevice + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java fails due to missing keyStore file + S8160941: "text/uri-list" dataflavor concats the first two strings + S8161039: System.getProperty("os.version") returns incorrect version number on Mac + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI removed progress bar still referenced + S8161733: [parfait] Memory leak in imageioJPEG.c:2803 + S8161742: [parfait] Uninitialised memory in isXTestAvailable of awt_Robot.c:65 + S8161761: [parfait] 2 JNI exception pending defect groups in GraphicsPrimitiveMgr.c + S8162101: C2: Handle "wide" aliases for unsafe accesses + S8162488: JDK should be updated to use LittleCMS 2.8 + S8162496: missing precedence edge for anti_dependence + S8162598: XSLTC transformer swallows empty namespace declaration which is needed to undeclare default namespace + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints' + S8162766: Unsafe_DefineClass0 accesses raw oops while in _thread_in_native + S8162795: [REDO] MemberNameTable doesn't purge stale entries + S8162796: [macosx] LinearGradientPaint and RadialGradientPaint are not printed on OS X. + S8163104: Unexpected NPE still possible on some Kerberos ticket calls + S8163181: Further improvements for Unix NetworkInterface native implementation + S8163518: Integer overflow in StringBufferInputStream.read() and CharArrayReader.read/skip() + S8163877: Tests added in JDK-8163518 fail on some platforms + S8163896: Finalizing one key of a KeyPair invalidates the other key + S8163945: Honor Number type hint in toPrimitive on Numbers + S8163969: Cyclic interface initialization causes JVM crash + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla input method + S8164002: Add a new CPU family (S_family) for SPARC S7 and above processors + S8164119: MoveToOtherScreenTest fails due wrong key attribute + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject invalid input + S8164501: Uninitialised memory in byteArrayToPacket of SharedMemoryConnection.c + S8164508: unexpected profiling mismatch in c1 generated code + S8164784: ISO 4217 amendment 162 + S8164846: CertificateException missing cause of underlying exception + S8165153: Crash in rebuild_cpu_to_node_map + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with incorrect arguments should not produce output + S8165320: Small flaw when integrating 8160174 to JDK8 + S8165428: Security Warning dialog should be always on the top when multiple applets with APPLICATION_MODAL dialog launched in a browser + S8165482: java in ldoms, with cpu-arch=generic has problems + S8165717: [macosx] Various memory leaks in jdk9 + S8165751: NPE hit with java.security.debug=provider + S8165829: Android Studio 2.x crashes with NPE at sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent + S8165988: Test JarURLConnectionUseCaches.java fails at windows: failed to clean up files after test + S8166248: tools/pack200/Pack200Test.java fails on Win32: Could not reserve enough space + S8166507: ConcurrentSkipListSet.clear() can leave the Set in an invalid state + S8166747: Add invalid network / computer name cases to isReachable known failure switch + S8166799: ASSEMBLY_EXCEPTION contains historical company name + S8166840: Synthetic bridge constructor in ArrayList$Itr blocks inlining + S8166872: GPL header in /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp + S8166902: Nested object literal property maps not reset in optimistic recompilation + S8167102: [macosx] PrintRequestAttributeSet breaks page size set using PageFormat + S8168115: Remove and retag jdk8u122-b03 in 8u repo + S8168364: [macosx] Delete unused class NSPrintinfo + S8168373: don't emit conversions for symbols outside their lexical scope + S8168405: Pending exceptions in java.base/windows/native + S8168751: Two "Direct Clip" threads are created to play the same "AudioClip" object, what makes clip sound corrupted + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do during concurrent marking + S8169056: StringIndexOutOfBoundsException in Pattern.compile with CANON_EQ flag + S8169112: java.lang.VerifyError: (class: GregorSamsa, method: template-bash signature: (LGregorSamsa8;)V) Register 10 contains wrong type + S8169229: RSAClientKeyExchange debug info is incorrect + S8169355: Diacritics input works incorrectly on Windows if Spanish (Latin American) keyboard layout is used + S8169481: StackOverflowError on start when parsing PAC file to autodetect Proxy settings + S8169556: Wrapping of FileInputStream's native skip and available methods + S8169865: Downport minor fixes in java.net native code from JDK 9 to JDK 8 + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance due to non-optimized compilation + S8170278: ticket renewal won't happen with debugging turned on + S8170409: CMS: Crash in CardTableModRefBSForCTRS::process_chunk_boundaries + S8170465: JNI exception pending in jni_util.c:190 + S8170466: JNI exception pending in jni_util.c:190 + S8170536: Uninitialised memory in set_uintx_flag of attachListener.cpp + S8170552: [macosx] Wrong rendering of diacritics on macOS + S8170565: JSObject call() is passed undefined for the argument 'thiz' + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2) + S8170594: >>>=0 generates invalid bytecode for BaseNode LHS + S8170913: Java "1.8.0_112" on Windows 10 displays different characters for EUDCs from ones created in eudcedit.exe. + S8170950: Text is displayed in bold when fonts are installed into symlinked folder + S8170977: SparseArrayData should not grow its underlying dense array data + S8171151: JDK8u ProblemList.txt Updates + S8171155: Scanning method file for initialized final field updates can fail for non-existent fields + S8171194: Exception "Duplicate field name&signature in class file" should report the name and signature of the field + S8171219: Missing checks in sparse array shift() implementation + S8171808: Performance problems in dialogs with large tables when JAB activated + S8171849: Collection and Queue conversions not prioritized for Arrays + S8171909: [PIT] on Windows, failure of java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/ /NoExclusion/ModelessDialog test fails as DummyButton on Dialog did not gain focus when clicked. + S8172053: (ppc64) Downport of 8170153 breaks build on linux/ppc64 (big endian) + S8172145: C2: anti dependence missed because store hidden by membar + S8173373: C1: NPE is thrown instead of LinkageError when accessing inaccessible field on NULL receiver + S8173423: Wrong display name for supplemental Japanese era + S8173581: performance regression in com/sun/crypto/provider/OutputFeedback.java + S8173654: Regression since 8u60: System.getenv doesn't return env var set in JNI code + S8173664: Typo in https://java.net/downloads/heap-snapshot/hprof-binary-format.html + S8173853: IllegalArgumentException in java.awt.image.ReplicateScaleFilter + S8173876: Fast precise scrolling and DeltaAccumulator fix for macOS Sierra 10.12.2 + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with language set to "Chinese, Simplified" while region is not China + S8174779: Locale issues with Mac 10.12 + S8175025: The copyright section in the test/java/awt/font/ /TextLayout/DiacriticsDrawingTest.java should be updated + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection close connection on timeout + S8175345: Reported null pointer dereference defect groups + S8175915: NullPointerException from JComboBox and JList when Accessibility enabled + S8176287: [macosx] The print test crashed with Nimbus L&F + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs + S8176511: JSObject property access is broken for numeric keys outside the int range + S8176530: JDK support for JavaFX modal print dialogs + S8177095: Range check dependent CastII/ConvI2L is prematurely eliminated + S8177450: javax.swing.text.html.parser.Parser parseScript ignores a character after commend end + S8177678: Overstatement of universality of Era.getDisplayName() implementation + S8177776: Create an equivalent test case for JDK9's SupplementalJapaneseEraTest + S8177817: Remove assertions in 8u that were removed by 8056124 in 9. + S8179515: Class java.util.concurrent.ThreadLocalRandom fails to Initialize when using SecurityManager + S8180511: Null pointer dereference in Matcher::ReduceInst() + S8180565: Null pointer dereferences of ConstMethod::method() + S8180575: Null pointer dereference in LoadNode::Identity() + S8180576: Null pointer dereference in Matcher::xform() + S8180617: Null pointer dereference in InitializeNode::complete_stores + S8180660: missing LNT entry for finally block + S8180813: Null pointer dereference of CodeCache::find_blob() result + S8180934: PutfieldError failed with UnsupportedClassVersionError + S8180949: Correctly handle exception in TCPChannel.createConnection + S8181191: getUint32 returning Long + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog() hangs on macOS + S8181205: JRE fails to load/register security providers when started from UNC pathname + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails with jArrayIndexOutOfBoundsException + S8182672: Java 8u121 on Linux intermittently returns null for MAC address + S8185779: 8u152 L10n resource file update + S8186532: 8u152 L10n resource file update md20 * Import of OpenJDK 8 u161 build 12 + S8035105: DNS provider cleanups + S8137255: sun/security/provider/NSASuiteB/ /TestDSAGenParameterSpec.java timeouts intermittently + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS + S8148108: Disable Diffie-Hellman keys less than 1024 bits + S8148421, PR3504: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java fails on solaris + S8156502: Use short name of SupportedEllipticCurvesExtension.java + S8158116: com/sun/crypto/provider/KeyAgreement/ /SupportedDHParamGens.java failed with timeout + S8159240: XSOM parser incorrectly processes type names with whitespaces + S8159377: JMX Connections need white-list filters + S8161598: Kitchensink fails: assert(nm->insts_contains(original_pc)) failed: original PC must be in nmethod/CompiledMethod + S8163237: Restrict the use of EXPORT cipher suites + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java failing with cert error in 8u121 b01 + S8169944: sun/security/tools tests fail with CompilationError + S8170157: Enable unlimited cryptographic policy by default in OracleJDK + S8170245: [TEST_BUG] Cipher tests fail when running with unlimited policy + S8170911: 8170823 changes in 8u131 causing signature-test failure in jck runtime8b suite + S8171262: Stability fixes for lcms + S8172297: In java 8, the marshalling with JAX-WS does not escape carriage return + S8173631: Backout three hotspot fixes from 8u121-bpr repo + S8176536: Improved algorithm constraints checking + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java should run in ovm mode + S8177750: Forgot TestSocketFactory testcase in 8163958 changeset + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO 100% + S8178728: Check the AlgorithmParameters in algorithm constraints + S8179223: Integrate 8176490 into 8u131-bpr repo + S8181439: Test the jdk.tls.namedGroups System Property + S8181975: Run sun/security/pkcs11 tests on Mac + S8182614: Backout JDK-8140436 from 8u161 + S8183939: Import JDK-8182672 into 8u141-bpr repo + S8184016: Text in native popup is not always updated with Sogou IME + S8185572: Enable AssumeMP by default on SPARC machines + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java to jdk8u which is helpful in test development + S8185719: rmi TestSocketFactory does not flush + S8185909: Disable JARs signed with DSA keys less than 1024 bits + S8186539: [testlibrary] TestSocketFactory should allow triggers before match/replace + S8187482: Backout JDK-8159377 + S8187556: Backout of a fix reintroduced a dependency that had since been removed + S8188880: A JAXB JCK test failure found after 8186080 + S8190258, PR3499: (tz) Support tzdata2017c + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is broken by tzdata2017c + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java throws java.util.MissingResourceException. + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java fails on Solaris x64 5.10 + S8190497: DHParameterSpec.getL() returns zero after JDK-8072452 + S8190541: 8u161 L10n resource file update + S8190789: sun/security/provider/certpath/LDAPCertStore/ TestURICertStoreParameters.java fails after JDK-8186606 + S8191137, PR3503: keytool fails to format resource strings for keys for some languages after JDK-8171319 + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan. internal.xsltc.trax.TransformerFactoryImpl (unknown type) + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include 8191340 for b07 + S8191907: PPC64 part of JDK-8174962: Better interface invocations + S8192793: 8u161 L10n resource file update md20 + S8193683: Increase the number of clones in the CloneableDigest * Backports + S8165996, PR3506: PKCS11 using NSS throws an error regarding secmod.db when NSS uses sqlite + S8170523, PR3506: Some PKCS11 test cases are ignored with security manager + S8187667, PR3517: Disable deprecation warning for readdir_r + S8189789, PR3530: tomcat gzip-compressed response bodies appear to be broken in update 151 + S8194739, PR3520: Zero port of 8174962: Better interface invocations + S8194828, PR3520: Fix for 8194739: Zero port of 8174962: Better interface invocations + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c + S8196516, PR3523: [REDO] [linux] libfontmanager should be linked against headless awt library + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on RHEL 6 * Bug fixes + PR3489: Incomplete reading of directory containing tzdb.dat + PR3501: Revert 8165320 so as not to revert the work of 8034174 (PR2290) + PR3526: configure fails to parse GCC version * AArch64 port + S8164113, PR3519: AArch64: follow-up the fix for 8161598 + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be in-heap + S8194686, PR3519: AArch64 port of 8174962: Better interface invocations + S8195859, PR3519: AArch64: vtableStubs gtest fails after 8174962 + S8196136, PR3519: AArch64: Correct register use in patch for JDK-8194686 + S8196221, PR3519: AArch64: Mistake in committed patch for JDK-8195859 + PR3519: Fix functions with missing return value. + PR3519: Fix further functions with a missing return value. * AArch32 port + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always runs verification code + S8174962: [aarch32] Better interface invocations * Shenandoah + Fix post-CPU merge Shenandoah regressions - Removed patch: * tzdb_dat.patch + integrated upstream - Added patch: * aarch64.patch + fix aarch64 build- Fix build with gcc 7.3 * add -fno-delete-null-pointer-checks -fno-lifetime-dse and - std=gnu++98- Added patch: * tzdb_dat.patch + Patch also the other place in jdk that loads the tzdb.dat file- Update to version jdk8u151 (icedtea 3.6.0) * Security fixes + S8165543: Better window framing + S8169026, CVE-2017-10274: Handle smartcard clean up better (bsc#1064071) + S8169966: Larger AWT menus + S8170218: Improved Font Metrics + S8171252: Improve exception checking + S8171261: Stability fixes for lcms + S8174109, CVE-2017-10281: Better queuing priorities (bsc#1064072) + S8174966, CVE-2017-10285: Unreferenced references (bsc#1064073) + S8175940: More certificate subject checking + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075) + S8178794, CVE-2017-10388: Correct Kerberos ticket grants (bsc#1064086) + S8180024: Improve construction of objects during deserialization + S8180711, CVE-2017-10346: Better invokespecial checks (bsc#1064078) + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082) + S8181323, CVE-2017-10347: Better timezone processing (bsc#1064079) + S8181327, CVE-2017-10349: Better X processing (bsc#1064081) + S8181370, CVE-2017-10345: Better keystore handling (bsc#1064077) + S8181432, CVE-2017-10348: Better processing of unresolved permissions (bsc#1064080) + S8181597, CVE-2017-10357: Process Proxy presentation (bsc#1064085) + S8181612, CVE-2017-10355: More stable connection processing (bsc#1064083) + S8181692, CVE-2017-10356: Update storage implementations (bsc#1064084) + S8183028, CVE-2016-10165: Improve CMS header processing (bsc#1064069) + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843: Upgrade compression library (bsc#1064070) * New features + PR3469: Alternative path to tzdb.dat + PR3483: Separate addition of nss.cfg and tz.properties into separate targets + PR3484: Move SystemTap support to its own target + PR3485: Support additional targets for the bootstrap build * Import of OpenJDK 8 u151 build 12 + S8029659: Keytool, print key algorithm of certificate or key entry + S8057810: New defaults for DSA keys in jarsigner and keytool + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0 can hang even with soTimeout set + S8077670: sun/security/krb5/auto/MaxRetries.java may fail with BindException + S8087144: sun/security/krb5/auto/MaxRetries.java fails with Retry count is -1 less + S8153146: sun/security/krb5/auto/MaxRetries.java failed with timeout + S8157561: Ship the unlimited policy files in JDK Updates + S8158517: Minor optimizations to ISO10126PADDING + S8171319: keytool should print out warnings when reading or generating cert/cert req using weak algorithms + S8177569: keytool should not warn if signature algorithm used in cacerts is weak + S8177837: need to upgrade install tools + S8178714: PKIX validator nameConstraints check failing after change 8175940 + S8179423: 2 security tests started failing for JDK 1.6.0 u161 b05 + S8179564: Missing @bug for tests added with JDK-8165367 + S8181048: Refactor existing providers to refer to the same constants for default values for key length + S8182879: Add warnings to keytool when using JKS and JCEKS + S8184937: LCMS error 13: Couldn't link the profiles + S8185039: Incorrect GPL header causes RE script to miss swap to commercial header for licensee source bundle + S8185040: Incorrect GPL header causes RE script to miss swap to commercial header for licensee source bundle + S8185778: 8u151 L10n resource file update + S8185845: Add SecurityTools.java test library + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java failed after backport to JDK 6/7/8 + S8186533: 8u151 L10n resource file update md20 + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds * Backports + S8035496, PR3487: G1 ARM: missing remset entry noticed by VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0 + S8146086, PR3439, RH1478402: Publishing two webservices on same port fails with "java.net.BindException: Address already in use" + S8184673, PR3475, RH1487266: Fix compatibility issue in AlgorithmChecker for 3rd party JCE providers + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect owned monitor + S8187822, PR3478, RH1494230: C2 conditonal move optimization might create broken graph * Bug fixes + PR3479, RH1486025: ECC and NSS JVM crash + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot + S8165852, PR3468: (fs) Mount point not found for a file which is present in overlayfs + S8188030, PR3459, RH1484079: AWT java apps fail to start when some minimal fonts are present * PPC port + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply intrinsic + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of li/cmpld + S8170328, PR3466, RH1498321: PPC64: Use andis instead of lis/and + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for bitfield extract * AArch64 port + S8161190, PR3488: AArch64: Fix overflow in immediate cmp instruction + S8187224, PR3488: aarch64: some inconsistency between aarch64_ad.m4 and aarch64.ad * SystemTap + PR3467, RH1492139: Hotspot object_alloc tapset uses HeapWordSize incorrectly * Shenandoah + Add missing UseShenandoahGC checks to C2 + [backport] Add JVMTI notifications to Shenandoah GC pauses. + [backport] After Evac verification should run consistently + [backport] All definitions should start with Shenandoah* + [backport] Allocation latency tracing + [backport] Allow allocations in pinned regions + [backport] Assorted monitoring support fixes + [backport] Avoid Full STW GC on System.gc() + related fixes + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace + [backport] Cannot do more than 1000 Full GCs + [backport] Cap heap size for TestRegionSizeArgs test + [backport] Cleanup "dirty" mentions + [backport] Cleanup unused methods and statements + Trivial cleanup: removed unused field, etc. + [backport] Common pause marker to capture everything before/after pause + [backport] Consistent print_on and tty handling + [backport] "continuous" heuristics + [backport] Disable biased locking by default + [backport] Fix build error: avoid loops with empty bodies + [backport] Fix build error: switches over enums should take all enums + [backport] Fix build error: verifier liveness should not be implicitly casted to size_t + [backport] Fixed assertion failures when printing heap region to trace output + [backport] Fixed C calling convention of shenandoah_wb() on Windows + [backport] LotsOfCycles test always degrades to Full GC + [backport] Made ShenandoahPrinter debug only + [backport] Make sure different Verifier levels work + [backport] Make sure we have at least one memory pool per memory manager (JMX) + JMX double-counts heap used size + [backport] Mark heuristics diagnostic/experimental + [backport] Move Verifier "start" message under (gc,start) + [backport] On-demand commit as heap resizing strategy + [backport] Periodic GC + [backport] PhiNode::has_only_data_users() needs to apply to shenandoah barrier only + [backport] Pinning humongous regions should be allowed + [backport] Reclaimed humongous regions should count towards immediate garbage + [backport] Refactor region flags into finite state machine + [backport] Refactor ShConcThread dispatch + [backport] Refactor ShenandoahFreeSet + Fast-forward over humongous regions to keep "current" non-humongous + [backport] Refactor ShenandoahHeapLock + [backport] Refactor ShenandoahHeapRegionSet + [backport] Region (byte|word) shifts as the replacement for divisions + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation tests + [backport] Rename inline guards + [backport] Selectable humongous threshold + Humongous top() should be correct for iteration + [backport] Shortcut concurrent cycle when enough immediate garbage is reclaimed + [backport] Templatize and improve inlining of arraycopy and clone barriers. + [backport] TestRegionSampling test + [backport] TestSmallHeap test for Shenandoah + [backport] Uncommit heap regions after given delay + [backport] Underflow in adaptive free_threshold calculation + [backport] Unlock more GC-specific tests for Shenandoah + [backport] Update counters on slow-path more rarely + [backport] Verifier should avoid pushing on stack when walking objects past TAMS + [backport] Verifier should walk cset and humongous regions + [backport] Verify humongous regions liveness + [backport] Verify liveness data + Correct way to fix Windows call convention issue + Fix build error in release config. + Fixed Fixed message logging + Handle Java heap initialization and expansion failures + Make sure -verbose:gc, PrintGC, PrintGCDetails work consistently + Missing barriers on constant oops + acmp rework + cas fix + write barrier on constant oop fix + Missing UseShenandoahGC check in LibraryCallKit::inline_multiplyToLen() + Missing UseShenandoahGC check to C2 + OOME in SurrogateLockerThread deadlocks the GC cycle + Properly unlock ShenandoahVerify + Remove unused memory_for, fixing the build + Remove useless code following acmp rework + Revert accidental G1 closure rename + Test bug: test library and flags in TestHeapAlloc + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify + Write barrier pin and expand cleanup - Removed patches: * alternative-tzdb_dat.patch * java-1_8_0-openjdk-linuxfilestore.patch + Integrated upstream- Enable improved font rendering on systems where it applies- Change the requirement of tzdata-java8 to Recommends, since it is not strictly needed.- Added patch: * alternative-tzdb_dat.patch + Allow specifying alternative path where to find the tzdb.dat file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat - Don't symlink tzdb.dat in postinstall- Update the provided jdbc-stdext version to 4.2- Allow bootstrapping by itself (BuildConflicts: java-devel >= 1.9)- Make the requirements for mozilla-nss requires_ge instead of requires_eq- Don't require java-bootstrap-devel, build with the non-bootstrap java.- Added patch: * zero-atomic_copy64.patch - Fix wrong assembly for ppc and (maybe for) s390- Added patch: * java-1_8_0-openjdk-linuxfilestore.patch - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and overlayfs- Update to version jdk8u144 (icedtea 3.5.1) * Import of OpenJDK 8 u144 build 01 - S8184993: Jar file verification failing with SecurityException: digest missing xxx * Shenandoah - Amend "ArrayCopy verification code fix" with 8u-specific node hierarchy test - Amend "Refactor asm acmp" with a few missing changes - [backport] aarch64 store check fix - [backport] Account "shared" out-of-LAB allocations separately - [backport] Adaptive should not be scared of user-requested System.gc() - [backport] Added assertion for page alignment of heap's base address - [backport] Add "verify jcstress" acceptance test - [backport] "Allocation failure" cause should not be overwritten - [backport] ArrayCopy verification code fix - [backport] Assorted cleanups - [backport] "Before Full GC" verification is too strong for OOME-during-evac - [backport] C1 stores constants without read barriers - [backport] Cleanup AArch64 code - [backport] Cleanup class unloading and string intern code - [backport] Cleanup duplicated Shenandoah task queue declarations - [backport] Cleanups - [backport] Cleanup ShenandoahBarrierSet::write_barrier - [backport] Cleanup ShenandoahHeap::do_evacuation - [backport] Clean up unused fields and methods - [backport] Cleanup: update-refs check in_collection_set twice - [backport] Code cache roots styles - [backport] Concurrent code cache evacuation + bugfixes - [backport] Concurrent preclean + Fix weakref precleaning - [backport] Correct prefetch offset for marked object iteration - [backport] Deferred region cleanup. - [backport] Dense ShenandoahHeapRegion printout - [backport] Detailed ParallelCleanupTask statistics + Split out Full GC stats for parallel cleaning - [backport] Disable aggressive+verification test configs (jtreg eats up last configuration) - [backport] Do not abandon RP discovery on conc GC cancel, do that only before Full GC - [backport] Eliminating _num_regions variable in ShenandoahHeap - [backport] Ensure collection set and cset map are consistent - [backport] Fallback to shared allocation if GCLAB is not available - [backport] Fast synchronizer root scanning - [backport] "F: Code Cache Roots" is missing from gc+stats - [backport] Fix DerivedPointerTable handling when scanning roots twice in init-evac phase - [backport] Fixed a few of early returns that calling register_gc_end() - [backport] Fix live data accounting for humongous region - [backport] Fix memory Phis with only data uses - [backport] Fix recycled regions zapping - [backport] Fix up pointer volatility - [backport] Generic verification should not trust bitmaps - [backport] Heap/matrix verification for all reachable objects - [backport] Heap memory usage counting not longer needs to be atomic - [backport] Heap region recycling should call explicit clear() and request zapping - [backport] Heap region verification - [backport] Implementation of interpreter matrix barrier on aarch64 - [backport] Implement early update references phase. - [backport] implicit null checks broken on aarch64 - [backport] Increase timeout for EvilSyncBug test - [backport] Lazy parallel code cache iterator - [backport] Make statistics gathering span more operations - [backport] Make sure atomic operations are done on "volatile" fields - [backport] Make sure new_active_workers is used - [backport] Make {T,GC}LAB statistics unconditional - [backport] Mark-compact and heuristics should consistently process refs and unload classes - [backport] minor fix to optimization of java mirror comparison - [backport] more barrier on constant oop fixes + couple small unrelated fixes - [backport] More collection set and matrix cleanup - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should announce itself as "Phase 3" - [backport] Optimize heap region size checks - [backport] Optimize heap verification - [backport] Out-of-TLAB evacuation should overwrite stale copies - [backport] Parallel code cache scanning - [backport] Parallel verification - [backport] Print correct message about gross times in stats - [backport] Print heap changes in phases that actually change heap occupancy - [backport] Print more detailed final UR stats - [backport] Print more details for weak ref and class unloading stats - [backport] Properly react on -ClassUnloading - [backport] Purge ealier version of redefined classes during class unloading - [backport] Purge ratio, global, connections heuristics. - [backport] Purge shenandoahHumongous.hpp - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace. - [backport] Reduce region retirement during tlab allocation - [backport] Refactor asm acmp (x86, aarch64, renames) - [backport] Refactor BrooksPointer asserts - [backport] Refactor heap verification - [backport] Reference processing deadlocks with - ParallelRefProcEnabled - [backport] Reference processors might use non-forwarded alive checks - [backport] Region sampling may not be enabled because last timetick is uninitialized - [backport] Rehash ShenandoahHeap section in hs_err - [backport] Reinstate "Purge" block in final-mark stats - [backport] Relax assert to not fire at safepoint - [backport] Remove heap printing routines from ShenandoahHeap - [backport] Remove obsolete compile_resolve_oop_runtime() methods - [backport] Rename final mark operations - [backport] Rename ShenandoahBarriersForConst - [backport] Replace ShHeapRegionSet::get with get_fast - [backport] Report correct total garbage data. Print out garbage and cset data with -Xlog:gc+ergo - [backport] Report oops and fwdptrs verification failures fully - [backport] Result of write barrier on constant not used - [backport] Separate Full GC root operations in GC stats - [backport] ShenandoahCollectionSet refactor - [backport] ShenandoahGCSession used wrong timer for full GC - [backport] ShenandoahHeap::evacuate_object() with boolean result flag. - [backport] Shenandoah options should be uintx - [backport] shenandoah_wb should fallback to slow path with - UseTLAB + Fix aarch64 compilation error due to shenandoah_wb change - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths() assert failure when compiling methods using unsafe - [backport] Shortcut reference processing when no work is available - [backport] Simplify parallel synchronizer roots iterator - [backport] Skip RESOLVE when references update is not needed - [backport] Stats should attribute "Resize TLABs" properly, and mention "Pause" for init/final mark - [backport] Stats should not record past-shutdown events - [backport] "String/Symbol/CodeCache" -> "Str/Sym, Code Cache" - [backport] Tests should use all heuristics and pass heap verification + Disable aggressive+verification test configs - [backport] Total pauses should include final-mark pauses - [backport] Trim down native GC footprint - [backport] Update region sampling to include TLAB/GCLAB allocation data - [backport] Update roots should always handle derived pointers - [backport] Update ShenandoahHeapSampling to avoid double counting. - [backport] Update statistics to capture thread data accurately - [backport] Use CollectedHeap::base() instead of ShenandoahHeap::first_region_bottom() - [backport] Use lock version heap region memory allocator - [backport] Use scoped object for gc session/phases recording - [backport] Variable steps in adaptive heuristics - [backport] Verification error log is truncated - [backport] Verification levels - [backport] Verification should assert complete bitmaps in most phases + Disable complete bitmap verification in init mark - [backport] Verifier performance improvements: scan objects once, avoid double oop checks - [backport] Verifier should not assert cset in forwarded test block - [backport] Verifier should print extended info on referenced location - [backport] Verifier should use non-optimized root scans - [backport] Verify marked objects - [backport] Verify TAMS and object sizes - [backport] write barrier can get stuck below predicates resulting in unschedulable graph - S8140584: nmethod::oops_do_marking_epilogue always runs verification code - S8180175, S8180599: Cherry-pick/synchronize - Cleanup: Removed redundant ClassLoaderData::clear_claimed_marks() calls - Cleanup shared code. - Fixed memory leak in region garbage cache - Fix return type of ShenandoahHeapRegion::region_size_words_jint() - Improved comment about AArch64bit addressing in assembler. - Leak mutex in ShenandoahTaskTerminator - Make sure C2 arguments are not used when C2 is disabled. - Refactor parallel ClassLoaderData iterator - Revert G1 changes and bring shared BitMap - Add missing cmpoops() declaration to AArch64 macro assembler. Back out matrix related code from AArch64 interpreter. - Fix build without precompiled headers. - Fixed build issues on Windows- Use aarch32 instead of arm as a directory for JIT arm 32-bit virtual machine.