From 3390f84283dd7a3ea4a2b0cb94867e63b26b1a19 Mon Sep 17 00:00:00 2001 From: Rene Engelhard Date: Sun, 28 Aug 2022 18:22:27 +0100 Subject: [PATCH] Import libreoffice_7.0.4-4+deb11u3.debian.tar.xz [dgit import tarball libreoffice 1:7.0.4-4+deb11u3 libreoffice_7.0.4-4+deb11u3.debian.tar.xz] --- debian/README | 83 + debian/README.Debian | 307 ++ debian/README.Debian-source | 82 + debian/README.qa | 59 + debian/branding/progress.conf | 1 + debian/bug-presubj | 60 + debian/changelog | Bin 0 -> 632531 bytes debian/control | Bin 0 -> 219794 bytes debian/control.evolution.in | 17 + debian/control.firebird.in | 12 + debian/control.fonts.in | 13 + debian/control.gtk3.in | 49 + debian/control.help.in | 17 + debian/control.in | 935 ++++ debian/control.kf5.in | 17 + debian/control.lang.in | 29 + debian/control.librelogo.in | 22 + debian/control.lokit.in | 16 + debian/control.mediawiki.in | 18 + debian/control.nlpsolver.in | 14 + debian/control.plasma.in | 13 + debian/control.postgresql.in | 17 + debian/control.qt5.in | 14 + debian/control.reportbuilder.in | 55 + debian/control.sdk.in | 70 + debian/control.test-packages.in | 18 + debian/control.transitionals.in | 36 + debian/control.ure.in | 199 + debian/copyright | 293 ++ debian/gir1.2-lokdocview-0.1.maintscript | 1 + debian/libjuh-java.lintian-overrides | 1 + debian/libjuh-java.poms | 28 + debian/libjurt-java.lintian-overrides | 1 + debian/libjurt-java.poms | 28 + debian/liblibreoffice-java.poms | 28 + debian/liblibreofficekitgtk.links | 1 + debian/liblibreofficekitgtk.maintscript | 1 + debian/libofficebean-java.poms | 28 + ...fice-avmedia-backend-gstreamer.maintscript | 1 + debian/libreoffice-base-core.maintscript | 1 + debian/libreoffice-base-drivers.NEWS | 14 + debian/libreoffice-base-drivers.maintscript | 1 + debian/libreoffice-base-nogui.bug-control | 2 + debian/libreoffice-base-nogui.mime | 11 + debian/libreoffice-base-nogui.ucf | 1 + debian/libreoffice-base.NEWS | 14 + debian/libreoffice-base.bug-control | 2 + debian/libreoffice-base.lintian-overrides | 1 + debian/libreoffice-base.maintscript | 1 + debian/libreoffice-base.manpages | 1 + debian/libreoffice-base.mime | 11 + debian/libreoffice-base.preinst.in | 21 + debian/libreoffice-base.ucf | 1 + .../libreoffice-calc-nogui.lintian-overrides | 1 + debian/libreoffice-calc-nogui.mime | 37 + debian/libreoffice-calc-nogui.ucf | 1 + debian/libreoffice-calc.bug-control | 1 + debian/libreoffice-calc.lintian-overrides | 2 + debian/libreoffice-calc.maintscript | 1 + debian/libreoffice-calc.manpages | 2 + debian/libreoffice-calc.mime | 37 + debian/libreoffice-calc.ucf | 1 + debian/libreoffice-common.bug-control | 1 + debian/libreoffice-common.docs | 1 + debian/libreoffice-common.links.in | 37 + debian/libreoffice-common.lintian-overrides | 2 + debian/libreoffice-common.maintscript | 11 + debian/libreoffice-common.manpages | 4 + debian/libreoffice-common.postinst.in | 43 + debian/libreoffice-common.postrm.in | 26 + debian/libreoffice-common.triggers.in | 2 + debian/libreoffice-common.ucf | 6 + debian/libreoffice-core-nogui.bug-control | 1 + debian/libreoffice-core-nogui.bug-script.in | 16 + .../libreoffice-core-nogui.lintian-overrides | 1 + debian/libreoffice-core.bug-control | 2 + debian/libreoffice-core.bug-script.in | 20 + debian/libreoffice-core.lintian-overrides | 1 + debian/libreoffice-core.maintscript | 1 + debian/libreoffice-core.postrm.in | 13 + debian/libreoffice-dev-common.maintscript | 1 + debian/libreoffice-dev-doc.links | 1 + debian/libreoffice-dev.lintian-overrides | 1 + debian/libreoffice-dev.maintscript | 1 + debian/libreoffice-draw-nogui.bug-control | 1 + debian/libreoffice-draw-nogui.mime | 13 + debian/libreoffice-draw-nogui.ucf | 2 + debian/libreoffice-draw.bug-control | 1 + debian/libreoffice-draw.lintian-overrides | 1 + debian/libreoffice-draw.maintscript | 1 + debian/libreoffice-draw.manpages | 1 + debian/libreoffice-draw.mime | 13 + debian/libreoffice-draw.ucf | 2 + debian/libreoffice-evolution.bug-control | 1 + debian/libreoffice-evolution.maintscript | 1 + debian/libreoffice-evolution.ucf | 1 + debian/libreoffice-gnome.maintscript | 1 + debian/libreoffice-gnome.ucf | 1 + debian/libreoffice-gtk3.maintscript | 1 + .../libreoffice-help-ca-valencia.maintscript | 1 + debian/libreoffice-help-ca.maintscript | 1 + debian/libreoffice-help-common.links | 1 + debian/libreoffice-help-common.maintscript | 1 + debian/libreoffice-help-cs.maintscript | 1 + debian/libreoffice-help-da.maintscript | 1 + debian/libreoffice-help-de.maintscript | 1 + debian/libreoffice-help-dz.maintscript | 1 + debian/libreoffice-help-el.maintscript | 1 + debian/libreoffice-help-en-gb.maintscript | 1 + debian/libreoffice-help-en-us.maintscript | 1 + debian/libreoffice-help-es.maintscript | 1 + debian/libreoffice-help-et.maintscript | 1 + debian/libreoffice-help-eu.maintscript | 1 + debian/libreoffice-help-fi.maintscript | 1 + debian/libreoffice-help-fr.maintscript | 1 + debian/libreoffice-help-gl.maintscript | 1 + debian/libreoffice-help-hi.maintscript | 1 + debian/libreoffice-help-hu.maintscript | 1 + debian/libreoffice-help-id.maintscript | 1 + debian/libreoffice-help-it.maintscript | 1 + debian/libreoffice-help-ja.maintscript | 1 + debian/libreoffice-help-km.maintscript | 1 + debian/libreoffice-help-ko.maintscript | 1 + debian/libreoffice-help-nl.maintscript | 1 + debian/libreoffice-help-om.maintscript | 1 + debian/libreoffice-help-pl.maintscript | 1 + debian/libreoffice-help-pt-br.maintscript | 1 + debian/libreoffice-help-pt.maintscript | 1 + debian/libreoffice-help-ru.maintscript | 1 + debian/libreoffice-help-sk.maintscript | 1 + debian/libreoffice-help-sl.maintscript | 1 + debian/libreoffice-help-sv.maintscript | 1 + debian/libreoffice-help-tr.maintscript | 1 + debian/libreoffice-help-vi.maintscript | 1 + debian/libreoffice-help-zh-cn.maintscript | 1 + debian/libreoffice-help-zh-tw.maintscript | 1 + debian/libreoffice-help.lintian-overrides.in | 15 + debian/libreoffice-impress-nogui.bug-control | 1 + debian/libreoffice-impress-nogui.mime | 25 + debian/libreoffice-impress-nogui.ucf | 1 + debian/libreoffice-impress.bug-control | 1 + debian/libreoffice-impress.lintian-overrides | 1 + debian/libreoffice-impress.maintscript | 1 + debian/libreoffice-impress.manpages | 1 + debian/libreoffice-impress.mime | 25 + debian/libreoffice-impress.ucf | 2 + debian/libreoffice-java-common.maintscript | 1 + debian/libreoffice-kde5.maintscript | 1 + debian/libreoffice-kf5.maintscript | 1 + debian/libreoffice-l10n-af.maintscript | 1 + debian/libreoffice-l10n-am.maintscript | 1 + debian/libreoffice-l10n-ar.maintscript | 1 + debian/libreoffice-l10n-as.maintscript | 1 + debian/libreoffice-l10n-ast.maintscript | 1 + debian/libreoffice-l10n-be.maintscript | 1 + debian/libreoffice-l10n-bg.maintscript | 1 + debian/libreoffice-l10n-bn.maintscript | 1 + debian/libreoffice-l10n-br.maintscript | 1 + debian/libreoffice-l10n-bs.maintscript | 1 + debian/libreoffice-l10n-ca.maintscript | 1 + debian/libreoffice-l10n-cs.maintscript | 1 + debian/libreoffice-l10n-cy.maintscript | 1 + debian/libreoffice-l10n-da.maintscript | 1 + debian/libreoffice-l10n-de.maintscript | 1 + debian/libreoffice-l10n-dz.maintscript | 1 + debian/libreoffice-l10n-el.maintscript | 1 + debian/libreoffice-l10n-en-gb.maintscript | 1 + debian/libreoffice-l10n-en-us.maintscript | 1 + debian/libreoffice-l10n-en-za.maintscript | 1 + debian/libreoffice-l10n-eo.maintscript | 1 + debian/libreoffice-l10n-es.maintscript | 1 + debian/libreoffice-l10n-et.maintscript | 1 + debian/libreoffice-l10n-eu.maintscript | 1 + debian/libreoffice-l10n-fa.maintscript | 1 + debian/libreoffice-l10n-fi.maintscript | 1 + debian/libreoffice-l10n-fr.maintscript | 1 + debian/libreoffice-l10n-ga.maintscript | 1 + debian/libreoffice-l10n-gd.maintscript | 1 + debian/libreoffice-l10n-gl.maintscript | 1 + debian/libreoffice-l10n-gu.maintscript | 1 + debian/libreoffice-l10n-gug.maintscript | 1 + debian/libreoffice-l10n-he.maintscript | 1 + debian/libreoffice-l10n-hi.maintscript | 1 + debian/libreoffice-l10n-hr.maintscript | 1 + debian/libreoffice-l10n-hu.maintscript | 1 + debian/libreoffice-l10n-id.maintscript | 1 + debian/libreoffice-l10n-in.lintian-overrides | 2 + debian/libreoffice-l10n-in.maintscript | 1 + debian/libreoffice-l10n-is.maintscript | 1 + debian/libreoffice-l10n-it.maintscript | 1 + debian/libreoffice-l10n-ja.maintscript | 1 + debian/libreoffice-l10n-ka.maintscript | 1 + debian/libreoffice-l10n-kk.maintscript | 1 + debian/libreoffice-l10n-km.maintscript | 1 + debian/libreoffice-l10n-kmr.maintscript | 1 + debian/libreoffice-l10n-kn.maintscript | 1 + debian/libreoffice-l10n-ko.maintscript | 1 + debian/libreoffice-l10n-lt.maintscript | 1 + debian/libreoffice-l10n-lv.maintscript | 1 + debian/libreoffice-l10n-mk.maintscript | 1 + debian/libreoffice-l10n-ml.maintscript | 1 + debian/libreoffice-l10n-mn.maintscript | 1 + debian/libreoffice-l10n-mr.maintscript | 1 + debian/libreoffice-l10n-nb.maintscript | 1 + debian/libreoffice-l10n-ne.maintscript | 1 + debian/libreoffice-l10n-nl.maintscript | 1 + debian/libreoffice-l10n-nn.maintscript | 1 + debian/libreoffice-l10n-nr.maintscript | 1 + debian/libreoffice-l10n-nso.maintscript | 1 + debian/libreoffice-l10n-oc.maintscript | 1 + debian/libreoffice-l10n-om.maintscript | 1 + debian/libreoffice-l10n-or.maintscript | 1 + debian/libreoffice-l10n-pa-in.maintscript | 1 + debian/libreoffice-l10n-pl.maintscript | 1 + debian/libreoffice-l10n-pt-br.maintscript | 1 + debian/libreoffice-l10n-pt.maintscript | 1 + debian/libreoffice-l10n-ro.maintscript | 1 + debian/libreoffice-l10n-ru.maintscript | 1 + debian/libreoffice-l10n-rw.maintscript | 1 + debian/libreoffice-l10n-si.maintscript | 1 + debian/libreoffice-l10n-sk.maintscript | 1 + debian/libreoffice-l10n-sl.maintscript | 1 + debian/libreoffice-l10n-sr.maintscript | 1 + debian/libreoffice-l10n-ss.maintscript | 1 + debian/libreoffice-l10n-st.maintscript | 1 + debian/libreoffice-l10n-sv.maintscript | 1 + debian/libreoffice-l10n-ta.maintscript | 1 + debian/libreoffice-l10n-te.maintscript | 1 + debian/libreoffice-l10n-tg.maintscript | 1 + debian/libreoffice-l10n-th.maintscript | 1 + debian/libreoffice-l10n-tn.maintscript | 1 + debian/libreoffice-l10n-tr.maintscript | 1 + debian/libreoffice-l10n-ts.maintscript | 1 + debian/libreoffice-l10n-ug.maintscript | 1 + debian/libreoffice-l10n-uk.maintscript | 1 + debian/libreoffice-l10n-uz.maintscript | 1 + debian/libreoffice-l10n-ve.maintscript | 1 + debian/libreoffice-l10n-vi.maintscript | 1 + debian/libreoffice-l10n-xh.maintscript | 1 + debian/libreoffice-l10n-za.lintian-overrides | 2 + debian/libreoffice-l10n-za.maintscript | 1 + debian/libreoffice-l10n-zh-cn.maintscript | 1 + debian/libreoffice-l10n-zh-tw.maintscript | 1 + debian/libreoffice-l10n-zu.maintscript | 1 + debian/libreoffice-l10n.ucf.in | 3 + debian/libreoffice-librelogo.ucf | 1 + debian/libreoffice-math-nogui.bug-control | 1 + debian/libreoffice-math-nogui.mime | 14 + debian/libreoffice-math-nogui.ucf | 1 + debian/libreoffice-math.bug-control | 1 + debian/libreoffice-math.lintian-overrides | 1 + debian/libreoffice-math.maintscript | 1 + debian/libreoffice-math.manpages | 1 + debian/libreoffice-math.mime | 14 + debian/libreoffice-math.ucf | 1 + .../libreoffice-mysql-connector.maintscript | 1 + debian/libreoffice-nlpsolver.bug-script.in | 2 + .../libreoffice-nlpsolver.lintian-overrides | 1 + debian/libreoffice-officebean.maintscript | 1 + debian/libreoffice-plasma.maintscript | 1 + debian/libreoffice-qt5.maintscript | 1 + ...libreoffice-report-builder-bin.maintscript | 1 + debian/libreoffice-report-builder.bug-control | 1 + debian/libreoffice-report-builder.maintscript | 1 + debian/libreoffice-report-builder.ucf | 1 + ...ibreoffice-script-provider-bsh.maintscript | 1 + ...libreoffice-script-provider-js.maintscript | 1 + ...eoffice-script-provider-python.bug-control | 1 + ...eoffice-script-provider-python.maintscript | 1 + debian/libreoffice-sdbc-firebird.NEWS | 21 + debian/libreoffice-sdbc-firebird.maintscript | 1 + debian/libreoffice-sdbc-hsqldb.maintscript | 1 + debian/libreoffice-sdbc-mysql.maintscript | 1 + .../libreoffice-sdbc-postgresql.maintscript | 2 + debian/libreoffice-sdbc-postgresql.ucf | 1 + debian/libreoffice-style-breeze.maintscript | 1 + debian/libreoffice-style-colibre.maintscript | 1 + .../libreoffice-style-elementary.maintscript | 1 + .../libreoffice-style-karasa-jaga.maintscript | 1 + debian/libreoffice-style-sifr.maintscript | 1 + debian/libreoffice-style-tango.maintscript | 1 + ...ibreoffice-subsequentcheckbase.maintscript | 1 + .../libreoffice-wiki-publisher.bug-script.in | 2 + ...breoffice-wiki-publisher.lintian-overrides | 1 + debian/libreoffice-writer-nogui.bug-control | 1 + debian/libreoffice-writer-nogui.mime | 37 + debian/libreoffice-writer-nogui.ucf | 1 + debian/libreoffice-writer.bug-control | 1 + debian/libreoffice-writer.lintian-overrides | 1 + debian/libreoffice-writer.maintscript | 1 + debian/libreoffice-writer.manpages | 3 + debian/libreoffice-writer.mime | 37 + debian/libreoffice-writer.ucf | 1 + debian/libreoffice.bug-control | 2 + debian/libreofficekit-data.maintscript | 1 + debian/libreofficekit-dev.docs | 1 + debian/libridl-java.lintian-overrides | 1 + debian/libridl-java.poms | 28 + debian/libuno-cppu3.symbols | 9 + .../libuno-cppuhelpergcc3-3.lintian-overrides | 1 + debian/libuno-cppuhelpergcc3-3.symbols | 15 + debian/libuno-purpenvhelpergcc3-3.symbols | 5 + debian/libuno-sal3.symbols | 38 + debian/libuno-salhelpergcc3-3.symbols | 7 + debian/libunoil-java.lintian-overrides | 1 + debian/libunoil-java.poms | 28 + debian/libunoloader-java.poms | 28 + ...305-compare-authors-using-Thumbprint.patch | 63 + ...07-make-hash-encoding-match-decoding.patch | 183 + ...dd-Initialization-Vectors-to-passwor.patch | 583 +++ ...7-add-infobar-to-prompt-to-refresh-t.patch | 117 + debian/patches/add-access2base-doc.diff | Bin 0 -> 1308520 bytes .../patches/apparmor-allow-java.security.diff | 14 + debian/patches/apparmor-cleanups.diff | 105 + debian/patches/apparmor-complain.diff | 26 + debian/patches/apparmor-mesa.diff | 10 + debian/patches/apparmor-opencl.diff | 20 + debian/patches/apparmor-updates.diff | 13 + .../patches/appstream-ignore-startcenter.diff | 10 + ...4f80577de9ff69e58390c6f6ef949fdb0139.patch | 63 + .../patches/bash-completion-DRAWDOCS-pdf.diff | 26 + debian/patches/bigendian.diff | 352 ++ .../patches/build-against-shared-lpsolve.diff | 27 + debian/patches/cppunit-optional.diff | 185 + debian/patches/debian-debug.diff | 47 + .../debian-hardened-buildflags-CPPFLAGS.diff | 37 + ...ldflags-no-LO-fstack-protector-strong.diff | 32 + debian/patches/debian-opt.diff | 26 + ...fault-to-CertificateValidity::INVALID.diff | 52 + debian/patches/disable-flaky-tests.diff | 141 + ...java-in-odk-build-examples-on-zero-vm.diff | 58 + ...sable-shortcuts_tab_navigation-uitest.diff | 49 + .../patches/disable-unused-test-programs.diff | 70 + debian/patches/disableClassPathURLCheck.diff | 10 + debian/patches/do-not-hide-test-output.diff | 99 + debian/patches/dont-touch-urd.diff | 80 + debian/patches/fix-bluez-external.diff | 23 + ...e_book_client_connect_direct_sync-sig.diff | 26 + debian/patches/fix-flaky-bridgetest.diff | 46 + debian/patches/fix-internal-hsqldb-build.diff | 45 + debian/patches/fix-lo-xlate-lang-nb.diff | 13 + debian/patches/fix-system-lpsolve-build.diff | 31 + .../patches/fix-uicheck-tests-on-i386.patch | 34 + debian/patches/help-msg-add-package-info.diff | 13 + debian/patches/hide-math-desktop-file.patch | 15 + debian/patches/hppa-is-32bit.diff | 13 + debian/patches/hrk-euro.diff | 156 + debian/patches/install-fixes.diff | 166 + debian/patches/javadoc-optional.diff | 153 + debian/patches/jdbc-driver-classpaths.diff | 35 + debian/patches/jurt-soffice-location.diff | 20 + debian/patches/liborcus-0.16.diff | 1255 ++++++ .../make-package-modules-not-suck.diff | 200 + debian/patches/mediwiki-oor-replace.diff | 51 + .../patches/mention-java-common-package.diff | 35 + debian/patches/no-check-if-root.diff | 26 + debian/patches/no-opencl-per-default.diff | 26 + debian/patches/no-openssl.diff | 357 ++ debian/patches/no-packagekit-per-default.diff | 21 + debian/patches/pdfium-m68k.diff | 20 + .../patches/reportdesign-mention-package.diff | 13 + debian/patches/sc-opengl-optional.diff | 26 + .../patches/search-usr-share-for-images.diff | 137 + debian/patches/sensible-lomua.diff | 50 + debian/patches/series | 65 + debian/patches/split-evoab.diff | 61 + .../system-officeotron-and-odfvalidator.diff | 16 + debian/patches/unowinreg-static-libgcc.diff | 13 + ...se-mariadb-java-instead-of-mysql-java.diff | 59 + ...er-confused-about-multiple-timestamps.diff | 393 ++ ...ements-in-ds:Object-that-arent-signed.diff | 740 ++++ ...andling-of-multiple-X509Data-elements.diff | 1597 +++++++ ...ity-replace-XSecParser-implementation.diff | 2170 +++++++++ debian/python3-access2base.links | 1 + debian/python3-uno.NEWS | 11 + debian/python3-uno.ucf | 1 + debian/rules | 3913 +++++++++++++++++ debian/scripts/fix_component_tarballs.sh | 36 + debian/scripts/get_libebook_dep.sh | 33 + debian/scripts/gid2pkgdirs.sh | 177 + debian/scripts/joinctrl.py | 66 + debian/scripts/locale-gen | 32 + debian/scripts/move-if-change | 32 + debian/scripts/stat_pos.sh | 32 + debian/shell-lib-extensions.sh | 10 + debian/shell-lib-lool.sh | 5 + debian/shlibs.override.icu | 5 + debian/shlibs.override.libc | 1 + debian/shlibs.override.libcmis | 2 + debian/shlibs.override.libetonyek | 1 + debian/shlibs.override.liblangtag | 1 + debian/shlibs.override.libmwaw | 1 + debian/shlibs.override.libodfgen | 1 + debian/shlibs.override.librevenge | 1 + debian/shlibs.override.libstaroffice | 1 + debian/shlibs.override.libvisio | 1 + debian/shlibs.override.libwpd | 1 + debian/shlibs.override.libwpg | 1 + debian/shlibs.override.libwps | 1 + debian/shlibs.override.orcus | 2 + debian/soffice.sh | 21 + debian/source/format | 1 + debian/source/include-binaries | 9 + debian/source/lintian-overrides | 5 + .../debian-presentation-background.xcf | Bin 0 -> 2202921 bytes debian/templates/debian-presentation.otp | Bin 0 -> 726796 bytes debian/templates/soffice-template.desktop.in | 8 + debian/tests/access2base-import | 4 + debian/tests/control | 82 + debian/tests/control.in | 82 + debian/tests/junit | 62 + debian/tests/odk-build-examples | 41 + debian/tests/odk-build-examples-java | 47 + debian/tests/patches/disable-db-tests.diff | 130 + .../java-subsequentcheck-standalone.diff | 126 + .../odk-build-examples-standalone.diff | 50 + .../smoketest-disable-extension-tests.diff | 98 + .../tests/patches/smoketest-standalone.diff | 32 + .../tests/patches/testtools-standalone.diff | 227 + debian/tests/patches/uicheck-standalone.diff | 69 + debian/tests/pyuno-import | 8 + debian/tests/smoketest | 87 + debian/tests/test-extension | 33 + debian/tests/test-extension-shared | 34 + debian/tests/uicheck-cui | 61 + debian/tests/uicheck-sc | 61 + debian/tests/uicheck-sd | 61 + debian/tests/uicheck-sw | 61 + debian/tests/uicheck-uitest | 61 + debian/tests/uicheck-writerperfect | 61 + debian/tests/uno | 55 + debian/tests/uno-import | 4 + debian/upstream/metadata | 7 + debian/upstream/signing-key.asc | 66 + debian/ure.bug-script.in | 5 + debian/ure.lintian-overrides | 1 + debian/vars.alpha | 1 + debian/vars.amd64 | 1 + debian/vars.arm | 1 + debian/vars.arm64 | 1 + debian/vars.armel | 1 + debian/vars.armhf | 1 + debian/vars.hppa | 1 + debian/vars.i386 | 1 + debian/vars.ia64 | 1 + debian/vars.kfreebsd-amd64 | 1 + debian/vars.kfreebsd-i386 | 1 + debian/vars.m68k | 1 + debian/vars.mips | 1 + debian/vars.mips64 | 1 + debian/vars.mips64el | 1 + debian/vars.mipsel | 1 + debian/vars.powerpc | 1 + debian/vars.powerpcspe | 1 + debian/vars.ppc64 | 1 + debian/vars.ppc64el | 1 + debian/vars.s390 | 1 + debian/vars.s390x | 1 + debian/vars.solaris-i386 | 1 + debian/vars.sparc | 1 + debian/vars.sparc64 | 1 + debian/watch | 36 + debian/xmerge-javadoc.in | 7 + ...d2df8893241173de1d16b6034c0-swingExSrc.zip | Bin 0 -> 9796 bytes ...ffdc8bcfe7bca2cf92b62caf685-rhino1_5R5.zip | Bin 0 -> 1521926 bytes ...59eafb2677d7ff386a023bc40-xsltml_2.1.2.zip | Bin 0 -> 23150 bytes tarballs/dtoa-20180411.tgz | Bin 0 -> 48893 bytes tarballs/pdfium-4306.tar.bz2 | Bin 0 -> 7220464 bytes ...6daef6bfb774a325a069eda1f76ca6ac26c.tar.xz | Bin 0 -> 8375536 bytes 469 files changed, 20346 insertions(+) create mode 100644 debian/README create mode 100644 debian/README.Debian create mode 100644 debian/README.Debian-source create mode 100644 debian/README.qa create mode 100644 debian/branding/progress.conf create mode 100644 debian/bug-presubj create mode 100644 debian/changelog create mode 100644 debian/control create mode 100644 debian/control.evolution.in create mode 100644 debian/control.firebird.in create mode 100644 debian/control.fonts.in create mode 100644 debian/control.gtk3.in create mode 100644 debian/control.help.in create mode 100644 debian/control.in create mode 100644 debian/control.kf5.in create mode 100644 debian/control.lang.in create mode 100644 debian/control.librelogo.in create mode 100644 debian/control.lokit.in create mode 100644 debian/control.mediawiki.in create mode 100644 debian/control.nlpsolver.in create mode 100644 debian/control.plasma.in create mode 100644 debian/control.postgresql.in create mode 100644 debian/control.qt5.in create mode 100644 debian/control.reportbuilder.in create mode 100644 debian/control.sdk.in create mode 100644 debian/control.test-packages.in create mode 100644 debian/control.transitionals.in create mode 100644 debian/control.ure.in create mode 100644 debian/copyright create mode 100644 debian/gir1.2-lokdocview-0.1.maintscript create mode 100644 debian/libjuh-java.lintian-overrides create mode 100644 debian/libjuh-java.poms create mode 100644 debian/libjurt-java.lintian-overrides create mode 100644 debian/libjurt-java.poms create mode 100644 debian/liblibreoffice-java.poms create mode 100644 debian/liblibreofficekitgtk.links create mode 100644 debian/liblibreofficekitgtk.maintscript create mode 100644 debian/libofficebean-java.poms create mode 100644 debian/libreoffice-avmedia-backend-gstreamer.maintscript create mode 100644 debian/libreoffice-base-core.maintscript create mode 100644 debian/libreoffice-base-drivers.NEWS create mode 100644 debian/libreoffice-base-drivers.maintscript create mode 100644 debian/libreoffice-base-nogui.bug-control create mode 100644 debian/libreoffice-base-nogui.mime create mode 100644 debian/libreoffice-base-nogui.ucf create mode 100644 debian/libreoffice-base.NEWS create mode 100644 debian/libreoffice-base.bug-control create mode 100644 debian/libreoffice-base.lintian-overrides create mode 100644 debian/libreoffice-base.maintscript create mode 100644 debian/libreoffice-base.manpages create mode 100644 debian/libreoffice-base.mime create mode 100644 debian/libreoffice-base.preinst.in create mode 100644 debian/libreoffice-base.ucf create mode 100644 debian/libreoffice-calc-nogui.lintian-overrides create mode 100644 debian/libreoffice-calc-nogui.mime create mode 100644 debian/libreoffice-calc-nogui.ucf create mode 100644 debian/libreoffice-calc.bug-control create mode 100644 debian/libreoffice-calc.lintian-overrides create mode 100644 debian/libreoffice-calc.maintscript create mode 100644 debian/libreoffice-calc.manpages create mode 100644 debian/libreoffice-calc.mime create mode 100644 debian/libreoffice-calc.ucf create mode 100644 debian/libreoffice-common.bug-control create mode 100644 debian/libreoffice-common.docs create mode 100644 debian/libreoffice-common.links.in create mode 100644 debian/libreoffice-common.lintian-overrides create mode 100644 debian/libreoffice-common.maintscript create mode 100644 debian/libreoffice-common.manpages create mode 100644 debian/libreoffice-common.postinst.in create mode 100644 debian/libreoffice-common.postrm.in create mode 100644 debian/libreoffice-common.triggers.in create mode 100644 debian/libreoffice-common.ucf create mode 100644 debian/libreoffice-core-nogui.bug-control create mode 100755 debian/libreoffice-core-nogui.bug-script.in create mode 100644 debian/libreoffice-core-nogui.lintian-overrides create mode 100644 debian/libreoffice-core.bug-control create mode 100755 debian/libreoffice-core.bug-script.in create mode 100644 debian/libreoffice-core.lintian-overrides create mode 100644 debian/libreoffice-core.maintscript create mode 100755 debian/libreoffice-core.postrm.in create mode 100644 debian/libreoffice-dev-common.maintscript create mode 100644 debian/libreoffice-dev-doc.links create mode 100644 debian/libreoffice-dev.lintian-overrides create mode 100644 debian/libreoffice-dev.maintscript create mode 100644 debian/libreoffice-draw-nogui.bug-control create mode 100644 debian/libreoffice-draw-nogui.mime create mode 100644 debian/libreoffice-draw-nogui.ucf create mode 100644 debian/libreoffice-draw.bug-control create mode 100644 debian/libreoffice-draw.lintian-overrides create mode 100644 debian/libreoffice-draw.maintscript create mode 100644 debian/libreoffice-draw.manpages create mode 100644 debian/libreoffice-draw.mime create mode 100644 debian/libreoffice-draw.ucf create mode 100644 debian/libreoffice-evolution.bug-control create mode 100644 debian/libreoffice-evolution.maintscript create mode 100644 debian/libreoffice-evolution.ucf create mode 100644 debian/libreoffice-gnome.maintscript create mode 100644 debian/libreoffice-gnome.ucf create mode 100644 debian/libreoffice-gtk3.maintscript create mode 100644 debian/libreoffice-help-ca-valencia.maintscript create mode 100644 debian/libreoffice-help-ca.maintscript create mode 100644 debian/libreoffice-help-common.links create mode 100644 debian/libreoffice-help-common.maintscript create mode 100644 debian/libreoffice-help-cs.maintscript create mode 100644 debian/libreoffice-help-da.maintscript create mode 100644 debian/libreoffice-help-de.maintscript create mode 100644 debian/libreoffice-help-dz.maintscript create mode 100644 debian/libreoffice-help-el.maintscript create mode 100644 debian/libreoffice-help-en-gb.maintscript create mode 100644 debian/libreoffice-help-en-us.maintscript create mode 100644 debian/libreoffice-help-es.maintscript create mode 100644 debian/libreoffice-help-et.maintscript create mode 100644 debian/libreoffice-help-eu.maintscript create mode 100644 debian/libreoffice-help-fi.maintscript create mode 100644 debian/libreoffice-help-fr.maintscript create mode 100644 debian/libreoffice-help-gl.maintscript create mode 100644 debian/libreoffice-help-hi.maintscript create mode 100644 debian/libreoffice-help-hu.maintscript create mode 100644 debian/libreoffice-help-id.maintscript create mode 100644 debian/libreoffice-help-it.maintscript create mode 100644 debian/libreoffice-help-ja.maintscript create mode 100644 debian/libreoffice-help-km.maintscript create mode 100644 debian/libreoffice-help-ko.maintscript create mode 100644 debian/libreoffice-help-nl.maintscript create mode 100644 debian/libreoffice-help-om.maintscript create mode 100644 debian/libreoffice-help-pl.maintscript create mode 100644 debian/libreoffice-help-pt-br.maintscript create mode 100644 debian/libreoffice-help-pt.maintscript create mode 100644 debian/libreoffice-help-ru.maintscript create mode 100644 debian/libreoffice-help-sk.maintscript create mode 100644 debian/libreoffice-help-sl.maintscript create mode 100644 debian/libreoffice-help-sv.maintscript create mode 100644 debian/libreoffice-help-tr.maintscript create mode 100644 debian/libreoffice-help-vi.maintscript create mode 100644 debian/libreoffice-help-zh-cn.maintscript create mode 100644 debian/libreoffice-help-zh-tw.maintscript create mode 100644 debian/libreoffice-help.lintian-overrides.in create mode 100644 debian/libreoffice-impress-nogui.bug-control create mode 100644 debian/libreoffice-impress-nogui.mime create mode 100644 debian/libreoffice-impress-nogui.ucf create mode 100644 debian/libreoffice-impress.bug-control create mode 100644 debian/libreoffice-impress.lintian-overrides create mode 100644 debian/libreoffice-impress.maintscript create mode 100644 debian/libreoffice-impress.manpages create mode 100644 debian/libreoffice-impress.mime create mode 100644 debian/libreoffice-impress.ucf create mode 100644 debian/libreoffice-java-common.maintscript create mode 100644 debian/libreoffice-kde5.maintscript create mode 100644 debian/libreoffice-kf5.maintscript create mode 100644 debian/libreoffice-l10n-af.maintscript create mode 100644 debian/libreoffice-l10n-am.maintscript create mode 100644 debian/libreoffice-l10n-ar.maintscript create mode 100644 debian/libreoffice-l10n-as.maintscript create mode 100644 debian/libreoffice-l10n-ast.maintscript create mode 100644 debian/libreoffice-l10n-be.maintscript create mode 100644 debian/libreoffice-l10n-bg.maintscript create mode 100644 debian/libreoffice-l10n-bn.maintscript create mode 100644 debian/libreoffice-l10n-br.maintscript create mode 100644 debian/libreoffice-l10n-bs.maintscript create mode 100644 debian/libreoffice-l10n-ca.maintscript create mode 100644 debian/libreoffice-l10n-cs.maintscript create mode 100644 debian/libreoffice-l10n-cy.maintscript create mode 100644 debian/libreoffice-l10n-da.maintscript create mode 100644 debian/libreoffice-l10n-de.maintscript create mode 100644 debian/libreoffice-l10n-dz.maintscript create mode 100644 debian/libreoffice-l10n-el.maintscript create mode 100644 debian/libreoffice-l10n-en-gb.maintscript create mode 100644 debian/libreoffice-l10n-en-us.maintscript create mode 100644 debian/libreoffice-l10n-en-za.maintscript create mode 100644 debian/libreoffice-l10n-eo.maintscript create mode 100644 debian/libreoffice-l10n-es.maintscript create mode 100644 debian/libreoffice-l10n-et.maintscript create mode 100644 debian/libreoffice-l10n-eu.maintscript create mode 100644 debian/libreoffice-l10n-fa.maintscript create mode 100644 debian/libreoffice-l10n-fi.maintscript create mode 100644 debian/libreoffice-l10n-fr.maintscript create mode 100644 debian/libreoffice-l10n-ga.maintscript create mode 100644 debian/libreoffice-l10n-gd.maintscript create mode 100644 debian/libreoffice-l10n-gl.maintscript create mode 100644 debian/libreoffice-l10n-gu.maintscript create mode 100644 debian/libreoffice-l10n-gug.maintscript create mode 100644 debian/libreoffice-l10n-he.maintscript create mode 100644 debian/libreoffice-l10n-hi.maintscript create mode 100644 debian/libreoffice-l10n-hr.maintscript create mode 100644 debian/libreoffice-l10n-hu.maintscript create mode 100644 debian/libreoffice-l10n-id.maintscript create mode 100644 debian/libreoffice-l10n-in.lintian-overrides create mode 100644 debian/libreoffice-l10n-in.maintscript create mode 100644 debian/libreoffice-l10n-is.maintscript create mode 100644 debian/libreoffice-l10n-it.maintscript create mode 100644 debian/libreoffice-l10n-ja.maintscript create mode 100644 debian/libreoffice-l10n-ka.maintscript create mode 100644 debian/libreoffice-l10n-kk.maintscript create mode 100644 debian/libreoffice-l10n-km.maintscript create mode 100644 debian/libreoffice-l10n-kmr.maintscript create mode 100644 debian/libreoffice-l10n-kn.maintscript create mode 100644 debian/libreoffice-l10n-ko.maintscript create mode 100644 debian/libreoffice-l10n-lt.maintscript create mode 100644 debian/libreoffice-l10n-lv.maintscript create mode 100644 debian/libreoffice-l10n-mk.maintscript create mode 100644 debian/libreoffice-l10n-ml.maintscript create mode 100644 debian/libreoffice-l10n-mn.maintscript create mode 100644 debian/libreoffice-l10n-mr.maintscript create mode 100644 debian/libreoffice-l10n-nb.maintscript create mode 100644 debian/libreoffice-l10n-ne.maintscript create mode 100644 debian/libreoffice-l10n-nl.maintscript create mode 100644 debian/libreoffice-l10n-nn.maintscript create mode 100644 debian/libreoffice-l10n-nr.maintscript create mode 100644 debian/libreoffice-l10n-nso.maintscript create mode 100644 debian/libreoffice-l10n-oc.maintscript create mode 100644 debian/libreoffice-l10n-om.maintscript create mode 100644 debian/libreoffice-l10n-or.maintscript create mode 100644 debian/libreoffice-l10n-pa-in.maintscript create mode 100644 debian/libreoffice-l10n-pl.maintscript create mode 100644 debian/libreoffice-l10n-pt-br.maintscript create mode 100644 debian/libreoffice-l10n-pt.maintscript create mode 100644 debian/libreoffice-l10n-ro.maintscript create mode 100644 debian/libreoffice-l10n-ru.maintscript create mode 100644 debian/libreoffice-l10n-rw.maintscript create mode 100644 debian/libreoffice-l10n-si.maintscript create mode 100644 debian/libreoffice-l10n-sk.maintscript create mode 100644 debian/libreoffice-l10n-sl.maintscript create mode 100644 debian/libreoffice-l10n-sr.maintscript create mode 100644 debian/libreoffice-l10n-ss.maintscript create mode 100644 debian/libreoffice-l10n-st.maintscript create mode 100644 debian/libreoffice-l10n-sv.maintscript create mode 100644 debian/libreoffice-l10n-ta.maintscript create mode 100644 debian/libreoffice-l10n-te.maintscript create mode 100644 debian/libreoffice-l10n-tg.maintscript create mode 100644 debian/libreoffice-l10n-th.maintscript create mode 100644 debian/libreoffice-l10n-tn.maintscript create mode 100644 debian/libreoffice-l10n-tr.maintscript create mode 100644 debian/libreoffice-l10n-ts.maintscript create mode 100644 debian/libreoffice-l10n-ug.maintscript create mode 100644 debian/libreoffice-l10n-uk.maintscript create mode 100644 debian/libreoffice-l10n-uz.maintscript create mode 100644 debian/libreoffice-l10n-ve.maintscript create mode 100644 debian/libreoffice-l10n-vi.maintscript create mode 100644 debian/libreoffice-l10n-xh.maintscript create mode 100644 debian/libreoffice-l10n-za.lintian-overrides create mode 100644 debian/libreoffice-l10n-za.maintscript create mode 100644 debian/libreoffice-l10n-zh-cn.maintscript create mode 100644 debian/libreoffice-l10n-zh-tw.maintscript create mode 100644 debian/libreoffice-l10n-zu.maintscript create mode 100644 debian/libreoffice-l10n.ucf.in create mode 100644 debian/libreoffice-librelogo.ucf create mode 100644 debian/libreoffice-math-nogui.bug-control create mode 100644 debian/libreoffice-math-nogui.mime create mode 100644 debian/libreoffice-math-nogui.ucf create mode 100644 debian/libreoffice-math.bug-control create mode 100644 debian/libreoffice-math.lintian-overrides create mode 100644 debian/libreoffice-math.maintscript create mode 100644 debian/libreoffice-math.manpages create mode 100644 debian/libreoffice-math.mime create mode 100644 debian/libreoffice-math.ucf create mode 100644 debian/libreoffice-mysql-connector.maintscript create mode 100755 debian/libreoffice-nlpsolver.bug-script.in create mode 100644 debian/libreoffice-nlpsolver.lintian-overrides create mode 100644 debian/libreoffice-officebean.maintscript create mode 100644 debian/libreoffice-plasma.maintscript create mode 100644 debian/libreoffice-qt5.maintscript create mode 100644 debian/libreoffice-report-builder-bin.maintscript create mode 100644 debian/libreoffice-report-builder.bug-control create mode 100644 debian/libreoffice-report-builder.maintscript create mode 100644 debian/libreoffice-report-builder.ucf create mode 100644 debian/libreoffice-script-provider-bsh.maintscript create mode 100644 debian/libreoffice-script-provider-js.maintscript create mode 100644 debian/libreoffice-script-provider-python.bug-control create mode 100644 debian/libreoffice-script-provider-python.maintscript create mode 100644 debian/libreoffice-sdbc-firebird.NEWS create mode 100644 debian/libreoffice-sdbc-firebird.maintscript create mode 100644 debian/libreoffice-sdbc-hsqldb.maintscript create mode 100644 debian/libreoffice-sdbc-mysql.maintscript create mode 100644 debian/libreoffice-sdbc-postgresql.maintscript create mode 100644 debian/libreoffice-sdbc-postgresql.ucf create mode 100644 debian/libreoffice-style-breeze.maintscript create mode 100644 debian/libreoffice-style-colibre.maintscript create mode 100644 debian/libreoffice-style-elementary.maintscript create mode 100644 debian/libreoffice-style-karasa-jaga.maintscript create mode 100644 debian/libreoffice-style-sifr.maintscript create mode 100644 debian/libreoffice-style-tango.maintscript create mode 100644 debian/libreoffice-subsequentcheckbase.maintscript create mode 100755 debian/libreoffice-wiki-publisher.bug-script.in create mode 100644 debian/libreoffice-wiki-publisher.lintian-overrides create mode 100644 debian/libreoffice-writer-nogui.bug-control create mode 100644 debian/libreoffice-writer-nogui.mime create mode 100644 debian/libreoffice-writer-nogui.ucf create mode 100644 debian/libreoffice-writer.bug-control create mode 100644 debian/libreoffice-writer.lintian-overrides create mode 100644 debian/libreoffice-writer.maintscript create mode 100644 debian/libreoffice-writer.manpages create mode 100644 debian/libreoffice-writer.mime create mode 100644 debian/libreoffice-writer.ucf create mode 100644 debian/libreoffice.bug-control create mode 100644 debian/libreofficekit-data.maintscript create mode 100644 debian/libreofficekit-dev.docs create mode 100644 debian/libridl-java.lintian-overrides create mode 100644 debian/libridl-java.poms create mode 100644 debian/libuno-cppu3.symbols create mode 100644 debian/libuno-cppuhelpergcc3-3.lintian-overrides create mode 100644 debian/libuno-cppuhelpergcc3-3.symbols create mode 100644 debian/libuno-purpenvhelpergcc3-3.symbols create mode 100644 debian/libuno-sal3.symbols create mode 100644 debian/libuno-salhelpergcc3-3.symbols create mode 100644 debian/libunoil-java.lintian-overrides create mode 100644 debian/libunoil-java.poms create mode 100644 debian/libunoloader-java.poms create mode 100644 debian/patches/0001-CVE-2022-26305-compare-authors-using-Thumbprint.patch create mode 100644 debian/patches/0002-CVE-2022-26307-make-hash-encoding-match-decoding.patch create mode 100644 debian/patches/0003-CVE-2022-26306-add-Initialization-Vectors-to-passwor.patch create mode 100644 debian/patches/0004-CVE-2022-2630-6-7-add-infobar-to-prompt-to-refresh-t.patch create mode 100644 debian/patches/add-access2base-doc.diff create mode 100644 debian/patches/apparmor-allow-java.security.diff create mode 100644 debian/patches/apparmor-cleanups.diff create mode 100644 debian/patches/apparmor-complain.diff create mode 100644 debian/patches/apparmor-mesa.diff create mode 100644 debian/patches/apparmor-opencl.diff create mode 100644 debian/patches/apparmor-updates.diff create mode 100644 debian/patches/appstream-ignore-startcenter.diff create mode 100644 debian/patches/b0404f80577de9ff69e58390c6f6ef949fdb0139.patch create mode 100644 debian/patches/bash-completion-DRAWDOCS-pdf.diff create mode 100644 debian/patches/bigendian.diff create mode 100644 debian/patches/build-against-shared-lpsolve.diff create mode 100644 debian/patches/cppunit-optional.diff create mode 100644 debian/patches/debian-debug.diff create mode 100644 debian/patches/debian-hardened-buildflags-CPPFLAGS.diff create mode 100644 debian/patches/debian-hardened-buildflags-no-LO-fstack-protector-strong.diff create mode 100644 debian/patches/debian-opt.diff create mode 100644 debian/patches/default-to-CertificateValidity::INVALID.diff create mode 100644 debian/patches/disable-flaky-tests.diff create mode 100644 debian/patches/disable-java-in-odk-build-examples-on-zero-vm.diff create mode 100644 debian/patches/disable-shortcuts_tab_navigation-uitest.diff create mode 100644 debian/patches/disable-unused-test-programs.diff create mode 100644 debian/patches/disableClassPathURLCheck.diff create mode 100644 debian/patches/do-not-hide-test-output.diff create mode 100644 debian/patches/dont-touch-urd.diff create mode 100644 debian/patches/fix-bluez-external.diff create mode 100644 debian/patches/fix-e_book_client_connect_direct_sync-sig.diff create mode 100644 debian/patches/fix-flaky-bridgetest.diff create mode 100644 debian/patches/fix-internal-hsqldb-build.diff create mode 100644 debian/patches/fix-lo-xlate-lang-nb.diff create mode 100644 debian/patches/fix-system-lpsolve-build.diff create mode 100644 debian/patches/fix-uicheck-tests-on-i386.patch create mode 100644 debian/patches/help-msg-add-package-info.diff create mode 100644 debian/patches/hide-math-desktop-file.patch create mode 100644 debian/patches/hppa-is-32bit.diff create mode 100644 debian/patches/hrk-euro.diff create mode 100644 debian/patches/install-fixes.diff create mode 100644 debian/patches/javadoc-optional.diff create mode 100644 debian/patches/jdbc-driver-classpaths.diff create mode 100644 debian/patches/jurt-soffice-location.diff create mode 100644 debian/patches/liborcus-0.16.diff create mode 100644 debian/patches/make-package-modules-not-suck.diff create mode 100644 debian/patches/mediwiki-oor-replace.diff create mode 100644 debian/patches/mention-java-common-package.diff create mode 100644 debian/patches/no-check-if-root.diff create mode 100644 debian/patches/no-opencl-per-default.diff create mode 100644 debian/patches/no-openssl.diff create mode 100644 debian/patches/no-packagekit-per-default.diff create mode 100644 debian/patches/pdfium-m68k.diff create mode 100644 debian/patches/reportdesign-mention-package.diff create mode 100644 debian/patches/sc-opengl-optional.diff create mode 100644 debian/patches/search-usr-share-for-images.diff create mode 100644 debian/patches/sensible-lomua.diff create mode 100644 debian/patches/series create mode 100644 debian/patches/split-evoab.diff create mode 100644 debian/patches/system-officeotron-and-odfvalidator.diff create mode 100644 debian/patches/unowinreg-static-libgcc.diff create mode 100644 debian/patches/use-mariadb-java-instead-of-mysql-java.diff create mode 100644 debian/patches/xmlsecurity-XSecParser-confused-about-multiple-timestamps.diff create mode 100644 debian/patches/xmlsecurity-ignore-elements-in-ds:Object-that-arent-signed.diff create mode 100644 debian/patches/xmlsecurity-improve-handling-of-multiple-X509Data-elements.diff create mode 100644 debian/patches/xmlsecurity-replace-XSecParser-implementation.diff create mode 100644 debian/python3-access2base.links create mode 100644 debian/python3-uno.NEWS create mode 100644 debian/python3-uno.ucf create mode 100755 debian/rules create mode 100755 debian/scripts/fix_component_tarballs.sh create mode 100755 debian/scripts/get_libebook_dep.sh create mode 100755 debian/scripts/gid2pkgdirs.sh create mode 100755 debian/scripts/joinctrl.py create mode 100755 debian/scripts/locale-gen create mode 100755 debian/scripts/move-if-change create mode 100755 debian/scripts/stat_pos.sh create mode 100644 debian/shell-lib-extensions.sh create mode 100644 debian/shell-lib-lool.sh create mode 100644 debian/shlibs.override.icu create mode 100644 debian/shlibs.override.libc create mode 100644 debian/shlibs.override.libcmis create mode 100644 debian/shlibs.override.libetonyek create mode 100644 debian/shlibs.override.liblangtag create mode 100644 debian/shlibs.override.libmwaw create mode 100644 debian/shlibs.override.libodfgen create mode 100644 debian/shlibs.override.librevenge create mode 100644 debian/shlibs.override.libstaroffice create mode 100644 debian/shlibs.override.libvisio create mode 100644 debian/shlibs.override.libwpd create mode 100644 debian/shlibs.override.libwpg create mode 100644 debian/shlibs.override.libwps create mode 100644 debian/shlibs.override.orcus create mode 100644 debian/soffice.sh create mode 100644 debian/source/format create mode 100644 debian/source/include-binaries create mode 100644 debian/source/lintian-overrides create mode 100644 debian/templates/debian-presentation-background.xcf create mode 100644 debian/templates/debian-presentation.otp create mode 100644 debian/templates/soffice-template.desktop.in create mode 100755 debian/tests/access2base-import create mode 100644 debian/tests/control create mode 100644 debian/tests/control.in create mode 100755 debian/tests/junit create mode 100755 debian/tests/odk-build-examples create mode 100755 debian/tests/odk-build-examples-java create mode 100644 debian/tests/patches/disable-db-tests.diff create mode 100644 debian/tests/patches/java-subsequentcheck-standalone.diff create mode 100644 debian/tests/patches/odk-build-examples-standalone.diff create mode 100644 debian/tests/patches/smoketest-disable-extension-tests.diff create mode 100644 debian/tests/patches/smoketest-standalone.diff create mode 100644 debian/tests/patches/testtools-standalone.diff create mode 100644 debian/tests/patches/uicheck-standalone.diff create mode 100755 debian/tests/pyuno-import create mode 100755 debian/tests/smoketest create mode 100755 debian/tests/test-extension create mode 100755 debian/tests/test-extension-shared create mode 100755 debian/tests/uicheck-cui create mode 100755 debian/tests/uicheck-sc create mode 100755 debian/tests/uicheck-sd create mode 100755 debian/tests/uicheck-sw create mode 100755 debian/tests/uicheck-uitest create mode 100755 debian/tests/uicheck-writerperfect create mode 100755 debian/tests/uno create mode 100755 debian/tests/uno-import create mode 100644 debian/upstream/metadata create mode 100644 debian/upstream/signing-key.asc create mode 100644 debian/ure.bug-script.in create mode 100644 debian/ure.lintian-overrides create mode 100644 debian/vars.alpha create mode 100644 debian/vars.amd64 create mode 100644 debian/vars.arm create mode 100644 debian/vars.arm64 create mode 100644 debian/vars.armel create mode 100644 debian/vars.armhf create mode 100644 debian/vars.hppa create mode 100644 debian/vars.i386 create mode 100644 debian/vars.ia64 create mode 100644 debian/vars.kfreebsd-amd64 create mode 100644 debian/vars.kfreebsd-i386 create mode 100644 debian/vars.m68k create mode 100644 debian/vars.mips create mode 100644 debian/vars.mips64 create mode 100644 debian/vars.mips64el create mode 100644 debian/vars.mipsel create mode 100644 debian/vars.powerpc create mode 100644 debian/vars.powerpcspe create mode 100644 debian/vars.ppc64 create mode 100644 debian/vars.ppc64el create mode 100644 debian/vars.s390 create mode 100644 debian/vars.s390x create mode 100644 debian/vars.solaris-i386 create mode 100644 debian/vars.sparc create mode 100644 debian/vars.sparc64 create mode 100644 debian/watch create mode 100644 debian/xmerge-javadoc.in create mode 100644 tarballs/35c94d2df8893241173de1d16b6034c0-swingExSrc.zip create mode 100644 tarballs/798b2ffdc8bcfe7bca2cf92b62caf685-rhino1_5R5.zip create mode 100644 tarballs/a7983f859eafb2677d7ff386a023bc40-xsltml_2.1.2.zip create mode 100644 tarballs/dtoa-20180411.tgz create mode 100644 tarballs/pdfium-4306.tar.bz2 create mode 100644 tarballs/skia-m85-e684c6daef6bfb774a325a069eda1f76ca6ac26c.tar.xz diff --git a/debian/README b/debian/README new file mode 100644 index 00000000000..95a01507981 --- /dev/null +++ b/debian/README @@ -0,0 +1,83 @@ +LibreOffice build system +------------------------ + +Building the packages from source +================================= +Overview: + apt-get source libreoffice + apt-get build-dep libreoffice (to install build dependencies) + cd + debuild + +Changing the build behaviour with DEB_BUILD_OPTIONS +--------------------------------------------------- +These options are supported: + + debug - build with FULL debug symbols. Default is just to build + with SMALL ones since the deb otherwise gets too big + ((>400M, ca. 1GB I-S)) + + ccache - enable the use of ccache during the build. This is highly + recommended if you plan on building the package more than + once, or doing any development on the packages. Be aware + that you need EXTRAPACKAGES="ccache" in /etc/pbuilderrc + when trying to build libreoffice with ccache in + $DEB_BUILD_OPTIONS under pbuilder (this has no effect + on speed, hough because the cache does not persist in + pbuilder) + + parallel= + - enable n projects to be built in parallel. + The log output can get a little confusing, and some projects + may fail still. You need to remove config.status if you + change this value after interrupting a build. + + lang= + - Build only the specified language + + nocheck + - disable run of tests when enabled in rules + + +The targets that are built during the package build +--------------------------------------------------- + +- targets run during the package build - + +unpack - Does prerequisites for the build: packing, unpacking etc. + +build - as the name says + +install - Copy files from debian/tmp/pkg into the correct locations + for the final package layout in debian/libreoffice* + where we need to do that here because it affects arch-dep + and arch-indep stuff and therefore cannot be done in + install-arch / install-indep. + +install-arch - installs arch-dependent stuff into the arch-dep. packages +install-indep - " "-independent " " " "-indep. packages + +langpackgs - Installs the language packgs +helppkgs - Installs the help packages + +maintscripts - Generates the maintainer scripts + +get-orig-source - gets original source tarballs and unpacks them + GIT_BASEURL can be set to a local mirror + GIT_BRANCH is the branch to clone from the repos + GIT_TAG is tag that should be packed + GIT_BRANCH and GIT_TAG can both be master + +Building the package from git master +==================================== +To do a build from git master, do: + mkdir libreoffice-git + cd libreoffice-git + git clone https://salsa.debian.org/libreoffice-team/libreoffice/libreoffice.git debian + ./debian/rules unpack GIT_BRANCH=master GIT_TAG=master SOURCE_TARBALLS=n + dpkg-buildpackage + +Build system file layout +======================== +debian/scripts: + Directory containing various debian-specific build-related scripts. diff --git a/debian/README.Debian b/debian/README.Debian new file mode 100644 index 00000000000..1493746d015 --- /dev/null +++ b/debian/README.Debian @@ -0,0 +1,307 @@ + Readme for libreoffice package for Debian + -------------------------------------------- + +Contents +======== +Introduction +Quick start +Printer setup + Native CUPS support + Non-CUPS systems +Language support + Spellcheck dictionaries, Hyphenation patterns and Thesauri + Help packages +Display and crashing problems + X server crashes +Font problems + Why are the menu fonts smaller than in older versions? + Changing the default user interface font typeface for non-KDE/Gnome desktops +Disabling the splash screen +AppArmor problems +More information about LibreOffice in Debian + + +Introduction +============ +Welcome to the LibreOffice packages for the Debian distribution. These +packages are of the release of LibreOffice with the following +modifications: + + * Packaged as libreoffice-core (architecture-dependent core files), + libreoffice-common (architecture-independent common files), + libreoffice-{calc,writer,draw,impress,base} (the LibreOffice modules) + libreoffice-l10n- and libreoffice-help- and + other subpackages (-filters-* for lesser used filters, -gtk/-gnome/-kde, + ttf-opensymbol for the OpenSymbol font, ...). + + * Integration with other Debian packages: + - Global desktop integration for all users for KDE and Gnome desktops. + Menu entries for all window managers that support the Debian 'menu' + package. + + * Some extra features not yet present in official releases: + - Many of the patches included in the Ximian edition + + * Extra documentation - this README and man pages. + + +Quick start +=========== + +To start using LibreOffice, execute the command + + libreoffice + +as the user which you wish to start LibreOffice as. This will create the +necessary user files in ~/.libreoffice/3 for you. Alternatively, you +can start LibreOffice from the menus, if you have the menu package +installed/use KDE or GNOME. + +Printing +======== + +Printing on CUPS systems +------------------------ +The Debian packages include native CUPS support from version 1.1.1-3. This +is standard in all OpenOffice.org versions since 2.0. +When LibreOffice detects a CUPS system, it will download printer settings for +all CUPS queues, and these can be set from within the printer properties dialog. + +If you wish to add additional filters or print commands, you can add them +using 'spadmin'. Note that the 'Add a printer' option is disabled - you +should add printers using your favourite CUPS frontend. + +When creating a new document, LibreOffice will use the default paper size of +your default CUPS printer queue. If your new documents have the wrong paper +size, please check the configuration of your printer. + +Non-CUPS systems (lpr, lprng, SAL_DISABLE_CUPS=1) +--------------------------------- +There is a tool supplied with LibreOffice for setting up printers. You can +execute this with the command + + /usr/lib/openoffice/program/spadmin + +To change the page size and other default settings on non-CUPS systems, +modify /etc/openoffice/psprint.conf. The settings are documented in there. + +Language support +================ +You can get foreign language support by installing the +libreoffice-l10n- package for your language. You will also need the +'locales' (or belocs-locales-data for some locales, alternatively locales-all +if you want all locales) package installed. +The user interface language is selected according to your locale(1) settings. + +To change the user interface language for all users, run + + dpkg-reconfigure locales + +[ This is not needed when you install locales-all ] + +To change the language for just one user, you must arrange for the LC_MESSAGES +or LANG environment variable to be set. You can list all available locales +with the command 'locale -a'. +For example, to run LibreOffice in German from the command line: + + LANG=de_DE libreoffice + +Spellcheck dictionaries, Hyphenation patterns and Thesauri +---------------------------------------------------------- +Currently, there are dictionaries available for Afrikaans, Arabic, Armenian, +Bulgarian, Catalan, Croatian, Czech, Danish, Dutch, English (AUS/GB/US), +Esperanto, Estonian, Farsi, Finnish, French, Galician, German (DE/CH/AT), +Greek, Hebrew, Hungarian, Irish (Gaeilge), Italian, Kurdish, Latvian, +Lithuanian, Manx Gaelic, Norwegian Bokmal, Norwegian Nynorsk, Polish, +Portuguese, Portuguese (Brazilian), Russian, Scots Gaelic, Slovak, Slovenian, +Spanish, Swahili, Swedish, Thai, Ukrainian and Uzbek. +Dictionaries are packaged as myspell- (or, for newer ones improved +for hunspell hunspell-). + +Currently, there are thesauri available for Czech, English (AUS/GB/US), +German (DE/CH), Italian, Polish and Slovak. +Thesauri are packaged as mythes- + +Currently, there are hyphenation patterns available for English (USA), +Croatian, Estonian, German, Hungarian, Italian, Polish, Slovenian and +Lithuanian. +Hyphenation patterns are packaged as hyphen-. + +Help packages +------------- +Currently, there are localized help packages available for +Bulgarian, Chinese, Czech, Danish, Dutch, English (GB), English (USA), +Estonian, French, Galician, German, Hungarian, Italian, Japanese, Khmer, +Macedonian, Polish, Portuguese (Brazil), Russian, Slovakian, Slovenian and +Spanish and Swedish. +They are packaged as libreoffice-help-. + +Problems +================================ + +Here are some problems that have been reported with this version. If you do +not see your problem here, please check for open bug reports: + + http://bugs.debian.org/debian-openoffice@lists.debian.org + +1. If you are using NFS mounted file systems, you should make sure that locking +is functioning: + + 'Make sure NFS lockd/statd is running on the client, or mount the NFS export + with the 'nolock' option. + + If /usr gets mounted from an initrd, check 'ps' output once the system is + fully booted to ensure that you see a [lockd] kernel process, or an + 'rpc.lockd' / 'rpc.statd' userspace process. + + If not, just issue your mount command again (no need to even -o remount it + seems!) and run /etc/init.d/nfs-common restart.' (Thanks to Gavin Hamill) + + See this mailing list thread for more information: + http://lists.debian.org/debian-openoffice/2004/debian-openoffice-200402/msg00223.html + +X server crash with Matrox cards +-------------------------------- +If your X server is using the mga driver, you may find that your X server +crashes. You can work around this problem by adding this line to the mga +Device section: + + Option "XaaNoScreenToScreenColorExpandFill" + +There is a bug already open against xserver-xfree86 for this problem. Thanks +to Philip Armstrong for this information. + +LibreOffice crash with nVidia cards +-------------------------------------- +It seems that LibreOffice can trigger some obscure bugs in the X server +drivers for Nvidia cards too, especially if you have more than one processor. +Try updating your drivers to the latest version. + +Moreover LibreOffice may hang and takes X with it when RenderAccel +is enabled when using the proprietary nVidia Drivers. Disabling this option +helps then. + +Font problems +============= + +Why are the menu fonts smaller than in older versions? +------------------------------------------------------ +This is caused by a change in the way LibreOfffice interprets your X server DPI +setting. +This setting, when correctly configured, means that software can display text +at its true size on the display. + +The official OpenOffice.org version assumes that anyone who has their X server +configured with a DPI of less than 96 has not actually configured it at all, +and sets it back to 96. Unfortunately, this has the side effect that +displays with a lower DPI setting, such as some LCD laptop displays, cannot +display the page at its true size. + +So you can fix this by correctly setting the DPI for your X server. Gnome +users will find that it is set to 96 DPI by default; others may need to edit +their X server configuration. + +The best way to get the correct DPI setting is to add a 'DisplaySize' entry to +the Monitor section. From the XF86Config-4 man page: + + DisplaySize width height + This optional entry gives the width and height, in millimetres, of the + picture area of the monitor. If given this is used to calculate the + horizontal and vertical pitch (DPI) of the screen. + +If you set this value correctly, X will calculate and use the correct DPI +setting, even if you use several different display resolutions. + +From Nikita V. Youshchenko : + +- Many display manager configurations pass the option "-dpi 100" to the X + server by default, overriding any autodetected DPI. This has to be removed + for DisplaySize to work. The file that you need to edit varies depending on + the way your X server is started: + xdm: /etc/X11/xdm/Xservers + kdm: /etc/kde3/kdm/Xservers + gdm: /etc/gdm/gdm.conf + startx: /etc/X11/xinit/xserverrc + +- Gnome's gconf overrides the autodetected DPI, by setting Xft.dpi to a value + entered in configuration dialog, 96 by default. I don't know what is + the clean fix for this. Perhaps it should be fixed on the Gnome side. + +From Juergen Kreileder :> + +- Note that with most recent graphics cards and monitors XFree86 is able to + get the monitor size (and thus the correct dpi value) through ddc. + (**) NVIDIA(0): Validated modes for display device DFP-0: + (**) NVIDIA(0): Default mode "1600x1200": 189.0 MHz, 87.5 kHz, 70.0 Hz + (II) NVIDIA(0): Virtual screen size determined to be 1600 x 1200 + (--) NVIDIA(0): Display dimensions: (410, 310) mm + (--) NVIDIA(0): DPI set to (99, 98) + (That's with the proprietary NVIDIA drivers but other XFree86 drivers have + that support too.) + +If you use KDE or Gnome, LibreOffice will use the same font face and size as +your desktop environment. If you use another window manager, you can either +let it pick a default font itself, or change the font to be used (see next +section), or set the OOO_FORCE_DESKTOP environment variable to +kde (for kde3)/kde4 or gnome, to use KDE or Gnome settings respectively. + +Changing the default user interface font typeface for non-KDE/Gnome desktops +---------------------------------------------------------------------------- +If you do not want to use KDE or Gnome settings and want to change font sizes +within LibreOffice, you can configure the user interface font as follows: + +- Font size - + +You can change the font scaling using the user interface: + + Tools Menu -> Options -> View -> Scale + +- Font typeface - + +You can change the default font typeface by replacing it with a different font +installed on your system. This can be done using the font replacement function. +Choose Tools - Options - LibreOffice - Font Replacement to access this +function. + +To change the font of the LibreOffice user interface, you have to replace +the default font "Andale Sans UI" with another font and mark the "always" +setting for this replacement. "Andale Sans UI" is not selectable and has to be +typed in. The replacement font has to be a font which supports the requested +locale ( e.g for Korean language the replacement font has to be a font +including Korean characters). + +Refer to the LibreOffice Help for a detailed explanation of the font +replacement dialog. + +Disabling the splash screen +=========================== +If you don't like the splash screen staying in front of other windows while +LibreOffice is loading, you can disable it by editing +/etc/openoffice/sofficerc. Change Logo=1 to Logo=0. + +AppArmor problems +================= + +LibreOffice in Debian ships with AppArmor profiles: + + /etc/apparmor.d/usr.lib.libreoffice.* + +To debug issues with these AppArmor profiles, see: + + https://wiki.debian.org/AppArmor/Debug + +If you are using custom settings such as a custom env:UserInstallation +directory, you may need to adjust them to match your local setup. +In this example, you would need to add your custom +env:UserInstallation to @{libo_user_dirs} in the +usr.lib.libreoffice.program.soffice.bin profile. + +More information about LibreOffice in Debian +=============================================== +Please read the official README.gz (in the same directory as this file), too. + +If you have questions, either post to our the mailing list: + + http://lists.debian.org/debian-openoffice + +The Debian LibreOffice team diff --git a/debian/README.Debian-source b/debian/README.Debian-source new file mode 100644 index 00000000000..7b9f523b2fd --- /dev/null +++ b/debian/README.Debian-source @@ -0,0 +1,82 @@ +Package directory modes +======================= +The packages can be built directly from a set of git checkouts (vcs mode), +or from a set of release tarballs (tarball mode). + +Vcs mode is useful if you want to work on libreoffice during the development +cycle. You can check out the latest sources and track them while you make +changes. + +Tarball mode is used to prepare packages of official libreoffice releases +from the tarballs created by upstream. + +Source package creation steps for tarball mode +============================================== +The .orig.tar.gz consists of the (separate) source tarballs available +from The Document Foundation from +http://download.documentfoundation.org/libreoffice/src/ + +or base on an old version and add/remove the files manually and/or symlink +to the old version if this didn't change - see git diff of download.lst. This +is even better given we probably want to add only needed stuff there, and not +all tarballs (most of those we don't use) + +See the "Format: 3.0 (quilt)" section dpkg-source(1) for more details. + +Package directory layout - vcs mode +=================================== + +In vcs mode we are working directly from checkouts of the libreoffice sources. + +We pull in sources to these places: + + "top" directory - checkout of LO's "core" repo + debian - git packaging repository from pkg-openoffice project on alioth + helpcontent2 - checkout of LO's "help" repo (git submodule) + translations - checkout of LO's "translations" repo (git submodule) + tarballs - see above in tarball mode + +$ git clone git://gerrit.libreoffice.org/core +$ cd core +$ git submodule init + +(maybe remove dictionaries again, see .git/config, we don't need it here.) + +./g pull -r (git pull -r, but also does the necessary steps for the submodules) + +For tarballs/, see above + diff --git a/debian/README.qa b/debian/README.qa new file mode 100644 index 00000000000..3da75a9fea6 --- /dev/null +++ b/debian/README.qa @@ -0,0 +1,59 @@ +LibreOffice QA Tools + +smoketest +========= + +smoketest executes a set of macros that create a minimal document in +each of LibreOffice's applications, tests cut&paste and +saving/loading in various formats. + +Invoke it as oosmoketest. + +This program manipulates the LibreOffice user configuration, USE IT +WITH A DEDICATED USER ACCOUNT if you value your settings. + +qadevOOo +======== + +qadevOOo is a framework for executing tests for the LibreOffice +API. It is documented at +http://qa.openoffice.org/qadevOOo_doc/user-guide.html + +Predefined properties files exist in /usr/lib/openoffice/qadevOOo. + +Invoke it like e.g: + + ootestapi -ini /usr/lib/openoffice/qadevOOo/java.props -o sd.SdMasterPage + +That properties files specify AppExecutionCommand, i.e. an office will +be started if necessary. Some tests, however seem to work better if +the office was started manually, as written in the user guide. + + /usr/lib/openoffice/program/soffice "-accept=socket,host=localhost,port=8100;urp;" + +Use this invocation and not ooffice to prevent interference with the +quickstarter code. + +testtool +======== + +testtool is a framework for executing tests by automating actions in +LibreOffice's user interface. It is documented at +http://qa.openoffice.org/qatesttool/index.html + +Test scripts for testtool are available in the +libreoffice-qa-ui-tests package. + +Start it as ootesttool. + +If you're starting it for the first time, create a profile in +Extras->Settings where you specify the location of test scripts and +output path for log files. The default values point to the scripts +from the libreoffice-qa-ui-tests package, so simply giving a name +to the profile and pressing the "New" button is enough. + +Then open a test script and press F5 to start the test. + +Some test scripts may change your LibreOffice user +configuration. USE IT WITH A DEDICATED USER ACCOUNT if you value your +settings. diff --git a/debian/branding/progress.conf b/debian/branding/progress.conf new file mode 100644 index 00000000000..59ff72ce41d --- /dev/null +++ b/debian/branding/progress.conf @@ -0,0 +1 @@ +PROGRESSBARCOLOR=215,7,81 diff --git a/debian/bug-presubj b/debian/bug-presubj new file mode 100644 index 00000000000..602de78b9f7 --- /dev/null +++ b/debian/bug-presubj @@ -0,0 +1,60 @@ +Reporting a bug against LibreOffice +-------------------------------------- +I) Make sure it's a LibreOffice bug after all: #398923 and its friends for + example are not. + Set the Version: header right. If you found a bug in a specific version, + set that as version:, even if you in the meanwhile upgraded. If you are on + an up-to-date version and tried old versions and they have the bug, too, set + the Version: header to the earliest version you found it in (of course, if + versions inbetween don't have the bug use the version in which it reappeared + and sustained to the current version) + +II) Check on the BTS (http://bugs.debian.org/src:libreoffice) whether the + bug already is reported. Do *NOT* report a new one then. For judging whether + it's already reported, read *ALL* the bugs, think, try and use common sense. + +III) If you have crashes with a document, try another one. If only that or + similar docs causes problems please attach THIS (or a similar type one + causing it). Otherwise, don't file a bug, we can't look at it anyway. + +IV) Please attach more info if possible (see + https://wiki.documentfoundation.org/QA/BugReport/Debug_Information#GNU.2FLinux). + Install libreoffice-*-dbgsym or libreoffice-dbg before doing this (and maybe + the packages it Recommends and/or -dbgsym/-dbg of the libraries LO depends + on). + Please note that those *-dbgsym packages are not in the main archive; you + need to add the debug archive for that. + See https://wiki.debian.org/AutomaticDebugPackages + Please also read /usr/share/doc/libreoffice-common/README.gz for common + problems ("Problems During Program Startup") + If you have NFS/Samba/... file locking problems (i.e. files opened + read-only when they should be read-write), also see the "File Locking" + section in above file. + +V) If the bug is also in the version you can get from www.libreoffice.org, file + it there (see https://wiki.documentfoundation.org/QA/BugReport) in the first + place. If you really think this also should be a bug in the Debian BTS + (because it's (release-)critical or otherwise important) please file a bug + there too *BUT* note the TDF bug number in the bug or mark it forwarded + yourself if you can. Especially this is for feature requests. + If you tested other LibreOffice packages and the bug is (not) in version + foo from bar, mention that, too. + +VI) Only report bugs on completely up-to-date systems. Don't file bugs on a + obsolete version and neither on sid/testing systems really old. If bugs + got fixed in sid, it doesn't make sense to file them anymore. (Exception + is security bugs or really critical bugs which should be get fixed in + stable.) When you think a dependency is missing/wrong/too lax please be + *sure* that this is the case before reporting it. Most times it isn't. + Use common sense and the bug severities for judging here. When you think + you have an up-to-date system, check whether you really have one. + (And do a dist-upgrade, try to reproduce the bug again). + Also don't report bugs on broken mix systems unless you are sure about the + dependencies/conflicts (see above). + +VII) Please give as much info as possible (installed OOo packages, installed + extensions, "special" configs, additions, changes, whatever). Better too + much than too less. (See #396225 for example which was caused by an + unsupportable, non-free extension) + +Thanks. diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 0000000000000000000000000000000000000000..68afa56de683567f3e0e0dc55fc4f08d1515d648 GIT binary patch literal 632531 zcmce$GkqA17t z?DzMswRa5|NJw$toRf|SpmyzH?KQk>>h~_j-QneBuiZ`78;5(fdaao@zv^@^8jb1p zljLIB?`Pfn?$^n5eAOMa@4vb2c6!s>|M-t2d7ALEUTd&9YE9bL-E8x+_c86BUkryg z=k0#4JD8lehl4@4Jvs06#`>S^e$Y;{-c_yBySzMPh$Lxc$)I)HO|sT~maMn?!>pSf zCVyzu8@tV|`V-!hrpepxpqrcwuDbo}*0_`WdCcGc?Jutl$5-Db$=P(Uk!0BG!728whp)UlCSDp_4F>zO%R2=^k8O?jCe^_O}n}?cK}W?&U%A;Iea3Z)_jb>@W@!&cY^f z{L@LwhBVTxo!#x-MI+bi^+pk_R`zdO*g%6W!EVrH0)@sThUC~>H42O-jdJUYh7+n2uUmb~hY9IApUrWV)N~*{Hq2ja@KL|j?xue| z>$cyt##wiq_HIZ0?k!i_w%u+(V#ii}lAn!-A9Ut}PG848yi9MW{Yj6f)4%T251zLs zt+eYyW#J;(IO{&s3fXQaYtM&Mu4i)G9Zz~ND_x+Y$%NIdJz4Pj(uBEom(#47gL7$#mRJejc|*Blav`S*Ls1V(&zXrS<;=@pm}( z!^0P^e>!^k;<-;?=_c+ZYsbUEgb6QrduiOn2DX{mSj9en4l8cdlhgJ@l-)=gTZh|w zhcM>{S@Dx(I`|AG%pSGIx5IHd9d)3FNJFiDe|VP+5f^;dO**}+-X!S_l1cY=WXrki z^|=UzpgGvz+S+T1h;nfT$xOz>eyxW{3Cyj0XW)&u!$IxW+ZK#4Yma-Q$;N1yO?ph9 zXMPKEZ8YlNC&rBZ+8uSqU4-4UZu{o8HDE?VUCLxSx*E4ST?B15;eLG^1+Gmttz6bN zD>_V$hok!>8zM3}&dYwUJy~$CeU8cHaGYef!y)oz?1vfO7oPFA){^I=n=9zB-%sqf zcfG8eIQf^}B9c!a`7n}L`4oa0cRLA`+#M&aE4C!#H>|sT)4D>)>5*QRwE8T*bI*3_ zKK8Dl^G%pA1nQZeb)hT2grb<}@2`axnUD)L}L=6ol^P zxO>&hCgb}JldR8p_f580Y*)LLwYBG+A*8^2!hi^kn`GSW_oN9VY?%q^?jX~xgs|eO zvSc*we&`LS87G`w_w2TEm?A9gblf0jl61M-?98}(3p?y2oJTnD4iAj8$p!~Mv9+S9@Q&ep-+>dI4#dDI*5h5K-0w-0yf zhs}p?EZX5pHGdrr=~iUPA|Pfjv>vN$7iN3BpKAv(DbJiUQ?`aRV zl5Gx#x-U+W#lJVjC|ZM?%r+7}gK9Y_&&Y<1DiW6;H6&^GTZ5}){o8Mn#$m%0GA4vZ zJ2JK#_<2;ovagNX4E{7px*y?9Tw8lr5*WXk0e4+?D3iLT$Fwz9?Y8|a>C^pANvfW6YciXzc^`x^0fNJMv`@1 zUcEepg-Hj&QoX%}uIi1gW}|^g+1$Hq?_G5EF840>c6U0R{e!)Wi~81fd%xW}IB3t` zy?9ZwF1qI5&i?1+`FAgmemZ^s_M6+*xYz1jBf<+cX*cP)gqOyPJSd@tPs zt`Y7@TY3+)9)`d~HE011P&Tv%cwz$>U(hu~gaqyzAL(>Igu#N)Ooo@@&f$B-;G&_Nc75up>3M^pNw6fnaL$#%rfo8*X*qUmo#9;;_!{Pu z6bfS{>!>KQ_h2u&P5BX*@7+?K7v6C_91N#p6pftyJ^G@sRcSW8$h!ZS!mw=x7clV6 z6s_{6D>joZhE)dOmA88-S$>ug3|s-uD<#z z%uO%_y9DS0Q%9u`QDupSGx8~o#~s+59dl(KS(H8qePz{rvp&_$)=>h5IY0iN7Qn;egelQFyhfz@l090LwxLW*FkatPt%0&V%hM(z36ti6%l{U)Jq8jQ9GP$apQwxQu* zTGy9hE5)9}Rss--lk)9uGm(`9jv1L(>su__NQJPUXg#} zXY%M9f0=?qZY1+BPJiKLy!@s&G9~RY+@4nQf4bwLuQ0r`e1I#HtMG0ZP)@D_yX%KL z+YgfKs+LV8S7hUG+@5A>z1G+bR2wx~2~PVmu`e5rb=Z;&W^`r3EFG~5Y3|!w7o3D0 z5E@~(c2yHu&1%XOEGEumIQ*El$M+*Ju!|m!2vpQTm{5tf!LoBeHt-tv{$ZHtOW zP=B2EODkEf=5z-J7zDdS7X@)vKGZB+DXxcOAIPhyY{~Bt=wR)6FSC(shs0{%JpT>@ zs0Itn001S^WOxal?dm&*4WMBdfm`k9D5`!8L+!v0(57=?kDdl|zk01F0h729mon zKkYPTiN8b`Uq>I7?NK<-eB);Hug&sLQ|Dv39+!u4Z0;Q=JDeWf;L_fwtHSQ7$jrv zjQF()2fKXX`KscXUGu}NhPE&sg9+ixMcN#K3${k+JYqK&e7EXxd^hfGB#qtD>UR&f z_Ya%G3YM>aRiQYq9*cV(=OBDUzfsasK(7KVwheLKUjah)w(8C8m2a~dA&o|{I3)gd zz%rLF?z4I6)+4+$+7Vw)qjqWPWg5jf^camsMCWlj{S3AgY54)=!YnSis@;i`D+#XM z7z+u?4TB`Ep@41}hnZ%{@n|Fk@f|Asd3JZsZ*KeG+EQfTG*6`dWH|9Zu1etsHf`6F zGf+lH!yxbN!|ewt+*tbO-0=##K8gmMw&J#znGM*x?EWKJ`{VlalV|5YoSwZqKYDxo z!;`gS%`AwuRhMI=02-e!2NiZ}{}2ZDz=gHtaA_YWg)+;D_JZ`#v%j6aJ9%~f{qgZR zlK1Sz>1&KhnX#P7|Nhjul8;aQGpM+7TBfiW%$Igtn@ll5TETql;@_KBxQ&WIsbIcc z?4%*A7qkWHwZTkMyET;NWAdBcZSPaJVr|y53owy4R=&YZCZ)Y59Q=acm7KN`GaZ~M!Kr2st}q`# z=$qY1yW)0?4o4fLfFi&nE+=>L1G=^IvZT144wy3@!~SsCzsuN2c_W4K2dECmkc|eD zx(1{*FZRpROmRdQ5f%0DV0UMAIbtjXA(`JfqE2@B{{pj?$&oL_s<}&*Lo1($%;VZ< zcq?gN<}h&60OpzRmS0F8D~&TRhA*bKBf``0=jMJx(;c7_?}k_=^;LfJ4wQTqFF%+?~Gv zit;O-HPFUg>J{f|KKML@W#J+~*lcqMEa2)7?q&HqmA>i{-{`0Qo+(bI@$lw_NRoV& zyvLIwOc^XXJqX$vQZ8AI(aqn94#v&98&+qkQGRh7& zH!r4FghN?quI|ld`>F?MHqhtb$GDekeDYuX_00iJt>(cWnvLZ0vchB?E(+KB&^%OS z=G|}92k9pwBJYe@6Mljx%_cbat6y5;z#0!x`|)G?x4$9rxaY#^<#eBL^{1C|!x26K z!qGfvHfxlLxbi zd{VyysFPGq(>1WDG)f%K2I44?YtSKTbkGeqdrGRqr%yrD>JI*KJ;MXi#}l9Y6AXbH zBHP;4HGN5B&x9|@ezNEZU2cSnh2T0EVdrmg(ZN`nF~;Nkat=g#*IjyMLGh>KE6m$Z zD7iWF@hpoOg*a>Hu+sY%?}U^JT|#pRt8yhT@F1HI!BWXO5mFbp@a~g~Zo8$$63b=V zl$?&Ft7ufP9Bh>IaqCB@IaIX^z$4FCA+U&Hl? zo7%f1Aj1Y(_i#;vZQPL&qg6aqEbzN1DN6$P*Y+rvNtu= z`)N{>P&Phib3mI=__6&Tk2AY$_4|wTC`C ziRUV6s9kVQEf$ONhBhC9{rwT+-C`B!AM1n^N|oPk>~5LYl7Cn*dT|a;-GO68OIy1T zLsg#ohtkQ##0JE<akcHKN$(^$FZozD~x-p zWR)C{LUHC~{1^Nrw=|yCFfT5KePn2`JcT-zh2!@A0cs|A0r@=!^yog^0v>vdhwS|k zb}e+P%Ph*SP&Ig<1ge>?itwz|AkTL*Omt&8oQVa{oYt2riS_0^k|^$JS_ zZm=Jg@?r7fTg^k@&xf=y-;d81;(88Ru&f4Kq1nsuCq?E+GqqrU{ey6wit~48XKN2% zs^323M3x*iWq+E!oNZ=A>$bbtXNYexKjp8qmc#*Vv{ld7U52u%!ug_Q17?#+``Gz@NmxteeA$bf6;x=|Bx538 zRdIFcdatDYH;R zQhc<4vmgW&2gSwIcjZ+n#@^y#+&9*l3|oqYVcECK;PK~{mm>O*Yt4AAbAMQ4XVz^f zGeK(ZO7@i5xZE6q3?H+lPE3&G4dvfaOcwUu^Fh(s#ilNBnk8^mAnuGntR{JOl2 zQ7g`)4+&?Qj4!5_>Gj8tr6F@~y0cCj77Z5jKB&+}_?=FnalG zdj<3)Rm(IyCtaz9<7!O@4pB+4N}IBWqKaV4CR1&=5u&t}hzPDsthO;0C5=OnZt(-0 zMyxLn+^Udbv^}HdQS#K~205U3o|I}+Nge>{ZY`QiOw7})?z=Mq=aIm}qJkX9lG2KF zW3%Z^3z$*&B5I%7DgIo1`J=aTh8{w=@9p*Z)3VV87#1Gj_d>Yu!je2wRrL-*o(^BHgLEY)#OPIH@f?PV!9bldz__PMd3}T;ki58F6rrV%M zOFyEA&t8a1c7A?dn@lb_ZE3YiPWEKvOKwtDjur^p8LdX_*12D6K=*tGG9ajIGPzI9 zYFG^AO5;b(&z0W0F=l z!Pjh(p@&0cMab)Ph1=aOQT>+S%AsX1iIO;dk!wcS!;NygQN*#~(H)km^x^%wn>CzP zK7f4D!^*V&5hrT7*37X36_*t3dqXi>W0KZ8#O$hmK;aM$c6)RQ``wqZP~wuK zUKyP;Vg3ARnIp=a=_Y1=sgCKPafdTA_Nf)vUF7>I(>H^oT@>DtV zLJm&;8uH4Z-|*=_{jbP(!W4v$D97A>iG>mCc0>`tG1x4+gY^AbZfTa-UJwb`V)@mH zA0h0^AG>x0I}Kr+HiKWLcpj0f8^27i?SF~*?CT#UH&9A?{?|puP~*?!hv~D@rPcP-bjstDB?)=Qu~c!xSw12NCr|W2+0zT z^!AGHYtg>gYUj2j>)e>tYHk~wf8~BD%Mf+QW)k3R)HBWid|N4;R|zsvJX(oPa05$+ zx1F*Oa#A3!T$Q&Graf2#H3_9suiHUD~9dV9v&{0#l_Hg9GmDHTQNZ?{+_i9fJdJ0r0iUWm2267_zLz zzsK!lEm+vuTF|O=dF+LjhL%&OO9rb$M&+^F5ob*evPo-vp}3-2hVMiKE_+&09V8Ut zQ3aKPz2rZ)S;a?^)}_GkDdj>2o3}Tq1m5K8Q+XdNhM>$KjsECF$^%RIfjHUVsoVWw zYc!ml2&Ug&!(q1=Rg>IyIvGayr5W7>ODx#&&oHwNlB3bsLy9q|iNPhvc(Fk(GTweX zp5|pK)X^S+udGr6VxjY@4%06|uX)Xe{&EFE=s zJR@7YZE*33VOwTKk_ReFa|HE7KU#&GOZXZ-+Bno=>jto4h5pMCo{9%;XScbtdSN@y zX{Z;+gTH%+f)mT|EZgfC7lK;yzm&wID}P0Dt`cnU-I`H=%tASWnlDgdD%>=DJDR zxwryEH3A0=;(nL+*{h>ef4L%B5WTNC8M99+Jf$)Wi@dLKpBk%WzqrF9QeX52%z5C< zdP2379G8FOGiXc!N={+!NX;F#l^t?Q4E$jRnnjN%<#kN5=6+1p{I1HG!!Jn6;TPns zuLi`JSCsNyuTa%I>3~F2(oF@#EUKbYZ0+ZuFcn5B@|siNqdHion1Zra#+3{~1TQR> zLsDXsxH9@(CFeyxm4IB`VscZTeP6$T?XXZzP=vzKUE}gWz*dar~qYzBAYxVooiUbbHbH2 zWi*%@Tw2|KL7%^xIR6rYJg09BRT#4(x+wyY!B!?=cIWpS5vrQIGpHx-DfX(y;AM#Lw@QC)F%n_=bX!}&Y0 zL!PJyJ}kT9=0AEk@-Q%{`8|z5^(_A9tnYAcvrDpdODgmtvD)0;B9JC*v!$-+T0G87 zXU8T6C=UpX6mJ^C@GhQ#*=UtXcE+u{@Z%E2`zN_&8GYK73$)$XUpX4wlmTiW6|9Rw zL!^Hxy>pq#u|grFmovIr%mG}nOqbiDDfKjkCmC%ARm|;?@P&~nw2Vh6mUNK!dpza_ ziP%f5-0rB6$SFvYS;e}}6oCFkgdU|^P`t$N$G67!(@E#Dv0bMOa(X-*3rfsX4Hs7@ zg7QPR&;PxoEGsNv=hy4*#xJek{4opA2{D((ZRnj@DVvjxgQ%hgI4!E$1l~Wz=aD>*C zA;uDvH8v-U!17#Ux=a9*?EQ9|J-|6xSL{_D$lOZSzy?4B$YwCz zvI>t?E}b@)IzrfYO-+oTz%7Z3`_=ewP%yD`~rbZK~ac5 zwlC8NR8o(-+x^r%?@*NJJp14|7Fq9dTzmrkD0gNqk|~K}_~zq0fcPHv78TxGtGNXT ztioPly0d6*RIb9p%(0b{%0ncgvL(Meef{q2{O!r{>8n>Kub-c}3H&u0X+mv>Rwxhl zf>Qsa4Y|@U53Av_l0Ya<&n;^yS;uWF^3Q2|UV{wD1yanaC-b429pd~vF9Q`UcQHrL zN}`xA8nhp%qBSO1?Lyz3yN5DY*ZAWu>4b1^c!#r5i=gySzfeJEWi}UTH|1=uL8{Ne z@{*QP99GD{oz>z<>MA2{uJ6o1204FgFAv(SRP*9QVp{pbp}vPI|79tx#@$RGk2f?N zzMb9O*Er9v$t<#HThx=eyucC}M7Av5hC2UNV>%6&kxNA>_Gvqoik0#oCAUzMmJxM~ z14Mvko!q{)XunXVF6x<1BB>O6{u!gD{jN$?Et6-QSI`h@`?VN|aitKQF%lq0&;2*a zwti%zL2so_1{~VQGQwUtw)tydTAoib0+WZXHJ8kqhRMj8SWkm2v2D}f_Bu>DDgtg1 z7`4Vh4Ut;5QyPsXu94DNly#gze?&zig3U?}+T5Si0`?_dgn9yjv8c9eI-;I`kMK6- z&E?m;JZ8iZW`_*SM(sTQf;w9wD;Y^ zon=*ajU`3R>){o?#vhW0pUmT7WnY$}9lKG6IS$#WoAx@&0XsdQq<()DFs| z+1NYS!n;|fhIk*zwGCY2rZ-uTZyVGbu2rbZ<{uR8TjDpKc!$D&Ycyo)b)`J)4n1c` z_$^UnoP%@Rl#t*KO-VeS3_yxV<{<5|#J@xOm<`jX60SvoN?~Ng#M!}+YS$01r?LeV z1;&xNU_y(iIUgn#V;$}p`<#5A4fB7r1A&kgIbAwZb&RK z`Z=~~eW$p;)*0xq`Oy7cA!YpK3~W-b3f#FW=QE+YIe`=cb!p-Z%sFHOWL^+_=9jLA zxXu!dJWfri2bNvy%8J<#9ajzwVhPp={z?!0WoxrLl^TwUGV)k@rXu>fV^2z<4;gG>(54&<8W7>kHWk$t7Qt@-9Ox^NgPpJyB z>yE``fQ?W2-wt2kcIOmS;Zs%|NXZ%G)1*X^n<74@Q4)}gQWY}=z(@h{Gku}l}Ln?;(>?{a#=KZ-f#QUFy zSRpGno+I+&e6S`(3Ybb8GRL01fAR8pKpfv39shXr{Rt)!cA;3{Xw;^bE;F7*CB<$l z?qbT0Z{;qQvQkTQPS7{4Zi>A-LR77G8#H!HoL#Im-|a{zMS?$EB7*TTUMdDcQTG8T zDc>-~jEm)w-M{_>md$=Bk}Dg=&^`=1y3!bd+IJxqD_PfHL|&b9VEo)g3h&iotdUIw zxr#_9x%vX{Q9Omkut#%QyXKXqVNI5aZ_)zU^Glgu@DjN9Eq*%qMa?Bv`R%{X}W0s!tp5)XJ=M{fJ4=@2JDy2k(bD`c5 z#ukp&NSHB;AKHCem80be_q@RU)OfH!5ETOO5JzjIyN{{q!E7$Jf9^y)0y2W4l6I5( z(NHZ%L>q@PvN{k&@t6L%;tZ=NT^Rt$`~K~TTEg`Do5iMBp(v|rt&Bo(y;wlYGj*c_ zQa%O)9m{fe@1TD0q-L#!a_4{rQW{p2GrLlO|4`dsTA=HZG*;4E!@ZDxa6v(M%DcmD zQrFS^3Q+e$7dd9N#l%eUOXA?eHKF2d@!*VAxAJ}mGb*?b^Uw+6y#l{oGtEBhuFdDe zThi#NH0FjezMJy<(|E_CgEf--hE$bHoK{(Cfg=+IfOX*+(**D-YYuB0 z32GeavfsLa;u*Kpv?J={ZL$-oiY38sp~ya4y?IrVdNm}Tns7VsaH9>!@FrtXPTgf* z4=1Td>P8UVh=le1uvk&wAc@>NlJl;BTxl3)xGV7)v9W-X1JbQSW?!%-TU6fa$~FyY zN(&Hu;X#!VY75wQym#^AlB6g_s)z08Y{ehph=%}W@HBA<%h}d20^5QX63L<9c#y%Z z;qZ4vUKGP=0IhRkiH3$wLuFy&R`I8EN$di02GZg|{PGfwA5>G69>&E}rD$qyQ()lmEi&5XOeejM#kru;+ z%(upap0PqySzCNiKg=o6*u|=3WBFX*q6OIyH@tV)T-N%kAe%=`$d_~2${ci^lOIlwemXh- z?&RnlO4<4Q7eu9~Tq`b4>bQ0)FI}LwxX_Dv60HidD^};nWalSx6a$NvRIWga6Xw6m zxl~1*2G=txfzmgri$?}Yvd9ws=6(}39EuYL6t0iqL(w~lZsDaudfWTEUN2BDQxfr>80E_zR-r@Sve`Gu??v|e_(A9d`U!v$NI3Z}+! z)wf2YP^QcKX zEhliSVE$9GmDvj-l#te_1lD*~6|8XGF}ALYwkk06$m{|s&W@6-m6osuY*0=zlAW`7 zZ>n=I>@f$0!bHO>QKCxkD4D*{?n)xr5Ji;1GH<0!v!!J$*9w(2(@=v6*?teV?|_wr z0vpCEyd(;j-jzh5W6-hp=``T%h9Wf)g+_Wp0VO|+IPM=rzHXADnena}s1TNya^jN_fsE>bC$8hj50OvdC5wCl%ramJsH94-fK zmm>1FgSe5ICYa3n#FQ^{Rhdm`Cdf_u1FVIPQZ?xyH6h5q3lHT>Ou)u2j!U4?u`8U zenh}Eq(%*d8M} z)o=rUzvUkfRiJAnspb4Oc2N|KDtyzM3p_@nE5&ez4X83pkxt%WJnwFp)&VufLw)(z zkONZTCkyDjI&5C}Tyf~scy8zT|q~K3*T4AC3U?!lUPu#TXYUYY``H0mzR|mY2k+)}B2>1kcwDVKMk7i!4bf|IQ{Z-0a>wGpmw|CpYdS-o+4dsqaw%6u9w0=*yLy z;&fLcoQj`!wX#maQL;}`&XaW&g_INT2^HneWciq@kPui?YOt~1QyzJooC$V`To6rJ zC84YnK;f-bRc2Sb(4s6yu%yw?OR!b9(&O*9i><`-L9;iU<`1EWp;}V0mn*4`GhC=o z8Hb`yQbhcyvfVd>sVG~c@=vy3x`&iW^g2YogJ_=K9#Ym~z*%#;j7EGOduY9_&vEd9 z)KY^cJ(>(}d+lR43-kd258W^;zntg-`HSq!&)Qhf@0>YAVp6#<&{Q1nq zHVt*UTokZF)*rzTW*%SK1+9cb9Q)HpR-azhH1V;KtjVFsZBM0uVC$QDggew%Zms)n#Yp{#OndyR=x z$FNhPSOz!J)4m}Z)%r$Y;7;x-=l4{q7RP>%=R%ghlwsTUW#wvGTH-nJi5Y8hM zIr8)%g=E;vidtkUo69i{nU2CQv(1+U=6h<*vCvcpm%d4hPbkJ3fH7p~K8`8?5Fr8j zw5hOZ3NdtfqW}=AmdNbnln={5N0igrX2(y|9|RA#RG(sP#R;SkxGP31HI%mWl^U+; zuOy%(yfd+#z}bN8`%en#qj@M!C~I8`up&@_d5`arMaxL6s@sN1E=qfmE2Pjeyr?jW z2DO|vI^7M+KZ6m3D8f{c2l|gZQj~DFq6|#W9sDx$4Fa=FHTuQ?BiP<*GVxZ(v7#jq zNfq6wMVdqi6bSvr!_75y97vk_ltFKj?t3|I6_iy)VX@19yY|^>#XN#8 zQz`+ossd)X2Q9F?eVGI~Wj%;hlMcL2?85|I2!G?bfzG zKc9z3s@pdgUK~5K&S>Z8j_J>RQ?$UPtUP^+JAk4&rZWf4-Hgi!+0Kkm{iT9StiYJ# zAm{=3m@e)UeyRbfTCgD$ns2` zG;PI4s7s%h6gld&Zj)!j@$io7h^t;>yCt|UyptWbM7>^#oLXL>C+^pyF$UG(Xn-rq z;84OOYG)Aa7f%wYg1>-psO7xI5A{)xb_IZ#b7luFkFkeD`9b+VM;D48F&)e7hEab? z8he?^Q~zMkab_F&Zrme`vW$*b*0?ORAK?=; z(Ml2W?Va6iV?8SYgmYA&rbtw@T3*g-yH-~<=ZB?s;8^p^vKwv+Z_$ntzd`6-QC_1t zVx@}?2$}@XRwH>;^V%ZP#ci`nST%Lcp8iJzv0(7yp)%VgLJ87PZrszOO+ z3aD4;p;7s3tMb>j^X#SGj>wqg?TV$aOivZ^qHuvwYQeAztG6nR#VUPRShs$nD>Ac69r6Ugdvx zoBEf5LH0lN?_5#hJDRdvInE}$Y-=Y1P-~@9Q zLTOPmZOL|uA=GC|r&es?Z!{nVRo?wawymK971CP36BPJlS6_Ll9^aKa@GO|{%o7Eo z*=Rmk)o083A9UxAKE)JyQxNe?umw=p`c|#cSe29Z$Edz4*oY_rmNhrUS=cULuh&iV^GU;t z(|p-jpirWVJfSdVq6^)#9#*6$p*m0CF zhL%YOisp(WjCglSbsyv0bZMaG@u=-2XUi*V!YgZjUgS`Hbd)@zl~KwUey5c!mC%tz ztr96xxr-GCl+&=2TuET#*q4b_`DE2|GBt~&gkm+A^QasTs#&pU=_;$4VFLB`WwX0? zS-STYz8Xsr`r6#T;}S{%Y1}J2um73sgnP5<@|+AyhlMUh$b94R!}^jw0+qvBRd!l? z!}0-Gn;NUsww#=TzvWAAN_%JTV1Mu6|F08pv9&{~ru%SRtlX-VM0j+4zmHEv%uQJ@ zI2D0#Z`Be2qOy{6NF2OM#2w*P^3?qTGv7PdIoL96tdJ@dR~4{?u;jlS{d9Ex>)Gl1 zx5p7@S!$%=1!%D+7SapeM*&JjxVsOGCg5-ewUTZRb# z{>Atzv;^dB_*jho`XkX`q`9D0Ks6#)dAkX*=&G{>Aez3HR9=-4njzA_5V7Lj0#&HX zyR*DUlFZp02>-V!sI0QY;}1Ew788pSqPp3!21lTS5QrD6LWU47imdiAyc28zwdDv% zBG%k^2`agi&dgN!<-_ge-Hj=RG-9J@#hTNi>uzw3(&O%UYpFfJo%|VSN-B*9*dp!z zm(C5YV{;oeC~3F-RWtRvJ@|^O5arfx9m~F8Fb7+7zOuh~?ABhoJXW~js^1-k! zEanK0{0@_xKe578G)IT$Qe2aHK?!>!@x}IkqN_ScXjddPy=ftiu`o>tL zY+8vAoPL{sO;@t9>mdP^a=jR z0Hw{-?QkBz8C)!c9LOWgxZzcZv#?{U*Cd&e%uH1mFGJgN@r@>Q=$ z@t7ykvGRWvR=?HQx7t%H-3wQmw~OTw?zoMfvOGo)@OiaXhEe=>Z!dep^ao|Cy*edL z&1y21jDpGC(2wsA%4n;VI;(i7j3yRij4McP8^kT^9+b_Z`Fr(--9l| z`^J;?C*X$k-sVCo`W~f9iH)Yp((`;(UCLBQx~LSyhl2_??!%|^`$(2}d?*`fLu$sB zDNsc`cV0fwxRp2GvArn^()#wc6@tsRKMt!p$y?j?y}c48*g%GYdL~o4o1#?^z14R4 zUKx0QXU1ZRBe$f$?lwsx%ZtY5-P}bv;DN`j>DBe*BzC#>DTH%1ZtNDp5;ZTrKuj<_ zKW~3*od*^1Ja3$RPN|JnS|%Y6%LEvN z>9s5zy1ZjEE+c#ApP1*L_*Z@g4?Iv!S8>(M2KnRjH$Q%V{_5z(>vw0zZ(qE57h@oe z+bTND@jVeaN&c3y@4B`acj@FBn7XKX?NxfRj$Tb6v=?x#K4*#8sIp7zLUd4zr)K13xi;gPuq8mQ8Lpz=@tb9V^L z9Gf3hM1f05IKOU8d%w-?R{4}|MWrVw8K6qdr8REV4}?R{t}zE_W8_YM2$gnIyc0Rq z1pRjdp$IpN`H6y(!)u8JyE`9tE>U~nWUQM@b2g&u^XYW*dU|_77T@6N9rT?Y9+EpG zWWqD_K(29@6zu{T@9)V^RO4nRpR43~7Q!9EPUSaN92N;4Ha}dO7om#xDJOFL5;qEJ zLg?WwJponU<{Q4Y#*s3RkP0j3hIp9Fe!*Xb9n;Tuc@;jnUR5LQi+OBGb(J=Q71br4 za+)bbU)`a?pZcqG+zs67GqG85^KN(dZzyr|5tEi)oA^5D#UkEg-{V)Fi@^xtDSsJW z50W=69BD^{^76Xx`>iQHf=|`=?s(8v!8|H=DKMhwl%@?vx)qz7ETzqG-^yEWXMabNaD?OZf&wKB9|fwrTEz3FVOknMJo)t)U1eDT_RLNdk#E&o>G-PVj`f0wvysvUFbCcL zR6W4BH`S*rW=Nct0>{rKeVyYv~YV*h|QXrDxn{jGf_zO}QY)NIsKzDN-& z^Np|VC?p27>jSFa!DqqksL&}z#46akBM~-E4Z(GcE+XE<-)Owc`joftA>lex6A;85 z_b7db%f*#>OU1`ANxdYH$0s%>Jbpk)|52mXpkEsI>HZFXhnX5=J*!UTWlySt1A&dL zMzj8;vV{eYqTY~-*hbAQ_?me*R1(rVQzb!oC06}2#@pGF2*OZ!<1vo&No!h3Yc226 zj7nP7Fj2_Rj{-0uSg;2y8t78P)x$%heye0*eu#IfFqUVA_j0WT5(OA8*6q%57i&O-+ z>`iaELaNci4f3+`Izl5*%_lrUFa*D`^(TH4%wC8?!2CL!K&~|44g^q-= zg6I4_Ir*RtWE9&N=28wWf4drfHB z`t1B;`;lGtQnY(7DNy#eLBCcP`TW~bVuDYDhF8Ry2jseYwNr!x#OnX}L1)b(T(8_Rl1 z1QyQp#QkjVZTxf5k+pcx)I%?Jr$O9#H4jQwWQb8>&3}@;mjFDjM0c zY6Qot19W5S03W4B6YsTcQ%N2^P~PWoP!XB&JbtHpJfc3Md7{4TLYGO&G!TLmX#_=B z*u-=XZP?6qu)eY!-6n=Dm%6WL>O&EbABXhgL=-)&?F25C)n1?cd}hT?68%d@0tjyh z6V1OBwQ`3z_hT+I62QIW%R9MBD-TgAOBHk63$C?Q0uC0Y!4A77kAIOflLGlRZaEDhA-i~%<#HWBkQ(y9$ z&fgy&E4Jh8#p&zwopa2;@844AjbIO}MW}o=4d8zII7B5$PA25D6LaTRZoHXmxqUi+ z;bO4|L_sTSo&SP8Y;Ei1fR@)KB-j~nq#Yw(70xpjA>`EqbU905uw{~66#AIYCf>BC zH5@ex)QEngQe8%AWUua(YkZtX#=B0{!lN4eM)3eurrvT;n5ethj2DCpuN^e@Jjat4 zSA+gKo{|kht2B0R5XLfRfjUcBtxyUnxLU`zIdfaQ^U)<&a^D6j`7Sn4U2>AR!mI@S zcFp5`;g2p3$}crVHEtt~leq5G+|Z+5ox>~H$A9bBh4;-vLaUzzf1FXDjv_-jo?@5i$mjrF^#)ozYkGIB!BJXX6!tyw|G#opyc5l%86@vV^9 z>FomEFz zgGPO4Z^o*ObpPD5onE$p0aIlRo0cN<*Pu@tNZzNRT4s9s>@Ou9(q2=tV@urX05419 zGdo-0bSm$-0(h3!EGN)IfavG%_Nqh>&4iHHX3$M@n|8oUBVjR*zj#W;g^kA|Qz&QR zR!@9ny_!L!fGFs}llJL}5j9EVuMWaaq|EsWZ!tmQr2CIVu4f(UyE*1aTkqI{8-!TD@kw?v|f3LvzsOr*ig zuy_D>=SyC4*FySx&N|~sbcQNqmddYd-IJ`e3t{_QmQ=NM;~A6`RA*xL*2Sk$+0(t| z?A?qAZb;F9WTJiLH#cDc%k!Hft$Yz1DEUO#u(>mj zvP1w>IN#j&d^8#z$#s+<)aO z<{|FQ(zcOCxaUdh%VgCGDRnOkgV&BWHg%fqg>4gkVEZ1pjx!g-$krY2ei^Cv<2o>P zScm|aDx?w=isa1bQ|Zcf0=%U4;XKvvG@AfY4;^hN5*)dO%teA zoTF);*QMg>9l0GQiGGs2vCi1N9(@%x(|J`NMx2wn{7U z&FpWD5GCEk+0@1La#`~q<$nu*l zjaMNCvF3jwnF*#JQv22mBB8j%ip$nnR59Ck7+0LLl$uI1f4#X)?ch}{1=DiLDGLe0 zXfB9gI+rXj!xOh=VM2e7BP~oxUCHh2S$uiQve_;>q~tziPCXK1lFzDwZp~Y;uq%*|f6mh;Xv!yw9g;iChA z5EBJthE_#$uC;UVi?J^zhiDC&FF-FnvIh98r`@ zXS4wDee-%-J~V0^gy{8%kGuvF{O%k&0`*dD_k@2imsBc z6og6kSLFn;T7Aw5RDD#58B1M@&IwkGeF-Jyom#>%i;~E(?h_DX@0Jc2I#dfK(t^bgn=>lCp39_U;G3@c@z= z2u-@bxe>j}ph~L5dVC(t7@zs|*nEr|L<*e!Mgjp^0-;0|m^|8wD>(G9OOrK@oOma_ z(rMQwsw8*zOAd2@Lr`)rMjWUcwC+E;MxioO@m+-a7GZToPi{!o=LT@iWFza#*%;(d1>;08N>51~Fc-TRASYpj!Q ztE~$uV=r7Zr-yAV7gn+oCiqf49LbzQGQ8Z{603-U zab2cKN}=!G2y~mczH%v0idg(I)h%E&6mc%k*0=w!2W65wK{1qy#a7`-roccfg9)tR z3WT83vEJ-_Zp|QpD)KJ@4Lw>o_p?D_6r1x<787x?WD0T0-HEk+ut>Lu&QfAbJ8h|p z@Qe6<<5d#>ni7=V^44A|N5@h0MH&+F7;s$yqIMjK#{il`A);Fu($pOSDTw5t_%mn$=Mo#${f%qF-p-=CeFKmYmvoWFYi^4$wXuIg3! z9tDj;U0ouN&!t3Ib)c-Oo|bNGFl~rj;{3eZGdBiR znKbJ#A?^7?myZXj-eTdEDBLl$vPM;%E>;s4|DuRxC`YQ4q)RT>m~sp*u|Souu@W`U zjJ)1>6?EM48(L#eN${h9BauyPs zY_V;;uhl19Hb@}5U|5SnD8&)V#}&tUh*Ybo2Vgcx08hfU31`@t>)kORkBaMic%?{~ z-mBu67EcmQDl2p3yz7n#VKd(-mqrR#G9g6D#>3!1T=1wks0E{t0&WQ5qKT`<`(Tnf z6xF*-r2dy^DVMd$;oQO?r+2ObQ8wx=&`XSE7pM%M0gxe&`4 zxj`ac!pp>&B$j#7qoHA1#QFJoZE}fVQx5zoO3c~)?ZvQP%PvFMoyj9Wa}cx%!4TGP z1{EjxHVB!gbJc_h5?e`X^|NnPi$J^Ub0Nr{2Ho~=1Q!V*Q9GXWiST>k^ug1+ zP3@M^bI<@BMG5KnhIFMLKL(J?Eyr(c`DL)!w59R~Id2OKnZX7ieCxIxrHr^T*Oii; z?_RwO#~f)W$3$Siwd^AjN5| z%Lj*9=6Q{Izso<2f<%csHvR(y%xl97jln=yHnHLfkGB>?iB9Qe<8Y|H6usL`Hv$1( zX{yylZmSj#^%hNqwP9F(X(ZoyuMf$=x)>*M0k4Bh`qEO{!_oa%49R2SMD4M@%6j_= z8TcrpbJsQBsPd+lPF|f_Z;-wasQ$%WA~>Sc zWj)7+TE&HS^gaAU=`%|D4>o&b5=ZDQ5hI+<0nnX-8f^DRm7La&IA~nsfL& zS^FPyc5dJz2%NE81GZc%s}9e$cE!=2UfIFnj`X~A5(=5x203QF)RFGB;{J8jnE4XHK|DKT;1{Lb#p&vw0F4elFnrX%#rp4Xj8@8l6FmtaKtOPnBxe_ zdav&v>~7l_LEG?qP)kl#JwsKZ9pZS|Lx@{2a@f(2l}VK-!zGKW!llmJFsVSG<1wm z!k*49TY@-Wx@!>ONiEnS?$j87$GZ60@4Kd&2aCNhsY{Po)@>rpfr@Wad#iN7@8mK( zl&7zF8;pTYJXBngo@z}M@cl_C3cWsNsvsG>z%xiM?DU>u1~f-0ga!*7z?=0!jujvW zY`9>{8y^+-L7S&c8ZrLtN0II2DpO!4VH!~_(1u4GI}O=oZG-@IMNI(oZm%}k$mmw4 z7jA^YW81_qpv)J0k*huFvrTCo>(fE_o!2pWlD{k}UWGMz9AOGXY(OY-AlXypbylSd zlS4gm-;%SVm*)Z{Xr=w;<@@hny#8h_`!HII5ows}rd4`%8^^WewTgSGP!|u`h~|PT zftI|PyF;$Yfke}Ng1DCYS0(8=t}2yBYxGhhq8$NkODenYQd>gUQ|*C`L_y**rL+!=bem&200{ zQmHl67Q_=ux$!N!>pke(cr4Vv9Ee!)hc1fthYWFGJ`SURXbuB$SQl@mO7 zwl3RTtjCU4Sh9DpDt+M0nO}#+7JT=4*}OZ{gyAux>kqw8!EnMJQ>F$m?(pM1g+`Qd z8)@9iIXyppCtdh&Cubood7lbZL@t|Lin^iQBj^i7md>!Y3C4^KO${ey^>U=kTUxvT zm^J7}I;S#f?M9OS$d6~Z9x+WO{)#izd~~)soz9Vxy>gu`71#rR=E|vX)3UJ@1+JX_ zAXa7Xkt|w$VZ<+TL&H@>=fC-f!TNA5%mf1TU_O+VH?*u`6s2@k#A#JdCHW`n&+&{ak^}Nf`sPi7$DN8v;vm zyA>^GsZ){FTF9h&1!Qpd>;}eWvM*+I>+7&f)=mtrp zj(t-!Dl&m*%)!ntgVvC_(x()3^9$CBD-2TJTLEJ>9ud%#|HJT%p%^*vRs@-@*_yEX zY)zfnvg8IQpu|kkCxRwq7(pLsIbmcNHC7dwivrf51V=Qze{V;%e$e%#6`1=~x|oCj z1`!8m)A;Gts>+#_?cE}F-OKix$=xKTP=RxcP40MDtHu;oL^!oiu4SEy6;Xu1(Dafv zVb|N0ac(u0LJ*tS91@ml#k=aFV(eY9C_n_t3oOrhiHlko4Omt+7wIJy#7;oRX5N_H z$Y?m&q@LZT2hBhS9h6Qfa$bI-sJo#={tNc^rNgGz(9S7YM(y@*CYkD*qo%xSnm^=2H zccGd<Q03hiU&rHuf0y`;faGqS2<40BoWdZ$VVw(lqj_s zSiOzn*^%WuY^&Pk!~(Njt1q6zu8Ep?_-$=B*{6;C#~G`qJocx3>gHO zQth-q#l`J#t!tanXXrna;cH7QY%*E&iTjkGM=LeOw#W>C3Zk2Jsm#9m<$3fy+Ks?wXcDHi=A*HTm_|@|2VEPRrC5S421e(4(?hFh68t zhq1l*po-XGa+v8R@=-9C?ytuO@w8JA`$@{?JRQwjM1}F9ux!8J;6Bj`QaX(VZ2u}` zc%uvC-v3R?Iz>2xuuI;dc@FQZRXBaCnVhPvC4c-?YGfEQaE|OZ*Enr^IcHmD*)+N9 z-SpDY^rGLxTyTTA{PmzevQmAd{N$NX`v(nDQdhPmOwexSl{zi2gEHLK3yDg2|M4HC z_a*Df&SFOwbCIIy+d_8XIJ|>zq0!MkP^6i4^-$+NSQw?Dl&J`tsHmj$2}lwUe`=$WDh!_b-xnTo2!br8ey|ZH1Ma$M=iIqe$=kCiy*-z_dHX zP%FiKd9Zz%sOU#U=Yr+swb|^&L{&BoUW!akY1jr!5go>S-577b&eY)zfOL{EmUzEj=RbvD`ZxnopKg;Z&T(*P-JKuqID1o=yMmRVOONwD0tWC z#nJ-fuawtr%lcOf+st$}2S}9^!gqUlWN7hLq!BcY&pJ7Z5<>9>6I44LOu^k*xf{)w zT`S0$Jk4`qyht*SiE@V)aA)~$E0UP!qaDNwtj4#<{xY+A8Q=08T2@&G&4@@2JtoVf zHgjZA=a^Ts!#9Q>%&67&StxnN8da54vfRTglt`g~)6Y=&+~_8n5_4Ui_@qHaWo${M z4L`hOl)lH8yohP9T0o#e$tVDJrK0-}3JngG>>fnWozwnAawP9_ECl%1axywK!eKkE z5!G&opA_G{8M3f8pQ^3^+1e&Db5|Y zFDRnQJwaWOz%8We{@%{Pg4*Y~-_bRl&9Ib|bXRJ=$w6IC$Et`2-C4ViGOi4t4_;CS z;bZteQ|2Oa3j-U2E3CwW=c$E+Cvc|+dGPO6g4-D4%q5ETFYC44ty$Z^U{S9tAwFGY zy|zoS5T>4fh%*}AxLrS&uI3SlHEpm)-L97s68uw%PQK1C>`c#GadSNfF0cP=xu^A= z!{+k(=F%oq^X2!rie*hIPwp8|M}qQ+$PG7V&;>4ra>|M`Q}y}v4n!M=_u?KC3h+dlZRX*0@Wl3+RK0i}Y43B;*{A)<}3o-O%>Y-Jy z!)wjmmQ5F>ijU=i<1ig4)zpsEBVG&kP=r&4q!xc8paOxAdW7Inmf^$s7z|g=3exw3 zTJj1-&(=g^F9ke5n~yhzam~b`hVYOwHSF!|62RyijhobCm&hwqCz|uK_uqd{k%KeY z#S}GRH5A{vhal5$uP!0t!S?dS;_WkR3L;#&XKY4TV`uUkH zkslfv$Y}`z^09g_t*YXYdU0Y!YE%;4&`0SHP* z%hxJPpp%wz=?O#7Xe|Dq<%NK98o0n9V!0&_I(jT{>Xx~op`Et?&LNRD{=mqm+e}SioI;p~)RMCC@ z>ZJDEVk8ckrB^c}zMs;z0&`7Sf+9UbI3`EM8t1nBqgZt=XBR6f8FoZ7@v7g2KzEv*6Y7%_a&n;CbTh*lKfwzy*i{Y~8hpgo(fN+qx=FC6*jc zC*vP!Y-_4}`2$&!)!&pUz}Q~``&+v^^t&5wZY zJRJ~bsf6*DugDNho`%OuP<38qBYx#^pl&{y=B#Q2#@Q}Pc8DgawIHB!r4I2FoMWYs z9zA(QFIR4;uis|}AAW~@(NFbYNJ@NdG=!ra11D2t3E&Bp1= z)TgsM%T*JmJS!P6^hKylNBWp40bnI@tLJxOUA#A@ z=4}$Tdi#MU90MFA+$E8{JEPfK{Xqn?9ftt28BSIf{H74QD@MnkF78=u6{H0i1YbsbR3Rj?FORb^Zoj91(klMC|vgntEwg zfsRbp7-(Q7svD>g53rBeNwRhqnXx(ND@@riYK$(!k};Gy+OZa?U`14_#lI%kkVqHz zB;gTx1-{Y@13lQ|(Gd7`ZokB>f`yXbZH|dZlHA2PtEh{|*`4QQxxN>7=~n`dYu+R) zR*2N8uc`AHt*eM`SJSrvw#JxnNilTrZx5%v8nu)j(7GPNDK?UuKA=~NE3B$!{Ag8? z?uheF>^NZ-Ek>=mWR?Y_Jl=7l@XD-W(pGa*%KH?h^}d;d-gARP*2i)^Am)OaoHFb~N@U@j`~LOms}sVI=&~J+PV1AWWO|PjcP*84HVIy} zo~t|G2;Mqm47bWneS%^M1c?DH_t;swzalaG%#lYWc~>yyz01^;nK~#ZN{pE=<(5cp?wIElJ*qZUIwk~)S5+W1CBHgs9)?G z`~pWAih;+|Q4+&|W%n=#%mVZXhDdJPM)Km-52ye6q*N5cyV8$_@L>wwfWoMY_L?0w zbYhUS*n*Wlf^?M%5ddlSIXPTkbOo&1VmhI3+8qR=U@1CNw7c$uO?R1*=iocQebGDZ00}n;=uOn=(Bv#5C|Nd?O>g1kOf{vfWUm9Jq(rWV z=3-W4$@mKFoC0r(ZHY*Q5sSQt+vf%bod-j1lY`$Jt-vE=5gobN5VbYrTtCpIB&MtInc zEo+}YJ*)nwm(;CTkR&Wedl*ZS zgdM@KHfIefpyQS$^$9*U^#nZI z`U7qX|4X+@(Lhn%Fl#zlf8I0og5FPv2HXCk*vpD|k)_cT&2#qDu4s!cE82%eX*9kM zt7e<5why_PXjkD8$3iq>U!FqK?Q<*RkVhiuOI`X<(p5HB*iHi5D?BGx@1+E72=n-D z!yR7+N&PcV?59e~$N(%9_dy2XVv=U5{202f1y&r#zOvl zYAKF{Zg>$CuV)!t|7=+BTG~jkNYwaeWq1Bz(6@6AR%ZAQA|jX-W6VJeAw@*EFFOPb zP)Cnu8E|X*cG4?c%HJ=l8>=WcX$AgAmS^o^Ns*n0h6$gxiTV%HZ$oG-%-RQ((puT> zrnY-U9$|eoZ~}w|Tj>4xQ}?~b^HLu1zY_8kZ>{dDf%D4$FtL)iA$%TU*29KWPDSP) z^1^k<%62sNRuAoVGw2{TreZtjG(?+`Wz`q$!u@VRN*r@ea`BGz+Eb~t`X4c#UQnrn zFU_Lk@~?86vYL+BOEeV%NZ*L z>^ymQ`~%*<;~y0sB7i0@sw!=uO)3Vl(xhk*Rl}=n2)P79|M0|$Yx7h(-n{@A1 zzUOn%86{(CpL*77Q?5u$tVg>8q&NMD|1-|=K8ukIZLGwwbe@;4dL`{i%hOY9=6KnlmvnHUs%9SY;%6*D9E;tCsr8>W&8P zVunpgt23BFSiTFfr(@(aD+( z@wzExzS7tsj;o?~#49UoiO!UG)**}Zmc*O>;0E4Qq`SxPS`_g-*V_)Y`~ui-HKZqw zucVk5a32#YJtzENfh||2y~+)a+7?t1w0dkeVuF{^}z@9+@ds8!_yxuRk*7VWs1o`EA!b_$&A{p-_n)x$r3{_Okn zx2ImTLuNza#p1r1om9kc=3cbCNUR1IPFDc*aZdSEDa{Cbh0kQHUe>R1=cmqfF7dhB0;XrJ{ZNA(N6htM4sjr^Dd?OPRRffnz zBMS<{Fd=MOeJy2&d!Cn-HnNb_JO>Wiv$(l<5F?pG?v2g|aOjweLpyzRy4&8 zlW?B?rVbI}93Bga(T=B<`*_vGko}domG*|Zr)>a8s$al{U!C8y5ax+t!>1#2jpi_R zBqJM%!qzl|v8$rVpbc254j#9;*(C!G5%{biSj=aLD+1|Z-HRwB*EnKsgLhSBGgiSuJjk&?16B3R;V7P~m>@7@4&6xb&m9`+x*HA_>v}^dyaovEE z06R(nmaLa+vt#WnZ7hdvqV#ixMRyX>=YhUue!1OjREQT3D>`T_e@f2PPWB40zpce?_gCAqwg#X;}vEoxFbMzn+`Usu^dzXeDn{FBP`V-5QhW2S(6CK37456AL7>JU6 zNR*9N5SGZ60{M)3t+L|k4)M~A2gXimXDhPMo?CY99mC3&yu(JS`@c+Z&o4_3d~^Kc?5g(Dds~W+$d{4qb43LnE(}uT(Z8+| zmZ^4pSrjb*rFB*4oJ=KRd%?v_x%E3I-CL8W#$iZj4z_mPhRDEgsN&=OH;2&!o@tHN z@Ib-|pY=%QN>Afc<8smD-n(JWjvkI};LrBxS8AWP9ncx}3&0`LEF$~CgIP0?M4drqW8p$gEpIKv~|A^ZItjUO~j-&wOElOnwEyk znWLY#BX?vS-B>DLI+TGhKQc?#m*SB|m-rL$ou#G)B z47i;vXG`}v6pGf8-(S{WZ4tE-5Rg%f$oyl^eG^z=+(1j$9 zSITa>-LCGRxco%vj=`_Mm&;upD zhI|48!@1N6!PM9)$8kK0l54BttBJ+S^JN|9dGV-ciE{ zZ;VuT`9Og%NjUm*1qI+Pc4YNiVeH~wQ2CP^h>V5~w?4FlDzdaXY>$KUCZpt@7j|T? zeq7Ucd*sU~hd>G{!5`GcQ-0P(w&|>GDlG&S^rrs`MzijWlbG<^nN826Ze4vm2VwS~>x0sRr1G8drymWTVxY|PMg;m*B zn#opXx`?A2K4ZGByhd!Ddf@sk>*UJ|6L*mH3_5+gWb;Fw8o9ar+P!#ocJdpPxHPCf zH5cys`e=Ev+t}@NSMN?dSXc#sUc87stpClfTOj6wYR-ocC=EJB9i?=Z=L=gHO>vh+ zrWR!RfANfR?LrIA(XuF!)$NPYTOTVfw=t*q%JHd)^k$jYsB2twn z89{uCT1g0PreIVR#OP7IPo1>9xV&acJ^Y74fEzyJX)-VF2 zYDq2QV`YqwU5Okse)o*kt*PwbVh5_?o+(aAiH3WhHdWb^!Ra&ijSpErr1Oki>4X;9 zdY_n6o=@65_*5u-#}#H%>o26R4&L7KYjD_8CG4etp(9d{qp@?OVfz z-9LN>&n^@$RV(-VVo9vqX&Prh)i1r1DdC{DvCFtpRaDH$VqTwu6-;1+9W(qFU7Ks^ zXD)YM)w7&RBHBtmUL!wt*#U}g#!sj(t&Fugu%i0!5U^{0{iI2PSQ8!{;mbM~$FWuodQF)mJ2m*J4WL1~e?oAjK{0l+h16D?wO67mjMO<8 zc6&ygG^?rlL$O-9M6KLawnU?RkzA23oDQi`(R7*{=DaKJPD@@@v5LgsrQ7pFB|77> z*IJleUTpKrHifvnycrhS2!2NRsrg%_lu0f$*N$NcSFIE%_T9Qg6K{;h_&(G8Rb9qe zGAH*~C1a;r#8bF9y6lf(Sn^gGxfIiP*VMs~B1q*Ehe7QZn>2g9)_3%(=Z>pD=0vVR zCfa&0qSoT)kT7#}4I_keVb}8Nw-&d!4gzD$ccLei@WiIrJ??F)((wW5L%Vc&2P;Hd zNT>_>!04itGBFht!IrX1YNisplG~6hI)hmfE@%f|>^^*CdsZz7B{*|cWk*c_tapg|r=1VWBcFHx%lPjVU}@p# z>}rx4v#EZG@=3E2w>hk2WEIF#9MERA0VGa(coK78jPtUD9n_YK;&~kI!s+ll-g!$n zvF1BCu~nV*tV1xBY<%6+)!L%mI&lutz0$=rp^U=gte~h%npiUGl_sJ&8UcMPUn#i` z!W*^#;)y(N!)% zi|4S@o!M7C;u@it>fB(Q|E3Y@T+A5i1@e`C`z)PPX$K_+?eQv$JEAUrQ6ODf zom;bUYFRrL=hChMcX%QF5Vo~N*%LVXNZmg!=cf#a>6Lzn0lx`wThiae^X4E{HC5ZTc4`s?Q z?amunUF9oSN$DXvsMX3>aevLNG14)uq$a z2qDr5An_~t#Qnhi0#(YR_8X!Q&t7e$3R3d-rvLLlD`x0`A6jb7|F0K~CExjj4WjgF z@Z$)&SoZ9-bl0bVNpK0huF7xod1`nviJC)^DI2ORB0@|mu^hT?tFJ^QWVtxnr>gsM zyWQQ_e9~@6DS<5MbeHj*x@o`^q^jJF@Q}$o6nBbFshU;O1f=3L;2S&dcK?(dP@haw zO%(#>=#LhGiqOYBr6&bom3KnO5wc|xVWe7mx+HMfEZcn=7mcfg5Ix?{$&PyAAt`5A zxI#S06cN@P(@--gSTW2EEMQ9B_bedi?-o_yh834mR;WMY1J>dh`9QuYZJ@mimJX+p znnDnt7kXu3X=!fhiDAvSomOrp9hd4wYqPaoEMkNaa#f0+&wQwKZuoQ-p(O0^T%}xN zQ#Yh+iWPo%J0VuW;k&!S0rQCY#Qx$BV@A$ZC*%s6lj>1rdE4ea>W9#^lhz#oVVO9C zJtox4BWERs@Zj!j8M>|nhY^V$0&#`ZH7tq26O0r+L%BXdw8y8U2y6lC7{Y^Tpu8lf zyOVl*9xAQY`h0f&IsZGaWbiN|Ea`K@RX&^s9*wOGAEcoPq-vsv&`wGYL@Z#z$%goNkKiEXDL5yqkV8$b)TA&h-mZgn`$ zF+n5}8SYiYP!Vdo?;(34TZ@6C%f|~t=#2OMR{SC0IHr?que{Smg2Q>4pNRyEf4XIt zX_L@szbA5dj5($o_ht7mi09}_U3$*Iw=vuIZ|ONpPOCT1z}nE$TmTBTkhwxu{P{}+ z$C3XoPILO^G(om*mBEtuWIJahZ~T#z&Rh3H1dQQ0OBzT ziN-6dHo|G5KSb<@Hir+vJiVA}!KBfVb*|H#1geqlo%Dq~K+N2E%X%UH*Z57wztHav z5+8tZJ|uI)@~A^ZsF0u}lbQ-_tnH_;K#Rs)3^pN$!>%fQgI8d((>uMeWWD#fXf6n@ zji&~=YALVjZYjNdzd_i5P6@-*|MMF2Pc9Sc{kevA)T>qE~_aY#;4g)6DiDgP0nFF5ZpJ4P33Z@-822wxxjr? z;9e`M!19^J`l)wzRlV)pU4TWrAy;lI^Xj5=2aEWxAv~37pnRdm))qc#)6;0b+4?J7 z=Q{WL7hZr0iL_V*OA-o=DX?}sLUZ_(34VNdQTZyq!&po)EZo~K-zl&Nl)zx`xzwO* zb?SKgdstTqxNeFs!&v}bWBY1EYo|t#A?BXad8oy}vyu~TzI9vExR^H|T-hSfvQd<) z_2&PcaPYk9qhWgKnFm&mcq6UFrQ#&o39p>mg2&t2~R*$v)s_Ta$NK_5(5=$f}5cg)VL@4u`Lp*J*> zdC2iOiKN{%^_BenjsafzugC@Oc`JbG-!Xt15w0Y*qcC_DTx%GBRDd)1NxcLq0E=Fd zj~7SLN#eci2p0FnaDaZ*^??^KY7QTPwIvhsMk$PJB zfHKm)=uQa!lnc+zK1~7~QwnR7CpgD_i{~(+Z)tMOiWMZ%sJ+r!)M-f|WaUcKb*rHi$b*n^1i0z5MWh>#_!5QT z=fSkyzjuf9E*&j8ICDS;kxDGOatB>_HQ9-qLE;RTVh{lJW!u0AGdkS`^2oFbZfX- zU3&Wa9dvOn!QSdAafqHHMEsaG)K)?A3UR9Vi;a(0Dz1F1#pPAHKPR-qo)BJ0w42M- zoN7f6*#S-10!(H7s>$e_Um~1c`%mc_c;_Fc^ua3G<>yxFq z{nQoK<`d8o1+t_!>HFm;GFx}LS5WM5JH-R~pJE>t7MJJo!1dewj_|iLBG%j4nd;j) zCD(JxT(S!c1mwzgTMIFC$;QRz)>hJ_z--L@Y<#V`oji4nVf%&wkJPJd)+5kh&0%dJ zv+`noONugnMmxU^mW@)BO*`lGTsnsh^pf2zM0$Xc$KJZ};Y>u3&vx7)UHbIsy_@rm_VOI+TjaILv-%kPG0>V8738sdQ811Nsit5ym%fop0fWG3!U<)iX zlR144@^`I(f@07})fx3parfBg$o=3E2@y5dhAq#JtscU%hVdPkWONrWv8|Qz;zDu7 zwd(uu<=R{zO!jPYSiD2DCnCw2-toytq6_K+m=5QuaJr{Nrg+Q@F7%(iXAo4b8g~i@ z6r1TSp`P7mVZ`rX)D(CuFxcH)^T6+GOb7nKP>8)e5v?;_|7^hS?(Ttsq1X2|e%$Al zd8@PE=@E|RF4|^A6g72rG8m@%#O4QB) zcbJ>C_ZKv$6%~u5;L9_%I5)pEx#F~<^n9j?MR790ji&a|m9+Vwi3Nn4CW#KGh#jc$ zKHwG0JhgVDIyp){3b5VLun~J{^C<9$vd116Cnsc7^R?u}U1yohN7;?JwZxW1@J`m5 zX5i6OH0kw8i%sD(f(ft74>H z?k*_k_Rmqw#o6fg1*5lMS1>ReAXH1Lvp6fiP|tAT((yJHhD?LF2Mz3)MP*WQWi>@y z1KnSOd7unE)hE1xU(tc?@V^FhMXkB;VOdg zKd6n&7gqE?B&dquWMyG#Spj@jbSXph`Q)feOS4nc;TQE&o;uuQ%Ov2npWCES#Q+U` ziFr!lbajB&M@55y1fB_0CL|;u8>K8S2POs3&*UTWY1{1LL6;ZjmdodKg-rObfe8Em zz5j0O^}(x+pVE97uCMk?d~g|6T+G(8)$o=a1?o*I(Uw6piOJOX$eSN`_un17{(0x!wmje`O&C%WJXbDSu`70A z`KgwiEjB>pCUmEyDX&WNR{xVH9$FV*{;6|$yuA4T*`=xy{$ra;+DWvm0dM;W1^0pq zJPZKkt}>TC1+F(;)1k$q7-}tQ<3gvXFiTR27O^Q0+A5}T?qx)U9eFaaD9nUdx5*MS zf8N}ZeW88cfm||#U~JDXIyV8RidS&klA^ZC+8<7Tl@lm7z9{ZX3zZUk4;v_GV7}nk zPrmO@_(A8Q81dm$y&LgoTToIHy%B%EiY)TYh`-l;LBn6FDK8@~V$?a;q)N|eKui_$ z!F5#DxXvQS-M;f=dMOqb_160?f57m*0HpB;RX-sN$zYC@tYsFlagKQ)YlNfrExBH# zt?4lVbJxi+dpeRyg7eG2WRNes8?R`mWa0$zZ9||@Q?)?b*~-B2;uTawwIB*Km2x}A zl&_+JC6Y;hTH+DHo&@$*q3e(bYOWjyf>CO^-299eX31dp<#qAALx#Mh zWJd~ipH~~`TM|)PL>`deA3V)yMb^OnQ2S+k1lMd*1L}x|g+g^|)FGwUv8wYymt#lf z!dug6<;CXW#fp7U%z7$BY-%RuTUzWyqHDJq$jk}InQKmkoHcR30d4U- zROE#02(&ax#ZE^H@Bsxy<}BU+!_CDx%PQsReo*2s0gMIL{sKL#-Qui6=?>mY>HqR^)1#*3ZnzxyuPQ0q zl_IFdv}u;e(DH8b?_>@v#cdO}ylFvhQK1?11oz+5ZloH5I7$rLnteU<{Ip8>H|G5b zp@9)Qr@Bj5AJldyc8$t%w8qhB)yciwWJuV(P&gf+~u1MymWJbA;u2@!lWJC_6`!hx~P7Y7fP#Z z_sRv3^bnr7^NJk<=~6AE{I#tNduMN!DI_P>0(W@RocZ;;Q;*?cV-O+3xa7sGdKD*% zLy~cn6-kXEt;^o=ol@pXtM%`WK14KXZVkOEm)7K+!<5av^}m+KVqsx!)q?H%T&E?> zKBq0Cv_)zKmSDqyd4Bt)^3102_f#S7qGSma|MqOgY?b`19Je+##vl7fnJfMdi}-pL%0VzxcFg(7=N2wT2O}8mn4_h z&KGU-w;!hG|G_gC`e|WdnduZL@rcEKA(-TusvROGJSltm9113<1U>&3x@kXHo|XFV zV4!a5tavC>taho2h0V`}vubEA{7c+gCj>ACXr*T2&N_m7LHPT8##~>vO0E{yPjcqA zRHDbX?yY5LWyC34jnLf5Fw4PBx;u79cDZBEAQPChf31pB)*Tmn*gaJZbuH^$uH_cB z&c0kjByRC$>*QQ4ie4iA*L$ zFiRWxMNY3SKv_F3&Jkbj;$+>h4>)M0Y^F8Q#9P-YoXghQaFXXz?v`5f0dzLgs&a0W zKhqGC>go;}hMVe-)!N#mHp}zQqS7fA27wuCvsjo3+k_vnFpWbbKXzJ>Jmwpn5%0D- z=D$ZXDJ}`g1AKmYgf1HqZVeb2)4lzf_vHGIZf`Ey*Ix*7xb!#E@Lm3>Vbs%rxPnLY ziDyQp{71U1tkj~)0QW(^PYW+6M~d;Kaz||xjHbg`dtU7}?tVoZpnx1A7K^uXIH)?kJPu`>xA zEbv0rzwFWDXup#E76ya1lqP&?etCImgi1>q+{dpNm>*#czhn}3d+(B-cGL2AOY$DVP#>$~UC)Z8gl$KXn!Cvd#c(<4uK=-!kGnIW%=QRfBs ze|c5ilJBR+_2inotkW(Ruf-{w^;vi|JZ>8zbb!uPAA%&EPa)~eHL%Eh8uwX|t`9M( zyC1Z|#f4Yr7iSl&5x>6hRO!p?y?Y6bFH@$-c~gVip!`v7eeND1>Kuz-?k+@$gIoI$^KfSTqg9S!N9(hq*>&F&-!-FLR) zMPd43TjeXvg78EYOQ^+&69Q_0^mG>{o}dkCezEnHVEY*sssq^1nU84@b*|RtC%Hw$ zTa>!(3^xDX(nZRXKK$hh|GxOXVvjal*8$ttk9G?wA^tsIUNz7wfS97&V4kEsRX6u8;9N6Ab9_H=&-XL%0b9W`IRTuSSY#jqK@X5uR^ zCB^^HWQ2_ZVdKec2{bnc$SVnB5y$xWMX)E9;A(tY@6oB&SyL?0#YLM&92N3}co1Z4 z2%B3fQpi9hwq#!*q9(O?r~cpP)JLoziGWO6r_&Yh;R;(eWh0N_@j-p=vl%p-UQ{?I_V+ zk;G`7J5hG?Z(hT*T*K|%$w~F{-HVs|b``7O0nV)eA{5@m0?d$&Xg@vhIQK%n}TWNgVK0rL+r-7YLa~mJpfc*qopSg$2!G zG9+S3=Q$>aQsZh020F@9TKdt}u9W{$R{2;qjRs44A?be&keVuVWJ*mJuKqQk!;q$4x z@cH6sTqM#<>@hzvRLG4}ytoYnOzI`98QnnYV**aY3SdO2GTE#XYdaIH0z00WhlxTa zeziODX%OG$vplPq>iN>>ATqt$19|8F;gU4?bgI4cUw?%iq!NncURKZeX$Yu!qvOsO zfJf-iX?8T1$LU|jdNci-sHpuuB!M~zUGE;PqN20z!1o{}2rcB?1xpx~p?Y^0M5z-1m>iP(|OINH^~wLHc|GT%5KD&gVw~VChdtsqJOV!a@39{hKAN*;I)>+|Wh$t-E0pFSS+8 z7zcQ5G-T$D5R+T?_o$_w2O#*ksu>Gm7)d1USaHE&@32R3YUHtsKo)r8d5UqqqPBL~ zoDUXOT1%}t`thin!z4}gm6?Di*V;-)t5TTW8Lk7kwT-H0^gBNmw~CTzWwd>($qm~& zKWQ<f*&4uT;81v&%~c2FzxFZV={_aG+b zfAkiIxnkvTTo<3uj>dXw=*R=MF27IXa45K85M%$A@(>vUPz4bCdc24K<48wwYfrrE zPFufPKRXz2(bkW1LoDg^c!kn9^2uQZ5AtSX=U{VZ=itry>#a~8O)*cM7s`^`^hr;O ztEGS+OGT2dilZ5+2u+1iqA&{X&vV5~)a$U9;u(Y)bM?(k~;iA<%?U<`lgYeT4E1Q`!nh(^t!RZ#)@OpXmCq! zl09yw@65%OC5?@WnRY0BkdpXZ%%KbiDI5t+c{MDeSSYM#^_#EM8;_p9rTpY!e&2@e z=2SoFf#kxMr&+F@w@3^?F<3^mJreiZcG8<%@b9W}uf3|6E8Z0ghOH-G(UuUGcYpoz zo&N{Q#iI{Ool|W1W92QR-$f^B{*ztl?wTl^`gKDF;&uP$Sz9E%UD&*?X!PnHeb78; zqt?eKu+&lQyZodInxEuA`C4h{t14@0(&IROy zVe7nsZ}1M1k+(bR?_Tciz24rmy*CEt^IK2P%AzFhkvPfuJ?<&;Qm636m>gk2d9qMa zL3O}x_k(1?!}eJL_&v(Cqb89KXP7_S*KY-`5PhQQ?neFRitLy%<>rl&C8L^{dJz>U zC%^@{J5CEA0uy4ft#HUlpR#Ky81lcc^AwRdn$Xhf1-!bzyjT)o=^Q&~p0Q)-Rl7ur zF48y8^T_i!B#_9HyHxhD1~3R$czQv?T&_4YPjSP<*4b9;xHU}1%DI$!pkkUm{BWWg zUxwt?^H>@?WMmY^51N{nKly3^3%_#UgryQZ*=vgxuMloXF0C= zs;CiyAS#D))TGLfUR%`FoL(is}!%YIzPKGZ~dK<=QF8l zHN0ua6Gx+O@d;CD`SHG0(e~Cc|#DEZj~jKDO;+`}D*q@}E}^7J|+ekD-` zp=~~+UATpz1Wgm!ol}L`RDP{08zv<)RY=>*J5ZC-jXD{S-cR6Shds5u9?HhnCAk|3 zWI_WaLz-}Ed3n&R{kl6!%aWBqqYL30_=-`mz1w_=emVUW^WU-E+S%<_FW$`v?@Y&o zyz860BbzAVo+tG#mKEb@O{!_}^Iah5{Ys1ZGdTjk(N=cC>222A@=xVyRcVc)PE;-J zb-6Uid|M7GaJ>5wW=Zf00U0aCIwWd2HNF(@`H2jNs!r&N>(lG7#30haY?dD@?`|3g z+xCI%vA$=Se?A}!U3@MVP3`#-aJX?&78f2#@jzQlkfoDCCU7I}98FLNeUiXqnLvE+f92Yo!bgK0% z)BPv3il3gL9dKIg5vzI{dnpEXqb!p8?#$Cvx-cL;@}S!!?IU9wdMav~{pU%C9py%z zE1ows)?0B@-$9Rn;#MUW3K<<(XL;!(^vE(MF+XdK_$1)9GcT$9KcPHTSQflqSL0`mBt7ev9jS>nD#g^hx5^;F$4ZE#l_9ACemQ z0ZJ0LC{w7bOHGtCrR+jBa?oPbo@^}dhf}?^t_)&Bsz<3gGYpc4yDPOnpMX4b|2}d# zEQ+bDcv{g@(C-dMi0k=W?B&YIKA_gKp(~c7TnzV*X$&J2wym(sw<>`Mv{(KJDd>;^ znOZ+ouD{R)Q^slI0v=?5QKxwHkk3kheEM51Sw>|G7ymjvx%vOGa|5(%27Cg;p8NEQ+eg4 z&G>jUm7?q+S9X2|w_d-u@y5D<8Zk76)f@oP0mi#c9p2qsb&r{mxUL*U{u+KIy4X)% z()j{O;6k7t?UH;}LNB zB2S$?loSl52qt_zx-dxenG2N4;wb%F$o@|VTe~cZak4St)s|r2;r|mSnGKl>6?;Ba z)Qg486;^fJshYsxKX9rfiishPMTJ;H`pczGkThFAd3ztOnOKX?mp4>M_3G@}!ZOZ6 zc^zy&^k4!@+t^I2%D&xvslG6NU4D6Pfyp&Nt8*W0->~_~1HpWq$%H7~$^%kPxEYbK zv}a1Pudk8kO<$8?oI)(7N|7J9G!`v=yx}URCrQ;oqwu6=x@sevx8H2k&*RIo{f#k` z{kZ#jE0Z=@=2uUlKk*$?;vZgO3SR7Q>i0Hd@=jH}(vxw$;xL?Gh?a5GR@&1jAIRa%(#aj7K8a`VRd2KkUS z;kGysV(5?|8n~K6w3JnfZL{@D$)ka*4|)8rKscW%EdK55&E+#)qmhYKYOqSj*DgK1 z&|Z8-Ut+KI$DLiALMRwrb~XRrEKB=*VVPih{WPG~mGRG_xFKsWMp3cI5ZvOwn( zb~ik5n9IdaQY!Ml<&emf*S3P~vKm$fnaRpr_wDRC>G1? zI?8E#W6Me)UQ4zcScPH#wtEd)rFy|AA7Zhq(c&KZ_OL5hFLuZrX63qTbgG%WYd~~q zFbrBuB6UeyhuyNW%7Vv^WC%EGA#E*r-ySbYDb`}@P#UsJ-NT?hO<}ogrw18ws8Sek zhPnhJn~FV*|1_>*J%u@Ak(^iFpuQy4?ls_mG#Jj!E!l&T0kBq&8Kb3Ca+d!!RkHW< zn|Ir~{&j@^(QJt1cxV5O{lymF9CvSd7jb|ik$T5Zu7G^u!dL2;=TZ~E=$ z82>%aPCcT7B1vOVNtX`xM+Nm5Gx#RnLG$e5<@$RWGCJzC@+Jzn9a_O>Ybr|~+o@ei^mv(e2*+ zKmm$93?Xtydhdl@4ZqsGbO0(T8%Hp&otgH7|AhB3e`xTzu!QpV`K$cjENsag7B~N@lo;tM8_3YFrnvExRRhxp3}2O> zxp6=S^&M9G`s!5CglXOAuk+u|&D-y5$A5WwesS)R~#+3B`tW(^NMc_eObTY>g>w$qOpM2UU;Kl$)H@(w|3sT zzPN)~n*)9=wUL5>0=4Dl$pUDl$}~o`$MzEai-KN$jsAArBd>8>y(E_{0@=(Ll4rpk zb@+ySAd|HOg)>P*(Gnx!3N%Gctm6~n5#5npCW~qFah9mdJ%?m?Rwb^{XGtwt|Dvun z_eYP6JKeH78bm><0T*7YLv5V$jMEv)u9)?uQ--!J{IM%ok#16wvs{C@rP&evm1z&} zWwz~9)umiB#YOBv+W!D}ME96ZBc4dl=gHLl?N|F-uYO^J%pKePa~w}B!EHrHHLCri z`G{nr&3;rzu3V+S8)+l2bY<&oWGI@scyK zCNANWB{QhOquqn1oUrk741AwWl1~alRsRF|$A-8qE-$Y^F&hEu^yWW~p9H=?ry^-} ziAC9FHGVMPRNZht#F}IAqY`gRkd{U6YYKSLtvSbc?^|S>&(7nwDG?yyS--xPb|c1C zcdi!B3i$j9pN~@$pEW>)V1u1YJz6~K-Susc&b0DutuPf}uoEu_zhtQBj6H~#ZfgQc z>2u)Xh(}2^b|PZNwAg%0ucj#<$ha8(Ul(Qq1B*xU6DQ>>;ueqTBdR4lYVm zB$^g+vxDHgT`ILl$QTz%XfgNI45K~!B>0Ip@Slyp@cE>R=?reG)tlZ&`D|uqD05nu z{%AWBiwQote5J9A8J_glHkn;zg_=^Ie=5azNZFZ|e(5=U>2v~f65Wo)z}Nd_dXXft z!xH3)$6`twrDoD-xM15jUshxunu%8yUKVfQR_TJ{zN#&=Xvv$ISrXeVPfrA$VUx&I ze)`PdtyGI=+8+aZ82LOKg9WJ3y72fcv3Q))_Abn?%s*3q$HD^hGWkH(9kDlUX(Vum z_FeKXsvQ9L?tExGfTt?80@9592Xk<4Wet`sa|R8$|J>42+<%Gw5|e6+^~nL*`07Pi zo@P@3hYi0(AKiNNKM^X(n!XU+pb|%v7v(aI8HZcw1(t7OQBH0r*0=Tf@&ZsDRMApy zt@ES1rKQ1SpNzE9Y_=p0w-zi$0<0M=1kV>}j=#O$5wK64yRIm=H-4^`l!(gPl+0U-=vN}oZucgQMzQr8{->0POl7(uorw+QSBIpA`j31X zd+$(3HfvgZ8j^TP24 zZ8(CnYXCSJo<|ZSMLyly|46@1u6Wa}wj`Yko!vTiCs#ZiuApZ*xr2O%_n{vi&N#VE z=*mJ})<_*Ll%?AQF53a4OA*v`c`+kC+!iWfZ|xX_FJnp=!uFB+$ct>R4;1VU<#_O_+MYQ=X>&u`R0O#i?K zl=#PUW-J3QE*~xK3XVUo#lTUtL{f4xoyv{&=njB%l1FwRTOUu@)l)8YLY`S$A=f>x zbh^boE1WccLdt0~>){ZHBREx&44AMcvx(N{t%kmok}CGJBlcfcbUug$58A%26~-mwzDT(kC zp;EQXC>ph>e{U5HlN_$sBvf+DeLpol6;0!gHu9JQ;53L7^+{ zA1sUA)xKa)CNeG}uyfYWpq4fHfwF4h=KBrGrzj4)8vNGigk#p)CfT;K>o%t!hMP_V5D&zH}({+KY1G4qS9iuFRZ&{d=ErVs8bX8THW z?+PH8Mz%ibx!Ut{%&gmX>n~{9|F(eqDbXr-)Aq41E&uzM8pMTWkw3iD4?-*(*7p&e z*^2f@uHg@*NPF*&n`AW%>C{IRO6Nt49ad-XEtCQLd2dV3Q3+j5eUyoYTI$=bm4?-2 z$A%0G--jO|ZZ(+GPkguP8y8(FH9_WhF2Tb7#8lHRok(&gR-}3|YT{|!%nUgH&gP+M zi0?}W5do)6#>J`fQ|40@P0u8>?yjJ%KNgLio#wh{)YmLQjOuStqq1rtL+-Cg#p(;x4Hdlkb<}t;}_~&`p6zUZSEO z?6;xgTiz1a7}%`iB<^Kg^96HpD8r-UGbmp zS~#f*lrIQDhy>i&{7Z8mS46n*y(qQR*H|7V*2NS5lNyjT*t`xcpd4i`;AjH2S)9S& zrO`}4QeDZ@^l~hyuj38xfV83E6FRlh9a>#l8z6ti9C6-K4$peq8_?{sb4qKKCqXTXn*2#s))n6%WQCmNFhKGvCqVUAPuue0c)xTmuw|mjQD~dd z(|*FDzjf0#womOm9_biB8^k1n!M)`Sioe>QMOzL9Cf;JYiUXc3rc&m3vk##D5Z+3D+(60&|F@V>9Fb7`P38cT4)%Kk~4-09HdWP`aH90*q1_03rDq-=y!(&Rqe0O z6i1+f?x8sR#bXA%2|O{30w8cOHywKeXHt_zpyjFdv4E8@rry=O^$IH02X-m0^~}VX z(?h0C!5~loP zc5%)Au{5Vyb;W&>6&e+-m!7l>p?ollIBg5dPq>Mcwi1Tso$X48-^zOp8Xic6=Ytfg-yrYRR; zbu*HF*N43h2$V*79n)ztq%Y&^y77%9b7}isa?59EBvdrm+^{iBxW74?q5b?&5;Rk7 zD}rEpsjZkWnNT{!c#-JBP#2B&*JvBahg;0iae`$f8q%W2pXY&p_FaYh^(>!@WSXir zXV}=FTyqij`tfuPcLriM^&0f+cen3s$7zh;C;f{fZ6+KI?XP{9ENhB ztEcDX{(I3TFBN_Fm#)u7W;)E8L?4X6h~`{>Grh6<=H>P)!o`D^JL|9Z4|dkyyb|z_ z^}YW`BS1|nCMQHbJ9Y=5^3^w*(@FJ&)n6Dr9Me$H6UzXv$1%%u=#6ymL0$1cNbkF3 zu3`0UsaFzc1J2)$5L~aJ1c5?rqjz%yj6g1FgYx&=*rWt^S|W&^8-Z8RscY4GAs=25 zoSJU%$C>Wj-1I(?jWq;?QBXPjsDEv%e0z&iN0>e^b5jb#cJ!gjOrr2Am6=tBwVj+t z_%sIR1s#FkECaVFsRQFLseEZPfVi?G{qU3H(nTi<)Ry|Z<&v%9hW zPRw_DztCYwbDq8`#Id@$vx2iV{y=^>E}K7~GoXiQyrZ6^Dgl zhcP`8+Op)uwegYym>cHh)T86#Ou1-&5?_pEw)gnL6D##8jy z^)*CVR8IM$QH9vQG{T9)7N@7Yko;UzF`-k=JUGM97hrPa7r z>AWzbAkU}iyu~V?l62EH%alLbJ)9BO+ezJJ=zacz8bk|S zoibQx!UJRW73SCaz+hiVE{!`df>%RcI0?96648qIz9B-PCSGstz1rH@ezE@pZ1rWD z**3>2b5rX#r`D#4456_UdZ{IB$~}-)QaBsCJ3H%}>p#%EtNp4QY>Rn*(ya(0mn+e+!P`t+$Otesj}ul?044gVM&vTy@6ZhDb?6Mmk)= zkg~BMj0^3hnT7VUx9%^t7iJdQi}9$91l{7SqZlXCGJ-MCvs#OTSP{n!pJN&m;xOTa zqX)!cq{}r$vQ1gx{q8Nu)Sd3t>FwE6wXIptWEOuGMpsz*2^_CHmBc-%hGRGN_Ph&E z1wecnBR6_*u61v87x>NKdfyNcoQRJ|;8j~VV2M4p>Fs4$yZLzoj2pF#XThvR9C@RQ zLS_E@~NlZn1K zu;(<=#YPKxrV7yFxJ=c*t_`jfeN@^ZnPs^8c>_cdw?bM(fRvAoVIqaBEiNq$q~QxI z6G{s@kBjqjO8B?>hyAzI6ss%C%ftuTgNBxB?4#L1lqBBZIm0V@nkQm$hMvwMLOGby zq6-E}RQf-5j9<#$dy^Z6mEjdV=>6F;2$nuQLG@mJU_UY1jKk(T*G?l8K74xYcM)o~I+f8kB1j?27-y!Xz<`9kp zr-oJ_N{!tq)tK-oys{WP_%n&{J1uap^_jB-kti-eV`o>F=LR%Ua%0&PbG!!AMdnwz z?`^i$iwNn{cEj2Bn(}K3G9L;ky}FAGL#PK%R&ca_M}yR6BoX}A!W^!S@H{oKXpy?- z_wi;;!Lp9Q!j)THU0pQ8ssMA)T}+QGpG{9Z+Yqh$hh%he)zCw(nM_N&(_dr3RIG@e ziS*due?;53P;5p@y-uo?3|FX;gCU~i&lhRg8CU$9{a>~0{2qm_?;&&oQ#NDDBrZ4o zBN3#T;I%r3O4Hq4ec<@g8ijJE)7k-~UioqPR1>u=$i~~ZmOld5**9`*pWp-rfcJpGrG77_KkETe|3;5LQwFE6^CE z6**9yi{7d8($=}TVR;AZJax;}xLb(O*Jmovq}+KbuuDaSt_7c0^IS7IxcF1~mk^y& zyrq|$SW7X?5F(%5ru(J06d8ieVLdiEF0Zn>@aV3~QtW652hlp-7)pG8k8T_(cJ52--z_G!j=@>;5SL7erX6| z!%PO6CM8(x+mTR@@Oxg-xZR*t`D}YjKI@C30IFYMTJP{gewK!A=&*2D2g}^gWVGeP z0LbuX^Aarvo!EtLF46g8E_B*4_Q!CsZq>0rvdriEsVds6dD$RRpmC2a**v9T~M=jMsBLl`k4UVKP|lCzJ@K5LK%Isnw|o4anU8aYmSjV6;R8Gm(KA%^NENS znI?zH>W!LlYDpIS7pXhB=WWxWm7`d)(%&k0Pil&bZ z&b)Ip-L2r+5U!5sM^110du+^j%w{P5He=p_Oqi zMTL8}LYilQKe?foB}3@Y^P}YP1ZYIekgBv=^J;0fK?#tiobc4S=xE@KO+jHn*PbuV zKWCiX@CI)!Xs(w1)1qUCbYyMOG~>*Nb0U6Jqn$8QYdO*31_m9p^A?E0+#=lB3(c0Y zqK~&2hMz- zaA^HLnbb-jCn~oEvn4PHpDMUE${Nx4RA@u$mlpBVA4C!tpPe4O}?m8sCWKXox;hz zS3pp~$FXR{a&X&>QxzWE|I>UN6CNKg4`s%XMfuk(;{;D=Aijr9N(e?$RUNh8F<6)U z=P|J37SRaZLEto@7m7KatzQ44b$NH&{oFqL{5h*LQ&(A~l|q-Ueck)iy}3RruimGM z3(yE0$NAAg$A7x*nd4^}h7nhvSo^payp$T@S-usfzfHD$kB?3oVYDK#gygP=3OL0u zZj2CA)|+0cm1PElC+5y!CpNMSbZt3E)JQTTPoB=r8F!IypMf+>s+9bZK3jUSAlhrhu2!pNbEq22i*!1lav~f9v4&`rh{X=8GQ^ zZsuMEo-7o-3G`AEk6>NMg)Yt8XhwS+aBg$}_n*(qz%bEopU@N%iA;t5Geo?fAWA!J zADy26>HPSI)%p4PwLcs!G>e&oqd&M+%1%WK4L9~ijq2zQ7m#TL`@1n!(o=6awzXBx z8JD=S0qI~)KRi-zfq~ieLq%F)jhy+>hert${#ejcENYM|m@+KnIC~gLgOT(UIZPc; zX}#WOS19LH=fNRgH5ytd;5$ZAfk88uK9LD=z{^VNJ2w-8g0`Wwqy3wBmy!Ggzwcd2 zpR&;mm^AQCBL%ljU9Xio$3oL;74Cluu3V`zUd5qS`@|>1~dS+RG;cO{}vt3$ied?^y@o#+JOP?ZRCi&~oQ^vLV z(ot}+LDgjTnI=Ee?@(BBx(q3?={p+aNK}34-afhKa;3|1p%Di(MbFBHhK+F4*!+zD zSKzV9FJlq7v44<}v=nPxG+y|R?iAXKm7h(SmPQLjQz0Dx% zure1;b&SR)WbUT{;^TO>tG-jjrEY8gwKrcTlPE2BZxxf0O!nCDI|qW_X$z;LjT%_S z-qz06I?DcqX72oO6#(3pecsl>ka)KnDaBOSK=nh8Pslj>>DX5`Lk z*KJGB7e+ze0Kxdc?f*SJzonCMaSqnq;XMPx4{%QJy7LrX4v+$P;4XXQzDizzA|@q8 zvocVjY4{0=?~J{;yndD#Bo*p>yf|{qwhtVTFL-b0vpn{AA3rr5C< zgZ{>))sZTiQo`d~glNh{$F(4u$HQ0C9C5XXVOytnB$2}YlqSs4nhArAFc;=or-LG# zXc(AJ#I*9(cc0^WZM&W~pxLn;@CV|qw3zyxTkaj%1B})V?9f%ePga6s2;VTHW72Q* zqjE9~*wX*)|NM$0_HI8kLPPW@yna4XxhYE<8dbOrfsS5mwtl_}C1eOFD=dA6t-tu@Q;4_3gJ?(SXJ8(;IXJ-o zkfC!E!%0*Lhx!T!Y)BV2ZFRjns*_s10&X5}K%#)NJaKex_67J)^q`@5$d-?p_-C>= zzR)tQQxbg~U69Hkg7L8H&#++6phTXJf}*xEiAC<3&h7cCFvnh*B&aJo zku5!Uk}4)SB}tr^_rtOS1cCKNGFFWo=O_@fHuCXJrq{|HbyLq?vI|xG+GcUMd?$C$ z-V{}kNI6=It%aEQZb#w~h9TSd*-4aq2lZ z-HR{j9z~7MUHQggeGs)dklwTnZ$6bBEPc%THD(ytXzg9mZ4u%aK4{>L>en!u3#A6y zFbXj5gsSXK4_krDq2>!NOT#bJ1pHe_!x&7UFL+YJye>g8(xle!fTJRmbI+;eAhw!i zKT(p%3uL(o21kH|piSy(&92OX7%h}|HLc4paCwfvMD$$6m&x_?#m|fe7V9x1Uc9zZ z{l8)5Z6FyTzn8R|Q%)QHsB;bXO4Owc+d;i~24B->V&_vkD+g z!pD68O|HNt)SSo5YXLff*e|K0?|4Jvm4qT=SF-O=$B(BMa~O$!M~MLI-ztAmwd`s1 zM0lKvHN3sS`ocl^gAI!Ufwe13B~fXfmQi5c7~uLzmxbs~yk!|;1~G`0>6t9&Z!0nt z35;mNx!y~k52(U~1VX>nZT8mR_#Dj?9T`6g0;b!_;e^};DpA#?t-YEmh4AfOkd5D2 zx{jBR+J|>@SJgY*Y0_?A4#BdTR+-Qk^{pLQKdmaT z(sX%HfZTS2-e>}}zunX}!%{Kw3!BwzoWlz@o8a(RZC4S7!P7Ia@y9nEu=ak%fvkH< zj-}#^N$Al9C5jV{pwJTZtIgCIH`@AXjOkYYcgFSJNEbhq|2I1H{dIll@J8o`#g68I zn24dhxH_zdnAXa#>1%3pG+J`- zED>Vq?1?O_y$r2X(OgBz%_1~|pbRg=U||i0^Kgyo1+F5LtsR7fV|qIDbp~9fAi3-- z6(ZGX(nQmTZa!`Q3TvvZeTZ>?h9mMx{Tfy{o^g*GHhG!NnKs<%tq|Zi*A16E zE)w0g46Xcen@-!(p-^U9EJaI83$tsDwy^sW0=F4qf>{l{e*o{IOS-rylpCy#763&T4~j@U~fx(}}V$8IrkAWx-5 z`mh*cq2<8S(smOBpuRxZH{MfJeYe#omRT)i3d@v@wcmNlmU5QNecgI*4WjlymnuDy zQ#_>bAa5_fZjwl?u%uE4`vq730QGdKG~_2Uz2ZMD_LJ#QN10tZw@H+0ZE107foTzw zp7BIhmaW&^DxD0>ff(nF{c94%K-10qGg>@kY;Dkc&zZ+gUiW3r3p-V zWj)=cxe5xr1+-(HLaC(Z=T|M1%-?uA=-T*+wN?IleSAU|1Ks+pEK`8pyE?yw{OTtC znsNxws@V#^aS9=MIf4f~h#XyM5o)lP@}cu6Pf|yK|I`C+4t0K_#)4QZ$7@Il*vox0 zy}9+`;729DG%cPECJ2CWB0ZjydbH8N@dPlFI|jnuhdi7)e?)OmefJ4`gKC6YFpou^ zE*kY2q*Fhq+)*=CIuEyJa6@Ip+Z57`YMCO{c6BP1-2f>hF~^mNiI6E|3j9PLdpd0) zC89+q{Lx-hjzTaAuh3`;d`Y&AI6`^A(d?UXbi*I|0cGO;m=Of1ly;YCUF{NW< z@%mJ9mfD28HzLim1y2%K*kt(fqOXFN3wK{P|kwxbBK$DIR z>15aMCCO87-mbshrp-bF7Ik8j=w(906fQkkjcD13K;gb|?%hq=Kqt1o-f)q+Z5dHd_~71pQqrhqhI^TKz2``_<=+`cLkiq{Pyu=^=mb>o4=lmMW&WJ>p}LX5g~*uiKub(8_Yy z1qMT{=CKs_AY%ytU=D%FZaj!JACj!IEy^e!dk&sGW!)^*r8m>Z{G0Rf{CWApvBO;V zZpb0|JXpJs(l_4Y5H$c-^Omqw3a6B*T4gv>rh2&ni5oixfo3tfOlF9r++HQ`p<}&NQvKzTaxmI~8!9d`fh)bc{ zjPzM9&Dy7A#uOjNKJzg@F{a`y5FK5amGuEua`b@^sC8*3yiY3}Jq%z2;%>S&Bhz|) z(yKRL7YADdkRF+*o2Ubx;ZrpE)kyEw@(`WcnCzJ$8qMHUv6%Y~? zi%X#XhCP+i#>_AwZ?Cd8>?6Tc5i@mq#~%*jBSBAOlK2xzk`LPy%7xVXeO4ywCXLNIlS_sHvu zyu<%CJ^v5tZ}fDv^hMr0Qh>BbK5||E?WDbJEk0FTOpt zL!Tvz>mkf?Q6P~EQU*+4`J~mfx&F7}=Rhf+-!d)gMH4_9SE~6>b>0TIEk3m8c@gJG z%3}f|C1Pz4@^Urqj?spc`(o{~fo0{~IXQT_yXW9xB^~`^3tF{W0OFSRUFcgZDaqEjkp~|*B~-#ZkEeJCWO3D6uPct06v3L2`>?}~ zwz|2#1wbamQLV+$DVLX7mcEPQGdS6*U+rvfY`xjv(tE}efF)qN>{Y4roD&e3P9RJ* z)X8&WVRCO#5}lNSw#ZjQ)e1dYtk!)wk82NOk$IePk2}Z%2ovuya-w!l8BdE{++({E zJ->kb?qTLwIr&ddl}CvOl)r?fxad$S8J17cFi_7|%8Xl-pj9A;Dix-Bu{I?hl5=ZA zH1ZvXV3ogqy6!*oH+iOZ&)?j-Hs%{yQVvBFbl$wWf`U+6Wr{#NQGWxtI<40*#SA*o zK5n3aiKC|b-jH}IoP}V#H}vSZsq}_o4{X_*Wp+H*?va6g1d03Q#X3Q!!q!apw%CHx z(O3cQJ0RFG^~N9fQm6Ni>l7R|ci;W+W><$`69uiUvosO88mg9*ycq=T>XI88Yt!>; z3Rk)Z{G4Pin)gaUHWz))!=d+tLi}NFegz6wjv;5^hj01gw^Kvgep0vK$?Y|d#?Iar zBN*b~qHI#$*uo)^ov=b#m>Oo*RKZYf?Zb5`Se+lul*Ivat3qW+iCFFSnLDIZ%8@YM z2?csXrU&Jyf`^q**H<7OuFhqll zVHIMU9ccU?xXH7b99b-u zA0WMi0BeOd@XUsO+0sW-hrqyCr_v)^U0g6C^NC7;-om+%sCqm(G4~wC#Zf`Wd>g>z zFp$k)Ae9`?^SRY4wbP5nWoaQCJZXpcfOg)b%XEwlwp}Q9H(e*WidZ2-RDrqwLNe_9 zD7oH)em&x4JL6s}o0pP@mR{0f5oGzIYZSGT5e=CB$sJOTwd(*kg?co*mJmA(SX+Hk zW@Q2REDqYMZMMkEaQk1MHVKqHUNZ#fys z-TU#~>zxYQczq`;6Oq%fpjK;72zObvPM8$%_Rp`FH}`~Nc+;KvW_ov5Kcz`^>OC<# zf9|AIRm!aFZN1&yd$+l@zy0dX4_EDKr`ID}CdY?NF)myx8|d6BB_b*HET@oPGl$IFW|Dpa(qKEj5VsS>kOF5603EEspWl%vN3p&%gx z_d-b&Nt7AhCz46@6+ z$m^ws%9d_h|75Q;arWcv4k}d9$b8ZKcF-r7LkQqT*E@7n3C`~0;YJ-*5KHdV=lZlr zUDTG?dVh7^V(K-#d3VQMlVop*(z(I$wpB-6CoUKGVUH`m(>|-Fb+|cdthz?wb=W=j zW~_jw(z_%zFWpmFgjX9s9dP~iq}dC*~$? zT}8PPr&4>0lCrSgJ!4)96qNl*fk9M6615uoCAnRtK3-Y&q0AHMi($6Tk67+g!IB#Ln?L4sICe|f1u^sVPD z&4Qn4v|XNRNF<>%KB4d%@N%{^eQVEW;lLkj`Vjs{hk{8l0?s);7ZGkF+)3hN)LnS< zDO<^?ORSygKK9?3y38LLCVE7H5?X3NEm|flKz66${5br>7g!u=Nk0be7COvr{Uh|= zMsbL05T>SB#~YKBZRMeZcQfmEAL#^dCIS%8j%d%^L5^yLHDHBYw2Nnw42 zJj(fR$G$ew>nUtgbST8WrPM!C_)7m~kPknUuR$_gEG-ktzPHf7MC#F1^msQww^5PQv zzuYb|j*UtZBH}Ly>MW+Xo%H}%=~H%Riq;)GD7#NZ1I+MkB%J+w=cE zn}opL9JMWZ{p? z;rd5qAEejKepJ>B#D~(PHa)HJ$4QshQ8Sq|6}1Ptj}-7|Iw-g?CIH$GQ+aOWWx1G$ zDdD_VZ}vJz3iM1-k%Et4#RSwaPp%wv3n;oEu}IfR6YBg%Lvu2Bw>|2h(8S+j)Ghgc ztT}m+_CaB4lvYXt`OzjDC}-PI8g`gTu2>`JDuF*Sp$<;6b{@ydQIMunri%DL3Wjf2A~d<40ReYn~# zuRYT>Vo;*PdaDCA=O87ztaN7t#1=-VdLH{(&?x{Z#Eu%m(Os8}VymW==faL92vDv~ zpVC{_KLT)n-aiA#OseyU4mSwhV=>EOSfgysD|>LkKT>$1Wk>-A|ISMlkE%b{3&ui` zc#_$o{CL(;m5>2yWE@E3v41{@En*3gCRLkhl2GRDI@usb>cp{dPXfs%&S zU}s?Fv9)7ClGKC-8HmT1N1}47K`T1;$9vZRprJTamW+?a7hCm}|B-KNH!(Mq*11k3 zk&67iatjG*J@~>;2VXdwc9uAMS5~C37Ts75*FfngG(MO5;W&ojipeR*4STJc;aUIh z7eL_<$atf4Y>8!8(fPn#t9~7M3PqbH8xw$n01jUoI`91Z+pFBg=0# zaoWS1fHQA1W?mzD6IQv{%dh+;W78t@M9Wv(z4Y`w#Z%4*!wRzR0^x3}njym+hiy~rJ zR{f+noeT5gl$#jR>0Czhhzo?MvrL6Wb-`t1Eh?k8=U=3~SPoUI_kUd9+uCgX{SL@q z=rHekV885_)i?f;be?RD)~`r}z_`EJ-RtRG5_p!&FvnQBF%`yCL}5)2p>|W{7LAmn z0)AH>&LNPLK+z6UJ&82QJ|c^%4ae&>zNFPj4~}z>EY&-MUC|J)(d_GUZOf=U-mXkk z_puBotXDzOhNM79Jx_ga%t1C#^O)xuIK?N&y_MOywPgWO6u%z;#6CiG9x+n|T1tnF zrHoCkm76rQ^XEU<7pBc)L%=j7PDeYwT*}D&(&E}^Bx>Za4=?VzzlK!$E!Fv<(!3|D zTif4E@9%9`N!mVpp#M)Eervxc2nm~4-YOa7R3vWHh-Nu1(kpo7JZV)a8MLC{5{@~r-zkl5|)$pCyhs;6T}sHfl~B;2JQu6D3rw9 z+S=knMGuN)7iBc3vmEJQxi#nyePXfopP%rTRowZb>1Wg3tS>w7(Q0C7q5^!=xfXjF zbcDzybWvURLp<%F-wnpQCgEwiljp!ySA0)Lj6Pn}_^=XVzYI9?!Yb(46SOPB=|+a? zfLbaNP$PO?@~3}*hL=0pb5!vanXFRMl1rLEFavn$(g$p920YpxUtoK?GAo-A!pVKp z)n-V+J!a&&xg0f}Br>@A+{Q?atWeK+VrGn{+G$j%`8<)k#yS0yv!hDFw204JL^;%3 zPEE8!@suHvE!B`jG^wS?_KfyTvg#^ChHEPsAz^Ya#6n`Nd&0dX?k_4N862Hjow2&k z4-#>eq?9yJ>8fNmCd?o+TyR_T1N9WjqB>2ae(84!=%!eD0=Fre^DNW$=BO|k39(=B#F{DCOzk+d{{*1x+$P1i4H zWus@FPmH!C9Zu^TBpf%Iq|5%fy+l=b<&)PKE#Zg-4sw?TO=)68^T^?fQsxg#X_~ao zQfk}Y@##$Om`PqF*2qIzA+S)Yc#)1KsqI}-4Od+XinDFH=#7afA8S=?(X&m$=@xBk^X2M!0JOlZfvcmPOt7}lDtoiJ{xY_#TtfWrgR9n_@SW^ z4=N2DTzF!kiG9^c)f5C0wH9*v>?28ui5X_rJ{ZcpNK=|LS*bInChHPmd__KMKB^?( zbTZP50lgIEx7wfmq2hqbNIY`{+NX2AuT)4pDo6L0wxFwoZku8|ti!=tV;qSV#Vf5R zE`lXv^BunmDfY|&V!x?dkRec*-?(^sPM$ekUyq;EhINHNiPm1C;87P`or2KLRGjEK zJW?2{UXm09R4?B5=t-$w1Fax!2>&a$&MuY|Py)*$HQ<_$7y&^n9wd#|=gOj6f;rJp zuyt~+^gDZrpp1o%0y7Em;LND&yKh0av-@a?j=yeGPwe(=M6gPDwY=^Hzp{ir{UK~= zG=o2&gu-=B{++o%R>$fW-1+g(1##brY-=J%-_;Bw81bnrB*c88X~xVEbT#vPYa8^{ zT@8UUG=l0-x!#cScKzLti4;I_U=tvf%;L(!bcLvc~H$|k-<2_NZCz%C`)nPJYOSfxgcAR9ViW| zN+7dPWYXZHL!mz%#P|F3-PzOhpso|TLz-9rBQ835O^z#^F~T~KhSP!?K3RvSVBdbX z`*!P1MjytPzw;g+o~C+_0&=fEQ-@XVq%79+^k*k z41{Z_!1I%m0SD9(LJkkvxoHY}uC4cwf+~?XCEs$pi4sA`A7+S8GlVFQLy2>rh4aP2YsN z-NW`v4C`;h=|qC7im=7dqH|`)+&p&A!eVW%Ydabr0biy)RtbJU-zfG7f)K2)T%@BFfXyyQnk21sGTCD zQ`JuiMAsj(3d-T(3VJA$;|Y7HTxm?!pw6nsV7bUU+T1GQi};beJV(_LI@!2}6T#>q zVdld9i$|5M3h%4DqWngU8@1fFKeIQvM+h~c^tvOqT1crt_2Z37*Ff$ka2V%aEd<=b(&T1OO>23Tq8!n#FTu&BiQVH-!sh< z6&wb{&p%-N|9yBsg&HFox4gZ(C3YtYK-9{uE1koU&tp1)utJrdn6e@PPO}_jN&&c^ zXiR^~iaF&DCaTm#vn$I+4U_ND*wE9g_*v$LzP1KJVxM25v{ zuh*Ls6mT@MR>b=xu9DVCD$K;S=Gf4m6l@`C3IcJ6^oCi()rH}sWvkzSFkERZoAFOq z9I|Q&P#`bO#zF;ZlH^Fr9?*N_5!4gNV0q+(tE@E|^P}RKQhEKHc!>vwa1XIZq?f1v zgB33PS$}T1IH0`5(_@pEnRZ9*H8%LQB!2)i)y; z`$VBHIC@ZvMt))X(C-l5cDjxdCp6o)`kzwT$p#Q&PY!{b%oHLVFKJ(#?)Cwv$hp>I zk{81UvQYBadmuXRtoteMT}{LD0q^3KcRksXc`C$3eV0pEY-iVU`LH&5tSyr|16^qu zSt2q(m{4^B`TG=vEKeqOx*V#okl3fJtfT(2(cI?gpikn{++Q#?G_lW!gv^kZ$0nbk zwwj68XVos=14);a9M5_Jz#xxEajKhnF2OUxc<(-?PiAB~=Ts%!r3O*tlSoWtAWRxO zWYRth#Sh}~Qx}L6o)K72cY)+Ti03GdhRGpD(YjhE^>Hm!WCUA~eX-mCcjoBm8y6}D zl^L4#0T*&Wj5R8_g&=9B_RTH12)u!C0+dk)fMamL#CBxw^`^H;6U0U5%MTXcTS=_( z^=|*eZBK+P{O?oK02xy^giyoM?cj)*C1UOR>FlLd@8`-?*N7!_8cz756d)i_An&-&iUSVRe*HBDng) z%G^Zet*%WsbZ>TA9owt^4pYwZXJ*VZn^dYSETJo|mMZHW9y6OW9pW*A;d2#hK&liY zlg=Nc?y{YZzs2N|;0y{F89P7?(#9R0zUKn2$T>hrC_LZfm8kxT3I%sja(;9>q}wGK zS*6)RK`50XL!%Wi;f_v-`mgfK*Z-YmSYk8}1vJLKzm>?j4#nP1jvXLC!CCHhRoW7Oh}f|&>-w#4g>m9K_<@@fc6mnIvuCOx7&BaF z@}}*6iZkA0463xmOD-k2;!$3ytfL|IV&lZv3wpydRk520E-&L9$6hCpM=&em9Ahl) z$T*3fxu7Q*hfP8*Sno7fCW?Y6KI#lU>RH*;l5M3uz1ktew@+Oe3|&?Nv8b$aWOrts zK?73VvwmCmFOt`b1>%$WrZGBeldL$Eshq!8a|wXXpd6Hm%9(PTq{&5p{{wiKW94Y{ zUzsGF=ka-0x0<{c0p|Ezn><*@kT`Z_atBnhqo>HtOk0POU|WgVY95TAVILCwrw0+H zv;Ia1#_m=wGA2lDqqY=G2e1HayE$qKSkny0Wxvb&tG&tO@u0oyI>Vy@*pb~ z-I*T7?=@mprDq^P=7(gpGnukm5KdDTM-$qT9DKxX4DS3N2cO_tk?v5<;wq|w`|4~? z2A{^~+Xh6`>7|w)LB~2sD#Y}b5qA4XHnv$To<4fwaX8$6ops~IHesV7JUz#ro=rFx zch^M-xU&uwj~7Jx*{#$uG@Fd?PAQiar>3iK(f$;F6?h^u14>fz4hjq9WiPy`gvLwf z#-Itn8CK2i!u~QBAYxY%j)4`K928zr8aJ+hCW@;Hxo+n!+*X|F&6qEnt?7fh3`eLd z6TJiWg@6RgoOQg!j^86IM0~eO_8@*6Prq=M%luoDt3GK27bPtA@&5=j+0_Kj%ujU5 zn!;w4euV(qLuXx!35?#K2L}jVJy6D@B#yb5N?$M*5tnn+>OW^8%^xpQuA+Q81E5^SOb|nCSkhtBnrO-*F1G*FZ~4X|FHUgFgib- z9Gtv|PzW)iX65F*f3*qa)8^vk?@oxb(j3Mfy@1sSaIT}I!+3jsWTyo;{q^~b)r{tMNoBaZG*|4{B3D0C6M#cz8#uV{6uZSwF?s7E z2t1(>oc)dZxVLq*zuDVndW{({_BczrZd}c>UOcNvi#(OcDMX~af@Fs_Dqn^2H-pHoAs*u1sj%s_!vL@{l(ywKp0D0dpZ&^jvlPi&e%dZEQJ3gg9aXZ7 z>B4bVz~5>U?3q+8-~9{cwY+K8C3G4HU3Bci#Il8_5U0v0Fu8|J;Kg3N-husqCY6h! zg3K5KgV0#^!~#HX+^TXccucCX)Wb7)&EFzxmn3jWyU^QB6z z%R9wamyjp4Ml6ybsZj}&U~n8MdYFds|`=H&{F#`3w|Ocla#J% zIOSJw=wg~rk5#Fh+{4m^;<=?Ywh}AI!keUYg9({M8Dq7G%;4$ z%`ScYT-x#+yw9Qv{hBF9p=UMKGy3XV;FxKD|CdF)#7u2X{jf?-&6Z=ztpgUqTpb4? zz?Tby_&vh@W3Bw;W2}`MZ*@)C5?1FQ)f>SVpYr-6Ooqei-}&&axKg?+n`J8Du(GwkIqdcJH`a$6!(Q#%W^ZM0Ypb5oF{U07GX2qgofw^1 zd+kGwQa^|&6%1Q23or*V><8(7oc*JLbtJTMALAZq8w$zdXwGgjr_ChraoH$&uI@c1 z#NeOy3Frto9nGh0$s-#RgXOnuC`X#4LQIK13|#j{06V%oz)6l)S3Cm)fOWASTGW-! z5XqhWD(<`^e}7axC3b~{4ozh;3fv&n-B~wxsgzPDW>&9u1nJHvtvOg5TO0h7Bzh!4 z{YJ*}Jv=9v5jQil-5@jG9ivq38(aOY)vXwz3(s)<*@nfwVmrxD!E^e`FKJUhq$M$_ zIf4hi5Ulapv2zUJ#;55+W5t6{uB?n-6xx%H$Qz>m3;v_yuAl|bn@vi|+f~s+O_cuN zq>JR}_xl~m;1D!7ptniZ{B#XNr!6`v?UGEaxZ9jQrz$yeJW3wSWWPmLqjecnlw?3H zxk6zrA%@vi`Yx+~b5iAoIUW$Fxxz-8tvO2=!#We*_)j@p!g}Xw+GuM*j0J0zqA_b= zLr6%B7?|6tOVVZ6=Q(oayDQfy{7E2tbp(n)q)z^XM3mMZZ1wyAvVg7bjH{Q! ztLw{@OUYe79(g1xnG!)+PciH@X<%_YIdLmT-7++hE|U7XeMDxM$+?j6gW!z;a&X@5 z##BVyQ-_iHBd#ejvU)OJS1l|=(#&h<7vC_CDA9yU9u^`@-Q#3f5a=|}4HQ?oX3Zrk z(#a671kjIgYM3yOvGW%N4y1tJSvCZVoilJggy;_H3W?AhOQ@b9e1N2LFI9#r8I=GV0({Wzkas!@S9zu z+p%p@?)27rOqq4+&;bcszA*(~l75eu|Ms^#cFTL!&J(}4B9dlz?7WKC5Xq+)Yl$yP zY9>(o@ce^p1P(*Am9}XjCWa|MQ*vYj1lCwX991du3@7A*l-s7;E`|)jN%zqpuQ0pM z&2pk=HV&LAs`bK)(_F-`3cHAXhC|ur>#H6KO|d_LDgmd%d2{W`R@6fC6kAjRoIlD3 zC6l5wj=}?RiGHUx5U@|@z^J6BR?T~6$h6U%%FcN6^x=~iPvxR5xaAEd3u58fa6i{S zuEAI&D(87yzNdJ8x%Xy7IcLSa;*BK4%%{|E4oS#hZEO5z==jiPw1mCq=l&T*>Q{}|RYJa7-ojSp3C!H{<1KE+M2SR327mWm@TYxuU*8VBq zz)nvrZ*zFoG532BD?*=NUkGM7sh&T3`sU56H-&e$vC-em-4W*o`Q55y0Cuz!$kcdL zXm7#{q^~3fQ2!zAlWl63n+@o>fg;)0&BDAfu6>s-uih~OJ~l|aqGmpJu`KOFj0bBQ zFh7haF{`VJGvqFTEn>^Or%hUswBeqK?Y6G-!hl`jrREKPEdl?vsC3E&odc zN=g&1qnF798=F8M*K{44$bJZotz29!)5bD&k-yL}J>K7Y_HJkA$UWP}%`bb0Wd&mst2Lzl)g|tT5OyWoBuwmdFISv&p&{y{ ztLS+>=}b<*KqvFsULR4TjoGO_%M>a`akq0u0w-ChnWib%zE`4mqLLrzra4UZKFOiQ zNV-Cd{Wz(gn zZVxwU`yxV;dj3F%)}CA%Y21e+&akOn4&l zAT3C+vbDXwsPW*)9BQkulAKQuFu=A0Am=VMw!U#-ePOw!S8hq1NhaaddA6XgKb-RO za?5T)*m=u7_^$?dibq-8$AUN-P&?XZ5ivIq4Onkducbn) zzgIRPQFM4!80JFUIP(t2zR(srhCtS#DJk@15CVh7=4q7=VPUtl!t+!FH^QpU5cl{tw$ao3^wRAPUJ~&z8yvE&zI2j;Q<@_!v z;@rojNI30#GTsyk_vf({N?aKO_!sv4w1}JE8R|DwG(zS0A9M-)&Uz>5G>yj~MNv1$GTfCD zC=nI&m5o~i=$Oy4KxtKGJ+;-+O*_^blS7JfE{msSR3xq4#O1?q%2A`>VVT9WVFB z(@b3R>z$Q9q19JKhgGjcg&tpmgq4FxD5r6nHnvwc`WE}n)0ZCI7!3LNyCP*8l*6!D ziXWALC0Q22ZIDN*)ja+5y!`ez9WapfFUKFGSo$KhTcZ$P>FC?`?0-E3+*-}FmuBoq zFWU6|h?zg36$UMJ01Z=$XB*rm$Tq1^N9@nJQDyBgF~3Snb1Sbz-23IRhevjvKiY+H z$}L6Y;`f63wQ~k73nyi89{=@et*NWm`qZ0X(-T2Q3uiab>U5tXfiEe@JB8d%FQAl&z3yBuxbaXuMvMMP%?b+NM_B0Q8yiE}s&Zp{WgAMN z@=0wy1cXzRRI#0teI9%oS|`D7)hof0F$S48Z5ZVtW@A&Hd z>aX@_cPz}}w&BZI!O|A~4#mw`M1cnt|I-4wT^$VvMDLLi?xP+qdS)EOw9%Xy3ZBJU zd)t{2w()l`#>y#4XC}ypR2)g5<}8I2wb|n%ZOTMZM0mm`>BC@jj2&VYYhhz;_cmAB z<;v+XRMA1_LtQA<)#u=j&rcN;3ppP#|K#+3JH*uWR+9EGlm0t)b+yaYGAhcyzVn-9 zZ;ia;B|utSIUR~DGSg64G&y_2E33h(`D+Y=3MX~xth#*F#f9!lT-(F>gN9)xS|W|fHV_dNs`(A`TfO}mBr!~MC*#r2Hh!ubteLN31d-PA7u2C7 zf^!#_nm_VxNH7gZM;ly zbZ|83PR_>k*y69Teu}$F0T^;b-Vh_UkOD64HL6jOhOlG?>PhFX9C1~wd`nPk$8j#w z_DqK-F`4=`FwQG#<{U`8xKSI4ZV+P+$KcE$_%W*DJZ<+@R}+Y4UT)i_yX+Ez(e5>8 zl2<2+Tai>Zk}H{li;8E92MsYSMyHm|GFllB1Wwk+nr~Xv#Dhngxhwr(P)xdY2 zzkYmQsBLx5L3ck<VJ_lksS9Jqa`_gne|7xxs1{>B#Cv-O;tuGPsBpklCqM;oLZkKo!F9v zCh85B?k-6ga4g5j3SKe9+7(54ngoW^#LnZ)Df0}K37(HygUc|q=HQx~7`l3JacY|< zE3E$MXA%saAJN&;=%m72ePzYf7H>UR%@;m}ZX~T$yX1)7u>jc5{|j3(?-VYgB6j3M zzOqK3zymO|rAi4%rU2tS=ImKYy+jpVj5(TuDFk3R&0fmg`y{&Pj(s01a4@L<_E)O- ziD!2)LM_gt$zCwT;i0|F#LMU&7-@VOD9@j$-^ZFPBYSNxrdxgc_E8@I?#66MWHcaT zQn36(ySipoERjUa?%!WLdbP8wEqs0c2~Fqpqc&kC37)=u_-N;8`rU)w7Y}!Ks^$8a z4W>oWHa1l`8yPvJ?R6&hCxo|dr zcOLHUzJ>@kB(R{K{lWg)TK{kbPiTGPXm#yib#wb*dt>Wp^#~Xj&-@u13z&5u2n4&N zv;T9y1@>&d?xLl;mq!OH+v~sd?ycPG|Ju32nJr}&9a3+LrcPwE7|sb0`oYli{Z`qM zxMU1TVD7P5r&U>0ZZej!*I3(SN!3a9&D-x+D>Rv+1t3by^nlB$0BUaZ*H-Yu zvSji{+A8G7nL0BclKj5f(Uv=$^o@WF>|PPLrM-2e%5|EjWbf*7G(05~Exo4~QziDo z3+k1bnJ^!Tjb4Lv_*T{S`*=WkUKH81OeglSXnJ&Lt#py|Zmpl7dV(g2*8^3AW`QW~ zGrCWoiB}us;o$Jn{yRE2n+P8%vn<35``O8h`(Bi8SiY}i!R5LvOism<jJSWIO(C6Gcd*7|7ls|(w(j9pF|t_?W^6ldoSMYynQYf^ZzL%b`k>d*4C?W z=gA&%-!~86{C!Vq-vmP0WG#OCC-%+xAL&p_DOy1cT%UGp`n}7buGP7M8WYY>(m!Q` zgwy1?t49akp$?aJk9ac-w~7zao!m8=gNzO~CUj~?4CYZS@#>=`Xx&|?0h6*=uwrQu zck`|cfz2sCYZv61S0ko%R9n2Boh}>ylJE)C_>r~qu%s^2 zX&v^|>^nts1Y8p{0}&2!DS`QM-p3U0@Gh!$a(G#tDO2sgXfxfj0G{frB@^`C#(4zL zCon#p3#Sr~D7Jt4x6a>}&#v$A9T#Sah6k$v`%S`_mVLr6rXdU#S}8KSt#X1fc)QjI zwSST|+;@Zb*Zb8Erz2$v^iOf(wpKT{V8Aa&Y5l%5PV3$5Wm3ez+Bqo)mxa+Wd&C0Y zcf{;ZBTO1v3It2$xQ56-vX4DvNRLFG=z!x)4k+65c7G8>Dbu< z9<}o4$rx{tLOE)XPJj~Jd&Mr31<_J-o0}`Hs1~yLJZrsPxOAX$lp~ny(yf!V-kimw za)Oo8QgKN?W`C`}v9W%)@N`;V*wQaAy-+hqwX8iE4laU4asOIGf7XQIh{%B;3U>7V z_F_j?{^?PUHUhc3{Cr{7Mb_(z{V%n{RGh(7p9t7=d{Heyk>5(_IMt&Nl!SroB!fFu zm=&30e3tD^+Fyf?XHhHL=DcZdfKk@7j+67PY|S~Grm2j&0Ycr<5VV=x)zvk1)xN0D zXgQA!s$_Glf`l0V3va}hKrW~xXX|>mmYnd;L@_iXk6JFpP-%$saLYovMK`wjUg<&WmHriiq? z4J+W%i_W_pZv)@qpX^x3E}#nK-zP^*cau3YVirA4 z2DU9#Rek<^dVYb?sp(}5oQdKEY-(i?6+WO*LOUaLo3|OhSos0QL+p;JjfMERY{z6@ zhWC^utUAP89;rrFF$+1zX?e}?1gk2unZjAz1AGMiB1RtZtix>EJ^JxK|97iLnJJfx zF=njpE98T$XcPnHa9mw(fQ(4FpI$kESx7!8paT5`{25&AONMDsSkd`vfD@+o7Cpok z>RwrC4zVI(8)T1fwTnRD{U#j^zoiu&(!73pfgvKto}z3%k-T_#%i+czH*3Me(r*94 zL5Y=aJP4>22ggINgFhkkkdh+t86ky5Y4$YNSh4!C*3h}xfCHGdrgIw^} z8~Z@J95`p)Tuv+_a#ahXVBFwR{}zKJV{oyOs|3PsT}(<3f4{{{g3#uAb9mJ6tseIG zk2d>9n}^#QM~5rD!bV&~(9W5JQIYEX!#NLTP&ph^g zUcbc+svn&mzrMPBczHPx6MDU|wtsp>S$N=Hrzb))W;fS{F;(xx_Am!Icceb|(^~lC z8ylOrm|4Up%22z}ccKmDPdC)?mvx$3a>XdzW_#wL+K8W6|4(TSBfGG0KT_0WL@7g+ zW%pH)lxRlNl4J=+5|Ya&Kz#+@JbnG@&D$qWcb|Xr(%KEmvQ+t!xeQB%^^#H$O%{Gi zQ>r9i8cs%rS~xUp6Iy#If15URc^FWkVRfC;)Fo->cX0(!A~TbLk$Brk01ZY^>NoN8 zjm_Sgbtz;X<|0nD?ZRzgZjX&DMb%+{BoQ|}8h?`1#c9^|WMiem$3NDxHx^E{n_4BY z-biAE2^@N=ES;TdM>zaG8RVP0AQ==2R+1)62nhLD$r52k@K}K}@jc1cD{pSxGFHqp zktsI0z61tMBFEKQ;3?X;Szs8Kz@xARMTlUgQ0kf<+dvs!N*Nf_WPHAGX5R8VMvw71 zAPj&!nb%w8^zW1B`7NnM^hU5Jdc^@{^tX-hb}H$`@O4gkh?lo_K&=R=R~lnm9M;l& zE)Q+$?Pzy6@UPxHZLF?o=yFmu;x?`?uJ<8T;cU0^`4Ah2e_{94xk^sINRJ(Eg;QGI zKwB|O%$AH=E{cclfbAn#WfH=Sa_v;3?&3f;a2p9La*Gx);E&1(D`*@WOd?+wFE?$T zKs}I74PGDw=RR(vfDLGd25MiucPWb9zx_=i!K^gPr%C$%qk4FLs1sE^f)tX7;dxNjM0j{c zK-tPY#d7fNs~1l-p?`S(a`)|%=Wjf!i&JLP8S!FK>k#XQ02rj@A)&#?iF&m3{J|dSO;W5Zi91H*d0~0rv7hzkv=M{AgRu(! zd2;qk^wJPIU6^d_td(-+n7KbYxV3iQpEC)O{_4!006oQ}vlUQzg{xIDd*N!+sYghrF z{vuOTzHGd;>=BJpX2|I|0Cw1xF~#Fs8>TRLW>Z+ZNk{^6oW~gmOZBI!c&ZB6_w35xwMc>gYI)~1^k>_>wf@R)O{HW`W{97QFYfM2J2owSM! zRAuUIr78tlOvihu&#Y2A2pj=^W??sVUPQAVf2==ltktLR-uWZh#~0zX6w4l?*Nw#` zTMfMJ0bT$g`{oyF@P)otSU!zuO2oLCpWlD);= zB>zp~EEpl#mM|4A=+U{)nOWW~HnB5%=a1i2)+~5Cg(_N_FzH^|SkaJabb)zEddW6YJWtB5{$cco<;SmHym)x0 zzBHpQTICiFlwE^&b}6wawjC0Oaevi6{Lk?#~YPL*f#5 z(}i-m3Dfw^#<(Tq$!)x9hK&=zqXUv9Hce76$&|R`k8mv&z^Y9{kx?J%Jqo z@|x-eLZ5I(o^`#00ID4-POozC#8`ifKn-&^EE7PXN1yulCLix1frXZ_H_;RAW{Q)} zdSBPDDWEH@Vd7n{sa2m0M%|wVU0N3Fe|s-f=HEH^q(E;zk!k9Z*)=&(?@&ge8YLaL zAs|99rD`Bx**Dd~v|QWU?zYf8&A$9r(c?b4^5Fs_V%_GgU|z&1Uy1*xjyqUv8BR7*=d zFBye-BkLI%+Q8ZT>1qv`{K0RCaJC-vt`P$KZEZuf_*PC4{et{xs~c^2ofa>%fdu<` zA?eK;<*cuEwpQw`PM;acGM>-+4Xh6;5P4*2%M1_wJXRRHZz$_{y5lX}A4K(IYn|H& z1+=f8Vp7~}Hl#2Liu(P_|@y!uN7a`QkG9OC{%%f zaVoYM{iQ`J07AxYR4JyM*tbo|QM948*3`)0GuY4^5C%mLqW2|bi~{9-T{Z2Q z0JtMQNRpHLR|$faIc}0n$z_<(yn@KxvGSF+R<^COW+4QhXR0>}%Whk}?EAODeEMJL z(I>Kw8BJCahQ_sB=Wue+#eGwoWveDS{@K+B8%2eI)-um!K@dhfGSuqhv?0j%pnfi@gFZ?7aw`fOZ zFbI(VQ7e;H6s|SZfW)TKIk+C3p5Z&y>Ro1k6k5Y~g6%m+B@2tGEo;jkdsY^UH~`rP zJbVHm376s^aU67%9Xhy#4uS8N^i;;MWFo;vl;o5Br4V_da>CVr^X}!|i-+Go-Fy7) z)5qUG_`Im;X5IkkhU^WH(_Mp5TYS9pyn+5=-Sd)m4MqLSy;`nnr#5iPuhV8+%f8We zuvz2GDI_C`PB(+3+8dA8^K`EB%H5G3JwAM2|9E~%NX94@;+c`7of50*nhAMdyXa)< zG6_;;YT$Rf27-DdUqSA3+A9jd*Upn=d|kEW=;P5{hS34U5j+Wp&S5Stt`Npq;VP<1tcu)!rdO^;LK9%Yu~P#of7#z9kvGNROWGy7K60!k7{ z5kYVmT`vovR}QkKxccmfl?uEfXzCi=r^K2>GwlGWK$9OTo@xVUaAGcd!Mo#8I{T_uaQoU+k3@4vXwW z(dEletCp6^HEMTQ5iZZfl2Kk}bCwsi(Y5)b76`nBT=&Jl$wcWD0n>&6=Ol~)16GaQ zbaV3{k-i$@s^tRC(Y~R#R9QC^`Mcy{-nq?7B!j_4RMPgTiq95;LJ}NmoACQgD&X0F z{ELor^)C)tYiL&e)11n(umAm?CR6`lsQ&YJSyVQfTTA@Ak&SEjR|U|%RW{Cqykywy z&Q$EXk6cqF__A$gHt-FC$|RQ*K!l7NPb4u;)W<;*<}OM4n52@T5U3xUtoV_khB)Mf ztI9zqO+_C(Ae2~n0PFGL&^{cm9a-K~)pPdxbya3y|9i_%MjXiMuuGQ(e4R{2 zX0w*n`d@*T>8-7nqip0POQtH68bjEtP||5iAArN*DH9$6jEh8A*Z_*P3f^PuN@mTA zh?D-T#CD>7&kJ2vjx3I~Dpb-)%)ZI~iI;;xeFDVECJ|eHS}M{O*V!>}0$i9`chsqx zq4HPSd`)*#xhJEGWH96CMxDK_N9C?V6wb1s*(m^mE}}VnkDLBMOB}~b{&KIQQt)4k zcTM!$ot?=_BpiS>^Ov2+ubw>p3+!vd&T&T>J^5e-c6S79^NNqhM~gF1I6!f& zkvR&@uHRq1)gDW*n43_$EO!(GO=XRob?YICb$WgXH`bLO??jh+{NaeizpP*jq#QE^ zt!Z4R2sgP|!F4;L&8$u?i=Z?rlK=${N0KMu0ziiAGju_gEeCeto#QsP<-U+lZXIRY zgoULoOId_jgMCr&xQ$`kBRQ@Gz}o!HBqp)d3>66Tdwp9HQ?W`1$+*%`Bm?CFJ zu{4nXVXhrjOW(bDs(=mZ%F80v^kOm@fZ?(0TZUtg#9?m4==X(o@tS%gZPKMT4i`^^ z)--E!qmTNBZdOptV3&N0A5gs2rr-Ne`^=J>`9NcwcB3hcnLa@n~) z*zfF;@*EAH5n^|0Ba2h1qj&3|(XK7OMUIs+LfR{;;4HZ|p#@1K3qT#%VB4tzBrvAdgGvL+;cZ>yv(J}iPK>l+(u?UJwbV)0nG z_QE4n(3s`Ru}hOL7KxO*L^hkde!fe{t<#F~h zHan$;5!!`uD0^%7sNRZ5O}gw+@d)`Tc3%zz9-G}t-XAds1VJ$az5e$4Dr^bs@WS`n zWoc) z&$b;yO;~PRD^dQPm4<w32UOa#K%@4b8-#mZ4K(qfp6D3B@4-!>1sg9W%AR#n^C~z+%U5P&&~VC#hg23OnWR+O1q<>1ZdU zbo>_ta|NgongMqXc-5HMnON}M_Jr22dK$kenGdIfN*oS*(Zy&mlCXw0fv4(}!k{oE zg}7JVfN58&RMdnUTg+qU$<($dYZYjZD=s8Pb zD3o&mhNCezq)u2_?CI8eVlj|S{&qaVFxRG#g+$@l@bZIWCCUf2EuHj!}AWXmG(mZv74&~lu`T&l_jI$)Afh|;yHPdoOqJg(XkXI7Kv`Cuz!WW?ir3T+>eylvrT*h>weR<8r{En!E>( zZeeeKj17*kO|Db>I$CQX`^@a|>Y`bXQ-3ye$KhKt!3Kk@Nmvru@K0+fpry-CYBJ&R zO7R?frqG>4(`eFtbU6NMZGB~vE&xdSuQm(<+_nGq+jz0G42X^w&tE)!((t#6nh#t1 z;3S?DLaNAA*+V;B$>+i|OmY&!=>73~{(U}x_O|1+F&Hv(y0dvskYga$uW~Y4KJT=` zHaSN^;P~?$xui)5BJEb-i=-M&)Ef2Lm72qeu1IMT0hwCJrIo%omV|b z=qO4{hzjpDra%z>3!X6?K?L2dXyDbS!fhq^Fm{%9`4GNU%HFRLm`9^)MP`pq?PUw` zjo9Ae==`S0LO->70%^D<4#D0A@$=bj8YH!epWiCA?^ZigF?8xNZ)H=p409pgV zT^{^RLd-6Y6P}8YiTYk1;5?lwf2KV+;O{mcgEKRx=S0BM-Q|YV)LI_X2VItMNyC7% zb1axFlmhkx<$mqf!%vj3d+%-zo-7&MeWk-2G+3;dUuYxBTPZzSSx>3#OSSDON-bKD zIqomJp5It`f;}G7A?#OZS*{Mnf67NP>vo@fKVLkB?}`0GI-%-Vw;&ba6D^R8qv=*d zW(BnUm?-#wO8T+HfAD~y~;2P(*v4io8 z)D7~Fj;(J2RdB~QEU=RY{ZT6BKJUYQ^jKL}qcJVT5<|L8ty$I9g{wH!U0mc?ybN{1 z+I8&WZ>#QJ$*pZca6;xwX}s#<`RBj=x8jM_vcY;fJ;Kh5lzYsI`4yq(a`Dm*-u?J? zfAnbl=@~tj3ERoOfFfQD({W05qOezN!zlooBqDJ+H)Lo4kBemt7)QeANTxVV`_#Sh za?-t%(zfXgc?zy^_`bEl(ioMPqIDmjQD|plSnh`Kp+;euE3*{pSMH!=r!?s|vZ)+! z`2y7FiB?pZ*z;C*l=LWpVy#MWOjeg*)CdqsJTd+TEBobrar5b|_2>B9UPZpyRF$D8 zZ+L2xYbg-yD}*_3>now!nRe?+2JgW$F9>NsFy8AiOlmV~Y)F8?ltr;Ws}(xo(9@&O zm83&AH;jxZcxmGJJVrX-0Yg!)=;V@-05FDgd^Go+arv|!0ynPF4A;~B(C62`p}fR% z!Q}y=m)++5wOe(WF)g=8VnGWjH%2dEuM8!yy$3I~&>*c?W35|uu>P=eZLJ?1o0 zp2qVHH!#kbiQ@W~(Ms?9p3-W+)(3+{Rk^pm-cBveOg@OrNHx22Re4HFeL{b5-V8HzRj%pWt|rhOLIWKDJre5+xMF<7TgQC3`b ztfd$&Z683NipE-YBP?xvB#O)&6@xo2FibMT5&=yk3p}1mewiQMiG{lX#rUx$g^K%S zr3RYPgA}IO?cH6?{pHmw*g{`Ep=k9lUH#?Z?(<#!MN`4w?T?FY1#hJSnHUj9<*#mw9er5cMt#i(Bf|) zEd66!qWl#E?rwq;-dwNhV9e*ww*aWMwTzqHu>>4F>?6*Xh2X1YHzC7Nvw)BXfQmKi z668#2q*9mVfM`GAh@&I*!Jb7O+d6(OcMk75UywI4i+fCginmI!G+l?vpyMQSo@ zp7i=Z9_}ANpNDq8tglWYyBK$CIS;(PouY?VS5OCcpD?e$bsrn;#noH8(mH$K>qi>A z*!#ISr*JIS*65|)K5^w00-To!J9{_@e#ps=s+pB>`2DAl*RFNh*1~Oc6_&;Wm~`av zFclFRwL6hKRwO`+D)c7|Vlv0-u#Prjj*iKZc14(%`!Qqnz9x8nOjo@#D!jn8_&uZ z#p}4PHHR?o$~?3L6iwnrW^Vq{4NOCT2pyoBKLI4TZ@y7-3Heb9;gh|O>CJ&Dcu`gQ z6Z!6Hm+%^%LF6jkkg&kzd@(3D)-7FUvlmn-If6FX|8}(&(?Q5F00NO&#uxJ<`w<_`-`CT4eMza}Proo70yf%Tyq3IF6xn*%^X^0TqvI=d^ ziZ?BG^`1r4_as0;fBO{lV*qi75l7@yzoifhQ8MN7w=srCY)S|64Bd+DO%S%#0OKd%ZQ%F!s z3MV(jBSZ-r(5ZHaHyPB*$Rqa zx$mAmd;YibT(=Zw$TQu-O|XP+{f4AO$h`gQvx`8uRBBzoivy786J0=b@v2{W(^6>%E=#I@jd3zR1x8h@dq#shLlzKBb8>jgJsS2IU0I#S-pbd_)sA*V` z4Qld7X#nD{hF3T}CXxN{5Y(BC({;R2%Xz9SZUqcW4O;$*w_fn2F=sd_|G&I%yo5>x zwJb|!gIioiy(w~lR=}I{4_(6k-KNag>(W@2m>2I_Rq(L7XbHO|^#w5?kw-$gF55iq zL$rv#Iy=Qq#==PF$wqPZf$RtBC{CZ<)lRvmB_;qKF zw`faKm+n)#htwcU=;oGqycWDeNyj#iHg3UN1yzHK&H5K?`x=|%3gI)j5RrgozP!p% zCqI?~nXT`}<1tFs9izXB+Ueb! z9h1|>9M9$vQ%{o0ae7cHHQ);>5zVHsNln3cxiDA&D1Nj_!f^77{QBNYDLZkFfjCnM zI5vR*5r>ukBpnz%JYU_~+|Axj+xbVre-Q{xMKE7j7CAp@XDb|DpG}U9y)oJKDu7(z z9x*ky-$Ks5rEQF~);nG(lh+`oT7@w&v1xd@Gc@})wT7N^OiarKmNucxm``Y#0B?I| zX+S8fIFuxgjfG?Z9Prb3b>n5f5p(#>(!Ae@DEaEe_Fk>2iv~*^}JVHcPCb z04&|kxV8k~(fm_nS>;GtB1Q!}XB;X;!^mk91{~0?dGt|D@v`|MUDbS1hViyGoAQVh z3m_O~-Q)2CMTm{9XLDyCs|wINV3s3l)OWV~TZ3#o=Jbr+H;=+~1pVaQ46@{~OY@D= zy|d=EsZ=<~vN%&}7zyh0U^RVKO1G$2`hpl>1^2?s@dw}8>Km|rzb8Vv`8)ge>d}`N z7&&ww`H?*SkXy3pM}yA>c4iq-R?PJKp|xf%B(s!*o04_|u-VTZcc0f!T1bVp_09D; z=ouG#^+X|K+7Mrnm*;8>nn7 z)gWVb64oV7Pkm6i12?vMx9#s1=1lq$lh66pf21KVfmQ?RvqhD?Z;~%kYwWR@syGTM zZKsg^yInN~w%YNxPyhDz@x!-!PaeK~XgfVx5!%HN#ep5c8^NN!woa2uL_T`=oSuHK zUcZHgXV=h1OdZAgwMy!cBbLujM6oEYNVi}&bCYs*9Y_*S%5aimCL1HEUj9E0JNEx~ z^dFTb(FC|K_U&GYb|Q0>PN1_vci50{bc2H^R}Y&35D7I2Mnms`&XUJj4zztJvEON0 zQ#kbw(>FE6TBL%0O^T6>VBmm_Ypwe_r7kT2n+|$YzZ#xXly(|aPxoovW^)yeUc8hA z)t4P|QlHHsU%kIdhoAYtA#4Rae!RZCvYwN%&vQIPYK!f{c2ARb zaB;yQ`4B(ULFG$ov&o!v{)hIu5GN3jMX=v)Z=GnRMdGU4q{NLbqjAmqA(#_7gKIeR zexv)I@lM9LX-~#ADabv2!AjXiIae-j$uFJW_$R%nfm^nLW_g*;jdh9PX$6@G%svtX zqY-A&YTYwv9!KoSqi^=~zukA=e8cST#x-$zUjO~=x36CAsbS{RH)U+fy1nY1=tP=p zzs^59fD_^e{yjO0!pe1o0CgXBor^gN_tEF8IL2->P%!EfZ2E3DdE zx3MGZ=+Ep6H1Fs`eaF&l0*WPoemJJS^DN=MvH&Q|KcUNYE5(VHUcod(@bmHblGAU< z!6mgoRhZIl*^+wwwZ2ugW}7L=0fRh;%+aQ?&t2FIaJfg+r8DI^SH4@d-9@WlW0=~y zw;{^>>J(^QItTZswy|XMt_CL_wvM2sI9)*HdVDS0LZKntV`s6XbOBxzu3HrybeQWi zY+N$l_JB`6+a#!ZjYToPkM*oJzmBO&FAENkSu?Pp5%?P)n(Pg3h3`(B_Nv;5Tg@Q- z=UN_+ZtvFby~^Z|-JmB7%d(KyW%zmFslV%&E%hdl1P}7jfn( zdJiVsDqY-%K25&PLN!LI4t^KO?dKULEP?#6*Jm?f={$d-HPoE+(UgiOB1JYB*GoZ= zI^yBVOa9~qS09OKfdWsp*AlW+p;81Bt>O#UEIuwz_v+S`O08!2o=j*BfQ?dgB3lR2 z0)Qgzh)2kUL!hdiy9!kE?QY=EZs zjDn=EHof1ikQ}f?sN`VA=x?=A!iU(UkhXg5?g@pow)q|4qQUOqi&8RSaoZg^B9S!@ zX(IdnhD5}Ar+~A5`EF-Nc~^oupKAi=2SerUKhK&sdnnpA`8nWU+O*$uE!CXQpHg6K zAFer)6cq5m9^gfZj{xnw2kOX-P$^@j(OFg;XTtc7brbko zDBo<>ty8`8aN)Ob^j|2Mqy2&_X!k0YE+tB54Y`bi%hzyIVXE5_9!Bs++r6j0wH{7- z&p-U4$|CggC5+1FzqSBEYrSpxpv9zl^dc=(b9ScPXMdy}A|_Pw(ao*b>hjL?VIYcr zvRI)0Iw2QdxEkICnffS7a~Vb8Vw%VW{JQj2$a_|3?9Xsl-TM1EwN<1YK+BHlueQAeS z&`8aLRRTDAkDBx9bnM=RrM+2iG$G2;9@DK4>&b1=8N(ai!m)EpbcV@6slB3+=lBR0 zoNz0(Bvk$B2tRrCm_h}xY>69ZrKVBLoUjW;jhx7>++w$FlcjHGh}au~OuYTWQT^l5 z$Jz-@%ytL?rp5g3*$;cKciw&T+#8?S-dvt^b=_*;{zDg2Nb_ha`r+*8<9m0W?5_Fw zsUaNbPMX2#0NfbIcq}10p*xWiXre+gEPn6fX=wN94zJeB@oJK&qS0Ci0;eeQM}Z9KCm-l&l8EQQ<@sM%RVzAm_!`7`xbD4%|uW+ z2xts{L;SK8eo~egXXzXn{b8urRJmj8vbbuHbLhFeoY8eH=dppk;BNw!`w4V<#){ z%tsIR;%nDm`#+yvI22Et(|@NJ`!)LiJOM`*U15jfK_Q%0c%^@Tef|EL$e`x0@RvYT zvw{7sqiS{^-Qa~U3LpaduGBy_Gu;d|^0)$KhM5rMPG~KnPQ3xjjBz?2cCo1s9FUX_ zK^9+e=$f4(`_9)sT%?qB$e(jxL*1KWL|XjvKzED7CbL%cAmnVdux#KA5IPws1DE$! zAGjA~yf{Te5&KvT0NGo_k0DXz*IN-crW2ge3$N+P^}R|IziCZ%YAM(drQEzVT~Um3 zF<@nDx}$pb3XvvWzRyjZuyRa+|NBr$W9v|3JZw)C64Pd~ zK!x+(Jc1}dR0vm-XdN=uo4m6EOhih7~yfJ-_je|GpC7HT@u*5b`X%`<`*k9MET zLfWS7Y};QeN5IumL{I2PfQ>*C5<`JNK}sR{c?6tV=cJAkVcRO^QZpc%K~M#DKVD3) zv%2{oY^|Kxjn8y4^sCs#QxWWitBSo;tl#V&GW$J}`y$YtFL}OHFu7Pv<-`79y#Hfu zE+$;+SD#fRQ<#;LgXV}^?S~Ny{NlQG_NrXJLCKcT<4Eyi-Bnik9zP7I8$>t6`%l*QTY3?CjKkE7wcZ z13CgHdr7vSIa(97zGi;Apg|Ep3UmC`>!&Zj*^yoemKUQx5u};{r);bY@#9gjR1OgP zHXT*Y*xO&-TX5}ShMc{)nv-NS3I+sgWYsek>HfpA7AoS#ahBuOypCPZxwZZ#2!|>D zQeRDfs<~J`gB_K<(?Rwrj1v!HV3Fa;QKvadD#wMhm**{~Vn_`UN%6j=Lbgz!a37@$ zAHPLySd~7SEL9je-yS)lIy7edbWX4%=kt?s*2fa2bB^uYu>A8^G311tK+Vc2cX&OD zgRiqb5Njs;{^aUD_WdrMu4znx1pW9;jBU2ZOk{@e>xz*!v zI+kDzF6+ujspG{Bd(IbzXae2u{tyzIO~Q86^rmkE??k8`iJoxf$$G8pXst^S5T+&R zUCtln_cuOPr^eI3rCZtqDe$?XCHn5uZ~j_|Cs=53(9G9N^n_GNpZZz;4W6sF+1r$% z|Bvb=kyf_r!wwO)>eUFB_w;hmj`Q3N6hICz-Bmy-W%-_A0&s96OisqbVB>Bo>43;K zh;m00c1%JFxyCw|XML^LBO!&RUC0jdR`HDpc=A=mXF zBPzhUpDJk#=u5XGhTpmyf__dkc^pA&DC{-co zg5JjVes8e0zjg!%Tz`H2V0)7a!T#z|Z@9X-Kipd1?ynpT`?hQH=}U&9D^Fw~esSa2 zV^I5Uklj*AP4XMIl$RaxY`RHlG0kU(hoW)+pqDf| z4Ys6M)%?>20g+{#T~e5M+$nvhui_4&?riPYlK{np8Rfw;8w{mTC_nEhoO!$?i6iRl zCb6Ez%tye(D>OAkxlG2LM9@QI$1*1TUc8eHgx+E=-w^|TZx!frcWX0Gb+=A7ln9WE zTZnl`L`tO1^0x`LnkPl`cOz!(y1S^mOuyizCsewqrmtL|WU)}VZ-!o&alUNHU~lJV zO}*o)r5u=>nLk31-VjAc>P1IR<*6|VyWZI?VXd?(dObC9p@d43c5o@yf7B$L6U}P1 zAXaI_GD};d^@ory(DYk1gbGZpff(6lf(x>0@(v)eZQ%Fn$EZG?ePp3_fX%?FVjZSp!0R86kID+=B zVb}o19qiNK31GKbk+!#~vmER*KWQhqNM&o;y(>Rd4w*7xqHB z?9Sspq@qcv-N!sl1WFbha6$L)B)XMih`FugIIczq}H2-rqDW>)h zndb@cmTQt7^wT3MSuSx)P`5$=f$S_FsU)FWC^_cmf-u))WGNM*yKvBz)slzqzMFJs z-I_y(St=*@h0Y;b!(voX5qjT|TB^>!grx3tQs=efmcwebzvAWUn0#!$xi_HHgd*yj zSNB&JjZk{ii;c#*Qk;M~fcgDnwHaKbL{k_4n}RhtL1B{T`G z;I-o2IcD7*5a&i;?2kLuli+r+yPG{C_ITN`{Nq^-Laqd&eNJ^_kB;Lf2(lrVC$fBC ziMNUt$XuB9)ATFMt}8IRBKfa+Kzf-Q_qla{=;#nkwrDbYr<<%#Lalqo^kawc#q-y@ za$WPiTN1#+E_t2;d1kbFDd%QVbMpT5LL2SOZW)18n=w#|PauVbsPNI?ntTumB zEpMijhSOoTrs}?Fk`c{L!h*HYNOo}>EG!t5?ux%x@I2=_ookxh)Z;b-+~;CIoVvE4 zLZn+0PMf!SlPZ;xy|2w(yaOd=xzzVQZp4kyp#pWv424RF1|t=q(@U&~BL(onPf@)I zA1<509a!< z3q<|C$LZues=bZ!#f-y!r@+zAwi~Pz@D`p71=U!V9Pg;zuWun z;SW?yp`|VCrBO9uuI zbvy(K=3!nm@evdibJOwyOw43C!LU-$^M=4{oH{p<5DH-QGIf4PI?IABSufi=G`~p)nL?*w8;jTL^$l``m{o;KrL|4HhJmk{gORD>BICC%ms;Nb-h1+1HDeA1tb>JSq-Ps-f zbPZ47@Udv9CF`*L%_+3K%)n9DT)lTP?0h zvFXK@y19wwXqCa$s)F(cZ03C>ygXom;$xQ_)IVLVlIOFMWr@ESt#l>dCL9$Ax|6F) zJgz2Wzkl*Hwe3yIZ8IsI<~>Vz2q{3fTZ}=y(=l=)?&&&+M@ezAo&W7hoOR^*vCB+g zqaC{Z?vA3y<-t$y%+69U(d}UEGhT^X?K&yWeM6+QG9gCs)sAR^3YR3+c8;bU&I<|b5P zD~oPBrw+B8*5cIb@Yu;xXpl+uI`&57m~dsA4}YcwN`NvB_XjF(w!K@_A!Oe&zB0v; z1^hwvfh+(w*6JlWZw8umwO6Z?oVIs)62)zHw_sOgkaw*9;8W)_b|bXJI(9MwxNFUa zCbA+Vl}BivWw0$ksatlGu4&2bc;ne zE0cZRV7k0J)#^oBdeYs|%6aKfSDv{4(Hb@A2qQn0q*-B~DsQEE3`nx6D&1p|FZuKskT;Zq5MPNfv2`^hm;` zkSU$fWUBql857S*ZSnQRKp_0Wr*_IM{REIRyBU17l6A5S(HM#zh+6aO1~L1QfRt?x z0bvD;JkobM0J^b$JjN{G)%{sL3MGr=*ePZ4VTr5x9s7r5i_RA!8dN- z8hx=$b)}u8>|M5*ffGm~_In~vl&xlkBla)0ru#u&_YUocQrJalyxpayJl)bKc-fkQ z(ysn$V}&xZbsl}ISZka*sRI+2X$N4Wp6yA=>qR?uNWL&Na{e!{-n z0NQ0d#ox4GW#D3aMdeDxKxZ#<5+vm>lav)n=6I+TVtfk<1?Q#89S5-us0QAk75i;MAvL_XX&>a^{;cR1djqpk zdEwRpN`5q0WvdB3JN>zFp|gK7We?Z};FQbGMP0Cvmp~cd`jRlE%t|nEBMK!DZ}r}` zwJU(cuz-@OO_kIMAJZC9S}cY025Lx?v&1P9WL;`5XcT?Q7El;9#efWY7|_mg{aeE~ znbfdHlv`|L3tpD;!Zem<-sRGgNu%)Oo3CUzx7ky$H0@PWK-}cR+EsU>y9xM$_@@O0Pr;M*RyNBe zO&eYTY!w0)V~=Rbq%hFTzT%uGqghFMcxmy3;`)||T3hM0MO1p20sqygTd}qT5Z6Ym ze;D1X^A|EpQjGux?a9^E#pHe$$UPjlB8~!fpbnTeC@^*(_XJQoI6nRFr-u(#`~ALA zP-H=#9v<sqk!oSg+R7!rX1NzFh{uPy#f6^MhY0kz|H+!e%TItYnMMFN0pt2Ztl7K%O zQuO+2j4$W4Zt)gS_PQMwu;>_v2i#(g7B)l7HvtFpY`E`X&Xu+MYpb`>WBT?3IyEZ~ zm(7rfQIuy238Yw)#cHyTrWeL=Ah?1ymj&3hRz{p_4?U^d9BH)je69Aj2(vDFzPt`U z_Xx$#lEVA)`TCOH`zP!yh0!AlI8m`sz3WwWphrRwO9nR|rjVhn`|{vD0Xk*F*x(j2 zu$Hl@VywPObg~DM8MqfFz=}ahYqzj-$b9R8i%j!3g9Z zF+T)=U%z?vi#URaWp;c1It^L|xgCD9DfNZ>%0t8EGRy1QJFrm4B{&M%N5|%m@ zAhA@b8Wo9CecQozwqIqFv&lQ&RYWaWFG;1fP9g1$F6nRNN6t>4okMfey?>Eq=~9L$ z%w1|%hpadNJ^~LtizLo|R8yITXGW6$=D1n56gM;ZWh>Kuaw2D(ermB*7nKEW|MnVT zry>i)!ENza>+*h!{ToDZNbvNd*3nCb7&}+^6iBIrv4RVhJx{}BH&xVD8`j|v0&+7X z2$*7Kf8{6$>mIS}<$C*#eP4qj0|ax^IY$cycO5#jtTS$(G=or7q;rn>W{8ElV5 zRkuQo)oXqYys^~Y`7@E)HDQF7ywR)V)XRC3erLvPPn(iPBIMt^EW`p6afwTrOWiHA zDH(aAWemrEIKT_VAy@y3D5m8pe|XE$n*ysfPCH*<-L z$C^?QqO?|&6xFkFmL75k{b{g)8!R;x;rMPm8OwIVlUpD?B4dq98Rd@i=zr` zqPd0gn$tqL6nm4a&#-CTt(O1wUjyZ>4&d?7@}Ovm+tKb8*KL@@?Aj4qErRQMFVa)a z9LNGWEQu05_f08&)%fL2M#@o9w2DWy;ETu<`y3tB-jac zXN}GKNE{MyHB+&n=_*V`q!;bn8Bp`Bt*FCcrCZgEf*=`95X!CITVIh*C?DGr*@QG@hng4R)mD0b+NFK2upqmG}vNdEwE#!dS(H{=<00M zH3INPwYc}5QplRU8n;S?iqz@)nNIaUSY9|$AAV`ul)pBg{PpRZT}ZQkm6!68gY}P#D~wKo`SeerXo>%O|KqK+< zoGvh2rn$C&6)Bk?#jVrq87|~p_rtbsuDAU;W!`$Klk2m@O7bWyQ_C1*zvRGZHN|)D zdIDQcE!q$-$&(FI0C;8Jc#a`&KBYFZ;mIQS9e`EIdXqh>&`&)LH;3bUJs6~M9hGpv(3(CHkvW(#_ zz-zwwpweudt;~RXiQee-5q%K7$DPvb(Frwv|jrG)T7mvGt ze~pZ%g#EmTR*#6*+CL@mxh|GduSI>mpefza@JJOemzcN7i#9_r==aUqVd{vv8gFQ< zut;>;f^u_H0jbt}Hf8#ucHc#%Z~e;)s?n~jBJJL;^{@HWt}GX5NZN2@QU3OB@J-(m zCjheAZevSEo9+A?MOaZ8e5>@5$&TbLKv@+{s7UnO8|)*~eyvRgb}kSZ7Q0FZhaJi_ zF`3z-ytu0I(w8j`jJRa)DLem$#mf?2e z+puXpbjh|-%Tk=8gZHW&Gw76~rULU}%?8ZTx9h8%X)r*OSc6a>g1iMb1ULx=XYO4& zT7>gy9RP9>yA>WNXa=0{Cy^Dn7aB&LITKSxT?ON27yyYvIo?Kb3*kMAQ-{^4O6uXk z$+^-6%y=1wgnxf?d*x1o;3n&8LJ`yc=|HIYgSd49KKf}}M#Nbq8>^ubZ1V|YF3rRW zdwqx2yf1g3vgcT`mL1esh}ogFRl8T+)pCN`S35*&xXS(IyV^iXrFnP-X}Q5fQhAOR zOuiJG*M2=^o6WqSQ$07RTw4aMbUsn_a}^9Clygv=`3(J6?7DP9rlc2FB3n}Y$c9lY z2Yc$1NvEloBz&)ql=k!GrKuQOxBKMnlj@bdYR2aAu1k32FBDly8`cZ-qBJra+roTj zS>ao}Yejwr?_dQ#QzLXkrgTGk{jH76WD_O( ziB|l+_EK(}^zq|IQp`C-Z}5->jchkuV7@~Fd3ge=98BT-mej7wtwiBg!(}n{yIZZ9 z6y-1tlEh7hU3b<#oE4Ig< zyjMjbcFja+Um=$}&~>EOLI)^!m2VQFPvM zmBwoRj8`z-5RZ@J4&R5MEr(T0f9MtU&P{eqO8*~-z*cytRZ-b;jvixCo)gWGLkFcY zmNP*z=X*mdYEe{{U|_eLkVr4~LKwx{E=<`kRvVXS`nKsd1mr!&o_3S%x(1(_e)q)v zETHmi2Zz#$Jd|2sC>VsZd-&-2o%CbfR0qcBHO~eIJRaj|?|i)Ht}8Pi#*`=+`C7>E zS9>pC?fomAPyXz5uC@ZvU|Zi7Uv;YL9UGjv=ihMy*1}x5cHkwJ@fmUwdrpC_*e%~Y zew>;s`yJBQpBPn!ErKya@&tbR`pr|KiE_lFN=r_s?}>CFto>(1bqUk?p72V5G`wW) zw-*(w#J7IDtYRubfypOXM{*H!KFWdg8c}aBjT{@3e^ExCZcarqshkai)E-$}vtiRN zHc+Hi)3XD~-$}3c@WU8_ZZ87R2{9n$&Bx@Q9~!@tUVAc9tOKFxO6D-FwR-LPQa3A* zUpc69x<8Kb%C0U)9r{GQWIBjOKom#8nRDj zK@w-scL`ShNsGmyYvSKsEYxm+xu&ET@iY4DDWO4ZN2jyWPg6`<;*?!}{E^NF)UVa? z=Tb1sbkOO*UKqSDt2x)x7L-3iu)QrNf1~J(1AqWEXSLZ0th1X&zG2PyKP3Atl1j}Q z#3qJ8x8LRM7ALF(k;fB~3u3h^I=zOi&V7vCl?vLh{OnoRmdCRd9Olgzs?YF%7sQF_C7aG|>wPBe&*9FK$L1oO0FWp3-~PydqUGmm8Qc zg0%+r4gAlAVzy?5VmOmR2O(^aFUP1`GC(RJVxL}6%~1}4u9uj^yf-;S0dr!_ru^OD zca+TKgrpYV;&IC;788s%e`I+ga%8zqbi&@$tzeuKTw*x>0A`=G+@_{@fQ$&X_n2z$iSrbiWNP#Ul_dZc|3?7x;@& z^e^u`eEH1-3yH#@;yOc-f`<6r>T{*(@(nMBV-f=P(o`q?+^Jq0(T$7`O_jxDZR2>P z)g)38Sf!IR!X;y(8Y`?>p!Mz5mHwPq)8QD5GK&F@^5CSlbexF?9Ac{L8hoHbYm_C`3D6}mlu*3Ep@Zlf8;o)3`kcyPT4br2qaE+ys$YT^whU=j z)PHt$~@Am-Ww~?M}1Oo3>Uv2c(x3=3o71Pq^Ad)&*DVhWSH1Zhi z{S~M~vF!m+AHJ`x9gy#=*bsuN1&W7+g%Q7@g|&h#*?V5iyj(YN3g2lJo3@n=X!&9; z?W0OwsueTH{0a73_rv*Nr-`+)IXYQ|q5W-GWMyuGyQ3n0FjBtlv-HU2FpJ`cpG1cT zBL{D6w@_I;zMrdKlvQW^NlYP13rR*|pa`F=6Zg}|c(LNDMj3p(ID|xXyEF@&`dJ^! z2=o9Kny%N`%E2JMIL1=RV`zo$2q17iAIPiZ2YK&@?6r;`J|bx+1UkC7*jenQSy$<& zG3rP1AdM&H2Gy6Tutg;_kk)(9trrrScD9gH-X4UuUH;pfwoR==-K#h2je5T=|6coI z(TTP4F03}e9Jd}_t~cOj)@p?EljA8c^DAk9v@q_YgtBXG)|?RtQzSHE%2=8`1(~Ap z?u9v&%rZ>B2p<cAg@h>YFb`Lt|*`DJqN_*W*cPm#Kfm39*}^7K$#0mgRQ z@SGExT)VKrNs3NM@U)8w$=dey&4^YY=V4$Ba-rT$$a{!dhKlYXf}KP!g=zT7TJ&;CPB+k|Bvs!QT!LYgkg=JWX3k z6FA-SE`QND}N2^Emllr+Ov-AG76ozgUWuRY-+#k)e@11}3*tV-4c6AJ68gpsc0ay(`|LF( z4Z};n_T}{%6j3|8>8O2u#L9Gsjymef2mtmbA~rJ(V>mmce_jmEIc?mK;T3;hcDe3j zXpJo-zTaD%f;!>{7$Z226$2!E5&WYHz*;Cxdj~X2v}aM^c@#%fcWK?7x`y%uCaZ6@ z!EZO261r0fJ>~El(KOYmde)P~>SPt|XZ6vg0z{3$$=StWQQ|E$b~gTOAjr`$PV_^< zA_mU1%SEk@r&=FTtVYTez=idz;XGJ1Ve6G|N^}GHLe@ff)aAJp(-bIq`Okl@s05<| zYZXP)oUo1FYTv8+b;4qN9x>ovx=|r*?KSi(?|`O+&(!SB1v6N?gnKX{h40aVH5|(#4qXbfGfUg1?^L`&2 zbuXHI{hBFXIDy^i!rK}v;jFN2P!acvPNSAbONnlL5Z%kaJsq24%q^EUl>0w2tWrv;w`~# zoo!NU0cQ&QIX8LmwS|gE7o_))y_Z&@ef;`clzNw|fUl@GT zIP~<8okdeC$08>qvC!h$+qtEmOA{=rkEiD_<7#>0eGTB95G8ueC852IRT5>uPMIu8 z0-Y0@k(?17r`=4`o=-$M#nE&n9Nt5Zo2nO)Vh!40SgO7ee5yj;rP=J}nM69rpIgrg zlYrm>^$VQlw11|pKDJ?wy=k5;cAZC@uAX#ny&q166F$nlFW&6K7z>Qeqf!ne{Bv$ zmZTI~u6R#*6x00i0{OGQ0P5_td)&`|=E-UO{H0KMC#PNu9zLxXH4?NF9h3%Q<&4?_ zrK-1`)VeNf@^1dqKNmzQ^_hi-T90WIc%Dg@>Ph{Yu(14H&X2iXD>p%F+pFWZFg;U# zX#UMzeZ$It+*s6`aMp}|<4yFTt%ulie%E55@8lJH8OxCO)9vP4s1HTVFoX<<0V|F| zdf{AnjFwp`C#IR+1p3h4Osy(h7`d5b;h}-ik6^Wz_lP~0Ze>Wcy~t1Pm33y?`&?Mq zP7b>Jb0VK8f1JV{U`#VIK+*x}Z1<>4lwx_!A^l63vDjUe5(y0ziLfuhEUg22lZAVp7Nn%{>UwH&(>ke}0g5S%?-;$uBIbMZoE znpz=;V)Zdo%GD~~i;9WVqPqvCV~kQ_Z~uQ;dz0n3vLsD&Ur%Al@REQt zXn@TyViBk3jO| zsc;kkt*FvCo*+of?!nVCi*FtyR*^}S@uteeT91@VH+PVyt`x`lobs9xYFS5*p7WFl z;~JHa)&jP~b`_Oz-ni^=xjL?h87M~}%$O-hGH#fYB9)D3$=z|_L^53>1_xXaDn6Ir zJc0LWR}Ljd;hDN)s04r#R+jP#xDp~LvVw<=-}O7A?bfIkWT8-x2wgeHVzr~kw_rB! zfi15c?dm+FUD`*xoVUUjhz{9}r89JCEtK;=S4+3U*_RovS(Tk!!}!y>Gqb@$e`{G? zottWGo^guODxja~_WTTHBv{M)YRDBS_vUh}PE2jY0^qe0)I}p3QHg%*0)x*EUY-P8 zu2`5ox0A4e3Z@CCUfC*sC;y$$pS2Cy6N3HBoLI=e>p$Q=gr zCmMyQU{F-~3cHMG6Q?>R$u$>)FSdL-b^bWvdcIo{wOd$7hhJDaQ!hl$XFRTr?I>1A z=h&jccDVd;^RIcn!juXTBDL9oufrx5DOW3EUhX@bxWZEW<>mf&2YYW{z1)wamK=MBtYz{`&E_6 z?kP-d1jPE@CY~)EO_77JyTe!_D|#V6b1KPl?&Z6<{6mrsj{G*Z6w{moyfd%<=(;GlXoxQ?r$2( zStwBYpWc4|;^6hp%QyS}9jVGE-|xJ5W=~RW#`5s;uB&^h?t@#u2_>-Pf{m%QI%)~Oll0gX_N4MY7^%s^>3;FL^1I{HbNaU|2zlr5l@MjI1)H+8 z=gfB~8=$y|e48$r&S^X*Ic4E7t?+i$ZpyDQ+(ONfN-y9o;P$6hOTnNZ9CZx}!9tYF zR-UJzi(5lTrEvwr9?U>mHNp2hog$hke?)t*h+(h4&%#GF{STXqqY9+;V-gn#8MjgP z3yVGKkB~IL)2dUEH(g~HSX23^Df_Rt#PS!bCpF>zo%}kW$w6@OSY<30jT5+?(Or#? ztkV!r1{iSqsXZ-j3M@C@D9^~a%uofty7ZW(C5MqJzlJ|}_=`$*5MI}QALlZ!fMkAt z@An85mvb;wykoI(IoSzLfbfB4Z=}iWWSfnB!y?D2ULRs=iKF*VKLU{dWEltRf^xft z>p>o+rVV(9>*x1!#w=@gBU#M6bX|O%BRmo|)qscf$qNm8W5K>+_o+O&*jU+2`LdM6 zVeyk575le*gz|Rk!FU4NgNa(QIg!z`DcujAfvEmYc{p3CjlDU`C%jB!2b|c?^Pd`f zhx5;er{~{FL@K8YqSWrNymnn6Q~jBQE7Q@>tG>PK)RkRbA`(Z~8(Mo#3rq4QGo`dL zX`rr5vKvvI?W)sb6eSa4DZ7u@AM@FkJ9V{14*gPUxkwPy)3nqy8Oln}k_xZh- zdOL+>O|QKc>_&U4nmE^|5sDv}n$5WcsSE{kgnh<7PmgJN1DCUp=*X<8zgRDukyuj# zvNNfU%*LUK#{v>w;>(k%g52HnF*fe5A)R*$c8ib>7+r8LSx8sC7|X3#RL2yxCS!pU zrQPl92FMN&#p5}R3pVz$iP({mZd!;>Hc;apNuDUTHcff zp=n>kqdqnrb*>KcI3Z1;f}y)&PQeh6Z&ixixVmi!xcb|t&m(a#8>?78Yka{=iuziW zo$8Nz6jIsxUV{QP7p9UUn)lSi+2oF17Hk*7#*h6=9FUC)UYt0Bpy&pNFZ z9z~M-iCpLATLcOFxv=qMoAUh8N4g``4)ZpXw~qIPPv{d}6D=I8Ucqen!B1z0XLFmh zBkjf_gpsm{!HKb;PH^9Pq3WkQwD~^E4P;d?Ij4-lB=0U0#;x^x!!O-IPye*w&ZoWj z4rdT|Z<~O>(rE4Oc8}WD9a}b>HMv7^{Vehn07Hk)o`0iI57r6w2jF?N7&Xb<`CQcY zU~GinQ`a=y*J@T*j*YU~#RMw2EY`umXUDDxV-voRW}8BSrtO#pwG*3HfH(?V%`3>Y*o4MnU6@oK)KKk2?%$H8+~R3fy;}l)Mz~RwavJSX_pY+o2 z(JyMPD<9agOR7fjT`6+3DH}M9j&>ql!tTy#MIFR+CymAzpXMyV zz(6cXVv`Ia*ycD(QH}8{$qb}871>QE1GY?)$Q^ZsLw`n%oy+$*rwIcz;MvG&US|NI zU%F}l#cqFjyjEL?-o*hZW>nD3pzn2We zgq(Dqa^nw&y-^+Fmo_IN-(&y+RN2ld>or$8oybq(#JXF^K%_v|SgWrsuBHy2tGvEp za+{ELYc)W+NN>=Nr(?#a;#DyoZw5FnvF#j{*I- zL)GDlBc^a0uG|UtnXORGT54x3#|s8o5w9w-=s6#IC)Qk;8#LHW-uP|~7g+3n0gF9^ zSKrzn(6oo?Wu55yryT-)QK@Lp57*uz?-KV*XHk?&@4I1e!Xx9#S&LsW0r&64h_)T!hi zF{;T+2)it+AoKF_J@x+56ezN6idA?|#~^$lpDTf3RdVN;&8l4Ssmk3OHL2zJOP*=V zb#w~XF90BbvBPHa5v+K02igYk>V+N0^bT-&C%-3#S9YCPKD8l!rK^BjQl+4#%If=x z>zSwO?lO;0>o()P%Y=KuOHn)>(>Ukn+bA{lywuV+_tpqW>8_+JI z#ufWj1!*wmUVISSz_$3aBt`ZD%*z?WXgNGKmS08tu^+1ZV|6X87ev>_CK4q^KGE`~ zQ{Qn>J%%5ovC*vtO0P{>_Es0>PD479+KHr;qJ`WQCOaCRTQ)->N|n5_M~})&hUi_J z!zu+oU6X6wtYuS;-VjgjH`-M#CuhMbtdssQHZq&Hy7JXy;}Xp)wW|7DUBSyZ_J4yre3w<<@<(KpVYe5 z2-zg&cz;C3;D~`u<1fuNLAAwkanG&_RB9GN;62e(+^brjb7e&8o*LOTSHdv&$Q?sE ztWH8MAbKs7a1(wo+&_ATXBQvhdI^B^M|oAY_|)sUChoquiuT)@Ljd7`R8aYd$s?#R zA+dvv)br=_hqYhVHn5G3I7Y!s1}rmavzwCY(|#f-C!+ey&SlE?XT=eQpj514H%v!G zh=!S@Z;MkY5ij0XGOXqO=1nZ{X_?r0m`>Gr3UwXn+W9Xpt%L5tQ|q96utx`-bCbEu z^49HsH-QW3eJMc1uSGgImdV26{FLs4wHuR}%yQ$QdLXk7w*|>J5{qd?mb5|aY}%g0 zk*8C^X=QncV6|el2)=3?J3twAWlQdSwl*|$5`R_6m|=g|8R600Q9U_oBu}-6Km#T+ zh6s&r)A>L~uIl{KCtC@xP1&P|1PGwWzY9G3;J8i4fGt&#bAaAX__k$JAeI&w23%RX zPPMo^sOqKc9Rg4Ex0fAmICk*R0Af1Quaot~dRqiywS03)|9rSClObk{Y`I5C{$hym<&Dva`rB1}nQqyW32d9KL6({npOm-2+_ZZ&#W0+%D)Xl{ zXM3a@E+l#4u>=KA=kztCqWjv| z3$V3gW0y-($|s7Q4S&2uP^+X)NCiu?7=MC7Hc~Zq!VqVZf{jOyY@+!i$Bt(Km~qm& zcDVAA!+|(v>Xqz~Uaj6nqTiF8DaE3FoM(Rtny4=nq`cmR?QQ4XlkfIOVIGpCqvOKP zVZ5v)Ck)Mq>^yS$on=ougH7dDYm6 zS&Iu>+6TF{coW|`ThMG|b#gaPigg5nzoY4~$s*kroL65XxktDmFzzj;$As;6#Ns;p z1A$Xvd=i^X*3j#XLT)N!r>grx>o4`FH{cG;^rOV22%-&(5g>RVC9#(3_mHn z$^G1wO;yTa`g*U_FA(T#C$wQ2)!3T3RihBN-?-C9DKC-8}FzjU{(TjadF8 zTQa^T{UA$6(JR)p2+-vfc`_l#Gq0gkMwr3L?On`2U@lH-j-q>JcBXI>SJGvPrXoX2 zs$r2282|X|CLKdh(97|7YIoHJsUi8@2X9$uW0tX&rXYYpmM|W_qpr&z6)zuVY}aor%qVjP);aK?GRN+WG~W>8Av6I88*`<0MEyh zL&^?^vpmTuPLXtlLQ1py;Y%KVVddg9aKiyV1|ti2A)nbhc1*OzJ#!s94q>7Zo`wJv zIu}4yK7Zf=J_-`ML8~K7r)UDQFANV`<0xb?OR85WyE^WLjS|zj1iWOV{b$>T?gO}x zQEBm?)T%l)%|T*5GPu|}k@57>}A^EHBB;Ci8~aK>v28%(x%^=L-_B8ZX>u}M zi>NI<)d4jrLXI4Y%iNeMWw70Er#68bcRH*%qsylr87YzeRbo-$yk=HuLM-CZ9f66^=6|DzMku@Q@_Ce_c+f87jw zP{F9>rx@Fi$~OvWy?23BoOE6~U(R6F`WUMdU$aAE>GWV5Prglvv0^vXcDqd_v*u5s z&pjh$phr?jPP;<(#G6Iv%#cr*TSdj!s^VmbPhhR{*KU*SOPV6Q=a8#4PpLo$rJYQ# zZb0{1khI4!sQEwvY94m|I0QRU-?83o8N88oBM-|ps@c$WpisLHy&I#|v>8WtHJ}!Y zv_^%7fncQnuy>1wX*Ef;T}^}K(noleNycxmj`9mXQbeCW-g`=xp5=&xQfH9S1HYYL z&^-^#oUk78D7NshB@$3cNxB%z-%RahGjdiTsj-hzuE~tC$wk%^;pWRq%WVWY>^*C< zdzQYj-XVQ~c>y2b+RpwyY5uU65Fhf7aMISM^H)|yH%b86yw2WVN#jh%r_9iFX=X_+ z`ovdYq)<2)x*PGYKZAfBMJx~E+GG~bHcfq(F>8Zl-yD41Y!PdvmB@cZk?|SNd z-6sq4UI81L-uEU;k~0V4(AbMhwEg!D6y$7?$p;ItkSH%Lz_McS|8h1%YCq0C(nUG9uax}KHm2G={ zXuPYj9O2yLMft_LJ8fw^bzdaZw5!y5uThc0qv(zOL>;^t*^p>`QE1y(fnFUNBX;>V z6Kv8@;ra3?B3=um+j)v26@nL@p6uH1$RE@?tU63`^|~gQ}SeagS`+Qq4f( zo06xv?l3!_Z7*{~xD=&)yT29Dx&oZ3Y#lCW}9xzPHg* z*>iRuCKa)g48&l24U>-bE1g!RKa{QpNfLtC$pqC5y-XA%v z%46#|3;ox8Nhas)&Ng}s@P)d0l`kAVZ1pLo-<&UOHDPPM!A3vEQKxYV`g5wHFb@ZP zbDhbx=5tBU8mQ#uo98cI?LT`L$yeC1%rUPCh#)*J)#PlYe=v0$^CM5KAl>Vftf#|- zm02hJ2$~`Fm`15Wap)}*bPsh=fM}$5&Spdl5(n52XiSuDApT8u+!3h>cjwfg{8%ON z*nAc4Ty-}#X!avwYt`b=Bpxt5{ri!3LTG|(B(?LuBym-wx#z1_E1BlPMQ-eHcxwKf zqCQEnyGoA3Nc)YQv-2ox&_}`W#MW(+b8{a>_6d^43oqG#Em-xGv|aIcyi^xKQ*$!y zGpMxNn~o;iJ!lR)qgJa+<#V>(?aoKj?zr2VExMhV`y%#QvfG~3MDqEln#!A+!2JdS zw{TwoY-*%+;~ubgV<<4*I&x=K-O^57x|D-qub#w8S2-b`xP)U>EW}ja*yd1Iux$vO zD9xqT;JCU((GIlpuX>u)b9J;fogG~@7MFL@>h*8A6D6KkFBsvDM&vfyZP??t!#}h; zkudvX$mH25S=((XYn8teSpnr_nVGMrmi0<(ctUG{y! zW0*7R;@wTj9C+eD^99|_q7u;PLBh|O@~f_CqAEiL3l}K?S{D;e*DlL7eJ`G!u{Y^~ zAg^S~$P6m?W|MpDMl+v%qcVT?Q=OMz9@88xz2%0}Y;R{Fgxg;_gQ-~tnXMR|_6 zQSRsDY{^IjiI4KYNm!I}romcCmFb)SKlj8$VKC0Sk*6+bQ33ay+Q7uzM_oovWc6-d z)y-R~Q#`QUmnpH8J>?mh)#yw;3QtJp8>D>e?fK~^yz=E%GL`;%&?RDcbM&o@qPDf! z#5<-dZ75BsDv6JsFMW zlkRqZHXjdKo!+=NoQ~U*UVAZ|Ot%NqPNy~Q4j}?l*3H(%aO??l^S|1p35;olMEQ(i zMp^ZgBuevMk|F_rVGaS>h*rVIhs%?X(jfK+`-r{;jWz?7h3_v_T^f_YU~m&!BQ#Ye zG71@&GiJ`ybsAL>3JNWc9n3*Dxi4H{&?BICxG6=edRkjk_tcutTN1JV0!DeCP&&g-R?;#fDRrTUD8zg_tyr}>V%(Q0F` zAXUy^>tSd6VdqxoZ*31z-i^07e}dpiXUh2b);mZ9A_o_z2QX|Ld@|0j1C?D5PEQyE zm?rY@Qc}%|tUh_HNMTjEI(oh2)U+TGuJik(-R@h6^tn0Wo;tthAKq)c{;C)pJqW>- z_6f3wjM(i4@c;ofZU5HkM9rKQ(y69#f5z$7Hskk(<}2T8y0B85SG1C(Y<%Xt*B7tAxX|7`zNDjKd1M@H7mC4dM zPlUC`*$ozF9<+NS!tL^ft~jizIGJlbl2CU~skaGVBMC!g?d`v^Jh-%xN6XUw>2UL` zaKjuLyf#iYZ40%i2DC)KjPFNT1P{qA|D}P{F;tvG=%d(d>>#kIq4M$)@laV$=hKZ@ z`qUo0(YRNXJ?<6hC8w#mccSybw`4QJ?F6<@5K+&?WM4d9bb6dv9D+5qsbSdWCnru+ zpDZ9!dBF@4^Gm!tyF4R$)qR`{EYNFHpIoc?OZ!3RK{usJL-?#fll$)_@mESVbCr55 z#PN{_u>$nYQV*(x7v8ANpEpT9Z@&MTbw4Hj%-L40Dzl5?%ATf<=hvH2oHRfGM0-|e z^NTn6h1J?p72jhSx04(0pWI8A=6(7}AM0^*8GrepD zrrf_L9w^u&G2RBwZQ`9A^_uTbE-yg)Tgg5bWV)mFU_0B)rRq5{;5;1UucCI=Sxn#f z0H-IEc4HJlHK`IJ6-Ip8`teUqidOSyVpime{IkFVFlsgBpWhw_?%wplj+ zthr;S#7teb1Yo-pTuo1)B~2qqtlS*nN!7i?+4PHqWa9>}aF1yXZQsJtGyN!4CNd%$ zeb(&#cU-`9DKW1IG+y(r_8jUbb=4Z#gV7uHqxI zv~JBMZg0D+=J$Dano?Ra-6svdpYsy|>VVgrU(V9%>X)Am%U?b@`g(DQ zA_qDxaV_4<_MojUlRJ8F)}zoW(szodfPeIFi>KE1jb;yS#g4l^YKk|jm>JZ(IBnVh znsE^dh3b0iKdmO#NJ{<3wTJD{uoxlqcf4yffk-+0mw!+!@Go(c{Q<;Bm?F6`b}q%N zv9a}n^E-+SRqQ9dfh>^}m7Ho^3xx_w-e0kujJY9&w_-biAV^xzSUg;h#wMnbHZKKNEz0(Zl z?=Y6HU>w3=dhk=GxvDSa9rKJU$C7dF#`2NK{7M!R=gmE$&LiIB+^ zkI%+SnXkZf409rwI=30*ZjJrJaG)8DbJ41GHa}MUmrndBp z!wWFuDpM-9%fggr30FX1Z$hYEKt1W;zWx?j{NqFJ)Tz|#j=aSM6Zk-Vj)X)cTK~Ai ztbwtTmULZyEUn&4TG0`W<$wGib%YKU&+<-pn``~yl2+_~1mXXdX)A@#*Yje0~{^ zS3*~e9lln*@js3Z@xGgTyKi=0KQrZ4?lZPp&^#a+@=^^Cud#j1vjYD}#XyMwA>&VH zbDQpy-Eg2T@$sOe7?Nks`laTxeC8G#6a*Q|wRiCPF64{Plf|m=JP7mejvIv!;@Ab?PySrk_+X z%1cT(M~&B)@42O;#*;&)%udH4P7-)`JlO8U(;T(Xe`>FB*dGljrv5a(@&zMW`QrSN zFUq^ov$MM-Cb>9R<n^3Z$8F(X-zwW z@o3oXwLtX^;B=cU+S6%o+FjHYK~4HAx4LPp974@Vq~+@ctI9H&b1w?|s$x8-^`Vxt z%dd?Hw)_3(ZYQAt-DbF-rxV84S!GxVFxVc9YP79M>QmoW21y&EMJ}{(pLK7!mP@#E zhmS#6TD`&{U}gzj5VyJH_U?Y8Q;?zu>g+Qkwr=!`?n#T^QC8Q!_E~${?JfGP)?za5 z%sZ1AE(3H^!|nNS+MTs}?cQv-=yYk8kqHeCp$UYAL=SO`)$md?w_MzN_W9U9zh_#i z?qm+OyF*jH<;JXuk<~CQ?M5%))sb5YGgSYU&9+P@*ed?EKS5S7tT%3z*wfQ-E?21d z@{;#AlWcHs)&}=CJ)5PTLDXdaT%P6StiyV~7gDFo#Wh))oZSeYA-X#y>AtNbuUHs!j--3d%#XNx{1 z%sF9(n^9|JM%Ts+?*3-m(-+{7n{5hqm_h7V+zV|0U=Soaa_#I%m4~Wy@m6|dT5zsB zywRs|sbxy5m3ntD?2;Y*9SKI*HvAv$H2$)7+gHw8-TXjHcat|*yI^Zjhd{~Ts3Q{G z6t`Fif!Z7&S`H8?)#X*_t*RII3M9(;Y{De6n1xVFE~U^W8A|3GVj&MN%v?@IiVaVg z|L5lq2T$JU16y_4J6BC#&ooYRD~ze)AAig7qx@PDo0qCZ%4`kfBov)-sZYqdI^d8Ig;v&1_)(8!!>HeDFt6oiazwDAU2!D=cA*ANTn#)Z z)PUK&Y%$JG(Fw0nhjxvm7?S>w+FX(fg0{W7g3`vR!#Q$Wlv8>=$Y*~zSzP}7^Vgcj zK+`aS@JLRun&?QpDHN!JpAEVU=w>5|MD>?1A|0roUz5Gg=fo78ECH}aXxFl#uYXro zv$GB3Sdg2vVV%YUR*%t0!>I_(Gwh&`BzR-=}uw?JEvmiT+cVX;)i;i(fmASv2ZAur=(=N4-UNvS=;li^+W4oy<}W z6m==4$wEQIa8j^m?}-gG!9HI$A{Sz@!0_ zFdizOq4x85ktNGYf+JbZ#X~DxEoJRMsmI@zdQ@T?c?#LwsAXlu%0mnBM-YT@33XbX zYZ@|nSi2WVX@=y{bao7ZfK@GHtCU%A#r<&|1#?lRm0ut-&6DX@LW;syGr~>jZfzru z%dXVj{lAoV+tgF&vD3@3+o<^V^c2LFej9kI-e;+UtOlTWWPMxQjDCvpv(JHrCY5g| ztO0`Vh>&o^d3`r@`Vadz>V4Y{Yb&-l?uI1glLf-vUGx`&!Du!{Va{d*G3_o$p5FGP zGn*miT@hEM?2b70v5Y<~yLr0g!J{}Ud!1If`I5xNR?J}~ynwta8{jxqL&jZdL^-3S z@d$|aUJINg*0+i%&yH-d$&APWFm>qt-~uRHJXMt))4}-E)Z0^Y%pG5WnO-V(Pv=uA zc2EhRkmyeAs5|jmg{17sZ{{dztueiHlBYN{0X(xkj0H>YuQQm>wx@mgUR!fgv#nW| z+w4!bXOrz=n*log?fG=rnikb0Ef-jn3FF(wnr&p_>@yBzOzgvIA17z17@OK^Q#H%- zpoGk_ac{?GqOq9?e1dXOLDuQ?Qs^_GDr4}cSjj7YpvP_c?356M6eartC`P`G1+A7F ztb*kE=^ry<5EZpSivi?RnI_En3JJKn0 z+|a(OyJ>WhP{n4MhddVc7c;^wjU29`NuiJ&Ct_*`U-O2R+$^%$adP^Rjp1lAXph>9 zHW`x+!RTZ(?U5_#Z+AN6jHfdy&%O3=nt@Eo>%3NGv(>p(TEpz0lE-pHiFs3w8for! zN}JQ%WmM{O+bqxbA3xudE&<`}3xBOMsq}J#k)V)Jr0FmUpY>)E7^H=5BTBJ$b0Udc z#-ra8xNHh#sx8tdI2@wkLj*n7>q&zmGPjK62d*k0COz_bd~mNvAzwnDjb?4bxI0-z z`0xMlho-s}b+`N%Dhm>_JbK`xs+oi8{y)7;w`gz-9?!@{iBBJR zsnZCt^=!#G*FqXGc5)UP-(P}}eRm4o@0av~mG8!j7a00q|5g2!=AAjv$nPNeE;4^( zD7zZ7b5c`yAaYH{X*mR@&UMO7&@9r_kA)<2UP9tl1p~^}H4S+k+Kuca240ni->yQu zssBcBps5hXmi!hK0yE!eJeu`7!~SI6=}bEF!Hgt6Gu{TX*0j&sb>_pxnAk7*Ev5Gv z9W_@l81AsL^yQCv0h_QBgf|-JgAl?>{wqIpA17Rt9AlL~;)R@jm9xT$)^AAjb@P4* zY@<2j-$qH(E1js2ECylABzREr**#tbE~M^d2f1r|KLjMl#L1!SPA1)UcQRfK z#xpXtqY(hC`5ZTCNOxyZlo=1Whva@C1-;Pj%P$f{`lo zUtq|1Fhj#U_$*B6k#~@2lOVO}Ooe}jXF2e;efQ6#P}AvTxw6#M(+VaO%JX`2T9e)& zd0_UeI#H&nQXb6;etA8(kp+nlKonE;5->u?yMywvVZ&YSJPFv06bLl4M@HTzG`?AQ zvnOb?>-SsbF_vxgST5W0icV45*ck%^*yE;@;p!&M67G#q_wz7a3q>@0lC`z)ZVEz5-KwrWxa3AzT3I(syCxKdC2yyK|=HyBN*ewde(RmA(Y%PZGVLnaFPB*fOJN#Z=`TIKPqp612N z=jk-x%|Vi_KS#fne8qG#ySv~T&yV+?&KLWZy0uuMyfTO$gp+HAP~9W`@?