From 6cd061986bbb301454ecae5ced633dc70e7db16b Mon Sep 17 00:00:00 2001 From: moralok Date: Mon, 20 Nov 2023 14:56:41 +0000 Subject: [PATCH] deploy: 88aca0259c606cb25444c94150b2c6c42ca10471 --- .../index.html | 12 +- .../how-to-install-clash-on-ubuntu/index.html | 12 +- .../index.html | 12 +- .../index.html | 12 +- .../index.html | 12 +- .../index.html | 16 +- .../index.html | 12 +- .../index.html | 12 +- .../index.html | 12 +- .../tmux-frequently-used-commands/index.html | 12 +- .../index.html | 12 +- .../10/how-does-Spring-load-beans/index.html | 12 +- .../testing-and-analysis-of-jvm-gc/index.html | 12 +- .../index.html | 12 +- .../index.html | 12 +- .../07/garbage-collection-in-Java/index.html | 12 +- .../index.html | 12 +- .../index.html | 12 +- .../index.html | 12 +- .../19/JDK-dynamic-proxy-and-CGLib/index.html | 23 +- .../Pasted image 20231120223506.png | Bin 0 -> 156729 bytes .../Snipaste_2023-11-20_15-51-48.png | Bin 0 -> 14766 bytes .../Snipaste_2023-11-20_15-56-15.png | Bin 0 -> 15176 bytes .../Snipaste_2023-11-20_20-50-04.png | Bin 0 -> 45959 bytes .../Snipaste_2023-11-20_21-33-34.png | Bin 0 -> 84895 bytes .../index.html | 498 +++++++++ archives/2020/08/index.html | 10 +- archives/2020/index.html | 10 +- archives/2023/05/index.html | 10 +- archives/2023/06/index.html | 10 +- archives/2023/07/index.html | 10 +- archives/2023/08/index.html | 10 +- archives/2023/11/index.html | 30 +- archives/2023/index.html | 50 +- archives/2023/page/2/index.html | 30 +- archives/index.html | 52 +- archives/page/2/index.html | 55 +- archives/page/3/index.html | 292 ++++++ css/main.css | 2 +- index.html | 544 +++++----- leancloud_counter_security_urls.json | 2 +- page/2/index.html | 855 ++++++--------- page/3/index.html | 792 ++++++++++++++ search.xml | 977 ++++++++++-------- tags/aop/index.html | 290 ++++++ tags/bytecode/index.html | 8 +- tags/cglib/index.html | 8 +- tags/clash/index.html | 8 +- tags/class-loader/index.html | 8 +- tags/distributed-lock/index.html | 8 +- tags/docker/index.html | 8 +- tags/grafana/index.html | 8 +- tags/index.html | 14 +- tags/java/index.html | 28 +- tags/jdk-proxy/index.html | 8 +- tags/jvm/index.html | 8 +- tags/minikube/index.html | 8 +- tags/openvpn/index.html | 8 +- tags/prometheus/index.html | 8 +- tags/proxy/index.html | 8 +- tags/redis/index.html | 8 +- tags/spring/index.html | 28 +- tags/ssh/index.html | 8 +- tags/tmux/index.html | 8 +- tags/ubuntu/index.html | 8 +- 65 files changed, 3388 insertions(+), 1602 deletions(-) create mode 100644 2023/11/19/how-does-Spring-AOP-create-proxy-beans/Pasted image 20231120223506.png create mode 100644 2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_15-51-48.png create mode 100644 2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_15-56-15.png create mode 100644 2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_20-50-04.png create mode 100644 2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_21-33-34.png create mode 100644 2023/11/19/how-does-Spring-AOP-create-proxy-beans/index.html create mode 100644 archives/page/3/index.html create mode 100644 page/3/index.html create mode 100644 tags/aop/index.html diff --git a/2020/08/19/docker-frequently-used-commands/index.html b/2020/08/19/docker-frequently-used-commands/index.html index 99cec07f..4b85cf2f 100644 --- a/2020/08/19/docker-frequently-used-commands/index.html +++ b/2020/08/19/docker-frequently-used-commands/index.html @@ -27,7 +27,7 @@ - + @@ -156,13 +156,13 @@ @@ -237,7 +237,7 @@

- + @@ -768,13 +768,13 @@

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/2023/05/27/how-to-install-clash-on-ubuntu/index.html b/2023/05/27/how-to-install-clash-on-ubuntu/index.html index 170647b6..2781659a 100644 --- a/2023/05/27/how-to-install-clash-on-ubuntu/index.html +++ b/2023/05/27/how-to-install-clash-on-ubuntu/index.html @@ -27,7 +27,7 @@ - + @@ -157,13 +157,13 @@ @@ -238,7 +238,7 @@

- + @@ -365,13 +365,13 @@

Hexo & NexT.Muse 强力驱动 diff --git a/2023/06/07/how-to-setup-OpenVPN-connect-client-on-iOS-and-macOS/index.html b/2023/06/07/how-to-setup-OpenVPN-connect-client-on-iOS-and-macOS/index.html index 4708b1fb..642aafa5 100644 --- a/2023/06/07/how-to-setup-OpenVPN-connect-client-on-iOS-and-macOS/index.html +++ b/2023/06/07/how-to-setup-OpenVPN-connect-client-on-iOS-and-macOS/index.html @@ -27,7 +27,7 @@ - + @@ -156,13 +156,13 @@ @@ -237,7 +237,7 @@

- + @@ -346,13 +346,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/06/07/how-to-setup-OpenVPN-server-on-windows-10/index.html b/2023/06/07/how-to-setup-OpenVPN-server-on-windows-10/index.html index 35212097..347f22a0 100644 --- a/2023/06/07/how-to-setup-OpenVPN-server-on-windows-10/index.html +++ b/2023/06/07/how-to-setup-OpenVPN-server-on-windows-10/index.html @@ -27,7 +27,7 @@ - + @@ -156,13 +156,13 @@ @@ -237,7 +237,7 @@

- + @@ -351,13 +351,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/06/07/how-to-use-OpenVPN-to-access-home-network/index.html b/2023/06/07/how-to-use-OpenVPN-to-access-home-network/index.html index 761f9372..a94a9130 100644 --- a/2023/06/07/how-to-use-OpenVPN-to-access-home-network/index.html +++ b/2023/06/07/how-to-use-OpenVPN-to-access-home-network/index.html @@ -27,7 +27,7 @@ - + @@ -156,13 +156,13 @@ @@ -237,7 +237,7 @@

- + @@ -378,13 +378,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/06/13/how-to-configure-proxy-for-terminal-docker-and-container/index.html b/2023/06/13/how-to-configure-proxy-for-terminal-docker-and-container/index.html index 6ff38ad4..89cfef05 100644 --- a/2023/06/13/how-to-configure-proxy-for-terminal-docker-and-container/index.html +++ b/2023/06/13/how-to-configure-proxy-for-terminal-docker-and-container/index.html @@ -27,10 +27,10 @@ - + - + @@ -157,13 +157,13 @@ @@ -238,7 +238,7 @@

- + @@ -325,8 +325,8 @@

@@ -372,13 +372,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/06/23/how-to-install-Minikube-on-Ubuntu-20-04/index.html b/2023/06/23/how-to-install-Minikube-on-Ubuntu-20-04/index.html index 9dff814d..e6ee5017 100644 --- a/2023/06/23/how-to-install-Minikube-on-Ubuntu-20-04/index.html +++ b/2023/06/23/how-to-install-Minikube-on-Ubuntu-20-04/index.html @@ -27,7 +27,7 @@ - + @@ -156,13 +156,13 @@ @@ -237,7 +237,7 @@

- + @@ -380,13 +380,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/06/24/Ubuntu-server-20-04-not-all-disk-space-was-allocated-after-installation/index.html b/2023/06/24/Ubuntu-server-20-04-not-all-disk-space-was-allocated-after-installation/index.html index f90821f0..53690108 100644 --- a/2023/06/24/Ubuntu-server-20-04-not-all-disk-space-was-allocated-after-installation/index.html +++ b/2023/06/24/Ubuntu-server-20-04-not-all-disk-space-was-allocated-after-installation/index.html @@ -27,7 +27,7 @@ - + @@ -156,13 +156,13 @@ @@ -237,7 +237,7 @@

- + @@ -341,13 +341,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/06/28/how-to-use-ssh-to-connect-github-and-server/index.html b/2023/06/28/how-to-use-ssh-to-connect-github-and-server/index.html index ea32844a..c4f773b9 100644 --- a/2023/06/28/how-to-use-ssh-to-connect-github-and-server/index.html +++ b/2023/06/28/how-to-use-ssh-to-connect-github-and-server/index.html @@ -27,7 +27,7 @@ - + @@ -156,13 +156,13 @@ @@ -237,7 +237,7 @@

- + @@ -364,13 +364,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/06/29/tmux-frequently-used-commands/index.html b/2023/06/29/tmux-frequently-used-commands/index.html index 5d08cda9..a6c7377c 100644 --- a/2023/06/29/tmux-frequently-used-commands/index.html +++ b/2023/06/29/tmux-frequently-used-commands/index.html @@ -27,7 +27,7 @@ - + @@ -156,13 +156,13 @@ @@ -237,7 +237,7 @@

- + @@ -384,13 +384,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/07/13/Java-class-loader-source-code-analysis/index.html b/2023/07/13/Java-class-loader-source-code-analysis/index.html index cf73c771..9d1e94d1 100644 --- a/2023/07/13/Java-class-loader-source-code-analysis/index.html +++ b/2023/07/13/Java-class-loader-source-code-analysis/index.html @@ -27,7 +27,7 @@ - + @@ -157,13 +157,13 @@ @@ -238,7 +238,7 @@

- + @@ -518,13 +518,13 @@

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/2023/08/10/how-does-Spring-load-beans/index.html b/2023/08/10/how-does-Spring-load-beans/index.html index b22c1d0b..58005c2d 100644 --- a/2023/08/10/how-does-Spring-load-beans/index.html +++ b/2023/08/10/how-does-Spring-load-beans/index.html @@ -28,7 +28,7 @@ - + @@ -159,13 +159,13 @@ @@ -240,7 +240,7 @@

- + @@ -394,13 +394,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/11/01/testing-and-analysis-of-jvm-gc/index.html b/2023/11/01/testing-and-analysis-of-jvm-gc/index.html index e6837c36..c52dbde3 100644 --- a/2023/11/01/testing-and-analysis-of-jvm-gc/index.html +++ b/2023/11/01/testing-and-analysis-of-jvm-gc/index.html @@ -27,7 +27,7 @@ - + @@ -157,13 +157,13 @@ @@ -238,7 +238,7 @@

- + @@ -394,13 +394,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/11/03/testing-and-analysis-of-StringTable/index.html b/2023/11/03/testing-and-analysis-of-StringTable/index.html index 7ea4fa52..f25f19f2 100644 --- a/2023/11/03/testing-and-analysis-of-StringTable/index.html +++ b/2023/11/03/testing-and-analysis-of-StringTable/index.html @@ -31,7 +31,7 @@ - + @@ -162,13 +162,13 @@ @@ -243,7 +243,7 @@

- + @@ -437,13 +437,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/11/04/testing-and-analysis-of-jvm-memory-area/index.html b/2023/11/04/testing-and-analysis-of-jvm-memory-area/index.html index 3b134968..526855f1 100644 --- a/2023/11/04/testing-and-analysis-of-jvm-memory-area/index.html +++ b/2023/11/04/testing-and-analysis-of-jvm-memory-area/index.html @@ -32,7 +32,7 @@ - + @@ -163,13 +163,13 @@ @@ -244,7 +244,7 @@

- + @@ -471,13 +471,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/11/07/garbage-collection-in-Java/index.html b/2023/11/07/garbage-collection-in-Java/index.html index f3ea3831..bf14205e 100644 --- a/2023/11/07/garbage-collection-in-Java/index.html +++ b/2023/11/07/garbage-collection-in-Java/index.html @@ -34,7 +34,7 @@ - + @@ -165,13 +165,13 @@ @@ -246,7 +246,7 @@

- + @@ -673,13 +673,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/11/09/some-examples-of-Java-bytecode-instruction-analysis/index.html b/2023/11/09/some-examples-of-Java-bytecode-instruction-analysis/index.html index 48df2a8d..e2ff519e 100644 --- a/2023/11/09/some-examples-of-Java-bytecode-instruction-analysis/index.html +++ b/2023/11/09/some-examples-of-Java-bytecode-instruction-analysis/index.html @@ -28,7 +28,7 @@ - + @@ -159,13 +159,13 @@ @@ -240,7 +240,7 @@

- + @@ -402,13 +402,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/11/13/simple-implementation-of-distributed-lock-based-on-Redis/index.html b/2023/11/13/simple-implementation-of-distributed-lock-based-on-Redis/index.html index 00a119b6..2c65e8ff 100644 --- a/2023/11/13/simple-implementation-of-distributed-lock-based-on-Redis/index.html +++ b/2023/11/13/simple-implementation-of-distributed-lock-based-on-Redis/index.html @@ -33,7 +33,7 @@ - + @@ -164,13 +164,13 @@ @@ -245,7 +245,7 @@

- + @@ -393,13 +393,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/2023/11/18/setup-monitoring-using-grafana-and-prometheus/index.html b/2023/11/18/setup-monitoring-using-grafana-and-prometheus/index.html index e7841ffa..070fe6bf 100644 --- a/2023/11/18/setup-monitoring-using-grafana-and-prometheus/index.html +++ b/2023/11/18/setup-monitoring-using-grafana-and-prometheus/index.html @@ -31,7 +31,7 @@ - + @@ -162,13 +162,13 @@ @@ -243,7 +243,7 @@

- + @@ -406,13 +406,13 @@

Hexo & NexT.Muse 强力驱动 diff --git a/2023/11/19/JDK-dynamic-proxy-and-CGLib/index.html b/2023/11/19/JDK-dynamic-proxy-and-CGLib/index.html index 2b2af02a..376561df 100644 --- a/2023/11/19/JDK-dynamic-proxy-and-CGLib/index.html +++ b/2023/11/19/JDK-dynamic-proxy-and-CGLib/index.html @@ -27,7 +27,7 @@ - + @@ -158,13 +158,13 @@ @@ -231,9 +231,15 @@