- Upgrade to version jdk8u141 (icedtea 3.5.0) * Security fixes - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage collection - S8167228: Update to libpng 1.6.28 - S8169209, CVE-2017-10053, bsc#1049305: Improved image post-processing steps - S8169392, CVE-2017-10067, bsc#1049306: Additional jar validation steps - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis issue - S8171539, CVE-2017-10078, bsc#1049308: Better script accessibility for JavaScript - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool execution - S8172461, CVE-2017-10089, bsc#1049312: Service Registration Lifecycle - S8172465, CVE-2017-10090, bsc#1049313: Better handling of channel groups - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer Exceptions - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text catalogs - S8173697, CVE-2017-10107, bsc#1049318: Less Active Activations - S8173770, CVE-2017-10074, bsc#1049307: Image conversion improvements - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching - S8174105, CVE-2017-10108, bsc#1049319: Better naming attribution - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of code - S8174770: Check registry registration location - S8174873: Improved certificate processing - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA operations - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA operations - S8176055: JMX diagnostic improvements - S8176067, CVE-2017-10116, bsc#1049325: Proper directory lookup processing - S8176760, CVE-2017-10135, bsc#1049328: Better handling of PKCS8 material - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic curve support - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm constraints implementation - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate chain connections - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion improvements - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image conversion improvements - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle arrangements - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in subcomponent JAX-WS - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in subcomponent deployment - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in subcomponent JavaFX - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in subcomponent deployment - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in subcomponent JavaFX * New features - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider * Import of OpenJDK 8 u141 build 15 (bsc#1049302) - S8139870: sun.management.LazyCompositeData.isTypeMatched() fails for composite types with items of ArrayType - S8155690: Update libPNG library to the latest up-to-date - S8159058: SAXParseException when sending soap message - S8162461: Hang due to JNI up-call made whilst holding JNI critical lock - S8163889: [macosx] Can't print from browser on Mac OS X - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc - S8165367: Additional tests for JEP 288: Disable SHA-1 Certificates - S8173145: Menu is activated after using mnemonic Alt/Key combination - S8173207: Upgrade compression library - S8175251: Failed to load RSA private key from pkcs12 - S8176329: jdeps to detect MR jar file and output a warning - S8176536: Improved algorithm constraints checking - S8176731: JCK tests in api/javax_xml/transform/ spec conformance started failing after 8172469 - S8176769: Remove accidental spec change in jdk8u - S8177449: (tz) Support tzdata2017b - S8178996: [macos] JComboBox doesn't display popup in mixed JavaFX Swing Application on 8u131 and Mac OS 10.12 - S8179014: JFileChooser with Windows look and feel crashes on win 10 - S8180582: The bind to rmiregistry is rejected by registryFilter even though registryFilter is set - S8181591: 8u141 L10n resource file update - S8181698: Remove and retag 8u141-b12 tag from source repository - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup - S8182054: Improve wsdl support - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher updates source base * Backports - S8164293, PR3412, RH1459641: HotSpot leaking memory in long-running requests - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument" when -XX:+UseNUMA is used - S8175887, PR3415: C1 value numbering handling of Unsafe.get*Volatile is incorrect - S8179084, PR3409, RH1455694: HotSpot VM fails to start when AggressiveHeap is set - S8180048, PR3411, RH1449870: Interned string and symbol table leak memory during parallel unlinking - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument" still seen after 8175813 - S8181419, PR3413, RH1463144: Race in jdwp invoker handling may lead to crashes or invalid results * AArch64 port - S7009641, PR3423: Don't fail VM when CodeCache is full - S8182581, PR3423: aarch64: fix for crash caused by earlyret of compiled method * AArch32 port - PR3391: Revert PR3385 as -Xshare:dump does appear to work on AArch32- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849 * Security fixes - S8163520, CVE-2017-3509: Reuse cache entries - S8163528, CVE-2017-3511: Better library loading - S8165626, CVE-2017-3512: Improved window framing - S8167110, CVE-2017-3514: Windows peering issue - S8168699: Validate special case invocations - S8169011, CVE-2017-3526: Resizing XML parse trees - S8170222, CVE-2017-3533: Better transfers of files - S8171121, CVE-2017-3539: Enhancing jar checking - S8171533, CVE-2017-3544: Better email transfer - S8172299: Improve class processing * New features - PR1969: Add AArch32 JIT port - PR3297: Allow Shenandoah to be used on AArch64 - PR3340: jstack.stp should support AArch64 * Import of OpenJDK 8 u131 build 11 - S6474807: (smartcardio) CardTerminal.connect() throws CardException instead of CardNotPresentException - S6515172, PR3346: Runtime.availableProcessors() ignores Linux taskset command - S7155957: closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java hangs on win 64 bit with jdk8 - S7167293: FtpURLConnection connection leak on FileNotFoundException - S8035568: [macosx] Cursor management unification - S8079595: Resizing dialog which is JWindow parent makes JVM crash - S8130769: The new menu can't be shown on the menubar after clicking the "Add" button. - S8146602: jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test fails with NullPointerException - S8147842: IME Composition Window is displayed at incorrect location - S8147910, PR3346: Cache initial active_processor_count - S8150490: Update OS detection code to recognize Windows Server 2016 - S8160951: [TEST_BUG] javax/xml/bind/marshal/8134111/UnmarshalTest.java should be added into :needs_jre group - S8160958: [TEST_BUG] java/net/SetFactoryPermission/SetFactoryPermission.java should be added into :needs_compact2 group - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is enabled - S8161195: Regression: closed/javax/swing/text/FlowView/LayoutTest.java - S8161993, PR3346: G1 crashes if active_processor_count changes during startup - S8162876: [TEST_BUG] sun/net/www/protocol/http/HttpInputStream.java fails intermittently - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java failed with "Error while cleaning up threads after test" - S8167179: Make XSL generated namespace prefixes local to transformation process - S8168774: Polymorhic signature method check crashes javac - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections - S8169589: [macosx] Activating a JDialog puts to back another dialog - S8170307: Stack size option -Xss is ignored - S8170316: (tz) Support tzdata2016j - S8170814: Reuse cache entries (part II) - S8170888, PR3314, RH1284948: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments - S8171388: Update JNDI Thread contexts - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with error: The bitwise mask Frame.ICONIFIED is not setwhen the frame is in ICONIFIED state - S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog test fails as DummyButton on Dialog did not gain focus when clicked. - S8173030: Temporary backout fix #8035568 from 8u131-b03 - S8173031: Temporary backout fix #8171952 from 8u131-b03 - S8173783, PR3328: IllegalArgumentException: jdk.tls.namedGroups - S8173931: 8u131 L10n resource file update - S8174844: Incorrect GPL header causes RE script to miss swap to commercial header for licensee source bundle - S8174985: NTLM authentication doesn't work with IIS if NTLM cache is disabled - S8176044: (tz) Support tzdata2017a * Backports - S6457406, PR3335: javadoc doesn't handle properly in producing index pages - S8030245, PR3335: Update langtools to use try-with-resources and multi-catch - S8030253, PR3335: Update langtools to use strings-in-switch - S8030262, PR3335: Update langtools to use foreach loops - S8031113, PR3337: TEST_BUG: java/nio/channels/AsynchronousChannelGroup/Basic.java fails intermittently - S8031625, PR3335: javadoc problems referencing inner class constructors - S8031649, PR3335: Clean up javadoc tests - S8031670, PR3335: Remove unneeded -source options in javadoc tests - S8032066, PR3335: Serialized form has broken links to non private inner classes of package private - S8034174, PR2290: Remove use of JVM_* functions from java.net code - S8034182, PR2290: Misc. warnings in java.net code - S8035876, PR2290: AIX build issues after '8034174: Remove use of JVM_* functions from java.net code' - S8038730, PR3335: Clean up the way JavadocTester is invoked, and checks for errors. - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests - S8040904, PR3335: Ensure javadoc tests do not overwrite results within tests - S8040908, PR3335: javadoc test TestDocEncoding should use - notimestamp - S8041150, PR3335: Avoid silly use of static methods in JavadocTester - S8041253, PR3335: Avoid redundant synonyms of NO_TEST - S8043780, PR3368: Use open(O_CLOEXEC) instead of fcntl(FD_CLOEXEC) - S8061305, PR3335: Javadoc crashes when method name ends with "Property" - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits - S8075565, PR3337: Define @intermittent jtreg keyword and mark intermittently failing jdk tests - S8075670, PR3337: Remove intermittent keyword from some tests - S8078334, PR3337: Mark regression tests using randomness - S8078880, PR3337: Mark a few more intermittently failuring security-libs - S8133318, PR3337: Exclude intermittent failing PKCS11 tests on Solaris SPARC 11.1 and earlier - S8144539, PR3337: Update PKCS11 tests to run with security manager - S8144566, PR3352: Custom HostnameVerifier disables SNI extension - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command - S8155049, PR3352: New tests from 8144566 fail with "No expected Server Name Indication" - S8173941, PR3326: SA does not work if executable is DSO - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes breaks with irreducible loops - S8174729, PR3336, RH1420518: Race Condition in java.lang.reflect.WeakCache - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the test * Bug fixes - PR3348: Architectures unsupported by SystemTap tapsets throw a parse error - PR3378: Perl should be mandatory - PR3389: javac.in and javah.in should use @PERL@ rather than a hardcoded path * AArch64 port - S8168699, PR3372: Validate special case invocations [AArch64 support] - S8170100, PR3372: AArch64: Crash in C1-compiled code accessing References - S8172881, PR3372: AArch64: assertion failure: the int pressure is incorrect - S8173472, PR3372: AArch64: C1 comparisons with null only use 32-bit instructions - S8177661, PR3372: Correct ad rule output register types from iRegX to iRegXNoSp * AArch32 port - PR3380: Zero should not be enabled by default on arm with the AArch32 HotSpot build - PR3384, S8139303, S8167584: Add support for AArch32 architecture to configure and jdk makefiles - PR3385: aarch32 does not support -Xshare:dump - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build - PR3387: Installation fails on arm with AArch32 port as INSTALL_ARCH_DIR is arm, not aarch32 - PR3388: Wrong path for jvm.cfg being used on arm with AArch32 build * Shenandoah - Fix Shenandoah argument checking on 32bit builds. - Import from Shenandoah tag aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25 - Import from Shenandoah tag aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20 - Import from Shenandoah tag aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06 - Import from Shenandoah tag aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09 - Import from Shenandoah tag aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed. Fixes bsc#1026102. - Clean the mozilla-nss requires and move them into the headless- Add a test to check that ECC is working * new file TestECDSA.java- Don't run bootstrap build for s390, since it is broken, instead introduce a little cycle on this platform, in order to have working openjdk8- Upgrade to version jdk8u121 (icedtea 3.3.0) - bsc#1020905 * Security fixes - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution - S8156804, CVE-2017-3241: Better constraint checking - S8158406: Limited Parameter Processing - S8158997: JNDI Protocols Switch - S8159507: RuntimeVisibleAnnotation validation - S8161218: Better bytecode loading - S8161743, CVE-2017-3252: Provide proper login context - S8162577: Standardize logging levels - S8162973: Better component components - S8164143, CVE-2017-3260: Improve components for menu items - S8164147, CVE-2017-3261: Improve streaming socket output - S8165071, CVE-2016-2183: Expand TLS support - S8165344, CVE-2017-3272: Update concurrency support - S8166988, CVE-2017-3253: Improve image processing performance - S8167104, CVE-2017-3289: Additional class construction refinements - S8167223, CVE-2016-5552: URL handling improvements - S8168705, CVE-2016-5547: Better ObjectIdentifier validation - S8168714, CVE-2016-5546: Tighten ECDSA validation - S8168728, CVE-2016-5548: DSA signing improvments - S8168724, CVE-2016-5549: ECDSA signing improvments * New features - PR3300: wget not required when downloading is disabled - PR3301: Support RHEL multilib installations which use the /usr/lib/jvm/java-1.x.0-openjdk.${arch} naming - PR3303: Allow Kerberos to be detected by old libs & headers method if pkg-config check fails * Import of OpenJDK 8 u112 build 16 - S6477756: GraphicsDevice.getConfigurations() is slow taking 3 or more seconds - S7172749: Xrender: Class cast exception in 2D code running an AWT regression test - S8017629: G1: UseSHM in combination with a G1HeapRegionSize > os::large_page_size() falls back to use small pages - S8022203: Intermittent test failures in demo/jvmti/hprof - S8022582: Relax response flags checking in sun.security.krb5.KrbKdcRep.check. - S8027575: b113 causing a lot of memory allocation and regression for wls_webapp_atomics - S8028486: java/awt/Window/WindowsLeak/WindowsLeak.java fails - S8030780: test/com/sun/corba/cachedSocket/7056731.sh leaves HelloServer behind - S8036630: Null ProtectionDomain in JVM can cause NPE because principals field is not initialized to an empty array - S8042660: vm/mlvm/anonloader/stress/byteMutation failed with: assert(index >=0 && index < _length) failed: symbol index overflow - S8044193: Need to add known answer tests for AES cipher - S8044575: testlibrary_tests/whitebox/vm_flags/UintxTest.java failed: assert(!res || TypeEntriesAtCall::arguments_profiling_enabled()) failed: no profiling of arguments - S8048601: Tests for JCE crypto ciphers (part 1) - S8048621: Implement basic keystore tests - S8048622: Enhance tests for PKCS11 keystores with NSS - S8049021: Add smartcardio tests with APDU buffer - S8049312: AES/CICO test failed with on several modes - S8050402: Tests to check for use of policy files - S8050409: Test for JAAS getPrivateCredentials - S8054326: Confusing message in "Current rem set statistics" - S8055772: get_source.sh : version check assumes English localization - S8057791: Selection in JList is drawn with wrong colors in Nimbus L&F - S8058865: JMX Test Refactoring - S8067964: Native2ascii doesn't close one of the streams it opens - S8071487: javax/management/monitor/GaugeMonitorDeadlockTest.java timed out - S8071909: Port testlibrary improvments in jdk/test to hotspot/test as required for DCMD test port - S8073542: File Leak in jdk/src/java/base/unix/native/libnet/PlainDatagramSocketImpl.c - S8074784: Additional tests for XML DSig API - S8075007: Additional tests for krb5-related cipher suites with unbound server - S8075297: Tests for RFEs 4515853 and 4745056 - S8075299: Additional tests for krb5 settings - S8075301: Tests for sun.security.krb5.principal system property - S8077276: allocating heap with UseLargePages and HugeTLBFS may trash existing memory mappings (linux) - S8078268: javax.swing.text.html.parser.Parser parseScript incorrectly optimized - S8078382: Wrong glyph is displayed for a derived font - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump to parent frame on focus - S8085903: New fix for memory leak in ProtectionDomain cache - S8098581: SecureRandom.nextBytes() hurts performance with small size requests - S8129740: Incorrect class file created when passing lambda in inner class constructor - S8130127: streamline input parameter of Nashorn scripting $EXEC function - S8130309: Need to bailout cleanly if creation of stubs fails when codecache is out of space - S8130317: "ant test" fails to complete on Windows when run under cygwin shell - S8133070: Hot lock on BulkCipher.isAvailable - S8133309: Some unicode characters do not display any more after upgrading to Windows 10 - S8134232: KeyStore.load() throws an IOException with a wrong cause in case of wrong password - S8135322: ConstantPool::release_C_heap_structures not run in some circumstances - S8136998: JComboBox prevents wheel mouse scrolling of JScrollPane - S8137240: Negative lookahead in RegEx breaks backreference - S8138906: [TEST_BUG] Test test/script/trusted/JDK-8087292.js intermittently fails. - S8141148: LDAP "follow" throws ClassCastException with Java 8 - S8141541: Simplify Nashorn's Context class loader handling - S8143640: Showing incorrect result while passing specific argument in the Java launcher tools - S8143642: Nashorn shebang argument handling is broken - S8144160: Regression: two tests fail on Windows with "ant test" target - S8144221: fix Nashorn shebang argument handling on Mac/Linux - S8144703: ClassCastException: sun.font.CompositeFont cannot be cast to PhysicalFont - S8145305: fix Nashorn shebang handling on Cygwin - S8145984: [macosx] sun.lwawt.macosx.CAccessible leaks - S8146975: NullPointerException in IIOPInputStream.inputClassFields - S8147026: Convert an assert in ClassLoaderData to a guarantee - S8147451: Crash in Method::checked_resolve_jmethod_id(_jmethodID*) - S8147585: Annotations with lambda expressions has parameter result in wrong behavior. - S8147969: Print size of DH keysize when errors are encountered - S8148140: arguments are handled differently in apply for JS functions and AbstractJSObjects - S8148984: [macosx] Chinese Comma cannot be entered using Pinyin Input Method on OS X - S8150219: ReferenceError in 1.8.0_72 - S8150234: Windows 10 App Containers disallow access to ICMP calls - S8150814: correct package declaration in Nashorn test - S8151722: TESTBUG: New test compiler/native/TestDirtyInt.sh should be modified - S8153149: Uninitialised memory in WinAccessBridge.cpp:1128 - S8153192: (se) Selector.select(long) uses wrong timeout after EINTR (lnx) - S8153781: Issue in XMLScanner: EXPECTED_SQUARE_BRACKET_TO_CLOSE_INTERNAL_SUBSET when skipping large DOCTYPE section with CRLF at wrong place - S8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with "Field length overflow" - S8154009: Some methods of java.security.Security require more permissions, than necessary - S8154069: Jaws reads wrong values from comboboxes when no element is selected - S8154144: Tests in com/sun/jdi fails intermittently with "jdb input stream closed prematurely" - S8154469: Update FSF address - S8154553: Incorrect GPL header in package-info.java reported - S8154558: Incorrect GPL header in ProcessEnvironment_md.c reported - S8154816: Caps Lock doesn't work as expected when using Pinyin Simplified input method - S8154831: CastII/ConvI2L for a range check is prematurely eliminated - S8155001: SystemTray.remove() leaks GDI Objects in Windows - S8155106: MHs.Lookup.findConstructor returns handles for array classes - S8155214: java/lang/invoke/PermuteArgsTest.java fails due to exhausted code cache - S8156478: 3 Buffer overrun defect groups in jexec.c - S8156521: Minor fixes and cleanups in NetworkInterface.c - S8156714: Parsing issue with automatic semicolon insertion - S8156836: SIGSEGV: Test test/compiler/jsr292/VMAnonymousClasses.java fails with JTREG 4.2 b02 - S8156896: Script stack trace should display function names - S8157160: JSON.stringify does not work on ScriptObjectMirror objects - S8157242: Some java/lang/invoke tests miss othervm - S8157444: exclude jjs shebang handling test from runs - S8157603: TestCipher.java doesn't check one of the decrypted message as expected - S8157680: Callback parameter of any JS builtin implementation should accept any Callable - S8157819: TypeError when a java.util.Comparator object is invoked as a function - S8158059: The fix for 8050402 was partially committed - S8158072: Need a test for JDK-7172749 - S8158111: Make handling of 3rd party providers more stable - S8158178: java.awt.SplashScreen.getSize() returns incorrect size for high dpi splash screens - S8158338: Nashorn's ScriptLoader split delegation has to be adjusted - S8158373: SIGSEGV: Metadata::mark_on_stack - S8158467: AccessControlException is thrown on public Java class access if "script app loader" is set to null - S8158495: CCE: sun.java2d.NullSurfaceData cannot be cast to sun.java2d.opengl.OGLSurfaceData - S8158802: com.sun.jndi.ldap.SimpleClientId produces wrong hash code - S8158871: Long response times with G1 and StringDeduplication - S8159822: Non-synchronized access to shared members of com.sun.jndi.ldap.pool.Pool - S8160122: Backport of JDK-8159244 used wrong version of the JDK 9 fix - S8160518: Semicolon is not recognized as comment starting character (Kerberos) - S8160693: ScriptRunData.java uses bitwise AND instead of logical AND - S8161144: Fix for JDK-8147451 failed: Crash in Method::checked_resolve_jmethod_id(_jmethodID*) - S8162510: 8u112 L10n resource file updates - S8164453: 8u112 L10n resource file update - msgdrop 20 * Import of OpenJDK 8 u121 build 13 - S8037099: [macosx] Remove all references to GC from native OBJ-C code - S8059212: Modify sun/security/smartcardio manual regression tests so that they do not just fail if no cardreader found - S8139565: Restrict certificates with DSA keys less than 1024 bits - S8140422: Add mechanism to allow non default root CAs to be not subject to algorithm restrictions - S8148516: Improve the default strength of EC in JDK - S8151893: Add security property to configure XML Signature secure validation mode - S8152438: Threads may do significant work out of the non-shared overflow buffer - S8153438: Avoid repeated "Please insert a smart card" popup windows - S8154005: Add algorithm constraint that specifies the restriction date - S8154015: Apply algorithm constraints to timestamped code - S8159410: InetAddress.isReachable returns true for non existing IP adresses - S8160108: Implement Serialization Filtering - S8161228: URL objects with custom protocol handlers have port changed after deserializing - S8161571: Verifying ECDSA signatures permits trailing bytes - S8163304: jarsigner -verbose -verify should print the algorithms used to sign the jar - S8163583: [macosx] Press "To Back" button on the Dialog, the Dialog moves behind the Frame - S8164908: ReflectionFactory support for IIOP and custom serialization - S8165230: RMIConnection addNotificationListeners failing with specific inputs - S8166389: [TEST_BUG] closed/java/security/Security/ReadProp/ReadProp.sh failing - S8166393: disabledAlgorithms property should not be strictly parsed - S8166432: Bad 8u112 merge of sun/security/tools/jarsigner/warnings/Test.java - S8166591: [macos 10.12] Trackpad scrolling of text on OS X 10.12 Sierra is very fast (Trackpad, Retina only) - S8166739: Improve extensibility of ObjectInputFilter information passed to the filter - S8166875: (tz) Support tzdata2016g - S8166878: Connection reset during TLS handshake - S8167356: Follow up fix for jdk8 backport of 8164143. Changes for CMenuComponent.m were missed - S8167459: Add debug output for indicating if a chosen ciphersuite was legacy - S8167472: Chrome interop regression with JDK-8148516 - S8167591: Add MD5 to signed JAR restrictions - S8168861: AnchorCertificates uses hardcoded password for cacerts keystore - S8168963: Backout JDK-8154005 - S8168993: JDK8u121 L10n resource file update - S8169072: Backout JDK-8154015 - S8169191: (tz) Support tzdata2016i - S8169688: Backout (remove) MD5 from jdk.jar.disabledAlgorithms for January CPU - S8169911: Enhanced tests for jarsigner -verbose -verify after JDK-8163304 - S8170131: Certificates not being blocked by jdk.tls.disabledAlgorithms property - S8170268: 8u121 L10n resource file update - msgdrop 20 * Bug fixes - PR3271: Always round glyph advance in 26.6 space - PR3271: Fix compatibility with vanilla Fontconfig - PR3271: Fix glyph y advance - PR3271: Replace 'infinality' with 'improved font rendering' (--enable-improved-font-rendering) - PR3271: Simplify glyph advance handling - PR3286: -ffp-contract not available on older GCCs - PR3302: zip should be optional, as it's only used in the manually invoked dist-openjdk and dist-openjdk-fsg rules - PR3304: zip still a requirement of the underlying OpenJDK build * PPC port - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance due to non-optimized compilation * AArch64 port - S8130309, PR3280: Need to bailout cleanly if creation of stubs fails when codecache is out of space (AArch64 changes) - S8132875, PR3280: AArch64: Fix error introduced into AArch64 CodeCache by commit for 8130309 - S8165673, PR3280: AArch64: Fix JNI floating point argument handling - S8170188, PR3280: jtreg test compiler/types/TestMeetIncompatibleInterfaceArrays.java causes JVM crash - S8170873, PR3280: PPC64/aarch64: Poor StrictMath performance due to non-optimized compilation - Modified patch: * java-1_8_0-openjdk-gcc6.patch - rediff to changed context - Require the exact version of mozilla-nss that the package was built against (bsc#1022053)- Upgrade to version jdk8u111 (icedtea 3.2.0) * Security fixes + S8146490: Direct indirect CRL checks + S8151921: Improved page resolution + S8155968: Update command line options + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522) + S8156794: Extend data sharing + S8157176: Improved classfile parsing + S8157739, CVE-2016-5554: Classloader Consistency Checking (bsc#1005523) + S8157749: Improve handling of DNS error replies + S8157753: Audio replay enhancement + S8157759: LCMS Transform Sampling Enhancement + S8157764: Better handling of interpolation plugins + S8158302: Handle contextual glyph substitutions + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525) + S8159495: Fix index offsets + S8159503: Amend Annotation Actions + S8159511: Stack map validation + S8159515: Improve indy validation + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526) + S8160090: Better signature handling in pack200 + S8160094: Improve pack200 layout + S8160098: Clean up color profiles + S8160591, CVE-2016-5582: Improve internal array handling (bsc#1005527) + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528) + PR3206, RH1367357: lcms2: Out-of-bounds read in Type_MLU_Read() + CVE-2016-5556 (bsc#1005524) * New features + PR1370: Provide option to build without debugging + PR1375: Provide option to strip and link debugging info after build + PR1537: Handle alternative Kerberos credential cache locations + PR1978: Allow use of system PCSC + PR2445: Support system libsctp + PR3182: Support building without pre-compiled headers + PR3183: Support Fedora/RHEL system crypto policy + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries * Import of OpenJDK 8 u102 build 14 + S4515292: ReferenceType.isStatic() returns true for arrays + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command + S6976636: JVM/TI test ex03t001 fails assertion + S7185591: jcmd-big-script.sh ERROR: could not find app's Java pid. + S8017462: G1: guarantee fails with UseDynamicNumberOfGCThreads + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong object + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java fails: Process exit code was 0, but error was expected. + S8041781: Need new regression tests for PBE keys + S8041787: Need new regressions tests for buffer handling for PBE algorithms + S8043836: Need new tests for AES cipher + S8044199: Tests for RSA keys and key specifications + S8044772: TempDirTest.java still times out with -Xcomp + S8046339: sun.rmi.transport.DGCAckHandler leaks memory + S8047031: Add SocketPermission tests for legacy socket types + S8048052: Permission tests for setFactory + S8048138: Tests for JAAS callbacks + S8048147: Privilege tests with JAAS Subject.doAs + S8048356: SecureRandom default provider tests + S8048357: PKCS basic tests + S8048360: Test signed jar files + S8048362: Tests for doPrivileged with accomplice + S8048596: Tests for AEAD ciphers + S8048599: Tests for key wrap and unwrap operations + S8048603: Additional tests for MAC algorithms + S8048604: Tests for strong crypto ciphers + S8048607: Test key generation of DES and DESEDE + S8048610: Implement regression test for bug fix of 4686632 in JCE + S8048617: Tests for PKCS12 read operations + S8048618: Tests for PKCS12 write operations. + S8048619: Implement tests for converting PKCS12 keystores + S8048624: Tests for SealedObject + S8048819: Implement reliability test for DH algorithm + S8048820: Implement tests for SecretKeyFactory + S8048830: Implement tests for new functionality provided in JEP 166 + S8049237: Need new tests for X509V3 certificates + S8049321: Support SHA256WithDSA in JSSE + S8049429: Tests for java client server communications with various TLS/SSL combinations. + S8049432: New tests for TLS property jdk.tls.client.protocols + S8049814: Additional SASL client-server tests + S8050281: New permission tests for JEP 140 + S8050370: Need new regressions tests for messageDigest with DigestIOStream + S8050371: More MessageDigest tests + S8050374: More Signature tests + S8050427: LoginContext tests to cover JDK-4703361 + S8050460: JAAS login/logout tests with LoginContext + S8050461: Tests for syntax checking of JAAS configuration file + S8054278: Refactor jps utility tests + S8055530: assert(_exits.control()->is_top() || !_gvn.type(ret_phi)->empty()) failed: return value must be well defined + S8055844: [TESTBUG] test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java fails on Solaris Sparc due to incorrect page size being used + S8059677: Thread.getName() instantiates Strings + S8061464: A typo in CipherTestUtils test + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests + S8065076: java/net/SocketPermission/SocketPermissionTest.java fails intermittently + S8065078: NetworkInterface.getNetworkInterfaces() triggers intermittent test failures + S8066871: java.lang.VerifyError: Bad local variable type - local final String + S8068427: Hashtable deserialization reconstitutes table with wrong capacity + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs to be updated for JDK-8061210 + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac + S8071125: Improve exception messages in URLPermission + S8072081: Supplementary characters are rejected in comments + S8072463: Remove requirement that AKID and SKID have to match when building certificate chain + S8072725: Provide more granular levels for GC verification + S8073400: Some Monospaced logical fonts have a different width + S8073872: Schemagen fails with StackOverflowError if element references containing class + S8074931: Additional tests for CertPath API + S8075286: Additional tests for signature algorithm OIDs and transformation string + S8076486: [TESTBUG] javax/security/auth/Subject/doAs/NestedActions.java fails if extra VM options are given + S8076545: Text size is twice bigger under Windows L&F on Win 8.1 with HiDPI display + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java failed with java.lang.RuntimeException: 'new_active_workers' missing from stdout/stderr + S8079138: Additional negative tests for XML signature processing + S8081512: Remove sun.invoke.anon classes, or move / co-locate them with tests + S8081771: ProcessTool.createJavaProcessBuilder() needs new addTestVmAndJavaOptions argument + S8129419: heapDumper.cpp: assert(length_in_bytes > 0) failed: nothing to copy + S8130150: Implement BigInteger.montgomeryMultiply intrinsic + S8130242: DataFlavorComparator transitivity exception + S8130304: Inference: NodeNotFoundException thrown with deep generic method call chain + S8130425: libjvm crash due to stack overflow in executables with 32k tbss/tdata + S8133023: ParallelGCThreads is not calculated correctly + S8134111: Unmarshaller unmarshalls XML element which doesn't have the expected namespace + S8135259: InetAddress.getAllByName only reports "unknown error" instead of actual cause + S8136506: Include sun.arch.data.model as a property that can be queried by jtreg + S8137068: Tests added in JDK-8048604 fail to compile + S8139040: Fix initializations before ShouldNotReachHere() etc. and enable -Wuninitialized on linux. + S8139581: AWT components are not drawn after removal and addition to a container + S8141243: Unexpected timezone returned after parsing a date + S8141420: Compiler runtime entries don't hold Klass* from being GCed + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can generate unknown signal in hs_err file + S8141551: C2 can not handle returns with inccompatible interface arrays + S8143377: Test PKCS8Test.java fails + S8143647: Javac compiles method reference that allows results in an IllegalAccessError + S8144144: ORB destroy() leaks filedescriptors after unsuccessful connection + S8144593: Suppress not recognized property/feature warning messages from SAXParser + S8144957: Remove PICL warning message + S8145039: JAXB marshaller fails with ClassCastException on classes generated by xjc + S8145228: Java Access Bridge, getAccessibleStatesStringFromContext doesn't wrap the call to getAccessibleRole + S8145388: URLConnection.guessContentTypeFromStream returns image/jpg for some JPEG images + S8145974: XMLStreamWriter produces invalid XML for surrogate pairs on OutputStreamWriter + S8146035: Windows - With LCD antialiasing, some glyphs are not rendered correctly + S8146192: Add test for JDK-8049321 + S8146274: Thread spinning on WeakHashMap.getEntry() with concurrent use of nashorn + S8147468: Allow users to bound the size of buffers cached in the per-thread buffer caches + S8147645: get_ctrl_no_update() code is wrong + S8147807: crash in libkcms.so on linux-sparc + S8148379: jdk.nashorn.api.scripting spec. adjustments, clarifications + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit platforms + S8148820: Missing @since Javadoc tag in Logger.log(Level, Supplier) + S8148926: Call site profiling fails on braces-wrapped anonymous function + S8149017: Delayed provider selection broken in RSA client key exchange + S8149029: Secure validation of XML based digital signature always enabled when checking wrapping attacks + S8149330: Capacity of StringBuilder should not get close to Integer.MAX_VALUE unless necessary + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an array containing two elements + S8149368: [hidpi] JLabel font is twice bigger than JTextArea font on Windows 7,HiDPI, Windows L&F + S8149411: PKCS12KeyStore cannot extract AES Secret Keys + S8149417: Use final restricted flag + S8149450: LdapCtx.processReturnCode() throwing Null Pointer Exception + S8149453: [hidpi] JFileChooser does not scale properly on Windows with HiDPI display and Windows L&F + S8149543: range check CastII nodes should not be split through Phi + S8149743: JVM crash after debugger hotswap with lambdas + S8149744: fix testng.jar delivery in Nashorn build.xml + S8149915: enabling validate-annotations feature for xsd schema with annotation causes NPE + S8150002: Check for the validity of oop before printing it in verify_remembered_set + S8150470: JCK: api/xsl/conf/copy/copy19 test failure + S8150518: G1 GC crashes at G1CollectedHeap::do_collection_pause_at_safepoint(double) + S8150533: Test java/util/logging/LogManagerAppContextDeadlock.java times out intermittently. + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when transforming with lots of temporary result trees + S8150780: Repeated offer and remove on ConcurrentLinkedQueue lead to an OutOfMemoryError + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails intermittently + S8151197: [TEST_BUG] Need to backport fix for test/javax/net/ssl/TLS/TestJSSE.java + S8151352: jdk/test/sample fails with "effective library path is outside the test suite" + S8151431: DateFormatSymbols triggers this.clone() in the constructor + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java should be modified to run with JTREG 4.1 b13 + S8151731: Add new jtreg keywords to jdk 8 + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round': identifier not found + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java reported + S8153252: SA: Hotspot build on Windows fails if make/closed folder does not exist + S8153531: Improve exception messaging for RSAClientKeyExchange + S8153641: assert(thread_state == _thread_in_native) failed: Assumed thread_in_native while heap dump + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command + S8154304: NullpointerException at LdapReferralException.getReferralContext + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java fails + S8157078: 8u102 L10n resource file updates + S8157838: Personalized Windows Font Size is not taken into account in Java8u102 * Import of OpenJDK 8 u111 build 14 + S6882559: new JEditorPane("text/plain","") fails for null context class loader + S8049171: Additional tests for jarsigner's warnings + S8063086: Math.pow yields different results upon repeated calls + S8140530: Creating a VolatileImage with size 0,0 results in no longer working g2d.drawString + S8142926: OutputAnalyzer's shouldXXX() calls return this + S8147077: IllegalArgumentException thrown by api/java_awt/Component/FlipBufferStrategy/indexTGF_General + S8148127: IllegalArgumentException thrown by JCK test api/java_awt/Component/FlipBufferStrategy/indexTGF_General in opengl pipeline + S8150611: Security problem on sun.misc.resources.Messages* + S8153399: Constrain AppCDS behavior (back port) + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp + S8158734: JEditorPane.createEditorKitForContentType throws NPE after 6882559 + S8158994: Service Menu services + S8159684: (tz) Support tzdata2016f + S8160904: Typo in code from 8079718 fix : enableCustomValueHanlde + S8160934: isnan() is not available on older MSVC compilers + S8161141: correct bugId for JDK-8158994 fix push + S8162411: Service Menu services 2 + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing after JDK-8155968 + S8162511: 8u111 L10n resource file updates + S8162792: Remove constraint DSA keySize < 1024 from jdk.jar.disabledAlgorithms in jdk8 + S8164452: 8u111 L10n resource file update - msgdrop 20 + S8165816: jarsigner -verify shows jar unsigned if it was signed with a weak algorithm + S8166381: Back out changes to the java.security file to not disable MD5 * Backports + S8078628, PR3208: Zero build fails with pre-compiled headers disabled + S8141491, PR3159, G592292: Unaligned memory access in Bits.c + S8157306, PR3121: Random infrequent null pointer exceptions in javac (enabled on AArch64 only) + S8162384, PR3122: Performance regression: bimorphic inlining may be bypassed by type speculation * Bug fixes + PR3123: Some object files built without -fPIC on x86 only + PR3126: pax-mark-vm script calls "exit -1" which is invalid in dash + PR3127, G590348: Only apply PaX markings by default on running PaX kernels + PR3199: Invalid nashorn URL + PR3201: Update infinality