TMI-101, 102 & 103: Now better handles broken data (throws IIOException) and better detects bogus Adobe markers.

imageio/imageio-jpeg/src/main/java/com/twelvemonkeys/imageio/plugins/jpeg/JPEGImageReader.java

@@ -319,6 +319,19 @@ public class JPEGImageReader extends ImageReaderBase {
         ICC_Profile profile = getEmbeddedICCProfile(false);
         AdobeDCTSegment adobeDCT = getAdobeDCT();
         SOFSegment sof = getSOF();
+
+        if (adobeDCT != null && (adobeDCT.getTransform() == AdobeDCTSegment.YCC && sof.componentsInFrame() != 3 ||
+                adobeDCT.getTransform() == AdobeDCTSegment.YCCK && sof.componentsInFrame() != 4)) {
+            processWarningOccurred(String.format(
+                    "Invalid Adobe App14 marker. Indicates %s data, but SOF%d has %d color components. " +
+                            "Ignoring Adobe App14 marker.",
+                    adobeDCT.getTransform() == AdobeDCTSegment.YCCK ? "YCCK/CMYK" : "YCC/RGB",
+                    sof.marker & 0xf, sof.componentsInFrame()
+            ));
+
+            adobeDCT = null;
+        }
+
         JPEGColorSpace sourceCSType = getSourceCSType(getJFIF(), adobeDCT, sof);
 
         // We need to apply ICC profile unless the profile is sRGB/default gray (whatever that is)
@@ -335,7 +348,7 @@ public class JPEGImageReader extends ImageReaderBase {
             }
 
             // TODO: Possible to optimize slightly, to avoid readAsRaster for non-CMyK and other good types?
-            return readImageAsRasterAndReplaceColorProfile(imageIndex, param, sof, sourceCSType, adobeDCT, ensureDisplayProfile(profile));
+            return readImageAsRasterAndReplaceColorProfile(imageIndex, param, sof, sourceCSType, ensureDisplayProfile(profile));
         }
 
         if (DEBUG) {
@@ -345,7 +358,7 @@ public class JPEGImageReader extends ImageReaderBase {
         return delegate.read(imageIndex, param);
     }
 
-    private BufferedImage readImageAsRasterAndReplaceColorProfile(int imageIndex, ImageReadParam param, SOFSegment startOfFrame, JPEGColorSpace csType, AdobeDCTSegment adobeDCT, ICC_Profile profile) throws IOException {
+    private BufferedImage readImageAsRasterAndReplaceColorProfile(int imageIndex, ImageReadParam param, SOFSegment startOfFrame, JPEGColorSpace csType, ICC_Profile profile) throws IOException {
         int origWidth = getWidth(imageIndex);
         int origHeight = getHeight(imageIndex);
 
@@ -366,27 +379,16 @@ public class JPEGImageReader extends ImageReaderBase {
         else if (intendedCS != null) {
             // Handle inconsistencies
             if (startOfFrame.componentsInFrame() != intendedCS.getNumComponents()) {
-                if (startOfFrame.componentsInFrame() < 4 && (csType == JPEGColorSpace.CMYK || csType == JPEGColorSpace.YCCK)) {
-                    processWarningOccurred(String.format(
-                            "Invalid Adobe App14 marker. Indicates YCCK/CMYK data, but SOF%d has %d color components. " +
-                                    "Ignoring Adobe App14 marker, assuming YCbCr/RGB data.",
-                            startOfFrame.marker & 0xf, startOfFrame.componentsInFrame()
-                    ));
+                // If ICC profile number of components and startOfFrame does not match, ignore ICC profile
+                processWarningOccurred(String.format(
+                        "Embedded ICC color profile is incompatible with image data. " +
+                                "Profile indicates %d components, but SOF%d has %d color components. " +
+                                "Ignoring ICC profile, assuming source color space %s.",
+                        intendedCS.getNumComponents(), startOfFrame.marker & 0xf, startOfFrame.componentsInFrame(), csType
+                ));
 
-                    csType = JPEGColorSpace.YCbCr;
-                }
-                else {
-                    // If ICC profile number of components and startOfFrame does not match, ignore ICC profile
-                    processWarningOccurred(String.format(
-                            "Embedded ICC color profile is incompatible with image data. " +
-                                    "Profile indicates %d components, but SOF%d has %d color components. " +
-                                    "Ignoring ICC profile, assuming source color space %s.",
-                            intendedCS.getNumComponents(), startOfFrame.marker & 0xf, startOfFrame.componentsInFrame(), csType
-                    ));
-
-                    if (csType == JPEGColorSpace.CMYK && image.getColorModel().getColorSpace().getType() != ColorSpace.TYPE_CMYK) {
-                        convert = new ColorConvertOp(ColorSpaces.getColorSpace(ColorSpaces.CS_GENERIC_CMYK), image.getColorModel().getColorSpace(), null);
-                    }
+                if (csType == JPEGColorSpace.CMYK && image.getColorModel().getColorSpace().getType() != ColorSpace.TYPE_CMYK) {
+                    convert = new ColorConvertOp(ColorSpaces.getColorSpace(ColorSpaces.CS_GENERIC_CMYK), image.getColorModel().getColorSpace(), null);
                 }
             }
             // NOTE: Avoid using CCOp if same color space, as it's more compatible that way
@@ -510,6 +512,10 @@ public class JPEGImageReader extends ImageReaderBase {
     }
 
     static JPEGColorSpace getSourceCSType(JFIFSegment jfif, AdobeDCTSegment adobeDCT, final SOFSegment startOfFrame) throws IIOException {
+        if (startOfFrame == null) {
+            throw new IIOException("No SOF segment in stream");
+        }
+
         /*
         ADAPTED from http://download.oracle.com/javase/6/docs/api/javax/imageio/metadata/doc-files/jpeg_metadata.html:
 