- - + + + @@ -359,6 +365,9 @@

+

@@ -390,13 +399,13 @@

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/2023/11/19/how-does-Spring-AOP-create-proxy-beans/Pasted image 20231120223506.png b/2023/11/19/how-does-Spring-AOP-create-proxy-beans/Pasted image 20231120223506.png new file mode 100644 index 0000000000000000000000000000000000000000..01f4c5aa86ce6ae432a375df7f7eb1eb44e3774c GIT binary patch literal 156729 zcmbTdWmua}&^L;^OYq_zthhsQEmk171S#%Nic68;?ykjy7kBsK4#nNAl*9jd-t&Gu zAI@HT<({3LnVn>Rv-j-ol?XLeIZQNCG#D5dOa*yq4Hy^<-FNa51^%70G?Ett0|WP< zrmQ9N-h8_mdAlBeJDq&GZ2XV-zx8(f?P~1*G_S_rZpQx;zMl9$oXd%~cY*&AhJ}S) zY}R?F|3~2ewQ&D`i2s=XSN-OHm{;QqP1^sX`=5Pyc=&hY|JDB;`fBq3G;jVJ3my(` zzUj;VHS(Y0&423iP1^6D|6AY17Ms5O*Y!>`|Hu4aPyVO(Kga%83>Fq5yf@!&$KF-mIse=BKfT&WNQm#u_wufondpOxf}99(XJw|D8^~&_OWqms zjE``&FjiZcC_9-?++D0YSg!dq>YJVHXJMj#G@qiQDf@ifb+O$l$j4Tc6|AN#!Nfq- z4o!J`d)uBrc=zhv^5f+A%HiMn!{6`Yrnr{0XsOx7bOqI0o}Qk{%E~=FJctX6TUl9Q zVqk=ahjVan1O*1o3@#QG6?JuWdAWHrGqLvf_b*RuE-x=v6+z4Ms$O1Rx*GcRwGCbE zJ@|Ne;v&+hsoq*nYJqz$aLn*Asz zeodZ>ugk*1LSAUFjp>)i;m z`1r#?V@hgDW>#i>eSKr)ub1<|s;a7iU!z7^$`e}?7efP(Ag74r@Vznru%PJS;o;e> zn}Uo|bp^@BfrhB$f`jhPp1hp*S;$DpDJv^0C@8qz@3|WrnI0$!3JroLCDfKicTRPL zIXh*QG?cfL?Y93~Zh&sKHrIC5)b~M222=lw4IeiRRZSSwb4stVmHj8OzSEdD>}G{1?v(PFha*{)jMkW4gcuhICe zvmOku*zjz+RrILLndoLD>=aOBLSzF>LfPFDs{Yyh-O^nz_MK?n7)u@OOmfya*vaNz zZ;lP6e8z@>GjUgtmelfEIqeDj4{ZT?ujNGLaQ~72|BA`|mc;*P4!I-L-1n?u4UQ^J6trS!DiN4cuv58L%~w)YyVt~9L=60@!hiuUizKfjFS;VyoN7f7(^^WcTAB9+q;#; zjnVxpq2a@?Z8NH$u`rNEAI0S5d@eY(|@EMT2!EQlRW;_leSFpKZPN!3A+?u=s>DcFCOt_N=>d=23#7Wf0$Crlj`lS7FJN6_t z;~3-khG={nuIXUPF{*w{`DK&8Nsd8sO>~WY;*9kY^j2 z*TLR&+FEwVAn8dlp_m%Z-&P#n$3n;2QSdwWqYRC!q%&7Zzg~;Ha=5!#taSeYs5(&E zQlfH9zJ=9no?AWy%X!qE&PME&(uEq2A5Nwd%z<06@rh>qO37HNVE6#CC{e(G;vFdM zp;9S{6p`P@_$@^GH{F6f{w-<5sf8IL865(Jah~3hZtHAB`JJoIvwBE>6@8s-25HNr z*^ps{i;!s4KO|Q2GN))^tbS!AA#77EQIIQ{jyfhQ-7M;AnTH&dr<~|oqK=<7!jc2- zIyBG;b(iHD({%cVGgh1DTD~_^R)Xj5FeF;pd~`9$8}OZVCy8&#R=5B1dTBL^P_pn- zRx7HvJozS{q;S8}%2L}Ha>r~G%rpBvT0hBVx6xHm;+e5_NF9|dHqvU6hY3%3yzMsn z;sNPw8|T7bj4>2KZs2dlwQT_MGu;l5gYB4(&>#&sImg_JSSS?*M^%F?7L_qXL0|%8;FbF=XoV#JD9EbF*3P?CaRU;&_}gy_Kcia zHIOJAwPdNkgiOv_|3CVX#*W`|=FA80ONEd4(lAPiiHq?dVH&tZq=DjKPMaP%dg&70ojm zVh<3fAfczgLB2q$pr`2{3cgUx?|(IQRzhd?nqHzikBuVj8|2`>@*5_4&h43kSJfSr z@nXHz(dV5c{5!@1d~_(R(VUm(!A>FYpxo6}LeB*3;l$aooq!1p;Tr+BKrf^4swLXM z))*YIZ~vDlXCat;;q6WqmU> zx6=5xFkuc8E!vVZeS~>SO)LVxU(%220zG1F`NlO#QZ(i9YNSOfnpqvH&`>cF#&d*j ziAZ*A(fuyC&;OMjjBeXvTlJ%i8=1ZIJN?YacMYDBFvlEVHSkSce~sE_^WmC_nkREB zu&lPM7`|z>1Ui*1Xc4?sPCf7sD&o66V63tbe}kav)z$p5n?T76mx?c5I;RxVaGS$~ z=vsBU&B0y)tS0n9k+|I?&uyYErnR&!e4VqT^#fB(OfGoK0T->&IcC7nf<8+5sIkBG zB87!sXz3*38=K0?N74uZe-95El9V{ag{om^s0}F_+~JK;TYFhAfGl#7$m0&w;^g|g z#HSLKj8RgQZdj3d?~C6LI_zqzTzDOL8R?vv#5eY3>jmZ z1*@;2d)3(s_;ZxDQg!?U&i(i4NwYkEtQ>lrTBjI)k2^A|VRTL9hR!sF3!Z-sigC&- zB{ALqeB06ep_4C<@{-rk?x+Ql&8%3ce=ygRW*rm*lo937i_GM3%^`suwps~futqnw ztwRJlO?37e*){Ug2AoSy$Cx2Z{~I&j)`Pvic~jO5XNH%Vn*Fg;B+wfl*Bak1hlj2v zZP*vj`<7>vlcY^3t6Z9oEW^z^6yIcdv?{35i6G8;2%Bi2JdMT8iicfLqITQjPW)Fw z*`17tm$hSI4fg|vpF~+}bUFG!PFHt)^+07qOT829Iyw)$Uoj>}p_h@+YIivA!?*j3 zr`8*8D_+F*Nb_^VeLpP`mni2$yIjAb8WQzy)jQ$dC8I=4h54wz3P~t(>YS}zGrH;@ z1nAd_cO+t!G7`1-k&kw}x5Oh*6R#&T&qnD|Tj+fhP zFTb~u#FwyYQpb&s@AWU z;6E3YH}Jir4=|L*-XOWyw10!=m|9m@TWd@4y7NBh%Q-V{_qvLz4eg8kwx{=to8P%| zpIOf@iifxMkZDw59Q$vS{)bojBkJ!zxhh4l?g-~BFnBLGcWR#2Sz=8tky8Mj?&*S` z!;#_ZDSwmu?N86xtt`i$u1`7QNfIDmMt2eNR>?}4zs8ed&Px~0+F@u&;Fzf>NCCLw zoOtO9=u|{I$No8X^qg99kUxBO-Z-^GPMLT9-5Yds+pys9!1j2S-{-5a#7 z@sz(vpr;`qmmp##8MjGT8T<+ACDi5vMPp=JN@(T?kz>iEu10wxkroq54k|NeTAWHu8gHLO$s%0?MwD<|0kPo_Bs?y!~llXbcVmo!9k4HshWj8`BTh)`i zfAT0l{!6)A+nGn(vYlSayiMcrop<~w*dVYaq8pAJ!ZnTOpO}UJ? zjOYZ>e{^{0QriE!eF=mG!?JXrbM)vUqPyQMjc3m*KT)f}KI7U~#*YG8sKJ>FtI<-g ztC=3K1SgpRG#X#9f6~ruS65C~qLSCQ(4ijGRCmO#npwk@)_aMXlgG z2N8B=4_1VFRm_rrg1LlbKX``glh{fpGp!()P0;`3&)CMUlz^1Gw)C`il6~1N*4EOm z-jlUqpKq=`M*0P7l$xWil|!4HOVgXwBQq8eLH%{>SQ1vLm^AcSO{8<;7utWd!Tk z<`vam zMTm@8RtOk%33Qpf%`ydx_l;~9fx?_T@xQ`e6lbK!c=Bcw{sl37xAJ*d@-pGb35U=}VLQ$-RHshvv zkdt%A=jZU$7A~T2FNHUxx^FL7vBShRUDcQo;fO~R>LQBS(k#=s=wQ%LiATr3G%Lb0$ zF1+BI;J548sprk8C#B{)r0TC3*+(DJWZ~MEeB4i52NzPvNTQuxyd*~n*MW1|NF?7N zUY>`%uk?DTq1b~4MH)ySmDtv&XL#7OPKnVy&P2Ptz_w$t0*@?tt!=GO?WJuNE0NBk ze`$SO8{7}Pjxz5^7kO0IC%@!X~!*awixaEEoC?4=3dd%Ky3&)qdBbo5T;3_X4g679hJ(0oV=+X*ER1p_6M6xZI zRB#PynB&)|U^l5`+zSx><99>}L6>_=I*0SnPrDl{TDM=hJW6g@^}Vs&7v_H12*(v^ zD?P5^+tgy?i<@3Ygp32g1pXOPXm@0dCf5O zFIN5GxC`X%n*M=uf1KXdMU0E4^Br==9h^K9*OI^Sd~a~Q^*Pvj668Kv+Uf3r=$_Q_pVP{x5^ zN%rriKp}9!7t=PjRm+=*cZv0m9iPQmc;qY)j8uNIuiC2W#*)UZWOjcm!dKv z#kjaUaDzYQgVXsnvDEGZK5dUXr)&R5vMo&+^mdSwFmwBrWw7p=T{VC@P(92CPyZTi zfpbg7GSb*+FUwGBp=cd6u#<5t5HzS#Z!@sk?vg<@O&F@t(8su&=DI(X%GCGrL-hpN zl9j3wY2;UgMV3D06hYmiR96jfa0KCO1eH=7z>t`5_L8P+G=*Uh?B>>FO9)G$33z&m zIsnz(R@=^gZNOVPv4NloU>z1z?N-WhDL;PW@9SLccirFwjeIwvj%nDryu>~;)FzMk zSQmxdBh}X>RQDNZIyKE#Ge9`TxAuGK#nvYw;RB0~cdI7|s8wZs&h!HM`sG`SqWXs0 zFaFd8o9xV7&%0mJ+a^4AZ*pE9YD-%fmbQFrQ3-j=VHZW@<5Z6);B6!A1WXVU zP##cZt{<8UGlT#Am@tSLPaDult_!gHEm#J08h)s*7heds@WE*R`dF~rACIwC3jB3k z;4$VM60Et$2`VUQ^!LR_^eA|8Nti_zb*qC!Xi`tA@A%?B(T;vnDu?};0bUhJu-hc4 zqe~T>|J&Gu)bPCMx`*&&s3ha<@rY-`%4)HV&je{lOqP*X^B`hDk0;StKpdq( zN6XMn`BvhLJOtKok-35As4G$%?mbCpvrK*td>sv1?jzy=2}58R2UO@9+RmaKf~5|c zz8Ua%lZOVs)sM~0V1^c(T|J(q`>lGFyA>%R`&QpWX1-g`!QiqRO`+eHDeC*m`xe>d z_Z~;?9tO0Y?#f3cy6H)yQL>`HW6s$p$NvzmPTEcrU^^UP`ZtrvXrbolnna zsUl=7dC+b>S6pF#qo!@%9NAGg#`ZuE*v>1slI1;9f37h=51M_CfJaL9wg?N@dG*Vp z!z^hKxWkDLMvmHl?I+`=ti)}3{|De6itW=o{5Ql2G{r%L%+I9p8a_NRIq{)hc? zf;;b?t*x35O6oNWm}o+6NY6xHWnS~J47m-A434IJ_pN@y(T21O4C5@-;{XU4zN zyQU;~Izft6!mPFQt~L2xplYB7UbD6sa`}F5lU0^Jp!GoE}IDTUsG7V^HPC|?oqgLr|rpu6NHT6?)zUVCOlv#NTcmt zCzU1^Q|2OLY~OC?vqDL$G*u! zf08B03MI&|v2#OmzDr^av>)A{NeEyvlc8w3PFt=~|LJo|_(y6PqYLt)n{Q0Qi(2o0 z2O7RTWhF4jx;;{^%7Ppgz^i57Z|tst(DL;!aYSTZOgitIr3h`>C0cUmR#yv6yajWR z-vn5ymZgVI3*gnD@A`z&2ey@(%qhuh&8%p;4k=bTLs4^0EG*pTlLRuT}AQr z8{c!rZ(hr=;3BP*B27|^s+}Aey*R;`fy-uBuPxhoK8tu+N~!lK9m=4x+j|e2u^mV- zst!5qCsGjZJxpM5k_@S$-oGIM6X{C~j%rwO7=852uLfk^-BWkuK8YbKQp#_)%7TMq zHsbt?*CTR~-Al2b8SyJE!-+%sU>wS!;g~;oX5!Ioq&^0=^8Jl9ya9OpUMQ~3{^M`2 z%VWFpy6nu!pbj9xY>~}R?V+|+ECBil_WW(*pp~C(4*ABfq^Aat<4cZr9S9_(w9>#r zGoWp)R|9PcCMV^MkjUdXHy%8UiW$8^>-{*e*G2K3EH?6aeAs%ie73#DY-s!{TVeQBv7vXu#&`19@qY3rjMX&z%&!z;J57+WkC7LN@Gzc zA$3Bn6LpC|lyf&3Xdeu{lup1vilJ=ZEBI-+UhNIv7Gwe{0V0TFNpS=dVu?-Syd0V+ ztJR??Bn_k~gDQJTVH_I%AmnykHZ`3hbr=uE^nmlg1qR?0^uU#W2l#|8|7mlVOJvDpe_|@5 zY8koxvH4oD7`{x6dE~Xf<~n&HLWxAyCZyJr&iz^S6VskU z_?aAMZIqIuI9{F`Mk{+;VO7)DG2% zJw3u{PhF1=hm!zu84lQC5<-dhr*WLuM2(RsDM~)3QG zSwpB}@)1P7d>6zv>TR#)g}+!&5D#^n5&SZ2M%B_LN!C9k4x)oEu3u0EeA@)~Jp03f z1K0i7!u^9sKH`#g<7D`KX^R_%Q%>pFJK3{Wd$TtmGwp0Uqw7V1%L^54A)*+AUTZ5c zj;>20fMM4#l?a)r`l)M}z32=QIO`GzqDgxH96bO1%2HzP>9yQ*BC(S!r+~SHS5N6t z8O6WiUu3-z&KVNXQp`CPI15M0YH2&zL(}=K?C{oS>>p}fWpG<1FO)cbqFLY4FHWeX zwbJ`I;$zB3kD9&@+sdR1f#vpiJoygX6o9TxcdS&rxX(pdGJf4KHX&p_ZnD#2E#U5o zeTBT4TroeL@@~61sU`Q9J2r^9KgB=SD;@qk_nv=5B5^W?xVdJDBSD5sb!MAL7oP#h zd1q@r5zOt_4WFcnP0vu)HVJ;z()J8&`Qk8ies`dUuqt7uKJ;JNPSY=4X-`O$r1#qN zWvQ7rZKMnr^s0^WDuqI&0sDSAzHTU;SQDLm1+Kn}4H*h)M%6=~9TdiuQmd1{6okH+ z<}h-$<<#q{MPr4LLWO&grZn&o1LhjylP*9^;CP*#^16LH6y_=)bXBfNp4f&gnSM<2 z)AGH+ZYeF%4EvTunWl6mbLP~^=s)R5hj!C}DN9RpZ%h_fz;!MZu&I$CxdI&ojFFNM z(~E%i+8&39e(Dft5y|?|rT&4O%h@iqXfxXT!T;4-q?&({A{To`XKOK;Lo@xu$>1bO zn}rB-G3(=-U?@Ss%fZF$d&2)lSVa3~F zM|2P7}Upz&nV?6cSaU`ulQVJNU{C41SYIISveB*^gt%#ZGMhH&IT z6c&j|9;mgHJ8D;4Ck+MTGn zQQuFvyh7=b3ORXzN5ABf&7N+_((;%)qK=?=Lnme?hnqc5@x#fHIB_K~`+HtI;^z2B z!&+RH1_K12z>EQszI9&R(v?0^U_pRSMHz>vSZAcI7eAWLu@E?02ZB9-2{tvI&wyQ1 zo14ASM+Uf~%3)zEIteg6x0#q)Aqv!0EW8XCfbdc}4v=)cZ2jE;*|>+M3=ro@jddS; zG?-Uy(zT_&9^U(kC>V(y!Vq-^NGBDioFD`G{(+J8-CKNkD|^i+SnQINVrjq%9tVK| zQq~&A26u9+6{+52K@j}LDRwUs&nMU61~n%5e=br>)F{kW%b9~1f`{F!%n)q&79Xpv zGxdWAKAums5JFvXA%1&11+eqFHww7N+Y0039x;D(&ld*A8i%SMzo1+B50ZS8U=IXF zU;di$w=*4@0L>(JtdcdNUAzJr{CHr} z7kygY`o7RIrBEP1anek6GF8-b@+2_wAgWH|S4t%@Fn<3KDkRLs6LUC5?) zKxal@N;qJJ{~RAH#XPSQ7^D1nE4v&FFBjTpMPZe{!T>e#(L)1Mvs;h;N|f2}W>K^> z&b~Mq*nI1^a_k}-5l4<`rh_gOYf#_E*cuI+<;TgSe(F>PSiLVC1ub8w&_5)VB_*pS z$&TpC|0p}b@T5XlrIQ*#own;!258u@q_(hH1)zGq(YP z#>-VKKkfgG(QfHn{*8+4QkeggE`DbJV`*-(e9KEm7v>b)W#Iq6YQ z)D~Au_z*(NWBKOa#j{mo!;BM|%r30bXO{e;^Ou%`K?8IYI%gFReHwIE{>e3A1U+{Q zS`I22^o)ErOR|smLZQ_E`YLlv{yD3DXmmjX^?TL7Qq+1HNY!M%IvDlzI~P;OA!dmd zo*{S(F$LCjOGco9qLQY!xTMj^-)9BE4M^TAWwlx4aMx~it$>5@4&jR!(_)5r#0SEL zqM1RZ6~A~t>piB4?VF&L62yJG)F{hF@i1I+&0W3+5#C*hNk?ol4>>!lNC5v7Ed3LqGmGdA{8@``Yq~mFU0vUyjtgB~y8I;zpw%r$bdYZfJn{wn zJd=|EoYpr40?Csn5omtrkvPP@c6KI4jFJ(ac8MR<--=J3Z%K?g)PykUACMQYFOmIB z9MCGiKhyY?JF;Uy15w2fT4AzVBOU%^tPUXlOjU4JGDjvOzl{@y0mRKc0mFk$8UFgb z-HSJ74J6sljvpXGO)kWZQ+`Mf_6Hq>X**m`p8XmtPkcIev6HN0TVyAMnG38akzY6jo%_(x-*k^kPpq3=SKe{;^V(6dvacK?fC346`A-vHe;c$}O37}?aeD4z9*CQuW~3#O?rK#b3=)p0+F zdsj`MEf3#0@`}<;DmW5kJ}(I^3Wl!37kzgtvJdn#nV@KuWk%i-?j!oV_{kUNFx6pN z8O?|aeOHbK#L0H+bXU>JqVdT=9-JTR%JViPwIqQKR=4Zs2+0ixo0?g0yj_QiEINw( zdztdLeHm0nuagJ(7zyqXq6ZjE$V-Lig#@!^S>l0CmB8^wf*p3*Kx=+blMjo*N&toNfL1_Ag@H zpP8E9V!K@Y^jpFN`bmPt{Y4BtG!3S)wQhgbqgfV!oJj-W>c-iMyK?Ssm=0skL4B!6 z(SlAC*UC)`1ey=twnh$=aD${3erj)wKis9gaN7_M@4&_(`iHKF5sO#%t{Llp9z-RW z2yhR(bw(JZRRI`KS1f`isJy@KJ}s8Rd`>U`|7~>0J=L{n>1uf{p zAMn$*LWXArtu7V~zDod}74;^G_%3K6Iu|Wr-y98<^2J9_+B;wBe z+JjJFuY_)nux9^W`~G=`+gCn<10d4u&#KM@8^=Q6N0EbH?`hvO@+&s2x{^vXu=o9? zhO_gi@O(+|dj>B;5F(|cq#xF4E-yj?Z%NbhTujz5R>LJjfv6~W5+iEWqc%ckFmZXr zyNG5am>{#{!Kc2LB@Yl4LCMmJzR1phX6aD(T|JrIa@5!(lL&$5WK{-)In|T(vlrnO zDV8-he}hhcSNKMEy|fNhriTi^?Zpn6BPWIKw!B0Hg-sMptmv=z-85dHw2Ahy%DkJg`0vHLT&nXt=X&U0`jIFkfA zLN|r$=KPR{;doc5W`=3(+74{3&RMK{Jv@Ire;EzC75V;ll0-w;;BV{#e0HkOESn&N zqBJJk1<4vmfKC0a?=b~FleIm7$XUSg9KqM67lt<0V6O4Px~*6*jfTz^vat^{!;5Q{ zO7uyp03~^ax!yxU0eG2`TEgDr($xTcMji+pa>&DB#Xs@lhKIA zA$TTnxZwGX0YaD@#s#{42ZBp>WqlXY5dL+(L}IcUH6-S&;t$ZI?(DnDQE8r66g#e% zqbe;VEC%_ADwwQTmjPl$3IcX}6_r-jp-nRq$k2fLySmT;p_QrI{i&3~lbj-k+}mWv zs7b^!njeKpLACpPd##4Tw(z3$w27J{a5+I0P+9B!rwW46l_fsQ8ozKpX?=o_h?vDH^=T_4=!pk^&fnr}w*vLloY8$V1&NXz29#$IP1Um> zPOX5zIRrLU#S*k|O$L@MT~1sQtmZ!MXFJo)2XJ)EKJ4DQvRE4~6NAWMK~Cu#ufUY# zpKix=LQxiViL@%_R=>_c9g`8$z@`8_Nr!MD-criPL7c2SBX5#gQ0<0!+-IOke3IzF zzfKgsPXO~caslP4tV_&aE0;Mj@&KjJ;2F;eY3U+p8qkl+1U8{?5MI2;Qit0Ho#2D) z(RZBv!j|lu`fm0QM)bc5;NT{mC*DyX;Qa^I+INrf-pd+(k#Im`P&~*1ySo%X$G*#F#Ea|SA)OfJAREyY@$j1zY{-KJg=-4vZ;S+$wp}Fs z(}XfXz+6<~kV16a-(_3f2k9SWJ$$jiu*Ne!M70e#3P8u=o**UkyG8_YzK6^t7A-0iBU0*?+ZllUwRC8zB#jh&_U!c;trm`pMSxn{)2pHF*=pAnW07nUl2x9OMyaUe z>d1^K6F^a@<9c~09Abdid9HK&1zS<*GW5SViQwkVnN~{qG|jt1$^8mZz_1ZFVQ*!7 z{LOVEV|S)#GoX#;QBqK40I++Nq>r4(qL3hi^oAG@L?BrYCFa<&<^(P6ZQCjhnw?o( z+ps@i- z6sh?vm;%)Rs7e&p7{k9#Y<^^;&%n6ZcIjRP6!u9@Ebj=w_onn(GG1st#Xqc zK!ueoC$nxurY^p{4s^r)aQks1=#LnH^o#BttR@YOF^Ql2cGAdLTv=a;BmkA)@Wf{( zQMv+3VMaKu^>xZP6!greNo1n-Md%xKQ06PF}Q+6gok} ztCHIYt;yrYSegn<`O9S~t^_&6#rk89L9$CXljRU_9ikvcPf+|P09$_ACc}M?`BuFF zKFDcdRQqxo?fG@xKWM-`4P&4GL7SRtsqScLet4$|K9Gq9LZ28)`1LC|Ui%e$ng(4J zkTtAE01`pE5cj(zAa9HzCY00FVF6(v!gV?&4y=%AHgldL0353m24o0-m#a1b#9 zf#OO4Hh|r`eH<%MEvTXq`xOoeQ4!p;>~E`xxX(t?hu_DY`ExrB@#O(&=drqp14QR^ zPmO$KuT;Q&gik|w9RF%>OvA^htn3cm;usLbrV{O5uJsto&(|U6x1b=D1>pBE;fxfF z0D#}$JgJl~L- zosRJv!+;(I5%7o|P``JYK+Af6T=KLJ{R4Bor-;C9VpNJYs_&63_yr%-?Ei7TDh`xA z-%0w-(p`9F15@%QB%bU;*-h2)8z|#L_gtA&56Rx=Q2+E=bu3dT>+G+kUxQf+W{_LN z+X}A|f;$3ah%F8=r)u&W4z!Hvqc4`Eq3Xnm;=e7iIK*EoQBH19le=YgyIYDRLaFwp zzYPsbmK091Kz$GW9%9~4V0||_`mi$zI2R9@LM)9OyMyNpOQ*L>Ph`0&1D12|v5a_> z{M?Y=B&kvl-0XFA%8md_pL)TBbl{{Llo%d!X3_EY$g_nFiD1u8SgrlTO?e-EG|(G( zW`eM++afrj1>F)rCwl7*GJ)~0h#Sy4{j}H`x`s1pO&n|=An1#4Wa%+?Yrx?Zyb>LI zccwIC3hg6jfw6`+C4iPifVonK3wA+)wP4|ZuZLIg(ZG@~VxAre1lgR|3=mEKsHS6b zfpn)m$vsvfHoG5eAKB`dBqs(1vEN-F7;|PPOi}5ecYNQtH^~AtLxD{)@dMiBLQ{iz ztW+udNGqk^N<6BHxO2T%3us5umd-uHcRjb=A_$tu&(z62-PDgz=lh2EfmSYU%cejd zPm9uID1Ye$9Kf&9P0Qdpio5G#a1lB?mDu`LRo#uRPesP|X5;wyl6lGsc((`=gZlA6SzXjjd-EM5J8;9j%|lkJxxn`w3-MDErlEF$M&ia4sD5KQZ$fVJ`}xm z%sSA#&9bDPvwrI77yo}5gxccvBrKwsyRqO9xg1vTUPDT@(T`1eFgAsG5Bga20S|AO zqY;53Kym%+XDWzFJlI*DwkjRCviChf2Ckgaq9jv%?>A{on8@X6 z#7m0#$O_4mr)nA+-vc=TB{7LC!0wp~)Dr%o5@P`s{qjd`n8!9=(&j%00p3Xbc995eEOrf<5*CL`o4mrT@UVcP2-=EX#p&6s~rKj$6!!glw_{D~E^U ziNHs3nX)d4-5V#fDRW!P+^TT_HwbbRxnJ?7^lU>68B^lsG2wj4<*EhnGQG_~TLwQ^nI1&-93V7bHtGL;D%$x<+ zn+4lPXo~5Sd1NPAG46;D6@V%y%b$?|-$_1-=(g{7TKtR~Kts~1Wtlyd-oNJ?;NPIn?9C&nqyLOZZ=Vv8S8V`~3A;{TqK+i2(d{+z0x z9x*G5N8}%4%K?t6$ndduYa>y9u>MP5HE6pZit6ioOm5z@S;0p*LbIX-=#*7Zl0P@p zk%7i3APmEeN-3|F(YI#FuMAvCRR%Bw|NB4LRh|PdjM? zp*ZydNUl23AgB9-a#_ITco8fqF9UiZPBJj3FU6yh;-JqX^azLR)bH_2Jpd6({NW6{ z`>Ji(zx7pEmq$s)s1-IRqm(m2b`c&ljjPI?Pi`e?KeZIo&}lXLqvNQXJCg=!SF^VPgUEBO|Z!_~A>ZO+6{%Yl@rRkWR6WwbLU7ED18$!*E~|=o|Hd;@;=`Eq7|9 z{KNrsC+;BDm7EaK1_~;4kF8K-bidtxN-0YTfY%$rFSNbtDu2h39C<)6(WlA)dLi3q z4-!=_^kWbVlvq22rOgg?N*Tta&-t&j_NcRXC#O|Ky>tldb0)!FJ?hIB1nk z9=LYhwkQ6?j|8}P?JW)-D1GyolOJ*D{JoF)y!xi!ZSrfm`gbbuhXlZcEwfyXi!Y|i z*z@nIP4Sx@<6r0UfH9wzi>1wOUbyEjSC|C~WPf*Pi`MX`WB)J4ZydvBd(V8RJo+Xt zM_M$HDh~1zvu4`&8SxbOPWKj>ODY@Ix$&}_nw#07D>s2v`I8@Ze*!@W`JIenZ0eV${+ z#&3v#?|hcjCRgeaBcDENTN;{?Mq9k%z2748g)vzneFR>m!^FG9Gd!U zV@FC#zHR}FLLfZpzzo9L*=4${ zz?njiOLJ(Nln0DVRVf_EtuKC{1w%|^_)6b$JRz#V)dc5$Ow^~_L2-5buY-s0Q|Ve- z3R>sA@?}WjB$x|T2B0Zs+63BWK9uJ}qk$-;1F@!jsxA@VZZ*r$Fg09l3?eK0t?r}Y zMS}j$^}&toDAGd28on?m0hhvXr8pzR$4QC^XIMMiWoYI`f|9+~#V}$xiBnWqh~NOZ z@Ve6{TAIdBvRVOll^Ko03=i}UG6?j6Y4tRseb?180q*+?f(r08w2>*M!r(z%iveSA$ ziygf7Ho$g+Zt2ROUxdSrf4vA;`xA*G;(CXC8 zEh4xv+VVnAFfmG8E3_`BNkMVCb<+;Iwc)oYspU*zD{b>O&DL<&8el0sC7ipPL&^$@p ztF`nAuG7oHg2CKVj-LS(V6&}=mwE1@f<$;gG0oF~4nlY!7{#D}SaR=gVDf#z z#=mu29)KDS2@F>k9d`t94~uYBP{fa*$9wuD0!eHaCr^#>p!d69@b>cWzFgpboC`Ss z*v*f10sH?@blve#|9{+GXVV9fO~%Jc*?aF@?qnR!$lhe+&{=2iWS17zIWvUAFdPwMRs>cInD)*zt z1oSD)kvMtBFDqN$`)kMLydbnR_;5e@^z(fc#s)F{2B;loEiH<6IW($P7ThfBJt!hTi|=5jd-DazxF^H?t?6cLwz`(uA_=t$0gW4+yh}JGB1fUenZthSs7m_#ILj zq^O57qJ+vg21N2o``*i>7oQ&JF;*$IIsEBidui_VOFOO@=|24SbIL;YMSh;5?RCWC zZgY$D6nIUUr}pROTAhC%JwXG!$=^q3_LSIUqu|@B+gyoK%S1nv&Dz~IBb$9ax8+D$ zM9~d=2WRI+lvs9gHWhxBuI++`MBzZadF~`oavAT`R^uT5J8ptpfHnqzhZ4b0mb98O z%%Ij-<)g^CMgh@>t>}(mg zxJSj)y(#9OR8;!mSQKjjrk>_+g`F;G7ZE4BF5a+FxAeppnb zUHWNek&dEemcT9;MgJ}FizXk0tskTKW>d<=o{s z*0=mixUWv*^jDv($iAX}x@2|TFlM?bQDv2ZZYEf6`toBLIIV$9u)v+QEKSMtoDU2R zv|*7XMkdjy&8rh2%@k4p*i74T*n|4km3JU_XycEHlJdxtyTF@fnB~6QM|KYd2l<#5EF51u~TR=><)Qn>nW34#6|K*$=QD(I=#GQd^`V~XRK^V^* zhPD6jDlv7m+G*j}le*rCn}J~6eMrP&T6GuPk^KC6rOpE|F9v~UEdf1gHi)i6w=LMj zEgb-e{N!OOUayKgs?3vkor3vNS^V%XMK)!*db-I$!~nH=;OGaESpnwggSk+Wxj44* zbpdhE5D4h0cvEbLQhl^UsEaQt&Fxk)0!|OD4UR9e`h~!fa%TKK^W&o=u)DgGI!gK7 ze`eD644bp->#JDPtX6<`zZ zu^>@>17uH2P1ZLyJNq-pr0*aw1lh@e3bi(`QXQZ|AlM+kK58JD*!5*0yd;fBaaGQc z>BB(tMU{FG4fGCWeZUvAF23dP71w+Hd!1FS&j7!uKWR*x(QYM*e@0*`2`Sih!A&Vc zA(b&kHWrSiZ>KkJ%a-s|Fy619o0R#Kgsz za^rn#p>LkH&(Y+)wSMb6S;P90&HhiSG@ok-MnS8j5g#xQqp9FuguNmRQ!)_$w6BH+ zUyzO5ldK3bI8yJLUCa6@Hs^Q`F_0@j5AGy(HuT-55&(vi_lRz>g+y1|6FpUU_!Qs4!x7Q1ad%V=Jucspo8~31@;4U4$?9Fg;_NuF`DE5oL z2$qgYt6^E?{aov0PzX*Xg))V!WY-x@Bl7L*)0d|os>uC{FcZBKK*XeM>2y!#YK zecsm{sjQbmM172Syb5_VwdnCA3HcvM&(8`Cy)^OMG^#Ni55TtL#lQeQaK1&j;Tc&N zB}(BlX*tGG5Q~vR1gsU|P7hz109V-&SxMkY`c5$#lz4xhRv$%~gt26kBP1=s-bYpG zp5$GAdDhWd>68tQxuB9hy3EHdxd_D2qa+KcrCs83_E8FjBw-ru?6O`K6ghvvgHU;d zip8plFjm~({FhjITExo%rdr~TA*0L8)i)$G^|RUuq(Zd8&%PoZ9XWfRy|&--+L7d&V*u^Wout)Q)7s9u&X)R2YO0oSvlKZ zjTRx!y)%Z87X^kh#bYbcGm&V+S(~LU8sIjP>#v{J|ZwDLyhTNHd3CeqDut0#&n&mk;L7w%F`hcLIjo*Ku z`NTYi-%Hm1RowP+&k%igTs-cCAD8>3jYX?O2jGh`d)|}5^|1IqJ_Kj%;wd{Kf&jZZ z*u&LHv!?xU=OTwk*5q!b^e-Me*WnyOkVmbkEsz2D%8O!O zd|g;eldrZF!{%?;Ow+W`guQn&e{+96H7WGSpB{4>(>R)POUarp1ix@56L84D0tf`! zAFGc4Fnd;>1{I^MTH|$vBx0YnVnIPbHg&yIM_Q1iiuDobz!S<+$7vG#Bh0IM@Y%fg zOg>52MN0D=58mVkKD`e`ju`xB?_=+)N47bdXa1$Pt}Fd;D1QS349w61)iQmd6uVb4|4(lSeiawTai83wnfeRC{WpkARcwL) zz9Vhbu|}`6OCp*f!&VUHTTd%P+3+>LA->cCC?qPL`&Inl)8xU=1}6U;vaxk<%rjgb zW*A-{_Mn=wp#c`CwN3W^Qi4*lu8*)ACz07@po)(|B$sUnO5Ju?n7*iaa}%|c=bj^F zJ%=qI1TjITxxI@G-2w;wvYD{FRwkoqwdtlPwkKvDWWhItj}!7m@kAY9tC~Si(&FrIr>Qz%xyX z+DY`Ly)kX>@%&esh5J?piY(>ygCmS=6&B)HhI0)Dht=c1!*!6fD3f|$#rb%G29KOH zb4*5;Ni8Lf>D!4;cSExq<56ngqB+%FF4zh*>$OjZeb)uz>YwTW;;%xQ)Za(lVaU}* zeLNDyLZs_63WSC@yzB(+ao=vl)3^SrOmhf01__FKKLWG;o~gusLgl~iKYBI+du|0d zODcTTKn&*VfAk{s$GT8LAD;Mk8=WOOKI?Xv1ajxb*?270*uHphhgJmZjTk|Ika8Bb zPq6{oZLDSP(d3sNe+YQk9b(z}5=HNcxB2d=mdC8n05PW&ctdARA6vU0fO-9$HdR5G zPvsTbSK^!2O$|}9E|pWM)wD(e!xYXD@+&qNyeD0X zaSt+X>lyS8RA)CoQefKIAli$=O4{wHdoTMBE&V|$(CGv3tf8mB7obkNPv-DV6!M2| zv0N`*pYQW%4J=Xg%_U+TJ6woa{Hga77z^bw71X5{YvVTBJjyR1z=R6jvIJ~zZ!cEG zEew2=QtMl8#vu>-cciy?3cKtS6CZgJZ8o>g?Kux@_?id9nTcm=IZCVBOWyZ5? z1P)&LBglZM7q|3r{&|!6%gZlv6TFQ8o9#Y`%`+d{4Mm)}`se@wcnAf@#x)l2ra{_a zVGZ(N&Q)?X!V*t~SD~ciBzcgtP#og~R5=g%3VXYcce8`nBgu0_6k24s{$!d%7N41` zTviH*>%wW}-j9Nv{$tVb?>D*CEVDBmiaLfG;4S--$!mY_|NkJis3jx|vya^<;qiCu zsB<_H-qTMy_L=7W>HBFZ2%GVcrJ5S9(?t<@9!$l%;5VV?QTlfubug_>&=Z3R%?T9{ zZ4lj0^9}X8Q*M`$%L@&=<2NZ0=o#bjE6}v&BB^1nkuYv0fqy31eElhrwy$5RA?3x= zhSH~p*Qf)YE}Q&0cqg;7TQR@BXe3#v5D|nB{ffjTERf=ND-0>tzT~KMBoX&!(g=k9 zOeA8hI9J&Wpv)ZnnE+Q#Gb4WTOC9f1magJElggua_>i<6=tLvI|MxXdrAJ$6z2@$B zkd7^nO<5*;M3V-O&SIJ5&njx5tqRm%%DjpwN-9w3)~KU#KYE$D(94X&6_OP&UDXxC z78n5yB{f&0WswRhvXm+w{U5jbUO!6CeHCogxl4kha`b8dJxW+H_}%Ph^w{Uyr_ED* zG+3UJ;X1Jb;`GIR(1`(I0jX`Zruv1{y&SOG^CLMNeAk%QH!?0r7H7aF!4x9580!xuU`-@5Vv97VN?S{UJ{M zblL)}a;OHSdd@j$eza#{RpXE{s3c>8Qh2InIEDxiFg0pmd!tX)*bv}GgML<9hD>TD$mp$&`4WEnM8!?9BN0FbYK^?q1;`$%Aw)-(eboECp1hIpPH7xx zfCkv-d4`Pm6`A2sXrzVJD@q?IA~2Bd0I3oYY#)5R2p&_jRPer+Z=ROU5kAC98Q~Yl z&rH8G*Q^e>gajplI?cC;71RMAgwV5JKgd=;FjU6jkU?~~6HbE~8cWq#gpF2;tD}&c zJVnoS$x@O>`k(4wLTgWO?K;3+4A}9y%5r&Nxz*8wZi(y;r7N!{Z61;PDPx(1IZrk7 z;7i5+A=J|3#XQQE+}J?_@peaXPlFjAGPC$?BZ^%IFSJ%yXlN=9n=bU0c2|heH|?k} z{B8;;4$VVKQV7~mDVe9gn+J{}rpY-u>-{XP2zvXv=G~Izn7#_hBMU_s{`IEDyJW;V zOK5**^=j13+Yp8{+vgGLf~(N(KzMHxW*MoTSUWSc!bY=y24>(MLmm zdxa&}5E1TCg?qKG-%(5OF;r9JJ{er49BA#$Wduie#S@UDm(#&l4tSHrd&bhdX~AZX zB+dvVkG{Bv6?8%4|9}(wfJ}hZk{XYzXGh5Ml`F9g*U=iHC=h7!mkJ29cxsbB{Pw5h zWgZno%fF+OV&uW4%~CY-fV|?qhq(}z_(v7XO%s%2bYlyeUZ;*z)<6bNI2Y)n5Q;WD zGDwvVR@yP>t&OG6bP$7;RP{h6q$JQTAN*;Z1iq?#``7@exL+kHBST--xR0tWG6xlr z?oP5QaPIq|FRB`9JLUUxZiF__Q8127t#=dbHXm;4wH7F{4L>m*MevgR)=(oS!ZR{Ulkb37*=4j2L%6T8{XBV;bzSh5pB@GHpfb+LKyg8P zX_Mpcs5L413R^*Jkktrc@+Q<%Drtidm$euHqV^m0_HRlrBpA;EhMHcQdftXNRg$J> zRZ3O{GcX?gwMl3+T8iqW)#Sy?0mW24VXWbo7yg$*zTeH{uvPWZxq#y^mbC zFQ)Ib>nBk=ijBEvQ3O4RW#M+7&`x2`qgVx*2{ELr`oDaxl+I4hX3IB_4JY?9EChA* zeLwN0tH=FTuDZ#I$E9mkPBn*%Y=F1C8dI&+j%_YN*|H5U0~AKwOP`0AZTTG}8wYB20A7jQ15qrmAWSQ7&J?&S z<&VOn&uVSPdfN2>-nB-O+1JlhMn4!Y6%r*bA@-ZIMr3gvEW@mH0NDJ8^{p3v)AY(5 z<$}H^F!KCAX+f-sD6HP_4uy9X$zx|b^K42KK1&0Od~1TH&hD>L6Bp7gN}BnPeF6G7 z@`q|U>#r}~qZC+2n0FFV9${o|lny7~G=9lb1;Sl>o0&lVTT6uGUyjuosM;GclaM*{ z4ejL5^9LCf&Axs4TVuuVUeS~KCHXsk#p5r5{Oh`X%eT`sb$Y71t3V^@nm5%2#LaEz z9@LIifhz44!M>dsPw1v1H;tPyP>6 zB=Tuk_!iCinCg1KljPQGg@#lK&U8TZX^rvhg1QzN6%T<;IdkGXMN+6x)B^Ad#>2@F zbgeDl3Jd_4rq2>P3p5sE0+F^%pS~SsyV1mCl!)AwL7aW(R$oL z%O>cQ@r|!y_X8@FzEaBr!(ncW}g8A>f_Vm zz#g(yGI&~H7ZqIRH1(dQ6`Gpe{jO*M@p9IcJVSj2(?fnmu;I6A0ktvq)%^-0T^Uyo zLq74-LvRGtyvyjwI5JV?xZPaFiU?WwcXpewyd=EIb~H}N?jsk4#$&p9HN;?$^I~w+ zr5wmq*o>wYDkScYLAEg#Ch%V3-3==`T+H|XZ~+34shlreSd-?sJg>e3)p4Rl;g-P? z7?)glpGcVza=dp=%L0YK;YD9s31XmIZqbw<#0icOZJQ!mA0aQeq2#e3T`Uc|HA zxqi0n=Okfv@!8$qZOKII+g6W9*g=&)H+QAqvYG$^#+}H^e846CwF*-IFV8l?2!`N^ zTS|{`^DyV&0BUSn)HC9*NOrK}v_YhR_-V$?rGRbz#|6qE>FrB4ibt5l%;_`YHJ zmuQx-zH_7rK`2P@fHv!Eqol~g(s|U!M4MrX_n4S_U-(EAfm8dpgs?D1KXLyBWTU`P zhrfJr!FyNi%1fksocyEh=b!5<=}`)#Jg5j%XSv@+CrzaQV#2UC-_%+h9!fQJKV@uf zOE$bpiHlh_e^@Gv82y}YXe|P}b2JPWfyqB23{(8a+LyeAQlJ>#P-gOGKKxtcxiw<% zLlB~XMEe$LI zH)tnQ2{kl!aB(tzt}PGsjsfWric91_!T6%3*BYJs9nCHi!jzBC6K(jXe#+NP!0kk ztYfk{R-O+a&EZwlLN)k;83Ep@za7fp=mPcw3ry=TC=v0;pB^o7Y|oV5 z?n_<>fuQdDq($6Y8P5;#12lWy67gw4rhoj}?+km~OvQ(QV(o!UxydM9>we?3!FwVW z(nGZ`YMoqFKgvOcp(^m3?(8-0W_m*{155udk-x1hU#n$$d*1{TFfpau*5S63wITKSDsB!(?s5Xzjto zFVR|~`D)M%d7clB=Pf@K9{r$?*OK9cq`vH=-!fn4X0C8^^ zUkCFc-Q}*tGs_fxr#_*{gB^W!I3-x6~`5}>bo0@;lePj-Y8Bq_)`a9r9>Owbucpo^hIHc8|(;1sJ&MB z{+uXrW4GN2K_1k4Hj+J}=o)!=MTLv|<@r5g*BF?3L;TDn=h7ys3HDXM%fEU3lOZGU zR}dQ2N96_2R8C$)j$tT14G|*7k|c^-!BB8D$`_9$cG02;fg2)um-AGw;?ZtHBH7lT z3k;iIXdF2RVj1$N(*?SeZyr9LNP)2^miz>2@4Rp~m-*ot zpx<*+|8~a26`s} zqh00O2%RA{Z*0%nUC>JAj`w3cVBvB*#8J8|4T03#ZZGqPL8XyV3oD zs6$F|*gcQ4-6B*H4C2%wX&>FUEWEm`fXgF!FzO%e|0@f(JHIzmb4_=(Y^H9DaTI?^ z5Jpu;&z)!!7Ev%aQVPD(F*<2Y8T(6G-?yN`JU0WpDXY2}0F0HaJ#KLX>3g;(|@90 z&tKW2JYA3hm-Z zkvhvIhEIp&o#DL&dX#Qx8Hovaw+#)Oq-2pl<`C}58cx=yEzR-q&L7x5p`(ot%bgac z#LE|sz0OU%*GKa$t5SaPc#;J#1s%T5-S;GB~eYIq0L_QwxEObaOP&Ak=|C6#A zOSbG6=0p^ANT-DZWKNuWIXcz^MSK4QP{$l1C}=gCP2Ffku{<^$R2;9MJH9p_BjTel zMXG}+ZnWp*)Elm5h-Go^Y$OOrC*k_e+Vdn4e3!ng&9;&=CVeL_29XsC+AUT<6D4TT zMD0JJ@N%vD&bq)yZO7Dz4@EU+&l0uILHO3gQ>fjl34RMxIb!)4CJZizkFU<3uPUSa@Me3g<`m5&kePu9WiVGmA;*YabJvey@W#L|$AYp|LeFqhwz z7Ql`FTPSAT&l`Hg6CfMI_W0w9ry^MM3(Ywp{Jz=CLw9!WLTZEY&-p}ga^RP9>WpSG zCIQ;4vJ_cULF_RDK;aKo$%zysC~)(%&3hy(40tbtJeaSZf7IE|8+M>Ujl)glW~M7U z4ithT(tL+QYO&0R8V;rI3tV$5HzZ$;P#_#mi3*5-u)Hn<$nKOp-lm%eDp4Rpj&Yy# zyB*Dv4HvgF?63Y@EQRtfR-6xlPy|9*S8X)dopP;gczK6)#3cy~AcxFb9()H8PU;66 z-ylv~|7Wi}nFS#qoj+Oxs^R~nQ7JFUUnpVspsXN^`-@udEzMLe0subv7<$X) z_tv|V+H^A}v`Qg#lFi2v`)9X#;c)PJufN=lINah?;x9&0GHT0$NBX~MlE<(Z!UEHN z_8_0gu1978#94{RK>dB8=GZQu_{U8I`$OA0eiUJJIUTAc3_K0myagn4H~C`m=nbdEW0sC)ecRv+4Ng9f5D&8O=7; zcTk~Ma=;wC5caJG^R1PI9~24&Gvz+!0NV{m1;l0=0e3H(qQDS}Bxjb7|Bb6JflLY~ zJ*!ujW|~qTY1$PM)oFm6{Jv$H@Ky26x(?RoArvU`>3IhH>C0mQ=)U^aSN*(z+Sdz8 zde6rkxKY5k$Q_`#nSbPt z@1_dXjS`msR#*WnT$?5ZGjuvs25N=Wv|=y1 z2kqC>-n|(&MF?WC*9tHN&3WZ3v4+q$<#EOSw*X_d?9p0%ZqxP$VR9RO*%uP)?Kzz) znm28>uD_1Gt=63riAVRcjW3dvXWhjrv3kHfXWp?mmd*mxrcqS;?-58?4xh;Q?G${h zYn)O#IlN4FZAgRPGp7}LUjiS1BYCPvV%QuX4bid7pcX#yw;Wdk;rVw9V8Fi^l<0i- z{Y7kTz9CzkHU$Fte9A%uYb%KNJ>AOy1_wG+SK;EYqx5*AmEX{66bmuf(PBmOvt9O^ zUvJP{OgFkX`sm;I9Jf08l z**i;kO=UY6Ij=6++O>jKJJ!)%W6-H5?3#%0P(FD zZz>M}sjJ%wEP}YWkX|bZq`7cPO%>ziLpuCzMu!MBg`cY3uRq8&C?*-ps$vt!L@|B(X(6Q zu@FpSAHD0FbhYrmWuhuwHcwwBB_4f^vQc!hkSH)C*tm${Tt}KX8w2+yrpf9d^&g}A zj5?pA3=BHV1ivFKJ%k+lAN#(b0BrVBo~%5$O}>rGjV@KJ0SY2JIQRHJ$d&6}cCEEGa ze)72qUKBv~yMH^j6TZJMLsRGR%~$K~TD1@_d)nFhGP@n`&vW*I!RO}+4L5wTw&a;q zbY*tZ_mKa3gH0|X_J&*-f$l%Fg7K#AuLZXSm0I*VQ<9QVB?lIltsa815S&e-dvB=^ zMEj9ExGUY4@1r>x<%@;1caH7JVXt5;<>|bR@^T|=mk=FO3CGhO&K8>$;RmO|@=)HE ztdK}|dCczVztkb*fkulKjVo(-wp)FcRvyv>fNKu5A$tqJMK%v87=; z|258p;~@6e!XPcAccS#32b^(Y*zjKdjxHwLV}<$nxSmC zj-I3!YVdZ6KC~K-j%$@d3c;RuOI*@==tpsgZ2s|Y2$erkU|5%l`bdBG&1!*(?pw|P z25Lm!rTm&QfkH#x9ZPD&B4wsfIMi&m=@D}cVlZ6uLD%3Sy|n=7DnX9*-Ce?N(c;ls zi_1JTj0ZU&%38b-mQPe3s=l4q{FR!