-Yq7mv@G zuBuMYl_OFZlJ{;%Nz!FKBGK7YxRJTMeHuun?O|)wpDq?aNq~%5wNKlY3Z>G z=Kh$N9OA`OarvuqDoZK!2ze?n(l5cfuy}`4e0xzZ{J^|YDrFgbblBL~J3RR?J{l{r zHRFI2wi1(CiAUYH^(v_Cd`4wV8ylxn5KmRO8hgk8Gb?V8x@asr2j8l*q`!TP)^~5; z?kFlxg%_%f#+MuGg`dlevN*G8{jbO5aXwb09@_Pe8r{kTW37nhnHuwl6(hIgN22tU z-j3HCoioKG7X8MmlZP<8bcWXBCUJ;|X4=hIz+4SW)Oq3r+97&oP6P&*Ygn4qX>3_s zX2mAPfkw4amz6sD?%Aui2d~<#HwS-y`ELJ*omVN>{qWJX)y-Usbr~ySl5EmSx(b?- zAr`gg-Uw2Z4~OC!)V-gL`ByD6i$Fs)`Q@gh-5c=kn7pzAAd|n|oPMg3S0Dp5neWEr zmDcwkfd*~^f9P*dw}(q`Ot1LrnCwy=Ip9>#+?7mA5Ey zx44RexusOhIjboggw*gJ6Su;iO4GVceL)u&u{H-tl-J z^<;?0J8C@>5CZf{Kw4^ZYu%{zBp`RBg^P`me45r^GMz03J@W0{(VQr4u^22Au}w#V z&R{ZH;N%P@^ee}^VP679CcoTV(z@XyB|&Op0h&k}yWcaBNLpPd|&ZSa`;X zO5deB==O@dK0|f{^nnr|4U3lbv+8vgdpiFJ8UcP(i;8Mc{CxKdH3MfZsb|ZNr;VNS z@lXHpe}V{mP=+177V|f&!yJqsy>_oQpKtC9<~YY!t{=tJ`RXVGBj$@e*R*!E_G!Ez zle!yEF2~Sf%s?#`;SPY4@E7DUya&5f-7d|lBn19UzK&$&$;xq~vd6|ik@?Dh#>bnV z{CwJYGNuQGE`%d$1jRMU$lj1rJ*R^PM?XhN{EMWpOo$~>QyNjBukCDen$Yn|DG3Lf zl7+N$$;~9ihqIuKtooPG7P#=VHd$W<#e>SB33mxeA}WD}&8AOCS7ai#Y8P%v#SrtG zJ+#-Rj1l))S6S6VpoZEcjL=CFkO{c_D64hI#eWF zvmtkPe|-IlQ>#m%y1{<0)pN#9-5|-A2IH1(0;-%!EIq%r4n51sq7~T2U_QB5{$DD$ zvM-1)8KM_A_(s@qgQ;?W;3Fhk@fqBvsd>K1=goySl%`W)mUOqpO?8J1mq`0nH>JhT zVZRnoR45V;>%}#C<%GmreiiW)iwZ7}ijn9caZcjSYy;bv40I7e^pR`3y&qnemv8k3 zt=y1jm#6ZhGwnQiRW4qqJ)q@FNdDe%ILuBKKmfRmi6Mk0HdYcwen|Pfw7H=;{3n-5 z=*r9XTg=qB4F}%Z#uzN7{VvX9T#SGu~c-q1D2LWH3Z4 z!B)w;EU{yuxPafJ(%WotOspd+@Q%rc8G^K)JBEPtNZxReQaOsAOsoIs_8f?`TXPVwu>wz2Ccy}_h<=vNHMcvSXQdCkfl1G&#&61?Nw)ici zGuVpuxo30Y{`KYO`R~z6rZLsM%5CYz>fHC9qVJ9nK!#?VjL+D=z)6bZ>C{2vTQbf( zC2I;^-ruD0-%U^DR|LI7hb*LP>1_99dIWqIXo@+^9}gAC#EPKET-2;&PbSI+DV0fu zBM4u~0mr6FBUvogR*z%aoR8&Sd2oms2&!SNK3MM-nF!1oYE;5i5ETh|%#B>RQ)dn0 zhm2|EW^-aHKZ#fai>ELlC=wwi=zx5+JFJ#s`^0I)Yc5ebVYMKZoT+;|@mShTMH-iPOW$5z~jPP1`jSYhrRE`x=uDUOnA;tKFS)qv-|i%ID0@=V-Rj$yqtg zB&R1E-~OH}Aq{L_ReJB#*K05ws*1bpB!iy0x7WSV+fy8S6W{EA1F3{yKGOhMv4k{y z?nt)WNyJlhI~@0DO_)!6z1Fll?awJgg3sx1cRTaR_Gs3b0yi5C>8kdmQ{@>t{sU(Q z&2D3_EIP5a_QlyDxX~JoMjvL0BJ6t-48zj3$sQaZo}c5=Kssl$9~9CUR~+xmK!ES| zUs*3vdNrk=i1oKoBjvV9T{1A~kByYUGhYENi<+X5>d#N!L-6*2{0l*+TaCgKfeKpSjpvAf}G{hRswO)u>sJ&(*b=~E_bLX55^y8&_TKcth>E*9&!UUl6 z!{f`7`NvvF+Ua%*>K$u|&xh^O-E=%|eE(tmRnr%WK(>QpS6wU`#!#Ivm9UldF3d{~G2dOz; zwn^&|4T$MtOkzES0f#wh=k@5m+wmsi{FZ83A@Z~Jw6e0v{|v+eeVDA4B63&l0_kbG zz3id$x~F@Rz#2;r$sO`MQgm2uZxFK=wMKs=w@pH13F#EB{uDxSy8Dxqrwjm< zYt(@cK){U`$Zuo0_2>CH62F+AZ0$@SkpfMBvh{6E&KUksY<&Pay@Rj|2NqoWWWd-1 zm07XKP&>>3`jb=bmO^~NHiD@rj*@30M7Yclk&s$yil6t1BWwM*Ter+OWUwp4dnXMh z4lj=+1zEbUZWHq}@-So;fgG6aO#m3F0D$y{_fUI`eyc6EG1qW89N}QOQ)fASbj=TF z$7lEvfwMMZXR`yOP6@+QzNw)(&0AnSW62!Uxdz?k3~D{5h(nw4;o{=#;no(PZ9tW)*{wZFPaKcLB!ljMNBggLQCHZSXl{2@dO)u(x=Z&hfx@3r;1 zvap<>)T6~D5ME0_rGUjuCf%XWu})|5C5RcSl%zdLlwb8jnpL4eg62;|P!lN7mpoN- zP8D-1>esM8&}VX%S9mC3sXn49j~+Eu!%&PDp>(qI}zOP$y4#T;4>@?u9;7gNqZ{kPRW{BB$6KFNIvRnB}h( zuSIu{m1JB(BQ}SV$1>Mx&cyRmx@H>txElP&+&E6HV1|&GPq^#L_aCz6s2YiE;|M~d z<`G_#81D%aH05$K)w=*s=zSsb5A6>g6_ddGNpHf|s?jLBZoFLlcj;f6XDjb}@UROz z>5a3OrGIZ`C%x9uo=t$Rj<)+_5>|5>fv2-Bg{AgjPP^=Ed)%5*+8s~D@2xeLLR1pc zN|Ra=+i{j%-;4Hs57h1d-}RZTaz=Y_e&$Z+AvWjc2^V_iwas^#k#%1&`-{`l+2kt$ zJ#%lT|8$Q{XB?KBjfc$*SESc24ZU@f`JgqPF*0d7>`j39(mLJd(@uLboNf0yXv^(x zG@@x~o*Q0nHBgWUDoV&$9xx`A6B{8yT3s!!?e%Bc8qyZ~jLKmKDdz0cp&2?C>X&o_ zQ=2PJ1vV2V-0DSnctMK+x`&eAA*MpSN?E)=ygj1$G)=N~@XL(Bfi3f|2jm`UK|M7qEV8q+Yk1?y49;SmCta5GHApgDk)tlEv_Er<}cvVE*@ww?*rs; z`76LEV?^W+!(0nMZH6+|%U^XsYGoTv=BFo}?e!e#3_a`g%(ctXbJaI8Vo@M4(~B*i z53GWL?ryoII~voN#V0mKD_Bc(ZyI-!?k#T3xJ^-hlHBA}1)rg%H&Q%=RO<}k*83is zU;NSZW-K{Y$$zaaP&cZyJclEfPVl$uei0{=!{uJk`-_iTP2`BP67FR;FoBjp^u0gb zinIShDM;)B4^F?3Ec-R3GTyHBq4G`Xeud=8zGfvnJ#j8%RkUYBum*u@>g6a@j4hwm zt~iv8sPpe$d5^ZMlu6`q%vi@5zlaNQhvag7ho^J~WKxoG!SN3_Nv^RTy1jeo+1hP3e*9|#cM#nP zXx6xA%4Ny%Z1#JFIMOOc3aJ5{hJ8-18;{WZ^ZGj7)x`Tm>|SN!TQJaK3OsO^B3Y|9X-!&Sf?Lpsj7RehjEvKh+Wfbg(|L$P#?W>pjkEoVXcFAb(6#F`U=*5#i zK~nLTedw9rxhldV0MyuSHOHSVvdbP(LZZg9We*?Ak0E4873?Lh-|tbZRAw0MSYPT? z>14>Zwh`b6A)Yi)(a2BI*D)8pw)j!OTUQDzih2+HCL?cyi` zXw({QPsiQy#OhANDKqw_+oK_rSe;>OyH9v$L|6$jt9TDZ-=q-=hGdJVoU3@3>Ev=& zJxsgDZ|doWJql-h}i6qeloPi}%OmpgrWhjug3+S~kNC^3f zxFqT*fzB*6C++CRvMxFnNjJO;{f&auIGp0e#m6+Rmf0aFQ3_<9$5I?xQ(fQb(&e4w z+YO5fk5meqR`WSo^dI)059L!c?1KI7WjFTDn$lZW^lx>Zf-8z7K`aQj63}4XPD|P{ zZx}mKEiYI1tG(|Q-!s|*H=(nWT2B$3H1xf~YP)Xm-ew>Ql*n;>nHi*9oNb^q={&~{ z%h_alQ0+)uWx~rJYy^rRv>p&iO6)3WVi_8GrQI#?9FgflSJ4Yoi;%N!C{znXd5!`x z3ne$53wfcYn!KEx^vMp2(ef53^0aI7TL*dPFN* zSw`}X^=GF(88&vPubKjB0iq@ecH>}n6bRHOzln8>LuKup>ZIK|I8J?Fsnn1Gg|I>N z8e5I>?|~;6(V-icCpIcUkQwiZCRfNXn&wf8E z7N{~0d+P^Wb;|))kwSfV*tppOTL5rLUyXTLB^(P-Vm zNLirA50^7lQ|?R2G&Pejz77+Qu0wNfdE^9wYb()Gf#XoJ@QwehzCsW!l`Qv9SdzS{z?kW`~{mQAjBs zu6aK_FO{Q4(*OV$1YR*)sV2i&Cn zKqBW(F>9i%nl3b8*0~zlUr0ujbXn;;uL%9e@g&6D zGO{=fTjb;!#4d^F%eE*|5F_r4Djgl!B#;FXLcl%M!;g=skjl!_@6f5$=+Z3|Zhw6T z-k>*Kw%z6{`)KSp+>`0nHq1FA-9wn_&BhBrvFY0c4v~{!k-(Ah@cPuh#|G2&I9E&+ z;YsAvg2Am98q-6Zp{q^EieMv!pg5P*q4O_n1LAIJt@ZleK7DQ?`4kmjdYxU6lFmJp zquiRi7Cn-?@WOr`<20EX zqtbs#vN&Hn(J(ixrt+DwsS3X@E*FcCe|ep(TEh29d{Tqv`x6qG%}$;PXNTIdykh&s6@;PCfF2BRNO+bno^YWWHNjy z0v_40+uCgGA<`i2DLbEkr4N-i$F0lWF*R6+<#XADRYlpIqMyKG-*7etCol?p0Pgi%?0qL<#lFhR08j~bHVG`zkwW+A-R zjp=kUn?uyx9Yep+p=o>3qV7DMF0cW^0kgnbeAKV{@Nai{8ymR1Q>y$&=wW%iACK{L zZ;CUW3@(Fvi`}@qt5A6Xd(ik3U0oKkK+S{Azcss^h3YrW4v^WuMy6tbfXP($Xd_Y= zkYvN_rPy~-`?8lXNcTwU!mCl$b+8%XHDbEqmy~v^mtt-svZZ|ey}>Gyk`sFJnvBsYJ z;q^TSX<*)SRuD|ZBL)&ARfSz8OOVsS;db6tu#Abd+d{BJG7k-Cd+<=y#6siUNn8CU zs`(oPi{LLil)0vr1dAeq0kl>+PK}$zTqEaFQEb*H~#eJ*Kz>vNo*8< z9nHSLswWIA`Z#G`O-g)tCPcJUJw{`N)O}VtG@U6kX%8MYjQ*y&3 z0t{BoHY1V2IT{hRYw6}kf1hvEDYZ>cgB$u{LBB!Uw02N#^c@Hz5T?u^C-bA%KcAQWe%OgH8!#QiEOMx&PO4d-!>jMpL!rbk09_X z+KNtOz}}Powd)yuf{q3s+q3($sw7gfY%~Xa;GH_I46NAv>h0d{t3N-}jK*}AcHG_% zFZZAAz1?}YSN{&x5La4WQp(XzL8Zd3xY>#)Rxok>ennH3J$1ihQgv(4=g=&d>!1{_ zX(Z8zb6kJxa_guV0OQ&g*6MZ=jdhBydRw>B+hG*7k+ zLeL&AzTP-JD5`$B`*C9(J8ic$7@=i(Uf#EL?snVTeXIWFC%>w>w3ctnT5vtE5xRx# z&6-NL22pJVA&G_B;Ut!pPhc3y?>E0#!Vr(*;*c;fg7;r@y4mbj1x9gwjK8z)*%*$J zz&LJVZoXx~UaY1}r9*5?+$oiYLkLd#OxYqq|~=bFbE7(RPbL9dfi zyM+enFqSg&7f53MX3j`I(}MChYtAy;42E|)s+gmH`R6nT*jO z@4PiW1vp{T$2T=`xXM>=NdF|qx@tn*I{O-9nrcUuProAZX%=0UhDa){CWc0h4WICe z+mJdD9cP{Q($$T^PDwLQF?B1(S7L|k+MrIW2x!f()f%j&%ju0n#Y!!t)wiZsJXlGC;2(9XhZF=@fmvR6eDf=uzE|?Ll@excvF6*Na0yd1+}4S z>RtDgGq3faSpFKdGlqIH!A=~pH}0vMk<{5=Oj z-E2G=_uHezWICAk=A&%E*#|siUcG8TRMijtS4e>qAs>GfP_zlfp)&OLm#tK}#~6xY zRyv=$wsC7V&)rQqr|4$3tp_dksn$GzT0dbpb-~Y3;_`O`e}nDRl`S8X-{SO>CeAl; zMLJlBI_&TpO|mo2EDORtp?si(}u>V@Ac9tVD72u!nlT z1@UJVCqXypTRkWGo_>9lLH$=m@tO)lIZH=rfEmme)K3|-Iibs;kCO>`)_6Q+jO>81 zXB~zp!ow7~66qS7F9KT@53LGF^Htz2lE)FBH=3_lK7p3RY_Z%tPUMoc+(T!?_N$Bj z75OZ|2Z31Mg zo<5EV;E%BT{{p^Y2*LrmGyk+ETCuWhuFKmiFPO>gao!AH3r^5U@K$gAW9Yf@bG(NDjp&i(d zuXF3x7#&$1n+x!KYk)Sc57JiN6U*(I~oi6=H&4igw)d-8r-N1lCZKRJ$KdVS#sew5C zeFG)f$?)9Cyl#25ns|tEzO=MBvYS_`SQPWt5F;&jD;auH#n>}3wjqfF3`3*G% zc2|e(wP*<2!^%oBMYIQC^465g-;I`pirvtXyc7UlhU`qt6LM9j7NOi{-w5$5K}<&2 z9kwfWH@SfG8DqPKb4CwOJ2v`|p0#b-xJPYz=K3v7BW|fxF2x^|r!*a5+1N!S|Mc{G zi-qVZb(}WaSRR?_R@^VQc9`PG^;o|H$y=8%1Xe*1uuQeqVgTl2G4-on76!5LCxJ1a zyxQ3#RkHt`xmZsjtlAL~!seIhWt@nFnIVJ85tL$5v(aYjTwCUauq z();vKZ5eU38ou%gsLc6SU!9y!H4EpShWIAU8cJsK2vQ{k>}*!;tN8*s3H$^W0w@HHUryJAFix) z+??qL<*eyN8sq3%dfeK{&9i`$XZq35DDiv0IfqN=fuZ`sv|3w)UaL63EZCf%oP4bv zoVWI8Q5OaEtF7DO0&E$1_SxYlbh9d{#1K|tP`*u0l~Npbef{+P=h=IH$KUysD^aky z1VB9!Hj9n_)5UD*$jWucU13N{Ck*$*ryIu##J-AzPcc)T*Xa=|rKRclp|y2ditLX0 z79UkGs8kK33dru>R;1KOx!;JZWTadTS7|z+s0P=cc%w%paf-6&Zf}nUOaq*CMNPZQwn6?b2oI+ZzwDNGn(dgSvjZ_e6WZa=QR?6&i z;iOFXZjD^7cV*mzS)WWnh_AtSwr$$j)z;4F|5QR*`<-=7&RE>9DI43mSK2}eC3Vb_ z#=LVn=B_+AHmwl-!hC>`o$btJd_A;^zaDC(!88!#00-bL+W>tg?|92)OFCJgR`8UXx%}b4lPB^Z z8%=eU+r9pDI=Sk7r#BF*_15AN=3AQ8qgj|a_K1v6sKbqn=324=)?J3XNermH6or(K z!Omuye-h_iPMPoy90lJLYzo-+^fxa+Y0pA?g$4$h4kB~h1E#r{4f?cEl5Hy&t908R>e}^|!bkVE z{%v>HQW0cSw;~I0kKJ!C4u@Jv0O^Pvx+;l1MqhXd%{pKj_W}{+PL@2?`T0HacZbst zcAiXS?T$}y6-XzkbX2~I4)ecjamUrSjq_cZ#~uwrip&Qw^4Gwlgu#$~%jFvC7BoLgstT=M&xpuAn3(m-Iiu~7XE~YMeT;xAy#x+-gWXQEY>58@;#M?x0OdH!C2!8rI&S$tTY2W zddBWcg5f?{e$AqGg2EqH!19MQ`XVUg7;pRbzNACMTj zkd<=ZrfCMpYA16YK8bwQ*1Ng!`z*KKI?I7^RIhH@9QAI|Ay#FYpU-EfNIY?L;JIap z-hTbz&8}MU?Yy=j-zn&HfWql=Qz?>7Pyyo8!isBuNX7A&;Xxw1sn73w0WYEw`kLp- zFR3G`TBG&5`j-dG*~bTE*r7C5l1aUPFj-nIdQZp+;_FO{j3Ag1>-A^9lFc;3OU@uN zh7ZYeWH5sz_de5%_;>BqR=3!zpl@N9yRqg=o^$;S!-TiJh6iAs>?>a&s0eXn?;0Kv zSmS%*ZRn2L17T`;lm87C$rI9zvq6A$YK;_<#P7|LvP!_AEKu zgu-KqFZt{L{2%|jTM+w_cQHQy`mp>G+Y^hatRc3-#+63kss)RXHij@rLH&jcd&>AO z7Z#bUY~0mLlX6*6Z#|78P%h>V4liA?Me$tqquO-NN1gT$aDZ5G?v;1*fx63an0exr zx=r`wT})%lnYvLMENZjO633Oqv8GkORvl~l!yV%{FM#(ebu1ojQf^YmHw+B((V$Rq z{HD>Ma!$*hfJ{S^P}?ayu6D8fZh}>0=Mie|Q=fhixieCEg(uZ&kNO!{d^Ay450e2? z$2_q#Gofr;d*y|;`iu=uiEWjFOxqBP%Y&$n)WtBE%%aSPb{M@_L8f*lxqJklt2l!OMM44;WYNQLC%;&cF13ILp+U_w;KSWSD>y=TbJ<(IYKIS9zx&Ilx1 zkf0SL^vN$s!Wn-diY=6-d|YeV$8Rio0JmRJe*$U{(A|rN>F@u z(;+^qD8aZNG-7tqXGsz@ii<;)T=E5L&W>RY=sedv?S^p8X?1jIT1+H+pfv?N^54w{;6r5 zG3v%(JoA)dZZ^FZ)lA2RD`$>Nehiu}Kf8`NyhwXRRe7R6XHk!FnUXfls&ZbB)ild) z$xDNqKw7qOes+Q8Y4zfHteTiYKC-Ch2*ux-<$Osy-#qSRG;_Nr(em9GF^3fhSt`*bQj&zwQj_$wRp2jemL+-}pOC%cLXy#$^Ir5R&?A0Dwt}_l--1V4ic}uo-4!weF z-CSM^B2J-A;C2(f$Ci8L&G|T>#J=KCeEXf-cr%saIA!J!Ax7M6>U41D)%L0~C~<1N zh;rDFA3O$OMbhJpY}FD)A{`rN^Y6=xDu<8_Ub9O6(4gY%sTLz^$q+cHuMJB(=rxXy zXP612p~)%2xK3#Ux4WcvQlD`|pRDA?_`|7QKgP}l=G$U{wWLiFn2a|G^_etbG;U2X zc8DacqcR>`H7nx?9_R~NiFkF(QvCr#%9FZjPokit+%VzCC6x?M7vEpa7W0K$zX?t0 z`chF&YtEyR=w=pzmZn zd?*`-8K4PH$(hNA(X1tFnWC?6+4yIWihVIL@xJnwHDD61*PpnO$xK$mNUYZ_5rK`E z62qI*;{bmCX7}C87mUMp&jGY?h5WJ8B=ip|RoldQWCJT}RXs_Tcw%*7yB(Z3HVdtg zP-nfK`F2PkIV%AlDHYu5mWG89DsjXgCkn>`P}t8Orjz&(T&tlurj4mMd_`w zKP-V_R}P?!Aqutn_ekm~K|tOkl-su~qcl`roI08?yP$SDoXJCc0lazMaZDPp`CICjoP2stwEbjLLOMuWZ7L-N$}DT zjoMv{Dhe@M?QmsscTtUnJ{9!}2zyIAD~4R(@Q#uX2R79(sSg68`m0-sJH64Y`2Crq zE|b|}k|_rU=Pk-bwf5icl-kNtW9`>y$t5|3i$7>L6=S@W=^^LxG;yb{Bz%kM>tt=7?_n2N*zVvmK;bfLD@vALKS=v+=yPW)##5e&NonH0^Wwwh4v1_>J-yc0hKc3t0@kc>*w`e!6Sey=4LFCkrinIs3R-oL7q2b$|S) z>A9TE4;R2K6f5~Nq=F{fR|w3EnKMX9B5btk7QrdcUgr&W^t?r0^+5)5#+@qpV2>7D z3!43Qz@9WV&Hyo7Y!JlAB{_V*DVjU~T5NY4-=-+?2d5o5$2G*r88IAt4b z?f3 zmiyPOH{aIoz18|V%5NgR1$FRzKFN3;Sk8eo-J(N&WA7dBq6;C~^~fp@|16ZWej*K5 zO#`vzY9Wua2~8Omrl6*uK7Mha|Ly(o0xp96y;#71d--Jd4N>sk%iTBsCZD#OqeXZ~ z%HxdC=UnzrFJ5s#&D@R!;O6^WsRiCVqO_&keW`u&C zBa~NZ;!|sq?`*ax@Mt(H%b{VYe9-K~RTXELFx3lt$~IHk$624_-`{cHdY@*ek`?N- zMnrX+to#N#{56PvZJ3)(Q@4YD;IZ?IT)X1JpnTLAOS$b{jobh9TXOQWrys3=x z((%=nnd57@}tHZ<~8wF_N=2{BeF^T=FYPhmxq7}U;M}ad&2MC3n(zXQ*(mNf>uLK=%@sgwV*pn6cK1@KYu9JxEcS;Ymii|7{=8&I%^uv zv3?q@tuT%{cka-No2k=7aILNK6T2JjmQ-gYk!zpHQYu|zO<8d&(g7*A<-bWxkiIS*!Xo?N(TGswF8aoIi4x0VIgqLJ8$QjF-f zSx4z4iEXKdTm9ko-B}pigV?TVqW<BBFVi_)^3uV7 zF{*QNB`O)S@sB+HnOl;wrZTZebt9`MwfoUi5b23pKv$`KcB3^ZvS2YcfwZw2spsb= zgBZ0dx#PH)2{b?AQM_%1K(MeGPL#p!@%eWUWT%a2`FI_jc7M7w-X_WhuU*(ylOsc0 z8na_5(^4Ut1YRW^kvru}k7s*A*USIKHIr(9&zRt!PwXhW74 zO<5eg+ylGN!TI~iYV0W33U_CUr%K}4g1tXZ-;`%v(X85OHL?dM&NuQk?mD#*(RHsReMK!Yi)LTVt*ool(5uYYVm5byD7f2-j{y>OO21lRDqhR zs)=Z%CbBdZ>Ki>1GWiH?$uGPRqcA~68*hdC;oY;hJ5RocODY^TlMr!` zonu^OUP*5(Q||kLgDz4hJIcgP)$oN6!cR=P+4CtVRE((At^OdlS%t>`PQH#1lE!G# zt5FeRGm#K$!#Lz)IXN9$$Lt4=6*S*Gjx?8nX5_|0iNKSPcoSSWI}$uUPebHJGM0ba zJ}r!q1#VV3vbw>clb33C!Mw3YSK%?Uj>ad4%VS4}$0fLKI^j3p?Y<^@Q_pxZUdG{v z*07YL3V5{hiW7P3{6ajd4fhCAy4?0oiX)S~j|F6pr@VNnn%gkQ*QMd=CQtE-`Lujp z@2<{U;BdY)i-pwq|91%B66Y zN<~^D9UfK3H18~>v#*Vm?MWmR=HCQ^A}`=i@1BWN@=lq<{STJ}RgeUwjmt2A{=l2o zZr!*ynke4Xed|H>97tiIa?@H%wAltwy4hU@rTML!Z4Yv7kEp&iJ{PN??ZMw2j<(_S zPgUjul+f<=4JAYRRxwJ3e$Y$}kc9PfKf9D8bjrxs7qbJjrd%V#VOU7n&-a&1@z^|5 zE*&TyVpY@nHJ#*RBj2We9CKP|n-kF5Zcw|!f=W+o;HD0e)Flbg4j&)MTul#vEASt- zHmrc8My{5mBkzh{0x<)ad$Doy?fl;x&-U@OAEV4vhL%xD0MAshliKk;3jctBK(u0y zXTWW&W^QL4ABAp=Yxp1`1b2&N-Qq5jGKj4dzt)+dg?swFCJm()UnwzrvGV@Dfd!K< zzuf|7t*xQI{r4%qla?YoFI#V({Y4>leq}t8+4mBrT^f60mXvybn$o4bw`+*O)}6WX z9Bc>Xtg00ddHOl!4&iI`XbCwZ=fsu)RZ5w$_|@MUwb5L4d2Az(NeZ-lYJaR{-EwhJ z{fy(8u>6|*kPtiw)dR=zOV`sX9IqnjxTMA8NnFE^QK!U+ZCm<xX*g|=_lG}asF(J!-HgG?D7@X;mV>zC+c+su;qs3Bwb`kEcu69ZSE;skdz#1Rm1^S`S@2TAxXKXM9rb0y zGrYN?ZKvP3NA-&&2i5zhjLAd^@HYjsWA%}qUtFHi%!M4?doIMvD_{%!07s@&;HSNxAQh?xzyhVObE>#T3Z8k>{Xfq2qF;EX0|kPV%EC2^*z!9 zuTZ`R*Sd|30#Nj?nz*2G?KY#2;M?-^Rmw`6BfRJGOd;35JUBf0)qUw)a=D|ObqBda zfom!UdDx(Lpbr&=ny7BEvo^V_bRX6<8`cFZBEj55Wp*}zfeDLvX&k-mB)b1;E&DV| z^Qx*OO0V1NCn}$;X6=R0KZS*&{em5sziD=xEk@dDkMIp>#NMd2Vnhvjo$>_DlqOJ~ zGGz=LWJxAKT+=XQG2Y>Kfa@8d?TSA%c1*hPuu%k7P5kyI$Sr$&?342C)vRws1agHb z`k2=%2TS{nhmm)?AU@(B_}IAMOLKN}+oQZC5yS1j_k!Dx{t8IjHwp#!(sE~o25aBpx&8~nG?%C@Dr$W zHh6I=$_JjXVVj}WtmoQyHRz73=Ch%6sV&i8AxIyoM!Pv%Kl9jZ)fF0MwV#Y%;T2#^ zUBeg@z-la3DA61VOXXI1kLsn{Z}l_$D2YeDz?GkPlwY6#Q?VQ8~1dl;*(m86LRjX6+_KEzS9dqf^ge;)8!_?7iN9 z%Z?p`JU8{SxA&@M5Vw21I&Pw-2;H;sO_Au%hS1|=i#(8 z-Aar*Ov>8!d7(FW9!5I;kBD)aZLe1hN8nNgJRIoL&$J^KLVQnINg!p*!|6ZOpOQ*= z7=4}M5CYQnFb>pWn-+HH_91ShzLmImQiN+1gks7OSavvGt!K<4yw3JjuNrc$uL2HT zO(V3JO&HX`x*b2*2@ zWYbXF*`Z8A_K?vsy2qXwnTZmHnwLZ@h7ZTEqcjc4?o1q)zHwyx^Acqj#PSpS)E^(c z#=7et=!+EBuGsz~2+0c{p4Yzd=T0kZ>g)agg^QRly|RV zk+l0DLT6Gv_>v||YVWT$5!Ezbnq>BByg&c3Xf)C3(1d?6-X<(Pr90HLRb5S=tnW`M zURuB9vto3j8_bHRl}V48$18g)C+gz#A?1!&0*vSHnvfJwF0ogt6H09aUfzQNkqCt0 zLf0H$mOYQ$%dj7uj%5;T#iL`JMdQx_9h^nHC|fnLYIjPNR>G-sx3eXXf`|q(j?u$O zC-1y{N$q5bAHP8hm2qB=&kmC}Qf0cW+ri*(?$mEd|YpmN;2%yNVU5-B8a> zQ{KB~adHfG``$5!bxs;9vqHib=>3N`Z)r2=DNT80e^a9r6uTgpz4K5pD}8{l+9lk# zlnne&edsc7_3z2V{sVi9c^@^klQHvoF>ClwU?<`d^{i95QZQdI1|*`#`nG&qRP=l?#v0 zaxHNos+@OKw zr%Be_f$7e8P7`|5rAX9l6R57{J10ngZjCzpdqKawN(#i{Ik;tTilpE-)k8CHa0Sni znxBSqlAT<8+!CBacoa6mY~fdo*KzazXYI|m+q#l8-~aDZoTgnXDOs3EaFWwmMTwLw zrzEOH$RQ?I| ze;Hg;g=loWlguvh%jcbjfJKf?pqQM$+1%QC@eb(g=F7d^?Wg*;-5(aVj6LEBpyXY9 zuZIh%_~n)@VSS9~)BXc;Pa{j`h0%Kw5EXls)-ArqHpwb;-3}uRdd->H%}lo?an93PP?t@?lGws>sVNb%UNmrwxtjfG_Zc5|>i{W*1GW`ihzGlt}!`E>olnG$uZF4$c-4 zhLd8Z3gcNzhq~GE)AlXW{Q96$k|A9uRKcwj!6GO8ii>?{I2aGxigC%nBERlu7ndr$ z>*bBrrL|_u%pH=Ur)mbD)1@O`vH4Y2O#SO#!2usgT&rZ5t|@0(zJidw$UYybAe>1( zLijOGKD}7U>MYxsDqUjt?Gp@=vg;fLZ+W&lj8Me!IPnv1pyIJ*67)-)_{Op|6juPK zGI)v-`QGO*zqWZ;noyJqOrIQ%M(I=D>hglh%$J9J7&k{1@Ip4UE_0Ll%ahrl5H+u- zV)aC7x7m4BU>I4wS)K~#XU53Vy0L19!(UgoRYRF_fR^h6lxaV3RPY^Rr15%d3F>9? zv`kq!y(F!+{puNsJ0|97pvT}7pkDb3vyNS_Oai765kB;@b$0P9F72Ro07CopNF^{h zb3|lCK~a!zipm2f8{qYtE5i!ME`ZSFCu9@%9sZrOHTFH(2x44k4Llos#y8==NH=Ft zQGa7Y)6(r~!6g}*!dOmp4mBD1X7VUDWGajyT7rt{@Zx4%y?pU>`}HoMIhFX$R>U3Z zz8>}+D^v0!0B?u+?old^eEaUzn=Ot7HiQW$pvWVDu!W95_1*(H4b<(K@mr2vZ8UTi z8k0(d#Q^&cXBJjCVm-nNz#DjHH+X)c0pk!dmV;_*Y>kehy8Rc-3%$9%;0j=976JxN z>P{eC)C76txkEi~2U)LnNpg9pNA;c4GIMN~Tbmiw>|c3W5Fk!iZNJ;x+unV;`DPo(=6a~<;XACMrhZpH-!RPNYOsG=pi>ckk^s!*Hr%&RNBqws z;4srGhYzZqt>@ePq&`g8q_e!-q3w}7UMrUEaV0cnYc!_VYl zM_-JMW7^TCDw5B;AOisy2uUvtZntmf0S^WR#Z?vEv2#gh9GmLCK?RejYvM9NdZL)M zYppQp9e%g(B}Hh@O06kcBG7DrrS(>~f7fOxz~%u(e~VZMB%}rfei8LhT&J);YfHv+ zl!f3v<}AI2fmxu>;$Os3mw!893U4tU@ zlPvX-0HgM~%4TjAbqQ8rbjr$gM7NB#=BsA>ZprixG7ZNj>iK_&z^P+&Jh8`3Ex_c* z2ux;Wn3+R&K3qzB@qHSR9+7)w){>RQErw={10((wyJ<=NMem0f$MSh=Nyo;p(NscG zz@t>a#m(_a;?a?{mOW2H;w0vh;jt7gd~Pfi?l65bc3QvbZ=~{zR4AxWdSvbAaVs1$ za{8jD1%F!K^%W645oxj z3F+RR85e$`WU{tnPX zdmlc{foD4_{i_}j%-cX^kreKwWTz)W(!3+_^7>(Pi}0puZe=Ty zcI4T_`Bvl3#1!b)MBTb`$Vm3(d*=2u z)X=|`{as#N&A5W^WXEV@^bskjIjcEVJI|gG8Th#C7hK$T4HdruiX`%H%;YmwA) zq~%8^5n+-R0L^v?weH8JKrd;ewA9zMKn8v-k7dsHt8;Q?w~`AD_ruag_6Dcqggc-h zRhA!q9v<8n9m~8s;*&XGG0!^!RC(ob|6X@J8-_oUiOm6SAXv}DhHx#RE8^U6NkIjW zPO<|nXHV9{*O``DVmF|Yqmg-jI`W_JO7QoPd6^Zf#4GBF&5|2#r2EoJYN*dhtwzi&O~~W<%(6;TFVJMO^p!6rQdFEz1)1g zr7t8`*M3#TV1ut)q%#^q1p4?=G z7!O7%Gtpn$)B-)FDbU?dY%e)Nw;ae%+EcfUNsm(a?#EL_EHw?H^1W5*3M;Qf8xL2T z9tZEmL&;Ls^l`|FKB$T2_$4-4E(Z06(*xo(rQpcD;Lplr=qWQQ? zEY9sLiNw?=jO*G)JZKeI2`8>3Fi-ovE71X)$(I75$ttoCy@lwU_ zrLJwJA;$h>h^$f1jEaUw5F|7}ru*O}p7O63C&Mh->_$F~iSAA5(0276m&$%=R0cS& zdcjac?gpAH3D>FY0f*-jYQRx6aSPbl)zmP;VoOUmhMs zWfpQzYrRWC8kcQXUj{}~n>`FW?YR&x*;j|Qw2$=@;f3voF5m-*Ege<1UX-|=<%J`tlB?}pTuUS|Y+VR+04c#^#*6G0PKa_E!+|K)G zz;zIX>4lq_U|m4uoot!Drmx$=_wXMMPE{Mpo0zt(7BRUgwSdt)my~}zLFN_9tdgHT zwU1RTlN!iY^m;jh1FXd8#ut{^|KXbibK=W=ysdQVGW`hf7fe1yABr$^-zcR8Vkj7OV!TFU+_ zHs<5O=yG&(yf^-c;qt*MZLJrG2fE23H4CM$`&F-RmL4Z^1Cv6ngj1A%K7;b53X%;kp{%SD|Lb(RpU*y=L5{$=w9Jk5zSvwv6-P^1 zn7qfG^GD$nORNfBOfmI!o!rT1XvR#uYv%$lpjJe3zXtgXqRe;({WBqK#hKB0@<2Xy z8Ib^YZf?ycBe^rAsFCs@WwM3#!zRKqW98EN%D<=rEs~zG8r+bZx*9)TP>#XqX3>*M z;?|C27K2835nGa>DgUju^Btc=^x%J2|Ga??g1kKCKFnZaRpJf`p{z=n#`Y*O#KHZf1RI7ZbEli+q!~%G z`k|Bf+>zUH>xi0wW}jmx=!&=ofb;ne8s+@3TJ7rf@Ds+fDE-Cb%O0pwZ!2)Y@C%R$ zBo%!L9MT!L>R<&GiYVmGCQ^QZz8_b!w4g4Tcw7Ab66?bo+keZCvp+1roVjUF3NiFB zrywB3=s#Y%Hw6(<#=UsJ9ZY~1*u6o~!;@<9$@UW~5oVzg2uhAwM)3a=dL*{ha|AdO z3r=xG)Fl9%o9zX~K3bAbjLf`Bv@=#0;cRfhW0ufT7{fy{mLK_DA+#&Nk8_q&x6ZkM zRC2*E+R&Js4;TLp4xYH^{4Q5UB#wv}sY}{-NsL$|T9%uIx55b$>U(Qab2k&Wp?r~R zqx{rvN^hVEkv>ad(;N>C=s-Tug$9q;1(M$Ca`%2n&vH-W=L+9L2rNO}Q=5y~UagK) zShE)sqclnHZr^UVS$52)6t)027jEXYfq30{j_M~taq**gDeC@QU3;Zib63}WO3F^- zhTjgA1b0>(-k2lm37D`d4{w+0nWAXV+kDuEw_C3HV#3;HU6_J}$O$E@M|*aTMe=u> zdXpEW_qtZEilIlK54B_NaJwVv*Ey`deg9@FAr?YnZNpnOu~DmS6v^__o(x%T!}(I95Ey!OGTI z&U?r*KcU0GLpGOrp1{LgJ%PNGf%whqs;K=i=MM6qWVSV>nTX7!+aixO@csac*h7aV zEBV%WqOzqr`5xwM9Bi?6GTZvfsug;OisJ3;MG#Lcw86#` z(;#bQroCAbufyC~W* zv%6GELLZzSnHsJ;tUD)PE`h?C+U;)^?_wLSKp?xk~#N? zE;9`#G9Zm9HWPeCThhh(C+v-cv8gI<<#g)!&LYSO_fZiCk<+lXm1Abfl^@Z5O^@aR zL)G*KegQ~Qc(I`jA>Re$sVF?e!kp(gL`rj7@iHv0;|0;aY2m({?So8m^hf+2^`_?x zay4lT^MkF^Nd)_DDfMW=E}=WS*756 zYfEL0@+vpfv*)&CN(PA@&cANAktk6_Qfw}>Wo|_qoQxM4)I8x1KKet6Rk${)kEigq z@w0OcWf-MvqVlA_DSMZXJUc|4h>w_*8-N2*@C%19yn2*1sb=hYWE($gF2}>7Y3~Yu zNWy|jWom;*(fQ#Q#WRX-&I%x=_KaW`6L^$yXUQM+7o11+)*p#7_k$SWBtYVU~ za%r(_851*32zHmKjsz$!>Q2zB^zNm`Xq=?7&8c`?@n}=sa7fj=JrXD;S_ecxx1*R;)DCwh(@62pYn21&gA}myOr8RWyx2 z=3b|`JpT>vr;Y`ym(Sn4tUfN2A~4eT^4XJ5V+l~49$WR7o9~|OynXdzOW14jk4FIM z_s55=hbkM90Btyh=?K>fYuq^?hxWz)Psd&_TlN3n!uh6bx8gWtSdO7`c%M*DX0LD` zUu=~xKmF{5F3RDu_Ulqod{DiAy<>X7-YEh+HzWKpXSUKW=Z&QdeJSQCI5w@o-eqp` zh7anz1FP)mpIOsMiri1^Kr96u8q3UYZ0un}9Xc$8b|tj9geWpao$Is9&gF;W$uh!k zssTJ2^}6T3w?2P1PtR^hzo?)ztlsoIOeB`3tK<{ZlalZRR{LbPXq_@#Lrxn9oXwiO z>mv}K8pthqf_b`MGY6YGs?gV9DwLhBTU$rw6XeVdrj6fnm$~7z&#q3P66@6)O7jM7 za?8tix5@d2PMzj4Pd;z4x7=Ny#_kn+UjwAg_0(}-zUmNzC`YvqHR8_BE5aCQ=HVgh zZElOt&dbhyY%4Cl{pb;8e?kI&OqLpmN4_ZEyT`ei+FFoVn9@kBGsQZ3URC{#OT|veX%(}4YM7&_Vp(q`wrs1E zbPh^#5>GkV*WhXi4xNUsnNZyI0!Ujkr2YdPX%>b!0R;t=(~$+Pi4_F3bVZoPfwd`V z`H!kr5{cBbvI&ou*r;<#tjL6{udiza^qg6*SDFaWT`LYYLmD{SVyT;{si%%RnR>8o z7rsk&3uV2u;XDkI-tXX*gJuA-At5hmG3J;WI?tds7(sedjiNegq&kv17&-*@mDpnh zCV$m*EVPPV<2nDP5BuIatzUsCuaib=YpW|6asHj+PF#2Ht_Vv5$<8>{RwuJWkC-5@ z*r-5LQ#NC}B1+~dn#UwLmHF$H{oI~bu0w)kOK*rYS{-3&jw49`kFn582`ZYee%m>j z5>4TlPix(4(vK$3ELN~dMH)05r1u&w*o3IdVY4A;UbTw1R=)uIj%8=^R(R*?)kt~L;yh0X>BLRzU?Uw6?ipQD ziQiFYX0;DElM1!>Pvv{VDG~pEulTnhksC`zw)`LzkGQ_FzHH|xOKIVLsqR%vyR~mM zA570Bx5x8YKI<%)jNSsuYP2+@6r#-CXM2t%3?RyY@aB*?p>t|IcW30E8hO2ObM{eu znw~dP>){mK79MI@+!zIrGmq)?*A6PwA(7*j&f|;gtKIdk$jLAd?fnZTrxzO-oOXB( zogaSa{Lm>g-RmoBN|(?1rdHK3$1UDeZg`(bZ1=q>c*+@Xx`PyZEkhM|*x$efBJSi) zZ6UsXKn~;Sn-2VKJ!f8g#sgJYifaLtaFLx?rrlU2hHB-WD{1sbpBmD0eEk8=I+~Hh zUDxA(#AKQjF1~}YW)R%Q@%W~{-d|xzs6u}I``XHSLopTtUo&ZWu}kp+XMhZX(K{)C z0N>qT{|psuGG|$GfQ;DW*py5#4y=r5@KGpF@nVJzBFbji*GL-35l!NVJ^~|G=x~~s zSQiU18$Dp_D}A=ZUe*}=>%?L#N4PbX1hjTbZ;x0^MN46gIM#Z-R1XOfG8QndVeY1| z!*MY=H~gsKTGb)H{V3-u=9GT-ZZ?W@&QPcoXF#5H&TUA=S0jr36a?4(kBpRs>pp}! z?{C_QLNn0XGx5%zL9F*}+>t#`LAd=#L<`DAOjEknXIO!_QNMKZZb!zmpG94Va{6(fiFx-~VxyV#shj#YlSW4zG>~ed+SK6<_{;)CPiIB{=({dChWkl zc^|8i5NH4Z)sbVj5{Y}AH_jg)&rwzHR9UPY))n{y*B_yPR$u}V63+j5MLw`jEST0Q zenW3zqy4L)syMLreOoP_EQiK{TSHTxkH^dElxe8f9v79=>V0eb9vw(pYaM-|7!4b! zAUu_;6bemXaGNEY$d#)YY28C5B;)%)pLvqKqn4)Y5a&9A)I!JFCSTt#obf~^w8MUL$*pW_BW+#(a(Xh1 zD~t!1hx-Rs3N-AKZw`G^Zg6gnfzDgEg}g(SnHQJ-;=fo7igGSa6^W6}-Q73PM9r(N zya#cuR#&95`u&+aB&OKuK|DdHpY{F#8;M(n@%iAAtRJlqKkm475N?0cZA>;!eCkWg zS8mvb#@U_71lJ>vdTqGfEpwzLb5t1vJqDMQm*{wly%#n-%|r6PHcohVy_XRwsR-G6 zT{sWoeCFi1(3vpkZW1Peg_M=E8)dOEFl3xkD=L{5)NiCK5D70-GA|Orl_nSD$*-aD z#9oW~qGQH#Rtx%(()bI}bx~m0{X(v@$mj9(#v&%^Y%o+QR?8exe~SA}2=(O`J9f^@ zwy?7wtR;fXEfB<0VNn-;2BM|_J2M~IdW=1v5pbFdTAk_9+Pk=zSANZ>=`Gdr+aqvU zzc+R~Jepu;Sd+P1!j;zaiDsUFL$PO&p zqhxJ8^)V2iwaF# z2V5!Yl+eZ~*AksHL&z{3Tid%Yp1+1tn(LZ|_cst^rGx>vtX(tM^YS+?@7qKGlqD*5Qy>WS*6yHWJP~HV-R7mF4tOQ3W4myO#W4s}RC0vD&9f z$Q~H*N1|JPIqfHf=!Tf5V-ntqZ1RFhhcww4qn?;1CZ|bJ>jE*CsRr`7dMHafL!NN1 zbV>?`kPsd~{sLxL=p;KpS%>HbQi?zb4jn^a5)ieznpJ|!*kh==(`EwqD&gr=4lPAYCbrt0+YpLf|poUE+b6CeKqzzXdqf%!ke~cb| zh60Vb;|`38;(dZP8Is12Ul)gh?&~;2&jq8sOjBJ++ z!1Od|VTk{EBconlA8k2cXC-@RK8XZMFfJGEF9?db^GvVX25U@g_3Z8T|9rpw`sv>x zayqx%zb8>u?2uB!pC8z0MZ`pg#V8B4im$D@j)K})9dcEUTPE`ZkP zaNk2DG4)?p37hfy&F;>dm+zmykdZOPpB%($vCjWS5;=u`uExkJ6g`Gkilvs8Mz`t# zFd?TSX}mkEz;yj;D{KBl_+;ifqUD-4B9JcoL$nH3y!pr2Mth;=U&^1Mm9rJl>Ju@Z zwufzbqqZ4#vg1;+hfKR5lXp8@%p2{x49^0HZuo}M;<@Half2r5tk`4nl@b~&ig@f! z=@Sp&i}sWERC}*)lHx7>FaJ!^|I}yF7A}cp-@nc)`I<}{SozJ%t4IPtwzc$lWd?d) zL6Omx-&U$+9Wm+Er1M?1;?%D+j@jx`N~2}vnO3JznY}U#A2B_S;6FaJ*sLqIpM>(w z`RVnz_0Tj~^u2z;T1hWkb3Xb9AwEk1XoJ9Itsi8lI+Wj4!?UCBXoo)kI2gC+wt~^| zoK`r{_*6SDMqlXaY3R#Sz6dS@F%-XURz8I`S!F~5p&Ldn;>eIvVng{pwK(Z9-af-isL>9l2Z0K((8x`T2hZ&gf%qf=AVHOvVh<)Y7f>d}E!D)`m zIwTPJUlc>O07Bil`JjzVu?)Z+9-+Cp%=u!>s;S;Q=Y1~k#$G0QJ&L0o77Y&EgDxD% zmS4BIx!pTUP}wvkpLeon%0^bIQ_t>A4d>wM)Li~tx_J(hA7nR&)w3H)oy{9>IIVNy z*{}mKRlx_btKCHB|Gl9fy-tJgfP2qq6K`;~?})TyAE;2t$!x!qk4Zu$`T&qoMRDQF zkPABG-z_z_rXd=hFv{1uYYp;Kh2Hs(+)4Kzl27|jW2V@A`}D`%|CrZZ_k2gcuq?n+ zAalIevP>=X=UVMM1#G0(;lwvGXjy;d<*&~Ea{-6d+6UD;hEQfPoMKRzPk~dOzoA?c zAlp1k<2!S`B1G05CW~H)$iCK=%e{>ipWDaurX1ctF)$GnHq>%>dJ)XRc*|`+M%43sW1HDH z9&LDZL~_eK5T4)0`!@?^3|AyVB)vc%V+rZDerBp2ivifr)?mX61suU zY>4vGV-`hp2*z(4PME{8E>apTrLeUu>6;Cqr-QNd><$bGhd+43C{5f_m<)V~+V|m% zQM##Ky?C92(P0HZei-DcPhq1E!>>rcGJc{2KEZT@`60l{4Nt( z;Wwet9$g%dtQ_~dfP2=7L&@8>^sUp7|3ZaAD&yz^g={^oN5`Y9&vpj<4XVQ{n^aTY ztZ}N6`;)OJE)-sBMADUFi}y}n)d{p^lNJTQ%d{3;6Xg|zDPJIL%{w4ZjlPLpL$ZDt z<|cD4p=pbsOgrz>{==a32=Ji<@yc<&t$#@zJRzeJyyM>v4jz5?-S38v=D(HD;Jv;6 zot{O?r-n6Z_bht1Dc$Yr$>b#u4ggL6#X!^I3BtKL{_eZtBU^_&YAIGlj-~+it+A*F zr1s>Q%DglLia)mw*d@cvXr0J?#P#lD$oa~?@73A{s2&J>VaA+hvjM;tRyCL4cJ!Kk zjGfykDM-~1h$#ji1~}RQUkJv7nF^?f0-7@v_vVZ8g>3vIj>>HH$qTLgu@@o|Z@f_S zSkHPPdcNm=A)nE+T<=g150Kn~04B5S0WV~=+OOXsaY3V_bc7fS5#mZY`p3_R@C zeiew~unUUJzBT?vv&EQuazmBRV^K0La_fyiIWDdFevL{D=Mr$p1R zI^O)s6|yRAXty+i4@*Gk*6N`_2*`^F!T$i0xBsQ~T^VJ&zBWnVF^Oh+{_cZKQhoQ= z?{aiR=&$MDH3!mjbkfvPxJsw{=vupBRY5qqIKCq{n|vZS{O8oqKRr~48fUvi=(nRyw$;v@k z@=2m2FSZ)tzq&YtV@_?%kALZqx9&rJx7sQ++33AjPV>Kjk--Ya!xUE2C4Px z*>K-OGvWKY4s*CiOvr-GG|RKp_*%E9sR?VZ(aoyMbbFz{)1vuM=fF%!FVo^OL+yu0 z>+Ybmm-WpKPQ_is)O(|feiZv)_13Z~Qah?NYeMe@a4DWl1efA%Y8lUvKCr25&rC(lf9Rl&~3#@e<5dEk?omGosX zFRE`B-~9dEk2|mT1VCue<1(PD9<^EWPPq0oG#r-*QYO@ma<65mwnG0>glY|fPnPm< zpVceB3!%G1xa1b-%@emnL6JdZCQITbhBO`yKetb=nO@xbOYB2#(W_%0!H0_P zG8N71sn#_Hw2mOd2b7OaKcp(VTzsIvXQ#%J9`@egEqQ39suW~azUeQ~r$F}Y+2)H~ zPXwyvka7XqO681Hl{NWd-SOW^dk_7&Z7t(3@dhW?*O!kwolj!yJHOG(cH$@F&gl4Z zWIv1zu3z%oMFvzb66-JQ>(0*Bi?^>g8Ok1C^LhuFxN44t2*ADcB}MImh!qjYEdGD`f&8=xO%qp z`rY2{`{&QMci-*u==r?f)~r_atN|4DI+$>jARVJCj8s~+iF^eGq#>#F=nKssGgYT( z4I{AH@&rahW>fZTTyx|DII@1c|L(d!2{wuY8NNdN4;o8x!>NuT*;p7 zHJdj$2jSyN7g%~ICk3RUg_MxCu7@J4VrAFTMw*nDVuSRNNKykYK624(%zq_!&5#Va zwN#DA{9@19JdFYsUcewmsWEO4-Ru7`Zb5pKTiY?Ks^^5f0;tV*N1Vd8$jc?l-5(9O#GxZ;iPOC>QZjL6)BGdoc>@TD{PX&{-( zmwwm|fLrl~BJnEPD$sxqx==#8ZqEZip(T2t5hB{o{1?we#TqY8kn26FT4TYa>uKnG zGRX|#16$@kZ03OX%ELxK7)>#A1U$X3AH-<65|SSDYm`p-{e3aLm6hzNE8tDYry|U~ zs%yp!zG6bj6}_}KzdnMl=AJml@=pf&v`HlfImRJ7AitzCzmJ?inw#k;cnV{mCgevX z{)XVt&PpECk*LmUWwrF#q%lt09ml?g3$6B7`uzvV&^`yiI5@JoRd$)98zDub2?BZ2 zO~g*)2z*eCF?dL#r`y7kcSE%%-R;kRo}6Bktd%Jj%TqM+Z%3oy=W0<1>Xr7gqS%f;;^}Ug!Ui;3rt}tJ(&U|{U8Nai zna1TK%VyLeET7DCt@;EO`jyuQ#w&2!KS!N6{;#|L^JQ}xOzF=V^?1AHa%~7{*QE5Z zd~fb9niE$4y#Yx;)tdZ>Nuk#!#a0na3sWm@pO2@+%pCTJJ8Mrz9ie%{=s zCl89KkdUw!#4(3nq)XEWRvNRqE=8jthBp~k$) z+(b5Zz?h<%JxxGroH3g~HlG09-?1nIkf7*QZu-gXin(u2@0|yyuC@AWYu;ZR!y)Yx zx~jurfbdSWFmuZ?NH-QjZL+onvt-vC@?xJFvTI#e2ymnX5XOyGw>9`=?N)}IimBNt zdh)UBasLTul^{vhVS!0?FUxS5wTp>h`PPe(Y>gKMY(LHkQT7TmopesJ=LL$@j6G4GpX=LW*h#m_naPul2E2?x0#jJD`SxYen z%p*5eS(&bQ>Y<|d2u`3%%$*$@^*!^|ZZ4IAGAa3GxWBdea}k9t_345SrAs8IVgzxT z%8rNPi@rch`9x8j^wV>ZRkJMubaP>4@+1uw!?!x$#a0(N!sX@VG{~x@4S_CusCi!1 z)Aw(7?TIY6N;=aW6Gs&5oTuY#f2X%nbaXev@8cG7nk?)@zu03?A*^q^w9#eAdU9M+ zQ==srP<^$ywE=PavyarJma3ffh5Dp{y3w9HF_(3%wX)V@FUDi2vFYref)>g7=|*deQfO|=bk{zR0YqUZ zKnUB8JyMsA34^3N^`CUSmaV@7R;Adkelf8~LSpI?ou(Sva+ZPk^oLQJR(*L_)(Jf% z_Y48p)CLHJOjeBUOZ+`4{>on><6;hY}hA!>H@vA@OwNzK4H0)K(3+xrzk z>*y4PHnQ8Xu`Nj;?U1eLj7|W_8l70)KUvPnUL(&7$0AJF$?3u1!}JzOUrG~d0~X%k ztWw&TAfQ|*;?X>!WUf0+dw%!3^F}pGAo^p%bL7bsg^y4^v2&4T&!SnPDTO=6>Gp<(W0f==*lBR%++lp$_x> zWlov9TV$Sfa{S`^5<<_hKY8)`*^8I&w%_iSM@%B83~YQ|2k?#e+U@=Fmc;klC73U_ z|5kOZ|9tyzeDa!Uzm30@CpNA_n@@D3q<>K=Mv6)g6z%K6a?&PZPb|WIpeE*{DIFHf zWl1|5yMSSZLk*`&hgT~7w@pJG_lqLt6hrQ9&H6)1)&on^m9E{!C%-B8XjYkuz&4n~ ztYUL;pZt&8!kAgs0#>6gJcd)U|MiPCA29l=?|gt_!D4{j-!@-vzMkAY89N=x>on%> zZ?9hNLCd5JvHsb|GLEC!sTD1Q6?)xNC+T*GBy?in5s#(fZ`y&lJxTS`{eP%WI-Xvx znm$90uLma=k#9mLwlrwGH9Utdd}!F;wB=EV)_Tg2Qa=73*GyfjiZ%36IMqw<1lP9uFek#tF;FRptE=jbl_B5+2y*f9 z&AC1Le+sr7E8rp)rKAHqOTwUmp1fK1%7qz_7wjXd=Os(QzD9Vp6EC6K)gcvQ+sih16b=v@qn72 zfdS&bY#380M>N!yxz=$Z^x=f6FRzUb zbD1&aV{)mvW3Ty3sfrx7jDZDw7%I$!<$7?1O_g7XLj*()J;e)LFQnwyu5(1p@gV<) zu3CV?{&eYmQcc5FR?K+bOI$v6@#+7m^dC@_QR^5E&NTjeko;A(^y)EXzVrOEEjp8b z77dC*@#<+Vr>*vu);2;kbrg&j#0OmdMCaqScY2pvBECGi{>sg@G-9h*W_?C8G!u4` zx3|(=Pd7u;h>7ZL8m5&q(n?pzdqI_gkUTia>98q0C}yOlN{b%3nJzVnOj*i03l#kQ z%`DIo(eKoQGbM}QaiL_e`5=@CEyr%cfBR2$I$wGf$fCpe&X$&apy_n~D&M~(((*H0 zG^j*-wV4w2ju&hYy}ibG4R-jF+^a*_Ma28e_t=sar}Wu5#C zQ~2}KU2H6AFYA9u=ZnMaXEYrIOOOS}6U#&5?E)oZb33v~6kFqEs(j2P-}aN=dXJWV zr&E%jvT)iOi=?<(GQ2s#U)K><2=wxx3|%IX4p>RhZlWMuMe>7unG|!Wh&*S)+7hyK zP;3nkv;%8ZZHLrQJ!lR)pdT{lvWY)Gr>&wRU6e)}(32W}Ftj85TJ`iTRlT7~{GvP`uyGm`b^ z=cFM?!PrSG1J(5Ca+w{AVh0yj&+;lB`-+jOYV<5J6kg*ZX=LUZm}qE&edK!M1=!}9 zGu;{iaQW+VkPr`Sm{=!p5f3^z2|`Gkpg{DU2VupdV{Iq=*k*u(pdRkugiMF8!e`@; z$E8jBzJ6~B7V8<9cGJBwhJkxe`3T-A?`d3Ij(P2pvr4&81*DY-N>~~ZB$Xg^lM=iF*8k{R{C~ zOpZwtJ$vp7ET8SRmeIqcFC$oE&5$`oPotqH@!W}y zSkZ~^x+~}qeE6a?&~0=!7Lt*mUUPS%$ar;`1wRlR@r zthN3p)-NBx1e=&sA$bLDsa8lz)KWpa*Cc!;lph^NFib}*ECI|&u^31DM5X(IJBF#} zzfR|`tgYy9^A(yvi~^9nr^$kM_FIjteRwoJZh;Xlc6J#ueD{v-gR{gk>ip#M28qb> zT_hsVWn_Qs7GK8EC7wMU@l4-^{8vfZ(4uNeAwI)RH}3f~hHxqNo?a)*o-hR!4JmC< zybSJdHwybwq;~F|&TbLL{lxgeGVPLqellQ$aQW+%r6r&AAgxfS;pgX6uzm(2nCP{1 zLjT8Wq!WEm+w=cHY+5B`gbJ>(=9yLA1XDayW~MOb#k(iQh6oMqfV0Iku%0sxmU%? zBpoY*YIfg)TX{o=uqewx;s)B-x`m$EMJYuRfAe3ae4gA^n~$YmdlgDb-{Uy=Ydi?$ zTc+|i-@Oz^fqr3Ev(~6vFO@f>w(G5>mDN|=!e$A?AyVEhu$gu-bIFkxMNEXxdLS7M zA3tCO6!O>>39Qwed`)>)xi6YOV}a}j7o|9y0BqJab4Po$V(D3}@nAbFW&wA2Zjhc4Yb`5rUKUR>eDHzRg3Ah23_8+%f^w3 z)i@Wdf~b#vdb{laQXkiCxgmZR*9yd*t|a2oXK=)w*kum}&@5F0CZviqI_mQ{ZSf8% zqw1bnTuh4CtMP<{h6H5aHIDp>%r$p7llfk_hD``65ewI4t59EOwL)WFhvm{(O(YT=zRea z&1*Bzc6H5I8hgju%!FhV3kZ&h!R>Z-o*T<(Hg|4n8}5jmp6n>3-88!xzW+x$6eQ0i zb5%3J+aaJLz|atR`}MSt#|j#Yrh8fsIPC5(e@>Ws&{Bu{Qt?1$d+l{LcB9oZS@r_M zndF&Coa#eO<3F17O>32vp4o54=gk}xdW&FT**Ucq|NH|309RXUP&fG>OzZo{>tGw> zJSFybBCcSO&VETu9_2hyyZ)$LGHXJK52b(uVB>Hn7!exhWvT|7)3fz9$d!g9Es4#4 zcCsT*&1}YkTOv@$+i2vHQSA$gsCC8RIidgk0za=fB!wpLt#*^k8UiwH9n$7~o%)!% z5UY=&)1R63iG`T$=Ud=i6$KNrSF$-4byR> zled5b=&mJtBsnkt_;_~o=>w7}(a-u?-a#z2Y8mPp%7;VUqZm>GaiZUgPnl8@C=Ewf z#wyLpmQfNB+`guUhbgEQPl)-PC9;k=m}1^vN@Y5x>-ao%FLp+^svj43qvPZxt9%D! z;jw6)KAefrX*>d@n|~$$4;52;;9A_%Zx}1mm14;5K*KL_(oYMTWONC|(t&MJ$5MI* zs3-N4MzP)9Lrc5lhWq2u>GiMfDzWUTbXGf&mg=m9yWihf>LNy3T+?)}d!*+w!{HQX z&Xk}s#P-&%=?JNaZw!N+pmy@z0w!S9V@I@@az7aetrv?X=&-q}1fR-86Oc6?k&)hM zgA@&VJ-Q*;sKE3r^}DhQ6ArWXhOerUA@zEC3@-%zz^L!7C(rlvzeQ7vmUq*7Z4`h- zUS(8KFfH7qMSo@Mi`nDRvC;i;~RsZA+VAji+r`p8aOO1bv68x%OlsS7M@YFu68euuBmhkt7jKC=Z6Mb zS*U*6`fIW2{eE|SBl|ex&Oer}hP`&blWM^$ss*c-omadOCMW?Bu8lpDl9HbU4Pf5J zNDfaH2s`EWu3klsx%b1f{h{L~rD)5x4%58hkR$u@3+6TTH{`zxsZPsS1o!aM>hZnnyP4Zqc>e1YeAgp zy}6TC3b!5131Y~QLQWeFpZ$cxz)YV~DXy(8=M1SKUh_*x>z*Gm&&yMz$pgFu+#_N^ z1T;;^hz*U~6~959soT3vF|6dirW50eE`B-zH4A~{3q4R6d`~U{ofaySrIoZgE}7Jq12hYl*R1ZKyWe%y-%! z918dnUQ_Pd)`2(Y4gW%4*B0?vY^YE|hx{GoLyDYz1kVpXC!D}y3;X@GlsYvRsPkA@ zFvCFZpE6tbqD^Go-v3oe(R`d5{)j^WenJjkK&cq5_m?HRpJI1|Eh?mTmx zg`&kSSB4~^@wN`43d7siN;n<~cb2y|%hg~d=BFaGtW9EEM}`!oFUo{Z7dLA@?=PsQujzW!`%mC~yL{FftfQkTTE zerTu!IJN6#-%o{%V%`f!5WoRe1{5vjsE+az5>Plme3{Yd<)wvywG2v~Y^gMlyy5Yt z883BkmfZ?Y)aUk>_OJgs`2;3bQ+CMg__4(Vgab!pxCvZhj;FVy95bGSx^FdPKThE7*GTXQw$fC@`(Jq$%0$uj@`9wG*1RCKa7PNJe4~RHcV0e!^RmU5#WI@s2h0JL{t&`J1fh5UQPzj# zGBuIW)YYwJto_mHHH!kjc~>;e8k-{S*a#57mRA=a%rNGgJ-m&^k^>xM5=jH60<|{# zK8E&Mw?B3!y$J|g$wzNVB|Ri`fN4lf+Heb14WSiLva7#Wr&k9T)sq3<_zc~r?S1)l zk5ll&({ejNCqL&Cy%(VtHkWJ?u;Nkvx_a07;ky^FwqwV8N)jXrdb-ZXDSS~mT>2tkJD6wzTTPQO8DYly|1zNKLvLUI0PIuRcN%dUi>+2&idYvS7wAVo-Rj-DL(C`_uwj8e#{l>h<9GOSLWU z;mT-+vVTA)(!sv4R8QZ(eMyyUZ|CLKi|yUGMR~%!vbNRyUcN!`2(Z^LTUx5#+JuA1 zY7rMjozVx9GfhkT7I`?6$4$F7IECtQVr{Ty?*!vpbqlM0PM**pMCf~ z(%lt=vjMu9CMSw0QcooY%{&j-(^W$z!!DTt&HYTi_r)hda3U7sAz{uehno%+r7y5i z2&;tGt^osIf{)2ftoc>5_)V>k5UWcSmty)!YakmWq07H+YALA$G{d+pLU=j@d452O z`Xq|rFkF1H)76GlabEAlOfL-p;SDe zlj6@`1`=YxuFZ2HyVE6q+*xWfp_~675$enrcgos_EPe5lA7V?bXqaG29w5I86d+q zmtmdxFaE>+j!4PmY4<3;L}I3;rf8E)l|)GUlkt(f;7pkqH$w$18(-&M)K)gpA)XNp z-&_}{s45D`%ogMHfQJNk#hKxE`jxd}dkzAz4E4&LNaWMU&JXK4qnt$dET&!%M3%Mt zQ#9j&bbStk(^r2=(3%Rzm1!@EEh3s)BsDGO1fEE$y7>TJU(zeQAdy5uSWTa`ZCPgG zvid{xkEa+JjJn!}Wz(kBIG0x1Hdzn1Q5MlZ8y?a{sFhE(j=bUq{-UITEl9?#P%eGC z7Ye8fCXMW3$b_i`yL<^#w3#_*w;@w!1VK`XwW;G8r>vexb@qi79gSKiUzlJT|9&)h zRHdOaEn^Xxt|>hy@zdtp-M!bF?_T`8O*<%Ksc3>r0*iZdb6z+&1O{o)V#*VkiG+=v z#?3}Qg-b#7Q%5JY#l%0T2$go7wN*HyQ0PGQvLRBT#fgQUD8q&xw?DS30-%D-hP)O{ zERdKdd`bp~kYX^9mrN??dSiIgFQKmE=_;%quWpCqveZ}cSB{S7Y)5^?NNlT9b@6o^K z-J)|wOXhM`ONDxcI|Z`znZsD*0z}ech96L-{AFfx-K}I$aV48c8xk6B!ScJBTDnj} zhy_iS6NZQ!LwAZ!z#)s_R>ogcr#5uB>*Ke)3Qm0vXQSt3E&bR=z^rW0+h@fGk2Vel zr&kv$n-@Wuw*UC>gZA*aUH$jdr%F-!KlKCj36c^6qpociN^``>R%kRtaZSgioy)u9 zT@^Qd;Y1@?2NxqrTT1qW;!wBcnrJ$?4JOMvZ`S-$nNTUxWn9ZJ zbH+=9lA_+6bEc$T;UDqjsDEpL2f6ho4T>_)<^6NevSWR_MnCaTVgfAMFY4o=oL+SX z@YK#~h=yKWk%z8rzMob85=)MwjfRI!fLz0)4K3n*c)In)0XbHsPDuZY^$x=)kswJ- z=`gi}iXBx+@_35dp*Ng1u|si#w=cGsasPHtJOi(HNmLuO_RZVv-R;-!yavM=wcuU} zZ@rgUGg7?DV5S=xl1aXbWz+Dw@i)9(!of_U8->Fo?rjL1AGcq=*?ZaRzTW%!#oKr9 zp*Wx!R8OE2fd|QVXC&t&iVcG73BPMz=hHc>mq`!<#8fk!+7Ww?S40vtE0>hC<2)Yd zJ*qLnZRZ!wsNsDGz(~M>h|+qvy}=N;+4)J0o;kNK-*R@0)%8wYDXs4+QDh(P50;iw znN@2UF_4?m*e3U3o|}dc-4{^gCx5R2U*500wz09=m}OK#HFBbN;xIKc=DD%fnOY|jI>FXyZ-c_98+;S@ z0H{1IGV2?s0h7C!YxJBRamAo-4T>%__}IN(dAtaCa881fN!uiB0+`aNNS<1a-d9C1 zRYSA$Wc5IbMt;2U)?`>ZyN6CN?=r1N?4MlQBJ#to==e6*zLp{rqR6jISN+oZjh?vg ztG{{nT=Gak*oqh^0qub^U|Py0x~lA{s_GaI#x^U0(DJ?w6)3Tc2dTUURfj4xDaA|1 z&YeK0VcC&ymiyiQ>iYKvVlwN>{zx-Ls8o6oitx2aufD(l`3N3^&s$GSTfadTp@`&D z0-h&N({LdqC0^n^sZ|?{r?!NrFE@90Fhk6vTx?9B7*Fg)M8SVYA!T|FtL?US`6z z|6iS8{S$N*vhs0}^e9Dm>&czCeP||YdbIr6w~O%JY`*<_Qs?Oc+RneV{<^i@dUM6p zEgT(eILQYyE*wGakv4-fNXW=RIzNTMtSm%*B}ud>W?jG{3;$;0%jXYRrs zYbFU5F0*MV!PrR4CE5Q?3dwmw9|?e$b(smND}p#K6WVQp{$|^4N~>mccVV{J;~FSn!Eh-I>y~Y*bx+m_h58b4GVq?A^CdtvzGOn|AN9xl4b*8$bND z&IOEx2D|0M)@H;HKH}QMmLC5@nwVk-G>xF?fNA{q+iee7g2LQdz(}ba1K7EqYXAhSn5$#KU}DC zYvAjAJ|rDqs5`YwMOJkJ@Yg0VUn7<@yU*vO z!ekG}x2(&r0!%}o4tzz&P$*uZarm8;DSu3sc}=WF(sioScMWQSN<-d5L0;mmKL}tVaqGxsvNh% zChn%1c&4~Zx0LDPUDMyI#ne*kR@VSx=_8pB{8jTS*;MuUxyV$>h_hpAe;tlLTwj0| zbW)h{t#xQVTe3=p9cmhgII^+F8QfP1hlnhbSRoRF>=3%GrU%$ob@QZ+?bWyqI}vkg zV#APD>xCu;^86K=*x1RZSD5N%xqDTyWqowc4=D z(2HjLvVEJ9zrtzuB1)0LxQfqXEF^1ygk;jhUB^Je}Us8JD*w8;Y zrOL2G<}k~ih05_$=W%s^nXyUJNBrg63_wX(Tr^Fk}D|?&IUX5GJ zy?$Ge=;L48H#ZceExE+JhI2Qw_7XGwfFf$Z4NLdeX_c#QC@#yBLAqMI6mB%5AFP5@ zfswi1I3_Wc*dLZxni2pB3rPJi4471)|4P9QzN0+eORZ!0iAf^gBvWuW}?uAJO$y_22(W3Gn~^ zU;nH1zws|qN}LLQIF&ro!9#z{xa2bJQx*{KNoSRSp#ZM-M=NPDmPh9iIu+pH`toRMGir9%2rjNnN1h^48Jzkj=fS&X1^Cwm{kR+QF zBu8T|e=;uR{w%4aM%gy`kuagC3nn|8UwHdPd2m#sm;ebAR`ugxoT=X>;o2RJL^?j2 zjc0Mh=K0~(|NH+`y9X!qb_Nrgz8hZp;_=yo_+9ef@fRtHVfSoV_1y)%nZ4>@w9pJ@ z0*Wo!X)s$VQRa`sWvnf==8~-0IAkJD#>on*E>&f&(P#sB^6Cxqi*soquW>vMppD^W z?ZP(o7Cp13e^T=25Hd?;XuL}C*Arp)yjQ94f^~_T8^SFWdQ|w%Edib6Fnay6ICIjZ z1tsOrFP^{MES>sN9TifX1oI&}`rzcl!=x=)J1u+8F5~>4)7o)Wy?!Gijx=ijJp~n$ng^AMA_P*xIHRi;YG{-$BB9viaihufwEkJwzjG_H1AFu8#K&Wq9kW6QQCC48+$+9HFi}#Dq;$j4EGZ@ABq~eDX&hlSdO+ zcHQ#bo8jri4a%I~@Jjj5E530RFy%N#ofI-l-86quXrH_x;p{Z;>q1dxXQ#*oe|FK( zjwE@EMiXp@ZZD#dOoBz3s>^l9}2#i%QUnUd7` zkSJ@;Xd2@J3~r@}rq?vo{_c)UVeNVlqu`EXH7OL{KNtykcmk$xY%E9o1>0*q%EH}S zR)o04ZD%U;t*&_KSV^3A1l!8^NUOiis~pDUx+m~;0>_#olpAN1=%VRk@2gmTl2k$|JpP%Y&U+oX zuyCxj5^+6r=O4PR$uQNvc}p&Dn-|Htt9AZn z8RAGLj+3h;gL5;ok`UQqC-vzq|BG5|cdfg&)NOU;Aki~Hv!wOeC^Ek>nmm^x8oh=I zYVb{exxe1;^IBO$H1up%uyPj@XpPtxm&lf4LV-BJn;F`cjYrK_wez30HEqkpufYQn zHrbq2W9g$-I_DvLrQS4VnErG#ayS5E&U0dm3U#SuVm@eXq0y@;}C$N_P1r5eBQz?#H@!!#bOYZbf z>2g>KzD_KJY!RWz`zM5Q&J4i=RQHP4x1;ASH8mEr8U6mi8RUMgFqyI2?sdidpoli{Px#!83-^{*EyK|aL+fU>Pyr&AsY3=dKo&5tY@pJLXmtZEkl02PkAzIa8N|q+4bku|0QQm^! zR%xBLM}yc0;pR+=PW5qE%nVq`9X z;Y1^#p8R%uy**B4eN**0K^5U*869gpZk$}hRh}LV|5+`3ySNQbd+!M|nBMHXefMCY zTKK}0u*TyGhr{VQE~wod#HEgg8hW!&Zx5fut>l3%K2gED^*}qWF}>Lblh!u~FU?YN zzWO4*dC*Wn-5$(0Nkur^SKp&|i{JwD8k}(~p8S7uMHA-H)5l=8S{TcCCdXu2R!PWn z!LM_T-3rQD+_DhO@3IO+xN?EofO?hzIE0_pSQO2?D`hizDBEoAMB+`G*Upp-RgRJBn;OvcdVG*+^>FtEDb|p8dzmViBF;O8!yO$BmWss74va(@0VGKCkw}1WR5pp!RWiOqNSSNPIG> zcfXNOPqU))3N|dCyQB#38PlVO07+@Abzeu4Ll@7*xkBeUdrUC1FX2=L+E%rM?KA6g zy)HPWY8_HwF?o74?nY*e;6rDyDGR29XZE2$@(U<#+VL> z@$c;0aI=OInPGk9t=RWCJYrvDPzJ?dPsJ+OcKlXg20g-9G&v#qc;re4umAKos)Bx! zH4r~cKEO!@rZiX%K;NdhQsuWB$6eA~ zT7463n^>0T4vXM{NjFX}ssBsww`WUSeyWJ1&H#W3Bv^SICQSoN1|gUQRl17ony1na z=T))}L0K*K#K3@e_ctdwSr#yE#zDz@GDT*VVz5KGF!^h@wMP-knZ8JxLe@@-^zQXb z7p3+_aado*yI7AQ&ji)cvS+*JN|=*Cam8xBq;D-8*0H|jF8#0|#?T*z=dJgONU%A>3(K`wco7PYu^%)0e(SxP zQ^^_i!2tBc&dxIfZuT<2s@ub?O7!G8J#l+%x0D)6T}96Orgm@iH;OjUrpMmdvUJ}= z4&;%N(#5dZbL(`!zUBwL?PBG-A93zk}k68rP>)@ zw=G+Lbn7QEiz=J3?UhPh|NtH-P8 z#AltWSS`EL)>)S18|j|r=x6|tT?h=O_YB@#QhuW@>FRIFe{JVz-LDLIdOGuK1MoyWL#3)YCL@jr_~Lic#Y?j&a1q38VJ* z-7^x5s+%GU(~)ZO72J*ZAEg1<6+29$5q+hF}>3Txpjw^}~E~iq4p)1mCI$=B$m(%al4$c`8cmSEt1RDIJ2J3qlP-_Ui@s%=2CC{`VTFKAPggpxpsjcL#Xhagy?K!ICnaiIc; znp5PY89EdylNZ$GZVq8$;3aTguZD1|T^u+-UV7EuHu+1Q8@E#$pU1WwQ|Pnt3gxxX z<>i$Oi)xlRe(P^4m2eL^oyGBb$lnewFCY1n{;o$&S~=avw;;TdQU|niTb&0-R%uqD zS&BqUkYjjVG8>`WI&N2pWjjCtERZ?ElglziI7sJJT`Y4+vs^zhdP@2v4`|U8twuzgOkWrU5ht2e0f6=<(xi<^W&_5Yx)woLwpdl*V4=& zo#xLYbR&;8LKUQ4=^qcX!;MrKa7pk<=g0#6qIV zRQ^-_c`2w34WjrR1pcUMomUO&LVCF_tN;7-l<3}sKJI3NsHzsk{OU@y!)e6mBpz$1 z6IxZo=z|ehP)_n`0Q9nLtrkb8ACxzMqCpwI4u=9kj;q;6hvNt2-Z8i6pGd*6hfA=_2~jUeyo1|ET6(&4vT$-CJ*JiO6#T=%k^5jgI9t`zoRW9pxA~e$b{W!*)=9I_@T?Pxvp&>9D5}1YU|1=` z*GQg4$DL%soQg+jPJHX^Vjuqkd--l48DB(QYoW)NBX6NR*Pbqvx79>w2naqr&@_T|!^QsmWRpU;T0?O>S)Hro zGlg%I<2H9N3ui9G!(QfqZZ}Pg9}uv?`!Z6Lm%=cGaoW0wfX$JDA`PvTW7jMb!J3f1 zD}2CkbQE}gG*813bFWba+CBGb&|+^V4x+A+mg?zZdNv2aFMtKxR4T z@L{Oe4d;b+m0XS0vqGW!P=AEF?Rw zq0Y*ybY=koMLthi=z=&*N32P?XU8h4>5=0g-G1|>UJRs4c#;7oYVTp29xEwbZAkG@ z-5vv)o!dXR+L7hoOWhmf-?3nCII z<4;r0Gh|tdXp-YA8IHz#hM$NbK><(TF?d z!&|SuW)8J}Qz`7xC+mxP)R ztPG(M$4ixNUeVz&_*$a@8$O7|OusRe&Ptq$1U0?GYG*6IqnZ8eJXt)a^^bt=5wYFxZT#Tk)e~V!B>_TqtRK+9=eCR~ z?ki7$j%EZD5eU|9TE2P11MxVtk)QiK)cCX|H##^lHhS;#fFyAJne3A?PO&rz;xjjD z!!!3wg@e)+E!k|it6`>QWbNNyjxG=cwk3VZq%1opDWP5$fR>!wSaOoO5TA+zOwb+% z2F465yGpEQWAVyZSSuoj@A`wXADkycdx6pIg7X3nTwk`4u80h2Hr-r8MIK8c0uIRk zUVZEtB1zh;m_tj8-vCF71nv=P>I#Eaw-gg1aDJsHGdPK>r|%`9zNlVq3BC7r6Vi@1 z(3sHjLN0A|Qj#R)!RgAP$K;IqBpcyx zisr|oQRnr?Q%#tZNT#ZotIJq@dah5e=}|G&!8Xc+vR+7^$&z~FKAkWwsA8yh2l`?U zAh|_&19^C03Kr#uG2Bpenl{kr;OdJIA{~G}d`5fM$PlCBw87?rB{W>qm=x%i<{vCv zOc3sP8B~p`b~a{$GC)X z2y;a>0@ZfGkePX9$!qINwJdcv9xt!nleGT#MxJcYFI;Cl9LRcO-623j%{gL4h3m4~ zZfWv-KC{3Z>>MzEFV1@`u| zA>IwuX61yW*5z+;W4fSh6Xe_Be4n*OmyT<-KPTtQydWEAVpHW%ISv-_e1zRvj%aQ$ zv`Q7OlqziYN>U+c8$&dDPQmOQ7qZ4)jo#5erSrGCu>{ibo8^tw?nYmE<}Sqf`h@X< z8@=p5Ck{}T8oa9G!9k6dt4A@!V}x|^&cDLWtnqTzm}|gea{-GCk>UY!o~4`{>34_* zQVzPxVQ1F&g*?l7^DNAt|LoxaRcan3pAuH!PKQyNr~Gbh_tUYmV;;%WPzfw_Xf7$2 zmO;K-@we||naiIQ8l?WEEMAMjO|Z1#QJaE-@r5qVpi7f{CdFg7@V^GYFCGZ4VIj3# zX~r|f1C-Zq{sLf#1K+>j{Xg7Cuc-xausyYK4E*!%Qm zHmWk-)o$sU&YXp&r0=nXI4QSHY^=SMIzxB&4^T`iIagkYl*26RY}*vq z*k1$BxVYvaWT>KJ8y1yuPGD#S>=ywVtSVVavk2Gpr<-hrS9X1UWIO`InEMx_ws_lU zsT^NFx;k@lR7v3I05)Dy{6Mh3N|g29!t+)0%9mwcX(6IjK1xb`$jKf9RhxnP)WC%q zbU3*X)3BQfya(!%36dn4iiGL*?WAnA^J3qveoFN)&Ma6@1jo$xdo=0k< zH`Gk|IE@pNVwW$NE@kHtAUiWzsPTn_i%PlFz_@9W58*(jZ!R^4B?}lx0p9Ig8Kl~` zASgOMgNoVCp8ka;w0}=01$z9^DQDGc)O=|1q`WzM9JzCK++Z}NT)d&J>NH=vt6R?0 z;-zJhphJ&tNLq`|fbouO$?~x;m+Q8)Xq`ha{OYkd$z)^3i)f-1Prx~K0Fvz%4^sOI zmTEQ&uUri2-mluJciz#0-KN7lH-f3?nTt`ix#7FhpjlH`fytQMb>EW%d*Xsqedj{c9k`SL7O zrztH)Z*`&=!+m9HwXXne!SS|GD`9RV8$NjUh$bdO;TE0=4Rnm^beibKou8pV4xn+1 zCcoVwiOK6z#QzC_!Ql`>kn)L^dhVxZn=(z4*!2m~Igq&S0v1%Qn}$NaEtuhXrThhi zPtmefYMO#dPD#|{ZG{Y%ju?X$a@(`wtE=H5ZED_hn4i6&O|*POzGCTCE`VH(C5eZh z2O2ww&m0R>+cq6YN0p3De|6o{LWbIP#OrxLEVebusorghMRREqkG5w@)0?0YvJ}QD z25&`*->wS{;{yxuuGG%XQ5?RcrMoT$#dY+4f9B#u>VILr4Jbj;H+GuIp>ehS zd3f+ce%WUOwLVt}?$Ht8nUqMB#PUj~2U2ULcq9m(mc|Ig5sy6aLfJM`hG;H39yeB& zv5#`3)ob_KD^lF>iIK34L~=;%=93p_$!ZsUZx#7`X@1q}vSH-cu1KelqY+wVLcu;V zWHWz_tI2n_@2O&RC6ACuF+fz5p+u=8(Xl6r!Wjyf20es>LJ1j~xKQ%hQZ>&jN4Ca> z9)9F$p5}`pPJVq=JDpW2F1J8oaG~;d<)fy!W(!;#Au|h^LWxj|&O#Cq8Ggwf?9!=E zeSER9q@f;BYp8!|HATI%ghk7Po=4BP7;_@{$Szd>qR=pHoI|^S3;|7~BBHwynM}^9 z@xti}wKt%H+!#5a`+GPWVVi+Pc$oZN5}apk*iU?}5G*4P{FGJIFBCVG@MqP z5keHv0yZt9l5~*In$RmexdG1G3={L>V?JpjB)F4^^BpvyMq*-!J<*y+ z0BesV&OCBG#ml`!U<2fg*gYL=&09y{j5LNrfBf0 z$$<}FU4$bPe_Jfq80k~vIr30Ed?>qCg>wd-NCIiuDOz3Aa)H;R<8ufwkF%}ojM)qD zIDQTPf}}62-2~^t$r+2e--51F6)O>{4{8M3A0M`CJZ$S$t8CKQMG@bWlXiNBTf+GW zkxlwLqr-IDc*XR$teBmNgt!ZHmw^`sO0oOx)7^oKlp>g-0XK<}UP<8tzi~}j9n;Ls zs~Vup^U^jXHK}n_+Wy5@5lOvijTHK$>Jq)lX|)(Zau$1S%TWKQINByB#B${(n32hb zFS(=ore%}dj_&Ne+F=aG=3Az$<>FX*m1Gj+2HK1niKb<$Q)18*xPjksyn!O!vNGl6 z9yYHBeE!kp`SI`5$=W8sA5)aL{Z1i=b|L&wRGVeW#~(j;DDv5V*aFgs!L$Z}&V!F3 zJxlq3_44wzBtiXkm7e!BD9Z+x2Tc%>bNSn*bS6=gTcJY`N^Rn$rvE03r+#SfhbqV^77y(i9|GO71faDw&qjc(Pcqi~?I8XG34Y%+kx#m3-BNjTd{Jl=vTh+%x= zkLThxp{lu&darBE5XqkKaQVeL{}0ETa!M6GFdNZOb4gRx$zD65qOX9{KdB=gVG;{u z;;PS^aG+9_8ZII^U^K27x?D827prP?3J;UGLCoNuUXvv-Iwm&}NdsO)Y|gTXEtpUo zWkW;&D7yez+1IoeLryf#!w^=Va>jeQB%J8tROS}IZLmbnL z%gCTWlo-z;JeuvGW)b%dNR_QI*d(Q`ECu9wIpfii1{ScNsqTWf+J&lGSm>6OZkvwtz67h|diIbavvBklKILh7%oaiTI+(+$di=J>*0QKtT zGWqm~!T3wO7C(;*8bUyG!D3+?)@I&}M%*gb)XIZsbC{>sN|zFWZLv(fguBhI!Gyl^ z6oNDN#mi~awFxm_sPmBw>e;v@KmXrTf5`+Yz{<{r6d{2uZ{#(fBfo*pU_)`&tUfXg>;ZB|oKxb$LFC z5@~Lu5DA=T!+o#b(LS}@^J%Gf8ijucW469JK{V#_40UF*fU0_vl0nqpzkAkNH|P8W z4G`I4;%e3~3u)s>2BS)H$%z_14oR&JTCWFJke)qk501`Q--Cht4^A3lM(;F^2ink$ zy_Bl;sFcB#wh1MH6{yvl^Q!2)*%|aW#pj;I7E9GU{q8$z6e)JGKct+BX&7a=#7Ju; z24uLu{<*(iT{^>|A^)>b#*YCm?!J4e9<#kyFJ6=S{vk;Ay6ue(O|hq?g=DR69^a#S zjdn@*=EZrBnl3GUxe@f)FO<3V_=q=DI|}-O4uRY=#$D=&^7F?d4QdcG_Gc<})LuR- z|HjB~>L1s%4@gaY)}-07cbjstoK6_xr=dz>-G~US#irbW3Zj8Q|1tP{+3L}wi;akT=xK7~D(i1nfQ8X_`Kntm*TGHWZ$T9c6Bn`v z!Y)ambWw!LqZ_-R77+HBlk1cmk)3aJ27+T)&(r~7MR8^M+6@IP5{PcH9lsxY7!Mv& z-V&UQjiI(8h7)wz4~O1G%l?bZLzahs0B~LAUAS zt~$-`)R<(3zSfO4_nss6@w^?WL|V$$SNf6ml`*`aNgD6Rb~-AT{-VD3JDOdOi$zZS zEctoLdj5%W+-##^s8^d|pj9@98gzoa{Qo(;onASQtJFx8XayPD% zF_h}2um9?FO6fTO2L8O=!o^>0t**i;Ro(*#V-wOpq2tw=8fSo4%x~zXR`SkCG=1FI z{8YrO2r3;m!FapZ?_ZUnw6wqZG|Fk}XqyVoU~)V)Ogyb7=B{De@$}FR=YT>TDM|ls z+|#l}I#hOkC7YgJpy-8p|J;FzSPsCD?wVx91H)!&_i6}KFH%f3F`JTl%~yk-7$lB{I@9J=LiMtjs+DLp09#2`gWcBqm)z zjI453APLcfTIPwQO#YDw$xsyK1*cl|#7%ee>;6yePG%GyTYre&wgx~WV|?CkTYqteQ?k3*8_O!Q;bMQld$e>~lJ{qF6H zC;y>mgvvWqapvOjN{^)`G&3V%)gEG55-F2Edww8gjzpfSjtgsNob2h-Q6$rSb+PBs zbPVsvnd^q3&TcB-H}Vyk1iXHcO(}W;;#QawCvC{;p>ZY4a?Kp##ZKG1)MY>oWbo;K z%qcL%^gX%9;lNG$Se$`gTRR->!=v#rh?t%hx%h;x|9NFS5nFCS z=qZP%qWMM){(_ry+-_8mXY2PQvKL-=Cp#_FIp`Ve&}mLUd9k^B!S z`9>fe_q9mZl0=k(zg>K{`TPOQE>H|ABH=)vU*m5X-K#y}>He29JQ8D@Z5gb})*)8k zGJltuZlamNatxY{?VJmpYG+?(**3S# zsAU!K)nkh=CCqp*Mg=XOpXBCNoZD8i9ZNB^n{_WMx7Oy>Q?E1&1b)g|Pl4rHnTZFG`> z5=|(oG+3M;%Li7PL_;S{#Y&M+qmd)Q^5gdAmfH_*VTP?-oZ{5}f84#wC)G#|yl-Q*}+46CD-~@mG5JIa6fQ@ANrfQ6Omb$OYx;pt{_5HJ1 zd+h*7!j+jfl_PBv5j)mi&0Mqn=bWvK6-gCna(ZF7dA8#`X1+eR7Gwu78M%AT-T#C8 z#r_dcbY2>bK#fsG>6(%^l>*o~q1F`FiPDYvx{&;umG8lzaL7=?V9Qxq1-?=uWrAB_ z=~aE-!kb)e2YZaBzDyfM;z~lTq+{GLz;u2O;18>ynTN;eJ^C_}#rNTUOj3(0uBA>pg z)@1Xo%M3anI-TCtk4fPBz>hQ8&n9)nFNFf(r1Q;fnw2sDd?npUFB*6xpReSK!^dd7 zY&$`o8?MWaUOzA0SiJ`xV-DR_C*a@akTfG><#>EP$|+HMYkBE}yaA&^2c!KuG6O^N ze@bj|XRyiX95na$rg*6xKukplcfmho)vNYklU$PK%aIx z6`SZkWJp~zW5df=t+n=$GW4i_{*jE0YAdfS?fj9g6zj0qAh9KvM}+37H4(vi3NDSM z?3};Fp)7V|&n%3a; z6DoRjK;>E*n>p|x4{x$5Z55q-j z0V~MJa^8zjDCS=#yVE(1aSIXzZ~Z#@y}3`Y0Jz1GdN*BHF))uel_+Y(fOH}&vG@T4 zrXo(1gOA;F_i0HX#k;{r35P=G!R|Db=%=%CZ_hF1b$W0^Lm!dUPk6&;;eTmN$#UeN^7{b?yo{gP2DvXnXI}eWWKI?0A>mUu$ByisGEN@BZq}(Qh#KsW18D$>Yt} zn_%JapW15=4@UV$bOdok>q#IJuaNmSpl%ME@BjV(AwcFaFz5Zx4;cK(x4)VwdCmX2 z{p5jchI;b=10Rj`o zjt7sF$APe!%obo;)^Y^euFV>|J}D65kK@tL+%w}{dJ6|;zlkmC946+Z5^tYT--Pz| z+$pQ_>iGx<6Ldq2d`wJ2ogUkiJf-_)c*JJFM2-a&**A$sG4^J4?ekSgf95-s^GHS2!!00Q7?GiQacD*SP{cKi0~@^x99 zmkYbyyf}RmPD9!nuHRk$1TkM(6_$DelZ)dy0!;Ox5_eJ=%rkU&3m0&bF+w2as3DH3 zj%3*hxFP7|Bez)w2Z*k@F_x5gi!3c!9?f2i)lIA3H7{aVSKLYp5|dpFNCQE*6lvr=k`)d)9y&{_2Gv3WNR-(6}vO% z!X+g(EDk3|SFrw5Ox?VXCJ#l|R~x!wi(g*Dv!bVjMQxsLzT6x&G$%zilnh`ZcV$DWO_`=oVL zwC>MD^X2uyMor!w0T)8Z??w|pv&+$~GMTcW#dVvnJxe6D`A{W9DNt3bl`Eut-P60| z@4(r?>8+?z_eV|-2>oRPs6M@`1bnq;X38j~I(ET9h7Fj32`DjeuD0(uM6DL&q8eKR ziKoDQ5m6uxJoY8E;{Gcoe*bgE9{`==Svk^4 zp-jZ@4puuI+ZPYc&(H1-24`asIBM-E+_TPf@DFsU-N|5Q)SvC{^|yZ=me!JC`G2SH zNrs@#S&5~HOSnKJ_vxY)8}XK1ZkaZ@kM4yO+P4?6kl}#2Y#m&o@nCeLU*NZW| zD^=1n7x{dOWf+**sISwB? zU3f;k;C7F}k1)*pFQ}Hctwwpe7F=H+-0sNk4Ohowynr&kRYd?5FVMbVac1J94*1#2 zhxea7-rRch_|@YVk2cM?J)NTLQs`J~u#zO$!CnUD{1i2ng}P82&3G=OW#Ixc8|;DU|xCbMCYw}a5rV4Y&mde>kqW@`Z`mUMEe#Lo^?Kt_ocD6uz7$t>u>=Q z!tx-NbgQFw32Ty;TTy(q*l<`7Br$)d3@bxZMJkU_Pv!w-^^b`XG~b>ABbK8FmB6?} zEf_d@my2NyL`8eF%ABqpwnQyyPug3t~uA6FgvxD3Y(>Bu1x%mi>2moNY=f*Z{``N?#YWqPchOEUILo3uvAhLq#*UmC}wci$u zO(aQM?0;=>fMw;$Dq6j$6L#Wjt6b~X0}r2tj6t1H_bED~xRb-n@{(K07D#(9jz4jC zX1H^46VPjaxK6U0HSE)oOves1n-v10ps{V2v^17Zj_`=9oChR{%{t@Am^xtsKncoDKU3n-@*xy=+Tiu9MyK7 zlR*56@?odD)a{U{hB^s`obJUi3)MIa{pR~ISd{?sCie})%R#rckpctYE7EYO8Rj0{ zN6|aoms)2WOuPJ!ZKk#;&gG*9ngn!uw47|8%?btKP;d4xZEA%9pr8CQ>nT`Tn7unj z@W5Om0|PZGi9Bpi-MWhMZr@p74kIs=)&yFPPR|u3KLbghCjnw2cnuROgxT@*-Nmn| znwwGzltPCLOk^Pm4OB3NFZVK0Dv|}St+_hJu+m&TrZ)V9=6a=jxYk@>b0!PlqO`nk z9!#d^2fOUnOK##zD@ZJz@Lwt$%GTcf+Ao{mFogiHt@|+;NrRXOm zVJ`wx999?~G_WqH=1k$d{H-GZK>eL_uPJz7MSpucaH9$COr1ykKHQA~Ugu7P-^K>Q z%jd&#o6DVwx*&l%I=(nMpP--%tDhJFb6&&%{}{x}(e4c&Z@jWRY*&F)1&Z|7)Ocr^ zim=>J7i2Ni1GL0HA5d$ps67VqrX2mz&gLokV0c(Vkeal!98bm|Ek{a(dGojh#)?q} z#jRqyQXmsK9q;yFU{fzt*PYVsDh|2Z^O`|8tMJ?(@f*rq;2)j#-b}`CsRDM4$wCRm zyDhG)6i{F8uPpc1NrsMfnN(Cp1tY;eX3I+(ArHNOP%6doHSFWpkyzX0U)S$MU#m-( zd37UlIeJDm88jc>o}ZPexO2gWW^sL$x?;CtekHOlZ1F86!r!Pi1}ORZhGni4M$nPX zw%yM1!sHjp*1PXdm@qg&d4m~ql!{PU%-<n=J_bTAk&wvb&e%zY0~9+vOqC?J=y_<2GS(4=Wqo} zT`HL8q5!L3V+u8`%P2@eJe>cxa>tH%Q1AMT>^Wj>ncP%etfAX`?n^@=g7gQ?D?vF!{ ztm~eX*O7JDQoRhRU8#=*?rYs$e~s^tZ!4!gU**L%Hq|pvc+x{o>UjgL3y+!+ijYU= z0-gH}L?41DdbM!!Co*x#Z@y1D$iNbwH0dc-oczX*-ke&G02OmllQk(IoMh_#R+=^QM%pevMNmSNAq+bpW zuEygNWFZ19e{L+*lpnTS9s)6LbWG_#Zc_wXxtL+x$c`-B1UK$@b|_MJSxW7b*#wwx ztZ&g(R;iaa>VLU(XVdyfe9hHw_yz~W(tQl){C(x*m=jwM7%+vMey z6>BTOKi2&+)ZXa=U$&~rv%YE>as|hIrkvX(dc zZrlxi<*dk(_d8p(y1cG@+G_#~%>UnXiGLNm<0pxK_#bn5`3Zp8&BDkP{q$ZArHqs+ zVwTYB>TG)*mhaqNzfQ|(1-a}?C?7R)Kh_x;ty2BZL?F(pgT?hT=RSG>(0R;;KG|F%U0JD9ibRra#Mpw zmYrY@hE{hHRmvZmPiKl>6)N356=Om7=dODWZKT#q2eN5d(%)OTLgX(btI^%eiuTJV zPp)kL_T1z_6z38A-@}qBC`XX%Oy(Lc0N)W2E06fHCygOIM zCxrtgL#rLe6>LJ!*@5!&2p-oAK-My~jU<6Ync49>i8t_Y&c3Q5QWE&Ap00 zr+9stu|fz|Zq^z0R}J@N@yVD8Df(~0g6Mt6cvN>n<)4-oF#dAr)V70JKDF8S*ZkN;*ThHYp`k6Y<2 z*uEg?UzTif4se{)cuIM%_NCqWU7l^Kk+SpCr#%k-M7q+N+9wfo)Uvmg)wPW!6I&ZA z68D`qPIvB_*V>mA)L46$i8SpY*XX!0I})*%%VYenNW8pCtwU8TC5sAhzwIWuq^mpJ za<$-HD25yAKdQdj)EJ==>FhKmvO8KGa&$J?IfR%9zCllFFxd-H8k_jZ$(8wb6N>Y2 zHD@XW)GRa9b+m0|CR?*Cs&V3BP!R#=U%J7u>)o5%yV;Cz7WTE{x0;9FiekD`%okfM zk%Gv?7}$~1o65{ZCm_;tCiOPkWhU3=Hb*TV*@N+JwvKWyv+>Td`J9)f?^MK<0T0of z!az}C)`S&@i|=}}_g)2290f-fjUH5Y3jZX91^JD9^HsvW;_QTS*;x>bj2-oN{-AdHvJ`Y_#Y1qJ?!@ z>65t5_2e#7Ms18(p^m&OC@QY$CAE~(Vmi7O1R*Bd%SGYyn4GV{u9Z|MY*kUJ-7f>o zaxDToW}aO8!uhe>g#G5vs8n&s@#&z{L9Uo6DtrE(C$6iXe>0tsz<9e7pk&ZM8z1Qb zF9Av)2b9WVQ_^dI+7*)Y1H#hg-fNEb(qB#tO1|VQbz-aTJ=*%_=`&36Z@$@l{Cexb z)7P8#)>o?wG+bS~yHsGDh*Ke6lNm-07c1$G(ff9CfE3g>ywdc@Gd=L8!5R7p$-sK>E7&G(tl|guWbz>-ymeeb^8x#RfS?YXoaeJRc z48qbUKojm%b62GDJyvkc@Phi}JQk6Ic^PJXrfkTn^t#}z zxelgneH_*~6rv?z?a@-l9kC zIrK8|9Ix!x_9dxr5rj!h+I~vH&gsFwq-i65y^q^*43$lZxGeSd_KwfSR>@q0mhUp^ zn*O<3zD@SVzcdS@Zndbyu2PyMalfouLZx5-4#UQ z`S|WOK>^ae=pDsri#VbSw3ryb9BXQ4NC1H|I8%?1f+9;3; z*Col2INhh)(sgx{3xe^@N-KXr_pWW+UHV8TypH_&bQ--lK!LEgkt6DTJhFNp(LJ@? z-qgOGVF$fvkSCi#?sLJ=H`0ejoVTd4JOnE61l!hZ0}?TT2gd0Xn7ZJ4fm{?k)gSMD z{rr?bryZ>Q3@LT={svSIahA0C*88|JT)wj!le{c!%#F}B+{jZj|`D&vRRxs z9~0R_>)t0={IQf7i>GWHv@0(0oLcJdwN33rml%>e))_P=)0#dKRJ|1Z=KJNUByaVp zuCEUKADb$864R(et!V_wIYVp%l}%7nywYSraQ_{tzhFR(>&SD(G*M@l`rg-=FbB-M z5{14HF-(cZUqQY%MH#(2fRS?^}dDW9sf zcy}jorWmSGV-&lI@(=av=QvsJTXD|M1f)|B(c}i{wNHN{cmy+7phGYzl%1Ip_458? zfVRTL4|-}$|2Y+)FjUU?h$f``(3%OO--}UpZr$9p6gF=eY^)j4g)g}5Fb=oM1g_V3 z_TIxBmN|RHr7UOR?%!N-FJ})+&wtLvf&)_RdlSa0*Upo&BJA+V&ihnkl9YuNgnm(R zzu^`EYoSSmVyZG$D#GY)K_A?PsJKdD6CVNY1^Uw3PMFuDs&08Uvt&S(irKRZANm0e zJ&>FWpACVkB`c-l@@Izw+%jbXa}LU#%a#LU@lgt;?eHr%T1+P$$eX()$zGMOE~ z@*R2|f9p za|V3E*87yKHB0SdVMSR@Us@7)*yJk9co&9bVu02oyIapscZvOOy|i}Rqob`S)4e_L z?XE4!^Ap`jznS54ECQ{{l zZg11AlB!egAhW?M`*dZ4Z~(g2zpku->Wpd&S|ZQaNr4Z|k7Pt^wrkj%OcFLjsg!%$ zgy+jVOwh+)O;bwU8qio}c|Ckk%l+~&(8TR=@4;V`$4bItQ3a0PNEb8 zEA$q>Gc7>vIChW$v*Qs!9@(YBL)lw2Q_}LOr43mpav^>zJ{l$TrL}m$g7yH+t6W}G zgn#WnG38_c9Z$}5U&882UAs68unZfEHN(Ub-|y!w{oTdwjze7`p}{7gJZiN)YSJ4MC2XZ!v;W?@4qQ z3@!%DBlK(Kx&W^(e2*Q6lONULVv&pZQU~`E)4g0gt>QWch>}@tTax15d800vMRB1{ zSdk5A5Lt^~D}ce1T$XRA~D^?t$=%`MmB221mTX z>l46c(VtCnU$Hi8kAPO>MOj@}ty_>7s4*wN-K@s6w+KHq-8IzQAO4`g277I6DL?jJ z*jL1eY%)4Zon+o;X??i04E=Bn=GKv$?lk!9H^lom!K=SRfL3$W?w1JiAJ|t=BV9R? z@yGVd(*tayjZ$HfiTEsUqAIx-3yNRa1(v2R4fA{_6bsKe>K-VrF+YIMezTpjvPf?L z@WasC>4p^+FVQJq4q%D#JU-qYTQX(urlHV`f>K<>uTu{wH94)RJ39}Jo5Rb%SFvE% z9RyV+U4zmyP_AkTRfK{(i$o6gQ7JaB62;Xba(!3K7YdC<&=CCtY2B7X!W-s>ioE(- zqJbP;(Mtbr_++8lz$IcZFq=YxgNOA&*@7EQ=#AiBBGAH9OqVK#adMb8jLxl}q6QNM zlg9nvJ|cjl+I;%*MXAhh7fed7R3;9Z7!gNM(^>3zJJyG*1>e1=W zg^;Oa?k_cuUO%#yT*j}f3Xip|FkHUfEeD|lvz6YO^UC#Wn|U%Xm+w?&9tC|?K9OO% z@}*_79WQU(xkhQy57>G7web{qR@5f-mT96 zI5IoHz!&l9TNRPCLoS>^&r4EPGKlsYw?Bwyg+f&!)duEbTXQtd)wrFkFANpjW#>J4 zQlm19+jwTSeC4=l30I}_-~}sICv3PRxMHu(0cyC4Ud!}KQ|$^OOg~iZBrG8Ca1eSn zCRiS}Mq;DhTHmJPgtmg!Zzrt&t?AFg&`8+?L}NZ<99P7nz_g!0--=9H+DINsD~RW= z;39+}gsjrR)jn6rY047vbDvCb!pu+1c0MX;kV5ZznosH+wMCOElLa4GXE226XbN&M z3>!+^a2_yWvFte4j^Jy>CF0KuWUuzQWR)G-e(K(Ov8@=&F?~@E2F+Q_JIZN#f=rSU zGUBo@^&l&0W83KZjsPu(-7%oWI*L&gz4mWmPvk^^+oxHaj)+1YUT*p+2!k_GMwAFW4pY=W$taEhRl zK<{F;?sbkSVQ%$qNR-Ngp|iwKo6la?_6q@WuiaZh#BN*I-oX*xkYQ@Zxx{p{cwaHO z$qcT0t9f+_B<%dRKU1#a)?>;Y9{ui$GT9vP-dIB{EoS3v#6%N3+Iz#h|EKc+O7NW9 zemeH}S^9jn)-r&46XRR)_6G)O-H!hsNF zlPSifsCIXhV!CUGA^Eiabu+>+8c6!4`J{XK%LQz}6e)}%3ug-9W*q@yaBid4Ck~sH zH2BDpN9=|F1^GEEp}I%RBUL@E!*s&yipAIJ+D9wb*854RJH(=@gMF~@!iw5}CwQp^ zx6}wIcd-syeIZ%3IStbMFw4%ola*w;y|QvUk_?K1lli}G<}q9fFF5fCxA{Jyr`P({ z?-_g#5BrJ|YVY}mx;}n9lL77RD*7of>ey%WOC z+a^^-eov{U(%xXUXGfVCk9AQ2NnNd8H4l*3o?U31|Cfc zP+QI~^nUlKbdua6E-K5X3>{Y~5_bieP8h95eSw2#_XsaKL)aSc5_)UJa-brKp^TGO3GVv?#F+mImK}X9&Av zY)`U#54ZdQc<?%L;>%bk z4-|wcVYebJDQA@t3qN!UV;&?Aa5OO@kX`uzbQ$NB_3eul4ZrfLB5>IB{@bPP~! z>NmT6v8Q}0S^kz5%%N8!@eStwIIT7)tLPYP=br zRRlwAH%{nAQuUe(GLRGlnVc)4q^JaaD6Si0Hs`~z)w1wBtf6RqG~aKfcV)f5A|*>y zDk#aJS?yM*PDq8*6I2$c)EqFSOQ$h2R|jU}{k;*DHQ4g9B?CI$R7J-J<>x>nPehgi zSc~5+-uQxjsYEkH`-j$vHL$+zlzfVcugX&e;D+GrhvTweT3z2gf7pxY#lt08t5A1` ztr}Sv4ojB=0<+U{8$Qd-fMvv%_mGoVxgn$@m+w|=f+iV^2+)ZsPxC(qw}DFo^N_C4 zRCZGiNK~1LF+vfx`Dr~>M@3mW;;mA{-Vyn>$!04A>0&Td(6})Wgc+1BiS<`ck^i0G`((9OBZv}CU{q@J>mU;NT~=m+`@JEwecA5z=S!AB zvAvC#R=FD*-DJ$oEobpF^K;kSwqQtDArP4W?BlaA)*Bm8H_)kbLo#$pSxYpW0_nm3 zJieIy+H4+DrWO_Ca8m!sxpTzR-T=-yo!*mhe2L3g8V##kH`fZmsLo`_D_Suj|RAj&v3&y*9#hmrxpo~dqyOb-v{ z!KB1x0jG{#(m-*;N^iq4X^q=33n=cSi!92;dKsqRS0%xI^CJq+a(dH4%Q5gkG6_6j zX!G>AJ|D3>i#jNnzDXz;1u&zWl*40?FXW?4safH9DKVvD39$CE0SaJ)n6Vye)0N;`_F2v z)uB45trD4C=EjCzSJe@mj!fh4E{+PE4(R$&Jt{xqP`a{*(`8l1X)hE@3N;c#0Ioiu zLlEg?@6Qf;J3k-x#>XoDkCgL@SVf#bQK?r`Xef5XAmrF6Xh@Z~^u%LDTqv(+8n+^$ z5Rr68!%LaLXJb^e*)dCCI>>5IQKzS;J~5bY<$v)>`{ZI05|LmxsI0c)x0ufh3-72l zdJ?YJd`CwVBY#D#V;XHvLqPkKD-_>3Z|KVCNXobbBH7t7^(=j$;b`uZ@7vf|qdpOR zP}7=GF$XStKwNS{s30ItM4XX)?62&h%DCbwOa*E+x-^AqffZO!T!~MGNZ?ij%6B8 zr&t)7*rA{PflR>3^y>knhbetLFd!Ou$f%c8%++G2tBBEOi%%YYml13B*7=oWorn(Z zr!7%~zUJt)e;E$no&bY6ISZD_ZR zA}6`!TCm&A^;-&Q`D411?${f85KNb0n*h*wI{3|)+^y+|zTdxZpGs?hyTpO{#ny#X zrgw2=w;{lAjA>izFjxHCN?Q^701 zrl_hSOqfM^X>WHTp2&Sicw7YuKJ?CI?AeF1T z#t=Agoch+z%x)XtH}duscf{@K4QsTgvDIw~)yBqf-JMF=TL?eY@s{>Z`tnU$)1R1v zM|}g`fw?98MsVhqRN~)Ri)AXb%3fFwAIM2iO2QtVIfvTreiaI>tN{}fIfIxnES3-k zzM-*aY{DXu*ZB}-zBqC9F{5%!cZ%(NPR~YHq!U#4ZxyUWTOJhEMz%T_rC;9z&4p{m zR350F&waFH5M5RpwU9vf&35BCe(`FLTShX9$1p=wMzW>!YWezj$A^X!+e`hmP0`V* zV3jFqm0#LCqae}MsXAs>1;Lls&3O)I0}u;+b%r}RrC`^|n3mIWDwU*)!9S%dq8S!l zacSi)|Gzr?xUP6*)%OqUio%)12`Qc^Vl}Vq@$R;zg~{o&jWEM+42_9cFfAReC`hR! zXZg8)tf(XEx151fPUf^4#C34muck8wGKD!Os+0@%s=& zDh92laVa^&@M~9KXq>yc6?2nx6Z~OYoz`##Hub#1?vE&r!=8F|qH!v4ka-ks5r|Dy zr+un|=+BUaZhb(MwWp6V9m`f2ZexAJL0Vc@J4A%Zd$vzL0`n<^#Vwta?ZFyU*Ws45 z*IPt2j&513<0ot&lS)W7fDOvPmVf>&PPg~DS#-Rn2gjval7a+D{DvfSvCD@&dJ4w= zyw8M zQ`@{J!y_3^A^)$;9zotFG!WWEDRkwonzfygoH6eteMZL=K++$F+Y%Hegz!13X^<-w zc7Epb7}+3AZG%c@wE~>Y-vQmgWrIfC`458XjCyF_n2RGZ*=5uiP4n+E+!mv%Ta(K9 zZ1-?rO(nBjfdqL_MM3-PItpaq62wlVs8~KvTcqTT6s2fQ?Pvr(OncMM%mYTEYulB| zN-KxU>K+@uCl*sb!_VwoQ5zh7q8L>aU{NthJ2>z}Y@zHbrXCd)ny`k@@H}`&Xcv)E zK9BeHB-r37POy3H0(RXi&OGvijIt-~{48?jN*A5^ng%4V-DFI%m>DxVo^Ga@*$Pr5uK{?>9a!*^T23nQo!1WPigo_h_Uqv_4dsWUlu5gVIaOEzT ztXC@{4Cv~&$QKw5|FbB#%>#+=H;v7Ci-1kqJ;w#TSC~??1Idyr#Nph?GEam& zSLX2UJZ_twmZ6(=+J7cx%A{7Of|VAAMj5*}!r=ACY;();b)7gASPx36qf}{G&=q95 zuM}QYm5N#{15Y0`mfOBS_=+l=w5gPuwh(+7eN6ivn>-TJGSARsE~)IWw;MXqx|&avmca$pACxYlOYQjNsL4~e$SmbIx;415e8ev z?29?Vz+ykDslylRgcR)9OZu?;mu^SbGnIZo9n_^q#U)NotE|0pO3@0hP*S`V_>P^h zIcnmwozo)*?#7P{yX>xbRjCtMk(Od1u18)(0uc^(;#~1}KsrSsj2qM;Jx#MC<50WK z-wN5GjT~H(n2{%T#P>MyDu&ajh>TcyDUyZc9OCv&0c-rCni!kT|<2FhhDNnJ&w zElo+Ux99ERVAFcvm|zN@{H?S<|2~Rl(a%N zeTRi$ndeBW6}kX^6ni=B-?`H_MHbih)sm~mVO}M>6u>97UzM5`bEJrv7%#+xq1>uc zE2rlaYG^QWTox?69-(p{jjgZE6Qbutt}8QneRXA}w1LGxqSCezM9JbefUzbXO+KgI`|HuqlfxSY#NJ_mk|i*MqRO)uE)q^u_Eq{G=X}xV4X}K!0j~oGSL&>c9qUbD@9N+{v2-{`C2NF!s>s*IGrL#t0 z04^phy$}@2z=$1>pR4eTmGaPW?V!Wr1`IWcYvJ00w=qCL_U?? zica*K7pJfj>{}$QH!8H*+H7uOr{0WF40{!TLeVJnDG)QhTh$ckSOo>lp!=>vSO^Fb z4Tzo7Ycq@!G##O#C*cAJf$YkFTxbICu6Fqt)q zqU3owg#FDs$fpE=wf(Wcn=?@DH~Y;dQ$P<@CqB!x)1s#=*z4QPy}u109`PP@X=(MH z31a)45XGsk12TSQ>3s%Up>~bXz7pvQx$z~YDn1?#u((O(y6?Gqf|txg)fMa^xqISl zr74@w5-k%?U2&p(ho$ix#4bl)ZK0_(&dXq^oU#O9Ajr>7G0_1WdV*thK{r-b*KgDJ zt&AhspD6BCrlDeo_#k)lBbv>y$e$kcUO8g%Po55tMqtzaBEFgZE)s1+P;pSyb(xEy z#v>Ww_XL+vJYNkUA<0Wd1UYf5WI4WddveqUT!IxMFVc>mL zA<=1WW|_xuOy}kmfz9rjQ@1wv!{gY()!9DE3#|yoeL`uf)sFaSQEqJ4cH$pD`z?Dp z@k^`@+#tK$DN8d@;m+{=T9uOaMd4N{Wk#cFm61%0XBUSPG(@$1Q3SdbS)YMJw6bk) zCaHHt@TOyS#TtzPweNTHT=HE2HfxJVAXjIU9kfbxQuhpURD6~yE#Uot5c}(K2=1c%wN_8dn&{StHGqNKPO7C6& zed+~pa-z&!O_+Ri2euy4S!aZXeb&}Xd6dwmCYQcq!CBl>9M6nU45Ux1B~(}JNtdr; zrv>_fpZDl!0=SG40$|t1DEl?j9^M9mQm;!>m}gJ0X#oS&O{s$)O?8J`X|9+82SL>I zUOfM?r>fXR)@+^=Vs4%x5mB2I3@+5((OB-va5B(a*Zna;u@q+{xZH@nSD65gbKHBMMkcgY(~ByLXPaie7H5=H)vS zM!mcC(Ryve9vz$sN#8)@1BUzf{^sLHZQ^2y9ZttxW)FK(zlECY&gph+?~^uvW2SQ|)RWN-yv z;xq{d1+U7*AE7CMs_qV&AIfCkpXzYieL;xy(4S9sDc^(ktr>xElX<_pcz%4N`Knzp zf~RlpNa$cMW^JEFMx^U;vjZ{Dff?Rq$H z*X$dNLeD#wQ1LSUCAd!-u_{tztd)=EyiQB&AMs+lEkI4TNxILCgj0dA4FVQ$38~oo zlQcG6;Y4aQf1zAufbv42Q;;Nef-3xL(O-W35qngFQznJ79@-Z83{sEUTS&&3k!xf; zB?Cr|)7obW8d*T5;!nN4!&FXBM}nmdZM3#P*kQpeckOXZA)}1uq_V?>xOuI6vg5QN z2dCofCz{FpnNt)bh#2Mxf$A&~#l{q&;f$b7p;QHFPI(-j*(LUikLN@hh$-@}$E%om z2EONhX!p&FGwn@^&N3&BEec@Zw;m5^Ujx>upg>Hw#0pA8QqOW6sRvoL(|n4rWPNR( zP7V)G^91AWD34Zv>TYr5fs6irGehGfK>}=hy!nY2S!Y)ZqKoJhqbr`I|25rQEEsbL zA04AJEo<6MAH&!{7yqusqaX_XbRAuw74|8W_Ggryp+ghf#9MR_F-DJ0-_mA z&#Ck3!34)80tvF_lAT}t)WZ$j!-_sXh3C!gNqN0>aDIMvYj(V?-|If)FHN;g0fuB! zmV*J_2*-9tJw7rQpm1_ju^YW7C_>#>2+Li3fSu$pG#K4<@_v-xm3z}P-@JVBdTaB? zCr=)4zTPZjyE<@${;QT0CwL!t6FN&eM|>7;Hd0yi*4y#+F69AP#{4>MNFJ18pERWT zu%n|BIQw+slQQX#gH9)XJmp>S!!$2EAvTUjQ~+rmP}7B)`thXdobcmI2|n`Yg@qZW z16JuXMcV>R$*gsMV)0zQ<98f}Y^`XkYMB#w2l({3@Nj|vmc(fvntu^NM~cO9o=`Pc zovqz`+gDjdbnf$NgBZbXDj3kuU~(u~1AnzJ}JD_&we&ZDBk;t54GWUSFFcin3>|pw2B>-hE5Cfj@hQ62HDNAajOWq`1RM= zd~>L3dreC>=5S=35{R$5VPMl&-O)r+v00m;E6oyla2GVxMt_LB!!4Vf)laiNn7K*1 zUF3_9yT;6+VKFSPM1uW?nYT+p+n@H$Vu!NDCXVCryTTh{Ht(YN~HDA-? zW6}1w?xJ`O3w*b{3=y24_8jwNg#CBOL;x`R!#xJo2MRS6(&scTj*rO!MTJ#6w~Ch6 z?<_BcTJMvecfFQY9j2Ph`+Z}+=KKf-Z0vKcNTR$2RxYu4HneHNcDdTr_Nfmr-~HXu zar2PkN>+F6>7Sf|pOOWt;j8&?EDcwd6_7E6Iv6Y0gIA??zwKn+^ZF>SGGU+uC=?%AMM$O z?SB=%s~G*4L!tPQ%7=!L9nNE9l@+E&$vxsYZ^`Zo8(C(={8vsk{~eAQyV^7zE3~2z zvp zwo#1a6{drr8+rCr?bdI{CK+7*#0oVmQAwu0htzvJni^ouT>EVl-C{cLElLR607)P= zEzLd#Nq@QsSpwBQ_KV-q)$G1uQEO|Cybego-MqYW^NO2%hF(;fnZgZEz}UEvN~~>w zZ`ysWQxZUNQzF7#q}#^CjLZ}RSVp-Cc841!HusfMF8HLc&}1hzj%sAOz^Z};Mi z5qZFL+8EA6{#ELMy_3zi1=}>N6|Dsq&?E-?lb;2;OcSzENVbkjv^U&-a@8w5P9Wr_ zW!A(=Fnv?Im}s5qlP_w~3_T#o=3J_1dVP6yHDdpMcndEP6@vtBhZ%ONtB^kXr2Q|iT#m-gjjGZXWMWv466Nj5$A9)9`-nu zmMEo{cwQ*IA}RiudZ!D2tT>8Amr|)kwwd3a%0t*FF=OZTsWH{fe2iQ=?~I>_EZbV$ zp>3$7s`e;Hk~&%VRH!68ll$Z@jdHQEl9;v}JC3J?)^I5%ev;B4Ne`j_i8wNFNA zbLzgln04Kcy@K|fjv9MgjZTVD+p^I{@6bi3i~{LGCvsGj{q>OS$9mP+3m4LHEa&4a zOI1^5-$*-@xEVGU{|vzA0-{F^d7{9HF2fZP|F>Jwp6d6zE#fbO9M^F?REP~gr#iomF50Jt0I=5=)o?*p^a+&`NJ8jq&gOLvz( zp<8@B8Hs(Q)6Ad)Vk*+t5EJ9(;lq~zSGPtb_T_U6P238 z0VdL>yBJ0`wkC`dl7z-sU>5WYaL-k9#k8=5YVJl_z`d_y z%)Rh+Y`%K@>{(rr1`oK9PNz*L|0HQV*5RVl#7{(*vbtr= zDmL8Sb^pP$m#+u<=N08|ORh-}%Ue_gQdLUIYbG(xd*daoMXGX{Cz>cGXQHIF$ie(l ziS4y;u9GR|DD9(g5O1TP<`_7DK*o01U|!qG0J}m$xG1>U7BNNV3@(McH||f#%CCgO zDmfiR^wgsBhp41l!f_eoSp361OLtpVsZG7cBqJ-XvO>~ea7!a(xyqf4p>}J>oy| zd&>BTvL_!c*d-KFlS;wCgPfUY}Ghc;++a(Nd>H9a`d4S-zlsOrJjal6h~NkHykbxQA$Yv2Rw(X zMg>J`1Ac8|d03iN6&vGWn{b)&&6q(TE#xD&1|c9m#nx%hK_D@T2Z95okh+mrfXI{B42V~r3^?@22U`X0p6&s)(j|4RPu zRv_rolKnWO%G@_*-#CjDd*brq?1WVjIJPMUP5Gr(&iLB{mriX>RCExyfS{?Jotk?Q z^Y69k?!SphZ%vPt_l`2exU$Py%C()+lB?^zwq7s=p)kz7!k1CE{lkbXx%j0Vu#IhX z`*4UJ@V&)xk;(ntfeeLUmIO5I;IEGnNlsw|-dnwWS6CE7h3l}foIs|um?0t(`ndRx z9;qY~E1J%pT(qcU#{-IlQFCN6TWB)WAQOb9zo6+^A#d}hwZ)lyCV)N+asnzw!bKi5 zoJwed+^=IzQP%=Mo=1V=H&r#t%}_Ngu*B2|#|zJ{qA7OEvKordBGLvvj(u%?)@n}P7DhG- zF|AUT8Fv}Ekjo#+g&ba;QBr(mSEZBK4B>T&G=4{Dh&a$h6_rp2UwpG!)B4KVM(Yo# ze)9r#?A58Ub=9W#SifluNUxfuRQG0eWuvv36qI4}k6MU|9LwO=FhGwW z7woZ@tN$DKME3IC~r0!L})7X8417qgLs>P{7QCx znU!6$O)nLvq6U-)Z1I2GV0D{~5p*7Ne9`;Y3e$L%w&l(MDv7ko8`AjaBuZ>qw+0L) zb^O=bZIuBVb=m;Lj6!9)UwMF71DYmhk7nJYm>!DL%AF;GY5Q_A7y@#%pI%C>sP$#O z-n@skEz9We0M>jub0nB6h=<3{X-Y->1jBZB#8obq7!t8`FRaI@+spj;m)|L1B2 z)5wJ0#n#LdW6ahf)WF@rfch>Ju;?qRp}##E@W>W*Rc5<;eVTC=z5Y-3RP*fTi*0ga z{{8>>U;n2~s%>83f6<78|R~J0AFA&nj-d@r}D1dX?-*4}LL7d!rH%9B3 z-9q#1jm{?g<6J#I#(}80$u_W;R@lsxeXx7r%tgKo zSp)(2eR9KNlZA(ufQ)wKqzsu#)7%0rt`AF^3o8Ll?ZAMo5Zox_?Z51L7@ zG+xuJKEQ$p$PV;-_9!@}>RG*|4ClCXUNUJFtS28Lw@FnyJh~fVh}V2OsfV zkbDgidl*w-tuV z19GwhTz5ha1_g8>@(X$vs|BW#IB>C2A9gGTqwY_bjK?j88MdYpwg^#}BD0#%H@4Ng zU~cyyHU=xV2P=1|u4~0vtPrx6=C7UG$X`ai-z**N7IGDw8M%(XU)M5wPF<^}S#K>f zx&f?i++E)Im}O>;ybO!9sS9nD8X)x+qsCk3oye=SLW-*z@yX96Ya{yxRnpy7DM9I) zfN?0vf)kGRM< zXO8bz`+mpYlD~v8?7IKm0i~U+1zn8SEc#G4AZdTDr305Zen z=9}?$1hMGlwSITyqelPoCjc__k*6m}@^7=l-WjKL0JY1@l+Kky|N|fA~q|t z#kgi)y#GQ!o{o(b1dEExXRKAvJ7lq{HRG344wNg>l@03^*B)hI;DbtSkSqxC9XSc$ zRRDlc+Q~CCvHO6gDl;J^!qdIx(c=eO4}N?~Y~kgr*R+*2?O%M?BaZj}fL1N|h54fgi-_>U?|kOYKhK9#MINZ$+bkgJv$4Z~4B1A%OJ!W7A@ZCC9w zIvuX*Ds#71ROER?>)LG|ppUA0#c}f|YU`o=DqF%Z%DZDE@CB|-1s(xxSU^Mx8ZkXC zlbi`OtnmR9?;quKiw0QWYKZ^ii%~|_ZxyF<_^9M{B3r{J#gBGDl=w}a+nnh4T)F91 z)|Q4=C30Y*Jnp#_|@ zTxDAM(Rw3l zd>@u0r)YGd^KCP-{@No$5Uj7-I;%}xU0e5%U^&SS$iVw=4%|a!T^vN<9UaI<^h!FB zsNw3YxUk|DKnyB__wyeyy5CVIV+T9NojRVv;#w3b8)ONhzqhC`^ATYNj`#QZ*?YGI z`P&uBEwV?$l+?|22tjiF#S*TRZ@rpD59s7qy6QmPmEDX&qFJnZ`mLoAw@VV$0A_`BSlHI8nzB zV8)+I(r^ZF3g#j3Z?sa}1^u;QZwP44G`UGw5{0Ri4xIe<-I@PT^Wx8+NAJ#-`@`;Q z*g$JC8C!DcxuP$o{Y~PBm7Pg{m`D&z&P>o_h|1joEKR&SZ059y{T<;1M#VS7g(xqf zJ}UJJ7={DZxi5yB07B?-B7)4SFQIoPlOAn%DbG|N!stx~k;aDPX75iTEbHE?)|;(W zX<&BcV`Q(Z!K7OZxJL4*-&Bp4T<$tcD$TCGek#bfhZ5cIxcz5j+<`R@#qg7jzsRXlBSHa+A(3F(? zDD5eQuRfWZsq=~=3pY1hI2DQ8+R0TP5NGhxS1wN89nnH?X*I-HR+Pqe2(exPibdOT zUrhg3HHOvxlHLE%E%Xto?Couqiwo94x#?TSZb7na2bOx# z>AP>BVZm3enHi)kdM;Ik!f`F*P?SIoY;G+~K=tIwr{YKc23-TLfPg2u4cvvv$%*uC z`(-TAzLAj%N_;}=D#4WzJ%QOJa!S15xKFdaXA^dL`d(>Ci#H6|XUS_%BnKz$K#@=5~)qglK33E4$-&eZw_~`|o0J z!gDBA0JhdHy9IRZHuXSn2ttDg07Bl~K4aQ9XO>r7j;f>V#TrF8wyYp!$~}1(_WAVj z@_mvquPNe+e_ztjI_j8UxSpKlbwD7yQe?ujf-`!vzh8TgE_sVW#~`7OT&=X) zz-`_)6^cXyFT=V(K%a^`#$f4qEA7MKY;G059e=UQPNTe!8UT#s+GMRQcVqD}QlzLq z^|i{mp)_F{i1iuUy#MA@)y5GIE(Ka`ySzPSHTR}U=w4e3_+~o6*>|Vq6w7P!Y%Q&S zlv8}7(f9`)1fsK6tGjfw1?r|AfXoEga`$WPQ7gxdi3^f-fW!y7jHT5q;#UoaJ$^%E z*L)sEr}^Y6eOOAuf>?YPZh()T8(Sr<;J5hSJ{x>K$oN^v{}cv=_6uEir{4+=oqC*~ zwu2Vb=sL8Y1W$&t^ub@nO)$3-RYYQh4?eyS+d}z?%53sU`|I0QPTF$39CTG%8=}v9 zn;SvS*>V%~GlGi?n>fv0n&!X2R(r@cXF)(iAt8IF$%ovBR9Rq|)TVfx>SXPo5D(ln z5Lpbg0IxkBoiAXRq&PQ|3-$1qnT%8&u=$Z}A8c|w4;A#*zuf-GM(HJmB{FAzPc6V= zqQztbAr2D^ViaP4F%{O1A|^8hmFDaePErWXuHD&~gtn~w*)fXDV2e>g5}4t6wUF^L z5UHHFL(?z|QDXg>aS2%`J#QimBrIFNkDEWzT@*32_2UnZx4tFC>yJ7!&)%>SZDP8( zJkW&3CvR@Xq-vFR8N^nS^h5MeqD!``HU)lM(D_kUZQz-Ew*47=KwFEE7viaflx6cu z|D4ez?V0$Jwi%&*4h8l|+UMda3>vCEm&AqrFX|5U#mN`o5b2QM8gY9{@gok+${U!N z7Y1KDn@|d#DLnn?lm=a>&PE8PYu4M6`Tgb0ZuU{2l?33KC(c^%4G&(Hv$uab@ed?s zOPjq{6#bbtkE!^Mg+RN|j$Q{FBA@D-dfg>%y|g5oZCRzQKdje%A~f@WTw8%86};c3 zB4Ni~6K6D{#Ll0k_6DOBc#F-)!TnbcIR35XGk^UTx1Q8*)jhakbs5-~mZ#gMBeR-= zZ?3z3D^iBv@WtsH*K3#Vkfn?>@#E{iW}xk;9OK7k* zu0>$NElp7$E(ZHOg8S^gM-kyQ{Kob}&76298I*{zwZv3TV8-*UysD=}Yrj%7UDIg= zN9H)n$P6sEYH}4%Tz8#4%MZY?jR~<4tmZ1rI~qvqD_B}tb1P8fuXzi+lHM|$JRY?7 zjlQhx4C5qH2v*Ql#gf?|{f7IKt$`%C@=isEAp6MmV^-QKvb(A{VvW&FI0zmyYu+it zuC1beuql<* zL6q_TI&yP~$0A}zRwoMtm3>;KJ2x14JM6d8claNn0Npd|e;Xb!T(y1!PEtjymf#E% zYD`!E=N|Ta^!U~0=iQgLdsTiPr%{9Vv|ToVw`aSzZSThCUF?VQ93QZPCGM&t}W{TY>$J^J%&iPh0s2DPuhBCg;J~%^=B1XDD6)IZ%8~h&FVO`>b;?T;f2~&uk%@}$!hVL zn?1+OVNQv56{i)MhOs}{xe)8hZ{vOParpzyyYs#Zr<>B2Ym2A!!Z{)?_seM6{xbUF zUsQcEf1Y0x8=`3*zaVY!u{E$CbX!-~voeY=;{|uh$i5>>{GrDRzowcqFexc|(v^2Etfi zA*q~bOI1cx%r*?Eazr74WAC-8JHt`0Wl7B3FtpV*UtL~WE8R;>W1)@%%Rp&8wpt(P z@f-}Cjn4@IP#Dt**^-jEQRXwp@nfJMeptQS9zPT9lz=xk>8EctW3d^+lwu&SGsSo< z%esw&@vf3WSv>`s@nb@?SLGWm2yYAn|4l>8S0O_aAYJGk5Yc%ptLDwR#KT{;O+HhyAEUj_d3bke<1P`9kJ`om9}y-< zU#s5Ldw1Tmm_7d`+KlXDHxg~fC8v1^s3Ad^rQ0L}NLE+O!ln0DVy|L@w&~>e>fi1M zWh-nX!FwYYz#?9H!WtYD4>x;O`PvA=iY;0=jr)(eZo?D?#|gk)pl}-~@--Lzgm~9@ zAjM(e)4O4vj_t{uhHEu-IM@6!K#jt7Zq=8tncINTf@;7=NRwPF)qr^VKWuh2fvyc{ z?!%{r?yJjNaJHKK5PukMNuZ;q?Mi^Fny{uDd#B5x2lRA(`*geYSzJ-C^xxqicCl>| z_WSo|s_762aj*{|7__zZR)^+F6{%A z@=09-1RQ#t*B;r6U*Z>A;Vj!#tn6#oybC$fvMt3cnOIK^>~BJQlA&|@3qPIC$YQaI*8FhJ znSyOz&%>IT*xfV~4wh_AEA@)F#arNDVT2v57 z$yw&@fXrcJ9Um5&Y8!I0kq%Bz56QMO6Gd0vEDSk0tl$M4*UCk+eQ+Fwsj?u8iL5%h zQnRv+-qP)UWsu~9n*x3nti(!R{^hVV;N(p1h4h$)noKsm*XBq0uB_r>!P1BJnB^Rjzp z7^oP-UQ&=+o?>i9+ZAHY`J{OzE)}J!_fGh{;A`@+1Cz4@O5RB8g-#_Rv*&+)a}0~S zaF47@{R}O-Uo(>W>unmY;!yAC6Tt(k$^?W}qwlXSxYedjUvZZ@hmK=d?%(Mz|F(4d z*7EAD;qtBF+V3t~DG`bJP3D`I;3nd8N{~`b*`gSC>l4x|wa@8K0uMO^Z zMh58t8fJP)MLwVXhCO`uQ8ta@N3i5b(YK%WQb%fbdd9P}^O0_~*{CSBDn@W==s(W2 zWBg-`r`Ph5HZmWd8^Otq)jG#9C|0a2L_FfA5_0z4>F%~Wt?gIlrhw{+B}g1pFM62K z=Bms?Tl%4d`gKHVBM^j)lcDII#6zm2a0x1R&3s_ic?adm)75KdE}TlpI1iZkQsu*v z^-w{H;>@K5pwMuWQa!HAjvITkKrzM#^LJ&&w!_|u^H@NssC`sMxp(4RlRm!0H`R{X z;sw=Q^2SK3Q8yUV@8gdZa}5=DRQXgyIh%P0X{+d=U*^Ny2%vB_8|`zp&;Hd_>r)Sk zyYg!<%tK%qMc?UY+v4~*iLe9?Da+g5#mp0-&G#`EOaw8KM@W?bOr4?5Sh=WiFyfm% zH?*RHRu5D$`muLcmx&usN}C9-mNUoOfGluZf3eH=w9@{r`oucEQ3@g{@To$2lual6 z{3Y3)o8R95;qjxbM^AsSS+h86#=Hy-fW<0P9-PK*^3nZ6}4wp+Z*Noyez z5Egigmn63zHqF8nSq9V-K@-&UDCLccG{>r12MFw)Mw*^XL&8Nmo@H@yXRjF9^qvK$ z^V#_VPvtZ+f8xrFi3JX%_IBHiHd^&&(C9KTPGC0hu+n&t8WqrLjO?Aa!3PyIr2p@O}-Vdjm4Op>H;qk6kG^2)ShFTwum>BAJ4@&y#JV$LV6J~oXN zrtMXpF;-^GO}rjNlv>fKy5i%XUO)cf#r1pdSEtj zHz%WuGhA%yDjQa0rpz)kLF%K(gL!33U4IBnw*y$ z{B#hW!hIz6J8a4G-eE?BOz7cIv^`fYtF4{$@Y?B|x<@>@L`m%P+_mb*C^;F?a^2t2 zZ-_Xfi{fS8^sbmjh+?%m&jsRu)B|&OY@^1RNx7o8*6(CLia*`K(D7{)*sMAZ#nddW za7N=ym~LN+n2+JB0>x>(*b2e5YE;yU^8N}zFWF+uBT03owYeV;+J0+X#C|`)AZeU5 zt|RIAb>~{X`h$0JviY_cK+P5%DTWQRG&uI7hr4J&ok;iRmTTt`V?Qt!$5 zS%KX4B>S_nqnCrB&KFXO)KMOSiCGy)u8GX5OT-t;wXD(@8W1k5rTOmupY9uKj)P5L zmuU*MN~Hbs4qMTjrlWC~b4XwVZ@5)BrBW~AWi#r#P(m%8fOb)2IRFXyTDWqRw3lEo zZ3Ia6`4~K_xeX&`84Iw}gvXJ`eIDQRj}O@app@tAfnDQJLdwaPVjwXYU7~WQm21<@ zv~h1!_YP`_I9yShv=#bG$PDM-62&lr3qw)2{1T1LyV|;wgxw7qV0ow|_4bO5T7|;J zEe0WHUmP%2Y=v=rY&k^h_a~AjB&q4!B7S*)ZEAj1iUOz^8SoMv!Lx zv)KWHZdTULQ$to3`}i)w7R)1RJc=q%!jq}gj8lMZFA+r? zkq}a{j1O$)ut)lRI6=`6=63p~gZCrsp|x|@>kTR{OzMVusWwR*Q3bZ}iGn?}xp7(T zh2c8hi@CRjeSo&5n`VdVKeZKosCH>_hC<5QI41~*N-zBAZ#wl(b#Cp`?VJYkd2qGh zinFmx(#3p3QQKiB)3G_)ng#RcxJVDZva{N*3&|+AtkVrA@u$5Vs%L?xmM?9tEtB|y z9C{QjH4h8bsJSt<>{(h_zXM?KnqFF~kwSR!CH;#$!HVQb(k4F8EqB-~nzM+im7h+n z`q3*^$U#D3WI9bBjzl|nlSa{bK@kMlgcc;2Yie$)Xb}(nD;% z^+^v`>4{^A&Ds~IxRsq|@2cpPs}oclR6m4^cm17T-T&e8i(+9CI`(sX2NG#fM{u%p zy1hSzB==4Sh#oH_xSxdtQ+@@nZ0hm9Naa7ooziu^3J_{8+H*dTLV@zd!O3+|;e+{3GYm2=5c`3Bgsg$! zn7|xRPWVuI+Mpt!#k+a#w)tMV4>s@km|x-?pvQ&*awr1&fA% z-#WWE`FXTG`8`@X7DtlinXyTE9vO~B z;0aL?xqe4UjCJ_pl*cVh81=ql?EI;JkAOKhXObv@B zW1?*}_Axa)L?+ccw5u^q^^z$jPx*0Xa7g^NT3$%=;dMaV`J!2({TnPV)_JXAZF!f8Zu z56|Rffu>vZCnLM_!rC~eS}HG}6*`HrOewRLNvRmnb!&V|Z3@y|C&!*tBBIk+-aOYd z7{Zqj$z$(U*_Np^aZY@N*t{_$>74Kas{G_$Sdgbaxaf3b*TU<8_~H6?-hcjReYHO5 zID#6aAnsPm@rU}&?#Gj=-Yanac|+ADF8GhnA8&n++v2e>ND9D9V3voNtP~hUn{~RP z7FK@}yCpGHaujiishu|JciuPclRG-S$cDJMh}k)6*Zs$JEfoJ%dI-_$<4ue1?U8@P ztpT}6(IASsV}>#|2F>I0Y@xcmQcmHZM8uj@kxKvK``DA%BoWNvXnVPB-~o~HND(;p z^V1`XUB^#F`yUl2JxeWX<1pkzh|5-3b%~7_E%An_VH@Lj7H!_~V9{Ru`Vt$rL7Haq zyGIWmHjk#H?oZXOm(Z5d+~!`Pc!NqI{Jli~^q`Unv>Rbf>IB`Rs4Am&bJE{CjcUX& zU8&8r)-17Q5jD%MdsG55bL-~SKM$v4CF=7p_GGBgtyLzADWr#=cNj9a1hYho2$jMi zn6q0c&F;22(c}-2Kg?-8&C2UfKyek%)_3|ZxQp*}b|OPfA(eo}&-vBZFOvqn|8gF^InHss`;MEbR?;q4{|^z<8Uv zvL<*VbW<`?;`fK5FedavtHHJ19Y1y=2AZAVf3X7q6Y9V#^IaxrxKWw*Q2Uc?DQJx_liRH9esEBehV--x+4 zXt#2&BvBY;=M=gdW6I+i>c!Obc@9;!Nu0ME9&UNPIKiAmx1q?|97MV5PW5*y{(j{* zUKgHBLRDUhF*N#pd;!@Q54+KJ#FF>5gb;+v)cG9cvrxGam$$8V&ymXUN_sn|wQp)#-n^>$?>a&rq|RLL-{jenQG(D( z^xt=P%{CYvyXxsD6U%}}n_NoXdB|2t&g$VHd89MUpm%z5!qB1mfyWK0|7#u? zI5ChN&>QApvhHB=;AQTi-C`kcaRPo79$+gUV=E>XPZqZSn<`G^ul6MIRI6HA8t6J} zK^JZ-sX7AT%1feEA&Vmm%{I0TA=x+17RjAPUD#1uqf)ua-@|6hHDy&CVM_)O?wyZ# zDJSJrd5@?_b8|xF>k$z%0+y)R(of3vi7TekcoR2MTSSjd0DU#PuC>0YXv=V;xesbN zt#yhV02uyqiNF8bf9rCeVy!RtKnT|r8?Jy>Wt4{PqNpnse(2_T@`iGIC#GIOUeREPzXarnv*t|PvepU0&+5<3$Ao^eeEHrF0FfSeRuS#r{gjVqZ8(`+{(V|LU z@~<^1U17D#<*zoN%7Se-U~ZO_&FB%Fu&UYeJIUskD=T46bg+8c{FSHvMnP$JZb_T1 z9+ezxUpib`UjcjE{Pnx%%3m(zC~}^5^}g9a{Ci-n220NO)nP9&oH;TxJu4X&yLbuH z0`UY7HHOObq8%}+4#)PAdc*#u;#BI9;Zkc(XtY)F6bLaT#vPRAQxZ<*eJewvW+wFq zt}YXSqHdTis}e!{@qtHs{b>_4jFsX!Jni3^pZhhsq@%csUx97#4ur1nYH7>;+m_(W zk=Qn{3w^U7phDO#VM?RL<|@z1{Jt^#eEy_WB%~Q88LJ!AB*jrL7OQ!j{JeEG+3Dx- zExsH*(@Sfc9TY6KEJ4PN>XcgM%Jl5G%-W_&IkPJjlE9R`>%Z^++8Q*8>cT_aGT<&5 zITp=+SFYH1^qx4R-aq0BQ|NF~QTNJlxOS(Te$(-wSq${y%NO4~eWIcg-#okjg!+hX zy4yXC5)ZH$RW+DkQz|XxeWc>3+r5B94fJOsIfiqgOm( zpVR)eA48jiSTF-LM7z(n1s83k*9+lV=a;BIikhXXY%Dr@EVS*G zuap*GTFa^8@(_4&aT&d#mL?z=w8TH&a+e%rLRLg%p5N{+K-g*pEiPIt4e zBf-X}e?%C2qH1a@{mxh`+vwl5j$=RlrpYckfMB{rndDKVjd2<|oq9d@SfKIf?D(W~ zy2wy<$*&Y~AubBW!MrEXhr(a!RYS)Vz*^Li%#;Tte$w1EdJE0Yw z7pJOQ3=^?S;x%a(oqTV&OiKf&M2=k#wRLcohSHZ}>3p!|j|6c<<18yr*6xbP7|lm@ zb#=+R*s%#cIVVF#Off=1b zZWLyx`#V>ajE*DEcJ!hh+TB|JWb2TuG930M`?G;_?B8y!ul{a9M8!3OYC~2;WuIQw z!I&GbifC!?FV2)1fEyP`jCh%mR~>OOijD9a*Yz?)rfIX+E$soxqWm>ulfD=y)^2NR zzkrF1jSIK)&Pr(b)$q2ZVFr9vKxy_vZb&QLriS)N40f3JZpWRUUZ6a4TZ7s5gc^v@ zMeLd!#PtNNLu(;x_FTcdh(%p4zK~Zeu%G6Ioo@(im)xD~5@}sDXi9;WZh(?tL%;`n z?&MVYXZZ_f{quLmHEiO*{|GzVW(@QTJ>?mf+5k#O_>YmfI6Li^XlV3O(nuwUSRo1+ zBQ`|r$$-|t3kYh0qP|d;gl%DXKRaK4`K4AR9(peAXQFJ4m|`-Fa@*t7RqX&DXM*p2s-;NZhyI7?*5JPW{5Ni$X{AgeIW|DIkMaz^&2PQ!1ytSGvjLP~^;R{0~ zmi9QT)ADVc3L9tpu^Se@@@bn}GAI=v3eNJ1#mD2-leO3_A~_xt(Gh)~0}R&rL@Q(y zt(0m#Iuq^jPvAzerUMxjo{82>TUoxdv|1{ERGS^;IV9rDcNfzz=IfYN38K^H+sDsd zJ>7h{NqZMniLWlZVu-?$v1D@M&WC=#>v67@?WPXOZHDxB1<$e#3)WeZP^v(RaY|xX z{YvL^Bu+=Gcj;S_pX3zq(s={4;(~Gw-fI3<%8GFL9~dD2VR$I3@*||?Vm>O&T>f$N z-s8b4DMztP4%riSc4tbEFh7s3P|)WXi+Qq#Pob)~qy&SEpIl|(hWETRT%D`n5h5D; z_17ej=mlz_pdRKNM5h}FB+O*u}H@m&WoM$JpO z^#ZWRyCnEI8+Wzl-J4eov21JN+gMvIP{l>x^c#6Nyvp<1ZJlN-fnz_L)^@`@&?%_oq|o+wJ{4%95FzNJngm> zT#oj{JlmvR`t7BSk}4Q)s#S86h~?EdEUb+%H>^cLc+H@g_!WQ%0OMSfn$Tb(rLhz~ zZ`Rt@8ieY_FS79rzXWvdc&`J}p<|)jRi=veBWh5Y`A-OpHhm_FGjQY8`^(3^&X{r9 zU@gIEKzz4ezQFx4%e3V1>z!}%JvDe=WC+K2_WIs10x1^ZmR6h3W5Kyg=DKR&b7gM; z9r_M1z4<$r*YB>8MyedrkN7*6uT%KBMkg(=#@>oiTE8CKWF_?C8W*RV3v8iidvW8S z?Vm?)Q+#fNTvP2qAs`JW1L?DIJV0EHQYA{3c-y&w>vz_oghiztT%|y+uNLhwU^q23 zudQdf?iW~R;af~K({v;EzK1(e(#$>$w`O-rOQ5RSMl7$q{YqTNT^|%-y^WW+MU%zoVAxJ~(E8VACW%7s@`(+$_bf)Ai|a*cSVGJQl2HGCQ_ia+21Jd8J+~d$bq^ zv8YU2uDs!5AA@<` zfWJ&I;<9b91fg5qaVX!EQE|QBB1OlO+l!dHMrY=` z?JH)G*<{+J1qJ_cm#4#w_Rk6}2a*Iz%ZE+lEu17qat6*pwbZ6feEjNpgoQP~LJj!2 z>(z|k?HpYYmxO|8sYDWi;3`fRVF}sZ5oZH%(fz53@2;~9p#>J|1R`nK0#@zMAsTu(Ba1plZmnmu$h-XHC}-{Mu_*Y8gOS?Fp1 z+lxn6zY4{`eK3LDw)2-tS`WXNaaqE$w4sO&huY=#W%cu6`J3K1ySD(nUZ{WV+_=^g6Q|WW zC)}v?)(bgY3zXhh$@8utoPKjUiP3U)tVm zJFY89)4Z;Fijz`g5~An;+%ZETWso2#QsR^Z6;h^FEG)+i5r8A$00%`x-qcmUN%u2! zUv<4$f4>d;?Bj5NVCL$qiU`8}_&$5EZR2ldY#}&Rb-p4z>v39~UgwJy3^xeM222j?Umd$4`2QG{kIY_+LGE^T0JK#Eq%iR z26?`oxfqajfIgA~TN0;j`2hia%`_MR6O9!on^Nrw*Ale|otRpGLR0F>7Y`|$$NEPS z95BKPxfeqT_+u}D%_uTzkBAoek&rR4C^H4nC?m~!w9S?M4eJ&hi~c(Xa$^n6ixDt9 z95qL_8`@6mO5#uPuHN3esN-O=C$#h!2(om8soFf1g!3>_;b=@N+u9hCD&8V6#a!rSj758zqI63`gtHC3_M`gHF<*2r(QY{;tWPJ7f#2df6;%K3 z_V0uG81<2``%E~daQtR4s#r!h^oCk>8bLvb!?*>ROhEn%Uyt=N(r8x}5;-=%t80T231xjlZoqR(&; z8YnRwDB4WzEqpk(XTk!~iDr1DdX4zDmpqp7I6n(4UzsAD!viy0ADU;O6ktzyaDWHg zt5v3o{^`1&3h|AAGNlT?-n2_I@h?Tu*OM@W1Qu9T;ggT%2l{(s^)lM@0+5;+#mWnW z!-kF1(sLvZ`WC;3j{N9iyQpkH27t2{+-Yn88dDXH{lwxucj(mpFEig7hBIJc!sdvN9vvu)r=w^TT zPEb#Y1pTM>Bh`cGef4*6{!{`klvUH*b(5p;F2h4eg%aGS9%+&^ob?CCx55(W9hKl?a_^Y(B15oo7~$WN@3lPJAACJe$2;+XU(ZGq@IKq= z;E`_F!)}HgZ&t;`1AHS0HxW~W2AoHke&-4skzUY*=!hsP9*D^ml+F3nThCAApVlqz zRB2>GqLzi7De7`i#I*w(KNruLGU87!UWVu36N8F;1H3ZcdZx|Z`aqd`0~0dELi(Lq zuovee>cc4NJo{m1fA+F%{DFa}nhD4#R1SM^cKhUvC)}Ij1nc%zSBBlzcjxurmRsK) zEiM)Y>ogy~(RVk$dW+1$=TcM?6LGS#T-mU8{^3@x5sz6S_-;1Rh9egxjoySPU~+c! z=U44^M$aoAss}NiQ2X5a3xoNuC@%Z@QFaK)(jpYQ2D%sgEycfCD03Gl)O1E+RIsKU zY_PJj+>hoHJ&Lby?|BB9!0(h2j7s)s!C4okgO$N@2_vChaDk}+!Br$d7wvdw zOfH0g!<{;CgVlcDs;;>eEt5l7UYe?*3yT@0S7DzR4xh_OVYSKXu-8C6s7esQUoEZ! zWudd5USdLkia~;_WGwW4Tz8}FuPjo9FQG-!W1zbV=ycG1M?XNb zI-8OxYc>8P(cW-_$Gz_!P;mNa1cdzTkftNa?f5=eE!$waXUMZ^Dt*>q0J`bpU#jk( zG_Z${HU9ytfu#&1Qvi+MTpuMRCev zT~9FA))(t)1?H|g*Q(o5`fGGcDVHekB4Y8t9I#L@f=YT91H5|pI4LaeXFCvO_6CkF z)aE!za~)1Dk7B|fu1X?ak>ruy2Tro@tLB%W; zH;A*EGOeYRg?3tQK6r}@7=y^#x^E+K99>aOu+J@9>+Ekek9?8wC!w~rI4&F2`s5~( zsFbc2Hu+UbS{tZwyL~Q7_20=fRPwwok5C3DXG$)pwrp{2alY^#3z+D&^pP6^?S?o! zhT=IbhPCQZ4Q%HvgXoD$T{BJKk~NoJC1T~(n{+rOEU%%ZH>hS5GuxK;EbA2i@cNO6 zTm#zXW=fPGg!&)=R#xdUwm}-Q%Bm5M?yPQgF$(?HxFGE2PL)WFfp^~XRGQ13vx9g0 zV`c17T~rR8ZSu)5^GshvV%tPoy4?U(HX?a#@_E2#d#^788H8inHr1MZ45HBi9@B8w$?{g=H{{DV7I zdA8N{+lh=QGJ@R60-0K@xhjhf+p4K!OSP6ly{8jctGjKCtP;zf^XpEXK#ah1$8)Kw zdLW~S)*0$);UJU`HK;ngwZE}x-(r9##`m|~x4lC)_*-*nGvpjaJ+0=rQX+#y;k3Zm6M%k?D8c~ z=u_9_o{xT4CydEqia#g5C~2@0v#2rW@u*aW0x9*ht&CK6S77KHex#H*b#=DcX+O!^ zVhlDFKlE>I2votm6&I~XPWeZv{p3jS;J`S)+b z4`=E_TfVfjvdL9HZhJ-9x@FqYt&QE#XjQWt`(SsQr1yyt{4>3z)|k6-ldzOC?_f^# ze&MUyiIQ8?zTj@^ZG2y{61Bs)GV~Lxnkx4v{!bWn#-n3VGsO`iEaed9D%_o)iT%XL zh`*Js(sC|1cKw9}2JdqHO+T(hQ-0w^Kr4n6NFn>B_YU+yd715QKV4_lZ{#vG_n;u# zrCXfrbp^};NybzmkuYLdRw@%+d$%)!Jsggo&N6i+5)sq=eSLs-uex8`ESaP>F860V zUT9b5VR`KiHp*h2B69a5u_S!tz^W)Gq$8wm3}f&&rp$4(`SQj6=Z~b*lESSsk|Vp? zqI6$%r!(j=@_2Z8eu-OFauq#-EmDI2ID;|WU$j49`jny};$ri{U7J303<)`_RCbRs zy*7Igma#S|5hYk&YR18e*c?mObUBosznM2$ybyCh=}=D)ol*z2c)pRw+}A&}iX->! z@zKCFWRZ8Z2|Bj!at7CU(BrmsA9kph#~G?ob8C|zs9^J6*&+B)U8oR2wVZ|OlM7Jc z=*rti=g4$H1apHDF~G_~Bq^Op63(nn^^gH3%2F?M%AZ=Ct1(wXw^#Q8*Az9)??w=% zTAZ#{<|w5P^vYG}ZqwjOd_+wcuD;W_;IFC;_m_GdlPp9B-MVPSB&(td^$*QM8YI-- zu)rf?)nbhva|D4olnp=8mMAH1;wRx@uqw+?ypg>{;Bix6U0|SKy4mSiyXtE5rq77W z+mSc5_+T(R%0hStLDXIrQL}bK19ZfS!k$rVk%@8tbjAD@#W3;$cc`T&=QJ6%7KpLv z@592BdTNJM@2rTxG|%uoDe?K$m#^MD zefa{!u8a{N8DIpcex2BGt=<X&XhAlMU$sKe;0wm0Y5Eb{R zOFfIy#{saKh&JSjG8nuT=M}axflVGTMoZfw}WZ~XF0Zl@dHyrc^NGNYzNdMG3L zI^!v1%l_GT%XBRDU%Zt~mC>f%YAy~TL28|i>6(3c08TZ`Gvt{4-OLnzW`9TARqp5@ zm1?*eEhSps$C6}=1ev7yo5UX%98n#c6pbAaenPjY^s?{sn`fJIFJ8TQ)^qa#R%_TO zV$M_}i;Ty~@;KjqF;H2e6;MRvnPqnU-Upbj<zJ#*yTLx$hA{MD>`kvRtstj$?UY(#+VWlK% zNaLV{sNJ$+A^IK;W*6qVZA0rp9B^f}v@%6(y73o~Xe}eSx0~BnNvov46p^Rm@2ZJl zP9Dvz@+oVv_=QWO zpqce8jH2uQio_J+33kfZ+ZhJCLLqa>D1Rh!(5~l+GL+8t-~q14a2tIfe|dR#IMzJz zfCWIpfI+#?c)`VdjjJ&vF0wqr^?L738fB2YrH@2B#Q^SQVGZVVWexO0;e4?PBteE#9rOi{69Rs>VwY^Ifp$-w%5mFYYz`&zqmcHcJFu6EfTh zzhfnGOFMq#?rif!ge;G$Dq?od)D~GIuj~NL^&mg?nO`bxl*KBP9%Eb55LC14VR`a? ztp3F>C&!!K?ax!_{Zln&QrBtLh9?arS6E2_%ZyJr90gw5swE+fRk`Sa9ABN_Lwey-lt|DafSTt#!4vX9R_AlrCv<1K0$bt=nio;~rc_NA!`ei} zrRw_SKAuO|eK#Ix6Y~nIBwFuehcm`Io2HEs9wxcIlSOP;vUIY}BpB64^Qk!v!TRgD z!Cw7a?X=_qn`$pFjlG$0O^JD<;5A}&!fy+2&&K%nmTE6j{V4j9+94Y4tUqFm!YAhW zy-9HzIz*l^q-KT##O`*`^!Sn+R?j5ypH|REN;sNcSn9%8uAA4XbRU7&a3WR#dt@!0 zn*W@eZOx526O83o`!jC|5l0DJEcITrT z^9}VuY0OrvX+_K9I8>*Sv;ZGV)HVmMWR5z$qvLwob2aE5Ii#YxGh8ZZ%CNI92mRIg z<(2x}6fi}BQgKzxC@l@fr@oT{xH4O_r>vP&drOn*ChV--|6&qMd>`NfLp6GErBndm zbujD+>}FVgE2dS(lsZHA*^oJ4$0O5p#T9R2bLLX7PEc(G8*im^4XL zww8^Y2o@cm4q8#5_V*dFu?x%w>=Umjz*SoqXo;r%&@F4UiB%!9Ye?A7T0e_ z1Qq^zNw&%9!McHztqO8{LWhop)#cc`_<59jzWrVpID^wHd(mHAUz%T^U%cgBpk7^f zzEk$1T2I*utp@I1Se_M(x9co|#W$eKc4yACjzuzsBTkY$S?yn%lO&p2=YLi#$PhY4WCYG1IHo)2x7R8s~_E2(vGh z3f}b8E8{eni;fu5=1nBgw?VO%L$zhK-0loaiZ+{f+60jWue{7c6$Tp6u+T!xh5fY- z7R6A-Rw9sSkP|Tp6GrW;T}Zm;%wELLo`woO!j&2&;}9mQyKnXMZGXbOq3r}mCsbJe zS}#p5wcE9Rx$RUjwCpux2p%51M@4o?U+9zt?kzh+}x7-1gf=}##2Vj(qeu2(%e2`)LmLqbx+*{tRag{11%?|BG@CWJ`{>=_E=WKrEEr_{d%rmW#{y zo@Kt686XXfqxxq*t8a<7HUAtxkT&HR+p+_=75nT}_70Xk+G$?v zlVkhib7?l4F%+7e=gKaw-~b6NUOSwa^@+eR?^;^=?@xSjeGxIO?ibgqge{xAK_$Fq;$@GeTCfUINX8c1 z|L;$IVZ9H+_O|!o1`Y1lnrHpRvv7+FF~>EDv}{SS_H%^?ejWCH|I1yw`R++JL|X`Y z5Bheyh;jL!q5*dy1zG6t4g$b8 zSLRgnA4lXs(0A>$`Qyp%?|*VuhK+CnkHK+b7DBmyZ0OPog{PX{{OYw9LQ4*x(Ar%5 zYY)WVFL665HCioEU@FFFZ8J=YuuEQ6t!yw%T}TMqmCE5m)RgoJ$<(`uP1&bX_5;& zkP>sWiV3C39ak_XgJMW8N6nRaZmN~JI&CnzQ#ux+sACo>>_l3k2{2nng#BdP!L%(6 z`U?d`tvRI9M#re`?iF8>0L`s0iGPK2N$GDfr%I7sSzDthE1yqOWJ{>mTEsqirL4Co=Gd+2A!;bbmg1!EFChYMa!g(zb|QJ`o8IIox1t9bqB{=?^w zvTk$06Qj5Vd*gstb9dRVw8RIgI*4GEAhX>miZc^>kd!E=2E`ku0+J{kOEKlC&oe5m z*+*}CS0DLI@5oi&hYVj@U%WaXpAs}7vK0IoXOl0H(!i!RF;GI@9eU?255`8tIbiZ zp)D-fd1`64`H3U`!_3Bp^-#U*Z?yIIj-yDgP3z+5;E*(6(M%1v6jA!76&>w0$|%l^ zgS}(Wq`S=@rJVk$qc^+PYqhPU*vFHHZgx!?PM$03@(t(uMnSjx$3UMT#_cF@#3({Qirlj~{KmnZ;VncZxW#||! zd28NNkNiOWeho@g!+`zy@!ZRoFSq*qzs0$T;{Z#djOum|c7HK4t3Dh?ngNhR$N~#I zzf_dkj3K~XLu-p+#iyZ>$8R1y-mIB|J0NT!K|<*Z0K{%bf2?$y#aV}Cy6j3#COC{Y zz;3IB<~<0oW8Q)=e{Xx-RpHD&HqzSq`~Z!1O2wo+ZY+lzj{5;fFTocSn%N$zxRGfq zouj?V=UW5ASyZ83mTpp<3ub#y(Z3zYdX)+r(DI_%6-k2LG+c&7f15RSbyW3mTw$zQZmvW;1$*eAV`_Jg0_-8;Q2 zCb;YSTHc*M)1`BGwCzh=$qA)~MPOuESXv%ck59AmxR|XTL*m=YBAGU~3@Dg*X==Lc z%hH;cxpD(tVj12*m)9OGmtV;dAB)PNKbr4%c5uKN706jx!YS7dLv{e|dEfVTE{{*B zIPJBqB-@`KQK#j^1EU+yo=4G2JCSYDQ%{jeR_#Zp=3_KJJw@x64^Ul=PZcUtIs<$| zTu9IHfQbTBqdl)3=&x;^g6-xHme=}AxE{V-m|tFA3~lo2GT!YR&+#9M6jBiM;w@2X zJVd>det*8^fUr5W9f*#EZcBJw8GvE@%1~3yug{`O|2WA7ooj`>*&fx9z)9mg3PU~hv#ee7iOtVR&B=G z!h9bFCaJ4yTa^xF?vz1wgOsZRIkQ+(h!w%hQmOuZfV%w%9oEiyGRJ$(=eKJbBmc~^kEou%ftJyxNmDZT0x%npftuezy_)q7D_g_7&SfPY0 z=B8q(hEGo>v9X(m6s?XkT%M6m#tj;lZ^qPv0tpI9M2Q+}W>^j*3yx{%W?y8Nh z7uLo^yu+Ni^^D!*4la5&Dy)VLeRo9OdT|(T9Dn4l({FEgS2k;XK)OV?W})WO$G=mG zA>tkE_i+&3%tG-|-M~V{eG(xgqtTG@9V(h9E7@}A?jrX^E<5V|;*nSf1yu!S%c6f6 zo$nsuIwIF-M@F#HuHAmbu_3X7pt`N>cq8{>vr+}4m)22huIo{oIt?DK8dW^SJc+~W z@T+dlk`so_KOUZbg=zvaB9VqJlBcyzDD$n-Q+J^dio@y?Tl50fRicfl_f-oRtSw_q$$-^bp(a>RN!pce zAxUT`wzQHBCQEcRh9^&|rFVBykayK-1 zDf%Ksk-bD=eEaL;&3g@n0=lfdu=RM#x^>xhHZkm~FsBxo5yyY==;vJUwG$q|dnvTiwx5)jC- zQ&3ywn_j=S;N#y?(==!UjRH#OlPD3;hD8M<`d6K}&Mg*ts1(VUT267u-Q^03dr@#g zKIjzra;ims3WE9|k7NoJ@4O$YAj%m}ZEf6t(bM(p&95!?D;=!!c{B6HOD@h!gWEO_ zUv307Rk^tvf0pH{|8tBl1p?6>7fEst z?9(kb*H|%e<-%tODlhQ=ufYZ7<`Pc6y1A6cJ-R&c?VYl3AP2{ETu@Tp(LR#d(2B8V zt?{+VBb$1n>SJPxb}To7c5?k6mZqLbue##$n2yOf>y1uhaOwb_;x6%zWlC0vL|XB% z?;i#2z;|DJolSQ)MnP~vKEUYxH4McR#Erjh}i286>AHI3W7JF4ItcAQ=hg)InvJfVr-gq2g9552V6y?@6ja zd~`03`2;9ZEyqGz-SA%XonKn|4OAV9r%;6{h! zb$TGYRP7o_eLG4WkeaVpC}iD21V3#)+Ok&Ze}25F&B)??SGdq%ZDEOm?Y_0Qy$Y%k z-CwJ=0gVJlys)P?Y{OKyY`YCpq~;mXGx#0RtQ~~E>szRD53R9bAmXgJ1EpQmLZh*o zNL2b$4_J&9s2&R>*1R*~vI+kqf4nGI2H;22cr9f`tPSj>g($_^yt+$r`X)jvmL zq}s9^tgfx}De3&>fKo~;5@n(*=_vHuCRgZ~d|pACQsy6vH&KL$@4kPgunTg;<2L?x z(z&f$ z3MjC->&;`vt-lc0w}`Sl3>04^b7Oz+T$O@i3p7-l=a%e+$)HpyTL0_ApS?2Pbu>KQ z$uiZ4lu?R*@9ioRyIL!MqHpnpWR4a~fI4PSNuSj<6~&=D=mUS}YwNW^zKOfZQ+?o- zlp~=x5dxAz^S$z}T9U1};V zARb~;SJ_irj4j_L${{<&I%2C1FW39J5&-d7uPX>)eEpTLclXB!y~Sb!=(137ob&+h zgr!IENda}{JN&%uW{LF!SGa0-b+njH1_Dj`OxR#=NPG~b44LEwhg~VCH_oD%*Juq@ zeh0=xl_w!INZV;WNJSaR>|2EwanUQP+Z&T#r*crGUv=dwo)J%g(!ma=4yUc6(sraD z>92h{w@@xpSPj9z$ELq1VKp@U;IDoKLpL*B%C4wJFlId`f2;t%lw2;_+y`s8R2^aO zZ-&tb#D>8$BJ<}S%KG6w6{n)Rz}~(0d)xnr<-_tE5L{iEwZ&yh(D*cj_0%+IT{PT9 z23uMJgrHps+pSbP-ZV!*9#gp<7Z>|B$!K=2j99M`X;X0D`8j*M?<}|Ar^2ym++^00 zTJCl)eKXsojcf`pk`cp7b?D?OOu>6z$xy(I$Ek%XF%_DZmgda?qwCnJf+Pxc zoL?M^xd$ut{8Hh#EoSiRpEsVpBB%Q=viv0nf>0{@SX{-U#m=`|dx|ZHaT(MukcpeJ zZ!h8{KOtUU7IR-0ag1Cct@M@Mk9dc6^4Vy(JGZIgD3w9Vttvr{?xhf;@%U;7-?X~8 zxN1e$>ezXE&wC$q4|?JRvdb*A#0f18na*dMq4Ro?9Dc-g)%~-Ee zKn1b`e_^(dtml*AM^~Bw#q95E!{1ThSG)Bu|59no99Os`B4%}}}x2J-f{S0qGE5N%UOxJR$IqRK=~kM21s>1|T(+;S27bQ^p^&Lovf)e^de zdyYh+K#1l|xEM~+6V_^ugi~r4c{-#tLqexR@Y2qGI+wyHA*H+SfFd_Su&U|;X??a+ z8q$?5H9ZhnG7}Y(mgKPdi3D}WyLd|8Z3!}zNe4Q1 z5$xv;@5vxn8AsiM*c5a6Anj&6)s(D4>hjrKZ1GaRv`Z)-_@++}XlQ1MIWY%)#ZR&T zk=bq}=&QQ1T#Xf9SzYW?)pE)*%(HGtbyq;H+J3h+P?Yf3knmU1B}k3~0j7qlHy9`| zyQ_{pG->zhUB_;(_sCc4f#bb?^VnqV^UdaG;z?xDmumFSap%AJc((U#h+Q-uN%E2- zND=pPYhLgLs8}4|&v!P^*DkHwQ5@m*okR@a-c>HTUc0XW$X?7U;O2P+>~NVFaZ);dYRBtF@z{mQ-^$m zCGs=&r}M?%8|Tb$JepzP=_x8+;sf9YT5mEkw?)b_?n$@jlWt+{u8@(;}Og1VJ{ ztk1<0>|N309T;-Ns;G5tf$1%k^E1x{bmVHaaHN;L^fkNB_u`*cX&g?;g-;oIZcG5jiefMewLO2ZMO6m6oCf+|Yz-x4mVp8Z{I2aP;1aZAVRrxPs9qb4b*`Vtx2hldQ z4QQhhh2ColURW6{lq%b<4Fp;N?LqbH!yWV(F}&d>OUEa=vb?-(^~*gi`(*eVmu$i# zCr36|PV;{>@>Xv~1GI3zNpbkKd8492Csb>a=4upTGzll)qgcF(Rig@}&g<{-M%6*I z%1Sm|tep|}hU+e+pHW+-X1-4m??yg9-4@Jf6+xS0a$zfz9URJ&`9+lKL|ZIK!X1S^ zQ^6Z7(%@Hkt~nVWY>(8#9Otq5hh%%WSt3yvR!FI>G|s@Ank{#xx4hb45lC^Mf2^f4 zp;8b$*3FS07TvDsd*VHj|1PP@>IRDq;e1LKO}x>EYE`|Z{^F`$3p8@U3S=*nO;}2u z8>(d8RN7Yr@nI=)AEJR_-`H)`_B2GVhR3sikt_N1t@I;!&@j#h4-JD*Ic<1GZ7MZ^ z#La-dgttaaSqaqzTMh3U=tLf6voE6eUI0ajBYNcs20*u}+P33i^5Nz5H^xHY$0z{f zJNy=~BOLG@B}rq-;{Bt`gF}CB5U&NMCWzO=6T2gGg}Cme(wJ6hKDbbbb&TD&CAWsO z9Y^=X4wzzNV`*z@hsdw5IzZLIN`G~=)P6T;Qt#|+7oRpo-QtC4r2$$(A-DM4P_?4$ z5!Mw!5`N{XY)m1w@JjSAudSH>C*9z$r@PeC+E-l+Q|%xIzoM?_>6Ls3$$JA#v}fBz zk-+%vkt55zv$%6?)yIt@RJoUiLFhP2T&!D}2VxhM2He%Z=-9ep)O$;0RE9Nl$|8Di#sHa`?$-G{=Bexj?`)YmS z!DbU#PJ9WYk9d^YBe?5-`r5f6#}+cGt{=Bg)ra!(nPtg@V$oBkCCm z`mpk;lR#u+f4Z}}%;}^klc`0x#!c0^wG%Y#8@6UM2Xm%0nKV$u*@ULmWZ5E3s@I_QH?w(ay$Hvkh8m^Q3O1Jfq15?XeTX z444=t7mIOAYnigCwt<7(`EtEFkw-SQwIM8mlW5HS_VXM<3Sa5_z{1);Almj1U6GCh zmYy&;z61e3Mzf*mwA9Mnv(~ljrO?I8ENYAPECB@h+)2K6(`LFK(fwft!;yOw%bx#o zy28Vns90@&MmZF1JKry_;H~1dVVeCh*zI?w!*=+Ii(z{>>ar&Jn#&qDb!yQhJ04KY z1!AZTzSORC0#~c-N?rvJ%@jeVgfR%h4AUA%QM{@W_BtE6F*FpZ&-QLD^ACU1pX(3( zYW+im+`TB=x_7ci4Dc*;#MyCjZgI%&!#vo2Pz8>@YPJ${xV}ZD!D6AH*+0xEzsb6tLN;;# zC8)cvurD06R{YhXPur4Q`lid37s^WiSnpt*Yxt$^nQ<4@F^R9})DMCXz+R>B`H!rqx&OHKC&1Yg{X_+mgCS?tFPeec(B; zZ+Jec%a@$ge0xeq?)8y+UBdk7^)q`_dj2j(bHQ&W=skZ}=1|-&C8JaCzSsEp<*{}% zOjqcncD7Ug)X!82v_*r4Ws-Rr>1-tTLJ*YB z)jF$Hcc0r};5I2&pA(K;=r=F%jks@nd3}+TCgmAi>*EWj;>|J1+PR%e;lhr|^dP7i`Z@q2Q;n_{aXHQ@J`1slV?>8Sl>eej? zlWJC0o@g!Pktt@bOX!B8=XS4wfhDYT4`sK1xFilklfjX9l%`uiaQG`~sb=iGL$$m5 z>r{O~OKM8X{!DoBK#T+-QymmHtHD25ya8QQYtWo`#8Fj@4Ok*&KeNyczqVS!1RmZ} zvtI`qqoGRIOs;*GS`?}g+rmJU?MLEolk{n`Cc_Wz|fc|(z$m_5y8lT!qVT7Gb z6x|oRo7lZUW%yx-&3lO$Kpulq$QF4ftx_edka<-hz^03(ESs8+v#4ZyMtskmY}LgRj-wQJ_?^|N3YvJVPgX zbb#qFmls7mm6@DM=^uj@$_rVn0O_pV+1T{EA6c=ovrE8)WFS+1gtAF7P=^E-R~F=W zUs+gM%(C9M6ggI*Vle20m8|~aEkq76)vGX=Pv*D1FQh4R4&VJWT#T%`YK8Q8ZhP!r z6-w0aJwF;@OR15Ccx}{>aNzmOBbnSs!-kp_Y1WAWF%C{YJhSmw8{a8{O-ij#FMzXF z=^s%OE_B_v{iD5O2xL6BfmDzfvVZ7*lY|TLbvUY&9#OI8yGN(qBdoM8*J&9>h(J;F z2z^o_%zTtV3yeY|3jt{S=8NQP+|n7t;tp`!UikzNn^+s|K8XVa7(g-=!GsB;L_kWw z)1r6cB>Gg|=*Fre(s5mM)u-sTffa#Dk)|M=$~U0%PGex9C3b|kCGFG{aYC z;P4EF7Zq(<6>h@4afOf7?|_4Vr8pnY+6J+U(xA1R>O#w`F0EFsz)j9~R2~42*!ZXn ze3v3UH(gt5_!EXz%~quBmBiYZ3SH5;0{=$!;S)eQ*}tVx@2CZ*MKz z$Q>X@RuF0P%f_?&o13rhzj;DCWy`(_(;pC~chag|nO4}%q<=OTX-8rvC%#P+cP>;; zjf-KS`Fw!QF>f}>3jc|UTB1aK7>+3tL{qwKdy_h$Qg1j63b*fVjkrh*wi%g4{ zyEwlzZc(Kf&2=(XSg`4HWjmw?cIV>{6os#I-R4&Yw=X~D)x+0Xe*$$229zJWv2MYj z_lf+=$)XSik1%6F4Ox6}FX(dbpTaIN@U3;dL7IjpWv4~WF9J!@InV=3!v9o>ku<>x zULI8GDpJAXJBgs*gewvIR0PvgFzgrKe#GR7+Zi_L43Dp(*8mzO zIh_ZuXQ7#Fs#MdEUz5$8Sr8aGU^DE+K~b)1wz)v>cvsm0_S!#yY|Q&7t4mQ@22OiU zw>2)Nz&sszjonf{OoUBgnBAI8r^j_ore~LLn~me4j8e$=hrRO=w&y#J>*vui?uO&x zFaz@SR2Ns*XhCsHd%_Z!n&p<{9HwTq#gW33?PffIY0#URz|^MvPLiBF#w4$eEMdzG ze;gea%@QJ9i*xvyT0#qIZU+ygkQ-z=OhsYo2f8>p(?C6(fN$eeqmxDVO$-msTEznK zO;ftb-)k8y{1AX>^YlNyT;OO|NTu-dCyPB`o>a7L%?$E@=UZ>bXAxWhn4KL1%Cwca zkT_ZDi~Myf%xPlKpO*Ary?UryV(GfJPa;q`VGLP>iNt1cAq|&*WGzbZgC8B+DvNKW z3(yDj1wbFX14_8D0>5=-+v}$d8McmghUdYaWvg%i-v-Walpau1y~+>>N+qztV#@lW zOxP}QF#Jl52n)ihi|F?Z#0g`sdFqaB2C$Bv^$jyN(pJ6zoTW^p;3L&h3TYQd>Fp_~ z3yyn*;9R055xo)qBmHK$Ej1vb3VNeLg6F3gUc1{SaO#)G+k$KT2!)e!z%&2>L$K#H zMJ=yTAEkKmq{Bv0O-tuFLPfE2zLLj48r54;A3pN-bW9?reio!8-kutIyBAj{;_cTa zc4c}gzPowt)Ov5ou?g}&u7swd8*?u^K&v@+$*tNje`9KJe+yz-Hb_zATv;^GKyM@b zZ77&k!M&s1(|$kdJJ33_hq2{eJTx2ZhvS79-%v%oSZyp%Ri-lc2mlV)B+C8@Hn+Qn zf(2)gc^GXp;ZjAWNo~&7?ks~>`0K0rhLZgL{ret2vnJza$8|kI;|kSL{Wx(fT?|tO z$vZRx1Uu^=X;x~YJb|g`zEOcs@JY&wL2}G|Yt;+~y@jvYFj#Hu(k*|(n{#_O^N$8W zXqk14$}bU*U#biEd)O8Mk(2Qczxnh zz9MVrym>LCha@i5S19vswW$W$H_Tv(Ny+G z?%Ik;aWC!psIw9~20e|z%~Bp>0i5}K!(ghm0vu9Kq3TL5k;=XDRhjq?M<>nC!wX7I zq>_BS7{U<-qogb>SPJ(wd+RYziO5Ss-8deYbBp;f(6lkjxx2Zr-R5qwD~jqeX*l+p z-xO~tFe`J^iCB-sFfA@3=XzMDtvrC|;%%N`hxGRQ$t5mo}X|CoU;v z#=n3ypO3!Ki}bm3DoVD7KgxtCC2fwAIn|><9d7KIP7r)#gduUDY)3qhC0anP#M}?B z$>|@SdTo~KY9~i#hwHlNuHtez1sJo`NlQ9XwOGnF%=UX!lQDi4o3H!~pF()B0%hCV zfAw^u-W-#8F|Oiad9r*|S0T;My(>vkxr4#BbZM;Awka5#kDpA((mCQ4J`@~gWwsA! z9*!KtR0O;{ugZ({d}CO~xY{JeMx1C?WOLzZASU|@2U=CU#kj3YjKB)512h?3Vo2bP z(cWPe%HA#jFw?GfFHg?C-F$QZ&C{$|=Wr4XNsn~OLaxp;<~zYKZ75oucP?vx(dvt| z_&ke*nE9Pn{_r@C3MQdyEdpI}7!#xGCpm|5-=;iMLie^M-d|3?CAWCAHQbS7dHeim z_h2va58RmJ-5uPx&ISB>)EpCj=+V6L+Kw(JkB*ouQ#P%{!oBhkSdKNWHGG%is8&NV zCZ*pT0@2lvJcRH}nLTqFCxJxnN2_)nGaF;Qi}dRwpS|v4jr2o2^KeyFs~UytP^)I? z*rM&_-C6L>u7itD6c@ckvmMrFb0dE{$c@=6X$$@WHp>pktO{8#j6fL@{`>sB+S+(` z2eWg^wMiBpgJI0>ogD&?gx!a$iOCtvx|+Vsf=cUzr*RJ`@2K*g;TIf!?cv!5V2Jr!?CVVDGw2PtXF8p{X; z1!T!rdb*;H@>GpinysJgjAcZ!H@+@(VeUqRuhE)SD7Csz!4PcYdB3}gN@0*&tU9lH zS$dFBz08S?(g9ciRJ$egg60NkN$`l=Ou#@#(PPTyX1*!Tx6-QTu>DAbI+=rDflm-A zwgbAYlBJ5o163qG4ke5HGqUAxEVn!8O$`&4Z220QV$()E%dp<<9smA*CoFOMpn3Km zKclM>br(Li$W{(f#v2uVg`4mp)H8?rL>N10NFhf)=t8 z;G|USD%_@$Xbb_E;GMY>5K(e;z-4E*PtG{&sMt|>1w0%X5RY3g4{uqO`)e2|=xSfe zqNz>vEe8ZJXa8S%U0!&(K(Lt9JD#?MK2_h!y|=9jEo`VJO)9Md z8#%1x_e2bjw?){Zyq~ztp83V9Rg)J=9_(i^RrAp|Yb{glFHz%tef|?nmDT)LYM9&X zvG_~UW}oD}g}TWbcXtnn+40#<6XeI1N()0;@ar^SBcU$F>snf~&1N@qt9z4*0{}aO zdPlLL@JSfNKB9#xw5Jq3s?-*|E)&UF_N}W7mW+i6oN-)8C)<2sd9@AslE|g{GCx!A z^e_zzKKq^IuK&0^zN|jt-psrpJrrh-mkm8^RDC(zZ)WcA6T%#lWL$lIx@|vtk8!5} z$mlIlaF2iVPRadZy!h($<0<*}Z>ygk9yK#hC?s_B71zYkry(qQhetsDY~QELD)-)0 zW!l%}qiV8fd%cU9fB83wFABw!UJyq+7vq26c8FddasAWcMXfy}s6rvCIH}4zQ|V>F zrfIhmG@rHgtp>8~<@5*a422t-b5&SBR_$_f`yytkzCh*wXLRoZOVymcD4)^5wZ zCKYG&JK4Qp^(;@t{eaM?2XN@Haz>H5J(}NCRH+5}<4jI}w6bIF)%oZh+-bZ%_j=Ew zySN^CisO`a9vkV0TMyZziI~*{H01+1L0iS11T;yIz0P^%uga>5UfiORi<%QoaEVaU z>I-gp@`+k)zV;!55LHTLl>=jHsS#lMAzdrFq!g54qip4VQGErsR6QN0Mz39fC60`y zLL!=AT9U70sFdAN|-Wca9`^yqlMb6nF z=h7O1xUpb&+Q&{Z5bp=l4@38lbKPHfc*^3r8>{wN{~)$LXV zWOvR#o?TcC*=A0b-`Vg)e-U;>M~D~maXwZ*l=P;1Cu1af-cj#j=dDmg@(8lp-v;A7 zYJO1jVQ<^i5Nt@(Eppc7_vM#8E+BM+Z-KfZsu`00t}hs9w*Li@f3suRy6qGe5AwC; z;i5I(noXJ}b$Ny#)e`o%_rNxnR+t4CtNE7BJQVMwV1AD^QAK3ukli(60Dh@?Ejk}Hrl?pX?cMNNm~TKM{FbN*V%;@xfk%fBMQHvX)Cmy)oJw@pkG zmE!o=9DcpiZNRC7;l34PAIy^iphz67GuD5@FHh@V_U8u+`sEdwcE}pWvrg3}yOLSL zr@0wMEks@+60hOI<3ighg0b8xA^78DEY(T&MMo_{xH1IY-uXKNSk_?AioiJ9H$IB7 z!*3f^wsZR8JAsbfQyRGLsR5>fPk32IYtGrd9kf5Yx(5?`Xx^lv3y6*?nkkE!_9KJK zQ+o-cRloN_W!DXm+QjZQK6c~saWf~6=oY%m#AIs6VJ2bOsQ*=c0%X(@g~U|&@dkb3 zlkvhSK$V14+gSzlrif{7H}EAo`R{*nR&Xf};>^JJC=9XvKh?MO_wkxAo$C zkA8Xc=*8yKmoM-sKq%QEE^G z0CF7{1?DkTh>;P9ha4baTXHY|vS$|1tFNjptFye)K$6iFp=Wcpf zd4w(YN8D*f*@}JqWS{CX;Mc5HV&wL91P4C26Alb=q?8$}FlbC$ZKc}eP-J$ueL0Sa zkwqZo-kiv@-VD3xJyP@v%!oDiPEf9NtDvf2)9HqjO2#*ZKbsXXI#x8meo(^NU5TFo zRy;U(?}ZOo?k$=wh85$hb3KkixcXLFNfbQwj`jOkZ*u*SD$*TU8<7JtxB67mye~F+ zmw!i3C3r*kb4z!Mey2pRqkxrni#C*)7()qUiVh!iD%Hfsecfz#qTBPe!y| zyTHwqZ~6#iZT3^YuJLNq=(qG}(EoJY4sti8)4)4$DlBfA(FgpHrY8y0bR4@yeBNT3 zW5N?S6worz_+p+-6FofTE)&zX@b2X)Nn?t%DwDz=!0>3aEh=YXfqg3`5vqOB+$rmb zxh*msh6-s872?oYz0+#p#XGHdT2CW0A%Ys^PHKf&V|4GYmpER@fWZZEYHKT6Q0IB6 z0O(DUV`yQ%Bj(W7Kh;794p~R-^^W*Ww@Ya(bJ_7&s82vGY`mKXQEcSn*p=DN#44-H z8@|GP{^@K4itB9WFG4=GWhE^Ta`k=XtP;0mrqmg@T%7NeW+eh=+nU3NUIq7LtJqq) zZi(b5?FY~AmC*t@w5e7zG)g@cOXnQq9)b|W+hs(`gK&QrzY`iYV#>ai#h}u(d18ej zT+u$$2-BE$bu}be!~D0LP=`i-#pX7eUsNGTAHB| zsQ?7Ta;&d=hxiEY8MY~2CtEQ)u=+EL_RzNqjnpgb;1a0uW~Cy9?K~mb7;-e(dq~JS z{gx8|LN-44eKd;xUe&Rh6h(1_%UYVexCn=(UKVgPoJ6W&v~K|=ByjQ6!gSyfIyyk_ zF}{jg2_FeMBx-+B@p^QLMo>wLLb+)v0A4AmII)L9rLx;h2Bkhze(HVVQUdBnLulFr z78#K$9(Sl{ab^VQ@?0;xvy9-BYR{9`piH0(xPNnb{#KcsY2yhzj{S~}57K1pmOP#i z;&kln^Swiub@PT2!T%2c-1G}qK9a@d`H60XTA{W0L;bzgOYR@AsEl@L2-Qodx!zs)6OTeflv_1& zaQ?v=C=|(8`x@iu1WzjeLDeoB@{lSy1jm0Ify?oLZ9T`81?$}8KB=<*(jZJ@p}4hh zs0`KGFL?eG`oLfqJ=g(HDQ`J5Jr1> z^i3!uahngwu8_HPfpukPtb>dXTTj0lsX1L6OuqNO{|}Ul*F%atq{7olCbSt`k$=^J zF92sR4nkukJqV|V$WY+{-a%A&e}7#964$Y@y4Q%^C%EJs{sqN}(!35w*p$it4En?v zwwy_h@bG8SHcDGIfAyJKeYWaCyu0YiU0uRtiv5mSVrhCvz?r3Qv+K2aA*#~rOOeF^ zxvE!zY+nTRyUSyFgSU@R5!3x09)o&ZCCfT^V7z76+bzy{3wP>Yk7H;d_;t~wv}j}% zNQQ0eB)QA%8}E(Hu@;#_Ox-xo?y-f${UlI0ooL;qO>$q)4DTK1(_+<1jgP6Yk)9Y) zzOUp}NB4-=obC-}f~V`)<*d8E&+$YX1|#d2pz_5LL?7c z$c_z-8Gq>aw+vsb>MVG@)lbSuUF}&$yW8^8SejahN3ZLE=4Xmo45DLF9Ji)8Z(@v0 zd$)Jh!^eZ2q+2Sdi2Z$(RxVr~{}aA-`*#f_wh!bBwpsGlB8dE!g;Itg<3QuccNXEC zhkd|wtpH8;9%XsIxOql<4B5J!{bH4YEsZ;e#M)VzU7NL*@Uba)9M~ppjZaKI)v!sB zuU0Tq=IE+4ruzPFk}tC>h-&Z8n2(&wIu#X{!ST%Ccy>)GE5BtpqMn&FO|u52BZj!s z-#s~dyb>K6h8T^jF}?lET4xi#t?Vb}`JiL7*3bGk8{w4}AC3-P{9<);#3pcFK?t+wt&XS-oVAaRFwsWm;xH^vIap~BOFRcE= z;m1ReximxHmEW_h(n!q8Yg8OfT9vCY-Wb~gjHqCE5giI0%D84{(Zza6VL~{uneAZO zTd=HZ?K;z={k^|7Gf}${c?y8~o+qN%ziD*HE3|hOrSZHm%p$W&`8cj*aS?Nt)vtSZ zi|lwkBDw5>iU|aQPwUxgsa5PHnZ)Vk2|qARB>W+~Ei&L`bXf7C9H%IOX+WU+U5o(R zr9IHSl^zN$cUSHbe@CEg%$|JyV@A(Pbq$Cgd|APIWC5)7V(Co%(1;+D05tO*jLA08 zc1cCbyNq$YF}L&qm>M~30G6odt1@-G>KQFUt#;gzHx(L#!c-nlNeg4%;=VW(JvGy@ znpOteZC$%w9N-ROoq920^?Ai!eknggdWiCvr5>0^IjFI0?bYB+F}lk$x&5{MW{d+X z)0O|;nxEM%6>HDuT59f}SrcvR^0KhBzNpT@H^gTM|6Q$@QlQ2bbrnv5XkWBM`o=>i zGSIMZ5xC|&h!QBSQtA$vXPH)7cAl zzv3i}z6yjk}P2 z@8y8(+NTy>F{ZeSc}vyRv_ebrEtO&qn1Q;yVmYvjO zF$b44`9^0$u$l8c%kkgcUL?A~IObP(W}0lF8sYHl$Q{7o$dZ>ah)~(`2M1o>e09}8 z-?VUuHVb2nX2~pcaHLGzYR%@DgE<~iw1rxQ6pUz2F8Md{x6sC?3EED5G}|1H7RSA( z+w%n(FsDv`AEfyL5vlfTVPSEQy_Rl!p@iM1ZPIh^O2635FQ_a1%>b(TuXo;!xo(T| z3;h+v)^E66GC}2uq8iQ2=IdWnpXY?Ee|%AR2XYMXjSh*J|GH3bF()*FSw?N-^JwQX zqC7NbGcJq+B7DgN-8A%PMY(KMHFFHS*Y#&(r_sNtXH2UaAdc{AsuO zGk;q#sEYW?E9J81inuQN(2HhAWu99Sn|HBYX^D+&+y&~6%)`B}EqPTFnG6y`l$)hf35~Xp*PPc26P7pbJ^@>tP$Y#;SVx zA92A(Pnt|M50cUIL6O)U@16hTGb+6mY{bhhpu|3O7gd7rDa2FEzKT3CH+3_lA{6&r zyzv*(+uN@SsY>G8<;mI1{PGn+NVL;gf@c0NOw^0f>|y7Hpq3rMTzi#*j$h<=I2Z+d zHUpvk@P$L3D?4BcV zro2i$AliDjo!$d8(b>XuUDg*1lg)s4SnUl=!j3NwsDMM1B|LQ9<>Yo-N`?*uq5r{2 zFrtWUj8zf9MeKX!1#3g|g|~V98h%zq({DmG`+jy0W%@D%6^uhT7_<Ng^>k0U)ARG5k&;hSGka{K@&BPC|q&6F!;e>O=oy(27gj&{#9(fH$UhNXfvh;U}mUJaCkek4qul|YKWe6L`by{ ztWzrE`bfF|hT$b}KW^i6g0UEt?Dcj~6>NNZBB@ETtg#685%0P9*vy{N-ED`~vv%{# zU*HKNj|l@H=r{R0E?-k#JQphilAR-6q%diEsLFeBKp3*=^7JiYg;KN}8i-`s(8$1l z{a0q-SzMI@Ils8PV4igckx%Sg8VO^%6Kx*jZnOqR-3%Ovu|Qy9Qc7a8(xhQmrTHIg ze06?Af<^OyGKEBVywWFd6@sjfsJ}gZ`1DdsRzmk!vg^5aONxn<89?e!Pl;`P)tz6Q z4%O~v-W(1|tjREiX#jldE1%Fe>mvpn#{{2kY(0Opxq1KlN1IZLHsnV;*de4rFqh66 zIQQMDfKLl3&p7=eJdyw?v3@Z>Y;_UJ`(}odb_>oC2YXw@;+?R*@^G?<5MwkpFU2K0 zz_68WGEG9&3dpXil7Mbk+Nul`{B|tCTq1@EXU+!wjt^x~^=1FXdncN<{xxjUrBQ0Ly9kWGmn?t6v>PuK>(eDV0{ z_dmUU6llaUooY6-Bx6)@rsAneFP~$sg7ZmL3b8G2ru<>StS#CvgB7`JhNk7f_gI(G z;I*{sg~=idOAY~Aa-Eby?l@_b=ko86VD{A%khGXNr%drgZAXtkt!!gk(BU6MRimPV zA0Ur#spEKxFTvdA_L5&_|J@xIeTNaIkJm)9>2*WWz3|8!lvBc0i6{dE}6 z(--Scp1yeablnp6C>!X^N4J~?LYCwNfeCkzQbxi7r6E==9uM7p)vT?oAMUL`dGz4* zqo3EG>}{Vz3Kh+kl&L0Jq=^zkh`~-^LzAMtyPuy<_PSmbD0H5xhi}`iN)RMxS0O=M zi`s?p0fmn`f@*=*qlIM3XrJ^FZVBhBwlS-n(I(>lZ9m=l-m>q)E!7q;PFSfe^FY2A z*D0BIqg`sWHoS$#B4e?DZ^0Yw^)Rf&>OGzHo?6wY9>`SYrNX~PBl5yRAyP1=i|0If z-Ni$)SD##-9uOcHo?ex5dc;#xkSU(=Vzg=T=`O)^a$@ooQ>A3T-yinCSRGy{cgq86 zMGH%##=iIRj(vb9C3F_oz!bBqB+>~%1(!x=+CkW=3p#d^7!<=Hhi;fYI01>Qco!!C zMt;~(sORKkoo*iCt2y&#&VhNUvKpo7+RI{)E0$QhMInc;BX7qdp!gY#-8~fbMHfOL z{p95atXvuXmb`6YdHwKm{mD-+zF#kNVVq-SWqt2r{n6%|m&Wr7SLvY|sT)zOv*lr~ z*uZN9coc{#A<7oalO1&R{Ms`q{O2B=U$~rVZ|~wYXn|fKom&EpPH7X^H5~|8XA|5l zE96&M8T^wZQGPwiIV(< z9tMgli(1DpdWY#C3fWpEp^qnmad_YmO;cD@9PWB9S%lQz_<5@-#+TpTpM5|b0p$|h zKR>WO$;~%~-i)oer!;}~th3}{8i8_QEnav;mG~2=Mnz5XQt9`&H89~_;mJNHD91|g zMW;ExINp+w)qD+uvQPO=S*+AqO3wp{zx5!qhXkuDBa2ePcYx}5u$Y``D?vq z>TK9-H*>b?Va6t&kS|7B=wsqKhQZqzfd(ZCnYC!yYQt6Aqcqu`J(wkCjNhoFZ3GvY z^j&2Nz(#;3aO^ptfVdcmmezW8p*N2(#^bO{%@GKNLLo$yG05aIVGlA^CbDQbm`Q*# ztXpP+D`(`i`=obQ405h_1P7pyl`Uf6IW&N;RyMQU5SCumsj1I?u(q_UIL|~yoUT?z zP2;msF^RBRj=+Z!i8}5i+b#?S^H~|z7}>_*InIqIT#<3}$3y+kpL~b4Y+O8+ao=BV z9+Swe@J*v~n$#t^Sy!4~JG?|-uVZ7KYvf3{FSDV?A1PZ8f?)RWyL$=?a)~|iljm3L zi9q$+9dAAh!O1cUw}w>@sA+X`sA76yfwIggL4zA|$bC8H3xI=W^7j^*8M8wfYT{y+ zZXU#CMV0JFvS00YaF7B9sCnEZa)8py8g24pvv(CKFz5<*QZ>TTKQ;5@&6`(q`mfEo z$8TPB>Z=R}%Yzm+tm|_+et%9@6K%($q6YlwqLF+IM2x+72?j+&voA!zfJ* z`<{fQ3mjEc27zN@zQTWH`Q?YrpMh?&yQ&UmabbtBxm=0k)VG|7_^G%8>2RPk(so1= zC0Oy`_~RKBiZokbYe!V)Q!W}qZ3206ph#n{syRr1ajB}QWe0?~z+X5%>?y`9AD$S! zDj1V#FI$1HBGu8N(B|g5!q)mLOMMy@{_DTOojk8jW2|ssK@q@(JM$a~hIxgQg?lN@zYd&IhD3pfw zAU})=k)t+S>=)5R3@;UP+I&p)yn3Ut@|q?X@#;t|67TFVhpR7m{XHmK%Z!6h zeze8mvW<1QLBxThH5ddd!@cr;auM2M8OB&RQrLD+;_C$T7WY6z={>NtYxXsS8DGas zD%GLCI=|ei4%bIEQHic#m)#POd$AiKyxUkZcTV;$!5+Dk;;38Xg;#{9AbfASn(4{Q zQjG!rr6!)ECNJ2BMSeULZ|(UrNbsnvurL-LHm<>=Rm*s)a*&FZJ!UBr{#{XkY!_mi@U z8Cn3Sv`x`d%%s9D=svGYIr*6`#^h%~<*CPa2dN3!=n0;z(g2QclMh9_V?uEy`V#>H z>DEM_y;P$ci{^L^(uDE}FJacod~t9Rj*C=dEAmH-ZHo52D|U?w{TmUCd+6uZgqF+h^D#QV)qPi9qg^e%0S5ZpDdyNUcc z(*h_29`UEG`8lgAU-pcnx2$6F|6C_VW4PDRBM<}WMJgoJO-&9l5dQVZP42yV1M5^?8m9Z0KxL1eh&M#tkh2TSumJm~*DOI?ambk{Yr z;D@HU4`!F<2D8fzS<|N!bS+WIA5l>rkH&AQpFi{TKbkKo`Mp>(A4*$XpDF1|a~j;w zKW_fpGkk?)OX755s_idhCcsWe3aP0Tl^tMBnT=KDmn)47@BfQ2nm6QP4|ioU@gEp> z3}p0|S4;fysK1IKY=Co>8^nZ`-$pqa+7%Ez!n0f+$XP9pZ?`p4)2zBY)b@{2NjCYE$>;F z?(xgl8;=0yZ2tJ> zAFG04FOQ`No8t~2^ESMC)+$=e7C(yT+{@%S4~#8Y88nnPac_o=6`)5qmi$l8ihn^a z`ypY5coj@gkJwOdw<@GZ+9}oBF=f#Qvhdc|#XReoc}D4B>-ZiMkhve9coeDFI30`s zIztscpq2v+Dk-sxgV2gT$tceJ8u2lNW9KFRA+Wa|(XqtZ?U5*d&qn*C( z2><>nZ4n$ms29nNH*w7{w&0}Z-Qhafj+y9!Ex?LZ!Yrd~6oDm(ceLLlVoOZjp<;(a z>jSr~qM(r!s zRP9Ix|CkO2sgasl9)#6PZpm$ag}(8{tu20(VYEaQc;qv{sx7|up;`89bEEWMs)(L&z-2mA7lb}n~bIX23KkFPzAvrxB_g3zJg{_$u$k~`@;?0i#; z8T(2-BuYX5OxzkGE_umJ&MPinB37I;nnJBrD#w!+S`2?FVV%{W(<_sc)RyaUQ%B2F z`-UW0MhHV6rBCHq++48FbCBLZkw!0@1PP&=bDRnTL?VH{c&?5Gcw zCDLWFh?2c$6;i;|MvBr|N^_pMS7yo(E+g954nDOv5JGXzqnp7Ws8@w;ihplfhlx8J zHewca%WG8GPX*sUlUtpFg-vTc`2;#Ekt9;7Zwka4@}%&^c3AUW zzzBSm_z&BAAimC<~Z+ZeHXm6P<*wq~*|fl7M0yY$(slH)+d^xhJnkx3z-; zOcDvDW(#n?)8(nA>ZeWE>*zok(SFTiEco?19F~$_*-b$1OrgQL13Gs>=VI#0BIWnR zipG5*hidV|JecN%1jI(w=HfRsKcA{MhN}?*vxyrw5H`1cv=z}Xb}R2(Zjb0pUY|4w z^@<2zESqzxeL-QS`i-jJ5=7rAKqvT~4~_c?)k0MyZ2h8tRftI|N$24O7o|H&qFSx+ z`B@To%dC1$W|O!4T2aS))4bC~PRoQX#ox^SQR6CO9lEWC7H54*nskf812(n6h6Xig z`!i{w-3i!|%qQOVyy!j=%0#u4?)R08y8A`^(5V%Jr4ooy0a=&L@n7i1t!{BmYhZK8 z_cDzS>ezH+Y`uZcq+~1?O4&3Mq zL$OhkBf58)nuk{D#`0Zvx7t}IClXLgnMINdh7d{Wgu7RF!Zp8#nJ`>^V--MUBjSCN z{VX+s?a1TQ* zvW!aF);Z#3si_6BMVYyB583vp=C2T!#0cZ#WY}IuMYhH-o6p|7di^pRy28NubjylZ zJDIa;^vq9KhMk#j%41YKew#0!-G9CH!~H+sZ{wLrx=aBAdtj^j;_kO!_#ne znv+_MbxE1dOQbR8YIOIhBulH5^g>qsA z+w6pliUmlT_O>!^zNl?LKNWA#StBG+?Ow6MWJZ`J=4UPqkPy2o`JNTUeuyqT9wO+c z$9U}2W4iuZC8qA!X|a^>YEm|ax}JNxIb%F~$9(zu)0Mj?-d0Ul5PUL6b!NX4Xb#mf z%w78GD4WaF-=D_f*abk`d-H?p%S>ObxSgjubiUSy*bZo{M+EutNU3Hk81X? z*}PZr>fk6&k&2Qrj|3&ySyHkAHPVE%Iw+95dn#uW5EvBNG8uV-Z!w<^ZNBrKwJ{MG zOJ{40)#xnflp#w(rBZpxC%0wi?9D9DA0y&OTfxCaAq=qbJjAiXeJ-aEld0bHB|$f3L0~q?qNY z#Y(QZhskd6tGg{>@TlNRJ%eJxUy?R1PyHifS3wndNt`$c>DQkq!?WC-4eBc0tt5L5_xGi&VJ}(Dj;e@P z+0-r&BLXT319v|s?*a8D5Wb79m!+nZA-X}_2P+Q`O$q?BC^SnuTIcUFaXo^78AD~g z+VIDWk|Wctv1*^R;pdkY5yl&5b?dR%H7HGTqc^F`7g@eYi}XRiPvzc>YWc>Bh`?f_ z;0c!+8{on<{mOF^2UHy9@>MHHZ+IX}b5i0(5c1XEb+=D^LTw*eZCiL?k zjggMeMx}^prk@$Tb?V{w$=dQdikZh&F%fx~Y6+)WRc;`w2c}{&SgmUE0Jn>wuY{4@ zo{euk28A+311YerL@!!87hJoU=~}no4C0qikoAX^o$M_m{xE|FU`sL6uPnB(F;P&X zke-MS#ljBC(-4|#+))neFap=&Okz3RcLsxAbz{xBzVZB_Ket0Z2>@WJr&29HIY=w< z=;Z{>dMUQ!@T6Qv7i-OEY za5U7UiOv|`G{7Jd%H3>i+~0WeXe;2=WqJM+d^RV;F*rTi&*=0+fEOkscBIdh+yWdb zwaTt2z&%afA2^W?(atJk8M>g*Ah%wbVWG*in~y(Ljz1zCu@QRGw(ewTD36`cT^vJ8 zcCJ;*4cCXIj)`2QFf%BAOJNjpC_+1$j~A$oqA{&!*(n9JJR^#`GHWc(M2uI_P=Y8Y zXJoQ(<)`I3r1+EE|1?viYNglbG1sXaZTZfaX%K{QQvCQ?LyAUotsDs|Ye9{Hh8IAM zkeox~`J>xlE>1Jv139Kpx*6o_jGPa6bw*46X$+!0hM&< zS_=d5n|Ph&A`0ZFczSPGNp4Yc@!hnV*aQz@qv(-!us28DW>@|34?1l1N|4kegPgY4 zr7*8peTR_Kl}zboRhSpF`qntvWEh^wAokf9iXs_>?|wn0r%0tRNgR~FTbjm~05qx4 z)+xe1?hzjisnw zXBSMI@#tN5`IQTzM>R}wj$Zl3werr`o~@}<5l3>yg%vFB^4lem%JNP5m9o)Q94Trc z9aGe(1f%$sRXw5k3KgiY)JM`QaPM9ur?Xq30ebc;y_72j05GC2ZUu|8iHUVUL=nS_ zYvzPQus6*t6}(+sp)7?(x1If2lu8|W$N(~ydtlP0m}1&L!x9+hvvVUfz?=+OR5mji zUsGqhbnO%8ojpT*;7p3tm)5`FMB5k}LF7|dv6=#a!zQhvq*xQOqOD^8n zQprk!-Vl516lRKTU-#Q68flUH8S*T~l)1Yiq)SzBAdIRc6rd)dY27Waf9*>>v#oM* z4x|G!ikKd{D`DZYg#Q^ZwZ4q=V6UTGRvIie%#YMmB-59=9kd+}{XRms1*j<^a|U>TZznZD*p1Yp&m-7vpOuHOZb+3}g!ok@s(I#TS_lEXHyrkE$D z)52L^dy1Q$Kszx|yzvPi-(|BWiq(7y<0DZfriV!u82@(r*BDcDp|{dm@p9NW)>bG( z$t@hds-MuM2|pn45k<{4Lzj1r;sjRntoaSYM*4x&4k`DTlvjFvU!Bx06s^1|b+RmguXc zhvJtDEAdM|z}Q;>wn-BAjYb5MU#xPU0Ph8TK$-fNMm?Z7rgK~-Ai-@knrU@Mb7Yne z_A@X&qbbv1(g9)KysVzCwJ^qVt_6@f3BG4kcc8+<8M{las<{R)EY-vLq|scg@iEq+ z6?ri_k#8Wj6EjqLIh8%mN7TI+P{B5CX@2G2m;L4C)rEK`6;-Y9!S8NN`P6B-hsF$S zMdFx^^nR;2xrKP(he!#7AWhH=DGsUGgUv-bLE*uvkxor-mlkd;Rg5&#Pe=$90Tr`} zxl3#xk$h+LFG1kL4x2CB z(ufii2s41xUl=^W ziNi`&^u%rt{yR;5J3VX0*k|tqlF@b&qerM#4>A1@){oMJ?*|4MsR z?`@CNs7da$$f7~xr_MQf>{OwnKN;-FovLvG28>bk^~zaBs)oFyAK`Rl?Sjd`Ob<7q zu0cXNi=O|!ikgFYFEDxK736REGcQ?QdMI|B-t>F z3q#M|M-`BUi(oj}ILi)9Ha>F()JnSE9+n3-ehtSC-V4A2>MPXRsu9s_h~r; z+D>4l(YrPEvnj@v6#vtvhs25t-`QVbr?}$pXtVf1p@7~F+oUkHZq)~)v7SC}Cs6JP z`=j;I*7||;+?wY6z--Np^a(`&710HHOUEou7^}JkqUmM7h3-Qge%4=DYpe5W zK#7w3^fp3g-XWn5#Tky@TIgCvLU+>#_;r&gWYZCQX*dOKAkdg3B?osLc-&-F=PMU0 z6S-X+{6^<`*t+FUZ~(}ioBAh{>Mbl{_ zNHf9H3u*JEMr!?*)zyjoV!efU=@&K|aVWR}@_2z7p7*XO|e2&p5|U+H8M* zb)ijYE{r*h|FrjvAfp#vZo%ZUbL!Uiw|ld9|55)+nJ7;QYHV)(`O)hZn^^JQpID5^ zOhu1M#(W;E=;=ONP*-fxm32XeZ3bVagq5V6`}|!gy<-e$VL%RT#>|{06_$YR7#Nl! zSj?6?Mw#28Fj}-jtgU%hHs_dU<>qukOJV7ob9>K3GiW^%11cgeuJ@Nf1>>pspZ|06 z%7J&DU0YM9E4s9)1jc82D2y7uZeGcD4>fGzAy$j}pJB<$i^zqSW;gyPVGrcAkf#`? zf656p+VT|Z!ZjYO!`vEwzIG=LZ%=zfwVcx$|AcapAe2GeRq`Z8j zn8nUphB1Z(=0T@9*?0Kf#EYdH!QaDkatuX!0<=Jud!SoXxgtVp+PrL+ zv9)kOh$JP1jF3&t-7U-Xkv&DjQLo{`7 zu8(GL>1(>LEo_Z<&Ja~wAVV(99Aiv46Jyy`u}($UU&dK|u!3lG1zbBz+LY8z1>vaM zKW1Yinfw1M?aaH|x~?q$cfJK;dzC3!AVF|uY_Cw1WYLjCmPpyIWc5OGlEj!(5u}Dx zsy=)F_CDv{_Z|pJN_DO7SOgyKyTiF>*k@{1gW8Ox%|qIgsmmFT#0yW}j7mI=CJ`U? z>qkBTJ;Ne7dvBezFc8!SUW*CVG8j)Z`W?Dz9TcX8K-(}d6j za<4Phzw!n=-nvAEHNgK!DYvs+;T={6vyz&3r)I_7sv`4pb0O-;FvN2Ow!qn72!i=A zSIbtMQ$kIpM4^$W5ZK=)b+t-NfAND%lmPMOSECw+pp;XRi?0G`lF}AIhSwKrK)Ijo z-jF$B3`ze-8e?^JzTkjyqZF&8`lUy0Dy{^6{F?IBr4qz??`0Tw{YQ@T@SKJ#tAZ&c z`2oOChWj5+j!%!65b-QH5s8`~`4gDp8$7~ZT~oY8W2_BV%AA~)53ovVJ<;otm%HAJ zL$g?lj~E2786olQmY;+ql)?M0XSB35UuLAE0(Ak}#kof9nde|7)V|=~w*RrD!XwP_ zyD+tImzDXtAkXFyCQK&wIt`2@hch@o!)X1h#A2C_sz-#MTEF3O?@W)o6=F+aNyZxe zyAYkoM}-f98qVhQ2Wz>Z`F=`BjW4Jm`IN9tSNG`giS$wz=8l`7yjPE&KMe%WNujEy z8q|@IK9MdQTNYsJ3VLk*u#JL7eT;Cz(Xs@sLt(X1M6x_?_QvGNkRbi%Az&^~bkcrZ zWtDG1tYI6GSnPgCBFCjl(cm5n!`mfR7l?!g7~%h)3Ecg+h}g)t8}er-07amZC>`qu z;2HW*2lls!zLaTBRUwpx_istwfrsOjcKmAuc?Ie!!gC4qcO1B>rS(Y$i#T%#RR*Ij zeIoH&TnL9ahS%xD{^o7(KWT?^LNhR1NS9QP0B6+2<|$-+xCvbMH$!f63{}m&_z+k+ z(1HE{`h|@7efLukZWBYWl3s5%a4xMde+bzDD^USvq4{j752~cY^qH0J< z)gWmn*Ea`=l46D)i$|k>1EdQw8;f)bc^y#gc9Z{Y^m;(HI2*wT9rQzrDsO zb$JpDLuGYD61wI~_!n*s$j`vO>Bh4Uvk1D8d2DW@G2^!2lPC;Ei6i~j(3S#~h#sD( z)kGgXXkPu_RetU@T4C>;8vwwnPjcyPgK~LkWwikDUgzy1s`>G7KAjA)&d|rC{g*7| z_TtzpYM8u*7UOB{zy8u@h(ylREKFxhI2N{qjwqv6gu5bhbElqQU@quVu~i*oFnT= zmP84K6UN>OzE%U@v@GgI?WuxIEmg`4tz4Pzke7wks-824=t4-cn)Np;<8O!Eg9qc@ zMQzwql{A0UT3uldmBl|*wJ9CYtCw3n*oHPnfBM1wtJY8H_JI1pkq3W|e^X3N%qm2f z<>1=#QtL;M2#)A5Z&-I`UUviiOC9rICt1i0VzNp}VOP~P^Pf^^VQ2oJF5neZr@9PU za_wH{8BmGSzsTuy9c&b1QgG?!_Vb;My{(7O9?Koieyg~cQ(a_I?uy`CgbcGcC!M1; zg}9X;t)o4JM^1doMxHU@?x%6rZUP|YOB#iHzt{4`g_GSVJp=R~T>1l3Mgq7K4sl!iXE~C!4m)Grv9Eds%&4-9X z>iv{+6N{mg(PdxSW4X0V1%824gDvYzF39=CM{Wv#%V{E-SzTNlUTgzX&%vOhKFghYXd| z+NTgO6T&1PDYZFb(<+{e$K-vf%6{+$VaA@UtEd}8pI%UDL|i^%qhiB|1&JKFAT`#) z`OKn1)XaWq%m28zI1>v$xZtuvO1?b)l&}#H7F|XeFTgoHdPcjAT;Y2v zINnX!j}=mrrnf*GT=m>o2^S&M8ac$~VUhfL{H>uGVMbzhu<8R&*4e;%e5~F(F?)o* zS5s`QPS{4N{Gkw0l|Boaqan4<_1Ry4Wx{Z!VigL6Pz->_gADesNOR9O-8r(rBh;BrD>=4E4m{#jOdqJ#A_U1zK!`s*CH?pxZPJe%O7!@$8vJHBy?kr*E=U z6TQ?jCi^?fQ_hgEHhS-%WK@e-+X;k6{Y-dd^J&oAK2`go)QfhgzPNz9{8XD={zR*R zGGF(eZ~t}c*|Uv5{%~GSR=+O%Fu&zgnhHjS0ykc4JwYa81|L)7O(NO_S@MpS+7e~R z`!(`a5P31wC7<_7-6oHbSYq`sdbohU5k#9$Rp3c`;Gix2BLi}XJCG~-+t^n;xW%QG z131u9@Vm`J6K;N!*0=N#Mc8V3`HlWLYsfsrMs5ZB#CyyBWRh0w3Dv z6dp|}e>J={{BKKYW|e62ZT}^#ZN7*z_;iBMeY%4qPv2D+o*Z0EsQoIzEq^H%Snvs7 zjR|iWf3{s|4dE9@6vck>qE+XUTchf8I3m4mSyO@F%TbGZG~H6;C*5b}1hzbY`&z<5 zk2ZDGSxAf35TdHSCuky}&O&%T8+@l-haGo0TQRmqF5w*FY~ANkR^q-&)$LdcG%clHKfy42RfWatVb;8`snbx@0O5Qy(3{+^`nKLw0ucxn$7vludJ>PRc<<7N4e?F z&P@hQ=!C?hYntW#S%ra^14L9rD1vhdf88;xvp0*=v|E5XqhJbE*V5ZA(}%!1P^w@v z|KVVHP+NwHVTk`hQD}_ps8}fZmRK(e6rmh(`2zCYd%E@V(ay%pz5jT&wfXqP?&HY6 zoOSV`bk(ZfTL5o&EyQ-U%xNh;S>VXNd}P9v6mdtkIR0IQUlC6}jR;&WT5q9XvAfg^ zTlFq2Cy`jz^3uaCzQ-|yPZ6q8-e^Po#Xz{IIOk2*V1 z@T*7`MQe@?I6f~?T4*$x@7T(1lt&}V%%v;Lubzn1(%wsGgjPWeJ${Kw)^Sc{$dCv@ zgJ16C9Io~@sEHWi*GuaQ3+qe6FL82y#>csb4%58^T-kC`;a!x<*L{SPS~PBP#lpJT zk_efs>L^x(pt#@w-Z2UUwt6((ToT)-bTL=Bk4E(nyeq76(@9;WCU}eVsdTnLIqV#1 z2dwxRD8;T&F$fW8Na>!?##;L~EAxxOK^1S{0+UnwJ8h~o4 zP2z64T|-lg;O(!$bO8J(O9)j%a?F~|?8#DtowJHIkmUaL&Q|&@$=F{3RD%kBZZevXow}5)aXF%1Q$+lK-nvkiakhN(qe*4 zcT5#NtwzFl8u+bQXBSJ;xl~p_^;{#eQVahy5&Y>N0q}ZC6U6epvwzG|v)49;_sOiQI|W z4J?e4HQ;T4Ar|IxKDyT+6it-M&qPj_B2$kk4{>}RFb_R3i*sNw87I+z@2T*ypF32p zK<#KjhMEQAiHgfk_f#UWKqV4BF|*5$QRpg8HUX6a`Ee3Wyk1wV*66-`D_``m%y ztP%%UWvw5OQ;-3cvHGY~%5J$3f`oqFDoxF;k^Y8iaZUHa;QJT>1$OFzQ(c`2*er=$ z#fW}_r^kFs^#4RT-g_nfu&$50-Qc*SQV!;q1{Ps8zAj}~%d(!>xKem@v$4^-PdFk} z;bRMm&utkjn-kpi`ua5*f3_g)%fnnvbSRP@D6ItkeHu>z!2o*4)Vy#_*Bin#-Ak8AtuCH%S$r<9a;;?dA zUEFzC>@!p-__ku&0?aVthw89F?=T^SdsxvbRfn?vCaMJJy2OnEk|HjM77QoW@%WJn z3DoS7_l7>v8QrLa8|DD?EaJuYfD(FF}CHy9=u6RYs}hL_8jo#V~1= zc@9vho_Cma+UE~d|BV_X*RQZ+tpw`SIzT|Ik$wN?)Wtjb+mp@nC|f%wF!b&{^UuONKN&Di zR%C^Sw3AUytn7B#W4SeQyCm`R<$woDN3Z9rD-agvE`r`Io5XobAUSt?%r)SyVmvU~ z0Vc3+h?+H8=OFg8qb{VhfRt1hKpZq0?oJy#KnMXIg=9TRJUCHp!12um65SP=?IU%&Z8ixkF%+UW#~v4`7FvrO{;*7 z7%-5^jya`WU{i=qW>Y*mB~k)2te}XY;IQ(d(Zlz`(bWs#$2ps528g;BqEb}eiSD-& zmK-B(DO@j=U?!{2F2HXqgS#Mas#rmxHE%3O7*LFXDt4(6E{H(P-^!)#yO*?Jl$Z)l zXGwuc+;lxZYy*e+QG-AFg%ZLs02>#G>8!~i3E%f|VsT}V3jpUzj@sZz_7L^A4JsGFsE|E`1Xzk(LbM%5=8A`tPfU5bCr1j7WJK{;MyZLJKYx8RzE^QLBqpT`vK~N9^ zG(^8O1#UZ1k;)?id5P0YoIfdO3IL_O1k)ni$s(4h5w6K08I)D(QJY#4fVYIEeLFrS z!kRPr2Z9QPj>~|DzJfdTDoFLKpd}>A3|w+AH?iQF^`xXg8{1UnHZ9$3K_XKUlxc~Y zRlXEko=e*Q$J_pW8y|#Y9z?K2>qol9{3zCSRYFINb(%SF=t423D zf17U!-|9VuOvb(M-|9bq4xS?M^&{-@20XL3)CJv^)`xdw7Kj1Q@IME~*ZV^$2e_UI zbQ2n)x*|7t;?560{!lyey}A?xq^Y$Z?5zhpBGbOyb2PL~pfLV?K&+#3Se(SN<0KZE zMKaCZ(~Eceq>?^4Ap?>QHZobXNiim}shwFkk7_@e%$%<;swe zT@-5r~=LmA6o;)#2jOFd(MydOxMNTdacWeIE=kl!#vaw5_Voudc4HBt#bq z+1179<#z8SMR$l@BwNQ!IG9H~P`oLd|2W2;a9lY73%VjXVS(ax%VKY|(IqH`o!pPk zKazy`n-G-;RFFpdHg;FPpa;DDFHp7;*dZ;Qs;UUd6gyXnG6p?)0{mHil&IOmVg~en z!3==o>UUy?78CM_UcHV|;7ve&Kv_{mxs5*o zgSEgeQtDkz0F~mp|L~>R!Rr&>55qDRm5KX61)kO}flL@SjouQTWi!84 zru6iq03ppxB3Czd7MfbjlOtlda~dzax0dW*BL7L8l(hHt&_?$M%63i)e1S|wi;56BQ8L#C6~i?` zbnkvMD2Fg}{AOF-SjJOVl!52_hZGQ!$L*?^@!yp&Rh+G^dOnx$0Ffp?@ajT6W@ldB zOQcw9)hlvZ5G^;W^^@P8I~K~b2)Yx$dUSF4kX9o3qs_f%y_ro1C!=Kwhl-}7_X;1# z=h_a+vkTl73aWpH8~yeqqz4fHc6xGoa1j-lFEz0o=n0aZRhMLkRHqB#U1SOazyKy3 zXD4z=m(|jU<)dnefSM2|VYVA)6M=)ptJ2a*{C0WE907}{f(Px7WsAs(E9<_idlB!N zo<9AkG4;@@P(tW$ch*0mCJY)I$OAuD{eEc#&Ru99`63bW<;X)Xllp4$oNLdGX#}%o z!v;tjf*$M4<>w1@SnfV%rI{C}pBXQ^Cm;epo_4S9WhwuyhFvn|tz1uf4Z%I+!Wt~r z)TU-a;h}3yq?Iz*e0qm}&MwM3e39|p9m%D+FD+*t(R?ipu!Q5qAa}Ynqn=St6E#As zBUEs9?z>T4r#+o1ZNVM&`fjXEQ=6RtaGsq1FS7P=md#C{2n>u3s&o`y`=A2f1jz zxvdQQM`Ueh&U82EQ*?A(TO(FB8R4j{xssuYlXzjUFh6qTFI4h68F|2@(>wY25*NqB z8|4wbP(gMK>6kRinem8HpWba7;If=TQ-rJETjH%+-pJ}kecuvkvaRgb`uW-bGIO2# zy61csXkc?MjRGV2reL0jTJU|WW3KOUKoOj43t^KaFhbG&SR#dQu%lBi4uwR;M&TZO zb9fQWWb3N&W~mL5JsaA{63nD@^Kt{Y-}119!xarh0~KTtW(a$h31^PzEl9mXRz-Jl zOs@oY`BjV<D;VQzH@mJ0c|N@6X{0r?#m_@f zNO1>^xw<~QxgN_$6R1<5P01-^IWn8sU(Z;sA*5G$hrnpgutHqD)vh7C11J6*`ftx@ zMxG&Vl~_AI-`@93J@E(61dz-wo7i2>Y7z`WNWG-wTqxraQ>JCuMMsPWshX;=IvME6 z8Asg}1;+3#RlzA$u7!G5Wkb`g@O$tbyp77AAk_W>4;qqhpM-HiRbx<}azhZU|k7Ww=h_Ss=B|_~?t7;@bU4n^TS!?mKIz*_l z!gQiWftw<48Cb_P0kY64y0wP2s6y$yK5keD%vf1Z^@pyN56P28?KLwa?%orYr6tEt zsHbOvp=;p9Xw_IWDjs6I?#p!MJrxtBKu6V?DcPZ_9jnuIW}#|UX+K%2V=#p|lbL&Q z4U_h6OM8OSJl3oiB@P$d-J5Ebo`itq54jh-$ln}awd;?$?WV)BKqt92RcOHa!K8Sp zM^Yug;|~kk+_e1SHX9YAw9xEA=shh>D&Vk6H&oN{!EF|9P~wKQkjAhwhvn#|d%=8I z?ROw0@;*M(T`6N`-2~2(AlqPL(5j>lY{Rk>adcbmm@TH!|ApYHExh^V-p1us+D*&r zi!19(YUX%n*_O|hYY`W(2a)bUFI_;x8xcZ@NmNm${H6g`NVdkpL~#OSp{C}_y?}{& zy{|T}R2LEI$+#)Jg3kbN=d5J^GlCOjTyQ;7C$}SlCI#fRay6VJ7e0epWXgmB!*E5| zhJeaDg(^`Hg60hwi?**a4tLq+xw{8pg5P#q>lSsSd3 z2x`P{Pbr48vo|FXvDuH+#TCHruUx=N!gSnQQ!UOLgP&zJI{=t6&+sxUk{_BTVe#tx z7&S9p0P3_7+2_noc8seI%&6%on0rn4Q{lkw6f5D7&Sh?^Q32d=G1HJk+ z-u0|Fu2-^N2NXYm>q=Pa1FlZdbtxhC1DO`HYl^^y0~G(B)0hk3XSLIIOt`5vZf6XB zsIW7?56-NBbj-sL*rE$WHe5K^&RrEYY#Wf)iJ}zFLT?Xh;?2q2&H2fPxe$eOkszRY zhb$a&k0&n3e4ThE&S?v&g-+qn?7$VHr5rO-)Vd_euDiWSKJ2Jq((%=XY8x|l9?^#I zsPJ#irAQ5rs^gc2ZExoC>dO4u1McQB9gj&yB&(5p??LDYZNM&7uGHsJi!a!;m~|*P z4o1?<;?F3s*ah-JJL-MwC!p4EOCA`9QhJyt#cEvfpBNy+e+F09k1_Y;hKDF0X?CZ%`!u>Ol4=YPyf>m?g(gUD~VBri~8RVbX|#!Sf3fzpSOEVKHbeujs|KLMS(1`98l??|oTw(Gtw+*UxQE(N zvAy7tEFz0@)$YJDBr-?@r#K~&U=PUJ6arkWYBf*naeethvzNNQe>+)NU5><*4cJGK zt)XNi!+ovgZAhj9<81RezfoF^%S!QOg2O!2c-32k4^a=C4F~~=LWC&FeoeX#R|2`B z@+5KRbWSQp0FQz@oQ8*0)&x>GYoqXAS{6n`il9D16e!7dkm|m03t8Z-lcHB?zr?Lid0yBXoiosmcle;)YNA&85r8Z|| z&l}UKK6q>W%yQf&EZ*>~MrK2SqrcV0 zO30T;FQ{D@r-oKMczX^pw$4GZkBO8pr-x45?pt5;$%>L~TC+^YYH|eeIG}z>&1#SA z)9vp6^mK%DR^QT5b$gTd*ndQ8#Z7yXh=rLoIVsoY@0IN7>%W5>Q%}Xv5nVhgSLXRK1&`LZ}e1 z{r%pHSL9@y-Lu^p63JLs0&~2`qQjC>lEtX>wPMb6PM%Y|64!;5Y)>Whm()^{6Ij+I zD~L2cukfYro&$h>C%%CD*sWI$Nbo-c-7ul%=qp<6KCxUPwmhS2IBV!R~|} z#@imNO`^&vva*L=0cYmh32s*6G=a`|$q1XZ#B*eKh``)P#}CCw#qtg)?9Jid|2ACs zKVSpzxF`;xR8VGU;??+Mk4(>To_kQ#TeY=Ml~hXzOdYy!1$#Bz%we{1z>!KD%WMZ< zP?E>#xCyh3oz{i<>!dmg=+|`vOI=wW-7kghn z`14(N7l!xK6E_AMTGH?DVUw41a5Edma&SukSkn$T2bgi_$6*A`kp&$vndfU4x#MV>yy!wtrA114J%%6 zAI7-1u(Ggfv~zqq+TC){AtkwLgkEQhmnk{qXDRsk_;K$sT_Wy!bYY1^<}nuU{*kw$ zZu_`L!LG-@5Z^$iGvhmXY!$0|8_uu(XJP{it>?l6a1AbWlyTkOA)gZ$df%o+< z8_!-n&QgewwG3|)7E}gtH$#Cm;m`OS|LWo z#g)8%ismbqTRHO4l(X87<&~4IrT(o4`U@sSB{UL)x%rwZ)Nw)~$JhLQomEh@ZsFfZ z%2C3eBL^%#;Nt~i+H^;>KnBy;Gef>=D0Bg?8ws=;QT=$!>hTjV)iIo0$m7FF z6tneOJkF^!@Lx>t^O*Ja_VVIzbN1$@85k#Xd6GTCfuC-|g0`>&^6CfV?JQ#0XY1z+ zBPwJiiW>IOX`LzZxp;v!%;bDKsH+}mWgJ^BjiTNFn~j?%3&((frrjEVMjy7hu~wcC5!o7>NJTaPV`Hh=z$B44cl zk9PMqCbu@H^p42W3%F55qU$nP!D?22D;nUzgzKC@h$d38 zW1vL1Vl(4T0E$?6C~G(81_iQPZ#@28l+*S6*sm^Pk1m^G1t6-8DHbPa+Plv=b7Mj9 zGAO^gkqd}ihd^w?Y3uhz2|#k=po__HqX^G5!Nu3?&b|Zlq7D#VPOlkfwNLM zQ9$MOA;iYA1ZKwe`XqcU`PxB?Qdwo^WHnZ@qR%fCf${4ygY{Hsg7pWzu%F@}bnOX~yqSMM}Z=KCw3 zgynaV3!5#d$4Id9QHes0J5CZgB+|OY#Y72!`?DgWZI)3D*f6|&f{%`0@81xkjW9tO za-Q5NE)-z`epvtwpAa=ljg_~hK<6P+bWhUK-j#eH{{GyFNbM;0bTT0VFCi=uB&QU0 zs1_Q-lFV+wY)V!3X^DkGI;Doy`n_I^^Em3CZf?TPlO_V;?ZjrT%nvE?4}I z!|Ex}72*c!cqZ&7^_F0n-^^_O_S?PA<(^j~Q;);lW%?!bhN8@vAasYr7}3=`z;kge zSa<@5aJuh(6KV@t4w8T6+<+E8 z8uLjHrxG|tM6(QVEH9MtBivNl2ftQkk3Q?I{sKG)ybk(=IA*0(7FncbbrIA+BcXyLVRL>9@AU}}T+G!iiFE25z#9JrK8 zI5fl21D@G!hikN>|3QV?&RE);uaKai5FfrUekSq`mZ30GSt-K9{}4b$QLs<*_vKIW z_a-H=(fMc_a7K2=*FzsyFp#S0sEt_bT$hK##q`G))H)u8Aboecx1gjUvt`{cyk&ga zCg}ESmN2t|e9}tlzgEv0{3j+3w7=+uV4E2Y&{N;)I?qh}N0-09>334&c`I6U@0*R6 zn@>Yu+2v1VA_`bxTpmbi(ac%j8*9mQLi~W}V=6o_sT$teu*G3sguCnj%b89@Y3-_s z0@wn^1CE;+e9|fw>EC4w$Bs&NCyHp5m;;__2F8ItM{Zo9(RNOw)xp;y7Qsw%B3+eW z%>*r76CzEFM;P*I;v?t6C_~Vy5zgX9R0k~scZ{UKAtYVpKn=OqKRdj<`2p#1eL{l& z)kX2?qG~%)s#Xk?p+KWpLg7&oX&fBhjI;f}Q!<$_NXcuuK6BQrd}pb+LmeltAiGf5 z#%d=icExC+fS32U=694)Q0SI$Q^{MUJp*vL6bbRB4%cHAru38RdqHa2`!K;Zjo&a> z=YIRuh%W!2xu~$+InHCkUN3tjD-}OyB0w5KF^}MWHF(rE!40Zt6P4Xiv3w5B{f_IW zkYr?S=@nM|h&SiIBRbf$h+}xTw;OY>6yKJvpl$Tpz_7|27}^&#x^#l7H;$>`ul8(x zG2@K`MfSQ%K6_LeDZ3&`m(x(FFV_95Dnlpeulro82jN|XI4B6s&Py=V3e~hLp(zR$ zpCsP5etl{z)m#ck*9RrxscNtZr zDUuqikO~l5of&1hSK8*1o2q}8I2c<6g5;YWijNvWScQ5A>bMo8f_R;l1#1n>%W5&+ zrDY8En6F5+1wllSY)MK5g24GK8ZRvg)!C#%opKY_0#3y|{Q6@^pZ`MAG5nr{(F= z7s}Hlux2k;7KuI*?lJ&*0T(6Wl=!wP3w)Iof-KEC>$L~CVRHu;MAPHI1za0+DSTol z0l;v9(VC<=fvsE;Nnp)ZDs({w>L%5*-TPqCC6abnnGR@HR0tqXSC?S1mVogoB}N=6QDzM`}(&CF*N{<*PXvpDj>8P zL}sfZJT9F8v8IeqE5W!fGipeDuV4I#v$$EmzpxBAMqX6?y|tfgp+vMIpu~6&z;Zc? zrVdZBpg zAnT|Q2jp=BLj?%DuwRin{8-vrcmdU#P*>X)p#W$quvzZ8i&oj3H}*HaVJdjXxXM~o zD3q%Aas8ei^!f~&plp(tuc3;U#j_M^DIesN#Y7=}$fB01i=WxsRqG%7=Z_plr2-?o z->j^lTx_P(_=$Z(^V8l2N1tm2W88LKn5SY82Z-I63Fi1p!)0#8!oaN2-g#ZsB*G~u z4(q9KM4EW(d7tquL&Gb{OH%d%1YuHL@?hyqeYv-{RrhZn*(n4*ID7`8!N<^V`!qde z8^?_VE3?t5k!DDo8;p^U`t=+xN&C%2C-Mw9zl+dDIxEV=jhlkv#ie_qC zWT|d$&H-(->P1Od;4>73=nBMj${~EugovgcBc{}RlCxyJ z-uE0Mu83$!DM{io$ES)v^1NKcWjZQ%sQNOqQCQ~9*@xL9B7mc)%=|(rDl;Sx#^JKE z+wRPJnD0}?=`%U)Tj$+NNlbc)BKj>`Uq~DD)q1|qW&7YGFKT7B2KzTJ{Pi)B0EO-B zyv4S;q!aZSyaS}%jEBvbtYbkLVySMC>tI01V|7?9L>rzr>t7sk=#s!Yl(B)K0gSoS z%=@?UcN%{<$Mw(Q#7&SOlP=c?6RFo~>|q!<>Z`;DS8;42jEG%9+nl=y(WOqA4I>X8 zMQ)Wn^PooFqon%ahhB+2nMgoi2T?a^?S=n%FGcl_-(8#nqG45({rg#-ou?P?iPL@? zH-#`QGaswxQPR^Pl~UE~fDmjmMVG(GN)zlFO1F0|l)cz@@u>1+raOsVWZ2)3NCs*G z+Bz+eBX7C_KgVp)oh^Ym+62ziEBEu|$fDngc@TAl%?Dt9tf)7$x-_7juh>$2t_#Z5 z7GOnQ$WI40b9!7Ot2a5@Iat=##*503Wg@eE#J^*tiTS&S3Fcg6p@nMh7I2=M)N&F$ z2vWH|Azams$}#|nE3vozXxsg!lB}?4q@Fa{iMG;9AtnR&CkInB#=Gw_F(^OZoQBRg zze;te^#$pSpSa7^4*kqs24yL3r<6N)5mRLRz~^FHrhqK>NANj#&wc5ztolF zh-&osG-uP)tMKINW{q zLfuWTWr8bsWp<}xDZ{;L)*+ApbU_eSG+U8mjh#MDvA7r@VC2$RgnWd4`Q?!I=LuH`~zB zoMKi;U2Bw}NMdx{1~e^^$E)4T&lA%@6q`&J)ls#9_2Sr2$eDL|iR<%=OQZyC+_NL3TaEUOcIWOg6 zSxK=b*(8v3*#e`=i!D2%V;YHfX;`1Y#5udEVj!gq z?Y#WCrt!>6+MXW65KQuYsR?sf_8mlaT=@Pl57!SMcq zZYuiVh#*L!1Uu1gh6Wy(eqeh>nlnHs4z73q;ip0`Z<`(AU6c2vG_3QVZqCsAr z{7w-IGKzzDQX>u4iW2R!1*s)hbzTv5YD%cXw*+X$w-JsdfJ2$HvFB0kK;yt{rU-fu z@DIy`od-4v^iC4 z%d~avpDG29oj}NPg<>4GIfh{Q$=iHAG9Jad-3)yhe(4qZA4XHj22L4Gib>ATL$J{7|sFGa12SDE64skUwBraS;$ zZ8|KO<^rg#o|7#2M%^e%h#Eg%N&(Z7un4q~@I~=Sm>nsJzOH6LPTJGvU*Vd7pQnt_ zO=&h=fnQreKL+r+(}_c^VRcL{#*dlRt(!@P&n$#*MWeye=+8=3Yb&9Mczs=j+Zs{meRg@ahSZ(#H@ertk|QxrWaU~8TnLY(+v+-BOq7iy!EiybYPsDC zW9CWgnu={}EMe|Zo<-Q}(ODs{R{om%GVZ}TJ<-duBYc;U!w4%FUcG|MBUFpDnJ+!n#Hta z8wx;E2#+haIyyZ4eRO^JdvZE)xX3eM@i&*F3p)K_xquVOF!DvHIV4iVWP;k?0NcF$ zIC>9!@b)?$!!z#als7k{!*@u037}x1%?QKc=#tze=ID{oi3u3E^6zss?TG5z*)MT3 zOA4cU6o@51Rr4kxp5Y0xPuIi27t_X(OxY=YDzXSe7EPg0w9EhJWZLfcpX5^8Bz!vz zxPAd+i>(3>ExqdEqW?k2nfqu!^x&oid*`Ay_oM-ZY5O3c0 zZm%$h9o4;zVrZt=5{BB)Yeco@N#_~Ie!y&=Ack7RcO@`XokQOldg$A3k zL;5THs&!}Y;uR7*k`KZ9cF1nsmD>5OYyfO!0Zkm>>^2b)>fr-16vo3LW~0806(?VtTCl{Y$epM$+llXKGoPtCv8nzx~1(9Y=d<|Oi(yp-dsqVL~wD_M9ityc{qEh z^!2{PTERrZhIy{=6y}U-v45a{sE}$Ph@DPDUr2E_W+-iz<;8Krs`A|W@RRLy2YrHl zK0|Rk?F5M;t6X7wW^6}gJ`k{xt!>3tFvwS0W;I}6M+^-FUli23hQ%w zzm^^Z3iZ!0R5jJ3rD7gScYrEl)?NLzpTG+x(E)z*7Xl;Y*N&vb_li3zCa^EbdT&Ak zwuIrVp3HHo#xOs?ME`gxeWDvxkq){27e}X&W92?E~@kVOL>vXP_!GFV2EFN^OX(ip!`-tN@pQKGc3p4pBz@dZ^-GSi1mYrK{vXHvgE46+1a9Ll zOiMe;wI#Qae%og#R(J^gS_Pi{$h~Og?$$~a&@>&-r=V~!p{dc{e1EEy!RZ9o>RUm zj7B^DC{oSZP9RouUulp1sgPeTQo+Gpf0p@Z$rYKx)+9I`B3Y2%nU>P%EHx=R$_2%= z;LH@xtYa=W#VkWF>A0th%-oGgatcg1=uBbEz<1T&Cp-aAXnHhsxg)*8PkpX&v8-w} ztsaBlLOlQynytbrL>4HGu^2c?Awkr`QfL)#xhPO()x-rYuPm1!*@3L2jK~*{<5ntF zQoCX&RTJT1vnOeOjl#lLjtnYgD59Lh`0x^ymQrmo3)~|_nVyw5N+!}|I4@M|&g)az zMcz0r;UvpO$JF&j4E^{+&R`LgYporb;WC|iTX1JtSnPK4>gKI^ev zpD1*J%W4`4Og{Qz<{%Sn;HWp%=+CTlkdiB}mW7 zI1(BVS)PRNvjiNgRKqD{)ao!>M!Oyn5&VDYT);7Y!vsh~wi>rRO7>H|#Ff;L@~nph z5X~r;d?$PqwVGtaK=WxEDx!79|F+LR_fI1PyhA9cucYT=J`@(W2KTDar^LC^N z+&={`ifz)31Ew2|5riR+GrCKaL#OG_PbSz>ac})G7h3Bn)-b!OyXllr3kZh93WiCU zkD_R2gT3UId9D@HhfRJgS9s%Sp9I5(P}<0oMsI!7^mdJ96(#!H!nMk@{w0Y;2w#?> z#}dS?wYI+S$q1T(+JBc|;wjZ@r$~=vjO|c|POwagB?)@x)Y2<*H&=jg{^&cbg^QpJj*O%*abICBQ2)9B}gzd}$rH!sHV7s|*+=E%AljI0{ z%F76n3g+9n68cKPIo!&$nv`q-5=xAMukB1!gU-Pu2?XOs1e&l|{QJ;l#Gf=_;*Q7! z^E#$pLNa@W9B+X-Lg6`Bds1!Tulpuh@ZjEJ>~1bKxv*t%9_QuJ+9AP}}(8*y>uvvIY#&|%UHBDG36@?b3WvgeLy)s5Wshy9Frq!Axl9>QdtG4gk+ zQym3I2PTlAM3;W?opRsQmDZhFbSl+n?$oC%Lhq2;b*1dAi=%hs!TkQQXn|>CQELjG zJ)&|9tr<}V8XqWsbj__Q!RI(~+U)*-jF!zj&7C1~*-ZZoMpna$L?w>=8LNk-Hs4*! zi$WxkbwtLD!x9q(Y+5_=+b$n2N@6AfyQpc=Gj$A&o8z&1cQ9C zJoi8$f}db;o$$cy&!zYcarGMR2VRkVyImUI6!~56>Bmd*0|UC+SLKG@%)^g8pY9*E z3yAZ(PC7K`gbaJM2D{_TT8AV=R*0zJUS4GzyV%ZnDCC1Ds2R!%%u)s7RKIrYay&AY zvA585(BzdkXa7TlqfBUq&G~qlnAjUHww^rR-Albad?x@D!7e?IXPcvqXU~4v?9J@q z^Zy-m>EW$htA;K@`}ysO(gClIU3&VEx!TwcJ~nC2iFCyVD~k;iLhLMR_1imxCq|(n zHV0mVDyyBEs{@u-zmkGob>+oepFe#&8ox!;z|=rGh-qfw=(bUx&sPOP2!cZsplMx1 zX$1PLNR9*HA%#DN)Ff`8SupSMCXn`BWqqI;uP#$)aM(mPTG5_8_{R{yLv@(Pz4_(m z4>F!)g+~RLphz~E>qEZ$gjK1%Hjh;S012xA&D~BYWf!s;{4Gpu1y8Y z3>JrrUvTg1Hj9vgV$$WD0W;--mY@dYV_VLtpm4@F_^eCAYwEl9u=MhFhG$PGYRX)x zv_}7j=(Ka?kE5%1`r9YRXA1t0z#L6Z7A`Mu9OBA}Q9*ONFxYu$DegqLJOPlxQ!UkK z*56pnwhhVbY2p`Z{8S8LNR$jaAZ~#Vz3>0Ne?EJu(4#-Yc5Xgk*h}(rHAx98QQX-I z2OV@x=XN)XzIAS&>x;8XKe=FjZJ&e}(dQaPD#luAHuKx=@%7g8UsP%}oZaRu3Vb;v zT4g-ieSi7%dRHuUw7c=rveiTNWHqr9=sFXx`Si`v30s45Mp+>ni9J{0_@R*3OwbEe z73gp-=uA-}I)uh<43=P$ahZ<7#F79rPQojmMU6WBNb0J+wSJTPUj{DeN2*671XUs9 z{Emcm3d3Dut64z<9d|T3nm|5aOQ@kfA+L&vW{0w(41@*Gtj3e&yyou7;QZZr{NmBB zxAqUjvb^z1(JQD;k?ATsKW&v2#uQaX@%#eZ12;@1&}bSJI0ddGZS>TE1lyLunA* z!_LPM$l_hdInAhy-$TdaDdg__TZ(#2#M;qXf@M}{OHx1FJM1^+3Fa_~*cs!KZ_Ay} z83*A76BF=;JB%MaP=!6Qmg}SMz5|XQ@YOpC19Mp3IGvZpInNGZKRMw-vzim%EEL96 zBwN1BVBaA$VYp8l5rxlH)kHt-QV(ZbK2hxT$!kL7&B1u-H03pMp@&po^k|Qo#GaV5 z0E)2TxU?(@qYNu2_air{(WV-<2xJ8NWUr4X`AoSp?S}YeINPIQeE6GlJ4(`ads`ep z={*d|D-Q<=?y&5rI0Wl1Rvb6%_-s69wPnsWiX*~P1KH`UKGcKjA&{FSons@%9QJuRX;v@w6Y<46-nP+(!_p68iW zHLKBE)lX2ewQZT_({a=HPv5J+cC|NE4=xN&VkD1l-v05Pq+srF)T$N76L}tgP`%hN ze{f5rFy-gtn?rGrd{0tR(TSm+NW>G_*e%k|Fsku)EyBC68muBN-;l1HzTbUG-f28A z4y3KM@v2VhFou8+YNeQ5oR*YRi%M9^>kj2|`ejg%6INmV1}>p`3$@nfmzrpiu&`P> zC?Wr;J3<<%>d8+{BfUj`OP^_{6w9^RQ^9z1V`1y0mQwHVX9`M7mfW{3o2s>=XWAj7 ztut}4AfZ&T&yjrs16vP?6r+ZTQO3SgI||K+&UvQ@xx=>~LobRFXG@)ZSs1K?)_v)| ze7fj;N~)lM$O&nM#36KaFuMp-cEO}H^Yobm)8otbYhs*`M==u8gBbsNt z*Fw=Rr}_DMYkEC_hrP}1=R1_g)Q!|Xce;fi{_ux>)m!Ifn)NJ@crRiJl_DCb>*MDC z{?KdxXu&_Ccv544iW{*J*}X_MsqNI}S8Ia^fsS2W8w>>UKsIt=gm=RCM^f4g3zlOn z{_^ltdPBKu7spp`dLT2$q$C_t6ySejHIy``MrskmL_)?F-;Tl3r=`~Yvtv>G$%j7& z^ON|$FK(;wIH`BAe--&TR%Ycx2SkL?JYN4(R`E>_8}X;mj8q>oEia_J$+t)e1jiB& zXV;e0Usw2UiIWbQc#`>ko5{)pymZaNBO-30L`O1^A)O_KjRlvG+h_65f)p3qeRyS4LS?} z@$}~KQuFuTg!x1%9eaQk`mCLp{jbBf{|!-l=HJZhZohiD`FOPV^6}$)b9TaB&3!ZD z{J|Hmp5No&svY3JA8oz7hp*vq4ytgR&|K_(7$)Eg#kpJZFvLrW-`0AkTyeHcV)k*m zc?40J|AEv_E92SEXEN~LES(j7s_Q}P739p~+*JY%F^5KT&BGq>4no(P54tP4UCOXE zWW(WH@9-diHPt%|e`2~5yCY60bM^FM@fr7wQHOxsSFmy>tu|T2>Gjw~HHt*K#JRe! zSssN$1|5H-b{mInVu^{HeCtzLN244e{bEU4OraDlBw8!4!bWN4`X+xE$tR2q& z?Zx(sCy-Ngy(=S6i{X!5NHkJZ%CJaK^vy6hkRXB@zL_CUiX5qXb2!XT$8$=T($&1i z445M@{Onj=1}m|_jg38)pz+B{muQYm{52$S9eyXFnW0#RW$*dP z(NT*ZGl{RWFEb=xpVC$}s+uKFRwy+->8X2cR!V73fQbRo)&e5^k|_a;-@j3DXsI{n z$A4DnnL-zd7`rBZ?CeJd{KF<3B=Wnkwu@i3x2s1c-nZiStD*r#)1XWVZ@*j-WlcZLbSj;9h8bHFSR)t?*pW&Am zA~F|@Y;qE3gr0^T7nJn@E`QuVB(@PGXzqi2{e*xi07P1XC1mj9j#~Kv2>fkdf-9zlJxncwG=kNH_x{py?XZ8GZExZX{o4V<{AO5 zxoIjW*~*{EI1lZFR#JAP*|#`xwd)D!kl83sCsbI!3W_eb*NyTboNPgnQZ*_nRwmh91dV z_A!=;fY5=81ZJBA&uKsCu#Y-eO4Y^6L9A0gGH};#Ho3nixBB<7-hRU){w&6TI0#r8 zPE<;jQPU;+oMD%$t?&AR@-ik`2vCz&zJ$X*7Ro0*hlnre5seWc|4DB+REGsVnZ7*>tB0RfxO-dY)XPA_%za76&nPh$i0ACAY$^ZZW literal 0 HcmV?d00001 diff --git a/debian/control b/debian/control new file mode 100644 index 0000000000000000000000000000000000000000..50b1fb2a6fb61d7be0671f543669beacbefbd874 GIT binary patch literal 219794 zcmeIbX_wnJwl4f#zXI*+4^@dNyUIh7TIsAC4{@B>v5(8?KKDKAtX>pJNwg@E;ZT!1 z`R(tsF^~X7up|#EiA}G>t|CAX!^X2mY@8-#<^?A#3MW~ROsAn2j7|fu2$T4P1%6m0 zSw4D`g-I3`mnSSqsl<&&uiP*$@PCk4Q=-r|QlBWC__%OdfTc-mU9bQi%&!NgmA z6y{01`t&MHk5`_0ksHt0!4H3DM<+)|hwOjQ#UT3M&Uz2W_r}LmHA?3$bC>?32Mn)? zzvojH-v9Oy3tjxam}WsR$$dvus($4)mSLI)5u<+|J-`oX>e0U~-%i3f$sCY|ho6?I z;|FJ=%j0jy_nrHPtGzYeD2p)4tCx<)NB71@55CTV)b$oe&e7`YSmb#Sr9mdXg6j9i z4?3zjUb0Nxf*oKMkK5`^-7+ei_x^%6czkj+{tol^w>c<+{Vl)$-97vb;_%qt=4IwP zG(G>z$>hCz=B`qSKX(){tqdJy>18obV*bAPv89D{F{@_eXngeT`1r4uj-Owl!#^-g zz;W9&Ps0pb3LRDpavzj&Z+!pw!MFFve*VCDP>)h9voYG$l~xU+9VZX6vmnFNWKoZ7qs8P8NR_upZ%?(QbDx!@0@D?MtxxXZ_q6Nms4$L zH}I7y;3aV4v(P!0sFpm=V*6;)XFda9c62L2}sLRkLQU{TFQRzYIujc5O#E3EEnl^~UqIt_u z&JX|cqZXOUsKr11(6$Z4cFvtBna#p@_NnCOr73OVYA_J{xP11-#2y-IndbIoDzoT; zGmFbYi05tl&YzUIb5!*iu-3x6@FAZ#i&pIjv%1RUP%&_@Q5K?R7kTLQIw)kd8mUGd z8Xk3ldT;~`wO~z2o)hdR*7?nKe811yw9A)8J7>tjFV4xf63Z zgBqD8IoWtFkD&P}ZIVRQR{EYrRHuy=W@rwdshR*_e`}%W)v7HjKJ_lDdE~wEcjNE= zaxJ}r3>;(`EETrSr8B|ETYFB0DYtF37H4ic4~u|mchy3!+RS~?m(gwWbHe5neks>f}%9!x7tlD3r%y|Nna!}gE7PXlgoY3smZ`cN1l zZ0++3kiL9B!D?E_3zfp7Z#n8)KC%dtj+f8F*iX)Dsj#gPvKAI@Z8~bTi(#%J_cAGA z@gjj)s3RoZeaebP-qJ2fM82C^*{Lw-)_sB8^J$nLrFjya1rHzAYd$8M=+S-W;n$OP z>3r#Cq3cg<)4%lnT5!Y$XcrvoT0maVb1OA3b1-$$vo0jps&&Bl^4!(+wFj1dRke6i ztp)@TMctUH_V7B+zl13>kTZjq$a31gz2X2CrEjhgCShC19@v&3&T|9bz&cvzH!hbj zVUfg9Ek9rr6xFt05`VguAg0&rSdJv~AP#e&;%j>ZrM>mDbv@Bqd+$_Sva3Dp?w%#Ub8j;D^&PG#Ng-@ZF z8k9HrG4f8xUfnJ zvZ#BtGJjeNNkqO!k1Wiw7R^2*f@Z-P2*Wz3T5w%?31}i&c(^r&lPSa9FsO;%Z(b>%uS;%r*_!+u7ljXgqTU*C>XrdHaR*WjjCPq zJ_~apR>paz!kRuD$RJBA)?fp83IL`aekA@mlD4-qOkn(Xjo)lJT_>@CEtd z-KA^&@?t`UM{Dsi`i%SRVj0!S(lLw-tv#kn+&^q7%>$251(#wWe2kAR4Q0@ut$g$X zu>%Myuns(r?B)$2XS8;&APaH3B7C*v*08qMWKkD-aMSGPCA*XEX&4LLsIQaDv|fVi%9 z1X8b&gxoK-Hy~stV|5-&=-k6 z@rZi)t7IHP_(@Ae_;*&G0{qe}DM;9~ZmSFIDO6gGj%jP~3fjpLXBTGBj`ITTrwHAF zV^f$5zX2EgSWBA-^+8(*K@#ChpRG|JW?{&evb}F%!QcepC*Er8hv)`8&lAAHpxhJ7G7QVZOry0p9`$FyC_AQkW^upuzWDTT*8aC z$mOa%fe#=Gy@Gu5TDn!A| z^|+C~<+HM0-L=ta0nUK{v)uUy!p?ZS8$_+~(dZvu?mQ2R6E-i3G(Wj}H+Q4l)uPqz zq7@Y^=M?bG=@0au$Fs2D%{|Uw;Gs~tPi_)3KEpJReokPugc>QDL?_SB&&OK7D5`EW zdV@$SUP&t%{YW0%0-*_IhSytz$q-=!?-WAHxNCRaxUxszE_hTK|Er2H(*n(s^B_w- zmWqE7a3EsOR0JC15n1%t1ruRe{O?B(>WIW;P`DI6hC$_{D#A}29XGjl0)<8#`g?Gi z>X>B|Q79B*%x-^}gt41lo=AfEQ^!sH1wV7oEuRUOX%^(UrF7{Qb4!uX@0|(7HbSC7 zPd;Xp=Lq8rGVK$$KfrbBoye*D(2gZ*x~aZvmE(MhvH@5feM3Shu#;c_B9qSW6N2kyr~$ zL^oKP&cnz7<0!&%NhBNUw1=tFsVSCrPkq@MRZQYomoOTQi0CK>%p0IfB$n&6cunQ^ zI!RwsS4c_btmy;JNkUm(!bfpU9XPLw8Maeb#q)3xI zBL#ewLawt*y|#3nh<|ukp95Ddwsvf+gB}F+Z#Lt;EH4*PQI1wfQ-JsNFJM7tCIi=( zXcmM2V8HsbG;+~&qm7DB;^Rvg<9Vc#tqy4!0%++cCpx+pJ7-~5ly2l8CY6}9fw{)# zsrJXeOdK8Y9>!kA;G_a+2r{5d9xCUzu8g#tllj~&v(i`&Ar*zN@f61-C8^25L~2EP zi9S=Q)Ts1lN}$)D-TtuZh|DEP>j1CFKPv%4+(9aU-fRoq(z7I2;-06L5UMWz!M?kJG>!4ly1v{P%8-uWDUl@DLaL3?xfskgU7D+QW zi0NV&Fb)SGE*s5ybEtYenRLHwPQ(*0eFWtQ!yR>zBXGcJ)aeegX4eSKRjX2iv{)n4G)pH!=C^4 z`qeY`6U>wB4PtfC&Ad#>m9^Rg@f^JW;x(H<1;C>5DhdKm*z2c{pD;vja!NFsQGEP_ z{TRVJmg|#D9=8Gxp^7H>cQDe16#TJbXymgi-jztn z`wvLTL0_=UTGv%^7uux(>X#{KBL|#ZGEiHY6QTXLu(faifDoWQ4Bm_Z1F)aJG)8LS zBcd*Q5``)IF)P?}3?j%bS9%7r@`DR}1Vl-ps{C_nNIXRUjJ-;(!YFbHljv>H`V%;9 zL!2vvFE0mj20jK#IQieNUNW3CE9qd_c#J&>l%w9`w2lKK`+MkIf-Ta6Z{_bKuYK!C zjwL?&3&lFT6+8^b#vm^waRtU!a#qZg-DR2_gx@rI4Z5{BjU-HM)ahq$PI*Tw4od+u zRk#l}$MaK;Mp$$i17zLYV(TwqBXtdW1`kYKL{?zwd$XS1==(-L{9I#?xs`=$EJ5F0i_Z~4E?f8 zi&4<2Pl;l}`ZGDbP4(hqr1v{4PT2F`Ukp^ZM;O zAzpKBM~cS`iVw+CkS%<+gwY1_IPoK?#X-s;xgZ}~xDS_luUrcoX_~X6cDpcd#MKXY z>!8L<;q1K9?H4N*V%-F{TAJ(DgOy^d(U*Ta*NrbL?-u&8^3_t^$gom+rkgfbN-uO9 z-%9CKscq;6?^t&qI}STVOzNEdIL#mh#*AWFOBnDgo%;CBCg;B!4HiP*9K{7 z-?{xEpJTt}l}pd?+o42LF7M#;l_pzhv6ZEF^cbeY1>7JL;l7qN+U?W&9(T{US_{V( zH`6%PH+bw*mm5`Yg(haB7fAct>;<_Fh*Tt_w0U+-?~00NT(|3FGTo>r!C8U>a-`bR zDZX_-BfKyhy-_TVH~U1fxWCa0QWM_jorNFZi2DWu#|sZPdttg+{o19m(PvTw&A^Ng z0~?Ko)07^zs*@B#!ZvDJDD;+BY%Z7PMm#fO985PeA@Yj7z^nqJ9*oXpm=Hf{uwzz) za`{IDry{JM9!?j^*?2@J5&t?I{U0tkP2hdWgUjF!j8ADuM!_su8h#D|lXqAi1nmEO z_wB>u@4gu^d{dvs3M7ssO7eIXKIwY33L3hrRr|KPnoi^0HOb~9M=wCUy?dtRXN?y$ zYFO#OTj7ubZtFA9B!vo-^+nWQP)v#w@*^C-zegTBot(`zZ>Jx<#n#=if%HV)W9g;m z&NgA7eyRCrZp^KxbO*AdA}dMh-GuMS{eCjMUOT7jP@yZ!gg? zdR=*nHe>#1BCMn^Kh(l|zu?fPhqQHkz z!=o-5rCVWg`oQ&Ze+l-+4us*GozXewxY!i~_~+qw+(8W6Ah#Y%x4$q9iyVX`+#xV0 zqu`h&qO}puNf8QUJ8W`Ji|JShF-;a2S!~34afwq>Ucy&ZTV`nD+HYODw|+<&fe1J# zK|P?D**`~hSfNfe{F{c3u0mH;-0Ly?;6*WYmN_wXQ7S`+5YSksH>HCTIL(1m;HHqq z*o8l9J8X6PgBjtgjS*Y=_J=CFOLHVo>Ue*c26%{*@vc6;4gsA)2E?D{3)1f?l&GfQ ztX?uvr$fTGzwi;?=}-~cze6v4#CJ@Kz>1Jxf2$39m&pXear20pKFhV~VBMy5hPvT9 zA2EDxXs7k3gFjZ{;;xeiV@(9Wyy(M}6*R8ite^rvElO8C&w8^RYMuRskC=tE^uqQp z@*wIuKzgI$nK9GiRnpzRei=?)lf+4?U`ObtCV#9;DdLqir-%%!0(R(_i&Mr@Dlq6o zo$13FhPJ^YsWp#tZ%7cFV0d!MN@36!UPH4-d>)XX%S9Ngj<|Y#uImXHyZs?a5XAiF z8da(3W74)Y%3p02aDQ}i`$J3zgS(sVz!J+BEbw5dO<_`ejzJq8RUG7otCvV0kY%?U zRqPwp^2zHqkL9&%H;(N+EXv9r)TX_O*uZbU_NV#GInuKscLLL)MYCB4cudyUs*cp#kJ*kKv~_+{BOOJN z0;B!?Gt;f~d|gdLJ4tkny79ggM{u>Z0F}NkGm*E;e5}(ieZnlQqP&Ej(1^RsKYy#5g>tbIkfHV(Xj;c1dSG9yMsZyXu-}JrHHW&BOZo z@yOsxt=ubXu|5n6rKUq6BW@Tr2L;{urDp#=;H9`*BF}>yjuW2m96tbsDb;=+hiMuV z`Jv5f%#RCfrZY>*gSx1_EUn%7pX6b-(ny1PD?$M*|Hb_zbV-B-55;FKudGiqvKcYO z6q2UTCJo52&r=-R%^VwQwYM0Z7e{4OY!!lFDg?fRU?v2aAF7Cc8Ya0I^r8NYq1uQ- z@WB;OYq^7DXM;6#6eUgy8xI9nv>oaGsIYSt&p}+@X0FitVE?=wU5%1!VmzvyMT)9s zcoN1V{hEuFW814$Rt|0JBca*UdWP*zoJIO5Y8c?hLxiGg3kz$Ezuk6$;)4yk0Rr5ee7IgM>{4$Yu((Oh0;bF7$|rDbqLf3!GDH5Vv!TE7AEtt z3WJ}69dV3ZpBd?7woe{?z28;|bHqi?>ZG-f-XvCu9bywhrB|^x{7O+BH(P%;RZyQ( z;ec+FX^ov`SY3>gCeyKOC_Og5a!BdUE7RPZ%p#tMLNm!cAitO`+{jwL-7lxAZ>IOv z{FI-I-@uGbS=#E1D7(wR^nPy6!Q}4yB24U~c7o_hyRZduN8bl)sciZSdLTyI_Gz?# z)BDUAtb$34b|i~U2B@~o%8uNK0e+q>v{(Aqr|l`Cn}MCJ#+@2GXxrRLfQ3BDfOB3v z`Iwn@UWW>~pXAO#*aGfJI^N9YSPxfk_}YHxl`XwkU+g4O+#7+2!$(k$;TDTi^Z3EFwk<>mZTB^@hCCjEiaR*N`1;#$P z=7jCLJ~GXZJmbEpd(Fi3Ix>EgY}qbVYBc}lHr-}g%lZHxH1jI%F3>l+x;fwzrGGZS z-yYR{ZjI*45vd8$99S%XthQezPw`+?*ai%pg}3n0w7gdu!zUAW<>uH(bEp&ZFWYnP zBOpU2+i%IVFO%#)dZ6l1LjL*&aP9=Iex*-=2UAdABVxL?@wEeNL#F9{jZ+F-~`8@$hu3aT@8te?YmQ+n39LISK`ZS;uK#*OiU6xh<9EFmLq?>K`T!X zgtLKA2&)(d%H-{4qH#ms+O06sTVk4S86CcZT;o%>j0(p4&mH`~K7EFp1}*38jYV0J zw$@wZ2KV32YRSX?#^`sMf!>lGHrI>c^a~?Gr@(#?Iy=V^x;d7OZaZkZkp%Z*;It2A z;HCQAtD1+?>?4;{7a0YK2x?nB7SitZ=kJ(6E}E%N2wIf9m1-8~Ua4o34L8PtQ%u|b zkQFU*gQlR1;ZhctUztfdBb^y}PIqvOyU!ov~#bO#$$y;bTFI_D*Sv5;#oDI{UMKf5lkX! zFbWY0_Wa$iU*F}F(!H_^7bk;V97UYDT}#{K3pc%fzw&OgU(oISSwJz@|Dw4zSFn4D z@^ay(WwuxAb1M71KZ~PgdA*h4xfxbA%s%=2bg@7wW;bU^vT=MN8q~duo4cF4-sCl;|4$}EB}eN?>FZf-((6|X|+qLHD6j?b>ImWrFW=$;1L z8A2AxU6zCC7BG3VTNtO;xz4Si8~9r8aZ?#KbKEF})*9FCRqKd*?5Z@)xUG)v@tq{e zLiK~cSXI^(CCvy~6M%TQkK4GNXe)d5CvWa;nzrQ9v?n)c21;uxgm@2`hZ2kapM zn;ulDg3P2z=2VFj$ww#1XNB!65({AiKc*X>9Z079kopO~<6V6I2Xk}3;kIt)_up_o zUKaW@$m#DOvadYG&5QgFJc`(tVm-Vu{4R9EPVwWL7f>YWN+i(~zx=64AZ;?R&$_ z9Jncw$|+aKsV-N|nunLQrJ3UX-~cBh7rVff0(Qz%YtWT2KdFwXef3fcw!|J2JAk{E zIDHZsFI_r=PkvCggq1CXU$nXvgsw{RqSB|f^`sC6o8?TjG9?>T28892J7*>jlO)RYn%E^{x5`pJ3xQ z@~)ji4m-nMtZzIj)JR(|5;$!wTz41I7dnz2SaKd{pA|LQ_nHwbZDM}4{=<$Mc2tc9 z>u##|dDosg4<`SCTdKy;VNVTvN@uAyvCf}(&Kwt>_~v%0lJIB|a;rz!R(Qa6*og7j zrlQldvv=8+wjG05Sx}Ti+TuVapS+41GkNCEr~mcx>0@@vZwu#PfK9P;H$+UmpHD?U zrRJ6(4LSrVQs786lNBq`Ow9~ee$26uI!6iD-57U&XD+hAA=b{lJftpbjAH6gnBMDW@Pw zbR*Lpq=!8X94JBs-l zj9#Az_6tU9l7)WszVP#Aj!+{gmj~T)2oMH_!o6-A@@dW)y zXKk&3*Wz9!`9btl{={2Y`V-P-bF06W_gt`R_CGw$By)MJdv%L_mBw((yzPHANI|YV z9HAv1HVw025@x>PacFk|P<`nG;6_9TCtQtH6T$Z~297Rc<5osXHocbCOoV!hdm(rw z1fI}EZ{b;3Trw4@-N>eC@}b>|fl|B+w#k-($k2G*7z5Ky_0F`6dHl8un!JPq0kJs5 zL-`NHMEMW?V=N8-iNfjm4?iIfwMxkeE6R%hqUoxrd=n~+`9$#Qsw2{_g2un1MXz>b z>&9AV3yBY)J*F=z4Uq;Zp_~8w26uYTvH*-q7UC!DP*wAk5evJ^PA@sR)YZNkW4p40 zU!J`~>8n%rqlZAi9GBe4A!tA%phe<=_@x4=6E3YVAtYgK@CVdqbo8!dI)+$(d?MCK z4c~Zc^al5{;xe6+Doozx^M6dMR7-YNGxg8#g{J)dc~PV%ckiB`pO3XB#xSnk)qm%< z@m3j(zNn!e$hVqsjlgi^y3c z&AFiN5j&WaIW9!XaiAw-5ajbDcB4bO4=BPt>-;iV+yFy<7qUSUNxS|Th1&Y0Ib@aT zHV7$B4fhsar~%-?5{6~6K;wWD^FgX!0mlxG?WFjb4hmtnia`LnU};tzqw3^&p|~%p ze(=~tZG712<_H75%d|oWW`ufTeZ^0_5_ao?o#R3*>LXMkL1i428LfVfTSw7P*w+<2 zR>Q@7uUM+#GO{k}0ZrDSv;_fNXd<=sYv@RIGV^)^B@u3}n&gHp4Gub)gdH?W*5lgr z+a%f*jViKGs%C_)&b5iVT6ofR1Sa#_oQa$QaeWFGuB5@C?G=OU^#vgpojeAEC_gAO zNz9i7Y1pZ#o=o}}NS+;#+YdyEdx=O$kdJrmIy3C6Wsrf=Aqdbto**IG&qxSE-KQ&+ zxIL&IU!9j-pB;EkHNVIlT6K&t+zBBCnxApP1kqv=Xdd*nU=t|kJWN5+XkLWm-3czj z94;6Vs?3?>4q9!`=L~m*1sT#o@~wg1gZ#vSIjlp2TB~mha+qM#uTa}A>F<^Cr)^8s zW8h>h?@m|u4j7(yecCnaTgpCO9j=qL?Ez~-gcMmpK9xnUYp$MVG7F68~s z-DwcvC@aMb1WR1Hx4puh5*6wws{zErA7_x>xm^zW2`MaO{3dY zi^Wdw;&$b=UX%tW;$duU%&YqigLln>ILIJM{em^*ZnDbyNfiB(Q24bVVM15ftKje6 zv27_?lDJx$kAsMlcy>@v&==9gjZxDhdRigr% zc~L0wPV6O;?`w&ULeaqAf+g-3E{7iFr0_xCL3iYCfZ~>; zuV?}Pof4r@g^C8jvhPR&6AB?jaOkcvh5Udr+%gOK0Eu?Es)znlR1(D>3H3>rMR`mS z6g*P$a_Iir=)l->*a8qY3~5Rf8q)PmxQ#mK!ub>cMATrU!dx#2L z$s-L9%$zHg_>pfYz8zRlcw_Wegc?@!gyB)53djO=stGJz<{C3|SL{4qP2Yf7NvjBR_32Vj2r3D|CIut5=G#=`dW8$N=n!rb+SmEPx6MS4E z=?fWUaL-^#H&IJ+-)nRfW1^imVB>&|;2K{X8?zn9Mv)+Hp5!s)xMi4yIwX;M0Sba6 zioy6NVbNB;aJ{^>Ajb`ibo3hW@$QxD>!xoQFLiLc5xJED6cp>OWC_eerVmo#vhh&w zx{1ryY66#yVuj1uCb*no6?z8Cd`JT-4-zYkh-7~I;;5W&5tT{rKgLm~M`J&yi#|;i zU!;N6iZ$qI99r2eou5n?C)SIDEl#%XRDgd5*(1 z)Ecj>$$`wEwPdgCOT2DfxQC?wWu@OkZ>=(kl z)Gv?}gBn0`0Ld+Z6H-mekXZTnTYe2{WA-9E)vq6gNbR11)7KEI&DA^O^p&cQu)dWHs#R?&3n;>Kv z%_yF|UjpP~HL3w02YlQXKE^wakHR}N3F4U<<8TwsoJnlK%D4?HjfZxuv{n;XX%s80 zj5onbOdaCMdZlVV7GoN4a=^)L;pDD6*>!-q5p1+Lx+jJ=T4~zGL%r*UquYE}uO_h3 zXhmV;CXQ}ILKg^|?UNN!3~4~d0U5W2jN5c{@1vh)VsT?n3}3TCM&qFlc_uPis|jQ@ ziWM?$;>LcAXszDq*J4ZqHV)XhC2aKE9oMdPfVl~&(R151YEM5MsE+lR5B07a*l4fD zvC%A+*ocK%-#_yNxmqAH_DXD&V;Zn=z{YK1;~+P7A9?gFa-(MmcT#RNAKJ0ecvr6` zu+b=1*tm(@_~a_UnY%tI)O!dg{kc8{LxSwADPXes4TY3^>DC9!XYnk8J@Q|;fV}9NU9vH@0YC=;-5!8m4c?n> z8znIA%HqJ`MLJMQOXbS*E&#nUyg+(Q1)ye)8bGmhn*(T$n^EU3@}JWs5`78>QYfkq zaDdVQO1A~2$smY!Mh69nMGDogva57-EGMqMW+8hW0#|+8+t86F*h65s|i3g zzN-K=+yqd=xOZn8e-dLFKy?7sZGq~Lc(>bVIkhC-of_G36>u64b84L2X^T{n=?UX3H8SuBwe z3$?x){@e|sp547IhBP4KfQ;KhMt@MmI~DPn->!(y{1#V^`OuDx#=Ckofs976LPmcB zWIXkff)3^UYt}!AY>aKd$^k34g_Xmh?{58iW;ygdYdiF9KGZ?blp>9H^=bkujbeqB z8y)(_jbC2h?r(T52Q{GMfR5Wj$6XH!60YxA`98aOxA)8vAT%?gc%&uLe5ga9iIm2> zdNqNRMzKQ5O#+0Tm+##Sj-y_AzSW=xq#TfPYe+fVw0(^rSz4~zo|VRh*cCt;Pj%>P zAf&aPgh->j!pKeT+kRdGBjdhdBp=fNkpo0-2_omao~PFR22ZW09fBuij;>{)&^HK+j{2Xx#PI_|oYMu(W22!xzl95Zvnd!o?Mc&K;XFgu#> z>eU1~8m%aF+{7{Sa~aRvtZ(pGjcUNh0Ux)7kKqsw*)2VWmT<_>h*^~QXg<_|&%j4} zHI9#FvBXC#)cW?u7qOqjLEbljtcNuq3NsT~zU8V~IVX{{y@ z(kNC4xk=W@7hZsLx_-}2(^R7x@NvM$ZQ zeB2~+Ahzi&H+Z9cSOqrDo(MzdIABNl3X z?fMrNDaV7nUzsD-paygt&~Z!XxERo}8yy!GbX>HdqxsN^j`nIC9nE5ij##Mm(eZhZ zWV61Bj%rW?Iu7W#Ep%KAi7Gl1RV)_mi7FP0mP8fiLpwSe@9NbAIvT|a9Tyv*&e8E9WtL4mHwtpcjr2qew?8by+&g(1 zq(SWGe~#V;Ub0-$&nHYA!(PmnL6+>m0h-0q0-MV=*fbvMcxX7Z7uIS5HjQEho6AjL zlV-19s7WIlKyv`it%2qcCw`5#y|e_1FP26)xAfFBo_1iP@wQ%1f}>Ghq2nge;=h*J z(v9Eu>mZF9)ButLNNx)x<1I>-A0tcZ=y4O#;)~cKJjQLpqw!Ghx+y$bs|kEGiWNM@ zn+T6?9J{{TFY!@~X~4z-8@Gjx$$*XB_Q=G7jY%6e8V~K*Xssr&(I{5fm~4WLNfz`h z%;#4=qyZTRWZV)mMneQ-w`Lt#A|N9pOi}99=0hto+N*J7G>auNVxiXeW4{cGd5Oek zJwwNOSOY>12)QkUJR4-kPT4U!YnL6PvliLWd}v2V<6XU)KuDulA>`R62R2MZsL`BmBh28cV`T%Q4RPw z;N!ONao4Zu5)qKg=yG}U`NNl%E4!9@I44tBX*{%JrL~&CN~2g|cV>68|rI z<-@Klv&`jM3kgi;+I|#o`uCF z%ge9`STT1ChUaIYALJvv7zb{~{47bGFlJehM$q;V?O!0)KVz>#4}t#4v^aQs$i(LW zaQN@t9AA~aVO|m!ZW!li90$qiP(gTwjK4{YewaOtM@)`sz{vq8w}g}NWboK@dTioJ zyT>M;w0LaHhdSsPR!Ms`j*Vuq#6~RC`c}!`lI%R7!`c6uB#WgR^$H}LgB#FtK+A2R z<*wh}wM$ZEY`MWJZo9$Dd}v2b<6XU)Ku)7rA?GGHc>NZnbnLTVIe*lk2BaL2a$88b z>$XZAJ8t5HO>D7G#)c75+9%D2de=?4(s);|CeYC+R_M5iee!8pc>PLh!ACUU;(&|W z!o|VI-Rdp!Y=X1PL0 zEZ0U(9{7~A_+NQa%#*%JoZ8R^z#IT`OMsbpgFC#_9iDjY?(oFZq+u0SX+E@qrM()* zO0!r(B^GLZq^;n6Txn(yk>1d1B1C=}hqT>07$`;~W+1~g#kfT3H$(A32Viyc?J z1xU`yth~c?2)PNL4xg`foa99<%J|B2eGCR#cGl#8xl%)7CV#$xV*aL#-@B83o#ByV z8o+Y^&uxL{5Np}(2p&cZRclBxlA&p`MkDJ6=zCqHAykEhVVn_or z4#>DIWE?W~UW1I5jJ;`F#$NNG4tb{dXuPXe6Ub;3D`eaxWAB?JE6Q2fw^KUxum*%2 z5OQk>=}fk1zuZT^PFi4&EXp<&wJF=p=Q<2F(6Z5jUQ+^Qqeg|9c)p3UUBTwRCYgH` z_AVz|4WRV^2Phq&bW2d04Y8Kp!e(X(wanTgEzO5IC>ro-ug0;{ESA8Dg<3y$=xu@< z7yFjpR}E@F#{nI;g^uNpyLWVmxe1p}R{Kg)vF0~G>R2E zmYbksndiL&M=_=W8wYIM7B-%55gV&hjMn3ghZ^AQ^1;UJ+=7_r+5l86dS*P-q0mH3 zYc+wGMzKQ7^9>O5*AUT6=Wg7$dupp;4Y)br=9X|X54VV$`)Ik$!*+zs!xn@zA6gO8 zUX3H9Su7C}3$?z+eHzAdyXMx$6^<0jXQokq!-+pp|GVn_or4#>DIWE{dJuR%sjxMXg`G)haP`A~;EL$9`1 z6Ub;Zt&nk(a7luZpm&a%YE%P04*0k&eB5R{P-TteDc2r0Y?7Lmy32;h+!7s>w}l3o z5AA?yysK9efN2yfz}zGp=rqVCeRJK&F%4ijfaSKpGT)*JQi0_|=jeD(kutX^-MI$! z%4L%q4|NDMMN4Znfs{tELdtv-gXB4)CHrNLq!A4$IiTdWP;xkjbB)SvIfs)Qhh>z? zZ9KH&qP3d9MWa~Z;wI;CPLop0(%3J6G=?@H<$#piLdvr(%9DHP(mu0DkY{ZYr18*> zl-6njDUD)j*s?w z0wB$Dg^*aT^`m}%Ptzd#S03W>#lBf3&7lo|IRNIC0JCs+T$mIo)e3hR-F!;5!fh8U z3%5nEG#^@l(_W3^rdcdu6N|P!YQA%qVZUzo<|7&~a=^%KVdQ>X>0JcT4y2tdELVCL z#=YB8x-=i!G17QfuO=|kC{`G`$(7#kFmcyi9B^`5IJwQEH~Sd*g6vlBF zWq>pu+L6&(O(3IDtdMb&lQ!?lY|*#qA33H08wYIM7B&tiZAv$C&Vnq*jfj69j=DpE z3d>2G!Z;42kkWW)M@nlofs{tELds1}+Puq?c-A)=l7=+krw* zhCf9jqxsN^jP`0A8O>sej994k1ATrEXY(@al?_r1X+XvS8MlRuLrS!3kkOJ7tu*qM zDP%Mr+L6&(O(3IDtdMb&lxV*%GB@m9;-6|%13nJ;xGj9V+Hq&L4l*|p?=+$T7YAJ25-y(YdWg6VE;oUTXO^(= zGb46e%8lkjz3T=p+N*I~G>auJVxiX8sQ(f4?G6S$q5&5NT-+8e4%aVq>(ghJ>le=2 zu3s=8+Hui%SFa{;(I{59xXJYk{|JL3c9(s-UArFEfRF=1ZV4eTc0D{?$B&zk94{=< z;1@>7wv-&rhkDly$R>l7L()3b1O!6*5oj`QbQsof4%`&KADFxWJzT9S*B4q4FkVdPVCj;4KO;u z==NZ=*yh!-dkUk4<(^nTSz+AgD&@?T=Up&rwxHKkFlyGQVH8WZzRam`rpR1BED!+d z_ABjA%lHN$9e{LOKw1u-?{YQ^@*+QB^D@rUAc`D6^f=OFm(EpbkwnWjG1PddL!zOl zUs@~eN2-ek#H=m(AN(%bCd?@YGCzi}33g?Z%WZIDK;*Y>VMvp@s* z{(C-v2jio^GVkbc1Gst?&mtTX{1<#LS?IYjqdtw;%W#qfucy<{3s{&lmrYAx^E7a2 zL41~ok~B;F5^#MM7MCn9v0$v2y9L8@KH3ppi~~1gewL(87_&?a1uIvuX_B#5p_e6j zGA$0?9y0McKn?zTH^)~~*IT%=fO$z=AlfoV;{op zM=8wH^M3Y#yq>rPZdKo3s*?ThCZ=75D^EWf*9T&{3cUH=0@M@geJ3ILyNXJF&rs>9 z8`IJFePwl```x4z>?nit_2|4FVAAs-TkbJ`6W#A7rK?>fB|S>L2c-1$3Wv5Ab9aAn zNe-ZsoPuaa$tln;E9n6_J?$o$-wbmAS3CP)D41mM1nsf# zr0fK89Ni?gtD0TVGtKTa-EWCp_P?8$id_XO{Z7^%FurGbk?^D0`^x*&0J_Pk+*NYY zU1&WZr^jyoM=9*i`)C&z-R~r&X}F`LG}X_Q^njFp3gf*tJjwod6H~UU#H6Rx>;o}n zLA=N2@Sk}1J4tD_tEPfk-%JH=6nb<4>b^=$&*cC*$!Wf;Y;N8&HurNF`{CZw67PLC zA?>Q@J@1+5{d0*drrACNQ#FE4f(rc|m6<}nUq;Lqv7g{z&^}XCJ%nzO+Er^)*fVR> z3j{drH9d*`cM{Y4T@6fm-?PA!UtAc%DGA2D3gT)2o#eDw?kKxkEc?aoew`z#cW-Hl z_r9Bul3gXFq-TVbWWgSr2Y%(aP<(bAt`6F ztDfGpK;QZ$fY+0c&+A*AW_$qV6oA8HrqbfM9BM^qjK$PHEa$ zbW$th#DN~4J82f4xrKhA8=kI^T#D2W?$UqsfVtUH{2fH}^L)zYY3j1@{^((KjeDv*tEyFbDf1wHb883-{@Ozq^2U+T=f01{SrKyJ+{BKmq?|*lX z|8>Fg)XhBc_oD~MD<`w)-Tq+Yx4VNBcKMvfTBp3L)7GhZxIcP~FoFe=;MGrzWW;*b zx!-?#&9X8s!ezjM7+LX>n5T_%9Hf`y)5$acAv`$9S(zg#-Q<#`u>XwO*bQO(kb9Yo;I-iv( zbCDb`W)$#_jCaV}N4f7PC!R=S_oARwc|n%5%cP_%dQor@PNLuri;{B(T5C2BT)+86 zkwg!jTPAtIkT%doCn#Os!K5r$oD>-O63O;_RwRe?@&s2A$20VTM$X(6IqyA}vZ&TA z=j%hW_#VTJ}}$= z9Lbs1`wrK7ic9EyelUgZK&nE1m+s06NXO!;gFtZN%_QJ)B?yAHWfS+51uHdGDexj! zJG3o`q$mG?T8DZ2Q_mRRREtMU{aH&tzIh}N3pp@tO>yn34$ZeV7_hnI>_9PcGB}hu z*%gRQllBfa52H6%o*}H`Qi1}?G*zpRgK8Tl6j&1`Nm7thpQcor7v*$%Xy)dpZI+f9 zOiO1y1(GH%tY6oE0W+SqGo)%C8fMUnD4PLk4uJy(FN8zGNVs7pTJxYUVM}|p zr&(W4B8}?qpXMBx6|b8Cs=e0uQStiGZ|c$+xXIpg6C*T8k^G8-Q@g|~iG0vfUON== z8&RQhDsZfVltlklE=BS(8g54oa+JH`(f9#(R}j!t`>?feQ!-`nJpO|2aG#}ua- zj@!bxlhPx-fwUD6jhbRzprBb-=+$SMQ{He|s)-B9oGdtE<>XHuZi&m)6tVpxPJ=dS zwJW7kc(P$jrl;D#NesoKQN1hqG;mK6oY?Sq!>`XB^lGMz`PmD?Ho0vVbrVw7aJqBI zc|dq_$c+O+s@y${)D#`EVTf*4yNRfc#?U~XO7!kpn|aMerXXG>iV$W{flgkb%3k0^Q+Dd2MiVLUrU^3K>O`Uz)$5SGK3aaFzV1p)han_Y z06?@NL&-SBh#philWDlD#MSd~5yFHC5jLL(S#91RX|-i3sxUew$80vZNzOAp%+mEpZ@CZ+(L_}w|X2^+}mCBzql)D zfK{Wx6}WOZVwl>HEVP6>a*;*AnUrA!z$lA31R{ zD?^Q<^a|!E9Qe%mHOsd@kO1c(1hB<-Mu2lINv}b$T9#sviSG}(KU#M+GS5lfpbSgO{H|pG)3Z)@>?qoXsJgeDc}pmIt&iv=Ph^S!XpQf2=GHXsw8fNv>aHLg4t(XE_Gr>^pc6xE^M0sBetYs zIz(jx-TOdmVk8X)#)%MHQ~qgEW9vIBGMHhEG`LRlFvOE2o+2o}z}W}=Q>)W%VG}JC zKkHs#2RJD4{P!2!D(J=qOqeep&vPvM|ObU6kiC(4U(SVo-G zNm85#3a=`QAU~i(CTyIo@q( z;0#2W5xZ_$>sb}1h9_l4M{{5h#kra=22B9+d8|!wp0Htw zXl@-|(y~ilfhqW$&^wct_EX)H>NAv2LmBEl3K)$B2pqx!K;KRf$TUyFUz|loU(t)-8!i z!m*<$L|inVA`&wHi6!yze|}Ib4@vc!lpq_><3St*)HZD~^$c{a?Y2X{h@eo1L{CVe zbC*s{0H6#!C2HPiqy*7$dZy&QI zRZ{UTRgWq3F~9zS%B5prS3KJxR;O07yY z)g@4<;vLk7jV&$?q^T2_IFJdKY+gc&Cb9qY>96#UMXsiEjXSL~AGCKI5`ReWEg=Jp zkc<4_rBMm~n%{MO-vO`VVDeIv=x~%2_9fx`73;!vBKXY!(zU_?i@1O~1agkY>5KjFp zNgXgis7EwT{v~3YuR>0{xUH^ETt?~24)0YCR1(e!lHR8$|k>D4SoRu}`gcPDK z5~-!Rq!%85s`CL5+26TnaBqB{M|>XZeg(!zZxB>8 zPO=$E8+^Rn%TmY8)B@3ryo= z&i;x{UfkuL$RFRl0N9DJD5#bwBC0Z3UYf;z>eUYKcQhVZs2=ln;}+Bo)AUGr0zhTO@I z6>{4QIZSaxAE{ihF{2R!OT`ypK zYm&yktWb6>Ew(|{8f34YMXa6p+GjL6t|@;8vsvIG`15Fd&*76=A;&C+8Li!2x&eqk zfA{Ox>^{Yn!j8A|DE_=yNL7n#Sbl~82y@?&-P51Jt}_w_P`p9oBRLa4-hKYt>sQYx z*C?{tKte(cM3f*RVh-OTw0fS_r=)GdctxGMTQOxHNxUK;OaP?zR9L8M2?r!;QYFaF zg5|YC=k^E8&l<4;CS`*7?#uN;z9e~M@ukL;O%Qd6Otmhvm#=?)ns~@?2%HoqM7>3> z!%(xLNE;N?ARU}R95`orLC5b%N8&m80zyenWJZj%gz188n1ax*1JW0Im$@HWr>eHe zu4PfN#hcRTK1l}Jq$_+|Iabi-d2ZLFL5cSpN>!Wc)lyA2@o9Y$kZLH}It5)%lQtIW zB6%2zgNKX*Y{j;vmMchy9Z(`QSfVe*Dc_o$8z*)ZCsI?m0y~;d;5?Yrd%3}sAR=k3 zrA=rv_a{|`4Ul3!ghi{`ZxD*ApLcWb83sH}wG^WfImt)|$b(2CAQKLpEVr877So3- zQ@^LX5yp`Ojx8bgpbO1ez!w?DwDf~X=VgbURAI8e1?OLIQxV zPoLc-5C$hh&_pRTXq=h@%ErEpRC9mgInXu=M9$=YXtEnY&PEix69J}DN<8?1?9gk* zw;RI3`bb+FPU`97f$raq9~`zz0i69gK5`hter5vh8?gkZ|Me2?>c>yu-l9rE(yckE zVgI`!FB;IW(buP0s;;&jOm4l+QP3uW44W zU4Fs8b2p+K|5a2*@u@02skXMQxK!Gld(?F# z5GxuUK7BT*bw+i#dqoEAb3YjMf&Xr}I2t3%bp|Qg;o(5Gd08flfWGDsM%7conP9cY znihgMmS@Kh3sR+sj(tfOK&uSTArCy} zV47ayD6v%UTgN%7t{D){5SY&cp6~lCU}vy;VYXl%M}s0@Ex=6*oP%@e_vyPgu zN`)>+*9o9Q@Q5OwJkAl2O99n5KY^NWIK>GAAN*#x76MUDJP0^I7J__&od>Oezt5c-GDOPa#do*_KSfyjB+Pse9AYf|##s|$;_Dr2QSCS)M*mYy zZOxtEWuV-){!mF$gpiyQw%SEHWcHurr0>4OZuYcOUazXEY2l%6CKzoht+$7!FE62R zf{n#7-~KhzP&qSpnR;6H8Q+S0SSyYtlM`^f;6W0ACKZ!N`2UJdWjuX+_thn7f=|@k z)aOKYoJ;WAcp%A2Zm|;C#K(14jC_JDOfh`C=l_E6`_*mpb_l##c048vwic{HFKaF^I z{gegF8b83E@`xu<yQaeHW(R84kw3p1sHM|Zu|9@h1fd>Ep literal 0 HcmV?d00001 diff --git a/debian/control.evolution.in b/debian/control.evolution.in new file mode 100644 index 00000000000..8b387cad9ef --- /dev/null +++ b/debian/control.evolution.in @@ -0,0 +1,17 @@ +Package: libreoffice-evolution +Architecture: %OOO_BASE_ARCHS% +Section: gnome +Depends: libreoffice-base, + libreoffice-common (>= 1:7.0.0~alpha~), + libreoffice-core (= ${binary:Version}), + ${libebook-dep}, + ${misc:Depends}, + ${shlibs:Depends} +Recommends: evolution +Description: office productivity suite -- Evolution addressbook support + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package allows LibreOffice to access Evolution address books. + You need to install evolution separately. + diff --git a/debian/control.firebird.in b/debian/control.firebird.in new file mode 100644 index 00000000000..89cc8b331c0 --- /dev/null +++ b/debian/control.firebird.in @@ -0,0 +1,12 @@ +Package: libreoffice-sdbc-firebird +Depends: libreoffice-core-nogui | libreoffice-core, ${shlibs:Depends}, ${misc:Depends}, ${firebird-engine-depends} +Architecture: %OOO_FIREBIRD_ARCHS% +Section: database +Enhances: libreoffice-base-drivers +Description: Firebird SDBC driver for LibreOffice + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + The Firebird SDBC Driver allows one to use the Firebird database from + LibreOffice without any wrapper layer such as ODBC or JDBC. + diff --git a/debian/control.fonts.in b/debian/control.fonts.in new file mode 100644 index 00000000000..f52165d404c --- /dev/null +++ b/debian/control.fonts.in @@ -0,0 +1,13 @@ +Package: fonts-opensymbol +Section: fonts +Architecture: all +Multi-Arch: foreign +Depends: ${misc:Depends} +Recommends: fontconfig +Replaces: ttf-opensymbol +Provides: ttf-opensymbol +Description: OpenSymbol TrueType font + This package contains the OpenSymbol TrueType font included in + LibreOffice. This font contains symbols (like fonts as Wingdings(tm)), + bullets (needed for bullets in LibreOffice) and non-latin character + diff --git a/debian/control.gtk3.in b/debian/control.gtk3.in new file mode 100644 index 00000000000..6dd26771630 --- /dev/null +++ b/debian/control.gtk3.in @@ -0,0 +1,49 @@ +Package: libreoffice-gtk3 +Architecture: %OOO_ARCHS% +Depends: libreoffice-core (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Suggests: libreofficekit-data +Recommends: gstreamer1.0-gtk3 +Section: gnome +Enhances: libreoffice +Description: office productivity suite -- GTK+ 3 integration + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the Gtk plugin for drawing LibreOffices widgets + with Gtk+ 3 and Gtk/GNOMEish print dialog when running under GNOME. + +Package: gir1.2-lokdocview-0.1 +Architecture: %OOO_ARCHS% +Section: introspection +Depends: ${gir:Depends}, ${misc:Depends}, liblibreofficekitgtk (= ${binary:Version}) +Description: GTK3 widget wrapping LibreOffice functionality - introspection + LOKDocView is the GTK3 widget that wraps the libreoffice functionality and + exposes a simple API for applications to use this widget. + . + This package contains the Introspection data. + +Package: liblibreofficekitgtk +Section: gnome +Architecture: %OOO_ARCHS% +Depends: ${shlibs:Depends}, ${misc:Depends}, libreofficekit-data +Replaces: libreoffice-gtk3 (<< 1:5.2.0~) +Breaks: libreoffice-gtk3 (<< 1:5.2.0~) +Recommends: libreoffice-gtk3 +Description: GTK3 widget wrapping LibreOffice functionality + This package contains a (basic) GTK+ document viewer widget (used + by e.g. LOKDocView) + +Package: libreofficekit-data +Architecture: all +Section: web +Depends: ${misc:Depends} +Recommends: gir1.2-lokdocview-0.1 +Description: common data for LOKDocView + LOKDocView is the GTK3 widget that wraps the libreoffice functionality and + exposes a simple API for applications to use this widget. + . + This package contains architecture-independent data (e.g. the selection + handlers). + diff --git a/debian/control.help.in b/debian/control.help.in new file mode 100644 index 00000000000..38403bcc786 --- /dev/null +++ b/debian/control.help.in @@ -0,0 +1,17 @@ +Package: libreoffice-help-@LCODE@ +Architecture: all +Section: doc +Recommends: libreoffice-core (>> ${base-version}) +Depends: libreoffice-l10n-@LCODE@, + libreoffice-common (>= 1:6.1.0~), + ${help-depends}, + ${misc:Depends} +Provides: libreoffice-help (= ${help-l10n-virtual-version}) +Replaces: libreoffice-help-common (<< 1:6.4.1~rc1) +Description: office productivity suite -- @LNAME@ help + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the help of LibreOffice in + @LNAME@. + diff --git a/debian/control.in b/debian/control.in new file mode 100644 index 00000000000..7016fa26f25 --- /dev/null +++ b/debian/control.in @@ -0,0 +1,935 @@ +Source: libreoffice +Section: editors +Priority: optional +Maintainer: Debian LibreOffice Maintainers +Uploaders: Rene Engelhard , Chris Halls +Build-Depends: %BUILD_DEPS%, +Build-Depends-Indep: %BUILD_DEPS_INDEP% +Build-Conflicts: nvidia-glx-dev, + nvidia-glx-legacy-dev, + amd-libopencl1, + nvidia-libopencl1 +Standards-Version: 4.0.1 +Vcs-Git: https://salsa.debian.org/libreoffice-team/libreoffice/libreoffice.git +Vcs-Browser: https://salsa.debian.org/libreoffice-team/libreoffice/libreoffice +Bugs: @BUGS@ +Homepage: http://www.libreoffice.org + +Package: libreoffice +Architecture: %OOO_ARCHS% +Section: metapackages +Depends: libreoffice-base%OOO_NO_BASE_ARCHS%, + libreoffice-calc, + libreoffice-core (= ${binary:Version}), + libreoffice-draw, + libreoffice-impress, + libreoffice-math, + libreoffice-report-builder-bin%OOO_NO_REPORTBUILDER_ARCHS%, + libreoffice-writer, + ${misc:Depends}, + ${pyuno-depends} +Recommends: ${java-common-depends}, + fonts-sil-gentium-basic, + fonts-crosextra-caladea, + fonts-crosextra-carlito, + fonts-dejavu, + fonts-liberation, + fonts-liberation2, + fonts-linuxlibertine, + fonts-noto-core, + fonts-noto-extra, + fonts-noto-mono, + fonts-noto-ui-core, + libreoffice-script-provider-bsh, + libreoffice-script-provider-js, + libreoffice-script-provider-python, + libreoffice-nlpsolver, + libreoffice-report-builder%OOO_NO_REPORTBUILDER_ARCHS%, + libreoffice-wiki-publisher, + libreoffice-sdbc-mysql, + libreoffice-sdbc-postgresql +Suggests: cups-bsd, + ghostscript, + hunspell-dictionary, + hyphen-hyphenation-patterns, + firefox-esr | thunderbird | firefox, + imagemagick | graphicsmagick-imagemagick-compat, + libgl1, + libreoffice-grammarcheck, + libreoffice-help (= ${help-l10n-virtual-version}), + libreoffice-l10n (= ${help-l10n-virtual-version}), + ${libsane-suggests}, + libxrender1, + myspell-dictionary, + mythes-thesaurus, + openclipart2-libreoffice | openclipart-libreoffice, + pstoedit, + unixodbc, + gnupg, + gpa, + ${gstreamer-plugins-suggests}, + ${java-runtime-depends}, + ${ooo-officebean-dep}, + libreoffice-librelogo, + %LO-DESKTOP-INTEGRATION% +Conflicts: libreoffice-dev (<= 1:5.0.3~rc1-2), libreoffice-dev-doc (<= 1:5.0.3~rc1-2) +Description: office productivity suite (metapackage) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This metapackage installs all components of libreoffice: + * libreoffice-writer: Word processor + * libreoffice-calc: Spreadsheet + * libreoffice-impress: Presentation + * libreoffice-draw: Drawing + * libreoffice-base: Database + * libreoffice-math: Equation editor + It also recommends additional packages (e.g. fonts) in order to match an + upstream LibreOffice install as closely as possible. + . + You can extend the functionality of LibreOffice by installing these + packages: + * hunspell-*/myspell-*: Hunspell/Myspell dictionaries + for use with LibreOffice + * libreoffice-l10n-*: UI interface translation + * libreoffice-help-*: User help + * mythes-*: Thesauri for the use with LibreOffice + * hyphen-*: Hyphenation patterns for LibreOffice + * libreoffice-gtk(2|3): Gtk UI Plugin, GNOME File Picker support + * libreoffice-gnome: GIO backend + * unixodbc: ODBC database support + * cups-bsd: Allows LibreOffice to detect your CUPS printer queues + automatically + * libsane: Use your sane-supported scanner with LibreOffice + * libxrender1: Speed up display by using Xrender library + * libgl1: OpenGL support + * openclipart-libreoffice: Open Clip Art Gallery with LibreOffice index + files + * firefox-esr | thunderbird | firefox: + Mozilla profile with Certificates needed for XML Security... + * openjdk-11-jre | openjdk-8-jre | java8-runtime: + Java Runtime Environment for use with LibreOffice + * pstoedit / imagemagick / ghostscript: helper tools for EPS + * gstreamer0.10-plugins-*: GStreamer plugins for use with LibreOffices + media backend + * libpaper-utils: papersize detection support via paperconf + +Package: libreoffice-nogui +Architecture: %OOO_NOGUI_ARCHS% +Section: metapackages +Depends: libreoffice-base-nogui%OOO_NO_BASE_ARCHS%, + libreoffice-calc-nogui, + libreoffice-core-nogui (= ${binary:Version}), + libreoffice-draw-nogui, + libreoffice-impress-nogui, + libreoffice-math-nogui, + libreoffice-report-builder-bin-nogui%OOO_NO_REPORTBUILDER_ARCHS%, + libreoffice-writer-nogui, + ${misc:Depends}, + ${pyuno-depends} +Recommends: ${java-common-depends}, + libreoffice-script-provider-bsh, + libreoffice-script-provider-js, + libreoffice-script-provider-python, + libreoffice-sdbc-mysql, + libreoffice-sdbc-postgresql +Suggests: ghostscript, + hunspell-dictionary, + hyphen-hyphenation-patterns, + imagemagick | graphicsmagick-imagemagick-compat, + libreoffice-grammarcheck, + myspell-dictionary, + mythes-thesaurus, + pstoedit, + unixodbc, + gnupg, + gpa, + ${java-runtime-depends} +Description: office productivity suite (metapackage, no GUI) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This metapackage installs all components of libreoffice: + * libreoffice-writer: Word processor + * libreoffice-calc: Spreadsheet + * libreoffice-impress: Presentation + * libreoffice-draw: Drawing + * libreoffice-base: Database + * libreoffice-math: Equation editor + . + WITHOUT GUI SUPPORT. + . + This package is intended mostly for scripting needs. + +Package: libreoffice-l10n-za +Section: metapackages +Architecture: all +Depends: libreoffice-l10n-af, + libreoffice-l10n-en-za, + libreoffice-l10n-nr, + libreoffice-l10n-nso, + libreoffice-l10n-ss, + libreoffice-l10n-st, + libreoffice-l10n-tn, + libreoffice-l10n-ts, + libreoffice-l10n-ve, + libreoffice-l10n-xh, + libreoffice-l10n-zu, + ${misc:Depends} +Description: office productivity suite -- South African language packages + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package is a metapackage installing l10n packages for all 11 South + African languages. + +Package: libreoffice-l10n-in +Section: metapackages +Architecture: all +Depends: libreoffice-l10n-as, + libreoffice-l10n-bn, + libreoffice-l10n-gu, + libreoffice-l10n-hi, + libreoffice-l10n-kn, + libreoffice-l10n-ml, + libreoffice-l10n-mr, + libreoffice-l10n-ne, + libreoffice-l10n-or, + libreoffice-l10n-pa-in, + libreoffice-l10n-ta, + libreoffice-l10n-te, + ${misc:Depends} +Recommends: fonts-indic +Description: office productivity suite -- Indic language packages + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package is a metapackage installing l10n packages for all available + indic languages. + +Package: libreoffice-core +Architecture: %OOO_ARCHS% +Depends: fontconfig, + fonts-opensymbol, + libreoffice-common (>> ${base-version}), + ure (>= 1:7.0.0~), + ${misc:Depends}, + ${shlibs:Depends} +Recommends: libpaper-utils, ${gstreamer-plugins-suggests} +Breaks: libreoffice-base (<< ${binary:Version}), + libreoffice-calc (<< ${binary:Version}), + libreoffice-dev (<< ${binary:Version}), + libreoffice-draw (<< ${binary:Version}), + libreoffice-evolution (<< ${binary:Version}), + libreoffice-gnome (<< ${binary:Version}), + libreoffice-gtk2 (<< ${binary:Version}), + libreoffice-gtk3 (<< ${binary:Version}), + libreoffice-impress (<< ${binary:Version}), + libreoffice-qt5 (<< ${binary:Version}), + libreoffice-kde4 (<< ${binary:Version}), + libreoffice-kde5 (<< ${binary:Version}), + libreoffice-kf5 (<< ${binary:Version}), + libreoffice-officebean (<< ${binary:Version}), + libreoffice-writer (<< ${binary:Version}), + browser-plugin-libreoffice, + libreoffice-pdfimport (<< 1:5.4~), + libreoffice-common (<< 1:5.4.1), + libreoffice-avmedia-backend-gstreamer (<< ${binary:Version}) +Conflicts: libreoffice-filter-binfilter, libreoffice-avmedia-backend-vlc, libreoffice-mysql-connector (<< 1:6.2.0~), libreoffice-core-nogui +# for bullseye, copied from libreoffice-common, see #985297 + , + libreoffice-base (<< 1:7.0.0~alpha~), + libreoffice-calc (<< 1:7.0.0~alpha~), + libreoffice-draw (<< 1:7.0.0~alpha~), + libreoffice-impress (<< 1:7.0.0~alpha~), + libreoffice-math (<< 1:7.0.0~alpha~), + libreoffice-report-builder (<< 1:7.0.0~alpha~), + libreoffice-writer (<< 1:7.0.0~alpha~), +Replaces: libreoffice-pdfimport (<< 1:5.4~), libreoffice-common (<< 1:6.3.0~rc1~), libreoffice-avmedia-backend-gstreamer, libreoffice-core-nogui +Description: office productivity suite -- arch-dependent files + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the architecture-dependent core files of + LibreOffice. See the libreoffice package for more information. + +Package: libreoffice-core-nogui +Architecture: %OOO_NOGUI_ARCHS% +Depends: fontconfig, + fonts-opensymbol, + libreoffice-common (>> ${base-version}), + ure (>= 1:7.0.0~), + ${misc:Depends}, + ${shlibs:Depends} +Recommends: libpaper-utils +Breaks: libreoffice-base (<< ${binary:Version}), + libreoffice-calc, + libreoffice-dev (<< ${binary:Version}), + libreoffice-draw (<< ${binary:Version}), + libreoffice-evolution (<< ${binary:Version}), + libreoffice-gnome (<< ${binary:Version}), + libreoffice-gtk2, + libreoffice-gtk3, + libreoffice-impress (<< ${binary:Version}), + libreoffice-qt5, + libreoffice-kde4, + libreoffice-kde5, + libreoffice-kf5, + libreoffice-officebean (<< ${binary:Version}), + libreoffice-writer (<< ${binary:Version}), + browser-plugin-libreoffice, + libreoffice-pdfimport (<< 1:5.4~), + libreoffice-common (<< 1:5.4.1), + libreoffice-avmedia-backend-gstreamer (<< ${binary:Version}) +Conflicts: libreoffice-filter-binfilter, libreoffice-avmedia-backend-vlc, libreoffice-mysql-connector (<< 1:6.2.0~), libreoffice-core +Provides: libreoffice-bundled +Replaces: libreoffice-pdfimport (<< 1:5.4~), libreoffice-common (<< 1:6.3.0~rc1~), libreoffice-avmedia-backend-gstreamer, libreoffice-core +Description: office productivity suite -- arch-dependent files (no GUI variant) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the architecture-dependent core files of + LibreOffice without GUI support for server-based or commandline usage of + LibreOffice. + +Package: libreoffice-common +Architecture: all +Depends: libreoffice-style-colibre, ure, ${numbertext-data-recommends}, ${misc:Depends} +Suggests: libreoffice-style, +Recommends: ${pyuno-depends}, ${textcat-data-recommends}, xdg-utils, fonts-liberation2 | ttf-mscorefonts-installer +Conflicts: openoffice.org-unbundled, + broffice, + libreoffice-filter-mobiledev, + libreoffice-l10n-4.3, + libreoffice-l10n-4.4, + libreoffice-wiki-publisher (<< 1.2.0+LibO5.4.0~rc2), + libreoffice-base (<< 1:7.0.0~alpha~), + libreoffice-base-nogui (<< 1:7.0.0~alpha~), + libreoffice-calc (<< 1:7.0.0~alpha~), + libreoffice-calc-nogui (<< 1:7.0.0~alpha~), + libreoffice-draw (<< 1:7.0.0~alpha~), + libreoffice-draw-nogui (<< 1:7.0.0~alpha~), + libreoffice-evolution (<< 1:7.0.0~alpha~), + libreoffice-gnome (<< 1:7.0.0~alpha~), + libreoffice-impress (<< 1:7.0.0~alpha~), + libreoffice-impress-nogui (<< 1:7.0.0~alpha~), + libreoffice-l10n (<< 7.0), + libreoffice-librelogo (<< 1:7.0.0~alpha~), + libreoffice-math (<< 1:7.0.0~alpha~), + libreoffice-math-nogui (<< 1:7.0.0~alpha~), + libreoffice-sdbc-postgresql (<< 1:7.0.0~alpha~), + python3-uno (<< 1:7.0.0~alpha~), + libreoffice-report-builder (<< 1:7.0.0~alpha~), + libreoffice-writer (<< 1:7.0.0~alpha~), + libreoffice-writer-nogui (<< 1:7.0.0~alpha~) +Provides: libreoffice-l10n-en-us +Breaks: libreoffice-core (<< 1:${oover}~), + libreoffice-core (<< 1:6.4.2~rc1), + libreoffice-help-5.2, + libreoffice-help (<< 5.4), + libreoffice-l10n (<< 7.0), + libreoffice-librelogo (<< 1:7.0.0~alpha), + libreoffice-sdbc-postgresql (<< 1:7.0.0~alpha), + libreoffice-report-builder (<< 1:7.0.0~alpha), + libreoffice-evolution (<< 1:7.0.0~alpha), + libreoffice-gnome (<< 1:7.0.0~alpha), + python3-uno (<< 1:7.0.0~alpha), + libreoffice-core (>= 1:${next-oover}~), + libreoffice-style-andromeda (<< 1:${oover}~), + libreoffice-style-crystal (<< 1:${oover}~), + libreoffice-style-crystal (>= 1:${next-oover}~), + libreoffice-style-galaxy (<< 1:${oover}~), + libreoffice-style-galaxy (>= 1:${next-oover}~), + libreoffice-style-hicontrast (<< 1:${oover}~), + libreoffice-style-hicontrast (>= 1:${next-oover}~), + libreoffice-style-tango, + libreoffice-writer2latex (<< 1.0.2-9), + libreoffice-writer2xhtml (<< 1.0.2-9), + libreoffice-base (<< 1:6.4.0~beta1-2~), + openclipart-libreoffice (<= 1:0.18+dfsg-17) +Replaces: libreoffice-base (<< 1:6.4.0~beta1-2~), + libreoffice-pdfimport (<< 1:5.4~), + openclipart-libreoffice (<= 1:0.18+dfsg-17) +Description: office productivity suite -- arch-independent files + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the architecture-independent files of + LibreOffice. + +Package: libreoffice-java-common +Architecture: all +Depends: libreoffice-common, liblibreoffice-java, libjuh-java, libridl-java, libjurt-java, libunoil-java, libunoloader-java, ${java:Depends}, ${misc:Depends} +Breaks: libunoil-java (<< 1:6.4.0~rc1-6) +Replaces: libunoil-java (<< 1:6.4.0~rc1-6) +Description: office productivity suite -- arch-independent Java support files + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the architecture-independent files of + the Java support for LibreOffice (Java classes, scripts, config snippets). + +Package: libreoffice-help-common +Architecture: all +Depends: libreoffice-common, ${help-common-depends}, ${misc:Depends} +Breaks: libreoffice-common (<< 1:6.1.0~alpha1-1) +Replaces: libreoffice-common (<< 1:6.1.0~alpha1-1) +Description: office productivity suite -- common files for LibreOffice help + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the common files (e.g. language-independent, media) files + for the LibreOffice Help. + +Package: libreoffice-writer +Architecture: %OOO_ARCHS% +Depends: libreoffice-base-core (= ${binary:Version})%OOO_NO_BASE_ARCHS%, + libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Recommends: libreoffice-math, +Suggests: fonts-crosextra-caladea, + fonts-crosextra-carlito, + libreoffice-base, + ${java-common-depends}, + ${java-runtime-depends} +Replaces: libreoffice-common (<< 1:6.4.2~rc1~) +Breaks: libreoffice-common (<< 1:6.4.2~rc1~) +Description: office productivity suite -- word processor + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the wordprocessor component for LibreOffice. + +Package: libreoffice-writer-nogui +Architecture: %OOO_NOGUI_ARCHS% +Depends: libreoffice-base-core (= ${binary:Version})%OOO_NO_BASE_ARCHS%, + libreoffice-core-nogui (= ${binary:Version}) | libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Recommends: libreoffice-math-nogui, +Suggests: fonts-crosextra-caladea, + fonts-crosextra-carlito, + libreoffice-base, + ${java-common-depends}, + ${java-runtime-depends} +Replaces: libreoffice-common (<< 1:6.4.2~rc1~), libreoffice-writer +Breaks: libreoffice-common (<< 1:6.4.2~rc1~) +Conflicts: libreoffice-writer +Description: office productivity suite -- word processor (no GUI variant) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the wordprocessor component for LibreOffice. + +Package: libreoffice-calc +Architecture: %OOO_ARCHS% +Depends: libreoffice-base-core (= ${binary:Version})%OOO_NO_BASE_ARCHS%, + libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${lpsolve-dep}, + ${misc:Depends}, + ${shlibs:Depends} +Suggests: ocl-icd-libopencl1 | mesa-opencl-icd | beignet-opencl-icd +Replaces: libreoffice-common (<< 1:6.4.2~rc1~) +Breaks: libreoffice-common (<< 1:6.4.2~rc1~) +Description: office productivity suite -- spreadsheet + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the spreadsheet component for LibreOffice. + +Package: libreoffice-calc-nogui +Architecture: %OOO_NOGUI_ARCHS% +Depends: libreoffice-base-core (= ${binary:Version})%OOO_NO_BASE_ARCHS%, + libreoffice-core-nogui (= ${binary:Version}) | libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${lpsolve-dep}, + ${misc:Depends}, + ${shlibs:Depends} +Replaces: libreoffice-common (<< 1:6.4.2~rc1~), libreoffice-calc +Breaks: libreoffice-common (<< 1:6.4.2~rc1~) +Conflicts: libreoffice-calc +Description: office productivity suite -- spreadsheet (no GUI variant) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the spreadsheet component for LibreOffice + for use with libreoffice-core-nogui. + +Package: libreoffice-impress +Architecture: %OOO_ARCHS% +Depends: libreoffice-core (= ${binary:Version}), + libreoffice-draw (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Replaces: libreoffice-common (<< 1:6.4.2~rc1~), libreoffice-ogltrans (<< 1:6.1.4-2~) +Conflicts: libreoffice-ogltrans (<< 1:6.1.4-2~) +Provides: libreoffice-ogltrans +Breaks: libreoffice-common (<< 1:6.4.2~rc1~) +Description: office productivity suite -- presentation + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the presentation component for LibreOffice. + +Package: libreoffice-impress-nogui +Architecture: %OOO_NOGUI_ARCHS% +Depends: libreoffice-core-nogui (= ${binary:Version}) | libreoffice-core (= ${binary:Version}), + libreoffice-draw-nogui (= ${binary:Version}) | libreoffice-draw (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Replaces: libreoffice-common (<< 1:6.4.2~rc1~), libreoffice-impress +Conflicts: libreoffice-ogltrans (<< 1:6.1.4-2~), libreoffice-impress +Breaks: libreoffice-common (<< 1:6.4.2~rc1~) +Description: office productivity suite -- presentation (no GUI variant) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the presentation component for LibreOffice. + +Package: libreoffice-draw +Architecture: %OOO_ARCHS% +Depends: libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Replaces: libreoffice-core (<< 1:6.4.1~rc1-3), libreoffice-impress (<< 1:5.2.0-2), libreoffice-common (<< 1:6.4.2~rc1~) +Breaks: libreoffice-core (<< 1:6.4.1~rc1-3), libreoffice-impress (<< 1:5.2.0-2), libreoffice-common (<< 1:6.4.2~rc1~) +Description: office productivity suite -- drawing + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the drawing component for LibreOffice. + +Package: libreoffice-draw-nogui +Architecture: %OOO_NOGUI_ARCHS% +Depends: libreoffice-core-nogui (= ${binary:Version}) | libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Replaces: libreoffice-impress (<< 1:5.2.0-2), libreoffice-common (<< 1:6.4.2~rc1~), libreoffice-draw +Breaks: libreoffice-impress (<< 1:5.2.0-2), libreoffice-common (<< 1:6.4.2~rc1~) +Conflicts: libreoffice-draw +Description: office productivity suite -- drawing (no GUI variant) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the drawing component for LibreOffice. + +Package: libreoffice-math +Architecture: %OOO_ARCHS% +Depends: fonts-opensymbol (>= 2:102.11), + libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Replaces: libreoffice-common (<< 1:6.4.2~rc1~) +Breaks: libreoffice-common (<< 1:6.4.2~rc1~) +Description: office productivity suite -- equation editor + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the equation editor component for LibreOffice. + +Package: libreoffice-math-nogui +Architecture: %OOO_NOGUI_ARCHS% +Depends: fonts-opensymbol (>= 2:102.11), + libreoffice-core-nogui (= ${binary:Version}) | libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Replaces: libreoffice-common (<< 1:6.4.2~rc1~), libreoffice-math +Conflicts: libreoffice-common (<< 1:6.4.2~rc1~), libreoffice-math +Description: office productivity suite -- equation editor (no GUI variant) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the equation editor component for LibreOffice. + +Package: libreoffice-base-core +Architecture: %OOO_BASE_ARCHS% +Depends: libreoffice-core-nogui (= ${binary:Version}) | libreoffice-core (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Suggests: libreoffice-base +Replaces: libreoffice-base-drivers (<< 1:6.1.1~rc1-2) +Description: office productivity suite -- shared library + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains common libraries of LibreOffice Base used by + Base, Writer and Calc. + . + If you need full Base functionality (or actual database drivers), please + install libreoffice-base (and/or libreoffice-base-drivers and/o + libreoffice-sdbc-*). + +Package: libreoffice-base +Architecture: %OOO_BASE_ARCHS% +Section: database +Pre-Depends: dpkg (>= 1.19.1) +Depends: libreoffice-base-core (= ${binary:Version}), + libreoffice-base-drivers (= ${binary:Version}), + libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Suggests: libreoffice-report-builder, + unixodbc, + python3-uno +Recommends: libreoffice-writer, ${java-common-depends}, ${java-runtime-depends} +Replaces: libreoffice-common (<< 1:6.4.2~rc1~) +Breaks: libreoffice-common (<< 1:6.4.2~rc1~) +Description: office productivity suite -- database + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the database component for LibreOffice. + +Package: libreoffice-base-nogui +Architecture: %OOO_NOGUI_ARCHS% +Section: database +Depends: libreoffice-base-core (= ${binary:Version}), + libreoffice-base-drivers (= ${binary:Version}), + libreoffice-core-nogui (= ${binary:Version}) | libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Suggests: libreoffice-report-builder, + unixodbc, + python3-uno +Recommends: libreoffice-writer, ${java-common-depends}, ${java-runtime-depends} +Replaces: libreoffice-common (<< 1:6.4.2~rc1~), libreoffice-base +Breaks: libreoffice-common (<< 1:6.4.2~rc1~) +Conflicts: libreoffice-base +Description: office productivity suite -- database (no GUI variant) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the database component for LibreOffice. + +Package: libreoffice-style-breeze +Architecture: all +Enhances: libreoffice-core +Depends: libreoffice-style-colibre, ${misc:Depends} +Suggests: breeze-icon-theme +Provides: libreoffice-style +Recommends: libreoffice-common +Description: office productivity suite -- Breeze symbol style + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the "breeze" symbol style, default style for KDE 5. + +Package: libreoffice-style-colibre +Architecture: all +Enhances: libreoffice-core +Depends: ${misc:Depends} +Provides: libreoffice-style +Recommends: libreoffice-common +Description: office productivity suite -- colibre symbol style + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the "colibre" symbol style - a icon theme + which follow Microsoft(R) Offices color scheme. + +Package: libreoffice-style-sifr +Architecture: all +Enhances: libreoffice-core +Depends: libreoffice-style-breeze, ${misc:Depends} +Provides: libreoffice-style, libreoffice-style-hicontrast +Replaces: libreoffice-style-hicontrast +Conflicts: libreoffice-style-hicontrast +Recommends: libreoffice-common +Description: office productivity suite -- Sifr symbol style + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the "sifr" symbol style (an adaption of the Gnome + symbolic theme), needs to be manually enabled in the LibreOffice option + menu. + +Package: libreoffice-style-elementary +Architecture: all +Depends: libreoffice-style-colibre, ${misc:Depends} +Enhances: libreoffice-core +Provides: libreoffice-style +Recommends: libreoffice-common +Description: office productivity suite -- Elementary symbol style + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the "elementary" symbol style, default style + for GTK+/Gnome. + +Package: libreoffice-style-karasa-jaga +Architecture: all +Depends: ${misc:Depends} +Enhances: libreoffice-core +Provides: libreoffice-style +Recommends: libreoffice-common +Description: office productivity suite -- Karasa Jaga symbol style + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the "karasa_jaga" symbol style. + +Package: libreoffice-style-sukapura +Architecture: all +Depends: ${misc:Depends} +Enhances: libreoffice-core +Provides: libreoffice-style +Recommends: libreoffice-common +Description: office productivity suite -- Sukapura symbol style + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the "sukapura" symbol style. + +Package: libreoffice-gnome +Architecture: %OOO_ARCHS% +Depends: libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${shlibs:Depends} +Recommends: ${gnome-gtk-recommends}, libreoffice-style-elementary +Suggests: libreoffice-evolution, seahorse +Section: gnome +Enhances: libreoffice +Provides: libreoffice-gtk-gnome +Replaces: libreoffice-gtk (<< 1:5.0.0~rc2-1) +Description: office productivity suite -- GNOME integration + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the GIO support. + . + You can extend the functionality of this by installing these packages: + . + * libreoffice-evolution: Evolution addressbook support + * evolution + +Package: python3-uno +Section: python +Architecture: %OOO_ARCHS% +Enhances: libreoffice +Depends: libreoffice-core-nogui (= ${binary:Version}) | libreoffice-core (= ${binary:Version}), + libreoffice-common (>= 1:7.0.0~alpha~), + ${misc:Depends}, + ${python3:Depends}, + ${shlibs:Depends} +Conflicts: python-uno +Replaces: libreoffice-core (= 1:4.3.0~beta1-1), libreoffice-common (<< 1:4.4.0~beta2) +Build-Profiles: +Description: Python-UNO bridge + The Python-UNO bridge allows use of the standard LibreOffice API + with the Python scripting language. It additionally allows + others to develop UNO components in Python, thus Python UNO components + may be run within the LibreOffice process and can be called from C++ + or the built in StarBasic scripting language. +Homepage: http://udk.openoffice.org/python/python-bridge.html + +Package: libreoffice-script-provider-python +Architecture: all +Section: python +Depends: libreoffice-common, + libreoffice-core-nogui | libreoffice-core, + ${misc:Depends}, + ${python3:Depends}, + ${pyuno-depends} +Build-Profiles: +Description: Python script support provider for LibreOffice scripting framework + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + The Scripting Framework allows LibreOffice users to write and run macros + in multiple languages including LibreOffice Basic, Python, Java, BeanShell + and JavaScript. These macros can then be assigned to menus, toolbars, + keyboard shortcuts, events and embedded objects. + . + This package contains the script provider to support Python. + +Package: libreoffice-script-provider-bsh +Architecture: all +Section: java +Depends: libreoffice-common, + libreoffice-core-nogui | libreoffice-core, + ${java-common-depends}, + liblibreoffice-java, + ${java:Depends}, + ${java-runtime-depends}, + ${misc:Depends} +Description: BeanShell script support provider for LibreOffice scripting framework + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + The Scripting Framework allows LibreOffice users to write and run macros + in multiple languages including LibreOffice Basic, Python, Java, BeanShell + and JavaScript. These macros can then be assigned to menus, toolbars, + keyboard shortcuts, events and embedded objects. + . + This package contains the script provider to support BeanShell. + +Package: libreoffice-script-provider-js +Architecture: all +Section: web +Depends: libreoffice-common, + libreoffice-core-nogui | libreoffice-core, + ${java-common-depends}, + liblibreoffice-java, + ${java:Depends}, + ${java-runtime-depends}, + ${misc:Depends} +Description: JavaScript script support provider for LibreOffice scripting framework + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + The Scripting Framework allows LibreOffice users to write and run macros + in multiple languages including LibreOffice Basic, Python, Java, BeanShell + and JavaScript. These macros can then be assigned to menus, toolbars, + keyboard shortcuts, events and embedded objects. + . + This package contains the script provider to support JavaScript. + +Package: libreoffice-sdbc-hsqldb +Depends: libreoffice-core-nogui | libreoffice-core, ${java-common-depends}, ${java:Depends}, ${java-runtime-depends}, ${shlibs:Depends}, ${misc:Depends} +Architecture: %OOO_JAVA_ARCHS% +Section: database +Enhances: libreoffice-base-drivers +Description: HSQLDB SDBC driver for LibreOffice + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + The HSQLDB SDBC Driver allows one to use the HSQLDB embedded database from + LibreOffice without any wrapper layer such as ODBC or JDBC. + +Package: libreoffice-sdbc-mysql +Section: database +Architecture: %OOO_BASE_ARCHS% +Depends: libreoffice-core-nogui | libreoffice-core, ${misc:Depends}, ${shlibs:Depends} +Suggests: default-mysql-server | virtual-mysql-server +Description: MariaDB/MySQL SDBC driver for LibreOffice + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + The MariaDB/MySQL driver allows one to use the MariaDB or MySQL + database from LibreOffice without any wrapper layer such as ODBC or JDBC. + +Package: libreoffice-base-drivers +Depends: libreoffice-core-nogui | libreoffice-core, ${shlibs:Depends}, ${misc:Depends} +Architecture: %OOO_BASE_ARCHS% +Section: database +Suggests: libreoffice-sdbc-postgresql | odbc-postgresql | libpg-java, + libreoffice-sdbc-mysql | libmyodbc | libmariadb-java, + libsqliteodbc | tdsodbc | odbc-mdbtools, + libjtds-java, +Recommends: libreoffice-sdbc-hsqldb [%OOO_JAVA_ARCHS%], ${base-firebird-recommends} +Replaces: libreoffice-base (<< 1:4.3.0-3), libreoffice-core (<< 1:6.2.0~beta1~) +Breaks: libreoffice-base (<< 1:4.3.0-3) +Description: Database connectivity drivers for LibreOffice + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the database connectivity drivers used by LibreOffices + database functionality: + - ODBC + - JDBC + - dBase + - Calc + - Flat files + . + You can extend this by installing: + . + * unixodbc: ODBC database support + * libmyodbc | odbc-postgresql | libsqliteodbc | tdsodbc | odbc-mdbtools: ODBC + drivers for: + - MySQL + - PostgreSQL + - SQLite + - MS SQL / Sybase SQL + - *.mdb (JET / MS Access) + * libmariadb-java | libpg-java | libjtds-java: JDBC Drivers + for: + - MySQL/MariaDB + - PostgreSQL + - MS SQL Server and Sybase + * libreoffice-sdbc-hsqldb: embedded HSQLDB SDBC Driver + * libreoffice-sdbc-firebird: Firebird SDBC Driver + * libreoffice-sdbc-postgresql: PostgreSQL SDBC Driver + * libreoffice-sdbc-mysql: MySQL/MariaDB SDBC Driver + +Package: python3-access2base +Section: python +Architecture: all +Homepage: http://www.access2base.com/access2base.html +Depends: libreoffice-common (>= 1:6.4.0~beta1-2~), libreoffice-base, python3-uno, ${python3:Depends}, ${misc:Depends} +Replaces: libreoffice-base +Description: interface between Python and the LibreOffice Access2Base library + Access2Base is a LibreOffice/OpenOffice Basic library of macros for + (business or personal) application developers and advanced users. + . + Their syntax and their meaning are directly inspired by MSAccess. + The macros are callable from + - a LibreOffice / OpenOffice Base application, + - any LibreOffice / OpenOffice document wanting to access data + stored in databases. + . + This package contains an interface between Python (user) scripts + and Access2Base. + +Package: libunoil-java +Section: oldlibs +Depends: ${java:Depends}, ${misc:Depends}, libridl-java +Architecture: all +Replaces: libreoffice-java-common (<< 1:6.4.0~rc1-6) +Breaks: libreoffice-java-common (<< 1:6.4.0~rc1-6) +Description: LibreOffice UNO runtime environment -- UNO interface library (compatibility library) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package formerly contained the precompiled Java interfaces of + the LibreOffice API. + . + This has now been merged into liblibreoffice-java but this package still + exists for compatibility with applications referencing the old + library. + +Package: libreoffice-officebean +Architecture: %OOO_JAVA_ARCHS% +Section: oldlibs +Depends: libreoffice-core-nogui (= ${binary:Version}) | libreoffice-core (= ${binary:Version}), + libofficebean-java (>= 1:6.4.0~rc2), +Description: transitional package for libofficebean-java + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package formerly contained binaries for the the LibreOffice Office Bean + for embedding LibreOffice in custom Java applications. + . + This has now been merged into libofficebean-java so this package can safely + be removed. + +Package: libofficebean-java +Section: java +Depends: liblibreoffice-java, + ${java-runtime-depends}, + ${java:Depends}, + ${shlibs:Depends}, + ${misc:Depends} +Recommends: libreoffice-core-nogui | libreoffice-core +Architecture: %OOO_JAVA_ARCHS% +Replaces: libreoffice-officebean (<< 1:6.4.0~rc2-1) +Breaks: libreoffice-officebean (<< 1:6.4.0~rc2-1) +Description: generic Java Bean wrapper for LibreOffice components + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the Java library for the the LibreOffice Office Bean + for embedding LibreOffice in custom Java applications. + diff --git a/debian/control.kf5.in b/debian/control.kf5.in new file mode 100644 index 00000000000..3eaa5b3702c --- /dev/null +++ b/debian/control.kf5.in @@ -0,0 +1,17 @@ +Package: libreoffice-kf5 +Architecture: %OOO_ARCHS% +Depends: libreoffice-core (= ${binary:Version}), + ${kf5-qt5-depends}, + ${misc:Depends}, + ${shlibs:Depends} +Recommends: ${plasma-iconset-dep} +Replaces: libreoffice-kde (<< 1:6.1.0~alpha1-1) +Section: kde +Enhances: libreoffice +Description: office productivity suite -- KDE Frameworks 5 integration + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the KF5 plugin for LibreOffice and a KF5-based File + Picker when running under Plasma. + diff --git a/debian/control.lang.in b/debian/control.lang.in new file mode 100644 index 00000000000..95036569354 --- /dev/null +++ b/debian/control.lang.in @@ -0,0 +1,29 @@ +Package: libreoffice-l10n-@LCODE@ +Section: localization +Architecture: all +Depends: libreoffice-common (>= 1:7.0.0~alpha~), ${misc:Depends}, @LOCALES_DEPENDS@ +Recommends: libreoffice-core (>> ${base-version}) @FONT_RECOMMENDS@ +Provides: libreoffice-l10n (= ${help-l10n-virtual-version}) +Suggests: hunspell-dictionary-@LCODE@ | myspell-dictionary-@LCODE@, + hyphen-@LCODE@, + libreoffice-grammarcheck-@LCODE@, + libreoffice-help-@LCODE@, + mythes-@LCODE@ +Description: office productivity suite -- @LNAME@ language package + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the localization of LibreOffice in + @LNAME@. + It contains the user interface, the templates and the autotext features. + (please note that not all this is available for all possible languages). + You can switch user interface language using the locales system. + . + Spelling dictionaries, hyphenation patterns, thesauri and help are not + included in this package. There are some available in separate packages + (myspell-*, hyphen-*, mythes-*, libreoffice-help-*) + . + If you just want to be able to spellcheck etc. in other languages, you can + install extra dictionaries/hyphenation patterns/thesauri independently of + the language packs. + diff --git a/debian/control.librelogo.in b/debian/control.librelogo.in new file mode 100644 index 00000000000..a07a2e08e2d --- /dev/null +++ b/debian/control.librelogo.in @@ -0,0 +1,22 @@ +Package: libreoffice-librelogo +Section: misc +Architecture: all +Depends: libreoffice-core, + libreoffice-writer, + libreoffice-script-provider-python, + libreoffice-common (>= 1:7.0.0~alpha), + ${misc:Depends} +Build-Profiles: +Homepage: http://librelogo.org +Description: Logo-like programming language for LibreOffice + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains Librelogo, which is a pyuno-based Logo-like programming + language with interactive vectorgraphics for education and DTP + - basic Logo syntax for back compatibility with educational Logo systems + - interactive vectorgraphics in LibreOffice Writer + - native commands (easily translatable) + - Python data structures (list, tuple, set, dictionary) and other Python + features + diff --git a/debian/control.lokit.in b/debian/control.lokit.in new file mode 100644 index 00000000000..59dfd57c26f --- /dev/null +++ b/debian/control.lokit.in @@ -0,0 +1,16 @@ +Package: libreofficekit-dev +Section: libdevel +Architecture: %OOO_ARCHS% +Depends: ${misc:Depends}, gir1.2-lokdocview-0.1 (= ${binary:Version}) +Suggests: libgtk-3-dev +Recommends: libreoffice-core, libreofficekit-data +Replaces: gir1.2-lokdocview-0.1 (<< 1:5.4.0~rc1) +Description: LibreOfficeKit -- headers + LibreOfficeKit can be used for accessing LibreOffice functionality through + C/C++, without any need to use UNO. + . + For now it only offers document conversion (in addition to an experimental + tiled rendering API). + . + This package contains the headers needed for using LibreOfficeKit. + diff --git a/debian/control.mediawiki.in b/debian/control.mediawiki.in new file mode 100644 index 00000000000..9255a51a0aa --- /dev/null +++ b/debian/control.mediawiki.in @@ -0,0 +1,18 @@ +Package: libreoffice-wiki-publisher +Section: misc +Architecture: all +Depends: libreoffice-core, + liblibreoffice-java, + ${java-common-depends}, + ${java:Depends}, + ${java-runtime-depends}, + ${misc:Depends} +Enhances: libreoffice-writer +Suggests: mediawiki +Description: LibreOffice extension for working with MediaWiki articles + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains an extension to create/edit/publish MediaWiki + articles with LibreOffice + diff --git a/debian/control.nlpsolver.in b/debian/control.nlpsolver.in new file mode 100644 index 00000000000..9b540eeaa8c --- /dev/null +++ b/debian/control.nlpsolver.in @@ -0,0 +1,14 @@ +Package: libreoffice-nlpsolver +Architecture: all +Depends: ${misc:Depends}, libreoffice-calc, libreoffice-core, liblibreoffice-java, ${java-common-depends}, ${java-runtime-depends} +Section: math +Description: "Solver for Nonlinear Programming" extension for LibreOffice + By default LibreOffice Calc ships with a solver engine for linear + programming only. This allows the optimization of models to a certain degree. + However, if the formulas or constraints become more complex, + nonlinear programming is required. That missing gap is now filled by the + Solver for Nonlinear Programming extension. + . + Currently it incorporates two Evolutionary Algorithms which are able to + handle floating point and integer variables as well as nonlinear constraints. + diff --git a/debian/control.plasma.in b/debian/control.plasma.in new file mode 100644 index 00000000000..640f076ceb8 --- /dev/null +++ b/debian/control.plasma.in @@ -0,0 +1,13 @@ +Package: libreoffice-plasma +Architecture: %OOO_ARCHS% +Depends: libreoffice-core (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Replaces: libreoffice-kde5 (<< 1:6.4.0~) +Description: office productivity suite -- some Plasma integration + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains some minor Plasma integration (like AppData + and "Create New..." integration) and a KDE/KF5 configuration backend. + diff --git a/debian/control.postgresql.in b/debian/control.postgresql.in new file mode 100644 index 00000000000..ffbfb05b4be --- /dev/null +++ b/debian/control.postgresql.in @@ -0,0 +1,17 @@ +Package: libreoffice-sdbc-postgresql +Section: misc +Architecture: %OOO_BASE_ARCHS% +Depends: libreoffice-core, + libreoffice-common (>= 1:7.0.0~alpha), + ${misc:Depends}, + ${shlibs:Depends} +Suggests: postgresql (>= 8.4) +Enhances: libreoffice-base-drivers +Description: PostgreSQL SDBC driver for LibreOffice + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + The PostgreSQL SDBC Driver allows one to use the PostgreSQL database from + LibreOffice without any wrapper layer such as ODBC or JDBC. +Homepage: http://wiki.documentfoundation.org/PostgreSQL-SDBC + diff --git a/debian/control.qt5.in b/debian/control.qt5.in new file mode 100644 index 00000000000..9681f5f6a3f --- /dev/null +++ b/debian/control.qt5.in @@ -0,0 +1,14 @@ +Package: libreoffice-qt5 +Architecture: %OOO_ARCHS% +Depends: libreoffice-core (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Recommends: qtgstreamer-plugins-qt5 +Enhances: libreoffice +Description: office productivity suite -- Qt 5 integration + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the Qt 5 plugin for drawing LibreOffices widgets + with Qt 5 and a Qt File Picker and print dialog. + diff --git a/debian/control.reportbuilder.in b/debian/control.reportbuilder.in new file mode 100644 index 00000000000..4a2edd0115d --- /dev/null +++ b/debian/control.reportbuilder.in @@ -0,0 +1,55 @@ +Package: libreoffice-report-builder +Section: misc +Architecture: all +Depends: libreoffice-core | libreoffice-core-nogui, + libreoffice-report-builder-bin (>= ${base-version}), + libreoffice-common (>= 1:7.0.0~alpha), + liblibreoffice-java, + ${java:Depends}, + ${java-common-depends}, + ${misc:Depends}, + ${report-builder-jar-depends} +Provides: libreoffice-reportdesigner +Enhances: libreoffice-base +Breaks: libreoffice-common (<< 1:6.4.2~rc1~) +Replaces: libreoffice-common (<< 1:6.4.2~r~~) +Description: LibreOffice component for building database reports + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the report builder: + "Create with the Sun Report Builder stylish, smart-looking database reports. + The flexible report editor can define group and page headers as well as + group and page footers and even calculation fields are available to + accomplish complex database reports." + +Package: libreoffice-report-builder-bin +Section: misc +Architecture: %OOO_REPORTBUILDER_ARCHS% +Depends: libreoffice-core, + libreoffice-base, + ${misc:Depends}, + ${shlibs:Depends} +Description: LibreOffice component for building database reports -- libraries + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains some architecture-dependent support libraries + (librpt*.so) for the report builder component. + +Package: libreoffice-report-builder-bin-nogui +Section: misc +Architecture: %OOO_REPORTBUILDER_ARCHS% +Depends: libreoffice-core-nogui | libreoffice-core, + libreoffice-base-nogui | libreoffice-base, + ${misc:Depends}, + ${shlibs:Depends} +Conflicts: libreoffice-report-builder-bin +Replaces: libreoffice-report-builder-bin +Description: LibreOffice component for building database reports -- libraries (no GUI variant) + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains some architecture-dependent support libraries + (librpt*.so) for the report builder component. + diff --git a/debian/control.sdk.in b/debian/control.sdk.in new file mode 100644 index 00000000000..4372651cf56 --- /dev/null +++ b/debian/control.sdk.in @@ -0,0 +1,70 @@ +Package: libreoffice-dev +Section: devel +Architecture: %OOO_ARCHS% +Depends: libreoffice-core-nogui (= ${binary:Version}) | libreoffice-core (= ${binary:Version}), + libreoffice-dev-common (= ${source:Version}), + ${idlc-cpp-depends}, + ${misc:Depends}, + ${shlibs:Depends} +Recommends: g++, ${java-common-depends}, ${java-runtime-depends} +Suggests: libmythes-dev, libreofficekit-dev, libreoffice-dev-doc +Replaces: libreoffice-dev-common (<< 1:5.4.1~) +Conflicts: libreoffice-dev-doc (<< 1:5.2.5-2~), libreoffice (<< 1:5.2.5-2~) +Breaks: libreoffice-dev-common (<< 1:5.4.1~) +Description: office productivity suite -- SDK -- architecture-dependent parts + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the (architecture-dependent) files needed to build + plugins/add-ons for LibreOffice (build tools, libraries, arch-dependent + includes, ...). + +Package: libreoffice-dev-gui +Section: devel +Architecture: %OOO_ARCHS% +Depends: libreoffice-core (= ${binary:Version}), + libreoffice-dev (= ${binary:Version}), + libreoffice-dev-common (= ${source:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Replaces: libreoffice-dev (<< 1:7.0.0~) +Breaks: libreoffice-dev (<< 1:7.0.0~) +Description: office productivity suite -- "GUI" development stuff + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the gengal and ui-previewer utilities which were moved + from libreoffice-dev. + +Package: libreoffice-dev-common +Section: devel +Architecture: all +Depends: ${misc:Depends} +Replaces: libreoffice-dev (<< 1:5.2.0~) +Breaks: libreoffice-dev (<< 1:5.2.0~) +Conflicts: libreoffice (<< 1:5.2.5-2~) +Description: office productivity suite -- SDK -- architecture-independent parts + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the (architecture-independent) files needed to build + plugins/add-ons for LibreOffice (includes, IDL files, ...) + +Package: libreoffice-dev-doc +Section: doc +Architecture: all +Depends: ${misc:Depends} +Recommends: libreoffice-dev (= ${binary:Version}), + www-browser +Conflicts: openoffice.org-dev-doc, libreoffice-dev (<= 1:5.0.3~rc1-2), libreoffice (<< 1:5.2.5-2~) +Build-Profiles: +Description: office productivity suite -- SDK documentation + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package contains the documentation of the LibreOffice SDK: + . + * C++/Java API reference + * IDL reference + * C++/Java/Basic examples + diff --git a/debian/control.test-packages.in b/debian/control.test-packages.in new file mode 100644 index 00000000000..bbe7d9d1037 --- /dev/null +++ b/debian/control.test-packages.in @@ -0,0 +1,18 @@ +Package: libreoffice-subsequentcheckbase +Section: libs +Architecture: all +Depends: liblibreoffice-java, ${java:Depends}, ${misc:Depends} +Build-Profiles: +Description: LibreOffice java test libraries + Java libraries LibreOffice subsequentchecks integration test suite + +Package: libreoffice-smoketest-data +Section: misc +Depends: ${misc:Depends} +Architecture: all +Build-Profiles: +Replaces: libreoffice-java-common (<< 1:6.4.0~rc1-6) +Breaks: libreoffice-java-common (<< 1:6.4.0~rc1-6) +Description: data files for LibreOffices "smoketest" + Data files for the LibreOffice "smoketest". + diff --git a/debian/control.transitionals.in b/debian/control.transitionals.in new file mode 100644 index 00000000000..c31c6fba2a9 --- /dev/null +++ b/debian/control.transitionals.in @@ -0,0 +1,36 @@ +Package: libreoffice-mysql-connector +Section: oldlibs +Architecture: %OOO_BASE_ARCHS% +Depends: libreoffice-sdbc-mysql, ${misc:Depends} +Description: transitional package for MariaDB/MySQL Connector extension for LibreOffice + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package used to contain the LibreOffice MySQL/MariaDB Connector extension. + This has now been added to the "main" packages (libreoffice-sdbc-mysql) + and this package thus can be safely removed once installed. + +Package: libreoffice-avmedia-backend-gstreamer +Section: oldlibs +Architecture: %OOO_ARCHS% +Depends: libreoffice-core (>> 1:6.3.0~rc1~), ${misc:Depends} +Description: transitional package for GStreamer backend for LibreOffice + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package used to contain the GStreamer backend for LibreOffice. + This has now been merged into the "core" package and this package thus + can be safely removed once installed. + +Package: libreoffice-kde5 +Section: oldlibs +Architecture: %OOO_ARCHS% +Depends: libreoffice-plasma, libreoffice-kf5 +Description: transitional package for LibreOffice "KDE 5" integration + LibreOffice is a full-featured office productivity suite that provides + a near drop-in replacement for Microsoft(R) Office. + . + This package used to contain the "KDE 5" integration. It was split + into -kf5 (KF5 UI plugin) and -plasma (some Plasma integration). This + packsge can be safely removed once installed. + diff --git a/debian/control.ure.in b/debian/control.ure.in new file mode 100644 index 00000000000..7b16b3c31bd --- /dev/null +++ b/debian/control.ure.in @@ -0,0 +1,199 @@ +Package: uno-libs-private +Section: libs +Architecture: %OOO_ARCHS% +Depends: ${misc:Depends}, ${shlibs:Depends} +Replaces: uno-libs3 +Breaks: uno-libs3 +Description: LibreOffice UNO runtime environment -- private libraries used by public ones + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + It offers you a flexible, low-overhead component model that is most ideal + for (but not limited to) combining in one application components written in + different computer languages, and developed by different parties. You can use + it to create any kind of application, in whatever application domain you can + imagine. + . + This package contains some private UNO/URE libraries which are used by public + ones (e.g. cppu). + +Package: libuno-sal3 +Section: libs +Architecture: %OOO_ARCHS% +Depends: ${misc:Depends}, ${shlibs:Depends} +Replaces: ure (<< 5.0.0~rc2-1), uno-libs3 +Breaks: libreoffice-core (<< 1:4.3.0~), uno-libs3 +Description: LibreOffice UNO runtime environment -- SAL public library + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + It offers you a flexible, low-overhead component model that is most ideal + for (but not limited to) combining in one application components written in + different computer languages, and developed by different parties. You can use + it to create any kind of application, in whatever application domain you can + imagine. + . + This package contains the System Abstraction Layer (SAL) library. + +Package: libuno-salhelpergcc3-3 +Section: libs +Architecture: %OOO_ARCHS% +Depends: ${misc:Depends}, ${shlibs:Depends} +Replaces: ure (<< 5.0.0~rc2-1), uno-libs3 +Breaks: libreoffice-core (<< 1:4.3.0~), uno-libs3 +Description: LibreOffice UNO runtime environment -- SAL helpers for C++ library + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + It offers you a flexible, low-overhead component model that is most ideal + for (but not limited to) combining in one application components written in + different computer languages, and developed by different parties. You can use + it to create any kind of application, in whatever application domain you can + imagine. + . + This package contains C++ helpers to make use of sal easier. + +Package: libuno-cppu3 +Section: libs +Architecture: %OOO_ARCHS% +Depends: ${misc:Depends}, ${shlibs:Depends} +Replaces: ure (<< 5.0.0~rc2-1), uno-libs3 +Breaks: libreoffice-core (<< 1:4.3.0~), uno-libs3 +Description: LibreOffice UNO runtime environment -- CPPU public library + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + It offers you a flexible, low-overhead component model that is most ideal + for (but not limited to) combining in one application components written in + different computer languages, and developed by different parties. You can use + it to create any kind of application, in whatever application domain you can + imagine. + . + This package contains CPPU, the type definitions/implementations for the core + of UNO. + +Package: libuno-cppuhelpergcc3-3 +Section: libs +Architecture: %OOO_ARCHS% +Depends: ${misc:Depends}, ${shlibs:Depends}, uno-libs-private (= ${binary:Version}) +Replaces: ure (<< 5.0.0~rc2-1), uno-libs3 +Breaks: libreoffice-core (<< 1:4.3.0~), uno-libs3 +Description: LibreOffice UNO runtime environment -- CPPU helper library + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + It offers you a flexible, low-overhead component model that is most ideal + for (but not limited to) combining in one application components written in + different computer languages, and developed by different parties. You can use + it to create any kind of application, in whatever application domain you can + imagine. + . + This package contains the cppuhelper library (helpers for using cppu in C++, + e.g. templates for implementing UNO components, bootstrapping stuff) + +Package: libuno-purpenvhelpergcc3-3 +Section: libs +Architecture: %OOO_ARCHS% +Depends: ${misc:Depends}, ${shlibs:Depends} +Replaces: ure (<< 5.0.0~rc2-1), uno-libs3 +Breaks: libreoffice-core (<< 1:4.3.0~), uno-libs3 +Description: LibreOffice UNO runtime environment -- "purpose environment" helper + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + It offers you a flexible, low-overhead component model that is most ideal + for (but not limited to) combining in one application components written in + different computer languages, and developed by different parties. You can use + it to create any kind of application, in whatever application domain you can + imagine. + . + This package contains a library which contains a helper for implementing + so-called "purpose environments". + +Package: ure +Section: libs +Architecture: %OOO_ARCHS% +Depends: ${misc:Depends}, ${shlibs:Depends}, uno-libs-private (= ${binary:Version}) +Recommends: liblibreoffice-java, libjuh-java, libjurt-java, libridl-java, libunoloader-java +Suggests: ${java-runtime-depends} +Replaces: libreoffice-common (<< 1:4.5.0), libreoffice-core (<< 1:5.3.0~beta1~), libjuh-java (<< 1:6.4.0~rc1-6), libridl-java (<< 1:6.4.0~rc1-6), libunoloader-java (<< 1:6.4.0~rc1-6), libjurt-java (<< 1:6.4.0~rc1-6) +Breaks: libreoffice-core (<< 1:5.3.0~beta1~), libreoffice-common (<< 1:4.5.0), libjuh-java (<< 1:6.4.0~rc1-6), libridl-java (<< 1:6.4.0~rc1-6), libunoloader-java (<< 1:6.4.0~rc1-6), libjurt-java (<< 1:6.4.0~rc1-6) +Description: LibreOffice UNO runtime environment + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + It offers you a flexible, low-overhead component model that is most ideal + for (but not limited to) combining in one application components written in + different computer languages, and developed by different parties. You can use + it to create any kind of application, in whatever application domain you can + imagine. + +Package: libjuh-java +Architecture: all +Section: oldlibs +Depends: ${java:Depends}, ${misc:Depends}, liblibreoffice-java +Replaces: ure (<< 6.4.0~rc1-6) +Breaks: ure (<< 6.4.0~rc1-6) +Description: LibreOffice UNO runtime environment -- Java Uno helper (compatibility library) + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + This package formerly contained various tools and adapters for Java Uno. + . + This has now been merged into liblibreoffice-java but this package still exists + for compatibility with applications referencing the old library. + +Package: libridl-java +Architecture: all +Section: oldlibs +Depends: ${java:Depends}, ${misc:Depends}, liblibreoffice-java +Replaces: ure (<< 6.4.0~rc1-6) +Breaks: ure (<< 6.4.0~rc1-6) +Description: LibreOffice UNO runtime environment -- Java Uno runtime and base types and types access library (compatibility library) + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + This package formely contained the implementation of the base types for the + Java Uno typesystem, as well as a types access library. + . + This has now been merged into liblibreoffice-java but this package still exists + for compatibility with applications referencing the old library. + +Package: libunoloader-java +Architecture: all +Section: java +Depends: ${java:Depends}, ${misc:Depends} +Replaces: ure (<< 6.4.0~rc1-6) +Breaks: ure (<< 6.4.0~rc1-6) +Description: LibreOffice UNO runtime environment -- (Java) UNO loader + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + This package contains a UNO loader library for Java. + +Package: libjurt-java +Architecture: all +Section: oldlibs +Depends: ${java:Depends}, ${misc:Depends}, liblibreoffice-java +Replaces: ure (<< 6.4.0~rc1-6) +Breaks: ure (<< 6.4.0~rc1-6) +Description: LibreOffice UNO runtime environment -- Java Uno Runtime (compatibility library) + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + This package formerly contained the "Java Uno Runtime" and basically + implements Java Uno. + . + This has now been merged into liblibreoffice-java but this package still exists + for compatibility with applications referencing the old library. + +Package: liblibreoffice-java +Architecture: all +Section: java +Depends: ure, libunoloader-java, ${java:Depends}, ${misc:Depends} +Description: LibreOffice UNO runtime environment -- Java library + The Uno Runtime Environment (URE) is the well-known UNO component model + of LibreOffice, packaged up as an individual product. + . + This package contains the public Java libraries. + diff --git a/debian/copyright b/debian/copyright new file mode 100644 index 00000000000..d94a9a86956 --- /dev/null +++ b/debian/copyright @@ -0,0 +1,293 @@ +Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Upstream-Name: LibreOffice +Upstream-Contact: libreoffice@lists.freedesktop.org +Source: http://download.documentfoundation.org/libreoffice/src +# they are already removed when packing the upstream tarballs, but are in git... +#Files-Excluded: schema/*/* + +Files: * +Copyright: Copyright 2000, 2010 Oracle and/or its affiliates. + Copyright (c) 2000, 2010 LibreOffice contributors and/or their affiliates. +License: MPL-2.0 + On Debian systems the full text of the MPL-2.0 can be found in + /usr/share/common-licenses/MPL-2.0. + . + Some files include Apache-2.0 licensed material: + . + # This file incorporates work covered by the following license notice: + # + # Licensed to the Apache Software Foundation (ASF) under one or more + # contributor license agreements. See the NOTICE file distributed + # with this work for additional information regarding copyright + # ownership. The ASF licenses this file to you under the Apache + # License, Version 2.0 (the "License"); you may not use this file + # except in compliance with the License. You may obtain a copy of + # the License at http://www.apache.org/licenses/LICENSE-2.0 . + . + On Debian systems the full text of the Apache-2.0 license can be found in + /usr/share/common-licenses/Apache-2.0. + +Files: extras/source/truetype/symbol/OpenSymbol.sfd +Copyright: (c) 2009 Sun Microsystems Inc. + (c) 2010 Google Corporation + (c) 2011 Julien Nabet + (c) 2011 Olivier Hallot + (c) 2013 Mathias Hasselmann + (c) 2015 Khaled Hosny + (c) 2016 Mike Kaganski +License: MPL-2.0 + On Debian systems the full text of the MPL-2.0 can be found in + /usr/share/common-licenses/MPL-2.0. + . + Some files include Apache-2.0 licensed material: + . + # This file incorporates work covered by the following license notice: + # + # Licensed to the Apache Software Foundation (ASF) under one or more + # contributor license agreements. See the NOTICE file distributed + # with this work for additional information regarding copyright + # ownership. The ASF licenses this file to you under the Apache + # License, Version 2.0 (the "License"); you may not use this file + # except in compliance with the License. You may obtain a copy of + # the License at http://www.apache.org/licenses/LICENSE-2.0 . + . + On Debian systems the full text of the Apache-2.0 license can be found in + /usr/share/common-licenses/Apache-2.0. + +Files: swext/mediawiki/src/filter/odt2mediawiki.xsl +Copyright: Copyright (C) 2007-2013 Bernhard Haumacher (haui@haumacher.de) +License: Apache-2.0 + +Files: sysui/desktop/apparmor/* +Copyright: Copyright (C) 2016 Canonical Ltd. + Copyright (C) 2017 Software in the Public Interest, Inc. +License: MPL-2.0 + +Files: icon-themes/breeze*/* +Copyright: Copyright 2014 Uri Herrera + Copyright 2015 Andreas Kainz and other contributors +License: GPL-2+ + +Files: icon-themes/sifr*/* +Copyright: Jakub Steiner + Lapo Calamandrei + Hylke Bons + Barbara Muraus + Issa Alkurtass + Norah Abanumay + Copyright 2017-2018 Matthias Freund +License: CC-BY-SA-3.0 + +Files: icon_themes/elementary*/* +Copyright: Copyright 2015 by Simon Steinbeiss , Pasi Lallinaho +License: GPL-3+ + +Files: icon-themes/colibre*/* +Copyright: Copyright 2018 Andreas Kainz +License: CC0-1.0 + +https://github.com/rizmut/libreoffice-style-karasa-jaga/blob/master/COPYING +Files: icon-themes/karasa_jaga/* +Copyright: Copyright (c) 2014 Rizal Muttaqin +License: LGPL-3+ + +Files: icon_themes/sukapura*/* +Copyright: Copyright (c) 2019-2020 Rizal Muttaqin +License: MPL_2.0 + +Files: helpcontent2/help3xsl/fuse.js +Copyright: Copyright (c) 2012-2017 Kirollos Risk (http://kiro.me) +License: Apache-2.0 + +Files: helpcontent2/help3xsl/paginathing.js +Copyright: (C) 2018 Alfred Crosby +License: Expat + +Files: helpcontent2/help3xsl/normalize.css +Copyright: Copyright © Nicolas Gallagher and Jonathan Neal +License: Expat + +Files: helpcontent2/help3xsl/fuzzysort.js +Copyright: Copyright (c) 2018 Stephen Kamenar +License: Expat + +Files: debian/* +Copyright: Copyright (C) 2002-2009 Software in the Public Interest, Inc. +License: GPL-2 + +Files: debian/scripts/get_ttf_version.pl +Copyright: Copyright (C) 2015 Software in the Public Interest, Inc. +License: MPL-2.0 + +Files: debian/templates/debian-presentation.otp +Copyright: Copyright (C) 2010 Raphaël Hertzog +License: GPL-2+ + +Files: debian/templates/debian-presentation-background.xcf +Copyright: Copyright Alexis Younes "ayo" +License: GPL-2+ + +Files: tarballs/*dtoa* +Copyright: Copyright (c) 1991, 2000, 2001 by Lucent Technologies. +License: Expat + +# https://github.com/google/skia/blob/master/LICENSE +Files: tarballs/*skia* +Copyright: Copyright (c) 2011 Google Inc. +License: BSD-3-clause + +Files: tarballs/*rhino* +Copyright: Copyright (C) 1997-2000 Netscape Communications Corporation + Copyright (C) 2000 See Beyond Communications Corporation +License: MPL-1.1 or GPL-2 or LGPL-2 + +Files: tarballs/*xsltml* +Copyright: Copyright (C) 2001-2003 Vasil Yaroshevich +License: other + Permission is hereby granted, free of charge, to any person + obtaining a copy of this software and associated documentation + files (the ``Software''), to deal in the Software without + restriction, including without limitation the rights to use, + copy, modify, merge, publish, distribute, sublicense, and/or + sell copies of the Software, and to permit persons to whom the + Software is furnished to do so, subject to the following + conditions: + . + The above copyright notice and this permission notice shall be + included in all copies or substantial portions of the Software. + . + Except as contained in this notice, the names of individuals + credited with contribution to this software shall not be used in + advertising or otherwise to promote the sale, use or other + dealings in this Software without prior written authorization + from the individuals in question. + . + Any stylesheet derived from this Software that is publically + distributed will be identified with a different name and the + version strings in any derived Software will be changed so that + no possibility of confusion between the derived package and this + Software will exist. + +Files: tarballs/*swingEx* +Copyright: Copyright 2008 by Sun Microsystems, Inc. +License: LGPL-3 + On Debian systems the full text of the LGPL-3 can be found in + /usr/share/common-licenses/LGPL-3 + +Files: tarballs/*pdfium* +Copyright: // Copyright 2014-2016 PDFium Authors. + // Original code copyright 2014 Foxit Software Inc. +License: other + // Redistribution and use in source and binary forms, with or without + // modification, are permitted provided that the following conditions are + // met: + // + // * Redistributions of source code must retain the above copyright + // notice, this list of conditions and the following disclaimer. + // * Redistributions in binary form must reproduce the above + // copyright notice, this list of conditions and the following disclaimer + // in the documentation and/or other materials provided with the + // distribution. + // * Neither the name of Google Inc. nor the names of its + // contributors may be used to endorse or promote products derived from + // this software without specific prior written permission. + // + // THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + // "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + // LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + // A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + // OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, + // SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT + // LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + // DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + // THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE + // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +Files: debian/patches/add-access2base-doc.diff wizards/source/access2base/access2base.html +License: other +Copyright: Copyright (c) Jeremy Ruston 2004-2007 + Copyright (c) UnaMesa Association 2007-2012 +License: other + Redistribution and use in source and binary forms, with or without modification, + are permitted provided that the following conditions are met: + . + Redistributions of source code must retain the above copyright notice, this + list of conditions and the following disclaimer. + . + Redistributions in binary form must reproduce the above copyright notice, this + list of conditions and the following disclaimer in the documentation and/or other + materials provided with the distribution. + . + Neither the name of the UnaMesa Association nor the names of its contributors may be + used to endorse or promote products derived from this software without specific + prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 'AS IS' AND ANY + EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES + OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT + SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, + INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED + TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR + BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN + ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH + DAMAGE. + +License: Expat + Permission is hereby granted, free of charge, to any person obtaining + a copy of this software and associated documentation files (the + "Software"), to deal in the Software without restriction, including + without limitation the rights to use, copy, modify, merge, publish, + distribute, sublicense, and/or sell copies of the Software, and to + permit persons to whom the Software is furnished to do so, subject to + the following conditions: + . + The above copyright notice and this permission notice shall be + included in all copies or substantial portions of the Software. + . + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, + EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF + MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND + NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE + LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION + OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION + WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + +License: MPL-2.0 + On Debian systems the full text of the MPL-2.0 can be found in + /usr/share/common-licenses/MPL-2.0. + +License: Apache-2.0 + On Debian systems the full text of the Apache-2.0 license can be found in + /usr/share/common-licenses/Apache-2.0. + +License: GPL-2+ + On Debian systems the full text of the GPL-2 can be found in + /usr/share/common-licenses/GPL-2 + +License: GPL-3+ + On Debian systems the full text of the GPL-3 can be found in + /usr/share/common-licenses/GPL-3 + +License: GPL-2 + On Debian systems the full text of the GPL-2 can be found in + /usr/share/common-licenses/GPL-2 + +License: MPL-1.1 + On Debian systems the full text of the MPL-1.1 can be found in + /usr/share/common-licenses/MPL-1.1 + +License: LGPL-2 + On Debian systems the full text of the LGPL-2 can be found in + /usr/share/common-licenses/LGPL-2 + +License: LGPL-3+ + On Debian systems the full text of the LGPL-3 can be found in + /usr/share/common-licenses/LGPL-3 + +License: CC0-1.0 + On Debian systems the full text of the CC0-1.0 license can be found in + /usr/share/common-licenses/CC0-1.0 + + diff --git a/debian/gir1.2-lokdocview-0.1.maintscript b/debian/gir1.2-lokdocview-0.1.maintscript new file mode 100644 index 00000000000..af2542fa92b --- /dev/null +++ b/debian/gir1.2-lokdocview-0.1.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/gir1.2-lokdocview-0.1 /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libjuh-java.lintian-overrides b/debian/libjuh-java.lintian-overrides new file mode 100644 index 00000000000..6b27b4f14ac --- /dev/null +++ b/debian/libjuh-java.lintian-overrides @@ -0,0 +1 @@ +libjuh-java: codeless-jar usr/share/java/juh-*.jar diff --git a/debian/libjuh-java.poms b/debian/libjuh-java.poms new file mode 100644 index 00000000000..78b7ec145c5 --- /dev/null +++ b/debian/libjuh-java.poms @@ -0,0 +1,28 @@ +# List of POM files for the package +# Format of this file is: +# [option]* +# where option can be: +# --ignore: ignore this POM and its artifact if any +# --ignore-pom: don't install the POM. To use on POM files that are created +# temporarily for certain artifacts such as Javadoc jars. [mh_install, mh_installpoms] +# --no-parent: remove the tag from the POM +# --package=: an alternative package to use when installing this POM +# and its artifact +# --has-package-version: to indicate that the original version of the POM is the same as the upstream part +# of the version for the package. +# --keep-elements=: a list of XML elements to keep in the POM +# during a clean operation with mh_cleanpom or mh_installpom +# --artifact=: path to the build artifact associated with this POM, +# it will be installed when using the command mh_install. [mh_install] +# --java-lib: install the jar into /usr/share/java to comply with Debian +# packaging guidelines +# --usj-name=: name to use when installing the library in /usr/share/java +# --usj-version=: version to use when installing the library in /usr/share/java +# --no-usj-versionless: don't install the versionless link in /usr/share/java +# --dest-jar=: the destination for the real jar. +# It will be installed with mh_install. [mh_install] +# --classifier=: Optional, the classifier for the jar. Empty by default. +# --site-xml=: Optional, the location for site.xml if it needs to be installed. +# Empty by default. [mh_install] +# +debian/pom.juh.xml --no-parent --has-package-version diff --git a/debian/libjurt-java.lintian-overrides b/debian/libjurt-java.lintian-overrides new file mode 100644 index 00000000000..4af0a88a8dd --- /dev/null +++ b/debian/libjurt-java.lintian-overrides @@ -0,0 +1 @@ +libjurt-java: codeless-jar usr/share/java/jurt-*.jar diff --git a/debian/libjurt-java.poms b/debian/libjurt-java.poms new file mode 100644 index 00000000000..2bc6296377a --- /dev/null +++ b/debian/libjurt-java.poms @@ -0,0 +1,28 @@ +# List of POM files for the package +# Format of this file is: +# [option]* +# where option can be: +# --ignore: ignore this POM and its artifact if any +# --ignore-pom: don't install the POM. To use on POM files that are created +# temporarily for certain artifacts such as Javadoc jars. [mh_install, mh_installpoms] +# --no-parent: remove the tag from the POM +# --package=: an alternative package to use when installing this POM +# and its artifact +# --has-package-version: to indicate that the original version of the POM is the same as the upstream part +# of the version for the package. +# --keep-elements=: a list of XML elements to keep in the POM +# during a clean operation with mh_cleanpom or mh_installpom +# --artifact=: path to the build artifact associated with this POM, +# it will be installed when using the command mh_install. [mh_install] +# --java-lib: install the jar into /usr/share/java to comply with Debian +# packaging guidelines +# --usj-name=: name to use when installing the library in /usr/share/java +# --usj-version=: version to use when installing the library in /usr/share/java +# --no-usj-versionless: don't install the versionless link in /usr/share/java +# --dest-jar=: the destination for the real jar. +# It will be installed with mh_install. [mh_install] +# --classifier=: Optional, the classifier for the jar. Empty by default. +# --site-xml=: Optional, the location for site.xml if it needs to be installed. +# Empty by default. [mh_install] +# +debian/pom.jurt.xml --no-parent --has-package-version diff --git a/debian/liblibreoffice-java.poms b/debian/liblibreoffice-java.poms new file mode 100644 index 00000000000..dcd4c61db52 --- /dev/null +++ b/debian/liblibreoffice-java.poms @@ -0,0 +1,28 @@ +# List of POM files for the package +# Format of this file is: +# [option]* +# where option can be: +# --ignore: ignore this POM and its artifact if any +# --ignore-pom: don't install the POM. To use on POM files that are created +# temporarily for certain artifacts such as Javadoc jars. [mh_install, mh_installpoms] +# --no-parent: remove the tag from the POM +# --package=: an alternative package to use when installing this POM +# and its artifact +# --has-package-version: to indicate that the original version of the POM is the same as the upstream part +# of the version for the package. +# --keep-elements=: a list of XML elements to keep in the POM +# during a clean operation with mh_cleanpom or mh_installpom +# --artifact=: path to the build artifact associated with this POM, +# it will be installed when using the command mh_install. [mh_install] +# --java-lib: install the jar into /usr/share/java to comply with Debian +# packaging guidelines +# --usj-name=: name to use when installing the library in /usr/share/java +# --usj-version=: version to use when installing the library in /usr/share/java +# --no-usj-versionless: don't install the versionless link in /usr/share/java +# --dest-jar=: the destination for the real jar. +# It will be installed with mh_install. [mh_install] +# --classifier=: Optional, the classifier for the jar. Empty by default. +# --site-xml=: Optional, the location for site.xml if it needs to be installed. +# Empty by default. [mh_install] +# +debian/pom.libreoffice.xml --no-parent --has-package-version diff --git a/debian/liblibreofficekitgtk.links b/debian/liblibreofficekitgtk.links new file mode 100644 index 00000000000..c8017de61d1 --- /dev/null +++ b/debian/liblibreofficekitgtk.links @@ -0,0 +1 @@ +usr/lib/libreoffice/program/liblibreofficekitgtk.so usr/lib/liblibreofficekitgtk.so diff --git a/debian/liblibreofficekitgtk.maintscript b/debian/liblibreofficekitgtk.maintscript new file mode 100644 index 00000000000..bc4fa417f62 --- /dev/null +++ b/debian/liblibreofficekitgtk.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/liblibreofficekitgtk /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libofficebean-java.poms b/debian/libofficebean-java.poms new file mode 100644 index 00000000000..36e613aa9ae --- /dev/null +++ b/debian/libofficebean-java.poms @@ -0,0 +1,28 @@ +# List of POM files for the package +# Format of this file is: +# [option]* +# where option can be: +# --ignore: ignore this POM and its artifact if any +# --ignore-pom: don't install the POM. To use on POM files that are created +# temporarily for certain artifacts such as Javadoc jars. [mh_install, mh_installpoms] +# --no-parent: remove the tag from the POM +# --package=: an alternative package to use when installing this POM +# and its artifact +# --has-package-version: to indicate that the original version of the POM is the same as the upstream part +# of the version for the package. +# --keep-elements=: a list of XML elements to keep in the POM +# during a clean operation with mh_cleanpom or mh_installpom +# --artifact=: path to the build artifact associated with this POM, +# it will be installed when using the command mh_install. [mh_install] +# --java-lib: install the jar into /usr/share/java to comply with Debian +# packaging guidelines +# --usj-name=: name to use when installing the library in /usr/share/java +# --usj-version=: version to use when installing the library in /usr/share/java +# --no-usj-versionless: don't install the versionless link in /usr/share/java +# --dest-jar=: the destination for the real jar. +# It will be installed with mh_install. [mh_install] +# --classifier=: Optional, the classifier for the jar. Empty by default. +# --site-xml=: Optional, the location for site.xml if it needs to be installed. +# Empty by default. [mh_install] +# +debian/pom.officebean.xml --no-parent --has-package-version diff --git a/debian/libreoffice-avmedia-backend-gstreamer.maintscript b/debian/libreoffice-avmedia-backend-gstreamer.maintscript new file mode 100644 index 00000000000..b89fd7bd09a --- /dev/null +++ b/debian/libreoffice-avmedia-backend-gstreamer.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-avmedia-backend-gstreamer /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-base-core.maintscript b/debian/libreoffice-base-core.maintscript new file mode 100644 index 00000000000..de6bf069418 --- /dev/null +++ b/debian/libreoffice-base-core.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-base-core /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-base-drivers.NEWS b/debian/libreoffice-base-drivers.NEWS new file mode 100644 index 00000000000..0a0b922f8f2 --- /dev/null +++ b/debian/libreoffice-base-drivers.NEWS @@ -0,0 +1,14 @@ +libreoffice (1:6.1.3-2) unstable; urgency=low + + * The JDBC Driver used for JDBC Access by the LibreOffice MySQL driver + (NOT libreoffice-mysql-connector) contained in this package has been + changed from MySQL to MariaDB (libmysql-java -> libmariadb-java). See + http://bugs.debian.org/913360 and https://bugs.debian.org/912916. + + This also involves changing the classes used in the code, so using + libmysql-java and com.mysql.jdbc.Driver does not work anymore. + + If you want to connect to MySQL or MariaDB databases over JDBC, use + libmariadb-java. + + -- Rene Engelhard Fri, 16 Nov 2018 19:35:22 +0100 diff --git a/debian/libreoffice-base-drivers.maintscript b/debian/libreoffice-base-drivers.maintscript new file mode 100644 index 00000000000..a2c6bc2d038 --- /dev/null +++ b/debian/libreoffice-base-drivers.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-base-drivers /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-base-nogui.bug-control b/debian/libreoffice-base-nogui.bug-control new file mode 100644 index 00000000000..31f42c1f1f7 --- /dev/null +++ b/debian/libreoffice-base-nogui.bug-control @@ -0,0 +1,2 @@ +report-with: libreoffice-core +package-status: unixodbc libmyodbc odbc-postgresql libsqliteodbc tdsodbc mdbtools libmariadb-java libmysql-java libpg-java libsapdbc-java diff --git a/debian/libreoffice-base-nogui.mime b/debian/libreoffice-base-nogui.mime new file mode 100644 index 00000000000..3174fccf851 --- /dev/null +++ b/debian/libreoffice-base-nogui.mime @@ -0,0 +1,11 @@ +### +# shared-mime-info + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.database; soffice --nologo --base %s; edit=soffice --nologo --base %s; print=soffice --nologo --base -p %s; test=test -n "$DISPLAY"; description="OpenDocument Database"; nametemplate=%s.odb; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.base; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; description="OpenOffice.org Database"; nametemplate=%s.sdb; priority=8 + +# +### diff --git a/debian/libreoffice-base-nogui.ucf b/debian/libreoffice-base-nogui.ucf new file mode 100644 index 00000000000..79c8af29cd5 --- /dev/null +++ b/debian/libreoffice-base-nogui.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/base.xcd /etc/libreoffice/registry/base.xcd diff --git a/debian/libreoffice-base.NEWS b/debian/libreoffice-base.NEWS new file mode 100644 index 00000000000..b7a30f1a0e0 --- /dev/null +++ b/debian/libreoffice-base.NEWS @@ -0,0 +1,14 @@ +libreoffice (1:4.2.1-1) experimental; urgency=low + + * the database drivers have been split out to a new libreoffice-base-drivers + package. This package depends on most of them, but that explicitly + _does not_ include the HSQLDB SDBC Driver or the new Firebird SDBC Driver + (both for the embedded database) - whose because of their dependencies are + split into extra packages. + . + If you used a "normal" embedded database in your (old) database file you + _must_ install libreoffice-sdbc-hsqldb so that it can "connect" to it. + . + Similar with the new Firebird embedded database in 4.2 and -sdbc-firebird. + + -- Rene Engelhard Fri, 16 Aug 2013 10:21:53 +0200 diff --git a/debian/libreoffice-base.bug-control b/debian/libreoffice-base.bug-control new file mode 100644 index 00000000000..31f42c1f1f7 --- /dev/null +++ b/debian/libreoffice-base.bug-control @@ -0,0 +1,2 @@ +report-with: libreoffice-core +package-status: unixodbc libmyodbc odbc-postgresql libsqliteodbc tdsodbc mdbtools libmariadb-java libmysql-java libpg-java libsapdbc-java diff --git a/debian/libreoffice-base.lintian-overrides b/debian/libreoffice-base.lintian-overrides new file mode 100644 index 00000000000..d1500e8d835 --- /dev/null +++ b/debian/libreoffice-base.lintian-overrides @@ -0,0 +1 @@ +libreoffice-base: desktop-command-not-in-package usr/share/applications/libreoffice-base.desktop libreoffice diff --git a/debian/libreoffice-base.maintscript b/debian/libreoffice-base.maintscript new file mode 100644 index 00000000000..14d5ac448c5 --- /dev/null +++ b/debian/libreoffice-base.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-base /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-base.manpages b/debian/libreoffice-base.manpages new file mode 100644 index 00000000000..144eec74763 --- /dev/null +++ b/debian/libreoffice-base.manpages @@ -0,0 +1 @@ +debian/tmp/usr/share/man/man1/lobase.1.gz diff --git a/debian/libreoffice-base.mime b/debian/libreoffice-base.mime new file mode 100644 index 00000000000..3174fccf851 --- /dev/null +++ b/debian/libreoffice-base.mime @@ -0,0 +1,11 @@ +### +# shared-mime-info + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.database; soffice --nologo --base %s; edit=soffice --nologo --base %s; print=soffice --nologo --base -p %s; test=test -n "$DISPLAY"; description="OpenDocument Database"; nametemplate=%s.odb; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.base; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; description="OpenOffice.org Database"; nametemplate=%s.sdb; priority=8 + +# +### diff --git a/debian/libreoffice-base.preinst.in b/debian/libreoffice-base.preinst.in new file mode 100644 index 00000000000..08ab83ab0ba --- /dev/null +++ b/debian/libreoffice-base.preinst.in @@ -0,0 +1,21 @@ +#!/bin/sh + +set -e + +#INCLUDE_SHELL_LIB# + +if [ upgrade = "$1" ] || dpkg --compare-versions "$2" lt 1:6.4.0~beta1-2; then + dpkg-divert --remove --no-rename \ + --divert /usr/lib/libreoffice/share/basic/dialog.xlc.noaccess \ + /usr/lib/libreoffice/share/basic/dialog.xlc + dpkg-divert --remove --no-rename \ + --divert /usr/lib/libreoffice/share/basic/script.xlc.noaccess \ + /usr/lib/libreoffice/share/basic/script.xlc + # cleanup + rm -f /usr/lib/libreoffice/share/basic/script.xlc.noaccess + rm -f /usr/lib/libreoffice/share/basic/dialog.xlc.noaccess +fi + +#DEBHELPER# + +exit 0 diff --git a/debian/libreoffice-base.ucf b/debian/libreoffice-base.ucf new file mode 100644 index 00000000000..79c8af29cd5 --- /dev/null +++ b/debian/libreoffice-base.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/base.xcd /etc/libreoffice/registry/base.xcd diff --git a/debian/libreoffice-calc-nogui.lintian-overrides b/debian/libreoffice-calc-nogui.lintian-overrides new file mode 100644 index 00000000000..630bb42ecd4 --- /dev/null +++ b/debian/libreoffice-calc-nogui.lintian-overrides @@ -0,0 +1 @@ +libreoffice-calc-nogui: binary-or-shlib-defines-rpath diff --git a/debian/libreoffice-calc-nogui.mime b/debian/libreoffice-calc-nogui.mime new file mode 100644 index 00000000000..d306e622514 --- /dev/null +++ b/debian/libreoffice-calc-nogui.mime @@ -0,0 +1,37 @@ +### +# shared-mime-info + +# Generic +text/csv; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="CSV Document"; nametemplate=%s.csv; priority=3 +text/spreadsheet; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Spreadsheet Interchange Document"; nametemplate=%s.slk; priority=3 + +# Corel Quattro Pro +application/x-quattropro; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Quattro Pro 6 for Windows Spreadsheet"; nametemplate=%s.wb2; priority=3 + +# dBase dBASE +application/x-dbf; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="xBase Document"; nametemplate=%s.dbf; priority=3 + +# ECMA Office Open XML (Microsoft Office 2007) +application/vnd.ms-excel.sheet.macroEnabled.12; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Office Open XML Spreadsheet with Macros Enabled"; nametemplate=%s.xlsm; priority=3 +application/vnd.ms-excel.template.macroEnabled.12; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Office Open XML Spreadsheet Template with Macros Enabled"; nametemplate=%s.xltm; priority=3 +application/vnd.openxmlformats-officedocument.spreadsheetml.sheet; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Office Open XML Spreadsheet"; nametemplate=%s.xlsx; priority=3 +application/vnd.openxmlformats-officedocument.spreadsheetml.template; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Office Open XML Spreadsheet Template"; nametemplate=%s.xltx; priority=3 + +# IBM Lotus 1-2-3 +application/vnd.lotus-1-2-3; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Lotus 1-2-3 spreadsheet"; nametemplate=%s.123; priority=3 + +# Microsoft Excel +application/vnd.ms-excel; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Microsoft Excel Document"; nametemplate=%s.xls; priority=3 + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.chart; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; print=soffice --nologo --calc -p %s; test=test -n "$DISPLAY"; description="OpenDocument Chart"; nametemplate=%s.odc; priority=9 +application/vnd.oasis.opendocument.spreadsheet; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; print=soffice --nologo --calc -p %s; test=test -n "$DISPLAY"; description="OpenDocument Spreadsheet"; nametemplate=%s.ods; priority=9 +application/vnd.oasis.opendocument.spreadsheet-template; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; print=soffice --nologo --calc -p %s; test=test -n "$DISPLAY"; description="OpenDocument Spreadsheet Template"; nametemplate=%s.ots; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.calc; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="OpenOffice.org Spreadsheet"; nametemplate=%s.sxc; priority=8 +application/vnd.sun.xml.calc.template; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="OpenOffice.org Spreadsheet Template"; nametemplate=%s.stc; priority=8 + +# +### + diff --git a/debian/libreoffice-calc-nogui.ucf b/debian/libreoffice-calc-nogui.ucf new file mode 100644 index 00000000000..4820977edc1 --- /dev/null +++ b/debian/libreoffice-calc-nogui.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/calc.xcd /etc/libreoffice/registry/calc.xcd diff --git a/debian/libreoffice-calc.bug-control b/debian/libreoffice-calc.bug-control new file mode 100644 index 00000000000..1ac405f9788 --- /dev/null +++ b/debian/libreoffice-calc.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-core diff --git a/debian/libreoffice-calc.lintian-overrides b/debian/libreoffice-calc.lintian-overrides new file mode 100644 index 00000000000..004fc535988 --- /dev/null +++ b/debian/libreoffice-calc.lintian-overrides @@ -0,0 +1,2 @@ +libreoffice-calc: binary-or-shlib-defines-rpath +libreoffice-calc: desktop-command-not-in-package usr/share/applications/libreoffice-calc.desktop libreoffice diff --git a/debian/libreoffice-calc.maintscript b/debian/libreoffice-calc.maintscript new file mode 100644 index 00000000000..859933b7271 --- /dev/null +++ b/debian/libreoffice-calc.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-calc /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-calc.manpages b/debian/libreoffice-calc.manpages new file mode 100644 index 00000000000..a4b78ee3406 --- /dev/null +++ b/debian/libreoffice-calc.manpages @@ -0,0 +1,2 @@ +debian/tmp/usr/share/man/man1/localc.1.gz + diff --git a/debian/libreoffice-calc.mime b/debian/libreoffice-calc.mime new file mode 100644 index 00000000000..d306e622514 --- /dev/null +++ b/debian/libreoffice-calc.mime @@ -0,0 +1,37 @@ +### +# shared-mime-info + +# Generic +text/csv; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="CSV Document"; nametemplate=%s.csv; priority=3 +text/spreadsheet; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Spreadsheet Interchange Document"; nametemplate=%s.slk; priority=3 + +# Corel Quattro Pro +application/x-quattropro; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Quattro Pro 6 for Windows Spreadsheet"; nametemplate=%s.wb2; priority=3 + +# dBase dBASE +application/x-dbf; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="xBase Document"; nametemplate=%s.dbf; priority=3 + +# ECMA Office Open XML (Microsoft Office 2007) +application/vnd.ms-excel.sheet.macroEnabled.12; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Office Open XML Spreadsheet with Macros Enabled"; nametemplate=%s.xlsm; priority=3 +application/vnd.ms-excel.template.macroEnabled.12; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Office Open XML Spreadsheet Template with Macros Enabled"; nametemplate=%s.xltm; priority=3 +application/vnd.openxmlformats-officedocument.spreadsheetml.sheet; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Office Open XML Spreadsheet"; nametemplate=%s.xlsx; priority=3 +application/vnd.openxmlformats-officedocument.spreadsheetml.template; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Office Open XML Spreadsheet Template"; nametemplate=%s.xltx; priority=3 + +# IBM Lotus 1-2-3 +application/vnd.lotus-1-2-3; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Lotus 1-2-3 spreadsheet"; nametemplate=%s.123; priority=3 + +# Microsoft Excel +application/vnd.ms-excel; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="Microsoft Excel Document"; nametemplate=%s.xls; priority=3 + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.chart; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; print=soffice --nologo --calc -p %s; test=test -n "$DISPLAY"; description="OpenDocument Chart"; nametemplate=%s.odc; priority=9 +application/vnd.oasis.opendocument.spreadsheet; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; print=soffice --nologo --calc -p %s; test=test -n "$DISPLAY"; description="OpenDocument Spreadsheet"; nametemplate=%s.ods; priority=9 +application/vnd.oasis.opendocument.spreadsheet-template; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; print=soffice --nologo --calc -p %s; test=test -n "$DISPLAY"; description="OpenDocument Spreadsheet Template"; nametemplate=%s.ots; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.calc; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="OpenOffice.org Spreadsheet"; nametemplate=%s.sxc; priority=8 +application/vnd.sun.xml.calc.template; soffice --nologo --calc %s; edit=soffice --nologo --calc %s; test=test -n "$DISPLAY"; description="OpenOffice.org Spreadsheet Template"; nametemplate=%s.stc; priority=8 + +# +### + diff --git a/debian/libreoffice-calc.ucf b/debian/libreoffice-calc.ucf new file mode 100644 index 00000000000..4820977edc1 --- /dev/null +++ b/debian/libreoffice-calc.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/calc.xcd /etc/libreoffice/registry/calc.xcd diff --git a/debian/libreoffice-common.bug-control b/debian/libreoffice-common.bug-control new file mode 100644 index 00000000000..38da481c1f2 --- /dev/null +++ b/debian/libreoffice-common.bug-control @@ -0,0 +1 @@ +report-with: python-uno python3-uno diff --git a/debian/libreoffice-common.docs b/debian/libreoffice-common.docs new file mode 100644 index 00000000000..e2675791300 --- /dev/null +++ b/debian/libreoffice-common.docs @@ -0,0 +1 @@ +wizards/source/access2base/access2base.html diff --git a/debian/libreoffice-common.links.in b/debian/libreoffice-common.links.in new file mode 100644 index 00000000000..8365f3eefbf --- /dev/null +++ b/debian/libreoffice-common.links.in @@ -0,0 +1,37 @@ +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-database.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.database.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-drawing.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.drawing.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-drawing-template.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.drawing-template.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-formula.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.formula.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-master-document.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.master-document.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-presentation.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.presentation.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-presentation-template.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.presentation-template.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-spreadsheet.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.spreadsheet.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-spreadsheet-template.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.spreadsheet-template.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-text.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.text.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-text-template.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.text-template.png +usr/share/icons/hicolor/16x16/mimetypes/libreoffice-oasis-web-template.png usr/share/icons/hicolor/16x16/mimetypes/application-vnd.oasis.opendocument.web-template.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-database.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.database.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-drawing.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.drawing.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-drawing-template.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.drawing-template.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-formula.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.formula.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-master-document.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.master-document.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-presentation.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.presentation.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-presentation-template.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.presentation-template.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-spreadsheet.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.spreadsheet.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-spreadsheet-template.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.spreadsheet-template.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-text.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.text.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-text-template.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.text-template.png +usr/share/icons/hicolor/32x32/mimetypes/libreoffice-oasis-web-template.png usr/share/icons/hicolor/32x32/mimetypes/application-vnd.oasis.opendocument.web-template.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-database.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.database.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-drawing.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.drawing.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-drawing-template.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.drawing-template.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-formula.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.formula.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-master-document.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.master-document.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-presentation.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.presentation.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-presentation-template.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.presentation-template.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-spreadsheet.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.spreadsheet.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-spreadsheet-template.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.spreadsheet-template.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-text.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.text.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-text-template.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.text-template.png +usr/share/icons/hicolor/48x48/mimetypes/libreoffice-oasis-web-template.png usr/share/icons/hicolor/48x48/mimetypes/application-vnd.oasis.opendocument.web-template.png +etc/libreoffice/registry usr/lib/libreoffice/share/registry diff --git a/debian/libreoffice-common.lintian-overrides b/debian/libreoffice-common.lintian-overrides new file mode 100644 index 00000000000..efdaf3d980c --- /dev/null +++ b/debian/libreoffice-common.lintian-overrides @@ -0,0 +1,2 @@ +# this is essentially a breaks with version +libreoffice-common: breaks-without-version libreoffice-help-5.2 diff --git a/debian/libreoffice-common.maintscript b/debian/libreoffice-common.maintscript new file mode 100644 index 00000000000..5ef5e3d2f8c --- /dev/null +++ b/debian/libreoffice-common.maintscript @@ -0,0 +1,11 @@ +mv_conffile /etc/apparmor.d/usr.lib.libreofficeprogram.oosplash /etc/apparmor.d/usr.lib.libreoffice.program.oosplash 1:5.4.3-1 +mv_conffile /etc/apparmor.d/usr.lib.libreofficeprogram.senddoc /etc/apparmor.d/usr.lib.libreoffice.program.senddoc 1:5.4.3-1 +mv_conffile /etc/apparmor.d/usr.lib.libreofficeprogram.soffice.bin /etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin 1:5.4.3-1 +mv_conffile /etc/apparmor.d/usr.lib.libreofficeprogram.xpdfimport /etc/apparmor.d/usr.lib.libreoffice.program.xpdfimport 1:5.4.3-1 + +# do this manually since dpkg-maintscript-helper dir_to_symlink +# does not work reliably in this case because we cannot ensure that all +# conflicting packages previously shipping files in +# /usr/lib/libreoffice/share/registry are either upgraded or removed +# but not just deconfigured, see #985297 +#dir_to_symlink /usr/lib/libreoffice/share/registry /etc/libreoffice/registry 1:7.0.2~rc1-1 diff --git a/debian/libreoffice-common.manpages b/debian/libreoffice-common.manpages new file mode 100644 index 00000000000..37ce2e86511 --- /dev/null +++ b/debian/libreoffice-common.manpages @@ -0,0 +1,4 @@ +debian/tmp/usr/share/man/man1/libreoffice.1.gz +debian/tmp/usr/share/man/man1/loffice.1.gz +debian/tmp/usr/share/man/man1/unopkg.1.gz +debian/tmp/usr/share/man/man1/lofromtemplate.1.gz diff --git a/debian/libreoffice-common.postinst.in b/debian/libreoffice-common.postinst.in new file mode 100644 index 00000000000..dd95adf44a6 --- /dev/null +++ b/debian/libreoffice-common.postinst.in @@ -0,0 +1,43 @@ +#!/bin/sh + +set -e + +#INCLUDE_SHELL_LIB# + +if [ "$1" = "triggered" ]; then + for triggername in $2; do + case "$triggername" in + # new "bundled" extensions (since 3.3) + "/@OODIR@/share/extensions") + make_lo_sync_extensions + ;; + "/@OODIR@") + # check also whether /usr/bin/loolwsd-systemplate-setup + # is +x do to not fail when it's gone but + # /var/lib/lool/systemplate is still there (loolwsd + # removed but not purged) + if [ -x /usr/bin/loolwsd-systemplate-setup -a \ + -d /var/lib/lool/systemplate ]; then + update_lool_systemplate + fi + ;; + esac + done +fi + +#DEBHELPER# + +# do this manually since dpkg-maintscript-helper dir_to_symlink +# does not work reliably in this case because we cannot ensure that all +# conflicting packages previously shipping files in +# /usr/lib/libreoffice/share/registry are either upgraded or removed +# but not just deconfigured, see #985297 +if [ "$1" = "configure" ] && dpkg --compare-versions "$2" lt-nl "1:7.0.4-4~" ; then + if [ ! -L /usr/lib/libreoffice/share/registry ]; then + if [ -d /usr/lib/libreoffice/share/registry ]; then + # this will fail if the directory is not yet empty + rmdir -v /usr/lib/libreoffice/share/registry + fi + ln -sfvT /etc/libreoffice/registry /usr/lib/libreoffice/share/registry + fi +fi diff --git a/debian/libreoffice-common.postrm.in b/debian/libreoffice-common.postrm.in new file mode 100644 index 00000000000..c4471b59176 --- /dev/null +++ b/debian/libreoffice-common.postrm.in @@ -0,0 +1,26 @@ +#!/bin/sh + +set -e + +#INCLUDE_SHELL_LIB# + +case "$1" in + remove|abort-install|abort-upgrade) + rm -rf /`echo @OODIR@ | sed -e s,usr/,var/,g`/share/prereg/bundled + rmdir /`echo @OODIR@ | sed -e s,usr/,var/,g`/share/prereg/ || true + rmdir /`echo @OODIR@ | sed -e s,usr/,var/,g`/share/ || true + # this belongs to -core, but won't work until we have -common stuff removed, too, so try here again + # in adduition to -core + rmdir /`echo @OODIR@ | sed -e s,usr/,var/,g`/program/ || true + rmdir /`echo @OODIR@ | sed -e s,usr/,var/,g` || true + # and try to remove /@OOBRANDDIR@ itself + rmdir /`echo @OODIR@ | sed -e s,usr/,var/,g` || true + ;; + purge) + rm -f /`echo @OODIR@ | sed -e s,usr/,var/,g`/share/config/javasettingsunopkginstall.xml + rmdir /`echo @OODIR@ | sed -e s,usr/,var/,g`/share/config || true + rmdir /`echo @OODIR@ | sed -e s,usr/,var/,g`/share || true + ;; +esac + +#DEBHELPER# diff --git a/debian/libreoffice-common.triggers.in b/debian/libreoffice-common.triggers.in new file mode 100644 index 00000000000..274301752fe --- /dev/null +++ b/debian/libreoffice-common.triggers.in @@ -0,0 +1,2 @@ +interest-noawait /@OODIR@/share/extensions +interest-noawait /@OODIR@ diff --git a/debian/libreoffice-common.ucf b/debian/libreoffice-common.ucf new file mode 100644 index 00000000000..b929f5f9c37 --- /dev/null +++ b/debian/libreoffice-common.ucf @@ -0,0 +1,6 @@ +/usr/lib/libreoffice/share/.registry/main.xcd /etc/libreoffice/registry/main.xcd +/usr/lib/libreoffice/share/.registry/pdfimport.xcd /etc/libreoffice/registry/pdfimport.xcd +/usr/lib/libreoffice/share/.registry/xsltfilter.xcd /etc/libreoffice/registry/xsltfilter.xcd +/usr/lib/libreoffice/share/.registry/lingucomponent.xcd /etc/libreoffice/registry/lingucomponent.xcd +/usr/lib/libreoffice/share/.registry/Langpack-en-US.xcd /etc/libreoffice/registry/Langpack-en-US.xcd +/usr/lib/libreoffice/share/.registry/res/fcfg_langpack_en-US.xcd /etc/libreoffice/registry/res/fcfg_langpack_en-US.xcd diff --git a/debian/libreoffice-core-nogui.bug-control b/debian/libreoffice-core-nogui.bug-control new file mode 100644 index 00000000000..7896392642f --- /dev/null +++ b/debian/libreoffice-core-nogui.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-common libreoffice-java-common fonts-opensymbol diff --git a/debian/libreoffice-core-nogui.bug-script.in b/debian/libreoffice-core-nogui.bug-script.in new file mode 100755 index 00000000000..bba16b11cfc --- /dev/null +++ b/debian/libreoffice-core-nogui.bug-script.in @@ -0,0 +1,16 @@ +#!/bin/sh + +# list all installed extensions. --bundled, --shared and non-shared +/usr/lib/libreoffice/program/unopkg list --bundled >&3 +/usr/lib/libreoffice/program/unopkg list --shared >&3 +/usr/lib/libreoffice/program/unopkg list >&3 + +# experimental stuff enabled? +echo "" >&3 +echo "Experimental features enabled:" >&3 +#_lo_profile_ver=`echo @OOVER@ | cut -d. -f1` +_lo_profile_ver=4 +if [ -d "$HOME/.config/libreoffice/$_lo_profile_ver" ]; then + grep ExperimentalMode $HOME/.config/libreoffice/$_lo_profile_ver/user/registrymodifications.xcu >&3 +fi + diff --git a/debian/libreoffice-core-nogui.lintian-overrides b/debian/libreoffice-core-nogui.lintian-overrides new file mode 100644 index 00000000000..4c422e088c3 --- /dev/null +++ b/debian/libreoffice-core-nogui.lintian-overrides @@ -0,0 +1 @@ +libreoffice-core-nogui: embedded-library usr/lib/libreoffice/program/libpdfiumlo.so: openjpeg diff --git a/debian/libreoffice-core.bug-control b/debian/libreoffice-core.bug-control new file mode 100644 index 00000000000..f9456ca02a6 --- /dev/null +++ b/debian/libreoffice-core.bug-control @@ -0,0 +1,2 @@ +report-with: libreoffice-common libreoffice-java-common fonts-opensymbol +package-status: libxrender1 libxinerama1 libsane iceweasel firefox icedove iceape-browser pstoedit imagemagick fglrx-driver nvidia-glx nvidia-glx-legacy diff --git a/debian/libreoffice-core.bug-script.in b/debian/libreoffice-core.bug-script.in new file mode 100755 index 00000000000..2bfd1bea415 --- /dev/null +++ b/debian/libreoffice-core.bug-script.in @@ -0,0 +1,20 @@ +#!/bin/sh + +# list all installed extensions. --bundled, --shared and non-shared +/usr/lib/libreoffice/program/unopkg list --bundled >&3 +/usr/lib/libreoffice/program/unopkg list --shared >&3 +/usr/lib/libreoffice/program/unopkg list >&3 + +# experimental stuff enabled? +echo "" >&3 +echo "Experimental features enabled:" >&3 +#_lo_profile_ver=`echo @OOVER@ | cut -d. -f1` +_lo_profile_ver=4 +if [ -d "$HOME/.config/libreoffice/$_lo_profile_ver" ]; then + grep ExperimentalMode $HOME/.config/libreoffice/$_lo_profile_ver/user/registrymodifications.xcu >&3 +fi + +# installed VCLplugs +echo "" >&3 +echo "Installed VCLplugs:" >&3 +dpkg -l libreoffice-gtk3 libreoffice-qt5 libreoffice-kf5 >&3 diff --git a/debian/libreoffice-core.lintian-overrides b/debian/libreoffice-core.lintian-overrides new file mode 100644 index 00000000000..3a4d1d8b84d --- /dev/null +++ b/debian/libreoffice-core.lintian-overrides @@ -0,0 +1 @@ +libreoffice-core: embedded-library usr/lib/libreoffice/program/libpdfiumlo.so: openjpeg diff --git a/debian/libreoffice-core.maintscript b/debian/libreoffice-core.maintscript new file mode 100644 index 00000000000..926d53c1ae5 --- /dev/null +++ b/debian/libreoffice-core.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-core /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-core.postrm.in b/debian/libreoffice-core.postrm.in new file mode 100755 index 00000000000..95ed9cb4f46 --- /dev/null +++ b/debian/libreoffice-core.postrm.in @@ -0,0 +1,13 @@ +#!/bin/sh + +set -e + +#INCLUDE_SHELL_LIB# + +if [ "$1" = "remove" ]; then + rm -rf /var/spool/libreoffice +fi + +#DEBHELPER# + +exit 0 diff --git a/debian/libreoffice-dev-common.maintscript b/debian/libreoffice-dev-common.maintscript new file mode 100644 index 00000000000..d9ebd73ef24 --- /dev/null +++ b/debian/libreoffice-dev-common.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-dev-common /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-dev-doc.links b/debian/libreoffice-dev-doc.links new file mode 100644 index 00000000000..7e6fd17fba7 --- /dev/null +++ b/debian/libreoffice-dev-doc.links @@ -0,0 +1 @@ +usr/share/doc/libreoffice/sdk/docs usr/share/doc/libreoffice-dev-doc/api diff --git a/debian/libreoffice-dev.lintian-overrides b/debian/libreoffice-dev.lintian-overrides new file mode 100644 index 00000000000..f1338bb4535 --- /dev/null +++ b/debian/libreoffice-dev.lintian-overrides @@ -0,0 +1 @@ +libreoffice-dev: wrong-section-according-to-package-name libreoffice-dev => libdevel diff --git a/debian/libreoffice-dev.maintscript b/debian/libreoffice-dev.maintscript new file mode 100644 index 00000000000..dc89bb3d31d --- /dev/null +++ b/debian/libreoffice-dev.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-dev /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-draw-nogui.bug-control b/debian/libreoffice-draw-nogui.bug-control new file mode 100644 index 00000000000..1ac405f9788 --- /dev/null +++ b/debian/libreoffice-draw-nogui.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-core diff --git a/debian/libreoffice-draw-nogui.mime b/debian/libreoffice-draw-nogui.mime new file mode 100644 index 00000000000..e0b81d3bfb4 --- /dev/null +++ b/debian/libreoffice-draw-nogui.mime @@ -0,0 +1,13 @@ +### +# shared-mime-info + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.graphics; soffice --nologo --draw %s; edit=soffice --nologo --draw %s; print=soffice --nologo --draw -p %s; test=test -n "$DISPLAY"; description="OpenDocument Drawing"; nametemplate=%s.odg; priority=9 +application/vnd.oasis.opendocument.graphics-template; soffice --nologo --draw %s; edit=soffice --nologo --draw %s; print=soffice --nologo --draw -p %s; test=test -n "$DISPLAY"; description="OpenDocument Drawing Template"; nametemplate=%s.otg; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.draw; soffice --nologo --draw %s; edit=soffice --nologo --draw %s; test=test -n "$DISPLAY"; description="OpenOffice.org Drawing"; nametemplate=%s.sxd; priority=8 +application/vnd.sun.xml.draw.template; soffice --nologo --draw %s; edit=soffice --nologo --draw %s; test=test -n "$DISPLAY"; description="OpenOffice.org Drawing Template"; nametemplate=%s.std; priority=8 + +# +### diff --git a/debian/libreoffice-draw-nogui.ucf b/debian/libreoffice-draw-nogui.ucf new file mode 100644 index 00000000000..a1e42c709f6 --- /dev/null +++ b/debian/libreoffice-draw-nogui.ucf @@ -0,0 +1,2 @@ +/usr/lib/libreoffice/share/.registry/draw.xcd /etc/libreoffice/registry/draw.xcd +/usr/lib/libreoffice/share/.registry/graphicfilter.xcd /etc/libreoffice/registry/graphicfilter.xcd diff --git a/debian/libreoffice-draw.bug-control b/debian/libreoffice-draw.bug-control new file mode 100644 index 00000000000..1ac405f9788 --- /dev/null +++ b/debian/libreoffice-draw.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-core diff --git a/debian/libreoffice-draw.lintian-overrides b/debian/libreoffice-draw.lintian-overrides new file mode 100644 index 00000000000..12588b54def --- /dev/null +++ b/debian/libreoffice-draw.lintian-overrides @@ -0,0 +1 @@ +libreoffice-draw: desktop-command-not-in-package usr/share/applications/libreoffice-draw.desktop libreoffice diff --git a/debian/libreoffice-draw.maintscript b/debian/libreoffice-draw.maintscript new file mode 100644 index 00000000000..cf0ace643cf --- /dev/null +++ b/debian/libreoffice-draw.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-draw /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-draw.manpages b/debian/libreoffice-draw.manpages new file mode 100644 index 00000000000..3267e53d6e2 --- /dev/null +++ b/debian/libreoffice-draw.manpages @@ -0,0 +1 @@ +debian/tmp/usr/share/man/man1/lodraw.1.gz diff --git a/debian/libreoffice-draw.mime b/debian/libreoffice-draw.mime new file mode 100644 index 00000000000..e0b81d3bfb4 --- /dev/null +++ b/debian/libreoffice-draw.mime @@ -0,0 +1,13 @@ +### +# shared-mime-info + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.graphics; soffice --nologo --draw %s; edit=soffice --nologo --draw %s; print=soffice --nologo --draw -p %s; test=test -n "$DISPLAY"; description="OpenDocument Drawing"; nametemplate=%s.odg; priority=9 +application/vnd.oasis.opendocument.graphics-template; soffice --nologo --draw %s; edit=soffice --nologo --draw %s; print=soffice --nologo --draw -p %s; test=test -n "$DISPLAY"; description="OpenDocument Drawing Template"; nametemplate=%s.otg; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.draw; soffice --nologo --draw %s; edit=soffice --nologo --draw %s; test=test -n "$DISPLAY"; description="OpenOffice.org Drawing"; nametemplate=%s.sxd; priority=8 +application/vnd.sun.xml.draw.template; soffice --nologo --draw %s; edit=soffice --nologo --draw %s; test=test -n "$DISPLAY"; description="OpenOffice.org Drawing Template"; nametemplate=%s.std; priority=8 + +# +### diff --git a/debian/libreoffice-draw.ucf b/debian/libreoffice-draw.ucf new file mode 100644 index 00000000000..a1e42c709f6 --- /dev/null +++ b/debian/libreoffice-draw.ucf @@ -0,0 +1,2 @@ +/usr/lib/libreoffice/share/.registry/draw.xcd /etc/libreoffice/registry/draw.xcd +/usr/lib/libreoffice/share/.registry/graphicfilter.xcd /etc/libreoffice/registry/graphicfilter.xcd diff --git a/debian/libreoffice-evolution.bug-control b/debian/libreoffice-evolution.bug-control new file mode 100644 index 00000000000..aa427dea40d --- /dev/null +++ b/debian/libreoffice-evolution.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-core evolution libreoffice-base diff --git a/debian/libreoffice-evolution.maintscript b/debian/libreoffice-evolution.maintscript new file mode 100644 index 00000000000..3d581a38dbe --- /dev/null +++ b/debian/libreoffice-evolution.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-evolution /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-evolution.ucf b/debian/libreoffice-evolution.ucf new file mode 100644 index 00000000000..8b029ede374 --- /dev/null +++ b/debian/libreoffice-evolution.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/evoab.xcd /etc/libreoffice/registry/evoab.xcd diff --git a/debian/libreoffice-gnome.maintscript b/debian/libreoffice-gnome.maintscript new file mode 100644 index 00000000000..5ea20d66f35 --- /dev/null +++ b/debian/libreoffice-gnome.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-gnome /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-gnome.ucf b/debian/libreoffice-gnome.ucf new file mode 100644 index 00000000000..7306c2e357b --- /dev/null +++ b/debian/libreoffice-gnome.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/gnome.xcd /etc/libreoffice/registry/gnome.xcd diff --git a/debian/libreoffice-gtk3.maintscript b/debian/libreoffice-gtk3.maintscript new file mode 100644 index 00000000000..284aeadb753 --- /dev/null +++ b/debian/libreoffice-gtk3.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-gtk3 /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-help-ca-valencia.maintscript b/debian/libreoffice-help-ca-valencia.maintscript new file mode 100644 index 00000000000..333a3f817b1 --- /dev/null +++ b/debian/libreoffice-help-ca-valencia.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-ca-valencia /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-ca.maintscript b/debian/libreoffice-help-ca.maintscript new file mode 100644 index 00000000000..36688ec51d9 --- /dev/null +++ b/debian/libreoffice-help-ca.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-ca /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-common.links b/debian/libreoffice-help-common.links new file mode 100644 index 00000000000..48ab2acd4ce --- /dev/null +++ b/debian/libreoffice-help-common.links @@ -0,0 +1 @@ +/usr/share/javascript/normalize.css/normalize.css usr/share/libreoffice/help/normalize.css diff --git a/debian/libreoffice-help-common.maintscript b/debian/libreoffice-help-common.maintscript new file mode 100644 index 00000000000..635c1ca10f5 --- /dev/null +++ b/debian/libreoffice-help-common.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-common /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-cs.maintscript b/debian/libreoffice-help-cs.maintscript new file mode 100644 index 00000000000..24048eadd38 --- /dev/null +++ b/debian/libreoffice-help-cs.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-cs /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-da.maintscript b/debian/libreoffice-help-da.maintscript new file mode 100644 index 00000000000..fdf5f339b19 --- /dev/null +++ b/debian/libreoffice-help-da.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-da /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-de.maintscript b/debian/libreoffice-help-de.maintscript new file mode 100644 index 00000000000..d55b7661775 --- /dev/null +++ b/debian/libreoffice-help-de.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-de /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-dz.maintscript b/debian/libreoffice-help-dz.maintscript new file mode 100644 index 00000000000..d4fe0143039 --- /dev/null +++ b/debian/libreoffice-help-dz.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-dz /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-el.maintscript b/debian/libreoffice-help-el.maintscript new file mode 100644 index 00000000000..5ad40b15a77 --- /dev/null +++ b/debian/libreoffice-help-el.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-el /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-en-gb.maintscript b/debian/libreoffice-help-en-gb.maintscript new file mode 100644 index 00000000000..f0386001673 --- /dev/null +++ b/debian/libreoffice-help-en-gb.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-en-gb /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-en-us.maintscript b/debian/libreoffice-help-en-us.maintscript new file mode 100644 index 00000000000..a4a63f7dbb2 --- /dev/null +++ b/debian/libreoffice-help-en-us.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-en-us /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-es.maintscript b/debian/libreoffice-help-es.maintscript new file mode 100644 index 00000000000..2b04756b620 --- /dev/null +++ b/debian/libreoffice-help-es.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-es /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-et.maintscript b/debian/libreoffice-help-et.maintscript new file mode 100644 index 00000000000..d65fd19165c --- /dev/null +++ b/debian/libreoffice-help-et.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-et /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-eu.maintscript b/debian/libreoffice-help-eu.maintscript new file mode 100644 index 00000000000..e243177487a --- /dev/null +++ b/debian/libreoffice-help-eu.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-eu /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-fi.maintscript b/debian/libreoffice-help-fi.maintscript new file mode 100644 index 00000000000..93b944a1a45 --- /dev/null +++ b/debian/libreoffice-help-fi.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-fi /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-fr.maintscript b/debian/libreoffice-help-fr.maintscript new file mode 100644 index 00000000000..d94c693d367 --- /dev/null +++ b/debian/libreoffice-help-fr.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-fr /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-gl.maintscript b/debian/libreoffice-help-gl.maintscript new file mode 100644 index 00000000000..10cabd0e987 --- /dev/null +++ b/debian/libreoffice-help-gl.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-gl /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-hi.maintscript b/debian/libreoffice-help-hi.maintscript new file mode 100644 index 00000000000..34485e89c8e --- /dev/null +++ b/debian/libreoffice-help-hi.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-hi /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-hu.maintscript b/debian/libreoffice-help-hu.maintscript new file mode 100644 index 00000000000..9d307fbfc3b --- /dev/null +++ b/debian/libreoffice-help-hu.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-hu /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-id.maintscript b/debian/libreoffice-help-id.maintscript new file mode 100644 index 00000000000..9dfe92f51a1 --- /dev/null +++ b/debian/libreoffice-help-id.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-id /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-it.maintscript b/debian/libreoffice-help-it.maintscript new file mode 100644 index 00000000000..a9f1015ff56 --- /dev/null +++ b/debian/libreoffice-help-it.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-it /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-ja.maintscript b/debian/libreoffice-help-ja.maintscript new file mode 100644 index 00000000000..00db55cb21a --- /dev/null +++ b/debian/libreoffice-help-ja.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-ja /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-km.maintscript b/debian/libreoffice-help-km.maintscript new file mode 100644 index 00000000000..2fb9ccd6457 --- /dev/null +++ b/debian/libreoffice-help-km.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-km /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-ko.maintscript b/debian/libreoffice-help-ko.maintscript new file mode 100644 index 00000000000..aed2e03d649 --- /dev/null +++ b/debian/libreoffice-help-ko.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-ko /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-nl.maintscript b/debian/libreoffice-help-nl.maintscript new file mode 100644 index 00000000000..ab75a603e30 --- /dev/null +++ b/debian/libreoffice-help-nl.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-nl /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-om.maintscript b/debian/libreoffice-help-om.maintscript new file mode 100644 index 00000000000..64d5f549e39 --- /dev/null +++ b/debian/libreoffice-help-om.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-om /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-pl.maintscript b/debian/libreoffice-help-pl.maintscript new file mode 100644 index 00000000000..b1fca4d24d0 --- /dev/null +++ b/debian/libreoffice-help-pl.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-pl /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-pt-br.maintscript b/debian/libreoffice-help-pt-br.maintscript new file mode 100644 index 00000000000..ca4f77f6fbc --- /dev/null +++ b/debian/libreoffice-help-pt-br.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-pt-br /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-pt.maintscript b/debian/libreoffice-help-pt.maintscript new file mode 100644 index 00000000000..5d368903125 --- /dev/null +++ b/debian/libreoffice-help-pt.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-pt /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-ru.maintscript b/debian/libreoffice-help-ru.maintscript new file mode 100644 index 00000000000..13ff092f416 --- /dev/null +++ b/debian/libreoffice-help-ru.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-ru /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-sk.maintscript b/debian/libreoffice-help-sk.maintscript new file mode 100644 index 00000000000..9306f1976f1 --- /dev/null +++ b/debian/libreoffice-help-sk.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-sk /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-sl.maintscript b/debian/libreoffice-help-sl.maintscript new file mode 100644 index 00000000000..88eba79837b --- /dev/null +++ b/debian/libreoffice-help-sl.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-sl /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-sv.maintscript b/debian/libreoffice-help-sv.maintscript new file mode 100644 index 00000000000..4c230591aee --- /dev/null +++ b/debian/libreoffice-help-sv.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-sv /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-tr.maintscript b/debian/libreoffice-help-tr.maintscript new file mode 100644 index 00000000000..08522b12adc --- /dev/null +++ b/debian/libreoffice-help-tr.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-tr /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-vi.maintscript b/debian/libreoffice-help-vi.maintscript new file mode 100644 index 00000000000..c2ee611d03f --- /dev/null +++ b/debian/libreoffice-help-vi.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-vi /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-zh-cn.maintscript b/debian/libreoffice-help-zh-cn.maintscript new file mode 100644 index 00000000000..1e3c388c1b6 --- /dev/null +++ b/debian/libreoffice-help-zh-cn.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-zh-cn /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help-zh-tw.maintscript b/debian/libreoffice-help-zh-tw.maintscript new file mode 100644 index 00000000000..b13206f1914 --- /dev/null +++ b/debian/libreoffice-help-zh-tw.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-help-zh-tw /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-help.lintian-overrides.in b/debian/libreoffice-help.lintian-overrides.in new file mode 100644 index 00000000000..17fde6dd126 --- /dev/null +++ b/debian/libreoffice-help.lintian-overrides.in @@ -0,0 +1,15 @@ +# these are in -help-common. See lintian bug http://bugs.debian.org/897244 +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/media/* +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/help.html +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/idxcaption.xsl +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/fuse.js +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/help.js +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/hid2file.js +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/paginathing.js +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/idxcontent.xsl +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/index.html +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/normalize.css +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/main_transform.xsl +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/help2.js +doc-base-file-references-missing-file libreoffice-help-@LCODE@:8 /usr/share/libreoffice/help/default.css + diff --git a/debian/libreoffice-impress-nogui.bug-control b/debian/libreoffice-impress-nogui.bug-control new file mode 100644 index 00000000000..a3a052e7da4 --- /dev/null +++ b/debian/libreoffice-impress-nogui.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-core libreoffice-draw diff --git a/debian/libreoffice-impress-nogui.mime b/debian/libreoffice-impress-nogui.mime new file mode 100644 index 00000000000..ed8a11fd90b --- /dev/null +++ b/debian/libreoffice-impress-nogui.mime @@ -0,0 +1,25 @@ +### +# shared-mime-info + +# ECMA Office Open XML (Microsoft Office 2007) +application/vnd.ms-powerpoint.presentation.macroEnabled.12; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation with Macros Enabled"; nametemplate=%s.pptm; priority=3 +application/vnd.ms-powerpoint.slideshow.macroEnabled.12; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation Slide Show with Macros Enabled"; nametemplate=%s.ppsm; priority=3 +application/vnd.ms-powerpoint.template.macroEnabled.12; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation Template with Macros Enabled"; nametemplate=%s.potm; priority=3 +application/vnd.openxmlformats-officedocument.presentationml.presentation; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation"; nametemplate=%s.pptx; priority=3 +application/vnd.openxmlformats-officedocument.presentationml.slideshow; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation Slide Show"; nametemplate=%s.ppsx; priority=3 +application/vnd.openxmlformats-officedocument.presentationml.template; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation Template"; nametemplate=%s.potx; priority=3 + +# Microsoft PowerPoint +application/vnd.ms-powerpoint; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Microsoft PowerPoint Document"; nametemplate=%s.ppt; priority=3 + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.presentation; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; print=soffice --nologo --impress -p %s; test=test -n "$DISPLAY"; description="OpenDocument Presentation"; nametemplate=%s.odp; priority=9 +application/vnd.oasis.opendocument.presentation-template; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; print=soffice --nologo --impress -p %s; test=test -n "$DISPLAY"; description="OpenDocument Presentation Template"; nametemplate=%s.otp; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.impress; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="OpenOffice.org Presentation"; nametemplate=%s.sxi; priority=8 +application/vnd.sun.xml.impress.template; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="OpenOffice.org Presentation Template"; nametemplate=%s.sti; priority=8 + +# +### + diff --git a/debian/libreoffice-impress-nogui.ucf b/debian/libreoffice-impress-nogui.ucf new file mode 100644 index 00000000000..9a356136427 --- /dev/null +++ b/debian/libreoffice-impress-nogui.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/impress.xcd /etc/libreoffice/registry/impress.xcd diff --git a/debian/libreoffice-impress.bug-control b/debian/libreoffice-impress.bug-control new file mode 100644 index 00000000000..116fcdbd609 --- /dev/null +++ b/debian/libreoffice-impress.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-core libreoffice-draw fglrx-glx ia32-fglrx-glx nvidia-glx nvidia-glx-legacy diff --git a/debian/libreoffice-impress.lintian-overrides b/debian/libreoffice-impress.lintian-overrides new file mode 100644 index 00000000000..5df0b376ef9 --- /dev/null +++ b/debian/libreoffice-impress.lintian-overrides @@ -0,0 +1 @@ +libreoffice-impress: desktop-command-not-in-package usr/share/applications/libreoffice-impress.desktop libreoffice diff --git a/debian/libreoffice-impress.maintscript b/debian/libreoffice-impress.maintscript new file mode 100644 index 00000000000..06608cf8296 --- /dev/null +++ b/debian/libreoffice-impress.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-impress /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-impress.manpages b/debian/libreoffice-impress.manpages new file mode 100644 index 00000000000..60ab514ba8f --- /dev/null +++ b/debian/libreoffice-impress.manpages @@ -0,0 +1 @@ +debian/tmp/usr/share/man/man1/loimpress.1.gz diff --git a/debian/libreoffice-impress.mime b/debian/libreoffice-impress.mime new file mode 100644 index 00000000000..ed8a11fd90b --- /dev/null +++ b/debian/libreoffice-impress.mime @@ -0,0 +1,25 @@ +### +# shared-mime-info + +# ECMA Office Open XML (Microsoft Office 2007) +application/vnd.ms-powerpoint.presentation.macroEnabled.12; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation with Macros Enabled"; nametemplate=%s.pptm; priority=3 +application/vnd.ms-powerpoint.slideshow.macroEnabled.12; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation Slide Show with Macros Enabled"; nametemplate=%s.ppsm; priority=3 +application/vnd.ms-powerpoint.template.macroEnabled.12; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation Template with Macros Enabled"; nametemplate=%s.potm; priority=3 +application/vnd.openxmlformats-officedocument.presentationml.presentation; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation"; nametemplate=%s.pptx; priority=3 +application/vnd.openxmlformats-officedocument.presentationml.slideshow; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation Slide Show"; nametemplate=%s.ppsx; priority=3 +application/vnd.openxmlformats-officedocument.presentationml.template; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Office Open XML Presentation Template"; nametemplate=%s.potx; priority=3 + +# Microsoft PowerPoint +application/vnd.ms-powerpoint; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="Microsoft PowerPoint Document"; nametemplate=%s.ppt; priority=3 + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.presentation; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; print=soffice --nologo --impress -p %s; test=test -n "$DISPLAY"; description="OpenDocument Presentation"; nametemplate=%s.odp; priority=9 +application/vnd.oasis.opendocument.presentation-template; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; print=soffice --nologo --impress -p %s; test=test -n "$DISPLAY"; description="OpenDocument Presentation Template"; nametemplate=%s.otp; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.impress; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="OpenOffice.org Presentation"; nametemplate=%s.sxi; priority=8 +application/vnd.sun.xml.impress.template; soffice --nologo --impress %s; edit=soffice --nologo --impress %s; test=test -n "$DISPLAY"; description="OpenOffice.org Presentation Template"; nametemplate=%s.sti; priority=8 + +# +### + diff --git a/debian/libreoffice-impress.ucf b/debian/libreoffice-impress.ucf new file mode 100644 index 00000000000..a2680a010db --- /dev/null +++ b/debian/libreoffice-impress.ucf @@ -0,0 +1,2 @@ +/usr/lib/libreoffice/share/.registry/impress.xcd /etc/libreoffice/registry/impress.xcd +/usr/lib/libreoffice/share/.registry/ogltrans.xcd /etc/libreoffice/registry/ogltrans.xcd diff --git a/debian/libreoffice-java-common.maintscript b/debian/libreoffice-java-common.maintscript new file mode 100644 index 00000000000..38517c7819f --- /dev/null +++ b/debian/libreoffice-java-common.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-java-common /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-kde5.maintscript b/debian/libreoffice-kde5.maintscript new file mode 100644 index 00000000000..1711748cc1c --- /dev/null +++ b/debian/libreoffice-kde5.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-kde5 /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-kf5.maintscript b/debian/libreoffice-kf5.maintscript new file mode 100644 index 00000000000..37dbb42031e --- /dev/null +++ b/debian/libreoffice-kf5.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-kf5 /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-l10n-af.maintscript b/debian/libreoffice-l10n-af.maintscript new file mode 100644 index 00000000000..525bb4cbe5b --- /dev/null +++ b/debian/libreoffice-l10n-af.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-af /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-am.maintscript b/debian/libreoffice-l10n-am.maintscript new file mode 100644 index 00000000000..2df6ddb2a11 --- /dev/null +++ b/debian/libreoffice-l10n-am.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-am /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ar.maintscript b/debian/libreoffice-l10n-ar.maintscript new file mode 100644 index 00000000000..da522cadfaf --- /dev/null +++ b/debian/libreoffice-l10n-ar.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ar /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-as.maintscript b/debian/libreoffice-l10n-as.maintscript new file mode 100644 index 00000000000..926ab90bf80 --- /dev/null +++ b/debian/libreoffice-l10n-as.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-as /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ast.maintscript b/debian/libreoffice-l10n-ast.maintscript new file mode 100644 index 00000000000..df6ea667a14 --- /dev/null +++ b/debian/libreoffice-l10n-ast.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ast /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-be.maintscript b/debian/libreoffice-l10n-be.maintscript new file mode 100644 index 00000000000..53b4bd4f20c --- /dev/null +++ b/debian/libreoffice-l10n-be.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-be /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-bg.maintscript b/debian/libreoffice-l10n-bg.maintscript new file mode 100644 index 00000000000..e8ba2180efa --- /dev/null +++ b/debian/libreoffice-l10n-bg.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-bg /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-bn.maintscript b/debian/libreoffice-l10n-bn.maintscript new file mode 100644 index 00000000000..78da9606611 --- /dev/null +++ b/debian/libreoffice-l10n-bn.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-bn /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-br.maintscript b/debian/libreoffice-l10n-br.maintscript new file mode 100644 index 00000000000..d92f24031e2 --- /dev/null +++ b/debian/libreoffice-l10n-br.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-br /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-bs.maintscript b/debian/libreoffice-l10n-bs.maintscript new file mode 100644 index 00000000000..1178e5a468f --- /dev/null +++ b/debian/libreoffice-l10n-bs.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-bs /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ca.maintscript b/debian/libreoffice-l10n-ca.maintscript new file mode 100644 index 00000000000..471887d422d --- /dev/null +++ b/debian/libreoffice-l10n-ca.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ca /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-cs.maintscript b/debian/libreoffice-l10n-cs.maintscript new file mode 100644 index 00000000000..29d0c0ab488 --- /dev/null +++ b/debian/libreoffice-l10n-cs.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-cs /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-cy.maintscript b/debian/libreoffice-l10n-cy.maintscript new file mode 100644 index 00000000000..3b30f967db0 --- /dev/null +++ b/debian/libreoffice-l10n-cy.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-cy /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-da.maintscript b/debian/libreoffice-l10n-da.maintscript new file mode 100644 index 00000000000..3cbf1d478ed --- /dev/null +++ b/debian/libreoffice-l10n-da.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-da /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-de.maintscript b/debian/libreoffice-l10n-de.maintscript new file mode 100644 index 00000000000..68063de7be6 --- /dev/null +++ b/debian/libreoffice-l10n-de.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-de /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-dz.maintscript b/debian/libreoffice-l10n-dz.maintscript new file mode 100644 index 00000000000..76c519778f7 --- /dev/null +++ b/debian/libreoffice-l10n-dz.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-dz /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-el.maintscript b/debian/libreoffice-l10n-el.maintscript new file mode 100644 index 00000000000..f9f850b3806 --- /dev/null +++ b/debian/libreoffice-l10n-el.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-el /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-en-gb.maintscript b/debian/libreoffice-l10n-en-gb.maintscript new file mode 100644 index 00000000000..f0ecabcb91a --- /dev/null +++ b/debian/libreoffice-l10n-en-gb.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-en-gb /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-en-us.maintscript b/debian/libreoffice-l10n-en-us.maintscript new file mode 100644 index 00000000000..edba2604b30 --- /dev/null +++ b/debian/libreoffice-l10n-en-us.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-en-us /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-en-za.maintscript b/debian/libreoffice-l10n-en-za.maintscript new file mode 100644 index 00000000000..1897e7b1ebd --- /dev/null +++ b/debian/libreoffice-l10n-en-za.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-en-za /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-eo.maintscript b/debian/libreoffice-l10n-eo.maintscript new file mode 100644 index 00000000000..67345012c76 --- /dev/null +++ b/debian/libreoffice-l10n-eo.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-eo /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-es.maintscript b/debian/libreoffice-l10n-es.maintscript new file mode 100644 index 00000000000..e3287c665bf --- /dev/null +++ b/debian/libreoffice-l10n-es.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-es /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-et.maintscript b/debian/libreoffice-l10n-et.maintscript new file mode 100644 index 00000000000..c3e25bb4085 --- /dev/null +++ b/debian/libreoffice-l10n-et.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-et /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-eu.maintscript b/debian/libreoffice-l10n-eu.maintscript new file mode 100644 index 00000000000..a503c6d2430 --- /dev/null +++ b/debian/libreoffice-l10n-eu.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-eu /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-fa.maintscript b/debian/libreoffice-l10n-fa.maintscript new file mode 100644 index 00000000000..4b7029651ff --- /dev/null +++ b/debian/libreoffice-l10n-fa.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-fa /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-fi.maintscript b/debian/libreoffice-l10n-fi.maintscript new file mode 100644 index 00000000000..cf6d4494e40 --- /dev/null +++ b/debian/libreoffice-l10n-fi.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-fi /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-fr.maintscript b/debian/libreoffice-l10n-fr.maintscript new file mode 100644 index 00000000000..6d3134977e7 --- /dev/null +++ b/debian/libreoffice-l10n-fr.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-fr /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ga.maintscript b/debian/libreoffice-l10n-ga.maintscript new file mode 100644 index 00000000000..165629c369a --- /dev/null +++ b/debian/libreoffice-l10n-ga.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ga /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-gd.maintscript b/debian/libreoffice-l10n-gd.maintscript new file mode 100644 index 00000000000..4748b698bdd --- /dev/null +++ b/debian/libreoffice-l10n-gd.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-gd /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-gl.maintscript b/debian/libreoffice-l10n-gl.maintscript new file mode 100644 index 00000000000..4abfef89e38 --- /dev/null +++ b/debian/libreoffice-l10n-gl.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-gl /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-gu.maintscript b/debian/libreoffice-l10n-gu.maintscript new file mode 100644 index 00000000000..d28f9b66835 --- /dev/null +++ b/debian/libreoffice-l10n-gu.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-gu /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-gug.maintscript b/debian/libreoffice-l10n-gug.maintscript new file mode 100644 index 00000000000..22caeda6f2a --- /dev/null +++ b/debian/libreoffice-l10n-gug.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-gug /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-he.maintscript b/debian/libreoffice-l10n-he.maintscript new file mode 100644 index 00000000000..48c588cb7f3 --- /dev/null +++ b/debian/libreoffice-l10n-he.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-he /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-hi.maintscript b/debian/libreoffice-l10n-hi.maintscript new file mode 100644 index 00000000000..c1aafd373c4 --- /dev/null +++ b/debian/libreoffice-l10n-hi.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-hi /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-hr.maintscript b/debian/libreoffice-l10n-hr.maintscript new file mode 100644 index 00000000000..7924ca0526a --- /dev/null +++ b/debian/libreoffice-l10n-hr.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-hr /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-hu.maintscript b/debian/libreoffice-l10n-hu.maintscript new file mode 100644 index 00000000000..042765e9d1a --- /dev/null +++ b/debian/libreoffice-l10n-hu.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-hu /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-id.maintscript b/debian/libreoffice-l10n-id.maintscript new file mode 100644 index 00000000000..e18551b2567 --- /dev/null +++ b/debian/libreoffice-l10n-id.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-id /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-in.lintian-overrides b/debian/libreoffice-l10n-in.lintian-overrides new file mode 100644 index 00000000000..5b67277e05e --- /dev/null +++ b/debian/libreoffice-l10n-in.lintian-overrides @@ -0,0 +1,2 @@ +# this is a metapackage, so actually "metapackages" is correct, IMHO +libreoffice-l10n-in: wrong-section-according-to-package-name libreoffice-l10n-in => localization diff --git a/debian/libreoffice-l10n-in.maintscript b/debian/libreoffice-l10n-in.maintscript new file mode 100644 index 00000000000..230d48c463b --- /dev/null +++ b/debian/libreoffice-l10n-in.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-in /usr/share/doc/libreoffice-common 1:6.4.0-1 diff --git a/debian/libreoffice-l10n-is.maintscript b/debian/libreoffice-l10n-is.maintscript new file mode 100644 index 00000000000..3631a6a5e29 --- /dev/null +++ b/debian/libreoffice-l10n-is.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-is /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-it.maintscript b/debian/libreoffice-l10n-it.maintscript new file mode 100644 index 00000000000..18be5b42753 --- /dev/null +++ b/debian/libreoffice-l10n-it.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-it /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ja.maintscript b/debian/libreoffice-l10n-ja.maintscript new file mode 100644 index 00000000000..7ce61040abf --- /dev/null +++ b/debian/libreoffice-l10n-ja.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ja /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ka.maintscript b/debian/libreoffice-l10n-ka.maintscript new file mode 100644 index 00000000000..869811523d3 --- /dev/null +++ b/debian/libreoffice-l10n-ka.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ka /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-kk.maintscript b/debian/libreoffice-l10n-kk.maintscript new file mode 100644 index 00000000000..b749dd7befa --- /dev/null +++ b/debian/libreoffice-l10n-kk.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-kk /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-km.maintscript b/debian/libreoffice-l10n-km.maintscript new file mode 100644 index 00000000000..30a3839251c --- /dev/null +++ b/debian/libreoffice-l10n-km.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-km /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-kmr.maintscript b/debian/libreoffice-l10n-kmr.maintscript new file mode 100644 index 00000000000..d7405d3c537 --- /dev/null +++ b/debian/libreoffice-l10n-kmr.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-kmr /usr/share/doc/libreoffice-common 1:6.4.0-1 diff --git a/debian/libreoffice-l10n-kn.maintscript b/debian/libreoffice-l10n-kn.maintscript new file mode 100644 index 00000000000..6d4a37380e2 --- /dev/null +++ b/debian/libreoffice-l10n-kn.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-kn /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ko.maintscript b/debian/libreoffice-l10n-ko.maintscript new file mode 100644 index 00000000000..2054fa9e9c3 --- /dev/null +++ b/debian/libreoffice-l10n-ko.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ko /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-lt.maintscript b/debian/libreoffice-l10n-lt.maintscript new file mode 100644 index 00000000000..1cac226ffe1 --- /dev/null +++ b/debian/libreoffice-l10n-lt.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-lt /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-lv.maintscript b/debian/libreoffice-l10n-lv.maintscript new file mode 100644 index 00000000000..7df01156315 --- /dev/null +++ b/debian/libreoffice-l10n-lv.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-lv /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-mk.maintscript b/debian/libreoffice-l10n-mk.maintscript new file mode 100644 index 00000000000..597b3b75b39 --- /dev/null +++ b/debian/libreoffice-l10n-mk.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-mk /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ml.maintscript b/debian/libreoffice-l10n-ml.maintscript new file mode 100644 index 00000000000..1c377d55840 --- /dev/null +++ b/debian/libreoffice-l10n-ml.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ml /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-mn.maintscript b/debian/libreoffice-l10n-mn.maintscript new file mode 100644 index 00000000000..d1a6d0eb918 --- /dev/null +++ b/debian/libreoffice-l10n-mn.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-mn /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-mr.maintscript b/debian/libreoffice-l10n-mr.maintscript new file mode 100644 index 00000000000..e2c755e9261 --- /dev/null +++ b/debian/libreoffice-l10n-mr.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-mr /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-nb.maintscript b/debian/libreoffice-l10n-nb.maintscript new file mode 100644 index 00000000000..db282443662 --- /dev/null +++ b/debian/libreoffice-l10n-nb.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-nb /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ne.maintscript b/debian/libreoffice-l10n-ne.maintscript new file mode 100644 index 00000000000..464ae4b6596 --- /dev/null +++ b/debian/libreoffice-l10n-ne.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ne /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-nl.maintscript b/debian/libreoffice-l10n-nl.maintscript new file mode 100644 index 00000000000..700d4976abc --- /dev/null +++ b/debian/libreoffice-l10n-nl.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-nl /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-nn.maintscript b/debian/libreoffice-l10n-nn.maintscript new file mode 100644 index 00000000000..b5f2d1700a6 --- /dev/null +++ b/debian/libreoffice-l10n-nn.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-nn /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-nr.maintscript b/debian/libreoffice-l10n-nr.maintscript new file mode 100644 index 00000000000..b619763e618 --- /dev/null +++ b/debian/libreoffice-l10n-nr.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-nr /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-nso.maintscript b/debian/libreoffice-l10n-nso.maintscript new file mode 100644 index 00000000000..bb4394ed373 --- /dev/null +++ b/debian/libreoffice-l10n-nso.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-nso /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-oc.maintscript b/debian/libreoffice-l10n-oc.maintscript new file mode 100644 index 00000000000..b71f2f337b0 --- /dev/null +++ b/debian/libreoffice-l10n-oc.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-oc /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-om.maintscript b/debian/libreoffice-l10n-om.maintscript new file mode 100644 index 00000000000..976dc254be2 --- /dev/null +++ b/debian/libreoffice-l10n-om.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-om /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-or.maintscript b/debian/libreoffice-l10n-or.maintscript new file mode 100644 index 00000000000..b3b20c55b04 --- /dev/null +++ b/debian/libreoffice-l10n-or.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-or /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-pa-in.maintscript b/debian/libreoffice-l10n-pa-in.maintscript new file mode 100644 index 00000000000..3cf7b3bfb58 --- /dev/null +++ b/debian/libreoffice-l10n-pa-in.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-pa-in /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-pl.maintscript b/debian/libreoffice-l10n-pl.maintscript new file mode 100644 index 00000000000..08b60dc449d --- /dev/null +++ b/debian/libreoffice-l10n-pl.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-pl /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-pt-br.maintscript b/debian/libreoffice-l10n-pt-br.maintscript new file mode 100644 index 00000000000..f7541ad333e --- /dev/null +++ b/debian/libreoffice-l10n-pt-br.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-pt-br /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-pt.maintscript b/debian/libreoffice-l10n-pt.maintscript new file mode 100644 index 00000000000..fb7c10cd21c --- /dev/null +++ b/debian/libreoffice-l10n-pt.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-pt /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ro.maintscript b/debian/libreoffice-l10n-ro.maintscript new file mode 100644 index 00000000000..0d5acb33b06 --- /dev/null +++ b/debian/libreoffice-l10n-ro.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ro /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ru.maintscript b/debian/libreoffice-l10n-ru.maintscript new file mode 100644 index 00000000000..1956e1c32f4 --- /dev/null +++ b/debian/libreoffice-l10n-ru.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ru /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-rw.maintscript b/debian/libreoffice-l10n-rw.maintscript new file mode 100644 index 00000000000..545193530b2 --- /dev/null +++ b/debian/libreoffice-l10n-rw.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-rw /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-si.maintscript b/debian/libreoffice-l10n-si.maintscript new file mode 100644 index 00000000000..092ada5e4e9 --- /dev/null +++ b/debian/libreoffice-l10n-si.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-si /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-sk.maintscript b/debian/libreoffice-l10n-sk.maintscript new file mode 100644 index 00000000000..f2913ab5acf --- /dev/null +++ b/debian/libreoffice-l10n-sk.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-sk /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-sl.maintscript b/debian/libreoffice-l10n-sl.maintscript new file mode 100644 index 00000000000..301770cf62b --- /dev/null +++ b/debian/libreoffice-l10n-sl.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-sl /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-sr.maintscript b/debian/libreoffice-l10n-sr.maintscript new file mode 100644 index 00000000000..761543ff8e5 --- /dev/null +++ b/debian/libreoffice-l10n-sr.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-sr /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ss.maintscript b/debian/libreoffice-l10n-ss.maintscript new file mode 100644 index 00000000000..349d0a7839a --- /dev/null +++ b/debian/libreoffice-l10n-ss.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ss /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-st.maintscript b/debian/libreoffice-l10n-st.maintscript new file mode 100644 index 00000000000..e5a9f05ee59 --- /dev/null +++ b/debian/libreoffice-l10n-st.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-st /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-sv.maintscript b/debian/libreoffice-l10n-sv.maintscript new file mode 100644 index 00000000000..0f6f76c0f9b --- /dev/null +++ b/debian/libreoffice-l10n-sv.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-sv /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ta.maintscript b/debian/libreoffice-l10n-ta.maintscript new file mode 100644 index 00000000000..799d8537247 --- /dev/null +++ b/debian/libreoffice-l10n-ta.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ta /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-te.maintscript b/debian/libreoffice-l10n-te.maintscript new file mode 100644 index 00000000000..ed90e6e43ac --- /dev/null +++ b/debian/libreoffice-l10n-te.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-te /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-tg.maintscript b/debian/libreoffice-l10n-tg.maintscript new file mode 100644 index 00000000000..6c51ccf65be --- /dev/null +++ b/debian/libreoffice-l10n-tg.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-tg /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-th.maintscript b/debian/libreoffice-l10n-th.maintscript new file mode 100644 index 00000000000..fa87878f140 --- /dev/null +++ b/debian/libreoffice-l10n-th.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-th /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-tn.maintscript b/debian/libreoffice-l10n-tn.maintscript new file mode 100644 index 00000000000..b64f5ded3c4 --- /dev/null +++ b/debian/libreoffice-l10n-tn.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-tn /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-tr.maintscript b/debian/libreoffice-l10n-tr.maintscript new file mode 100644 index 00000000000..b41b6e9ae04 --- /dev/null +++ b/debian/libreoffice-l10n-tr.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-tr /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ts.maintscript b/debian/libreoffice-l10n-ts.maintscript new file mode 100644 index 00000000000..b6596f519d2 --- /dev/null +++ b/debian/libreoffice-l10n-ts.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ts /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ug.maintscript b/debian/libreoffice-l10n-ug.maintscript new file mode 100644 index 00000000000..7a295b33fa2 --- /dev/null +++ b/debian/libreoffice-l10n-ug.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ug /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-uk.maintscript b/debian/libreoffice-l10n-uk.maintscript new file mode 100644 index 00000000000..2436b0da19e --- /dev/null +++ b/debian/libreoffice-l10n-uk.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-uk /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-uz.maintscript b/debian/libreoffice-l10n-uz.maintscript new file mode 100644 index 00000000000..bf8c49dd17b --- /dev/null +++ b/debian/libreoffice-l10n-uz.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-uz /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-ve.maintscript b/debian/libreoffice-l10n-ve.maintscript new file mode 100644 index 00000000000..1c772524a52 --- /dev/null +++ b/debian/libreoffice-l10n-ve.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-ve /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-vi.maintscript b/debian/libreoffice-l10n-vi.maintscript new file mode 100644 index 00000000000..0d15db97c40 --- /dev/null +++ b/debian/libreoffice-l10n-vi.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-vi /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-xh.maintscript b/debian/libreoffice-l10n-xh.maintscript new file mode 100644 index 00000000000..3803ac4ffca --- /dev/null +++ b/debian/libreoffice-l10n-xh.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-xh /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-za.lintian-overrides b/debian/libreoffice-l10n-za.lintian-overrides new file mode 100644 index 00000000000..3c1bc8861b3 --- /dev/null +++ b/debian/libreoffice-l10n-za.lintian-overrides @@ -0,0 +1,2 @@ +# this is a metapackage, so actually "metapackages" is correct, IMHO +libreoffice-l10n-za: wrong-section-according-to-package-name libreoffice-l10n-za => localization diff --git a/debian/libreoffice-l10n-za.maintscript b/debian/libreoffice-l10n-za.maintscript new file mode 100644 index 00000000000..8a568e69e61 --- /dev/null +++ b/debian/libreoffice-l10n-za.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-za /usr/share/doc/libreoffice-common 1:6.4.0-1 diff --git a/debian/libreoffice-l10n-zh-cn.maintscript b/debian/libreoffice-l10n-zh-cn.maintscript new file mode 100644 index 00000000000..a74dbb38dd1 --- /dev/null +++ b/debian/libreoffice-l10n-zh-cn.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-zh-cn /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-zh-tw.maintscript b/debian/libreoffice-l10n-zh-tw.maintscript new file mode 100644 index 00000000000..e2b741c2661 --- /dev/null +++ b/debian/libreoffice-l10n-zh-tw.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-zh-tw /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n-zu.maintscript b/debian/libreoffice-l10n-zu.maintscript new file mode 100644 index 00000000000..d796b050006 --- /dev/null +++ b/debian/libreoffice-l10n-zu.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-l10n-zu /usr/share/doc/libreoffice-common 1:6.4.0~rc1~git20191209 diff --git a/debian/libreoffice-l10n.ucf.in b/debian/libreoffice-l10n.ucf.in new file mode 100644 index 00000000000..ed228509b74 --- /dev/null +++ b/debian/libreoffice-l10n.ucf.in @@ -0,0 +1,3 @@ +/usr/lib/libreoffice/share/.registry/Langpack-@ISO@.xcd /etc/libreoffice/registry/Langpack-@ISO@.xcd +/usr/lib/libreoffice/share/.registry/res/fcfg_langpack_@ISO@.xcd /etc/libreoffice/registry/res/fcfg_langpack_@ISO@.xcd +/usr/lib/libreoffice/share/.registry/res/registry_@ISO@.xcd /etc/libreoffice/registry/res/registry_@ISO@.xcd diff --git a/debian/libreoffice-librelogo.ucf b/debian/libreoffice-librelogo.ucf new file mode 100644 index 00000000000..e2300cf795d --- /dev/null +++ b/debian/libreoffice-librelogo.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/librelogo.xcd /etc/libreoffice/registry/librelogo.xcd diff --git a/debian/libreoffice-math-nogui.bug-control b/debian/libreoffice-math-nogui.bug-control new file mode 100644 index 00000000000..1ac405f9788 --- /dev/null +++ b/debian/libreoffice-math-nogui.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-core diff --git a/debian/libreoffice-math-nogui.mime b/debian/libreoffice-math-nogui.mime new file mode 100644 index 00000000000..ea648287795 --- /dev/null +++ b/debian/libreoffice-math-nogui.mime @@ -0,0 +1,14 @@ +### +# shared-mime-info + +# Generic +text/mathml; soffice --nologo --math %s; edit=soffice --nologo --math %s; test=test -n "$DISPLAY"; description="MathML Formula"; nametemplate=%s.mml; priority=3 + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.formula; soffice --nologo --math %s; edit=soffice --nologo --math %s; print=soffice --nologo --math -p %s; test=test -n "$DISPLAY"; description="OpenDocument Formula"; nametemplate=%s.odf; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.math; soffice --nologo --math %s; edit=soffice --nologo --math %s; test=test -n "$DISPLAY"; description="OpenOffice.org Formula"; nametemplate=%s.sxm; priority=8 + +# +### diff --git a/debian/libreoffice-math-nogui.ucf b/debian/libreoffice-math-nogui.ucf new file mode 100644 index 00000000000..3ee48a87f1c --- /dev/null +++ b/debian/libreoffice-math-nogui.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/math.xcd /etc/libreoffice/registry/math.xcd diff --git a/debian/libreoffice-math.bug-control b/debian/libreoffice-math.bug-control new file mode 100644 index 00000000000..1ac405f9788 --- /dev/null +++ b/debian/libreoffice-math.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-core diff --git a/debian/libreoffice-math.lintian-overrides b/debian/libreoffice-math.lintian-overrides new file mode 100644 index 00000000000..bf3665b50c3 --- /dev/null +++ b/debian/libreoffice-math.lintian-overrides @@ -0,0 +1 @@ +libreoffice-math: desktop-command-not-in-package usr/share/applications/libreoffice-math.desktop libreoffice diff --git a/debian/libreoffice-math.maintscript b/debian/libreoffice-math.maintscript new file mode 100644 index 00000000000..9dbb1675652 --- /dev/null +++ b/debian/libreoffice-math.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-math /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-math.manpages b/debian/libreoffice-math.manpages new file mode 100644 index 00000000000..6798b1e6b4e --- /dev/null +++ b/debian/libreoffice-math.manpages @@ -0,0 +1 @@ +debian/tmp/usr/share/man/man1/lomath.1.gz diff --git a/debian/libreoffice-math.mime b/debian/libreoffice-math.mime new file mode 100644 index 00000000000..ea648287795 --- /dev/null +++ b/debian/libreoffice-math.mime @@ -0,0 +1,14 @@ +### +# shared-mime-info + +# Generic +text/mathml; soffice --nologo --math %s; edit=soffice --nologo --math %s; test=test -n "$DISPLAY"; description="MathML Formula"; nametemplate=%s.mml; priority=3 + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.formula; soffice --nologo --math %s; edit=soffice --nologo --math %s; print=soffice --nologo --math -p %s; test=test -n "$DISPLAY"; description="OpenDocument Formula"; nametemplate=%s.odf; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.math; soffice --nologo --math %s; edit=soffice --nologo --math %s; test=test -n "$DISPLAY"; description="OpenOffice.org Formula"; nametemplate=%s.sxm; priority=8 + +# +### diff --git a/debian/libreoffice-math.ucf b/debian/libreoffice-math.ucf new file mode 100644 index 00000000000..3ee48a87f1c --- /dev/null +++ b/debian/libreoffice-math.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/math.xcd /etc/libreoffice/registry/math.xcd diff --git a/debian/libreoffice-mysql-connector.maintscript b/debian/libreoffice-mysql-connector.maintscript new file mode 100644 index 00000000000..92715c940b7 --- /dev/null +++ b/debian/libreoffice-mysql-connector.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-mysql-connector /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-nlpsolver.bug-script.in b/debian/libreoffice-nlpsolver.bug-script.in new file mode 100755 index 00000000000..84085335315 --- /dev/null +++ b/debian/libreoffice-nlpsolver.bug-script.in @@ -0,0 +1,2 @@ +#!/bin/sh +/usr/lib/libreoffice/program/unopkg list --bundled com.sun.star.comp.Calc.NLPSolver >&3 diff --git a/debian/libreoffice-nlpsolver.lintian-overrides b/debian/libreoffice-nlpsolver.lintian-overrides new file mode 100644 index 00000000000..447d371403f --- /dev/null +++ b/debian/libreoffice-nlpsolver.lintian-overrides @@ -0,0 +1 @@ +libreoffice-nlpsolver: jar-not-in-usr-share usr/lib/libreoffice/share/extensions/nlpsolver/help/*/help.jar diff --git a/debian/libreoffice-officebean.maintscript b/debian/libreoffice-officebean.maintscript new file mode 100644 index 00000000000..eec3d3bc150 --- /dev/null +++ b/debian/libreoffice-officebean.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-officebean /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-plasma.maintscript b/debian/libreoffice-plasma.maintscript new file mode 100644 index 00000000000..8c7e556f54b --- /dev/null +++ b/debian/libreoffice-plasma.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-plasma /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-qt5.maintscript b/debian/libreoffice-qt5.maintscript new file mode 100644 index 00000000000..4e11d0bcdc7 --- /dev/null +++ b/debian/libreoffice-qt5.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-qt5 /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-report-builder-bin.maintscript b/debian/libreoffice-report-builder-bin.maintscript new file mode 100644 index 00000000000..c31cc3b6c40 --- /dev/null +++ b/debian/libreoffice-report-builder-bin.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-report-builder-bin /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-report-builder.bug-control b/debian/libreoffice-report-builder.bug-control new file mode 100644 index 00000000000..48ef942e313 --- /dev/null +++ b/debian/libreoffice-report-builder.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-base diff --git a/debian/libreoffice-report-builder.maintscript b/debian/libreoffice-report-builder.maintscript new file mode 100644 index 00000000000..d2d3e3371e3 --- /dev/null +++ b/debian/libreoffice-report-builder.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-report-builder /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-report-builder.ucf b/debian/libreoffice-report-builder.ucf new file mode 100644 index 00000000000..60247c8f4aa --- /dev/null +++ b/debian/libreoffice-report-builder.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/reportbuilder.xcd /etc/libreoffice/registry/reportbuilder.xcd diff --git a/debian/libreoffice-script-provider-bsh.maintscript b/debian/libreoffice-script-provider-bsh.maintscript new file mode 100644 index 00000000000..0c4d00fde2f --- /dev/null +++ b/debian/libreoffice-script-provider-bsh.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-script-provider-bsh /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-script-provider-js.maintscript b/debian/libreoffice-script-provider-js.maintscript new file mode 100644 index 00000000000..db3fd3c0191 --- /dev/null +++ b/debian/libreoffice-script-provider-js.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-script-provider-js /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-script-provider-python.bug-control b/debian/libreoffice-script-provider-python.bug-control new file mode 100644 index 00000000000..38da481c1f2 --- /dev/null +++ b/debian/libreoffice-script-provider-python.bug-control @@ -0,0 +1 @@ +report-with: python-uno python3-uno diff --git a/debian/libreoffice-script-provider-python.maintscript b/debian/libreoffice-script-provider-python.maintscript new file mode 100644 index 00000000000..64f0371e035 --- /dev/null +++ b/debian/libreoffice-script-provider-python.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-script-provider-python /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-sdbc-firebird.NEWS b/debian/libreoffice-sdbc-firebird.NEWS new file mode 100644 index 00000000000..00d810308fa --- /dev/null +++ b/debian/libreoffice-sdbc-firebird.NEWS @@ -0,0 +1,21 @@ +libreoffice (1:5.3.0~alpha1-1) experimental; urgency=low + + * LibreOffice switched from Firebird 2.5 to Firebird 3. Unfortunately + the format used by the Firebird 2.5 code (fdb - the native on-disk format) + is NOT compatible with the "new" one (the archive format). LibreOffice 5.3 + can NOT read older .odbs having .fdb embedded. + + Some future firebird version might have a way to convert itself/make LO + able to convert but until then you need to convert manually as follows: + + You need the gbak tool from firebird2.5: + https://packages.debian.org/search?searchon=contents&keywords=gbak&mode=exactfilename&suite=oldstable&arch=any + + Then execute: + unzip -d oldFirebird.odb temp; + gbak -b temp/database/firebird.fdb temp/database/firebird.fbk; + rm temp/database/firebird.fdb + zip -FSr oldFirebird.odb temp; + rm -r temp; + + -- Rene Engelhard Mon, 28 Nov 2016 10:27:15 +0200 diff --git a/debian/libreoffice-sdbc-firebird.maintscript b/debian/libreoffice-sdbc-firebird.maintscript new file mode 100644 index 00000000000..b59864812c9 --- /dev/null +++ b/debian/libreoffice-sdbc-firebird.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-sdbc-firebird /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-sdbc-hsqldb.maintscript b/debian/libreoffice-sdbc-hsqldb.maintscript new file mode 100644 index 00000000000..007b4a273f1 --- /dev/null +++ b/debian/libreoffice-sdbc-hsqldb.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-sdbc-hsqldb /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-sdbc-mysql.maintscript b/debian/libreoffice-sdbc-mysql.maintscript new file mode 100644 index 00000000000..7e4102688b0 --- /dev/null +++ b/debian/libreoffice-sdbc-mysql.