@@ -554,9 +560,15 @@ public class JPEGImageReader extends ImageReaderBase {
             switch (adobeDCT.getTransform()) {
                 case AdobeDCTSegment.YCC:
                     // TODO: Verify that startOfFrame has 3 components, otherwise issue warning and ignore adobeDCT
+                    if (startOfFrame.components.length != 3) {
+                        break;
+                    }
                     return JPEGColorSpace.YCbCr;
                 case AdobeDCTSegment.YCCK:
                     // TODO: Verify that startOfFrame has 4 components, otherwise issue warning and ignore adobeDCT
+                    if (startOfFrame.components.length != 4) {
+                        break;
+                    }
                     return JPEGColorSpace.YCCK;
                 case AdobeDCTSegment.Unknown:
                     if (startOfFrame.components.length == 1) {
@@ -1052,7 +1064,19 @@ public class JPEGImageReader extends ImageReaderBase {
 
     @Override
     public IIOMetadata getImageMetadata(int imageIndex) throws IOException {
-        IIOMetadata imageMetadata = delegate.getImageMetadata(imageIndex);
+        // TMI-101: As we catch the IndexOutOfBoundsException below, we need to make sure that we don't catch the
+        // IndexOutOfBoundsException that should be thrown, if (imageIndex < 0 || imageIndex > numImages).
+        checkBounds(imageIndex);
+
+        IIOMetadata imageMetadata;
+
+        try {
+            imageMetadata = delegate.getImageMetadata(imageIndex);
+        }
+        catch (IndexOutOfBoundsException knownIssue) {
+            // TMI-101: com.sun.imageio.plugins.jpeg.JPEGBuffer doesn't do proper sanity check of input data.
+            throw new IIOException("Corrupt JPEG data: Bad segment offset/length", knownIssue);
+        }
 
         if (imageMetadata != null && Arrays.asList(imageMetadata.getMetadataFormatNames()).contains(JPEGImage10MetadataCleaner.JAVAX_IMAGEIO_JPEG_IMAGE_1_0)) {
             if (metadataCleaner == null) {
@@ -1369,9 +1393,16 @@ public class JPEGImageReader extends ImageReaderBase {
 //                int sub = 4;
 //                param.setSourceSubsampling(sub, sub, 0, 0);
 //            }
+                BufferedImage image = reader.getImageTypes(0).next().createBufferedImage(reader.getWidth(0), reader.getHeight(0));
+                param.setDestination(image);
 
 //                long start = System.currentTimeMillis();
-                BufferedImage image = reader.read(0, param);
+                try {
+                    image = reader.read(0, param);
+                }
+                catch (IOException e) {
+                    e.printStackTrace();
+                }
 //                System.err.println("Read time: " + (System.currentTimeMillis() - start) + " ms");
 //                System.err.println("image: " + image);
 
@@ -1380,8 +1411,6 @@ public class JPEGImageReader extends ImageReaderBase {
 
                 int maxW = 1280;
                 int maxH = 800;
-//                int maxW = 400;
-//                int maxH = 400;
                 if (image.getWidth() > maxW || image.getHeight() > maxH) {
 //                    start = System.currentTimeMillis();
                     float aspect = reader.getAspectRatio(0);

imageio/imageio-jpeg/src/test/java/com/twelvemonkeys/imageio/plugins/jpeg/JPEGImageReaderTest.java

@@ -94,6 +94,16 @@ public class JPEGImageReaderTest extends ImageReaderAbstractTestCase<JPEGImageRe
         // More test data in specific tests below
     }
 
+    protected List<TestData> getBrokenTestData() {
+        return Arrays.asList(
+                new TestData(getClassLoaderResource("/jpeg/broken-bogus-segment-length.jpg"), new Dimension(467, 612)),
+                new TestData(getClassLoaderResource("/jpeg/broken-adobe-marker-bad-length.jpg"), new Dimension(1800, 1200)),
+                new TestData(getClassLoaderResource("/jpeg/broken-invalid-adobe-ycc-gray.jpg"), new Dimension(11, 440))
+        );
+
+        // More test data in specific tests below
+    }
+
     @Override
     protected ImageReaderSpi createProvider() {
         return SPI;
@@ -396,7 +406,120 @@ public class JPEGImageReaderTest extends ImageReaderAbstractTestCase<JPEGImageRe
         assertEquals(384, image.getHeight());
 