>-dVT7gNNs5RFeJO|HKE0#-;Qf&2$GR9* zm61Vx7F{|kk5|#wfP!nD@To<4inI{ii$(V;y97&9CF3YlP_oe%VdMci8Y#4U^2b${ z?p%DcgRIi=nXX6TA<1Jz2Jt)Tg3Ni#lD~jhd0fQC7k|xWjp^!0E4JnZxuw`6u>C^fi;Q6-k|2bE! zw?aNquf3Xs1A`m8zxBkc%m*|jvq#uu+rjsPS1$sZ1wXNZ=L<$VkHqZ$9pC#SpE$nS zu@YcmEng){{N`d$h3x|OhV+dIb-jS-ow>iRJcr3(`E@4My3V6-l3}SoKkz=ej#79o zgmo&3wg5gv7QX{Mr0{ept|dI%Bo7BuAp08`p!I&`;GM1dL8GN~-UtwAi7g0?)+t=z zr}>4EnU?ouHXNm>%BxmjYmFkstezqTShZoAnMI(EI9Zu(F~NvI$V(f!8btY0BVYb|s>szLV-W8g(u7 z7PnO-xO#NW;@M@O-@t{BI-$vv$au zc4QwFCqfn}xNmo<1MBzI0thgP)CrIJPyc6zY9k57=A|%*5<1KH(3{pk16Y5da^lk~ zQ^J!qigX6}{we@f>tb1sPcWO_V0bgRjuV?enEPOxe6fl`}4WDU;x_ zdzPZ@G`yP3rawi2jo3Fp5;_kH2lmcz&bP1NIv|c$c&z_XD@~)W+^`3`LBV^w4%1?U zlCFzVhYrd?$S3I6eel1_QrU<>O<@@8KOLaZ3E#2OOM&$P8|d+v`|&lxrN185(d?%h z4kw7|SLBQFL^rCc@G`_IKPM%hU1a#+-@9y#YHQHK5c0r|ui=pjY%in`v#xyU zv$p-Hhxw^Nyjn}D^N2`Ve zPIC9|k!BDr8$zOPKB0eAKoqR?Yj37W0}cGK=T&l;Yi6PY2lzvd8tcl-qV#MmBOr)M zlUyk$6BLg?g`NuEwg!KtGF^RISm9pn%t)fBDAEHeTp#Bms6H!4y$<>tf?JtZo;gpo zrVM(M!2l(~^QcWka7@zt1(LtYyf8eSFW*TPyIfzLc`RxzHKuh$jg(gSR#EAK^Jf-> znJAt_hBI{~8cGU07}j(4vv9hI>5k!-M9Ay@djkC*KGhok?)gpkQI9{@HW^qa3vs9k zp-~0c$31DD;Zgjs;qUByMVj{o#CQ16(N+ioJpQip#aO@zjW7VdK{=v&!p!$&tfPhl8h7k6hl3k#t@y=9U3Han6FD_;P zFZ-bOVMdFqDNwkmx!gso(^W|9Y-{Dy{Xjqov2?_RyH$-;UE@n&^)TVOh2D}+qk}vD zg8YZL|7yCwcz;H26hHGp*|J<+v%RLTV-5&~2M)@4z)u_$z}QOH;SGHmDtM~B8eZkLCmGBlb!7L|Ph^uF0}yWPt~;21{t?Xt z&L1*>pPmmqeTX&qc~f+#Z`n^tSu1;#9!}!^V@>c_?FjGQ%ujDAHF?`X4$i+F-5zSx z8d@)LREQXMACM^emHE-5xeD;kY*BtOlHIN0;^*-)`GdMI4UA_u9Om&yJs!A(a8`4q zM`V3y6}Y_<_b=?mcioBif-?VI_R=-5;TXQ{{r)e@Cb!dY%t86@iTyXt^>Pc()hc7? z95|Dd3#pYWGu2`Z6Td9{$(F+VO3a-5`J4?^XkZ%kf>QfXLP2ukuswnvz!)zoh~1Kv zAGfVjii)dZBBIzn6;gA33LEWb1}HWH)U7s0l$TTe*+7*`k_HrdN4D_ja;w`SqQ!c! z-22;B4Yp9zUjGx5{;KpQDnI!;{~~q1gN=9w_6{ds(=j2`^eGjvWy%3JS@f{h1@_01 zKnJ9PqE`D!EUI>`?~xrnyzy^d;@F3PsKdqTowIxroE~m4)=7&+y#HQ4)>uTU&;Il# z3#ba}LC!StQ^Ov>LJ zYCJ!RUJ2=kS@LZ$;frrNY4v%@8JXGqbS*QZ)l4avqOT4OIL3}XNrYB-lzPb{NIs$5 zy}L!&kwHQ`^PyxQ6VWY)JBl_R6JPq77R&WgO#^H0s@-t))}SO=a1b1bKJ$=M!AOVQ zzEDxMd@)@2dII6R`W)VV8E>Ndot7)(ca=E2+jmM|z!?|w6b-`BlaX;;%^kC3V$wPQ z<-hNFnEiS*Mo7_XkcCOZ*~5P#L?)TKkVw{QR+uokZC^lr|DKS7@=~XO-6YGKMs zpX~WvN?b<(M7L{K1Y~R{)}7z2VyWVX&$)v0Q4Z@=!25;3%VVgr{3m-{-A=>=w|l7GU=9w#l16!^=#m$ zY8ZTV9s~U$KnF)3?59Zxau+8NcPXvd)q+>DG!gOPzchslcaTCo5u@4dPwQo_#Ai^c zasQ@GGRImQKN7oAjFQXWNqG^jIR4Gf!=v^CFC|VQi^$KGyRVlA{?HOa{07_9t%IaR z3MPNww*X3?GI{%i>XJpnYV?v~r|fH8-`wiI_#6UoN%ALZ7f{oF^0;iT;9W-hJjLzx zKltpQ= zfp0wSvOCdpASznM^!oZ+Fn@~dnYTRvMgW{j8-dY%G4_Zhrw~Mhj3(#au=-e9LhDdS zy{RM)(=x<_SNwV7pH&48e%%+Wn%UEYYuN9p#8F_^wi{BV^buFj$KDJXyha=5Q*(8J{k2(=x zzjl02!-fK2@*XE_iw)oLT;9c{U}QS_#uO9zDPmu>aP=5id|uG5F`H5(>lLtH{h%vjKNGC+XM7T9 zUG8?Mx^27FYQK9B!3MIYexZbe3!_CHL1Y0Bz#sAj80$Xa_Jl#7q2Rwzvm;3Y%q!6E ze~~VwpIt)c$B!`r((LQA0$+#xK?ZunHU)rdv|<7qODlU*Vt%b%f|DEL@(f@%ecq75 z4$PmC>g|4tIV&=S>hdC+!jZ*j;RP}8N zZ(RmCk*X6N0Ru6V&`%;WP}iz)dE8Z6HRy>z54keW0m~*ym~Qa{_Ucj;KRqQ}W%bX~ zNtA-a^>iIFG#kfMfgxF2!3OdmIqz9>LgaJZe5R>e#-m<8?B6S3nJL?s+lvb>wOzYg z>h@cL*Q~D}+MtrWk~L>G-|?9<0x7hY>*Y$K2S-t%gthsd@>}`D$J^gCv=WpYZ1jQh zJ3}~%_pS>p3z#$erlR&40S&1Qo`HR4u6;jNtl2Lzv}_zU4cGh5mNkr(y!Ki*!JgF=e6Q zrUV?GB89gJoJFL3EU+@&YKt$a$pjg%B*0D^nb|#KQDgO`!W-0`*}Tg7(Pj}5%++DhV0!(o_{C$CC_tN0I$(RhwkCq?{kp(%=B=+ z$IH%ck(7Yq%Gt`B?#jO_W7QriVfc!TyooK+wS@ zhWoiv%c#*9lMCsgYio^Yzo|sqpX~6Mh>wrFrg!7*z1mbN5U<;~yxir4fbDJN9mK@(g)s8Wc z%dqHcOI-~)7~nzyt-#L>oA?0AWp(8++(b#={xXcKIc08+TrKUes2E+uv(`l(2!&cENj3IvGtH0_wuO zyl7)GpUD_Q<_~63TD(re_{TggiYOi@{K=+`pN7ZHIE{NJ_Hx|EU(jg7;q-5_u2Hk@ zm1G&kd4_#7z(i5Q>k39htF_jT7M7?sM(AiS5j=K~W(%)X=PxK39>g#MxB7WNt$gVh zRKP|>|hN@0VmPkj zLg$}za&V32R^`p8s}9B2e3-jFIMS=2F@*kfas>CWgo+W5D^y+i*8;`V;ToF?aPAKc zx6Ji{8~fh-R9WS>#-X65M!+5ZpB`LpLntAn?T?NJP|0@QK)F-GMkwh!68n}OA%&u; z@26NLZ$v0y^R|PA{vP__={lJ;qIA@1szA}noDQVhdAuZ7^|{Qn79$IxpBr(U2n_|d zG{QfdX3<{X>U^nn1u800mZ2G*m6)p!0-C&-$_T<&+OGzii%(j|eTi@Q68U9(0buOV z=Q>bUw>n-(zsUy9TP?q13*S60T089!UkRmLHJvd2|B0$38OG{GbMHJxW3s^xiZ3$^ z3b1G+^P?`WI0vI;A;B{?@H`=BDMTGkho~ssl{y=)*-ZlJ3`TVaMun_o#c~JJlvv!R zZs&C<(wl1i{6z*J%^^-~V2=*i`uH79y!QxGf&7B%^Tbcp|6|WQ zvR7U7$!z<^(!~1LZAEC~+x1YxKPcJD)!u-sy(h&dvL7WI-(Kasm~H%;e|)_2GQG-Ih8M{nKuJBBGW^xZqJe9E%G)l%Ay-bY>@lr8 zqBwQ`?&B^W?uiIuY07a%dNh!_-?8P4RLPdGytF~riz_-hQv(wZ%eC%lH`$EAiS-4; z+v=z89*)WDD|h(8;@@r@?%Mwo(rV%keW<0{Ec-MJAL2;WJ~$Q?HrX(WSUXaNFrCB2#5=D-g>|M1-gir}#q>7#$tHXs zSfc=n|Ct&KbVH_0>4QgJ5DJ~v)w#oxgA$S|wZZxBT`0&m5XOG!qStTFijAr%Qi$+* zq0CNh=%j4#g@wKbk6>+{2%BS#@MFHRu4ztBt@3R*^+RTkmOr=2J`!ZDg-XrX5 zd^<17Lc)+bV<$uHWb`p4zr66yOg=*{_! zCaOe$gjaTRG=y^~k7O>NVsi9$8b`%=XdvWX&(q&$n@}gz$%NcWYM)}M(9t06vrPHL zwdE6J5%P#@z1PkwGV~Qz4#*nUD!0 zZqT01S(d|=0|SICbZRj8rwZqgJOa^ZeG)mLbSSNt9F6J-l#yqZUykilqOY=Q*+WcgMN!t1 zG3LvlD8;w1afyS7!iPDtdW`{9uoIQI8>_IoZy#}ZmKE>3r~=eEn|-e-FBDOw6G!S# ze=Yt9*}?hSE8UZ5xc^Z8kwfg&c`qS2A-|FS2~Mi8=( zyx8e=eSx5!m|}R{bCv60(&*k<{s4kz?+b934Nw%@kskEDYo!~it9=W0kC|Uemll-J zc+Af=SF9nGPxWqW+v(I3^s$p!okbM@W=GN+*0FbNTI`(c6+Sym?aeRZzUX-PFd3s( z{{uAU?i`fGj#PiAa-+fYDoS$ZKOyDJ3yMkE8@Z!BZ{do9z}I4Yi{lS+4vs%Xpk<{9 z<5hp>9^0z=!n5zB#YKpb<|)4bke>2EuC6#iOhsTS@U&Tr%c-ug1MdH+E8;5L3IP84 zX`mu#ZzgRjl@3zicqn!nJd(*$V%j3qHfl?tss@IPS3efTb)=syoFf`5E9_OVW%iT- zAc#s?=^<|LX$enFo|aDt(Gj_Et-n-9h{49+h1^x_p@gvPe*#ceGucm7^fp(6ENaE`8CUjC!AFYD@2%wXkV1pJ2z`Rdz;|tHQI%t`uXk=3G|%_GO$ad`WMTMwe3qR$Ey|m=H>usXsO*!@5W0t9 zSV5Zz;?5wi4i1CiWceUpoCE@zv)@|YuAW}A(m6pPIY~fpEY74#(3Jujmu4VdT3)U2;#9(?Yd`Oee zRC}Y_z#_+_nd_dbfzu2qX;Ez<9_dgs%~i z@zcM88)vw}#J1-@n%MjxUSAjuq~y(F&;PEQ$4$DEx|Nc7`HP@7Ba=)!K~Cs1w9GLv zs9@L%R}0L@=2LT7$Fvdx%C&_tC(A938YPmvfdze84JfYZ0QBlBO~2`mzewO$Zdr~` zri9i@(;irWPkm*LBPNULX+BQf`^vYZ**%uyu=he8ezHq$oK^uSrAz`eef=LHx6eWB7Vxu#hFU)r5^%t>fMCzc-h5rpHV`yf5HrMn$b9l#_j=ny;huRus&+ zI)fk>-QMVjR$<@&hY$Wptzn1d?E2xRV_iQgRclT{B4KE8xU)W+eqDOKM}sLl-Frg@ zULM^u+$DeV5wna35^h}zQTeEY?JGz}#Q0BXpq%ZSdc2!US-(%pel?spSo5%~5yFY; z5QAQE0KPeMl*)V2tG$=8YE7CSsRS>n0~o-PN96B;CdQFK@{R2tr=@43P4(}^!f_^a zXo|dK{%GMZG=gk_YZ`V$dEtM#PY-6TuI@q$yEON;9sgs3~7j+7KsjU3Vj>o*} zTPb!+{c*nlJgFPB+Z@3f`XfD=QG<_8c)z$g-fdSrPjA5o{lF4P(V(D1NkLg-lZ22C znB#eToy(L?_s$UDhtBCU^d|BRt=$hkqRY$z-G~_5diaHH*2>Y1{%-*cGxg(hI^uuc zO%kK!_OJa_(CvQ^T}%KV$gjg3j!#?Yc(E0PX51_$UlZ%*M%s0AAoIDKD2gCKsFArs zrpC0EpSvTOU{+5CD=)VlZZ2}@W-FszVy+$8vrYW9^iwiMStT+Q^$Q=Vt|Q#u^RG|$ zKp#dB#qc1z_|T}O0CJf3%EA4${q$s*C@=qqVbu%U*X_;P0#W9@HosLG7rVbRB%WfT zG`ZVm&{b|7Isvt-7hy*&i~q>vom6Cmk7ea$ps5kp1-(L!WeL00rc z>%1M6Sg9+HLQyhf5UhHhTi2&XZ&%YIV`QgHP!YmOqu&~gWnMu@krW}?_~6uXQPTH? zqmjVw_M$X(`+v>HdX=NkL(418+;4n~6)WpibT(c7K0q0Hk?byORlfs2~Izoe~YZOAtFZAE;;2sg7rpVWYXo&10qWO7*}^3yRd3%@{enj2!$$ z%;uIhhh9pN6(mOLe;g6~pt+jIDAOp&bf$a3#~Tyn({yotW>O7EAKV%KhD)w$y$zvo zto^_ju@}TUP))3y)7{RWO?&LiJC&w01IN6fiCk2mxP2)AIquo)`tIi~ZrS7)rjJA( z?vj$OjzaZ*D1!ozu@}e|R1>d^jc3RjS6{$FbCuQ77b9u?^s)DzVe^8{iCQh%uXrfG zQkgmxj~{(8o71P&ADN(u-?;gYhE@Nt${iii0T?9b+kA!!EWFJhb2pTC?m+Q`YYILgQFA2v`>!P*%FN^dz;5HtK$c0WsK?4vE zX-m4tPv7Pu&zr!2vK;&2xU(6Wqv~1??0ns5)AJhNn5ipn6Rrx_+c5V)F&953rL-0$ z03tigWo&+903{LMw^){SU(J^7ybr6XmfbgB*4TBS==pIB5oY%1m&{h-8E! zl1x|YtoG8fI*ru|Mm*r39!cwS@nohg#zOF!=N`-WL%)%2JhONmAzR0Cs#NJUb##u+ zC_)*p-Nq9wHG)XkKozD5c&f&AS6zjy37I(mdPNDYo%YFiw=iF~ChvAg!w5^`rptJ$ zx%<#fNoV?iuePUV{QLnqG@j=Vk-dx5 zzA)j`hJMHI4|quTYq&LIaXj+-yU0o9ms5PJe}bk~n>ZpBT|*QJ{6)!+1;xw6h<@Mz zE^g#nDIO?7g)ool8%xkm$k%eP7&sYB)2^FEydkHIABZ)z9-k$xa{JGjl) zsHj|dq9yH{9oTy&!(E!VYtiQ&NBxlZJ9EY9whKbYHM7Cdz~D)aW%4&-q(3vMxsTSh zz5Yg1O>5B1g2?XMBAjzk>1-GcP9ZZkU1ER!5Eu7r%yHJ1uV?w?ZK9;B4B6~P5XZdq z%)kGo#FiB{PrjXT_Pn&tnhkxQ+JUBy6uDPkRcU)v-D ztZjGYviGb^qKwAv*LVG)1jL2_aC=Psf3M2}=}0VH*EI0LxBbmK@=M+#N=a1|26UK}ks90kl1N>SfMeg$4M zcrH`BbxZg^;T-hI?{lG{owF%YsSh$BmtK2l%l$Ptb%*i|a$2r_EfzIG)&INo^61=H z5;`D^hA}rcTA=T#mBpbo7tXhA*^x29mLgcd3(6u!ja^>a7;b7K_YzlpPLSqZfIHor zLXLo49wzAS&v#?;FC$QEx9KD+-_A;Hr^n{9Xa16sAtHc!N~bv^waRRM$71&X5#fPa zN*aDY8dE3*4;nGdYuX)9jk`8OuRj%gpqI|N3hdO|qw1ecXue$-Xr_0?uhNw7eoi=5 z=p`R5LRA?wC8{h1CeNQe-!#laIL1f(wtc;(CZ#6Q+}vmlI%=kfXC96Hh_2deWlDlZ^SLgnixt#`-Yp&>Z+jB zDy_5m}^ zeE|OfvcPLfU6>#G{p+4;urTEh!w|ggy91sWX`wnXow!b~HEnD2` zy;wovYu36J3PU$TM~nD?pfzq}^WVtoEc3sSOgQ^iy+53~;A(>r?6%>-w{BvPM=TJu zyW+Bg2b>noUwENFN1e>XGPr6L1^#8qx*~Jn7Vc&L7ru4f?KFZ2+5+J6MLZrd&iw~9 z6#$ykPvT@|;`nFL0bXi`%NLR`i*{2yr1I*(S#1bD_}8<$>cdAn6y1pbXi+MUBp(g# zBlIkgZMNlKyH`&fyH%QZE(m_>{S5oi!R782s{E+^8Bo|-`25t@hxB74h#%_QAHjY; z+ynI$_AEF_$%Hp)VEcrZJ&taoJMT}@{&%1or7^tdC=U7`HviiI@sKKm@()KN6Snz!3zGv?V)@?2caz*QD8nXMWXBq z(!X^noQ9|oftR!S3(LV!1Tly?pR41%xcappap+lqM~Ml-J_mxPmzN8BUkWVn>2UPNc!8^IYTIv_ySvlqo)@@AbbeN!Q*( zht)XB4ncu%+;o-@EA}awA4ImpL+;PAA-%V8uetODUzSWgMMI@ z6;QrN1Drx7KWydX0kids)PS>F_Wu-Q+3IgutwVw z`ezTw&@y~q^0r6SzP}p2DqtF}gLl#f z36a?Jjk9-Az%Ebi@4vp|DKI!g6qxk*%!c++_SnF%y#2y|O9A)^*9v|-qd5uy7`eY5 zxVnhK0KBM+1*9!m30FFdAb`v(aay~bSMPuYjK1Sn?hYH~sy>ks?_@Ijq zk0N3Wb=NuUg^whi=RGn>#AXI6&$=)28he%GvWkD)Cq`WhT#tq=)pDDy|x1r-?vW3(Y`sAH%mQYKgH! zJVX$|dI=I%$!@-u&j)p84^utC~2fy_N;8s%|0iSNJ^k zGwHton-SZRi(x zqT)s?a3eqke)5}6at35)%X&*$ur8ifDTu-Zeh6M?ANW85CZ17!;o_`j!L<^Kiy!1n zEd8mPCE9hQvNi`W6Q%75p#303;+u@$MBeObb4cSn9^4N!G$^nlnw-k2?_!MU@&X|OiQyR zzo$sGQyifga54N&cFosiK)M-!KV_Yr0C^iq0*3mX?Y#`k$|mI;fLo?6t_Bu1t{r8W zH46eki~g~hA)kmvZmnj7+&Su0NuU=4&RA&;^vkdNhWdfH_JT?0N!WV#<}=l{r!V`D zv9`SjQ(}+v^hncN5ZbiY8bMh`8%?FINv{_AJdq9f>SyNb!;24k&+k5u&vdN_f(;6x z1=Hh<6m+_EWR*qF>(tR&Hb1yopN)4hG6f5z-QnaDXW@k{f88UJ>d!C{ zDEG4RCpCvRGsW!k&bP!EEsJmvp9OIss_dt9vmsTeQc_0~MA=MkA!)C30<=J7Q!NwG$p40ol`ia+J3p#v`QEpw~m zSp8zk>S2r8j)F;?jAHzfzP=CljO!{Lwh||08f?b+ySSdrZZBt~>sXq9Ll8oYNbO|%vt488D0O-+=+h_09MmD;#aqWgF7(l6VjspNFpEt)q_od+lzg6XNdVS z#G+@ihGVE3jM^&T!SLd94T*3~UIb6%5RtEgA+hbjjUvj28YSvP0<9^wDEHMg4wjCe z)!pu;gZ!sX`w;17f{R!+oKHoa#;F@V=@~_GApJfDxa+07l5q54a|n1{0{VwF8Q1r= zN=$>>N3xZ|eU5$V13^8RsoSslp(@U?iXH`8lz~DLGeWJ;+y^4y_zp4uDDc34`#yH< zO!0N%#_uv|8){!^@Ih}~Rm(?LRJroV5rV=OsKCn#v>={I2P`qzbI?^8B}U8NOmU#Q~T+i{CNnVo9;Zwe~U zsTmT=#6U$V-eN#ds;1O1BF34rQ#T=mJU4v&ue+mim{=SodL?n+_JvaVM&rY4 z+7JpjM?zD%hpqVbJtikI-8~kvRAd>x4t0;`K*DcNRMRmm?j^d}BWlIf?==+eX5`PK zG*i^U)WID71WFMxQMK^EqueQCL3K8d(sWEB29E#tSP?2?-(<^?;Yale08s>hXFhuI z@97!@??Y9bglH$kLpPS%4$yx+7sEB96rkg;*dUK)zV}@l8O~SPyv$wmP&5l20l;47 z(Lua>fT*cG|18uu9GK5RjEv9f89oXTfPQ~8`xiWf!F zYsn27l~%aM(m$c$e*Em?0CO+54N|*;poHJ{g~IH41x>4dy8=&a@)N)E0^`!vn`A6t z)CsZj#OINw1I_R`gj=~M+T`Wt|$yr00%+vF@UOTWde|2Yy>da*ZFhZg1;EIczPm`3_PKm{T5wt{S-pS@z4M7kLX&Y z_7>ry;^y4WXQZ|AV9xg=R@ov5N*))Qy&U$mbF*Y#b}2^)rdlh&&)XL|foXw_9r$b* zM5?CRYJ&g~WJ*>^6dGn)c1*K?%Ux%qkIkfu0uU$W{PLV|eDo#`#RfowM$0~N^(U$c z33H{JWzZi;wWxcq>(2nGp^x)y#yLnnZxXVMzLdbPk6gT6 zi5he{j)#{%{+tURLA>9LeIv~dTkX#PqIgP9g9-*9OPfU9zdTb1^(%r{*pe@GTwZ(IYRZ{G5=%h{2yOa(nGRsj#*Jxt{g*pY~wiiod($>r{)@gC2=1LpP5v z;5M)Iuz;)g_TL0yK7J1l%>oi90|~*yp%0r>B;>Blrk&kLRjaZ`!X}989~;zOu4Ma* zKueN86M&anG?wn63cpGEUcl@kC8=z5<=&x&JPMHpmt4v#f%Gm zHf9T@HfObKP$l#F zd-E(Z)KH1F+%R??q`;8Oe~7_^d(X&0r27H6KSuln?tD{X@5AQDRhJ-*`BjK(9(JBV z-*XJTd3tFRy97-n6P;N-4~&t+kT5m*JTW^y&b+Aq`S{2z{;H84Zc_w=@)s4H(1v(6 z8?_!;ewRZ$))+HJd5-`#qa`ELwjOQvt*U5So68SuHwYziAXnyaZH0ZF%?RgI56d1w zU&|LfDp@Bc)$u_HFJc%n5rWx%d0BZl9l{JR<;J00_LM--(L$a@U!O{`g=E>gIQlAC z5cn5m8bJmXIamfdGc-Tb@Iu1do%0Ge65b5wfwJyKe=}Ggde$1d)_*3v*nICnFP83; z>p_7wLI4Gt55=Jhs)PlSs`XM9e$)Mfx9yB>14#f_o?tm~^1CB5SLKOUN+-S-bGZ zeqU>d{Blx8rQFf$QX#nmf`r(^BVQ-AoU+UPS^i~R=TwguIF9>Tcs64BKOT~`GUukn z8SK&FELKRPkL93UAL1#KU+IAvteh0A1$T13lAGE32;aFVng2YoP6h5k2?;?vZ<8aQ zy#L5dYE00SZv5xPf)D!$!!B;9<6KhwTv4GX?*ccKm*A+!!HC>W{O4jwkfDG|CI{$| z#YCV8i|bjueJO=cEMvnCZBnzFQ=ENW>W*NT&ZY_>gn4*=@fzZCCJ6GH7dg=cB5_A1`~&{=Q79mV#xEl9)8XexiLt*P+|RFJwqg&{ZxIqIsj-v9DC*N~=(w{mZPXgUtp<%~rPT8|fw z8CsaK4ttpsMVr-l*boZ%2hpXKveQ?znr-}7&zUTe8T*lE-Z`u{-DfLgyBHHYucxiA zx1$-V9V6*##i&nLm4D1R05$?x>^@9W;lQ~!5|Yj7Jr z`m}+Co{jFY9U1>2aCocPqw)y5zcmfU71=KXJ*kr}?;~RTCm>FxhttgL_ShJo ziV#_3&$H1oWE!xz^8y?EJZ{2_9aIs4zjhFzpjKtAH_iv2o6vbUrqogn%h>&FMcm<@q^S*QI93z8|vpQAZ5&j16D$8muq0D&j+;-%;rI>qfMk?9pkEe#)oHj(y;U*}hi< zLg^%ON9jWe2q0a9cl5uYo3~sJk%fX-KN!X{O7AvnVPajxaELD-MYFEhllQ;~!3E@xLN(OK}w?SF$dlabZ1l-WLH zx3^O})UR~bpPf$_iaE}beb19G6~Y7EHB_IQYuSXQ>i1dAvz`hjGITov!LI_A+gi?) z!AA)tK5;Yrt2CW$HcZx3~Gjz9m??Hw7@X$%zEy%+pBWVG*)0rVUT zz0R*)a-wM;zsTk6e>S4VlIgk^4raXf&;u6&Ah8g(#d0&0N-s zATa|66MH*yNZ$oNDDpav@j3+4 z*Wry;K;a2Bg4O$j9!}letua$DSC?^7Cgce@DJjRY7y|uFWM^>u7GjF&N$xx1uhgyaU)-k7-V4) z{y}7vVuS;YLbX$(=MsLX7og6 zh9(;uJYv%08MwP^j_%Nw$9|e=N?Egdsfmp-W6*&CI=5i1)L@8X{!{3ZWy{k~-a~k= zQ<9PFFBEK$UPuN=-s^=(&88UbK5gXTs<56ym+2`1?)|EJMVtYlBd=tOZ2oLnNOdDY*tMFV@h}KG zxxtJ*t`98%fOaXnKL^myd<)uci=R(0B&S+9Y*}sc6JB5SN)vKp9|mR%8G_sK;9IS9 z&FE(Q{!}p8GR_rp1c8X5PpgP%##aKt)R>*rv6ADP#;fM%3{VR^Iqa$Nl2OsF4xU4O`0pRNQZP*%?P{{OfH`7_N~(+<$oBkOt(A zWPG9qW|}6Kl(4exGuQ_sg^x0QLEfzVP`U{Km7KCFp9S@J`Z{r4`-5Pyx2G5|wukR( ztb!MR|7`}DhZ&3FHUo6Z^Phx2uk-uHAT~~WEQ^FEV@FVuF=uBB^D||?LryN%d-8e{ znNMx(2Qef<;vJtXe=YnzaT*D>qkG(;FvnSQ77|N=0RZoa)w&xu7^>SQ5<%C6PG1Ac zPH7ypf&O@VR7Z^}*}5n^06Q>=**QQ3IHD#LYGEMq04@3<_Q$uZbZAn@x6kzF-Zx({ z$uD*&PZ-?mBT1qR4<7=+?$;C*^gZ@+rqtDM%lq4T6ufRdWUQz<2T8$gzO9%4Qqu5_b?n2#;UE{D=`LY+0)yAd4!$8Mqrw1XpYH`(6kxkpI97Q00s6(L z7mC`-#hf~lbULEi0BEOX>ALKb$JUZBZi@AJhAy(yt<(n&eVw`3pVSY`jwP|DFO zsqp*6pCUh}mZfWVJB~*b?8{|DAh(E!n4j;Dr>{ces8CE%wT}B!=hV}`|2z0osrH}H z_peVWtTX3S-TnSy6*E@Ea)?R6>>zx(_M&kL71C}kf}b|S$NsqR(h)$pCI01$U*5~n zHV6CZvv>hm7ctJ*>!(wz*)eK`kEuGQ;A`>=ZJ{CHu|h&i9lAwk zOrN5Tt3^Z%ju}Oa%zu;{$xDFq0P%#}x;{O4)-GB)eaXz~oSkP7M&DLvBqQz_%0f{; zRd$n}Ki9zwpgx=vGH-A6@GJi^{TzHeELaU>7ne=kqt3mxZ3LlcS1-V+Z|RaFlAYX(xM3pjYbF`dBl zefVdU#-kCOLn#7%5>}A2z*t@`vf) zs(~qXAl@mDeqH%W`_*yUDjySv1D)4>tb-{KGQueKN*ZN7-fWTdoXo-f%Tsi_u_vF$ zA}P*mRsUBMd2c9j;NPMF9$(e@S1tsPt%dsE7ZO6aVI?nhAUR~tf%-K+tv))j&8t6b z|F|dejtrM5#ar*9;yd%xV&*khhP|Ia=|{H@xCD7*k-u1u)bVI=8x1W((CxTC6m;6& zbgm2ERc0q)0btdyM*=CLe-h^&;Y32=5UlO>OA7!>rJRZwIj`|LTy78gzE`X2+COnlsK?}<;;i}#xjW3=WAK(A@>nUJU4kB6HpLEpM6;N0`y}^B{9e| z_ptS*7dQNfR#EwmIy>Br8bNsAgHNHaag{3hH5^h}ZI z%V%#_K70^8%sseniJ6S#RW&^q+rxizohd&g#IF8{SKxtkz!C40?i_u~_&7k}|HecU z>Yr%bfh< z#uzCIGw$tk^538$SYB7Gk*_0@TqC3NS`@lSR_Dd=gpvRm^rjLncCJ_&*o)ovFO-i) zmoaI=ZSmD(J&Q$j7FP=vhk*&s;eD~g9;fdjV(6#&SC)Jg`((_Nt>lEgt+^Pz>qkEC z3Tbw;*!gcMVE~Uh7k@6yj=A6Q|Fb(X?2^fmAt5~Z-pvzC-OfMxmkrY=waD$HO8(p~NdOjcOkF3hl-RLN`_9Ww^OMYv{PU@P$B6nTs$^wJuG~f=iW=ElXNv=uJ!FfPKh& z@sj?OBHzeCzhOM^Dly9wPUKSq-2DUX2>vYk4T?I68419iywd@zKaJA#cC_%;B&mcY z4y7it%yzAD(Qf;iGE~e6W#e z;@q{T0YYJ&`6hnu)~k9xe9s>LX44#4+e?eaqxM06m;Mujhh!exzj}c?at0+i!2<0v z9uxNgcIMbFIL+~udsF=Eui@u4L9fG0WrjI}TGdc0cWo9d`NX5opMRpuop9iRY9H*t z(|%8X118=5#^*uuMfYxJC|^cb`Lhf?9PU&*bo`mMkXClfA-U%G*IC-H<9$UB*j}9B z;%Di*l4pvar7jpp)J}(W9YTpIX)en-g))>6pB4p87wQ8btSFx67d3#n*-tf(Ae)9E z`y|&oHWy~#x3S0O8qv(=EGzWIv{dzZ%ekvpK?y78%Q)gxyhB@$rT>QS7REBk|LJ^u z=Bmjkbujh7moQ=wEj}hyNhvulLsJ)KpJrxevYUt7i`m%uk;)nmj?Z9e;CTC5PdnVo z&gm3n8A{DxVEQo6FLQ=|1b|xw6Q9I@i(xH^h|d02!(9Eut~I#g4=!j|xW?;4pY0pb z1gwukG^EBvf_0P2eZ2b3=dVTu5N|Ksvc?o5(8rLI|Yh#+GTAsKwRQvl3Dr5JI*{l zQl_O_=uaf1 z=A1^-LVhf-nUhD3Ko^KWGqmBRreu{3vFVjYGfcVGN7vM^ZKVrG=~5Qu-HVrWAwYB@ zaj*s{c>0kfbhUOCM`NwFfYY3`YyLNc(<+vM6w65TN~U;dp3eC$yXFPBc6i84eJ>w! zH78FPtrA2*p9<2ehNPg^kSq2ytPI!e88iGVRRS=dtv`%R_70R|GMoknxj9UD&d@QS{XW<;-CdJ0&GVBPP**JL{=uefa;qVqdNUfDVg@AZ?z`qnz0=zvHnh(@DLm zX@NL@n0~)W#w`i2Lg&8kJ>dH?Eu3R?8$icAUEGg zIkWW0nG?=*HuC4N?3Iif(Tm2Lz{41Z?6JYj73}+Fe_`zZj9bn zx8;jUCd!?z72x5@r}mG~3JR$T1r%mcE^zT}ot|+v>xmc1FNdFt z=S_x41%e2e-_Dm;5B{EiVw>7K1|XGZ4%EheSsdgtKjO3Zxd_5+0~-g}qsgy0Lj9W_z7Mt!V z6v%VXHe7Mfa9AUNwzImBl5K5YV901tDl6{^L0&H5v)dIH!@QQH4213W#PbMS@gp-M za|@cuss}8=cuQk-47t1Wln0X=O-&{qxx)yK>OWMxtSJty@2?} zo!iRNQ4PQkFdDOV8%)vCnM&U7P}d{bd85)Rsn+#}x_sf5Ua%G5+@%V0@5 zR7@buE~#b&v1s$t2G&pe_0SpT{2mF@S87ao2=}S15PEDmZJ4x)R%Fg){zqRm#8W>u z`@mxHQCb zUim4}UvI|Yd{I8lGKpG^8^m~EZGqogRQM30KaY?~3y8}{CTwVDS-OJ!um~eIvGWneMh+K@CIYW*a2o9w3J zJut$d$eNWx2WDoVeCD)x{chE1a^na8T|-&#A5)7k?D)Fty~Ar>`*_8(9STO%vl>Gd z(&YWDg>7kXG7+k?D_Wh@n2Q1kDi&u4XWqUd{4IM!(pp+)Agwqr@Y8ivNa&)1F2!`Yd5b<)xZx^vJAo1 zhBF0&=TU>Vc*qOBgjdC~E~#H+&qbwWzc+2Q;p5M?HI{vgijhR?G|cD^`viFKB|5pm z?OPp%Wyr!i_Q@uYDR68x_irlj$nawJ^_g8YDJ+$+D#vK-;^)4$U>14lkp8E8HKlZg zCt}SA$P%_mQkZvtvF!nxec=Jatll|7_;)=8FNaZqV*eV!YTgL#2qH}FuiP@0>_$cj z6~W+Re#HG>=Bj~JFPw)9SAKkI*F0oC*C|#c@;TGm7_~Keh+(kRYP;O%n!{B$C0~ip z#6@PEY;E?e%A7_}y1UtO@h{3s7PNn?3Gsm*ix*}>+Vhho)gYSR>?4H-dga1%-14lQ z48WuGu$*OQ6|gXoYEt%(Zx0my(?ka)deI*+_^tUBYNYVPEIthsMC}kGf4QTagLG%-zs??S(kKk!>=8M0PKNg+h0i>n9>KILmevqf+`mt)R=iMF>aHq$#b1 z0^0~cZqgdPc~K{tm>xiGM?tHLAD8J~Og2(h9foGyf(09ZC$M}6cuxp@DB`7{GVfTWFExPU_vNzXUffdOw&WEgWxmD=F zom3=u6wWD6#9My9#bj$RpACPrGLA72seHf~vTv#iL9+w|y-7kAX27 zbG_M{yy$rEuLqy@{?Azj_Y?C(t5DeJ%J)YFlIK9J&pf#E_Noy_w`&bioNvT$60yDJ z#%?>#W6P=*j!#}|jF`QBxMvrD|4D;qx^CA+5%!8PV8)6gCi5-C6mh z`!iesk)s$b>;3DwRr|+!IEIv0xic|Jyz43Bwp@llKveXvcE;R5@BUg7Px^a@hTMg} z-ljnF5#XO=I|9((_lwCn-57~OuC7(1KfyBzyIOp&WWe^E1uw6AqGHxoI@?;g>H}oN zd7f&Nnn>p%8RVZIh7*IpnPivi+|BAAh{1P#O-8l358gs5GA2SvWnnGa=yppb*ps~U zK^r|GFSwS- zUbT%ltx(nT?=II_(c4EGquXV9kRPNlRtD&+XO_#ly);kCX<&pz@e5g-As_ydj(o(u z`wy8!|3=i(WqYqo9MT4X)}v*`dXQ~OM%=^G+wvZfyV7)|IOjXRzHGqv=hOQ9Ptd7W z6`Uhq*6N`E3h9rAOyF7?7bYknDYy}))X4Dc&B5a}o0(@mIJ=Gi{73u94BjON9rWV| z7b#dz0l~9&IitI<2X@egv6=VV=ek0-KVJUa`T4@}78}Ddk!y7OAzt6Utwm{!f6
gA; z5@{8beD;6d@?vA>obS1>yRHw|RzuteO#4!!!M~%EO6u(BJZ>bi@Y&NcjVa8C)r^kg zhsPYC_>V7uFgvN)@$Ge+ly$KQXgQa~I~*jvG#A`Pkv3zLPI_41k`x*wfgAUl%LR7s z7hdI`nu@P!^?<^e_(0p53K&xBP`J#e0*peK5;+dm3$S)~=q?PqsJv&!`1Hv6h8(=X zKW>~M$cge64=vJ4U2K4kOGY4@Tv;odE>kY;%CJf8d=7)+S7ihP>aOYc76_1Z^1gN;{!$_ z@S-gXUuu-#K-3iAVlsW`fgWeH%~c#nkVAvBhcrk)c{78YHH0U`^XHNXB$r zrCj|@V%y`pzf6lhX;pdn0Kp`@fnA6X+B^)B*|7?;)hqV?W(6ci>?mdfHR8~s>$F8@ zs7{dBxh?$W7c*f*o8W1On~bbG68@9?{dLgrAbDcH$2^;qHZR!U+S3qx@p(?if4PMs zi{ONf!?32ivRu8*V#75)4yW52f;kR^zEVBs6z_kBp|*Jk25&xBnMbh0SUGYmFao_; ziLukb=p(|Eb&x0tB=p2iUiVwDI@LE7bz%hyK~74hQp910HWLf}+AFr}EY!AyJETn+ z8g>%1$X>8wj|n8nFl>e4=sr(ac>!jH^6I-Y7joe1$NE-s$pY+;te!Jp7KM3X=cf1= zWY9rIBmov&CVE*L@+x)B4=JlbL!@Sk=~IfKqIagtfu{YGx1PhqOK2x_aAwgp*7y5J zMC#(ZJT*ZtP!JV%wpG!$io6l0d;oT|9E%)~3`AxVVUevJ&w1pGi1ikKyH6PPBDGKj zJGiPG>gG;n#l=41&eHt>CFa08Fsm%q_t0-_sM?-a6Ak`oS?nl$BW-w$fO29EcB;@Z6* zvEX!3SRmH@H*{)Zb{#AFrp)rtE!`vaF0}e+rcp_r=KHV4bRMLy3|7^h~V!bw4+ zZEV8MVe+A7@73)5Ikl>GzLeDOTf8Sj6Eb08dv31Ojn3oU8*+iu;nUuIDZ;PRoStb+ z*=bP>V#u1vIR2y;0(8*dq%d*p&~_}uW?Ic#V6Aa+qO0z9_+c(CU3(j@#-Nv#A z`qHe)2hyQ6GNFZhd`k$&hC7{sXK}=!XTPE~1~jlmPR2X;fYNH`BN(bf(yotmM#Lo? zJ;<_sTk(=|{U#^evso34kWm+o2qN~OU7l9JgHxxvKH-CJRpe^&&|pd60+Zi!Mx2R~ zUr9o3e7^BO!T?=wq0YmH0WC0LB*MhpM;0hUbGn;^_T)R=Dudd*J-A(vP2AXbMoSpm zrXZuSS|%UQG1g-=S(es*)Xh(F#IB-S3o-3S5z=$guWPO-+L$(?eci=2=b@)9%RLsH zERO*5Y3rScKfZ{jwyv2-a77-&$|oc0Tnm@a;$M0!2&jj%0UE~3EV}K4!eMRjYa?@! zE##;IKHNyR!N3CJiEa#e@w%lw9)Kkm1BS;iREfznL%1R`kOAils7V{4{o_5{|MU(`uo6(;NN5?0<`GwG27z_oDLpxgii%$nGTrHwMB`*VNy2! zk|8Svw8#G3B?xiwk8DDNQ*tdHWN?N%PUodDi?xvQF$k@ONLdo71a`{K;y3Z)4$5bC zX=O{Ffc*dhd(U{_GY8vsT9(S)n~CjXBbAtIto^5AP*|m*`rimax-3m_iYl0b?sUcK z651}_5qe4ry!*W6Tp#>IcjNj?#w|=7*%Qf-uBC>gNc}qoYG2V|^hZ11Q1+Q>+MheT zj^mMw9{(wtt`8H(Lk@5$)W#7O%>i)$mZQMf`h*^sCG$!g3X{V`DkGH#q29Y2SCx9> z0!=dKZ%@G9-^`VH;X*-gY)qfG5W?U7)~2+d6ZxV!st?`;r5?wJOsRpR?ybeqjyUg1 z_tADvFLD}8QF`6<^MqiwCxq|}mT&Lulz;24#JXubMTYrdThYDzzFV+e=66JIE?>{< zoS6d@rW2K8%|39FdUM0uld66;nsK~$M)uev*$=)PgoSDp17VDQ6~6GG&pUP0fOZu|3=m0>;t@e*saBgMw!5C?Af>m=ZMGiOeRE>)F~r^lJ}%hv)W zu;m}+aMU)n(lZJONvJWMA6(;~0AgMnEQt&CdXcAT+L5cNE0VML2(j?I0CnEiChXcy z>Ow(Ut_MD1O;9ikOxl_nCxTArJF!ir@-LdId$)*9M`}1$oB0yZIr<^eut;9P4VsjKNl<18irwx9B{SI z)@c8+|5RAsW$EI-jh(JyP8tFr<%leM%A29dc5Y7pYUg))=9ik!6 z!FQ!?9Ld%E;)HdPJAxtb$x5h#cUTVs?Zbug@Q>JrRcZFeHNma|z8pr2jO%oee8wYl zF(`NTq(COHoC~Aib3kT?4jpO@8&g0PV?h1J_UB(T1@0q^>}wdc+_+xM<4i&k_iw*c z)TM(a_+dH8GA`*TEXw?GK_(YrET|vLd45VU0mGeK&jiK%!Yu2`sOPlWb#z)4#?cj8 zV{g(-&l%sV*R=cs@1r~jfVDgH@V+Da*AIb-r>TQ|o>U5jd8mTP<425AbYO_=&s^&Y ziHmBu(0bh24?AS<>T)!>u+`F^f?0&1Hkh0A(HKeJqW`L|WCIsUGK4|OQJkKC7!O(* zuf;DV&a|9S2TyrxMaAsiug7a%P(ZxOtNSPHG>6X49Pp4mNLc@kgS_h?oq5~`>`yBa zIU~cflk&FYV3n68a4h)JeIWmH*ClFCXQVy;CtMiz+&RHQbb>Xe`Z#y61jb<0xmlh? zd_t6u(9j5A#n~94p>f|i@-zpGpHf`hP~m`Rk7@A0{Dc7hVE9Ej1aHr%o9sWszqHK40okiE(hvRE#Ph1) zv+iJS?J2|$pFwWBO&NAjh$JmkJv!zW)Tu`iGd7))~Df$MnD~*8%`1rIm ze<=(UKo!M$W_0V0w7IhOy*v&1La{1kEB`oC4QxaSJp-~yJ`B9b(+A6oxFEIDF}HK6 zFK8(-X*6!s`c%Q*L_Q+!4rPnhe6FiZD%)(?&Wx`Hz(Z1A2vs-qUXL8DfXA%c9aY5 zRLr5vMfL{)0>AM$M})EV&F}HxNe1J2{mFFV*Tl_8nWJp0%KHiky2d+Bz;XtGh|fG3 z0oh50N=!x~AIC{xbKdTH zL3p6hZxUekL@24@9S=drf3o!k)KKOX^tS!b6Y!T>wBv+X!uNzE53cQ2a(wXYriERk zi*M1^>RM-dAd?u>?b#U*gm0=9CO%Qt(c>WJqAB@q=afmgd0&g$N9PbFig%?7Q#*{> z%rK#bJ_2?CI?Q|)oJC_IIud0)psZC|29Q;^@*g>Xpp)zfx-{VL;L>o}rXNaOke>=t zZ7J#J^sA9ejKES}YUX(gKW=yHrm<5&Nm(HH70vlx5&HHQ_CJ!0fZQaDJYCjeAmVRH z_==(Hj5hdY>->Qs8{bBFB@UOu5FBk>Se?O_4f=hjUO2yTsgyVZkA2V+ZC(@o+kGkg zs+;QG3*%mYi-J0ON+X+ic#%CXHNng^J|`{MAUWvyB44cDj6!C+>Zcl#r+(8oqs|0H z*5tK0`1`^m5ULmSqY*89P>sZ z$siC7#a_^fuIs15N^EHMRd=wxoBy)l3m{Vl!~;@hYLnbd7|Ei#Y_d1;aCoOW=;dL> zmiU~c#>d-}3^`CUdd9sE7z!{>PO(N0MXBCl(g*+h@(~958C9Mf%v0O)sg*1jzvy_X z`hkdd*|IigQN?-83WF)q^wx!*+Pp}v$?&BF7 z$-$R*i6Wdn{!Wjd-RtGAco_$%O8q9NGKhTAIJuq!xH|{QkVe{w4)OYRz?yZ+jF>Nc5P&rM*wul zA7;)zjkJeQwE9C%#|VQbLw7=ALA+@k1{!N^WvrcSINg;2gq)E}LJwdXwr$gb?$}$M zML-W@v-|m*-JnMR_uO1*L8lw>?m$t8eUH;#gBcDIU}30BewTf`8-jMUj@j3 zzk2$=a`01ZqioQn-E4r8wFTx-Xn<+;d^+)8P!|D*qX(OQ)LX{ljQXO;dB|tvUoz=k zc1AJ?x_Ouo6!5C7uN;3>!sR4B19&%Uwt&n|%Fd`Oik1aO1$r!Lft6%~GGhV<)CcGY z0p+-Ro+-jT;RJ`5enj26VlD1Myr9f)2JGqMFcYq-4Dw;L7@M&#bp>$wcfp!!Kv$Wryu4_`t~JpY&+QpJxvkC1H_hpIq*gO6@4tn+QX# z^p!CRI(LX=9Z~Xv+I}wRiUwk2SvP;LDG%Z=v{ZB>Vk*ZhH;rVJW%J{FS_VKeGVG+- zM&*cwA3F7t3qJPGffsJV0Yep~oG-{IK-a?12{Fuj?1GrzOe#bM=sv^vaZe|VJFXgn znW;_RfO-}5!O3qbBtLMLjB}1a+J5p$Ko7Esf%?=pa|1ZdT+h1jtYN)Y7Mb*K0$cU6 zYPNBwVRMsuU?y#FOXI710oGfE8MV=0IhujbXrMMUs$j(p$|$Xa%b!{k&>++++_|#2 zXO{u8{UN*e1KTF?nmQq|tJM2E$jvucWSIX~=W_wFg28wS$3q zhbKS6#~38yBusPya!0VJJ}6)1ga_hDR3!q9a@QE`{uwA{#wsmEbDl37nAfijnJ8cM zOw8&I!sZA%P1q-mz$$OC;Zq^?=N?w&H+l8F#Cdfvo8AAWbik2(_BVrK_0tf*A;r=j zS-gy{1@SF#z=Q4E8MScWS8IYARe7O5jl9nYs?_%-wJrJBAZ=Kzx0wSA9C{2+x8Ee<{>}2 zS-&TTGq5-vdww?IlP+M;Cl6VC^n|!sDIgpFTB9!5evTgxQ0BC-coxzFy1`@sSxjhk zQ#GF}Ot9p~Eq)^*X{q54e_6%uiV25*7~ctQmpXsAaiq(ofJDyQA>z&I2z_f7=|muY zoBt_y|0{E?pb=fw;f0rG0Eg1ZW&Tv4jkFDluS>A(f6`EGE*8Hn>gN&ri2$&OH2JXF z7tR*_G&V`L4C;@2lTclps>k# zx!M*44N8YOjJsZ;xDqGZI>p>1QsbcGIQhMA=3ntItnjGB9A-^4T7k_z?BsV)}={KpM=u&4zm0IWp=7tIpZ2sk0IBV4p#) z0L3H2`s|o9B8~>7(&cE5`qWhb+I7GD{HCE|%_6OGaHsOl8XJZnj<``pk<~yjv%f16 z3(Bcy{y017U>qAXW0cMo7&ARVd^?httk$zCI)s_LhUGANX^g^Z0JdU*wII3vV^ukK zp8Sr@#@>y~{()LE?Y^ILerzHBpxvta{5_!;_#)vZLFEq@c!7KR;JX7DO0G-bPox;s zi*X!>ZRrph?SyPP(^U64NGA`WC9u84v3t_?xzKWp^U0^WB!H3T(@ynISz>6u=--Mz zj3LNbkK%EhL0SjCA8T*;ZMPUkvEfCsp$DbD(w@;=P}ubSL@%xr!p} zBw5~GV_ZbHy(6>x0j{^ehe*WVuApE^5un?w{eC%_XDVp=2 zY?Mm+6R=yin1V0~65?e5R>}h`%B_ZACR^5Yv>kCR0>+y&Y6jk_o3=HwG)ia`err-<|P z`erI|gDxAoGelTd4%cvbg`u!