v8-4.8版本的一处崩溃

测试js在最下面。

原因是ParseFunctionDeclaration里会创建一个

SloppyBlockFunctionStatement* delegate放到scope_->DeclarationScope()->sloppy_block_function_map()里。而这个delegate是zone堆上new出来的。

这个zone是Parser::ParseFunctionLiteral里的Zone temp_zone，临时zone，而且是栈上的zone。当然这里有个判断，如果use_temp_zone == true才是临时zone。

等这个堆栈返回到InsertSloppyBlockFunctionVarBindings的时候才用到delegate，但这个delegate所在的zone其实早就释放了，导致崩溃。

还没找到v8哪个版本修复的，也可能v8改动了其他功能，把这个崩溃掩盖了。

可能相关的patch：

https://chromium.googlesource.com/v8/v8.git/+/63b935428c29f60c35cf3a8234385c95251aea8a%5E%21/#F1

node.dll!v8::internal::Parser::InsertSloppyBlockFunctionVarBindings 行 5117C++ node.dll!v8::internal::Parser::ParseFunctionLiteral 行 4438C++ node.dll!v8::internal::Parser::ParseFunctionDeclaration 行 2247C++ node.dll!v8::internal::Parser::ParseStatementListItem 行 1416C++ node.dll!v8::internal::Parser::ParseStatementList 行 1291C++ node.dll!v8::internal::Parser::ParseEagerFunctionBody 行 4772C++ node.dll!v8::internal::Parser::ParseFunctionLiteral 行 4399C++ node.dll!v8::internal::Parser::ParseFunctionDeclaration 行 2247C++ node.dll!v8::internal::Parser::ParseStatementListItem 行 1416C++ node.dll!v8::internal::Parser::ParseStatementList 行 1291C++ node.dll!v8::internal::Parser::ParseEagerFunctionBody 行 4772C++ node.dll!v8::internal::Parser::ParseFunctionLiteral 行 4399C++ node.dll!v8::internal::ParserTraits::ParseFunctionLiteral 行 887C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseMemberExpression 行 3478C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseMemberWithNewPrefixesExpression 行 3443C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseLeftHandSideExpression 行 3278C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParsePostfixExpression 行 3248C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseUnaryExpression 行 3236C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseBinaryExpression 行 3128C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseConditionalExpression 行 3105C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseAssignmentExpression 行 2945C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseExpression 行 2466C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParsePrimaryExpression 行 2387C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseMemberExpression 行 3490C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseMemberWithNewPrefixesExpression 行 3443C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseLeftHandSideExpression 行 3278C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParsePostfixExpression 行 3248C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseUnaryExpression 行 3236C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseBinaryExpression 行 3128C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseConditionalExpression 行 3105C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseAssignmentExpression 行 2945C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseExpression 行 2466C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseExpression 行 2450C++ node.dll!v8::internal::Parser::ParseExpressionOrLabelledStatement 行 2706C++ node.dll!v8::internal::Parser::ParseSubStatement 行 1994C++ node.dll!v8::internal::Parser::ParseStatement 行 1876C++ node.dll!v8::internal::Parser::ParseStatementListItem 行 1439C++ node.dll!v8::internal::Parser::ParseStatementList 行 1291C++ node.dll!v8::internal::Parser::DoParseProgram 行 1065C++ node.dll!v8::internal::Parser::ParseProgram 行 979 C++ node.dll!v8::internal::Parser::Parse 行 6155 C++ node.dll!v8::internal::Parser::ParseStatic 行 6124 C++ node.dll!v8::internal::CompileToplevel 行 1228 C++ node.dll!v8::internal::Compiler::CompileScript 行 1481C++ node.dll!v8::ScriptCompiler::CompileUnboundInternal 行 1791C++ node.dll!v8::ScriptCompiler::Compile 行 1840 C++ node.dll!blink::`anonymous namespace'::compileWithoutOptions 行 114C++ node.dll!WTF::FunctionWrapper<v8::MaybeLocal<v8::Script> (__cdecl*)(enum blink::`anonymous namespace'::V8CompileHistogram::Cacheability,v8::Isolate *,v8::Local<v8::String>,v8::ScriptOrigin)>::operator() 行 62C++ node.dll!WTF::PartBoundFunctionImpl<1,WTF::FunctionWrapper<v8::MaybeLocal<v8::Script> (__cdecl*)(enum blink::`anonymous namespace'::V8CompileHistogram::Cacheability,v8::Isolate *,v8::Local<v8::String>,v8::ScriptOrigin)>,v8::MaybeLocal<v8::Script> __cdecl(enum blink::`anonymous namespace'::V8CompileHistogram::Cacheability,v8::Isolate *,v8::Local<v8::String>,v8::ScriptOrigin)>::operator() 行 178C++ node.dll!blink::V8ScriptRunner::compileScript 行 375C++ node.dll!blink::V8ScriptRunner::compileScript 行 333C++ node.dll!blink::ScriptController::executeScriptAndReturnValue 行 179C++ node.dll!blink::ScriptController::evaluateScriptInMainWorld 行 562C++ node.dll!blink::ScriptController::executeScriptInMainWorld 行 535C++ node.dll!blink::ScriptLoader::executeScript 行 401 C++ node.dll!blink::HTMLScriptRunner::executePendingScriptAndDispatchEvent 行 156C++ node.dll!blink::HTMLScriptRunner::executeParsingBlockingScript 行 125C++ node.dll!blink::HTMLScriptRunner::executeParsingBlockingScripts 行 234C++ node.dll!blink::HTMLScriptRunner::executeScriptsWaitingForLoad 行 244C++ node.dll!blink::HTMLDocumentParser::notifyScriptLoaded 行 1034C++ node.dll!blink::HTMLScriptRunner::notifyFinished 行 200C++ node.dll!blink::Resource::checkNotify 行 253 C++ node.dll!blink::Resource::finishOnePart 行 305 C++ node.dll!blink::Resource::finish 行 312 C++ node.dll!blink::ResourceLoader::didFinishLoading 行 492C++ node.dll!net::WebURLLoaderManager::handleDidFinishLoading 行 475C++ node.dll!net::WkeAsynTask::run 行 1466 C++ node.dll!content::WebTimerBase::fired 行 421 C++ node.dll!content::WebThreadImpl::schedulerTasks 行 436C++ node.dll!content::WebThreadImpl::fire 行 371 C++ node.dll!content::sharedTimerFiredFunction 行 91 C++ node.dll!content::TimerWindowWndProc 行 68 C++ user32.dll!_InternalCallWinProc@20 未知 user32.dll!_UserCallWinProcCheckWow@32 未知 user32.dll!_DispatchMessageWorker@8 未知 user32.dll!_DispatchMessageW@4 未知 wkexe.exe!RunMessageLoop 行 502 C++ wkexe.exe!RunApplication 行 526 C++ wkexe.exe!wWinMain 行 112 C++ wkexe.exe!invoke_main 行 128 C++ wkexe.exe!__scrt_common_main_seh 行 264 C++ wkexe.exe!__scrt_common_main 行 309 C++ wkexe.exe!wWinMainCRTStartup 行 17 C++ kernel32.dll!@BaseThreadInitThunk@12 未知 ntdll.dll!___RtlUserThreadStart@8 未知 ntdll.dll!__RtlUserThreadStart@8 未知