         reader.dispose();
-   }
+    }
+
+    @Test
+    public void testBrokenRead() throws IOException {
+        JPEGImageReader reader = createReader();
+
+        try {
+            for (TestData broken : getBrokenTestData()) {
+                reader.setInput(ImageIO.createImageInputStream(broken.getInput()));
+
+                try {
+                    reader.read(0);
+                }
+                catch (IIOException expected) {
+                    assertNotNull(expected.getMessage());
+                }
+            }
+        }
+        finally {
+            reader.dispose();
+        }
+    }
+
+    @Test
+    public void testBrokenGetDimensions() throws IOException {
+        JPEGImageReader reader = createReader();
+
+        try {
+            for (TestData broken : getBrokenTestData()) {
+                reader.setInput(ImageIO.createImageInputStream(broken.getInput()));
+
+                Dimension exptectedSize = broken.getDimension(0);
+
+                try {
+                    assertEquals(exptectedSize.width, reader.getWidth(0));
+                    assertEquals(exptectedSize.height, reader.getHeight(0));
+                }
+                catch (IIOException expected) {
+                    assertNotNull(expected.getMessage());
+                }
+            }
+        }
+        finally {
+            reader.dispose();
+        }
+    }
+
+    @Test
+    public void testBrokenGetImageMetadata() throws IOException {
+        JPEGImageReader reader = createReader();
+
+        try {
+            for (TestData broken : getBrokenTestData()) {
+                reader.setInput(ImageIO.createImageInputStream(broken.getInput()));
+
+                try {
+                    reader.getImageMetadata(0);
+                }
+                catch (IIOException expected) {
+                    assertNotNull(expected.getMessage());
+                }
+            }
+        }
+        finally {
+            reader.dispose();
+        }
+    }
+
+    @Test(expected = IndexOutOfBoundsException.class)
+    public void testGetImageMetadataOutOfBounds() throws IOException {
+        JPEGImageReader reader = createReader();
+
+        try {
+            // Any sample should do here
+            reader.setInput(ImageIO.createImageInputStream(getClassLoaderResource("/jpeg/gray-sample.jpg")));
+            reader.getImageMetadata(-1);
+        }
+        finally {
+            reader.dispose();
+        }
+    }
+
+    @Test(expected = IIOException.class)
+    public void testBrokenBogusSegmentLengthReadWithDestination() throws IOException {
+        JPEGImageReader reader = createReader();
+
+        try {
+            reader.setInput(ImageIO.createImageInputStream(getClassLoaderResource("/jpeg/broken-bogus-segment-length.jpg")));
+
+            assertEquals(467, reader.getWidth(0));
+            assertEquals(612, reader.getHeight(0));
+
+            ImageTypeSpecifier type = reader.getImageTypes(0).next();
+            BufferedImage image = type.createBufferedImage(reader.getWidth(0), reader.getHeight(0));
+
+            ImageReadParam param = reader.getDefaultReadParam();
+            param.setDestination(image);
+
+            try {
+                reader.read(0, param);
+            }
+            catch (IOException e) {
+                // Even if we get an exception here, the image should contain 10-15% of the image
+                assertEquals(0xffffffff, image.getRGB(0, 0));   // white area
+                assertEquals(0xff0000ff, image.getRGB(67, 22)); // blue area
+                assertEquals(0xffff00ff, image.getRGB(83, 22)); // purple area
+
+                throw e;
+            }
+        }
+        finally {
+            reader.dispose();
+        }
+    }
 
     @Test
     public void testHasThumbnailNoIFD1() throws IOException {

imageio/imageio-jpeg/src/test/resources/jpeg/broken-adobe-marker-bad-length.jpg

@@ -0,0 +1,88 @@
+ÿØÿî Adobe d€   
ÿÛ „ 
+
+
+
+
+
+
+
+#"""#''''''''''
		
+			
+
+
+
+
+!! !!''''''''''ÿÀ 
&
å
" 

ÿÄ
¢   




        
 	
+
 




       
 	