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-sdbc-mysql /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-sdbc-postgresql.maintscript b/debian/libreoffice-sdbc-postgresql.maintscript new file mode 100644 index 00000000000..923b4b4248d --- /dev/null +++ b/debian/libreoffice-sdbc-postgresql.maintscript @@ -0,0 +1,2 @@ +symlink_to_dir /usr/share/doc/libreoffice-sdbc-postgresql /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 +rm_conffile /etc/libreoffice/postgresql-sdbc.ini 1:6.4.0~alpha1~git20191027 diff --git a/debian/libreoffice-sdbc-postgresql.ucf b/debian/libreoffice-sdbc-postgresql.ucf new file mode 100644 index 00000000000..81b5d510f2c --- /dev/null +++ b/debian/libreoffice-sdbc-postgresql.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/postgresql.xcd /etc/libreoffice/registry/postgresql.xcd diff --git a/debian/libreoffice-style-breeze.maintscript b/debian/libreoffice-style-breeze.maintscript new file mode 100644 index 00000000000..a124622c3fa --- /dev/null +++ b/debian/libreoffice-style-breeze.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-style-breeze /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-style-colibre.maintscript b/debian/libreoffice-style-colibre.maintscript new file mode 100644 index 00000000000..26f3ed60c10 --- /dev/null +++ b/debian/libreoffice-style-colibre.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-style-colibre /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-style-elementary.maintscript b/debian/libreoffice-style-elementary.maintscript new file mode 100644 index 00000000000..82d78895a5f --- /dev/null +++ b/debian/libreoffice-style-elementary.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-style-elementary /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-style-karasa-jaga.maintscript b/debian/libreoffice-style-karasa-jaga.maintscript new file mode 100644 index 00000000000..c3e34cfbbee --- /dev/null +++ b/debian/libreoffice-style-karasa-jaga.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-style-karasa-jaga /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-style-sifr.maintscript b/debian/libreoffice-style-sifr.maintscript new file mode 100644 index 00000000000..ff95171c6e5 --- /dev/null +++ b/debian/libreoffice-style-sifr.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-style-sifr /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-style-tango.maintscript b/debian/libreoffice-style-tango.maintscript new file mode 100644 index 00000000000..886e586861f --- /dev/null +++ b/debian/libreoffice-style-tango.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-style-tango /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-subsequentcheckbase.maintscript b/debian/libreoffice-subsequentcheckbase.maintscript new file mode 100644 index 00000000000..e4f4547d183 --- /dev/null +++ b/debian/libreoffice-subsequentcheckbase.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-subsequentcheckbase /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-wiki-publisher.bug-script.in b/debian/libreoffice-wiki-publisher.bug-script.in new file mode 100755 index 00000000000..9497e5ca079 --- /dev/null +++ b/debian/libreoffice-wiki-publisher.bug-script.in @@ -0,0 +1,2 @@ +#!/bin/sh +/usr/lib/libreoffice/program/unopkg list --bundled com.sun.wiki-publisher >&3 diff --git a/debian/libreoffice-wiki-publisher.lintian-overrides b/debian/libreoffice-wiki-publisher.lintian-overrides new file mode 100644 index 00000000000..82dc8202233 --- /dev/null +++ b/debian/libreoffice-wiki-publisher.lintian-overrides @@ -0,0 +1 @@ +libreoffice-wiki-publisher: jar-not-in-usr-share usr/lib/libreoffice/share/extensions/wiki-publisher/help/*/help.jar diff --git a/debian/libreoffice-writer-nogui.bug-control b/debian/libreoffice-writer-nogui.bug-control new file mode 100644 index 00000000000..1ac405f9788 --- /dev/null +++ b/debian/libreoffice-writer-nogui.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-core diff --git a/debian/libreoffice-writer-nogui.mime b/debian/libreoffice-writer-nogui.mime new file mode 100644 index 00000000000..fb38a25029d --- /dev/null +++ b/debian/libreoffice-writer-nogui.mime @@ -0,0 +1,37 @@ +### +# shared-mime-info + +# Generic +application/rtf; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Rich Text Format"; nametemplate=%s.rtf; priority=3 +application/x-extension-txt; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Plain Text Document"; nametemplate=%s.txt; priority=3 +application/x-t602; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="T602 Document"; nametemplate=%s.602; priority=3 + +# Corel WordPerfect +application/vnd.wordperfect; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="WordPerfect Document"; nametemplate=%s.wp; priority=3 + +# ECMA Office Open XML (Microsoft Office 2007) +application/vnd.ms-word.document.macroEnabled.12; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Office Open XML Document with Macros Enabled"; nametemplate=%s.docm; priority=3 +application/vnd.ms-word.template.macroEnabled.12; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Office Open XML Document Template with Macros Enabled"; nametemplate=%s.dotm; priority=3 +application/vnd.openxmlformats-officedocument.wordprocessingml.document; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Office Open XML Document"; nametemplate=%s.docx; priority=3 +application/vnd.openxmlformats-officedocument.wordprocessingml.template; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Office Open XML Document Template"; nametemplate=%s.dotx; priority=3 + +# Microsoft Word +application/msword; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Microsoft Word Document"; nametemplate=%s.doc; priority=3 + +# Microsoft Works +application/vnd.ms-works; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Microsoft Works Document"; nametemplate=%s.wps; priority=3 + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.text; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; print=soffice --nologo --writer -p %s; test=test -n "$DISPLAY"; description="OpenDocument Text Document"; nametemplate=%s.odt; priority=9 +application/vnd.oasis.opendocument.text-master; soffice --nologo --global %s; edit=soffice --nologo --writer %s; print=soffice --nologo --writer -p %s; test=test -n "$DISPLAY"; description="OpenDocument Master Document"; nametemplate=%s.odm; priority=9 +application/vnd.oasis.opendocument.text-template; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; print=soffice --nologo --writer -p %s; test=test -n "$DISPLAY"; description="OpenDocument Text Document Template"; nametemplate=%s.ott; priority=9 +application/vnd.oasis.opendocument.text-web; soffice --nologo --web %s; edit=soffice --nologo --web %s; print=soffice --nologo --web -p %s; test=test -n "$DISPLAY"; description="OpenDocument HTML Document Template"; nametemplate=%s.oth; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.writer; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; description="OpenOffice.org Text Document"; nametemplate=%s.sxw; priority=8 +application/vnd.sun.xml.writer.global; soffice --nologo --global %s; edit=soffice --nologo --writer %s; description="OpenOffice.org Master Document"; nametemplate=%s.sxg; priority=8 +application/vnd.sun.xml.writer.template; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; description="OpenOffice.org Text Document Template"; nametemplate=%s.stw; priority=8 + +# +### + diff --git a/debian/libreoffice-writer-nogui.ucf b/debian/libreoffice-writer-nogui.ucf new file mode 100644 index 00000000000..1b9239ce8f3 --- /dev/null +++ b/debian/libreoffice-writer-nogui.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/writer.xcd /etc/libreoffice/registry/writer.xcd diff --git a/debian/libreoffice-writer.bug-control b/debian/libreoffice-writer.bug-control new file mode 100644 index 00000000000..1ac405f9788 --- /dev/null +++ b/debian/libreoffice-writer.bug-control @@ -0,0 +1 @@ +report-with: libreoffice-core diff --git a/debian/libreoffice-writer.lintian-overrides b/debian/libreoffice-writer.lintian-overrides new file mode 100644 index 00000000000..08563077e14 --- /dev/null +++ b/debian/libreoffice-writer.lintian-overrides @@ -0,0 +1 @@ +libreoffice-writer: desktop-command-not-in-package usr/share/applications/libreoffice-writer.desktop libreoffice diff --git a/debian/libreoffice-writer.maintscript b/debian/libreoffice-writer.maintscript new file mode 100644 index 00000000000..829e8be5d3d --- /dev/null +++ b/debian/libreoffice-writer.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreoffice-writer /usr/share/doc/libreoffice-core 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreoffice-writer.manpages b/debian/libreoffice-writer.manpages new file mode 100644 index 00000000000..53c4e248a63 --- /dev/null +++ b/debian/libreoffice-writer.manpages @@ -0,0 +1,3 @@ +debian/tmp/usr/share/man/man1/loweb.1.gz +debian/tmp/usr/share/man/man1/lowriter.1.gz + diff --git a/debian/libreoffice-writer.mime b/debian/libreoffice-writer.mime new file mode 100644 index 00000000000..fb38a25029d --- /dev/null +++ b/debian/libreoffice-writer.mime @@ -0,0 +1,37 @@ +### +# shared-mime-info + +# Generic +application/rtf; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Rich Text Format"; nametemplate=%s.rtf; priority=3 +application/x-extension-txt; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Plain Text Document"; nametemplate=%s.txt; priority=3 +application/x-t602; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="T602 Document"; nametemplate=%s.602; priority=3 + +# Corel WordPerfect +application/vnd.wordperfect; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="WordPerfect Document"; nametemplate=%s.wp; priority=3 + +# ECMA Office Open XML (Microsoft Office 2007) +application/vnd.ms-word.document.macroEnabled.12; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Office Open XML Document with Macros Enabled"; nametemplate=%s.docm; priority=3 +application/vnd.ms-word.template.macroEnabled.12; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Office Open XML Document Template with Macros Enabled"; nametemplate=%s.dotm; priority=3 +application/vnd.openxmlformats-officedocument.wordprocessingml.document; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Office Open XML Document"; nametemplate=%s.docx; priority=3 +application/vnd.openxmlformats-officedocument.wordprocessingml.template; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Office Open XML Document Template"; nametemplate=%s.dotx; priority=3 + +# Microsoft Word +application/msword; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Microsoft Word Document"; nametemplate=%s.doc; priority=3 + +# Microsoft Works +application/vnd.ms-works; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; test=test -n "$DISPLAY"; description="Microsoft Works Document"; nametemplate=%s.wps; priority=3 + +# OASIS OpenDocument Format +application/vnd.oasis.opendocument.text; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; print=soffice --nologo --writer -p %s; test=test -n "$DISPLAY"; description="OpenDocument Text Document"; nametemplate=%s.odt; priority=9 +application/vnd.oasis.opendocument.text-master; soffice --nologo --global %s; edit=soffice --nologo --writer %s; print=soffice --nologo --writer -p %s; test=test -n "$DISPLAY"; description="OpenDocument Master Document"; nametemplate=%s.odm; priority=9 +application/vnd.oasis.opendocument.text-template; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; print=soffice --nologo --writer -p %s; test=test -n "$DISPLAY"; description="OpenDocument Text Document Template"; nametemplate=%s.ott; priority=9 +application/vnd.oasis.opendocument.text-web; soffice --nologo --web %s; edit=soffice --nologo --web %s; print=soffice --nologo --web -p %s; test=test -n "$DISPLAY"; description="OpenDocument HTML Document Template"; nametemplate=%s.oth; priority=9 + +# OpenOffice.org 1.0 +application/vnd.sun.xml.writer; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; description="OpenOffice.org Text Document"; nametemplate=%s.sxw; priority=8 +application/vnd.sun.xml.writer.global; soffice --nologo --global %s; edit=soffice --nologo --writer %s; description="OpenOffice.org Master Document"; nametemplate=%s.sxg; priority=8 +application/vnd.sun.xml.writer.template; soffice --nologo --writer %s; edit=soffice --nologo --writer %s; description="OpenOffice.org Text Document Template"; nametemplate=%s.stw; priority=8 + +# +### + diff --git a/debian/libreoffice-writer.ucf b/debian/libreoffice-writer.ucf new file mode 100644 index 00000000000..1b9239ce8f3 --- /dev/null +++ b/debian/libreoffice-writer.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/writer.xcd /etc/libreoffice/registry/writer.xcd diff --git a/debian/libreoffice.bug-control b/debian/libreoffice.bug-control new file mode 100644 index 00000000000..21ad6ad79a4 --- /dev/null +++ b/debian/libreoffice.bug-control @@ -0,0 +1,2 @@ +report-with: libreoffice-core libreoffice-writer libreoffice-calc libreoffice-base libreoffice-draw libreoffice-impress libreoffice-math + diff --git a/debian/libreofficekit-data.maintscript b/debian/libreofficekit-data.maintscript new file mode 100644 index 00000000000..3c2a9168289 --- /dev/null +++ b/debian/libreofficekit-data.maintscript @@ -0,0 +1 @@ +symlink_to_dir /usr/share/doc/libreofficekit-data /usr/share/doc/libreoffice-common 1:6.4.0~alpha1~git20191013 diff --git a/debian/libreofficekit-dev.docs b/debian/libreofficekit-dev.docs new file mode 100644 index 00000000000..d9f2643255b --- /dev/null +++ b/debian/libreofficekit-dev.docs @@ -0,0 +1 @@ +libreofficekit/README diff --git a/debian/libridl-java.lintian-overrides b/debian/libridl-java.lintian-overrides new file mode 100644 index 00000000000..73d383acd5e --- /dev/null +++ b/debian/libridl-java.lintian-overrides @@ -0,0 +1 @@ +libridl-java: codeless-jar usr/share/java/ridl-*.jar diff --git a/debian/libridl-java.poms b/debian/libridl-java.poms new file mode 100644 index 00000000000..40880baf584 --- /dev/null +++ b/debian/libridl-java.poms @@ -0,0 +1,28 @@ +# List of POM files for the package +# Format of this file is: +# [option]* +# where option can be: +# --ignore: ignore this POM and its artifact if any +# --ignore-pom: don't install the POM. To use on POM files that are created +# temporarily for certain artifacts such as Javadoc jars. [mh_install, mh_installpoms] +# --no-parent: remove the tag from the POM +# --package=: an alternative package to use when installing this POM +# and its artifact +# --has-package-version: to indicate that the original version of the POM is the same as the upstream part +# of the version for the package. +# --keep-elements=: a list of XML elements to keep in the POM +# during a clean operation with mh_cleanpom or mh_installpom +# --artifact=: path to the build artifact associated with this POM, +# it will be installed when using the command mh_install. [mh_install] +# --java-lib: install the jar into /usr/share/java to comply with Debian +# packaging guidelines +# --usj-name=: name to use when installing the library in /usr/share/java +# --usj-version=: version to use when installing the library in /usr/share/java +# --no-usj-versionless: don't install the versionless link in /usr/share/java +# --dest-jar=: the destination for the real jar. +# It will be installed with mh_install. [mh_install] +# --classifier=: Optional, the classifier for the jar. Empty by default. +# --site-xml=: Optional, the location for site.xml if it needs to be installed. +# Empty by default. [mh_install] +# +debian/pom.ridl.xml --no-parent --has-package-version diff --git a/debian/libuno-cppu3.symbols b/debian/libuno-cppu3.symbols new file mode 100644 index 00000000000..ff5b936500b --- /dev/null +++ b/debian/libuno-cppu3.symbols @@ -0,0 +1,9 @@ +libuno_cppu.so.3 libuno-cppu3 #MINVER# + (symver)UDK_3_0_0 1.4.0 + (symver)UDK_3.1 1.4.0 + (symver)UDK_3.2 1.4.0 + (symver)UDK_3.3 1.4.0 + (symver)LIBO_UDK_4.4 4.4.0~alpha +# add new stuff BELOW this line +# and note that the stuff above HAS NO epoch but the +# below HAS diff --git a/debian/libuno-cppuhelpergcc3-3.lintian-overrides b/debian/libuno-cppuhelpergcc3-3.lintian-overrides new file mode 100644 index 00000000000..569c47cfd4c --- /dev/null +++ b/debian/libuno-cppuhelpergcc3-3.lintian-overrides @@ -0,0 +1 @@ +libuno-cppuhelpergcc3-3: symbols-declares-dependency-on-other-package uno-libs-private diff --git a/debian/libuno-cppuhelpergcc3-3.symbols b/debian/libuno-cppuhelpergcc3-3.symbols new file mode 100644 index 00000000000..41510b3e80c --- /dev/null +++ b/debian/libuno-cppuhelpergcc3-3.symbols @@ -0,0 +1,15 @@ +libuno_cppuhelpergcc3.so.3 libuno-cppuhelpergcc3-3 #MINVER#, uno-libs-private + (symver)UDK_3_0_0 1.4.0 + (symver)UDK_3.1 1.4.0 + (symver)UDK_3.2 1.4.0 + (symver)UDK_3.3 1.4.0 + (symver)UDK_3.4 1.4.0 + (symver)UDK_3.5 1.4.0 + (symver)UDK_3.6 1.7.0 + (symver)UDK_3.7 3.4.0 + (symver)UDK_3.8 3.5.0~beta + (symver)LIBO_UDK_3.9 4.0.0~alpha + (symver)LIBO_UDK_5.3 5.3.0~alpha +# add new stuff BELOW this line +# and note that the stuff above HAS NO epoch but the +# below HAS diff --git a/debian/libuno-purpenvhelpergcc3-3.symbols b/debian/libuno-purpenvhelpergcc3-3.symbols new file mode 100644 index 00000000000..a6e7f57f0c7 --- /dev/null +++ b/debian/libuno-purpenvhelpergcc3-3.symbols @@ -0,0 +1,5 @@ +libuno_purpenvhelpergcc3.so.3 libuno-purpenvhelpergcc3-3 #MINVER# + (symver)UDK_3_0_0 1.4.0 +# add new stuff BELOW this line +# and note that the stuff above HAS NO epoch but the +# below HAS diff --git a/debian/libuno-sal3.symbols b/debian/libuno-sal3.symbols new file mode 100644 index 00000000000..60ee56aa7b9 --- /dev/null +++ b/debian/libuno-sal3.symbols @@ -0,0 +1,38 @@ +libuno_sal.so.3 libuno-sal3 #MINVER# + (symver)UDK_3_0_0 1.4.0 + (symver)UDK_3.1 1.4.0 + (symver)UDK_3.2 1.4.0 + (symver)UDK_3.3 1.4.0 + (symver)UDK_3.4 1.4.0 + (symver)UDK_3.5 1.4.0 + (symver)UDK_3.6 1.4.0 + (symver)UDK_3.7 1.4.0 + (symver)UDK_3.8 1.4.0 + (symver)UDK_3.9 1.5.0 + (symver)UDK_3.10 1.6.0 + UDK_3.11@UDK_3.11 1.7.0+LibO3.3.0~beta3 + osl_clearEnvironment@UDK_3.11 1.7.0+LibO3.3.0~beta3 + osl_setEnvironment@UDK_3.11 1.7.0+LibO3.3.0~beta3 + (symver)UDK_3.11 1.8.0 + (symver)PRIVATE_1.0 3.3.0~ + (symver)PRIVATE_1.1 3.3.0~ + (symver)LIBO_UDK_3.5 3.5.0~beta + (symver)PRIVATE_1.2 3.5.0~beta + (symver)PRIVATE_textenc.1 3.6.0~beta + (symver)LIBO_UDK_3.6 4.0.0~alpha + (symver)LIBO_UDK_4.0 4.0.0~beta + (symver)LIBO_UDK_4.1 4.1.0~alpha + (symver)LIBO_UDK_4.2 4.2.0~rc1 + (symver)LIBO_UDK_4.3 4.3.0~alpha + (symver)LIBO_UDK_5.0 5.0.0~alpha + (symver)LIBO_UDK_5.1 5.1.0~alpha + (symver)LIBO_UDK_5.2 5.2.0~alpha + (symver)LIBO_UDK_5.3 5.3.0~alpha + (symver)LIBO_UDK_6.2 6.2.0~alpha + (symver)PRIVATE_1.3 5.4.0~alpha + (symver)PRIVATE_1.4 6.0.0~alpha + (symver)PRIVATE_1.5 6.1.0~alpha + (symver)PRIVATE_1.6 6.4.0~beta +# add new stuff BELOW this line +# and note that the stuff above HAS NO epoch but the +# below HAS diff --git a/debian/libuno-salhelpergcc3-3.symbols b/debian/libuno-salhelpergcc3-3.symbols new file mode 100644 index 00000000000..e57ccbff6bc --- /dev/null +++ b/debian/libuno-salhelpergcc3-3.symbols @@ -0,0 +1,7 @@ +libuno_salhelpergcc3.so.3 libuno-salhelpergcc3-3 #MINVER# + (symver)UDK_3_0_0 1.4.0 + (symver)UDK_3.1 1.4.0 + (symver)LIBO_UDK_3.6 3.6.0~beta +# add new stuff BELOW this line +# and note that the stuff above HAS NO epoch but the +# below HAS diff --git a/debian/libunoil-java.lintian-overrides b/debian/libunoil-java.lintian-overrides new file mode 100644 index 00000000000..3c5ae462fc2 --- /dev/null +++ b/debian/libunoil-java.lintian-overrides @@ -0,0 +1 @@ +libunoil-java: codeless-jar usr/share/java/unoil-*.jar diff --git a/debian/libunoil-java.poms b/debian/libunoil-java.poms new file mode 100644 index 00000000000..fcc4eec6e4c --- /dev/null +++ b/debian/libunoil-java.poms @@ -0,0 +1,28 @@ +# List of POM files for the package +# Format of this file is: +# [option]* +# where option can be: +# --ignore: ignore this POM and its artifact if any +# --ignore-pom: don't install the POM. To use on POM files that are created +# temporarily for certain artifacts such as Javadoc jars. [mh_install, mh_installpoms] +# --no-parent: remove the tag from the POM +# --package=: an alternative package to use when installing this POM +# and its artifact +# --has-package-version: to indicate that the original version of the POM is the same as the upstream part +# of the version for the package. +# --keep-elements=: a list of XML elements to keep in the POM +# during a clean operation with mh_cleanpom or mh_installpom +# --artifact=: path to the build artifact associated with this POM, +# it will be installed when using the command mh_install. [mh_install] +# --java-lib: install the jar into /usr/share/java to comply with Debian +# packaging guidelines +# --usj-name=: name to use when installing the library in /usr/share/java +# --usj-version=: version to use when installing the library in /usr/share/java +# --no-usj-versionless: don't install the versionless link in /usr/share/java +# --dest-jar=: the destination for the real jar. +# It will be installed with mh_install. [mh_install] +# --classifier=: Optional, the classifier for the jar. Empty by default. +# --site-xml=: Optional, the location for site.xml if it needs to be installed. +# Empty by default. [mh_install] +# +debian/pom.unoil.xml --no-parent --has-package-version diff --git a/debian/libunoloader-java.poms b/debian/libunoloader-java.poms new file mode 100644 index 00000000000..e89019b4b1f --- /dev/null +++ b/debian/libunoloader-java.poms @@ -0,0 +1,28 @@ +# List of POM files for the package +# Format of this file is: +# [option]* +# where option can be: +# --ignore: ignore this POM and its artifact if any +# --ignore-pom: don't install the POM. To use on POM files that are created +# temporarily for certain artifacts such as Javadoc jars. [mh_install, mh_installpoms] +# --no-parent: remove the tag from the POM +# --package=: an alternative package to use when installing this POM +# and its artifact +# --has-package-version: to indicate that the original version of the POM is the same as the upstream part +# of the version for the package. +# --keep-elements=: a list of XML elements to keep in the POM +# during a clean operation with mh_cleanpom or mh_installpom +# --artifact=: path to the build artifact associated with this POM, +# it will be installed when using the command mh_install. [mh_install] +# --java-lib: install the jar into /usr/share/java to comply with Debian +# packaging guidelines +# --usj-name=: name to use when installing the library in /usr/share/java +# --usj-version=: version to use when installing the library in /usr/share/java +# --no-usj-versionless: don't install the versionless link in /usr/share/java +# --dest-jar=: the destination for the real jar. +# It will be installed with mh_install. [mh_install] +# --classifier=: Optional, the classifier for the jar. Empty by default. +# --site-xml=: Optional, the location for site.xml if it needs to be installed. +# Empty by default. [mh_install] +# +debian/pom.unoloader.xml --no-parent --has-package-version diff --git a/debian/patches/0001-CVE-2022-26305-compare-authors-using-Thumbprint.patch b/debian/patches/0001-CVE-2022-26305-compare-authors-using-Thumbprint.patch new file mode 100644 index 00000000000..e02b110f8fd --- /dev/null +++ b/debian/patches/0001-CVE-2022-26305-compare-authors-using-Thumbprint.patch @@ -0,0 +1,63 @@ +From 77f30ada1156ca1e1357776fea8e9dc113f6898d Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Caol=C3=A1n=20McNamara?= +Date: Thu, 3 Mar 2022 14:22:37 +0000 +Subject: [PATCH 1/4] CVE-2022-26305 compare authors using Thumbprint + +Change-Id: I338f58eb07cbf0a3d13a7dafdaddac09252a8546 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/130929 +Tested-by: Jenkins +Reviewed-by: Miklos Vajna +(cherry picked from commit 65442205b5b274ad309308162f150f8d41648f72) +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/130866 +Reviewed-by: Michael Stahl +(cherry picked from commit a7aaa78acea4c1d51283c2fce54ff9f5339026f8) +--- + .../component/documentdigitalsignatures.cxx | 23 +++++++++++++++---- + 1 file changed, 19 insertions(+), 4 deletions(-) + +diff --git a/xmlsecurity/source/component/documentdigitalsignatures.cxx b/xmlsecurity/source/component/documentdigitalsignatures.cxx +index b9066ea92cac..5a21c8421bec 100644 +--- a/xmlsecurity/source/component/documentdigitalsignatures.cxx ++++ b/xmlsecurity/source/component/documentdigitalsignatures.cxx +@@ -19,9 +19,10 @@ + + #include + +-#include ++#include + #include + #include ++#include + #include + #include + #include +@@ -666,9 +667,23 @@ sal_Bool DocumentDigitalSignatures::isAuthorTrusted( + Sequence< SvtSecurityOptions::Certificate > aTrustedAuthors = SvtSecurityOptions().GetTrustedAuthors(); + + return std::any_of(aTrustedAuthors.begin(), aTrustedAuthors.end(), +- [&xAuthor, &sSerialNum](const SvtSecurityOptions::Certificate& rAuthor) { +- return xmlsecurity::EqualDistinguishedNames(rAuthor[0], xAuthor->getIssuerName()) +- && ( rAuthor[1] == sSerialNum ); ++ [this, &xAuthor, &sSerialNum](const SvtSecurityOptions::Certificate& rAuthor) { ++ if (!xmlsecurity::EqualDistinguishedNames(rAuthor[0], xAuthor->getIssuerName())) ++ return false; ++ if (rAuthor[1] != sSerialNum) ++ return false; ++ ++ DocumentSignatureManager aSignatureManager(mxCtx, {}); ++ if (!aSignatureManager.init()) ++ return false; ++ uno::Reference xCert = aSignatureManager.getSecurityEnvironment()->createCertificateFromAscii(rAuthor[2]); ++ ++ auto pAuthor = dynamic_cast(xAuthor.get()); ++ auto pCert = dynamic_cast(xCert.get()); ++ if (pAuthor && pCert) ++ return pCert->getSHA256Thumbprint() == pAuthor->getSHA256Thumbprint(); ++ ++ return xCert->getSHA1Thumbprint() == xAuthor->getSHA1Thumbprint(); + }); + } + +-- +2.37.1 + diff --git a/debian/patches/0002-CVE-2022-26307-make-hash-encoding-match-decoding.patch b/debian/patches/0002-CVE-2022-26307-make-hash-encoding-match-decoding.patch new file mode 100644 index 00000000000..d56b5ea04d6 --- /dev/null +++ b/debian/patches/0002-CVE-2022-26307-make-hash-encoding-match-decoding.patch @@ -0,0 +1,183 @@ +From 780c42cdd8006dc60e281be2fe6566f101e909bc Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Caol=C3=A1n=20McNamara?= +Date: Mon, 21 Mar 2022 20:58:34 +0000 +Subject: [PATCH 2/4] CVE-2022-26307 make hash encoding match decoding + +Seeing as old versions of the hash may be in the users config, add a +StorageVersion field to the office config Passwords section which +defaults to 0 to indicate the old hash is in use. + +Try the old varient when StorageVersion is 0. When a new encoded master +password it set write StorageVersion of 1 to indicate a new hash is in +use and use the new style when StorageVersion is 1. + +Change-Id: I3174c37a5891bfc849984e0ec5c2c392b9c6e7b1 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/132080 +Tested-by: Jenkins +Reviewed-by: Stephan Bergmann +(cherry picked from commit e890f54dbac57f3ab5acf4fbd31222095d3e8ab6) +--- + .../schema/org/openoffice/Office/Common.xcs | 6 +++ + .../passwordcontainer/passwordcontainer.cxx | 45 +++++++++++++++++-- + .../passwordcontainer/passwordcontainer.hxx | 6 +++ + uui/source/iahndl-authentication.cxx | 5 ++- + 4 files changed, 57 insertions(+), 5 deletions(-) + +diff --git a/officecfg/registry/schema/org/openoffice/Office/Common.xcs b/officecfg/registry/schema/org/openoffice/Office/Common.xcs +index 9097c23c3c6a..922efc33cca7 100644 +--- a/officecfg/registry/schema/org/openoffice/Office/Common.xcs ++++ b/officecfg/registry/schema/org/openoffice/Office/Common.xcs +@@ -942,6 +942,12 @@ + + false + ++ ++ ++ Specifies what version of encoding scheme the password container uses. ++ ++ 0 ++ + + + Specifies if there is a valid master password. +diff --git a/svl/source/passwordcontainer/passwordcontainer.cxx b/svl/source/passwordcontainer/passwordcontainer.cxx +index 51fb129cddb1..b674844f91d3 100644 +--- a/svl/source/passwordcontainer/passwordcontainer.cxx ++++ b/svl/source/passwordcontainer/passwordcontainer.cxx +@@ -17,7 +17,6 @@ + * the License at http://www.apache.org/licenses/LICENSE-2.0 . + */ + +- + #include "passwordcontainer.hxx" + + #include +@@ -259,6 +258,23 @@ bool StorageItem::useStorage() + return aResult; + } + ++sal_Int32 StorageItem::getStorageVersion() ++{ ++ Sequence aNodeNames { "StorageVersion" }; ++ ++ Sequence< Any > aPropertyValues = ConfigItem::GetProperties( aNodeNames ); ++ ++ if( aPropertyValues.getLength() != aNodeNames.getLength() ) ++ { ++ OSL_FAIL( "Problems during reading" ); ++ return 0; ++ } ++ ++ sal_Int32 nResult = 0; ++ aPropertyValues[0] >>= nResult; ++ ++ return nResult; ++} + + bool StorageItem::getEncodedMP( OUString& aResult ) + { +@@ -291,15 +307,17 @@ bool StorageItem::getEncodedMP( OUString& aResult ) + + void StorageItem::setEncodedMP( const OUString& aEncoded, bool bAcceptEmpty ) + { +- Sequence< OUString > sendNames(2); +- Sequence< uno::Any > sendVals(2); ++ Sequence< OUString > sendNames(3); ++ Sequence< uno::Any > sendVals(3); + + sendNames[0] = "HasMaster"; + sendNames[1] = "Master"; ++ sendNames[2] = "StorageVersion"; + + bool bHasMaster = ( !aEncoded.isEmpty() || bAcceptEmpty ); + sendVals[0] <<= bHasMaster; + sendVals[1] <<= aEncoded; ++ sendVals[2] <<= nCurrentStorageVersion; + + ConfigItem::SetModified(); + ConfigItem::PutProperties( sendNames, sendVals ); +@@ -800,6 +818,18 @@ OUString PasswordContainer::RequestPasswordFromUser( PasswordRequestMode aRMode, + return aResult; + } + ++// Mangle the key to match an old bug ++static OUString ReencodeAsOldHash(const OUString& rPass) ++{ ++ OUStringBuffer aBuffer; ++ for (int ind = 0; ind < RTL_DIGEST_LENGTH_MD5; ++ind) ++ { ++ unsigned char i = static_cast(rPass.copy(ind * 2, 2).toUInt32(16)); ++ aBuffer.append(static_cast< sal_Unicode >('a' + (i >> 4))); ++ aBuffer.append(static_cast< sal_Unicode >('a' + (i & 15))); ++ } ++ return aBuffer.makeStringAndClear(); ++} + + OUString const & PasswordContainer::GetMasterPassword( const Reference< XInteractionHandler >& aHandler ) + { +@@ -838,6 +868,9 @@ OUString const & PasswordContainer::GetMasterPassword( const Reference< XInterac + } + else + { ++ if (m_pStorageFile->getStorageVersion() == 0) ++ aPass = ReencodeAsOldHash(aPass); ++ + std::vector< OUString > aRM( DecodePasswords( aEncodedMP, aPass, aRMode ) ); + if( aRM.empty() || aPass != aRM[0] ) + { +@@ -1042,6 +1075,12 @@ sal_Bool SAL_CALL PasswordContainer::authorizateWithMasterPassword( const uno::R + + do { + aPass = RequestPasswordFromUser( aRMode, xTmpHandler ); ++ ++ if (!aPass.isEmpty() && m_pStorageFile->getStorageVersion() == 0) ++ { ++ aPass = ReencodeAsOldHash(aPass); ++ } ++ + bResult = ( !aPass.isEmpty() && aPass == m_aMasterPasswd ); + aRMode = PasswordRequestMode_PASSWORD_REENTER; // further questions with error notification + } while( !bResult && !aPass.isEmpty() ); +diff --git a/svl/source/passwordcontainer/passwordcontainer.hxx b/svl/source/passwordcontainer/passwordcontainer.hxx +index 46ffec888602..bf43b5903602 100644 +--- a/svl/source/passwordcontainer/passwordcontainer.hxx ++++ b/svl/source/passwordcontainer/passwordcontainer.hxx +@@ -168,6 +168,10 @@ public: + typedef ::std::pair< const OUString, ::std::vector< NamePassRecord > > PairUrlRecord; + typedef ::std::map< OUString, ::std::vector< NamePassRecord > > PassMap; + ++// org.openoffice.Office.Common/Passwords/StorageVersion bump if details of ++// how password details are saved changes. Enables migration from previous ++// schemes. ++constexpr sal_Int32 nCurrentStorageVersion = 1; + + class PasswordContainer; + +@@ -195,6 +195,8 @@ + void remove( const OUString& url, const OUString& rec ); + void clear(); + ++ sal_Int32 getStorageVersion(); ++ + bool getEncodedMP( OUString& aResult ); + void setEncodedMP( const OUString& aResult, bool bAcceptEnmpty = false ); + void setUseStorage( bool bUse ); +diff --git a/uui/source/iahndl-authentication.cxx b/uui/source/iahndl-authentication.cxx +index ad975d3f9ae7..951f0b8a1c6b 100644 +--- a/uui/source/iahndl-authentication.cxx ++++ b/uui/source/iahndl-authentication.cxx +@@ -436,8 +436,9 @@ executeMasterPasswordDialog( + OUStringBuffer aBuffer; + for (sal_uInt8 i : aKey) + { +- aBuffer.append(static_cast< sal_Unicode >('a' + (i >> 4))); +- aBuffer.append(static_cast< sal_Unicode >('a' + (i & 15))); ++ // match PasswordContainer::DecodePasswords aMasterPasswd.copy(index * 2, 2).toUInt32(16)); ++ aBuffer.append(OUString::number(i >> 4, 16)); ++ aBuffer.append(OUString::number(i & 15, 16)); + } + rInfo.SetPassword(aBuffer.makeStringAndClear()); + } +-- +2.37.1 + diff --git a/debian/patches/0003-CVE-2022-26306-add-Initialization-Vectors-to-passwor.patch b/debian/patches/0003-CVE-2022-26306-add-Initialization-Vectors-to-passwor.patch new file mode 100644 index 00000000000..b65b3530cf4 --- /dev/null +++ b/debian/patches/0003-CVE-2022-26306-add-Initialization-Vectors-to-passwor.patch @@ -0,0 +1,583 @@ +From e809625c2ca9f0c026aab9b5c2d13ced628c13e9 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Caol=C3=A1n=20McNamara?= +Date: Tue, 22 Mar 2022 17:22:22 +0000 +Subject: [PATCH 3/4] CVE-2022-26306 add Initialization Vectors to password + storage + +old ones default to the current all zero case and continue to work +as before + +Change-Id: I6fe3b02fafcce1b5e7133e77e76a5118177d77af +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/131974 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit 192fa1e3bfc6269f2ebb91716471485a56074aea) +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/132306 +Reviewed-by: Thorsten Behrens +(cherry picked from commit ab77587ec300f5c30084471000663c46ddf25dad) +--- + .../schema/org/openoffice/Office/Common.xcs | 10 ++ + .../passwordcontainer/passwordcontainer.cxx | 127 ++++++++++++------ + .../passwordcontainer/passwordcontainer.hxx | 63 +++++++-- + 3 files changed, 151 insertions(+), 49 deletions(-) + +diff --git a/officecfg/registry/schema/org/openoffice/Office/Common.xcs b/officecfg/registry/schema/org/openoffice/Office/Common.xcs +index 922efc33cca7..8d87d00d5369 100644 +--- a/officecfg/registry/schema/org/openoffice/Office/Common.xcs ++++ b/officecfg/registry/schema/org/openoffice/Office/Common.xcs +@@ -27,6 +27,11 @@ + + Contains a container for passwords. + ++ ++ ++ Contains an initialization vector for the password encryption. ++ ++ + + + Contains a password encoded with the master password. +@@ -954,6 +959,11 @@ + + false + ++ ++ ++ Contains an initialization vector for the master password encryption. ++ ++ + + + Contains the master password encrypted by itself. +diff --git a/svl/source/passwordcontainer/passwordcontainer.cxx b/svl/source/passwordcontainer/passwordcontainer.cxx +index b674844f91d3..ef79470a2cb6 100644 +--- a/svl/source/passwordcontainer/passwordcontainer.cxx ++++ b/svl/source/passwordcontainer/passwordcontainer.cxx +@@ -181,15 +181,18 @@ PassMap StorageItem::getInfo() + + Sequence< OUString > aNodeNames = ConfigItem::GetNodeNames( "Store" ); + sal_Int32 aNodeCount = aNodeNames.getLength(); +- Sequence< OUString > aPropNames( aNodeCount ); ++ Sequence< OUString > aPropNames( aNodeCount * 2); + + std::transform(aNodeNames.begin(), aNodeNames.end(), aPropNames.begin(), + [](const OUString& rName) -> OUString { + return "Store/Passwordstorage['" + rName + "']/Password"; }); ++ std::transform(aNodeNames.begin(), aNodeNames.end(), aPropNames.getArray() + aNodeCount, ++ [](const OUString& rName) -> OUString { ++ return "Store/Passwordstorage['" + rName + "']/InitializationVector"; }); + + Sequence< Any > aPropertyValues = ConfigItem::GetProperties( aPropNames ); + +- if( aPropertyValues.getLength() != aNodeCount ) ++ if( aPropertyValues.getLength() != aNodeCount * 2) + { + OSL_FAIL( "Problems during reading" ); + return aResult; +@@ -205,14 +208,16 @@ PassMap StorageItem::getInfo() + OUString aName = aUrlUsr[1]; + + OUString aEPasswd; ++ OUString aIV; + aPropertyValues[aNodeInd] >>= aEPasswd; ++ aPropertyValues[aNodeInd + aNodeCount] >>= aIV; + + PassMap::iterator aIter = aResult.find( aUrl ); + if( aIter != aResult.end() ) +- aIter->second.emplace_back( aName, aEPasswd ); ++ aIter->second.emplace_back( aName, aEPasswd, aIV ); + else + { +- NamePassRecord aNewRecord( aName, aEPasswd ); ++ NamePassRecord aNewRecord( aName, aEPasswd, aIV ); + std::vector< NamePassRecord > listToAdd( 1, aNewRecord ); + + aResult.insert( PairUrlRecord( aUrl, listToAdd ) ); +@@ -276,17 +281,19 @@ sal_Int32 StorageItem::getStorageVersion() + return nResult; + } + +-bool StorageItem::getEncodedMP( OUString& aResult ) ++bool StorageItem::getEncodedMP( OUString& aResult, OUString& aResultIV ) + { + if( hasEncoded ) + { + aResult = mEncoded; ++ aResultIV = mEncodedIV; + return true; + } + +- Sequence< OUString > aNodeNames( 2 ); ++ Sequence< OUString > aNodeNames( 3 ); + aNodeNames[0] = "HasMaster"; + aNodeNames[1] = "Master"; ++ aNodeNames[2] = "MasterInitializationVector"; + + Sequence< Any > aPropertyValues = ConfigItem::GetProperties( aNodeNames ); + +@@ -298,32 +305,37 @@ bool StorageItem::getEncodedMP( OUString& aResult ) + + aPropertyValues[0] >>= hasEncoded; + aPropertyValues[1] >>= mEncoded; ++ aPropertyValues[2] >>= mEncodedIV; + + aResult = mEncoded; ++ aResultIV = mEncodedIV; + + return hasEncoded; + } + + +-void StorageItem::setEncodedMP( const OUString& aEncoded, bool bAcceptEmpty ) ++void StorageItem::setEncodedMP( const OUString& aEncoded, const OUString& aEncodedIV, bool bAcceptEmpty ) + { +- Sequence< OUString > sendNames(3); +- Sequence< uno::Any > sendVals(3); ++ Sequence< OUString > sendNames(4); ++ Sequence< uno::Any > sendVals(4); + + sendNames[0] = "HasMaster"; + sendNames[1] = "Master"; +- sendNames[2] = "StorageVersion"; ++ sendNames[2] = "MasterInitializationVector"; ++ sendNames[3] = "StorageVersion"; + + bool bHasMaster = ( !aEncoded.isEmpty() || bAcceptEmpty ); + sendVals[0] <<= bHasMaster; + sendVals[1] <<= aEncoded; +- sendVals[2] <<= nCurrentStorageVersion; ++ sendVals[2] <<= aEncodedIV; ++ sendVals[3] <<= nCurrentStorageVersion; + + ConfigItem::SetModified(); + ConfigItem::PutProperties( sendNames, sendVals ); + + hasEncoded = bHasMaster; + mEncoded = aEncoded; ++ mEncodedIV = aEncodedIV; + } + + +@@ -359,11 +371,13 @@ void StorageItem::update( const OUString& aURL, const NamePassRecord& aRecord ) + forIndex.push_back( aURL ); + forIndex.push_back( aRecord.GetUserName() ); + +- Sequence< beans::PropertyValue > sendSeq(1); ++ Sequence< beans::PropertyValue > sendSeq(2); + +- sendSeq[0].Name = "Store/Passwordstorage['" + createIndex( forIndex ) + "']/Password"; ++ sendSeq[0].Name = "Store/Passwordstorage['" + createIndex( forIndex ) + "']/InitializationVector"; ++ sendSeq[0].Value <<= aRecord.GetPersistentIV(); + +- sendSeq[0].Value <<= aRecord.GetPersPasswords(); ++ sendSeq[1].Name = "Store/Passwordstorage['" + createIndex( forIndex ) + "']/Password"; ++ sendSeq[1].Value <<= aRecord.GetPersPasswords(); + + ConfigItem::SetModified(); + ConfigItem::SetSetProperties( "Store", sendSeq ); +@@ -424,7 +438,7 @@ void SAL_CALL PasswordContainer::disposing( const EventObject& ) + } + } + +-std::vector< OUString > PasswordContainer::DecodePasswords( const OUString& aLine, const OUString& aMasterPasswd, css::task::PasswordRequestMode mode ) ++std::vector< OUString > PasswordContainer::DecodePasswords( const OUString& aLine, const OUString& aIV, const OUString& aMasterPasswd, css::task::PasswordRequestMode mode ) + { + if( !aMasterPasswd.isEmpty() ) + { +@@ -439,9 +453,16 @@ std::vector< OUString > PasswordContainer::DecodePasswords( const OUString& aLin + for( int ind = 0; ind < RTL_DIGEST_LENGTH_MD5; ind++ ) + code[ ind ] = static_cast(aMasterPasswd.copy( ind*2, 2 ).toUInt32(16)); + ++ unsigned char iv[RTL_DIGEST_LENGTH_MD5] = {0}; ++ if (!aIV.isEmpty()) ++ { ++ for( int ind = 0; ind < RTL_DIGEST_LENGTH_MD5; ind++ ) ++ iv[ ind ] = static_cast(aIV.copy( ind*2, 2 ).toUInt32(16)); ++ } ++ + rtlCipherError result = rtl_cipher_init ( + aDecoder, rtl_Cipher_DirectionDecode, +- code, RTL_DIGEST_LENGTH_MD5, nullptr, 0 ); ++ code, RTL_DIGEST_LENGTH_MD5, iv, RTL_DIGEST_LENGTH_MD5 ); + + if( result == rtl_Cipher_E_None ) + { +@@ -474,7 +495,7 @@ std::vector< OUString > PasswordContainer::DecodePasswords( const OUString& aLin + "Can't decode!", css::uno::Reference(), mode); + } + +-OUString PasswordContainer::EncodePasswords(const std::vector< OUString >& lines, const OUString& aMasterPasswd ) ++OUString PasswordContainer::EncodePasswords(const std::vector< OUString >& lines, const OUString& aIV, const OUString& aMasterPasswd) + { + if( !aMasterPasswd.isEmpty() ) + { +@@ -491,9 +512,16 @@ OUString PasswordContainer::EncodePasswords(const std::vector< OUString >& lines + for( int ind = 0; ind < RTL_DIGEST_LENGTH_MD5; ind++ ) + code[ ind ] = static_cast(aMasterPasswd.copy( ind*2, 2 ).toUInt32(16)); + ++ unsigned char iv[RTL_DIGEST_LENGTH_MD5] = {0}; ++ if (!aIV.isEmpty()) ++ { ++ for( int ind = 0; ind < RTL_DIGEST_LENGTH_MD5; ind++ ) ++ iv[ ind ] = static_cast(aIV.copy( ind*2, 2 ).toUInt32(16)); ++ } ++ + rtlCipherError result = rtl_cipher_init ( + aEncoder, rtl_Cipher_DirectionEncode, +- code, RTL_DIGEST_LENGTH_MD5, nullptr, 0 ); ++ code, RTL_DIGEST_LENGTH_MD5, iv, RTL_DIGEST_LENGTH_MD5 ); + + if( result == rtl_Cipher_E_None ) + { +@@ -561,7 +589,7 @@ void PasswordContainer::UpdateVector( const OUString& aURL, std::vector< NamePas + + if( aRecord.HasPasswords( PERSISTENT_RECORD ) ) + { +- aNPIter.SetPersPasswords( aRecord.GetPersPasswords() ); ++ aNPIter.SetPersPasswords( aRecord.GetPersPasswords(), aRecord.GetPersistentIV() ); + + if( writeFile ) + { +@@ -594,7 +622,8 @@ UserRecord PasswordContainer::CopyToUserRecord( const NamePassRecord& aRecord, b + { + try + { +- ::std::vector< OUString > aDecodedPasswords = DecodePasswords( aRecord.GetPersPasswords(), GetMasterPassword( aHandler ), css::task::PasswordRequestMode_PASSWORD_ENTER ); ++ ::std::vector< OUString > aDecodedPasswords = DecodePasswords( aRecord.GetPersPasswords(), aRecord.GetPersistentIV(), ++ GetMasterPassword( aHandler ), css::task::PasswordRequestMode_PASSWORD_ENTER ); + aPasswords.insert( aPasswords.end(), aDecodedPasswords.begin(), aDecodedPasswords.end() ); + } + catch( NoMasterException& ) +@@ -639,6 +668,19 @@ void SAL_CALL PasswordContainer::addPersistent( const OUString& Url, const OUStr + PrivateAdd( Url, UserName, Passwords, PERSISTENT_RECORD, aHandler ); + } + ++OUString PasswordContainer::createIV() ++{ ++ rtlRandomPool randomPool = mRandomPool.get(); ++ unsigned char iv[RTL_DIGEST_LENGTH_MD5]; ++ rtl_random_getBytes(randomPool, iv, RTL_DIGEST_LENGTH_MD5); ++ OUStringBuffer aBuffer; ++ for (sal_uInt8 i : iv) ++ { ++ aBuffer.append(OUString::number(i >> 4, 16)); ++ aBuffer.append(OUString::number(i & 15, 16)); ++ } ++ return aBuffer.makeStringAndClear(); ++} + + void PasswordContainer::PrivateAdd( const OUString& Url, const OUString& UserName, const Sequence< OUString >& Passwords, char Mode, const Reference< XInteractionHandler >& aHandler ) + { +@@ -646,7 +688,11 @@ void PasswordContainer::PrivateAdd( const OUString& Url, const OUString& UserNam + ::std::vector< OUString > aStorePass = comphelper::sequenceToContainer< std::vector >( Passwords ); + + if( Mode == PERSISTENT_RECORD ) +- aRecord.SetPersPasswords( EncodePasswords( aStorePass, GetMasterPassword( aHandler ) ) ); ++ { ++ OUString sIV = createIV(); ++ OUString sEncodedPasswords = EncodePasswords( aStorePass, sIV, GetMasterPassword( aHandler ) ); ++ aRecord.SetPersPasswords( sEncodedPasswords, sIV ); ++ } + else if( Mode == MEMORY_RECORD ) + aRecord.SetMemPasswords( aStorePass ); + else +@@ -839,10 +885,10 @@ OUString const & PasswordContainer::GetMasterPassword( const Reference< XInterac + + if( m_aMasterPasswd.isEmpty() && aHandler.is() ) + { +- OUString aEncodedMP; ++ OUString aEncodedMP, aEncodedMPIV; + bool bDefaultPassword = false; + +- if( !m_pStorageFile->getEncodedMP( aEncodedMP ) ) ++ if( !m_pStorageFile->getEncodedMP( aEncodedMP, aEncodedMPIV ) ) + aRMode = PasswordRequestMode_PASSWORD_CREATE; + else if ( aEncodedMP.isEmpty() ) + { +@@ -864,14 +910,15 @@ OUString const & PasswordContainer::GetMasterPassword( const Reference< XInterac + m_aMasterPasswd = aPass; + std::vector< OUString > aMaster( 1, m_aMasterPasswd ); + +- m_pStorageFile->setEncodedMP( EncodePasswords( aMaster, m_aMasterPasswd ) ); ++ OUString sIV = createIV(); ++ m_pStorageFile->setEncodedMP( EncodePasswords( aMaster, sIV, m_aMasterPasswd ), sIV ); + } + else + { + if (m_pStorageFile->getStorageVersion() == 0) + aPass = ReencodeAsOldHash(aPass); + +- std::vector< OUString > aRM( DecodePasswords( aEncodedMP, aPass, aRMode ) ); ++ std::vector< OUString > aRM( DecodePasswords( aEncodedMP, aEncodedMPIV, aPass, aRMode ) ); + if( aRM.empty() || aPass != aRM[0] ) + { + bAskAgain = true; +@@ -1028,7 +1075,8 @@ Sequence< UrlRecord > SAL_CALL PasswordContainer::getAllPersistent( const Refere + { + sal_Int32 oldLen = aUsers.getLength(); + aUsers.realloc( oldLen + 1 ); +- aUsers[ oldLen ] = UserRecord( aNP.GetUserName(), comphelper::containerToSequence( DecodePasswords( aNP.GetPersPasswords(), GetMasterPassword( xHandler ), css::task::PasswordRequestMode_PASSWORD_ENTER ) ) ); ++ aUsers[ oldLen ] = UserRecord( aNP.GetUserName(), comphelper::containerToSequence( DecodePasswords( aNP.GetPersPasswords(), aNP.GetPersistentIV(), ++ GetMasterPassword( xHandler ), css::task::PasswordRequestMode_PASSWORD_ENTER ) ) ); + } + + if( aUsers.hasElements() ) +@@ -1045,12 +1093,12 @@ Sequence< UrlRecord > SAL_CALL PasswordContainer::getAllPersistent( const Refere + sal_Bool SAL_CALL PasswordContainer::authorizateWithMasterPassword( const uno::Reference< task::XInteractionHandler >& xHandler ) + { + bool bResult = false; +- OUString aEncodedMP; ++ OUString aEncodedMP, aEncodedMPIV; + uno::Reference< task::XInteractionHandler > xTmpHandler = xHandler; + ::osl::MutexGuard aGuard( mMutex ); + + // the method should fail if there is no master password +- if( m_pStorageFile && m_pStorageFile->useStorage() && m_pStorageFile->getEncodedMP( aEncodedMP ) ) ++ if( m_pStorageFile && m_pStorageFile->useStorage() && m_pStorageFile->getEncodedMP( aEncodedMP, aEncodedMPIV ) ) + { + if ( aEncodedMP.isEmpty() ) + { +@@ -1118,8 +1166,8 @@ sal_Bool SAL_CALL PasswordContainer::changeMasterPassword( const uno::Reference< + + bool bCanChangePassword = true; + // if there is already a stored master password it should be entered by the user before the change happen +- OUString aEncodedMP; +- if( !m_aMasterPasswd.isEmpty() || m_pStorageFile->getEncodedMP( aEncodedMP ) ) ++ OUString aEncodedMP, aEncodedMPIV; ++ if( !m_aMasterPasswd.isEmpty() || m_pStorageFile->getEncodedMP( aEncodedMP, aEncodedMPIV ) ) + bCanChangePassword = authorizateWithMasterPassword( xTmpHandler ); + + if ( bCanChangePassword ) +@@ -1138,7 +1186,8 @@ sal_Bool SAL_CALL PasswordContainer::changeMasterPassword( const uno::Reference< + // store the new master password + m_aMasterPasswd = aPass; + std::vector< OUString > aMaster( 1, m_aMasterPasswd ); +- m_pStorageFile->setEncodedMP( EncodePasswords( aMaster, m_aMasterPasswd ) ); ++ OUString aIV = createIV(); ++ m_pStorageFile->setEncodedMP( EncodePasswords( aMaster, aIV, m_aMasterPasswd ), aIV ); + + // store all the entries with the new password + for ( const auto& rURL : aPersistent ) +@@ -1163,7 +1212,7 @@ void SAL_CALL PasswordContainer::removeMasterPassword() + if ( m_pStorageFile ) + { + m_aMasterPasswd.clear(); +- m_pStorageFile->setEncodedMP( OUString() ); // let the master password be removed from configuration ++ m_pStorageFile->setEncodedMP( OUString(), OUString() ); // let the master password be removed from configuration + } + } + +@@ -1174,8 +1223,8 @@ sal_Bool SAL_CALL PasswordContainer::hasMasterPassword( ) + if ( !m_pStorageFile ) + throw uno::RuntimeException(); + +- OUString aEncodedMP; +- return ( m_pStorageFile->useStorage() && m_pStorageFile->getEncodedMP( aEncodedMP ) ); ++ OUString aEncodedMP, aEncodedMPIV; ++ return ( m_pStorageFile->useStorage() && m_pStorageFile->getEncodedMP( aEncodedMP, aEncodedMPIV ) ); + } + + sal_Bool SAL_CALL PasswordContainer::allowPersistentStoring( sal_Bool bAllow ) +@@ -1222,8 +1271,8 @@ sal_Bool SAL_CALL PasswordContainer::useDefaultMasterPassword( const uno::Refere + + bool bCanChangePassword = true; + // if there is already a stored nondefault master password it should be entered by the user before the change happen +- OUString aEncodedMP; +- if( m_pStorageFile->getEncodedMP( aEncodedMP ) && !aEncodedMP.isEmpty() ) ++ OUString aEncodedMP, aEncodedMPIV; ++ if( m_pStorageFile->getEncodedMP( aEncodedMP, aEncodedMPIV ) && !aEncodedMP.isEmpty() ) + bCanChangePassword = authorizateWithMasterPassword( xTmpHandler ); + + if ( bCanChangePassword ) +@@ -1240,7 +1289,7 @@ sal_Bool SAL_CALL PasswordContainer::useDefaultMasterPassword( const uno::Refere + + // store the empty string to flag the default master password + m_aMasterPasswd = aPass; +- m_pStorageFile->setEncodedMP( OUString(), true ); ++ m_pStorageFile->setEncodedMP( OUString(), OUString(), true ); + + // store all the entries with the new password + for ( const auto& rURL : aPersistent ) +@@ -1264,8 +1313,8 @@ sal_Bool SAL_CALL PasswordContainer::isDefaultMasterPasswordUsed() + if ( !m_pStorageFile ) + throw uno::RuntimeException(); + +- OUString aEncodedMP; +- return ( m_pStorageFile->useStorage() && m_pStorageFile->getEncodedMP( aEncodedMP ) && aEncodedMP.isEmpty() ); ++ OUString aEncodedMP, aEncodedMPIV; ++ return ( m_pStorageFile->useStorage() && m_pStorageFile->getEncodedMP( aEncodedMP, aEncodedMPIV ) && aEncodedMP.isEmpty() ); + } + + +diff --git a/svl/source/passwordcontainer/passwordcontainer.hxx b/svl/source/passwordcontainer/passwordcontainer.hxx +index bf43b5903602..0454437b9dc2 100644 +--- a/svl/source/passwordcontainer/passwordcontainer.hxx ++++ b/svl/source/passwordcontainer/passwordcontainer.hxx +@@ -34,6 +34,7 @@ + #include + #include + ++#include + #include + #include + +@@ -52,11 +53,12 @@ class NamePassRecord + ::std::vector< OUString > m_aMemPass; + + // persistent passwords are encrypted in one string +- bool m_bHasPersPass; ++ bool m_bHasPersPass; + OUString m_aPersPass; ++ OUString m_aPersistentIV; + + void InitArrays( bool bHasMemoryList, const ::std::vector< OUString >& aMemoryList, +- bool bHasPersistentList, const OUString& aPersistentList ) ++ bool bHasPersistentList, const OUString& aPersistentList, const OUString& aPersistentIV ) + { + m_bHasMemPass = bHasMemoryList; + if ( bHasMemoryList ) +@@ -64,7 +66,10 @@ class NamePassRecord + + m_bHasPersPass = bHasPersistentList; + if ( bHasPersistentList ) ++ { + m_aPersPass = aPersistentList; ++ m_aPersistentIV = aPersistentIV; ++ } + } + + public: +@@ -76,11 +81,12 @@ public: + { + } + +- NamePassRecord( const OUString& aName, const OUString& aPersistentList ) ++ NamePassRecord( const OUString& aName, const OUString& aPersistentList, const OUString& aPersistentIV ) + : m_aName( aName ) + , m_bHasMemPass( false ) + , m_bHasPersPass( true ) + , m_aPersPass( aPersistentList ) ++ , m_aPersistentIV( aPersistentIV ) + { + } + +@@ -89,7 +95,8 @@ public: + , m_bHasMemPass( false ) + , m_bHasPersPass( false ) + { +- InitArrays( aRecord.m_bHasMemPass, aRecord.m_aMemPass, aRecord.m_bHasPersPass, aRecord.m_aPersPass ); ++ InitArrays( aRecord.m_bHasMemPass, aRecord.m_aMemPass, ++ aRecord.m_bHasPersPass, aRecord.m_aPersPass, aRecord.m_aPersistentIV ); + } + + NamePassRecord& operator=( const NamePassRecord& aRecord ) +@@ -100,7 +107,9 @@ public: + + m_aMemPass.clear(); + m_aPersPass.clear(); +- InitArrays( aRecord.m_bHasMemPass, aRecord.m_aMemPass, aRecord.m_bHasPersPass, aRecord.m_aPersPass ); ++ m_aPersistentIV.clear(); ++ InitArrays( aRecord.m_bHasMemPass, aRecord.m_aMemPass, ++ aRecord.m_bHasPersPass, aRecord.m_aPersPass, aRecord.m_aPersistentIV ); + } + return *this; + } +@@ -136,15 +145,24 @@ public: + return OUString(); + } + ++ OUString GetPersistentIV() const ++ { ++ if ( m_bHasPersPass ) ++ return m_aPersistentIV; ++ ++ return OUString(); ++ } ++ + void SetMemPasswords( const ::std::vector< OUString >& aMemList ) + { + m_aMemPass = aMemList; + m_bHasMemPass = true; + } + +- void SetPersPasswords( const OUString& aPersList ) ++ void SetPersPasswords( const OUString& aPersList, const OUString& aPersIV ) + { + m_aPersPass = aPersList; ++ m_aPersistentIV = aPersIV; + m_bHasPersPass = true; + } + +@@ -159,6 +177,7 @@ public: + { + m_bHasPersPass = false; + m_aPersPass.clear(); ++ m_aPersistentIV.clear(); + } + } + +@@ -182,6 +201,7 @@ private: + PasswordContainer* mainCont; + bool hasEncoded; + OUString mEncoded; ++ OUString mEncodedIV; + + virtual void ImplCommit() override; + +@@ -201,8 +201,8 @@ + + sal_Int32 getStorageVersion(); + +- bool getEncodedMP( OUString& aResult ); +- void setEncodedMP( const OUString& aResult, bool bAcceptEnmpty = false ); ++ bool getEncodedMP( OUString& aResult, OUString& aResultIV ); ++ void setEncodedMP( const OUString& aResult, const OUString& aResultIV, bool bAcceptEmpty = false ); + void setUseStorage( bool bUse ); + bool useStorage(); + +@@ -224,6 +244,29 @@ private: + css::uno::Reference< css::lang::XComponent > mComponent; + SysCredentialsConfig mUrlContainer; + ++ class RandomPool ++ { ++ private: ++ rtlRandomPool m_aRandomPool; ++ public: ++ RandomPool() : m_aRandomPool(rtl_random_createPool()) ++ { ++ } ++ rtlRandomPool get() ++ { ++ return m_aRandomPool; ++ } ++ ~RandomPool() ++ { ++ // Clean up random pool memory ++ rtl_random_destroyPool(m_aRandomPool); ++ } ++ }; ++ ++ RandomPool mRandomPool; ++ ++ OUString createIV(); ++ + /// @throws css::uno::RuntimeException + css::uno::Sequence< css::task::UserRecord > CopyToUserRecordSequence( + const ::std::vector< NamePassRecord >& original, +@@ -274,10 +317,10 @@ css::task::UrlRecord find( + const css::uno::Reference< css::task::XInteractionHandler >& Handler ); + + /// @throws css::uno::RuntimeException +- static ::std::vector< OUString > DecodePasswords( const OUString& aLine, const OUString& aMasterPassword, css::task::PasswordRequestMode mode ); ++ static ::std::vector< OUString > DecodePasswords( const OUString& aLine, const OUString& aIV, const OUString& aMasterPassword, css::task::PasswordRequestMode mode ); + + /// @throws css::uno::RuntimeException +- static OUString EncodePasswords(const std::vector< OUString >& lines, const OUString& aMasterPassword ); ++ static OUString EncodePasswords(const std::vector< OUString >& lines, const OUString& aIV, const OUString& aMasterPassword ); + + public: + PasswordContainer( const css::uno::Reference< css::lang::XMultiServiceFactory >& ); +-- +2.37.1 + diff --git a/debian/patches/0004-CVE-2022-2630-6-7-add-infobar-to-prompt-to-refresh-t.patch b/debian/patches/0004-CVE-2022-2630-6-7-add-infobar-to-prompt-to-refresh-t.patch new file mode 100644 index 00000000000..fd02eb7bb6e --- /dev/null +++ b/debian/patches/0004-CVE-2022-2630-6-7-add-infobar-to-prompt-to-refresh-t.patch @@ -0,0 +1,117 @@ +From 4cfd591942e4cfd3efc416bfac8e46e3580d37ba Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Caol=C3=A1n=20McNamara?= +Date: Wed, 23 Mar 2022 13:03:30 +0000 +Subject: add infobar to prompt to refresh to replace old format + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/131976 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit bbd196ff82bda9f66b4ba32a412f10cefe6da60e) +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/132307 +Reviewed-by: Sophie Gautier +Reviewed-by: Christian Lohmaier +(cherry picked from commit c5d01b11db3c83cb4a89d3b388d78e20dd3990b5) + +Change-Id: Id99cbf2b50a4ebf289dae6fc67e22e20afcda35b +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/133906 +Tested-by: Michael Stahl +Reviewed-by: Michael Stahl +--- + include/sfx2/strings.hrc | 2 ++ + include/sfx2/viewfrm.hxx | 1 + + sfx2/source/view/viewfrm.cxx | 40 ++++++++++++++++++++++++++++++++++++++++ + 3 files changed, 43 insertions(+) + +diff --git a/include/sfx2/strings.hrc b/include/sfx2/strings.hrc +index 1f21f0a0f186..1db36e733c0c 100644 +--- a/include/sfx2/strings.hrc ++++ b/include/sfx2/strings.hrc +@@ -297,6 +297,8 @@ + #define STR_SIGNATURE_NOTVALIDATED_PARTIAL_OK NC_("STR_SIGNATURE_NOTVALIDATED_PARTIAL_OK", "The certificate could not be validated and the document is only partially signed.") + #define STR_SIGNATURE_OK NC_("STR_SIGNATURE_OK", "This document is digitally signed and the signature is valid.") + #define STR_SIGNATURE_SHOW NC_("STR_SIGNATURE_SHOW", "Show Signatures") ++#define STR_REFRESH_MASTER_PASSWORD NC_("STR_REFRESH_MASTER_PASSWORD", "The master password is stored in an outdated format, you should refresh it") ++#define STR_REFRESH_PASSWORD NC_("STR_REFRESH_PASSWORD", "Refresh Password") + + #define STR_CLOSE_PANE NC_("STR_CLOSE_PANE", "Close Pane") + #define STR_SFX_DOCK NC_("STR_SFX_DOCK", "Dock") +diff --git a/include/sfx2/viewfrm.hxx b/include/sfx2/viewfrm.hxx +index fe336ba5f091..cc6a7dae7047 100644 +--- a/include/sfx2/viewfrm.hxx ++++ b/include/sfx2/viewfrm.hxx +@@ -61,6 +61,7 @@ protected: + DECL_LINK(WhatsNewHandler, Button*, void); + DECL_LINK(SwitchReadOnlyHandler, Button*, void); + DECL_LINK(SignDocumentHandler, Button*, void); ++ DECL_DLLPRIVATE_LINK(RefreshMasterPasswordHdl, Button*, void); + SAL_DLLPRIVATE void KillDispatcher_Impl(); + + virtual ~SfxViewFrame() override; +diff --git a/sfx2/source/view/viewfrm.cxx b/sfx2/source/view/viewfrm.cxx +index 5a64599e5894..86e7d51bbfea 100644 +--- a/sfx2/source/view/viewfrm.cxx ++++ b/sfx2/source/view/viewfrm.cxx +@@ -32,6 +32,7 @@ + #include + #include + #include ++#include + #include + #include + #include +@@ -1390,6 +1391,24 @@ void SfxViewFrame::Notify( SfxBroadcaster& /*rBC*/, const SfxHint& rHint ) + batch->commit(); + } + ++ if (officecfg::Office::Common::Passwords::HasMaster::get() && ++ officecfg::Office::Common::Passwords::StorageVersion::get() == 0) ++ { ++ // master password stored in deprecated format ++ VclPtr pOldMasterPasswordInfoBar = ++ AppendInfoBar("oldmasterpassword", "", ++ SfxResId(STR_REFRESH_MASTER_PASSWORD), InfobarType::DANGER, false); ++ if (pOldMasterPasswordInfoBar) ++ { ++ VclPtrInstance const xBtn(&GetWindow()); ++ xBtn->SetText(SfxResId(STR_REFRESH_PASSWORD)); ++ xBtn->SetSizePixel(xBtn->GetOptimalSize()); ++ xBtn->SetClickHdl(LINK(this, ++ SfxViewFrame, RefreshMasterPasswordHdl)); ++ pOldMasterPasswordInfoBar->addButton(xBtn); ++ } ++ } ++ + // read-only infobar if necessary + const SfxViewShell *pVSh; + const SfxShell *pFSh; +@@ -1565,6 +1584,27 @@ IMPL_LINK_NOARG(SfxViewFrame, SignDocumentHandler, Button*, void) + GetDispatcher()->Execute(SID_SIGNATURE); + } + ++IMPL_LINK_NOARG(SfxViewFrame, RefreshMasterPasswordHdl, Button*, void) ++{ ++ bool bChanged = false; ++ try ++ { ++ Reference< task::XPasswordContainer2 > xMasterPasswd( ++ task::PasswordContainer::create(comphelper::getProcessComponentContext())); ++ ++ css::uno::Reference xFrame = GetFrame().GetFrameInterface(); ++ css::uno::Reference xContainerWindow = xFrame->getContainerWindow(); ++ ++ uno::Reference xTmpHandler(task::InteractionHandler::createWithParent(comphelper::getProcessComponentContext(), ++ xContainerWindow)); ++ bChanged = xMasterPasswd->changeMasterPassword(xTmpHandler); ++ } ++ catch (const Exception&) ++ {} ++ if (bChanged) ++ RemoveInfoBar(u"oldmasterpassword"); ++} ++ + void SfxViewFrame::Construct_Impl( SfxObjectShell *pObjSh ) + { + m_pImpl->bResizeInToOut = true; +-- +cgit v1.2.1 + diff --git a/debian/patches/add-access2base-doc.diff b/debian/patches/add-access2base-doc.diff new file mode 100644 index 0000000000000000000000000000000000000000..4ad717862070dfb1e79fbdb9160dfa55f5885ba8 GIT binary patch literal 1308520 zcmeFa`&JuC(g*lAeu}dDcq9zy0{Di9>A`@znc?CAxjp@1wvUhsP+PZA31ixHpM8gY z!+nzd{URc>vPvZZ?w*-%_pE1HNL6`_jEs9mE-fuZ)pq=;+P~~}=ay^rmrJ#0OZ6Ag za&7JDi?!NH<>iZ&`txTm>(8Tw8vZ?4SXhXf)vL}g%~3n4CWFgSE3P(MtvE@RPn${R zd*x!>vsUZ%B{Wg5t<_(wt*lg5o<3W7@%;Hy*Xm#Y8ZFfpYtce|arx=W%4+o2zdl&_ z^TVx!&Bl*!w zdUP=!57(;ItE;QZ)kyO6q z=W+Gt=BK6>WB1kSpC2A?Zf!I+jvp+1YK|hS7Oh8L#+`9DUW*c>~n7QU4q{q3?JN6RaVSls%`qxr=M zgNXYqo~%V*e*N{;g9Q%bm|>d5%D7mu4*g7I)E{?}#a)B2;$K_3;zOAXBBQPk33 zHYoz}RqLWTO5*YQ<@jvr#iOX|Tj@7@n0;$7ydHJVFUCRT2Mg)sq830kj@!}cb@aD* z6!)&9!^>nm=r2a)pY``~b9@pFlHMR0oQvgN8$Q1TRn{19U{!>rMzqQ+tFnbN1cA8n;_zo(@wuR zx{l5Uqh7KYU3JD6(O@Kh2bbfhH)waxIxT5@@xelK6i35&)a#5n*WqaJsnf=n@kMit zj~K0VyMwDv|C}Ihci3$bu@V+!ZE{FSG&pl(X${&a2ABaO#!ZZo?KMvapJKFSz>oTa zaiRDH;Ge3LxMHfSI)~Tk#)11_GbsYY$qN zJs_m68rGo-pbzk7^kAU}L>hIP-6RFDEQ{0&7F6c5A7jPhku*wFB|KQL2syCjd^rJq zXPgjtiXwwif(?2doyHFqfF^+BAd35KJVv7H>;dX@YZx0WC*xB0N zieCR1HNM}DHV@wZc)0W3_l@ZLgWav|!=q?pe+y6d8;3iu-!%^KptNy>nk9L$vH#

K;dMf4|9+QE~!nES0VO|Bb=*0~Yh4F=@kaWWCR2`$)g<69rEX>dMu!aUgs zR10P{rH|GP4wYzEQmqWOJtA*%Ihc4@A=F%H8NGdG#;HtiSd?Ik=~ za|1=!)iPbP8_;`xtJNplNy=uSDxdDFy!?yNwzogc$EN-Tg1q+7YMNXZJ> zpJ7bVdF%OXcpxVl_y?u05-UBIw^k-I)d($BLEsm3s_Jv;d+3{8kV3C#wg^mNZYJl_ zdCqYBwgZy>Mbl|cQFot)(T^AD&v?i0W4ZKr?L9w4_*2ym6%JU{c`2$JR`}GpeDJHSA5pmSyUOiK zt~cjn(L-{RxJIWjhRYr0!uhp5EH_u+bdGTy!#=|fr#at~xBRx0g z{m;ZX-hVT|Z@k}HU^A_tnW+R-1tzk`i`l2Lbp;Cx80D)xhnGL$kNxi5!oqda{CRYg zA$F6yjlBN8TgJVw24z|I9xpF06S3t2e(M~?!(rhcKYr}?e5yOj4FnEfGtIx(5TF2L z+x_do;pfMU;5kc~-)p&aOY!a;`L ztWvJ1rClVun=Ar;MRTmyEjc;2tA@xTMZ{6A zNS9?>C_27x0Mp&!aCk(XOU;iKNTi6MHkF%=R*kYpO7LUc`S%6~5)h}26tEC1J5RXo zU|AN)HbB@m2fBbnd8Gg|@^b280Lm=lVmU;9W=#~nbEYE{ybA9UOR(mle&qUg>#n=A)kiLP;Yd_Y$*d7YdqX;`D4 zU?xm;Vm5{1ehWE!_y~opQ>~jTf#E^BREgjqO&M@HWulC7ZsWYmDHB{O&Ev}`(+Ny5 zZMh@6lP_T=FYy1=T^q%c=AJ&(DKq8AKZpnB^{@4kGv+&{x* zz~)hHoI78hO}MUBz4ELXOsrAH;QBF}j`a^@-e|}S;?o2ST!HmTb>5rKk4vmS(*`&l z23Y^2V7)kZiSy|c6kB_PV_@6z1;;=*cg-oVuK&YM0hoFtT>Z;sBP7Ui(hZZh94eNXy>rV?F+QptX>lSz32G@m|8Qq^&W@auoo70m+{LD<@I;pRal(0>iboUzJ zPU6TJx(MOvzLM~FWj4Zcr5AhLt40HqOWg7(Ce_=s7LYo*U5n`ymz2(7|L7Fi3*v{$ z$S9jvEL>Pn|01KR-+`7_wDx0H5qPQ@45j?$8@yP;7$T|DMp^C5M&crKOJ%?=MA-AQ zuO_9AhFb|ONasgi$cnH6D56(1-F=(WUF~z z$*Zbt3Y-uEH56k_*50}rRvWG`FB0b1*Y~(3BZBZ+NqOX?XXfH}N+u^f-rU;Od0HpilR|6%#3Jk>XuCMM>HM(!CsGq$(aX`Wx95Fc zOznp*o|#sTKQQAR)s(ziM?j1dJu4kK>L?GrLWiq{EI3Z+4N(G$c6=)i5Qrd8qa3~9RQc@l})mf$6F4#@79%rYlHhclP_8dNS8VsFLsEYOc%!d3SZ;bomIta-X#$K*m|<5GheRE^w}AP|Sr>7J zIzCX8h+RYsb`SWOnP-ZCwCEu_VsdA3{S(9HG%;yz8IGO1Gc)RgYqup$$sKTQPNy*k z3iW=$YGTqSTrR~3GTQkuUt6O8?QN3t_sx!l4vc&Es2e%x$4zrq|D@HNb+-C&@!|K$ zip4#lIFRtlh~-NmW@c40qAWXh!kaX4_s4+H$PQ_tVIvS56vNy%fqUIfG8Mmiz13NJ z@xrKn1!{`hP(En5$5P#+h14NuyIo6$A@6y{kaPgr8VucZiAtO;vXZ36-L211g@YX_ zt^*4&l~=g-NdL_F2er7brZ5kwNiyVxa#Gx4Cqo1=XB0z%4eYC_=#&{d>k9;QmPn*h z z=l|MSU)x#(Q0$qMbt&^=+B-t)t5*7e)EXOqc|`-!OWqj{x|ByEIJv2A>ITnhThCOn z15PV*33=9MSnRuP$ySt5hO-0XtBQwAoNwF@K$5$6k+lstn;vxAj*M{E#vxxryaP3wH(31GwTI9P z^VAT~O3fiNm5UX%KQ7@`qk!;qRJR=ro>vt$f zvtJv{W5Qff!r{^0O#>XAf*ttPmAGiwGy?(3QHAOwqR6rg1R2fgr+gbElnwSpNKCV* zqxnj9-o%_>P0;#^J-vT#@II;vgT1E|hODrOoAGy5Hq0F1EztJ4WGyJArKHm_K02~T zj9U9LtmBsK@t~%WrqXg zE5?T$%0_+`=XqCR<9(aT7@aF|>SltnOR*6qLo&HdrEC)FkAB=&Yo(FdI4yg2QJ%o% zOP_#Yfh!E5P`+`&v{`p9h~R_fHMH?pKSU%B@@z=soIMNOM+lC9SWKeec><91O2!%} zu~60n=v=}`4QaK)3`#n7-XQ!2mGng>f}z1z)t%l5_`2ty9eP2`o0`SSiHmR^<;+vh z=x53?mYsrEs|*IBZjz78u$Sf{phyWhj$kT}5p4!WHfEUeD%rna;`y;THwImb876R) z36L@-zqUJt>_2T&&E=7qF`3d4_=WbO!h)A$cw{@4KC7(@7By|TAt|YwM1$+_*H%e= za~)U=71A{m>DZ3X($NrB>zC~o4sB;&tC>y#7uS*Nfs=}wPDlUfm*BPwHr?FoO9${ zPf4CcNV-wd-O+j4-TDnj5|A9jm}p|9A)RtR$epnt7Vn(h3RAQ~3w&%GokuvjL>SSH zILJVxxVfg{Y6}ZVU^H2pj|@fHx~|)Y5FaI&CwiLj<)^-~vb=j&lC$mYzYX@z4x0~O zB4PweL09vQOMJK`&83%#mT4P2wtJZ|IF2_B5Wo&foi^;Y7vLDGXC`c4nFqFG@L=5sl2JjEsf~ zR@P;feHi2OB2gN;Y(=zexsi4f)d9YK@Gf@QB%q2-gNe0Evyh;{IT_cm#O|yOmL0xP ziC>pF;X0Q|SQkI=+;B#`(oYMo5VRBUIOa^oqb#CF6N0qy&xfNOcW!ova$T#O+lQaI zP%+_IXj+omro=CGmZj+muYTJ_UrV!U*y@&Pj6s$d$5R0 z83A*X>EKQKUL~1(>FTFOz+9C$VhgfoJa2TyNp{l7F#`*+rT-mF6kQC835rg}U5Hj) z<-paJZN$^NXh$@BmOou(XuQTR%Mqp_;}$^AURwS*%3tZyVzymqkNc=GO}E-g4boQr zO4Nf6bFf@145Zlf)r-7Id=-5ZG-6hn5~oW=x;de~wDOMF`$(sn3$RDC6dVwjGA5hj z>cR&!`-0AT6P*p;7*ldgn1CbU8;Rn?+)s=)u3NkdL`zJFC?P?Kp#qYHmk|fVzlDj( z&j_1AOe21~Uuw&o^!1jxTtOJ>#^!1IhnQ8X&f)6gadFh&RL=PFj7+l;o44y?)7zDD zRLkGuE1G>OYG&aSbLK|OyPvmYt-Sc#;KQKv^auq3(t@Qr>TK>Jh+$^M$O$L)-TP;# z_whyNtrQ|BU)>8|PO~*q%9yE-&5`qKkO$jx^cVVbS9ZW(xFv{BTlf4p^<-Y3zTExZn(@!XoBhXXv%CLz;?3^&_Gb6{=9`_Kz2TqcoA1B3 z-uS2ahU`4eb0^+tt18&KWb+tVBV zX};T$};TvwJ@?=o`*bcV)&JO9u4lMPwCbGYeu^V*d(C`z0@)KuWqI~pidj9?62l@HR zA-9B)-qw2ZPjU5m&--| zyTpIH{Ag*8x}fNQ5>YkI3DT$ClHBm3~JF{T|dUrTnj{<>(C6)c7deZ`wp-r4ElC*p23U%KvKRB~w1 z@Eu@OI)1j_zSiw7L(_;B8>|MgSI)A zzj*Lwe|xYrz%nM&CIeP7Y^tY(QfY z%-ys4=+#zTH-7cylo>c*y!8wc04Fh^i9!U#2x%2|_ z%Y$D#0fBG{ak5y@Jf|;}sTo7{8vNo*8Bs%O`#Rh%t;_3Bp^&+1?RqQnn40f29xCco zm)ROvjTt#4%b`oyBshe`SAuFnKmpb3-L%lcJnbet-waRBPyZl5c2BLd2@p1@+tTSL zbi9gw&{gV(kcFf1A+;+D6l_`l*Xfy|<^7!@GSl%&hh7_99SypuHKb;&!=J0u#Frgn z)M5rlgHCUyZQn9ZBC7gI?Nbxgr=7QafE@;GdUFHpwv0%#9vYZ0khj~!?R3+=My5pO zc30>4?)H3nqKB#2S7&(z>*|gVdwZm|^$S34|G7!#y|U{;?d`+m<@^>y<>Uw7JuXCl zd_g3|{#u|H*U{X;S-kH-z`FTIL7tmr5Pox@z#%Y4e+8B$9$sL1++eChd_NuU{r%lM ze&+H;zx8L+N9gsm&H})#BgA|==DBTw&DGSaX97@~-}m;PJjHzq*@CKkknx&pdwyNb zw&lZeC&%2cK0q&Bn62PqmwgjL6BH}*U~RY=e6ZnbZAvOaT=sDEWbz)hzi&5yT01lZ zdG3E7Vs)x7twv{zz+|$OB%#J(o|%z)R@qDF3O$+o2}%!}j#=oe^fFYg{XLx17XEbq zmj7ux^D%IF6IgD>#!_`31^86IVrNnN~7pqprdQ5=T>Hg0k8PZ{jq!}CeXTk@{jM|B~-MjQ=Z(N~+e z*?R3OaG*X;n?_=S*Fn?sF>h?*-4wT0Id)@@?v$Pae~@JQXDkBvx18cH#kN(7v|ob= zyY`DhG^7_J@f#7oKPa6-qZ#;Zdb-=SiaT!ScCAW@{>qk}mT88dbDPD5e)e{=tYp7R z`nuJii7jS%D=qa0Q%BY|gbL5irB>r7(dPHG7yXIZPa9rWt)#8h={FaDtmrE!UGSVc zlL8eNXZViMML*9=4@^l-wV+RD_pwwToU9nLwQmuE?&EdEy?JG+``ABBip3?V6iFG; z_+Pc#N0oGcjM1A`D8hLJaK4V&=ZkEp@}wzW`c_?amV5~38#mLpGy8UZyJbbgI|7mL z*UmlxVrMH_`VT?I7Q5d{J6}xoq3D|b-tXbWcClh^KJ%)bbo2wt=n58(_2qBiwq)^i zMX8W12~R7gw2lu8>hig=DdJh-_1V6;Iy;S*<11~p*F_aBEh@ry`4LvydN3K8YaUbg zJm;fu-y2n_HG+r3y~IG7>EFF;I6HiobJ$!RW40y(mTI2k5TQKH@|VFUVoD8(%54E1 zx13IujU+q-(p2;tkGvtCAoMA}Aen!o#IW7F9S4kZ*xbg_$s`u%&YqiY+Fu+=Hlx03xUUoEMk`} z>3*bsV_)Shf^Qfgv*hia+346jht|sJn70-Wq9I#oc~Hau%i+JU5W9=hh7WCSC$Vw1 zkE*R$LxiRmbpk#E_)^T-3dfQP629Ct1Rg4>V&hv3f%x2Ekl|qwFfE_SpI^Psu%Uyf zD1{3ZPC2-G2@sblJe>{ULImc>8<+hjPy&Qw_xR~Aw=28sHID?-_P__bNZ6Xwig4pUKf+8ZH!gF}sAA&k>)Qr1PFuX)j^R!@YbO2`DdC-QXiA)iM-`!A2)}7LsLXU3=zm6*Bzgqbmalo zm9*5gY>ewEctvphtN?-?LQ+H%r#7|?r#lZX?^+`@C^51&+IVkARZGU_M`uc5;l5|# zk7$I^{}u(riP{RI&W`8w(*dWyO48_CP7=|euNQ(*@(vaur5N9UYep(yX8Z1*fB|o> zS(r$E0y~FqT8~fAUlOI8dsOnx6pj+kY<6_noc6xo!ZvYlwcY%DnVQQDm@}sMe>gVS znplbX?h$J;WsN1M!^QD)6k4++r)g^SxgZ$@%G0kcx^#Xtc3K(x7e!FFxa0Ma7+PH{DH*)W%4zP;eqXUMB+= z+${akDov}4u*+JXd3K9wUWuDd@>Af16POeVd8J$8`HtvS7FFwhyKM=d5N}DV_E-t< zYvSz#l4(3zdRXO3s6>b?yl%11Glnxi)BtCSOc8a9YM?nr1ZkiXkvxI^zRQ}jL>9^$ zm5>X{8;1iH>VlFmQ?IIXCNv;mr7F)RSuR4pKfl~ubE#8-oat!v_LSdC7Djj+?j$E? zN(fV6g|7=SGUaeDJ0~HVi=dwA#&-0Igpna*DGs1KE*!E51%Rs9f?B`$tO8PjOV>%G zs;~>yvHz`#Q3_W>l`ZuO&zBVgf;Ky$zA4Jf^IFRtkfy8V3N?Gkn561WxB#*$eTF>7Y)AX=oxgw zl{g=#8y!Jzm=7N|bD&a)k-O)253_%8Yu=jVCv16rguyyPv88q}Go8xezv}~n<#rR1 zSxd>gNsBt(Z+SXU7}o|)EeHJ(NmQQ>&pBSzBhtW#nN}UHW{Mo~)z8U#@blYezUA{F zJdK^k`9r1mwoa-EtX4gC#nkyChUQKFtje7|$Dd4$&-l7CAWzYvl5j?w`<*4;+@UPJ zu6ZrZ2XmHA9IN0R3k)9chkY%maT>0sx+Wrz#&#HPvGeRO8H>JMY}t8x-YCJ5w)&e* z@=g;@q=czDekQuOxGf3A{^}S-;TMZQL4+{ESKQdRFstac@?U#Y%2VaaE+0_+j6fdC zCDeQl$=p4YXx;k4Y>l-ywj&z581H%SQ|B|nxIckSt$L#YPJcAwu2krKxV=C%elmerGr>+fW+=We=AhEPdOOW%)by zaQQ*bvP@{@)-dxAxn2!od)A4pUdJK{%x=VH{tW z-t{_5EZ+Ju5FqevZ2c>Q$eS%&umC`^PF}2SZoOK2`7BLFkpaVtJ|fEO$Kl8-q0mkp zSmK6#i}NErf!8%L^@rwC6pSFUfMQfBBnHB|+aD>)VqxJ~^lj=Uc!x{?3e}#*0@L?S zCYlToKi7>MsU!CV~U%!l}d0zf12p;nx$AYlIA~4|#Y5NIa67@*pq9$fp=|iTgO{|)eI{5jN zdq$rfdn&A+J@s-9;w669h7ClaiCz0*sd@!-@@LECv$61#=AJbclI@%*8n1SqS@w@K z&|H*ZsDHN%tBAgrx_)o1xQc@$K}e*}pNL`E;3-pK6X4q~P=e_DcMj_9)W`T;=Wk^3 zdDbbObhouL?^b7GbF2v^tz3UN=M11h|03zaOI3CfA0jiUE-5k?^O&yb4kG z^+EL_qiOl5j-^!J1Q%dUEh3a5E*o$)-ujpsYXfQ7u;_TTv;JZ@{BV96@>j;RjrDg9 z)g*-FH{<4uvcSB zbcO_>o#7J@H&@RH@c_x`b2`s1Kh-Fr3s#?rN9O<1cP=*R(Uqd)#rWy*v^3?dSua)1 zf!l+sIV6g_`cKP?7(6dx+iAeJkfp zs-8#52zyAcyznM+e^Ou~_ulpB61IuI#U4sE#Bfyp+Pnbe`EEkZN$i`C%0P7UYRLce zb{$z+UH!+EMBdg>ze%AQ1yurcao)$#^Y2NhU-qE!bA#q0cX)ogGKlTUu37Ka3u( z>%y953kokR7_Jm^H)Gw2ohWJN>_Xt@tYt1PzQt_(N83z{&)dPMsDf#SrcBX*n}F%Y zK@zM*(lu@aQ|E)ihyco%kN;?!Ps>W)`aPt=*Bq2T`~Us#|HqQ$A3+~}esW*em5h3v zZ#0%gwnXWq&QD}luHoZaJ*Nt$U1i>urCqo18m9Q!Ss&C+VMa^Cqn}8;y`|!NUO>L8cbRlF(s4GYb23wwgYXPP zKAURNc1$8G86ZrQ9q2g>Lkm|Tg4Ky3-Ak&DQ$W>toJfo1iV$Z_95WbIlY%s-{5v67 zI}^>mZwU@bCu3tyXeC$^#93OB$b*$DWP%o+oY4}|O9gRyA*2%ZJLN{EzwJJYAW~-G zeySexv8x!`YUkUp?$uwGw0*VnsQEf$5W*`u$9mh6Vy$)_G+$>_qV2=x%K`^^z1)1A zNZM-Wv2M}zaWj>n<@e2(bt0o_Pt3bcW%S8nvll+8kr{n7vB01+y!)=%KG7MPv9`$I zZ$iGjhE>UGLoPnqp2HEIB1dwdE58AKQxgpk1Ki||aF%PhG-TeC5yjIZS~+s7M{W|T za?EX7Ha91{bQm0p4z097B{-NG&mEbn;-fe++5(XcSjR&S~O*y@}Mcx#V84T;y zSdJ7Z#kK7KZ&-sXKlfD%yF#Kg$DWxcD(|j*MNTSfOY<5B-0}q~7askLSmp@)#|721~RP`M)zZNi4v0Q0?CY9Y|A&WQ_O(2APRzksnH{PSRQn zLbVWw%-pWU_H?f*#heY#bk*2+5x__&RV~M)J>4J@*4Y{Qqvt&JEcMQbROR|F2&r&_ z?kGW$L`~+Yhmf{aTQa#K()c1%x(tPk! zsTv*Ql|{`GZ{-G^6BINg&F*af)l|)^of&@3aAB5*9>v;_%L#GPeCQpwc zAif<|!xBfBJ{;OHU>_$p)JYOgTnufd_BN8`O|*CRJ%WM|ru5|w8ZVDz}%sK20I~B5>CWaF5XZ=hTr81nAj{rjxzl{-#oOtb=VbPb55 z4_F3eqU$-8WwdZ_u(WyTadan}_Ky49!h%U@3*<+$OIyuttg}ES4_B6QkwdW&dJL(D zmNY(Tyy9`XHYHmj5o0QJIbWUn~v}B_)MC5Z&b~(vk0sbbzh&S_HOFMOY z=GttTkA9tAwE4aya?#9eDZi#i#7t3n+{wk2>@|C?#a>xdKn6BGDO}Q&6b^PIiF=m< zgm%p?rJ4LW^gz;1QV6lBQD@DZ-de4-6P)W>hd1>#mO*bkJ6Gdy##WMfR+iy$m|%}D z^vhY5ETokyo103XhL&!&a$|ejFNT3#l)h~0f)1y-x!E*Imem+!p!VWQnQ^OrT*CC2 z^48jujaTc>{%cIy_?4Q~+hyztuC~TyuIjaVi$iGg#WThi;G6t(4q{S06_7P(t~i&S z^R8Gv3ybata9g>fisOd3sRRN)IP-OH!2Ib{-@mW!nF*)EYBCOr{$%ozk?g8Xx#6q~ z#Mfh|!k~ zzu}yZih;mJJ2HF(0mRk#JjT@?wg(7%9DuDBqN; zZf?DPb1hS~oia`tKI@5{XE*g0o>)4pQ?AiUP@p}c9<<$(jxS_!9vFjk?Y@}Jd)i)>anp^5opE3Aa%zIXm)(}Y1y3r5@Pk9R4ijR2|}SeOR@h_X%>#c9Nya?y=cVWtx@SF?nw z^RHZUY*a+C*C*vBEeiy27uFoFT`yUdq5{%&to7=ef-iM-b|gW2>x z1%~Jz=Zc=rC3m$_uMuI<>pKXyxw9-6+mpa0-S2#jNby`(JsiIZy%Mp=nq@{gzOdG6 zc4l!%PFq8eC1T70lGG0A($BxQigq_QUe?-(W7bY$=x78J=ZPp7IG4;4sH}PNqVN?X zro4Ez{_MH`GVc&u5pZpfmsJGo9=Vfrq`RMAuRn>;P0o4gl{IY9{tYB-HR=X#`UPpu0xO@nw6v_9h^datiQ$LUarULsa~DD`b+Lp<^_|Mk_TW zYk~I*3nyHZAWp9ML?#|9Vg$`8X+Ht-1H|MAlUB?Kq2D+QSx|$j2A*Z|6X#Gaq9YI+ z?Hk(VZIo`f#x$$PZYU=zXX<7klX zJMZ8Bwtju=a1K!4@*t8*Kp19Zml#q8NpzgtHNPQ&wilP1L`NgF`+w zZ@GVcetDsYg~;1s`Aa&euDo2Te_yTH;z~Amao!0_Ta;R>ljP!*-Dhhxb`?wG#hSec z-J#U+O-HNjBE<}ad0y?q*-jZt`7eqYw`xj8X`XrfGW6B1*Avm6;vi`5zDP!OW^+q< zVDY=9<%s~whl^Hv=mFt%E}mAbt0@z-sjYn?pmG7?ipk5Dv*Q3H|HuOr2Yn9Q28fNuLf;{Or%>J zFY50|`+%CU?8O66bzA7>#pa!0!CuI7+6v;~_5?-DcgYHFA5Mb*+{nfX4!q(pUU<4iC)LA*vsD*yos(OxTFTY z7@91S297B?9sslH!zK)RdVFgQo8S7Z!%{R&E=W17AaAQQ=MiU|J--JYw~=V1K7n|< zWkxqX+i!|e;_WE;_{3`1DSpB|qjKL!)B1wv$~)!?VgE$Yxt+ds5s5@_WUu2J)P&jY zpC4602q)&mh2(nJCnvRtvrACK%o~+Vb2L|L+T&v^<0OQ;XJJfsE49@yMdFChN0J?N zXq)8eM)pD`Jd-T8g(r?~A6)ZpND%1cO9ZprC?D?|7zmvt$Zw!V5<+pflqIt(4TQuY z4|fN!8i0Dn;5@qeQFrZfQ~F5Win;8jY6-SbV%hF6tz$kL~XDba=8q z5bo_Bo$rw{e0(;}`a7?UcsVokiu={d%nYpdpqQ1I@61dg{OFT#e`2A0+c_kQMsN2J z2S=S)%2T=K&J+Dd2AfnNTQcfX@Bv5DGZW!x z8h@#~*jP&vd%@a2{XS@BD>FY3o%~ZlqAfdGF}#V|RG|OON7V-Qnn9;ji{^ z>u=q|v*ROgxONVy9I4?O%;sEbb>kVF_{$dq4C!MVaeMp8<~p}zkRVdH5jm%qm+{fN zcix5=*ipZj{c@N2`>Q7-d{L>H#bD3L!?{nK>~eSU2U7@=A>r)VCsHqrP$4|F7DN;t z55Kzi+R^UR&;|y6h$rhQNPP2^BDYE@u|+Bb-2*^#m6CQlFBehd)-6vZtNqe{U1jK` zBb>}2(Q#eimVa&%zLH*d6!ER(&(P>^6hf`bx%FtBFKQ?qF zJaUBsd3rs|v>hm4E(YeW$L2_g{O8Hm^e8DSjxHz~uURB4uF~6zXHd`*IGOuQzH|q= zrQ|vnJR0-&DZ?npsofRD^ zCq5}}6y2x?br~M|TBh|U8nv(>w3*V~EK}}(%G)_d|FQENbMESd|HTmpf_6riwW=U8 zz+Y>7<|M~kjL*p*mm2v}D7`)!9y_sxa5yXiP&Im`c7ogkjd6sd;*obxeY-tfU;wse zG&n*L#7n_5eO0X71q9wLYMT#{LnIoj5B##gx>Mpey-E`+dS#tT$(G)k$GNNGtaDB1 zp(eD4U)rH2^i!gR_T=)h&qi7^KIqK;w50R)(_ycXG~CwDUj9I zn(C*Yh-K@syTV!wcti%UAyx=964zag#tgFIV>#9^S92m|E1)vV6E1-u;8g{4T+D50sfQQWh`pFaWCAnk!US@nE2JUB3QBjT+# zLX>As+47VGhsBRrbQ0~0z=DIL;STI3u%DB`;bv|HGnUu$hnhcM!toTMGYa%~#F|%F ziNGd-hTc>vl}va^yovZE6Aq{=0nHnCHDAdjP;F{ia~3!urUBI=lsF2Ic`4Tg@KyD1 zBw9?gURBA5JASk>p5AlxkdIJ0QTZJq!_`|qEi0YJ`qa-ewI1{%ACTNITHVo?8Fia) z)zXd{FSfnK;Zn4WpUd^159&W3)_*>#|9tE}-)V*-+hd0L6>m>V9^VcjoW)M|jvxW6 zo&EC@%gQio&b#xr5faAcjhBq)KT@w6ydC*(zbekhxyE-%fF|366Z%zWN#pIscby-L zzgIf5i6{J+P?vP^oP4Hwa(;9)M`C>IrlQ|W&1bN^RCLDQiSAUN8p=2jQa`?Jxr^nZ z3;te_(AGCkuD!E<0n%z3ttsL8KZ_VpRI-Ex;0ipRHzAZT(mZi3VQC{ylrQ0h~M9d6V)i zlaQwqvLW(TZtL~CyXEc=QvYpV{y>J^)^0P{IHxBEXNPk}=8bNgF;`PIYW-Wz_HA0W zBYWnrpkv@#U3Gl%?8q#Oj&>cH9RRx%`0bayv%@ZS zxLNG`F(`Nwnjm)^~b@Xb5f+Ce|Pd+2}rjBUy#tYcbtb{ezsGdvqpC0^4( z`{T3|R`9+lhs*iqyb)$%V%rbu@Z>2M&JQu!J3C$Uc58`ghiiy1U}Mi$H9y$9`di<# z_*fV-_XD2Fcf?um+~ElFzvU(<=3=&d@Pde}3JTW2{8@#Q)$xW7oON9i+peC9j9Z> zkE!nseu=#*(3qH7?RhLo^!v`9pA1#_1PT|c6@L0xRuaztgf{sfDi-5^Sr?jrCe-dO zU7TgTnax5B0Pi_{M-$|oUz0<2j{(IFZHRAbWhbDYoJiKyFHuydPc$(Ax4ztWp zG!uJblW?&7W+0aMKPw3Co}R6u6XGAWF97c}*xuZ`=i6eGu*MQ+;eXg-KtPv-ABH!4|OHOD!Foam^|YjaT(l%i^w2}MCX1SEr@T`Ql8 z+;vX?r0ZOY&Zh9Qd|90GKCw-WGv$*?;0a84w;JnLqo5^5{`q|sUe-jo5<5-Kn$HqN z##K9A65}fo$dqFt2#qUANO*)rR`GbN<{+>p^Z2ao#8pRr9BiXJ?wPNQi!*(9)h1b> zQ=V?uG)1q$O6^YBXl`}&K5iO5vF_>l_^|xOCKurIPp*gG+YoL`=oNDAuWX1NS>)da z*e2v*=_I;MF0%u>j4AcF?NS%-#gJmMPx0u$X~n7kR$n7FtA*_-^RZD)g19T!AVj31ztz>n`lg*ph+@LO+TDJo>}cL4u9aVZ z^OZ<2x#ga2NG?fKXqNmv^6#@VKy46I3A1GiVHDa1F-wOgB_-kXPg{6-UTUHArl);A0P?Ig=RL1eD) z;$CE8<%IV3sY)9{Sgw({VpQ@6%nBpyeD_uQj}=(8!ry+^czK}cIVunT{+^54jmp#z zwHP(=-#1~uWp#4h{el?^DN;qP~9c&Wkydi3d z{ywDS(2#LFr%QL%r#6r-+0+8jg!cNcj`x8z+bt#TnvPb&QsDa(GfdN<3&eO+0NsP`qeN%;|1E*nH4_ws~>;xloZ+ zQ*O+KCvm>{tC&t4aRXHx)hiwJI1qpBjmW{F3-@q}_eHqgOnK`!F3*ee5WkFXDO%C= z&3K3(&*IYK3f0`7xamb*)ivER3oV7+YA zRk>Z5(N!K``0A4jGVI-iH4HHe%J%F-d&zueYv+URWLm3UexTH?mY zQkuPcp2*~3;J@$yRjI|t-4q< ztJ4SGnEA?`IcM!mc@Nn%PlN0p(lUaA1S&_mkNr*-Kf+P=lqyMS-Ef|J9#$u%c&+NX z%8NMToBNGpo2CMe-HVeaIS*3vc6a!@g~O2f?>5s%DkiSlU&Z%4&3nua-6SL~wa-y- z9OAec3;w<;8Nt)6uZn@Ats0#%r=cNv+CKNkX1ZJn{lIE^RVH5cJikc{KNfcP_~H+k zQf(sa8^&oR08%wnnU_IXU#X6ch06JU`By3%l%o|U_e54kgSHzLtNg^?Eyif!S{f(K z1btGM{2}_rUgLFQhfuDhcIfS_$fuzhy_cgK-x|uL6z5ydUcUM3+FReeKo`>**xZ1j z*MHn%KzCb=g(G}ey%>g1bL-4{^cMbQq6z-Fot>2PK>pC?xzv-7NOZ2f_jD&ZDdv}M z?ynBf@m%t!ubhE}DGcfp~A!BM5T1ncH-Ds)v>F{WmAAyTF$)S#nW z@mQVrOrAM{aR|EbjePNNHEIa(iWs=CumSf#_k*0^XB&_X4o9w5W8hud+u0n8HRZjj zuCDtiPM^q94%;Ucv z35^=N?t9}AyVlWU=v8o!X^~gF&K$~Pr&5E70Ic-l2Ju(%X(Rl~_#p?w$b2LC%3D-R z{D;I|;Y?+GXkh_a5)n0INhC6tKFw<~5h30?DyJB$EFsG6F#7RlwXSk)^y(<(t}6G% z>Sg_$)dzC{v>1<4%1Um^^VTu(v#dJKqZVG1)!UX~OPU&ax{DJ+cPONcrwEZ+gTO3q zc>;h*fQ9A})UlTe(q>oAX_GQxH02l)(ScUuYkjs$Bof1$xA*0yo;>9Vx)ggNDj(TQ zAoa#mo03+sst^IQdp|Ikh!e>qK{;E$B#ceuLX<0?L=*LI7@ua>9`UIxIA%U(i}POz zIXzr0aKvB1---`455yR~(ps;HD%RIiS=}|^3iYOcFwY~`T~_G$MVeG3OAo03n5#dw z2DsEqF+I$@k6@Ac4iL86)5s24i+HcwS-ORZ0&u!+ zIz#)0>^r_4WVPdkJ?!QqK07C?_{^PW$EO58)wyo|8uSSCem)qbBER#hg88WGvifL~ zMAj$C#lw*w$rnT1$w58}F^{Uz*5P1OZzCgM^Lw9nOlI@h)7P)oo1bi)^^enGJRH1D z@1wL?(ye>+m;u&1Xj|;?d~|l`uS1upr~xhHFV(1#$VaetUL}`Hf7n7BK=kolLPc}O zbNc)_hIOxP3!m^E@_M}W0=G7Xt&h64cHY!D<<7f4DUT({}`UbkA2aC%f{iBKS z&xpdWbVqSTxF&JzR+>Y_TdYhc5x1`6Nl9e)pu`^aNNkUCRNN>Sbn-%(8h0+Ypzc}1 z^oUc$%3f$nrbJl!V{$eiCg!=@{fTRAi^P`8=wJvXxWE#+L}(wl>m@HV5x$#*#BuLK zKtW1uEAJBb%9!0bAxJ$mJScH2N`{V3m9MRLjMm13*yBs9_F$QkEh)a)<6(=1s%ujw zdW5AAP#VfEOIII#g^1$BycyuQZkt1(gV$RV8;VDsBvm{-(#-R&ag9R8@Q*FVaeJGz zhR;6r;l1bp#AV_KF&p-;Q!9%^OS7Dm{7G~0)GnX>)-He24|JidaO9|)I8sELsO>ZZ%9xAI#|G7dmYEM<|DgaS`ZZYO) zH7A?AA*z6wmdO{|f|jS0Vz8%5opHOl{b!iNe@EifNxL}hd8pWr_myWC|JW60T*b)LDewIRUOCo3yic(Jg#lWm5 zNK?|{;yP&HUsR;Z+(9HU z`-n8Lwq1?S)0kR*Y%}Hg%khEA)p{fIVF@i4NoiaTbx;WUK9CjKPCNEBJZ!q*FG&di+SpE@-pwmGO>r>EpH&^9ToGehkNagW|m!0S-WFB^7y?Z!oML=Xm zCk26w1dA)=xR7g$ek`qYoyVY-9U8-N3T)L}YKVw7~;aXli`deQMO`nVqt#N|W&+8== zjs67^3L&T;upU*eE$tUBsU*I`ai!_d@*N2S7ndF^XTI@jh_74Yu2m%pHq8ls?HJg+ z6x1FWFLuwU?|t z<;VQ|U*GmFwg@KoTz5EGobo*jKy|>_$yPSsk^Pd)9Q{$w%CX}!B2?OE)Rm{sushx# zb@xXLW(-=kG$f{bVF~|C;FBF%r{OJqN^bebymGvgFFGYygP> zz_@N_jVg&BJL8i9fs%M&&>u)+HPPg$Bn;(bS)N)g>my~Xk;6c*^|hxjwbTt(`&m2r(I%hQ8?loOp*iq&3s zNUgl>wO@w#b8B1@e3N3Ggati4(yqH8{S0*2!)+-~ZtTy~u5hGBSM7(5xuBF0Wc(lO zc25sae>`1Xdc6Gj(Sxr~{oi-*=B%a}V0pnFkm%xN4{5G1_~_UHIDjgFmh%I_&@Y*D z2}%%z3DdDth24wtXrumXLkMK#bX>6>2twyznCfXT%*Oxwe+>?Xo&W9p=)8B(OXGk$ zo_RuNbWC27!I+FGgr<%?BaV>cqddU^Ya;QG?RKQ0#feX8R+NY-H}fI?G8hZfJI_Z0 zl7_YpNgfQAT{gwbO{sy|eIY(+Ilm|Ok{otln$MlF5NWnx_JO&_-77CH?l~}~;)N&r zDEZGnQ-AaR8&VyBxUHAtMN50N)GS3PFWztAMATN0OZ4hLeM#D@=ES62oydH(*4c57 zzcI>Pz)V7wkA0;9i`Jk4mB$X0=4NM1OutU)jwgBYM>L;nOK7#+eG~(7g;qW&CA3=l z?tkWlR@4v%%|~Nts+HIZJ=5zGF-^=qw@qh7UkaBW!yZR4!D>4wMI4$Z+Y!JI_TJsV zITDODa`jb_Wr}kiP2I5nWs@P-hG#~CY?hdaGNPHgiYGHOST8Py=QAL^CtD%? zuqd7J-@P+(y|*XFHQg|Y047KhXZi|t3)g%_>&-xf_jZnU6)0}b`en+Es#SM*vQ_mjQBDbonuQ(Hq;o04ZKQCDy8-&iM#pcIT#OoC0K z_9H0q&HC^hsl%3#SV~&39mZKog)$kTl6mo-D4`kAVc7#j@sQC%gm6nIGisYbCU?%y z5JE)4c40uas83oWl-=@-0qeW^P5+iG33LqAV)MlXVE1>iKhoFRx(SKg-)N5l0r z5mR!a7GXcm@c=fyAMCbLLprQ5aDM=%61_Ba2&ZicThWQf#(NTagM1Q;@J{mVKkg4O z$BczC`ft@O1rbx9stURZ)3rgYyrxF!kPNRV#H)l^^}&EW63dB%cyjgyl*KNywy{fC zOJn3S0&9uvA~*hC>^KVx#R-Gjz%w)B_ypmQwHf~u=k@)XTn?SS8TEe|4A05#xbt87 z7a2;px!GguCdvYMU8~7?>5|fDt~lVyrgx|3LMmc?>-)xao6C)k;Pg*&)`;n!kgHM| z42X!B>}~3fwvIjh>$Yi3|9a|-uGs0x30?K^#C)#$I7J8A;d^c8&PB#akWFAs>$K{K zMJQqe@RPlyDO@pbg=(#17O&gJD_&0!SojH($XBM>mI3%z9!FrES9Qb9!%Mxox2#XFH$ zjOAXPSFA`klHdV;Xr3ICJD#(oo_VH1r0!sho8HHh**O_l?vPw$7jc~G9ZiK=jr{XuR*LiShjPiwlqG@wD>I6G`-8f(>$rv zD?96L-8;npj+OsrTX@IP>4-e&KX^`croq{B>3A2qqsF8r0sZqy;^F>Do|SsvIaAUN z7t#!4F6wZdpT5XMzli!%2D>Z1_ z^m(Vv(c0UlaPw_Wa}nkw{7uhR>Ak+Q0{39NjuQ2vv+74Re)>5~UFf^rX`7Nd_|YMB z*Z*1Ze?A4+;-ep@!yxufEMn!_uZ#yNp_b1*^T8H+!3~C!?Tlx7zxI{)>NAEMgy8As z;sD%k+xA?AA%-AFJ+y#To}D1DoF+RlB;P<&b@s&WPP3T@#0h}EDCw;uEMGC_!NN_N{5gCXcIlS8YJf_T3x8#9*lH|4rggKtVE85-NNz3n)*$uqZ=`{E70l#etM& zQnZ_P!^k}-ZGg?pNR{Qq5~5x$e$4$!!mE4t0#-4XS*6qBvPoi>v`A-GAC*t5I0cY~1TUeA1BGLmMTHlx0Y*RQ|@jbHVlXM&l&i4D0a zVogO1r%xq;C-EbwiSWj!6Z3H~ z<)-Ve1G;ku+DR2E@nPFIt070IXcAKlz)tf_8cGvdH3$S)loc_dOd(&C2os{Nwpludp^y?XCF>VAp)c63yR`4GQgf0t;ayXj+9YBpo6FV(IHsFYK+pC) zJ6p_t%EVoeMPrsEmZzq3EGV*#JwG1p#>K>s;TIy|U045h?4K#CYms^rF~3SZGkG^k zNUlvkE)L|uK9TBa&p#`jjp08Gq2FC#M)-& zDW$vi^NX$b&(=4#-YYc!1)iewo;1}shW@AGnl8UKF2^PPF}bmZk~$hU-{}@C`yzY^ zuB7uY_3r6&jca9641LLHq@!~k+YK(K%`+YBZ^|Vxb~Ys5@}6pBFC}xFOx0WNgRq9r z`G3z{b%A#V9!FC71s=e*g1|Oj{5a(~TRusV8K>$cG+J!~G+vcsG+w1q>b#M0@<{bX zWGZhgoXm}ud~^Q%grh|g^j`slQEDj?ZXx1`%>)X!Tt;h>q+bjwFqBYs(JBsC%t>dT z)tReJrRn3!C;CBUn-Dd_2B&Hs@|6g*ka>utU3Lj$jzaeSYQAe;rEfIDQgsOyP+)A+ z*BFBY^AgS$*i_#ga4By?MY$jec14{}&Pk2UnRg?oIh~H@t)_;{RTU`fxRGc|%Z4C? zH+8aKG(4;Htd&+dfu#Mh204LPC0qP60>9@-#OMo*9K_^(_uoHsbW<*fV9SJ?*G^ya zR0V5Rt{N`ib$J!Br1kDtrE%4A?zlwV{;5+L`^=LPPsfM)#iNp#MV0>J(NH6bq`mc{ zP@2)f#%XV)U}|qe^6|-@fJ@8M65IW9WmINL&xHo=N{qP4QM~Or&xaPTHi{}z3ypNg z{nd0W)t*)0Arw_*eNKiSkzBaNUEs_XwA^5}O%!o5f- zfMer7#n~AVnv!WnhCzj8;4b~9cSNjGe`RG$DY8gbrw907j)$bu{v8uZ*oh;^Hxb{% z;TKWvcYCc_KU)Ewgtnj>_6>@&8U0^|b~ zj;Z^K7B)}WaA_lS<74MT|AG;RbU9ZRdl8?>08wLEpwirEwO{4-clSVyMi;{?)dB_8?f40TKwu>^{DrWM-*p87_5bR z+MLE|a&ukxm*6W{(^0lKg7@?FLRTO5@|%foY0jzN?+5%y)K}zW2l) z_Ql3NKF24s{vnD@xxd9~w$S=(s5{fXVR`wRJ5}c~DYn4Q&ng4#pT!6`4Fam(CmZ|D zv#7yv=c?8|HJb>z8#){N`ZNC}!$oJnBl5BGmhF!?QZF`Wx^6pCiqp{X^Ms<{_^BUn z%ovGcxl131MWlrcIp)$V1r)qTl|g9F%jyKn5okEHuW>;EpWpWPoho#dHjeBaL_;Xi z>~Qa#2omKF)lpCXIu7$I?PBp~yyKN33}E|mll~l7-MReydPF4E_`O%sC30@^kdUtP z^72Zbbk%F@Z{pkt>w2lUl1#hn0o&}Ks*e-mWF8@rk3vrAON$Sv!=1pl`cGu~ok%TR zx&jjsGPM>n>r?31<<`WswDhMwG=UPAo4x?HK9=`y>p zuR?bXu)<4wa(-6xDl;aQ{c(YH<}B_S5BOMoq<_kd)g8k9r@>sT-CUQk&n6z1ze^7$ zzRZI`D2?$UV`>NK&CHdm@q^bL_0v#1mzy+Zf`C!BPW3@lw<^*qiize>6izw$1FXQY zzJVd?GwV2-Lg=cprvOa4EIxy4Grns^3?_^+?@v?Kdz|}64iV$=7F5A007V!Tk}SqA zIVgG0lR$3pcVq;1BXwb-$VUuwl475&Sf4-qru?pkYCjR6jfWgw#lE-@$6e*=OF*kUUXy%G|Pt&*vVR~Xe*F+)=DL0>}-GgKkk6n!j7hgc$1AGc^y z7HRy&=J=FSU(yR^^{_TEUaZ*g?pVl)neOwPR9NNtS+xR^`JU4DiQH@~wZ!VL}gY+;&4T@O8q!UlSp~rIHI$b*GEsvS07|_3&>|IPmMB8*3m;=hu3YdtId`I*2=3 zb2^*C=H$~Flj7v1DT99qxWLPs|3CldWH{+1e4Rfbk?11wkhUX81(YPWQa1t z=4$01W9ikS@E#MTaA-^nWXN zIM{Tvtu_hCY&y8g4{7o%G@)wAUzKB8tFa)kB8Hu7b(6E{`xi0$V!LWH)yQm|>p?`& zX6xIQ2|@HzgN(Oo0|323cCSBI4N!w-N%c7^?NcvxsZtO?HYsFsFA>=2uMP|xHW2`XDM@xgTvO{W( zA99fzG|7)jO>!G-T>@)Tg`4D3g8U+M>VhfHq!C}Xdwnh!TOlEvT7t9-#|W$^9}pI~XDc~{qG&Ha zKhu}d-@U@ssB^#OZiSF9tzPtb&E42|lN4=n?fv}~avm*y%Z>TrBDu_V&68{w9p%~T zKP_c#=oa@8C6RW6Wkq1hT8j9~ccxl#T`0cEO4N(M-s^nc2pgGCOea$JR1mSdMf&jS?_f3y3#N;-UOY9v zX=!SC{yGbtlo|WVoPSD4b5$yyYL0(oGM=(mX(sA5A}UyV2A%46-U(|H`LPStK{{9_ zq)s$TsYjf8r5pd1+N2RiKnBI;bgSIIp2XncQqypt+`lBkew5Sfkg3(6Z`T5l>D{}= zIjWLiYmb@6SNGOkdjisVQdi6ZpQJDDkZXbeO%F4=n!6RN>^T>08cZV4-|5tdW^&0j~AlSbv5tN9uVy0zukW5Gh4Z zguu|Yapzu#1nu``XG=;iMG!bD(CzK@{?7S<JNy%9rK5D0Hj~?Efu2u3urfV;IC)BhQ z%0b4)=;iJs5;@g!>A+s3?eHJz1U9f=Z3idN#N%jrvUeX9DT(Or%d_#+pCW`P;gmFz zIxT|}s}&$-6a*{LBZE_%Z2@||V^5?)i$77O@0vX!e!qa0X4YIVVhC6IRTZ%5Oh_M& zuePat=2kh+!|pUA&iruKPE{Q1lQVZ_WHFK{;LZ5F@p5*>F}51 z=KX7cTT$w%N6^LhIP}*V)8;`oTHlAVM`1v7C5ZXhgFPo2qy@0I^>N!p9Zf7sDEtLP zC5Tf=M%u{AO=Pc%NPVHuW!R9~-kwA~T5e{>eMnxZrKLy9S0`PbdWk^=ZHz^<3DOjH z`R5Tq*O7L`rmRvS*lkIEBqQFD6N=7Xh8!V#|2{R59CwUa9IhGIKHvGb;uoE$u!T(T zcm9n(21xY!`|Y!r;vO31*{8u-?vF{`(SuGkKz%@cP;E;Dr#^f8_H`8NGs-m|y3o9y z(ETy_BUX0D7gCPv7V0!81yOR-Y_b*|38qSRo*}00;FbB)ko3&1jm`4>C}%}Wt{9x^ z;JV{6TtXyCXGcVxg_R;`-=yH<@d0A73!&HYK_j%cL9z#nOWb-%I+q){u0TlkfVu^_ z1o5@97kuw8y^O*ZXe2-uEQ?_m7A<*Iao5WLJOHJ=)zRa;-JbGiID4=98`M=EPoM$5EOZ z5Z5|YR@LMxwMy)!I~p4k60;-Awb(HoYo7tKiYo|Q6!`LvNdf}lBsgkE2?;>1G21e3 z4-(vvKIFiAw|0^o&iy=5OBXGh-CDPuhQT{7M1}M785TPwh8;&8Ymwn9xg&0I#jR@x z9Z6mcq!KGzdnlw#rt*;t!DhvIW|usZb9?kbOx!OB9@>W_cBiVCb1tjh&ZP@@`{ylgpvOl1jfm zgvZdLjb+~5Rf5lhnuyVSym7S-g~6;Q1~Op^ac{f31zHwv`+XSsBn-0z2*R9#-=CG& zY8Hr_+x2+nM9M+KTw#+!;n!-xDgOk?nWUloYLXhDak(Cf5|qGx=&T*PpGo4fn#+zv zB|jhuQ5q^|6vPE2jqLBj6AvAu#3KV|S7;=iOrj#Y`E^RtU$AAVWiz}gFAM1Q)kU_X^mbcPE*cg6%%8!=sqejMW5V?#56FT=IQhpR4TPYi$WhZnRVQn}5rdaj=g=$n(3! zZrTGE6%zJbSHc+tvN=iwk=Htj72cHgJzsS zlGd^$hVp7Wj%4n-varERxw@nK2tPtL}+-+m%77gDVGVR*&c1Ji212iEJpFzLS=V2Fj{7)5^u2=`>uQ zNQpRrICxxKRWA1LX&S4xFx^yfB~j6)+YTk_;K=NH2CkvX8TZsl%Sd-=$5#&qZ+j(f zX7K?zym{~VYUFLN>4K|uyn@dwzj>NocwjghG4$mU)s~P7MPai-$0$uy8ZcP zQ>yN>cRyoWoBQ|9DfeAWPs0uo{lV%)@JH@2o5c>=ee;CYbU^Aj6O*6X<#Jgekzge& z=QWf(?rb{oM;yD0tSYAz7@eRnTS?casJqGn2VQ1HrD@0})sF;i&HCl0tZyDatD8qE zg0k5mNTc6>VNc5%^--P$4@JF|O6}d(6#R z09k>R!Rm|8rSFS02k#&{zHF#Vtw}@)$Ru;d4OlHvyz%pT^V!zRW@GvJFAX@??d9jq zU;dbdbg6U~^B+(hV$%NYT^Rm^l?kdk`Q>5Or#yPSaqp(b8g_#Pu_p(vZ_NP zjY~@80_!KdiQYU~3EUd-tWehQ46&YpB-?o)(5|3ijuGIr?eVYev!|qnj>b6Pxh26t z(ds4Nyh^j1tEMr?yUfmAIRoP z5kt#0P#9AfqFBhwc)R0|DthbIvUMPcb?Dyd9Q!!2Zpq=qP`)CB`Bo$L{|d1 zR%2!pqfTemv+3M6ji{JBcHUpv6pW-);(QhwFRij?F3|mm)bs}pE4q0qsl^k_G+MQr z4q#F25NgrwCL@?kKS$GeK}inbv>YAjdW1L%CY(gOE8unRV2TuxR$Rc6+t3uGZ4BsP z5h&m6K5u_?_=#pBrjb(T@E!ON$Yu>ERX_15@^`*}zNax?dbK7c(rP z6(#K>xau|_I;%n47FS)vc5EmqMK4Wm6EgsVmnWQDk^BOor3BtkX$$reOM$+Nf8!TU z7DhT#C}Q~5^)G3!y{^Wdcv}JO?bKf}T#zo8X@O-Jj=bU={~6SzQec0IXr}2L8{5

ru@OtF4~6^A?Q1-QKEcT*?-Ww!ljSQ(?;%BOz$c>1X0kMC_a=v780CyZ9H@fe*3cYoFkP zLH>qpf`DawYrRp;iU{jk)u?IYRx1GqWZbDvfSwa}@NqeM$YV58{32>>CsG(qVlaS1 zXN^p`kCV&lCLZEwq27jP!R6qKsK^n+*~NJ>M@r7DS@ieYdGfE3`>0j-v zk~S7z!C(9Z?(rhV=H$}1>fi!r93&8vOJF2eG!Y!^d=f7E3OTx5-E#>_jD|i&Gq7A1 z3Tg}zP$*cktMA^O9UpNQv;t%V?uqfd^a{5ZI&xuY2;;HCQyvdr(! z1Ij4EEu0Uo*782c!hDm3o}X_rg3;PtZNwR09VT~oZRVG@#OT#tzZTQBOQy{M2X&aI zZ)U?$gu^gs$nA`o27ntH->1=`!0}>>xwK6bv16_m6{K|S^V4=uyJ{-u9mKc#v*ouj$Ns+Ak@DY|nJLGZ3_Aw<@`m9Lsk z&1tZ5iG>iS8W_Rx9To?L9);{7bO$<3qmJMqHJvC1Gc(D85TJg47MfxyD11SV$yJlA zd7wQIGfEj>EZ@LiZ5e%tm$Xxs@a1eBkXxr!8syj4}lnKesqF`L>rRIv6qZ~$FkIUUO`2y(0 z$m>wsu8!Oc%K z%uzplY_*hkI`udKDLs~vE@}Qa!n%_>7?O0bbZ0G>DRXycL#@^jlJKsELW9h&3+6yz zsn)b7}eLHST>Zr97>@T8yu zbSX7$9Y+;Q_0oyKm;;K7pFHfdozRNkigRATJQKk?Y;35{stZ1pU)PCLM*bMV*s0hW! z&T8_oQ&!4muJ^%~08~12!<9`r?+}}maDo)n+N>07CIkV|mL)?iKyrcc{<&DKyW)GkUt7RQ^-cq^{dT-{U9!WTa)Em6@luj-lm=B)kI z_FL{ps;BL9jD9_-Af@y|gp)wQ{Lb@-(OcpBR^jOh-Y zH`>;37r!HVeb9m79#QQCi|D;?>n17AFac$`TLF*mRRdD;6t=-ADZoF)U_#>)J~g&^ zcXyEcBu$&;25po2@=76k*uS)B(4*7)=I)T_FgU7*0w`>Xz3DMy#Z*I7j zE6sBZcwwKi%%`ju%3p3bwILZZ1+_9=V=^Te=@t)VGM-C9zJx}{e2yrwu@9tK`jhSd z*VEH07%$+yWo8U+E#@>ZQ&DiPN060K(WhS<#nOP)MV=u;mT!ag#|(U3HDlx6PvB8- zPp5+xOr>)8#ZZNpWLNU6aL&li&!>gZ9CLSLx+?mpEx8RSkEeBrT$F9NCj=SVoRmn|$V2k!#M>Q*KOLTMWD*AZFely_MaJ1$n6KP~MhKm9qMRB_{W1+F=DSn=|}RGOKw>Kg6n& zmO;O*z@`05EQ;)h*6`J2-v>OJ@Z)$PPLKbkB!tcwXb7WgOkx#Y4%)%T5SEddL_Kx% zy?aAS-i0Mn=YDrTD|ttGYgNu#N+k{BZagK)|KwRf3TYX6?l#t^k4aE)5mH;u9%Ddi z*w~OI2MhwhDXT1&C{Cgge?LG05XG!*!CxS7d1KSW0ZCS*A0bDZm2kwMb6NP7npZ4r z@9Zq}qOZ17rnjB7jkT3#yBnwz#TUG$0)BRGqV=S{ zzKtkVXJ-`wBz?g#DXx7yA2IPA{!30g&2k~jg3CZ_)uPyf5GmrS7+(=BqrD+R3~CY) z3G?ToVnU>T8=4<&p?}t&CX~M6L=u6f9vY93h{DdJb%G&~mmm{NLKMD2h_na~pd}I6 zoGAKh20ciMT}L@f+>p-yto3aNMKQ^)rQoIqG$N=DaX%9GhU6rL1m0SeCC}pp8Nr)3 zHLpDlomn08_|2Qh8DUibg{lKL6^d%gy+`}a(vVqK zvlcly#Qtg+Y=&yPySC`qhNO->Ih5s{Uou4SRkn!jb9XrjaZ~E3#N~KGX}3hkBw)TU z`DGGDxmjRt?)F`yd+tt$)?elk6H+m(qdLSj(KoM8v=~F(!y@=zIXGu_RlD&TPh~Br z7Rl^t$jy1iHKCP_GqEt4jtYASWY3PJ9iA?G~+2dI{p&CMH@mqxySmC#V+l)kqWm7omiV z62rMo+K3(C1*L~IsT$shJ1ujK;_-zV4WN%y=Q)NZ57H5(#JL-7#}n?8ey8?@d%ca= zkUV0?ggz+$ojz5&!yhf zw2}TEdua_#+E22^9ABtZZI_2Px$*4Tqs`4nJ3Bt|&);qJb*&w@p^w{j+#=j44}t94 zF#}-(Z=z}`?@;l z(I39MxA4d2zy2$)U>ZRLQmxD72)?Nzz{c#gj`R(Uc+gy9Rb;2(eiB?G!B+^-8=bwa z`Q@!G_h^Qf5H$>iF2iE@6h){rogm+rNc zkUesO@0UB-;C&L5z$~0F_#=!@mA8$LcoLmRG{(QZ;zV&>^7*OY= zp`~82uiIOgWi4-xnjseA08~Lc@-MeeW{HRpYjDsw!lrcY9W*h)ondzfVcT^vc;S)# ztyryb1J-;DeOOOs-(`u*zzh?5PlWv`i$_;v{}P2U$Id6qJL@ZH70jH|Mp9|MYjXomjtv$?ai0_S6d_@H`Yyk?g+ufNHULD2qQ*&$z9~h5 zT7en#A(*_Dr6byohVQ~YrHmCRtOjFqo6pM3M+nYd8^o0QZ$OJ&mkShI57W~r0*zq^ z2&boAEa$P33pkC!cyRR08Hg)ZTy^}VLyfsE&(ABB64;S&lc24LSX8W)sWwNx=@5Bx z+sRRyfs3nl&7(H428Mossu4s_W>hk(Fg4hoK7ouHGX}WM;XCXkmP?@uCIQ??wa1L= z(-F}|f{81Ll8P){p63kRK5J{?EVhC&SR;gKiIJwwL~Nb}wl44vlAsLs*z2TYLRD{d zmm1q!Tg`M@9wC?%>U881EiNjM?#eMvmsSJV<4x#oR`)35+Xb?bO;2Zw3ZcxGWMhX5 z=~_7mwGIdgGip{LPmCE}TnAecjxjj!FXk*ldq{EY1iYdQPtF>q_^Cr97f~&?yg%nD<{&+9Yt5TSE-H*svz(HJbLIINbWyt zgP8Gni@WBy=W<#e7|Vr7oH3G|(n#oMTLE6eAuT;gtMs+Zqd<+MKmr2t(#v(0hY$tX zwz4RiBgvW4QOS{tWQzJj3Tl(D(UbKq&_SsHnrif-xmABe*~J^*KH8PBX?psZ!baH; zEu0A?YH@eh4{ZaRv9j`sY~Ld0XLILnV|9IbW9!Eq1C^Dn=gsY{4a3Fcfa+m+w)rw> zrbjb$nbxyf4g3{hx03sAlpI@3Mq5<80JHq}t9ISdRy#G+a_a+`;EW8)Z=riw)l)Cj zi1UqOb`^hA^pm^sJ|TRi9+J-7-;=i2Q4f^Db2TcBN&(pgxOdmOk8n z|EzoP{Ab*4YAr#q(($v_^p9*b2V!N^Z)F_Nx&$J2rFCwAi8#e12H6gB1baw(g&&93 z=@4}dDk9Apk*1}KsR;N}#H&VdMFSD46eAMHM-E6f-$%G*{s_JpiYh$oU-D|kren{( z+P+O?nqDX(ITD$w1=Rz`R@##h8Y}m;AHaz~J8ED2D5V4T+jl0~tM5&m^ofIuGIFT( zt%n8k2Y@J@Va(_7{D&8L$Jr;Sg;E`9%b%Dsc<6=YmiH2=mvjYT=^4ifl@OptO>BSQA#C?E=!XS2>$w$yW(z@Ef?Z!!|f$i|87#L}d#DFl+@Vi23*t49# z70pK-i!dSv(h|_S5<5j-r2)o}>ZUQ-+md#67K%qQn z(QOAOKs_jD%Q5EDly`3o6uSU~rhJE;<73cBkzaMKAL-=paU2Sj{SKf7w4xU;huAhCq+{C8Z?xnYN%$^pe5c8xRMN=;9qD>ro znrGZwgcfdFx!SQ#?E(z5-IfU}xn6u?doe53AyrMKUO3mO@D* z)RE19Izfd512!Ub$edgB`urFX+u*He*M=omJh!Q?C|K2kR|h~`MJ&v;@h{}dM%_k!svFV6SF1y=`nD`yCJP6vG6l@BR08ZOMRHq`m zKf)3#HSw7B13jiG2c?2l+sLL$kdsTPPk|u{XtnDqD;;cg>wX%-aWy;z zKX%lH^&3W11YJmlEiGhZ;-Mk5+O)7n4jT?|s>=j|f6BIMDGjVRrOo(XgaByhs7X`p zK9+$JMe-G(glp#3s2Cg__yI5-Svs0^FGlN4Fs|m)lH{GuB&O)87!qKa`btw#Xfm_# zMF4ZOHRob6%y6Gz4anGU_oU6VVdQQlOlKD~X5mQ1!k){vHRPgc7wnBP=u0#SvC4ZX zrp`H$+GhSmyxui8vuYxCGgTh5n<_75Nz?Y{iuKg6e@zYk#ucr1{JX4Zy-5uC%sHR< zKp$2HnNiwIMJ#ehrG=OZ5aEdJx29P$|7SEDVn=ku*14%7i6d!;0oO5Z&#fMwBt03l zY8|ivJLdpmOJfl9<(8xm4@VIf2`k4WisntFf#p<5Ex1Vzn(HpXgfqeEXkH>mqkvb| zzUY+tIG)M|5Gk0!~5AwXLU@{N}2Ht*49xVV^Z81CZ^O5011h%IO^;{8If75- zt#|7~U*6-^FZ{$(>IUmi_FUCXB3oMCjHhaK3P#4no*)=dw+N92u$;+E+0Ov? znh7tB0S!MLI9oCZDc-Z>XiHl{pmd652+32Qo+@X`gzs`tnDALqAQL{n=(Tknw&zW$ z4*=jeA$83m3&swUX-B)CM`*jCP1I@8!lVh85HNT?F?eudhgMR=-^|a-I%p~7tNrjb zf~w;0?@Y71LyOH#?$7}db?R)u9YyW>JS=43=%1ZngV^Yosjj;;uWcFKH)>&;><+; z0P0FU77^~^I&|~H(7p zkNCTi557DlxDi3+s4Y%f`;SdmAX;ku@79MnztiHogk}65nM#(TcMxVps?9 zs14LNC75vxEN3K|Pntu!{eQqadNMygWVubS50vY1sb^-EJLUdKsr z6*_Q}M|Y;Ez2F;sGy{C7)zn#*3eSh&GIq0ub^YB_Q8HG)ARlRIGf!CP@_fER+tzh8 zK|8?Fehk(e);J>(VXQQP^o6i!!MJ{W52A%yqy&S30V+w0yYQQfM8eX6UYL7<7rZr- z1qb6PqESsQoqBJzwv-$iJccX*uMSKN+57Nk%-sV`Pe2GuK~S-HC;Q&V15wz+tov9z zL$U6JF1>tmfhW8zI=qY=Fl#y;`xkUyW=z1|kT{^^ z!w}*c97VjV2H~#w*BHcv?oi8u&y-;xhL)rvAFz)Gl)Ccn{Nz1T_XWXagfs=|UFe^O z7NcBWO>tjsAkv6AmTLub&aV?PcBNcd6GYlv+kCOLy}bQPcTOL zGQWrd82Cw_fO6#UotNXxkzhT$*qPMmiDo&@SYwQh0ff!OT)HH2f#f>4vzY?gq4iRm z8%ENC`Yf4Ioon?fc#rs5h=~=aFT4I{b4;eA68YEVwXySpP!=5NaG1jxBdCFgk3a;H z2Z&?4T>HyAreasZ2*>GQMGG+oHSSv#->8<7tn;%mQwbZgAyiM=h@EF!+s&1iO#phCCC8!8(p`Gq z%N3%S@M$v_Fls`sFghgLUQ#bP-J%Sjc@Ama>l~iLPI989*7oC;G>JH_2|uO8Y<&mp zauJT@N{9-ZWHGkFbX(VMl?mE>0aAsZJYLRrmzlKB(hGs59eVz-1smnr7>L{b0wvzL-DmKmaD#(T@(g!OVxwhp9g5s~nw|KJ}0k3U%Im0FA zTj-V*&Q5BrMnss^+OUx+b>Ft}o<3haYdfvY$oLpe>%v9>%@EqcZs3FYv755eT3xdq zN)n&dE&(+rkyB9s#NdqGwIP7_k1mp&rY+e4P86t?oOVdp`VnN}!*o(935DS}rWNJm zBs)}MD0J>UjJVa{(6K56q8gpf*IOAIoh1!;c2|Aak{bCm!#KDm?P84c85e8gwQ`1A zKdG@1EcE`z_Sw*T0BDcsRB1ycb9LD{xJV_fm8%R?TR_ZZV^uCcTbs?+Cp<}${BT`9pX{tQPjHRRF_~;VSS#V$9A7{*?Tz`oTj(yre{0 zWE1(H75Li7y3J2rovpS%P~HB%aDZNgRq*!t@#0dCl+bTBJ>z`{k6jAaAi4YM2KWE5 zh)v@*N*~U!uGFva8oXMO)56}PiI-@Bp2W7JNi1U9ZdRmM5P(}>px zH<+vD{=#?ME_J`kRa3EC10gn5{JG{mKW{^T*2kbR4f`~Jftq7dsH7Yh7?KfB5abAy zXpC`bb`_e;T)I|_^T&%Am}P;LYTr`K8Hn3bb1{@-#C(|)eI>G%ZjDmHPUVS!hg2+0 zD*|Ytj23nXJ~SEUsAJ*+d`{tQAdA^8E*v7|LNNhu>Riz^S(yIm7zM6wt1Er(IRCn} zx_q@EgZt$s1p%~2<(CB_E#Xf&;ci4Pzb*1D8Q07AOT1sT9F@|HlwX$NZ5f*R3FvM- zDezB09eZ)7o^45A@g%zMY2L0@QcQ`>@mD71R54{?OS2>W;?c*}g;h*-Adz-453&Tj zz!@x?3ld}{;}9$Vnn;Z^3WiM~DxeSPE`)G|v^fhWX)MJkwAOe~u)cNQME7K{*DU;w z#TJ&6kC5T=75XP`5ES$>WdmROso9sH$^iVDfz8jK8&G#cgRW0OOLLH^? zo&e#}j1Q=4$R<&%vBiXYA8FhW#K;k~e4VR^ZK_!B!c>5_9^bqn7e7QD?1N(qH`mOt z2du7N`H)kT{<>o4a35w9-BY<|aiW1Iv^Sl!mW{pFP{$+}T-K(Q3>HGTsq;rBsBN_w0t~07+U} zy7%C_2j6}7U3J{@t#@-t$ zHHZk<^j(moFFD%WqF%qgylezjYFviy38JkjhC;aX^Fk!AJgAhdNc-YA-pS>@g01M7 zL$GkSv1oFJn~0Cv+}|W#)`He_*vxW_>#^R(WnV#1E9y?BU%!h697mjqN5pAxr|Dk6 zfNH12SwC5;r$JUMig6usesNtU#E4DvYq*&z<}6!B#}^4V3>+QhxA9tXu`})kpLB7` z8k%&DbBH*v;3eQ5Qr`Jvt}tf2!9OJYOD*54qs#sVD?@C}pX9U|+m(_geH z#up+?YD2@kql>z+V_2K^JtUI~w9+IH*dlh*X*NK`?t&Tvj)a0rW};+YV$J;sPHI}< z75s^Wi#m{lw*cj`T_9F-u@NNfHa+d^!du}Pg(-LD0FR+!_8BO(FNN95byw-bLE&7t z?(9g+MQ2Hk7Qmp><9(ZIBh_`Y2>A|_*iHwc8cTGanoN)l&9N9VSRYKpGE$*DoSugD zG2*7TLv5tqyjV(XTqV`5Ry}aVi$FGxDn`pua8JBv*o<9Ze+PuoD&0d9D64iaAIBRAqefg!U7)s5u9yxL0QMtYk@?mD zdKXYRA7aL^wl)i9$7Ir0R6}b9B!O=bJ#<0^nYkYPD%PwJn=>)l-8J4Oro!AyV|Z}= zc0Q%xxTYZN=Q)YN(a4BpqlBbB5iKXLu{e!OxV^dl`N^F8%I5k9d;4?Zw#=SC_hh|U z@-h>PZf$L>EkB1J{;-#sTXps8#2%XK&ws(hX4Nw9vK<)1xQhS%|NOuAmcISwp;!z3 z_%?{F?$ru`cG9?ZHc5a_57(UsMb~~@+qMBYzdAS?0QuYd5AS_*--eW*ZaA(d>p!M> zKj|DYb$FtIX@9r0bno7`OAGhDdHCS|x8FW^xL`dFzb?DJddZ(|Y%TkO?>Hs9OwMls z+T3hu2-}wb-W&;YA1>W%d}=H%tlhH_Eb?w~>AQ#iZub6zYwW}J+VaMA_h5DFC6;U3 zf>mYjVV@@radGb3@4o%!yL*fG?mzry>E2Qd)mQ8O9O&qq2jAR(@bEs@@O<0Ɍ_ zE#1Gyn4iDoTF>>BYY%&EWgTcM#$DF@u;<_e!?owL5((mdPVyymT$kkQuVi*!m;z?y zmog!VU6Wv)8%VdyE+>`6KS0H8uu1y38g@3ep8q(irV~zPb7X;+mh6qx=6|k9Yt62C zy`X%-m%!NrQ!nA07VJTi%e|E{QE+lB32&2drMku*5)iR=-8E^hZ{DcvPIGzlg>SdW zfbP;XI^ddhd19WiwIU19h`8cQM5G)KCN%Td6#ZxgH%mPDTxSk2Fu8XJ#Y*c4SdgG4 zVF!6Py}Mm+3esXx25QWSTw<2%O}@Z|cz)h>o|EzOllA9#la#$&0aQ1u5b)%cY$Yol zLAbVvODxo4PVitk^Zbm9wRJZMUwmG8DvCF*9WBg~%3^_Vml{t#0(C$YEoYUvIva&& z5LJ`sToWi2v-F}Y?l<@EE-Wk{JR5A!%Y@rXjr&l&;2?y{bFGAL%&XxfG*5g~&1oo{ zM;JPCfNa8K+=TWa;A)#IN33vnqW*yYQ#5cb46?EHgl%}f+_=0N89b>KhGVJnh}+bM z#k>)(e-|Ndf>amci&!&@+wn~iP?<`t61;3RM{rIi<45^IP7{ZxJFji)Ws5_m2OhFF z5e={RCDU2<^vD!tC;^O+kbwz%y2-{Zu>*sI;VFivLY8pP_kF}j>*dq%}Mxkr(-NQ4q2Y4i!)(YqnkOIMmRZwPgX8sc~X1; z6QQb^KwatNqC#>4OQT8cWUXxBL%nH{a}qpLsp!qT#%gKo!!Bou;WeHrv3VLjtyq?^ z)RrAImcUQffTMQIm^z)44_$@C>nbIrNY8AUchF`bJOOCneTcgYDrB}Iz|oPsD zCKozznCQ!(lDwJctCmjMxQm&V5Y??uFH<4Oh;e0oSa;a@`FRvxXBV_L!(LZdg1Ooa zGL|_mqYP&o3~{Wfnlz1r7~{4kW3Fjl+9XO=AL)%;GRfEh95)gU`5$ms}? z_T;R}h`GJCDb;LKs`uPjy3*yto{a`Xo$r+SuqVvMn|xc$2l7yuJ(QRErkY@RxxA)o zD`bx1mYc*5Q}aPpE}6A>%jGjGnjw+I-jxd-3DOcU8G0lQQOF z&`er7U7B1hMlDLJS4B53@z=tQnV0$YoDX|1jalJc*^e^Uso=e0GOOh2mOlq?X|uTW z2B4~3ED)AoBvtsd0pdSG-{hw$G3qnsJmfrzz{l-k&VRdZy5zhQvJ>AedXJ7(syXSV zY`k)QG8KCNwtJ_$7HhfWXH>Z2cJx$dSBf{z?CV7uMDRG}t5itpyUE%x56nsEsjdzi zr$JKy&*&OgdU2#`V-#o`?E~_?p#DM!32}HlwY0Ek&K!$N_Xabia=!rSQ}5lopY&&V zigAVfsr-e&i7OWVlM|&v?k!}%QIhZ~=qlu`T2}a60G@tNhMP|UP7u(Sca#vh`}V0! zX3Ob{AqXRxx>d6FN*hqU@v0vbeWI6fz{q5)QALZM7P%kE36C$-O+=5Ug3;0AsKO0I z4p+I34FoTNs-E|W&xHG>GbvMIXD^>b(}hXvZ!=Pv2$delJ_a5~dKaO#UHS&F9J<(ocZ-Yn9z09{8Hj6Gp*!SVfCe|bk^>AFW*&CN-tN4FMB{FEGqPhIp36NJk^9%S%NnF|TCCB8N8on=W# z>BU{bi$+SBu#nt1`(>8Xxz~|Y!HkG}OdZda@2S6SMl!fzLn*_SIj7Rrij@wVThkcw zXsZMXcJB()j0RnhAMk_cnh-yU^aXOH&L=Cyl&tOiQB!4bL!ICL^t z_1-uAc}#NvIB3KHeDVo2U!HuBuH#C(p!)&sl+~=44|tE6X9=$C3hU)k=D`B9b!-qN zW=mE<^9&gX)M`EOaNneaQ+>bT+)8fpoSRRAAY{*N+|kJj5v<$~8VQj3%; z;pp_NoYU;=cz-WA^OPiSc2=rXDV#4GiW`J*$D&I)2A0bstoE-OgY6T(m}x?A3WmLh zOBCbH6GOzWf)hI zAM-a^yHPo+qlDGVN%E1A9a_4kcV9a5dD4 z$7EJc=ks(R{j$OqU32Sh!XOGb);&{Gf^@kO+PxLD@yc@FMEQ&-tk@I)@veI1nc&6+Z?Cp@F&{M6$G&pfu*t2rC)SlTf7aQ+gMlpQ} z^rLSu7}kDcI?lrHr~Anby4EJNB)H58r|Exnp(To^CA|sL>+Z9$7bWTag)|jP|1hBL z2!cB(T|QiRfV$(sB5be|+>z=I_bg-kaZ^Qml1VSFxB`*@K|{4h2I{(vbmv&9xd_pG z#dQrF==e2CQ<1a<`R+nrCrSTO5tz0jp*32vcnXccP@JGM0sP2={l^Lv(LZsB;y_s1 zG$d8!K!^#lkA~oq&Ia;hhq9)lNmD9bb~N))+A?TY&!ozaWvMrnUZ_z7-~C&zs^Jgi z^kz=~R1@c^(P6S&yxv7|lM3Zk9Jol@x=d?DwGlP^N@>(7)tVOJ?lHCi*cgZDS&H%r zobw*!%cgBJCh?Fzb0ME6rm>4t8vjy)^q&axnSIg0F3=vSI`LbN?k^3>a(Ka+@+990 zx;cF7(Y*}Jw+MbhjQwEh0~Gd?FG1Q$mmrOa;#T15-G(VsVe{6HElh_L#Ba|CWQMIX z{0gR1q6g3+1`FhQVx|hSvpKgeG?=4Ra5MfAa?O1ZcbkHQ2MH zO_-~N@sR3?UGg*lW~_tU$YtTp8{up*jMLM!TdX>~tC}fHpNiZ!)d)lM!1Y$6k9z$` z*=%$C%wg*^oM1H}#|esgg=E;hL&E6hP%T0uF9D;DbGp9c%R4}vE(nF_D-{=7Bk}WC z%#^i@;}_1_IJYLt3#>T1#3fHqsoWU9L(g(I(GL`4+#qDOH``L#5si*%&}>;C zbB@2q5uNza%DbE>Yq=koV{Cm_bv==aVjIOP_pGtBU>*umuGJ?|8Q2(7p3%qw=V{hQ zYXIO|#V(~G+Q2M_O#OSlL#i0u;@xi+7K&*-?k3t)|mq#=BFA}XfM-I7J<<1dH>?)3d@I`7_AS0Ab?>=2Z0I7 z-VJ>H{-J$NFpme_IJmYtnn}ZzleGgxt2*&GzB*ghCADgw!>0NyX{@a?mv7#1>v@+@ zBGjAMSNB_($2(^iEDFo#eedZyEzp7lBNm<8QCZ$%k-!(kWhm4qg>``o3|EPh)zX-f zffFK)rOmbVp$jHU3QVA^*E=^2t8sMDC^Ty3@AFt#$l7?gFu$}wx{4z(fTJc+1fem* zASPg`ueYeXz7k&0LmlX~S)B0kV8_Anj5{FRUgP0HZs&ya&BY$VN6Rv|E6kXTX{noi zl~?j*m;+j`Bh0Zw5hgV+jRS#WpdQlW$E|X#inn^1-mJt6alrI8H<4WG)|N3Oa+J1n z5lV<=<=#@Rg{&)#(p zD%HOqhhJ;`axTJK>0=K}>=Xmyn!G8qpJJ8gP||Y*>kw6rupH@W%wr1-%Q=#Co=#a# z$EFMSELq`|$0~GyoJn_q^5bI;K2mhSa7_qC_|J4jHBc!uW$vsbT~%$7XY812RqO=b zPG_bFOhfOPp0Z|>cZ2FnU)mJ$?xCQ0UBy(&;**pj#OJ<)X>*EWdt#iDTv^zrNE;&* zXyos#Yf8iNC<|bijH>F;XV2sC5hFfV0piflP$vbcu&l2NBO&MI?Z(UP4U?>)`7;)7 z<|icDeFOla5TW@bnQ^3{R{5q(VNvdB)|~ow?>wKBfj#aJooUY<&c*%IG`aHVRoR+| z*Uz47NIp@cP}8P+2~O9K#kKS*PX*>J&sJ_eWKtv8I=hZXU~51tKKn$_&)m${3%0~l zTV-!b*SeI(%4;~h7*-t2@F+x3i~e*$Rys9<`k3n%q%5#O)~V9fko##VLpNJeOt-iLFvZjHiEy5|@dw>nkg zO*pV1-x*Bs#%jKJMooj0!1@u@v-%o(^QO%`z~KdwcaDjM@e z2jkFdLQCyTvzR~GK8UUtxTOdc2_Z-DzGh()*a@xlBf6Gd0kYCHNhjvK8Jwj-Jq zZmJh|9U_jJGLx& zGt|0TPbB(^g-2&HL;3Yi#>2(?L)Ly#`-h9yr}pahYGQ9eH~&RQeJ#xBYD%mH_#Z-y zD)zq$A=ZZdH=)DXBlT*@BH<*>{`2W@S^LJw=E1_CttBCw>{>L^)-ptf&oqaM3fE%# zf)W%|`9{QeQ_+EwY4MR#M5>I$)N7IE9d6GO0iQejboNg|nQfkfgqgHTWNK_56w*OK zrhVQ}Y1MU#u9XmBgP8hP8T1HCBPz`;Ar)!2N=Ct9BSORdF+>L3zB;FF2Np*K^REP1 z;>t9+Z7@LcV|Nc8|ACj4QgqX~SV} z={^p!_i~-2+IqP74PnUHk(>YNN6HWm$u*+j_yZ)BzP_!Dg$=r2oKu$j**o_#lxKI_ws6HKcw*_18=)xCy*zTdY zws^H;ThL?HQ>tAIt3Z9$z0a75>9))hT1Jv+&d+aJ1tP#$8amR%(o1CUc#Gvgp*i3{ zZlISE8(%pq%Jkw%!!BmWit9Q@RpHAq&ipL6Vuh-R9c-%&f#&+j*7@1YY1gt)R#+3R zb({ykYE=a}ST)CdYp0(Yyglc4D9jNs%p_9beQQGoTP(iEgTDEl<3oL~&{o&V7sl}C za*C+E{PK>Na3&Spwt1!ye@ldfNqwGaYOgJL!IgkiN`|9YPc0oWX2XtlWCPa4-E4~) z%~Mcdcn!?Yk6O#lKYl5HuQd#Zg281ITo-Q9u`ccf?R#5gJ~hUgyKb>N0BMHd(Mx$; z8KOF759zD4#rdznvYxP)=oFMc;~SqW&q&`q*9}rGmCH{K*!?$pHe`x7oVF*4v6dx> z{s5jhxFpgnPM6S3aw+upalr8Qn`Dz9q0qj_TDLcMdUBYtaa}kYX}`a>K)#5@ZyyX= zC+?GO6&LNLthXpqEr(n7X2e&+FIRe82^Q#cSA2AnH(YsKb6ih# z6L4N!cu0WR{Y6X&H8mVtaBpGZo26`8ut3LssMlCnZ5qnWqX5Gu`+L^Pz`yM7x=+ES zkF~K0{ZgL#1G_y4Gi|mWRF^r(wrXbKQMWp{mN%*7(Fo@exa^NL-EM>^6!9RcG@XW0 z1eXq(hMq#12QtE@=W)nVs&jh!OhBkFl7%Px9%|kqN$_05lD$R+c_P$3|Kf(x$R0X? zn{8zEiz}qyO^#QNv-?Fluu{Sdm#=CGoZM=}W8Adx+A5MByAM}j@l2}2Jxv~w*_#L2 zAk@Noe|g8656xsPY;TYU$R1+Rv^k0m7b*sn3dWFUALeeNWBVmh6dQ0&w0W6{Hl${#qiqmAvj^{Dw z$WOxr1NN|mNr0PT>Sb&L<~^wiJvs2Btu>r(xnJYzN*ul9Z1hPM4hGGmLg$>i7e~Pj zR{5SaJH@WH-49klaqg%FQs@Fazk4bwxo>gthWcqmG{aCMoeo0NVj;P|)VPKuYG`^pA+;85LH(r8wKNa;2&^|)@lyW83FZxNFKW6SGg#&>D zbI-YRm1x(pTT24fB_)IRfT%K9Dm1+Y>YdSRYt43hQ^2W97sNTF52kyp|igc?tuA3JA#ue=d09!Y%7$>WZ zRq95da5+C8(0{{v*K=a_OO9U;6z<9>EMluv0&at=m}_8tPp{diHeuZNjTT z+S7E?a~e&amlLWW%&e3V_*BatQWYO6V|E&?85<2xh3%m%9LwcBIH6S?QQTOfL_^Xl z)M^xm-lpXAIViCSE0+T#dt@`|{979@GI!|>q~{UC7C9fW;R!2PbBQ#k`K0F&&G{;1 z)L_*!jZXFRi?I!)^J(=HbxhUM^Vr&%xUvtBaNCpE3LeYd7=qTc6r)!qtvq1V6}9CjkZ}{f44&nNq1%} zn2s8jgm?*zZ7@vw?Wb<=whny(5lG>!8#yZ`fzD@@Bub*|V6LN#;ZAyU<|rRIgdV#y zs9i&qyg`L25~!B(bM7{;46$Z(gv}B@lDb?qP>mb2rCY0ETu-nb7zUB=Hymb6#-;}( zWE2=31ZPxeQ_~1sG><3cajt$2++it!z6e;#GJV-nDb`;h)SB^bj6^%ipEN0b27RwE zPc6v9BuBI-Ey~uXjGw90sZh9S;=Ice~RI(mcgAMb9Hxb6vXLL3YByv$6V+-)R71OoF=SX z-9amfq2DJ*pV9`3LoeWPyyj@juzChFTP!^_nNrnu>dwz)a)+)|O1{QEO5wztYm}0z zr`b7`zd}qn8+Vx8Ke2*oVDK^ONk_9d;$u$dNE3tUn=lfO(8zk^OS8eb7 zd@%~n>wvzA3%hg|n5CSapq*8K2$HI&uHUa=@_!PIQ_09_-V=2;PTND4PUQW{S`Y(F zUJ#J~>iVsMr>QBK^8P07{WoeU2H4PAU!ScxDw(+vY9C_+hgBaX2Rfpbaj(O*YJ6vH z_`ip;C<_L)mR*X-8nn;V^i`~c5{!J7g3Y9y->%aXmCAY~KY1?47l>)HCZ?2ov(P(| ziYF2_D6T4tkZx+!@%!$kXzm|W@1UqlC^x4fxIGd zg9h?}S(SF%p-+Iq=NfDW+M=bK*vN~0%Zqf4m36*g;oh)eTz9(OTe!jwHF$?kF^Y;W zh%Jk#u%WwLF|2qAIdD}RE_`s}^7{jZ-OpqXOk*U0b{tjCBz~7|{6pyQ zKO;r`&thzTlOe@G+bLji1V>On;*As?Q?q3R*x#VKVg#|%)><(h;|6WiD`!i^&4=H$ z(0b$jKDT>g)v_l3=0iZm)9oEl?{f#xcLm|+R<9WZZaRE%LciHAP+Af0p-;?Kgi)R_ z3C~VefMKc&_`IRjL$B&sFq{Z>*(F9HWKif7B^wgq{dCp`Ypq$0Xp4VVFm%x#hRTf1}mh_a6|2ah(ujdFK>)! zBIZw7l~!s#h%Qmt^bJnV@dnbx9BDpq;fqK=tmtdXItcY|*IO2XzPQI6-4&y`Yr z=!&d30~x@)mRhzz)Grlp)KfGB0H z8yL{th6qreP7Vh40m_$Nsr2p1?pWzuL-$LscI0mYui=Y3m>LeV42f?RD|j7emPvh< zW*Oc|b$gmj3IAC(nKYKVO=g&-h5bm=fjHfAG&$KRx8fy2t3&Eg_HU4T$VBL$)OsVy z7Ryn<343NKvCJYQ_csM!@KI`aJmHYG%iO)mMH7bUjArugI=3YwQIwcd;22&EIFQAK zM#5#P6U|W+I~JF5S!y_S{Q0J(WEQ-kX(=s1I-SC9qjO45a8@3$&N#YA**LkTjKuS& zfkXal+MB@pKK|Ndu7imziONd%u*p)4mWp0O=L8HKuk8h&s^w*VZV3}h5Aof=xXRA*17!n+n2d& z?WU{TBf+-k3p(x}a-Y&oS6WBzTMsU)9mW47kRCPs+G>w3@LN`VREwXp>POwf6f|(d zKtD%w_wNtJYNs{Nm)4tsB3UimgfSMgj18U|v}2rU0qTPvTJgcpzjeLq?S1ZQ{}u>0 znQSD4=hYs&wDlbrWi=WfR+(438vMxBEReFv_@bYj*a<)=qPFr@6(I zpZx#qZ29`h*6J^OTi$Nk`=WwV?Jtvo8F~)Uemo_LJ^$C%hnANR zNuQtp{?_gamu4^TDgac$q%f>6FsYJiKt?nRo3@wACkz8>cUbb*nZ(h$zR7Gy z%D*eFK+aU;ySJ>aWGk=)!EsL|IZ1n+_FEOP!27ud`QrVq0lc1+1P``0eYCzC?(b&| zu`aEZ7l`uBDnTl2?z^+I(?0p<4zU@X@6Azl-foq-_?h6>c}sVHp*Yw)!LO}HoV(5m zzVX{&m48*Nxk0J!++~h^V$WfqZORAa3f@0ExlJw62?siEG}y?)hnd z?y%cMp0MfLn_>}G+aL1e|FlE4fitkDCdAFs3MKyf@Tj{-F228-uJX}a5>1oK7x6+V za{aOKwSeR6zxIz*o0QzTrvA|x0vcHvdfksC#EvJ1{nm2p#&i2`?Z2g;A38_z6CmlF z#BVO5gp58yuS4c+^786`@u`Q?>Zj9q=#!KA^ddc+@5L`&3H~4yo{-5e z$o0M5@2{g@?LSg7ZbZSx^PEYXAspu%;M+SpXad$Ez`dM-8&MSiST{{)jKh z0!<+sqqT6{IXYqo==^|jd_nr=eQpYQiX&t0cjr_l`Wo>G9(R%gU`# z=t)v5JG^+*_{K+3wX#Oz?cUnqAy99<7421(SGhjt-J`|>pMoAV{-GLFIO-BdPI~OA z_Q{mi>F0YZcw(L$o-5}cGRT*A{)7A>+6J;1^xqw~PR+l!x)fa*;DI}Gc!O~yl*Bbw zy)WR{EP5U9&uXbV*;UISDuj$ah#qcYp20X=E$zvmWS8)*N1 z)z(>yr__)QeOWiT_`c<)?RJ;g%W`NdhAiCTVL3!VttoppYo#3I2jt=uqB=3z*Y47) zdXFJ{GiEKRk7biApNzSx5Z9ntDRv|tEf?M+7UM4Oh_h$|%l;5|hrH;Xo}cPnu|;k- zk%s}8Nhxg@yA&Pfs*NkQnOXX5*-4w^-X{n1MkTuMaj41bk_!1*+JE2!x2 zD*M2c<0XOGyZ0-Qs2y^Kkm>vbKZXmepWwbCeAzlmpAB1i^<_Iu0AKM=StqrxAk*6W zW%8HnTYUgOwojDLw7q=7fq%+LtAAF7HQnpn#EV}chxO0O{P4Y8s!ez?(ahg#5Yfe!0UJ4HT!l1Jz@4`(0SE&V+| z<$jO@eTMzu4#xh}>xAsrK9NORtWbrifX8@M+uTiEwb}opCn0k0>gjhNJ6Kw7Ky2HM zBDP?#j&#A{1Dk92E0SfGVWu@Y>mIZ?>W+L9KNgSuKze^yNQ?aL(Lg+EEIzR13m8aM zV{r}OTZe#upmV=%GC#&)O3!R$vnUO}!O^hI;!7&@1ayuN83#tuQ;se)4uFwm#EWhIF8gE4{`1woU z;xwj5XlK(;U-9NoaQoalk=}q?a?=8g4wNK)i!+fPV_-pib;LMShOsgvr=sjb0m!x; ze$QVj5U`gX5iSUTe;0T(y$$&FDdbTG08>cE$%PjNBIyVr!2rUJS12R7phiGUoPbQBCG2DZ)KSyGm~3c?!$r35V1EAG~6*NLcuTnl5#QB}-d;zSF{ ztX__(Yv2hLdY=}7ZBs5j5+?CR(zjMmJkyjl``7bhaZke^w2*$3hQFC}*Km8a1vV45 zm}EmDVvmX1SKh6*EJ((1=H-o7Z9`cvQc11$6sLPC;XY3gh8RX(E!y!+@ikN^NPp4e zE(Vh(g${uWwz%Efz&2$>eRp~G-(Hd!%&e+fv_zuzvrHZp56NL8UV`|k_0 z-@SSD$}7CJKX2b!y+y0H==Denl4>;?Q|hQ*wd``?pw>?GKcP*9MemCpsM@7;Z5r2U z)Ay+JcIMX1jQDovYGjgY+oqEEu_4( zR#Ut6Wy&iPg+Fgu2P@xb{az>b3ZyY|x^w6r_Tlvf*6@ac)JKm5sAEb?ztKIZmH)#Z z#+S#{`vq#qcJD+j&-}|HB~iN+`m}%gm&cf`&bpUxdC}?ZU$T?^OStXU?MJ)+*Q;0k z=~q*)?@(?2^3|)o+Y|aZkzPvdz54led_gftsTl3@|5J@Sp>6<5%2NkQ&gYFXQ+FuI zDIC2p1t45mw$|?07BjS{y{~Uy`cTIfuQl43`uoz||G3F`Z`8cW%FWH8Z2lSR3M~bM6Y_Ott5Y??m{4|m-6+L6qbr5IW5X9AAAr?e6Zz;J1ZA*RFrsOa`I;D z1bq+U8|{Sj65m~?f<8s5#o5lkHU0f%$>;lppU&Vn?i8$j1D%tc z!7fe?JTko6(~0X{^{h*Sra9kUYENmlKq9Q7w)pmBh_=`s-_t66aCXwFs20w=+}6{Z4!8cH`FL z#_VF_fBmlsB`r$=MKL?fF6wM_`aib!-*+DsgTw7j>4Q~f%05m_Zu95%-k&>XwMN@N zh3%>_zqzx%)|h#9@b|^LOaC$V>frV~msfpi@6QY_&~39=)aO6fNiFRzzQ(s#cQJE7 zImFzRX;+n^=aL9ZAEBO!9Qxe*df1ryW^O@TZKuD}dfV!CCaodK!H?P>+k5YADz=oq zK2KT)srKi{4{8MUZ~JZc6T$Sr@cf|`{MEeHt|?u!~>)(dobC(T|5-J1~NE`sXPgC{F6 zLH1*9$|_i?WpV(a3bP`M-`(>f`r$?PKuT6*qx}{cJBp!|S4)e_-whVq#$Z{MTT11Y zr(QEGDVm%GcD}$YyG^nH^`%`k*92@3qC*wufHGbJD(_^Zn$ktT_~Xi#y-l*$P-*LY zr)CbgsJ*H%9S*!+VY;Yr#DpO7B$E+?QrohiptfgNIbMRDpQEFJy}${=eonz9&G6uWB3vy;iJ?byq1%Vb+2=H zB7VdmO#B#|%jp}k)J}QO1{7dOZ|Loq?Sf+#wMSZWr}TD~?166N1)OB%rTbKCgo$^m zc-MH}zL?#+nB~uK-E06(L#^B^Qu8`XZk>dAo%*x9d0Z)OAl~?>coYtx)*}vEs##f# zr}R^98*aYWc^xb~!jKHxM%I#!ooYc~gVR}k$;CZAN z!$n9ew&6=|`a_ioiGm=cdDkr0Q!A+J-fMMmtMO{!B4|2Uu)=hKp8(vXWhFQkqB7n; zHCDHFPd!6#-w?>D#kcJi+1;sWn;-)W$48e}H=Z?{FH#GpP^g*3r&hZs(`SuyvyvzO zcW!x4FfOcR+={iEdP~Di?XJ`f>Qmc(m%Ni$-OGmB5d$dvx-M-;qR@~B8(A-G?^7Hy zLv2`{1hrZVHxJ?mvnPN-^}+_2(GYURT+#9S-9RaWpUXow#9^ztXpHK-H8Z=KXUcXG z9isgpQjc4eB`bxE-0oOD=SrIF!6Z>b)KW{sZ9Jdi2vf5eM)K5^8Fut8dP^f4Wo=J3 z@jOxU9Fe?JKVOZRU@f_e=ihOFYMEoAJw#5=)S%8r(Owl~bA zA3uH!v#2z0=1lpARXARO#L%YqL(G49B4HfAmZ_O@|A|tNB{0WCoKp^rD{1$n;vh#J zQ!m5H9fT@Wzb&SIU`NZ?XsjrSB3)<@ta zWTf{RpR)LKatbj$G{pi)ntTR1HF`}qGZCDty6QW88>aIoq_D8Z)+Qo=`_a7M?3J%Ol_xk8o zyrs-22@-q;d>z+NF0ENuQ^q8v#*CY)IHsyeD>bgs0X{1?jp^_twJiU&Vo7`ztM*ki zVH~EPenOAtDI~I_5`zuc1j?!i7u>E+1KaCAK5I5s2-E&^Hp;;^H-_ zy>T-gRmreb1c;yo#kutBJMPyoH)S!@s~>Q|cvw z5y^+BS~1aQzT2i*P40=WHSw5o7WYf6WrCpEzzcw%?#NQD1xGeLsn{6rO!* z$#V=_WApH189U~{6Eh1VlP#+`?<`|DMtsyLfp@ftMDG|~9$;Z~Gn`SY>8}>ihMDe% z@Ei{0tCQ)kmZk;XB4#3Z=5xl9-<$Sbc0~)qnWiQh6Z#bOm{?4B5;#W~Er1Z0S&S%l zL?mQ3rnmkKU#rm>qo!_+QB6EiD~T;m@KcNZIgvPzEpY3LMCM8}mcQ0?NhYLg+WE6}p*4Zi z(7{k30qLx@jgoS+Y%Awj*9h7$tBztOG?C`95@&s|7q1Qj1DLRXc?kR#^LT)SBfm<1 zexYuwF7#BJ#+t-RO`~?aq==U83-eSqQ00w~AyoFmFjYmxij_4jgt6{wSFu_iyN<+S zI}#Oaq%g|TCA`E?2Kym#j48~-Tjy`mhuhgxdT{%sKj_aLqwzHB_wLl6M2dSCOmymL zd#{&%V~XB?ry+1=jHQ51SGw|mx;5u*Y4?IYyYep zKc7Q|{Pomod*6S`dwKNGa4D97e0ORG0mZxAB#g*^HP74q`1y1DfcU-i{@r;m{eIf( z#M>RIVf1@^Z^&xBGukg!L!)OU^oK>zAC|zM(gNs-`P;X1q+Xl5{xEC(VaEEyY_IBi zwV17{Fcke^p8CTa?djdQ{xC89VOG{E27>N8o%}_H3D zcmm+W*+zStU2YTa7;7*S4k)hfaMeQjdG8#L$yw-rXdPloUR>~zd8O6W#^&Z`Lk417 zkw`s^j?QUHJSUP_vtKx5h?aDFPKsNHxnk22mdLNB?~bEsAB_dUiod%nRcILh`hNpE zL*CretxwWDB=ZwcDsgkY3o>~T|8fBFlm`Hm)P_2+%)<#%1Tf>b%*QQwj>rI?f*wsIOKR*%4Cw27wuk$}x+2AQL|{naVe!sZ;JoSK%IW?|D}Xb@MAY z|J;^`*;8vMQe|%Tg`;44Gah)0g8BgY^~{W5sOPNsTR0VzMP3}_F}C=^NFX$^n@|vs z1gcFg-Z2V|JrFHnQyQ1#hxl$^EBM@yhnvvcSmZfjiId};jbki=n9x8t(OLa!OxM8X z*V9=>&xx;cxDW?AN5^vx0-}h}g=zu7f2|{8qOjD+33^OWco2f zujy2>F^vOyY#YVMPt;U{|`zgB!ms^>oRSgcZ8@>`I*04V{P`8&-#~Lu_qwE3? zuVtO#@Lp(D5?s%aP6~b;X-ZK{=pBr5v?X8(r=z}|bl}WiQIxATj{LSh4yoO>9aw{3 zZf|&RNf5^tBVYqnSGQ3Qk9N{fq=pHdOKmWEpL9C)@kq_#-KNE;m<6{B8`M^auf%dY zlg5J79spk(icHP1@b!_bAV2FmqIGJUcs@cULDW!&OSn*A6E4_|6 zDKozL`D}ulpSNO3KhVq!$KOThxiRznSW&9RqMS%*k z5_GQkwG=4rq{9O&hf01946+&uy5DL%-)c6R+sn^)HVCL^4*mBXY*hy#9nCbQoeLAU ztYX=2F=VJmL-mmYo{0nHEpBLN>w0JBr!Lo=bYGaOKqYroJa~yW^WaZ-$%6>O|3Q44b?e`< zq_k}nM;G-@Q=|T5ZTQdJ#;Uws5E^PCu5>5LRcaM(b{v!UKmm`%D}XuR)()r6fyLTR zdzo%;@bCm7C|V1mqN?uUKb46^YAjVUzrm|ccyX4CHjB5zr&G*z)$C91xLypgdXt72 zZ?0-;hr9qqJCe_AOcrbl&TcXs>Z;yk=XGqDVk+-{Y4s`mryH`6l$I< z_DN&#Z9y$>*;#zNR(HvTrkGbc_eFObhL@`Ki9E$B zfxmPd++XAp^^q9e_oP=B-iW$(> z*}29SJ1}wv*2usdw*EXghmG!G(Gf`oi*EQ<_2DBm&LBvLjrj^n)Q*uSI_%F0N=lmb z(XF?|VA7jJu}pl0Gx-U2JFx-Vm~=gl&Lnmqo&Aa*_#cE3Sme40kOoNqt{o2nCE5GsCtU)g-4C=!%0+9&*NzxniT3IaJrP{UX72Zr+;u&I!3wg=lv5hsn<23bWM)Fwqa7I zFtF@kCj~kElv3`Qq%gY{{qci^kah8QCRfBedPc;h8=7#5+3bYwpE%Hr7H&i{PvlYE z_J+QHml}(C>Vk*LbyLYAN34Nz&)skhY~ckK=|t&wewj~{S*=Wa(LKQkVs7mKoS7I# z!hx6zReDA!HNuB}3h>kf4nkN=C3hJM@?-n#=i~<>)_~Hyawii?OG?n@XFGi5HR2~< zFt^kUmfc`(=}~gbQg_+OB*WNJz?koSt14kzIJO%SyJvvjI8)e9Ablf6=UtT6V@eD59xccDW$RcccnEQjC$v8?* zUQC_gd$lusuXctLSV-$pgJ-IJjwPYcwg*K8Kj`yd3u+T3cr7+uDK$F`@3>}8M zTVL1_Q-HZjqODhU0^*TR$kfY1?)3>2f<;J5^`y?6FfgZd=tZS+M=2`ByI?kAPnFKnZljBX=$;Nwy zRvXE7v_|m&2adEb`fan-kGv?!fsPGxmdlDbMO^JNQXevhwHkXm1+}6l?ObxXW@@xm z59fDR`Z*X#PX@=LAU<0EYDqD9VL%>J?0L5&7g2U_?+W;!*(QLQpv@djhdieZAtYzb zYGb8Rm4obf$TruDX(tTk=?NC+C{Xd76Q)Fv?!@Znz=oCe{Zp6I(_$1KO;2BbwV-?; z)6?*M_PFSe)l^kxiI;MXW}DJ_iMzq4+3X{U6nh{zEj6XbbzrT+uG-F=@&4wbD6R*~!|bs|*?8IXuFU z@p58VxUsl}(ake5OUNL#e5)g|1GqAz>Vlea)UdpWOEA5WGb2tr?F5pN@FxRvYtNGI z62KXw7+F0DPDM94a=kHQ%uwbr6nDLLf<2J-}8C1pA4zl7Hd+ z3S)~+?q73lMu!iMY*CA7+iT1uDD5oz0)ygttQ-_fC~t2aT0CHKAJ)R;{p8ynrS100 zV$U^ocmw?6U{#W5goH5bn#~Y4QgDEv%cC&05fR71hM?Sc>yvs+o$)jJ%TSs{u@w)E zE;m2%Dpg^D^c%$>S;pn)z6RX+qn4tW5IlqOFpHoY5P!9pK}&&BmZ(<(r@2bthjoOX zVh$h(WkPijIEPZE2z~1+5^RnGV+5qNc1GIjhc<_tdZ1fG2wCnWn|qw*G~S`EXTDmv zorfNZ9rK2<;F@Cp@hs)`!LJcf54O?!>Z63MqE?{+aBpHmDcCa=+tE5B{gG1Uz6vkhuwt=?JM zUbxg=*5LHW_#2+Nn3Q@BkO_FoO$BeDlSpm&lg+??=2ljc?jjQfZA$?gg{b&4D4#ch zOcP5|iG?~)MpAN-kx(~T4P0chHYQ+{#yF{{=gfi35EX&GvM5P|#7^3K8(-y(SV#e9 zE}M;X`>D6R_5ZW?uI+6dN4n@|=2t+Ncng%ki{#i&WL;wG5^J{P=ty+(>`l^sKoTM` zCIJosN@ghKx1aZYtE#)#1t2Ipd!9Y#WX2-aT79XmTUS?CSA(!;7FJO?+Z*R>Hm#VcSm+sFDI9&2CFF}SVzK83^6$Q4EWiY2MXqP2yno??n> z0W+<*G8!Nfc`}1etw6l6596DbUhG2+9X}ukN}4q5{cyVV4N36B+*R&i4^d&5*)D3i zo4Ag8R7In4RvK?YdmX(Qp_t~NS#T}GVg|5aj+Rju0UsH=Db^$RBRH2BthJ|e7mpT$ zq<~1qqn1LIUe@UFD&>H*d8PntA+_OZ!)yRWRgtg!w$@E8nwZusA*9tI4vVF~GQQ_i z9YuQ!p<&X>a;CdV(M z==8nW2n2b47~L+%vVxo&Go+1(*t*@1ZIrf9Xcsf1#S^;}Cf-3&Y;U^*UGwYkVApc1 zzl1OR<#2pHzeLJQiXtyB3gcNM=GVwhiUQm_JXcr^=rvvg8^dU(p^xMj*nvelN?ORn zJ)DY7)sd_NHU04b8M4kSBod=WdQ>|R@$ljO`=E=lMme`6r6UgAM}VW9g&oc2IyXx^h|g zM|v;#f$w-m5&PrzM_Xa`jc*+?l;o2zJ`1Su0`F1H5+ASu`xUAoHxnPao-7z;?H43{ z=6fcBhrM_ioQw3ETu?fGHcQ7BKnfJL@qgX0YGfLQBN3|G#3VYPIrt9rfWf{`vykd< z%BVuHX@h>t_mK%*?8n{2>HhW7GBI%zep+cavpVah{~#}IntSAz?I=)gW4l=@zAyg>u5Dk*i_ z99SaV-e5Y~N9r*wN&(F@C4Nv-=Fu)x;F4T0lFwU9tKeMHztEIz4FO8f56&ucRKc;$ z1eHF)c}^7g1kMd>aL*y9=NcT%2Uv+Qay&e228`2v16 z(S?R&tNXmI;2{{=Hrd@>Q1Dtx*;DqE6P91q)!qd2(n-MlX}zUH=vQ@Cj%yFO(?4Zg zo?ZQ_u3(#_K`q@CHWQKIXas*NV$BC{A-|G$3(fEB!B1wBT{(};;p{88DCQo!^bpsV z;NVv<6p|<%IY&+L9$``bTf=|e^DO}UQ&0fRNcMG>8qn2jl_!UlG(cpD^g zDc!v3M>BYzVQ1^R=WjY&&!0Sb@$@xr3(y<^#Rz6YAVOtj>~zZ)Jk-pE+86@*(8gHC z10;d&H#FA=P;20YWG9-b@xZc3Fai9p!vbUS6bjPDDa#HbvSHH=uPp_$d@?0)7Z@`= zUyohHf~<&n+)%F*EBW#WYcA*)Qb!|@9(oc}N%O?OVaL0>8HJ0P^Z-|ilKIpN>}8nZ zR{?7bTs07Gq8_)%_O8(9=)o-Y#rSCLf)%gPha2^uG#amajoy4!@JYRS-D~s~tBOzR zE-EkCAJ<@?)Q@(Zm*a_8A%0pvzU*9TJQjle*e_F@(_gU$fW?n2dEtDvQ=(WGaGy06 zGEnM@>o&J@HDUp5KK%9Tjub9kWb>y%pOg3VE?iy&hXk>HGdH7he3|@)#P=?}*Fd?;yb{Bz%WKhQjQ%TSnMwT_+g(&_RzEorMRzbc#(q+(R3AOoPu0P>v=06-pNYtqNl z!*$D)lTLszqc=s-n>2f93c{Iopgqno&lJqb*<3N++t_lYQx|yH{oQR#@y-MnllR(D zd4PxvW_>SSefWUPYGW;4d&lUXJ75UI#f`c;8uvAlx6K6#z?oZt{z1Scqv9Bn=Dmz? zpC9ZNVmG>|_RxzdeLY6Ngb}j|Y)%s@#=q)vQZw=Fwj;KP8EZ~ zx(36WQE+etpemh^si@~DQ#DED;c5`8c&Ce=es`M}l3IlhVD+C!c|D#^j)%B71~l{s z;QmrfsSAYfF-W$L6My#-K|B!pBdFaOu5dYCGTR763S=_4FNPk%ZqqcFK{+v)fk^xb+EAAe))4 z7;*y|(z(UEarLBWfOvvN>`fnR;%c7z1~=$4!y%$AcLuH>W0IU5;rs2|LYD@=4hRtc zgdv&E3n{MF-Jb5QGXlHc+Ooc?FF`cB)8H{`Wivhl8Ur3IwvIHaNGf;M>*hjJ!{+R6 zqalNtC7&Vg;>qY;519iorD8jI0Nm<#w@)q>D2?``d+UJhxU~-68!$ zqaN)G9$Ui)=l85FADLkSQ^xV>{;_rJ^LU5Zkf`+plOWS z%Q~!IG+<4Zntyo~mRoQ`DlipV7vRJOWId4@7wc1m@9ZDJ8a_$)b;WSwwhT2|v1I^A z_4x*@!gP%QjKb>Idz~ABZ{lqBWn+jGlammW6Ph!QddvG|T7Cukr1EIUzvT?=+)TOWC@d;Gua;-)z}9sZoczPj-*Bw3t!0GyuxfC2UqA#*qhOm5w=MT(ch_cjR(bDo=fw3#eQ>Jedc!MyzBaqN zL?ss>uk^**>C<^Q-g`|67FuZ?NE!k^Y=f4ri? z)&%!!Vc{!u-Pv55ZB{FgtQBj(mQQ$F(I_f{y*9E!7&4Dx6~ko3dckJ>b=q{vPM!Lh z8_FCu=U`5wI4&Pi&KMY-I_P?W^MmiOt$Bhd&m0DA%^}a}?`|ji$lis81YQb*f;lvh z5}j7P?~#ium1C*;-dHnN#h%Cc-uJwA*QUnwm?q|RZmX0-cJ#w~D?m$vY}VTXMJX(r z5K@$+Do4|&3?b?HUH4{AtUK%1wp48dB$!i2Y-%M~OoDnHzG#F$u8=zA_ zS$P51VO>2nZ}hhp&kr!IdW8()I>KuoV;dCq0`LSN(f11csL)$=wILEzE~t^-n65Ki zcnsp8m5f=lW*IocmaS`^0qCwa$HA$uZb=j)(#E_zAytdcy0@=b9hK&TUWWZ(B?=2- z>UA&!J{@2hGh?b3c}#EMlOCWyHWxatyLy=Ea`#a zOCXv2;VuH<+->C~owEDg%0nkM>42Va!y)K7py;td&5mIZPH~(ok7Ur_gRb?q2e|wP zi7h(!JA3}?5wEnp*XhL<%*XlDCcfN(y{`5J&V&jYz`&z`5%ATRZ=fR{bT;GF$$-9s zOPTp95_&daY8qB6(Gaf25ak+SE_|aDoYAgz^U}W3lTy3l>ZxBYYujLg<+FFwG zOia8R;jTYa3eM=A`WR60#;Ntoz(?!Nh$awD*ZCSX?<9E7hW|;4I9>Pa*`@(2KX|in zQm7FBtkab8JMM?LhCWsrHhLi%7prDet4=H~h;1SYg*k*C5y1jLqNA5XT;XlYgM;JCZ-QKn( z{lrvGz0HPprLEB!o6=DOVmptN(BDAIbgDpRm=BnTj4}Y>WFZ{AuC>4+ox=`0Oays0mQ{~;PIQ(p+$ z?ovx(U0lh#*8Lm88bLU`e{B~wV*jGc(-Zjv-9vb38Vf&gdnc|hz>gQ`2H`vSWeGcQ ztF6g3^`I0f2XDWKCs&X8WmcDBID9ZA?)ae$3LD(Spgl)tIa11U69ZX;&yP8Nu_Ggi zz#X_&3oPlrXpE}BV-iPQkYwVjs*X!Aq%{?w!)Ix8CTx%*QQ$LXc7rkEN<>XuB`m6Q zVC?Bb3t1pHq^`Fsh~M=-Nag)Z5Fp6_t(9JfPYF79U;Viaie#yYV>ZsQQk&E zj?L{p>|iLDgdMrWc?t7X^l;Xe4s)g9WJzX}#Iz7qr&m=r6HkST{}hJ8N|)StO_uUn zRi;YN&jGyHHhc#Vq7IcM9Jj`ujBiLg2}LO|E6mmI z-ObG}?%;o2<6P=Ww2b|X*$-RK{vTeEej zbBMyzZ65$Gb)ZR&eMs!XJ@Y*!M_Vf6er`6UpkWi9;W2`UP5ub-kztvXF^A4~hN5W= zkRbbJ|MOJ?in`~BP#xh~0p#0+7!ZDuU6 z1e!3v{=IC1zjHQ^wHV61TcP@`Vx`HH{USjPLs0?&=bIG|inCw#t1M^=wn$LU8RKimR|~Sh8aqy?3@rRBRPp z-NWnQA+9*R5--+|Hf9<5;J0a{9y#k=NdYY7m+YrX^{IJ+3Bqt4JK>1jaDKoJ**03; z?%sZPyNfe6tJmg=e46D-(8wByy5y?#U6lg{IDLZyNAg$e-&NQx6eej#^GQ5VU9%&x z6TpV-0Y%}5c$bQs^I9jN*p&+EoYXX`*^||aIZo@8*i8r{!-!Tzrs2{YKu?}N`{sui zTR$;+^QWz+FJHYta&6}!4W@*}RH%FR-ogPl4WYEgx^xe@NoO-cAEZe`An_sdW;W-Q z_~)Pb6v6ayfwakBPpSdB+wA3d!gsRu@G|OXG>h~STBQ^AU%<2w+4uz+$|r&BP|t2QCDBGYT*4^nvL&dO&R^gmQ~}QLu1@ z=Ym&R)3Jq(B6z!C9CG#+JYS&(PoP(LI#Q!}*H!EnHmO z5L|U#T7$xBR_X*IR;oqQ%uctFJ-`wb*z5m+bY;En2TYjVlS6d`22VC$YW+LIpV1NA zV|yOH=_q3Yr`xcJn^?bX8Y? zYE43Xt8cI?EqE#bmDAF+Z`K2CfNE8`LVUrqLTog?uAh&eU@7cs1old^&|P2hRGfxw zt$n_`L~DPD*2p6Sc>3T$ckfUKOnmXHwsj5d;Ti8t(+L)>O;Uxo*bIZMp*E~INcl`J zMJX5$q`%3^r5^5ea9g0(TQIh4%ZE&wDBKvhqy2UrX`8zt*6My~`Y+*Z~f=FTVef(j3Vtfr8E~X|~emkM#iwux%}F z&vxyZTTA(sh+*V%&wi(H?Q0PH$KghT2i{+-8($U(zcfk0W~)$3!@gnUiaKwV>egmj zB)B1QoPAUG(h;Tj=B`65g=A=%2KzyD4L9h*c`Tevqv`Xf?5FWQT;b+af{W87gvtpW z@DB_JU1QkW*cope_PaX~QscT^w#Q-xZEGy857?rqvfn_I3Sy6@Pm5f3g_dWgj>MqU z9$FK+8RO0cm6`8f(C0vZt2b4v7o_zy?g8S83AA0@QP|USrukI5Dm9{gv|d}+;a|5! z4EYH|G@kkETRF*ZJis0{mQK|VJ3HOg_AeXrKKz?~sExe}Kpi01&w7YbJL5;IUJ@y;oYrU*Pc|3 zkKf4rqY0BqRE1_ctT!l@N;$0Af9{4RSP?rQ3z}aghcVQeiOHy<=5IHOCEMt>1#(n( znrZHpKwyKUV6Oy>Zn+D_0w`^aEr4yI0FEPfPPdDuJ!k_KX3+tfDvH?TYFbyix>6G8 z+0W=%;kK?xE}0SkEBGjdCvbRTe;rH)t7CkISe*h__?S<~2#}!ELd`R$#J5V+S*Z&j z7rz%39o`CZxcTtS3=SqFE_oc2;?lIOLux=}SBBRt=N&?bqW0KLN4y<}A zd|ee0HWA70fR__Ne^`MY%y}8wQpcw(Xia3o^BW{h(5N5@InYYO#|%jE2=y*p?#lpn>d!tHc5J$(zgWu;VC8y3jmaMwgG*g97%?a6XieqSIZ4u_YnhahB;eCy= z1%o2<>Ir?)dS&6lYj?r4;tw(@1Wf$-nmMX`z7S4gn#kPyC`}pIq3beBnmbxo6f1-N zQ`sGQ)cNW7>8qE(bBs?$`&b1`x{v7V@tfiy!Q0wY}G3P0j{`nUOTC zs8cI#wu1HC4+KW2iksdADV;lSJV zVS)tMU0aLk$_GC=jXlolfSgHS!~~(VgX2S`3n#Q#B5b3@s}OtznHrckGb00J%xzpG zNeGY{Y)}52=L>Fyq94k|EspxEhF~iOLFBo@%js_Ec-yxRGTyl}v6BpwtHDlA_UdMVm;h{Z)#NS7BsXE}%SEJWzN7-P zzVJRg&>P&Oa2d)vRb5g$MtM_?YUN7Z)y~x7PRCKGvn=+}5902Vj3wc2YVC(n{tC5{ zBs1`p>gh{evKBy|sqWI&rnTGaclXkM?)62K^iJGZF}u@Sm-H5&o^9pnq--i}ZE%tZ z^HgtIU3_96I;@U%7_= z-Tpn)%%cyu_qp?E+7Qr?s_**ljgsnY9X*@mG$-A}`DJsgrCU_IszhaqIH( z@)n{Dx=>y4_`G=|BDHZPD7&$<0pKt7f4A^^e5;2M{b;+p(0jKZtwR0X`f=wizuwyU zsQ<(7*pW5%$v!6o0w4qc8GV)`dLcAFIw<2N6aqorFYbC{qv+gDdtK2babOt0^_2_9 zzhUEF3;@Xt5I|r@0Tx&Y{g@$rAG|p8=pg106skBM3>6d}P;ee3NGUuxKc3xFmzg+{ zy?GOBGtg%p`Qvaz7=}pSynJoq!Be?!FPK3RF7WC^n`8sxaZBvKmUuqR^DVL}Yd^UL zz@;U#%iFSX>((t`mo|EDqxT~ilm7?yrG3Gqk9-SF0TSqqxU@bKB=N85{kBn_Fhfga zbocM;F{#Gn0D!5p{o})(DO?0Vz|Qp6Dw!Ftb{T2$u=nW3!`0Q*TdNNry0Nhc6>aQN z+ZB@De)C@(R@Dr@D%RKK{4i&ip4%!4|Mcld>C;{k>7cy_t0q)yGDG`FrdI}qV$Z$* zzW+Xs=h_@jmTw~{H0^9geO|R;cXr_5*`7mLeB17=--1e1tja%EAL(iJ(a!G9?tdd< zh6$imjS<8|@``Y|8aWCV1}36cLU?EI3~ORuE`p4eK)w`|?HA&yX=;2P8-`q6^={O9 zxVuZfo2SsK!E6x(_Q<+Kgn}H0WxQL#Y5<06q_i5yE7cO^iJkY%V96X*`*jYi#bN*z zZ*cbpLWf#WQC~$?du80;vb}1Y0cXrT#R*69?7&M7@mI5tH9(=e^$U_d*NxW4oSh2)Hu#7cc-9wfjYv4}t1D%bw z5Yzf8)q>uUVxd$YCBIiir>MB31O+Q-n8yIG!V}FQ`bzgwf>)^=4_7sSnm|fp8wJs< z97}0_w6jeS4ts^<1VkF!B28GJZFMpDZIF+6k!}fh7qjd3{fE1cwx5r7w_l#@ZvW+Q zchQX7+rE!T)ZW8KtCbqtn1UID`eA1mb{2v~AMt4$6Y&Q=?{bFT=Br)ClJ0Vf{_i?L zL$rgMCR`BZ+C2G1_Wn~Tke5-bQOK&VXbRHlzkCQQ?fzE+#BEN65x$6n*xPS5mwGbc z-mr{X6_-guTs2FxNG*&`c=Wl{3hp_?MA*g0*s5>hERvb5pcGPedz??PQyUw#H8e)P zl4`wjySCX^VJWeNaK#0Y}ba2CS`O ziXIQobh}xDo)I$qo6&RM*7j{K|BcV)EtNJtD@pg+&c=TyO8E?*EW)MarEPxPKSBbS zeb{-=bQrcGH8*d5Lyg{PUk5*4E%X*x8w4BPIJ7RcVoxe1*gC=FP78 ziRSr77Ny|~ZHiplXA?wvtgiMqdN*%or^`zAKDmE#V@`LA`F?nUGqc!=fwOKw<3IiM zNsXVY?Vo;H(DIKzep1U*X1*odKkodvp!I+L^AlU&Q|tfy=YqD^);_ImtUP{3(kTFs zOZ?)70=0!!5W^mNzfw}7%D_!X&);9Gf=B#j1F{`(5 zgCwtfVx747q+XYKqCCuAvG&!@=nixHs;Zb%F~e9My_GgoCL^8Ct(xQ<>!p(xHS*^_ zyQ=uLdg9N2F6dl$Q-mI*)&r>b-S@(aapRW~E)h4@G zAq~F;_9`oUtdz$e?(f+a=dT1RHmBPS0Q)tvZIapTjzt;W?CkN#!{@gkJ0W83prVW8H!`u^SHVy zY^}goH%Q3fZN%i#>**Nl$I)>56e)Zf(YGKA{{Mgc+oSEl+CRQo``?>uf7-pg+yCRo zuRpAFTLWM4?=PFT@bBl_n`>Y0;-5ba*4}=z_H6gVohRG-Yi}RpXZiN-=Jvtb+b6ZR z&z{~b3ax%nlV5$g{l`D;e)wwpEA-3HyC43DKVSLpufDvq{Uu+b+}-r{kAFas&!hMs z`1IB8hcCa_{K5+3*O%57etm^s&=#v-uipO9HcSiKU1TmVLDK5_t8kG~9g{9Ryv?19 zIGoKR+#Py1kwWY&UKY7$nZuXY4cby>BAs|XQzX?V31DA?9h`bE*7Gc(a(gCXQ0bAqVJr$rg7WV@qjw=fQxCWs!klDL4QC0dkOS9553Ast6f7)QNyS z%O&G9Ldkx*3($+u2Ivq@d2pXn*>^VA7)5pSg}XOQ4L_9u^QMaRWkHBlh@u> zY#@!=5SWTZkLiV5)YAJ!`XAC-qjHP@82<%uMDdVRyAW@NnD})G(#5M|UTImLg3p<6 z=b6Om&J5-m=*!sAO2Biq#DyJbwTpCymJC$jB|`_^P9lmk-3(JTO8W7ActQEXB5d2xAy~2Sw@R0`LUjxp4SXL{bhfsd=JcPL)3w)R}bA9Zz8}) zP4rKW5B{pmStzBE+Su4d@raML_eq4aN4>t>ix!h?vr+b$>IQ$Sr}VbbqS)QYpc^EF z084q0DybTC{3Rz^!s#zaC&%y5u1M$alp0OwLZ#uHaQP3<()4zM^TOwJ2(bf*NIO zF^;)uj;5`2ZZ?f9D4L*Xkg96bNxsz%Y9Q|u(mBs^Qac+$+)_~-V`vZtX`jM8wSl$( zFx{TPOu`*K%1tfu7|tCxEmf9cSdc#ZDtwwJ!c%)1#?_cIq7&ZZs!qWR%Yn2(bid7c3`6d8JgsV5wN-DLMh(4e31NcPF=s49){gUeGZT?kG z@)=!L3yD!#%c+Gqj!EQk<7pa#ikTwg7G+Vo(3-X4ObM0XPy^0wmD$h$fY}v>I$E)J zs9tN)H7OFjSKD>KLYSNFFI2%L8(gJ>TLE%~Af%kc!B-NjiavNYNwij_+ALa$9M4UM z#;#Sc0T#_CJ_*JVU{)I!zL45_V`{yq*eaI*x+RLIjR=V5QRAuq-*B4CPzM&;AkbKH z(f@zm!kr5L`gtq!<8sqqE^oqKN=rpkWxZr#Rwa3GcY6DOM&JGSn_x}s!)S}yRhbx( zA^@os2a6P&a1`MOep(~_sXR?HaM&n zjz;sTjVfxn=H+A7Bq+eGMNh?xjL?$`{i?Dw8xog@B8+fXiR%HgSV_=t_(%Pu*ZB4hkKZEgFUqu5BjWly-e9><(KobFRNB1XNKF%kn5p2YA}wsD7f&Q^TDO#J6@Q)07rml>td z-Da$Zl5M1vE70s}xCC&P9Lddtf{clBT+@$X8k}f+~WRriv52`!e)*o90f#fHY zqmyv0#LUc^PA^VoXoK3h4|_+C#uX z4&0FbP1whcjmQ^uSsS?j$DvFD zsQ>UGZGtLlRLecZ4PrDfQlmG*1V%Ch)9rH;c5lgLaw?}9Wj zDE2kckuEx8K`?0gZI_%Ov$5ryssIlDnO*eC0~j2$5)!S^F6Mq|g0SE=HJ+ZEGuIY4 zxmPI!C^%ImH7`@t+1Dr5)Lv~;UKf4hD=AAwhz3aDZGyPV-CYa?ycvf(caUXD&eM%?knf1vIf2BVtZ70@*T@T8~o0 zt3co*@cQ9PEs|OhgyRuP&XX?;M@_E?KZto|EIN@ya7(mPQmVQYuWxI_%%=Qa|ekY{%Z9WH$K(1ro)44 zw{G{L4i6SLKbxHIAALgWTUKvz<96@bm5@_L(^YS#Fnk-P&_TeeT_^!XWQCo-3kl~; zV=Pp=@y#np=v7|7q=)Q6BA2stg`|{_L_EYziSMEq?;;ZG1@p&>)k~xKHhzR8AeyV4 zQL<^@ZkSOD((t%I!gE{+44LGBII{D3xqNNykSr3abAn=v&>V$cv8637S?~OK!Nh@O z2ti2zD6wIQ+1!hz_o=Xi(pAnK?y4Og?n z0+@5jy%|HD%A((%&t{V`W(us22?(8Gx=JtLL3Tvlpy%1^CX?gY=rk>JRB3m$KN&wh z9_{}OB=iZj#qbXeAuH&$cDNCZW5&&+XqIp@3@VQ{tgGi{G4Z13{3zN3VUq~CgtS00 zot(|~a8FDwD%5j|NvfPAl1WOu`C87_G_%pk5U?@e?PQ3AlgNCo>YA;`wgOsS@?O#jfRYN&L1Qe zCu@{1YG3DqVQUWcHRsEOhF?QEmx_=bC=NGzm;zVye00heVZ8CEFPPj!=a&XNY8RT?tL%2x$oF@r{TKJQ0o)JxL% z@OWUus^zL~VbW?5G0p~9SaIkp3k=9k_3~R(WXx{VPh7w#w!e@Q0AUxp;yhnf#ZP!^ zf&vQ#D2n0uJi3;*25n&w6D$?&bohKc%gVXWoAto97W}LEP(aw+S#Ox(a}OU70{p-c zM$<8pN-qk?qEf7H?DNqu##6Y_Mav5J^btyAKpP7etE2N{OAC){H0h7Vp)`{tZy5V4 z32On^iVTr?>$dQVfMTvD(M54{S4=Rj+_0hz4P5bappsD5zT#bAwiw`1IRQ@;I<~A` z&WEP@$jRPvrXxl&dty6+=OeZ z-vM-GySbzpG&CPj4z?&qT3?$vv0JV4R%5i)7nXP?$MPkAGtucjcCt4%g7=xJ1GJQ1 zIBW@cDTZf}=L~y_`?~J~c8n^7g^C13#Wv_1KfTW3RXz1s!H;n1Coa7{2>Iw>ord#y z7gNx*+wrF0qlG8pKhH;J!-GC{4spZB5a5Pz!E8H33ve-E#d(i1da-NJ&UYT)8RgMeBKPHX&9)kHfY$P2?$%>K!~2L)f5tl za&`*~>}PUxhpD#nP-uJ-c5$~94*;tx`_j@z*EePo`Rna(l$?;U;~>i(+Kl&}2BSi%e8XSrng&@S2Ts;br#8lWjQnx7b|ilY?K%CF^(b@mOq9kW^- z_F$RPwz3}R60&1R{Qmxo-X~h9Z7RYSU&WEo)TilzOVT6RlsJ8jqXA4n8AL-gXC4B| zN}{Qu3D=DW50YkV2&}Zl3i#-qoxF7hf=yxGMZb2Mh{RY$51g4j_|_5%4iD&= zD^>(tyQ=J?9DSrpX8!j7RJ9~V(ipTPM)Yrt?vL?LzAJ#}5lbE+?iyEQK1J*0ftH<} z-zy|!g!S*8e7QUQokkn}!RknD*iKZmB-X$II-$WdOuN26gR6FUCZZ;uK&vI2sf~}Y z>&KA(3$u6}>5+&(Emp7U1S3p5Xwt|rRC+TGOwL$*wSrUw2(N43m=?(i=t5C2*?r>^ zps%TFAP)|gpNidUN;+2j8iPZ3Y8d3EVWH_v$@n8ujruQScOs*JN&Q7i-PCY5+%%8D z&8Ui!tU3?>bo#WpLqFNDFaSYC{b-vkYq#RQLvRa{6&)swcL~u9G6tBs&q_PrOtV^puycXr8ceZE!s6m97e3*FbJw{ zkqw~*PX@Ezwxi$twh>PdSx}PTEa(b%EfqMz8Y@3%cOJ(uyI&TJrQsbPRM~^nA4USw z8ro=*@js$3W1_4wf7Q_(|M!!tFwm;CVCn*g{~wcIx|zCMVT721PjNr_KIiT&qq_)b z(w^4Z#!ew<%Si5d{Te#8=<&X@b|-TZdDFtJ+5w)EZ{g9cDm;iDmo25#>WzQRlj-oA zIlG~p8PPHoVF_zxKF?^jEeXS&{q}7L(y&daQ{P?=#7*{4^h?ctf&B}EGO>u*!Z&DR z71!1UmOm#0PC|1v$G>oVx$`RrsG@%ZoMvAyF|z64-S9EYnZw~VtQsFIH90N&zmAVD z#5r@R>o%Bq)eBPlds~z0eGA>q!ZYiK@;TVwN8H{297?F$s8x<>5z6w=mq*v}2&O%5 z+}6g}8$DI{?VaO>BF&YJ2F1f@Z$^8ZzA5GWwvPyakyh-r*iZYAEuqo$uL%7>OW19j zUEs=dkAGL_cgjNmQn;y9MA3gUM#9zEP!SaPsTsglYymhXh7c87wGB`X{os&`RR+Y0 zp0^6UasP(FV>Gcm2zEpxvUt_Oe9-X`Ab*s=g-*4*q`JgK6>40GO0*#9RL47F8PfBw zmL|ZyFDtfFqn5E{j5#X@TS-`xFnFY$ZIUX8$V9AGga)5Q;?L#tN+T8JWxWekZhof)sgk%!h^e@v z)n18qy_lnr9qmgmk_v3ASzugZQ_{_2bdw^9#Tu@X@OQp!(_9L9LnC!_UUOMeIVGMd z(bs7gGx@6K7IlNFzS&Ge86Zd}RuqR2F@nKlLL znZT8-9Uvim{9X=dFS!>EUmX$vJ+Z%x>v=}+EcHrRXaZEcMYuT&9l@d} zrwli4yPNt38U?h)e*E>5A9~oiSR}NWt;-NyKPQ2q;3{uE=DNrj69DQ*n;QU^1W)|_ zD{?vR_2UaV*|vB4Nc2-Y#xzqbh40d;v`*amEUik-Nzpk&R@QNn;M}g51*%+X@S0v^ z+lv?vaE!>8x6%1_{76ef>hgVpQ@vgzfcINB4Sg%Aw%x^PZ)4$jfDCwlabW;J6eR}> z2{Ht&=0r*bb8H(naF)e>sI8Ld1SvS6IHqO|cd@w?HPTKWTy;L)lCh44yhR$L?B3bj z{7k$BS^_$suiuXj5MWt;o?}D%X@cdY(*-b-hr8*Q92cocLREGS)~Bb(qgk)JZX+{4 zivkfnsuDnkHPAboOlEyHA+ZTEbJ4&r+iG0@>iceVY@Uu(4?H}Zmk_OF<-DBv6Cx=*9c!#ig@E*DD(eisLV#`dyofEfFiKR z;5)V9G;7#Nov2Yx@-_#Vudq005sO5ZPf}`s*u!YWgo$D58eL101Ef$QgK@Xr%_+rq z;D82KERqaU5_1aBxrX|ezzwIZBECs=-B)a&E#4_L?yDSHE1O6kzQb-}nns9u?G3{| z{`psTULsq|W1DmgjI{bye=hw8zq(JbL<{0Ymxo_$8k5*sjANw`%`J}Wj7bL;>huKk zg9j~z^<@fkx!iBg+`!C=-i}L}I<`#<>eHC1nv62HO)7GAtET4l?6=rsh_0LCngtt6 zdbxf+9!~cMr$f-la;hQ{Iiz4)g?*z%RJt%+I4jQQqqcF04r^=kz`g>N9CoM)aSh|4 zel^FaQ?&d9jjaQhoV1?dl*9kR|6aa)^5nbkUcR&;+Z@ zjKY0hM08cvOAAq#HsTj62J`-aE8^56A{QDyNG?#FK`Jv@AS>C-f1_yU3^Y0^8oWxf@yr>$frf4d^m?Vcm>@mKwsW9Wb#P=-n&$ROe3>{xvujV@%Dt z>C@)q7#@sf%bN;|`^p>CDP~c@{Y4Vd-LJtNu55sc;ldt;*Ar2lO@kVMF>xdg<4#zhWrrNHgZ7e-|Nm;x;MjHS4NnfRxAkr2yt`}}uK0dgv~OvtHTqUqHM zLRtaY1sGPy+-UmRox3=l>(&GkR@8hY=KjU*ZFqu%ydM2nxd5tGMm@TdT1!p5Xw!Ar z#CUu(f$u(fUO~LHR2h~&SF+*o9p^qjEkAq*-wE+d+5`X1ZDnF=f+)SzNt8aFoGMoK z75}cA{>YiE*dFSTj}q^0;n`B>V2isv(2w`n3uePaF!yfjr&Ch&|M4iFQ4_rDg5!In zoGoMe36mNW9BjF|c@#a=7y0NM5SPl(_hHIcp&!+=PRM8{$&a%5J~Ud|s_*GxWbhqe z-azQc~%r-B5gRzEk|CUxzD@I19oi%qq3@>hi z9)Ekjw`YfSJfagMVq%ub=_>?84i4dRnv7RFjaN%=8ekyJp??Ag3oc}B7+~*%9F76Z z&W^beLJmBAN=|1AVjS)Kx6aQ)gj$Gxoe4J(5Ci&n>-CGZed6840e}Gv`C4np1O78} z(K9}$Tp-ywySg1jvA7^*2izVr|<(<|s-@{$u*5ESs zPF8iT#^@!GbWNq9;+3c+;^(5W(P<)0b0WmZWT>)RU<}`gRKl51#iQ_)RfHA;opVc5 z>(tESIU3e|-cLsGJS<4B0GpO*DOE*faAGCxpI>_yw+6w2eLF9S-R7kwa4;TEn9&Kj zW`28{Su9QYFq-6}6K1u-u^sD2s_KDCQlj7^x8-{Q9bEkQv|H2xm)?k$A@lgny8JcJ z3M2a!G!cNW(7_%$hUe9OP+>o&rhEo%EjVT1(xXrhX)7Eew%|4s#pHKUv zsl(yCTTI(_=(aY0Dw(q_b9|02XHZZhR@kL4TmgF8U!^&S3wS}FwsKHqFaxMqR`7Fb z&Tn5+h09&EqGhC!Vf2k?IembOTj6A&0FJZ_TR&|*efjFeH(O7WU0fk0_c0mULRFm!#WU zEwaQi33P_SRIRqmFm|R*jN&UdF&er>J90WEXREsn^*xdsQB6<-QHYIUP_xBMbY>Dr zg}Ivjq@h#|z{tC0n$2QvKwgg)zY+sIB5@yAjL8TC-a0IZ)g)%me zAdr{DtrmA=LJ7g1Di4hub#+iRU-&w~+-|1mmnfHfZ0x7a1gg#Tn_nx=GA)&PSpyZ0 zbv0+;AQ}lEfnya}Vu2&sHcj#C7C5d-IFW{@#l=5Kv3~d@iQn}M zRK{^_XAGnaLW@{)JSUu8_Sl5yUaw*U%pM8_fO1Y552sZ##2=Cj(VA_s4fLU$A1&dR z*{$Cvo3Xn3U}IqyE?SDD`58`0)+s}a=PZywBex@e7g~7tqyHzJD<`66vtW)c6g&kH)d72^= z{KCqVJ0;EH+}=T1P8ePsYN_cdM@3P94NS&A4=>~xcKpHvhjgV=<&v`k71L%imMuel z*X*BrNMKmfk3Y8n$KJ&5!fF;ydaK3Awr_yUTT5llyl!c%*s%fzxMP)uSVbw52)q%g z2_DMMD=56#amf}4D_@OG>2a{~g3^5dhe$c)u9io>9BCY$Xe}S8vF(l`!d-nWVfCbbLwqV-mwP%o+1>^OMT#cf z{7s)JjdPxqJuaci(gL!=Co(bqel>+@rH*w>!&HanKGFPpV5 z^sPUC+IjU@4V@rF-`OT_7L~Vcsgb*1sgb9Ofl)n4L~IgUoH;r?20uh}oRK}>+r=ds zt$Fhz7990FOM^3vu_RZ#)HF4Yz3W)f-cQ8k$N8P)Zx(t-@j}JQdph~ zqd??8_^)kuGBL8$e1(f$Q3#FG;W3h5$YmXRZf(sB5HjI(u|+aNiRJAP@0YUSXBSfN zOU?~3K0i^v55iUHIt<6aHa-v0@-1SFYQBlUYr$ zoaVeUiz}$K=rfL5uTA*r;De5iq>jMjqXUeO^oScw8_PdLL^~ErCohYI^VL^6vs<6v z_Up6wH91_1&v$plw)_lo%>tV5ZJz$p_2?C}QbRi4 zln!Wkv+E@s2k_1rG7LtRi-m(BQAlfOv3wAS37FEc>4K=V@mZIGiRw4v6Iee*H@Zs9 zjRif7lua|w8BnmA&}#nJ8th@yo{U?Yn4@J@Xj2WW6f-LtAuq<&M(vZUD%hlj@}{l9 zLtv)wF?*SvSk=d<;r`nt=GlccTlQkR{1F8g6NfZc|CAj{!EF z|K7s>(dhVqLy?YGEfTQ^T~LMgofm!L(S#BM^gy(JV0K-ghW-frhzSX%qytGH(3toS z&IP`<1ee@K2E-v}Z=|;&Whz;&CRS3vDdkO3uaHlxnVHpkbCAHifDg#mRhfQFP7V zF-n_H>Q$=64JK(Logu~n6nfSdyanU>s(#LS! z;n3zFK4LaGIpLP-o|3xOS1R6wZ=OE(vW23NmV@3>BMOn2nX9;;xYk9UoM?X9qBPCG zaMwCML^Ci=$honT5FtUvYK&7LQRWS$Kun>w@&zJD5iNQ&R$k%3O9gJ38CMh_zp^)1 z{o$u>jpBfIXd4tam)r*(7OZiip_=eip)9&Lm7$TSG&~ni#{+~A9cW9x_Aa2~-iM}? z(e$y=!YhFTRVBHLg6pIm!OCR25)+{cL%tMMyjEb%-}#twgV=v#gOV9ZRYcoJ zd(D8XJ|zU%jr-`^K{OHa8WL9y#3-S}z zR#WvVW!~OQE@Vh(8Zqov-zXnR`#3}UfsfD{b!G%ElZE2&#s~|$AS}4b*x4l+>Wq1N z;!7Dr8U-xvI|`XDZr|JI1n8Up-c}{+5ZiKl2YVe8#arMHD>>M>iSc0gI5t}3!6WJ^Zu{x$)ci}kt`4oF)B>pK3W3s$A<9cMw9IMQMEc&kxvO2G{C zMNCyubp=cPAIFeIiazK_>AEqI-B-T>4mH;#3$GEo;8J2sSpidDaXLz&j<91V1y`kq zAV(fi#6=fnY&<#W*GU;J0izA9uIJ--lb_{j#_5hTBt!Pban0-g;`dd! zqNa}tUNLD&sWsMS`;|8|lz`0kCarCBdcNlwY0c*MwBOiOzXf9SX{Co2*JNqHdg~!1SIx`M|OzuG{jJW{YZ-ebAqt5!1Ae(s66sgdR=fG%Y`B zl@zNE=R(ZwSUADuadr~>iMex~l8WBn56;Heaj!?$c~pCCh7dsv26+DpAc|a$_F1X< zybpL70B4TksWn=$r!$ny?e|wk3bgK%wPUF08^=k!d(Rvx7F()o9v}?#EKQu|&MuY5 z%xFx_1wJ$I=z6i&h8O|H!WKV|az(A0wWTi?iqL_Nm_lc5&JQ$g4bk?D!}6(EuL%e$ z-8!7=&#CCPP3%r1B!S0iCuiC${qUiPya5k}#}&--7`q;`SDyT-H}vCT6!@iRLWitl zt!>-1ogIi&MW=!N(y)q_d`POiK0O+}ogsEXm;mfiQMT%QET>{5#!^EujeYIG03?Hg zraIUX86KT~u2KL}KBABdKZlKkTsnZqmE)0OON7_fukQF?iW_hm5NmUs z;|;a16+ZyZlXT${$eAv3J(qOd&HkFL@rqQZPKXT2Nd}_n6}|)WcJd3?)n~ko;Ou^G zHZ4ug((MFbi2Qx~%r9CLGUOSd`?6YKG{s^bj)i$?#Y=Pd#k^#|<`dxsxvTwZ^Rld+ZiojWs`u}CdL5{0pS%C#{N&U*atZ30Rs+tT z4)%{iiW0SLNDy2`1I7vu){bioGdJF87jj0>QR7}d+uILx|@)ta&N4HU5(P68X zYRXP1UTQq|^lvV5PX!So@-drgR*5;cbClMg&)s(yW}HlAM@S5}=f57|(jV;d^x_M) z=JKaaeBoIO3q*nZSO>LZZp^jMq&?xcG=^7E^UfZ7fjA^2Oh(4q1AEm z*@c|-iJzN0yS>%UWbZ!^@0BCW1LK`wS)-|GB+Vsy0pjT|DQa)AR>4bKO6rXOp725* zLX`^oWrdCRHa_mV!S?XOU-e4-n%f@gu0cI>vd9dTU;S{(EK;nN)S*7|6e3<4|LKkB z&3BiSl`whu36Ge$es|ju!fU=~6YdGph^01Ttw383+nml0to@R`?bqX!SVh`GQ@cl~IBJFmGH zR=j&ZIr|x&k9`~&^$%K03(#)0sAA#0;gz?z=?0(_UE&3yNz;N$bj1pY6Sr?EVF}48 z9#v>I;yk8Ty~EpsLi4qu4RPIOyIS!kJH(`1!gGj3PM;>0nlvO=3`InoKDWzaUo>tKTG z4QNHS$d^;Kf|FEU*i1M`vV$qHgM5XQp_s*BW+>2#w39j_IP7wD)SI3V71S%a)`;HDv+vJb9B(Inw;2azsj(s7@ z9pY%=EPgC*ikua@>d~2`(Hd*0TjV(<(^p*ZzlwL>~Qy{jmS2*-wC^U z##i@)PoldJvjw#@mwPz}(&xkWO8yZVS+ki}(e&S5!7YP`#qfnm*|} z7@g1>z{R;xW{1efzGqk3O_7V8)zuEX1H1@|1ypYe>1}FY`t%IKx((p4R%TVz*UE*K zZXSDOlHD3&*BV+l2^_=>OIfHXycry}K@qFVio^{LUEdT~6Q&W{i45wv+7qpxpVhxN0zoD+y7(PUYN3$E;_w zI&mfHWPC6waifO4Y%M?CKO3FSYCYJ?orhL~3XH~z{EuW6dh=dj zN%D6<_xH)!0dgRNrMc*(Xjxfv3$TDXNid`qfH)AObuXAs4 z;b#-j3>R}oAMD)Q$uDuhcsh$)6l6wmEXK0PU5PW*fUFMf`tXgJk!+C!Tf>z@&aEXm7wL9gO1Q z71Rkr`4M_uf-gWj_C!nA-QV^Kk!wV~Wy zEdx{|8e-TVC3t^u@EY%GoCg@(Vz^%KY~K*PKrA49RS_wmSwb+0`;3R|-En8|yp<&E zm^bHpVMo_(8A^2+zJ!4)FP@1_2;7Z$7PrL%3OlKBhsAWj%gJy9xVrga{4><{n9dAy zi4~nBFP66xMsqxteU!E}E@F6r?TO=|FZPA(a1Tc1>%v4wPJIvs{XCjpL`S`6DdL1`51s;SC-{iGL@7YIyL?8LD%7zZ z@|p=CC5ZiF@6-acNr8U4iQY^Y3J&pxzrJRbC>NVQ!9(R>4o0{Q!sXoP$`>f14{Q$q z&1ui0-^%8^rP9N(L_QbBX3 z*#iDDr>SFk9$|{f=?dn+sDQyzarhJJak}-6GH9-PvkJl|t4?04>17gGf=D?GKD6SC z8IT@JE4OfnR}ZemyB=^5-Y~oUotrxg&`(RHCh1a^QWqh{|sPCcS{OH=u7zY9+UFGvb$-peLJlV5 zo3se`kIxSn2E(lVJ7d*$HBuyEXjd#w+d|z`jGF~2$=h2>(Z3$0$)jz%NcEi$5l zd0nc=dn>puA#hZ1I8=c3z8R7zk*oNrt1tkdkd^A-*~`a{ZD6QP^&ax!~8D7*H5Vlz;-|Ows&ssZ0ufc_V0dN{pTY*uJ61j1K!)Yv%NFh`Q`5B?k%$A z7%$U{->-gP<(&`nt3TTL!_J3Pq0z$5hu^Pm9G(CvzcrY*ekGXLA>1w6$biD1@#hf_ zWJ62M0UN8(eVpgf6iuP2tyHo$FfyQo#U_Rj;zjUcp=eyVBl~Gy#=m~rRNrihM|jju zP`f6Y&P#bNJlT%hQmw`|UoZ;qWZSdHg>}4=3Vh)OzT6dOU)3kM*m>5PK&{}^N-(6p z%3B83)?Z9DcJiIhsyUd?>hO)5O;z0Y)hwM(g-$j=s>muFFftO@T4WKbmah=Iur_?* zql(@dy0E%LRRa^-2{xiKA?4e1q%1@H7cK%dPa>QijC9Lq{E3ePZ<&~?Z_3X%?cWGG zfHe z)97azIdlk-C-t?4NX8o(;@Z{8IgmDPctg|ReXx?5hKEx(_%3LiiJwn~-`6~?%eAdr zixb6*To5G`aTDxRme+vpVg$UL9|OfRGp6SVg&Lu=DgmRVO#fi=?ePG~q$>+Js+F== zd3TMP9sEy>K&+R^91LOP!piW|36#taVkD-Gm{TQ=$kT@GjZ;E@8ZTT9WQgf8DGF#n zeg<>}_2kGdg;BF-Fb7olayUk>j@o(4Wa|mazC^F{5fw)}Fa4L`)6i-1lyT&5MbbKw zzByq0WXTP|gKe=tbu|NrP{|G@f{g#(jvY~Csu3ZeS{YHTjPB22ki=7?q+`e`b4nv* zJn@jR2)SrsX>kq>WYx^Uv*gL08QhLuGrSlouOeAx8O(%>s{JQem%$j6K#gbur#YB;#Oq z?(xcRp(u}#M}3M9n6@0KIjRd~m-G82*PsAj8VBx#sK>>7n#x~;1QD(-5_vF)zHHF6 zZ)jpD_OBSqV+0qofDgR)0n9h=W(D9FN42BdrOY&~rR%gQ;x7Li2rhX6`Idj;9^2h)xnp zLc#$${iR~L;h76K=gpOQw7DitgfAv&OIZ(i`{N>hbX3+)wh-(zp=XT&_A`?3JGimV z#!`TZBsCtl@y1FyO0|i1;&W_U1Up&N$qK(PNyr>os)VRh``XY7vEp`EFsKD~M-@LI9{ai~jXkbg%l&-c>Ahj+<> zTQ6Vu0g*Xs9M!jsi>KdAze6y23+hTF!~k(KBRnp0Z{b29%W=)wD@`rLV%j}4e}g)* z$;EOMI)G1}|7{L*MENtM40|$qSHi^lBrUIVyQgM%d~RTqA$Uf z7!>H^*aG!hYrwF>Y|PGZ2rUxOn?*oDPx6|Bme_q7es-md2%4YA<-QS?Ne)M4UBp5m zXj86%Ds~w4ou^+5T&(iuO&*x*bxYtYe&o(FbWbdq*m$a)2S1*vTa@6+LXL|GvW{oA zDZ+0?NbhlGd;P{yg~ZcU?%Y5kU~|*>N69@9Jqs*&Eu1sSUN| zztu&Tv;>+SYev^vY4r9COGmsWVD6;mUGV|{Q+ zKiFgPV$Z6I8`&)iQnswUsO1vjZyjY%T#$s>O0`-687t3Vj(q>-OAL-PBRcSok)mA$ z_&e4nllODmvd_5L$b>gF`TXe@>tE<}?DMB=90+~I^Pg~#24!_{ojp2o(FRiK567m7 z`ShNr?2pGhL_uBn$82XmRP0B)THxl+7xxFt-X)l?Qqk|v;-AIEksO;`wZter6)e#G%fU1f&T zV~6sQ4u8R^6NGqAu(6y;Rwy1XUkuUS*j{a)NkyJicIE{8Nq8Y9b z7bJns)cT1deIedx=t0Pr6zltOj2Bly$hgYQm2@j_js@{Y%)k;qonqPcM z#S(2T%G$D>>h3aiOZk}cx0Ek2=hq5VGr2hbd)H0o;-OV0ZIO9HJB){Ap-6BWpwf19 zkik*W3Sa`9oj}+jnF~VKj}J=8%oCQ#&kS*-MmoWTN${(_A3qE(mB_5R)xQ3X=R>EOl)|O0~LppvB!=f=4ltr)Lb@KK~v2vuvnj8>s zAMTQuEMi9+41Pb8nM?a@dmq`cjBTUY{oE}1)juPtC@~BkLO-sS&@x+1k)(JI#%1w4 zyV}CxTdi~bU$i-<$GO0v8FL0_3S6o>2f~Y{*oK+Hpm4_r=)#mTMN=k<4ZsWlcI^dX z)bi1hIr?#6jzz;QZJ1doga~5bNu~G0v&XnI60;pevGFnsWaE>>vhmhVoaQu3R|zLK zLz8rn!DIRADn+s9OLzK4VV>|GU@cHO`UC(1z!KfUF z=VK_-gI5DuWms-DM#lN0&A1R#>qFHxX)dg5Q?E{f^1>AE%lul5AOs2qE&j#s7&gV= zge$Y|V92Bt_2FmE}sC zZq&}(jw>Jy;x+AJS?i~@dIk6?ueDW1)6T5hMIoCjD&9@@XLlCMZ(0Z`o#n`na3Jh_ zvyaJh+H8veM)fphBoMY!(_8~2?_$U2tO_7N3C=;uesohP{e_ z{#%=sDwC3v$ZSXbi-OBqk4&HjL8Buj90yS0F_{-^n>27%dzIP4lCGc)df8}n&5i-n=$S`^Stjb zG~1_-*E7KL1WyZBTgT2Mg-xwwqD=Ax4Ty|b(#6=$L6Voq;Z@&&1?l{pFHhfB=6NR< z8Snbj&UJ|l2c=Cz#z(F((6Hnm@r`Y{E5oGfik zK_T+vEbP)3ocWUuwfu$KW7k`RmvWZ{VhgKBq>dT?Y%$2>)QH_Ntkz@sS=KVbLzy$1 zh}|5q&G&ZtIN8}{as*XNYNf@5l@hs@A-RChoTn0x6?`{eMf~;b6#JfSEcV+mizB~b zZ5emL6FnRs&X5-czG5yTntCF*i+P=ppgs7eSlo+G3&mVf4!;7++TDQdZYQ8(l3uVb zwUZqX_Cn>l%o3q<{3cwqJ7-nTS`{KkEY|sQ)`|Ymc4p)zq@n10ne$n1ajHV6An<4=f<*WlYj>JDg_<&ud#(6#?Ph}NXe!p3 zS0ZjYk;7yVTgk9DJ=-?%;6UK7#R_C^EWI5{f7@p{X&|_0Ml&FCIOSQB;V)qLIS2%P z*zJ}9U$UEbSaKac$6ix_18FPwn`#;|P^bGitqY>l>1s-&>p&~#jKK#Eszby%Vb7t%XBuafUV)r)RkBpa9`O{d zrWD)LcvFB;D@$lN#^DCWo zo(akUleP@1gz43ow+LEV1A9$C(TvB5@hXhQtPsb^*007|4z@6&JfO=p8}RF}L~pZ?ok2@L9j!7CwTP>h zr7o^$ncUrmZLR-n$iBO4WWn(v;~-$Y(_?@J5f2UZuR(pWSGYhK2-f-n(NsbV1Ar!F zU|)(E5_TC+&*4zq6sI?xn*6O31GZT`V_uN*tCa2rR zCO8E4D1P0$DJHq8-a;V&+*(EN5I#B>`W6J^Lvw9v_0=kB$ARZ^C={$h<$HD1qY0E; zIB*BhIm#Wl0hT)0@*2=@h|O`qX&Yon)Pz&G&?cxhS|6^{Svy1)L8b)9wis?`8#6%? z+(vzTfRN~J0i2mD;R_e$bvm$XdByuwSRoG_P>AH-Fbhj zx3gY8uHM?PGkK~@l(;&u$~>!Jc(?7SD3xr$t)sKadyE(nHNWiRq%kwMVxMqqqXsVM zoo?a-*_8_B$BJYB=Vvt07K{jdc%!IO$3st`Ve|~W15CjVDSaNUnynx%rIuqwDF+)= zh+D@};R!7Bx%S4`86O<{b$nb&#Dm}|@sEA!JR%4y(MoUDe+R(<@b7pWdX3>W$&suYw8WY1=5`ENf z)}t#@^=zAg5jz~IYFJZSkO!6co^w9tRXQ!!aE@j;o{nb72V%v(K|>N7MC*+3drv`# zRI#>4ky84HY!&#lxj8*pUK*W~LW((oJyp25 zl3R-EkCQ#)Y|FDvdHC+nVXIZ|1*@_PCVl1EMXFzo6uP(Av9hSM{DA~b;Kd#)>K3DF zW5xu~u7ey^T{B}40f>e|rDTa_JfD0;F5ov)L{DYMgc-%J1%)toWGiZ?ko9eoB>^qH zDn!=g_#mh~t9U?&Uk#0orjfW!k5{SUjVf|4H4=?>$crjz5HqnYZy=_TXP+Y(M&Ml7%_G9%4@FF+j6X_Ai!J+( z0;P?dzzy-+9rNC-Y()|Eqb*1DN`Fs(;8;`X1fzo-0#SbZhlb-$! z368Lg;DogH(B^uLzy&rs^fQE5J+UOMO4$o;QdSMSH*a3Ts-(x;4Jws2Ba_^nSQ(sb zpA2VNYOt(maw_Pl(xPXq7J;e1a|HyhW7wsFCW$)Npc@LL2KzwiV{;|jJY+(d)IcAS z;Pz$~J)4hKkz$F%oFO)T#C?aSJL?;^`w=Gj6OzAqCi8W1*P8&3332`$d9CT^@0@cc zSRaM8XV^9*O*_4E(&UX7g=)*Q57sAtyK?pcLy<2jS)VeWn_zT7(u5C5!PfgwV`3dWo1UIIUQe3#eeI}NeqpS@$h4r2GA8zX4wxT89 z5$ZLWQQP`7Xl4IQ_tA;&7}JObX-r{bHLSRKvWRJw=O&(!w@BmImvCLykD>P|^c91- zlD7v{rJ1f_@l_?13`Fk>w{FQ%fD3WW&DqjQpt}GJ4vBF;F#(sds7;o#lBI0~j7RgD zBT=YzR54RlAxsc0X6|enj=79U3)A3iumX6F(PWeJ!y~bauWg+Ranu3U35*(;_GvGg zymOW+(6-4fbG)={Fda!VzZ+q}AaZz%6ZjxOf0Sy+-r@nlJ>cSJsIB8R{E0Q>QcPV$ zlaWveX4*=71Dyo{biR|U@LS=XQVAWL!lh%wv*!ot_@>Vh;yh?`rq!1NI{kj0Z+VTQ zoM4^!NlsDSqtW5fG5$kZzQd=#oT3PgoAlXb;dxC!xC>^svi6xM0^Avc)93UUmyz~1 ze!`VVo$gOR;qIsOu4C`qawONojqJh`aPc%CTM{Qb4o3$M9@NH(1gG55DQb0p(n&&X z9o|F3Y=D~3Mp&bETJmD1lMWC|0b^N z#Q86Gg(XdBB=Ke4+i|g9qAz`0x!baVfN8}7lDCrqcb^0DizmbXm%VpwZ}Z5}gg z^o5b6dBc@!=R6C}N6vm&)yLRY^atY+wqC=&T^8u?S4lc1huGAXrYI+gD}iiM3RS;%e?mB7ImRk?)MyZlBrCAuACo{Cti?{7vMbpyhTc#e z(h>grpwkD}z~Kg*jHC0+OV&$4r+{nz-DsdL`vx>_s08XI(+eDN23buuj0to}%reVY z#q-+;0)4J))$2>V1W=6I3su`I)|L$2JhPkCcebZ(S-^t zT!GxU844<=yF|gjEGvfezb6x9@nOquD2;CMd3%34Io9cRS;1I|kZ>&?sS*tr?#t*l zGLX(zd1Royq>;?O#+)*p0ABIB&1$50S$VI!>+5)I5qRuO5N83u@Y!_u1B^YqRk7HV zWOm!3=nxaouGJgtg?S4y6k4m$1D7x`c|7rN7*mu}W1vh8QGBLXXd__GLjiLgmvf8a z!-lGBr=$tKaA_>0D=R7b4==VL8$fq&GM`UQnr#EOvVNPu+PkDKiwOTeaEZlahkz9b zlg}kTdd(C}#co1fU5vNyzA1ccT(0~J02XSfUv_MLAW7xHP>u#@zgw>OQuk@-8gFJ7 ztFV+)Dy>rT$(0pMxtb(V0Hgx)xv!IEFLVz^?{KS*)~@q1lBt+g)342)g4O9FFV+Fq z-N=#eb<6~(PAOJ=(P%jkeL2@=8CUG9h9tc)BF}85IN^txP|2n1UI{kk16z7oP%!N< z_?QhKWLaTisP-0*50@&*KQ9T(Bj?qSMK|Vr@cSJ*rhg3L;vhb2r7IKCYk;4idKOVD zxynpbbA}{uM4^bX-S8+JJcaJUdf^FORzA8+dJ#1?5=Mqh$)F|=T7w{d5~yo)&y8~6 zVw8S!?x4i!qBgr#E*0pFCy#1@<(!;3M=hz@urd1vQpHByEs2{ch3Pd?u>W;8kr2KQyvYjFV`KS^Ums5RNLWaQy%;UmpzlK;QGh zsg5V?!%sh1l56(sBLTpV`QgF4(Hr=CJ3R;4TNAdNjTnD!B0h7uvv)(I&d~&ECV;OS z<%U9fAd+A0-NvZ@elmS)XJ<F@O10PzwK;2 zfAQ?W&KB7gjdHam^>l^L`=X5%z_uPg-ATZjJvtekPhvR8hVFn~v-i;KUWTG}i;^?u zb*@5?FpHfq-ixUgfNFg(Bk(d7L74GUWNP)Yd|LWgwD-XXg-K8?ZOcp-Et;7}eYK9s zDhz(}!f*z2;gTII_aaow+J{^dVw$it0~rE4!b2nG(ZJ}0&N8NS@rvrE38je6rqh@* z0?F_j7)Dd~Vq!FzAz^7E0Zf9UNDRZ>9ZG<-i>*AuuS9Ol>+z~_?# z1^f1)T6osIen1zKmfW%=(5@ClN6yT`AT@3kZ5@n~M0Gt16+V3}g;ceM$Pl$AQ!G5m zxUBUaqEl`AwAeI_;ey8EG&H5^#2gegP2>2ZR;a;wj-?SSfoVB;!c(RhR>$&Z%NiNB zFi~8b6InH`sv5+1blR!E`?{VDLoQ7LMaV-Zyie{y8oLMu$%U%2{6Y2}PRAZ~&Iq?P zHum!TAl~r>eYrfNzW>$IWHLUPAjt_rp_n#Qa-V!e&-vv$e6dL@dx~ayim9#DnLURU z#krquiw4rgfodD7lz2ry!CO9-lK|>GJ^`Dl=40`_M*B=(en) z>dQX10gVgL_tVQzp7^qWxdt=n;1S+hnjxhkvn)m6P;&1?w#=%L1(CJ2OISsH-ZkYg zXsaew*@j33({xoJb2$zt@qW2YbFH=7dP~E;NGU@fbR83Tio4BDB$pU)sWWUHv|}yy zQD~QHE~_>|y5Z{x`a#n1x!sUybO2UOHl4XVs$Q~%(5n2J+Kxz3Q@#h-Hvfn9U=9$f z#eTQ!&8F@>_OjnNm5^QY$R{1q84lrn>5j&yX9#Z= z>5%)g@~Ck8Lw5>Rf+aN+>d^Is*f{GjIPa_6pnmw&1kPm)icc*tXYDiNR^5Y~hPa%Z zu$VqNi8)Rw87PcLF#dH~j9j{xoxp|mMe~KDwouVFGH_|C3`b3~_To{5n>R^=i zscOL2x|77H6@0C!KB0$Li>d*<^L<4y{O}#^m2z=P(lWpc3$$&p{3v=^zk9}~oMHRU zLks;SCo4m=>PTfBIGOn99O2Tslp}-_4#EwNu98$5fni4y)MDv6SU_)w!~9tG)m<-c zH(3f4U_3!g)D(|)yqmloKAN1IAWX@w(skXI@SZsA0NP6!DJ+D~m}ceLe-7&cnbHg$vIR)P z=d}ngLU>uMMHPjiItrh1lF2Laj-P7`*I@!Zf>+4aX&p}d3p7gJ{-VFri10;Jv`?{YW@`P(Wux6s|^lau(3 zEF)Ln!kOUHF`PQcGP*Y_L~l85nvw@b)UvxR6d`pk^L-0;UFWdj(42A-dw+>1Ixoj? zH2dxpfq_9sS09t{-tk$T^FMZ}V!4VgX7Z#ad80&O@$E}G_!4W~x+C6tG@l;d*n-Ck zInnJv?AFc32Skr`o^EwsJc=5B`ctz8q87W)kx3ANjW{mlDfS$z(TQ$0Nc{KF4FofW z$dPTqwu0?1tzs&KlbQ1{eU1`Z$`19|Z`%O2X8VIvy;{b6tpTR=p2rbr{kS^~q$xOxi3t($vW+>SB4^63_vs8ejk zSo+vJ2OX;Jx(Kqk49xS%e*#XS#Oa@=z+#N;dc2|5N-b`lQrW4+s$H1sg*JB8=v$xA z!&KrS8yH*B)Tu1R-q%YB$YV};c?U?1>r6X)c#ho~Rcf#MdpB~y@Vz;+I?V4y`;^up zXUdiqXL_5cQ$9Pmf4QQDadJ_u1(n4qyhb|;$`mZXj-?SyLpJ<(GOiieZfd)wm2@lr zRZQvfxs;0XnLy9Uu4|u2A{UFPH!4>)n|GIuh=dzf%L6wHTs>@Y0E+D_MrmJ$)n_nP z%}82V3Z@YanuWx`Ij&@|Ql*#WtbWOuumvk=wn%L(b9^vsXuGarm}JH)kzKN3uF-un z6`)WS?lE(M(3hSTd5S#^JUo6_9w#FmU=WNfXx>8^gYk-1+T^=AZT9M zbc@cFOS|NjgRdtd`RQWXa|eioMqO9?OW^t$bq$k_emk_z&YRDiQxdXh+VGf|1Hk&C z*UL_K;PVnaFJMfM23SD*mop&|j;&ZhN-TlJJ|`R(=|qY==&dfKH}!(Jxm_YB-n#{(M+C;R3>O`7AP%HKdKT9b&#`y(jSWopa?lDer zmw1yrN2;T~D7Bx1yXgjc3IaL>)rZ(vvttfW+4u&SKxox%skaJ!W23$_a*&REC=>IC zT@YS9nr+d|P%>dLk=ikl_Ret%a+SW`3`Q`LhGk!i5Zjf1Yt&}RP~nF3OBj^JYrc*R*Vd7|#E)WJ z!DH34jXDk5wtAv}AmZK(oMFYQql z^*Nnf}d^hdB`YY1{QPSP6%7)|`iR~}E? z#5W%Z_KsNdP^Gb9nSYpn4>v8HE9#Y$=g^IFVi0z)9nhsq;|J{~BbswR8q@8B^SqPT z9i@ms21w`)z8?qEF?cJjQ~|A6qp&QQaTT%<>nQClr(QIxP>;flnb<9xATifb(Kb@1 zsA9yJa@)zMnU^BoJ=!eRZXC-RmvwoyWQW*Z+8_=w`w=8qMI2t%+&4AF9%hMG{s}|t zo>!6qf)=6z9=TThydp1(#6>ee3CXpy6wpEWL(IS{;6y9&CmrKaz1lU9v(@M#P1Y zY;wCy-G%qOobziuEaPBWJ`8OVzEEq4MuldK)hAwbHwYG&UQXFp`Kmpvpyi69RID(f z(#3K#@>zC`M+fT+52cjEv?x)^vON(W!R^f$b=8QcZ#-rpHoHC$5};TqTtBog6gcuZ z8T^1CK@cb{6NPobcP2Q|SI(4QZ-Ld^9!Xr{YV!qGTw+^7%^JEir`-21pW;O06cHmh zr7>`IOdEIx=i%6Q+TBT>jdy?3B@OV!x0iYzmw}Ejsg9)o#7M1QAsA@fPAxkmMKTOK zh)wAzSl~pX*bd$d5#(q7ZkroG1VS7cOdq(ckao48H!Nf%G*ilxVm-CMIKZQS^E=D> z36;dfD%mftvIP-mSP9Ja?n`e33m?npMGd+?4)?m(t#^`5JxniaRn#Ynw5oVge=z*; zUGo0Xbh;>c&F1D!6KIY}*kj*i!*-T7yhpPK@36BP@G2oZ)?am|5Gf%*d~K>kTt6E9 zmKlsj`8*(a>Dh-hb=mrf=DFLpeJZfh+#kw-U?(Hz$0$?Mu7>wU^cUv>{~Zmk;34_%zf)m#bz-f;khGwFhsvwBITt<~2u9 zFWB1Phyz=I?@wK2pzu=myS53b=b@~fy0i`8+UC0ps{qGqo5OHjL+|Lu8@!USU6R3{ zi$e-imbbjmrEsml>=%d5$hdji-+EJ~b$kVfb-T>czaUFE-AkfjJTBGf(Bc+8c5*vZ z_?Q7Hev^IpqrTHMePkr@3O0uTVGD{qmBD{^9>Ot(c{$Y6$Ceu?mm$z@_7;2ppgn)B z)5=^Q>?_L_mg{`S5WWA)b*d?*#u7~6^$`?fa2@PK+JE@vp>MeWue;4B>*dgaI75% zET1m^?|SF(`26&!*WJV59!!y_{n_wML@;YedFBZMxpTRkQ3*5rq*c*Mo^QjaB0*#Qn&WZAA+8eC1^s1kJMQldRw~`^+bhCHJ&R< zspF||17LbVFp(hM9}?lm(D9z_Y%Xa0dv;#q3Ii&Vj{$M%nt2AB;z=N1zg$5Ipq3|R0sh_8 z{_sec`p1kW@1J);g}Vqnfo*~cNa7@nIO1oVzl)JSK)?*v21j=#O-@LeLq5jx0#ft% z@keFx`EhhGKSDA9DDTq`wqS{4nRsybqbx2QAhQ`JQPwKZZ?^8kdvkENgLJWR0R(M+ zdlLYEc3D~$&+~kOXG4e6-U7a1{;}cXGs|GwKXqY zlNVMTr`pm%aAg%1n}DswO35mV#7}GoqNQ^jnt@?-maOUgTXy6OUdUgTRA)(R z7P$!gVG_kF&x1X#B*6|Q2o2rLu`HpatCE^&GBN3EyD}?Y%1&S#u}=$IEn_FapzmyqmNYHgp$rZzU&*eXDCyiTD)<+Znj&+j{*h7&_G0(uLaNdWx_xEi-GT zZ72wNaSa(r_^i8MHyJ4+e9^*J3r$638Ka_0U|!@~&~EEV5{Qk=0?M`^F6o9*^^#h? z1TyGY;`I4o&)#{3mz)oQaTm#V22OFOmoI_4s|zZizzvPG{B}Nav_@E|2ndlM8Tf4< z>afB*E8?OgCv{d(YJxgOV=<%ydu~|>blV3SA~|Aq0|oQZDOP;po}gHU9eHEI$s{f| ztBW&DMJY?!r_>#+c|`!!1yH5pth98YS3Q2zgK!cE+|t=emX-L&&?ZO{CWddbP^{9p z+`wp?3fJh{Re5o5yS+c3)i%3UbMH&BGAkfmKPAK^x1RvQYmBW5HvsvB%1yRhhl;7h z)b-qDw9EjS(;`ac&&8CI8I5x_XA5;iSk>WQtdndxVR)HAmjPDM%8HHsz1Y@Kkk zF*Xm!FyX5#iAF^yy^$!}XyxkFXhHEVW;sdY;w&!}Y3c6;UUR{f0=;Q!z#uqc@6m!8ozvwU(WZ``Qv%mrwBAV7|rektIUV zysWq`CQ6@T#+I6+kbg7q+>X7v8G8Y5CL^}uJfHC0JS_$y{}zI;s~r^wjDLt-a+`b1 zZfb`)SBT=$3OLFSM@%yL72t{IRgpD?Y{AEV2PY9-O3EhiJ6P+`g>T%r^38UwHk`nk zijvV;TmFL+QzNJaa->W&b}I$sg5$%&6wH<>X+`;mOQ&bVD&3bS zgXvqOX278xcHjZQqu@$ISlS7E!&zjk3J%FTKaT!$Fg-9s?!706^fK#6K;NrYjy3b1 zK3siwqAZ(=?m8=%0dQ238|ppCi8uGN=m(Y| zRO)4x>bKS*p_UK$$#8h!1Lla{@F#nwV1YLJZ1XI4I~ zK9FUH=!h!J%Vj~(zz%syCS#&zDOfo|AwN1EK4o&B_UXlm?L)r%?B_Oks=;b6K(<;L zc3Bg7F3!043x#IIJPdQ8%zC>YaZR7+x#85u!JXzC3%@zlix0T-j>8M=$?ZJgu62U^ z3ge$GWY6JaCQis|ag2by#NP++2Do52I-TGBQjW@IRo-0RJHZ<|g=qU6g1N3~zCoZD zxOX8|a*_b9N3<0OD2_4 zn>Uxle8owUfvK);6s`~tq_#?waK+t{KgFOX@6<6B9<~g7G#)|pyR4HBD6Zv(b|8^| z15lUzsYzeaz%3UnV@E!!dvKV5Y925ZXH%TzFA43l-oJnO%%10^J98x^i@l`PkC9=w ztu3ErzG{2cEns+D$`d`UatRDKX{>GmBNGe&a&p`t$pP-bQFtV%7n0_2uGzK3#njKS z22x#Jje|@5g_&AdZmG{qhViv9TatOe3bA0Jip%@*XMMGW@G((vkqR>H^-n}AZV>)jVR#Q0@_;n z8{|J`Wk9^3R_0+;O^kn)24dQ>5eqJ8SaT{GR&1_@C1?3{;w$LJ$+%pWKAX2V8)&SB zLG!_R@Iw9vX1C1c-o}4Cy8G(Yo55Rn9_L4|UTuu}tE-k(#r*g5a%n`h|^^GteAQs(nP|m6b7G%x3l*Og#4cqxtzd!iC?V z?cwnGV2psPDPDzV*l#NCb-y3ux#{U_aQp=IUSiMT+BJrh`$v!Jn%t$_FfX_M*Y{6f zZf$p7ynOn@(`Q>>Z*8xycfS4p*|W|Bv0>BqqnQ%%{EYYe5VX+g4L>-__5kqs#wpO_ z5iatQ?IWyee{!;iSKY8gVogOa5MHdhS~%gJrwfAz*>Q}mAyXPzVG{!WY=Xq^6x5tc zEk~*&)XtdB796a&M|cKhlWo_z{66(q>(vd;5xoArS=8CQacd3n(Mwyrdc`I}r)+mk z?S!0qft@j%Pw|*bfVzIG<^~^izk{6(Ub~)85v0wVaVu&d_@s<*#^c2PW*miq|9q+* zBLEqNN%6Rq+`6lv&5PCV3D`7~nIJ?|_MKOct7zR^J9VFzYhN||r1uJ<-GW>x-;ocH z2Axs?UVG<;imV3j?i~gB9ooIiA`Gd;-PR4r1d}1*N_B@~2Vm7yeW3EIch@W@n7X)vQPZ#y+}@=eW&EGj2+b%YE9aaLEjwNriFgX>-#aOiLfo!(wF` zz{zg`;HkE+l+hx1Z~|rVW8j=?$G9q1q>QGz8gV#r^VTl)*X^f2n^phIHBkde(??YD zv_X9?!|yB=Haxw(BkxK4y0XtXb!F4J=;=%q3YTOR+e{UgcdIemWneS;>XUr6G0ABL z@M4a$h0R6wQeRLt2v)H*_0*-Tt?jgWDmhSl>g;bD_m3S`upcWh-^>glFg(TUb<+Uc z7q8f~BCj}od*jVpUv|d#2rPN_#yKdwP#6gsx2NNShxTqB-zTQCQ0VY&ac!8DjFPVZ z*bQ0=%d4Ij5St8(l*Ios)vM3;m8>cLo?#DldREz7h-<-5`ng$t3U>rO9ejT051l92C(=EroZ`V> z;Ba@>a(!85V;5C?7U)fKzNOt(yL>IW`=7*oFjWim$bDDRuywP43cKaieW)!`wor{R zxdr;^Cm31!3~P>Q3Rur-_wPQe2ho5JFG|KYr7hb!L1MQ2jdL|ye&770}>wg z4s9L2iiQ@{8vL20i5@XaGgD0Z+#{QOe%Z*9%$c=^>=0vShmhSIb=xdIHuUf4rr844 znWkZ-M#vJ^eB|&vw-!%emE_m#NR&32hqNKwC#NkCQs%3)4oj+K373|i$)l7qEQb>f?>=GZ z?(mXt-%gSV+LelSo#Nf6Jc)VWeU2-;o31(;yxq2K;UtN}m(RkLcWgEHSF}wEq^?u$ zwXhCa2#c%hEq_R{62-`OiOMOzB!z<0GCkn~o60O%2ydcV-E>nV0ev>wb1N!=}GZ zZ)H(lUcn9lT{rYU(*TisN$ABW-j-LByzMXrn(klsUiEjl^Aue%HN@(K-R?8rEBHN9Bmp2 zVA^~T;6c~e<;se?&ZHkWThWHY1D&IAq)nkKRX^E*Ezie1|6BqVA2V2*a9%I_pl7Ut zw{!%kZMDsin@eS?jr}V16%Ev9BVU^_z-{*vy+kOg7U{IC68BHp5vTmG=)p{2LdY*; zTAt}ZBiXk(-Nh135iQ{H_0*ZEC$nwK3M8NV8*?p-747i-SliECqGo8QCIQJ{EM;RK z?+`b%Opy;E&tAi(`$9Hdf*LqG8D6j1$>Z?!i)8I_bKnU>8nv6QbY_$U(JwXbs*EMi z&`7x``vDyUEn6;cN@|*${TEqNKy9Ts2!1?C7$sRU93I)0t)h>MUs#~2g)e@TzPd4YNIV;LVAw%u zYc|6M!i4DRY~Y=u3)}4>!fW!Lss~|iV?0!Sm&dT4}q<;mQb283gFxa#d`1n8H=Sb6o3z&NpKJlbH zBXy~x(a8?vqem|xT`x0N{Cl}18})7XiBSF}Ke;rgkG{E|E|eVP5(JLV@-NFQjNjy< z1jja#cEg8i)x{G$5%!LjH&?uldwi@hT{WX&RRJK0KdcEZ>9iYNuF5rS$d#YDU9)G6 zEq`WqJ?LOmu@Iy;6~rp-FtwHvqC-bb8Q>xGK_W{Cy|%$wy5BP-UZV2*lR zF5TtOiVTOI+|d0EZs2N5m+`C>=SsD4JV5$|mTe=8+cu4UMN1vjT5~)!HLkI)G&4ZQ z^qROAcLBdYJ)FYdeeos0Gpn@p_Fu8r{AKs-@R0VEZgZt|-Ok=7XUN0u7ryj23dnCx93MU)vW;tRJcQtpsjZYe@LD+I+_Vab5l8CpikV+tBgpQ}FViQ?+fsGms zchgYK6HvjY0$_-xqL@Jr=&l@Xn~bUygqdI35z1`MK%5cemih&4ba>x^+fjZ}cCm+hkzacar!QnO{C+H7c=?tLXR8o7990mGGg;upWS zF;@$8J5P89qJaXB@R(GlsqW;^i2FzbXpXxgce`J2?U?@>v5R-PAvEb{h12O|A8%kY zarIq`^kAt!=5#k1E<9b(&UsrW8U4Ti)D!9N|iPQVH!NT%H8RE*`L1ez)F0NM{G2*Mz4nZdyCA>Lo7Q&Z?Xype;<5! zIs8Y@lemd=4Z63Pcv&~aP(kEGAe#}t3Xj#a7&Ze&an4m}{1z`ji{i2?>Y>U&0las` zU*ucsPJC-0fD1+~G8JqQjp0Q2f$u%4jvW}`Hw7FEd`2~Kx7BY4&q;oQ3zY-yn}LiW z;M3A%R{uyuocYTVBRfBGd8VG4jKN{k(6}XqBR5sE2Trz_(xfR#gPnYRw$fB0E~$Z} zHL7V9tyY#I^Ky9HkWS%~l@W&azA)YL2j8rc7?_4tl}Al{?&Yh4EPLxrMt*n zSaeOoD>>hp{1yLu{`~RdZ@zi{+!EaU#@X%e?k*dpCm;%CsjM!qUw1WgzE;9C*g;2= zvwQ~C0l<%q2Ocmq!~DyinNV8O%YSi5I955mjS9P(HvCOz!rz#9Q$|(z7_1n)$(Qo# zLP!1eE^Y-uM261DvmORZj;0q6WyJs1Yj&G0r0CNQuY^i6i?E3WOFJ;WvqKpDy3~81 zbHxC++e*ff(|OZQit+^;sb>10``PS5lV5V|vea#vl^N_Cz6V~YvR}ue(}~}&;^J?&xBDO6*Vor@RDUw~JC>wQ z@72NeHT>d}Md=qFNgt8dyr9>|5j_@AtGxE{X8+dDeV)iOjkgQrt6qZrY7H;rg+QF3 zdprg?{4m__l^FB8li>uXI)UH`?#m?HPIhnehoN?|dj~%E3of(p8R=dg8PX3c}O|W<@c}ly0kAX0CNUn z>9x8Y++tLiYX_Njkw_Cci08x3b2u>1PJfTn8YTbb!*^ysf-rpbIi+&~z+d zya^8t2G*WQ=k)jt8-&@?P4q$zA~@FG+EI>-CmTt@xaMGRp8Zi?P2*ShJlG`o2l;|+ zi)^2@Y?$U((<|=0)q(;M!3gNz`@=piolnNseE7>?f`3Y2M9~pDUiDx)y;FEV*6SH!=WzHiJOnw9Jz6#AKXBN`dW~v9@cyrJ@$$NqOV&1A2yWBxh ztT}}?Z#4rIAk$PwZ1YQ;S)sQ1$)ClcmMbGW*uoh~0imBT9md&0YFJ*Y}!i823 zNA=A7({d20tophy$s*HZu0lyC^B6)Zc3M-7Jd)nC-a*4Sd#b^-9NW2aMhA6O94AR% zgR;RgZI=|hxjC;FE-CQ3E-xZm`2ix?$81Ot4aUm6Wh5Mw;NF|*#p4e39DRO0A zZU$s{$1UoQKttLivT9=}SnZX?4I~#-_F9IQF{GN0(Sh`>-^I6-p=b!0&qBZ0uqw6U zRDw_C1nb(|UBB3PNQ3xG3dUS{IL(uKUDrvc?{Y-MI6_I~#>o@N(XZ4le4Hxa(7I)R zWFHnbNZ1A)OkS!Hc#WB67eF3hAoDhm_Msi*V>Ke1;6Sw!t&5hG0u@j_E9^@Q4bG$b zXiS@v3_7Gq?^N5hI8|htWYiDQp!(Nrr?~;wN1Kr0g6-R_NSr|(!JQaD)p;4bEhR3# zE7VS-m-5_y#k9Gc20Agu)FrHVl5ak{N^7{(Yep_UkTFfZ?(uNW-ry3O(*Hlr3+7tH zC>}g!dP*1szH<0iqYTwn+9ages{=>e!!cGE)b(Y- z9>DS)7pobkg7(+Eo%XH1WA`1kG^BsVCT8|1J#LS~CMunB{V{#nD~r7Eo`a|!Byv=C zkQ8rkfVWvpCx%qOrH`~ev)CdkNu>p}OV?do%^$C^n#`u@^wR9ba4d^9)^#i=eDuhl zUZH+)B3wEW!h@v$%k?xj4$k}Q&3S6T&>^k0ITryfm&P=*Urt7NiA}{3fbpE+#9D3? zB(TQprjr$<)P^@Q%nd3_AOR+vb><-fP63nM;En@6z?Tg~NuIy$9S_F#GFhoq@q8WZ zy)hCqj*bs*Ky?iUD2fNcifPGCer8^CR{c>&&W;Uw$Mj;C01viavDI;KmVA=IZ zY3GHodxd);t1s>SL!3+OBhm0^c9I3wdDJ2!TuW##1*jj#*kdAwC1TojrwP$m9jkqp z#|R$oZlBEGBEuoIO^+Hr8=S+XU9|Rn<2Gx|mNe39n`M_*Y4nMGARX8EYIs$Tsb(@b zPUY8nI3vDlr<>S`bY&ZUT4=C+wkK!U;$YOzLYp7ubNZxiMBI4FbYVE<*AhErjctwt z+X-qYFdp}MDbKZ!5=RCQ&W~UziffUFeTZ0AyaP6*xg}N2I%dRkfN0d*Y0u>XeFiXY z#CR8C-E)@rV0E)`sgd%tMH~tG5EwoR8A=hYJ`0ufV3(G0H~ZW0_D_yAt%)>p<&(-k zanDA3F6GQfm7>&qscU@qn~BkoR|ChC42p>82OGSoDMR5LhJxIqF5TgbO1qSOv&uO_pJCCc6Ox^~lGJ z9m#}e)K!!g(-V}x%6!BI%~kra^7y3piQJraCS1qS%6PVadMWBv#wM4WVZpx&5a8gTqle$Irl-`l%x|Y@^#cg=ztX#TS<+ONB8(&L}UxFyh z+o~aRTY5tp-%Cwff+@?J)ncq6XmE8%$dk-Yarw1YX&gW2alb!?wL?i^9r!w76Vd)* zidbzy_8FnSe^0fNpKm`U9w7{!NU_cCK90N?{{nDfkJCh~c|;m+2s`bNJOyt|{u`3m zefs3(gXdekI;CJtn|cRY1A?p7##xAcnrEQke3puk9tOA>s}b+`P;k&e&)=i5}ns=5g_lv=rYbVjJaEaN|#T{&~58#tHTyTh4*zz~_ELV6h zR&mLB^{zSXz=6dMi=Hy9fX;#z>G^0fc{>`~slg#K+cFerw#%BxSeW8}kQ+o!W$;h~ zUjNVAnSwOH>}ToS$ts;#iU>a5ZbUj^T;%BQ&c*+>d6 zDmjB_2!fTt&V^Zn!P|uNNFE<}wrDW&9p7T$b69jY`*$?^VDxGfF=@NrO!>MmuEBU5 zNyz2ZN(@6Lk=NyGB>z`Z7aK6NJ2DE{jCBTBu%Q5`y#7;uSl@LuLA2FDNbZipJx%1*N%FAJq zZ-&DHIT^2qE!@RmSjn&h6Zyul);Ek<@Qnqv z^Enn_Ove9sJj7$A2)-L0dkD)& z%4(Ly_!2^yQ}-qFbZ3?;wv~Dk`qeM-UI9kH9!IzwOC=!%Lz$3)Jfbx`LMAAFBCNCt zA61)h?u>G!-O=l`Lt5RmK3eui?3T>2&^9HYKV5@IYII_Bwmq0jaiceH!JSpr!pCH) z4*jS#2d7gZs;Ia@(x7K`t##9- z-(chPd~j+bC!S!L-iYb2y}fU8ni^-etqV7p0q#X{eO1RHt6m%NVEtO486&)An8 z@8X9Kp$)D+19+kZ=LmzW$Ju^<6jR;$6>e-wH#kaA zw0!!k1XFQ%)g%j6KGQc^f4(lv<&V&7GsOe&^<`8~<}KzH#d>f4bSZdGjv+|5oSwokw5V<1!mxuA;}9b%@Mj zm(&vEQtPqSs?Oatw>porUFbMy7UvtZFd>ak{@-NTyK#gSPG2~YE8cYoK>7gmR~9K! z=&H?C+@-NtYP=If3nA2zgXCSC)l9i3(^0>3s{_JyZr{A~=gzI$BHYcAaHLyc1o}6X zCWpPxDwO{HMLoyw;77N;idQ?#@G_-aaP5Mrpj8~~&p;KQt$mTy*wdEXS$T%Mjd=w| z$<)CzjpqR?PM=vGsUHWk$D`?-53_v45GdJAKt8)3Sg$kuxLLJWmvrDHEqnpt90Fu8 z+6RKXn1x1K&3*SsQBi;n$nAU1c7?of8D3t+NWtOGF3j;wWJd&civm!Q#S{SLqHz}| zw$#lGI`2O0FgjWTvgEph;f5#v6%{Y}of%Y*g3DVhg?bv5-1o6;Ce$ zK|b(AC^sgIy@XlDY>1}#up^tXnw`oW_?#p(Dbj5Vp2jEySrvlI!4+#-E%mls7c&R&0 zetT;*tthCD$E#95zPONO9kSXgcjel;Ld{lRjkB#OvW3tjGRCQKqTK~doQVuB@Opu^ z`Bp5x8Sjf=6r6!LXHVU6_CqED0xSNkLroKT zoJ!kyw)&bGXn2#yJ*LWzQ(71x;5#~+7tTzAgUbh>(c%=~! z#BsZdTXA#0Y_&7t$)HrK{>5;T7owtv`xik5U%Ob{v!xIZd?`7yh5Z;e`p_7`}?@)H2W61rjHYb z@UBUAP=itbXxrKWArxnQY*O9mHHWghuzRdcXzN3J%9{&ZXt(r@fBYa13>g`VUwLI` zm0wqdxB%tK{25R;gw4^iSwU*L?5oys^Md2x5aRZod5VBwe-VJL!|X1WzfN@v5m9CFBsHd!-{Vp)m;sFu1o((X zr3bZu3_s&&j2E(3A>ctPBoeE25~`$EZU za3DA!NgkOo&$9j5FKDK}-LP+wet=SI$_rO*BZ*{_MOrXYkW1QhL9Vw<-_IVN9r4JWdLHtLL5G_|56lpZzHa^-xnxo;hP2ymZ9A&$i zI8=aXu#me81kJ^`B($xs(m7gIEjHq!3%n_MLVvg^fWOnzMXS7=I&y7t2?H9@f9ad`s5^V$Il$Rz+ls0ssA)khl;? z?R)BUvB**6QNP%7Li^>6@+)2SHX36v`r~ss1*ahIzaPIHBR2^^EzCsmxj|&R(1kX% z{D1tv>X!Lx+%nHB0mYq1neU>xLh5nt@bA_p|BlPZ7->NaiO>0PW*(l@7%8G`=ZxAi zW@0IG;K8BC*ctt}7(Y{+$*Tw)GHhZz7o>Gf@aoq9e5f#7$%wx9kJq;sn+2!Z;IQ>+` zMrNGb+fowf#No3U`KWXijlQVTZ7Z>ov^tStSNoIWuvK?0uc_{ZoZQ7O6De93n1+g*utkGJ;Tx~pVs%Tcl#zcc4UrBI09Pi41d~2M0mp@%tIh<+lfK2GbD+63yK;%`9nX zIP@!vtBj@Wj1D%tbk?uRrKW3&_u-hwVaqn38AnbZ=!p3Qsd*+HyfidF8q85(_vqJ@ zkp+ar7bXWqfX`44Po_lZjOH!EpGv&E4+m z>#q_nyQ|&TU)|pjKHtv}v5 zD_6g2;9ZD$904Bj)IXI1mAC}~wPmLOG>|m(xc{4ujgeB(bhsVlky8M zgYO*U%BK&9$bxS2)`2Kr^WFF~>VfD%I)D#ApCHdgG&maW!w?WPO-`%e2<3vh!iYH{ zKeK3(5Q^1IbyGbcqz@&WMtV>pqBp2R2Wt9iT7z6M%KYjMUC_oX}@gwTbXyRLkd#w zCjBB?U{7t(wW9)Sd#BNs_+8RYy>#z)4FjEYV(19=zPSapQhBomnJ+c-Ww-y7lejODev?TRM7ZymFQEZ0m`V2>NR>*fA^#sZ?OS z27~xcC0YbX5~qz0DJ^c~pzWVdaK8Ai$Yz_)8L!zVF^ByL-choz;Wj0dD?%^eXg0uX z(a6~R!bk#+af_*16B!9yS&8e2f(WeAWOF@JUOL@ViSC0>aJxa{0h^G0%5^Q+2IXB5 zT@!_4hr77=W3 z`fcf)+~Rfe*!{0Kt1w3G-qZ0__c|o3-@Ug{{?e276($&lUoy#HmuWPwp^0wRF2&2g z^}8=#Zr%81>%n8-Vc(Iu`5PRET0HgDKzz5o(}01v!cPSPJRW}c_^%}%4|OwyD(LEX zY(IMW^aXMs$7p~_2}XAm9omBQEfpJ+Hms@7m_^T4)nwx!DDoW>^-->Z$I8_@ZlaOH zz;k?^7Hb#887vm{aqKdfBGjjng_m2JMz%X1A@G1H9Tr=LG1t8Zc7p1A!P(f}`R?V` z1N{Gu8)C8$`~^6=xJwyZ_>ysJ?SXR@IyQGfTr~zNp(f7k3+}ZvW?LcP@@mxNggdd? zhYU~K{Hfcpg$>zP&oNYxx@?^W+9)s3X@^R?vw-X?Pp_UyMA~6&Fm!6@DyBmlwmPzLIG*`ta?g7+a-xQT0Z>T1{q@Z* zt-&sec>UQ{(e%xHDs0NO`d^P>6ni*Dd3vx`Kw0g)`2OLur;j?_)$6&&^)TK9o899y zPtiop*4uyG-r0I?t)oV?hFy`-UF`tj`6*uYegFRb`ujWUlj-5c&dZGt9LBAU$2*Vx z&l@1yXdkYf`GHxGX;iEC5x;>!0W9>O-AL-}pG~Kj-E=V|SfcE^q$yrY8OOQDIudZ$ z6)}VAJ#G4bW5Migq-`!)cnA5RyZ8Cm9Dm(=wE^XOf1{uG!nx8teRB_{v+4qHb4=a8 z$2(_;B;WmySNC84{yyMZ!F>i5c%4fi-M@E)Ws|soQug;HEnbaL@znSo6wurF-Jun-bH!r>GhQ&ie7^zu<_HsSEM1Jm zs}B$ULL`1iAPj0(r)ZbA%+y0*H5uGs;cf5`w#RUOD8}cUSGBND#cLVdGc!RC*4o%5 z7oGt!SnM`i6=^cfi?3W7(sfK}aM-6Dm7zyvQD^mGiFDFUD61S!6vfEIgK{uLnG`ra zhHmwzKav2-yusp7T=-!V+AXe?VMXI{E)0;?^GD)mdjoX0jyyY5^50L7wH=U#W?OT3 zc$}2KqsjWD(^FT&T#;h4uKXZ=v(ZiVo?;DK8xg^RNYrX1OWK2g3b4g#mT60pb~+rp zP-N{O2rBCe#p0sobjTGgtagD2$jmMm-2Vk6fDK_bq^9)~H+!VDhl*c$gGU+#{r4x7 zV=|xH8x~bL*xRFRtwhtP?N!JL56>UtP>s~z46kPW85yI`2FHt)*!VfF)n?1H{Loqog>=Fu3~2p zDsF*Lj)L-JfWG!8oF9x|&Sp=B*hbUS2GsBq{##hO$l;HRT~E%&$`qdaL519l(Bq^f zz(DnYKRc z4`n{HIM|&k4!{zdH2JKRn?UbQ_%PWzvp?V{|2qyLJA3CH+P{AYuHO!%Z8lBQA&ZnL zIbJsX{^e6dO6GBZJxMHxa|e|g>j5%lj>Z97#Hm7CttpdWp=tLGbUW-ry19~awKkXa zK&%fOyacAfM?g*){Y+HIj4QTgfCRP_nh#h6FG6qI-BKLW6C_87iEMh%MD3;0nwgH5 z?=E{COBj>BR#_DOuY6+4x@nWe=FD16QNCYJT^^NikK|14q_oPJm=fYJvm`;6>8wmn zsJr<&7hOyB4WU6U6mvvsVO}ry?A;CeKy7nOc1Vq@7R4Pvs+tY$(|k{KA@oRyGjQssk+u@dMj@RjN|*a`;s4l|1}5q0PLm(O?%B|W2CRh?aU9oY-wPwdZ|1wkGeRXe_dXjYHlcHQ6{ zd*OzSuN+Pu|3bsAGVb3LyOvErfl}F(pF+NF{jrG_kQm^y-<+qR?1{(0xL4^@Q>}HF zfePk6X8ysv_ZOkly$iH3|EK%TxC90$xc!}9X-rojDmXq&b|3w0$6Ycx31OWcpU4Z6b(1&_SO_XYH)!;0cKe5-TjPRXPG$@xc}y;32zO#6P6LzF zi#1f`!(`B8^WQHg;pT(C?U_|0G_ewMk?F{D)Eoz+DK(`jkJMScbO(=uJAO<_piQs)xCS~euvkjx_^UYBwMC#U2O8!5c$>ep5XTO z^LSKnotgxjC1)>&wwPyJv+G=&;bZ(_+aeI^<@Po`ad5TeV5nHpW51jE8KeE^EHa%T zTa=!*ZJDWDRGFQLgb3Xb(}Rl1cyfR=1(qH1>-r817;doB1&?~M%_RprHf>Ja*;=q}+exH-(VC?-AnXYks%_?ys zt?D?2C*#g!>fS4YJ_X1!Ty4{hupbCm+Iczkyr24n+`1?sc^{O*5j(>g-Sf;N2~)iL zUgaJk)f_1v${r%`a6L3MU=|FGC)KD&!`-hMfn==s8`8!uO=7G42x(c6>ux;nc|f^+ z*-2@i^MDx$U=auRHUzZjr+W{FKiItwEA;%W`vZ7mzka@B9oSQy_co%w193r8*bJys z_*p8B%)-Gbw74kI3ri!0WT&#LDK5KB5uLBR^<-5Sg8^9 zIc3~a3#~Hn28#sylUNtZN248;{lhb45Kh9@+PYD#9x+Z!X7~ND6aiz@IfM6j$zuwc zIanVaoNdhUaKQ$+80U+u+rYskax%SdYT`#8D{&yU?fAjpVAlG3ZzI<>Fp#z#oIdeL z(8bi%pCa%Yi5zCVZYU8jcX`d+fJvM7d6UJbWqfwxtH!KzKbC+{s)$lxM0@n-s`kcW z)2yGHb&)-FbboV zLAK#q|7Fx2!e~yli2ke@I?=@?a zm1w&2rF0zgp|8>K6Dt25sb@c-db_Xva-2?dG<9J|K1slO<1dBUIqQoj4z)X zu8x7;;Ld_sFAs3e^=|m@-|hV!83=pbZM#u~EQTDfdFt$&s|-8g$p<`+M?~XEFk}e9 zxr#1M7xt*dP8U@+H}S#+xpY}|-_nBEsBtaTwmpiV+eQ*w9lZUBI+g<*AgQO3i-U@K zmlYNE%|dt+VSJ((R9OF7cTn-$cDP(qjcODk%c}168Ee26R?&~-?OPn{vpX}$yqrLo zto*Y6SV2r>^fNnM&@7q{8MLtk-25`H0F>_qY}kTn=X{k|VFlv`L%J6ggcthK$+J&k z-14U-49)&>$S|>)y_SJd6N`J;wX+GsOKHX@Eg-aS_ixmL1l*vx=XAI0<^C0MuUp^xcvW$ zj3f-vPR!IhIFy^CIG{?oh;q=V_g0nuJJ$=S=2u_&z00DFO z6NfCL`Hu){BNb$RNr^$UeQt?=A7VgI}{pn!r;}9$77-84b zlhJI(m%Z+hef;>@U$-Cpu=NrY@_j~{D|iEUe&z+3Ag~nh-e&EE01%qusO6ihV);dKk&3#n0WE%)Z zJ?(MUup#%DqRcUeD-5tXb=4vrbboS>B3i?w81Am7lJ~ z`2SRHOGXbR(MZQwY?`sMrFAhZ#_F6$X95*^j|hEVsrS^b-{~R-?Z%(M3BIssLKck4 zWm>0O4i-R)kY$*Zyw<|IEqq+Bql@ny#su+73nJH`qLKCj`EG7>4yQcY!eK&`QXx+Qumsth1&+fLOJtU@fOCK=VS35{!}vTnDjS+k1Q%#llXOSgO@r+Uf?A!zJO-VMeG=7t@hxrc|Vbn z2k+A1(MiO<3=W>*2i7M>8Iy!YR7cf3pH4`&a-h@C<-&lgMAy}6QsT+whYu|}3Y?H` zZP`XVa7l{L=^KG5PxQqM} zuzPSs`nNrtbH`iVEftTD;;F0XnPs4Y^4)%n&Javk@#MBjPRwrBz9g@{1$QBjDmE2) z5UTD^67cC;@-V6w3vEms#oRT3s{}2wzs!4ZvH!c}+^dCGfx(jp&z?Pe@aW%o#;t^H zT4pq6n(+s?xN;Xk-%l}wiaYD8Gl@qz+llWkWYN#(&`)8|OZl^L;l;<8au=1?aBRql z$9zV8l4C{zV1^=IU*~Jlpj@YS#?%i8Hk=Lr_=QC%@i(Z8$E9#0jNQ%&48GBgy>kTE zD^3aDd4nx!Ajm)n7s1-nN(wr@<=L{-r6bqX{4v43t|Rxm*INRl1d)6j7bw~re`y0q zFdk|=y=W~0B!sP-vWheuQNCs)h)%RC<}~410;qMUiSC1kj~;J5`TCou|MTCTJ^%K* z7ys+!_RjY|{P^#G{ojMVeI(yMJR1G|?eWQYa{7f>Lx`L8?t*BAbka?vAx`;#-|K)BiW z*fx$L#k9GtL-3pW!0>bCyGIB*-`bK^V80iBy|er)@!KT$&i(tH+X6>yH+y(r9)-W_ zFfHP}&KF2g2BttqtOw68wGl^T6>p>Btv{$H%rmQbhczwoo;ANtKG3`Uu=2}%)<3en_k?~R9rp)+*-T7P`qIWkBnm{ zzPE++CV}!_xB0I-{8vn3p@D%6(EhoIV|{|f&JXv`=6uEtd%PSkl2{s|2G_xymrrm7 zWjtb7iQ>yXX7#=xjyTer4j5Y-*Rg~0RK{Q7kQhI1~i2Y98eRB7+_g>Y9m4zmo`t2ZZl z?C*Ez@75FX{vXBrfX1>rPuzlB!OaH3ACC(6+s(c(Q#dtF3VQo}jw_6z>AtrupB-7b z49&eezi=2fid!bay*v(T03RDA_}3a6W~GoH&z(KEv{X1gNQ0$Qvkr}kA`UD4zaa883 zF{=2Q=5FNKb+*E@!wYlnU3xd>1b^ZQ^<3RJP}JnECfg_%DaAI62D-A@+c!wKvXx)D zA%=8t7mR50;+F-LtFh+UOCV;232zJ1rXs7!8Q#yjd4vD?(-U09AX$BcDVO2Wr*OKz zQ+PTazA1F#O+0rw@vW>vC%^0#58x~;JdF_vL$E`pvX-Z)#Z}GbgO(;(X7avsdVF?> z={y-7PUXeTBWO}1x5hg{3v*xdY4oUTnUU4Xu}W9fuoy$us=)lV2a1+Y;Q!MkpRY+8 zGepj9(X}|n~Xyb-A6{L!36M;P93835FR1Km= zla_vwaITMA^932hr-veiDYwutQU4-B{unb^QZu!@DoIlVKuLcWB>Hb8u1o9Z5cS3l zTNFBtMT7pf`QTW`oiJQE{iFSk1#jp=7QM=C{u!FAuESl;%iu4H^TGg<@now|`HC0% zm+NJ1XeF#>JN9-;c} zDF5itFyR;UhC*)alCykiR=Q|Stzda@lD17lO97X(MWVqzZt)_wr-!>k`^1N=<|((P z?3R;TF*Bb`?1WKtS`FT4d7Mbjqq^Ho&(FVH%qHp442x##xc@CRm!KY`*rdqm)O zE#IF(_)@47$ZV8Y5xGF!l~Wb$iH}dR#$=#w;CY{Tpnm*0CZ5bJ^d)*~nQm0jWr_q|qCavrN&lO!!%H8OD z*^j>O9N|LfI2_tir+H2OnMz|G~E-5xQso9DJ@B zyPW~ZLLTy!dMYM0?aTvxQ;|L>inW`~m@%@wlQv3|>}f5LeO<3m*321m)`VshFVYUC zb)x`mfh}1y8XZigTZ8>0@1d8*Dh(Ey+JSZxV+%v^ZX!*xMcI+TM?wvzOwUgX7uws- z4cD!4DzbzsxMa5udmXQf@2;BqU#Fz3@+HrbE3%!UUKfba0*7KHI1lnJe7)H4B}%iR zL^l&KXxjo74+RflJ|M>>_)PGd<7T6{_#O_1oylMEzvs^%KmO($W~Z@fr8GtBWF*9b zK^vjquC#a|R_JA*kh$O|U$FL^6Nk`Y3!?;Lm-6vTbJGOGx14J&B zFw$DLb~bdMSTy}yi$go-Yp@RkPNoSq|SnHvpQ%n?A>s^BU5m>;>`269 z#xWnmgZLBDfeW%Yg3%9H@bueF=QG}4?J4mmQ{d5LfA-y@2hTcBo<7?mzqp3gjoAk< zQw2=2=U@B=0=rJ%z)D5rOQUUGTix8>Ohz5eeeEwl8k$}~A#DAw|LXR6ry+Yl?y?nb zFnrk|2UDHA!L_urDPm*8Fn)hDDZ$FR?|sDmj@b+b(OrDLj*CG^Y(TMLfOC;Qv)lO@ z`G1(wpvz1C>;&CZWL*RIBfC0@*WBxLdXFGKcxJEjG2{n*fz=SEc=GnT&cVBkg(B1k3pc}y2atrHN^eA(E^i4xM(ZSU^F`ou?b$b$U;?ND%Gl-E)Za zs{M}9YQx`X)q5e*{pY&V)gT(DJwJ~G^FepC8ANNyg2z4hhm$4NO7zk%=~l%uIm7h2 zq%q0iH_NX!%DPs~`#dJ%&W`&61g0XFkE_K#@_`IaW_?TfHtQ23v&+VFdNj3AGQt}b zXEWG;2YqSeN7xL-Lycq|cCfwZti&!g*2PHt&m>Pzw=6pc-lWB)r4a-Gyk{9cZr#3p z$F3JLVaL(r?DzmT3p=-Oexavr!3w$qh}(qDbp6h3IPCo9))#-cNktKwqIV5_$Dsi3 z@^I?8t2N&)o;$`#7-DUxj+pfKr=Qe#rB}4Nzlm;d@*+@Cc&~HkCIZc(e({Cy?f^|F zw?-+)q*-?U?9n|!EfL7(#ZT&XsqaJ6$98mma2ok{yD7+tluA;aeNNZiYuEDJso37e z-NrjO$R-t93dsAM36GI5w``4E#hp{6G*(tLQoe|(1>qYBdT$i$gk7A;DFHqO;|*eJQ^GXS~(V1*(>&oouVDRBNVKvQ52#@{OQ$0{Hp3vi0bhttEVsp zbhB{JpZx5F5yj9_lmZ+0EetoM6RdeCCA1?%Z2t5d}X?@ z*6`#i{NtLhGyzH%R#+&sVu}Nz8-CEaj}TNw^PVRWC{B%_tX{fivL!%AOE~V){bfY( zBLcs$G2qF;Vf_!D0Pr0q>m%^vE0FJ~7rY(k$Z>v$!~MU*If)Vm2k*1a4JpM6>% z7zzCD*6sir<25OzxZ;%$4CH-xyIBmj{&4Hw2V#>I{w;Py!TNCPe&Z7oR^b~t#rs*; z=+Vtz@IQX@juy(Ro_xv#%>M?w`yDjKHOpI|IjLK# zzvg=o;d4amFW`L}3BC_Z?6z%R{EA=oKp6_qre zp3$WnocxscpPd}>cu?PuCa_-MK?uBvhb0sN6L{=r5axVAHKgsdH-}`x4*PEK7t~|i z!f?Ip5K|1QO(N>E7=*W`2KepGyRXK-y_KK8_HX^!Yeu=IpeGF0--J?TG(8m)GaR^8 z!$LFU< zJzqyZVy0<~7VqZiJL#Ygdm!`SI$yN(g@qr$vM9IhwF@2VnFg}^3wyYQkOGq^_My7En3i^jf;|>xrbi!`wk^y1dUQ10f4evNfDDBcHEbz#Y=me`lp`DZ zWc&y@o)1eUu}{J_x=goTm72v?`Tadu3-bqaEU(DK< z3EVQy{XO!|3IIELXySiGIj;hIYteh?=KY#ju@t!{Z?zYU_^<`nr=qL^Ol_fv6CE6tefY&k&9!WOP8ngea#`m6xO$@R&!N z{`O&x4yqf~P}J32j1Ia$GddunG^*ovJk;SM-F0nXN&c+)i*$`4+IE18;Fvp&x_G65 z$2cgnJ1#dFHd98`3a=KXuqv*J`toV9!Fekyx5Dp+T9pkInAlTr%f=sNGwLNORR@At_%4FVMD^eSHM$a2Nxn$ zupXUjWsy+}i!6)==BbHKy%Q~&L>;y;2VlkE(`+W>YKchSyLsZ()>#Xnmgs^lJgb3S z;PEqD3GeAyU2Qax&1zU?h~ka$%Q?pHpJ%~FzVHlQBvuvj5um|;K&GHZ;ZGPpRghNM zcE?zq)de9A)!x7ed9!Ytp5871%It8!)IJ6?ZHcK>hvTQ?Z-?)HL}shWdlA$?%A^Dy zaf6?oi6Yf{#kw&qK_%?l3rVGl(G~lC$0`tzPXt@zXRVdv#P9qWzVaj%xyp4q2{Yjl zd39JSUvV$|RUlaY4l)$K)@P^KPWHOkiopo8xB_pcZ~)wrfVTvTT6$x`#F#UoGTlz!*)X(+FY zJEF9gCBl-kP&dsTZB$@y6du)!LeUAOap^?NtK;5A;drt$IXqM<*r#JWkvI;yx}ngS1dos zd~^m(PK+LXdVlTIC3s(t_t*?*{y9D5Fz&l?1~GuGMz;zq^ z*Ixz#Hk}Px3n&S*_#VA4l!2W@GTHv0y{D~7PVS` zWY#mR5E2305@;rCR0>yH*Xy`lfd9Lmjcm4AFpJ@yeFMdJge^6Mz_TSS)-uJ*nZ|xV z0^}GJQ)k9{Z4bw1fF}={!U5v!tKtDSRyYHR%NHt9Nj@DTn;mil;#8Cx(d`$2v}Pt< z%LZU=n9hl96Z2nSoI82MsbZcUW=aIe4$q4itk_?xyW%(5EGCrHgp<#iK63%emkZuw zAR8LcXjx~;20_}qdU{pladc(!)e=&E-Iv4=J=Z%NC5`I@h9<> z5b_Uh(~;)p%g+2>*!K~uiWD8i%u=A+`b8)Gt~KpSZtPzUYx{@yEE>gJxEi#8uBH=#fR$EY+FC;y3Jz0iK{0 zH93nj-06YC8f3ur*oGxy-;&_k&)@yd{u`NwZ8f$2`9)L$Qc&3kH05S^<%nG*iECT8 z3{gmzHBsHRMd+$_B4{}ult*%*Q3r=L2`{z}ZFV<1FF4Ddo?j#tg0?>45g2@2TOS-8 zJmQLiJyAIYyzOBWl*|lhYqXFWZHij13)<=#h0>fDhOo*2ppZ60fn5y_^Xcqvca4wR zU}0OzE`$R6oR>Ekqy@)8o=<#}lzj@@$ga`+xATpx7>HxVIHF(4Hu70z+kg!3f%?RS zZ!zJ@2Q<+XnrM2@1|QkBrb!JE7yGt5eeDVtc5JA0=mj&&{Ux(TRU12%gb=|3b;xLK zH$UHvhVN(VatGtiECQgE@IyUvGUK#>c~X3u1ciD4Vof-O^TKU|vM8x(G8@-x?5Bjn zx`Utvl6)}e{&n-a`zf;^xJt2ctvHy5vk`!>=*Pq_sbuoqttPB;#su;g56BchhBli& z1TkQb^t%V6cgE^@emj`plB8dDiW#oDeMaN-;y%}GL7#ykY_}j*GIlFm6t!$;jhjY)@q9LSWSKp z7tI!Y13^CRXlNlp&ZDNFz4cdPg!KWQ*sAQ5dZ01;=k7CP;bTh zCV4;$V>qL=tBe*+mkoTMQx|7T=9K?b63CjTX3nYlD;gyd`vyMNp? zx>QxNmXd(7B1MUbH+a`|JjPJfs-yTA0OnEkMg*NFu>X17bU6FE7+)?u4n6^&ypBz) zT)FUaFHuIgZB$^9*wx_o-oYb~0@cm_;WpV}+(SVE92PM?6-eVHkRW3p*%EUpiFpB; z#~PZ)cO&po=kutIunr4ZkpIj8w_4n!qK^uFvnY3h2>q4|g{R$>?@m^J9ZbetMu=OH z-ROlb3+iLZR2KgvJ%9>92>I~cV|EAXwYq<-&Q#Z{;2Nq+a!H`%UCRa0Yv!?pplpE@ zut9hBiE&PKa*EgRD@;J}zoh!AYX_g8M1oA>GExuN;S&H8!0IF!pcX~_y_-}MEyJd( zkf1*kY9R3l1KrsnQjs*sB;Y!?GkJynmf&BfF95Y~vT z1tYOEO)+Q0e`i1m?r~%QkNl2B=U(X3I^>r&xa#_N>=Pbv?M9IpM(m=|D;Bvt zvNREJ6hIr4pL4kz5~6(V@`M7^EcVeaTpWS;BB&a!1seP^f(RECh?KpsWG6nR@uXOs zJW$XnuZy`IC&0^t)4ZMB?BB=Pi3#T6Bn_s3UH(SRM$x^#`5TI3<}wg_WkiqaxBAWe zts2CwTa8AHj&k!%zlv)a)!h0zWg1Iq6_b~-S+et5QPg(IcaNRBX;t{op`KwhCDq|~ zqh0>xdW#Y|X>SBcaQUabwcc(&Bdi0jt!Xa_hqi6l$Hx! zCRcn~Oh0pXj!=3G(KNO(OZ?edK&IFMm}Z8rM!U23rikP{kU%%phsunL0jVi!#L;U` zW%%G|dqnoRmDc*~?K&>pGqSplPfuIh!oWl+?A6OL2IQ~*? z>+xjx>rIW>ps-t~CVx)1G3Ca>!f8W^2|A;y&G(N21e~so&%E*KF8x+Bk04E!gMWjQ+{hvF@6yBUR^|BiU;f&89dYEete(37(^F#e>|vKHqHF z(%*_bb{^Vo;tsYsvR{Oub!-^JXWw&fhf`FAa6n?p+6tJ&kk;cx2fCb~?EQTrGNr+0 zrTYyRSVs$a(;=`MJs^sVa7-U$y}#oUt>8Jr#I%AdM3mXG1VM~R$GVO=0=J&#tR7~Q zN`%g>D2|%N0mXle38Y)fU(!Zi@ggQjR|d2v;d1IO4(aJ)Bre4@;^gW;>!#Dkl9zcl38Ub%BRIGNocVo*p!$Qw1EkEefu((@b>>k!{*@o?#513r9BC_;0e zZ=S!q^T9&tau?9gg&uyssfV92P3!WSy8n;#@K(^N`!M-Kw4$6v7Y|W*l!2{E5KU9d zH5wgXS7m-Q+`T7~&Gh>hv+?}&U)!>L+UR_}G(7+HN#k2m>9>vWgeZ^Q;je>wjQ<)- z{^i&6t2?`+ZEW01Xs3$<(uT^SSIq(0&v7y|@V(VZ-g0ONLhsncVhUM+OKvQZmmg;- zt~%0wFoCAn<}NFIWTU4-b7)m7TDC1RzBYxL8Ym5^BLFlQO$liKGiiI!=H}Y>)NM;< z*g&%7vt2sZ(;-3Q*NDu=0C+ZdhWF6Q`bukrp`DA)T4+kGl|BE4Iar%2iMh0M%q4?& zrg;5x2NTZv2i3|R(d_RJR`B-sS5!Vk6HxTMDcg+}4hrde*T$AHKqn}uXqD4WPTxV+NEdvbE3EbI7cyvF)97%2;+_(Zg0vP!d#?<&<0#WAD63lGI2pod_692Um! zR!%sDBsCpZ2w5~#vx#sQQX6(xpmi#w&TZ%NMml_-X=Ey7IMdh%BHVN1cA@Xw_3?~g z-hPc(n}JOJetyTjqhOQ1I8&T&mBWK0Vm23>)04Ovxupl$X1XvO6^?;w1W8};JG zKO-6%6x}Zq0(10>iH{nR+%H?>Q=GmW%E zFPlt2%>Ouvh$Xhxsb4~JJbFAnGJ~ZZzLg;T#DfON`=Dzs$j`Y78=<^^bd)n(-#y!_kC2QNsPc}*`d>o}h+C#^%U za;6v(u%lG3{m=O11ann^J<@V0UO;`X_#OJ^`qqJ##+6ffK$>#YwIxvlU4y>tCW~FE zV#rrkRFz8ao7X4=RC^s>H&VP7oOhG04INejmvmXh7P7&T*rb(dB_Yo};Z@QVO|K4% zwOdV76`zBR+?B=7rJ>iJ8h0aB+O>XIZUF|)l0YNSX z_^oLtHbR;cjnc>O(Fz6Xr12SIsZc8L(rse?{b!?wwnHYEp?05^_BsoEEt-GBMUws~4!41u^NxiZ}-Mdz*acV>&pqqC0a z+A9}bBv4FioswdyJtXi3F`vhUG-!j-nz!y<)gz~kvhnp5ZmPJ{f>U`BXY}EgjWXa~ z|6VUw+k06ry3|Z=rQO+RqL_`fmg>$8OASaQa2T0c0m^3RQxBqsZCMN?O~CclPYX~M zs-^UnN$Falk|qmBg&iqbPwC=2!>K{%exB~aO@U!sf>UM!jK}VM^V?ltuYo+AKIXP} zguOo3cH``<<1pi#^0Ku7Mur{l!p`ahhs-nW=#arC*~1xGIaF!}w_s6M^~Azxymt1) zyXWphB(@%d1-Gr-rIyVs1opq-;{tRFuHkXVTg?-?s;jbJx z6J&L+g#ERMnb2j$3z*_suZ4uKzyw=&9Y{WrK;|Uz#XzRqW2;oP-dY!m#ZN&L;nrbQ zCCn|U+GrNsLnPIfOZ>&H9d zM!p9Ydcg>?w3k@_B>ri`=Y`*i2pm5nNw14;y# zrY(4_mPQh>0tpd~4==0IXtrv--YSC(-18TpEiC6JG$q&6Fm?NGF!Z&7M5h@?|C!bT zSFOEet8@KQ+aY)f?0|5ILkV*`-K6qfi#gz@d*O&k=LN($}q;-tIl{-s1NxPuz z#DuAW>{{eV-B?h3=xz4eE`jF*N%-jSt?Jt1QprEA`8IjWHQ$EAk-_-Za6~G$*{*I< z!uiBEg7@IxMU-Jrp(psHP3%n3vSH;Y{J2G;@NQ|gM(WV>{wSf2w}bDr15vmrO2OYH zq=FEG-Pu6$Ltcj|&oAXsTD|6u%O#7jY^7}xq|}wLZ45TmDm<{4m3_;O`m)?nc{m0$ zu}ZzUrYCAIY$DCiDZMHZxewEY2+2-`(Y?OSEO7fuQ z{cC~=JuR!7gfy#g&1fbXc?cTOu%{c#3mGHP+v#4jU%PJMKo}}I!8fal`W!!FZ9O|? zNLnPQwqlKM?IVndns1s>l`d8Ac8f1{N)?t}0W8TfQdmTqZ51_as3L3nPtzqg-Ap_G z8tA08RgrqRCPz{uCP()KbVt!l#qAbvr;FA;K30aqu|)o`H#u^sU5g{?u*MOK^s!F8 z&jcl;?zbjv=V+U|E4oG8``4OKAi8WINL_F5DDKekL|hr1lLDMKRLvWx<`}nfpBi4! zSf=kWOZ7(aQXOKPo$BXRybJAH@c}|t=3HgaDgf1+rN%HN2$E;Yw69&D4EC38tM)spEy)ST~+lUw1t#JAdyYmC+sp$ z=NDW?fs!7n>qjc7j_-Y3pB$JhYcA(e;S!kLy1Z-&f>L|R$FSN*F3TyoKY_sLm5&?W zBj9x#bjAHfcC8*O>6j2!*i9F-z|Kqc`JU6#Tz8Jr4D9nOu0rMDJy+Lyua|`&< z{mHZzwr6U6>F#VCbEcAua|zxqK^NeL_L4_geC>LA9u)$yolCipTcneBb)zXSh&vlW zQN1RmFN3|BGDdB)@!RvfKe7LX-n2Vh-n&K`7@vyT6+;j%$)U8a8B81SxWw>A%qe@O zTGeYu{w8Qt+T=@tr*smU?Nab9tr6LfNrV z^2uT{tvA(?EKZ+<;fg8x9|bPh^KarA5pv)}URI>i+QWg*;HjmOh;RfD>;~NOM#Mz^ zhl8xK&ttP9CnZzin~!xlI>&v_ahKD{Q^n-zfu@_ zlvAvm;%i*hByK;TALBQ#o3$d(x`D@{5&p|10_{9+)R^`AWdmEF-F8M6@Fq7xBh_U{ zpURh#M74RNY7~hTvw1ZqT!?+nb1#kYicINHMPoL-&NPidn5Rt8gUj;qIvqQP%>G>s z*&Rd(yMUvhHkPsK-zu`Jp)9jA1RH0dHJ?Izz8TZd%1kcLl3xYNwjrac>v4IE&kIlXLUVTMr869pXPxTi)jMP-*~V8y{wcGCy!i73TtTjP9DUu2dxx zi05^K2HP$pw;Sp3qQ3KzAd+>;ua6*vH~&9QhFuiON(lpRBZ=fCwbBejE+{tM{2JHL zIPhdzCGTs98nz+TPs#b5R0a|Pc#}JleK2PccyRG5a*&X)`1P2?(6Aq~2L45H@9%?^Ht{aBe-SD2_ zf66FY-xS7p^d;SWrCyw#hJnsn5(wkjoFPBl<&9uLs1*K_y4Y%@OY(Hd$jYlB`Nt6k zIKjee*Wj7rD|l354#i-6wl+U!i4PCoKec+ryse>z3zsH1@A%S~U43YhW;Z*?XGSm$ zGfX#TIq!cd$q*1Glv#OUch>11O^n3~qKgR+bQiPbf4P2MnBR2^mbiIiF&V&R4Og2$ zU{l*xLH4nLb^sfMn^xQzrV9h6E5cPvims3~GL92Re{l+EY<74P)1q>kByh7>@o7E& z&c-YF!Pqjcknu#Je`{N`skdIF(lu^YxnQBxbEO zls8Lb+P*GAUDnM;q(cr{D1RaE| z(-nsvMRhf;RnZ8}eFYp*Y@kX=g~#Z5BvQ#F9oWuc2ytaX{=Nxt`emI?{qpWlM3@I7 z`42R3COL=A?Qz@&hWCUt_2Kox4o@`2kW2f$Q%)~-cQV!&8$O*#T)P*@2Kb+zsU`0G zgqZ@5e{!ylHiii?*EBKHMw|1`bA1lJu!ssUwgrU3X@A6~BIPjG)j{#OT9>p_BK7@K zT$1qnuqy_+g&~fYjO1C~Djha?W@R!~VLapJ5^Y|Ng>a}kf3O>!oQAKlb;B#m1ge1PvigaB z&eMmWCUdBL6Jf|>n%k92Hl;5e<$}xBJoT)9zLeMUzJ%Jz$OJf!JBkrakBB9vlse># zjBErr5Q`*0*=DT%?l*TH=#6t;qCNlKvms`-ODd?p-(6W-8wS|>ey()FjZPePwyhiM zp8d&PpsMUTTd^Vg^pF|wZxd$17PeHH`6I#IWGJ8D&!A99lPH9&7FVRORo~^)xS};w z%^JL3u2|Gjz%RDeh`ATQfPmYR``{NJ);U?+wr@7iV0|ySx_0za*>UkZ1ktgMKi#cV2P~` z-T;5%O1k6?u+}KxDaHzPop$}+nkFoF)!cB#WrVuI##b(oE>l;hwGztDEJ>j524-r? zH9NBWu~RaJY~5Lx#Jm!h4}-c(Ko(6D$XPPdVgO852TxPHjYbUW;)wL!k~oZnfwEIj zGpC=^P8ZCn|6=g!$vcsejrPv==k5LDwN7W_%raN2gyIsP*ReTz#gvX-n=_}om89!z z?7e`V8to3=4UUZZ3K>l>@iL6le(Y_*$}erfSY&(Uyqpl-pI z46Z6_hMg!?r~$MGtC|kT3+MgNb+xtGNk-s$n)T?3Y9Z$zN|Fs;c#*EdvHomM3_DeA z&me3tXr&@8_cJ3kua8)>ymr^*en z1l0!CMaG9L(*(^id|`Q8`}=?W{TFLH?M`p?s=EBJchGGmeB!nUL#b|IlZ+qQob3;FJ69bGraALb88mb}^CWJoXQ5 zB3%1bOnHAAb8fu7Y0AW9vwpYxXXkgBA=^w(r!zg=_lH+Jur-dk2;DyZ<6_L4B`B`& zfhQx~AO)JvBlyyVyKSTO&WmZ>^Vb?h@%FyI)o_Zp`z?R%qgu+BV|E(-Z5GjHr-yrb zu-Wl&-=}!n+p(EmGsVYto7N{!ky+RX@0FugxAyjaUA{;`8=D5`&?vK zf`^2k_31zwgOcYuo4svyyCdsR3bVVkL-9O2Ywo7< zf!xs~@7My~v9|7{%pFUXkjm4+b7@u$`Vt8qf1stt)jr`~O0!&~rLR*WLfFa2gU5rD zKENv_25b8zPKG)q$veOpTIEWHTav@tSo?B$Q(rZjQX7qF$OL$4 z6Dnu4_LVngfN*D3pe!*9Axjs|4YZb^vqd4-j;FUhdjmAM10VpP_YiYgL&_@DpzfM2T8 zp$^{Vp6xpJmDZm|7G?yMN+4Oeyc8QxXzpY;jc4$@3@lj)vv-#W?{qh4;p|Z9G%+lU3vyHJs%&Q{=2Z9 z*DVC({Z^ZQ^+W$_b*}dQy5BnJtabRErJ(8PRaxgwS>=wZ+)<4?bp<-vHRMjc?CFkbq=Bt*2;k5it01=T4_CH~nRJZo!m!UeltLSx_Ot zRY;LR4We9`2$ak69mjNX}8sl8~zzN9w1snEH6hNGC^n>0ahGKdbgyBqvP+ArV#%#R7Yy+0~AY~*B(o-A^nOS49#G{GvPY`qVCNgYj z6(dM(?q&FVs}STo-RzOGoy?VHR^FhMHFBycg*>b%HIYXXex6UpM_d(98!vbJSS9kx*?&Mkbs(Zc}XKKLF(kf+Nbv~5|cV6H*i{+ZEkIO)ul?X>9|C&J9{_# z6KA3ltQw6WF%Ha1!2#k5nQ|v&l+=oJmq>K7tk*I^L#o5{{=g!U0Dhrq%OYbcq-}45 z9=FN~+7bA(T2`#@tOCA#iZ~z3{J) zWE+PD0>(!H>8BRvjiaso$pCb^!GR|Cv1-16WDpT0Hl z3$x2Nj?Iv5$E@0KN3Sn%P&gdS-VWeHesJ9^3g!7_FsZbMa;(BK+{Cfuks5o^A7T3_ zKxxg9rmRc>olUgqyw?gDKL8RY_~vuS>B^e9wM}LT@dO^hSKSzLr&j2s@(ezr(1Rt% zdwbJrkSJ58MlalY1T}JS0GDJ-zX2r6%&cLOF+ePZfi5mDwx`5In?VD5o_EsWgqHbN{XL z7L%e*a+F-0-R1%FXNmyH*U|{{u3Zm}UM!CmnKyzA)N5+?&12U=T^megpdxmb3GH@| zg)lhesm?nVmJ>~(8khB&*{gi++(K~l(|awY0y`uk@9jy>^GAfggM(I{k9hz5Y!*gf z#sZFIIER(b0q3oWWSX5oXAgjmFE(vsbv5eFw>D1)#VKOlSPpw~g5~rr@x;U?N?WZ8 zryZN`r2?5{hly)3ckL)GE@Lu+b!KX9$!HQy=&buIHl>t z35TOXUhRb)BhhdDoHQeusM}8148H<$^k}cMJ;-X9*IBn~J-5^(*}65V=2;lm&W#<1 zJ=vOgSF8~RW|h8mORL}7y#9Z!bU?9L9j~X_M$(Iwt8?MSmZ{Ou2=(+QoSjM>0p>M`x5S`@bd1g;f@qhiu#L_yfejE~lyASfW`8W7INy~gScO^CWd9y-)Fg>1~ z9bZhQTVHawk>7Q7OM>{Ut{%0Mn3RhfDVQruS0Cx#=N$+g{B-PBDkysVqO{`rAmlL|jLdw$lIuSAhKVQIYw&kvq0t5^6~EUWkSXZ}~z z`+3lxJRMJd8Vr8BSu@w6o7!n}=iD_@wz_F)1F0i3`#e_v^wae~*6Lh~YgRG!;U$+X{Nu-uuLZ|( z|9!pp9{0(>@4gvxV>~`SzP1V5#Z>*2b~bG&*MQWC@ip*#{CFl>m1gT@*X)rw>|UI} zkC)?VK`%h_GuV$`3h)HB^Y*gu@MXTL53^2`4akokxt zvk51?vvvnYdT0HPWRtlGTT|RXf-jZY-dOp=rl`4zagyTZimS}$l(_~nI5{NGvn097 zrs)FS9CL!e3Qw3$5;M}ZtAfU{R$Z2NgKi0yfUFgw%<)X5+R#M;1QN(`ugBe<$Gv~K zixO72u{xVH~24OmPL68$GS(DSH1kQK{suw)WK@ zd;}ZySZFn*k)qMj#=o%tZvb_JLjL~*<~1bdfp-HSLI}AA1d_xPvRO&rdI9j)@;>~M z9rb#hKiezq6}{0Gd(9KCv>UHOcJb6Dy++e>o$7Wt>uEXXI6tGm<)8Xz*Nq|5rt3$s zyvbaVWQS>-PW1c+hpfLn%G&y|b^%-Bbj+q$5zl@0?D6AozkT*BxqY~7x*)PL0{N-F zMDn0!qv9f=n1fxtc@_y*8h2)YPUPmuTPo$VyRk@M$Bku5IWVsZv}6%Ze|q`opMuhF z0}#D@3XCZBX<(w@CqRl)p8_oPnnYos`swiM3axf`k+eP)w@Rpa#gF0^qx-)Jx>i?~ z#A~qep9A2H?PYD?M*OuUImM)x6^*Zu3|e+=XWsM+MjMZq#AIVczT(aaNqyg zBqcnOax`_&cp!PZUvY)Mr9gkoQQ zTCuOIue>$ywXu%b-1Op)50#e(n>(xa=bKX8Nl zH{Za91F=C|#a|L`MS4V%06V!E0DspD?N~mls|>sITS=>vXzt zK;xcquMVI0XSlFPquBr#2sPSo^A9m2ms{0WA3FT5KJvWZ*>IRjfl~;;q)lR_fdD^7nM(R2lq)>Ob|@?^2)!wD!%9(oG*v|<`#ky!tO{=kOES5qk5VP$@H^$3H$>xtI-4xjzzoUk5A%E|HPjN`G2Xs? z+x^GIaPrGk0rK7PgaZt3pkN!vlm6R3PWs0~-JoHSLKT+!;ja~%rJ@X{)$5`Eh*gB( zuNJRv-AWIvYO14EF_W8qAi<;zV(8qP3RYU{0pm--Sfvj64`DOze2h%vDNC5$UEu`F zM%U$D3Vd1YMx!=0{S!aBem@xZRHYj=TUhW&4>KFcYk+G;bD6k9%;pI~=|=n3=km$* z#D;Z2zeOyS+oVL4oomp}N0~z^+1}dRTA#_t=k2zb_UH4X@Ox^DT3$-XURIy$>Q{@G zqn2Mhme2ZT8}#u-JFP$*SK=vT^#$hFB5rB1_KMAM-Z`*BwH%2HpdIjcUUNwWGE`+judQ_dSHzrYRW}7q& z!FWOLi6BGj(2eVZP+-wnBlQyxnUJT5Br4c4EOOC+=#iFXh{G z=Thf#zD_&){j8E|onNpH-haFr0l<)bc%G5ntG0@OkVVC4vE|RG2*;WVg0$+{$M+TiPULcQjIb0+z zN%EXVGT2Lf`Thne8mmz>IB*XEc?Fu|!bh8-so>O>w?AaBKN2*gmGXNWb)BHoVpsr+ z)wrG&2}y3weSEW!v7$m+OVT?k`I4W$D=lEbu$q^;rsNeOM0BUS9uY3+ilF76+qLfy z-yV{I1F_!=5g@a0OR3smlyw_qc^Y$iS)UH^)h{)TPJXgE`Kv}L?<*QxQ>*o5s4Q{} z;$CzY&<=q5M^WSuj=h4Kv^zZc5f%8*oCQKt?h34gYB$y|l|f(@|C3k?!`jd#dca zc374e(vOfCxO+#^jFn?-#sr`v^W%DL*V85!olh88TIWV;CZC9pECBoQp?SeiA6tk< zbKrVBK1xGcVO0pyWb;l|9)p|-B6OkG0Yzh%h|g_*t1tQ0l@X-%l4x-^uPIb{6gF7+bO@_)Q&IZ_3f13!FUZtczo@eOSF{(E6H*chdxKB<^b&b z|1ZmN(X0ODMnv>7-{WL=!SO1InLD@!cSp#KXtJCD{Wx^LXJX!=vJw2~3h{tm56!J?9X+O8FM zWqBlr=H!vyZQ;6LOhODv32|tPtD*I)p_Mt;4VqJm2Pv4qgt_1je(4JK7ZKtR?-O^tNi=i?i1lEcmLrnhdNj-d+DtT2uj>>M52AkNqHciC}>}KCn8goR$awq zhfp-H4@@C>bgW=!{0orJ-t@5p{yr`fVWLJyoF;t{2Yeb114VG>O6RG$zQKAr zK7Wo0rT+@s%9u2Ji|-uyVtE>KV~4%4#Iub1eGL3HJo{9cI#>+JDCgwa8_uxWAo9#e zNQ|v*GUSHB2FgL!FAjxt8Q~b+DsBr(1rn)~yTj>sPi#GWD4Lz-PJ@P0b;J5XeO|<} z8usdKX_V%3;%voz*w&=Z;rOiJUD;)?q``(YLgVTB3oA zpAm+2L!Rnd9SkpagHtC)%0XqFFXfgun@wu4iY0kMw09znNRWA(gRHX(9>kjVPX^Cu zLwI3dLH1p)!5hDgF3BUWORwh8pPK&OnX30_H%GFP-i~|KG+Qxzw$nty$vJiIpX#zG zPp=+>i@7i-y0z&!ON#dqtQb%B3CQ_b)yJSGX*(fP0g49LGAt=uMBDSEVBcf_nGZ{E9^@yJBPK9(-Pl`wEx$w@*?s9rE%l#2UopHQgtZ$#@c13$?Q==lo*h z~Og z18TPn1w6FWj`Zq9$jA^1LP18s%+>T+Wb}Ca!+55F<7IC2suA>RYgJ4kI*%pG*R2YE z3D*+fQac_3D=h=;UN|&;`O}wMj+ZO#;fQnmAu(RYVry(=Tnne9b-fJz`c(~nK%%3p zx-DawpRFw`E3bOPjD>abZRUz=Nj%btiWm@RuLd3@CK{yN)<~n6|K3@O0JRgY-~!@`{`*EE%?S$D}W>#B7{ z(X+;0Vul$Dmaf4f-CJCZK;M!C)@vg{%An9>u(oUmi@4NNhx`FDpZZK`3Yb`g*a4;~>)t zlWM#cec878WlE`hEIP1ig!;WMS(U&tL)Pj~j-M*p-VQXgR2u>K>OpxOb8Bw&x(>|^ zBek((w{$u09KIU4%wuN0Dj`Ywajd&_$kHf0931<_wDCB0pOK_y`UcEoq7WWMF^tE~ z^NP%PuVWQfpus8Z%>tvy4HbN1t|U3iGDkNk+crs3K~qX&IG2J_(j0^rs!oRG;|Ccb zfV*q&hP0$rfFD(@f3ic6B!D0TQb}KRpGyn(teDW?*!zsq zDX8J)xD07v^VysXSk37a9VU>f$7n8f2Kdrf?=C%E-ya~%YZH__fljg>^vIc{$xtzC zi~}m_0#0+BckD~RmoiIWYTX4PYu~wdJbaT-_VX`4|LXqdU*FpxHkH@+?{qQ_`(}#% zfvib?mXR_>+wz^9sjU@g^d1H3@y3hAeH0(+-u6fLkU;LsKQjSGqDG^6zP0Xcs2FlQ zSlKA}ku7Jl^SI{FzX= ztvpU9#AD6?-=A|5mPjsEP;4CV#_`cmTu&rD_R$KLNz9a%9Xq47@+T}JqO)OEu}n3x z3D<2M53y9vbcGG!3?$c!nqjAmt}W@Z3JwN#Yt`_GT3bir