configure test + PR3218: PR3159 leads to build failure on clean tree * AArch64 port + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic + S8167200, PR3220: AArch64: Broken stack pointer adjustment in interpreter + S8167421, PR3220: AArch64: in one core system, fatal error: Illegal threadstate encountered + S8167595, PR3220: AArch64: SEGV in stub code cipherBlockChaining_decryptAESCrypt + S8168888, PR3220: Port 8160591: Improve internal array handling to AArch64. * Shenandoah + PR3224: Shenandoah broken when building without pre-compiled headers - Modified patch: * java-1_8_0-openjdk-gcc6.patch + rediff to a changed context - Build against system kerberos for openSUSE 13.1 and greater and SLE12 - Build against system pcsc and sctp for openSUSE 13.2 and greater and SLE12- Added patch: * s390-java-opts.patch - Solve memory issues when building s390 version- Upgrade to version jdk8u101 (icedtea 3.1.0) - New in release 3.1.0 (2016-07-25): * Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking (bsc#989732) - S8145446, CVE-2016-3485: Perfect pipe placement (Windows only) (bsc#989734) - S8146514: Enforce GCM limits - S8147771: Construction of static protection domains under Javax custom policy - S8148872, CVE-2016-3500: Complete name checking (bsc#989730) - S8149070: Enforce update ordering - S8149962, CVE-2016-3508: Better delineation of XML processing (bsc#989731) - S8150752: Share Class Data - S8151925: Font reference improvements - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733) - S8153312: Constrain AppCDS behavior - S8154475, CVE-2016-3587: Clean up lookup visibility (bsc#989721) - S8155981, CVE-2016-3606: Bolster bytecode verification (bsc#989722) - S8155985, CVE-2016-3598: Persistent Parameter Processing (bsc#989723) - S8158571, CVE-2016-3610: Additional method handle validation (bsc#989725) - CVE-2016-3552 (bsc#989726) - CVE-2016-3511 (bsc#989727) - CVE-2016-3503 (bsc#989728) - CVE-2016-3498 (bsc#989729) * New features - S8145547, PR1061: [AWT/Swing] Conditional support for GTK 3 on Linux - PR2821: Support building OpenJDK with --disable-headful - PR2931, G478960: Provide Infinality Support via fontconfig - PR3079: Provide option to build Shenandoah on x86_64 * Import of OpenJDK 8 u92 build 14 - S6869327: Add new C2 flag to keep safepoints in counted loops. - S8022865: [TESTBUG] Compressed Oops testing needs to be revised - S8029630: Thread id should be displayed as a hex number in error report - S8029726: On OS X some dtrace probe names are mismatched with Solaris - S8029727: On OS X dtrace probes CallMethodA/CallMethodV are not fired. - S8029728: On OS X dtrace probes SetStaticBooleanField are not fired - S8038184: XMLSignature throws StringIndexOutOfBoundsException if ID attribute value is empty String - S8038349: Signing XML with DSA throws Exception when key is larger than 1024 bits - S8041501: ImageIO reader is not capable of reading JPEGs without JFIF header - S8041900: [macosx] Java forces the use of discrete GPU - S8044363: Remove special build options for unpack200 executable - S8046471: Use OPENJDK_TARGET_CPU_ARCH instead of legacy value for hotspot ARCH - S8046611: Build errors with gcc on sparc/fastdebug - S8047763: Recognize sparc64 as a sparc platform - S8048232: Fix for 8046471 breaks PPC64 build - S8052396: Catch exceptions resulting from missing font cmap - S8058563: InstanceKlass::_dependencies list isn't cleared from empty nmethodBucket entries - S8061624: [TESTBUG] Some tests cannot be ran under compact profiles and therefore shall be excluded - S8062901: Iterators is spelled incorrectly in the Javadoc for Spliterator - S8064330: Remove SHA224 from the default support list if SunMSCAPI enabled - S8065579: WB method to start G1 concurrent mark cycle should be introduced - S8065986: Compiler fails to NullPointerException when calling super with Object<>() - S8066974: Compiler doesn't infer method's generic type information in lambda body - S8067800: Clarify java.time.chrono.Chronology.isLeapYear for out of range years - S8068033: JNI exception pending in jdk/src/share/bin/java.c - S8068042: Check jdk/src/share/native/sun/misc/URLClassPath.c for JNI pending - S8068162: jvmtiRedefineClasses.cpp: guarantee(false) failed: OLD and/or OBSOLETE method(s) found - S8068254: Method reference uses wrong qualifying type - S8074696: Remote debugging session hangs for several minutes when calling findBootType - S8074935: jdk8 keytool doesn't validate pem files for RFC 1421 correctness, as jdk7 did - S8078423: [TESTBUG] javax/print/PrintSEUmlauts/PrintSEUmlauts.java relies on system locale - S8080492: [Parfait] Uninitialised variable in jdk/src/java/desktop/windows/native/libawt/ - S8080650: Enable stubs to use frame pointers correctly - S8122944: perfdata used is seen as too high on sparc zone with jdk1.9 and causes a test failure - S8129348: Debugger hangs in trace mode with TRACE_SENDS - S8129847: Compiling methods generated by Nashorn triggers high memory usage in C2 - S8130506: javac AssertionError when invoking MethodHandle.invoke with lambda parameter - S8130910: hsperfdata file is created in wrong directory and not cleaned up if /tmp/hsperfdata_ has wrong permissions - S8131129: Attempt to define a duplicate BMH$Species class - S8131665: Bad exception message in HandshakeHash.getFinishedHash - S8131782: C1 Class.cast optimization breaks when Class is loaded from static final - S8132503: [macosx] Chinese full stop symbol cannot be entered with Pinyin IM on OS X - S8133207: ParallelProbes.java test fails after changes for JDK-8080115 - S8133924: NPE may be thrown when xsltc select a non-existing node after JDK-8062518 - S8134007: Improve string folding - S8134759: jdb: Incorrect stepping inside finally block - S8134963: [Newtest] New stress test for changing the coarseness level of G1 remembered set - S8136442: Don't tie Certificate signature algorithms to ciphersuites - S8137106: EUDC (End User Defined Characters) are not displayed on Windows with Java 8u60+ - S8138745: Implement ExitOnOutOfMemory and CrashOnOutOfMemory in HotSpot - S8138764: In some cases the usage of TreeLock can be replaced by other synchronization - S8139373: [TEST_BUG] java/net/MulticastSocket/MultiDead.java failed with timeout - S8139424: SIGSEGV, Problematic frame: # V [libjvm.so+0xd0c0cc] void InstanceKlass::oop_oop_iterate_oop_maps_specialized - S8139436: sun.security.mscapi.KeyStore might load incomplete data - S8139751: Javac crash with -XDallowStringFolding=false - S8139863: [TESTBUG] Need to port tests for JDK-8134903 to 8u-dev - S8139985: JNI exception pending in jdk/src/jdk/hprof/agent/share/native/libhprof - S8140031: SA: Searching for a value in Threads does not work - S8140249: JVM Crashing During startUp If Flight Recording is enabled - S8140344: add support for 3 digit update release numbers - S8140587: Atomic*FieldUpdaters should use Class.isInstance instead of direct class check - S8141260: isReachable crash in windows xp - S8143297: Nashorn compilation time reported in nanoseconds - S8143397: It looks like InetAddress.isReachable(timeout) works incorrectly - S8143855: Bad printf formatting in frame_zero.cpp - S8143896: java.lang.Long is implicitly converted to double - S8143963: improve ClassLoader::trace_class_path to accept an additional outputStream* arg - S8144020: Remove long as an internal numeric type - S8144131: ArrayData.getInt implementations do not convert to int32 - S8144483: One long Safepoint pause directly after each GC log rotation - S8144487: PhaseIdealLoop::build_and_optimize() must restore major_progress flag if skip_loop_opts is true - S8144885: agent/src/os/linux/libproc.h needs to support Linux/SPARC builds - S8144935: C2: safepoint is pruned from a non-counted loop - S8144937: [TEST_BUG] testlibrary_tests should be excluded for compact1 and compact2 execution - S8145017: Add support for 3 digit hotspot minor version numbers - S8145099: Better error message when SA can't attach to a process - S8145442: Add the facility to verify remembered sets for G1 - S8145466: javac: No line numbers in compilation error - S8145539: (coll) AbstractMap.keySet and .values should not be volatile - S8145550: Megamorphic invoke should use CompiledFunction variants without any LinkLogic - S8145669: apply2call optimized callsite fails after becoming megamorphic - S8145722: NullPointerException in javadoc - S8145754: PhaseIdealLoop::is_scaled_iv_plus_offset() does not match AddI - S8146147: Java linker indexed property getter does not work for computed nashorn string - S8146566: OpenJDK build can't handle commas in LDFLAGS - S8146725: Issues with SignatureAndHashAlgorithm.getSupportedAlgorithms - S8146979: Backport of 8046471 breaks ppc64 build in jdk8u because 8072383 was badly backported before - S8147087: Race when reusing PerRegionTable bitmaps may result in dropped remembered set entries - S8147630: Wrong test result pushed to 8u-dev - S8147845: Varargs Array functions still leaking longs - S8147857: RMIConnector logs attribute names incorrectly - S8148353: [linux-sparc] Crash in libawt.so on Linux SPARC - S8150791: 8u76 L10n resource file translation update * Import of OpenJDK 8 u101 build 13 - S6483657: MSCAPI provider does not create unique alias names - S6675699: need comprehensive fix for unconstrained ConvI2L with narrowed type - S8037557: test SessionCacheSizeTests.java timeout - S8038837: Add support to jarsigner for specifying timestamp hash algorithm - S8081778: Use Intel x64 CPU instructions for RSA acceleration - S8130150: Implement BigInteger.montgomeryMultiply intrinsic - S8130735: javax.swing.TimerQueue: timer fires late when another timer starts - S8143913: MSCAPI keystore should accept Certificate[] in setEntry() - S8144313: Test SessionTimeOutTests can be timeout - S8146240: Three nashorn files contain "GNU General Public License" header - S8146387: Test SSLSession/SessionCacheSizeTests socket accept timed out - S8146669: Test SessionTimeOutTests fails intermittently - S8146993: Several javax/management/remote/mandatory regression tests fail after JDK-8138811 - S8147994: [macosx] JScrollPane jitters up/down during trackpad scrolling on MacOS/Aqua - S8151522: Disable 8130150 and 8081778 intrinsics by default - S8151876: (tz) Support tzdata2016d - S8152098: Fix 8151522 caused test compiler/intrinsics/squaretolen/TestSquareToLen.java to fail - S8157077: 8u101 L10n resource file updates * Backports - S6260348, PR3066: GTK+ L&F JTextComponent not respecting desktop caret blink rate - S6778087, PR1061: getLocationOnScreen() always returns (0, 0) for mouse wheel events - S6961123, PR2972: setWMClass fails to null-terminate WM_CLASS string - S8008657, PR3077: JSpinner setComponentOrientation doesn't affect on text orientation - S8014212, PR2866: Robot captures black screen - S8029339, PR1061: Custom MultiResolution image support on HiDPI displays - S8031145, PR3077: Re-examine closed i18n tests to see it they can be moved to the jdk repository. - S8034856, PR3095: gcc warnings compiling src/solaris/native/sun/security/pkcs11 - S8034857, PR3095: gcc warnings compiling src/solaris/native/sun/management - S8035054, PR3095: JarFacade.c should not include ctype.h - S8035287, PR3095: gcc warnings compiling various libraries files - S8038631, PR3077: Create wrapper for awt.Robot with additional functionality - S8039279, PR3077: Move awt tests to openjdk repository - S8041561, PR3077: Inconsistent opacity behaviour between JCheckBox and JRadioButton - S8041592, PR3077: [TEST_BUG] Move 42 AWT hw/lw mixing tests to jdk - S8041915, PR3077: Move 8 awt tests to OpenJDK regression tests tree - S8043126, PR3077: move awt automated functional tests from AWT_Events/Lw and AWT_Events/AWT to OpenJDK repository - S8043131, PR3077: Move ShapedAndTranslucentWindows and GC functional AWT tests to regression tree - S8044157, PR3077: [TEST_BUG] Improve recently submitted AWT_Mixing tests - S8044172, PR3077: [TEST_BUG] Move regtests for 4523758 and AltPlusNumberKeyCombinationsTest to jdk - S8044429, PR3077: move awt automated tests for AWT_Modality to OpenJDK repository - S8044762, PR2960: com/sun/jdi/OptionTest.java test time out - S8044765, PR3077: Move functional tests AWT_SystemTray/Automated to openjdk repository - S8047180, PR3077: Move functional tests AWT_Headless/Automated to OpenJDK repository - S8047367, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 2 - S8048246, PR3077: Move AWT_DnD/Clipboard/Automated functional tests to OpenJDK - S8049226, PR2960: com/sun/jdi/OptionTest.java test times out again - S8049617, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 3 - S8049694, PR3077: Migrate functional AWT_DesktopProperties/Automated tests to OpenJDK - S8050885, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 4 - S8051440, PR3077: move tests about maximizing undecorated to OpenJDK - S8052012, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 5 - S8052408, PR3077: Move AWT_BAT functional tests to OpenJDK (3 of 3) - S8053657, PR3077: [TEST_BUG] move some 5 tests related to undecorated Frame/JFrame to JDK - S8054143, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 6 - S8054358, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 7 - S8054359, PR3077: move awt automated tests from AWT_Modality to OpenJDK repository - part 8 - S8055360, PR3077: Move the rest part of AWT ShapedAndTranslucent tests to OpenJDK - S8055664, PR3077: move 14 tests about setLocationRelativeTo to jdk - S8055836, PR3077: move awt tests from AWT_Modality to OpenJDK repository - part 9 - S8056911, PR3077: Remove internal API usage from ExtendedRobot class - S8057694, PR3077: move awt tests from AWT_Modality to OpenJDK repository - part 10 - S8058959, PR1061: closed/java/awt/event/ComponentEvent/MovedResizedTwiceTest/MovedResizedTwiceTest.java failed automatically - S8062606, PR3077: Fix a typo in java.awt.Robot class - S8063102, PR3077: Change open awt regression tests to avoid sun.awt.SunToolkit.realSync, part 1 - S8063104, PR3077: Change open awt regression tests to avoid sun.awt.SunToolkit.realSync, part 2 - S8063106, PR3077: Change open swing regression tests to avoid sun.awt.SunToolkit.realSync, part 1 - S8063107, PR3077: Change open swing regression tests to avoid sun.awt.SunToolkit.realSync, part 2 - S8064573, PR3077: [TEST_BUG] javax/swing/text/AbstractDocument/6968363/Test6968363.java is asocial pressing VK_LEFT and not releasing - S8064575, PR3077: [TEST_BUG] javax/swing/JEditorPane/6917744/bug6917744.java 100 times press keys and never releases - S8064809, PR3077: [TEST_BUG] javax/swing/JComboBox/4199622/bug4199622.java contains a lot of keyPress and not a single keyRelease - S8067441, PR3077: Some tests fails with error: cannot find symbol getSystemMnemonicKeyCodes() - S8068228, PR3077: Test closed/java/awt/Mouse/MaximizedFrameTest/MaximizedFrameTest fails with GTKLookAndFeel - S8069361, PR1061: SunGraphics2D.getDefaultTransform() does not include scale factor - S8073320, PR1061: Windows HiDPI Graphics support - S8074807, PR3077: Fix some tests unnecessary using internal API - S8076315, PR3077: move 4 manual functional swing tests to regression suite - S8078504, PR3094: Zero lacks declaration of VM_Version::initialize() - S8129822, PR3077: Define "headful" jtreg keyword - S8132123, PR1061: MultiResolutionCachedImage unnecessarily creates base image to get its size - S8133539, PR1061: [TEST_BUG] Split java/awt/image/MultiResolutionImageTest.java in two to allow restricted access - S8137571, PR1061: Linux HiDPI Graphics support - S8142406, PR1061: [TEST] MultiResolution image: need test to cover the case when @2x image is corrupted - S8145188, PR2945: No LocalVariableTable generated for the entire JDK - S8150258, PR1061: [TEST] HiDPI: create a test for multiresolution menu items icons - S8150724, PR1061: [TEST] HiDPI: create a test for multiresolution icons - S8150844, PR1061: [hidpi] [macosx] -Dsun.java2d.uiScale should be taken into account for OS X - S8151841, PR2882: Build needs additional flags to compile with GCC 6 [plus parts of 8149647 & 8032045] - S8155613, PR1061: [PIT] crash in AWT_Desktop/Automated/Exceptions/BasicTest - S8156020, PR1061: 8145547 breaks AIX and and uses RTLD_NOLOAD incorrectly - S8156128, PR1061: Tests for [AWT/Swing] Conditional support for GTK 3 on Linux - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can lead to the generation of illegal instructions (bsc#988651) - S8159244, PR3074: Partially initialized string object created by C2's string concat optimization may escape - S8159690, PR3077: [TESTBUG] Mark headful tests with @key headful. - S8160294, PR2882, PR3095: Some client libraries cannot be built with GCC 6 * Bug fixes - PR1958: GTKLookAndFeel does not honor gtk-alternative-button-order - PR2822: Feed LIBS & CFLAGS into configure rather than make to avoid re-discovery by OpenJDK configure - PR2932: Support ccache in a non-automagic manner - PR2933: Support ccache 3.2 and later - PR2964: Set system defaults based on OS - PR2974, RH1337583: PKCS#10 certificate requests now use CRLF line endings rather than system line endings - PR3078: Remove duplicated line dating back to 6788347 and 6894807 - PR3083, RH1346460: Regression in SSL debug output without an ECC provider - PR3089: Remove old memory limits patch - PR3090, RH1204159: SystemTap is heavily confused by multiple JDKs - PR3095: Fix warnings in URLClassPath.c - PR3096: Remove dead --disable-optimizations option - PR3105: Use version from hotspot.map to create tarball filename - PR3106: Handle both correctly-spelt property "enableCustomValueHandler" introduced by S8079718 and typo version - PR3108: Shenandoah patches not included in release tarball - PR3110: Update hotspot.map documentation in INSTALL * AArch64 port - S8145320, PR3078: Create unsafe_arraycopy and generic_arraycopy for AArch64 - S8148328, PR3078: aarch64: redundant lsr instructions in stub code. - S8148783, PR3078: aarch64: SEGV running SpecJBB2013 - S8148948, PR3078: aarch64: generate_copy_longs calls align() incorrectly - S8149080, PR3078: AArch64: Recognise disjoint array copy in stub code - S8149365, PR3078: aarch64: memory copy does not prefetch on backwards copy - S8149907, PR3078: aarch64: use load/store pair instructions in call_stub - S8150038, PR3078: aarch64: make use of CBZ and CBNZ when comparing narrow pointer with zero - S8150045, PR3078: arraycopy causes segfaults in SATB during garbage collection - S8150082, PR3078: aarch64: optimise small array copy - S8150229, PR3078: aarch64: pipeline class for several instructions is not set correctly - S8150313, PR3078: aarch64: optimise array copy using SIMD instructions - S8150394, PR3078: aarch64: add support for 8.1 LSE CAS instructions - S8151340, PR3078: aarch64: prefetch the destination word for write prior to ldxr/stxr loops. - S8151502, PR3078: optimize pd_disjoint_words and pd_conjoint_words - S8151775, PR3078: aarch64: add support for 8.1 LSE atomic operations - S8152537, PR3078: aarch64: Make use of CBZ and CBNZ when comparing unsigned values with zero. - S8152840, PR3078: aarch64: improve _unsafe_arraycopy stub routine - S8153713, PR3078: aarch64: improve short array clearing using store pair - S8153797, PR3078: aarch64: Add Arrays.fill stub code - S8154537, PR3078: AArch64: some integer rotate instructions are never emitted - S8154739, PR3078: AArch64: TemplateTable::fast_xaccess loads in wrong mode - S8155015, PR3078: Aarch64: bad assert in spill generation code - S8155100, PR3078: AArch64: Relax alignment requirement for byte_map_base - S8155612, PR3078: Aarch64: vector nodes need to support misaligned offset - S8155617, PR3078: aarch64: ClearArray does not use DC ZVA - S8155653, PR3078: TestVectorUnalignedOffset.java not pushed with 8155612 - S8156731, PR3078: aarch64: java/util/Arrays/Correct.java fails due to _generic_arraycopy stub routine - S8157841, PR3078: aarch64: prefetch ignores cache line size - S8157906, PR3078: aarch64: some more integer rotate instructions are never emitted - S8158913, PR3078: aarch64: SEGV running Spark terasort - S8159052, PR3078: aarch64: optimise unaligned copies in pd_disjoint_words and pd_conjoint_words - S8159063, PR3078: aarch64: optimise unaligned array copy long - PR3078: Cleanup remaining differences from aarch64/jdk8u tree - Removed patches: * compare-pointer-with-literal.patch * implicit-pointer-decl.patch * hotspot-aarch64-fix-48bit-va.patch - Fixed differently upsteam - Modified patch: * java-1_8_0-openjdk-gcc6.patch - Rediff to new context - Remove hacks to make build on ix86, since it seems they are not needed anymore - Remove special flags for gcc6, since they are handled upstream- Fix script linking /usr/share/javazi/tzdb.dat for platform where it applies (bsc#987895) - Enable SunEC for SLE12 and Leap- Fix aarch64 running with 48 bits va space (bsc#984684) * hotspot-aarch64-fix-48bit-va.patch- Added patch: * disable-doclint-by-default-patch - Disable Doclint while building javadoc by default. OpenJDK 8 adds and enables doclint by default. This catches issues in javadoc comments. It is too strict, breaks javadoc compilation and, in general, breaks the build for old code known to build with previous versions of OpenJDK. - Cycle make on i586 in order to prevent some random build errors that are not easily reproduceable and thus fixable.- Added patch: * java-1_8_0-openjdk-gcc6.patch + Fix build with gcc 6.1 - Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to avoid some crashes- Upgrade to version jdk8u91 (icedtea 3.0.1, bsc#976340) - Icedtea changes from 2.6.5 * Security fixes - S8129952, CVE-2016-0686: Ensure thread consistency - S8132051, CVE-2016-0687: Better byte behavior - S8138593, CVE-2016-0695: Make DSA more fair - S8139008: Better state table management - S8143167, CVE-2016-3425: Better buffering of XML strings - S8143945, CVE-2016-3426: Better GCM validation - S8144430, CVE-2016-3427: Improve JMX connections - S8146494: Better ligature substitution - S8146498: Better device table adjustments * Import of OpenJDK 8 u91 build 14 - S8002116: This JdbReadTwiceTest.sh gets an exit 1 - S8007890: [TESTBUG] JcmdWithNMTDisabled.java fails when invoked with NMT explicitly turned on - S8036132: Tab characters in test/com/sun/jdi files - S8038963: com/sun/jdi tests fail because cygwin's ps sometimes misses processes - S8044419: TEST_BUG: com/sun/jdi/JdbReadTwiceTest.sh fails when run under root - S8059661: Test SoftReference and OOM behavior - S8067422: Lambda method names are unnecessarily unstable - S8073735: [TEST_BUG] compiler/loopopts/CountedLoopProblem.java got OOME - S8074146: [TEST_BUG] jdb has succeded to read an unreadable file - S8130212: Thread::current() might access freed memory on Solaris - S8132890: Text Overlapping on Dot Matrix Printers - S8134297: NPE in GSSNameElement nameType check - S8134650: Xsl transformation gives different results in 8u66 - S8134828: Scrollbar thumb disappears with Nimbus L&F - S8138589: Correct limits on unlimited cryptography - S8138811: Construction of static protection domains - S8140268: Generate link to specification license for JavaDoc API documentation - S8141229: [Parfait] Null pointer dereference in cmsstrcasecmp of cmserr.c - S8143002: [Parfait] JNI exception pending in fontpath.c:1300 - S8143959: Certificates requiring blacklisting - S8146477: [TEST_BUG] ClientJSSEServerJSSE.java failing again - S8146518: Zero interpreter broken with better byte behaviour - S8146967: [TEST_BUG] javax/security/auth/SubjectDomainCombiner/Optimize.java should use 4-args ProtectionDomain constructor - S8147567: InterpreterRuntime::post_field_access not updated for boolean in JDK-8132051 - S8148446: (tz) Support tzdata2016a - S8148475: Missing SA Bytecode updates. - S8148487: PPC64: Better byte behavior - S8148522: Backout JDK-8138811 from 2016 Apr CPU repo - S8149170: Better byte behavior for native arguments - S8149367: PolicyQualifierInfo/index_Ctor JCk test fails with IOE: Invalid encoding for PolicyQualifierInfo - S8150012: Better byte behavior for reflection - S8150790: 8u75 L10n resource file translation update * Backports - S8148752, PR2943: Compiled StringBuilder code throws StringIndexOutOfBoundsException - S8154210: Zero: Better byte behaviour - S8154413: AArch64: Better byte behaviour - S4890063, PR2304, RH1214835: HPROF: default text truncated when using doe=n option - S6425769, PR2859: Allow specifying an address to bind JMX remote connector - S8000650, PR2462: unpack200.exe should check gzip crc - S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly resolves symbolic links - S8035341: Allow using a system installed libpng - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility normal behavior - S8042159: Allow using a system-installed lcms2 - S8042806: Splashscreen uses libjpeg-internal macros - S8043805: Allow using a system-installed libjpeg - S8044235: src.zip should include all sources - S8074839, PR2462: Resolve disabled warnings for libunpack and the unpack200 binary - S8074859, PR1937: Turn on warnings as error - S8087218, PR2740: Constant fold loads from final instance fields in VM anonymous classes - S8139932, PR2739: Typo in makefile changes for 8043805 [Allow using a system-installed libjpeg] - S8140483, PR2740: Atomic*FieldUpdaters final fields should be trusted - S8140620, PR2769: Find and load default.sf2 as the default soundbank on Linux - S8145096, PR2854: Undefined behaviour in HotSpot - S8145982, PR2859: JMXInterfaceBindingTest is failing intermittently - S8146015, PR2859: JMXInterfaceBindingTest is failing intermittently for IPv6 addresses - S8148351, PR2842: Only display resolved symlink for compiler, do not change path - S8150954, PR2866, RH1176206: AWT Robot not compatible with GNOME Shell * Bug fixes - PR2933: Support ccache 3.2 and later - PR2934: SunEC provider throwing KeyException with current NSS - S8041658: Use of -fdevirtualize on macroAssembler_x86.o (via -O2) with gcc 4.9.0 creates broken VM - PR94: empty install target in Makefile.am - PR729: GTKLookAndFeel should be the system look&feel on all GNU/Linux desktops - PR1275: Provide option to turn off downloading of tarballs - PR1281, RH513605: Updating/Installing OpenJDK should recreate the shared class-data archive - PR1289: Allow JARs to be optionally compressed by setting COMPRESS_JARS - PR1291: Ensure unlimited crypto policy is in place. - PR1325: Only add classes to rt-source-files.txt if actually needed - PR1341: Remove Rhino support - PR1346: Filter out -j option to make - PR1347: Update list of checked JDKs - PR1348: java -version output is broken - PR1357: Make XRender mandatory - PR1359: Check for /usr/lib64 JVMs and generic JPackage alternative - PR1364: Replace hgforest support - PR1367: Support using the system installation of LCMS - PR1368: Ensure debug data is available for all libraries and binaries without redundant files - PR1369: Remove outdated bootstrap configure tests or make them fail on error - PR1377: Forwardport javac detection / usability test from IcedTea 2.x - PR1379: Add build support for Zero AArch64 - PR1413: Undefined reference to libz during link of unpack200 - PR1741: Break PulseAudio provider out into IcedTea-Sound - PR1766: Expand architecture support - PR1774: Support GIF lib v5 - PR1774: Correct #ifdef to #if - PR1796: make fails with "computed checksum did NOT match" - PR1806: Support Debian/Ubuntu 7 & 8 OpenJDK Installs as Boot JDK - PR1812: Unable to locate HotSpot checksum when downloading - PR1813: HotSpot URL should be used with --enable-hg - PR1815: Split download/extraction rules for OpenJDK so they can run in parallel - PR1829: Support AM_MAINTAINER_MODE - PR1834, RH1022017: Report elliptic curves supported by NSS, not the SunEC library - PR1845: jstack.stp in OpenJDK8 is broken - PR1869: Avoid x86 workaround when running Zero rather than a JIT - PR1889: Allow tarball checksumming to be disabled - PR1935: HotSpot extraction needs to depend on the tarball being downloaded - PR1937: Add configure option for -Werror - PR1938: Zero broken by enforced use of -Werror - PR1942: Bug reports lack IcedTea version & distribution packaging information - PR1950: Add build support for Zero SH - PR1965, G498288: Allow builds on PaX kernels - PR1968: Move to new OpenJDK bug URL format - PR1975: SystemTap probes for the garbage collector. - PR1977: Support using the system installation of Zlib - PR1979: Support using the system installation of libjpeg - PR1980: Support using the system installation of giflib - PR1981: Support using the system installation of libpng - PR1983: Support using the system installation of NSS with the SunEC provider - PR1994: make dist broken - PR2001: Synchronise HEAD tarball paths with release branch paths - PR2066: Unset OS before running OpenJDK build - PR2095, RH1163501: 2048-bit DH upper bound too small for Fedora infrastructure - PR2126: Synchronise elliptic curves in sun.security.ec.NamedCurve with those listed by NSS - PR2127: SunEC provider crashes when built using system NSS - PR2199: Support giflib 5.1.0 - PR2212: DGifCloseFile call should check the return value, not the error code, for failure - PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc. - PR2237, RH1194378: ppc64le should report its os.arch as ppc64le so tools can detect it - PR2248: HotSpot tarball fails verification after download - PR2256: Add SystemTap tests - PR2257: clean-extract-nashorn rule is never run - PR2321: Checksum of policy JAR files changes on every build - PR2329: jamvm parallel unpack failures - PR2339: Fail early if there is no native HotSpot JIT & all other options are disabled - PR2348: Avoid following symlinks for CACAO and JamVM patches - PR2351: Split CACAO rule into configure and make stages - PR2352: Split JamVM rule into configure, make and make install stages - PR2358: Add aliases for all stamp targets - PR2362: Update HACKING & fsg.sh.in - PR2363: Remove EC source code prior to build - PR2369: SunEC provider is partially installed - PR2377: PaX mark the installed JDK so it runs on hardened systems - PR2383: Location of docs directory in install-data-local is incorrect - PR2392: Make elliptic curve removal optional - PR2400, RH1206656: Zero JVM crashes on startup when built with GCC 5 - PR2407: Fix automatic enabling of the Zero build on non-JIT architectures which don't use CACAO or JamVM - PR2408: Enable Zero when Shark is enabled - PR2409: Update Zero macro to match one in IcedTea 2.x - PR2410: Support PPC64 JIT on ppc64le - PR2411: Fix references to hotspot.map following PR2001 - PR2413: OpenJDK doesn't auto-select Zero on architectures where no server JVM is available - PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to OpenJDK build - PR2415: JVM -Xmx requirement is too high on s390 - PR2428: OpenJDK build can't handle commas in LDFLAGS - PR2429: OpenJDK build does not copy a symlinked cacerts file - PR2432: ppc64 JIT doesn't support class data sharing - PR2433: ppc64le does not support -Xshare:dump - PR2434: SystemTap support is no longer optional - PR2439: NSS PKCS11 regression - due to java.security automatic loading - PR2443: install stage fails where BUILD_ARCH_DIR != INSTALL_ARCH_DIR - PR2447: Allow greater control of Javadoc installation directory - PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec file does - PR2454: install-data-local needs to check that classes.jsa actually exists - PR2456: Installation path for hotspot_gc.stp is wrong, due to changed j2sdk-image location - PR2459: Policy JAR files should be timestamped with the date of the policy file they hold - PR2511: Reset success following calls in LayoutManager.cpp - PR2541: Allow the user to specify the cacerts file to use - PR2544: Desktop files do not allow installation from multiple versions of IcedTea - PR2547: Extend tarball checksumming option to allow the checksum to be specified - PR2631: jvm.cfg missing for ppc64le - PR2633: s390 builds still fail as BUILD_NUM_BITS is never set - PR2675: Update ppc64le autotools infrastructure following PR2237 - PR2691, G564746: ./configure is unable to compile using distcc for icedtea-3.0.0_pre06 - PR2737: Allow multiple PKCS11 library initialisation to be a non-critical error. - PR2738: java.lang.UnsatisfiedLinkError: no javalcms in java.library.path - PR2743: Remove bad AArch64 merge fragment - PR2759: LCMS library should be named javalcms, not lcms, to avoid potential conflicts with the system library - PR2766: Remove all references to GCJ - PR2767: Remove remaining rogue binaries from OpenJDK tree - PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or discard if no longer needed - PR2777: Fix MAX/MIN template usage on s390 - PR2804: test/tapset/jstaptest.pl should be executable - PR2815: Race condition in SunEC provider with system NSS - PR2825: Placement of -lfreebl matters when using bfd linker - PR2826: Provide option to disable SystemTap tests - PR2841: Parallelism issues resulting from PR2459 - PR2863: IcedTea doesn't pass through build and host triplets to OpenJDK's configure - PR2865: Handle uninstallation. - PR2869: Revert CRC fix (S8000650) backported as part of PR2462 - PR2873: Fix make distcheck. - PR2880: Add missing test directory in make check. - PR2885: Location of 'stap' executable is hard-coded - PR2888: OpenJDK should check for system cacerts database (e.g. /etc/pki/java/cacerts) - PR2899: Don't use WithSeed versions of NSS functions as they don't fully process the seed - PR2906: Support prefixed variants of GNU tools used on *BSD systems - PR2907: Replace --with-abs-install-dir with usual --prefix - PR2917: Don't pass --with-cacerts-file to build if USE_ALT_CACERTS_FILE is not set - PR2918: Makefile handles cacerts as a symlink, but the configure check doesn't - PR2920: PaX marking fails on filesystems which don't support extended attributes - PR2921: Uninstallation of docs deletes too much - Don't substitute 'j' for '-j' inside -I directives - Extend 8041658 to all files in the HotSpot build. - Remove jcheck * AArch64 port - PR1970: Imported from aarch64 jdk8 repository. - PR2853: Fix build for aarch64/zero - PR2853: Remaining miscellaneous synchronisation changes from aarch64/jdk8u - PR2853: Remove AArch64-specific code in generateOptoStub.cpp. - PR2853: Remove some AArch64-specific code in share/. - PR2853: Remove some unnecessary divergences from jdk8u. - PR2853: Revert AArch64 jvm.cfg divergence - PR2853: Revert changes to libpng source code now 8078245 is in place. - PR2922: Import latest AArch64 changes from aarch64-port/jdk8u (aarch64-jdk8u77-b03) - S8150652, PR2922: Remove unused code in AArch64 back end * JamVM - JSR 292: Invoke Dynamic - JSR 308: Type Annotations - JSR 335: Lambda Expressions - JSR 901: VM support for method parameter reflection - JEP 171: Implement fence methods in sun.misc.Unsafe - sun.misc.Unsafe: additional methods get/putAddress. - FreeClassData: adjust method count for Miranda methods - Fix invokesuper check in invokespecial opcode - Fix non-direct interpreter invokespecial super-class check - When GC'ing a native method don't try to free code - Do not free unprepared Miranda method code data - Set anonymous class protection domain - JVM_IsVMGeneratedMethodIx stub - Dummy implementation of sun.misc.Perf natives - JVM_NewMultiArray: element class may be an array - jtreg test java/lang/reflect/Array/ExceedMaxDim - OpenJDK: Fix Local/Anonymous class checks - classlibMarkThreadTerminated should return Object* - Fix race-condition in constant-pool resolution code - JSR 292: MethodHandle constant-pool refs may be resolved - JSR 292: bootstrap method args error handling - JSR 308: update to match OpenJDK changes - JSR 292: correct intrinsic cache COMPARE function - Race condition in setting up imethod table - GC: Minor performance improvement - PR2034: --enable-jamvm builds broken, missing JVM_GetTemporaryDirectory impl - PR2336: JamVM lacks JVM_FindClassFromCaller - PR2523: Add executable stack markings to callNative.S on JamVM - PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced by jdk8u40 * CACAO - PR1277: Synchronise CACAO rules between IcedTea6/7/8 where possible - PR1279: Synchronise CACAO versions between IcedTea6/7/8 where possible - PR2035: --enable-cacao builds broken, missing JVM_GetTemporaryDirectory impl. - PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on Gentoo - PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low max heap size - PR2335: CACAO lacks JVM_FindClassFromCaller - PR2347: Fix CACAO patches to apply again - PR2349: 'struct jvm_version_info' has no member named 'is_kernel_jvm' - PR2350: Update to latest CACAO - PR2354: stamps/cacao.stamp tries to touch a file in a directory which doesn't exist - PR2355: CACAO build fails to use JRE layout - PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced by jdk8u40 - PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays: Assertion `dest && result && x.any && y.any' failed - PR2908: Add missing functions for CACAO OpenJDK JVM implementation - PR2909: Install CACAO in same way as JamVM - PR2910: Add rudimentary support for OpenJDK 8 class files to CACAO - PR2916: Update CACAO drop to use the latest from cacao-staging - Removed patches: * PStack-808293.patch * aarch64-misc.patch * disable-doclint-by-default.patch * include-all-srcs.patch * link-with-as-needed.patch * memory-limits.patch * multiple-pkcs11-library-init.patch * ppc64le-8036767.patch * s390-java-opts.patch * s390-size_t.patch * system-lcms.patch * system-libjpeg.patch * system-libpng.patch * zero-dummy.patch - Fixed upstream - Added patches: * icedtea-3.0.1-sunec.patch - Adapt the nss detection to SUSE packaging of mozilla-nss * java-1_8_0-openjdk-suse-desktop-files.patch - Adapt the desktop files for SUSE needs - Modified patches: * 1015432.patch * adlc-parser.patch * compare-pointer-with-literal.patch * implicit-pointer-decl.patch * java-atk-wrapper-security.patch * ppc-zero-hotspot.patch * zero-javadoc-verbose.patch - Adapt to new directory structure- Update to upstream tag jdk8u77-b03 (bsc#972468) * CVE-2016-0636: Improve MethodHandle consistency- Added patch: * ppc64le-8036767.patch + Change archinstall for ppc64le from ppc64 to ppc64le directory.