+ 
s
 !1AQa"q<>2‘¡±B#ÁRÑá3bð$r‚ñ%C4S’¢²csÂ5D'“£³6TdtÃÒâ&ƒ	
+„”EF¤´VÓU(òãóÄÔäôeu…•¥µÅÕåõfv†–¦¶ÆÖæö7GWgw‡—§·Ç×ç÷8HXhxˆ˜¨¸ÈØèø)9IYiy‰™©¹ÉÙéù*:JZjzŠšªºÊÚêú 
m
 !1AQa"q<>‘2¡±ðÁÑá#BRbrñ3$4C‚’S%¢c²ÂsÒ5âDƒT“	
+&6E'dtU7ò£³Ã()Óã󄔤´ÄÔäôeu…•¥µÅÕåõFVfv†–¦¶ÆÖæöGWgw‡—§·Ç×ç÷8HXhxˆ˜¨¸ÈØèø9IYiy‰™©¹ÉÙéù*:JZjzŠšªºÊÚêúÿÚ 
  ? âµZoŒ,
ÄËeuß"ãp0DS=p¸‹¡ÅS5¸-Ôâ©!#ã;ïƒ âM1B¡϶,ˆ Ëà m˜’£aŠU8ñÅ ”)Àà–Û	Jb©ô"§lNiÂôÀ<C3B4>ÉEÛ‰ Å^­å™SYò}͈þòŠƒÀŠg!ÔU­o$‰¶*Äd¯È~jƒF½hn~(.ìpëÎþL†êÓ:AC çUþ9Ÿ8Œ°ÛøªQþ·ñE¤îØûžwo~ð<>Aé<41>OÈìßT½¼”‘$V=93n>ìâs™#s؃Lèzåàò¿–´Mûë±õû§Ëlƒè‘Œ±Ï`ú2—0C×õ*ÇÌ6Æh(d"¥?¦F´+Y|»ª½<C2AA>À?R»¬n@NÙò·<C3B2>ÞEi?êP\éÞc· <20>·lùË$%ŒŸT^ä%¿"ñÌ
+MX—ˆ¤nISÚ‡"ÐÎCvïÌmê¹"·º”øÓ쟻8*ËÂCpi”fá”s;ëÖÊ=bôï&êe%U'¸Î<C2B8>¯Bš†ƒê0©N‡ØŒâX¸ãv‚½ÅsºZ®hr»±Z<C2B1>ò̬‡ly<ÃXþ(¾pó^…˨ñÂdm·9=ó‹q6¤bIf  nIÃÝòòÎ(ÄÚ¼¥M*`ˆoöGÔs[C-Ž¢Üyk#ŒpDqÈs€÷’ò‘es1øâ£A¿oØ9Ý-4ï-ißZl²‘ûrÄì>æ^?†:ç̶P7{AÄuøB}¦bú¹Õ8y{RQ,¸±÷ Cú'•59ER&o’“‹§’õ‡Ùmä'Ùÿ î¶ÞdÒZÝdyDlFñž£èâ<7F>´õ~ž-OÕ‘âó_ÏH€N¯¿ ?KÂfò^³«ÛÈ£Ý
+žRÔä4X˜Ÿ`Nz=G¸<Vu¯ù_üJ˜1ÚMã=z¸ÆË8êsKû½L%îˆ?¥óœžMÕcZ´.>jGðÂË<C382>ú
+òŒšg§¤·¯C\<5C>k66«W¹<57><C2B9>mƒqïJ6™HˬÕa<C395>¥<19>ÎÇÚùá­']¸»(E ûJFuÙôÝ2¿©'±R?Ž—H±}š!óÊF<ÇÉ¢>ÐÆêX<C3AA>À¼ÑWlŽ™1¹òÕ«‚bøNË Ý[=@ä¾8Æ`òsôý­¥Í·
î–ÈX<C388>ôÁ¶ö<C2B6>ÍNh­<68>H´8e»›°`ØP:p#n˜
+{1H½&UÂëèZ•¥ tßlMÐ`‰Ã°$ņء¥ QAÀ…›\ƒ\R›Dâ¸-Z‹„ÑOA‹­çlUÒŽùGâÀ«*±ÅÕûb­ŸlgÃE,ô!à(µ!ã›ûb<C3BB>ʇ³;⨲¥p;€7Æúã<C3BA>04’žÇDß4’Ž;`5”“¾g”ôÅ*r=[;ã]¾,µ5Å\+\YV¸™W bª¼E3ezƒŽlU,å<>SˆãÔÓD¥1E ÏÃ/™ÅQÜÆؼrñßCœ¯µ1Tî;¥¦ç©A†¸-f¢ÓMRAËlŒ„o„KpF	Šèž¸ªlÒé€ï.	]±	.ˆÀ²Ì[SH¯PhAÎãùsxú§–/ìårì«ÈkÓo㜠žG;/äÙ?W¿ýôÙ“¦&²€	|AkŸ0~3×aú¾©4gj9ýy'üÌV6¾]¸ ˜šÁH>ÍGjá<07>[Žµqþ±É”¯ ó~<7E>qä½EÀ¼ˆ´‰\ïϼU?Í–JŽL¸ùqn>H¢{˜ÒA *Ù׿.õ§3F$zšŽùÆ5++Í*ö[ØÌSÂÅYXS¦I<«­Ki2p­AtÓ$KCîµÉQ|€æ_Kù‚Ô]iwüEVxD€ÿ ”½^y¦ÿ D»µ¹wàyNzËä—–<n£g<C2A3>Çiãá\ªiI/w<è»új*Hù.ù1,y=]Õ»V\Ñㄇ/ƒÉ<§åÍbæd’Y”ŠC²<43>›³·hñM¦@¿X<C2BF>3