06w$fBTrI zH9w{ocDTTGL!=_Y@L>qE`|Sg+{Zj5BKd_wx3+1p^ZOws&LN_ne@$eO9dq`ZazOZ0E zm`@qQ^gl6xsJqbnqa1p!T{8!S5{1x4R}SA})&3;3W~Aj(y{j)BW*{8 z0+DL}@S0928-Jo9`n&SKYa+6}B2wVYFAg;y$P??A;mLcWCuWmD1U-vuD}o$+wiW^- zqTm^fU@-Z1aEb#ax1(@4iO|SPe^XBIZJ@zh9fo@+ZSVV~NbCD_topVKz2e~CBO2nU zr{hl=%Wx$1vax{{<^)ZX!|1V;=opFUW7q@7zw}>2)joAnq!Jk$o#Ph5?;)huPfd~; z=^h%*qmcv}3!ju{HwMzgso|@k zYAA5Ikk>-$YQFJ|d=iMtJ`3$I3H-kA_dq@2cLhBU#=a0mB^obW-b}VGNiZfRk{#8a|ZK&)_GvQMKkD4mqWMN#e~Zv zMU$MD;z0@Z*O41$r{#Oyiu_0}N9XH{7skmIvmCcwuvVMAWJoX^j)v^cKwF2PSQJor z0#dsMf&4ZE@Oe5ij>^%;MJd<#n4K(4E04eXbJwnwyLhOB7(bJmb^<#%zhafsZspLoTh{gY`RV(zOq{)?{ukPa?>F_V z;lA&N4|1CRlD_9kw5OA!Ad`+n;8F~nT*xS0$6N9DOZ**%u;f8Je-+EPwBwtajb>~m zuY=>VMn5{4g--t~rgB50pE8kzZU}RPL@GEC$rs`{9dblFuONN4Ce~jN_5s(ronOeQ z&Hjcf5on-tD0+B*yd1}3H%scwG0MHBtEFZ9sGL&sTi+$RPaExI@M`ex{2`gXcXegi z6FEE-q6)WZ?W2Nc8ASu1tFolRjpd(^+J3PQZVpSAHq?FmFnB9bYrgo>@!*zbH;Xw( zoUekPTxwp>S|%eu9i9#z9QVd!6*5D1xS{8nod*SXQ$V`BO+=&9Z8Y@-4GauquRb zN`Ge>E!F-|91W$4eV-ql$>Qp(P*0>VPA#p_9g-E3%t0ooOLlLU^U5avRM&?dqvWML zcydn2;Rs9ZkQ0K_ISUKWapTRcTg`?9US$K;-12!qDx!p)r{t=a@M#cFA0UAf{LH!L zsboFN*8kg=FP{TN@*WdmRx3=#M{7gLO8@UfAE$MmE};PlVNw~yYiSv0TyUe=wzd2c zUW76go?{wX;v5p@R$k9$=Pw5TXt)0O&Y(hctO$IPpD_D}rzBt4J(d6b?f{ya&~Gk>1Nvzh*B zua&;<`}h5Qta|J=?KvmQ2HU6N5()X*{pzsL4s|qpws&}-Dy9trJdSQcFxK^vY;4LL znwj7chKUE^)SAjLj*HDrrA9=bd)@WaiAVT&6QSP-*QZ4Lh-8WL@2w9TGur6Jo_N^1 z&CT`wcUvb18@OUmXXaR5`cT>F2L@?`@me))@8x=c=AeV38p!n&_sD#@5L46niMNnH zB{6;(xe1nDP@3x)`OFoim*W@H>32wXNR#F=z%JyX=qwpWgAH_!8s%!KQiI$qHZP4t z#eid)!J@&aWjD&3eLfrVuNfln!0Z3shSW&x{x^)+^$kXSoF6XE4pD$p z`-P11UqKW_|tcV zh{e#t>FtYU_^7}1?ONd2U*0v&7sX000}sa>#F@OGhtE78&)~a(g#(M^)r_&>NY1ka zw7S__E*iy&hYRE8UrUkfyzGd@V;8M#M#5bUJ~n!4+Pppdr5IBhyOIDAYRnK#IYvy$WYI0(EO>B?6fluWn9{^%gtg?dk!L~(uU`v?{ z&#bhk(reBojWs-ZM`j3;7n@~D{^z;CHQvN7SH!%F!P$!E$~wdjW~8C4Ku`c_Rkm#ox;*nrvX+a3!e(VXWk?`+s>Np@aut&Oq_ z^1N!T|9*?eyGEk;yOUni`LhkP78=kVo18wfTg)ZCK$nxAx@{@mqqVcTxouCTO!2to zkFwOZcJ%M|+GMTOqQYcnZL-s_ux!n;Owf zKj$K!&pr$cvd_!oW)1#%xlpasPjP;eJ_&aNcBA+jcGr$Ca0(&n z%zXyb=i_swRF9F3>M?vD$dZ68hwf-~`tUveLgJO}S%-UCgneb=E7E?vMe0l=Yz~Pk zow^tFD?`b~vI_-4@Ha{y^Vs%oT7bKP3FN98R#PDVH{aQvYMdWt+#^?A^rl?R3{a+m z$psjXU_n^hI1aw5aeNl_)LtKHuU~ZZb3&H*VebN3nS8=0_l9>TYik|otJ>@$53v5D zN@eyY2b~XNqcFE`xBUlWfdk<%(!TsaPa0!6_&I{ z_QEUfW0+yKn!Fk`i_N`)aDX_zt+Z-Qg3TwkN`!pv2qiLEVM;Tdb#r{q0T`&4e|IW^ z@;qkMoTI*Zbjp1Nq9fTO`}S>C5E}_PVg0gWP3AH*nSXaW+cpx5sfW-$iQUI=+0h-1 zEYcx8dOhIs$75!MCCGlUDf}1kFfU6W8PTrRp}k9QQb+Dg+S<`A0198F#X;&~H{O&( zy1KIQNt6UaeN`;)HmWQCS$>{gGd!lWcB*H?(hnPzeo#w)w2&?v=9PrHV*SRTKQ8vm zGouW#CxfLLyIt6tc-ZG_A6q-i%d}fxkS#ekV^WFFd^~w@dOF|4{CBUucTjKVzuEBS zR*t!5xTdAc3s%hS-wRscyf@9$x4o^mc0_wqGDmUA%o})d*i!PXwM~te{XuAfv=7*krUb2sbvnn zWCA#`*4rbbrw+G_ zOvp}4^XKoh2W#ArhF*!kWRXc^r#;ze9by|NtHO3GlxD6I|9abGQ_Eu2+S%IP6c!mv zyF0x1_1&RzSsK;iHdw;yS-|#mjdgPz9eN%p<#OFzxfOw+*Z!6-Pwa=Ue}wKiC5-A8S7 zk@4lYJ+$mzE~5x+HI+aLa;_NCZKheli(8$`=d+&IZ-}7J+5cG#8_r3ft>KAoV~56F z+K-2}uh=`bjrjZ8lCN!}D%(n|eoJes&k;8)U?*5@=i6DYt(Q90Q$jc8jJvw3-z53B zlk=2S-_E*kiRv5xhE-zB#d$eWJ3GC9&;M1HGeDzq<{rqjXFVP)`&lVst3Wvz05AA~ zKC_a@24uqOBpV?k&RUACOpko-^%9=U6CWX))I8T$kllf*tPHbSxr5)rpRTT^+^VVb z3uLtkSUl`(tF^V(UTZCB|7dwx(wuQk0~mDBLYNn^L+3K(+*q7;kf4LMpfwNa)CBaQ z827A`+a6jQM#t2QH=+SB(WHQ`JTlabt&-kKibpC4eGzE~PhgQYb`j!oHS0+{GR!rF z1Ln-GD=)>XEiD)D?tX8acy|CT>&Byw4gK!Lz5d+`*!iS4-n$UT-}vkPS{(aKI+gY> z_K=i|X-moe83OVQ*)k98pQ|e*1sKx~(w$vO1v@yun7(cuz?VPN6aGaD8Jbcx?p#iL zQ}I11BQKfo6t#`{jIXYwqllNUZrV&Qn1&>c>Vz4c_WC>hm=oLLs3(ii?#TJe$-PsC zd&JJT=-fSFQWw4c-U-8ydWJmfV7*}VYOtL7NC z(aNYZ0_ZR{3G3}Czjp@PL#W{pt+CV5f~Wu#Ldc2?FO3h5Ak44(e-P^s=8tMxjVpt3 zq8n2njd+~a1(=gfDqJ!wf^BNx)@7e7ryct@MExKZyzYB!7$`WXWY|I+m@Fm#%U&Qa9q_FSr6!$SP=Bg>E3jW+qT#A z;ecety=k;~0pL;VQMQG&7wTc0ILw$uQia>M>!FNcZhPZGHTh8sf$=Mg+**nf@}WWq z|Hd@NK45FG3-0>r;2**G0HjnlEtkK5hSaO)FdOS?bIsJO3gzTF{XN}0TwJTkrY(@TC|`0v}d^+RNrJ$GRc8v@8ay8_@1Lr<_l7%ulk0H7;w zNYcH_v^8a%AV;GW(S^Dpds0!zq-4X@%^h_(IoQ@ej9_)sFw3clHIEW@vc68%crYWD z?t>Of5+Y)zeqklpYgw?skZn?1(~Bb|`E8j;3KDp|X`ha;%$jl9 zIya}YLH94uzLzHp?k{q~i4lTPMaA!yR(x=zgwTHpgK_KGQ102|lbN-MXHToMw6Wi- zv0z!Gv(e>**k9^%fzIVWU{fC|siN%qOZe}D@Gc-@k23$|6@bQ>QS^PE%z^@U@PplH{HjB z6V_5b(%t^)TQ2Y{CmFW8eixI>8HX4BUgqDvn`ga$Abkj0NI-?Q1r1b=M8R$Cq@ zH>76oL~@P5cyH_W?eWfNyL}fS$n(#M_X)i%foxGNILqV4rhl`~5TTnE$bS$-MZZhKT^_-tng zCNOQooC9K&gJT=PBm74Np6$E}4PEt3_oco9fRnBUYnrV8ggy+2{fnU*+Qo-~4L(CM z!MH2I1_)Qf4-9pDUUV6Bob|%qvy&?jpY&?>dOI}W(Y?vt5y+Z8%ciR}tIs!PJBw>l zk-ueIuayHUuaw?egwF?1@Dv=e<+=OsqxNacv^hOQBH3?-*l)C7Q0@LQ${XecAt6;W zQanklY?AaZcJE1bDl=`qADlvIBdlTY$imLOZwHNT#C0(Du@@x z$*5`%l_MN74Kra{9NwUWMTzt*C1wO|w?(zzY1+xXkr>`S7b`>w{jPVj*Ydqx&A)WrjN&oIWB;7Ho)(I)nAFQZp3%lUGW0j(A{de|0QrcTjJ`FXvjfp=l*>MJvpoX|YfKNPRTJFI{ogkjs4}PN&nmifnM`Ec5gbX?OYZu)GbTwtv~#wSA1bx)n9%tzkGQh zGl@2XiJAyRQ`@83O@A7>J#>ni5L?H#Z@<^aULX+6#;;zu1gmFchEzoF(S0E!(-25D|xg!gsGK3()+_3e~MjAOlS<0Ol*0uLBX`g6H(q zTYc53UhTZWpn*0e;c9ykj`md}w#~5QyF4}Sz6mqdWAp~ca~q-zuLe2uH8{q$Vw+t= zu{wr9$|hofMGKk0NpuQ1?45}Kp7dUa1<3jBkda=%V78G4kNL|9rZj@OMX^z7UZzN? zK!`^b)=G#r%4>cTUwTp7BA@B~KG zKf(hKvDQdMkE7Az$Y+M#D9hYpy>8W$No#=lH<4Z7^1nDzOQ(Na0a80)c#Um5KC-4M zg)vU+#hVDxK+Z-KHT`qce={Vj>3D)9Jm|Wo7&7jl`+L^dcv}HM2}DRA^RMmj3lcv6 zK4Ku@Ca!xFEzQR6N)C%z_{OpOk8jD8=2zChdc0^^n`7PTP0bjLi-#PnWk&=Vak871 z8wvNUx3RaszIL$F-r3$i{$js-)!9E@<6&>`<#{TX`^`1Y|wTZz-lm|N6Uo2Vb=B?d`wa|LI`uerNBm_Yc1K z{nhVqn|`~$e(*)-_nnRE35D;q_usDR=ED7ro%__hx4*H!b^ogK`;BVXx;&^5s`sbV z-l*R7HYoDftL>|*!w=Qk>#Wi3OGde`e&x@-adH0?XOK)SHDbdZZaseM! z-!EO0_6(<~xiixb)q}b$wgtI0SjygX@6ir+c{dz4UbkD^?e@qmMc)%WGB|Ek52VGw zfE4G0A8BV>HTk(KrCmfM$%rzo4%s*PCMVt5WJOKC_fT2dD;xVz{U|pLp%hdedDH`6 zdzWwqEQ=RM?49j5m9VW=5W=ZVTQDqc;xMa&Bxjq?FK_BSU4C)f9EbBN22<>T-~0-m z)7!EqH5f)t=9r9}ol6~U$0@a@evdilSLtw z-dpFNhpQ`&buNuj`zs1h9Q-t3GRIZ9r?hsDLuV3c z9ORPiVKoqFklmA0y+{#H{` z<<^@abF>0%SQEz9@{(ewzLF|Ue=J&Ersj^|ypVLq+Kjf4kOucQ?Um=3^#QF74h)za z3Vx`>!k`OBzZ8v1Byf#h`kr|&dB{Pr#j)bW_sgD=$aDP7westO)%sPhi#?> zZLu~9a#kZhaX3{j%ns&fJDD17yTou!E$(bzgRHjkh+S)S(6A;SDxHiqrj;R|PR;0v z-Ob4q(K-;wqHs~vK8ezqJt#D91Qm^wPX4j1)}XgGU>Em#>s!7g?hpea`s~a-h7xOL zZc@JOx|Q6u6(zcFlkwroep3-B7^tXLuWKhSG>Rrim#6QY6yS$&A%8`b>6X<8Z5`k0 zFI~@*TOs}EF$P zudqH{NTt5e;TPTZdZsG*=38IyhrO$R@8oV@TFObgJ*daF*FWg2x|2h;nrJD_&k`A5 zW)m?2#>;txcCx8_SSg0|InQ;5oQt9@>a`O`&KmF!obvz79jO|7PyG?^@Ci%O+0O4v z4rX70ft)#M(H8=n-dG11+d6s?6|k?vd~klDg^i+@qwyo+hgtYyyPyOIr9zHpPH$*K zzxu#g;(&|!`9nN%_W1^lXZpfO12Zu~@KYbbW{Z1oPl?o>rx^o0-*c(8HO$5K#5p7= zYCmfn2jGBMG=g)S_4T46)uPuBCbSl-?mUphi{b<#YI1EjQdv}_O;s8IFdYgtn!mr9 zniYSnE#Sjy?+sQs+X0-szal`5g~Q-0w^2Q{TQ&tmSMKx54+7ECuw*o57a$MMfq{uw zX-lwDfqanPn6F)JaVo?D)(b;h9t5@`Ku|<$G(ezcX0`bx=>|+L zdfJ3Z=%lex%d<2}$$g@4woqAeE=m?MO==H#CxxMQHu12Qq)8}hp&;1qhJqN5DuM~7 z!aL*%glBL>x1F86c_$$G7j_QhZTY5qc!9T14h}%{(tx}(h#{NK#VicUSVfK$Q!f`W z$O(=|82XX5Bd~yIn))}o4bA?5`5BX*xL}I9sb>!D6LK-$m@Hn;Sv!g?s?CB~C;5k) z5-{j0dPmeze_b01EFe0gey7u7I@oo^q|Vm$vTFTrC`Cj;w|}Tw2gT#N3Jo}6Ra?uK zNQmf)g(D)*bvk%lLE3F)Tiy9 zi)W>LU;=0}>DZYlsX8L6y*fd^oMektc)Ot)73y0N0n#{G+VdK|J+q(1J>^%U7||Gzz^D_U|4ke`!IwDaaSdtj<7a%k|rvg5f*|6rnw6Z!7Y-g%(Oc&_lgj<2iSONm+IJN+$+b9qEy=4 zsGEgxGGAJpj+S)cyhc4>I^fSoyNL?;m7)LOq z$%(Qq^fz&MUdDWb9pb1Rm0+I5iq-2?7nEOOvD$~C4pKEj-7acty~C0#8q7T}Y4sD& z$5}A5Q4XkF=k=~IF0cTJ3dB>I0`UU&)pHi{)L^w7Y8%iLB!_(F)LIX=e6JLP0U+R-M0PHKD< z=8*L*K&WV>a#)Exa%AL?k+`3J%2{25McRtkP><`!fz8o$V$lzv7#M@Q9T5fiplv^WaL zlUx|&DiL@h$euVLliw+vhOy##dI4#u&~996ZIAbo>ng|8;f$pfFvma0idD1CdsDU8 z7-NZeNNqugm@N@Z)vF7x*V>X-%e&I-k&zZkGEGaD7-+q9m^GF=ovRZFgPnt6%#lQ~ z(Ro8cgrws^k{&ynW*=hIX@?Ap(bCeb#K+|_Zp<_+nen8S7X4LJvv;eh` z^}|qW3ne-?ueb(+Ev=;~bSkSuB%s?&9PXlSC+`$!u27&ne+5>{4QJ?P?~_Uwcl`S+4FT z2ld6%lFs6*>rYAumz_IoX}2Vn=@8#EUY)17$1KgxK7Lw4gUwQn*4&33lICigVu&s7 zAw)Z8Rp_4cGGC}(3Zl0ogyS)S7kL5kJPP%DWsHj=aK!r|84%2G66dif%fz@~JbO6S zvR47%arF)6ikP}qQ~w2uOwxjyG>1^B;Dgpfw`r|--jx-Xk+VdviqGNoj5nYeOoSH;cSlBu+xXVZ6C>@MfxO%fym&!OYpti${K-_##t|o z^=@|hTp_-muh;vn4wJxzEHjjVm0;5%*l~cT(-2oDw3s7BkW10QW!)LIBpaQErNN72 zrUklv8<%ZJ9-2e8wZbHK#(9XUi;ZzsotpL(C@Kr_2aIjHcDI~lqNt_|32k$$bGT>A zA3pphOs4bzGY;Vx{e6t>{V*vLUcpi8ka3Le^>9`j<3PnP{8%msafJ^0Xqb0BlzP*# zO>^dfzS>0@Q7((RY$CHOTE}QC)^cf~lb+cq3W zy{i0RSz9Og%MK^zL|eCKn>a0q3+fn6_IT}n{fhFoGZ1(-zWu;YdhUsI$|1;XQrxVw z%?SYlw!=`J)E#8N9GQolIfklSl~=W_w`|<2lMgvp%TZ}TPCTjZj1?17Fo8X+6J{|b zNvJ$9#Ue7z(djuU1f3E<(o)&u)oG>KO zvEcA|98y7+5R*{4ad8&~Bo@SCEB9nXJFqi{r-|Z@3%xV-JWk}Zi34{b*A2Og#4LW0 zhYL~qiJ!YoTDf#=al?03&svC%3c4Gv4({bu4&72{jL?oyFCiXuZ-`g9;h@4TKd6LU z#t@GsrG2ng{0I@dl@Fp`fSM?T@fy=#9BC+93n_H4or=fBrh*X<$p|#*Y9TP-ww1vlrpkDagn6Yx)Oj^otWxzpZrc2Zc4O-H0V{R2eK@tM+kiJ=(5BN$NHIM zes;_py6aU!^A0X3^;1Inv0_KX)_kLDfO9yn5`9z!n?e!<7v`ciDz5lV$KyM zX{bynh`8kkL?dd(6}JfDz*P~OGduda zQFzK0jfCCjSrl-jehE2|gYWtF*7>`;<}6hBE*XB`U$uGyLG$H-{hiuTs(ujdU!eljk~3kb1heO%XPQ{b^NT{4>g( zswEO*_h))yZCj6aceftdn^wjBJ0u!>cyY*nnr@@rxMyJT;sl3UBA)V_tq9F{;wf`f zXEe5?MCQGy=jDF+c!vnU`!Rk0MUha;h> zAHzcMu2in8fCCEK2he`r+;ICg?`n&I9>rG;R7k{)k0xXyI{(tbk2rHH^;7~_9f>YB zCzczn8&RP-2hgKv-Du1Lf(3B_q>lDN-HSQ;ENvUoJb{pmA!-~7>eru@hY9EYyj_;m z4A4_K{esZVwLanmC=>pYSmLnJ&$KnAd&p<5d~A@`bGtOj$gGBF{TW)IUpB$ke3B=Y z)k-);X@U$M>j`Jr=S^k$9l zq@M2QSvjwW<_A|Atnx%kh>lb5vJOYd4029l0JeC-9xc({=~^pxZ|k6Ul*G(8rD&M! zBF48-H9%tpId0zdR5SeWd@B54Z*Y?Le%k_P?xwJxZIA1?+p=|9&NIYOYA)Ijw#f;= z0w$Vlkny{%b?;Lv(=xBk3=P*Nm&F zD@o(?oc>dm$HJw+3#*S)54iKKC0l_5V7#hZjrAnw6mPduU-_-Kqr-nsZS$=KLH%eA zPJ2hUZ!hnl0S_I9&j~9~_jP<{g=BT6p1bR3<6o7sXW6H>gTr5jvunO4h)DhkoY2oE zt~!o<&3ngcM}yC6ROufgz>|c}kY($0kXZ>~BGnMf5pD)!$`_O@a z+z1t4pw?PjpEpLB80AOmI~ZEPp+!^nB&k5p2&vZ~Jo1hPtFS$jHs=?V>>*LYVQXw0 zb6T?xcA1)(x);`wY zBM3`|1BaW?s>HU0VlMOCRnyyBT9)NP&;k~HmG?&8avqYH-zO5=YZ?7RAm&q{73scT z=!yQ-mzsVxf&Yy_jcsl&WU)CQu8Q8xA;6Dov10s^e!1-CB; zrMU#FTwR14}KVU73ox$+JHDvkORw0MTjWm8tG(ju&0Sy3d)0n?eeKwU4=rdDq}KJ z*B}#XwpuubCy+X#Cd{?&00XuiCdrZ zZXfj!q`cL({$LfWPN=Ql5Iwo3(STf<{A9G4NSx-@K4A?hXt-m|WpvV$EH~D$z)G`$ zY55i3ldLrDSp_U3Z8Qgp=O5;zP0A;qdzB(krYvZ7h~fx?U`ZszowiJN9IfMPq`d># z(TlmFSYvowaV+Z+rk1o^bvs0s9l{T*m##T@AsbA&sCYOPi%JSD7BwTqfgO|?0-A~A zLVn~SUeXnZL>TA@d+i@=>mQq~3d*vZJt1arCr{=**}H&8O7YN*fwQA* zj;XA{M&A3jfv^cGw2H=4sCh%zBQ4S@+Kzi4@5IP5aGWew77)F#ZeioisnTUGGZ*rD z`xbS=q!!C4|2P=|om%Z(=Lnbla?CLlf-Wy{6DSJ9idiUz$d}ruZqLiX5$#K1crgk# zg4vq`sVu9OjN!6EdGazLv(Q221#m?e!}l-_buN`EL2YsrsZ#w+04Yvt0T9`v$NNfp ziKphVMmojrLx4MKRZh%o_@R{3ZgskQa__?Op=lGH9CW2UB8K1-K6v*dUhL`;PeYJW zS*vR_L@K#B#AO=cv;7Uy!M9vqG=}Vq4?w|d#$t<uEP4%DIH}p zpR&OThvs&g?ty~u2*@4fbao`;$n|pS7eYAEbL2SYUQuJty*kw@PF#fNf^0fYH)9%3 zELD+-rLi7Pxi~owxZ7-6iLciyFoH}JPZgq|PV28f0+yw(VL>U;1<2-ghPtzIH3FL4 zCX%1Asi3?I%a=%R@5?miM00ANcOdP)dRpVk06o7O?oHtRzUo4DQEr@LjA|Ig^4P^| z_HR+qy;=cOff{O1G{bDmj6iOyn{pQ|S5&`6pI`&uy#%s5o`0VaM~5XsU1e@t=xl7rJQj1^(qOFFtgkYc7s4Fqr@r9 z&EEaHCxJ@m+x1zn(H!p-2O3*BqD7V+9~bNw1A;bYa$_J;mrSVwKUqFSfa5f#k+^Ni z;pDgyultZ<7de(rdO$`cb~`th1le#WV7a~21j*8>;@e##0(umCbK)CQyC28Rc(TpH z-3$qb`;5FkP}E7OD~Erto>t#g|4;^tnPqN3KYKyOhY5fGsEfnu z*Twf&&Wx}8?Cnb79J)uqivL9MJ_#gvR_=*m^%t+-znG29279GnvT$BmJjYd7tFLfh z)!mKLE0U26CRb?dI)gmEa>M7h!%K7LXXjv91O>!)A#)N$HkDWdsovV zKJX__k*xnev!F@JghlTbM@a}H1#OTVv>eNuq5)5oWT$eryTBB|FegP4v5MC6jxju1 zAOu0bRH@*FmN~Czq}X`#LxQ}Ye{4w4DO0qThh!-e`1W-8&Uf!}X~S|_in!@$Kgfb~zUj^n@e@Xs$0Jj6t9oNC%4 zlbp=DI3KI!VF$M2p{%6HfV5f{ro=W^ORm9rLBRi>9BAj)qBdatqY|KPZQL6*iE{b& z2B+LI7luwmb8=p?72-Z52)ZJL-5#dC(noK(7)?*sDqAyLmRha(W%KM}^UEfJU`I>I zsVx_BLVHRa&<6|!0NGI+y(^(T zcC%tfI$($7=(P~53$97K*yiLI%b#P`5Z=6ZvC~SlfK(R+;^A2~jEse;|JoWI(Ml;g zwbP^!gf?PEy71Tmaq)&N_hN>Ay9py7V+ofKiW#NDA zltgX;oJ22-G02A#%kbry=a8mNPm|szU5S=FZROPRSui^!$GCxnJR@NOpQe6ro{uSNK45une0RQ(rCPW2$=IR=BLlzB_y1|`%-h);EM>_<#lk9wNRmJ#=ZitBae|5*R4U5CF4#y#FpC?J zO+ZSrVi;)dv{fm?$=i+q&@l1rhrUBo8aKsoy0vAy)SLqJcw1!3VX&D)L*vTbwHjCK z>J3N}@fH&{fLrZ_-HpJBEH14l33`tQy)Le*))P7J#HQjh=*;0Q?TS62ZSQ-E#12Xd z%;amKcs7KFSRE$9WaX^1E?;Is+8+y_O=Da-7;V}b)F}Iy3k|#i65}?8a*t$y!YjuJ zL~erCSAas0QtZ%U;RbT-&N77K%Po*o}e|M@EvU^<(fOvdvwj+0oX_vl3&JT=zr7~=>R{mwIP1NA!lpX^*t zt5Q8nUSG)aPg=&R%v0}%!pk5hu8&S*hyjQc%T5mR9F!NRiqskf<-#UrfgE9*oXIC$uPzVJWW*~um-YssZl;s$6r<8n1+u2HEQ zjsUEP9WAPo0kfQNMYL(j<5ZTCF;;i50t%zpHV&o)r{lk)pf_a%CCsgOScR7C=s3l z$HRA}$&Y(XGx!uM!nnYB?u;MDGi~g-RLEn($8EKJXCz1|XQ{ZHu(+@*L^b)+GmC+l zMHRKLSeyLZ{seN+6j0vDkR#^>OT=tiR)FLp_3rkyj||wbr{6hzcrpf3af@0 z#(Eh!5CGl8P(arev%R&!cmUr9u$B&MCl1%fs>Njc*`M~22?dQZzl?UEIt&U6v8wIv zcc?CK#)A^TyUH>3l}bUlhch}6R4}U79hjeZR?h8ZxIwNVtw(z9gt1Iyu~P??%+FiIsfzgpr|J(lRev&^8a8~~ zRMC)|7!PD&QDd%0Q^gvix2H~b{Zpd2CGAqn=ecpxp@Y%^+_l0u(k}X869QOQy;|Q>EOuU zJfXLJ8X!me6o-Q(u^S{Q8A@G+#MS?1x`sB8L#Sv9^Rk|_ficj*t_`FOpi$44L% zaf;=e#WM>$nh?%prBei3Nd#--i4{nLtZV1j5d43&{{%>jBfD{aVZ`8>q#E&1JK~PB zQyh#tfP5~hk?(>Qu~3W0su1>4p7Y4>k_(FDz^MMrET` zwG8Kf5Bbawrq#auIV%Sn2fHL;KRDW~|AWuo^)5H-UwH?oV>lZ#Hvw)WaGh5d7Pqlk z|HWSjp#pBLvVW<1aWtGy7)AYGxmhw-s<2pAP(9QI+ORQLqW!4*{X1#7)UVj3$(^l| zUEmM(zISJfoDx`~tc9ig0w&=hEX06Rk9VwFU6uM-y<0!6pNMVBnJBO*yi?&CCMpZ5 zGf$o16_F*8+nI!F@*+pw<^&Z;H{OAJ>V^X{HaC1_j1fWcOfoTpjKW7^Df+s+_u>T} zs!Fqpb6jY#uCfjBg8VKy3CTb_@D}e2vM-a6r)FGf6dlT|Nu_h;sni$X!1z#}zU^6u zdM%c%cWwo@a$_Arq2E%?1S!8v?fx(Md<0PsMX9U(RWS*#t$R7BYS4T%|Hc!6LEH=ktY5|zHzp+>RtIs0z+adw4#T%G(w0Ka6Y3tM=hP-=A zQ^Ph-G+nh3YQ4~C+M!Kj(QX|7Gq|DEXG*A1e*EuFNE91>DCG{%4BPH~5z$ zx{5{Ot~llZSf?S`-duW&zElnd`93`~Aag94O(qmK)8t9X(vh|lew#j!vn^Q2^!;trt9+k`|z*%UA+sE#@i7%?2twU z6DU14J$B9z2CbW|Y-bJlB5$O{a2lmCtl z9M@06=?N!S(CB^GY1G!|uS7Qj?VA!O4W=*U7xtay?XL7~X3TxoE5%khN8XzG4Wei= zxT5wYPz3TJmUcEiwVq7q)>{(bz%cP=?&N6lT%aWRi4#b2%#5p9Lusdc1RhVoN<5Tn zTyp(|A4|(aP^8Ngd_lkj4NC`c1oqRZ_{DenvKG%nM#r*4d6^mC@Jf{?n?=8DUWTME z59(4~w@si;-UNdE%_F@T{a&k#;V5%CDoQV*iukW=bQo+kfxr8?Gs)E^v{=}b@4Td>G zePz6UYDd9o0Qx$~JU$WbZ(`C*!=#!F=hoL<7$E!%+|m>c9VZ_$8n&ETeft#f%TVoN zaTx*x(6@mNMq`hDHL%H2Y^zY(33(P$e9f15JBKrHQoF3SrVZTGGLuxmtJ9s~&X61? z`Gaa8qx-}9$)TcghdUj{NU+FK1sGY&;=3eb>K(UP%b%>QRVTFPxzFK|)zr1@aL(k# zLTpS!aQQv*X&Y{gIQU)s)o?2#z)Hozhmiu`zHI*$Fb@jUaF%a}HRZ9nEm3?Qh1LLwe%)f^-^z z(YPw=NgnQ;0L@CJnRT^ih{qf`ge{H)RxiTj@7^t3I^DNMpWaPgt|UYqqrUP1ro+@=oR4m{0IL z>*03XrIL$eR6W-kkf?M{nd;FjY_yl8wgy$EaPYY8av#1G&O`^C@%r=>V-F(gO6+Lm zfjdMLh0$UI74%$6|BzE@nqrls=%_8sE}-YaVd=H=OUVb-Dqspz$5!bNQ*k^B%h*Kp zZB{_ScK%?4tVr{ICu75n{8hsT%G4Kx;%dNez6^DWWsU(UX%Qm|XpU)GMA7aoBUuI^ zhxKGp@ZZ6)CE#Ap%Xq5%C#ICJ^OIZ`4iGH`oMV==X`?JX_jAU1(ktob8y2oat^oGH ziWihnK)_&ddZgQd*ntX-kY`cLTK5+ zqGZ7;y6wlaq*BaOygEHAy@#Zh@X_n^iO*$E1iXb4#7W3z!X%5OAg8=)7h9oRBV?^Ya_+i+Mm znR2Ejh!~6cbNKs9>6o-!afLnCz|STB`%4K9q4%@>`%7s`I-%a^=kWKJ(rg^Q`jhEJ zBbQ_jgxrWN;qgZ#x6S&Fgk1V=I*n_C)Y{z@{;5Q1nC zfdweYQ3i?SkYqmlO)$#wK;sl= zTq)6WgBnyWOqghHEMddqi!;3_{t}ii3*Q1Ui7TI?uGeGBIWr%5!=_?PcFc2yCrqUA z7)(!p$yS_xjVB6;9fQ)N&<0L%D_(cnvFeHBHo4?e*N|8ika(dr^XGE!2r+G*nIVy; zdG0!19Ehg7p#{&UfHXH4wW&G+G@wR=J5WTL6T-mYRtCg*f-|lcf$5>!N$8 z6T&+|{L>I_+^kevvst4juPH&dmP^AiZH5D-?lT1+QN|WDeMXT>kb;TK_p&0vhr^e@(}oD4~W8JH5X;K#uxrF^H#-~b6%#?cmprMB*fN3 zj+lTkQ!HreKc2aM`tgr$<@Ivrl?h+Va2m|qmeLhs6C!QA^WWT9C;w9raynAp@mE$4 zs~2zo<|2@eidOXY4%}z}T2BSEd@TW)|qWaGJ zc8g)NY?F|k_KNY4~5bG?q|z*mnus=H1Zq2-5MWGPl;PF4;65Xp3dP#%?dEf=T-itCb1mR7;I; zPpB$%%0N7U5_Mn*FcHr}QX~K6-J2Dc4`rw$ObsDth#pTo?;rxHj%egA6ci)nB?&0u zeDdYUVUeu%sI|0}w-khcDKxJIbPV!hfL8bqsK2gJF9&&`7`LB8QHIYH{~~z`wRfH9 zxpa3-Q<4qJkPPdJ@L?;fQtb>f{Q!Q>P4IZhX)8?xDf0Sas~u6m*TuzAXkT`-P9)Zn z@xxbx@NrP5xn#5k8FyDx3aR7~8Nf5fZ;%@o1`##*y4(h6f}>EL&gaW6;Etv0l7~eg zVtP6O66F#=iJOV@wADk)I7<17n8q5FV3gHv+nW>xdAOD~N9=UE*zCfJy%AuW)QywQ z=*A~Y9|**v9)eOj*!pklz=QhSz59YnA`S;ah0z_xIyJsawz*Sg%M>f+h}gv*{J=|8Pbb(>cY*hgHvDxA=67l{tcsGJS-8{FSjKtxTEXw$;mKX zFF%vi#EJqBI1^2S;f;tdz-q)-;o^aLKKK8W3_&9|Ml+&Ge%057$ zdt}=W>{u=fgLOA@5m?T6tB837q(>n4V#xt1?5G&Dxs|p86IE;$1{^@TN5OX zrFtZ94w^rpUiRYaTpl+EIB%NZreuU)Dlg$ujcHk+(!Pa523FCPN;DVyWxP3>K8%Hoiv}6 zT!HbygRpKZX)E$jo^bzCLZ5skc>j4!_4BbEWFN4E-bFMFzXuf1IePwyxAn3@0RpGf z#x*G%kP^=0d8k3WtDLc}hjBQOh*yl*iP%vrL)pV|H5maBcd%i_rb=YV{BLw%JW1#P z=2*Q&RnIN`;p>|B_a@Ks$CM%_ZPsS>gG1rM8?f;YrkXS2I;T^HrxGf^L25Ht$0^>2VVl2P#L9hmrRk-;# z_A2X(p{^Zs!{(qLN;@os{a+gdsq3Rt3W=gMG4d845rq9N?$4|>53A9bx3Fk=fIK-I zzX3AZ_{E#s4U%aFGi`^ND1Cs#x&s`Cr60DRItRIaM5+JJYqfYLXH1;BP`U9d$UP3e zkOKiJ!vx#rWPlc$?Xw7y|L^qYRXd5>O$odx#q+Eomwm zdGV#67I-t>UK7vj%0%1I9%_4lge+a(E*1R2#jiVRJQsWj$wFb$zXNbG|1 zwOO^rGQGz|QXv9utkgI=j#`*qh>q$tP&iDgElTo^8>c%8iLVg+W-kheIEKefK0hJo zrjAQ5ZQC>WsOWwd_HXF>N7j9+dRI^O&-f$aa2kGfs@Ga>gI)TDP;tqo$)}LkPKuO9 zt>JolqP8-hzf-Q7IQ|VP#)h8g%VTDA{U@J`?P%>emolw)s*S#yrMRtD2&ZF4Io2PX zQ^Qff8bYRavW%$sDgKdATE;J)-hP7@82kn z^*wliLvo2i;Jm3iHWw-c&7Hkw-w|T{4ep)Kn?#Q?Xs!LIyRrB5tBMc{p5#=;&cXuajHXCMv@KgH(T01{%zI2>Iw)ve?VGP`dBN`aiPpfrCyT)K*2*eX~?3cA{CxJRRBCkch zs}Lewm;(8T)9f_gRO=U6iCxWDNeWwUDr2f`{PgzY|hFV zIUD5-NpuRLQW6{;X^~iL1;F$pvSzK6*gRevCxxqcA6#bt#FON!8bNrQEjw<`d5Mxx zE;f~4zfc1147JeGmn@#aWQIKENYep%T+Iwo0IaWHP+mTIMuS4*DZOKrpXgOv>-Z{$7m!89c&qP77J_)qVWQP~f@(w> z9mP4O;b|v~R&<9;Sb`4?IwYOZ0$D?Vb(&ZK-c_8#6+9jzv@@>V9R8~S+%TAlSXhlaS@G6)P@J*B}Hi(RH?r;&5C%R9H_g0B>D>aP38^*7j3UgZZNoA1dH$yNjS~QNIffTW(z1LW+6r7KS@=kA ztMW_VSi&j-mQbq`$w_tc2+QW0D$#@-OV`kPyvCc)(aU~g|30;UziXEF4-PK29~_Xg zoTTLkql1Iv!*c!GW|1OBtI*k3<5I6qvF8{**N!2>QX+ML;1x&B-8+w7o~&y}g= zFYMV1KHb0n>z&2ge;&4))iO1)$_EGg<=S_(^8E^1UMmwGY!|IYx%MLdtnA-AC?8fU zdB1dcaBx_?->M!QJY4YUZ+yDozy3MT%Jr|Cd2UUmJ%Db-Gc#zu356rC;?{f2L04&9E4EyNllMi<8-6I9rTn{e?-I3u(nIX~qF# zv8mB0E7h&G_~(8$U|OrRn)|=5A1dCNY)6vzW9am+_Gu0Ns@3?_mRqyuB8!x{=LhSDBm}7(obxXs z-0_a`b|}4lg9`MUN@%}t@MJ0Qfu;NVbg)?`bG=?TsPHyP>-z^?ve*CA+%(nMa<2P@ ztGIZBv?T`zmDU;?K^FbLHLqU3uz=TW&HfT0s#<^k&C}i8;!}mC28ct(diw3l<;VN7 zKsF8XTH#H<5O6`dpMF*RLhmfWJa#2PbhZ9;Z|{fV+kjQI{{8ODA76a8{D8HEw4`^R z;oC(k&%b{C&C(nj6-&gw1a9jcv~gVn4@PA`mw{-dvR?znszlZUeWQ3{csV=>AMjW? zUQ+l3x-^V5Cq+8SvP0?peZkG5T=P+1*Z-a)G^7y|bimR}MWDTEx>DUo%qW{dM}b=8 z2MIS(MZkZOdHxdeE|iHY^go(^Un%WKCdg`%$L=UlDKb%kfLQQBLBYJ&K9Mq4oNbIL z!VViP=J=Zf?(OrnMdl#fPrQ3c=T#==Xh3h<%u{zUQwdd(;``I#~aV$6S4}JdvqY-srDa*#chu& zWooJi`rKOEQo_@Gs##h`5=Uu&3R|C>3X&!u<=aT=_1z4yj)kzds3jc$BlgVJ%n|}DJhIn(0TXnikp>goVLbXTlq$fs_KDt z3Hvl@k^v^~z>H1gkhuhj$u?;aB6fa;kDLx>Fyma}nh17zgNLJu4&|x5!42Q8Sj0~4t1fRgOCk-WxlZh#&<*|Rj74`g+T^OFu zY&^O3(_p8xPZ>pAnJ2i%6BTQQr#;LL$@c+qF$b!bx%`wTdoups^;K*DULphjeCdC- z$Ym?`Fdjao`LS$2q~Xb&jUva0B`JSwET#mJ958mMWxs!1 zp$Jcvy~w?Ki7wsbfrvkIjWEKdFTLCtBAjV;2_#rz^r?M>8l)%+#UV)fg`R2+TU5-6 zx#xnVgzT)}^tV*9*A0#7R4R@*(eFe3?WG|G$fbMwAaY>!N38MPt6a<%Q z3wJN_@Glm>u(SojAQw3EB1uS=jz6=hk6ID3P58-@l2U|oc1UV49Wj!mn`5Hog%8P7 z!vmgja;c{l(*}+w)82?V^ zbB$Vy14@38>%`jRdeo#h%RnCpWzt(_A6tH&^oEMs9S3@uj{}}JOS|l&zj?n>R-Mg| zu@pFMVV7ylY_!H4|D&)%x2;d^2%vrte}j=179zt8x4tgKtfMcM&KDn8L%XT; zT80Dh+{4>%NBOlpQ*MqGFz|{hVYUosdk~dxBgAw*y$p8)bkNu~9+A4M;j8N<%H^5>N_X8~6p;S(rjg16A&5J)} z#Hz@r_!<}Q5%MG1Q^k@&4|1(u!ZYrD6uQcKmx5NVx~=#B@kP!j)t29~yw7S~f@6Ymzgc^A$VO^MN!_%%cP6 zOkO%lM>OoGjjG&m)?MXZf z8Q<1!T*PZOE9e&Utw<#VcpKxUy=tsNCuZ)-#*N~shv;PVg^D;Kt9Y+l@&+0rrx}MN zhn5!EFjT_X;Rxp*_IbaDYl%(=IHSz;M*#)N zM0CWm$*52;k%k8OlQnrJpa z;I287k_G$&#Dq*=xUjkB34QcNR!J+FV>Ulz|4^ouBaBv98R9t6Odg?ppgrcO!_tfMo~oe-#DFD=HC^8bN5g>B1K zFd`4AnKbRFX2K0`NjVkJu14FZ@J=BpBiqYRs44G_(F#@yGmGqNfYSWs;y!5;;`Z2Z zCAe#-Wwj_F;D#cD!Y?M=^Onvb=yJkYtr~7K{I63ZcvoBk;xws}f;_&X&ee>{?nKNvn9rXETV< z2_6L#i5wRmo7T?T-=D2->7Cy1%Wp_#5ATdfYCEc-4YM~9_LkpupCcC{-~%4dcF^l? zli$L05LwB$QjeaH4nOqy)}MSnyfGCGRN4@Ak3uAlb!UBjB1e`uid++-QJj2qGqoD= zTdP}v&>oxG_uo*l8t}9#L%AtafC-1-+qA9nZN2RoI?h{kw4|fC<%zVnkIdI+E8!Lm z7BYS_0G*G{*if=R&nKOpVR0#^lglV~gWL0Wkd%|F9fJw^&$!+Swqp!9=VStwA@%){ z8>qTf*2H;i-@`1-$7*dHZsMlIYirp%TY=$dQ#%_z&wQS6=WCNzGVhF_rg`?>^aJn7 zP1E@p7^Envn95D_3Dq4?aXp?`ZeK<+*grl*N|L*6GHl(2kKx%0R>SJZS)De{%>7ENr$!bLl9{SZNmLlhtWR+`%U1Q$s|4;|j%Mu( z59g~BTsY}<#wR1<4Z9_>ek)B3Ns^rd2LZY%<@5}ylQf%h{lHFuqNj0i!M1`54pQ?y3~O`q9-cP%bWHH@XfC;o;GlD_EcYC|bmW_q`H~zQ@&(f? zH;fqJ5KTl)x#4tyt2uZkSQO(RNQ+JM=O4JJLcXWz-SghjyTNS5gYk-cr_-gIJ0D}6 z_foeZpp%?X_hd2ln~CWjKwMt8N_jtWg7~3?Z9<&&JxKhiT8+q^M(%hqm{MVI5$*ho zSQjxk+4Q;#Q$ERKWmUhiy%oLYk01>nn*LcyB^P|QXXYreVt#t%SKi6zC)Z;mg=P7V z9X5lL3Jy@^gYx3uJs)!F1!4S4$(WqrcyMp?mi`(+(pWXG_^4iP#8s3Y2}n!ST7%$D zxscZOeQGuaaa+)aG1Qg<9Cu$BbgMhj!$(tq?_sBqGcqNEuO_%f7K{-%y7q*J3OA)W z$r$t^%L*FJ(`kUQ%_$dxN%@q-w&SYDYKx@qnfN-Y13!1}svfuG^rCK*zz9ZI-pBa? zABPS;4u=#)C)}WjDvm)FZ7_4QQ`4W^)3o2r{6vdZE&@!Layz_PXMLIMSv7G6ihiln z7)#o}c`S%OQ5@+sI3c{p_cS^S!PQTgW3l9`nXfXBR=G9Dy&^~gte!wIvT%<`yAGa5 zNYrIKIB=2C@bY{6+R-(^Yy%h8KaBGaF>}%o*1t}inIwRtSj_$VrYZbDt4@m;DM#mE zM+;ugHjK<%&3kvYbW)6*E94jeBX^(*n~d~302^5pHDZIed@gX7tTlzBWC6?!>S9x( zaXnLE0af@i1dQGet9;BVhg+x#My_ozeTGcR0Wff@s9xh;$`N+0(*_0;7=(D$`<+J~ z)G=+I!p&rv3A1+!dLvu9Q`RC_!M)NRiHl^Ng$ye36ZElQR1Wu`2xTt>NQtG;KaZR_ z&<8o2z-{?Z|+51i0;MT*9hIty3LxKKT=|6h;!qF-*TCBermdq z#*j;UynrHBtDAK)%WeL;fw$>j4)zZ=>WBCF4t(h|a=<|UnOBUek4Z&m4mqS1M@<`R z!>VQ`o_dJU{8dL%;gTmPNzY@p?2HCys#*f;q)W1-$nw$=fC!B$PtVN&_)tAu)|ga! zk~rZ$)6p${C-Ife*Np7%Cdx3*t%dQ)drevgl!s-F7tgJjad+7vJGM`# zPfW(k=IA4icJR)ox{OVSzzvO%yguYyk8kfNkGgJq@ui7bg_-;q3o-287%r}QMHXgf z>frF;=|a>=JOdP8mu79nqBdD5pC@ch)UrpOR-+3CV8tS`a+By~o~)ccsw;Oxx^l3V z=quCy!|Ajx^7SN?$i64#9iahbKGMoc5;nWqztsTYWbBQ;^EL*>1@Hk_5xESGAW$*Q z(o~v33rr{Lzb}!UB0x80|JO(n#IqUz25ez9GZf?bCVU(mzU)4e>I}zIx=5BK<%*RG z#a1WCD+&S9X1oFZK31M+=XB^b+(vXNcsww#D$-2Y&~dT~W&-&a6*MB;0I%Xl zkgN0^&t3`eT4T4|fXHRHacEwq4q#m|5-~tKf~1)wve2xI&Z)wKPZZUBM0`YDQi#sx zl7k2tUBbeJZIv1_S;MH@C{Y10tWUD7pvqAwOX<5;7p71Kk@Ge0r7<;WBU~S+jf^4MkUw;VKzfw!6_Di^?E_Hv=+_LLW{|%#%!Gd=9p1~;zM6Nu{<_cD|E$T1fJ)7&HbyuBdZfb-pP)g#!r(ICUZ6>;+n9G%lHX!R)%~Q&sfa#5$)B^gWQYs)KAqEBg4ePj2by<5nQ;&z3-~ecY$Z{o3bKPn>bf zj)kWcRQ)*^Sm7if43((402^J%IE)nwOu1g~g=X^4SYX48quDK;NA$VHLeNM95s2Lj|%mP3q3jtlVwHI(Wj1ky+#XQ93yGB4{6 zXBjMQsBhjrI+`rnli8p%>@C{UL6?8$-NATq)Ez9yD*nDbU8stV{WGMB z>Ov{+2g4~rV<(;VnW~@Z=X}yz9FNDaRtqzyGY7rU>Pd4kPx}2&0387pkx>(%(ON#)qoz42C_uC+=+Td)q@Pg{1I!6_n{GZKNYEmhUecxnvuMRzn6*#QYr8xN zTC{`deO}rBwRyN`@;jP-H`Ebg;^x6-nFT%hqZr$Fz1tK>~Ga$C{HOW?3(xDuY0Jn%6Wtj2{L*o zoOk~UKkH!^^^L!iUrEry4C^mpI~!uyRV(2qk0*`&ZSMFD-=6S_b_%^@{wmEpTz>WO zY!Y6d=-uUSfS(oZXD{;DfZLnMu98j#h(3Cdw!daS4(qXCUIXR7WX19!?n*O-+z&`e zFl#rvK&?u`3%k7u}laIO<0npZ)d|YtOa9 z_C?<=NwI);)!7-=h>ia2bhz7_4BA6<_|O$viQ{f+yMI==kWb5g90t}d;&KTY3HHj^ zN3ZZV#f<{Cag__5o6KCFVK0U3eC8AYC+$l^@($;@bLP7stDs}9hINxRC#$SQ#V)BWsTyO`Lf!u z%sdpCJ4#(fbw+EHZxRp|r-EJ~fI?y5E`Th7Lgc^H&k`ue|7!^pX5tsyQp)l=+#7P6 zx|)v!D|u(xL9tey(*^2p%rR4^dwayPbT8#O8oLb+#s3`42v*YoQ>K&l;J4`A57TYE zcgLsSwnu}rN_JXso-UkOZ#spRpk_#KZK2t-|cW?vca+K$1r36t8*;)!Tt}=SJQ*Pr-rPiwPLz%P08mg ze&37>$W}49M)3gJ;YpU;C!}3cPSs3m>eXdZjvKUA(1kh64ZX1KQXz4CYEi`mx}Agu zDZ)qOGJjF6qOmC;_Vg+kgiOXo!Iom48}4!eZZJ>>6(3TQO%3g9NLw^Rc}&%k^pL7< zQ$C)hkmEGkJbDeJ)C2c{LL6>Ew2qn@R@c;SKdb#%?40H&l-Z+?S~|eJlU9cAmWkHU-Ecp9X5^l3C`T{Q)|Fvvvn)T{}zP zU3)Xzue>MF$5Z)|O4xbMs^uR_BQ3EQq~RD{M*jHD7R>RT?I*#8D2oHNa$RMdofuoK z;#$}kb9nmTK}eR32vQu&9|VIPo*o2O2ja2B|H%MgwmUL!#`NLwTq<15^5u&9t%8CC zojdd4`x}(DIYM1#{#wMNO5a*e+LyxF_z<)TAH~)foCPv%_7%aZaVANtMPA4JQ*a-P zy6fDuWjYaQt2ew3o#JJ65N1V;)K1Po$OMfZdDh}qb;F4XJvH8g zfl_{no$$_AEwwf8$N@bIOe`-4wjz1mwJl^YIg|p8Od4u`c&Qw|!8RGJe7FuNYoOHd ziX9>Pz?{Y{ z_*ud^g_3d7Yd`K-qQr^Mr}(XnxP3?q`T+guH-V|Ld(OYwK_V$4+l)(KYs{H)h^oqXeR&h|}Y=#NrB?^yk;-rI8u>H1u5&l%J=93}ZJ`X&ey8PA4y>eaZ ztv!%)qwKnna=ksh9Ce5$s-FzUNA010mCfgEN{kU!Uk2uplb9n*>Hr*1$pU-%C5}nR zrzm9=FyMcm%j`C?%Zx@8qd@nJP)MVhA4W-c`Bj0&8ktJ~)@>^VK*)8-Ar4z4E~I6( z6BOA9b{TmYT%Z!%AqWU7AK-(7Dd-5I20uGP8G8oO8sT6t;V>CZOIuU=NoBpgiZ?M#W+#G-hN@^7 zACV~_FL3CB(B7EJ-KOX%%OE5{NVmezGG6U@(v?QW%=_J^#=%F9HxLeKFAAgy8+oR= zFrN2@alx5Ii~*q4U`!TzXPu&_0Y}krxF5E#-;R6|*c5w1Hs}zRKn;O*21)t^+^emR zsaO(x!=}&mMnt}2oCGpi%Sf3AzYiYI&F5j#tPEli2S*KH1w$KEG276q_c%e|{h)T( zHQA7zq$JVtHlfsd+yfmZ0+Mz=DzdDTlvJ5tla5kwJ;6~W5}XtqMH7Dh_8TAznwdZ+ zKu>{^h*4{VvsYX4lD2-{NKd5+Ro;cDBg>OSNWdJ?M!!)I7VyBh$&EyYHOyT}h~Q{! z=i{ZyRWOWvu;IaT4=~c-k=oC8aP4Ag`GNHGY1))22JO+;UoNfRGOB4X+|wHVjAv|*fI z6Ziu5Q|Sz)b*w9`tTIGjO4tyBdQN#z*b0qiP1xEwb~LD_f?Y-vpfHv6!I-2%lw|SD zCJuG9(o8|%QqG20EDUfjkLH*rCW`TyD-_pek9)iHRD;pn94JHAdONtEC`xnfBw$NY zq05=x$Car#$?C1_=U11_%LS?Z;M>F?g|~_dWO65^`WXBrm7qUhlFAbE4-&{^h&j-F zs|*2ehP=^+a3l(2IJILjY@J*_;>OltZC*Pja6YIbl_k5=?Br>%Y!h;LHMMs2sxPlQ zvv*RD08dQzEpQZoXTQ}+4g*|Ya+TnphI-eB!FnJvq)&4Ug_Y3ua@;%%$SS5vU0)wp z6OQPNxJ_6CXJ2SW*GW4Wk7D<4q2+p3y-tqi4WW*7z}ciVtCTdrX)Hkj@0zqXSHdeG zAXx1kKChqZq6uX$vz?*|8++Y-0U7kk2PB?F2Z{IbtW53TDW2=)k^AxfM)lWMMPTSfB3j0_8cVF6iqCzg${XfJpxZE zB67-#kb*32j#KdOED?#|!zx8}Awtw`3l@7OgDtUq!J9CMW=Hk?X>CiNsar03?$&AV#hsebLfwxbmgI=|?q9^4o3|U$% z)NO`m1k&SUk|AtXh=>^shoP5NY4V=Lpgz_`I$Dsqi%M5Vge}2UH)aq3$zSy_G;VC` z#)C3kdk?S*t3~-rijGg7Vz7pmV)5qbMrefX#91a@5$jGVl8w+F>l%JZqVvThvz#v) zZz6;GZ#A+pZ6CKM18$4)46Qfi!cCNIzF$Ok1#aFeyJSjD`3<0sl^%_FT=A#Z8UM2by;pZ!{;a7U$vbxyH)Ytmuxi5^7UwcK*Di6z6-y#T3dAj+|1p+S!( z*8Ih+{{5`}^{oC3SZ)u``t1XPv8spn$-g_Ozvbo_UFl$U+4S2uv%iw_LxrOE3(COt zXN#lpY&Je!4132jIaj>4$0Kw}3)5fVYO>zh@3pZ8a4_n>>oM*tCxg*u{fD9}$FI06 zo#Mw)Ar-T-9uM$a`tg=mT5D$))&2JRAOCS^8ItwxAItCVuh*!#6Iu-o{u9`I_T7tL z5EO^w&b#t;{b%k_vV0)t8U)Rw>3E0`0mKh*E*cD(e534HPEmji@Dy)zBYyl7AA?*F zI(D^CqZ1YDfIIzXPm9xd^nft=J0zAU?~TtG!4JC2-)FXH{P>1tBarQHdgY%MpvKMb z`2V-#Klt}_%EP}aRDg}2S=q*-zkg?%dg1}m5wdPm;JXGffZs$iJ}BC}aZG}ztOw)- zw*$m^0Tr(=tBs#19&_3spXWp>>-85`Rk{9>MN1O#Ex$t}KB2ss+}@Nr`5ukOvg?&2 z^cIweIv#}^6u$X;)QZ~K&4%yN?+t}zWrX46D<5~YDjhCon;KP25G8iJ)LbwGFFE3| zP*$O^frF17lg1UY_0ohyQUeKZzK{?{N(p-zaVG48v_9o>tGtERo+wkDhToXz(~z^@ z@Vn4DNGbs?u5h60eeIyeRUCwVPB_aW3m7>cP*2i+{qb59Lct?{jK`>{16#hC;KaY-&Fu|z>m{sJ})WI4MW#%!2| zk)qyBOwDO;Xt^!Xv!KfMcQJbyfZC`{fRZIK%!2FYKZp>fG>;f~dte)c-B4T&@A+lh zI2iLqj0zQWRAn{~=C`Csu_;2H^dt(VkPE1t6wVqgDUv04jiNcu_PJ6a`K59E=(mzK@*F*!xW!`%WYdw>J2h%t0H*%14s9_lNojrva zW_k`atb;m7WIjXTYVskqUe-uK5he&{!q})KVKWp(vI$x=nWjhu0Z-FSn6!iAid|0C zq;#HaR}R-Us1NN`*w&BOF$M75vO|P>h^b~hur#xEcFacM7MkbDX?uw5N{zfx=_h~X zCl7iiHR`~&mf-qib8t1~i4Y45ig#BBWlf9vOb;50ssQlMQ(qMDmN0Lo>w^0+23v%@ zG^y*dI@(jcB6AJ-&pvMxzf>~jIp>}Op7}&Fd zXBkY1H4~|e#w2>~I*ADne-FPE(Flvv-T+h0`fOu+<8(0kr(KM7(Z2AD{C;vberJW< z=b??z7WLVaZ>R;EwbdLmn8`KLM7LO3WTP{m5Op`RMP*#+vgY*3ayOuhEWBI1Rt%i- zqZL+m;3pe(IRE1fo49`DD>Gm<)?S6Bu{9i7c+W9~{b+77NA-2u3&Sg3qeRhLG`iwG z-=@R0cR4fm*R*l*^(O0^}`1AK-{jyFoy*2aUa`w24i;u{-xwkUj|w1{F;%A)?o zwaJ*A(58WF+9zO5X>icvND%ngMBQ;n9D1Q>0XZ&hN*qf=qdVeCDS-0L`o=CiQS(<(;j zq(|aFEIngwVEb9{E6vOwBA|>==$c|bF47V}yHvkFvm6M~0@pxmyWw=}pCph|cED{lm zGuOf_1)EUZ!LJA1Zg2FR;UIMxKwpQ?@V-*oNnl(omeG;GQc^PKXla}#cNX%!#DTIs zD`v#{{mT_*cCag;*s1|dMFXwF{ zf0m#>8kms+h{_%Rl2PBJg$ape{$u+AQ5I8v5nX?X3Sz9Elh(nA+jD+f6v%iuo+vV> zXa892jIQ)!9YsJ}Q7{DSEF4M}r_jRw!kKGAU_9F!Ata-d9)URRNvFS<^@jW(*9B_~ ze~HC;ulEie2uw%l)lH@Lmcks+sT8GmG-e(+kgs*zYho`!!R=EMN11ha(SuvjUxIzp zTPqqc9n@-9KzoEzRBkX+2xA^LTX^CUGydz2cvEB+PL91kg7XJg+Hc@pn61lMuxs;9 zAh>AJMt`A@aQ`Cs$%vgy?@O#=Zq=eoe$IA9Zy+V8M}rjx0WgY@ZRsDx*TK{mX(W=b z`Hxa~&om@g8aC=h{i$1u9Fl}ZOiqAEneu2O5F`A+idRKDywrT*RTCKvm4@w0&`lyD z$RTT*J_4yr$&>iSK^-yDD@(A=O@tS7@F3X9kS9hR7V*a)UP}r9k0_xh^qC|&E1qy( zkegjPlKd=3oL#h5pa-y4@ftFUr=*l&ZHjrqY~?Ge0~sT{jrSi+zaPT;dq6Y&WAHP& zkmP(Oh&}AN*4cL77F#FS3Q)@gPVnHU)TVoVmYjD7D6!oxTm~$Td*Q&kpaSyVPbXZf(-Kvw3<_?}h`~KEh#Oftg7E zKUkkqUxoyZi;ddBy7@JjHXi8jkydHCfMrD_sy683eP{r;sKwVWpT3al^Hlc^h#A|g zpYZdbMbsOAAG>wv;AsEX$Bab<=++(|Z2H|N)yH$@YV3I1P#^O2(teh&I#8A9 zNRMNb_rkPUru^F;3+IQ;{p&anyo@sxlqmSs$uq|N>>5BdM_ZPw9Jw1Rgx8t-Ih)kc zNnlz5IKctap8OjSVkmwD+Cs9$+dC)qJ{+O$B#~(F2F21R2zT#MX^Nmzdv*tWOCCk4ppQqJ z7whNe=j#xH({=~s8BBo|1rdq3{ITK__>e`CSU3z^4JVF%AsegINuBqX@HAe2Fl zf_b~A!#b(yE@qoNQjoM>uxmeN`WbFO%LgMWbh3uUHgqR6qDbJdHFc0?V~?6KVNRiU z^|R^yY^sY*Z*WtMY|7i-kLfFmhO@~MVl#BV!Lepv7Cga(q1mD;PeAmAR)4RIh z`KYpsHeR5x2Q$ocCbI@NFT%|fPyz0E-b#C>DgkY~yf>_0){pAv^<66Tj>KcUggM!c zdhM6ZZRvXDpElWpKZitP(ML%R2h=3388qht6xHrtl1FL=a>mc`5q38TVCT)Jqe`cK zp<2mmxc8*F{Q%6~d;IVLBAlX99zJ+f#WU#m+i`cG>Q#KT+q}^E`yuSl*R)OQtMWIb z2wsn`fxCBk^}YFB#hdUd&0QX>{{H2xt;((b8My#X{B=%~52IDtlMpyN4I?Sz0A@~& z!{&FI#W@v8N#uuhct$NjehIzccQm3~I`j`>q=GD)fK^KdD!L~2sVqf-E8zhyn-*3F= z9kWwCVoa%h{eI&)aj!?@6Pi}2O3~?+PDyV#AzYPp?SwtkN?RP!k(jx2{qqu!pxtJf z6cim~I?}0KG|_CtC|+$7JoLA53{U6xg<%Uh`a(Q~v;3^&{n6 znMIc+X9YMpcvKe;PhyqMh^!s**1)R78EGqil8h=0CdUjmM&c|?wGhj5oCQ`B+Yebm zpgYB(A5sQv`|uj3_D21SIDV6fTy6xH6UH-{VCVf7oMS{PqAw&H7IZeBj7l$2Npvtz z_#1>_nMebgM8%Sl_Ur@D(_*nJr}*)Py+mX6y$aqY;nVA#t~@qQ2PB5MuoLCy1e78M zjw5DgnagAJ6I@2Fuz9MKP=zCyFgUiYG5?<}|HD*lY>8Ng8L9M*G2`G0Ai)noo zbYME${1(Vvg?bAh7+AzhecG9f;Q+>HYJ$+ufotb7hsIL;c=@BX${G};4X}WMZCG+> zvjSXPsq$8(O?fPKIlNQu&t_+ha_fr+jYp3jR#Dwoc+uXl&uM1)6$~IgBYB`ETuUY! z_|rmgn%`nUT zBCiYD5tP$b1S16=WTIN8HdJ_X6(>k|jMc5bKF*kv_1yu;AD^Y=FU|7ioX4$=yaCOu zo6n;f2z&}aylO^IjoH>*qNt>zgJP{+o~IWZfxb^`qp*zg6=9E>yyY6G04fW zC13wuWt~X5H{(*qMst)bB%#3Ck|W^;H>Htg+z-p52s~|o)X=cXPsH&NzD0W5z&mGT zj0(#^7$t@0AQm1_{b(S4} z^yonz6-Op<2P7>g3b9Wv$DKuPDrYPlhxD4?%9cgdB;y#}N4i%2tz7$lM47QL7g0Jf zJIGY{OGX7iCJI%`>a=7%lQ27mkD<%L7sXIj^kf>@QNe?0B=Q8)KH9La48jOIA!+`L zfFP~30oQA6s1P^oYMWCL;##{liIc*6&nnoON9$U8{Mehd%i)~&x(F$cu8_rT7LMzxHYwme_ zT0%@K3BDA-RG)*cu4yyHfxdKzTudzI!>U*FTsxBgX9SnC#06W+5;UKAjN!ps~mxco#;NBa>-O{CQA=HZMFMo^x(*3fC4WQ(hn@}@K`4FPc()1@HY^1eQc<~KCrGTccrci@?ZNNDSM!%u55987~ zFnR$w6WIV-H~i6a*R>e{M!nn8Gkr`vI1-}J7_rVHSrtGH_5rl#QA(Mh3J3D}So z7+^k^%`8f#L`LXqEQ3*;*>wA0`jSF;KGcgWWAZ~vGr-7W#KS?JD~wh#x@hL>^gphk z3F15iH3Xz-0`A0&I(ugMf3OqESs^+psl|CVeXIZZRe+{Q&;4qvyn=yb}>u0aiZ_wK8a zsM>4(y>7fp4WB?Ah8fErntAxvuS7!|r19q5p`p?lxa9}Y`PvsCx4zp`C zUxDIgqf-)%tTB5Ujfwe@$c`=QKyhCn;{13C%|?$Wjlhq_WHoGK$MNT;m;vrsA4>B8~ zuM}4&__M(es_mPS${gD=r6`jE5PAs?P=Q%dRuu4y;vxH(-{>SKbG^v)%wx!~b;^cw zJaza*!{gb9&3I%nWi!hazzW?&AY${zXPl|KcY}Dyfgw~)9K2?bw+0*aNK5L|1hfmXh!W;!$Uz9in@>sPEYpq zKhVi0nO^0_Q}K|VMKy*Bc?eJ*FZ55^L(@6$nV&z6{ES@j6;4S%F&`Oi_A`WJMlqpe zK2mh`uZ`c1eCpgrh3Ub9@H-3;48-=4=h+GS@NGKuG>Rs$b2tR%wzvU)EGUAfZeg*&mgd_(LfB5r_3gEnu3U7Gltwueg0l7iPL2QS#@c_D3~ zF&<1$b35}07;96Pnd_ZZOaN2jDa^m-W>IC<`8Qc&+x$5^)O?gIi4$nn<IPVJoJGdgFnyVx8UiieQj!m3M( z8V`pAc@_Xa+*b5N6G<&a9uh%q+%a`bw$@kxV7-;$23lNPGVdJXFFmctQ#j$o2V10* zKO&w*=NI|Xh{~~B=1~JKU-GO8I4t1%Ec#4bG#V(biCyp*OaO#Y6_gJ0mMPpANC70} z!3|d}OFy*HHbT;?{7Viz(7Av@9T6Xk+M1Mdb&PmOo~IO%3*Tl+8arvhGxaMH?BemXd`K7q%g00q zsocHYwqa)@hyy^EijeFFl6Gok``QSS!aXntqOzW##Ng*|5;YuQin|(B#}I$?Tl{O& zAab4rR^)@t-AFCIZ+!E`e+K=a0?pz_l7~F7YIHK|?@$YMM^@xRJCxup%|hodB1U^= z!{wm`<=Y*Bj_)Kq@r-35KuWAlr-wRW3yr$cX{`Af>BSJ&mCixlmg)+x!*1^d z5p)gCg&$@>MK^yuvs-qs!>v7w1h?Da{A0J{xV#?ak;vW#9zNXvj;h}o;5&-&2ce<- zS!fOnlWiU}ll>FUNXxBQ=u`15#)FMpo}CGwo}H5XaL`)j2;BsiM2G{)1b0c0etKTy zmK59|;fL2CsFt84(LZZ9@Wl(f0B(8CIhZphsi}~z3iwGebu$iK#ytozUMP@ER4U-S z{9zViOGcZlkNl_f0rtJkQ_l3FSi%hCNX|a6QY!I&#zzURC-KBPk;*RR2ox`Lv?7w2 zY>bC6f|(ZpI;*%o`66q-k_EDFn6>@Q85S_FcP<280M2k9{4#M;WBlutVvE`dW0`AW zaSt@kHbF%ZHa0$!ZL!ZNiGsUtKfixn-P|@J=I33OAFW%UowKoa!8jhf4OZy9D@;y$ zG%!hqFBE9A(1m*ac%f zWG1T9Hsr$Y*ogDNNR_M><4~el0nq&*S^5WXOmFrYKcR_Y7D5x9ciz|_+*dq@J&HG) zTMzw)5O&@hwskqhWzGG7c9R|iI-voFJeZ9k`58V(-+8Pu_fmXjY@y|(2(#;*nUv3g z`O)`*UWyTm!!wU3 z7#e9nDetDc;YK0qSx0)U6FnJyR1i?C%uG#jpF=Q27=mtvF${6Q#f^Sh?F0W1y62YF0$?1hS`FuElVf+F2yrnc>m1A55SH39CEj6ts71G&Rc28?!kEAXX z)$QaLB$7bU>Nmv2=8yeKsi>&uO3cJBJ`?#xWV|ry5r6pe@1uNjI)x64=tAJ(1?5O6Qzs3~AVuUMo6A@>wY3`1D(>G%dWoJ0Y z+slG5Uyq(;yTP%Y)zWMLLChf?i@i%9_!CO~Gy2eL>fGNW^Qopf^C^q)(<&fp3+s*_1u-wE>Zdu?peH zj7XNu{Du~uJ7h4lp0Y$Z>^X2tXzYb-pT_KmDv&PQ)%Q`zQ^*qyy2V4Bq)f7o3~Xycp#g9RvoMWfR!!q&p{qQ&HBK^oF=##K6!x8eKdW-CX&)SzSUH(87Y>Ag5A%!-48^W6T*Rr$< z(Ztd}(DAtRp1tM`h9)}%;TXkT_n`i8JgpQ^I;glE$VuM*67z4`1I-=%Fvv9EOJt&` zR`B})$rdAc72LvPAfdlR8!8B3nP1Oyj>)@EffP>oGCGY3Co`~#GLVb}T4p&_q94e( zG>m*lnCbWrF+j7^ys)D}Es)jBZUyvXtEiW}r>> zb(1I~4QiRz*L8XevQx-_l;xH%0BVE`69q{|Yvq~~%BP0#Xv;HB*ra?9GOs;o1p-6w zeu9Mc-S7C8O*3A__kWtdI+%J{O@wAtF)_hO_9N~RrGUjaFvmk2bfO-Lk$l-=-}4W{ z`*q{pNydUvP)EevXi$3T`}(wS6<_cp5ML-><(;$NS_dT})1h+y%QC3Cog?1Bo>d>? zKaSZjg8`f{h)Dg13LirC?=;`XB%hvbSad7+jX*Q~-bVYBn2-E-_&naiu?sOBuX~gk z`POGl?0ZgbwSpF(q*~RTPivc-hlfu-tx>kGqv$UE^k1bx7ndMw>M7Q@a!Fu73SMN} z#QUYp2b-IZ*Sv_}J{R{tt@(UVToK|6AtH&u3Ai7{LchI*JJ6@KPiwnhKV9D{`GZn> z)GZOBKJE+%6zP`cRHi3uT`A7oK6pMpyCf!~KP$oWm3|zxzwJ%irKjO5wCN>;gfG?f zi+Oukk_KZmRb!+KgTdCH`IxXk`O9nU8nIIzjd zW@u%)c{-S_hl`D~{@K!3C!=}s^^>!qg(rSmyT7R+uysYr(g;g^UzO*=niSwlLdO-Pu8 z)6GYMqVU$BUV7_S5@D5VzVsH+wlsLm%lxU;xKYD;u0`ORPmY9Ual}`9a@$dK2${d% zR_{KzI6khH9zQN^KdLTnzCcE@{FSZGSH7~Hyz&KaEO%0S7+&xpU)zw}4EgqPKErgd zZ=XEbJ}fPor5lZfrXD}8Y(HAByuJTL^*LNV~Z= z-lg1SzNJT`O7)dWcl6J9(Kb75y!ERcWk$_=_k0}M9^GS$b_S1+qSf;L!)=o9H@}Fz z3eZZmW{FYh93K;N@X3=Wn)5*Ot(NYVZ0A-?m$q)s_iOU`{ZGxe z-@90zGq;-e9&BwteDvApfBoXir_Y|hc=;-u@(_hfX^R{($}R>e=R{m&AQ=upj@oc!w)@f5Rug`3L{$EKSRXkWHI{ZxX93Y#znCi`-di3*vMd*MGKh?lmBH<}Ge@@V ztr|son)$4Bbcvw!XBavx-oHKE2uJ*7$G)Eo-fL7Dq21tqyeL`Yg}Dd`{ZCIN>kfAI z;dX`a&}8ABcDs=}NwY{m=Coc?9nCY)QK>!SA%tw^REyF5IA!U!J~wh^X{pW34n)EV zlMZBfDZ~h!dj}nq@~Lz*KbZ<(r{usc{f+qOUE_lM3!E_&w5&x5L~x4Py{%)-f2y_0 zQT*vgR|w_QUU~8alEm}ycQ`$_U;bLyy9%#9er%+R=Y^JxN@NT3^r=<_jYJpgTS5*d zmuFZzSd9LlQ}XHbdqcvcvi;mBX#tN>seIHb)=QM=9sTG)oH6D%&FczukhPrdIUH_FtjpM~@$W=10)D6;^Qd&Jd&%m$p{v=0AJ! z=bvm{Cv0Ii{O$dZZ0Qd_RL<*f|IN+Jz>p**`)}7D9{#F7U-+M`N8#`1foY3SHe$sd zZn0t`fGr>`5ssX#6SBJhg{=coKRrJ9%vhWU7hgOO1193m?Tnqd*soN$u6_RK$&)Xu zj~_p(*0w%7Y;w!m&?z`K$2U)7^ab^d^A6u_H6L7j_VkPGzkd1Um)ZO8wz>QH%NJk1 zeD-uJzx$B8U%c9S2GxF^-+jd0=TAT1e!lhM^Q7he1GVwjN1ts!e2}-%SAQ>GQR4jB z7kPhu_4nl$&z`<`{_17ca$o&zJ$ShN*`vRzWnZGc_4n|__RFnT4?=%M_UR(9!eX5` z&*6w_9mM=*+cwL8wwwLr!BMmC12$0ZH2d56o84yrVSd$X_8<9GWK;A0J^>mIn-}|o z+S>pEpUj%z4(cY>yT5{~DxF`us2TNI{apZsPd@22$yCv8c1Twdj+dXVhiqHvsM+4Z zdvCS_*IwXYWB1z+;&i?H0N6gp|Aqb^eO&)XzcTkQ^NcC~@6G)4kL#Ir@35fVyOpCw zCtLl80d@U1SD&L5*;3p5TUI}veU#Szi#>D5oKE+ZNyxXEBNpy$LA=Ag?RamSSj2Ge zVZ8ScSKn~&QM~sE;%4`Z_yz2>PdELodVjm#e^~E7GPve>feTI)4zu%JnG~k|UT+rk z49+c=&W3X`_KW&=FLAXeaf_G%kDe$!-`y=u=6olzkCa@B8YiKxAE)RuO-&HA8fhmU zW5kE1=qZ^_#;742NvX8r1N@j(ZL>7$&54X2lB{;+x1ZKNUfr>W+Gf~`8jV!p@oe`+ z{lBI4IGT1pp!HC!!vBh{M3|JNZO@0Z*Ih)Ga%YZN`PBA$S9?vUEu6>CKmXh);d%z^ zl5BMTR!iH-d*X@4=$k$Noe3oX4eTy0*$XJ~;15qooIRR}1BzmcnDPiKuu5V(X)gM5 z4!ZX4DBM5?Wh21>hB%btOEIjHh#XS#&f@35-17Gk3>hj}HqfT^tiv}O&o&y)>c05y zTXJm7`s1!(7tg~sQ#%fTr$u0g<}hlgtf$lUP;jJ#zeO7dRId#IcY9}}0MpHkf2^<) z^*BLCHDS2yLj1K@1Z|bJiABhsY;eKDZ0B^kZ7Z2+{*vacw?Y={_)>4kJKU7{H|TGl zUA`uXmtzjpXL{)F?)eroMnS^sm+SZubjXg=DG|@r#qZ-pWSFmd!-z6_L**)9bL6QQ z&ZUQ3@lKA3iep$A-4>#-o_60-mU%Q&^}b3djc&c*@UyE{6Xp6#Gl60k|PdJokA zOH?b}E9h2P^YRlt6BzOk&8$9oau0gU+>}IPT2hP?3jUHeN(a{^OGaqZCmj#sPAP1+ z2}jE_55Vv9%~w)^9$F4!KX*`*)N$AJslx>plL)a(0zcgTU|KTMIXJR{DcdYqk zPYhlL-Rv644yEJ=hZUOrn0-lGOE*;{gf8tg{on|>cQKeMF6`Fx$w-9?{vRLj;!%v$ zA~})a)cyZ<7_(#br>81g`vMWyR@`QX_&B=*5Ke%ciSTVAaHa18L=1;-oKGm4PMSbD z_4bI!6?iu9MayR+dJ61F#BHo^on72B+}*slM|$Mp<*pjM2iolNRdNfz608>YpcS1y zGIsIV+cuw&aC6pg-rKr|MohK~{iM#ik3+TASI&EFeO<{G*LR=)@cMiH>^=QqZ+#s@ b3$~f1XD{EpuqTf +Date: Sat, 4 Aug 2018 17:40:05 +0300 +Subject: [PATCH] apparmor: use dri-enumerate abstraction + +Remove backported rule and use new dri-enumerate abstraction instead. +dri-enumerate is available in AppArmor 2.13, which recently migrated +into Debian Buster. + +Change-Id: I64919edc1882f7bc1e65cfb94686464c5350f699 +--- + sysui/desktop/apparmor/program.soffice.bin | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin +index 2fc7fd6b5735..33ad6f933ef6 100644 +--- a/sysui/desktop/apparmor/program.soffice.bin ++++ b/sysui/desktop/apparmor/program.soffice.bin +@@ -82,6 +82,7 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin { + #include + #include + #include ++ #include + #include + #include + #include +@@ -179,7 +179,6 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin { + #Likely moving to abstractions in the future + owner @{HOME}/.icons/*/cursors/* r, + /etc/fstab r, # Solid::DeviceNotifier::instance() TODO: deny? +- /sys/devices/pci[0-9]*/**/{device,subsystem_device,subsystem_vendor,uevent,vendor} r, # for libdrm + /usr/share/*-fonts/conf.avail/*.conf r, + /usr/share/fonts-config/conf.avail/*.conf r, + /{,var/}run/udev/data/+usb:* r, # Solid::Device::listFromQuery() + +From 5054f7067cc5ee43933893b682e02540fce043b4 Mon Sep 17 00:00:00 2001 +From: Rene Engelhard +Date: Sat, 20 Jun 2020 15:33:34 +0200 +Subject: deb#962903 #include to allow /tmp/something/* + +Change-Id: I6377db152ededc4d46ba7bbbaa9bc66210964e18 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/96770 +Tested-by: Jenkins +Reviewed-by: Thorsten Behrens +--- + sysui/desktop/apparmor/program.senddoc | 4 ++-- + sysui/desktop/apparmor/program.soffice.bin | 3 ++- + sysui/desktop/apparmor/program.xpdfimport | 5 ++--- + 3 files changed, 6 insertions(+), 6 deletions(-) + +diff --git a/sysui/desktop/apparmor/program.senddoc b/sysui/desktop/apparmor/program.senddoc +index d659ec9b98b3..969130f4ea90 100644 +--- a/sysui/desktop/apparmor/program.senddoc ++++ b/sysui/desktop/apparmor/program.senddoc +@@ -17,8 +17,8 @@ + profile libreoffice-senddoc INSTDIR-program/senddoc { + #include + +- owner /tmp/lu** rw, #makes files like luRRRRR.tmp/lubRRRR.tmp where R is random +- #Note, usually it's lub or luc, don't know why. ++ #include ++ + /{usr/,}bin/sh rmix, + /{usr/,}bin/bash rmix, + /{usr/,}bin/dash rmix, +diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin +index 212eb7c62b15..42053db2abef 100644 +--- a/sysui/desktop/apparmor/program.soffice.bin ++++ b/sysui/desktop/apparmor/program.soffice.bin +@@ -92,6 +92,8 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin { + #include + #include + ++ #include ++ + #List directories for file browser + / r, + /**/ r, +@@ -116,7 +118,6 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin { + owner @{HOME}/.config/soffice.binrc.lock rwk, + owner @{HOME}/.cache/fontconfig/** rw, + owner @{HOME}/.config/gtk-???/bookmarks r, #Make bookmarks work +- owner /tmp/psp[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]* rw, #/tmp/psp1534203998 (printing to file) + + owner /{,var/}run/user/*/dconf/user rw, + owner @{HOME}/.config/dconf/user r, +diff --git a/sysui/desktop/apparmor/program.xpdfimport b/sysui/desktop/apparmor/program.xpdfimport +index efe10dce020d..f8bfbfe8fa49 100644 +--- a/sysui/desktop/apparmor/program.xpdfimport ++++ b/sysui/desktop/apparmor/program.xpdfimport +@@ -17,9 +17,8 @@ + profile libreoffice-xpdfimport INSTDIR-program/xpdfimport { + #include + +- owner /tmp/* r, #Seems to need to read file created with pattern /tmp/RRRRRR +- owner /tmp/lu** rw, #makes files like luRRRRR.tmp/lubRRRR.tmp where R is random +- #Note, usually it's lub or luc, don't know why. ++ #include ++ + /usr/share/poppler/** r, + /usr/share/libreoffice/share/config/* r, + owner @{HOME}/.config/libreoffice{,dev}/?/user/uno_packages/cache/log.txt rw, +-- +cgit v1.2.1 + diff --git a/debian/patches/apparmor-complain.diff b/debian/patches/apparmor-complain.diff new file mode 100644 index 00000000000..8f96fd3046b --- /dev/null +++ b/debian/patches/apparmor-complain.diff @@ -0,0 +1,26 @@ +diff --git a/sysui/desktop/apparmor/program.oosplash b/sysui/desktop/apparmor/program.oosplash +index fef54b7ee384..9dde31a63615 100644 +--- a/sysui/desktop/apparmor/program.oosplash ++++ b/sysui/desktop/apparmor/program.oosplash +@@ -12,7 +12,7 @@ + + #include + +-profile libreoffice-oopslash INSTDIR-program/oosplash { ++profile libreoffice-oopslash INSTDIR-program/oosplash flags=(complain) { + #include + #include + +diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin +index b4baeab8f5ee..7861c9eac9bd 100644 +--- a/sysui/desktop/apparmor/program.soffice.bin ++++ b/sysui/desktop/apparmor/program.soffice.bin +@@ -60,7 +60,7 @@ + + #include + +-profile libreoffice-soffice INSTDIR-program/soffice.bin { ++profile libreoffice-soffice INSTDIR-program/soffice.bin flags=(complain) { + #include + + #include diff --git a/debian/patches/apparmor-mesa.diff b/debian/patches/apparmor-mesa.diff new file mode 100644 index 00000000000..dd6dd20a633 --- /dev/null +++ b/debian/patches/apparmor-mesa.diff @@ -0,0 +1,10 @@ +--- a/sysui/desktop/apparmor/program.soffice.bin-old 2018-11-09 23:04:59.858704214 +0100 ++++ b/sysui/desktop/apparmor/program.soffice.bin 2018-11-09 23:05:28.050949237 +0100 +@@ -87,6 +87,7 @@ + #include + #include + #include ++ #include + #include + #include + #include diff --git a/debian/patches/apparmor-opencl.diff b/debian/patches/apparmor-opencl.diff new file mode 100644 index 00000000000..462f376bca1 --- /dev/null +++ b/debian/patches/apparmor-opencl.diff @@ -0,0 +1,20 @@ +apparmor: Add opencl support + +AppArmor in Debian Buster now has OpenCL abstractions. + +Include OpenCL abstractions to fix OpenCL usage in Calc. +Index: libreoffice-6.1.4/sysui/desktop/apparmor/program.soffice.bin +=================================================================== +--- libreoffice-6.1.4.orig/sysui/desktop/apparmor/program.soffice.bin 2019-01-14 19:29:25.000000000 +0200 ++++ libreoffice-6.1.4/sysui/desktop/apparmor/program.soffice.bin 2019-01-16 18:43:17.051781559 +0200 +@@ -98,6 +98,10 @@ + + #include + ++ #include ++ #include ++ #include ++ + #List directories for file browser + / r, + /**/ r, diff --git a/debian/patches/apparmor-updates.diff b/debian/patches/apparmor-updates.diff new file mode 100644 index 00000000000..1f71f8d143c --- /dev/null +++ b/debian/patches/apparmor-updates.diff @@ -0,0 +1,13 @@ +diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin +index 42053db2abef..83bd9d11f93c 100644 +--- a/sysui/desktop/apparmor/program.soffice.bin ++++ b/sysui/desktop/apparmor/program.soffice.bin +@@ -101,7 +101,7 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin { + owner @{libo_user_dirs}/**/ rw, #allow creating directories that we own + owner @{libo_user_dirs}/**~lock.* rw, #lock file support + owner @{libo_user_dirs}/**.@{libreoffice_ext} rwk, #Open files rw with the right exts +- owner @{libo_user_dirs}/{,**/}lu??????????{,?}.tmp rwk, #Temporary file used when saving ++ owner @{libo_user_dirs}/{,**/}lu???????????{,?}.tmp rwk, #Temporary file used when saving + owner @{libo_user_dirs}/{,**/}.directory r, #Read directory settings on KDE + + # Settings diff --git a/debian/patches/appstream-ignore-startcenter.diff b/debian/patches/appstream-ignore-startcenter.diff new file mode 100644 index 00000000000..4251d649299 --- /dev/null +++ b/debian/patches/appstream-ignore-startcenter.diff @@ -0,0 +1,10 @@ +--- a/sysui/desktop/menus/startcenter.desktop ++++ b/sysui/desktop/menus/startcenter.desktop +@@ -31,6 +31,7 @@ StartupNotify=true + X-GIO-NoFuse=true + StartupWMClass=libreoffice-startcenter + X-KDE-Protocols=file,http,ftp,webdav,webdavs ++X-AppStream-Ignore=True + + ##Define Actions + Actions=Writer;Calc;Impress;Draw;Base;Math; diff --git a/debian/patches/b0404f80577de9ff69e58390c6f6ef949fdb0139.patch b/debian/patches/b0404f80577de9ff69e58390c6f6ef949fdb0139.patch new file mode 100644 index 00000000000..15af13680c8 --- /dev/null +++ b/debian/patches/b0404f80577de9ff69e58390c6f6ef949fdb0139.patch @@ -0,0 +1,63 @@ +From b0404f80577de9ff69e58390c6f6ef949fdb0139 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Caol=C3=A1n=20McNamara?= +Date: Mon, 20 Dec 2021 17:05:44 +0000 +Subject: [PATCH] only use X509Data + +Change-Id: I52e6588f5fac04bb26d77c1f3af470db73e41f72 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/127193 +Tested-by: Jenkins +Reviewed-by: Miklos Vajna +(cherry picked from commit be446d81e07b5499152efeca6ca23034e51ea5ff) +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/127178 +Reviewed-by: Adolfo Jayme Barrientos +--- + xmlsecurity/inc/xmlsec-wrapper.h | 4 ++++ + .../source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx | 4 ++++ + xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx | 4 ++++ + 3 files changed, 12 insertions(+) + +diff --git a/xmlsecurity/inc/xmlsec-wrapper.h b/xmlsecurity/inc/xmlsec-wrapper.h +index e4048de94bf2a..cc149379c36be 100644 +--- a/xmlsecurity/inc/xmlsec-wrapper.h ++++ b/xmlsecurity/inc/xmlsec-wrapper.h +@@ -43,6 +43,10 @@ + #include + #include + #include ++#include ++#endif ++#ifdef XMLSEC_CRYPTO_MSCRYPTO ++#include + #endif + + #endif +diff --git a/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx b/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx +index d9b8b1eace680..824139464fbb8 100644 +--- a/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx ++++ b/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx +@@ -233,6 +233,10 @@ SAL_CALL XMLSignature_MSCryptImpl::validate( + // We do certificate verification ourselves. + pDsigCtx->keyInfoReadCtx.flags |= XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS; + ++ // limit possible key data to valid X509 certificates only, no KeyValues ++ if (xmlSecPtrListAdd(&(pDsigCtx->keyInfoReadCtx.enabledKeyData), BAD_CAST xmlSecMSCngKeyDataX509GetKlass()) < 0) ++ throw RuntimeException("failed to limit allowed key data"); ++ + //Verify signature + //The documentation says that the signature is only valid if the return value is 0 (that is, not < 0) + //AND pDsigCtx->status == xmlSecDSigStatusSucceeded. That is, we must not make any assumptions, if +diff --git a/xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx b/xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx +index b41d754f74072..fde4b747e9322 100644 +--- a/xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx ++++ b/xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx +@@ -247,6 +247,10 @@ SAL_CALL XMLSignature_NssImpl::validate( + // We do certificate verification ourselves. + pDsigCtx->keyInfoReadCtx.flags |= XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS; + ++ // limit possible key data to valid X509 certificates only, no KeyValues ++ if (xmlSecPtrListAdd(&(pDsigCtx->keyInfoReadCtx.enabledKeyData), BAD_CAST xmlSecNssKeyDataX509GetKlass()) < 0) ++ throw RuntimeException("failed to limit allowed key data"); ++ + //Verify signature + int rs = xmlSecDSigCtxVerify( pDsigCtx.get() , pNode ); + diff --git a/debian/patches/bash-completion-DRAWDOCS-pdf.diff b/debian/patches/bash-completion-DRAWDOCS-pdf.diff new file mode 100644 index 00000000000..898d4a0e070 --- /dev/null +++ b/debian/patches/bash-completion-DRAWDOCS-pdf.diff @@ -0,0 +1,26 @@ +From 8ef56c7cb4008c6290da82b305ec2deefc8d94d5 Mon Sep 17 00:00:00 2001 +From: Rene Engelhard +Date: Tue, 3 Nov 2020 20:34:01 +0100 +Subject: add pdf to DRAWDOCS for bash-completion + +Change-Id: I02195cb235774d205e9f9cc8821b897a841fa54f +--- + bin/generate-bash-completion.py | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/bin/generate-bash-completion.py b/bin/generate-bash-completion.py +index 0702a3635774..db6f49e814b5 100755 +--- a/bin/generate-bash-completion.py ++++ b/bin/generate-bash-completion.py +@@ -27,7 +27,7 @@ DRAWDOCS = ["sxd", "std", "dxf", "emf", "eps", "met", "pct", "sgf", "sgv", "sda" + "sdd", "vor", "svm", "wmf", "bmp", "gif", "jpg", "jpeg", "jfif", "fif", + "jpe", "pcd", "pcx", "pgm", "png", "ppm", "psd", "ras", "tga", "tif", + "tiff", "xbm", "xpm", "odg", "otg", "fodg", "odc", "odi", "sds", +- "wpg", "svg", "vdx", "vsd", "vsdm", "vsdx"] ++ "wpg", "svg", "vdx", "vsd", "vsdm", "vsdx", "pdf"] + + IMPRESSDOCS = ["sxi", "sti", "ppt", "pps", "pot", "sxd", "sda", "sdd", "sdp", + "vor", "cgm", "odp", "otp", "fodp", "ppsm", "ppsx", "pptm", "pptx", +-- +cgit v1.2.1 + diff --git a/debian/patches/bigendian.diff b/debian/patches/bigendian.diff new file mode 100644 index 00000000000..34caf4448dd --- /dev/null +++ b/debian/patches/bigendian.diff @@ -0,0 +1,352 @@ +From fd9422febc384208558487bfe4a69ec89ab0ddca Mon Sep 17 00:00:00 2001 +From: Stephan Bergmann +Date: Wed, 23 Sep 2020 11:41:05 +0200 +Subject: Convert attribute value to UTF-8 when passing it to libxml2 + +Using toUtf8, requiring the OUString to actually contain well-formed data, but +which is likely OK for this test-code--only function, and is also what similar +dumpAsXml functions e.g. in editeng/source/items/textitem.cxx already use. + +This appears to have been broken ever since the code's introduction in +553f10c71a2cc92f5f5890e24948f5277e3d2758 "add dumpAsXml() to more pool items", +and it would typically only have written the leading zero or one +(depending on the architecture's endianness) characters. (I ran across it on +big-endian s390x, where CppunitTest_sd_tiledrendering +SdTiledRenderingTest::testTdf104405 failed because of + +> Entity: line 2: parser error : Input is not proper UTF-8, indicate encoding ! +> Bytes: 0xCF 0x22 0x2F 0x3E +> ation=""/> +Date: Wed, 23 Sep 2020 11:53:11 +0200 +Subject: Read MOSDocumentLockFile UTF-16 string data with same endianness +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +...as MSODocumentLockFile::WriteEntryToStream has written it to (i.e., +always as UTF-16LE, assuming that is actually the right format to use). The +discrepancy between writing and reading the string data appears to be present +ever since the code's introduction in 5db1e20b8b0942dac2d50f3cd34532bb61147020 +"Introduce new lockfile handler for MSO like lockfiles". + +This caused CppunitTest_svl_lockfiles to fail on (big-endian) s390x Linux with + +> svl/qa/unit/lockfiles/test_lockfiles.cxx:578:(anonymous namespace)::LockfileTest::testWordLockFileRT +> equality assertion failed +> - Expected: LockFile Test +> - Actual : 䰀漀挀欀䘀椀氀攀 吀攀猀琀 + +etc. + +Change-Id: I97267aa14a3a926e7fd7bb1d2ce7d2de05d52a64 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/103238 +Tested-by: Jenkins +Reviewed-by: Stephan Bergmann +--- + svl/source/misc/msodocumentlockfile.cxx | 12 ++++++++++-- + 1 file changed, 10 insertions(+), 2 deletions(-) + +diff --git a/svl/source/misc/msodocumentlockfile.cxx b/svl/source/misc/msodocumentlockfile.cxx +index 9650db03999f..0c857ffb53ec 100644 +--- a/svl/source/misc/msodocumentlockfile.cxx ++++ b/svl/source/misc/msodocumentlockfile.cxx +@@ -228,8 +228,16 @@ LockFileEntry MSODocumentLockFile::GetLockData() + nUTF16Len = *++pBuf; // use Excel/PowerPoint position + + if (nUTF16Len > 0 && nUTF16Len <= 52) // skip wrong format +- aResult[LockFileComponent::OOOUSERNAME] +- = OUString(reinterpret_cast(pBuf + 2), nUTF16Len); ++ { ++ OUStringBuffer str(nUTF16Len); ++ sal_uInt8 const* p = reinterpret_cast(pBuf + 2); ++ for (int i = 0; i != nUTF16Len; ++i) ++ { ++ str.append(sal_Unicode(p[0] | (sal_uInt32(p[1]) << 8))); ++ p += 2; ++ } ++ aResult[LockFileComponent::OOOUSERNAME] = str.makeStringAndClear(); ++ } + } + } + return aResult; +-- +cgit v1.2.1 + +From 0387077e6647d7a30fd36d4ec41dfc559afe45c3 Mon Sep 17 00:00:00 2001 +From: Stephan Bergmann +Date: Wed, 23 Sep 2020 12:01:35 +0200 +Subject: Correctly read PNG into bitmaps N32BitTcA... formats (where alpha + comes first) + +This appears to be a regression introduced with +86ea64f216819696cd86d1926aff0a138ace2baf "Support for native 32bit Bitmap in VCL +and SVP (cairo) backend". It caused CppunitTest_vcl_png_test to fail on +(big-endian) Linux s390x with + +> vcl/qa/cppunit/png/PngFilterTest.cxx:176:PngFilterTest::testPng +> equality assertion failed +> - Expected: c[ff000040] +> - Actual : c[0000ff40] + +where eFormat happens to be ScanlineFormat::N32BitTcArgb, vs. +ScanlineFormat::N32BitTcBgra on e.g. Linux x86-64 (and which thus didn't notice +the lack of support for N32BitTcA... formats where alpha goes first instead of +last). + +Change-Id: Id6030468718f6ef831b42f2b5ad7ba2c4c46a805 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/103240 +Tested-by: Jenkins +Reviewed-by: Stephan Bergmann +--- + vcl/source/filter/png/PngImageReader.cxx | 11 ++++++++++- + 1 file changed, 10 insertions(+), 1 deletion(-) + +diff --git a/vcl/source/filter/png/PngImageReader.cxx b/vcl/source/filter/png/PngImageReader.cxx +index fae4b29a339a..ab5097bfce2c 100644 +--- a/vcl/source/filter/png/PngImageReader.cxx ++++ b/vcl/source/filter/png/PngImageReader.cxx +@@ -187,6 +187,8 @@ bool reader(SvStream& rStream, BitmapEx& rBitmapEx, bool bUseBitmap32) + for (auto& rRow : aRows) + rRow.resize(aRowSizeBytes, 0); + ++ auto const alphaFirst = (eFormat == ScanlineFormat::N32BitTcAbgr ++ || eFormat == ScanlineFormat::N32BitTcArgb); + for (int pass = 0; pass < nNumberOfPasses; pass++) + { + for (png_uint_32 y = 0; y < height; y++) +@@ -198,10 +200,17 @@ bool reader(SvStream& rStream, BitmapEx& rBitmapEx, bool bUseBitmap32) + for (size_t i = 0; i < aRowSizeBytes; i += 4) + { + sal_Int8 alpha = pRow[i + 3]; ++ if (alphaFirst) ++ { ++ pScanline[iColor++] = alpha; ++ } + pScanline[iColor++] = vcl::bitmap::premultiply(pRow[i + 0], alpha); + pScanline[iColor++] = vcl::bitmap::premultiply(pRow[i + 1], alpha); + pScanline[iColor++] = vcl::bitmap::premultiply(pRow[i + 2], alpha); +- pScanline[iColor++] = alpha; ++ if (!alphaFirst) ++ { ++ pScanline[iColor++] = alpha; ++ } + } + } + } +-- +cgit v1.2.1 + +From 646a69757b928aeaf6e0d0d41c4b30c02803a3a3 Mon Sep 17 00:00:00 2001 +From: Stephan Bergmann +Date: Thu, 24 Sep 2020 14:51:16 +0200 +Subject: Fix endianness issues in OOX crypto routines + +...without which CppunitTest_sw_ooxmlencryption failed on (big-endian) s390x: + +* The 32-bit segment counter in AgileEngine::de-/encrypt apparently needs to be + stored in LSB format (at least, if it is, CppunitTest_sw_ooxmlencryption + ultimately succeeded, whereas otherwise it failed). + +* The UTF-16 string in Standard2007Engine::calculateEncryptionKey apparently + needs to be in LSB format (at least, if it is, CppunitTest_sw_ooxmlencryption + ultimately succeeded, whereas otherwise it failed). + +* The various 32-bit values in the EncryptionStandardHeader and + EncryptionVerifierAES data structures apparently need to be written out in LSB + format in Standard2007Engine::writeEncryptionInfo, given that they are always + read in LSB format in Standard2007Engine::readEncryptionInfo. + +Change-Id: I3a1efbfe324b1bbd539b88dc5d40bb44f9676ffa +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/103315 +Tested-by: Jenkins +Reviewed-by: Stephan Bergmann +--- + oox/source/crypto/AgileEngine.cxx | 16 ++++++++++------ + oox/source/crypto/Standard2007Engine.cxx | 28 ++++++++++++++++++++-------- + 2 files changed, 30 insertions(+), 14 deletions(-) + +diff --git a/oox/source/crypto/AgileEngine.cxx b/oox/source/crypto/AgileEngine.cxx +index e1ce103c5d0c..ad01e31def83 100644 +--- a/oox/source/crypto/AgileEngine.cxx ++++ b/oox/source/crypto/AgileEngine.cxx +@@ -461,9 +461,11 @@ bool AgileEngine::decrypt(BinaryXInputStream& aInputStream, + + while ((inputLength = aInputStream.readMemory(inputBuffer.data(), inputBuffer.size())) > 0) + { +- sal_uInt8* segmentBegin = reinterpret_cast(&segment); +- sal_uInt8* segmentEnd = segmentBegin + sizeof(segment); +- std::copy(segmentBegin, segmentEnd, saltWithBlockKey.begin() + saltSize); ++ auto p = saltWithBlockKey.begin() + saltSize; ++ p[0] = segment & 0xFF; ++ p[1] = (segment >> 8) & 0xFF; ++ p[2] = (segment >> 16) & 0xFF; ++ p[3] = segment >> 24; + + hashCalc(hash, saltWithBlockKey, mInfo.hashAlgorithm); + +@@ -804,9 +806,11 @@ void AgileEngine::encrypt(const css::uno::Reference & rx + inputLength : oox::crypto::roundUp(inputLength, sal_uInt32(mInfo.blockSize)); + + // Update Key +- sal_uInt8* segmentBegin = reinterpret_cast(&nSegment); +- sal_uInt8* segmentEnd = segmentBegin + nSegmentByteSize; +- std::copy(segmentBegin, segmentEnd, saltWithBlockKey.begin() + saltSize); ++ auto p = saltWithBlockKey.begin() + saltSize; ++ p[0] = nSegment & 0xFF; ++ p[1] = (nSegment >> 8) & 0xFF; ++ p[2] = (nSegment >> 16) & 0xFF; ++ p[3] = nSegment >> 24; + + hashCalc(hash, saltWithBlockKey, mInfo.hashAlgorithm); + +diff --git a/oox/source/crypto/Standard2007Engine.cxx b/oox/source/crypto/Standard2007Engine.cxx +index ec9269e771fc..c3b0efad962e 100644 +--- a/oox/source/crypto/Standard2007Engine.cxx ++++ b/oox/source/crypto/Standard2007Engine.cxx +@@ -77,12 +77,12 @@ bool Standard2007Engine::calculateEncryptionKey(const OUString& rPassword) + std::vector initialData(saltSize + passwordByteLength); + std::copy(saltArray, saltArray + saltSize, initialData.begin()); + +- const sal_uInt8* passwordByteArray = reinterpret_cast(rPassword.getStr()); +- +- std::copy( +- passwordByteArray, +- passwordByteArray + passwordByteLength, +- initialData.begin() + saltSize); ++ auto p = initialData.begin() + saltSize; ++ for (sal_Int32 i = 0; i != rPassword.getLength(); ++i) { ++ auto c = rPassword[i]; ++ *p++ = c & 0xFF; ++ *p++ = c >> 8; ++ } + + // use "hash" vector for result of sha1 hashing + // calculate SHA1 hash of initialData +@@ -221,11 +221,23 @@ void Standard2007Engine::writeEncryptionInfo(BinaryXOutputStream& rStream) + sal_uInt32 headerSize = encryptionHeaderSize + cspNameSize; + rStream.WriteUInt32(headerSize); + +- rStream.writeMemory(&mInfo.header, encryptionHeaderSize); ++ rStream.WriteUInt32(mInfo.header.flags); ++ rStream.WriteUInt32(mInfo.header.sizeExtra); ++ rStream.WriteUInt32(mInfo.header.algId); ++ rStream.WriteUInt32(mInfo.header.algIdHash); ++ rStream.WriteUInt32(mInfo.header.keyBits); ++ rStream.WriteUInt32(mInfo.header.providedType); ++ rStream.WriteUInt32(mInfo.header.reserved1); ++ rStream.WriteUInt32(mInfo.header.reserved2); + rStream.writeUnicodeArray(lclCspName); + rStream.WriteUInt16(0); + +- rStream.writeMemory(&mInfo.verifier, sizeof(msfilter::EncryptionVerifierAES)); ++ rStream.WriteUInt32(mInfo.verifier.saltSize); ++ rStream.writeMemory(&mInfo.verifier.salt, sizeof mInfo.verifier.salt); ++ rStream.writeMemory(&mInfo.verifier.encryptedVerifier, sizeof mInfo.verifier.encryptedVerifier); ++ rStream.WriteUInt32(mInfo.verifier.encryptedVerifierHashSize); ++ rStream.writeMemory( ++ &mInfo.verifier.encryptedVerifierHash, sizeof mInfo.verifier.encryptedVerifierHash); + } + + void Standard2007Engine::encrypt(const css::uno::Reference & rxInputStream, +-- +cgit v1.2.1 + +From 13251ea5da9a1761740cc65ce6c50c897f12c698 Mon Sep 17 00:00:00 2001 +From: Stephan Bergmann +Date: Thu, 24 Sep 2020 09:44:46 +0200 +Subject: More fixes of PDFium-provided strings, in test code + +...similar to 08705b75ff8b5a10dc039a9aa1042e04a281729a "These PDFium-provided +strings are always in UTF-16LE". + +Change-Id: Ic2945470db12a50e90b0feb3bbc6b63449fc39ab +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/103289 +Tested-by: Jenkins +Reviewed-by: Stephan Bergmann +--- + vcl/qa/cppunit/pdfexport/pdfexport.cxx | 31 +++++++++++++++++++++++++++++-- + 1 file changed, 29 insertions(+), 2 deletions(-) + +diff --git a/vcl/qa/cppunit/pdfexport/pdfexport.cxx b/vcl/qa/cppunit/pdfexport/pdfexport.cxx +index 96dce4aff82a..94d583a0c52f 100644 +--- a/vcl/qa/cppunit/pdfexport/pdfexport.cxx ++++ b/vcl/qa/cppunit/pdfexport/pdfexport.cxx +@@ -29,6 +29,7 @@ + #include + #include + #include ++#include + #include + #include + #include +@@ -1700,6 +1701,12 @@ void PdfExportTest::testTdf115262() + unsigned long nTextSize = FPDFTextObj_GetText(pPageObject, pTextPage, nullptr, 0); + std::vector aText(nTextSize); + FPDFTextObj_GetText(pPageObject, pTextPage, aText.data(), nTextSize); ++#if defined OSL_BIGENDIAN ++ // The data returned by FPDFTextObj_GetText is documented to always be UTF-16LE: ++ for (auto & j: aText) { ++ j = OSL_SWAPWORD(j); ++ } ++#endif + OUString sText(aText.data(), nTextSize / 2 - 1); + if (sText == "400") + nRowTop = fTop; +@@ -1735,6 +1742,12 @@ void PdfExportTest::testTdf121962() + unsigned long nTextSize = FPDFTextObj_GetText(pPageObject, pTextPage, nullptr, 0); + std::vector aText(nTextSize); + FPDFTextObj_GetText(pPageObject, pTextPage, aText.data(), nTextSize); ++#if defined OSL_BIGENDIAN ++ // The data returned by FPDFTextObj_GetText is documented to always be UTF-16LE: ++ for (auto & j: aText) { ++ j = OSL_SWAPWORD(j); ++ } ++#endif + OUString sText(aText.data(), nTextSize / 2 - 1); + CPPUNIT_ASSERT(sText != "** Expression is faulty **"); + } +@@ -1767,6 +1780,12 @@ void PdfExportTest::testTdf115967() + unsigned long nTextSize = FPDFTextObj_GetText(pPageObject, pTextPage, nullptr, 2); + std::vector aText(nTextSize); + FPDFTextObj_GetText(pPageObject, pTextPage, aText.data(), nTextSize); ++#if defined OSL_BIGENDIAN ++ // The data returned by FPDFTextObj_GetText is documented to always be UTF-16LE: ++ for (auto & j: aText) { ++ j = OSL_SWAPWORD(j); ++ } ++#endif + OUString sChar(aText.data(), nTextSize / 2 - 1); + sText += sChar.trim(); + } diff --git a/debian/patches/build-against-shared-lpsolve.diff b/debian/patches/build-against-shared-lpsolve.diff new file mode 100644 index 00000000000..ddd80de1aaa --- /dev/null +++ b/debian/patches/build-against-shared-lpsolve.diff @@ -0,0 +1,27 @@ +diff --git a/configure.ac b/configure.ac +index cdae8b5..49f3ba2 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -9468,8 +9468,9 @@ if test "$with_system_lpsolve" = "yes"; then + # some systems need this. Like Ubuntu... + AC_CHECK_LIB(m, floor) + AC_CHECK_LIB(dl, dlopen) ++ AC_CHECK_LIB(colamd, colamd) + AC_CHECK_LIB([lpsolve55], [make_lp], [:], +- [ AC_MSG_ERROR(lpsolve library not found or too old.)], []) ++ [ AC_MSG_ERROR(lpsolve library not found or too old.)], [-L/usr/lib/lp_solve]) + LIBS=$save_LIBS + else + AC_MSG_RESULT([internal]) +diff --git a/RepositoryExternal.mk b/RepositoryExternal.mk +index a4daea7..0dea12d 100644 +--- a/RepositoryExternal.mk ++++ b/RepositoryExternal.mk +@@ -1961,6 +1961,7 @@ ifeq ($(WITH_LPSOLVER),lpsolve) + + define gb_LinkTarget__use_lpsolve + $(call gb_LinkTarget_add_libs,$(1),-llpsolve55) ++$(call gb_LinkTarget_add_ldflags,$(1),-L/usr/lib/lp_solve -Wl$(COMMA)-rpath=/usr/lib/lp_solve) + $(call gb_LinkTarget_add_defs,$(1),\ + -DSYSTEM_LPSOLVE \ + ) diff --git a/debian/patches/cppunit-optional.diff b/debian/patches/cppunit-optional.diff new file mode 100644 index 00000000000..8651a06559d --- /dev/null +++ b/debian/patches/cppunit-optional.diff @@ -0,0 +1,185 @@ +diff --git a/configure.ac b/configure.ac +index c12fe95a561c..66d327ae8fb8 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -2047,6 +2047,11 @@ AC_ARG_WITH(bffvalidator, + See https://www.microsoft.com/en-us/download/details.aspx?id=26794]), + ,with_bffvalidator=no) + ++libo_FUZZ_ARG_WITH(cppunit, ++ AS_HELP_STRING([--without-cppunit>], ++ [disable building(!) of cppunit stuff also built during make build]), ++,with_cppunit=yes) ++ + libo_FUZZ_ARG_WITH(junit, + AS_HELP_STRING([--with-junit=], + [Specifies the JUnit 4 jar file to use for JUnit-based tests. +@@ -7932,8 +7959,12 @@ dnl =================================================================== + dnl Check for system cppunit + dnl =================================================================== + if test "$_os" != "Android" ; then ++ if test "$with_cppunit" != "no"; then + libo_CHECK_SYSTEM_MODULE([cppunit],[CPPUNIT],[cppunit >= 1.14.0]) ++ ENABLE_CPPUNIT=TRUE ++ fi + fi ++AC_SUBST(ENABLE_CPPUNIT) + + dnl =================================================================== + dnl Check whether freetype is available +diff --git a/config_host.mk.in b/config_host.mk.in +index 880895e3c00f..a3dab3e00979 100644 +--- a/config_host.mk.in ++++ b/config_host.mk.in +@@ -114,6 +115,7 @@ export SYSTEM_COINMP=@SYSTEM_COINMP@ + export SYSTEM_COINMP=@SYSTEM_COINMP@ + export COINMP_CFLAGS=@COINMP_CFLAGS@ + export COINMP_LIBS=@COINMP_LIBS@ ++export ENABLE_CPPUNIT=@ENABLE_CPPUNIT@ + export ENABLE_CUPS=@ENABLE_CUPS@ + export ENABLE_CURL=@ENABLE_CURL@ + export ENABLE_FUZZERS=@ENABLE_FUZZERS@ +diff --git a/sal/Module_sal.mk b/sal/Module_sal.mk +index fe9523a7a6e2..719edf8c6252 100644 +--- a/sal/Module_sal.mk ++++ b/sal/Module_sal.mk +@@ -10,7 +10,6 @@ + $(eval $(call gb_Module_Module,sal)) + + $(eval $(call gb_Module_add_targets,sal,\ +- $(if $(CROSS_COMPILING),,$(if $(filter TRUE,$(DISABLE_DYNLOADING)),,Executable_cppunittester)) \ + $(if $(filter $(OS),ANDROID), \ + Library_lo-bootstrap) \ + Library_sal \ +@@ -33,4 +32,10 @@ $(eval $(call gb_Module_add_check_targets,sal,\ + + endif + ++ifeq ($(ENABLE_CPPUNIT),TRUE) ++$(eval $(call gb_Module_add_check_targets,sal,\ ++ $(if $(CROSS_COMPILING),,$(if $(filter TRUE,$(DISABLE_DYNLOADING)),,Executable_cppunittester)) \ ++)) ++endif ++ + # vim: set noet sw=4 ts=4: +diff --git a/sdext/Executable_pdf2xml.mk b/sdext/Executable_pdf2xml.mk +index 373f40da36fd..c0401bef9c7a 100644 +--- a/sdext/Executable_pdf2xml.mk ++++ b/sdext/Executable_pdf2xml.mk +@@ -13,10 +13,10 @@ $(eval $(call gb_Executable_use_sdk_api,pdf2xml)) + + $(eval $(call gb_Executable_use_externals,pdf2xml,\ + boost_headers \ +- cppunit \ + zlib \ + )) + ++ + $(eval $(call gb_Executable_set_include,pdf2xml,\ + -I$(SRCDIR)/sdext/source/pdfimport/inc \ + $$(INCLUDE) \ +@@ -27,13 +27,21 @@ $(eval $(call gb_Executable_use_libraries,pdf2xml,\ + vcl \ + comphelper \ + cppu \ +- unotest \ + cppuhelper \ + sal \ + tl \ + xo \ + )) + ++ifeq ($(ENABLE_CPPUNIT),TRUE) ++$(eval $(call gb_Executable_use_externals,pdf2xml,\ ++ cppunit \ ++)) ++$(eval $(call gb_Executable_use_libraries,pdf2xml,\ ++ unotest \ ++)) ++endif ++ + $(eval $(call gb_Executable_use_library_objects,pdf2xml,pdfimport)) + + $(eval $(call gb_Executable_add_exception_objects,pdf2xml,\ +diff --git a/smoketest/Module_smoketest.mk b/smoketest/Module_smoketest.mk +index 7e8b6d5f11f6..a084e254bf70 100644 +--- a/smoketest/Module_smoketest.mk ++++ b/smoketest/Module_smoketest.mk +@@ -12,6 +12,8 @@ $(eval $(call gb_Module_Module,smoketest)) + + ifeq ($(CROSS_COMPILING),) + ++ifeq ($(ENABLE_CPPUNIT),TRUE) ++ + $(eval $(call gb_Module_add_targets,smoketest,\ + Library_smoketest \ + Zip_smoketestdoc \ +@@ -42,6 +44,8 @@ endif + + endif + ++endif ++ + ifneq ($(ENABLE_JAVA),) + $(eval $(call gb_Module_add_targets,smoketest,\ + Jar_smoketest \ +diff --git a/test/Module_test.mk b/test/Module_test.mk +index e1051f16b5a0..d1787cb5789b 100644 +--- a/test/Module_test.mk ++++ b/test/Module_test.mk +@@ -11,6 +11,7 @@ $(eval $(call gb_Module_Module,test)) + + ifneq (,$(filter DESKTOP,$(BUILD_TYPE))) + ++ifeq ($(ENABLE_CPPUNIT),TRUE) + $(eval $(call gb_Module_add_targets,test,\ + Library_test \ + Library_test_setupvcl \ +@@ -18,6 +19,7 @@ $(eval $(call gb_Module_add_targets,test,\ + $(eval $(call gb_Module_add_check_targets,test,\ + CppunitTest_test_xpath \ + )) ++endif + + endif + +diff --git a/unotest/Module_unotest.mk b/unotest/Module_unotest.mk +index a47ca5d4b694..e243e06309f5 100644 +--- a/unotest/Module_unotest.mk ++++ b/unotest/Module_unotest.mk +@@ -11,12 +11,15 @@ + $(eval $(call gb_Module_Module,unotest)) + + ifneq (,$(filter DESKTOP,$(BUILD_TYPE))) ++ ++ifeq ($(ENABLE_CPPUNIT),TRUE) + $(eval $(call gb_Module_add_targets,unotest,\ + Library_unobootstrapprotector \ + Library_unoexceptionprotector \ + Library_unotest \ + )) + endif ++endif + + ifneq ($(ENABLE_JAVA),) + $(eval $(call gb_Module_add_targets,unotest,\ +diff --git a/testtools/Module_testtools.mk b/testtools/Module_testtools.mk +index a1b84e175b30..08e4aad24c11 100644 +--- a/testtools/Module_testtools.mk ++++ b/testtools/Module_testtools.mk +@@ -11,6 +11,8 @@ $(eval $(call gb_Module_Module,testtools)) + + ifeq ($(CROSS_COMPILING),) + ++ifeq ($(ENABLE_CPPUNIT),TRUE) ++ + $(eval $(call gb_Module_add_targets,testtools,\ + CustomTarget_bridgetest \ + InternalUnoApi_bridgetest \ +@@ -41,4 +43,6 @@ $(eval $(call gb_Module_add_check_targets,testtools,\ + + endif + ++endif ++ + # vim:set noet sw=4 ts=4: diff --git a/debian/patches/debian-debug.diff b/debian/patches/debian-debug.diff new file mode 100644 index 00000000000..77070f6f793 --- /dev/null +++ b/debian/patches/debian-debug.diff @@ -0,0 +1,47 @@ +diff --git a/solenv/gbuild/platform/com_GCC_defs.mk b/solenv/gbuild/platform/com_GCC_defs.mk +index 9de88a2..9161a4e 100644 +--- a/solenv/gbuild/platform/com_GCC_defs.mk ++++ b/solenv/gbuild/platform/com_GCC_defs.mk +@@ -170,6 +170,8 @@ gb_COMPILERNOOPTFLAGS := -O0 -fstrict-aliasing -fstrict-overflow + ifeq ($(OS),ANDROID) + gb_DEBUGINFO_FLAGS=-glldb + # Clang does not know -ggdb2 or some other options ++else ifeq ($(enable_symbols),SMALL) ++gb_DEBUGINFO_FLAGS=-g1 + else ifeq ($(HAVE_GCC_GGDB2),TRUE) + gb_DEBUGINFO_FLAGS=-ggdb2 + else +diff --git a/configure.ac b/configure.ac +index 2d62af9981a9..b1ad5a970700 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -4056,6 +4056,9 @@ fi + if test "$enable_symbols" = yes; then + ENABLE_SYMBOLS_FOR=all + AC_MSG_RESULT([yes]) ++elif test "$enable_symbols" = "SMALL" -o "$enable_symbols" = "small"; then ++ ENABLE_SYMBOLS_FOR=all ++ AC_MSG_RESULT([yes, small ones]) + elif test "$enable_symbols" = no; then + ENABLE_SYMBOLS_FOR= + AC_MSG_RESULT([no]) +@@ -4064,6 +4067,7 @@ else + ENABLE_SYMBOLS_FOR="$enable_symbols" + AC_MSG_RESULT([for "$enable_symbols"]) + fi ++AC_SUBST(enable_symbols) + AC_SUBST(ENABLE_SYMBOLS_FOR) + + if test -n "$with_android_ndk" -a \( -n "$ENABLE_SYMBOLS" -o -n "$ENABLE_DEBUG" -o -n "$ENABLE_DBGUTIL" \) -a "$ENABLE_DEBUGINFO_FOR" = "all"; then +diff --git a/config_host.mk.in b/config_host.mk.in +index 7df26713a1dd..174c4e50466c 100644 +--- a/config_host.mk.in ++++ b/config_host.mk.in +@@ -208,6 +209,7 @@ export ENABLE_SDREMOTE_BLUETOOTH=@ENABLE_SDREMOTE_BLUETOOTH@ + export ENABLE_SILENT_MSI=@ENABLE_SILENT_MSI@ + export ENABLE_SKIA=@ENABLE_SKIA@ + export ENABLE_SKIA_DEBUG=@ENABLE_SKIA_DEBUG@ ++export enable_symbols=@enable_symbols@ + export ENABLE_SYMBOLS_FOR=@ENABLE_SYMBOLS_FOR@ + export ENABLE_VALGRIND=@ENABLE_VALGRIND@ + export ENABLE_VLC=@ENABLE_VLC@ diff --git a/debian/patches/debian-hardened-buildflags-CPPFLAGS.diff b/debian/patches/debian-hardened-buildflags-CPPFLAGS.diff new file mode 100644 index 00000000000..36394f3af05 --- /dev/null +++ b/debian/patches/debian-hardened-buildflags-CPPFLAGS.diff @@ -0,0 +1,37 @@ +--- a/configure.ac-old 2012-03-02 21:48:47.000000000 +0000 ++++ b/configure.ac 2012-03-02 21:51:29.000000000 +0000 +@@ -10225,6 +10225,11 @@ else + fi + AC_SUBST(ENABLE_VLC) + ++if test -x /usr/bin/dpkg-buildflags; then ++ HARDEN_CPPFLAGS=`dpkg-buildflags --get CPPFLAGS 2>/dev/null` ++fi ++AC_SUBST(HARDEN_CPPFLAGS) ++ + ENABLE_OPENGL_TRANSITIONS= + ENABLE_OPENGL_CANVAS= + if test $_os = iOS -o $_os = Android -o "$ENABLE_FUZZERS" = "TRUE"; then +--- a/config_host.mk.in-old 2012-04-06 14:17:55.164239390 +0200 ++++ b/config_host.mk.in 2012-04-06 14:18:55.440239065 +0200 +@@ -76,6 +76,7 @@ + export CPPUNIT_LIBS=$(gb_SPACE)@CPPUNIT_LIBS@ + export CPUNAME=@CPUNAME@ + export CDEFAULTOPT=@CDEFAULTOPT@ ++export HARDEN_CPPFLAGS=@HARDEN_CPPFLAGS@ + export CROSS_COMPILING=@CROSS_COMPILING@ + export CURL=@CURL@ + export CURL_CFLAGS=$(gb_SPACE)@CURL_CFLAGS@ +diff --git a/solenv/gbuild/gbuild.mk b/solenv/gbuild/gbuild.mk +index c71cb40..f826d65 100644 +--- a/solenv/gbuild/gbuild.mk ++++ b/solenv/gbuild/gbuild.mk +@@ -259,6 +259,8 @@ gb_GLOBALDEFS += \ + ENABLE_LTO \ + ) + ++gb_GLOBALDEFS += $(HARDEN_CPPFLAGS) ++ + gb_GLOBALDEFS := $(sort $(gb_GLOBALDEFS)) + + # Common environment variables passed into all gb_*Test classes: diff --git a/debian/patches/debian-hardened-buildflags-no-LO-fstack-protector-strong.diff b/debian/patches/debian-hardened-buildflags-no-LO-fstack-protector-strong.diff new file mode 100644 index 00000000000..e9c49efd608 --- /dev/null +++ b/debian/patches/debian-hardened-buildflags-no-LO-fstack-protector-strong.diff @@ -0,0 +1,32 @@ +don't hardcode -fstack-protector-strong in configure.ac/gbuild. We get the +hardening flags from dpkg-buildflags anyway. + +diff --git a/solenv/gbuild/platform/com_GCC_defs.mk b/solenv/gbuild/platform/com_GCC_defs.mk +index 712a61df544f..0d50f538ba7b 100644 +--- a/solenv/gbuild/platform/com_GCC_defs.mk ++++ b/solenv/gbuild/platform/com_GCC_defs.mk +@@ -67,7 +67,6 @@ gb_CFLAGS_COMMON := \ + -fmessage-length=0 \ + -fno-common \ + -pipe \ +- -fstack-protector-strong \ + $(if $(gb_COLOR),-fdiagnostics-color=always) \ + + gb_CXXFLAGS_COMMON := \ +@@ -82,7 +81,6 @@ gb_CXXFLAGS_COMMON := \ + -fmessage-length=0 \ + -fno-common \ + -pipe \ +- -fstack-protector-strong \ + $(if $(gb_COLOR),-fdiagnostics-color=always) \ + + ifeq ($(HAVE_WDEPRECATED_COPY_DTOR),TRUE) +@@ -136,8 +134,6 @@ endif + gb_VISIBILITY_FLAGS_CXX := -fvisibility-inlines-hidden + gb_CXXFLAGS_COMMON += $(gb_VISIBILITY_FLAGS_CXX) + +-gb_LinkTarget_LDFLAGS += -fstack-protector-strong +- + ifneq ($(gb_ENABLE_PCH),) + ifeq ($(COM_IS_CLANG),TRUE) + # Clang by default includes in the PCH timestamps of the files it was diff --git a/debian/patches/debian-opt.diff b/debian/patches/debian-opt.diff new file mode 100644 index 00000000000..96784e674cf --- /dev/null +++ b/debian/patches/debian-opt.diff @@ -0,0 +1,26 @@ +diff --git a/configure.ac b/configure.ac +index f06ef8e..91ce612 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -12776,6 +12776,9 @@ fi + fi + fi + ++CDEFAULTOPT=`echo $CFLAGS 2>/dev/null | grep -E -o "\-O[[0-3]]"` ++AC_SUBST(CDEFAULTOPT) ++ + dnl =================================================================== + dnl Setting up the environment. + dnl =================================================================== +diff --git a/config_host.mk.in b/config_host.mk.in +index 1ec3268..abb45b1 100644 +--- a/config_host.mk.in ++++ b/config_host.mk.in +@@ -69,6 +69,7 @@ export CPP_LIBRARY=@CPP_LIBRARY@ + export CPPUNIT_CFLAGS=$(gb_SPACE)@CPPUNIT_CFLAGS@ + export CPPUNIT_LIBS=$(gb_SPACE)@CPPUNIT_LIBS@ + export CPUNAME=@CPUNAME@ ++export CDEFAULTOPT=@CDEFAULTOPT@ + export CROSS_COMPILING=@CROSS_COMPILING@ + export CURL=@CURL@ + export CURL_CFLAGS=$(gb_SPACE)@CURL_CFLAGS@ diff --git a/debian/patches/default-to-CertificateValidity::INVALID.diff b/debian/patches/default-to-CertificateValidity::INVALID.diff new file mode 100644 index 00000000000..a17847efc8b --- /dev/null +++ b/debian/patches/default-to-CertificateValidity::INVALID.diff @@ -0,0 +1,52 @@ +From edeb164c1d8ab64116afee4e2140403a362a1358 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Caol=C3=A1n=20McNamara?= +Date: Mon, 8 Feb 2021 17:05:28 +0000 +Subject: default to CertificateValidity::INVALID + +so if CertGetCertificateChain fails we don't want validity to be +css::security::CertificateValidity::VALID which is what the old default +of 0 equates to + +notably + +commit 1e0bc66d16aee28ce8bd9582ea32178c63841902 +Date: Thu Nov 5 16:55:26 2009 +0100 + + jl137: #103420# better logging + +turned the nss equivalent of SecurityEnvironment_NssImpl::verifyCertificate +from 0 to CertificateValidity::INVALID like this change does + +Change-Id: I5350dbc22d1b9b378da2976d3b0abd728f1f4c27 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/110561 +Tested-by: Jenkins +Reviewed-by: Miklos Vajna +--- + xmlsecurity/source/xmlsec/mscrypt/securityenvironment_mscryptimpl.cxx | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/xmlsecurity/source/xmlsec/mscrypt/securityenvironment_mscryptimpl.cxx b/xmlsecurity/source/xmlsec/mscrypt/securityenvironment_mscryptimpl.cxx +index 01b27fb9756f..0ac0d6216c96 100644 +--- a/xmlsecurity/source/xmlsec/mscrypt/securityenvironment_mscryptimpl.cxx ++++ b/xmlsecurity/source/xmlsec/mscrypt/securityenvironment_mscryptimpl.cxx +@@ -753,7 +753,7 @@ sal_Int32 SecurityEnvironment_MSCryptImpl::verifyCertificate( + const uno::Reference< css::security::XCertificate >& aCert, + const uno::Sequence< uno::Reference< css::security::XCertificate > >& seqCerts) + { +- sal_Int32 validity = 0; ++ sal_Int32 validity = css::security::CertificateValidity::INVALID; + PCCERT_CHAIN_CONTEXT pChainContext = nullptr; + PCCERT_CONTEXT pCertContext = nullptr; + +@@ -897,7 +897,7 @@ sal_Int32 SecurityEnvironment_MSCryptImpl::verifyCertificate( + } + else + { +- SAL_INFO("xmlsecurity.xmlsec", "CertGetCertificateChaine failed."); ++ SAL_INFO("xmlsecurity.xmlsec", "CertGetCertificateChain failed."); + } + } + +-- +cgit v1.2.1 + diff --git a/debian/patches/disable-flaky-tests.diff b/debian/patches/disable-flaky-tests.diff new file mode 100644 index 00000000000..5e0ab1213fb --- /dev/null +++ b/debian/patches/disable-flaky-tests.diff @@ -0,0 +1,141 @@ +14:13 < mst__> _rene_, the toolkit unoapi tests are known to be flaky (in some + system dependent way) e.g. on the Win@6 tinderbox it always + crashes +14:14 < mst__> _rene_, sc.ScAccessible* tests also fail on some systems some of + the time + +diff --git a/toolkit/Module_toolkit.mk b/toolkit/Module_toolkit.mk +index 25db0b6..14e507c 100644 +--- a/toolkit/Module_toolkit.mk ++++ b/toolkit/Module_toolkit.mk +@@ -26,11 +26,11 @@ $(eval $(call gb_Module_add_targets,toolkit,\ + ifneq ($(OOO_JUNIT_JAR),) + $(eval $(call gb_Module_add_subsequentcheck_targets,toolkit,\ + JunitTest_toolkit_complex \ +- JunitTest_toolkit_unoapi_1 \ +- JunitTest_toolkit_unoapi_2 \ +- JunitTest_toolkit_unoapi_3 \ +- JunitTest_toolkit_unoapi_4 \ + )) + endif ++# JunitTest_toolkit_unoapi_1 \ ++# JunitTest_toolkit_unoapi_2 \ ++# JunitTest_toolkit_unoapi_3 \ ++# JunitTest_toolkit_unoapi_4 \ + + # vim: set noet sw=4 ts=4: +diff --git a/sc/qa/unoapi/sc_1.sce b/sc/qa/unoapi/sc_1.sce +index fa1684c..cc8e1a5 100644 +--- a/sc/qa/unoapi/sc_1.sce ++++ b/sc/qa/unoapi/sc_1.sce +@@ -24,10 +24,3 @@ + # i84554 -o sc.AccessibleEditableTextPara_PreviewNote + # i88241 -o sc.AccessibleEditableTextPara_HeaderFooter + -o sc.AccessibleEditableTextPara_PreviewCell +--o sc.ScAccessibleCell +-# i91044 -o sc.ScAccessibleCsvCell +-# i91044 -o sc.ScAccessibleCsvGrid +-# i84641 -o sc.ScAccessibleCsvRuler +-# i88330 -o sc.ScAccessibleDocument +-# i91045 -o sc.ScAccessibleDocumentPagePreview +--o sc.ScAccessiblePageHeader +diff --git a/sc/qa/unoapi/sc_2.sce b/sc/qa/unoapi/sc_2.sce +index dbfc3e1..d235c5d 100644 +--- a/sc/qa/unoapi/sc_2.sce ++++ b/sc/qa/unoapi/sc_2.sce +@@ -15,11 +15,6 @@ + # except in compliance with the License. You may obtain a copy of + # the License at http://www.apache.org/licenses/LICENSE-2.0 . + # +-# fdo#FOO -o sc.ScAccessiblePageHeaderArea +--o sc.ScAccessiblePreviewCell +--o sc.ScAccessiblePreviewHeaderCell +--o sc.ScAccessiblePreviewTable +-# fdo#45337 -o sc.ScAccessibleSpreadsheet + # FIXME_REMOVE_WHEN_RE_BASE_COMPLETE + # -o sc.ScAnnotationShapeObj + -o sc.ScAutoFormatFieldObj + +diff --git a/svx/qa/unoapi/svx.sce b/svx/qa/unoapi/svx.sce +index 1c3925f..a16f001 100644 +--- a/svx/qa/unoapi/svx.sce ++++ b/svx/qa/unoapi/svx.sce +@@ -25,7 +25,7 @@ + #i111216 -o svx.AccessiblePresentationGraphicShape + #i111216 -o svx.AccessiblePresentationOLEShape + #i85539 -o svx.AccessiblePresentationShape +--o svx.AccessibleShape ++#-o svx.AccessibleShape + #i90294 -o svx.GraphicExporter + -o svx.SvxDrawPage + #i85501 -o svx.SvxGraphCtrlAccessibleContext + +19:26 <@x1sc0> _rene_, since that test is using exact dimensions, it seems it + fails on your side probably because the paragraph style is + different. 1. I will change the test to avoid the exact + dimensions. 2. meantime you can skip that test: +https://cgit.freedesktop.org/libreoffice/core/commit/?id=e05f16e6bf36efbaab16dd2ed1427a750ce7cafd +19:26 < IZBot> core - disable UI test that does exact comparison +19:27 < _rene_> mmh, ok, saw that but that was for a different test, so.. :) +19:27 -!- jacobo [~jaragunde@fanzine.igalia.com] has quit [Quit: Leaving.] +19:27 < _rene_> thanks, will do + +diff --git a/uitest/writer_tests/tdf79236.py b/uitest/writer_tests/tdf79236.py +index 8585e48d8c64..704f42c009a1 100644 +--- a/uitest/writer_tests8/tdf79236.py ++++ b/uitest/writer_tests8/tdf79236.py +@@ -8,8 +8,11 @@ from uitest.framework import UITestCase + import time + from uitest.uihelper.common import get_state_as_dict, type_text + ++import unittest ++ + class tdf79236(UITestCase): + ++ @unittest.skip("Currently broken") + def test_paragraph(self): + + self.ui_test.create_doc_in_start_center("writer") + +14:39 < ztamas> _rene_: chart2dump is used to fail because of font size differences, just use a bigger delta or disable it if it + fails for you. +14:40 <@sberg_> noelgrandin, no +14:40 < noelgrandin> sberg_, sure seems that way both in the debugger and in the resulting SAL_WARN output +14:42 < ztamas> _rene_: there were some work on making font rendering consistent on different platforms, but it's not finished + yet, I guess +diff --git a/chart2/Module_chart2.mk b/chart2/Module_chart2.mk +index 37acfdc3730f..7d26342f179f 100644 +--- a/chart2/Module_chart2.mk ++++ b/chart2/Module_chart2.mk +@@ -28,10 +28,10 @@ $(eval $(call gb_Module_add_slowcheck_targets,chart2,\ + CppunitTest_chart2_export \ + CppunitTest_chart2_import \ + CppunitTest_chart2_trendcalculators \ +- CppunitTest_chart2_dump \ + CppunitTest_chart2_pivot_chart_test \ + CppunitTest_chart2_geometry \ + )) ++# CppunitTest_chart2_dump \ + + ifeq ($(ENABLE_CHART_TESTS),TRUE) + ifeq ($(WITH_FONTS), TRUE) +diff --git a/sw/qa/extras/ooxmlimport/ooxmlimport2.cxx b/sw/qa/extras/ooxmlimport/ooxmlimport2.cxx +index d75a8c0dc4fe..e768da479823 100644 +--- a/sw/qa/extras/ooxmlimport/ooxmlimport2.cxx ++++ b/sw/qa/extras/ooxmlimport/ooxmlimport2.cxx +@@ -312,13 +312,13 @@ DECLARE_OOXMLIMPORT_TEST(testTextCopy, "text-copy.docx") + CPPUNIT_ASSERT(xHeaderShapes->hasMoreElements()); + } + +-DECLARE_OOXMLIMPORT_TEST(testTdf112443, "tdf112443.docx") ++/*DECLARE_OOXMLIMPORT_TEST(testTdf112443, "tdf112443.docx") + { + // the position of the flying text frame should be off page + // 30624 below its anchor + OUString aTop = parseDump("//fly[1]/infos/bounds", "top"); + CPPUNIT_ASSERT_EQUAL(OUString("30624"), aTop); +-} ++}*/ + + // DOCX: Textbox wrap differs in MSO and LO + // Both should layout text regardless of existing text box diff --git a/debian/patches/disable-java-in-odk-build-examples-on-zero-vm.diff b/debian/patches/disable-java-in-odk-build-examples-on-zero-vm.diff new file mode 100644 index 00000000000..1935360924b --- /dev/null +++ b/debian/patches/disable-java-in-odk-build-examples-on-zero-vm.diff @@ -0,0 +1,58 @@ +diff --git a/config_host.mk.in b/config_host.mk.in +index 8cbbc5fee1d5..40e37643a0ea 100644 +--- a/config_host.mk.in ++++ b/config_host.mk.in +@@ -282,6 +282,7 @@ export JAVAFLAGS=@JAVAFLAGS@ + export JAVAIFLAGS=@JAVAIFLAGS@ + export JAVA_CLASSPATH_NOT_SET=@JAVA_CLASSPATH_NOT_SET@ + export JAVAINTERPRETER=@JAVAINTERPRETER@ ++export JAVA_HAS_ZERO_VM=@JAVA_HAS_ZERO_VM@ + export JAVA_HOME=@JAVA_HOME@ + export JAVA_SOURCE_VER=@JAVA_SOURCE_VER@ + export JAVA_TARGET_VER=@JAVA_TARGET_VER@ +diff --git a/configure.ac b/configure.ac +index e6bfb13ebab8..3b7f0a2e1121 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -6675,6 +6675,14 @@ you must use the "--with-jdk-home" configure option explicitly]) + JAVAIFLAGS=-Xmx64M + # set to limit VM usage for javac + JAVAFLAGS=-J-Xmx128M ++ ++ AC_MSG_CHECKING([whether $JAVAINTERPRETER is using the Zero VM]) ++ if $JAVAINTERPRETER -version 2>&1 | grep -q Zero; then ++ JAVA_HAS_ZERO_VM=y ++ AC_MSG_RESULT([yes]) ++ else ++ AC_MSG_RESULT([no]) ++ fi + fi + else + AC_MSG_ERROR([Java not found. You need at least JDK 9]) +@@ -6684,6 +6689,7 @@ else + JAVA_HOME= + export JAVA_HOME + fi ++AC_SUBST(JAVA_HAS_ZERO_VM) + + dnl =================================================================== + dnl Checks for javac +diff --git a/odk/Module_odk.mk b/odk/Module_odk.mk +index 410f8cf8ef1e..bd05d4bba200 100644 +--- a/odk/Module_odk.mk ++++ b/odk/Module_odk.mk +@@ -60,10 +62,14 @@ $(eval $(call gb_Module_add_check_targets,odk,\ + ifneq ($(filter $(OS),LINUX MACOSX),) + $(eval $(call gb_Module_add_subsequentcheck_targets,odk, \ + CustomTarget_build-examples \ ++)) ++ifneq ($(JAVA_HAS_ZERO_VM),y) ++$(eval $(call gb_Module_add_subsequentcheck_targets,odk, \ + $(if $(ENABLE_JAVA),\ + CustomTarget_build-examples_java \ + ) \ + )) + endif ++endif + + # vim: set noet sw=4 ts=4: diff --git a/debian/patches/disable-shortcuts_tab_navigation-uitest.diff b/debian/patches/disable-shortcuts_tab_navigation-uitest.diff new file mode 100644 index 00000000000..49a2b7487ef --- /dev/null +++ b/debian/patches/disable-shortcuts_tab_navigation-uitest.diff @@ -0,0 +1,49 @@ +diff --git a/cui/qa/uitest/dialogs/shortcuts.py b/cui/qa/uitest/dialogs/shortcuts.py +deleted file mode 100644 +index 8a52ee42315a..000000000000 +--- a/cui/qa/uitest/dialogs/shortcuts.py ++++ /dev/null +@@ -1,43 +0,0 @@ +-# -*- tab-width: 4; indent-tabs-mode: nil; py-indent-offset: 4 -*- +-# +-# This Source Code Form is subject to the terms of the Mozilla Public +-# License, v. 2.0. If a copy of the MPL was not distributed with this +-# file, You can obtain one at http://mozilla.org/MPL/2.0/. +-# +- +-from uitest.framework import UITestCase +-from uitest.uihelper.common import select_pos +-from libreoffice.uno.propertyvalue import mkPropertyValues +-from uitest.uihelper.common import get_state_as_dict +- +-class Test(UITestCase): +- +- def test_tab_navigation(self): +- self.ui_test.create_doc_in_start_center("writer") +- xWriterDoc = self.xUITest.getTopFocusWindow() +- xWriterEdit = xWriterDoc.getChild("writer_edit") +- +- self.ui_test.execute_dialog_through_command(".uno:EditStyle") #open style dialog +- xDialog = self.xUITest.getTopFocusWindow() +- +- xTabs = xDialog.getChild("tabcontrol") +- select_pos(xTabs, "0") +- +- for i in range(16): +- self.assertEqual(get_state_as_dict(xTabs)["CurrPagePos"], str(i)) +- +- xTabs.executeAction("TYPE", mkPropertyValues({"KEYCODE":"CTRL+PAGEDOWN"})) +- +- self.assertEqual(get_state_as_dict(xTabs)["CurrPagePos"], "0") +- +- for i in reversed(range(16)): +- xTabs.executeAction("TYPE", mkPropertyValues({"KEYCODE":"CTRL+PAGEUP"})) +- +- self.assertEqual(get_state_as_dict(xTabs)["CurrPagePos"], str(i)) +- +- xOkBtn = xDialog.getChild("ok") +- xOkBtn.executeAction("CLICK", tuple()) +- +- self.ui_test.close_doc() +- +-# vim: set shiftwidth=4 softtabstop=4 expandtab: diff --git a/debian/patches/disable-unused-test-programs.diff b/debian/patches/disable-unused-test-programs.diff new file mode 100644 index 00000000000..c1402c61565 --- /dev/null +++ b/debian/patches/disable-unused-test-programs.diff @@ -0,0 +1,70 @@ +diff --git a/vcl/Module_vcl.mk b/vcl/Module_vcl.mk +index a5e4bf5d68d2..3e9e1bf9fe27 100644 +--- a/vcl/Module_vcl.mk ++++ b/vcl/Module_vcl.mk +@@ -28,28 +28,9 @@ $(eval $(call gb_Module_add_targets,vcl,\ + StaticLibrary_vclmain \ + $(if $(ENABLE_MACOSX_SANDBOX),, \ + $(if $(DISABLE_GUI),, \ +- Executable_ui-previewer)) \ +- $(if $(filter LINUX MACOSX SOLARIS WNT %BSD,$(OS)), \ +- Executable_outdevgrind \ +- $(if $(DISABLE_GUI),, \ +- Executable_vcldemo \ +- Executable_icontest \ +- Executable_visualbackendtest \ +- Executable_mtfdemo ))) \ ++ Executable_ui-previewer))) \ + )) + +-ifeq ($(CROSS_COMPILING)$(DISABLE_DYNLOADING),) +- +-$(eval $(call gb_Module_add_targets,vcl,\ +- $(if $(filter-out ANDROID iOS WNT,$(OS)), \ +- Executable_svdemo \ +- Executable_fftester \ +- Executable_svptest \ +- Executable_svpclient) \ +-)) +- +-endif +- + $(eval $(call gb_Module_add_l10n_targets,vcl,\ + AllLangMoTarget_vcl \ + )) +diff --git a/xmlsecurity/Module_xmlsecurity.mk b/xmlsecurity/Module_xmlsecurity.mk +index d3fafeb7e4ec..87b8c067903e 100644 +--- a/xmlsecurity/Module_xmlsecurity.mk ++++ b/xmlsecurity/Module_xmlsecurity.mk +@@ -45,14 +45,6 @@ $(eval $(call gb_Module_add_screenshot_targets,xmlsecurity,\ + CppunitTest_xmlsecurity_dialogs_test \ + )) + +-ifneq (,$(filter DESKTOP,$(BUILD_TYPE))) +- +-$(eval $(call gb_Module_add_targets,xmlsecurity,\ +- Executable_pdfverify \ +-)) +- +-endif +- + endif + + # vim: set noet sw=4 ts=4: +diff --git a/libreofficekit/Module_libreofficekit.mk b/libreofficekit/Module_libreofficekit.mk +index 351f89a33e48..defe0b14a681 100644 +--- a/libreofficekit/Module_libreofficekit.mk ++++ b/libreofficekit/Module_libreofficekit.mk +@@ -23,12 +23,10 @@ $(eval $(call gb_Module_add_check_targets,libreofficekit, \ + ifneq ($(ENABLE_GTK3),) + $(eval $(call gb_Module_add_targets,libreofficekit,\ + Library_libreofficekitgtk \ +- Executable_gtktiledviewer \ + )) + endif # ($(ENABLE_GTK3),) + + $(eval $(call gb_Module_add_targets,libreofficekit,\ +- Executable_tilebench \ + Package_selectionhandles \ + UIConfig_libreofficekit \ + )) diff --git a/debian/patches/disableClassPathURLCheck.diff b/debian/patches/disableClassPathURLCheck.diff new file mode 100644 index 00000000000..65c70712602 --- /dev/null +++ b/debian/patches/disableClassPathURLCheck.diff @@ -0,0 +1,10 @@ +--- a/configure.ac-old 2018-11-12 06:51:15.504128408 +0100 ++++ b/configure.ac 2018-11-12 06:52:32.427358015 +0100 +@@ -6898,6 +6898,7 @@ + + # set to limit VM usage for JunitTests + JAVAIFLAGS=-Xmx64M ++ JAVAIFLAGS="$JAVAIFLAGS -Djdk.net.URLClassPath.disableClassPathURLCheck=true" + # set to limit VM usage for javac + JAVAFLAGS=-J-Xmx128M + diff --git a/debian/patches/do-not-hide-test-output.diff b/debian/patches/do-not-hide-test-output.diff new file mode 100644 index 00000000000..37204149cd5 --- /dev/null +++ b/debian/patches/do-not-hide-test-output.diff @@ -0,0 +1,99 @@ +diff --git a/odk/build-examples_common.mk b/odk/build-examples_common.mk +index abcb3a3e2593..35d45ad23413 100644 +--- a/odk/build-examples_common.mk ++++ b/odk/build-examples_common.mk +@@ -49,12 +49,7 @@ else + && printf 'yes\n' | LC_ALL=C make \ + CC="$(CXX)" LINK="$(CXX)" LIB="$(CXX)" \ + $(if $(MACOSX_SHELL_HACK), SHELL="$$$$ODK_BUILD_SHELL", ))) \ +- $(if $(MACOSX_SHELL_HACK),&& rm -f "$$$$ODK_BUILD_SHELL")) \ +- >$(call gb_CustomTarget_get_workdir,$(1))/log 2>&1 \ +- || (RET=$$$$? \ +- $(if $(MACOSX_SHELL_HACK), && rm -f "$$$$ODK_BUILD_SHELL" , ) \ +- && cat $(call gb_CustomTarget_get_workdir,$(1))/log \ +- && exit $$$$RET) ++ 2>&1 ) + endif + + $(call gb_CustomTarget_get_workdir,$(1))/setsdkenv: \ +diff --git a/solenv/gbuild/CppunitTest.mk b/solenv/gbuild/CppunitTest.mk +index 45af5c9b25a7..7933fc84c8b2 100644 +--- a/solenv/gbuild/CppunitTest.mk ++++ b/solenv/gbuild/CppunitTest.mk +@@ -139,12 +139,7 @@ else + ; RET=$$? && $(gb_CppunitTest_POSTGDBTRACE) && (exit $$RET)) \ + $(if $(gb_CppunitTest_localized),|| exit $$?; done) \ + ) \ +- $(if $(gb_CppunitTest__interactive),, \ +- > $@.log 2>&1 \ +- || ($(if $(value gb_CppunitTest_postprocess), \ +- RET=$$?; \ +- $(call gb_CppunitTest_postprocess,$(gb_CppunitTest_CPPTESTCOMMAND),$@.core,$$RET) >> $@.log 2>&1;) \ +- cat $@.log; $(gb_CppunitTest_UNITTESTFAILED) Cppunit $*))) ++ 2>&1) + $(call gb_Trace_EndRange,$*,CUT) + endif + +diff --git a/solenv/gbuild/JunitTest.mk b/solenv/gbuild/JunitTest.mk +index 36f29b50ef28..3ac4603ff6a0 100644 +--- a/solenv/gbuild/JunitTest.mk ++++ b/solenv/gbuild/JunitTest.mk +@@ -44,17 +44,7 @@ else + -classpath "$(T_CP)" \ + $(DEFS) \ + org.junit.runner.JUnitCore \ +- $(CLASSES) > $@.log 2>&1 || \ +- (cat $@.log \ +- && echo "to rerun just this failed test without all others, run:" \ +- && echo && echo " make JunitTest_$*" && echo \ +- && echo "cd into the module dir to run the tests faster" \ +- && echo "Or to do interactive debugging, run two shells with:" \ +- && echo \ +- && echo " make debugrun" \ +- && echo " make gb_JunitTest_DEBUGRUN=T JunitTest_$*" \ +- && echo \ +- && false))) ++ $(CLASSES) 2>&1)) + $(CLEAN_CMD) + $(call gb_Trace_EndRange,$*,JUT) + endif +diff --git a/solenv/gbuild/UITest.mk b/solenv/gbuild/UITest.mk +index 03d30448ef7b..5628e47866f8 100644 +--- a/solenv/gbuild/UITest.mk ++++ b/solenv/gbuild/UITest.mk +@@ -77,16 +77,7 @@ else + --userdir=$(call gb_Helper_make_url,$(dir $(call gb_UITest_get_target,$*))user) \ + --dir=$(strip $(MODULES)) \ + $(gb_UITest_GDBTRACE) \ +- $(if $(gb_UITest__interactive),, \ +- > $@.log 2>&1 \ +- || ($(if $(value gb_CppunitTest_postprocess), \ +- RET=$$?; \ +- $(call gb_CppunitTest_postprocess,$(gb_UITest_EXECUTABLE_GDB),$@.core,$$RET) >> $@.log 2>&1;) \ +- $(if $(filter WNT,$(OS)), \ +- printf '%s: <<<\n' $(dir $(call gb_UITest_get_target,$*))/soffice.out.log; \ +- cat $(dir $(call gb_UITest_get_target,$*))/soffice.out.log; \ +- printf ' >>>\n\n';) \ +- cat $@.log; $(gb_UITest_UNITTESTFAILED) UI $*)))) ++ 2>&1)) + $(call gb_Trace_EndRange,$*,UIT) + endif + +diff --git a/solenv/gbuild/PythonTest.mk b/solenv/gbuild/PythonTest.mk +index 9b0590e35d2a..3a1d7d9caceb 100644 +--- a/solenv/gbuild/PythonTest.mk ++++ b/solenv/gbuild/PythonTest.mk +@@ -58,12 +58,7 @@ else + $(ICECREAM_RUN) $(gb_CppunitTest_GDBTRACE) $(gb_CppunitTest_VALGRINDTOOL) $(gb_CppunitTest_RR) \ + $(gb_PythonTest_COMMAND) \ + $(if $(PYTHON_TEST_NAME),$(PYTHON_TEST_NAME),$(MODULES)) \ +- $(if $(gb_CppunitTest__interactive),, \ +- > $@.log 2>&1 \ +- || ($(if $(value gb_CppunitTest_postprocess), \ +- RET=$$?; \ +- $(call gb_CppunitTest_postprocess,$(gb_PythonTest_EXECUTABLE_GDB),$@.core,$$RET) >> $@.log 2>&1;) \ +- cat $@.log; $(gb_PythonTest_UNITTESTFAILED) Python $*)))) ++ 2>&1)) + $(call gb_Trace_EndRange,$*,PYT) + endif + diff --git a/debian/patches/dont-touch-urd.diff b/debian/patches/dont-touch-urd.diff new file mode 100644 index 00000000000..f19ef5dc217 --- /dev/null +++ b/debian/patches/dont-touch-urd.diff @@ -0,0 +1,80 @@ +18:43 <@_rene_> hmm. /me wonders why after a rm config.status autogen.lastrun + and a re-configure (and make clean for odk/scp2/scripting) LO + master tries to rebuild offapi/udkapi again? +18:44 <@_rene_> this a) takes with cpp instead of ucpp and b) causes all kind + of stuff "down" to be rebuilt.... :( +18:44 <@_rene_> which is extremely bad. +18:44 <@_rene_> if it isn't solvable easily: what to touch to prevent it from + doing that? :-) +18:45 < loirkerbot> LibreOffice (core) mstahl * desktop/source/app/main.c: + desktop: tweak xmlCleanupParser hack: disable on return + from main +18:46 < mst__> _rene_, did you switch between --with-system-ucpp and without? + that should rebuild IDL file... +18:47 <@_rene_> nah, first run is just --disable-help, --disable-scripting etc +18:47 <@_rene_> and the second run does that +18:47 <@_rene_> (first pass to "just" build what is needed for arch-specific + stuff) +18:48 <@_rene_> (and I am not using ucpp at all, but cpp ;)) +18:51 < mst__> _rene_, hmm don't know why that would happen then... you could + try running second make with -d and redirect to a file, but + beware that file will be huge... then grep for "Must + remake.*urd" or something should give you the problem area +18:59 -!- reisi007 [~chatzilla@cpe90-146-226-33.liwest.at] has quit [Quit: + ChatZilla 0.9.89 [Firefox 14.0.1/20120713134347]] +19:00 -!- crossmanith_ [~cr@p3E9EAEF6.dip.t-dialin.net] has joined + #libreoffice-dev +19:00 -!- erAck_away is now known as erAck +19:05 -!- cbosdonnat [~cbosdo@ALyon-651-1-309-127.w90-14.abo.wanadoo.fr] has + quit [Quit: Leaving] +19:07 <@_rene_> mst__: ok, starting a new build, let's see +[...] +10:36 <@_rene_> mst__: nothing interesting there instead of the loads of + touch'es... +10:36 <@_rene_> mst__: butI just removed the touch from the UnoApiTarget and + let's see now :) +10:36 -!- erAck [~erathke@f054050047.adsl.alicedsl.de] has joined + #libreoffice-dev +10:36 -!- mode/#libreoffice-dev [+o erAck] by ChanServ +10:36 <@_rene_> $(call gb_UnoApiPartTarget_get_target,%.urd) : +10:36 <@_rene_> - touch $@ +10:36 <@_rene_> + +[...] +10:38 < mst__> _rene_, there must be something interesting there: preceding the + "Must remake.*urd" line there must be some line that says target + "foo" is "newer" than the .urd and therefor it will be rebuilt +[...] +10:40 <@_rene_> mst__: I didn't see anything there, no ".*urd*muss neu" +10:41 < mst__> _rene_, there must be a message like that immediately preceding + running the touch command +10:41 -!- pepp [~pierre-er@vaf26-6-78-248-2-61.fbx.proxad.net] has joined + #libreoffice-dev +10:42 <@vmiklos> mst__: makes sense. +10:42 -!- matus [~ubuntu@adsl-dyn17.78-98-107.t-com.sk] has joined + #libreoffice-dev +10:42 <@_rene_> as said, there was done. I don't think I oversaw it +10:43 <@_rene_> but can try again later, for now I will just keep removing the + touch. according to the comment this shoudln't do harm +10:43 < mst__> _rene_, removing it will break incremental builds iirc +10:44 <@_rene_> but only if you change idl stuff inbetween +10:44 <@_rene_> which won't happen that often in package builds ;) +10:44 < mst__> _rene_, exactly +10:44 -!- Fridrich [~fridrich@71-99.199-178.cust.bluewin.ch] has joined + #libreoffice-dev +10:44 -!- mode/#libreoffice-dev [+o Fridrich] by ChanServ +10:45 <@_rene_> (when I am out of "use git", only when there's a new + (pre-)release" + +diff --git a/solenv/gbuild/UnoApiTarget.mk b/solenv/gbuild/UnoApiTarget.mk +index 98734ab..b281a84 100644 +--- a/solenv/gbuild/UnoApiTarget.mk ++++ b/solenv/gbuild/UnoApiTarget.mk +@@ -46,7 +46,7 @@ $(dir $(call gb_UnoApiPartTarget_get_target,))%/.dir : + $(if $(wildcard $(dir $@)),,mkdir -p $(dir $@)) + + $(call gb_UnoApiPartTarget_get_target,%.urd) : +- touch $@ ++ + + # TODO: + # - get idlc switch "-P" (generate .urd into package dir) diff --git a/debian/patches/fix-bluez-external.diff b/debian/patches/fix-bluez-external.diff new file mode 100644 index 00000000000..2fcd1353660 --- /dev/null +++ b/debian/patches/fix-bluez-external.diff @@ -0,0 +1,23 @@ +diff --git a/sd/Library_sd.mk b/sd/Library_sd.mk +index 9d399e8e3f5a..d70b5216fe05 100644 +--- a/sd/Library_sd.mk ++++ b/sd/Library_sd.mk +@@ -99,7 +99,6 @@ $(eval $(call gb_Library_use_libraries,sd,\ + )) + + $(eval $(call gb_Library_use_externals,sd,\ +- bluez_bluetooth_headers \ + boost_headers \ + libxml2 \ + dbus \ +@@ -575,6 +574,10 @@ $(eval $(call gb_Library_add_defs,sd,\ + -DENABLE_SDREMOTE_BLUETOOTH \ + )) + ++$(eval $(call gb_Library_use_externals,sd,\ ++ bluez_bluetooth_headers \ ++)) ++ + endif # ENABLE_SDREMOTE_BLUETOOTH=TRUE + + endif # ENABLE_SDREMOTE=TRUE diff --git a/debian/patches/fix-e_book_client_connect_direct_sync-sig.diff b/debian/patches/fix-e_book_client_connect_direct_sync-sig.diff new file mode 100644 index 00000000000..bc3ecf31e1e --- /dev/null +++ b/debian/patches/fix-e_book_client_connect_direct_sync-sig.diff @@ -0,0 +1,26 @@ +diff --git a/connectivity/source/drivers/evoab2/EApi.h b/connectivity/source/drivers/evoab2/EApi.h +index 8c05f95fa2ce..928786d79f00 100644 +--- a/connectivity/source/drivers/evoab2/EApi.h ++++ b/connectivity/source/drivers/evoab2/EApi.h +@@ -147,7 +147,7 @@ EAPI_EXTERN const gchar* (*eds_check_version) (guint required_major, guint requi + EAPI_EXTERN const gchar* (*e_source_get_uid) (ESource *source); + EAPI_EXTERN ESource* (*e_source_registry_ref_source) (ESourceRegistry *registry, const gchar *uid); + EAPI_EXTERN EBookClient* (*e_book_client_new) (ESource *source, GError **error); +-EAPI_EXTERN EBookClient* (*e_book_client_connect_direct_sync) (ESourceRegistry *registry, ESource *source, GCancellable *cancellable, GError **error); ++EAPI_EXTERN EBookClient* (*e_book_client_connect_direct_sync) (ESourceRegistry *registry, ESource *source, guint32 wait_for_connected_seconds, GCancellable *cancellable, GError **error); + EAPI_EXTERN gboolean (*e_client_open_sync) (EClient *client, gboolean only_if_exists, GCancellable *cancellable, GError **error); + EAPI_EXTERN ESource* (*e_client_get_source) (EClient *client); + EAPI_EXTERN gboolean (*e_book_client_get_contacts_sync) (EBookClient *client, const gchar *sexp, GSList **contacts, GCancellable *cancellable, GError **error); +diff --git a/connectivity/source/drivers/evoab2/NResultSet.cxx b/connectivity/source/drivers/evoab2/NResultSet.cxx +index 77d53939c1aa..83e792538fc0 100644 +--- a/connectivity/source/drivers/evoab2/NResultSet.cxx ++++ b/connectivity/source/drivers/evoab2/NResultSet.cxx +@@ -477,7 +477,7 @@ class OEvoabVersion38Helper : public OEvoabVersion36Helper + protected: + virtual EBookClient * createClient( ESource *pSource ) override + { +- return e_book_client_connect_direct_sync (get_e_source_registry (), pSource, nullptr, nullptr); ++ return e_book_client_connect_direct_sync (get_e_source_registry (), pSource, 10, nullptr, nullptr); + } + }; + diff --git a/debian/patches/fix-flaky-bridgetest.diff b/debian/patches/fix-flaky-bridgetest.diff new file mode 100644 index 00000000000..f66c01071cc --- /dev/null +++ b/debian/patches/fix-flaky-bridgetest.diff @@ -0,0 +1,46 @@ +Description: Add safer float comparisons to bridgetest equals() +Author: Marcus Tomlinson +Bug-Ubuntu: https://launchpad.net/bugs/1832360 + +--- a/testtools/source/bridgetest/bridgetest.cxx ++++ b/testtools/source/bridgetest/bridgetest.cxx +@@ -53,6 +53,7 @@ + #include "currentcontextchecker.hxx" + #include "multi.hxx" + #include ++#include + + using namespace osl; + using namespace cppu; +@@ -124,6 +125,9 @@ public: + + static bool equals( const TestElement & rData1, const TestElement & rData2 ) + { ++ const float epsilon_f = 0.00001f; ++ const double epsilon_d = 0.000000000001; ++ + check( rData1.Bool == rData2.Bool, "### bool does not match!" ); + check( rData1.Char == rData2.Char, "### char does not match!" ); + check( rData1.Byte == rData2.Byte, "### byte does not match!" ); +@@ -133,8 +137,8 @@ static bool equals( const TestElement & rData1, const TestElement & rData2 ) + check( rData1.ULong == rData2.ULong, "### unsigned long does not match!" ); + check( rData1.Hyper == rData2.Hyper, "### hyper does not match!" ); + check( rData1.UHyper == rData2.UHyper, "### unsigned hyper does not match!" ); +- check( rData1.Float == rData2.Float, "### float does not match!" ); +- check( rData1.Double == rData2.Double, "### double does not match!" ); ++ check( fabs( rData1.Float - rData2.Float ) < epsilon_f, "### float does not match!" ); ++ check( fabs( rData1.Double - rData2.Double ) < epsilon_d, "### double does not match!" ); + check( rData1.Enum == rData2.Enum, "### enum does not match!" ); + check( rData1.String == rData2.String, "### string does not match!" ); + check( rData1.Byte2 == rData2.Byte2, "### byte2 does not match!" ); +@@ -149,8 +153,8 @@ static bool equals( const TestElement & rData1, const TestElement & rData2 ) + rData1.ULong == rData2.ULong && + rData1.Hyper == rData2.Hyper && + rData1.UHyper == rData2.UHyper && +- rData1.Float == rData2.Float && +- rData1.Double == rData2.Double && ++ fabs( rData1.Float - rData2.Float ) < epsilon_f && ++ fabs( rData1.Double - rData2.Double ) < epsilon_d && + rData1.Enum == rData2.Enum && + rData1.String == rData2.String && + rData1.Byte2 == rData2.Byte2 && diff --git a/debian/patches/fix-internal-hsqldb-build.diff b/debian/patches/fix-internal-hsqldb-build.diff new file mode 100644 index 00000000000..477528515ac --- /dev/null +++ b/debian/patches/fix-internal-hsqldb-build.diff @@ -0,0 +1,45 @@ +diff -urN hsqldb.old/patches/use-system-servlet-api.jar.diff hsqldb/patches/use-system-servlet-api.jar.diff +--- a/external/hsqldb/patches/use-system-servlet-api.jar.diff 1970-01-01 01:00:00.000000000 +0100 ++++ b/external/hsqldb/patches/use-system-servlet-api.jar.diff 2013-03-19 15:09:42.137801521 +0100 +@@ -0,0 +1,29 @@ ++--- misc/hsqldb/build/build.xml +++++ misc/build/hsqldb/build/build.xml ++@@ -356,7 +356,7 @@ ++ optimize="${build.optimize}" ++ > ++ ++- +++ ++ ++ ++ ++@@ -818,7 +818,7 @@ ++ ${src}/org/hsqldb/util/RCData.java, ++ ${src}/org/hsqldb/util/SqlTool.java" ++ destdir="${basedir}/doc/src" ++- classpath="${basedir}/lib/servlet.jar;${basedir}/lib/junit.jar" +++ classpath="/usr/share/java/servlet-api-3.1.jar;${basedir}/lib/junit.jar" ++ author="true" ++ version="false" ++ use="true" ++@@ -839,7 +839,7 @@ ++ + +--- a/sc/qa/uitest/statistics/anova.py ++++ b/sc/qa/uitest/statistics/anova.py +@@ -98,7 +98,7 @@ class anova(UITestCase): + self.assertEqual(get_cell_by_position(document, 0, 6, 5).getValue(), 10) + self.assertEqual(get_cell_by_position(document, 0, 6, 6).getValue(), 10) + self.assertEqual(get_cell_by_position(document, 0, 6, 8).getString(), "SS") +- self.assertEqual(round(get_cell_by_position(document, 0, 6, 9).getValue(),11), 1876.56832844573) ++ self.assertEqual(round(get_cell_by_position(document, 0, 6, 9).getValue(),10), 1876.5683284457) + self.assertEqual(round(get_cell_by_position(document, 0, 6, 10).getValue(),10), 6025.1090909091) + #bug 80583 + self.assertEqual(round(get_cell_by_position(document, 0, 6, 11).getValue(),11), 7901.67741935484) +@@ -128,7 +128,7 @@ class anova(UITestCase): + self.assertEqual(round(get_cell_by_position(document, 0, 9, 9).getValue(),13), 4.3604117704492) + + self.assertEqual(get_cell_by_position(document, 0, 10, 8).getString(), "P-value") +- self.assertEqual(round(get_cell_by_position(document, 0, 10, 9).getValue(),14), 0.02246149518799) ++ self.assertEqual(round(get_cell_by_position(document, 0, 10, 9).getValue(),12), 0.022461495188) + + self.assertEqual(get_cell_by_position(document, 0, 11, 8).getString(), "F critical") + self.assertEqual(round(get_cell_by_position(document, 0, 11, 9).getValue(),13), 3.3403855582378) +--- a/sc/qa/uitest/statistics/descriptiveStatistics.py ++++ b/sc/qa/uitest/statistics/descriptiveStatistics.py +@@ -109,7 +109,7 @@ class descriptiveStatistics(UITestCase): + self.assertEqual(round(get_cell_by_position(document, 0, 6, 7).getValue(),11) , 139.49090909091) + self.assertEqual(round(get_cell_by_position(document, 0, 6, 8).getValue(),12) , 11.810626955878) + self.assertEqual(round(get_cell_by_position(document, 0, 6, 9).getValue(),13) , -1.4621677980825) +- self.assertEqual(round(get_cell_by_position(document, 0, 6, 10).getValue(),14) , 0.01524095329036) ++ self.assertEqual(round(get_cell_by_position(document, 0, 6, 10).getValue(),11) , 0.01524095329) + self.assertEqual(get_cell_by_position(document, 0, 6, 11).getValue() , 31) + self.assertEqual(get_cell_by_position(document, 0, 6, 12).getValue() , 26) + self.assertEqual(get_cell_by_position(document, 0, 6, 13).getValue() , 57) diff --git a/debian/patches/help-msg-add-package-info.diff b/debian/patches/help-msg-add-package-info.diff new file mode 100644 index 00000000000..dbfb32ae653 --- /dev/null +++ b/debian/patches/help-msg-add-package-info.diff @@ -0,0 +1,13 @@ +diff --git a/include/sfx2/strings.hrc b/include/sfx2/strings.hrc +index 1b0ea6ccb2ff..630f4330552a 100644 +--- a/include/sfx2/strings.hrc ++++ b/include/sfx2/strings.hrc +@@ -132,7 +132,7 @@ + #define STR_GID_CONTROLS NC_("STR_GID_CONTROLS", "Controls") + #define STR_QUITAPP NC_("STR_QUITAPP", "E~xit %PRODUCTNAME") + #define RID_STR_HELP NC_("RID_STR_HELP", "Help") +-#define RID_STR_HLPFILENOTEXIST NC_("RID_STR_HLPFILENOTEXIST", "The help file for this topic is not installed.") ++#define RID_STR_HLPFILENOTEXIST NC_("RID_STR_HLPFILENOTEXIST", "The help file for this topic is not installed. Please install the libreoffice-help-en-us package or the locale specific help package libreoffice-help-.") + #define STR_QUICKSTART_EXIT NC_("STR_QUICKSTART_EXIT", "Exit Quickstarter") + #define STR_QUICKSTART_TIP NC_("STR_QUICKSTART_TIP", "%PRODUCTNAME %PRODUCTVERSION Quickstarter") + #define STR_QUICKSTART_FILEOPEN NC_("STR_QUICKSTART_FILEOPEN", "Open Document...") diff --git a/debian/patches/hide-math-desktop-file.patch b/debian/patches/hide-math-desktop-file.patch new file mode 100644 index 00000000000..3e7fd4bbadc --- /dev/null +++ b/debian/patches/hide-math-desktop-file.patch @@ -0,0 +1,15 @@ +Description: Hide startcenter and math from the shell +Author: Olivier Tilloy +Bug-Ubuntu: https://launchpad.net/bugs/1696250 +Forwarded: not-needed + +--- a/sysui/desktop/menus/math.desktop ++++ b/sysui/desktop/menus/math.desktop +@@ -33,6 +33,7 @@ Keywords=Equation;OpenDocument Formula;F + InitialPreference=5 + StartupWMClass=libreoffice-math + X-KDE-Protocols=file,http,ftp,webdav,webdavs ++NotShowIn=GNOME; + + Actions=NewDocument; + [Desktop Action NewDocument] diff --git a/debian/patches/hppa-is-32bit.diff b/debian/patches/hppa-is-32bit.diff new file mode 100644 index 00000000000..b3ceb179fd3 --- /dev/null +++ b/debian/patches/hppa-is-32bit.diff @@ -0,0 +1,13 @@ +diff --git a/configure.ac b/configure.ac +index 42dc3b4..f5a51c9 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -6671,7 +6671,7 @@ if test "$ENABLE_JAVA" != ""; then + JAVAINTERPRETER=`win_short_path_for_make "$JAVAINTERPRETER"` + elif test "$cross_compiling" != "yes"; then + case $CPUNAME in +- AARCH64|AXP|X86_64|HPPA|IA64|POWERPC64|S390X|SPARC64|GODSON64) ++ AARCH64|AXP|X86_64|IA64|POWERPC64|S390X|SPARC64|GODSON64) + if test -f "$JAVAINTERPRETER" -a "`$JAVAINTERPRETER -version 2>&1 | $GREP -i 64-bit`" = "" >/dev/null; then + AC_MSG_WARN([You are building 64-bit binaries but the JDK $JAVAINTERPRETER is 32-bit]) + AC_MSG_ERROR([You should pass the --with-jdk-home option pointing to a 64-bit JDK]) diff --git a/debian/patches/hrk-euro.diff b/debian/patches/hrk-euro.diff new file mode 100644 index 00000000000..b4fbe69af7b --- /dev/null +++ b/debian/patches/hrk-euro.diff @@ -0,0 +1,156 @@ +From 7c4b2db21ef77b37daf234ac1ab9989234606a22 Mon Sep 17 00:00:00 2001 +From: Eike Rathke +Date: Fri, 22 Jul 2022 22:12:02 +0200 +Subject: Resolves: tdf#150011 Add HRK Croatian Kuna conversion to EUR Euro + +TODO: switch defaults before 2023-01-01 in +i18npool/source/localedata/data/hr_HR.xml + +Change-Id: Ifc62aefbc8c9fe8bbf044f61ae4fd6eeff692185 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/137371 +Reviewed-by: Eike Rathke +Tested-by: Jenkins +--- + i18npool/source/localedata/data/hr_HR.xml | 8 ++++++++ + officecfg/registry/data/org/openoffice/Office/Calc.xcu | 11 +++++++++++ + sc/source/core/tool/interpr2.cxx | 3 ++- + 3 files changed, 21 insertions(+), 1 deletion(-) + +diff --git a/i18npool/source/localedata/data/hr_HR.xml b/i18npool/source/localedata/data/hr_HR.xml +index 0c493131e16b..4de83e5535cd 100644 +--- a/i18npool/source/localedata/data/hr_HR.xml ++++ b/i18npool/source/localedata/data/hr_HR.xml +@@ -421,6 +421,14 @@ + Hrvatska Kuna + 2 + ++ ++ ++ EUR ++ € ++ EUR ++ Euro ++ 2 ++ + + + +diff --git a/officecfg/registry/data/org/openoffice/Office/Calc.xcu b/officecfg/registry/data/org/openoffice/Office/Calc.xcu +index a62d06512704..eda60fe6c434 100644 +--- a/officecfg/registry/data/org/openoffice/Office/Calc.xcu ++++ b/officecfg/registry/data/org/openoffice/Office/Calc.xcu +@@ -228,6 +228,17 @@ + 3.45280 + + ++ ++ ++ EUR ++ ++ ++ HRK ++ ++ ++ 7.53450 ++ ++ + + + +diff --git a/sc/source/core/tool/interpr2.cxx b/sc/source/core/tool/interpr2.cxx +index 31c42a4b728a..67fcd9f787f8 100644 +--- a/sc/source/core/tool/interpr2.cxx ++++ b/sc/source/core/tool/interpr2.cxx +@@ -3235,7 +3235,8 @@ static bool lclConvertMoney( const OUString& aSearchUnit, double& rfRate, int& r + { "SKK", 30.1260, 2 }, + { "EEK", 15.6466, 2 }, + { "LVL", 0.702804, 2 }, +- { "LTL", 3.45280, 2 } ++ { "LTL", 3.45280, 2 }, ++ { "HRK", 7.53450, 2 } + }; + + for (const auto & i : aConvertTable) +-- +cgit v1.2.1 + +From b1a2f727ca99ecd3402d4b051b99cbfd24266e59 Mon Sep 17 00:00:00 2001 +From: Eike Rathke +Date: Fri, 22 Jul 2022 22:17:11 +0200 +Subject: Related: tdf#150011 Add HRK Croatian Kuna to Euro conversion wizard + +Maybe just for completeness, it's removed from menu but might be +callable as macro. + +Change-Id: Iade0be845186d3deb2f00f4aaa230c0b344cea72 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/137372 +Reviewed-by: Eike Rathke +Tested-by: Jenkins +--- + wizards/source/euro/Init.xba | 16 ++++++++++++++++ + wizards/source/resources/resources_en_US.properties | 1 + + 2 files changed, 17 insertions(+) + +diff --git a/wizards/source/euro/Init.xba b/wizards/source/euro/Init.xba +index 623a0a53be46..9f56c503a347 100644 +--- a/wizards/source/euro/Init.xba ++++ b/wizards/source/euro/Init.xba +@@ -89,6 +89,7 @@ Public sCurrSLOVAK as String + Public sCurrESTONIAN as String + Public sCurrLATVIAN as String + Public sCurrLITHUANIAN as String ++Public sCurrCROATIAN as String + + Public sPrgsRETRIEVAL as String + Public sPrgsCONVERTING as String +@@ -214,6 +215,7 @@ Dim LocWorkPath as String + sCurrESTONIAN = GetResText("CURRENCIES_16") + sCurrLATVIAN = GetResText("CURRENCIES_17") + sCurrLITHUANIAN = GetResText("CURRENCIES_18") ++ sCurrCROATIAN = GetResText("CURRENCIES_19") + .cmdCancel.Label = sCANCEL + .cmdHelp.Label = sHELP + .cmdBack.Label = GetResText("STEP_ZERO_2") +@@ -393,6 +395,11 @@ Sub InitializeLanguages() + LangIDValue(18,0,1) = "LT" + LangIDValue(18,0,2) = "-427" + ++' CURRENCIES_CROATIAN ++ LangIDValue(19,0,0) = "hr" ++ LangIDValue(19,0,1) = "HR" ++ LangIDValue(19,0,2) = "-41A" ++ + End Sub + + +@@ -572,6 +579,15 @@ Dim i as Integer + CurrValue(18,4) = "Lt" + CurrValue(18,5) = "LTL" + ++ CurrValue(19,0) = sCurrCROATIAN ++ ' real conversion rate ++ CurrValue(19,1) = 7.53450 ++ ' rounded conversion rate ++ CurrValue(19,2) = 7.5 ++ CurrValue(19,3) = "kn" ++ CurrValue(19,4) = "kn" ++ CurrValue(19,5) = "HRK" ++ + i = -1 + CurrSymbolList(0) = "" + CurrSymbolList(1) = "" +diff --git a/wizards/source/resources/resources_en_US.properties b/wizards/source/resources/resources_en_US.properties +index 32f9104e97e0..8649b2500e6a 100644 +--- a/wizards/source/resources/resources_en_US.properties ++++ b/wizards/source/resources/resources_en_US.properties +@@ -448,6 +448,7 @@ CURRENCIES_15=Slovak Koruna + CURRENCIES_16=Estonian Kroon + CURRENCIES_17=Latvian Lats + CURRENCIES_18=Lithuanian Litas ++CURRENCIES_19=Croatian Kuna + STEP_LASTPAGE_0=Progress + STEP_LASTPAGE_1=Retrieving the relevant documents... + STEP_LASTPAGE_2=Converting the documents... +-- +cgit v1.2.1 + diff --git a/debian/patches/install-fixes.diff b/debian/patches/install-fixes.diff new file mode 100644 index 00000000000..891bb321c78 --- /dev/null +++ b/debian/patches/install-fixes.diff @@ -0,0 +1,166 @@ +diff --git a/bin/distro-install-file-lists b/bin/distro-install-file-lists +index eaabf9c..c1b1ec6 100755 +--- libreoffice-3.5.0/bin/distro-install-file-lists ++++ libreoffice-3.5.0/bin/distro-install-file-lists +@@ -8,6 +8,8 @@ + exit 1 + fi + ++export OOO_VENDOR=Debian ++ + BUILDDIR=`pwd` + FILELISTSDIR="$BUILDDIR/file-lists" + +@@ -351,152 +351,6 @@ if test "z$OOO_VENDOR" != "zDebian" ; then + remove_duplicity_from_flists common_list.txt lang_bg_list.txt $INSTALLDIR/presets/config/styles.sod + # the British fixes can be removed after the issue #54113 is fixed + remove_duplicity_from_flists common_list.txt lang_en-GB_list.txt $INSTALLDIR/presets/config/standard.sog +- +-else +- +- echo "Creating package directories..." +- +- test -d pkg && rm -r pkg || : +- +- # Create package tree (needed by Debian's dpkg) +- # create_package_directory +- create_package_directory() +- { +- listfile=$1 +- directory="$2" +- perl -nl \ +- -e " if(/^%dir (.*)/) +- {system('mkdir', '-p', '-m', '755', \"$directory\".\$1);} +- else +- {rename('./'.\$_, \"$directory\".\$_);} +- " \ +- $listfile +- } +- +- create_package_directory gid_Module_Root_Ure_Hidden pkg/ure +- +- create_package_directory gid_Module_Root pkg/libreoffice-common +- create_package_directory gid_Module_Root_Brand pkg/libreoffice-common +- create_package_directory gid_Module_Root_Files_Images pkg/libreoffice-common +- create_package_directory gid_Module_Oo_Linguistic pkg/libreoffice-common +- create_package_directory gid_Module_Optional_Xsltfiltersamples pkg/libreoffice-common +- create_package_directory gid_Module_Optional_Grfflt pkg/libreoffice-draw +- create_package_directory gid_Module_Prg_Calc_Bin pkg/libreoffice-calc +- create_package_directory gid_Module_Prg_Math_Bin pkg/libreoffice-math +- create_package_directory gid_Module_Prg_Draw_Bin pkg/libreoffice-draw +- create_package_directory gid_Module_Prg_Wrt_Bin pkg/libreoffice-writer +- create_package_directory gid_Module_Prg_Impress_Bin pkg/libreoffice-impress +- create_package_directory gid_Module_Prg_Base_Bin pkg/libreoffice-base +- create_package_directory gid_Module_Brand_Prg_Calc pkg/libreoffice-calc +- create_package_directory gid_Module_Brand_Prg_Math pkg/libreoffice-math +- create_package_directory gid_Module_Brand_Prg_Draw pkg/libreoffice-draw +- create_package_directory gid_Module_Brand_Prg_Wrt pkg/libreoffice-writer +- create_package_directory gid_Module_Brand_Prg_Impress pkg/libreoffice-impress +- create_package_directory gid_Module_Brand_Prg_Base pkg/libreoffice-base +- create_package_directory gid_Module_Pyuno pkg/python-uno +- create_package_directory gid_Module_Optional_Gnome pkg/libreoffice-gnome +- +- create_package_directory gid_Module_Root_Files_2 pkg/libreoffice-common +- create_package_directory gid_Module_Root_Files_3 pkg/libreoffice-common +- create_package_directory gid_Module_Root_Files_4 pkg/libreoffice-common +- create_package_directory gid_Module_Root_Files_5 pkg/libreoffice-common +- create_package_directory gid_Module_Root_Files_6 pkg/libreoffice-common +- create_package_directory gid_Module_Root_Files_7 pkg/libreoffice-common +- if [ -e gid_Module_Optional_Pymailmerge ]; then +- create_package_directory gid_Module_Optional_Pymailmerge pkg/libreoffice-emailmerge +- else # post m26 +- mkdir -p pkg/libreoffice-emailmerge/$INSTALLDIR/program +- mv pkg/libreoffice-common/$INSTALLDIR/program/mailmerge.py \ +- pkg/libreoffice-emailmerge/$INSTALLDIR/program/mailmerge.py +- fi +- create_package_directory gid_Module_Optional_OGLTrans pkg/libreoffice-ogltrans +- +- create_package_directory gid_Module_Root_SDK pkg/libreoffice-dev +- +- for l in `echo $WITH_LANG_LIST`; do +- for p in Impress Draw Math Calc Base Writer; do +- create_package_directory gid_Module_Langpack_${p}_`echo $l | sed -e s/-/_/g` pkg/libreoffice-l10n-$l +- done +- create_package_directory gid_Module_Langpack_Basis_`echo $l | sed -e s/-/_/g` pkg/libreoffice-l10n-$l +- create_package_directory gid_Module_Langpack_Brand_`echo $l | sed -e s/-/_/g` pkg/libreoffice-l10n-$l +- create_package_directory gid_Module_Langpack_Resource_`echo $l | sed -e s/-/_/g` pkg/libreoffice-l10n-$l +- create_package_directory gid_Module_Helppack_Help_`echo $l | sed -e s/-/_/g` pkg/libreoffice-help-$l +- +- # some help files are in _Langpack_{Writer,Impress,...}_ +- # move them from -l10n to -help +- if [ "$l" = "en-US" ]; then d=en; else d=$l; fi +- mv pkg/libreoffice-l10n-$l/$INSTALLDIR/help/$d/* \ +- pkg/libreoffice-help-$l/$INSTALLDIR/help/$d && \ +- rmdir pkg/libreoffice-l10n-$l/$INSTALLDIR/help/$d +- done +- +- # move_wrappers [...] +- move_wrappers() +- { +- directory=$1 +- shift +- mkdir -m755 -p "$directory"/usr/bin +- while test -n "$1"; do +- mv usr/*bin/"$1$BINSUFFIX" "$directory"/usr/bin +- shift +- done +- } +- move_wrappers pkg/libreoffice-common soffice unopkg +- if test "$COMPAT_OOWRAPPERS" = "YES" ; then +- move_wrappers pkg/libreoffice-common ooffice oofromtemplate +- move_wrappers pkg/libreoffice-base oobase +- move_wrappers pkg/libreoffice-writer oowriter ooweb +- move_wrappers pkg/libreoffice-calc oocalc +- move_wrappers pkg/libreoffice-impress ooimpress +- move_wrappers pkg/libreoffice-math oomath +- move_wrappers pkg/libreoffice-draw oodraw +- fi +- move_wrappers pkg/libreoffice-common libreoffice lofromtemplate +- move_wrappers pkg/libreoffice-base lobase +- move_wrappers pkg/libreoffice-writer lowriter loweb +- move_wrappers pkg/libreoffice-calc localc +- move_wrappers pkg/libreoffice-impress loimpress +- move_wrappers pkg/libreoffice-math lomath +- move_wrappers pkg/libreoffice-draw lodraw +- +- # Move all libraries, binaries, *.rdb from -common to -core +- for d in $INSTALLDIR/program $INSTALLDIR/program; do \ +- if [ ! -d $DESTDIR/pkg/libreoffice-core/$d ]; then \ +- mkdir -p $DESTDIR/pkg/libreoffice-core/$d; \ +- fi && +- ( cd pkg/libreoffice-common/$d +- find -maxdepth 1 \ +- -regex '\./\(.*\.so.*\|.*\.bin\|pagein\|msfontextract\|.*\.rdb\|javaldx\|uri-encode\)' \ +- -exec mv {} $DESTDIR/pkg/libreoffice-core/$d \; +- ); \ +- done +- +- # install additional ooo-build scripts & misc stuff +- mkdir -p pkg/libreoffice-common/usr/share/man/man1 +- if test "$COMPAT_OOWRAPPERS" = "YES" ; then +- mv usr/share/man/man1/openoffice$BINSUFFIX.1 \ +- pkg/libreoffice-common/usr/share/man/man1 +- fi +- mv usr/share/man/man1/libreoffice$BINSUFFIX.1 \ +- pkg/libreoffice-common/usr/share/man/man1 +- mkdir -p pkg/libreoffice-common/etc/bash_completion.d +- if test "$COMPAT_OOWRAPPERS" = "YES" ; then +- mv etc/bash_completion.d/ooffice$BINSUFFIX.sh \ +- pkg/libreoffice-common/etc/bash_completion.d +- fi +- mv etc/bash_completion.d/libreoffice$BINSUFFIX.sh \ +- pkg/libreoffice-common/etc/bash_completion.d +- mv .$INSTALLDIR/program/java-set-classpath \ +- pkg/libreoffice-common/$INSTALLDIR/program +- if echo $WITH_LANG_LIST | grep -q en-US; then +- for i in forms/resume.ott officorr/project-proposal.ott; do \ +- mkdir -p pkg/libreoffice-common/$INSTALLDIR/share/template/en-US/`dirname $i`; \ +- mv .$INSTALLDIR/share/template/en-US/$i \ +- pkg/libreoffice-common/$INSTALLDIR/share/template/en-US/$i; \ +- done; \ +- fi +- # Warn for any remaining files +- find . -path './pkg' -prune -o -not -name 'gid_Module_*' -not -type d -exec echo "File not packaged: {}" \; + fi + + # mark the config files diff --git a/debian/patches/javadoc-optional.diff b/debian/patches/javadoc-optional.diff new file mode 100644 index 00000000000..704ae20ec56 --- /dev/null +++ b/debian/patches/javadoc-optional.diff @@ -0,0 +1,153 @@ +Gemeinsame Unterverzeichnisse: odk-old/config und odk/config. +Gemeinsame Unterverzeichnisse: odk-old/docs und odk/docs. +Gemeinsame Unterverzeichnisse: odk-old/examples und odk/examples. +diff --git a/odk/Module_odk.mk b/odk/Module_odk.mk +index 32bdfc1..a174932 100644 +--- a/odk/Module_odk.mk ++++ b/odk/Module_odk.mk +@@ -43,11 +43,13 @@ ifneq ($(ENABLE_JAVA),) + $(eval $(call gb_Module_add_targets,odk,\ + $(if $(and $(BUILD_UNOWINREG),$(filter GCC,$(COM))),CustomTarget_unowinreg)\ + CustomTarget_classes \ +- CustomTarget_javadoc \ +- GeneratedPackage_odk_javadoc \ + GeneratedPackage_uno_loader_classes \ + $(if $(filter WNT,$(OS)),Library_unowinreg) \ + Package_unowinreg \ ++ $(if $(JAVADOC),\ ++ CustomTarget_javadoc \ ++ GeneratedPackage_odk_javadoc \ ++ ) \ + )) + endif + +Gemeinsame Unterverzeichnisse: odk-old/pack und odk/pack. +Gemeinsame Unterverzeichnisse: odk-old/qa und odk/qa. +Gemeinsame Unterverzeichnisse: odk-old/settings und odk/settings. +Gemeinsame Unterverzeichnisse: odk-old/source und odk/source. +Gemeinsame Unterverzeichnisse: odk-old/util und odk/util. +--- a/configure.ac-old 2013-05-27 18:32:42.187305241 +0200 ++++ b/configure.ac 2013-05-27 18:44:29.131286710 +0200 +@@ -2057,6 +2057,18 @@ AC_ARG_WITH(doxygen, + documentation. Not relevant in the --disable-odk case.]), + ,with_doxygen=yes) + ++AC_ARG_WITH( ++ [javadoc], ++ AS_HELP_STRING( ++ [--with-javadoc], ++ [Specifies the javadoc executable to use when generating ODK Java ++ documentation. --without-javadoc disables generation of ODK Java ++ documentation. Not relevant in the --disable-odk case.]) ++ [ ++ Usage: --with-javadoc= ++ ],, ++ [with_javadoc=yes]) ++ + AC_ARG_WITH(visual-studio, + AS_HELP_STRING([--with-visual-studio=<2019>], + [Specify which Visual Studio version to use in case several are +@@ -6290,34 +6302,44 @@ + dnl =================================================================== + dnl Checks for javadoc + dnl =================================================================== +-if test "$ENABLE_JAVA" != ""; then ++if test "$ENABLE_JAVA" != "" -a "$enable_odk" != no; then + if test -z "$with_jdk_home"; then + AC_PATH_PROG(JAVADOC, javadoc) + else +- _javadoc_path="$with_jdk_home/bin/javadoc" +- dnl Check if there is a javadoc at all. +- if test -x "$_javadoc_path"; then +- JAVADOC=$_javadoc_path +- else +- AC_PATH_PROG(JAVADOC, javadoc) +- fi +- fi +- if test -z "$JAVADOC"; then +- AC_MSG_ERROR([$_javadoc_path not found set with_jdk_home]) +- fi +- if test "$build_os" = "cygwin"; then +- if test x`echo "$JAVADOC" | $GREP -i '\.exe$'` = x; then +- JAVADOC="${JAVADOC}.exe" +- fi +- JAVADOC=`win_short_path_for_make "$JAVADOC"` +- fi ++ if test "$with_javadoc" = "yes"; then ++ _javadoc_path="$with_jdk_home/bin/javadoc" ++ dnl Check if there is a javadoc at all. ++ if test -x "$_javadoc_path"; then ++ JAVADOC=$_javadoc_path ++ else ++ AC_PATH_PROG(JAVADOC, javadoc) ++ fi ++ if test -z "$JAVADOC"; then ++ AC_MSG_ERROR([$_javadoc_path not found set with_jdk_home]) ++ fi ++ if test "$build_os" = "cygwin"; then ++ if test x`echo "$JAVADOC" | $GREP -i '\.exe$'` = x; then ++ JAVADOC="${JAVADOC}.exe" ++ fi ++ JAVADOC=`win_short_path_for_make "$JAVADOC"` ++ fi + +- if test `$JAVADOC --version 2>&1 | $GREP -c "gjdoc"` -gt 0; then +- JAVADOCISGJDOC="yes" ++ if test `$JAVADOC --version 2>&1 | $GREP -c "gjdoc"` -gt 0; then ++ JAVADOCISGJDOC="yes" ++ fi ++ else ++ unset JAVADOC ++ fi + fi ++else ++ unset JAVADOC + fi + AC_SUBST(JAVADOCISGJDOC) + ++if test "$JAVADOCISGJDOC" = "yes"; then ++ unset JAVADOC ++fi ++ + if test "$ENABLE_JAVA" != ""; then + # check if JAVA_HOME was (maybe incorrectly?) set automatically to /usr + if test "$JAVA_HOME" = "/usr" -a "x$with_jdk_home" = "x"; then +diff --git a/odk/CustomTarget_check.mk b/odk/CustomTarget_check.mk +index a9b542d..707829a 100644 +--- a/odk/CustomTarget_check.mk ++++ b/odk/CustomTarget_check.mk +@@ -35,7 +35,7 @@ $(call gb_CustomTarget_get_workdir,odk/check)/checkbin : \ + $(if $(filter WNT,$(OS)),$(call gb_Package_get_target,odk_config_win)) \ + $(call gb_Package_get_target,odk_docs) \ + $(call gb_Package_get_target,odk_html) \ +- $(if $(ENABLE_JAVA),$(call gb_GeneratedPackage_get_target,odk_javadoc)) \ ++ $(if $(JAVADOC),$(call gb_GeneratedPackage_get_target,odk_javadoc)) \ + $(call gb_Package_get_target,odk_settings) \ + $(call gb_Package_get_target,odk_settings_generated) \ + $(if $(ENABLE_JAVA),$(call gb_Package_get_target,odk_unowinreg)) +diff --git a/odk/util/check.pl b/odk/util/check.pl +index 899b42c..2c7a780 100644 +--- a/odk/util/check.pl ++++ b/odk/util/check.pl +@@ -188,7 +188,7 @@ if (-d "$SdkDir") { + # improvement required + my $solar_java = $ENV{"ENABLE_JAVA"}; + my $JDK = $ENV{"JDK"}; +- if (defined($solar_java) && $solar_java ne "" && (!defined($JDK) || $JDK ne "gcj")) { ++ if (defined($solar_java) && $solar_java ne "" && $ENV{"JAVADOC"} ne "") { + print "check java docu: "; + if (check_dir("docs/java/ref")) { + if (!check_file("docs/java/ref/index.html")) { +diff --git a/Repository.mk b/Repository.mk +index 5f2654b..471210f 100644 +--- a/Repository.mk ++++ b/Repository.mk +@@ -834,7 +841,7 @@ $(eval $(call gb_Helper_register_packages_for_install,sdk,\ + offapi_idl \ + udkapi_idl \ + $(if $(ENABLE_JAVA), \ +- odk_javadoc \ ++ $(if $(JAVADOC),odk_javadoc) \ + odk_uno_loader_classes \ + odk_unowinreg \ + ) \ diff --git a/debian/patches/jdbc-driver-classpaths.diff b/debian/patches/jdbc-driver-classpaths.diff new file mode 100644 index 00000000000..8f4a1660e75 --- /dev/null +++ b/debian/patches/jdbc-driver-classpaths.diff @@ -0,0 +1,35 @@ +diff --git a/officecfg/registry/data/org/openoffice/Office/DataAccess.xcu b/officecfg/registry/data/org/openoffice/Office/DataAccess.xcu +index 9be30a2..59c87cb 100644 +--- a/officecfg/registry/data/org/openoffice/Office/DataAccess.xcu ++++ b/officecfg/registry/data/org/openoffice/Office/DataAccess.xcu +@@ -147,6 +147,30 @@ + + + ++ ++ ++ ++ ++ file:///usr/share/java/mariadb-java-client.jar ++ ++ ++ ++ ++ file:///usr/share/java/mysql.jar ++ ++ ++ ++ ++ file:///usr/share/java/posgresql.jar ++ ++ ++ ++ ++ file:///usr/share/java/jtds.jar ++ ++ ++ ++ + + + diff --git a/debian/patches/jurt-soffice-location.diff b/debian/patches/jurt-soffice-location.diff new file mode 100644 index 00000000000..aa334d8ea4d --- /dev/null +++ b/debian/patches/jurt-soffice-location.diff @@ -0,0 +1,20 @@ +commit b71107fb12e3c3125e0cb62c5a4f6636a80c6408 +Author: Bjoern Michaelsen +AuthorDate: Tue Jun 7 11:52:37 2011 +0200 +Commit: Bjoern Michaelsen +CommitDate: Tue Jun 7 11:52:37 2011 +0200 + + on debian-based systems, we know where our soffice binary is + +diff --git a/jurt/com/sun/star/lib/util/NativeLibraryLoader.java b/jurt/com/sun/star/lib/util/NativeLibraryLoader.jav +index da22980..36664ca 100644 +--- libreoffice-3.5.0/ridljar/com/sun/star/lib/util/NativeLibraryLoader.java ++++ libreoffice-3.5.0/ridljar/com/sun/star/lib/util/NativeLibraryLoader.java +@@ -111,6 +111,8 @@ public final class NativeLibraryLoader { + } + } + } ++ if (name.equals("soffice")) ++ return new File("/usr/lib/libreoffice/program/soffice"); + return null; + } diff --git a/debian/patches/liborcus-0.16.diff b/debian/patches/liborcus-0.16.diff new file mode 100644 index 00000000000..a544ec7ca35 --- /dev/null +++ b/debian/patches/liborcus-0.16.diff @@ -0,0 +1,1255 @@ +From 109ed8f775dddfede012d56d078abd70b45490c0 Mon Sep 17 00:00:00 2001 +From: Kohei Yoshida +Date: Wed, 9 Sep 2020 21:23:48 -0400 +Subject: Upgrade liborcus to 0.16.0. + +Change-Id: Iae29fb26417dfc161698a81bee84e81545969065 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/102502 +Tested-by: Jenkins +Reviewed-by: Kohei Yoshida +--- + RepositoryExternal.mk | 4 +- + configure.ac | 2 +- + download.lst | 4 +- + ...1-Mark-all-untentionally-unused-variables.patch | 376 +++++++++++++++++++++ + external/liborcus/ExternalPackage_liborcus.mk | 8 +- + external/liborcus/ExternalProject_liborcus.mk | 4 +- + external/liborcus/Library_orcus-parser.mk | 1 + + external/liborcus/Library_orcus.mk | 4 + + external/liborcus/UnpackedTarball_liborcus.mk | 1 + + external/liborcus/libtool.patch.0 | 10 +- + external/liborcus/windows-constants-hack.patch | 2 +- + sc/source/filter/inc/orcusinterface.hxx | 21 +- + sc/source/filter/orcus/interface.cxx | 82 +++-- + sc/source/filter/orcus/xmlcontext.cxx | 7 +- + sc/source/ui/xmlsource/xmlsourcedlg.cxx | 6 +- + 15 files changed, 480 insertions(+), 52 deletions(-) + create mode 100644 external/liborcus/0001-Mark-all-untentionally-unused-variables.patch + +diff --git a/RepositoryExternal.mk b/RepositoryExternal.mk +index d9fa980d7f24..1f0a91de142a 100644 +--- a/RepositoryExternal.mk ++++ b/RepositoryExternal.mk +@@ -3270,7 +3270,7 @@ $(call gb_LinkTarget_set_include,$(1),\ + ) + + $(call gb_LinkTarget_add_libs,$(1),\ +- -L$(call gb_UnpackedTarball_get_dir,liborcus)/src/liborcus/.libs -lorcus-0.15 \ ++ -L$(call gb_UnpackedTarball_get_dir,liborcus)/src/liborcus/.libs -lorcus-0.16 \ + ) + + $(if $(SYSTEM_BOOST), \ +@@ -3289,7 +3289,7 @@ $(call gb_LinkTarget_set_include,$(1),\ + ) + + $(call gb_LinkTarget_add_libs,$(1),\ +- -L$(call gb_UnpackedTarball_get_dir,liborcus)/src/parser/.libs -lorcus-parser-0.15 \ ++ -L$(call gb_UnpackedTarball_get_dir,liborcus)/src/parser/.libs -lorcus-parser-0.16 \ + ) + + endef +diff --git a/configure.ac b/configure.ac +index 8e8d5eb662d9..06398bfa99a7 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -10126,7 +10126,7 @@ AC_SUBST(ENABLE_FUZZERS) + dnl =================================================================== + dnl Orcus + dnl =================================================================== +-libo_CHECK_SYSTEM_MODULE([orcus],[ORCUS],[liborcus-0.15 >= 0.15.0]) ++libo_CHECK_SYSTEM_MODULE([orcus],[ORCUS],[liborcus-0.16 >= 0.16.0]) + if test "$with_system_orcus" != "yes"; then + if test "$SYSTEM_BOOST" = "TRUE"; then + # =========================================================== +diff --git a/download.lst b/download.lst +index ee4ba8a1c83b..345ddd19537b 100644 +--- a/download.lst ++++ b/download.lst +@@ -206,8 +206,8 @@ export OPENLDAP_SHA256SUM := cdd6cffdebcd95161a73305ec13fc7a78e9707b46ca9f84fb89 + export OPENLDAP_TARBALL := openldap-2.4.45.tgz + export OPENSSL_SHA256SUM := 14cb464efe7ac6b54799b34456bd69558a749a4931ecfd9cf9f71d7881cac7bc + export OPENSSL_TARBALL := openssl-1.0.2t.tar.gz +-export ORCUS_SHA256SUM := cfb2aa60825f2a78589ed030c07f46a1ee16ef8a2d1bf2279192fbc1ae5a5f61 +-export ORCUS_TARBALL := liborcus-0.15.4.tar.bz2 ++export ORCUS_SHA256SUM := 854c6ec167ace59baa2984e175bac7b5b2af91bfde4bb10d2088b87a51ed76ec ++export ORCUS_TARBALL := liborcus-0.16.0.tar.bz2 + export OWNCLOUD_ANDROID_LIB_SHA256SUM := b18b3e3ef7fae6a79b62f2bb43cc47a5346b6330f6a383dc4be34439aca5e9fb + export OWNCLOUD_ANDROID_LIB_TARBALL := owncloud-android-library-0.9.4-no-binary-deps.tar.gz + export PAGEMAKER_SHA256SUM := 66adacd705a7d19895e08eac46d1e851332adf2e736c566bef1164e7a442519d +diff --git a/external/liborcus/0001-Mark-all-untentionally-unused-variables.patch b/external/liborcus/0001-Mark-all-untentionally-unused-variables.patch +new file mode 100644 +index 000000000000..b0f6a572aff7 +--- /dev/null ++++ b/external/liborcus/0001-Mark-all-untentionally-unused-variables.patch +@@ -0,0 +1,376 @@ ++From 6d34c41b661a9e8dddf6d08bf1f3c1fd4f5581da Mon Sep 17 00:00:00 2001 ++From: Kohei Yoshida ++Date: Fri, 11 Sep 2020 21:39:09 -0400 ++Subject: [PATCH] Mark all untentionally unused variables. ++ ++--- ++ include/orcus/css_parser.hpp | 70 ++++++++++++++++++++++++------ ++ include/orcus/csv_parser.hpp | 5 ++- ++ include/orcus/json_parser.hpp | 15 +++++-- ++ include/orcus/sax_parser.hpp | 35 ++++++++++++--- ++ include/orcus/sax_token_parser.hpp | 20 +++++++-- ++ include/orcus/yaml_parser.hpp | 10 ++++- ++ 6 files changed, 124 insertions(+), 31 deletions(-) ++ ++diff --git a/include/orcus/css_parser.hpp b/include/orcus/css_parser.hpp ++index cdfae5e0..3e96980b 100644 ++--- a/include/orcus/css_parser.hpp +++++ b/include/orcus/css_parser.hpp ++@@ -31,23 +31,44 @@ namespace orcus { ++ class css_handler ++ { ++ public: ++- void at_rule_name(const char* p, size_t n) {} +++ void at_rule_name(const char* p, size_t n) +++ { +++ (void)p; (void)n; +++ } ++ ++- void simple_selector_type(const char* p, size_t n) {} +++ void simple_selector_type(const char* p, size_t n) +++ { +++ (void)p; (void)n; +++ } ++ ++- void simple_selector_class(const char* p, size_t n) {} +++ void simple_selector_class(const char* p, size_t n) +++ { +++ (void)p; (void)n; +++ } ++ ++- void simple_selector_pseudo_element(orcus::css::pseudo_element_t pe) {} +++ void simple_selector_pseudo_element(orcus::css::pseudo_element_t pe) +++ { +++ (void)pe; +++ } ++ ++- void simple_selector_pseudo_class(orcus::css::pseudo_class_t pc) {} +++ void simple_selector_pseudo_class(orcus::css::pseudo_class_t pc) +++ { +++ (void)pc; +++ } ++ ++- void simple_selector_id(const char* p, size_t n) {} +++ void simple_selector_id(const char* p, size_t n) +++ { +++ (void)p; (void)n; +++ } ++ ++ void end_simple_selector() {} ++ ++ void end_selector() {} ++ ++- void combinator(orcus::css::combinator_t combinator) {} +++ void combinator(orcus::css::combinator_t combinator) +++ { +++ (void)combinator; +++ } ++ ++ /** ++ * Called at each property name. ++@@ -55,7 +76,10 @@ public: ++ * @param p pointer to the char-array containing the property name string. ++ * @param n length of the property name string. ++ */ ++- void property_name(const char* p, size_t n) {} +++ void property_name(const char* p, size_t n) +++ { +++ (void)p; (void)n; +++ } ++ ++ /** ++ * Called at each ordinary property value string. ++@@ -63,7 +87,10 @@ public: ++ * @param p pointer to the char-array containing the value string. ++ * @param n length of the value string. ++ */ ++- void value(const char* p, size_t n) {} +++ void value(const char* p, size_t n) +++ { +++ (void)p; (void)n; +++ } ++ ++ /** ++ * Called at each RGB color value of a property. ++@@ -72,7 +99,10 @@ public: ++ * @param green value of green (0-255) ++ * @param blue value of blue (0-255) ++ */ ++- void rgb(uint8_t red, uint8_t green, uint8_t blue) {} +++ void rgb(uint8_t red, uint8_t green, uint8_t blue) +++ { +++ (void)red; (void)green; (void)blue; +++ } ++ ++ /** ++ * Called at each RGB color value of a property with alpha transparency ++@@ -83,7 +113,10 @@ public: ++ * @param blue value of blue (0-255) ++ * @param alpha alpha transparency value ++ */ ++- void rgba(uint8_t red, uint8_t green, uint8_t blue, double alpha) {} +++ void rgba(uint8_t red, uint8_t green, uint8_t blue, double alpha) +++ { +++ (void)red; (void)green; (void)blue; (void)alpha; +++ } ++ ++ /** ++ * Called at each HSL color value of a property. ++@@ -92,7 +125,10 @@ public: ++ * @param sat saturation ++ * @param light lightness ++ */ ++- void hsl(uint8_t hue, uint8_t sat, uint8_t light) {} +++ void hsl(uint8_t hue, uint8_t sat, uint8_t light) +++ { +++ (void)hue; (void)sat; (void)light; +++ } ++ ++ /** ++ * Called at each HSL color value of a property with alpha transparency ++@@ -103,7 +139,10 @@ public: ++ * @param light lightness ++ * @param alpha alpha value ++ */ ++- void hsla(uint8_t hue, uint8_t sat, uint8_t light, double alpha) {} +++ void hsla(uint8_t hue, uint8_t sat, uint8_t light, double alpha) +++ { +++ (void)hue; (void)sat; (void)light; (void)alpha; +++ } ++ ++ /** ++ * Called at each URL value of a property. ++@@ -111,7 +150,10 @@ public: ++ * @param p pointer to the char-array containing the URL value string. ++ * @param n length of the URL value string. ++ */ ++- void url(const char* p, size_t n) {} +++ void url(const char* p, size_t n) +++ { +++ (void)p; (void)n; +++ } ++ ++ /** ++ * Called when the parsing begins. ++diff --git a/include/orcus/csv_parser.hpp b/include/orcus/csv_parser.hpp ++index a873b0f2..27b4f924 100644 ++--- a/include/orcus/csv_parser.hpp +++++ b/include/orcus/csv_parser.hpp ++@@ -47,7 +47,10 @@ public: ++ * the text content is guaranteed to be valid so long as ++ * the original CSV stream content is valid. ++ */ ++- void cell(const char* p, size_t n, bool transient) {} +++ void cell(const char* p, size_t n, bool transient) +++ { +++ (void)p; (void)n; (void)transient; +++ } ++ }; ++ ++ template ++diff --git a/include/orcus/json_parser.hpp b/include/orcus/json_parser.hpp ++index 51a3d7cc..ef22b3a8 100644 ++--- a/include/orcus/json_parser.hpp +++++ b/include/orcus/json_parser.hpp ++@@ -54,7 +54,10 @@ public: ++ * pointer points to somewhere in the JSON stream being ++ * parsed. ++ */ ++- void object_key(const char* p, size_t len, bool transient) {} +++ void object_key(const char* p, size_t len, bool transient) +++ { +++ (void)p; (void)len; (void)transient; +++ } ++ ++ /** ++ * Called when the closing curly brace of an object is encountered. ++@@ -87,14 +90,20 @@ public: ++ * pointer points to somewhere in the JSON stream being ++ * parsed. ++ */ ++- void string(const char* p, size_t len, bool transient) {} +++ void string(const char* p, size_t len, bool transient) +++ { +++ (void)p; (void)len; (void)transient; +++ } ++ ++ /** ++ * Called when a numeric value is encountered. ++ * ++ * @param val numeric value. ++ */ ++- void number(double val) {} +++ void number(double val) +++ { +++ (void)val; +++ } ++ }; ++ ++ /** ++diff --git a/include/orcus/sax_parser.hpp b/include/orcus/sax_parser.hpp ++index 73c17d06..3b21bfdf 100644 ++--- a/include/orcus/sax_parser.hpp +++++ b/include/orcus/sax_parser.hpp ++@@ -30,7 +30,10 @@ public: ++ * ++ * @param param struct containing doctype declaration data. ++ */ ++- void doctype(const orcus::sax::doctype_declaration& param) {} +++ void doctype(const orcus::sax::doctype_declaration& param) +++ { +++ (void)param; +++ } ++ ++ /** ++ * Called when <?... is encountered, where the '...' may be an ++@@ -39,28 +42,40 @@ public: ++ * ++ * @param decl name of the identifier. ++ */ ++- void start_declaration(const orcus::pstring& decl) {} +++ void start_declaration(const orcus::pstring& decl) +++ { +++ (void)decl; +++ } ++ ++ /** ++ * Called when the closing tag (>) of a <?... ?