node.dll!v8::internal::Parser::ParseFunctionDeclaration 行 2277C++ node.dll!v8::internal::Parser::ParseStatementListItem 行 1416C++ node.dll!v8::internal::Parser::ParseScopedBlock 行 2397C++ node.dll!v8::internal::Parser::ParseBlock 行 2353 C++ node.dll!v8::internal::Parser::ParseSubStatement 行 1906C++ node.dll!v8::internal::Parser::ParseIfStatement 行 2773C++ node.dll!v8::internal::Parser::ParseSubStatement 行 1919C++ node.dll!v8::internal::Parser::ParseStatement 行 1876C++ node.dll!v8::internal::Parser::ParseStatementListItem 行 1439C++ node.dll!v8::internal::Parser::ParseStatementList 行 1291C++ node.dll!v8::internal::Parser::ParseEagerFunctionBody 行 4772C++ node.dll!v8::internal::Parser::ParseFunctionLiteral 行 4399C++ node.dll!v8::internal::Parser::ParseFunctionDeclaration 行 2247C++ node.dll!v8::internal::Parser::ParseStatementListItem 行 1416C++ node.dll!v8::internal::Parser::ParseStatementList 行 1291C++ node.dll!v8::internal::Parser::ParseEagerFunctionBody 行 4772C++ node.dll!v8::internal::Parser::ParseFunctionLiteral 行 4399C++ node.dll!v8::internal::Parser::ParseFunctionDeclaration 行 2247C++ node.dll!v8::internal::Parser::ParseStatementListItem 行 1416C++ node.dll!v8::internal::Parser::ParseStatementList 行 1291C++ node.dll!v8::internal::Parser::ParseEagerFunctionBody 行 4772C++ node.dll!v8::internal::Parser::ParseFunctionLiteral 行 4399C++ node.dll!v8::internal::ParserTraits::ParseFunctionLiteral 行 887C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseMemberExpression 行 3478C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseMemberWithNewPrefixesExpression 行 3443C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseLeftHandSideExpression 行 3278C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParsePostfixExpression 行 3248C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseUnaryExpression 行 3236C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseBinaryExpression 行 3128C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseConditionalExpression 行 3105C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseAssignmentExpression 行 2945C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseExpression 行 2466C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParsePrimaryExpression 行 2387C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseMemberExpression 行 3490C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseMemberWithNewPrefixesExpression 行 3443C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseLeftHandSideExpression 行 3278C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParsePostfixExpression 行 3248C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseUnaryExpression 行 3236C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseBinaryExpression 行 3128C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseConditionalExpression 行 3105C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseAssignmentExpression 行 2945C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseExpression 行 2466C++ node.dll!v8::internal::ParserBase<v8::internal::ParserTraits>::ParseExpression 行 2450C++ node.dll!v8::internal::Parser::ParseExpressionOrLabelledStatement 行 2706C++ node.dll!v8::internal::Parser::ParseSubStatement 行 1994C++ node.dll!v8::internal::Parser::ParseStatement 行 1876C++ node.dll!v8::internal::Parser::ParseStatementListItem 行 1439C++ node.dll!v8::internal::Parser::ParseStatementList 行 1291C++ node.dll!v8::internal::Parser::DoParseProgram 行 1065C++ node.dll!v8::internal::Parser::ParseProgram 行 979 C++ node.dll!v8::internal::Parser::Parse 行 6155 C++ node.dll!v8::internal::Parser::ParseStatic 行 6124 C++ node.dll!v8::internal::CompileToplevel 行 1228 C++ node.dll!v8::internal::Compiler::CompileScript 行 1481C++ node.dll!v8::ScriptCompiler::CompileUnboundInternal 行 1791C++ node.dll!v8::ScriptCompiler::Compile 行 1840 C++ node.dll!blink::`anonymous namespace'::compileWithoutOptions 行 114C++ node.dll!WTF::FunctionWrapper<v8::MaybeLocal<v8::Script> (__cdecl*)(enum blink::`anonymous namespace'::V8CompileHistogram::Cacheability,v8::Isolate *,v8::Local<v8::String>,v8::ScriptOrigin)>::operator() 行 62C++ node.dll!WTF::PartBoundFunctionImpl<1,WTF::FunctionWrapper<v8::MaybeLocal<v8::Script> (__cdecl*)(enum blink::`anonymous namespace'::V8CompileHistogram::Cacheability,v8::Isolate *,v8::Local<v8::String>,v8::ScriptOrigin)>,v8::MaybeLocal<v8::Script> __cdecl(enum blink::`anonymous namespace'::V8CompileHistogram::Cacheability,v8::Isolate *,v8::Local<v8::String>,v8::ScriptOrigin)>::operator() 行 178C++ node.dll!blink::V8ScriptRunner::compileScript 行 375C++ node.dll!blink::V8ScriptRunner::compileScript 行 333C++ node.dll!blink::ScriptController::executeScriptAndReturnValue 行 179C++ node.dll!blink::ScriptController::evaluateScriptInMainWorld 行 562C++ node.dll!blink::ScriptController::executeScriptInMainWorld 行 535C++ node.dll!blink::ScriptLoader::executeScript 行 401 C++ node.dll!blink::HTMLScriptRunner::executePendingScriptAndDispatchEvent 行 156C++ node.dll!blink::HTMLScriptRunner::executeParsingBlockingScript 行 125C++ node.dll!blink::HTMLScriptRunner::executeParsingBlockingScripts 行 234C++ node.dll!blink::HTMLScriptRunner::executeScriptsWaitingForLoad 行 244C++ node.dll!blink::HTMLDocumentParser::notifyScriptLoaded 行 1034C++ node.dll!blink::HTMLScriptRunner::notifyFinished 行 200C++ node.dll!blink::Resource::checkNotify 行 253 C++ node.dll!blink::Resource::finishOnePart 行 305 C++ node.dll!blink::Resource::finish 行 312 C++ node.dll!blink::ResourceLoader::didFinishLoading 行 492C++ node.dll!net::WebURLLoaderManager::handleDidFinishLoading 行 475C++ node.dll!net::WkeAsynTask::run 行 1466 C++ node.dll!content::WebTimerBase::fired 行 421 C++ node.dll!content::WebThreadImpl::schedulerTasks 行 436C++ node.dll!content::WebThreadImpl::fire 行 371 C++ node.dll!content::sharedTimerFiredFunction 行 91 C++ node.dll!content::TimerWindowWndProc 行 68 C++ user32.dll!_InternalCallWinProc@20 未知 user32.dll!_UserCallWinProcCheckWow@32 未知 user32.dll!_DispatchMessageWorker@8 未知 user32.dll!_DispatchMessageW@4 未知 wkexe.exe!RunMessageLoop 行 502 C++ wkexe.exe!RunApplication 行 526 C++ wkexe.exe!wWinMain 行 112 C++ wkexe.exe!invoke_main 行 128 C++ wkexe.exe!__scrt_common_main_seh 行 264 C++ wkexe.exe!__scrt_common_main 行 309 C++ wkexe.exe!wWinMainCRTStartup 行 17 C++ kernel32.dll!@BaseThreadInitThunk@12 未知 ntdll.dll!___RtlUserThreadStart@8 未知 ntdll.dll!__RtlUserThreadStart@8 未知