ºŽŸyÈ›yÆÞÞ<C39E>ÚY•<59>>RBP âù½ÞàŽ°Pr
+³W¾bKU#*`êGiá‰2–c9ÈDˆ<44>r}tÚÔ91<39>n<EFBFBD>@[}üjáœkŠª<C5A0>œ÷YŽÖ玧bõW4š>áüi†Ú_šmÖÙ!»ä®€/?´
+;åFfRõ=/¹¯¾4ã”B ïŽRe–´ lº¶±¼¹·I=Èûò?wæÛdÚ/îßÄ ól
+ýôEkЩ
+ý0Xï6s×i¤x%!!æ.?sWžMŠgf¶¹1¡èŒ
+G· pµü…v(o¾–K-/à¾<C3A0>Ô<EFBFBD>ªÄˆÁøô8(Ói¤8 6—óNÌóI¿ÒÀk‘Tí*î1k?8\D1´rqÛâS_ÀŒ3ó&¢4 ïÉÈ5éÛ#údZm¥Á–âÜJðú2<<3C>W¿“­‘†óŽ,’<>!ÅÒúÝt–ßÎD<C38E>õˆ+âÈ<C388>þ¸8ëú=Ü|e`
ê’)þ„c ²Ò®¡Y"·‰‘†Ä «"^eÒZÎp¶ŽÈ®9 ðÞ…k†ä9¹sÉ«Å
)d†XKk"ùòåHýLiRV®¢¿Èv¯ÈÓ	™xô5?HÐo.¢Y.[‚PÝÏËn4-ã.$&ƒ¾è
ï$Û<>=>iñfŽ1óôúG¼Çq¤(qIB«Ãno$<24>û=ʸH‘CF8š<>4KA?Tx¯\zZBã÷,	³ÐýØ;õmÎÇðÅÄ‘HAVâã}<7D>LNQæìtÚíV›måÐîˆÐÃ
\À8>+<2B>ÿ ºœÐþÌž?<eÅ»õê<rè̤Òkñj"(ԺıۋE© ß
+ní)Ó%O Uy9'1<>4FãH)‡W;a\°š×B©#›œ¾íŠGN*­7Z`Øãf ¦-k”Ã(mÖ•CÅnÊS=8ÐŒxÓuªU:Ò§¶Îôc‡w´ ŒŽÜÈâ«›×7©^¸ƒŒ©ÅQ!…s;`R™FJ⪛W7*b<órÅU‹æ
+ˆ“˜6øª"¦™±>B™±T>^YCo,ªeUP66»ã+—\Uà”zázµ1t<31>ŒU6Åàxؾ.\P½ªN6A¶)É:ânàŒU
+½I Î÷ä
+=<»åK<C3A5>Zàq’t*•ðês‚¬¾ŒÉ ߉™èMâ/7yêñšMlœJ®Ûv;f^˜	yÊ"^QþÖ¹óã^÷…y›Q†­<ácÓ
+ »žÎâ;›g1ÍŒ»F
+ÖìeÓµ	­äÆ•Å4]çU¹H£B܈ 
¹')Ï)²‘؃ý‹,<2C>Ç<EFBFBD>ŠG`ŒÐÚþhhF̺rZ‚ŸX<C5B8>z·»:òŸ<C3B2>-tØ’óU@Î!‡úÿ Ó¼«åm•€k¶v½U|~xs¬Ú]]X¼6;JÔiU®ùV\¼|&¨<>½:Ìù'’f¨‚F;ú»¬w¢á½·XÓ<58>E‹e@´ ð˜5eG×9ãyg\U? ßˆqŠYkz–›p¶·àð_…ƒˆ÷ʸ·­÷ïpáÚ3<C39A>Q†X<E280A0> %ÒþÆ]}¢i·Õi¡^gö×fûÆDï|¡t²ÒÎ@ñÕÏ>{o’–Õ¬¡Œ<󪎴¨Àñë¶7s‹{w.ç 
+¦
æê1hò‘Æc“µ$oïHÉÓˆ	[Áë/‡ï¯ðÈF±eªéLÌ…¹'÷ˆGãòÎÇ4ñÚÂÓLx¢Š’r-5áóæÎeXÆæwܪøíãჄ>Ÿ
Š¸åþLŽ.?w½ç#WÖœ%¼,î>ÐQ†ƒË^a‚aq$/Åv
+¿ÈgO°Òìô¸6‘„Y©»€µ‹<C2B5>BÝ)ene$nà<6E>‡ý‰Ã_̘1™÷ÓñUôHt•¾²>´¨ÑBGÆoî;Qó¿Ââ4é˾FõÍgZ<67>©=»ÔšŽdÓ
+m‚<· Þët¾ÔX¥¸?
+<EFBFBD>‹|½°Ý  ä*Ë…Y¸81ÈÆò°fOÃ<4F>GéÚuÖ¬åÐñŽ¿ÏZ}8>ïË3Á©o/®Ë»''ýŽçÚîÃKT´Z!ðƾM¨ë·%<25>·>š
+ýðv<0C>!̧&-&pä&yÞ“¸?wÍ-²Õ®t²h~
+üHÝ+ƒ.|ánÀb‡’ý’ç‘,q4à›ˆÀ‘¾Ó§ÃËýa¸Â–Ñ,‹kO