> is encountered. ++ * ++ * @param decl name of the identifier. ++ */ ++- void end_declaration(const orcus::pstring& decl) {} +++ void end_declaration(const orcus::pstring& decl) +++ { +++ (void)decl; +++ } ++ ++ /** ++ * Called at the start of each element. ++ * ++ * @param elem information of the element being parsed. ++ */ ++- void start_element(const orcus::sax::parser_element& elem) {} +++ void start_element(const orcus::sax::parser_element& elem) +++ { +++ (void)elem; +++ } ++ ++ /** ++ * Called at the end of each element. ++ * ++ * @param elem information of the element being parsed. ++ */ ++- void end_element(const orcus::sax::parser_element& elem) {} +++ void end_element(const orcus::sax::parser_element& elem) +++ { +++ (void)elem; +++ } ++ ++ /** ++ * Called when a segment of a text content is parsed. Each text content ++@@ -76,7 +91,10 @@ public: ++ * a non-text value or be interned within the scope of ++ * the callback. ++ */ ++- void characters(const orcus::pstring& val, bool transient) {} +++ void characters(const orcus::pstring& val, bool transient) +++ { +++ (void)val; (void)transient; +++ } ++ ++ /** ++ * Called upon parsing of an attribute of an element. Note that when ++@@ -86,7 +104,10 @@ public: ++ * ++ * @param attr struct containing attribute information. ++ */ ++- void attribute(const orcus::sax::parser_attribute& attr) {} +++ void attribute(const orcus::sax::parser_attribute& attr) +++ { +++ (void)attr; +++ } ++ }; ++ ++ /** ++diff --git a/include/orcus/sax_token_parser.hpp b/include/orcus/sax_token_parser.hpp ++index 1452bc27..6b1b1de4 100644 ++--- a/include/orcus/sax_token_parser.hpp +++++ b/include/orcus/sax_token_parser.hpp ++@@ -71,7 +71,10 @@ public: ++ * ++ * @param decl struct containing the attributes of the XML declaration. ++ */ ++- void declaration(const orcus::xml_declaration_t& decl) {} +++ void declaration(const orcus::xml_declaration_t& decl) +++ { +++ (void)decl; +++ } ++ ++ /** ++ * Called at the start of each element. ++@@ -79,7 +82,10 @@ public: ++ * @param elem struct containing the element's information as well as all ++ * the attributes that belong to the element. ++ */ ++- void start_element(const orcus::xml_token_element_t& elem) {} +++ void start_element(const orcus::xml_token_element_t& elem) +++ { +++ (void)elem; +++ } ++ ++ /** ++ * Called at the end of each element. ++@@ -87,7 +93,10 @@ public: ++ * @param elem struct containing the element's information as well as all ++ * the attributes that belong to the element. ++ */ ++- void end_element(const orcus::xml_token_element_t& elem) {} +++ void end_element(const orcus::xml_token_element_t& elem) +++ { +++ (void)elem; +++ } ++ ++ /** ++ * Called when a segment of a text content is parsed. Each text content ++@@ -103,7 +112,10 @@ public: ++ * a non-text value or be interned within the scope of ++ * the callback. ++ */ ++- void characters(const orcus::pstring& val, bool transient) {} +++ void characters(const orcus::pstring& val, bool transient) +++ { +++ (void)val; (void)transient; +++ } ++ }; ++ ++ /** ++diff --git a/include/orcus/yaml_parser.hpp b/include/orcus/yaml_parser.hpp ++index 797ebbec..8d16fbc7 100644 ++--- a/include/orcus/yaml_parser.hpp +++++ b/include/orcus/yaml_parser.hpp ++@@ -72,14 +72,20 @@ public: ++ * @param p pointer to the first character of the string value. ++ * @param len length of the string value. ++ */ ++- void string(const char* p, size_t n) {} +++ void string(const char* p, size_t n) +++ { +++ (void)p; (void)n; +++ } ++ ++ /** ++ * Called when a numeric value is encountered. ++ * ++ * @param val numeric value. ++ */ ++- void number(double val) {} +++ void number(double val) +++ { +++ (void)val; +++ } ++ ++ /** ++ * Called when a boolean 'true' keyword is encountered. ++-- ++2.25.1 ++ +diff --git a/external/liborcus/ExternalPackage_liborcus.mk b/external/liborcus/ExternalPackage_liborcus.mk +index 21dd1bfb1ce5..747691809d2e 100644 +--- a/external/liborcus/ExternalPackage_liborcus.mk ++++ b/external/liborcus/ExternalPackage_liborcus.mk +@@ -12,11 +12,11 @@ $(eval $(call gb_ExternalPackage_ExternalPackage,liborcus,liborcus)) + $(eval $(call gb_ExternalPackage_use_external_project,liborcus,liborcus)) + + ifeq ($(OS),MACOSX) +-$(eval $(call gb_ExternalPackage_add_file,liborcus,$(LIBO_LIB_FOLDER)/liborcus-0.15.0.dylib,src/liborcus/.libs/liborcus-0.15.0.dylib)) +-$(eval $(call gb_ExternalPackage_add_file,liborcus,$(LIBO_LIB_FOLDER)/liborcus-parser-0.15.0.dylib,src/parser/.libs/liborcus-parser-0.15.0.dylib)) ++$(eval $(call gb_ExternalPackage_add_file,liborcus,$(LIBO_LIB_FOLDER)/liborcus-0.16.0.dylib,src/liborcus/.libs/liborcus-0.16.0.dylib)) ++$(eval $(call gb_ExternalPackage_add_file,liborcus,$(LIBO_LIB_FOLDER)/liborcus-parser-0.16.0.dylib,src/parser/.libs/liborcus-parser-0.16.0.dylib)) + else ifeq ($(DISABLE_DYNLOADING),) +-$(eval $(call gb_ExternalPackage_add_file,liborcus,$(LIBO_LIB_FOLDER)/liborcus-0.15.so.0,src/liborcus/.libs/liborcus-0.15.so.0.0.0)) +-$(eval $(call gb_ExternalPackage_add_file,liborcus,$(LIBO_LIB_FOLDER)/liborcus-parser-0.15.so.0,src/parser/.libs/liborcus-parser-0.15.so.0.0.0)) ++$(eval $(call gb_ExternalPackage_add_file,liborcus,$(LIBO_LIB_FOLDER)/liborcus-0.16.so.0,src/liborcus/.libs/liborcus-0.16.so.0.0.0)) ++$(eval $(call gb_ExternalPackage_add_file,liborcus,$(LIBO_LIB_FOLDER)/liborcus-parser-0.16.so.0,src/parser/.libs/liborcus-parser-0.16.so.0.0.0)) + endif + + # vim: set noet sw=4 ts=4: +diff --git a/external/liborcus/ExternalProject_liborcus.mk b/external/liborcus/ExternalProject_liborcus.mk +index 136fa538397e..c2a8cdcbe4a3 100644 +--- a/external/liborcus/ExternalProject_liborcus.mk ++++ b/external/liborcus/ExternalProject_liborcus.mk +@@ -123,8 +123,8 @@ $(call gb_ExternalProject_get_state_target,liborcus,build) : + $(MAKE) \ + $(if $(filter MACOSX,$(OS)),\ + && $(PERL) $(SRCDIR)/solenv/bin/macosx-change-install-names.pl shl OOO \ +- $(EXTERNAL_WORKDIR)/src/liborcus/.libs/liborcus-0.15.0.dylib \ +- $(EXTERNAL_WORKDIR)/src/parser/.libs/liborcus-parser-0.15.0.dylib \ ++ $(EXTERNAL_WORKDIR)/src/liborcus/.libs/liborcus-0.16.0.dylib \ ++ $(EXTERNAL_WORKDIR)/src/parser/.libs/liborcus-parser-0.16.0.dylib \ + ) \ + ) + $(call gb_Trace_EndRange,liborcus,EXTERNAL) +diff --git a/external/liborcus/Library_orcus-parser.mk b/external/liborcus/Library_orcus-parser.mk +index d3cbddbb8cec..4e46591b98fe 100644 +--- a/external/liborcus/Library_orcus-parser.mk ++++ b/external/liborcus/Library_orcus-parser.mk +@@ -63,6 +63,7 @@ $(eval $(call gb_Library_add_generated_exception_objects,orcus-parser,\ + UnpackedTarball/liborcus/src/parser/tokens \ + UnpackedTarball/liborcus/src/parser/types \ + UnpackedTarball/liborcus/src/parser/xml_namespace \ ++ UnpackedTarball/liborcus/src/parser/xml_writer \ + UnpackedTarball/liborcus/src/parser/yaml_parser_base \ + UnpackedTarball/liborcus/src/parser/zip_archive \ + UnpackedTarball/liborcus/src/parser/zip_archive_stream \ +diff --git a/external/liborcus/Library_orcus.mk b/external/liborcus/Library_orcus.mk +index ea99e7509fbf..0a0ca582882a 100644 +--- a/external/liborcus/Library_orcus.mk ++++ b/external/liborcus/Library_orcus.mk +@@ -85,6 +85,7 @@ $(eval $(call gb_Library_add_generated_exception_objects,orcus,\ + UnpackedTarball/liborcus/src/liborcus/odf_tokens \ + UnpackedTarball/liborcus/src/liborcus/ods_content_xml_context \ + UnpackedTarball/liborcus/src/liborcus/ods_content_xml_handler \ ++ UnpackedTarball/liborcus/src/liborcus/ods_dde_links_context \ + UnpackedTarball/liborcus/src/liborcus/ods_session_data \ + UnpackedTarball/liborcus/src/liborcus/ooxml_content_types \ + UnpackedTarball/liborcus/src/liborcus/ooxml_global \ +@@ -103,6 +104,7 @@ $(eval $(call gb_Library_add_generated_exception_objects,orcus,\ + UnpackedTarball/liborcus/src/liborcus/orcus_xls_xml \ + UnpackedTarball/liborcus/src/liborcus/orcus_xlsx \ + UnpackedTarball/liborcus/src/liborcus/orcus_xml \ ++ UnpackedTarball/liborcus/src/liborcus/orcus_xml_impl \ + UnpackedTarball/liborcus/src/liborcus/orcus_xml_map_def \ + UnpackedTarball/liborcus/src/liborcus/session_context \ + UnpackedTarball/liborcus/src/liborcus/spreadsheet_iface_util \ +@@ -134,7 +136,9 @@ $(eval $(call gb_Library_add_generated_exception_objects,orcus,\ + UnpackedTarball/liborcus/src/liborcus/xml_simple_stream_handler \ + UnpackedTarball/liborcus/src/liborcus/xml_stream_handler \ + UnpackedTarball/liborcus/src/liborcus/xml_stream_parser \ ++ UnpackedTarball/liborcus/src/liborcus/xml_structure_mapper \ + UnpackedTarball/liborcus/src/liborcus/xml_structure_tree \ ++ UnpackedTarball/liborcus/src/liborcus/xpath_parser \ + UnpackedTarball/liborcus/src/liborcus/yaml_document_tree \ + )) + +diff --git a/external/liborcus/UnpackedTarball_liborcus.mk b/external/liborcus/UnpackedTarball_liborcus.mk +index e5e33b0b1249..4736dbccab4b 100644 +--- a/external/liborcus/UnpackedTarball_liborcus.mk ++++ b/external/liborcus/UnpackedTarball_liborcus.mk +@@ -20,6 +20,7 @@ $(eval $(call gb_UnpackedTarball_add_patches,liborcus,\ + external/liborcus/gcc9.patch.0 \ + external/liborcus/libtool.patch.0 \ + external/liborcus/fix-pch.patch.0 \ ++ external/liborcus/0001-Mark-all-untentionally-unused-variables.patch \ + )) + + ifeq ($(OS),WNT) +diff --git a/external/liborcus/libtool.patch.0 b/external/liborcus/libtool.patch.0 +index aa6ffa908ec3..663dbd8099d7 100644 +--- a/external/liborcus/libtool.patch.0 ++++ b/external/liborcus/libtool.patch.0 +@@ -1,11 +1,11 @@ +---- ltmain.sh.sav 2018-09-14 23:47:13.000000000 +0200 +-+++ ltmain.sh 2019-05-05 23:11:30.406904472 +0200 +-@@ -7278,7 +7278,7 @@ func_mode_link () ++--- ltmain.sh.orig 2020-09-09 21:20:23.069433984 -0400 +++++ ltmain.sh 2020-09-09 21:27:13.168073996 -0400 ++@@ -7373,7 +7373,7 @@ + -64|-mips[0-9]|-r[0-9][0-9]*|-xarch=*|-xtarget=*|+DA*|+DD*|-q*|-m*| \ + -t[45]*|-txscale*|-p|-pg|--coverage|-fprofile-*|-F*|@*|-tp=*|--sysroot=*| \ + -O*|-g*|-flto*|-fwhopr*|-fuse-linker-plugin|-fstack-protector*|-stdlib=*| \ +-- -specs=*|-fsanitize=*) +-+ -specs=*|-fsanitize=*|-fuse-ld=*) ++- -specs=*|-fsanitize=*|-fuse-ld=*|-static-*|-fcilkplus) +++ -specs=*|-fsanitize=*|-fuse-ld=*|-static-*|-fcilkplus) + func_quote_for_eval "$arg" + arg=$func_quote_for_eval_result + func_append compile_command " $arg" +diff --git a/external/liborcus/windows-constants-hack.patch b/external/liborcus/windows-constants-hack.patch +index 876bc1688a31..51aabfa1fb47 100644 +--- a/external/liborcus/windows-constants-hack.patch ++++ b/external/liborcus/windows-constants-hack.patch +@@ -8,7 +8,7 @@ index ae571f5..539ce18 100644 + + -#include "constants.inl" + +#define ORCUS_MAJOR_VERSION 0 +-+#define ORCUS_MINOR_VERSION 11 +++#define ORCUS_MINOR_VERSION 16 + +#define ORCUS_MICRO_VERSION 0 + + namespace orcus { +diff --git a/sc/source/filter/inc/orcusinterface.hxx b/sc/source/filter/inc/orcusinterface.hxx +index b298c711d234..00aea6764957 100644 +--- a/sc/source/filter/inc/orcusinterface.hxx ++++ b/sc/source/filter/inc/orcusinterface.hxx +@@ -62,6 +62,11 @@ public: + { + return mnTextEncoding; + } ++ ++ ScDocumentImport& getDoc() const ++ { ++ return mrDoc; ++ } + }; + + class ScOrcusRefResolver : public orcus::spreadsheet::iface::import_reference_resolver +@@ -71,20 +76,28 @@ class ScOrcusRefResolver : public orcus::spreadsheet::iface::import_reference_re + public: + ScOrcusRefResolver( const ScOrcusGlobalSettings& rGS ); + +- orcus::spreadsheet::address_t resolve_address(const char* p, size_t n) override; +- orcus::spreadsheet::range_t resolve_range(const char* p, size_t n) override; ++ orcus::spreadsheet::src_address_t resolve_address(const char* p, size_t n) override; ++ orcus::spreadsheet::src_range_t resolve_range(const char* p, size_t n) override; + }; + + class ScOrcusNamedExpression : public orcus::spreadsheet::iface::import_named_expression + { + ScDocumentImport& mrDoc; + const ScOrcusGlobalSettings& mrGlobalSettings; +- SCTAB mnTab; //< negative if global, else >= 0 for sheet-local named expressions. ++ ScAddress maBasePos; ++ OUString maName; ++ OUString maExpr; ++ const SCTAB mnTab; //< negative if global, else >= 0 for sheet-local named expressions. + + public: + ScOrcusNamedExpression( ScDocumentImport& rDoc, const ScOrcusGlobalSettings& rGS, SCTAB nTab = -1 ); + +- virtual void define_name(const char* p_name, size_t n_name, const char* p_exp, size_t n_exp) override; ++ void reset(); ++ ++ virtual void set_base_position(const orcus::spreadsheet::src_address_t& pos) override; ++ virtual void set_named_expression(const char* p_name, size_t n_name, const char* p_exp, size_t n_exp) override; ++ virtual void set_named_range(const char* p_name, size_t n_name, const char* p_range, size_t n_range) override; ++ virtual void commit() override; + }; + + class ScOrcusSharedStrings : public orcus::spreadsheet::iface::import_shared_strings +diff --git a/sc/source/filter/orcus/interface.cxx b/sc/source/filter/orcus/interface.cxx +index 220f7ce057f9..aa96eb21d405 100644 +--- a/sc/source/filter/orcus/interface.cxx ++++ b/sc/source/filter/orcus/interface.cxx +@@ -46,6 +46,7 @@ + #include + + #include ++#include + + using namespace com::sun::star; + +@@ -158,51 +159,54 @@ orcus::spreadsheet::formula_grammar_t ScOrcusGlobalSettings::get_default_formula + ScOrcusRefResolver::ScOrcusRefResolver( const ScOrcusGlobalSettings& rGS ) : + mrGlobalSettings(rGS) {} + +-os::address_t ScOrcusRefResolver::resolve_address(const char* p, size_t n) ++os::src_address_t ScOrcusRefResolver::resolve_address(const char* p, size_t n) + { + OUString aStr(p, n, mrGlobalSettings.getTextEncoding()); + + ScAddress aAddr; +- aAddr.Parse(aStr, nullptr, ++ aAddr.Parse(aStr, &mrGlobalSettings.getDoc().getDoc(), + formula::FormulaGrammar::extractRefConvention( + mrGlobalSettings.getCalcGrammar())); + +- os::address_t ret; +- ret.column = 0; +- ret.row = 0; +- +- if (aAddr.IsValid()) ++ if (!aAddr.IsValid()) + { +- ret.column = aAddr.Col(); +- ret.row = aAddr.Row(); ++ std::ostringstream os; ++ os << "'" << std::string(p, n) << "' is not a valid address expression."; ++ throw orcus::invalid_arg_error(os.str()); + } + ++ os::src_address_t ret; ++ ret.sheet = aAddr.Tab(); ++ ret.column = aAddr.Col(); ++ ret.row = aAddr.Row(); ++ + return ret; + } + +-os::range_t ScOrcusRefResolver::resolve_range(const char* p, size_t n) ++os::src_range_t ScOrcusRefResolver::resolve_range(const char* p, size_t n) + { + OUString aStr(p, n, mrGlobalSettings.getTextEncoding()); + + ScRange aRange; +- aRange.Parse(aStr, nullptr, ++ aRange.Parse(aStr, &mrGlobalSettings.getDoc().getDoc(), + formula::FormulaGrammar::extractRefConvention( + mrGlobalSettings.getCalcGrammar())); + +- os::range_t ret; +- ret.first.column = 0; +- ret.first.row = 0; +- ret.last.column = 0; +- ret.last.row = 0; +- +- if (aRange.IsValid()) ++ if (!aRange.IsValid()) + { +- ret.first.column = aRange.aStart.Col(); +- ret.first.row = aRange.aStart.Row(); +- ret.last.column = aRange.aEnd.Col(); +- ret.last.row = aRange.aEnd.Row(); ++ std::ostringstream os; ++ os << "'" << std::string(p, n) << "' is not a valid range expression."; ++ throw orcus::invalid_arg_error(os.str()); + } + ++ os::src_range_t ret; ++ ret.first.sheet = aRange.aStart.Tab(); ++ ret.first.column = aRange.aStart.Col(); ++ ret.first.row = aRange.aStart.Row(); ++ ret.last.sheet = aRange.aEnd.Tab(); ++ ret.last.column = aRange.aEnd.Col(); ++ ret.last.row = aRange.aEnd.Row(); ++ + return ret; + } + +@@ -210,20 +214,46 @@ ScOrcusNamedExpression::ScOrcusNamedExpression( + ScDocumentImport& rDoc, const ScOrcusGlobalSettings& rGS, SCTAB nTab ) : + mrDoc(rDoc), mrGlobalSettings(rGS), mnTab(nTab) {} + +-void ScOrcusNamedExpression::define_name(const char* p_name, size_t n_name, const char* p_exp, size_t n_exp) ++void ScOrcusNamedExpression::reset() ++{ ++ maBasePos.SetTab(0); ++ maBasePos.SetCol(0); ++ maBasePos.SetRow(0); ++ maName.clear(); ++ maExpr.clear(); ++} ++ ++void ScOrcusNamedExpression::set_base_position(const orcus::spreadsheet::src_address_t& pos) ++{ ++ maBasePos.SetTab(pos.sheet); ++ maBasePos.SetCol(pos.column); ++ maBasePos.SetRow(pos.row); ++} ++ ++void ScOrcusNamedExpression::set_named_expression(const char* p_name, size_t n_name, const char* p_exp, size_t n_exp) ++{ ++ maName = OUString(p_name, n_name, mrGlobalSettings.getTextEncoding()); ++ maExpr = OUString(p_exp, n_exp, mrGlobalSettings.getTextEncoding()); ++} ++ ++void ScOrcusNamedExpression::set_named_range(const char* /*p_name*/, size_t /*n_name*/, const char* /*p_range*/, size_t /*n_range*/) + { +- OUString aName(p_name, n_name, mrGlobalSettings.getTextEncoding()); +- OUString aExpr(p_exp, n_exp, mrGlobalSettings.getTextEncoding()); ++ throw std::runtime_error("ScOrcusNamedExpression::set_named_range not implemented yet."); ++} + ++void ScOrcusNamedExpression::commit() ++{ + ScRangeName* pNames = mnTab >= 0 ? mrDoc.getDoc().GetRangeName(mnTab) : mrDoc.getDoc().GetRangeName(); + if (!pNames) + return; + + ScRangeData* pRange = new ScRangeData( +- &mrDoc.getDoc(), aName, aExpr, ScAddress(), ScRangeData::Type::Name, ++ &mrDoc.getDoc(), maName, maExpr, maBasePos, ScRangeData::Type::Name, + mrGlobalSettings.getCalcGrammar()); + + pNames->insert(pRange, false); ++ ++ reset(); // make sure to reset the state for the next run. + } + + ScOrcusFactory::CellStoreToken::CellStoreToken(const ScAddress& rPos, Type eType) +diff --git a/sc/source/filter/orcus/xmlcontext.cxx b/sc/source/filter/orcus/xmlcontext.cxx +index f886dd555a66..1f3ee58220a0 100644 +--- a/sc/source/filter/orcus/xmlcontext.cxx ++++ b/sc/source/filter/orcus/xmlcontext.cxx +@@ -89,10 +89,9 @@ void populateTree( + rTreeCtrl.set_image(*xEntry, rParam.maImgElementRepeat, -1); + } + +- orcus::xml_structure_tree::entity_names_type aNames; ++ orcus::xml_structure_tree::entity_names_type aNames = rWalker.get_attributes(); + + // Insert attributes. +- rWalker.get_attributes(aNames); + for (const orcus::xml_structure_tree::entity_name& rAttrName : aNames) + { + OUString sAttr(toString(rAttrName, rWalker)); +@@ -106,7 +105,7 @@ void populateTree( + rTreeCtrl.set_image(*xAttr, rParam.maImgAttribute, -1); + } + +- rWalker.get_children(aNames); ++ aNames = rWalker.get_children(); + + // Non-leaf if it has child elements, leaf otherwise. + rEntryData.mbLeafNode = aNames.empty(); +@@ -266,7 +265,7 @@ void ScOrcusXMLContextImpl::importXML(const ScOrcusImportXMLParam& rParam) + std::for_each(rLink.maFieldPaths.begin(), rLink.maFieldPaths.end(), + [&filter](const OString& rFieldPath) + { +- filter.append_field_link(rFieldPath.getStr()); ++ filter.append_field_link(rFieldPath.getStr(), orcus::pstring()); + } + ); + +diff --git a/sc/source/ui/xmlsource/xmlsourcedlg.cxx b/sc/source/ui/xmlsource/xmlsourcedlg.cxx +index 1eb2e4b06077..167ecae315ae 100644 +--- a/sc/source/ui/xmlsource/xmlsourcedlg.cxx ++++ b/sc/source/ui/xmlsource/xmlsourcedlg.cxx +@@ -49,8 +49,12 @@ OUString getXPath( + if (pData) + rNamespaces.push_back(pData->mnNamespaceID); + ++ // element separator is '/' whereas attribute separator is '/@' in xpath. + aBuf.insert(0, rTree.get_text(*xEntry, 0)); +- aBuf.insert(0, isAttribute(rTree, *xEntry) ? '@' : '/'); ++ if (isAttribute(rTree, *xEntry)) ++ aBuf.insert(0, "/@"); ++ else ++ aBuf.insert(0, '/'); + } + while (rTree.iter_parent(*xEntry)); + +-- +cgit v1.2.1 + +From 1821dde6601193cc0ddf87fc020de708544d9700 Mon Sep 17 00:00:00 2001 +From: Kohei Yoshida +Date: Mon, 28 Sep 2020 16:19:54 -0400 +Subject: Update liborcus to 0.16.1. + +Change-Id: I27e87278545c1d41381b1ab8a49f6f6a07681bfb +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/103590 +Tested-by: Jenkins +Reviewed-by: Kohei Yoshida +--- + download.lst | 4 +- + ...1-Mark-all-untentionally-unused-variables.patch | 376 --------------------- + external/liborcus/UnpackedTarball_liborcus.mk | 1 - + 3 files changed, 2 insertions(+), 379 deletions(-) + delete mode 100644 external/liborcus/0001-Mark-all-untentionally-unused-variables.patch + +diff --git a/download.lst b/download.lst +index a4782bb2b9ef..48af3c5e9198 100644 +--- a/download.lst ++++ b/download.lst +@@ -206,8 +206,8 @@ export OPENLDAP_SHA256SUM := cdd6cffdebcd95161a73305ec13fc7a78e9707b46ca9f84fb89 + export OPENLDAP_TARBALL := openldap-2.4.45.tgz + export OPENSSL_SHA256SUM := 14cb464efe7ac6b54799b34456bd69558a749a4931ecfd9cf9f71d7881cac7bc + export OPENSSL_TARBALL := openssl-1.0.2t.tar.gz +-export ORCUS_SHA256SUM := 854c6ec167ace59baa2984e175bac7b5b2af91bfde4bb10d2088b87a51ed76ec +-export ORCUS_TARBALL := liborcus-0.16.0.tar.bz2 ++export ORCUS_SHA256SUM := c700d1325f744104d9fca0d5a019434901e9d51a16eedfb05792f90a298587a4 ++export ORCUS_TARBALL := liborcus-0.16.1.tar.bz2 + export OWNCLOUD_ANDROID_LIB_SHA256SUM := b18b3e3ef7fae6a79b62f2bb43cc47a5346b6330f6a383dc4be34439aca5e9fb + export OWNCLOUD_ANDROID_LIB_TARBALL := owncloud-android-library-0.9.4-no-binary-deps.tar.gz + export PAGEMAKER_SHA256SUM := 66adacd705a7d19895e08eac46d1e851332adf2e736c566bef1164e7a442519d +diff --git a/external/liborcus/0001-Mark-all-untentionally-unused-variables.patch b/external/liborcus/0001-Mark-all-untentionally-unused-variables.patch +deleted file mode 100644 +index b0f6a572aff7..000000000000 +--- a/external/liborcus/0001-Mark-all-untentionally-unused-variables.patch ++++ /dev/null +@@ -1,376 +0,0 @@ +-From 6d34c41b661a9e8dddf6d08bf1f3c1fd4f5581da Mon Sep 17 00:00:00 2001 +-From: Kohei Yoshida +-Date: Fri, 11 Sep 2020 21:39:09 -0400 +-Subject: [PATCH] Mark all untentionally unused variables. +- +---- +- include/orcus/css_parser.hpp | 70 ++++++++++++++++++++++++------ +- include/orcus/csv_parser.hpp | 5 ++- +- include/orcus/json_parser.hpp | 15 +++++-- +- include/orcus/sax_parser.hpp | 35 ++++++++++++--- +- include/orcus/sax_token_parser.hpp | 20 +++++++-- +- include/orcus/yaml_parser.hpp | 10 ++++- +- 6 files changed, 124 insertions(+), 31 deletions(-) +- +-diff --git a/include/orcus/css_parser.hpp b/include/orcus/css_parser.hpp +-index cdfae5e0..3e96980b 100644 +---- a/include/orcus/css_parser.hpp +-+++ b/include/orcus/css_parser.hpp +-@@ -31,23 +31,44 @@ namespace orcus { +- class css_handler +- { +- public: +-- void at_rule_name(const char* p, size_t n) {} +-+ void at_rule_name(const char* p, size_t n) +-+ { +-+ (void)p; (void)n; +-+ } +- +-- void simple_selector_type(const char* p, size_t n) {} +-+ void simple_selector_type(const char* p, size_t n) +-+ { +-+ (void)p; (void)n; +-+ } +- +-- void simple_selector_class(const char* p, size_t n) {} +-+ void simple_selector_class(const char* p, size_t n) +-+ { +-+ (void)p; (void)n; +-+ } +- +-- void simple_selector_pseudo_element(orcus::css::pseudo_element_t pe) {} +-+ void simple_selector_pseudo_element(orcus::css::pseudo_element_t pe) +-+ { +-+ (void)pe; +-+ } +- +-- void simple_selector_pseudo_class(orcus::css::pseudo_class_t pc) {} +-+ void simple_selector_pseudo_class(orcus::css::pseudo_class_t pc) +-+ { +-+ (void)pc; +-+ } +- +-- void simple_selector_id(const char* p, size_t n) {} +-+ void simple_selector_id(const char* p, size_t n) +-+ { +-+ (void)p; (void)n; +-+ } +- +- void end_simple_selector() {} +- +- void end_selector() {} +- +-- void combinator(orcus::css::combinator_t combinator) {} +-+ void combinator(orcus::css::combinator_t combinator) +-+ { +-+ (void)combinator; +-+ } +- +- /** +- * Called at each property name. +-@@ -55,7 +76,10 @@ public: +- * @param p pointer to the char-array containing the property name string. +- * @param n length of the property name string. +- */ +-- void property_name(const char* p, size_t n) {} +-+ void property_name(const char* p, size_t n) +-+ { +-+ (void)p; (void)n; +-+ } +- +- /** +- * Called at each ordinary property value string. +-@@ -63,7 +87,10 @@ public: +- * @param p pointer to the char-array containing the value string. +- * @param n length of the value string. +- */ +-- void value(const char* p, size_t n) {} +-+ void value(const char* p, size_t n) +-+ { +-+ (void)p; (void)n; +-+ } +- +- /** +- * Called at each RGB color value of a property. +-@@ -72,7 +99,10 @@ public: +- * @param green value of green (0-255) +- * @param blue value of blue (0-255) +- */ +-- void rgb(uint8_t red, uint8_t green, uint8_t blue) {} +-+ void rgb(uint8_t red, uint8_t green, uint8_t blue) +-+ { +-+ (void)red; (void)green; (void)blue; +-+ } +- +- /** +- * Called at each RGB color value of a property with alpha transparency +-@@ -83,7 +113,10 @@ public: +- * @param blue value of blue (0-255) +- * @param alpha alpha transparency value +- */ +-- void rgba(uint8_t red, uint8_t green, uint8_t blue, double alpha) {} +-+ void rgba(uint8_t red, uint8_t green, uint8_t blue, double alpha) +-+ { +-+ (void)red; (void)green; (void)blue; (void)alpha; +-+ } +- +- /** +- * Called at each HSL color value of a property. +-@@ -92,7 +125,10 @@ public: +- * @param sat saturation +- * @param light lightness +- */ +-- void hsl(uint8_t hue, uint8_t sat, uint8_t light) {} +-+ void hsl(uint8_t hue, uint8_t sat, uint8_t light) +-+ { +-+ (void)hue; (void)sat; (void)light; +-+ } +- +- /** +- * Called at each HSL color value of a property with alpha transparency +-@@ -103,7 +139,10 @@ public: +- * @param light lightness +- * @param alpha alpha value +- */ +-- void hsla(uint8_t hue, uint8_t sat, uint8_t light, double alpha) {} +-+ void hsla(uint8_t hue, uint8_t sat, uint8_t light, double alpha) +-+ { +-+ (void)hue; (void)sat; (void)light; (void)alpha; +-+ } +- +- /** +- * Called at each URL value of a property. +-@@ -111,7 +150,10 @@ public: +- * @param p pointer to the char-array containing the URL value string. +- * @param n length of the URL value string. +- */ +-- void url(const char* p, size_t n) {} +-+ void url(const char* p, size_t n) +-+ { +-+ (void)p; (void)n; +-+ } +- +- /** +- * Called when the parsing begins. +-diff --git a/include/orcus/csv_parser.hpp b/include/orcus/csv_parser.hpp +-index a873b0f2..27b4f924 100644 +---- a/include/orcus/csv_parser.hpp +-+++ b/include/orcus/csv_parser.hpp +-@@ -47,7 +47,10 @@ public: +- * the text content is guaranteed to be valid so long as +- * the original CSV stream content is valid. +- */ +-- void cell(const char* p, size_t n, bool transient) {} +-+ void cell(const char* p, size_t n, bool transient) +-+ { +-+ (void)p; (void)n; (void)transient; +-+ } +- }; +- +- template +-diff --git a/include/orcus/json_parser.hpp b/include/orcus/json_parser.hpp +-index 51a3d7cc..ef22b3a8 100644 +---- a/include/orcus/json_parser.hpp +-+++ b/include/orcus/json_parser.hpp +-@@ -54,7 +54,10 @@ public: +- * pointer points to somewhere in the JSON stream being +- * parsed. +- */ +-- void object_key(const char* p, size_t len, bool transient) {} +-+ void object_key(const char* p, size_t len, bool transient) +-+ { +-+ (void)p; (void)len; (void)transient; +-+ } +- +- /** +- * Called when the closing curly brace of an object is encountered. +-@@ -87,14 +90,20 @@ public: +- * pointer points to somewhere in the JSON stream being +- * parsed. +- */ +-- void string(const char* p, size_t len, bool transient) {} +-+ void string(const char* p, size_t len, bool transient) +-+ { +-+ (void)p; (void)len; (void)transient; +-+ } +- +- /** +- * Called when a numeric value is encountered. +- * +- * @param val numeric value. +- */ +-- void number(double val) {} +-+ void number(double val) +-+ { +-+ (void)val; +-+ } +- }; +- +- /** +-diff --git a/include/orcus/sax_parser.hpp b/include/orcus/sax_parser.hpp +-index 73c17d06..3b21bfdf 100644 +---- a/include/orcus/sax_parser.hpp +-+++ b/include/orcus/sax_parser.hpp +-@@ -30,7 +30,10 @@ public: +- * +- * @param param struct containing doctype declaration data. +- */ +-- void doctype(const orcus::sax::doctype_declaration& param) {} +-+ void doctype(const orcus::sax::doctype_declaration& param) +-+ { +-+ (void)param; +-+ } +- +- /** +- * Called when <?... is encountered, where the '...' may be an +-@@ -39,28 +42,40 @@ public: +- * +- * @param decl name of the identifier. +- */ +-- void start_declaration(const orcus::pstring& decl) {} +-+ void start_declaration(const orcus::pstring& decl) +-+ { +-+ (void)decl; +-+ } +- +- /** +- * Called when the closing tag (>) of a <?... ?> is encountered. +- * +- * @param decl name of the identifier. +- */ +-- void end_declaration(const orcus::pstring& decl) {} +-+ void end_declaration(const orcus::pstring& decl) +-+ { +-+ (void)decl; +-+ } +- +- /** +- * Called at the start of each element. +- * +- * @param elem information of the element being parsed. +- */ +-- void start_element(const orcus::sax::parser_element& elem) {} +-+ void start_element(const orcus::sax::parser_element& elem) +-+ { +-+ (void)elem; +-+ } +- +- /** +- * Called at the end of each element. +- * +- * @param elem information of the element being parsed. +- */ +-- void end_element(const orcus::sax::parser_element& elem) {} +-+ void end_element(const orcus::sax::parser_element& elem) +-+ { +-+ (void)elem; +-+ } +- +- /** +- * Called when a segment of a text content is parsed. Each text content +-@@ -76,7 +91,10 @@ public: +- * a non-text value or be interned within the scope of +- * the callback. +- */ +-- void characters(const orcus::pstring& val, bool transient) {} +-+ void characters(const orcus::pstring& val, bool transient) +-+ { +-+ (void)val; (void)transient; +-+ } +- +- /** +- * Called upon parsing of an attribute of an element. Note that when +-@@ -86,7 +104,10 @@ public: +- * +- * @param attr struct containing attribute information. +- */ +-- void attribute(const orcus::sax::parser_attribute& attr) {} +-+ void attribute(const orcus::sax::parser_attribute& attr) +-+ { +-+ (void)attr; +-+ } +- }; +- +- /** +-diff --git a/include/orcus/sax_token_parser.hpp b/include/orcus/sax_token_parser.hpp +-index 1452bc27..6b1b1de4 100644 +---- a/include/orcus/sax_token_parser.hpp +-+++ b/include/orcus/sax_token_parser.hpp +-@@ -71,7 +71,10 @@ public: +- * +- * @param decl struct containing the attributes of the XML declaration. +- */ +-- void declaration(const orcus::xml_declaration_t& decl) {} +-+ void declaration(const orcus::xml_declaration_t& decl) +-+ { +-+ (void)decl; +-+ } +- +- /** +- * Called at the start of each element. +-@@ -79,7 +82,10 @@ public: +- * @param elem struct containing the element's information as well as all +- * the attributes that belong to the element. +- */ +-- void start_element(const orcus::xml_token_element_t& elem) {} +-+ void start_element(const orcus::xml_token_element_t& elem) +-+ { +-+ (void)elem; +-+ } +- +- /** +- * Called at the end of each element. +-@@ -87,7 +93,10 @@ public: +- * @param elem struct containing the element's information as well as all +- * the attributes that belong to the element. +- */ +-- void end_element(const orcus::xml_token_element_t& elem) {} +-+ void end_element(const orcus::xml_token_element_t& elem) +-+ { +-+ (void)elem; +-+ } +- +- /** +- * Called when a segment of a text content is parsed. Each text content +-@@ -103,7 +112,10 @@ public: +- * a non-text value or be interned within the scope of +- * the callback. +- */ +-- void characters(const orcus::pstring& val, bool transient) {} +-+ void characters(const orcus::pstring& val, bool transient) +-+ { +-+ (void)val; (void)transient; +-+ } +- }; +- +- /** +-diff --git a/include/orcus/yaml_parser.hpp b/include/orcus/yaml_parser.hpp +-index 797ebbec..8d16fbc7 100644 +---- a/include/orcus/yaml_parser.hpp +-+++ b/include/orcus/yaml_parser.hpp +-@@ -72,14 +72,20 @@ public: +- * @param p pointer to the first character of the string value. +- * @param len length of the string value. +- */ +-- void string(const char* p, size_t n) {} +-+ void string(const char* p, size_t n) +-+ { +-+ (void)p; (void)n; +-+ } +- +- /** +- * Called when a numeric value is encountered. +- * +- * @param val numeric value. +- */ +-- void number(double val) {} +-+ void number(double val) +-+ { +-+ (void)val; +-+ } +- +- /** +- * Called when a boolean 'true' keyword is encountered. +--- +-2.25.1 +- +diff --git a/external/liborcus/UnpackedTarball_liborcus.mk b/external/liborcus/UnpackedTarball_liborcus.mk +index 4736dbccab4b..e5e33b0b1249 100644 +--- a/external/liborcus/UnpackedTarball_liborcus.mk ++++ b/external/liborcus/UnpackedTarball_liborcus.mk +@@ -20,7 +20,6 @@ $(eval $(call gb_UnpackedTarball_add_patches,liborcus,\ + external/liborcus/gcc9.patch.0 \ + external/liborcus/libtool.patch.0 \ + external/liborcus/fix-pch.patch.0 \ +- external/liborcus/0001-Mark-all-untentionally-unused-variables.patch \ + )) + + ifeq ($(OS),WNT) +-- +cgit v1.2.1 + diff --git a/debian/patches/make-package-modules-not-suck.diff b/debian/patches/make-package-modules-not-suck.diff new file mode 100644 index 00000000000..2f29277ec58 --- /dev/null +++ b/debian/patches/make-package-modules-not-suck.diff @@ -0,0 +1,200 @@ +diff --git a/scp2/InstallModule_draw.mk b/scp2/InstallModule_draw.mk +index a7c02be..d48edf2 100644 +--- a/scp2/InstallModule_draw.mk ++++ b/scp2/InstallModule_draw.mk +@@ -10,6 +10,7 @@ + $(eval $(call gb_InstallModule_InstallModule,scp2/draw)) + + $(eval $(call gb_InstallModule_use_auto_install_libs,scp2/draw,\ ++ draw \ + draw_brand \ + )) + +diff --git a/scp2/source/draw/module_draw.scp b/scp2/source/draw/module_draw.scp +index 8737579..0913c61 100644 +--- a/scp2/source/draw/module_draw.scp ++++ b/scp2/source/draw/module_draw.scp +@@ -18,6 +18,7 @@ + + #include "macros.inc" + ++#include "AutoInstall/draw" + #include "AutoInstall/draw_brand" + + Module gid_Module_Prg_Draw +@@ -34,7 +35,8 @@ Module gid_Module_Prg_Draw_Bin + Sortkey = "100"; + Default = YES; + Styles = (HIDDEN_ROOT); +- Files = (gid_File_Extra_Urldesktop_Draw,gid_File_Extra_Urlnew_Draw,gid_File_Extra_Urlstart_Draw,gid_File_Extra_Urltasks_Draw, ++ Files = (auto_draw_ALL, ++ gid_File_Extra_Urldesktop_Draw,gid_File_Extra_Urlnew_Draw,gid_File_Extra_Urlstart_Draw,gid_File_Extra_Urltasks_Draw, + gid_File_Share_Registry_Draw_Xcd, + gid_File_Tmp_Userinstall_Draw_Inf); + End +diff --git a/scp2/AutoInstall.mk b/scp2/AutoInstall.mk +index 7d2a347..a15ac52 100644 +--- a/scp2/AutoInstall.mk ++++ b/scp2/AutoInstall.mk +@@ -17,6 +17,7 @@ $(eval $(call gb_AutoInstall_add_module,base_brand,,LIBO_EXECUTABLE,,PACKAGE_FIL + $(eval $(call gb_AutoInstall_add_module,brand,,LIBO_EXECUTABLE,,PACKAGE_FILELIST)) + $(eval $(call gb_AutoInstall_add_module,calc,LIBO_LIB_FILE,,,PACKAGE_FILELIST)) + $(eval $(call gb_AutoInstall_add_module,calc_brand,,LIBO_EXECUTABLE,,PACKAGE_FILELIST)) ++$(eval $(call gb_AutoInstall_add_module,draw,LIBO_LIB_FILE)) + $(eval $(call gb_AutoInstall_add_module,draw_brand,,LIBO_EXECUTABLE,,PACKAGE_FILELIST)) + $(eval $(call gb_AutoInstall_add_module,extensions_ct2n,,,,PACKAGE_FILELIST)) + $(eval $(call gb_AutoInstall_add_module,extensions_bsh,,,LIBO_JAR_FILE)) +diff --git a/Repository.mk b/Repository.mk +index 36b35b7a4262..25f202cb0983 100644 +--- a/Repository.mk ++++ b/Repository.mk +@@ -245,13 +245,29 @@ $(eval $(call gb_Helper_register_executables_for_install,UREBIN,ure,\ + + $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,base, \ + abp \ ++ calc \ ++ dba \ ++ dbahsql \ ++ $(call gb_Helper_optional,DBCONNECTIVITY, \ ++ dbase \ ++ dbaxml) \ + dbp \ + dbu \ ++ $(call gb_Helper_optional,DBCONNECTIVITY,flat) \ ++ $(if $(ENABLE_JAVA),jdbc) \ ++ $(call gb_Helper_optional,DBCONNECTIVITY,mysql_jdbc) \ ++ $(call gb_Helper_optional,MARIADBC,$(call gb_Helper_optional,DBCONNECTIVITY,mysqlc)) \ ++ odbc \ ++)) ++ ++$(eval $(call gb_Helper_register_libraries_for_install,PLAINLIBS_OOO,base, \ ++ $(call gb_Helper_optional,DBCONNECTIVITY,dbpool2) \ ++ $(if $(ENABLE_JAVA),hsqldb) \ ++ sdbc2 \ + )) + + $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,calc, \ + analysis \ +- $(call gb_Helper_optional,DBCONNECTIVITY,calc) \ + date \ + pricing \ + sc \ +@@ -263,6 +279,14 @@ $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,calc, \ + $(call gb_Helper_optional,SCRIPTING,vbaobj) \ + )) + ++$(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,draw, \ ++ animcore \ ++ sd \ ++ sdd \ ++ sdfilt \ ++ sdui \ ++)) ++ + $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,graphicfilter, \ + svgfilter \ + wpftdraw \ +@@ -271,10 +295,10 @@ $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,graphicfilter, \ + )) + + $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,impress, \ +- animcore \ + PresenterScreen \ + PresentationMinimizer \ + wpftimpress \ ++ slideshow \ + )) + + $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,onlineupdate, \ +@@ -349,11 +349,6 @@ $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,ooo, \ + configmgr \ + ctl \ + cui \ +- dba \ +- dbahsql \ +- $(call gb_Helper_optional,DBCONNECTIVITY, \ +- dbase \ +- dbaxml) \ + dbtools \ + deploymentmisc \ + $(if $(filter-out MACOSX WNT,$(OS)),desktopbe1) \ +@@ -366,7 +386,6 @@ $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,ooo, \ + evtatt \ + expwrap \ + $(call gb_Helper_optional,DBCONNECTIVITY, \ +- flat \ + file) \ + filterconfig \ + fps_office \ +@@ -387,7 +406,6 @@ $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,ooo, \ + gie \ + hyphen \ + icg \ +- $(if $(ENABLE_JAVA),jdbc) \ + $(if $(ENABLE_LDAP),ldapbe2) \ + $(if $(filter WNT,$(OS)),WinUserInfoBe) \ + localebe1 \ +@@ -403,10 +421,7 @@ $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,ooo, \ + msfilter \ + $(call gb_Helper_optional,SCRIPTING,msforms) \ + mtfrenderer \ +- $(call gb_Helper_optional,DBCONNECTIVITY,mysql_jdbc) \ +- $(call gb_Helper_optional,MARIADBC,$(call gb_Helper_optional,DBCONNECTIVITY,mysqlc)) \ + numbertext \ +- odbc \ + odfflatxml \ + offacc \ + oox \ +@@ -419,13 +434,8 @@ $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,ooo, \ + sb \ + $(call gb_Helper_optional,DBCONNECTIVITY,sdbt) \ + scn \ +- sd \ +- sdd \ +- sdfilt \ +- sdui \ + sfx \ + simplecanvas \ +- slideshow \ + sot \ + $(if $(filter-out iOS,$(OS)),spell) \ + $(if $(DISABLE_GUI),,spl) \ +@@ -437,7 +447,6 @@ $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,ooo, \ + svt \ + svx \ + svxcore \ +- sw \ + syssh \ + textconversiondlgs \ + textfd \ +@@ -522,6 +531,7 @@ $(eval $(call gb_Helper_register_libraries_for_install,OOOLIBS,writer, \ + hwp \ + $(if $(ENABLE_LWP),lwpft) \ + msword \ ++ sw \ + swd \ + swui \ + t602filter \ +@@ -600,14 +610,12 @@ $(eval $(call gb_Helper_register_libraries_for_install,PLAINLIBS_OOO,ooo, \ + cached1 \ + collator_data \ + comphelper \ +- $(call gb_Helper_optional,DBCONNECTIVITY,dbpool2) \ + $(call gb_Helper_optional,BREAKPAD,crashreport) \ + deployment \ + deploymentgui \ + dict_ja \ + dict_zh \ + embobj \ +- $(if $(ENABLE_JAVA),hsqldb) \ + i18nutil \ + index_data \ + $(if $(and $(ENABLE_GTK3), $(filter LINUX %BSD SOLARIS,$(OS))), libreofficekitgtk) \ +@@ -623,7 +631,6 @@ $(eval $(call gb_Helper_register_libraries_for_install,PLAINLIBS_OOO,ooo, \ + emboleobj \ + package2 \ + $(call gb_Helper_optional,SCRIPTING,scriptframe) \ +- sdbc2 \ + sofficeapp \ + srtrs1 \ + $(if $(filter $(OS),WNT),sysdtrans) \ diff --git a/debian/patches/mediwiki-oor-replace.diff b/debian/patches/mediwiki-oor-replace.diff new file mode 100644 index 00000000000..ed04c917e35 --- /dev/null +++ b/debian/patches/mediwiki-oor-replace.diff @@ -0,0 +1,51 @@ +diff --git a/swext/mediawiki/src/registry/data/org/openoffice/Office/OptionsDialog.xcu b/swext/mediawiki/src/registry/data/org/openoffice/Office/OptionsDialog.xcu +index 2b35ced08f31..0c96070dd4f0 100644 +--- a/swext/mediawiki/src/registry/data/org/openoffice/Office/OptionsDialog.xcu ++++ b/swext/mediawiki/src/registry/data/org/openoffice/Office/OptionsDialog.xcu +@@ -18,9 +18,9 @@ + --> + + +- ++ + +- ++ + + com.sun.wiki-publisher + +diff --git a/swext/mediawiki/src/registry/data/org/openoffice/TypeDetection/Filter.xcu b/swext/mediawiki/src/registry/data/org/openoffice/TypeDetection/Filter.xcu +index 3309b503824c..261e470b253b 100644 +--- a/swext/mediawiki/src/registry/data/org/openoffice/TypeDetection/Filter.xcu ++++ b/swext/mediawiki/src/registry/data/org/openoffice/TypeDetection/Filter.xcu +@@ -19,7 +19,7 @@ + + + +- ++ + 0 + MediaWiki + com.sun.star.text.TextDocument +@@ -31,7 +31,7 @@ + + EXPORT ALIEN 3RDPARTYFILTER + +- ++ + 0 + MediaWiki + com.sun.star.text.WebDocument +diff --git a/swext/mediawiki/src/registry/data/org/openoffice/TypeDetection/Types.xcu b/swext/mediawiki/src/registry/data/org/openoffice/TypeDetection/Types.xcu +index 15e4f850041a..ce7cd0763b79 100644 +--- a/swext/mediawiki/src/registry/data/org/openoffice/TypeDetection/Types.xcu ++++ b/swext/mediawiki/src/registry/data/org/openoffice/TypeDetection/Types.xcu +@@ -19,7 +19,7 @@ + + + +- ++ + com.sun.star.comp.filters.XMLFilterDetect + + txt diff --git a/debian/patches/mention-java-common-package.diff b/debian/patches/mention-java-common-package.diff new file mode 100644 index 00000000000..24fbbc0a877 --- /dev/null +++ b/debian/patches/mention-java-common-package.diff @@ -0,0 +1,35 @@ +diff --git a/jvmfwk/plugins/sunmajor/javaenvsetup/javaldx.cxx b/jvmfwk/plugins/sunmajor/javaenvsetup/javaldx.cxx +index 718902caba6f..3c8499b5a42c 100644 +--- a/jvmfwk/plugins/sunmajor/javaenvsetup/javaldx.cxx ++++ b/jvmfwk/plugins/sunmajor/javaenvsetup/javaldx.cxx +@@ -141,6 +141,9 @@ static bool findAndSelect(JavaInfo ** ppInfo) + if (errcode == JFW_E_NO_JAVA_FOUND) + { + fprintf(stderr,"javaldx: Could not find a Java Runtime Environment!\n"); ++ fprintf(stderr,"Please ensure that a JVM and the package libreoffice-java-common\n"); ++ fprintf(stderr,"is installed.\n"); ++ fprintf(stderr,"If it is already installed then try removing ~/.config/libreoffice/4/user/config/javasettings_Linux_*.xml\n"); + return false; + } + else if (errcode != JFW_E_NONE && errcode != JFW_E_DIRECT_MODE) +diff --git a/include/svtools/strings.hrc b/include/svtools/strings.hrc +index f9dc617f4313..874b0400cbc5 100644 +--- a/include/svtools/strings.hrc ++++ b/include/svtools/strings.hrc +@@ -281,13 +281,13 @@ + + #define STR_SVT_DEFAULT_SERVICE_LABEL NC_("STR_SVT_DEFAULT_SERVICE_LABEL", "$user$'s $service$") + +-#define STR_WARNING_JAVANOTFOUND NC_("STR_WARNING_JAVANOTFOUND", "%PRODUCTNAME requires a Java runtime environment (JRE) to perform this task. Please install a JRE and restart %PRODUCTNAME.") ++#define STR_WARNING_JAVANOTFOUND NC_("STR_WARNING_JAVANOTFOUND", "%PRODUCTNAME requires a Java runtime environment (JRE) to perform this task. Please install a JRE (and libreoffice-java-common) and restart %PRODUCTNAME.") + #define STR_WARNING_JAVANOTFOUND_WIN NC_("STR_WARNING_JAVANOTFOUND_WIN", "%PRODUCTNAME requires a %BITNESS-bit Java runtime environment (JRE) to perform this task. Please install a JRE and restart %PRODUCTNAME.") + #define STR_WARNING_JAVANOTFOUND_MAC NC_("STR_WARNING_JAVANOTFOUND_MAC", "%PRODUCTNAME requires Oracle's Java Development Kit (JDK) on macOS 10.10 or greater to perform this task. Please install them and restart %PRODUCTNAME.") + #define STR_WARNING_INVALIDJAVASETTINGS_MAC NC_("STR_WARNING_INVALIDJAVASETTINGS_MAC", "The %PRODUCTNAME configuration has been changed. Under %PRODUCTNAME - Preferences - %PRODUCTNAME - Advanced, select the Java runtime environment you want to have used by %PRODUCTNAME.") +-#define STR_WARNING_INVALIDJAVASETTINGS NC_("STR_WARNING_INVALIDJAVASETTINGS", "The %PRODUCTNAME configuration has been changed. Under Tools - Options - %PRODUCTNAME - Advanced, select the Java runtime environment you want to have used by %PRODUCTNAME.") ++#define STR_WARNING_INVALIDJAVASETTINGS NC_("STR_WARNING_INVALIDJAVASETTINGS", "The %PRODUCTNAME configuration has been changed. Under Tools - Options - %PRODUCTNAME - Advanced, select the Java runtime environment you want to have used by %PRODUCTNAME. Maybe you also need to install libreoffice-java-common.") + #define STR_ERROR_JVMCREATIONFAILED_MAC NC_("STR_ERROR_JVMCREATIONFAILED_MAC", "%PRODUCTNAME requires a Java runtime environment (JRE) to perform this task. The selected JRE is defective. Please select another version or install a new JRE and select it under %PRODUCTNAME - Preferences - %PRODUCTNAME - Advanced.") +-#define STR_ERROR_JVMCREATIONFAILED NC_("STR_ERROR_JVMCREATIONFAILED", "%PRODUCTNAME requires a Java runtime environment (JRE) to perform this task. The selected JRE is defective. Please select another version or install a new JRE and select it under Tools - Options - %PRODUCTNAME - Advanced.") ++#define STR_ERROR_JVMCREATIONFAILED NC_("STR_ERROR_JVMCREATIONFAILED", "%PRODUCTNAME requires a Java runtime environment (JRE) to perform this task. The selected JRE is defective. Please select another version or install a new JRE and select it under Tools - Options - %PRODUCTNAME - Advanced or install libreoffice-java-common if not already installed.") + #define STR_WARNING_JAVANOTFOUND_TITLE NC_("STR_WARNING_JAVANOTFOUND_TITLE", "JRE Required") + #define STR_WARNING_INVALIDJAVASETTINGS_TITLE NC_("STR_WARNING_INVALIDJAVASETTINGS_TITLE", "Select JRE") + #define STR_ERROR_JVMCREATIONFAILED_TITLE NC_("STR_ERROR_JVMCREATIONFAILED_TITLE", "JRE is Defective") diff --git a/debian/patches/no-check-if-root.diff b/debian/patches/no-check-if-root.diff new file mode 100644 index 00000000000..95ebbb329a4 --- /dev/null +++ b/debian/patches/no-check-if-root.diff @@ -0,0 +1,26 @@ +--- a/Makefile.in 2017-07-28 06:09:37.072183489 +0000 ++++ b/Makefile.in 2017-10-18 12:43:59.215567467 +0000 +@@ -57,14 +57,6 @@ else # MAKE_RESTARTS + + .DEFAULT_GOAL := build + +-check-if-root: +- @if test ! `uname` = 'Haiku' -a `id -u` = 0 && ! grep -q 'lxc\|docker' /proc/self/cgroup && ! grep -q 'libpod_parent' /proc/self/cgroup; then \ +- echo; \ +- echo 'Building LibreOffice as root is a very bad idea, use a regular user.'; \ +- echo; \ +- exit 1; \ +- fi +- + gb_Side ?= host + + include $(BUILDDIR)/config_$(gb_Side).mk +@@ -252,7 +244,7 @@ endif + # + # Bootstrap + # +-bootstrap: check-if-root compilerplugins ++bootstrap: compilerplugins + + # + # Build diff --git a/debian/patches/no-opencl-per-default.diff b/debian/patches/no-opencl-per-default.diff new file mode 100644 index 00000000000..d17e9c0598d --- /dev/null +++ b/debian/patches/no-opencl-per-default.diff @@ -0,0 +1,26 @@ +From b54cfe9d3d22fdd40f7015bd343df8620c983779 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Caol=C3=A1n=20McNamara?= +Date: Mon, 27 Mar 2017 11:47:01 +0100 +Subject: [PATCH] Resolves: rhbz#1432468 disable opencl by default + +Change-Id: Ie037fcabdd219f195425979dd721501fb5527573 +--- + officecfg/registry/schema/org/openoffice/Office/Common.xcs | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/officecfg/registry/schema/org/openoffice/Office/Common.xcs b/officecfg/registry/schema/org/openoffice/Office/Common.xcs +index 946bd32..284d694 100644 +--- a/officecfg/registry/schema/org/openoffice/Office/Common.xcs ++++ b/officecfg/registry/schema/org/openoffice/Office/Common.xcs +@@ -5670,7 +5670,7 @@ + Determines whether OpenCL can be used, when available, to speed up + some operations. + +- true ++ false + + + +-- +2.9.3 + diff --git a/debian/patches/no-openssl.diff b/debian/patches/no-openssl.diff new file mode 100644 index 00000000000..a5c26903ae1 --- /dev/null +++ b/debian/patches/no-openssl.diff @@ -0,0 +1,357 @@ +don't add -lssl etc if not needed (because we use system-postgresql) + +diff --git a/RepositoryExternal.mk b/RepositoryExternal.mk +index 0fc7d25..952b140 100644 +--- a/RepositoryExternal.mk ++++ b/RepositoryExternal.mk +@@ -2911,9 +2917,10 @@ $(call gb_LinkTarget_add_libs,$(1),\ + $(call gb_UnpackedTarball_get_dir,postgresql)/src/interfaces/libpq/libpq$(gb_StaticLibrary_PLAINEXT) \ + ) + +-ifeq ($(OS),WNT) + $(call gb_LinkTarget_use_external,$(1),openssl) + ++ifeq ($(OS),WNT) ++ + $(call gb_LinkTarget_use_system_win32_libs,$(1),\ + secur32 \ + ws2_32 \ +diff --git a/connectivity/Library_postgresql-sdbc-impl.mk b/connectivity/Library_postgresql-sdbc-impl.mk +index 0580a8b..7e8b778 100644 +--- a/connectivity/Library_postgresql-sdbc-impl.mk ++++ b/connectivity/Library_postgresql-sdbc-impl.mk +@@ -46,7 +46,6 @@ $(eval $(call gb_Library_use_externals,postgresql-sdbc-impl,\ + boost_headers \ + postgresql \ + $(if $(filter-out MSC,$(COM)), \ +- openssl \ + $(if $(ENABLE_LDAP),openldap) \ + nss3 \ + plc4 \ + +... and don't uselessly check for openssl in configure + +diff --git a/config_host.mk.in b/config_host.mk.in +index ddd144e..19f8368 100644 +--- a/config_host.mk.in ++++ b/config_host.mk.in +@@ -93,7 +93,6 @@ export DEFAULT_BRAND_IMAGES=@DEFAULT_BRAND_IMAGES@ + export DICT_SYSTEM_DIR=@DICT_SYSTEM_DIR@ + export DISABLE_CVE_TESTS=@DISABLE_CVE_TESTS@ + export DISABLE_DYNLOADING=@DISABLE_DYNLOADING@ +-export DISABLE_OPENSSL=@DISABLE_OPENSSL@ + export DISABLE_PYTHON=@DISABLE_PYTHON@ + export DLOPEN_LIBS=@DLOPEN_LIBS@ + export DLLTOOL=@DLLTOOL@ +@@ -438,8 +439,6 @@ export OOO_JUNIT_JAR=@OOO_JUNIT_JAR@ + export BFFVALIDATOR=@BFFVALIDATOR@ + export OOO_JUNIT_JAR=@OOO_JUNIT_JAR@ + export OOO_VENDOR=@OOO_VENDOR@ +-export OPENSSL_CFLAGS=$(gb_SPACE)@OPENSSL_CFLAGS@ +-export OPENSSL_LIBS=$(gb_SPACE)@OPENSSL_LIBS@ + export OPENSYMBOL_TTF=@OPENSYMBOL_TTF@ + export ORCUS_CFLAGS=$(gb_SPACE)@ORCUS_CFLAGS@ + export ORCUS_LIBS=$(gb_SPACE)@ORCUS_LIBS@ +@@ -569,7 +568,6 @@ export SYSTEM_ODBC_HEADERS=@SYSTEM_ODBC_HEADERS@ + export SYSTEM_ODBC_HEADERS=@SYSTEM_ODBC_HEADERS@ + export SYSTEM_ODFGEN=@SYSTEM_ODFGEN@ + export SYSTEM_OPENLDAP=@SYSTEM_OPENLDAP@ +-export SYSTEM_OPENSSL=@SYSTEM_OPENSSL@ + export SYSTEM_PAGEMAKER=@SYSTEM_PAGEMAKER@ + export SYSTEM_POPPLER=@SYSTEM_POPPLER@ + export SYSTEM_POSTGRESQL=@SYSTEM_POSTGRESQL@ +diff --git a/configure.ac b/configure.ac +index 3862386..45d5e25 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -9422,67 +9422,6 @@ else + AC_MSG_RESULT([no]) + fi + +-dnl =================================================================== +-dnl Check for system openssl +-dnl =================================================================== +-DISABLE_OPENSSL= +-AC_MSG_CHECKING([whether to disable OpenSSL usage]) +-if test "$enable_openssl" = "yes"; then +- AC_MSG_RESULT([no]) +- if test "$_os" = Darwin ; then +- # OpenSSL is deprecated when building for 10.7 or later. +- # +- # http://stackoverflow.com/questions/7406946/why-is-apple-deprecating-openssl-in-macos-10-7-lion +- # http://stackoverflow.com/questions/7475914/libcrypto-deprecated-on-mac-os-x-10-7-lion +- +- with_system_openssl=no +- libo_CHECK_SYSTEM_MODULE([openssl],[OPENSSL],[openssl]) +- elif test "$_os" = "NetBSD" -o "$_os" = "OpenBSD" -o "$_os" = "DragonFly" \ +- && test "$with_system_openssl" != "no"; then +- with_system_openssl=yes +- SYSTEM_OPENSSL=TRUE +- OPENSSL_CFLAGS= +- OPENSSL_LIBS="-lssl -lcrypto" +- else +- libo_CHECK_SYSTEM_MODULE([openssl],[OPENSSL],[openssl]) +- fi +- if test "$with_system_openssl" = "yes"; then +- AC_MSG_CHECKING([whether openssl supports SHA512]) +- AC_LANG_PUSH([C]) +- AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include ]],[[ +- SHA512_CTX context; +-]])],[AC_MSG_RESULT([yes])],[AC_MSG_ERROR([no, openssl too old. Need >= 0.9.8.])]) +- AC_LANG_POP(C) +- fi +-else +- AC_MSG_RESULT([yes]) +- DISABLE_OPENSSL=TRUE +- +- # warn that although OpenSSL is disabled, system libraries may depend on it +- AC_MSG_WARN([OpenSSL has been disabled. No code compiled here will make use of it but system libraries may create indirect dependencies]) +- add_warning "OpenSSL has been disabled. No code compiled here will make use of it but system libraries may create indirect dependencies" +-fi +- +-AC_SUBST([DISABLE_OPENSSL]) +- +-if test "$enable_cipher_openssl_backend" = yes && test "$DISABLE_OPENSSL" = TRUE; then +- if test "$libo_fuzzed_enable_cipher_openssl_backend" = yes; then +- AC_MSG_NOTICE([Resetting --enable-cipher-openssl-backend=no]) +- enable_cipher_openssl_backend=no +- else +- AC_MSG_ERROR([--enable-cipher-openssl-backend needs OpenSSL, but --disable-openssl was given.]) +- fi +-fi +-AC_MSG_CHECKING([whether to enable the OpenSSL backend for rtl/cipher.h]) +-ENABLE_CIPHER_OPENSSL_BACKEND= +-if test "$enable_cipher_openssl_backend" = yes; then +- AC_MSG_RESULT([yes]) +- ENABLE_CIPHER_OPENSSL_BACKEND=TRUE +-else +- AC_MSG_RESULT([no]) +-fi +-AC_SUBST([ENABLE_CIPHER_OPENSSL_BACKEND]) +- + dnl =================================================================== + dnl Check for building gnutls + dnl =================================================================== + +.. and without these gbuild still wants it ... + +diff --git a/external/Module_external.mk b/external/Module_external.mk +index 44280e3..44c1c63 100644 +--- a/external/Module_external.mk ++++ b/external/Module_external.mk +@@ -82,7 +82,6 @@ $(eval $(call gb_Module_add_moduledirs,external,\ + $(call gb_Helper_optional,NSS,nss) \ + $(call gb_Helper_optional,ODFGEN,libodfgen) \ + $(call gb_Helper_optional,OPENLDAP,openldap) \ +- $(call gb_Helper_optional,OPENSSL,openssl) \ + $(call gb_Helper_optional,ORCUS,liborcus) \ + $(call gb_Helper_optional,OWNCLOUD_ANDROID_LIB,owncloud-android-lib) \ + $(call gb_Helper_optional,PAGEMAKER,libpagemaker) \ +diff --git a/oox/CppunitTest_oox_tokenmap.mk b/oox/CppunitTest_oox_tokenmap.mk +index 9eac2a5..ef6d5c9 100644 +--- a/oox/CppunitTest_oox_tokenmap.mk ++++ b/oox/CppunitTest_oox_tokenmap.mk +@@ -20,19 +20,10 @@ $(eval $(call gb_CppunitTest_use_sdk_api,oox_tokenmap)) + + $(eval $(call gb_CppunitTest_use_library_objects,oox_tokenmap,oox)) + +-ifeq ($(TLS),OPENSSL) +-$(eval $(call gb_CppunitTest_use_externals,oox_tokenmap,\ +- openssl \ +- openssl_headers \ +-)) +-else +-ifeq ($(TLS),NSS) + $(eval $(call gb_CppunitTest_use_externals,oox_tokenmap,\ + plc4 \ + nss3 \ + )) +-endif +-endif + + $(eval $(call gb_CppunitTest_use_libraries,oox_tokenmap,\ + avmedia \ +diff --git a/oox/Library_oox.mk b/oox/Library_oox.mk +index fcd7215..a178883 100644 +--- a/oox/Library_oox.mk ++++ b/oox/Library_oox.mk +@@ -67,19 +67,10 @@ $(eval $(call gb_Library_use_externals,oox,\ + boost_headers \ + )) + +-ifeq ($(TLS),OPENSSL) +-$(eval $(call gb_Library_use_externals,oox,\ +- openssl \ +- openssl_headers \ +-)) +-else +-ifeq ($(TLS),NSS) + $(eval $(call gb_Library_use_externals,oox,\ + plc4 \ + nss3 \ + )) +-endif +-endif + + $(eval $(call gb_Library_set_componentfile,oox,oox/util/oox)) + +diff --git a/ucb/CppunitTest_ucb_webdav_local_neon.mk b/ucb/CppunitTest_ucb_webdav_local_neon.mk +index 20e827b..9b869f9 100644 +--- a/ucb/CppunitTest_ucb_webdav_local_neon.mk ++++ b/ucb/CppunitTest_ucb_webdav_local_neon.mk +@@ -34,7 +34,6 @@ $(eval $(call gb_CppunitTest_use_externals,ucb_webdav_local_neon,\ + boost_headers \ + libxml2 \ + neon \ +- openssl \ + )) + + $(eval $(call gb_CppunitTest_use_custom_headers,ucb_webdav_local_neon,\ +diff --git a/ucb/Library_ucpdav1.mk b/ucb/Library_ucpdav1.mk +index 37f3c8f..2167dd2 100644 +--- a/ucb/Library_ucpdav1.mk ++++ b/ucb/Library_ucpdav1.mk +@@ -30,7 +30,6 @@ $(eval $(call gb_Library_use_externals,ucpdav1,\ + boost_headers \ + libxml2 \ + neon \ +- openssl \ + )) + + $(eval $(call gb_Library_use_custom_headers,ucpdav1,\ +@@ -66,7 +65,6 @@ else # WITH_WEBDAV == serf + $(eval $(call gb_Library_use_externals,ucpdav1,\ + boost_headers \ + apr \ +- openssl \ + serf \ + zlib \ + )) +diff --git a/RepositoryExternal.mk b/RepositoryExternal.mk +index 0fc7d25..fe5a208 100644 +--- a/RepositoryExternal.mk ++++ b/RepositoryExternal.mk +@@ -1525,75 +1525,6 @@ endif # ENABLE_HARFBUZZ + + ifeq ($(DISABLE_OPENSSL),TRUE) + +-gb_ExternalProject__use_openssl:= +-gb_LinkTarget__use_openssl_headers:= +-gb_LinkTarget__use_openssl:= +- +-else # !DISABLE_OPENSSL +- +-ifneq ($(SYSTEM_OPENSSL),) +- +-gb_LinkTarget__use_openssl_headers:= +-gb_ExternalProject__use_openssl:= +- +-define gb_LinkTarget__use_openssl +-$(call gb_LinkTarget_set_include,$(1),\ +- $$(INCLUDE) \ +- $(OPENSSL_CFLAGS) \ +-) +-$(call gb_LinkTarget_add_libs,$(1),$(OPENSSL_LIBS)) +- +-endef +- +-else # !SYSTEM_OPENSSL +- +-$(eval $(call gb_Helper_register_packages_for_install,ooo, \ +- openssl \ +-)) +- +-define gb_ExternalProject__use_openssl +-$(call gb_ExternalProject_use_package,$(1),openssl) +- +-endef +- +-define gb_LinkTarget__use_openssl_headers +-$(call gb_LinkTarget_use_external_project,$(1),openssl) +-$(call gb_LinkTarget_set_include,$(1),\ +- -I$(call gb_UnpackedTarball_get_dir,openssl)/include \ +- $$(INCLUDE) \ +-) +- +-endef +- +-define gb_LinkTarget__use_openssl +-$(call gb_LinkTarget_use_package,$(1),openssl) +-ifeq ($(OS),WNT) +-$(call gb_LinkTarget_add_libs,$(1),\ +- $(call gb_UnpackedTarball_get_dir,openssl)/out32dll/ssleay32.lib \ +- $(call gb_UnpackedTarball_get_dir,openssl)/out32dll/libeay32.lib \ +-) +-else +-$(call gb_LinkTarget_add_libs,$(1),\ +- $(call gb_UnpackedTarball_get_dir,openssl)/libssl.a \ +- $(call gb_UnpackedTarball_get_dir,openssl)/libcrypto.a \ +-) +-$(call gb_LinkTarget_use_external_project,$(1),openssl) +-ifeq ($(OS),SOLARIS) +-$(call gb_LinkTarget_add_libs,$(1),\ +- -lnsl \ +- -lsocket \ +-) +-endif +-endif +- +-endef +- +-endif # SYSTEM_OPENSSL +-endif # DISABLE_OPENSSL +- +- +-ifeq ($(DISABLE_OPENSSL),TRUE) +- + define gb_LinkTarget__use_gnutls + $(call gb_LinkTarget_set_include,$(1),\ + $$(INCLUDE) \ +diff --git a/ucb/CppunitTest_ucb_webdav_neon_opts.mk b/ucb/CppunitTest_ucb_webdav_neon_opts.mk +index 91e167b..21e5257 100644 +--- a/ucb/CppunitTest_ucb_webdav_neon_opts.mk ++++ b/ucb/CppunitTest_ucb_webdav_neon_opts.mk +@@ -34,7 +34,6 @@ $(eval $(call gb_CppunitTest_use_externals,ucb_webdav_neon_opts,\ + boost_headers \ + libxml2 \ + neon \ +- openssl \ + )) + + $(eval $(call gb_CppunitTest_use_custom_headers,ucb_webdav_neon_opts,\ +diff --git a/ucb/CppunitTest_ucb_webdav_propfindcache.mk b/ucb/CppunitTest_ucb_webdav_propfindcache.mk +index ebbaee7..e2d064e 100644 +--- a/ucb/CppunitTest_ucb_webdav_propfindcache.mk ++++ b/ucb/CppunitTest_ucb_webdav_propfindcache.mk +@@ -34,7 +34,6 @@ $(eval $(call gb_CppunitTest_use_externals,ucb_webdav_propfindcache,\ + boost_headers \ + libxml2 \ + neon \ +- openssl \ + )) + + $(eval $(call gb_CppunitTest_use_custom_headers,ucb_webdav_propfindcache,\ +diff --git a/ucb/CppunitTest_ucb_webdav_res_access.mk b/ucb/CppunitTest_ucb_webdav_res_access.mk +index ac48f87..c7d151e 100644 +--- a/ucb/CppunitTest_ucb_webdav_res_access.mk ++++ b/ucb/CppunitTest_ucb_webdav_res_access.mk +@@ -34,7 +34,6 @@ $(eval $(call gb_CppunitTest_use_externals,ucb_webdav_res_access,\ + boost_headers \ + libxml2 \ + neon \ +- openssl \ + )) + + $(eval $(call gb_CppunitTest_use_custom_headers,ucb_webdav_res_access,\ +diff --git a/connectivity/Library_mysqlc.mk b/connectivity/Library_mysqlc.mk +index f765fb1e305f..0999b46d3eec 100644 +--- a/connectivity/Library_mysqlc.mk ++++ b/connectivity/Library_mysqlc.mk +@@ -12,7 +12,6 @@ $(eval $(call gb_Library_Library,mysqlc)) + $(eval $(call gb_Library_use_externals,mysqlc,\ + boost_headers \ + mariadb-connector-c \ +- openssl \ + )) + + $(eval $(call gb_Library_set_include,mysqlc,\ diff --git a/debian/patches/no-packagekit-per-default.diff b/debian/patches/no-packagekit-per-default.diff new file mode 100644 index 00000000000..a496c702169 --- /dev/null +++ b/debian/patches/no-packagekit-per-default.diff @@ -0,0 +1,21 @@ +diff --git a/officecfg/registry/data/org/openoffice/Office/Common.xcu b/officecfg/registry/data/org/openoffice/Office/Common.xcu +index 3d138551b593..9cb9831f3236 100644 +--- a/officecfg/registry/data/org/openoffice/Office/Common.xcu ++++ b/officecfg/registry/data/org/openoffice/Office/Common.xcu +@@ -551,13 +551,13 @@ + + + +- true ++ false + + +- true ++ false + + +- true ++ false + + + diff --git a/debian/patches/pdfium-m68k.diff b/debian/patches/pdfium-m68k.diff new file mode 100644 index 00000000000..8b9df41fa09 --- /dev/null +++ b/debian/patches/pdfium-m68k.diff @@ -0,0 +1,20 @@ +don't break pdfium build on m68k + +FIXME: Make this set by autoconf, most of the defines in build_config.h are not actually +used anyway in pdfium... + +diff --git a/external/pdfium/configs/build_config.h b/external/pdfium/configs/build_config.h +index 22084c0a0836..6fd080e644fb 100644 +--- a/external/pdfium/configs/build_config.h ++++ b/external/pdfium/configs/build_config.h +@@ -118,6 +118,9 @@ + #define ARCH_CPU_ARM_FAMILY 1 + #define ARCH_CPU_ARM64 1 + #define ARCH_CPU_64_BITS 1 ++#elif defined(__m68k__) ++#define ARCH_CPU_M68K 1 ++#define ARCH_CPU_32_BITS 1 + #else + #error Please add support for your architecture in build/build_config.h + #endif + diff --git a/debian/patches/reportdesign-mention-package.diff b/debian/patches/reportdesign-mention-package.diff new file mode 100644 index 00000000000..f85471bf069 --- /dev/null +++ b/debian/patches/reportdesign-mention-package.diff @@ -0,0 +1,13 @@ +diff --git a/dbaccess/inc/strings.hrc b/dbaccess/inc/strings.hrc +index 47068f43d09e..1f8b9a2331b6 100644 +--- a/dbaccess/inc/strings.hrc ++++ b/dbaccess/inc/strings.hrc +@@ -349,7 +349,7 @@ + #define STR_WARNINGS_DURING_CONNECT NC_("STR_WARNINGS_DURING_CONNECT", "Warnings were encountered while connecting to the data source. Press \"$buttontext$\" to view them.") + #define STR_NAMED_OBJECT_ALREADY_EXISTS NC_("STR_NAMED_OBJECT_ALREADY_EXISTS", "The name '$#$' already exists.\nPlease enter another name." ) + // #i96130# use hard coded name +-#define RID_STR_EXTENSION_NOT_PRESENT NC_("RID_STR_EXTENSION_NOT_PRESENT", "The report, \"$file$\", requires the Report Builder feature.") ++#define RID_STR_EXTENSION_NOT_PRESENT NC_("RID_STR_EXTENSION_NOT_PRESENT", "The report, \"$file$\", requires the Report Builder feature. For this, install the package 'libreoffice-report-builder'.") + + #define STR_COULDNOTCREATE_DRIVERMANAGER NC_("STR_COULDNOTCREATE_DRIVERMANAGER", "Cannot connect to the SDBC driver manager (#servicename#).") + #define STR_NOREGISTEREDDRIVER NC_("STR_NOREGISTEREDDRIVER", "A driver is not registered for the URL #connurl#.") diff --git a/debian/patches/sc-opengl-optional.diff b/debian/patches/sc-opengl-optional.diff new file mode 100644 index 00000000000..20a5cbe2118 --- /dev/null +++ b/debian/patches/sc-opengl-optional.diff @@ -0,0 +1,26 @@ +diff --git a/sc/source/core/data/global.cxx b/sc/source/core/data/global.cxx +index c657bd81defc..d5678c089f41 100644 +--- a/sc/source/core/data/global.cxx ++++ b/sc/source/core/data/global.cxx +@@ -71,6 +71,8 @@ + #include + #include + ++#include ++ + tools::SvRef ScGlobal::xDrawClipDocShellRef; + SvxSearchItem* ScGlobal::pSearchItem = nullptr; + ScAutoFormat* ScGlobal::pAutoFormat = nullptr; +@@ -472,7 +474,11 @@ void ScGlobal::InitPPT() + { + OutputDevice* pDev = Application::GetDefaultDevice(); + +- if (comphelper::LibreOfficeKit::isActive() || OpenGLWrapper::isVCLOpenGLEnabled()) ++ if (comphelper::LibreOfficeKit::isActive() ++#if defined HAVE_FEATURE_OPENGL && defined HAVE_FEATURE_UI ++|| OpenGLWrapper::isVCLOpenGLEnabled() ++#endif ++) + { + // LOK: the below limited precision is not enough for RowColumnHeader. + // OpenGL: limited precision breaks AA of text in charts. diff --git a/debian/patches/search-usr-share-for-images.diff b/debian/patches/search-usr-share-for-images.diff new file mode 100644 index 00000000000..6b91fcc127e --- /dev/null +++ b/debian/patches/search-usr-share-for-images.diff @@ -0,0 +1,137 @@ +diff --git a/vcl/inc/impimagetree.hxx b/vcl/inc/impimagetree.hxx +index 41c4f56..93d80f1 100644 +--- a/vcl/inc/impimagetree.hxx ++++ b/vcl/inc/impimagetree.hxx +@@ -85,6 +85,10 @@ private: + typedef boost::unordered_map< + rtl::OUString, std::pair< bool, BitmapEx >, rtl::OUStringHash > IconCache; + ++ // we want to search zip files (icons) also in /usr/share/ ++ ::rtl::OUString m_datadir; // /usr/share/ ++ ::rtl::OUString m_libdir; // /usr/lib or /usr/lib64 ++ + rtl::OUString m_style; + Zips m_zips; + CheckStyleCache m_checkStyleCache; +@@ -92,6 +96,7 @@ private: + + void setStyle(rtl::OUString const & style ); + ++ void addUrlToZips(const rtl::OUString &url); + void resetZips(); + + bool checkStyleCacheLookup( rtl::OUString const & style, bool &exists ); +diff --git a/vcl/source/gdi/impimagetree.cxx b/vcl/source/gdi/impimagetree.cxx +index 03442fc..cfe6c45 100644 +--- a/vcl/source/gdi/impimagetree.cxx ++++ b/vcl/source/gdi/impimagetree.cxx +@@ -121,7 +121,11 @@ void loadFromStream( + + } + +-ImplImageTree::ImplImageTree() {} ++ImplImageTree::ImplImageTree() ++{ ++ m_datadir = ::rtl::OUString::createFromAscii ( "/usr/share/" ); ++ m_libdir = ::rtl::OUString::createFromAscii ( "/usr/lib/" ); ++} + + ImplImageTree::~ImplImageTree() {} + +@@ -259,6 +263,22 @@ void ImplImageTree::setStyle(rtl::OUString const & style) { + } + } + ++void ImplImageTree::addUrlToZips(const rtl::OUString &url) { ++ if ( url.getLength() == 0 ) ++ return; ++ m_zips.push_back( ++ std::make_pair( ++ url, ++ css::uno::Reference< css::container::XNameAccess >())); ++ sal_Int32 nLibDirPos = url.indexOf( m_libdir ); ++ if ( nLibDirPos >= 0 ) { ++ m_zips.push_back( ++ std::make_pair( ++ url.replaceAt( nLibDirPos, m_libdir.getLength(), m_datadir ), ++ css::uno::Reference< css::container::XNameAccess >())); ++ } ++} ++ + void ImplImageTree::resetZips() { + m_zips.clear(); + { +@@ -284,19 +304,14 @@ void ImplImageTree::resetZips() { + b.appendAscii(RTL_CONSTASCII_STRINGPARAM("_brand.zip")); + bool ok = u.Append(b.makeStringAndClear(), INetURLObject::ENCODE_ALL); + OSL_ASSERT(ok); (void) ok; +- m_zips.push_back( +- std::make_pair( +- u.GetMainURL(INetURLObject::NO_DECODE), +- css::uno::Reference< css::container::XNameAccess >())); ++ addUrlToZips(u.GetMainURL(INetURLObject::NO_DECODE)); + } + { + rtl::OUString url( + RTL_CONSTASCII_USTRINGPARAM( + "$BRAND_BASE_DIR/share/config/images_brand.zip")); + rtl::Bootstrap::expandMacros(url); +- m_zips.push_back( +- std::make_pair( +- url, css::uno::Reference< css::container::XNameAccess >())); ++ addUrlToZips(url); + } + { + rtl::OUString url( +@@ -310,10 +310,7 @@ + b.appendAscii(RTL_CONSTASCII_STRINGPARAM(".zip")); + bool ok = u.Append(b.makeStringAndClear(), INetURLObject::ENCODE_ALL); + OSL_ASSERT(ok); (void) ok; +- m_zips.push_back( +- std::make_pair( +- u.GetMainURL(INetURLObject::NO_DECODE), +- css::uno::Reference< css::container::XNameAccess >())); ++ addUrlToZips(u.GetMainURL(INetURLObject::NO_DECODE)); + } + if ( m_style == "default" ) + { +@@ -321,9 +333,7 @@ void ImplImageTree::resetZips() { + RTL_CONSTASCII_USTRINGPARAM( + "$BRAND_BASE_DIR/share/config/images.zip")); + rtl::Bootstrap::expandMacros(url); +- m_zips.push_back( +- std::make_pair( +- url, css::uno::Reference< css::container::XNameAccess >())); ++ addUrlToZips(url); + } + } + +diff --git a/xmlhelp/source/cxxhelp/provider/provider.cxx b/xmlhelp/source/cxxhelp/provider/provider.cxx +index e55fe5d..848bed7 100644 +--- a/xmlhelp/source/cxxhelp/provider/provider.cxx ++++ b/xmlhelp/source/cxxhelp/provider/provider.cxx +@@ -335,7 +335,7 @@ void ContentProvider::init() + rtl::OUString(RTL_CONSTASCII_USTRINGPARAM( " " )) + + setupextension ); + +- uno::Sequence< rtl::OUString > aImagesZipPaths( 2 ); ++ uno::Sequence< rtl::OUString > aImagesZipPaths( 3 ); + xHierAccess = getHierAccess( sProvider, "org.openoffice.Office.Common" ); + + rtl::OUString aPath( getKey( xHierAccess, "Path/Current/UserConfig" ) ); +@@ -344,6 +344,15 @@ void ContentProvider::init() + + aPath = rtl::OUString(RTL_CONSTASCII_USTRINGPARAM("$BRAND_BASE_DIR/share/config")); + rtl::Bootstrap::expandMacros(aPath); ++ aImagesZipPaths[ 2 ] = aPath; ++ ++ // try also /usr/share and even before /usr/lib ++ ::rtl::OUString aDataDir = ::rtl::OUString::createFromAscii ( "/usr/share/" ); ++ ::rtl::OUString aLibDir = ::rtl::OUString::createFromAscii ( "/usr/lib/" ); ++ sal_Int32 nLibDirPos = aPath.indexOf( aLibDir ); ++ ++ if ( nLibDirPos >= 0 ) ++ aPath = aPath.replaceAt( nLibDirPos, aLibDir.getLength(), aDataDir ); + aImagesZipPaths[ 1 ] = aPath; + + uno::Reference< uno::XComponentContext > xContext; diff --git a/debian/patches/sensible-lomua.diff b/debian/patches/sensible-lomua.diff new file mode 100644 index 00000000000..6b98bbc4d6e --- /dev/null +++ b/debian/patches/sensible-lomua.diff @@ -0,0 +1,50 @@ +Index: libreoffice-3.6.2~rc1/officecfg/registry/data/org/openoffice/Office/Common.xcu +=================================================================== +--- libreoffice-3.6.2~rc1.orig/officecfg/registry/data/org/openoffice/Office/Common.xcu 2012-10-07 21:03:17.662850386 -0400 ++++ libreoffice-3.6.2~rc1/officecfg/registry/data/org/openoffice/Office/Common.xcu 2012-10-07 21:03:57.174850591 -0400 +@@ -655,7 +655,7 @@ + + + +- ++ sensible-lomua + + + +Index: libreoffice-3.6.2~rc1/shell/source/unix/misc/senddoc.sh +=================================================================== +--- libreoffice-3.6.2~rc1.orig/shell/source/unix/misc/senddoc.sh 2012-10-07 21:03:17.662850386 -0400 ++++ libreoffice-3.6.2~rc1/shell/source/unix/misc/senddoc.sh 2012-10-07 21:29:13.074858447 -0400 +@@ -59,6 +59,32 @@ + shift + fi + ++case `basename "$MAILER"` in ++ sensible-lomua) ++ if [ -x /usr/bin/xdg-email ] ; then ++ MAILER=/usr/bin/xdg-email ++ elif [ -n "$KDE_FULL_SESSION" -a -x /usr/bin/kde-open ] \ ++ || [ -x /usr/bin/gnome-open ] \ ++ || [ -x /usr/bin/xdg-open ]; then ++ # use an undefined mailer, to trigger the default handling ++ MAILER=undefined ++ elif [ -n "$GNOME_DESKTOP_SESSION_ID" -a -x /usr/bin/evolution ]; then ++ MAILER=/usr/bin/evolution ++ elif [ -n "$KDE_FULL_SESSION" -a -x /usr/bin/kmail ]; then ++ MAILER=/usr/bin/kmail ++ elif [ -x /usr/bin/evolution ]; then ++ # default ++ MAILER=/usr/bin/evolution ++ elif [ -x /usr/bin/icedove ]; then ++ # fallback ++ MAILER=/usr/bin/icedove ++ elif [ -x /usr/bin/thunderbird ]; then ++ # fallback ++ MAILER=/usr/bin/thunderbird ++ fi ++ ;; ++esac ++ + # autodetect mail client from executable name + case $(basename "$MAILER" | sed 's/-.*$//') in + diff --git a/debian/patches/series b/debian/patches/series new file mode 100644 index 00000000000..69db8a90243 --- /dev/null +++ b/debian/patches/series @@ -0,0 +1,65 @@ +no-check-if-root.diff +debian-opt.diff +jurt-soffice-location.diff +split-evoab.diff +debian-debug.diff +#fix-system-lpsolve-build.diff +build-against-shared-lpsolve.diff +install-fixes.diff +mention-java-common-package.diff +help-msg-add-package-info.diff +sensible-lomua.diff +reportdesign-mention-package.diff +jdbc-driver-classpaths.diff +#search-usr-share-for-images.diff +make-package-modules-not-suck.diff +mediwiki-oor-replace.diff +debian-hardened-buildflags-CPPFLAGS.diff +debian-hardened-buildflags-no-LO-fstack-protector-strong.diff +disable-flaky-tests.diff +#dont-touch-urd.diff +fix-internal-hsqldb-build.diff +javadoc-optional.diff +hppa-is-32bit.diff +no-packagekit-per-default.diff +system-officeotron-and-odfvalidator.diff +no-openssl.diff +cppunit-optional.diff +#disable-unused-test-programs.diff +apparmor-complain.diff +hide-math-desktop-file.patch +appstream-ignore-startcenter.diff +disable-java-in-odk-build-examples-on-zero-vm.diff +do-not-hide-test-output.diff +apparmor-allow-java.security.diff +apparmor-cleanups.diff +apparmor-mesa.diff +disableClassPathURLCheck.diff +use-mariadb-java-instead-of-mysql-java.diff +apparmor-opencl.diff +fix-uicheck-tests-on-i386.patch +fix-flaky-bridgetest.diff +add-access2base-doc.diff +sc-opengl-optional.diff +fix-lo-xlate-lang-nb.diff +disable-shortcuts_tab_navigation-uitest.diff +no-opencl-per-default.diff +bigendian.diff +liborcus-0.16.diff +bash-completion-DRAWDOCS-pdf.diff +fix-bluez-external.diff +unowinreg-static-libgcc.diff +pdfium-m68k.diff +apparmor-updates.diff +xmlsecurity-replace-XSecParser-implementation.diff +xmlsecurity-XSecParser-confused-about-multiple-timestamps.diff +xmlsecurity-ignore-elements-in-ds:Object-that-arent-signed.diff +default-to-CertificateValidity::INVALID.diff +xmlsecurity-improve-handling-of-multiple-X509Data-elements.diff +hrk-euro.diff +b0404f80577de9ff69e58390c6f6ef949fdb0139.patch +0001-CVE-2022-26305-compare-authors-using-Thumbprint.patch +0002-CVE-2022-26307-make-hash-encoding-match-decoding.patch +0003-CVE-2022-26306-add-Initialization-Vectors-to-passwor.patch +0004-CVE-2022-2630-6-7-add-infobar-to-prompt-to-refresh-t.patch +fix-e_book_client_connect_direct_sync-sig.diff diff --git a/debian/patches/split-evoab.diff b/debian/patches/split-evoab.diff new file mode 100644 index 00000000000..f563560099f --- /dev/null +++ b/debian/patches/split-evoab.diff @@ -0,0 +1,61 @@ +diff --git a/scp2/source/gnome/file_gnome.scp b/scp2/source/gnome/file_gnome.scp +index c7a13c8..a3f59a6 100644 +--- a/scp2/source/gnome/file_gnome.scp ++++ b/scp2/source/gnome/file_gnome.scp +@@ -25,3 +25,13 @@ File gid_File_Share_Registry_Gnome_Xcd + Name = "gnome.xcd"; + End + #endif ++ ++#ifdef ENABLE_EVOAB2 ++File gid_File_Share_Registry_Evoab_Xcd ++ TXT_FILE_BODY; ++ Styles = (PACKED); ++ Dir = gid_Brand_Dir_Share_Registry; ++ Name = "evoab.xcd"; ++End ++#endif ++ +diff --git a/scp2/source/gnome/module_gnome.scp b/scp2/source/gnome/module_gnome.scp +index 08d9efe..492e274 100644 +--- a/scp2/source/gnome/module_gnome.scp ++++ b/scp2/source/gnome/module_gnome.scp +@@ -31,6 +31,9 @@ Module gid_Module_Optional_Gnome + #if ENABLE_GIO + ,gid_File_Share_Registry_Gnome_Xcd + #endif ++#ifdef ENABLE_EVOAB2 ++ ,gid_File_Share_Registry_Evoab_Xcd ++#endif + ); + End + +diff --git a/postprocess/CustomTarget_registry.mk b/postprocess/CustomTarget_registry.mk +index 510b444..3ff190f 100644 +--- a/postprocess/CustomTarget_registry.mk ++++ b/postprocess/CustomTarget_registry.mk +@@ -331,8 +331,9 @@ ifneq ($(WITH_WEBDAV),) + postprocess_FILES_main += $(postprocess_MOD)/org/openoffice/ucb/Configuration-webdav.xcu + endif + ifeq ($(ENABLE_EVOAB2),TRUE) +-postprocess_FILES_main += $(call gb_XcuModuleTarget_get_target,connectivity/registry/evoab2)/org/openoffice/Office/DataAccess/Drivers-evoab2.xcu +-postprocess_FILES_main += $(postprocess_MOD)/org/openoffice/Office/DataAccess-evoab2.xcu ++postprocess_XCDS += evoab.xcd ++postprocess_FILES_evoab += $(call gb_XcuModuleTarget_get_target,connectivity/registry/evoab2)/org/openoffice/Office/DataAccess/Drivers-evoab2.xcu ++postprocess_FILES_evoab += $(postprocess_MOD)/org/openoffice/Office/DataAccess-evoab2.xcu + postprocess_DRIVERS += evoab + endif + ifeq ($(ENABLE_JAVA),TRUE) +diff --git a/scp2/InstallModule_gnome.mk b/scp2/InstallModule_gnome.mk +index c33f4f52d67b..8f06c0273eff 100644 +--- a/scp2/InstallModule_gnome.mk ++++ b/scp2/InstallModule_gnome.mk +@@ -19,4 +19,8 @@ $(eval $(call gb_InstallModule_add_localized_scpfiles,scp2/gnome,\ + scp2/source/gnome/module_gnome \ + )) + ++$(eval $(call gb_InstallModule_define_if_set,scp2/gnome,\ ++ ENABLE_EVOAB2 \ ++)) ++ + # vim: set shiftwidth=4 tabstop=4 noexpandtab: diff --git a/debian/patches/system-officeotron-and-odfvalidator.diff b/debian/patches/system-officeotron-and-odfvalidator.diff new file mode 100644 index 00000000000..971608ef949 --- /dev/null +++ b/debian/patches/system-officeotron-and-odfvalidator.diff @@ -0,0 +1,16 @@ +diff --git a/bin/odfvalidator.sh.in b/bin/odfvalidator.sh.in +index 56e2f29..9415ef6 100644 +--- a/bin/odfvalidator.sh.in ++++ b/bin/odfvalidator.sh.in +@@ -1,2 +1,2 @@ + #!/usr/bin/env bash +-java -Djavax.xml.validation.SchemaFactory:http://relaxng.org/ns/structure/1.0=org.iso_relax.verifier.jaxp.validation.RELAXNGSchemaFactoryImpl -Dorg.iso_relax.verifier.VerifierFactoryLoader=com.sun.msv.verifier.jarv.FactoryLoaderImpl -jar @TARFILE_LOCATION@/@ODFVALIDATOR_JAR@ "$@" ++java -Djavax.xml.validation.SchemaFactory:http://relaxng.org/ns/structure/1.0=org.iso_relax.verifier.jaxp.validation.RELAXNGSchemaFactoryImpl -Dorg.iso_relax.verifier.VerifierFactoryLoader=com.sun.msv.verifier.jarv.FactoryLoaderImpl -jar /usr/share/java/odfvalidator.jar "$@" +diff --git a/bin/officeotron.sh.in b/bin/officeotron.sh.in +index 7281f1b..6eab5b5 100644 +--- a/bin/officeotron.sh.in ++++ b/bin/officeotron.sh.in +@@ -1,2 +1,2 @@ + #!/usr/bin/env bash +-java -jar @TARFILE_LOCATION@/@OFFICEOTRON_JAR@ "$@" ++java -jar /usr/share/java/officeotron.jar "$@" diff --git a/debian/patches/unowinreg-static-libgcc.diff b/debian/patches/unowinreg-static-libgcc.diff new file mode 100644 index 00000000000..d3e600f6ba9 --- /dev/null +++ b/debian/patches/unowinreg-static-libgcc.diff @@ -0,0 +1,13 @@ +diff --git a/odk/CustomTarget_unowinreg.mk b/odk/CustomTarget_unowinreg.mk +index 3a46ddfd6860..a847e1d6bb38 100644 +--- a/odk/CustomTarget_unowinreg.mk ++++ b/odk/CustomTarget_unowinreg.mk +@@ -19,7 +19,7 @@ $(call gb_CustomTarget_get_workdir,odk/unowinreg)/unowinreg.dll : \ + $(if $(filter FREEBSD,$(OS)),-I$(JAVA_HOME)/include/freebsd \ + -I$(JAVA_HOME)/include/bsd -I$(JAVA_HOME)/include/linux,\ + $(if $(filter NETBSD,$(OS)),-I$(JAVA_HOME)/include/netbsd))) \ +- -shared -o $@ $< \ ++ -shared -static-libgcc -o $@ $< \ + -Wl,--kill-at -lkernel32 -ladvapi32 && \ + $(MINGWSTRIP) $@ + diff --git a/debian/patches/use-mariadb-java-instead-of-mysql-java.diff b/debian/patches/use-mariadb-java-instead-of-mysql-java.diff new file mode 100644 index 00000000000..a88823c3989 --- /dev/null +++ b/debian/patches/use-mariadb-java-instead-of-mysql-java.diff @@ -0,0 +1,59 @@ +>From 1172166889764ae0e77488e5d173f33961b9859b Mon Sep 17 00:00:00 2001 +From: Markus Koschany +Date: Fri, 9 Nov 2018 23:06:15 +0100 +Subject: [PATCH] mariadb + +--- + connectivity/qa/complex/connectivity/JdbcLongVarCharTest.java | 4 ++-- + .../mysql/org/openoffice/Office/DataAccess/Drivers.xcu | 2 +- + connectivity/source/drivers/mysql/YDriver.cxx | 4 ++-- + 3 files changed, 5 insertions(+), 5 deletions(-) + +diff --git a/connectivity/qa/complex/connectivity/JdbcLongVarCharTest.java b/connectivity/qa/complex/connectivity/JdbcLongVarCharTest.java +index 3817add48da6..ace57bd35d98 100644 +--- a/connectivity/qa/complex/connectivity/JdbcLongVarCharTest.java ++++ b/connectivity/qa/complex/connectivity/JdbcLongVarCharTest.java +@@ -64,7 +64,7 @@ public class JdbcLongVarCharTest extends ComplexTestCase + */ + String url = System.getenv("CONNECTIVITY_TEST_MYSQL_DRIVER_JDBC"); + com.sun.star.beans.PropertyValue prop[] = new PropertyValue[1]; +- prop[0] = new PropertyValue("JavaDriverClass", 0, "com.mysql.jdbc.Driver", PropertyState.DIRECT_VALUE); ++ prop[0] = new PropertyValue("JavaDriverClass", 0, "org.mariadb.jdbc.Driver", PropertyState.DIRECT_VALUE); + + // get the remote office component context + XMultiServiceFactory xServiceManager = param.getMSF(); +diff --git a/connectivity/registry/mysql/org/openoffice/Office/DataAccess/Drivers.xcu b/connectivity/registry/mysql/org/openoffice/Office/DataAccess/Drivers.xcu +index 77988448f..acd8bfdaf 100644 +--- a/connectivity/registry/mysql_jdbc/org/openoffice/Office/DataAccess/Drivers.xcu ++++ b/connectivity/registry/mysql_jdbc/org/openoffice/Office/DataAccess/Drivers.xcu +@@ -33,7 +33,7 @@ + + + +- com.mysql.jdbc.Driver ++ org.mariadb.jdbc.Driver + + + +diff --git a/connectivity/source/drivers/mysql/YDriver.cxx b/connectivity/source/drivers/mysql/YDriver.cxx +index 95094265e..c0ad7802e 100644 +--- a/connectivity/source/drivers/mysql_jdbc/YDriver.cxx ++++ b/connectivity/source/drivers/mysql_jdbc/YDriver.cxx +@@ -54,7 +54,7 @@ namespace + OUString getJavaDriverClass(css::uno::Sequence const& info) + { + return comphelper::NamedValueCollection(info).getOrDefault("JavaDriverClass", +- OUString("com.mysql.jdbc.Driver")); ++ OUString("org.mariadb.jdbc.Driver")); + } + } + +@@ -170,7 +170,7 @@ Sequence lcl_convertProperties(T_DRIVERTYPE _eType, + if (!jdc) + { + aProps.push_back(PropertyValue("JavaDriverClass", 0, +- makeAny(OUString("com.mysql.jdbc.Driver")), ++ makeAny(OUString("org.mariadb.jdbc.Driver")), + PropertyState_DIRECT_VALUE)); + } + } diff --git a/debian/patches/xmlsecurity-XSecParser-confused-about-multiple-timestamps.diff b/debian/patches/xmlsecurity-XSecParser-confused-about-multiple-timestamps.diff new file mode 100644 index 00000000000..51327d5ee79 --- /dev/null +++ b/debian/patches/xmlsecurity-XSecParser-confused-about-multiple-timestamps.diff @@ -0,0 +1,393 @@ +From abe77c4fcb9ea97d9fff07eaea6d8863bcba5b02 Mon Sep 17 00:00:00 2001 +From: Michael Stahl +Date: Thu, 18 Feb 2021 19:22:31 +0100 +Subject: xmlsecurity: XSecParser confused about multiple timestamps +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +LO writes timestamp both to dc:date and xades:SigningTime elements. + +The parser tries to avoid reading multiple dc:date, preferring the first +one, but doesn't care about multiple xades:SigningTime, for undocumented +reasons. + +Ideally something should check all read values for consistency. + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111160 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit 4ab8d9c09a5873ca0aea56dafa1ab34758d52ef7) + +xmlsecurity: remove XSecController::setPropertyId() + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111252 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit d2a345e1163616fe3201ef1d6c758e2e819214e0) + +Change-Id: Ic018ee89797a1c8a4f870ae102af48006de930ef +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111908 +Tested-by: Jenkins +Reviewed-by: Caolán McNamara +--- + include/svl/sigstruct.hxx | 7 ++- + xmlsecurity/inc/xsecctl.hxx | 5 +- + xmlsecurity/source/helper/ooxmlsecparser.cxx | 4 +- + xmlsecurity/source/helper/xsecctl.cxx | 2 +- + xmlsecurity/source/helper/xsecparser.cxx | 81 ++++++++++++++-------------- + xmlsecurity/source/helper/xsecparser.hxx | 6 --- + xmlsecurity/source/helper/xsecsign.cxx | 4 +- + xmlsecurity/source/helper/xsecverify.cxx | 39 ++++++-------- + 8 files changed, 68 insertions(+), 80 deletions(-) + +diff --git a/include/svl/sigstruct.hxx b/include/svl/sigstruct.hxx +index 38c1ee5ed142..d62ecb09634c 100644 +--- a/include/svl/sigstruct.hxx ++++ b/include/svl/sigstruct.hxx +@@ -103,6 +103,9 @@ struct SignatureInformation + // XAdES EncapsulatedX509Certificate values + std::set maEncapsulatedX509Certificates; + ++ OUString ouSignatureId; ++ // signature may contain multiple time stamps - check they're consistent ++ bool hasInconsistentSigningTime = false; + //We also keep the date and time as string. This is done when this + //structure is created as a result of a XML signature being read. + //When then a signature is added or another removed, then the original +@@ -115,8 +118,8 @@ struct SignatureInformation + //and the converted time is written back, then the string looks different + //and the signature is broken. + OUString ouDateTime; +- OUString ouSignatureId; +- OUString ouPropertyId; ++ /// The Id attribute of the element that contains the . ++ OUString ouDateTimePropertyId; + /// Characters of the element inside the signature. + OUString ouDescription; + /// The Id attribute of the element that contains the . +diff --git a/xmlsecurity/inc/xsecctl.hxx b/xmlsecurity/inc/xsecctl.hxx +index 324f1c43388b..759a660d90ad 100644 +--- a/xmlsecurity/inc/xsecctl.hxx ++++ b/xmlsecurity/inc/xsecctl.hxx +@@ -271,8 +271,8 @@ private: + void setGpgCertificate( OUString const & ouGpgCert ); + void setGpgOwner( OUString const & ouGpgOwner ); + +- void setDate( OUString const & ouDate ); +- void setDescription(const OUString& rDescription); ++ void setDate(OUString const& rId, OUString const& ouDate); ++ void setDescription(OUString const& rId, OUString const& rDescription); + void setCertDigest(const OUString& rCertDigest); + void setValidSignatureImage(const OUString& rValidSigImg); + void setInvalidSignatureImage(const OUString& rInvalidSigImg); +@@ -283,7 +283,6 @@ public: + + private: + void setId( OUString const & ouId ); +- void setPropertyId( OUString const & ouPropertyId ); + + css::uno::Reference< css::xml::crypto::sax::XReferenceResolvedListener > prepareSignatureToRead( + sal_Int32 nSecurityId ); +diff --git a/xmlsecurity/source/helper/ooxmlsecparser.cxx b/xmlsecurity/source/helper/ooxmlsecparser.cxx +index c22e8c2261bf..a200de60c07a 100644 +--- a/xmlsecurity/source/helper/ooxmlsecparser.cxx ++++ b/xmlsecurity/source/helper/ooxmlsecparser.cxx +@@ -192,12 +192,12 @@ void SAL_CALL OOXMLSecParser::endElement(const OUString& rName) + } + else if (rName == "mdssi:Value") + { +- m_pXSecController->setDate(m_aMdssiValue); ++ m_pXSecController->setDate("", m_aMdssiValue); + m_bInMdssiValue = false; + } + else if (rName == "SignatureComments") + { +- m_pXSecController->setDescription(m_aSignatureComments); ++ m_pXSecController->setDescription("", m_aSignatureComments); + m_bInSignatureComments = false; + } + else if (rName == "X509IssuerName") +diff --git a/xmlsecurity/source/helper/xsecctl.cxx b/xmlsecurity/source/helper/xsecctl.cxx +index cac30006b6a7..e3df9a85f6da 100644 +--- a/xmlsecurity/source/helper/xsecctl.cxx ++++ b/xmlsecurity/source/helper/xsecctl.cxx +@@ -815,7 +815,7 @@ void XSecController::exportSignature( + pAttributeList = new SvXMLAttributeList(); + pAttributeList->AddAttribute( + "Id", +- signatureInfo.ouPropertyId); ++ signatureInfo.ouDateTimePropertyId); + pAttributeList->AddAttribute( + "Target", + "#" + signatureInfo.ouSignatureId); +diff --git a/xmlsecurity/source/helper/xsecparser.cxx b/xmlsecurity/source/helper/xsecparser.cxx +index 0aecb1854f8c..1418b7b43b46 100644 +--- a/xmlsecurity/source/helper/xsecparser.cxx ++++ b/xmlsecurity/source/helper/xsecparser.cxx +@@ -974,6 +974,9 @@ class XSecParser::XadesSigningCertificateContext + class XSecParser::XadesSigningTimeContext + : public XSecParser::Context + { ++ private: ++ OUString m_Value; ++ + public: + XadesSigningTimeContext(XSecParser & rParser, + std::unique_ptr pOldNamespaceMap) +@@ -981,20 +984,14 @@ class XSecParser::XadesSigningTimeContext + { + } + +- virtual void StartElement( +- css::uno::Reference const& /*xAttrs*/) override +- { +- m_rParser.m_ouDate.clear(); +- } +- + virtual void EndElement() override + { +- m_rParser.m_pXSecController->setDate( m_rParser.m_ouDate ); ++ m_rParser.m_pXSecController->setDate("", m_Value); + } + + virtual void Characters(OUString const& rChars) override + { +- m_rParser.m_ouDate += rChars; ++ m_Value += rChars; + } + }; + +@@ -1100,35 +1097,20 @@ class XSecParser::DcDateContext + : public XSecParser::Context + { + private: +- bool m_isIgnore = false; ++ OUString & m_rValue; + + public: + DcDateContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) ++ std::unique_ptr pOldNamespaceMap, ++ OUString & rValue) + : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rValue(rValue) + { + } + +- virtual void StartElement( +- css::uno::Reference const& /*xAttrs*/) override +- { +- m_isIgnore = !m_rParser.m_ouDate.isEmpty(); +- } +- +- virtual void EndElement() override +- { +- if (!m_isIgnore) +- { +- m_rParser.m_pXSecController->setDate( m_rParser.m_ouDate ); +- } +- } +- + virtual void Characters(OUString const& rChars) override + { +- if (!m_isIgnore) +- { +- m_rParser.m_ouDate += rChars; +- } ++ m_rValue += rChars; + } + }; + +@@ -1136,29 +1118,32 @@ class XSecParser::DcDescriptionContext + : public XSecParser::Context + { + private: +- OUString m_Value; ++ OUString & m_rValue; + + public: + DcDescriptionContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) ++ std::unique_ptr pOldNamespaceMap, ++ OUString & rValue) + : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rValue(rValue) + { + } + +- virtual void EndElement() override +- { +- m_rParser.m_pXSecController->setDescription(m_Value); +- } +- + virtual void Characters(OUString const& rChars) override + { +- m_Value += rChars; ++ m_rValue += rChars; + } + }; + + class XSecParser::DsSignaturePropertyContext + : public XSecParser::Context + { ++ private: ++ enum class SignatureProperty { Unknown, Date, Description }; ++ SignatureProperty m_Property = SignatureProperty::Unknown; ++ OUString m_Id; ++ OUString m_Value; ++ + public: + DsSignaturePropertyContext(XSecParser & rParser, + std::unique_ptr pOldNamespaceMap) +@@ -1169,10 +1154,22 @@ class XSecParser::DsSignaturePropertyContext + virtual void StartElement( + css::uno::Reference const& xAttrs) override + { +- OUString const ouIdAttr(m_rParser.HandleIdAttr(xAttrs)); +- if (!ouIdAttr.isEmpty()) ++ m_Id = m_rParser.HandleIdAttr(xAttrs); ++ } ++ ++ virtual void EndElement() override ++ { ++ switch (m_Property) + { +- m_rParser.m_pXSecController->setPropertyId( ouIdAttr ); ++ case SignatureProperty::Unknown: ++ SAL_INFO("xmlsecurity.helper", "Unknown property in ds:Object ignored"); ++ break; ++ case SignatureProperty::Date: ++ m_rParser.m_pXSecController->setDate(m_Id, m_Value); ++ break; ++ case SignatureProperty::Description: ++ m_rParser.m_pXSecController->setDescription(m_Id, m_Value); ++ break; + } + } + +@@ -1182,11 +1179,13 @@ class XSecParser::DsSignaturePropertyContext + { + if (nNamespace == XML_NAMESPACE_DC && rName == "date") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ m_Property = SignatureProperty::Date; ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_Value); + } + if (nNamespace == XML_NAMESPACE_DC && rName == "description") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ m_Property = SignatureProperty::Description; ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_Value); + } + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +diff --git a/xmlsecurity/source/helper/xsecparser.hxx b/xmlsecurity/source/helper/xsecparser.hxx +index 93efcb766e3e..7a0eb08bca28 100644 +--- a/xmlsecurity/source/helper/xsecparser.hxx ++++ b/xmlsecurity/source/helper/xsecparser.hxx +@@ -97,12 +97,6 @@ private: + class DsSignatureContext; + class DsigSignaturesContext; + +- /* +- * the following members are used to reserve the signature information, +- * including X509IssuerName, X509SerialNumber, and X509Certificate,etc. +- */ +- OUString m_ouDate; +- + std::stack> m_ContextStack; + std::unique_ptr m_pNamespaceMap; + +diff --git a/xmlsecurity/source/helper/xsecsign.cxx b/xmlsecurity/source/helper/xsecsign.cxx +index b9648ed64397..1e1688767f00 100644 +--- a/xmlsecurity/source/helper/xsecsign.cxx ++++ b/xmlsecurity/source/helper/xsecsign.cxx +@@ -128,8 +128,8 @@ css::uno::Reference< css::xml::crypto::sax::XReferenceResolvedListener > XSecCon + if (nStorageFormat != embed::StorageFormats::OFOPXML) + { + internalSignatureInfor.signatureInfor.ouSignatureId = createId(); +- internalSignatureInfor.signatureInfor.ouPropertyId = createId(); +- internalSignatureInfor.addReference(SignatureReferenceType::SAMEDOCUMENT, digestID, internalSignatureInfor.signatureInfor.ouPropertyId, -1, OUString() ); ++ internalSignatureInfor.signatureInfor.ouDateTimePropertyId = createId(); ++ internalSignatureInfor.addReference(SignatureReferenceType::SAMEDOCUMENT, digestID, internalSignatureInfor.signatureInfor.ouDateTimePropertyId, -1, OUString() ); + size++; + + if (bXAdESCompliantIfODF) +diff --git a/xmlsecurity/source/helper/xsecverify.cxx b/xmlsecurity/source/helper/xsecverify.cxx +index c826971b1c7d..cdca811cc2cb 100644 +--- a/xmlsecurity/source/helper/xsecverify.cxx ++++ b/xmlsecurity/source/helper/xsecverify.cxx +@@ -317,7 +317,7 @@ void XSecController::setGpgOwner( OUString const & ouGpgOwner ) + isi.signatureInfor.ouGpgOwner = ouGpgOwner; + } + +-void XSecController::setDate( OUString const & ouDate ) ++void XSecController::setDate(OUString const& rId, OUString const& ouDate) + { + if (m_vInternalSignatureInformations.empty()) + { +@@ -325,17 +325,31 @@ void XSecController::setDate( OUString const & ouDate ) + return; + } + InternalSignatureInformation &isi = m_vInternalSignatureInformations.back(); ++ // there may be multiple timestamps in a signature - check them for consistency ++ if (!isi.signatureInfor.ouDateTime.isEmpty() ++ && isi.signatureInfor.ouDateTime != ouDate) ++ { ++ isi.signatureInfor.hasInconsistentSigningTime = true; ++ } + (void)utl::ISO8601parseDateTime( ouDate, isi.signatureInfor.stDateTime); + isi.signatureInfor.ouDateTime = ouDate; ++ if (!rId.isEmpty()) ++ { ++ isi.signatureInfor.ouDateTimePropertyId = rId; ++ } + } + +-void XSecController::setDescription(const OUString& rDescription) ++void XSecController::setDescription(OUString const& rId, OUString const& rDescription) + { + if (m_vInternalSignatureInformations.empty()) + return; + + InternalSignatureInformation& rInformation = m_vInternalSignatureInformations.back(); + rInformation.signatureInfor.ouDescription = rDescription; ++ if (!rId.isEmpty()) ++ { ++ rInformation.signatureInfor.ouDescriptionPropertyId = rId; ++ } + } + + void XSecController::setSignatureBytes(const uno::Sequence& rBytes) +@@ -429,27 +443,6 @@ void XSecController::setId( OUString const & ouId ) + isi.signatureInfor.ouSignatureId = ouId; + } + +-void XSecController::setPropertyId( OUString const & ouPropertyId ) +-{ +- if (m_vInternalSignatureInformations.empty()) +- { +- SAL_INFO("xmlsecurity.helper","XSecController::setPropertyId: no signature"); +- return; +- } +- InternalSignatureInformation &isi = m_vInternalSignatureInformations.back(); +- +- if (isi.signatureInfor.ouPropertyId.isEmpty()) +- { +- // ID attribute is for the date. +- isi.signatureInfor.ouPropertyId = ouPropertyId; +- } +- else +- { +- // ID attribute is for the description. +- isi.signatureInfor.ouDescriptionPropertyId = ouPropertyId; +- } +-} +- + /* public: for signature verify */ + void XSecController::collectToVerify( const OUString& referenceId ) + { +-- +cgit v1.2.1 + diff --git a/debian/patches/xmlsecurity-ignore-elements-in-ds:Object-that-arent-signed.diff b/debian/patches/xmlsecurity-ignore-elements-in-ds:Object-that-arent-signed.diff new file mode 100644 index 00000000000..5e0a9d7ee00 --- /dev/null +++ b/debian/patches/xmlsecurity-ignore-elements-in-ds:Object-that-arent-signed.diff @@ -0,0 +1,740 @@ +From 94ce59dd02fcfcaa1eb4f195b45a9a2edbd58242 Mon Sep 17 00:00:00 2001 +From: Michael Stahl +Date: Fri, 19 Feb 2021 17:56:21 +0100 +Subject: xmlsecurity: ignore elements in ds:Object that aren't signed +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Change-Id: I2e4411f0907b89e7ad6e0185cee8f12b600515e8 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111253 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit 2bfa00e6bf4b2a310a8b8f5060acec85b5f7a3ce) +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111909 +Reviewed-by: Caolán McNamara +--- + xmlsecurity/inc/xsecctl.hxx | 1 + + xmlsecurity/source/helper/xsecparser.cxx | 290 +++++++++++++++++++++---------- + xmlsecurity/source/helper/xsecparser.hxx | 1 + + xmlsecurity/source/helper/xsecverify.cxx | 19 ++ + 4 files changed, 221 insertions(+), 90 deletions(-) + +diff --git a/xmlsecurity/inc/xsecctl.hxx b/xmlsecurity/inc/xsecctl.hxx +index 759a660d90ad..ec3669128d24 100644 +--- a/xmlsecurity/inc/xsecctl.hxx ++++ b/xmlsecurity/inc/xsecctl.hxx +@@ -252,6 +252,7 @@ private: + /// Sets algorithm from . + void setSignatureMethod(svl::crypto::SignatureMethodAlgorithm eAlgorithmID); + void switchGpgSignature(); ++ bool haveReferenceForId(OUString const& rId) const; + void addReference( + const OUString& ouUri, + sal_Int32 nDigestID, +diff --git a/xmlsecurity/source/helper/xsecparser.cxx b/xmlsecurity/source/helper/xsecparser.cxx +index 1418b7b43b46..f46277f96ea1 100644 +--- a/xmlsecurity/source/helper/xsecparser.cxx ++++ b/xmlsecurity/source/helper/xsecparser.cxx +@@ -95,6 +95,42 @@ auto XSecParser::Context::CreateChildContext( + return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); + } + ++/** ++note: anything in ds:Object should be trusted *only* if there is a ds:Reference ++ to it so it is signed (exception: the xades:EncapsulatedX509Certificate). ++ ds:SignedInfo precedes all ds:Object. ++ ++ There may be multiple ds:Signature for purpose of counter-signatures ++ but the way XAdES describes these, only the ds:SignatureValue element ++ would be referenced, so requiring a ds:Reference for anything in ++ ds:Object shouldn't cause issues. ++ */ ++class XSecParser::ReferencedContextImpl ++ : public XSecParser::Context ++{ ++ protected: ++ bool m_isReferenced; ++ ++ public: ++ ReferencedContextImpl(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_isReferenced(isReferenced) ++ { ++ } ++ ++ OUString CheckIdAttrReferenced(css::uno::Reference const& xAttrs) ++ { ++ OUString const id(m_rParser.HandleIdAttr(xAttrs)); ++ if (!id.isEmpty() && m_rParser.m_pXSecController->haveReferenceForId(id)) ++ { ++ m_isReferenced = true; ++ } ++ return id; ++ } ++}; ++ + class XSecParser::LoPGPOwnerContext + : public XSecParser::Context + { +@@ -228,21 +264,29 @@ class XSecParser::DsX509CertificateContext + }; + + class XSecParser::DsX509SerialNumberContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + private: + OUString m_Value; + + public: + DsX509SerialNumberContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void EndElement() override + { +- m_rParser.m_pXSecController->setX509SerialNumber(m_Value); ++ if (m_isReferenced) ++ { ++ m_rParser.m_pXSecController->setX509SerialNumber(m_Value); ++ } ++ else ++ { ++ SAL_INFO("xmlsecurity.helper", "ignoring unsigned X509SerialNumber"); ++ } + } + + virtual void Characters(OUString const& rChars) override +@@ -252,21 +296,29 @@ class XSecParser::DsX509SerialNumberContext + }; + + class XSecParser::DsX509IssuerNameContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + private: + OUString m_Value; + + public: + DsX509IssuerNameContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void EndElement() override + { +- m_rParser.m_pXSecController->setX509IssuerName(m_Value); ++ if (m_isReferenced) ++ { ++ m_rParser.m_pXSecController->setX509IssuerName(m_Value); ++ } ++ else ++ { ++ SAL_INFO("xmlsecurity.helper", "ignoring unsigned X509IssuerName"); ++ } + } + + virtual void Characters(OUString const& rChars) override +@@ -276,12 +328,13 @@ class XSecParser::DsX509IssuerNameContext + }; + + class XSecParser::DsX509IssuerSerialContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + public: + DsX509IssuerSerialContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + +@@ -291,11 +344,11 @@ class XSecParser::DsX509IssuerSerialContext + { + if (nNamespace == XML_NAMESPACE_DS && rName == "X509IssuerName") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + if (nNamespace == XML_NAMESPACE_DS && rName == "X509SerialNumber") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + // missing: ds:X509SKI, ds:X509SubjectName, ds:X509CRL + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); +@@ -318,7 +371,8 @@ class XSecParser::DsX509DataContext + { + if (nNamespace == XML_NAMESPACE_DS && rName == "X509IssuerSerial") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ // can't require KeyInfo to be signed so pass in *true* ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), true); + } + if (nNamespace == XML_NAMESPACE_DS && rName == "X509Certificate") + { +@@ -787,21 +841,29 @@ class XSecParser::XadesUnsignedPropertiesContext + }; + + class XSecParser::LoSignatureLineIdContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + private: + OUString m_Value; + + public: + LoSignatureLineIdContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void EndElement() override + { +- m_rParser.m_pXSecController->setSignatureLineId(m_Value); ++ if (m_isReferenced) ++ { ++ m_rParser.m_pXSecController->setSignatureLineId(m_Value); ++ } ++ else ++ { ++ SAL_INFO("xmlsecurity.helper", "ignoring unsigned SignatureLineId"); ++ } + } + + virtual void Characters(OUString const& rChars) override +@@ -811,21 +873,29 @@ class XSecParser::LoSignatureLineIdContext + }; + + class XSecParser::LoSignatureLineValidImageContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + private: + OUString m_Value; + + public: + LoSignatureLineValidImageContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void EndElement() override + { +- m_rParser.m_pXSecController->setValidSignatureImage(m_Value); ++ if (m_isReferenced) ++ { ++ m_rParser.m_pXSecController->setValidSignatureImage(m_Value); ++ } ++ else ++ { ++ SAL_INFO("xmlsecurity.helper", "ignoring unsigned SignatureLineValidImage"); ++ } + } + + virtual void Characters(OUString const& rChars) override +@@ -835,21 +905,29 @@ class XSecParser::LoSignatureLineValidImageContext + }; + + class XSecParser::LoSignatureLineInvalidImageContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + private: + OUString m_Value; + + public: + LoSignatureLineInvalidImageContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void EndElement() override + { +- m_rParser.m_pXSecController->setInvalidSignatureImage(m_Value); ++ if (m_isReferenced) ++ { ++ m_rParser.m_pXSecController->setInvalidSignatureImage(m_Value); ++ } ++ else ++ { ++ SAL_INFO("xmlsecurity.helper", "ignoring unsigned SignatureLineInvalidImage"); ++ } + } + + virtual void Characters(OUString const& rChars) override +@@ -859,12 +937,13 @@ class XSecParser::LoSignatureLineInvalidImageContext + }; + + class XSecParser::LoSignatureLineContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + public: + LoSignatureLineContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + +@@ -874,22 +953,22 @@ class XSecParser::LoSignatureLineContext + { + if (nNamespace == XML_NAMESPACE_LO_EXT && rName == "SignatureLineId") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + if (nNamespace == XML_NAMESPACE_LO_EXT && rName == "SignatureLineValidImage") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + if (nNamespace == XML_NAMESPACE_LO_EXT && rName == "SignatureLineInvalidImage") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } + }; + + class XSecParser::XadesCertDigestContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + private: + OUString m_Value; +@@ -897,14 +976,22 @@ class XSecParser::XadesCertDigestContext + + public: + XadesCertDigestContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void EndElement() override + { +- m_rParser.m_pXSecController->setCertDigest(m_Value/* FIXME , m_nReferenceDigestID*/); ++ if (m_isReferenced) ++ { ++ m_rParser.m_pXSecController->setCertDigest(m_Value/* FIXME , m_nReferenceDigestID*/); ++ } ++ else ++ { ++ SAL_INFO("xmlsecurity.helper", "ignoring unsigned CertDigest"); ++ } + } + + virtual std::unique_ptr CreateChildContext( +@@ -924,12 +1011,13 @@ class XSecParser::XadesCertDigestContext + }; + + class XSecParser::XadesCertContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + public: + XadesCertContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + +@@ -939,23 +1027,24 @@ class XSecParser::XadesCertContext + { + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "CertDigest") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "IssuerSerial") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } + }; + + class XSecParser::XadesSigningCertificateContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + public: + XadesSigningCertificateContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + +@@ -965,28 +1054,36 @@ class XSecParser::XadesSigningCertificateContext + { + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "Cert") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } + }; + + class XSecParser::XadesSigningTimeContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + private: + OUString m_Value; + + public: + XadesSigningTimeContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void EndElement() override + { +- m_rParser.m_pXSecController->setDate("", m_Value); ++ if (m_isReferenced) ++ { ++ m_rParser.m_pXSecController->setDate("", m_Value); ++ } ++ else ++ { ++ SAL_INFO("xmlsecurity.helper", "ignoring unsigned SigningTime"); ++ } + } + + virtual void Characters(OUString const& rChars) override +@@ -996,19 +1093,20 @@ class XSecParser::XadesSigningTimeContext + }; + + class XSecParser::XadesSignedSignaturePropertiesContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + public: + XadesSignedSignaturePropertiesContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void StartElement( + css::uno::Reference const& xAttrs) override + { +- m_rParser.HandleIdAttr(xAttrs); ++ CheckIdAttrReferenced(xAttrs); + } + + virtual std::unique_ptr CreateChildContext( +@@ -1017,15 +1115,15 @@ class XSecParser::XadesSignedSignaturePropertiesContext + { + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "SigningTime") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "SigningCertificate") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + if (nNamespace == XML_NAMESPACE_LO_EXT && rName == "SignatureLine") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + // missing: xades:SignaturePolicyIdentifier, xades:SignatureProductionPlace, xades:SignerRole + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); +@@ -1033,19 +1131,20 @@ class XSecParser::XadesSignedSignaturePropertiesContext + }; + + class XSecParser::XadesSignedPropertiesContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + public: + XadesSignedPropertiesContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void StartElement( + css::uno::Reference const& xAttrs) override + { +- m_rParser.HandleIdAttr(xAttrs); ++ CheckIdAttrReferenced(xAttrs); + } + + virtual std::unique_ptr CreateChildContext( +@@ -1054,7 +1153,7 @@ class XSecParser::XadesSignedPropertiesContext + { + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "SignedSignatureProperties") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + // missing: xades:SignedDataObjectProperties + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); +@@ -1062,19 +1161,20 @@ class XSecParser::XadesSignedPropertiesContext + }; + + class XSecParser::XadesQualifyingPropertiesContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + public: + XadesQualifyingPropertiesContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void StartElement( + css::uno::Reference const& xAttrs) override + { +- m_rParser.HandleIdAttr(xAttrs); ++ CheckIdAttrReferenced(xAttrs); + } + + virtual std::unique_ptr CreateChildContext( +@@ -1083,7 +1183,7 @@ class XSecParser::XadesQualifyingPropertiesContext + { + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "SignedProperties") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "UnsignedProperties") + { +@@ -1136,7 +1236,7 @@ class XSecParser::DcDescriptionContext + }; + + class XSecParser::DsSignaturePropertyContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + private: + enum class SignatureProperty { Unknown, Date, Description }; +@@ -1146,30 +1246,38 @@ class XSecParser::DsSignaturePropertyContext + + public: + DsSignaturePropertyContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void StartElement( + css::uno::Reference const& xAttrs) override + { +- m_Id = m_rParser.HandleIdAttr(xAttrs); ++ m_Id = CheckIdAttrReferenced(xAttrs); + } + + virtual void EndElement() override + { +- switch (m_Property) ++ if (m_isReferenced) ++ { ++ switch (m_Property) ++ { ++ case SignatureProperty::Unknown: ++ SAL_INFO("xmlsecurity.helper", "Unknown property in ds:Object ignored"); ++ break; ++ case SignatureProperty::Date: ++ m_rParser.m_pXSecController->setDate(m_Id, m_Value); ++ break; ++ case SignatureProperty::Description: ++ m_rParser.m_pXSecController->setDescription(m_Id, m_Value); ++ break; ++ } ++ } ++ else + { +- case SignatureProperty::Unknown: +- SAL_INFO("xmlsecurity.helper", "Unknown property in ds:Object ignored"); +- break; +- case SignatureProperty::Date: +- m_rParser.m_pXSecController->setDate(m_Id, m_Value); +- break; +- case SignatureProperty::Description: +- m_rParser.m_pXSecController->setDescription(m_Id, m_Value); +- break; ++ SAL_INFO("xmlsecurity.helper", "ignoring unsigned SignatureProperty"); + } + } + +@@ -1192,19 +1300,20 @@ class XSecParser::DsSignaturePropertyContext + }; + + class XSecParser::DsSignaturePropertiesContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + public: + DsSignaturePropertiesContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ std::unique_ptr pOldNamespaceMap, ++ bool const isReferenced) ++ : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) + { + } + + virtual void StartElement( + css::uno::Reference const& xAttrs) override + { +- m_rParser.HandleIdAttr(xAttrs); ++ CheckIdAttrReferenced(xAttrs); + } + + virtual std::unique_ptr CreateChildContext( +@@ -1213,26 +1322,27 @@ class XSecParser::DsSignaturePropertiesContext + { + if (nNamespace == XML_NAMESPACE_DS && rName == "SignatureProperty") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } + }; + + class XSecParser::DsObjectContext +- : public XSecParser::Context ++ : public XSecParser::ReferencedContextImpl + { + public: + DsObjectContext(XSecParser & rParser, + std::unique_ptr pOldNamespaceMap) +- : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ // init with "false" here - the Signature element can't be referenced by its child ++ : XSecParser::ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), false) + { + } + + virtual void StartElement( + css::uno::Reference const& xAttrs) override + { +- m_rParser.HandleIdAttr(xAttrs); ++ CheckIdAttrReferenced(xAttrs); + } + + virtual std::unique_ptr CreateChildContext( +@@ -1241,11 +1351,11 @@ class XSecParser::DsObjectContext + { + if (nNamespace == XML_NAMESPACE_DS && rName == "SignatureProperties") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "QualifyingProperties") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); + } + // missing: ds:Manifest + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); +diff --git a/xmlsecurity/source/helper/xsecparser.hxx b/xmlsecurity/source/helper/xsecparser.hxx +index 7a0eb08bca28..7674bf28b84d 100644 +--- a/xmlsecurity/source/helper/xsecparser.hxx ++++ b/xmlsecurity/source/helper/xsecparser.hxx +@@ -56,6 +56,7 @@ public: + class Context; + private: + class UnknownContext; ++ class ReferencedContextImpl; + class LoPGPOwnerContext; + class DsPGPKeyPacketContext; + class DsPGPKeyIDContext; +diff --git a/xmlsecurity/source/helper/xsecverify.cxx b/xmlsecurity/source/helper/xsecverify.cxx +index cdca811cc2cb..92ebfb6c72e8 100644 +--- a/xmlsecurity/source/helper/xsecverify.cxx ++++ b/xmlsecurity/source/helper/xsecverify.cxx +@@ -143,6 +143,25 @@ void XSecController::switchGpgSignature() + #endif + } + ++bool XSecController::haveReferenceForId(OUString const& rId) const ++{ ++ if (m_vInternalSignatureInformations.empty()) ++ { ++ SAL_INFO("xmlsecurity.helper","XSecController::haveReferenceForId: no signature"); ++ return false; ++ } ++ InternalSignatureInformation const& rIsi(m_vInternalSignatureInformations.back()); ++ for (SignatureReferenceInformation const& rSri : rIsi.signatureInfor.vSignatureReferenceInfors) ++ { ++ if (rSri.nType == SignatureReferenceType::SAMEDOCUMENT ++ && rSri.ouURI == rId) // ouUri has # stripped ++ { ++ return true; ++ } ++ } ++ return false; ++} ++ + void XSecController::addReference( const OUString& ouUri, sal_Int32 nDigestID, const OUString& ouType ) + { + if (m_vInternalSignatureInformations.empty()) +-- +cgit v1.2.1 + diff --git a/debian/patches/xmlsecurity-improve-handling-of-multiple-X509Data-elements.diff b/debian/patches/xmlsecurity-improve-handling-of-multiple-X509Data-elements.diff new file mode 100644 index 00000000000..988574269a9 --- /dev/null +++ b/debian/patches/xmlsecurity-improve-handling-of-multiple-X509Data-elements.diff @@ -0,0 +1,1597 @@ +From a1cf770c2d7ca3e153e0b1f01ddcc313bc2bed7f Mon Sep 17 00:00:00 2001 +From: Michael Stahl +Date: Thu, 25 Feb 2021 14:17:48 +0100 +Subject: xmlsecurity: improve handling of multiple X509Data elements +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Combine everything related to a certificate in a new struct X509Data. + +The CertDigest is not actually written in the X509Data element but in +xades:Cert, so try to find the matching entry in +XSecController::setX509CertDigest(). + +There was a confusing interaction with PGP signatures, where ouGpgKeyID +was used for import, but export wrote the value from ouCertDigest +instead - this needed fixing. + +The main point of this is enforcing a constraint from xmldsig-core 4.5.4: + + All certificates appearing in an X509Data element MUST relate to the + validation key by either containing it or being part of a certification + chain that terminates in a certificate containing the validation key. + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111254 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit 9e82509b09f5fe2eb77bcdb8fd193c71923abb67) + +xmlsecurity: improve handling of multiple certificates per X509Data + +It turns out that an X509Data element can contain an arbitrary number of +each of its child elements. + +How exactly certificates of an issuer chain may or should be distributed +across multiple X509Data elements isn't terribly obvious. + +One thing that is clear is that any element that refers to or contains +one particular certificate has to be a child of the same X509Data +element, although in no particular order, so try to match the 2 such +elements that the parser supports in XSecController::setX509Data(). + +Presumably the only way it makes sense to have multiple signing +certificates is if they all contain the same key but are signed by +different CAs. This case isn't handled currently; CheckX509Data() will +complain there's not a single chain and validation of the certificates +will fail. + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111500 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit 5af5ea893bcb8a8eb472ac11133da10e5a604e66) + +xmlsecurity: add EqualDistinguishedNames() + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111545 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit 1d3da3486d827dd5e7a3bf1c7a533f5aa9860e42) + +xmlsecurity: avoid exception in DigitalSignaturesDialog::getCertificate() + +Fallback to PGP if there's no X509 signing certificate because +CheckX509Data() failed prevents the dialog from popping up. + +To avoid confusing the user in this situation, the dialog should +show no certificate, which is already the case. + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111664 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit 90b725675c2964f4a151d802d9afedd8bc2ae1a7) + +xmlsecurity: fix crash in DocumentDigitalSignatures::isAuthorTrusted() + +If the argument is null. + +This function also should use EqualDistinguishedNames(). + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111667 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit ca98e505cd69bf95d8ddb9387cf3f8e03ae4577d) + +Change-Id: I9633a980b0c18d58dfce24fc59396a833498a77d +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111910 +Tested-by: Jenkins +Reviewed-by: Caolán McNamara +--- + include/svl/sigstruct.hxx | 32 +++- + svl/source/crypto/cryptosign.cxx | 16 +- + sw/source/core/edit/edfcol.cxx | 3 +- + xmlsecurity/inc/biginteger.hxx | 3 + + xmlsecurity/inc/xmlsignaturehelper.hxx | 12 ++ + xmlsecurity/inc/xsecctl.hxx | 14 +- + .../source/component/documentdigitalsignatures.cxx | 54 ++++--- + .../source/dialogs/digitalsignaturesdialog.cxx | 15 +- + .../source/helper/documentsignaturehelper.cxx | 63 +++++--- + .../source/helper/documentsignaturemanager.cxx | 12 ++ + xmlsecurity/source/helper/ooxmlsecexporter.cxx | 22 ++- + xmlsecurity/source/helper/ooxmlsecparser.cxx | 22 ++- + xmlsecurity/source/helper/pdfsignaturehelper.cxx | 8 +- + xmlsecurity/source/helper/xmlsignaturehelper.cxx | 161 +++++++++++++++++++++ + xmlsecurity/source/helper/xsecctl.cxx | 80 ++++++---- + xmlsecurity/source/helper/xsecparser.cxx | 144 +++++++++--------- + xmlsecurity/source/helper/xsecsign.cxx | 30 ++-- + xmlsecurity/source/helper/xsecverify.cxx | 124 +++++++++++++--- + .../xmlsec/mscrypt/x509certificate_mscryptimpl.cxx | 47 ++++++ + .../xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx | 2 + + .../source/xmlsec/nss/x509certificate_nssimpl.cxx | 25 ++++ + .../source/xmlsec/nss/xmlsignature_nssimpl.cxx | 3 + + 22 files changed, 678 insertions(+), 214 deletions(-) + +diff --git a/include/svl/sigstruct.hxx b/include/svl/sigstruct.hxx +index d62ecb09634c..6d53e048d47b 100644 +--- a/include/svl/sigstruct.hxx ++++ b/include/svl/sigstruct.hxx +@@ -89,9 +89,30 @@ struct SignatureInformation + sal_Int32 nSecurityId; + css::xml::crypto::SecurityOperationStatus nStatus; + SignatureReferenceInformations vSignatureReferenceInfors; +- OUString ouX509IssuerName; +- OUString ouX509SerialNumber; +- OUString ouX509Certificate; ++ struct X509CertInfo ++ { ++ OUString X509IssuerName; ++ OUString X509SerialNumber; ++ OUString X509Certificate; ++ /// OOXML certificate SHA-256 digest, empty for ODF except when doing XAdES signature. ++ OUString CertDigest; ++ /// The certificate owner (aka subject). ++ OUString X509Subject; ++ }; ++ typedef std::vector X509Data; ++ // note: at parse time, it's unkown which one is the signing certificate; ++ // ImplVerifySignatures() figures it out and puts it at the back ++ std::vector X509Datas; ++ ++ X509CertInfo const* GetSigningCertificate() const ++ { ++ if (X509Datas.empty()) ++ { ++ return nullptr; ++ } ++ assert(!X509Datas.back().empty()); ++ return & X509Datas.back().back(); ++ } + + OUString ouGpgKeyID; + OUString ouGpgCertificate; +@@ -124,8 +145,6 @@ struct SignatureInformation + OUString ouDescription; + /// The Id attribute of the element that contains the . + OUString ouDescriptionPropertyId; +- /// OOXML certificate SHA-256 digest, empty for ODF except when doing XAdES signature. +- OUString ouCertDigest; + /// Valid and invalid signature line images + css::uno::Reference aValidSignatureImage; + css::uno::Reference aInvalidSignatureImage; +@@ -140,9 +159,6 @@ struct SignatureInformation + /// For PDF: the byte range doesn't cover the whole document. + bool bPartialDocumentSignature; + +- /// The certificate owner (aka subject). +- OUString ouSubject; +- + svl::crypto::SignatureMethodAlgorithm eAlgorithmID; + + SignatureInformation( sal_Int32 nId ) +diff --git a/svl/source/crypto/cryptosign.cxx b/svl/source/crypto/cryptosign.cxx +index 573c06ba5826..a015f00576a4 100644 +--- a/svl/source/crypto/cryptosign.cxx ++++ b/svl/source/crypto/cryptosign.cxx +@@ -2094,8 +2094,12 @@ bool Signing::Verify(const std::vector& aData, + aDerCert[i] = pCertificate->derCert.data[i]; + OUStringBuffer aBuffer; + comphelper::Base64::encode(aBuffer, aDerCert); +- rInformation.ouX509Certificate = aBuffer.makeStringAndClear(); +- rInformation.ouSubject = OUString(pCertificate->subjectName, PL_strlen(pCertificate->subjectName), RTL_TEXTENCODING_UTF8); ++ SignatureInformation::X509Data temp; ++ temp.emplace_back(); ++ temp.back().X509Certificate = aBuffer.makeStringAndClear(); ++ temp.back().X509Subject = OUString(pCertificate->subjectName, PL_strlen(pCertificate->subjectName), RTL_TEXTENCODING_UTF8); ++ rInformation.X509Datas.clear(); ++ rInformation.X509Datas.emplace_back(temp); + } + + PRTime nSigningTime; +@@ -2274,8 +2278,12 @@ bool Signing::Verify(const std::vector& aData, + aDerCert[i] = pSignerCertContext->pbCertEncoded[i]; + OUStringBuffer aBuffer; + comphelper::Base64::encode(aBuffer, aDerCert); +- rInformation.ouX509Certificate = aBuffer.makeStringAndClear(); +- rInformation.ouSubject = GetSubjectName(pSignerCertContext); ++ SignatureInformation::X509Data temp; ++ temp.emplace_back(); ++ temp.back().X509Certificate = aBuffer.makeStringAndClear(); ++ temp.back().X509Subject = GetSubjectName(pSignerCertContext); ++ rInformation.X509Datas.clear(); ++ rInformation.X509Datas.emplace_back(temp); + } + + if (bNonDetached) +diff --git a/sw/source/core/edit/edfcol.cxx b/sw/source/core/edit/edfcol.cxx +index d0154b4886ef..b2299ec42213 100644 +--- a/sw/source/core/edit/edfcol.cxx ++++ b/sw/source/core/edit/edfcol.cxx +@@ -402,7 +402,8 @@ std::pair lcl_MakeParagraphSignatureFieldText(const SignatureDes + valid = valid + && aInfo.nStatus == xml::crypto::SecurityOperationStatus_OPERATION_SUCCEEDED; + +- msg = SwResId(STR_SIGNED_BY) + ": " + aInfo.ouSubject + ", " + ++ assert(aInfo.GetSigningCertificate()); // it was valid ++ msg = SwResId(STR_SIGNED_BY) + ": " + aInfo.GetSigningCertificate()->X509Subject + ", " + + aDescr.msDate; + msg += (!aDescr.msUsage.isEmpty() ? (" (" + aDescr.msUsage + "): ") : OUString(": ")); + msg += (valid ? SwResId(STR_VALID) : SwResId(STR_INVALID)); +diff --git a/xmlsecurity/inc/biginteger.hxx b/xmlsecurity/inc/biginteger.hxx +index d07ecf45d8af..8b4d8a9143b5 100644 +--- a/xmlsecurity/inc/biginteger.hxx ++++ b/xmlsecurity/inc/biginteger.hxx +@@ -31,6 +31,9 @@ namespace xmlsecurity + { + XSECXMLSEC_DLLPUBLIC OUString bigIntegerToNumericString( const css::uno::Sequence< sal_Int8 >& serial ); + XSECXMLSEC_DLLPUBLIC css::uno::Sequence< sal_Int8 > numericStringToBigInteger ( const OUString& serialNumber ); ++ ++XSECXMLSEC_DLLPUBLIC bool EqualDistinguishedNames(OUString const& rName1, ++ OUString const& rName2); + } + + #endif +diff --git a/xmlsecurity/inc/xmlsignaturehelper.hxx b/xmlsecurity/inc/xmlsignaturehelper.hxx +index 2437686ea31b..a12309ef4d0a 100644 +--- a/xmlsecurity/inc/xmlsignaturehelper.hxx ++++ b/xmlsecurity/inc/xmlsignaturehelper.hxx +@@ -28,6 +28,9 @@ + #include "xmlsignaturehelper.hxx" + #include "xsecctl.hxx" + ++#include ++#include ++ + class DateTime; + class UriBindingHelper; + +@@ -93,6 +96,15 @@ public: + // After signing/verifying, get information about signatures + SignatureInformation GetSignatureInformation( sal_Int32 nSecurityId ) const; + SignatureInformations GetSignatureInformations() const; ++ /// ImplVerifySignature calls this to figure out which X509Data is the ++ /// signing certificate and update the internal state with the result. ++ /// @return ++ /// A sequence with the signing certificate at the back on success. ++ /// An empty sequence on failure. ++ std::vector> ++ CheckAndUpdateSignatureInformation( ++ css::uno::Reference const& xSecEnv, ++ SignatureInformation const& rInfo); + + // See XSecController for documentation + void StartMission(const css::uno::Reference& xSecurityContext); +diff --git a/xmlsecurity/inc/xsecctl.hxx b/xmlsecurity/inc/xsecctl.hxx +index ec3669128d24..ca6c169798c2 100644 +--- a/xmlsecurity/inc/xsecctl.hxx ++++ b/xmlsecurity/inc/xsecctl.hxx +@@ -263,9 +263,13 @@ private: + sal_Int32 nDigestID ); + void setReferenceCount() const; + +- void setX509IssuerName( OUString const & ouX509IssuerName ); +- void setX509SerialNumber( OUString const & ouX509SerialNumber ); +- void setX509Certificate( OUString const & ouX509Certificate ); ++ void setX509Data( ++ std::vector> & rX509IssuerSerials, ++ std::vector const& rX509Certificates); ++ void setX509CertDigest( ++ OUString const& rCertDigest, sal_Int32 const nReferenceDigestID, ++ OUString const& rX509IssuerName, OUString const& rX509SerialNumber); ++ + void setSignatureValue( OUString const & ouSignatureValue ); + void setDigestValue( sal_Int32 nDigestID, OUString const & ouDigestValue ); + void setGpgKeyID( OUString const & ouKeyID ); +@@ -274,7 +278,6 @@ private: + + void setDate(OUString const& rId, OUString const& ouDate); + void setDescription(OUString const& rId, OUString const& rDescription); +- void setCertDigest(const OUString& rCertDigest); + void setValidSignatureImage(const OUString& rValidSigImg); + void setInvalidSignatureImage(const OUString& rInvalidSigImg); + void setSignatureLineId(const OUString& rSignatureLineId); +@@ -303,6 +306,9 @@ public: + + SignatureInformation getSignatureInformation( sal_Int32 nSecurityId ) const; + SignatureInformations getSignatureInformations() const; ++ /// only verify can figure out which X509Data is the signing certificate ++ void UpdateSignatureInformation(sal_Int32 nSecurityId, ++ std::vector const& rDatas); + + static void exportSignature( + const css::uno::Reference< css::xml::sax::XDocumentHandler >& xDocumentHandler, +diff --git a/xmlsecurity/source/component/documentdigitalsignatures.cxx b/xmlsecurity/source/component/documentdigitalsignatures.cxx +index d149bf5e30b2..8f1fe7c2785d 100644 +--- a/xmlsecurity/source/component/documentdigitalsignatures.cxx ++++ b/xmlsecurity/source/component/documentdigitalsignatures.cxx +@@ -529,30 +529,36 @@ DocumentDigitalSignatures::ImplVerifySignatures( + const SignatureInformation& rInfo = aSignInfos[n]; + css::security::DocumentSignatureInformation& rSigInfo = arInfos[n]; + +- if (rInfo.ouGpgCertificate.isEmpty()) // X.509 ++ if (!rInfo.X509Datas.empty()) // X.509 + { +- if (!rInfo.ouX509Certificate.isEmpty()) +- rSigInfo.Signer = xSecEnv->createCertificateFromAscii(rInfo.ouX509Certificate); +- if (!rSigInfo.Signer.is()) +- rSigInfo.Signer = xSecEnv->getCertificate( +- rInfo.ouX509IssuerName, +- xmlsecurity::numericStringToBigInteger(rInfo.ouX509SerialNumber)); +- +- // On Windows checking the certificate path is buggy. It does name matching (issuer, subject name) +- // to find the parent certificate. It does not take into account that there can be several certificates +- // with the same subject name. +- try ++ std::vector> certs( ++ rSignatureHelper.CheckAndUpdateSignatureInformation( ++ xSecEnv, rInfo)); ++ if (certs.empty()) + { +- rSigInfo.CertificateStatus = xSecEnv->verifyCertificate( +- rSigInfo.Signer, Sequence>()); ++ rSigInfo.CertificateStatus = css::security::CertificateValidity::INVALID; + } +- catch (SecurityException&) ++ else + { +- OSL_FAIL("Verification of certificate failed"); +- rSigInfo.CertificateStatus = css::security::CertificateValidity::INVALID; ++ rSigInfo.Signer = certs.back(); ++ // get only intermediates ++ certs.pop_back(); ++ // On Windows checking the certificate path is buggy. It does name matching (issuer, subject name) ++ // to find the parent certificate. It does not take into account that there can be several certificates ++ // with the same subject name. ++ try ++ { ++ rSigInfo.CertificateStatus = xSecEnv->verifyCertificate( ++ rSigInfo.Signer, comphelper::containerToSequence(certs)); ++ } ++ catch (SecurityException&) ++ { ++ SAL_WARN("xmlsecurity.comp", "Verification of certificate failed"); ++ rSigInfo.CertificateStatus = css::security::CertificateValidity::INVALID; ++ } + } + } +- else if (xGpgSecEnv.is()) // GPG ++ else if (!rInfo.ouGpgCertificate.isEmpty() && xGpgSecEnv.is()) // GPG + { + // TODO not ideal to retrieve cert by keyID, might + // collide, or PGPKeyID format might change - can't we +@@ -638,15 +644,19 @@ void DocumentDigitalSignatures::showCertificate( + } + + sal_Bool DocumentDigitalSignatures::isAuthorTrusted( +- const Reference< css::security::XCertificate >& Author ) ++ const Reference& xAuthor) + { +- OUString sSerialNum = xmlsecurity::bigIntegerToNumericString( Author->getSerialNumber() ); ++ if (!xAuthor.is()) ++ { ++ return false; ++ } ++ OUString sSerialNum = xmlsecurity::bigIntegerToNumericString(xAuthor->getSerialNumber()); + + Sequence< SvtSecurityOptions::Certificate > aTrustedAuthors = SvtSecurityOptions().GetTrustedAuthors(); + + return std::any_of(aTrustedAuthors.begin(), aTrustedAuthors.end(), +- [&Author, &sSerialNum](const SvtSecurityOptions::Certificate& rAuthor) { +- return ( rAuthor[0] == Author->getIssuerName() ) ++ [&xAuthor, &sSerialNum](const SvtSecurityOptions::Certificate& rAuthor) { ++ return xmlsecurity::EqualDistinguishedNames(rAuthor[0], xAuthor->getIssuerName()) + && ( rAuthor[1] == sSerialNum ); + }); + } +diff --git a/xmlsecurity/source/dialogs/digitalsignaturesdialog.cxx b/xmlsecurity/source/dialogs/digitalsignaturesdialog.cxx +index ef67c7167c04..18ccaf2d2166 100644 +--- a/xmlsecurity/source/dialogs/digitalsignaturesdialog.cxx ++++ b/xmlsecurity/source/dialogs/digitalsignaturesdialog.cxx +@@ -588,7 +588,7 @@ void DigitalSignaturesDialog::ImplFillSignaturesBox() + if (!rInfo.ouGpgCertificate.isEmpty()) + aType = "OpenPGP"; + // XML based: XAdES or not. +- else if (!rInfo.ouCertDigest.isEmpty()) ++ else if (rInfo.GetSigningCertificate() && !rInfo.GetSigningCertificate()->CertDigest.isEmpty()) + aType = "XAdES"; + else + aType = "XML-DSig"; +@@ -700,8 +700,8 @@ uno::Reference DigitalSignaturesDialog::getCertificate(c + uno::Reference xCert; + + //First we try to get the certificate which is embedded in the XML Signature +- if (xSecEnv.is() && !rInfo.ouX509Certificate.isEmpty()) +- xCert = xSecEnv->createCertificateFromAscii(rInfo.ouX509Certificate); ++ if (xSecEnv.is() && rInfo.GetSigningCertificate() && !rInfo.GetSigningCertificate()->X509Certificate.isEmpty()) ++ xCert = xSecEnv->createCertificateFromAscii(rInfo.GetSigningCertificate()->X509Certificate); + else { + //There must be an embedded certificate because we use it to get the + //issuer name. We cannot use /Signature/KeyInfo/X509Data/X509IssuerName +@@ -713,9 +713,12 @@ uno::Reference DigitalSignaturesDialog::getCertificate(c + } + + //In case there is no embedded certificate we try to get it from a local store +- if (!xCert.is() && xSecEnv.is()) +- xCert = xSecEnv->getCertificate( rInfo.ouX509IssuerName, xmlsecurity::numericStringToBigInteger( rInfo.ouX509SerialNumber ) ); +- if (!xCert.is() && xGpgSecEnv.is()) ++ if (!xCert.is() && xSecEnv.is() && rInfo.GetSigningCertificate()) ++ { ++ xCert = xSecEnv->getCertificate(rInfo.GetSigningCertificate()->X509IssuerName, ++ xmlsecurity::numericStringToBigInteger(rInfo.GetSigningCertificate()->X509SerialNumber)); ++ } ++ if (!xCert.is() && xGpgSecEnv.is() && !rInfo.ouGpgKeyID.isEmpty()) + xCert = xGpgSecEnv->getCertificate( rInfo.ouGpgKeyID, xmlsecurity::numericStringToBigInteger("") ); + + SAL_WARN_IF( !xCert.is(), "xmlsecurity.dialogs", "Certificate not found and can't be created!" ); +diff --git a/xmlsecurity/source/helper/documentsignaturehelper.cxx b/xmlsecurity/source/helper/documentsignaturehelper.cxx +index 482ae6cc4126..ddff308ee52f 100644 +--- a/xmlsecurity/source/helper/documentsignaturehelper.cxx ++++ b/xmlsecurity/source/helper/documentsignaturehelper.cxx +@@ -492,6 +492,29 @@ void DocumentSignatureHelper::writeDigestMethod( + xDocumentHandler->endElement("DigestMethod"); + } + ++static void WriteXadesCert( ++ uno::Reference const& xDocumentHandler, ++ SignatureInformation::X509CertInfo const& rCertInfo) ++{ ++ xDocumentHandler->startElement("xd:Cert", uno::Reference(new SvXMLAttributeList())); ++ xDocumentHandler->startElement("xd:CertDigest", uno::Reference(new SvXMLAttributeList())); ++ DocumentSignatureHelper::writeDigestMethod(xDocumentHandler); ++ xDocumentHandler->startElement("DigestValue", uno::Reference(new SvXMLAttributeList())); ++ assert(!rCertInfo.CertDigest.isEmpty()); ++ xDocumentHandler->characters(rCertInfo.CertDigest); ++ xDocumentHandler->endElement("DigestValue"); ++ xDocumentHandler->endElement("xd:CertDigest"); ++ xDocumentHandler->startElement("xd:IssuerSerial", uno::Reference(new SvXMLAttributeList())); ++ xDocumentHandler->startElement("X509IssuerName", uno::Reference(new SvXMLAttributeList())); ++ xDocumentHandler->characters(rCertInfo.X509IssuerName); ++ xDocumentHandler->endElement("X509IssuerName"); ++ xDocumentHandler->startElement("X509SerialNumber", uno::Reference(new SvXMLAttributeList())); ++ xDocumentHandler->characters(rCertInfo.X509SerialNumber); ++ xDocumentHandler->endElement("X509SerialNumber"); ++ xDocumentHandler->endElement("xd:IssuerSerial"); ++ xDocumentHandler->endElement("xd:Cert"); ++} ++ + void DocumentSignatureHelper::writeSignedProperties( + const uno::Reference& xDocumentHandler, + const SignatureInformation& signatureInfo, +@@ -508,26 +531,26 @@ void DocumentSignatureHelper::writeSignedProperties( + xDocumentHandler->characters(sDate); + xDocumentHandler->endElement("xd:SigningTime"); + xDocumentHandler->startElement("xd:SigningCertificate", uno::Reference(new SvXMLAttributeList())); +- xDocumentHandler->startElement("xd:Cert", uno::Reference(new SvXMLAttributeList())); +- xDocumentHandler->startElement("xd:CertDigest", uno::Reference(new SvXMLAttributeList())); +- writeDigestMethod(xDocumentHandler); +- +- xDocumentHandler->startElement("DigestValue", uno::Reference(new SvXMLAttributeList())); +- // TODO: this is empty for gpg signatures currently +- //assert(!signatureInfo.ouCertDigest.isEmpty()); +- xDocumentHandler->characters(signatureInfo.ouCertDigest); +- xDocumentHandler->endElement("DigestValue"); +- +- xDocumentHandler->endElement("xd:CertDigest"); +- xDocumentHandler->startElement("xd:IssuerSerial", uno::Reference(new SvXMLAttributeList())); +- xDocumentHandler->startElement("X509IssuerName", uno::Reference(new SvXMLAttributeList())); +- xDocumentHandler->characters(signatureInfo.ouX509IssuerName); +- xDocumentHandler->endElement("X509IssuerName"); +- xDocumentHandler->startElement("X509SerialNumber", uno::Reference(new SvXMLAttributeList())); +- xDocumentHandler->characters(signatureInfo.ouX509SerialNumber); +- xDocumentHandler->endElement("X509SerialNumber"); +- xDocumentHandler->endElement("xd:IssuerSerial"); +- xDocumentHandler->endElement("xd:Cert"); ++ assert(signatureInfo.GetSigningCertificate() || !signatureInfo.ouGpgKeyID.isEmpty()); ++ if (signatureInfo.GetSigningCertificate()) ++ { ++ // how should this deal with multiple X509Data elements? ++ // for now, let's write all of the certificates ... ++ for (auto const& rData : signatureInfo.X509Datas) ++ { ++ for (auto const& it : rData) ++ { ++ WriteXadesCert(xDocumentHandler, it); ++ } ++ } ++ } ++ else ++ { ++ // for PGP, write empty mandatory X509IssuerName, X509SerialNumber ++ SignatureInformation::X509CertInfo temp; ++ temp.CertDigest = signatureInfo.ouGpgKeyID; ++ WriteXadesCert(xDocumentHandler, temp); ++ } + xDocumentHandler->endElement("xd:SigningCertificate"); + xDocumentHandler->startElement("xd:SignaturePolicyIdentifier", uno::Reference(new SvXMLAttributeList())); + xDocumentHandler->startElement("xd:SignaturePolicyImplied", uno::Reference(new SvXMLAttributeList())); +diff --git a/xmlsecurity/source/helper/documentsignaturemanager.cxx b/xmlsecurity/source/helper/documentsignaturemanager.cxx +index 79d2cdf26b61..7252c54e74ab 100644 +--- a/xmlsecurity/source/helper/documentsignaturemanager.cxx ++++ b/xmlsecurity/source/helper/documentsignaturemanager.cxx +@@ -586,6 +586,18 @@ void DocumentSignatureManager::read(bool bUseTempStream, bool bCacheLastSignatur + bCacheLastSignature); + maSignatureHelper.EndMission(); + ++ // this parses the XML independently from ImplVerifySignatures() - check ++ // certificates here too ... ++ for (auto const& it : maSignatureHelper.GetSignatureInformations()) ++ { ++ if (!it.X509Datas.empty()) ++ { ++ uno::Reference const xSecEnv( ++ getSecurityEnvironment()); ++ getSignatureHelper().CheckAndUpdateSignatureInformation(xSecEnv, it); ++ } ++ } ++ + maCurrentSignatureInformations = maSignatureHelper.GetSignatureInformations(); + } + else +diff --git a/xmlsecurity/source/helper/ooxmlsecexporter.cxx b/xmlsecurity/source/helper/ooxmlsecexporter.cxx +index fe4d0df89a5d..d2c29041338f 100644 +--- a/xmlsecurity/source/helper/ooxmlsecexporter.cxx ++++ b/xmlsecurity/source/helper/ooxmlsecexporter.cxx +@@ -200,13 +200,21 @@ void OOXMLSecExporter::Impl::writeKeyInfo() + { + m_xDocumentHandler->startElement( + "KeyInfo", uno::Reference(new SvXMLAttributeList())); +- m_xDocumentHandler->startElement( +- "X509Data", uno::Reference(new SvXMLAttributeList())); +- m_xDocumentHandler->startElement( +- "X509Certificate", uno::Reference(new SvXMLAttributeList())); +- m_xDocumentHandler->characters(m_rInformation.ouX509Certificate); +- m_xDocumentHandler->endElement("X509Certificate"); +- m_xDocumentHandler->endElement("X509Data"); ++ assert(m_rInformation.GetSigningCertificate()); ++ for (auto const& rData : m_rInformation.X509Datas) ++ { ++ m_xDocumentHandler->startElement( ++ "X509Data", uno::Reference(new SvXMLAttributeList())); ++ for (auto const& it : rData) ++ { ++ m_xDocumentHandler->startElement( ++ "X509Certificate", ++ uno::Reference(new SvXMLAttributeList())); ++ m_xDocumentHandler->characters(it.X509Certificate); ++ m_xDocumentHandler->endElement("X509Certificate"); ++ } ++ m_xDocumentHandler->endElement("X509Data"); ++ } + m_xDocumentHandler->endElement("KeyInfo"); + } + +diff --git a/xmlsecurity/source/helper/ooxmlsecparser.cxx b/xmlsecurity/source/helper/ooxmlsecparser.cxx +index a200de60c07a..a25872fc057d 100644 +--- a/xmlsecurity/source/helper/ooxmlsecparser.cxx ++++ b/xmlsecurity/source/helper/ooxmlsecparser.cxx +@@ -185,9 +185,22 @@ void SAL_CALL OOXMLSecParser::endElement(const OUString& rName) + m_pXSecController->setSignatureValue(m_aSignatureValue); + m_bInSignatureValue = false; + } ++ else if (rName == "X509Data") ++ { ++ std::vector> X509IssuerSerials; ++ std::vector X509Certificates; ++ if (!m_aX509Certificate.isEmpty()) ++ { ++ X509Certificates.emplace_back(m_aX509Certificate); ++ } ++ if (!m_aX509IssuerName.isEmpty() && !m_aX509SerialNumber.isEmpty()) ++ { ++ X509IssuerSerials.emplace_back(m_aX509IssuerName, m_aX509SerialNumber); ++ } ++ m_pXSecController->setX509Data(X509IssuerSerials, X509Certificates); ++ } + else if (rName == "X509Certificate") + { +- m_pXSecController->setX509Certificate(m_aX509Certificate); + m_bInX509Certificate = false; + } + else if (rName == "mdssi:Value") +@@ -202,17 +215,18 @@ void SAL_CALL OOXMLSecParser::endElement(const OUString& rName) + } + else if (rName == "X509IssuerName") + { +- m_pXSecController->setX509IssuerName(m_aX509IssuerName); + m_bInX509IssuerName = false; + } + else if (rName == "X509SerialNumber") + { +- m_pXSecController->setX509SerialNumber(m_aX509SerialNumber); + m_bInX509SerialNumber = false; + } ++ else if (rName == "xd:Cert") ++ { ++ m_pXSecController->setX509CertDigest(m_aCertDigest, css::xml::crypto::DigestID::SHA1, m_aX509IssuerName, m_aX509SerialNumber); ++ } + else if (rName == "xd:CertDigest") + { +- m_pXSecController->setCertDigest(m_aCertDigest); + m_bInCertDigest = false; + } + else if (rName == "Object") +diff --git a/xmlsecurity/source/helper/pdfsignaturehelper.cxx b/xmlsecurity/source/helper/pdfsignaturehelper.cxx +index b0795cb8f33f..843000a9c326 100644 +--- a/xmlsecurity/source/helper/pdfsignaturehelper.cxx ++++ b/xmlsecurity/source/helper/pdfsignaturehelper.cxx +@@ -85,8 +85,12 @@ PDFSignatureHelper::GetDocumentSignatureInformations( + security::DocumentSignatureInformation& rExternal = aRet[i]; + rExternal.SignatureIsValid + = rInternal.nStatus == xml::crypto::SecurityOperationStatus_OPERATION_SUCCEEDED; +- if (!rInternal.ouX509Certificate.isEmpty()) +- rExternal.Signer = xSecEnv->createCertificateFromAscii(rInternal.ouX509Certificate); ++ if (rInternal.GetSigningCertificate() ++ && !rInternal.GetSigningCertificate()->X509Certificate.isEmpty()) ++ { ++ rExternal.Signer = xSecEnv->createCertificateFromAscii( ++ rInternal.GetSigningCertificate()->X509Certificate); ++ } + rExternal.PartialDocumentSignature = rInternal.bPartialDocumentSignature; + + // Verify certificate. +diff --git a/xmlsecurity/source/helper/xmlsignaturehelper.cxx b/xmlsecurity/source/helper/xmlsignaturehelper.cxx +index 22c056e70da1..bcb79039e342 100644 +--- a/xmlsecurity/source/helper/xmlsignaturehelper.cxx ++++ b/xmlsecurity/source/helper/xmlsignaturehelper.cxx +@@ -21,6 +21,7 @@ + #include + #include + #include ++#include + + #include + +@@ -45,6 +46,8 @@ + #include + #include + ++#include ++ + #define NS_DOCUMENTSIGNATURES "http://openoffice.org/2004/documentsignatures" + #define NS_DOCUMENTSIGNATURES_ODF_1_2 "urn:oasis:names:tc:opendocument:xmlns:digitalsignature:1.0" + #define OOXML_SIGNATURE_ORIGIN "http://schemas.openxmlformats.org/package/2006/relationships/digital-signature/origin" +@@ -547,4 +550,162 @@ void XMLSignatureHelper::CreateAndWriteOOXMLSignature(const uno::ReferenceendDocument(); + } + ++/** check this constraint from xmldsig-core 4.5.4: ++ ++ All certificates appearing in an X509Data element MUST relate to the ++ validation key by either containing it or being part of a certification ++ chain that terminates in a certificate containing the validation key. ++ */ ++static auto CheckX509Data( ++ uno::Reference const& xSecEnv, ++ std::vector const& rX509CertInfos, ++ std::vector> & rCerts, ++ std::vector & rSorted) -> bool ++{ ++ assert(rCerts.empty()); ++ assert(rSorted.empty()); ++ if (rX509CertInfos.empty()) ++ { ++ SAL_WARN("xmlsecurity.comp", "no X509Data"); ++ return false; ++ } ++ std::vector> certs; ++ for (SignatureInformation::X509CertInfo const& it : rX509CertInfos) ++ { ++ if (!it.X509Certificate.isEmpty()) ++ { ++ certs.emplace_back(xSecEnv->createCertificateFromAscii(it.X509Certificate)); ++ } ++ else ++ { ++ certs.emplace_back(xSecEnv->getCertificate( ++ it.X509IssuerName, ++ xmlsecurity::numericStringToBigInteger(it.X509SerialNumber))); ++ } ++ if (!certs.back().is()) ++ { ++ SAL_WARN("xmlsecurity.comp", "X509Data cannot be parsed"); ++ return false; ++ } ++ } ++ ++ // first, search one whose issuer isn't in the list, or a self-signed one ++ std::optional start; ++ for (size_t i = 0; i < certs.size(); ++i) ++ { ++ for (size_t j = 0; ; ++j) ++ { ++ if (j == certs.size()) ++ { ++ if (start) ++ { ++ SAL_WARN("xmlsecurity.comp", "X509Data do not form a chain: certificate has no issuer but already have start of chain: " << certs[i]->getSubjectName()); ++ return false; ++ } ++ start = i; // issuer isn't in the list ++ break; ++ } ++ if (xmlsecurity::EqualDistinguishedNames(certs[i]->getIssuerName(), certs[j]->getSubjectName())) ++ { ++ if (i == j) // self signed ++ { ++ if (start) ++ { ++ SAL_WARN("xmlsecurity.comp", "X509Data do not form a chain: certificate is self-signed but already have start of chain: " << certs[i]->getSubjectName()); ++ return false; ++ } ++ start = i; ++ } ++ break; ++ } ++ } ++ } ++ std::vector chain; ++ if (!start) ++ { ++ // this can only be a cycle? ++ SAL_WARN("xmlsecurity.comp", "X509Data do not form a chain: cycle detected"); ++ return false; ++ } ++ chain.emplace_back(*start); ++ ++ // second, check that there is a chain, no tree or cycle... ++ for (size_t i = 0; i < certs.size(); ++i) ++ { ++ assert(chain.size() == i + 1); ++ for (size_t j = 0; j < certs.size(); ++j) ++ { ++ if (chain[i] != j) ++ { ++ if (xmlsecurity::EqualDistinguishedNames( ++ certs[chain[i]]->getSubjectName(), certs[j]->getIssuerName())) ++ { ++ if (chain.size() != i + 1) // already found issuee? ++ { ++ SAL_WARN("xmlsecurity.comp", "X509Data do not form a chain: certificate issued 2 others: " << certs[chain[i]]->getSubjectName()); ++ return false; ++ } ++ chain.emplace_back(j); ++ } ++ } ++ } ++ if (i == certs.size() - 1) ++ { // last one: must be a leaf ++ if (chain.size() != i + 1) ++ { ++ SAL_WARN("xmlsecurity.comp", "X509Data do not form a chain: certificate in cycle: " << certs[chain[i]]->getSubjectName()); ++ return false; ++ } ++ } ++ else if (chain.size() != i + 2) ++ { // not issuer of another? ++ SAL_WARN("xmlsecurity.comp", "X509Data do not form a chain: certificate issued 0 others: " << certs[chain[i]]->getSubjectName()); ++ return false; ++ } ++ } ++ ++ // success ++ assert(chain.size() == rX509CertInfos.size()); ++ for (auto const& it : chain) ++ { ++ rSorted.emplace_back(rX509CertInfos[it]); ++ rCerts.emplace_back(certs[it]); ++ } ++ return true; ++} ++ ++std::vector> ++XMLSignatureHelper::CheckAndUpdateSignatureInformation( ++ uno::Reference const& xSecEnv, ++ SignatureInformation const& rInfo) ++{ ++ // if the check fails, it's not possible to determine which X509Data ++ // contained the signing certificate - the UI cannot display something ++ // useful in this case, so prevent anything misleading by clearing the ++ // X509Datas. ++ ++ std::vector> certs; ++ std::vector datas; ++ // TODO: for now, just merge all X509Datas together for checking... ++ // (this will probably break round-trip of signature with multiple X509Data, ++ // no idea if that is a problem) ++ SignatureInformation::X509Data temp; ++ SignatureInformation::X509Data tempResult; ++ for (auto const& rData : rInfo.X509Datas) ++ { ++ for (auto const& it : rData) ++ { ++ temp.emplace_back(it); ++ } ++ } ++ if (CheckX509Data(xSecEnv, temp, certs, tempResult)) ++ { ++ datas.emplace_back(tempResult); ++ } ++ ++ // rInfo is a copy, update the original ++ mpXSecController->UpdateSignatureInformation(rInfo.nSecurityId, datas); ++ return certs; ++} ++ + /* vim:set shiftwidth=4 softtabstop=4 expandtab: */ +diff --git a/xmlsecurity/source/helper/xsecctl.cxx b/xmlsecurity/source/helper/xsecctl.cxx +index e3df9a85f6da..6bd88e24f91e 100644 +--- a/xmlsecurity/source/helper/xsecctl.cxx ++++ b/xmlsecurity/source/helper/xsecctl.cxx +@@ -734,7 +734,7 @@ void XSecController::exportSignature( + xDocumentHandler->startElement( + "PGPKeyID", + css::uno::Reference< css::xml::sax::XAttributeList > (new SvXMLAttributeList())); +- xDocumentHandler->characters( signatureInfo.ouCertDigest ); ++ xDocumentHandler->characters(signatureInfo.ouGpgKeyID); + xDocumentHandler->endElement( "PGPKeyID" ); + + /* Write PGPKeyPacket element */ +@@ -758,43 +758,50 @@ void XSecController::exportSignature( + } + else + { +- /* Write X509Data element */ +- xDocumentHandler->startElement( +- "X509Data", +- css::uno::Reference< css::xml::sax::XAttributeList > (new SvXMLAttributeList())); ++ assert(signatureInfo.GetSigningCertificate()); ++ for (auto const& rData : signatureInfo.X509Datas) + { +- /* Write X509IssuerSerial element */ ++ /* Write X509Data element */ + xDocumentHandler->startElement( +- "X509IssuerSerial", ++ "X509Data", + css::uno::Reference< css::xml::sax::XAttributeList > (new SvXMLAttributeList())); + { +- /* Write X509IssuerName element */ +- xDocumentHandler->startElement( +- "X509IssuerName", +- css::uno::Reference< css::xml::sax::XAttributeList > (new SvXMLAttributeList())); +- xDocumentHandler->characters( signatureInfo.ouX509IssuerName ); +- xDocumentHandler->endElement( "X509IssuerName" ); +- +- /* Write X509SerialNumber element */ +- xDocumentHandler->startElement( +- "X509SerialNumber", +- css::uno::Reference< css::xml::sax::XAttributeList > (new SvXMLAttributeList())); +- xDocumentHandler->characters( signatureInfo.ouX509SerialNumber ); +- xDocumentHandler->endElement( "X509SerialNumber" ); +- } +- xDocumentHandler->endElement( "X509IssuerSerial" ); +- +- /* Write X509Certificate element */ +- if (!signatureInfo.ouX509Certificate.isEmpty()) +- { +- xDocumentHandler->startElement( +- "X509Certificate", +- css::uno::Reference< css::xml::sax::XAttributeList > (new SvXMLAttributeList())); +- xDocumentHandler->characters( signatureInfo.ouX509Certificate ); +- xDocumentHandler->endElement( "X509Certificate" ); ++ for (auto const& it : rData) ++ { ++ /* Write X509IssuerSerial element */ ++ xDocumentHandler->startElement( ++ "X509IssuerSerial", ++ css::uno::Reference< css::xml::sax::XAttributeList > (new SvXMLAttributeList())); ++ { ++ /* Write X509IssuerName element */ ++ xDocumentHandler->startElement( ++ "X509IssuerName", ++ css::uno::Reference< css::xml::sax::XAttributeList > (new SvXMLAttributeList())); ++ xDocumentHandler->characters(it.X509IssuerName); ++ xDocumentHandler->endElement( "X509IssuerName" ); ++ ++ /* Write X509SerialNumber element */ ++ xDocumentHandler->startElement( ++ "X509SerialNumber", ++ css::uno::Reference< css::xml::sax::XAttributeList > (new SvXMLAttributeList())); ++ xDocumentHandler->characters(it.X509SerialNumber); ++ xDocumentHandler->endElement( "X509SerialNumber" ); ++ } ++ xDocumentHandler->endElement( "X509IssuerSerial" ); ++ ++ /* Write X509Certificate element */ ++ if (!it.X509Certificate.isEmpty()) ++ { ++ xDocumentHandler->startElement( ++ "X509Certificate", ++ css::uno::Reference< css::xml::sax::XAttributeList > (new SvXMLAttributeList())); ++ xDocumentHandler->characters(it.X509Certificate); ++ xDocumentHandler->endElement( "X509Certificate" ); ++ } ++ } + } ++ xDocumentHandler->endElement( "X509Data" ); + } +- xDocumentHandler->endElement( "X509Data" ); + } + } + xDocumentHandler->endElement( "KeyInfo" ); +@@ -913,6 +920,15 @@ void XSecController::exportOOXMLSignature(const uno::Reference& + aExporter.writeSignature(); + } + ++void XSecController::UpdateSignatureInformation(sal_Int32 const nSecurityId, ++ std::vector const& rDatas) ++{ ++ SignatureInformation aInf( 0 ); ++ int const nIndex = findSignatureInfor(nSecurityId); ++ assert(nIndex != -1); // nothing should touch this between parsing and verify ++ m_vInternalSignatureInformations[nIndex].signatureInfor.X509Datas = rDatas; ++} ++ + SignatureInformation XSecController::getSignatureInformation( sal_Int32 nSecurityId ) const + { + SignatureInformation aInf( 0 ); +diff --git a/xmlsecurity/source/helper/xsecparser.cxx b/xmlsecurity/source/helper/xsecparser.cxx +index f46277f96ea1..f2e00fca99c9 100644 +--- a/xmlsecurity/source/helper/xsecparser.cxx ++++ b/xmlsecurity/source/helper/xsecparser.cxx +@@ -243,98 +243,79 @@ class XSecParser::DsX509CertificateContext + : public XSecParser::Context + { + private: +- OUString m_Value; ++ OUString & m_rValue; + + public: + DsX509CertificateContext(XSecParser & rParser, +- std::unique_ptr pOldNamespaceMap) ++ std::unique_ptr pOldNamespaceMap, ++ OUString & rValue) + : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rValue(rValue) + { + } + +- virtual void EndElement() override +- { +- m_rParser.m_pXSecController->setX509Certificate(m_Value); +- } +- + virtual void Characters(OUString const& rChars) override + { +- m_Value += rChars; ++ m_rValue += rChars; + } + }; + + class XSecParser::DsX509SerialNumberContext +- : public XSecParser::ReferencedContextImpl ++ : public XSecParser::Context + { + private: +- OUString m_Value; ++ OUString & m_rValue; + + public: + DsX509SerialNumberContext(XSecParser & rParser, + std::unique_ptr pOldNamespaceMap, +- bool const isReferenced) +- : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) +- { +- } +- +- virtual void EndElement() override ++ OUString & rValue) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rValue(rValue) + { +- if (m_isReferenced) +- { +- m_rParser.m_pXSecController->setX509SerialNumber(m_Value); +- } +- else +- { +- SAL_INFO("xmlsecurity.helper", "ignoring unsigned X509SerialNumber"); +- } + } + + virtual void Characters(OUString const& rChars) override + { +- m_Value += rChars; ++ m_rValue += rChars; + } + }; + + class XSecParser::DsX509IssuerNameContext +- : public XSecParser::ReferencedContextImpl ++ : public XSecParser::Context + { + private: +- OUString m_Value; ++ OUString & m_rValue; + + public: + DsX509IssuerNameContext(XSecParser & rParser, + std::unique_ptr pOldNamespaceMap, +- bool const isReferenced) +- : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) +- { +- } +- +- virtual void EndElement() override ++ OUString & rValue) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rValue(rValue) + { +- if (m_isReferenced) +- { +- m_rParser.m_pXSecController->setX509IssuerName(m_Value); +- } +- else +- { +- SAL_INFO("xmlsecurity.helper", "ignoring unsigned X509IssuerName"); +- } + } + + virtual void Characters(OUString const& rChars) override + { +- m_Value += rChars; ++ m_rValue += rChars; + } + }; + + class XSecParser::DsX509IssuerSerialContext +- : public XSecParser::ReferencedContextImpl ++ : public XSecParser::Context + { ++ private: ++ OUString & m_rX509IssuerName; ++ OUString & m_rX509SerialNumber; ++ + public: + DsX509IssuerSerialContext(XSecParser & rParser, + std::unique_ptr pOldNamespaceMap, +- bool const isReferenced) +- : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) ++ OUString & rIssuerName, OUString & rSerialNumber) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rX509IssuerName(rIssuerName) ++ , m_rX509SerialNumber(rSerialNumber) + { + } + +@@ -344,20 +325,27 @@ class XSecParser::DsX509IssuerSerialContext + { + if (nNamespace == XML_NAMESPACE_DS && rName == "X509IssuerName") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_rX509IssuerName); + } + if (nNamespace == XML_NAMESPACE_DS && rName == "X509SerialNumber") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_rX509SerialNumber); + } + // missing: ds:X509SKI, ds:X509SubjectName, ds:X509CRL + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } + }; + ++/// can't be sure what is supposed to happen here because the spec is clear as mud + class XSecParser::DsX509DataContext + : public XSecParser::Context + { ++ private: ++ // sigh... "No ordering is implied by the above constraints." ++ // so store the ball of mud in vectors and try to figure it out later. ++ std::vector> m_X509IssuerSerials; ++ std::vector m_X509Certificates; ++ + public: + DsX509DataContext(XSecParser & rParser, + std::unique_ptr pOldNamespaceMap) +@@ -365,18 +353,24 @@ class XSecParser::DsX509DataContext + { + } + ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setX509Data(m_X509IssuerSerials, m_X509Certificates); ++ } ++ + virtual std::unique_ptr CreateChildContext( + std::unique_ptr pOldNamespaceMap, + sal_uInt16 const nNamespace, OUString const& rName) override + { + if (nNamespace == XML_NAMESPACE_DS && rName == "X509IssuerSerial") + { +- // can't require KeyInfo to be signed so pass in *true* +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap), true); ++ m_X509IssuerSerials.emplace_back(); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_X509IssuerSerials.back().first, m_X509IssuerSerials.back().second); + } + if (nNamespace == XML_NAMESPACE_DS && rName == "X509Certificate") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ m_X509Certificates.emplace_back(); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_X509Certificates.back()); + } + // missing: ds:X509SKI, ds:X509SubjectName, ds:X509CRL + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); +@@ -968,30 +962,20 @@ class XSecParser::LoSignatureLineContext + }; + + class XSecParser::XadesCertDigestContext +- : public XSecParser::ReferencedContextImpl ++ : public XSecParser::Context + { + private: +- OUString m_Value; +- sal_Int32 m_nReferenceDigestID = css::xml::crypto::DigestID::SHA1; ++ OUString & m_rDigestValue; ++ sal_Int32 & m_rReferenceDigestID; + + public: + XadesCertDigestContext(XSecParser & rParser, + std::unique_ptr pOldNamespaceMap, +- bool const isReferenced) +- : ReferencedContextImpl(rParser, std::move(pOldNamespaceMap), isReferenced) +- { +- } +- +- virtual void EndElement() override ++ OUString & rDigestValue, sal_Int32 & rReferenceDigestID) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rDigestValue(rDigestValue) ++ , m_rReferenceDigestID(rReferenceDigestID) + { +- if (m_isReferenced) +- { +- m_rParser.m_pXSecController->setCertDigest(m_Value/* FIXME , m_nReferenceDigestID*/); +- } +- else +- { +- SAL_INFO("xmlsecurity.helper", "ignoring unsigned CertDigest"); +- } + } + + virtual std::unique_ptr CreateChildContext( +@@ -1000,11 +984,11 @@ class XSecParser::XadesCertDigestContext + { + if (nNamespace == XML_NAMESPACE_DS && rName == "DigestMethod") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_nReferenceDigestID); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_rReferenceDigestID); + } + if (nNamespace == XML_NAMESPACE_DS && rName == "DigestValue") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_Value); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_rDigestValue); + } + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +@@ -1013,6 +997,12 @@ class XSecParser::XadesCertDigestContext + class XSecParser::XadesCertContext + : public XSecParser::ReferencedContextImpl + { ++ private: ++ sal_Int32 m_nReferenceDigestID = css::xml::crypto::DigestID::SHA1; ++ OUString m_CertDigest; ++ OUString m_X509IssuerName; ++ OUString m_X509SerialNumber; ++ + public: + XadesCertContext(XSecParser & rParser, + std::unique_ptr pOldNamespaceMap, +@@ -1021,17 +1011,29 @@ class XSecParser::XadesCertContext + { + } + ++ virtual void EndElement() override ++ { ++ if (m_isReferenced) ++ { ++ m_rParser.m_pXSecController->setX509CertDigest(m_CertDigest, m_nReferenceDigestID, m_X509IssuerName, m_X509SerialNumber); ++ } ++ else ++ { ++ SAL_INFO("xmlsecurity.helper", "ignoring unsigned xades:Cert"); ++ } ++ } ++ + virtual std::unique_ptr CreateChildContext( + std::unique_ptr pOldNamespaceMap, + sal_uInt16 const nNamespace, OUString const& rName) override + { + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "CertDigest") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_CertDigest, m_nReferenceDigestID); + } + if (nNamespace == XML_NAMESPACE_XADES132 && rName == "IssuerSerial") + { +- return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_isReferenced); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_X509IssuerName, m_X509SerialNumber); + } + return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +diff --git a/xmlsecurity/source/helper/xsecsign.cxx b/xmlsecurity/source/helper/xsecsign.cxx +index 1e1688767f00..fd33a320d9bd 100644 +--- a/xmlsecurity/source/helper/xsecsign.cxx ++++ b/xmlsecurity/source/helper/xsecsign.cxx +@@ -193,6 +193,7 @@ void XSecController::signAStream( sal_Int32 securityId, const OUString& uri, boo + } + } + ++// note: this is called when creating a new signature from scratch + void XSecController::setX509Certificate( + sal_Int32 nSecurityId, + const OUString& ouX509IssuerName, +@@ -206,10 +207,13 @@ void XSecController::setX509Certificate( + if ( index == -1 ) + { + InternalSignatureInformation isi(nSecurityId, nullptr); +- isi.signatureInfor.ouX509IssuerName = ouX509IssuerName; +- isi.signatureInfor.ouX509SerialNumber = ouX509SerialNumber; +- isi.signatureInfor.ouX509Certificate = ouX509Cert; +- isi.signatureInfor.ouCertDigest = ouX509CertDigest; ++ isi.signatureInfor.X509Datas.clear(); ++ isi.signatureInfor.X509Datas.emplace_back(); ++ isi.signatureInfor.X509Datas.back().emplace_back(); ++ isi.signatureInfor.X509Datas.back().back().X509IssuerName = ouX509IssuerName; ++ isi.signatureInfor.X509Datas.back().back().X509SerialNumber = ouX509SerialNumber; ++ isi.signatureInfor.X509Datas.back().back().X509Certificate = ouX509Cert; ++ isi.signatureInfor.X509Datas.back().back().CertDigest = ouX509CertDigest; + isi.signatureInfor.eAlgorithmID = eAlgorithmID; + m_vInternalSignatureInformations.push_back( isi ); + } +@@ -217,16 +221,19 @@ void XSecController::setX509Certificate( + { + SignatureInformation &si + = m_vInternalSignatureInformations[index].signatureInfor; +- si.ouX509IssuerName = ouX509IssuerName; +- si.ouX509SerialNumber = ouX509SerialNumber; +- si.ouX509Certificate = ouX509Cert; +- si.ouCertDigest = ouX509CertDigest; ++ si.X509Datas.clear(); ++ si.X509Datas.emplace_back(); ++ si.X509Datas.back().emplace_back(); ++ si.X509Datas.back().back().X509IssuerName = ouX509IssuerName; ++ si.X509Datas.back().back().X509SerialNumber = ouX509SerialNumber; ++ si.X509Datas.back().back().X509Certificate = ouX509Cert; ++ si.X509Datas.back().back().CertDigest = ouX509CertDigest; + } + } + + void XSecController::setGpgCertificate( + sal_Int32 nSecurityId, +- const OUString& ouCertDigest, ++ const OUString& ouKeyDigest, + const OUString& ouCert, + const OUString& ouOwner) + { +@@ -237,16 +244,17 @@ void XSecController::setGpgCertificate( + InternalSignatureInformation isi(nSecurityId, nullptr); + isi.signatureInfor.ouGpgCertificate = ouCert; + isi.signatureInfor.ouGpgOwner = ouOwner; +- isi.signatureInfor.ouCertDigest = ouCertDigest; ++ isi.signatureInfor.ouGpgKeyID = ouKeyDigest; + m_vInternalSignatureInformations.push_back( isi ); + } + else + { + SignatureInformation &si + = m_vInternalSignatureInformations[index].signatureInfor; ++ si.X509Datas.clear(); // it is a PGP signature now + si.ouGpgCertificate = ouCert; + si.ouGpgOwner = ouOwner; +- si.ouCertDigest = ouCertDigest; ++ si.ouGpgKeyID = ouKeyDigest; + } + } + +diff --git a/xmlsecurity/source/helper/xsecverify.cxx b/xmlsecurity/source/helper/xsecverify.cxx +index 92ebfb6c72e8..89141ed1dfd4 100644 +--- a/xmlsecurity/source/helper/xsecverify.cxx ++++ b/xmlsecurity/source/helper/xsecverify.cxx +@@ -22,6 +22,7 @@ + #include + #include "xsecparser.hxx" + #include "ooxmlsecparser.hxx" ++#include + #include + #include + #include +@@ -240,7 +241,9 @@ void XSecController::setReferenceCount() const + } + } + +-void XSecController::setX509IssuerName( OUString const & ouX509IssuerName ) ++void XSecController::setX509Data( ++ std::vector> & rX509IssuerSerials, ++ std::vector const& rX509Certificates) + { + if (m_vInternalSignatureInformations.empty()) + { +@@ -248,29 +251,52 @@ void XSecController::setX509IssuerName( OUString const & ouX509IssuerName ) + return; + } + InternalSignatureInformation &isi = m_vInternalSignatureInformations.back(); +- isi.signatureInfor.ouX509IssuerName = ouX509IssuerName; +-} +- +-void XSecController::setX509SerialNumber( OUString const & ouX509SerialNumber ) +-{ +- if (m_vInternalSignatureInformations.empty()) ++ SignatureInformation::X509Data data; ++ // due to the excessive flexibility of the spec it's possible that there ++ // is both a reference to a cert and the cert itself in one X509Data ++ for (OUString const& it : rX509Certificates) + { +- SAL_INFO("xmlsecurity.helper","XSecController::setX509SerialNumber: no signature"); +- return; ++ try ++ { ++ data.emplace_back(); ++ data.back().X509Certificate = it; ++ uno::Reference const xSecEnv(m_xSecurityContext->getSecurityEnvironment()); ++ uno::Reference const xCert(xSecEnv->createCertificateFromAscii(it)); ++ if (!xCert.is()) ++ { ++ SAL_INFO("xmlsecurity.helper", "cannot parse X509Certificate"); ++ continue; // will be handled in CheckX509Data ++ } ++ OUString const issuerName(xCert->getIssuerName()); ++ OUString const serialNumber(xmlsecurity::bigIntegerToNumericString(xCert->getSerialNumber())); ++ auto const iter = std::find_if(rX509IssuerSerials.begin(), rX509IssuerSerials.end(), ++ [&](auto const& rX509IssuerSerial) { ++ return xmlsecurity::EqualDistinguishedNames(issuerName, rX509IssuerSerial.first) ++ && serialNumber == rX509IssuerSerial.second; ++ }); ++ if (iter != rX509IssuerSerials.end()) ++ { ++ data.back().X509IssuerName = iter->first; ++ data.back().X509SerialNumber = iter->second; ++ rX509IssuerSerials.erase(iter); ++ } ++ } ++ catch (uno::Exception const&) ++ { ++ SAL_INFO("xmlsecurity.helper", "cannot parse X509Certificate"); ++ } + } +- InternalSignatureInformation &isi = m_vInternalSignatureInformations.back(); +- isi.signatureInfor.ouX509SerialNumber = ouX509SerialNumber; +-} +- +-void XSecController::setX509Certificate( OUString const & ouX509Certificate ) +-{ +- if (m_vInternalSignatureInformations.empty()) ++ // now handle any that are left... ++ for (auto const& it : rX509IssuerSerials) + { +- SAL_INFO("xmlsecurity.helper","XSecController::setX509Certificate: no signature"); +- return; ++ data.emplace_back(); ++ data.back().X509IssuerName = it.first; ++ data.back().X509SerialNumber = it.second; ++ } ++ if (!data.empty()) ++ { ++ isi.signatureInfor.X509Datas.push_back(data); + } +- InternalSignatureInformation &isi = m_vInternalSignatureInformations.back(); +- isi.signatureInfor.ouX509Certificate = ouX509Certificate; + } + + void XSecController::setSignatureValue( OUString const & ouSignatureValue ) +@@ -380,13 +406,67 @@ void XSecController::setSignatureBytes(const uno::Sequence& rBytes) + rInformation.signatureInfor.aSignatureBytes = rBytes; + } + +-void XSecController::setCertDigest(const OUString& rCertDigest) ++void XSecController::setX509CertDigest( ++ OUString const& rCertDigest, sal_Int32 const /*TODO nReferenceDigestID*/, ++ OUString const& rX509IssuerName, OUString const& rX509SerialNumber) + { + if (m_vInternalSignatureInformations.empty()) + return; + + InternalSignatureInformation& rInformation = m_vInternalSignatureInformations.back(); +- rInformation.signatureInfor.ouCertDigest = rCertDigest; ++ for (auto & rData : rInformation.signatureInfor.X509Datas) ++ { ++ for (auto & it : rData) ++ { ++ if (xmlsecurity::EqualDistinguishedNames(it.X509IssuerName, rX509IssuerName) ++ && it.X509SerialNumber == rX509SerialNumber) ++ { ++ it.CertDigest = rCertDigest; ++ return; ++ } ++ } ++ } ++ // fall-back: read the actual certificates ++ for (auto & rData : rInformation.signatureInfor.X509Datas) ++ { ++ for (auto & it : rData) ++ { ++ if (!it.X509Certificate.isEmpty()) ++ { ++ try ++ { ++ uno::Reference const xSecEnv(m_xSecurityContext->getSecurityEnvironment()); ++ uno::Reference const xCert(xSecEnv->createCertificateFromAscii(it.X509Certificate)); ++ if (!xCert.is()) ++ { ++ SAL_INFO("xmlsecurity.helper", "cannot parse X509Certificate"); ++ } ++ else if (xmlsecurity::EqualDistinguishedNames(xCert->getIssuerName(),rX509IssuerName) ++ && xmlsecurity::bigIntegerToNumericString(xCert->getSerialNumber()) == rX509SerialNumber) ++ { ++ it.CertDigest = rCertDigest; ++ // note: testInsertCertificate_PEM_DOCX requires these! ++ it.X509SerialNumber = rX509SerialNumber; ++ it.X509IssuerName = rX509IssuerName; ++ return; ++ } ++ } ++ catch (uno::Exception const&) ++ { ++ SAL_INFO("xmlsecurity.helper", "cannot parse X509Certificate"); ++ } ++ } ++ } ++ } ++ if (!rInformation.signatureInfor.ouGpgCertificate.isEmpty()) ++ { ++ SAL_INFO_IF(rCertDigest != rInformation.signatureInfor.ouGpgKeyID, ++ "xmlsecurity.helper", "PGPKeyID vs CertDigest mismatch"); ++ } ++ else ++ { ++ SAL_INFO("xmlsecurity.helper", "cannot find X509Data for CertDigest"); ++ } + } + + namespace { +diff --git a/xmlsecurity/source/xmlsec/mscrypt/x509certificate_mscryptimpl.cxx b/xmlsecurity/source/xmlsec/mscrypt/x509certificate_mscryptimpl.cxx +index 0e619b2802f8..244cd46ac564 100644 +--- a/xmlsecurity/source/xmlsec/mscrypt/x509certificate_mscryptimpl.cxx ++++ b/xmlsecurity/source/xmlsec/mscrypt/x509certificate_mscryptimpl.cxx +@@ -26,6 +26,7 @@ + #include + #include "x509certificate_mscryptimpl.hxx" + #include ++#include + #include "sanextension_mscryptimpl.hxx" + + #include "oid.hxx" +@@ -649,4 +650,50 @@ Sequence SAL_CALL X509Certificate_MSCryptImpl::getSupportedServiceName + return { OUString() }; + } + ++namespace xmlsecurity { ++ ++static bool EncodeDistinguishedName(OUString const& rName, CERT_NAME_BLOB & rBlob) ++{ ++ LPCWSTR pszError; ++ if (!CertStrToNameW(X509_ASN_ENCODING, ++ reinterpret_cast(rName.getStr()), CERT_X500_NAME_STR, ++ nullptr, nullptr, &rBlob.cbData, &pszError)) ++ { ++ SAL_INFO("xmlsecurity.xmlsec", "CertStrToNameW failed: " << WindowsErrorString(GetLastError()) << "; " << reinterpret_cast(pszError)); ++ return false; ++ } ++ rBlob.pbData = new BYTE[rBlob.cbData]; ++ if (!CertStrToNameW(X509_ASN_ENCODING, ++ reinterpret_cast(rName.getStr()), CERT_X500_NAME_STR, ++ nullptr, rBlob.pbData, &rBlob.cbData, &pszError)) ++ { ++ SAL_INFO("xmlsecurity.xmlsec", "CertStrToNameW failed: " << WindowsErrorString(GetLastError()) << "; " << reinterpret_cast(pszError)); ++ return false; ++ } ++ return true; ++} ++ ++bool EqualDistinguishedNames( ++ OUString const& rName1, OUString const& rName2) ++{ ++ CERT_NAME_BLOB blob1; ++ if (!EncodeDistinguishedName(rName1, blob1)) ++ { ++ return false; ++ } ++ CERT_NAME_BLOB blob2; ++ if (!EncodeDistinguishedName(rName2, blob2)) ++ { ++ delete[] blob1.pbData; ++ return false; ++ } ++ bool const ret(CertCompareCertificateName(X509_ASN_ENCODING, ++ &blob1, &blob2) == TRUE); ++ delete[] blob2.pbData; ++ delete[] blob1.pbData; ++ return ret; ++} ++ ++} // namespace xmlsecurity ++ + /* vim:set shiftwidth=4 softtabstop=4 expandtab: */ +diff --git a/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx b/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx +index dcbad0348091..c699c950f351 100644 +--- a/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx ++++ b/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx +@@ -18,6 +18,7 @@ + */ + + #include ++#include + #include + #include + +@@ -254,6 +255,7 @@ SAL_CALL XMLSignature_MSCryptImpl::validate( + ++nReferenceGood; + } + } ++ SAL_INFO("xmlsecurity.xmlsec", "xmlSecDSigCtxVerify status " << pDsigCtx->status << ", references good " << nReferenceGood << " of " << nReferenceCount); + + if (rs == 0 && nReferenceCount == nReferenceGood) + { +diff --git a/xmlsecurity/source/xmlsec/nss/x509certificate_nssimpl.cxx b/xmlsecurity/source/xmlsec/nss/x509certificate_nssimpl.cxx +index 1a323d33f32f..d6143a81883c 100644 +--- a/xmlsecurity/source/xmlsec/nss/x509certificate_nssimpl.cxx ++++ b/xmlsecurity/source/xmlsec/nss/x509certificate_nssimpl.cxx +@@ -31,6 +31,7 @@ + #include + #include "x509certificate_nssimpl.hxx" + ++#include + #include + + #include "sanextension_nssimpl.hxx" +@@ -533,4 +534,28 @@ sal_Bool SAL_CALL X509Certificate_NssImpl::supportsService(const OUString& servi + /* XServiceInfo */ + Sequence SAL_CALL X509Certificate_NssImpl::getSupportedServiceNames() { return { OUString() }; } + ++namespace xmlsecurity { ++ ++bool EqualDistinguishedNames( ++ OUString const& rName1, OUString const& rName2) ++{ ++ CERTName *const pName1(CERT_AsciiToName(OUStringToOString(rName1, RTL_TEXTENCODING_UTF8).getStr())); ++ if (pName1 == nullptr) ++ { ++ return false; ++ } ++ CERTName *const pName2(CERT_AsciiToName(OUStringToOString(rName2, RTL_TEXTENCODING_UTF8).getStr())); ++ if (pName2 == nullptr) ++ { ++ CERT_DestroyName(pName1); ++ return false; ++ } ++ bool const ret(CERT_CompareName(pName1, pName2) == SECEqual); ++ CERT_DestroyName(pName2); ++ CERT_DestroyName(pName1); ++ return ret; ++} ++ ++} // namespace xmlsecurity ++ + /* vim:set shiftwidth=4 softtabstop=4 expandtab: */ +diff --git a/xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx b/xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx +index 32e4335a5207..b41d754f7407 100644 +--- a/xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx ++++ b/xmlsecurity/source/xmlsec/nss/xmlsignature_nssimpl.cxx +@@ -26,6 +26,8 @@ + + #include "securityenvironment_nssimpl.hxx" + ++#include ++ + #include + #include + +@@ -261,6 +263,7 @@ SAL_CALL XMLSignature_NssImpl::validate( + ++nReferenceGood; + } + } ++ SAL_INFO("xmlsecurity.xmlsec", "xmlSecDSigCtxVerify status " << pDsigCtx->status << ", references good " << nReferenceGood << " of " << nReferenceCount); + + if (rs == 0 && pDsigCtx->status == xmlSecDSigStatusSucceeded && nReferenceCount == nReferenceGood) + { +-- +cgit v1.2.1 + diff --git a/debian/patches/xmlsecurity-replace-XSecParser-implementation.diff b/debian/patches/xmlsecurity-replace-XSecParser-implementation.diff new file mode 100644 index 00000000000..861c4e22637 --- /dev/null +++ b/debian/patches/xmlsecurity-replace-XSecParser-implementation.diff @@ -0,0 +1,2170 @@ +From ad5930e87e788780a255523f106deb1dde5d7b37 Mon Sep 17 00:00:00 2001 +From: Michael Stahl +Date: Fri, 12 Feb 2021 16:42:51 +0100 +Subject: xmlsecurity: replace XSecParser implementation +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Implement Namespaces in XML and follow xmldsig-core and XAdES schemas. + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/110833 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit 12b15be8f4f930a04d8056b9219ac969b42a9784) + +xmlsecurity: move XSecParser state into contexts + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111158 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit 59df9e70ce1a7ec797b836bda7f9642912febc53) + +xmlsecurity: move XSecParser Reference state into contexts + +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111159 +Tested-by: Jenkins +Reviewed-by: Michael Stahl +(cherry picked from commit cfeb89a758b5f0ec406f0d72444e52ed2f47b85e) + +Change-Id: I03537b51bb757ecbfa63a826b38de543c70ba032 +Reviewed-on: https://gerrit.libreoffice.org/c/core/+/111907 +Tested-by: Jenkins +Reviewed-by: Caolán McNamara +--- + include/xmloff/xmlimp.hxx | 6 +- + include/xmloff/xmlnmspe.hxx | 7 + + include/xmloff/xmltoken.hxx | 13 + + xmloff/source/core/xmlimp.cxx | 26 +- + xmloff/source/core/xmltoken.cxx | 13 + + xmloff/source/token/tokens.txt | 10 + + xmlsecurity/source/helper/xsecparser.cxx | 1634 ++++++++++++++++++++++++------ + xmlsecurity/source/helper/xsecparser.hxx | 99 +- + 8 files changed, 1427 insertions(+), 381 deletions(-) + +diff --git a/include/xmloff/xmlimp.hxx b/include/xmloff/xmlimp.hxx +index 7f08609189ab..86871b7df445 100644 +--- a/include/xmloff/xmlimp.hxx ++++ b/include/xmloff/xmlimp.hxx +@@ -240,8 +240,12 @@ class XMLOFF_DLLPUBLIC SvXMLImport : public cppu::WeakImplHelper< + + static void initializeNamespaceMaps(); + void registerNamespaces(); +- std::unique_ptr processNSAttributes( ++public: ++ static std::unique_ptr processNSAttributes( ++ std::unique_ptr & rpNamespaceMap, ++ SvXMLImport *const pImport, + const css::uno::Reference< css::xml::sax::XAttributeList >& xAttrList); ++private: + void Characters(const OUString& aChars); + + css::uno::Reference< css::task::XStatusIndicator > mxStatusIndicator; +diff --git a/include/xmloff/xmlnmspe.hxx b/include/xmloff/xmlnmspe.hxx +index d45832f02d81..cabdcc7578e2 100644 +--- a/include/xmloff/xmlnmspe.hxx ++++ b/include/xmloff/xmlnmspe.hxx +@@ -69,6 +69,13 @@ constexpr sal_uInt16 XML_NAMESPACE_TCD = 34; // text conversion di + constexpr sal_uInt16 XML_NAMESPACE_DLG = 35; + constexpr sal_uInt16 XML_NAMESPACE_REPORT = 36; + constexpr sal_uInt16 XML_NAMESPACE_VERSIONS_LIST = 37; ++// OOo extension digital signatures, used in ODF 1.1 ++constexpr sal_uInt16 XML_NAMESPACE_DSIG_OOO = 38; ++// ODF 1.2 digital signature namespaces ++constexpr sal_uInt16 XML_NAMESPACE_DSIG = 39; ++constexpr sal_uInt16 XML_NAMESPACE_DS = 40; ++constexpr sal_uInt16 XML_NAMESPACE_XADES132 = 41; ++constexpr sal_uInt16 XML_NAMESPACE_XADES141 = 42; + + // namespaces for ODF extended formats + constexpr sal_uInt16 XML_NAMESPACE_EXT_BASE = 50; +diff --git a/include/xmloff/xmltoken.hxx b/include/xmloff/xmltoken.hxx +index 49178ebdc996..b6956245ed17 100644 +--- a/include/xmloff/xmltoken.hxx ++++ b/include/xmloff/xmltoken.hxx +@@ -135,6 +135,19 @@ namespace xmloff::token { + XML_NP_GRDDL, + XML_N_GRDDL, + ++ // OOo extension digital signatures, used in ODF 1.1 ++ XML_NP_DSIG_OOO, ++ XML_N_DSIG_OOO, ++ // ODF 1.2 digital signatures ++ XML_NP_DSIG, ++ XML_N_DSIG, ++ XML_NP_DS, ++ XML_N_DS, ++ XML_NP_XADES132, ++ XML_N_XADES132, ++ XML_NP_XADES141, ++ XML_N_XADES141, ++ + // ODF Enhanced namespaces + XML_NP_OFFICE_EXT, + XML_N_OFFICE_EXT, +diff --git a/xmloff/source/core/xmlimp.cxx b/xmloff/source/core/xmlimp.cxx +index 0c9e9d06cfd4..18429cc4860f 100644 +--- a/xmloff/source/core/xmlimp.cxx ++++ b/xmloff/source/core/xmlimp.cxx +@@ -665,6 +665,8 @@ void SAL_CALL SvXMLImport::endDocument() + } + + std::unique_ptr SvXMLImport::processNSAttributes( ++ std::unique_ptr & rpNamespaceMap, ++ SvXMLImport *const pImport, // TODO??? + const uno::Reference< xml::sax::XAttributeList >& xAttrList) + { + std::unique_ptr pRewindMap; +@@ -672,12 +674,13 @@ std::unique_ptr SvXMLImport::processNSAttributes( + for( sal_Int16 i=0; i < nAttrCount; i++ ) + { + const OUString& rAttrName = xAttrList->getNameByIndex( i ); +- if ( rAttrName == "office:version" ) ++ if (pImport && rAttrName == "office:version") + { +- mpImpl->aODFVersion = xAttrList->getValueByIndex( i ); ++ pImport->mpImpl->aODFVersion = xAttrList->getValueByIndex( i ); + + // the ODF version in content.xml and manifest.xml must be the same starting from ODF1.2 +- if ( mpImpl->mStreamName == "content.xml" && !IsODFVersionConsistent( mpImpl->aODFVersion ) ) ++ if (pImport->mpImpl->mStreamName == "content.xml" ++ && !pImport->IsODFVersionConsistent(pImport->mpImpl->aODFVersion)) + { + throw xml::sax::SAXException("Inconsistent ODF versions in content.xml and manifest.xml!", + uno::Reference< uno::XInterface >(), +@@ -691,8 +694,8 @@ std::unique_ptr SvXMLImport::processNSAttributes( + { + if( !pRewindMap ) + { +- pRewindMap = std::move(mpNamespaceMap); +- mpNamespaceMap.reset(new SvXMLNamespaceMap(*pRewindMap)); ++ pRewindMap = std::move(rpNamespaceMap); ++ rpNamespaceMap.reset(new SvXMLNamespaceMap(*pRewindMap)); + } + const OUString& rAttrValue = xAttrList->getValueByIndex( i ); + +@@ -700,18 +703,18 @@ std::unique_ptr SvXMLImport::processNSAttributes( + ? OUString() + : rAttrName.copy( 6 ) ); + // Add namespace, but only if it is known. +- sal_uInt16 nKey = mpNamespaceMap->AddIfKnown( aPrefix, rAttrValue ); ++ sal_uInt16 nKey = rpNamespaceMap->AddIfKnown( aPrefix, rAttrValue ); + // If namespace is unknown, try to match a name with similar + // TC Id and version + if( XML_NAMESPACE_UNKNOWN == nKey ) + { + OUString aTestName( rAttrValue ); + if( SvXMLNamespaceMap::NormalizeURI( aTestName ) ) +- nKey = mpNamespaceMap->AddIfKnown( aPrefix, aTestName ); ++ nKey = rpNamespaceMap->AddIfKnown( aPrefix, aTestName ); + } + // If that namespace is not known, too, add it as unknown + if( XML_NAMESPACE_UNKNOWN == nKey ) +- mpNamespaceMap->Add( aPrefix, rAttrValue ); ++ rpNamespaceMap->Add( aPrefix, rAttrValue ); + + } + } +@@ -724,7 +727,8 @@ void SAL_CALL SvXMLImport::startElement( const OUString& rName, + // SAL_INFO("svg", "startElement " << rName); + // Process namespace attributes. This must happen before creating the + // context, because namespace declaration apply to the element name itself. +- std::unique_ptr pRewindMap(processNSAttributes(xAttrList)); ++ std::unique_ptr pRewindMap( ++ processNSAttributes(mpNamespaceMap, this, xAttrList)); + + // Get element's namespace and local name. + OUString aLocalName; +@@ -898,7 +902,7 @@ void SAL_CALL SvXMLImport::startFastElement (sal_Int32 Element, + + maNamespaceHandler->addNSDeclAttributes( maNamespaceAttrList ); + std::unique_ptr pRewindMap( +- processNSAttributes( maNamespaceAttrList.get() )); ++ processNSAttributes(mpNamespaceMap, this, maNamespaceAttrList.get())); + assert( dynamic_cast( xContext.get() ) != nullptr ); + SvXMLImportContext *pContext = static_cast( xContext.get() ); + if (pRewindMap) +@@ -2251,7 +2255,7 @@ void SAL_CALL SvXMLLegacyToFastDocHandler::endDocument() + void SAL_CALL SvXMLLegacyToFastDocHandler::startElement( const OUString& rName, + const uno::Reference< xml::sax::XAttributeList >& xAttrList ) + { +- mrImport->processNSAttributes(xAttrList); ++ SvXMLImport::processNSAttributes(mrImport->mpNamespaceMap, mrImport.get(), xAttrList); + OUString aLocalName; + sal_uInt16 nPrefix = mrImport->mpNamespaceMap->GetKeyByAttrName( rName, &aLocalName ); + Sequence< sal_Int8 > aLocalNameSeq( reinterpret_cast( +diff --git a/xmloff/source/core/xmltoken.cxx b/xmloff/source/core/xmltoken.cxx +index 8d9a70f5e082..91c014f5756f 100644 +--- a/xmloff/source/core/xmltoken.cxx ++++ b/xmloff/source/core/xmltoken.cxx +@@ -144,6 +144,19 @@ namespace xmloff::token { + TOKEN( "grddl", XML_NP_GRDDL ), + TOKEN( "http://www.w3.org/2003/g/data-view#", XML_N_GRDDL ), + ++ // OOo extension digital signatures, used in ODF 1.1 ++ TOKEN( "dsigooo", XML_NP_DSIG_OOO ), ++ TOKEN( "http://openoffice.org/2004/documentsignatures", XML_N_DSIG_OOO ), ++ // ODF 1.2 digital signature namespaces ++ TOKEN( "dsig", XML_NP_DSIG ), ++ TOKEN( "urn:oasis:names:tc:opendocument:xmlns:digitalsignature:1.0", XML_N_DSIG ), ++ TOKEN( "ds", XML_NP_DS ), ++ TOKEN( "http://www.w3.org/2000/09/xmldsig#", XML_N_DS ), ++ TOKEN( "xades132", XML_NP_XADES132 ), ++ TOKEN( "http://uri.etsi.org/01903/v1.3.2#", XML_N_XADES132 ), ++ TOKEN( "xades141", XML_NP_XADES141 ), ++ TOKEN( "http://uri.etsi.org/01903/v1.4.1#", XML_N_XADES141 ), ++ + // ODF Enhanced namespaces + TOKEN( "officeooo", XML_NP_OFFICE_EXT ), + TOKEN( "http://openoffice.org/2009/office", XML_N_OFFICE_EXT ), +diff --git a/xmloff/source/token/tokens.txt b/xmloff/source/token/tokens.txt +index 34b9af91e03c..495e519ffb2d 100644 +--- a/xmloff/source/token/tokens.txt ++++ b/xmloff/source/token/tokens.txt +@@ -72,6 +72,16 @@ xhtml + N_XHTML_DUMMY + grddl + N_GRDDL_DUMMY ++dsigooo ++N_DSIG_OOO_DUMMY ++dsig ++N_DSIG_DUMMY ++ds ++N_DS_DUMMY ++xades132 ++N_XADES132_DUMMY ++xades141 ++N_XADES141_DUMMY + officeooo + N_OFFICE_EXT_DUMMY + formx +diff --git a/xmlsecurity/source/helper/xsecparser.cxx b/xmlsecurity/source/helper/xsecparser.cxx +index 9f2bbe074a1b..0aecb1854f8c 100644 +--- a/xmlsecurity/source/helper/xsecparser.cxx ++++ b/xmlsecurity/source/helper/xsecparser.cxx +@@ -21,476 +21,1468 @@ + #include "xsecparser.hxx" + #include + #include ++ ++#include ++#include ++ + #include + #include + #include + ++class XSecParser::Context ++{ ++ protected: ++ friend class XSecParser; ++ XSecParser & m_rParser; ++ private: ++ std::unique_ptr m_pOldNamespaceMap; + +-XSecParser::XSecParser(XMLSignatureHelper& rXMLSignatureHelper, +- XSecController* pXSecController) +- : m_bInX509IssuerName(false) +- , m_bInX509SerialNumber(false) +- , m_bInX509Certificate(false) +- , m_bInGpgCertificate(false) +- , m_bInGpgKeyID(false) +- , m_bInGpgOwner(false) +- , m_bInCertDigest(false) +- , m_bInEncapsulatedX509Certificate(false) +- , m_bInSigningTime(false) +- , m_bInDigestValue(false) +- , m_bInSignatureValue(false) +- , m_bInDate(false) +- , m_bInDescription(false) +- , m_bInSignatureLineId(false) +- , m_bInSignatureLineValidImage(false) +- , m_bInSignatureLineInvalidImage(false) +- , m_pXSecController(pXSecController) +- , m_bReferenceUnresolved(false) +- , m_nReferenceDigestID(css::xml::crypto::DigestID::SHA1) +- , m_rXMLSignatureHelper(rXMLSignatureHelper) ++ public: ++ Context(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : m_rParser(rParser) ++ , m_pOldNamespaceMap(std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual ~Context() = default; ++ ++ virtual void StartElement( ++ css::uno::Reference const& /*xAttrs*/) ++ { ++ } ++ ++ virtual void EndElement() ++ { ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const /*nNamespace*/, OUString const& /*rName*/); ++ ++ virtual void Characters(OUString const& /*rChars*/) ++ { ++ } ++}; ++ ++// it's possible that an unsupported element has an Id attribute and a ++// ds:Reference digesting it - probably this means XSecController needs to know ++// about it. (For known elements, the Id attribute is only processed according ++// to the schema.) ++class XSecParser::UnknownContext ++ : public XSecParser::Context + { ++ public: ++ UnknownContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ m_rParser.HandleIdAttr(xAttrs); ++ } ++}; ++ ++auto XSecParser::Context::CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const /*nNamespace*/, OUString const& /*rName*/) ++-> std::unique_ptr ++{ ++ // default: create new base context ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); + } + +-OUString XSecParser::getIdAttr(const css::uno::Reference< css::xml::sax::XAttributeList >& xAttribs ) ++class XSecParser::LoPGPOwnerContext ++ : public XSecParser::Context + { +- OUString ouIdAttr = xAttribs->getValueByName("id"); ++ private: ++ OUString m_Value; + +- if (ouIdAttr.isEmpty()) +- { +- ouIdAttr = xAttribs->getValueByName("Id"); +- } ++ public: ++ LoPGPOwnerContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } + +- return ouIdAttr; +-} ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setGpgOwner(m_Value); ++ } + +-/* +- * XDocumentHandler +- */ +-void SAL_CALL XSecParser::startDocument( ) ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::DsPGPKeyPacketContext ++ : public XSecParser::Context + { +- m_bInX509IssuerName = false; +- m_bInX509SerialNumber = false; +- m_bInX509Certificate = false; +- m_bInGpgCertificate = false; +- m_bInGpgKeyID = false; +- m_bInGpgOwner = false; +- m_bInSignatureValue = false; +- m_bInDigestValue = false; +- m_bInDate = false; +- m_bInDescription = false; ++ private: ++ OUString m_Value; + +- if (m_xNextHandler.is()) +- { +- m_xNextHandler->startDocument(); +- } +-} ++ public: ++ DsPGPKeyPacketContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } + +-void SAL_CALL XSecParser::endDocument( ) ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setGpgCertificate(m_Value); ++ } ++ ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::DsPGPKeyIDContext ++ : public XSecParser::Context + { +- if (m_xNextHandler.is()) +- { +- m_xNextHandler->endDocument(); +- } +-} ++ private: ++ OUString m_Value; + +-void SAL_CALL XSecParser::startElement( +- const OUString& aName, +- const css::uno::Reference< css::xml::sax::XAttributeList >& xAttribs ) ++ public: ++ DsPGPKeyIDContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setGpgKeyID(m_Value); ++ } ++ ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::DsPGPDataContext ++ : public XSecParser::Context + { +- try +- { +- OUString ouIdAttr = getIdAttr(xAttribs); +- if (!ouIdAttr.isEmpty()) ++ public: ++ DsPGPDataContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& /*xAttrs*/) override ++ { ++ m_rParser.m_pXSecController->switchGpgSignature(); ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_DS && rName == "PGPKeyID") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_DS && rName == "PGPKeyPacket") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_LO_EXT && rName == "PGPOwner") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); ++ } ++}; ++ ++class XSecParser::DsX509CertificateContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_Value; ++ ++ public: ++ DsX509CertificateContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setX509Certificate(m_Value); ++ } ++ ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::DsX509SerialNumberContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_Value; ++ ++ public: ++ DsX509SerialNumberContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setX509SerialNumber(m_Value); ++ } ++ ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::DsX509IssuerNameContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_Value; ++ ++ public: ++ DsX509IssuerNameContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setX509IssuerName(m_Value); ++ } ++ ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::DsX509IssuerSerialContext ++ : public XSecParser::Context ++{ ++ public: ++ DsX509IssuerSerialContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_DS && rName == "X509IssuerName") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_DS && rName == "X509SerialNumber") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ // missing: ds:X509SKI, ds:X509SubjectName, ds:X509CRL ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); ++ } ++}; ++ ++class XSecParser::DsX509DataContext ++ : public XSecParser::Context ++{ ++ public: ++ DsX509DataContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_DS && rName == "X509IssuerSerial") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_DS && rName == "X509Certificate") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ // missing: ds:X509SKI, ds:X509SubjectName, ds:X509CRL ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); ++ } ++}; ++ ++class XSecParser::DsKeyInfoContext ++ : public XSecParser::Context ++{ ++ public: ++ DsKeyInfoContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ m_rParser.HandleIdAttr(xAttrs); ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_DS && rName == "X509Data") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_DS && rName == "PGPData") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ // missing: ds:KeyName, ds:KeyValue, ds:RetrievalMethod, ds:SPKIData, ds:MgmtData ++ // (old code would read ds:Transform inside ds:RetrievalMethod but ++ // presumably that was a bug) ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); ++ } ++ ++}; ++ ++class XSecParser::DsSignatureValueContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_Value; ++ ++ public: ++ DsSignatureValueContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ m_rParser.HandleIdAttr(xAttrs); ++ } ++ ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setSignatureValue(m_Value); ++ } ++ ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::DsDigestValueContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString & m_rValue; ++ ++ public: ++ DsDigestValueContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap, ++ OUString & rValue) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rValue(rValue) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& /*xAttrs*/) override ++ { ++ m_rValue.clear(); ++ } ++ ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_rValue += rChars; ++ } ++}; ++ ++class XSecParser::DsDigestMethodContext ++ : public XSecParser::Context ++{ ++ private: ++ sal_Int32 & m_rReferenceDigestID; ++ ++ public: ++ DsDigestMethodContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap, ++ sal_Int32 & rReferenceDigestID) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rReferenceDigestID(rReferenceDigestID) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ OUString ouAlgorithm = xAttrs->getValueByName("Algorithm"); ++ ++ SAL_WARN_IF( ouAlgorithm.isEmpty(), "xmlsecurity.helper", "no Algorithm in Reference" ); ++ if (!ouAlgorithm.isEmpty()) ++ { ++ SAL_WARN_IF( ouAlgorithm != ALGO_XMLDSIGSHA1 ++ && ouAlgorithm != ALGO_XMLDSIGSHA256 ++ && ouAlgorithm != ALGO_XMLDSIGSHA512, ++ "xmlsecurity.helper", "Algorithm neither SHA1, SHA256 nor SHA512"); ++ if (ouAlgorithm == ALGO_XMLDSIGSHA1) ++ m_rReferenceDigestID = css::xml::crypto::DigestID::SHA1; ++ else if (ouAlgorithm == ALGO_XMLDSIGSHA256) ++ m_rReferenceDigestID = css::xml::crypto::DigestID::SHA256; ++ else if (ouAlgorithm == ALGO_XMLDSIGSHA512) ++ m_rReferenceDigestID = css::xml::crypto::DigestID::SHA512; ++ else ++ m_rReferenceDigestID = 0; ++ } ++ } ++}; ++ ++class XSecParser::DsTransformContext ++ : public XSecParser::Context ++{ ++ private: ++ bool & m_rIsC14N; ++ ++ public: ++ DsTransformContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap, ++ bool & rIsC14N) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rIsC14N(rIsC14N) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ OUString ouAlgorithm = xAttrs->getValueByName("Algorithm"); ++ ++ if (ouAlgorithm == ALGO_C14N) ++ /* ++ * a xml stream ++ */ ++ { ++ m_rIsC14N = true; ++ } ++ } ++}; ++ ++class XSecParser::DsTransformsContext ++ : public XSecParser::Context ++{ ++ private: ++ bool & m_rIsC14N; ++ ++ public: ++ DsTransformsContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap, ++ bool & rIsC14N) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ , m_rIsC14N(rIsC14N) ++ { ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_DS && rName == "Transform") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_rIsC14N); ++ } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); ++ } ++}; ++ ++class XSecParser::DsReferenceContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_URI; ++ OUString m_Type; ++ OUString m_DigestValue; ++ bool m_IsC14N = false; ++ // Relevant for ODF. The digest algorithm selected by the DigestMethod ++ // element's Algorithm attribute. @see css::xml::crypto::DigestID. ++ sal_Int32 m_nReferenceDigestID = css::xml::crypto::DigestID::SHA1; ++ ++ public: ++ DsReferenceContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ m_rParser.HandleIdAttr(xAttrs); ++ ++ m_URI = xAttrs->getValueByName("URI"); ++ SAL_WARN_IF(m_URI.isEmpty(), "xmlsecurity.helper", "URI is empty"); ++ // Remember the type of this reference. ++ m_Type = xAttrs->getValueByName("Type"); ++ } ++ ++ virtual void EndElement() override ++ { ++ if (m_URI.startsWith("#")) ++ { ++ /* ++ * remove the first character '#' from the attribute value ++ */ ++ m_rParser.m_pXSecController->addReference(m_URI.copy(1), m_nReferenceDigestID, m_Type); ++ } ++ else ++ { ++ if (m_IsC14N) // this is determined by nested ds:Transform ++ { ++ m_rParser.m_pXSecController->addStreamReference(m_URI, false, m_nReferenceDigestID); ++ } ++ else ++ /* ++ * it must be an octet stream ++ */ ++ { ++ m_rParser.m_pXSecController->addStreamReference(m_URI, true, m_nReferenceDigestID); ++ } ++ } ++ ++ m_rParser.m_pXSecController->setDigestValue(m_nReferenceDigestID, m_DigestValue); ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_DS && rName == "Transforms") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_IsC14N); ++ } ++ if (nNamespace == XML_NAMESPACE_DS && rName == "DigestMethod") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_nReferenceDigestID); ++ } ++ if (nNamespace == XML_NAMESPACE_DS && rName == "DigestValue") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_DigestValue); ++ } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); ++ } ++}; ++ ++class XSecParser::DsSignatureMethodContext ++ : public XSecParser::Context ++{ ++ public: ++ DsSignatureMethodContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ OUString ouAlgorithm = xAttrs->getValueByName("Algorithm"); ++ if (ouAlgorithm == ALGO_ECDSASHA1 || ouAlgorithm == ALGO_ECDSASHA256 ++ || ouAlgorithm == ALGO_ECDSASHA512) ++ { ++ m_rParser.m_pXSecController->setSignatureMethod(svl::crypto::SignatureMethodAlgorithm::ECDSA); ++ } ++ } ++}; ++ ++class XSecParser::DsSignedInfoContext ++ : public XSecParser::Context ++{ ++ public: ++ DsSignedInfoContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ m_rParser.HandleIdAttr(xAttrs); ++ } ++ ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setReferenceCount(); ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_DS && rName == "SignatureMethod") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_DS && rName == "Reference") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ // missing: ds:CanonicalizationMethod ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); ++ } ++}; ++ ++class XSecParser::XadesEncapsulatedX509CertificateContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_Value; ++ ++ public: ++ XadesEncapsulatedX509CertificateContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ m_rParser.HandleIdAttr(xAttrs); ++ } ++ ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->addEncapsulatedX509Certificate(m_Value); ++ } ++ ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::XadesCertificateValuesContext ++ : public XSecParser::Context ++{ ++ public: ++ XadesCertificateValuesContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ m_rParser.HandleIdAttr(xAttrs); ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "EncapsulatedX509Certificate") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ // missing: xades:OtherCertificate ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); ++ } ++}; ++ ++class XSecParser::XadesUnsignedSignaturePropertiesContext ++ : public XSecParser::Context ++{ ++ public: ++ XadesUnsignedSignaturePropertiesContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ m_rParser.HandleIdAttr(xAttrs); ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "CertificateValues") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ // missing: ++ // xades:CounterSignature ++ // ^ old code would read a ds:Signature inside it? ++ // xades:SignatureTimeStamp ++ // xades:CompleteCertificateRefs ++ // xades:CompleteRevocationRefs ++ // xades:AttributeCertificateRefs ++ // xades:AttributeRevocationRefs ++ // xades:SigAndRefsTimeStamp ++ // xades:RefsOnlyTimeStamp ++ // xades:RevocationValues ++ // xades:AttrAuthoritiesCertValues ++ // ^ old code: was equivalent to CertificateValues ??? ++ // xades:AttributeRevocationValues ++ // xades:ArchiveTimeStamp ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); ++ } ++}; ++ ++class XSecParser::XadesUnsignedPropertiesContext ++ : public XSecParser::Context ++{ ++ public: ++ XadesUnsignedPropertiesContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override ++ { ++ m_rParser.HandleIdAttr(xAttrs); ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "UnsignedSignatureProperties") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ // missing: xades:UnsignedDataObjectProperties ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); ++ } ++}; ++ ++class XSecParser::LoSignatureLineIdContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_Value; ++ ++ public: ++ LoSignatureLineIdContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setSignatureLineId(m_Value); ++ } ++ ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::LoSignatureLineValidImageContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_Value; ++ ++ public: ++ LoSignatureLineValidImageContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setValidSignatureImage(m_Value); ++ } ++ ++ virtual void Characters(OUString const& rChars) override + { +- m_pXSecController->collectToVerify( ouIdAttr ); ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::LoSignatureLineInvalidImageContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_Value; ++ ++ public: ++ LoSignatureLineInvalidImageContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual void EndElement() override ++ { ++ m_rParser.m_pXSecController->setInvalidSignatureImage(m_Value); ++ } ++ ++ virtual void Characters(OUString const& rChars) override ++ { ++ m_Value += rChars; ++ } ++}; ++ ++class XSecParser::LoSignatureLineContext ++ : public XSecParser::Context ++{ ++ public: ++ LoSignatureLineContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) ++ { ++ } ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_LO_EXT && rName == "SignatureLineId") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_LO_EXT && rName == "SignatureLineValidImage") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_LO_EXT && rName == "SignatureLineInvalidImage") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } ++}; + +- if ( aName == "Signature" ) ++class XSecParser::XadesCertDigestContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_Value; ++ sal_Int32 m_nReferenceDigestID = css::xml::crypto::DigestID::SHA1; ++ ++ public: ++ XadesCertDigestContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_rXMLSignatureHelper.StartVerifySignatureElement(); +- m_pXSecController->addSignature(); +- if (!ouIdAttr.isEmpty()) +- { +- m_pXSecController->setId( ouIdAttr ); +- } + } +- else if (aName == "SignatureMethod") ++ ++ virtual void EndElement() override + { +- OUString ouAlgorithm = xAttribs->getValueByName("Algorithm"); +- if (ouAlgorithm == ALGO_ECDSASHA1 || ouAlgorithm == ALGO_ECDSASHA256 +- || ouAlgorithm == ALGO_ECDSASHA512) +- m_pXSecController->setSignatureMethod(svl::crypto::SignatureMethodAlgorithm::ECDSA); ++ m_rParser.m_pXSecController->setCertDigest(m_Value/* FIXME , m_nReferenceDigestID*/); + } +- else if ( aName == "Reference" ) ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override + { +- OUString ouUri = xAttribs->getValueByName("URI"); +- SAL_WARN_IF( ouUri.isEmpty(), "xmlsecurity.helper", "URI is empty" ); +- // Remember the type of this reference. +- OUString ouType = xAttribs->getValueByName("Type"); +- if (ouUri.startsWith("#")) ++ if (nNamespace == XML_NAMESPACE_DS && rName == "DigestMethod") + { +- /* +- * remove the first character '#' from the attribute value +- */ +- m_pXSecController->addReference( ouUri.copy(1), m_nReferenceDigestID, ouType ); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_nReferenceDigestID); + } +- else ++ if (nNamespace == XML_NAMESPACE_DS && rName == "DigestValue") + { +- /* +- * remember the uri +- */ +- m_currentReferenceURI = ouUri; +- m_bReferenceUnresolved = true; ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap), m_Value); + } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- else if (aName == "DigestMethod") ++}; ++ ++class XSecParser::XadesCertContext ++ : public XSecParser::Context ++{ ++ public: ++ XadesCertContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- OUString ouAlgorithm = xAttribs->getValueByName("Algorithm"); ++ } + +- SAL_WARN_IF( ouAlgorithm.isEmpty(), "xmlsecurity.helper", "no Algorithm in Reference" ); +- if (!ouAlgorithm.isEmpty()) ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override ++ { ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "CertDigest") + { +- SAL_WARN_IF( ouAlgorithm != ALGO_XMLDSIGSHA1 +- && ouAlgorithm != ALGO_XMLDSIGSHA256 +- && ouAlgorithm != ALGO_XMLDSIGSHA512, +- "xmlsecurity.helper", "Algorithm neither SHA1, SHA256 nor SHA512"); +- if (ouAlgorithm == ALGO_XMLDSIGSHA1) +- m_nReferenceDigestID = css::xml::crypto::DigestID::SHA1; +- else if (ouAlgorithm == ALGO_XMLDSIGSHA256) +- m_nReferenceDigestID = css::xml::crypto::DigestID::SHA256; +- else if (ouAlgorithm == ALGO_XMLDSIGSHA512) +- m_nReferenceDigestID = css::xml::crypto::DigestID::SHA512; +- else +- m_nReferenceDigestID = 0; ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); + } +- } +- else if (aName == "Transform") +- { +- if ( m_bReferenceUnresolved ) ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "IssuerSerial") + { +- OUString ouAlgorithm = xAttribs->getValueByName("Algorithm"); +- +- if (ouAlgorithm == ALGO_C14N) +- /* +- * a xml stream +- */ +- { +- m_pXSecController->addStreamReference( m_currentReferenceURI, false, m_nReferenceDigestID ); +- m_bReferenceUnresolved = false; +- } ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); + } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- else if (aName == "X509IssuerName") +- { +- m_ouX509IssuerName.clear(); +- m_bInX509IssuerName = true; +- } +- else if (aName == "X509SerialNumber") ++}; ++ ++class XSecParser::XadesSigningCertificateContext ++ : public XSecParser::Context ++{ ++ public: ++ XadesSigningCertificateContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_ouX509SerialNumber.clear(); +- m_bInX509SerialNumber = true; + } +- else if (aName == "X509Certificate") ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override + { +- m_ouX509Certificate.clear(); +- m_bInX509Certificate = true; ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "Cert") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- else if (aName == "PGPData") ++}; ++ ++class XSecParser::XadesSigningTimeContext ++ : public XSecParser::Context ++{ ++ public: ++ XadesSigningTimeContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_pXSecController->switchGpgSignature(); + } +- else if (aName == "PGPKeyID") ++ ++ virtual void StartElement( ++ css::uno::Reference const& /*xAttrs*/) override + { +- m_ouGpgKeyID.clear(); +- m_bInGpgKeyID = true; ++ m_rParser.m_ouDate.clear(); + } +- else if (aName == "PGPKeyPacket") ++ ++ virtual void EndElement() override + { +- m_ouGpgCertificate.clear(); +- m_bInGpgCertificate = true; ++ m_rParser.m_pXSecController->setDate( m_rParser.m_ouDate ); + } +- else if (aName == "loext:PGPOwner") ++ ++ virtual void Characters(OUString const& rChars) override + { +- m_ouGpgOwner.clear(); +- m_bInGpgOwner = true; ++ m_rParser.m_ouDate += rChars; + } +- else if (aName == "SignatureValue") ++}; ++ ++class XSecParser::XadesSignedSignaturePropertiesContext ++ : public XSecParser::Context ++{ ++ public: ++ XadesSignedSignaturePropertiesContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_ouSignatureValue.clear(); +- m_bInSignatureValue = true; + } +- else if (aName == "DigestValue" && !m_bInCertDigest) ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override + { +- m_ouDigestValue.clear(); +- m_bInDigestValue = true; ++ m_rParser.HandleIdAttr(xAttrs); + } +- else if (aName == "xd:CertDigest") ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override + { +- m_ouCertDigest.clear(); +- m_bInCertDigest = true; ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "SigningTime") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "SigningCertificate") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_LO_EXT && rName == "SignatureLine") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ // missing: xades:SignaturePolicyIdentifier, xades:SignatureProductionPlace, xades:SignerRole ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- // FIXME: Existing code here in xmlsecurity uses "xd" as the namespace prefix for XAdES, +- // while the sample document attached to tdf#76142 uses "xades". So accept either here. Of +- // course this is idiotic and wrong, the right thing would be to use a proper way to parse +- // XML that would handle namespaces correctly. I have no idea how substantial re-plumbing of +- // this code that would require. +- else if (aName == "xd:EncapsulatedX509Certificate" || aName == "xades:EncapsulatedX509Certificate") ++}; ++ ++class XSecParser::XadesSignedPropertiesContext ++ : public XSecParser::Context ++{ ++ public: ++ XadesSignedPropertiesContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_ouEncapsulatedX509Certificate.clear(); +- m_bInEncapsulatedX509Certificate = true; + } +- else if (aName == "xd:SigningTime" || aName == "xades:SigningTime") ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override + { +- m_ouDate.clear(); +- m_bInSigningTime = true; ++ m_rParser.HandleIdAttr(xAttrs); + } +- else if ( aName == "SignatureProperty" ) ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override + { +- if (!ouIdAttr.isEmpty()) ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "SignedSignatureProperties") + { +- m_pXSecController->setPropertyId( ouIdAttr ); ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); + } ++ // missing: xades:SignedDataObjectProperties ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- else if (aName == "dc:date") +- { +- if (m_ouDate.isEmpty()) +- m_bInDate = true; +- } +- else if (aName == "dc:description") ++}; ++ ++class XSecParser::XadesQualifyingPropertiesContext ++ : public XSecParser::Context ++{ ++ public: ++ XadesQualifyingPropertiesContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_ouDescription.clear(); +- m_bInDescription = true; + } +- else if (aName == "loext:SignatureLineId") ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override + { +- m_ouSignatureLineId.clear(); +- m_bInSignatureLineId = true; ++ m_rParser.HandleIdAttr(xAttrs); + } +- else if (aName == "loext:SignatureLineValidImage") ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override + { +- m_ouSignatureLineValidImage.clear(); +- m_bInSignatureLineValidImage = true; ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "SignedProperties") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "UnsignedProperties") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- else if (aName == "loext:SignatureLineInvalidImage") ++}; ++ ++class XSecParser::DcDateContext ++ : public XSecParser::Context ++{ ++ private: ++ bool m_isIgnore = false; ++ ++ public: ++ DcDateContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_ouSignatureLineInvalidImage.clear(); +- m_bInSignatureLineInvalidImage = true; + } + +- if (m_xNextHandler.is()) ++ virtual void StartElement( ++ css::uno::Reference const& /*xAttrs*/) override + { +- m_xNextHandler->startElement(aName, xAttribs); ++ m_isIgnore = !m_rParser.m_ouDate.isEmpty(); + } +- } +- catch (css::uno::Exception& ) +- {//getCaughtException MUST be the first line in the catch block +- css::uno::Any exc = cppu::getCaughtException(); +- throw css::xml::sax::SAXException( +- "xmlsecurity: Exception in XSecParser::startElement", +- nullptr, exc); +- } +- catch (...) +- { +- throw css::xml::sax::SAXException( +- "xmlsecurity: unexpected exception in XSecParser::startElement", nullptr, +- css::uno::Any()); +- } +-} + +-void SAL_CALL XSecParser::endElement( const OUString& aName ) +-{ +- try +- { +- if (aName == "DigestValue" && !m_bInCertDigest) ++ virtual void EndElement() override + { +- m_bInDigestValue = false; ++ if (!m_isIgnore) ++ { ++ m_rParser.m_pXSecController->setDate( m_rParser.m_ouDate ); ++ } + } +- else if ( aName == "Reference" ) ++ ++ virtual void Characters(OUString const& rChars) override + { +- if ( m_bReferenceUnresolved ) +- /* +- * it must be an octet stream +- */ ++ if (!m_isIgnore) + { +- m_pXSecController->addStreamReference( m_currentReferenceURI, true, m_nReferenceDigestID ); +- m_bReferenceUnresolved = false; ++ m_rParser.m_ouDate += rChars; + } +- +- m_pXSecController->setDigestValue( m_nReferenceDigestID, m_ouDigestValue ); + } +- else if ( aName == "SignedInfo" ) ++}; ++ ++class XSecParser::DcDescriptionContext ++ : public XSecParser::Context ++{ ++ private: ++ OUString m_Value; ++ ++ public: ++ DcDescriptionContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_pXSecController->setReferenceCount(); + } +- else if ( aName == "SignatureValue" ) ++ ++ virtual void EndElement() override + { +- m_pXSecController->setSignatureValue( m_ouSignatureValue ); +- m_bInSignatureValue = false; ++ m_rParser.m_pXSecController->setDescription(m_Value); + } +- else if (aName == "X509IssuerName") ++ ++ virtual void Characters(OUString const& rChars) override + { +- m_pXSecController->setX509IssuerName( m_ouX509IssuerName ); +- m_bInX509IssuerName = false; ++ m_Value += rChars; + } +- else if (aName == "X509SerialNumber") ++}; ++ ++class XSecParser::DsSignaturePropertyContext ++ : public XSecParser::Context ++{ ++ public: ++ DsSignaturePropertyContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_pXSecController->setX509SerialNumber( m_ouX509SerialNumber ); +- m_bInX509SerialNumber = false; + } +- else if (aName == "X509Certificate") ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override + { +- m_pXSecController->setX509Certificate( m_ouX509Certificate ); +- m_bInX509Certificate = false; ++ OUString const ouIdAttr(m_rParser.HandleIdAttr(xAttrs)); ++ if (!ouIdAttr.isEmpty()) ++ { ++ m_rParser.m_pXSecController->setPropertyId( ouIdAttr ); ++ } + } +- else if (aName == "PGPKeyID") ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override + { +- m_pXSecController->setGpgKeyID( m_ouGpgKeyID ); +- m_bInGpgKeyID = false; ++ if (nNamespace == XML_NAMESPACE_DC && rName == "date") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_DC && rName == "description") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- else if (aName == "PGPKeyPacket") ++}; ++ ++class XSecParser::DsSignaturePropertiesContext ++ : public XSecParser::Context ++{ ++ public: ++ DsSignaturePropertiesContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_pXSecController->setGpgCertificate( m_ouGpgCertificate ); +- m_bInGpgCertificate = false; + } +- else if (aName == "loext:PGPOwner") ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override + { +- m_pXSecController->setGpgOwner( m_ouGpgOwner ); +- m_bInGpgOwner = false; ++ m_rParser.HandleIdAttr(xAttrs); + } +- else if (aName == "xd:CertDigest") ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override + { +- m_pXSecController->setCertDigest( m_ouCertDigest ); +- m_bInCertDigest = false; ++ if (nNamespace == XML_NAMESPACE_DS && rName == "SignatureProperty") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- else if (aName == "xd:EncapsulatedX509Certificate" || aName == "xades:EncapsulatedX509Certificate") ++}; ++ ++class XSecParser::DsObjectContext ++ : public XSecParser::Context ++{ ++ public: ++ DsObjectContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_pXSecController->addEncapsulatedX509Certificate( m_ouEncapsulatedX509Certificate ); +- m_bInEncapsulatedX509Certificate = false; + } +- else if (aName == "xd:SigningTime" || aName == "xades:SigningTime") ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override + { +- m_pXSecController->setDate( m_ouDate ); +- m_bInSigningTime = false; ++ m_rParser.HandleIdAttr(xAttrs); + } +- else if (aName == "dc:date") ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override + { +- if (m_bInDate) ++ if (nNamespace == XML_NAMESPACE_DS && rName == "SignatureProperties") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_XADES132 && rName == "QualifyingProperties") + { +- m_pXSecController->setDate( m_ouDate ); +- m_bInDate = false; ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); + } ++ // missing: ds:Manifest ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- else if (aName == "dc:description") ++}; ++ ++class XSecParser::DsSignatureContext ++ : public XSecParser::Context ++{ ++ public: ++ DsSignatureContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_pXSecController->setDescription( m_ouDescription ); +- m_bInDescription = false; + } +- else if (aName == "loext:SignatureLineId") ++ ++ virtual void StartElement( ++ css::uno::Reference const& xAttrs) override + { +- m_pXSecController->setSignatureLineId( m_ouSignatureLineId ); +- m_bInSignatureLineId = false; ++ OUString const ouIdAttr(m_rParser.HandleIdAttr(xAttrs)); ++ m_rParser.m_rXMLSignatureHelper.StartVerifySignatureElement(); ++ m_rParser.m_pXSecController->addSignature(); ++ if (!ouIdAttr.isEmpty()) ++ { ++ m_rParser.m_pXSecController->setId( ouIdAttr ); ++ } + } +- else if (aName == "loext:SignatureLineValidImage") ++ ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override + { +- m_pXSecController->setValidSignatureImage( m_ouSignatureLineValidImage ); +- m_bInSignatureLineValidImage = false; ++ if (nNamespace == XML_NAMESPACE_DS && rName == "SignedInfo") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_DS && rName == "SignatureValue") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_DS && rName == "KeyInfo") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ if (nNamespace == XML_NAMESPACE_DS && rName == "Object") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- else if (aName == "loext:SignatureLineInvalidImage") ++}; ++ ++class XSecParser::DsigSignaturesContext ++ : public XSecParser::Context ++{ ++ public: ++ DsigSignaturesContext(XSecParser & rParser, ++ std::unique_ptr pOldNamespaceMap) ++ : XSecParser::Context(rParser, std::move(pOldNamespaceMap)) + { +- m_pXSecController->setInvalidSignatureImage( m_ouSignatureLineInvalidImage ); +- m_bInSignatureLineInvalidImage = false; + } + +- if (m_xNextHandler.is()) ++ virtual std::unique_ptr CreateChildContext( ++ std::unique_ptr pOldNamespaceMap, ++ sal_uInt16 const nNamespace, OUString const& rName) override + { +- m_xNextHandler->endElement(aName); ++ if (nNamespace == XML_NAMESPACE_DS && rName == "Signature") ++ { ++ return std::make_unique(m_rParser, std::move(pOldNamespaceMap)); ++ } ++ return XSecParser::Context::CreateChildContext(std::move(pOldNamespaceMap), nNamespace, rName); + } +- } +- catch (css::uno::Exception& ) +- {//getCaughtException MUST be the first line in the catch block +- css::uno::Any exc = cppu::getCaughtException(); +- throw css::xml::sax::SAXException( +- "xmlsecurity: Exception in XSecParser::endElement", +- nullptr, exc); +- } +- catch (...) +- { +- throw css::xml::sax::SAXException( +- "xmlsecurity: unexpected exception in XSecParser::endElement", nullptr, +- css::uno::Any()); +- } ++}; ++ ++ ++XSecParser::XSecParser(XMLSignatureHelper& rXMLSignatureHelper, ++ XSecController* pXSecController) ++ : m_pNamespaceMap(new SvXMLNamespaceMap) ++ , m_pXSecController(pXSecController) ++ , m_rXMLSignatureHelper(rXMLSignatureHelper) ++{ ++ using namespace xmloff::token; ++ m_pNamespaceMap->Add( GetXMLToken(XML_XML), GetXMLToken(XML_N_XML), XML_NAMESPACE_XML ); ++ m_pNamespaceMap->Add( "_dsig_ooo", GetXMLToken(XML_N_DSIG_OOO), XML_NAMESPACE_DSIG_OOO ); ++ m_pNamespaceMap->Add( "_dsig", GetXMLToken(XML_N_DSIG), XML_NAMESPACE_DSIG ); ++ m_pNamespaceMap->Add( "_ds", GetXMLToken(XML_N_DS), XML_NAMESPACE_DS ); ++ m_pNamespaceMap->Add( "_xades132", GetXMLToken(XML_N_XADES132), XML_NAMESPACE_XADES132); ++ m_pNamespaceMap->Add( "_xades141", GetXMLToken(XML_N_XADES141), XML_NAMESPACE_XADES141); ++ m_pNamespaceMap->Add( "_dc", GetXMLToken(XML_N_DC), XML_NAMESPACE_DC ); ++ m_pNamespaceMap->Add( "_office_libo", ++ GetXMLToken(XML_N_LO_EXT), XML_NAMESPACE_LO_EXT); + } + +-void SAL_CALL XSecParser::characters( const OUString& aChars ) ++OUString XSecParser::HandleIdAttr(css::uno::Reference const& xAttrs) + { +- if (m_bInX509IssuerName) +- { +- m_ouX509IssuerName += aChars; +- } +- else if (m_bInX509SerialNumber) +- { +- m_ouX509SerialNumber += aChars; +- } +- else if (m_bInX509Certificate) +- { +- m_ouX509Certificate += aChars; +- } +- else if (m_bInGpgCertificate) ++ OUString ouIdAttr = getIdAttr(xAttrs); ++ if (!ouIdAttr.isEmpty()) + { +- m_ouGpgCertificate += aChars; ++ m_pXSecController->collectToVerify( ouIdAttr ); + } +- else if (m_bInGpgKeyID) ++ return ouIdAttr; ++} ++ ++OUString XSecParser::getIdAttr(const css::uno::Reference< css::xml::sax::XAttributeList >& xAttribs ) ++{ ++ OUString ouIdAttr = xAttribs->getValueByName("id"); ++ ++ if (ouIdAttr.isEmpty()) + { +- m_ouGpgKeyID += aChars; ++ ouIdAttr = xAttribs->getValueByName("Id"); + } +- else if (m_bInGpgOwner) ++ ++ return ouIdAttr; ++} ++ ++/* ++ * XDocumentHandler ++ */ ++void SAL_CALL XSecParser::startDocument( ) ++{ ++ if (m_xNextHandler.is()) + { +- m_ouGpgOwner += aChars; ++ m_xNextHandler->startDocument(); + } +- else if (m_bInSignatureValue) ++} ++ ++void SAL_CALL XSecParser::endDocument( ) ++{ ++ if (m_xNextHandler.is()) + { +- m_ouSignatureValue += aChars; ++ m_xNextHandler->endDocument(); + } +- else if (m_bInDigestValue && !m_bInCertDigest) ++} ++ ++void SAL_CALL XSecParser::startElement( ++ const OUString& rName, ++ const css::uno::Reference< css::xml::sax::XAttributeList >& xAttribs ) ++{ ++ assert(m_pNamespaceMap); ++ std::unique_ptr pRewindMap( ++ SvXMLImport::processNSAttributes(m_pNamespaceMap, nullptr, xAttribs)); ++ ++ OUString localName; ++ sal_uInt16 const nPrefix(m_pNamespaceMap->GetKeyByAttrName(rName, &localName)); ++ ++ std::unique_ptr pContext; ++ ++ if (m_ContextStack.empty()) + { +- m_ouDigestValue += aChars; ++ if ((nPrefix == XML_NAMESPACE_DSIG || nPrefix == XML_NAMESPACE_DSIG_OOO) ++ && localName == "document-signatures") ++ { ++ pContext.reset(new DsigSignaturesContext(*this, std::move(pRewindMap))); ++ } ++ else ++ { ++ throw css::xml::sax::SAXException( ++ "xmlsecurity: unexpected root element", nullptr, ++ css::uno::Any()); ++ } + } +- else if (m_bInDate) ++ else + { +- m_ouDate += aChars; ++ pContext = m_ContextStack.top()->CreateChildContext( ++ std::move(pRewindMap), nPrefix, localName); + } +- else if (m_bInDescription) ++ ++ m_ContextStack.push(std::move(pContext)); ++ assert(!pRewindMap); ++ ++ try + { +- m_ouDescription += aChars; ++ m_ContextStack.top()->StartElement(xAttribs); ++ ++ if (m_xNextHandler.is()) ++ { ++ m_xNextHandler->startElement(rName, xAttribs); ++ } + } +- else if (m_bInCertDigest) +- { +- m_ouCertDigest += aChars; ++ catch (css::uno::Exception& ) ++ {//getCaughtException MUST be the first line in the catch block ++ css::uno::Any exc = cppu::getCaughtException(); ++ throw css::xml::sax::SAXException( ++ "xmlsecurity: Exception in XSecParser::startElement", ++ nullptr, exc); + } +- else if (m_bInEncapsulatedX509Certificate) ++ catch (...) + { +- m_ouEncapsulatedX509Certificate += aChars; ++ throw css::xml::sax::SAXException( ++ "xmlsecurity: unexpected exception in XSecParser::startElement", nullptr, ++ css::uno::Any()); + } +- else if (m_bInSigningTime) ++} ++ ++void SAL_CALL XSecParser::endElement(const OUString& rName) ++{ ++ assert(!m_ContextStack.empty()); // this should be checked by sax parser? ++ ++ try + { +- m_ouDate += aChars; ++ m_ContextStack.top()->EndElement(); ++ ++ if (m_xNextHandler.is()) ++ { ++ m_xNextHandler->endElement(rName); ++ } + } +- else if (m_bInSignatureLineId) +- { +- m_ouSignatureLineId += aChars; ++ catch (css::uno::Exception& ) ++ {//getCaughtException MUST be the first line in the catch block ++ css::uno::Any exc = cppu::getCaughtException(); ++ throw css::xml::sax::SAXException( ++ "xmlsecurity: Exception in XSecParser::endElement", ++ nullptr, exc); + } +- else if (m_bInSignatureLineValidImage) ++ catch (...) + { +- m_ouSignatureLineValidImage += aChars; ++ throw css::xml::sax::SAXException( ++ "xmlsecurity: unexpected exception in XSecParser::endElement", nullptr, ++ css::uno::Any()); + } +- else if (m_bInSignatureLineInvalidImage) ++ ++ if (m_ContextStack.top()->m_pOldNamespaceMap) + { +- m_ouSignatureLineInvalidImage += aChars; ++ m_pNamespaceMap = std::move(m_ContextStack.top()->m_pOldNamespaceMap); + } ++ m_ContextStack.pop(); ++} ++ ++void SAL_CALL XSecParser::characters(const OUString& rChars) ++{ ++ assert(!m_ContextStack.empty()); // this should be checked by sax parser? ++ m_ContextStack.top()->Characters(rChars); + + if (m_xNextHandler.is()) + { +- m_xNextHandler->characters(aChars); ++ m_xNextHandler->characters(rChars); + } + } + +diff --git a/xmlsecurity/source/helper/xsecparser.hxx b/xmlsecurity/source/helper/xsecparser.hxx +index d9b079aa3116..93efcb766e3e 100644 +--- a/xmlsecurity/source/helper/xsecparser.hxx ++++ b/xmlsecurity/source/helper/xsecparser.hxx +@@ -25,6 +25,10 @@ + + #include + ++#include ++ ++#include ++ + class XMLSignatureHelper; + class XSecController; + +@@ -48,47 +52,59 @@ class XSecParser: public cppu::WeakImplHelper + ******************************************************************************/ + { + friend class XSecController; ++public: ++ class Context; + private: ++ class UnknownContext; ++ class LoPGPOwnerContext; ++ class DsPGPKeyPacketContext; ++ class DsPGPKeyIDContext; ++ class DsPGPDataContext; ++ class DsX509CertificateContext; ++ class DsX509SerialNumberContext; ++ class DsX509IssuerNameContext; ++ class DsX509IssuerSerialContext; ++ class DsX509DataContext; ++ class DsKeyInfoContext; ++ class DsSignatureValueContext; ++ class DsDigestValueContext; ++ class DsDigestMethodContext; ++ class DsTransformContext; ++ class DsTransformsContext; ++ class DsReferenceContext; ++ class DsSignatureMethodContext; ++ class DsSignedInfoContext; ++ class XadesEncapsulatedX509CertificateContext; ++ class XadesCertificateValuesContext; ++ class XadesUnsignedSignaturePropertiesContext; ++ class XadesUnsignedPropertiesContext; ++ class LoSignatureLineIdContext; ++ class LoSignatureLineValidImageContext; ++ class LoSignatureLineInvalidImageContext; ++ class LoSignatureLineContext; ++ class XadesCertDigestContext; ++ class XadesCertContext; ++ class XadesSigningCertificateContext; ++ class XadesSigningTimeContext; ++ class XadesSignedSignaturePropertiesContext; ++ class XadesSignedPropertiesContext; ++ class XadesQualifyingPropertiesContext; ++ class DcDateContext; ++ class DcDescriptionContext; ++ class DsSignaturePropertyContext; ++ class DsSignaturePropertiesContext; ++ class DsObjectContext; ++ class DsSignatureContext; ++ class DsigSignaturesContext; ++ + /* + * the following members are used to reserve the signature information, + * including X509IssuerName, X509SerialNumber, and X509Certificate,etc. + */ +- OUString m_ouX509IssuerName; +- OUString m_ouX509SerialNumber; +- OUString m_ouX509Certificate; +- OUString m_ouGpgCertificate; +- OUString m_ouGpgKeyID; +- OUString m_ouGpgOwner; +- OUString m_ouCertDigest; +- OUString m_ouEncapsulatedX509Certificate; +- OUString m_ouDigestValue; +- OUString m_ouSignatureValue; + OUString m_ouDate; +- /// Characters of a element, as just read from XML. +- OUString m_ouDescription; +- OUString m_ouSignatureLineId; +- OUString m_ouSignatureLineValidImage; +- OUString m_ouSignatureLineInvalidImage; + +- /* +- * whether inside a particular element +- */ +- bool m_bInX509IssuerName; +- bool m_bInX509SerialNumber; +- bool m_bInX509Certificate; +- bool m_bInGpgCertificate; +- bool m_bInGpgKeyID; +- bool m_bInGpgOwner; +- bool m_bInCertDigest; +- bool m_bInEncapsulatedX509Certificate; +- bool m_bInSigningTime; +- bool m_bInDigestValue; +- bool m_bInSignatureValue; +- bool m_bInDate; +- bool m_bInDescription; +- bool m_bInSignatureLineId; +- bool m_bInSignatureLineValidImage; +- bool m_bInSignatureLineInvalidImage; ++ std::stack> m_ContextStack; ++ std::unique_ptr m_pNamespaceMap; + + /* + * the XSecController collaborating with XSecParser +@@ -101,22 +117,9 @@ private: + css::uno::Reference< + css::xml::sax::XDocumentHandler > m_xNextHandler; + +- /* +- * this string is used to remember the current handled reference's URI, +- * +- * because it can be decided whether a stream reference is xml based or binary based +- * only after the Transforms element is read in, so we have to reserve the reference's +- * URI when the startElement event is met. +- */ +- OUString m_currentReferenceURI; +- bool m_bReferenceUnresolved; +- +- // Relevant for ODF. The digest algorithm selected by the current DigestMethod element's +- // Algorithm attribute in the current Reference element. From css::xml::crypto::DigestID. +- sal_Int32 m_nReferenceDigestID; + XMLSignatureHelper& m_rXMLSignatureHelper; + +-private: ++ OUString HandleIdAttr(css::uno::Reference const& xAttrs); + static OUString getIdAttr(const css::uno::Reference< + css::xml::sax::XAttributeList >& xAttribs ); + +-- +cgit v1.2.1 + diff --git a/debian/python3-access2base.links b/debian/python3-access2base.links new file mode 100644 index 00000000000..f76ba1c90f7 --- /dev/null +++ b/debian/python3-access2base.links @@ -0,0 +1 @@ +usr/share/doc/libreoffice-common/access2base.html usr/share/doc/python3-access2base/access2base.html diff --git a/debian/python3-uno.NEWS b/debian/python3-uno.NEWS new file mode 100644 index 00000000000..fb4312b42c4 --- /dev/null +++ b/debian/python3-uno.NEWS @@ -0,0 +1,11 @@ +libreoffice (1:3.5.2-2) unstable; urgency=low + + * The script provider for python (which was in python3-uno before) has been + split out into libreoffice-script-provider-python as it's the same in both + variants and python3-uno should contain just the module anyway. + + If you relied on python3-uno for the script provider, install the new + package in addition. + + -- Rene Engelhard Sat, 07 Apr 2012 14:30:41 +0200 + diff --git a/debian/python3-uno.ucf b/debian/python3-uno.ucf new file mode 100644 index 00000000000..8a56cd5b703 --- /dev/null +++ b/debian/python3-uno.ucf @@ -0,0 +1 @@ +/usr/lib/libreoffice/share/.registry/pyuno.xcd /etc/libreoffice/registry/pyuno.xcd diff --git a/debian/rules b/debian/rules new file mode 100755 index 00000000000..7d8604c1577 --- /dev/null +++ b/debian/rules @@ -0,0 +1,3913 @@ +#!/usr/bin/make -f +################################################################################ +# LibreOffice source package rules file +# +# Please see debian/README for detailed documentation about the build system, and +# how to build LibreOffice. +################################################################################ +# Authors: +# Chris Halls +# Rene Engelhard +# Copyright 2002-2015 Software in the Public Interest, Inc. +# Portions Copyright 2010 Canonical Ltd. Author: Matthias Klose +# Portions Copyright 2011-2013 Canonical Ltd. Author: Bjoern Michaelsen +# Licensed under the GNU General Public License, version 2. See the file +# /usr/share/common-licenses/GPL or . +################################################################################ + +vafilt = $(subst $(2)=,,$(filter $(2)=%,$(1))) + +include /usr/share/dpkg/pkg-info.mk +CURDIR ?= $(realpath $(dir $(firstword $(MAKEFILE_LIST)))/..) +BASE_VERSION:=$(shell echo $(DEB_VERSION) | cut -d: -f1):$(DEB_VERSION_UPSTREAM) +BINARY_VERSION=$(DEB_VERSION) +#HELP_L10N_VIRTUAL_VERSION:=$(shell echo $(DEB_VERSION_UPSTREAM) | cut -d: -f2 | tr [~] [\\-]) +HELP_L10N_VIRTUAL_VERSION:=7.0 +OOVER:=7.0 +NEXT_OOVER:=$(shell echo "$(OOVER) + 0.1" | bc) + +ARCH_INDEP_PACKAGES := $(shell dh_listpackages -i) +ARCH_DEP_PACKAGES := $(shell dh_listpackages -a) +PACKAGES := $(ARCH_INDEP_PACKAGES) $(ARCH_DEP_PACKAGES) + +include /usr/share/dpkg/architecture.mk +include /usr/share/dpkg/vendor.mk +SHELL:=/bin/bash + +#SYSTEM_GCC_VERSION = $(shell gcc --version | sed -n '/^gcc/s/.*\(.\..\)\..$$/\1/p') +#FIXME +SYSTEM_GCC_VERSION = $(shell gcc --version | sed -n '/^gcc/s/.*\(.\..\)\../\1/p' | cut -d" " -f1) +ifeq "$(shell echo $(SYSTEM_GCC_VERSION) | cut -d. -f1)" "0" # gcc 10+ (0.0, 0.1, 0.2 etc.) +SYSTEM_GCC_VERSION = $(shell gcc --version | sed -n '/^gcc/s/.*\(..\..\)\../\1/p' | cut -d" " -f1) +endif + +PKGDIR:=debian/libreoffice +OODIRNAME=libreoffice +OODIR:=usr/lib/$(OODIRNAME) +OOSDKDIR:=$(OODIR)/sdk + +# Figure out who's building this package. +ifneq "$(DEB_VENDOR)" "Debian" +OOO_VENDOR:=The Document Foundation, $(DEB_PARENT_VENDOR) and $(DEB_VENDOR) +else +OOO_VENDOR=The Document Foundation/$(DEB_VENDOR) +endif +export OOO_VENDOR + +# debhelper +export DH_OPTIONS +export DH_ALWAYS_EXCLUDE=CVS:.svn:.bzr:.git +#export DH_VERBOSE=1 +# quilt +export QUILT_PATCHES=debian/patches +export QUILT_OPTIONS="-p1 -F0" + +SOURCE_TREE=. +STAMP_DIR=debian/stampdir +TARFILE_LOCATION=$(CURDIR)/tarballs +export TARFILE_LOCATION +USE_SOURCE_TARBALLS=y +USE_GIT_TARBALLS=n +ifeq "$(USE_GIT_TARBALLS)" "y" +GIT_BASEURL:=git://anongit.freedesktop.org/libreoffice +lo_sources_ver=$(shell grep AC_INIT $(SOURCE_TREE)/configure.ac | grep documentfoundation | cut -d, -f2 | sed -e 's,\[,,' -e 's,\],,') +# NOT in proper libreoffice-3-6 branch +# use ./g checkout -b tag-libreoffice-3.6.2.1 libreoffice-3.6.2.1 +GIT_TAG=libreoffice-$(lo_sources_ver) +GIT_BRANCH=libreoffice-7-0-4 +endif +ifeq "$(USE_SOURCE_TARBALLS)" "y" +lo_sources_ver=$(shell cat $(CURDIR)/sources.ver | cut -d= -f2) +endif + +######### +# Default package configuration +# +OOO_ARCHS = alpha amd64 arm64 armel armhf hppa i386 ia64 kfreebsd-amd64 kfreebsd-i386 m68k mips mipsel mips64 mips64el powerpc powerpcspe ppc64 ppc64el s390 s390x sparc sparc64 +PATCHSET=$(DEB_VENDOR) +BUILD_DEPS=\ + autoconf,\ + automake,\ + bc,\ + bison,\ + bzip2,\ + flex (>= 2.3.35), \ + fontforge-nox | fontforge, \ + gperf (>= 3.1),\ + libc0.1 (>= 2.10.2-7) [kfreebsd-any],\ + libfontconfig1-dev,\ + libfreetype6-dev (>= 2.2.0),\ + pkg-config,\ + unzip,\ + xsltproc,\ + zip,\ + zlib1g-dev\ + +BUILD_DEPS_INDEP += rdfind, symlinks + +# These are components which can be built from internal copies, or used from the +# distribution. See configure --help for valid values (--with-system-). +SYSTEM_STUFF = dicts + +ENABLE_GUI=y + +ifeq ($(filter nopython,$(DEB_BUILD_PROFILES)),) +ENABLE_PYTHON=y +ifeq "$(ENABLE_PYTHON)" "y" + CONFIGURE_FLAGS += --enable-python=system + ENABLE_SCRIPT_PROVIDER_PYTHON=y + PACKAGE_LIBRELOGO=y +endif +# THIS IS ONLY FOR TESTING. When building against a specified pythonX.Y +# this will work inside OOo but *not* from outside OOo unless the user +# uses pythonX.Y directly (and the dh_pycentral-created dependencies allow +# also the non-working default python then) - see e.g. #587402. Also +# note we are NOT working with python < 2.6 anymore! +PYTHON_VERSION=current +ifeq "$(PYTHON_VERSION)" "current" + PYTHON=python3 + export PYTHON +else + # somehow configure insists on using python3 "for pyuno". The only way to + # override this (afaics) is this... + PYTHON=python$(PYTHON_VERSION) + PYTHON_CFLAGS=$(shell pkg-config --cflags python-$(PYTHON_VERSION)) + PYTHON_LIBS=$(shell pkg-config --libs python-$(PYTHON_VERSION)) + export PYTHON PYTHON_VERSION PYTHON_CFLAGS PYTHON_LIBS +endif +endif +BUILD_ONLY_EN_US=n +ifeq ($(filter nojava,$(DEB_BUILD_PROFILES)),) + ENABLE_JAVA=y + ifeq "$(ENABLE_JAVA)" "y" + JDK=default + include /usr/share/java/java_defaults.mk + ifneq "$(JDK)" "default" + JAVA_MAINVER=7 + endif + endif +else + ENABLE_JAVA=n +endif +JAVAHELPER_MIN_VERSION= (>= 0.37~) +SYSTEM_STUFF += hunspell +SYSTEM_STUFF += altlinuxhyph +SYSTEM_STUFF += boost +BOOST_VERSION=default +ifeq "$(BOOST_VERSION)" "default" + BOOST_MINVER= (>= 1.66) + ifeq "$(shell dpkg --compare-versions $(SYSTEM_GCC_VERSION) gt 10 && echo true)" "true" + BOOST_MINVER= (>= 1.71) + endif +endif +# libmdds-dev depends on libboost-dev, which will be removed +# when you install a non-default libboostX.Y-dev +ifeq "$(BOOST_VERSION)" "default" +SYSTEM_STUFF += mdds +endif +USE_EXTERNAL_CXXLIBS=y +SYSTEM_STUFF += mythes +SYSTEM_STUFF += icu +SYSTEM_STUFF += librevenge +SYSTEM_STUFF += libwpd libwpg libwps +SYSTEM_STUFF += libvisio +SYSTEM_STUFF += libcdr +SYSTEM_STUFF += libmspub +SYSTEM_STUFF += libmwaw +SYSTEM_STUFF += libodfgen +SYSTEM_STUFF += libepubgen +SYSTEM_STUFF += libetonyek +SYSTEM_STUFF += libfreehand +# this is libe-book, NOT evolutions libebook (which is +# dlopen()'ed anyway and whose headers we need from the +# system anyways if enabled +SYSTEM_STUFF += libebook +SYSTEM_STUFF += libabw +SYSTEM_STUFF += libpagemaker +SYSTEM_STUFF += libzmf +SYSTEM_STUFF += libstaroffice +SYSTEM_STUFF += libqxp +ENABLE_QRCODEGEN=y +SYSTEM_STUFF += qrcodegen +BUILD_CAIROCANVAS=y +SYSTEM_STUFF += cairo +ifeq "$(ENABLE_GUI)" "y" +BUILD_PLASMA=y +ENABLE_QT5=n +QT5_MINVER= (>= 5.6) +endif +ifeq "$(BUILD_PLASMA)" "y" + ENABLE_KF5=y + # KF5 depends on Qt5 + ifeq "$(ENABLE_KF5)" "y" + ENABLE_QT5=y + KF5_QT5_DEPENDS := libreoffice-qt5 (= $${binary:Version}) + endif +endif +# https://www.debian.org/doc/debian-policy/ says this is not defined and must +# be ignored, but dh_strip mentions (and honours) it, so... +ifneq (noautodbgsym,$(findstring noautodbgsym,$(DEB_BUILD_OPTIONS))) +BUILD_DBGSYM_PACKAGES=y +ifeq "$(DEB_HOST_ARCH)" "amd64" +USE_DWZ=y +DWZ_ARGS:=-L 100000000 +endif +endif +SYSTEM_STUFF += xmlsec + +ifeq ($(filter noinsttest,$(DEB_BUILD_PROFILES)),) + # this changes the packages built/contents of packages (-subsequentcheckbase) + # This is not exactly allowed in https://wiki.debian.org/BuildProfileSpec#Registered_profile_names + # but it doesn't have real practical difference, does it? + ifneq (nocheck,$(findstring nocheck,$(DEB_BUILD_OPTIONS))) + BUILD_TEST_PACKAGES=y + endif +endif + +ifneq ($(MAKECMDGOALS),build-indep) +ENABLE_SYMBOLS=y +SMALL_SYMBOLS=y +endif +ifeq ($(MAKECMDGOALS),build-indep) +# no need to do a double build... +BUILD_NOGUI_PACKAGES=n +endif + +ifeq "$(ENABLE_JAVA)" "y" + SYSTEM_STUFF += beanshell + SYSTEM_STUFF += hsqldb +endif +SYSTEM_STUFF += lpsolve +USE_SHARED_LPSOLVE=y +LPSOLVE_MIN_VERSION= (>= 5.5.0.13-5+b1) +ENABLE_COINMP=y +SYSTEM_STUFF += coinmp +USE_DBUS=y +ifeq "$(USE_DBUS)" "y" + ifeq (,$(findstring linux,$(DEB_HOST_ARCH_OS))) + ENABLE_BLUETOOTH=n + else + ENABLE_BLUETOOTH=y + SYSTEM_STUFF += bluez + endif + ENABLE_PACKAGEKIT=n +endif +ENABLE_AVAHI=y +ifeq "$(ENABLE_GUI)" "y" +USE_GSTREAMER=y +endif +ENABLE_WEBDAV=y +ifeq "$(ENABLE_WEBDAV)" "y" +WEBDAV_LIB=neon + ifeq "$(WEBDAV_LIB)" "neon" + SYSTEM_STUFF += neon + NEON_SECTYPE=gnutls + NEONSONR=27 + else + SYSTEM_STUFF += apr + SYSTEM_STUFF += serf + endif +endif +SYSTEM_STUFF += redland +PACKAGE_SDK=y +ifneq ($(filter nodoc,$(DEB_BUILD_PROFILES)),) +PACKAGE_SDK_DOCS=n +else +PACKAGE_SDK_DOCS=y +endif +PACKAGE_LOKIT=y +ENABLE_CHART_TESTS=n +# will not work, uses schema/ stripped in the tarballs +ifeq "$(USE_SOURCE_TARBALLS)" "y" +ENABLE_EXPORT_VALIDATION_TESTS=n +endif +JUNIT_MIN_VER= (>= 4.8.2-2) +CURL_SECTYPE=gnutls +USE_LIBSUITESPARSE=y +SUITESPARSE_MIN_VERSION= (>= 1:3.4.0) +PARALLEL_BUILD=y +ENABLE_LDAP=y +SYSTEM_STUFF += openldap +SYSTEM_STUFF += epoxy +ifeq "$(ENABLE_JAVA)" "y" + ENABLE_REPORTBUILDER=y + SYSTEM_STUFF += jfreereport + ENABLE_MEDIAWIKI=y + SYSTEM_STUFF += apache-commons + ENABLE_SCRIPT_PROVIDER_BSH=y + ENABLE_SCRIPT_PROVIDER_JS=y + ENABLE_NLPSOLVER=y +else + ENABLE_REPORTBUILDER=n + ENABLE_MEDIAWIKI=n + ENABLE_SCRIPT_PROVIDER_BSH=n + ENABLE_SCRIPT_PROVIDER_JS=n + ENABLE_NLPSOLVER=n +endif +ENABLE_SDBC_POSTGRESQL=y +ifeq "$(ENABLE_GUI)" "y" +BUILD_GTK3=y + # introspection needs GTK3 + ifeq "$(BUILD_GTK3)" "y" + ENABLE_INTROSPECTION=y + endif +endif +ENABLE_EVO2=y +ENABLE_GIO=y +ENABLE_DCONF=y +ENABLE_RANDR=y +PACKAGE_BASE=y +SYSTEM_STUFF += graphite +SYSTEM_STUFF += harfbuzz +SYSTEM_STUFF += libexttextcat +SYSTEM_STUFF += cppunit +DEFAULT_IMAGE=colibre +IMAGES:=$(DEFAULT_IMAGE) sifr sifr_dark sifr_dark_svg breeze breeze_dark breeze_dark_svg breeze_svg elementary elementary_svg karasa_jaga sukapura sukapura_svg +# FIXME +IMAGES_PACKAGES=$(subst _,-,$(filter-out sukapura_svg,$(filter-out sifr_dark_svg,$(filter-out breeze_dark_svg,$(filter-out sifr_dark,$(filter-out breeze_dark,$(filter-out breeze_svg,$(filter-out elementary_svg,$(IMAGES))))))))) +CONFIGURE_FLAGS_INDEP += --with-theme="$(IMAGES)" +MYSQL_FLAVOUR=mariadb +# set this also to y for system-mysql.. +SYSTEM_STUFF += mariadb +SYSTEM_STUFF += postgresql +DICT_DIR=/usr/share/hunspell +HYPH_DIR=/usr/share/hyphen +THES_DIR=/usr/share/mythes +SYSTEM_STUFF += libcmis +SYSTEM_STUFF += jpeg +SYSTEM_STUFF += libxml +SYSTEM_STUFF += expat +SYSTEM_STUFF += odbc +SYSTEM_STUFF += curl +SYSTEM_STUFF += sane +ENABLE_PDFIMPORT=y +ENABLE_POPPLER=y +SYSTEM_STUFF += poppler +ENABLE_PDFIUM=y +ifneq (big,$(DEB_HOST_ARCH_ENDIAN)) +ENABLE_SKIA=y +endif +SYSTEM_STUFF += libpng +SYSTEM_STUFF += nss +ENABLE_HELP=y +ifeq "$(ENABLE_HELP)" "y" + ENABLE_HTML_HELP=y + ifeq "$(ENABLE_HTML_HELP)" "y" + HELP_DEPENDS := libreoffice-help-common (= $${binary:Version}), firefox-esr | epiphany-browser | konqueror | chromium | firefox + HELP_COMMON_DEPENDS := libjs-normalize.css + else + HELP_DEPENDS := libreoffice-writer + DEBHELPER_OPTIONS += -Nlibreoffice-help-common + endif + SYSTEM_STUFF += clucene +endif +SYSTEM_STUFF += lcms2 +# this violates the requirement that nowindows should not change the +# package contents (-dev-common here) but a extra package for this +# is too much overhead (especially since this .dll will be gone +# in LO 7.2 anyway.) +ifeq ($(filter nowindows,$(DEB_BUILD_PROFILES)),) + PACKAGE_UNOWINREG_DLL=y + ifeq "$(DEB_VENDOR)" "Debian" + BUILD_UNOWINREG_DLL=y + endif +endif +SYSTEM_STUFF += liblangtag +SYSTEM_STUFF += orcus +USE_UCPP=y +ifeq "$(USE_UCPP)" "y" + SYSTEM_STUFF += ucpp +endif +# kfreebsd runs into SIZE_MAX problems, and the rest might +# get OOM (mips(el)...) so enable mergelibs only for 64bit +# archs +ifeq (,$(filter kfreebsd,$(DEB_HOST_ARCH))) + ifeq "$(DEB_HOST_ARCH_BITS)" "64" + ENABLE_MERGELIBS=y + endif +endif +#ifeq "$(ENABLE_MERGELIBS)" "y" +# ENABLE_LTO=y +#else + ENABLE_LTO=n +#endif +USE_OPENCL=y +ENABLE_FIREBIRD=y +ifeq "$(ENABLE_FIREBIRD)" "y" + SYSTEM_STUFF += firebird + ifeq (,$(filter firebird, $(SYSTEM_STUFF))) + SYSTEM_STUFF += libatomic-ops + SYSTEM_STUFF += libtommath + endif +endif +ENABLE_EOT=y +ifeq "$(ENABLE_EOT)" "y" +SYSTEM_STUFF += libeot +endif +SYSTEM_STUFF += glm +BUILD_PPC64EL=y +BUILD_ARM64=y +SYSTEM_STUFF += gpgmepp +INSTALL_APPARMOR_PROFILES=y +ENABLE_APPARMOR_PROFILES=y +CHECK_APPARMOR_PROFILES=true +ENABLE_LIBNUMBERTEXT=y +SYSTEM_STUFF += libnumbertext + +# Default flags to pass to configure +CONFIGURE_FLAGS+= \ + --with-vendor='$(OOO_VENDOR)' \ + --with-extra-buildid='$(DEB_VENDOR) package version: $(DEB_VERSION)' \ + --prefix=/usr --mandir=/usr/share/man \ + --docdir=/usr/share/doc/libreoffice \ + --libdir=/usr/lib \ + --bindir=/usr/bin \ + --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) \ + --disable-online-update \ + --disable-fetch-external \ + --without-fonts --enable-build-opensymbol \ + --without-myspell-dicts \ + --with-branding=$(CURDIR)/debian/branding + +ifeq "$(ENABLE_GUI)" "y" +BUILD_DEPS += ,\ + libcups2-dev,\ + libgl-dev,\ + libice-dev,\ + libsm-dev,\ + libx11-dev,\ + libx11-xcb-dev, \ + libxaw7-dev,\ + libxext-dev,\ + libxinerama-dev,\ + libxkbfile-dev,\ + libxrender-dev,\ + libxt-dev,\ + libxtst-dev,\ + x11proto-render-dev +endif + +ifeq "$(ENABLE_HELP)" "y" +CONFIGURE_FLAGS_INDEP+= --with-help + ifeq "$(ENABLE_HTML_HELP)" "y" + CONFIGURE_FLAGS_INDEP+= --with-help=html + endif +endif + +ifeq "$(shell echo $(DEB_VERSION_UPSTREAM) | grep -E '(alpha|beta)'; echo $$?)" "1" +CONFIGURE_FLAGS += --enable-release-build +RELEASE_BUILD := y +endif + +ifeq "$(DEB_DISTRIBUTION)" "UNRELEASED" +BUGS=mailto:debian-openoffice@lists.debian.org +endif + +ifneq (terse,$(findstring terse,$(DEB_BUILD_OPTIONS))) +export verbose=t +endif + +############# +# Architecture-specific changes + +# helper to generate no_archs macros (pass name of source macro) +define gen_no_archs + _no_arch_macro = $(subst OOO_,OOO_NO_,$1) + _no_arch_tmp_$1 = $$(foreach _a,$$(filter-out $$(call $1),$(OOO_ARCHS)),!$$(_a)) + $$(_no_arch_macro) = $$(if $$(_no_arch_tmp_$1),$$(_empty) [$$(_no_arch_tmp_$1)]) +endef + +PLATFORMID := $(shell grep PLATFORMID debian/vars.$(DEB_HOST_ARCH) | cut -d"=" -f2) + + +OOO_64BIT_ARCHS = $(filter alpha amd64 arm64 ia64 kfreebsd-amd64 mips64 mips64el ppc64 ppc64el s390x sparc64, $(OOO_ARCHS)) +$(eval $(call gen_no_archs,OOO_64BIT_ARCHS)) +OOO_BE_ARCHS = $(filter hppa m68k mips mips64 powerpc powerpcspe ppc64 s390 s390x sparc sparc64,$(OOO_ARCHS)) +OOO_LE_ARCHS = $(filter-out $(OOO_BE_ARCHS),$(OOO_ARCHS)) +$(eval $(call gen_no_archs,OOO_LE_ARCHS)) + +OOO_CHECK_ARCHS := $(filter-out kfreebsd-i386 kfreebsd-amd64 mips mipsel mips64el armel,$(OOO_ARCHS)) +$(eval $(call gen_no_archs,OOO_CHECK_ARCHS)) +#OOO_JUNIT_ARCHS := i386 amd64 armhf arm64 +OOO_JUNIT_ARCHS := amd64 arm64 +$(eval $(call gen_no_archs,OOO_JUNIT_ARCHS)) +#OOO_CHECK_FATAL_ARCHS := i386 amd64 armhf arm64 +OOO_CHECK_FATAL_ARCHS := amd64 arm64 + +RUN_MAKE_CHECK=n +ifneq (nocheck,$(findstring nocheck,$(DEB_BUILD_OPTIONS))) + ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),$(OOO_CHECK_ARCHS))) + RUN_MAKE_CHECK=y + endif + ifeq "$(ENABLE_JAVA)" "y" + ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),$(OOO_JUNIT_ARCHS))) + ENABLE_JUNIT4=y + endif + endif + IGNORE_MAKE_CHECK_FAILURES=- + ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),$(OOO_CHECK_FATAL_ARCHS))) + IGNORE_MAKE_CHECK_FAILURES:= + endif +endif + +# Java... +ifeq "$(JDK)" "default" +OOO_JAVA_ARCHS = $(filter $(OOO_ARCHS),$(java6_architectures)) +else +OOO_JAVA_ARCHS = $(OOO_ARCHS) +endif +$(eval $(call gen_no_archs,OOO_JAVA_ARCHS)) + +OOO_ARCH_DEP_EXTENSIONS_ARCHS := $(OOO_ARCHS) +OOO_EXTENSIONS_ARCHS := $(OOO_ARCH_DEP_EXTENSIONS_ARCHS) + +OOO_BASE_ARCHS := $(OOO_JAVA_ARCHS) +$(eval $(call gen_no_archs,OOO_BASE_ARCHS)) +OOO_REPORTBUILDER_ARCHS := $(OOO_BASE_ARCHS) +$(eval $(call gen_no_archs,OOO_REPORTBUILDER_ARCHS)) +OOO_FIREBIRD_ARCHS := $(OOO_BASE_ARCHS) +$(eval $(call gen_no_archs,OOO_FIREBIRD_ARCHS)) +OOO_NOGUI_ARCHS := amd64 i386 arm64 armhf s390x ppc64 ppc64el +$(eval $(call gen_no_archs,OOO_NOGUI_ARCHS)) + +ifneq (,$(filter $(DEB_HOST_ARCH),$(OOO_NO_BASE_ARCHS))) + ifneq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),$(OOO_BASE_ARCHS))) + PACKAGE_BASE=n + ENABLE_SDBC_POSTGRESQL=n + ENABLE_EVO2=n + ENABLE_REPORTBUILDER=n + DEBHELPER_OPTIONS += -Nlibreoffice-base libreoffice-base-core -Nlibreoffice-base-drivers + DEBHELPER_OPTIONS += -Nlibreoffice-evolution + DEBHELPER_OPTIONS += -Nlibreoffice-sdbc-postgresql -Nlibreoffice-sdbc-mysql + DEBHELPER_OPTIONS += -Nlibreoffice-sdbc-hsqldb -Nlibreoffice-sdbc-firebird + DEBHELPER_OPTIONS += -Nlibreoffice-report-builder-bin -Nlibreoffice-report-builder + DEBHELPER_OPTIONS += -Npython3-access2base +# CONFIGURE_FLAGS += --disable-database-connectivity + endif +endif + +ifeq (,$(filter $(DEB_HOST_ARCH),$(OOO_EXTENSIONS_ARCHS))) + ENABLE_MEDIAWIKI=n + ENABLE_NLPSOLVER=n + DEBHELPER_OPTIONS += -Nlibreoffice-wiki-publisher -Nlibreoffice-script-provider-python -Nlibreoffice-nlpsolver + CONFIGURE_FLAGS += --disable-extension-integration --disable-extensions +else + CONFIGURE_FLAGS += --enable-extension-integration +endif + +ifeq (,$(filter $(DEB_HOST_ARCH),$(OOO_JAVA_ARCHS))) + ENABLE_JAVA=n + ENABLE_REPORTBUILDER=n + ENABLE_MEDIAWIKI=n + ENABLE_NLPSOLVER=n +endif + +ifneq "$(BUILD_TEST_PACKAGES)" "y" + DEBHELPER_OPTIONS += -Nlibreoffice-subsequentcheckbase -Nlibreoffice-smoketest-data +endif + +ifeq "$(ENABLE_GUI)" "y" + ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),$(OOO_NOGUI_ARCHS))) + BUILD_NOGUI_PACKAGES=y + endif +else +CONFIGURE_FLAGS += --disable-gui +DEBHELPER_OPTIONS += -Nlibreoffice-core -Nlibreoffice-calc -Nlibreoffice-writer -Nlibreoffice-draw -Nlibreoffice-report-builder-bin -Nlibreoffice-base -Nlibreoffice-impress -Nlibreoffice-math +# transitional package.. +DEBHELPER_OPTIONS += -Nlibreoffice-kde5 +endif +ifneq "$(BUILD_NOGUI_PACKAGES)" "y" +DEBHELPER_OPTIONS += -Nlibreoffice-core-nogui -Nlibreoffice-calc-nogui -Nlibreoffice-writer-nogui -Nlibreoffice-draw-nogui -Nlibreoffice-report-builder-bin-nogui -Nlibreoffice-base-nogui -Nlibreoffice-impress-nogui -Nlibreoffice-math-nogui +endif + +############# +# Distro-specific overrides + +# Debian Buster +ifeq "$(DEB_DISTRIBUTION)" "buster-backports" + BUGS=mailto:debian-backports@lists.debian.org + SYSTEM_STUFF := $(filter-out libmwaw xmlsec mdds orcus libnumbertext,$(SYSTEM_STUFF)) + USE_DWZ := n + BUSTER_BACKPORT=y +endif + +CONFIGURE_FLAGS += $(foreach i, $(SYSTEM_STUFF),--with-system-$(i)) + +CC_PREFIX:=$(shell gcc -dumpmachine)- + +# generally use clang +USE_CLANG=n +# allow clang for skia? +ALLOW_CLANG=y + +CLANG_VERSION=default + +ifeq "$(USE_CLANG)" "y" + ENABLE_COMPILER_PLUGINS=n +endif + +ifneq "$(USE_CLANG)" "y" + ifneq "$(GCC_VERSION)" "" + ifneq "$(SYSTEM_GCC_VERSION)" "$(GCC_VERSION)" + BUILD_DEPS += , gcc-$(GCC_VERSION), g++-$(GCC_VERSION) + CONFIGURE_FLAGS+= \ + CC=$(CC_PREFIX)gcc-$(GCC_VERSION) \ + CXX=$(CC_PREFIX)g++-$(GCC_VERSION) + endif + endif + BUILD_DEPS += , gcc (>= 4:7), g++ (>= 4:7) + # Use -O0 for gcc 10 on armhf to avoid build/test failure with gcc 10 + # https://bugs.launchpad.net/ubuntu/+bug/1891623 + # In Debian this never appeared to be an actual build failure but + # this also helps for the test timeout on armv8 machines/buildds. + # (armv7 "works"). So make it conditional on whether we run checks. + # With g++-10 there also appear SIGSEGVs in/with openjdk-11 and it + # hangs at RunMacros, which also tries to use Java "Macros". + # A --without-java build passes. +ifeq "$(DEB_HOST_ARCH)" "armhf" + ifeq "$(shell dpkg --compare-versions $(SYSTEM_GCC_VERSION) gt 10 && echo true)" "true" + ifeq ($(ENABLE_JAVA),y) + ifneq (nocheck,$(findstring nocheck,$(DEB_BUILD_OPTIONS))) + ifneq (noopt,$(findstring noopt,$(DEB_BUILD_OPTIONS))) + DEB_BUILD_OPTIONS += noopt + endif + endif + endif + endif +endif + # skia build picks up clang if present (for performance reasons, + # at least on Windows...). See the thread starting at + # https://lists.freedesktop.org/archives/libreoffice/2020-April/084929.html + # Make it a explicit build-dependency so we don't have builds + # "randomly" using gcc or clang depending on whether clang is installed + # or not + ifeq (armel,$(findstring armel,$(DEB_HOST_ARCH))) + # there is no clang 11 on buster, obviously and this also fails to build with gcc 7 in buster + ifeq "$(BUSTER_BACKPORT)" "y" + ENABLE_SKIA=n + endif + endif + ifeq "$(ENABLE_SKIA)" "y" + ifeq "$(ALLOW_CLANG)" "y" + ifeq (ccache,$(findstring ccache,$(DEB_BUILD_OPTIONS))) + export CCACHE_CPP2=1 + endif + ifeq "$(CLANG_VERSION)" "default" + BUILD_DEPS += , clang (>= 1:5.0.2) [$(filter-out armel,$(OOO_LE_ARCHS))] + ifneq "$(BUSTER_BACKPORT)" "y" + # see #963162, #963167 which apparently don't exist on 11 + BUILD_DEPS += , clang (>= 1:11) [armel] + endif + else + export CLANG_CC=clang-$(CLANG_VERSION) + export CLANG_CXX=clang++-$(CLANG_VERSION) + BUILD_DEPS += , clang-$(CLANG_VERSION) [$(OOO_LE_ARCHS)] + endif + endif + endif +else + ifeq "$(CLANG_VERSION)" "default" + BUILD_DEPS += , clang (>= 1:5.0.2) + CONFIGURE_FLAGS+= CC=clang CXX=clang++ + else + BUILD_DEPS += , clang-$(CLANG_VERSION) + CONFIGURE_FLAGS+= CC=clang-$(CLANG_VERSION) CXX=clang++-$(CLANG_VERSION) + endif + ifeq "$(ENABLE_COMPILER_PLUGINS)" "y" + CONFIGURE_FLAGS += --enable-compiler-plugins + CLANGDIR := /usr/lib/llvm-$(shell $(CLANG) --version | head -n 1 | awk '{ print $$3 }' | cut -d. -f1) + ifeq "$(CLANG_VERSION)" "default" + BUILD_DEPS += , libclang-dev, llvm-dev + else + BUILD_DEPS += , libclang-$(CLANG_VERSION)-dev, llvm-$(CLANG_VERSION)-dev + endif + endif +endif +USE_GOLD=n +# leaves cruft around after building because it runs update_pch.sh.. +ENABLE_PCH=n + +ifeq "$(USE_DWZ)" "y" + BUILD_DEPS += , debhelper (>= 10.10.4) + # dwz 0.12-3 claims to have DW_OP_GNU support but still + # dwz: debian/libreoffice-core/usr/lib/libreoffice/program/libmergedlo.so: Couldn't find DIE referenced by DW_OP_GNU_parameter_ref + # happens + BUILD_DEPS += , dwz (>> 0.12-3) +endif + +ifneq "$(PACKAGE_SDK)" "y" + CONFIGURE_FLAGS += --disable-odk + ifneq "$(PACKAGE_SDK_DOCS)" "y" + CONFIGURE_FLAGS += --without-doxygen --without-javadoc + endif +else + ifeq "$(PACKAGE_SDK_DOCS)" "y" + BUILD_DEPS_INDEP += , doxygen (>= 1.8.4) , graphviz + else + CONFIGURE_FLAGS += --without-doxygen --without-javadoc + endif +endif + +ifeq "$(ENABLE_PDFIMPORT)" "y" + ifeq "$(ENABLE_POPPLER)" "y" + BUILD_DEPS += , libpoppler-dev (>= 0.12.0), libpoppler-private-dev, libpoppler-cpp-dev + else + CONFIGURE_FLAGS += --disable-poppler + endif + ifeq "$(ENABLE_PDFIUM)" "n" + CONFIGURE_FLAGS += --disable-pdfium + endif +endif + +ifneq (,$(filter graphite, $(SYSTEM_STUFF))) + BUILD_DEPS += , libgraphite2-dev (>= 0.9.3) +endif + +ifneq (,$(filter harfbuzz, $(SYSTEM_STUFF))) + BUILD_DEPS += , libharfbuzz-dev (>= 0.9.42) +endif + +ifneq (,$(filter libexttextcat, $(SYSTEM_STUFF))) + BUILD_DEPS += , libexttextcat-dev (>= 3.4.1) + TEXTCAT_DATA_RECOMMENDS := libexttextcat-data +endif + +ifneq "$(ENABLE_LDAP)" "y" + CONFIGURE_FLAGS += --disable-ldap +endif + +ifeq "$(ENABLE_LIBNUMBERTEXT)" "y" + ifneq (,$(filter libnumbertext, $(SYSTEM_STUFF))) + BUILD_DEPS += , libnumbertext-dev (>= 1.0.6) + NUMBERTEXT_DATA_RECOMMENDS := libnumbertext-data + endif +else + CONFIGURE_FLAGS += --disable-libnumbertext +endif + +ifneq (,$(filter jpeg, $(SYSTEM_STUFF))) + BUILD_DEPS += , libjpeg-dev +endif +ifneq (,$(filter libxml, $(SYSTEM_STUFF))) + BUILD_DEPS += , libxml2-dev (>= 2.8), libxml2-utils + BUILD_DEPS += , libxslt1-dev +else + CONFIGURE_FLAGS += --without-system-libxml +endif +ifneq (,$(filter xmlsec, $(SYSTEM_STUFF))) + BUILD_DEPS += , libxmlsec1-dev (>= 1.2.28) +endif +ifneq (,$(filter expat, $(SYSTEM_STUFF))) + BUILD_DEPS += , libexpat1-dev +endif +ifneq (,$(filter odbc, $(SYSTEM_STUFF))) + BUILD_DEPS += , unixodbc-dev (>= 2.2.11) +endif +ifneq (,$(filter sane, $(SYSTEM_STUFF))) + BUILD_DEPS += , libsane-dev +endif +ifneq (,$(filter libpng, $(SYSTEM_STUFF))) + BUILD_DEPS += , libpng-dev +endif + +ifneq (,$(filter curl, $(SYSTEM_STUFF))) + BUILD_DEPS += , libcurl4-$(CURL_SECTYPE)-dev +endif + +COINMP_MINVER=(>= 1.7.6+dfsg1-2) + COINUTILS_MINVER=(>= 2.10.14+repack1-1) + # go sure given #873362 + COINMP_MINVER=(>= 1.8.3-3) +ifneq ($(ENABLE_COINMP),y) + CONFIGURE_FLAGS += --disable-coinmp +else + ifneq (,$(filter coinmp, $(SYSTEM_STUFF))) + BUILD_DEPS += , coinor-libcoinmp-dev $(COINMP_MINVER), coinor-libcoinutils-dev $(COINUTILS_MINVER) + endif +endif + +ifneq (,$(filter amd64,$(DEB_HOST_ARCH))) + SMALL_SYMBOLS = n +endif + +ifeq "$(ENABLE_SYMBOLS)" "y" + # Small symbols? + ifeq "$(SMALL_SYMBOLS)" "y" + CONFIGURE_FLAGS += --enable-symbols=SMALL + DEB_CFLAGS_MAINT_STRIP := -g + DEB_CXXFLAGS_MAINT_STRIP := -g + DEB_CFLAGS_MAINT_PREPEND += -g1 + DEB_CXXFLAGS_MAINT_PREPEND += -g1 +export DEB_CFLAGS_MAINT_STRIP DEB_CXXFLAGS_MAINT_STRIP +export DEB_CFLAGS_MAINT_PREPEND DEB_CXXFLAGS_MAINT_PREPEND + else + CONFIGURE_FLAGS += --enable-symbols + endif +else + DEB_CFLAGS_MAINT_STRIP := -g + DEB_CXXFLAGS_MAINT_STRIP := -g +export DEB_CFLAGS_MAINT_STRIP DEB_CXXFLAGS_MAINT_STRIP +endif +export DPKG_EXPORT_BUILDFLAGS=y +include /usr/share/dpkg/buildflags.mk +ifeq (debug,$(findstring debug,$(DEB_BUILD_OPTIONS))) + CONFIGURE_FLAGS += --enable-debug +endif +ifeq (noopt,$(findstring noopt,$(DEB_BUILD_OPTIONS))) + CONFIGURE_FLAGS += --disable-optimized +endif + +ifeq "$(ENABLE_PYTHON)" "y" +PYMAJOR:=$(shell $(PYTHON) -c "import sys; print (sys.version_info[0])") +PYMINOR:=$(shell $(PYTHON) -c "import sys; print (sys.version_info[1])") +PYMINORPLUS1:=$(shell $(PYTHON) -c "import sys; print (sys.version_info[1]+1)") +PYTHON_SITE:=debian/python3-uno/$(shell $(PYTHON) -c 'from distutils import sysconfig; print(sysconfig.get_python_lib())') +endif + + BUILD_DEPS += , $(PYTHON) +ifeq "$(ENABLE_PYTHON)" "y" + BUILD_DEPS += , $(PYTHON)-dev (>= 3.3) + BUILD_DEPS += , $(PYTHON)-distutils + BUILD_DEPS += , dh-python + ifeq "$(RUN_MAKE_CHECK)" "y" + ifneq (nocheck,$(findstring nocheck,$(DEB_BUILD_OPTIONS))) + BUILD_DEPS += , $(PYTHON)-lxml + else + CONFIGURE_FLAGS += --without-lxml + endif + endif +endif + + BUILD_DEPS += , debhelper-compat (= 12) +ifeq "$(BUILD_DBGSYM_PACKAGES)" "y" + # from debhelper changelog + BUILD_DEPS += , dpkg-dev (>= 1.18.2~) +else + BUILD_DEPS += , dpkg-dev (>= 1.17.14) +endif + + ifeq "$(RUN_MAKE_CHECK)" "y" + BUILD_DEPS += , locales$(OOO_NO_CHECK_ARCHS) + BUILD_DEPS += , gdb$(OOO_NO_CHECK_ARCHS) + BUILD_DEPS += , fontconfig$(OOO_NO_CHECK_ARCHS) + BUILD_DEPS += , fonts-liberation2$(OOO_NO_CHECK_ARCHS) + BUILD_DEPS += , fonts-crosextra-carlito$(OOO_NO_CHECK_ARCHS) + # https://lists.freedesktop.org/archives/libreoffice/2017-May/077764.html + BUILD_DEPS += , fonts-dejavu$(OOO_NO_CHECK_ARCHS) + ifneq (,$(filter cppunit, $(SYSTEM_STUFF))) + BUILD_DEPS += , libcppunit-dev (>= 1.14)$(OOO_NO_CHECK_ARCHS) + endif + # 17:35 <@sberg_> vmiklos, oh, what kind of poor test is that? "warn:sal.osl:3785:2:sal/osl/unx/process.cxx:344: ChildStatusProc : starting 'pstoedit' failed" etc. is what I see in workdir/CppunitTest/filter_eps_test.test.log... + BUILD_DEPS += , pstoedit$(OOO_NO_CHECK_ARCHS) + BUILD_DEPS += , imagemagick$(OOO_NO_CHECK_ARCHS) + BUILD_DEPS += , ghostscript$(OOO_NO_CHECK_ARCHS) + BUILD_DEPS += , hunspell-en-us$(OOO_NO_CHECK_ARCHS) + BUILD_DEPS += , hyphen-en-us$(OOO_NO_CHECK_ARCHS) + else + CONFIGURE_FLAGS += --without-cppunit + endif + ifeq "$(ENABLE_JUNIT4)" "y" + BUILD_DEPS += , junit4 $(JUNIT_MIN_VER) [$(OOO_JUNIT_ARCHS)] + else + CONFIGURE_FLAGS += --without-junit + endif + ifeq "$(ENABLE_CHART_TESTS)" "y" + CONFIGURE_FLAGS += --enable-chart-tests + endif + ifeq "$(ENABLE_EXPORT_VALIDATION_TESTS)" "y" + BUILD_DEPS += , libofficeotron-java$(OOO_NO_CHECK_ARCHS) , libodfvalidator-java$(OOO_NO_CHECK_ARCHS) + else + CONFIGURE_FLAGS += --without-export-validation + endif +ifneq "$(BUILD_ONLY_EN_US)" "y" + ifeq (lang=,$(findstring lang=,$(DEB_BUILD_OPTIONS))) + ISOS=$(shell echo "$(DEB_BUILD_OPTIONS) " | sed -n 's/^.*lang=\([^\s].*\)\s.*/\1/p' | awk '{ print $$1 }' | sed -e 's/,/ /g') + ifeq "$(ENABLE_HELP)" "n" + HELPISOS= + else + HELPISOS=$(shell echo "$(DEB_BUILD_OPTIONS) " | sed -n 's/^.*lang=\([^\s].*\)\s.*/\1/p' | awk '{ print $$1 }' | sed -e 's/,/ /g') + endif + LANGPACKISOS=$(shell echo "$(DEB_BUILD_OPTIONS) " | sed -n 's/^.*lang=\([^\s].*\)\s.*/\1/p' | awk '{ print $$1 }' | sed -e 's/,/ /g') + else + # Note that the first one here *has to be* en-US. the first one gets + # gid_Module_Root as filelist later and the rest gid_Module_Root.$iso + # but we can't/shouldn't do dynamic switching, so let en-US be the first + # one to that gid_Module_Root always is english and the other langpacks + # have gid_Module_Root.$iso + #ISOS=$(shell $(SOURCE_TREE)/bin/lo-xlate-lang -i all') + ISOS:=en-US af am ar as ast be bg bn br bs ca ca-valencia cs cy da de dz el \ + en-GB en-ZA eo es et eu fa fi fr ga gd gl gu gug he hi hr hu id is it ja \ + ka kk km kmr-Latn kn ko lt lv mk mn ml mr nb ne nl nn nr nso oc om or \ + pa-IN pl pt pt-BR ro ru rw si sk sl sr sr-Latn ss st sv szl \ + ta te tg th tn tr ts ug uk uz ve vi xh zh-CN zh-TW zu + ifeq "$(ENABLE_HELP)" "n" + HELPISOS:= + else + #HELPISOS:=$(shell $(SOURCE_TREE)/bin/lo-xlate-lang -i all') + HELPISOS:=en-US ca ca-valencia cs da de dz el en-GB es et eu fi fr gl hi hu id it \ + ja km ko nl om pl pt pt-BR ru sk sl sv tr vi zh-CN zh-TW + endif + #LANGPACKISOS:=$(shell $(SOURCE_TREE)/bin/lo-xlate-lang -i all') + LANGPACKISOS:=en-US af am ar as ast be bg bn br bs ca ca-valencia cs cy da de dz el \ + en-GB en-ZA eo es et eu fa fi fr ga gd gl gu gug he hi hr hu id is it ja \ + ka kk km kmr-Latn kn ko lt lv mk mn ml mr nb ne nl nn nr nso oc om or \ + pa-IN pl pt pt-BR ro ru rw si sk sl sr sr-Latn ss st sv szl \ + ta te tg th tn tr ts ug uk uz ve vi xh zh-CN zh-TW zu + endif +else + ISOS=en-US + ifeq "$(ENABLE_HELP)" "n" + HELPISOS= + else + HELPISOS=en-US + endif + LANGPACKISOS=en-US +endif +BUILD_ISOS = $(ISOS) + +ifneq "$(BUILD_ONLY_EN_US)" "y" + ifneq "$(BUILD_ISOS)" "en-US" + CONFIGURE_FLAGS_LANG += --with-lang="$(BUILD_ISOS)" + CONFIGURE_FLAGS_INDEP += $(CONFIGURE_FLAGS_LANG) + BUILD_DEPS_INDEP += , gettext + endif +endif + +ifeq "$(ENABLE_JAVA)" "y" + BUILD_DEPS += , maven-repo-helper + ifeq "$(JDK)" "default" + JAVA_HOME=/usr/lib/jvm/default-java + BUILD_DEPS += , java-common (>= 0.61) + DEFAULT_JDK := $(call java_dependency, default-jdk) + # build-depend on 1.9 (upstream needs it anyway for module-info support) + BUILD_DEPS += , $(shell echo $(DEFAULT_JDK) | sed -e 's/default-jdk/default-jdk (>= 2:1.9)/') + endif + ifeq "$(JDK)" "openjdk" + BUILD_DEPS += , openjdk-$(JAVA_MAINVER)-jdk + JAVA_HOME=/usr/lib/jvm/java-$(JAVA_MAINVER)-openjdk-$(DEB_HOST_ARCH) + endif + TEST_JAVA_HOME=$(JAVA_HOME) + ifeq "$(ENABLE_MEDIAWIKI)" "y" + BUILD_DEPS_INDEP += , ant (>= 1.7.0)$(OOO_NO_JAVA_ARCHS) , ant-optional (>= 1.7.0)$(OOO_NO_JAVA_ARCHS) + else + # report-builder is done in build-arch already + ifneq (,$(filter jfreereport, $(SYSTEM_STUFF))) + BUILD_DEPS += , ant (>= 1.6.5)$(OOO_NO_JAVA_ARCHS) + else + BUILD_DEPS_INDEP += , ant (>= 1.6.5)$(OOO_NO_JAVA_ARCHS) + endif + endif + # but upstream also says --target=1.8 so 1.8 is fine in runtime + JAVA_RUNTIME_DEPENDS = default-jre (>= 2:1.8) + JAVA_RUNTIME_DEPENDS += | java8-runtime + # Suns Java "packages" + JAVA_RUNTIME_DEPENDS += | jre +export JAVA_HOME + CONFIGURE_FLAGS += --with-jdk-home=$(JAVA_HOME) + JAVA_COMMON_DEPENDS= , libreoffice-java-common + JAVA_COMMON_DEPENDS_VERSION:= (>= $(BASE_VERSION)~) + ifeq "$(PACKAGE_SDK)" "y" + ifeq "$(PACKAGE_UNOWINREG_DLL)" "y" + ifeq "$(BUILD_UNOWINREG_DLL)" "y" + CONFIGURE_FLAGS_INDEP += --enable-build-unowinreg + BUILD_DEPS_INDEP += , g++-mingw-w64-i686 + WIN_TRIPLET := i686-w64-mingw32 + CONFIGURE_FLAGS_INDEP += --with-mingw-cross-compiler=$(WIN_TRIPLET)-g++ + endif + endif + endif + ifeq "$(ENABLE_MEDIAWIKI)" "y" + CONFIGURE_FLAGS_INDEP += --enable-ext-wiki-publisher + endif + ifeq "$(ENABLE_REPORTBUILDER)" "y" + # report-builder + ifneq (,$(filter jfreereport, $(SYSTEM_STUFF))) + REPORT_BUILDER_BUILD_DEPS += , libbase-java$(OOO_NO_REPORTBUILDER_ARCHS) , libsac-java$(OOO_NO_REPORTBUILDER_ARCHS) , libxml-java (>= 1.1.6)$(OOO_NO_REPORTBUILDER_ARCHS) , libflute-java (>= 1.1.6)$(OOO_NO_REPORTBUILDER_ARCHS) , libpentaho-reporting-flow-engine-java (>= 0.9.4)$(OOO_NO_REPORTBUILDER_ARCHS) , liblayout-java (>= 0.2.10)$(OOO_NO_REPORTBUILDER_ARCHS) , libloader-java (>= 1.1.6)$(OOO_NO_REPORTBUILDER_ARCHS) , libformula-java (>= 1.1.7)$(OOO_NO_REPORTBUILDER_ARCHS) , librepository-java (>= 1.1.6)$(OOO_NO_REPORTBUILDER_ARCHS) , libfonts-java (>= 1.1.6)$(OOO_NO_REPORTBUILDER_ARCHS) , libserializer-java (>= 1.1.6)$(OOO_NO_REPORTBUILDER_ARCHS) + REPORT_BUILDER_JAR_DEPENDS := , libbase-java, libsac-java, libxml-java (>= 1.1.6), libflute-java (>= 1.1.6), libpentaho-reporting-flow-engine-java (>= 0.9.4), liblayout-java (>= 0.2.10), libloader-java (>= 1.1.6), libformula-java (>= 1.1.7), librepository-java (>= 1.1.6), libfonts-java (>= 1.1.6), libserializer-java (>= 1.1.6) + CONFIGURE_FLAGS += --with-libbase-jar=/usr/share/java/libbase.jar --with-libxml-jar=/usr/share/java/libxml.jar --with-flute-jar=/usr/share/java/flute.jar --with-jfreereport-jar=/usr/share/java/flow-engine.jar --with-liblayout-jar=/usr/share/java/liblayout.jar --with-libloader-jar=/usr/share/java/libloader.jar --with-libformula-jar=/usr/share/java/libformula.jar --with-librepository-jar=/usr/share/java/librepository.jar --with-libfonts-jar=/usr/share/java/libfonts.jar --with-libserializer-jar=/usr/share/java/libserializer.jar + endif + ifneq (,$(filter apache-commons, $(SYSTEM_STUFF))) + REPORT_BUILDER_BUILD_DEPS += , libcommons-logging-java$(OOO_NO_JAVA_ARCHS) + REPORT_BUILDER_JAR_DEPENDS += , libcommons-logging-java + CONFIGURE_FLAGS += --with-commons-logging-jar=/usr/share/java/commons-logging.jar + endif + BUILD_DEPS += $(REPORT_BUILDER_BUILD_DEPS) + else + CONFIGURE_FLAGS += --disable-report-builder + endif + ifeq "$(ENABLE_NLPSOLVER)" "y" + CONFIGURE_FLAGS_INDEP += --enable-ext-nlpsolver + endif + OOO_OFFICEBEAN_DEP = libofficebean-java + BUILD_DEPS += , javahelper $(JAVAHELPER_MIN_VERSION) +else + CONFIGURE_FLAGS += --without-java + DEBHELPER_OPTIONS += -Nlibreoffice-officebean -Nlibofficebean-java -Nlibreoffice-java-common -Nlibreoffice-script-provider-bsh -Nlibreoffice-script-provider-js -Nlibreoffice-subsequentcheckbase -Nlibunoil-java -Nlibofficebean-java -Nlibjuh-java -Nlibridl-java -Nlibunoloader-java -Nlibjurt-java -Nliblibreoffice-java -Nlibreoffice-sdbc-hsqldb +endif + +ifeq "$(ENABLE_JAVA)" "y" + ifeq "$(shell $(JAVA_HOME)/bin/java -version 2>&1 | grep -q Zero && echo true)" "true" + #RUN_MAKE_CHECK:=n + ENABLE_JUNIT4=n + endif +endif + +ifneq (,$(filter nss, $(SYSTEM_STUFF))) + BUILD_DEPS+= , libnss3-dev (>= 3.12.3) + BUILD_DEPS+= , libnspr4-dev +endif + +ifeq "$(USE_UCPP)" "y" + ifneq (,$(filter ucpp, $(SYSTEM_STUFF))) + IDLC_CPP_DEPENDS := ucpp + endif +else +# hardcode 4.7 as 4.8 fails: +# 14:17 <@caolan> ah, "build fails with cpp 4.8.0, this is fixable by passing +# -P, but then idlc produces empty urd files" + IDLC_CPP_DEPENDS := cpp-4.7 + CONFIGURE_FLAGS += --with-idlc-cpp=cpp-4.7 +endif + BUILD_DEPS += , $(IDLC_CPP_DEPENDS) + +ifneq (,$(filter hunspell, $(SYSTEM_STUFF))) + BUILD_DEPS += , libhunspell-dev (>= 1.1.5-2) +endif + CONFIGURE_FLAGS += --with-external-dict-dir=$(DICT_DIR) + +ifneq (,$(filter altlinuxhyph, $(SYSTEM_STUFF))) + BUILD_DEPS += , libhyphen-dev (>= 2.4) +endif + CONFIGURE_FLAGS += --with-external-hyph-dir=$(HYPH_DIR) + +ifneq (,$(filter boost, $(SYSTEM_STUFF))) + ifneq "$(BOOST_VERSION)" "default" + BUILD_DEPS += , libboost$(BOOST_VERSION)-dev $(BOOST_MINVER), libboost-date-time$(BOOST_VERSION)-dev $(BOOST_MINVER), libboost-iostreams$(BOOST_VERSION)-dev, libboost-filesystem$(BOOST_VERSION)-dev, libboost-locale$(BOOST_VERSION)-dev + #BUILD_DEPS += , libboost-thread$(BOOST_VERSION)-dev, libboost-program-options$(BOOST_VERSION)-dev + ifeq (,$(filter orcus, $(SYSTEM_STUFF))) + BUILD_DEPS += , libboost-system$(BOOST_VERSION)-dev $(BOOST_MINVER), libboost-iostreams$(BOOST_VERSION)-dev $(BOOST_MINVER), libboost-program-options$(BOOST_VERSION)-dev $(BOOST_MINVER), libboost-filesystem$(BOOST_VERSION)-dev $(BOOST_MINVER) + endif + else + BUILD_DEPS += , libboost-dev $(BOOST_MINVER), libboost-date-time-dev $(BOOST_MINVER), libboost-iostreams-dev $(BOOST_MINVER), libboost-filesystem-dev $(BOOST_MINVER), libboost-locale-dev $(BOOST_MINVER) + #BUILD_DEPS += , libboost-thread-dev, libboost-program-options-dev + ifeq (,$(filter orcus, $(SYSTEM_STUFF))) + BUILD_DEPS += , libboost-system-dev $(BOOST_MINVER), libboost-iostreams-dev $(BOOST_MINVER), libboost-program-options-dev $(BOOST_MINVER), libboost-filesystem-dev $(BOOST_MINVER) + endif + endif + ifeq "$(shell if [ -e /usr/lib/$(DEB_HOST_MULTIARCH)/libboost_date_time.so ]; then echo true; fi)" "true" + CONFIGURE_FLAGS += --with-boost-libdir=/usr/lib/$(DEB_HOST_MULTIARCH) + endif +endif + +ifneq "$(ENABLE_SKIA)" "y" + CONFIGURE_FLAGS += --disable-skia +endif + +ifneq (,$(filter mdds, $(SYSTEM_STUFF))) + BUILD_DEPS += , libmdds-dev (>= 1.5), libmdds-dev (<< 1.8~) +endif + +ifneq (,$(filter orcus, $(SYSTEM_STUFF))) + BUILD_DEPS += , liborcus-dev (>= 0.16), liborcus-dev (<< 0.17~) +endif + +ifneq (,$(filter clucene, $(SYSTEM_STUFF))) + BUILD_DEPS += , libclucene-dev (>= 2.3.3.4-4.1) +endif + +ifeq "$(USE_EXTERNAL_CXXLIBS)" "y" + ifneq (,$(filter librevenge, $(SYSTEM_STUFF))) + BUILD_DEPS += , librevenge-dev, librevenge-dev (<< 0.1~) + endif + ifneq (,$(filter libwpd, $(SYSTEM_STUFF))) + BUILD_DEPS += , libwpd-dev (>= 0.10), libwpd-dev (<< 0.11~) + endif + ifneq (,$(filter mythes, $(SYSTEM_STUFF))) + BUILD_DEPS += , libmythes-dev (>= 2:1.2) + endif + ifneq (,$(filter libwps, $(SYSTEM_STUFF))) + BUILD_DEPS += , libwps-dev (>= 0.4), libwps-dev (<< 0.5~) + ifeq "$(RUN_MAKE_CHECK)" "y" + BUILD_DEPS += , libwps-dev (>= 0.4.9) + endif + endif + ifneq (,$(filter libwpg, $(SYSTEM_STUFF))) + BUILD_DEPS += , libwpg-dev (>= 0.3), libwpg-dev (<< 0.4~) + endif + ifneq (,$(filter libvisio, $(SYSTEM_STUFF))) + BUILD_DEPS += , libvisio-dev (>= 0.1), libvisio-dev (<< 0.2~) + endif + ifneq (,$(filter libcdr, $(SYSTEM_STUFF))) + BUILD_DEPS += , libcdr-dev (>= 0.1), libcdr-dev (<< 0.2~) + endif + ifneq (,$(filter libmspub, $(SYSTEM_STUFF))) + BUILD_DEPS += , libmspub-dev (>= 0.1), libmspub-dev (<< 0.2~) + endif + ifneq (,$(filter libmwaw, $(SYSTEM_STUFF))) + BUILD_DEPS += , libmwaw-dev (>= 0.3.1), libmwaw-dev (<< 0.4~) + ifeq "$(RUN_MAKE_CHECK)" "y" + BUILD_DEPS += , libmwaw-dev (>= 0.3.15) + endif + endif + ifneq (,$(filter libodfgen, $(SYSTEM_STUFF))) + BUILD_DEPS += , libodfgen-dev (>= 0.1), libodfgen-dev (<< 0.2~) + endif + ifneq (,$(filter libepubgen, $(SYSTEM_STUFF))) + BUILD_DEPS += , libepubgen-dev (>= 0.1.0), libepubgen-dev (<< 0.2~) + endif + ifneq (,$(filter libetonyek, $(SYSTEM_STUFF))) + BUILD_DEPS += , libetonyek-dev, libetonyek-dev (<< 0.2~) + ifeq "$(RUN_MAKE_CHECK)" "y" + BUILD_DEPS += , libetonyek-dev (>= 0.1.8) + endif + endif + ifneq (,$(filter libfreehand, $(SYSTEM_STUFF))) + BUILD_DEPS += , libfreehand-dev (>= 0.1), libfreehand-dev (<< 0.2~) + endif + ifneq (,$(filter libabw, $(SYSTEM_STUFF))) + BUILD_DEPS += , libabw-dev (>= 0.1), libabw-dev (<< 0.2~) + endif + ifneq (,$(filter libpagemaker, $(SYSTEM_STUFF))) + BUILD_DEPS += , libpagemaker-dev, libpagemaker-dev (<< 0.1~) + endif + ifneq (,$(filter libzmf, $(SYSTEM_STUFF))) + BUILD_DEPS += , libzmf-dev, libzmf-dev (<< 0.1~) + endif + ifneq (,$(filter libstaroffice, $(SYSTEM_STUFF))) + BUILD_DEPS += , libstaroffice-dev, libstaroffice-dev (<< 0.1~) + ifeq "$(RUN_MAKE_CHECK)" "y" + BUILD_DEPS += , libstaroffice-dev (>= 0.0.3) + endif + endif + ifneq (,$(filter libqxp, $(SYSTEM_STUFF))) + BUILD_DEPS += , libqxp-dev, libqxp-dev (<< 0.1~) + endif + ifneq (,$(filter libebook, $(SYSTEM_STUFF))) + BUILD_DEPS += , libe-book-dev (>= 0.1), libe-book-dev (<< 0.2~) + ifeq "$(RUN_MAKE_CHECK)" "y" + BUILD_DEPS += , libe-book-dev (>= 0.1.2) + endif + endif + ifneq (,$(filter libcmis, $(SYSTEM_STUFF))) + BUILD_DEPS += , libcmis-dev (>= 0.5.2~), libcmis-dev (<< 0.6~) + endif + ifeq "$(ENABLE_QRCODEGEN)" "y" + ifneq (,$(filter qrcodegen, $(SYSTEM_STUFF))) + BUILD_DEPS += , libqrcodegencpp-dev + endif + else + CONFIGURE_FLAGS += --disable-qrcodegen + endif +endif + CONFIGURE_FLAGS += --with-external-thes-dir=$(THES_DIR) + +ifeq "$(INSTALL_APPARMOR_PROFILES)" "y" + BUILD_DEPS += , dh-apparmor + ifeq "$(CHECK_APPARMOR_PROFILES)" "true" + BUILD_DEPS += , apparmor + endif +endif + +ifeq "$(ENABLE_EOT)" "y" + CONFIGURE_FLAGS += --enable-eot + ifneq (,$(filter libeot, $(SYSTEM_STUFF))) + BUILD_DEPS += , libeot-dev + endif +endif + +ifneq (,$(filter lcms2, $(SYSTEM_STUFF))) + BUILD_DEPS += , liblcms2-dev +endif + +ifneq (,$(filter openldap, $(SYSTEM_STUFF))) + BUILD_DEPS += , libldap2-dev +endif + +ifneq (,$(filter liblangtag, $(SYSTEM_STUFF))) + BUILD_DEPS += , liblangtag-dev (>= 0.4) +endif + +ifneq (,$(filter icu, $(SYSTEM_STUFF))) + BUILD_DEPS += , libicu-dev (>= 52) +endif + + +ifeq "$(BUILD_CAIROCANVAS)" "y" + ifneq (,$(filter cairo, $(SYSTEM_STUFF))) + BUILD_DEPS+= , libcairo2-dev + endif +else + CONFIGURE_FLAGS+= --disable-cairo +endif + +ifeq "$(ENABLE_KF5)" "y" + CONFIGURE_FLAGS += --enable-kf5 + BUILD_DEPS += , libkf5coreaddons-dev, libkf5i18n-dev, libkf5config-dev, libkf5windowsystem-dev, libkf5kio-dev +endif + PLASMA_ICONSET_DEP=libreoffice-style-breeze +ifeq "$(ENABLE_QT5)" "y" + CONFIGURE_FLAGS += --enable-qt5 + BUILD_DEPS += , qtbase5-dev $(QT5_MINVER), qt5-qmake $(QT5_MINVER), qtbase5-dev-tools $(QT5_MINVER) + BUILD_DEPS += , libqt5x11extras5-dev $(QT5_MINVER) + BUILD_DEPS += , libglib2.0-dev (>= 2.4) + BUILD_DEPS += , libxcb1-dev + BUILD_DEPS += , libxcb-icccm4-dev + ifeq "$(BUSTER_BACKPORT)" "y" + # for correct qmake/moc + BUILD_DEPS += , qtchooser + export QT_SELECT=5 + endif +endif + +ifeq "$(MYSQL_FLAVOUR)" "default" + BUILD_DEPS += , default-libmysqlclient-dev +else + ifeq "$(MYSQL_FLAVOUR)" "mysql" + ifneq (,$(filter mariadb, $(SYSTEM_STUFF))) + BUILD_DEPS += , libmysqlclient-dev + endif + MARIADBCONFIG=/usr/bin/mysql_config + endif + ifeq "$(MYSQL_FLAVOUR)" "mariadb" + ifneq (,$(filter mariadb, $(SYSTEM_STUFF))) + BUILD_DEPS += , libmariadb-dev + endif + MARIADBCONFIG=/usr/bin/mariadb_config + endif +endif + +ifeq "$(ENABLE_FIREBIRD)" "y" + BASE_FIREBIRD_RECOMMENDS = libreoffice-sdbc-firebird [$(OOO_FIREBIRD_ARCHS)] + ifneq (,$(filter libatomic-ops, $(SYSTEM_STUFF))) + BUILD_DEPS += , libatomic-ops-dev (>= 7.3~alpha1+git20110913-1)$(OOO_NO_FIREBIRD_ARCHS) + endif + ifneq (,$(filter libtommath, $(SYSTEM_STUFF))) + BUILD_DEPS += , libtommath-dev$(OOO_NO_FIREBIRD_ARCHS) + endif + ifneq (,$(filter firebird, $(SYSTEM_STUFF))) + BUILD_DEPS += , firebird-dev (>= 3.0.0.32483.ds4-4)$(OOO_NO_FIREBIRD_ARCHS) + # we need libEngine12.so + ifeq "$(RUN_MAKE_CHECK)" "y" + BUILD_DEPS += , firebird3.0-server-core $(OOO_NO_FIREBIRD_ARCHS) + endif + FIREBIRD_ENGINE_DEPENDS += firebird3.0-server-core + endif +else + CONFIGURE_FLAGS += --disable-firebird-sdbc + DEBHELPER_OPTIONS += -Nlibreoffice-sdbc-firebird +endif + +ifeq "$(BUILD_GTK3)" "y" + BUILD_DEPS += , libgtk-3-dev (>= 3.18.0), libglib2.0-dev (>= 2.38.0) + ifneq (cairo,$(findstring cairo,$(SYSTEM_STUFF))) + $(error GTK3 build fails without system-cairo!!) + endif + ifeq (,$(filter epoxy, $(SYSTEM_STUFF))) + BUILD_DEPS += , libegl1-mesa-dev + endif + GNOME_GTK_RECOMMENDS += libreoffice-gtk3 + ifeq "$(ENABLE_INTROSPECTION)" "y" + BUILD_DEPS += , gobject-introspection (>= 1.32.0), libgirepository1.0-dev (>= 1.32) + CONFIGURE_FLAGS += --enable-introspection + else + DEBHELPER_OPTIONS+= -Ngir1.2-lokdocview-0.1 + endif +endif + +ifeq "$(ENABLE_EVO2)" "n" + CONFIGURE_FLAGS += --disable-evolution2 + DEBHELPER_OPTIONS += -Nlibreoffice-evolution +else + CONFIGURE_FLAGS += --enable-evolution2 + BUILD_DEPS += , libebook1.2-dev + LIBEBOOK_DEP = $(shell debian/scripts/get_libebook_dep.sh) +endif + +ifeq "$(ENABLE_SDBC_POSTGRESQL)" "y" + ifneq (,$(filter postgresql, $(SYSTEM_STUFF))) + BUILD_DEPS += , libpq-dev (>= 9.0~) + else + BUILD_DEPS += , libkrb5-dev + endif +else + CONFIGURE_FLAGS += --disable-postgresql-sdbc + DEBHELPER_OPTIONS += -Nlibreoffice-sdbc-postgresql +endif + +ifeq "$(ENABLE_RANDR)" "y" + BUILD_DEPS += , libxrandr-dev +else + CONFIGURE_FLAGS += --disable-randr +endif + +ifneq "$(ENABLE_PYTHON)" "y" + DEBHELPER_OPTIONS+= -Npython3-uno -Nlibreoffice-script-provider-python -Npython3-access2base + CONFIGURE_FLAGS += --disable-python +else + PYUNO_DEPENDS = python3-uno (>= 4.4.0~beta2) + CONFIGURE_FLAGS += --enable-python=system +endif + +ifneq "$(PACKAGE_LIBRELOGO)" "y" + DEBHELPER_OPTIONS+= -Nlibreoffice-librelogo +endif + +ifeq "$(ENABLE_JAVA)" "y" + ifneq (,$(filter hsqldb, $(SYSTEM_STUFF))) + HSQLDB_MINVER= (>> 1.8.0.10) + HSQLDB_JAR=/usr/share/java/hsqldb1.8.0.jar + BUILD_DEPS += , libhsqldb1.8.0-java $(HSQLDB_MINVER)$(OOO_NO_JAVA_ARCHS) , libarchive-zip-perl$(OOO_NO_JAVA_ARCHS) + BASE_HSQLDB_DEPENDS = libhsqldb1.8.0-java $(HSQLDB_MINVER) + CONFIGURE_FLAGS += --with-hsqldb-jar=$(HSQLDB_JAR) + else + BUILD_DEPS += , libservlet3.1-java + endif + ifeq "$(ENABLE_SCRIPT_PROVIDER_BSH)" "y" + ifneq (,$(filter beanshell, $(SYSTEM_STUFF))) + BUILD_DEPS_INDEP += , libbsh-java + endif + CONFIGURE_FLAGS += --enable-scripting-beanshell + else + CONFIGURE_FLAGS += --disble-scripting-beanshell + DEBHELPER_OPTIONS += -Nlibreoffice-script-provider-bsh + endif + ifeq "$(ENABLE_SCRIPT_PROVIDER_JS)" "y" + CONFIGURE_FLAGS += --enable-scripting-javascript + else + CONFIGURE_FLAGS += --disable-scripting-javascript + DEBHELPER_OPTIONS += -Nlibreoffice-script-provider-js + endif +endif + +ifneq (,$(filter lpsolve, $(SYSTEM_STUFF))) + ifeq "$(USE_SHARED_LPSOLVE)" "y" + BUILD_DEPS += , liblpsolve55-dev $(LPSOLVE_MIN_VERSION), lp-solve $(LPSOLVE_MIN_VERSION) + LPSOLVE_DEP = lp-solve $(LPSOLVE_MIN_VERSION) + else + BUILD_DEPS += , liblpsolve55-dev $(LPSOLVE_MIN_VERSION) + endif + ifeq "$(USE_LIBSUITESPARSE)" "y" + BUILD_DEPS += , libsuitesparse-dev $(SUITESPARSE_MIN_VERSION) + else + BUILD_DEPS += , libufsparse-dev + endif +endif + +ifeq "$(USE_DBUS)" "y" + BUILD_DEPS += , libdbus-1-dev (>= 0.60) + CONFIGURE_FLAGS += --enable-dbus + ifeq "$(ENABLE_BLUETOOTH)" "y" + BUILD_DEPS += , libglib2.0-dev (>= 2.4) + ifneq (,$(filter bluez, $(SYSTEM_STUFF))) + BUILD_DEPS += , libbluetooth-dev [linux-any] + endif + else + CONFIGURE_FLAGS += --disable-sdremote-bluetooth + endif + ifeq "$(ENABLE_PACKAGEKIT)" "y" + CONFIGURE_FLAGS += --enable-packagekit + endif +endif + +ifeq "$(ENABLE_AVAHI)" "y" + BUILD_DEPS += , libavahi-client-dev + CONFIGURE_FLAGS += --enable-avahi +endif + +ifeq "$(USE_GSTREAMER)" "y" + BUILD_DEPS += , libgstreamer1.0-dev + CONFIGURE_FLAGS += --enable-gstreamer-1-0 + BUILD_DEPS += , libgstreamer-plugins-base1.0-dev + GSTREAMER_PLUGINS_SUGGESTS += , gstreamer1.0-plugins-base, gstreamer1.0-plugins-good, gstreamer1.0-plugins-ugly, gstreamer1.0-plugins-bad, gstreamer1.0-libav +else + CONFIGURE_FLAGS += --disable-gstreamer-1-0 +endif + +ifeq "$(ENABLE_WEBDAV)" "y" + ifeq "$(WEBDAV_LIB)" "neon" + ifneq (,$(filter neon, $(SYSTEM_STUFF))) + ifneq "$(NEON_SECTYPE)" "openssl" + BUILD_DEPS += , libneon$(NEONSONR)-$(NEON_SECTYPE)-dev + else + BUILD_DEPS += , libneon$(NEONSONR)-dev + endif + endif + else + ifneq (,$(filter apr, $(SYSTEM_STUFF))) + BUILD_DEPS += , libaprutil1-dev + endif + ifneq (,$(filter serf, $(SYSTEM_STUFF))) + BUILD_DEPS += , libserf-dev + endif + endif + CONFIGURE_FLAGS += --with-webdav=$(WEBDAV_LIB) +else + CONFIGURE_FLAGS += --with-webdav=no +endif + +ifeq "$(ENABLE_HELP)" "n" + CONFIGURE_FLAGS += --without-helppack-integration --without-help +endif + +ifneq (,$(filter redland, $(SYSTEM_STUFF))) + BUILD_DEPS += , librdf0-dev (>= 1.0.16-2) +endif + +ifeq "$(ENABLE_GUI)" "y" + ifneq (,$(filter epoxy, $(SYSTEM_STUFF))) + BUILD_DEPS += , libepoxy-dev (>= 1.2) + else + BUILD_DEPS += , libegl1-mesa-dev + endif +endif +ifneq (,$(filter glm, $(SYSTEM_STUFF))) + BUILD_DEPS += , libglm-dev (>= 0.9.9~a2) +endif + +ifneq (,$(filter gpgmepp, $(SYSTEM_STUFF))) + BUILD_DEPS+= , libgpgmepp-dev, libgpgme-dev, libgpg-error-dev +endif +ifeq "$(RUN_MAKE_CHECK)" "y" + BUILD_DEPS+= , gpg + BUILD_DEPS+= , gpgconf + BUILD_DEPS+= , gpg-agent +endif + +ifeq "$(ENABLE_GIO)" "y" + ifneq "$(BUILD_GTK3)" "y" + BUILD_DEPS += , libglib2.0-dev (>= 2.26.0) + endif +else + CONFIGURE_FLAGS += --disable-gio +endif + +ifeq "$(ENABLE_DCONF)" "y" + BUILD_DEPS += , libdconf-dev (>= 0.15.2) +else + CONFIGURE_FLAGS += --disable-dconf +endif + +ifeq ($(ENABLE_MERGELIBS),y) + CONFIGURE_FLAGS += --enable-mergelibs +endif + +ifeq ($(ENABLE_LTO),y) + CONFIGURE_FLAGS += --enable-lto +endif + +ifeq ($(USE_GOLD),y) + CONFIGURE_FLAGS += --enable-ld=gold +else +# --enable-ld=gold is default for debug builds if found +ifneq (debug,$(findstring debug,$(DEB_BUILD_OPTIONS))) + CONFIGURE_FLAGS += --disable-ld +endif +endif +ifneq (,$(findstring mips,$(DEB_HOST_ARCH))) +#10:46 < _rene_> can anyone shed a light on /<>/workdir/LinkTarget/Executable/bestreversemap: error while loading shared libraries: +# /<>/instdir/program/libuno_sal.so.3: ELF file ABI version invalid? both were built in the same LO build +#10:47 < _rene_> mips64el, apparently since gcc9 or new(er) binutils? +#10:47 < _rene_> on an other binary: +#10:47 < _rene_> file /home/rene/libreoffice-6.3.1~rc2/instdir/program/libunoidllo.so +# /home/rene/libreoffice-6.3.1~rc2/instdir/program/libunoidllo.so: ELF 64-bit LSB shared object, MIPS, MIPS64 rel2 version 1 (SYSV), +# dynamically linked, BuildID[sha1]=82f15433db9000b9dfee24ed07e2082ffb439dfd, with debug_info, not stripped +#10:47 < _rene_> (eller, mips64el chroot) +#[...] +#13:49 < aurel32> _rene_: the problem is the ABI version, ie those library have Version ABI: 5 instead of 0 for normal binaries +#13:50 < aurel32> the ABI version 5 will be used for gnu hash support in mips +#13:51 < aurel32> support has been added to binutils trunk recently, although the default is still sysv hash style +#13:51 < aurel32> and glibc support is still being reviewed, it might land in 2.31 +#13:51 < aurel32> previous version of libreoffice used -Wl,--hash-style=sysv +#13:52 < aurel32> now it seems it autodetect that binutils has gnu hash support and it passes -Wl,--hash-style=gnu +#13:52 < aurel32> but there is no support for the full toolchain yet +#13:54 < _rene_> so I need to force -Wl,--hash-style=sysv? +#13:54 < aurel32> --with-linker-hash-style +#13:54 < aurel32> Use linker with --hash-style=