- Upgrade to upstream tag jdk8u72-b15 * Oracle Critical Patch Update of January 2016 (bsc#962743) * Using aarch64 hotspot tag aarch64-jdk8u72-b15 - Security issues fixed: * CVE-2015-7575: Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision. * CVE-2015-8126: Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. * CVE-2016-0402: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking. * CVE-2016-0448: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX. * CVE-2016-0466: Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP. * CVE-2016-0475: Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. * CVE-2016-0483: Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. * CVE-2016-0494: Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. - Modified patch: * s390-java-opts.patch + rediff to the changed context- Upgrade to upstream tag jdk8u65-b17 * Security fix release of October 21, 2015 (bsc#951376) - Security issues fixed: * CVE-2015-4734: A remote user can exploit a flaw in the Embedded JGSS component to partially access data * CVE-2015-4803: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions * CVE-2015-4805: A remote user can exploit a flaw in the Embedded Serialization component to gain elevated privileges * CVE-2015-4806: A remote user can exploit a flaw in the Java SE Embedded Libraries component to partially access and partially modify data * CVE-2015-4835: A remote user can exploit a flaw in the Embedded CORBA component to gain elevated privileges * CVE-2015-4842: A remote user can exploit a flaw in the Embedded JAXP component to partially access data * CVE-2015-4843: A remote user can exploit a flaw in the Java SE Embedded Libraries component to gain elevated privileges * CVE-2015-4844: A remote user can exploit a flaw in the Embedded 2D component to gain elevated privileges * CVE-2015-4860: A remote user can exploit a flaw in the Embedded RMI component to gain elevated privileges * CVE-2015-4872: A remote user can exploit a flaw in the JRockit Security component to partially modify data []. * CVE-2015-4881: A remote user can exploit a flaw in the Embedded CORBA component to gain elevated privileges * CVE-2015-4882: A remote user can exploit a flaw in the Embedded CORBA component to cause partial denial of service conditions * CVE-2015-4883: A remote user can exploit a flaw in the Embedded RMI component to gain elevated privileges * CVE-2015-4893: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions * CVE-2015-4902: A remote user can exploit a flaw in the Java SE Deployment component to partially modify data * CVE-2015-4903: A remote user can exploit a flaw in the Embedded RMI component to partially access data * CVE-2015-4911: A remote user can exploit a flaw in the JRockit JAXP component to cause partial denial of service conditions * CVE-2015-4810: A local user can exploit a flaw in the Java SE Deployment component to gain elevated privileges * CVE-2015-4840: A remote user can exploit a flaw in the Embedded 2D component to partially access data * CVE-2015-4868: A remote user can exploit a flaw in the Java SE Embedded Libraries component to gain elevated privileges * CVE-2015-4901: A remote user can exploit a flaw in the JavaFX component to gain elevated privileges * CVE-2015-4906: A remote user can exploit a flaw in the JavaFX component to partially access data * CVE-2015-4908: A remote user can exploit a flaw in the JavaFX component to partially access data * CVE-2015-4916: A remote user can exploit a flaw in the JavaFX component to partially access data - Modified patch: * s390-size_t.patch - Account for an additional uintptr_t <-> size_t mismatch- Upgrade to upstream tag jdk8u60-b27 * Release of JDK 8u60 - Removed patches: * hotspot-support-kernel-4.patch * cplusplus-interpreter.patch * signed-overflow.patch - Integrated upstream * system-giflib5.patch - Fixed differently upstream * applet-hole.patch - Not needed any more with recent versions of icedtea-web - Modified patches * aarch64-misc.patch - Rediff to correspond to the new context - Added bits from aarch64-port/jdk8/jdk- Add constraints file- Upgrade to upstream tag jdk8u51-b16 * Security fix release of July 15, 2015 (bsc#938248, bsc#937828) - Security issues fixed: * CVE-2015-2590: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). * CVE-2015-2597: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). * CVE-2015-2601: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JCE). * CVE-2015-2613: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JCE). * CVE-2015-2619: Vulnerability in the Java SE, JavaFX, Java SE Embedded component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2621: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JMX). * CVE-2015-2625: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). * CVE-2015-2627: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). * CVE-2015-2628: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: CORBA). * CVE-2015-2632; Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2637: Vulnerability in the Java SE, JavaFX, Java SE Embedded component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2638: Vulnerability in the Java SE, JavaFX, Java SE Embedded component of Oracle Java SE (subcomponent: 2D). * CVE-2015-2659: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). * CVE-2015-2664: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). * CVE-2015-2808: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). * CVE-2015-4000: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). * CVE-2015-4729: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). * CVE-2015-4731: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JMX). * CVE-2015-4732: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). * CVE-2015-4733: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). * CVE-2015-4736: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). * CVE-2015-4748: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: Security). * CVE-2015-4749: Vulnerability in the Java SE, JRockit, Java SE Embedded component of Oracle Java SE (subcomponent: JNDI). * CVE-2015-4760: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D).- Use priority matching to ibm-java, always 5 bigger than it- Added patch: * zero-dummy.patch - Fix crash of ZERO VM built with gcc5- Added patch: * signed-overflow.patch - fix OOM due to signed overflow shown by gcc5 build- Use the tzdb.dat from tzdata-java8 package on distributions that have it.- Added patch: * hotspot-support-kernel-4.patch * fix build on systems having kernel 4.0- Update the aarch64 tarball to the recent tip * The revision has merged changes up to jdk8u45-b14 - Apply cplusplus-interpreter.patch to the default hotspot tarball only (aarch64 tarball has the patch integrated)- Upgrade to upstream tag jdk8u45-b14 * Security fix release of April 14, 2015- Build the accelerated aarch64 hotspot anew- Update the aarch64 tarball to a recent tip of the jdk8 repository- jdk8u40-b25 became officially jdk8u40 release * Modify the package version- Modified patch * system-libjpeg.patch - correct the case mismatch that prevented JPEG decoder from working correctly (bnc#905950)- Upgrade to upstream tag jdk8u40-b25- Upgrade to upstream tag jdk8u40-b24 - Upgrade the aarch64 hotspot to new tip * sync-ed with jdk8u40-b23 - Removed patch * aarch64-b12tob22.patch - Not needed since the aarch64 tarball is on a recent enough tag - Modified patch * s390-size_t.patch - Adapt to hotspot changes- Removed patch * aarch64-b12tob21.patch - replaced by one that forward-ports to b22 - Added patch * aarch64-b12tob22.patch - forward-port the aarch64 hotspot to b22.- Modify patch: system-giflib5.patch * Fix build with giflib 5.1.x- Upgrade to upstream tag jdk8u40-b22 * Security update from 2015-01-20- Upgrade to upstream tag jdk8u40-b21 - Removed patch: * aarch64-b12tob20.patch - replaced by new version - Added patch: * aarch64-b12tob21.patch - port the relevant changes between builds b12 and b21 to the aarch64 tarball that is on the upstream tag of jdk8u40-b12- Upgrade to upstream tag jdk8u40-b20 * Switch to the jdk8u40 stabilisation branch that will result in the jdk8u40 release - Removed patch: * hotspot-build-j-directive.patch - integrated in the jdk8u40-b20 version of hotspot - Added patches: * aarch64-b12tob20.patch - port the relevant changes between builds b12 and b20 to the aarch64 tarball that is on the upstream tag of jdk8u40-b12 * cplusplus-interpreter.patch - fix a build of C++ interpreter that is used with Zero virtual machine.- zero-javadoc-verbose.patch: Avoid triggering inactivity timeout while generating javadoc in zero VM- Require version of tzdata-java compatible with this version of Java.- Define bits to %__isa_bits if defined- Modified patches: * s390-size_t.patch - rediff and drop unnecessary chunks * s390-java-opts.patch - modify to correspond to the changed context- Put manpage alternative for policy-tool to the right package- Upgrade to upstream tag jdk8u40-b12 * Unstable snapshot in view of jdk8u40 release * aarch64 hotspot merged to the level of jdk8u40-b12 - Remove unneeded aarch64-jdk8u40-b09_b10.patch: * the aarch64 hotspot merge contains all the changes- Update config.sub and config.guess to the recent master of http://git.savannah.gnu.org/cgit/config.git- Upgrade to upstream tag jdk8u40-b10 * Unstable snapshot in view of jdk8u40 release * Contains security fixes from 14 october 2014 - Add aarch64-jdk8u40-b09_b10.patch * Manually upgrade the aarch64 hotspot tarball with the changes between b09 and b10- Allow building for SLE11 * Conditionalize BuildRequires * Conditionalize cxxflags not understood by gcc 4.3 * Conditionalize javadoc noarch build for distributions that understand the per-package BuildArch - Try to make the jre-32 and jre-64 provides more automatic - Disable brp-check-bytecode-version during install * java8 will have bytecode version 8 in its jars/bin/sh/bin/shs390zp38 1709673027  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~1.8.0.402-150000.3.88.11.8.0.4021.8.0.402-150000.3.88.11.8.0.402-150000.3.88.11.8.0.402-150000.3.88.11.8.01.8.0.402-150000.3.88.11.8.0.4021.8.0.4024.21.8.0.4021.8.0.4021.8.0.4021.8.0.4021.8.0.4021.8.0.402-150000.3.88.11.8.0.402-150000.3.88.11.8.01.8.0.402-150000.3.88.11.8.0.402      jvmjvm-exportsjava-1.8.0-openjdk-1.8.0jaas-1.8.0.402.jarjaas-1.8.0.jarjaas.jarjce-1.8.0.402.jarjce-1.8.0.jarjce.jarjdbc-stdext-1.8.0.402.jarjdbc-stdext-1.8.0.jarjdbc-stdext-3.0.jarjdbc-stdext.jarjndi-1.8.0.402.jarjndi-1.8.0.jarjndi-cos-1.8.0.402.jarjndi-cos-1.8.0.jarjndi-cos.jarjndi-ldap-1.8.0.402.jarjndi-ldap-1.8.0.jarjndi-ldap.jarjndi-rmi-1.8.0.402.jarjndi-rmi-1.8.0.jarjndi-rmi.jarjndi.jarjsse-1.8.0.402.jarjsse-1.8.0.jarjsse.jarsasl-1.8.0.402.jarsasl-1.8.0.jarsasl.jarjre-1.8.0-openjdkjvm-privatejava-1.8.0-openjdkjcevanillajava-1.8.0-openjdk-1.8.0jrebinjavajjskeytoolorbdpack200policytoolrmidrmiregistryservertooltnameservunpack200libcalendars.propertiescharsets.jarclasslistcmmCIEXYZ.pfGRAY.pfLINEAR_RGB.pfPYCC.pfsRGB.pfcontent-types.propertiescurrency.datadesktopjconsole.desktoppolicytool.desktopextcldrdata.jardnsns.jarjaccess.jarlocaledata.jarmeta-indexnashorn.jarsunec.jarsunjce_provider.jarsunpkcs11.jarzipfs.jarflavormap.propertieshijrah-config-umalqura.propertiesimagescursorscursors.propertiesinvalid32x32.gifmotif_CopyDrop32x32.gifmotif_CopyNoDrop32x32.gifmotif_LinkDrop32x32.gifmotif_LinkNoDrop32x32.gifmotif_MoveDrop32x32.gifmotif_MoveNoDrop32x32.gifjce.jarjexecjsse.jarjvm.hprof.txtlogging.propertiesmanagementmanagement-agent.jarjmxremote.accessjmxremote.password.templatemanagement.propertiessnmp.acl.templatemeta-indexnet.propertiespsfont.properties.japsfontj2d.propertiesresources.jarrt.jars390xjlilibjli.sojvm.cfglibattach.solibawt.solibawt_headless.solibdt_socket.solibfontmanager.solibhprof.solibinstrument.solibj2gss.solibj2krb5.solibj2pcsc.solibj2pkcs11.solibj2sctp.solibjaas_unix.solibjava.solibjava_crw_demo.solibjavajpeg.solibjavalcms.solibjdwp.solibjsdt.solibjsig.solibjsound.solibmanagement.solibmlib_image.solibnet.solibnio.solibnpt.solibsunec.solibsystemconf.solibunpack.solibverify.solibzip.soserverXusage.txtlibjvm.sosecurityblacklisted.certsjava.policyjava.securitynss.cfgnss.fips.cfgpolicylimitedUS_export_policy.jarlocal_policy.jarunlimitedUS_export_policy.jarlocal_policy.jarsound.propertiestz.propertiestzdb.datjre-1.8.0-openjdkjava-1_8_0-openjdk-headlessASSEMBLY_EXCEPTIONTHIRD_PARTY_READMEjava-1_8_0-openjdk-headlessLICENSEjava-java-1.8.0-openjdk.1.gzjjs-java-1.8.0-openjdk.1.gzkeytool-java-1.8.0-openjdk.1.gzorbd-java-1.8.0-openjdk.1.gzpack200-java-1.8.0-openjdk.1.gzpolicytool-java-1.8.0-openjdk.1.gzrmid-java-1.8.0-openjdk.1.gzrmiregistry-java-1.8.0-openjdk.1.gzservertool-java-1.8.0-openjdk.1.gztnameserv-java-1.8.0-openjdk.1.gzunpack200-java-1.8.0-openjdk.1.gz/usr/lib64//usr/lib64/jvm-exports//usr/lib64/jvm-exports/java-1.8.0-openjdk-1.8.0//usr/lib64/jvm-private//usr/lib64/jvm-private/java-1.8.0-openjdk//usr/lib64/jvm-private/java-1.8.0-openjdk/jce//usr/lib64/jvm//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/bin//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/cmm//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/desktop//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/ext//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/images//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/images/cursors//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/management//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/s390x//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/s390x/jli//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/s390x/server//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/security//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/security/policy//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/security/policy/limited//usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/security/policy/unlimited//usr/share/doc/packages//usr/share/doc/packages/java-1_8_0-openjdk-headless//usr/share/licenses//usr/share/licenses/java-1_8_0-openjdk-headless//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:32871/SUSE_SLE-15_Update/20f4fd44862c4a9dc1be9aa2026e44e6-java-1_8_0-openjdk.SUSE_SLE-15_Updatedrpmxz5s390x-suse-linux          !"#$%&'()*+,-./012 3 444  5 67666666666directoryELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=e46d8cc969fa8cf861139062556c1cdc0f11812f, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=a91ef84cefcf2d6fd800cc7c61a6c8e0afa7372c, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=4edd2998810a62ae7931ef4f3723a5232708014b, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=ffa91057f607c7ff28112bfd3757a9725822c4f3, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=def8096de9e29a2a931aeb9abfd11c47dfd3adc4, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=936832f43c3c8c5cb4f420c3e8924f161f5c866b, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=6e591d34fdce3132f90772b3c51a4335fbca72f7, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=4df7ae0ec21dbceda171a47d6826baf248a8750c, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=4968289cab694ff938e76fc93b9cc714dbe944ab, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=57441bf5ff6722934b2de596adf7951a848e258c, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=31e71d9c6b7b2327cff3a255e7edda9eef6cc4c2, for GNU/Linux 3.2.0, strippedASCII textgzip ERROR: Stdin has more than one entry--rest ignored (Zip archive data, at least v2.0 to extract Java archive data (JAR))GIF image data, version 89a, 32 x 32GIF image data, version 89a, 31 x 32ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=834c4e22d1af99e4ad85c292fdb7e43f278fc97b, for GNU/Linux 3.2.0, strippedAlgol 68 source, ASCII textELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=741624aa6ea007f2f641f1cf741dce83226951cc, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=3964ae17ab3473521d914dc1a6e4bd0616066d17, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4bd2d1be7f8f5994ef97d2696644733344324d84, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=858498ae1006e6ddaffdc33f603791f92bfc7b64, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d4352d2703e6a749d6ef8de27a593a3fb68776a8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=a491553e5c97bee5ed53664e85a6e962855c0beb, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=7821239cfbc09f73192c99bd524805d594379344, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b2ff35900cfd750733ae1f979c2fe3aea28ca3f7, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=70e7dd59b00d2919cf8831cd1b1e3df2d82e0714, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=30079d28b1d50bb3a181c9bdb8eb301df8f6ae03, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca26fb11d473038b6316ee29ee437f49a4c2c6ea, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=1981a11b5e54b20abc05075bab5c89402a5119d9, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=fafa097d57a5599931832cc0d1773d2f35634118, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=666a18e9e2420b7e1c0bccd2ec2f102b0323a639, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=336be4552c95f74f29f345a32c19d9b1f904002f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=79cb9342d12b1e6ff4ef349d53e8d3967fd98c25, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=149a6792ed5e390ed233b9177438e364717f80f6, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c804044ad013b082181de543432adfce6173c6d2, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b43124599561fc9dd704e8179d9c6feb89d84f10, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=b825e6e6b8efb906a2a12ee73117202cd78dc956, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=771df1a0bd609384b4216dba88197e15b1bcefba, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=f7cda1a818bd6df2e30c43506a59c7dad7ee5790, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=4059b23d806415699ef172fe691e3985fb615cc5, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=32444ba88796e8f07d0a7c7b4a9dad1981f1e524, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0f7a461315a2845fb2f25e2cd6ce4060ebb28816, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0f6662480924d676d6e81ff893735bc1b4bd5f0a, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=dbf81b21421ac72e82a60af6c0f188b3fa9078ab, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=63663f2381d3647d6981ebc8cb1ccb7f3143fb51, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=d095dbaccd34b2e550885d57aadced45445a326f, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=eb44585322ec61c23357065594f8cc4e552b0ef8, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=ae1bb43eac435ee359e1e9d5597b88fc44a87aee, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=0a273efec944ec49a92540e97b1f1d098b439b76, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=c06e4c294d558448d4a4c01b0214523dad0387b0, not strippedgzip ERROR: Stdin has more than one entry--rest ignored (Zip archive data, at least v1.0 to extract Zip archive data, at least v1.0 to extract)UTF-8 Unicode texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)  $(.2>IS]ev%*38DMX        RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRPMR R RRR6R R RRP6P5RR+R R RR R6RRR*PPRRR R R RRRRPRR$RR RR#RRRPPRRR RRRRRPPR+R R RR*RPPRRR RR$R2R3RRRR1RR#RRPPRR R RR RRP PRR R RRRP"P!RR RRRP#R!RR RR RP%P$R RR)RP'P&RR RRRP)P(RR0R(R+R&R R RR'R%R*R/RRP*R RRP,P+RR5R R R RRRR4RRP.P-R RRP0P/RRR RRRRRP2P1RR RRRR"RP4P3RR RR R RRRP8P7RR RRRP9RR R RRRP;P:RRP?P>RRR R RRRRPAP@R$R RR#RPCPBRRRR RR+RRR*RRPEPDRR+R&RR R R RRRR%R*RRPGPFR RRPIPHR RR R R3R1RPKPJR RRPMPLRRR3R R RRR1RRPOPNR RR RRRRPQPPR R RRRRRR6RP=Pχ# bnc#781690#c11: don't trust user defined JAVA_HOME and use the current VM # XXX: this might conflict between various versions of openjdk export JAVA_HOME=/usr/lib64/jvm/jre-1.8.0-openjdk # check if the java-cacerts is a valid keystore (bnc#781690) if [ X"`/usr/bin/file --mime-type -b /var/lib/ca-certificates/java-cacerts`" \ != "Xapplication/x-java-keystore;" ]; then /usr/sbin/update-ca-certificates fi # remove the default empty cacert file, if it's installed if [ 0`stat -c "%s" /usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/security/cacerts 2>/dev/null` = "032" ] ; then rm -f /usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/security/cacerts fi # if cacerts does exists, neither does not contain/point to a # valid keystore (bnc#781690) ... if [ X"`/usr/bin/file --mime-type -b -L /usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/security/cacerts`" \ != "Xapplication/x-java-keystore;" ]; then # bnc#727223 rm -f /usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/security/cacerts ln -s /var/lib/ca-certificates/java-cacerts /usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/security/cacerts fi/bin/shtzdata-java8utf-8f1b1caab2908cd078d660ca52e30feb3123016f403142f61300c980a4774ced7?7zXZ !t/]"k%щǠ=7Fǟo tDX&}{0@UM?CtU) " %wz}t[\V#Hs*.\xHk-e Y .+bq•]@+d 8f%`O/,_R$-m滾OFꋾ Rκ7O eM=70]18w`'=}&y-H1wGk[cA-õ&Y>z'β[qW[X~'m\|hs+_ `J1ƴ;v* 8R͇ZR% 84!\aS^ol#%albY8X' e:vz!,x_}ҪsvvDK{%ݼ 'SrM$靖N'%zcKrݏoו{u|T>suEN_.Eōh!VpQ҈to%\x@BA \#9{ rq1ϢNx>ĭ<,pGtmz_1)_B ?ZI ܨnb' ژ^y5opl*^?i1` !jXjY&mf/Σ>)n]Vz.2n_'\DKI= Rx2jēpr$0M!H#o Tġ`r׹0"`V1͆=؏5Aj'"T'bν| XWW*As i f$ | 'xvR'7feyM3-!wy%>r-tlj`Sf^z‘4?ՃN|Ԩ~k2tIVp&7GG5YRޞIֶ]C왭Ng9YEesYѓv I!מn)NY#3Zi׉OڑnRGƛ|u.:s2` d}*uY/)/ݾƍ^>4Qv۲(T0މeyVlmPT azXQ% ]d ԓšj/:+=O՗AF6l-{RZf&kGm BTЎdu=GDJ݁47h ,n1.C ^/F9 gqx ܅E k/F)0#|*>_:CLjq 5}7HW}:wdq/;A1/N3L|lk9UQ_Dw((9ݛ޵pr6o| aT 5-{xm U8G{0?gȍj$PFK3^v;ݣN7 S~~sR_bX M!nIR^o}kw[^Uh=@ٺ4l:ra )k0'd.X9'>mK]n$W$}ԩI iRxJ_ !@LNK"q9BsI ;b%u˪\q؍]Fbx)? o7|+~i-/[=ۙcP{zEr%!5* jlgO:jCe:WG{*ћ߯aкHq?(qJ2 Ld*jS8PxZe@:PoQR?@I4y튤p+jigbXv-.Q=s[Vf߉V o<γ~$DXϻAmuπEik.,PO݊:4u;hAϛs!AhOʉhĮs ռѰjݳ+ULGF/S)- Z3ʰ@/*"0twI~]$Em3njO_CN`oWJc4E hTItKMnn*)%p~bKJ%Z3<+WlLT?{甩fx)s+ߵ"q\njS ݋ycDH^ȨʎUF%(Y@A9u˂挀Dv9([jWʯJx ěR ޛ=Af495:@qlnwiGi?|[^N"naI=zJnvGmw_5X!$uEw@&i߄)O1F[VlagR /n>JC>+k $Oz5ks62?2%=iDMCtλ:/?ªSl|23LkQP[i9ynT밋vlri9[._=$[ "y:AA8}ёS?bc3f:`g:nETܟZ>u!CnJh> y@2|Ae!l$<AtEbh'IJW Z\l> 4$TCZ>jѭhŵ91//B<}\}ݪrG](BfFynpNx\CQhR O?y%,Qa\pVa㑸Ĉ3K6p,\)Jm*˺Wb*ڭf8XDu;F8RbY0!wcSF{UFM>$"B)6I-O PYG=?<_Ҳ RNǺ\S Txt(L@&7aatAl\;T41I<).GzĶج퓎@ @O#~t8pBB8Ɂ&4wk:4޻?K3:OԏtvNw2¤uֱ%̣sBܷPX1(ֽ.I@9yNRla,|aޓ{`L7g8j#6-e3D/s.R,Y\$# z=-t%.|M=zVN_{ H  >ܧ#=_CZi&a j%qHa}tWD`G jmeV[ ?WO -i S>,UE;7 d݌_pWqfY0?3K5y6@Q8go$7}0U yfXH9X,ڦ}v-qz B'qȼL5Y mv[g+kAGc3a)XXꦧ˼߂"h RKXPֻ3Ynˍ 3jsz ɰh}1bTZ {4;Ӣϣ~ޞejj(P$ i#F䨥?iMdn es0shE;c|t93+x.#(LJ:.ı"%6Ƌ6”LRߏM]tʿ3Db߬w@Ӧm֤V2..P.֛D^cU5_]VaalKdOo܁4s-]xm4Jf=h#ǍYdmٛ,V7̗}U% At*=R*eI!+=Gznk)k6ܭa,gu3˦s|/9s>@}4DZ:9sd,:h)']A0.csw8nX/6l_O+)q~X7 yރ'Q}I:i12Aµ35>S [ߢd  jrq54WڼוZhXĝ7Mnк )]J:6ՔŤxzA鴻b = ]xw ٩ҽNHT(|{aJg,B8;Ve@yއh'LoC0k3D1H d[c~WVA:m}s g75h8n)e% ']V| 󻱵|<S-Z<=k| Fo< = 0aK̅땂(6#܍ 2% ' +/>K. vz$Jr3>J3^j~-}z_#aGS* MN|[ $g;1nftD 'k GdIxoH;.菲c:s^&DcHcIJ4N)pGdC Au7o=,Vg^20zX΋; d^B^d5'dd-+M0e( ?LSI7> I gDچI/.;7yJޤq\6.}|\6o)) w X60x~άU=&]5?B$Z=@! '\fS7`r`ljpmXxB$: noBO1 ND/J_BWA;0exxK-IZ狢Aش@nhu/p=yU'+ƊB:1`Ģ.{4}I}VԵA'@O$@XJ em)ZShhYъƔ|: ~N38ïC/O/X\>ϱ67LYaYg M0҉v˨b̭Kz0;YQ~yq̋-(tXMj$#_,68Bl juz[0̧~ N1he q {qқ!뎇̰ vfʊSH8@k”| QN>aTx5}7Ֆ=##(#kmCĈ塵ަik" ɜ֠9X-Z6wydGZ.u$+QT=MQ4/ rMZ|B2߁w&wȎ=$>B'eDž@ܰ81P5W(*E{752gV!sX>ځ X"# `r_Ekzo O`cR@qۆ_Ժ Z;]9L.Z2^7Py'~ų3R턔CZ`>?4$c ׶Z;1p/fEwi ~ hz ]rHHu!-ƬpipP%/h BrbT g&xj9! .͜V̚f*HAtk9]P?1o{B1Pi(U2^  GJysrYFmHtonz midVTyHⰼ8~c TbrA*/Ej71߁Ny D.ita4Q| 5F/#SRUtu/{+钫zQǚ xG3?CE  }Dw:Z'yKOYG!$-ˆc Z!G &78?U&7,N E0!ѹLu8e֜(y2C%=6Q?RXŸ[\q?]o^Is8p/al <Dz|0y}J: G3bR-tCI3KɥkyqQdk3i/8`ތ`@$c Ft9G9K`5qm{)6G$<)ҿ}2(hn.3i<2{:Zxy~05?[s7o %Zptt,_ Z0=c[%qy̎hֻVc2 ̞VJe7֊bVHR֌wslo)E1d;sr%+нé0x uWQ^v4X"+Gى?ԛXc3mB]UUK\A~n$MW[w;P3~13P%ݬ+SEӣZ[&w/@Tk}Yh! 1Vnma&l57 k5= Xl` _8c訶mNnK,|%5?E/d{B=S̀ٵV̭CxOB|!mtpk/@Լ#/Ϳgj_쾇.-lk Hà9͊RQ$VZ: -8;n`KͲ5g+ 'jqnc)]_gH 7Ӹi-5V#p|뺘8*oO2sLf\ WH|ŏm ђii2 JoIV:ɐl~]oTp ɎeJTwR8ךKX?- 9[:i& .:4y.RyD8=IɈ?O궁Pռz]UG ۻ~vɖۼJ/~q u7TWS9{ئRCBlt|IŴ.oR}sY:ujJ99{{$T˘%,Kj%h$@SBm IGo"%=LEP֯`W$HeVWs9z)NYZ,v(=dW)1-&G,xW O10e "6*x0?"2C*Tb+A>!(c`Y+0+8蒇lm3;+H8 Ꮮ Q[??& PX6d:PHpA3"$7-Hp5 ]IiBmMq(sqFG"/p;04~0Pu-gSG,k>"nG[r'Tl7ׅ2+lΗdvP FjΧ&٫۽v~vh{yfYz0Ƥ'EN-XKeV6)*#I }jK0!XJ/aQ /IdE*{#`_/Ꮅ+;:VݛQm:W"qG9.9jyq6UJcM#1̪m!OKBV$$^Q>5m0뉸[SX$IS(HKFLZA^6 `J큖ީ(-r\nN*e%$-M=%Ȝl˾ , Fa`toU0n?|}u$9"XyiH=~t>hk+-N5DY<ȪZ+O% a7MȡWi4QL'`wo8wmDŽhl oj-[E_)yiw9mMf$XNIS7A/@آ3R U:!3EKM7vn[s&˺!H$_<5u8mV<bz`ho>,A^/$ltBÈ~4R On?;=/ 1(DŽYCl s8Q8==lDgdjF ϠwlmyVpmh}Ev5/ЖA4uo.>ja5c@\HEHX!6pNr6 krlx up21[s] ߼@:[ǨSr]x +oV1zGfcs Ǥy<*(Usі[M{ւZhix !0U3Wϱͥ>X d@?[o,oO B2?C7w}Q9|T"7eS2Kd0,,37{g7i]}[\uob6J71j۾X&B/Ø4JQC(7g-^mZrM@Pk/Q"+1V>ꆠSISh@;,޾< 9<;EEW>{)3L@\50Ph@& OԡSł]LAﴦŠN99ZwBU)pq> =4؎PM$,f p)sT~( R,3@.Hz֝QQZJ#K(SV|< (\ 6dzR4]m`MG3N#zj?hy 0Rs%$^d@&s{ SXpJu-,É!Q.%jzkZF* 8 +=-Njz4oiPJehVR|k\SC_%9Cb! @wl]3]Gm7s { |}/PuUnt(Jxj mND>vqJ jSkMN iaqF: P{Хê6TWs[g!tb0oFeBK+W8ˍkEZzm# ]u 1 DyY-Px 5XWƀc-<7Wgqٶn,D)hVjg6rMbZ'`Tj>\6j;F۩IrG2]&^/t@ӣ.iϒ=1ԙ!2gj\`գw㽭#F8%o,#QbqKoW)}ߙp$-U+=b$5%syVm u3&hͯ~Z!I[A,yDTк\p߇ d<\ ?BXjOޞ&O4\>C.⼝pcFS +*JwώLRP >7H@S Dl4D!? ꁖdFWbPתCI?|6\?ߔN*Nm1 IfS =oAUj#65GxlK.ՏG{]xl['/İ{}l BE }SZFJ5|ximbMjoLJwũA4CFj[xLwUg3&)!v5r_\kOo2F6\GNs(".t|%3_:$ԋk,$_;(W+MuDc[CӀO(|6U`gY2;5=<Š>y-K؜ӗ xMZZHu0I%şgNgWO#k]#cn6GD%U&vq6Rh%rNUfDcpPl >qmT_ c}AI^1nc}O-0}K WEЕznҾwB.A,mToh|)*D\:G{0*E>T=ʁG}G?+5yr̭2xw}}s~H'ҕgTmҡ=+jm_62 Lo$A\Se$HNa /40/P**?="#zxa.ndH BGlLLAs҆αZq]IӲGXKW׎{Q:Kw;PREPw P^rWna?*GAڄǀH,s].XSWʀ-߾.7 Z! .9\LEsT`qOs q3YKUB &[mZa+T`aiJ7qwfnBٳI@^V^ $uXE(&f4M*s@C{N';-O ȑ"|<(X#OC9 t 7d.Jbz&]ʌ'TA`3B0WI )͈W$9|g ^:B}?WkWYVAh]7ߊ8, W5 Mj Y_CL` eDh۽vmX 5gG|%p`I*k0dQ>G&a-h tqFi_ +1v-^YZ$U@I6tN\γ)PH?3_;< M0ښuHd+WK40"q\ |K\I._e{,_&ir9R à@:7=Ug>#?.?F@{9k s!`6B$ٸ7|rɮRu t?FHƀ%Wyu- 5<๏G&JN@s'<}61Xu)>BÂfԓ= n1(2tZ]>i9äRx*Pif b\ åPø1jϴ23אdb*t',EP(ZD^h/a J<&;"\;opTZ\i(#[Z!iUnq^Ru?k91^^ 9w&!f'StE-jG>ƽ4;gX.p= 9H9s78%缭GVPN(PY5b-7(NVnUM&)!Q)ޘ|'W}%$,}Atv> ޻j~Do7o3:ӵ}F#X]6$)<+S; "t'n+ mPG?E܋T(:0BA$v ;:;^2eoU*¤6IU]5KӁWIPN;Y%Xh;]*,Ȓn47A+PH֞1y0O3IݙbO6co"l vrGŽÉvthnu6@Gz0 :`Y=S&d89Xd-6T򲬙BĚ/C@9g 2z7;l$,ljC"PPz9<Ǚ&'sKvz-^%S1$G7%YS%HH VmU\m?+K,Ur܂\`wa?.OíK <<"SeFv˻\5٧p9#{40,=+HI4(8]u3஧δ5dJf"-/TkqES8/g~ntF/oD%tK;ltCDKa#HWRX#$\ҒQCF@JگV?fP*ca83akGRiUA #ˏIX[  Q`xF;ސnK.ɛt4]WO) xLէac/3@%$RF^%eҊ5gKoS9fΑ,͊J2/uDu;'j᝹o+b"[B%XrӚc%i6ĐzwXP gwQ"7TODʑC|sdaxHM^R뛨_>/sh&[B qmԔF=>򞵶۰7&74})]n $~ڒGnI|z.LYGmEgPY-C[/rBxz~r%>qx"=~j!ږi%o$xFÏW74[U$`;(HtVB0~pT.#a;,=j`d}>MUq%D ]TLMc缏&# o?j0 '坢@1_S+Z|B 7a^렮5<0W% *դMސJP32:|-;|4Y.FVy:$:Ί:M/VWp-|jkhks61]B@;{h dp.O׫t5X;_񶄟gɯ;6cЦ Wmm!]|jK? )VfV!>FVF\qg.B&9yff- _RH .:vFXwL%|f́t=m{lلpѻtL [7 =l>iaC2;Pjl";C jO aNy阩ȥhC=a{ |źkU+5r'Iʀz;rgϣa}5XAhT_q)It ZMﵪ`M"Si37i`l} yc$>q$T bE nbux1Bm3hN 3BFNH<-+۴M1p(ow&6"h*-WY&a{2d 6VoQD:3L-檾Tb}"\}I6d^~LenEkUacIa98zmږs*H,Bx yY&x!zmƜh&B&}"V^ZqdI&>4򘼪ZBX4ϰJb¼o6)iܡ"0 9>oo%-%':XcD3c`0.}H鉐~R&Q,R"=evoǪ 8K5o<%cB] ]`pO @/gѱ x!1M[V\PhJ@-Ns?&.Dw} I PR2JW=tK*ۈJEbڈ6nn60_D:5Pd<:xw ry$o &V9SM If}K" yV_T[VB訥~q5jF*3#Kq54tՍف9ؘOb<|y-,o?:IDXO Kc1n&ݰp5G%/)SBnfp!:FiFxOeLO<[-QmgWC$*B?<:͊ xRa:ɧ5ͬC Hӕ]*7 FtDwgfpz7-1H+ڲW!/ȍiSWx a5>#ZBz4˝9ҝn%fzkA3!l ո:=C>eݑAC.c!tϦa R* v T3z<.u|T*Ѳ;eĈ-5jB18%n ZT-2#xBmO^j^rrSq,sǑWu:ITU:@l#mAFPJ ZT{3"%Ѽ P}GQW r;{iF[+NNH]JYSYË<9Uе!eǟ o6Q ?}<>Oc4H SrW %P`į~g+&yvD sԓRAꨕ!L] $5$o {Jy82:&0>dLu zlzghȊ8RR6@8.iP?U oψt٭/YWϱ~OAh΃[D)kw9.̘yVřVɐrZW#WyJu:(oj4Gָb ܃-ׂ6 It//!Wlf=5%KaA# Z%+Ft}U=4 ='PbY mXwpYx;ߪ= n0e%=ܢ;>(I`qޥډl&ZlcyN9W`z~Xi2͹beVu:Iǡ??"{8K[G1: ^LR,W(/u_VV#K'3ʭ] ~'"I۴R}ڥMd-{jv!8m4*s?kuU.-O=w!L,t1Q9T*\8xS͎$d3#QKIJ{lbk%`}Am5 grƟ%szehՎnM2"s-J\"_l2 ."$uBo͵0]X3`QsQ7{\e:qW$Oӷ>p`PN/j2d1Lt&0 7ClW!?Wst0kXX8ZrW5R4 swC$A,#b%4>w8 z @.5 ؃(zO,Џ;g#s7* i%UJ%BA4JʔNNalp=8-[yW!,P)pIP79IѾRhn` |G)I0"76F (lni!n`VoeYa/BPU/,R%-/rwQh51 "QViӆ\Uc0.@ރZ]wnBիi)4 ԍo_zlpOv60w]ϲɹSP+輘>t)טht}i/[BF%]akxXE0fcY0).A_9ixx0yZ?MMG\s`"IDn;砱Wy?+K,D Z" 9IK\hҶ.s45xA¼8RF<߇N[x_$ $"-Wb :ipH2c6v(rݤi8k)U'49ԫ%MXJYه8 '6:]4_?S7j6Ne3(3VaϙWq뻎i$/ m}*N!nTgĶ% W KҊ˓q1?tqiRB%oD3v0H>TbJ%6Кq7j]]7 7;C1!Gtiޒ}N$O/ ZkIZMsrh5V8}X2흰ԭu69lKUh`IUk8/ hrlBRB\εaw^:nC7j9hA)u nV`mdv%a1hOgtcT`lf>z4H6X]87zvLkXOBB"/ W/U€ZȘ /ͬP17^@ J.L*vBƯCdeg\?Kr"9Tj)yиΤX*JOf0@Dz/xO>|jjpx5,erd~4+ 9!M<ѵIK @JW,C-k]x(nFs._:r$Sby `}d<,aA(clF꒥Ԫs^h1:-^ fN_M?dtF3H'$Cm½)+ !bo)4J%n^fBS51 ]8\jQvD|K8C(kY- bDe Dm"o~ebYS̄Úc7"%j2"%U]c1[/;R!O^p:q!gb$)S23~E?C9`8ǠY *HݔTOv %f,?АS9e'Ѱ J&#RJw'fQvtX#(gg {7~AM3ix!p4'؇g94qtmi-yV~U@qt"e+Q#, B'Z* _ў )hmSJnP61z6f&WU뭤 9ر/i'p:&Am:Ky]I{M睐i e2 2{ɂވ%} N.8<4u7q5/5~gT3j*eoY=Wa5}Hs+DK1ךwj OM*|\osk$yaZ<+>6\gY;ë Ge:M%[dG>V+", nc i\5Aka]?( rFG-ݛCVl("GT#uT Poy^ Lu"||gT֝<7<* W ?,~yH 2ah۞d,J["ROK|/p9RƠ̴AQ4@9L->9hǪV9]wJ2S~^i[z#(^ȱ3Dm!d;s2)'H߬Ϊ?Q:P P_j[큷m{d팴&"B?;.2h'pm('̲\!Bf"֥Mܨ~OѢHBk6%ep& 7uZCseQ_St\^^!+u"?oh,Hi(xMBwrLJ&!ގcfs}mzK"O"&}fb,geQ+<Hݍ3_cP+>Ip.Q"k|su}B:&rO! ^˟7ڔ9_ڈu]+G}GTv:ƒ^˄ d?mbP e7>ࠝc#+BfrRvς oVNJL)r\i5 IF7QfM/G0kl)ϫ$\et fTHgݸQ|ͯZn3(t*RcMZ<7*q=D jdn{;cOd@CZ;mJٿ _U@هw>b!!◄l0%~(@E*%{;8Ğn{^3~ "h;[ `쎇/IZ6 KL'!ybϧhHVO5j.1 ƽ?]Wʘ\r^| =QWl #̱/~s%M1ݮ(G%qQ ڲ%yx [u`.@0T2*]3059R; cpg^1hG\~ҽ/Z >Kp\/syETp ~- d&o5峪eBcw.(HS;D , ʠ<"ho2ŒK%80X(@b ^xdd<#QT3q߯qQ ͒FC$4[4̈FCÚb#(zHa6cˣMQ<0eS_Q+"B,$ Nj (b0'eKmg t`g5^AQ7 z˹n <|=p7q.J.wEVKϷq$J ]h `3 _FrJ.Dl֩ήQ4R?QkR;c&z-䪻KL_-؉p {bX4*ДW EIp '<;cSqdkY#Vձc' }aC$󁥋G dYM$^Ãݟ԰bM<2Pvn_7 ,׃ކdnVk5iY>2r~Н`xG<,BT)=RttPIX#{mrp_N5fxתRݻ#Ow!ܟխvT&4sy޲_:Ik x "c6\է*)&fNv&ҧne3ѹ_؋q%+AGܿ8JJ0QDB4woxW1o?Gւmp7&x 5DN#0 s5%4F&RK@"{ Y%1V5HZQz.Vu'47R&hh xJʃ K*/^]A8ʻ:A$/"lf.4tF)DNxjHԾ1xit~Jl=3K4VH/9M`(enMhф<+9r-iQc E O7 0E[pP b@g,Ta"4|QR}ɥv%JkW9h29s<(59RF'{ 8Ob1'1 ػ?RùnBђ)o/?0(և^HȎV|:0xcBZ$urhE[އ\vDk1#U'8 t=FC/y|3p3#2w^z/Xdv:2 Msu{U1xH7uAQ8 7MpQd[bUnU"R̝Nh|!"/Wlk40r͟k?)7<$%0^Ű9èL<^Y ʺ y0>xwm:$2.ru,,o0㬥Ņ5P5^xXa/*_@sl;0>|?3R6cˣd]3 RUܥ} dD)_rmx%hW Ҹ y\E0MQwq+D."A:EN)>Q?EIjzk݃Ɨ1Auug*H?֫ि O.ogY@ $njж*TjZN|͖tl,AbW8߹v) F %-67.1,M*aashH4A?G}Si>ٰu="aXVOST 葴-8Iayh}Kb}iI#Tն)L9N0XG0WS0^ 72pO1^HEE9A1Cȅ;X<`fտj= %J)̲.^~ȵYedÐVD&r"GJU&'2"U4y:M6,o2Ѐ#OŴZ6DfZXJ r5àɕRڌ{q'-'򰲰G5lNh6[=u{`Qd[{V_UYC+NBۺ 8cTY޹ݲ V VuKLjlU!@L+mn+ݪխӔݞM̤CXDg5 ]Eӳk0g LWJTm]P %s|B?#]nt+?B>L2Kf(ţOv_.rzA+dv~8J5]v[Di]8޼.ejc+~M)vɵQb7Cګ vTVj}rr&YHj5gĎP0NRX ɮϖ5?iZh9b\8Zcn~ Ev<x6bxk@>}FE ZGtL☯]p9^Aa%i1ICR>%s =zvgjL[6,/I(A2 OG`0+CnHL[$@*b0!M,6?&@/6URvre_Zi~őrQNm~ m,ww,>G3p70u|Q}f߼ ! ܨ}93deN}gjΙ \{< _1$Jz@*_B)֊Yc4RZŭqֈNz{[C@~~79gSlQ<ĩgW7rHO7O{"Ir~ V(`|($'49Y MߗKa`@rL.%)@?2WaU79'Ek=4$V`By*@h:I-]-#7~lM$yEֽ&)-S4.asZnr3?ww̯%;E/zeVE}}׫XEU] 0í6EºXvtkSwmԨ*UbBMGu } =&PqZ Ei+xg;[2ca%:gDWA8\jS Jsw8= {^*;-q~%KD!+c; nI%0'ަϔkB߮a^P4h,Az HIV>DoqX{I;s3ynU>U[%0%zz#)ܤzeEGHJe;PQs 219l8\ѭOyu]4Jđ ͳr &EN% v6w7=_J#PPJzMGMd C}DL($kzPnk z~"D )PGUIpE@G[6oomjr:ri*"l Z2|"7AR$c3X4ֿ;4J{]4X5Am+C[vrAs ⭞H :'0;ʒP^lB8\w20?Ӏ@&lTM6/ΈGlۏ2拻d>dVYr< l%N&`H a.>6Ϊ,#؀f.=٫<++]Ga*&`@/k?R&KwE3OMF'G!4d)bG.+f(06?h `bZ.t_8Cw""&#>a(azyʜl/ :iGx{Zj yye_5JFQwmCyӘ.GkgwVzQ0cp!A87(9h6t(2f1ZN2TO*Eup*j٫QC.JV4)5~x4J'ͻme 퇝a\r]C)"M 4‡/CzC|R O`%`5 =xy⒵>'DM9淾-43eNhU{H[rS&: E] ȭMFEZW/9ϤѾPG:wIҰ3}6/Yϳkc!EB4)ռ𸔆Scr{['ؖ<%!сp%~˕O DfD(xw}fZa/-7eD_T& ALry?`W.Y7)dӖQE1-k(~sbӺ`&8?l-:|g%)8E>cHT3rhE*W:_~,E jκF*kE__lHQGd3:)szۆmcڃNF]go_l؅مV"1SUf5Jݪ%96ZJreI\vWv G9oR ̡01{&+& EkӴP ^蒘zV<44[h"K]]f2sZPzk܅'HEܭ c 3jvO'An*5*腂T nG [Q VQ~ JXt#~by_n82`[";6b?D>,t{cERZdǔFfX];IXpH,{=~uMNs0:+&jdpi=8F2.r" r+_Tj8%<hB~5vEf|L&^GdEݺ-j/[cDO.Ymٕ4P;!Q+5,E?*yo$Q4RDh"ms[ @;-_ڬyeJbAKgJ[v4,-Udw?o]dym(>/IZHeu);Lax9Ym<\ %~E]/h8gH ;fV%} ia1_=vXqe(D+C;H}`y0|iQ m{8 פ[ ɲ)r_>ҫ 2qA]?N]ZSONÇ;1ubg7]{p!I @Su5>0fy[@̱6)mUGUyg.@ZlfRV;O&x$u%t")Zd,S֓ S3}k`ECIKjFCJӄ#U|i>0vY^C7/[kggږqa i(-AD=Փ'rFטR kJ~VcO VJXGSce7o$9 m0gkv3*,WbƗPJDpۡ6/ e!,9nqn^VUoX OO,dleK3 kVQI;[0TFn3'l< ƚlfԹO"S Ejo>ތMƒՃcA e%D" E2f+o'w(U8  ?|²הДPPCZotmꡟQ;/BXڱ0#!vf訷4TLWHYc3+ $.^P~kH}(1å9fUpmqU|8ܥ^*e]=eC,>CP%-Uuy!ӌ[Y<S(:(/{Dq8gi^YBY)BtXr4xyIK )+r?OlD>t7Uݺi Sm{!WW `mo<8f;5{3QCxOOO;0ō 2x!Z !N{]&k Ӑ}\+WK=L &Nmsc\,uIZ(6D$zʒ@m423=='ujx8L4;I[Cor2Qv%nsT䨷)shI揍mT0*rpcţNZ_b)2ۀhLDU-DV}6'bMV|5T38|I!_Jir!VH1&?3oo+6\YQTen!:!(R[m3y0@CϹg|~"m1xbV/8 ͜Uhqf+ޜ2źS/}nD^;4LߠY8yJ}4i@M9>Ik&w{*|PoV`1Q6ǩbV+ Tao7}&WKNʚ!&9B  VU" BRxq ?0ʝO-G.^Q= I{d+];o:Nw5,]"|޽U mT//{w)>@Hgt;PrrWVȧ!uwYh۲BL',8#*l8bF6ЋqkEX7.:]l[>Zqg8;3E.qR_ bTk̜&)LKA-V+X{Z?GC!$Rǯd:+~ '% ѭ-Cua{Հ-CIo6є'4U|OzʾRi8j?ڟq-mh+~?߳\/yWIF%#f{JNg$5jXhٶeKhLs)xˈ3L4}ҖQqIrd@AӴ1np{iK.&t?b]ݼ3p;)yaT>7 CtOFd~SOG! W#A2=KØ2]&MlSlۊ+DJ #*\Fu@pN:,ǽQ 0WR2,P:RlW(㶮 ^d+Ʉ?Jd#]Fs\/"lfa@H@d"zWH eT>R {O%b0twXOXl^ 8H#FX/_`¿p|zU?..Q컽SYs tó}LOov\"0vjW {cbǂ"Zֲ{a7tѭ|S;݋֝Xibw }MΆzl ;0&H!-?y*_nTfmC"t-$> Նx|)GGѢ>\*(5{L٫ܐbk78!n;){~FϣW__oFKj[ z:2+is-X k΢`5dz8t4uo.? ʂ2RKbJyA IIBY!O$^햪8ڕ+⸩g!<Ռɢ }CK:Sf蝢o ~V׀fAés>YЭȚ9:'Yk蚨Lm_]V`RD _[|L[nT`?!Lۨ3L~!}? m.nO ,_ÿu8&Au0bS@+8YTd#;S?{T4rPo]<˥n 8otȴX'(*?:=/%گj' bv0h.0eŎ~S W3ɒXy #6o]cczG*&jC܋ OTp%]`'6Yá8쮾Pa@zB -F,)>Ҿb,ӥAo8< Wv6AdXw˕ƪ\kq~pFw*nG}I$4קbY=غe<@u8X] e2 ^c\GYQD{V/1LLn\K' ;{RdMwN|'<}4G/\ !q7ZaL5KNfglB"`Hujёlʌ0IMyf2c>,ĻiQD#$hSL>uaFWۘ 6!9(d5FIN5dSIe !sURAF*GuGQ;h!uj{V&\7TfLw78"c`?"?v"EN:ID+AN|$ O=PN>Z:>}^5}b@"x*\05 ?.)?BG < v|IW:/%mZwj FH@7R;snr* ٰ9NW/٦DmjAU둼W-Dޏ!.a ɜ,8TW.pC ѲVt ,0 }[9{>vt"xBy Ȱ qܼq΍̻%M+2Ibk/#+Kր{(m߶FT"lFD̴َ۾bo?5_b ,O.UjlmJOd% ˏ$F/O^ik6=[},K?e+_y" fun648޹.(pgzA6Q} [#G{F4o#z[*G{J~ҷpPzGI}=C!A]W#à_QqkQo9סǤH:^}Cd r#-XDoEuxEa ffBlC@52|na &4))YHSMPuy'U0 wV|WOv1 ?DmEWٳc;0OhH:-S˦T֊o)0ߤC?9褭gY 6C'?q8A@w wKmaFUeAG"j/z"& {H} KǪj=_^jb\6݉Vzd%mPC39;^ =k9Q$cJ8L-2֗O!ja</tRIO]@i}a<:Jnj9lS"+ߟ\F6MQAh8"\"$FBYg}W1E7ٙ" rWqE]p=.VWMNccYOx'RAԵI%qPNLVCf5Eo߽*p!yimmli/5VX]j!_GVS|=PC]}h0Amu$sbA'tM.&[D"A-4 QL |,^0```E_ (:27nshH\_/(ˤy@:lsv{&BS"IlXo!=guEexV2,j29W|'OҌ/72w9 =&;nɟ=|mpCmՃXIK攮*|B(F4_7q0Tp+A H'_g7nTA|lA:ҡȑTٔӀ252m&a3yEZ K©Vcc kÅ=/,8-KcO2zj"YWXPv-obmK wT\͍݈j:yU,b&S%*Wί`pN]zZE𶹥a(ti?ސ+oXH59X29vk b \IP m$~L#SN3umb@J4~6#"ykqTgP U?h@DpF"'QbI;.Yuǥ{GZc,+nv,WKή~јxVTr2 u[ z rMi^ỎAN#SI]jf <:~Þb6<%0{ 2@cڍ_R1-# $N0|!Q>7EqPX~aKwTy-!j9 _`]ɬm=b^gr&D[ON]X^mʇ G_S]̞;p꼵 ^75iCBPo;if/ڭl`8=8uia̙kF)ԃq)g'&%?rnRס8ԓ"V*)l ܧ/.pc~T$Nj`dj%^#ΌWYJ@}ik+捹f_K *8BzB)]{QRXJH)Oy;VE!k-ܚ# .k5l2FJiU59(Z;Dc|$*W3?1֚&ǵ/)5>:X;Rfae'\5+0+.+7mOJ [vƯs9m)s-=q".yODЎK 1i@Nm|1 z B0.8NT-I׌V9e|(s^#ⓄmtG:e:*pP;iͷ1F½OZV/d% jtgKJo4HuFUsYk0֭6]:늼U)AiC@89j[Mq7PPxbmgO*I9d]J9e ] +n+'b PAw7g.~2s62tu<녥PV޻Nc:챩TXSi"$5J(O$\z#^Wq N^h+Ac9#(D} o wB<3 ,xMoNʙQ##﬌?|Tr]-X(GBqC5|Ih(Iw~6>h4u|5yP&|wsI<瑹6"o>ToU#w0諔W(D(}Z~Qep9 ڃ4:S]:v=Cw^ U )}u-ţi E[ZVOKK&QatĘ#&ZPQ@%h.XM亲hQcKz3!OMl/@}7tTߧ-\+<#6c;&~K,4䖱(!|[y|H)UJa<ސ^W#~qRQvzZSin$0Hy! P^aV zlP֔m 0z\ODyhcgg)*MY!%]*v&ǧ z##K+oL]boa%+NB{V/C-kmdS92a>hnyf)$ޮ(Y;d`vb< SLu[?:' [?SAs]Rp B?ffq-*+Mqx•SE |L1o^TJ5\\(*nocKg۶TbC_FqL{G~GX]hU,nvT!j&ؗe}щ N, ab'g4[rtM =*A9QJ_t$pm8M3m42t|?!a*JS ww!֤6g H9'Ff\:<2cMB8G2yk8ȷBC/hL'xBL6'dz!߱Xm"i d'|Mw&"a|: ĦTW仾z9H/oMOSqU,ߨQg @-@O3Vc!AHH`2 ("&/xQ%~ED5[hrTCZְFC_9=5&'X% D.w%|8zFki|Rߝ틃 aP c_}s}0Ij#gX66ORCLnng,kp͵CGRi3f 4]5@bfMVVNƦP,\$4aKTU_'N%DTᩋ\>oF@%>QYoYSn.HZ[cܿ踠&%08iI3z𺴃Oc (SGɯ jʠhy JS?kqpHc^)v=U;5<ՄSjQzp%D5KB&)r雫d1\HKfдn/B* 3z7[R|ad#z`8<" Gqkj~zbLK!j D&Eo#4g6zQİFA5$y $s"A&x`[qZ[JocjX|^c2&-/lp:'*UF*%'.Xou0 lO1:nWMDGMĨD)؉Ȝ^(m$ؕ|Z(w.T/up &.'d۠/q֒fwM'`N)Ƈ6 hRX\~2V]c<ڤXyRƼ/ǥW1YinA$kzG1қj7ʷv@+ה˰~xlyg>8WD7g*OQhKDmgHhleh) †Uށ8` QIj-eerT&I8M$ŌUѐMݭ pkp]3wAܮ4̛ L {7/#02S T@@]w W[4/w|1'b:ѪW!-,O^RݺWKE_Yu+8e鋍V(|U#~[fE2ˆ_t[J^}/QIP */-ۘޜgބ_L:Gvělե'`w' MP zAuf꒵k\Az@Rܗ-yO{Ҙ! Ț?X<7gRy>w ~Ҍ7DmoϪf5]ȁ" v zeaT[`L*f[[ (ާ]sL>#TDhCk86V'rT3ꢦ%+!td>XrL2XK.њ˅4'"ïh}zd0?ARgcjxI_>˳>(XVG[btkÚn@ёWmx"甴(D1(gzw4"⭡$ " k϶FNCEj-͙'K(]eriS!r3hЈPlSD32 JCU-uhknN @ɿӔRJmjAz%lL:7ˏapCN"m:n3EWƲ|[>UA:<zr-`Y|BHnH->~?C&dY&;|ֽi@ k 9E*`~g)Ƨ( -"#lT˾v~y|e ŗGAW3E.V^bv nw\d7K ) )nWqb ܎N&7;6@k%PA!C++%})o{p' NQԆDi1 1HG+|%Ko`]#/ ~;*ؙPS}h*j.L-[mKS0[ }eDynԬI2U9*hM&}3+px?.ru?oSUq5?KtrUՏ&㒮k U r5DX۩e]Iv4"k[}Grr_SoN\wR{d=WHU6+ъuS{~}F;X dDV L mŅ^IX,|!MuOFhmU܈'CipL_ maa^XhEwHgP-;:Er FڰbU_>dQ YZB{1WlV9$7)<ٳv?U<&b`EBvH2kֆ6‰I׿[oKS#)"npFFvyn#yë=X;qNTY^3E9˄N4*lt|tuwgO?=֞'x1dPf4* ;K &᜴_;s+CL߲faYSp=K^rfa,1nR K O9ͪBZ"Q?F 3c'5jPie*Va(=ˆaPRn*;K+.>Cwt&|. Q$' Y; |HjG%u}f/we7<Ô3{őn0$p 'dfFkO'%\b0ĶtA(3g&l'hL]G]8tR4r1/[|l7Igoo0vx9ST,3>=A"Rs/tFTm* H+fHt.F)/$NŅz}PvCySDck-Nu7-|ztQO1냨o:H&٪ 6 QM" K&Y?^_oDVfܤ:Y[ڧ!Tc3IzjU@1{ T[lNϊB+D~؜Fh/Ωgd=+bD7R^E<<]2 Zu#ߥ+zڲѹ Ei!0De`" Zo !=7Ga^wYeG>GQAml_mh϶$1lV~9J0k=Wל\̝ω14Z`c4HYhqa 3AYѲ-JhqFp]iB*SC|5vҭj|zb;.(sELuECG5BnJ"U7Txi.}Δ>?&P(-XBpOϪT Tg آā\"dU n)qvU&#wob* +F&Q7uajP&@: 0_%t2nb՛ ~o9iG~UƏu#$8Q@y r庅F{@r" ׭LMhKC: ҄SQ C/)-\~dVᜲ&AG$ ^abS"w wY/"jE6 kr1~Lf'流Y:˟v{s(%w;bMBw]'5 1p$QRuOVQW?