+°Æ2«иøõ Àå˜<C3A5>p÷òLÎ/s2Á´f4ýØ }ç
+RâHLR¿*õ'­0–"ÎÞOZ*‡;ÿ -Ö5›<35>2P«eaU&¸ñN2ŽÜ<C5BD>~†U=FA<46>O9’FüR«ïOd]±	 †Eâè­;T½Ô<C2BD>hâƒbæ´Á"ßPIƒz¼’»îVU-äNÑò
+g±HÂs”z^ÿ bÛ<62>5€ñ>¦]Mwhô ŠdÇ_YÅrŸÜwÆ3è[´Ú®
”qÄ÷óJtíQ§
$Zö®E$±(*yFz£tþÌ*µŽÖÕèFþ'
+VDqU;a‘£`#>Aœxb`9Úù I£õ`ÿ d½ÁÂþH
+FøuÌÄüÐÐ÷ð#ß½‚;´,ƒ‹<C692>Êÿ L²/bîû?µ„„qçØòïc⸢¸*â3;SaEË]ÝÚ
+H”
+Ó<12>‚¶/#Óá8<1C>ZŒU7´<37>5…׎G-æEpÖ+¥¾)VšvWÛ¦ZÎ
+ï…×
+NÇB”®*¾òNDÓ	ec\$¢½pÌ	¨ÅP®)ˆ1Å]±¾*Ñ9Yy±V³W6lUºæÊx«uÚ™³fÅW‘\°<>òÀÌN*°ãN8åb«lqTÅ\1êq˜àqTLrÓ7˜“Š£R{æi
+02¿l¶lU¶rs·þI$‚ÊþvbPG@½·9ÃUYØ"Š“¶z3òëO/”}Gøf¼4½ þÜ¿	ŽI…
ó-9§ÕžV~
‚ê¾V¼ó7™nÖ4cɺ($ä£J²Ñ|¥(…¹KxÇ ]’£¢<C2A3>‘Gykap–0¥%›â4oÝ<6F>‰¦ËolèZhQÙÅ*Ê	9<>šg$Ìù_+î:l‡&k1Ê8¡.D\cå]þiU¿˜MýÊÛY[³ŽîO£ÄõÉ«*¨­
+~#×#¯y¥ù~<02>(õ[~ö˜ûœa¨ÜKgõËÅVUðNÄ× º|¤¹òW˜ëLgŽWä¯'ÏFO…½÷Â/0Yý~Ù-íT<ÈâŒiP:Ÿ
+ºÕÞ³}õKI=p	y«?”8·±[86`! <20>ïSVñoÄΘÎ0ÀÜLïrGH<47>Ò‘ÙùN£ê—nñ§Â¿S†¢çBÑ<42>…hãaÕSw?>­<>o7§šly¼rI,Gv™9qùPl3›¾¥©K0I¤rkÒ§ ˜é°í/1˜Ý™ž)ü¿k×õ¯0þ<30>S°+	ûE¾ÑÁ¾W»±HM¿Ù¹$–¯íxSä0ƒBòÕÍÕ’L÷A	ý‚9øQ‰ÞYÞi3ÖBj»£<C2BB>oÚ#껫¹×œ™ñæ©<><1D>­¨÷wy=IT¹û#r}°<>üÏ¥‡1ó$ŽÁzü°ºËÌÉqŠíCFGqÔý
+îÓB»`ËÊ:õ¥ãøäÀ'é¢äæ×Ø£ç	m+÷™×ú5äEf)2ªË_ÀŒjê6±F#µâ¨‚Šª:–FšÆÚŠÞ踔ãjF[V.@Šp²vŽQ.Xî¹ÇŸÎËw×{£)55댔‚´®i"U£òͽoc\
+#…ÜÐ
+ÉÊç3
0G×ÈwN¹Jɳv}å+¿ÔÛM”	#/}’0e•Ñ»ˆKLj=0ÖÓd¤Qš†ïþg
+R4‰B 
+ª( è2‚rß«“›ÃŽ8Ç‚²ÿ ¾<>>+û`;ë/ãÎ6SÈÔ`ºœ¬ïa¢”$%Dr!Nc·<63>b‰B¢ì Å3WÌ=\ŠîM<C3AE>ÉB^ÞIfUøòˆì}Ž>;ˆ/b"6ë۸ř#™
+°<0C>ÔaLº{Ù?¯lIJî;Œ˜£·"ߌc”xO¢c‘è}ê÷6Kéе[±Âد$µ“Ó~ž8p¤Ïbj{á6©°Ø®ã'âäéÏ8²ogäS%¸õAË0 Ž£"ÐjÍÀÛá…®ª$`ìš<1C>³Ã²3R¶.È6=pžO„Päš)ÒUàÛ©Œ Õàú¼„<C2BC>ðž™d%{;^ËÖqÄiòýq_ñ±èN—áéŽ,k\Bg©ß&íœ$>8¨¹jR¸ÉLa›£dž½ñ=;àF<C3A0>œacŠ¢šrO\M¤Ä9f®*¹š¸ÊæÊÅ]—•›vlÙ±VÆ8hÅR˜«\sb”ÍŠ¹‡†Q]±Í”tÅT÷Ë\q׸ªÑséŠôßf®*¢Â™YlwÊÅW
˜ŒªÓ1jâ­c…XÐu8ÚáÆ<C3A1>¦µíÊ’>pBÚóeŽ,rÉ3´E§~TÐYVêðIMiÜûì6³J­of´ê	Aöa„tQî|rIk|!Féwíe+ÎÀÈJñ Ÿ‘ÈÃ'¢¹Ù÷‘ŸhÏ. Ï!1‰ mÒ(íjé-õdx<64>Z%PÞÄi÷`[Ÿ2^ÊJ,<2C>