>JgbJdour>xae&y~6+OnmD*T(a`H8B|#;BUO!F8zy zcwKnhvAkEN(R>iY(U3PJW_}I=HlqZJy$kZ07uC+k*g=Nly%?YunRsD_IL@2w+&%(- zv^vEr{|+MX_ga*C-Ej}@HG&WQhl`46pSV5CrR2Fu4{R=)6xJ@$xk`ns+0Glm$)kZq zSb=B1Vjq#F+5EL50EKUUUrw93{~55d+qL`JBOgFQXw|?m@%Mu4H`NP8bz=;I12vzL z?WuoP8}2bvIA&t}yCdCJ5Z_T#)taMj*xw3v4qm=f0}Bbcm<;mlR49&ek&ZyjDh`S*T>%sN*=2vOJg0XyC~YG^-Utu#1SJD zQHYFwk3TF4t?oGVJM)!aQjiz{N?i#*zDS1KR5+e;R2&YbXZAWj$x86|3^6K{u1?4Q zG3mE8{)K=VbM&l&g-bQCd1*~$`SQ?ire$7?F2$yVY* zxRuI9V|u#w@e8am^;;^26T(Y?lmvO^1pYpV(Obou--5bG|2eqaU<(-$#aD;s_NIQk zqJZdg!ngk1{3~J?$_Ff1q4|F$JBckO6TD;R+A1P(d{c@wd3K=oh@MqA7P#h38>2RO z#d0I3HEuKMDbGTNr4f6ZYOXsG{|9`i4Zi2*D`lv@^97a?ofcRi?3~}lpAHU))X?LI zsJRWye6M#=aq;&j_Qc7|=yS$3d@g6E6pjT{i`oJim&Q0NdY(l=vpo(OAxjwJ+|H*B z$~c|umThsKGNCf`uee!0n1p;i;fWjJPLosSMQ9&tm)*X}ys}>xV-Je;?6H!hz+>-A z1MqRfJs2gdLFsGn61tMW{3Co#m z9h**}1QximEoB%GD+{waY2^AbA|=p+lW=L2H9U(yErVBwSr9Z($NdGtC5 znjZlZ-;(kgiC`Wx__k7ar}3)Z`40tTfr|bdrA~JfP(`wLMAAb0NWKV@q><`XKw)zm zfBjX#M(l*Cz$+2it@NAn1p9Nh(qZO{t+uL%OF9!)Ce336RRGB;wU{;5I`TF|`#J*c zxCKd#cKYIKC~cl-+gC1Zwe`;lS?nj+j^?BY-4+RMct{wT2z9)gh4kN@i97BNhfpr< zi$Nz9k(-N!Ht2U!x*GBd?50?=e?r(n*;pF?o9mcUxA_)XqJEJe4lOT+ab$7rmsqkO zi?N}z%D$_x^L#JqukPYd1eviFc^Om1@%XmXkvr4J8dy!Z3zq%JpdKfl>#@KtPWabN z-&3YBi%Xp8NO--;=?b4sEe z`+e-8?}95d|Ko-ebl~KTq>ronG^pYTJ~es}DZ0}edluqo`$)q+XF&tz@Hp+1as8z? z(v2QA7l3x8-N>|ImP}%;B7j0}WbnW#{iiMAQYqEfE@#K=jDOB-kedc-M0@(gC$jFm zAa+nLE7wYwGW5*y_mF&C#i{EkYf&uouR1v_F>(DLB?iPKE)lFBdCsWi40671ab)8| zinBjR@N}1Fax^=O5DA_7B#bzyb16go>@m)Iq4v=#v8&&6^}xN-P(N%7VwgYCA<^_( zmJamS@f!l*p~+s&6U7ln`_lB`rH4vhW5x3w3rs12c!w@8iHn6#^-IiTLg@WK`=m>C z;__M8pg5?NNRP9kfo|M!R+a&HcP5__c&745ai09%Z)}f|F`QBwT2BCF_NDGH!@!5+W1X&DjvnB8*rp=!N-Vu{xD(x;oQv%+RsK)u-V z>3d83m_W4tVh|S?dQ=J%7kUYZIMj07^OO*%P+AFXu8Bh@2OMw;UpQJ}igwAHH0pfl zug3%sMFTfXK3a%0IKUa3_)n%yUbuk(s%@kGs1ohyv_%;8T3Se@pVoMc12kuLj$yf+ zTsz&7+l+0B*)Rsq2AA?Ehup3oN3RUGIDg4~{cME{+PT%FPUQh0`6;0YebI`ufA;cT zDb93xBka#pGMEY`v{LcC%f4}eXm@*grVh3I+s(To08SH<|j(aSx>;dqW`{x?NgF8*UUH^V zA&8f9NsLBMN#Gm*DK2=T8N2M?G>z|*S@tTv=?w748xOj?_Q-4#IuE@e!|b}n85~e+ zAjfxVny{|w2TW;Eq)E3~S%=61DwoP%V)<38P#7BQmXb`#F6fQKdTpi%S;Ne(9v%_| zX!?^C|NfACWiF%^xEhSE-O3$7yT?410Ir{QwPN@uNx*34B)X+|g#VU9AG~gJefVW? zKs|Z?`pqymTs#N=DnJg?S)z3sX=a5Yw7$YKu%33yBI#8YcDKK{*<;sQhEMJ=(lz)~ z<7PsSuF%!{tWSWVVnE9tiE>51&PvW&DU*Qu32g+rpC+Ia{y3}}(}A2!LJW{$;pBLP zOK&nrg%=dkHNan~AXEsI!<0=CvUd$z7Mcnwx70v0QM%(mg7uK{CE9VInBRzlND`Bx zXo9nOiB@%965>(sE*rFzMK#Jv2{l!zV-C8dOuv+@!`LRKnTeKt6*OMEm!p~T@x9eI*Yg4O=Co!y9DE>=B+Y z>Fc9yl)CcTpGczYB#!wM|CMG@5}oFP>h}g99(bPyI64t{ad^9a!wapRD3WBXln@fb zM7f3?AlP!2z8-=IGYZ+3(FseJ{glQd?kalra!LtlPkWT7`HQSY1bvBvl=VY%av;NI zut41^{#2|>xenNMq>WE`Gc>?L6a3dak^YyVmGWY)iCo&3}-fDQ(kS z2Jok&*jeF_$w5AN*4YPZOdzA}PN#UKc*IvI`2ky1kJ>a@s4{W8VCvUfd@yO#Z$T1Z z8Gs=-TYkMWJCKyZOclFC^MazqX#EeO{Ijh3(!<8knc0#3ZkV3EJ@#vm-6QtLz`{6>Y*Jk%+G?xI2XEru5ubmUHAyzf7`&HV&iW`7>@1hHA0aWC|--Y0Lq zr!p5rwqKpfAZvG?8j@pzk^T%`W)2F6Mg}$^h%ne}u+S!erlXW!wSCXzvVAcw@d*qEE=jugor|v- zCP%Yb9kTJG@h0X)#8eu(KZ7R6?951S$l5GDne0B_C`^2LH#k*)#C!5@2!@ex3Pg>D z_So_*ZU~HVql{3G0s(X(o#M9c5iBSEJ8pm$Piu{i@^P~>9x@x5zx#YRjP3bMQVDJc z;bRq{aQkH=!YirnL8q1Ck6y1iW-ZqqV*yZRf2f5d1T! z==-$-?lrZN$s57{OCFECqZ4`}#*F_MWc~a&x(Zl6 zIv=k+%){63+GBu!dM|2bB@u#&!PM;d*B(iWJ?g3_p3*_jKf2rJloJ%*)w<+rs%oI7 z_fp=*1MJ#(FqAthqpST@t)v@+;P|^J)1e1kU}KM1-LQ&PmTqORqgc1YtfAbA7oMpB ze#Q=3_Rf8NCYCqyuTl+s*8@W>qVDj6-g01CnAxI}m`(wzkmVlroNk9l@z#+iOwOyb z6C+4J>)li)Sd1_~VF#(WaAbVGx4As8#|#H_Y<`qH;PuKPFEP*W1hZl9mRhfLkvUV4Ep}f*(xgm`p~O84qFCj zn!CiKu(i|hW#vR=;7-k zlZfYOOlERHE&69Zt}sE0p$TuIHhbhRDJ~p=nw|P~79# zOKi~Tvz&HEjr|X~A)7QPe-{ne5k>k;D4thtc#VC{<**U=&smhv5q24IuL@@3W%X6d z*J1$D>tPbkC-E{U?tl1)WlsVhonnP%U)herD7WE?X#n}?d3HEKZc26k*jwl4BMV$` zo@|^WQ>833zN^PfY`&ks2#Nsmko16ZhOp0Zz#85w>2=s(jlPP?IaR>9w6oxYV#cE3 zrb2ZFCvVCOoDfbfJ+K`k_m@;(rhIZuG}g@yJvpW;L}*RDy?S?R`$3`zNcWuvlAg!x zM2%-pVB8=4C5T)_>`ssu`6b&2XRJ?O24CqfSNs!(329=(>0*l);VQ~Ib%5U|FtNo6 zBtM+4%0L+D7eFy)oufIz0dLmcy4jAP#_fZl)!2<z(K+y07e>vW08^wy3M_b}fjM0-*B4c??wmW1L|= zs|C5X{?E%n%KFBHsMcfk8MZLiYdZ3PlGUn*Ec=>NkB(;HVE4%|%u}>?K1s>Rl?V7# z+&;-}rjaQGRnj7Oxn-ctk+60_W}xqy4svwc)%(S2`%g^qPLXb)C?*p;Rej5m=jJ3q z(U?r;tC6cN>w>BcLhq*~exR+6(B4WYLy{`|spBor&d5tS65_bZz&PT!&tJF3KI>DV zmGLld^=?cY#>_{37rkn0VG??`{1W&;1_f$1*xyn{_~eYJV@#HGTd*G z4j3nVR^(0t4z!VzKG)|VgQi#S(?CL2f~yO=fR7JV{a}PF5qIELdN*dTOE%5vRZuNq z_kSin{nFLJ&TM18Qln=U>EjuS$VXMd(0k2v--mzKD=NGn{9(D8F_u4bVO%mSr`f@% zuKuqq#A?5g4Fo_s`*j({J#R02q>H+P-dKX@=`N<hm$~!VcepAtFW}@LHw7;S{e(9Hx*p>mG5y_~eEpKHplGEj%?>g$qL|eA%g(2_>y6+Ea zU;$e{|3qF>N0Ice+00LnVXp_mI#+&j?Z$*8=#L-UWu5AQok%p!UOOP|mt3UqtjS@B z+rzWbos)_kb#NYS;)vx#%xx@pq%#H~B6UO1oR>3As>rB?|II(7Wa0ZE!MA6_bKeXS z0V^`7Im_cR#!~hA%x_kDXsz{K?G|p{;#T& zwC`o~l9e9g%V~~mH4p5wG*bmPozz^6xsA3$o+~OsqC|Sn$dCv0g!5c*Y>c~2pc*H@ z|4iB6Ow8x1GfqY;C3=YyZuh9m0t7CKxFx;YfXFNk9zvGlM<3aE*m}_mnFzbu5dAAf z?Ks89kR|Q#>%4JJ0p=CawQQ+APMM4o567HGWINezIC4!keW8Bt^eG{RH38tCzHcF0 zjh|n~y)X0b4Mm3!Q?}@&{dzAq3F2Br#r&Wb2WgI|8fQn|EO5e&+DQ4k2DXRXw9z7+ zJDmOE+4$A`#ffHNQU~F8ntEO7#vx+R{F3tD^FTwe@LT> z10*Dij@Y*wH=YFL0g&hbf;)#0WN}z)!`Fwy{}SUzTpxB~L>zWe0Uoq*fZGqV;;1rG zOFm33QDc|dFO^&HSj~Bo;i833!bBJe5r#zF?46JBTlI42g!b7QbldM;%si!4LXoE#r{0LOK;pMm zv~PWmDlVtKk{%#C)>p?lr`z~lH!XORS})8X;(miVpt?H=fB|L_iT9xbisFNRv%jy2 zjOGGy947uJ+=;g&OM@4{id&Wla_hiO&??2q%ZTcKmQWuwV%Bl=* z!tC&cv-vPs&dw9CB)Ws=)U$i1^ISjDNco)w7K%Z4c3bF!7gyY&dd^kfDGydg~cCM_M=}kh`@^q)xaqwfA(fVDnGJa z_huGmdkA7VG z?IzNrNHwgmaSFd!6oY4gK%RcV+1D53Deolm@XIQYx0e3Vjbr3$L5RPimL>)u=}%rw zald0hwtiQVxlM0H+%|VNVJiO4~)vp+we`s$yv#oUZ zV@s!(t_^fMQHmo!O5qM!VCFqwU#qDRhfVDfMK_O-Z52a%Sh!}ZWS!s_&W7a%g2(^T zZYlkCof%@3YH$d_S7Ot&W@JyZpMl<|&7-(a-e05z(@bmz&`z>1v^+z&ZaG_!gWvxC zOD#RmbB{V7JkPjjw?rugo%kTr7nAKx*s(E*vJip;y^0E*A$itr5r}q#IrksSzOEI> zkaQe|stP_@`;nN$b{#1y2!gpR3rjAEmgjoayl`iJo0zIOV8!Fs7gTWmJe43}T=#E^0q{_KLiHi}&Cd8YzeeDh9#93Gc*4EpBU5=*-R|$}BUSYy zqxrz&`w-L4Y0gG=!`WS#j`0NAj_fMjdn>ihdxnX31!-Ili3`Cf<#ixaEWoI(b^q!IecSmY*lwj+C#j zD2=NZ_6Pp6r<~qW3K@P7SpKm*rTEUKmFUBCF|ZP!G5#eTVw=vA=Sxh$`80R*_6KIb zd?0ON8d2^2iQQEqG*y8Jhb;EPlEnRwi(N!52NP71>ZQVFz+=obad6zc1v%0&G4F^$ zl)}6PR5Jf^UwfS>!L`R z9C(+>5~|1#iK-iWYVB-z?s(pBIS}c5Y6bJ}awz_t1zKxUcX%WXaL*_qW&QR0@U!vX zOpE`b(3_Vlv9ckdB&A4MHWX&Lf%&_tqdmjZGA8ndiXt@IW<>|ka`!C(?~%QRCf0mE zeY}Qg-(qUG<|rQmWK$%JG91>l=(`2~Hy)mb5d{u~(4=rYy*-r*G9rCSY^q zpr8$k5C3t%8#TbaWY7g+%+)FXY5R%^5qQtp@2VZxZi1UiFdsGy5pb}^KnJYiCD(r(|^cKM3yEzA5%RlwGhq%8h4KD zk*aeOa}6xb<(txaO#A;iM~pQkFV5lded1;n1H83CY5+(C5TTL8K zVCluD@W^*l*jd_q%!~`2mG-tszpsuU{hOHY8CLslPn7F_azeDz8D%`sw~YJ7Iu@hA z;(Mv=)W>nFYi}FsZjv|6LO_J%k9NeW310*;_-^Ll+!@BQLbN!n1kD zkrKnzl&6HGm(Q5tW3LHsxkPiqop?d-cn+rt-RJSBLo^I(s(JD$Foi8~+yB%ef?rV? zvOg4h-ZUa6j$AU!c{k!EU!JkK%IKIT0x&`>dDPI`kQ@LH+&^=H5BL2eS7Tm0?ufG` zEDy~)yHoh@jSo}i&#*C0c%j2-VO9lhrv+Eq*q*&;*xG?IG!t9!d#KA=GKGw9R+}EU zr0ee*H%JQS-$xPvxlHs-1)1rj{djN+o`nTmT;(ghpP(VPlb&d1eP(xdyC;m0^KwK`R>l-~k5nqj#NGsKK3<2aYoKVt{f19p{{K=DmvShu7n zP%GTXjNJK19#)~rh9c6j;E!fO$eQa}ej4tKdO{t>Xitlaa`wEqf4Z%bm&{1F!uZZ| zq+$%x2u#YAC=@Rq;DrZf%8Z7-QFSKmX{B}N+kH)_V7Gd@fzF`IiTqb7K^xfe9HT(} z7(MH?tPu`r!8|H**hnma?XJ3$!^r`a`rEJKVV{LDFR?Z4j?Xe*>0Sg4mA1?6G#Gzw z*uAfkXKKRz$C15R-yJup5I`Y~?dQj~#47jF+2hY=?+dDnzEiahV6>*#vmC;dxrM@k z4`fcGaPRP>hUm!%TsNm{5>{Efr^o9WnxC!X$t1dVX2K}TT_!scv9IofYN41~)|z_4h$e?Err{!7elT$9ckcT9kxrZMYqr0Jwj?icEMY4?qA z;Bl(`{e;&}5*aRjsj`O3u9%q(FId!GeG>+@GAyE z6yxRZ@2nuW0XR2>m*6|s@z~tPa;7TT!8(T=O%|tHMGpyQw&ag*!B9LQ<&CK|D>-~Y z$%x~;oj*fi)@KcpjL)2K-OW;fQbP+L$7hD!s+XG!1=}1E@8$IWD8y;r7jA*<_ddvE zd95-q_Br3tYpb()~nXl}r%V5$4u{Zpzxz6WaRxelCoR{_^?@PG9K-c)#Ad5zEQIVm-@5XG;x#+B zeg*|x?rE)8#bd6{enh$8~-;uMv26{eAM#lzN&qi0sR{ z7>m{ltC3*dK2UxQAbJW*J|v_jEqY}XRFP43%Qzwt9Y$_6IWe5okhIX;0w?l>@JH^9RyZhK&Ss-&+Cei@YK8?V z%ReAJM5{3Fv+?e#Tx@um3y#4;D#uKi{f$)p{(dQNs(tpAYgxt(eF$zXWd|2SU}*Zn zi`SB;d}-{fSbBURZ;RE{DmYVk_}=xtkiE{CKZDCIxc+zY<%b{4sOI1Yd5y>i&%_Yyk3h z(qOBvZ*363_i!4xekab)=tPsjYnVa(eOQ3HuT1i}|MqOwHrKYq;CZO!$FSsB-@~nq zz)L&NW6NLIL&El7A_~WL-$jL@CONaF*h`@K+EKgX3PQ~$t}b)iGE*8vmcM(~!kI{D zu?u|f-;S^PD&4Z}ItCay9AU<<8k5~@<5J@sQgs=qX0g`!DUz$6rVumpeEitqIb*-? z?NTFxrE*vYd%v*+I9gaSq1u`0v?jOFxet+s@fxdfy+oZb90+eW#!{AaGqr_kF3bhIrU@(nJ8Xdqa)uQ z-W+V3$4oA$HdAj`|05Oh&L*FcOVp&g#2dt{Xl(qaERE!!G1=ccCNH)H*8}m%LS91Y z2T`9*5k{?6va0i{*&GMNB5(!eEA&*rz&@wT@xW2Q&}b_wF@gRo^48n#_qe9X;>+iC zkn6j{9SNUW|Equ}EGa~HY!i^ip+Wjoe$^vFjdptwN@|t_3D25>2`1G;o=W~kjs&l@n~28F+0h=wQ|&qLV>mX zL*##9dde9;8B*~tBL}dK5$)nBxLf#n(adx6J!;R8z&g^J>)kkK+)xQ*5uB&%TX-Y# z;>Cy$C@t^Cg6>UzdLwK_>{Fem(6Dh5puMO`q=SrZ2lrM3I>Hc0)dv8>9o--spq!(? z7{r7Z&S}MNlzCl`|3s{0n>j7DqTYWtG?C9*#$>m4$d)2YA&yHcBxo-hpF<`Zv zL^QnAXC$svg`6WPy}pLZ`YtYtG9cjcAQexMVCaBf`+ML!FQ)eery&>-TtQYcYRnX+ zF{w4hXQr(t88Xqj`^2aGyMol{i3N7uSz$4NF}eEs$+&rOE;keYL+Z5Y-WE$Gis{QV z14F_rankj-Vm%9sZrl@#95EExh>oefFAQtLxq|A7DKUfi&uCm!9}~J}e7f0!sK4FS z_9?lhHSC6B7%nrm_RWecka9qks0!sB&^)abq>+H}X7MKGReIE8Wb(1!Q_T*wT_n`_{pdKDn@LRh-%NCV{n5+9Di>zUS%%mpdP(09 zFiA98D!^^j(`ppnU=?`|c3C>POFQ{Co%$kD{$P?_mG_qXIZCfuF4%slD z7z<|qJAx6EzhQ2{`F^NJpw|4|9mD0;pVR?X0Wzxb1 zz>#2ZM%p@?<{~av)~EANRhB zKZhA9UYI-e$KXidUCb<|(Pj7|3ePy8ds%R@l)}K|)Trbck!?8Ch{lM0=0)<#tP5d{ zIoGClJ9HsRck1nJ6~sR|ug_ShkCBJDJkQ{VaJhI}W+*?5ZT8U4@S>73zyPsRk?n){ zF}SuH$y{~vv4NPchYzh<`(1ec2uwE^?c}9^5Z?N|J$E|=uOU<6SbTOxtAHoD3AyLSQ0MGO!7|&} z%^F2dqfC9y)+vqZ^Aw~~fr&)(&?kc6QiG0+qrD}W-rZyimDSVxDN<_fFk5aPrBG#W zdk?Lmr&Z49)d3bCYiGbW6W{U&HY?D~Lgvt)%SOCWBQ+5`Tz^lE$Gq{mt?T|V+)?dw zEI>C$qcR^iJi9`6TIWWwGG{XTD2?FUcAycVLpVvtf7%+!I>zkr`OcxuTI6G=C1r}} zz1Gj{Eq~lP@bOBVT<1bs;v{QUDM}PhZ)I{3`K=KmQ*Px79Wc==zx`W)n&^WM;X16a zR*R4A6CbT;e@7Dm1^j-@B?Vv`Yh=&rxG{Koi=JB~zkbVByJ zvPVpiOqc=ck64Nq@1~nlfo5^3N%5z>U`_$2-9G!fuG{m>dHangZ(iyLWeX;k;@Y=B zcJj!MO{u8x?ozvS6v=RwnzU{z`)xUouWpJ>aty;knkXGza;gD(s&WnVqc=h^dP{0LOq+`7wK19~DES}~~Lh*~N zZgD(*qr`gl$MlX8bOTPNB%QH`?A#!37rnFOc~5xMDrXTm3(hrfKKzzV z8~Yie@qSDY9YA;$3F;ya()#jl_UGMC1uw(0)acj)haoTFGI;Or2d12TSO-LHy5|yH zNN@_YgMa3XCG(IY(g;NGSs=m|r+xT_v2=SBO+p^ZyT43sZj84(8Rm;UK^D$a0U#y+ zqs_H8x9hxGGDy`v=ire_{_7U)Roa*h09?pw=)Fzvsn~FXWfStyw>&&$dg7`K z{kS*sk4+D|_Es(=X4#3OfY5@boqWr~Y7b~tttYS@2PRYy?8pjy+JEPk{KmbhyqX2P zJuAn{y2HEseO=uAXV~^{Zm37zv;PTAGv(a;pM=$i?X&%>6U_rracG$U3ksJyBNKK+ zE?E~ilq%lxv;S|O=2)FBy@=sAsb zHhdE=H31m1r9Ek8K=*iIbgAKxHPU4sRK8E}%+7o#*k{PHfO0qnYbbVI`V_Zguh+q# zY?H0Dkfjta<|8JMN0{YzEcpHBN2fpUXeAzfdBdXVHjh7|7@^!#!`9^ppn>Z%Yc+!V zxina|v%lrh$US0HMoz-%DJ$=-xNEJ3Ptc0fMsq?g@i_pH5Stpj7b}YJp&%n#jI#Re zvI<^Q;}|4w3bBHCTn#pc6QqcrXZ+rMl7k7#AtqBe7=k#*=l`Db!7Y9Fo1X)Rv8fol(t@pB_q0Yr4;B70#b$S0-f{G;u#{IP*&O+J?z*TjbA$TVDXG zJ<{l$ftWRZ2X7*7x{6C;>&oH%665tg7}pVFS|oxkPWpy<4P;aX2TIW%TWKGFak3~~ zsz-n3yzU4oga9#h9~Okz6>R%?5p?(B2o8gGC7P=N{8!dd2WX2tIxo=$LhL~_ zvV7wObLC2+dvbJ_tnBS1q%l~dN_KcpeRm4U8Z4QMiUjjm3$$==qH+aR+z^IM>4%yS zpE^C-WS58Un33#9A9T^9&eoQTdbSorj>!iP2|JcOLZ}2>w*s~u0`5R&!90B%oK5d-yYYbi>c}2 zRq9~p;~CgP?->scY`#a2lMTNyVkX_@8Q!D#X}uHKEW>pY_`tHvBqX%7AQyhdws>ItH1j>J4_;rRz7d)t}N_0a`-B+7ML z$(J$RZm}MAPU~z$#243GhMmdDZ2h4vEC?mrUri>3qb~_R)wR4<5GLu~#~9+?m1n%c zgZpTrE5fcJL#Eq{=G8A0{@$U5%$hH}qbZoZieia}6ow-5ltIPzfiF2oanu>EHOiU$ zF`NGZVliDkrM(8j?S1VRY1Toh(|9t5N5V_+ExT==nqtw=#gL6#&HP<|`}EQl@g)t4 z*gXTbi!$yrk{fU8RsAg_d+2rPN@WpHJN(InB1e<~agZI08$g<(BKCKzW=Nv_F1>mZ zp~5*hT)B)Zp~<~Gz(P8wH;~nG_NwN6wr95n>b`1SMq;<~!qQ;R@P}5&_VBI#IjTTT z&v7_`AeERF4L3BL8N?Gartfc5N*up2pq&Z7;ML`*`M%>JQe{(RK4I3Bn^z7NKN{J} z_|!8aQDh}W+dn1&zm_Jxm+h`8QVInv*<`Y_);n(3U2VZh zIx%e|@g^tXJ=%_;`P_WQUq@>%7NHcZAx5tBNNH3*v$a7`T|+OV>WooxHmDO4L#0+afDTdINXN_1!6b8osq~*IVT)`VDT7e`9o3_?ozjud2#ds#c9N!hjFQ zP`BAz;)sytLe7dppZhisa7()lyN2+}N~?kcG<#M*BO(G;+x2Dptyv@%dCpOgNTSa(0wb+<4yMOd1Atv9aj25KK5!c0o9>y+O4L>0_9MgvP$p$djom8 z9~7-nEsi9i<%wSTZ|jutAwCC=bbWUr6PTx7G82mMNy}8(U6*|qSRV%xBk-n>qWy2Q zZ%>P4t(hg3nT;=d`&Jp4Vlk;o@<)}MWX$H zG|7vZyEkrh=~v~$+vMsK8%K98HXlFRxfG8zw&Pmclu2<*@d0p9{^ zB#!#B;c;ishU*+hgLO}eb!1Dy<`q&OR@Jd3>pizmC`CJ3tb1-KaYsfTPl@mfqNN_; zH}E9F4O+M%Ku)i%#%Kw(-OFZ~vF(F|j5Xy`@MlZ4YFa$CTe#=Jcx>tmyn(2$eS~yx zLPuX)>qW%z@{KP2(W?an6we_Pzq>3iRD5D{`K?AW@fY4%B8TG_afu$%=OG^Za~m?R z9Xc;+)Wrr24Y}(l*K|RJ45?GlLU4l5Z39yVzcLTfy+ISbRl@8PnI&jmcN4(Fqzo=_M&0(1^n%?Z2#@3OpCa=>#Rkzo349p@|aj!h0*72 z#9UL}6X3o4`7p`BHHPRtlAkJ~^s#WPpe6)l$HWWT_dV^avZB0sXi}hp?^m_w zrDn&CoHv(rU*!G7?(?(dAi>m;nFs z+Z&_KKhqC4G}ro0*F|TKjB-0uMlFI&6}BG(KFy20yX_!eZR~b#PY7`K<^lL1Cg`@) z>`w>$y85ezmEv>VDy@hKy3N51crjm1WBwdk#);6q4)SnEvlcxRI6Q>oW#1;>9xlfI zVddEVu(v12Kt-Wv5Gyf1vB|mu=Kc&WT zhuTwuGA7@Va;N;11e4Y6liIuLZj$Es?Sp#wDIqy>-_ij^+VuE}F-(LqknQf!+8Z(3 zxa8^+J9&6JGO-VZL&|&0q4`mQZ=m1Eev`~H7`csRpWGfinNXK4Uo`t=88Yk*Vy7T( z%F1iO3M}2KregBroi8sn33qx9WYC8NMsD;j8cO(aCIhH-G;=AEri(i7i0p$<_IHcPe+wXvugM~AMw@$`BN8xLHSH)6APOw<4A2|Qc(xp9O@|) zn$;xKi6Fsd2r}Z3>Zbu9(+Idexqq7E^5nY0ODqa!ByH#j_bv8FK5?gEBx3$Uc36I! zt7m_@X}RfF6v;&D))m4|ankfMTm+qTrz=&K;j5cGE*J6fd|h?&ts$XCUmq= zv#&2kWv4G%SCzEBa5qL{ngN^7b9bdC$r(BlJxsbDZ+h8feb^#jGhep^LKB*-8PbU0 zE70L_;}2WRmz+HPqc2u%P=8>l`22(qumV@^yW7tCiJz!KP@Vc2-M$9>^vG|^|P zkkSW@P=4Y2)FY8p&#JdO>P`MVkZX0CosJK8Xq9|acOE?VN#F2-+?gJKCL^<@K2*<@ zjIRuds0!k&v8(jca_3#Zndi#s#R?h9R-Rea{6ox?y}Oz{Y`o4Gcb)n?i^?}wKN`OL zL(STdApJ>XInJkX_7eNJTW*i?1@uf#W?FM~FKI-4`+1N=Al z-un6XSe85-q8VXvW?Y0RMJjmOyF08X(iLJ36n_)67o>jAyHScRrG)XLSB277YEw;Z z?{fWp@@ZJSys?;w!mZ7skc8Xak*kbG6q)bL+~Z#3RyNOAB5CZclUjm1v?7@9W5QeZWktgzQB{Ut7Y8 zWOYy|`+uwU)6gd2cTY}@8v3T6HCC^elJa^J@Geg|$Yi(Wln7U)Ux=QKW0GYZNz8qR zWhA-Zl3IRs$S~%PAZx+own<9N_1Kc5XQvK$)QpIZke!BxN#!^Ur*5iW5w8Blk9aSY zd~`DU#Pk4D+D+)@C#w2Mg9NpLAIq|dH6}(|{3PtWStlS}^W1$n1xs>|uN$FE{~|SL z8u8WM4*ohWy7BzWBIK*H>YI(G;0L?iQXwrgx&$~|m4mtEo65qZ8Q6^drvqzswM>n; z_r+b&ht_}})mge#MHb@=vPn`}Kg&B~C$FTJqlG&4_5)A4Kf$#A>X~VlhDg*u(?$pi zOlhI#k!|u1USQ?THe;>jV#$ym4P;p41}P$jWv~``WBJVIYO{V9%OR7>R$lz$y^cZD zd%EbF#{b))Wt5V@am9`7u&_kgeLfkZtkj&>Y6~;;mC zyhjUV!7BBJLfxWN=9y~zS?|2FTpa%|uH~yD&WKHK1L5^wXK;Z%aD&$P+2H;21s0uM zG%gl&;YkHz&Fd@5{NC1et#Je;?3+;#ox0VyeIA4M&|T354X(sKNe1pJjSigQ9Wdq3 zug1pE+=fqzBFxOxL?!wgBP9_1tv|C(?aah6(D%!<51$j(C2{V>L&y5K^9O&vZll%M zb(wZlDs*jQkM%X8301AaBJBYY4>5^MAC8XN5N{NS4e>Y};M#Zi`?KnSROdz%X}W@joRa1S53oq-871XP#lpc}QkjH`WVhKi&33(R=VPUt7d!_)dptfv$ zV?O8f$bcANxZH48{tkv{OaeSu3MC10GKp44Bk27uuFY~+;ZPWR#wZ?6p>ZygY|fYL z;k5Kh*K=-sz-7_;k?~VgWc^DZIq$n}R;3f}rHwUw^xm=B>QM;c9vb9pG5WDH1@SSm z00Ekkj(qr5;r(NJ$9T-XMFnz;ab<9;zPNyJ*LFe8&eb|NR$*nVOkZ}gUe^6FG31C+ zgU_p3Vgr1I9QW2L!+3OAHDAC2icWqSK4q4^%zsYjW?kCOwnam_!McFwA*Do|9e)-Z z4GDLpc<5cD+-^dbG=ZC-i#W$?f(HN)xe(CJ0Mg=eQkz_^7jc|8G13_g^2N%R0n4Wt zrjL7ncG}4dQPrg5mN|cP#4w*+F3a!j$Cf28MBM7fwEF^{S5F~a*dFB>-y&o$RjA8T z&zX*7-EEc{XG@zO+5aX$dtVsRN3)A6=7i*1ji@b01j2(5kXXOppN?tIr>IBLc$6QF zBt9A$>JGU4JRrRD9}Yo5bhW{sZBQyFw<}0fKT7kyC9fw(yxGC6*&3&x{7DcWpfn5C zTSVzSFmP?1Z*!>6R<0kB`1&i`WAv=;*QYgYhjC#jSHAq&q*O!rxTaaohv7MDvk?ak zosnerZ&Ho+s4i&;uslHNzkN6|Uv!-%BSY)%MB>eP6I7Qn3JbA`g_4 zb0Vr4dN%Xh)~p^?BPt)+R#OIP90LQA`3J>Umlsvj788~iX(Z#Z0z$Jj3>kJup{JV7 ztDBcC`);8z&RbZpX7xKp5TQm*q1B&7J5r;={K*G8N9=R2LDMz{{TVeuvIy%5fKe}* zI=*}#UEEfe5Bdh>Sj1wDbt=DvcPK)XHp>OVaBYJ(`5R?cmUW2fi@dX9{G5>5TcepP zw;8k_4CnsGDltk&k)9-32)$v-A&VdRHk0b>$sRzPXYCY=2H`V>vB|ww>o`8*cEx>b zh;ZiwPrYUG^tZ=?6AX%a9s0~)@rJFwmgL~^e%Y|b8+=cVv`3HaSHJZ1jH}giSnsk) zq@1Ano7A$)O-H2ork4s)NtwgkxuKkvA44RPNhfpR$Nq#Mbmn(*xQ5mc)4Otcm$)Q# z8fG{+xHdNC$Z;Z=quaPgGo%c&*mXsO6~5JpgAn1nR6H$W?cdDZIpgD^7f30geWrEcEm<$l%;JRe5d=SDU zF`5_8P|d~(d~ToOgvB>Wv7KJY|39D3#SldJe+p?{7GzYl{?qgSzU63^*Kzv}tlqn@Kh zG!q&$ghf8(u9!i0NvSag!!x}@2{^a~!KF0>xFl>6-7m@wjc|c@Fk=}|-zF^(j)M+3 z78wQ>>O+8&=?f->-S=;fH@yDYjH@Dkk_R=tg~0{#!^A-QZ-H>HXO>1H|NW=34*`~& z1BMgJ0@DDm2>@`B1c1I^e+WFBGb9K+r2>MZQ3l}x9-@%p`l65_;-debh;&8#6{L9$ zJY$l%&KuL1kcNbR*gU z(1O7oiECAmBmHv*7S`V2-DneWDJh<2m`NhLIxAcI-G=35DiMx?+ddE9g?4s+VoGe;R;{5v;3R8On8_=p!B=SG1T{AZp;O#U}k0;PM_`3QT{`YVkHWU*v?1H$r$2eh(m6;ms04G{4Y?Aj= zn5BU#C$JIxvvB+rP86RHq>0d_;_hm=UEh|{+tbr#Sko`u%YVLOpTYWXaZy60pTng_ z=`UKYA|9;}@0UWV&llGEmy5BX7Bc`#T;NVii&?$=oVi+u*IF|r@VhJ2Ia2xbiuG&7 zRY)E77n@KiVg4MnEgOpigYv)gQ*v8Q z9^^Bht7MhkX{lDz707?Qb>Tl;mVs_5=-x&TP z+VOr%A{V75X1VT@PHhSXn@xte^?kD$~>($)$3uM zRLxIWIZGrEO9K2Op(46pvk!oFL7vABepZ(%UdXV%9C`gU;>02YI*h~%g(8ok^}J?l z#xCt9dAG%J!6ia_%5F_;PYV!UH}E#?LV2`RU$v8@vyAM|lrS`C6+_a!R8W<)PlWf} zF)Od2?e)&OMq`XwHd$>p$m`uO4=={w*%89E) zT=6q#3Hu*)bHl0U=wrqb4Sf+Y*Hj z6F%IH20m}!@?e+M2!nKQ!oyyi3=Kp7hZ-;FTENw!yzN_cq>>>~L3mhJWwrHOb#-q; z$iUA*Hb&Cdvy2;A_GCI7JcthJA)E_B-V{b;_poG(DE{WHM-%7l>T`4xc-QdiS7Foi z1Hgq0YARr)QCr^_DxmiW@2D;Hy~bI%bo1|d#C|QYS6Scs$PTb%HeMZzfKm(|2CYn8 z09EuLktgW=!s=H)6Sed)+gE9IB>!7`<THb1Gxvm0?FicjOJ)QtzP^_ zcu>8cEyxkf*-K~SbW%%0CIHgxv#ShnUr`M2x95mbsfv(Je8PfG-hMk*$gDey2(!$7 zQN{7pM?nLm;e{f<=H=UFU^y<(8_!Y8kB)`aQ-JEY=$76d!9Tk7O&yb3k6zp$rpY9Y z>d(BOj6V_f4o2@>+UFO>58s-XeBN0_p6TZ2IQyJg2j3g4`J|IH^6JHw|Muc`Qs8Ad zH0-Yecrnj}6M4@Hz1I&0AC`r^s5f z@k*oz8GpkCzQ#f_ISoj^^N+)CtLZ$Q`*r>n)37l67;@mC4-ciuMtatc+o#I3zu#&f zGcLX`)JI6eX1S@_P4LKME?!5i;*MX6EJMU8|oe89qyg!p9~H#Cx)Qq6*%)m zbD{GCit^tR2}<^B-t;I{wJ_S(f5_Kjn`w6!&P@QwN=evy3a&YFCX4ih0WzKv?3hap9KL>VVAVxUd0oT5Kk$ec}QWhAq1w4w+C=oK$n?8e=r**1k!Cs-wK|}X=Df1FfxS=jubNXuq*Vvchr`Wqkli$w`UH$c;9$nkZzg$WxkjFq0H0&E8H16mBoZ5~_L# z^}q>#{tGdw8xkz`f+Zk#={)faGXd>B)z5hJ(=Fh}Z&MHhzNYVY{&H>umrg2-eVDAm z1!3Vo^l|? z!v2RZ{dD|37&y?s26ap2#W0o}#l-AR23W$JfVw8=!9N9x{Ez?ev*(-vp*D%nSs-BV z`>9+A=P}F}<(2y^rJWwgs! zBrcSW7^=+#O!`$*8y(iGJj@838RJp1#JkWHM`8wc_ZO?ds-Kwt+hMr^9Hc=Cyi$4< z8{0Eb=@9ciMG%z^M%`BE_Dn7%{PmN8Z5;WQ^F=q=s$P zN3Ef13Vip@g!UKr_q<-~=XG6DJX!Z5(U)KKgLO1L{h6+^{A1pLAexQk7jRnY$G_H# z*0Oi;ILg(#h_5z1#_-M3o^+&`h&$hnUvFduhEKeHiUwM|ScS&}6zm}L(F5b*DqTfC zy#_9`CWtQnqr2tTJnzg(S^{dx7u;a&sbCeqI#L)DR39`SiF^_GP9Ao$Y0=lim7Knm z$a1Yo++S0kZv87;*)k`g*?YONiU@#m5za{rm~f~a^uBo-*f>TDc!tjhk`qG{ksxHn7CzAhVE*$UQ%>RgcRjMj%ll@&dG<9%2w4rR-Vl2g~K69~%CcH|3bp zp#efc@Fj@-gGqIz$ShUCDOVehOzTlR;SeposyhjSf>i~X^#%!dilW16WI&3;K9%6} zDhX$guy*7KKH@#!cLGBE{42ilZ6AdHCU|u%8JW4@EM!Q0@oy&^uQB$aR~Og6-EyMb>_KU98|6U9t~We8e9QX?JTwUOWA3H&MXnhW{tZ zsVvVE|9w=ad*s83Zjc~C9QJJU{6fIF$ZFnRz}vqM3y;tu*t%g}y_@>O-9UeE?Z-Cw zNZmppK*1#_S5uO%1FHE5#d)Kp!ptTZ*aJz>eWwN*iT{!a^0f^ZVYVVhwwGesn~w~W z><^}jlL!XOY1R=oB%|8;Fx3|HhaZb(`=7uR-09lEB*;y53f&HSS1;m(;O}&=NIyzg zrVqNce{_#V?q_?bOlZUNR>__viURZF>%Yl-jqzGt5cWFaT_Qf*&XzYbtjW*w%IN4S z!v{6w3z7(R)s9KLbB3rM1CTnyD7DscMRvw>_=70{q+1dBE1zxl=I@QlC1v~sC}SbF z&pdjdsm;fK8;Wh?3n)$3&JaWezb|70moG@@F%)y~kL9}lUqD7@ahlhd|r^+TTg+nIIQOb<5*%M)O-== zBRmlRIp)F2nlWaZDn1-7dhr}eAR?Y4+q_R6Si;SmWKAjs+WZ=X%y0H`a#NL?HPt3; zM?YpR&{zO5Q5iJsJMG>X!S-aovzf)_4&i;Wg2@f@{DqaH%pCMc^BnYIq)PnZvo*&D z#82SAu~~+`Li7atkOs!z_3q%_y~zHcK$2+cPZ`123pTKQ41kYSSx;7g)b*3`>tK}A z0{7ew212hK?Zt$m_PfI1^m7PIryTg0fqM%in-!8z^J?!E>WyciGk8KRZ;P^~F@iA=Dz{SkIc;2m_jq=+ zAk#EDLKW^D7%~pL4AO;$&Jd6SDW)Y%z_5_gY-);4oJNa;8JHr@ZNt{A6xCm|Mdrs zFSEPB&5#m7I{|P$M(NTZ3)w>g>gcXjLll@C*wt+vC3N!5{!hk^K-z;loW^G#j_80q zc46c1MVrempjF>3NcWQP8k`jCdnVwHpaD;^A}@}KSP1>k$t3dg>C|KkEO>R>w7ErA zWtXzPd=R9cD1Tnfj>NV&uhd&+mUODmP*XwNS(07a(L(b(4~8>81068xldI0K8m1sy zQ3egL1|ytf>?9vNmqn+aqH3{@sX(aY<>pxf;jENq6vaY;7=>~9J{ysCU`U&s(k&gE z7-YO!sFT@McnSif$R-XXFUCJ3=*zFb7(d#2oUMf}Hz}WS?_z}3f*>2z?r%{ry8AY> zQF0%xn{mYB&35km)figAZPLtZK6jcC(79uH%d$z!+7Imr=Z@FbfBizs8n=~aI{4Ut zS(G7PUa=k*HZ)ZFd;43rSXv)ay>unZ2juwVyu|iUI!aP!^gDeblm%pICnYhhkx}gg z7Lgsb`B4=ND&G2?m|$_<1&(j%M1YafpAm}`7N12@k4*JZBuuuY^ z!X~DUlK8vL-?zsa-M_IgN$of}oE%LA$Wd|kGN5ZjrB$wvN2Oi4Q19e>)?%8dyg=;~DKD{#l<{S#th*xd{9L$=$p6lD!ShFq*vNyNs}?ZxqS zX5a#$$^>>ngw30Ru7|*qIbJ~S1Id(sKXwxOb9(NVL1v zV4o{^jz}!w@;za#tEkeFjSq29X*Y`k0uj&RQBU3XsPNaEGs1j8z%E)|3i5YpMG#4N zKY|6jEPTT%wtq;8Xk|qy>E~nQ&!N2sksjgqDt!=6pSWCIL8XEGy-8s>i9ci??>dR` z0fOH-Au!`K66M*vT=N5M(h481h)|XnF!Hw*N}@~buibRdlT}Q>gH{Q=+IgNN)#+~& zyQgCLU^8}HS-%5e!j>KNp|`;AIpk1eSGP9!_dkRCgH2$O#E$He z29U4fg^CBzPiMZbJDLThxvs5CziV{Lu7CX5%AC!IJ%JY`ZOpo+8SYwI3+5Q?k*}ak zq0w~1jGo(#)O}~p-qyrNbqstahtbq6DzJ`I<65E+ij8;`EnD!{o;&t${*WOqxAY{2 za!f``AMOo6x+y4AY9dRKp~$@uyjz6XTkY#73ytIUTsCQv06y~Vb}>*Y*XM1#)g@Cf zXrJ3a6oVT`2L`2?ijUHRRcEo!dOuN2)%9)AK_xR%Q;1U07iQ!BZCfbl>Hg z2Izd*`qcs}3HO9P!haq@Ss7X`l?{0is&CVh9GOPdP3%{qgH18|`1(b)&xI%FT}L(6*tu3d7Z12+5-B?QE*K7;F+>fjX_~S7DF~afItU;*$?)frnI>1pWD->th2_7D_E~j= zt`Z0WVnV~Vko{Ne+^zF)ZX#P?7ATv*zM%B(G2*FN%a<|ju< zkX`MSRjVV|!1|r{AHZHdI|1O)8E(^O+BXVpJdQ&PN40nH;-cT0oVgkc=e~xjY^j{7 z@pTBrReRk1^Iu&^;&|Wp%q~BRkmF7u;O*@hjz%PMds3b8!FPa|NYx*s@pa1b{WUd6 zvA^U&oX1*0jS>jMW$%5aGRW|9w8eHDrGZExN#XFCst0K?W zkqs_X5udtA*1+3p0!Nm-H365ED7u zUQfA$Ds_*|n?TdXDW+z4CpOnvctNA@hcq=+J#DXZ<+*+J(v|lxCVHZ^`bsVn3)Wot zEXz&(Y_xueNN#99H$-hZ=<&^~0~j_&HW!erkss|<>N17daYWHQ5JF&S?(k_hnvleY zW*GSVUMRs{^2vUOirco;`MifB$5Zb%5kCS~j5WVEah{rE zcm3{;wPG(KDys32SfQ&26Xy3XAC^T*^VDh6tc$=OZbN`&E5K-J;XN%dZtrtAI6-_k zrx6YTktZfYnO#GvGJ0d9O7hICL zm+u&;tCu*0N6S%RMH(p*0)q<+X2gc_khu0m8wfozhU-4vF>WbhuS)ieQR?W**}p6`3#t<_WB9t zPTnX$O!)Am9pdI+F?_nN*(+0kM+)A?W4_Y1x18Ko1Elo$25#XpcmH)#Kk^0`>#YfT z{VIvjkzh$;;nA-XPT$ZCZph+IBOTk?#Da2hFCirFOW^JoFsSa4n_qvTjq41+Ul(k> z#|oFope;%Hy+y*@1^ zUkhj%NqyB{rHut6HOG6{6T@=kao#Vw zKg~Z!C8X%_3fZ%m9Pc690NNNOTmI+X)dwc0d=^7T!1B|4a?r0}(5l>cJgGlefWHB` zlz^02CkQ-;Ro-NeSkdD9{vj!TI!|=B18laOz;)0^N8g^?M)#<7cSLR#B4lqd0w<_x zPYZ;)^a57pK_hgqv>~_*$qV(;jDt^VO^OU~d-V|FeIe^^biUY##Rr(%BiO2u%UVSN z7AgAAFxs?%bx8t*zJcvW^t|p*>)u+dG3bm${ZlaD-{13oV^3*jV^8yk8Ri8bx?h4X zbf3;-U%n3Ut}MELXn!==9Bk&8==@6NH|`wqUQJ!9g(T<{4w*^Q?Ja*i&~cVpv(11n zp{)OPsSR|-2>hi=X&fdHbJFIg-lW%`&La}+&e=a7w}`Pw1jO9D9UGu(NDqW*r)q1%tIo=BCOLj_@RQ0144S7 zJ}Fx*FG@}m0t`>RPV_x0U^J;*2Qy_+$g4`nzc$s@XyOIL8jwoe(Mxi;)5ipy_8J|3 zKIN=E?um6{eaT7c?-6A^Lpdnn4gzal{*eHKt{?N$D8|dN94CL%5QPl=6;E=o3QKuB z6r+5Ae-gt`)rb8r_PztG$u7%3fCv(#6G5aG3$K6;kd6|XB1K9l0to`roAi$K0D>Z@ zNEbvzP3Y1MgeJW=k)rh8JO4N6_s#5lJG(QxJG1-WXMG+ud2{c%=bm$JIp_Y)eV6n^ zWd*Dmp^pAO@yc(D<{sa>`@=a6)psoAcD_x*PNJ)R^_sYyZ_7sul1RG!X)*boBg0lOkTw$#W8nhSNGKiM*qfOgXL|N}wh%*;@v(OXLlKko%;;#Saz3bR|Lm8Lg z6+bUNXC>g+eV(%mr_w)|8#Yflx+F`|rZ)>>Z@4(pk;;(^2z4hWs4}2Sh+ef!h;e+o zUlelabV8e+*96r1dSG=5HpmcO%8xe_&ZWc$nNO zE!T1E?p+rR9xiOk!$6}3q1o`7w4RN)TUt91<${Z&zL^Z~s@o{;K^!fLV=!C##G0gP zjUV}7V@HA)m$rR?cjbUB>PRhT#Cm$33}hVf-nBVh5%^|jondQ!{|;(-HsoT?w;h3C z&qUSbc2#Ls%5Uk2J~Iq`6515VY0mNnW)@1$VllCSy-z(9=hcBZ1!kf|2SG4i%)~;k zV^Nh^YLQy7tZ~iej}M6A-QyEVbdbm%3j5aNSI?65DSnjgw?Mx+ zJ&ApeRWveD7q*>caoAO{&PDDTtOhvcB`tsA#m?xQN4hQ8ldFW=n(0o|ay} zT&4fHPpUk}EVh`EwxE7^Rq-%5qkdM0L;(L`fKbRYmTfjXPA3Ge(KXCu1M?J_mkh%b zgIdElEj2&zy_GtLji5=y7H9$1R_!x2o}J-?%^hFcu5#P8Y@Gu)znD;xF7c5Yn8$E9 z8QUE%Y+LREh}{=}WztQ5%B~1NkQZALJ&jbi(O(w+AxWXh#L9@i&EhAu-eOH0eSrm) z%J_9xYpU@z3zd8-%<_cuxc7CufY5UubkKl$$aHuSzBO_a>{J4Kx}L)WltYEG&^fo@ zmJl_Lk7esqU!r#pu*3$H>z|^+;3uMemAGM(%VlI}JSSEKc)(p2Lqks$ewfW@fy>td zg#qdedaOK`ZNvF15{u>iOUvOr;%&QtkyzCZw(bP#hgnak*d zt33>bLurvkCih#!?W6Tcd$W@u-cvr;hfPbbU=h*526Gr$wj+P$xjTJ(cr`ux!jqU? zje@ma_EZ_E=s;Jy<&8w&J*Zj+GdF6vLWvjFfKvY&9XKYi=Bv-(h}2E)4*ce zD0ZFPZYSpVh^ULV%t3d^9FO8kcQ0U0@mY}Z5j}y1$Do{35u%bhC)Tf70v9MWQZ?!D zH}3jRsPVx1-w^o`F{@9|`Dsw$d@UtOudd#>y|or%n6cHo^W_tJy{g_5L=(%ySIWRx zYb1V*eWS(fyv@1rajDzMsdk+rpIUrNxQ(}H&Kc*|yPgVEk4Y_v5UR#S@+&-Syz?*< zU5K_d5c&RyMS!!sM(m`$56eyRPcfy}r57Y8Y4n>};aGbtu4&MVjYcwNj#-5F$M&sMnW*fpt1s`|mGC;=-Pw+=k3&0YyyY8G* zr&IG>yBAJA%(1xaIk+6&vO6iY_uy5M@JO1T8@1ilzJ2?cG@lO;x*z)T7612 zL949z$(pfK7@ZAzD2Xq&?cgZ_6OPjIRBi>|8kI?8I2D!