}uangtEF8Rv_O=f$kb}?6^7S@Gx$$~; zTYK975se;hZ#Fm|`}SY~Qv>iYz}>~@=;wa~n|DIQ((Z8a>+n$2%0l%V=w3 zZ{xe|qo_O`D4=zK3f5)w-Qo5g>P3LW(Yx12jh)83#&-1G!NHcm`e^&`hn>ysqgT=H z0ipjUdUv$Fh%Oo%(leR>u<-ie@WI0CcSkz{x1IgQ_Tk~Xw~d{H{dp|%dq4(L-$30h z0r0^-{s=N09RA2w2?l}xV)Xv|Z6FDjc^?##II%&1904~rxv0JzfC*G-1k;T6x4+xn z`EGlEbDK~(U^DM`j<)BqUOO1tchV+1e!qcUfhXvh2#Im&*8p(=V=QO1^CsHZ`T>n> zxxzqzqa8yQf!gNx4;B>Wg8s&B9xg2bW0$_)-q>0?Y5;|nmdJ$g_{*0s`n}ufe*}5# zu9uo!(1<<=MM>FnsW}{WjZRlbNwNTbk5^>E>!rgZY>bOhe70Wd^xN_0io6sSht_}n z^;cU5FIS2^&{+LAn?e@XjU92|9G+B8w z`g2ulqwQpT-39M~a3S9&M2l9EP^S1MX?}_uF$nt?Q0`&3dA-&j^y62*;#Ch4Tk||- z)q=Mvmzb;xPCS}cFMZeUe2Tsdo9#B{vR11+jeD;^5l82p{#rfmMYZ(5SJCNU1Om9! z8gwDYd~Mjl@ci~JjpM%4=w zGfxNY>uAvL4w}G)9yon@{?#KqxU@%|voa(IfS{sJ<|F;fVyvmDLstONu~NFXG4qCc%{=*c^L}L z;8J9=%Y^u|*J+JZB;6sx^y6`~{dovHfKb7b6bbsViUTc>n2%U0ks_{R%6h=2k%?)P zCX=`ux5nVc^6qta(E5m~n<{UYD$$Q@kwPA1lzyb`m41wql4~`UAd|Rt33=f%VRGJb+F zZL=FgJd=0BQT&(Jo=&Vqq;L-w-T*6Mzn~ zd!05buAcf*Tg}l&KB})m42m)ScG}w683afF(6x6KzX+aci|x~}y0!UYwT|6F&XhJ8 z#}IDaGuL9Pg?`*aZ4ioc`pDV?d52Uv8c}ck=IjMV@#iYRlv^l+=r**UM%)7f3n2QZ z?)a7C=YKjMLwn^Dt^-t*Bv~(w6@yCHb=Z~ucXWJgxV1Ux^{~&9wKeHLi=Uj7*c#g+ zIVo&)H^ zpw^6hFUhdkci=aHBO2 z>UKS)7rp;l=zL0%$E*R%5H$HGXyB+bjvGX)lauIA&ED{pJv+KQ71TO8S&JG_MdgRs z8WMZsl+*+*EJjUeju(TgzOj*V^9<_|ftF)dRP|%9fDXn6jd&1|^nv4;8htt%ToJn3 z1!ym|;;(!CjHJv1AJ32uvH?xF5G4EPw|R)G{5%Sw&c5TO*oi zAlXAYfk`GxAj*+T%Nrsf>|VrT{x=v3n;(B3zeAOMR1q8$x-tu4c6!6X$j{XyjBB=& zd40Dg_dv!khi^ym_Ym?jEl!fVKURs+{lT%{ea9RK;1XlEpx-3pz*J~9$HyWCoi$sr zl>%~eAzHNN^qAZD3t!Y%-fNH`* zK^^y~xWZw44jJ+Y8?|*2R0nX`*M2sWe+zl?{!E^V5ExE08c;bu1(W12W0~ip zX1fDwKwCPj#K)mzwzd|^R=|xZuOY*jNH8H_Xx~SoVhYRC62i1h1|d-vvW^kPXV5P$ z)=MT>(xM^1eEk$=%}+CGZ3S6mZ`M* z|FM})&KnwTiK;Ytocn5E6%iOc~BQ*QE zIdYZ#LeCmQqj?H_QFl)Zf><{eOZw=#Xr7?mE$p)K=#r+g6nmvxX{or+Vi=oAiVC0` z0l{7XmB3bY3uJ9jTWal^QaC%DyR*6@THTH=;&?2CL`-bL?y65Vm7rDoPNTUEYHX0U8M z>hxeEQ)}H?O~-aoU%XgeyjWShSY5n$x_I$y+E~5vNfnT@55P1YHT$4!BhYHLdQo@1 zES(NuK6)T|D!^ns`4;N;Y2m>_1%5tQE~ZV!0Pm+F2F$hTedIxD z&Aa8Axw^iS)P#^WGQX&9r&%8?taf|qelynA)pNL+RvZt8UsX?n2kupq z00ubT_0^_29Uz%ynT6tRR_PW(`_ywm!;-s!`!3BJuy5Z%ZafakHe){`PtdaD`x}!* z5CB4dkqRazK|lo?!YAbj{&eb=--P*gDhVieJQ5x8F1tC!;+ZXBgVf_scxpRSvZp!9+ne0uYp?kfcfo+mKhGQ%=#eHp1A~`k14Zso=9JR zd0PFHn2Oj?Sp8@m4`)s@1Dq)WPo^VJre+YDDX`#RY+C%f1)uB8u@&uIg{s<9XI8c` zqa|6Zs1_3tO39XScg1n}bV-5D6S0Q(k-k*Pfk=DG3c&bkM@Gl(+*%?xIK z-P?>fXoRK$Kgi|y%0?%U;HQ@*3rfye7y{zGS%PjaUV)Yc(!`?m``mNmyR-V9ZggEB zgjh`z2Qow_V@Ak>HeXVwZ({=T%kC6>h`OB$>`}C9Pt}#&68Pn{k#;*#b1@2jtT70i ze!?m8P%+hYC>l02Va=I9(y!WmZdV|-OrycVKAkWcP}V$LeWz|~++oL0>GOL;Hgp-? zFmsP&8QL9sBZ+22^J^FvKSs2!nyTOoO4CW7Tjmra(U#d2qe@$yo0}RskhK&@L>PKT zd5sQ6Rcm1iqwnO&u;fRF*i8^Z6+I0F?IRK&S`^&MuXyI_hT)q&S4wX6dKkflkOtyFp{lUK(oTx(a6!6Edw22R}E< zECBCT*UuM77c-~`#KT(#Rt;rd64U3>GJ>0lx2|?> zFHGOClVfmgoHE+;Uza>2;y9P|b^8*ftRWo{Op{%n^x>b%_)7k|cJJU@Nt<-T8((0H z*>n+{)5HOnHi>~XEw9rb`u=W6#x?~fGJ->}L^4`8ev%76*vvGzq3+5t zQXr*pM=Z=8TJTul5j^EO(*?eOZrDWR)YlaL?E6TE>DG^uw#^b@>!w&xM`$DR6;dqM zAipQ?2K`(qWd|2d;seyNix|=zs^s~e{Jv=xmX{Avre#UDzHKirO~C3!l+Wn>}* z(ec!Q926j0h0%}GSc8Lxr#BUJ+&<_dh;9}DT(xw)p*s^nVAyl#H)h~VmMRvD&aMkT zvRwNFkC#>^F!C-vy!O=#Ot|^poSZkK&k3xUvj4MV!%F4*s<0D*qu~5&zG~$ zm)-M~>~kCpBhW5ZGmq`z)9_*Cr9MSr@NEZjwPi6x=gTx8JXmPM$T9&mS*k%d`jVG( z0Y?b(T@DMci%LLU!Kpn#v9#3mg0NCI`;JYIg#(#hDHsuUIwHi? zJ-(yPaT5e=0l{D_yweUAMQ}fS%vA8AmO#G3Bn${q?^2PPTs(LSaO$k1Ryy>~Bd3UG z{SvAlhMpB{(&CqTl2NO!Em?62iQ zh9bm>?Lr(13hod3xw4`?t#!sYOxei#dVV0BOPG5Yh z0OO#0IgV2%P~0lG1e-JtQSq_XA-Qy$gD+hObojn56kl*XUFxEt$UM-a6Z|>1;DoUF zM=)D#)g?!iE6-TSF|xWsCjV)NiiJbgD=8WAaXAHGQD+QH0e(2rQ_6rGlW@4?0(#tm zY+-huvE@sFi70(pt3@?|kDrA6#6yA=W_3MNF189TYQ7({|_JxbsN#|=@34J&_QxI{J!htVm9#A*Sm2cQdJ`fmXVQj6rIb8>N z>E#daLc@04klak|uh0qS^mo#^M<%5+*pVp+{ARWZm}Kv;9us{b7^rwC--AA!9^e9I z+^D#=sNuk+Hb3HI04eXk_LaDmQ;3q&gb5e?ratR@j*&)ybW9ddw>D-K&NC$pL}bca&l;vOo5J*KF>+ahwEX(GiCA&kCBw4O@6wmlr&Wp%ZE?PgEc z&+8DnZGvKy#~np67&}goQfkRe5e~rhM>?zI!#iUGkF*1VVj@>pheqG?M6cPx8JgfE z4`c&KaQ1pQ=tyDa^h&DeKZTAZsk3tHP9J04>_ac0&dfb0h$lt!-^ zkQ;Iuc_#{zhY#8l0HdT2Wc3YtPQr%#>&q^!xxoW!4i3mEHpwU{%=5@j0|Uv_0aycl zNHK#j3fo1*0D(Y(G5TVNskA{AUBS@2HjqOQl=+4{G`T>^i5Lf6{d=)KXcM7t#m$7k ztUo8lM0L_8De2v;ssn235)({vTfoZe5uWTC$vRnsIHM_tG|g1JSn&_cv8~OD1RIL? z5T?b8o%UK+VMrc?JXiJY%QVTR@A(h4w`~VAlAZC z^b>3axh=+P6#G(1#}B5HG@9qc8F4VD%jQKPc}302p`M66)~K!t#^M?flvNLPI=Nbo zSXG?yz}1Qj*QMfRMupE2Gp*{kl_5V4)OUIQ`%8;|kkDp)VX$;=*K{yWqO8~}?hv;` zCO#=_L#JL!h(zGYfI><;6OuVF#9g8y(#w~~z~k!^%{_Uv!q}jptSubcDwufd=!{kH zh~dUT_ACPn`bmLowPZ!j5tr>Ttg0Jd4|UGnp$Xka=HCi{g6jH)Zk?Mo9v zoW{zWR_uSR(?^oSj-0g1Ij&L|aASa#2g0?d02yDG-&9srx1Qg+&d}9JxagqFAh-jK>9US?rM)_#e#-RHMevh({?r+1BB$D9#%C>JglXqO>O++aqPDG8 zIuulxFlu?@3{l+;0pQH^XpXDw6kK7++~ylj=VMHX?S^m@Gl(0w4YAl4KWx?nz$%?k(}2|{W9 z)*K?i7!1@*)b@9z@xQguaI`;mzcd`2C!3m_nDp*Pbr!T4@A}6 zDZC61sF6Vy6mnZ!P3@D`WM=`)Sh0eZA#7U9g@U#poMUG>He1-zJy#q77X1P@<6nDV zI8CI=#oOo$z~fBz2s<-K;agx`p=_ezt$6P7R0&P^Bul9!7CL&U344%&NPuiRN=q7N za;9yjuw)^ZJ1@UUBKSDK=72oS=nVO+FA)m_hs7J<*V*7Rl9oTMK>j5D;)Tu*atI|7 zXIQm#NtVnI?s_>~D&7wCdnf2p!fJed<}}R<5hlO5J(rqv`Jc$8=5$4$8N zns6KY5Q6(hU(6>yS(NNg(`tbfFeR+dXu)#)5tW(HC#+?-XPM2ekZuTKPP<}R%%|ly zEAHH-J}>Tjo?U0tS5T&L3GY-J_33X+J58s6vYf$0A{!Qr+hM&Rt=hCogm92+M*vP4 z6iiqFaHoDn1D#TGc4m$sRUisV`c&k8-a263>kZAeOV}`9sn1F)K@5B<_KEdJ8)kBR zYy9z%yQ2hlD_n|gE-yMa1AIH01)}Pf@eIo;K1F0L`Jluk_n0FeG!`|Rk&;eSz+29D-wT>m1(i{w0 zwbo|zuge%I@-Y)|%%gwoGO6BJlFn4vECz9O-5)nU^C|*sD#pDINU&1Lg9lM8cPoWE z6spxv&F*Df1qVhKhXO=!dwG~d)o5dME;;0p2_IeU4*KWPx|9Xs|A^;LkbW$pr~o-Z zyw|s^7=Y;HE-9V`INpJwVYQg*&L?+wE6J-g+RUxTtnye|+$+#cTLT+uVn%*7fhW4e zniG~|l!SQg7#-kt2pw*&e?u0CIjxJh^^u-^rrEn?QdndL0Z^Q|1JVk3>EW+0>5R&f z=C6ax5inYO9x4BEzWgNOGcIZ=>8I1Ahvjm??> zrOXWY-LBdsiNL-J_rCyMvOxBlpF6$F9#$DKFx*%km=ufeu#8v|mQpC$EeBY6g|PG; z(4Gpp4$~f!dF(SJU01PBWZ65~kYwg4f46>riAMv64H+b;<&dDBqJSS^fCBTxL1bV? zuavA32yi)?CfP7WKhQEwltUp!t7O))EKb=5j`;rH|L6Zz$Gro3J49|@VI*y2T>&=1 z7wr;IFw572!AGHQSUr1_DnN0?xW`O3j+F24T`Kmt4&@RQpjd_jlNxCvbG$h?#N{BoGz8Km@CwKV zW+*42Z~=|n9RQwqM0t|{~o45dWpVDpC>LM?2yAq|X^AxL?0)mR08Hp$2eG5ct zW(RPh2NG9uh2|Bg6D*-0sDwpAjU_i)=1B_0(8;DPnx23q2#^(#sd6CxpQ8R_&QTYpL#8%dG80MCi%|SxPsNKm*8eFqtEaxG;>B`pr4GDU zdFJq9f6!>2dqgNk@b7V6@*c>Xjx+j{RH7eVZ}>snL07ETo^j-L=!9mIaJu4)S{(*| zVEPP<&T5Uzeqz7vc1}m}!5J=vimSg7we))=_sR%`|4oInWj^tUj7x_imc}wdT>yq-M?X1j+ptopx-y2)EIOobH#@5o!GdEX? zz}ErKXq{ALZZ2Djr5`M$ZOBg3Hr6A)Op1q@))+`>**ImGyLtUx4YiF|0S|NS;h(yDMSljQxcymRlH*GwIGiDPVo5>yAG*=!#kTb?}SY z$2^t~|Bfz@1ib}*3N=h@@SrI9m5t_Rw+pIi!}f${Hsv6Lhe^d5`EIw^kbXRe#pb!M zl--4}08U`GrL$-B$g{R zM6f#0c_EubBuC0rV31AO^U@cjJA{^t@+=gGyc1_QMe%lhp(|~Y8jB5;L<7TxZJL)| z>L_n$s{WxlLV07%7_UC!-Fj}Yt{A64MMOuSBc;7WwzJBsGYnc$fkn#=m@VHx7jQN$ znW+dFoF0W$nlr>;1v{7lha}xQogvC%?IIOw{BJ2#X4qpgxRyUV6uO-sTB2U)D4x0=IM=-C()g z;4o9etD6RrK~pz{hm4oNRw$v%jSDx>CE>FgAqNqSB_{{1q&IN$01?PwN*JL#|^Xi=+#J2q(CzS}14-3?xzsBX=sW?ZH6h%Tq1t zP5R8h!UyRd2!F{X2%Z$E66p5h-88Oj=f(QgG;NJNk&ND7No%)pyI5lY*~9aoEaNJ2 zeJq2Ku0jycyFTC&fgrw8uQ|T;{otxG@La0=kNId52(=S6+rV+RO}ky&%mZ~UU@nwy@Ms*?rb$1I;`fW@M!@kZr!iKni{RdT@T3xJGa+(;j>H*(+~~(%%yU@B-sjOp;Fk5^F-bR6g8# zy?2D`59wFIU7Il4(DWtL3`>6szI+X;FP8wKrd`2YtqNBJ?g`!*oDu*Eo-=TCK7ip4 z*;T)MIr>*OI^GAl`xKuDf96^(Pp;J|Y>o^Dv@jGo^T4I_Q7gW8=@WeuHEG{c4o(X& zLm(2^^(?g|0osMjihnulGpbmw)Bqp>=74O<5kO$pHO-#jIAF=J${pkXsS~_$1q+n`7yhS0oGAe6v1d5t< z#UmMR_HE$q+=j!2bPG5{p_#-mA&YGu4^k%u!6BiSr!ib5!j*VK&84LJBd25m>@B=~B28?^{#X9cv)s3rv}nK}DDyXWUHLp3nn>8@mIALAV=2fY6TJ>8#5F13vDr zr=Y+)JAtXhB^b`fye=G@9vB5yAM-X^o1^R*o4Rgy6tm$N{-G1$fVyTFhQSmE9wV%~ zP~bt?ug5En%7pCN}z>f{hLsztD$VrO8W=qKYT` z+}wOSC(l725&P6WB{v-dyzLhC#KlS4P5?2u{$ zbp|nsKn?P&72jbsgNYNW`6Xmb{H6iJ|BYoQ;pwK?WrDBv4zK7zgGx$)G$QA|x%tf* zcz?37zL8WNeB=2ZPE=c&f{olb5(UL6q#x-EZUCxPzunwoqTm8gk@gBBU6yN4 z>o03BS7Bexm?>b1g&0_0hCSBVO^VDElVL9HHirPpXNCrdgH*a`62LL-o>Tt2SWC)% zM(ivY55x}kdy?&Bh!hnJwNffgUPXck8yQF-uwFhw}$+!mrP+!KpAy~JLVlA0RNw+zgVm?e0GhSO+u6T1JXeOq08yIEUD!P&T!aluXQDCUCmdGk zFi%cQ-SNRS1}b3{RI0cnYG@F6V|9)f!K>t;X|;L+2}jKifXt-XVA7bPtA^Pq8&GqK zEuow}6`6y}=$2j0Dd1$dRUP$=rG(4FupDhD^!u_6L7R{VhSfyn23v1hj1O5nt{;T9 zZ!UVRjRH7_Ed~TO2|+ScI-Jes5W<&+12s@6&>@tlqMATfJ(Gt%gfpWgJF!_^1f&9lMvX#QbDgG4ym5 z+Jjg;)rd%dxn+p!in;M=aB!JMWL=#5PN*~+6K7rcY9Xozh6)Xr00nrGnVbvV$l0sR zj-6&4QPT0d{oH1_;GzUDl|{$W5ChCkk>h5b4v@70*Py8EU}NSOSnj8y-ksdK?KboR zG%E1>8gs#ZeC63d)>2T&J63AXVGvkZ&HLXTnh2Cz-GR6KF9?;C z36_;&1I4mdU5RnzM&N#g4&-dNf#x2_A}3@kV9 z4)2nwrE>U-oBa3~8YM3YHr{>%I|YCKz}OMqpe$y6nlY(*1_ePqLcVWARJ1QuQbosI zq=H+}?fzw#qQR35xfGd^gCftUG(k3`!(XJ8KxRI%_#8Y9nex`f8A-GjKtNa-VxpKr z&SPJ-T8Z`nH3+E_ooF!ky45GE~$xOXjlw}*+u&^j) z4qFzSzLC$UEF+YLu_?E23Bi#){8ctx>{VCqzQp<^h;`jpat=}v^zRj>kUC63Y%|nB za7`_!-cs@Jimk!T$+!VIHXCDV81Rb;{c>)O;x9l(UAHtRrhW#k(X9#L2NI!}UAUh! z#7JstX>*)!>>a$@Z>Ul|uO57;<@M#2)ycA38;$K~`=4*O_m8&oHTDNr65lgd$uz%- zD&HL({+KVWzmdMioLvQ-Z69qO?!0ZlN?crdm$pQGHCg+IjYhP2ur)Ev6)CE?E?+fr z2wzkEU3B(a^if?57h4CqZQ)>pDe{FWp;O)}U-F2%Qm;czokVCnuP=M)Lmd^_K${mC z#|26V;tDd4G>n!+)5s-8?VJ(~IuMBRVX4`I3Cy5R9Jl4g*~CUKaIjm)Y+akAm<;nr z@YPs28uD}?E=z=NA?9%tM-ff>)^R}M7wRKN5!22bsdC&Jop}bAvPASjI(`N>+~A7# zb+M_M{K)B2Fbn5<=;J(L&Kk6W00BD+g5krT56jL4Blt!fRk1V06)5zjn4we1NBeXi zy3YlM*G>(bX5Abmu9@%^F!hL$dtuEfv3ss)&=BmALB-vu|4w9W6j@LhB@oXbqFyb1~tVd-uzvE34^Ym9LuQ{@7BT)->ocVZt43Citc zb8;KQHW?=`PSb1<2A)B7fqS0U`g_Rr!^`PqszVsZ1OrIuTlPyFlbv8zX366C&lTp8kOaA^f|cPRjgy= zof9zN7oaVLIK?(gC2bRusR6|MKhm&!M>v2Hkow7NDe60E@-${+y(XgG6a_qyP^keB z%xTRGS@aWD5v)kynlSd}4ZL)i++?k`zX@xAT@_SWyTH|Kwyj~Gy@j<+D%+kDW!YDu zo89cL`KVF2-&bn&)fFGFHZu--OS3c*#$*`1Ar2Fol|kIhRBjnYKfYol{dmyEIStVp z{<3l&8FxsfjhTK220wr0K|)b&d{mG$4RdY$d4&4~z~ht1S=%`x1ml zN`xgu3CRIELMke&ca3~fg1Ad>)$ z8Rj9BUbIiscWLQ{zXH>{@1i8-`E*?tqqaa53uRyxZuq;GiJgEsN;?%=uh4okzi97X z^D4x$z&??M(!uBw%kH(8@I%Ra&`b{VE$of9h*ydqHV;Jh&PNQhh@SEs4~*kF0$oIo zBWRG4zO8P;v-z@eM0vj>g+f_UNy`oW9YRd@oe7cgij6GvOD3mZC&7Q_S z<*j2cy@ZPS3NP{_0o4z}5ZiKg_mnKN4}&d~UkPR;3d0m5ZiD1T=OCdlh<<~Y*s#r* z7{UgKki>uWGjtJsj)+Dv3>S-TbiiDT7e>R^bh*+<7*cWbN5DdS9F(k_K;t%`niXqS z2{A6Kv1?W_9XJCCCtVre)ZufO5d?X|^Ie1rPCCmSB^Eggc)3tW`uLppf@gc-5LY(@ zXDsmZSH?;h}0dl6IEh!xlrWt;BC3P=fVUyC%;|+R}iwgk@_uCrjSE4E)Z$ zf=g1ce!z$s#)=b@#KKNGlr4;Sb{MGWR+cDF>ns=SN$BKf2v?7oo~djgihnUO>aHlKF8sweXbT@iDhp8@@QkUBYFY+#ID3z`1%1 zFHUkJC$#vJWcW_+oS^Y4?@+1{J_ZD$k@^k86fG=eCk#{(&D^kt*Acw&?m1U4$dcK8eUV`f*PZ@O#J&_C@i!{!SJxuoVVPQVHJcR(l51 z);hPaY%Rp4_;0gojwEIBcW2glU=;FePLNzSEL@{-l4024+dALQ;@LbBf&Z%@64Xq& zHyTg|?!XJl$DP$6`_9hzk7nMXWyl3AB*=mYrxX}k2WCNGnnL9h8W|+uRE}>L`=uB= zR>7fKb#n+AlDKniy9l#9gX0gm1I8C3te9C8LNRQnAc1o42w8`5xuPbqM#Vf%j7>bD z!E+m8>R{weP68+p0Ca(|KCU-eRu`e-9Ma_UgDY4^z;c~AmlYPl(>2{31~z~@vu_cI zzwN=k_XZ_Ym;m#pgV16*R2(6`w1MkY+du9iHITtvh8B_&4)t0*G2FIW)f;@E~rP^p|q# zVm>Sl+>v!UlIRR(Cf%iK&`cYWaZg{_^TyllM|SG?Y5tf7>__0Jt53a#In#dBfDhhG zNW=<846w1y& zA9oHIh*`=V`gSld>1prBHwTA%x^3s@O55ZY+WvZ^N0_6v0qsZbgtZ>c=EB;7+_L@l zB>b1A7Y4liexIb;cj_y7tL{DQKK0bO-Y~_k+qH4tS{oMTm68dNM&$uK%XpM@REDq9oNyH<$TBIZ|h6_8M2T!0h8* z-O21@g;QdqQls`oXy)WbEuT*CkCq%K3>ZabA06FOL`ZNQfZnVqM| zW94M;VC&uPwr9fH zzL^WJaMVuO}Ek>ueCwn5KAhjE|t_I zI%=0nUQ^*ATgIYZ;8I1mkOAe>a&DTHqsGSm*2dvhrFXq2cwsVtUtz8o&T}FrhGzTm zAV80aR;RT=%NTO!A%EPIlxP2DMMY=kR2BX8Z!;!p^LNy0Y%E`A5JW7MRlJuvgXAss z=gWEXpsF)ZYlvE$kwob)uu?+n{mY&nxu)tuXKZ_ky0OPM2_(uLe7r>f&E-e3_#SBk zH4)mwkST_SCUA;ch8y>Ii-{r;##`_Tu4;*84qxShac&V@2Uot0DNrtq*smjEpI|Nu z0(}{3jX1}~)Wnl{jfxwJZ$TSsPe5 zxjf}ks@-24h}1>X<9r%uPKWp+Q9>ZzTOA3BEf9h54uJUZO}F;6%wmGswmvCHxN2sGf8) zWy#c3^EP{Nv_=_(v%B27dwkblv3pkYHW!|E;qF21DJ4?(+&z9Uciug1NkWS)V)1PM zuiHR=%EcQfe0}={3QHGnv9Lt8z5m^N$d7yK9`cmvKfi~B?|sew$)`m7z57Q7a_7Cn zuxbeq^%=o6Kb0lNHEZ|(ZvG=PF5WusRTj;Q_>L=Cz;oQIY$N}>_lk`9Ui-xFu75AT zkyK@y7nl8yf1I5WSy7Qj@M&ILekRX@`ziJ$#}*Bo;pG&Qv1REPv5zdawDe~0}na;wspmIvUxXEs= z-ZE`u{yx!S|Q9z@!G_U=v(m!k*-mk*$!Txu?k`rzG$$J^C33n+_ zGiUE%UQkmd_R~gsHN_pz-is&+;~Y{cA~!EX*66HY&k!iSs0aCc;JvzNa3JP^= zQ0+(JfOss(h$Yg6u0%Eq#7x@p_jh(il2*BN7C;SJGVsu~;gLn;@}^`7q)eSy+Gar= z$kt_^?w^ldEB*+KkSGz>7WglFh{FX^;nE!>VuwuG?I7eFb_|G=9575r3{1o1POllv z3`9gUk=Z&JZv^QS4>a~xGCg7H%vOjd{MoK!&0L;8spn-@y=tNdAj%D2=z~$eTEE4e zt09$!i;S~`cF8eugfw>Hprg!6Ce^@0JNCe2(MUER01pmlmMsZjAL~K7MZ4+<-@(oG zbPx~F&>00socU*QldvSJhrxyW(E?DUQ$*>*y?cdgAGs45iR@3=vn=vBaYb-93*b1h zqUDS({tP{OB1Ef#(-Z^v0-Pl4f zb6a)~7b8ZDe9)z4-m_*O6^tSuYbiO$b#4i zNIaSj7PMLJ4kHQ^w?_lUaU%Q|XRw%#PeV-j#?h+dnpLyMc$m+eiwJw5ed- zjj4S}Y>UH52}jrb!MY12R7Jv57=X?=8j!TTcSj9Ua62=|IFxh}m>0GcLVxM`)w352 zSCKoVu-}a~GAfEezdoT8$uR8AFzMKGFJk{8(G|MHQ33iBWJZArIWQn+Jkm6ZxE$Z0 ztTgoGZPDO~6rnNj32S0Hk;)w!f@g(9g7H6GmIQ~*z-}#8o0`5|*@E~*ien6@#l@?M zGACH*N&UHkNEJ@AqdWFP@@R3+lTO};58vQ;u#!a$bzmzR<-jDZNQ`Cg8A3mq`~rK^ z{2aiN0B6V?H9nR1L7@ZWRRGNcYPihGs3|a+tVbZDmRRE^>Zom+0_F``uvORF%dn`Q znw>7wFgyO3TCwbWLmmPqSZ)HgSjX4Rk+huRzA$+h(UulLm;0AXA^{PNE|XIfMl@db z1S}WML7S&l2Ul*so4N*DryRQ4?Q~t+~GqIY0xBvnOMi^c8VeN-J_nFVkn_?bk*8FuHCcz{o%AU(7^2`@8*X3?OKZ-B&SBDIzVHBNCElN_baer% zZ6*bE#>Z&Fm~{8>VQOrY?P@=-xm_i9S>d)dWQ3g0gzVWwUhqRg)CoO)4nt|Zcaz-O z_;h}95^7mE8)A3T34-X)XG*$ZpNi=52yqc!JFfYT4+^LPwfPcQ00uWFjNot-`^Ef9VCG zdRDE4a=^4nCTAgB+$P-jQuE%=vNlJpRkrlo^?r7J%nUKwgIA&_tv zy%JP*KQO?@OxyvKTZ7Hsy{^b05SIb1Nq>q0(ccAC1jN)4d4C|vNWT_*QW)1kiqe*18n`U#kfRMC6@a=IEJ@#Z$A45^pQf_~r( z4~VkS7WITl+z|0t(}uayUjA{VJgvZit$5VECZo?*an>CQqt0nNJ19~RL$Sj7Av0cN zY`tSCg9EUHhr&rsgM6pJL4venz(Y6$zk}K_>nS(n39wG|jLAqxFnPTN9#L1G@lS~B z=tVn0Ln!tm$WE5^SF1Xx)Y6BcyeG5b6KAW$RTGfraheZ?FKBHLjGGkNlFVJAjf?nN zBc?b5$ctEXu5+m*?I9}4*4ibo;Ht@u9FjwuJ!aa2rBLFp(os++_2e$2GPyEPltfwv zArsaEHXg7YWjTO}1GhkhId)UE&87(7kcD(PA+05=b@KPx3hn!My_daQWcelRV3Pmt3s1B&iWws z&FmbsbS9EHX$HiRl3lErWT%Q2Zg|Cm`spX8G?fF)Vj2cMV~nX7RjmTq%6JsWURZ#G zzsps&051_RC4s<8509WjF<9s4t`PCmiTgxh<_;23l5C&1C13^FuP!W34L4--OpI&)VB$bI&qU>CAZtgnlo-aHaUj^O z1PM_VMK}Vd{K(O7-p!i;V8()Q;@d|Mp{$yqbu;MAi7+vN-cXfY8h2nzj~QghEegWN zRaX+s?i^7nTy`0Vs^u2tQHI4BHZYlkT);OEXu~RGi0^iwmS%?sw69qwE+&=?*srKu zg9Ic|pADc64}nKCMKU56iF?$(lpCK29y5Vwa6PjZoWB6nfxai$X>_2>Rmt#P_9Od` ztvPX>fbm9*C#e-4$&!v!8oWCITGx>7IJ+_R6dNm;-3IV-7@%vyz`_j0K}Sy!HujSD7HK&^xyXmG;m$AOHsF8G zIA%{RbyJ0wqG(p83d3y5$`j6!#hiOjO@;GTflXkOvB-=jg4d{!b3MF~DXYgozaRAV zSN^8oEL)?~0S4eV$OB>i2K+i0K}dWJLU|WA!$!)1o%J~@6yBUdq{KUgn#K9Q70 z^#yr8BgS@`3QKD_H{B$Eb9>tzF~lao-ZO^pE#{2MO+uK#ZhvIAivW$l23pBj_|!ff zlkTF7-nBea$inVUPApH#VR4=f%QWt)AHO?#x3L@TZ|rTKM7ukG-;PS}A6vA#Sn-(w zMn#=+vn35LW(LBRRhSRPUJm<0iQBUaB_Cf4lRlCxDqdmBS|AGZhvAwoTq8NLn0igu z^0LpTASuqgM#pQqcz}Z;xI1FWg>GS@kRzdv+Nyb1c3I|9F0Lz|BIzXVm{%FYsINwu zKx7c>Ero3oJk2M`q?N)C#a4|KCfl-9eJ+rZlo;LPI(Zl{)cQr6Bh1K}PTt+ECHeha zC3W6&Mm|sSI~d;4t=RN24ezc;J<;?q1J5NNEW9BD9BVQVjU!M=a_Z~^COSoo7Cf5t z{R(**iQsU;Z5)UkcmP0XwlDC79#bgu*foqQ$Q_d&nTFECOku*Lc-?OYHIomd;+}TgHse3M6bca$MG*%G0YXmdbwfE zZR1V!Hy7jaaIIRsy1J^IVw`CGeAMjGt5iYrRjIkrZ(F^}u+1w-aZ{97j)*h{!qb?C z!+0xMd04@XybI)6N}%m(vj+=udRFj4xUT3P?%clumQY3N08YP&$vZEUf)uDE^-^`f zWjt4XPfp(!z$zW$iU=oSFj8hnso)fTn0EIX05S)nnMZvWuW(i>BY=ttY1 zAw)Ykqlci0!PTb3$!)0RiarLKa)=A*^-%~n<4s9n$;!L8lJj}8eWao@bf`LPFr5ZH zCtNVck|^`ZC7y~$ZI`Y{4H3Up07O5b zr@6W5&1~YD*^goja*Y6UvE=wgYkLz?wY6wNQkdzP>oVtn`)5x*IxOIa;L)ND6THol z+sMX*c{tEYVObas^YF62sbt%vSgb1dqfTX>nf*2;kVLX0la@25B5UT+$DPLExtg6b zl+eqj(sj2)kU6opA&w@S@+dW^?l#E>xKy`8;nItUSYVrJs3)KTd7sMlW9o*_MHKIyhT zNBF5b0ug_1buZg7^L-{>`ry4NRVY`T{)2_e81WbtxhbXcGql-Hr}$_l!>H0a??jbh z_rbyv{ykWbN*8d&p$`5;{J&hLfNK@`)YkOz&%^kfoea+- zeBhoseGnEI_E|zc!^fw+As)+T_;`%;Xn2l40HS=?x6R9TXHW(I?zHf_c^Op_hNpxt zubKcuMLxsFpO=RHC5S(;z@rJ27y-b*UHt838~D7`>$E#4fjhOvysp69pnf;=4bf0r_k&Xn)*F_i*uo^kCZe~^CapPh;P9FA*I-g}@f6bw*z&&cUwKR^cjrzKp~os-q`j4T9Wu z);Wizpn%v`pFDX2I|{Ytn~mIv#K0oABZpFdqtk{g+Ca2ZA`<^MMb)+}L#9Ys_o}_q zKO3-P3t+fet<)-YKG?X#MKq(EZTRw#4g9i;NGv|yg+hh!$cvl@)R zT+qGth}W#1?YS&=Nc0aTvxwlOGaLeFLpnw>cSs!($gyTOf-Z{u`J+fz`+etQ$E$!M z>_Z9SVO-HVdz_DOFlepXDaI_(qnh1VMo= zo@Ax+tWtxP4|^!BYm_z_R84m*lrQU(%7?-8BD@z1yOX7g^YWru_O_< z(U;-eIPUb$kH^?jeW#wr5?73Ebqh1So*6F@)7zRG0MSeX>;FyRJ61hJq-rBsdy8xjZBoCT2f;xYNfR7}tquBN`Zv zf-Yi8=ZovZFi}o01m5eSU~okc*xn#M9v_DBJWmhhxQc#)$KVyS|%X zxiIRdmD=;lat&#rYn2)zvE|~V2(AjYpNEYsFJt21r+M;3j=N+0Zp(WchmioVU2HXp zRj#D#pe%De`qFFuj2QQ56@j-M;MiIOYT?GX#?<~$^g&g4j}27kxXguFTwbiN&j0#~ z1_gASMS%wkAW&eJ6@4t5nczzMUf2EO7F*W_Kquxo{Lmt<2f!~XX}J=v7H@roMFlBv z;Nbp}akg&D1XYc)yQ+5p z5IRI=1UFs}84fn7B$U5nH|yL>$@_J1X8L~$D;>`KVr@~srL(s;SQB*VSGgydcnnAi zAb=JB$7-HKzi|=!LLlADv{4~u>GY=oPDmcMsqh{bYMoXi&808}%I}(2n3H|ECs-MP zX$<*AtqaetElmPdbiX% z()GaDg?!;4I1$T792Z+b$*LBWZ7@+W#&IzmI~Yp?$NU8-BL<^VkvQG3uH<6pfJEBK zj>smVau5k;l^~`wJ~Nefhr5OKOk~3Au(-fWcowq#H~_y@`lvud@u()_+=)UlNm4w zLo%uRy6FFs)T5r`7`%oVp*G|9#V4wYB@~p6>>(^p#w{}TiDnh0f<*U&n_v0KX zc$HwhZT92t{3{?0ZawM0ib#RyJ~a{V(O%c?!23F9Jfr@6B^h5+G#c;@h(X`jE~6$oE$!m>Hf>pL zt>sf-^2fB{U$NYNv4KE<#RL=zmUl?#{?uttt}fP6U*XcI$p5HlSjIf4E3)HQ2^-NQ zP-VuzJ#HP?%Y96SRD>)6QM-RFsN$Pjp9Xu^8Bjryk7%JofIQ0hi+u=b742#h_Yt*$ zpn^I?3k(9`ArMEgMyjC-gOd_`kC#XCjxl^?MWQ6haOJmbO#!Z`hBg(%BCq+TI2B=4 zPVy4&;6}|o6mFSx$5^EToR$``@so8KSjzPl!XVqrnw@uAO9O`}Z`?rAcIB{Gx*p;8r>~Z8G}4vA4TUSjeUd1nji`@8Z_Sfr;90 z-mFA#cK-S9Ef;le+NRP8D>2mD7!3qQ&9Wp1H$vDAXEKI6wfd&>`E9Uq3fs+*G7+-p z%ndFOV0Q%sZam1biIBiWWn72zg|jED9^wblkHIz;A1r<=nFwDf30a2$ZP5J`HzdLh zEd-<`C<=^6JF|g0Ney*LJ@Hy!XY3w$F{B)jSY7Irl077M165N_DsR^f<1$)65wnwu zwjrmDgOlzg3^Bq~v~%TPZq1AN44~hCXcUi>Dlb0Nz87QV-hW46J%A8bn%yzJ+t^ct1HEF~ahD1@`Y0GMreX8>*0ja6 zdgNr}0M#OGv4S8QI3QkMp7Mz8dNhWMUfyt_FuL(z2*G@at1!vd=P|_GBNIFnU(2wC z;uZonP=K%#lsZJ%G8NqrW%*l}FTYe^4(XNWJ^!`s5z;Lgbx72yt~djxS~%Gf;b#~> z21jAr)Lq>jbsze4X?!s9u3%?zgv4YS8r#8ya18^u&wA}uG^9=itVQ&x(po%PSgJ5HDgVOG(+3s8>YjsR$=_)?`*clhR5nNe z>&9o}=vVfUfiBlH0I{0NUTG(5H6XYSr}oMX1WL(7Bc`H$G1$L+`Pdi7gi|;Yj1y3t zY_8KE0!=Y0h1$y(kJE9WJvWkDo1Sc$dk6fYnQ1#{&sKLCP@O&Mf~F;Ffg5wZ2K?|) zbUmcgc%_Ke=_7Kj1KcWT?{v^c5M^eu#yEMGebB~CZtq6%d9sfR?<(~TOrWq^{K^XV zl1+j?qMG2b-$QHPoW0=xUPXe#1$g=t6^ikcZwjVQM(bCJp?fJbi%Or4``OY{3N8Cm zt3XmMq%>zzrKJ2xnk3Yc`-G-5nV`y$%4N)iBnApn7E(<`V9L10Mfg^`p(d~2CIwMB zgJ5s9S*t@LWY3>I(`Pb{xj|op*z9GY$mGhX$Sa!Bytd)z!!frzpYmhNinFRuT2GE7 zr&5QrD?VIWio84?EiL&@iXp=tX|v2h2EB(;dZv3L47JB0Fx0AQ1KbvCY7@eq86i_I zSf-AH&V3>HDhI;i*=d-h%}*pw>qjT>+{SO_TP^2JpSr|fJ1fQn&YBeL_-_WIH$Y69 zXUo&%`w!+E@vHHn1o1RCd65)=KmiWG1)HKlfCUcKB#)7e4^*h2K|RJ40?iS+v@ly6 zGxi&n4&NC0<613Oi1{BT3%w%x8G{sl{7M(5{`eJ~$zxn|%A|H{xF2WK9HuSm%80R7 z4nIjSWU%R57f?<~TXmKsWdyQ~5Kck(yPDcu^f=J7m3-p5?0zd)K2hns@uNbENCTv$ zA_AC`kqueYBuHYFmQ(H=w|6KasX0Oh7`MNzgTSust_wn94VV8aqg^U3pi~K3xODBr-io~*@`qb{i z_@UXojI$VCxPns2JWwA>A4&l|6WjhDu>}HhKq3=v0_om%fNqheayo%wbVw2xuMf@; zW+QV6aVCY&#Ab20y-R31 z0$q)c4aNI%k+4!tsnY)j{5NmeS8V{e;qHX~bc!nY(k;Pf_e6bE2@(H;AsC3ue**LU zWRds}B5nPCc>hPBnV)|llKGu6$&cLDAk2+>Ol~kEB)*xc8|*Hv+=1d(MM%mPG&xMh zKwk0Rk)seIB)LUQxPtNJKBAR)fqw@=(vCy7&HA#3jqqcy{|Dlj_9a|7BO|892eS&S zh($)#V6*G2Ee`|HRXMYn7<|V$e*Ir#(x$XFlYawTXE3|5MrMdOXZ+_*d;hW2$SQaP zq&!SH)-+CIBH#>OBTXwA%#i_@1aj2)k03hJ`!k38bT)KNm6gfRd>A))Nc@xUwq(Z8cpIbiI5_VWpl|fjl zmNUYg?#mq3h5BEixCFZeRm2Sm?Z_K-*gxzrIv7>H?=_@WcaWI9%CoX?MCwt2aeit5 z!-o=m+|bKhC;$rIEr3A*;gKUpJpx7JV|t#}MLclYt$&3GZD(PL;BJ$;LYKl4+b)Wh z4!N`f&Z{ym7;Ed>Knzhb7BwE>m8A+SF_rOPmq&j#5zK48Il5Zp__XgCC#Mm$>axo? zOAn^gg{6csxe~BKOBoOJo*^8X@#&0R9!W+MIsIwTncQ)O9kmUY3jo zkaa8t2SAO(18%)ksg@8x;vcxqvvp-v=yuK4rS%r)>a#6KNQoS6V16V`v*jF8fLj2r zpj$|c=@5K4$cGPz@W@VETE|LUBJxya(dYv$moMLYD1cDNIztaF(=_h^UiQD7&c0NU^-*fsRr zGZLoCnMwFUSoyefVs?AjWRL6AL=+p3O}G#ZixlC(Q92nb2oH_l zNV(LpFOrx}I)epSqAXhn7$n#b?4yTTQ=eoekS|$04}`9|R;d6=r`9HaPqyew6}Km< zi)&GSXqz5z6rJ!sTpz}+yYq&7$hQIj+WQ5W1gqp)F*2c(&(RFum7_<#)NW{t3X5S< zz7Qv9+O#jy!vfL>>L%v6s*cL&{I@b#|H^31arSA3TAfrVzfA%X6bTE_A+~_js^OmJ z070ag)XC=W0zF7oh`mbWNQ;EdfJ$-x8bw1C4jvHwjV4Kq59;6++>r$>>Rv>g zH7E!h79kc}96W_F!90JMAW%U_nx|_H_~ED&OYbo*z+37}ADg_^p#=zk*AZf^!|`D= z+y`nH9coM;8(I%WM!dSyxE_{mL2qsx5ak;Ot1RJ*k^w80wi>RPKPXVVP7^30yzWbO zeZ%(Lv4vU9@qkFgaAl!s*^ntdS5l`osz3qFOe#YIJ-mXESOJA>0S2nD3DN@;2Cr=+ zHJ_Y5iQ72d1ylA2N561Gh~x1%Va0SY$T{P-l^lbVGh~?%X+q2(9tIFUbhN=RCwv#| zu#7xOIoad{0lV!+2oXT3uu{s`-PWCGr%2uwahUBCs{v`)SSlV_=}M7=Bx4jxlPfh% z6w=9QH5@|V^c<8ZZgNy}$g;63Lj}>Q!_a$j zmxfw=NES6oEADRLsSYHt1aHA7F&7#d#64SLk)8?ku6)DZvja5vIl?nHAK~MandU&5 z9qkWgBoH!JTBSfShTD>iT5w!W=7^uj_D2O=paf*Jk%L)rRQr0i1 z;)4{uGJwUh1Eo@#5S4d`3Wx6+(mx8=W;P7uXatyotoG0VESNF{J437y4n6}_sS49$ ze^)dmz9WOim0@8(%kYF6kY*O(CY102Ki52YbL?_1pvVNTkYlMu>N3^UU#Bu2zIGH| zt7gc#JQ5fRwzY*e!U;#B{ssyQcNVyj;CP$U$kbMGWX@dZPA@6RJSkw77Noj#BAe3g z~x{XQ;ZKMASIJ3)(#TL_BK4>8XNG#jO z0yluMjt9#b#y6som;zHi7Ldp|j7r*&zZH_XR;pGRVg=hnN(DXX6pHz+2xaNn5-}!} zpo6ZJPzRU`YWgjxD1TaKg3RBROAvXRYo!G@{e{vivgc>3iynS#B(e!98D!!{N8pu^ z+ow*|MNBx(h8$7va9(5|>h7XH=smwkMvy9H65oC&cz& zYcB}wwSCR|^{$1*=w_^~=! z(6hf5FCJa5EvAB(qZ_XxM_SqIdK)@ubHuy{8{;y~RMO!b2Q%Z{%CvVJ&sKCW#Enj}-`tlj=W*JDec)qt{n@IGm$uMMxfLy!7QuQhtSin46ahgrQJ-I! zc(z>dY^C6tn=+xqaWBi@Ij}lEmib}hRP+dtB$NVzg9vkKfL0E(=C6`Mf(JyJ8!Frb zIR!W@&oSlj(ZB0p3)SQoHk;YlkvoXyT+Knw6g9Yf4DslckE4yH|G^atOTR2ewWXJf z(ZXU>m0M5NWgl~(>oVMw)F1yJsDm0P|6$=n^~3rJ?8vrl6())SNTvHlNWXy4*2PIw z+9n5OxSwLpvRl_XlwG+;+10z26$}t`N;ipOI`JUI^Z;YHz4YbeCei(cx4|Ys44;68 z`$Ma`Z4&OxXWU+>XxoA`jCim1#|p*uO(P((x2;WX9QO7Q`)OVX-;7FbAXaJhPL)=) zr(Z2gaaoM-x}sf4DX;I1`Ue{#;~m?n9{4Q*o3YEQ;Y7bRav}b(qy~E1wy1(meD&w( zDWuWk%JYEJdT|v1ZaA zL0F`{-aoc9Bk%f1CNxT#-G9E_)CT7>1(_38aLtK5)pT9Zo$vO zTit|lYD?VrB8#p^>6|L!+>MiCZT7D?se{W1nw7!mToOxEMM`^R=c`Wa9OF(OCkJsL zuN*Ywk4Yt!ezGGX-W$wc7gB-5-k}k7#_y5COZ;oWfPY1f>cXkw=pV_9EToKo3BCfc zd`gh~-6l`$lw=IZ{R34rDT5t2^QBI`pc{58`5^Ar2LUWNjO~RSe;}g)cxJ#ExWk)W z1l~9g27+l>0`CuYLVSlU=nxe6!I%X4WkM0u`g0ArjBsMChD=Aq6D`eIoCa;&c^aC{ zM>s4hI_yo@75m<%HpEb%&NSb%;B1k#kra**)#fRv?3Plo4Sy zJ%c31BveB&RRBo0^CC47BN?DIjn`XiupUZwag%;&jh8keqdu%bhiHO}Yj80*WNg`C z>3I+Hu$iT5_EFXBSqPzb6e4+yMSQT}5T3&6eIS9%&`Zw!S!H#|xzJV4SGWszjn>N; zEalualD|SHn2*?umeD8TKZN=QqZuzC!9ZdpnYYX#-d4(dPkQwRV;hi8$R7^{99b=e z3T*)sK>*}^#8j?A&Sh_DA}egcyZ2Mv9^z!{c$Vj0jRnJXanVjK{lOwop+aHApyHpI zM&>;v4kQ}j=m@)^+HYl$(yRCV51psg1T1bzt~~6AF|$@9qkRX?K-}@7c}#V-ES1q4 z92lVEU3SOo#ut><-0EA@=i>CTv-06X*gZ-o3IU=tDLa^IE?Wa!m>c=6qyz*Nw>bqoDa*3c!YWzH z_HvbjT8@*ICWHmeKKQC$nvfGRW6`}hXSoU~57IopL*7DulJk z$ISF@&2rc@&Jo>&WyISVcn##7v2epB?EX1~H0 z%xq#a5y~crfdl`8t1=AR*`^fDHC?{C?F1o>NZAxQXvtA2BbTjj0^n!v*_=r#{)~t* zoi4a_A*nD*VT9s7X_D2nNmxxum>kW@n2gNGncGfXMtWQ>OLO7+qu-Y?IUU>$(raq4 z-^|R!8d{0Pk2RxZwt*ioOT@hWr*a@yRyb-N`wOxlhnb9V!--y2XO~S2x3|S7|5H<> z1b>)Mm-#_)8-m>Elg33#J(tH96-o2c45zNDPu+`qSSHiHo}3_iouyyS^eDCtEao|w z2b2Cf%NHI6y*Q&8IUzk_ym~ZDap}BdNLX@SS_u%{(suc&{#E(gp{oY_qi zv$z)(OWA^*3PN@UIK^>MA8x9_tsG2w+B`!;3PY|94dVqsPOn8W;id@EFc~H2ohzKk zWg;LN1X#67;*Hg_C4-O4vIbjjW1F8QY{oQjbsffpq%X)mD`{X;e1DM3pxZ#pk)~=^ z_x+S?%LuOQ4!|zYBe9!bOR8$gyR53>6;fB9UAqHb#5_3rNIsw>Jn^{{EtT{d?+l%i zjG4uG_zKf-85nP=m1bj>u54karefC4^Qo90ER;%?aZv(3sgG>PW=W|A;eI*78Db;@ z^S3i8IG9>=N}l$4*@i)G-%ekl!!X-YDZe1HUNaINBXw~dsoHDNv1B|xVK^{xRip#x z@VFU`flt!u4x%xUFZ$B}sZ4mzkjuAu0o?+=O1(f*vK?I_$$yX&SsJdL(74&>?heqI z+k`nXbpmXhTFqBwMMj4&Dm7#>ei0o%so;Mn4h?yv1RJh>DVdg`J%&l{!B;+EOz0VB z>zR{UhW@-#UuHUI*V5$>TVIALX?s^HwKcS8H%Yc}n^p|Iie@x%xFwE+=Wztv)aN0- zkX~sFqHDiaS$-KEuT-8_0Gb{Xj*Ctkj8k_uf~|)nG+y9WdQ*T)kk69nx95L<2zda| zz#PyApdrcFPlV)fs%^B#3o;zkh1`I=-O_HohK4oxTY!OvGH`^o4B2OZ5xDRwib66_ zo}^7F{Wv+18$fZ29?M=T@y;y};dTkmO=6-XwBhO)yE5d#G?Y|T1LChq_)*D`HDd-K zS^x*qb3bLSYk&iYegX!76hG$|xWWvOs$oUzeD$=lauOxi{g&{ci5;7^R9|6nAPMjq zrVlQ@@PUbS`6Q(ZcO{)lAThr$nRW`wuS%<3d%0Mz;s26X+tfdA=A{%0ATq6XCe>O- z_bV&_>9Sa#EGmtRfeJPX1h=-GE$x&=7*W(#@&z)g=qHx-7x6vh#X%BCD@mD{6EtiI z`qcfVydnS{GJhP6H#9j$~F#UN-RugL; zmUTccTQC(=@d?e>i~@TH|3lsTKWD+W^>CrEG)y>u!T-bFyKcpiC3(J|l~3VWwR%7| z0+5uqI+|{TP!?U1Pyx#7T#Q-^K}d>9AQ%Fq)HI{_I_rEp=f%$NZ)W@A9v*;{%I;ok zy1J`GxNqMV+qUg)wz;a$u0L>#zNRHa5wq)8Vtu!!RPdz9`s*n@{Hp5gOnZG&y+TzJ zAbS>-?DOf$o)212YR8hY5ngyM)z5NQsuNwJ_}ABBv)0!#P>=}koA9aI^4<;qC9X^L zHE->mjE+yC^$QYa{O)3J5D2a@^JFGtYZd~W3qib;=mc?iGC5On zgf__z0fxVxV^giGjp5iiKZUlmn`b;Pw1tH+OQe1IX^TWD%^(%_7OxNaUV3@ zeT_2l^^Cwli+-GQ3zM2AiS>f!H|PHNM~yyri|-<+P~g|+X5iHvF8N;2?fc$WafJ?u zA?keZa8fC~_uMgPmp5T4eucr6D@{e*ED@`c1pyOclwG^AD1(OPZ_*@5)m(fLCRr*n zK3My4{pm|?WL)7#D$kf!j7g@|-ikP`J$;zkJAS6tR0~vEl0o`t-+wW*kcmq za95MLZWO$>*W=5z?-fCtsehh~w>L9Q-cg^4b}rHmZd%>Th%@7CX$Ci|LBldkNP$Ko z&!yyu9pT##tm&V-4>tIR#~Z6Fk6%7sfBKhyNJ(_gj99hT?6=LfRk$5p6KO5VyE^xO zZfPbrmu~g6c=4iYVrTy1sd0Dd#`fB*xmB3>yG+i}l^GJ22Nt5k?wYp$LqlSsSBgi% zo0qq8a(1j6KKO}&1JW4?lQuTCsYZ^kgP*o3Zcx7T9XRQeNMf}n@oEVC-9nIP3gY#` zf~iSCV~F9)6sBqBO*_K?5k7MFXs1aQF!oF{4P3lBn0`*jluP(JPM_#RV5=c>ETQ!J zr^c^)g+#h@N$7;(z$YEe?U_tGl2}Z+)FKOoH!~TVGNAeSneq) zQjHQ*Wh|Oo_#bn5i?tM;B$;q3nQR`;^;l8z&#-gP=h5)GCgCAJ6ZI1lJKX(XMl3!u z3yBaeCG~2_y8cF1b60GpQiRR~FMl@uu1+mq+I&(d}w<4n@SU z3VIe3HuZTTV(EgXGPpW6$1?(1hEd98FbExt$G_~pg@A1i->m(5T#l!_qgW9LKia}A zZDpWCMvV`i=pC(kyWtYgz4`YGZZ9?7gU*@9@=q;-)x%iZZ(Ja2?zd-PF7_?1phB~F zg*1#;!FTS(O)v48FHOu(iIepTY3Y6FWUf8l zq6}*FAM4#dP7Z|>Kaw}$&%*<5o1I_=SqszjW5(gayrW;jd1z-eeQ&_Z%W>Y(e`qQr zjQ5s4O>3g;Jj-!&S8MF|3l5xH^(1I*RUgsEcc643_|K$)3 zlR+2PmuL52g;MJ-rpLcif1NhEb4KpO8POEU4q}3x26v;uOyJJu4J|ZpAI-ZjBCq#a z416Wro$AAZH*;$57mhfb7m~Z2gJ@l8|EHLr$j5~&2W^^5Lkl+j2k@Ql6h4Xh{F{(} ziZ@-zfhroT*%hx(sM+Z*qo&1PUHPjVjfci?{Kan zl;5O##ACL*C%;j5o8&f4rPOI#IuNjp{w-Ir==d^1mCS&VfA@-21u{GF{B2g7MWe+U6rz zlfF&7?2}2C=TjO1limkacIMEf3=)+O(G&8) zREyqc?@OgmIP?^auwd2?6&vBc^poL_!_!UKR3=!%t61iZOzn+%^k;>Vwiuh?Ysbx z3k1|1d@!@dEy7kY`g0Aq;T;>E_WV;K&g9I`VPhxv|L`-h7Ee)%{*WBD_y3?T=}_o7>6x+R13I*?N0+aJYM<$B((L_h>S_aE!;p zH@gRtYlpTk`t0K>ry`BPmDzfBK@eJNJ*F8ujy%G~<3V(Euq9WmOkT#ETE6}H$rx-?;(RXPkIQPzMy^2TD5NAiD|9OUE0N?Sca!Qnj z#OifdeJs%#TTIhSl9EnI*3mw_ukC`oxsQONoD7p8#XA&?(}h?}e!|D=4#NplrdfZe zJz-Wvz<~8SE-ZvV8K4`Bp^A!7d>R5%o0(&u)b?;}b~tE(A|OlbU$Wj_d8<;4X6zB6 z0oahSI5Ksul>%O>z{u=BZUN3$yC)m?lE+6{>9(Q=QHuqcz40Lg$_+BUSz{uul^C0M zmS$@C8n!NPG~FAXW9`LE2SlofPEbQ1+D%unVG|#npw&Q`7EQTBt>vvNq3fLb&`RWs!`m z$s`_Or1QJYoEd?QTF#lR*%I7j`ipONn-XG*Z>S-_>X0zg_yT(@?Y5amL~Q!$2Bt?L zr%lh#(cB35P)KcV5*-_F$|hp@!{y5~p{cJ`pAQ^W0|Sw*ItaT^oR!=8Ct4*KoI{6*(A_7T+Fr7zYa zR8&QP^+S0WcR>oC6CS!^kR(c2Vdag*^W72#<>GR%8&Bpjn#4+LM&Z2rQ4-fDFJ7oR&In9Epu{)r2lUnO?e4n~yAWrs=Ef2N zi@fib5VyC5Sb*69y?80KQylIqepKRl`BZSxL{E-(4`zn+`taS5UcOGa!Dhi1iq2yA z5P|Xq=>P>=TihQRB{2POuMp12 z%9Pr8I|a_ifwwpnB0B-(84+r__SL-TZ1&(Ea5?_N0IqI?Uj)$uIlu*jI`^WcY6vOH zO{G6gnn|;dX?CY)iD@J5O+tRhGkykNA)%ZSbmad*>t4wZtyK!3KUhK0W^~%TXYIau zDp-fS^ZxDl(9;KmMI1n9%hd*pc_I54Wih%qUxZc8!tv1?a7ZJ0lPP{2L9PPIkmz{d zk(lnNit=_c@znDL4&+EDkX5*$zA=H~XtM|1MJD-@enAJPF$I~6p! znn2Z${5r!E)eaH{SNRj@La=t`&5O*L-kEE5Qc90)alM;qmw8g`B zHw9=m+bOo+S;EN}D1-3{v0OOl!7I@SWNAF1*!u!7+4tjfPDyI zq!v*k6XLogm8g?FXY?MxRlVMsaeziw#*!qBOmoMT z=PJ#;8*x6&*FI-6O37tlM}EH^k-$pEqWwr40uAW8}QlPa*Xpza|oteU;$p!YXttltzvs0tV;b z;iGx%rjzKoXpIT>GLzaSpA1<23Yt|bD{+A8dF)8+I!E~HOj48cUwoWt1}IeazTmsH#f%N-w+ z#hMMTNM^l@5c&mhKk>ufsRfnq0`?QT{ta^?neL2@Yn?=A$N;3kA|K*v_h;@Ws%`I9 z7yRvi&oVCfG>Z0B=A?%zi=k7PCC(|rl@&a%y9`mTlriafbJP{p=gCk%JX%ne>@jrJ zi%IF%KrJXjI%j9yF3%7bZX0nYXDEvB0qHffi*6g&9#%PU>RJ|l2zOY-UE~W%f(#`Q zin2l{FQyyAelX6A-yA7)PMlOc%7qbzG3#jl&IL)c;7PNb(68A)hQDH!g+@`yNr#?k zFq-Jy57rw2qoX}YOPK&2O$cw<#i@W*%@V?$Wa^^<#@o@6|4xPR47UgP7SdzO6?c7w z?a+O{x0AtEhDl$rh^iYuWS#-mlgXHgD3~k^EHX69kJvPi^$kSU2U9@xfsA7p~cy&zss1({Bk5emU7VM#4L)*?wD37wBM3qa!eEAD_NO39K&cO z=@VdwBE7QpOpO1h2T}gOv}+51lmXgxU-Kx)cs<&qI12l>!h`^X3JT>t6gCV7zB52; zMva1yme<$%adurUBI@92lcvzs44|eLNrW97bGH?Bu!Mc3a6l5)Pz3;!Nzci|0O`Nc zW3|M|RU652;Yih(aAWMM1so<12FCHeZXQ*}&n9XNqPAIF0irvH8%qJJf! z^Yzad`{TBRrpE|P53|r@N3!?DU@&ua<>chG$qLb4U8e8AiM|qXudv_9*yOrC{Vzkc zd5!mU{WvK39PZyV;P-^~NPy7oz+V5K<;@gGgC7dYVFDy1(NOg8>8UZx>gd3rL zZSMSFyh*i~oP8$_ZKB4_bYEjQvgIKOby^(${+tN}*Zx5#uY@q~lPm^)njcC=>B!~ryZ z53G=syS_%{ICBb7%R~I$3>KdFk>rgmYt$?GmX&g6U+K}9IJm1Ngk4TuVeOx`{F8|D@Sgj}#hxJ*F~jt~}B1iMtVMIxfgmn8HN z++UqhXpM5NsYHrNOIA&Z^tJKPZD|S3TjCmo7$^(D$qF-6qLIf0@Tm#F$q9|ZgzPQh z5#v7QbT7g(P-kIKa$DdXlACq?3TC$9tJ|(k$%;ly6=Ii^j^_RQ_Y1FeA?pc&gxJ$5 z_iU-nNBdlWEkCd#-&B!Bf_qX_9&JC9te?U19bkb@&IC)T>SAo$wI`PBb_7ZBCFD{E z+Jh}6pl{-|9jeBiS$TTAm0p`ABuFcux9qd13h;OQ&>;@Y0)UqK<22P5zq%Hj0EMN4XpOg(!ARmI2-& zCqHGOE8iR^l&(d@C2g?-(n{z&S*TNLmQyIOk^?RLgr1AgYEOOb^U4N$je2UT2+Inx zk$K0=1J$fNTQ>r$p-o*h?cpJkyaV&k>>W42q0xa0-z+RGE!2`wvDr@+?F(sY*F1sfc^7=jTFS=>$oZYiwA@%^FRR8FJVVv^t9g zx_7IX>;Mpd)L(dlUF0%(I~<<+ zv2>t`KHgop*KDsndA6~+viWl#M%JmIMPHR4Kbwf zFP%tcd}B!X1GPBju@ts?oVzZAB}-Y|+QPt+UELmhQ$7y+jd`ez+*oxu1MOXpagqX_ zn1>-I*wLk{ZrdR}J*QU?5{3_x2^490czCSB8zW&!+DIyKE#I}#?r5@wx|czd08*$K z`F2FijNfM&MX(baKr4|0TXLx^D%Qx3yAIu+qFY)-V3N)tv!J?{(8+ktG>IMkDmg@{ z`p3aGCDxcl5^>b!T3}!ingY04KvjM|D2ob_NdvhH=vd~g0qlxz27tM+BIc^Vh{{Aa zuLu=xW7iy%Fea4s*a@?F;oEfF3q*>kZf!hSi*3$ex58+e&tl@RhVo3TF9pHpljJbR zQgvPv<3#ETFBs#*B} zoI{^vJ*S8YfmEo{a3hzVotf!5Nf2|bN)$ay*A_3U-S<-VSoMOFSy%Hx&wK@JK|RrL zY@!kvR3vQma#f;vircw!_E}f_#lpwJ>&wE&lW#`j!UTawnz&WeDe(Y6!_m*LBH7{*9)h%5l# zQa#Z6NTG>y;ONkv_Y)~kVNcU`ipu*7seszk;PazLl!@WjSUx+zP_R{ytR$cmM# zBk`(sfv$N=Ko&{!)Eni-2DAX6YTKfCdS}YE1CpawvL^BVr9v)$i@fq0^_83y)=T$6l#Yk4{hUXxfc#0MT#4n*pPG*aqEGbDPBO0DZCm| zceYW0bVP0-hpLVO6|a@czPrDB9KMX~+hp%p!@`|AvBi=z790AcyLB(=!5olVIa>2T zy!63YsqL8;<)1y+cyy~-+jx`{$;dhTXGG!K&%o}JVPARkJB!~e-&wr3^lkpelh5q= z(%m~b`Rp0$Ah&?y%E_r`+xS8T0|rGQhdS!DvNpUlUO1aXCVI z7uZY-kC=J^SnUNLZ`uwstZguKg%2N4EE+^BO%yrJs~bOuzTpCS!55vz!JxHS0jqK^ zcfyrjTIL;RbF;1vY@i;28|IWupCDe%5fAxBBZAgjh-K45l9AfzAKhwfSq#|4ixw@O zK^L)m)-Ub-D9!+_`EEH9T0qFg7@=qb#r zuYr5(6$BvRTM@nrEy%F`thrup>7rnlK?3ZKR5FpmegN0VD2_42av`zKabpHLdpySi}Je zf_wp{MPpIGvJ|DewcON24$gHLeAJF>XQ5cWk%4CZx<&eoPS{;b_2H~QU&v=qx45~G zqpsYocDb5j!q76!y1x#0=d@2v6OKd5hn0IC??KdrGO&p?dvX|ej@hFvvJyFq6u9@p z(S!5p6~53(-r^$(&>ntSz?9yq4zP(!C|*v(~jVcNgz1f4_A19@o{N0&p!&CAWn^ z(eEAp!%|0%Gw-g=qn4l21$M?=Giwf_tVuWXn?DlG6J(L#6{UN_IEqEj(cuDVsQH?+ z%IV^iO45A=8x`D4)6O0Xdx-M+3X}nDin0{-WNzPP zoblQ5gYmER{$T6$!vPWYdcZyp^Lx?0iwTA`{R~1OwbQUL3W$tn5Q?A(Gv0>l+iHy5Tl{u; zsfUcD=XWk8Bg<1{B+s&@BS|eRqGy-`sw*;gc2dGUafTV2Ry_&-fo?#zLjz99ZnJxW zmW(I>mR3TV(uL%OI2J`pxP^#m?W*naFeoP>2=8`OlCoXI0Af)l{*|S#muoVRiYPAy3hn0cxp= z&kQ)k`j>yO36qk0{|{(^zdS+l+jbLiW=&T>#O0;sJ4;~Vz5G!sg7fXtoyG6(e3uZh zRRpKQ(F#iwC3X#4oW!r6NLMwg2*3wbYSAU03-&9n)TE(G9O5B}YSY!FNS>;+EQ5|> zCC_ejN5CkIiEVQ)vL^L}^Vg1@nOS^2-Hz@!yBAqY!cs-1t+p?59>lI4KY%85Ky z0NVfi|LFgB;^yj`Hu2Qlzq$$h;>jQ5NuFaofAJ!!#WMk+#-PTHt6=m*QS%u!+xXmP zR&#W|v%H+YNoKXBrEf69XYs6s&Z(x;4T^`Lq#iH)dPo3Y7nikvIJ5&reZ{^th^3RM zdln{vdj>gg9ko8|vHgWMNZs#uIv2N`H@wkh1tu72tfW=5E_no;u%sZJ)r( z-daOSc`L$!>yH|BysvK;?c4P8vJS2=+(YbtjCRRLeG~OBL5pjk+|7g*%$Qv^<%T~A zuCYI@;?NaNqn*I?k-kTl1CUi8`*Ci)W%ZiYgEX=a=ZKpK2@@sZtVLsxIMUmjT0{B( z9-5x34!;dmlZ6|Mqx_nM(_bmmr`Pq{-}w;!*MT!~M8F?+K1>OEP~moQU+-Ea|O-(C&ecnofd&VIaW|#aF8J-$zV%f zUR6ZqRg$9I1LxEbB_VPi3HOxtvwOhx+fqIrHu*o;1Hu2E9 zW>)xey-+6l6QK>}?Gm~<2xQZd8&5g;n7>cQ(L2-ZhcVA2^Rw_W_ zlSaJ)*C*@v>LR;NyCU9IQ~RY&HltwOk9uLZ2E} zSd!sY_FG+5Ewl`_>yFbV>!JF% zl8G*@WiDAuS_Zm$dt|!!alAct*tvo32`6cWv0tzL^LQID8>2~(0zy?g-kVj)-hk z9Uf@!Dn^DEFS41DKwhNsaJ>_LCo^(TZyLKuqsRtM(^oftw5Y7+&AYT>B@+ij>(<_W zXjeWN*3-yCHPCz54`yMH?>G7e4XkNv&dEpVOoJ;xYb zxbJ`4J&;`p+b)&nln)-Bbob}JN>scJFsA_`G+ish@ z2FK3ZV^ne*hnU)3D-*t7n%EobLcUP@^bDCt3%*W^>hO*d zrh*uGxNFzuu005xOaRWZl0I95;jE)cu$IGB;=nO7FkQZS3d>dv5DT-mRhBJhHU zUI4fXAQ4eOq%JaF>OPBi{c;haQrkJ`vWLqV|HsK4nIAZ%GaDWrmx~Yg3DySlfqu%_ zUcyzmymaSYmy3AB!@Y7%Lb!?*soL=mWf=m>YOd|#*sVqJVnG2vE{=KFMLNk557yhI zNAjXr2JrMhOSFR>yKb~Y@(7-to{|8ASearqJ~24r<5NoVy|KVn{JM2V#2ZrZX8gcL z-~!)jjQ)s4>S6Qxv1^r zEjTIj$`^^`Fr$q^IZEF(zK6n%SJP6H(a&;-oEbn&3Ks$HL_XAn@{%F`L*qrts=s8! zNZo5s%t(sWalY^$6)|Fyv_O?lC$)DMyGa3w)Gj4O?Ndpu&7?-Xi%6|y@9Dy8`I~Pw zcOF`l*?&=7kB<99iu->GT{R4wO;^+FPo}HuM3lW5o)iJLvcr23S`?$8mT>VVXswN> ze5a@cx%dNtfS4S`0x-@XDJ}f~X1AU!|KQi;5Z4s#+QilRtPjzDJaM%teR1L%z4j2- zLVK@fCHvffI}GiU;r82;vyk$TD0^e;`m7#=fGDJCk;tWvwd=d3Z&<}m^OJ!okxV+uWr(r z?yteTt5{3(8%~7gh-~_A+v2z(jGt^vb!%%17k=>2FG%S9?4jzJ;`YMWKROyvtSNxk|x>H{&?*6(K7a} z#^>xeDQWVf$BO(_iy)qP>Z9r*?xMXw%hDN>#2U6fiFDTa=$y?7K zJlfcNvbynfdvoKlKeIO19_mm&qp%T`R(#IYYEyUhBW<;R+5_`45$!s6&jlE6HcK|? zdQLxXu0QDxEEa*b)@n?aq2BmeW!3~*hKl!D+ zkY*&r&NyzyNM(;g8_fTSWr>nsDr`ercb9o&x!DX>_9&}0S$+U&z=QXofn+|GL%nq8 zhvhpz-1&~H-tUXObEieKr2pAo`uZl6HpCNcy&WAtqmI|^ft(w>y{CH~zq&c| zYa!Um_V(IC@8b2Lb@9_^S6w$G70>+g;mY=!e?(Of)m@OgTTxy1<>Jy{@w>s&_uqeW zK^JWV7iACv_J6RfZY%85&-mb_@&fw5x}#>DH5$j@!ZzTyxP14!tAF@#G_e$yrkMfJ zzR^HP)p=vQC5TENH2c1KPUbe}8)R9!d-bpWdPYRYh+OGrX}SL^!mpe z&0z7{%QkI${YmUQMPci&X8^^9>}&yOwnpiW@rU718*%S~$xflSaV<9QCuQiuly(pH z$Pu12m}QV>$Vb1ZvwH5+IGexx{_<0{vcJy}o;3HqCrXCu(!@T@t-N}*`vJlfyFA^? zG#CmpcG2-FUq3n-j^4aI6_Pi1mT%oD$UOaZYu9bqIIN3zr*?h%>#1!p_D3@KqZ8eQ zdBK{ezcdVOD9$%JB$In4u%O%_C%pXI`r{{m z39r&uH`jG-*DuI?s_Ak9WxioyIJ-DqOeT{IsH+`40n4gV%MBY3Qgcaq66{htK8m|b zbK#T7c1_(Xu@RY_z!SUEiVkuP%Tz{D;cjjoGBJ+pWnF0WXBC(92ar*TAO6GY7p*$? z(Gv?LQ*9aC$En%?Jc_bvC?5(BBZtmLN&hOQhVYB#YdW!1wCc}z$E!mxex@i5mq?oP zkG5Zvm+ANU`MDgTMTq9gOux8P0`dv6uV6VCNGOG4vI@_u*HfS2`olHC{w{PGsLJO0 z(HBg6($&h}+`HS+&FnfM9Z_xi$oVzmu%R zCDXP8I4Um6)C%LiV?j1R_2+R_jiy6DFRZ806Q|YjN0!+-p(wxeVy_ZcR6a|AK5e!A zqSLwxueSo6RI3~w?B_Ffd8Ekl;y1(yVI9feq_i2?On8;f<+RO&CsdQhYyz3~>Yot# zJQ1q#F_X$>@{drYm5q(T$H${r8ywoHyD02tF8j)2*^*g# z37|?t=D@r-Zz-0~-#_$IbA2Hj5Avw!L8l+)Q$Jip7PcKf2Zy;reog z>*jD)s)<5|!x)2M#Sa2Rgq&l9TMPVAnFs__()T0k8}f$b&uI+d;QPbfjNDP>nILbm zTpf@>w)xXyJxkN7TQLPo|dvRgvNcPwyWrv z(GaxRdj4cS!W6CVL~gxBOgf(he+q&1KW2ZCh;ja49*f-VOFv5#IzGEj(fpOI_^QC) z-!gfN`+eLBwr@3v@>iq7$clSk%6R} zSS1GHTSYP~GeisBSIn>(QrH)F%!vVv<<<1IL*0j(S|Y)S1P1x5+@3^gh5Rq&6qhQ) z=BvgS8`)6dxegPR;rN@JOQNt5#s%NmQ&6)P$jfqJatTP9J|6KF|Bg$u2%~$tE}4pq z5_N5{CVX$xX=Z1KXwPLL%waHKDr5nee>HJ62s>+j!xh?OI=yLDo<3BH5w0#(9rhB( zC*wn#u4>il)wAdoU=w%3^GCF%ApUy~esR&u`GpJnRR+5%(K;3|ey}>v}c+5kR)|BNzF7 zs|?6nr^923?8p{hn-&%t2Omg9NU*@;3W70s8!6rQZS^88_E6E+MF(U6Vgr?bApX1d zD?V{B&Wk^@I0rhbvulgn3-FS*Xr&|F9184>^4vu$6%FXJ! ziwjtjd|ae!B;~nl=2R}N;)#sa=Yfo2ywg+WeM{=MC>P=0t07n7g%+j`p`X(q2g32}%8uZfa&UTA(dFOX5`*;GS&4yf03fRP9`k2wxfxvM>3-xlo zuGV4-@mp>BDN7i*V}rZ21*AOSsA1G(<1iE)Te>gj4ThlmLw0sRN!6jYu?)+fjP_2( zlkw}*qykt$sR>nW2(Vc=JKX2LqrJBai1&ll^({)6>3;MDQi%t9qsiUH#lbt|@zLHu zU_dcf1qo9Ed=i!y3ok^YP%0B!W5?3KK{@?&PnAvt_heAQnpldlVhCudhjy2Z)m{^Q zSG7f)CT?j>Xyzu*g!4imnZ!6DVriIwxKUi!*d9U_&G>71o3^VdcNvdQ&>i_4j6pv* zdyNbQ-XR%ll7^GluA#-dFs8hpconu}+1m;#1Y4y8`~|q9_LuDAhvPGBV)}Rqz8J4c zqvcMcWe}${it$up$=Z30j5^!q8jJuYXyX`4uTL$zV8jRXDaqwsr;8R8^Xr50DQ+uC6KXYW)aBiHwTg@u}g}80;ziU6AXKf?qSDm>I&S_+{=P<|EQ{JCML-RJ#xj( z-@Mge5x;S(8K|Gfx=3$WmR9<(H*KtQBI9u{U)_AhUV*xAgi_)<`ZwXlst~K$o1AW) z?mt3eARH=bD?g&LpMb{>eWzoBWHbX9)m{~h$vVOELi1G77&1@I>kN?lH`K4|h@M04 zDzt-G3^j_&XmXKySGENOI5fKInMjYB9QgS)yEupCVteCUvY(~!vNLQES! zi!!@Ca5<)aHf@~qi4_6DJ8lPP5$>U@rOE`j(Xo6Nrw6<;8(bQ;oj&PWT;gxni)ju6 zTbk*DPu=K^1raKI#&M+;%H%;{-1%krz_|QB-Bi(H2Cx(?=Fq!uT+GbmR9er%jFKG#Vqxaz0f=6L)FKs^^CHLVgp5-2 z(zk=ujJlScoi;9dq#6rkxrmb3%!3#AJ(=h44h z1$6)`Ke}pGk!gZyOTzQ}!R61BG2S{o*ei1#`}+lx6is@byS83L zZsSG_VgD|KNZ=^Pv59Zw%(O+l!RkL#uyAN}1o{wuwB^_IEh7Dz3~GjlSeq zO#U6#KEn?0pq7FdXTDi^HJNYs4b>ubuJiCZwdO><7n`cHuINRF)rzv%#ABZxQjh;p zmfe+ra@+7l&@#oG`Yfk=m4Malwr6HU$t76N95m)xT6Vx?KHl=S!hovxc&g3T)9NH% zn|nOo-7lhRY)K`2XXjC%XM1NlyH4jb&ccJ!BNGN4EN~;PuaVf8(62fWA_n4-ZN(%G zJNn6iiIz$#mu|w4Nl+*UF^ng?tD~%=9Zx-s*$9w+;U;Ud!o2AAYU?kZ2JuAD^ilZ1 z|0e)!NBto2ydp?gYth4S$leL1s;Ez4ETCiu(cvuDY&OZ(Cc6||g;=tHN2sg&E^xjY z|GLna5lNcAH<@sHyw*5YrH#L!`br#?p?HzqRC99a8^b z`{~NVaF&6VKV0(_Cu$YN38z0IdfF%4^U>`>iK>JGMtbu6aV)dvs~fYvdbs}6%%KLe zJ_4X?A+Gg|RS0Vb7F0J`nf=-7tkG73`1TByUQL5={pn9@n;9Nm$S)0koi*CCjrD{s zJp%^6%j1c4w3<2ZH)Oa)l7;F1>p!kV}dL^A)^Jgk)}Er zFsJmqwpaU0^Hs%}=Iv{XGnpSPU^i2P{k8&K^mDrvbT$!U%+H}f{}I&XFKa(vKw7W_ zE8Oc?$^tN+{Ln1k{+@)VmDRs&JzJ5nW|e!_wpLf3@#p^d6wWJe{;j6iU2Zl1aI3jb zE1fn>c5_I*jn^quj|~+EF==G#Ky$zH0#Ps)ByRF!Z;mFE;&T zxKBpLU70fRZ7>?+yc&}P=bny@tvTsDLE;wZV&#B|>yOpblLP46gW>R)e-Z*S@VZS> zk)YH_9Ph~opxYCf4c|&b)0gc|ZI1T^4~mi>QEicv0 zYaL!vzcRjX*(flk-Z6qHO)t6PR##gwTx@$29^5-ju(9c3D*kr0VZ`^=pFRG$cbMRN z)5BB@@oK}sC z5Bt8Z8g>Pxtyxs^O)_A&rGC~qcP(0llVEasLSCKjj8%-9hhRs^;G~31Li8|eMx{Yy zhr*NHUm=^{SN}01P|X^TP2ds~D?vK34_H@L36oY|kLhXByQkQ9g7GZYwve#7boKZ4 z;qmLPRC#*Rmgk=E?D<0tH#Xf%@E`R zq$Wkz9yCpEPW6i04l!LVFCVRWvBoF(9E!!S-aPbRrwVD$yuS^Q`Q-g*GQ`D0<|L+eTXV9@p3H=Hx-+@+axHZ}Eb9l=|) zHW~P;<7B(lgKE?JTH%-1XTm{}I>`HdpB#yU zFt1np6of$p>o@%M==@tkIylnBc3bh)JUBG zQwsk7N_)43Qx{OcK13z_zKy6Id`d`a^D3w~)oO`*Qri#x zi$b}t22yYJyQ7h9g{zkY;>k{}>CUN)xy0Y2;rkG7lDOfb4wB9Va&SSHE`}A}v7ISG z-%7hGMoY7bvtNr?>|J)8R)}_~Xx=yW^fTw)H7e&CMbnM%Q)K-0=`{1bh1FiV|I`;r zI!$X-NDr=XlNf?c`wu^y(X5MA7af(>xen}XW7gHB6`y|D;Vi1;tz~8{qR8*LQoAB3 z0#_Hv<*2gw7S-ALy_|k`NlJR&rF!Xko>+QNt&@qgfNw71>=~|TbgPx*wC)zsxf~h` zm6KZ{M6!Cz&|n~_{KAAz*BMG4V3M-!EvCzVm<@kYr!Mj3R3g%sO+M02M6B<5{dem} zJAa`$Uy~WgmF@9SC$Zyhm!kxwm1UO7f@#g&I|NqVh$q}a!ZO?Zpai^Wf&VcO7g`;sZa ztspKGNAR}ql7X>RjZ_gC^VrKJSpyly5-B(rwz&EQ?h#3G{xx|EdnY50Qqg|pbU)Pv z$pt$+4j^5<-hE7Zm>0J< ztgFpo>*9l{i`XN=*E%&~5oKoidren0QPpHJQDifV4qV_$bRX}_)n85h0a^xb(YoR5 zT@IY+o2GQ}-9+9^u)l}?WlH&SE+zZC{(Jdh>hC2Vm&;3w%sOI}X%9eL#qpQ}3BC)A;ovt8>Dz@kOf#uiqRW4r=OQ zg@P0kpdu#FcoMf1ed6SLll!Ajet}HfAj6j=oFfGX7^$axK;1j>9vDx7u(Sf&DVDbn zv~ENcuu~@B&dwTfD^Og3zOw_bemZ=wUuLk!Y`LH~@^s!YsEP|k3hTSE3bg4EkxWS^ zOoFD&%zG(wlH>uaI-2wRn$eNI^vtoH9S09X`U1#qnOd4J$dP5w3gb-34N=&HmCTtn zx=g|`7T~<$`2w1*ulb4Gg^AIgYXN$qwY%lEec>Q*&6kJ>3iN|H7{l>y#@`GxUXnJW z?IO+5CqLZR6rN86dWYDI{S!-90}BxvlB-3GB99KqwbiFsq2czbO6Ry{fg4<{%bt|3 z9i$olw^DSXO-r4p472DXT}J4zbU@`b;ZM7iqYOlpw*{7%An4Vd?ARFB(;QkEE` zqRlY#R@595ChFN`KMyCA(7)eMaJ7EM6KdExUo9Q915Z~kxx|fR*WnSR(}T@o$MV10 z&lzdgX*}b3v{oLFCw{G)lvn#9tg$~#MNKIVD^E6_r^v)8H$=DJfA_7{AXA6)_Yeji zTK2BwRY9!zN1v6&cN;X4P8;apP>)5>Ehbr-nZdqUh&HklHAH%g-uok)q~GGkpVE0f z{NU2d+9F&$BT`!y>%~5VG3vQ}H+4_jJ)Y~1CvJ$mr2gVJ8Rxc*i^L?LT!}7M3Xllb zsZu4}LuL+Ph!j*YY+rWSH~|WF`LF~C1c^ht098cYWeQgb&L3Jdw}}x}FXCiKX02Ef z^py`mNhNjhnFduPw`nQ$yxJEf+q}BrbVg~tCx~CJO928{sZOs@2(|YyRR-h=;}(U` zyFWNPJZjz!;fAU*(7%{e`S1$e_bhAQ-D5x};Oxq$)AI`@u-`?W)GT%z-@v9%iImXI z&QW`%_fGP(^;VGu6Tk}HsXjs~7*gs>CLB0#KAP-s^?S7J8Y!}c&C`FChc5qj33w;rx%)joEltM#K=^hLc z(5)FCT*>BuB^y#$bc|3Oj3DeDlU0_eTehI=a(kblc)F&#hsq(}5_GnITLsB|G?Te1j-1RsCVQ10kl3j#ZpC*B7r;1T8=LNp4x0sEIirRbzL!7!S=9|Sk%dkm3zrZ@t7RQz{YfRP(v)`KbVePIfp_ zfLSS`s^W!rABQ<2Wi~s=>7e}p{B@}WO|h{__|LF1Akg_Fv8O1jpNuJD!eDmoY3?PG zT8oFIiRH(*=~IEQK5NP$!ScU|BLB~`@#&vrOhMi%pNAJ=8)GJ~s(!1yIRDfJ97b6d z+9p?G)mOr%wD9LgwzB#o1TFcnuOMcfoP5|G13H&BXP{S~dD*WbTD&uT@wUq9E-hza z|AMl*d%FxT^wG`kCfp=dkV8ii9J3n-8KTw|El^}fsyVxRMx}PdeB3NVU=adkA*b|Y zSqXAWy1+Wg7Zz<>d7{=Jsb?QdA6FmVQgIs|1fiNt$fi&^Bjh8AI{R*V%=2tZSG^Y* z5%)TSJVf33{;Q0HG;Zi%hKJJez3`+g%&)lYIhlqiFZ2uZMIyDTGcixcs#Y;y*Q@zTx(*8O}UF9Nzq_+-L>-@VrEA^UcIG`l`h&9Y$>gttEjpJY+ z=Wg$VA&;1IzL_VECbeRl&(#C=hy@IG$k6~P#=)HO(#d* zKsbV%;dMd`Ox2nqdqstn9Xmo!O{ndN8Acm7UK#$%c2n@r*;{QUpZ5GwXU?(EChn$( z{3phO-`Oqr(NRLqk%Yi6)1w}QlL-7HhiB}in1?F2>aZ}5PgNg9i6?L1U{GKIz(dHt zxT60mO4A$4s|@`heF8DF%KaGZyR`|^b1WLpD%-^DMj6phA@T!PA}G~uA`h1R)tKJF zFD`XK4Ei8>QEot+>j%q>J#QqP10deC?8MdcXCsezKW`pTJx1NM`r*zB#PkQFH;?n`3pDM!cf0nV^gL_epJe~BLN!$I^HuxF1Bt@$cnfR-ltLz* zxC!Ob+ML}Aju!$1RRVstF-yHqm&;T4wH#REE!AOLnKX~biiUj`d%%NSZ8}jWAMn$R zM28>jt3s{Z1Y{2-Ff2TQ&_5cTxc$e7U|GfeX2GVI>_9kp4)&KyUrsbrd&M{Qv|p~; zS1a}c0@oIj#R;p?->hDJ)kaLMf~t2ecxmR>5~v`wX$ngVQ1?}#;C$(ZWY|UhN3zqk zYvno9t$y5WoHu}} zlgP`r%Zp3PQ&)q?FSWRIcRBkBr~Fc=JExf0NHaJ?Y1-ol_8^zlCh`}Vd#UzBxs24d zo8*d9Z6AVvyl@4}NsA^yqpB&$wDIrZyAs4_JFQk!^gkrN;i-IAvA9rHli%uj_E%xH zKhkAum7mIB-Eh&v>4@5W7#1?f`{0J@U~Lx%MEjk*ELJsK#E45RJHCwt?#+~m5F1{M zPtib{4iBhSHXfQ!%EdDmGO5Cy%v`=83$Sp3VnlB45q7qN59$#sq^CqNFVnImy%zUe z8ZLRY^j347kS<5028GKFM0ki!-w%}pPJ#jQ@S#egwO5$t@oKoY8~rnr(u4Y=zTNP| z*P-(2U|5gGustQuJ=e6}Q%6uz0xmxjc$sB!Wl8AmOvsdi6TgHG&s1z*2k;3h=x z+PX#vWZ`Gq)5b{3Hi1|qH>4CvY{>t^UojuaA$kLwl-jDcMm~{Xl$>w}WYf286*tzc zSR^ZYHQL`7go{2>upzL~R@v9NhLtQj{ce78UD&KL!1D5WiQ$(oUkw>?`0}N#rk@V@ z`FBG~@r22*W#w(rn|+mejap$@2U1AKYsQx|{9+r><=o8`<2`IULQ-)abtSt={n;l| z>brNlmpBEbzMCm^uLzUEr$lBl+#J0`t=V!MrzmVPv8NN0U8Z(kbd+ng$3JdMG#P?z z0VY4LBp695akeGAWLc%-(o#IMna*J_aid7Vmo1F{_HTG3C#MJ0dm5e)@YMX%KXI}2_~eH_QY8LQ z+yC@WJc7lWN^Z0U!Y2bRR1;FATdKt}Jn&}zR1D~rN6p+aD}wkMSA0=(ST`y6TV!+? zK0F++9)=+pXTy^Z z^&q=@kFck-pKKbi{BATkO=Ok}@IuK9TkU`u!oSbi!2RfyG z36O$3A7-FfD#4+RhdM@9Lyx~6gpwi%9x5;iN9O%M zNQqaB)8e;shqOaX+gz@MHGK}33-utlobWndJmJT{WqA|jAc~N?bZzT~vqRX*v@Xvj zJa$&4%IlQF96hbvWEywEBWBeGL0DY=;cfNC}@bC z$41u@_=qg6VTTkG#o2VIs1pDou=W(dD<=)yYApx3o zzR+Wupq9RS2>-(A%H@6nTrP0poq+1<(po`7m6zLK@aaRF|LNW_`7QhiQPCg=8x?TX(xKC8HNS-Ii^T>^2SYM032 z{t^7i4HCg$5W6Uta`Zt)CFaz_xRBlw%)~KWERZef+E0hP;8{Xa|};^MH9b6q9AA$*sKI)zR)OC`}N@+_0< z=93H}osi_rz^)Kmd51f?zQ;a4gX`&T-HW(hi5~eBuJ*71%nHjz8f(LI*G<5cQjG|K|g+7KT+Q5+z7xYOrJ>*3~aoU%%0LDMOj0T8VeJ1t7#`9Aq1xB=tflCTSQ51Gmabgb2gpWz3;7_#YlcJ z_p+2VMp=2b&hfm!a#U?(n?iT(M~ED7+^YG)3)}3nsHW$vnG2u|kwi?&hs@JdW(5|w z(kwH=jT?{~Th&Yw*$O_-M_JKD9N;*Q`J^Z9US6L)Q8P;{vI*|&o+D6)kl+wb1ViB3#p6-L@tpuLhwmxvMWyEXDey=nA zYKV1ZUk;#1yBkCio1aF6l+oY~w<1{HQ`VP#gMoHN9y2LvG-oM&bBP_O>0i3=7kDTk zZz5yMQ*x^q@3w4d^FV?@@dk@_XZ?#-aecK6ihhfCzHe9tPT5IZSGa|+kK~@|ex5N- zMa)?^iNZ#6qhq9*P?K5YJ(H3`*l#l(EUY8$m9Hk{GFQRHOx`_x58ug@B||n_ASEfM zdEo-8F2sEeh1`gD3h|inj(9)dzc2sS2r(Aj>YZ(5;9-eE}`t0(!&;U1yODZQBLXq#Ao&z zFg`CT*etilB$1;Zpj{of`*g2NQL0K#*}&?l6%1wR} z#nxdn!4zyJ_BS@6YDG-ufEz!}eT{b>A|>t8mTqubkc$tuBOuVBk;ccdWhu5!s|HV= zD)F`_LzOKQ1@pUR1z#DR0R?kC-2KHqJZyH~v6FT`I_oy0`GM^S0d^uRz>(vLEnSk` zdrMjtR5``yad_`B8K?->qq&vbxo2= z9VeVrnZz02h{eY1*Ied0_$XW%`j0sCj)DZ;acAvt5SPsDo+64O3CI-Rl+K}w^ey|z z9v7;b-HYvbDg~6Ofp^|n`8qk;!&0`;YzjMNZWW+}T`*fYck+1rV2D8)v%yCqnDE#v zEV8=B9A&gP0hf)&?>6oSa}!#thbm)B@cURDA`?-B4wfT}ky`t%4Tm(bS&?mxvc!ic zV3nV?>ip@jI47IGagqW3K zby~)g=Udz66q;H~dnFuIt&CkZr@@;uHWfPp8}mw@9jz_7nYh?bKM%%lRP2-7a)_!u zF@J`gBBN6rU@r6nWBFxX8|KXBfLn4Wng|o1a*Ue=0>~3Z%zSUZ3;;F#AcD;4{adaP zHNOPpLNYVk33A;?hzE&ipCs@?21Yxeu5CdjoB5PoAacsh*x?AxqQzvO19QDaM|~F| zIAu1w2gh&8wr~OpiLkW53+CdcqMrHG^!iHU*s{D(by|XGW<|LqW<`iLdrDQApfy68 zh~RO000f7>O8p#Rcuka#>aMsl*?k&=XtO_Xj3Ri5efoe-!jRl_4ChKcrJYF|)1pGE z2m-!A(If2xy6xhL~b~T>KmaSvj_;Lv4}1KlKDQmh~DFoq3>iS1r9r zJ2G4I$ZK9`jM_t+LBhe9oV_xVY(XSA)mzhy(YbKQ^OeYMHh78p*Apnp7n>;Z%7wAU zztjAk4c{W868^(ljL(-o^3FI|924*)DokrOP|RyRuP(9biY)Tatqi8>;q{C6p3()P z4!)Ou=PE#rs2Z&x!Nzf7iW3@#ciAKG1^%%oJH9LI{sVOMSeiFY4U%xc@s-+(Ej;X=FhpoMVj?NtRX6Nj`a)%$KYZjjuvnk zEuFQ8C-5?8%j((^EBA8Zi!*tG?Cm+(E^T*vuUe|mBKtADs&N~6kwoCM5 z#>5d(&Gzwpqo^y7AGe?a^34=Cz-8UR7a9eal5eL^ zdZURN@cs$%yfb_kdUR@y#whC4MEN3k!95Q`9@iF49cMdP{Tnx-H6;>IC#wE)&mr2o zs2^QFfA(x`^Y-e>*4jhW_39c21AI;nSGc=&YkTGCHh~;2cbWbrzSTtEd!Y#V>#uGm z1a0AJ&t~01%CTcs<855vn~z@{=oCPr^1NIe#BHScJko-74#Rs#^IYh(a?=C+8 z4?P|hIJxmB=|yk3BNHv9wgpMLe)$q_(D(#ng}4L1e$^dH&_ABwAKjPvhrTY>pOc>| ztH4**n~8DDAGzcI8&Y1rTe@>M>&@h3Suz;#=!Cc}l^C}b;IW$hWk7}fl2=kYC{0$F z>>{n(&P1XGMe&1oqkYwPKa?d5=_7=I;(c>@#OgMU#HYiQ{%%Boj1dsg*KvuGytgJhpK|jgWHbhY-?&P4AJ% z-=xXe&)+aLFq`-u^}>RaSt5j+WNWoZAvP^Lth2!}&+3UANea;7!Ecz^|M!1;pXc5c zU0(_{FFu-01p%~DGeLe~ZEE%8vnP0pSVE}+j!ozCFfcv)qhuV|7_4k;fHz0`Y;h> zTMKQqTfGBthaa4=GBtnxxf7BZRj4-@;QQzARAWNFh^25b;T&-xFca+4i#HV45WS)% z&3U`fMteD0e-MPhAWb?i%A|}0asM$d@%q#Z*)??23E0`O_b#6Ri|E^7H`b zfe&?hEPt~EK1eql3}oiU`Qw1Ha5`3E02vI#q^Q}aLVKMZy%+=nYl49N{n_ULtBvgE z+Dtjg9VBjsQ(@O6#EFK@7fwM{F*}KAZx+fIR|VP54lZ*Qhpk5WpuK5DXZCEr#R9@B z)B3Y7gsbcGyU&Kl&W^T7b4q**LrD+fT==Uy0G=!qd6|6$-nn}E9{bWOW53QW&TwiaBPb> zJ_duu!QfA>TVPB#1AQu=m|EC0RKPu-(RI4lyf)42XJ41|88Tk@AfQWTCs5GUU|>R= zlOTT}!Ogn`HaTwlsrY-Xja8sGcf~Gk?T9@ER zf^PSP-Db=4kopnBd-~}6e7^G~Gk@ZxS#3-GZ`sIKv#i{^y%cH`5O;R+5qa^V*4cSc z;qx|o#uq8%#O33<`E4vpN0j~fUyw^}uw@Mj@qnQhX|Q7i@~G%T%O8tWVJU`bB23F8 zTW+-nfOB{*q9lHmI)L}b9JQ$y!II>ZhnSa7hg1g8KRANLiEfL&eJ}!k!KxGSvtz7f zM;|_=hT8g;E;AK4pIEDD&4Petr(s2z9O-zHd*?|(2^=ShuqxY4`-05Sg+BVkIS8#P+@Hi56X!XrtBJWLA4o&5binv_ zUki@X(gJ~*3NE6*G~!N4?4PaIPUWuK_3gLn@%Ma?iPfu$anNJ08Fd};hxHW%@M^Y) z&vM##jStkkTwGeZtGXpA{_^N7hgV%P5r7nEIRmx&%079?^E>ytw+ckb^EbmibD$ldyQM~ zvJDI2MqZex@$ukbm)bL6rfk#L%{O7S<=4+cxlO7E)WCoeM+3Is(6}l~bXl!1SDxH9 z2j9FF)3PFCHpBTmd%Y%vhfts<0)4#k^?X^HP4<4X`QwB6<$L#THC#CARWuHKRsKp( z^NUze^^t$6!LA+n>bfs!VXw{ikf)~)G{0DZ5+zm0BTtUnB@fK+$0-EiDCPlZ?W1c8 z9MfUX;|FX-e(W=i54@+X(+^m+EcuPGQ-QSUfo%1CL)9-@gW1A+$MV|&3CM)Oh_*4NlO#Ge7Z_zoRB@6`@jf#y+Hg#R{P(8lE*OTkMVG~`U7;4Ng z&7^C5)R40EWD^QhC-M}eza#&8i+pAgA@CoZobH{SG6HPgAWN7@y(Ac31q9rhtWM6< zjw;e1iSO!yV(1rQ?6hJcmLo@v$t_fEay`JsPARGuQlbf_O1t~b38V;GxLYlq$?WVr z#%>IHMM+YGVLix-k4i#4l)sv=lMrj;t}eh!m!=BIx|6#RbTqQlGtwRcvJ*^eAE(p?kDp`MqP zHS7NFHx=G?A}iB56_ZmBw*5rnj43{yBMnQJu9Lv19}%-``j9N?csoBP-8*&kS`C1^ zh>zkA%r{B|l2VgipCO5)WzwW~nYE_p(3&1ZTiIS6#zyPkXXiLY)ZaXD&XI!O>ECS%a!I>j`xS@?~NhI1{*NL=f}BA(g& zjc$iX6>3qe?kBH_c@^PCu{{rVPrg{5$vsrqZ}F^li!xHspM+~JF-uC1dqcY3*6%-4 z+=*o%@a*ik9VW%Iunj{Q7-~T%98exahyZYA1^=CKD)Q-U!UGp0lFKvsMipq{L0ACJ zK8w61s5C(>2ouQ+!h`g&h`D%{{!KK#-z3&bm_ix=17c}T{q!UWLPqyfm=0_|Mdir# zTKcJ6VWrk!bj$qXoG1<9Byt#t*$5{M4iZd{$79#?Ec{VtngO!Mi!Ssn#FyH>h=AtV zON1~8Ef)PL2`hnPrliG!ou zS)!v7Ziw?lM!RL3ofeF>!^F=8J0%*A)zy41YU+t^Uw#l}UU!i(+9oNVqg$kW;+qPd z>!1=$DXqoBEihi`2fj=I>LE#c*+aX~{2YbytfHdylHDYUTX`3g4fw2ej!`MBx!nfR zO=L_{1g^kN_)#Ct>TOv77S$`V`2fRbG5XH8UzCg^3M}Rv;a-N{wmFuBVaGR_7_I8{ zZRGnno}j&jE92ToDCY#X#rZliK|!mITp*3mkLJ8r*D19{;QEI_+hEZx8DJK1yxz7n zZb_D`hVE2b%cwp<43PN&drH-OA!wCfwo|__;8bG6CvfRNv@f{JcFWFUw{V`A^*w5) zWQ(%{xy!7VKG!(WKKL;0;5QZv=OI!_JL@}Voc%-_AQOq?RHv}YhU}hIonZIV*y+q1 z+L>SC?yf#~LuXx|!rBQr`Wj+S1bCQg!?#lAD*8N&g!qfJKx_FFou}4MvV~rT&#AB+ zM|;ZaI5Un@P{{!aQjs|*UTzDHmQee8u*B$!SRgf0(o8EHDEe?g;x+Mpf~6n!Brw<@ zYJio_OGR9A zVJy4G*h(WR;`O_coqMb*C;Mka6q_hwnX1$x^9r~Ep{3ecHGJ=FdUa_Qt|mD9<)hB&%J;%o_oZG{r?a}dqORs%!KAgbI>>xkz zTb1YUFHsL}THI~R*Y8{q9w7Rvj;{0kMB}H|XdV9NG?T?G;rX_3BC`xxIOcH}&A*TD zM|P@820tTyLpxe9i7l=UvZEX!k;E2a3k%X&NYgZw63I#6pKZaLGM8y0>CmNkm$qdq zb;|Jw0&KRsY&NV}#22)eU2YX?3lE9K`a!>jxMe(RLnCs-X6bEe!iRr zc(J{~dnjYi=F>yGG1SlEL`XH9u)!n5rm*bN>(jOlIHh zXCox-VfI1?xta0SW7piGkDXTaBo@1cpGBjn2UKodFLs!&`uAnJ!W<*Xo?t{ z12z$Ez4UY6mnIEOF6cTM^mbTVg#WlCTc4yZ6i8RQAnn0iQA4Sh{K|4)xV%F^OVV+M zmWg2@YLmq28Jy0j#Tk{Mt&2Y{0yr{7ZSxH&#H9Dza0DV~a0q9$t(?|$?mfP^DCi!Q zyJVTZ1_v2v`xM8?{GveYHu+`oq*?8jEY|?Dscx6UjHmQqVW3?!Evd^ajIwD;<>(!& zP&S5?v|C#k_|&!^s||z~hlsRVfv* zGMd7bS+%%t2*?PP&AjO)iIn*Zo;y9li;X31W>+q5yC-9+!ZZ@5BjsJz+ne> z%%S5wR0z8~%OIb8q}oZV&XWNWh1l}%Odiy%=I(099)|Qdxx_shRO(Ao(`9bwynFXf z$8VavUfGOV4sDm3R(Xa~6J$3RJR_mRdH4%N^7Fdkxqp^+p^;*i52bI2_axZSj>)~SUgbD$zv*|B*{IW#90VBp^H zM2c2n1(YR9>uEcXqTEOVrqihEhyoq~Kqi3O`%#}L_5p+z0oH%pamKPjf2d5+ex8#8 z_-(~RTTxy(-)_UXpdEe!p9uG(LYOWlQ-o7J@_7dgP#M4eKW&w+GOafMuT zDv=)piX9k<46u?36vUFlgZ6V!6hO?$%?Hw00u8Og$e4o6M~I9O{ARpWNBsC?1hx-N z>5RBGJ?^rDRH-_=gIO{5WKtcNM3uy>wWi~<6CyKG;9`fAn7*8FMvL)0BP|`Oi6k`rAzhnLPr##}L-QaTk5;v7DTCwVrSdpI-tB(?$+*W)b92_JBO{+uukO>6-C#t~ac;bE-7p1hXZHnIB2487{ zi&nVJ4QSp^sz{(VVME*dK|BJ_qYeyAgf~ufg{E1eGQ{=g9a+opl+O=Qylj^(F7owl zl^G(GRMkmYjHHl%S4pd)MzJ2mC|`hyUwt<{d^t&L7JI8$RKJPtvT_f}%0NAOFS+{# zRbL5f_m;ca5GiyCA&l00X=n#SQGQkpuji9Owl?$)XqHW2`AyuG-apkpiI{U1a zUX%KmJ8&k+ASQ69FRMcS-N_J*3}1quTPa~k;0h|AVw^txGLz}+H@YkV^F=A&s#DXw zEg)om&uL^b$wCC*OG`u$GjPN9jAXa1EojHIt?E_LNe=4uU5xMRU4&y}o7=ywyn%j3 zpt)4>z_AS2@`)?D;Ltu7g05n2^ap_}ZS8h8$+aaVdgLSME_NXX&Xf)*~&{6d5Yec74)`^v@aNXS$8Lpr#Br8eQ%Mw@uciK zpLjan-hGpep>_+1T%=yIlp{c?Oys&$hjNnWy;(cddcwh^{G(jH)Ga-ZdYAIapiw%j zzJVWyBmY5nLUGX;QmtJEYr*GMYTG))CT%#ct&0u(>+7)MqgLf3#KBX+} z-oo+Q<9~d8|L(U&)lct#ql?9n_%PxU5`wsA34tP8qJ6474sdj6Ao}DF^Wx+^*0DsS z1_Kcq&KNHTgD1OtCu8I`2p`2RdD@&%T6VOjGD|p=R48e5g2%)n&f&Fa7d%8?P%T+# z!enB}OkOTix_XF9|NJb%1QI~fO*X8!Ntdf?N<#|wQZ$@3WBto@zl&EpefC&CYM9flM!cJb8*#9i$_!*COq7>HD6m<-c28#>cR@l+#Y#L)T@TRP9Qsr&rH?gDxw)6YRJ= z5L~umKreKR&+NQl))k`D0oZ*Q1)gS9*YU?*f+yFg@`tkv?$}Y*{318PLWs`22xo*V z#XZ%AHryDQZO8di4hy244wbXTD^z@DEUi{7($cn_9D~AW;$Pi-`rwCDYS52bwG7vp z0M{Xs={v9{rsoY|({W*l)fsg3EiH6F%X}4Il+ zDDb9KGO7JIP@~(rwO#Em9+DV2e#0hM0Ds<+PYvv=JFQ~-HT4q7uV2pT6~5|YeUZ36 z>q=IE5*2N%EQkN+2C>J9Xd^ite$ce^@oWBFkZrO&N;Rc*#yrRbFd;xX5fIeQ>r{sP zCRSz3|Ju9bpICE%z~}2%G3XduxY+N%0_3`whXqC=K5j!(h`FK$EVk?fAO%fwXqcGX zKvXb#bA;u^Sm2paA+h@iJrBBMSQ&9x^DfDo%SSXzZamwB^gbMZ*OOv_1a3A988dUk z^b$@ir$BIFxEq$1su(#0l)Yo>hsQ9fSEB=o1eO6(YUzJsn+ za0`$1-?sg`n$kqNb6Z?Bp>d(8`BVtgFUc_Fu!_zP^ zuurlJC5DjpOs=nzZa#m5#LV-~$51kciw!d=OBPCgi^v(=9nI^M`inct9}<=K$_sFt zQ>{*=pXvdNR~a#Xs9XA^_oZ;IRk_`j4>k2Y>K$9z3jOp5Kk!7ivN@l$&vRgqawzsV#b6QZV~=)yp7l?cYFhMgPdW9($@1Z4(Bi`Mku;LZ-kfOgLg6e}7SkRl8z zbel0C+Y~bfXl7WQ_36yrkFL#++(m)ih-1huyfgB}WTKWi8Od6@i5bQ~D7(tgtPL)! zic})lg9Z`7lD2W}NQB0!NY#fj{NXq$CL&?bTQ3hLZK+2kg5fgngYqpA@o@D0`p?$`>nP1&Yf9RTx7S$eMWPUsmz`Gy7szXM!o#0 zE4A40o5-`#e9^eJt~oknV5yu=!C|D&gXka<1&E4TdJ5^ufoF!4cdB<%x=-tP3l1nz z&Kj>v;hh5jKLxAQ#BW|Ww&QNdIX+H3Qz#`|ztMqmt-3O(_K?Wnl%>X!D}ZFE+Dkd6 zzg8q#pk{a-b!XssO{N816OV*u$pAtlPeR%tk)E7x!G`!P^DUH9C`VkAYl>fyVz^u7 zTo~DPe;)&P`|71@Z5jhELl--aBezjVZJit5a}{!ilme@z&N|`nPJdQ==2)M-$HfED zz)RPeslCPWe!g;>nU*P+S6Lx-};l>|8vFR>9mOW^2$uC^6oltl}q2cwbxW-}1 zT?`sQP;gGx+leKjJCVG z1vTos13j~4M!suID5-S==TXjH9t%!gU!Vu@#er#aLJ%w9#LhbOXuPx<`VFgN-GjtD z>!aLjedH2gy7E&`95;xHwL;yi+ z4CRUFaWw5gYQRg&GeJT>hWY^EkDAX^{ZI5)|t+n0OJ@I1Qr z-!4DNs9E^c9o|2PB1a+PXcE+nzsV8+mg44R6}fdidy&v20TKituTqfIybNQR57H4P z)Yl+nvK3_Z3f>iiDqiaxs}2P-G3XltI*dQ)ZyUuUurkzLf|rE##8j!bou#MMJ8Fp` z%vv%-J@e!trWRRRC8uhqzgekv$Gt?W5%9|5&gNmDLU5&!;JEua^+p6!< z?#LwwS=`@t_urv(M+p3gdqdpkYC|s3cFi(!OlWaPDDvCbT3>5(!=HWB=?Pj#;4zW$ zf{6{b3&+Z z1`}~;zi-x}wDniVJ`rE>Pn&q?+CZvcncTUeseQSD_CHw}ODjMTkub`h=2<9B?H_Rp z9*W>uC?7t^(dHw~gvk_;{Vas`GW43ZMbMA)cXpBs{E{_Z4PT0=_KxAmnNTcHWY6(U zDIPXc5%fG~5bxKJSYaV?O|T%Go0N`^j|tAP)>&Q4A2m;GcC1F^7ILiA$Y?BEBB@#D6ZQz>%K*YxmwJ4Qd zBl8F4iGWZu6)(GyV#iWLHXj75@SqY`@f&}&;G=OD4;i_aJ9ge1m$u(Xx;#~*$p{5CgNV*Y0me~ z?E*m*-LYj#zoemcze=Z7*H{$%lSH3xP1u^BkHJpk$=icP+(Jf>w?{Wjvb<8{>UJ#C z-1sI9OUSpHWgAT=Sh67ISG7&D{sT;c9V3Q}YfO^l{)AYc( z0^u(xRd!=fQzUg}8O9>~+MlS2@MALNMQURFGp6eLoaFyzNV-mv;M$y1EnV414e1ryneXLlBzsU7jo;q2AHBxo$!H+w80fuPW$get(kL!SpWpR^phxO; zO2cTudD0lB*gWV~&9r2+n>$AE6J^R?hnm-o&}j7V*?6?|eZIiWTR#SoF5+{m5ahJ~_q zTafpuxwqpmDx3Rov7MXz5k(0eYuB%3p_>@h`5!hmw)OMf8-QaSR?U-(Q?Bvz_09}@ zjSWfnK{}IhUJJ5b=2XRKwmJtNs3;K1YjHh1BV#%Vx8*gMR^`jYA@u(ctvG`n84GkK zm0Gj$OUdWs%{gv@pbV=?Ldzz<+~^cW>PAi!+}nQ|+TlpQ{P#+ZI}s$uR7EuZFb^$| z7|lUDG7hQSnxGrT90g=L;-*59sFnWzc8(}(!6O@^QSvg(wKb}|v`Rjn(O}a1vQflkL z1u~mlc;%pi&GZ;mv^1eqjg}9d!#ZmX`>cZ4y1&Q{Y%ZTw?XVLLuj|G4A>HqF_d6Pj z$Y{;kc0OdAgT68E2z>i*ze~XHpAD$H9NqxY4|6|1d3U1a@Twj;W81CO_2g_>X{R_h zJ-YX6|0k8T?d&JzHI)28@igRKo<3?kwODX>bD%oK#CH>*aV6T>_dFnBq-i_Cgn%-~t?DBHl)UHygWb)RF<?lr>S=DGn477O?P<}vA(ZQ7 z{jT8g^`h~H^mWn@KdBy9zaB7XtC_a)PX`5@3+b zWuXwkyB>E=-*Lqx`;_>p<``SrgAr_NgMBRg5p9GU@{(Ni&u1iykH>I2ZL`qsbi#__1k6f5IN!6s#Z)3J1=7TW+-%hve#c4%2FoZvg zKV;G6ae?j!tzy4=?f&USO>I4NgkPD(5U&~wO^9FwGg&VGu)6%`r<;FefCv1){+s?k z+*8Pb{&bTTiupDjv(4sF(NG_FXOS-b<<8FL1`ijaQT`8WUVgc?wYstV^Ru%mttmYOYC-!XZ`D(Zksh3ehJzM+h>dN!Aja3>f+~*(vzdT)gzq9(+9d$6r zKmI2E!(5dZZ)s;|btO+F8a3w1!ECLq#9W5XWnS5zqGSHDefoZD^W_WQ^vCsEZ^W=a ztgWoDMVprDl=t(Cb)(e9+WOM>t54HLYjLeHtU=L7(IgLq_I_=9M`s(9*^c&Mbf#vx z>BiDu*1libS=-!DmO%Ei*l>Q@vNm3>uWqd^=gk@kBQLa}TN}C2x1&aTv9i{Ea3s4Oy*cia>(>Y9ryN&wT--`3nR{roB8so zfFd1sc|S$#(}wwM8B@@emO65!J8SDTpbzi-4NSJgR|N)ZV!d&C0*Vwql(MCP_B=@b zer>G9t06i3wQOyREn8b)z1t)+QWTRRekGEyKVH2eu~Eti=dltbkN|Vy++;Mj5w#Vs zKyQQLy6EN*mFcwEcNAmkflJXobs#?yDIIrrU0ThtUa3I?=>l4~(|Kl;mU$^mNQ%IU zAz;t$BFy;`5*|*Ncd|Frm9k-=Wb{gvcPh`pkhum;a7I@zK2Pd1HF2EL;4xUn7VMh-pd)wq$zw;ea|o73Jwyc;?C*!Sb6aLotf=HUSJM%mU! z&SUKR(er>QbH5Kz@z;q>OPc-q+1Jg)07kt8HnebdEN(+Yi7Iw&e2&J3k=5>x6rSE4 zB*2(FOUgy>ivGaAq%^S9=^JB@(%8!hHQMy7n_?H~EKI+Qz%T)Pwu0>tK>bQz^79#s z6J@;pI�i-%=c!Z6zxfbD4I;e|_FMQm4P)GKw2vYx%yua%n+&R2=i|Pp2`)@3*w# zR@%}wjSSc=PD}GgiQs((;5EkhZI))VkJ})`02DppvNt$K^YTS8l9Phmjl-c~O+v-A zB<6@-6yf3p5Rz$NPGlEdrt;EJF*9XhxJ&XDzlUjD7%%6X zF7Y@%Rpi0-oj4O?h>)d9y`otBCYZocG*iQgp(5Xc7uK8n^w)bo!~5VhZe|?HX`+=8 zvh{?{-;rvFiC`5}IovZj-M&Z|#^byOVfWwFw;PCStwtJehhGy+sdt=V`&pzf0)-AB4V?u*2~7sF=~O1=EhQL67&11|OU3v1ML=sWscHOdYbRcQnG0@e zlYM(_N$z@U@19h;hBr*Upf8r4GxL=*CF`&l3`bs@S#qfwIP#B%4A%AswrQA8uyy4w zx9v{w297!e9=owwPx*D*nJI|I{{e$wMSqoe7Q%KxZ0&wuBw zndtk286y-Zc>^NYqIeOTnfEAvv19eIG1u45YThkYp*<0{=8~Fl7@ZGahUBCXm&T_P zJ9o9V<^6?=78x0#Z~1v-h8$BMlU)w{)X=g#CJR6L`IVjD@zxRHg@HVc>}05jd%sw#kxtef72%9brQkc$F*c?Ek1L;NJO} ztRr;p(x+IjEBcNDWPVppvfY=vQ=GoRUxO%lsL;l6USwa4wmW-TfC6D$Pn0K#dqYes ziCm7(qeeMCpJLSxx?-O-WjR_T&kp@<{vHbVAK-NoWC-kKZUw%6EVYHX*DfJ-STbI2 zh!$&wBZVD==N>L)03FZltRD~;Ki$u1^W5;4117yMf2#Ddk#R$d$D`0wQ%Vb16WdF7^i-39|h$a@$3M;kA$%+-P#%ny?)&zj_veJdFkmZj;S?}GSA~B zA>WwSuSu&L?cG(TbSAmG=E_^o@8bcrLT858VD=qgEsvW4nGPpsFR;fa0&K&F^0tvy zlBC8OXu!}11cAI~J^Dl%OwzL|<1ZP8k#V4zo>E!fC~ zRN|ENr@pc3GWe*yttMY?J=fGfZEoKS59Iy4f^=4DfTwH}g7w4ANdAZEty6PAX?8Y{ z3cwZ{6PqntJTk6CL$CgADBf%9#Q57lf&j4F=%X`H=BicSvT6qLub0J+TW#o<*EZE-bbh(}Mbo zi(%b@BjQpT9)g3fn>%`8ElVVYSvw)(ODDoS4;5MK5M*R70f;@B`^42QW>}qXeW%aL8E{K%Y0Lq+p=q^FNy7mJD z!;myq_lF%hz`&$)`HA>3={DZBpg2RY5V{GsWZ=nd@H!A+o!xE^iBKb8)sQOK}(+6R9LTbtm;FWbzLk#K;->sOM(LpHX~g=`=oAo*gG@7 z#yv8b+N<8ldoXm}!02#2Blo8i5kE4^Q(sfO8`xR1!Tv=CcZC#?7|T!!Tbx}gQ@_<@ zw@m6jHErD(Rt86zE?-S+)EcYEkV=+%W$?r(I2qI=Wh9-_u8lrf>#}{Qnskfg=-~CZ z&Gk)Nf>4hI|i z4FHqH z7cEW>m=)XL`DIMBVMCsF2Dr_xt*oX!9*r>dA=GHki<5@ewy7>p4oKz5{_*x$D$Mj7 z(fpV+n{+F^SP2^7$y`~<5yo+knx4SEpe5)?)IPWDf8xV$tyXl#r`Gi4B>$Hlqi+Ft zi3__?c*!%%V&FaQTV7!!c&2oLgvt1QpbR(Y#7@!$@vMN5VFv}j$|-HRKt|XGrkcw| z2@oxG>?lY5PH@+exaD6q(s&dn?(B>8u=^uVeR`6-n1fo{jE}_+2GYH{Qq(v>bvd)J zFi9OSVATIh0_)8b0O{K--QU3R!c_wI=h|U}lnuop~tr;oS9NX=815`}NbMvD;>@&`xl`R{tt^>{-V(!J9T`Fj0YT91L#ygwm4LJds6%__v9%YGCzx=m>6suhuH zV5Wbt=O6%XIO@6$BL~XoSsT&vtuPwefi2U>v$Ki}oSpT_re9%U76U7BXm<7uD%RLZ z9tyu;louXr3}DD9cW+l9^=R^9-Jhc#d~JA?WxOn2g>W%DdmQ?`dQ7JVzH`|mkhZo4 z!pr(kB`r&~K`R)|ktXQVskm%2E{C-*)l>TSvP&Wx=FsGWK>A zmE~|s5HwwCoxIoCS+n7$UOBzU6(SJoy*Yqs#m8vRX z3?ja|XN1xVBRJe9D{)e6D)uy;dGcWa^BI1eoh{7R?U$wwYJ{O$!ho<-h?NsvG6hmY zbF>5Ik~#`~X#7p*h;)xgtA;V*8jPK)E#1r| z+qOsWPA$5=2Ip|o>KE$yGl+HZ*%%r$#w{EYG(XoSK@p^?q7heE980bJAu!R0fqj!E zFUisQdAF(Lb2A00(G5=Ns4x4q^3)Mo?DH$lGz((TPxo^nxaa@wuN+X#ku_=u@ zg^|n+X=Ukde}Y{k47Uw~nh}%6=Mz1D7Dlvib1s14#n!MJKw z!~65Rl`Y5nj%+!ja`N=xMJNva`h|82^r{b1b)g9vn_?Bixpl%L!#>w+a?{p?d`h{X zcHJ(`Y9g8In)!bw|CY>kDu!*=I;$5wkqbuW@<;U}TgHv7QNZ`+;YxR(TyhpXr9d;W zL!f})ppNvz`Gt8ZpUx3C+^}G!=b2rtNneW$BG(sl=ooa@N!$H*v?qe0_N8QVH`%jYaMsR4GE`p6pqmaIJD+fhR zohS2rfresTE>)cId&(a|Y=!o6Q0=zdzVEM zlHTi*`pvY{rktAR=81STv~DIlUw<@^^}pj>BuNo$1EY!fT%V9VA^_H(vl)6Y>V#%0 zOr~aiQCzC|5SNHBd;drmfK)xM8&XRjAci~YgBLwzX!_aj9ux}a*b&D=O4}&H|U4{$DMwQh}Qay$seaGS{UYB z^H>bw#u@{M(C4%OnJ7txT(OXF|5a{I39n37YZf~45o@@a=*2gn#CN|kV?fc%eWbiE zgJM2FKkPjkfdQJj9hJ&*L|@B~wZ(9z+B|KKVf7OYr(+_ae1)n`m`LoSGCMCF-ZaRK zSfi3GnBiV%ogAoJQ{o?Gld(w}{zZk7DT_E`%(TvakLb_UJ$cU*@v?-7l^?_wvX@3j zPw*y<-B6}c=`21KBbQh$U$QxyDMzRZ?8;gJ+p9U}20G61{TT5bH-9@Ws~3mjJUoEA zsM1|OWVO-zmNOjRQG^GL6!UkhwjS*6u2YoaIW!z532)%ZXo2v{PP(m@bl}IN-3Cyw z0(7Y4j1v}4s>zyAY?w4L^eVGJ>iU_8^r*h!DBR?ocnc@zK7MU~kltEmu&UFjF_BVS zVB}X~4tzRfm%t_3tnTIweF$K|CZl17V^gIIDNF1)c35~Vs2O(|qGr^j@Wb`9bp?`N zrl@eB6=s%Y-01|r+SnaN4-qXD$f}-U?C^mMd?yF8;~;!(o2S8){uB!+c(<7IgS`#x zPH$x+(K}~cLameSfF#fBpa;b;Mb!YnQRgzMqV)(U_XnLm^@n z-_2|S8F}MuH4@c+lKHuxKjMi*!I{;~XITQAXzc`k`nb?cOspOadd+!GjJJV>6{x1&wj%V3Wi?)|{sPqH1H`@at8Z*? zV?(*+6V&P3@7lvqp{{OiZEiVNH?8eYD)!bg>J~?An`WEF$=*a9y16WYOO^TA%14qf z8{3)`L8`4{Dm`JRd=7ChZ;Evex{@c+Tg-^~2y>aPn38X*3t`~}-IEW!)4nAspU%Vj zG)%?nahGc9W;0!5LKWo~VJ3dVMmIx(@_4Cn%_l*DArE<&4VDp*tIe9VDRhpguCB=dN z_2RT^7T6IuRMxP@ee+Ih;L~r$-%`C!p;_DzP^(v8yTlrNA-@TZLD8$&Ph2%z)BTB) z2UA>g?5_qRNs(qmkKbB(y1p%PhrU`|hCI|fGZlm&-#_<# zLQhC4GhHB{RveUTnf->N;?4HqROxQTPHo!jd^fQz^V_-Mv@O zf;SfQ`5BO=7+ABvGXMr_u8y=CIy#_~#!!st!JbHeY5O?Xd)j+L%jUCZ*xMVAKJ0CS zF`Lf12YV}hY6mwQc%g8f`mEU>G8z6{N6m-IR@8h#QpScW^}*hH_qg9|vjW%He4+$L z!%y(WIDX%J{FG>~(~IUa>I#f{tZf?g{As_BqY%KXx*g*Bi1<&A47Tw>omVV2(24KV zC3EiVa4cYo;nVb}TY!&F5h*NhT<$)SGsjnU=D5n4A1Wq#619c1i&Mj+u96kDeHDpJ zr*|%d%NX)#LdUJ}VJF|lVTbMuLal?sLiGlg1nYs2i$%PpnWq+3fo?q0nwnWhst01r ztZ$b=XmaR#X3izH=(Vi6?HwX_xwYEl63xUffcf!Y)~Fo{VQYAZEa$#~HIX)CsCAf_ zsXOEx4Q=5h#OlPlC=mAsmMI5~zS>6t*XC*W`Yq-NfK-2(iG) z(u88|KTv%or&>bu?k=cLuAV<-2HQu!b`F)p+hwn7A>M79&i z@^}OKV@cY^*RLhK0mgCQ@)}QwI{_*~i)cjuWq-+G%otwAb~j*GK?K0C4O(tZd|*7G zI}{7&)*uYZn+(-Ftg~&pxd2i4n>FjRF1D%z`78YZ$z6Gx>6PEKdZw+3cn4x69B~Zb z$CXCkf3-VHwbws>{5aF^_ZeFy*r~g2e>IA(pB*3l>-#5*-#&b>u=p?jpI5KU0r^INr$erH@7{Xv#&w%Di-r$Q7X(p=}QdC)lKR42KFJE#9;x-t=d8| zWIMg=$Ya}zO=_;leUv=6&|WZC-rW!r2t42*V6)tN-d*7ZmOeF0mWh7j9P1a_2-jn9 zrV^Ub3cL5W`>Io&6s1*!iqN4}o4j|!clR>+@@if?ydQUQ&COkFw%Cymed_W>92H%< zHu~ra$3iV1Ep1f96h?<>MAz~YKKPQYmODrL(_+qv{ORvoaEtBKO>>nx`TEDEDK(!V z9SoPIb~QG=n0D5W$8c|r)!+%sIFC?$C_|{B;NLh|XyT3FB$YT3!!86u55-3CFeh2$ zS?~o#;0_Nj(1enRvi?*Ij(W=pGY|HbBUdPob2d;oDW=8TpH zd&az}U5+6-*!%wF+6s^Agrk`~&A=A2nLja2M|s;c@ec~aeD zF9aq_iAq4wf78UWEwZkuG;(dat_UBaSLpU*v7Y#T4-PbytP&ha=}mrxfK@+Ck;LYI&x6J~+S^c&`@Dg8nel9*w_ z#2(oG2F?d9xf1{x4j~=(KM?k<8K0X<-G5i$rb*hsK5Sx0MWx`KmM20!IXmmZ_u%hG zXQrCkb=||O*;%m4e}lwbZMZ~df_NdO*}@Q4By^`mmM2w+-mw-MyRw}>qSGcj0nvl* zcYh&hPP}hs^L;1;A1oJElGKDI-xvBCAwcLvSZp~ zW-oAU*?Ei4<(s!0S1BJq>k|};$HoAC6(Y&`9$CZB&P_wS*M-lNn1a9-kvl_+6eJ}; zsO7A-L=-40K}Rj!luT0M)!8~}W}%N3JwW5w|NTINnSp3~{f9i0I5RilXzK82#n{oE zWXy(rhzUsTW~`*vRiiJ(nI*r?3>cue;7!#yI*kBMIzfl*7k~w5C=W4ZX~&WsEGL1! zE2h@Ui#Vy*7HC09Z?tQ4vaz{?S$ELA$C)V84aT>xzn*fLBg=&WVw~wIO^0Gw)9z%x zwb+@^VwR^uOz`i-y6#wDiDIl>FpB_e;Yl-Iqzw5=#H?5b1UOHmpM$O2vDODI&BZW6)YhvcT|{#ufoz8^z+N4e1&dVNJB%osD%=M6Cf|ZVAkvjj@VO;#Jz2G_LRK`2i-Rjxa z=6bb@E7bv!pMzJ`=GMyUR`vAfYImK?UWYR7E9!i?KRA0;t*mY@x4Ij;8a~d%1eDqC z$MpuAY$<$p+CTmconRg=EZ|r@RPYPWnE82%)Fi8p*_v8TF!K*`RFAx1mfS6ne*r8E zGgwr>z8yJtKx6hT35Fm9HGt_^!8Em3O7*X$zla6FD&kb%>vJW-ux}$+FhQEoG_Rdj z(H#j}-M}jAi$Tw2-Z+>*|GLoX4V##(=!d)r9C}61f=$V!h>o16A#E4hWh%yx>KJN% z9BC>6@ofcWc4Wocq;W6lS9nWDO_)-c@j4WMfon$E)NdxQqDx0KVs=UXViis#U@`c!b+k*+ff|u|5 z1mf^d3O|KQwmS2o%7^D%uP#<1Go9y?tvv*qZU9TQ*?q>90cR_F$z$MjkO#feEy6Ew zYU{tatU?cWCeQ<+27=8*sUZC&`*dPzF<$e3cu}Me!>?hIPgkL!>{v+<G52w!W7LH&PqBvAGbhx!c z%YU!qO44|>)o8YqP@|<~6|Pc=gm7755yz;A(pn1@k-O?9inO`${O4pxJMK_#3$8en zY|cx|xe7a(pTpfz2Qf|Du#Dw!a;HjDGmWuXhPwFvCe}F;ff-X;YC+TbaE3o81rQwb zaC)whoZw~V2?0S@!9WF-X3WjymMiQ+nOp!B(~ZcuiT?trhnTokX7?iy&-clk(f2gSe(3kk-kzSv93AhOVWhD)Nb{P~uTZ+BIsZDPo08Pw zQzG%{%uWZsXSCYQQpW-J|1gzPTF_^xoLVNJ*zR#Qp)^pKc+$_N!RNox{*xvIz?#!W zroA^M*aWk-Ykj#L=;8gVgSwk(q-&$lQ_Bffy2^y@Cli$+FV3b4Dv_vKEX8nd>#Uz7 zc`~bk0 zi+rl%4xk?1ck}pSHSmkQi34ErKCh9R>Zbh0+WirWzJY3wWM+(IeDiH?4*J@K`|}Tm z!ob6Vx(EyGtnNs?T|;e0iwItmLROJxu3kU~*CRM5Q7~x#06&^Nd#j`;YwSE{%H7Hy zB-Nx9Jn9k;Vo}0V)xWAh5uz@7Q%qZ^3@m&DC+T-x%m>OXJ5z0wixEFJ^e7jEp25+~ zfBUTpZt))#D&s$o`Ol8|^qWl{lN^b?&Z-yqAolm)@p4f$!5-_M`zoh4|A6o5{@*(% zGL{}sFH}10frhjhpjfwdOD6}X@C?uJv0_y;Q+M}mRDGb;F=+Q}-%1)>>VJ~< zlgiEIMq_w+Luxk4u(CzMUrE*O(!A1#P$>Ac_sdKb*8cBeyHOboY-6#EvA4bcf%8x# zM<6C(w5he3%tsK=;1@1Bv5ChZrZB87w5C4gB`gd=NTzX%HgSH7L$Y}_YV2X%{YT=Q_- z4_3NpT#tl~m>WTm`hV@;5J*bbiEvC#0S*giM=jjaLTcf6Hw)hL^=lk&sh}rltTOj>i2g7fgbkcZo2BL2x1r zaN<0Q(_7MkP0mfdA}i>K7xVGLu*<}RE_AiLw7ptUIxn4wb@56|->B~J_%EHK^X}Z8 zYDW(&EBvc!^*P_nRjV5-l?8d~b8qJZ-@N1b8+JT@+m07**ztmQT<%CL(pQFZoFkqv zSkj(O#>R7F0)*La+wFr=I*X`@p~Qjq>IA6aRZO zpFUAp2lkJ*_SyJCi{+|F@kC(omGDpTfkGBsCD6c;se@KU#HK>dV9o61c7x} zpHBA(>+nVAxMN-GAN$_^vF^&Rtq*(f&;^(!A~~y-{(*`IfN%KP#OmoOLFEJ zhnpryT$gZDW{F?Ts2c8jlAzQ`DZL~dr*_zxNq|5Rq}TrJ^o7j09Guq=0sUB%sIbS zk9n`akDN-{xdD?7@kKAj_PGSRG}NO_EBcEm&UmBi`>GehX@}oIyQ}i~l`|_SlNMxi z2@<8Kifwhi%ZN&m{mZFF8M9#2`&xH%aiR|7t23xj%B`ZqMu{+Fy1Z6T)9Q zIz(b0pmI>fk#|b3uWp`q-o5LfZ27PM{ICB!?dgeOuKJ&aNA|b<2P812o23)%Hn1t% z7pLd%NA&X0I?=!5`}hkP@9?BWPN5+6@I)Rza@?!`jPGRoJyEs;m3(OQ;N;9Ep+Coe zuW+HW)2;*^#8BTO`^^4Xc)U1msIB}pzO$|W`p>}t6VY}D|DAWIcsDm^^}vaib!LC7 ztCNoELj4UFCvv=ix;VAYL7#*n$eTy@7b{!u;2(baURIoEoxL7Psb8V#QC9N)wJoc zj$nphuuSnRc2zsrRFdGurr!S6->ZrC3vv)p#o<}funoxx6BAD_&{$OO2envM3mB3l z@htU5=$LTEoX!(3s9p*JcM%m+t3`M&+5sq!mvF%Tl_Qb2JS^{lxq4 z=|M!Zu=~w9KdH7A_dHo1S0ZiGPVYp^F!H{93gdAwS$sZKNs$>@fKf5y!kys49HH)@ zUU~ZC%hj!)>7m}gl*v2P2tibx^(cBrslaFW1X45z1Aeh^puzz@BaOufZ)c6?RGU3m(8jrxJ{k^D|aJrY{vUR3$7bqW>toN zquD2z!`vt>*ydq*TI}bIH?;03_gRje03`Nv)L=au>_!_qdWgnOq!G&PW-+Y!&cyl> z0)2wAI}>ZENN@*n7flQHfqm6UEY-HCb0-G%t!n|~%G&nM+6J!ujVY8v$GYRaX{=gp zuR6G_QfhoNW{GZ{)Ldb=3&U|cQCnWk^suf$PqrX9o1~-=2*}$hut`{)XAHMUZE9QU zMsib&65V9Qm~6`o-=y90+0#B~wlKF>tKN_JPYMec?0qY|0GDin=50KrtHLK9*U|)fZbU zb+13V#xg>e-1sV{Ro<&>6t>rW{wmO%t-{jnY0vcQIr-`J-@@Otw7L6Ao2OH(ct{)U z@8~eh@MiW!B?@FILmWm>4*RA4g|0Z!6JSl)bN|@?O~<>Gf?_5nz7sxoI+-9XUl^5I zc?HUh2%1)xwG!?oz0|F9H%e7_^`}1TING!{zBl)MTRT63cSy4zMdpS<%h7*$W5fWX zDbQ5a!u+XqLfQ^dv5Cxw|AP`MtVZ?~ew93%?xgV^!lqhAO~FIKy$1FKmnw<@4sk%f zqNB_w)_h_5EK{DR7hEy8KID)v9|!UdDf`$-gU(1AqSHvdvNWkBq_elb)~1_J>4-bG0kxtE+SQdG+X(z1#SX z%oBaTi0{a7^!;NJB0o}zjjPr8$eh5RBj$;u9h;fjfK9(cTa8Y0Wcko)9RXmvf2 zzc3b>i9h?4j&v!F9uJZcIXn{^o!rE+RQ6GY88I+|CN5*G#4ls=zKk~R%iHuq|MWcP zXJEl>NteO7PVneFKh~zN8>#F#dr~6eC6ATJ{G+d2V=J)@A>jsJsk8xkes+rq&AiG- zHR*ZyXdp+DI!r2_8;mw`qF1xT_j#%w_yoQaHzJP^L(oC5SvXGh=JWtMWnr;HL` z!Jro7OWJlzVB^EtS!7S$A9ued$MaNnv}P;x+uYyep7o)lyxl>xzEm8p|+)Fx~l}MZgQNP|X(s$Ac=a^j_9p6sseyT*ZY1<-6{U6NVU&xz?DFd&a zGaMQ7RyFIN=w1Yb`z*K`=m_Q6szB>5}?d z4SA>1fFRxGTi7ld%+7Lm&q;%+wtGvPA{VE9F5B? z61?(kQw^GO@bYa$5GESJPT9>Fejv#bBVDqc=kJPseNuUdyVO6p0>EmX7&_g@?+Vl|S+T#|MnM z2;Kwh`K}b$tw|WhG4Gm5iQp1fru#viQ*f5-8fNd{Ny2y7(Nw$r^Vs164}oDu@~N6t zea)}tM_mZ5TL;(4C~dYv0~ZVhd!?)%GLbm@@E3fPVHHDGyXKyRE;3mD&$%cONsklO z5yu@_S(?E!qhNu;hYJhykLKI3py!Y0A1-D}=MezuO59D>X3(ET1nX2^yJ}Ffh#Mf3 z`%%AeP_UH1!c91M%f*z(mR!(+fR|-gD<9zVn%yzlFA%i$&3UZx!aTchC2#hU&HVYf z(nB+gXPsa2BmI8yRvc{OV{`?$SEj(yv zQF%Crl#QgFv#8XZYF5G!y46anQpX{;Ig(GBSeA2y+j5N)qhuZVR#Qy{k)?yDwV6we zy2&7^NAJl-eJHvZFC8ILdX+>h{bK~-sn5R7(5MkC%qZzL@q?0Zmuj{&36ao3CTMPs z!ahS;#~5fh(lg5_ zth5qSvSBJkbeGohL~4SLd6l=P2dfU}bS&3ew43|qM^O-x%0RNU7^}xBY}$1h2dxCf zT{)?opba~dB}`M*Ew$++cl>-O4d^Z%kQ%#p%~~~T>rUDhBfNQrz}RE&xw(tJHBO(E zBHVV!={4)m53Ij~J{^hWJeBZ`4BjED+bN_SuOXj%g8gFl!o4PNxbOdnrN9W7>JAFQ zkzyXudZ;4ixX88}+*?O&v=EsXbU!R5X@svzbhN&TQq=S*Yy}i%twCb$8UYM~7LPKh z;bGd)iRyM}Ubsj`&;$EO>C(9DHUhOf(Dbcv?mqfp)M>H7P z%XBzPfQMfOzb3-I1~?`_<*??jH7? zX$FZ|mKwW*H9zUO;wQK8gbGmmBs69z21v99X;bwZ+|bYp9+UTer0b2rA|303)*37e zX4^+!StN73XW=G71fSL~)cjuPy~OICQk6Cm^C&tAz)KzHEjcX0!IU&TSDz#D?yNW9 zKnHAXvDZRchs9AOm7K0*2q#3v>G)c(m)P-6b?1)MpLgy+r|+U?;kv=Q#)%grr4t16 zQPYVpOlLtFOC{2BsH~ImCCHXi5$Skec?&v1n=XEq*K3S$`)MT`hw8iqheVSB4Q%Wa zmwSUA7rgh1v475XuVBG^cm6(ptoKf)tCjW6FY$Z(Y^D2wC-&bL>EXE*D~GG%O7N0@ z?Uk7Rt82Ng20s%h(#H`aEYgsI{m^W zUdtthJ1AVDge6pLBbDY~ct*KvC)VztoM$w;Q&a!{Z@ESkH~(xrqcgX+W*X-n-ESvH zN=)PJl!~?De^{yLbF1M7ZH@9Ri`tm>(DjMv3C?=bqNLK5hn{x$W=h4czPZu35jWi) zyCF@V+)=s-YvN2SiDk~^;3;hf%mnk3Wu~b|7@WU30^A zS%kXCEDxyS-QtqH_9J%w$Q9VC0l)<0%kI9?mvkT5L-6+)hDvwoMD(oY&S7GWhc53AM zE#Zp~ViS1%ngV2lvpk3?T{U;-CewVS)c>vR2;-0D|1(oUEfkhUg+H<#!H;I!(&i4v zh=yZae-`KF7Z=)+A+A3>C)0g$18che;Fuq_AKeKnAc1Qak>2h%4k-3P4Nd?TJOht>8;wD*W8#!KGCF#}hq4!)}<5v5!{3Y264`FIb2e=zhR zqq$$S_Qob_9l_e;68Kxq^-g25q3dl#2YQ3n8W1kXDOs&;Z_0G-nsMXXa48j z`ue?W!et_`F^ZB8~+=8NZ=WA7OtpgP!(}#sJMt zSCyvJ0-5x9G{m6j_=~)5!^u-C9DJ>R1#@3xVI@PvQ4N3fN({b#2k1)Eziw5{le+D) zu0Azet3%;$eHhJY2Y}sn_RWCeQ9$=;z4yz#lY8r(v;DWf@e<~nC}=bU%~zflqmh28 zQm&)~mJ3gsTaou*bcYKg*L>X|i>*Q0`#pNBMUpN0?Y`A*ztY2Uy?a0wjjW=&1@$BK z_1t|zIoefTRKgJF@P!<{*ra}{P{$K<8C$DTs_Wzi0GEacj#KtdT1sV+flGA#6(5t!%IA!7cklv$3oA6M4J>;SZftOmxz$w+lB~ozsA0PL z@E6gzc|H1&($}<;&7?A$`-8I|m8*#G2fy^g|7!4wSUJt)kz|h|d7ppK42t(na9$^m z;6KxjwO*EAc#k9Urwn!F8+=7qYrVtCwZS@R(1B+{#ci`Qg7bkAx{K7vF?yPRd>f^gI7YGSQ0qF_;&r@aO&v-Inc_Ealb#e-@yF*$H)!tOX zc5cqQ6Of?pOZON2@r%pq619?mDE1Fw!P0Ax^JoX>H+8d=5`NDo=^OON0A)sq8J~z7 zBG>x|)q*wgv=DRZWfd!gKbx3Y+OxduU0n7pc|5Sx=wLQ|-ppr`QkewcXe0DL3CKx! zVms^!K+;(2r1wg>GH6^wZzEku^-a1fQ$#$Mlb_e*HxCGJwZTTs9gF*9d;U}OXrKN> zl6i3C5xP5k0Ihm>+Q;a!o>F^(#Y!4!C@d+(+M&K5llEhLc7yC7X8>f0AI>Cef$B!b z^CZKQ-7vorb(Z)f)vXWSJSAE#VMTA2tzymFl{)mNoML37Xi(uG1x}g*)8o9JyM#Jt zlI&=IC>%~FuL$bEi;7jWnlu2JHOc9zR%9Kgga6^QmMK<(79~(f;8v;q%z*qC*Q>(5ZX^ z(Pso?m%1=vOj;2y_g?dAygEeH)$(1Gw7#JH70p@dv5!89sf{F4B#A;XR!@Wk;qiq= zQS-(~k!#8{g{={hP~qd%qqc+D>f^@`8&e>F4?oO7(qx)t{_(^AlZWDynAPv3iF=XH zu+YXG)K8`TTJdDuu3K`I-2W7HU9k~KWhX_?`*MdO+4Cm(W*U!GK8^Iuih>-@0sTem z=RQuqk=C!29&=iQ$*FcW;D5LVun7Um0`3qX9iCEYo>4w3XM&jwlfjf@B-3b(&?1gk zB92rBN};yAvUk+fs@-h@=Qq{d%mb;}^dB2o)3ZM&TEL3tPWm&~nALx+G_J;Y<=Y=j z$5zjJa&BhfK~h?0)!1if+ZG-)P<+DW{|pMZW`OYRwQle+`6JJ&l(cRa+TK2<`{Z64`j|<@Cel#Jjcla1?8}NQH$4X(8t#ko?Thm5i}KA}(@lK)qI^@b6@;_oK75n#fG^57(Qu4<|MQe@ zMxmsBa}xJO1813|QAsuv&HVS|l-WK%&g^G1`Qu2f+dTiXFn|96+BHnmmecRa|5})v z{|E4_7=M!+lf$JkP4>LhOZ zX|0pI#dwX6ZZ^~x7WE5@`h`XP!lHg*QBzU*FD&Y9SX8K!l$auIUsRZ*RhXlARXF>na{|8xEC{P7B|n%xo7=c|akXN0fldrJjfvdLJd*nqGu;ZbLkj zsxuX@F`eY01!C$Oq#cW1RmOqcU5j(Nv^XX!=1Ph_o?6+2%O6$4)t)Lfk)G$kp%nSk zJ)_7-gxTulo0HyuV2C+;dwOnua>~P}@u>p9e=M@j+;wnx)ET zmf*=Y!QBOEB&JN2OBMS(T%&ZTI0+?6wYRF^qWPV6BOOlRrQn-y=U_u=lf5#9?Q7oE zc9|Bc&Z%p!B$u|y((Euf94(cn2QrtY;5C%oW6ag#V}kfxvihalF^3 zo~>0Ap)|q1DxL~L7|=_#P+6s})#GP=rlk;GDt}pa4+CWhju9!iwYpx}n!ox+f8P7G z|C6GZ5B8q+-f%>OlFmOYAD$@w^-1+@@vPrJ>Jqe0%i`gMMLrYxY1I{~gT3Xq5FFY( zE*@FE$9?tppneLlDrmZBw?erkrNnuH`)<+BeNdlNkLqX7j{4*upj|PQ?_aL1@Myjm zBEjC1YO(&-VDw3Kzxm{8FIGHXbh+L=?$cwjx{dSWE)`oePO&xH930_}PpV=It?U=g zik0m2NEFJXi~jUz`;0UOdR|Nta$V1;Soq6ajQ2@(kC{dcsNLMMaBu@>s+>u{JD%Nw zY<{P!$dek~TG6J80W17HaLkzV5$yH;7FB}xx@RA|IJ*jOrUVPc z3-ElsVQt=$7=d*`6fn&lk{$tgEQ*>4t0`D73YiS-x<tc#crKly12tyTdEd(yw`hk4qdPWe0IM-Du*rjnt3VSSGPH3jxCm0 z?;<2c`3Oi>TaiI`(Bm5?7+2QS;{dPYGlB$uMgfl2mt(k%QK_?>*;t&<)$y*ZA1Qon zX)|n#Re%U0=7iJ8tRIYReNHN4_3q_r9(NUlykq;!BQNB|6GQoRf(D#bx1|O1hEEy= zbxRjudk=Fmh-^hmM@NQ3a|HDS30$fkS8uM`0ZCi?mV2=$# z8GWjc7O;oUwM!>2&guF6x%kz;S)b?Pemecjzn*G5mAr?0tuk%X7xX&P06>Ad!HNFb2N#y&YHS&@(a7bRAS z!o8D+;#|oukOSr-<6bYw`H4Sq(#h%VdfdoVlOIX~;)!>)JQ zRV6I;%Z9uGJ_gTOl62b(4?Y_?b>m(Gb6tP z!kOgND@pKsr`4>)1)z(xb*$%dcQ+Fa{j7XKE~;_m@=NxF!hg&)hhTO|;M+Ydd%f4( zl$h+PDzw?+S(`c21x1?aAM6D+qK@4@%;m}1bhAHaXxcl%6pAi)cis7&%Wg96@g+PZ z&hYkI%hc@-GbYn8^m@`ix#v^)$#O%gHvRr|H8V3am8aq*4tGl{iEmh0F|)B}+`(eU zEeI!p)TH{Zl)NGDAB#nvB9|*&Q_kGAcZvX}3ODZMzMS!z z3$OKWfys)&uBDDLfpm8_p*HQ13FkFp6h5pQ@ZRU@IhTQ&geS*-ni>p$x|NqPdf3;m z5xGyuf4jSzo3?s^W30*Zkeu%KLGrp}VR-rW>eOO%9j5YsMX!x+mb!;prfen&h=PXu#P@WJj(p zKly|r53jmRPYUOU`k{FZ7Zn(bH&QLvKN0nFEynzmbe3_uFVxmAgzb;B-LZs-oOX37 zLaR^lZD%mzV^H(X>A7)7__t`Q6J#YUz<2h1bg!G|XJmWa>1#gzw>1VqP-YgoTnl@~ zHM;T=&JZO3!_NA13g^B-YvwZ){m5{o4w2GyL8Y58KpL+}78eyfZi7-3J@ecqDTs7l zV(?ap&o$Mg+73LFxfv5kv?(x_AJElNh;#M%>heyrE@}+2b$$|Ktp3v7Ck3YML~}a6 ziR@^uEy~hC+R`s8t(i;_nY9pyc@y@rE`y$V!kap^cxfbO7}vWe=b1UY$+$lu;q^a` z8FQ3~>AAJxQu8;?yTw+D@xb~KKN*JsB#v9jlO5A&lflvz%Y>Z zSt&2+Xd zbUV8YITt9w(Xb-ggGGwmQc+cuk0UX^$C)i;pji;6@LV)r?`J?cmI&h9WV zwA*@0pY=9@7*ze*QYL6N1k!f!&6jFz9~t7^Otm2$8ryn=NNlX5$uNkBl3T5#QRl-4 zC;508pNWSG9r7#n)c#7G=}!(%Qqd}Lp{HeZW@NJ6N*bQD_(^_*+I0yf$SFB*&+3Gy zzj_q1?`;E_)%5iI9RHWcYN3vDx-Orl`Nc0KpQE4n6}`TCb=_@0=t9%|%=6W4qL@+F z9X%n!D*xth{JQ(|2aCAVrI_IDlODVe@Cw0L22O|wPGV}-A3C%fbaN#W(C3pJp))+# zOUF8_CM@2K)fIBSKM4kr$5KZ;ns9xdUrd&?)0C0Oir%sBdt+{Y3U^BDsd zq)I&1TF^ZhTjs}(3UThi{Cyq!aT#v&cy6BOj~-+NqhtT3-U8Z?03v6(v4U-DR%TCV z2YCa;5rV89h$-;g%)%rl-)g4Sei!f&E~5@#O*!mUUzP?#PU;RksL*k;9b?}F`;&F_ z1Z;k0xZ8Wq;}p;t=(r-_9P||hS@tWJNrmmew1s94oo8*7gdh7$ulrH*@HeVAD!8j$ z>om|qbOG31`p3t{6gldo*|Yn4nV3}-0s_VDKy7~L9=$iZf_xS#8u8R9<|r&K;-^)? z-Rxs%;S;vrj1(eVECb^sBA$`H9^^%Q3pzLN-ZV&~HX8Qi(!b2icZ&Yfw?yX$n7Ez}%eziwIN zlhJ99UR|%p{00;^JnlN(v`I8i4T)M45`Vy3bvwYc(>ZYd&{&Jjy$?Oe(9s3lMc-Nu zdSn^z9g+^1_AC^O&ha#)zxrrki70o9;ZoL2KCohmCWw;iM^YX;ff7WkgM5{|-(v)@5~JOEmj1=dg+G2Vieuf9PeqA%{;q16)O z3B+xWd8_Tzs$aj>TdJ;r{+ z*(+((;khXEsdTcIA=%Qg4}djTBemoI&rus_Z_Kgdeg@nQ-WM=3^6z-b-OV%6A6m)# z{(GB0aCE>l;66``yV>ji!W8eWzy^_~wz0K#KJWy!jz^UW~G!q-{SEmN2$R*=7$V0Q)f7|b&7l=Oc-e?t!y4yQ`v+KSrj=BymP`xZ8lzpRUN|xt{fQtASrLuH`}0$)Q5v#vd6T(Hz>rSY?2&<;2Ijxhu!o?m z*8F675L;Pqvv_&-)3j{e&M|X$EQ^XAAwdQW18^nQ$M^xFu+5MH3e5RlkaTi})(zZo zegt*t8cH#kN)_KU0uu`Pq4QC|7fU(E8h(0oA)u2Q>ImnMvkP4nEvk=3Pk`{rk9onA zxW}FSQ!RM!6u%7^d1?Im6sGfUOr+K~8Dd@j7?wE9&W#ZhfyNC+UC8AAneJNp7G$EV z+^r!3jBREoP#AX7VBMM-qC;cd{Q$3QxJaZ2c$Pzir9}(0XbpwIfp3%z=nPI_E<|Lc zo7j`cl^6;R=O^*{!gQv0idqyM&@!pRb+_pBjDv-`u@fR*0$w#U3xy1386BmaM<#h6 z>rHZdUA&C;-Om2o23Nr}#0LhYWW>XYJ-=&&ZE4=DQ;{@YkC*3leLR{-=aEr3@Sl zs|`6;RxY_7CP$Keh_kiJOLE^2V>eB0MqB3#1m?OX;D8T3bM#19*`SYw>~IPJe_9T= zy8(X(GS`6C4TOcVXl^As5}5@>XaG1ApiY&VGxni#P}BEE{k;ygBzDlU83wm5(nS@E z;_L{OKD17C#~ccUMAG;=X7|n0r4jolp411>2AZJjzAW44%qIPo-R>BrnwAce#AXga zQ7pCt+j3VcTH4&4{q(%Ix5-xE4+EFUQjc)0V@sk5cUtMq(CnpZupybs`H3tB;7dQsgkRVx*emuq)Cay5 zRe$|rB?OL%iKRh>_ErjjEJ$%Gq01B$QFJ5}o0_GbXfL6#(lZG_2XJw28Rf+caUP}+ zVT+vU4g8QN@nq%c^5(_{ddbz5LJv_qb&Mn0axdM5EGr0=>~#ea@;8L(V9{nR(FNE$ zhtXiu3>fn#hT6CRc5tRi6C$PXkocb9JJ%a%B5_uX?>k9UjeHQhXn{ z7#7&|@JZzxzKvgIcLo~Q+vhRV4ORlVnPhqTc81wJz0kfU7azL@MiW=M9~>ciNe&6y z_K66ncXe^qN3>UBJOPe}#pV08kF% z^BP`Jt1aD||56RR>@Uj_yW%A;IGG7?{?E=&p!VERKq^5dHBCxDw=y~gB|P<#JJZ!5 zT?#ezhYVVDA}1@Ju(-9s>hb%ti^<|9O;Jmp=PHcTd<+6T;VbH)AWQ`0sIZ6*K!$WY zF^>wUa2?JLzA4MlIIycOCRq#zHr*%HzxOFFu#GTB;gOx**-U1=@Ak*(KOk>^kUtRK3BL!i?%fl^0-8hKq2@eZZaruFG{HRj&JNvC9`fw1 zbd-fcn0Y+qnjTbqBut(${ZU_xtSLmSP~|}n;tDRo#|oau+;7ipI@*p}`4et!4Y1fm zWKC0@%#)S^G(%|fSaFZjn*=!-6N>nOIADK;lS~yNav)$0VrW18MyZJyJ|Is|3o;20 zc=px=Owoo2!tM-c`0;I!PM5<^VOLnT*ovCTg95;5A}om2G@auR)&&*rci*Ffek+}P znx1A+NED#C4P`85YUo9TE3rY*<}|Tz=uCu4Yh3qa?HPrW@+JDy%k5Q)J3m|70CUU9 z;!ozQRO^!Wy4n@XqHKHh`n6H2pa6K*NuGw)fQLRhx5G}HL(O7q((zt*7zi0&ZDyq5 zDSB+qfyw-)T|OhfvbrdR%CEk8DJF!cbS1bD0W)q2f2bZr`9cp$U6qMm!Ai`|rh0vd z;(($rQWb(tg<+*=RCU;;FB@idc3ZkCf1*`LisS43x841BNVzUPxZ-I*N3JoWfk|LP z1haJt%S$_}-*0ZATYbK^y)!xWC%?XN*&DFiZklC<`iv9ILo}0^`<&Uf5T=laq9$y4 zCX=wF zBNPnxq-1qk*>ruo!a%wki#Ia-%8QPrXAtXGxu|)So_fo?=Z2rP9*wy*nEAeYwuMj6 zB(86BQ^NMJ|EIlQs!3dP&W}%~D?EOLkA&9G(17#VlJqN+G&W2vw@Gnx-rgitHQ(w6 z>Ea`E_t<_tx>}gBZlA&QWT)V=jlGRgdm1*roSZ}MvzHsv0`xRk6CzSu z@jb91Eb`dgE9`f|t0S=}7xNiJ0A^QSccvb7xuU$J!i%CiQVViTpDq|P`4ieo+2HCI zD|*qmC^am%@fG0zd~@^9FJDYPT^M&w3{fS-l<=-gUq*3FZZRQW2&6GRO*ymLq1qDH z8vJA){hC|n)d41-UVx3N_aBx{-xRz`lW(~W_;rb+`gard!{Z~^z1@}iBwjfTr&PiT zz6JH8-#FyAs*3uwy}q4)R+nTQ4-*`<;c8HF0E9HBaaGcpxDkUBag1{3jw>PqOQNWs z1YDNSPLDEH-+tRWtR?1E;aT2IB`6vg8F={J4~q{B#>Vc+}>P{wf9P5=(^r~9gu6E zi%}FgzO?swE=HC6xtqx_ervilX}&XY*rl$u2?}2NRl8tI%GX+)$adyL;${Z%-Y$tZ z3`f58A?`>&F;U|JHagf7J$ELge(Rh_3^471NWpUil9{gNNAM-_g}O9HgugLN$<)*% zh_A6`6L)m@&AbFv2t69?qIS%HHQ zZxfpQTjG!W6#k|G>+{gBbc0N=e^QR5xnId4VW9$UVUZwZ!}?0`8SoX!tBWeireYK6 zEZ|w>O*%ou$2Z**i|{0*q-Ksn`In#-MicZsLiP89n+kydQ7AAi5@l$`1Y?OjGpEiQ zDNPfXpQK1?9@iY3)7tyr{UD2f@I_kV;zOO%oJh9T?WJJ7kd4&5g{++{m*Tt_lGWAH zV+ZwS5vOHMq~5nUOq+RpafN-76=)+(<-p8PB56|a8hWY)w}?Fj+)J5wIxS^tdgbZP z+RpRU$*~l_GZ^&E$R5seChbYeu>KMlO!)0O0E9(%_iC-0 z6Old_!4+ki%#`R@U8CLcC?#W)k(Xs5lZ;|9)y*&UJnf)7TiC^=w0!5@weZYG73;2r zifbgjhHzKNB4gErE?MFKch*Dh$3Lx5-)X*H)OsYlDz5`u4`QgMJKne??s`-*A$kW#km$l0 zPs=9YpL_$|H|R9vD;3urdM9)0e(zK+CfKm?Vr6^Wqn{Hx#SwjntB_0tweCuW1R4PO z>Z-G6pGz3Av;2Dd0@LU(UwtDu$;+PHMYN+B`|dOdmp>NLAB(%@75d7{!7^QhKMSA& z`*Jk-m(D4L!(ff+NFm81Gaf4mEM-8?jEM)6J4G1chHsckuebEgNP(8A4O_{^3e)xTlw3?m-5Lb zc!oF>cKqJG)%6!UKi|8@1uR?ae)1XLvk09k{Su>EHnSc!UOs<5)PcSE%hJ}`(#Fo{ zmrGk)OTz;zSV2}^)037%3AP#;J=!m|Y(Kg78$YG;>E!Cx*5(!`Wf#3fCw?=2(9P(c zI&Lt?=O*J16^^y`#99_Do`ceeloaN%_s{#`O!M`sJJfwOre=5z^~s^Y0Vz4m+ze5q zZ}a7EB8-u-rhzdYw2S)S$GNaDzxW{g>yJzT&~o6+{+lbk0agp0YzrK2M~O*sIL zFZ3(!C!Y@fmde}6@zJ|gX zNB?n;-}oCtqFE5LK0|oO7*E!Mi9;J>h%}*GxC+5s&FjoR_-^j;cZ>7YlP6D%XRj*! z*k|V+%xZG{sKCd*lB(K$wz;+bs`8~*`M;H4tvrdVq012G7?2v}5UKo|9D*64k3$Q1&{XPPnM2g+n*0OCF4#VFxd}VQAIm2!Mlg$fY&ryCnQ%s&GZTFiClr7`syyR-{L(o^ms`es12%>Vgr%~s@5x1nnrS57u0rkHomY6 zI1_sf6%b&Idc|Gg?d+`4M&;Zx4ynuwg>zooFh;}0jDhb&| zbtmR>$6R&rs#9<|J}7=GIA6_9cSRK2n1kvLHwpJ+@hVIY`Ie>2XSdzqFuEt~2pK3C zzH9Kbw+)3%0?u#&yA8%R$lM`H2?|5_e(-8HK-cpmfqTFOYolvjx`(Q2k>V||Z62K; zbj8jLGFsl<{Q(!dYhpqC+Ssn%Zf0D2EH`9~X|SFmB;U?ISj_cpn1H3Pn!u4BC)~#h4o*4 zp^R?b;inRMV)l*J&%iEn&^s9VWOrA9H#~B%szdERy)Z|=lc5)c!Q(a1cih)n#x|kI z{-QA}<=-0W=acen*;8;boB{uCELE4|k)|+9Yn^&3RulYH=5a&D2?3uIn>dXBGL{Pu>Ljs4}s;kQY@80hXwjBi){3bgMCwvGFnSq6)n8a>%k z8kA*pKR2KuAs5lHU9%CWfqUDj@q?`F@-*=K3FdHbN0Tp|MZ0ZR&pg#)?#L#ca`;?> zt(cn}P79EM=g0(BDbgCrdJgcGv3BAF!SbG*)zQBMFW55|*6c}h z5X{jBiMh8QiZv;E#*)P)HyR%yKv-lKJ*V+k3hB0Jfg+Wtqt`1qfClpa?f8IJw|+gY zA^Ig5N+Q;+iM<1VunL((HYxsCZh9V-PW~pxQ_nq`zb{SCO#>`Trr6G1dJg&5?fXR; zkn)T}%b~{ zoWvF%W1+Fun2L;y58P&iM8?Op|3UK)XgfGu13&Vg`^VP>q!Ojg2JXTRToO zJD>Ic^N)t+a35B79!W7XjFIr9#VyuJu2yVl7y6RRW8&uw zfOFQkGOJGD@-kWR4S2p`Nv%*Bi-HfZv~jI`dLu=X)L&qG8dU zdwi0H08+}CIS<&}CzvyyTGslsn}J|WmJ!0edgd7?2ZNs!G;zYP?io3Ho6~OSL#x=Wj74%s+qHf zau-?V6xn)U;PZ$iC(`p(4%+{cWhcM&M|IcSf@`V0&f#9zx zr{@|Rb*F|=?LivxQ=Z}ER0HiIILyx4G*7UD*el1xvpHqV%%?ojQ6Jmhw>~!QKuXIg zrD4*c>2Fg;UVh!g^R^{O)T#>f5J`u@l4OPv6*d&}4vulD4 zEO52)964fIAA{m{1W&U+3O+&+D2eM(PQJELer2jV%Q;72kkOk67Hmst9kNjzcFoRH zgR<@5&9F-YOZ+ytCiU_eIOjo|4IIKbH!%Lx{Fosi@Qj~f#wi&J1W2jI!SLIZ4U?m` z>lJ?R_0iQL2Mn_re~Nca6Ht(}l|53k7>wxL%=Nlof0H;W=g@b$$M3Ca@b|YGBg4kf z7{#0Bco0E*mxnV)*Q;6nl0e<&xP#-KZ>N7w$DOmY-0HZUX*1NT;Lc#JoPjYAXdYxH z&BNzdzZ!px4eB0jA41u`zQS5-T z38%>$rWBH{qxU0>S*AUc7F9%rBpdDw;@N_W>Dr$LF--|6APOE~m|}@?puzJFYFgnehXt(tf9_s1 zeurOo@z814!QRo5Vi8FlBCiFjYBE9!1NC^uR9aPd6IB52<&QNj$0|B?p^`t~++OH3ZE`REShEwFWorEA4>vE{GbZ*&+A+}j-%lsG2+V7$ zYF}idZQS9Bo0vt+v#MkwM(3+soP$HaZKiEqdpx(Wun6mrebwBY)%I9L_(vBSZyLB(hj^JrWqGKyh@m zV&juucQr_MM5&6B-V0%%=th2^(L-Fq;|u>CBv-xwX+vb~^vTybCnY|Wkqqf` zeHYs$%^Gth-KE2cW>)Lrm`{EaQ-}$Do%;ICrZS^&iPWoRXqFv_VH~H_VcelwzGUW{ zTasC_y79IJBsvzLZtK3>hArzMn7M3fetH%!jt4}yQ%4hckQAjOOsZr1e&{L_*{D9K z>&BY|_rB@rs{*W}ctxl^<7{eB4mGk1Dye!zW3C8SM;7PU94bEavvtWPK2JippWn*b z((}#l{qOkZFP?X>_9g@4>p_HE!Gm^k9EL)~SjgEfm9h|)#wKpI2qB&pR znoloJ`VMDYlhJi5Iv>wwKK(W9=%u5Q1Y6>^EisED64k?Dd(OJKSI~w>!6e}=N#|jp zFvtqcD{z%m+GI$VR@-+@e-$!utQAE}q}SJi<8qpLlV9?iswi{Q_mm}F%fqj9A%PX+ z*rjCjTaBpie^?KyIjHN3#mF=GU#3j{lm4aE$hf>r9_&K2MVD5egS%8?1j}6zU2@IS zRkE39?0cDF27hHmhg!RES%qh9?lGzRHRCvUrF_xP(RCf95VL9S_pyayN|g&bmVh{# z)L+q8oBpCUm`QgwgZ*&?cLg~b~Jqk&y z4=Ek)PWSZKR^(U4!}R3q!jZ^&sauBI%RZGN^`|=ER8`Kz4?Dr~7RF(cN|NbFnfOrP z*nPc%dTYzcw3<9>c6U+oqN421iVW4If|rZ{?w z?@E5`->E2j??n&uaCfAKia4`{`3EDsLmn*LpMOY=v#XRk&A60WX_{_z;;b4fo`fyY zzc{KVvr|G2JQL!{rDKoYZ2lS6zAhPi^d@}6J>6OAtEtGojuk;XjSpuG(D|KbfX|Yj z!c5GGm)rOZfQy!;wn`0oOb!|z9Hc2(a-5i51VdP2zwUwBqD)Z`3aKr*8hco?D2D6_ z;ymcF?rrnW)|!Qn?ImtkaUoIVmXIw&AqgOPl=C3v2`iY~MhIv#Tzh){UYsu-zab;6 zf{6C%@S>Rc@R*hKcvdP#_u7#^zYX>9q4fN|bNon~ni0lLq>KLY@xkqYnW~%U{o95Y z`O7a-Jt1o-9q!s<#VGj>uvKUOXGc}){kMLtd3HN*$uodmuh;XMeVkA>9Vm<`TL zu!&2=l}y}p1l91Bxt$2tau5oG-5J%r@tLx^!fWF9N#^7Dz#>8|Q<>@g<+G!=xY(?} z+}=@h9Vo{G<7zX8Yqe~%RKcRLDZQ14-3mF<%#yNOdONGAMGV zhqzUuu|D6^AK9#)h^0|S4H0BA3qfwC_Tn=nmrfsho^_fK)sfG^vh3y2msO6 zzyCk>-uyX^Q&4vZ|}G(6l@g*PgM7uFA^wo>fVJ**ZsfZ4dg~au7$&TIUj%3n30#B z`SdAG44S5x#w95IC#zPpd_njjh}BrKKb_%(h3f{c+_;%2^MT4RS$K+jX@R8?A}DgC z!wfT1?sB+?dD~bCtwn5}A>?B!-?4?BV!-=N+ye?x+dz}~W3;lndS^D3Pgrg1-FGvg zJq#Z@aIW0z%m&O1b0nHG-Y7VuLJgCPzwPT-r6z?(UgFE<=ke=3<-o{ao1WQH(ge}t z*8Robe^-BOnDQ|-Hc!yPKE@Pd6HCUq-j7IXmb_yklswH=25c=zz3Xq?XkAK<;EaFa zK;7<#D|5u}AuD1Kw8v#9<~C6D;`gkx8-F#W9}=9BakS{juXp!^;@y<4z?MZny1ZWC zqIIHntLeh3$>!S&9iLu*tz5X7NsDm|uXIn>Uv;CF_l%zT z!OiMMrDUTaGwVRfP?#qDX9~+}zWP^$S;xLj0kFfq<;NcN{f8NPYxxwS0?OBS{N)%G zyr=pHC{l8@T^H>Dxkz$vMPtb506p~ER?{YRmH1iR;Gpm!9ZGHqikPxXq44j_NZt-Cw#+Rw)+NT>8H2oB`y?JB7LK3XpN9rbkcODtxbL|72kzj3C9D z!>A-3WmJ=gmlu*6)K?vxo@St*!&XY8cfr>Nc-Q#>a z+298-LaC*gOyB9bYT3L-<%?f<;ZysN=3W;)Gd+I34{|iX{=R#L$E>cBpSXsRN2(nB zt@Z+CUo4QJ7)s^Myf9B4KRnqpN9HTeT^i;k?G8QKrKG5aF)IOkvA~AsKZPmC7Zu-F zRE4Nr!iMIwLg9C6eQ6Ks9rxAbJqPx_`s)7uRUB`T@kjxRiAWz9)T;QAv24N<^n6y~ z#AJMlun8O-rJST>b>sn-u{}*80cl@hUrjNpl%LKyd)2e~`7{@cnaEpevLz1v^;Z(EbGjqu|sxA@t9vV6?Cf(Z{{#8E-kkUwZJEMnraIf_Fg2ojEdXG1;tXUUbvQ=%a=2A9aw?MO0Levx@44+Y05H znkcDmDr{{U6^sK@;7*XPd;`6R4ekf|Qgu2XSMyW|;M!juJWPb;tSEZRE2I`LM{fBCl?XPm$r zTxiW!qpeTDPl?jV1Ywq%(0rgOa-`ncQO}lQTdfIXdMdfW#{##>AmoE2M0fXLoK_WM zxH7V)n+_Jt`;1UJo4Ut?w5XhI1J;Uclt}^d+EeX&33=>b_LWWKWD1bd6sn0S%hL;p z{|`{)04&zcjsy1Awb90uCuBfL}oMw4(BIr1X~g$@Z?!1jM7; zlUPm631xBJ6`GT_p(Kyj3La>ghadWVFF$w}az}Aw* zeMM4TpMmR2&4T{SvWUn~ZhuuC4kn+C0j5dv5Ymb*b%anU`3b%WJo~sZppMKMXqIpF z&%9Eg_`6jyf%CL(Y@Vj-ta!HmJ7ut}Y*+1N<2^qcjK&voqiD4M_!BI5_jn(bcId@h z%Ue~9@bNj}7!&<$$&I(sGhcEc%DH`f0n^w!Sp^&$&y}(gF169r^;_dT^}wdQA@hLm zg5`>BwzWsw$85)lNi_H4V>+FUwX&z`*BivyGew9^GZ%G{VoRX5`1mmqpWHWj(&U=j zHzrUMs)i5tF-vrqgmSLAJ9J1VrxazNw!)DtJ32vpQ5W1ubpL={X~y0ixgq(6G)SmJ zK+7uXQ@R{Hdc%WdKvZfYBb)~P6CPAO2FM>yWGf8Yy1k=t1!oi^XU`@GN9HVk~H$TARKy);!No7GMDhn zvb6U;i&C=a7}q2Vyvi^cVcmW6hKwIM7tH*8Iv(-v1%Zgf=rHA=(OTna&T2e}v!)`N zQ|C7G9MDX8(|1^rVTND^*PMLHKjQ=X4|pf|8;gx^v)b8N+F9x_{A9aP?IbAf(e8%jq<*yf+l(&SdLRg6d=_(z@gHG z7yTb9v)NmLK?#3W#2a<`2e8&b@}4#y49sj|g{1fb7v>q^EQz<#x`fGOFf*H^ z06dBf*Od&@wDk%M$I{PHz3xOdMvrx#S10M4}00vC@$BuT%QAer+<52|_z`gUEb&4e$FK^sRFxFWH4TH_o$V&GMVa{iEZFt>8R ztFyS}61%0cqtt9@cucoKplK567rWqps#E_fCgDHoSze#d*U3XdwKh;sqb+LF<>*PXntt?EwSSa*?=b6b=$qhQGjVc+VA@Ph_bL_AoGz`0D-Rpcb?*H05VCWP#ITS zl|fYCbufn~N-vcPAxkpeq}rX~30^s#>|UmDIho>Hq)N-#AxQdRR7O-0NzrLxTPMr{ z+c1#_oUEyU^FE@irCMmSKFMs_Bl%U)`?17#)g^c%x_f>(Qr$k&erkt>W5Xd;)4YGb zu`OIurQ^qV+TgMJ@5e+0;)^b=E(+x03h89D6wCc>{&)IjOhtPPtK{e#;YnmpmKqt71{DOL zyl6BeJoN1@Q*5lQ3m$*N(-QL<^~Z7D2+wbG3@K|juv7`F+8axKW7RK;2O=f3$!M^1 z=7rrt$~}~3R=pC3hx4A;1}Jc7Bo#aXQR{mIkFTh#M2xn9n0kaBD=b7+Arzz!xAAM{ zuL9r11m)*$N}BfaefO7NY&Zge<-AgPeB$Us z$RP%D7R}xJ*!b9rLqF4ImnJD+J*RSk5VRF>O3j-$PpU?_r5UOcU~;|0ld!tKDb$8B z%PHARys-~hlQ=Ea-4o<7f=7Z0nREzpz|%Y?T+|iH3uw*=!1-`4ZVg~>-~k(ut7cp4 zbC9{N`qE0eTq6oQ53shr@-heh1)GXAJQPloLsv|f?fy-L5YY;e8q`fi+JQjM0nlbO z+P$<8j~Tj8AUVSJ*Ava!Oln`g@;<+!$+L;10H^dc-| zwD?ea!yqLJtY(hq26H8AeKcgZCHlI<8@D}1r5NN~c(MDF<(2K7Fv_<#Fjj`ujMz;B z+s2?E34wb5RO$ceK&JC|`JDcMtdnCZkM-zDh)jPlcr|xB;d)sH2t0m_6 z4f#!e9kPa7+TX!Z_A~a^N335^-&WmLNFy&icd4F&k9yRDs`sYb0UkLRgH5 zjBm%kv4bwIfZb=`m3eMS0VFgCA>kYS6Wo-RJ9n)D)=+%n3^G&R z)O%dZ$rsAjv&+nrUpuCdMmf~4@Us#~NXBf@z;2mBk&9;KTPesJqJpPU_*T_Q-2Ula zIAiHct)w45{ZnKHv@uBmvj>Kh0#jc=r}@}*Z&%)1wFxgH8s|HHz-7;LDQ|g!_D920 zb5i3>LtSGRhwF2i1Wg6k1dX_rroliTfzuBoW@HuLj_(ep&aZzK^w+)9UMdTB9} zek%OL#Xhi6gq0}1%3YNkQAV+0!6c~ITrt}@2Z5QP{VVk|H!dm|Om0^~mM^mVk&Qmt z(Dya@A7vf(WSsd&8`q@zI#+{)b8XW8zHQRj0kl85^2t^|30@VC<&@0((1l=gQ~n9T zYpvLmhle0nja2MGG+g-JLkNDu&0Orj59Jo~$@bau$@$yf>f7FE$sQcxT}X$XjuIL`9O60WcXnaHc)lOyV_nhMCi7M(_ibPBkc^={{r;H^@bb)}rQ+|r-n7u@%YHgahgg}>fWl)|Wo!2>Oz0sjR};kd_i;w@ z7cf`m>~v*KS80k0)SiHbLIL4e5AF;+OJX`VNPt}fN6hB%u52gKJ+xaGcWuQApgr#& zH>~>~{qc@6gp`*ko^M(lJ5$f;5;n5;A>xU~I2C|}WXmkVc}~%)LW^@^nLqvohm%I{ zzw&@yRl-wjooA(3EfOijvc2>0rig9THFh;;N@uZ^Rh`jZO+x7VNS?uPbU}C4$A%briVa?p^8jM4T} zhfQ6S!;_=Gv5%V3#i-$vq0x8W4vqzI`P6tOw0Qu-6osJa=|QD$wg2A!UH?PcG{bU! zH{HqJacg^L-TzKLKz6$% zL0}fmA_(h;OD5uQ2(LP)+PjDeMy(`a=)%m;uk`s_8ao%tZ7pC8ZK0kFyw>82dWU=BmP!oLJN&Z(%$tvN&dn#TDq~>a2R%=?n;5g`e*;Zl-XTZP zf0_ zw%NFkTRLGNDb)1i50oQ>vWeyg*$VSTsj)U6WYdhJ*^!;v?gQev^rHIPAjDjj>kJOC zDyS8EhdOxoE>2GjI%J$pCfnYj!vfD9)z1vBc(jmp)a+Yns`G163jng&`7_z$q&mF5 z#Iv7Mr^CY+U*9N$gBp6*=nOsQ(pWB|F_6|p= zY+Y-MkRtzKgm3duM=XR-Or2>~ zF=zce7VsGL!7hgL2DlfnBb5@YAOcOYtT}JpRFgSFA8VL7_j^!V#?56xUi7OrzTGdo zvp!)Gis+>mbT-2shBeJb=4^{)>O1(9=6C!AwU*-1SfSbcc3uQEh24hS00o*^-=nXm zf$7t1rC_u7(J|I>Z#n1Wme)2wN~*lO{(OCPuiB5)&XuKben1lFt?kW?t!2vs{a}Ch z<%<{3H`aHmjkQJH zdxvQ;fe`dhU02S&)gy1KmAfZ^c&O1)uoq7$=>6yCylZP3Z@jJ3yppD9=X6ia6|$i` z`)1)=9xpvAV&xp)060l$20W$gVr|#S+UULqXea&ISaiKk{{?Wn#zo*ib7=brDORgP3DS}S4Gk=)WJ|7C*kMDcRAZF+@IZ-pyQl~Zd$`|cU zi#BNCu9%V$#q(M-#Vyv7lC?!Ep=0vO4v?1Sop;w(pchO;vsWm#WK)=;3rqOVkzqH(yojCZsXR)AkF z28Wj?Jq!S?&CDWsbH)r<+NA&ei?4?x?I}wMCSIfHe6#8m_`EGu|09U{IB^qMZGJ0d zKImfM`zN4nX3;{rh&hxIc(*YgTYd#`qov zTCoXsh{!IHU{%>C+zTP`33f%yL})CAI6J`-T6~iY8_b4*vT1)!l714@9!Uj=C6e7T?j;$vL}cn^+VT2WjAn%jlr;7!A6R4(Z?nZk$cJ#Xf=T^ zS*`b2Kne`vVl<2sddv4`aA|CC-N9XAppoCs!!vK0Y5Dq})Db(x2+5{)xGIB``IG4Qu*0@SwUh z;YY}ezkTPO%-Dl;tIp9c?;P1_Q>w!Qjt6K$)hT*;FIIS9jK zHIoR#Y{Ju0B3i@kmH&_sbM+%yxe=NPXai&wRRZPhp&7uLu;xT?MrfIrS0&}dhMaZgQBpCKcYeOH1-r=D6;_ zrsbHyO`;Gozjg0g5i;BwXGE?5Km0C(B2rM++%ASwCJ+qal((hF#uIsKPyoDLGb^4i z7Oo=7*VGm+ALo_m%EPz#l({Y*>=v4AP?B&@tiuEe^NE2IXzGc3iR43nv$H9;9&j+J zQ61ebSr($b_H3m$3XCi3j3$Y}7c~xW=H?M#ka-zzC(b}+@aj*)yf0uhC8tpD#9_c3 z2)p^p!DBXC$N1n>Luym1aYxI@EIwrigLpG(T%zePi-Y_7I0x7TV`+&BCce$>v+ zkYZ4?cTyMyT2fNe5vc>#!=cP!y_R<-qDwysp0k~53J|9x$i6RO-Ke3~A5VfR1hfgN zGG>3dCuw=o$!LC_T;kh*;&xwMVKJRZ0B$tK8o8H<8h%tu|Cvnd$;=E9kGIk(6p7P+s5Z8C*LU{#XK(vKwTAM4Z~Z~#MgVwRfBf>r z8r2YS%h*}x-)e7p zXZL~Y`>$jXM5r}47!f1wQ+PZ!w=6zLG#F`Gq1MJep^q`kKS^L`MkHpe}TIqtJk=V!5&3CW#1L#>{(=5Z9o* zhOkO11dxb%?=bl~1?L3)Um&wul%;T^bRf-k+uW+=<|AlkZ6zjT^NyRfR$}OU#d_u?941Z znf2d~s-Ks4nvWhsfmSy*m!HopE<9M8ZFTU3n!b>sFTSRb@8I{5I7af2;|8-N6mCj=9q`QZI$+4J~W>&n9rVvbHODNA+vlLC{Ozm=LX z?OAaPlkAOalx=@>A)RYYeNfR>yQsk(Y!n6?*eKo68X>{!SgXbpn`-^UKQ6N;JgEMv z*Wrz;?%iJ__dgXk(ef9J&ebq&ED!F%9n@J8=JM8g9tEs5mWkF!@X0={>Q<2|;a(A< z=}VfEf1l0GNBFDcjB0NfD~>F2%RoEWp2{1Fqb|MuCWX=Ie# zwEb`~V+7>z85&O=Y**_gy_N4L*C7ianXZ9gYZ z3T(&3e{T6XIvwD6G;xf#`}|q&_lbe+!RI@|JS2e&aMp}-7KYm(7vMvr-4O|26voB- z*RSEl&BCp2qH!`0nmyq4Yv+^R$~1q8_X8Pj#X+cj9m^MjmM|h*vsI`v$5`=PSprFX zz^?Hwk~f%=%+BN8znzri0e4CswB0F9_ISOuyt)4B!9L9J%gwFyYxmb(On$HZ;qI%s z{k>mbtf!aJba&(btiMV*p&}a;p2Pp10^;R?xvx9{JDcXB`FeNtr}fQcI*ZODF#jQc2I+ zU+p6yWi3?*yPj!xq?*QBa&#$`h>jI&5YgTMk!6R3;+Yw|=I83^Py(|)hkN((uBXS^ zbEthLdMcS|1kjM`y?b$??%fmGE}IoJt!PyeoU(P0E_flQRrl^qYng`MSW{aOqzZa<(}%Q?P8n`&WcdHOR)*%Un^DH((|ZA3U(h4$cY% zf=_kL01?{_#6-@ftpnqw$7)3Qt6~nhZvR48P2_u5bj22$e|>!hQw6p;p|;#E5Zok+ z(~})2+cu0l=q`l3{2fp3)n|$L=BMhymtK;oyG%dRk-oryH`tK%`Xc~de=`g-ktto=U76|jZd`ndvl5;m&E65em)$Y^SqY) zz?f6XhYE*#7Db~Z#Z8ruW9Zf!YOqWjTI^QB)DztIwM~verbE=nIrNZa=<(sh!&0r-@e6yQ|4&bB0ro$2f*W zmYd%oX4eF^`RecL?vA3^HH-Ze(QJBmnZP&KdcC+ZwYyIf-KKW;X`}D4>+Ql7xkH3>XnKOMY_ch$XrisfxD1nVZFg7L9&gFQ*xP1i!ST7 z)G4?1HwyL)=fG4;#GhyPM7KyJ2L)Lm@CzZ|HOwaC+R`*#wn2LFEQynkK|68mMQWrI z#E%y(Bipatp!z6`><8?%r?pK&KB#)RzyFI$c@vVn@`0GA?6jlYWu$XP*f!x_83ZHX zv-(mR+2?(|W;RO2hJ(8Fw-=T~XIl7KO@RzpoEfO2&vb;=3v9EyOJGpHJT(KqD^4*w z_Ivn5*m{yp&a@9ofvPA2uhh+~M$jK3^-bH5>;|5-J0RpRWW#EvXN4=nMQNPO^8krY zaNhrsDLj93hVm2+Lk`AcDT);WTe!ck+i5wJpjdvm5vIU+sNq3&kAwfnm4e8O8sX(we+@kRA0_N z0=GKg;$_HxmXCVpDK`8ZIL4TfJ!7Pq!+dC1WPYCXPiMT9%xn4Bgj;e7+Z)lUa{67! zgl4P%Y!22qmtqRG^1}_p8_yqS7l}?&@Iv;lPPSlZ$OhJ04|4N$l6ox#yj=+WNmM5X z|A$z7uTBhC30Www!wdWb`NID9O z!f^sJp)*cfCfy^cxe~?90PFd0V(ZyTIi%;?8c{=$1Q*uFLaj@Wm!pF%$n;yehtzmI zu>EN4d((b#WRC&;zTW8Hq^Ev6I8TC9f%;vC%{!BdiWguiqYC9DrqG7eG|vgNUwqcm zd-y^6>@$v}3#SID4Bi@ELBs^E>jXt|Zvqf>(_qS$N2A^cf~^R;lS`cC%~8}64I39$IzxAq0-7$~ z4<8;;0MIJ>5k}NgC*~w!oy3RM8O#ptY3sEsEnZaoZ*X+%vH22uB!@YLh&A#atVbbW zcLeEbXqSsizFZyS$d>{@!EacTQ8%_+I)3b5knf6kU#kyAoRxBuB(4D~#JH zz$oSt(WVMW)LchYcS**cn0Kp%BLvUzimQuKfXfk6hM>5Gzr`8N4EztYsD@%@t8Av< zW2hQ0n4eAUV6qANJ{$9a9Jnx)w5G+2Dp4lZ1B?}}{JRd5NNCIWQo9{l7w)eUGpf%_9K*U(GO(XB04tCo zv026^7nrGyJSoZ0ja3sM=!3{N;k^w=@@JsTi|oUrVf13vT`lxc^BrGIKJ?ZT&zt#Q z06hMGyPdZgv|-+>KLPP%GWAw>!QY)pU@}_8a9H5V_$3?|*T9O3mF?l_$PRzIl>tRg44*qC_Ef zO?7{}P!T~xB_T7ev6qtM&Q&XY%L#8-+bJ0I0-+qga$)815C=m36}##=Nf@R{L7bNr zX;hg0`?rdYrVnG~M8^30RM8KjO;RHf`)OpB?d(EH#;mg4QrN_&Z6%nF;x%1eO^)ce^&QOSAkds&eZpI?gaD4Wzc)Aq+iL|By78 zKo(xFhz}C(#Lqq7-ue*}LU_c9Gm0nj!LDXDDf}}V0t~R$QaRK(&b0^)bx!CRlt$mM zk$&GsWh+X3g%DThVW}yN4>f^?ZRE80Ov*?v@%(Y}wFo>fuhX?!2U%fyi)d=%9+tlE zjHdpM=ifeBNU8Q*v(}EL{x(bd*9V3zr#w7dP&-=SlGAFoX9 zfvQd{wS-QCr>j59nctpDHrMmup86LJDYRO5wWxMHd4>Xp#z^1#T>rFC$J9uY(Ene)->GdstwKUJlwP@=8 zLJEKNstm3wBhH%7>m5}(egh^cw>#4DZ*ex|x54_k?Yw;93f!ulL4VZ~v#lLa{w|GL zXSuT{N%Zt-)P;n#Rq+nTyK=0AMIcSSm4>wy8BBnUb)#rDvLg0J76<^^*TM3V`o!v1 zuaE600;Ab0n~h#wNNP#ZclJS<$OLyR(wd=K@*X^|iO4miMIiX*48LvpLPCEpQr(7)c73j<7!1j)697MuRi)ms{HjE@TdC?DiEg zjwC0KlwU3o&d)DzZ{w0aIM`_>gMU7KXH9E(Effov23;%u@-iPc77=(`M+AnFb4$i(ZJ0Zm% z*mv5pa_E{(IgnXQj90G5r7b&%5;wg{gjjGZADwEYu*Ag-WxL5k>~TlUq}DJ-mD6(K z6c@+$df6Ek2cl;i>(AHx&lsSw1`Tl9`<)s(xVkD4S=`5R2+!VR>(3M0$ocqnNoC+_ zerenbS4wY*DWGbfk`H?Z@EF1%Nw-REe7rP6YiGFU76bbA`nv|~!XDjld*ii0tzrn) zfyMy!%Kn!k3PP{5wxXiuc7Ut)!C7$+cMdFEpM#5*+;`n&yRu-Tx@drM%zxarJ@b~o zSUImzNhF4&H*>K4XT#%TrEnKEnUcWwTx4=_ZI`M=}a(bf>Ap|)^km&Z- z_;yM0qwUT7u&tvDt~corS*OhRTzIfAbSpbB>dSZT}1e<9@COX)RC4ZMidn7als}N zJY|WXHsmExWT-kxj$uaAn` zwieSQ6ugRT8vgIvczBy}!72D0~(YgGez@T6uflra&Az=wuZ}_}@ zK*ugO;t8P`W7nr3i|%N1*E%eIn?G{jt|yC2OW%^1Cc7AH;aT&h6>a`qMjQ~)k7)s- zs2^RRu|E?xV??G+y$|Q|cXKNnBvHg0J<~(tDfddcv9i7W{N`S0w7$I6?kPRxz^uVb? zNtMrxZ|FY!p>2Z)Z&(}aO3!Zi^x5<6W#5u#l>X9(_N1H#xq5Cs8gIn%!hhnby47cE z+k||r+mWmdFLj%)Dt}haAX>fHA*aJG88ypyw;E=P)So*Wt2PdH7faXOzsm*aH;F>Ya&gl!C%0{NCgz6D;!)Y($9VSI zD>|(%@2;1xw>myqXD7-wyX%0&4VzM`d^I7%;FPO!-Ee!6dfYWxW&bQk)@>vYNb{jz zgo(%2r`p~)S7rO~(~~m`M`yopSm55qrhl}Ds{{z|RllKY_Z#lc#VI2Fri0?Vi?6XQg(kp&C%w60S#heVHODP1mOE;^F4vci-9Ief ztUTXdDSz9+w;#sAw;x-tdU)f(uUexTI{o(zi}jw{YxJi#QtD~W*VjmNK0#*dWyrt=a5QH>vP#s@!4z8Zs}veoY2^lZO%U}TN%YNWUd}l-3N1{&+=XKXZEh_Jy)2+#e;}zly+Cim*ALpfTDCG!Q_JEA=>h zX|Sx{obqg0R-gf1D@kYPxCvO{|4|NG4MEE}W=@}ns&io)SA)j?GdP!LCg#2HDzWMJ zs*k*QxT@T0hT=>Ga~}fhHI9;(k4?{XF|dUf{dw~W?!A$Nh&kop$i*~HPH@ohgum{1 zW5Gvcmd5Hl{Lr^D;Wi2Z{oSyUTN({T%)`~jDt08z?mHE1Im})jZ|BKw1 zyu>y$JiHV)R5}M^Jh2$x<7s0ghxI}$6vU$ z2O>$%1sA_xSeWqk@hS#3tdz;cU0=qMpH^#xFTJ}w52u6u))$dqGeubC<&5(S+j(<| zUwP;yy7sz$cy)Ywk)Cg?T}{x08(s8HU<5LI(qw5m zWpN5@E`CdWymrNt$5cZ323{xo=oPlLC<~7v^X%g3|ELQ={A&Ki7F7{6jfF9v(ll{F z=I5`x8iYmb$_d(d%HYn!Mqj6&GVfk9bkdV3teGI-b)c_uz!Nc#LUzd~56^0QihHC^ zNhkZ2jiS&!*{%4{#Xa+B$mSb&rbrWs{M(Tv;A`_&6EeJ(NuK3cEDO&7c zTDq}(5lAEVM;8F$^n0yP9B0`JlOa=1qP|YvM3q!C3SkCAq8>w#Ov<-In4g!vBNox| zamSmE?_=tU@~Ov(;XB_=^kD*9!>U=$6IAvFo{=aVt6Af$j`doKciL51;@Yq-U`@g~ z2?LaYMOokv6{7DoyUhT6|Gs5~Q~Ah~o~(XiHAyRKcgPdQQIYEXaDU z{#~%3#uO@-z+5w$*EX!61-jqYG56MO~JoiB4wc8M~IFs zk@6dIWYZ4e^LDoBB+B<| zkiT650L#YB)y`75GHz1Arkp84?Oy%WlEq|C8GorgzHtmBBj8NuO1Jh^6a`8Vlc$Di zjp5gZXZI~w1%*!aC23)9c~Q2{rreP0c*e(%@<;Ar5j^AL#iR$D$}`p_mS0Bvl)2;x ziEb-tMfMPa$xF;4R3dX~qGM=Hl5e{2Iy_kZjvErVuV5LSbX~)Qb@@#S+ezE}cW`0Q z%jqoA_E~T#Ou4~38M@=${QUK7QtqIGQR?X97Hm#8fAo~Bcb8{NrATu*_{jy_x36f#vU zl9_6$Ev5PMZ{->3n&)s6Zh18=whL1}!-m80MW8#C!jFtq%|*%0p-b`v>??GJ653)Z zVNb~+xW5mlLe8+OP5URE>m9FE`gppNqUWj^TRw#p7gJv&pF?8y31qgLLb*9GAE{ea zcTQE1;!o@@gb_bbu%$ockM!*Q+u=!H+%=`ldl!dqWj1+0;+G4M(b>39l~I!HAXD73 z+*J#QB&Tesyo;P-gnja|VD0bwMkE7Qb6d(SsIJiVf%B3;!7VehiC;Y3$?`~(2O#qn z$HeB?7Gm4f2BD^qH<^nwegbylCJrlxG$phVWbmOG7W1CQ*Y40I*+*MSSWM`nLD>g= z!VwTEwRcDvjp|#hLM6f3Xd#MX3BEl@L|P;QVLC$Klu4TurY|I_hHAYvE}z-JCfFR} zbwny2NJR8#LrUav*p8tai*tyWSYAB-hb++hp1#D1vHzY$2J}xXu(glo@_PPv9$$<# zePyjdSr?z^eC~L1`6f>+Yhv#{*TO#K&^~Q(88@*w;-RYSM_S)&lr~D(E+-eEYrAt2 z`nZkYwMvK$w--5BOY}MzRr3;Pb#0G4)JvC&?o!qIbR#k@{FI?>P_vks5xTy63@euv zA)x{^?l`puZocF6*d;fcIhL82iYY=uL88#zqeBtD43jD$59aDYF4=D7LKuwSRWn~% zprk3vQ0#yye=>JgOYc6sooCvEL z(0<2QDz%ikpm@)?`R$_xaSEu*gVz|GsRmMgDv`Yd7dqvJA{z*$zXIfDj^_q*B|ub~ zR{|L=e}3L0j-|Z}ZpC8bLnmM2Ao;fpRngM!Spr+UHAwC5Sz}ROUXY|go+jF*G)1wg zDR6=gF{NC5U`hDrD&96y0D>|5Bk5gCr`ph!{I)B$ zP7DiPHH+2E&vG<*YKqTUq1&YS4E1>tGLiVd+ejwCIewC4qUJ-v{Sj z6sRlv-V`h>YVR=s7+h*X)8ci-*qAqEJLT7izt z6=VW}SVjPip%<&=C z7r6RC-%h3CoPsF2wC76;PZn^5>#%1iu{N&~o|trz_hTZW>_AfI-x|5X71E$23 zOEM=3&tqE3-fgP&Y!|{B$>x<w{%D*889RVh)5vl&5vQjl_E9I+a?n)5&zwi%Xl z&r~CKb+9phKI~yRn_2k)!mq~KJ~^d`lDMdCWe|ghr@(E|1PGU6igBDChu{qy?CWtQ6l%&6WA2P135P1WX-U~Q!F@jx*S>qY;`468>99?=Jh>@ z;mcK&Wi$S6gKYNHKlMtZ4C?PZ^{`g$j%oU^Jw3PS@!Zn#F{~P`bMZEg`AfLG8r%-R zZP{92KsZyn8M9*o?9d^3Nxr(qz&|jluIC0%EhIby&}!FRf&L0s!c#| zp%=%57LxPG{BY%UlaDazQ}YAnAjPJ6B%fjcZ0=z!FKwC&WTfwV+dCJxeuUpN8>~fy zXG7YM^o6iXPm;%IPS)~7awikib#|6}foUV>xayawTF(Kiqc4gt4+u)nS$rfFQy;^& zYmX_x%e0RX7ABj*T(1f`(e&$)TwHA}CxZ{mS(vK;OT5^?Fd=j)edaq?sM22^0X;*` z2<{TPMWRp znS>!unLRIhczE>)1khxZZCt$O9yg$7WJBUNzbak5uDMA5OR2DxsuV~wAy-|3{>vwv4M}?f>(0crZW0 zrUOo1o4TXBK`aVc5QSdJ`OHXB@{g>p(vSkUvJKo z%H0qbTFKuBR;8dw&I}iLGREBt*3dRSE$D@y5NAq2q@J|F8xnM0mTKVuZgUQGGrdFq zV*}0MrZTpm8s#)ee7#_~v7=hTbM!!rhc8Xe>N0_4ZANkIM1d6e)!sC#E@VblrFmW& z4%CJq|MCBfv`p!%0ADT0^84_LH^1~CKFm(D@#M8wuq-_@y~}bjSUZA52_aYfI4^VLILEeK~jKb z+5Ogf;su35HU$1}7D&7UzS?Wb~QJ+WUxXz7He*y}cYx~dpbT`SWxK=KI> z_8_Df<10WD^5^OV=GVju zj*JIP9p1`!N4PNA$A^ue{M`?y2NWc{`m&u?Q8ufXysS*P)sT8SlznA)Yv9lF_m<~e zZ{>sq%l1r4E!}T)>VlaBE$a&PwI{MMJ_r%Opi5YK;(P4*cpNcN+f$$Aukd3;&mTg1 z@aY>hrq(-T1gh(l(}i@(ELP^Qtt}2VYXCPD&B`!N#sV*uqYIL}I2$es{wYu`5~u;f zSH~k4px9}G7!CpR!o+ioSl~P*Vv%YA-7ZeS1^YKfP09`wMV}1HauBPqR>9lkbm*+`!J8^7&C$QM} z4qu+n{yVtyJ(tDfu3;$>I2Fw_ZyE}gu5T;3g~)N^K$QNhHR!T3&e2;B|l6#3Xhlre`i^I!{E6a7iiuDQ3&=io;UP`%F&{DyVJxjD% zWVKCgl_^0>Pd%g9AlLw;rOrN+}ZjIbb!T8BUz2IHd3y zf9hlb$(9O7>6sHXd}8WH!Vj%R>7MeqXb4_w^ba^TAEc}Dw0g*pbq%{ZDU9}Gg12-x z2ay?SU4y_VE$sGxcE-apxe1Coo~u?*28ZvA)0CZ<@_|5lkE;IhF?vC?Uji3E%P3E+vqL0% zrhFD$B-i{P>!T@T!yQ(`xhO?w$bBGOI|P_6D{&51YDaj}vl+QTy7oyixmfba)dWwX+CO z6$M!)mpLP~TD~?VOp0Hye8P@aK?Xq*{}&JbG5b8@e+E>W)qfJBpP? z#cT~%{l-LF-BtrP;f4aT0EC>}3-w?JXyIy-P@cxTf>TYI&M8rwB$k!sxB)=AJXRKg1E8QI*ZiYq&8klL_@Cq-g9-nit4?6k9qvi`MJF1TiLMhw zUOi0r7W+W5Iov)D+Z3OGnQ(PbUH9S{7xq_pMer?!3j4sC5T&8dVIO;gO5_wtPA zp0U~H*^)H$KlevRy|Z2di*{S(0vDV0-DEc_L#i93IPdm%8yG#g6VqP5G<+!M-R>5n z{_5}q-1@ZI`Eg}t=?UJ^xI?@4zh2B9NNxE<+2f7l%bq9!+YnwcD&+qnKFpjg&=Q!| z{$Iz7SAsy{n&bVYKX~)@f}L%oEbqO)un+z1+{@>CJIgEE&(}Z!#XgJgFz`TUfPzCl z*#GqaA{X8A5uZVtEaXx{~F7zxZS!yU<}y(Wa>Q#WXS{ZdfcIN2F=M?xdZ} z4$}BYgo;UG1SnKyrXD&YW0ekcImZ_tP)pnIz$UPN7$>9wo>HVD(yh{ULu+Jx7?Y6_ zvUav;2+P;D#HN2TB!B9JqE<;-O^kr~yOOM?vJvMOrLOAX!;e3aX|jKoP-LMF{uOw8Kq4-Gw}cPT4N4Knb0Z$XoPgh%mq7vh#Yr4r4b% z*7ccoLaSxnTJtC;at#EB9zjenGU)!kING$lt3r|i0!|QyPf(r1^3YT@6=6D(uTWlv z5-?gz2k!|t@3?RuR3#&B)NP7n+%64H(Pang&2UZ%o%z=ABER*oRBVGl2Hs`5ST}G? zn|=pj^q-mj=_i}Netj(<4UiZur}wwYn3I=~@!D;;cjwL)L3*DP8Twvcj}9%Ot3ZY% z;}k3MFEohvz`xL7hURIAFmtZ|2vj%;zyEAx=rj7v=rDEKjSxkK5|twRMAA{J)4P6ckOv zg?jfXOrcxyuHy;Yu=~$OgPPB0MuOhuZBU@2%NiyAx8Mmi$xlIoIF@yCgrA56HI3;= za4hvzavk{>68x8B-21&#`V|ySLxOtuDM&D){^(X(NMvw1onMC&+o1f<#)+EGXU2)% z<)`38VbdBz{uh;#^RzOKyFGWfL^8(Di5T--y0K$Y9-6d_{q!ht?}i51tp@-AtSjvV8%%o z0GFG2?nw!z%FXTSgQl$YiIfoKKF?+nL2|YXQ11sv#7MPe<|4h=zx0X!(kHrE#o=ih ziuAXif*)_kKz@ah48QTnTB<~HWDa!GVFq;kRB_xO-XS@4o=LDLt100P=DXrvE?}Kz zfofTMiz_p?w!O9Yr>*T@JQJyDmEOCV7!E>4nskwl=HHP{`wVYV;?-{KcJHT+t?DX$ zE2sP?3;&NBHNAWF^W+vCnK}CT#*aVkHM{#}vb%3?(OpMR-#(d`*tbt^Ug7Tg=0-|W5CTE{6Y-sTuqo-eQdsoB@kLTi~Md8K*{!5ba&t^jWZhvMDBz5|^*^kWG zB#z{tVaALx@6LccAuD&cXqJ=dO=Uo8&%?V9o5FD&7;{rGX#^SkHlgb&;|xnTVDk>$((`+pPv57@))%HbY- zI`qPBM7xkqlydUKI^_73Yz9!5en7JFP75uLABaDIeg$zAUS3sC5j;jr??0?idnK1{DV@~K_z6;ck*$M7$o01 z$p~M%D|gyV9;DCUC!-j9_2qJkv+eTWGyg(Q^(iktl9xq7MEzm`z@PFHk$&4Agq)*A zrw~B2H9dEMrA8OK-va5#yJdhmIUrg3-2H6E88LoCm)%jfyJlJ&p!VAlbdVK zH^qwTNMY`oIP)eyyI&;DJw>!v3M0>NVq!MQFF)hn-84NQuI7szv=R^(khIh90q=x7 z3B1a%eZb-6)^<8jE!O~P_?|MWmR?=)L04BDLCc=s&2CojND-M4>>;1kBD0gu-}f;( zUh5Ng4OHHy<0G|I{-;~^z0RC()32ETlzH~%e$k)4leeXBL(M~8o((AEV-fKaG1}P{ zIyxoq#AO|pWJ!4*)CD9PdDGG^t@bReqrLBPH!+^nf(i@QJ9{y>zzLZQdASqM0O8>) z-qi-qycbG38Z2)lOpGl+)25F6m%K&~`odhl4f;}h$RF0Oa_Zmf0JY~xINnVaOq(63 zd|?y3h$z!MqRx;ayKr+SV=xQGojSs__xFD?jY#`refidPCB+$}Aq$kwC8mIc2ZA3v zjtVrM8atz)+fKvXoN>VS2pxdpZT0v(I!iSMQgyHjvN+7P{DUACe#0D@ z?0qs0bI=VA=CyS-$s(N*3P&`DY3bGRNn$gT__8`w31 zLUi}%K8guli=a#crjL?N#Tt!%!E2i&pvCtBosVm*-~irBXH&jxbZ%4UiO*rqKGFxJ zO|J35_~>AcOp2h16dju0Z_e~a8CE@oyttDg?&`m3Zv4&_$I@5=tS zn(^ppr7~0^8N~q9QT^UT`{|p$d_o{^;wq{frOf%5 zHZJv+d$OQzB`702Cg*mi=1!o$o&GUtAnkg@$*L=R=1FZVuc)x8h5bX5bTJ}xtDjRk zrMk-~tEXwzy=i@FS|bvjL3ni>^q8o56;L^S?G(JWl+`%Ye;ob3zpYv za|DtoO+BwU(&Dkuh_L{ZXan`%X1xU+!Z<})jPDX=0jSSJRED37(IM3pdv!Q zyW$6h;lE#e{Afz3g#xH=u#&cwlv+cnp0q78nx*~8;x^fW8>yr%JBwFzPlt1rcc&|A^BM2+{&vl?PlG;g>Pb$&xF*g@WMhGkUQQqwD2hoN)MAhU+T=rx*(Go=-2@{}=H8V_xWrN^^G zE>mww;LmG;-*)%f7I(WIYfSXnfaGxHMZ_Ey6P|pv$C~UZH%ffkCx1QtBC=ySHFztJ zlP+PQojaidh8QBQ5e&gicd~b3w=#zmroc$8l{YBRuMLZwPn;yT7?!H=fB)j^p9w!p zcU;F^-M|0(wSd4*Jj2K9*Hn2^LMd75JrfG`>}D*h4BYAD!|K;xr#+v1ql7TtdTnif zb94SzL`S;hFMh|5Uw_q`HSEB=NzGafbJIrSkH7xJ&4rEu1>XK93TGea(MCYO4ktySn6yQei)jDp_<4%0vrYn@L3Bn z{9`9vBW9oLJto_pCHT(QSzl%U9n-%)cLE%62?f*bMA(BS4nNt6U}v31*YZHyR@6nL z6$?IHoXDmjD6=GFl9SuEBTkTa3k8#%#h5Hsk)bikWGUU+txQFt>mkdf@3L7anScs2 z(?t`cFg%6aU{)iyJ{g%nmm>bth};MP6tqW2+LU%d!=q|4IcuX8JE73GS_lF{eATohg?`0)d5D83 zRSPk*)p9#K!cnEMJ;mZ8`2n>qnd5wu7QDV@wS=ZNKV0<6req^UpjGY~(H_h9r~^;U z>dH=YBGcBfHjE{WQJIQ1POhQIXVpuFJ0x&@=fmWu470UOjy<$Yb)H&{RLb~YeO$Jx zcuRI0B2VeKdW(!|g~Tai;S1IPCJZZcEq=8W%!mub;{nP8C$H(yxw?5Gjl7?RB&E@o z3fop2+9vKZ>3=|(XuR2B0R1bljahzb1%Prb=A;oifONFwxfQ3Dk{)&`2Q-Sb2AYH^ z(Ate6M+Gnze5&SNLIn0)vS#MO?e#QkJ%tT2WpXI+Rom{s5(G=Xkvp(WDyB!9!=92m zIw|C%dKz&JRK~GbJ3QmL1WG3x{^X{6I9ql6SS;|$|cmYD`xiD>~Ub;}o0WvRv{nLfv3B3+~!PeM#ZFkhs5@!2b2I{qsKum`N1}U%FsVM&vlnAU&oO2Re43vSr4X3S z)iW1rWuDQn^@4$ej)FzhN(b*aDJdpAuUF}5;7jz3DE|;`U9IISnVnl`>quYtc%duW z>+#|@OW!88r<3Px=8Gz#8|n%@g6V`Jr6#Sp8q$rY`ab*nTR;{>E~ztS>%@LadN*j6 zEv#8EJ$GFMTqDZqYFNB$)+&rsrX7D3^$F__YFb9&6l-osQx!!s9dMv_ZE+&2S?P4| z-U~?HMO88;K5UdXd=UM5!B#_DSOhyd*H?A7mKAZp%&q&HW#?Oy#}OSxpr`Lyd(jgU zESCP?VdZ(~&_c(+Ub9ZLD7M_lGcNaqthU3^?$@~z=s?@cQU zTz#t((=Jt3V#=?RyngIotiHWGd-vJOVt%vmi1{vRzKwPG^T%~r%rLLER#Ln2IYs-J zCJ0G$!w%ew7&N_&NT}5FA276gWV_Cv?UlaLX6}m2wDB{j9_HtV$H$oNydud5 z?4{PmB`)nss+uG5BLAW?l?z>A>`Z!Q{%sq}4>bqmk)L}MbT@%aC|6tp+Zl4#7;Xw9 zs^JpIdse0w)eu$8%V$?3Y(NC|%t)LUW}(MXUwn-uA8YPBaZg1F-wvptPFYNGF8XFn zgbbx3FB-)@VCwYFk6GYGXJ)3~;_96O3|DcB0~J{B*cAJxDo3b>=L5{^EDM&HQ;O~3EJ+31JQH7k-j1Bh z*`*F`owiV2+A*gd^H$L(`4|x+Rj&oQrk3rk4|&WwXpf(;n7+fqNQF%6&)e`>c9e|D zZBE?rDftT1?%zr$oNli1?_yA{=ir4nC{ouu84thsx^*aeAkR!ZZ&!2)-Ot1rr z*iPUBQ!?7q6is&2NkiP!GTlJXJk#g$1-cEY8{8@5475w0=!;z$XC6CMa}DFN-NLqZ z@kw?>-{V*v;99fcP9z38N$*l@Nc$`nTqTyx@d@~<1sJ@taCelf^qYHaA&n(U-}EIA zefnTE_L^JP!1+?7c^$r20849vj_+yWbWQY$GF;{&Edju&0dFU@Z6bw{!W%?l7Wa~( z-M;EpJurjOmDSzq9qy?#XxU@$@Xwe1(TCpGXGp9R=t8 zjy-1CUdSuCx2rD!NWx0qpL8%lN|sLeyF(XO&QJZ6%}-T7;bI7nWbTv~4!89Y0Iy~9 zu$Eel7WYB;0XUDtQ5g^YuwzL-bRg+(KMJ}8lGQNz{$b}T=lDyCNZW2xC_4z{4K@*hiZBYs*osga{wrbs!`gAv9PfO47 z)y5g;^>K68mB5@#z}Y1F;a$d$9QTBiVj&2^2aJYN?by}wl)nImy54vEMhgH|%C74` zin|v8Y`mNOw4JVh>L`SafLnX*yKe6_oZtwza=+qMaR$ClT9g~KX1clk>U7}cZs}Y< zrLBTFy&&B+im)T&(C$d4lkZ%IlB`9+H+#QRfj;H^*ks(|7cP%=Oxe!m*(xPlKo?Hf z(d2}ip$Pvju?>egti+$RDa-BXKK-^R(kC$iJ2*6F5%d;`Lr||ReM79-q>`;wJLL9q ztEK=r*J7)c$WVnoSow1p){&g9z3>wd>#p2LS%O*vrC{~0l{wpzRI?upJ9H=n7oiY{ zO(WcGQ@ttdr4UsV<#iNCubPbGXvmAvQ=f8(+=V%=uomiU11zi-RY-?$0vUKaI0SJD zjU^J`10@o8y&$-w#+ZS2C1d11^J{*5RjtfgyBUBlQ@Hr zKVqF)m~Wygv`R#?a&Bg;v+prxT8;Onitjgs`#2~R`6z`$*vBT8&#zVhKB#_srWq_2 zEz$3R9m?j^!$xM=2Giy)Om7=4iy6I$7yi~iv}W6ze$NAfw*^hF~k{dfN>Qo z2)4bUY^zh?-ub^yXp)T1E_1e4!Azt)ZawI&RBj*#6G>LkF4y5Wmo3mhPk-(IyCz%M08zd_nwXSHm7?ty$QxOEX)B5l3*iD z>mLk918kMx0IgNmB*cC^Y)h4m-+M<)aVhc#wh>IBo|*QVRV95-<1^nG0tZA4P()<~ z1opC_2f}J@x7oXC^zejfaEW}4uj+fJ{rA~dxRKTGA)MqkKS*+ z!HJUvx;DnGK5bu|9OxrhuvS{+?~JZZ>Tvu_nCZ(E)s+&YrbE`rWPM(RP=wu)vcWd5 zatA_F!qCja5F!XD*{rn>zN_$!(h^!|%Q1D|^`@R@J|A_@o;1*)v|JvnkW^2{37a{V zyJn_T;$;S=%kdeSze$Y*?=gp+WN>|2`8LcHm-j)nG+TWw?mq6f)L>_QUx?=8GCeK) zkH*q7;;8|UeFz|3K)2YsK(Mq7ikYyKb#Vrr`=-NCI;c3igegMYV&fZEBI}=hxd^py zF5a@%Kx{U?O=y{VqoX)i_NnZ|rRU^$Hu3^|?DzR_Y+=)48sZueu?LP<$bhb=;DLERBVi5S5FPt+g4ci?;+Q!H0xZol|hu3;?OiDIJq|;J{hh!;6ts zLN~Y z8Q0;yZny73QGdDtU~`RK&0vWEL2v>*YtXoDfq~gt18;n7ZtC2mc@`jY(OMPWDMU4C zC(PGF1)4_^NiWYKPtg3>`}z62(NkTEGq;XM$6__}vm82}njkr=D_FX7Mq~@$)SiwBCQojRJsbCePEf#U78F`@EeXnUKSsos(N1mQo}rts{Sl z$&RD|n@l>1OzF>EYuxFek?RVYIRP|t))#*r5)Jiqe+TE{93$8fv%wKm2Nb=3XGo5m zXwg>7&JJ)2)ooKE9<;D8e?)t9(@=BETT;&G+i!5Qo+&@q5tqrSR-lDLx zN|tlnRjX`y&%}Y>@;q5m=IrZ*s!N{G^HK;q989b=|IxE)O z+?m+$nSluNEE6+?D(pJ**YwB_K*KyA4$t-P+^NO%+APem`ChI=^2Sd3x` zbvHQ(Em76-TO5HVbr;_+eY^PhNzOUeZMCR#%!! z$gpJq07!HI%AXViMA_wuuhpybhFT5^edOLFzWdMr)aYjy|H;gp?3VBf%5?EZ1nmuZ zFfE8D`vJ?mX?hJUOS;XZ=}fx3t^;D7X?9TCShQ5S2r^&`Ik%!tI!2LJx)_Q0PX`}NOnb&)R0LXyFBtzn@#CHs3ls$FJP)86C^Cn2o;QXMrf1lfCi(J>+ z(KO=*^#Lc>s^FR4A>tKz1035oG6{hv3lx(5xmF!O{DY+GxCv=G`ML|v#F+aCi^ih~ zOE1qCs1cmwJ-cxxRq7JmzBAJF$rd=X_bzZ|gq;HlPEzdr+iW?&Rk+bfck42fU@g?R zB5&ijec0*Gi7I{G8B^AlxzaxTAXq=1naj|fkZ5TH{B(P<8%}$NI=SEa;tqVOW$)M? zc`n$Te7YwjGWpnzZ&!O<$+l5f5`u1|`2p$9#_>srP9o$fr<_dsb42C$48el~kZG+d zJ^V-yCn#{s*ly4yQguBtWX0DLG)gMrsU*b>33PSa8EW=Th|5mwCo$)KxC2yDp|z&} zfU26)RwlICu=6%4nj#Af^TtjB&4enw#dc4+pQ~N{u?n`|8eX8%v^;QZmD=bOrO6Zg zgRN7!)x28{x6(Ihr@%;q5zdiC1=!x95K;5V^Ip5nR{uRcHCxH+*PqPG+p>4~V$}a_ zFof}G<>3i{5aAFUbnUVL>!^R+Lm?qoC9J%#!mSH z8y0FQmxjbhyzdd>OtS;BY1-dueK|U#HQxrr-8@G@LidbZc^n&2&`9M}juaLxy?SGWHvK<2k|~v=$w(<3dMo4c~%op zE)Y)&w*zF zekSZWKR-(nPr%KX$KUap7HDyM^xL8!I8J9DL*Q}9u4#8SBdNol@&TQjMPi6Hj?e%W zVUcK~;i<^Fr81kVR;fPwPW+#7lJK|}{K35ot`g1T8v+p%gXsCsTw&>1B8(Wj}L9rD!?e(v;g<&8`w-3HJ~ClTxw^KwF0= zcVEt+=ehW_C)cr34+!@)SlQa%BRFjIP6r}r!uZIA9~=Tr_!7Y1?Y((%{7HWBK zrH@!F&85Y*L|%!1(Vj+PS&eum1#YO4^Vu2L=-h5Wpb6RJ5SH2I3(f>fI@_Go%C;up zQfU96|3RUAd6n}P#)?iiX$#y`X6_8eVmLj^Ukfbed#2)^?Bf9pndpQ=m?nfunbkW$ zXrtu(?rZ?3K?i4;ZN5?~b=DxgTwtI7Z%WC++n7RVKAcLpEUVcEeK2|vlSsF(4v< zu9v9mmyX-^08c17!}_ZclfQvKBw|s=>~W68tbGpcxu5ml*hTA}J1B^d=-~-&vo>Hp zsjm4KTJUn_&p6G{xjtxa-P3C3AtB4D)5Zw~en_X@@g=q~WO|I*QfO-%T32Q z0ahCqxxuGQ;+OO#rs7fGb^bM5^)r}Y>7FW*?76|6es2=u|8kAvc8A72r-7BmT^P)m z0(b1vPh$p>pI3>9!?P=UeraCUmyoX!Z-NRJ?Qa#Gl#zD&_UT)|0|)Ax(x);>^BqJCL>(7AwuePjg}K~!S}_A+UEmUs3xR-dmYMSog@P2^gI z&S-E1Unw==osN4!c|aaNMsw4MJbS$G`PV|!aVjHh_(L1=r;%y9oqkxoFU4F4L z2a8zus&e48Bn!k!%~3g!r|_RN0Ujvm|-ECeB^Xc!S2u z*0eGQt`yZNfbU9`Bg1d&yNKG1y{td_u?Ch<847hKtXt@0-8r{uY0pv|6FdD-bfrGx z_!9qNO*CP>JLcb;a+!Z}rgajo7gPB!wki<*3s3z?>TQFv_-V=5O(O)9$@J(xLQNnBek~8C$&Vyy^n0TSy33bsZ*Z}uU8D*plW!bMCZD^9`sDMX{>kLaR0*a1Cd#*zt8;7)7S3B@Vwm>P+;t-0HIXf?JciV@A_siGHz4wkqnCU`1M5JM90Jf zF+qTGByR&vz;!CU1532f2B&5!@tj>An8<6CQYB*7B=LJdn+*&?372}qCjNIxscw;J z`%NobadzV=B8qp6Vj4WURX-gST8Gb;eY!!4lM_@k7joL|9ho3Uo=E;>Ww|aDZs^>VQxi;n*q^2_$ox$iwU>J(kDxSxQV-2pe?ZkivCu5R!_{Lw3GHB4}|7X=>@~%mm*e_GQsH=O+u_ z=Z}t_{*R>vQqDYCS|tB%$vK}5AYyQ^+@4i3b5C&2bz`(26(D44w;8NmH9Bo4T;>D#f>-t>oi_U1&z(t2MR}UQN8ij&CPlOneRTbh-wyur4vQRawNdq>2G!l3D;Bz*0s+o1J|e$-()1 z!bwCMo?Nqw~U{j^iQ*)qAn zO`(ado{G{WO;;2VF8#L|8}CC!79h{`6WG!*!fiBC)BDKqe(O8(sO_(}#J%~ROkXIh zvZi7Z-zL8kXyf4cL#hxY)#rOFKrXJ-1XKZ6Mng9xSkhtFQnh{+XtI$p37g&mmbrT& zk^4rX(bB^kbvr*1f>iDl6?mnM!n z^LqdO{{G7H?)uvH>dVdbt-bY~tG5>y=ReHPzkmOJ&V`mG1pv(vEj6z{l5M6xdiCo5 z{U6v|Ip~%~9xOxf${t3D2`B*k=<@LYXYbwC+c>g4&ui)_Qm&o`C{f@+hbp^T+onj# zX0;@$MA|NYwAvp?f+Wfyzy?4|+-B)wF6TAoYQAsYVD4s~Wadfc_g^a_G82ge4^~O^ z-qpQb0`m|Vv0}wKAKX6k(@)=Qzj&T}JSIwe*0}}Rng7W%ew2>#UKeB9H97z%$7UfR zPSQ)MkY*206ZMTm_P&=Jj)#BxsrUrn`BD&=9i)`ZSdB(rrIXs?42QN^bY~UZT_Jrd zOhE#H^=EPp-`rIgzCvwv+B>*-NUoY^a)s66OvK@bn{}w_xk6xW@Bg9_yF{*!>@q8Z zD|CnW&Q-4{I<&ZOOpgnLFYds7e3Di#lsY^o=AZN|i9F%l9V%ghN+eJwfZ}}29f#e% zoi!T8l|n}+*4k0Ab@>W?uN0i9*uI&sMcm<4#Q_CzF{s8S>yM;snWV2jwbMd^TX#2X zGo{3%JCd%em=&3wL+MmtI#3F6DAU?DL50vqRa894Ql`DZONnXW%ftqrxJ`he+GI%` zlj?Dj_(WsKBu&H&|84uy?0Ps%_SK>8M3L+O zus1Q^IuvW#2?2%77ou2guXtMkrn%6qK9Y4UE9}t7V@tb~t)i|Iz{<<&m};b4*l?%{ zZwX-&@*+}Dd@1zC5P2)CR)+s$yv*7jpjqA!WvBV&;lL`5ATF+MZklg+Gn|}ceNveAfF*-);fB$hN~ne#NWrv9gt381ziTKchY zPg2P603(Nd;kWKK8W6hTETJ@rd%uuEO>BYr+K5~vqUs(r0g3yb)!wEO7vaRBN$K+k zlweYlj-+u^J*-{I(X0(lp~b|{Nn_F&s)d^CH|T9M;Eeon*p`Dl@#(}=7ujXco{ zBgB>Qo9XM4JqU(r;p_yPc(52GkTr`lRRD^Qo~bVs^LLUL9()G|L~776i7gdfu{=!!*$I&*MjHxejf&#H_;JST+80S*Vlmbt)QFWGE`|~K zho=^UF*;Y~8cRSd7N;|OB6*XfQB7St>v-5bhCnF_gZBgB^?bVyzIA_}JuOM|U17eQV(?tkiR3yOI@3@)JJ9i7=NwyIue07c z@Tr=y=iL0N>6*I^vA&cF82B12&E))9s9NY@oJ4_86Xa0om+5Po`1WIil!y zwk{izqepPV%%e^D5aku!*AC=icB0LKjt$NsbC&C64Mek{a-avix9mkJL(aFFUo264T83N>c@StTFx=y0a&!;B~+4|NgE>orUr2U9V z#ds&QYY+X6$TvAUj^Z;TOVMNkrdU-2r08eDz0eAme}ZmqdKCDs4?PkvA*>^Hk-PKK9>Y&0D zK4|$A76djre~K{^>&(Qcf2zP>7lsO9qHtb^(qdjhTZxHw#Azg=+b} zxcY7K5sSoFb6k%+L(@sD%7(xe9>WTAO6@?B$dDb7lcV5SPkfsWbYV9KxD4o-W+EJ3 z+k?iHD(;ZAwzN#uE|}Zf2Z0t?_a1Db>aIW5fADSvgP5@xTS~pqjfO z-p6dB%$Ewc_bamw*H@D6j`V|OqhmY~TkyxEo(dh=@o&;Bi$*UFHaNpsmbBxso`~%I z?7fu9d(@+6RYZN+EiiuiMy~#bZXNlwQp(3hpXwd%@;56MMB7XZ)OF{^b4xw98*iYP zsXFXT3soT`K~A5^3WAeS3RBAi@v-vE7^#$KXQm_y>v(d!q@YI+7AXCq+UU|qBz5tQ zuPjB|mlwr-Pb>)rH357V;Z9UL#@(j^Ct=5;JcjJlSKJyhjzuUk;R%qHX7bJ8tztj5 z+g6@B?RJ{3OM0%)zyc&`jVYUodxn!y`ZUd2bIy^)&iyzebKjP${Z! zlUHLMgakDGce%qG-~C`ks>5M@FlnTY*HiyXgpjHMu3S++4;9j4NkQabO5*{^;>nc( zDpYT9#P~vX*i|c?VI?|jmpiA!!JoZ~9Zc9R{bBjh{Xe(xfgQ0-4bP(PPJ^!c6|Z|MmY&Q~1CC_sXaLpZ~+gx2M9l zc*^$_li+%1_w=w@Uq8o!X8QPLGW#|{(JeQ)?p-N?25Y%{raP&#KfU#+k?dU zntz?o)*x>i8CoLWHL*&ftORE}Id0NZT~ZE%qIR(jsPbnh=x*xK$Zea=*Yg>`2%?#6 zy{oANamcAv>2TyVXpox;IZG#}LjsXI*=^~o&pW!!1V#vSLyIg1G0@+ns!o+l*C6MI zNQs@1>3L1b|yv`ltW0c2LSq=}B|TB#1H)+k9XU$l2Sw#cWlvXvCS zQdE>r<_yz<@t0sCA_?(wWgf5?4jW)kTcWTD{*Puu!HB2(U7NyOdDK_b7{b049&HtoJ8p)t zgDg$a|MVAHC;h|HSH87+F#g3C=p^z7>#x~$D}a`YSbz-oGYI+)uR#3W{El$ANJv-8*dqMe=_bpv=VuU)KhW6ms#Cp9dnysQ8_7lT_jYMw=cs3tvt>Pv(B%fdVC!o%98aser7T0F$8omYXt;RC?>Exzne;uj!K znl5b2EFLM|)*1>R56DyebZhoe!q?UL3)Sena_g(!DTN)Abb^LI-Q`TgiUgTTldX6? z#XybDFz+2Rt%EL^a_{zfr~94fnEdiEmc=`F?hyVUHirdf+H{0{TX??rIz{L6HdX$6 zXWIi363qGhhx(VJf7pza*BE1ipiT?XaB=l~x%GMLkuI#Bj!Cq~HVLuaIy&ufgmw8j z>5cu-?Abmiv#hrjQ!ht)jeQ(;f=GP6(puIvg@~V@*skc$Lh)ajt2owKzInj6L-N1* zU1aYlI(j+bpdZ~g1T|zfoj>Ti8c#MFYjUv^yuv)Z{XLIB=ugMtED_2o4>i_Qno1Ku zDX)IA9WTg1yeEG_Cj{1r7wl*IXUJW0VD`@L9nzF=$OHSC@7(v@pS$-Ue+0|wBI9Ee zk?*a~=O?CVjUXXndYq#~i5T$S;$qC$%f9YeD2-0LiHX+yU1uW>WVDYnhL?wf44Juo zyMz^PPafgY+1Z(nNJ4_3#>-@&@LWEZ3%nA1Z{5WVxzt)_^B!h~CGxXj?Zd&3huUiA z%v(K-$3f(11$8jE57=U~ep!?+o{ITZfU?ybMAla=1UE!_2bI0PXP`z*6#k``CTgi4hf@V)Us*kf@kK2DA48KtFB_vC~ zK36`ePwk8B5eNhld|~*5>!s5a#1@uU7M35*{{sNtx(jMTELssYFgBf>j*glc^O%zu z|3#1pyAv~Th!SWp2TJW7#m9d9Q9I-0Eq|nkN2GlOH=OoZ^UE)MlYZo7v%u{9kM#4+ zo%D15OFcOn?mbSInx!Y_({+E87>Z8svJaz+^g5S)n7H*zJ!(xf=D%cJ*pr$}zjglO zkNx>OUous}Y0&}Y_j7OsFU%L|$T#24+lI_hKA9Hq0hq5lhfm*~ph<{2_#e$NEjL=} zi3K0?I11YA_}pB&>#wwwX=e0j!H=&e6ov*p_2VZEXd1`V5QNrfi*2uVq=?vY2 zW_rlqGST1V|MHzy*Ce#Z<&TH;+V{2P<#%?L-`MPYdbZ6I53Cd(prHNa`}YgCwV4xd zKPcSB7x#AZ{=>q3(f-N%kHUSj44TZI#UOORFfit-j+ChwG1%+p6W( z{ip7$4)Map!!`fsFj$MvurvIx17ZSSHQUTSxR=VFEku`Eg$d2R)vmiJp^k?VZ!i^5j!g`>2 zKlU9_?@sK)(wn<}l5zz4i;rz72(d^UsEL<{9clMkCo~kqlM%D0)FYQ$ijZ2wRVP0{jhOpG9 zJ3V!o-9}nQN4~1Kg-?qZ90RK6=8=(C- z&Y?N~Yj}Ci1}-ilOxHgVN13C5?ypER!)*9ib;O;R8PcUkz%##G9IX|6CnSqCl^ixW zXb$HeKMo&pv$lU~J|{!N@Rr*+gu+g29@}K)7VeKJ8XY^TS)fp z>kT_OjlU;_?2BIp-TkKF-aZj@`yHM^!#*L0sXuQ1FDom}0&)vm8*#ue*xkqO{4BjU z<&wtE5C4z-#lwY0)|hA20p4l6#y_qAvw!?!zB$h{87R%H4p2vA2?aQXkEM_ME90{s zfyPz=C7h&?xan`jnTq(rLg$URh9Kqt4ol@)%Z$83dQ~jLZr}^5evOGNcNHoG%vT&X z*pSJ%rL0$hA$GBj5l%Ix0#5*s_V4OsG##iC4b@nCzmuBu4AXgIoFYb#^@@-25ts({5g&@Y=&4oj|ytDKs%)sEFaro~a8H6qreb5i#hBBsA zH0>VD8f#`WE1{U69;4#5JiwX&&>q1Mddrk0tvb;B3Dye-a7;}EDG&ibp*DuCiRW|1 zrPSty9$|Rn#5|2)N~+b>OyWGfPH2yc7v-`2ljFKQVrNNvZ69I6JSH*yd+h>$Hticp z>k5?Dg(Q17P`~(kak5Q402C(x`1SM6C#%o1XWzbD+uqoG`9=0$yiNGMds)K*%A{6E z79w_|--Rft=$i$u3&x4D5u+2tpeJV=`>GOMh4g;`wv7bVhQzK&82Kt$W?Tphs2i6Y z^Z?T|8HLdReNFROv|jzEHlf8$ zcN5@*C2c)K@7YZ=t4!a|Phl*3zioC-ozhQgE&Fza$7j-Bw5@iUZk?39Pp0;tyTvn1 zONgQBRx89KkZ~P%b6lHm7K&Lg&p^b`s?1m(ZUlRT$eZpc{|;N!g6emfQy9{x6n>(( zaY79a`_{-tVI474GZ&>yHEd;Gcas`2!4g`q40?I1xSmowDD@dq-C-FY)7UNyFdJ)x z9VbHUzvVKpP6U0z6>L3`_)N8k!UEOk$yX$|n&f*%aa(A?j2U2u3Da0j4!RnnB6bRA zF}Qd92lbX@gPOeR#-_=uGDJ*Xll4K{0pDD_lTCm(J5+s0Y_lCcn8|`zFe>?5=I6nG znW4~N%~LcP9u0-|4MIO$)o|tiSqVVda2sM4Z!rxs9ZCrTmXQ*kXlA6lVY@7N%<^hN z*u32g;#$!9CF7dv&ub-+kE4CST$%;DF%vNy=Zi<3-ih*ctcHl`T0-g&r{!r}B_b0; zCPo-slt}_o8fKU~kMRQj-G-grx~s5#y!C`Yv+JQ;BbHn*e%P1Yz=~WpOr%w)zXLWb zuehaVU$7kr`(4~wt9F7-1wR0O6O<7X6vBh~X8$c*x#CvOxeC>gpUb8pv%WigCBNS` zBS8fpo+xHTej$O=sw@_llkirjKVeMV#Awc*N=2MjRFNduV%i2vxjvyExnU-N)Q+Oz zl;wm#Uwl_sk|BWIPo)pEJYi*6H3n~---0p%j-1|oqkmvs82w@&MP~h=QjzC~(*~d7 zj@H13Rr%z+9!n!^Hz`Sy5A(&z3MY|}5{?!_Db)9pIIKq2H+Im_MJL8_Fn~=0sS!4t zQU!O)+f|qj08#Bo>np-rh}li2p0UzqoBOVnagRVv2!s+G@Rw7TXpe(>2+h}~cy5$V z&U3Pj1Yw6RXHhjnnP9MOy2($GL!-*kktNr${oB{ir=oqNN>?UzcutKa7*SF}RB?pl zZHq^Ia=J{1`mN=&kxw>l`?bzQhMD8AW#tnK93&roAH!?w@5PcDxo047;`st) zQ}H#@-Jx-bN`kcm!p1lZj{jYBDLs5vgoN9iWBvxO>u}Qyg=UPlhXk3)t*7u2C-np$ zTU;T3oWNMr+FMLPG!^){lG(MF=TcIg6M$5t;^Jd^zSD;h7^Zl zm0-P@#{K2g95OclgCXC#yMdcOxZ^}twB_;K7uck2xXxMHam~lusA)biH#cHtTJF6`d!c;afic@hfoj-~PO4w0;g$2lQ4omY5M9jdb z$UAFgMU;uow79aiN-MG2?a5Li%uu|8hKj10ZR;YZ`>;3I#SMXaYP~pVIphYr*f=l2 zs_<=Ku9dwU$ep-7Adw(4HOXdqSHTRFP;IAAXj{W z6k**3trkVTrRH>Wa+OGdfH7r{V_urv>clL@L(m8a4NC}ua3BirMNPNN1Ue%6PMZk? z47C-9tuN@m_*UU*n*fs#?dM~0MM+lA0co*F0xn1vN`dBH{V;Nf`lPxOL;ibet{}3i7zZd!bTR0GjPLY0NQn-GfD?L> zh*5uxcwAy+qm<*^R2lg~bc?r$Kww+H@jL~xh{L@iq|+{h<7_ixUZ8@d5dK?BI? zg;Mn>vLkQ_tz46Uad>0DMsSO*ZEY#E!hjg(1cMN7xBTnew5L~fF@Rd>h5CT$KAEs-=D;EPIjVzv&_01P9;l`m!8Y8gTqMwQFXM4>3 zBuK{$vEu7t(M~KhzL6v|GbtJiN|SWB0#b}Sdq@2)si!W@zwPY8T`kN}z(p{kY}~+V zEyP@PLzj{!0p-dyJODna$VC<53vC8U=-G+FV={d!-tw&#wbVyBa`8sXJaOLew+UiY zZuRdy)hlG-g zh#DCfPnxY$$3g!di@0~tJM+KIav(Tr$w>$UOoDabLX9|+MvUmIkO)2PRlJSNTe%9d zL0cW9Dic&RrRqAA;S5ikL9Dz5>0De0E)d`VB$jJcNL-o} z$Rnh&mUeqs>?wo-A+mju_=G7;bBz`>HHHH)s#Bq@FLzkK7e%}%^eto_Tfk~;o0Na+ zgf{@q#M4G2u;!pchNG*4VsfyiT%Z+;i!r3oA*AU=3<{gen!Heb1Q9#>L(tuv3iCvq zq>ezN5knEfRP?=4#RRYYVW!CigHRObh^xzDAfy>fD>mK0x4}{EbP7p9$_u-lKvR0=2& zNxv3FUXu|+tYt=#w51`^1C7N@F*-(^JVL8Gy#tkPagrLekLj4wV$SDxcu4O z&ahMDl?@w7jL%NG9hatya+&}bRQCn~t}Cl) zo05W^^FQP^)Tof>1zfG@i>6Rgnu#nBXp$h7V}xbgL3_hsOnuqK9_MsQ*$I258tOe!#%BjpX3s; zZHRA(Fb`0N0Lkb`st2+r@l*2X-*e-%28iNqBTkXeL4ov@1WTO&MUgXnI1BmMBqyD^ z0Z`;*r2aETPNHb%$4RCP02E4g*hgirC}1(t<0%}$kJ@{}PCR>DD^|0rSRG9VF?<|0 z{lO_okoOcZED_srS#^ezU8eBqC<=(HfoUvY6?_*OfrB|M7LB&A z=aY_an#Huyh@gbdfHNv)1oZ-KpvX9AgjIJIrILrCgV=(5yJV%-H_&i#JDFl(9`A`) zpb&RnfRec$CN&#dSX)ylEDhd+q;&DY)aF>3E5kg!BWOl0RD|0!IoBA3zB9_Gs#PG9 zk!KV+UC9wyB)6+fmaQJqM{r_iwJ6$N7vK(>B<3CU+9*T>nLD0Uf!9`*xMRFi)Z%n7 zlAu+T>`V?6muXvLvz+q;Or5qw6aJ3q4rcfgWG0<86cQy3M{4_8ekNmMR#PW%fuP($ zS&J(MwqY9)if-L~mFFhB51ipi4j)&W5rlA&diesYEH=s53nbFG1jHCnTdA_br&S$m z3P0Kky-3)x&QR`&XxX#A2a~UCv(rHsZM+?}Pe#;f^yppGx{hTvoUbq>3&|=Ch?XGB0!Vho@w{Rf#Z^HNGEltxtJa-!DZt{!ulM;RPcQja`~@8w&!sNz^6UIDJYA|2{!li^7)yv)wcssaOnUf#NEu|mW$sU9)2 zG7&pkt;uFVCQ-Q{uRoYiBGA-0NIL2hkxPUjg`v02wojQ8+b&L7z#etAHj5{0%F1J< zz$ocig%4^gB>tK#i4l|CJRsGo*R=pIQnhX8+q<;Z`-M0~kV0bcq+So)th=H5cM0za z2irXp?=or-c_~j(#f%zC@!$m7QjZQ#!||WodlNy>W!*#;G-IF^P1j-Ig5NoT(sn7Z zR2}OitRZ19TDq64m`=>@HWk=r*+uj7A+B7sWOryEvW%W$NSnVEh0{1PM2YOBot-cy z3`S{5?hYKa#_z`8@_^D7!x!GXiRl0sLG`&p?8>dXUlHanSv?QO26~t@%RWWuTvSJpfRg+~E>HuHoW6!%M$@3Gha*>Ll+`TCD)jS)afx zQFt+Id84=+rsp3_Dz}k^31lrsD^!9nF2dv-D}RqTZF+{lSyJ-6C2CN_jog~IKiG0| zJ!19cx)JVz31Kf*SQC)hF zmvRV{;uk0BZ4RD)A=RNolysJ=kj+7wL+$1v)f6NuB23NMoj5-MiDEziwng{CxRelc zLQjXiK+y^<4orqARGA2&QPJEW!;`?L|BxD@&JzUXzoay-bxe9q%`5C&8A zAm!3=tZavSqK$vbyCXAMD!+|VkVh~@c&a#;ElPLkAc0mv9GlreWMwwp8}pG>c;JZ< z!gDaMtF#tVw<#pa%pnork!WBc_9d)3(6R#GE|FkY_bZ!`HY>p_Xv01npPiK9ZC~eFXiJ-PlJnX(lm0}72L`9DkW#nXHBvQ zk(IaF2L!_fsR*A9#z?d3IKrfl0UH0kcej<5x^c2#U$H7Xf7Dk<)=8#$yf}m? z35@%h?F~SdO5>1^XT*7yf{E90W`zf|iy>wydat+?{AnfYG*J>SUTwbKUVXWZ`(gVj zk(%C>RNjc~;AIQR0^w8U6`5-4wwN3C*Vczis^mv9{_8%L5clEcT^WfXgN|YEUxE6s zJKbH-OhDdOZCOfrdFUIV%R2qoFS&wYoqY#>%T88lXW{lfbP+}A=q0BzanqyAA~35+ zUHl}A?gWFnK+a*bLqS{thD24!Vi=7*pWD6E`f4x4rzJj71h8@Q?S z9~OVwNXUcZ>?is>xsU)ZKQp#xs10J-F|k=m!PMzA+7<*&_TB660ZE6+BQf(Ou_y{& z1#|`xwb>z#hUPLUeZR<~!iFpDd|b#oH$oZ38YK=KE3i9llk8e%sAo`wT_~?H6eJ?x z=ZGd|V5k`YCE-b%_ApUJ&ubG7c_N(l2%vFfg4i!|UNHJkrm=; z25mf*AMUM>6$C_{7!jWZ7Rijq+mu3OEfNljk^A=WSNO6Us#lH zcJ)rvsV`GvV3|?^50p9{jArxoz^_$(NZczKD#gC`d44wx+@DthujuR zeRARm6{8S8$DiJ59jW+15YmAVX;7>kf`{_F+?5+_1+FCNkJwC$^L_@Q^%joLI9bm( zp1gjFEp}t=DO5-vQBf9eT~lcp6H~aLTp^!Q*jH*JCmVzzNnuXvdDc=)tY+>Nj3NGf zoD5P(-LN!wqN>Ub<;1E&L%*=B&OUB+Amg?U6n290RN&h(fk3~ElTBhSl%@m+FxjY2 zY@KPKJ4E#M*d=8)ZmCFKff|PeTTd|IDPdhFM=)k8QbH5MiWGL^1iaW`#}9L{!=6CZ zj%$r71XF_F0U+Brb%J~S^u^|PC`U}cG@g!}rSj3dGKdCYc|wEIhZs)aHQ+K&s#BM4 z2UJl3>!(rXDt)T(!2kPy{coTTf`H@FB4Mxq!Lq;$Sf$FUnXD+*g^qz=T8ns<>=sxz ze2DUTKonM9SQVSr-;hh!5UP znU@V zQY2-#Pmre?WfD&!Y|wTh$;Hh9olBdhk~v-}mJc%eyg0cBPkXqHYB>|TsnQxk&XxX;Pe>})#GDU8c^KQ~Vt<=$OTpMJ6|%{WkT(3Ce54v!2z$%Pbj>s_p>zI>;+8~IqF&*YSkh`LhPPpr)cj}-2nx2Bx@#5RW@A{TN` z5Op9Uiea?gEwa30qypK9w}}Yth2ke4!#V+J)K)YaM)rjXcGlv1*5q=be8^x%5(0CK zoSP{I* zmSfDU%WaxlgLh+&O11?`6KaowLPR4cEQI4rVU+GgzY_YqyI=vZUYh@d;sW@Wqm_pu z2h#h}z8IxSo3FFl&RYKtJJv-0?3=@Mj%3+J9YE33w6(s%&f27HFYHxLq9&~7bn&$4 zh4NR3DD*tHblLX6%EfC(Lj?*Eq*H<@26K-AMr!|^rGG8A6k5iQO}+M$7*s4(X4Zz z(m=+U?EsZ$0m0iIECx)=8_epkI>w}S5#GB%l9N0+vMH}1=5ne+tQJ1HKWqaw9CX_% z7oXkDR`>VsZL)#<%3FA6Yp7rY=rlti#S)6wKSektL{4PH6}A%3;t1RGO%?0b#_a4o zHHGgRcn9Sq-@H+Xdi*vq8z&PV+_VzbneNnmFnU<*Z9fh{bab?rVLF&B`POZt1yvEy zdKX}yHZ}x81}~N7TsfH5vemQP!Jg3n*NtPX!TxSAz1dW#8Y6f|=x!KsAW zVbJM_79h>q7Z=yCnRa+tXihh8RmMVcS*%A>Z4hk9JO#mDWe?ZQhp+tf(`G2Q)jLBa z!w4_yTmuogozrti9h)$*OgfzBCghN8&6+u8RuF~xYe!@^UkMnQW0i7l)d zKb)NmY-jR5SV)I+YiMhkJqS4tc%qt*PXPv_q#~1doYWOhzS+zrau00I+;Mv4kXo+GtyhHUHqrnF`ON#xpofzoP?!f0U!j;nU<*0bF1c&>`Ud|u+w_s$s+Z~ z<@-yMeV4eh{BZffN-BH#%KI0oHSE9Ly8GW?d;j(WL|2CPcqYN~jW7eYlKsN&PL&}r zG`c+4UgF!?AZ@=lLf38v?h3tjgQ)G@?Nv+LGtaH<7M6w?ZIQI?2twzpHa@0fwh*mL zXI3ARz%8AdHpFz^7##YeJ_W3-&_PH;{v7EPTjmZGqC3Vy!CG;75Ha2G*F*QDuyVV_ z>#t+?%;1q&%wi8yJg1CB#txdG%GV1ocwB|jxV3F3eJUV`_U)t63+s zne``JzXIp+;Yo$T23{AcL5 z*;2wox%Vc>QF>&9qQnVbWBWdTBL4Lf54m5NFO4M#`E^Z26kqg^-!COtbopVk3p`*Z zK|*X#+gv6_Q*lEbIB8S;u-abx;eEQFt|SY2ff`-V1&$dMiIJ=LR9co!d8{NyXoRSe zTA;^1VdrbPe)l#Ya?a5BiMu0#Wr$K5Qcg|md5+)y?L=;)u zf;{Lh3o^{)kQD904=aIDYjBblkuZ*TAdIA2Q=ok=9LQc^j5O*pi7h5+AqZg;`o(s<7O#FmT>7JY!7>QT|w zwrFwDvhNlbeME}r3{|<11E=v+d3LyuM=~ExV2Cg=U>IP+w{jFZ&wr|yNyLKr_-f!} z7AgR$z)yB%yb9x3MB6$&KI7w>m!1vaPGI&WzK+vO&!>qO8KF(r-`JMASp0xNVe0r| z0EunoD+wHmqu^c94SnsR*Mg8B7FRv_tkAyjC|^i?EL+SbxSWjI={^SV+uL;A(7)y9 z401LJ?gbKCw6c0@^3}dH3TOG!8p3hNr)r%I&+T01eb6VniQjRCx-m%y3cQqq9G(h* zflnNoa-3Omx9P?>UD`d8)WfdgFU7ive!L|4hIu;6fYLKnrwlW>vsy&LV?rylix@SN zzXp>oyj4Slr}1ae;0H7noaE1i>oeL-x5N?`(x)^69S$w;@?en(1`w4c{rbG0T7HCp0fe}KHti3GRHZa<?ebOGQDrDi3;M92wQ7|<6S~% z-o1HKoR8c;qp@B7uurW5Sw46#0?pv(eoF~S1_I#e(+3~ToGziTu<|!=;Kvgj)|QmB zOyQhqbjh?)zSlGc<4l*4%3P5Kv=chwss)I{_qH%6^$$nlf=zdoVDsr5pNwg*gHG+N z6b+!gs~9oUFa4GB8*1Z(&sJlV-wVNIWlc2j#P=dBT38W_i>j!(NH9xE*AmhiQZnf- z@5xeQE#E+4LpE##aqDx@4VS6yx+J@3OxW3ZJ$UQQGC&#WbA>AsE4UgCl}Oa(SUB)E zea_HeASgIfkFl}Daq^+2rjz(NWRIZx26#8^X4D}fsV=$+#FNHIdpML$d3-cH)$qX- z>oJoRK?DbX>4vm$xX&HURdw2zTQ<{bN|ZKJ_Q9*BFR-g^ORa;gR@R&`a9pt z69mjevL86s0hl{d#^vRMz6%qLq{?U#_DmNeSC9k4L1s^ZFN9pYw<`fABJB4WuzmW@ z%Bo1=cl@3hhI64(VG3?Cuk*gcRQZn_EMcN{oL&SRlnA|rEWku0HLlga7!C(j(>QGU zlr@Wh5No8V6QUe$3NcFIRuhnrnHkiU+r}mYc~Qi%MQK*o$V|3*41T?5eJ$+3*a;2i zQvn4r6FKT+WKz^NLty z?m-f#EN@iU$BREodz;hUhPoM`YI_b^56+WR)h%3SVieCrT$|H;X0CNst;vJVQ;nCa zr^uJvp3YXf_JT8`(esNw;^>*tH(hq2ZXp{*WG!8cXkEG(F+9CJO*tOL@A?Puyg~Hv zA&+S47bf*Mn2PSm?nl?hZsojr&MS=B4TP{PQcs5X7!8*L;?n35VDW&iW ziM_hY&Vxj^51@_&NG$WP@_W$ztD|*LF4L65L6Gb+ad81Z+&8W9AT8h;zwv zsBzg9KiU)95iauCXGGMDC@=6-eQ!5WD|M)v{$)mxA7$e}L(OR~Xfzd(F~~1m97PDu z#nZAAuWYQpdED^x5}Y+Tf^gK#3LkcniWB);{>r=?R!VN3Fq#e@M*(z!qH7Le-|{Jh z3!1^@CIDh;?eWw4jk&2b$MDEc(y!xl6OW|N#`~sVX@(J%@+rnEm!IRo@i>2J@(av3 zcj9UK>}zf?(+&!e!i_Q()Z;$;4Ez-fr(9E@%@(R5$HUM$9M**F z^UWnui#b9yc+%gG+a6*D=Dy&dIrE?ee7rgNQaqt|yi=aXr#+KA+#w$2@?>mRpFV;q+~jZkHgAAw4AeHnVIrHFoj#1-Rss}%|Rl2W!Xstz!ceO0!@U{q*tR zj;f*)xH;p+co47rVk8MuKbWI%H5^PzLBY-xS*@Fqd~Ho{;DUEmh9d*7|MUY~{Jq%^ zf9V+LC&OFaT;X+$2`YtF;%bzs(r~zAQa4uwOPQ_h-*ojo`xWn`-|24PMS3m%4EOju z6o;01PRNbXBRjXng#%`-stpf#-__aCEQz_0weo)YW*48BzN^J2rfnZC^{UQA@=$`p z)Y}r=(u|6h`l3KLaXo%LJD;YrW#{L!jB?LaHhc6sI?1t|sfE#?CU(TE&RFRle|C|< z4lfQ7B=_$VK@why2D?YgkCq=O{>{CbQw?^HQp}qycHc`3w`gxkO=eY_2tc4RPBL|c zh!feyA#NLJ745wvL}wA!4l-e~fNjXVgLO5oJ%kyYrwgjF+w}xUn#Su4r~(M#pJ$j5 zY`onL#U`v@2m%a)Yksc95Hb-85@&-wB0#W~f&9^EIyr7`gnz*o#4FiLK1ErX5M-g? zh|r12_>lsz6^fU;$#m9x^fhHjl**oJ6;xrl&?PV%7dR zp^BEnp75WQ+_AljR+iGJE>t+AC6p=Me+%eZH%Xs3w7L$0#Z`vS#+Xi`i^&g*05l4u zWft*b+A7@zH+=zVPxE3#W@n0F;-1&90|>4}OpXAPe`j%#m9RSjc#75GNla!6>e1}- z9oFMIq_Ru!UIB9>f+3Ltdz-)kxxGrM2o)LFk%?EtmaLwDKGJBoB;qDzQu>n7FrrA5 z#y}|f&29K^O7SGzgZR!fP!l+G$&Y0$emMp(8N_{c^ws z3ce6)9+Kh@Ovq&!NKo0gb}P-a1%hyc*GRGIp3qd)+$RL!AzY}_;T#s9u&P!hk zBa;DEX7%)4(r2CzXwqS`DZl%iOgU31OD`8rh+Zx%AZ>v*N`iXL8X!USYp5>aRVW-< zSq8>dt0)=}E-qzaB`&!tMZlsnZryzX;h{v9Gzcf0{N$uSh$4PFXl8T{bHwfeH_v^! z;1KVkueqN`m|UO^M`Ybo|80mpx4UP)Vq|wcQ$87cm?$uJ+8o2-a=IwyW~yqJTxk2s zw3%qFIr#-l-U}r@3b&1fX9`sh^^u{!5?q zUo*B>Ba|4&WtB_WGtSEz;Cs^;(4?Nh`zF*ElpS(q$ae22E|PqaU-U2kgsT6a;VL7c z=0hntkCs;mVSBJd^g&6<3D;Nt7?m7UH09;-|e1M^gWUG_EVA z0>yW;b1i}r1ztMKV+u@?bDM!z3bH6-*)3Awv`@h!w+sLtHLa;HC^W;?V7D(9$%PFe zMGNse#ze1od;$`VxtxN*#uhV;ZNcZky%@!(dISYktw7u1s^g2;_}L2Ndt`DVke4tWDKPl{@}mb(Phi_6BrBSZt{xctgCr_=f8>)y zK9=Scb<#7ME|blwvWdvF+Gsua0xs7X`U>(VRdbamhL-#+bKNfhax>Z!3aBIq9QDI|(9z(`-p?Bdxy`EG zc!(24xjY$~V!{4EWT-f?oVrY-Lj^*bKlm>)Byqqp+pkQ9ilDEfL&azQsf4Kbp?rJ) zqfw&bDn9}#Dt~S|Eh-$Vk3)*eWUPi5O$&byBGLWHJZ-|_mp?NibV(Kb*04GcZS6`0L=59z>;T(T>d^Yr=41WXyELzXFKPYV!BuRc~N zx&;;m+wn8`nr|PU>0kZ{pJ?gN5GBMIDg8e%*+CqyHOW&HqQkp+G?Bk5^J_81-_avP z@x=J9+Cj-1EJbq3uG&jdolkS>AO#F#j0I*PbIFxb`a`-!5m^vwtpj7QV+8S7I6}4C zNYmC(IImOlFDMwQpBr?OU1S!c5VuVy9E7R0`@J^QW6POBtrH7j@}N>R zs7K;9$>~;bk z!38!P(}mWB`7O^PEUoMSoJ^qbHOl0R2%gO5q5}?3{e^gnWc-MY9&6rfAbPJY{OuJc^TW>%6k!w8f4lh~lQ46(=(NgQcV_ zJ{juAU||f~i|qqXJlG;@8u}%%zvu|Gu7tUGbgn*Kcq6H%Ml_@|DsG{fPahr49*4vP5Q-sE zfoRF<>dz+pNG|+~VDeg-PQx>UM_(pY#)?xl?4pR8RRW8_9%=5f5i4EOqt!LQdz**I zvqi~jwFio12m9p5Q#nq{u%R%znkpTTLwpt?$sQu8WFB&(FDKj0;^KG8BraNn!+|b(9#VNg56ooGe zLv*3|(aNOar0~S0rAI3%Z}>{Z&(=N1-Vh@43{{K>Ubv?5f4?zr^w#pRLx{FisdA~5 z!Ja@<4C4t(lU+8A$tBI{DpP=Kt}T`HA0He&sgPnXZ3x5-w<2~)%h?t-xT4f8t33B6 zl_ia6l}gq*!V}s}2ubmgExJAwB~A)uSxKv#By=gw&YxK@qKT#{Mekb5l&PpSI8>*5 zQ>WzNWa@dW*hu{n*S!N}mXkMD<(YIp1bX0Fa%7VnNshh3;qqL$X~J_)NFq&YrtrKc z(OHkVF7lBa3$vUQ|A}jqq*Ir>A;kC*6kX=B$|3R{=l2V~-6FP3@QR|70x_~uEh9<^ zRKG}bxQx|J-kXBOUQ(5gw|fsYlCcQ?vmoO7g`_-8{OP*H@3m}2T6GQ0m|Cwwdqth*L}Zro+ba-~e~}CHs-nT6C`!B80hvW|`$s5glu&KD zPa>Q?ZlY2yE*c3@e+6@Imgq{QvQeNhk`Yys$13UVEGgtIrw@=Aim1I2duiTVhQHdl zfgT|)NT8Kqtn`0mNSRGaBp^yU=OwP3Y8k;rkU_o+W`^MC@#^%MiPB zll#4XkX97S2gz2KPL&hTFlN<{P^FN@-2Zb?$btG5){w^f(;}|pily?d=u{6|63V2dDr8>|nePGzH-q^+!GUaOb*cSj@ zCY=#&aj$bSE`I9Xz4vQJv_XU})0^5tSfaJK_}E7P(no}axQ~-wOhni>Qy7kF^9BhU zvL&KiDxr5lNRAz&soW;sxiYJ%E40qRn?bq#Kz}%@9mlIu?5Eb5xKcSysH6YN^`*kY zK^68vuWrD2vE^-1)-Y6(v(&kC0P=KCAK8;DepVYD&2*vu@M$T-Mm#4rT&G$CGdwh7SKck>k$mKe_m+T4eHl$W!N623EX9vn9ppFZA0W#-bolmyw;HTgc=63>u@ zb~KBNbjZlQ`bw?j56SB4?~^v%8w|hr!@|Mq`bLz zVDrgeo~~_g6&ukh)!kdtWookc?Aw=X+Z&rNSD$Ze|6tuO3r*|n+3M0e9r}A&x5pQ+ zojw5exy0 zTOFVb6@c<#*Io<8>P$lNjPPdGgs-yVv+7rF@_MICw|=$z`)}9B2dE z`t+S#{C|7#JR~PoXI;Ns`ZokG(Rx?ie2;GsF3+0vGo9<|LJbX_1|^zQdsaT+jhRzD z?K`ionQo$;pOQ+*Jd%C)M56G1r#jJD>+{}n)pu?VNl3y^Xy=s|vr#L_#nsJCVoPY5 z*O-D)Ggod298+HURA^Y;gx|2Qe|4T&9rNa_?ln!+$h#vx%W_LJ<1=*^0gGb~km~ep zN2_OFlIm2B-|M}mGw^U+x6gil6Va)TY=Yp`C7f9j!z`@aqQp#RA71Y*=4MYjP5y&T zd&WYmd+~bx$%`#C0TN%-uekcatc7kXIH7KNX+N9~e4^!*@zW-JIsB}_MDfQpT`%1#cb= z2#2y#eAq0*Ql?;XJpfL}gS7#s*}WSLf%UG*de+fw5qtWmeL5um%p=;XTUWbWOL%jY z`x#RClml~fb{$zf+kE~sYSVFMo0T|6%38&$wr^h zWCGK`XtlMDru_eTI>69b_}|*?T|>&g=?bR2L2(0poo;88Z_#Q*VV3N?>kyhByY*gr z=?Ew4I#+z&e}5{ZwxR*kcrFGriQof{X%((B;jWywqoYn| ziWF44M#?3R&(=DKuQB~9H<}7sfRHyiuZqAOp z?x^Ue`HEh2v2%||0?MAK`xr@3l2ZESotMj83=XgIC~H1h+qw$L(5}~PmQLPpIeol) z^>bOB%l4DC&>?^ZcKc}Lht+3lH(AST(@2rpUNbCFpMV}#*YGh!&k1n+9*(J|TsO}m zc77x^&M>Wt)^%QpuZgNTd9H|=>V_8xOdWHGq$(}0ClA26R?ch z$v=Y$1jn$Ja%`T+U@((v{0BLKwop@4t7!45*i`LddPPFb&6#F( zCYwlkMX|5?ge|RlWa}&lTJRIHH7``G9UH3ye+&bHG_mVi4z$1n&GK6@lC*zgG8|#Kj=JkzU?DyUNzKT(Wl=!_WIBHKxTHow*@=@itEAkL0 z&DAwufpXQ-r)!b4Yt4T){4b(YwF|iV4Sh;Q45tO2dC^9yLe7NtM@5$EOez+QYaI)f zS7D*Ex86U37Yy_)HV`wUDP)1gP%RHVt;Y`m++p>Aa`zmV>v|2Wt^> zOFrV-@IYT>T5IjhKH!b&-19{qQR11La2ZZ1ZLJ?lpbs?!rFU0fu3tEPnL7KgJ6?Ua z`eK3jed6`!3isy0fpWt~Hg&QPeC|_D*dm81Z3|*Fo#J`@e$ov%=lg4#Obaynws;Lq{a`- z~0j^h<_%VW;wmZis^@8`!*lBcbWm$#7!C&_VyX_DeMEO%% zRwy%;I0jWYx6_57*dwXz*Md+qE z6l%BR`_AqY)$i^Me+T4+$&%`(mLFKLuBa#QZit?(lC4k0d8;$|82-5&5_L4=6Y!FH z1l@W?<6ZiCUtp8}sLI`CW_!bcds_uE+aU!!7=x|(%D>91%`C4LYO<-4clEg59KwO{ z>&=($S#e|~^Q)&_b;`AJ1oYn$4Q{p(iCG?4#*~$m5lX9vO7L!6Yqe8gbaS>f-;`h- zdpj8ZJUVGlbHmKqS!>dCqm9+yszx^XE{CNmfmhp6U*!$j(Aq7Dh+AEs;oc_@+N(2p zecD%2ZK`^DGVBn6t=bV*)y_%_%&uuyH7D1FKSX$3xOWbj>cF$ZA9(AkuTXBZP%6TI zzi=CUUcSn@_ED;NKhPl#DYcS-(Ecf51cwwQP9@An()Fg%)_NRy^0a?g9}%5|w3#5e z*2-&PRRu}hxU9W@-0c(0To(gZzsy>d_fwJKTIp^*O!Y!6Wp6$#;A?lJ7OWS?TRYxh z5vv*e!>(Wk>OfQmR0z&{gI1rNz0BXket5n23Q0-iKJ7;RhJ4tassh==yGTZbPF-E1 zvIVYGNBvZ%xH^;HE+g9->#(i3gV)%^+TERT!;VGu_||b*>*Y~}OJRr78mfbS6b@T# z^Qq37Rv`gjIF*d1fW6rCpt>yItU|F#$t|>e#Py7eeM&Kc>p*kbv_2U;uegBA8CI^1 z618~Ch_&cd-Nrm@;3OJ?V!`n0!`Fqt6y*94yI8x>Ss<`AOba@?(BG-8O561zNzkn6 zRyQHV9gR*;tTd~&0Jyi`Ij~N_C*CBN@(~_E9b{+v8|t)EfO8>>rDCmrf>Es)zgYd+ zMc}IQwEok8RlDizPF*}%TyS-HhK9vW{gC_mTc%ofWd3Pzy&4j(5lrub3~U6K;b7RN zM?hH7Az}Sq?^X?ot^RFwOKNwKfZ)M!pVpn#cW&G^rn&wH z7unJ}XW?torDq(7T9$S78&&jpNpBG9nw^PKf{)b)4Cks}s+080k2KZXP+)6`TU5vW zCkT7jTtVHor7d&X`0)?8mSk3qK#_lp2J0@Qh2d;D2t2=C^ zDHOH~!^lk-Cb`Hgs9y0H1IJUukXk;H)?K$r3Hd+X!etc0ho~}cu|S%+4_B@8(!aVh z)g%h6?(e_o^iQj3Q$XN!1H2OnZv1h<5Ah)3cTCrgtsW z5ThfC%}{?B9|7ZErCOQVRMO$GSMT#rAVV7dNCI&c5>Gnn@2D#BJsfiT+3uNjiuH*b z0q~!j{n%7B>O2ZnoN~5jgVvgN?wLgdLx!0~7A4Oju|j98SYc+B{i`#rr8G}Eos;V0 z1>AH>^I zw7DFCV`tzP=c=u}-?iVM-@z4q!EI9bdQX3u8e@2K_Wdax0<*2tU9A^;f%i(`k6#Ar zs>MO0*4mY#B-eVK_V6YaqNzQaYrVm=P8_yJH-h{f+YGaAYtYJSCVNGh-$scZ#VRo< zqo>25mX>_58+@la73;|e73P2rDg8q-kK$3P&&{UjTZBC9jlDKXv%MEr?pdr;80PHJ z@YkzrB?PnS6KU@utQB@<%82#YH#j+q^MQ-aj(tk#SOawK*W9_zjVhGam~8UF%gRqU zE82AR!I{hTeW<>4b55L9oiN7l>>*gQs#BhgD99~u)%Rz=dq6-3bTq+^Ogs@*?jR138<;4o^C%O%kEiQZXYxa5%-Ti+?VxyaH1SuTtUY2+_l{;uV7}+|(tQ0U zei$n9O?RI_!lCq*we|?z zuLs+7u&QZRkfxgm)Cb*)E9}t}opY-*enw!@RnSq3ol#<`u*#1W$5cg;4?uFX%nLEF zu-Mvt_<%R63w_$BEA|l_#X_1#r@P8*xyo*SGdLX{_S&Nottgu`e67@ zk;%UFQ%`8R>AZ|(@5>kDDZioG$;I@oN~!B~D+7nOh_BMh0uzAfIVq?PJ=^7bb$N&H zRHt&o?Ivb1*+TwbRa8IJn&|3~(&z2rp(U@YyH&H@JEqCrJX&+RPb!3Rd#Wp`rOZx`r-8{7n0^U`D+>rbz^ z?Pg1uI-ct!b4v zK#`|pE++D$nHIJiarUPeP1Pnn%s)7GYWAm!8g*Fuy3?mlNp+Y4jygm8kR*Q=@>Zwf zQ}h6n1q+5B5|Xsw!9<){&T|MkslHo_tq3q}ozLBy)il1kf)8L(e%-N%tLoV0P5zXE zOD(e7%s(8mTZOZkfJn5edWL3GQRo$j!}o2N0O*#dyNM+H_k%6g>v z$1F+@6^QQOY-MTbeswnWq~p|#covsceeLF)DeQN90|Mtx@PZ$>)ZA95-fQ|Oz@gvS zl5M)bVYypv4q&nU2|3u*7@N*=u}3S;r%d6#zAruyWF%~V?QmlH;$%s89Qcys;N{HYV5w&|qO!X29KtlDJbNkOe(Z2b{75yhZm?2Su*;UlC zVz_1vHffz{tsnAO&me5osciJi9&oqWqQZAb#h}%E^^IC0wuPN{ret4S?I&As(LRyn zoNTuFVOky^p)~6;)P4%39j@eiORbBZ>HR9Sg4CFd~-KLx|k z2V76>P}POjAXJ#SVO02igY&ll_2sI#IJiG7o4o?C3w4c~5)S8&O@FHH$}A#S)2diGF*V^uIpawVDXpad?M=bbHueRjx+e3NJZ!`-k?Cr>6{ID^NM$_9p)^BeN zy08iwRUmz;9kvNq5xvd^tk{w5!JxN$L1(ZeHC2bcrfF=}(XN6s%+VE#k!Ssq&~S~w z!z~N$*c#vLJkkP=UX%VrOF;AsS7BO^l`h)eS(|lrjHph<5~70coi!0+jxqAf{#&s2 zFJ!G&Yo3B=AsHz6yQh$v+Cv**vZY2=7TNn8(_nQv1;~6v0t5aEP_x4Cb>P-=|F5a@gKED(uf7Jb&vP5O}Q4l9Dv75bJlwsuUV9~a7KlN@u>%K$LyPF!wWW7%RaD4RVY>VW9<93UvYOMWaC%I*#x)uTE z_9ngnRGPs_cW?Bs`W@%lZHq`fuT2Xo$^KQCeh9JT15txj>PuroBp+E}r^hPf(e7dL zvrKuc*=jKMS3EIW#5n97?G7l*P#vpqU?3fSX0FQ7J`g~*t=cDEE9_q5ju}7q z&Cc4{|Drna+2+%Gf?xZW0XcD0=#q)nqKC4k$ZtllZ;Td0*taN2cx!fhiZ%73&tUo1 z=pC}jIj7AY{iRP4rSJ7Sr{iI}H?Oeb-rz9X9lQ&2m__v4bo zE3U(eUsJihzu!YVow<%{W9hZHdvz)n3`yUE)s-h%D1;3Tfn-Bmj{8%*7TNiKTSP$l zw_A7r+v0xr7yZjW*|z^;JEI(X+aQ}~=f#Zjx$DdKrr+2#Fk!Uw!2%vgMox{`q z`0;1U4?ffPHJzQEt--E!k_2Q#Qp83zx*{-cNBbv)-q%*=No-~^?H7Do3I|2 zd$s;f@7!(InPPS0Bc}wRa)^rG)LGg@P{`A%SOsDPO4#c#GmnFv-i|d+?Y>dubbU2ooS zUVn+#4wTT^%8_H--QVwVBpj+%AIeIRh4Yk<=JxH|TW5^^?$+I3fBkjGo@u>_^J>mB zQ-q+~w_hVM(MaXi-8;gVX)`B>;dDe)Bjg?QCSDogi&Ty_(=Gaen08nyLaE)i2RtK} zn>4OE8tfN~258Bk?jbyBpD#-}TU=zRcS^GucGP!!l(CBK;c16?XI+>M?}pF4#dAA4 zwHAWN#|wJU!ddj>faiv9yQ2=nvRJ2v(I|t|M>vB9dF)D625dkSUFGwTU8Ju?W@66;dI9#FO!-9x9%=3 zvP-w_u6Kd?fsj619c50TZrz>JNa6Bh_W*}FF2`qj)`2w7gZ@w}!kjA+pw0QYxw*!i zgby|~Zd!9*s=gi@9nyX=e5Cb#cYl1ONr5smVQwf4g~&O|Mbu|`=}*h|mme;zM35Rw zimYPh$3k-GRler54sw@XiW_?=T6aI~<&|h%m}r64g)5(!)`eNjpmmj*e-c`k&*G-h zx^QGa2CbW$eHPvY$AJ=2R{Q(kzT8YGUM6@`MS$g%`%BA9%dq+qy}Qrhe6+lD|6x3w z-^ga24ngy;^VtTWUgPX!5Zcp9ckI5)q)(b6DK@mY_`cxP;1sOB+AyaX5Bq&)8!jWz z>e2`q)P&mX%UgGE-EF>}&wjAz<0BA||AT$%vA1oM)^{){Snt~-N&{3rwLhSCyj2kB zi$S+Cs%&;8Zy38)-XTo5FuPcmXF?j3uKbHcGJ+yx8I_KQ;0-(FlRo=kLxp%6UyBWZ ztg`s6yQ=6C$CmWs;s3r`0xlU|{wj?;Ah92ce5|IxQXa9`V2>qd0tp@IU=#!!KI&w? zm3^b(+F5Tf_&IBjzd%0N*@+fAVJ3fyD}7@jg=Sab{i zlwVbX3>WiB+c&7eSNM!a`iwdz{b~kkGFbfR;^Nw%cY55<2RbVX1ljVfyW0bLyp3(A z(ItlLGjiSNlpa8c9wz^p=UtNnIK6!Z)m!AD@+;-4upk!i9iVkmUAI)j3Qz?;8~NRu zKe4{sdeIrT1;p0IK6`HJ(O*x|OSahm{$b#Sl4sH@EH09#X&+0Zm=D~#+sGt%-7BsAZ?9K>&`C4_Ds=PBMJTEit*Hu%j#HS=LN?NL zi?f>hsl1HraYY%C*)YBP6ecKXbuw zE&$+h76;Pw1c9_!nwVzhPquW=f%X{6T=?2)e~{m7ZEe5)c5ORLQ=hBAFpQ_g>kCgg zy&DI`RkjpZMMcY|W{__4yE2r4Slg_pBJv^CmLE)q)rhd2leb+g1<)@K`VTcz!S2$+ zWDjf|KsiUP_nVQRio`80Cc<%50o~$6Mn8EC*L*vIxLuxiGf3~nPXiK@!b_y`zLCnd zN+H7s4j}OG0qE53DJ9s(;)}3M#e{Yv`av{A{R6kHa7`F=ezt9idx0V3XNdhUH6-0B zYa-JY3N{+=83m*rzZ`|U z);GU>^89HLT$}^=2b|kf91QxNcaFq!iZ6t}wYTYCGluK0xbni!aPRi3A-NO(^Rzpn z7@FA~lQwv+|7YX9FF}INyNDcQ|H1G3{0n+@R3Xkx96`q&Wh=&T@3%DOOtH_V9*lK^ zvYeM}Jwc+Yxm&dJJz8E_{uAQfq}uyO#K6y&A3aQJuT%3$OVH;@Fr2L&twu`_2ac@; z_^>}G>54igQ4o#`ZI&#mo!MjKgAu6h6`cu}8Fo*`t!#sm;oZX{itNSrqCK2y`mrE% z7zUxLo$VRf_bbj{BiRT%PrNyO*(YVrFJh;dRh*`fCGuf@8|UEP)mYZz{C2TD8M}Cn zl*#$*?it}nRM3T9&zFy_6GTIl81w?6whJ2s;2wgpOxzh|c8*b?Fia~SA?g1QS%(*ZMb};9QQLOMq+BsuG!e@WOx60#{2XYZdcs(*1vWV9PThQDP zpZW95NoUVRel1Ek;EQ8X5k2Fy#Yq!rw!(W38jSe8k{lIw)iKhKv34lE9w+Gt^kQ@U z+vlMwhtap49kzP!$zcCXYpc9f-VOa_lZOFO4U=d$UD@Sjfxoy!IB}@kz1yLWt;z6u zwhT^v+O|mF&XFNbx%}}0v~p19-wC);{lMly{mP2+XqvI{*Fd6dbITi7`=Kp4C8mC> zjpM#|3jVt0ab}uM1(sKbUumQBBlPwNs~zVjqLqXN;V5dA%IOD;sZ!5y_ED5DTYH3n z|JDhQl(0FP*Pp&elSkjNP{lumN%2^~pe+^gJbOZT9L|djzmRDMGH*xQb~r<_ZJQ;! zm3h2EOaL0i<7Ju_;-qQ)xJh-Iq%q=}K>M7xLxdgrdx=SAEg0si$l{{TR#7=K#Eme) zHi3#7s@j~O9HJ<4-i`*xgZ|kuP~_i3j=(Mr#XOvfU2HV^jEQ^Hh6>OHe@1eeiDunr zYBVA1ix%Wk*xc6I=BuZz=NnI6ufG1F;8*F-`!0;fCp~Z?1j&;_1uni3w@U^z;R+M}uwi{NiGO3F}UP69hDvKpknl z4~z*2p@G}DAd$e3-qFgOCyL0R@ey>Kz+>K=^J zdmmWJyMO=l31gp2e|Y?&vF{SjjfY9(vsz3BbBJuRWr@rerR=0PAygv=?~TR*I8pJ9 z5{Pfdt-I+t5&xusAD>}tDnIheE?W0bCqMrb9$Yf_#;SFOfOaKmEwO;Y*e+dd4@8O5 zH%6!>fh5H*1#?1}GWH8+pqLKqqsgGLkacyzL?12&InLkyCDDDUQpxz>m)#;(zJY2h zE>XEyc~*L`t7HkLHL_v?yAz&=xLoZ9>>lO)2P|5x)?z%r`EnS@Y z^dEHGL}W*mcZ%Xw{k!|Q&^LRW!h-@3$8XBy?M}AxNJsqsa%D<(ySegcA$w%zj>_T- z%Yiftc><*ffB=-X_YM{ZSmi5vA{Shm;T?=nMVy`feZv-mgIL3F_j=dsx@x{0_znt=}RT!imE|Vm841ycrbzI6lr=0=x@!&HE1v zr_!Ek%tavuPK_4c>l}=;QxtI|1kX`L!S1$Ez6N9*f?O>TGAzb4RCS6DmmL9G=AiM-_<1s=(Uaa+!J5PVX=V9pB z#}yNC%wNvXb6GwZ4A>&=%-&!y#3f)lVg5{T6GfTO8KgsW^{}y%?zZToS)+C?+aZk4u^dJ8zh3WTvx!nB-DJiJ_H{ z#g7;8x$;yP&cly0cJ;d7C!jmK@bi-omA`H%bkX+}Kr749Tg8q<8Qjs|f#_Iw*knHp{AN4fnR5L&Yw%a&jkpZW!XWt5f|-1d?%vli zQ-yE;%V1De0P5v`_VpUlKW{aOCxfuzMxDP3F}_d0=I7AkNkeWR#`lwmKb;uoA$_7u zGSZ3|FNnnH=QC9|Dg6DsUHVgA77mxKHsy4s&%C{BJ{G zwd#Tm3_>o4X*^7*emYG~`Yq^iA;YjcUdZ}8)l{dGJ-;t;D?!R2`=yj05~1UQZ9G`(zC z&27&1lyD>>Cln9o;xX`V6*&X4qCE<|Ikebnu>*`-OVrdWzRi8T3n~nT#7OUF&GEqg z)l(f1G?G9Pc;@TApc>j246js+%J^n}HD6TeE19#M5)QFRSmL7wo1HsZE!r&G7?>R2 zu(=#$XM@vlqR$`t><5og%hd9wNJod2jfyZMamKvlE~0OIe6upu&fA%Q~2 z%#{n4YG6+XVy_J-&zu(=G7fPIcM zRY*n3R0F7xk)#c*Yzv%hXXjG0u&vdRA(Vld!kkG9xeIjSh0}?!g%R(~bAlij$%Hs4 z&h>laE+#D7%xtg+T1o{ho{XYkvyhpPBOVui27!jD*UB?O5j$y`urV0LN)?dTPek#I z2r=UciT3mgxF)bThV5T|@BOTL`1Ou50CqX;wO93X5y8=?{rFIYI zhKDb{iFc`=NM;ev9OxXPf_7vA@lF4x`DFSHY{f?Gs)x~bD@qj%Y9GvJ7)Hr~{b3;z zxrP(Z$+@%-p;sVbpdUMt0 zI>R((uW{n*Q`h(b)VA|gPa+z2R9P6|$)x>2r|wziCCH`_s7M+ta@3JSqPR>8ucM%d zG~PoRm-fmTfaSJ{8}<)ibeq7>^vUuNM{V(aaDPwDnfF^nI0j8Frsb4gTnnM80bRw! zk-#Wyh@BumL~Ht zR)|D;KxQGlOuOn$QQ! zv(ZGFBuXx*y6r;tF#Ni#y;ZGUM--b<%U$JAlDXR<$m%$yXBLuara=?6pN!0E{FaCD zo5#OT_Fh6~$dX@#V#lCLs}fp3&uQ)s>yK~2GhF8e~2Mg-}g z3Avc{|Fie5TWuxDy6A8FDWQ#tm{^2FJrgNE1+7NVG0? zv5MhwUSq%BevNs6!;;;s$rpH@sf%q;=}w0rI6{fnJ?c`> zU`H%D8DjGIh8435nUРJT0;^``Ii{P1!CeG1}PY!TT;dSr5^tYD4HFE-OJmqiD zdxm!6LM(iNKM~`~pMV$R>iRZ-2UFRma4fx2aJLjT(jEn8x{Xq0)PsW!7KU16FE)6| z1l%M9B(iwK!fIRM0Y~ujqXe$&2Cy08+I_qxQuZ#H$NQ7Oo;gUhjZWqu$vWj})PRo8LHnpQd!}Xux*{sOh2T z-A+eoY~S)XWp!wktPhFaSJF1KlL?k;1gP3Nu)oT~lkvr%gDk)U8p^QCcONJfz|!ag zKY$WQwOH6uLV*9vx<$Y^*PV7I;}-dr8nIl6vw|wS(L}m%nr#(~`{5ZR&Y`+>N#iv3 zM`A*px}@23qtu6T*b-nrv^D;xmcy@a%_fw>Cy$Q8oP+Bb3^3N`(S^Hu#9SNHA%xM?KYFsQzy z%9zJ<@qD<2XX7VyXHat+&cyK4>980qhn*IJDosR|JlBzhnq_6xcL1)B#{M6D|+l zYK+5*eOte#9XkIbWD2wbXsZVtltj)o{$;&DCgl*xnH3sET_V<*vx__Kv13|s zvR|d^!e@sX=s>Oe4#jl2&lCCAgN4Xp7-;+n`$pswoSTh>+Act6WJ}|B9nmpzzL}%@orxiIw)|Ps_7Cnl~ zZW(_1?Q*}%);sThaT?jRQ<$n>nx7fB%daKumZFj?D4D+7&r)pjyG5*1c#8+(0+RUf zy3_~vgUlv=d5(}4kT$zDZYo?F_eCdoKN0y6M>G?DsV-BYXZM%+LHV}guc+WNCXVj? z=+M|mHQw%a9iO0PPBLV`MJf^ z04#&cgqTOS>wqjYzBbIH3(7r>I-r%;tby80pkZ4V;6EfMKZAW4B#X9-^AxvCguIg% z-GL&|5e~|M#>AHrQMHcexKU_}mYr zdOr{J+)s`C(Cj-(7`1}PFQy;7`RK?EJZLBZP1KBj3YQMpVN0$e$z^=gLY)k&2EjXm z{e^r=3OpOj7dT##|8Dp4r)HR&;4B}Y_1@j?}z3ZIg9G-{L*d=p96oZ4h@qN0cBVpc0 zuVPC1YHmjAglDdNb#o|n=Cc9KCDFO_&D&Mhp)c+$VgcnObQkPn`BAJ>8)S0F~LMnCA_d-d3OZHp&%Yvtka> zRd4BoXkg)EKDO)^I8}520~*@JE z2^JfPxJ2$G2vyL)BH^7gMAXL!h~AGz_?VSAyR+nxsIKwp`%$k8HLa+Hows9YUwRai zvV;QG9#o8ek6tdE{cGKc#5PU}Xf&$7%q((}d<2K^DV5)(Qo1wtcbIc#M2f&5{P2iRA=}|`y z1BO6uI(N=s8rv(rU36e$b_E%*g0>khUL*@K$}NZ^fzfB!F6eB4Tq+uIOuY-`U3G^P zA9I>5oQpY5aF|W5*P@-@X`z)W=7fFz+-BM)ExnrTPfG4GZ+-(o{Rlx5L!?427Y3yQ zE*<550bn$o%d8FzIm_G6No?2$=BSj1?S4!&tA7!^M^Ri8GoL zm$EGHd4jaOHtD+$exj@^F$ zFB}xgV5w(@0P4o6I>MqMhI?2H<;7WOa-?IKoY+dxLqpU3zT2Xj+t81pVY{4V8gK+r?O7=_RIF{k9m@@C^zq~ zgSt3AJor5fD|SRPuns#!9B;l7GZOUrP)5g}GnU10Ov}iSlOWN=5d(LE{crc-8pP<% zABY@5e^2D3s|5bZk%o}2!67PkAQ<4hJ*bqXnN{K+JI;{vkDdFl8PIS9XA;-peNyul zJhCKG@BDNGf?h_El+Zki2#rt%auv8N^(nNG;jNnaA-^$0h;s_L*7nk*X$1E!(?ZQA}?hjzaLHf zW0EkFuz~;L$Mo+hj3{b&T0WP|U~-H$-6Kn;uDfb6-+GSmW0o>inG$6U`q+b4qekjhN1pUrEN?!h7oHj_M__`4kO72f9Ls4Xl zOL)DwM2ZTL>|=ABeKIg!UVd^S<=9Gi4M;BSk^$oxGcqhfXo3+y{$HU!#TPA|b=oq&Rf>(9ilaayQ_b@>1|*v$fX(i*6S2opp(V)Zq8h$1a-oj z?O1Qf*`%3v*BoHl;+_j)Dwhe>BdrHRg-bQ7h*F`(!xLgr`reYUi5>$M3b~hWrpFBPVsP9i$rvUdxXN6- zoa+&IuH%wD;!?@jZ542|I@d_)s0oric<%Xbuz__q3cEv?jJJDkV3mB5eTCv8Q zf6tV7T1T?u5uPKs{6Z_Hj`~*H5bHv#o;$UoL0?e7YP!{FO%3Chn}FsaRKP|tI@}=m zAIQKODFjFBzWBsqALhsiVB_KnLE@mpj;BW=R+M9h+Yzlh5zAI#iY@s6BTJdp!H*%5 z8D2nZ3e^&IpI8XVVx$umYzDfjT9_xhOdlM5cX(N7ptx4}%q0~*swZ^evx+*hr-d@N zeT4$qEkL4BpwU^_rb3B9y6|0~TGkc(Y0m+~Tmw;UXEfoW{Z_q5LHRBAJpwYQlyQ_9 ze<>kvAVwOL3Pegjh$0dPUsd3cyF6jDsA^ILo*$wh|5l2YynEM1+FZ>74EZjT*eJ?) z#AHS3yLZreLL*<5Op1rpn&C=TKUI`BVHuP_CMUhsE+dAYa0tAE47t8w|mbBT}U zImb}Z+Z~`Qu&pBbJ^SgXp}4I}!V-KEC>{np6g$v>KE}>Bn@Gxu*g&da9wPZPbA^6D zicVxdifuclFn=ZwXaNUZ8uNH5OsXOJe#za+@F$#J*e`e{UHy1fnuNm)wcN_sS|Ky_ zILB_0!vjfy5jw)h#z-!(BOs*_5HRP2?n2x_r^7`>rpxX4^wOeIlov*NgX3Yj@guen zlq+Zj^R8@Uja$Vmzb3YAWm$Ot8s3S@c-6Q_L9fA|87at@1^VvMm<+aCoEG^D=?j&U zT9r8ED223;oTifXS1Za9HZ5rGsV*`s$1;NAGpkdnYzA_E~fh`GFJ?_rWqfNFP96Y+by zbH_&Wb!EgQ&d}eUseBU$WT|Tk?OAf4iACViY2R;b)|^x7W2G-r!glN%sXfPKu=lTt zZ8BCySZ-bv#G^(oess=s^?Q4g)@{%7vhg_Lokl*XKq&zuh;TWOGZ0$$ zGAr)R!{q${MjJVLZ5SW0d%4O$HF=a*#2R@aw%3t#A7aIpmxEv;g4&niKZl2m*p?Sw z#(3i8csQD#H7FwuC6RAqI67&j1O49ofLD9q4Akp1&QH((uUAkGVqBs!)5V&lxMpj5^pa3D>`;A232X1tg-!N6ic(MO=P47yBS ztRHM|xPBx#e=5ltEZa`U6KbX~LPl0*a)7joLy7jv7?47dP7+Wn*n`EY?p2pO@CZgu zksE-T+5oZ`KK8P(z@xLUu!O%LI01h4!(?n`X&#|$(?UjBGo5tESOF_@M-b(O8w4x~ zDIlQu_=w1FfW!pkIBlLkNbduK3ULQI(+ zk9E>BeV-IJcMb4{=x&_MR0?VgenhR-{Zo>+8=of<=B zG~~m$QW~1}DG*?5&6KAv;zGmGJ3Be#=LiYh$(8-M)XwGa#`)lcBn8>|hLo%r4NgM` zwG{lD>Iyh(%T0_5LD63LbIhNwJx24_t^|>zncQpTf~~%ByqIuOBR`Bit+6SWR>(cE z2q%wj@XVKe-<6wUp@gavy`L9~ROOQ&qO^azN1+SO&(b}-fp=2A^$&Q0YimH-kuL#6 z7%;n0Qe^KaXFA_J%6G82{sEhkg~z6d1BI_@SS)}|ojg0FV(Xodv^C)OV+ONKMc~(VE=PSJfz| z@~;4ep5J@-gk~<810rNSJC}R{9qWYrfg?>t=Z&!t#pTM}%U8?i?3J@Cy6r~vHnqwEf);ym!BbPH(?3nea-P`<@RTP%i! z&ziKTobZ$rN&UK4py|#JJd0=B;~h!fk{_5lg#5P{ZL__=rbChY7}QJS;K!Hvv>1LD zc7enW{-*`_$Wv}Fp#9AaFhcs)7Z=4<*+EYyQEsWlbJH3ZM%CKRD3l%IN4znILzW-e z+~P%~C}ltHJ=1(cx`5}uAp#6G+0)`@IobKoP)oezW9E8-X>9OT0+GjxIns0a%)kDj zsX*f|iF@_?X7Ok~E^Se@-UaL^+pz;C_04ZgD;>cvQn?Pf6 zArONTtxU=~s0mQB6H*OxtDF#Q5=h}}RDBO*Y&J!ELHE?{0%5q?QTO2Hoc9q73h0=C z=q0C0n(ufF^ap0PB9kC!6t(#m45DIRA(S97LIF+*Rm?{UCgoE3J((K_NXiSoKP=n| zULYTKI+{^*Fu5p_hYj)m$WNx?7#M)c>5mn*dgrYYnbnobOLAGlRVsEsE7yi$I6pD_ zEUuIJvaJDyjDjS>M?qf<`Lc9&SbpEe6I8uUSxFgE$@8Kmf-=9qflM{xV;g0i{Un*` zizOqxw^6c_#3_BKV9|_5g`>_Y?E-Y1D_4FbTINfk%mQd67$A@Z4&E$&Uj$|3#h!0a z2CrIv+fj)vX1SS9g=OnmD&2kOJCR+->s|-8vcjh9^GR0d(ekT^A|$f?_yQGrvxRyW zDE5Z$Z~!}*6!;|yO6fAbmz^CDl(J!Q6Dr+1d_RB|H@~)4yKu8F8;sx9`v^ZQw1-K& zkH^i0ZDavZx*-`t3pupxBB7#xdC7btg%R5V*D^PaPN3NGyrgR6Bb#?{c@SYwXtpNF zv!geQW=Ev`PawKqP29#COYb*Md;PAsY!rAoi+7PEEFG1XUyB~d7KlGmz5J~LbskAg z{4UDb<>cXWq;HiUX3N7SSVVYIKveHclE+wFaYZ|vaWXMU>+?j2QdV%a4YL!k?p-Ca zUtyV!u6x1hQ;-*BQ3WB_?)Q*4t!;rD%q=qU#aI!*^5{|_QC5gQrPOv7lUpxUPL`u$ z3t~1RPfJO1iO>{LSE|sRveOhkH>E{)-EupTHp7`%x@PQx58Tkq3eYSS9LBtx7$og^ z_A1L%M9~L%uRwZ4msnQdPcxdxg+$cD`8~fPqNgL~(j)+Y=Da{(%6}2tC-#N{Qc7vi z;E7*Fc3~Uxwuf6qetLf@4ZMdq;Ug+Zw`=@Rb;*}Ha_Gx>$2_>g?Wo&H)}fxJILiS1 z>RC#iuQ1Cja+Ii=gPyfOBmXr`M;8SYEMId53RPQUcGQvi7m7(_4$s0H0Mq&r9v(zO z%GdS|bN*apAMeNltx75BzVlv~?~mF|nDdI?Gw)wy$0?Vf>d-LThi-$hU}7jl<5%g& z{Pgr*?w*dxb^#Joyl2isn^YU0ABvF3e}i!gSDpgtrH1K}|B0U+%eQ5@WOJRX<_?6& zxhm2UHdjUW(nD?K+&Ret*@52Znoz1)MD4hj!bbz9m-6FcCn`mx3-)|o3P=81cJ z?(IR28r_uiW>{vf=mWs&;Rkuy@Vrf*99n?Hg-HC%n1CYk9!VC*a1lL1kk&_pZp^`K zv-_62A4D$VRh)<3&Uwf2&mC5rFD{)6h6Ff74kbLRaK+bH7hPF0SXjFxN)9?a}Fj2NXCT)!2Jx7B<}pv zFZkeYzUmP)i!o#)N`TU`^?S#g;T3ZzQ;KB8s+E?Ne&nk1w5bZL!h$;Pwe5T>5RT|I z^0HEWGP|rq6q}r1zEJm;^p}1ugqY^=AIi?F{}&zDee?kiq`2#A1(>2}jk1sg3nR_q zjdz}-cN$cSc*ZhO7g|tN_yI;fVem|)%K+T@B!MA*djB&LsQKz5sfOf{QwLHc*rubL zz9a;9QpUlmw*~BE_?_&&IcU+#(p*#F$rnvX-1#sge3cpTH%zVK%ZE_e3yGRIMo1NX zIFJI4Zj|&ZX8KHw3fRD@j*0$B=Esc$(ZTeJaOrfQOG2_|yj}vmH+TSpD0p=zd(!MI zm?J1KzB5CM`K#ZNnKURSy##SIXIl6Ol2oc^tvPVteJ}*qa?R#yAc4s^+nTUX;+u7s zs=SADPaeSj#-yMf4NANOk@lCYGDnm zk6eaFL^!(6wGkSGofss}FI=4Ahwdp?6s*H>9uYz2H}8=Ohe5~XX&^sFVje79UQ0~n z{Q?46VQz=an7RTCKjc_TOawr}BWKfRkC>jF#WwupJAU&o10KA6%bn@=KJ>a%pw(G= zb_9ixius{|U;(r`om0x=?)4%?huGiBf8ik|!i9SPg+KQbXoTH_AJb1}W%d}Ls{s!a zXGA;_!l!Yjz456-C5PNuALIe#ie%N3N9`Vn0k2t7WiAK!rjKFbTXYMM+s~UP8U6rLo{ z=ATYdrT*x_AKA`Y!Ao4u5>-*JfTY+lrVJ*n6zYd9VpNp!1Ur0%9>&At30_A9{XUrD zft$!BJ4>y=orpkjAVkhPT#*oTIfaM2i1%TKg-k00lt1MRgUgqWwm1h%x9AA8lDP*WX8R+@L?nmueuSMN zB@qY%a%bQWka9AZ(uEvhXgeA_2~1Id(6P+U18Ff!^%P}%$`#g*6fv@VhVvFTgu27e z-w;ko=#@nk<)&A%BZrvQTWpr@noN+>@chN$F@yjIcWyP_ipoJIO8qF{5%9IpmA-oA z-e!^=B=^oW$NJ@^vg0=1-R6T=026r!xhVM5Rgjk0?1(-h1dZOSxJLe*14{)109uWy2Zmha(JTd1q_jD;qC)m0E7@LRYt6? zcrKF67Y_CM&JOa!2q`!EK;{s`M|`ma@#Fz7i*bTP?*uLi$DovgR2GYh_05dQ%x1J2 zx;2LY&8tX7s0)ed3K5qF*orV_b-bm8Te{gvw54S+(mlqZus<}{k?*vj1WvzNm8R8Y zye4(6@-|EyrHLzrc@rxaMJS{4{jtk`3DSx9JvSeUSjxcx{%(&VG02{s8VzZ(E#-aY z1etztDxhXb4D)iGLIpf!hwPsIbDRIqD&65k1(OF;U zH>%@pzy%Nut|QzIprg4kYA9v2{kq;oBBkCNv238p>ja=oB z`;mwt%|@Lg_xly|4}H=rJtu-g=Lx2%6>$7`qIq95rg(U$MEO$NX=o;{u|k_f;lwsW zecKq9J*!rpJ>027sI6Pa4cz_aSUQZ0w*;zM2&C3EuW@mL1`QcZ`+GaNp5z?PY+q~zm0+6*9%eM#TyL!-^}|+X zG(DZOT5YfI?0uhUBPVr6ldT`OUbQkUXEWOZCvsK;pQ1=kDugJ})z4_L zySMpfC%bmN&qjHwN|9ynH4)|e{k=D@Gc$CIW5$?{H)q<(ImY3b(e58_w)TJ7+hWlF^$a;RTm4&|fUC(HD@a9EG`eYE5Q#^Z~z^9$9{5*NGp+}!FT5D_f^^fuS zfsC)lCF-HTTp)Lat%!Lv#1d#6Ez?%Ltbz11CNs<-XfVCaljWz6^2v_u``TkCXzYUb z`ZP8(CxL)RqXx>|?jtiI<`3ol^S?x?mwdLJ`6v5iWks?wBKx8>QmN?MmF3m%R@NT- zTs*IRMu%Kh#z*7s3CS^>qUOk{8|JW?m#_{^(a&#M) zr;C6Xi0<9XOHf3BKE!f$m4JN)Hi|y8eD|O`*5-jSC)(b>RSv?%MC>l=BkhE9t`2aq`*ahSs1XvOCY5}^qmTM5zp; zwS=v3LX}RFKv8vG3hy=1wq4$fjr4!CzlF;{4)~+ZE1nNbCAd~gW>R_Ng9q#;r_47) z2S?-czio)(N&bw-4_{BipXC+Ox(c1T3h(PGyr`=%tgG;AsPH?%v381QVT$E|KB}uw zJH(fTPJJDKL)K+NM0c%iKp<7p>7Mjz#9wwh%p%#+SG7E@5|Ay7BWK_43+6uK~ zBw9)N`KYBc7j=_-Sy!P~SD|(l{kk3^v@2{_vZ z1k}zUA}{63j3znv5%D|yeI1t7Ze;BWqxqFD;Fb-*%9#O8ECSu&R@I)`TFLml4qa-m z5w&xOs8#`;JuH5xo5$y4Wi8s)p4?jI_V0`Mej~T*HuCfN#7W%{wHsNB)V1fPmKD`j zs696kwiV7zDLwg9fd1e2h{Ss~&)@z?eZEvat~)Wc*jjsHYSDQvHt?!$qP3cU4|P4% zGLl;IQaguQXx7f57Mc-p$Osx9X=*pDb`_DJI3N9~-Mm_=TFV=1DSI^Oa=6rjzEg)l zf2J#fM~ByStExqZTBNS6@cElpi}in|y@`3i{QFdk;I*WqmcG>vQM-|~{HC_T*CSu0 z+pz!H$EEhRQA>zwH?kH+we+_3$ktY;^Hr{th+duoYzEsobNtX7Rv zTcLLUYH4z`ifaLPet_2M32MY3Tg7q%P?!tL4-|8sFifoH8iv z5)P|${DZUPC9%=*vaC;A~(G|pjf zT{klD?2+8u68QCUoS7)+Di{8pch%A`-dr72UZKdXt$NzOf5|MkUuSmL>u&}QRZrqt zjc&NR1VPpC#6}Dr<8?K>>k8!UhGzquoY5mOc1Ce^QFVzNg6iVxlFvM4n$RM2y0-0&90Dgzx`iz$E+~B^fKYB?XljZgA8CN2*NMD$y9e#UE-!V$3&#+ zmp^XNjAl=Jc4@4I#ybdjRc4Ho#<$$LXe*k5fYl)WS|v9;xodTo0DqA0LJ;T%Pu_Jv zh{I9cOis>>;_9O6lA1oN8-960Q9btWUovx-e*fv+>574&kD-Icg(M>Me=B zCDB)RJ3}I4J`HgOCmkl}qm$D6TdBH&09EtuTbf+~vg^s9)qwu}ORl$~Jk8#sQ|T?u zF7uJSmZX5-N|ykm7MR^N)%bGVn!K(y--w6AsGt~1W{R#YI-zcK~x zt!DaGGhHFuRHLR*=;3s7OQNq319K}yS76%p2wF9M{{AJ`TTz}w^M$8d3Vo~h_)NXW z%~|cQbFgl0ho2W8c^#Nvr_HShT^q!jr_Zds{7qv>RV zVC7pkk1|zR^{(HF(zl}Ym5hkDjvm#A>00!wy1Sb#x#7uOtGg_%zV-OHV(yPyVtq@j z=OxyX)#6X4m%bKFsiuJ+})uK8NKy~}-l54H*&#kTy zzv;67L|4~V`s<`T5@iO!W)xL#Ky}G19JlFLH?A&`rq#vOB?*DzpBXJTI?n*XjH2o> zG1-}gTugO^>XK^%p^Q(@n8A#q>d94?%v!80X;y_<-Ch%n(TUL{FnLYVKOAraS<(^hnxiDE!09(fjguAMmMod1$>MFI5-v z`r*0wxhg$xHsyKxX7la?Jnx!LI{2@Qol=`%d$oJx;}hXvgMp@bzj!xuTa}${?xIB45xw)Bs_y6L!gGC(BjSip)Q ztuxe1UQX@lX)F!TM7tN8wUP|YT6oHP3NPH@vGkxjD43$tWR-sJXw)8E$m7_96WeWh z-g!D20r-iVT?S6Ch7)dfdy;%w?{p9~w<}lM_8`GS@2F_lx2TWR>woWSE;hOrORsqCTPBC(Y{WD6K{OwvAKgRP z`m(n?G0qxz@4MIUBag$Yy%yYXj?!e@rkk?8bj{S8Nn2#&-ejC~5T-vJrF!f%!O$5N ziT%S-yL_!rpkE{ldjp(;1zE8?%G_xm0o>9j4if1BB^{asbs0al`_nX8kVdG`8whj+ zKLMBXbcE%*PSFa-_yC8h-5(F{J~%ww!}IS*-_<^1I#GGG`~KUvzCaRY7Cy_uLS6K@ z^(!#DpWb~yT;u;Hy>7RU1FciUAnw_7eHc8|`nDT^t9rc z`jx*V$Ui!M{ukRLJTjkqrvAxa{@2|H{|`(6|BDFIY{DLZ?MSi{&OKBA$9tb1Z^1i6 zaOZP;xoMx?z6IiPb^U9;``&CyR$D>=*yc`dv)LLB`{U$6vVnZ3!?WIhr>J0$z2kj& z42q}7V>AY(7+LUyn|T9Py#`(msWGXs(D9bfnq zZR~nMzV*`X|M~y^w~Ofih?Qre`u7H}K&fO5{*j+3Or7WLQTk@UadT4v**F1T7N!g; zMoPu$>U^x>kG=HchGiO&LHL2Jy}IQAsG*J|f8}SykL$=P#T8~N@T(54bvB2C{8pV} z`9~=rJ{FRTUzrv!+lUmgWiCkP?JOAfmJriu;g< z&qPV}7zU&z7f^}(N?nqoh2y)?z6txCT|S?hX?m+?8l2qfnQ%$I)iZ(cg5rvv$>{MJ z?!gIkU`$Ffp-$=WklH|y=1XV-M-!+Xp*q!@pU`nt6XGIF%^pYt6{}Et@d+8%HC0&F zy?mcngJo@;I`7Y*%c>NDoN7Y=5J^YZQD()kOs=KNiblOLY3j+!%A@7w?^c&9q^U=> zdaRY@a&aom_D>;9r9H?uFewahb~yF%lZ~@t5B$1 z_C5+MUiMhd@T024LjCNNsJ_7FW~YSxJ?ohm8La}FfX`w~vicjt!EtYNwuxL&PAkaz z_BrYDd(?e^kcncf?A%~VAe4FOAgrM5nE_QPIuVckim2?gg*IPEcB%{Vpf-WJv>wHK zU(tiDP?d&{cwo06Gl)3Y?z^q1T6=aYRDBfpD^s0{B2s3i(!ACyn`)+NMp)$`aiVGg zc}-xgs}l>Y&8D5tx=!b)7WWHlz^%>o*5)emnwnE-z@@45*5+Dea}@@7C2>_+{Erk; zV}Vm-S85S!ZLR@=*Ah}QqO|MbhNab~1*@w{u}>d;=cHA*ehhl&=P69+u(NCoyXo7v zn1v*??jY!B^87EWUTifPf%>hZ^c2>a;S@5Tx+(}bK2rVF_R`l0yJc-rEK&b~<9YYN zW)IR@2i$)$8uk;IqxO#enRX_3AKW>h`p}m==L3R$b3SRjq^xN!24@%iWsU|7>nRl4 z2P;Rv3wLblg7IcIH=dq(g+-g7g`Y*kG-jq=dv1;A)!91=G?zPxA06{;LoDtK@CtK| zwROHpVZx%~bJKOznoW?!8g+Dh9Bv#jzg4C5D%=6o>^}zruFQpiHf=#c;@p{}wu6ih z&jHcuwFeg{6rUo2E1WlaDp4B>YY$m8-Bew70ZHw97DdvB+$Qm2J=Gj+A*!QCQJzG0I3T?I+~ZVhIZxiR{xB$fCKE&3=)NAM(~!=GIh zk4HmzLDA05m1j}6bD;O{5(?`|vgmsS3Tqu0UJGrmLS+zRUjFPL6O0Er=n&j?ZR`9q^k|H?O=*mv(L`p z?g%0cO|3Wqj;4cPT9bp&fn4w&G7H6x!$Ww1u*Hk^$XLIa_aMfJ0D%JowJmOmxC$rt zRM8o zuLXMD4Bo{UVn3ZsN7O{C_iu11Rux)_6Gs1I`+_7RcHc0Cn|CcfYtx@JG2I?C+^D<_ za3=BeZZ2=)x%`NImyVo7 zuEcg4K;qPcIQ;e`kB-G#zown(B)znMlSMlxfe@K>CO%-g)Y&)Q!g%g#peKqh#abdMa`h9Kr z@#=RgPgcLJWmG}dQVR8nK7X7>%%{54te+t$Lb+7>t6Un$8I%dZvGE)>K#*Ph<*6q5 z7|kH;k;0QFRUofdWUMJBztH*`q&$%OUZGg*GPJ*)6m{%tzz%f@wDA18#`A{M!|!dHpU3J zN1hJ5dEj_4sI5F$=Rscl-|1-hu%8Z2z`T_GWP&x`y=$FfRQ!L4MD2fqOX0$V5FfR| zK$zit+%*s!6hR0WOQSTf#!tHk8sqWqT>zZlvl#E&RImW6Y1YPaU<*ey45S>YY({6a ziM!u!rSKz1=4wVvv|+;=Jd`Ms#h*rSZyGHn8|{8)Ndt|%&+a^nFD14Vs3Hp3YM+qw z;cK08&W?t|o~u(R*U}T6ETyU@RI6)Gd>bWHtB|tSR@NSSiMmwb;UXMhCv7Jy5MsuY z^jzscTPcB;bNoK~GmyRZ9doDRJ0JK1ogO-`@Er*JJXyw7O*Cy<^|?Q^CEB$m-*72$ z|8IRXYF}90-R+J4+WJKyyyO&X+pk`2Z|S%DP;toh=I#So+bZOGSsPD07!{U#-0Rb< z$rza~1$yFkSfo2cnMICa`eYlZWez0rZ7J#Thl#9MpR19-YTW^JP!~W*TEpbc3+7c? z910*BBnxB=)XGF1xUNJTO168)i@oQ|ZmrpsCwnd^=YFEqwft~v_w~-+FI!u08;7sf zcemaqJKO)Yl`MRt#a1^rjm2KJlW!KZHfHyVK}tRRVNDDi&l8(#zGQEJ6;nZEn=w-Z z2q*w$2GGcY|9NcAo`6zb4R#G~z4jP9ImfG?K3Z9M{Mfrl>6hN1u1V=m_BH2=g z4}g*y6GL6e|4V#EbHQsUYR2imri{`HQ%6t3gh6b|MKD<$620?`Nx!$18+n2%Y{8=U zG~SY)4+zEl6}zlB(inD+^e@EWsZze*8@wk+0V6@oo5sutQQ^owBA|RY1_;WH9geLo z6l1ZS6sW#0y)Ueg#H?~yghZVBap_<+?DP-=gm*~Xjjq6t#$^o2WDDglesUNM(RfSZ5|A=k zB!hS1Uz-Ng`y#19M*%7%akTI&xVMM6+~EL(8-KTObuQ6dV8pWS&>I@P8sa~owjuPD zq_@#MYBxUZEO>R{Y(5k8*@Ki^LTxK9Tke`fLvw?%UTXg_tLwjJKK#N6_r3yL~_xeSY^rP=Hc5zR|-h2swil!xvD2C*&xsFI~PLS zjpT>nN0_HHF1^|0{5Z6&q1oh}iG%Zli+smlpxY+{ijkO9PRNtct#D54uB)-bn@9T7 zA+7$}hIE7DraySfvc*LaHY-B5Kr!UF=GX>QmVhaYa9p;Wc^n2u3LyP*8_(!xAQTSU zU|Vba$K#7w@34NeF)a$=z>YcD`F=gU;-YY#j3YbQG*7k4X&rp2=mM~LbhTy?)NC`V z+SiE^Za2J4Foz(qw!FIXWaaVdW8WxT`q!WgfQ+rCmU2Pj(KQ4Kw{3PXv0=)L?e53} zdU)v8f(xHr4doaGj>>An@Pvm!Hvr1PBhe3x4uPUL@5HTcf~#6Plz7@{qIKZmN)mBc zh^+oHYg3Rrv~qBkje04Lw9pXA8bTRKkQMID(8gobuC4L&`J;vef<%E}idMpP?S4ZZ zDRMyvMe3#;QtKUfDLHf`RLJN<60h%Ne&E_aQ>EU_<($;Kdd%}@tyEpqgjuhl2HQ8lsA$($mlp8@Q zj3i9>5TBj*IZz12q2i0vEZcx-_UHIM|^nLH2^zm*C z>^8#}B`*+X4ozNi33f+m1Xm3fDh7&c2^a6il0Ve414ah^b%cZl=^*-Vey)BXe) zg#N^)Eu#tX4&0Rs#c@JKGQYAD>hweJ!LfMYI1jMS6L`(?WH>vNsJEC3LQifo?hGMn z$??X;ZeJf_271`W*PL< z;rf6j(D+CW5U7Vfzyk!Ue?5h~F2#P9;~~fsycZB}4G-KSP#_TlWWMLq(K%wF$?(<3 z6nG-bc2h~lr^9I<$vZyo=8e^k|%C8GbabpppF3kxz0G?bP6xqy5 z7AbY|15t;)X#}d2`I8xj@w7_Bt#G}kLN3eW%UL6P@*puqW0tAb@iq?TS=1bSZDnN@ z7vZ%>MZWgkDlg9dg1jzw@B9Thgk#QsK{md|nNkRoenqcDR)v!%hk&KY2WA`q{^3x_ zcbG>ZrOD?;^2=~4mb@`swL1_=u|t$Oaf_yu2^DU4_>p)^gfvPgov;+=Q&g9NgX*`y zyEEiZ9wVvN?Tyd-uu{%uNt?rsvu<{WRDLw|IF8Dp)Y044ORQ=Uhe|jTf4qWdx|A?7 zekoCn$x;F*uu%$pLU<<7cPSz6QEiM8S(N@wRH0_b^)?q1is}Dw6#qK7I6H#pThRnf zQfCt-HL%N@s<@P@3o|lVQa}fS4$3p|WSh&=w!dIAF0tjhk@5IW7nuD9zZ<~;;U4lA zP$6(U8BH!9GG5%a*>pV;$FSx6VBPTx1b*IgAeR7V8i^zA!ZAZjzXaVIS;VJHQ}EFa zuUD0K@91;!(+^wwTgau+2621$E?Fc6qlK9$#T$oKxbOSS?(@y|?Qq8R+U{@@*Sp;q zM*49Jcvk%S+A;}2DJz+eiZ%8j{_H{gK`sx?$c4QHzvgNw1$bU6!k}J8+TE^XS8^wA zk(*)@Yc`>vaTT~>3{Qrz3fYBxw9tgpMjMg`3Sp>#EGN~~-E7gMA-KR{^NR#xh^!;p zFD?W=BC>kM=Lxb&!Wf*&j9eg4a7)p7A>GpOBh6M48{(o#R9QheDV*f6LqCYbkp;BY zGd1~T4ol<0X4B(UL>UsuM~Ru-^su@+uU;W_Td+z`_ZG$wSzHfbvXDz8qm=aCB1nW# zAc-4&l=?=T(F?lac0jZ!-#~7;5JdoX6(XGM=YZ;B+)KpmLdfCW z2cUUk6)-aYJXs0fVoQOm=cvQ;WR+?3+-E~5h-t7Y#2>je_!{+Eh6JebFjvJP4~jA) z>5gT)j5h@(n1b0F#31TaFoa~YsZ_-is83mnAY{sN^9jKk_h6_bI0w)#r%dVw9T;Hh zEM`!hK;H*Z-(CEPvhZp#@GcsMN$w}>XtkJQG)XXv#Ku^Hh%-?(9n6JlX!O@kigpmR zd1&Bq1A-sTUhg4}>NlIJIpXA$NZ<}A3`0@JcAuO(D08S0Kc0@zJ)}{ciivUK>G}DP z(XvjGj`c;NBR4Hmsn`KmAj*Pd9|FomWOIIkBnlA$&zRG+XnNLy_P0d&TOp6C_@siT zdXQHoc_Y9ryBoaSArsqdI7dvSD6g*5Vhz$R;(`d8hllb_+z~;n;%__y_FLp!l~xrI zd7Rb3O~Hpv1MrUYXQYc-{e-nHxNb7ZRFL~&aw_`(7M(G{cSBoIXdf|7b z8R3dDsm#XQ?YD_EI*00L7{y2~2|wF#NhYf5}Ocd5pP3mL`kvz9sTYZ}GT; z$T8Go??j?Ht;@d1`H-VMHM;_0DV>>Ao{cA9;P$zGM@EXiuhfwl%cqrloExHQUhnGSS_h6r zjP*6h9C2}09}kGqu)i-sfK^=)(m}&7KyJo&A8=TKLN`5LQUL>h2`>2FY%+9yubz$T zqMX(z!@{T;corfuGKFw+1rI5Ci|J#28q^i#n5D#_e0hrB7^J6y=)IcD0T19 z-bpvmBngZY>e8rz7tq)*BF`Y9h6(rWNy=pAxMx8l;VxsgVDz_+bLy9Wx$lrF&;g1- z+$+>I$Fx|oVORx9V74)?7)w;=Y9kb{Aknxu#SU~}2=f!HJtC$8?LH!XIkh6#fw+H^ z&@Bn3h=*Oc7zn9>sEh3HAH~1cl!&$hoFYl4ueklCW(>H#hD$)}6e;LWPRl0@;?)Ms z=qZK7s>oCi{{wT?f_N!OeR=WCZBf?j;8x>K=$BfL(^ZtO1Yn0_uIS1r=3!5nHVS$J z2JJbb<7{L$Wt@m$-C9RuBUR4ey!+;$6&Y^KpmliIK~Qj7WwuG)y@R@9JOm`^#>4wI zELuPgNU3<2U;y|(8ym7UEh5I5(>2za$|8IXx!il4fG2W1V_Zx z9vp0my^3xE0adJw>+!x@205P^l`=XE@xAbsK$f)*bs0|I!U<+*wSx#jtC|o!=_1UV z`;@aj<*~(OX>^nwZBUhm4sKWC$^mAq9_x^~=!=NKksNzxOUQ&!^)c2o=t4!*PX6&` zYyTH1;i>>6)6U7fP|H+zPE|Mj$c*i@F;H12ol#TAWcXEjx^Dikg9JQv3b*c2_FSRt z$yz9MNQ%$+YGOHO>3ouKngX8DeL+D$kB4K3hf#hf@e$Wp(@P5h#fFCc4&69aW}u77 zqWcDWVwK{?`MnKB4N3BT_@mJ~$-w`Xy96H`i5VkxB@uwNd}y7nrs$A2NEQwf^)Y40%33Wxnz%j6Yt5y)z?><2!%<~BSx@jeM7eMluFpM{)BtDP(o6G%KHa1c%ry-trD9}$zJh+Vqn3Lf5* z%L$~zs$(TNEk=k;uU^g8C8uI_r}^@x~7 z-by!jYBP&h$+@(dpW&URb0s$0#St8sH&I;YpcXFIXIfeJ3n?^pN?xO>KZ8mW_opwd z$P7cyp~*C80D~#LK%ilmRV;Y_8>%uv1ipr$@w1hTGZc!pt@LL;n!+llUR)&X2gn?t z7?Qj|37z=plL<97y*(z}e*c@&g*jx43`nIT`>@^xW3Fs@)61pkroXBZQx_d*#h21z z8gNzIs<5F!#t{Ogl`_)TAwq!gU@kKVlHoqrA-Y z7{1bv@!k7G-?$A86Afs@LqL|p>non!!3nXO5`7MMSXh8uFHEg*gnLBrxYX#>gRPyd zjaF7#$7O(u3;r+rvK6(Q7o`?9D%-BE`dkmUZgZYitxlLHq7$EmGHB1?G4ct&wV~FT`BPi;Q zNEG6h%2mRdIqp7yQ0*&r!W47r-QV*g>m_6Ds$e{`731zi~(R zPv@b(NV{pNU+{XKyj!nlVf?Qtz4q|XAXMB?S*hfG_*Va=+>~B;r!(-!ej8bQ++p_# zSQf|k!Cm377Cc6Jqhx>c#qI&M>PWLI_6I1N+yP5=+XKAWCu-M&3+P1P4x_>U~C<}WERL8k~ zIFJO+1&wZGtIP2?WwD|1EH)=rIbxM=r=8Ysl9&5?yNQogKCs<(2wP{DlM%1N($pOm`KA2mdTt@OhvXt;ugZ(abMm|h`D&Nf@Q50o{kTSU zPm=;+DoHk9Pzqf1(fsGbEm{MErkJ{090ZLGJAh>-*V&Qhp7Fp~11i}U7vu{D zv?x|v0e4>%x>Tdi=!FjxXrC^JOR*nx;Z?E{936|NT*rn7_F`G)0j!1XvFKBW zwuq~2okj~kS;^mw*Os5s>vYw>FkEU)$mY5ZsfKqD3n6CC359Ag?nxYDSx~Q+;x$q) z89Lc5>@I!gi3SI7f)-RCQ^jq$u;oLji`(MMUJ7Sq*bMe0p;aNhjo1+UC|MH%_s10( zrZi7s?u8c%jGMhtv(03&n2RZ)tjOWZ!>>Ff%0Dzi;# zjNan{A#iz|yrWntHn}`b+ymSJI0ug$B6U-Sx7$>l#N3X_-3L)a3ZmjXAPyiflu7m; zu|du1%4KQNU>|20nr{HP*lF;Mus8VSpK55XUxgUD3OS}M5fQFXTtLMl%V$Pvudy9| zj=Sym2wO+U3hvV*IA@O;dFyB3k{fP(ey$KXsuSCpqYzbcG|k~s3O_?UeLZ|J zolJ&^D-iu0^6b-aj!GGmKAoQsW>GNc(+LU%UCDj!AIx0B`_A$pGdhC%$Qcc-Q26=V zK7+?P_yj)?4HKnGkde^#h9WLc5thJ$F0;6reVh+# zS_)aN4}AkT(EMjO-rJguDpSk0;^~zJNqUeTKg>@1Cg1@R(Hya3r8jXSPR+a@zbvew*44gwbh* zi0z_xXby0bI$=mY=ZEDpMEwl-Pma?bU%)2@f1!@gRcXPQ1%RNdj_MNt28FrPIUrvP zyXYa>9t+WEc*C1)H(aoIu80d36&fXI`5)q<2U&owGMFhelH1xdwpJXsOi7XjCc3`7 zNAmAN=ZnSY*u^}>K5d}6?oBahE)8#r6CWc3u+vA6InIFpfkP?KXFBM?Bx7G>7|qC! zlQN@6!w*1Y(mR>rWdZIm_}DhmLi|bxgLsyUbkExx!PdlmwNrwYIE9G#bB-T~!iW0& zele`~-8=C(f>Ty@W$4Vn$sNM0 zzQND3Bp$hD58_25Y+uL);Yg*qpTK4Gce1D>GNV9n$W*6I>MZr#_@-R3$UhE>II3qF z&}Kx7DtaClB~|qO2m#AQA2N5!q0sa;UziMu9m@FxPk0j1rI9%K1h|t*!F8CV)d(7o zNG2sXTg9Mn=pMb+s7_Ea-2@BrB-F{BF=-rA{Md}#wy~@?ulC&P>FRWN_zKe$xWQ#K zL;-V9NI3|~cQfUep};>mA+J+CJ+qs`52d_=L2#*v7g$_grbFd-%t_{Ybvvook-gWg z?Y&pu@9({Ntsle!aHu|AY?50B$Tu>>8ji=1#yp7GB}C1Rfnt@yH-poXMU84`0XC0F z9?}Y1C=zU&5N(Gl{*Xoyy}CHT4fVpcnUZD?d z@)1AZZ*$w%qr zV+u$ti}9h^6nsN<+z`~=FXLvX^w3<}%1Hz@;SsA>-L@mTd5r^C&HrUBh}yAWt-A{- zD!Occvz6MO5_!T^AvjjtBp^59l?C5MqaLA9SVdlI-dD3(tlZ^6p&eraplH-=By?VA zWtC7!w4~R0h6)?FT#!VwNmA;3_Wd$d1uftrH4*iNDx2Xct777n+9+ARLK7U*Kvj5D z!Ivx(B8X+?Ye#jY#1<2An9b4<5&bv#W6Y>F0;PfHWdrsK*=tK9yB=sptSZ$~nXD0W{F{ zuJ|8yH)P`a#sL7CZfloVc4uYEWKoQh)+{(MK)@VfhMl zS*dTdy}uJV7AE8=YSvwI1{Gc{Qek8mTv=Q7Mn>bM5Yv3DpF+-%u)zJ08MVV$cIDB^ z14DLnB16}FJBXYC^_-d9-OO)P2X75S}9A5!1Nvt*KkkH%{@iM+V^2rq$i3we!z5(Y+b zRnL-jO(_U!A#cuDh0F^xRoj8%O>LQbxPVUZj0^zd9FO5r0O1gyVi6<*bhWyBMtBwJ zLRNEK=_1qk3TUnB$j2cS=1g_u3kH2ru`rqj`BiXB5Y}CD1o6ibC^?M)+D>88C@c2)7Hjk)eHVs!XGtzUAMYb@6`kwb3 zZ%T?bHuRC1X+yy-8D=8=HqKhMT1LekmW0vc*+3JnoXnKnrsj6ca^z2Gn8vKhL-HPhC;KnQJ+!$1s_!(Sw)(3--_3}Hdgp7A@QEnM)4u-%MWol2=v z#d-*hB!BON6{#T_$`=>HhuwWJ`VO=a zf1?k)+&7y%u>J}dRkP-0MTH*Z>JVSzphivH4G#<&-D;3_kPWgqygu2S<9!0(hwVco z22e!WLnLK6#E!A0vx5ZP#zSy>`2R=B$H^_p_AcdPEBWf4Z#z{kjG?Cw-As6i|kP5z%_mMkX zUfi4QcDZ=?)<1oO`DluFe>1?!eI8$^5J6n!Eg#V*QaBV=4=sS6L?)RE*p0T-A_JKL zbW7K(=$V(AB>dC-QP3(-d^(;GC5fj>h19XdTOEI|s+29$(&1LYPnAQZo|L)s^@ci6JI~Q=$#<9QyS$uvS0g36CIscRtPBJV zvca9L41&1RUkP-dHt^gJ+`>iz3O;mWi`_!@)8R#$%6E&>(V~~5RGyuWfZ(AGw=qJ8 z|1?`jPhYm0cJB%L|&7`L2#T2Ck(ff5$BqH2o)FfI9M5iuU!xAoxY)lFsq&QPX$jji;`Z-Kf#xmtZR9j$V~KU3GNM!gU~m5oAF%iqk1 zL)#=DK@x0eOXfjJgu>raks@Dv;(sA~!&0&imn_7ujqtgJR1oyMLtYaUY~kr4CS6)e zKp6SbsIYfj8k}8_IKTi#Q}F(NQvp|ScS)STd#acO#^7&qjaXGaPdfh6WMWu%fGr?_ z&gFfzcE=71@hKk375sy;L|FkhLw$fIRO;idYGz7cpW-@H>d_^QjsoMUz9vTe^E2WO z>x?wC(xp3tYREF@4@dxc8O9+F_C*xS$le@bA-g>MQj5Uj@i$9sCdrtO+{o6Yd}R=k z_3>^KD^TnZQ-esV0-rZh3gk*j+v5Mm_RjEo)Q8OsFp%_QTy2EI@p{$YwLN*g`7#S< zMfbhUR@vvxy^XTZKeTpt%D(Sy9+Z9ld8g|0&t=tHKeu$t4Gvs952UFtKnS2G$1b@g z{rvOK)FFTs@%aRSc?==^Jv{5-txS7>7;3HXA^_});h8uBJTqnyt~m5DRAVeUp27!; zNCbCuNk8w5j(8jA6gm)1V|mPMFcq8aQM-H<{qz{Q$++JtmRB!?C@gruB<$+V7cIpT zvv?)m>jv-x8kx>x$@436G{}x&=0whOfbSd+U-O|_s#nadk^G3nGU>rX6Gq-i%4_?v zWP?YuQocEw4#r?TOvuA+ka-7Q867&sZ!9Z1bfRd%eJ~t@m`caXbQ`t{Z&BK;SRyqzoR(@#tKUBUTxX> zl_@imnD=?3noDmjJFv|%LS!S z4pT^Jx$qBr3L;k_vy0D@Z=W!rCRay^KX?L$P{q|pd8+)~dH498!qDlnN?U?$+a%m;0L_Kgq|)=7NJ)#c@Hlb^vbXU&j2&uxL+*zmX>ZkrF2&iF&J zNYRs>-gkWzW}d-!IS=Trh*X(sb}TC6PE|EzYV*=dfTlCSURxpuA$6_cB9aSI{uMHa zQeHQVH)OLn6zU_X!Wgy+d0LlOUszY*k_{D;JOiTfJ`im?59rh-V5(mAo+pDQU@kjLX{_MHsPC7$Fm1EKC*}WighNNCTp$Lw*RC ztP?J6XEN&pNRSSkg$}(?Y1Wri?M3J%1z(2LWNc}X#yzlhI3#!P%bSfVq9u#H2HXHW z1t1fDh8+MpkPry|%PUD>=TphD%iY56@nt}GFk4OteL~vuNT{92ce(NG|BZX&jP#Y8 zu~>q1H>I=Um6iM0=4-Yc+}q?(gMCk^)DdapWC(vE_5Fh<2s7{s#7>azB|K%Q?fs*) zxGVF?OYGekfbAj}3&Ubf?Jh9~Vi9_V*h7dTtulsc@;u9Mf*|caaw#G!7o602kwgyx zF7Mt!r6$4Yi=RNtA3nVgvzZSkqJ2tT_&TS|;uz#hTG__wIUEUK98f&$rnpqom0l)C zjRX)19SESXck;Ole=WZDaXy3($}?W1fW}xE@)ZpsePdbLTJHOa3Dq4V2hT5>Aymglj(L23T6gY|O8PMdFaTxx6$Yqn_ow!#HYVy_O2bJc~{yY$Hyp{T}ZR z$^57(UP?awz5SsLQr^P@o`Nl$0;*^pc!ZRNB;A~+yiF}r#nEYNN9S+=Yb2S+iUj=b zzL}mOE(n-6IN=>C#nHi70vQ?(CV2jx?{cGeA~Dp9e5XipQ;e-TCV(Y1xor5iQ0>5m z)Ia2vMt~WmhIIO$Q5IC8`Xn3bz^?VZ_)yFkdn0sYQkOOHAGEt+2z3W=`u%j>P= zbaK|`o~a@-{7P8s6g*Q46Zs9Z0<=S@o!^~k^I6pN6`}i-4^dD2eT3bNJB|@4K+!c0 zwY4ulWy{6U8p0a^ZVrx!kk&}VA$MHPKmIs_e&_?piz8dcH3aDqJwxWHp^&6;@U0k+ z<+V8={|0~X6tr-h<==~Q2upo%0vt<+u-zk$Bp5CD@6bfPaINwcQ>D}bygbG}DOE=! zI|(uYB@5C_Q+hMx&G@?8WPePC-7Xn7K?-Mb4g>6D3iRw8M)3sfu~Hx>=m4F6Y5}&wj^gCh)|UeWe@+C01spRb=ol{*I5sD| z=XNRq$>p=f9FUyMPnc}KI9bG{!5GV@k8?8{q$iN5KIE@oSWn5N3}27%K6SB|W6+n9 zE~u1{1$+3E!N8$`l1w^yQv~7JF<_8*O1PzJUX)nlrq$1AP{qMWVf9bg;t-U}E;Jwy z%ugP~Lr40qu3L5}7Y!25Qb0T*lOSdwj~onrq?3-ox!ELb03$PLz>*^b%4Sqbn5P`! z=PH&)XH!2AT|iy5KAvl!VTj+(F1((*8GZIufeL{l+GujNq=tPs)yKDOY~YEGsYJ!T zI{XgP*#(eJi6u?N<~e%gj5opQuigrm4D8bQY7H|B;EDB1<3u*(zA-8Gse=S4*`P5X z`Dt=I98NO((ky71M`tJgYMl2qW;p09(j&PdiMCLGAnR$yX!$Qg!$#KuDV#g zySw|nerqI*v^j3{8ZhWXHcT&1CzEriN@b^sMzEI4Y4+F1 z1W6fQ?X{Biot^vWm9OYgT7+CE%g(Hf5@t|X;GU=QDoi|l97V!rc%d9S&j(7E1bdt0 z7ow=U+>g>T+By8q5)&8qd0b#9Ihrh;9SzJFlJaYDwVJ4gggVm^qqc(^&JsdGU zT*bLzCDTA*GnB%tGKA(5*=t4+!r2W^3vaS~QX4sPp|QZdCfvJ^GS>y5Fvf+OjISKm zZ6~L|dt<&({3%q+=hQ~tmicNn1r-I1`{^-`A0lo9Z%<*%A1M~|a6{+8i;HPPWsSHj ziCW0i4{qI}o^q!oT5InNTFp_XWLm*g$+H2lA!`r_xf3*M*4ktP+a9%*yI$NOqcWK} z#lflFdo6s?-g_9~(R2=HX)*9#2!u~0`WX)2tD2N7UA!SwLn^c`eCrN77Iz-)s|+m! z_NW?jrlFSnS-zLOP)q)ly?QgIGM-Ng62pX$0Mzh(E%@ZCXGYm`M%PZL{{u+xmgs2B z*K|67SwsImki<Xf^ zAyq_QD8!0xdSH$B<$Q}pi8u40$I%{*tZ$KPfckpj9@r4`jPEczIIm>)I z)z~8{K9vh24I7b8yN-40E%fAV1w%cONO}Qbk?IeMKj0v$*0Ku+xwY7oXs9?%`{yL& z@Wv*|lSP_BMMX%?)F=k6NPXzIxOO0gNTiwKkBEuqS#X*`SR1y?jd{#;p3r=#l3WcJ zN-$D9CWRz6LNtWpatrzxC%lv?GBHO2KcViCiYtVO^K z(fsNNidhgTF>rDC`(GN?`-v*zn;hW2Zg1*m)?Wyev$p*XCj1HxTXAa&HzFP^B{);U3}@9>}*YUfNJ zDmWN%79S8?f?@ALf6Vz1=1qv)`+8jXu(RMI3WNW@Xu%FNfm=u&)( zl2$)AI%6x-&6EC{k^Y(M%PUUqMFv^w%GF{DjU6jDLv8s@agldfm zQt+6zPKJ9X8>kS_EzIrcy?X}|#-jVF+As>y++F=;<_!h^!a^gmks!caub$qWOQU5z zB43_0*Bn+5>nLr=yUV~Cm^2w+BYp=ND<&0P?s5*Ckx8VnzpGpl4;?WdO|n~e6B(B zexS{n!YoK#doX?o3Ac9~I@HxHH@-{HsV;@1fPC#F658X((v42Kg=F|a8K zaQy=w)yM8Y-t19btvad)P!8gdC@Ov4c@^vD-3Kpll;p^e_Co^%LxNnagp*4haGXxc zAQU@WMvkSCrooewr4Bzw$axt#snM}X?4{Pbb_knM59>gpXu5V{Z{xFxCE{ww+YBzc zY4U*HgZ{3NIgpI1$bNwL3{P`>(%`$sTi;)wJb6-rX7VYDo<91bcp5PB?t?c-jWp^&ScSnJ_hWdKaMwN$dyJ$R zRRk-ST`q9>?-&sVKXD)1vC(H0`s`20a;d9h z4lGK}v{fJV^h)Nu>aQt}b=?$*PIqEv=EVH`PZo$Q=O4Mz=? zT?rOHoD9#OC69vsZ*8qi<2D&JjCRItRoPbF{149ZzWXxTho?8n@@6?qyoS4h_i3ol z^7d%?(WB*+ZwpW2JzB0$s*e;&@=%m`o#Dw1Tn*{L3CAaOs+24o7Q_fW1aB2kZ&`i} z+%!foS)}Luz<*UK*KBeDFzLaS0BRJ3K3Kq^dsxE~-uSodEYilgB8azzHL=+-OiWVK zAaoP4H3<4+J~Li)#bo1JAa+z&LpSl>7*47eI$LB&fn%VL0haobN|!U|gE(qAD4ls* z1Y#IK{4_bP8;8UCyEt{KdTmM>zqU|XF6~~OIw%^L5jR9;>-!_ zOMQz~XjS1B(^uP4)r?8>D%HaN?z=&KRhB9ca z4mUB9=)+~=w#w`J1$=dWrEIBtE9RrdYn&-KT2*|8pBEnN4#}Yn{R&OXzGvHF0@+6( zifN&Dh86EYM98-+?`6SBiLx}v3GfO*zlaE(jr2%!9s?$Gj)D5bIXi6}3y$T|qkSqn zMd&btsM$k7Tb|!Z#&?~xM^LiEL~Qk<71@{Qg&hMXW+AtPf?w!sNBfZs@K+MEX%4@2W}Nti8?5cF8Kv9pMVBWM%ou>SH7aMgGE!OC8c(KH_r) z-dPg9{rzb-rGrFxp@nA_MtgXhJ5xQs;1y8wHC|8^`$91CMrC3m-ho?oR2=y!FN~pu z7hj$QY|}9uz)znq2;>Hn1=yEq8yP)cIPkT+VcGdEi@Ut|uB!n)-}%AxNaj%6zpq#r zLOaH>{ScOz{lx{tZ+wBV2)pTEI&-jHSIG~Q>Dl!~>*x{GGGR=XoV8)Jf4+csOS?U~ zKhT^cN?9o9lD~F3-+i~dEKRsa8Z5!T)Emw18>edBYX-mZ%n2W0CNJ6}SG9cFA6UC|Kz^kn{s$rCz~qeR8-D3#nA)< z(W5zA{G>&}Q-G`hTKXt6$iwRD%G#rRPVdLd-y#F?TJXd*ipXc3vhKJc`#L!#978fIB~w> zu$0Cl$XUV3@NM)VN5=}listlz;|rU+>dvByX@ZKLHe&(qr@t{ zRS3e{@y<`D42pP#@V)KvD=5+zqw!dNNAre7UmJ8{<^xP6(~GO=o^c46F1TD^=ghrA zhOgEn!H-6|M3DMp3t&=;5t> zF89W$uBWw$C8ezNq+a#5CN$>N@fb)*XC!yG9&@r|yKf*C_zr3}D1Rgl!*^ zFD}wFkQI_a=bqVnt(#j)qJ2@#B`kWHr}kwY+icBO_X=UQz>OmbvIU-CIn3(<*B01W zkh=>gA!HgtyIdbJ%aAC_hayUB-=8Ee8^txJIY3;G1SE6EGC7Ad5t>i+ZN6r2_IE6- zOHWFkom@sYI^DUOyVPxH;tu!fL>=4G;T`|E0^iCuys=;`qkRRo=4c{BLk9Fb|4S)b z%L;?xftTGOJY3Z67g>r(#KU!6h{_;QqTtT5;Xbx6W`g?Ij^}^Kj_jTT3=blLod{E` zeV7ODx-IaT!ZS^vi^D~F;hOu7@id%1ifB`FkNoUj2o(!_($A$~gu=({A^YI&g?()N z^ZZ2H%){_T!wx;>d7Zww9fm0Xbmj5mypaDyzCT&@g3H`ok1v1tdB(gimi0CHP9VD= z!HBvHIy5o8ipU(;-8uSAyTq0wJPU!?e&Iiemm72;At_Z?r|`o==sBkS^b(kcf1DgS zLq}P1QE+Wl%{NNTJ6r-hIq`P#0=nl8pCd-vyrMj>Q!t@D0*SsLAW#y?D3L$^3mPb? zt2zIRVtd3ZAPhofy6zJHIrS<2jT7=`w4hO@eKI%EO6df_Sxu6>6n!SnS_hdEzy-A& z3rnaPlqP=G_;{eXE}$4y2o30SD{u)LWfa)=BnjsIdeMo0!o&35D5Ow zBN;gLG5q6)9~oAI2@?k<<7Y9C_;3W}+q?7k@4inZqm1Jn{`>#W-kWd7bsYJhe^XCU z>ON-(N+cF8+C2QVK@hY!CJCB=B&%T_odQqAsN6AYeOto9-%=#{; zgfZrV-+7@4tF56}TX|#2on)+!k8k6ypb~_7#sSj<4w8#Lp-d=@AK_kXU-_h#E~TOU z%@fLHsIxh*fq*-B0NrIxfZ}CMfZI%yEtW^>s9>EaS|6nt1|X5mpbnU!@DL&2xVeDL z6=6h0H2MG*Pz8&qjUaiMXc4zYZ*Ob(P1Ts!CZc}wy)Qgbs>{dEL<_$Py*YV8VUEhC z>{HHcg?{i}7+bZJ1f5RDDg`%XAYheRAzk|??h-2>6>JzR2v2%&i3D`8P$vVRslFNd zdM*@~d%CS`G?RNT*b6UjZXiEO*c;6=?ASYq@cbRsmRTyYT#=fxMXH))YA&;R*e*Yt z-kBTRt9w8in%3qkXr6FFsPJc}h3}7V`U)@T!qMRZ5LhmvxlxBGXWW;EvSyQKDi9`( z-UAW9Y}h2A;m^RWN|}9@YdPe;tXUc+o<_j|OkMAUuO!H1nP<(a17!Ne;Y6fZF}Y=R z@G_yU9_J1I=+n+e99KTN+xP4*uAeB6;oT5(yQh(h3hh%2olMrnrlYKL5QlOPhY?^%+zK1`zG zjgz1}s7E*DpB6HOszF1UJchl@Su5 zP`P63u@n2xW#4fCIOl%`(c)GGh=DP|e^|p#vf*G*(v-8QCs|_(y^i9FzllL-)oyVc z{XE(|lNlo4bQ74+Yu7Mk_MghkgE1Mc`2E0d>M(?Ma5nnpuRk_+h}8Y!V3SzTs=V^7 zG$QLmZK%k&D1jM;~PZtC}6LfCI5ggK@9Zxg_Z3|NG+-_ZJUJ!jH| zaVg+xp4e|Jwe^(6yt1EeWw}pm%QNkh+;lt-&xmPu%e!5hq2p-ul|$zKx>|0_Bq1rv z|6DR$hQ_}PI3l_KQw%uI;7ZqY(*4Wk6ZVwg_0!soxK%`#d}8|OhiFAnAu{F2l9`?q zov%wfT<9w%p|0!4Of`N>b|v(hY;~FKt+^hkkzM*HS*BJ=%r5ZV&b4so%9C0MQV*T9 z?!`Iau@!_gX$B~h-zxJ{CFYqqilgcsyJ*)wb8#-2sB+V5Z0o;VdqAzQ^a|1cC0zbi z!eu5S|4{O!i@bkx*B+I*PuKAE=GgHoBxl?s;QTX6rFX4(_m>~s{c`2O-OF8f_j<&^ zG?NO)L!qBWNy+BQ#-A78FaDRuuOSN(XfUuRe&eyL;>s_}U zOwfLhJa>q=D<0Ku;rKd^NIC z2+xQDCJVO&k=d7VMYRPJOaD0Zh=zQ>qdP!Vd(Jro?$l!YeN{R|)FonPK#U(nWIK27a2^UfjR7)fJ zwmB*VtmO1gr6%S>f3@KT3)Cz*q$V`oJ zN!AR!=LBfzy6v9eNKUs4rrXr-!_sH&H_?m&6R|x*Nl($wY>4U2QE-Fe=Fy zwy?`BPxivgU-6>AAi0SRqqH#{zLEgvOoa^i_QC!LGUki*7Sr~DR(8ot*GH1&+@` zu#=y6_$n-en(45OnVWyaG9IivxR*uR4I@QecG1eSg=)W-A7Kv7uXx9B@Ig|@9a}Qq z2`a}KyLjKC4-P%A8}Ibc$w*Sjl_;w~mF#A7>gP>OUW&xjL`(-Cr%xftUM6L>e91t8 z!4xAY7?S9+PH)YiA=Bqwu5dn=k^+}PH19ao1Z>8=d>wMokhLAh2bvm-4vJMKlsJul zhA31oIi0?|!okN)ZUTVW-WKd_`pG3NM#KF{w$+j)g}Z8QNalKt=Zg;lME67X6MNmQ30o?eb^lA z4HWq~p1iRVd4Yrftvyc+XJL9vKYd~PYZgQe)u&0C1b^lw#`g^k)DL$;r!Q=Dbu0s+f!rwP2v5^5^`W6w!3P zdJ~i%N7Agw#P)U?WolHTBU~4y5T=}H6ob2DmegcF zM29l!}8701EhvE)K7a0pWI&(=htXlso&Jh7M+?vy&DJkp-{_*;ghD2}v>6t)%-WiI= zC2I*naA^1xkpT6mi7nW8Ym_^jmh7O?&US*;Yqi#rkln@U+3_N};$(5Uw?omz;VzfA zP8UCHL}SCoUrn&rEy8JZ9{&y&Y*M!jy~Za}sbx9Ilr}XJ-!X+duF?w_yQ#%Ke!;n` zHMgfy>gosDNV@LgaK#-eT?9HT>Wxi7rW_A25dzi_PaLBmp^OmZT-f#Z>@Agrb}L&AbJ2mP~TvRuVnWJJ@@EghDYlLaBMp6*bCl4@>t->#@m*}8>W zm4U>4zbmNo1{@`8RV|lqc_89l0`A*4D}MFvbgax!WqoZih6>?YP-)Y)7?Bq9V)IS_ z`efCTL2Pz~qyrj_r2A}WLJZa}`k?tKgQ{GI%uigdmCR2J$)W9MF|(roW2#7-GB1VbE`zw@T=qLbR-u)c& zdbaI*mAS4>q(tgptN?5!1;7wPlN3%QAq3xu5K3%xAXOet0*?ZKr{(Zuij_5lxU=i8OhTv(_3h_c<|DL=KQHkP`sJXn zwJHzmf=qj%1k-rD_PM*4=bg zMN;5f|5^LuvWG62#oc^-mV}W@&mDT=@t$4T{mIi~9n8#sG2M#98w<^}I!=by4iAq#wGn>)YH;)BcL`uACsNE6Tn_a$|65car&)+j2FmQ}k&mq3;K{2Bd2^kfVcBlBbOL`dC(|t>g%=F}{ zm9bX{=k%1@M2+ugW3uR?%JxQU>*a{hI->D~P)MJ+RUwFp<}g_4WbCk?v_ArWz!EcOsox$An>N~$VI(;(UJ%dbvCdWF|bkZ@Qyio%g zOT=1(;!y9`SR;j44&SG#T*F>7Gsx@$FSgTc0gz@rK@tsG$BKF|T;y;i0>OFR!ucBs z7=}a{t7>$s!;mXf53YY+KU#3DQ+CLNm)l+(rBDhEvs(ox$;i+-K}Aex7;@8UP)3rP zRn5Wmu0o(%PTnu?`{zz{BIuwM{4Zpon86XSAH63fQ<=bY3APH2DtOEHw|c^WqiNJlN$VlO3ImCsy>ye3I#6dtwzN4weXcWL!zlLSHw< z6UC$ApF0P~3bv!BvTV5QVq?UWT$WYbB!HRULY#N(iZbMOBP>5*U;+WmBwU-Hb>O<@ z^WDV{kCBw5A}v08`eOCf_qC>UQR{D4UtRBmXB#j6kUt9Yne1{)OEz0~yw+fLollT# z)36hTb&qWNCBBnQtl9@^{Gy}cKscWf29-uCwT-hpi1foVGMUOF$@ zOWOJ7ggMB;?u{tJq5Hf|rll3L)q0>*Q5SG&DPt3Af9MIQx&pC0RKrx5Fbd6%ehyiA zFe1&D7|O7-E{Ged+!=GfH7HeD2MY&_7}5N2N55ZjSTN_&y+6LC#j)PAeEW~Y25K_` z{pov(_#W{JF^3RLk;Hhxi~h>r8tiA=!>$X=l$R<-$jm^zA*nL{Ud5$4O9RtrJ~i zFmWTvf(->D5PAM?f?YPz$o5hC8syCCRzH!h58n0t34LE@!rM~o{(x5z>wC*xV(mnn z3$+rl?u{!;Va_sn7{(L9Oh8|e`GOn=%{?By3vn)Mc@{`kwuoRcC#kmwQ$qqCxaSy! z(4RaEEO&f#)aE7f&0t(QdN?p@?P21JwU@c^Y=x&83EHB<L1o)$i;de7i^`9L%Vsy zEb<#h17g4^>?tvg)6741f_+58)GP?ukWQ)iQ>AvaEdDGDTRd8m+P#pp>MIBY!t7sw zVcp32gkd=z!^uUtL}#mE{~GnT|fdT_&!L`{&`| zro8+enYf_yi+Onc@%0Jp%D-5(1*;g-`>k2^^Y!N&PoAznd)#5y+OmIGZmnn>i^0DZ zGJS^k^ub+_sWE^PfuiU4v+^EBN6e!+J?i^#W@42#VbIjDJPDY0GSEmrat+;YG$@IV z6AvN64W!^Qq$#ruH@bLZMY%vF?}-M^;vp=bC=N+bGN{Iwq^gnRk{vUqL8#D=S>2>$ zKquQcyHFkSEtS#J2tfrM43RD`9wp4kYa4%p8cjP@iZAc$Tczd$5KU)NMf-k2Hs$3Y zr^GXHjrbwoa*;fDYN_y)W*B828XYyDjFAn=erJTSHf@QAYRsS7-gsmcq#5i$VXd>H z$zm=e9u@4;4)>0&%WV(Mk(%b&H=7Nqa!9`(vf?exHrUKMSK+EQrN+oKTlcG+j!)5p z3tFC`Z!4N)uZEb$?3*_L8q1T{GcE8Q>qCNMZGU_|{%Q0K|0~xo0B}?Djhe~g=q3i) zWakf=&ff5lI369qKvvJec@x#^b?{2fDfNcMVlw_2wT+D`>rL>+{4xprHy52-Hf6tf zK~1i&DpLaZkd{!SbVfTFpPU`4bLzs6-r?)O=Ad0~0e8%GqslPjJyssvrg%q26M2-B znz%Ul=Gd+x#pf#(pPKN~sf>5@Zy3Q^f$15xj4&AHbH`k88&Ai;j(=rM()diK86P{; z=}m=kD$-lMz8f->qo2OXiy-?p9)QJ_xgwxfa)r@l}uc7&rQGh)iD$& z5cgn76O>aKM-~#%HIv2V)(Et2fN=Mh2r+{CCK$7Ooy2Ogm$*#jo-&oX3}@wm-=sKG zPdk|%64K8w9G^vfzS-28<4kRu$<%1(#0btv6iLYEdvZM<^TZvXy2j8@P5p#9xOhP= zttPyqngj^kG}g9fuA&}lhT@Aej)4Jp-bOJCYQy0q(AELwsaHh&PSi-tFgw8fi9C^v@EmCl8ckC5O2bm+htoanUJ}#~joY~rK4&76&w-dd7Udl4h%Hs5 zE?A1;s11fl)K7@au^-`sw2XLP=(P;4hP$%Ky7}pnOPd?eq+7mf`|Fy=I{4&WdCR`f zt9ZSdo%;oDuWH}p>r9(2H>f&2yHDk~mY#8|B{7Lrk&%lHs)(ktmKtSB#Hu0^t^IT+ z5qB!YtWBqW0~hD`3G^aez;*OqzlzP%zDnlRI3k}6p1j(4KGw}x0Jb$|O$Mx?&xjERt!;*XJH2Uu8ix*GV zKe_31lA+RX4r_Mw;Xo4=1RyXM+bgw`pmg4fcKhaq+H-^NJr(q5_|bj8!S_K{fZR@v zXS50WSt-fY7l)75Q9r&sCJHt5P%_TF96-dIyFfar1$B#1cLxUqLo!KvZ9x}&M;xNZ zmrc(6CZ*6~76;t$cs7~pv(fI`;{#}>1nluU^J=~u9;z-V@gDncn|`6Y)i8-hq};JK zg*WCR-O8M!9-@NGPXJjg4u4^om9pp1qEloT)#9X{RXU%?EOZlddcN4`Cas7jmC$8% ztN46-_$Q@ec>sQT*vN#M!AyUC7Z-0Zn%nh9sW%;@&aCIiU|#ZpE;e&aRE!T_ElM?W zYy*3egH?V4j~Z&Tp4rlw+_cr5>G<&Mbo6qp0uJM2&5+Eo5lBUI7v>XwA*3UK2PRdj zKu1(g5g?B?o}BZ)+k^FuC)RD7{uWuU1s4MAU>$@#aZ?GxHeAOQH@|1d+vfhq;~%98 z_fHx3eY^)R3FAF8OqTW#<$)qTF4$CBl^GM-U3QG@jw>=d?(N>gVae%*!) zt-`oQw%m_)J6tP>&B#fPNNW}rC@BpATOpr1_O7S4)6|RDa!CtXkEu?xhs+d3v{X07 zWDH8{R48DEScJ&MZdwSC2Q> zxBO?C$g5)AnfXuy&1%y#RMckh;nnyZN0K0l{%lM9{U=JdB-1jrG$AP5Wkx6pHSNY< zRG|&$Pj$nWkV@0r#eQVLyUfZ#-tPFCH1ES4=5X%6+1xw(W9^g6O#;bh&p% zNhvb`^_@6Bx0BHuihl`rY)X+t25C(|Hs|EI{dch7b`V)a;)y=$>)cIL!E7Ko78EeG zhyVoPBj`@*-?M|%W8?|d^JoDQK_M*^BcuQrhI2OJG+N|Oqq+B2qpg~K(^sAA5$Ui; zH~py6Nyi_g_&rV9X;XaHA3*qr(J2^Y+!PEakq>%*gs5sD21^xKqS_|IjjA^cXG9zndd*M7}0eQeQqfnDkr568pWtE|U4J+NdT=&or7g zFDIj)4u}T6sNIZU;N&U}QXfi|I}HMwM(=z%HjT^nxQ5LBmbweFp7DqhdDWg=8?*CLreZy+#|Jo~=!3l`lPYe&(t zO-!(!-Zrx*-VL93980k*8PG9Fyn(ohEo+{p^=r*(qP@epuAjEwiHiVo64F_LZY>Z+ z0TDzcnawMseY(Xl-Vh1vT{2@qJ?)SgfWfL{2Fw8?jJ)iN^X46iPP>JS(n=NGP5?H; zWAG8KqKyd{Pmd8)WT`+77;@XXN9wz&lR%m^OL1{+ePCi(8IqJ)B51Xp(ig%m<>37FM$yD% zDm@67oM()f+pjWrSX(x6zEKp=heb5Hs12RzrP01R0UQThIw#sY$CskG$@bLH%Pqjw zQj&ZkK*h!*cR|yM#fK-wD{K^LdrZ5a*Pl>jyosHJosqU{M_d{@VTz3QWpR+Km(tyR zM<-{tt!dk4UIdw7z2Vb2!VyQ8dm{vM=}*q9?8upCBMwkEG9*y({ov*+w@!?%6d0my z9Lef19ead(Q)r^ukbr+2-7A@Tu*Zbi=8C6Iww}IHK`QEs4bOcKYgtC?+Izau>KPQ* zDXWloM3of`0Yp}VQ-seT}L{DZH@ioNXnBvd-eG6!Fe!!5eL4Jl2faaPg0wRDsYgy~;9^CiwR)$B>r;r*t5~ zSSU!DD+`6(W6+qX$B@4UmVB4$i@F-3f(&_s#qX=uouUlYn@fu_l(v0E8S;Rp6SsvK z@|R_;cu^BK$dTw0qu5YiM1IQr6+YHmnV}nm-%LWD*c9YWCsN5~s*75%n$6gRg#5jr zW*@voHsn@&_t4<=!-L^A5eOzJbOgq8aq(005)*rC;RP&X81^C0|LE8SFo~*#oJ=V$ zTuf0e#Zaaq99{=ZmbZ#$a(ZmG6TUnES?rZP0bQ_${5U!}#rb?RLb~NZ^U!Rq(SvDV zgc-yzWwnlgivy8K%_W==bI5Q$R=TwLZ&-dcqm7VUCpAB~VpWM`aYX?YmEV#+jsezw z!W1qM(DG<=imzUcJ0w`n;S&83@}J2eAj5y-5Ku&vp4TbC#|I}TW?g+l`kX9#Stwg= zX@DyVdj&bNL+1~N;~nK-yxM%h>8qVMH}72S|33P3UQj&_l}(8`8J0MNOpv=`n0&`4 zL=DNu->hwIzOGzIF>R`==0U91W4LQR`cwsGK_VCIalOQ!lumtO6!&~Vrh;r9%J!Ch6sCI&>j;y1!<#ou=vTLm4TR; zBnMh5io>=A8*jd3+(b&K7-l;wSK^*8Y2_4?2o5R!EedTW0O&IVOhipF^O@9Y1}7uk zqvM|rCgWq0nZoCMflkp^+w)2IT(tPC)D)X$s1I45aBm{Z-C= z_~Lv88n<5|Su~~N)yTG?RYzuD)ry74Uq`&|h{=wezrrPMb4ujT53Ex6^}j1%b^7r7 z*nPjpld5v|_f{?@oE^7nCZqvfLtMkPK;n*F#RLd#c_yrVC94xbbO(A%47JVkJmuLf zZBPyJa4{IU<6t^^LDXEMplw%&lc}4F7tNz?$X`m zl`pAm>253uD{r|-VK~`+t56h?h$EA$rcD)_s`tU$ymx}Sizc&e5oc_xJcFNQ8lr*fg;qklUCI(~S#iOqVxm?UZv92bWS{R~fZg1E|%v=k++i^@OH9YXT>Qo-2!=S19rMz@n2#84T-@ zh7eXzmgQG1$dJ2QO!=*al$Eq&*;1NEY8{3ml@qCVUCc{?KHJ*}muH7^lIWkJn(g9^ zb&II*vGii2JD=Av_z^@TW|gyUVX?=cFd?-%4<(v|b3<*YL&}g*-JABq(^JqMtPIwj zNGQQ!C_luzml8iSTk&A=e%gx9D)eG2v?4LlllN`{(3X2uG(W5-Oi-dfW!Q^R*f0>h zyydnhm8ZyV3o3<}H9S6;5_eNm0o!qz0-Lk{^#A>T4)(``|2#W98}1Kh&;EnOduekX_~v|} zv;Wxu?1Dxjy#0Kj^k~Qn>AHfWXy1aWQ{GC25sE)E0m4g=8RNwlWOGlt>-ILj#kIF* z$BNhRMI+2%O-#=cq6Vf>El7#5$>93LOEC0;rwkF-|1d%T{=EsP1UuSwKx=;BwOt{= z^&o9#DfcU+1ul-X8)v5{XQx}^g0k9k%Og-w0hN-;y*-5%j*g+jM6oOm{1YLUa8{Z1 zz|{|$1#lQ}!CjkF06Imka>Ptb3AM`OSCuMV6No#&bMW@`NcqNxVU5v_IGU&WZi&Zg zBD@+M5oN>a_fJBzHb;sb4q{8*Q_#%H6^nG(p5m!t@yptsE9)3>A1X=iy%m(|)06JnIif<5f%W0Kx$xd{5$!Xy;rbU{tHuv3#EgP&VHAy%N zw-|4QeMpONB+NSnHL&_7CYD6d&fd(3%}O7g5gvE&vt$||0tp>Wju8zgJO=OIKb}2U z_lx+lQV|1W8qu64Zp`H+)C|rR$BBqqCpJn#s?Sq0IEw;^LEH$AwHzhHjezVhIW67E))X{+QI#fJtlffV;<`1C*ic zSO|Xa2eZ>OX^=P0*p7y~6LxZphN6O<1_&{Bm+GqGAAFI>P0u_U5peW9kljyIrSQ9uDlYW2Wzu z6uFEa3G~!kI*t=Av1Wg_6$2Urr0SCJkLC{QRZ zCX<(*S7}n>mZBI+OLeNBF%Wv6_=K7)Edd3U#Pzu?GU}#9pl+DAk@2`%lG`+AX$fdb zE`Y?d_s!J(NK_^f`pDv?NoVk&ga-_aG{7ukNPEu7@*&#BFHG4s~oP3XGz81c-ienPspb69KZMB&Gum zkCt>mS!IkWX3{kAV1yVXVW5_nw#NGsmZh8_5edl+l|#~c{o31_6j_;*W@fKLmMOld zE)fFsv(fv+-0%#j>+Et8WR2 zW|vsTRE2OhST=o&J$Zsta`bLI`O&77kCqe7Mt*D@V!{{`dEGyzpKbt#8c4A4Q)Q&6 zl`~ozRQhxzOkMh~++*7zzx;Hyea#|x@GI{o_mO+8{DUPXie?=V$5R*;Eulr_>^B}X z82MDz9C;$#I_3yi8KJhfb$MUuKIw*Q*&E;OvCz!`XC|G=UdL=C1>){E8wyjzMq_Sa zXp9P{jgL8=dE-$p2Fv%QXtVJlk#I1YWxOm|&Gjkr@JApcUaG?c8oo!0o={9{fh+!& zKgGB+I^w=FUDrry*^U+IJ1}g>BqjWy`q{}uSb!;mu|G+T>pA$#9Q=I(?foWL3o6>) zX5Rlv`R3vI+tbsNDJA6Iy?eJP5ok2FGWLt($^H`G{g)aoiDdu4uf^T{ga0_#d-&P% z=MV07q|hf6TBI_TfvZqQ3884yf?-Cu22xMcIyxV2zMrlg6{hPH6ROtQGPK;Ht+bf@ zYLr+?r)x)h+ho*Qk6*zYr;Bczsm&gR$7Z-J3mG(Yj=2!JXq2f&&=Bs#;MsW#UtmIR zY!v~6S}5R?Z4@QTMvc1b*_jk1c3G-MP*ZwMfdoMzvmgp1WZIdeWo?pi4C&OSESY89 zp>qeN-<38GiwK?-hdP%dGf^$+V6x2lR<|3mPJO|8HAEnZelJoxZU5~lzG*NYFIry{ z1r6(9+`hZKtdOI+%?5_0h}odzGkS71zc-_yEs`B|0F=SOgqSr7)bgO;K^d&v6vp#) zIjGrBr^SvgkwsESTr*<5TMEvcliUzeq9kfCXK6{8Q$(J6rJL9{C+InxKn23u1-fFu zWz)Y{#CHQ6MU~)D&)A1_78~w!CjsDYGRtcxruAUf1bpCJ>FQ$4w~8B-F|6@i-g1M3 z8HxyBc=@#MV^w-LmVtRj&IVkpJKV>I6qm=+sbFk71`;l{PSa3PF5&K2#uP3iLk(78 z8DDE4VBs4qe;Gh{&a}}mWxzv2H1}BDw(xHNW^6~L0Ru-QY%rQxIT`?>Ru$tRumeh* z6exM{(ulO$h$O4kb2TPx(id~> z+3CRohefg`WcOQ3=kwzxp)NRixXa8sNGDHJIXFm&Cf8ipuwWHHC%7$iT>7qVs6hez z%e4g4^XdmXf_j4d8J5jlq{Uo@&;hDRe)#j9??FCOV_*%Kb3J?m{!M+J27w;AJw*6t zVzreZF|ol95Q;?=-C(&F<${aKMrcZM)AOJb#bam9Y_a=3Hd8XL!uB2;-#TLSkxyt9zez@eZjfvdWLMzcP7%RFB7JvOv*g=2k^mDm(YN3*QgopjT7f z-hP$@r*r-FXsi_{W}-f`H~M-zm!^LfR# z=N!?&LbhVv(phhijR?30qY9n13*P5#>2}J32f8 zWsoR;G=rg;GQQ>^kSX`VxCQ0uNys4XxHj1a+|O2nMR-%w`zO zDEnJ>QiN@LTZ)J4$#-`!`YiI5DJ7wkbY9i`{(&RTy&wZVH0)UjWA-!d(BQV3m{KFY zM3$Qvc<}%s>KrVNQz`7H$9M$}bX$^idpM`}Q!$Y6xu)?gdvS0A1;hJZ2^<&43+c2) zRM2=%C?VRYE^nRlwhkz|zpSgz?x{p%e3VM^+w;3Q(c!sYxZMdUDmU4zPuL2X0dWB0 z=OF3syzA6(Z;2y!ylZU~9>;77AYDNZkObu8`q%{?gpD>tiFX(>idV&pCn=7VGsNRD z;SBF_)!>bUNl5s$teuqfz*SvE*IfLNI$F4uGK5T*K!;dbQg8HwL94EN&wO%>HGfOS z=iaiO)P?GE7O`n!G7g2f1w8K2(8Y;$=wI9zRedW{NEIpnVm92KEW1aT*8RdU#SX|u z=>W=#0+=TG+@da3?HCYwK{HvkHgqYCWDU!<#EqRYEpZlx*5UM??wq%1pXd>!>>sWU zPJgcQY)I>DoMzSTPhYTjE;3uJHRPvgu&Y#>?L`ZN^+o9 z0bZmaNI&pbi=K=r{MIMA=W-1{$@y}_{*zp8H%})S;dcI64%g>D&S9?aU0Zyu#8cl@ zauNb#*zW~TLaI;M-~6~x)GD^R_s9U{o-+y|g^DTR-m%aW>FV_O9u96+$D)k$>yJir z6q+A@pK~E$GBczraIw22!#?0<&)L#U3Mj79_4;wYRA$;j3}ZWd%QTC!XHMf}zA}qz zVP=O&%HlXM|1;QDsTPQ$t@BZ$gZio4X zidQpRLEH=3TRNS+%6Wsctaer$U|_#s8PS;F*XCkTRnv7Ze#)!YG_^x%2le*>Qz$IW zLs1Kix0u#h@OFiVpJ zFcDA=#&j_u1+snCCl|1zn&e5hz6baNLXQB-`KB2dyeYUsYTZ1k9Z-g^*6oXeZZi4B z>DlojM)Jv`j2DagstmmN?dr2{)}KAy+(I$}gFjgtb78A)wG;A>G0c$J7BS%#5oSFr zS#YRQs_))f@J@5WfIvuM(&a5+0nlkztXB=9Ir!eVR~+@xj8vx2{nu!M5YAPSWg)S8 z)?*mKREy}8>JXb<)bcpB;b!h)6w~m81U?XWjUCMB?^u;&b?4tFT@sPT<362&z<|o>$$DdT zMbyd%=Sq2i!CEv>wJC-r!c`g&%K}EO!%>ugwL($GS&s7g-Op68F(q2`bClWSZ<|5kCUw%43}cAkIn}C8tO_Ct z8rbRKSO_7c)gy1~bSiN`S*ExJg}H_f^*Fi$N#dk%fE1@=80T)NFe+7@ z*vq9Qyd195a^)~1u@1G#iY_>dC1*0a!>!3~m(y$Iayd#~Q>A<2rZH3Jdh@q9e{yH_ z+@H&daID99r@ORMr7VsTR!{qx==Tb+68N*WTI#vCocony!{RT zEF3d!Ksr249p97&W;+SFQtA-%Gy)vSWA&@l*UYP0wr%#AeQ_hBZ@6IW;=_l4jcuuF zSlBoPRSASN^PEs9>Tpdw84#+eefFX>!!{IH=%BzFnbZ5}Qb#*WafhN9{B6?YU!t-#AI_mBeTl+BOzwBD(u&Hj5?eiM3p|~lC``f@;bHkG z%WMk6K|CoZqO z_GVwzSsZmw6`idge|SOo_~c-BwxgFCU~)Y3qH({a_%csZzC6Wo6hmfDQI{|* zKur{-UeDsroeZx#cW7nT+;g``Q0}h&GR<&`_&DiIejX! zw>3MNe_W|d8NaB%%tWX)X!J4+BV6|-Wj2IM35M(u3tcQV9X|B`Qlm)IGOy zhL_|w57YJ0g*)ivJ7>5Z)x*91cts8VdNw}&or*4qZ`csVISjlHtsde>pMtL!J5G>9 zelu(9gJo_hT={&tdpSisr`UI}mdo^mSCXzw>7+OU;kKuDfc3fV1(pX-sX+?J(%+AU z6R0rKnC?x-Jpw~4>?J8yr9rAIrq)RnLs{wSpp5kIuZCLV{}f9Y}gLiL`w73y4h8 ztuv))sY`Dq`xQ{P?`D;#DY%^LFH~|-TXmuM{bv0`R<_tw&{}F*Ac-8pk?mpg%~`h$ z(?|>&%v17|ZQ{2_fs>%A(qLWJ6?JoSo|H1306hRXTtYT>b0Mn!BgtFvNl;^FY}#fm zT2yk6S!;i@R+3H_&<#x4=@5a^Ht97F+sB@hp3njJN?jkwan1IqX zuedIHdbzr}x%Ks{jc@+&bre{>d>sZ3yJ&G!6A^X_7`9IsgCkJOg5t2Bji^mAhTsh1 zLgn9u<_U`>CDrB7DlIzR{o=X!Cl-YKO;qQx zn|$nspDWmNo-0VlU4&AUI`$k1e~#wjWFLL%fC*chnZc10Gyc#fH$eL7>)>|qm`M~9ybg=kjbut;gUy%HJ+f*n2FWS}R_a>!{(Bw1nUs>XOu<~X8D216> z73*c5&sgGGiL-cAE|NGkubT8;Aazy_)c+w8XHRfk)OjJSZmwU}5T7nGGaWJDFKRylo-e64U#7hI@Qc?B6RlYlFV zSRp!Isqc^vuhiCrz^k@wguE+#)QEUuXC86rbqU1w}h>xqZSg!t70wIzi?z#~c*^X07mmM;Pkk~JUcG_87Ct26~2*55n zWU(Vl5{>SMBzp7ai;XRKW-XD1PF2Ljo^kr@!H2-~4qyV3G7fVRkXuH-#ys3k;cp=U zYiY?;ER0Om>Hh{&unWbBQR~;=Rsudd#uSnn@)fxF-Q_RtVLQ4%%f%I9djCQ8r>$Dn zLAN4)3A4NS0>rJ~|Nf&-2axE{scfF0jaxfaXT_rM`jXS4at1LGs)+}RnO#$vAYQG! zenJ-9d(~~Rz@O3XnQPT5j3opmB12Wg?PpbG<)?$8bv->J>G|i#6H=mF?qFEOl-EWZ zlADP0vh+mH4PhO2+gbIkMw2y{nPbs{eOf^kds1~vAp3e5ul*)!(J*&QkJ=@xfy6o0 zck(Ua+!I-PWNEYj1LN5daY;rErYwO17M5rC9{ZiZNBu5}NpNS4ls9VJ zc#UH!R4MMAjVJ*#l+23DZKjw+$-&}COF!+6fHkb zUhqe3k2pe)KPp}5@xifTVu7O;=J5#z(G;sxO-5X73kc5cRWaK6iH$3unYLTs1R=rR zE}WpUwfrBqED?IuHQIO}f{SAz4W2C4ehbG#xwW26a**j0%ZDr5yO>r675w z2+l|#cfVNfa_y_X)V*m&-w}C8_S`M4>jmX~eSHValCq5zH!7bg(--;beUDsTS!cEjU(@Oq`P&DL1>WaTBlQr3zV*xkU$wey zceMjdU5VGfmaSJDJz&!1>c167=U{Lzwe0kS5x8)t$ePT^YsMU^{%wL5pyB5PLmKix zeFeJoIfODZ!G`>Q`)C!n&@uASvEgG5FqcLUEY=eF{8qh^Jh$r;yJP+ux>rr&UB$jA zQs~|AeTw~_n(`WgxYksBZJ@VeqpQr~^H|Y(svfy@a56Oe;J^as4qxakW)g2cAIXrfDPQc0zj<@Yqe^G6Vap+vO7i zMpB-!&uGii+|NI((t*G2e)IC+aC~YJ_0y?LA8zF+6SD2M@2%xmgJ?TYBu=j1rGa$6z^4PK@THOI%TkH-jT z2Al%A;chi|6VGR7Z}owYDbiOqb9o>IRAj0 zThX*Rduy%cg3cnRAD!m2GZ${waB#sXX=1R0*fr?vJ7kC&)EjhhhGr zo#E5DKzQL-UVsmTP^JOqLZY-L%xuy-(TFdL}T{CZ}a5f*k_ZbJ9jtK^r9*$|ltl(>R3sht} zed*BRfl$okAH8kn9<1X2?(no(&vFpaWjcC!+b11Kg|UiSm5dOy>7&8vHM z@7!eV-mfLmF7thZ=fU zuQc#W+S>g2rVjf-ptn+V)7Dy-dU$z<`plH59T~se(ld)g>gyFnC~LaL>FfYCP10M= z_JZ!JCe18)=7Z|Z#lW-{GrJR=O0_iAF!kPpKzUoNr|+opi&eX?Ly?J0hxCKpUt@7d7Qe;=;4 zeJyNS$?cxapCKT6kdAoo$vnRr@vtLuO#)i5wvU8bkJqN5rO$pUYQ4@tAtRW*?uA3e zO|Aiv%js#E@H~nd*NgfVUw{N0Rg2voc*|DYNph8=S?a}kXe#gNGMfamX)g#Epl&jA zwk};P9hhyp=SvZ!Yobq~DShbUZ?BC%rPF@=@%Qr)$lv#ZZ=v*kH4O6hmqNAbcOHD* zF0p!;nTT(^8TokHJKb~t$dZg3u~+3_F#$e3elvdQ*JmYk>Y+^Mv^3Y+KsixzBEU(5$-USgXx_55&$3{9JA;aP z;NM-$C$ENs)>DguhC6|27Y{KH9p$TD-NV0i5#p#39spWlV)3gjW-m7PXNr-rj1Qj7fphEWvU~Q(jy<)83`MO7y1zN1BGm z12*=C`qSAtb;07RS^v3M@H1r3XIx2T4Ph)DS7z0~LQufSWo1t7%)FQF|jcbyI2<&UD+sE+_0d<%;&MW~NjJC}#TJ`TOzk zWNWN9)t+`b+@y{Ci`J^s9}ZF7$=mcP!g+Czj}NA}zux!sh*tq;OzJLgb7w}qeg%2e zExWIL?cQQ>F^>vRn7}~oYOv^c)ZFiU8Bd$W7|tfTbf6^^2Fs_%u%pwjQ;YckElmnE z%>%L1_!8%>-klY*?htz(`(9SkPk84!Jj{!9*~fESP0xnY)0XBMSgZp38D=9@+zPG1 z@mn7ZX6bNvR4$!Gk6Xpu)$P^<^Q+SJ4GYYVUGJ=Yx-r@38d^#=mce^*$iMc;f&5L= z8?mUd6%8A=g?F&|Ic+QNXbI{lR5CjSvEA+fGxBPLv zI8@=vzaIeRVJ_saP=uqw7DbLx1{*F%s}@BvlG}a8v&irQ=j;40aLo36;-0N5@zL;> z^?1Q*p*fal;&3^#pp@O`vjws5#kqK2fiB}p2fxzus_BQ9$QU?1PTqF=?%)61yz1j6 z2dt&d_C(ulXzjnM71@JLLc$0zOj9&;sb9>;7Vj^0XJQlG)I@slfZe9&p*=kPyxUu7uFn z=@M~dG;miDVV(7UXqux5PMzA@?g(&=0XX5=FVyY5qf-~?#EWYKNpY*`+cMb8v+3Kb zu{X7x^{W2qtd;&c`tZ4=!y0ncEk)g($yR#HRTyBsw0p8<87g?RIsBc&VJvF4#?kM}{1yFLE7`xgEi+rU`Pj!M z+}LdVt46odBNH1|^OqtO_DJ{1I1W8p-F&*%jI}#CIN_G_ez_z)?}x--0^B|dU?O4ZRz$yU!Y7spytHM zY+A)MMB9!MnNFU)?g+CVHZ3D9L~A!TQL7}==nU(Q9P2FyYRa8WOQ?hOzC!|gP@Sh6 zcDr2$P?vL9IJYN+c*_brXxi=!Y>s=M{2$GF=Jl;#>)g(5-V&p6Lv*Byi&J`FbV&QN zc&R24JU#QdX1qF;KA*lb6w)Wu0OC4AhA5~>sDt{NdX;aYYTO!8;PRj2aqIZk13&1B zi3HSxb3M}bD4S)0tb$wQwMAuuUGC2$4^8>Aq{fmU>j{pSvk2XY#89@FWC?Cmx1!^+ zEuJ6;>jYVq10~!}scm3coJx10M+h-Mwh*I-gD=WM+pdR$yXA>9NiKOUk3w*KIJj4y z`LeAzOL>@Sz3zyuIuOWqu*rpOUvC-F3Z8uQDf6dFgPHbc<~%P?f~hE9giyjGq>4*Z2<6D+i?nlZ6m7bss(c>@S9iZ?H!?fqfu7nva>F+1cI;cTtc` z-`&02ZeutAwZwMo=OZH0-)U09baLA7y1t5sgD=|#vS)|Q`{CfTmPQE`%y!M2_N%US zSGeEqNypGB>eNz&*5*bB%k9x~^9hjnvIUVnPgWHs)*dXkO0Zq`JH5$vkQ8wy(|#p& zBy>&y)Sh%xNa?Wc&vZ{F{bdWWq*Lnb_8gE(w!8 zylve-;fruNze}nGlUr`Lv#1jc_@G4w$<$zc61Mrcvngs&q-MQuJK!|9#Q1P$c zP7$nF>K84%TX_kZ+qPlWl}4J zRiyx}&QdRk}xM#k-zwML`Ik-RS4HLvp^zxLh1;Fng;SqP%Bi zXrGY-X|vsdkYF{LTWv+bTb}kNjCoUt<8w{w^F?ex=;P(G+hMSp@0+9kt1zLg$^qw zJ^1FuhL^oo#Zv*Av|>%mv%I?y*HZexZI(}~g8@_yC>Y{$KZ7ow9gn}tMJarT6NoIA zSaoJt4i}oH~-cuKGC2CRR24s6H{oN3yhZ0zk3u z>&grE1VB!?+*f5s5RgmbMeg$&QPegU96-D`6W`E}Ku(1pR!RRczJ1GBhC+kU5k*bx zQ$dPOHLKJzFnMVS(NQSRq^RqvtGF@fk&^G1om;^ktA!CK!|Ij1dwa0^w!yKtAfa8J z#b*Md;1ClHM4e8#fc)^iX2|Spf+#M7eQv5oBeH^IloP=W`tAUGRl@DSRL6ms0%uqC z*J1DKq5Ex0D_@u&N70Pz&dZayBY3Z|5Xc zY<0d{>J~7T5aK7JS~hzx99)g~d<;p6jb;hRFF<+^ugG{`x5=>w<2@YMT1!FUy{1G& zuCu0Yb(5VI6__Da7uuoHM{&dhIKBZp@6lNGgv#MIreUQ+(vtL90arQhLj0_b{t?|! ziJ8Nu-#}8zvA)jbCR`!sO6Ygm^{0HjX9OH`^2c1qXI}w3Jhb-Rk*Z@X$_lS?68Y*~ z6j+sI5UL)JdE?C6S?Gx3_5(^<>cH>6wQ!y(Eg{d)w2%MemMXj)jzpQ}77kv`u+Va- z{bc2Cn4EqJDT(t^=?fgRW_X6()m6`&r>D)Xi@r?f6_Kb&1SDD$bYhokL|sz&Wi84) z#J6+mn)DZcxli?y<@;R4&=!ALe!zv-pI`CTCCSy`0Hj-lbgweV z>?_cN{m7Pt8|p#|R8)!adbth+U1?DOv@mP-xpjkbFl8b)0NB_9Gk&jtN@zH>bR*!nx!?t)TzBJ7(fF=jZR5Wq)NQiYvY7zU#z%WGrRg&fdok- zc4JlVtR8pM-qMsVIZhZ4@^QFAX&~;Jxwp(sS>5a5KU@C%9`9E2_3$#&V&&^x5C2)d zPV2fA|ClGVE@X-S%cVKl(Z*zLKs45*l9>3an znf{JuPhUJ<|Fa4D_R@YrC9Ydh&l!oK59ME+6l2ouDgK+#2(HY%Q=(C_fTmjj^97{v zalw_#CcHM%;~hR=6tBBlb#laQXX8BzjbS$yUnq6`sscc4PcHt$->lbMzij~^vkRvQ zrB{p4xGR0lViOzF!rgqwR`R!HQg#Xg66}+PQi+rVu~~>n1cB=r#S=te%Oc$g0^p-V zz%ycnhfVDv+>46pcw^n!(-VQUvoH5;cO96rXw@XWlbyXzD8Px~}DAq%Cz$rIjo*tZfRmzG%?2X=BvNC?*0Do~QZ7uIT5Gz)K}z)7-C zB9zXWE)^5~LifY5t?`INg2?s}`t`fTdb%c1+0?CFvLOPNnHR zI^C5ko)0-y&U>kt5EiNJ-uR5z-#cn% z7uwpx4(d=P_LztulRCUqWrB{%Pahtz*0N82^Y?h?rvt*cSfdnt5pwnbcE|%Wsq9iN z?E#5Tu)%@G(Rq;pYedmDp~J_s*jy0Had`lLc$ znx5m${gzwPwU5)M;sjj8=rL?maH0^FVK=A9O04K&VPRtGRj}fqKvqN@!%vB`pND(M zUme`cPRg#2vP(QMOUmk4Y=7OdnE7&T6CbXiP+27c>jkl*A%qVHH^K70TGN?|d4=ej zDP6HjG$maBdI;URzW(){o0rxy5&F%p(7VqqWcQc9yw|NJt?RYFKyk}g=)D+k4fi{e z<>y(leB@k92r$EGf`gaI!^6?%caTcn$N(ueT0U}4WD;7sNtX`Hr8?6?`Ruk+`w)&K zMDl<^m=K5zTBQ1vs`Wqk__+yDl2v5fR^X8il*9sV#T@ON?VGQ`L^jv~_0ynjsy~S$ zw?BY%K`lgR{DUoskYb>xT-d2k#E$959vhBzA3kGdhcgey`}HG2iaCcX~P~dU)vJ7B)uI9fU&o8Lmfj z%gofxpyk%kJhG?{UvVd)u1fP#VyTkY>(>cNj7Lz)8M~o1T{NCW56D`e#zxyTr|oV3 zyev8OTpdiM=&Ka-R2++Pzi-(uaV)S5J5FNBqEVTdC&cLVri?pHR0|TvJSZ8PsU`a8 z-q|kqF74IZ{;h|y=-UO;@nJMZ{ef*I6x~{MENRI|4H!n{mRuz2H0?BQ7-NVhGEhD@ zzT@{Z-Zqi$YDl=Xc?6G%GF#)9VQqd$yJzvjB9 z(edgjehMO6ZLtx-k5?hzzrBsRN5#dgaEc=;amqT~pEgtF%M# zQ~RQ|KIlBmyY-O>I1+8mvb|QS_!c6@@?>IOK@7-;I&uZPz9cwx| zb&@|sF%EUZRVEjNrA7|Stqa$crk=)N^f)_fWY^K*n?(vk7_*jgkB+9% zjjaM>>sUT`9@rJRdTCJ~!F)o`w3QQ3noKU{FO(QlxKWT`ee8hot2sV->M-^F1IVU> z8o_Znz|?bB%4ZdD8+TR(H)T;blK@|6)t;9%H=it;c!FuRTyYqzBP|YrCu`P8)7N&1 z;-cY>q&0FFXOy^?iJZ6w7GW2%BB6{r;($s*NC{*TpT4z18%YFE#%cc*2G6Q~ZtFomc1iOmAR z8gdh`9cbeCR^hUTP%Xs!k=yp z*03Qyb?+~bwKrBL})3=i|448-Z%-zr`M1N?q0OTy(egB~=4i;W< zdrFugx3?Af<^E?_r+W8Caxvhm39Km@f|r&so=A9?--6sCrSWZnR=6zi zio_-dZAPbK)7}9W%!!gDWV=~fip)^6EqCNXKkf^T{~;(Z4xZre*wb*#J}tQzg@+_vqIjl>5v9ykL&=%ObQ@fJmF*tP6YsD#-K^o(~z#eZboUJl{?-O_c$yQLefk@XxLlSr9U=A5OX9>&A@$^gO6!($)pa z4L9qEU%7mdAfW&o!WAL66Ew#ibiduV7IcGu=Jvqe9v=E7)S3qD>*<>cef@Yk9*Ma0 zqER)t+Ekwx-%TCJR=BGBRPnZmRw`OW zWYDLH++SX~d!OvIS=;0n%PT7n?qW?2Dp%aW8v=2N;~G+HS)7C# zbm^vZbTeTYaO(j?nCZ`?4%sybI`o0UrINI$e@T&2eJ&)u+PgWFSFe5v;dSG}tPF|i zMHD4*)x3#?%p~qBv7WZIw8!623P*|tf284egFzK4(O?drisMH*?Yjd+J?})^n+{|x z+#S9}RP{vPe=f=MznAja=zo976QNZFS5X!>P_`!1(`W24?%+(>TCKQGDZWc0&I(E~ z4x)w{-Xn%mWdWlEiux|Ygrn)v>e?SSU#_mL zN8o=gq8t)}l%_Ipki}Q)n`^5t*9Sk!#clZl^=J6&$(tmGA$Uh)mtaYrdC#}Ll2Ql2 zfwn&e)&di1WyHAIzT^H=eZkNX%z2c9_4P~XLaY||wpoZ>`HwpQEVbEFX>qy<-1tI~ z(gb=Iz`h7Vh5(Gr)WlH}lAy9!u#FS^?A&{*+_+;!NywwF{a8iCRp|ka&Uw@2xxxOr;(KkY??UJj6T0hovR6S47IAyiQ1SmX{IJbRC;6A+ee^!_g+bF8is?ksO%b zRC{LjG?8shnmlQ8<%Nm9U=A48HsP`dXc$yt96&STq8AGZF`ObJN0xYJK(RnyPJldB zJc!Z(`Y4dQpd#^)I+==C$soc1$1FVHCNVZ41yad)Lg2l{{@Zo1%+&CJ4VUM9d;8V+ zoqHubbiu6=->yFUX8qYysxaUL*Sfcui6xkmRP3r}-fv+5_duIpRud+Sc&MP`EIP+} zmzH9;aRGkx>9f)4O)z?@dIaueFkd8yA#0WXcS?LHh26spjvlVC*y)x$mSL91+$ED& z@;T-1-4#oWw$)t+9#AB#KOj5FK)XLG-2o~zW+@5*;pEun81)1^%v&Rw_mYWz^yvzL zIMeBv#1T&Ev7`~Xx*RF><sBMM`jfyEEFQ z00$FSZc;cPZS&S}=HjMAf5Ir`apNC-dUMrtZCHW{E^f#3yfrI6P5ra&92dy+Ck!I(_ab@5zY}k&|QVY7wN&v-4Rg{aRa+ zQsV8Lc0p$|iY}U?LT8Zf#p&7cqB!QFz`dv`mD8ly6z13cI!`0QRkj1VigkURLRSLa zUk^53Jtp<^(f5P4+3Mz6tm5V?6_vrIZ&A>@2RKL=G=cWv;QzwBv=DQ63PpGf^-s>F z-+3Q`Vt1C7Zh3_@W>Nt(*(1fm2^7-ZdwONQNKNn)gek4Q{0q5B>b1_ZPq((;aM~mZe<)MjzmA6x*6Jg`ALYe za7)iE59$~d;wOrk^*lb{ar3>O2cO2nf&JS!n&nEir;GMq+c%@3kj5aMe_a25{oC~y zTfW;KP;3>Sp-NgPq$A`e$r)b_R`2{LJo3(e-5z8Hd3)d-Q9+4^QTIfR2O*HqiJ$=S zbh9`ca>$x3Yzblm8N;MGHjaph2*R>a;)Jv84aE2k{uYbkS4$AOo^;;Ia!kw=lu{*` z^u-PPwFssVLP_{4f2^HO4sU#Qqb$2_WnQ@svJc;#>bpf>xAmG1$t*4L*J}#G%2Zyb zivPR*h#BbK0UL~!CmmtNzBLfr!@V2q+~afV}f`9xmjlQ!!rufq{?jN5Wmqu2aARfR`CS*EYv|7%?p5fI8G)qAXZ^V4i>h$Uf0I^l=)TF!rtHBBxypx^YwCv+t2g-#NMU>mjW3Hp74~QhyQk$&PeIA-qw%g z3ROtI0zFZ!`ZYbnXp1)ra+uY;%7RP=Ln=(-Aa`iw@+AIKm~=a|4N2FxVa^hNW&H45 zL(Ib#$>2E;L~Ep+8^vQ}MJ%E?G~b=cU`gA@wP@9^O)Ie7jn5bmxuA#vL?4gx!wP=R z%**5$o`GJB`A^&=QTG~mO0E8y>Li#cL>3!@IA;S0?TiD$i>A0L=)Gg7Ot!-d zN7#~;J{N@G?-v_e7GQfP)BdJZiZHltj=r)tB!!_Ah7f|6jS_mNYLfJhRYYqxV}Qk( zAT%#6#TLp4r5~1`kbY>}(%-&ebP1DG!*qdbr<{vf6$HrcOqc)?GN1*6nIW1$Zl;t9SmIr5#hr%TKCrB^AP9fvF{c(?TIg zxTz|O)2>&%Lphoz9%iS|@(m@RmI&`Sa~Hv3oqHO&x}h4DriZ$!}&9A8E366B(RoV*o4h$nLD%G5@$Q zO5PeB^KEBVwHFKo!WMCShmzQ*1b&#!GE_v%0{g__AXh3|2x+kLsM<2z3_D|aNl7Hw z89P2O={*Ud@&wKq5sDefkpaUZ!Ir?};b0-fOEW*Yd2dDFG>dx2EzDSOM5z~$L4}QG z`Qco;u|gHnmzGlZ8IU}ihe2FrQV`zv7zGp{mn%)VRAObQD6Kc8 z&KxGhYYSev_b@1p_O2BDxB*9G9ll*2o^MntYShIGSs`JXP3C=&^P54vD$#D%++_IL zYkhjIbLeNTV}I)WEaoT^K=oDvZW87`(Xo)5W1c-j?>V$dC~J)xmosCz+d~?>4p)v$ zo0a|$%lp5u3Xr>gVI&c(Vob$CCZlw}Xhje=0!zY~iX5J$8*>ED?5K+j_(X}vCQDXXY@Ts1r?#&QUt5(#CsT=1=kzp+ka+@~ z?DEQGBPm-J+wrc8IOb>7U>2VW406AkM3a;lmX({njDb5xa`X7@FK>qa#17|#gXS|0 zXfb!qXCz^}11W9RK<)e)(!`b;vyQ9ReSbH*l)aog?b)E)GDigOdY<6(WVEXFiBN@yjZpo}P_J5SnZ%-jNt* zD!h&p(;{T-PM3L9?fO>Q1folAv~UJitCKuLE!-MYjC&VP^e+FwU#+@?w+GLiUnw>i z&-C8GX*{4kEMHzLZcdU_u@Xy>-jfwVl6>NqNvf{}`fFNuO%QF3n&KLgA(LfnxGN-i zF?N)$$MQEuzpU=mtU=Yczp-B;&bZL(_*G}gOD;m}Xa{5}GQ;vbZY>I9?Ded%tWy_X zgiRLw2^5Bp3$<;VKu8wqsNRjj2LE@?km_H+Q z%m(A6*vPEQ0h_>{MzOO(p0y?1NhnN4+?~VW@sC}QYV7%4@wsJ_m`o|#Ef2CCR-ZP- z3Q%1Hm3mD6mSM`i4||80q-sOkLBt$@nxSA^SxMCZ6F;s`B#X~<>FCRZ?k$Z^F07sB43T-`#444;{&-H!P)<@P!=T zgjG;+^Yq}2hpNs@&P~7xCI?e}A*I(QA_ilsg2^3nQ6`7L+U`7nr>@FKSAjGuj|7_C z;bez3s=~9&9=GQ2L75LA`)wzrJ%}0YfCGB~^OwvknAg0yC05;{reb;l3*rB84~8qfBuGy-?Iw2MMA_++gpIyMq;BPk z+8OVeQfo)DK3F0Vn$uhgPLUx9Va!J!F@@&>ub6zUn?Lusb_VF9|7>_>3NJXsf?(n! zRJ#=;xoxwQMCBHs`cMNT4iPk+nu>*HnB@i%#@WIKl5FD+!0K#OqD{SVJ$^QHEx_lH zPvJ?k9)@olm~#Z-|hP8*^2D1?z zt(5psh&LmR+gX_*EB2*}rh{|BLJA3;*78@7bHjeo;kcL)#Z4E+fQmvxI`2@AM6`@R z#(kouwS4&VrX^oJXGzg_J)ADal$Ch$MmbUEy3lSi+IaJZe6qTk-KgV_2lp2LYzufK z%3jj6)5JRbX#T_yGU8s~!AhX**4S~S2v^iMM^4tB`ouig(BjllQ99&+~r zsF8uGNZB#%hsN@Yz>Dl=lcHioK40wU0>Y*hTw*^db@}R9m`!kWsJx?ZDTAuxub3L4 z1#kp^Y*#s=x1QO}iJG0fkA8iP-@d{t1>S^#e!=c?$z85}^_RLg;g|=rOs#nGcUpit z1x%I*N&U>@seS-XOP?B|9*T$SnQR|3gwK>Ai5OB4(Ib`IB^L^7w%{f8UVcgRa>q)* zhO0$4HsV6cC4;aYU!bx!(rm1r|C}HX-|xN{46bG{iBbA* zs3r5t@5*q4!f2L>&^V4A4e}i-93F_gB55H(s0S*9te(Z2WjZhfopldvm`=Pkb^||l z$s94!HR_A3>3?kwT0!Y#k@u}vJfQw}<7)QI^zj_KW`E@77x(b9-=n^IH$@oVJ5~LY zS+h4fBV`Pu!irf+5)A<@iC7h%@$5p{NGO-!{{OM}uFG*9NuK9t>M4>fD+3^ci3=~1 zAcLtuf-IqjwBZ1!2_OMv6F_1z0g)&{w0(ztjQzBq_uKB9?33*8@9q&N&dHOw zQ0lIpv8nDVBF{N-^YC!@@GG2D(B7rO0#`x9z~*sJ-R%&yDbHiGrG~pkc3Vi~VAgco z$zP$jv-@Xcv@U1%hl9gG`r83J@Be(d`1_yvuG>G4$MM{5M$i;tecYbngTx4QbsCKQ zVN!P=j%Jr0;BZd8oD?6U4zyhVu=3id0A^%Jx(w5~q&tnba+n-O?Q3ar5^w$ez?0Cy zi3#<|jik3pfG1c7$y<23vVfp78ZW%O(0yhh`HGD7*Fq_3`7vCUzijvL?D!}kX~ha; zpLlMBifN@G%I!Sv|9QN(U+r3KO0U=Z^M?=J0lu_5JN{RF*Jvk<>+VFHXX^XkX}i7l zMC+y-oj&OZ?6tj5(u1ZMcbDc75jm3RDZNt5Jtf=2h^6=gcDT|ZCt#JvuhyM98*;J! zGyjFv0PK9W>~#8uyd^`sbRB&woNdR<@n7s8DxJ1%-irbz5ME6M-6WRj*bQ9Ms24?k z1pb>FCAalQBolm~gxhY@@%l?m@1n{ZO~=tB6Q2Xj-}9Jrvja+*#zBmFa;*wRsy&CiByIlDCg$N;VPqIk78<*~(pVko1{rB3<=$ znw+RS5`cV3G_y+|1+3r!bkm-pOp3vg1N7p69M{o7J>PY5sf-e#9)OSQGBQ;%cp^{< z!J~Q0y9qBIeXh$ndonODaj|~~VZH~->fUr#cpC7plKZ>cC(A7sFtz#`dXx{Uqu~-k zGjZr&hFin8R@M8e#Pa>bBzfT`2PL)4xPS8l(-Pb`T(k8qVxqYBl=cb!J@Pc(7p%waKhsHtC2=^8LKoNaFds0T~S%a2IS-z=1DWnVEPXYhq+1MOR4lI9Py26Pg-xa@oC>t9sI$eFsXMKj1Vg{?d2W% z)&Giw**!Bk7vGFz{=HEo3_5NI7j!O;XJul_rzPu)vqqj{m`v=mN%?I40dpPgm7n}D zltjNJKG8gB#k{6F9xaw?>~ucWe6i?Yy%yGIZ;KJr4M)$X z1k0%25yIiiO~3y@xFyiJxaixxmP!>?M4jtpQD;RBwzo~>^BUC%XQLq(0pD)fs?5{D zzcYHy7m;BnYlj%p^(gXXkUSLb90m>u^t|hn4T#lGaa4YZ(11d{T?eSW*Kp3S1MRF1 zS7`0vIp0K?RnSw{cYU4>QjSGrcGnHtlzSvd!fBYR%>lX~v{ZxLImBpLhd-ekHA&a< zk)f%ZL{}+jBIiz34O>e6q!f~p$i==1QEx3(LojJ~=M5)xr z7l>4kro|EEWOl8ZstABaqjz#f$Z`%i<^Z~4c>*!Rb_xEOQc5&2p`GqE!sZhcSRRmr z`WWO2#Z)3aIyumVl3KLVlB`#0g1R-D2<`SOPWxoA8DDF}wtKoKERxrz#}Snp%Bz}H zEm91d7kvO0%203J|{TW04BW3znO_t@i zv9MC{`hv>#1c{g;LUjHe;JCRI-wawuxc~!+p6Mw|ILRWu73?G#Tq(1F`W*<_ALgCn zSq`-w$+^!!F3Zel57!~%b$TsR#<3fXbb@iO^4_!z{QgQ;Dm{v{csKxH;eiXy&$%s* z2^Z_PNvqmLIa7S5T+@-JU8-tArI9rasi+ti(SUizAa?=?V}l#BBB7p?DY=e^VNrY4 zv#UBUkTS%$a1PEQ=oWb%Jtw2HW=iRjG*I?A!BS|f2-K2)7-}jCKMZd59)-Inxl*Wb zUwR=s3dIRvcY9HdGam~-OYP^3Ss;kCbs2wQ{6z0?%r-aRL0^UmH$k8s2 zYMNd9oZi3R8-gdg^r-xsG_?|_vhj6c0TJ1wnX(a^&3*k}yuK;7C=rL2F{DHbaWLbA zgTR5sbOe2tghkG-7fHhMoL!g=ajT9^LZzBarQ6$@oC$Xl2377{4@|t{fzT8gSwLd{ zvQAB>!DYkjoubhLsRK3GTCAiN#3vdj;mh!{+v!v(gqj;DZEuu1PZyEw*AqJ?oT=G3 zTBg-<>l6YuzqHNLX)@_C>D7y~DToL~B{>&_N2CIO4pj`xI?VB9rNrdhN+ZirI_RIs zkPBw?#3JrnE>p8E3bICzf;yRWDI~Ca-{hX#G&};sTVPn$M0^Ef*^}o0H54lDZt1-F z*Bb7%a-Ri8R~*SrXW)Y6-f>E7Z%qPk@7o(7?rUO>z%y2?#v5D!T&H81xXb z7M>dQLjY~HOrB7M?18K)m!)j&;HkGPbeR<_RCwQ1m2?TF#G?!!Ys*^AJxYy&gXAl> zsUV>$1yt}6t(xoZ$v zN8E*4j)C=J$&jLS%l9K90V2`foK5iU`V%~wW>X#&JOI{{%ihc034wF62zJ~dq((>* zQZX!d|J~%OB)-kgD|O1cQgY@>#)`bK6th~CL&+qJ6Dmg9-AWfRN6wZmg7|z3SVPk)t5$QLB-u!*AiqRV@V*^P!%c=Qag@Q@H1g@1ro0XR^@^kovSJ{DoAsnc zdylJuKq}D-jwD^aD1nDF&sF+-9eI5+;d20VqKo47q)UJ<>le>)l1%- zoi#vw*Y(!=z6=p;SL#;GF3Fa+x~l~fN^SpW$^B7|l)Ax1tunD~ihBz865>Oov*?wt zUS=mK)?b(k{8mOx+H-dGmB?7~65M$8*Vh|QbKGD4Fo=Hb+j!;x<$5HJst!{kS$(Xa zJu3Yri6f7*{pRPlPk&n5eD?m$TgH25Cp7m|%2xSKR!mpDrrTTUdbSv5-oo?T*cP+6 z{(g3-gc~Dr+i^kp<2HKnk<6-!1g-g$khg*7c$=gvnx~zgb~XQIGiK*}iBnC9Jg*v? z{_04RB^Sy!qXE{o3-_OUN<0Td#`f(}fm~F*qxG9Z@%G}u=NMpP9sTQ*!2yX?btkzd zMcN^V_!Q@1F5zZB&5OLj<#lQCJF=yjVYvYr3nF}wGg@qFlwG3y8VN0`>+2Rr0lmC^ z)j7HPGP{-TvTpD-Z%(86q;P|OaY5SNb`4%icJq?#D@QIh0?9%qlIMY^+7L4}^_(3< zU05Uv>Qni+;c2yheqth~yZX3b14kq+H*ltrF{1cJe7@J2nc3WWyYcETGc(yAP<-M1 zq<6eCI5;1kkKtl!=A4yTiv(w@^Y*q=@k_MDM?+-_H=#E!aET|p<5J7>SQEVsatt^L zM4b23fg2m0vVm7nj~9r`I|OgY_uVTLNEXG#?SzG@HgEx`vyXttJpYCxc?sK<%}Kyr z|EDwC|FnD5ll~K7K_=u{S~blqcb>!vbM6g@);lw>E-X01Vk+@btp|y^ltMVf{Zyri z^S2>Bd7=n>D{V7@V)`?o$5iAI;4vp?3*Gy0VZpHspv-svO{uqz22=rf|2`Z;qk-4z z9pOj){{4j8z2i}}fOH|!)jiFOO@t;WpRl}^ix=i@ZA5}ei)>Ra+X{Z*rvmJ2xviN9lQkk6ZN`y_&YV7gALFwTDfD$TBnKRvST0$F zO%ud9XqwDl2j)s^1|7um6#PiGFRmmJIl^^$FC1E-DYiel7AakbXn@bEbXaq%4Yx%< zm@MspNK*6%B3vjVT!|$OQKoT_Lrn*dm*k`%+G9V>Obs4Ms|WIvWHtPAgB}JQid+yR z&j{U)J2r5Tg|AiCaYN`d^bx!B5&HJj`NNLS0(&MZFnz zDxEt;2ne-tE;+fE~^`jt3KDD34TFf=dYVp zRKinZZKAUobXU7`9St#7a?C)4{*jU*RRa4>Ct0M- z@F~aKQsRu5V_pH5qg+t~^+q~PE;}Y!1Ku#{AXl8x&gI)GmrzhYQv;0Q>1N3^?SQCZ zI_pl(V`^{H=|IG^@v^N#q#g)E zmqE2^8a3{aG1gdZ9p_NG)%j6P`kf-`vJ6MIhF~AFV3J@LIkyZdHS{&nxj?=92Evk> zYqc(j>yY~}a;Ok(Y?lZAmz0bU-Pj33n16_r>~QD5ErdST%uo1v47+(RoNIoD6K2^hi;Pl*}-rGM0U z{`&1pYXBqF_e<>!#-T=h`uf$@+t)92Wh=)hdsx0j57nU7!{_+D{9YWhy&qF`rfG;w zu~2bmO(->2@zXo`3H-PPsP5JqPmC}Pa9K*pDD&(@x7od$U`uV3ZZy0-(%h_@-vi^xxz)jS?e3?e z=W=djq@ zLQA{6m?Y1a{gdP$M zu40mi3hg#4Gnd^a5TQ2pSx*nlsmOYzP?(_Ow>3&zgojYIMtHkLT%-L#@q@`1R*3#c zH`>w?gUla5K_CwOQfZG%fnLdtB!G}jzd48r8A%QiwP`b(!kr~KcVqMy9AnszuH2F? zkzhG<(aqiyrZZBxrX+z?BTTHm1ND~#ln*J`_#U`Kb|+50*(@$4J}~8*wyXm+-UUe?KjM&Jev%+=c+}K z?*(S&KlwBSg>hvb;{<nH|fn5m?ugD18k#GgEkooNl5JhWz&q>a>BXB zqN4$N@84^)+z=`slpc#aJ(Q6QgT=l!h}x*!cxjQuzhFnUfp(Y6&2YwKV#aHjTYju5 z