޴S!B'M!yI)f(=!COQOr{w(Lɒ 3@.Bh0.f3J7no­Gba(LvF㼶;5@,Sb-]6y@r5Iǭ<@D6?J|nmlٕft"{?]Dt,|JP_pkԷk]`)x0aoahXq{RC@R?6߈TS $U@OYtE~E`HCp;Qr&\ ]9 :L H rK؏I`-DCbq!]x_~g!5gmgz/e+YMlEip˂_!g]{kV4fwoJD_Gz?;6SRb)QjwcXG 5~9J_ئ_c<Č_ڍ@{xCR&+$rJ<FO!VvLб< 'ei4Wd1HM֭Sg-%KI6ժj'so<ĨZ0GOu2仦Uk\Tsx ʱ' s-=4yeY&O -kASGׂ1Z|g!MdDkBǪ";s7mbf9DV-h_=1vU' 1-lJw[YYP & I ʧ::?!ߡhQ2muG;R# V,{tXk&huyK<])ڥ41S~_Uzr10hYE,dAA{@OPء$\/ղVsdV2df"r~!qN3k \|rt1c/՘޻{.r.t'W%&`yc1Obloꚨ獶 DK,D1 &,$2)W 51uN} $t$&tR?[S(LmgrͅnA mDJͳ*6cuayI{<ϲ0-yeH^7 e'-_W=upFZp ob_ބj)%bpɩsD 8ޤX[@mT8k~aY]rl[!]s֊`p^%PlAhD:(:)#w |<s!)e'p޻;?,/ ]ilWTQ]V{;t#VSnd)X/:Z'P#$j !LJڜsnT?4_] ʐ CO =1b?'p4s8g Mrz8SwcC(aFZRz5_23 BvZ=*m%mE gʨs?#J7[n9 OWd^fHZn.5ES Fn?jv`萐dY>bhPGHsҷ=vu[28ҺBoF[}c^$6^QH7Z>^Pg^:й7c,t)aVM 1F;6!PHwYȉHh:,<6QX\dnC _po^f]6.R9c1FMVk=#JIg*oJo}As-J";HGv"l\} &ndni%?&|ҤbS;X)km4+Ztɽo%N0|#+QHFm@$A#ɻ#*}zy c(,ژ]^;)wc쑱Rpњmop}?f>u$k֖& FH7E ,Yz p쬣Z'W9c!zun՟6lljҗG;<ߋL2HC tyZqу{T.[Pa# Xh* ~O+56!ۤ?Z\u'6Cw|ƁٲwJ[χK\94߄ bm>$[=~3QO 6WTl6V<;kx⴨R< mc9cC2ZiP8}0ITku7v{_)y1-I<Ki쾸b.]fHr%u-C RG~ w3و؅Pre ԐHݝi<Ϥȏn%Eo=B}L;851̥,Fa]п"YblU)ʅ|)[!nhFSY;Sp=^1[h`׍ #::=σs8phf_70o2{Ģ~=^vRpAb)rxD6?Z, 6*]$hv8 V4#l1ƯRYW#Fv#$?ѬA ,^#gWSvjyB%Ij-_HmL$,|Y0D<dCܖ`L`F*bTɡ^ v7[bWrF}J}B(_(a◩?ɿ[=S(?\dUIה}h9EWAz82E@u ?y%̥WC$8@?z6 UrXS56Ogk!8Voȯ oa͹\ =W]H1%P<@{vƐs6C l:9 +ů,8gW<~8q(wҎ.DKut>ZFwΩY't䵲P {Wpϑ8 MN Q'#VrFVN?# Jqn6Xە1E7^eo"kPFiTm%HIu*uK<5D+ȗWT}eP1>:VӢ97+b~-YT( pK p'9^ݑQ #ˇP6?d=D^dSf7MV>nBq}ox<*0`Xⷨ$" =}9n53$9n_R;Ի;#*bih) a#=U/wyޭ{ 4ڷgs91$CfYOD1(; 8⦻&RbgF>fK@7yDi۞K]`(WEEqpzM,J8"?0ц\rtpkEw5T v۱@#O}=@|^B g$L-[#d=*pJX` ̚]Yn\^N7$ttƘWܝ~%Nx /SbZGHG Ԋ^}~Zo< }V;|sj$!>:.֝<#ID{A8ZV^_A|Vso͐9bhF*߶#35t7~$AˎK+|ץ뭜7/l JEsK2'3JWG$aVV38}<^Yg`2P\ä`;3 b['""g' [@,y}l0I!O2D ɳڧD}BEDdTynBS¾ۧe32W^D}Et0j.SUٕ$OnhZ9U:i"X"KV"E&ByQ%H@m儭\+7Wowd:R#$d>.a(+)֭D" IU C#QoΝXe0`Da(8*̀o:Y|M4(4@u+M:3 $|W%؛u./kylv iWmD8,uEUIV|Y3ORP2.d++v#P ๬xMoOKJFONL3{Ŀ@.Asݹ +0St~BI%Q"/Ns8§ҙU&dn[eAބ1[C)C3}i8B{:l#!$-OA9`Eef)Gtܲ 'B 4)h1TK allu\2s`.xS}Фd0-!+]}@>YG0 p~@3%[4CfK{#ji"ӁDɆY4tC1`ı]UÙPcd$͑U4@i&U3-]Gd ;kwIm Kt?K).sI4/4ZW5t4l]ˢeK,kB(P S@߽PFU*:d\,`^s#͉0N=AfB$rx,́FDn?g1ζhM% x}c" zV 󒊃X0h %AP2"Кσ>K,q.Ml,rVJv(C^3CG TjK*EBRYF>qFqۯΈ5 .گ1kICȾ1?$6 ;6?< c>iX)) .U,ۀDϞD8w*PАr6oW$FN<_-؊<~Bf%/.mO|*!+6 %mQZpƨUyܘ:1͖f6hv1p-iiRdZm1-ԭp'r,r2PZszRmz.=hG^-7Z4Rچd uu*g=Kqo}ru&%,"̷LPG S=]P~16ɺ*JV8JxT4{ݏtl{: )K뿀]DKX1C[sKwH{Q77DGokTSFj?;x<B6iH2h3Kz\jӋB;4N.9Ik-hT/[' u~ʙ Ux~8(*ah=~ d` yX@(b;Yӫ%!3709'.+Wm@RߢCkʠ |Ge)TSvl+/@R # KGQazeL &Td6%|XA)ev4,>oDlpW"}A.'$;Rn hF5 4L[э:_|j;+ly(:-?jy'n[P{UW̉)x121X!%;C*V.q-ޮh@T""&}n,Im0!m*a3}GJ㿇Yuhnh I,/v"Vy)-{(vgrwٲ1v=qmI̕D I\/HǞ йRrɹozC/h%;gq3^uA]?z,r].Ȃv ]k My;ԑ#ɡ؈€M۶3.h]QGbzOb(ޫ%BS=v~Vfhb.B 6qbB!<&'kCTL_"['/T|c='DCm#%BJ(5iq`ܺRu$Q$iM̌'XB)Wb9|DIg!)t*f~( #XAO;\uG| : J@@gV]+j_YD^~6ΛM]HI/Ia~ޱ?rm&Kb_k a$$Wţ12Jբ՚MH=lۂp^RUM*fk{ ~a&g&ƎC~ $pW!YĖᆄAʔI~{V}$s#3kT=@MJotWB"!)ehH͕½뭠b@|%@TD!"\k]$(0Lۯŵ^'~lsOo@\2gk.}16'G5 cҩXp6~^'N'kV]7n?hrSg}b'lX󞿪{d]js*MX|"46U~8b;N-η1^紶_}9EŲG`s U6q :C;5 dFzxVjQ@; .OXٯjduloW%|0EgW 3HbnA6akIngo RMgX [:w4MU AkOgf>i41M,(1TzjZ 5m؏-ϫjv ZcZM:r%Xk򵋮$ nm)k On/ f<`jfYOuNlro֪y9Ũ==xZ,P<7ʋd+v0;na.x/O߿n|0 IO]/SP?~`m }S&킶kNVΝ^01bGX*`&ko<y#CQ ʎ}>N8FYN[kL4ˇW $"I(yč9c7-;>y@|IglPՃvԍhE}Rs ĶUvz~TmZrhP)`sGS ȀHe35]RZslOÕMjêC( W|1_#]b]YW1V>*ġF!|jO*F~yw1qYd |Jlo/7lUe\䶦%<'H5L%p YN$}mH>!nTs< RbQ#UPZw#6W Gt}lև1)دvTm=> Jl'x<8lc:>pA" o$&x4UFnV&4ܽ󵁇Ip.HmR,x{GF}&2W"q|ᖀmXUnR4wq8V-A+@=G6I{׽-; 6F7 +N+Tˆg3Ƭ-w !\.QwVSVBe@ŽR $ ~!)UݯA0}0(P23? Dq$*Pi"nI / YҺ&Пz{m!ЊpMyx;]+|@qI=۰@,.3/1WWMt؊RTPiFua/,i6]m-9;okËvPt.`X~3I_sQ̌35ujfʍ)IU!i'Imdkn.A$֤uϮٍ ז̼&OaA_> VX^B!H vO@d jPHےfqcc-Ԓ@ խsga:0Ԩ"JGb&OY^#a].s\AU6(3PΣF,b#`̄4p-`N]I ɘ%~ ʈƮuDB$ eDP4$8PҤvf 6iȿ @HBjuH@g YBn5YV1LΡ,T}ܹ_8εo352C rRP' 8~}E`;Qs j -;83HwUhA 9C6_y7&"뤊BC)Cti*nY]]Yߏ,:X6[WQ)㚿iz/Z1b*e؇=dJ8&ǾH@6) J(f ~ Ўy=tZeqRbN\7N5߰BtKx>aUS†k)F7 qg+&LRy!.h3d0׉:0%cǒhp*_k kl9FRT)Ljʚl NhkMmYXlpjvQٌi5?|ښߦCJZ*+fK5$&PFv5 ."݁\O?څIt[voE];MXiZB&&jj0@KfSRUFMt7=UTKz ZHgofۑׯyMhg䲨* &}mtv _nhE%)d:h9筙# ~t"R!h 5` X"P\SfU¾ {wcx& $ݳ@:n1m!a3A"0=UPAB!ȡ {l)n\!5L~"oW_2"~]4 9"*`r2:Öt 9hÜs9@{ZGY,&zv^oz16v1|heZVX? }fA( XK /8«'z }]@Dc1bS#V''(g\ҭyٷnϮ2?Zz$,1h67.5fyrZ;- xkQ1y42Y-Ax&i+*erYn*w(Dݼ]9>fμXG?U/vлo4ZzKA"Zת4JqmF"/tk +^yTizngsq04Ùط2x+#` kS ,5J21s֒[*@P%&VEVC3H_ j?ѼPYڰ{h/aH䇣,Sʴ}zRǹ}&Zُ5 خ=aA>~]6IhEfO鋂=Bbʨ@l(ħt6D0i㊥GLnjū*?SWU\e`׏ZR ⻮9> SqS(,0v(6rzq9ͱ*yA?Z:`kvKOBKN%+!vν$e!s Jޝtd>3saB XҿPVQQ}#RvOlǟ9cozZNDy~!  z5JdzUYM'z7 +Z{"kBP}@SГj`X_X}Ro,ͧ^8o^icg;o` tAf'IoeJ.7 =hm[{ & 5,7#2Y{vkySG)'Kܦ'TAI-֓$v K|}p[2ibo?)7Jy>P.@[x@ҍPe. "'S>*4%W"8X u+!!;h+LM[m O0bN)1d"kˢZ<1ԅ9qb7PqkN~o%ӑ6y>Skpr֍ {/)w WuI$jj{JSDܨ(6Kd6XdJy\b0ep}vy8R}@n i#o,VRseiaҺ{=o?ػrˌ.C,ʣWx[I'v8#[RW!ؿ8T* K݋q߭_Uٯ>jzQ IJ]IK^0>z uk8`SςG]V@S _۷ Xc"~X 8NҒ &}]kj.C?yU&~0xͺ7:6= n|"Nt/*/{Ihc534eL7kP!I\WzuB)6yMzlt3[ݹn%O7}04Շabϥ=hpww~1YF8ƨfEe'.뫳&sUtVSe-'IE]л lN LQY8m^zN~}Y b+ pjhWuBgUG/ Ey{9pe#GǴ㔫b:Q! 1ih qcD8( F>L?83$T\BJH*2TRptZ%0*a~t m !ݰ,X`~zv1)Z2,EOy=@l1JvbΎJ|JKӰ#W_"mwz{=o~O}Gޯ4ɴ7sY rlE b5_+3*->i^(8ISCrU0nqr7/XŒA`X<&<7.M5 Ѯj}8fm`D3,]HNEW3`Q}+#;XDDA$VGd9BOEI0^;Hf1ܭ:*"X)"lVw"e+U=敀6 ri=fK$؀>yeƵl N6 W1BPcģ]H&OX ٩0GYڷۄ) A:b[jЎ ^#yӍj(۠[`>trB!nlzpqCRԗO κn[Eg_d/qشݰOŔsKrosAwr:"]b8W{Ԧǰa{|%&pҰd ,)Ź6˝l@*^5~ JKTd\N}֍|xuBhuQ3t)^mMDZ5m:R1)Dӳ}A腥14"Ie5uuk|#onjG4[;r Z&qҜ}_7)\r0=^"mسڈf: .n^0[9voa6]TBCMUJX '9yEW>}:Iw$o3׏/e*/bEy sw&Z#Qd+$S> 4vX? IX-,з{C([&sֻŸZjתS&DlV.xѰ<%< a4pژP/g~ Vj(ow0z13 us Κ^Ӯ](RЯt9acM iR)"qӹZV;MY@ ;NDZ&7:ĕjy=yZV]7mlB| #0,HA\ +t^$.lѻ']OBp|PfYTorʜb=FT t1vθzn.)koԝymr9c E.M_IO$ϸ|\Uբ]VTA}MLiӄ($?…=[Qճd' j:$P:x@=*y't5t]9N H,چ,i2oajHɢDk?cょ؟{?A^|(Efxݼw.?E9ȴkO?;obֱvN|KB}`%@A$$b_f#i/d=n=N}gӉ1i^w”2ɡڟʬM'S(s `!4"4?v4-'jz5Nf^$CC8"ȫ|4F| zٲaK.Uh{eT4G?UNj^97(F@v "ɨGqru7T֙8@?뗄 ^.~tV=O'(N8R\UYoc Cs?.@@uX4¿ЃNh%lCHT/,X8u="tQ4םGx`o =1Wd uO.,k>* DuWcV MgӴi9`~* {ktT*:4!b)͑.AY;uKh1IB bGc.p1C{ׂ&5[|W4T\uaN= HaFOr0ͅVs@T.n/ٖ̍5Z S)Y# Z_uMn)~X?stV9D:: dk;݅:Zς2VZP9:.)4 2s,iWo1AYܩV\;X>M ,mGMXRەSnu `2w>= u GjjO=iZ[Vq sRAV `*A)Eu6J'8w96.ѝUs +W/ Yt1!G 䬐٦$q%û؎TdwwXm$X &F ºo^Yc<6<7OuSgZ1$tc ;W(660Ag?'8c=Mu[Pb׆^Ɗ]*|H1yy5e^++u:K>`쥂V͘T;T՗m4d4չx*^$JiUs Ur $ d, vxBk"rs jJh[ z ~†cUm" "l  eyoa5(4Qt:hbY PO CPֈ [d";T ׏AF`k(eQaPkZ6,)ЏL5w$\etnѾMƎh&fY&&T9 @d,S^ o.$sn&3P儸)73g[!K"nԷ%l%b*!5 Fj6mǪ>m5]9sпvH? y}yq/P&MR]_7 X`:r+~lA>#_[*(??[+j]d䷿GˇD"Ā{!ro"կ^!׎'-}\S?iN{ol]qT3b4P\x6 V{,_wo-ѭ,f%CEunѠE.j?ø"MG9Tzp'ȟ.W%N6CS?< dpu)o7]xão@aZ %lRyWqsymMyoʾO's {t @ $fb'm?f 2sbԘ #/,&_Ʒ }x(e/.,yW~]8zle5 v+-o ;W;+og~vLYpmM| О8\W ;O1()DpOpj}MwG׉4ZܰaȧQ S!L+)Pp;( )y#y zg@U I={I+$AԽw$ǞO҇p0kYJ 'ͧj:(?H{T xgaNisTk}"g%~lHd ,烢ieƍYiʺy>h,jiǀAa*iL( XځQ,}Vը=g{"nxgՊ6q _ pMxX4EُH,,%. 80vFMZQs] $1/dZJP`K.vw vβep n*-{vl£0i?-8էƪw.6b;H?8(T>n'Kiʜa8R*mAa&hwƲ~LOX W0 DS紏JYU͉%c?\3!kI((?T!q7BISY|l?&It F86L&ӆx]`X]6d֮ג"[}+:5 V̍>Njh a[Vv5ui{?$Lv#0 R;#Ab+ *VՄPA[?o>(4fėd110eS5ce2,[aafkr{jb$;m'm?ڦf@"~HdXkl(P71qa$ b! N!FVV KlS>]A\CvǃDIJqmgE F>{Dsc5T<_<_Ͷkg1Ψ0=Z*ڰLۥw̔bmy9Uq-5Ie-FnY7Ծg_] 'k:"` fc3Z@4==h3(o%jv0VoofΨlw q1Ux99q~^>7Um8Oan֕Hd[k1]J9snABI|C}com/{@D=77g=( »pjfF]`oWŠZs>z{u%~;ћgIl^T13_ή ۙߛۘgwI eJ\TuT cHk톗g^HܐHDoZ7XM^'t %Bj)T I!Ej:̝̀"eBԺ&^iUVJw%~͟ W+vN\f[OƱoc!mS%瀺}ZtG6VtQa`40]jLr A*8sx=˿؁3 k𑼼wV\:+=NL3>-MOZ) $dCGyCv\Vi0?C ؜t}u֫#K0/~ܲwu8 ËQ/hqx{DBI\=ܱ0:]{/t[m[qT~\G, v*뜪X0w*1qx/}eţ+⣺9COs( IFۤ\孋_O hfigɲ ;Tw,dNq&:Qա4lȫeVQ33>WFԆ#\5pdx3lX1;j6fx_`sqy^qn~>aG$ٜ,qdžZ8gyY`헰n&NK^r 9$@y+ҝQ툦1%皬vav_#ő+G`dC뷣JNq cr~,_1p/5^q "r6{&Q%CE8Iw 5c>bl9=]}lQw?=ԗ)*H7ϑ.tp|f3?DC HŽ1Gkϭ8 D7, ²kK{mg5[O]1jB2I]ԫ{bu^ӏSwʏW 8jM/C;-=2m93ʉho!.GN1FBX'uϔ;zha=K$bk)]%(+1n3 g='2)y8ӫ :1ϡSnT{Z/"Ս; `)پ0og~=KVpY{}MQ"\0rr\ l" U%U &ߣ˟qbuQ5sLnԠ='S0-;x}v[(Ά C.:+U:EJf!?WOAm)L#hDE- 2m&k Oa*p#_rpv:*\f|7g _OwK޾'g p4eK_lN8R|R,-6t.;6E]>]vFU)|AlQ}E6#8S~%j qZV^m6zhoLX)𹏤PkL\{淢e19k2Ѻ{@nt0PF됶6IAmUI_Y1][Ɔ62W0;xpcybwCE Yy{٢ ̙X:igHg/;1nVUCK'jM$`[s6KF 0!߸=)av͔׋ncLUs;45U2:ã6y4+ӆOw=˞b=-t8㡥25w֪JU3;)ߍ@@^ļ.+tW@ucT1#dv8LVAPbPvkaٟ~' YJ-|tLRf[D.|O[ S a68Odsؔd ƙwm,X;ג*pin W&sN=fXw nN?g9[Ν_{$ M(]NޚnY 埘@Ί]<ǫ3[]Q\\k8q=obn4󛒏1_mjX}` ٗ6}QfYe3iٛɜB%R"S:lJWte}FwfE 2굃pd{N1)ôPoK&7DzuH6uCPn~T6<jpNO ЕoOQ-oghs>D=,9Hi=oƔY ja<3$\- cU ݦLz/*v$vTPMN^?LMCƿ BORx%n-Χ< H)WahHdg[ vT?I+j ח2< B[?vF͚6X "@j/wlї/Dy{[[GX"0duX)*}mZevxT~\(Fs˖r0m-$?Sщ?dח`&)=V;d.p [Uݓc}u]Imy`~>!Wk23cK{$l5" oVyk @}E/cHȾvdbT;7ɚۤtׯX/QVF;nMsV%˪&Okz֒kX 9.UKԾm5.u2z[~;8??U PؚG1ʩއt^k?0:HsjE%|D&'WwuBi[R1V Tm6z)W>(^R8j:+ 铳sSwû7SW5y5,e68vCihPQsg5_OnJctlNABWP'aƜŠEW8??R՛~Kwzlo;6 @Siѕ>??>:{;<)}Q%s]gqx"Dm |l̨n5˜W^öW֐v}B;tʹ,lq3̯=Iࣽxh>H$ӂPOmr,߹o2Q~7zK>ivnOB0/vB9Y[Frh~*et9}O [9<|.E<}-aU} BJ XItbFqƥa@DUc`nř坌ωښs>\npm>r(-"4RO+ -۶^ G7 ݆ .Fa:Buk/dke_*4ߜ]ìɤ67ɺ̩.y`ʥ+v|z jDe / G "WG;6zIѷl ˡ4Rv)aS9K:tg8 J'vLg0ߍ!!:E|_o 6l,ޭܹH]U7lKek;W52_oqx/֢7+q]Ѿ^:9M(7l/BLRKVˌϫZ0ٜqqUsG?n13NعU琦Jq^ ˈ >bT>D$KdTpT#UAB3WTSz؈$RC%ȸ7W”>LF'fkv=%/ڒK=mX9G5 ;]c!nEښ-2FV2m[Vzq(R?}O1!n~$9WqgObꮡtsY'Ҋ}i[^8W@^?k:3(S^'y$?M(\Yr^޷1xYiW猟'΢sr7towTLջ+O4{պ?n68WLB%l}vvU`3109q=-܀U'Z,5Qi6U'jkg2a}f?GO7߾m<H\VꗏaO j1]AmWxiqVS HǛ?ouު Q>zEMùlߍHd2\8lG7 }K+^cM(YFaFŞD>yUeb^o`p =@ yqOۘI\mS*=h]-aTHdVZAU=pzf]FJnzPfmZ'&z׎a]҉m # y<W۾ă<]NjIǸw=Z0=u80M~꾞+iKI}ל%6Ǟ4%Q8OƔZh-zeNq&cS:rs^/\ֵYkš$nt *n.xm=k]kUT8=i^[.fUpS.voA|f'4D5j2vwվ {*6c~FX}uDrQl%d½_=|39ϏΘx)@t߀"gHϋwbt+d( 5t`-oTwƄX6$Nn 16uuOjޔƒpqݭlO?ύ| "!ƶH,AE!$4Ry%;iUaµż"UP2YI.>t{xvхBC'G;g500Ym`<땦l#+U1,dUivy,J`$5"L|M$5o[I?: 6 im!wCOf(ADSTd4a9l\-΋/9>DՖqF$\[p=T[lg hfQ. uhf&,S> Y:-BG6j"+^Ov?'aa>64 )D}@w;8EnmMCHDX5i8w٤k# 8E;!w`ЯcS˥\`9O?ZOoW$l1&丮\<,]6ٹ/(bo+GgPY9 ھ+>Xve0!J/b4v֗b|Jf ;9.Qny_;r gPl;Ox8+5t470@^n&ݿ1baf°L2a)$EW:H7);4t2f$}"gwxgW-Hvq͍On-=.WlV5* ?oQLZKJi`rlm3T{*u.W'T5u o"]&ħ$D CbjҐW7C;iثJKߚA~??zΎ}Yt} Ɍ~ܓݐސD g#ɎUZga *[0fR +ldEBr3n}EJfU]d|?t!D >|2s='3 #}+atsCA;>rfPD!Mesu6]9=zeIGot*$3r|M3"K$8̄_|*  m\ą֜fV)?L@VP)C ! A {'8t["* BsӜV96 ;$5Y уUPT2ߌĦ -%5œi^rbNֈxU,HWyֶ9rw!G0@lite 38h$Yj2-1 |m_0h: kh`U@0l6"%My ܄i0ȁzj.!F6Pr>R߭H.6X_``8˒v9PEtHxadC!" ,G2=TT‡ 1dcapH~vUik5B+ΡCjSDA;VtmJOZڶ[Z0>o D/ ' T7M!jp'Cz!&=ap:-*5(kݚfPDHЦ#7SJL-X,e\o.jHkC|)$<v$Z*B9 ,үa@vHPRqpzu@rQo>x%v>J^)qUFqn F*.̆'ٿix fNb҂yIjozK0HYҚ#DC,三NCt6 3#*Ez~jG*f+DdaW,C fZۻDCr3S\0!],Gω 1QH&MB*-)%·q"q_ Qݞpn;HP=uH4\f,)"pT#k)p'Lz)l \V ^\qZbld: ȂZ:& d׍S#,/~ClcîNmUb3[`!Z :Vv8RdpT 䢹c37 sUhP KФ؆<33G#ԣPyja&BA.' 5BdOgm=EbE^!̏n[=U +TPȥ(@A;$Qp:ԉL[e~ G&/Je|~C-XFႡ9]nAqS~cݺ2,NK`X}'f@B9-*p$ۂp@_] pDơK܀v“[H!(1F0O#7j#@R$Kr~]g]7ȼ x@˼+DT n;m/ ȃk48<b؄! `O,8m迳|XUQ.Ľϫ7S, 3MaW4۴u3X)k^Ik iYBP^x8RW[SZ{^j:mG$Q~̧\"]<.!=&0P GFɛa- |"G׬bM?Y"KT@Ft3:lk^uV9y۰e TRG8<$EBb/]svkAb+ ~RF2Ffe~SM2~F}v3#cI ӟѕlTbW rH:S3d:Ke5)nmsN~dBUf 4>䦄caLi] ~+p[x!d\gav;LINIe.l#:g ZۓCo -1p2 +OV '@dKcv-zuJ"<==EBGbz^HA Z禹L?y6`!0  ՏjSϴ~/>n J^$I)-$Q[ŇрR9xLhB|w{ߑ*E'],}7jK |\uz?[ @Pרhz#_A?büL?^t.bS$lXV ƞ0B6z̆FMlPA};;+Onϑwۢ5CB"#gXO5"@ A"!Xw0xp#<6g\ZG4gY5&\\z'P5;Xeo6znЗ-JI6"j ۈ ԑD1`r1mǘ&_g"i'Ou@dMla <_ρPy@>mʿ!{lHٴ&KCo>ky.]a: j}Ѧ_A:_Fd_Q480:Ս?8Yѡv~<#n*Ҩ*4-_HZ 孳^|]`XkD!Zaj%D)Čkde`V+mW Kl?4!/||WE 5mDRyWN4^ cA ( jZ~h4뾳Rzh|4ڧ'0P!f#]Q'b`]0w%(Wy|Th>fyU}pCFE)S4o!%zɟ"TF r {׌sۑ'DUI?uy9Oj/v9۽9tP+ ʰIʼR컖JM&PLjX(>$ qaFGDu_fqIns޷,Ydßwj-!suz͠ oDA !DA;иf& . f0 mWy1fq?bOU)zo3r%UQ`+ϵb.2YKfѶZb|2ɥȕEd e/W ήh/M|Q ]Zz]t}CCκ+mxΖ;WRL")΄0;3Z2"B`%I d?΀ 1mgvϹ@>7Ͱkwv}lmzdn0G 1qcWGoz~0Qҹméh͆as?pulfN!'gG>:}3ϕQ8ȿU1Gq6`$ SBXYg9ꛡr0TʹoLD/Wym2FG~gͲU {ªX5ܜ1}"Mg{J;oLia;O:^G-e ͡J"6 H0"qu'KFDuFig?Κ$vR$@|X H]SE+(fdj3t6?v&WoGsG<#dh;7gScVAXnNb~ګy/F@7cB5as* F,L9j& _ڇ΅{SJ 8B?VE%X'0{P>UR_Opu|zÔ`op/B¾_IUU~:Xg!~Zw. *\dگ䰂Ը p"pp[]|i`6𧰠Sl N ̒u1sc }誘Pʇs)2I@( kx螛KM#Z-'"wk mMnW ׇd#e l`;C)vՁӀ1@| @uV0S{5\~ 0BMOI\Յq} OjT8:If[R6C aCH2C;cuەg—srB@40lE^0 M|#Pja9>106YS#{׽Kg$;Q?"#" k6`)e>AvG$H$ts$y513|ˌdeگRj5з4f<~+ vil. 6C$MӜJVG{P4rn8R]!x`ofDXo{L.-p\[[KE6WD#8 8 !^<~~iRaG~Q12|[RgJ%;I3~ݢݷxi"~dlP/"<_T,(2"@~k /,RB ArEJ"3ӛOCť^3z?9-l91v-&i4V=*0ws@z.4] u DOcߺ.Ƨ呇|OIntl 7|5_ /0Am};7xhѯBiK< 廎?AƗFOڤpojFmEՋx~s9F=AаBkw⒰~#]a"8D`CO=L%o"v/ѩ +>L|u_v3{^WTN0{/6_ H-rMSf1LyR6ъit Z5.3Q{,?9z7`Of6PZ 3\1X˫ ͞WGBM5TIStz%(\ԙV.9T lӴ{Cx7(GqAW7\N9%dd$_%@݋3o:>6ܠUM\^}mK8GVP~Zj J]j=_c_)O9;50?Բʔ _oqi<4s, DIhLQf~̕Cą5 o24z"iE@rae:\%^_?q/CV溪,CޝU]>]Y,<] LUp{ CZF'lj#PTZ hZ7=BH<(TkK4#"#PȁQ?27^Q6vo={#29a;^;U5b95p3 p("!t@  ?oȜb \ ֵzlCA-OrKqic;}MZH*"A聠@FBGԐMdU'Hϭkh^XԋIyݱ zIBX|\BI4 (3F:TxF x]`*q,Y]<n#h48ɛh{3nZz4#h@ GQSx'=6~%Cj7[6|mkKj;\Ѕ+m"@Rc#(B*MLEE 26`˴/+P@{s]TZS5yvs"ǑX~zo?y~JW1D4dWZlӞ- `0iy{﮿wcw Q$Iܕ eߨؚ݃X~N[&گ3Oxe3(5Nе`z=+SI]-+{mt&;i}.H)P/1;g>W { `fωqվ9n4/E#jBsaB RW`kэN<;Z'E٬( +s% Ĭ)s_QY\'dȮRi~7,Ю&a7맲/f] $'^"PxW\a}؎P,L$z,ˇ R2qb)Fν֪g]džaҽgԽU&ySASztx`A@dmVulRgf61gͳQN++gr߅@yr} ,q^J=nwosZ~*H;Ss&~?YuG 0Qj  uP|^}) 2{(rP-h]SHX:%sLs*SbBX?:>#NzkO`0B"jI h9$R]Vk+9 pѠLzwgz>+lJ A"#vNY7 1F*X{[%fl:4#u#(;F7O_, 7z\Z Z]Aj@/I5BF@2TVzK :XZ"i<}-ޢ_7BGĵ\IN\gحߟ`ޭQzl~7^i%+ƫOVwӓ%e̡^584(Vb_JTw_r@vEߏ*kvϖu"+"_ S s.ѥ`}s\Fu!)TKB˕i^j\iT d$.6/:0˵!.sG~Lmq\8 N -ZRj hm3 'M6ݴ1^_Gi\8?kuY>(X/)xr{]jS9f,/=!q;}8AQ^*mݺX]5>m~:y?nb:]pXXEpީHaw7g:ZKfE8`| 5oro>3Zs.+{dO6I}zkS( +\/g{>QF#aƿ  ?o 5[W3awҲG!E. ooYu\%şguKHHağzA\P7*v[/]$|eA!g]诎OvI#9~fM\V'َ U$u[oaʞeij.iW^gR1v8)PeYFS$+NܨT.?CVݶ3k?Hpw=Z+@0$]?y}lkrŽ@!_~OxdW?P߉zH\Hzqw_?i&݄.yFmYRI* ?t`YV;nEΕ]SXׯ.P-|#8{#rz7߇_"tS%PO:("cGĩ3ޒG?H&LI&]=C3yt[9wt1̈pٴ4n!؃r 0tg#פoVs4NOJuWy`VY 2Ѫy9u(ubp`h 9iU`0,_{zQ^ ]JKu [O̅haa0h9PzgDͥ9S,s%uS73ӴWv3ⰂZ|LK݊R´J2-61w>Nv<U}Q7FY~/,̮QlA/<8ށ%m஑2AUteVztn QvQ!vO*qŊé nd:|^wmMnV$@ct:gV'I=6mSJ`AA `b) ?n QWD}O 7=f=-b6tƳh$`¥Y}}oQ;#m_;ɤG^mK\֞%$BO[|v `$@@@@BfU [)}Bn] ]i~+xw^*%?T҃5="|t\G8xe-ɳq3̼OTs\hPp/Sf@/sݷyBvn粢џX|2Wg ]̯}f./|Gpnt>}9"6n[zmv^Kb0Z=061.=ï0^[{O䬺VW~h …Ww+j?9| >vWNE^ir;٩c豷UƏt?vk۝.y7f_AK{5obqx=pxkkF-sa0<-Vט-1P}>׽$QB[?ɨO[–CB}b?-w]l䤢ӽf N{?eqZ c^Jc3robb唄 ܁!GU ˋ_ _Tm+WH-)kXsM޴*Mu6_:KZ+o=xgWj(Vykhhi<> a{RF]+`r 4Hqz≩߈F/ 3?o yۑ[]A{:뙶ù]F_{ةkIa8pJ6 'x<.h ޝlBɪ\ FOu% #xUAH8K[-U͛USHאpRᛂٍ@U;.k`]@=5wS0^`ohVϗ ղΕ9F'1_yHjQZ=hIolE [[c I}/P`+f5( a(0#TDge͈=XsI_~6V9GB++HaAiVw c}ߨ6ȓ%ށA7eogt?iGFTaB5t-BZX}"gg51zͅFK[-8ݟ$$G߿qĖоdt^ԝ]ܟ*-B+~[0B)}1_\W tJOQpGa$A>"#mi.H+w}?縈9N+W9dYEɔ;8{^U܁R @6D;i0~M;:>u@9&݇aoJ†?2#2I9+,d^6m/W7l$<ĥ;WAA+WcnѝD30#BwJb¼_rϴw#p}^&cAw10|^GPw|Y/Pql_UQ}yD+V:Ƴ_Ea"@@A $kŻ%DF/Q`f*j9[fTHX>}gtY_7tvʷH^JôHĻkKk|ybxnx,4omB&H3-[_S lH3Ri6$ShKl{}1R1E&!{"0 z@vʏnfVۼƮ-g-= c:n+?UՎ}Ȭ*{ Ss$:fseg혉_wh߮V1G5 h/fR'{׳B$nM%4?f!TA<b3; ƀED;<~XCmʫl<͞(.7q9/o榮mm+B|rEtu$rQ5>J!.o%*R =xAdXl-sP#gry;| ;VߖYPY99-eMl;79zWy] cw9)ey&[.mi!fO|*F=:T0me#JApf6ƅ3f>yy^뉜ocUIDx賅2FݗGom3`Rص@_(m//yk&YBDe2x Z(/UFLL~O2K~k:xF'/h^Du2~z~\zWhWA T,"W=YF*b: 3=w-n7? 'pA~$BԄv0!G0"΂]aa뷗Pn\b{ʯr"6mC'zY:܅xu w$erQi]Is;"q4!)w\q|gT_t477-/\hËglϭ;u߯o#e{C젎OxG~,HmdH]}/;Y2֔kS5_qrsZ&`ںfp>wR> yǝ4[#]7ěi~ 6\> ,/6c^v<(+Gh W3%yx̕&g} e#?}yz}gw/,돞6"1})bː u9$L6Ym.-<%Bϩ<\V^g9e#t)hrh>?'D7\u3XU>*ٛxlvfY0&P.qYmgG9(m/}d-Ճz3u2Z,C;,f=jh]8n;OY_CR j=\K^e ClyN08dlK6sGkRiжFܯCdKnZ,1[=AgV4L +mPڮKY|}:Q4?  kS36ͯM`n:YhZZ|Ѣ WEpWf71:y#uZLO6Щq'F1w! &XiQi~b;''SSP%“GlsơtBK4O-"]}k {e$ K{^SʫCs <3ov:F/ < z&='pw#M=׸n|7A0=I2.hн͠+e/o$V/i}Y0G^N K׾5m|4"xT?/L("I97W ueҠqH3RYJ Ǡ,>XYN n3*x}jd,q'!څCPI[?9$S֯)??l^,G岄ܣg螜S ϗv[庅Hy. ou; w/xRP{'ֲE&-YM/vSD ޓ~/:^aW vm%IS,g<[5AyWjvH߹^؎e.3qka3"!'amgw%1~NL}+n7LPdoSApppLL6sm_<61Q]!G{MP5 rbtfz]>o`}B9x]AK8^KeAzQ'[m{mNMtoOE:32s}vb؂h2t^D ب6B!I /D66wبJT}᣹簮YMS :@D=^)İQSxdrZ)&+P;Xp,M*f#&ϓ&jv_"R=a a\-Y }q|r Vid9(ZĨNB]qU~\/o&p//,hz^pj #jw8+1ugZY$YL5q\J8T߁B"7w͍GR~ks{ZY\b_FvԹ@ KElG b__JK9J䥼_tgYR=tS̒c]C7Tn՜TSG>ڤ:8YePz'7h]r4_q H/)j 4=]A]'w߅ sڑic.]lPe8خ6RrldoäbL7͠ 1t07|AKם9;C*sk}ݴo✮n~Ա<֝UAѫOu0{뷌r?CJ1)ӕ7mRc:;'qaQi~>hj˟sI"t9g?{]Mz< ! X5z,b:N|%lEP.fvf;Ti$7O&ʩ P8h4a7in{ a\)rgW 惶8H:*̑9{(Fˠ@jM',T Vlp.ۚV4\7N ^(?Lg ӋuYHLR+{t4)R D@k@O ;`Hꕦ)ʪOM ~k$^Ub:4zM2 %P]hVz%d왶>:hTRŒ>ɮw:*y;I:釄MFz'DŽ5|zJ3fOɗ}hSlR ,?zfo Cy A{:W"O8\>W3H Oo~7y=f6#=BZi;gj:#/ۮH#6^ݓK/>XI+.\LƏĶM29^S-bfFYeK6JJ&\(7siPn:R'g//rU G3xSEc6_sWiX-Z^N]/vǵWIpբ]T$aW^ ܋Y%5Zf }bu>Е+w]+xzOyI ,~1y. ӿl ULQ߷)oq5;4{}IcRRuP@=&^jhK r7#w̟PRG%D Ӄ8I kk L2{Ȳ: PLЂ['%E:vkwiV]qzqۮg:<%Z5wbf}ҙ9n3LҶ:bĶW{\#<} 2b5Q6KMoLYkڞxڿmt0ar|,wީrD[;[?st1 :rrZ@T(`}CA'f7:]a%|~X d6d菾P%1ŵ nO :14@?k=ϞZHG:aDlg@{4-qޓ5vekT.dy*;b#c1ݛ#q,{3i@Oj=!G!h߰*eӚa4p_P\]+_Wk"Ћ"j ɖρ!|睌Y‰ 4CjS׹7gw8Hn'*Iif3ٞ%`D T*gwWmS*rE-c0 izS̳ccLX8WLK\880W)TؾɎ']A?jQ(cqX}g^J6в-uFS;r!CY.RjP[y0*9H̹:ukh8/Z>.G'uނHqqylV Qtؾv7?o'@콽I*Wlzmj]Ə++I;_ݵ ]qgM8&T%cb0qOl g7Vsp5%Ns3"gƁbgzNgpb6] #ijmT}`/e:?%ǿQS%.GyCv;cNtdZvHRھɯhw{;T˄[RR4h<}aBT( ~pݧ9 w3HT G:Z\.O*g@r;< k|V+=Mp?߹;y a9 FXyPI)m;i+hațܻOcS$d{Iz//Le'qarhPu^NP/߃mx/yŮLY!$߮U(@vJbH٧ ?2pNvo&~WM\}47 9 0[심9w՝MLC]nLn?ubo,όb6Na3?.PƬ^FYIFj0/7Qĩ^ϗ^#z~{;7Kf nvlLRB;*9W% b2KHx_IEO!e$%DO0!oDbsӿR3ɭkJ˙ǤAڏ tB_llJnn oHm. Iμ%jILOQL"G"Ѧa^(\уh !D0M-yK^X~͎՜ -%c(Dp,!r B;˭(D5Q:%$Ƕa h;F}1xfW H|:gh۸8Cv\ͻAXAck fx-Mm۽ +!f2ɤ r^ϱE KU)4Pa;J밖W LI_3Ď`ξ¥8U%7 qĦU]!WT^jbUWclL=8[c.K+ U<>(hݪ1;EKkG7ε#_o唗b*x·2&Dtȇ+&ab6'~Zΰi!0jU~^4^BcfsCpEMe_~֔wLIW;z(k$Q"\-v&w[)|^b7&R2gzNñuS?]y!F]xYK2Us]%Pz\tn&Ց٫.~%;A;?=CH:tA#IDWsG^Cj`'A`Re;p^QjI#:mY?+`XOv&c`5>OϹ>!Kht`7G7B Y~I#&2 DeW$ĵ!2k.Ӝcі[dv-ח;thHNϕ(ke~5!TqDЀ6Bj?wof\UP<}\Z{-c@io X;$w/ X)N2Ww35s[n2vv >'Z_/{Ll@2!s6J!ݺk3|UܷEC)v'G%=B@M_?˭b`dT{mz@ w,x X |+.ɥkcM(_Ľﲼn7:H~o4u ~zB֚7imp88"1 ļy&)ۍz☁vC/L {pJK {sp+v{;=U|wm2(ÁU Sv.^d*-u׺!g{TFŸ}{\ iG:TjkdC0?C؟'gSeo/6I~<.bd-qUg? {V&JEa%e|sZ/Y߼{G=Ǜ/1o廳Xz%TVC Td.c7,( ;!nuO!|`lA#)!=~8^ޅVՑhn{eyj1v"n/ptp-Дчdki# vNP54Jh8rMBGNZQFtjM/![d_Mw f|o6]e>{˰G?hl3)/m~{jD.Ns;#Uו^_OŃ ܟ~yNW /%M3w L_ۈ6;?&7~U9].[Vw^`d>3y֜.MٺcõjbW!YĐ$`8$5LǝX`殝[AR֡#hdmNPV~ Ё?GNC1|B#ga?{r Y}]̩7eº. bk"G2Hm" B X0 .5:NXfQT~0^z([;sAWB<[fBUObhӓi˶z11^ \@|Xd)ힾG@X.)L Z`wҪgvˑg p4PwL`ov wݹI.E%:؆Yx flv b'9;;Ŏ~ôP.q-\ 7 !Ux Fw u|l߃qx]9KG+gl-3g%tolav[pg/az"YD^tⴸ&B}2ѣ<-] nrʘ鋔|ƜDeZD`P@hazb s^ &%I_4̋5%03`?VĀfmvW(K]CMw Y(߂13loSeF.HG~fy㓤U-\O2'q5ôczaPňkO#!J_2SŬ%CE_$]9>!_/0{QE>' 2-1Cq+qwSpB¬pՆ u2BZLк& fWdv}y˱ez_y6~?-ͻ'Q{y0\|XE~Yq$"$`c`W,n38߻B_>wHloȯ>s?R]-]R(PLQdA]$͈Zw%]6?@AY%Dzp?nXx5㊹S3-7"*#nGy+  b?VdR@V?wk]dEw5s3v};2+`n. $C?pRAD} ?yl[(.Ǵ-IߍGQ}p^MQ#ѐ K{{sN&BƼpۥ)FikEA.GX&wy 8[[^VqQ/e]oAXB^X3hvifqr7Iܥ옹64.|mI/ R ΄k#-f~xzeTٙK5G&fM 6=%"}:msv[Vy^&2Y 1) B8M.`[vŕ:*m13af^v3d׵n C"6cW#E^_ym?t4G+cgc4B4M7/}tjj mՅIDG˄_o[?G/>Vؚ7kG6)0ؕ$< {.̻ 3f}$rt|+5dg$*B_\]*ɾ L{3aΓM |1n`q6$;B32)Zj~eɿQ~ '<^kY]*G:X 7^dR(ȕux=kYט-f{T&=c)]SRt6cdY.BY[_[\#%;]Y]sXd_T=%GmkF@ )Q1nsGv|ka ^KSOF ½"$p<<#b\yeƬ$#B=R|2`cZ;ϥPQϸJw5-+OIr+kTذ| ii%TE'D]0]F3::5Cm%Kyi$: iw+ TngfױT=wQ;'⽴Aз)e ua/Z]u;'bT#:t9q8)'ڛn.WVv*Z;Ko %?nP@ٝp("/mX!!Eio0R}4s qMzbib_[SlrW?-I]+5u[xoAj40g"5&_mO`:e#i3?Dun{ґw9uS}-)T+/Q6=Uq7Av9 N#22E H#HÖK~W>%`t\oߚZ3aRͦ#Bgl˙ 9|GAue)1q)̀/+aܽYt0ºo<gIK.Н6:Y q5ؕ}ޜ;،aTh !I Ԑmp!ĞEL[] O_+Oeʫ{\ПY#02$z{IqEO +)E?oD4hgߪ SѶf H'O-6c]r$ɤSSadQ'"YeGQ̠*=hvk_p[52U xh.:#?+!XiL`Rx0DC58 72>A(}KxA,vPٳII aQ6<hfHt]ᦢ;j>T3ѓ8nF"-l_tk]7 w#hy V3dhwljlR6Hj=ZS4u)3srدSh̴yLRwIuez&!n(m w, > 7L/i2ID- F!%;e̋Ec^=:o̸Ǝ&PkAM"?+,]A 5 ݐGc0& zx_ou/!)aT"=Yc7ح41V D~֧#}y{%[_4spC!3f#cȡ_u5Ckl'_')R4OXRbQĹvECqH;;oX A~Q5Q qmT3V${7M|U#,o㱊mpF§g!8\OQ`D=OVSi]ns>4O-ն\2zg\Y >&R-P*"9UBhë*$q*~;ĜGZs}Lz`9ο񌞅1YI\DwynP - =F2k sz@+Ka`Q|8KkhhU9 Z* . `.T ٸj4v3nHq z"憢&%q0sQVB VEKy4s C%+Q&Ο,ymKP!q,<]\Ѻ:ؕMZw^ߎkqYo7;Y8+nR\Y)|bþagҀœz.+Fy߲q7/#x<̭ >nwȣ$DQʳ QUc p@fo6"_oW/Z-/k4'Sa葆@r0۽SHz,n(woLwA˼\t{{*Fi|r2~<X`llK9GbuV{y /K8Yf+13 6Ej&ffCΓsY,folHt]4;w$l[ݵS^zsմ,v}K"w,T D7=q%YhIT%Y+DV{7ҿZ,kuh: ^#,.ߧqmr"S">8q4 kw뭿8g6|@:GNH,ENz_X\!8xu g!AܗsXN_IMUfs' }(ϭE#:8E4E>˴fwe i+Q-J )r#X,rMZy^Uo6m# us`GOlAۅ|&?Do͟FE?󞤛k~B\dwF~! z]t2K>[;>Q]Vewƃo}vMm]]2e[`}-kE(my6XSCV_l9~ .ͧ&Ke^2. ԰vGx̮>e 7mN#""ȀKMG//Q:v!{aQRN1:Ȁ  _c:(Jv3G Z+FArt7;TV[89]/ғ=fV_zFbn=>A Kz+u,)/=OU@v-GH69]6ySS3ĩ=(cT"wi""huvU#94Y y_lW>|Yfy=K8[ҵEMJXvwf; aӞL#;^sݢ$r0AA@Qlmy鰜Y@GWܸ2kk]~F bt f4 dk T;o$ ;Ev6ID 4kD/(=4 i/fX><ˆ\9 F3 3餟8ny绉oy%7bom'kt<{x| LAb^"MCmƼ"76T"HDk{@VRf2oi- h3b6*\eXq}|=?MaL"fjb> {p`ާbD뭞0M>k> ϓjK=KK͟0 _,VguPf?hb(|t%>b>#?OsΚ!47|"bUD*x_^E+#U/jPhM:eae$.[sL?nr8^uiaθs_:^hUxvLxraK J̖zԠ~OcoYF;y5a;$sfxnnSË}ҙ{ɟ%95J UW~iu{G]7Lyt6zs:Ƈ2Ib&TDD[g8$3db|b77&yyAj`$~`,YtR: 1$P xhǪσp%ROMWLm+|%gv05pQ5ۃزH o j $Oa+;#g N"$LYF͍vX<,V8-kZE&]hh4V>}Z;$'XH $޽ָ{vQ\r7`՟ޕ44;nDYa"Cg9Tj*&f u7quQ6L a1r8?_a9J%|/Qk$h ;tZu(1ve p{!r;į;z:WY/?ı_C_!Gc:z%㎽PC3-X=wo)̃`hDZM"3:OhxA`AmZ h=IhβDp;n3wGh` iD~B>~2[ rl!~+qN +Br!* ; y S '9+aOwS#w<>8 CB F("YEߢ"d8P-PdTJbm]M.㬨$z KhvzӕC@0r0]dJdk[xSbuj:=!%_`l}A4E)ǕخSc81vl~ qĐR"}@Y"Tq +H/>vǕX^Ah-͗lغ'>GYB{S13?h>%Lү< f/Wu#C~;EG>Aps>5ܩ m[d6v~; -O#Ҝma]<3 />>}6*;׬CWw{kiOF[3V)R%m9o:ή)̻E]hG>ǯ[º, OO9#YGT``oiKgg*K~siE\_@͛s*_{7 ^ڈ US]_t"S*$.rYp|fU_v*} "TXP>b9 .82[I<#&/[[Yq;ϻky 9#ea"Z<-ӈpY_GAI.+fcHB:~%Ǯ6DŽ 74a ! d% oM|B# I!'[׭BpF:KpnXw9ڧ; n&68s'(D =¯6QH^>2ye% w:~^*h:13{kih:mSa}>8l*;wi8^};9V/Nu WaB H0w2\ L017LVe*eB|)c2f4 seZ}:G%,1 !(5*uxy4F 䤕+C@bw = W ރ`/ ̽c4"nu3sGG}<Ƌ(Y2s2 p{ƷwXoęŽW?nhF]QOe?0QGmd%@h|2<ДD02l w gsB^knd i.nMLq pe4[PbX+|Np`HṗKxf -.nh 9?ydXbxBd!o?|P¼/pND3qhJuhTT#F)sʢQGi|X$Gߩ5AYv*{Yq F̃_ƲFo1w93oe+QM1QhL^m'W.5m_=^ʁ!jgB244"OIaUųYXէZPW zq[ƿU E車"flN-̤#(.K>d/~-vu>dbE^<>pp M|UT~y \! r)m+2tmUz/.SB/.?%D&V߰Dg䀰@0 d Χn~WowlD<6=/$$o4jk-mx9b alGאlMPa\r]e:ͨ8D"0vdRYYqfuɪq7V}}ĩba{x+y`X\c-:8 O7BoUPD. e}R͛(q锿|\l[Hv{b!- %w*vb_Pƭa60JlƒCӯ/];X{ёng!cup/Yc܌wܞƉK;F9JC?_BF#{+x79,ݿOA>NrFb޷@~mwUef<#o4E5E&,K ~,YEֆKDI2FWM.Vo2 HLvpBB*782;dpUU]\ *Q$1xNýj}VPNK-82 16YKAUxd#L1U@50?e$6"@ϨLƽeyŸ2*me5`Ke#F605 ߿3u)vzAY'-骜7_? t_`Hɨ8ːџKGo xL0dC5O f9:T?Uڦd73G "  #gCouJ9#q fIE2cPX`Hb%d{5_`fz_oJ/|):OVHt`*1! W]_VBZzs#Y{#PJ`} R_>vc_gg$llбeQ;r@y3㠾a>DlM9U @A迕#C!:xR;I┵W/|%er*SH<:ʼn|ؚ/-=T|$$-qw;Eu%?#_PN~,o4Tï ߏϗ6<ϔi|Q/+kT\Kh2TR~E?hR okpa}]pQѺl'\7d5?kA B;Cj!p-qFw)Lߎkm7nT7;K߀zd} &""e/xb4ՋƋEpBo`39^L Fzb 0'r.SҶj=[} ﴰ%(˟G┟$l_DU(/jW}~}Ftm_uk,GOb=Ͻ^qxj?@;co9m8x+ݼaj:nxM*CxC؆mﶮ/* ?ChO?|<ӻ>CWfȌOaxkq _׍?N(a߅;k]ތₔ`/G *yTqmkt5˝_ʺ߉i؉wac/mq~ga oj$3Le5p>|faG^CX(MF*izLw[U2ph$;~L}9O}0,Osc`\^e3slm"O _c^e69?N))zJZ/Zx|>]&m}kݞmCMPY\r, K `p/9O΅B4Y*97ZѨǮ־$cڤh^KDKFI]Q.YG  -a" _( mk-i{"}\X2N٪W!v`@p0&ӈ9%S"IB^*{6߶Oa3&yP_Jż`Ns78qg_vV V }

%1uNO~ke'({-oJo|/gCgL$жZ_H?MB+虘! kuFqp(8;49Ǔ CX#bT6Qt@QMSǀr? oE*P]Yѕ*ZX{S,VQj=6뎟 S f0AoϺ[Y+w3Ê7x4 W(sŚf87x&FNʾ)y㿲ҕF}R9 wϚϘg-4;t 4p {0""zv2@YZYekՙK𤠸%Ek0 06]cY51_n)2=񆀿`2?`M]vKY*oWӡ.fz9l,l>;XzF?b0wLQx5}Ƀ>Bn;nwKIRr羻 xϽ"5sQ9P'_y=nN|8S׊ܕj#/}ϵʍ&;}#l¤GŎW6" Al]/~&3@$H (klhZ*ŐOy;3C NN#rJ2KCbog^>nct M -c22¹L>n'K$lbo.sŲ,*Y]l '_hm]Vq+ 2UxٽMσZ<f[Cxyu~S<D ΰghifke)B?fҞWt;jߊjnorȞ2\􁭈)x ad4 OȲnz3i^V?Ú^?9xm$}փ-86qvP LteLm̙_jvXeRS 5р) A >WᆸDKs-U/T7bfRY w~q$;<&_g=]P_by4 tq.w}΃a55 "2Oh4FA0ŶFeJY*>EFwͿ>o9)o97~T/-nSu; %򆦰W:BS :n&J]hUM(C.` 2Kb]w ztpD7F*K\A$D)LXu5MJ@AϘ)pkAJO7 AӄŜ昃Irn1qMg=D/Ujx;`6mGMPp܋?/x+ oZK#TAo0|/ `o3j͖փ/X }jő9 ԤAAV[竗dM,96Ϛ2P&{HѴ6KR QX;0'¦|Y o#~T MnQn5EjKi7J *f6ZrmX,o|2(kf__y~7Ap*w/1ҘU[alZnH2Ad~.H|b1oջl Z\j4CIy.]/24)"sOM+fļ XLLS|&;R&t y"KW|w' {7j^5K缝2hW*ٲl x̜M_ w/}_?bI>@Cg#<ߜGYK.c\V- hpP~==ӫLg'xw >^ʦah}=ҤSv qjk<g萎^T\kpDw/z&%{ s9Xm#%vwLe>s;UZGCm\A۲j+;F?ev[{֟˕-n|l2[%=+Z{|WwvKrQS֔/tt(>)1 d{NT~;ݘ{|c3Ju<,%P6۵cX?$wJ+Eza=5 Mk }?i}GW`^|2;$~ley5/1("1ÿ3bP J5ɣ=\XYo[( :'ίlѳUc=,e}rZ͔ B2@` |f6?GMs%YZޚ&$L{eM{ڸr so|-At)A3ޢu9zgy<]BR/dUhXNVo98=s>G͉~.2 *"G?b[sJ1έ8?G˅a/~SaTڷ:,1N%[#u6}H|q؋gw>H5-.`m#&W Re6wum^,P=ъL+l~;m&Fwe/IqF -7~EJ9u>6 \6Mwᨪ- 9 mgU݆&:RMDl8&ޙ+л߁/shMw?LkZk햭>YҢTyr?hB5rxBFȒ5DE#׵\_en@ ɯ?64bFa?Gʃ_s\[).\EF0{:ƕɇD֠8A^AeĢ*8`,<'M/w[|c )ߧC&`Az'M ; "}/p8gB5փUEc%t֭zunq+y";Y]j~RkSt|h\J%Txb\S|g\=Oػw\[2{|5%i:IV>OFW78ߜLctEI{qoT7{qjSUaX&di$@0 ?Sz].yt|2<K_ǐo}S9MElTTzQNgdg RJ*%Psx> KNL]oP̹dkrNrv@'@/^ z_ mzޤq ^{=|Ѵ1r҉~DyOC="۬DoR}t26}_/cS4ƆZM%R Uԓml<~yu.v2?/gX{?JLCρ kAѷjjߖOևA/[fm{喧.WGI)fW\fb_3{0@OjFuڵg}J8P=1Y[OΰL*_^&B| Ky.T]\upF]S/.af\WК44?4,hl׵OX8i%:tڵe\#86|ŮR>REbSa:2u~gJGχwCT -2–ai؟[w/oO*cewAya; NY[vx?nW R脼']ܵsI@*+ =eB;" R5\4$*{R*N_"^Q F2!{4E4~2"]A9gWx1oyh~Dtɡ`)foN\ׅڠҴn>ƺl%f~~ױTc˔%+.A7sxH.&xtz~(=&|MvW(7J~(ÎXCB~MVf,WaT"mS(@o@U͟q @yU̩_s?_J)-ETpG+9)$ӎ2C_dg@2yp?s=-?z!j d2,f*R8뤖vm VcV|4Zyy֖)2LJC/\`xBSLjbocӞ *l`5n}&색Ab7NKe[Z껡-KQT$9'"Ֆʵq  6L?*4CMU}ylK}7-CA^aL;FtF50բa@͑d(lEԞ$fO R]98)2F姞[;oCp5cuLsM y?t_Poi#gN+y{h!W#QHa@Ȕ9@TMA= 69Yth&0꙾96\{ 7bxq-ll^|>=uṈ(@13+H&IAkxv ,ӛN~C{Rf콖zY>ZlX}W U)X4 VX-8_4Ƿ$iFJxuzJ{aruRT-_g>u4'>)%Wjg H%cIjnGoTP?Ϯ^}{{?R '%T%atQ} &o |lXgv v-OE?d,Q׺#G`TPms!ߔ gI:K`A" "(%gJn-RNrua5QW3gG4= 1<Z2roYg-p;Z0ݯ8ELrŕ]7gՅ}Z~sq]ѥFו~J+i8㡓U0W+z>+ׇ&G&EV_!1l(?^K%nKycq9Qq;*MIduw;=Qu閘2`\8Lwz;W cBUe%2dT> Fɼ>Bo`jBYVH  AA88m*A=,I-T^C⛥3'sSB;>*TxmՎBZh@me5/ ϨUQ Y^̀|ѱ%ߪܲ*ȎDD i!;P:!u|pR#4@Qq<iG #ݶCFUel+9{Krs.90tc\#Ou7K;.[{Nyfeuk;v|wvDyW7+ҹwEphdcuvuwd{QM^v1y{u)hל{݋G(\\z%Nw1㻜KMm汬nmE[MV%`%RC0R 1llRܘRR ,P@c&qrH˄ǻlޮuj쒄(1'"m)QX[FR_:| {/0Є)$TN&cXiaw*dt۶v J5$iQR:#gA7Ow_~{8G~Oh2vm_3 6UrY6a3,'M Wj%;ic2n^RnHEЊ1VniaP~.SpOϻkw\k|{뾟kΠUjBĊ!\V aPR݊q&[hV:F"ݾ:w\h^섽 SMrHƤr ݩrTߗzen~{/G̥.]wc*N4RXK xQ ۥ%]廮_OӰLwtNt)W0S1x&M4,:{wtR|~-U|tww72%wW=7IH~u'{ļ. #i ˉ:Nn3_.WuzE=~wN_~v"+XC+W:޽6ÀPt8hM;S__+ܽӷ|wr) {wk{I0uqwwv]ݹKڹw{F:q:ȨO)0IT*)Zwr>s5ѷoɭ}Ew]b K Rͣ>g1B0JDJKusw+n'͉b MUn۠H&-|/.+O}k u+&P#eȠ,MDHPFZB*.y_.o;!Jzb2H|Dbi6vӾ:y_;>q3KB%}:Aܜw7o{xvP =.=}u9}{Ow=wa$7w˷Ϩw5paaVW:‰:*m7M&ڷ#l02ڶ"a QUDQiFPә'h+iGt|ǽ쏹o%1vv(S2y*HK!+trE`Q\R. L4[&2*KM[O <14,H9$Er޺o; "Jq+)BM4;MXEr( 5G.pV"hE[a"E\r` e ӻń"][ t[j  ,qըX*F& `Uɂwrӥe)q bJkٔ~bqغ4]w!Mw]Ke""H\pl9BƋߏ3ls!+eFZV(bӂmD:B#a1c!EL+ jPA m`)#M '%8Aщvd H'+&mmh()RVX* 1dC n$P$!]$ b<p){H|d&2q], r:?_(B~׻/w<%]/dӻ.q@0Jd(2wuXkUАD^]`}ڐv\=^!cdHPmmFL+9L(Xxm+QSӢ:1ɴaP*]vctz7RŬbZ!XF5ԾOz|ޟN(P# j0i9)b.%-:_yzY^Uוtmz|^zׯ7O_{'Dx[õ/@`LH.,AȜJ#\Y[2‘(@51iX∸n6&[hqYV$*h-9ʑen4VFevY5d<,D{.y{{}5Q, EAXu1iXCЦ#Ũa$lh#I!cAxWnݶueKhDXn EjۥB,e)T(.$ĠѓhY6h29f$"W 0A᥌,b+Bh ljjS9!o.{N;Mp ;KB k%"VVL ,qKqL˺2S+X;O&h22W74$ 5QGe4S,Ot n^]ߟ=Ł;c`Wj&!Ơ N& \(LpxpЂxM'm]\1)RF+n i$wm6 X5dV1JLQ8(AëEVy,tl)@$mNW۵n7RBDЮ)d@cS)Y7BM01%EEm4`@wаKvTqJQ1;+bYJt䎌pm޽i]|F![x@mmڹ &r/ι]z[eiFD(4Hm(+ûZPWm .Ejj(w{ч˴=<԰i7(8v@&L‹ B`ӑ(D;sw_wsMEq%P&DAT8| gȧn,m\iiH4$(ZE$nVG|oƕf~7y~{r5e#%܃n4餈{Ĺe#=`1H!1bVb ةH*7vXVڷ@ұ5"t4q5s"0B-ۓ]5e% @d\y1;S'][#1 " Y[cij6A%V47qc. v>y_vdm "X òYW>{ۓuLSN,[:UA0Эc!Lb h/]wzݟyNgXmz|u}J9|}w:_|@DC,DLa EbWi)F'qLq$Ct`U1h)( bH׊]r9^eC{ogݱ.1K+&(AmX2nB*cCtQƞ.Qcw\`fn 9$ۑZjU][S\vRbPV21n!e]&ٹŊW}<gu:w}ۗ#{tLh]571;ӗ.v\!mCl%H $+ q"c4`h@ J󻻷t.ϻzݟw썴(!BE .+J:Ww[(nEt;w;/LL| wn bcr,`*6#'`,[itQLLGbQP4er`T,PV AK. ,% IJ8be0-8^B tm(+)BFrhdhwHhQ,bVD+ o.]x]t};+ʅKeEb+ct5!6blpV$DNTQ6Exd`1]Ae b7ہrD2 n&Չ,GfMX(e`* qi2XiaFV+C&vKLL ﯏7 + `b6 YBab\wn !Eva7M[NN#m6wzrw2dﺻW;9w1 MXRY4`Xj[snш@V$`3U TlbPD!(dڱxn!R&[r($ ڙ\B#0i[q"VYPb nE)A]*[XɃbB mXu$6Zu $HPHDL p&i;RjD2 Y [hbĐRZ#S1.\@7ALhX!m18< Q`i.*t)I=w|{/{ר}j6`2Y6Li!B# wŔȩrLVhӼ8e5y90*Nj$Q44 4BhŴDW#kcN0SPj<;܃1 VӶ)Yve<9#dJ]:c)b,: t.b px2ф1Qk:W_>~KvT AlTQ@n v(+g:yUy<_NR5h` 4ݾnob%K|ʯyXwݷmBm6 8 be`)Tm@BF̤4, BkXt(X1YV+BeKvPF2yZ1abXdBDaL@L J+liE(9{]MX bMݙbԶ!Hm0iv1˴eI`1rS tjAxu1v$+@۽ו9}7Hq"dr6X(Sd}_wfBwuY\Qhs=d]ߞtm`R:cXV,e2B`t rMqQdQ14+` Iˊp7ˤ/Jr{=f>^~.ݷsdk_piίer;]2KG {ۻNs`nt8_7uG]4s\n]ۿ??~{~P[̹]߽z#^{+w]Er+~o5ʼowoNo#y|Sa޹{cWwWG \cC|dl:XP< i?NvnsNtnsuvs=Crs{Ͻq1_15zc;Gw+Bl۹ۗ?No~us5r7 $]"~8|sr\9nso5szλiW$ vy6t'Gxzkh6<r ]w$ӲkirX{'#S,&Tb^sV1+}Bz.P=VkշkQZub&{{,>{aFlE&'˘bPY#h\Sݡ?Afugfi}ub(v7|}bTcyh0܈A,ǗEqK 9/3,gJL^:geh\4) -&藊ؓ:oduGr"wi OaK,Ps՜y';#  $\!ko"h0mv#> c_x`={r/TYou[Og7͘ʺʉ+#Aw(henx?ޞ!T3EC[pXjk}z|m8o~37)A|/Ou)}=b\U5j[O*2 b9 E`Z%n/Sۺ.iZZP-/ا~GB*(?Q;~vt~>Pkwއ"2&OM\GFeݑ`&@†c `rS60b1ԕ"6*4gS𻽋mc2 MTk۔Qkw;,O(-zBN5 bdsF"DCPUB_3֪ɔycY|fTsS(ɮ' pZrŅ`tw{){;^/H𶵴dz;.* }#ϽݧV'u8FL~c6TӴm0>|;} Ӭy5jl<=.lijV 7m4۝q=D떁G_~J8g<ǖ9oe>qFo^w|*#8#2O[k.%mкboe.Mz0ߛ8׫lDmJEhJ=Zpeү%tfw[A(vH@l#&|晏7=㟄Z_[?ANr+ܚ׵hr/cP\'yi<)fxr^ceb؍!Yl3+R]\R-^f\Gׅ?#f$0{ MWetoS+vv{Ի6GH,:. RH% z[сPUB) bJMV|֠Θ/ g^"_lsF}"hzgfR,i3)tO7'? [ӰE{;Լu J_/\9{ }{ tX~4w3&M-ߊqߥ皞>-ρ{U_uK[ĸI@ >// Ve/fe@7x}x'8ssblא*7GC W(Vl9w÷+DVKv3~(JuĹvֺRzu.,.hο)+R2,囐XoI9럥ɥHNMä&_|ȫsr;wчWRsVX,/pIњZ /2aF#SPVS?eI;ہ?]*&).\]4 Q05 @\|u:nr?J45#j3LL&ɈvyNC [4>JWEK^tof'zXj0dVtt~26ߧс\8YR,t[_"/XعqTd |H?م)|>ɒ/1lgV)6r/Ûn}v:nyWKrȦ% T7!ȪpCLѝڔOCiy|+! oA>h[.l׿51ja^^[ҫsy8ӳY8o]J=?ÁDUO.PoW8޷>gr-l7tW G0xO~wzU7ȗ/B`C_[9{s2ޛ?/I{eoqJwr=Wn :(%b)~['s{oqGtnbc;qVsQuOly^z}3Wy^@齟z2:v,*Ew:1SX=mm)mx&JQ m*+3NxÿQGq ]+˝絵IGuQ1G ߠiKZL6bH;w|{F9Pƃ$$mޑIE7v%b }Su굙k$θ rFj*5M1wʁV^ uԝ?M$[ճj e Ov$ j _8!ދ)fp3A}=%JFkT rDH(& oj,LJϬcY_ SroѲA"h8i%R}MEĬV?swxgmry}AS9-[|:P5K(9Ep2h;EFyn:J.;wz vyxm&CJYxؠ@7ooôhhPMGQ^޴Drp9QsNvqj+ü?Qw:now'Mvgmp7lޖ}|+zFɝ%KA]1EOqNߝ"`ĬE/^|R1bJw]ڠمs )Nvdw75Px<x2|޼|[*&hŌ-)o>7F@h' 7k-?z{N/GD !Yr2֜> U,sҫ^ vS?P#*QyVp۽SW=xB<(::S\rS]&,!,RhX\&|b{ A] (w0P f\OܴIwybLd"@6f|E b@wsR٠;Kd'l͙j+[eR[SiT/XifgvK*fZXi+@ P(&0֍h4)41Uhl4@fB֠lLE Ѧ2d(-uhֺd]5˭ёw#6]th7f۳$l]Ѷh ѪJiU*JEJإ6@K`(RT@ P ((BRTi1nR@EP/ G֥T'9zP%*O3bE&$ 5$D" ("P(@@R(J2!lI{H\FER=R+YQUAIJgfMZiQ*%YGc@JTRU80DzIx*TLڕkOr>V|m4S]mUiӷAH (YhMePU)DgP8wP)shBTGm@h PR)A@=@t`} =4 ֵ{4S@S ɾHPT ѨRh4 [iP$(Jƅ 6U  (>, ( TU "h` b #bP4M2h 44ИB`#Mdѣ#CL!42 MeOi0'Id#PJz$2 Be=&Fx(2a4S=L C0&QƁ4#hhLhh`L$II BbT m=i @z!ih h@2&FL4i&h440ا 41MS#i6MMizM $@1d44d 4diF4mOQ4F#@hzCi444#E$@Hة%3YMQ R}ϵ+~{ϫ5PR,'>>mc?_-U$)P:A!$ĂYL뢿rżOe^WE& C9OǗ*wϹ/??Oè羰s,}i{%ExF2P-!tw]3lH2h&FX6|}]Bآ\*VF?gp5˅y~;.s9Yq E; P;zBF$LQ~̬U@ID$oA |K_O*j=r^&MHVO@b2'#r c#ͬkQI&j5Hl9aS -a\pS Lj49'ZڐŢŋOŠlEmcQ|~u{]۔XBh1")4TiQ4mDY(h6hIѵhklIbc3% h36*M~]+MK$- rAjm#[0j;?oѿ>h}hA9jwԢuzK N( \^s HW0-I*ZW) %B*" lf1H.a&rG0O}ekI{Ng=3{=G|.$KK Yc-Ydq[k}/29T0nB(j3lҊKV#4klLcp&' PkDѪ,&o3_dhYR,`msb@'1c $G.ƨaˆ?̢`N:oإK~=݌cCB^rA?K#x#=/΀N?{y0h 5B>Y(T(qk$/ 1 ]X~vJ쩆5:Q}`2fm[ImoO!nlO웡.F{/{ fe6w 3fa2lm]w<'CZh3tV̛[3<>Scqc|̞$"hYK!"' cOLy}>}N.0"Դiڍm7(0o^G4Nv%LP-&*N)oQƪNWx\#N:\3 2] cfI%9f]FWߐ }ZEAEj2JJL# ']5`P3F% C*3Ulo;g}~?dv~,(f# YԘ~!+G(MFq'iR!〸.)ʼn\#۴?49!a_QY)~S^IIQ@J)2*AL7bkIrȑG\-xPDSp-'}})砨? G/nnb1pR!QJ Q?ǷύJȿL 0ӪΥ33VhSl& Ĝ:+~ٟ~a>ZZca9\7Hs`L5ښr82 !?t +1  `=T ,33P'H Db1~vV&,${=uu)f|8 J㿸|=, j01p1qs &YM@] ]'S)2ScuFC&}><0#cLRDk6ӞXus> >79OH7tOWVm (ʄdGQA1>HW {5+OVۧ(<Π pc;,ChzaXG)J@!X~)xw'V[\s'dd$Rv>Փtw]\P3@wg@wwQ=Q6K1^W&!?o!⊡VLk~.u30|9Q4{{vaãz+2|;O\6ulQfMy]d37䟏͒3(EP6˕[s'`(rbxL*aUA\5D%ӰoB`켕8.x{}>㇮4,8ePk9y'}?;J55L䆔IP`؆Q#"6@B.FgT9anj^Y9|;Å8,?2r';EӴy$:8\l]E9_Hv"? sB*ԒZHUЉ05/ɛM!mEN0w<8꫆bE!>QS5ϛ?,/~Sa:FKP *`nʪ2k\ a r(w#MA?oydJ8~˞܉%丘J i4cq&b8p$$'}P/b&^a~R3tp K&EҎ}8~`ȥT}˃\YB$iZ-8!$LW#Aqp ˎd^c[8>.St21}s֙ % $afmQ Tg$2ֳNxGwPr(_ zko& 鴲09;' ہĥ&y3|C$:5,)@͝D>.LqˋB@h] Or}!.qzna܏$ !&ZW8*.dLgOBUQ˓,l<#>HKBg?Ov\9;߶O1խÌk M91KfEqEȟ>|_\zgʌ%թ2/6=}=a'S) 1*hܞp&TdC|NRyGM>_YLU 8/a~\jBBC @SoDڀ[9z AHCM:"DH ,E6JD)P/ZJBLSb>GVx:C5va>oL>i~ h|a۸ L)׃ QHUxfI;xcjA692!l9a+kdyI+&[IE*f`yu>)JB|yԮ$[uՒk%[$H`d`Xu*Cyg|1PACQPO؛CyKy<ãp'EC!]X:R*J, *`2g=7̙BYRERHL2*bhd'W==GToy\S'7H>@6* a.sx~9K  h]&2ii8Ў8'{JHHr=J c-[ҫ{|I@X(tmlPH6C4 Y6 W u/\+™#I lTFڄP6ZUҤh2(Z%j6jUbD5mcm*$[_L!HUJ%P(ӊ[N`bJt&29)aAPB(I+ 2Sw?W#b=okU`ْ&?L>(~vS a~BܥE*dIE2>Cvi mlhCy\N1(dԉ ”6͉2̨6jJFRT,@SQ v*Io2fm8WjI@9 A+Gs{`3ܲl,ʣ(^5MHgÌٟ =|z~IHD\3A'yivG;{GO ͵;bvKi ߥuk߻":[)^}[(~U4hf\B#NPHmo%' A( @+Ц@fm(d.>V-VljVFf"# D QEF4b((i R vU\@QIP8!"p8^hӀrޗϏ`d@&=Q$Di5V 6صIV b5XbQYTwkV*4ń-ldF h`!QjШRBQh,FF5IQXlm6-Eb5&DTU2P2Rwed"P7eTHLPL-m:5(_g"NwpDDxȼ4)BTs;\F݀AEJQA +D6DDR WiYS?4s=9E@g}E!̧2UAڝp<9`$g}?7>l ?z Mi|\V=1{ wU08t鞨=P L9"Hzwӝ $v!i0@Ge挈{7\$RP߃_|eFVGŦ a(E^` YY$PXT*>З~Ҭ+ o??ٛv<!sk=\QjF F JS˕xwX @ ! >bx<+1U̬&A..( DePYm5WŧH \ |PEs==Y= 4ȕg9n//W4U  $iUAiEPHHRNH);-jZ)rN]iُf0)(3"BThŵ(RR Amudp̿$Ʌ _7U^@Ce[ūu>Xr^6g?_| )p&Aj-!V)jjXVοlgϽ=F5XVcUjCRm.u>qd8 .Hՠ6pxzLDJ Q\x`pD琀H[p$GDs<6pH@C1ÑUɛ"OOـS <^\^(q^=@ T %!pPX7e{={Bon{*{> /) xT ,u SgR5 Įt~{;5mP3?x!>=G8J*02R,VP, @s7>eC57a&H,ߗx-'\&]>r&?IӷC?za<$Xf}kMr!EE7wC<;kmC$%W݈_}\sj,)PDڬ#]0u˺HAI' % E#C`TyDyy JltA,ImatNǏbAk맊hD flwN6%8(O.rwT!k]y_o ?~]d!xGl{Ga9agDwxedrAHGn]lX(uRRlv4RBKmrR]0)ȥӨg6vegd^CxB5-ӫ^ɨ7/'ޯh^Hcc6ZI {tO+bU`[މ!ZG3J IJ=V7["<AI>O.Z2 @ΊbXC"+8!$}SA ʋYpK/c zTc$យG?Od& pO%^[mIK~8גc$aYM{$:qՁAb o޾<  G!h]T[G3%\Rˮ&)l 1'2 >,`Q/w}rEdg(g0K,G|bNVl3ige~ ϖ#.;bZv>E9޽spl{Ώ >Scd;_by>z>~I|1y%6Xlwt֪ih7]ec9tqVr8eM4\ϩ\?KyYRֳlP,(p\4d}A7{o5 p͓0Ev./KE @L ֳ͉X~z\\q\g{O9:  &`};gx'kTR|Cκy #)ՁhCHHDZm)YP?RKv~9X<>7JPNg "Epc0B)8cЂ[Dko9owO|qRYEq" ybsT' :M· .l]Q[m&l&Dqf+.s6AR8~]πSbz)sDXT506RjL@fU(F*<ꈟ!q=2vG~HL>>sZ_yyz^w{e݁!3|7@*Ai BEYz͌&DM>tԽ9YsvݿU{Qޤn!>˙eE>J%$h.g?@)b' )"k9÷6ǧϵ(;=aZC9Oy&M$VJsmVL'MG\zG2AӐL饈U`\đ"B˓iah4min6Ec1G8鰜"YKvfHad"mɖi˚$)-g8ءPH9IgcHPlB q]=JB2r b& zRgRA Pž\v=봇9{dNvMhq7*snCD紆԰TVkC!rzsK,RHL҈ĀVFN9y^h/ϳ7?IziǞ7'l{\<~ǥ=4>,T&ud#.6zu/ N#?O UM$ LmͿ~ EFd=0"b_ߏH|Tueχ7Y)60GJg-tِ155blnȣSz2b^l36Y1DLњl9bT mD7aAMrMc[KMܥ8xGbhsUrH4\wI,ٙ ,*ĸ8:4r L\%@& fUR3VdYЁ切y7deu6AUHX\@dB*ֶ|y]t꫕5ETUiS$R4KL3@~fWwӫMfƺѶl[ma\DR ܱ ?7N/FaĐat#2\٢U_Sb0*+b;U P٘ꐴ7mE&X>Ͱ<'昸|{Ж.F_x{~?y\ۗs;z;v#-3қPSG\z\.i28{맶fm->xEEQb֩"׭*4W+:mvQ\#ꄒɋǥ$2*㚌XG&<:wqk&͓$$-/3C+$ 岗yx">_}Q_/Tli>]:WBSa9AqnC?}/I*~[.Onҷ9T/^?,|٪%VClx_ǯ9<0G?9SSM2+|G`Udx ]br,cz+!A<$U1\)$%HIOh"y j9rH垾F;ϛ}t䢾9U\y˯Y=Nj.Zwi8wEr!{;{u&$%ՙPjݡTqY~NL:ɻrTXm 8mrHDGsoId$pȹĝRӗs3^o+U$BBr4^J*R&(M9K&sqғe4X9۲rĂ/TYlUHVAZf9 RuTID `X]b ~n;1qj?>xnO\=) s2 sy2i(G4s[5AHj7<>0.ݏqFT]b3fm/Ӣ&9o_wRyژQ)UWh!EV1 2L$pOߙ؝ ~y ٙd@9W3n_&&>64(ܵirapn7\-(Iy*=Ei߿[\n&=wտזOʨӶ$oSJԌLE9VDm_ȜV~XL3dtdwzWI3=gQė-kVy~/^iiȣ'%UꂋBTK)[P8 ʼn *پPoky<^Bٜir&o{މsƞxx-6vJU7Nӻ%7z7]f#Ҽw?7?ww?IrڅH5ȺO}SWd...nd׮֋ĨunKBGI51qo7[93My dr:قgY3%!( 魐]CoG5z]pSl۴zއ."'ϳ=Z˕8@tQ ے:/%wꝿy'nwH\$;=i( ?16oHid8z>p^CAL5?9y)Y3*GӏH/o8kš)عcOSY';÷9v :q<*njq~iԇ⽙vuVkB%rwF(nStiv4&p t^ۘ]*:KrCm2ͭ`Iw 뱻@Dxvd%ͤ:HBd$$U[ jlG.XtFv*A8EVjEgm{HkdC}m+y3ڭ/.[>KEm5K/>o;x;NІָJeM϶w\? >/Ċ\77GG 7)˭Pa搡 Yd.#0$Ia > 36LÝ-<~C}ɅIon/4¸_CÊ-x'KtH+*!9rX#y;y׷&q Y qN"I~\P$_~Wɂ.wt޷p59StMNf5dAX9E:9NMN1;ad,ڹmptr)/\%VHlÒpU4,!_=ok|ߵv𨍌 >OxX#H5e;RW-RJU U=Z*}@d^>fS !weˆIzTJH&Ye*8\RAN^ֽ<_SnI\뜺9ݓ>?? C9G'^\ ^SS51jkYFdc^o&g%R4c1d"QTfkxD&<.PdގJ?:Y& P٥9$d$qɰ8.WI8${[^mݷ`/_[ ~$/yэO樳VEϧxE'6i$S#CI~޳F!T&|N'u"*aEH5Mfj+Gg.aE)χ-ÒPQIhsG(jGˎN-8_NA{xZ_քގSG8>(޿9{G{茫+TI:x]4s9ӚHQ{=ܻPK_Q]1DEQ-xNQy9]Nq蜢I\|=? 9yt@S| >@ ;ڜιI{l!1^p߅ԜZGQc $x΋ sA~% I ? IBTOQ8/>3j<;3ѯ{kWwFzPdJЬnQM@(e0{,/õx 9OO:?'6ߖ g8%pTff!qg#]1$\9.Q QS!ǎW9իXI&#q\@|T,\IWVp ` HBDS"PX )9)!VJNL&`1YVC߮b .@W_8iYIϟԽ))\qDEDUO#sg~{'_ᒳVhI)RPZB7P#"*ӭ7`G۲pY~M޲=,V0-# `NonĘy9 hͷU\Q\d#ض(ޑG__7 w7Eݍt$ w]y{Ss*(¶ɒYyܦUntDU*n$%!dP=! Y(ү)J=~,ey&iDԀS!\:QAT:^\8 >-oCw1UE>_w:7*1W}R m~Oˎ y1QH ;sEϴxȁv|''oa4S⛃!"2Òk 쬑q˚JWw SBIR*}ӌu(M͜$~Oޘdn1q;KWw6 2YY,UGz+0/V3UMLI9 ~ {ZrG}=!ĎDT_$5fsUQkQ Y78߯z?__onsN| Nj'"!`qi?~߯SN>O~-۾wA(5VBzʱfk6,8L6l0)T)%8sNXTgŗ8vaɊŘ,"jAAp;#ۯξҀc>Ѿ"}:ERIݼZM: 9 I ]"B)%N[ζl56b4QIT&R,A3EjRVQNP%*1pTJv <{w1=Y$ws$$B38rQ͹uP6c:E^DR9\ԡH$(Q#f/C{ؽ;}=]p߃\bG\Z;T_yy{znޓD]ӼO7<$Ge4evxp7n4\O9 P/psAd"$`ɋRh)˗BDõfC;}޹vq 8Y;.s)lz4u2ꩨ&#"aWzjidNǗ9]]) Ro I $f(+y _=}=9XσvGB{uX )<}pPL['*fqw]ݺu;ƹv&<]/ ?MU( W_$}1Vwi3<&37L\C&/7_3#n.$Wr$MdWgi*Q:rv$UFsx/}B%[ԩ\u$ MWqGƜPU0;1{ F* (Y1J#U)'RȂ](fKl LEyӬ<7tPdV8:W=;aS Iv㮻Dɝ+BKaF8b;}룪g]sONuQ__ 9?=n7$! ( ( E!Le-楟T;ӏIi)C1u(3qsvw&b_qQP[X?A _ȋےWD LZ @MU @-8SN(:(+!KRp~Y+T/^Xァge~Sڞm|:⧨{& ;o .cY}int9vjM7n]ibW rQ1PFF('Z&1b.6zCԯkðD y͚ʠ4#fZiX+ /mk) Q7 )k8bgFʹEĸkBIgi ! W+0U]]vsp$P TT)h!WG! ҦbR@\IjGF"8#0>d<'F;UC/]Op90 )螾GbCxB9נH=pS!\w>cӦ~釙S2׶`cK\#O%l;q{o)utXxhwO:9 ڐpwvwA&s7 w>'5r2kuλ9nvSϗ+;.5tS@UOxiәԸ'ۛfu0IΕ*8*TC>UbŔ(8A7wR!'(1hË|{w9rϢSB/zo[xT $-!חp\-&z㊌}m:)$WÀ"r0b&,^yz93+>c=pFreI&ɋYwy`+8o\$I! ɒ81pNM NShoq5}EuN"K&)U4PPU\e*ρ$O(D!o6)r12Ir]ëz5ӕ%;({H=߀W^q>sgW%JuB Hi6\-Nipp lE&\ƈ@A9$ IB_T] :0XK H1E"U{[i(\ ׷N{oaOR-P/Ejy%Ä\DpnǞN:NsuuOnws9t.簇 |^oOXM jŦD)Y*ZE@VdghXW/ƴ`T%{sJy=}~_ØzvHJRؚ4/ԯ9+!B&RЙPofyA4T\QQ(Y o4nR[1ds Qpߗx䔒6))LA; *H3bs9h>_m 室KZPn"p @$ $,ѓJ lX۷}';LPUO_ad"fX#,R$(LX)71~u^3O!T@z6x{&8pNj! B Tk32ը^TՒ8XQ'wU4)KxǯO{5__)8xs")FŇď<""ZN;˻w~WTS 5S4EWfyHz_Ze^LH#yplf!y'b%9v˞\YuZyuxKLMty\Ojx7qAE\C[IOI<8k)߿~؆uWۨG\9wSjÈk]5ȤΖ'u+(]Im Juv\꠨齻 =g3sd=PAݠ6t[33D'1jxt=}`,)~?q pQ.( (s9s1L/NN9=:| :펓Ƕ7\<8[sd>g;+x@dM=[}֢0O@7n فKQvIMS[kF!+i|t|]sPx%& ivなyHeTUHy'EäF9p#hL^Kh2JmY\qpۿa24ss1"=SUT8^UASS:XEDU٬Iy7lXlkH̾ $X1 {FmEhȑ@F FɱooWyW 1 YY5}fm&IBn)4h&~r5K?S|~- /nj/uÝt@_e4Ioӌ|y 1c&]mA_o2ۻD}0Iيkɕ`nߏ^b~g0٣I:[$|\_oAz/ 믩y,R >/}muymDMEUf,!B[_^Й1s\E>\.O D06;b__'~ b>ɀ{U4}tp9q8 .pB8*4؅iv<¨0Ev >|AD%&$Žr ;ȷIFQY#O۞F23c! =^m$LTV57bDbN v5 %4L3'wiۚd%rJ`dۜL\Z"&F1}eoI@lmcI"}p6cA>hKIcb~ȲHnVj 1Yٺ4U}y 65e1 wv$w&"6, |vnc4cavS}w#`&I˲FR`sX- 6f2<ܱFrƉ1F[4hp~rs5~ JHEh6 B98&\oyd1_ipiE*1[sQco6HGnxE)IGdVcAr C:ۭsI櫖[\TI=JPSTRuI$Z2lI _쑤ţ~ov64k~+ߣL_M`F>*\4ɯ[ya7ٮm}bdFlhhђƵcc_RZƢh1&"/!DCKY4E%J#bɒE~vbJ1#b*\}7~=k5ˏvܾ˖4FQQIn]Tb/ۖ/58!()5ﹼ)Fj-/lZ4HRPb+ITIF \-O[\imoW6.ZoVX("a4RZŬj,EDZ#Qh+EX߼W)1TZ ,h X""^vYݵ6" #h(I(I4 5*1[Ur,WW(IQƿ;nXDAb1Fƣ_~UR*ƨ7t4-%M?.Bbkllh6 7s_sW-IPѶ4mF6y"PXb-[ sc22[bXؒm(nlTFJ--w! N9>XLr(cDAh -`-_ň(r&[D:b66ѢE%EضѱhE_,V1F+ /\Xưɍũ67UōP+sZ2Y*Iyo(Ězcܷ#m(IZ#*k$Фm5ɠINlZ(}bk Ib k(PnkrƲFƢ;,F{^X6XKHjcQh**BPV,a51J ckEXب +TMʊ6i-6ԒFo{R4!m144lT%cY#675PlIa6e1F)Ehьhs\hF2Fk16 55J**6ljFAw\EڌZKFF}>0DF(hhX[ljU-2H1QllZ-(͂Ɗ*6IbTUƒZlVXرDlZX"Ė5DF-4\V*cY(p& QEfAcF+FJMělbM1jMTU}wXb AZ 5=hƱPhhثƤ&X-EѠbCZ5Q16JHU E +.j2EcbchזQnŨQ"1b5U%a31AjQFŭEb5FdX-XFkb5F6b$Y-9E&Ei<4X&bU4V*6Ѣ (mFAc@~utQ4"5b,mc)庯D֟-bPTisI-X-dE*6ƌlTF)"5F4&[_hWp?9vWiPbpTW)S׊w F5Z5FmbTX%QFZ1h+2Ai_.~cIA$fفWHd^۞:_'+/yV% |hA8h5]ucb @ xe HX"((李;x )a\@A *%T9H"rqEH!@Q} S@CÂ(o  (Q80P^ȸTD @AD务"J p XD:PH%"@!"*TSR(ۣSMZQE60PE B["w"w@""aDEITJ J&B#~T0EPEU5%o *P>Y('\'GP H҈" P ЊʁrT{E  AuyT^D>?s]o١@H D;E@ìTADNp>(BDDDQ" *e݈QEd"%  =-H PEPȠPA Y*?7gOW>f| VD5T PEE=*R-"@*GO] +( QHr@(}f0>Q* PH8@=a*/7 #J(С8g6?>iCxQR)DdA|9Rw~Oy. ⳗiV?67 ݗiÃm-V#$uyGH s9#9 x@Z^ 3z)I-f։fI ۽yÜƑ;vmgšvg -*IfS\n@2fՊG>n׫wZ髒$#f6zi2,ZⱩwKW9kXBe#WMsx$8.߇kmSd]y-*5&$ch\呋R.Wwkm6IjQR!mۨ1p{5\ţEwq]"KynFƭ4`$"11%(0f)6-ܫqHj(ڋ$J2&ckb!S#TTk&k4`*2(.Q*wWLfml2lmam*;sY-%6QlcTBiEQ[(ƶJg%@ Jb"|z@A:ϥo^H۫EfhtJt~ŢeO2Aw[߿W7 w4k:G7DʼYس{_(ƒn]zF\}LWNg95̚h[ H0)NO0EysLD|iEniPsfX]ukOHky4*E|Z퍺>O T7Vq RҘ=셭 5qK-Y3޼9fU_s7ߔ=g|/곺?ʭf~˸ԏ 5.s̯*ns2 eú/BI\y;i̟)gTQupC.f~"喗 $Oj%I8~ qQ@QA sE)dcl<;05JsK3oiW.xb<)Tvm=/@B#* %KkQe(ΨZ+yHr^QYM|퀁)4FzZdJ{Ǚ2 Dx  DU;Koc+du rRQ(9Kor_iUP ^m ) ';[X4 ꖙe+6Ka}<$- tJav: HힵyC_бsYż$\rQb/ }I R 2"ƂOĄsq(b"iSB(xͽJП><ক7A>?ϝ((HB B*#EQZTV iFa&X܌bG# հ^/puQ}lphb=FPQ/PMM~ii0=z@< )w.#3BguZ*=;Lln9h1A& ?Yr5],MlOC nެ&tt  X.d* 6yf΍<}'v!eL߬S@Zh4W$йB^ZG3wdnz} T.wjWr%]a6ʱuڟKΥa/;*ҡ-^.={f뫍UChĐE$#E$P%)ː @E@R?hԟ}`nep]0? a(8Pd*Q |W5iݱoKrp wroj9`@9L](СG DDܲco:T~*#𪮸MNk6$ !@aplƬS8 UH֣v?'T"J?0ZP/vԠsH$YA;~;Ztww_Mcs8CQvAqBChRHVѰZXFmZDqQq22 1B2dFar"+@{{uziS|HZ@LPV0T\RղVI+LG#Y$B[+)k e2Q Oe3ŐɤBTfBLc"IMw!_ws{0p$-ĄeṼFR{.˻P&#={w.so3+!*DV#R$d$K%Dw̤7%"wc{okiHz#z^^yz$e3$q[ (2pDuܮ{Ƚ<HR!$$ *]!牢14nv-\Λ˻ou%yu(|mbPb65Hy熝o"sW,ҹS|Z1vR*_#a<(0B:Ѯoٵ-g${^\|Ny?pee$,j`# [&8BDz27*|!eW2y< "ܼ;տDڵ w:+A. .'ȥg3RAyG}iUjMꫬ:`WrLWF1"Af^JCCԔ@(6iRiv_-Z>硡-GVPfs(1)B`SVVꯩPscV uku2*:TC+ضPZ*,h~`;#(SWi}mWuӛCua+8ㅫzWw@ky#mG+FT, E\䊭U<&%lh~JYPS U0@׈ _yqMbD(3[(=0Y _>m?hM(x1XdQ*ߛ5.%e-ɸ.+w>f6U\}cT~C "ƌlN1:jހPP m|5=F2!,².)Go;oV_#RgF̍֗˗.2e&Nkw[]Vb호Rv뎢t;L7RagWeW߂!fh4%AW/ဢufYg7Z|?¶ KyltYO['ͺLt(~Fߔ ؃(jQetqiYeɩ~IvAZaZc]ahh0Ԟ`5 .f×IqO;-Bm5bD'  gmq[Jձv3tM3Rľj х]]y% lz!؁K1( U81$Uf)Puxص)@#1`EYz'#9]U>%.MΆGؚ]8~f!yW=b*/Ljr/[_T}]nlJmѼznm[T|hsgþtvoqsr{ jjI*<ڐܢJ rs O~F>X5V?0 YGQax"XI Fs%w3hre.}mGo@8NyCWlj~1M1d5@ p`, Vo̫*$8ysTeAmYwpwX'xZҕUG-h&”DA=}m B D[LWn(PTKµYөQLf -&B=v^yrhkqT) !|=wcv]kXݝ'h>'D:;k0uQ x0q,:ߙJ-"e, *D'WoY 鬞U"q%iyG=_TbfEW{z$>|ծ\ P`hIj$~lLAߘ0),8A66y@!J%C`+L邑/a`UؐuR?LU[WkRqi6cuT*jh/&2[H^<:ATU~ѯ,Za=C*8^qeP]l0 (؂vXlh'0h/:yI Nr-O1pf*d#Pu)bǂ@ P?$6a;$*kq8inp{dbڅB] F,MGȕ@,4wŹywѣ\~i*os0㯅fuO 1w!y0(6.M}uRko]qAhnʕ-Ѯ"]JMpH5-q!~ڠ٢ o .ڰ8TLL<}l&էi[Ձ(Vu5ξgol6H;Cjȶ jPL,s7zv'SV_^):=>x:JM<缡BPI(IUg Jc̐HG][~#"H wr{~ed9$:wSxi"NAs?1R)H2BhURǁ[ 7Al$ r ]xTo')f8`ѕ '.m妩xb_͓w:h5o9l n@ ܴ1/~1,Gڮc vec/-_U 9w.EPW7'M^T5JU.(8֪hKBB5w)5WJUJ7nW vKP6NXcJsDX6Lk!/*-j*XɝX,!qb (ݯØqt]:w 7kZ,tJ'+ܼTTY {SfӖSꊳثyg4WMs)s^y?;iCF kmi  B޲K-Luy0ϲT"G0ʥ"֬΄kX)Sٖ?r wȺd  :;) ^qi$[ǟ  8A,$E$[bw6kA awkE,'/IxD%qyOKl#"S1O*]lU]9L 4Zrb6[6Z齌d@\@&.