<81EUo`ELfo?!Zhr5M}0UO^hJv-{>E)= zG%fl~Q><9Z;tK^*I<)f*8mKzO(zd2Hkfddp2QG=9xx|QS#<0TZc2le76;g&1ShuS> zr|v%~64&-{{&+m0@Kb;G@k7pHzdE)i!J2p~tspL8)>45deblm@62zLqmcGWe*tW|u zPcEK<#=xk7-P?v3O1~2Q`X%jF8(j_PVVMlubs~1oT-Bi|S!(QJl1{WT(*D^lgjY zH8);YedEL;&K|?kT*1C$)y0b1h=!n1mn26RJY}_kJI|iM05Pqk7*1{&YmVHT-Vl}D zem3>bmvwfy?DW>JuL3{7b(4?(oTichhYALFQab^1_ z?`EI6U1J0U=Cy?5-K+VX(mG`FnyL?H=NdRrQcJzXWJd4xuP7Q7(l?$-ImBM^K1~M=z|?S^M1J(SPkrmPjENJ< z!8>3k@-c!O>3Wj^`YuP)XJc7IYD~rT6GHQJRXmT{nFD%kC>0tHwQ-1b>t{T$+CJAy zM1)N7BA#dA6NI_Stjj9{-zRNCI0}PAGPR=-z$vunJ+H?#sL~o7CZO=`i6^MhJyi0P zdnjpTm^0}|3f_h~1@YON-adl2J`%0&^wL5nllhzB>u*}Gc{h+tzB@@CMk z8eEbH*iHLo+ib=`KG=GMbjEe;R6q@C5RckPIP8B*3w$w_|3Y2Dnt?`*wg^37`bgYi zF`nKPR7S2f-}Pqoo*>Ks0IsW@9H*U@^wn0jDOL-zwma0w_*^A^T^#h8B1*gLBWNZp#bkO;DikfSAYaRVUp$MLB`laLUhj)O! z*M^3&zy)58hSxPWe1=`fQMcSm^YZSY+QnM#Q{gA*zXqMLW}AHzdnzo*^^@+539US6 zn0nt?D~-aEG+r&cg5>2dCX7}C8k!JDb*+Co|124GPt+4Byu4k;z zaLlXG{)}*^#+S7{XqLx7)B!%NQkxt0*sT*+(?2@_`7xF*^@S{QLl&SQ1$V+xwB`4c zP!4est%_!e;`bmkK@kWbQABx|FLa(3N>q`Bi3p&YyO&{|1d(V6C3PM)lrBcN*_T+# z?e%#cX6NikB-VZ6NcJ@lWud(J;s$jXDXlh>xb)3&M=k8g{)!=ZUtA+LTUF4I8<9)&Jt36#~0i9vaE5jAOPeNP>j9h}H`_-^PsSPd%z#PG6D9 zq%`O+r&BbU^b3aOSlcQ_nCZG%VCU-6%8ZW9E%e_Bfig`QeJH353li43OR?*Sa!|j= zfL5=06cd5CD$sFdA$%iIP;(@qyBQZRH+*Ej9N6enXcEQ;g+r1TQRfxNHCc}<=m;tg z+t#8s%NmN>M+8X0jDIYz(z0<+%r;20a*ntar@3V^3 z=MyosdgI43VmMXZojp6w(WU%)`ye2~Gvy-T;q^`tW;gaf%hQT8H zE2s)oj37#WenktPra@d0mr;XrI#MA?&Di>rBI;d8xXI*?V)BRg5{sPJwIG%vn~ODL zGn8(*A7`^=*6S8LWKpt#^dKKO2FWtz&j&?f%i|cJK0lNj1_6)3;76B{@510~Q0q0p zN$Z$;8)8`Vlm=GuQ94!H0g6_A2)34uav)Qn7T~ThuryqiN6FIgz@*fD-km6ZS_I8r z56}tnn5j;=R9Kcydqojq>EK}>y8}A!8qhtpm||B$30}9(#i0ccncuj;tSObx4VSJ> zlbAT_r*?V6AfWXk}#GcywKRhV$&f>q}GHc+7p5I=N&&I%#;~2@F)NiW{(2AK6%0V%0q?+oyq4SmF&Sw+$IE!-bGyZwa&`9$Tj?im# z=$b~9IwI*q;ty0iXyrRutfbb?2zz z->V~Lv}#bNM>eV7keoaJW@E1Z83(NA*`+f-3<21ukcxsgGbt2n$u7MFD|$t+<{(;@ zRw`K&r74Kg{ZU`$`}6)c6Zg zjqiST-Ad+V8SoEfqDu%UIF)eIW9hkx)Qzfyk&8yC0?Rj6T9oRUluG@)WEt z3XHxVLoXsPeS0tFA|bfGjwu&ws})k->4gQ7?#UslbSfP-eTb&i5oHm!^f0roxko4# zCM|6F-2{xi0pd*F`h|-HSDJ>HzoFk2;!wj8{8lP3I zz*IC9N4Gkbgps2xxUq_#WM?t;lTUgwRS@~obvR9u`PUoa7{qJ}C$JNUDYhdZTN78s zfH-Om^%sLwc7vK7)e^A`UGddvmK|@YaE!?Ivw?VTZbEyndXd=ZtF3m7Fk2E8lg`_` zL3uxH9oUY2{F2`2{$l1XR?+b$V(kRd;oDD{I3a-K*OxDaVBA{A7JDAiBe8{(U3FJr z!jgNPb8cCY_HBsqR~O=@frH{e%oOAA9FJq_xs`lZZX#Z-8dVQ|@fS{eoS^yErLk9u z{%p^{-W8f0))!&IY-#sP2e^RX&$81vE+C+siwC&F1rPv}ZTxH@@O#RpHnz;L^{2Dp zk;{24mQ7nW(OMHJC(gL86y}YbfmYJMKqNZ^lHzm_9OUgl59O3XG_rzt%SC-}Q4Dv|2t%Br{W9KJ3Up6rq@^j$yi)zqxxUha0$ zxrVW29r-yT$cP-hD^K9(x^Fd(hr01L8l(6~_;j9E+*O;V6Y1Ge?CJIM&wD27MN6zz z5L-c@I(++!OrDZIf{>>_6YRlYmL8pP3k&WI=4E0>gdR^j&UdzcuHKXN_7*9q5DwdM z4AZ7+-ASZF>117LNc?iVz+^#1_UJmd$Q`SDk6Vd)3+|)`V~kZnQ0tfr6?*Yaut|$M zv-I=DT0z#y>ohRXebgFx)VO5<@TtmIIs+ ztAYvG=WpELM?b=CS09R-#e)GH z5Uem^5NR?K#F=vvqkgCCu%$FWqlwMSV03x zp@o9O)=v_(tO82v0hm+^>hdwdi!cG51`}2xkUnnMH$oA4a7BPXHbU_tV3Gg2Y8-RD zL?=L=h*J(finsZZdvpGCWbtoH9{Drpml|!;4vDSUl6>FscJhZyqKAPU-_r&z?~a+m z4nm%Y=j7FADxm2{-?c_q+j9A2(5r&4 zM@|Z=@nY~y|AZk7Hm`c!K>Ws7x!K`qF0P~w?1ZPBK}OO1z}Bn+FF;_2-2sMlU|zhY zlGq#iQMwZwpAc%=ibJhq*iS3e%%`0NUe2gJ?I_vx>2I}t*RmtVsQ9bFIdeAcLqT9* zGPZmFaWDQd)k?a1&TQSpIUv(v>cX}3`qQn$9`78o$}0yic5H*Z>>(GaJi3k%3sD{} zD^>8*$foy1+Y3=~NgAVKU+b!bhV@D^Ut2CQmt13KfYOtJ?|AIt%iT}9d5Qw*tXjrw z#=&)YI|n(M?{}^=@r7gzzOeg>GhNJ)?Yf55|Tl6(ceWn_Wf5DJf#cM;G=2tV z@bd7n;M@7X)tQ7sCleAANS+S{Y4bTMoI;>AM6=7=xR$z_%MD@dK|#0umNoX^h;vaP zLxxw0!GvG%&uu9rB45o!-}FKa^2ZIslzV-ouz_ctxxnyAbQS*xcm{pae_TrC%?ZG#1UmB-wIYEr>njo_1lwQ-2cxBBeRF7>~ zo%C)$_Dd|=fk+2;2Ft6YW*hh%a&)htOj@$bL;q6>vlMQho4M2tjme?jV;hffDDmS% zB7dspg-qqsPJcJ-PiuOk&~HQj!S`d9%l*cS#9Msu?vzADBn8ylLT}Vl+51z!gY@Ai zs>Kt~%6o@~(*lN&`39x%mrJo;&P1D5j?n``D($K(`7eo9Dc8`m{L!R)nB>jv5{WnC#EP%8ZvF6lT2zg=NVDtuwCGtc^MyBW=+AW) zU!znZ`v?fKjZRZg-&LCFHKt(q3zG3WO`X&yB@bc~GaX*!o;Q zp2j4i*W!tEI6gx97z({kgz23Onlz(tO#q@EX?rO6<~f+vdB^R5!n;q{DI)-44|Ga$~wy@qexK%;{`)Tc`rL*T+3Fbkq$kT z)W5i$Uq(7Ceb9!`srGIYH;MOpS3bu|4rhzBrfx1_$oFL6Rp<87F;f)0^}@5ljt+WJ zs#%NaJZhDhI6XeJCF0dj^{hQA7k{8~hP+zz08f@=MfZxy@^s*t8}!#a)yPjrUtswB z?yP!hZ_+%n^0VdIJrmafv#-Zp@>&-)Pg{2CA2yX;iCh+WMNvRvJv);4rf)?=;Per>Xr@onVNLgnlP24N}#4*6{qU-CjCYBKThM+TUqg!N*^4a9dtmb1U?AlIWB zM>25F1W_g_@8SWVC5Q`Wf-!x>i`s{mj$&K3U4GBpc= z;Zr0r*MUYcWxyt@B-;E_ZgTghIdYGyM``wq7-gY(z`z1k|*^ zK3}Vn9=1Is(6ou&;Q(GK7%%0Y%jMNAmfkKeDzbj~E(lJ0eo5fzB=S7_aR^(YlNZnh zZyB{AENzxKV%0eCs>oSOWa`*?s^Ff*K)7yk6c}7u>3HPA?gz&zFZ++IVxpxfJ@|HW zgr>8SH%_;SD^V4#1>9v5xkZ>ABel#C4+s5hv?$T`;psk(CJ52@?J4wzhg=`e5LfN5 zSmAIE*ZdBiiZ#|j(h9`%;Vbpb#EMTls4oG8MJo$CLjhF^vOrt{7OqmbY!+hNl>N1> zsi57F-#^SPHSA1hoSe(KJh_Uof6{9gO$yabtGdr}ih42k3vn%sY}J4@NH+Y&7v#}m zt4`9*1j}O+(tT%%#FmhyDV*fc`^o@oAQ?G-7ok`fL7ZWGdRW-;=JeT93h4)~Mb|$2 z4+pNulkFg9d=}Z+r}AB`*?(Dynl};~9u5xx2}MBm&)8n|bFsgL$hmB6M+pr(6VYn~ zgAF*vo*ULv)Tzh&p6YiJA+|>Uw2G6O`iLCvPxsPpAb6%NPI3%cLcC`|8-GTIZ`Myu z+5c{ZLsgU<=+;V9J1C#OUbtMg<1^yhS>;xY{&DQBMg32E zn|ON`K$ve>q?UjM!nCK6p z-ab-Q_!^(_1SxO%JfR~6*MA2?qC>r+^)AX<GQ6GCH+!LJ4!&ek>(LXpbo7)11xOW zl-Z@82Jf;V*dgDc3?i%L7}G_R)+GRUeh;BV1x4CSZop^Wyn@;h-is4RS|5M7;u{i?Htx{pkj5lcNU+`)}GK7lMNwsh&Wn#C7B%f9D1) z2`+=&PY=Q?5N<>8Btnn8kLbskEW)mz=BER(LJKP(cpF?t&WDT?E)Dcl?9Knu7bE&_ za8v)nHN*Y9-H8LTb67%hGPLbf?mx(7|F_-LKLiNize3N)WDbp7Q;2AHZu|pW_P>zD zzaJp@gS3eMnNg2_U4()AVueJIK!2wC3Ef1gw2Aa7TZ#nt2)r#ASMxh%;!lW!u$f>J z!2d_ksB$p68;K5y z6KKyItzgAJ6vLZVMu9~kkmK9>)F!IBU}WYW6skr2WkY{+F!}Ed)&6Ci_7BnNzn9=q z4ECup;9!;lYrz|StA$6*Wm5aa?~7%E0~*Oxo4lT13CV7ph~|dW za$SajBiGLy$Yw&@91)5+8vYU{>Ue~8CmG02=uulE%;*cXsGpSY1BAGJD?;-UY;cVT zoCLUz8h5Kr3&-|lQiCCU+M_O1U4dyu;Dx=x*#TXD#7z=53k4J&bwRF{7@RkjBH)ZB zSQU0~+W2d%oY{504bDE*LJ`ul7QRH9&zd)*-21CigwiT`pW8r+}6X?P?Wnm>ti`KOkI{v^)$BP|8~Nt|UrE#gn&95X%A67o-) z6+F@s`JXiF_S4Y*Dl7Kjx#LL)gtA)bAm`0KshXB>$QdFb*#9^S`J-n0icDgI1I|&V zf2lv78$8D+&iq_hnMWns4=xlL8K8Ip%~4Du>pIHT6uKfO@Y?Ns@C&EL>BBLT;vh^` zIOahDXtLz!=%c+G11{|XF3o0x2*Lr}INGqOk)yN0EoMJBI56ZV2oYi#P9U2L7%&6P z7zY9!2vOX>pAcHnIGZQj#oJY!*_ecl%NRIQDwTmNUW!? z0V(oQUqwbzAAt!bJE_EnFjz?Gt7;6Bwb5OLquLQ72@}(=-(e62d(`MzPO**TL9hI> z+xr-BfP&$y)mM)#I02vexF0QJ*Vn7TDI*Z?UIA2e-azd2NwX&Rh`ePnn)|AX9*{W` zvRtuLwVC}^315&K{b)->@|@yHKnp=^=t-x)G~l$^=BhScdr)gLpqOwIOr~jY?rZhd{&qyk?2$EnP`9FPGBE-m{aTH+!(x=BZA-*d6s7!)~#2G(t( z``yC98`(aUbBf|Pa?IW5mZh-uxq-muPiqc^D`>XR-dzyIa{q_A=wtCGAM%*v9Cq~| z#tHN6=(5 zHFOO5JrF(?C9qJogZjzyGh1DRp1~~yrMVdS%X#~f*fkepByCV*SwfIBpA%~h_o8uZ z@cd>+F-!2Mw*w;LxJzk2&b>u?uNs-XpkP|-3WGf@c#Q|FMIP-{TB6s%2)>>7Y^@Nu2vB{Fp7f6-eYb*P;H+n1thJc;!6pSvqrBlimOH&3w;j}Ot8uXo_@6k zi9u|a>Z?Xw#YJHl?8|%CT;Bsj=ihWNlzUDY?GX~>#Dv?Rc^Nsb*2&uVjmb_BiVjJQ zKmTGEH-(n?;pDH192?Ba_z z0I)E`2|8tv5g7SlRYzJTa@6<9+V|@VySj*18;oOZ1#$Uoaje5pY(?`K4`j0GHDXs5Cy_PZ}CGD@gFx{4g1K zbhDwoRbbQmprCu6n)eWW^T=H#cZ6K|G?>;x;GpnCk=uFAZX{CM|Mg-95*uk6@L7Z4 zTtW=XXT{6zxtxzZ`Qi%>bv3$6Ai=z{D{nhxuzxF(kI-8`oka>ek=a&FFE?>^io=V* z+;s-uWb>!{=9uBL6|QoGO*q8v!!nV3s^O5Wi+Bre>}uD_p*UcjG*;&$xR4tUHnewt z(N;r`EL}9B^!bO;g-r45OY9=gnP$jt97pAYZ(BAdK~Zpt&MRt8bzxbHA6a$w`smI& zYdlGq6q&hI&AiEJK?Q-_onO~gpU0fzSzqW8sP}ANTkLh(?0vM!wbPugmM~Fll@z~V zOqdNJ4@!DUa0|9dDcS?VK7%or4Z_bNr|Le2eT-L-^j=3WZgvcEvadY zeCli;9(!lJ`=n#&70R(}-AsBlZ*&t$Yt(qJ%%WvE?6uJ4$(%P~-ULNJn!62~!(Rr% z8K$ajZQ08lj0AuQqxo_-(+fjJ7l+)6XFr|MJq0uLG1_PtZ4+({qgV2w(RX)i(VU?> z>eq)JM{O`jkQvEQNq=0)sN)k9z3ol5{*;5s;90V~@Q<%EH+!ZT1c08UQZwnM^Lr~@ zp47H?_8n7RUpne*t)-wTJQ0U$@p#D+VStDoV`(mCvzM<>R{a)??-sqhi@d|Ir57z# zrbIyq89=UTTXFJR!e9&2uTMy?Me$^~PRQYd%$^LHm8oSsdf<)NieDIOc1p9&R6Wbx zYST_Q3x%|)&AV%N2?9+mNuJ)@Z)9y<@^f1RP6t~UHFmrig28u{_$+9APom4O0w^b+ zm-Lmqo*i0ey&{L4bbXF)OifAEOV(9y#URuaOV%il?6mO1eD0VuIU4)AjerV(81L$t zYIj`%qQot>#$JpYZmyXfwT*F}SJLjf0t{uAz8FQiA3y5#``x^}ySX%!4t~|reOgL?YXlj^N<1P+Mm7fUU;g^y>X$ZSD9zEOo;=|eo!b&(G;9b?Elq0P9 z5D%?70uo?^4BJP5CGZ@<6514iLINxy>z~|P!#`u2;?6Pt?4_$@27Dle<>qj-*qP3DPP5r<2$>1s>=F2XzNS_?-J4#DEupY z^E>>i?RWpw<9E>2?-8A;-(6P8-@-j9fAVa9d9ff+kq{aJ+w+}8&Yeg9OT^xPT}%WN z<;LvMGG`oJxh}L33;zd2lnB5?nZNARKMMT!hlc(I-tqri>GfkzRtr(WW$i{uMIRNl z0|t^5#E*!H&*k1N{>1+}7%Jff`Us#!E=drU2Evp-;!c?23DbJjD&ZIV?)Io;WVT%+>2+hZ^(8or*Gg7nOyuAF8~+#JB-1ffZH$=z560&L7zc72%77e zaF=I{$3e=*?zvg{^$SfDk3h1R3yzBD&CQ0NUu;|HCQZP2KEzf9h9?jidI^LR>K6-8 z5;&=J0qYPjc;HV=dAh!Og9pKvfB z<4h=4PdHETn<4Znns6cj=_ah|9E5`eNcK@N0%!@Md6rP@F9}O{y4VwQ&>WL(18!Fd z1>L&$Ew^&@5~Y^z)#eYK1PX=s2&g~I>{YP#h%ed$^k}?(o?W=Z*1?%!i{=Qxw35@S zauIB%>en#`H&8<0g74>X1RJuQz?smmvkG#wEy%cE*w2Fu1;j%Fm$!eOa)6*J0_VoR zjzDN(Ujs?0cb#Rxj`~5S4ri&Za@;T?|EFUAexH>89BKH+rR<-I{rf8i34d71{&36z zD)ax~lSijuARtis7Pl-@)u^D*v_{rPTCSxBf#W769Mg9T!SJ#!#`87^ssJYuE?|QNHf`bl+On3?yJ z3sI||ik};ZbQVs0S$+Vc&1;|ky2J8DeX9pJ-ugj+D>JflcWxgul~k6L^4;Qb=ieBMsr$(DG4+_mQu&&i(Qppn2ak(fatIomUp6^^~d)6SU%~6wyYpR5v z8MRIZ!R_dH-`9bVwC<_a0q4eRcKYhMqRLk8zSb{343nb|P*(3uH|`)LCT~4T;PTO4 zJ!fGZ&aGdF`jTQqf&P;0n`q@qn47>bl?oW9g48a9#$nLg^&-?NKIlw9n4qT`4Ywkr z+|rDa!RL3A>uq*z7DF$Z0u^mM72mfmzUE7~Z?_Fz*~6NB94(m;LP*AMW*X=?(1{iXm;ak)JfuY5bTiM9&o*6Vg;Jc!W~uPxMWqxKMH$)==g7 z)mr~X0%h#!`)y;9mAqa0dezwL*(cCNc92~EPxrm=iI^M#AKE3ec>!xdO4s(*R>4bt z(@lY-nA_`hBP);ccf;hAAn7Th0h(d;HoI*-3*T)7k@qJ%xbrf?p3gV~dbTB@law-L zp(`rje}@e(!rO}t;uJSbAj?g`LBiL`w$IB?l-Sn(#1ib@)j?QS5I^9X(6?Tw7|h7{ zXmrz6+M&LQUIPX5G=aY3^)np{3EJmsjY**TntuTZSlc_!;R$oOT~qoz(W$mTQh9-c z2zZ4FEwb&onpD&L6WsGKWQGD=@QvCA64@1q-|gP75%-hj%6}xzd_(^^iyJ*`;fd>o z3(|A|Ua{F9nh(_gyB7TAaT(dGU=cEH;g(2=c zw*wk_4!t?|SUts46T2Ks1k29~d#&SeJu)JUK5T0`z2Ggy+B~7V)trY97p|UOkk#La zknLnoQ!IrT*3AFn&)1RyeNQm?sWE)jc5;7mv(Q)Pfa~i=y)GiPwVIPir0w?me5-+s z3xH7n*#lZuPe`I7q8mB77z;2HUi~7s_U+wyK&q)JEVr;IC$TS~VW6i!$IbzaE$r@4 zk1D=|P(4GAR%*Hs85h$X5qDE8y1ae5mp02)e4~mZS zyla@T{Jo~i1U z4`wmsRQs1ADxpx{(Td^eV9fJ^rqo~En_3VB(%=!e;=$c_7)+rNQ5Fb_yQ`2!Q}+|H zhuXE12(htt$bA101gEU;j6{xpyqP+rqp|&jFTZHth1c;{JJ#2N@SpZd z`s3~U#N_x+06!|d3(F8+AFh7sZT=7p8SrI*vBy(u!RVqdv?c%Spj<%^UWvF<7vJHO zff20&UYqB<`LYNtA9vBvd%DZ~3`y(7FX)AxaaEY@Wnl{%SZ}&&JD#;V$>b%~cujGL zmhzW?b6?`PY#^d>wd_>FCvtQtN6Pc9g?qMVoHMTK>VyP|5^t4Uj1*pT(WyqQcJD1` zQya5A`>>+F#LRA`{@h_jm;e=(%m<0QBw@nbf57XEM(w>L(_e7YMc?ddX zQ=$7As?O2Y-es4OUan4iDE|rb{)r@X_9pR)@spdM4ylZO;o_wWg%1;3oxhEu`se6@P;UdG@Ug`b3Bf(h-p6DgG!Uh)k0yM#4o z8s9Ie-=qBrUt~LdRXyZdzNsN)yM<-4)rAoF>y)4nnFkFX)?`8*$NlEc7~te0V>}%) z&8)w2QUD_H+Ds|uUOFOdukX&`!&p?>(Omx-qa2)Ijl*P9m4>Dc@W@I;+mh*6aH z+c5ng#yQ7YdJ?_j(=YS(hv?x$27I|B-_B+WgWeG765v?M2HEZ@K32nbJRg&;cTdKu zDeweZ`NB%>@$m!K?xvImZ_V55ese9|n?A>7s61t^AQ5fU8w<~`#c)toEwQt2>78T> z45aDf%6gT+<!naq}h%14d@4xIwtk*@%Ll;2TL1zYqjER%x&byu| z0W>%9K)vHrbI(Y|kbi5-U+TC1{IK*am@w;;T=&)q)UsmTvhL)T&~4kV@Ex52z? zh#$Z6CyZkE!g-Hb8w*)O>CH3S#*3NWk;7{rli&$4$qQ3&TBi0{o50_S=h(->tz5Y-ShY1{dN4rKN@q zrS4dlzOe`b7t7xBcj(f2!5zZ6UnvL*hzP>YJLTsN9!z$)bhJyS`z^ZxUrbo8m48oX z7$^80|AERQ(tp^_{}0Gpk@*As=bw_p^H=uqf0i*s{s(FOH>N@Ta)tir{QNhjLH#B| zFpgIz55Wo1ROQNgSOz2cKi)}pQuv&#I&kCRQCy7UF`|hO1^rKcQ@wPQxONoD{eHey z9}FhY5Hi6aK81_f1Ki?t%n%v*2*?*?=?1^Q_ zj}cj;H+Q6#K91a!k9&;<6LLXM^C%hn`)|41|CvXCm%Wm#DhU;18+iXNsV9mE^_d6e z2YysNKV{*E*aO3>VZ;!cV^xjpQW$&FReIV-CU%)<|3NVE+)Wjb0m!kCnz32LUiITJ zQaqcW?-D20?*@t!)>K1W6F>u%0crxYY64K;*-e$h|5uNbe&TD$NrVnRC~a*w^ps>F zmckJk zGGJ4lgVXfVE6_5))Z70hkE@5j&hb$M5rJ>7eQIZO4$H$tESqs+;H1;#X~3Z5JDuXt zi{f!UvmNJizHFT?uev%m`zfPoujjZ)%J|zwVK{&h@QRW^QU)ZEANa-oE;;lz6Osr= zyfr}%#Sz;ElFA@tz>8!EUqpg1Re^-NXZ-%giUvUi#{)@)+yhCGL?R$bWh5OAZ?0mq;_2Yh6%s~=%E;SB8*0pNIPN?Vz09sToANcgv{CqrFtl3enh2Op%Lk(7 zkN6Z}gQ+{@&o^q+KyRmeHRVi;cJ;8ra;2E=hQv&V7l;hc3elffXwZGPs_^V=rt^xk!sK*s z_}1n|C5ZPyTidwOEPuQEtXKZ}qZ&?dH%$Xxx+KMp^gpp1haj9A?HLgva2}*vBL>#+CyQ~vq z+vWUmav3}Y=K#o|LsxOc^e){P@|k9X8Y8=>^#%_u8&Nc11Gen9k;T62MVl3OSc`FK zyB<~WhE!kvOQC>8PMxi%qLx>PrV>b#|X76AG(e_ zPe#0M)t^Yx+f9Un&JR)+F~Ua!dye4`hO2FL^qKdF7Lc|F!+mElz{<`I1e50)uk>|u zU?9}q?(Q^>I(^|mVS5Hk>SdEB<)Jxg6XPZGr;!c}G3m@9_*-&e@rD%W;_I(kxPF-{ zJwe>-IIerQdNZ%u3T_JShwdWPMebcnQmm&pM@)5m9Pr`*(r~jLjjLxr7Hsw!_FkTH zj;ZyFgVUB@0~+sb^~&F`w1kBq)uqCksLTD8hg5RiGrqK6^4j3Y?eU&h{?&&}TCfjb z{*+j}w3i*@@Wlb6(M0R4rT8RRL33zW$|iU=EO}THrBOmQA6oq=W1{qUf3}Z zF0QANxs071n=_VUN5@g1be+Pg}zleQ;2$`E05<^KDXK|w9eTe>XFdawn|19Q<~ zCfMin3adhPnC>PKqx2O5X;dht>XZy<WJ#z5ns6tfevx=b)GAfv0QeSHd z?UW9E5II9p-6lxd)!IqSxygqv^;+@XtZ4fd?#pac(D|P36e{)?JbBJ>B}!qR2SMRI zko~0%T^y=QH?5W$ZFYNA4S}e;268y{T+w!;>nV8GnQA3f%{Wp$=P(f8I7ILBHn1v3 z4Xi!&n=U2K0|Bftlr^WS)9hPv3oZgUyc**B;MQl1qEmPMT~9=)gnlv(KaTv|%3ioW zU9jXe{xDAkkrn%4Pqkt7%Qie88kMv%$mdtT4lh36Y`$ z5~M?JAe`;iz|^dYYa6XIE?}`Sfi(_e{7mpR(&2J2X>tyh{A6A31VxnG8tpx5X;C}d zACog1C|%y2JL}40vrX5<3Fsp*9O9RJ5=lfa?1H#TLVEw2(3cJ&BaAj;ExtiuHR9Z* zV7%0mqQP~Nk9O_2-GfWOjL(#m2=jR${1*3?gSVU2^nCi%tt?)`Jz<2?QE3(&G2a|B zGW8qpV+_+3VC!3<-1S0?vE%HCcZW2vFDt|E)XD%Xl#+WHLgYAhmpZ(JH zYOYqd{m*RQ$`Q*qn9Lb_K>zfJmN0?V7BcnmlhC+SCIxz!{v_&r*hHE0<;aS28oK5| zcZOucCh}GxLGpzMyBI_ucp_7EHZSBj)Q!~cCTNfrS~Ng383=O**Re8?=Iy>IWa`%v z{#r_OOM=3_xMk)$My$7kq`lgA-HNMbh%76rsf+E}-=NTI+&V0{0M~g6a1I;d0GhxH z`iQ|77$Z$Wf{HS(oMre%3$rz!IbX?qcHbKrL(^;nzNFVNeb!krO5&hQq&9$2&*01! zS#7Pz+jF16v2FhdBlMevMV^7VE1SR5@VbTIk<%3zNLGJoP@T4Wp)2^orkNL`r8a4# zQOGk1m>KJoc_KHLN4m=+JV}SI(I>EaUdLcZ-JT- zLXLwu$!)qX(TgY0e)MVT0@LX0FC(OZD2_wEUH;iaAtuFZ>Fg}Q-um>5z zxUq#5e{eT)G-DisJO)Odh8+a72oI}qO9-qi1i`VD)*_mk520yeXX(L{F*!P$g6qJ` zR7Qmlk5hG0k5>nLv@`p14tkLS?Whz>DfP0AMXD9lWQXot zQow~La+hfeKM(r9cJJS#s(w^7kNj+ULjjbu0q372eFnxYV8lt!nZy8tx0f4fU*YOy zgEfC14+$DB6zHOZc?H$YDs;!=()#ZC5b&lCEj#D^8?T~4RJ#&Pk+({7PFZ~udGBo$jbn0lcN#Aj9e*@Nqk)c&?)zIIH^(a` z!OvAXAE;l7|8VWr=3+v^DoI8oK8oB8o4Zh1)?$Vo76D8Yd)q5so zIU5Rrcw#5|@ZwJ<98en|>vf$mJq+z7XmEgxRV>T54d@Z?XlkEWhb2#nOqE$WyEo_yaBmjFJ6hoiD>xMY= zn>HhB;C+_EsLu`i${_PiaY++xefm5}-;nvS{RnM9baDle6;Yr8JW1ibbwnPYcM9!7 z0u!aq!V!_0QJpmu^dK!?HZ@V7>GLw+*k1VbM@TV}2R2v-cgSXFAkz_er=#TO$>|PGKp;LzS0` zn3@Bg!!Ri1H2D4T;ip%fd14m29lqrR6@NfLbXy|keNQo4yH_a?VfsN-^sC3PHnE)Q zG2$3SulZ3yjYfMni0lx&d;Hd{NDxj?n|Q_INEEi5#IhT#t^5e9-0g7Lp-<_>cul~3 zD`!^jx2?bElf^Iv1OjcF!rHoq=}56g1|LE4BF^*K?K$wEv7G?rIHFVWX2RDS*)uha z!mPP##Pf!aAl+F$#*D0QI-{lR?quG8y$t*SL1UAzK%;q&i&&JJkR9N2_u`09g_L4G znzE632styEY*@d&J+kzyNraSq;K^K+$@|aGueL8J>Ts>C^VE(rc|%D-LKC z{ZaI@mu-TYCU1qo!wiD8cNnv=l@)AE>xL zU#m>g$S!U_>n?u`*+T-OF(=0{Y#*Q^bz?~|iO0mBgy2L!VyrfKgNdXFQxJpRV;x?M zq)}0UlnR5gy3Za~gI@e{0we5A$q`9LFc!@562j;EHcy3TLEZkZvJKo>>!Hw>E}qfs z@|CC?jFfp(s;UD~G=Vf-fKP|#G6!sdnD(P2EG>S{Lkp+RO-WN_T0E5t%7-UFtiR~v z_y$8byw=GQxz~iC1Zmdilv5MN8j#@jj(oJm&uycl=HBK?brq??(DfMeWz-^9C$mhc%LxZqk+_Z_lu7SBU(oJBXsc?a-hDQP%Z$8PRO?YnEQ%8CyJ3rowEz^L9={;a5q-aj!uh_ty!m z&^oej3y*q}zAW55;5kB`r|JPZ88GB^WSoBFO%W`JJ}LJ|WKMu%8fc9nSB?uZeihwy}_W z&pafTpriJmw`kI6kMC@sSorMxMcmIOaJ(V5%Dk3gkJ5jhUttH^#B&L{sCEm_JR1wz1Cnc)h2T_ql^?rC_0EQ-QpvKo%9fOf`e-ds#3{_+DiM~2qAq)fpNTjB6J-E8+iKyv^Nz2D6piOCO0Vs{&a+w+jYV& zPpRl0*@3n+om*pP!DdC!p1A%sW^j!u*hA1zyNKGZ)}6Sc!nrZ-b57VW!AYs1OK%Ofi<({=^8mGvP`;oP@266f z1TV9{u95?fVqmgZw3wUSW1v-sba6oi4Lj2)aLAP`z}u9Z1+N1?OiJu`z!rXl9OAv# zpU%ZEc83XAe=c}UtnX6=3!)RiN=3Dk?S4VNH}yvD6-en4Ecd>ZKf`(1srYLBjzX(c zo~W>fM5Fw1stPiV^Y{(4bY6%WfnDT7)F)HH+_#^6pH#N&vNYeI@-XKfrPC6xz^mcV}iOrhP)*LFqyjLLx;a2r^CIU@S z{;K!EQ9nw}R;J01H+mBPJj>smpM>xB9K&>LEYxR4RElU~dQDC$F6G0tD3Ps_;cSz) zHyAfUI+gE(M@puHGj$02(p4d&1Gk3R?d@l}B!#!XM~1x&chWukvZx<{%5wnq;L&D~c*lMmkFiLVh&MI(fN;Z5fREl> zf;Upf(wrkuJc@dAharSi9J95OKau7|yhryzGFB;N3HIfe{tc z9VV@r>9ow4@q&K~i{}=MVo?jty~Y0Ia{U8F7JX@PXc@q0Iyu3WtGdug;MdR&V@a~T zsNB8lGzb?fu2=h+Qxo?N8P?hEiMr2!e~c0H1-$|(y~}}09pSu*3K?NJR#xxHmA^Rg zsCr{(?l#+S_6iU;v(KzxONWLdSi(VPwT0P5(%X^7HWyu*3Cpzm-y(TB=seta6+KPf>BOrl z*{{{R<}q8Nrk@mQ;~Qu|_8As(%S|D*{K_=^ReedbpD>cXH_*#&Z%$DJ=HuRV3Wy#& zr+4GaYF=yJUyu(B@S}>|YsTN(3G8G&usrlaVDI|^3LtRm9v(2^)d|@9!3K);*SXwf zz8Ps8Y<~BLKwMk06miyQ*pikXSq3aODoBVf0>Hg6DI7_&9>P+^hH75zmqc<}gr8yQ z<8*BB7(#@XN*ceH5dE^4x~UU8sNVjL2+PmHJryZxcPP>KoL;?WlCVF-*zlv5>;&88 zE}R*!a^DKtln}vxymNo;M_5Si%Y`O4i~xbE&&%*m)(oimxMCC?YX2E7;YmP84qo&P z8zRj6cT=Hc(rHb6&B{#elV!qNC%@7kvcAU@G$Rl`e%2_R|#a^D0gQiKz$L=_1?RSBwz%I z`z#xob0gv2)C;eA&O>;(qQl7qI}%uK;sxV%VmA8}USZ{WJ=o}k<%Q<|APcV!Vm5bv z)_!-YB58=ME=xiWg&DCv&nTLrefL2H#V6>zD=jq9lShqcFb)JIs`PZB=}4( z{({@#ytcXydX-(V3^$I6qp!g*I3uB~Bb zWz%Xt%!L`$dQy_lGj%h~WBQMe`b8^~{ zddvpyxg!v09Ub%RG#jjiWUt%%Ig}v4!ZI8IosaHMaPx3uuT95q(z;{2RC%H1nLx+$ zQS02+=GSANJeDLYYm-S>5ZgZO3?}9+RP&2p3UhHA?c4-WVQUX$hWU!1XT)C%oO^3g zXF6a+71X}uIj4r3?xtN5YNxS%l!UJe3X-_{F^(|k97sN~GX#ZAL_y6bp1?iGVCo@} zOBcVUE^dA9%tQ1+wF<}}J1W#bG}#vxA|mN?$2_bfRpx7W>ouj`La}1$a52135h`$> z)(L)i9-#u+gb^~Ai)kikUBGc19;RL;Wek~T_LOt#=LN49p6OqeH*$S@YSXD0U<(h! z6TBpaqm(Wi`l?NDCajR=Pza56+xZzG?6VFEbFxSq60dsu2j$e~$`Moc$r5Pmqo1># zvJeL<9IL7gU%T@AT^Hv5YN>)qDx{9kbNy&Q8vV$HiUN^qS8OXdy0Veur_6jqk6>0V zJ@=6u{kX&fLvnJ0c|O*m7B#?xXF=js2ljUpr@q@GIh|;vB6G87_k9V$2-c}%05U*+ zxpLn33SYphleK&BP>n63$qirvgJ3PVT_}aVg6AK=v1!Ke85nnP!Gs3&iRUOxyS-qe zw1FRF+AhdF6IL+d#uzfdA@N(q2vYU-CY&kvjw;UJXB4JoN}1zRET_c->X8LapN1)X zo{M)nYs%I}kOF+h78;=84pmOc-tfcANE39R51x zs2cUja>#)kqnAs(8^(>{7!MDU812Lqh6&hgXsCw}0dkCe$kt>4dNM-D!IQ*I?~i0{ zsl|?Q!PC9{dAIS>XDoEA>I_=|afX~m87f5iiX$YO>uM4rD&O0TY%yoP&4$TZ9%U(w^CSP`@pV8&TLL1?aNHh+%u+O!%PwLOD}%&M*s|Y^zM+Y zD!cys;CMujymzb#gJ;;}lG(jDDD!|>i_OY*0)Cqww_gQxnHq7}#C~^<>z;lYz6{6^ zhAfOi^-6TYc4@ttPITIh#VW4~&VNIucm?^2A{@sT6-)?u!6wXc=$R<|>->k+>$C?D z9U3XEIsAOaC{q$mn@urSgIQHa+b{8WmLFG^!GtYg^wj#ZJ5&h&N1qx$eON8(6iJ1? zzBT8V3AN+?9)%iG=27;EgU+|c;xc`^2R1V{@XACjG9o!Y#d5_^Y(Kk)e>zL}B%y~A z5womTaFFRq;_&3D&^byCfjZw^i;*gl6f&Ztt^^d|mHQJv>a%+5GVD@Z^8o$K=;lDH zzqj%C1s^IO`uE)h=f6+Nk+dEp&h`&<#dXZBQaM4`3&HXH^Vp|*vXei>-Zf>G-cWfr zGLBGbQKAW=s(lRX`s}BEx9Xu3NxAMF+ST$0_mdg;BljfnNLUIxF<-Q;L^r~8Q*T_K zY9rNdo@alrO2Fvi9Nkbul#|sYR$9nDg^H`f7D=Mr~Xs7WZu(=SOhS|Q(%}M z-DHy$^sNfEPI6BC;PSZVz~!4N`D(FtMTp_{(3Ir_Mg{?o6_S%1+yKDn;vJxq%>wpW zQ%-$jO-YS7_z|uy&`v@6wPyU3DC|Ot_I0(#OHz^9vb%TO>c0%Z5|00wL&Gg{3TESg z3272J%!t!gp%uJ}_f0`nm>?xY_elpIM9*&WdZqOxoinM(LO3?_kK~#=!}He?-j8AS ziQwJ@Yu9l*N23{BFR3DOLwRjSo?} ze}y!hsQomwq3UX-S?=-YD?EL|%P(QyrcSFu!gagxXT@YPOcGFvaXll2hWM-kE!?`> zT5o3QS_VrjUB0u|CvcBZQ6XNe5o_2q)n}jhJ>ek*XG2S~wPWifIPy|?#@|EpY~P_+ zum3e~ua|B%F07NaLLKw`Jomv%d!o0x0-eoI+KEXNB5)-ILDN=WptTrXzd5UZywh0^ z8Dd13zv$L?JNV+D6LkR^`Kmjl-E3fQptS$vxh36CSGo(2VCHYpz@AhVDXteT7#Sm` z?tKGuN`Y?Oar5PkM0L$5^=EEB{1VFozDo`#+09z zL=AdGw%vDnEw@TV=r_iIZR8~%5#sd0j3wixt9#}UH73rny;$3RJr>PU`KW0L)Q0|p z&=A%~#K&SNmTpRRYvoV}Gmddkc(afkQm9^tO2e?Kg^s}qBK-buJ7$WT8U*upp z8oS+?Fbrt}vd|CG;%XJTLJE~5pF>Kyrzb*rLKGf+oeQ}Ha;S=S4euwhk*zX!zK5AS zqA2AnTkP$}F;(%6^;PCO=2ycUckxaeVUdW<7BIjZ%@)lYuAy6UC;m|hg;*z8O&TOl z-j-6%go=4Is2r7K@q*J}e)XcMP!syB*_0(qLIi4MW+$ndfz@|_6tOxZ@`3RqdczMq zm>bq`MOZ%`tS!7^y*U3EY$fV_J^n~5r1#r)Mn<-x>>0M@+S!)_6|@=Rr` z>(_(2bEOo1mzFt7j3D&WQ<^bHZMT~hh7r66kNua7zboYx>u)R z`XeH6kE^Ek1riapb)bb?l-eHDgxzyo9i8Sj|lr*T=# z`tA*msL1Ce4MTmAi`EYq=+rAY3`mHrnl`W>hV*Q>Klt@dua$q?r>tC*M0I9Xw~?ZO z5(#Q+-JxG#6lt?voxsq4%J|uoWIyiWovIL7Fm2;mc<1Yb(=l8hHR08#_G=enU471vj4nISO6+cOA(b6d!0$YdzjF2!i@=>o! zF#4*0hSSC7u$!_Ze6=xt4c4-0s#TGZ{BWHGBYRsdxQ$cCO(v<}OeTPAOg_@yG8OH* zdr*SBO`B>*DCtEP*Dry>O!rzLSzdeKxwiMlIFjonW0JLv~PQA3qP zXh$rW6vwWPZ^d&?qA*H!^8HlSi!jM78h&6 zi#zcblnq#91CG2Ss1B{5$ErIWD;gq>B}Vl}bb1sB+qxspluBbrnX2yiO0OFmWqlyj znYS^}ea$jr??Ogc74MMW08)8qk@(l85CKf;<9=eaF0yJ zGQRpKkEdF~lJ*z0Lhiq%LYgC$ARd*P5b>QB_yuj2sOtlj_H_MB*f8fOie5T{fZ?da zB~|Is&l-BQEMSnY54tb72yE7QV2<>#BC}4bd$;5KxLu3|d;%}lM_iC7L$DM`&1hSG z?}Y%U5Gg}$v!4d_h}+UP#bF+1-ezh|dW|h{PyES=EJ6EMBH6+O?|iINb7!}0;O*39 zxk|pYyJEar7>*NW1C7Ze%e&{Y&lyIB2Oq8=CO z-yR1ivn~rC$1aYx##m`BDmA!l3SLrCCQKUHuf4dxbdDW*k}Afb zey;Gq2p8_rT9cnjUJ%&+Zf72tGwPQ^S3|9%^*}N4gGN0YgyEo4g)z?~yrcF~XrD=x zu9<@#p>$ZnIt&?L@=%;TH~8llsJ+2Ln*DNaehssBHI2fTH}?b%M(@<>oGR8p2FE*D zg+G^LjS_~63HC>!zOz_=edQ^-b`KpC%rKTM`OZatf04+te4WOC`jUw2Uw%d%^{>0! zH+rP|R}P#azZtFn=4WM%3%T@te{no@)k2O~(n8vpq&$ob{`TOl6s17pV3Fi2mv*V# zK9XxyN4e+TFZ&7~I_?(mpmv)twG-DH7*x8)UuhXGCsn3m-&%Tz+DB z=Qw=jjViw|>$DgUlyFr0=byTzCRGqSvk??*T~&7Y^H1#Cjxk)1Ii7On&oFZ5Z3HqY zYDLRjI`28RRhB+YW-ZZzs|>T}Azx5^oZO)9uMV!?L>`%FK~7>2zqoh4n)cTe4IK%$ zUS$@yEByFT5b>)3!$ZD5LFCOZ*khBprXT7Y)^V@b^fbhy*l)vvex-l3sN%SK)O;hsqwCCt&IKi7BsSXcU%a0uY_*FUzj#9Wf>aC~2g1@O#_p_M~E!<|yI_O^O z%q(>6yG6D)V8#tTuTi6GA@=5;xp7MeUy6-z-G7mO@N)38MCcj)nL?Ezp%2KA;!hw)++^1**_K|5 zY~8yVe!?12YRQM{Wx^OWZ+$*Mm&?u{X_Gv%eXg^621#@lh<2*g9FZJ|C01!T=lnW# zlMb~(P@dg=y>8CSavSv_=1gW{YNqcY>=jLjaR@Ybp*|%4ZAz4y`vONjbc>dn!fKov zOyEV5Cie(5620>ZK8hJqqwnoReCx#oaUW?pp{Bs$#24m!Y*JH)r5$+`dTUq255Hzx zYY>C|;3`w&?%4OA&m*9~kb^_&Hc!&?(~j*Hf$gKJ;i&Lb1sL{DnfjxHu?w(6S> z4!_kY5Zj-r1S$u9J{t1PxbI$H;YCT_3GSv$Jx170)2G zk&4e7hD4tlR~*fgRAjVvw8oGMNQ>BqThQU*q1u#A*+T(5 z&yl1#s-23!XK@puV%nnhh_+RU({flw9wKN_l?^Du=w zjy~$$`i@h4Gz59fS+R*PbB|ZA9P!mMBkl1)_&IHkn3>4<0$X>b9~mL=whRH<0=23r4&@B)&uK^s1&;qgxMZb6A(9fs$!1zRR1|6uGvBDD5^&3kezA31ndm(8y`aA#hb#`cBu%DEC$F?^AC;;8u{^QPRx+& z8?YcjYJ6=SvVXeG_~1Wo6Sga(?`2H#?#JsRCIoh#qj|=CYC?}-hpv%pSP&}qZVU6) z`|oB*r-pU;YCE4!SdiC?v=l9kU!ng*d3!z(M(vx_2)R`839jDh?E&A|x4ltg;xbMW zhnYXhS-|~@8eLioo z9k&P<(#zf*;D3P^h0StEO31!aYeDDE1xI@e8hwhLR&S`8A& z+w#o&&0`22ODIesJQqqTNP&dM->~(PxWtiZ7)ViVmwge5X6w3!fI|lMoKY~zvQ{|F zoPVR^SU0KDXp_cN+BWfz^C5!db!_`Vnp;jDli}aB@B1NMyl~^eJY;;o_hgw997?K) zWWJ>X!Ap;XZbj!l%*s5$wYKSP_jjj#z2E!6fuZLaTxB#Rti!Y{7Fbdi7NwCF-NZvj zx1VCDHEGgJyeH(#!LBa8@6PsK=~%*9f7`;C5&N(;bDOVen()Z*v*_EjfL zk}o-URAOuyj_n^%`<(6jjtN!9(Dd`)36=VX>#Je?F_wlF(UF5sbCp+yU-qQ_T#UlD z4ezk~$1t|PhSeU^Gv;L*c_87h{VMS?=3v*KJes-rKDUq&`s_GJOnelF2{4R%M>^db z3Xq3v8OTX*+Rev;B#hWavI>gmUpHsJcBlG!!iMS-kb#Hecze37eCcTP*%i{i=^2$N zf|4rYp@NCzk<3kaHoMhNzJ%C1*U+`I&I3nlzIHl{a|v_yJK&ElhxsTJ%2ObL0Dq?54^S0~GqhI71h4^EU(IYlAoz4 z6StzU8bz`{Fem^ph{7!VUe-RlW>=-%jNLXg>pcC@WGCn3lD4Lva`rp5Nd1-Nowfp? zGkx4d)wVS};3XG@7oE~{?V2O76fto`c;=_4RI_aRLd~7)Eu&b@9ADq59&a~|pESe6GW78%DnVzRVqGm$>>*z5SglVkmf-zi>_kf*uuA7}jS#jpvS;Ik8DUdLn+BUa*O#ip3KVv5Z9b$1%2srs3Z;_wD!kuLcNUMpa z@Gp$~SpB`eO?@T~lp<0Wht7ou_&4`Qah5Fp@xw>fr!Q1*I~B)b?s6gdYG!O?c7Rl9 z99EhW9jvLM&^#EKJV;{tj6TX6(S5cV#skis#p^3Dg8UQKf7(ohLcZvKCY#Li^a#RY zoXBoDQf8M8Ya4sn%ar<%-R%9PqYyI>M<*tWvXK2%@mh#$3z!)kiax&_NIjuT%t;9efHFg7^!cwLHb4ZKAI-_w8LarX1{FwokP(JQ0y3t|U`n8hRRMiIP?yP%F4z1oyVmW` z00`2y@`Da{y(?M*xFQiiL;p5Oif$6nM(zye{?kv;WsI6LT$qWB!{L{{Pb^@srJYEO{Wokehxv-1y^Irh=f|ar@CZ3L(9G`b!Sc|+id>*9z@kkj6q|wqO{r(0zzk^H17BP1qc^IvBm?jU|L2h1Jfj!EY z@~Puk@c+ZF&H$N$D5zB)uk&P1(o~XNvbiDx#4vP_0R){4@cKW{DDYbjP=*4S1n>i* z$pt|`i4kZEO%n2ld)McGJ+1WxD@N{$2nH(!K8Uv*pEO+!Wb;oCd+jilImkgqW)#eV z2_SSc36WTVDdWCCB{wk;<(O?mISV6&N_ibAJK-Q1d8_}%oj@S*xc{U6{ihjwLjQJR z-t~U>Ymn^8POgXxbJVRf|2^E@3?dGV&&2KY1?tr@oRq|HaPa&OJzanf3@yEP=fN{r z7JPCXf7V%JFnSYy9F>e`k4dZKA<)R)GjC|T51CdI~6XBP+%QDUQYr)wRQUEW5NKXGm^ zkudxv@akTn(aShG^J5=;!DW3BBsA*RjBce{I1{?8i^Y>Be2 zX?Wb`)(W5Va@=;cpQX-y7d|y_Yu)m$o#7Fk=I!@yC>P)MO-Dmi@PzVbti&X4_YK}F znV4AK+zbiZ*bPaXy@#L#qM?}*?aMQhDlsO(%5phDs2XAWR_#D+v6*JdmdKNizKZ*2 znGWg%1=fs*=31(pD)0^>8SC4(Z|N1ho&aCZcO;dOfP=ct{CS!V(q_KMK(U$yX!%c* z9e74*(7^^oEhDW%YMd$f-B;`{=KCAqoafz1Ds1^pZavZjaw5>QPo~$kwf3qj<_QlX z9XXn2DY&3pY~4{FqU9GEj0oq>h|^(Bb#Ssd3rugOLd2;CjS9efvO26Fi1-Q>^sKCZ zUaiJh=NhZ*;Cc8sz`P>257|?Ng)kY_Ea+&bWC3e-_wmn6XD-dVyFIRW{qW(P4L;kD zur$x*xyS0Ci;2NM=k7t!AOJADS4+wu_qUz;T>sm=*4y@bq^ujy6PZLxBGU_gp2~Z6 z6{8WfAEn9De?6|?f7KXsZbMG9eBb=h)BFm0`U!