ØSí
á‘ýNîòk‚‘ÞÎK4ž;â–vâØ‘½Y;±þYÈH <20>C[ÓFL“yÌYDóó,‡JÒe½‘o/÷UåFÝžŸÃ$:²É.™<p hµãì:Ó!ߤîÂúk+*vPiƒm5Éb<C389>¢œ”©ß}þuÂ/i|ú¶`Ôá†9b1”|H‘)ó6BÆò[<1B>4[°Ú†¿Ã&vZå½Ü`òâß´§·Ó<C2B7>*Ôš˜àÄt9Î…^MZ}^\#¼O8— O¨[ eyañ
+Œ<EFBFBD>ëºf‡ysíšzs†
+ PšoÓÍ8<C38D>KÈÛbV×à3<C3A0>DñÂg¶Ãâ[²ësd‰<64>ˆ€Xç¿š¤jkc¬„ñ&ª1MGZ¶½€Å$F£ì½FÇÇ#W7ÐÛ¡f5§a‘-G]žæB‘±ô ïŒxˆØVÌ´˜µYááD<C3A1>Œv:^©©Ï¦_Ÿª¸hœ
+7ã[ù¶2 ž"§¹Sýqm3G³–Ú9î“Ô–AÈ«€=69´M)Å
+²<EFBFBD>‘#øà2<C3A0>"
+Ž­™3h ²âœåIœvºø­‹Ìzs<7A>ïŠû08ºëV,*.Sé48O,iïR…ãö£ñ]?”¤ÜÁp€`GêÂ&:NCâÕ]›3ýìñÿ X_Ü›\y<>NˆÞú‡ÁF]Hë2‹{`V>¦½~œ<>M êqÌ#x˜ò!U†êkî2c£i?¢à!˜4<CB9C>OP<4F>·È2¡½ñ›‘¨Á¢ÓbÅ“ÄÉ/§{ý“+khí£
+¿Iñ8ö;æ©Æ’ ©Êå0@ {Ý9²I&Éo6j~eŠÕÌ6ª%<25>lXý‘ò¦Ò®î/-„÷‘øiµF—"zLÐÄ3N<1—+æ~i57³»0Î*•ëìza²:J<>ÐòVèp&¥§¥ü$ÆUûü¶F´íNçOº6³Ê‹)ì}²T$6æ᧎£–²c¨÷ŽðÉdv²~G{v;ÿ ’pZºH¡<48>†SÜb$WnŽ:d<ê×zMÓĨ
+8ž”ÄG‹ÞƒI=H<>†Ù!Ðÿ ýlà*¨  }kÈAë„Ñy­\|iCíŽmx¿ÙS„B@¦:V9Ù‰‰R›<52>Ež‰º±ë‡Vj ¹ø°7éE'“­	´×Pž
+’<U³›Ÿ&¶xÄGð<47>ém~®E
+iÓß"^@@ûiú°KÞ¤¢ âuˆQÆÍßà $n\<RÉ	G!±8›õ°éÁ<C3A9>Š<EFBFBD>©€%}òI­Ø‚¿Y‡ìž£Ã"òÔeàØz½.¢9ñ	Ž|ˆî*LÄœms•\.C‰ÊÍ›vlÙ±WfÍ—LU¬ÙtÍLUÔÍLx.˜ªÊc†Ç1 b®å›\تö>˜&¹‰ËN¸ª²-zã¸S2WR*q27Á-@1oŠ¨2q¼i‚)<29>+Š¨•‹'Àâ«­ iåX׹Γ¢éñØÚ«RŒG\ŠyvÈ4ž»<C5BE>…r\÷aUcNBNÁç{g<²LiñŸL~¯z=%M6¡=ñej<p‰o¹Üè ©Á×Wž•³H›ÉO„e`<18>C¥žžBQ<42>}H†’êìÁOrO†êcŽ c¶äñí‘É稜FiØŠž˜¶–lþµë\|j›ªíÚ¹!Œ
+ÎîÓfCN\ד„Xˆä|“½2
+FíÅíôŒ‘Õ:ôv6÷X·´øGÄÝ_kËû½‡`:d}ÅÕÅ´ŠÜIëCJxá³rù#<1E>ê'âgÇ<08>¡¨w2³¨1µW?Éñ|<7C>é…Òj³'IË ]ݱøì6¦
2¹8DCvh“¹ºG]j—R­É+ôÄ–öiˆ/Ä}ÎøLÿ f½Ž6f
++ò¸¤!
@ß.«çÔg–ªÌhsXG÷($û òsì0âöŒT;ä«g.x£RÇ
+ŠÙžC}­(:Sô•¸L<7F>¹
+[©QIµ–[‹ Kõ'å•ðé’âDäeB"ÙÛ^(éÓ·ñFÛß…ÃS<C383>k<EFBFBD>ŠÖæéÀŒ…^ìÆŸÛƒ€uq’ 3Â;ÓÓ{l:È.’«­Qƒ)ðß