[o(<L(*dX.ʣjxqjlfVIU#b kR|2e(\fE=XHg:ɌٿE : Z||C̰7N+_} %4:~lYt3jn)W!CW|LZ3<w,Z^C?v`ެY jxZ\ZXiVwFa l|}ˑH]6`0R8q]e HDfgv?|sWZCJ,Η[\0 ~S+;fsfi9sŽȳ[Cd@IiBp#NyK LL3"/Z3;jO `[⏮O4{RȢ@5Zj$HV¥8F+Dw{Ca|!n䏞vm\5;T?]L4N‡#ǜ|pIeE/_)s o7[Tï^4W0f +}bc1L)LT6Dbȹ;*{3|/'Hs_߇QPF9,B "Snjr4[-gӺvW4)8_Z5z͖zjZ@8TM*NPysazcuJqRS,9Q y̧*?YLГ`|ѰK=Xjf:@0eAr)|^*RMo_'Áne*to/WȠ _~.0~c @ RUfj6#"s$,Kn<#f_EHjUOy6N2i^k Y$"pes;Bsu>1nv6S'siE=<ܷ*%s)0Tፄ@Dii꼆@[LPXԑ2-z#Ld#R-PqkVQ*N`wZA)cXJ W.sxmiߢR娗K M2RQ `7I=򳚧@ZQW;LZrRFkUM7 )PMvC#C/Mf彄#*k+KI)8)E]rG\y@6J?MLZDMnUF(-IA 0K( '!?uIS}\d7Adn&Dyw:ܠNR fsm#xCuM\O4%Ĩ?;W<yn{nZ y%CU]3ow Spyѩӽ`rK4[ S>!zj!LoSE' 2<' # JQwשB><Kuj)TU hְ=َQ_襐{pZLE 7@t#!7P*QEGzPN֜ъ\[T]Io`p8/Qi%ahʑ|߻sמ1&qHW9J5UtQI`A>W3^l"c;JJ_+072w+Ml}LEwaq2ȴ#aRq/߽P J|ߐ٫APR:1!6 Hec7 @4 1=_Vf-[lJ嵉Zeut*f m2DZsA $N;O~~F\ifZ*1t,U 0\(xA!hQ?:Ap?ќ5ˈP՚=U.:85VǣҴYb UIY5]LD<5*I]U%=Q]jU5&ޭ f4%%mp-xk'(3%.ͽ`VT3`fKcip;@Lo[oE봵և~`G:cRwJE0ʟuJC EE* o==Qeukזzj2ک7m"$Q2p[?]/+(CO،P5:J%pi':DdR;^ PϢlƫ@g%/ltd^100bul;v}j4n? "jU[]Mtp h JUh8] 5@Gs9 n6"*qD=R-R(ـ< l[lɠR.i=cҴw-|Iٴ/5lv9yElyT"%AfU.}Q>Kli[Û yV;hy>SW5A1~r|ZvS4csY# 2i6C. f^^㯰`F;V@wP}qm=%/f F>֝/L: m!7V+ 6빍 E7v7LXY3WՆk;탽l:TZs@N`\-xmвV. AVSMssr?WԯD͆ +]L47c6=y;%`}Of:1.t_ǻk"V[YJK 뱐 WXxRL 7Π`Qrҭj&{Pr;A0d p1MͱZ:s=~.?gc>ux678/@ߐuA(= ҌW]\~E.E)!-n3 -/5_f|MI+ ٝ_,wl׆J 042slWދ?ͫ2f]|N8u);7)?xa4h_>bE=.qG'ըE_a"]}YUR89djE_TwɹH90Xj$6Lp?}C*B*rZmu`^ߩcV8)H%QQ?bakKHMZScA|VF%\&ϛԟ?vY}JWگWB91V&Vc]`&KNjr8=6ιd38fΚ~*z >8I$8?{\>ou#S@Log{5&Dwh29'(ǂp<V%P.kr v m\QvwU6m J\E^@& M3އo` 2aw6,}ZW|Yx 8{b$Fe̪F6vP+CW!~ 6]p.EǏ!ȴ[_ tW\8Z.z$aRnaAϪ a^;-Uc6۱vXe싩Y>>5K5>/M5(:`m[6 "/i_e#fj!~O+-M{8pmag#_VUWJfZA{feڊZ3V*IfsQ~f%DZHZe䲴Q9^gkdӘґWGz| Lv&~?m@ޔki$brf^$^ ^Y[>ElP֭{UUP|(mtף s^+,\ĵi:Q"G̯UL9\!+luCIB}>j&s?]jGN2}{.#5~=hq1U[t-PtD i9Lo?\0]{sm07i/F o?|\$"la/렠Rq:&f#[9`RY,v:$&S@/h NJVv7- :brV9ujn'_028-+]Nr4]h"tùNizPڙW(]_A-E΍be81,MGK-\X34y |篔U6eCH+e”IMv~V_V; U'tZV+$^؀W3 |J\&,эMK 4&{MlCdalv[ !I< .apo#DWfrh\1fLݖKkiCWnQL=[=@, 36L=oIz6Rjۙu~H25jj6k}[ա[ڧΰ:ra;kX#F7ٜ7gIZ>tsS,i;=l{6ԛK~jЈ=q/Y5X[B7H9fTg][v}Sz`Q.ed5.ꉣ^+ҭm0J |ݦ;7f88leł꼩a'YFzko NMWQӹ)ov$L&X>§`103_6R|7+fv썝֛>g*R8퉁Ny6 IT3żR??t<"B{{1FL\D-vjQIyusmp퓻 quvp4C@*$BLiNxOukYSDhc 0&,/՗,aiPUy|?/Wv+R 5xA^ڂڰ1?gyS>(tKOݠ]EJ9=T!RIN;UCHd#?'ʙE 7@VAiZ1\//м5~&}Q|.hjW~խ Z*I̫yEiA bS5 P4[MCbc<ᬅ0'D UjwѹMiE=}-PsQctV=|{1^fHyLPoztm y13 T9C6)*ߍ}giєf AMMk5-K*8LƬ(,/ĚPMߍק >1(dnΦ8lWM^t͕*˓U+A9mg{9^ *+N CȓBamK2ucqd#ӂrI߬e۬$)&qGQnP{ "(k Ze^Bi.8]NBas ubhQenF jVk-Dv3/99p7׫Цuql+ h]^hĢRc^b.ff׿5ϿZ$mIU7_~6^읖rS 4"2\[AR@{)+.r-m7W\,aM/[_Ő^5x;K;uqh[0 qMhݫ. DokJݜe۶oKmh-qۮ[Xh#g hoP&uj,e(SO߾/6|E4O9:<`9E>T%v-= mM~AV v 5曭~_!c0ÓϨĕ DR0emMCE)wZ+ggΰMbꦻ^^s_m7eV/ *j20(+/_ ditr[e:&Wf2t끻L9]]@DxH#.k<280\8nۙ`Aw:+m[B!ҬJ kA#Qaήn\˥Am@ar) RHW^9^p>ѮbsnkdYeOaHC=2T,C!-22:}iW2h9)i|`d !qo\tb99;7ThWR| >>Mw;'Jaw/ScRZS69 Nβx`, /Y:(QhVߡ!a6>N#3ɩ:6^hgթL>v}Fyz=׻:{q'6ɛ*7mˎ>2^,sFAkxѕIu_uq0r'>ag,*9|wxΊq!0'AI@5 W[-JfB` ǝ41'[H"@~ѣ-qtCJLx5R^1*yih#L0!y;Jɀg)ޛL`tVj*pِUq6z $ _"7k(Az[s$Gp5+,\_cܩ |1kmk*[ P&H(I&V92 !azK+-εUlxAES=YUQyH{-=fIWԨjӧ6̙GTjϔ%DE,j3U2h^8 oXqNHdLFHB+WrBj@ArջvTMETZ4r@^]&)R~t Y1b,; czmI]t8黪o*(D='e"z/|rjP 6Jռ P* Zv!1Pwz"r?dI nv IŐ4dP<8tE,a(q^,߱BqǿJ0k#iLONR[Q[MJA?8W*+*qjnd!##X闫\Fj=v OQSU@VZvlW#:xqx?;:*w79X76W]ukFRbj֮Ħ`;\/C A; V`[]IĿ פg5UM{#[\1&ᡠǸs17/lܧA\7bA а]?t[]P}@Gbf/.GwT+B= ``(Yuo 'E( OE C1(b%N(o(#kغfH+ddCbY,֔f~{|)wId0cN)ͭ#bt%e{5J}xywD`ō{ =y9O)pٓLW-5EwrCb'. e@4[ayv-Y%(e6Y.ڸ\4BƠ#ǚ&E6BzW b;cRX}cvt.]ƩI&S3%R"}x5b`~8"~`Γ8ɌQ6Hu&SVWQb9j5*vibܻ:18@ޒ"J݇ Ϧ~ kf/`zݎM5/i1ˏRCŚfk{\[r*aDs ^+-.#0$K邀c986 $j(:CsLjM8bZO6RV=$ӱu֜6t="s{='K*݀sNI˵ T=K/H)uܢN֬n!%OvCQ5OrT_U6Ol3g[2V2tw!0tw9) zpb;o J@um,.j#JWvUj;*B8jYg=KEcn_YE$C=FٓO7#}Cw551b{ !.߫*1@q-Z/بU--pMl@EqGٲȪ n'p$Q^`(xpIDePFSJNa:֓h-3^vAZ^Z.hϞki<`3MWEu &].c@PХ<.;jdA!s_'@~AjFZs-*U,18ۺg#W@|6ô}| #`&], !SݶkZep39lh'YQK51+uàhZ邦;[8p=2IcL{NK@i~& Z! SڟasmQf-BnϴnTPM㹧(w݉tVhu+Q`` [O|5.{c0Í>xJa3m5}EF=JdR05w=BT`Ak:Д OGܹXKmDgVʗ22MK+WP*U$k׷jXFH۬UǸsR1:Gu9CHXUܹrɎ]:q\烢W\KrJVeᱼ Mpv,~hP2E}pݗ4ɣY&w;x7=N H.aj-! Z|M;FOP[[nN*s;Cshœ;AEjKծj<+lqcEpNL߷u1S MH-quN'Atq;|T]ι)Ѡ8j"! O}h6q:u#-G๓'n]tŹosBz 8j-oa0=hEv-.o5 1,:5p;39|eyoƢ0e( 8@̙bs\gfUe*mrAN]qL;Td^ߴ&^SuqP*޼SdʾZI/TR`Ak@S:6e)o%18r+Yh X[׮Q?upWV-(.+e?O38zVQq멏j\>'cM'sMߓi%,wyG-Z9w_+a!K*Ig:+} ӻ5G[ιX*^^Pf']Hr1pn_Zxni}:< ?}xeͲ~?CץWQbҞͽ/շ,ξ>RV6AJ3>gkaɳ/ o_{b.i4dvYiO‚cLMZjB{R?oW|uұW_]Nxg2tm'e)4q$Sgu}ط>kOФXbΔ0x7ԌTp.JDm$ʧ.6oaX}rY[*u`5e=l!%?ٟ`:WYdًbrIF1nVop ł0LnY_3gCc~OgO>j3VGw! YxB-4m| ]us2VKP &ahuvٷ G/U#~J@d~mUu4"^es~[$8ԝ^O]bppImDDXa=.D:^EXj9M4 t5F@Z4tpF;C@zR1-:gοRh@Vϩc7d.ҨwGꊇUY gtLvCx`Y2b`v摰ŝZ(PmZZ2o\{R ( [WRey:S5'jה9sTJP72`StA;w%_Pu~GAh #=T3Jx0>Xb:;{uqAOđ`L.;6t9;ܣ'cq1$Yr=8[/ޤ0#kzۛ8*o2XD r1k?Ĺoc8o9ݱo\vx?\~S:=:ƷբzަcҰ*5tMs#&&̊qG W7حz7*t.E>lЃaxNصDaK[%ȸ &eX1 dR̩xq P\Hjٶ_&885W62,BXa]ۼ[q$6N' n rp[:mBem-%Qv1쫬x%^R(dQxfٌ1Li.LҏH杮bp1&tj$su T y[An1ϒMKxUYI|Ԍ~Qw X{†bH0oxv1)F;"~ +)joŠeb9\``)V8cݹXqv27G~z>vݍlۡzQ%&^reAs`4tH4iOdfH=vֺYZtLl[SKKD~(zOj^bQg׿sLy $$|ʌL/zY+s~ T jnIfdL3F6@bj^`>W"j@z*@({3D*" Hz^o( dfV(ԬwV&pp/6:ǀ~^𹵼~;X]2 oQvdB9{HzbM6;].-H*k6/鹥fKvF)ܱ_>q2IV}8ѩЦE=Ixl_.g7gokmܠ()y۪㩃JN&V1%D 6v +{CZkˍ LNRŮV-*x3JsnU5i>ᴧsTRmn69{>L}hd:h˛i,9cHXjWlJ;)PYe%%2WMS5[/=o M̼.=RZx*:&jeQ@l_25(F/l53!-MKEl!ԫ?1z 7/IKPEmrRٜrIٷ# oFZ,AHâPt#t]Fq[g+ţqn{-5v^취mi b'i!NfWF&3'{; oaa%(JU c3MpƇ`ccۗ)(iWKkxڦ"?攋TV 0ɏc=cF;'x\ڞvЉC럗OX6!g4b pT.7Q{]JW W[,Qbӈ Z6 ԑӠӮ>NFQ9S[B^J.JKK4ބM>LW,h 8(l;gEMXͰ>DEuiK?&̂{b1jޝ_eqf:n5() 5e6_Q[1k)P\$.I_}SI*سB,ܾUKfm]ig%Hfۛ(?WVTU2gyǀR]R(,qJ9#8ױ*͑ɚWXv` O1#/,fJα?Z}b.!ra)FȺwEڴ窢 M 5+V[l!~fUV)ϥ1OL=ݱn=YKmF8Gt:%Myaᔪk[2R?)lf3Дe|Œ,"˴{hlu+Xe/[˿~V޵_]m_N\>E9ԣhX#7G=;ɉTVksl"(酰gDw3巛玺ݭԩ2T 1mH @S wepfz ?Y[^bT ΫE{L0ˠZuR >lxRg>>Sh?=zmbRKHI_iT3[`֪_C>DFgeMs,DYuk5--UVB-ݝ'wxI˱fڮ*T~~K=LyB/'fA\ S =-Iphm$֔Zţ>L=[{';gUJ6w:³SlU6 |$oeٯ 7W̟[Y?mE']4żIٮF#Jd7* $M2-f3A z}L{Ll |e1d*K ZDjš)-)+XR=gsZQN8JY*`M7'Xlw2^ha.n 4* ScM&bQ7[s2G`~ysjw1b䯦ztHv|&̨:yp_]p%f'^e0/4k$: ݧk/6\ڴbciUbYaφ..vi87]F[mU9iGuu7CWsT+uV9F®ۣʮiU]JJjZ |'=u_Hy.~>v~m9 eMH˫"V:3Ct ~G/m8.(ⲧ39-bsf+B>X*:]Td QBSky+[ ӻfAg_;J'?Gz8C tzN 21gsC']]];yh ьs3l K/_xLԬ70'YMPK {8bfd{m~)_|QB!78(EQItLCGDC4ST8'M忺EwcדWQ3_~dS61e[2 =reE`yc$/,OW}}ZXTQήO&ǯH&aGWh2b kS p QI0L^8 ջ8rOd^R)ӥAJ< ^` 5vI͗^9xsrsYNG. o!A`*IDDJ*(vWȷS9_mX=ʮ]:t׭* x#3օreӞIpłZ/Kg z*Vj Lb {_p1y|'8GI=hbŅF΍y{.{{^a*{h=y&D%o k}ý˵(8!zmAd PԢ~(ץcu' T89eH7xQx:t\nӔ0^L,6'˷Ꮯ9W޸=~ߴ> 0*eP_N[je.m-]Wɫ>{Uu$Үپu%RjOcXg?'KHUE& '\ء`ΩByzbKb!,Bל]SO!~ە?Lt}>-z8t΢ DVoj=)WGhye,w~ f2S'rEŸƲ_j: oɂZzN@k+qNT "w6V[̿t)N-\C NA~NOvUtLLD۟%A%CҰ1֞]%K/Ձ"7UQS"1u3&2 35pC"k&L:[I5W7;K "n6ԬP@\O~6/*(q |]2жUÔ+GRbz5Dl V7Tk5WN}W%4J[) MZ9 Rc--li 7%Q/Œ9ncu_.a(릠],DD3דrINӯ)l-ņ ]#LeM N fQB\՗~,~_tzM;QL2>}l5=/=~#DѝiDT?$Qp ys,#; $h:o/4_o>^]T412lGR -b(f2L5YTz֊K,c/WXqqZxV}Gw9 ی T@U_I_jSG[kތ/IѢw9ma/4,,)p396}EߞjkJ^q.f<c]Dq`lZBmh&u8Dh R=Ft[qN0V*ݠ]h@;؞4D=!גd*x?rZcZ;`yTHLV+K B,~kqneL͸D@DT{(&sBe@ɡ,uci|uFxB1AGqIMbS_K$uw7:?S` Qe6m8SI׍YkpMǓc{Q.h9~ĢgO1gUxUB2X,ɿрA#bs?U0 !iMaErs̃5Z+0y pD'-AuXȉ`hG5LNmS4  R 7aNNϑ*7lhR c]c=;NVIV W.>3+ؽpٯcu*jJqiZG[XuN'-&.3[XC2Ky]Z hVL,X5BV{Ꭻos-/2$78:o<~y̱3XFTAH+X?1qADw4Bi¥RXw뗷[}k븽G87fJTG8;nج`<6 n- aWeF iCۿ!^X}C}~鉣TIP@P!BhOOp U ] {Ԉ[RZ߄F=%kTzHĒ\ R y,  t)trG}"CFgtrtR լx.V]DŽ\f vI1xHӗrTz.,nEpf, HU8 0dی-- RE;CW ):8Tk+JpL Zj#cx¿^q 2/ޓ]Ǒ_iyǥ~4X/{v(6m - ;i_OϕOϣ_!֏5ORN0Hg)׍INIOU& &(DߡQmRẠa~< g{XF(QkÎ%_6?od@T XG?ʝpHS!'lq@jP zl* XQhfdFhqRrjnT=q{Wн|S JOuWcR) x?Oq!rh<ڱ Y7.0E_Rmd)C ( ck6*CiN=ˊ!,q*A M-Σf(ٺm3qsS.ʝ9}iweL&E7k`ev4H.az"@e`!geU?BaԐE @_g >5QK/-Yd "@F^ >2w}O ry.홦6hFu Q: @`bbY H LsL@pU;a 6g+`$""D.ڵ~3&:6ƺT35 @.Eo~uݾnl֘ ~ QېEP"BP"P4K7*uN~T~9D!(k}wnl(I4A\<6*C]VvK63@eJb9ٰ(3{\yt "OduHvF-5JWR#YjR"/(kV8)<$X/Wj F}Fυ ⿟Ipǀ|Wy^ Q]*("e$6Ru(I VMA3U$$o{ɥn{Tf[uaǩTRF9R1df@ $bg ;ښ`Erܿg wh 8e챞rkÞH.|ްH5l//"I%Z$0$۫,d5K1د9[fY7,OLa!%Fƶ7BEgvA(!ӂisQ+*_Nv3%Gx O0@^,.( ~y쌆rЅpR^߃Vhٽ4&`$byO̽!A ҂) )欅D cVˣ2EUKX@]HS85HM;;N=[J1 TuϑkLj Lқ8y%bͤ&3Gw1S5,-iHyk0EX֭W- l_c۾n7q_iDA#|d12l*STMqUH zW),˻r I2XZDT4޾C^&i2-wծp)X. WvlX I Y|6٫3U-Wa6S4of.U-B)DO:XgX k%)[kg[[<}\eu0'AG P:m~`v彟ݩo߷*a2O?O.I39Z'+pMPr+v?֑̞d,3SP.nXɞ]uUV`d\Nsv~V]H+Аi&93,߮F^_Ժ. ~ֿO[CZz^噁P`H'O{Ngk-lNruQf)~'i5^sYZ>}5wOCx z5N 6J[T/E | Tm={m0߉DP8~]nwizU}NaF.Qtmy|֘mN8C`5;[Yܞ3# €Z.0 `W|7ʢ7]^ ?fzP{BaA!AզTg@nb1oog{6?.^9*%8%>=fI4R5**K9&,ǚp[.w[:G| Β? :7nhS|"\TrD$T27p'/BXuM;j&U+m&6e/1ecU@PkLֵE !ۿSYȈ>?xHYVFQ^/]W-v:l,*Gxz%ĠBjfįZBq=bDNYuPjl :+l72;* /bdd2v*WgN_I?:owїznٕcy+#ϑ7z O{';?SY\6" h60?,w; oO4qv[ '#@Aa[b^ǀFp:,<9P}vm<tI 8 6\o|.g @N `e~rwd(%dtR,Vy 1Aetb 'pM *& 3}hp\m7^]r0EQ'|yIN?]MD_O E6PxcRKZ{Mx7]$rWޅ/C Kiw}iO w:nxP؎nS]FFQhW >ʊy|!sr@-/@7y-VI;Vj'$X9:U[fd+KQj\?鯏9;9~o2u&d\<.u @;HGGD;c$ Px0OZXcäy 0dPW|b Fk9 ;%58ːmwWwܽ@,mAj MbYmK%~rMGw*'*pDh3D}i2+VΛ*cZ{tLΟE -V8ET,yֵ 865PA9vi>_hyq`xP+%%|%deY#EKT}8T&%:K^UVag2-Qtz6ԛ; Hyb > )\~/%x~n֍FM!TХ?ctdL"2G'  RL3\ s$a׺Zk{twSQeg /G9g96c+vx?si#*BH !HA\%ZĸV?&y/i=N$AG#)x="TIOᵺo]@BXYciD803*S؀{8 5HObTk(O?sX A|U_ZQܤ k< 1HuT@LEq,d#*jr`]OCV[wq|'r8>g_V3^vx2'9;~U ^`x47wu;!Aj xGL^_ս`:طlQRLa)^\ 4Օ+Vt@u! y} سuՇMnbqu {=OeNGWvfk9 7bol(ޮ<.-e,mt5XjZq"Rk6yS*")V2y}n_-WVXg9ܩV:ff<|Xn@MJhB!!Ʒ:V/ >y/sx^)J=؟&Mi5R*2:`O9֤V ú<_7Gk>Eg_uf "`}KACU=,WSWAi *eY36v])V ,Șaw>&1ܞv 9]IβBzW4OOs~+C kԭI1.e[4GY*ϻ)|:6s!%,JY0E!o}{@!q >Gʂ`/Mg.N\):iWXƤezZuPX[ "½ss o? ϡa൘;S<;wT*'ŀ!BB""~jߏL|}0O=n^vDz) rN&ڧ;~Ryr" 'AP{ lfp]_W&Wa1U^>C XcW7ε |-X#)dBN/~㝪G+h H(T/̯'*,! HIL4Up,f*6K*Er4&3Lfmkl!#I!Hmȕ$wv5ͭ98: LpJlf̵Imj,%*盒Qi"f&>rB ] Oo"s\6r屌4QnU̕Eb_r_"90G"4pP:I4owkPLm3mPde!G% hJiDP)U)D \X 0J={R;OWv% da 6cXDb1F|md1g}zޖ)Mm%g@Q2,j@`#@i[F-Z--j6ѣZ+bmkhV V6k-QELaƣ )S$4+&ŃQ4[IF]o\Ussso,""ʩ:):-7=.@pGGrF+;S#C{wɅng'>ܨE7tkZ =8¬w[v7).\ ɄXJF\t*@qC4JµIw^ӎ_ yf[g:cXć5–Ҕƥ¬_ /mUE﵇TBӒPbڶն͞xp@)%W@ByK~i E¾|n#h3HѮ8;mv=`@4]Xs|n@yՈ` ~""8ՂuuuJ/LDn=wM}-[Km% VTCUSSXe|=ewYu9`p\mznbb!CD1(o %m/֡VWճc_=Z>.*ҎVhu12ɽZkfG|$/_Ϥ-E}K挣">WZh 3DC dmn}ÙʹXg{^f,rT;z"XAcz$j7ި  0VrM|:ń <"",r0EC܈F[~ ?QcY!*W~9, ؟ c2,=I3D:  RSA)]֛KOeӚ5g |}xcFBA> ͤjͭ+HeBT*%VHsu6&'9iӾSQ!\:9iŔ!0(2 !f$@jg'Z:Tw_+My,j]{Fg dP{gLEmBtaO5َ~m4e߿A2F%U9:oҩDuUPPs3ſW'EQ  ̨ G[_kw8;chIP_W_G{"?Z |l"!!,󶿮wx9{'5}O=a5u`3z7Gɤ,,9u0fF~G;#&c}bhy3bA}-Rz2/H@!56ekS$5Z$ \鷀wp5UӀ$. /:s_o"/$`?@4bɃCH.~`S)Е`X$_ ].bh' Gyԑ<@q3sHC-Ub~-KX B2\2NDb2 _!`:NM ^HHLlR(V 8*@jm:y\Ͻ8Yh]9L-n^}`F$0aT<ȁVqt.$/Ps"m`Fs_m&Pֺ"C^aH. ywMjO+C^0-e̊rqN{MW__;xC;@>'Y _*`l4QnÊbMB>Ll-^0 nKܘmrTJues^87r2}y.:ĸG^m Vdizo~ɧu\KQZAnut `AlMe~lz 3O6bc^sb4oIuLmUtG)p#\䬏c7V4SjڙH*=G3GE0J%P?b<Y ǰO_HU4PeUMV x'WcWH3,0N2&eiьj2jÏ'2^ǣw&OϜa[ O<׽;+;MPkr!(&z u_QeԮ+jm7[)nM;qfҰYaXj~w/xb\DywB D *r=C/6[]kewl7We>~r?'o;:TG>lE=ȯ\ O{+AFs'/X]!a{0{w^b (Jl+խJUV3pSp#Z(Җ JFz'^$5( xܶz:~bޛI95⿜8QSW\ęy\3orWǚaY#VP@x '9CΊeWf)d<Ͳ u.UTrtT0Z5VF(FrV6 -"D>]OnM2^[iY}q<@Bf썭`SĂ>p:*wQb1v{74 FMPRQCMw5d]((X5eVUwI=8ͽĦha5!$~kAJ@mQcjyiz?ټ %;_I/_qksufؾ:w[tYω_<|T` ZKwugo;Y+U5/)6pGzl fĢX@һh@m4MNz /FצuBe}﷟( a.r9XHlyleD! 81CS},cL#6Sf p3&f̡ g>VW<}waϕXu^ƳϹk(8Q(&. )?9/8$CԍFFa0hJ"E‹D64XBDhQ_EF"ŊuVDb*e hTMrQ!/J+ [O¤.7@"ws(v=U͡-(`kĢ[T{㘫@^Ӊ{ߤv;¶A+Ċ|XwWT9!\ar[or}[-יsjKH_ *xp(ך\EGA!ɊB)l0@B.C7MKuěd`*ޫef+C @p1ASe6–1cF6clQM_̜KvRe-HBTe%HZ6J )@!i؅MM1(ˋu!Hudt3%64DW+! DdhCci# F"jJ,F[gu.ҹӴj[[uTH&0#cY60;F- eƒ%QEs]Wm1@m,LFHFs%aʼn6*6 T%h*5lZ(w)#%yY *mcNrkr蚃G6-E5cdΖR41V,6"0IdH a _07#SkcWyWx7z=,PsCT2y[޾T2uvv"*k@ي? xWp%cCnlT$/\k3Hݹ5t=ƊJ"+F|Mt_n#dth(vIi YUԚ PJ]εڑ{u^bYfzWƼ-Y1j'w_= :s)L"C]d{0$"rY2*ëkЗ,zAb9vSD tn7c*O:ڂ~ 9W[.pu8X*9ZR0CӅt+@I!\Q0Qlf6)~Ky'w?A#ކuDGU$W!kBvC \fh@dvkGv ` zUJ6a۫YaV7 jbLgh>>5"(5x77?z>T0$ĢC6OwH B ʒ徭hy*f;`OU)#RF[(Ԅ6Yke\}9pӊQvkuL5J l"!屾h%kcԵǃYI7Fqz65錀U?(=$G"XU:uLQ:0l,_g+S/U{5u>f͕b-ܙlA[]xƶsƶ ay>\A{^%yt}O{gUzwoܕh+dInlȂA;dDZWoiTrueS9[]c$^\!K:2*C>l:@Re8uH -JIGH Se#ZVzd|9լKA ˘) s,D$jI;9釒:Td=|=/.> @]LF +phfdM|]Fj蹅4G8G]K{I /ȬWz}\Ն#MkSsp;w;֞.e0Pk$h@I&c5Q,cKBIAa##+*}"su_pלּ U:KfoP~@6/@NAhTڌLM5k?'1#"P F[c_vFj$m(o)i)"}I _m8Q$BGi}*wM\-'U~;v[ BVZ:]Fkwg-,xg zêY"eQ}3횥N+z9X\t,u|OzNuzl{Mk+€l +P:U$(2 7`oca4iV|#WWeyN> Wn-4-cz`/]F ]Hᅾ>x zL )"Ub / P3]|m/V Fi+^0`Ƌ]-Vk"<^" DBjmxVtajnmދӟFP®&q=[y7[jr^{/ QT |#mkxVk$H* oaO9fz:z,ru5t1qXWb<?`Mbxο+0AH,7Ts iHv$Oҕ z5*E)X^ioxu~Ѡ#" SzjpCa|kvGm,Sa@|N^n0< i-5r;(UN"'5TDh&Q2]U~LHؕ.Fw"1r׌9A[B)82nk?)"huQ(oB W-A׻~ͻCwp䷂bgH#C(Q2@7ҺɈ }Z  iQf\[ ٪$մy}݇pT |%~dԀM|jSLl[+V+i;퐈 :S lp71|AHDv5׾{} %\&;Hj/s>T5BcdѦ6\hL(aY803v'wȆr){ ˶Pջ>L?~!DCe` w }:nFJP 'U(e&#2WQǂ~>㭡v5vr ڮ.Yd^Niz@C?7@uqTT6uTc- W;bBxԕa,rlh Uܤ,ҥ6/+/k3qƘj xSEf(?nJ꒏&cS ]>Ɗ=ΰT7^Mp ʐϓT7^e2B@s @Z2GWSUB 5Yga <ƋPq{8 [{ ;t 5smN&vqvVWjHk3"ſbQۑMm&T1,eneܙ9پן^ 6^R O@ Od@0 ,K3'et8Ꝓ<`cPXQfp⥙~@y҃H1Ve^2 kH d%1]nKٝӒ]G.83jۥB}wLN)Jz#_$xTS3PUCܪ>=S )I z%/gPaoC1<#0e!OI7vTa EGy^11W""v8D_] 5Og5% MB c䛞$[;h<0uIǞ3TPqL<|s|^0g|'ΆJ(-}ֹ)/qBJ ]Me$H@~^^`F$L1L91d,Guud]w^ϊH̒X5Xq5l$IeaDLD"HQˡS&bBDRK +㞮s%[rԿ3vsX% PQQ7d((J+̓6d 뿠\8JIt`\!{9kfmlbJl&S!ePn-,YfhIL_1heۏwɤљ"c# HI}˧5 ة2hb$EQ3(dؒђI3ݵ'F^3 7uwPɷ#^c(F L42MDlL3\ 0)5Jf*|8]n;7 uC!%I #칄>˼̑J2V}u&4f(rBW)=A*z^2t&v.*Փ Ispq'G8~YScCD5~phrDB'x0^BfRs:C?9iΘ&*6H{`yaF ! ڹA AblCAsg9pi/R7#~ 6^ G"$FfTOζnx՟ssGuY.زU-UHRSAV g;ϟ㽷*V__sSQP+):rhpG.r@*7}hzmQ5,zЏn:x/"^g~Nb<"Vaܨ57SZc/ƈx NF̏9ۭc6WL<~M`v,HkEdCYW(̯h}+  @̷JuM.|F̥+l9L7m-3|m}#|4\ `/wph9h)FrpncσRz QJy(龡IƦ/zomPB" ``@hȳ6=Q fW[XYíIq4Bg`Ƅ%,Ϻ>OR0ЎjE#haȜQg ]BX !H8ϭ;M%E/{f\~`OFQTIb`"n& SKP8ޗv+ws'[_ \\U^! `/EF./nT\MLhvo^Yhʭx~T__k-mc3m}fZWfmu7LQc<]2<?oOBQ]$ WuP:s*1D)0ѨT0"xfc\O ~fՒp_35˘j#bj:EZK3w;"WG%l_]pzƨ@L0|B3؊t ୡ)l3W:gə:@ݚ3C \燛010/b` ^lSlʁT96z gК8`hpײ/!JQzWA_U:Z݇BQ~̟gmaOUYX}covPMu;=~gg* cf֕$w+&GבTy: m)*vKabҪ# d͊cET@QVCm鷔'*D^Sx'yM.{U=/7>Rޗcm1 0tF#~Rv$Ġ\[.yA{®_o~bi#R).ebctz>Wzx/+sJX70ܤޞ  04Tqg$;œL(9NǸ{`K';zc67E1އTeʠq*[ J85u1D%i{4&Qr~nϸiD/s}rxRJ.A҂EiqQ9l88bt( }4Q #(H%%};*Ȓr|8Mrnjl2o{q3\Ŭ2$U m*ӎRI'U F2\ 25M &b-\Izꝑ  WW> $8=e@PBXA#SD( )MD,`l䟜LC,5]VU]kU#Sw"_c 4yأsWv6gqq3B>M;tm#R\Ϲz|`ww|Χq].WC@RL=obI20Lsٟ=ș1AUAbh5CWzXVF"BSAD X~ |֩QIKJ9ǒ Ȕ@`^'YAI "lU4"a:,]/FC^VxGa@Ց)BWΕƥH JQ^ *= ]P|]0a783(ĝB'44+;L%t7VJ Z+ "4;5dX N0rlH!R #aʝ@`f񽰑!HÖb3َSH/5qaנS"ng5HC!r` ?`:|G=[f2.S>1O6&lNbB/?]EPjd$)EA< P96TioA\ ي:1rTA>A2E2vն* "A܀D(P> @?0P׎Dj0v<'9|AOf+y!х 0 @ !Zrx7̕nT`uS!lMdR rb58&7w[KmXxvֈ,l b:G'#1B(vC&9 OnȾ"p^l0?!g B [1C"EGΚ=c&YWB{7Ku>W-3u^8#_\;ӣGQFF%uNuEߦsV } G h0  F-rA΋sاg\TΚ]ʑ0x"wxӚryQ k ,Nz!eH%(8p.Je I`_0C.)1H.aF&QKYΐWFiTagP!E]<]%~)*CS94¦i2ASԫ\nEk2욢 Rj=28':η-9%8jֳ(@ؐ:$'(xS]ˣ|X~Ytj$0ÑuZQuPγ[͛4^?U ֭HY)N_T]fփuXp @-hg Yd"i1A(C]m=%iXb;A<11A/k]R@繁ji!ScwfŃD.:X"+QgIAmgTu%5ƚX1gNa#}H f芜T؜th+V$ VVGJQnkYtoW?kjrAX~= c9ώ887fF{eˏ$I 51fmn*[kF<~[ӣ}^L= jwllςKa>og*>t{I"_ Z!sLpQ6Ti{B`^`pMP DZIru|bs*;kyÁY!z:񥦴 (bW.ŕTkwRU6Ȟ̑+VSWQzZ65ĆcE=q<꽎G#C^3\r[Sk.!8ū^:xGw<9BKuAKwtSʦ՛YLڷXQ\ZZ:o[yIÚrm Lqpd\t}Zhޗ.\K:}}&X1#52M=ҧRWڞY7ņ,@N"YXo+2xV'culhtq>w3ƪ=rN.p1̍FvGW* $Ĝݗ0&ݯCHӗlKFJ3Ms4iC=xk")н6{Kyۿ t'ؔg= gW%"1©6<|SA 13r|.6ங-m8Q1yzn`o7tvf:)Ĭ`jejd1=[sG#(5cRR%?C(RHPjL·= S_b%٪Ax$ >kwFu3v|*VEB2>Y` %1BD`/`oM95C&-QΥoM||OZ~OE1k2Wә31v7}"8vc!/kξ]lqz+:)^$Nz1碗:N3e9*6l{}gn9q6ffoFWUX[ҩe8l1\ R)B  R䯡qn"gq 6Myc 9}[^*3 @/Tfm``^Jc 1D{6.vWY 璬_4kn+T}zA88cZ/P\ʊkiͥ]Auo<.0캆XiW^Ec]F3 [N~F3v +aWU^ j @r3o5[?q3Wfӊ RɤWt/O]JT4_cQB aG:J-GsMS*tHxxsPQ6L,ڛ~<9mK~|k({vꉔoWŏV8g5Wl.$WTWuZ%cVN`/ @a(_"@tXǎDّfzgvF1[jpDgel7sf"[|bsQ @^:]Q #{jW^V :zm4xDLippWrmb5^Bpm`Cϳ }?weSρ|s! :,68G4%9\}^Bߙm VW 5-_\{ ڞe87_=EB r7qgOan0X;fwxc |Ś?vkkp/&jq;Tj{:7.bP}O弣 `%N8OR ^Y|g4 cOӖihpr؀E]g>z7ETZ"G5-w >10?L[U7YLYO0E:+GL2~l򠈨S/\x'JWSՄfソ|@vY%)Ђ?$Mؘ+(HMaZdNVXX(lRK5μSLuYõ,|5-Ġ?,70Ur|ۛ2Y-S?e.+ɦ('4ԖmReeOu?^;6Vk"T=1CH*Ab*F#D8$\#[Z߿^l슴dܺu¤.3J).҅OKtA B+Izo| IRa;:GM=BT Yh']Tc|Tew0_K6 ![e0u>M8G3wkm{"݁ qzV} )) a~s|} >,}I:p,s|/rgXtD+8J"tw(a:P\:x )$!cg`/ (q :&q1 ~h0q1d χ#8#F«xPR|Cў@N T(E Br,THjqd|V6TVg7֕)5j VygKL{Vq,9 ǎ wV@^6}I#ȭI1 ;?H/p2W ^۾7\|'F7;YAr;h}c*DӼLѐ)"* W_@W#z(a#yA:,eh-N!! MeYGT4 !7\ 1bD'dR잻+ :T3 8QUEx VQ8JYuxB317qmHPP^ u~~aϙUrDА[Uz# +Cwϲw8b@bTEB7,7TrvuZ&#jUkpIea!3@CGőKՈ;܏k I3Qo_"kf<*rD̨1p]->߄w2dzH◩`CDqzOL = >,pT4c"2ZQ.Uq**QC#X@,%]Cw$e*:$"2ً͉WSGSPser0iDa$e*T 0]B>(L9e Xy)U$H!ߍ >cx&C0QB?H\+ԹYRMvw"$t#881?9L'vQocV~>=f"﹟X ~aO~90,3Şkӊg4Ӫ6s?keᶔ)1 3lTu/~}8הq,9*ڬCet4qLA(d'㕅 _zģ)^1 A2/7QWgiP\b_,9珡Q t߬g`(3\UPe.<ϫlsQ_5o+V0yi^>oطǚ$/*G(IՂc>79N~G23nx$=:[ۀ΄*R48< T)$;(-B !A#A4OIC*(9j.gZkSMXxyf+j<(Be|Y8}>Oл^qퟴW^Yz`f?aKT ,dP$ @ ~b*uѬT80T6 H]nʦ:N+T23ؚքqؖ]WRkxՕ2kbǫZ ^p!Z0J+շK|)zֱEk7IqW7i(CZH :zOn:f۷\Af#΍N2A,~wfS4ę,^D$pfedIP@Z_w%}G{ }:oM `Z1!c=݌87VVnGb9U;ZSxf~Ȋb*a^ŗAwO{|.-VnmM3rGveŝ4 rU#>0 Q_ε&`ytcVcxHmI4g鯹>U|t}ά׏ Ҵct5s0 >To)$Re!+2m*$P% FTA_}E,:_~Kw<)G}f]dݔKw#!Yy28ex55DVAuZH % PP'7Ո)O\&@Y;nh-q[+6q`z` @bр`Br[_fxMg?-u#zwe`2{ýk(ӺFy4sW,~|oJ\[˶.}A=l/ɑc#<͊`ycb @@Zڬ Ziٕ.W-b;~0-fh0<!vUc=fF)99ϻi{Ot{/ێ׷k>)s'7U?ƣ|#8m),l6\Ϩ]Dξk_w/:)d) c _CۧRG͂e;eF@^EmN'ѷgzT9CcNbS]Z7EX<}Nic!WG)chJT5h.( ]Gw!2t2O@ŖW6lemqw׺ %|o?8@VMvM6<]! 缅6nk/|QR1ƙtظ%Fs+{Vs3xHO:I~>t B d# F^ԭ,т#e-"fJXe)L>dt~ / {^Ɨ;~?޳,I?OPg,KQ>Ηw5.mEs}ys3i|뗏g] P}l׌Xp3xrxN.tMzA0700N}:g sm}gQ~hjt~ei꧎x}x6J-]bƟS>@Z ᑮbZn$gs^RP e?b16}mGtMOC>Z cš&>}n\<~kU}1k\LBsSԇdt{O=C2xDOrk0JSpσx=OR0F\,sJ5LTfE)L $q}2 %伣0dX/_Rpm, S,*p3en9f=(-:Tn>i~ M)g^waBnt6-iOWdHp0.2a >BLF݋.,BO^FK|#CXB=T}\i'3}$; >h1?9l08`pp@$dC8ZHψ [?WjXp, ;7F2&cA`{,ߝV}/ꝯ5.%:x•|e[)ۃ3R;_YQuƁWzKt&hT,QteF8o(ǎ~/ HkM-/BaSV4*R݀2< H ;fGꭉ,~jJ.=:(95]Pe.zsxn9 ;$ƓJC(5S.YZ`loԮ7Nt Z"Y zeodQ-M~)i28I<^\~A EJoeĸxG3K, WM-CH|"eLe܄`6ĸZo9W&ralwd89 25)Ry;q>| oVSr\= AWQ/ёa2uنG[VZΐoVbo+pWp$PR.{]WhQx-|4Wty9>K(PsˆI'{4({BS1S /hb"ven1 &`Rk4  n(P$ZXA,r:+f& #}O S \ڐa~Ek,*il#_%tM=q3:D2gcUXtm(髏/^G'V${ն))ٿSdXn|%x_̅ ؛J7A1pB"ɬ翧5\U~ǫ|#m |=#E'_Ah{=5vUWXV籱`ц6}ʠJE``PqtP}r˹wmv]tܭJ~ZߒQKk#`#Hڿ\NJ|s  &a@@ڰUR]u}^vm~ux>k,%ZI-J1nc:Xc Lif٣vݕSl~Ly#\J5\'(]3xy0E0g@~D%|]p,cٸxGߍ1󣐼X92`Ml?}(Y ~}DD 6ã` @  Y5..l;ҬMnNvg\S9^=[6uoIq_ӪKNCd߼ b5#`ȧo8mn] 9NETAEJ0\4áhXX=X`AQJHC5Q3TVT]Dx]rKTgإ$suF.~@;GHzj,UmT@B_W@H,(fIJ؏&=:.HN2wڪ[$@`Í'fs$CUcq.0"j 6%VD8Uy3{mN=$ʊr>%uxy<w18[&8T56[89WYZq>:/bW4@4Ur;ImWv̏/@B 45ˎ !I]o([gGOA6:WWp&z;DO#w߿ѨНomӪw?潮kPtPhP u03! 6 h6<{10ruYs>+?-{%{lZEwѻ{ex]VG &r4@+K!e lcTgv]]n/PHD)pzk9[\RIE#.qӾLzxp^>%E o`uׁDM?z_E_BiDPeHدo% "е; z%@nE?dc8qZ }F.z)FsS F ppE|ll?Wm-uR/a'b-8:?t`1-'k~+}v) RZh . ۙF^Q~T?)xǸ_?랼 xT.-8M$./rzo)Ax>/M~<=%4},x-n~f\RQ *,A]R1G@i -AOEOP)JUE3WsgpM#4-d\5 G -O`L2laF j]g"ьp7F"-uZcM .D dLܜYRЋX_-W]ڃ.(* %s?ǀHx@o+8qW9d]2>^ux{)-us5F?/*>^w3Q+e]8.zȵCϋ,`\yif=-aEܚW{aZvnG9SeS7PjoW#M5hL17C_v,m)YjLV%d~̤Ж'DFB]4C#.uD`p0I_%,mASFߝíe'4FMm0خmj',{:㲏*Qyd#g#I  NR"聦Sb ~_C(ʁOG˥xtu&!}6;V491/ }?&*#sa2',ʩyY4?APRNZ`8D/ksIs$%*m{xҋmTVSyfs_`}[IZ.Da Fl0N3әϩ!`GRb3$Ph{ǴWiKqQr:S,wP~^T~C\l_Q500^0#}Se]+m j{-_ۣ;1z^_8:%A: l=Vm=̙ӁZ'SsΒُk q-ژ%Mb3bGVQ%Un}Pxjҿ #>z$l%-|^Wλs:C[[|ub*{CzVkEA^aJPo5H͚6%\n%'efPM8^-u!,pp$bF1L P5# =B2-HlDB)jz<φB/\mrZ/]Tw =)}j& 7;;MSx.%bG'wN\B W( |Qx7wlP9,yy㷲7\$ ?F#z=Gn(?/tεrd8^[(PFɤ`^d*.j(cX.xM [@q2|euׯ>k˪YA5_ҺNߎFf&&6v 1aG\SR<yڿv?v1ӴDEtBQ|/Vxٽ)zumY!ljK(9/{7/2<Ł)Z ~Yk~XzSx~dET~2K!<r*(0daBBeq>]!02g}U=!9LOhX;Qy"[ 0dJfX3*zRPU -^ f`)ќU@`CʞܮfV; _zxsmt][x۲-pHɯa}hHekũfR65)OC+Fطr1i@FEqVR#ilKt]3bv= |O/a&s Ku=UFhh;?}_\lfM1)q`ZcٔF+͠aW_((Б4ڒ ɜhAF >iTAEx{$p\Teb;o z[`5Hy{M h;i/Cw>ƭM}=iT4-8yp 8 a4.>hgP֓ӡgUlѳF Cx:As:> A" !th6{jR, ,~3s5to I]0̂rV%à:$L&"C,%Y!4dgEJdU(Y׭Z 6M(128@;{G+`} \jv %Scآvtʊph  BţqZӍʼ)R5\DW` : q!(t y`'jv|s-y3 fgTdUa'oK Q|t1,A(Ln‡S<5c>RD5& ލڪ[Ƽ\K?,=qoWx60;jп=>Wb@^&ex0t*i N^'9M8 5 F[S0 ))ưգ`wA5k'{]IwԮmϤ8@pU~1Ù,'IN5.-b1J\PmDB a'W0o\,} #b{<{ci\Ũ.U٘ `q` cRU{.o}w Fq5ktJ)/J.iWj8?һ+g +˲WKdU*)c/`Ԍ,/ R"۶:_n2_񓋚f=USz$ﳪ_bp @Ê0#ڏ8%WwHϷSv9>[̙XŴ~EPG RBbba6CrPZ!S(GsE2Z>k3Fx)9;b! Fj6-Z>nYjgzꍪ5=N.Po,  -~̩: )ti_M%)g(FӐQi/<{X r~LI2揫dfR YLb .X`piy?XPn 0LLz& BRV["ÔKv,|>n k/ٿ6wE&)UUU@`HD[ >7Be7t6<8JV0|VW ⭆Y3H_ͿrQ=ߐQMLWn'+VS;bwTWzWv879=FLe(B3t~uT9?*ŅTmgInUj߼?E:ם/b%_a];\pVAdryCKfPcmFH TձVoYx~:c],2Բu[ctod2wLi'/@Lj> B!r ݴ ]+6{4A4HūLJNhZy{%_ le}Fے]nY_y:JʚENT)'pswR~\/7nzjCEvjs_&|pAd7.}i3:Z'W;[ 19 j04b,,F.+S.r7P$s&oo\fYgUl=xofiE^ӓ9SJ<PQwi;d>`j}O:YΣs&[?OWh"|E1|# @ĿwSUrB:?o7þܝ` mk'nsZUavUh\%z}ɽ4Ŋ0CKF.`.&ªtD6,,;$#B S2h3IO͟J7xXRDo ZfB`̹X@}upc6Bסrblޭݫ _,=vj*<?BJ 9?߈5Md}z׫Z?WmYQ]RJ2M0 x-/^+QБ_/¨?{aZi$6%N(淍CЅoc^2Ygz56P7}_S-P=K'wOf*`Td\2(v׈a#_IƖѺRk&:i52 pX2@_A9( Kە^di<e`JƣS3> Qꢼ~A饉ޢD8~zhtpuELY;,+O6sE60'H!JN?* =USIy%ՀdvYeNʞ_ᅞ5СÏsZeshB"rto5&Ѽs7囃 ܱ=@ښR]/YtO;Ga{ti^N3Z)R*ǣaopIt8b׌`/ BDz}W4u~։+(>1E7o}{E+!nY^ZLHTʼ|qsÇzL@/ `;!CIU%5kRG"xgR !jb>Wfl]v27%quGzpL@QtV*ؿ#gS>MO|䗎o\ɥ|`i =rE)$Fk>XH+4nضP"8izh5sI1䰋YW! $ ]͐glk}=(I&ͧǸqGظZ{w#f '7y}>lG6Y3/+e"Vp(THbb\;1adEHXA)K_(q吳=j$W}7*|X:&"H@ȃWqwލC[cW1)7k G8C|M [.\*>F=w8RPP`+B xgXګH\I\3b͞+ *~氤 Mj=fsEF&vvEY!Hgkr—($֪^doBªGck!8yֵrޝ[5+~a4_I_I~oǬsxنzPM ]\`MT\C "WPNVC}NyUT>tC)XԀhFb1T @݁9V m7-TW4Th7jɤhhqF&3|fwSfIT9fxgp׸H0O2e=РޔGm=̐ b 8)ś7]\jс?R&;eXzW/mPApSte{X+?_?p>I\ŊP[%ȆW;v+K(#[p4C`, =\-6}~%\$4)+|nooS~b&ӒytmqTh>VjY-+?5gIJ0Kc'@/ yL+x4C:;~6 btH@b*y$^y=d3j@A!~^ kIPBxDSHMč7әW g_#U~9SJ(0$пr#cxcHv[ؖ>=Bͼ̻ Kbؙ^;a0ũwfGUFcܕnOaCP񓁞{}cdx߿~EKf[{^KDb/rG*Z Q X9^}/cl<, 8DƬz9kJi4P5LMh3[ )(W"^ $)P0oKBy346Ŏ)*3i^Z $^(n7>/YsSַ@le\ H)RUZI$;疯hOd0VvkYZ.MY^'?PƫFwzfmuڝ,}@XPA37q ܩcNN_k6ܫj(W( R;X#YCpc^*GwYljD)yt-6UXMyAŭ^n&Vq$%L<ӛ{t!1Kչƕs& H􎅌W׍ 8@kT gѦg2xYL2HG[jNj$/7q~k՚fw pG#N]vHyBR#=T+HTf3'@u*x JݞMH^`˲sǑ뼧]&bu960Y+ xϤeiA_aSG6`ݺ^HS}JHA߸gZZ,HT`֘a7*qp;qTbWB)5c?$ʋ%R<\7I c.8[1r_˷ OKma_y_!lл|6~>; kdў7M'YN]= [#w }y1Y"u$.vziC͆tX7} ޵ylMy}`Y\J(0rCBO~k@jA X76" F?q̈́ X$Ȓ8 jr [[jpȽӫ%6~byjP¿u OiWs^Y?aƽnZL(buGP/0JXB_Ȇ=r8S,+_oM'X't7N_'o`tz?.ȭT)gyle雂}kmR0\X @@A(x:Z l4&Bi @8%tqdF<\/x[Fb{Jb-,9ޚmHzsU㹀1;k# & 5!E}4j b>JadR]yJ0u+x0SYJ(.+%3_۶aOv֜# HJlJUIii$R",I <YE/VC,#– |?ylv/@v8ͽl&[1"cI Z)s<Q9RoXEǵoy=T]ezHol6v!T͆7 6w2ֆJjʛc!Jsҵ(M8HzqIYoj}}klõ{̇DQb `(~B<+b CQP*jAs]nW{񶵱ӂdR՝JP%ksM,a"qm5F.1m7IC6漽9H꽨?Y{$>^Ir_usU> ®ی֘U!I{/G7kdXmٲ@Z5>~ #H0V<&3~d$@1@-\RREN+6<ڷxFρ >ļ >DDCO'L @>;r7OPz8'zB; ?,{{3#JABVP !M-yPIKO *%^֗~W>J]LRc re\~~oxk Qoܫp9a;.\ϦB,:uAH(I0 d+7+: T-jj5-[P)b*6;TRdj'+Isj%]w@TRVV; ILm*l`SUWy\n<ayN}>D . 6:I&n74Wl2w6?.^Ok.{0,ڣ"^sCTF_!4fuCڬۏNNE-8ԣ%[H&E}~zUjWd}l;n W0҃B҈9h<-o5ϚM돭y&0))RԵ |4^S/0I)0X `dWy12x]^`ǁK0@}Me[ #Lz4DǤ!@)rE&hL^>V]/W#-ۖ߷F"ѽy:}k:"`&Pj"+*?+s_H/3;8_ZOkh3{ENYnqW[laԩz /mI W<1;{RY &|?*YSE]`gj m` 3ב:ԡ5)k CTL)-9']n{ mc"5N"1Ky9 {ڟJ2;X=;^ocgj}|?9QH)M,SG6!˯%Aj9 5Ez[G^%/^ʬŒ\]xdNﺝNόP34.Y gWAhC+v\:~C'C'?&Rw_s\712ی4~ !CwV&gFnak5zEkj ]G^/ɽq5KX;0hv$q>MTݾO#_3G̅ȏ;ĝp_>~Өfi~&6lMwd[šG }yET$VDaUupW2UsR|WJulHJ[Am*޽mڱ^]0Ep8#=\ RaaEM/U|/[Iyv7'f*T??m)\ ,hs<]յh! h@! TY) ٕ|ϡȫrAF @g'!q/q~ֶs%0(fxzɂVry1;uKقj j: H A+t[$,])v6YkWfiZIڎϵW~ZgUcu]N@h8k}N: ,cҤ7E K[rȫG+Sa//`HfsFʣM<b/]b PL"y-ͣ)VpH~麶V 0n>#ac__`{$FJK\?'%PAƢ9pK _(ErcϮ6הĂ7u5j䙄;HV,:٦i˃5e YETKAaʔ+*V*XMt';%vwv{m|!| @Akx5J$ʣ(e.AMϨY\ UP,ktwz% o:YlBC{R!*S5k۫c]]>_馚tVBB>FG~_&~o@}V9 ZA*/"3$eT`.wNc o^}!pGuM:b5=\?**YlYB.O?/۰Î( 0,on|~N,@̰YR=bPV&e5W.BH1,CC)t;WgyFCt 0+V\F6ow{(^2b_>Is5yN/d`/`wpq`.b\טE/ z֮AQW^ExX؛A: UbyUR\4^LNy{Ք~4k>Q,W:h_vk#h<bԤ~?>m vUqغ^qi\cv>'c O'/I}=7 4u0iQg⻤u4^zNaCT(\@=fxS h0 l5x*g^osR,5Lj$=&Mz֦(hiySXonwyW4[⪟bz~L/Y=fӕwousm ^jo>`FM*H0] .:ܱiݻ(M]ۡu-؉irXI$sӻWI7+AdIH0q$cwvq1yw/+茹v[͉ixfחs^8ӳuun2`enn뒚k;2νs(JIFwWwbD`ѦW=ڞuzKEtKz6tޖQ,E^v{w L6^]ץ'wYM C "2b"Bs9g*yzFv=Juqf ^ufr&sn({zgXlԮѧo'l*{tZrG r‰ ! IRLsB܀8[ ݺF] ]O=Og,WR\c:z**T93$bnV,` F,!ە "Vݧ a]݇oi 򸔝 Y0)dm*&IURڐ e#d ZWE.nķ\zD΁Ly)*nw{n$Nv\w{<ۥEίS8c.U XI $;u 2nzӘFeƺnȧs! 1NSn&zJ tWdMѮȝ7=f"Xtu4ZAIIqeP:t[Dk1-ɋ{bV*ATRԪbLLjT4qU "h dcFl! aG5.ە֦D+!W3Uu|Wf=_]nrx]4As!.d9VGqq\ѩ5"a0ˤDWTI C+$0$8M\m̗R53CQÈm) 1\resSDsst!PŌ5P%2dHs2A\#@Qp\bsi1N@ 4G SY& ' 0 C&G %)Nm-LfQ2҈#̀)ksCHm&\CZ18xId\fd &L2b]UzWF\RيBdI.DBp1x"]D/#d4sϛB|vk:q*+1f5˜%;1\.FBl k!|pfb#7$koTĮN ynf،MؼpyrB Xݷ779ɷ"`2I\8#\n1Vf  Nbjq،rg'.db`2g&A9+ iX6*.rLRIģ5g27$R9 60E' ph7y24y-bhq "1 ӌC7u42xp)BG)\@whv+`&I+MQ4jJLR•.s)RiA308wr#&21Ůf@$Ь1q%5`nPdd"V ĥ4vː 2h5R90@QL2D9\9me`sEI7dui6McnY)r 8˻R$89,$eUI&)m%7ZT[ . &IBX%!4.+2f1p-ॄ /]ssa m(DqjG!M#I(S 0TG-Nv}fO ݂#آ m8Zr*". q3&IqKay.HCXk3)JA`U! 2F)4y%y8FL( F 4a[I1 a2c8&JFԮɕe v뀣D"őr@ $G,:]cD^2KUDb.c#&Gn̻׻ܘc:'$&-E&, qu8]n>HipLGD2aEGoi5jrMt77Wwwe uVNF;;"3W;7G[,ۭr9Ch\w]u5/7F5v)c>|iD{+;p;W_.6Myuuʼn[ݼў)uБ4EY3dwpl- p MvL:;[InHhwF9v󙯝ky8j #$2v"E@]^]6^o}wRB"q\!Po]_iv=eYhj,\s4H3rM&A*drA#G䃐.B psM-P4Rręvᩲ`d1R Mu# RYDd˥, %YwFF\s2)25I dk  $rɊ$`32&.F9KK"Cv!DE#QdldS .u˜Ďa$#VmDY\Hh lm ͸ڰcHVG.,^$Ho55`ɬ5 BErI9R 9":eFˋf7m9)c]ɒ-ӮW@pۛHh J4j+EUV+\Pdz ILlj2JH'%co'X!U\[Z;r*v`u,$Ge$&B1&h(^ iܐ2RlA$r"]5dW,"ntG.v;Eq`)daBB8j_N4;uQu򞗷)^Z$EDc2mU`ÖM;;wPIr&5 @0 8 rHo%rMqLIS9v+W4WwN{{gv!Jo S!>/MsWXeo={u$]כ|sxy\׷v)N'-^"B;\+޼.Sv"{Ws;c:rHMEE29/7 -F32b.$r(v㦽W0Ř,ApB\tݹ5 s =&ކv]wL̐TPTqʕw46"͉bY (\&kIfiD7 35*$.\(L56fv49hԅ&BenLɬ՛NL\x(LW cpB.E!̔ەȚQ"A.R&L$ j‰&V$pfN8.AJ*U%D,IT܎wt1n]:rƆmix];IÆl"(pKHFk\7 _g׍ݵ!\fnV9#X;J[..1bIe1Qk[\y&tRMLX0\yeN%vyʲI\Xɒ0HܚIf@HFbZ*BI!ʄ,"RbČF̖dQi4U%fX)˓3Sq".XT ,EK"%maB{]7޻u15RjI!Yp(B ̋Wi\.ɋsWva#2A+[ՕDh"1q D"2 !H6HRADBҔKn5$-EIaRVBc"RI[-$I0PhLsguyl Y6t#D1&I s>5y"㌋&3!k)%LU Ĥa$2B$fVJY&"l!:*0:q#si.îܹABHEę!Dld+Va`+++lBYJXY\l-ar,Hdc#`de0Al9fDJ#̒r‰UEF GFrsfAY1 ";%d 0PQFDcG(S(uB\6Q Y×j 561ń,2q%\$H$AFIf.̒Vdb\!Xe#5"M,)5c$[jEȪH9&:s;:wu޽rr('Jo0KqgNqW#BV̍rp$9UɌ! iJ9DփW JJDmL#HFc2X"&p8kRBё"caIq &n7E BAdB )Fɕ[wd$+U3$#[`, a,-Yqr\:H,dAH 2B3f3-b"XAIXI1$՝neDyȤr$VHkeY06v5-$UD咱BMJu.X #$IQ$T,`dIEBIztMaFQalTJ`phvEHĈ-P l-A&2DfAD ,3ˊMEY 5ɑ eVӎ)6t]#$H㭨s 8U]㘶cHA`đbN%Z̉8&܅dF<퀦8j \vFEq 8ŷ(qE@ 36nbʔְAQr5aY-1$Ey :K%#2ǩXXIm5dX#zy`L -ȕ!S AXHIk2+ cXV9# ReVUHU:K)ud崎"kcI G+M39QQ9ۨ<TnQAT0brtԊHFcG"L$@MǣPjAI.й4OƸȞI+/7RҲT>~7ˏ&,nh#m.zm+\昀|T2rSc4= KҗU7'a3_BnPR:ȓH,8#2Wc)!K@Lj&L`֖FI v[54犯W( Z `c^jMX|%4ʹ>5M^^91SI;^M!{Cٰr53ǚ53]iZn[_59P<TN'~0ǵhm!x+ۅJ3^az7-sP2PS3EV0ݑv%gZ6*rh/nsS}LJqL}"AJ51n$W̬%b&1,Ѭ1aFAYJ[aHZ6]>$~ [υr?Cy>s^Az.wU~6 vpF n{~}6c4T>0 ,_;p_:GZ)_,cR=!^]L)(˖`kαhrЕy-;iM2VAFixs3+v_fEBRpvQ릗Cg":>6xp M{W}ߙ^Q*fu4i핀{Eb0$` aQ6AaWJଢ଼HXd{liæ5\t+su4ItŦB-W.T;&4^k)8V0sPsyK~n rV4*jL/⿢y.-5cSP˲:eah>Ɠ):X/jڸn-z!h`2%2|Zpc}QžOt~ NfYҩțuws|ںf-$EȟOB>~pZ@@.`1fz- 5X 8wޔBRaN>i-Sa[Z^LEzj),4)j2$(DҖJP}V7D4o-? 4R ¤A=fǝFiXXB2n<Fq牿ߚcnSsGWro4օ :M*xV=ÿU^k[2 @OAAA@UzKd64`g̽QFdɁ^zޗIUӷ r ܤ3ц|7\vzm}SKFAy9$4p>Wwեݫ(w*ݕhXWαk+FPJܭќ?%#H$wyS8̜"=|lP=,j rך,2:}J9^2~߹~P gߍrJV(mek Bi zk#LOIܝLES2<TԨ0q"]ʩ۪#:~o6Zcz6*f U!%P$6BIAZu VOyZ~e܌XL٣rR*"Jt:ʦ^XԊ^zJ( 9E276L'0:taqC;gE͌J+Mr:.RFZAWu+>MEՎ1i+ArI\ʲeq.r/0<K]*;|`Yz<Ǜm xOE]8% *^`uLZGGgy҅=Lo[uvV]WWz]CO]?u=ߕ8.(gD~|W1Q՗ڻs{!֗€c^HWIiB?S+'^y'b7/C\+r//%9 Si2V颭^zMޗ+cu(5ZfB&ajve?-`6ߖoSwm$XQ65c45>B/kӌ`9rpXhcJF4̌= o6r1eOO1w"K52T:c7C|Bh)x0H54Dus(hD.u[╇L8kZ*X)p Cn=x.^N ADE/bl}5(6^ 4Q>wwW kZ2vųO9_|' Sq yS> G w Z}?gdQG[HXJQw 7qBuHPT#TG ?~ JGo UfysH%mgc۶:+?r(Fbv˃4a\~蠗"]Hsl\D})Y0UH\bX!%z!1UGZ91{J|$A0*HBʡਤ%jèUG1^c#^B3{d3q oypxK3ҕὧJ1BQvJ9,jCkͮbgFȐfϋK FՒ{r`7jIU䢭ly[r9|{Sq:4zzw0埉Igtq:K3`lnL7QP:/YI^&0agVmxrF=lW^gQ~G7ޫ[=>GIM5- \_$z5rmq|D:V銣Ha}ԎGl{9<'iWe{8glM.m޳dJرsrk. I\ [5m=E<l 5:}Ϯ򯨗X7'ЎgÝCeNӫ:p2FOaT5W4`c`=Ýksw} {oxPf7+䔢kimm! $Nh=7G7M +NY,u+*DФ9y4Tf:tV`m*qYTv5[Ѥڻ\a63>?\ը౱$OHrQGǠ5qᔆɟPl`4E^JfSs/x4M$YҜNP&d(K$k!E=1ka@Xj Y,^盪j jVZ4 .}|#;gGrhY l=GYg.⍣u0."*Yu{s#~J&,e)+7taJf+iD?:t4nS`xbu?+$ٳM/z(!7o&Rmpq;w$H>ZR3 u03v]+c/F< ⤒%\$$%Q9;d?8Y2!,10\(n7dvFpDa[zػj> 1úzBb ˊzH7Ԇ1lDT6 5nT,xxPEQr:.d=0Gwe"acPy.uήDkX8w!@S(DZЦh ̼^JuHj@"l$pxr+ 'Gp륽%{2!vzn gC)WPJ/WcʆϾ>إbw }g@b<2)^uýf .1]!yjgF]A{ɢR^w ̭ܾJڋ.3ݏT?" {3rUc. n)-B>m#Wwg;=Tr 3&{dR凕y[ߏ&GifPQ$UZi 9C ^G>2z(c~pOy|=K~yw jk 0L0|>ǁ:sv˖O77v&BhcxZ/A`sŵmsxZϲp9FeEfY ڞF}4zi#wq̿up;gn@ jOb9%_|XkTA@-͵gCTU8Cdck\ d9mEJeGڿ\}wuP^iΕXÅNkmKM %5^?SU3HV#Zg3CGT0p,wzz $>#V6Jd{iV^ .mZk jCTwir>7y-'k 2U]<|=51uav1C2jc PW6ZW}:AgÃ@Gj ɬaw}; 6Vqp 'cyӲUa`')lǞ;S9@M pPf"W/,-58d-^HI}x8E٥Y'Ӓ̽Ӷv(gdJoڟaP6(w* t_x4y#B o 0Pp{B# Ekio'si,72\`o4^Bg?/A~Wyx߁OuˑP$jGC5P b WnU P:hr+-8[<#` /ӭb[Zق g3 Pvs,2(efu5@ 8K5|Qʥk`A]yN Z  B4M6"1>r-<,B GԜ=EPgH㡀VD+f ߟBf׏|y ]_kw(GmE˒HBu*njaRYTlca!)#+e7m婒7pvS#RTM'6wm%W7F >2l7cW6km-Kc[H#!t-'u>Zq3nP،<}6SЪo3*y!| )Ij@+G '#>;&NT{jwAbE/h)j1&,qAaj֩!Eo&|}+'w-, `8ljU>>yB/p#4vIԮsLgM,~7+Gkqs)^I/57yH <T*a\FμH<9ځ(^̠G/nJ\8"Aνvˤ9 TY :$V Jv9)\zO(pɱXx_,u䚫> x(˗-iun喠 [ G{EbCc !4Nj8iū^WN.\b| Zz>2𨉁 BŬez LcUa}V 8rys+{$sJE5aװv sWWn i_V#$2YqejA(BV$#Q` DP$Gm3[ {Yt̐BH$Hy2ʱF|c|>{g+;7p҈}ZkIl+!YOw-+lWicӿԥC@p4sT5c KPr›]=l0%H4O{k]燗B) v[wGtw' te+B )JӗYE@}"O7jهvVgq9͖^{ @ {尾UojMv=bGm/yޭp^}h7;۝{aCU @( =}>]\R€;QGrjh$͕@+.sٝle=^}<}syhc|â@)D@ux@1ݚkNᎵwyudr6G@)oY>wzk}=G jN=; ֋ϰz{:Eՠ;;= ) *@PUBT$( EUJ(IT\G}{Ty;xo F}/7Cn@> Jl$ tlwǢE8w;!υU_fGmgn(kN KQp (i@ i&M2dDƀF41 3T"f 4dЙ2d5=4M'joTzP5=G驦zGښ=&SڏS OS@ڍzh2@H4jhѤzz'd 4@@)"$IF?T1Oԍh 2~zi41a4iiO)< x~IS$Qj4hiz4i=AښhP="H b&zTSMOMQSmQ4zzjzjd4zSM=@z _z?T@W Ѓ[e8@񿂅Ro'M&pBO!a-3IkVX[]6Vi( 4?+⟸g{-i9Xey9ϛ݊'0'ljd+"ZII;!c0&vI)LfM fxvXιe2^XL1d1cx&frJRs@d"z &L6Lhtr0˜23LKlrW3fc R'$,-$VCf|n01y-99k\eoƴo L(1R!ŽLU +4%D'D$BHTTݫ1e- QUiVMHKQFVzV@$Y A/AK@k]?VB/Q7lRjϊ(;,`m᱅H#:s {"94=( ?e_//|Kןy[dveNW.uy$l4'OxzcOQUH`cT+ NԼE=kbT䓣rg[ 06'Q#""2Q,PHD{orbn'9kyS_㩾 NPEKW#oxkt)eFf4 33Y 5)!NMA]w 5K @5j@ e!lI]dMoL~1@&l $$ 睮`ѩ:92mpB! ^uH62g| Dxݐ/\/^{92OW"mzc|́fVxq!5pw2Bzѓӓ_:*R}koUM fJI|DXPɑ)s ~?κt poi')795nޕ P'ޫuXs$J91Vw6=r$$y$ EP$ R22bL)UٽwWuI3ە:Ivա͟tٖgwՒ`a2d*<ywդ7g|d{C:.,y(fZD-O;`TP̊)PAxeI^L/;It/}O7d`@J;5q)2 ]\&v_u=ڢ;c{KW?g4`I"}[vvYΪ"9XY8%D!F k绅/z뉏tdDH0l\F$ HEs\BH~;M!)*C̈EOyLiP@j0ɚHAB B SGA>pwc{<'P2YXXM~~wVݕNՑ9VɤvG,8ezge;oV&%{ 8_(O*/GP~!P&5]MeRs(Nk(Wda`a=z{dq'W1,+l0BALjTfmǮ7d5A =hb*7F OJ !JJ";mub!;NcҗtǏ[ d$}oãmaC'kwκzVNy#ޝκl# NU[:[6>k[b~d~>>r(*x!tIb ~9ls c9 ٘[fJsXItM1$ c $$aWm$`r݁۷˚1`8/Wn3^NtD-h USyP@0bW_dqSfL?ؽu0}B@ p͊ nw):L&&*@pHp8@ߗL4 UJ=)D KBHPIJjT̍JSM54 64U&6i-h+m td#(X$ܕr0e+j鶮h5]SwWTGRC\>~A-}:pϷABzgy0ry:aUO=UhBdZZDVDZ:5kPPIU'2H5 It2>pD>~%ݯ2{R<,Ójw?)i43gkMbKND#47P.W2A/umư)5Q8pݴA눢@Ġ4{ N%B !yp+ fX|nܪ%z#G⪺ I"Q^ AC F-$hr4leTA؆MeӻTU~/0+:[i?{{~DPؿ+01lm9:%'/Qׯw zwFkߣܑ*%U_ %ߪU@# /G 1'ɽ:y-*V#,$/OCb,Q0@S웿sGóe .b7$Q}64l@)e`.RBHΉK~A=^u2wQf!aBCqe s ~ukbI^Ν\esb1/(_#|@qBa`Y #IYgjUG ֠T(*j+> PɴӒ}Ef)Ŕ0r!GkvHBC_ĥZCB~7Db|S}O'r<?#><#'. ˶#ewy9` f8QLcl)lD eֽY'$JI#Fl&BQ;Krr[;4TF)58oٖ/L2djx1j;'(NNÝ~= e-Mcڗ1Bjb?%P>ױz9'8ir>Wy,QIDPae2^~%rJ˻94 `!5Z!N.\w;R7}d\z7M9[ZW?۱M;X N%^yHÆ!3Fk2]GfڶTM |}}_<92PZH?ݾ3ޏǀ+b s ܙ>|$Pg]n^@Rxp\WIu}MXB[Q*Խ!>{Ɋ"rf94OI)c ȩ;Y_! Rpɵ?>Y~9`\2bz|T>v`yʃGr:vH,=CR5F|n['mı1F1!埄J-^w- ^:Aoc mMK&Ow(PED2=p͞z KЄ6fl iތ`jOM@݇I,B %~~θ\Ckk#zn̗)]ח'nVfkvMl-!ZQ_ǘ@E]NAs'zJ%#E=sntxWn d Ƥ#bm "%4uR4؊Q^S? -ZG=" FJk*"R)(4aa8<{!%᩽YˉÅc@4204`uH)Lt Br7ec:$۵5l`UFSMKҒ!- h)R6xٹ7mvuBΌhL+\KMK;gpcxYcC,-7N^[#-cyRň-3W! ǦfS,%pX7H4yi^8$.'?we%mrh֓IJך5Atye/, c6+(Yees:qEc6jJ7Μ`D cD"DNT0YŜٲ)*I ,FSuwM(J&v wqc9YN5ujԴntc NP<ܽaQ902M\:S^B{C=҅p"W#ɍ̈}W~JѶ|nT˫sV @7_ d?kP|zp! ƓP ҽ9t^d쓄6`L:mdu2jE)7QOP)B)V~zZ)N?'D'Fq㽔+]wu}[lDD`TgzM#d "M#X va2Ab\cy=)^!@+@ @! G!a" >80Ü@>]['YC_WSl Z*|OTT(ke x۽j7j\pp:@@0O- Gy 2^B6UBM$5,roǔ2fV3&ui!p ZmC!0KUa3*k5!6V,i&,i8D"$)IW5]TV$Qm>SDGoqX-R멿c< ib1Goy>C_wbG@[nLɁ}Z}?{Bd=9` h"cĈkߺUoMj'ok{#Q*$3 fCԇ(1RvBU!Pߠ$#iOJF-ͷ-oܝp"@ޑWN2cV`L2dI$c-=j~p*_o A[%8L9\2F3⊥G0sZu ӌEnҦӎ %GIuL[N܀CUVЎ4%v৞sЄEK@kby6E4PXDby*}8 $I*ZZHM]M+&m~y6sA XDŽV~+.}}C9w ܈WUBq{^`S 1*BK{=Y 9|pÃ/#֎z P f {T ڪ{&tJCbURscRLˈON\CRKؼm U9a{b=? ;#в _r|G}ݱRe%~_6*;{ bnl8$. \`J$@̌#`OMMOf_;vڸM :=ΉD$3,1Jd z(=u?A5;pu(<[ G ` gcnBZ{N aDen{2CûS{5 LAYZ )%vn߃L=Anb\]W4}K`UK㶉O][6I< WgO}]Р0ŵHsd`Uגì'Nl\-0<)U*?tKA[+= -+RUe6i6ZogY$>kxŨ*&$5a%$ F$M>O"!̸IϐRN>m]bc27l̳\Lp̏!cSt+X"t);0l1fesa{$IP!RJ*m3csiJ*Ƅ6G!JD\›HTW8=R8K-6,a?=}0:Z,RZH|V0pQ{ |oNڵ% *=8x!9{9n>|9 @T"Uٟ:PV{ `{oL)ZË4)Uҹm$mmC %T8JlR5f\Mp1cA(ЂFv*Q)FbBs_/E'ӝL?A ȤU'vRi>4O ^}]|-GR0Ue-NRBh)幱 @ P^ -L,xOdvmB8NPYi5-9b7P*j19nr+#2W TN_Ư7vU~}x!PR$@ 8< uڲKCb򰗊B‹C_v܀6N8YAH Т<9$zJUTPB RO |`NFaO’* ʧ3 z <9_Pn<<< AV]g(,˒E"Uadv{Ro֠3mA5&uD T BokܺoEaiECvݲ Xb/\q!N R^ 'BGa: r\ a@nUd' rb5]{n*BMvoqo%{(^(IBҢ0D$(pwxxi 8I T5 *&-**O]L{RA8f*l%dazHVc[{2 IBNnxՍ;؆4@b A]اg 2Oa@Ȅ"/ȽrsF&+{]͕"5Pisfk|:m/oi2Iak! ΝohE0޷w " T)-"@ƱX9֛PA]$uR1ՍuHL4 *β6_$wm0»}6ᾓw<U$p/k-3^T a?>J |~Px1>]?>D?սbmӒwRu3pTY‡B}DB= q>993=̦> iԄ-Rf+ HXݛS {5.ژ9Nx۴`]! !э ,I`ne$ȓa#4OI%2t5vk\HN/*NS$^ѰQ\k %$]bEC.I&iZMX^\ g.@H̨l,20/(٭8IyVɡukg[t1+8.`R5>^icA*0G-DPB )+ϧ6Oje`djQiKVLgOQ i hɢ1f&Ibn`݅A\HqyM2i!9YBX!l(E2_`,*{w^Rʙ7. ][+&2hN0H4(PF5-*ᛡLi!>Nkk}﹯xC7QfHA1waQ':E;!H@Dxz7<3e!Knm ݕfܚ&i?Aw I˞Fdrprd\ꜳQi1~S6J ya`/1&Br/[nH2U,FW,EϿ>C;$킯~-54Νnk] ٩ßiOn:3QSC$G˘HQ˖9<P$(sE`fzJL; _('dG2&S'} -~MpX a`c1!#&HE,GMg1C}V X|||ɴ;@!]"JHx'~*Ix9 fcFrh|fN)NJ-Fw*P:&wI{r8ryRȏmT|?/܀b⃳n1 熎Dw`؎2^z珷߳{hQ@$ 8JF]O4(h[b:X$gB:"E(Ud>) 0n܀ )RF )=G,yԏ!ƃ/k~b  r[JHM&(R:JMIIJsFCaX \daM`I$=2ݴ~1{Ra$=ES8Hd+~5ߎwq7Hz;  һ䅶@ *Ѵ-P=;^N I*BDž;:U鞩]^m@\!j˸:3f\fí%h) @;m R;z<7(ᔱ˅CHd.ݽkb1hq Lʞ~{vzgNJ:x}xf~kh9g?ŝ% DNs3!m7V2xLL_8|ݞ#1DIlr>8[3'P )%/m5#A":ri~ßgGD/W1/SfC32ZZYv¡RP\XVCI gl~s򹽓d>(U$z H] j 0B-f/q_64L M0 Tj0j܉hZ-E:-m[T44C^â "n$¯2<&rP̅!9+;!# ԉQˍxAGe×.-)]ӗ,@ `|/]f@jBU(zȗU_֎.;/; "'i[FX/q/tB"oLSS*`L#hq wW/RA\`+#!\}GӇ;/=UT$dNzJq~Zt[TY=A9Tm"ȿs8M)BQ4O^7U5 # &OHd=Mu 9j[p/ٞ;H@BP0Bw g3eG_@Q*RQ9ZŲ&DzH&A}&MW]Ad7%PU'QךJ5MsV^?1NbNO"FEBAAp75d|%2k'|?kଐ'$/;Ǒ/RPo-zSAR9b<=^QP4px\`^ƒ5^kiڠ n?'PΡy`4Q+'Dk޺N]!3i+J !K;,}rB J0>r$x[۲B>P7/>u<}U'Շ\魄?|iẓҞI߰{-_F+'7'LTEAKU Aa|>o#@`ة-J*D~y:9zWpr@UKq=i, $BDbA/ڪ’;:_{ 2H<&cv;`P~̤C X\uFa`@Ƅ#F~ 3@sI6bJ*xu@R֑/gPPMHSR#E#DTf!bI OIRtx}>瓱'BvHkz6z޶>"*Qb"k3H6jh*"bV6QT&>Oԗx0BKvaKduRC;5O\;7j ^T[C$,B;jUuƍE= xm NS%R0{{Xxpw+~`n0-@[3͖MOKzAz$Jr2Yo{6n@SJ{\wy(ZG)b ]/({]@\Kv%k(*G4*<˻w'͓TIBny㙓 3ٵy@٢{ʶʖX@Ao||D 𐎪vNrXxRFxl %Fc-#=AO _ar 5Q/뮻- M ԘuQQB%h7Ԃ+a=ҷ✤ /xX]Ҙ u3lpg UG Pq{]6:k8w,!/bZӏ1OMrf}u9ZKR8E E/אjr]IͦvaCP8@m.qeAM$:vo#@?#{JeUqGى"~b(Xd *  my rd$FwgXrEޒٕDؕn yV a6hϋTXDJI@3;6Nq/})7PyvrN((; 7IYA蚅NҢ|^avo~ ްގ&mڏgO5[xqO2 JR UleǍ>Ђ2^=4Ba{wH4 AQ"&Th H3b1�PO/UdCn mXOOuϝq(;>bQ }%A O:c/N󙶞¥vB_F{7=|ջQ TŞ!}z&- d9?7H^|]2b{?Pl1TGh}7;}Cמރ^h6zuAïc@H<;paehȝXm@݊BM,v1C $ /I :h)}7"esϥkHkenABPmI)@w'`@\7QƞFi3peammC_>bN5 jiQ OƓIh7o~/QTv.X#M Pd4@"~NjB *M}3{Nﹴ]`?6t=V? 3U(PI{&QtAN $?H6hpB&^O՘zuAbۛ n XܚrxKb2].^wiV)IDQH=lo n*ud`ZX M`fkMoখ#i6HAA@HPxYNS/@nԮ فwj=Q7'woo3#:3i" > +6l˾؎b-u1l oPCFNnӾ\6|1偯@}Ő:N;ŇnT\f/ e^Ɠx4%(ۘ3l4&t^lvD%D=Cl ;fv]:+X_yg_oQG}$9,X;y@Xb<9&w⬔UM>Vy, ^ x|f}9\lئD Vo-oeAn1<&nA w%2 ڈ*>GuAtͫ ]&8j;wK 7dxɒd?"P F9DuרzLN'5PC61/*LuC6 &$@̋ F KC[!~z5y \o }V`R ꮫ$$ B]*xYЌʌ#㬴Wm]ZW )c ph6P@ް7@ɹ:A?4@Q !q]PCj'Lhd"}++;^"C A!;938ptFdDg'k Ϊ@$g(IQղ6U͆Q)b"4P)D z:\nz Hw#=wG@{ad$1(=2/s ]9u[iɴXҀ<2~vCvvF V(i@Fh]F r 2"EEnP1R+ 2lVByͺ*4s9glK d5gȊ=`8/ȟ;ЦTV:|1 xXD(,c"BZ!Yx-dIkwlU2ș\Ą­f4M2&krk=g"I::fFތa/~ VOJۖ_ow?(@Cda6?8Spſ"yLfn^助6|)wڸA ">8 ȹoTCO[Mlx=_}sJfx9Y諬9r S>/m~zdHz:;unin٦؀)qem}"}1DeQ㍯Ftimu)0RoUӪd0<ʛ%Y$- E;!~޼kWbĚET1F2u \p,/pa='_:∏a@58&+ސxh(?8t@E2 X/GDq(:a̩Dz K!'m4c9rBK~q:ZW=mml[SC2 [tZJR 6IclOrբI1PHu쏞x6H¾,^19H7,t~;sXÜFu:0O&} 䦇!gCt'\wyTG!C>\ơL `4&q f9dkY՞i'Hza=a N+$)>W9}GRCU)~J6=D9f6i;^N@ @<КnŮy_Hp_(φ.r{-Gee|I]@#` :I@Q|-g3eLscV$jh1ܡ4.cC#k{^ DUX:EiG`l7RH)T ˱¡_([=o<=3$|>r5:;;ӛoyZG\fYз!"pKRP8%iP VwV Cxǂa~[":ėM ͜Y5\d 1j3t-a^=lx5I]kd5R$ z5J Q/ r>$1cW6$rqΊyGLBZņa D]Tt;JH) "k6/`⼼&=:ds;` **'-Ѵ%90ËI3zvZH.7,FXr^kM=K"6Mj"0`@^e Ҟf^; CJ(A;B+q{3VeSSAmD "v(kJEkFYxrt!N| Ȉi/,v'{ˣkn]2eQI3cu.vpօ,TӋw& "8&zl hͱyqk$8lWqߴ@. \:|N^ ?_:~R @Eۣ4ѤX eQ pXma/$ISߒPf&8@sefu7 >P"^"8EdG>@@ ͳ@ XYۿ~w JҼx Ij1S }q<|(4yƒ@*JTSXIY)Qʎr5[.)́:fNMHv8`Jߟo6;[)J0@1ƻMe\B 94a[4]1,%^s:خAziTB'@0HwWؠ [s7*|gQt=[D rF%V}׀2lGj4ೊզt[We=L<_TU`p*wQCq*? .˴58 Edpn<}1WxJrLWpPp7kAS)vGR Qi&,M*ͭ"tz?cQ詷(@@yj;!e41`'yi$ܹB7 hx|HRPp ⻼ԡz&"wqAHsqW;``D0qgV2 XiSA,krKl HߊG@#8Uw1@3JꢝzbޅA?o%aTJPQOso6Drq{hǕɫf&ǡ?,0wzyo͉@n ကqӲ;gY!5hqmBC%z>͜{[6r\@o`ƛ~gJK;%8@?U"cTм:)$se8`9`ޢ ,84_Np2/hQr8?XL_`65 H`p_'O'ѿ=tUm;;Ǔeȹs܅gzJ LǷ: c^t'Tӎ:m5U I-}kIR@FN* !+!HnCQ*G" yFڢUfHۧZiR:{R#H@ i ь3lb(;ш&8͜7fY$ whN.};r/_W(eCR`D f7`b#K֡P,3m[n\|z~t]|vtTHkXaOݬ-,5`ы҅|[ OoA lPX r!D:^%u݂aǯp+MFa}/2** "sl{{W>o#Ggv6)9PJ3`  [[uXP=!~YA"3˷,A݋-24f.uL@Iє-qqAˬgf43LPF$o:J:-c! "BFP[ДX.ݾwu0ELmn9A|*ZNL /|@aQ)g{JAIR3DegÄoejݺDkc6pOsrf!S|w;h,zǚ׵`An q.qSRidzǭE1 g\}@hQX_`6u¡"4axfN7ñbG\Ď9 p elA b0`bJ  f),"K\}E8|w߲odY MrKC)`6D3"l*2E{xM--%ì0Y/{62qANaPrBhxpei`@u@$FH8Ǔ_m46xXr;k-;gx9\ VߓcÇQOo^|: $i!LqM;MRvcxbc[ZSkcxx͹AjjjRcQz+  caE\Iy볆y^m.C|Lw*|5O IUV@軵jn\)g%Bs ^C 1PTVf]@ Z|78Kg4 jF2Q2[#"/?jfH vm]FbFLkQtVVpGpCq!$XTהL&@5DhUCMìJmDPeĊlJ-X n Iyӣ.AkP%rPhnX6ƴ4!X oe.B PWKSGJ֋wJ7ť(Wbj"ґ&^oɫ› Lz6Q5h2D3T2OUa 8 7D!gn\z4p+ 7ej JY L&:-3CױfGR. MgvkԗuT5DA@=7Eȵ80`stijd_ܔPp&=CkLN5]̈k쵅 OD ݋44BrKB P  'nC"m'> _X]6(RH dR"إy"0ƩT4+Deу d74Vj&z,m3Q`{KSGXP)R8~M5y@BT$b(^q8FeQyY@ L"6k?&4KxUlv%$fc(.vHPjH{Kzl'k$VA4UbBvNq+orBB광"g3Z~8${Yy:F # CF 5t¹)w͋oƠ]hlB#'0 . zD'յڱ"*h9_9=zQL$ I>yWLpCj knR>Ta oS{ Χ d[OGΆ9.hL0J0jI b5b0b+cټ: Q *>XYZF +jj;v#yh@oR Q%$tYhE`@-OtOF: Jc) `=X2ؓ4ee 59׋}nw*bƂ"k*l $1Yn: ̧52s${yf@甪:xb!lZlHj)uUJWt'Da-B˧+'HKK!,)G(h6 ;_t}a_O !,RO7 n]4Zt3n]ً%\mTBH"T_^y.XnQM/eHٵar̗kA8ɺ|]ޒ5ǒjADyu*Fv!=WDy6֐fGZ`; bq TxMM2EoCUqOzfP&y×aҖ-iOz6#_|iO{0dOj[L= '#OT"S̊GGΞ>#c6#$qLb:ZK)ؖ]xa" bײi/5ͩ'n)s=AjBޡD" !)70?=2 }v65qtN=qRG5f88Kʠ4)w@ޟuܜlD_p|ܽ2<=e҂@83P9Oߺ Fpl ?1ASpv#^C_>? 9xX%OvOUe55tWPSЈǍzU`|h:o"TJ*Ǐ. '~z|.kТCYFO ,oʖj{jF+ЎGjP:2\>wjJפ:k`)%@ܘ):|S',@^ Zwa\+tYO|n0P_TCţyLr'3VkE 9g#>|3z)$'ɝd(buHnlbh vpogX9!wpPPL^) .^Xvxmr7[ 1&gS!ғli-;sAUR;ydi*k}E}l[lsZ bkq (z%Ā:JL(>\+LNjs"փqT;@<sUBABEw_gQ'Рoq'ꥸ!Ү@Q `B!Cd8Q3*(̢"88o  o|ۯ5vΎ BҾ/&8t!*Z(|XQPO&SR=ƲQhU;8A$C)C"6BU^{R**{- 7h j7v# 4߂^ߺpJ=TDƂC:P6+MʪHeLrLm 8o9|3#L!Qrd2czCP`!€INC9<ݷ!@DEUWED^X q@Wkc҅TfUAwT@ " C "?( >QB( @1MWnD@C cU@OCnAzr ҈8Ÿ*"i UP3@=dg+^Os}?^cu,֏یaxWۺָL 7_SwF`KL _ؑҗG8~nVC CJwJL~ ?!dʟdA6=nkgos;^?P5HTb0PSrʰ D jS &NB\n R]?pt!i~0##%\ݚSGJܺ_sbZ~ĔOnC%x\ 7`B@R!@ Yl /nS2X8 +x-aLh x*~IJO V}J6ծ U7CC6?u R,d9$\pt6G)H։ed@[XZ>* Cpu33uQ!?'Nn%h*:á4DlM뵤aL~=O"6㙣xއ|9&O#,Yj5:=x<Ύ5M'/k8Sj"lHA)aM Dzri&I @z˅ FUEh8I0B8(cd3$6Of/>A&-p*yiȩb w/s.<2eiYLh[-cM"iO.v (ҌTA+18lYmg8^)A|14dD܋[XݡwQb&|ςOse1vZKM- XXa@+XE|6cE&PARY BQ%F]y$0/"dWmQ+>Q1C嗀/K|%TfJXӹbjS5p LlsJ4&_yu"5JEEb5k!* )(T7*A ~e FlZp?CJ@ hWt%T(^_]yF >r݊*ާw<!RbaN֎X\2Çi\5 {Q@#! M Ѓ[ױ ɮAr[.P2o~Էog(Jq:}`^Lr~e~4$=J:.=Bذxid !IN7;!uvwsK"uƨo* ߻i͍L9+:1?F~VB߬(]àhUF팻6k U]> ,%ҵM#s,>kfhAhy3b.)]x|5Ayw+P|~ p00oTƵTsX ͗`` 5ni\n+ﺌK#0o~lSv|d(qP_"-$c| !HReMKz&*,<0ymGo,N?ЕIˎպy @+Ώ{D?7 ~{,ѪlS$<s ǹNqԗ|W70Qq1gp I(b͸渤Y;ns0p{\QJ}Z9mֱ^ NEt(SD Dk2ƿ3'PQ[!a$ HTe!Tw\ܜrPsF%'ez1qki RCl* T  G|Σm0b.{C  !ټ} @l-KE}cĻpI`{]}řkߨ\S3ۯ?baP؟[d"I9AC} /dp}e0W0"Ԅu) 2ҧ@O,q] [wn5h6bҹ 't KKr[k+tjԂlV n,ĴgP4|)q Qm*7xR 0.UD$$`f};GYgX-+~^0E>F8f {piF3V-(ifk6lw;mw{8G]}VM}x 6 "A 7W" HaUF5˫?ׁ-p8&*b D l6(/lF҂1f_fgeU.bC6ql\bMDAR+:gʃ#b[U j]lKf,7+Nb2>5 \eW-嶸[5{qt`,lEmnD qΝ`tꋷܖ)%eQ4JYevYt.-:#NwIawהw7%c PTpE74 P]Rξ#`tsfۻټ謅L,7zx(sw:TEX.%3%*(IЩ#cbY"o\ E]&`M|[ NAwGu Exho]A.tv]gȫA!khh ,͟|1Z6 Bͦ>fZcg{3+F3lYllԕ T" &( ) "Jw]UKۜږy𠴃_v_.mj%8^Uێ |8Y$k5aq@#wNu ݁f}vlܣNs=ݳ7UȽxBz1aw%tiPImux~Dr^8}_Uԭo»KM*gآ]K6CѨu]e@uݚ;YM- L21lY&X5o鲼;nxņ zXww" o!I[i9vɸyV[ͳ=;) 92]Dcm J;|%{`ǁ݋|.ϹSau7%DWklvs"Hl(VV_{Qr>8̮ \^K7x+i/ݿ6x)t02~8/KyY-l+Ɵz| <@?b s>ʈϺ\70yNݏ^!G>m60KrhzmIыݧHa2RA&gR_vPsj::bcCݢOquJv}20C79=ugs=,]H13U %PEzK~^qMe{d ]zs.~]Nϊ/rs=+޲ݼ۟tye =|S2/𬎧MlEt-S9/8~9$ړp}{paի6_[şoX1Vd<;gY_y[;ܛ?/ p*㜸bQ#dXUnQPif[}!m}lj󞿽q(-_ӗb F2Bym_E&e1c7\;,kH2z*8g(;)e, =:$};+nc~ ܟ'bB{ZSĦ:d Q9#fg x `hKdW>vPv/]hl `GX5G{6WsSk^C7HͻuMjB6&aRcE!K^G#T tIbe5r cқrSKaDa#-%=w'p@؀E%yܱx!'<1h^{:=tnG?A1QpC.;3Az6?ilE)$O-jr3$W\~:;,̴`~l_Yŋ?18(Ln=_]l~ү`0XaP!dߓ6OoDXbl |ǍwYfCM#[|oQÔ:9Cv6W¼Z^_dP}IFL vBs|khw{ҵ.1%V%fEy vғ#? n١SEi\ͷ\Y,a``|%w>.HT <G;*^`rO\qvn:Sz>ΖʈZ7&ҟŭm-F>Yca70jzY ^N{ e3卨.?> 잓>2l@Fh uiNm#)@utjD'mz'n i8chS3j=b=&ċJ?^jKxydԞQ777]^O'PŚ"+ '[~\|7j7܇bZ=[ 7mZ܂P!Ȭ.ZG}"I.s.AaAB}|Rδma|PZ:f]dzr>h4VK!s>Gʢ/vCN44ۣ_eB\1{N0f^vE3Ny!`^ϣͱ!ܺww!PEL)}k>ҟEۺM<>9:k># 2nѰcc~o.~~s~붺RM|ʗstb<_Q+zt(ԇ`X{0m})~^`Yna.ٷY 3lsdvbnN,C7,Ë~'6t|u=%U7DQ>ծKOx^DX=r>?