_|9H6^q@<5mXKYON=v99y(GoOw6 zGQU&!r7sPwVI#ye+X^;^n)w&B;)dC_d(2NSW)$lM9^!K_e0y`#{;bu@B9frc%7qb9 zP`|Kwh4L;t1cp0c?9&7@?GFVqRvtWqo4a}?aJs&1(aF)Z;N}3wlqbPq1CXgKK5W7| z8&qS7Ny>Dkmv5V{ROC0@b1gsKHPh%krMA3GhwFB>!~AD>Nnfc}ACtu$auE1b zs4+^Ai2u`N2i^Jfj(sb96ECwHM4ahQvPdy&Gs&lhrWF;oUwGQ`W~#Ij%q_CNtC?(O zR}W4bSV?lV!zxEl-qHQ?jlX6j8d(h7L5g|?q&;>%7mg|D?e20QJALrZk0(jk@#8#u zS!0%OO>_X-BG7aRN=V34PtYvl1>ve&Pk0TlC()>F@qG#im~FMo;+L$hN`(&LuVZZ` zL629s6zM(^P!F zqo8&4od(m(2qS+cPKPo3A2KVOeU&U1<&kiq&W|2xsbLun2RPfNv-_j#l#)TE!lj)oE4FVN{!ZGd?o9eh8)HxpkVa0WE&v^~*h$8iG?f2hjd!6C*5jiITq> zTUZQkzeo;z++RTs{>iiJjC3nBG~DOkt&)Xg;gmL9O%42&?Ob0?Mw)Z*D4mVu$M)-YlFhO@Kk~T4`_N78%*_Gq$exc4GWL>Rx>`O*q@VjR=cVueSl6(Qh-+ zfkGyC2?>iZT8t^cy^qogUL5|^CGv3|Qa^abJEIZxE71?COl-bxMnu?R+(NbSRVYfV zm6njTJ`~LgS)*0@7N4+5Po7-(P}bSD^nREMs8gsCXJ~UGMm7DaxkBxpjrf`c*{niS zk0G>AmjXNhvb7^=Z;Utq-s++vtT~L=@PoQt|E#FksvHkhSr_L6$nnq=f^JjGY7>*f zp!>x?{i-iRjuJ7SXlB%w%0fI=JN!M%0*8N6eWl!+H=_l+KdPf&5|Ab)yzD&r{+nOy zwy<%>o)z~@4jrmV+Na%ver0g`erGK`IPpjkYQrl*GLan~h9*NqQw+|CN>t-8PAA?! zdV6}y829vyf%@y5j00?%quvXHC71Cj~=g(gz0fBAUb+HpnO z<*UZ+JRcvGxnH+zi&QeGcP(}4z^hE@lu-(V0YvOUCJf-nI-#8NUSB`p;WUN;mMLBo zkCt3uffx~Vh|J$BPEv`NZ`vB%&ZtiQYI`F(ON0Oc1*FxFN(_ktSQth((Hfy>=ZI+$ z@Ur)-5qNvki~}sm8~G&m!D+>{ZI}5fXb6NisFW6HE0KX~L!VH^dEsUJeaFsLoZw+Np)Zj3_ z#`#jv%D)DFYV5^&UoY4pt-ehp)Hffr@J-)>OeC;+>sKmPUH7^ol>Q?j;<-_H*pw}V zeO#BOPrGB$uq{p6f2#hnV#sWma5c9u@Fi5nz|ZUIivTUz?S5ZX^PGAPh;_()myyFA zRqNY@9StH#%l6i-H8X3MnoH{KcgwE8R??r9o!gsuNWPmmhfm zW1?$~Lse{26*J@yw_IheU(fk}`<_noX6ysXxG?Bot(SwqOJSh=F;`5XHXUj( zUAOm%UHf8PTw7l$R2k{@LHAZq$@sA$`vZI6Wjk|I#+e{a1r+v9l=NZ zsyRH=?TU|r>g*3O0j~`|{}Y@Jm*-ej$NR(#qlw`0Tm10lPM?68Qb)|M8mn2Pm#?!F+yB-*CNO@>+h4pw4<>~u9P z=!8J>?1oUq?}dOVw3;xQ_|h@0@f*nM@dDAoXXl@wMKymBh+y@z3g;S`#tZu7hSETf z*W}>g>BD+hT8Eb#IWQ-!7hYCymOP)YC0XT)E!&iGw@A?LGyZJBGN4g*8&R^u@2n!4 zbLvYDK1Up0t{0-sVP(B=%H9tBEHt%#3$7<|IB*F~>X?_j3^rIwNeP~M;t@I(uJUQA zVo0xb3b}CzZu2pKv`e*)Bv&{q;a{|#th+XC zrW%|}5;VTXnn!)e1PVSDBdePZI47o zN-!}*bpof+o1CigWSa4UWFyT*Sk%SSf~&f5P=!KCRc6I~H72N$C2g$e#C4TdBm|XW zxRsf@DMf*M6#OWs>z$_%@HQNeYMW<$t;9|{Tb{VUVAPoT!UcQ7nE5;Q%Cj!qb8R*> zof@b$AkwBgHMN#|KzRmv@}XxUE!y(Np-u6{8nuVes$oGlN2dK_l^X0T$%X?ilh;=F z?wb5+kGaEdaO}->2;C1_?>$>NZuUTR9UV6B4dQE#*0rk%9e&!PGJNCpBtHL^W0ho7 zCo!17`U6i}ms$!6ktcVaGxujjTWhd9IB3vmOWQY*ChgO`Ex6$ALk2Dpf)?v%dE<7R zdr|4yyQ=(3!O&9mVlJ0n^ILK`i#5044Dh2VJF`N}y&RB+=Gc8tth-7ULZos2P6-Qp zbdSaJmk(vY*Y@X2N-@|%i216)xrb?!$%C40(wFR??7OomkYA>BMqxsJNGaJ>9FFPM@Uj{d9&l${$iuxuMDckn; zS!$)c@hI*NEAuQXG-1p%iOQ~P5Pr%iBFT8d7!nwaUK;uz`dB% z#;euzP|<)hm3ej~!}zBb)K&(ct!ELDVmfnQ=mW=} zL{H&A*`WXR;2!ctw<>7}KPC1|7@ZEWn-Z_>HQW(cYFbH5#6+GSsscLzAm#QqFExs0 z=MO|%zVUB{>KL86LUXzVdjChRN?rz?#KI#ClzYYw+WMRU(rZ=&O*|LDc<-A4+DjRm zTC$D32OI}M;p+}{88VCLTvzM2blN5@gUSc1Ug+DIa~-6BC8j^KGNAK)Ap0yx*~^3u z5gvN4&8&&7DAEnQ=RTUN0VCKiiE7`jUw9 z;8(y%@%-oD$&aiHV2cjm7--lm)fs1Bd7d|6BvKz4v@DRtpp! z#Ee&uaGLKGE_Rm!f8!$?d`R8@TB@S-UiO;{}cm#}z;4PuRUYSusJl7TDn31v?< zCvX5Um7s~=#zhyg91Mylr0`oHH8jBuC{VT?22dQ!rV#;-Xa@*pK)z@)mwCXQws;5! zGfcpFaP$%JcFe##z`3btPqU&4kYg)Ax#1NPt9Jp;o7G0mMUJyzqgbVkZCJ z-UbvX`KLiZr3szU1ziA*pu6#xVR@Ym@&yP*#!Gj5OnK5Uor;^X`xoh7u?bm)RNy54 z)g_?6oXoj#6%%L<=0C>0Mp*%|M+yddGmrcKy2t+w!+|WzM7bpeD3~)e_}bHNc<><~ zlr)`7(bqi`g%+BT|Et_`LFGCN2RUY6gb~NJ=NS?_8iPnRO|LZxw|K|(K z|I<}hXzN;m#Q7*Gc&ZT#h&WQTP^vS~hzM|l`xt;bmC?7Sx4@7mwm|l4q6c3B!1A>R zNNaO|uypaTFLy8U-lm&WFbnF1p8a>+4$6)FzhL|y0rX$`^MB`@|M|jssziW#5ikG< zC8qy1++Pd-Gs^13RB^Dfiq~zO~cE8ckZOWi=$`H1Kj4 z=XV@oJUaMtfdo8fctvq$GCE`*qj5L_%tw)e-7Cp~VJWYHj#(gIpG(u8=lB#I>1t^B zh5)ZnDnUp4HPC2r{o(q~6$eg1$7wXWlOP>NfL{;owZFrV6Hq=u^Mo_Aq5pLON?I## z&x?UKY{eThrBtTEx0eo%eqOy5<(rmmVle10M#sHiA|S`%Qv+v0^f%MaZu~y1uUMC% zS4{?^8|kBLhs~i1x4Ro@Cyzw|kw@mLWkX;_k>f0$Vm)se;MBs z_`#L-j}76;4#9vo=}+ozD)5A5tKU=P%hnw>H!B)q)k;G$${Jniwu5l?j`U{!q4w9W zyR0}%2Mw7O5Nv~Gwd_d2QZF%cnLZe|RWRq>wB85;J0QpQyb#PW8(S#Pk`c)5lD37sdI|_pAC13+nmMzK31#Pw^dOL z>Anpz@a`Z;+MP#S^Y7kYzy3o-8f1y(jsHeYxJuPVP2jtw!5Ho|1JFz)`Pf~=GZpeG z{i-ciuUX}Trt~$UpnYcdD081BBi~B z7bAI+L;O_c6&@lsgrV+#(Dv4GQ9fPc@PZ<-NXmkAgRqp6k`hwVwW!2W0xI2zbh!co zf&zk4(z+-iA+eOCbazOLG)TR(`mOtUp7(x!_xt(1`~kaM*UX%nGc#vSNZXSuJjE@i z$60k~%3SBcU@qPy+njxkB)9fpRqA6=oKi!1hXv0Ff52eqPc6!eesxdtyL%sGF->N7 zsygD!d$p2{{LhzO_kI);dT254cBFduorpf*xO<7PWzUMC` zxK#($US@|aR2UJVT6syr=nOD`7wy=?Xs+lxO4x@NlwnDWlC%*=6tEB3@RB*-U~-R1 z)`V?{o8-NQ3_Ny?_eoN#Sn!l07(B`Fx5_3oxRB)ml}JY#BG#P?v4p2+CY^-jV(q6Mi*6q^X@QAWI;8oagm5 ztdXGwSZy*!KN%tv{UD<;TamsIceO`#4QoaFx#B(cT^*8K<_=FDARxw$`drC6YqVG26Wmjd9rv z&(2s7G?QXQ7GE3vHYa+aMQhm{9FrHYRw;ctkX*9#!p>mst4(&emHLR)!-@CL;ag0p z+hc7P7Elyd108QJc-Lx@j){Gy-EF#vBelnaVGW>PiC%4A)Wl$fAMce~X*-*$-hQRF z?IdDZ$)r>$98huzHsLLC|5ey^>_|<&M*>X9b?jWp{Kf*eAwA+tQ{2#T$(VUHg(n(t zvYzMG+?uL};_?m8J0!5}jBb$MixJsNKZ`?)i;O34`9K+lb29oYx_5ixHr83-JENl( zVzT_$sfGH3otI$Su_yD9F*&U8w=MgUMb-&7a@WGkCoV2zn-#lcYdbc zQ2Vg~i%#jtYf@CZ*zu|n%<*1j3Fd>lUD=hp%lbF3!EGQ?6}Dq|(+<&jY!ytQO=M25 z{W;)1-1t5oyLU`XKS#%C#gNARuDqmEb#jOn+{he=4^yfXbeQkF{>ANT-E$ImuIn1O z3(Kiz3pA=fjhMua1o66$cG2COg!6Hw&`*=g@xLX<2YRZDs1{B{N~RXj&8I$)g&;zE zpW)OMr=4Gcn7^cL;TJU)lgtY^eH%;^<9l#yb6zSc&)u!%?4~$vT%7)2xs0S%0vEq zG`Hj7ge0$QVJ!qAAS@g1koe6}n*Oca38zT|MykfwX^YZ&+a8xK8RGO=WsCag{Nj6U z{!XvwK?!0lHoRQR=NAc|+8{y<{b%L5;5)iM@|Kb(b{<_hdh})XMDQgpw=ytYPVn2I z#J8&hkIPbDs5R7We?T~NV`+NUAfIs=@~Q01TFUW(>V#Qh?UoJUj*O{9T0xc8utyL^ zJTWLtXxoIc&)miP z9$$22E%5oHyH_={Dcp3*LEUC8?Ra|p28$-KhM*-6)jKpu@=o+{Ytn$@=o1zO+@zPu z$aDo0WNR(moSg&o>{U<&E|@#Cs7
*jU#2)_nxDzp@aan`^=n|IELT4*Vq9^XFm$?t zOJZsQL)8~39bzbxd*_|U7oqM5+$DrA!4{Qm zLe^!NZ(VfL4>bfa>4_Tt(hhGp3s}o?t!ZHEphla$9^#gT`uf>jgi5!xYI8QasnD%#B|Ym1gM>iM3CT{t|2H_1KHzT<4e^)xjulgnDMQsI$A}tjD^a;kL(d^ zft$gvvMj4U2GW~+6TY?e@&CB&VzmJG=F*fGJ zc3&Qb>~R1e!kWM=|`meHySCS!~>A9{K zmu&a_$O(;H{mFKCwd8tNje;_CgDeX45+IQ#mpieQ#`qf0wqoEetYP*A#$p{8UndIf zB$M#9bCPeHN$t@%oSa+;J{p6((f<~WI7k~kPDc~G9@M>t5KiM36S>h)`$F<7-)5b_Z-CcRbkr zF0RSZO2N3K@kAarxDb-zsc)eU)@`Q%5VtM*!?uTlc*DE$sjcGH(J7)Nlvev6z*OST`MM;0IC_cRjmgYtch33=$dqxUi9 z4u?J3JsoT1$of2Oh?4^Ww3ZxJmlW1iPrqh;e{qw88m8&Pv|xf9dH6`5t)!^X>?ug= z4^V9~2B2XqC}GRgd8O!AP!z+ey5~&9=cBj9ZVAQ?jPygL@^|b9=89_iW6D?f0KQTR zh=V9J1RzX#VZI_pv^~kAJ@JmM6LRxbHrh6Zsk5!rddzevOMGN^ZcH!s0aHjmCvlLseb)^{);2T2`a@t*kVCv-#egGm8yY=;NdD$n zi56d(^s`@#T2015#~VwAg)&a17hetRCaBYT{ST;l?;}6x2h@P9 zkcbeyyhLNMTp#N^*inHpxd<~%r?t{{=5Ph=JZ zNEWoB|mZ*-fwXD#a|lVlyN zlP0+XvjH<)8`M7ax(qw?i0s0Mj#h1)8Y8TXbgzkUZA32dmkK8Kx36&wG+0O{UYO|2 zE))={+H(Na+sI(KL1@S^G4xL96K@J7gq5l!G^jlM$+r)fs z8YsImofq#&_efunY+CQ8<%$0o;CMxcSm|W}a+aeCRDcf`mGn zY8#@P(;}|dc9?_*OLZl7TQnraBleB2(z~$SnLJ3lO9pegfqN!pKp)!+sHZRTo-Xi ze2Fb+A0tH>k~Nx7d*J8)jC_*RwlWoGi?_n#opn7W!3$kTb0DiC}ndW3n`N z1W_-6aeV=o5Z?Q=swrfqW&e_W<}m;L*Hh_5W$~A^w(ngf1XuT(*u$9+JeM82SNQ+- zt!FW;sct_^X8=lguOP@S;7{5rUkz~nv@=P@V7bgH0uq*b|5<^$1RIKk$ zGbQo#bcHKjjaXbS$E1%1_-Vshp#kY}L2vM?Z@bi8eHzL1H8uILuk3}3l+~p#`#|r;S>#D)Y#oeZK&=yNfEHs@h5(vk-MbU^C9wECH*5V zy=xlV6~P%(y29S)zqvFw3Rp6q1>>`_S|GG96GJonX<&wUFX@sws6#@LvjU7<9~`&N z?@-6xxksGFshbt%9os0L{WgnvVDWmV(&e;cQpO0Z>y9OJRKo*60SA@A48 zG2L|fy1n^sFW+e9y%X_O0ydp|nQ|+>cb8eg{u0X_zW_j{0c1M6*oE80uMbb49`Iy? zk&F8fBNtHr4XX%WAovlVDen$$HO*Ne5D?FS;Ar@#j@G8oTJYOdLE zG{a3f9^MTfnfE}PD0=StDR8#C8s0qohFTaw=Vo4#mU`4Yrw??Lj^8eoWh-&o&i6IJ z>$exalslMpCVM`MK%jJLe%oU>ac)3qg)@4?^!W(hGK%bBJIYL>)?9A|W zpPKWBFd4bXuF>s))%V104=2lb@bxw;Cyi6be1Gg?CiT1A9(+;LCf%uQLXfZv_+&5e z1P{8mQ(^=2;Zn%x~v@_2QJURuA#d=a z24cRQ3OJB@GAu-aia5UbSM+kU7#2ibWZ&2{^_n7*N(1bQu;A9ZZyJoAgNiZk&y^*Is4*%Uoly%LUR`P3O9 zNCIt6``+>`TWfv^*^@ULaN+Z+<GUWc|_9dotUPL1FZ)6i`)^EJu;3@ zhmUz~<)L+W;f$ov`_~$BRDG^VoWJB3ve2k)!*qj@Rd*g!3WN1V>d@H45#2On z7P~{UizbkVtaNbGWsph2{yF-Ksb?QO@9Q!WpfqXI7kk78Sps7EvWZci`xoY7(Qo)= zI5M+DyUsoMIr&|LX-rrUrvu;Z4q3j|N?h_djk}KAlUhaV!$hVL9H%$Boc(<~a4VxX ztd((>-iIe2mi^@8%Q?uxUAU^y*}I4~e<}nJM%E91JUK4#T76wjJ{`M-Kp?8@nEO_3 z??e?y#NZtBQ;3nG#;U_HtOSD}KDDfwAZI)SthCDMEg|s%v~BUBOLYBjV1*6G!?ZVj zi0(tx=SzJJ-yuIy>O91WBUvqIu{KN9zYOCMp*VU#Q{Q_2nOA8;2P_Tg)qXi(rtGv- z+8tVngOL#(aS6Wf}Q?6xMc4N&`WJAL$9pdIAj~mf=y}ul7*=61km@u z11>PzoedsDF7sI{kXw7ZqjTKWPPm=$gxHPUD8-@>O-QspDawsxcmU5zDTiKrYE2*lB5sWcSsguyHaMzn ztfFqFu>^=W1QoYP$--Cq#SJcXqQxQ7b(e_)^WJx6%6f~#dnKBaPN(d2`wmiPi#4wg zSZl|Ghn|~O%qE?`_Yqa9o(5Y;A4=y5oTcx4Lxeh35v3A!jMsQ});*l9D{2^@iynTa z+m%7TSRi{r;HglvIGhHEpQo2Sf;fz9u?$Uct2*ss0|J6SXV14y+P952t<4z_b0!F% z$3=Xp!pM8Hw{(tu;f&7mhrwEuglU&jXY%lG-}TOTWq$7I*MT91vb6K{1T<-?dNyjU zW;mPg2%zOY#wL#qW~=0dn!#9rw`+`FNl=VF!7HuqTJM=!a(cJxBjjQr4$mNv7{I zJ=s5l!^;#RC=D(s6h5-oRfr8KZ?GtR>rV|E+#62qh~4gYH@dxbkm`c#kNfh*CSF6^ zP(#q3>f<24p`jp_%w)^Qc+az$xKihM(iq<_HX`f)WTLN>7$6(L5Fav@WYgYLR%wBD zMdQt>pzNjrLVNF9k3SXcwB(ar9Mk!oE9cfWs&KKyrXev6Ee&LF8aKrFWua@0`%9P^i3LVz+86| zOIl5nhtSy*qRyeKi({J130`rNLhVeF=Y&XJ)fl0BI{#)B5)*Kpsz(DU5l z+`96BO4xnlu{T|Ip1(8$Y0)eE23AD6Ae59&8qVV(a^w2>pSpgeJ#@mDpx%YTWS1G) zOE9bB*f-4AasDQCTCOzQHW;&7#sME>QM?(2MkmUBGDN07@TDOcrFJYBVz9qc{aIam zv!8bJLf@B|2<|s$GI0G5a@D(}rp%GA95M2H1%&gsFLUfWdV3q>Hz(|Z#`|j};g?pc zBVtiOe@~P}J5m&J#YpIF3@atU5ST4rnKkuEq11v=gJ|t-w)+>M4T_r8MHduHm;giP z30$AO?wai131}>okiG=_0A-dre12s6uGn^Rj)$^N=OjKB1{+oT5%~laRn{zT)@cIj z&wWYc;ZKzP49NS3V$$$M5MyZM1V*zIOI!!1#vKN)*D&N>hOLrOnn6*dZ|2TS5TE3# z!Ql5J*>BTV*S(*jw4_!{p<8LUQD=n3eqUFkFgtf73<}$)Q zkPh#7B8zcu-nfr==BQ(0ZXtyc&kSPApUCGp5kSt|@NF`PYGARHMiSQ6i2LKSAHXcf}#YFX;!U-KUZ5ryJ5FSG2fkeNzym@)*PX9Q?IA+Q_)ja1dQ-H?$Y!05DT z9TnPhBiJ5C^)_P7B7w6A8A~Wq!v{~k;*z0$$QMedAifiVCK&pu_FcVLp3X$I?Ylv! zQW5n}Kl24K%&gQqGcMTEtz}Y3hMZ(qAT5}OtC`1yW<*VYPSGQvXRVkBhF19YyU@(i zaFPJKlJL-+{Wf%gD@1M_2B+mBu-Ru!Hjabec}qcpGs`@&umI6| zLYe{%_zqfI1Tyxu?~U2`%n$)ih~49E0y*0yq|V?iE`R%n=LIHh{#tEI!j)DkB~{%| zd8R_@!^BsS#ez_w?rRBx0}b+>=x6?vFlrqVds66S`W)#x;ogeta%4C69g*cqWzvae7QhjFG)3FIH+NC)lD_0|Cw8qx zfweXd}Dlq?xxQZ$WEES(_-0?s@H>!e}wT!8FhN-Mv7kgMwXmzLrP?UYk{lu zMTDzI{=Ia0xF3GO=k@x8zesopss<)AvdS0+gHDaXUadG z9B94#e&gkff^phsMt+?N22iNR&-fOJZPqc~D&*cskhhQ@X=E}c$V%vm#W(R$_BgC# z5do<62sy@IbX}TmFbb|LccXgE&mn$)f^doi>UVR37RF!U>%#Rs$v8N=B>?{l~5sxH$`07pj*ZYAh$Co=kpuLJeGzNW>euglC#N65o0 z;~exe{;`%7qz-YCaetZ_DU{1o1)9^b-?SO?BKOu44Vi(5vEJS)RJ?F`Rb?Lg>eg09 z9C3ZOCHe5ndQZ785A+p6tDk!38}s zEv%%o`uQ(z{Rn)?uGs58ONsP&dlfm;vD0NxOm!W$`z6dPr@#%kR}(;&fd5uES8rTT z93A{^o&tW;Y;|1ST(94an|BbyF@>Q@;+Eekxboie!Iv5`jp~)RRpmL13oZF8;)EGs z$?XZsN@hgYWT3jLM$4c!G8wEJI5ob}>Ywn^G4cFyxKyrnbG1ktb6pn-)g_-g)VIWB zMC$P$?#W-BA3U*6vkq^Pe68r+2le?Lx$l&14E!H~B*-ZPyNyhb*a4nh*YtD}JZ0ub zf{eH8gcvKWR~&q%%e~0-$I!W-ZNaM!mr93i(lTh3sp5q1PrlAP-VA*IuI%!4tT!1m z{0$o@G5ng~^n)2b7bHNA`270#U=cH!ENjaxa;Rh%ZXKdq5M~bl@)R$i_>C334)N?V z6k>U!6%kO(d<_O^4vH%VUx7dNQ#=k!oaUeo1cU~v){Og!^)mSI6we$E`D6|k1S0gP z1<`@^+xD`!Hi=vW{;LEyG?2=}_ou0$WDyCho(k+)t-$>?6d4GtT6KOhX<{Hf1QKBm zz^s!odjfugkQ4A5>o41N4Ri!)0A94>U$Nhbp#iEOv|b$quCs!`_1l!p6d-227q}`% zfWY;^^AU>dkdhKkId)c@H`yTOogBox7ZH+0f|z$ZjR2M3O|gZ_FG2*#aEnjMHD8cK zMhmR5$Wi}~aq%Et8*5?%f(*Q4v96Rr+dv?DSU))+fslYd{FVU%TL1O60}%UPQvKVP z`hN_+k2$&i76)>{g67L>cXGw8J%;ac>{qoxXnrdI6SUw20s9F<=U;+;^i3(vL4^MQ z>qFoj`d84s(_fH$`YS!a_+OxZ|H}<~|2Gm?N7!?MWQ~Fk&Wif7uf6$R!yJw_4|oj{ z0jT`}gFWsokR^a;;5R7wgo1!nx%$5$%HyoVW(Cmw4K?r?kN-CfA&}}8Q1%k*;0&2g z!#duJ1CrKB1D|UMa72d$_(tQ^fgBs75Xd<};-jAq4A7|Gn1T*qHqz7m(kp{~?VbGXLkS z{C9lb1}?S#Jw3#KNy`9&g#U8C|2JtN{!Y8_clL-!|5GxEUr8+fA;^r9o`t=Fm%@;r zK*1}s_->fp{TG@KovE)}qIxnts^de&KN+a2XgmKrQ=QT;jYZ+hv46GthgT{PZfg;o z|MV{;;5+ty?ANU0|68!7faZXlX|E)KKi$%K_kgyQ+s{h740tvXUo*DRCy~BXW0ro@X3@oL@PL|aWe2Z&8zi^;F3gEXZ-k!B;8(#3 zZNhG6KU2sBktTS?p-3XlF9Y%YK|^U{4U_ewxy!<>Yr}b3wXgLk7+ub`<`3}$stPka z**K^Nt=zNQcRG>euhl1x-4G8RO}$=ne0LRtTjz^aR^!%G&g_1x#_^JNuxbhT+t&82 zKBV(o8_Ki2A=cGSpa3=)0R5bdCiA?0N_1RTb{ShH&5okFYDfP{+_E?k)3MT!;h!cF zs&vrFq+~XfY6?L(|yi}4*Xv8Nix{|P#sV# zy|U*-z20k5%4Qr65yLXi^W;9Fuw9g(S=Yu_I?v!DDk>{#AY5tjCXv{CAeX5)TaVslyI4D^_tt(C>o)%j{1PtHTM?H zEe7ZBQ$svAiJiZRAOm?_WUx2K)9?HcciDqYA3diSsOlGJV122obMOA;p|B>-=a1g= z!>bdstn5HJdmPNH0``jk`)H_=V4^Uhi3?+qc@^HPo^bny2_lP4Bt)r}WBIKmKGNB5 z`E_?PB`g7bKzxrJ#*ZyB{e8vPbgCn$sWk0kjtCODZPB?m_Vz0L!w-E#;Q$%Tw1;Zn zg9es!$OsC$KVl9EMS zu>_r#mLLfK7%BWc#ryF?gxfnek&#d(*!S?xo4tA(hzFRT=p~LgP6prl84yT;T{fJ8 zKYNXnhHQ1!E|y(HaY+s`smX?op$TkyC-&^r+wze@C;S{Ba`T;nYHJ$-^p8dn(sw*| z*JaT1_El){0!d_#X;~RE)^nh9zb~D$T@7*G^2(#9JV+fHji^7-dGS1lrLBa!%Va2| z=@B#E&nm#ikLG9R9Ht6@I|Fyr(JoSG?=R$YhCeO?`xGnci~yC!z)duJBs?6}B&_q& zct(>JUm2-W&D^>!2oKsV&2l2A0TlkFR~&?n*!V8+^6q5)NVjRRcsPcRs8wrteDB*s zPnPd%;&5HFnM{VTCbu{D*3&Nk*(mz3bMj<6m$1c|e&gEGaE0%pOzb;9?y32YJXFHH z*Eor@y6y3A@h3FC;-scD;&K(K*tKE!Nz4;5@MLoLtJ}fjix=kcJ2s9V2T<8aUqJl(|@SFN@vAv)gAPqz4lGN>!~nLfv0YVKb;hQWH=nDc1#2PYXLzgJ&-D+HjpOM_Kc zQe0(}PZdO1+cmVhm^%E%!b0O!KHGZpRrEc|Pp60336uq+of6Y`5Qvg8WqbG3o;3={qQT=tO2SZc@px9@fq_BKIj+IOE!CBMD8h{`P{MU^GE0TBTiv|$EWQPg0p9?6sR zW+Y;G#@DWPYz~P;rC%`ZECkqaP4NZ={Spm*tOm<1^e0BiPpeM#=3p@2Z>PN0Ll*Zk zw`#o>$;MJB0G)ds&`8_Z@g!~_!L4*FrX!dVDO4NxcFziNsSVj?X|xCxDW{ z46v#*zdc$hGRx4MV*wpO+grXPi@}WH1#|g5A;ikC(g09r0V_Q2P0H4ssng47+p6Bt zvdXlfQy}^>Flpx_rAp^t(*DPrAEvU+^a;j#u%q&r5|-|Jg7EVvP^m{EGy6@Z{ZjIA&Z@VwQB8KL0T!~zZ0cW+^ zsnw-W5*!)V4!irk6sJVD~Q51tFf6g}&dC z5m|Db4mQOx&{A6TUDTF^SXD1DV683W!Ak)c?1T=sxW;fESmW*-d9%^$orSCu2PixyoQooXxL6Abx=r15BEucN52@0Z#K6NSL1`N@wAgm~1 zk>LE`)fpI~B#Mj$Y03V7{P&h+Er~sLuN<~{Px^wdkp!J$0c2VPpAaRA)B&f2y89#) zFl;E^r(1|ezk<*L&@b8GqhLjGNq`$(c$Y8D^N-1b=aBTYTAY}X|1Und8 z38XxOyq8b`gQBo0(o9{SVMkNqqzC{fk$!Lz5h9-Z>O;Ku&P6oBu>Lm+|3~d1)!&%0 zU_SZ9fE!r&E`gKNkK|x1U=RpDC5-7;U>-C48v!5@4&*K;T;^BEq#UAy{QoAU{sdvR z*t3P_$vJ08Gt->ublS|M&FclyK0@+>q6N9HN%Dwc9z;mey>9+zU8V#GTW3z%dzRzs zhOH)XM~@ST?>~iIJ5+heAd0bwc*%+bF&|iC##js!pja%PoQDJ$d<-T)A=%(z5mzW6 z5W`LqR(MzxnuhhQ3Iu`>k<7J2G!pq8hyLUB~77mU2us!(yBzq45;|uLow!GM3ufOvTz^L z6r*tap~_ij1{yRl;{S;ud-I;#i?rLUp}$RD#;J=$`IO8Ue~{0pA`o`)w(`XX~=YpMyTm zy$D^H@7R@qQ`ni?Fp;8M8LAx!q2u+J2qALU3X}Z|38Aj-HR=vN!qzb%O?w&+x7^S| z`41z7g?RjOLfdU6BIP|P;Mv}@ekXx(_jzfs(+zZCvN>0E zP+}_peg55+zL^8zBnZXR2!%J@SF8xOu4Sdj-SG&n3znoW%RJ^Qs2HxV;C(T5ufjCt;E{yNj&$o)>?xQ9 z{+M6Zy53Gm0{+~6!gH`czcI2s!b*ox0{-q34EF8ej&ylO;83u5fgVxyiVmXxa%w9N z0m^P?r^O{ugy~phig$w^=Ag{rdmlkVb=hx!>E{M^zlW6t&n?BLeX~9YVaK?(854%5 zOLnS7>lVnFC+NG;cz9V1q8i-N7mzwRz;_}W&7GH!GE>Rjj!ciXbCPjJ97w!g+trW0gDud#UNTMwNV1e*J8*%@j2@h!y-GosF~_#rfWa zHl(db!N%vfwTWd^_3u&fx| z#?&%BgbaU6fY8io^HhWw8c%E*dcAskZ&M9HbLZxh`ojl$_6ycIHxW{hYM@{s(|X&l zr?Jo%AaxcSB`xgUFi{VYjCh7e= zUhmqEAK-?E%Cgwax%L28cI9h`kfw8Wch~_6G9qVDTo$ijM(>Kn$zqmBPX~vO>1tRl zBrBT~PA1Rprha;)hG3tFIXqYv8ZHziXUHiqd8_n3@g(U&OX*BW_{E0VhL!uzm*}}V z5c=QTny(@f4IGc(YSY7No-Lg~fe$e1JUBw1f1NB#uVt)g=PUsaqr~TDc$z}_?kU}d zCHa`XO^K2|tEO;F=VhjRy1Z>?D78L*LiuEid>_>#-IY+y!LXFK6bk}$ijyg$!Avxn*~I1SpO~jg#D9QVm-CIZK@X;LyAiqhn3i>j&OSlP zyiF@Z+xv{OD0`^5(< z2U-h^BNy(CgoXC{Pv1lqtF}27Qbl|$s?o~u?K440ghiu13TqeKeypqa!rQvs;4g^gw$wJM5EV~2+Du{g*wq^rh6eu z=|OYK@NhgPDNKFcnBHf%%Vmy_Vi;FQK``Prqg9R5A;?3gxYI3phUujz!`Z1|y@YfH`f znm8qSk(}hX$pTq_#G|_InG*Hz@Pc>hgMwAh3_@gmALlk^mWL#auSj1uFJ4sg)HNp* z4_cODy?ZUHRncAcitT*G7b?u`SvYo;2=KRVZW>F*KfSG6Fn{qLWsM=S0zGYsVC=as zgmIU9uln#f{cQ+dj=IBl3RvgIJ?ht4y)DB)-CQMV6+7EXQBY$ew1G4JGTuXA<;NZ$ z6Y)>&m5MN%X9xaNbNqr;co@u9iQ?x&8Mqh5V!^9tFbh2`INC`Bf)xA5!s^Wnm#G!K zD~tu8QA2s#;|ALxe#yjxt?T-PLwfjR+{ z5owG&%4-rtVQ)xXN^KGJPj<$v5y=*zznBlHOFgc9N#%@qDN?%TMBY_%xv0&UZf29< z@t()W!npo8kts)qOeM#Zb)NO7q|kS?3110NA=iCwBJLXHaz8p4r-q^u(`aC!n0MNM zBM>KnU$8-6ToiE5&9zjX+u&i0dm$Dcn!i1R9yTlZF?&!+G#Qy_S^r#E8s6U~)+*hA z$?k9M+(8SvZw+FPTad>eJ@>`!&mkdUt}mq(92$&oCX*1h8`y`Ouh(N{$&Mhy`|uSq zq4Ir+FKQn530d&rt+3ZDytv{Udg~aAx`Arw6ipr7!H*BK@`x{jn5^f{%XZ(~9xnUG z$R_L&5Tj5};{A_Xcnj9;Z%=UqQ}lG$rjY1!Ot+0~eW|Is27j9^Q6OFp>UO&ex&$JH zZn0*6`!xY40hooySSo*+vREP44BFzN?VxioFn`#OVqg z?Vyr+%Bb`fiLe#gSU%fG|H2mt#jpojJEQkL$Qs1-TN7vzD z?kNXDL(%2olB@${8uO9wLPIa9zGd1n;Py_j(D{TyBHQ4R)x{qERmQQRr13+wuO@$O z)TU#vn;ISOacHm=*BXcDPhz5pVA2b33bowX10fk08uLvp+jC1ID!`W@Da z`!+i|jIHzyNU`yzZ-$8BinyPI712#6W1VlE{d6_Y&5d!l_qjcM?7FOZ+V`CD*W}-L z%VzA%3%4RXwWOqlx!6exz}N0xjAu9Ic9(|NaHtCG!x}l6n$+^VYOdy#QwOI%iR);+ z$1(y!9k}v)<1K#peZ%z@E%4={xOoJJ`Wn*KCu2yK zl&Y}MP~zJHC+O}9`{ZS=*rW|%IJ|JgIF#7&eP{IG!nBuK+Z31cn|BC%Nke=cF;C74 z_rwt@BG8A{P;4OqA<9&Go}Lz#bi5SWWaC`<=5eBR7EdG;in=>tS(zBS^{Kyh#GsIW zS<+9uqG2O@;5PQ&4B~Z;DUON-S)6~{TsJH%bk)}qmjdST2sBTA02ojEX<@D$7?JmwiP z$oE`t^IX`WMCxcbD~1mEqsOYnmXu97UkPT;=WhzZ<4W@`0i}2c7|sd6$r57PEdvip zjd@xVzOIp2*{WYSxattco(XRs`Z=;z{j-jB?K*6KtocOO47qpr_H72RHwN)EkN{6t z0w^-7rmuPB#l60{u>xCXT?K!;lMguoXj?Wc|Eu5dz`JjUDA8d}{nL2lu=SgW5)gL) zh9m9G8xM9)53C6gKP5BQok3p0~ zf`yYBo7o>S%m#aC0WOo3unGJjdl5=00Cp#GP(lD)(f%*ZbaqY|Apv~Yx0FC1#1tse zVr~j3#QYf;K`9n=6x^7h0e=GeqG1Qa=&%D*1aq-1B`O2l;J(2j3kYNmb1e)GAUwEx zo0{tXq#-Ln-~uSshqwe#5L5vO0yt6F>IRTCaxgp~Br7Ol0D<^oM+Td)2vDm4QpX4e z1?cf(t0h3t%KuBVCzBv&99ro&^#Xo@3JE~c%unrJyj#~B0R1lz{7vHjkP81DnZLUN z&H(?yEvA3rmhwNj_2XZ-MStWjca9ly?gsH90w0I+M@0$0&%eCz4=GUUIr4=-%CJoT zi=Kaj@P84Tzq{%yo^`kmxw4Qm6+SlV_4*kN1guw!SzFFO)2keUCsQ-L{1^V^OERQ!cs zrnXy86~?4*75 z1AnjU_$wtC;bat|9mWg9UBYR5>|g<=e!)K8S)z>pMQY#3m31op&R4@f{^n< zuPhnhJEfnK8kPQmjC8U26jt~_5l3uC<>ddKJpT&Df1%yKKKvhH1S!aZX(53S0t+sJ z7)1D#>dObcmE3=j@ZZsX&DS4fCTxysa{af2`L_`L&kuir6o5lUU{1i5wA+a>bxL>F z`OS0lzr>&et2Td0hWDQY7W|9m-~MDnom4UN)bs$=XlR=N(jxM$nN(+gUom0b;EHR03N8x9`N!!UvnU+Q-nh)Pk@r#C;x z#8;2O*5wZDR4SPj@b0R}hjE@)QHgiBrxcJiX55aE{Lz2z-WCc)AX{Hghv>o-@| z$-_}SkPn*v$>|-frBNYll9!$Z?VTwf`Jw1~kRd99KfLV#G8)K(#_1mj^*SIh&pc(O z!?WDp_Q*R8o2+)1#N}*A!B(jl{m;;bGY}? z-ZJ}f*UiX*tNnR+=b%XrUWMjd`Le-HyWX2Wn|jRCNm)Rm+3WZT$!r#twN!AQ(kQ#u?RYx`>1RxTk<2<+}WsBRil%FP0pXZq*^=6crsfi>Rl-TqAB zA1}>|#mqAC)|+*>`YM9U&~q%Wx~8>mUT&~LAG8=S_sFXhLg+vkm?AKr7US68V6erf zriBNIqCfJPyM8cFmvC3{kif|#HQ#EA#i3)Pw`&kYXxCV?^kmTU4r627GPZS!t(let z9zuTz2qO;aS`v^q`=pG~-PQa7Mc1ih+o&`W%Fq4Kso}9iGwTE@qD~O?AmECeJT?AF zA%Dqo&VOu(D#yn38S@t}n4uM0M1 zSK>GD*{W+d(u4ycbiW8bj7kQ8_Isu&)$0>?>hBtDfnjp#Qyb9{#%n#Lw6u^N1x4m zQf^1=o=e!eaOl~_Kmcndo_hFvaGUFk+aizal(IbyJps&A%((VFPN6?2iBT(MAuRG3 z26vb}WVTFmyW<`!qu*KyUCkGT|c;ntHAQ6Ab5wgb0 zVxT4V=Y3v@iox7(!Ah=AzqBuEEv@K3(~FcT24Q}RiZ7V&kon)`NKvR4xPThLw`$fH z5ph3Dby+YMdMU5&VeE25cF6T|uC$6+n+O*7sN@X;$5XS5Fpna^iD@~sN(L3J9U8%9 z%>DG#`U(B&+vHnQxTC5OwvF}acW?6kKgE4_P!!*nFG`d_K*Erb90!Sly)4X5_uo=mT4HPl(2TLy>uuomkD<#w|)yxY_x3 zmApElfR4VF~`YlKyX?bIK5aHoGGEuagz zd())5o`jMdj{MadnVapU$U@q`Dfv>-dSK=0bgrL#*^leCLTWgcN`>)U6wt2R|r+astzn+J*WNj>+JWnfn z&e1nk*R&Yq>F@ru4>YN9*Xu_X&F^Q(2`0%Pyns%E0JxceB(!_kS{B4iO(Ga>x9B|l zJG(@IPG6#jMLW#ynP6Lj@YZChZlc;U2kGc=?_lvqOWnTOgX48>cEwlJRcc_!>up@O zehypI69e;Ea+-c#ea+ci)l~VwgCeVqGm~FQZEMxk5GG!$G`)Q#aL>_UM2QX#b)>UV zO!lI0Ru?wH!gyAS4Es%`1uR=`J}~lk{MZyE@Ue?UVdWxA{-Bn37AwV~bLg6~6i;Lq z7AXJOw?y^wss!!9OR^q6g|e%{XzTr0q3{c(utN)SNXew;A3t=PIU0@bx!!pTw_OSo z=(oO5okzi}ru>pgSv=|Wc!#0vTlD5Y%u4FBEBDhQ>HSut53vN7OJ;%aX~nm(#ih0h zk+Q5O6(dTV;`}X*!*3G4r5M8xTT%bUDa8JYm^7C?L>{pJ9*_ zhC*c@c&5CwtG_=&Uw=djxw3vp3IY7k$5+EA(K)m)KA2p#iYsB;piQ|BQ-OBIiFa6A z7*f>Y$tuV9z+QJ)#c{XmOnBG$HjrEk^CtIr6L+g}*!-q?tj*mo)UoP%H2Us==IGo7 z+Zm7)@F&dC@tf*Cl6AV(;R%j?o^Za|z%M_1bOmDBFc634So9@qsb3OuO!gcaG+JZ; zDmX$e?i0>YJF72W7Ta3dK8T@ky1y=ie4NuDkOY6UZ2sk|pBNcLkL?WE$OAOn2ie?v zJ%R{VtUB#Di*4lDncfNPXKTEA;C&~*BV4ZSlsAe3yMoDEdt(=k0~>LwPE8giBO!+i zzOGKj1p~g}nXppyZvO0*Dw3yY2Hlxpd(s3ZFUYr(W>`JfzJ=M+x|0nl&_&*7w8ErZFY)z#H-DppE=J+On>m(m?qJ?1>To-u^3v zXnBkeBNF8{x8IZDn_~&jnYGw&_Xc8mL&9gKUsF5YV|Q;n%q)FE@r;wZOqt90wY~;z?pa$FX9ejGZ4R)G=#7dLDV^(>#lJ z%T_J1d;KEVW!kd|c8%+!>P*xXq0#Jq*YuUCQ&1Igl;m};a{n@L^X!~I%#09vk~_2b zJuYJ-I(L0rz9q{ZoOA40p11#qohdjE z8j7?`Wgr`f{`#fw!Y6gkE9GHwZ=k%_%9ex**OpVce0$4sc*U9X(+i`_X`(XvPv0_z z=HJs?3OU-E9t<8`wWy?TPIhl?x`;Zs%*g_`*U&^6L4gIfCC0#1#jzb(kBXu#C9R}I z3PT@=6tOjFGBiadS{I@%IN~m*Hogbb#RGp@j8D@dIIWOil;wr)UOno;$5MJ$_Xz5! z-=s}{cNBfQ!KXVh_@yU&m)B;otrrnZAlCgOsM{I8E8>^MDw*2MCw0LJ+_dTAD>mq^ z`K+opb#zuh$HTfm23fFZk+IcY*@H{^z%6t{nH~(DjowtP`GIHC^Ba$WV3q3-RSmiwHfdM0mna}ZN6kW=kwo@f@Z$$OUfcV(@%@J?_iW#SpUv;= z@pBfI1P#PfY+^NEG`t?0zVZ!;Wb3v(_%-_Qi3g=KgP#-9BM63$slE1dVTr!lN6;8aOlGabqWL(Q;b|uX6+J$#sRu>HqOdSeH zl}NI`Ackl=RV$5vx-wV~H~?~%|N5hdAB7*WlO_rx^55CVtkl&o1_eHODrQ+>b^BPh zt12S(OOpziokKk?@Q4nBHpGQfcaQDrDyYVJoqn^SGe}Xt;nd1@BQ=?L+$z#*yXcOX znofEw24ZyG9i#czR+PWSb+e-@3`sY*B{qTFNqyUO_-w+_J8+S|;iqupqK^SL?X3u` zp<(_|GljV>tn7|grZL~6?t6)avh0OWOic-2QA5St=M(WU5rvw6jF_W6=F6KF20o4r z`0oY#=Sbl5J9eFCaVKeN4`lrINao7v?{ilK@64ug?F4-K^%ebf{a*#(15Qc^zDd(C zLsRk+p?x+k=Mum{o!sNqlBIM2N zWo)QO@FQk0Gb$3E+nyzN6G{G=08Kyz%2SCDL^pxv|K&;kBhir!(jb4fGEWrEgv?-d z6wO)f^C+675};xznnQ^YtSFi_O!rVU(q@(+U}{$a4jUn%kYBc*?zB##(Dh+5D8`I7(c zeZ+uDwE!M+dD!TawDvou#HZ3kB&l>8<~Z*NLHeLV@1xZ9mIeG>AWBV_fV4vGhaklU z8~UTOPk~xXRKz_qNS+u45S6)uU_mK-5E1wZN{exrA;~CMDxoq|0Hw}!qnwZ^Y?1$T z^8efHz(o5EFkbGBdV?lI$(%Joztf!+AMd#-p9m-MOQ6(5Y_h?OTE2w`t*vVUv`KL+ zNV_zsLzT$Gq>6(PtMoL50yh^Z*vDaUXK^($Z8;*wFz0fQhkIpMhGM-R7LuGJK*OVl zG$Gf5JJjTSEpycA7~W7MghID>zXK?(O>X<~14Dkhn}jvF4D>ZD{w`uwOKx-VJ{)cn zw#jH%2HiNC?$|d8HkUqaejI*NQG+IngW$F;fc+}{WctPYnh7GKZ|>9JYGAli?;4vP zNr4~d`-TFjdIc&qZ*H6)+%XAudUkKB7pt|^BZV)%Zk?$-a+)f8{UNTX0MJl_Oslv3 zii;6EmewD8Gd&$7$ND)eHe)$Iw1VyR0e07?ZX1#uhIxzg$?ZR9+V-dv^{L^{sr$RWGKWMx@0M3YHa#b54>|# z0gK&fEPUH7G1le|UDUs~;wcnEFTF4}Pp#S^>Gf79c4=PS*YNnX+8# z@o|-?W-tGZlmP&DLQ+COCAk;$x#VZb+b$I&>>;x+a$K9Ugw-!cfSn_`?upi6G}A=} zwvLT_|0T;LXgGs3Y0yQ9DB&wJ=m|n2M4tW#!N?JI^=)S>Twv3dNXvKhK3Jso(iK`u z#g19Lna|%Pj`hL;w)L*70r|6k3ixwS$NPRcdu!f#WH-Wd)*$oI5gguhAtIjQJ=v=` zoK&`oZ%>x~(m|-92tQsmC5NQaxT_|-wO!v%Q==4>otA>CDpZ+kvU>@bkw_d# zxnbEFPHOfo=bEiOZwP}TD_=SY(Kqta(Icgp>vDMOt4b7}15jU12p-8)0oPQL`$5e+ zn*7{F5%QZyxvosnt*yqZa-H!or^gPky|FpsmNKzu!%UQX@{_`bE6F{ei!W4^QyO;~ z>|R9~W#EAf{XEA>qxw#z=iDoPVAg-PWzI`peCeU8wzb}RL%2m z(;a+gO*qh$lY7DL!;~|-&#hf-1ZPqg8=;RVUHn=W0ontztt;S|`CNP-ntE%kvZ$aVbOd8zQYPv#0Ie4C3NvZGswbZ_Vpb+#7FI8;$fdt+t1Y%p~^OOF=R6 zLtVHb`&G3=bv!H;SIDQ7;NrC{_&62#?nWZ}O=1>}TKvauH9jX3dMksI8&@U`xZg@% zYg}X@!jpB}{LH2eL zk{uG&MvyW^b*449>(0EcZoeHYf62#M`laN6I|L5?>OMvW7HKG6F6lNevQ3%=YCO=; z(#KVFv?oZxmW<;yS4rFqW~HnU_l5Wq9)59{hMFA5pm3C4kS`zUGGnJa3J6tCkh_GTiBtju|D}-sThOG*X8Km0ab~ zfLWZD#IR{SBbCj?4;~!#Lsw&c@;&yFmMsp>T~C@wbv;pTqxl*4xGu~Fn!0oSE`KLi zMc9#;{}IHUfygZw-sBTY_3*W4gO5UbgTn(?v(XOpf@S8L^gEhpWJ!7JJd)?)lL2(Q ze;1i2$5P=9i|ugUP4p9nJa>!5?^t);HxewQ))}otG07zN9ij*+3QS zsYSN7A{CDO7#=wmV)V0$vIpgBd@9jT9a(EPn8TAp6ez8g$*K-61$E^NF7~K_p3rEW zHVnFZ+^zHan~gQAKWew*?1c}JFH7;~9gA&NjzaEgZA2ksmMBGd`(Ie7>t1FD=DvE~ zvTO(ZGh+NOj#L6JU$v#?FfAjNQ5Y*-lHkLceZqrhM`U#dE}Ah2##=I|Nvuf!RIHNKREve$^Yg|@&DSZ0FTltX$2l3u6UBqWyW=bHqs$(0-yphxNA@XA{`oB` zd5yf^Ky%-l6DS0SKPBvqH_B8qHpl62RH*I4Rk86;OIp2VW-tkmIRAeeA}&R4VCyF2 zqhF3d(|xkQ2OALx7f7T3Yllu>8UW;t#)G#$caCYforxLK9uNYs{pMgx;Vwray}N-ySHqF#v`4M?vy_w+Czhn8yKKfSTR|NG%zg*JPxMHm~b9CLHAlDwK+iHu3WzX2K%2&Di3 literal 0 HcmV?d00001 diff --git a/2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_15-51-48.png b/2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_15-51-48.png new file mode 100644 index 0000000000000000000000000000000000000000..94180c3d8fd61f26c60627e921aca9723ceb13d7 GIT binary patch literal 14766 zcmZ{~by!qU+dfKzG)UJVNFyaB%BCfyy9cDZ5gB^u6a-OVK)OLvx+J6SptxE zh}3ilP*Vk@ zq&i7UIHk3uIfDaqdyS=af{P@Ky$gd4z;>a=2J$T}X%cGoYj)~u2?