unsigned AnsiChar crash_js_data[1034] = {

0x28, 0x66, 0x75, 0x6E, 0x63, 0x74, 0x69, 0x6F, 0x6E, 0x28, 0x29, 0x20, 0x7B, 0x0D, 0x0A, 0x20,  0x20, 0x20, 0x20, 0x66, 0x75, 0x6E, 0x63, 0x74, 0x69, 0x6F, 0x6E, 0x20, 0x6B, 0x28, 0x29, 0x20,  0x7B, 0x0D, 0x0A, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x66, 0x75, 0x6E,  0x63, 0x74, 0x69, 0x6F, 0x6E, 0x20, 0x52, 0x28, 0x29, 0x20, 0x7B, 0x0D, 0x0A, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x69, 0x66, 0x20, 0x28, 0x56, 0x29, 0x20, 0x7B, 0x0D,  0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x69, 0x66, 0x20, 0x28, 0x31, 0x29, 0x20, 0x7B, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x73,  0x65, 0x74, 0x54, 0x69, 0x6D, 0x65, 0x6F, 0x75, 0x74, 0x28, 0x66, 0x75, 0x6E, 0x63, 0x74, 0x69,  0x6F, 0x6E, 0x28, 0x29, 0x20, 0x7B, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x56, 0x2E, 0x72, 0x65, 0x66, 0x72, 0x65, 0x73, 0x68, 0x28, 0x29, 0x0D, 0x0A, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x7D, 0x2C, 0x20, 0x30, 0x29, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7D, 0x20, 0x65, 0x6C, 0x73, 0x65, 0x20, 0x7B,  0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x76, 0x61, 0x72, 0x20, 0x57, 0x20, 0x3D, 0x20, 0x64, 0x6F,  0x63, 0x75, 0x6D, 0x65, 0x6E, 0x74, 0x2E, 0x63, 0x72, 0x65, 0x61, 0x74, 0x65, 0x45, 0x6C, 0x65,  0x6D, 0x65, 0x6E, 0x74, 0x28, 0x22, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x22, 0x29, 0x3B, 0x0D,  0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x57, 0x2E, 0x73, 0x72, 0x63, 0x20, 0x3D, 0x20, 0x22, 0x2F, 0x2F,  0x69, 0x63, 0x6F, 0x6E, 0x2E, 0x7A, 0x6F, 0x6C, 0x2D, 0x69, 0x6D, 0x67, 0x2E, 0x63, 0x6F, 0x6D,  0x2E, 0x63, 0x6E, 0x2F, 0x77, 0x61, 0x70, 0x2F, 0x6A, 0x73, 0x2F, 0x7A, 0x2E, 0x66, 0x6C, 0x69,  0x70, 0x76, 0x69, 0x65, 0x77, 0x2E, 0x6A, 0x73, 0x22, 0x3B, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7D, 0x0D, 0x0A, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x56,  0x2E, 0x74, 0x69, 0x6D, 0x65, 0x72, 0x20, 0x3D, 0x20, 0x73, 0x65, 0x74, 0x49, 0x6E, 0x74, 0x65,  0x72, 0x76, 0x61, 0x6C, 0x28, 0x58, 0x2C, 0x20, 0x33, 0x30, 0x30, 0x30, 0x29, 0x3B, 0x0D, 0x0A,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x56, 0x2E, 0x61, 0x64, 0x64, 0x45, 0x76, 0x65, 0x6E, 0x74, 0x4C, 0x69, 0x73, 0x74, 0x65, 0x6E,  0x65, 0x72, 0x28, 0x45, 0x76, 0x65, 0x6E, 0x74, 0x2E, 0x54, 0x6F, 0x75, 0x63, 0x68, 0x2E, 0x64,  0x6F, 0x77, 0x6E, 0x2C, 0x20, 0x66, 0x75, 0x6E, 0x63, 