(R8ue]|/~Odշ6>^`0YC3ϓqJ;.5z]>:^sF6t, F\Tnֱ#)I8T$IW3R&&ٟblreuXCQ=*BS*bB(iJec&xC}yh:޿U]:0%D;v=~= TDi;f2<3(n D@/BR!Aw ֨5` *bZH#"!;gŔB̀7M_-2hSvuT6b=P_0alqꁿABH!PTĂSB.dJS fq.d+^M;VApee-Goos ;;GHgv%z4U揎Σm~z?cHRnT0(1Ǥމ20( 'g jb]D)‡w 3njU*.!' ݎNu oS;cH$U[4`)_ ֣t:Jә+CY0pa `M኱2HaR;\{F}irj1gck>{MYK z^,cvRݻ)؆(./[svH.Y 6LD0 Q\xUH1:S8j?[;{br`}H P|t=ܮmp$r7T#e# K[wjh1`8@(ݜOq`+| o͉GaHU}ZT….ѮP9$g^f4V"I;9ۊ)!![6``*<<\#S>A ͔S!cL*&MZO[c_,;X|WWF~-,,[v`Ң,A[;,VEF0f"9ݘrX{->juV3e^-hrenG$MB=q`$T>IPmߣlanp -"kud , S2 RO$xw-rrG(Quų<6,ea)`Xxk:#)MG6j8Gp)4`Q.%'Nk3L.vYጉ!j|5*\43e=l@(ׅ|6nO$=@€o|v$<;|[],ph@[IjaҰ$)s(ƕM.+`ְ[%%M=ϷU ,Ph`pAWBPT̵,Lڅi!kZ?.6 ;_VM]U.zҀWT nlH.[dLF12ÌXPp*"X,cl-X*hٳgrۅ.Q8x+r1W-^9nRTC& E^-)#.+uژ<㧰~u&y4ڴ[ TP*W ʣaDu6`U:[i5$l$8$UuU@%HN:w,c{^XUACv-*""!@1ߴ+..vר̡+j/sؼ{ne#}S\?S׈;>e(^pU#czCWvΛ{=d򄭈ux٥߷8"4hxxoDx芧7G[|K~9 AlA{IHf6Q6 w͘-}sVڏf}Oޫ: .vFb4 +^( l-dżlΥ(P=za[1}v[KXLWخ>N# a~Hj RC̏[8ԣ(չkZӎ͑gٮ{ o{il^.UMbt1SX(pق|'=s]cpK'ӝ0:Q/spxCĎɻ]^?|[O6Ƣ8MS/e}ϷČxNk;qWzI:=.x0ulzzY\?UIys='ʍ~v1fւћ'k Xjܻ [nֹ^^n#KG9zZWwb9nl@?tbϯS_3&s'G{i'H?.ko(B~_%yaǟrcGD癭'O92'={O_PY Mԁ5<2X{Z@R#ra(Es"`ܿgœ->RWDŽGy^c lAa +) , бQE$Ƒ5PZ\{SQNߩwZO|lwyb(Cf-Enh,>ūH>ZElRƶGs`sZ+(fP@HJp=i0f'>B<[z0{/i5R<+DBpy2^ @2g[ul5ôܙ|H02*kk&V !<;h9-OTqnǧys`><RƢ,p B"(s5?_׫[? yY旫\3_ o'o~~yCWi?2{}?kuw5c'};M+˓3Se`sdx<ϬvoO~Z =_??IA3~s}[۳~]>8}Oj__}Yl,u4G{~xh>v?ok|_|m^7=3M/gRPfA1*ˑ~z_i7s?#Eo3`* }Yb !" @0T/QK~w:Bp@}[LJ"!?ŠP}ZIJlAEQ?{Nݿfn;tTgc$xڤWZ=5~;Wc#5`ǖe.>N{e=$F@ >MK|{^jZ((RY|8{t@́LḬ!mf(8dLeueQ.bOvp}sb)Ң At5w;VEVPSTK7HJ`!ADa(h:>~kTOUPXI( P)aY#ԪXqICJOKC졀#c.fNL093 HiNQ2yP J")(J@3SY;%;Xt1bHxh)YS ;[ ut+?gb8* -Y\3\`2& -f*ՌSh/`I(c}g#oҶf "lc~bc[PK:1dea*-YR_weızP45s%Y84?2rBaтq!;QU ({ biȍ:{@TwS~Cɗ{WMd}F N>{q΢H)ӛKWVï*d^?{p_شW~|}|v?۸홆.x!R~4F%;"uAL:~}?FdK;;$SsN]z]|A.-7hݷUa.:mCdiͶscSJ1qM g>h> ;>|0+r _6`PT~w܄)DD\̿V^!̪DLp>l^1> O 44 *v!(qE;T^[."j$0rJR]hŔ$ c4݋[m}=Y55Gz\ozS_0ZWN8|y{ˈI~n.u} "{4c^-LgsvyvMba識)$Z^pH[ 1s0 &sy'sU92zܻo f~?&;o7}t1"҂RHP#J4RXMlmQlkE*%iiB)Yhڍhڍm[ثcj,Tj5c[j+hF*5 ))i𡙤 4J#B >()(.g r}^?X n?<s *~O??/,"%(.7OaNFED-"] KAL@IO@ ~UQH9`I֑S<)Dwv%GpECW¶<}_s _*>?@4@_}gK!֔B$BPz]Q5.?)s|f4D={U1|?)[G]PlMa=LXb!Kylq܎ox_>oP柢Krn|2^NOyu?Gؚ0X`U=- >GNbm_\)`8Xkk""=e۷_ѝ2q\D[ 3MtS%rz|88 T΍-lmDAjbN&sQyL~jvA@ RADʺ գaQ!=#bX(8Z-A#"oʿ޶]{(454BWk iV۲~sE^ó!](<*4x"?h"\f})8B߬Ȣ3`{Xov 4mғN85}KtsebdQKqL^:.wWeV8uNkg޿s(ؖYEAnU#UAp<_|+ҹ4M A^1)n(FV"&Y#{pjn J̴*_ iY\j'~C"lZDe,"i[]C*)vA)Q RPw1ೋ&O?>5aYO;J 0,Lo7蟂29) TBZwz?Okqpm\W\.|V|+GA QW O=<0ݡz~:R#VffaHfعDfp'q Ҟ[R(~[ Hrbڽiϴ 2i~_F~L3 !" -IDTn^}& "4{\ bI 3?&]/ nƧ7|ژ֜:ՇFШ/5(h(<Yr h@M'^s1Apһ1jڰxOE +jml<݋q )hi7w4 .yxO4xrXަBM R*Dׯ#BRP J+E*ҡB4@MlV1h4RV(,k-{m*X1B$.~H}M"ш"7SpA@-To߫GfsW&D9₂_~jCȳu|jo=zw0}kJJ~?QY\>};P\ :-+vnG C|*w3 @P`O/tE<>ڀ﮵G~7w8[!6g`k Rf{ỗ[׿]tANcNr3RX*!8]umWr.59coD2F=m?컵x^ x gu6SVmV/6sTJn6OF}rtS͚vX[WoIw:vzbWBqɳ4}zgw4Ow{}'o _ ?LࢢDEPlSm߻v=>gmbmFQZMAW $>=D(3z/xLh*,e*VslryoH aTC"'FO !ʱ4-"!~d#}e-04=7Z<14O\f)Jn>O35:v:{qpz߿;-{rIMjd`ڈVKJJ$z'~H@7ϕTH!;6|>~̘"tZ @}?ϻ͒$k6Ʊ^snW-b1DhHьRDb}>zd QXM^_<"ƤƱi "ǭ^1Qj-+@xsŻCH,j"6Z(~Y<ƈ5 Q?)oLlDJ99u"ZX(AQƮ1jk-*+ׇ&>$\C4?U h ? pDTrrŊY'Ϭd'%̟JEzX풏UZr%U]x7Ͳfr $`ǒatghO㶜} )S* *)Fc _jj5hգc[ckFEdFU%EXEd¹l ? <\(4BR2LBn\HY&!d& 6P1bh`C S1)B<0|o~t I@ّ#3CM|ɍq鹬)B\F]5((A-5DTVAlXTh4chcY g^>xDY4TX*֟SZ,h61i#j5IX h---IPERkUj6l6FckA.-%F*ѱcQL+D[IZ0bƋEFIZ +s\1h^TU`3Rm4Z,Fƌ LQ6F*#Z($6IQhؓZ #Q4@!F  6,lX1EAhؠV4%)hH&J6lZ#%j(k1"@TllhQѬL(b1TcQFJ`Tl4hԖm6# F QTV4hLV6lTlŊ-*"blV6-TcchcdƢ5b ,(MflXD%P[&%XlhdIűF5mEa4b1Al%F"ƓIm61EPE5d#yDZ(ɰ[*5-)-ŨHTbm+"H#Eh(ƤccXCb!,d6*561c&1EF6*%,iDFh# dT#FW*((űZ5hQFcQcIS-Qm&J6Ѣ2h-HkEQ(Ecdlmb5PQ* Zkk_3 V]A&a-?tM`+Ld$ͺTGAyDרA?y:]ՃqOACe) oP®ꨈ`~߹{QGqʖBZ"*@W`(.-!vOv1{}6Òx>2fXoߣe>wD IYYp,j5]]؊7s4ȋM6cV#^6DcIP,BLf>&\̼4- SMLTYiA&ol',4|- jĆ)dDcgs"C7_M-kT~pgN)))&k-$YA)J ڜxLZm& Α](B6VB H BR@4R@ s6kfRBtcqJNj>{o.Kcur 6T"=Z+QY NF$0!%L" zzݞ_ TE&߬(lTPZ(XX`%fRlT!Xc\Y2!QT>ޖ[57gsp7hD"o/I$RBTPQw nj2$Y3$ER|u!e\Kp@bJJz6{/[Ĥwt+'(̃j ;F4ʄ "@CQmcBZ--j6ѣZ+bmkhV V6k-QELaƣ )S$4+&ŃQ4[}w4_<@R H 2*TB~夲\3e$ CG#^P #i ^z9qcɜ4q5ȡB@ҴclEE&6PI D2|6$M-& Z_/_HᎿ&N$h!1bȅ7_y#>~g%(i;-Uū2V%*.@#f#X>.H:0ft7vrr]ܮ Œ,hd4E2V`Wo笣F$kDXoWT BB=ZOQB]>|bOb|}y߁Z40 d! ѷXF55%ZznFP5MQAG{)_,+eRFA(5֏zަn (62EEc(#oW1f^QY7u]9*&)1Ů7iW;40IǮhО؊4%~' -KovF\4J׃PbL% ED(VC AVb Ephth~EXv׽k>ƱG͌[6*,DGmͳd@g6۝5Lc'mVh3/>CAށ4D[Zybt2rDS6͌j2ɐF .)$ZU0X36 ~#ٍ|`f#^xk,E*wRێy?7)-ED Fk6Z:Z8o4(dv"z7j)UD$F,%L^pd7E'qI1Zݡ ȿ g]?FK)N^NM[|abyª`2Tj-4C|)b_*p4kU{w{4 % z1f}$FVf#ةeLFRA :i?m:v<- L{bЏª)g<]yJyۡs׈>["m_f[I1DpwXꇰѢn-8Sл/SeE=k롿‹,܈6ZiuYe(QuKwA0XTE[-X|0uqE"7Fƅi/YDJ W;4#mJ yjTL6y^eəe֙Y?VG CZp!Ġ.pw~Rbk:"mCbM2'5mbe77{_L ox5)Vɸu~0PuDٻ/ FI ZfB8vm:/)mJ: W -C~ֱxM`1_ tetƘ-gl4x2krRVRby#Q:(.%>ג.<`jfZK[k*TqVaM~~º:&-S"Ь{JU4jH6,?jU=eáG-ә">ƬL3au?oTZ;*Hel/^9z*icF}K >GUؙO&ma1y0+-Ɖ^I/v_ً6IݟUk UZi'Daml,"A5{W@R{)dd\142, 5vb"&;رH$7\ n?B%hEP޲Gjk=bK3A; sYMΙEscӓsx!H¦GUů{q ": Na7-pt GVݐ*kBȾc03U+zx'L@+K:TxDgqQdkB:C͋P. 墼r8'^ې^(R ̀S>Ip;X-/Z#l,9!ʹ&F~ a:zpfZ4ziٟ !X&8#Ri\hq V(lPz D^d;&-LUwϐd0 Ģm  4=[͓,*Nd"wƐ3Zr['}%~Df=K;QI ! z< # e _.!&D!Oj_Wa0Y&#j"vPfTB˽R]-a:XK!7v0E).Gip?O"DFK{Ddm/pDSз+g. 򸽓% E 98u~ʵC{|6_^@3S(g&H~$ص~LiY_q&doԏ5:VK9A菐 A6GReSL ve3SbiX j2WVc4BLϡL˂!ZIٹI/>xxƏ\Abĥ Je3ܯ =.;^.QD:ZݑTmPoݤ<{;!2J^[<~$ 㰪2 `Šǟd=CHI_Lj> ~sJAODwn)_yg#Dij 2,dz\np ܟd pgZ<$b"[f5,fi5$C4o֭Zlgj|.K ';0a\6vCR䓣{M疊&lv,ݖ6?'He]ꔑ& x3 Odp{4~!߈aSv>?fR0Baf īEu4P@#Ɏt+iƇIW%TӧjŁ\9~,Yg ѭ>0zj=@~!MRdcFg!ifm-yA_H7 gh>]WR˳8bԩfAYAYI¯`ӨD*I`}ȽLXƁ) 4(lMv G>OĊE-443{K累j>vWcڃ_ vMȈ?כS *i%uYQ@c$&#a;Nb-B#w4uL(QXjA[(0 U$ I>FWWs'w:= (h{]&#cZir1~X.CWJqkX A|wY%7Ol-WW]Q㕠'p%c֣7%#: *#_O]ٴiX5BGZ W7 g r`\=jNFQ2r-w/;juH+o vF3}X,p?#,5XŽы-C+zYj(+oT*]x{}|6 H>CtGi1곕YQZF, %S>tp_?%cGszH Ѵ: ]87UubYY&Փ%x=TVD-q:!~fOXj>)tl"OPTLB@U pWS8iTtfh)*>;TWɌX1}#W[szr~lSiu66 )~6z"eovǔq.uM9;+t9K@bp9J?~2Df6Z1[eʲREtx!tM ֧= ghՉU{PGH3% NMq=v4EeR![Eޯ"P"8*l^2ϭf+GgOn^uĊ;Ē&po=vL: o'l^c(/0$gS77<;ɥf9ݳ4L3q |M4L{͝jG&x2Y-!""J~T) m^RV98/m-L(nGf6ټ#{6B*ZRQ>KlwȾK 2,$M~AZlDf,(6h2Ao~LG!ΣtqXu*qxw(iY>ɇȭ]]nT,ҫm6{u60SBy`GCv _9I_6g@ ) ߦpiO зcT5 S1dw027eZhSԄ F=A&~}N%V~i 78DE6G2u·{34u;/Mԏƫܕ6:z?2["GY`$gLMppm^-zy-RħYY)Gx[v,+XbΓjdMj43*N+1l%zDQ>~+AB$sEi2#C[Zoє;f-. Ƭj}%@mϛlUWĕlmA!NO X8b3Js^P;Oƍ?<~Y? rU-oa;;/@!v8y+MEr/Y ỳ {j-˺$m-< 4GztӒI *_@J'.caܜt[= !_xӎe"M[x֢w8u!Wq8/=`o$4ɯ{/4e*sQ7A>45`owZ@8x쁽Ơ喲PT`뛼za!n *9&.ZuK,7C V` ِ߫zC@Q'\Yvoo8iݖ[x Yv4=hݎCo7qIM9Ju@^Qb*Y6}{@mi(4XXh =K-*wUBaO To=Yq 1YS<1 C $K ~:Y3,jP\A.5ՍM$e]9} ;z8)Lj ;ŸvH]淍UU[5XV^-?*;Ȼ&RbF[>ڠlݤyc}a]t3$Vهг(#(Uz0!6&Єʂ}g +MU$1<2] ~)b#P5#T@pݚwg0#~Fz5h$qBlcQMOPH3IgwYJVU|Ha๭\:Ny$J[R᩸#-藈 қ>ʐ1:X8"v^sjnt9%Wn XOGI2Yqȇ0ŧWF'T=!O}6~\qe4MyXETaW! -znv ͦ6<,SL8J;-L[zk`u*&UpB zoo[0_Rx^0 ̇zKX6x ׏aѲ 3%*3RձmPk|\3>8) S hXTsG̕F`cTi(yPZک<[yG >ާz7,N_?tSa)قfNcE -SοS4lDJTqp @i>iL%P/e~.Hs+ssg$oE"[;:A6m?Q9ѣNE 4JJX`1aWG4^ 3eb9G lΛZMR2&U9Ma 3vIFYj)l<,dwν~ÐPuNHb3tUդEkzI &cG,qârg ͈ʏBWa x5C+!bڑ03 /izHdp 7㬔r0_S:V\G7 PmzL߲RF.D} YXQ!O4vI4vՀl6%w|җ,9N!5;xVl֤Ēn1Lms#"5Z8DAI1`FK։ln"QPlzDn)TG4T<)z͆ pEhcxCl &$ݘ!A31k@lP|;_I`:Uع:^՜\ik}3K`Ŕ8/G"Du)mʬON`arIҺQbJ;օuiЖ%X^y- PTr>B6Q p(&b+t},ܲ>LuiF+i*[/f`7.@< 4ht\'е"͗is~d$NXH_Ll+k+'eQ1|}!di>IZ%RFZrKN \.m>qJj5'dDEŐᵘK'| XYcΪMO|=Jlagx!8׍ IY W4~B$J;d2֗tŸ7/n'ӐMT wdXepR Hְ8VPh>䓂T8VSFM@ x+pbgUOkჱ~QEbNYfB,^MԩYb D,.$M' BD9.,>F4o q\ɣTz٠ƌoEjt|\c4}k׿ά#r[<D.;qH LA\BqҌvuϟ4l =.$Ql 6y@Q`)R#zݡ2sK2?Aš1 /OA0+YBWOX%l\9f ԘoRл |+ܢwZKhYn&WSHɹ]8Vd쉦G8īwB' gR >Xł"ų\k SuOᆙ)dF,Q1}6%avq] t=p":V5JK͉wWM,sO  vȟߧYV,-Y˛X;ːk_=  ~]E\÷zDjM:|!,JhDDM I^a#xTFآu ֗jcb\!Rmwo=tCF]&7N#1DBYHGFe'SZı UF'4)+Ae|iV̕U8jf"ckn8piV&2i)BluĬ nsbc&fܳtg}_$ c~2Za9ؖQ5ٱݜ6V5gcDOuq |̡=n*ۣ<ޠDTrDObʴi)ٱ0*N$Vn;'趋X{ 0! V({9 -%Ug30C)vu2 1d%&1"bA$F妖usV8 H G[Z,.;`yX;kEZ9h}cAӥf&+xIJ]\VAQⵃX)%˙O B! X\yV;MgCkѪS^t2{3IYuUe| rEg{06~8}M6PRgۯ3=l35]` EQ$K*JT`*5]F7g᱓E’1i|0mT)blC!.;SwXc` ua1=PR_MFٟX!ẄxŌ85/O%'jw-# {l%(\?@b+R3ƯC8;sgEu rn:94vjgj)J(qw`h^rȵh*Ӑu~I"{W%Z+lHPI>(;at{irѻ bDGvK\ _,uWY*`Xyȋh"Ȉe 2ތ0kGENAʹ1 04APEMO[8ymx`,ꕽQ@P8m( xlwT]5f6#ig玠{\ h}R`8Xay0s co+$6#q4!鎔oICK˰& _CL:OFC N}%gZοEn=]BS?hSАZDi.߯ŏh`s*svޥ[Jq:URT{0m ]F(ӷjhٽ TӐI ]C/TbDܦL2Vk 3PŒG`"6:Qa˅ދT&9@M6CgT/zHې:+NCbϩޥv^T h&Z6^ j?qC9AɜONW}9'51H2ʴmvǚ*m׆I+97q(5m>+^Ey[j6ursǑ9 'F .U;\6(}@T k"_g!ʄtAWeC&~V=\.ix0kH[去6z#AׁW)@_ 4 `)Sr-N~1%UAa6S\gvik]snW>(ж;;qAUmc2JNueC̤ǶC3Ȱ."+F-<Ε8[K%VwvxT5E36ve?B:70!I$hZ|3fG/J_v#oW߁7ϴǷ8x`V1[$PG؏+O؋nVqj&mP0JVa6 Y"=h߽ ^O43O| kHd5kۿԐ=[3v{6 ƌڗȂ< R`6QlڶCk IޫxϣqQ\3yI+ IPf`)pE%n>=oYORYpC|$AH @%$9X-AX,~,&K}}BGL2/>6H#턆qU81?)Xiޅ⿖^AJ.0GUE6r\*mqGkU3.-Pn4qv5:T _ߋiP4|r;‹bPrb& qX ͜_(c`G5{StrNN⚹9|AVi9i(d(;|M <Ge2q&ab*ϫCr:x#WuYN܉ɮu3UB|4*Ɣv=i E(b#L45f[iQHcQ٪”8)6\19jtyNjأ|Us <&Ŵ/,zi"ޓp`Z= b,򶣾l5*ݿ]S:hYoKJp/ssWu"FMяG]ypmm^C@_I)K](%A hxyYQu> Y66vz#CSb>O,CRKu 7yW52 >v_bkxhȊ@.#7jM)!.\Eu$Llr/(36Dwf0,'rN ߁X[n]ޥaOֶs$gt7N[ܳ =? 5ʓ20frF3@[Qc|~8Y5[oclZxlSi_BYCx}k3ᱭS/VRRiB @fAG Py'G(崦nb1g:OU㯓gϽ ƺ 2`a* Ve:C `9#n!x[r^y+0^t['kЭ ;^>^>xg؝Ph^_& QDH(QzrA2.UAdBBp wJmA=|Ҕ| I |)׶N5ၘBfz*DhnY%%3"CGp%U\x֝yI,Xdۯ“W}Pؘ0kA7HJtoȡ /kQp?t5D4 YEO䯫-,5= R ZA[`|%\ W/be;{ OK$9߸|X`em\;M~Yjގfx#6`h@*'4F gʺ$!o$&l_BMU.ڙq3bbՇ?ZPw>¡5W!bV$R^,*e )b<" P,cuJ?nk !& IiTy5`B^ۗ/OyN.(E >BdbKKtz }aRqs*52y+g^EgijmϠhx"@tp?"}I%[R_ z6YmoXY3IrOHC>R L7n{;J}?K{>Vɫu2M;ee<0KC;!ʱE ^!qfabZ\MN{`~R;5)%F} 9PSr~#KsD JS.Z_/#]nbnWG6L v]XtCo>>~7aqu4rm5{zR5 ۿ.Jy@|bF7=dF&S\$IWEhQ}W@*W'BVPp`2so `5mhȀC.J`HSe$<{7Ϝ@)B#ȎֱUi4_ SA(XN:N0D+ط]U q )5c3^Iɜ0 z#[>T!9v.\rUװoޖs^z?%*:ܷX>yj.DR ңLGK)է#ݤ3q(EFw1#gk?yX0HQpyp>Ep/>o.JSPeхRK!0x YmZbV`"8n}gl~Yȳ6 r#bni}ҌIk!f"֍VgeogYXθ >[跥ӛVȦ` sh<c_7L LJC N9ݝA7ѽfO{[BL`:Cb2 xIsr1O׉91O4xAْB~B4xf! luVP~<7- *$,ZA=>]U貭<heHUTXג4I[÷-2ЌqYql!۳_pEG`B K+kU)Z6,H1>u>|]ݎi7lBT;\Jnr `O y{0 Gs? ;JsLH+)vYmf-!E_Ɨbz*ǖ#r/Vlϯ# ZFxK|Qs@^$+-  NZZrr[q3/d4ѯ7N"z􎝊Fd$s6"ybtXmսXR;"TCj .vkMVIIHOZ`z9H!D>H]Ak]gP64;$AB/ ? PnZN OF¾akއ$H+S#> D'bխE(D\!Ktuִmw'ߡ_9+/^W vsa+WƯ-2̙7`&|)#₭cR?'7/a{7*j V`-~y#6RlRQ˴`{;tW|@I6@kIv.Ĩ.7!+6OHi‰Ur{@SLr w0)ߖ)K6Y8A~Q0[R̀-kELVX[ RGJض7υ@N 78[g.R[13!Nkl?XSW5K)@L;]"I]7|L}d&QxK'7ohg̳6L {A6-Y҃O{AsҴU"4K\|(1$u/&7tlLr=#4pxG%aX/D,UR⟪Nqػ.Ϛӑ+A-| XIU5mE/|jXёQ9_ҧ _ksaj؍׹* 9я/C9ʎ/S\|G.->"J=82óߓ`}EY{L=l9hYFqe{*?'^̤֋AY#HĎꊷʇrXfD;/f{FE M Kb5`3" zo% BP-ԠId1߼烃o3&["ގ8;hi#/.}8S Bdyتn2@oG)i<6ʍmX:s_ϒ[d7b6/chXUbAMD%.MsRiLsEq79vZ\XffDJ&$p5WߵO-٧X#5*8?($I"PuW-aCx~m4P*?Fi =#n{[76vQ4z5z/";I%fk `cnz#ІXu#a}bؠIy M<7s~XVGw kЍ^1&7<_ K̑'>" 7Ud4yMET-0}gxF<[G[R/hy3qe vT.us`!lrohY'L,̈́HRŜ*7maK |}eQ"m CAHh^NNxL@79ZJ/=Wlilݐ >8q#(8s0=ʖP EPn~^'V2G)(㌺u[|e!k(:3쌴G* sŴH_ @:S&S." @v-O)ϮrZnzNҩ Qѫ&{' YGqٮ%G/z;%McC4oQ2u!.2ծe#n.2'aA^6:$U߽ 2NCK2%Ȅ+NƸzbW P%uJ!fYF 9؊Fr0̒L`s{!N^v0 wg,u7Y]׭ZYė(0\7t̕WLPC3 1V# /nokӁwB-T+#jwnf81W'c3BT$,t*c>iAd[xAE~C`u( LQo!]m=9X|*Xjw^M,+ҿ0zļRo9<7v_Lnx+PWT!D;"ȉqS7Xَj;vGێ7Vfe7P`vG(q#_&N .\\GH46ռP.2 _<}Ȑ0#Q@H(aٔJ(C0#Q1&3H Ea)pq춘D~՚]xƦo@&BepxT?hCgv@(^+% mzKΘr u1yc|PR^9^oQ mT,^,Q 986m60+ȬP}$EҎQl{3f~н6>#CP%¼쨱s܄js!U2sg3 [.捶$ T<(lb(?>)ƫ2믬Q=s)3N;A Aޫ Qj֔WPƉ \>8uW%[НI fj_<~6ǣYcgOIViSչIKbGC#ɓ>-vţ CS;=:Dy5XBUWLlɥIБ,%q44,oTu^gcjX ] 't?i3u͚""灧1ultJhх;+ dU b# @d gNѻ_S~^#kUlKwG77ɂ.ztHK'cq`LD M\yX2^BUa` T^&^PDgG??{X|j1T1]}2G#T#),azcWZu‚J n^S'55rQg/M)"[0:B)+o&pr1;y g+yqO3[3SU9}%*y%`ޠuK\^ OKZ5/JɻPca Om,VXqo[G-?S<ٵaRF2.~UNY|l5^3V˱dU2m^xڰC-L;+<ip'~2c_>iQ(振NQTF2Qa%SPAj>KùcmuZ"TB`a|ȈRt>7 'MYNí !&pff'=sQv0vōz(i3 Ѷ^i% X e{@lRW\({<Ɖ*֩SdM$P.nB ~s]eWqeޢz+ء UAiY SMd2Jȴ)lXRQLh0Yv*dZ3PqG_! ~C¹̉ xyTK F[~ W.wcm[n؅gy$RD AE.|J@׋(ϸH: ȀzχNvʵ-՘ܝ¦HE} svnI7<c>C407j!(5Wx1ʱ֊ \40뱰0B/NK&bQMxrH N4~p[u:t86mi :8S 8}pŘdCy_-,1 %> kK6[Z! yDjqxLsXSoMpn/+'h%*KO46y|+XAğ'Kh orXZ;4)rB8E tm ld@nl4B,xs9$\wp.9R7SVE1cKއƖ]nx)ˋg)!Ҡ/na$\mnh2jdy[k/ Y 7f!cͰ/RpXfqq  To eG8Ц텼 wh 9MOu?G&D3>*Uϑ`#_qFMUb~d:\ιyɮk#@=$#&k,+L.j4'!nn.7ϰDuS> KzUTxilqa٥ ͫABvb;b\]zsuow=НIK=TUz2d q:6Fj*uU:ѿv_sq7|BWoWkWh 8Eb$}uqa%" bAd}gՒG#wPW9Qi1'~@B?BoL,ʹm1.kJ$G[J{gvQo4_8ϭH?mx~=ϊ2qGD~;[P-9~)`(^+Mցz Bv׀NCuB0ͨS8zԟ+eSKV=Y ލR.0hEM%GzY1%;w]ID;OˮRBi}ZXc1F%;8ټp@N\_$;>)WmIxkj6??\ q@#vv~|yh\Nf}- PZn|!TmY&, &;f.\Bn{=6nQBzQQȧ>ǟb. Shn)J6)1Vng·;z{%^>z8Wo|v똵|baUbnQV3D '2#Sا^H6$CaztZJZ>Nm;@R$'xfi7)RӰ+bj?3_`<'=`qJRR,ET畇3+=bW`.#0;UY$8L[+a7ԮTL/m?,^l-Rv?PO@t1Wov0n[Oo+Yoyqfȋ9\V&|fZY@= |&KOSpXZd$s@Pto* "$Fc'Vto+UkI,@~^^&8lYLeEЌZwLgXJ,ɰ2~udŷ;#6U\0*J.EeO#\yqV^&f ?7{obRKtb1&lUtgQw)Q B!Nqkj/ͪc 4e9%]LQTvp,ٸ`7Gz=LkyCuAڷ E XtӐ4ST| prDrQFjMT&f(6&0h+CFk,}Tbqx1/^'\7qBs"`dNgfdfc٘䍳Q(u|1;%/Rri͐8Eb鿕i^5ڲGl9S/H>5_:XLgw-m#ʖ=oF"P& qOۀME|&Q2g}UBtageeCUd>%77A8p⾋$qY1 Gzr\~Q~>+ln ~4:oh<X_дGgLXSU|F%ׂǐUhJ ,Sɹy`"~ֶDmCzeQoN{soZz 9C6\Mv]o?50Qc Ltԭc~=vd[PJx,P|O=-nn->:28eW( ]v;ѷe?ϨxGoR GQ.lCH +CD,oy-EV`'!XBD=WH+Eل0w[+`8JTHOHQ332=Λ 02_CjK+]wk8ʋDP Cg=m?{?i&pe7xFv 5z~xBH˞hDO |m7F73zk92hy XSIZy YA,@7>Kd;QY,I<8OW1;@m-뢈wݜCX希rQF;4|.=u6Y4t%3K uWQd`<CLm̷f{S?,lp%sxʂ.#`u`z |D\GlЯν68XwO.nͮ %4E5%uSuB2]KգαxS;´N6XBFzT;#Pը_@8(:Fk?Oy}?!|y?Zl6nAʹs= ^_h [~m hzB1=o d pAH"~ҿxYm25_ cLŁ9i[` KTi#?wk,RL#&ӛi:[!%lڠ!0HG"%'Ѫw@bθ͙ Fn,1Zf~|e="!fr}1ї փʙÊ>NQ(=_7lTQ5Of2l?xuE;RYx cE cVS+oքtߩP.hzI2}$Έޕ l#`0* 7[G%q`. Z֓HM/>lZb|ԪW,Z {\9Gg+r$,'6 /qJ$E#U=zU&+ޛ_8-2aߠL5盘4.Qϸ}BM\Q8? NnVʖ5\VL Z ݝpJv{"FJuu=YqyXgݤ&`He֒0/wz30q.V9 ;c4 u2|P$fc[ LGwmqtS4<}-GtHh7aNxÒT׽)%29c!JD1 멲7'E^X49J'GB!n拇s-OWGzuڀX0דm:2:@BW`>kqd;m,ۏ If(#R@W+v?M.𢡄f063S,Dwa8bu"I#ḻF]hP2o6|^Еdo)P~r*NZl/U^qA."(9E8 Kjԓ wO.Ҵ7Uul#q=,"*" M6ҩ5F1"v2T1ŎT#9E18"W/ƖיYD3o|e J͔ĚrًUՕkB3xSG2&ܵ?B4UabΑ]D!J_?qVox`vwpFDY}9î,b*Wc]vU, Շ\򼓾Iiefej."cNk:N8M>Fy:uX`kWn"*n@(|A=NLorn -璤 RxJ۷+6bA-8^7^(tf[yոs }8Q'9bo[9 @N~r5rCU̗[^-)o`AsQoBt/LMm*U#Qͣ 7qYV<&X[q߯9S' O]qm[i#X\[K^?ŖH g ̟Et(j=T9PPE]of3Ծ:u;yi/xW>>%> )0G ܱ< huGq41lV|Ezn5no *CR.Ա * PH t S&mUvwѓړ08WUo0Ү~ lYd =\dԈBq|^\RZ x,\wZ[Z%R}%/N22!s,K|9ySS"d}M"$q,ؑUV?)\Fߢ !g:=8MUVA俪29r qMROd@tٚ@p3EVZ3. a ܧؖ54*H43ΣwНCw8Պ*oD}L&D*SWܔ2OB&[a,6InPBm eְᝮȐb@U(:%I?짾؆0_3[g_&|uF72s "*"$eõ3F2?ҽ+ty~^$5cKf/^=O 8rTWR&cf>aDX?IZ[d:HpՓX[(` 4_;a9HxGÄy9pEC2*my##|3J<&PlC@TC(9ERݬgFd0~#z*/.[o0*|6mt " 1zMEF'pQap6*{F7cnlØiu߽x[-'kM%V ڞSUiIɅ{j5y,51^HWpcؽ?ݘL9@dNy>>mm4lz*+~3z5<2 K[mT[[;+уT.b'r#1 J|)@„}lЈ[[JqES~J%8VUZ+^'q쭡Ql%K.K.fyedٽh(Pï=LU+! -[͜W-\ō߻Jm@y(ơԷd|2)uU dZ۵߻Cy3Vb-i%H? qb7'3&wݖX Z(F9Loc<|k@q j %2!ϑ6 ;][ `MM/ٮP;36#&N0Vh3IDzw!8Aʳ0A7dU1H* /r!cXi<-E,2 ([RIe۩㿆ԭM+U'x%U1ZY4"N;M|?K`f`*imp?2o/4CG ujLD:?/|,pșۺ`/\9*`u>.GrN^ui8uK/!7Hb;)<6_,Ӂil~4lWPD*Q8dX%d-we/\C)r 3Q4GW0ˉkSLZzsz}.6ISnKhO,_~`s;)Q%@e ">1F R)ڣξd'٪%dĮfӜ4OJ}4^JӃJBpw5vKGu\ >|Բ!gb[gqtdQ O5^9*J}(/arWΨt@1$)G]f p&+Teߖa,`֢#DŞMZX `g9JAf])eQ2lgT[tk j~ƻ6D iڸ]W -c殆)cpRJlyO[IW19q魘( yBjI~ O8x}W07AzB舺1{8a^MOrGzh8"~~bBi2tc 'k"Q<b^@89FD})kwo qv)d>}NX_'5eqQk|n2k/g0ՠ V9!F 'ZRf03N/30GM>igz7Jf S.zb=ٔi ;z:-}x[X=YP5MaE4Q\m{6R?M)F30$eqk*xɨ8CJJ*IyS$uCg>Gb?#7 $ש۝n?W4}"]7Y9Z3VP@͒yRBn4`羮wEo)tY4*NJk%  Q}Y\ϨƳ6b4j)yw Kkhx?6Zt@ 5IR'*PW-h^V"͡Dz_㈫=7fj:$&VèW-ī",[օZNIbg VT}~;L&9=8ch*qUbUFE.YJCR{B3d4>gXa%F&馔ci3KDgpCe'j|"ϵsi@ځHmٍCLN?fpyz"[Xe[0̽( ~v?ڙ[Kc"g ~2fH~Y F#'A=jIR\<28$G'G2Cy2 4$fu{sT&z-x]%Tщr}$:nZT OrE27Fd|Ӷj Hr(aik߃( P6^D4/@,E>8[?mۚߥGʵLBEp"oGgmmX!%_DbC*>1kQ4gw)9xda~^\UD ?A?4%+Җz\&G=1ynPVBB^ ݠ3[PYgϭjY Zg`S%nBG9cM%f"+jy`Dtӂx =}ySuHַާT]25mNiCK;λU UjPx*BOA Adw~h1JLn){uJM0f@֑ݩJiL p͂*|y7+.hIb MWd @t4E;W4PA= V@ $ UdZf+}"c'=?NȡكЇ+gmujۀ̉ߟ"K^nC1;-WEPLB35 tsg֌9E,K/aL= M*;/C[ ey{@"̫ 5h/{̴lKTl:o(}iցqsSA\ ޣ`h+<|b]҅M \GBuUL I#oaXsQD?3ђI}0;,FMC2ZSl2䅟 xJBEnrBV>A 3VG&[4AD{ .%pM +w2};p(0;ڨ -C($C`?k#qxs_l0<4TTO5fL Y.AWcrQ ·&ȼ`uoSX>@"/6 sWVՅu1tQd=5^w9 (&, P } ³w 4֓5 y:5‹Ħ*+$^ݏn/JfR`[w2Cv)ЊăH]g5lbcz5+66ƗDn/&0 ;l Ҽnp*UYK< o=b?УyBroF"o)չmX mܥI9FtnRqTeHhct:/9!zpqBYqK&\n6&p;l~yqAis;ǂ濖f[&"{oaa̪/Mys`>xdME7/ ?hZ||9E?'.υQPn0sf8:4 (.r|_6ԏK֯; t*)S؟BdR -S8<hhڡI(d Ekt`KXMFw^H"~{>ҩQ'ٞ#'6Ic2s .,]?"LhYyy;AbvLn;"Ѕ8G՛Ԍ ćϓ!ݷWc> A(+d%V0J6Cj9x/@DLc{Vm_]ZYl[/t]`>G41H7yQu'\]vJ6 ""xqK4߭=Iy1HuRKB{ 'd#j@q]ίnj_abml|26+3?<$Fm"Z?'rc2s43)RY|⛉C~DK6F5?8 쌊 ̩*zēf$gbK­2VpqW4~ʹc~^6/Ȣ \G)L aJyng :.B>0k`3G5j=ہ/ 7N2R_yc "jpeЁ at 3qʔAw\!z ϛgH SSzJ775#WYnEnMhtTǁM`1fqsFFޏuV&=v;A7.OVX|kQ1Z6Y,ZA5IE͆Ɛ%zU@7rTձtӼڌ{䡍Jw~aVCj+ʱ^P_i#2T`4cH0֕&6J a5]rsԛa1kgi}R]p ͏G0{kla a5ru+U ,u1ϩ]EѝxAoG;R(RmaFyW]wFaa_`ؐd9 f۾bSA3-#ve:bY<'e.(],n cNc} 0Rq]ͫC1*ڮWQ/!ʃ |._cB,`n =,Ƕ#Awzr ""4#uU<ݡm~M^GPvh6K SHr8D1Hġ$(+ F>J(%;zj굹ҺuJshMvBÄK%d[Cc))" #A'+#^ʏ.5+J6IN/4 !1.8eOQMR!]m' L x!QYw)NZ5-pCmakŞLFa,,wݒ}jpiWO^~?е!JuJYvZvL GcR0o*_ 1#^q|ʈEk 0Yptl6E0✅OO쉖WT|7jruB+XfV+kɀAj?X{n1&9x$IP8m=͔aOS TQVo Nje BbһSt]s +WϱqYqZ1r$; * +c3[h {s{3zͤDZn!+3Mԉp[<ˏT23+s>`=UiL.q9p 99襄>`I^85^MJ2*܃vyB `X'H]0HNo m!gF!nVSCt!޶';' MXHɷ>IZ riO)_iV㡪 Bר8l`Ϋv2y[`f@"ױv2vҪ5 \T0kUăUi "ݸɥ0`ńYD1쫪,ĴCyn9̤M_`~I]qdRn8c{I /xWGձG *ꈎm} ]d ZM> 0Ȋ ܳ1&Bʪ)gM*# B0)̒er Ⴁ)G]?/$vܯ f%n1lɧ/_MۇBE2 s'U YJC37Ӛy5Dy~vJsKIjb`ru)b u-Pj=ն m8 O}_A_ ηE776VI Nm)Nz)V L 0SQ֔ՒD.&ꜽ&3R@?g1oL=peγNPAv< *ô߶dU6iuyT'wKzt~OuUqfn :.%Y ]+K6J3"W}\Qa;iX $cpbq\yv̠BYĩNy<IqTf$H4OM/fQ؋{1$|{ }@1OiyBer 6#|*Ic Btќkz#лA:]\w`:>\G}$ =?m3Oޤ^ o5x.Mȷ'(dLa~E"` ?lx3h: pPefiPbqF*yI6އU}ҚpHY؎kZEH-p)Qgx>` p&(QW׋JAD=/E5N ӡ98 кMs=|/ &$k}C|;87M9h\H )'V {~g8'ėhZ6#@x]h~2 M9⁛ga+6!9`5jjrq=VDs9Uo!K%* ,R/6e}UN`Nm {so9Uk`>>|W킦QS|uUDPA\Ɯ+V':‘BwݵE* VxLƲѿ`i;~}N5Cc׼Kh%9n&} %[ħ_D~猔,,y,gӊzGvI]&Z߬0n^0p?M]~[To\ietVkh 2&m-<)d@I*WR"R.~ES0H_X=Bs=vkە|yCiS[ObDN$:E-I,`f=mm%dTpi.]nY%X*LtGqIbw/BƢ QZKU#8'P-!3T !"negq]H 5ʡ'~mg3>J+p 6}[/PaJp`U8 &|=!Fb mxՎW cq]БRʣhӯh,x*aOo>Sty'|&2ۆjƣ#MÏ6ŸyqeMh4U?'߅Ƥk\ &a(`_As6Nt8+ Mqc[Y_sLVcYR7htcwV>B{(_{QDӾC- Px1,홬}ncXm_[W2t**AJPuP k-wxrLqr0̝ZI!rxY MށY ,\`Ҧꗼ*Xqk31#, HY„ss; #?PXbgQ %v\76WW'Pq# O[ $.$$Sa)ϤM1ut0wB l m H6+ihD_yw0K6 Ď8޿%ZPNhW- lp9xh6:+JpY.̊|E0ҫviť`DT:"32M*qWkh`W/ _%3ک'ݯtLekI;"e> kyd4TsbcN`wRk$e%rM,~KMP\袱zj }sRj zB-t>(00^dpWR☓: Aݫp^]yoma-E>EB| H?!hKO1nRxU$d eŠarmw~k&s I6Z\Z%Ut3U L$YNBsݸ$0nH 0d\br6V+TIO D UσԬJ燨+2}VSDxZ|RMz Weݑg+sޛ6hLч#Z=!GXNd~(\S}Oۻ%MN M+ (V~$fLL{CƆv.Q), G T3סB[OC==:Vf;APeUW9S#}yUAѨqx)yA4@*_> 䋃Z#.Siǃ߅~2,h gjf|>gxc*@2a:mgb+WDtjO[sTҘJJG]gL'N__NzRHLX]ǖޗy }'1c5ݯu=Я\gNF_ M,zV ԟ\. >O)FQS*I:k>WMҩ,-R# }ThB!\NO+/qKh‡U`"D !; *JW:T׺&!wY`0Rˣ|ZԼav17%ىavӠY78"0-@wmw ̫~2[sAYG*.hI yAb=ŏ'.Ъ*4ZYܠxwg $O_Ei٣O|tx,xTePصXv_dZ<xտCiyDZ]珞3u.;4 >0.Qd\ %*˯ZJ۩;x`Cؕ*$WW烓[)u-(O>FElQ<ڙwEKIbPY@'ǔ4vV!QRվPt2k=lhxmGC`݅c2 7+'"Sy]5&^1ئepgk E.nWq뉽'[9*g \ei# 4`枾!TOh ExXtXk`ӷ!>*IY<+a:8x];2PX^л/K<8dnGhDYw^)H!xh KXON,N[,B+B xBfQLXiuZ«enn̗1,#><㆛19VUu.  8S;yD6NՒfL1r)c|2ch %>]R`k{[0z0'dQLDJ .hV+LxO^pe^:BV,'ڧSq@$;C$x)‣0-J؃w8u}-'H#&SDbӈcoG3j( f\Hp;;@Â]jlB9 iU0C]iREMCXRt,??^rR Q3*fb&|7йGݛ)߱r{ԑNE߳#{!4#SsbD/Uiݿo`gj$UWn,9ϼ#49n,EdC7ڝE4\0*j-ڢ,f&]Xa)G\頵iE\Ҭ0 '؇$B.Dw do1 \yRt`a;|wtpCۻ n`z}=FrU1FYūXadsv'rqg,Se,ՌQ*X !&~ )@ 2;ktD!B_KR`D-| GOOb7.K8 +Hmsm} w.ÚGc  )s!'У~0眇Dp0-b= C1+ -bQ-A7l!Q!x{/In!_{L^D.\MT9k\=zv28'kvL-Jai=7%(9SO>rs>ӯ>~o@L]}.0|)l>Adl*$L;CW]*HƋW9黛q;S5j'Twqxb5ZP}(_hA>r]Ǯ)fB2ƒ'SyY4- ު,Le;)wC\>H HSNH6*b/)8>At9AЮ'dn &&Kr܅KKsEh;m#ZJZ$vst܋kqԧB D7#sVN=s{#Š/I=}pbK:vO>#oLLДw8/p8#x@A7vbbYR0YX.zIi# jmVR^#d"R *e!K,#Ʉd/6n~9q;"EGpcs;[̕|_p>qgߧ 2%/j>Q`砮[~o2;ėr^S <CL/:DԂ yy@uocD;5ihVֹ!_FHG!}`7*4ܠ%X&9A;IrO#'=T;jBy^ۑ: [ [Sbzƫuj3g)P-3{@f^0P 3n-b'qH{02@=wwS1Qy 9Q>=wN’q(|:Gҩ<:-"FX9и?c[:/?! ¶]IKF1&Qߊ%v/=0XD*xDӞ'&j9ChIAP5˧nSaة7&ss߯-Y&"LV%uw5% R;u8ѣŌ: Ip[9uS9x?l]1,>TMEw@Ǖ"+9L폊8B *o{* Xq\}gL6ze_0,STO\ʊ{Z{x [}r)L>+3=CAg'Ѱ 7ր#t>* E9580ܓEJ 7j yܺ ݳҔmWUd'I\sM=&Eɭ3XUPTPVV:` F(|jtl3Ke֟Br .,w4}J[z1ft0$73OZLMЋ%h"0me4PP#[ :CJz,S] cÆ;(O=nkې9|hwUZQaEjic}ѫΫrWъv˃DD_Q7@ja)Eodr"~2/_2e8jWX}|Urt`6(Qo1l?Pi94oxV("гd#FiXX0 Qg#QB| kӏGHz/؈2~OGXoKいZtL* fZU9 `nuHMj1Rc2}LDk昄ʽz*ڌru53X| v!ٕZBPCl#t:6=.*ջgrXCCb{Bi;\$i&YLBYip+y7D48??Áqǐ{T.&l Ojf/F[W߻T+3@Iߩ:돓exq:f{>L%땄g%[8fJUZC6_'Q{%%R%aHΠd2 Ӫ :CLIZ eNh'Ŭd>t G]Z>RlTofŁv;.`UPI.ڄY33ņ;:ݠ~ŗel%@EiZ[v&F]8m̱Ńu S o[mCnS:e0W?JfYR# 2e$-LOi\|v:9ziP+'χKx~N;dmcC,nGc>;jokd~ٛ. Y/3~rD*lg-:<|V M!8l?Mf䣪gji5]f0YKH<58&]q|i:<]U75kG! [[E@Scރ.{gYUyn'3NxY(d% <v>u-SE73$DXg{ NQl2'VuI/:K*oIlif Ѝ_mOiW^()?~}ŭyܺ|Ρ^ CS j8y5|6rh{" `Iv=gi~⭊ m{~cGWKoL(EеH M/A/RUx91DzFYjQzE[- Fn;NIVg!eSNw^t ?lyYJm% sW^!CD`^=u8$㴫RNz U"9m1}@Sƅɜ P "^Ƙ"։\% \p3wAR 3NJa &{5xFɶN TbJsdt(zTEL5V].r$ l+Sƌz,p+5~%WHEl 2}+~È RBgL}+Gs+ :Pj;_"BJ`xd|@]UEE _"SE0gmm:ѵ$ȵkaW*jjE:ߛ,gWdKJ.:sҢ_訋:Nȕ=vk)<\$wΟ &We6`c93Q+yT*OK9Mly2N+ R5ؘ%%]\ _ʟin`!dZV0<3b+ 0Wbip)"@L>06#~6n0MqS#%/%JcO2pAm>R1[.t8g3)[I4$[ 3}L_ZTM74.ܪ\z ]3l*Ȍb$iɫFPUEkIC0z>&(g etѻ0tC -ʚ^@ଏ|btOQ^bQ0?|qIyuȗ_ۀYՙJ%Us-#$>;>nZ3mbGU~9 ҭHA:T s|똉sumxC.wBУHh3Z` i5k!;ԻϷ4%nƨxrjcgrjE浃ĠO 2RiI˛OkFD^&Tbnj,EYpM_#B!=.gJ[M<+W X`B}r^3*ў?)ĻDJ eKhj>6D('@ˮF׺h54J9= 5J&d5VG:򒤓 h]zςќ#ce!UԞ,nv)/f %)no) ~) ;i>7eYi&ۻ$լ/tGA7:Ƒbj=} zM'AY8vdI,68z壛؎Ǩ^0>YFk:y>ͬ8;dm,>f ,Wl,x?K@d.V}NWqEftZNJœ|0!'5Qන7 26=->#G6,$PHEfW,ȍќ<7J"d kM1,i~f!UI/AoW` 05Lx|Zmb?i@QWwc[&)7qYPrR@Bii6r@e0Ъh/\FX'vq)]}8 5q;Toa=q-r/ ,RrMqq- D@t\t !SbXi@k0W ]3׭ K69! b}s[4 !T-ؙ |dZznďEpވQj"Rب-%Z% CV4s|"]0ջ1'wJ=iyrì#[Z/!ĥ8޺9- C"Ԛ._*J6HPUڍ>NU* Z9y}ጴB N>&3AB,+#{ӮTڙgkZ2:!Oek̹M4`LG:h =WFf>ߞ` lơ/X̄Knp< M zEN<'V+k] W6Hw6:vr)N>fW^Z0ޘ44ٽpp49;rKr[U(RSQEE v}0m-l}51l) n+d`f['ӒZ pkӠ"!bD5r$ @ =*ߔ[\tѪ5^ӂ <6}"( RWS W<0O,Aفâ>]Gz5D^<^nl2B-vɢ%K6} -@(YU'=M%SG5'ѵr݋f# s?{zYxdF@7P/[MpIcXlWZfxPsZ1糥^is횈GnݟU 6y+m:rNj0Є#D1`G|HFwݔ`8\:R8CA0B;+`q,D@|d(ߌ*ꩡg\TthnGgH?"H%T㒛nf(זO5N3agA}箧Ӑz~O MpJn-~Sui}Mw|.o0I))P<2J9UZȀ1Fs'c]|*e P;6*=8" c鬿qWbs%嵕C}eO4$iT|ƎPK Tкc/x)rZDCuO^Uo07'1McH#k+i? [3x. %`1jÌ'ӛtyzY,D\OvB"bc+5đR߽t:C8ĩh1R̜ -iX%ʥp8 %VP ŷ<\Vȕ> ]Z̴U~'ٻW%8Ԝ~=DaQ0ÏwD#kL9NʎRaӑ ʴEۋ c^X#YɚWei;a8{bШXmrk{+bUI.sR^ ӦIGRIgr4e&HC:wuYo*= '[Mri3#Gr'8?rLE41mEqduT*+V QiwŬˤx.vQfchoסLʦ [ S"kztQKt׫Aj`tܚݩS dsBu >jj/Ŵw8` P@¢6NEށP%~q~JNjl2;bRm䛣tHϡKH"+6 *-An%Bf3IBšjDlJ,w/l:Yn4寮qA?vGuu>XΌ+a/v`RYh(:׾xbOf_2LCW8ܤݴZQӚEuM׼/SCA=z+b~uF;Puz1cYV.[m# 1# Ʌ[4@2MpWځ(o 2M0?5bZ2+pZЊ,5PD >>,F(jѽd.33L!{孏0j.lXt1vRZN^N/Q<2 Zr/UwU"sa 3{Z "4Cbm/j~ѧ]ED[0oY+wRԣeȡU]ӵT@UNХ4č)փ ~DTMk&2w\8a]wûW6 uBv0ǣ"_3D[8K蜀_+8ƺmHpeuxi^nˑ|8AGV󮎥OVȄêR[!x 2۽2Q*sC5IjX7{ _j7ˀN$@Bͽ/؊۱غ +1E$sl~>\ut"5m;3zSVz C> 3l{7ΑHQ^YɥB纳e{U*^i@bʱ"vbw8~:ʥkx_ܘtoŕz7< ƻKw3;.ӵ9?M™ dhNʑLE 7H6E,i""-|M:W!uo IjX@SǧiwVmx PE_ {ab.JiCtƉɞY; iЄP-V/?8:xМ$N=wPjNzv,FMkQ.b'qа4iܧ+hhZ+?[_ES_ýY)А%*!NQ c;b%?~bOoYI?aw)pngf[َ'#+1l)=f4,&W8&^CLC _p2{~ \%pTTwNh^ŋ8>qef!+s>sgiޕxtHJv+D3dFqD}&P.oyN%DrDk ~rFMi8qCuL;<.; PY ߇?eKe=XY!&Ӳ#Gk?2l}E`?=|ч%?dNR7$(92\qq%Kĺ,ؠzKGgE]Y@ ϭ()kôI>@;v6vN5Њl.T׻vNM2ο1(f+:^{UAIvPWCVʃM Cn^ksO"t;k@Qij{O5cg[Ev; fչߋ_'Ն3D$d7.X@ 7]'mS& BK ۸~>Fn 5Gк8#cݷ$U:EA#PPjdxG 4:/3g6<ۉ+7/eќڔhy&}jO#xvc;'/ ̇hdžWWщee$bR 5 )Y~MQ &w2{6#"3`WʳxyfHj {RkŲ*5G-,:Vn/8ױ_ǒQejx)S̟54FH..^#lz\zU#?2rϢȼ8u09UZ .V5u-4sh^8T- ,ROmߧP_1kudZTIIn CWNZM8='%d>9K/#<`pH3%q`=I\):<ލS~ kP4ެ.ѽ}ֆy|z\P$v!W{ƛduuDOrJ] st:^ĢsTg/5& w@WotGuQQ4:Oe"%Ze9Fq؝ ^ԢAi% |260:H8kT_첋VmkN`"vdN"4ѭ9 mV 4lt#g >|}'jN]֡, giDih*}ց *3%w"Qm-FX~<&\R;*y0MYP&rna2MpE'vm7jKΕ9 C",QN~mMK=*$ҟj+ĭY/7EPiKƳVVy'8&ȳ/5Q%!V #`<#'%h Ч}w3\ok!zT̫l"d Xcz=;r^dr?"ϐZ+d ? ~h6.1HS=N?o/-MofrNDu~= ap6?{Rg24y4_+6_&ک.=:S'0V r.,A+E^o8TGXEs9|򘟻ƺwN0Tq%rq,7=z {Du5fePԦx@'\0br2ǐ6iί `; "j6_'$%J Г=,)jӣAv=˹=^t`3B]-eiţ"ef? e{Џ;|%rpn +y0_F 3q *57uK #=<77UhjqbTR+Fm&H@TsQGKZ$qxt Vz:՘bO9Tς㣟K/Hx]x_)u|z(.+SbɵG@LoJaWh28R'q t}ɣUY&TBi- ARfà ReC\<"tf{w#ax 7$h=t=Ѧq̜KG< i|HcP.,mLP耀lr[(!8]8ꪰ0{ bt?8 GʣF0x Z:d#qSɞ '"g_E>,2=J:hTk\D3N d{k6Vl} ":`MruY ;#lgB &,~l&}lFKrG#-9f[M(&/h4|二 Do4KA'0'}(=4Lv =§^5Pa)i˱Mh"R]2cTkO.)ƴ;5FŐDԷ'8ܳ KS b30\رK;Hǖ9SA룮xΜxH}Al93*oCs@N s>}"7kx*'GOqe(olj%_07f}Ӄ~a=qb=-2kko#?AۤO~ ?X`upv'dWs:v^dB_?wyFnffpx -n P(Ax q?^O;EjsH'q8 ܍RzR=ṞCZrF=#OΏ)~=PY^U~g3|Ih{O*LMK?V!<)9q|=A݄8 V-xH)_7wiG \&%[T )ro3m2HV1%E* <݅Y|SL9HAo m [(d|( wE7eWt]|JF$~(]xR4dBn/9ub;3z$.PUDxO%ie*lhh&ϛ2܍MWp~? Q5 o5 d>RGK\A4;R)lH<[J^3) bam%E|Dq > %_|!cqnpvv9+3C'V:V9t =6 )%Wea)Jz1#|.3t\?4LƆD,@^U7M&-ĨE99^q`RV̗QTZvWX%fWlS"ހV$/P Xgr^]Cʬ7Y/[n; 2kVAvfh8ߌl?֝ *Oy1 Cwe _n?`Jh9 s'#4ؕ]ZdF+&|* xǘ`kH8>`\FHM~"$CNxE. :B]V3|߹;}T^9NYUj|! -ZV{Wp76364}涉ZsDy |C9P)MЭiy7Rq"Sg~p&*{)`C.!: xb4KӺM'#Iɪ45MgmpalgO {6v5it$4́^)/URuΐL*KDChٜGL ,8ذX3̴`O4Rz-ˍzہ' x)Pq>黫oRoP3kŶޥ]tK?ixRTAzI?~k EU'1y*N`, Cb)Y9`?)W$ pu`T99^ȧ=ЊA~؇DIW,뙆9jagsX yѺ2:c6 DPl۸-6vA8AxGqW^7 P('B"½mi"OhkÎS6#73$wF8N G[!.#\gi4}Ő;RDd|Ñ&Wz9$ܧ AU޸03EL48%Do:H,OZCvCg.Àܴ^ZVw?:1w@Gu4 ыw )܏{W^~O( [Iw&[-88bzXdB_Ytp4 J&x>ѷGwq,yiH]_rw/ݦ@c{͎]PMlQBNzl*@SaQS SYMiHV P.Hdx$ 3OxGyliZsvbVmv|Mim3MضN qQQݩϬE1 #ZrC.z!o8*<['4 Ss8Ub?e:sL-Pt[*>5AXt8r[lm4Ltu]*釁\,p<ߞD\I:d +=aV$Q~>h:2BPfeYԪ(rv7T b#)_tҭ{f-\f@vxO 7u߸QTnӵzEKA2+-@1 ZyM3;vƂfPVGnv/(yŝFJ=L~\3?M4ۮ6*ZMVNUۏBLu&b'^5VV=5iɏy54K>uv]NXhr1`;nvXRE,<6uGפ_lP0v:j[y3ܳxx.y(;'MxTcy fP @obQCgudu1qn͆\> 3Vq,i~^o?,x9lIQqe4OzXR)=qWiҕre Ż.ᵸB xif7yMmW v{]&%FۦĢ'޼Nϰk7H_(++=U=p `^_0)S6cSUѻC K Y[19:2 ,m#k.c,;+[i2`_"7`<ήMg+}cZ%80PEr{5O\P6^.J/O.^*{1EA?@6FfLGVvZo˚i]<д']TD IE2|T+115u\ϼyz˞yw9# (gvBtSX$B.YS,:ՀHDSJǃyA#Gslb~syXlE6eDo*6*I g'^\u@ϪK0^t(\5<A;Z^'jҮuE+?8nstƒ2\V D*MN>&}= z$f#,l&AKи2ˎh*U7aL6zo`]͖~OrN)J$n_!3dmmv{B8$((ڣ?rIe+if-_7.sX[ &@D$l_ Og1!I8V3 &>Ԝ!%MQ,i'wί5,n9AۖSHáZ m=v$ޠf=֖1]byoާ~,*xIɥw)R)24VpEIb1!y3ORxCϓbqEYZ.Mu4-B^=2_:ܢ_&]G9uF}$,2d-a V!#y YgEO쭪J*A䭩v[=EII$ԽRqIz$k<,=cy@6ToYD::OG.![T'#U|=Wo{ﶳNَy9BcE? 4dcQH6m6zwl*o= D.W߃XrhlG3_c73.*YO%T:/aVzY|=Ov$Ƭ| :92t2p d3d8cJs$nJNc}̙4 A%OG~u:IWӱRv 8vM͆1%+aScfa92}?:t@Tp {634܎zFS-Q&0a,A5É?MxbU?S$.Ps ?S{ Rod/,;_688%QYvgEnkFsu.>a`}픬$4*ЅM<:j1(%Eڂa|D0Pkhm H] dV+E-f`Rv^+gkd83A cya<5Q<ȗb^u[f (fs{ZͽZ"[2<4B$,Mٝ6)d)T^xIB<Ӟ?e+@ҁe:7/Z3`< xki|)N4@?|0[d{OIT5;uܝł=S]3"_ l' 0@.!hۤ+nux_ `"EQ$_eڍ|H,fKvI]G!jhYXoNEÕirHnB'?.,Y*Dۂgmn+Ԕ OA ZO%JZG/VXcR: x< hi>l\p0ȳu={:w_xA 9A[}"(j RzIjc7DyrޓXyknp (ϲī&c}R\L\l8;\Sb$ !XiP^e,2|y[f,i.sTv#={t".×ogҬry-(?jvt׏zUUTJt<RO}`/Fަkѵ_!B}}'q`~"PcYg-j7T=`:2d X?YFIM ӎW>WnS!Hcr&ceB'b]bn XAQe\H?1UY5®B " ^CP?%K0.9T(RJMGUL+ܭw6Y?i3 >7#%l?_ii+L'ߙ#?XI%VqMH%Cȼmz+_Tp%{: d[a9,&a,jܭ征̾mZ|^LSȣt'EC%wǩO琊цM㎐:IYCd67"EႷ(bp'QNUz3+kQ6W ŚعXGT:{SԴSQڌOEwxE[-c )ӟW@o]N [6r,.*ԉF.#ePA**E觖A]UB@=eh!32ҏYZ;6i*09BcE 26 tǨ7 &N[  /:Zh.Z:EJrVroQxt"Vs{#4Dƃx-Xа1pΫRccQ#gmZ}*ЃT5H9 DYL&?6aHʳ.?3czو(}^ЇbVq!-)GKyx^фBfYƱ׮$|u.q2@l7Yl'a#ܷP-:$R(ί-v?;R%Ⲟm[2RK+4 ,WE^E,/@ 1\Z{%)sCA^wOfKWfJJT,:z|L;_֝]C Q( &.gqsZla@>mr}ͩj03U 9 Wcc{7ⷞCEpnaW}6k?{u%@_$ѽ'A.a%A6O-d"1Vs-#zs] gg>i!o:eOyӃ3v6.ћ~ MvZ0IY.ZY;ae-`ҏ e^f4Re:aq==kԸfeZmՅd:e Cҏ~뒚Dgڟ&mRjM;l{1 ׶7Ytq2%ݧ!sg/оk][~wϾ'aJhI9T8k#p?Y)Ko日&IӨ}02QX)|ilъq#K0nȠN9'瑫 B7W߃O"[FXўmSvc ,ϧ![B^c(E"[ e yw39ȢbhG¸ʸy"=z #kR|b%0E{14KAxY]arY|/;G Il01xޯdj7;q=8-kQ :, Co şb_"Oȶ^`LgVL|ȱ\ioЪ@㐁BrV$!?xiG;j690eҎXGaw.6C]Q)Ѩ2dq#;ԕ(N*gvW#چ:::8t.'~UiԸմj] NmD+"-̱8 ~9x7go YA3S0^Q^W {Mj Hi;ZbvIKJn>g㿸΅2:/fe[(;#KOaЖ*/!>X%nNa&ˢ򞧲n(Dvͺp.@EjV1*nA tTkV8bmMG )=K޹Md ʁ6pLގd$kOxOȨ3՟vzf@]]..ߣ n { _Vh3#298mcT$Oԟ_:in@ , \藥tRh4 6oֺsPb44x4@ tև4: u řhPf& C4x|GCw)GaBS> HԀfˡ Uk{`7.^"VCT!T"h+TtR.6] WY{s ʓ$qrw]߿AM[I$r:lh%rjx'Ki8ꎧcygI<@U}w  FMw,R'ٿvnT= b^q<2@g@PHeF`ǑNQ܌ʙpBsIh*Um%LWﮋzU+~Jp1|]OlQ؉:R9t<;0&"g.z5 2,mG>(GCa\ʯ\lZoNGo3qE٘iT&"FM9 д$Wt:HYq+ȲƧ4&/J*;*sKΟA?veFPC,d) 'G ]+ QrLH.VkW.sN|TQbxCUGmBT*Ye(Tc gGlt=*^-lAGA? B9jC~WO-9~PGap<8@[ s]tEy$/v"o%uYp $6 6$>/BOBgMд'CҺ]cuz^ʘǃ`1Ƕu*1*Ց X=`&jSl"(E;RĹ@!1~74wYYX$E{Fu;/bCp&WnLI%`gZm+@0]u'`qpd#b=7@ۅR Uڷ%<-{U xz-.oIٽŭ&K@bo2L@`2KugVG8k(>2甉 HE*ˤ2kGS[ST`u*!N!7e4Irܚ tQzdF_aCZ)3+WOud5sU.o6p驐kr֪Ύ7>/}quzWp>5]E)R0ߛīё+FCJ1%Ӷqix2PRcO5F\=(}wFU2SU^x3"r(|,f}7* (Q[ˬ\ `2vK q\cu_A+h9FU84>׺{M=(Bg=UǻFCJ1oxdlRQY3꒐UIk}RɌ ^<8$4CBXhϋ=Zw|}P,-}Vu!jGɓ_%[n^ яw b+˴3Y3%Bp#߽լ΃c% &o{cnR!$ʪ4yNul?v`gr\MTO>%R`\JHZ7  ៳o Հ\@quD]V6Re5?ihQ]c X.eI)ym4$P=C߁wV,]pULz›_!˂$x*@ ҁ`.'|%f34`;Gw.v$!2DҥH HX-Rsaѯ{T,j 9(c߾(,ΛlE#gaS,T /}MN28$jR9"H ntf q| ֬}ZG8y{Dㅦ% K`(EXIH%2*^ 4|VT }z5 |}[+CzXiM6&g> 2Q)GZQdYh_/iD3q%j'ZFS ؝{)ϺQcktkRGV<8u_w±k_)B0L(^)ES]K)ZQf#G*H*wg*MF= vlaQYze8T^o~;gǞ"\eB`ؙV!<8utoI",4u t9Wk2#}AL]"uE7b桦F'Leow⧪{m{59G'@9?:ђnj#kv# (aXD,d@+LiϜ%VCqt N-:}z9j%"WFV 5=qX>OPA@h5OS0 S!^} 1E׹ 4.;}T_.8–?qj0Of%po)}^-|aK'Zi14pᯎ`#5h|$nxؤa%w(,jyΥm-7%e(5 w1 -[0Vϒ36Kd*|3FAm\u,Wtq#cAWevP0_%(# N }=' ڽzf_*6Wfbr]B*!\&Z{eGܗ~(C8\;k%[؁u9Ќ> q\Y1ޭ0VmYsLdL}:4DH={B%FIӃIZ 9o|mg^Y%HmaUl@ Ӳ s$Xa" ߸]_X7#Gx˲\cVZg;_{ NjU#IpGdÎ.@[MO^j ]swKju*~/76k?уsH!r-[L]IT{`s%w*ߞ8徬0񇑗kLSټP6k]KDV D Zv{,+/dP w<.݁D^ኴ %O'Cru-̔ (p X[x;LL.Aiy[0[9, >C 9%^ܫeGMѺTޖ\͎Qж}|ܷШ|紃NՃ%GnNd^E^`~'&EFUj-=61[FZI"z5ʼnrЇwjȰb6 f|G_qbϙY)ߘ)aԵ;9[U]8 <Vޅ@UIzC:)kue}Z)x#2)8bԕO[>x93{-{iHA(! [+*ga<0uQP% mmS;Δ:fԃT|t12IB`BF3F^yT̴6foɸ#U>x Zljɛ } '`t7,lAiw&vB儑iY%Y6<껣 >+ :.kx~0u("G E+W7t0 qx~*8wq pK糹TGa 5͆$yGʐ_DI+#,@JFDi ٽu,o@9DRnXLx99+y^-N-Q 3#Ne=F;s%']m p{^? f%9IR 9%" 2BHk$zCWC]RE{K,S/w$b,G,HUeGGl !m#:]9KN\̆w$rSQ{gO.jMucvG׳ \&n ڕfqRP[HoC6w]d=''m\yX&\v*3vÿ'ee/S>/[o3WR˻(y;rf˒ArcCRQB&M$3>>RFH~]'h/s[H9.h!RB H3]3qёP#m*_QTzi+Ua&5@p=l 9ƗӲsyY,tܫٵ7Ⱥw e}7AX,E tmw4pa"3PH;f2rC{'[?TF+vzouެd}`8?Vf{,@H akNH@QnEH?:X=vk/\ݵ?]'%tw~jwg""Gj\RtM[+VoR@J@DW[b8N6uS/3}"~OHb$Jk, MU} q0h ?btԟ^$24b}AH G'̍ O$R^S6T+xg`< b}k*%l6zq@B RhNL6zJ~]iF~WCۇ HI6hǏPvJ z>,;w+YyK# ^7i1BO4=U5]2{骂F0=F[kӆE\h.MdmrH  0s|Vpwߤ2(c^O#EA\QkM=d*Z(&v%+iwQY"U*怃=W ׅD- O`t>T*1{' &J};Q#IbgXOf Y>5 l^9.uEύВlz.h Rp$Ȇŝ'?@֬tּVjK((K~_,qy*P&2o?V@(y8Ooq ^`X a{}C3J[$x_X;k>~ ԁ0D`pWb;ގIl\@hV|0ٮs8'Tϔ3dXh+Z@;w}#J#f6Pp"ߏlvx=x&6Z(,z im lJ艟Lb `>kެ'u""F U 4"JpSZz//M`u ʋ{a/ܡCy2:ۀ ( 0T vp#' Ȱ68R:N7-˻ p XuV%p7%@s&x=܎ "-`O P9x+HȬ5oȰaG@FG!CVɂ/OɆg$&>Ce'+bOctVh38m1zK** lQXf }@v4vP4w/,k?JK86ǂ-EpHSjxmZȊ; [2;OQr^x2I2r&E)GP.Yc3KXx)%_yrɼ1Wp:a?8/Mvj!|T~cOVZZTa]?Ge'mg-z'LLy6z"hp]٫"D@1?|W"?o\i`g B-^sk Π;EqfR) 7,GpXQBSx AZVqm@v*XN9I*ծrK *e:-@I­-\1QgMxtvu峝H岰V8[ɋ.PH<7^ͷ- h+G$M6s:lY&roGL5 Of-P!|8Nb2icטd؁lrtLOIe4'DCPVhF½ BdS8UR MuCY)S]";`>n4rr qY%zBXK:9 9uε`u@Ll{y] g~X>ZPJ>d L\~ګ4BtQN=1IL4!bf W::a ImH#sL2kFBcϚW8ƙQGE*bڻAar) :E^eԳ [ٮ L9 {2Lvcg'jYZd*?&ghA6]m~JRllцD0{< orPfC8Uc7@/T}KAUe_U  TW 7LR0 H >&ըe֐ L3%eoۈ|@MYBJ4ωj#iPJ\gI6R?Ҟg| 8tc/ O@ag[syVa k꤉PtfR ]4R }a^RIX^lb('_.0=+̀aB|?CےG+[J@ߓ|KDøGvA䃦K58 "j~CQ.'i;~Vd>ƃҘvfvKn&a\ˢ7dpnTUx'bIwz⚴M[ VMxdc~e['ݭ=; J(9g0Aac +OgJK#:9ڈQkbgbKJcz0O;D VدJfVj$C- 9LlH/F%:HVSR&^P=q5`Mp zK8V;@*4v\rz&?Bh3YEUi&ZK(DmѧW;6>=e }CcNT\B`k5[_U)=΂NAIÚ+2PLp<f=?' h,/\:}0 H Hb/iɚgcb~Angށ1qKO61U/U1\N*kA8/U9٪kMgX SCɹ8$d ؁p<; آ-' *P[| 8R'`JΪ DžGw x4D}:lf)`2s3}Ry?& Τhp>hMotDdo-SK d|FG{20(znaOe'ߥ .2m4w|$\;bՓm[\39`(Z?="KcOșVOV*e0ax Xs'=|livX;.`\#M1`MFCbMn=~`ʄBoҶ^Rī;Y$ LՕ,{I(Ձp c6%\g~s42}]%>(IG`O-Ҁz#kw@A`a|ZWv(ƀ`(3t ]I(r wCBaF2SXxC3&`hb::te74ܳY8`3Ld1;c0tIS J0Aj9Th =@p#1lJM P-*C~w4~Gvg}9#d PZC=ChNJh|% Ac04̥qMMW\3=ޖ:U'zF{BO./Ih亖C$Nbcۼ;NBwCm oQ ou,8rF!q)o]5snٛ!q:`R[&cq &)(3ԻG1%c1 t=2rc϶fh"ZF>0`~Є\P5 J0):%q/ ɴOۍ3MѥRzEӽG*eMmH_$f8_oō7d2ՑsKĿ5gB@͔\hv'A[M6Eksgth0H |crثB<~L}'\ZDT)EPЂe5Viy_7VTt1U"12~).dvDcљJ {JcV B9OFcs;{Qd]J4kȕrҫza,qUrYc2 s1 0g1<ˌQ#!ϤyqqYRX}xkMQjXV` Y::458wj^YH(̿a ߴaC;Ԃ)<Ӭ>$|12.뭎pfs1r^:7m!kJd;q Y@po4R Iߴ'`ڭQVǼH~jg.!?0J 16byGPTu >N"EGl1MR4^RVP z aP\^;#Ҹ0 QހHeڹ-\0 `)z<fuS=sCoP{/srQXQEA8fݪH`h}uq&F`9aW2Bqe3?N)b>aO^_kZFvMU{<bi*]\!L 13,Y F\P,Dvm=a#-A}fpVq޷i_"_㹚(y$|/Hy Q!p1:X+ w=x ;n)&|V9Jf\ĽY԰+ifr'PCjz02΀˱2[jIIMqq#N ȒxR`CK* ] ϣg0t6A, 0DJV) ψwi+tDδW­4%+۸Y/&XFZ*W1jjh,;iJ^Hv _͓zެZw"_lY*8'd"Y(̀jJrh!S0Y| ԒX0(LM)yDsӴ ޝ.YLg~?rKmwF+Ć5cFAe,u^)BɬLLhҙZXz"P:T 4"[^/A$73]x}#2rm? ,ǨLLR!"Oȩ%5&\_ƻ %jyrq /ތܿkҊfio[6Y٭g z&˯Me^cUjkepl_N% |Sڸg u+HxpJj=^7=Oi6Lö$@+AL*"Ǹ͞<`P iҕ»{@գϠtw:U~.rW2Tkd ohˑ恮5TRo9X3gc k?"0s-l@wIM2 7`˝`ۙ6+LAJq|DI,b(|&#dEk20(>$d}o 8?i_BooxrCሌPo$8Ɍh!3s`XfPJ(R \h}"tENjn;'-ua;. @ :rb6 Ltl(bΓ"6gFӍ!knd_mPPYT0zH`vws s6(+`y <2񻝜zӴ!8&K_#<JI[|KyYo y:_!R&ݖܷMX₫xZRv%=y[T楣4v`~\9J:v}0{l6!s4Sj"́iY` s.X34Y:$E"G4kM s2veA gvj2{l!nxdGJݴXR#({H\7Vh]Z3 Q!o'j7*u,'d9J`=Rd 8soa^;AVj@yfÑaeF5^UK$]ˑv4j~|WF9^G) 5쁉Ck? atYԵetrU*>1ժ0=S-{ϬHBq;`K ^7)P{p1)%DZ}B9䋣3Zp~mkMn(;ǖ5fnIHY'3tDh/F4Ov5&c1O޾r!m)+ Z)nog?5InKxK Qkm&eO'"{\KAt\(:7qֱ&a ~ԁkS*t"mJh4[U,krJ[jg\d)!7e;7{ *@)7}u.fC4ځkD}pgaE-tGT邭El=By?H0hY*32}cE3X [/=\&&$=sץ*]VːkMMn- j l ݹ'9gp>;?:-ia%R+Qehz3lxɅdB-w:ڱScpDFDcIdwB2`ed !hu7 IZkqO釒Pd6mFȸY4# \g4o'jہG1*ԣ-y$t?eQܖ@oGmmҮEFlE{SLg\}6XIlXrRJ#a ϱˈFxfkx0>$ .zXf/qBiJPDlfÇ*%ڪ F ͫ=~o"|Kyѯd ]W?𕷚Bpb}21Z@`OGӈ8E↓y0{whZJ)HL &^'f³vŮ)/b"3w+%ɵт -K{)4LVmܭEkQ5Ryaôl< u\.p{ݺFjz3t$E^V?3DZ ƻRe{ ;IaUvVPlb00![`C洹\T"S-)sv7S2C}y </pڙ=ת$(ݱvD d(\O'k7N^ Q&r%6ao0:f1@ZATZ+4ӾSOVۤa[;/mg>M-}bsj {2%{2J2ƐʏkcF:Ÿ^[aQ͗4xFMX~Æ ?!9ɝ]s:X'h՞}EVn\Ѯ2j .BCC O[OwI"(:dg^UOT>@&JѕG&%ɻS^ψ%di -&^1Nu5-'k/^"O);C.;d>"YFS 8 ]}c:_a+ x-B*^rM'ܩ\{"9*l~+"im/5^~~@2y6e֨@bdiwd)*H%wz+ŦIWCtʋVfF RH8z_v 1pa@ImKs+GVݧ? TXl}>}[ߑXJtv˗B{l-׆80 o]Zc1%Z&2}L"Wq9Rk<}l;V"F$<6xsCu84,oqVK@[;Sûx+|>YV +֧7lHWHw]UP})~B.Dj1.˥~Ezs*im3iXRiOnכQC=y:D;p:#DPO8XU7}Ṽl bdw6s]g9ݐIZTu\Ws}J'r/ɜNL̦T4:ڏ S 7c^he1[ég(_e2a =XJIVr{؎M iZ擺2ZB=ht$KҌⅫɅT=k؋<̭#~W˃4ΏWJ"6ZʼnΡW__( ,p{h&Q^nL!!w9QWf\V@^_H.l'bܹGq+%PNѽ&7G\xP,*Aƻ9G^-j+~u4* oP_߷Tg# :C inCoa8Q&6zn3s(JLJAbtZRu|ub푸ygP E/}2\ZD5 EG17)k`9b|4T}t(I{(ao z"fhUK@>ߢ^+[@&-%[/*XDx Q8pG_XJ$pcv悹qF݀]FAWl+oFAP3XZTo4GUrTE4`wA y$)A`%r-t8(mwie"W? -@9 ^OLgׄy9&^# 'e8'fUD=||'MWxDasWc-kf2܁KDwe<]czg/B%-e:.L*_H4i+K _NRzT{29T3RW!#ð*-0PMs*F] H{6D7X +CO#.lg1*P!" = 7m~%=a(mSQn:3V甋?I5!ֲ##+e =g٠=[ B/IInA$% V_i=R/ʁ2~Le"1j&0DԲ]e?2m/[l٘tg)ീamxb 1Pa%ܕiqBw칚ѡzhkKu~aE7/eAjSf>q%ee′K Ž h[PnUXJ_C~3_NY׍ͱ>X;v:k ?v${\t.I00'{NƩ >Oua`ǘa{@'? BYq@e5LOV쯰ER"Lؙ=W5;$`?`Fxck>\qGPϚ.+mKf;1IقDlF⌖É^d9|~&6&h1쩷T%3yL+5Z #޹Nʞ󑘨Rϩz$Rf6 7З~w{+)2MV/{HHH>ŏܕuv_RJjb2Rk}`$S H"&yeq}nKqķ=Y$"4nzJ͘ | 06"?@4\@z:"ptŬ\[,IyhX6 k2$is+N;7rFa>$2;ЀwD02,.b&&!GԈEgsrÓ>?Mj|$3!OFc6f@!\X#LFDDfArQEb۰z梱da$k:Q-Sul,y^z cD~ %%aVk.=-XWcf^A-Bv }+1oac8Do#Fɻ򇻑C5hY̼=1;JE;JT%Nℨo5LTm9PE/%A$&Xq5#JT6\A1[3Q{zi ?eHYV̋s\4*Ö(MQ>"]7cUUEKbl$5Iࢷw77:܎-6f~ZWC~yȖ.,hJZK:G[*cnN^*uC`"/[:d#V|;覲j]of6P5\g&L1kps~UX5QlEVC?3, Gu[hݺl *)=}%a5oe :OAs?l|3|Kz/A$ s#up$;JE0 s"= y07h&oB0 X~Tfx[ޤNl@I@)4^j'՗W8$Ad"1Ó0Ug/,xZ}B,U48RdZno.:mSH)Yj-1)pjJ_b`rRҭ_=eTۀ?T2]O*;UH 4e^)ʡXxLΜPOϬM 6 <a 8 ɰs"}$3|UVUtڝwӞ`Ln!خҒpjQ .)nӵh4_CriBB9Bf[-'W4]yYSwө؋`[xڅ.PhиbF5tLHdbOvϊ<*#iv4N&)QwK9I{ oTdip޹HOA[D/?AqxntP k)62c J7л &)Bw@TZ$kNJ 尿˥jO  ]ꭗ%I^ [b54YM8M4=|>`ȳd^.\K ]%KyE:|ى;gw 2̸.%/=/jyw k_2?lZ}A$A&u j_bTo\6ߊ&Q %$ oXbD2TnΠb(V&i3XצɱŴS^M~ȋŎ_U˸X0Ja~jc.Q;T!ELR|Y-- Ua!<Ehf,b{Jc(}srDV> (vwCj.굤<i ޡjנ^a7=¥;?Ƅ?엔f-3s'2V,qT!P󤰛K*[/9LqG7%C*DZ-o`16';%%U䫣#O9)t]Lj.I7@:%euyx?p0](O}XeCY[ Cd]3)>Ϝe毾Yz.3Z#W44:^Oܭii^]%'džAjS;i/1eJzՋߵ$n̆*wlˈ} > ~qB{2iUMj$u6!0uq0/> L6K)leluݤ@07zaS!rf˝;jEVӢybEKljյ~na7S&2@N,gc8AjKE&%&A]R&H~܋),6>u-%:Fc=PSIW(Y[)Vrr:~6Usta@VުYh.U=TmB S+3>aW? dʾk8@[_+^ `]r0>!o{9(^+jAJwNm+:-]bj.CeOj1gfx Gp6xL*vŏ MJ WNTv!<.Y\\Zkq*~>(V^_N@25O<#qՂ/fI!:Hh] E4(>y>k2[ȉd#F0tR)q6@&Bد0I]yF0thZ7R #{\z0A>=k88+bj{Ұ7Ald_2!TI=6otl}i \HZlMB@s@hgH اW}[K3{hxuZ?7  `D6L[2Ԃ Tet.^~^^it .bzLʣ Hb缌㸯xPIeT6aO$,Ǵ,S3. ^> /[CNE$ N,5ixQ+jkC' [C3(P%2%<2 [nGdjH͸͔P]d2CJME]4gKǺGx*Azz$I0Ǵy1c%i(*lKk.i%Uh)X"rC5L'z->In?߰J4:9n(;ӓ' InlǸQ3dtc'Z\k*]ʊJZ.[B/lw!0h?!qGm,{ YiX e>o0\?$"zgc wD7l%drwc] meסcCg+CP5>-&=Ĕ$L~<Ts-ulzy2C d5oF-ϴMQ?N +l#|GLYnBӎGUGnҪP-Il74{/iזd}%&ۢHDknYFWbLY5 `uc^ Ūm'.w^<"?䆅z+/%`g2"s2;" }aHP>1M7:?@DBf䕟#Gitn6lPMZ 1pBa[O4+Vr{b0L(_`3D翃U<zX3ľy_6GRm,*,<0遡lxьЀK?ӃOvVGJs'o 0PV W8axNgrA*d&e.z<AOO7-򛁪]6…=HyaRz2vSqIWSXͫUYӠ9p^FyXN$m +bcNNMZ( /0|m/F rKɒ|LWl\̂S-SCK F |UB$@FQ >4ʩhDW5-C^OHo/tUFZB&1,\Yr( %ٍw6kCP\hS zjv!E0ʼn>N4k'Mpa>ϻҵlP_mAMOY-I-GbۗԷfa 6ԉ=[zۛqT*!4["!z_RVVW&%{2'O wlɢ7}ZQ(`\&a;g~baruvZsOӀ 0@*ҬC#";)aVVx)#Nss4yZ]VgxB//`p.W'a} .5=Re^=wIP h;`7fzҨ.Tuuٍ3aTB㔜 dnVY|F $5܆߈.'ϕy⭩|c%P5G9/\gn%sGԑqPUrRaj bx?`}=9 -(S׊lJƚC&t*\uD5j (H!+.77&5}+ϸK%$AQHMM$Wgt]P炌-щV*oҐ6>89Ym䧓!b/."aZ°aqL00ntU8{Saw ڬ#57C]ځҎ*s ~vOdȎ`ܚx./H /dFv6P ![kI37@20?C*Bh%ߎUkeq9 V"҇_1RCa5fD訴b8zh < W둬;!Yrߕdvkz2+`BPy)E#;A`S?ie3(S-21F%ylٽdw,sq2k)5ŗ@dkc =a{-%3!Bɉxq<` '#Ԇ57śaz8\? 9?Ĝ/Vѻ,ge .Ȑ.0Nb 5-(#_yeOCKdSܹ琨 8Y'(.؇Oٮү(_(#Yd,$H!/$~o֪ǽ̫ݘ}+aMKbzCLh?7V2U8h Y h ]_qg9D9Ȍ X$Lx~TZ2M< u,p*8"zĥ:U{b]jrX=/E|7b!(ʒH_Ī/ж`݆%;M\B-]drQ2LӸ.`=eHZ mGsqwkYI@lZ>v(g9,gJ*llyM>׌M [iM'NQIaBy0XDHςp|ނ*p?>I&ƒUh?, X ~x{yYYV}*mm2QumWUI%ҀZE҇RT/UQ%'b*CChb\r1oho?o!wַخքڻz4!T3QTeTn*rS-,bŧ($)PXe]i;-Q ]?k=% o._oȷwWB^cSqqc>;lEo~dqgJ׆bn`3"vmG a?A(D%vB 縚W pⴖq7Ey[[f;!S#ckC \'XbYay:*pFu(gX8`mA"_>3ULߍE?yy-Wg=G #pŸi$O]c<\}ʀ.dDB5"FOˠCdЎ+T#t\f!3tȆMICe ǡV{iL!6!FPI1k`˻<=ɼ!9N9SQ99qb2Ũ ב>$5,惶n!dٗ.K_R@LոKHb/}J-a<ῆQw,nFC u/BȞ|0XtDu,KR#.ᖒlO%ۦ$~j˿RyMq)`̰cF荆f=oB3Z)+R]s:AVJ|E֕t{]@: Wh붴ʿ\dv{%Cڋ[{k/17X_,=׷^j84(C߇6 g,b!ӮU[hN tTJ (}G̜Ŕvo&94-oZr;OĦ}{сP!=j, ж]#$rsp3jlok>$^Ở-iPDpAqU׃wTITE̺CM6>6XY]0AlYSho, YyŅ-'mx)0twUg+I-l'S6ocJ L+P_1b ҇؛YQT0e+Nbd8 Qvm35犙MRS\Q+M4(g4uq@ p孃(pwZ곇OZWFVP6Fe;D.ͮZFq Yk@ RWgZmLZ],6 w^:Le+&Ԋ'=Ѝ+kxRQ`MĐ8`j uJo R#hDY~`:>.Q1;9&+1 C!|ѿ2E0Nݜ嚂2 qcTO"!zf_oSĝ ٷI*>)?n!Lو*Elk D@17[a=877RF*VB0yA% 6*G3)"yH;yUisuT V)<:ءD BՓ*>-lQuzgؐ}]]S>u g9ٍ6ah|{8o*HhMҥXueFSl}8mL$9&Sb|b :;c]1}Gj-Љ f)~dVg9ag %(үt@EAfC^ïGUSۼDTWP ImY{t Qv"Wܦf#0W4/Fۉki5~8IbF'B\X6/DaC%>/th 3f L/Z2A(maiNa0baU s(j2ni`St- 畬 Fv'rW^Y)EIS +Hf&0e CnhsLD0j(Œ-=uot@1LLذYSwrQ/ ޲P1㗟/c d@FOeOҞ ZÄϙz_0H~3L]'VK/CkHucc{M{N1-rjnp0" բXbGYkiiʎnuuo+K*Qu9E5,Wcc*k.k-2ۺl{80 d)LJYBxHP쐾۩W3|FѨD.hjR/`my5Iͮgbg-.SSqe: \㠴 >Q_7;m 6WD E/.MG:;/=-5Ő|RzJ&R通@ffcD{g6m?0*(q4QR@>uŒrޕtXvɞ> kmVX:G*ZXCbV;"3H5}.팢P"@{rfnVSBoY8y_Қ?4XbgZHdĽb0~AšDc9Muj^ T,#|9F51JUs a!΂LmqHu߶ Dg8fey'GJڃ"6>GR6b#nIR. ԓwa` f)q=;~da5qBJۀ1{Ar%0X)A;aep1 bL|&x N8s2n{8sN]^eڲܢ+w."5c(V砯M])zGhmlYRZ)MUapAk8Yq~L 䧘0@W cn@GʵȖ5gkH/ g-yqLu]AnEC'`hzXo7F/jVq!KIK|/8?IU) SF$His@ScZ7%yx" 6fG2X;ħH +h$ fx-czS{%?Tb]a,#qk2Ct1Edm<2‹nbK0vn `/EcJxoH Y@fBn&T>/xQF:ϓƳ7~Sw#u($Țy"!q @8NQ tsҎ x)+z =$/d'~K<2w ) u`BCcr x/6MJhux; ZfI '65=ͲoQHJbi;6b LJ2K 1^AL7u[o P}Ż]4,Iۅ^YȤ_K!˴=徿h;[?9]vp%xrqQ-1ۀ}jx׶M 4pyEB.q> ̓5ĉ"o}LP2%zZEl=+>W  xrDlZkm$;=檑h)>f=AIZed:C~n蹕o3_[T0P-qoz/s@Veݵv{JO]Z*ќܾk8_~AN*`eaUXK#SsxWb4}fnI5v`X]v5#E\g%X6þud2cűJ TjMƈ›ݦĶP(GmqxB]lr9l}8`"܊ 1I ~ 'OѹɝѽZlZКOwg2tK`li3[;sx@0fJ%x,Bv)0gB=]?C.s'amHLf kp|jLvdhhC@o[1b. {' P2 r"iJq#ya|4 H(x< E;hݖOG{,$Ԣ9^KNES6ˡh} ]O6u~a}ע]񳡍A%V1sfk3^PuuD T6O.m?8/B$h<-.$rTk7}܄PjeWpr7r u,36T#tRd8W9v)q>%xWE'.,~holMF[qmަKkIW/)q!Ȣx2~M\9ɬvp "73pKn?H輡fr@T%yrWr\n 6b$Gr{w-yfV3p}Hdi VDHf< ~[A\#71GO;|! B.-U'FLB⥹}JP\CcG)b\;GvX,`6C 3/Y){Sn.cpܘJ4i45 'LR=͜Qr& mFc4Yb6yDmB&L~IpONs'#ݘl/Qd\Xl\ ȸ$(2E D`i_{6q 91nt@<[,54:Am_(31[5ov$ =^>BpuS/ uʿP PrS26dž@g18>Yf=`nwOQY zY?%wt%$\ K(z>iDBw˝bSn/r-g*a2X^q't%t8~H_ŭV;7䪞>3pp53ģ∋ϽcAe{ڒTg|ݪNf.p,O'hDQ_K/8ܴ4۽t5C|ӧs߬-PØL '| (#LsZxL:d/?{ ~ cRvz\ӔlܸJC.UbLJok7̸ՙrEm}lrϺ/_g=f j[닧MMI(7gr & 鏙18E::KKh%U֍ @U0q>9dnzSAq*8QSx*ﭹ-p&mJ-צg猪hYY/gΡT|KOX!'a7 tEqBrYg ϯЊRytJEJw B^)z Zrl>ظ[8Vk\Bzdi$8^?r4.}i w=ymGsaHX Aʮ\KC=IBY^-PhN,ai߸qJ8_ܷ2%%9O HYJ]G+ciGK|5uug\HvV_A3 {>]*?45ͭ\M>yMA-a6V1-LY¢AgWm?}tQ)7M#9W6wTi3=ZqNx́:R^%L/5 Z`Frg$F-7/~*p֢UU 8g^ -d6Zm@p4n~؆ ^Y`lcA֎1ݙ (ԭ" [\moEε!fgpoRtwT|k5so@^᧻W %qJh k(xsӄ^^֥Pµ'_lnIV'6PUeo֌O5!?a9瘍}R;ob۞m694Y[ԷPQ\W;Wk̍wA2 >lU#sތkE ; 3ռ%OIFλǭ9DPgt#v)Zsrd8du渇 ZSB[|uN'k06sS9(ۨ^R H3+c-П}L%񻬨U TY a?k]XI}GZnM \1^kב1rDAfA ct*sG& ̉۳f7KAHq, :tۭ|h]!e~9`mkdN2ͷ?jM"P)ׅe2N~T <WtBj_d~vM$Փ _ljx.Vc[QԞk {5-Is/KNut7P`r۽ޜ4"}S<VGQ>9dgZ;<(BG?X*{%FgwN I ~%ݰSc_^#G}bX ť^y}?syr| =8/̍d)76WQAy|D[ml,T~Vl.&6|4 S{i^މ-T]CTG?"G9PEeIa͞a&q3<Ւj d7`` AƏI܋?Σ)^rWluJMO\6y&gPV<J[[" Ϋ-36uHJ#}J֍%$Q;!™i7լ"&Jp!ZN/[?ma'W\ꅥJp3 PA 2#u_{uעG>N(Jy 栔lRrET?pQ>=7^. ]uD gbXZ|{z"4Q1DՕx^pe K2oRTqd8K H6 'VBFO"3NXlE|%+Ϣ%uލdzD;E 7z/{^3ftv#n^ vہ%L&֞I"83*eIal B ĥ1 ԇB q%S7^цeP)OEW_FܷRd"8&GƑV๸KhCD;3"2dIU@}]ՓZ㤿fea~&.$.$&7O7G pUtZ#`QuA-22h4d \L壼->J(fߊ3!F N=0O `Yݮ/+zSVŬI7_S Ynjڢ`V:NWXh+ht3`l м>=UتdɫlAB, 0r@u~Eiz{͉c88e㉴,ke#/9.wD=68 `J;,tRAR ~Y)q%+i<0Y;q$ saG.Ӗ:p ,ZWQ~^^:H x4CF"B 3g{Rv6&u̿idJ9|Sc4S.JƉ{}fЅ^hlƄLu^3 ]NjTs̍̈d+.JTo{Y9 Wr~- 01%HRqWjj?l2'2Nn8htZ~\AڎzS曐.zC3,W ] lY"~ VOm-2VsxtA p ],&Rsyr*dPwbÚgDe-Ud!Ms U|tTd|V C3XUn'ۧn*#R=o`bG)// VFx9x}}Xc-/1k̡֯abe!iyˎ{BO:5K/RYĀgVx. p}Po+`K@+tF`k [7\*:iyJtaq]`uCZID|%Xg.3Cil΅SV@(F.(o-&؅4Xܶl3VVuxCf@Vv\tD_֟OW91&\^MY+Y#8~G)iG1̚WSz8ρo\Mƶuމp@UuؑiVy%$D Uf;_LCտ lf'QRa 3[2Q/2IluK1&8Xgvm~5cBhb{G4 m|Ɓ[ԯ?|f@bȣJA̛3[ RRuQ3=P,y!v}NP'=I-ш?IZf*n&KoL*N M ؐDxчnw%Q~ْc[ -2PV 2sƟvYeߛPy5-/"+zVQJ.Pd#R'lK P1x>TSǷ"%!