-8>v_o3Uy|+nA zQHX?Ihy-9@pebG0(h^kE(wmTQA8IcFn1BK4mX@L*J?Z?=g!_chd^PF&1aGjLvMQh) z21ti_C%8N5TX=h`TI(9S>8ZX_*8%jk-PDZTl;sRG!I8RN!QNip-mY$*W@grEl3cL~ zNv>wnpWaBlwG;-sfUWc-KNeRz275c|scBnlW~I8SsDO*&j4V{taxC^jzb<{0k<d>HV{Y8RHlgNBGR5w{y9V&__*4 zNs7XNjZ5c)xr6W~ew_29gOkf7pR!iAK>HsLUV4*PkM|dQU7C{tuxfLSU9Qk1Q(@6! z*{`?TcYEWGREZ|!uz|kN@UxS}j$WVNEYkh)m^QYnp|^XAt;SFe(8=Bv&C|&7uk>R1 z1Q}!F3aKS>xFp3l49~7cejm){bsr%610?m_%CC;$xVf1oI3WdmYdQk(sHbuIw>On9 zfI9D5BmX53^>XtIK;xocAA-QzQFxS4z6R>XsTu&`6Q$SAJIXY6+dZW->$2J2u!$Ov zne*V`&{iBw;+{%-#2T1eTDj3{`Q-}t#OP?@c+B{1+||TV$vqkjrwMCR6rA($?MJZL zRbOL;u?wcgBxm4DgV^zBKqAwpnN9jyGD&Tz!s5=3+R3_%j$@;KXn$K<_qe7I)OIl<4jJJP457aFFVfllNU*Qe;@Y|#Lk4{4dW!ew1Ls~MM$I>ZqDZ(>QE~J zPnL!j-!< zh}rjiM=yRWWAG8GfJLSolVlYePYa2TuDEthuS!HO$>;yzy+h^TyxOi9Sl@V&oUu@fK^u`T;^YiK(NVMTdHS`1=B#a`GdWgd(BJlTKJe2I= zI5=hxT+3@4KhAN>QLU{ck~X9S#x(nT6z3iR!Xom)ne|5tK9rS5N249HPdFe+cJRPc zw#{&XLlsNQ>O=!3pr#g=^@ESohvU-BiC4AH&)pK%MhY;pD+Yg7K5qTM4ktld&nLxy z+EDaqyi0LRBM=MQh}n420x-g8iW$JYiDoMOz5bACWhx}>X{M{F8dr6p+u`YPO6_rq zPjr%#@Y;>?b;ceks4}6Q@@M5P0x(JTEFUab$4?G{cdNIH4YyYCd;$hlVYHZZm;hDE@nrZz;y9Au;(dyp&$|j_LW8asC|J2|R)g9;C6Uj!b@gg# zv5$4My{sNEi6#Mq1f~6yxu{;oqxd245MTflEn2T+@cg~&4t>J< zV>bF4Bn5Nv0qqZgIzL`TH6^x|Oy?Q-yl=G#lg_iCeeb~pL=e@=`Shp8C(m`uqpHf= zx5EQbq|z0=2Nmqq`s_5nqE^JZ*Awu1dO)^|p#nYv_sPYACR|;(@Orhg$Rk-9zK5V& z*2q5Gg?eMWXMJ|1+kGTKR}46ypgxJx&M!Izr8#TxgyCR=iP9$^m&R z2}^W9Em=s>&fSij*N$>A2_ZT4B&Z(LPkN#CV|rvL=bo$}omAN?;}=_2DbZoGa>U*F z(S`Tj;kdV$clY7Lh@oSp9}m(h@su%HF1j(t&if*Jjb$geE0{mhqW{Eh_kz3di;v_g|$J(#0_09 zwDWwmj2_sQVXQ`ZDn4oEDJ}`{H}8ecNK}VLdieLy7lNm(Tc-`2q4`2~oALe8t8?Qm zx`sTS#hMWbKW+SFiYao*zbn4N``pYSuOu4gN<&6;e0RtLlOgTb$Um_UmaBX`#I=_7;zL_#CW zb9IbG0u047p}EWCa`|Dmk-c`4Mq`D}WUm%vpyQHjKkWMej`9fKeCWnWn59mk||8XL`H&uQX~&EYQD3W5t$q%EAT?D@75;%+Z3qiMx~}{T-2iX=^%`Ap}Zrui}Xw zHzGx@ICOKbMRWr_bu4&9;^}TE+1jYvto)EI3XK*+m0J_LXsT?f>bSHoK*p~$B*K$g zI8&rMXK+I_!mK=FbG~9eCQi4`w6%&^%iFZx28~M+D={f`4fvyjVrF5RS=Dlei%_Oe zFWxc5>otwQ?pbq@Zu*W{*$%v6pY5-+=kdG{vRv{qByTet&by<@TA*_ zV7APH@OftStj{OuofIFBjm#t7k_K`=;MPT;3H2!&PknwL6*0D!&-X3go&b0#=H`Yk zd3I$8uk*Hywug6dSs}UJkpWyaU0dHjIpzsYLnv~w-(q5Ge|9wPF&@`;eJttoZNMu; zLr=)RH;O4*Y~!hD^1|AD*WP|dEJ+d_$htNT$+~dz==)UYypx&m@d6FVJDuc7?*S?W zY9s9z!;*Zirh{up-TS6O^$U+iHETkkL~(4t1hRr8Wl)xqGpGgqe)z4#E>{p}=6Mab zcFRTil6>{`rEqs6uaeR$(m;miR8E8`3&RE-=u=m%4)H4l7(LSsjNthjUjH2G?XlOc!TRlU{_~bNE?rxL6+;Q}yDuXg z<`Qh&Sy8R&dV7&pTOWrQuj|KLpiU?Vydle{q2tXafR zNVA|-7+RwQ%{7x%ujMDHx1v(^)C-m@N{G!1QA;k-`^uND9Ddog@$%1#F zza2@0-}5sqs5)=w;gk$8%+XwIOW~^0IiJiAtM;A_{za%U%85ncSDm+VB#R?_wkWl@ zqW16gdvlmQ>1ZNI80kmGIoy`;uCkDSsvJ;$j`KFW{a#OxYol&5rj#|S$g%7x>@r%uH`V*5z=S90FpZ@bNHmYFo;+MJfo}Mo@AU9elG#+Zbp8pGDTKNo9 zscK9~#!lj-YZIUP%`vZu?dt*1uTlH%tjQ^Z;u?2bq|V{UbW|_&&(qBVK>=CN=a)?4 zdG2J+cx}Hpv$E5(=`&C5hUuR`T<{65J2P8fK*ZMzq@K2!2W1K(<9STCz%{o7quJx? z1tdWZ`GwVLVDRKFE8N<}*9f_Gwj27MVfJ0xJ{u#7mmorL{M7CtIjSi)Yk|8g|gieK+x* z!G2_?L6Wuf=a(rTO3`3e)ZnQ)QIHWbJY#$$4I}0a7ByXv4S$GFJ;9-yN5V8VC>8T5 zg)u(~?B{=_WvW5pvNyi~n%v>xl{drICI6VOz_W1 zasfTTFXHA%nVWU)_n!J8e*=Hg;T84pSSd$M7Jq67Voh-5l`UqV?NrPz%~3`NJ6HJMB|x?dg4u7uZ$!NiR!Zw z${JKp2Ylt|kqvSn=Z+rP@^b0zCpOHxtlGO8lTn(n`$h`|Bnd@iBQGoY!TPdgN_P4Tn9V5WED0)^8=y(wN`%iS~^M+H_n5bx0Hk9wauys-%+w zzs4%Ore1+;QdlWuqL`$n5#CEBgmSt-lH@iWx*KsvZv;xg8g;BmL!O0o@Rmy!5Y0}5 z|MG^Xzqqp z<5}e}N87MSfJPGz72Ycjf)~2U60@t=3cBZ@78|%6-t1AiJDDAKn>5UL_esn&pLzIX zErRRtbW2F{4ed_88HnnLl8W?IE_KP{KFZ|%6f>I7BvovX36C0tGGMT%r=>Y9*wIV= z{WCP+Df6G?96^WM7MA^uLOO*!lUss_qEu?8Qt9lTDp}Cd6IGCGiK_*az(aVUV|~X( zZFg~lkUAA7e_9cA_`wt>*2XaLTTD=f_>0tp@t<+!`PhLNV^~Nf`d1)RMr)7n7GmCN zy2>GdkHP(+6E-YlT2WuQ2H_D3)rryw>0NghXCRLHe>YTBHEZs=Yxo4j13B(c?5NEv zcPJFco-H%EZXg*^u;DVsAJ%ad2;JeR*EEh|a*SDz>4Y804e1MueC z$~;nc@kkzCafo^-;9EHZ_qtr1mYY@-i(=i|#3yi}q$*(pdvfo)Ik&vVKwJ;!PV5RH zF(QsU>LJQxaQxm3lP|rMD}}$#Q*HE$lioohp(73hp~Uo)xX&rKIX>$Ze82U_hq$i% zuwtMOxX{JwGmeNCGzI6C_Q=wjpmPc(yvk7HgrE7z5FiC;BSaF5_~i?D2rZn4h%aqC zxoKZZR3PE0{Dc8t9u$W@%1So?wMTrnZ0}gW`JM4%Dq?3F4YCze8y3xHcmS#QhC=)C z32dC(zjcd>nhAwwH@WK*IKq2hlg^2252krs^A^RXkGPlr{28_csSZL$qX&#`tx+Jo z7fy3$GLPfE#B|{l$U#!;y*ei%2nuB7UyyEGD3IxD0^`7WZaTotTH#X$(I zen!3aBd(RSWV8RJs$s>NxvDB;*ZXq+;TXSuHlv29Bly!wX;}eD{{-%V8M3)YRuziP z>YY1+pvdemQf4_@V;eIrmX(f}Jm)-C zAWikgfXJTz8l~@#1QzN3E7Eb6@(E?Ev$YP}!(0tXdnw2V!X7$Bd?Lu6%6s6tNdH@x z=a4x>)Zu&%p32ARtP~ZeCD8oFDFn!V)GzW^h6xngaXV<6Tj3Uw$(M-+ah{Ms$#^(7 z7FI}d7Gmd!LiLj`O4G8hE{W+#A>4cTTWMjEzNCiaEn;Y^xA`T=z|g+DM%tyx?&R#2 zC>9BSY9@q^T*&o7T3YvfG@>aWp--78wrds%pMU=6D2(Dk?{i|b>R322B(<#>V0cEw8pAN)>r@Bb+c z7u}~SLrI1L z)FA>{+Zz$&QOCCd3emoz8D`mN!mHyTaMt48IGO04=*N!XXp6mnG&ji;u2Db_1=|-btlaOzS#`_su02#pk=j&|<>J^|~VT)?gDuua}oo zM(uKoYX+=B00oH)A(NUmeMe;$SkA|7Q2Qy3jm8ixpXPU1Srt*&p~ zI4`Tg^n}jmQI4J@+!gMmPps5K-$xADiUuiz_6d*?%OOY3H~|qoJy^)YqIrIKazxMV zM>6ANLAYri$((f#WFdg}-5JR!_a%j|zDT^S{vUcaXQ5uBC;_|c1zpPAm1)`bE)-=n zAURl7ARnfrIv9+c>zD)%05Gn#5zDlq7?(XtEtmE>$@&Sqf5dW)_Uo%;M5u^ zlcej;q<+@1p{U~5Tc8iK&de+;K_woq^@nCa%O|x7zarn$j)__HYjg$vkJO2WQg0nL zKPJZj2kw6m`)>tuP@%#+7M(37kFNs3j*w>qTq3A6aReUxsS_y)J_sRF%}!0}^wU3c z@w_7?Y+P+FX4a8HMYkL(UcPR&=?e~|m!X~Kr0-*k263C9!h7D?xYSYFINT;LJ_6GwaDO0sfDHI1?HyVy9Z_`)O-@8?M7cN1yAbn034rfu&} zsfU-LB;J_F8F}*Dafh29-i&T<7$L`@V^?lLyzK~()AKQE)#9XHkE;KpMD^?|zNTE z63Acgn~Pf=?|t;1EGI5CkjKcgkhRsI<(R2FCa2yEW1lR57 z?L%aZjq=1(iukHU#3LaD?W?yOo|zp1{xRZnP|J*zYa}IVHMEwQ0iY?vAk$IQ$5Gw; zG4O|bveGaIB&GFD3>=fxV1l!=qe{_Jm@2D2Or+h|FPw+?OMgTCzDMgf-W;LsA6NGC zJiaCK=|&VU8w<-9v<+%|lh$@xjvTC3{%I_0xra0q{ zy#5Z@Y6r%~yzMW-e*vS%-Ai;zb3bx-6DzbFCM39=%BuwMSwEf5e3|g>nn>3+j;T5< zE4{!IZ6aS=3zvZ%y{I%)YxY-#NvS&S^}bG?dxkWokfpXTp?TU*)|6fVL6#mbtaOa; z%QCljJ@SJMAt`(D2?QZmJT>-?h?arlW?KE4>g6 zoDu24E+_Bkf&@Oi5u-$Nc4La;iFwTQy7#ywE3qxi0SOH4koQZ zw!pQqXad-A?)7kWi~XbJz-m|%O0)j6SD8EboP|~VpUcPQCBg|ro75dxKID(Pos}3` z_k3Gw)%YLH1u3B>XsKBRk&N-_5gKBYOiMkq=G3yPwY`P8$1_{K&hOe!r>To@qvV8gu6c6PS~{Yu2qry42oQ7G zr^BF+csqM%tuKTG*iG9C|5vkj11A>O(FX^HBTLQ)Pk$Hnta=9VWQFoYEGFm3?L9T> zv`Uja=`~RU@mEf$f?mnTRJ&?`u4jyy0*#yV*&5Vg2scb3Mwn4G?gpYOKX|qDf~}} zZc1c*sZn9ljX%>{3w6YeEk5f~LqF(-m~eTcSEcS=&uAT^-Lo_3r49$gJ37>2EC&D_ z)IjXLg$;G269cM_q;a%vFjwxD`=f9^tSJKAs0q8Opl^?%(5rGx_IZ0=U2z8}5pr!G z&U!$J94xl^da_<|Ck#z_buUYG+&l3EsL%}`TMHY4oZmHRT-xs!khtamrY{giujr<6 z=`-fWWTip;r82x54H{CEx2tWX^D6xAco6mj1BQDjb|0m%aD6?$tU&=~<6e0ATmNa+ z@Awc+2TiA2+xxzC{2lr$ zfCjNRRwoPMTM6{2Y*ozC?X6aSHjhdIzXFeNz}KBt@#oAyF)Ws5Vqg!Iduzm?@%d_T zDx?UN@B_xG82P+$g=GVCu_RaI+DE0dKV9FJ44D$30P0Q*7I8cd${PdO^CG5j=jB;a zlpg;r!6{c6%~?te8`>=JR3&5uGdxv533;Ql6~g8z^6wHch^`u9N(A{(U6YKNjv9-l zR))z>?f#~uLe=bo@kt7*Tn%pCX1cGjF)H{^ZWg_v)CFoP8=8Bg~od&b(<5%d2x@H+VvE;;Sc?P1@Es3w=`i zXsJ72h!zFaODBd^d~+CREh1^AIt1-NQDyFD9B`iign9OX9|%LG?$(b!bMj_kKw`%S z6kofiv`~`PfH=R7{sr(7^yo9m^ADac#y}ddTTb5kWW$ei*0eZ|ZB{CU5Ri8}^ z2}7~>>gb`^vQ`d`gf=uIuF`3MqH<_^@oz&UX-ruYC8=hlrZ!Zch{!XSuZ%f`UTM$k zI}&f!cz3JWMcZ0G2%vhS>h1DPhp?E7R~oj=$xAwARQ4<#EP%*E7^&cUPHvnd1SxOL z(et?E247L8#vA4Fg}z%pra@*k17Q`65G9xJ6+V|Ty+1?COqSypVs3A>44DfW3i=Hr z(UBjfIJmg>Y&9Ri;nw9V`qI+0Rzn4N6S%nhpYb!4P#Z{&sw7S13kb0`eVr%rnB(Cv zEh00orYqz~0UVk<_l|B8vQ;{1c3$!>j1x2F1;lxF$)q`-Fps>t_EwCzh_B2&=C!ka zZ_EKJ?_45)Tbi)wX&fI5@0l1M=cpNwYWpXq{~cY_-qWgrT#tt;2b>UY#RxJ8#W9@R;bRX5Vll1<<52>eNTd*9I`EH8&9b4%0sZ#MkPspH6LZ&5 z3I~Rp<}3M}zvydJV7)UR-h-qv&$s@RZ>KlbYv`c%N&hzqp>)f7Bs^TgxQ|I~e(wF3 z1zFaB%lJ>_el?pL58wP{vWE_$<~X8K$CA;S9mD{KLfij(!cg0qv)2+X2Tx6-@Xu)} zuOpW;h$PT^j+}@QlBWmx9OS;(*Z<2UY;bzF@0=_*iOvyJN(5=%BxFYJxQO8sMD)F* zqhx;v77)=!Qm|pC6luw(@xi44SwxK<1t)VZ;mL5mHTpLlYQ6v3g9dRVW=y4fs-B3B zL7RMMi^@#JiKXi8i&;9J2FWVsRq3(2(p}(3?6op zg$_!pMyD6oQ*ufXZ%-YSAQ5BeOHDmJz6l%_0a&-5*~xC7!qA>s#>AQuW&bCu|Jww| z{oIuBi2k{W)JR4s(>#U*{HOU>ApX_~skh+u#X@-&@X6mYans%-JH?SA{?}#7s3R_G zqV5wYUD$|R%D`DJgJ5)rUYuy3GZZS8!DmJT#WqiT5YVzYNqV}uCrjk9BYrxGgSH(l zh^REKe^kW98xr@qrpuQOwO)I%>W(2xWXXKGfQH~v9Ip?yeb-|X^ zsu|8G_3ZgAR8)@NY^xNLlt)n@m||Yv_>Z@07t2bX>%VwS=#gd4S)(BPsEv;Bu=y${ zyQzSoKmNbU)q_K6zoaAyp>^t^v>#$ve!FgPAp4#4V>IXLQxhuAur?m3ljU(yN`rK$ zau_~N%o333j|cn@cJ<)A#E)@-Y3Ns#o)OtnY%V+r8ckS)vM$lC7kvwHJ+d`_T6N^@ zRj?-p(xDttxOtzbnJRJ;$j3}dy5nJ4?ROYYU$cU2(1KdeZ%HnyYzAUz@LpmBh3H^u zF?YodgtD$;kei0klPlq!+%8alQqjp2W>pjLod??qO}qNFnAN2&zM8KMVsCDl`mUc5 z0<9*h{U~`iy2Oc3(5VOtDAq=Yvx2{tN3q__db#A`e3F`qnyzi$xUPQORZJ4TsZwr| z1ayeXKZRmX*-@YlM_$NKkd^3$JgxYN{WtNS`j{mZeR>sB3tzr`Cz?z) z$$E<{(K{6IXH{>TX1)GkaYEu54+c!v7*N_7@E|{|Q5hheOW+cHuLFKWdR6{|)S8DE z3nN&M-s3xxk(qK;~7sD=y2Wi>a4x!3B(MeoB}sPPG= zd3Y@&{1gCLe?QS%l2$KG=Q^o=nZ^#gsMj6WS+`HC<`$>+b(s&ADPth@4)MsAKq z&)&kAlHS|Hqu@9I4pVb#;+yvmSjB5qV$P994(8^%T-umzyed2 zUk!_PzTn!FA}+{nrC$Ysf7dML_M>s7n56S`ItPgVR;)3!cwYY9VQCuIuaF47DW+@} z7=TcM)snY|NdXW%myzmaL^<^9AM!_N3-jr#dkIkw_ualifxXQ}?OKCb#b#B2ud6Ls z>^EDRf6fhHd)y+<^=YRzgJ6UvPPAE&wC;nxl$e$q~D7px6*m=gEnS%FHJ{!CmlT}{5Ze|1;< zNB56cu;nw4v@R`&NC!CUT|Km;FlqkfJJ3Uwbd~*y4|sN?8$1TjO1YgP9#!mz>8P8G zh&SKtbTwv;i67(VNP6-~ut6-9tUEA`Hyc2uvosUeuhjiJ3b1avugS=lO~EpItO?hJ zpE@oUSQkcx-@UxqU#MP+u`j(X3U0c5F( z|2Pwzr*+-b+Yv5jZIn^d?vfv+>KO=YRClo*9FOVl;4`vAIH_*8imiZ087wy*f>E}f$(K{ zPo{K{6{oJ@wqoxLm;1|?2#T-Hp$FreHZj|y1AVZ6c61jec~8&d451w{Afu(C0CfV$ zR_80dR5LU7AiZZtlkwrI5WkLZo_uXd%4}_M>xO8L?b)}4?31-QzIUV}+ zmHV@%X_~ek&DJBEN1wZj%HFK%`b=^aLuqj_Yj{mobSNx*`3gy1T3TfQK?N_ZrFZSr z{mu7MD-@Lww%Bx&immWepm_PNk~9RK4I`Y6kp-Qj0@L7T85b@ww{`0k7%ksHU1m%~ zPUdA*+i0jq*jGFvlx5vlnko9p?j_Cjf5Uayy;Ky}eE5C**J9x-zp`NQJx$W;_mMyU^*b zY0{hx_+-i-Hgs{o53`50w+3@2`icjwlx9+)y!s8?`prE1-g4)&&KZBcaECld>R-@g zSo^Jq?luM5Lorz&2YB@fui{-vA}a>M`94P7bBN!~%RCMcM^?DxjpG_IDjRqwu|ilT zdnfH61h+>g;NFG#J|+Rh&-Y%aDHm6ZEX>jJmo7RB{dcex=g&X~?zzFWP`no6=R;~uW{s_)sfYbOoD@}* zP1Q_Mvg^hkfA&2%De$4Pd74+jCuh`D#8BBsn|edVnpZwi(03YnHLbm2U+HeB5bvFF zmxc~bv1)dI&xUf*G`|qAg#2;;HtJTB_to&jW>CJl{Je@2!)75eY&4wdXrsom3g`J8 zvE1F}Y4;fT&v*Z~Su`mmM){}DCdaU@_x^Mye*pFsGPe2zAEfO!+F{+1KNsh1F7I}= z-0YKj0=mdw?GTzV^*?%uo_I`-nKV2Jo2f_`-PRHuY$Ya}#Om#xyT zYtnXsmo(c;y=5^jd#AxJhAb{yQQfXBF+QY!bZi}QB)=rUQ-v3kE>!>@6zarFX^{_o zcQkF~95DeMjuN*0;X7x|=yj}2-SF*$?VAj(s6csqme@0e=UV0rF3ZoY-qdr!;KT$} zYeBdHp9Qmyu7iGuQyj0Y(`nfAB#L}tOQEX<@cV4L85ymrukv>wW=ov39E~NgmjtS~ z7*F4y^H!God2CRZOn!N3-(r(#5uxP6$qeJGq@jQ0owCKcQy@6a4zr&Mw}?s^dDZ5Z z2{@(@cgRGDQ#~2fGWV$W@k2DBkKB<@Gg9$(-4F}6x8!2BhV2U#;X4aMF)>RA6+^>h ze@?D@9A=j!rgKy$A@!X4X6W~|EKn=07@s1a>~>XbH2X!lkBPiOoCQqSThqmq)~peH z$w{(0bWdGQwNl&H`lUr$hD+E$@1^9UttY3-bZpI&Y3V;r*apY^HQh1@xAKrnV^mnI zp@k`_mR(D(fCYqYRcDz<%#u6(acY2MWq((WwP;0ldP0pAkGpoPo-fA@!8^oZpEA@t z<2}q0F1xRFOzUavf?{0(xn{hpY+YmqI8KFo@H~%9+etDmu;%Dumd*OGl_LKJWwaQA zNc>A@--m$yb^69$i}8h}U0TERr<{P;84~cd%6yi)0pWFS!+@KAd*C{z{W1 zim|HkVNN9ZoZ@t-esF8uXgWm!2Rf6#_H?WMufMUYfyy7ss!xwj;keb4(e@cyI%hHw z&7e4(ubkE5KU(aZY26?HGdcV;um8uCeOB*jx9$3A&JXuD$m>tOIY1|T$j-$}8jz2P zKy8F3e{eq*3eo{4Jg+CPPiyO6T_eI8KK6VRme^N54Q1G-9C&j5zasy#_%Ym2^W~sw zY1QS{rkES=w!*ch{dfOXVDi?4<)xdSoYYn}wsAIjA@=pVyT|C2Ie}vz0e(xK$N4pE zAp5U@dl=XC1_Vywy#r*yZ!+)(JLX$imx<4aAPmc%A%lJA5>3xOki48ljL)C%A&F+U-!p zqQ}UaT8W!NTA!Ct^P6e$XQoq=ziQ$=izDUQ5Z&6WHw7jY(oxFin3gNZb{x7T0&3(R zHbAl@_B#Sm*}$y$25x`Qfu2EfM;=UcXF<(<9XcaRa(^S0cmJfV?ei`Cd_#~Iq)m{a zb-GA2US$=I-0qh9m5Z|_=h%LQKy_jUuI~P}j*;>r`5uLu$p%AJ>Hik%zs*6H0h)d& W&bOg}&cA<>R8~-zuadP4`@aCQg<*UE literal 0 HcmV?d00001 diff --git a/2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_15-56-15.png b/2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_15-56-15.png new file mode 100644 index 0000000000000000000000000000000000000000..a6a267d74e3ba9ae7567db5b24d1f7b46a8989ca GIT binary patch literal 15176 zcma)jcT`i+*QH7oq$5%V=^ZIb54|G+Lhnd#B7_bBL3#;D?-39}?;RAS_t23lO+xR1 z&o()UoPm{W3+lXPpcb6`f*wfs@ z-BDK^9OU8XtZ(jQnF+53JL!QQ9B~SAbaqjf|{9eu+h)jmKSGb`#l2xl9btTU3=qJ7mmg_OYb3O@<9PyZPFRG+AUjDVARGK5 zjU0`{I|@0jbCbFs*uQRD0a<<+i%z=~S>e)_s_KNUzgrbHQCA7_Ylct%cJ_Lb&b(`P zx(@}+?uq%ZFVy+}Y30TZ`6Y0?_Zu_+JZc>{(ei`bzcN6~GsKSFiZ?UkoCJxpxppA;;HAZZ-3kuBr(DzT$ znL9viYYv=zM0?*v)ix+y!OpA*$Vx!FLw3-{7q)V^L)O5C*`J<7%!U<1Jk6eXp8$9@ z+NDHjEkpc_)R9cCGk@W9y|X~cEQog^s@0TZ2UNtI-ECv3DA{aft16f2raBy{&Yd~! za9iJ?p7?Qd5vumWza>{=%GWzS4rp0 zIkepDR-#*HXC>icU_B2u7-_D~chlU^CnJu6+J=r>ke0tOD`%Xw;pXNyKYW|SA!F$+ zfiNn-K-z_(t(Bx8=h>XV~?(KD=++API*DNd~w+r}9H zj=9=yC+)zrVNwV*=JBkAIsD3l|6sVfOw`Cv$l8xCsa!-HFXWeO5Fk&o1o6$6Zwn;P z`lDSSu8Y2k_jbNqgz(j{vYl*`-KYlJh9(mf9;5LFszv|6Lr>J6JZjBWdFs=J%W9?TUwI(WxUgmy({p4{& z>Wzs272BcAYo9IPd=fY775CdiUa81IS{(mU(c^dUu`!UtffWBM)By9M*g!+3&T3MC zXfLzzEVzg~a#U4KC&V7kKb9*{fyJ45c!QBlmN!B7mnN7JQP}NjX(}V zo5esuMwG9PlJax@SM0!^((!hjUlw^%OSuqQx)C2q_8*w@CdQ8-es6Gdew9bs>PCsP zTX?g&=4?0;I320{ptVYjd*DDVTaV!dbP*>d^F3?1m6hN)ytz8OY6@Ga;12L|;{j+({BuNrc zu4^*2u@y}RSC?D(yIgxf37=cR9BNrg;fmnrpeq10gO+tTi+zbDnK%W=3ooKZMf3_ft^Vl2^<=1O#ea!$oqJ* zD~SNidG2XO2=$0R@eR@NU+j#bEs-zZ(AsD0Fvp)slSQ(ZdPTr&B*X5o@lX z#}rlq1vq(H(#OtxJurXAz$l+uO3^pi5#N9}Tg%Qn)bt>FUFOy0p;fW@G>7^_x;Xt4eWr=36$9>()kOf#h(Uq+9PXqnv4ot=ius*P=^tlj z+@^)vB~ulrF>2_!2t<6%7k6+|fr}F?F9pl!>^1$kJ3Vc!;PJXb2E<4Kqg67RB8PQf zM-@ji)}E=uX(n8wa3aL<^mNB_;`yPX5~J(-_$Nm3R($6rv^D*xukfpbfJ=Rbg^}?i zO5XEa8cBG@qc@Bpv;%b@J*!Fg8 zsRX6Jh^BHd;s^Ko*f`Ev_I(fc6Ma6DP{#k!dpn!nkO3*FZ(p(N8)=&-?r>U}+&p2PIQt=i68kMop<@uZ62!#T69ce z3YQraBv+{DnDq%(+%5`*`tQOlEj`sRZ*c!cW_M-N_8D*{E7@F`%($e>v%CxfZ+TBy zKZXS`TvD2)$p*C7&G6@^Wa(9uybyIw4*13fkip{ ztiLpe1F?@BLM`0*<~rG?j4I5t17Gw%sUaI3KBsJqn8jnrj8Z1}O^}&OwX&j>Aw5q2 zr#zTEMROCCQ0v3&d*t9_I@qPvLD!=-o||PtwrItZRH!}}uQ9}6%F1^`#u1RJI<&ht z^0&tqF>(z@blQ20Du5!~SCgb5A~Nx+tbPL&0I(Bdb|>3SusKD`s}S~jnmk(KaN;0u zasyC?x+t(x*v&XsO^@Q}>D|%a)fVy|oGpZGqZXG$vB*`D_GCY>K% zHVrXl&^D1v_SaAG;+dhq#SK~vs0Im~I5X;qmQdzJ8D_cYnu?8V>n~;7s#4}beG19C z&a`l(wsw2mHvLL^{-p$(wt{i<3*4M8oKstkINj~iy)yd24R=z>wiy6w%RU!oLEJ-a zHzs{f2zV7+<#RFDssk1m3C823)!Y2#vSJA+FXYq|Qgn zr=uvJb>UgLIql+^;jR_ZaBk%^$KXf$y$bOu_X<)9X&(37{fOGdN@ zE)6H2ZVdSbOeAX377AT`^XpW7GQ|lY8!=GK_z3*KLmx55W`5Ruxehv*uK-$kMg9Q9 zFRLs8-!VM42=Tr7R+7s2t-e4b0HBBYkRbbEYE}UwJZH5 zKa$jc$9A)|zQ#jgn)FPCqXJNpEBETIALRLFJbxzR$OL~B%^%Z|sEpw?SQpQDW!D|cCmw^jA675!Q)_Wo>)E;eIs zmG?!J5y%GkhoXAczKKNpSB3QtJ`om1&jKK1?*bcI3xI12(b~Mblj+}I?UFUmvA7rs zmFBUfDOy6P>!iMoi|n47i_ie|e*|aX{JoS`vH$(oz2pe~ z?nC>}X|5UMTal}NE+@*7g|8xB+(>|EhneXAu{%oaNK< zd7H>Jkt^{wGSA3tW7#T_Wvv&h0`c{{B-p8%_Bxk^!hm;gV_=-L(35M3(NDE{@p~dB zx(8${aD?1y8u`=q@iFABMOdMp^nLdDg#F!R%WTf!P8WY_Bx0O9YvL8q_XQYW6 zp&ES$YJla{;&>EQTXGFSc?h#F&TRHzNLkp2<-Xk{FOCbYD5q>di5CtKni{ZqAxEPl zHyw~jvXXX?_4F6a%60i(7It-;YXU3viUkWW>>za;vrJweU0pD8XeQaZ988$b+?j-905G@yz@q{O@PS;w?g zlbK8}u_uK|ZX#=~J^0V*TCJFlv-@0fXbIjIVdwZ~kzV5LQ8vm)1NI|BFD zH&G>)B~QxGj>V@(>MAHeA+d|W%MWLl)sbtW&`6FnjXa&Q*8;oiTXmpgQ{KRaklM)T zQe15(MhY7OLEWtO-+Hn_mqbAdFvo!9bk6AJJraV)jdRnyExfn*9GjOEOa1QMQ^hkJ z+Vsw`=p6|Sh`UIu!b}@Q5;RX8>T9SmeKY$F<vuN8#USrnINi!;$JtUFMYm?`>W0!jMTUi3>c9PU3W5>Z8ct=oqHb6S| z4-tZDWO|18*_=YhosW8&nh8%0wtpe8(0bemhQH_AJYfeP(}R5xWzAmCg8P(W_bwMl zf8A;zDYLEPc~emO4Z3MRII>N3HZUTvIkD|fTV`5L*c3|=^DS%k?DW9o1eS%dA9Y9#xZ-Je_&Wt8=fVFq+p`bs`bt^i@^ zF-w{P5D(L?=(VM3M$&l`JJvsXe>%2??6%Q#C4)b4zo?{tsZuH>Z*q*Q7~ zD!o*)6YYx~zDy+nMAz7(W^Ud8j4G}LiN+g?icZ*39qUM)+>q@lOEuQVGe6GwbteS+ zBq{vn6e@KYW@ZlK;B8Ul=R&D8;4z&NRdBDh6(D|#j}m{e=iJ^tRX;IPg89^z0jHS) zhYPZU5|=U#A)@ae04`Oae$R9q2Y>@a71Af**ksH~(2T&>Di?qeJ)cNPVaao^ zR!9G3^So+gB`RZKdYY{u%DU>T z1i0aGzA@AS5H+>V^IUAN`+_!tO~Po4=#q?wlq3be@h#aT)B{E;YbpWLztXq8)WKMn z`t1b>+vbIJh)h;1OWXqkpQADk~$ z%Pe{N!3+AvcDWFdJ`aVvB=2kqDt4vsh}`~dDk(_ft2GqbO=$AQE1YM~9RB?FbfgDp zSd&)jC`UXrDd?C_O1?}h7Ov@R4vS%L9C*1u(XBQ7b4c!lQAwS`s82`qKP=tdC?=qT zkOC)&crzsBu4wy$snN(VPac8o$E+{oO`$@0D2MZq)j!#W;@jESp-q)S1Q$du%UOfARw>=-kmr8UvQ!;Bi zLp}c;$RhQl5CittZg*=^DOYx9=eLErYhX^*fFkYtgi-Tm_CUf;>3*Y^yI#fR62&5yx$YB6izFcp+KS~k= zdN84Eez-$==7n%REnKLL4ta6SFD4xj0)2^^s*?KBc)E&amKfg|5!c)!64W5OZuo<} zCis?N(z=X5=iU6z=N=U5^AMfv_UmtPex7#At5T@IVH{C(n1q*>E*kph@XZDK zjO`PbE@eg3i?6VG;*jD-J$gG;;yCxzIx$oc`Hs|2IJLg;F1e-qgK3hAWz+T}OA&zU z&B=&Ahm+*IKzN~9`|VX1hQ(p4f>Uy%&ul{w^rb>+VWe7;+RxLV|LFtFDTxYr zCJKFkp)e|CUfyL*wCqwINO&ST4a~bOH@XrJsO_)eoBv$YZRdy=lKUOFeA~c={~f19 z|L88xFW*zcJ1zW6YfIhqbLMMRxRAF?jwcFfn%;6zr>SIpX1Ihy%7 z?<+8F{2X-_+-o%l|MP=QcoYVJrg|S?I08Q;AT$CY93}W0Xiv~O()_UenzQaN_YUuN zr#!GEBes6YRZ6yPJ^k`%r1o5&;1iZ}l+LK$lFsi0YVhogVbfis8iYd1>gVtg)$Vxl z&h+B?Bug;GO5H?=&U7KugV_wTtRPeL(+v|Hlafx{chB%J08jIZRnf|GkZVf7ZX~>t z2`IJXi8guND5K@}qd@dBgIa40{Cnj3ujES_&*M6LSm)2t>L2gCg}fKMRzc&(_~=-a zeQ0cBwA@jNP^u~~U51>`a42F4wet15Uyqv!9iY$teNP;kIkXR6trT#bor?z(t1s81 zSTI)yasQC@GlLYdepMQKNUu%&m)i@p4}ZhuaMQ@cFzFx*bB&?J+A@i4E*DDJFu#O2 zSW2@m8*zHQ#>=A?K9!$r{n}4jZY2KswMxc5@r0OT1)R*PN5BZ^66MMZ=bTeG-Hma$ zJ}!%1wk@NF^#qO#(_X8`RZX*O&BY_`><&m^ciUarytC6yHM%vCPYxP;=2t;Yhv*WW z#1J4>B%0iBDKJq!V24~eOl_F9%ZfFik>X*dq}7i=Jg_ww18^&vq)C)!a@}9-()DEP z96^DukLx_(YNU63h!%+F8u$?nRocWHZk+26YpRnFPjoLQ%4DQaAjn{gm^o&rKoqQE~Qqb1P@;csHIV zUh93)+fatmAF7TOkn7@}dWDZ5df0sGdpc{4fTFv{o&ettKNsNIoIeo&i^?Be7UH!Z z`Xi2~s{FUlBCU6)1p&afKrt|Oi~pQzXFPp6DoqI)D5WC7+^?0ng~= zxNeZi0R5XSR3TP}P#5Cx;78F$R15?lk%Zhg#lM5dqCp-)kDayTNBtq$Ya3i0kN>lJ z^+_fc>n1N4YeXKosX24Z|GcD7)F0$=8d^O$w{XjTDY-6M=C%N0 zSfDlE%TXztmL?7}?FW(LWd9^N7BxY}VT6b<<}G^k-kA8{l@cRWfNOrZaaj_;;g`V|4lT?h%xU?gQLw?{}=&kIBJk&4vc4 zFLQ%1mLQ)9yd|p|`Lf%P#Is9{!1MjnK&0HY>!xenob4~W`6|uSFe|1 zOn$PFlk9>O>DnJeI)nV=l< zJ+K4|7(ys{(+wAd$iZGp5zttVM-mIAMobHd? zl>wU<=tYy4u=KW=i)WC<4CI=4(8Lhi$wfat%%oOOPYA0DehYcz1YaL?hFT~N#k{`edFk@QS%f$QROYi=m zHvO_myE~4638eq!!@|+|0&N#uFQRK=j7aXn#~8bmv(y))oU%kcBBuCRQP^va<}na% zB1}%Jn1Ul7;mJ*OeN;Q#`?I1V?^6lUA*1MAAuh#RNVR)y`Vi~MO6QgX6gWY6 zi{nLY6hkxVfPs2hyIIkBwIw~^o#o~s#peJHFV`J=%P7?$?#?7hq$0(Lu{kt5F{qAt za}F%-EH{QlssbPRdotDjmtk6T!(ojzQE{*mn;(!f#fOR-hypZ+0bQL z8t;$oU+`_;^_f)u06fpGIyJC;mruct(#OhPN-4C#flxK*6%}( z6~*Wd46!cIZ$}D$PR1!poooGK2YVCprYqXo<%6my5#c;2g845QU9zd;S~lo;Voiz{ z5qRl$kuTHwBqzyKl&@02u?GQQ+5t!_1yMxB?AYwg#eH!cCmsj-)9?gK9{HX(w6a21 z3p94MScJ0#2N?+u^n4q50K3DCPISMRbSUGjVWT{WZvn>P6^2%W;ee`Oa~?}=m=wvA zk1eDCyF|8U!u*9YUT-3gsQ~Mc_wM<>^>h5B0@g+5IYhtYrtz7!k2U#pOqjL*xfxiP zi3JiF#~-IVZQEe!cK!UE!GB;y1^d04gC+4-;v?|bhSu`Euo7bT6OkEbV=YcmzO`vP z+fp6mDrZ!Zb}{{EQI zB8drbmLIz$d-W)dYZd&~H*<}(NT~ncXnwwVaLg~ix@u?YdX)xQoWug31mBE^{}p@0 zQwNN*Xgr-K<2v{Gt*9IH{U0`%Hw8Z&i~T*=0!p_d=AvEbx~Ch^_2OhCL7TEV_0W~zXthB=4h{O*^(uQ8 z&y&Khr);v1c=bDx>L)^OWGYPQ981*Ss7jR&)2_PDLsJ@F3qTRf3|ZkZMT->Gp-=H-Iye6EwRJg;b=R+fyf``!*9221R3+Rh znMXw{`rw}&0PU^VP>%Sxh2Z>Xge_DXuxsGb9gCwi)4|fs*)b|w?%KdwosQ{^xES?0a{0J zlNX;^_R)26&$Y>k&?W1pf6fO18BRdob$7iy7od#rfyL))8b)n$2#tW{%Bp2D09F0h zN}Z8hp@L|;%*$z#e=$%I2-}P9cxn~2{C%T7gd-4@_{kvq5k!=~$Kph}77Iq}k$A^> z7BrV4qyM1Zr3rD6)hx?v8T81ZhZI69HpnlMizUE-49VR8Go$ zP@ZET6e!AB;b6tv;p*1*VWdRtjkoQO?Sq{K-9UM{FwiH{@w8ku@15cg@3F%sFCxD6 zpOh_c(5op-z-=9;Uo&>$gx1Nxgpf(&qR2EbM@!Y89phRR zdWNS=r3sXg*F~O5U$Gsri>PBhO#PUd?WM8XuYS9fLh7`h!K#B>Vd$}%Slg>%o7L2) zH52*1+7KpDJV$La^&9n(XKJZa=wmKOmHfNYj^y~2S%FNpCvKsM*p^8%xvTDvde7=I zE@g^%jw6fnSMVK&=63?6GB^~VXUD}*#E+Xv))6A9**it&Q>FE56A~2)Rw7Es>0)Pw zDa2j!nH(&T!GjoN16vMnb3z@LOn`b~`d|Ne@R4~NydrtLi@^dw4pb>kAp4UiUrU?@ z)|fPR|F8qXrgYw21u_%W$i~C9&)LVG$JCzG18AZ-fE+&OxAjA=#W`vv~Zw~ z*}|B}o&DMBOhQ<3eA=#rJYwrC{#hvD)TTu?imN7m=-0K-cFCH8HRZ^bHk%3z<1osc zp8Z%97$}(t=qtS0t-mq>t+d#Do@JGRzw)pEq%OB09;f3`g*#0C{kipjrhxpx{ zIm+Qij9TzX&|a*$l9e7t(B2)v!-+bNx9LG)p1qX)4^@>bA=@{nyRsvy`Bk2I4wi>qA$N_woQrbSvKX?mUg{rx+EkAYbZB)C!yt1h; zRm9PIj@|#|`W%Xzd32z@&;G*6gEObNV?SD(?6t97Y{ooneb%=l5Cg($09R5=>Bvxh zmDRYmM$$C)?Y%Ti-0+gl?~9+;?G)y_h*TnuVU{tYMAn*J#tj*Qf!w9i$Y;gIM0ihBE4-!R zGL~UhM9WpCe%@Bnu#-Nal|nWf(>mR8xSqmc5vzSC1YyXD>{%U$R|DdLS}R71D}Om~)!qYXZSlMOE>Zyc65?i?lB6RisX$$ecX&HSJJfqYs`F<%qStKG zXp2E%P}ifdnCHSvi8Vy^*p`Qk=GK`NBy``(Vzlp6Z~}fgM6;`7YeuvDFvN!068@WK zC2lx}FNQdKbYa}hob|0BGog=J%(ioA+lqlM%-k14PASjHAn zu>0oEXf&*D#Y#F^6a8ui(AqLbXWtQJ&4k zaW)1u=kZZW1Pz3fRrj04e#pbh{Zi&2+iQ zWK`$718*H)frMroqxAf@!Ic>(!>7%4FT`uP@Wl{$pWd_v*7I{cJEsNsATtXe1=|Ll zl;kMGbglDs?qdOeGe|4ArQkr(NIE+)$|*Q@GdLSCKt5uXg)$7|fH=ax&$T#<$C!V= za2TdvFWM7TguO>E+M&a(bV?iyV4{@oII9Z~uGE860?HG1Y>%(3XJQDot^MAkniv-< z0Z}ZEGxB|%JECkAm3RKQ?^@ng8cbO#-K`WaApvn2wC4}Y^FEL#Ux9$x;m_8_n|N4k zb_%W{f-f8*0WVCEB?Y%+H3~k| zI$2(~02*F281`isQu>E>T{(a5GNjE&1%IW3Olb1Fuo<~Yum!U{2K}ARjN#(8^GIOA zGIeP+?o))Rz`AGhc}*BWLh=7-4LXcE_gA<)3$V-e72f1auzRQg3fjV6{N-8DrJk`P zi>)gal2fdM0vw9hMth>V>4@?{rf>hK{M5P3mpxVRNI-FHITqkqJEBy|@8p>^Wk#&j zg!ZkT8Nz7GxnLS3*PSd@GYq;gTR#u1;z|?hFqFfv(J%e}8~#o6%3|t>!)EK@Ov@k3 z^wZC~F0O_C-}TsD%F~SRf`$#$k@@T)W_#{1NkU9F`#%@&`Q9?@NMqUIt=-=Td)7+2 zF6DDuy^j9;{mVvrc9Hw5AypPVLwx(Fr@P!kwcH+?^~Vl|sc*~=0l88x0Y<4dBQqIw z$Zmx1ZaY1ZY3mJ*Ag{|v=4QlmM)CKXD{oIjJkv#~JS8(SedZlFYSitP2D`Yw&_;J` zHyQ1Q#9#w|SR3M>fDfEcXAhUZ@IP%a_4mMMn$f)$3`q1fnp*!!4wx-(hWh2MfjWdV zhE#ST)w%u#kCNt)VRH?vmIT);kAb%i|89}$WsU($it%g@p&HpCJ;eeHES8$bV@zs( zo2h4`T9{~ygtI8p|+MZe2))k z2=!|c(!f8LjF{Q%w1*@^UKC@s^}=m<1`wj?c6XGm6b*Vxprgi}1^*<~U!UotU*_~t z_GnmvGVujuPGb25uyBVnq09>6w*bxRlU@+C=a zp0!Q26Z6@_Gdt*C^g+)}Sa{;1^pCP!|iv(nP<^mx-oa$ZMMBpLJe~h-kothE@8@_L?5-B_IFt_%dUadYf>tiUY{PY z)y)X%d)EsL5bAhT_Ob=a_mzzO#LZuv7vm=UV?r#^#Zgtp%QdRS(bZ7Z{+zx6qsi%Z zs;BfgqkPohNc4xj0D#9y#&6UddAodk_o(=TGlZULr2$P&-CY};!EX#+C6__ zR=3x=%yk+?Y@4=TUr9|D@n9+DiWmyCYqU>~Hpt*3I#0y^*~0(h^3T@XWPfD5kR@Kz zUy~T%rA^l_q#hx!4~Nc>QD*LB2@*gS{u_Vfe)inEr{92+-!}0{>YP{KOI9_*zC&M>O&2Pla~z82JN;(F~~{ zt|W5(bglb0oPo*5+N{H&VMw(hdF0;{W;_1b$z*lA8ZWF3OJ8kNe+(of31FE8Ux_pnjUnT9KG^0f~4asH3Q= zVa8{j;P|FB6n+}T^Tu99w-qvs0LShwbbUG28+zD_574t%9@)i3j6Z`LIB&z4#*`%G zjtglACszas<8H?-7bF2Dr2^hZDqhn`6~a%EKUo1N#>3LsdGpLiT5j z0;`k3#J@cX@wOfvn)U{eVoDZ82}?!Ya~?U|>Tcs}LR!ui+z%&f@BA<8(t}>z!p5fe zL=er^hWB-Zhex-U_k*X92gNk}|M|>3;{jOaJX{+#n*A2QGgP~|yVQ3Ie{id|d`=8} zZgK?124wJGZcfFj8Hv?WPEH8Cl;l@Bnu#q5*_^S2Zm0~L_UBP)sHt=~PCsaF_gUtpj>?a92;i;#)||jf{+)ws^p+1jmEx(kUT^US zZ12JwJEJt`-8Yl|pt*Trm!deZiw}#ralncQil8*lBf&Dv2=hv!3mBQUl+>bV_UTNi|H;0w#UGYKPbLiLbvI zG^F;}aN%F$TS)>qc!7psE|U+`?8u)yMC9BG;lO73AkBl?S!C!bx|}j?LL&{q{v&Vz zfZKNWMpHyoqLV|bZo*KVz+_Opm=?ktG9A;lu2lcEnBajn`x*L*oWA>kUJP8T$+Kau zn}!c6)O6v)1qhj8S_V%epQFpgV5LTZGeQp|dc`FMxm%nQ1ixJNHm4c)y+v09#7flY zi}{xRf){^%B|7)(=j$LSf^^o6f(b@J(+1GqY3v7<%0MM+l%*fg?A zFui=j|IH%{*#!@H!oQHvJ9LtN7;2$_oeYJ?WTf|;U%?-Uwl#+rVAh&#&WGCO;D*+d zefp-WZHYu2&w1-{%8;i%$Fo#qw3J0p!8P)zVOfFlt`bd?Pe_Gw^G0<1ei0x(4(@ge zUsV_UPhVaDthzzB{RKe6U|?&lRg3zkZBzlzF8vtTZ;veCL0e~i!8p9%R07VkF|4&Q zZ(jn2-nKK1xUPYogV;{dx(~h@4#^|1>jJsSp*7Mz8OJmKDJSwIe@5i z|JFnAiLkL)*jf#mrayswX@q!AeP)c3W!_pz(jhL700!7lSQ6*@w?D6fHPjbZH#n2y z0Brur4t?=2wpQ;OJ?JNmb-|8WDk($Slj;5$FPFw;~wOJ(x*Wmerdn|WL4 z)&28_N9>MIUK`)d_~q9RcCVggsWV!W|B%NhkcUeJogUrYCdp-T6u8O2{Ptf2cP=Fd ztxb>f6K#=Z3nOfcvtMdj$iR}L1F%}P3xJ~p8t#v=RI3Kr8OO#zt%x*v!wEHj`)B@okN19Y@lw@29|RSlF1=S#fVfMghs5^3->3NR zsddN>2`077Ltu5{->N}H3HYb*ttfm=#6ER;46H_ty1y61{ z!Gs^{*@3_J+zVk#s7?Ib-t!N59(1yLq34Opz0L$Tb9M6);xBpB_@@~>&vue>yv0!} z%kjTb)yWOGYnSs)Me?Oci{+`{PV@;T&tXT4bzPvt?+kE$V~ij#cUPAxrn!9ry&dyr z=mf zO$3mgu&%1DBs$?J(VV5_GR^FN&@rIvqNXjiXQTy)1f_$eYwc?o+~>E6 z0W!1$J1hl|;<3?F!Vz!E-)D%8!