+¿@ÀÈD’·3ûKAýpžêÏVÒ˜É3Ä?m7Ûü¡Û" þE†=6§ƒj—N1@û‹+’T‰KÈh£©ÈΫ®´õµ´û'béÂ[Ífötôå|4òͬDµíÍ(¿ÝòññÉ‹;¹Ðìøéq<C3A9>F¢¦côÄr'¢#Kòà%n¯¾bù«nf1-QP(×Ôm<C394>¸	θ¬l¬6£〓v\Ù³d˜ÉœÝ@&9uæ9cå{v¯†!¢Fo¯Zæˆ.ÿ N_i}Õ[‡¢ýÊý“<C3BD>ì–=Z4q¿Ú9 El7sã›åå<rLQ÷uÝ3<C39D>Ò¡vðÕ4Ùï¦åU†Í‡"ò&;¾ü]5(TR‚¾;b,r
+'›O.<p¹y¤Z–e¨{–⣶­–Ÿ…	ñ	uÿ ´ ]sª"׉©ÇÔy³™Õêes‘QØ#®íìÝHT ûdfêµ—’¯c‹µõÄƉ_£*\H‡šš{Œ<>ÙÎÓcžS<>ƒÌj–÷Ì(á¤S™c¿lŒ«ðja<6A><61>ÝÓêt¢¸¢<Óˆä­û«þ"ú½“ZLŸ	ܘÛfPHï€<Áh&´,¢­ßGlc*.6‹UájDyFf¤:_BÁÎV8Š2²×£k6l¼U¬Ù³b®Ç<C2AE><C387>ª)8«@e¦,<10><>+Š¬t¦<
+ªb­VƒÍ\Q†$Ûb­W6VlUT!®*™{Ä⫆Ù|é‰3Ó¦$X×E
+˜
+ð:¾øº8lUqL±®,€bª…ŽØªŠÁ·LÆÚ½°XZz Hø <C3B8>“{ŵœj6-¹Åä•AÛsD‰òÿ Jìñ<C3AC>XtÊ^`ÇŽvyÊE¨ŸŒÏ/ŽÃ凷JJÀÈ› ùdb[ž"ƒ½Óžø˜Ût´RÌ9˜ù†]¨iºV …‹,rSgOâ2%=©±™ã²Ã¾'õ©Wì±ûð3ÎÎõcZáŒHÚíËÒi3b)œ?šz{‘py
+œÚŒŽž<C5BD>cĘVkÛ-d©ÉžŸ¨<>6ä«,µ8Ô5ë‰È
+2Ðü8¶<08>‡Þ3L@’qkrø·C±®	¾²ú­ 5¨}8´Œ‘„Æ3Î[„µ<E2809E>Å` .øÞ'§·†-çÕ/0ƒ*Ö^Ì:œÇ.+\kf'à#½8Šâ†¬i†vú€P(vÈÉ‘²ÖY|.Mf7¦kÿ 3@pÂ)Õº÷È<²B¿Ç&°àõürërödÉ<fKy¢i×õb<C3B5>$?¶›}ã"z<>½Õ„æÐÀ}‚+B0Ê
+{‡Ú4ÅŸY¶½dF‹›!ª1ê1ažœjôò©ÄåÆ#ü>b×èº8Š1uz;
+¤mÐ{œ1¸£-#j7ìÐÐaί!%A¦¾¥-~Ö<$›AÒê3ä9fw<‡@;‘·-­|Qˆäãâ
?ˆÂ)于B²rVî
+Aû
+NEjÖƒÛÝ­ž¤²qYPu?µ’¹‡+s§ŸL1áë(<28>ïÜÅc–sП£Þ‘P¯÷5ÂÛTE@G€Àë©\áø9|s˜â†(<28>æ¢æâ1ñòQ5Ä¡+@Näá£Ü	¢*ûÔnÀ¾Œ¤øck<63>%Â~‘<19>µ2M­”@F ·w=q/QÑ<51>Þ¸Y$ìýN&à§:[õH“#½”ç÷¦ž8èØ‚1Ó çÈåŽ.ŽÒÇ ÚöL­u„€NØv$[»w^¼”þApHv8wb<77> ¡« ]>®8Ǫ Æ@°{¨Ìs:‘Ðâ8yæ?Bè¸nÓ-ýÓåqC êÜÔË9†×S52éŽT'iWD•Æ,d`ˆÁb­²Pb.¤`–$
+ð4<EFBFBD>\UI‰Æ×1leqUäâg/(â­S6_lت ŒÕãÓ|Ucœes¡Š®Œâ@cÔŠ£âaMðTtꬄm‹,个:W
+6;â)1ä)ã<>ZRNhž²(÷ÅŒ¹s'<27>ü·ùÙ'ŽKvŒŸˆn1Ó
+Eú˜PìCœ©ÐbÆ'åÂoíR”îqX¤†¸‘ÉkŒl´œ
+/!¸&ª»õ>øœŒÒ
+Sn‰£Ëf¢¹ZQñít‹öp:YÜHi>¸¿è}C<>/Aéò8vY ú¤‘.K…sÄâ¾Ã IП<C390>J‘<4A>Šà‚}ø×rL
`45Åg`
5Ì<35>duË0?P*2-Âý[Þ§ËlL}ºxâ†7F"àƒ\-‘®<E28098>U<1A>1ˆÜ~˜>ÎT”pq¾k›4;¡ú0_BÕã<C395>3<EFBFBD> ¯52ðñ¨ÜøcGò“ÆÃÅC‚šÞ£le(Dðñú¡d”¹ð€Æ OL{ÄTヲŽ S` 
À˜ŠW4POцV–Ëm4’`|(7ûÎ õß1’Fíá‰kÉ“6":_#Õ‰ÀîÄš³Ë)6`Ol[cßH¡°(fÚ»Ó+ë2