*nXs+*%}K]s'2^R% c݂;&f<  4a(ܶVL(5Zrۢ62xU@ȡ0a$hvHoPcT{#ͻji_LhS=nXeZXy\LztlDF,})ЀptVc]tn5O*Kta uJ)woU`qZE_: +RvxϚBU±~)R(4.//Gdb<ɑl6I?k$s{ys!z8=oYak@Ȣcoƨ#ᥬ)5߯4Jcm۹Ѡt G[:!HpH WHx*$?֐4[ a|wߣb^Y/ aNd~BI iDY]Z=T P\=9]4+qH>VʫeCCFxxcTppYwu zi (E=p\//]pzeJ|$Y5@j5NC.\((C tq%"11P4Xz|*ff6z8m|V/[x8tss_%L2mJK!'/NYU-*6 /}dܚ0m KAD4@3J{hP9/!Y?NɓSb#dGUkƔ<}YNDJ{quUGǒ#c*obZHչj{s<_OU~VgX>`pSI5õˠOOA{U7pP.FTk ڴhUZb@*=i03&@ nҋ8DX B*\1 @*>tmr pxJ &r<>O U/c43.gWBdЉAȘ" 8 ,`#@A"RT@̧qF9Sz.";9Xjt'BG0Ę~"'zt8> on4`[Dl[Bg3Pr9 ʾEr 0~_[ P[ྐeH cѦbf,,=0"(=wg&G9 ubEk- f`<H,u5vpUnj֮i_5!TmDqhz%[TcLT$5ʄ$H59S\-?LiuA~3*oal|0&ϞUD݀zYRgJPS2WI!@_/_/7 tno\]5a>SU^>.$(v3Ʃ3R O=?5`B?L˼> ؂2;Y7 iq!Ҙcs'KC̆NCq+ӞڏX2*Vp8cd }"Xr3Z Ɲ3-{D8Xmb`[Ƹ3ʯ)>kEn>5:N6Rpﵲh .FϡX>rxdDs3 i r (hnY3Y}"R8}׻Nbά=5%~l]ԪȊ%\TkST;NH |S +; L/=vG;=bÝ 9=2gK Qmfqx@1nO-=Ȳyb(Υ) v'yQ , jCoy/ U}Г˾Gmc|.JǖI!ܠ^z{vlUy@+Uvp(kG-֗u|i&%%,74WF@-.uD$x<ǧKߎ3>OŠbl'Z?G+qwm UrfKswSIZUºpR.u٤T0*&+{Rg[o\Ye+Sg*1E<[da@'R 7|f!# Mnjui Cq7ݖSv_.4Wa~mdqoAhMy]]^[S||AcxvֺXZɻ{}?NEh-M &TƞeD?b8vlz-Ǜ$`LxɆ/z>+$L(!9A4)o!RUKgpᏞ*I#N0d ۀ~3ILCCHoa9lz|)7eZBh+Tq mdPqI\ۣ˔쎾Enת{K֜"GGô;vU(h #9Uގ^LB-ƒ]P:K}e}WS E_[6KV`v@Q8C[n蕞- Z 4\P!͛($6#(c<zwJ>ːj;7d@'k/'SO=Eğ"Rku%)BzV1ΛXkl~ڲƍa[_Š-EH њꏿۤtEܐU;elWl"Pld~c~ijOS4L/[6{TD]]Gy\;  7i͈_ur"8tWfhK'%ݰ\{Kp@(ߒTlX~l yUM.g]+16<&  O9O 1n&v0D3OPb>_[avHVRQA( giGCJc[߁czI1Y*pJ}Aj\e1zMLFi{2hPuR njˈ6CgTW,9*3(Orݕ:g={ ODJN/>Wd#,XF'i;Aq&[#xcнKrEM>ӰSm7wU(N{ÌЃH+%h|RӔwW2vԬA͙SW$ Rc(@lG%tGf*t?O ] SP8m/٣"}+`76V[g<#gJ8DRFխLP@HiՁ`jmzG+1Ti ?C"5dKL4Bq)8)PcXҫ('(;${::25kmq|?\_l mO͉PTb\{%"y$%-1kpc7 לD3e-7JI\#e[ڝ*hJU9 ,Qrm*©GYĿpv|My}P0+B2LʥHIQu5z {mx/#p`>wIS~g=YQ4j}c@ |苵S/<Nwׅ! zo3X0ا|kqFi"gC ]'لՎz| mG8)anMI̴t5gn۪7Ú҂5>MDUpx³NVcYWH귖NlZ*d''͐)远G\I=<~g|V@xsjy,>P&U)ЁׁmTDN3}P^_q" ^X=A;ó~=킋hRC4JSopZ]R{i9N%:K?bRwj&_ۍIJ!V?zP3T؄)ĕ"xKҸ) trSݔ`q-=6 ViO5ciWӢeǘeۊc]1o=YlEރ tnvfp[SigVC;͗*}}?ru q(ղSt Zz-lƖeʜ]E| "mkP ;̗k7[e A p~mc( i=:#xu&E+G%,٥_qd&۹~ jZ7 q>?*dh?'T2}*^Y֩xGKTsJNP)6@')Thߝaz=#~t vOKs*[+.ljj\: v>ai 6̌v Qz SjJ6G'Nl|ڈ, t,K.-~LN$>xn[[DBۺ‹~z瘕| {8jQ?<5"t /Wq+7Chyff@Mo7h}iD2XY6|eJEv^M;KwR)h/d2k_reN7.|̠_"|쐂Uׇ^IjbR^>ճyA)ynh~l1c UB~nA)4MV澃 ~ZZ&VN@FꖠHa~bU8f1xh\+ d\v.6 N' i~N:$*4M~:g)`ESدbS|Xs'9,rM oޱ&&z'n`$2u } XzJnj1WU:#>埦DH䰗Prvɮ*vUmTZ5& ,r9&<*)Hr]4.+?3W#^9I^C\4t1oWJr] .s[,bKPDURޝOKڈlp#d}@LIPa+9֊q71KwO 9@3?n,qU}RkƷ $۠ꝅw/(FQ|!FjJ8diװDyw%hX>I) Nb>|+LPmJ27FSi4 ݁ĉ5c8\yvS}VX`u׎ȆHQP bJ(HO VK՜ 3{BMO<::[XqbR4=!v~g8̴:{?\N6V?q۪aLܨ.c ?;ISZO]XaGM% 2sTef$R44`ͯ׈57%]N|Vٙ |uGd_#^H'w=uznS:q#+k1ƅv[uh9Cپ[ukۡyñM !r>L&vYK >e)*{y K< sAe/!U_PkGB‰f_4"oNڭass0Ek/٥[g_ ]n]4?^ʒ8LJ{][&7:5}Ft~vDmB)tŞu؏3AD`CwX/e10 ձAVTXE]Rf>7p"΁)4Gf"Z/m֗)s8,ospm|nnyޙ}&C'=s7o#ڧ|cR$V`2(y([>@@)KHrIݰ9 c1?F)[/{tJ;n"D~]O~#v{Vz SLzdVP!XQ#& <5*7B-A.iekr&3Fu#`xWcg l[jk& )\(}";JعRwIՀD7^u X+䘤xף_-T?iu4zsF;h"8aIhv(Lfj}b!urQGdżV`$؇ǁaء`[_:l#[REH&v s H:U'M J :y<ӁStbͼ 19UCT ::>֚:pݚ ])ޕMvѱgNͲ%ӟdeu$CO|}C?MV9`\ԫglȌf,CRƵ}jjwv|i7þ7D>)qDӽk!rIvU jqs}&\v3^˜SEg`H5E1w9Gn%umn{\)wm eu @ d4.z 'rzl>q՘rAAku-.\W:d0W߻?"-'|[mvRi ^p0~g75Eyq"Bη[f?fOڪǼ5>ac˗FZ `[PG#cJiz"iT"iR?APķLWMc[4ckrbkDjOٓʸ߂#=|xz=6(!@A,*ee۹& O' }4mP89u VC-fhZ{*ȟxEąYXthf9X+b6O 5 e.B)̷Un+}%^dO%ꚳ^!Q %U,*?*22r SPgU3JY/*w_ިÛ':>scrs.@Yĥ:08溲J[ PU0~$v'iA{: ^XY)J&Sz}VSpUYUUdE^N)ͰkQ,Z@A;;c4˘Ϸ%ޞB_hSV{噣{a؉чiulz!#/OHjU]iUŖBו3 ~jhm.n0m&)ѧ( Ww̰$n\ugcKfߛTeC dǍ.;6fCLk:Y̦( @_% X~td5+Y~\Q'2:-ֳSC{۸OhoוhP^}ѻ GלvF^}u:C~OK E5Y5J{$0Oaq(:k=Xcx‰i=,5^bYJ>~7dGQƊ ӧ/iy%qȸ*5Jo'WŘ& .x/o~z숌a`hqL}cd |b~;E NO~X6Ib7G3#,_ k{D,ū0fd7$%`]@itXHz.K- K9hk]!i D²|'F!K0! Ra%X*R/NQӮP_NŒ ;25De*aT|\Y^6D){΂GOV"1,G>RǍr .$/"&rť眛DcwGl)lHs1sXɀ`n(O6OЊ$NATsȿi +Ȓ!H #ooc2[ @_nC FaY͔p4-(I6*joxx>+ oc;;~`N 3p| 6#pzg@%pz^>N}6w۵"Mti"Q :O #/܇T'XjvcqSX :coQ_ӥK) tww{_e&m$[+,䧹c/8"C;MP:3JMJǗM7"kl0ޫYN'o&[rU*1"gW~UQPѾ7>M2у #YKC4DГEnhjI`/ہp3RMTZd9ٽ@r ̂#i3Uڝڃƶu/wTK'I'Aϣeo^2\BPzʏ(\tԮR40b\.q}e¹lXL*qѾԏpu?D!0G_U - [rWG -Cghmd=%ڍ$sm!7115:F_,gL8n_r@5C.s!l=EI(Vѕ4{i|YGNA7p&VS+J#̱Ve5 YC`f|2͸(pt8D|%'IN:8lI΢f&A ](S6)u%dR+&b$ѧZ_n6lGdj=#Ix2M_68 {HG|+PmGuXMA0D,m ΍V8]^I@N1_֡|[(uʞcPzJ."U̹n9{'J5ɟ8"y *`Tl#B)l#AI8RC*<Y}hD g5^gD1O2.N`aU~1mϟ2x>Џo =CiFCu[N6s8;kn~la^`1iWLIrG6-nTuzyjJSf; ]x%tA+FID_@[jS_}Uө%)ɩf)~-D ](Tb#Չw$R)(kA1OkIŎdW{ 6ĥ].ٛˊjF&Zֶ !#,& Ja16`q/Y3'%EgORr[d[僵-@visPb7 8'77׶xP8?<ݎ;ײyf |G%U@+1`m%wr +Rf5y-'*p5G޹n^ڈ2$.IcnGuiEC>{*Æ>NXe*9E*-q#ަE> F,*Zs`b ?f[v=^S)ҋ9a<=p+OXśnB &Fn`tJ3ߡehrR F8VJ&资J60K(o)V4_#~Οg%VEp @oBv4)^}vYC`1 aiD$|C2,Y,n'RXra T‰܆%r(;Ϸw휁 nTz)py%?ߔz,E4&Kۺe^ª+bv sy1-31_* L>GZAzE^e9/"\;ES+ _&L$V?w}VXJVL0=X>AϮM6K#dlEV$j *vӯ7޷ .dޥ;W-\[fd0Qtː(_Sø7"nv2ԒЕ zn뷽JH,#Iƈ$?tjȽcXztEs[>q QPLy|8M-a(!Yicab?2'Wn pF[$h'̢˟],>mi }*]4OT!8\x$XFU$O4ZFuBy5%A>EuHV͓7mzW|8< 7;cIS1@ EW0dvD˩ sO{^Uj!`OKIKE`^}Wi{Nj]nDTᄚdue_&j)>i *d;E.ԐW Ve(Em sv\o/Ximfr`\l(^XQ;@4< ͧ*?<_khEjdWI{˗' QkUsKu>k| ^잲e֔t 9I淠HONgȃƃ xcԎf KH|۹8Gg-r a@mF.o$;Ć SRzy^Da?[ U%DhM+I(Z Eb)"CL;zS΢̀):V5IZ|1 |Zpmb1[kd(Jf-(ߓο5)ٗpDPRpxv$;8"x&yȫHG/s%1 ^ZB&\^]8)~ |4ֆ 'nP($NDa0.23$kxB yÑ'zhdj$,4[|"i rqa~l6d@wu:g}څw-\DS3j!yut> C/pjGu:#|hTZynޒ=8{96"p.Iֆ|A.*]?"ͮjq}Gw81GNYQsS_8Q=LzB/ۅq@Pµ{5$W (D(rRTAWnL68SHVvѪe@T Q^O|6yNsI6N.wC&m~I!VniUcOئj B]Ϲv`KJ0>՛ҞEЕYw°8 nxOlۼm7Vg&@oj E? ޗEcK*iI׈ҹ8z"/>"6ͷQ39ԛ+Ϫ+lK]cg0ogTP"+@#+ɟ!C')ƈ])2fo'<zY"//o׈Rzø q\2+dYИPZ9TY}-q K C&Pzgi?vL~?#쫶E6VK ҆HMw.il\qLq%Ѳp _l&u"ȕ.״0d>hh-sJSOssHx|[OL } -_OJ St%wakߌU2cB41J!j$PNf1f]1QvK d^\T;eZMey@ě'͌nd;PX$= 5yP01L?Tfv};GuG6mGw*jj|jk8ǍS6f8\a?)ظ>6F0**73i:J$vId%9QJb\uw&c?qgz| &Zqńq(B5GnbhNCgtY:l"ח +J\\NvTqn!( [,`.8V]߭Jh_-Wc (2B6❸ÚLJbAQ"mj,E%Q =Ne%:It [ Ӹr##J,I oP]xux>!O2:t"e+/&sdpوM剋[lGu,R{KIPY?8TF 1ĩc~ >.RŶܵ0+[ɂz$;\*}M' J~?ޔG t"NSR{yؓOXwv,RA{&١Qշ evWc}vG /8up? ++ 7_[x̑ynT~ؽyHBu-O{LFqU] OReN!>F#?rE4Yڄ}C(U L]2MɓmQ x`զ/3 _B>_p#,ד GT\yDjdߜ8d=E$S#wc ͠8@EdNSՕZdlY,F4Q?U=l 7{\r bO5I"÷HvmӒU)PM2W6 Oe=[E WB>ӑ`^WܦAMJΧgI\KB<2YKe!d> *"]v)*Nru _lB]͞E hӧh]27pgNL!ȮJb'bRˇzkYJ91. V8Rv.lY۸"|8g0* fR,M3$-F$%Qp:}xykxRBITcuL)\2Ѓ{h^W8b ϖM\CPg'pydU%b^p[FL9a^YGS,?g1;e(j7,`3-JfbzuYd1=ǫffS({wBWA&ѹcyk{>==e IQy;m诐 U,};6qF U1?Z*2JL4eL܎( 4999}a( w<> 6;d~_hN/ e%8luwl*b<dq\3p)nq|ŝc{jg#I.qTg Aۂ93TJZҎXe?sAt6":~bQRKDo5^e|N_fTfx)KD,z9m{mP{-D`VޤxX"d}؀5"MJH C>ph)Ѓ~~oBfٟ&=r.3й @O_ '#ik6-'^q=`J&2shԊqUW*n0c#a%oǙiN\2Q烞)yՁX Xd3#j lxv!r*I\`W=a[z{]CU"6>bvsިkփgIP(eD5^&'ޒX#bl ԰dn1&Q[q#RHY|oL+yZ$Djj@ /lvC9{-Ell6 dاTbވRƽ(wa]ScQ1HШ"DO`Y+5h8^fs40)hq-_|Sby)3r`,'`TĦCxS[OFJ0Pv8%gxVE4d8 Cnd`cZ0h*p9 Dv#Y"[B-5R9pΔ\IHm*c5ɖʒrZ X GT6z}粍|qR*"/@/(FLJVPq y[& )"`lB #`I(di \a+;煦 a]mk/OtȐ/xADq﫰~(wRNU 4ubw'Omlz"# 0~'WsA釢h_\|KI(6 >k`E9&%/hKjb=[zB6J`|&:S Ė++}.$*bGd2ʎ,2ҥ7ioNc?yTjV*ueyk#Qkڃ> 藿ZאdCOJJ&;Dw1y$ ҫ$%$2ƦH:G:##l~ēf'NF-ݒzꨏ]4Kl972$G-GZ.yK=T+ ʤן? Jsqo.B\${cn [%4ACGskgkjC"f64{3qRBG9s+,O \|besuhBu.%׹"F&zozabGw amn4B vpkF`7~*/t>D8E*įUCr$u0,STثm"="!b>LP Lb ^b,p:JJ!~ܾ}%V*; hL0;vbai0ȟèa`ΐ{~R;BgG>:WI9+Fc+eWh %~\ۺ1 Hǩwij/| 1Wưg1EXWy !2h[Jۋpy~]>^ǃ.E]çrnM^oр6q.J,"-' 7y H?GRӃtըi l62[YƴIr?.lg)T\HPGJ "`c0Ω *]W u>_ðXk),SF00H[xI0,U(Չ0נYv~EʥT\9Ӥi8\GN@ݛuCq{r ucST&x2c[PPR'Ds7'6=,MhkGf%ЇBpF-8KAmѲ(bP#=Gue|\ pP3]_L(aB)# )>$A&Mr}L䒎OՃ/LIy ZI`*w5L.E'0^h҄mU:3mSBJmA{a<+XQ亝FE@/m|T-o kh?!&nR>mJ]'Pb!=ՇB =Ηd[54IWf+F"To{ͥps6_'*x%S _~O[ȃ`(T *9rT18Mvkء[a&lvƎK8 Փ=<2Q`ueˋɀ,)d15Yt盽驭dcozܛHAm>1p B§qT ֑wpܤLhw9Cpd2=bX? ∹4uMh= ⶋ!mE ɓ3 ,F )Iˑc:; b~J #݆ -_ۥ!C4 ̍T#㏧5l?Ĺ-%b1]]-_%akdfGuatB'ܵpZ3!qaP+ e8]<GSyIlczT=ma~#Qz8x@*wאY6v woPem.<pCEqUo5)o82sk護I _oOw+q 43'?)뵪\5"@NaZD. "iG;WĈ0e'6Źq$ UO/Om/E84 Ŗ҈h8[p bk<`o/i gnaXy(bxFhlLJNyj!@)JHq*"'(Ŭ4ͨ}['L !}w6!pB?A"iSWSqCD=r*5qb_@en1 M=qϒw7չ|L7g^q?ca7r$ Tk.!˩iY<"xɉسUԦSzg{?h|$0wִɞ0-aSr-Pжd:75Q rt8nFnsuGڨ/>4(+x+/+d$,hb; me1 M`$K%JXjwpWx¸qb]vif ]JfsF7߅cu |q㤧l]gؖJ][ˢRH ph9RT|8Ѻ]a^jCqԛԋJrå#Nl^$” *q?6hdK!QQ.+,9)I"Zj@JlO0kS^dӿ33{O׳ mn;׽ڴ/yTHVh93h$/9 *)WtdAaƞq=M1? [ْ.u#y9DE{ X8^e=B;d|ܺ31 pY̏l_ mj(=]`IجLPI~Hf;N憚"6]fI<="796# R~VbU5cM/P6V8\Oj;U,y['YR2U݁e~Ȕ ֐ W+h]&G8<~LP,꺔786XI?cܯSyEt=>R!_z"g$g30ȗA&2|; ׶80v6stbaucމ]bY(Ѿ`ā[wE/џ!MLfo6Ιٱ*`JFb׵qNX^Bxb.)B.ʰ yTpWUi(E.L)Z1,gz` \Q_^P;P Pk(ă_&@&I 4!1tv=*`P9(_Ln$[o.|$J]hdPĄ%CA֦8>ʾ*B-dɺ'%WG8AɀC9{nZe*rQ)r]eibsO*bcph  XMk_WK[ڠL)An=5 \S͊X9aд5/8:{ރK/.cd9*JY=_%a< ֿ\y "!\P_\3!eת͊P.["0i(Fϭ%d PX١ cRySC,q-}xiR%$zv!}cgoMTRoCWiH֭v߱]A~p`cM5 $gnSO+J"АS"|th`񫰝JK1fLpR`z]_1HPD5ȘuV,Hv7h<t¯|3 s-O +*NH.c'`,S,Q{VZLNu5͍ Cdu< pt&D G4W!.))Kxg 3HR%~lg47iQKg\t; %C0`Q3ۤM;t9'X.wTR>Y/-@f@%`8,>Qݭgu,]8jWXi$o,Mf X.A?eI1|6uG8 9,jș*Jj2LsД,fȀ WkvBPIʥGK/ JqPp=*"pTۙu>~TheR2~<U;h \B2BU\(M16C :)R#Aʛ42ޢ9؈cĘe a˻4;EysU8tgob* 7a}c(縓YXn=qX${k!{obeY# MN{|阐t f#{C:LeΧ$o#G],L̢k|äK/<ƾPh #HppzB+%0VpZd'B0|eag|/,*FVn_ + 2fwg04avzji=*#>5󱂾p,^Mx- F?wgMx&2TfAnGç4=t}qOC[5Jo_6~Wo"JkZxl9AC,4t VT>XHDzg9Oc}Y4ޱ]ˠ`v?=u(~W},_ZCy~MgZv%5ewnK#%Wˢa;"mt?R<0m"(l}mS-N."U#oTiMeI/{Ƚ5pM(x`y9Ϻ]mi] n#aC *"u.MȂ`kDջqwÑ{14δӸtB\i 3 lkiTYi߆&i6k3`\8NFe.jp@;'+wDIG\T'D=. jهN(_/L@Z}LDSde#]0MдkUP~Bɯc{^A8fyI* MC/{d5W" `$Fh|8]qېD@b{($?X A'(^{fRFXp%cl՜d9G\ ~M{ Ah>dq~>0f$Sc w2+2\#C"hq42؁N`Qn?@7OqҴ~Ipbp'.?fBQ^-eNvǹP9O# 8g74>V [$ɃLK}1n G~o5k4}z{|/a61 ^`rfBSs{RfسiQcGNln"2ܯLMpH6D&ήJ CrP7f{}kp+>cpV@M"xUrfn߿(|:7<-L\\6~ZcCnB3ֲ:Br{OrUbH=%B^|`gOnXVQ";X|Dz+WЕ<$]W$$::ͧ^F3j>)xjC}Zhő 3\/>Jԓ'ʈ(VD5{Gڗ2b԰#G&0tNpn34e/++K[K\87Ўs 0'UI.[1[}>(BC {YwR-{O v^H?FM; ].8jauE6l"t;˙d6k"rF̅6) ̤eϨ.<}g ŸX*Kϸ{+xL CW <Ѽ&,~1A 1d^#ĝr.>qwf.Z\Se )| /0]B6F֎ x3N 1؛coF]~ PSS$ɬP)4^QbE%5KKohɠ/C|Kb@+262Tk鏉0;[7tgwn4_a(\ $]omUŧ}V _#=oBr7;UDzWS_1>칹b t!<q{yF"a8|K|q!&oI%_. <؅cMLK,%HHDsr%f}H*")\O64(u& -[.ў-o5flU.zr6;S|[XnF8Ffq9r^t;PbvfYVfmV(zC>-KV%QF$֠ݖvZPOe`'_(|hL/'ci/# q,O ԳGheE>Ók1ݸZm@.⸪i/v*;Am^mYj@0Qzq$]_[ S5ZĦ* `C5>N)q]Ny@)ųfnC7Ay\nL>1U'qEZ+2P8;^܇7;XH*q{O}-RSӇa۔(&m8ppz2ʱu< =-kߙVݩ3fCVjJͪP %?"]~/;mݔ\ YP )ܘ4|J)\((8ܛ[7lTyǙRgBgΛ by'$d᫾l'?ͫ3ώ^m߆f_/F{5`.vJ'ZbYY Ū_ M)a{*ir*ǨXPIgOHDIڛpɲOt h_NAt\eo[}D?_XYK5XqF4XNv)2^Yզ_~@$3*^E}!AM|]uʛkNxA6;MSipS3fƤv$<k:*Fy@QJzP:֍}h+S(J7yd߂5k70+vH~S&3zQ8:觹.8!oPs:溔r]agا p'>,`6d8o"(\_6Mo~{s--T;yS 90Rcbz@0fdX>eco6|UF 5w*=!uchVJ_d?#B!T|T 6 <*# 1V/4g`<ʮ#ӻZ S4G^N_(J"CCxciw"s.JR2 ރ4̃KbK iPMSfR.e `^7\>lSn(7ݬ']X@W&\F`; ]>^?aOZ !R%Ca@x2=^9q0䴳ʵ߷-A/wl1g%^:nD'@;`N)5TyrՊq9)$ \:Sb(Vp|*Gm_FV$r'ԙӷ{fKY6!',bzFp@w&Ցnj*ȂFT%(X DM{a 7lRYﶵ.|fQ~Ug 7V[NmO":8K«5Ϋ+Qn?jkcKsx#3SlL;XE>!dSh36Np h`)fr|҂}C8cE6Lv?gY anjaAHd<ˤ]%77@ٟ딺lNozDx`pN꧴~eT@c) aT)A-hud=8be*'1'%YUNnԿKڂPPUtʁ=ZʡlݙU!fSy>!ICS }b`RD=s1I*74J|SV"k`l`2&pomK3U ='vc9A* 9@Ɛb#y;&r7LoUKԇewHMw1)WGUUsx*ͦf< Y6_LT/PYEJ|˵p,̙aʈ}^P_iEA5wQgYozSW'nuHkQUK>odfzn/~kYeTbnaDRHz=[sNc;o޲`zw0T? hFؤiDgOÍ{.|&o2bCi,2.J<<݇>~3bdyxk0 XF[Uq P汥%шLϸ"*SMJi ϱđ3ȀHz Fg/tVǘhI\5Qd]Bua j2;Z{)J@r@pK1RqL"lmNCos g͙( $ܫSNP|l9gW # h W&r<[Cf" eۄFW!.e 󮑎Ӈ !Wڏ)1M!2txP~ȅi]0}Z}|bJx>!1 ;J3cm"JqL", aaBK;0T8 ؀|4RZΦFV3?d.3Tnc緷\>ߊ>X8z,3=PnpՊNL;tQ'Iƍ" \$mAeeq-*`> 6z}7k g`;ʸ|qlm""+tՄ}U bEF ܰa-«VG R=ۛ9ùb b[=6I$VWrelV v JXB@I0j@2~|+̨ۧmRiCތ!6n:3֯fF2 |^q{̸ětD Yazss׿ŗKw~@3)灌Nb3;{؄$M(;\0 = ,\el)4㳒8ˤ&1PMC݉7m_::Kn쑬!}u叀(-%nhYc%vaFc}\lpPp|xK2#>J i=z[6iO#{C:GD˝*o&a ,t .ؽn4_yŠppܓu[v*~lc?o^TѾld?.,eQ_k2j`.n JnViXrYVv3 Xde@c_y,%,)(HPHh-tHK7E=E3DjD0]5yIJ|k׵{uڎ|=7-JpKAێ_3'vK=z_H  GG6Z oSC!jԞ iyv s+O7vC%96h_%A$K5}=֐oȞr l7bV;vNh!gk6\{OBYT5X/LYH /)>~ HP NH@qY+Tp2x F~k_]h$x2-ѨnZU-7 Zlj@[e7LFOq wdnKo=9cOHjK ״6S!Y%-M*X`Ϝ5%~Sug1}0O:qׯ $v7T W6?IGG=l2{RR2zր:411 `3 Ӹ;(aðEr]~a?@HX{[3ce:ĝ$MDz1k 2 W@_yu03Rv"3l#`} H@8[<֤ތ ^GUf 8fLKKboęs78jpˈ7v;5 y\=e~X Y?91mj)jУ8*$K1GL@g.yPKyL\+7p 43F0@?mS3F u_ N9w/l'AP?> KnV<_~>nE-uzY]#j/ &H(B]@h @:\rW#J$kFQbc\sz1_Tмu޴25/Uy:]6$չ0úiX+J.ȖC)<իE(SH^gf{3:NDxg`TDwMCv7t]\7_3A sэ`GxF` y΄;]JOwVWv8_E!=_E_Eh7@-/x@VhT*CTUd~O1m G?Lm 3?H[m(VnUB_W#zYɇ9\ݕoSC_)hmLHY]0J(SI`CMO9mѩ),z\~dHokQiu> p|w'[TO*3ENю| j ~/ )-s^>Ӆ89(D;376zCfrKer!/Tyl o|p@@hքQfn+p⦳3DGx2RmZ2bή,QKK> u/]J5fҹ^$wLX&_O(r;j29U\.l{oOV;'aضI.(C]]j+[ԤhF8F> nl>#&& m!U/u- >;퀵Jx:i-o{žjr1Y 43S%ߙ3ܰ!g;K82wi#_*4NƼ_K=6j,$ko"":βO?&/L` bGԀND$(WۚYƋ.6VF;䔢4]|0$O*&Sb[,ރ_5b[; k0Hq* Tyez*\2Ν8t y\"\s~rfhSBK9χ&J]Ip"M<= #7u5^߂~OZ%^e)Oq|M<(L5f4;}jDvq j4j52锓Y£J,p0=dh6=qq-jVD->rx(}*15;Z\[^|ǢrKq_GIlcB ђsۤ=#nF+ w+KpN"ý, ƌL5"$y ?iz z$=_Vp/U;p#7{Z| b#mooL]8p:вZs[L-4p$P^+!-]V0? T)yLDz -pFU [[ׇ :-kJ j+Bb1sFl`lDbY]{KJ`VHz5 3]|)M{>ylMprpowoˬh\riD4"m%rN\PwWdG "fLJ)svNVh?B%[AޏMlyJ%lQW PN3Ԍxa焎! L%H4ͽYiQ382g@DEe|`:]^:74zk=R O Ը1W) O\pBU[r@J) pMek g[S*fLjvZxoLjA!ۨ訠ϝDj*% l)9e̿i;]NYe S8 qsSWrUW\E%:lD4==J;>O'(ZoWe*F~_OuzJ:DQȣ1k*B]'ξ۸NCBgQJ&̌nFF| Yܪ,_q 8Ta I _6NjVf9׍`B=$䗥EŝޙiFi>ZgAcu!@(C\)G:c 'ף~#i!՟ye Ϳp7rLe_M3a|dzo7:FmɈsï+}QM$l"k{i(.ZK#픁PJ6 y kh/AWߢ&b6c;\if Md<Q Y&l6z`H+|W(L6()Fw*4/2vo03Ԡ'DIC:D?>n⚸&}ԎF_WݛA#[ӲAX-}|1lq6.)2h˾`2e] PnS̰^yceO2b!94 Uk D ֌VEC Uz/NlGy4"Dv`| ҙYLJԒm #-.5~3v'!c|ͷqV#,/"(he|,3V#`e~nPd+TY7(& (~-~1`AB˓{np؋#vn?ҶYP)5Y~XC \h=[ y~Qs`: ]TtT'}V>] q!;ĖqUJeVYnS)\`GD4*Zx6Qh]gB@*m3{Qmx V%Ax1AbAz 9%Y'?%Ols ןy2,T(lɃN ahTMm) ƌ6cqNa&*v@.û[Ps̘YpIq̀5r_#آT⸿>4W%/w큉{@׆>_ SpxW% [-/哼/x]@!9Ɂ'y!:Wa[ʽVӝ gTc[v.Y0-.GvLCwbϖWLDc ŏۂuZ}oRY'#V;Dx"-'5)qBYDH/bZIh$6Œ1t=>ӆ֮upbY4`1*u?lmgM0 Jv& } 45BL֝a^'e,F,9,o@Hd+*2Ӟ OpׯtŀR,l_cpju=!p9/Mv:-qUߩ*̪e=;a={r:_I/_\JsEaLHqkL̽VS |`bkiGU5s39ć'1>ZI0N4fB.D9 z9Q5Ə8 YW?} >Fa]K~9 jռU֒㜈Ԧ*_CF7¦}ڌ5.7Fq+ZXRU/eOfYn)kц"g"&LΧPa7ĉ?>rQʠz|alx0Nr? פF=}]<өTD#\A#- mhI` jUgt;C pgJlMٷ[> nz-4dngw.Ĕ"gXQbEtÝcߐu* 5\b;>W;꾰~٢Ÿh( "DP$ =unDXfw]VО+:!=fZx pB2p_r;0wPeE*Vtlr 0;p#yʨFuqH8ه T}VG;0i܍%UVŖ`*sO*p2xв6-&{s9m6s'"޽ ]p-(s +ёʧDz1Yovl؛Xpu£Htn rFnWZ:GCU_z X%*nC 3MiLtX)99C>cĜEK1e z{\եMkwYe^eb|=ݼ1VUD*QNr.[Vd~' jQ[:@l1Qom?B 'X*jo9߱M#wAS Ȇ=%__zК aWwOj*9|"ЗyIizϚ1×FdiaJ[Ă86|~Ki!8v0yLa:$V2(eUv$ǀZy#9L{)!pvqcߒU*E%mvFw0țz3Wv,bhBz/v\,ldHpA"1XzF!Uɞe4ZªƛiTWR}da`v`|qiJ/'Qs銝?ub%#9].YraK1a}|ZePWAN>?0MM0F7PnYG4$7Nn߬5%eYH@^=-_whsZ hYݎ%2M-F xvU'N6!-Ԅ]kxS^pno:<ʂzΤ[ihW ڤ{ C J\aƙ.ss _`1:ٞ"O-SjDỈ>TU" 2`#|"N]ۋ%| Kc}0YzB?Y+RZ]]uK)\tzP?Ƨ&vd,Nq.VP}Ѳ2&*wTJTT0r`GgeSʄG*)$GfRH r֑BI˗Qb &U]aJe{gUT▦ύs`8`z6ƴ dcMOgn\|M^v`i>FPĜH 2o# l"uS,$~_Tn!0 nenj.H@-xaAEkD"f<({HwD?~ayk] {h \x'&t!BfaGTzTKnpM+ƯuO|"*WKS U$4Ԏ;Y)y>s%6Q2/j5(2g 7:9k{5908(jyO'jg2 dtoֈOsTLh1Fp8Zs`)yE)~[\AƄiAP 8/*S/[Xة#Ic\(+uLUZo;J=|j[c $ ;*Ȧbi/{<ˆߊ6H0jyt9~{2DY}@H[E|(8OQ0$ ᄃ)Q<GWEӽQ |N1‰6n:_hdΪ燹5;:eMTq uߒ@D99(Yg4 I~Z5ts YoI4[}lUeKw -VH}a4tv/SE*x?2/Rq툛nxEνVM`$Mi++VT^L)wqVpO8KIl| < :W֘] J2]b6s,BzJZ}آ LXs[INYztwͧ%Ps0%YKf[Nɟ| wZv@ gW/ڧٙ pUv$lgM%*n5A`qth\ -Iu_a^v[*Ci$HpkpUHlWМnk?%""]j*+RrԿ_gp4wD@GFHqtk>Tyt0,O; H{ы-=z$O3ivzESy}U"Q߱9C"NZ%:v9/~W?jvK~il_OqAcl`Hq(ٵۡܕ>M,:7jx)Vk(yy-O>ټܜ Esd%"ߗ,#42BlT .'l)U⤗s!rKT坒Ā ҭ {T껑8 ,.|quę,vC M&>Ds`ryr^Z!kJ:!5%&I Wa%ze}opQ&K$2{O %LFPǭQe0úwqV.,i+;}Ҋi~֨Yar6WM U85y"[.R3d5fYx!(´ݠ QCE½ףMxk]"=c79sƽlxqF x XCs% F|)NI^b)*`u^Yw ]1臋5:=hʻ6@?j4ӻȝ"4ٿhU5Ogw3&,TnP`&l27b<r6t,:M"jꄧ=颮T7{/Z2#H&.:$*CGwe9k Rx"a ڙ$;%YWBэ%ـ5DR5 :ܞ2pePᆡs0 C:W[ɶ_3rAȯ)TYꃶP(]n}2c110XF5tw"֣{,a_C=hoH@_} CZ'$n[ GBQ>=?ECݮ{~"`7H#)oz/{'QՋ2 | 2IBl;]OŰ 4G;=;sc)>͢9U2߁d'5e}F@G..T0^M4،K7E9]ʈG " _&Q@ⓖv]JM`@"OK$6&e<:"vB-qX" 7]P|w 'I8lfOC>X45LAtg73pkWv>"$ χ%n3;n])g0[ɈV BSn8Bo!M5(#}ۗApߗ3 X# ΛiV#Nx˸c\]Hgl8\?ߩ!6=ΆQ?n.g)m%d6JM paxW +@YUl (MSUOf=,X̛'ͼ2l0$d@HZv55V]< L9نT=?β@*fd#ѷRنQ _[X{Ř8 Ig}` T3)r jI.u8Xj;PO% ɦB6{fۢQe_ad% _b#Z%Atbچc׫$3S }=t*oUV& )<}ԧ͗>_/hN,Bc`q*%ԅwvT^' :ۘ"R.p;~ YK)Rhc 0^ ,QYlHiu|FTfz*^j5#pn_Lyb<-a[\2"Ͽ9\t[CTMG PHU(vF;]Z%5݀de np+&Хp 6Vd`c쌶_Hg >.oehީ;PiE >@F-ZJ8b~F>{868-J{N"$lKC´MykvH=>Ű{  gh/]Ľ=Hb` T';aH]ZϧGE!z_ o'<;˵|g/眯J3ё317ssri@tK&IunQM1%XP/<9s/e~&(zG\7{/ۀ2F7LsyP2JYdȔb-UD|ZAE{J̿Y%|2n p1!Ní 7Rw9F~&c=>],*; V+̄  6pܬ \}/3g3d>'M-ip3vb:fڹj;92'^6r-^P[zbj:r]OQ0E͕X5s>v9&+a`WQT~У쮆Ok~ 5E-JXEOSsˢsGw;&.zl!Lj 0l8ƨHA\ۜX]l*M?$>W\]qj8k"e(iy,K6H<_Ϸ _2d݅$Kܨ*`# =[XcSFqD A5uHO7;vDž4W%o:y*!T4t '/SMaBq@FJo~ p!Ts;D癝*];roncS-^{\36-EXPprQ#?`aah+eﲴlνL yZo&}ZǔpUz%0`IܨQw]!fPf'Zu,+Љwsΐo8knTyyvtY1Rs~ܻ88]FA\@>UdG<[\UI?( AZD>.ŎbE*y@/::iv##9ӊ0}@ZwW 8R-|ys;@= 6Cb!Xc bg X}Yeyg f}MJM-LZ7US?;|I9oJ60̣I'r}lj lVƉ7}yAW- qcHءt;xJjѰml׾ vy-*]NF,=CiSTNQI0bҁ6VaAHΗwЩUk;DRq}8 xpAp@3-e-A.9Ec`y0ntϚo_#p6V)bx; |_ɿrC!A/m@Su6!qd# zULB6N)#3xm>~ vz}A3 7AjB c4Riz0s*vx9|SO132n\_ IiQ …Cb&?rSVK` ŏFy+Ql , ܱY~Xoq 9*3hñ.D ")(S j2hSomM~<cKe) | g{7:P{N"kXO=[WJ.md[ Ҽ-4W_]|W'Suj#_L\lTi<6+VX,c)w-OeƂΜ~;K uqvԒ`P B lMe i?(&.;p\%I#ylP/2s,)QL3wٴ| UFp1iIZYC@oVSǼCŁ vVVqF2IӶ?WQJַZ=+-uIf<y1l1+Ѳ v!$Xis0l%IW_$yxOwM!zadEAy 6Zbj!B:.,]k_4o;w bd~N{:Ft,1`L7t%|i~l|cP^e0pSU0LP![Ra.b Y#ӊ)>u]Pj1)?|*.&\Li]^Æ2<"0z`󒷣`$7<>; Rg i#G}z7bf%h%»iNn@:62r^=ߣ%3lQ\_҇0X-̬dup!=Tml!*,mRO <Õf茦Z7Q^O{KYR1)j;&l4c doy ^Gks[qUS U7 h JP+.-1i^/7Л<NA K{N-\83d6u gg[\W /]lr`gҴ[c1shŽXeM zR\ԜEAX8$x: $qMeȉ?!yȋC@l2K/Hma4;><YGܺƛz+ʡZ0س+f ˘M48e/񔄫mf]ެ$BTņ&{CE3zCuFYvO"E?RWIhK#dɠ2>5.c0q,pa!+,{(~%=_@t4O|-SeD. uݟ8N{iuWRel'NTo?˪RIcaRp/wֹt3F:vE[Yb1;v5m?OFps*>/NqBt~.\0h uJ]ۏ~E(d< buLnKdžh17%?+Jƨ*2YfUǒ7={d<gWA1b ] Wlb? A`r\ )Y=gNV R+kgc[8m<[L;YR ڃq%ɑՁM`2X_SX#ǂb(M'4Nt 8MN^nOxsە%kժ~q="B/eI9֤VHܢ]Z=hL;J{/`žV\8d?h` ~#!կ\]$:l>]1xͻ`e6s?>KaD~qNx@9qOM`A-ag4˷y&H+^TzQР5@5cRJ>@xNp GoX`20,u"]'d8$΁dm:^0rIZ3אJ3#.O!Z|)HYFoa8ɔZ_(h񈐇ܬ݁nsw;H.1@hk&uPXO\t{BB+R5'rDLpgYټyMȤ0֑ Óʵ; ?чҞuMēļ(&ƃ?0#cq˷&mؼTubR1ѡb+kS؂4]L(͂cJ^p/` po7t 9k8Q@ ڻ.3wP/\h]5!3/G}Kt@rlIfuħveΦbo1],"( |@]3L)nɚHj@hD<ܿRB W̙]+㎻_P+KR& @0PU glcDSf4}M*2TÏܭ熲Ӻ:l:()0?&~kM )V;D^uoxRMQ7-?87oT-cUHe^&jLJX0Q,o3ddt'QF#eƿy#u=<]ܢ+&S?9IiND%k4 BNyl~@5 #N0uX'0R2l4 ݻr:ss39knNN p]MMKK-yu=cn:>Zn[wbߒsZ^C}E8O/;scq μ;»;,fz=IB$pb[W ȴ0^3{Wd,>ݼ $O"0ټ9ꜧgn+(w24 ]ǝA nOR4&}R;B;M8I~9&fd=M`vP4Mڂt> L7A. +Je ,BqJj'vi(BHC- xأy1re:9S.|3Ĺ֩CpVVTJ֑¨8Av/$&HW9f1 ] Chug:`F^&x_월ѳZDCHMh^xC lxU.v= _p)p!Va_Mz*Ofg ڸ`kqDBvҕ^Z}tZ]"떑Ws[eRqppx4>rm`L|TScPW]CjJ4y_ -?Iv03f!FtZ)iʋuUl9j0e;+F-j/譞ՕM渰dCktJŴ&׳{|؜_R{ (Sqߒ/nYQ,36ۘv"-/GwqehIƳ3Idb'~M4Pu gѪ=4Uq6Ww2 %nPkPzURu+'A?Ϲc.-w!K-SLjq/>2Q "ES kr"F Ty4@:7CӥrXT s4ֈ&X~ axMqUYQ\[G Y9QP ]%nb}I6ְKU{[8i @b>]wg"x6 tK##GYm6t}p*ҹ@sif~C+/޹He9d,/V"e#dkt, .< Bs}g+m-Yl:85  GD, ;aa [0''z8/nf}M&/ /{vl<1p`{Iǹ``̊O{X0GW&~^#^W`:B`V Q&0͚aA Mnv¡CuG/ _+ OBu) ]opc'5e2 ):\k$zvbhJ9QW^g>L>y٤TTdO)/j&n}TO~9?[=A%*s} ؠu}>YT$N =׷ŧg|ڈ)[6k{::q؄\4M kIqpuҪӔǃA7{ Hlf3WW̱;a:>ixf^oei<.2WYD_['豅9tf\Ij'lmR2 6(k./'slO9&-k{Nm,b.҂5'J,n~Lcn= \یiEzo n_O$LJуr0CIJ2 #2z$8-]N:yKN*1k(" eb$ h&j/M1 1H`=g8"4Ӿl\]JnJ%W.FF>hapUAf3`ޭK'), ӽ}Ku$+oֽgTzLUhIH6Ӫy"Bޒ܉h|?/60eh;mkR ;@Ր gex_N,ҷʕ dm+LNĂ=> ^* 3xUp27qB1L ǣ LzmJ|< PO3j\tB..Ӯa6U&s% Ķ0t@:j w4ʎMC=k!8ʐ\զsYCi>'ht@Exf>3> 1GvVr¢hg-X/srYmsz7"߿R@KbD)NRgt}e{ w(pǒ55M)Vivud>nM1h  ˱/p/xqҹK c*R!TLگ L)i(G8t$} e7~]f2/K IkQ6Z{ Omxm AF>nql<=jƜrdS1`Rmz.6U,LRX,0 iS[~: sD5+~u];Ygo?ck\X3'z~^1($%"*lә6pImdZO+plVC2$w0fX,E4luK|׎ ẃJКۊϐqfOcV@S˥tߧ3O$W-' [I_ )QMZ/Y]We3]W M 嫿[Yz~R:le;Rkv1Z&+WTeAAbqvQ?Nkә$[E,Q; oS8!1W؍C 1$<<ӼHI6@f:.,aIZ(vDwO2!R7@􎉀Z*Q҅[F=@;~v6ki8ƥ)nL/[adzRfѡj_7R3`1bWTP~?qVIx Bm:_ ,9Dźz~O;u,BDj= qPOƣw`k& ɉE]RC${1D \3H)o:7VR*( :o?%W4oSʹʑZEqL;s9Ĉ;dá갉HEXaDTƄuT.ȶ\#@@QTA,D /`U +}^˹@ҴRfU)lx*s'9hlJݵVv/XtFN〚6ihI,[x`y`OMu(,tR*G*tϷ$P`L 뒉g4 -%:!X!c vM%o߽g +H4Qǟl s,N!}w^]" }-:! ؔF*fDoʝ;WT6b rt'r?H $TpgcS ,(ב!!$ulv{r:PN❿D+)49&Ja wMCSl&~sU܀-Rz9p ?)}t8ngf{9 f ݾG4(stMTVw8^n5N]#G"C!{_ Gt}>tI1s}]jY:4OMCy%^i^J9Z%^.}U-3'Ͱo;!GϜȯP?ğmؙӢOA?nU d╀cg84QA ȩoM7 ѲrHN)“|f(:ۏ+?;L-m?pl!ۈ?Sdi6/JT. ?r補0-uts1R`&!mC֒"=5bo&|re/Wi}EŻ[X9L/l0^.?ziӼ+fLgKo ;%Y\^S .51SExnp#b*i!>xhL0'u~:uEKf K+)]RsYA!6CXH^HY oU5Gurw^I'G{U LiHmA5GTG2W ^pVI }\9_+2YC C`"( Բ}K2_PaQCбU>ww-J F;EOTM=ʖL0Zk=VV'j ߮N2C} |5',P@/gzoè5# XR|Zm-iQY+)H^3l]äs`<UaKTo]ߕq aGa}ƺkV3ا9%pb` Ε6fkxcopR劓!yL s s58暾5#LW9J67Po3?90})̭BTRyz_=~hhx "spVZpc3E*>)H=l>j-9#[ W|}pSڟxlHBC&[(gOc0Zo\Me-j3@xצ+Xh6t֠"@y  lu8~Z83lWjmcWs6Ab] +ABH)'mm ݽgPfExc| 1f@>гrmaʨBhoO a?=Wvc(hI@_65{JV!A?_§BWtj(=d߀GF̠_=BVY)< 9ݸX̄(Xz]>7B]C.KǢQYWƂL݄'m28__ #κ(뷐GUJP,co%nڋu1Ժδ9r_+cH1W'So?)4k S(C^2[m~9ޑffj3FQ 7'UkdE\nr` t&') +W!7 0o*UwzYc)E!Xy4ۻ\#M:g YpA`7N;Q@ V _~pcQ[-=0вj5!'$]07g,2o5_B)G_x5BS = i7I9oyJreISu~ʛ41vFiY_|;)Ѝ~"V|C;͑^g'hd.$oP/=߈DN_-Og% pe,TzÑ,~BPqJ:g@ݒG(%,"isv@ EIP-`C\=Yel5sJo{QwZyJ  /PAKt`7yaR.b$۟޲y}Rb 8N!.M?{==0zq19W\m#W FFj7'UQX yoB&Ðvz~5)CYM1@ǵ}*&Kf``L;)(ؒx#\7T.:xjO(V>o2puiZbktr vkhK4D{<;1Ȟ`;ib#y73'dz`j|I#éɱq3FJ(+1?\bj5G]G/wTe\aWˌ7(U7z{V2tGRny uuwȸqK}!mwlT9'dmg)1Z&n긷!Vt;\.}gm1p~h'Ctk*/ w!M=A|#ZvBoPr!sI&F|l= ]h>$rL:ٍ<YB׎i|{4l#K4Zg8޷Gs1g)u8OWCuNk1ڟ֖9oqprw'Wv8%~愺:ϰF2V19?Om8AԷ7&N+)S!{F(V6mG@'):gW~>w.﷕UT*o]g)[KWBtd2cdyaB-ƻK;btXYWUݣ'SX̲JG7?LZ/n!z]g,G/(Xo辟ݽcv6 9|N b:_˴|YHgI)` j`Nf#B+;v(hoa~#3f:K(VZ uB)NqYU5Bq4d'ic %L,uw1M9(\%w@,P |Km8Nqw`:GK^z;P<[Tz\0hЭy*cĿk9< F*f%K)?cȦD6le͔MFՠwh;2@+Ϧe ŖX!Ȳb]dz@88~z󠴑JiCvo-H o%Rr祽KSg;CzE cƓ-A~d(Er#̈R1xOҎ`8CO:Y,_ӶTJdo\;2Hܫ]oyd&V{$7aܮ[*qdB\bKX$S<^bܟ`.tЄU3#:9)PwF n ?#Ư7~4.2v Qt/ %NbhQ 08ĚӋH,׍06~\.Ma]tG>9j?]N%CىBM}T&sE.72>K#3,  j,Oz83Δ>A@/iRf9p>wp lA A myzbiaR =>a=ؒLdcη8?ZޥS+Jf01w"Q* 5r'"iP?zO0|Y%ԙ;Ӹ;YbU4$q ji`Ocn}ȭ`j2A q6$,@f0*-hJFP3$. tg1PIxӂ"y\6ڽ󊌮0n=^{avW:BM,[oSÖeIFn>m?=p{/-ôM !4^GÌKY2y5j?n۞k\DQ6+fyXV+Yo#"Pjbg*-+A[E6G 6n :ˑ(rugYD@QIWth {pm/F bڮȖRSYv8FCc7&Mi9e[TDA]֒AuZ+bd|B&m703V6mGXI7>(^Z<=~ @ۈ{< D/+Dm1Sa34Lf"S{@8"-xEr"\;s87FCB-:HhN5Бb%W] ~E'f%|whht($tOa.?h!YVѸM$M42ѮC`-1qQ>R95zW#>fVsHCts*j[Em\q0ޗ6=buUz=Z̼e$ǽx,,8Б؝˩elZ0Ar+'YŎsegxײޔS|L+Lj6Z)FiCIYDR̦|(i{E;,N:oc J:K^ۄ/1:Ė' J > 1:iUBYzkF^ Q J\3i:&;JPպ:*_M QnY%rM?O BҦ_JmLf \OT_m,d>0l+#5LV>#,)bU[Y ǰ} )"c9[HI]%Vp:1r5D/Vz. -(S#1Eew2Ynځo7SpdR_VCmwo㬢w"[w1lx+L4H*뿧<iXxP 5Q,fC/LI eEH[Eks]quK]j8FY :0RɡrQdiA-%". D]> Q͒υ}9 s*D}l N_a_[urNw .As\eLhQ ew¨(}1K ZQ>ɰ7[aI]Qwuɴ4b=9R!QrN"3qyۛbWQ`ɑR!IYq"F+NmpRv`r{?NB56Fꩫ-Rp >bѧy]博4cdU4i׏>C2Yv\Z+9&T8Hq/xY5ԧirJ/bdm 8vqgҺby;'rps*r"0cP4}*_DQjxkj`0M v{ZAܹ.F4T SyȰ'{[%?``3؋%jO-"r !$W@ב8X`"8hqkۧ{oԿ័uR1~t˱k?*u%tUݻIK(#ػLKbTӂ S>bVBV%ki B5!a2 .:x"Akk$J9.O7Lx@y4̧3t/VVRۭytn$؇NR*Eg[.VxuPɧ#"FDM ͢41ܫ> *=yp`_ľIś nd44`=)o%xjYrg1$LmQI :Bjan}B˚l?tXmtva +cO9l `s'D 6JJDH7xN 9HBZSt.!L*vfƐH.̈́!ç.KuxTҙWg=ARF}l1[YAٽ=ZڷQ*F,G9C $TĀ\٩uEd6rki[Bӎ,h5sn7Jj+PsREн*%nM_^%`ۓE]g>M1"E^`L% +;Fr6lD4Ed>ąIG>JXhmUΓU1LhfYu"2>r=xDv* MXJIqEӞੳޚdjWVG >齆ʉnLG~9ET3\wyג'9߰lC'<߲5*P g%zPi,9SO37T[3LIr`JI=9Oʯӈb#  U6(-,{7S'!7+ܚ[g+."R9ЌMY| ZĢr[!"*.T cmRq/hũip(D(ҥtN >$Y!m`GT}2SEUSOu ZK:<y=EG%lϩvtu]b?";B-cȟEh[YzmXpU:f.v~nȔDM tG:cclͪGǵ|;v LYkAaT -rO*3/~ICѹ 5D݈M8@$^]QG jo%?LqB\D_l{rλ嗈Vʤǘ Jm7,O%8[K,M|_7G2avLgS?9M?w ]m hcY ;990d V&,3cKgI$u`܍l$-D&|n[*[+APpzsjn?*h~`R q9"6,ŊH:DE<0wh/MbՊ_z奵Ɯr!8-' j8vJа*`걣 597/~+8g3njq8ylf ?ě^.=mV-P/^XOe.g ,K~!3iK9pnv+k*i @]Ucag"pKS24".@u?Z(0iEOq&Gbɺl|A=`-z sޚ7 RD fe0ti}JN\S~& {BbdYn8x^0b\O߷jY=;@i(!CK8l_DS As^$*f@ ([F_4D$ =IAEzvD{&K<\t TؔPzXN|?kl24f',/) BM w,]z1{۟qy_Yߑd2d0D=&"gZJ`yS!YuV<תD m_:oU+BO/)x—b34nςceE ۞>#Vk 5 p6I#:yEh;c׭ci1+:E[xIx $QDqNj-Y!ŊZXg>ފ55 ќ.qK}orkB=l5`U^|V=T>43i¸w6X%j'k _2)/@CcV]2|+ϭIk]t;S4] jn˟ѳm; ^ɄI(s!X5xbzusW:ԿSk]Sv,~_qg -czawGu5qQ{BOrF}&dg])YLVh *ՓmG¥j©\PGm3,etr` <P֝&{ BE\ud\mU%4*{,W|a:-`.m[סU7d6"b౴>FǯLp)aط] zmWK ʺTa<5 ʫYIfub)$jN79= D?ٜu/\Kk(<@XNow˓Vg&; 2qZp<>h;k" mRd-V$gKgH1T`_[ Fl8ΝxDqRҫvN6te34YX)33HBσfhd b|JnFw-C$~ܽj@vsT!'l֔yLiR^z{|uf}övqxV; !ٯ1s"1aI` lUkȿ`8 Hjmx1:2Dg؁frbm*i6eWvgV om/YG+5Ը_PZϸMI6Jz/e.2쵾Jb(##,"W-]{|;džyTtP|'pQ~2}wC166l9'jc}D1}\oqWv[ ,"w;gr`TgFrf sǦ5]Oږ+7xpidE$cx?A`uSd`d"t9$V7X|qۜUSlPTLOlI;qN m=uBO}wܝhc2r%ay3u~-NVq < :Ε󋪨zh//{$eq[NQ&5EhK L3 STX8\]LuS^00t'SoiY7SRo+ʕOѨqڹS_!c_YE>b_s!U#=X˭LRHX&Yx+˻Q\狱n!3yӑQdn% qgArBHc}| u' X}` lAO0œ)V ޴H5'r,Ej;Yyey%hf?ÐuDX~iĬZbe=bQsS}p@ځv?t6j)ld6rް S<>+O=(WzxkQd4a>c3L;xeK2p y7.H}~R]>I>n Tڊ%< g;󦻴wǛ k=K (kUmH^? {0B{TA2'!bS]3l$͔94&=9m94:;1H*աGJ+6!gMwr(ԌvSD釯 Tj_(R[afLD8\Qmc Tky'*h`+^ߊrQVmLyͨ jȂ"?} 9ɾ!PeIʀ! XEƖQ5~fJ~c;2C/ߒT#F3k.1A,ʘs )~|(ã h+R&PvUAe8ڎFfƚ_|4=eR F0 +b~Yr'B̀G3cPuS[X7@|f^f_0A jǾgcbc&rC+Y<Gkȁ7)+4`AGQr\ji\> ,-Hf'6yogux%IÖ48fh끛\)TY+KZFT f3rRe9CqZ v6$ ݿ֯zNt6nÑ$"]Ha \f`?y\G?4y'!;5Z|| ݩn%'E2VB>^?BT.#;ӄoOqW+0+=PC[SX 8&b%.ª2c6Щ\@)OtMM_f$gАK F /{[@8 Dr2J"q%n1q%{J[5Ѕ'MI kۄTRI*'ұףyG[J6(S@7< 3ȾmJi24 g++2Oh!48 LE? :}e^(n=vI,A=oe b\tEݛ0ou}Kn i$o!qcS(_<j4RǜvL ępT~'Mtխs F $] V#ׁ2l w/QrfG*EK*xzp.:q (ߡ7~ـf#g_Q93㝺 [ +4,J>:/D3LXzBzujgeanwN ĂeBcrMB3tL b ˻ SGylO{(3-"25L;bqM˄iVL>W4MU4Id%bݒ, fgFQΏ<Rڈu6`ћZy-~ nZ_mFbjpZ`5Lo-̪QkMb0Ioʼ0#(gs|(o1E1R2'\H݆ôN-Be?ӊg|f-(^!f6M;I(Immk _YNszJެ93Xa0-OlN,iRkApm}FVRthqj۵X]}>A1CD|mpS*%'BexZEvoiLzqzX$VX%M^3Z> [Z?? ]j'@X'7_ܖ^}*[r,}7DB#@.t>{SVk wi9G m5_mXtc֔yѝ$dˢ ~״S]d>Bj*)WosqK:sq1 LQ;] ^朄wU>> ^K xvإY hIr䗟Z:X%ooݒz@<߲ҝvw2vz+6V|S3&x [+AhI#|?I,2D#3~cv8(͔` *vd!RhȄCy-5Y$ᣛaDE3-4 xZMXU (>( i0\csb?R8lOv_T0 VU 1Qt0[ȳzesDAbO8+D(!)ZRt@֑AjvV$ bg0Njo䒯zZפǔ\ίJܦ"#*}6۲gEif76km{'Ӕk`71gT瓐FtŐ:F@W9WiPXvV^i7˴b&vb~~O$ە].& k -v,Ԁowa 3U'qtO49'> Uܔ+9Afؒ|IV>h)gfWރ 9&,}ܽfQ\M8!2x`+q⛐8D$ݕ !{߸l/rN[dTBzCbxOKx\jnLj:0[PkZ 9 l ȻC %Y=2:c"Ab238;#!7k%O:Q϶B;I\?-xabRZ*DlUS<}iȖt6b@L ԱgOW\=.v4-LcQ/nZIA5FΠ b_q#ꍏ9<{U0?yw4~oU#bkl,as eA#,MF dԕ*) %h(-b|+bDLvA2 еЎh4 X0A@_kʨ!{q{)%n Zմ/_aVCO.ԑ:\P\}ͬbe \k@8x\NȰƆ:I*ڭ?87QXHk=Ԫ5Ʈ>ϼOvCi$O."-puKtԋɠS\Aa Ɖ‰mgc0}dD|b\~41:418_V-㵶pu]&hБRٕ\:,69u95r--Y "xӥY.-Hƍ6;, gܙ 3nj-拹.9is1Zԩbc}zs I C~K?F޻:kms\R긞Oճ0g9@\>(d#.w{a)"^fPA0?isKLXf?=lyZP! ǡo,/(N? ܧsG̜3 0fhI~DBX>sPȋdvq8F>ʯ]0fWQx[<Ũ_e/cƳ\ntwwқ,󾷴(kxKq\]U/NGgXue%~BjbM@Eru9 ;x`qLcZ'%Sx.g|#: nu*μdV(S>Ŗ gď 0)L^DOfwo{W`Ѫ9۳T}5̜8˒FMqv,Wr Vcc ;`7f*`yD g'J| TDz=9'xd֟+-kmi:{ZYR5B}jLm-Ue]*^.];9C䯿sidx8PY~€Kc Sю!1WsLMy7bw̪: I1 i|~\8SM%̎>U6KQ$uAC}1fb6MWcZNi2rB/O2ڒEG-BOAG?=-RH(!U#Sѻt$? 洺RRs@; 5YX#f U*h6)1\d {m@Z֗S G@>0׹Dw- $'0>Q ΐjmot )55smym(ApK߻Bz&bn(u Et*}(lWJ! Exm[AϞWadc-4 lO:7&()8c -%13݉R̀2kXv#Uȱn[R0,vaE.L (#}@a!ټ D,ٱ$sWn=ЦZ_SWOW3߆rܞY+}a)$,CP?꿼DXzIrH}n1X7Óp _ʫD.BĐRSևdE9@, iΪ+o,אָA#n5dY7TP:he!9  Qtl*0 fqb^b`lXO_%PuKicQ~Xd Sͬa'eQ= {nO {<UhyfLR@ PFW*3qMPN}ic]6Dr$|F_Ύ 3y;Dv a+N5n s ~}Nk"E[,0·o|ل.|>k|_:c `s8G};Wsk!S,-xG 5r]o_?/ʡG&ژIt`A408\LjtP9h$Sك듒޼L`4de^yŶ} >nGZ(elCQtI~VDu6\s0WF.isiB\.`a?&=\g crˡ,{}scMXv@!PÊJfH)50p|#ըSN bA/W(HU{Ys4T<@&99W D)̰2׭/"9m%_eXey(q2oqBAR,>i/,ɵϤ:Ac#*qnØҤ\P5y1*γ]eo/w\:`i6:.衻wD{`1rS&Vm7)ۮ⋁*US`BpKB>[O`025͇op_\y/ O3'7I]hxQ'T~dV@8{5%5{u_5 -23mˠ"[R$Zn#M]W'M]Y6nAӒ !yV2܄✙xS,T У^B*%s ]KVyooj[nTfYzh I~&a#ղ MJp>U|%t3C׀<x0D, hki;tTabu ?'ʮKm( y .F*Ka?y6Ռ$nO~bCcǽ&+#{ގN=+XYI6lIdMY=bњ#F_TG9u kZIzB (Ѱg5+In?JMlF9ޓ}Ԭ0R4SS4#QX8Xv|ʗ.!Ec_)`3Y_oc]8k3jVSO^PY!CM`prZc+}&FM}r~l> 'QaDlƆ3_?3KV%\K <}tQ4TJQ8@~<H!8SE.>DU:ST@kaCUrȤq݉)S[B zlN;CėR6NJ)>\H:4xԠ}& !tmVl笪HE**̢CۆD{OTܛeG .^ъsQ%;T}D .͏j\G}г-J`pmw߸g3NbS$ȩok$D\CMFOZ e$;d`Bnߚ{, **KӍ^n޳]*l$J{j`qۑ|镥ujl(Nd9'f؜wN!$:0E%8f4u-; [~7Pڦz頃#w(*IG t,^8upe;ŗ_fs٫<@ }O>]H!:;"OzA-ӹ[=2~WZlGP*}3rdɞqUmuߨ=E?dT2S>v |&ɶ -M|H>FR0ι7䚬;\/ /Kz7zը]Exg+uMMU+BolTpfjks`]XnUס{naS}>z O^^, H|0۞0$/3jܛ[bKok)3D"7&z*#۴UL0N[J?y9711RaPP LXF!l5x4Rl\{nV9Tʾ ka |F 5 \! jo>X{Śu&ZX5% [j3L:νakѣ`" G5\+)šܢV;R(D/8Ff_E}iڧejr4 {axI'(#b#>:ETw'(# C>*޺KF]gL1rIcNKClJ?jvuNꍣW :˺)8@?v6 I3ŒUB/yaq;y[;w%=)en&߳Mmk>fUP ವzC+%+/"yMZ´<L.=|?%),|cr5/W*g5-ψʋ  OX$Y{P@#O|I'X5s5sOuCގX&[xt4Guh)@}M@}7f)/ͮ~^7MSruu\Virz77!(sI:#2qm:󎀸E7[:w'GVf+p!߻3ɔ5[h4EnJ]3"]]LN@}Ǒ٠=%'ma;ےP[vPۋ?rA8h ߧC{j|xHftn}rE&Z"^:M=~p.PW5U|Ѻ2pWlU-ƁBԼQ&~gVlƁ|{Z}qCrz8I™ C p"?J*='L[GVC ^v F1O 3u{IrL;6|NUZhe5G[En;׾g)uzbsLlRnbו ЈܡO)_ҤS7$fr|A#+EمpQ -3x~X~:&ҒysH@iLf+DE߯Ǹu?*`:{ Q_dXHCwxkMĪLv` ZVwtElO?9crIDW^&c;E>(\n|^E5# bD]uT4B4dVßhzJoݹṠIb3፜ E69}Tkӹ /!BW)VfJ1J)4XhdP=Րd{,Z0тdx;lu ݮfSɑX_3uUN i @`].]޸Y,|֌z9W߼/jV 3ƗFaG2 %×^ uﻶ2$%\N=>2eJO ~H>䥡ryYɻVm(pP ҷhʺBNĨd1T9É3Dl=/ 5ZZpzPh`@Ve.3?! OogDrBw*Q#pBIe< ("㼬p2M#x&@Fh'ԫ=V|DǽҘ uy?M0te2VE8kԷsD]pR%ŗB-h ׶Xw*+!FChi8cBV+*p?V.1CQT a%RͧGwt#Ce&#b/Ƌq>95Sg^] v?՞Z.$c'lB,g#kI&fɱ*5,n;rGxXb&;H#MaD!`8>V8P/S~m LVm* <sPhp@,dA|c(2Y9ߞ4M\0/j{rDqgD|96%樗 |'.{[~Ei7!ٻًo ܃颦QkZZs nԣ#٫N)oA68eqg?x%ư.0F$IySj4>_@>꘾^GO)b/2[m> ®<2pbv:*rr+5 xS6I}eWC^]$,엫Pl8[Oi}*ވBR7+N^nW;*|E'6]W; "*̱lt Ӫ%W&n>MSB+O0P ZX`-L{{-^k9A癥+Ln.WkXU %CWh ^ n1@qcJ--8:te;4Ig}S1 r)|OpI鬴W͹3%] PCl0 3`"8Qt:8YNI~oenH$W=| O4XCQ^>RC M4M J25 860c)FW9 qDԻr#UTsI9V!$ ou5;47w5*}:ws.Xf/㇁ q-"]`TwANp;$%rՈ-+ə'd`^n?i e!k`Q:"/.cփ lB)B蓭ğ֦476dr8z\ݖqsfPG iNl<[T,-H$5c-z4B$En!]MΗpט߄"*ajb#a&Ym]v!¼*z͉ث5; "Zދ lf;h8~'G} /Ս|8ȅ'EM}'}ؒ…jzaň g t &U^)LTl$76_/U #Ssol~ %W&StY2hoN ă4Ld=/ꈻ+aS 3D[mt£[T]:.z6~Wgosa{>F* Rait\ƝFCk1.=`kFqh3{IJgj %ti)ԁ1srP e B-Dg MR1èSoRڀ3F -om,p9|ׯtO|#u|faG)ϡ$XX TF>y2W. і,;`g "s$,\.=mSeCa(Hḣ먓nPVS .HHdǦt.tj7f{Nfn VT h Y1X0C*m kP֤ @>hSw@X0$iRr^yނ@o mDb<ZfLΙanDMk(sv^ pJ9M(iWcD>8\`q e$vdR4$u'Pa7}} ϧrK+6fYzl _o'309Uυ[8ГByՍ {$d1`ȱƗ$bj!*#/R-^NA2XX܍S`ɸ {R7Qߨ]]م3PX F9vm@" c;D/Nc}Q4JvBEUq -4Bjg#Xf eyhd՟D-svDǜgP4]s#*v綠ZWȥ"̶ΖE/|6CQGbY M>gW[Ɲ-ʴ5Cd&+u~ @-)9>-hW82xAe5.`8+B[r`{B0d`{L>ӶХ =uId0fܔ1;}J=!ĶxNcu9G3hJCyWx KLtq]ϱQvJ]5|;jtK68zq|#qi<p6gp~+(!Z z.raԚTM())==zu!@zg $y-F/ci3Q7H9+ɶ\H oƬO*HG֭Rl]aiН=WU:v^qI󙈿…[% FUy;bW0JA.3C녑F0 X(.mHtwv}3GCk |T,x*ߕ4Npv#PWFnY ,l ͧJ-K&aV5eCmo41A OYl#_V0L4T1fݘA)""}}im4ӎ{U LJ'YI('Ff6| 5ZrĿ7TJeANBhج?]"C2st3 |chC_e Cm͸asaxvxS3,ۊXJz?y>HzJ@ πHv^҈۠縎?#3\$ z`N&<KAW^=kP2ţS_rfo(c$WtSz[;+0THpKx v +QAV{~,GJ_&B:ut#j{sݦR/㕙T+~؞mmc ;3~ׂc)4Yg^;$,1UAXkԋИ.)c-m" ,)kdJ2)zpIt*Kb 0V&h  /Ùm" jGa` "\RߙV[Q|Z57?ޞPr QUR4{>$VbC HhoqvnZiI٩m dnN!@\u2O,$/I<T!#QRw|,j n9:?^GA co{pOJ ̣iK]A@Eɔ6tm^N YQa3B2CZ>ےX]Rkhuɒ&+x<K!X)%mlRVBZIIC%)Ϫ{e։:ۓi77 2L ˮuIq"W83)WX{.FF"3ե,.8}$v1gs@\&2Dd$ڿ G-biD;-v~9- -z=zz07ǡɩEdaK4 ڃ<rćnq?NeY@w<ҹJ-p)g hȠ(zXD?UhY>VS$Rp'G W j;cDuf腜{nȳiʈ(,Ӏi&P|ad/cRߨbu]Ju]t.xA #cVyoq.꒔Dh}[y{:t ln+ m2dح?fj˘3+B"i8MSPm/no!]A PkX{lݿ#EE)rWm^GG eع68X_g/C*ZMs1Px&%^G:#-3bUN"q+JXyF7tZkz>ժ=&M3=4[_CP#yFв]XUC-;Z<^]3A4 Ia*bQK`4_gRCX%?k[3A_X"6W45(Ul&"p` ْ_nTLd cy߄}:/&nkBX5ð\ %:6/WXĽl^mI`0WhM "cɏhՐ15{vGP=boh€mԩMv<-aM {9{;čS˾4MT텨-即 5t*CiOVE`vW9>9 vXq*lK= u0QԮ1h {Ue)^CEGaSd)1Βa ZkBܸ^nF$zw/YCebϪO} nzC%M-Z.$H{=ae$3 RNap_` M??!*;qLD -t{g2`\KC}+]q$=V&j9%*[U#QAi)s 84u-;3aFJ$}4l@cW٫W6>. m^61Zb ^]V_Nd%CON :J;<7#$N_^TN"zc{vc;ңzQWQfT X0;tKQ[K?Y?:*>#XoyajWaDbХ֤f3);>YU2 ik\ 3[K:/fw1,c+Ę8<57P N_13rT,K8IFta[ %,%;Xzy7)^'X' 㬔Pv,VS3B d"(:W:+ s)2~,?h,^bV: ӕ/͹θf*PJ^"܃[t, z5E}%a2PX1;;Pnn/) VRc}5&J]G_ʁ^OUk!OR]+7)MhuJ8 mb 5Ηz+"V&pQH7ڛ$de++0=d Skkh{ۘծ$Yh \&ʏAiN H'm Oο.^@un ]w.O}E 1L^Ɖ?u6V`FOӚ6g&ю|y!5/ٸ% n4\=Et9(m8zBߔp5W9{㩈#B[fSj/{,zf8J2g?X mrf]]4FjH#w /{J `޷iHgVyK97f#LAk^*,gJ.YIfȄ&5~6R-FUl\4均#\pBȉR8XQ5ޮ>_>iS(<Zjj=EzQa^aM7[3jbnc}P=@j?[ <*\Bʙ4c@q&`kvcLak3R0e s%G_l#HuW܍l|yz ihWU)"nΒHcڏÀCuotOu_N)bI:l Ha:AKd+[}X.M,[2X8pZ\;Z+zn^Q5Q-#^։rI Tm%?<}>Bo\=CI<"H%٨ޞ9F!:u" gGEgxBm9SA[ @^fFf AA[eJ >h4wac EGK:hF:S+?iRXҏErH@dQ0KU };R$dT-4(|3{XJGB/&HF7~sX,"16@I|L\!ZDW3M^$Y*ݱz2"m }bâ&e^ -9  PpH0En>6GkKU"xbݥx:n> 9SČK:ѭChGlps4HVfzy*d6_: |]x/?h xjs$;uqR4fR*v:<få d[:0F'63E)iE3CD]b!~ y̅S{ t0z"}2;ZyA%Kkv;/a@dh(~BDqVN|= y:0nBF6Q̦ F2]鶺~y}]sGNLXѐ ԓ)x'Or׎&@h\Q+itز<2 ɱܷx9-p_`F+ A#|2^0Q@m~*w݉je{ߤ#b8ϕA&IG`oڐw7qf܈./m]uv ŴV<j%.s).Q L{΄Oq{Nr;2`ť"Kiy~xZ#?$Myv'oʙdk]̭/as a**yOÙ^Y?@@Q#6TNAm~- rތ=]W6j# .ĤfWf{:' twA\:vyAc'g3SeۍX:r (DЕ,ߚ82@o"i6[ 95D9x"-c~F<KK7`-VǍ>/G 4/TOؖQ ЋG!F{) :Mjp1ZmEd$#d6_GIk/@gZ3p/ t_,.E1==$[vSi1MRi0$@BՀiM-!M+z%Ks}o h?X<|r>\%ՆUy &a/RѸwS䉀lB#ą nG L6ʺ G<اFi$zy_tc^J!('Qwj`֮VY. A"P0UZ{/mOd^WBbC[>©}c{0v(;.xOB⬸$lNto~Vt.2>yB IM|]gXQ4Ǜ.ze`9ln bTuVE8VVl,5Vx4(ZhڹPJâc <4 l yY %1Kz4µCv'{l%`NjSڎT.hp lH~E`|0E T`Gf 6| sL{kwJm)LS*(Vb.E@]kW~ \g1U_M!4 :- gRϜ_y_Urb f{O`V}7<쯸x?Oh,E6j|Yf5A^f4l,HDshv.U~5E05+ʂh1}o8̆ג5bډ.18 J?&]&'F p0?Ix;x˞_~گp_yW_1s+ M5 ;F%֛v}N(VCMxa%v@2"19<#;V' D/]}.d+e0"a1Ob6T 2UiΧ %C!08j b|za8 '%N2@- @ _d Y͝%<+H%ԃ{hi+춗??B0I~ٜ!S-W䲈6p RW|#=@JZ;dsr6czrbB""$ Bs/; %Pޔ&o⣡$2C>:6!UId4 :uZ Dc1IoFbA p].ऊ9;KlUEW7l1QNopZ򂮐 +3ai ؽ>qM=]q#n{&dd "R"zWRIVrn%~3S[w}]%i0 Ҙ-5g?;&4q]"α" "ƌ >V=_L\i6Rr(r2 n]ƒ90^yԪ (2 /M@I+򩎈w@3{FYLt/^ E2OQmbd 7O4?:F665 Π..@:Hc]-ߜ9OBFڢ$k : q7zHֵUM5ֲ,:m'Xy˟wÀ%i>'$}{bkϨ <5uku!OX3y5Ƿ{r F>&qKtuQXK${$ &*K3b6p" AgA.nV\oYdv9^B{o}W̓cf Q 1 -tޭÁ1//7畢M(6̾g# Y7PCQ]Y`÷>F ]Kh 'n:НӔJY4]4&٪RaZkǃR 7(hs*G+NCKFFk{5/ivjEVp9[8@# K\tileV7oF@Z(#Gy FڐrQ+b~q937IQ..3;b}ᓼ9?kA0aosbz/yK7 Tw˜5<0KYqW+gn 13 Oxnyܔ q@I0##fԤ^ kpѻ,R|E+L5WDP߶Aijo(L'(M1T?hxFߛm 7٢ Q:% HUTU v7f{ox*ΉDOf'OŌS-?mkJ? !bH}v(+ۧgmHu6 1"{~hS;@!6,8qb/m5MSΑFe%)lnju+a1H051Ha$Wvd<+w*ii_ᘾby 7WKn_CLɲ(2C;rC $eipHjK\ -A4'0s]՝|+;2CCNDwp 0sgw=;\?Ea5.v7WFeZBDQ{9 m2ahim.$HtDj҆BѶ,MĂ nh>r-0k } 43ښx Ihy|c.ߡR5p IW-MdT[?HM VPRTv^ȶ`z7jhrϒq`Ll` f.]-B?/~-g4O;•(W:BU4F>g^)?-N!oLAlnok#IdkJ~+b|Q^tkU MG#kLz@`Y8\\5^N^bo܉;;*Hrl牘`S|L;q.̿P!EbVGL _!Z&nXcOF 4zRB4Lة,fM)v)&O%[ԑUֆ8 #'ƢA=r՜kѥ AAN;ysFlߥXiۢj9 zzcxzր Y=V}K={ ll tz%ڼrZx]zN^PhuH9#%b@m ~䰲 9n ̧,t$h[Zoe{4F} OoUC#G!FYf8d$0 g>Mn PUt>o&T<uf#Z'}LwmR4tnFL{Dfsq(r\#6@RK2Ej+Շ(y {>!Ⱦt(7GIl2@(N|Wtc%3Эs E=|p8MS+EC9lf=(1,Mη}_|*l_:fL{If!Ȭ3nnnTAuzS6/>0 WuB֭.!2ݗ<7ukzH97{/g<&/[zXSls *ߟ3<jc֟vn=4[*>ɛȫh:@ƱΧ'a6"B5PV|c)ML/Xr!Gz0>I~!1W?ʶGDz :Qu*pl+{#y;PAәki8-~򂙵d2#YpCߗXpܛڵvir~uR˼pjV&XCz- S,[.ҡ̳$g}{/' ΝJ O/Tn^bv;+A/1ntR=@:SYM~bjֿ'4XrNT̒64zBXOH4&PJ* (5g[s|߄Ae9BNz@~g$IZf!@/Ǎ\R?u^bA#CXܗ7?6$N(iaxZ1b|yFFՇTpT%,bIl]bZNA-C$' ]J ^XQ:"5Uc:N/\S*]ɗ͕T om:KhN ] JJaFXET yPsP H钩"!Dc m}-9{,樣+?O@Yia5XQ<3}ϻj"N|NT }ƥXi3630TeRQcƃ0 0*xA{G7a|bȼWF,ԗ>ص__ɿ 9f?b :]*WMϊ^U+Q,-+)0HɫK%(6_8r&Ժ^Zh V%^J,ɁYY蜈Uʃf|ؼij!8¹* A0|⧭pQҙ"=ps>)!ubYH,'vUpFPƺWA{Æpyk  63WrB%wJ`8V?fԀĪ.-% E049M "].Yi?Pգ) s~Jc3E9+)lBn!A \-{0.h&~҉;>SJZ?4Pǟ񱔵%XM6XALC9kAp(hu01̧538pDur1piaaKSm~ &սN["W| &~eu^uFKP"-2ñg J{jFOiA3iOO1ě[ـGmTwi/r0ӡ]X~Pkوk`b)5]gߍ}')yGgzIG{)HW^yK t^fmnWfmThl3] |^h%Ű;X_\>DKO)Gπ/ƽ۲:87JGZugge$[n4F%3}ޙru)[FK-0;K.lHZbCږ!BMJw%v_2aUSC*!1aSN}-dRKay~&]@AƄ6J?.m+F麨% *y?F+SP ˙6n CBq{n8Ox*wp|ZRȣ+82g f1E jeoB9!R'4`1L7ST@]kWlў}Z`մE,ř䕏~씃[@,RI&HLX0+6t)k vq]TG,1{q=]]-8gWlu"<{@t~G5t(&ijD*C)vJ4`pJY5C^SPHμ ;JF$ $߃i@{>=Q$~+) .NFIiQ: hݧ#V)^J9#TҌ&+b^j2=G'-Di 9 /`J䀸kLcyiCmd$r qo~M?q 5q^&E5zƺoڂ^hRzklߩ?pߏ tݡ/rw]޹s'r=eDPwпIQ`xnVܵ1NСHz1%MQ,D XCT<^*̤P ?εCcpiFu0[QYmr&vb;YB;q/In-AOsoIR^UNnbj6Hq(Z(Ĝl,aS {b|>Mֽ(+(*w,X^ (~δLQBG aOex0'=ը{y3|yG ^Q%J|wZ'deBR8 l"3~Ѹ)qDFTj< ^(pxf/Iӭ8WkXb=s+&ÃgSg&pAO?9C0%ϴ2m/vhCKXUUN+hygsOڍQ/F(m:cvM7Dھ.;"OC0H0xSpU ey^'WAԠx2b1n9:Ս(SgS`|J.!kck@xJ=eEk{7X,*Yh2 `QB-\Ci ѥ:vo%oPd+[M\b֤c.]о) !m? C4=İd'&_tP[wFi0LS@.K~M טO?6h|F\eD6 *jmF>q- (pJSST)Zy|q2Z{'_Cb+qa_sEA |,fKn!R8Dm.] ]v12:˽r~̬y[ɹ$P4eF}KdRy/YnE6뗔"nu!(HkzVطKfXj)VxS/YBA:ua渭 P9Ƥ: d(%Iʹ`O"_ը@$msb:ZF9U XPX8̇11f :8d g\Du57'ߠ@Rz%>dpLM`&.Մ '3.]cDa?RLS% .ek/E]dh(Kjd4.RKJr JmxO>>~iRX3ьGT!և[Ƕ32F)n.>6Qp'$hߟ捞U_do=;'Njg ьa|kD,{+ hz<,F,ʖt%4ys@|D&pGv@58 =lk.P})}r[V-/bmMm6- 5"^_D׻o [""lc|s"Y*GxŪ6g7cxUjtb,̆)>Z[ኧs)3ZtZ١L \iHg?xFFǠc{q{ϯT~!ED̃D fe1-GT1z0<̖F5fuC_Ppf#e`#UUqy5#l09s` Eq>U ]JkZ&RPQZWI93x뵳1G[ej [5b2^6׬*pi*N45Uv6G+|6 r,iD AWsV>us?ƺ75P8 M\ m.u=͚m o6Oa% O7[&eq$]`ilÂE-K\֦5x| okfތnZ0iIn}渧8>;5Ի_Twf:x &3MӖFͣT:ASEpbic췳LczpEV"F㵻f@ <5xbl2%vø3(}o Muy}g` L.2^o;5tG`a_Sr<$?M i1mGKh8Յh8qH$f}Bd; h;' i-/f59$KdTrDOZ/86-C#gR =s[&v18 (dl(kcC[f;, BVc'f#<[ɫ<9P`^Ąf"(>EcRPv+zg`uh)%tC ,M=g>fw\EjE'<J F3`L.V?fZ2!xO&؎V.oFdRQH _@ `rf(.710 I.a׬E~Rܓ+- 'Q=fe{nQ.L5GJѴe)ި3mWK8Q)eŦ!Z.&HQC·"YZ^&e<]3TFYQ9gР'A D-Fs0|WK/צ I<@._NLku+A ; 9\0C՛2+r]*cٳ48 F%[^tK5.0/Ԡ1C+"M ۚ6;Π2K|kD MR0yaDMGY-ad<*PPӦe@}khpesw0,dSVt &=ufB5 v ԹɩQB)>(h>?&4W5i@ v)ܒڰRBpAKd#T qD V ~: XG['q]6CC. \ /㰹8Y۶P%=ݺS 8Τdd*z!Ht>KsGc=pN)5q%# *@("j^m[]{/*Ա\3dDY? LO3byqX52=9'.<Ʌ T%xNK|&b^,>´q"{-gKP;td?&~oL֦V 9{5Ί1m"&rY !72#㬊)w $]ٲpF㌟?x/zaT:?pqa^JLE9HO߂=Фmpl}j bl1per=eIv ;z4w4zx=!.Eo㜱F7>׆ ۛi*}v' Foh KTh4߮0W'R G}`Nꓧ[U<柡$@ACεKQd7iʄed` s d@ÎtS0Жfoxv*:V9$\yM[U_j{mgBS}ҲJ TŻW|g.@s)lNF'b S8KzF p,ak=i-*ɊzS50*ACaյIfqQ 4MT>OM-Vz*9θ!.e8&"[t= (rh4gx$ nnIŊD9B^&K9ǖM޲ء`qD|yER6H7GgfSFcqI0"lWz]A™[C⌶JmVaJ[S:WA(^ ǡ>3sJV):*"#*YwˇF65 {^Noٹ6  ,ҋv5}^{,8@`&0`-O&$i g$[|H@ 3|ʻA鎝Ci"3(Tп\nZx(,m{23uki|?B9okZ.篍y?ea"k+:* 뾿O B=65OZ:0m1jDG^ 7U);3,t /\ON1dݿVȗ ZEs6= ǵ]"5(/ ח@ nBYo;3Cy]Tnyk! |؜q%@@ܠV ^`Lݜh>AJɶGɚG4e#dh."w:NPR,9jcMJI;3#cqdn>PI۞x:W)ncmDl?.`wwT .17LDj88D#CE%8xF0jZ&٪N{vQvf建Zp͑+x/9-%DY:.@7IBt>;(50OB퐌Kly!S璫,[GN, v Cr)T1+;Pȿ}{NG3i@ MX @*.#pqNh#)DEy 1>j$pOrN'{-RYc$a`Q(m$zA:+Q&+ah但 jP;B i_.q6$=JR:ێtvCZ,}op3i҆jah`Kz89˴QUT$YbůEWeV‘0E7T**]TFFcU󂻋Fd*t5u;RY[྅8fyTB: |w%jgyqX3g?OEA:>jT㟖BUCzTYS,_OF3SY:^)Yx1ʉ5EfU*`v+ $ĸ\iVr[<@{eQ.3/Q>&B̅[gR`gRPQr/ ;J:<s/ SS>aHFQ}:R&c?y#9ȓ3pÀo9ņh8)v=kA>2<}toTx%PZ' \)'(LMGS&~؃0'HL2 9ݏSOf+rnĺP"0j>"Dp4k%1P^lp*LABx0ito(-mM$/11湪A?C4#|j‚eeS' :MD`U^oߑ1ld`'{>R"LX,Ja.%e 3 uC-7egplv\&r 6lP;x !$F⯮ PZǰU@J=x~i vg-RVm5k_f#+ 4C~Wns}R4N 8~ xy/!*MNС./5~5DPY ̣J·zXB5[_grOb!RCٕeXSߎ1x]1Y7@ɐcWw= *߇K!(4u R9*0FQ Vߋ^k5R6MM]d}CSN&&O[^6nx~IR zJ@Bgݸ\0cP6#\j#hNCnUꔧJI' L6}x\G*xƌcS9R레ͭIM" /S^NZK|M$kY375ؚ+R WRPC0hpp@q 7vo"g&%o JCac;l {j TE*BÚ@Bc|!'a_]LSXWUTӖLLHP :fxǧIOˑvM_?AdgPQFu" ^LJ Z\x^]Q f86r[:e`I%퍝5B/u tZ Xde{%8 ^2i|u|g fɇs:'o]!R֞G"DWW%>wqr#==ȹ_Vf u^>Ȗ/gٵ G 9gq$A vuo38gzf{ҙA^q>ֲWlS ŰLERˏMP3ޓ]mJR iSE!Kz7|k [è ӓcG1yJFq'@E[t7 j"4ڳRahBl!.<B7&PBPSiv޿SVIREĕ4QQVƤQgI0@2~ )<\q+n!$)=}&[7Goqts 79 C/~l9kyq{&ȔSaD_EAIodT>%DfN&#lۛnvYioY.--usB^h V#"He +YlM-&AΡP;R VA-S#vWƤ{uSy w 9O| }P V7.<2+Ka[ΊꂛWYHj⌝sx**A@YR`d!}X^Sump<qq܊틥S]53W9:lhv&rKh[,fTu3֧W6wOSԊ~ө/l%}˕Fy^tJGy3`vu :p0_\ y$3ES`bR'm4pه)ImG 3(>RcSXoUo>;qbU찄xpA%g{dhM/QFO.E.ԚW.T?VEA#CFD8j5C2@>+Ϧ|XKk3a=p?\-~BV83١Q }Gɡ@Zfߛ>\E6Tׅ7gXIb&r92݊~1$ {ܘ7>6E[ej6^|l7:T`<+^dL*HA N^ Xd9Zdl4Xk>4s_u6."Y)b`{AvOP|84R[4XK^s94Uﲪq߃m s6 -yŸ# /u7Z'rb)E˼l J^L@ž-}gMYѰx.M ;jҵ_ˡj/Qz4k`?^ۊuSA% م ~<24O VE6bX  "GGop=Ռ_Hknn>+ܫ´gMA6 qBXެ6K m_I``GT X`K,M'ا'm7^_bl^&s0'>G$aĊ|qrȥ#  󲡎hUdqPr2OkLRu_P F0YJ=:H_(][UeoD.B7:[6"¹W&d &3RPF\iLcM.EM|@U#Yv{m0|pBKizoq{ehȡzTWԪׂjO?߮Jlgn2 "sXdqT*6䡖W BP\oᔇPz`-7.ԉ0 !da̱Q `"2$5S '9] !A^>p=Bԛh)Ǡ2@7(ڤ$ZJn:6Y߄PuaΜ'7`E!Ҽ:Y L!j`PA=[L:N:^|*8fb"PD^6"$-;gWN3 PJ@8l Pf)q(zV绽9EPxs5bn8.Kt.J->T6j+RB M,ڽ*qg[L*MO6:@rɃcՀ`-^L{Q2LGJEX tJ)wz*0o,l" GT-j;3pz5n]( S[FLJ^Do&x?ǀXޓ$I9tfQAX_$㜆Lcs)l Eb*4YS8JAP#8Yg5K/h(=cB}pk=RZ5yUA{I _]%isMHKVW>N6&e.X'2!n Lg4f lVȐq *ʺʏIFkش}mSNzw yP-a+:e*"n96Hl3|"y2c8!*( "fܦ)|9A˄g]iߊuJKn 0.BAlʈ@S۱[ 0G)@ODR*Dm9ޡFxy']+͏ZݶV1&ZGWq )ɋH6S:RaLOF~Q"uEy tYh^F kSaecap Nv=f{6:&%"iҝOO73~3NO ʚz9Wz9 QlvF|ohJDwTXwO@;Tg?ʊkb u @(֙5&`@N3 =qT]x*w2FG.%zmϚ,2%]NǎPT)TC(ӣc #](-EznMpw7\򡯛|]Ub7ˑ`pr2h0$'T"A&~y:׍vفKMGzbǸE7EU( jH)oB_ysOծ Hmj(?}iЍWk$k,>SsiEAmmZv[90ȏy'=e"v6^sNP&b6rSm0%#͎'ﱱS.aE)%/(N6>GZf[͐sT0%ƹ"~^kAҷ ! `RgCe:Ͷ-ҡSFY&NwTQgV9vZנϞ_|fam6M!bX!T VVHB\6>29+Ras ^R~Ĉ> ?LM gɌzeKԉ;q/]J_{z7hW&R$G7nkE [V8 ^ TZb`W~V)@rܫCW> HHu2+_X!U#XSG~3zAю"jpmd}2Xr1nlӋݨ<#H]á)YfQ!B0Y1 N5XiF66 Pwv\fTb$3;BɆ{$3|T&bZ\ǘnjF{#V#RG{1i`Be$;d)O,@#ƦB/-C2Vd { o!\eF*>b[˟{}}v< [1TĻI882Qvx,%>Dz'q6_&CLb*an 9l 8KITg"8lθ\J gt`8r墬CEyϛ\R'L!2WohX|ݫkk n YwsZr)uyv mUp)U*zU/"#n]ۅOtf$]!T?ęcƙ9;/Ad 񽱎Œ0^tMCrYRւ%Ϊ "{ 3ewE}l 'FW8V QxhXr R~Y''_Xum !f,#m:SۘǍWlQ1{πҤ,_ ![@lomM. %/ kNqH0ئ#s#m,&phH~aXp,S PB|>Kk %BgS҆$532M,Jcz?=:- R-25(VXUJtUB+P}YXa6YQg"S12_]|S+wZ ?7ybEqU- Z#jsT3O{e^Qi`<=d.XcTޟRoAq OSyq9'Nv% QuHPO%vߣ%OXq.yINI2H s{s;H&D\3vQ^QMYn畋mCP3bVI6t?ٺ2ccIl&#.WɗsO5Ep*WZ.I*>EKu Mh~iҥ{K#aFRGθ F_Eab?5~C/*I/C9f`B0ZY%/_YtbFw;j':2,[9UlCS RTl& 0(6Ҩ%%0lLg/psQ6iKompjƒ-/( }qKET7}O.YBmJr˔6dL. o(eW3 >teaU/{+l}rgҊs7$ku40tfoN>UXqbz9xu$gʐA )ŚX~e紏BVCS#j+h)u0 aʎ3?>^q"zo:Z='&sa Yވ&> W! g@ͫ%#k]Vњ {u]Z@:NY[}+X| #B7S4x*\qi*jC9PA[ )9oJo!1Av?J1pkذq.R}^x|IpZ0f+j݁Oeͫ(W-BG$+=dRMp+~27F˸@J(?7x&);7 $׬Y̹m1A|g®^-sޙQwui9"Bta_P9@":7)3EC'/RicŅ_YRKԴ۽-zٸ ޙFh>8?Z4K]dD+)kd)ըZF`|ztb |ne90t6cXz4^ /T&PuoNck(sBKE"]\D D2ҝ]̐+-:"O/R0>&aq"oїzq7o=wЍBMR-/ *KVtAKrbэfWUDzC0_|ڭȑڢm[0x1Ifd 2%dXU.1_\(ꇭzҁγ<;Tz"f>WJ !דւ*\ۘJcMqB ~k9\s @N5s~Ŗ2B|V~槵:EnyS ̄̂&>S50v-Kc珻>WXAQng|Q(P˛ 4QW.jV'I"uKY@+μx-X2xzMiR#dž,Uǐ޵{ҡ‰rRkyJW`}OhQBIV׏S#7{$9mZyB|M|H ͿM moSXQW4=7ݽ;aΜ5a᚛ Xt*ΒFTxZ}(Zߨܹz?2f3EGvok (qo ~~T'Xρ/B#k+~3 &n|h>UN˩9m9x*xgkW5E480t%L#Г>lcy"ضO ; η½K;p"cO]f!}w9vI)'l2=k$,O3W٦TwtۉP|>IrKb? p]* xy͑i>)@^oDxGd![\\ߑ:5+^3$T.+WUF*~;GlEtR'FyO?h-O47g|L]GghYDgݩ#8kKqܕM·Pq1TiR n愎LXAx򢭸zw:\I)g[3۷]CT@Kk~PPYƚ)S]dx1:rm\/V.pXN*-]@k_։\NQOe\?~ǁXU}M:8a|!}4U?Ӈ!Ō#:B5ovg2.i@-,x$mdЭyXrKquq|DSU_'AOҟ*@lTjO2ČoZ}fH{}:^ *%w), eV TT^ %IVC:{H 'S:g0yR!l׋\ʇbBA cL5\X'fj;K;sBڢ-Shmq1m{JQ# Cm9Mnm) `iӌ4AC7Dnr\ҷb ˎi9Ц eum@Zr45{e~s#/MjDw^k IHe DžW땫|){%65Mem(QnE jt 'V$T YZ