0x74, 0x69, 0x6F, 0x6E, 0x28, 0x29, 0x20,  0x7B, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x56, 0x2E, 0x74, 0x69, 0x6D, 0x65, 0x72, 0x20, 0x26,  0x26, 0x20, 0x63, 0x6C, 0x65, 0x61, 0x72, 0x49, 0x6E, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6C, 0x28,  0x56, 0x2E, 0x74, 0x69, 0x6D, 0x65, 0x72, 0x29, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7D, 0x29, 0x3B, 0x0D, 0x0A, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x56,  0x2E, 0x61, 0x64, 0x64, 0x45, 0x76, 0x65, 0x6E, 0x74, 0x4C, 0x69, 0x73, 0x74, 0x65, 0x6E, 0x65,  0x72, 0x28, 0x45, 0x76, 0x65, 0x6E, 0x74, 0x2E, 0x54, 0x6F, 0x75, 0x63, 0x68, 0x2E, 0x75, 0x70,  0x2C, 0x20, 0x66, 0x75, 0x6E, 0x63, 0x74, 0x69, 0x6F, 0x6E, 0x28, 0x29, 0x20, 0x7B, 0x0D, 0x0A,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x56, 0x2E, 0x74, 0x69, 0x6D, 0x65, 0x72, 0x20, 0x3D, 0x20, 0x73, 0x65,  0x74, 0x49, 0x6E, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6C, 0x28, 0x58, 0x2C, 0x20, 0x33, 0x30, 0x30,  0x30, 0x29, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x7D, 0x29, 0x3B, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x56, 0x2E, 0x61, 0x64, 0x64, 0x45, 0x76,  0x65, 0x6E, 0x74, 0x4C, 0x69, 0x73, 0x74, 0x65, 0x6E, 0x65, 0x72, 0x28, 0x45, 0x76, 0x65, 0x6E,  0x74, 0x2E, 0x54, 0x6F, 0x75, 0x63, 0x68, 0x2E, 0x63, 0x61, 0x6E, 0x63, 0x65, 0x6C, 0x2C, 0x20,  0x66, 0x75, 0x6E, 0x63, 0x74, 0x69, 0x6F, 0x6E, 0x28, 0x29, 0x20, 0x7B, 0x0D, 0x0A, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x56, 0x2E, 0x74, 0x69, 0x6D, 0x65, 0x72, 0x20, 0x3D, 0x20, 0x73, 0x65, 0x74, 0x49,  0x6E, 0x74, 0x65, 0x72, 0x76, 0x61, 0x6C, 0x28, 0x58, 0x2C, 0x20, 0x33, 0x30, 0x30, 0x30, 0x29,  0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x7D, 0x29, 0x3B, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x66, 0x75, 0x6E, 0x63, 0x74, 0x69, 0x6F, 0x6E, 0x20,  0x58, 0x28, 0x29, 0x20, 0x7B, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x2F, 0x2F, 0x56, 0x20, 0x26,  0x26, 0x20, 0x56, 0x2E, 0x6E, 0x65, 0x78, 0x74, 0x20, 0x26, 0x26, 0x20, 0x56, 0x2E, 0x6E, 0x65,  0x78, 0x74, 0x28, 0x31, 0x30, 0x30, 0x30, 0x29, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7D, 0x0D, 0x0A, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x7D, 0x0D, 0x0A, 0x20, 0x20, 0x20, 0x20,  0x20, 0x20, 0x20, 0x20, 0x7D, 0x0D, 0x0A, 0x0D, 0x0A, 0x0D, 0x0A, 0x0D, 0x0A, 0x20, 0x20, 0x20,  0x20, 0x0D, 0x0A, 0x7D, 0x29, 0x28, 0x29, 0x3B, 0x0D, 0x0A };