}RxO zH6=PEqF>Ul-UB*lZitWSJasEWh?tP7x_1CPdrUW1+a6$~fhayW`b8I_ntokn=s%zZ z*Y_@~OQ6F1aV=yElIYEqybAdFbNr+YD5~Z-MwG3TeKo}H>if|l0M6>7H%rI5*BItcj#N_Gv0@Yz({(8fDouh|lYmlt~DiNbVFC|!QZ@@>a z6jC_gFX`F9itxzxR|SY(6;FwQ%|~L$d*93j#%TLIrFLjK_F~MhbtTH(N+D7U9E ztoMdX=qhx$UOL7uDkiHEGz@XU`m8AMI0Z@0Snh_`^RLHgc-kse4ZA|e@T4Z rv2%(%@`LrJZ*+YBzo+DzQk(eb9yG#bqx|mQ#sC!s4f#r0i;({Tpd~jW literal 0 HcmV?d00001 diff --git a/2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_20-50-04.png b/2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_20-50-04.png new file mode 100644 index 0000000000000000000000000000000000000000..e0db3b8cfec67bf63edb824306db06c14c3a396c GIT binary patch literal 45959 zcmag_1yCGc&^C?|BG}>tcY+6Zm&J8)cXwMLcnGkIyK5GA0zra1!98ejcX#`f-}`<4 zx>fJ3d%L#g>>io!e!9;*XU@)qfs~|CkqMFE;NVbYWh7ML;NAn_;NZcCZ(nQB^SVUf z;NCod6x1aJMZ~^-{o35zT>4FfU&BsKSkzWS^oaNqzg?o6u>!xaLV}%WfSslhIDlVR z(>CB$?9}W6WQ@Tt(b4>JCT;-%GQy$(U=t%b(S)X^fB-PRuzgdaJ-@J)e_>NWfL2pe zqK&YqO=441Q=z|xs9Hc_Q{h*BjjshwO>V}b{JP+7T~U5vz3!-}7qH%{mC{QT_?xik zH*gfcuoAz5bzWf9YE)F7g6KPoLiMj=V3knN$A=+A?S6veF!lH_@V(DI@gRGlV4&}f}Oq0E8vD2-MUJtDRDL$U)6*aw4CI#y@kTkw51^W9L;dp``uIZ_GC&vR!Zc#B2{nHSV|SkS1x zns8qcRyS@pnt_jxE|%L(vcVYQh!p=0XJj=Gqs;oHSIZ+KxD(OJZ8=n+8K%6oLl2; zec4@oy8IKUTqROCx|WP)vES$amb-EVgBtZ48q#d1@ZK(W1SKH@v2M8g z`9<6>aiPq~Cla(Q4$p~o^O?v3Dr|}#xVcu(m1BL_!;Nss&0X~46UyGf+oGvVHIbun zMZMu9OkN{-LPTf6mM=DRc5CCQ6K0ADm7V2+7FrG1yFF>v7(jvR_?3?0@A?AKuiysY zr%q81e$7-s%^57BrVW^Z4MZO;rV|h52f{(cjXjIVA3s8Kk(rqKc|GVNv>@$cupc`$ zTNhXqJ>*{nNeCXbNS&u@1;-c3*hlhP~kdR`G8?C599_7JR7Q07SV&WNK+!w5Xl)kT)ibcqBNs_dT=+U60v@L8mQ_`M|Vb`B~Ri zey%S?reEgSi8dyt;OtZI(z-P@n<(Zt*AHOoz5WwCXcfw{0-8U)IseM;URBu47k_|mYeBI zEG0opoz8Zs3Do~?$TyY;WJ_SdlX~FC2`Tk&lnw2y*?D8;%HXkElD=!)q3?34>74o} zc*UI#++3Lj^eS@YUFe4mTgTE#ASoDuia(>J9XLvE(d=dcT*6n1F>G4Z}#SiZSibt{kzMIBkA<4k<{9vwc0(T~grFX`ySrh6v&iLUAU%An7d&kz@Qk-9 z!=)xIECFvLGPXg-nD5ilsidzmCc5h>j9!#wLjwY-itzlm0rAGY1>ya%NekCmT(k#~;i70Bzz!#mPL&o(zuI@R3XlXMS69ySY={{4V9% zoleuh<$yQxU|hunLJHnRGhm0mWeLrt4xaMScm4 zeicN~^U_!Sa&169M}3dUYUTt%$(G`=LD7T{#(1H4IS|`Dj ziV^aEndd+H`Co@ys&W~-a+z25;WfV@ zpD3)`1!nAOQ?5W{Wz2Zm$h|^W3}$hKEgAWHGmiZkzsL(2{ScfGzA81jlbU4a@V?ij zqxdj#L+x!U8HIgV?Mbx8L=k1#)9x{MWJSVnpO-Ohjd#q*-L z%BL{stLR7T3(&1YPjY@GkXwOHBH5?%wrus#_IK3xez(l%#2M{C(!xfGAkD1>}MVDtZ#HhJLEby)z+e)asf>y85nX)^g4pL$tGfCeS(t@=Y)(@ zh+F%^=-zFU1&*gnamCSl-*6{$$(tWBVqBIkJn6;K1T7!vw!>C2wAUz zaK5huu&}9bqj;X0@^ntBml}bEmzERwaLPV25d%j8-vv^Ak2kq!8m*CWJ7-Kj8 z?wVPbN`2K-omn3(5(%_sUn4f`;CoENPR#j{fs+!Go~2m}Dtq_NL5BV^=e!h!kkNF$ zYcWPZn9#$`@#2ytbGsKK$zaMA;RT*L39_FU?iVT=xi(t`XqS19z#d2j5$mTa7C}F} z%ZI8rBjmkfO8EwMF=6X&+gjJ7m0M79z{Z4XnaCM!eyH*)HN{p1@j!_hT5#?sTC`x- z?NIc!pmd+A)~86DAN}D649ypZ%QwTV8}m6{KQCN?ELpK-`p7^@_G1-aVdQIBfhR}dAC{xE1rSD73<(BeBZt|=Z!XlyGG#y9Uwg$mp#vW-&i1$9av zV&)Deg~Lctw&HjizFlSA(!0?rOcawJ-hl-bKDqU8<{J7_I+RDu=BZy}=SJ{iAL^3; zKlT1q#Qy~Ovqqb?r`QV;Td64*p~GmBSvejG0_`?pB3!sTO}Sv8ZwjB4SXz%3+EbX@ zbaSb(M1`CqVku3257f>V&`9lC(stI2mWW?VK%q)#()w5>U2-U&mJl?WRQK3Bj{jaG z;(YulZ%{0=GJzwNqPlbdqpn=!Ge(oOU?N|Eutcx;-o>w?Uy@B0#jG4r;Acdj#i<`8 zz8TrL7>35dPJhX8mXggCXMVeRZU*QzEQs`SBw(<06#3nhmGMglAPYbKwp8rIqu8PX zmO*|=JIj6b8~E0Il?E-0Yw~jI3VXGLK$oYHJU?F5?hSCjZ+!-c>p5fcAvzmR-hC%b z!X#e4d%X0Pv)fQaA#vso#qO@`hSYlLVtX&HJMgp^*(L51L!sfKxsKhz%z@}G7Nn-{ zd9v533jJfQF|`>q|2;WPl<}^pQTAe&Bv58g4|lWjG3~0V`*Zd~jwARJ7F!~vE@YE4$Pi?ZQwgY)1ATW$_S&iL*1WWbWI8cHnaP$b4O{|u{Yb#>ANOcD=E6s+Rd z;1dc?eEa@2-O@FlzuW=ql-!(n1G*ZL`eU$J)rtA$0MN&|u=jTC<50pGAp%}GkC(|b34)9EI=E0kj z?1}4MiGzkW;6B0t$tW7Dk{>Dg>^bXdV!cCvy7B<|PLRY(O6?!HAY$FWwKA5)7Efjj zRA9^9G3yMJAGm`n4mGcx3iNCt&un)OuMmvA4*NV*^Z)l#{sJ0lICUIpGNC1`?N z3!e3nBwwNLuGJA~jf|7U5!mWzmNCu-?ovVwX9}|o94@*$?(LnG&ydzsa?Fhi+t7Q@ z!)~)7eGXdBcO69o@= z9D!rw7pC4FUh)qn@P6<R)yeN5-eNmo zJS$C%%&pt=3^IIf#QnKQ2dLGEkyX8y*_ck?rzdOR1WS0ae-=zmFoI@&jN_7}JoB%4 zI;XWmeC@yp$nN8tiIp*sf9t#;(~Voq<#GI^_5z;3B*|SrcmGrb`{A#jp1*7B*qQCs zW-SNx-scJn4Ega`VTx|Wr5vl`ND-jcvoF&n|8PX<{z6jp3vy}mH;0k= z=)8R7;__V_uE&>khIJL4?v^{s>);yQEoE)sZXht~MsZn?cwqH%6)Sqk);mb?c)cFxuWl}~bW$yv&4 z=pu1Y>j|!Z==I|A)`u8Jy+ot4s(1eGRRt})SK$0S*Tl&Drs`3ay-#A;Q6nQ8A1^nd zfHW*(PA%p@U5Pi!)Hl*Q8Q9z{EbEmHn`vtD-dMO|Y@bdM@i#33pQ|^w3z{Wf=#@Ey zx#K}Tpwl!%U>Gj0fw2FvB;c4}Kl9yJ)Iqy8c@=#6^rpW{m-IyfiWJ&IMi{6f_)P-@ zIN7>vJjXo+ZlZKVIlm1ZgUL$enI*KCgSj>OUu|I2P)Z~jCJ}i7mVZt)rsUfd8wS~N z1&&i+oU_(4w!ZC%^rSIN`}@#pTC6H=Gct}Dd|ZsbFi>kkH+lgEXY1^$y}!My4DXVe zP_IYMu%nJFja^7DO1m$WHlg#gIxX0@`TG%Xah#<8O=MT*&eR#JvS2fYfp}H^uTY_@ zU%Fd>I2<<~lURIBXpVVdyLl7Dvh{rCUJV{L^bYudcr=V)-)X=pWLzAX1cBY_pf-Sd z$CV0k7&$WElI(l$17Kxv?hTH%aRv^I#u1{E$FJITpDzd>e6S@<=m61>sUgP zlbch#?>42fdEF?RSenlCd!8e_^^074{y$lQhTfv%kLi2h^t~B8tliF#H1u5WsSNOk zk>@{h_!s#xdxDFRU3p?0lq6BydrctjeG9a@FW_ zIq<5h@SEhe-f{JUqL|F93_L#3yMqO$byax8c27vr3&LW}$IBMYtczIC-x5MR*bB7N z)&#R?Hg^GUN?W#@NfgxU3Aj0Q6e*0fX91`w%)sBnwH{E|9`#1?zz(&5`;OQ8e8{db zUA37J8#rWe!td$e*Ure4HRC~*k$!pn>Cy&lCcNp2F!=epPO%m-MAC2y0%J!^F_$A| zgh(}+TC=EyClQQ-pYe(9;d@Gp<7sgz(}$eEigva3K@b<0N111`o%SHCdwiZ;YR6Rr1%N88 z=-p3}!#!0x$J*_+;>YE64tUcxEblo`+xxEm;y#Z;hC~F-fkHdrnrtw%JHfMQ(!@GU z^UrwGkl|_&BXByCA&OQBFV~DRD`IXIU{K_$Jv#lY42WM7-Y3%?8`29X@%J_)h1f1| z<89LYF|m%0WkYb?eA050dpP-E$Vq}Z>yxH>co==bYOoD>(;v~yQ2MI4QA*#ygu1`Q z56nujDEta*z024y>p01`s;pSVUZ(n?(P3a_Q)Qt_O}_9qY^Qp2@~UZM0{eA}Ga~eC z;I!v5fKkBe_^ZD8NMJkGmX|UrT$!jh{6_( z5f&0cUj6d|{YU&Q&!4laGc`GzkR9&PhA##U`w9jP2hD#Bp7!6t2a1woApWnSqdmm* zr1@WyZwQA~5Kubk4&AijtLW-USC$*z=m%)@`%YM3#|ngFM>5xe*xS{sE3j0B-Qi1L zEkDM+5P8I=dPUaAm{{}Y=%)3={WgSVN@ZTb-~lk30MpMLA?pK_D~hy@KQNs6U>y&2 zA|lTBeQ)Ee7lp5Vl!$ZKHu|fliatQ1J;-#Ck>0RpQd|;=CfD%aOh^&e-Nsh%QC>@- z^)ksu7#2ymH{2gx$$m5X-P1Hz!Q@?cuf?lAAYPsjC0Tb=uKL})_hZ%e<;vT-Y87i^ zPK+?_wQhPvsT;IIGbgi@PpAaN(z`sabdPLb18*TDdvkSeblcUIH|MMyKhnb7*<`mD zc3>6=H8@ATF*sxCW{+Z5;jGY{MeLS3a$rpFn z(liC*+Ht~H*}PHAJwq}y$uaq|{8_rWi0zU%<3-b!y0e7JZb7&J;Tyk4+MMG$|K+Ya<`tQJV zgKEX>ep1>#R5gY!7)>~%7QIl)HYP`|*IVdyfVFfI2F-LYmV3VScEQYHX0@$f98Xi6 zx{$I6jvvDzB~(z7XSdFUg$y5i)R5QnS>d7eabPQFHj&#tliGe+)s-$!w_C=I+mRFV z930*6nv+T+Z0q7q;%2iKv7jE4ouRu=tlL9jLF(KEGYXlO6^}+l*D6#!(@&KimZ`-{ z8}Sx7D#q%PXwt4EkxH1dKk$kRUx;hE$?i|~gWX9uY^HYH)0k)7)P`2aKci_Kql&toG98k4 z^Fh~>RIZ^PBL|M%W+lcFK>ZVi2O(o*a{yi^I@A{k$eO(E{f#_4!lKnXiQo8nR%5@7&gPJuFqQK{?#)zxhYx$ zEy?{78I5Tp70byNxjF>6_2D0`kzVk_FUlnW#=A~d6VbMPu!LRHc_uy_YyxQbMR7c) znW9T^dh(q?bEb-f9cdjKI%?#5JlMDingy;c%REZZ7;p`4ZwQ& zhG3*ds**Pcvo_B|(tYjw{%4eu#<|md7vmi=&U^21_=jQLjOWzQ?IA3ZjY{s0I1RQy z_8IYbO5%#Qcg-s4c*6a4w2hy$w#K`qm2+%2K^4loAHVC(42$UEy(QLp zG3uC?625lvxY1dPk=Y?GeL<8M+j?9oq(nPbt#eKIvys0!?mthUrFxgV)8$)OXS?-? zP^I`a1iYX!BAzONHzdli>yc^A8mOT*?j6fx8a$ge=qXB1bM+kHsqs&>9>^eNr6HiP zW6(DX*to7ks3~TLy9FmbW3(`%SpE_88!+ii$Fd|7Q{?+BSQ{C{RY1*y>**z=Ze=d(yoSLd%RQk)utg&y!b5xf+0Y)IbRynot(zw`MU0o<#xLB_e;J0YsPyWTv< zA5kq=lAx8b4#bR932N$Qx#dR zTQCo^u0&jREq18RwSf&Y?W(I=vIcEjeKtBZ_;Mug^X z_xN@+|K$7py~-(lVw-H@D*4FIF4?T>)|+)wuC%3S+5KbSWVf+TMVVc56)``%WdlXF zCBOf#;Dno_L|pAr_qU3|oKMw_b~m2~jKPHP14LE$qfI@FFI~9W?1f? zD@oXJaVs543!@V32=jtx-J69~z$DGCT(t^{>j18Xpr)3;85_S{qXU0{4X{|85hkp5 z3hBJj6fp~JiL|k%z5FPvaadt5&!ViNo)*OS8Gp?nENm!2yK+?Ppjm=88h?J!ro713 z4U8pvMk=LUJa)P1+WM@D^qfo5+bl&8R*K)4rvFVtr0q4-1lVv#d@}FCMWamR!wL+Y7xd zI$YLY5oPcjfCUelP8Ip{Jah6_IPZ?~HEC{-@OHE^}*UlgfyP1 zEln_%q+fSTEueJB-7;9Jo1!YhgVpiGx2Q@_@CAu<^n6|Dr)LRAiw^EOj#DjW*`ATw zTYi?;hCUTsKX2NypRT;8LJ4$lbDXdb;OqSF2kxDF=l2OyhA5E5cW$=gd_bJNOLKX& zH%c4*!|SRqrEc9IR9Yfn25CXY+iJ_N8%h4@nA~QOIxCg*1?F?w7y9b%DF6rm1Q?U{ zv#M{eSfRe)OojfuxS934WkW^YbE4UTJN|QipyF6uKUp$Q^WEDsaqrQsGKzx*I>ryh zIRTRu_sz{;%!=dv2^+L$rF{7YKzLR%>toE?y|Z3&tG$!CPGd9prDUT8V@WVp?>SM{ zjsshOP@+$~epqW|Kqzw*Kr-x+q(HH}nDuf>c?Not^ka0(HT2uKqV_V<}X zm+H)R*l81~O~3LvE~SO!ph0V%q7ut&dFPffTMCQ?-Kp#jObPgZ#C2J5PzFHX-aBl; ztOf;8l5|_9C1u}@auiT8X294tF}ISWwe&9QPqlRz9Fn&STR%A$I@uXaF&=+u<7?Y3 zqqbGUhS+j{rvIP={UaGcAZKX<(ia{!_ETc5ePB>*(Qc4l$z~#ut8%w>AdQ4sg7Vw29nRO9=MvWN~DtNMG*U;1bhJVT>%9I*BwMR6Qr+lr%p zz}2wo=QJy8H}b5`$ThEFD>gMccxXkUqlAjxJZE^}7 zHW2TLo|z1tB`-Pyn87y~8Y8|fvl8ocHzvAvqKN^OlQmAzH&~NYEAm?6y5l3yZR9g% zTX`7Xr*Vtf3qZvHqf`tv20(%J5_BwED)%X}Z=4egkmZCu^ft@NdIkYtu;W^`a@F#( zdOYl1Z2kM#iG6x%d%v$YBn}Jkq!KeZ5?HuaC6!)uk*abxnR59fQr(!AOWp4y;0V{1 zS@}ojcrst;Rc-wp*H;?u|ARQ=fD!M`a_cxx;v_$CM28?j#MzOteL2Mn0UpP@Hn;E5 zmF|~&jz$6m=9n1;Q&2h}bf;09Df$JiWj`L%Kaew;iCmt3%^&U|5Otm-A4HV(dvoRx z*|3moWsl)(MLb*lKL-xrLtuMQ=O7rPzGMG5)PA@~-!uVnd8^>f^l#0&(fOOi@jS5G z_kq(0lq+lw=CMKr^s?{!LTOUHbnlKfI?aPjK6QQo4uE6ZKEA9N?bZ%;col-pE!uBk zylo#ZfsF&>@^#5W6e|1V1cNmx8KejIvm*m82g%PapWXrM)?{B7PdK2Rw-D9LW43Cv z)PI-(y0&Nl zt)4d$&y`l}i8{snpLY*_x}@ft8~JSXAQis#7D;qO%ipaaFhSv9t^$7)_Jcv)&%zpu zyYO1}zLmDz+9$N)IyD(3RnJaR&Y9DtEmt;3|30=iur9|Byiiy}gxDSun0_QEvGW+R zA0EKA$|!9;zcO$$8Y#>yQrPjJtAQwYs?o$Jj(VT0`BWC!RS7i|+}2rUsSi`xeFr4iw?5?T1ihdWH5EURRB%PVjSz0^A@I4RTOvuNb9cqzU_QYq zxl%21(EQQ7>8nnyRQtlRvTlP5STU#7!`m&>vat6UbJ5l}YxWXItO=*r(GN zEY)x=rsY%l&8n#SkBW0xcP~bT=gakV9T(M_?lK$In8g0n4qMJM657@?J{jr{_$nRZ zt(I|~bu|%BT-Zyn4UETGziu#_A-#Lc?AE3U4?RX;LLluCl2xZPsom|8VFefd7p~KU zD@=gFwyP5*LA3dAiIVoK^8KaWEx|xIfpSP6ROl|clYy%9Aj$Z^qA)h znJqRW{8NLZz^8zuM>a?ek3VapKJ*tZ3gerhhmQ$|iNrYeOjb_I3kX0Yb3MqqKMG`$ zX6D^}OhjQ~K!W|yxcMyeax!|0RJ*Q#V@LAp0RK#~>%)DRA8Vp$y(Qgo3J3V1dh_T> zvGQfepTPTWGrHY5da~*1I@CkEnRa6GExL#D$hJQKm8?!^=oLmM?fZsBQTjT23 z&=>PhdSCP0K3Q5>G246guv!a$^-E)7;HWrQF&rHmRk#B`%y>P-nXDj_ocQwkk~03L zg6jyx*V-<8c7K>!I{V3|?sQVI_}%l0nHe4m-!Wuin6`NDs3dpq^AG>xnc2QOH?~lti(aZ> zTqUI8$=Q1Fu0bUrebhz}b&Kh4?O*1R9I5S<&aUfZxlIT^XiH=4gE>DsU7fJfU zvnVBa(bfv>O2VmREn;Yb^*w)evhvMIyH4TA32fw)y5+&L247I%GweFyP>9 zC*Slu34hakR(^2`ai{ewBPF&zo7jW?_{}x$(3C1ZJE~! z_gaesEs=-He_d5*8;;;|pR8DC6f z`RwtFg|3xP{cc|oQ25GJ$Mx5n)~@uZPMr`IjxoZucYN&YaZ+M8=@(PHWCA&V^!9E` zfR*t#wgEx1-&3tW>2Tl<$ION2nTBQ66e66&NFT5Z86h3LI zW@>$Zn`~O6Q)Zt~_&Ie2lJ0(x##;KS1sP+cF7D(=aC4!5g?gVR4fgnyu4!tm#af$i z@W2@q^UxFg@l4e0jh;!Zj_0ZG-`InGiji?*3gyD?amPykcPA+P&YNVZ+_3AxFM0{= zZiOY4x}nKZmBL69Z_R)X=HS&L*2JTs3fHBT;qf%MHE9CdpbIygwTD+L1A<|nxoCH| zqszJWEN2ZgxD{iEd&egcQz&eY2r%wVUsoQ=eYrw3hS+uM)|}j>%9pv~24-8VEvi+Q z{b-1l`puPp;Opw}OTYC`X9X4aB)^AkJzE_8FIRvq{+vmQ$j80x3IDo5=R$U+E;hRQMl0m7RdAn70O!-Y(lX_T-n|1WX^ciccd zbSZkR^QMyB;GID$Hv{Jyu3Aide!fcOMKZ#2r3hF7W@W`}y+b=E!+w``ty+@+t^xi` z;0^tov7v>U!ml^^}m;ljp8_DN8(%ZEipL>eI?0nOgoTOK0M zUvl(p-{%i=)(;6LSmu~wy_#w&buUkYedlRWkK3)k9C-k`#;oeTiruDb!v)Gy>FIge zFSdmgx>Mu~b%T0zYXar;vC;^|_cpT8jIkLm8U-^%(J}{Ho+N9xnaBC+Q;L+jO)rAd zdi3Wb{98+znDjY6Fd4?S8HKpiw&eLGRDNr-hU8sF9 z$dt@JSSt;ti}g*BLvb2MSd13X3;iOB=~)F7N=Rk&Var=he@FFw#GHSbg>nSsIcb%Q zUtLp8g2MkD0b!)CA+Q|-s~O`>MrssO?{!OO+TU*e#0p&IZ8^j4O&5|PC7H!?N+8VY zz<#w3h11et2&-P5FisBfXi057LpHv@*B0YlO{l#LaHv*z7!Z;jJ6)~@*UH&HL4J+U z@t2M;9#YAg5aVXSqUtccx`T=A@bx2a5?n7ZmNK*4=r2^CV@5UOul3!R0{C|uk`Fz?#L-T@29f9dguvLLif9z3m3*t)N zz+@3PfavU$Otk6H z>S>uLL(LazfDnOP)I1u1XThBH_fGs-mf#*{307d%h-LWGdr0`to?VVau99oyX?4;T z%la%6>65%Lru*+i$DYKMQ-0voM+Wrgzt_tM&On^Db z)hV;|4AWHHUc3`LK#_FW!K4;vy}^;Y(JN5Z?KCFAzLIVj%;E0piyU~ni%MQDc7Mtu ztv5Ce#s<&5@5Vh0nH!fk+rS1=SpAfFO?*dPQP=BA`~=6$DJCi@Dxgjln&aAnr~x`t zl>SjOn)pQrCI=45JRbg_q~hss2cqKsCE~E;#t)M%6vrl0_q?qur~8NA`1^A;aN++T z8BA&gk6dmIRy{{QIp+wla)Kx203;2orN;46iZW|4i`<|y6bdojNOB^AVEauPZd}pN z960MrO0Tv!J#259tZ=S;ux{;V<^X?4Hb>z(dY$GkDmi}Jh>7djlUXuQyr+1c*dga*;ihP+G?^MRBEyPB9Kx3b_1`TZi70f{B$tmL7jV{lO zzw@UZDM4^}-TO<_dW(S-p2peU>rbl6#A@j*!RGvIU8f}Z1{4{t=+zc)zF-6Q{s~jRQCcj{I5yY<+k>RKA(NLl-B!NInkPB^2NICVDm$q z|8ks~>6@@CcHY_B9X<7)zBEl^>(qbH_`1NxKsGd~6GtgO(AeTH|{N@0Of~YYpilah#MJ?UmeqmGa>2RxnBlGDKkia}Q5C&|y zcU0R8_@gBfl$LPYZuFy}dwhjTY5m1NtySN5HSsA!eFdHAsU5jaR0<9#pbXykf7uo> zxBhZDs37w3G(&yNf#K=5w^4%QJ63fgp(7EIOO*Q;{Ckc$tub__B&n!(5XWiMf_9k~ zIN)N_&*Yf@%iRBm!2fpkxysMo4v zesxnqD{i5sdaJUyVCq=>wEa9*jk)i@wn^uiM`Ng9Pj#i^CS7^&I0gsJc6I~I($DU`I(fRHo$u{hY9{z?M%B< zQy!+SLpk###axoTYWCQTVV`!oUnE#a>*YBlK<~^E6eV58HP_r%x#DmOojN(g6z-jX*spH*}oYmj0t}t)u-C=yU zdjVIz);40+jaWA?)$Xrk#&jkA4`?Ho`(+n}4}hbw+;*!Lpg~9+n$82Bpi)&OnHk+n z&L3nt=94}Iepc>jDJcYhWZ-<;-~HLA5r6~2=p7$t021&4$^S27z@}NSFi;?5Ey2%7 zDN*bU1^@oRV>idV*y_v-P*7}V{~Nvn>}IU*Ah6Q-JR8pPV+yhE8i43m?RK(EYc`SX zOc77%%1Jmf&7&^rs5lX|mgHR^?QvpDSY;s1W>%iTBNz$xN^JM;V39s89*hhzdkMUeZitrMXI2KMa{rLuxF<)}?nFtD zE#k_}%Q?{IrXKl)yNw4v}SOItC~6^f*Gks zkU5mmnNIah>*SHU^X1q1_ggR2U`xoo{xU$aoSG)l$B#rXquH0z&OkQfE+OUKmtuK->gz;1Jk(cf_Z6VL#s*56yvyNd+c zjKPHG0RbE$IUPpA-&?P^`BcbxFGxVQANB=>gQ_qbFwMuR;wK z6%`3KS_w%f0N#g7@nJrbQKXOEA*rIhD4jVrtq=Bhqi4Q~N5={RKOI|F?LGgLxGCMJ z3u(HK%{r(ZZBdY|TS6e_PkI@t(pf0WMFt^VKx1pUzrPdVP4w9)S3a&}wjOpBO?1!w z5k7~3l)MXR6LHl$_bN@KwmT;&HQJC`#$)Ws6F6{^H>LAPK zoDzWd^{JL}L{3|e`@W9P2vPs&dk1=C5G_SC$I@91XC5!-*V`=4a^@!BIQzb%Zmqg%%DV@vl^eBxmRALR%f{$BAi~}gqAaFJGPjwPAsXvLl>tPsErbTERrVE^?UWebH z^aO+URv*td;0k*D6qq2{bjTQl5Nf&5Dj6QOJmD7K3{AERn_BSRLDYu8?4ktDA8na)A%dwrF_sdMFEiYLq59Yo50$Z zYM-lr*GSD#K`JiQ?;lk33iCri;V=CF)BzfZlDciJpy9qv#Q;LK%74I1LP|&8Db+*_ zk82+lzlCL94lC1fC(^IpSPVjRuCn4?rfGmj84f$Fsgk=2!VG8>jV4!>Kcrho$5dM`6m0Ke7f4iK~LH@f2~QAuZ-Y759Wfs-$ohJ)J6Mt2Wx3-8@- z`{2#hj*AV4?6g7>0Ci6FL>C~A>DIm$`3&$SYlCUerjMN0DHKjuOSrwu${9G;7lfmC zr>i-Sq^=O9@BlVGU$e_=mwQaFfj$X! zAypIwhg=PuAo9GcXnT!=xB0W-@c8PY&YC%0#CV#o`W!6}_<6FB+<>ff7+{bj&5^i2 zI-Vuu_72fic`qS=Ce)%T@nd?@*vQuHwp`8%x0v8|*vHN`g7z?tr)L?|?4VwYs{20p z({CcuTiNm7=)iY~0MxcDjSLvL)jMl%6~IJBD$Zb;ad3k(&f&l_!T&B6CVcnX%>(F@ zRCabQr*JSQP0(lC()B(dg8^Bj_w~m8jIDA3<6~K@y=gIHqk*!7YmqKddQtvslJSAK z44Gf7ytYxGnvsX5UteE|kj@73?GfaR6YeKh{A$2Ke|1xhy%GswF5bLKAiW|k7?ONrGW@uE5n;=+YWYp2GL_Th$}M0~4b9}3Fp>ERlyL*!=(Vo!b%3&ez)-pCLK#F%{I%5p z$h&Fv8P+85titCQkOIdfb+rVY&?rzGzTIUKB)<`Lg-2vX`UXB7~50)hD;w&|oY zV=d=4OL}pGB7P%l?1Mfyi_n zi|<{Rs@AK_I$o}hNP14^ta!S=$`KAMNBNm!yz-wo>@Q>#K)W_%USE=KYQkcwx~RYU zhH*bLZg#fNbXdli{IB}?#{2P}2vy}^NHMtWTK9{fo0avy6HnLiz)f(XKRv>_4Ij=c zMs9-tUj8(~HoZ%d^)F{%ZyeYPJD)xUZC+C)Y8LrY0>-*YKvW%(dUto|*W=tN9_I?e zq*p$F*VKd-`^Vl%+1+lK^hm4r$Wvu)%lZ0_(bHymZ|hi{u(DS*itiA&W%RX>9fSg7 zmc@Q@pbLSQd}@~}xSf;ar4{oldXWQqU|36Lml6&uGq)J6c`cR4bq$XGM?aLE?)QF@ zbsy}1k^W5%^y;0|($c@3{bPTQ93yt;vb*@Zvy{nT+}K*6zi+uch^7!fGlz+Ou1K zo}up-nIY(K;`19)IxuP8Qh|kU+oY6n9{Bn(MyeG3k6_)x&3lIJ-18^8?7)Oeaq5}# zmiVBtKB}$WSm}kwQy&ypG5I67sfIx(ng*y;Uuts;h4akxkM3K41V1E(4&oiXTi@ZT z>gmsaVmNq!v(i?@BSPwvKWuq!B4-_}axQPf4zo^K6V%8+hn)C$vK4?7kI_bKgL-# zneD;M0C-<-@o_BY1F+8Vude}-TDFFv`l_O=UJKvP&>M=<(f30O)meH_xZ&zr)K8^E z4u3rXRc74**3_Qt*e%Inu`EQDynOSL=>7%2Dl*H5t6fNi*DD%U)&qH#)1v5I$kdR{ z%|_@gJkK{QfC7Oq#_SxzdAMbOVz;DLdp+yTpiRas-&lTrxr_4B=a~XEnyP{sUR5A! z?A&SQihAF5ldsHyt~}IaYrAFw@}kShGC{(qjU|~jFEkG|E7K{i^N3C!ndqGq9uqnN z*&l*~CAv%=z-+QCe02NeU22;w6E?wzHQ4xas*C&B%}UeP^rMYCOi>jF%dO9l*_2#E ze!$WvKW}{RJ)?_p_{kcQ39(^1yLaq5=*+44R4wla;VGlCNfEe`**UJ z;PmE>suaZv5;)>eb9UUZQX-ANszxtN#vz)i#8fByf_TviEro_41&Y(+?rx<7*Wm8%7NB^s1gE%5DDF=2;ts)!7k4OL{H4Ep z?|b+2-hJnfd~(joIg{C)o%zn}?Ci!tGjV0d+CqL0qBUt8z#KfCzG+PN6D2b(M#T~e z^{y7M;Y_F=7PXx1J*aC#!zNhj!*z>=H@F@Ud>z~wbgcY|)w1RWTMCKIo|f$j$LGOg zIM)&B8AW1@+nEjVH;L#4dNY8!;yecGW29})czRwwdh>c{mI{cs4<#DRYM`~2$ z#rDT2Jxj?^vswd!6}mD849DQzmj?w&^0i+eE%;{-9gwO0<^2pRd*0f=p4T~DJ$^Su9qt<)&m|(JJ!}bGNvedQ zrp%X}F=B6$*cK_WuP%>8Z%KFk2ob zJw6IoZrMuB^3at65PVOPEkq}P)1P3x2iuiEX2oA5W^|*%)N76jZ343s4r_FDX5`V# zY-;4wUMZSVoqLDxs$XVT{6uI&3qx7i{pQ}yo70wc2Q0YX_8h;fM>57OBDQ#)z=7mv z_Ue-N%KuI7QN7TcR~&eJwq(UCxV%*3eOx{H0|*(xM#bl{OE0h`8j0&+!n;2|m4|k^ zNtAu4R`{%AV)Y*uk7^+LsKL<8s+JUyY?qUPw8f}h1kj4llFW}MLhNQSusgN<*($Ep zI;rQD@>q38%GI4-wIj?nJF`(foNA@U#T;*l4fVy@rW0qnM)6+0J~(*>GA*;&qx;o| z>@EzpgjTlT!vBq@5D#oalluzVnqfsgZYx1wlk2brk$xE>V)$;>2*SIF(1=d%i*ka0 zq1rK%@{YIcODt|+(`^18UNwJHIMCDFEMkFj}$8Gs-EDN0_ zw-WOs$w5L2>rgn@HA=vk@T9Z+Dn)i~T4NN93}uEyyabpFbOlS`{R(U~c^-rV>Wm$| z5!d>`zhS@ZKlM$%x(b5J2#-M6BbV%zW=6+_k^D(Vk6hG0nFNoY=q0gJFmn;y$wcntk}(7ddQ=>jIYlxpzo(4*1le^63bA_2rw14qnMp z{QnO+$FWZSAG*(VJ;L~=BTz(*xYcCcwh8BN|1d(BS`y>o*W9I2NW6J+)}tG}G+;(p zgSV$ftaJO(6x!@bJ^0)0C&^nmsp<@0z6KhQ9H6f;GaAWA&s4o}_&7)F|5Epyb<4B` za?^lO=cMiLcPFnhZ&E40ajdG|njH-7+|23e6EKX4=}thj0Oqf$Uh;4z%=}2rGihjY z7JCk?C>GNvLznfBz>kpq}*;2V606T9WRzA%K_+ zJ=P3@a!uA?qg~N9v@koWCfrr2h*1r@x=&P8&uqU>woMYTMOE>UKK(@A&+uuAUF$ zkGSgiQNU&F0LCx<(+mQ^ebsf50^ETJFT1zj-dv>k{;eKI^)*Qof3M*Y>=6*z z177|(ubRdPYRX{aEI-vP(ud#wWa(GeGhTQvvsu2 z0_Y2x1w6rO+nnn=M}rz_b9)I%1R6pR4us8!o$nW6uMDF9!}|a5{{QQE7+pzy_{Ae` z+`7f%j1guV8q8B)hYEVv{kHjJEBr$%0U2QJvx)4FVB&KUQ1I_w63qMW`+^-TtMqdD zijF#s$Cn{fZY4Gt-r2SOHYdJ^|6`)whSg@H=RIxGzgR!FL<~7=bLC^7$iI7w61$e? zPnDMcg8TT>ea?Gf+o_cQX7OO&OHTa7vx9iI=llyb<Iwoi>?>D9o<}T>&&G(nP^xX(vgwT|7@FQ&B=#wbBPlMcYuixrz@U`> zW!`f7Cy`zJgpqqsvEA){6Rvc8zczKEAMbz+sVn8X3~({e2^>&_eB4==^cBqNoVTP4 zGKF$%cAdv(XUGo(6!C~P+llT9M3l7_ki zz^mNMg#p@ZzKgv~%od)rj$v>KvjUb<2XD&nUZGV8kSq_I0#s1%y;w%>E} zP?hEWS-;v2;{!+AZt5f=T?BL!^F}a)2TI3R7WUYt0=UHUOV*A#LA1v_ z9h8x+$404X*e#&OGDPk+bRIFsx)!~D0fG{J z5K|~G79sY<_jwKVBDH~X>_xt}DfiZWtH()^$iqo0P4>mPklAxzXakNpQ1#k=x6N8>3h=ms8Fh)#@e}&^!60->P@)_Tw%W$T+s!K>ttzA+No%P8SXe1)8v8}JsVfna5}smCyjTpFWY-Hdcmw-*#1iiMY@n>go_gAhWdY>&;MiQrw>=LDK?5C<@u%s3E zfjdL?L)*G<FkEQ}Cf>_sEa!*Frdm+8sb<3~0 z`ArQoovT?Y>y-tHZcdK%98ad)Y-g3WgQ4R^55Pq_4hRf8{1{mZVtkA7MP-}fk1{P> zj;G)}Xe;oN&5jG?{9N`l@@4w#fcPZ1DArA5vKee1mGuV!CImX8u@I)TI5uSla`}jC+3J=D368H4C0= zS&iC!1Y2@&G24x%g!m|-nb=_H6oppMGff+Es=bv9LUijyq`@t=%1w%xxHS#9en}M( z4ylwop>={4CR<(+GT@9=PtHbmSrhDwibQ3{ILLkcW?Z;$?5FVioBVT+9+Xl&H0Dg3 zs$8KbztCT%bg^icp#UeNo4;C9*Gn*kt?wrZ&8CSP>}=E1e9Hjy-1c>qVQ|Rg$FQ+Y zx~4J`=Phm;n(wF#{0opnN)#0xyXO?lN*hL8023|qz4ZRSHUvZ-fTQ0G9Cb9C7*=Px z-{6YjpLJo=Bv!{PT*6yK9H9<2A7;-vIttv-tO(W*Fjw$8a)ZRo!EFd++EI$`WOES|fLDC`Mu^!+ zFVcO{FJCK;>&%U;I9uO<5}SDNY_f)#_*uyA0B$CLzwLAG1SLSl&5?j3j)ZqSLQ>Eq z#Z~YZg=aH^hA{XUJ@=j(IXf1X(c4HSCE_koosj)EhOzd1PTn7(lTP>_J3A3eF2hS6bJ0|gFjP>_i^mk0S3q%vYVApH>8F|LlhY^H@|Mg}LHj_L*drZ*y zy>tLv6-4ji_m*>7hTZDmPiiqTIqjFPqT8gy29hGn&4V1X*D&3guP4*;KZR~0U`#C< zwQ$0A^b`ocZfl$%{8DCab@${I9+*?tl%CiA6TucK(^^BkH>x_4gcPC)4#{Q0A`z_Y7FyKojX*&Peza+#OZUKUX z%bxo!ZibmlZ&+AaBZxQ>yaf<4xY{Cbp)c^3TPNN;dl6X0v83viM*ShEVbFp+U__bHC zLOw<^{w0Mj)S1&gb_?fw^_$?Qe~(W`2S9tiiaO`kZBJIm5J+3kFn=So_SAV;j%lO} zF8Ad24*Hq5FQ4WPkpN7h;*o5*BDJq8NyhJ7b1Q|C+eWv)BP7yf(&qn~fxbn-+kpca>DS_6!=os=`zvE->gY~r6hIIcdYl#S;Mw3I;#6K6x-qngBtMZVty02qISL1 zKn_#0-Fqi&KU?XC&U8Ws)5_R>K(D1SCk`R9ugTAAU!U$B?_<;|}wiVE@8@>f{GjSm{Qy+JSwYoDT* zE2(uyyWs?9QzEWC|BL%N_QLqQ{hab{%Wct`PMd%1hqYkHUlHyf{wLrR?fyrs#GGmh z7`*8KkcU)^NQ3RT5wz_klne!#k)-;2)2D?4)W0r}`05&;cUg%;ybn`q;q7?v0_B;* z#&ibfaZvG{dnx|F-!R4IDHkkA-a~I3WPu8o)vDLaiU`EMti(__IEe87u{hh{X9#hs zf6Kk61vRMsc@DbnFk1bD+gQ~nppUW{?4=8+-)q-}W;G=s=QS6B9PHPj7Ec|%;ZLiN z9q%-UG`xxk(vK_8>$%Ib;^2!j3!Mg#g8y$i)BkXR{y8}R?|aj@_I6kOWKz4A`Tz2i z>%F#jNqs}fvZumE|Hp*|K8sLEs7QP8@!do1>aEBZNR1ogR+2#OrqHT{};_|gg-M7hkD#b^j zX+YcWzkQP(1Be4uOkid>V|cX`m2yca+5-%-FmP78!)=~}EHSmv4S|x8^$>-2QHq}h zoyvp}QB`orPT(f;!4cVBz%JLS|qeE~;8jcoiTjvO{4E-HHivhW;s zR`$MF#mOWfip+##ieO*M6m#W0#7N6_jrm~4O=h5V_RnyL6+^v!Xd1lI-`V8czYn~x zqiA83@ux<1Qo*c9_z(!9$0u4OsF}@6*T0U=rTYkdvqLXc(S#0Ah)rKf&`oWCW*hgUr@1=r+NDdr~W zwcZU=!FypbXj3gxg!RninA&tb{ zsV;#8-yYjGG8I7YoS78^x9BdZRE)jdwO0{X8qX{#Z4URa+*M9GXCrfS%X*KMmBXx> z@Lt-)sxH?M30?PVC$}_Fkdvb<;gdX|<-Krui=vbO_zpWTm+P1!y^QsaWfbiFtPpEx zf<*W1Y}$C=M3n-$xJGB9QnN@~5?C8AI}C6WT1#}N=1EMChZj$y1OtzUL0xVseP>Qk zB?KDCk}2;cU5(160M}o3(09Cqdg}y&=k|PO#yDl{pkI!62=5AsO9Hr)T7fhKiDiw07XY0=(q9sKI zk47i*UiRp@Y`1k2QmnV)iXLgL4h=2-h zX_1Yk&R;@Ih|NM2C3X-+(?%?U2`MofHUdHf5wj?qq4M;#Aj+2&2PcvNOCROKBIrtT zilU#WZoRh*22zA`T&$Scax*;DB=bzEgtgNy>}5h$+4uY*xb^I-m59!cLaI;rjWRZw zAh(Z$^^Bu)FjuQ=%PJ6Ie1(4D{__pQsd1u=r@jcoryX!BL@H^jRVq3^z8vB%nZMeuVW}pwp?*Ps1swJ4 zf;T1WxVIZT^?DyJ3V7@wD&kaJc6U8_Bjib3CD?Er*rLhE5UBY#c!JZHly-|=rLgK5m)X-?5mRQR$rp)a~e=(ywf4h+TAj< z31n=MRARycux+73dmGTglH4mianx+{)jX10B>amqD``4roK|qD9bV z@Npq;7VO+-`ATy+qlZAng>kt1Qj~txzYn8{t_!?$b4$I%xw+J;$^fv8yvP> z_qioUvHTM0_#XG`H9l%Fz1xUWyCq3?Ua5?7!NA*;yM>85^Q0I(p^HQ&)*U%Q)7O6( zsl1$Ug_fSyCtSl(JIq_)klW%}hjebgROj~x^6iU$SUa|&WEY&|nEe+#xv}D@8n`8VU4+#> z3cult`eG`iK9jz)u$OtU!zmzf6eCz^wN=vl_WeA(53rsreUXwksAiDubogEX0*c*P z-2f}%K{atBP)pEi;oc3^9EXlQi(9ZVIt*%8 zSeh<^mN_=y($jjLpA&)JMv!v$U9`Bg7ygjpv)KcOJ8zk8mBi+b?I-URBL6~m-?6Uu zl>zyF6A$`T1nm279b#$`Ne3Uh_6|@qW8X%w>0pfN2Cw5<&xQj@Nz9vYv)0lq5f{3E zx(oLF+OpySY24MVQW6~zTKNhXU=D|ZIlwIwmSl}u1G;2#?aH5z1mV%eH0-2%wa$}5 zg~B*&sBJYPKta@U$r#M7Y?46x+KX2p(D_aUc; zimFS!vLvzMsax#6jk3QEEUeSiffU+khDz8l2Ix23+P0^YNO|5qcOltFuaa38_8f#W++x#wtw z90H32=pmps&>FbIg#|Wb6v^hiHAebF{&8B}i%e&zw+tJ1@Q2Dfue@MT3jxl@8EGz~ zHuCo+h8!x=YVzL$#TFc!X(6`nC4q{(ln zEI}B^y^Tph5BZ%Ix7qhqMWl?!G&6L~+?lj2b|Vgy>MI4ND)q}Fgq6I2U9nSjRmX;& zaEQXQJ?P@EU*?C|XR+a@)4(|Pb~s2%3Uiv1$YO>~sKhiAN2_qY34QIn(9l)5n>^CKZ5DDTiR{7wyBmQ6T4{ zg#KsPP!BrYt^R(!M>=5s`9+##-3#fdO8VH+(iy%w;!vB@H?W}yxnyIN%3ZAASZI{hd65$k>aCOECxY!F`EOK%bfl0orFX7wRUBNa$GIvr2|tEjnH z)mvec17{A~98A-kc7`(Mz4#c?c~}eD6wpV#(?2lj^n`)tt;ge3dXX08#+A>7IAj|- z)dsrJA4ibcu8HZGDxftEdQr%FvM8x$GYP8Q<*clOO=>_g(>eU7A;5Au`7)a4)Xdz} zuv`ri*<+JFlbKs(+cyzp?E03!2t>uDm!{yR=CO>3##uCw8e0iH1YvkSxZ8L z27sL@{0US$>^VMufyWBy>FOgs?P|qt{o^4JGrZxx zX(nNwEPty9Ox=k zXZeOgzZW=f_~jXz6z8?P)VP#R3~Qm3YZ`k$+0z&4AlxP)kw;Ffg&Gjau=p36K>kU7 z$#AYAf%Vk5oUDZyvcKZ!1(jyOn2tQ#2mBn3^rMT~#4hH8G9Fj!xwYkv%swu6&YO96 zaA4;BHs3Ab>JAtO^5K1P{()P@WzdJC{y70ib%ylL0-S%9Zq%&jyPBTNyFIaWl)aLq zAgPW;WYK?fq@I}>p)RJSkE`_gzRb)N`|K!{ zlGDHPMT6zaT+AmNEF6N(s}96DT9m)bSQM&1fc1~SroUlwxFNF{));Sl%V(VmUdgu& z%Vvo8=YOdwincaCE%ciZ+Um=on8}q5DLyhov(_ ze665kI$sK#mWUnaIkJJVBoQ^SgP*J>;0$Zy_ua9|g#FrPcY1YuNvEQ+sKnD*#7rJxS1I z568@uw+6Sw3QXcg&lNuO^##_@Fkd(hP?oR-2)s7WKLa=>Tnc0}T=(j}55G7T(*p!ZlAjFfpb^QnZl$nG@HV0{754^HX>eUOg0$I5& zgivm%-Ff8aSJOr%L+~%K(XNJ*TPx_WVAc><_WhKii7; zY&w4$KQHFzyVGScB~}|(s;Cbm*1+O_XW^8PL~VL+G8@3XQ5aOL!$=8@{R;OT8x?TN zbRUAQ6Fi)fZ$crN0K$`y`&CbdUE98cpwJ|^Rt|waJzHK&0TU-F0M%<*w17@@%ObmA zZTW$bv=0_A8^zM>VxYe_hl)_uJ@VtJ@YIgNt!*Akc9I* z+$Mm+ZaHANoX3ag(AsN z`js7hTi-te=T^3)EST_gK-g!Ro#9J%lvQf6eIC#0WMu`$-i^Jr3JbF$s&==UHt&Kb zdVQlBL$5F9K`9T6WY3X z5eIESE0ZmS79x;PIA4oeEAyoN2!( zbwUEd8?;|3m^QHe{+u!j;wN?ch2&2wf%;$g6B31DB)0mm{2B*S42RDYZVp?1Jx_xe z3mrHfT@FOwOWpi3X1L@ip(#!%iop+0Fcn`Z%*HwgrxoAjf!K}V3Hk4369Jw(e<(=i5pZIL96(@i`{p~PVLtV)D$h%5Y+OBf<( z<W}#0xfA+9xX@KbZ*Jx~JXwugq_JK)b|>{t_JP6eS6dly<)Oi|RHXPLQ4RZ| z?+`px*|qyvwyo1+@5Ifum@-lY>0T~^mM@B*k=Ze5>OE2B=dg-a(&bJXWV;o)47gEb zE)`AW#S`b&3uq1ic6qBp*teB7>xGqf8~N23k8{P%26uSSz$Q$|zS1hXpaU{8I#LT# zfgG~CnUik}4Lr+9Kl#~?Iqt0ju=fjr@~oL( zaYS&aQ9b`Ogb(tSu;iAzJ&#zQg6M;GUAHBvti$G5Wyg1LLztNinQ@YdOHtB+@#m4P3cw@Md52Yg1 zI;t&ewRSpbnOnOdf0vlF^0lq`xN>cqcQn~SaB^3=i0j_bm%~X2V7lJ`{IGluIHL-- zNNCfzHvdqNrEK=?5d5012jD8rr^e`Mk($%2Bs0x9p?R1oXN&t8S5oR!!s(+0Wniu@ zx$=fxc zC}w>aMRX?8E8uQhs4gv(hPEHBY%}R0FA&?)#K2G!Z?%IENH$FM*4sJLlU^--xKb)j zN5LVnngN#Q7V2Tz3tWgMF*Q*JYviW6-Dq9>WoMGU%9`I=Dr}@DO#JE+@xGDEc+!gw zpLx9pF3&_y|JhU+QVPn1g&$H0%qBp&OuHtdfVLotndyW-44vTm{mN@@OSNOi z(WKRKa(b6o$oioBJ#hALMC_xWa zC&G$F+qL;bM*U?vua<#UeWJXGw0UsNP=E`Ec{Hv-H96PqL(G1_j6OvvFRv8KE6J|d zhfiFK{B=KE9ZL?Jt(+9~=YSHpKisC#KcEbH*e4QE6(**)S65;|s zkH-lG5*|SQ@!t*bA;R-2`PHMXqSYA z4;+f-`tv6DyV)L)G+tP>Vt2I4Y0<)XIwZx-BtJ}y0fjyM9>uI#$HsSDPx~$nSTh?P zuKEH%{P5_!%HqsfYgDJ%{tf($k3a z=3U;%qmA&HxHitf@#Dld$-j!V%xHMEho*D(gA3s3HrVK>mYnqr zMRRuhejXk+n@hoAd;A?Sc0$iAk(-e4!SkLl{5*aRbfD*Fe(an%?E2BS@@nx@xdV>0 zQ;xb|f|Vf{CwBhq4<-81E~3nzh3)3>^S(^>)Qpjyg0(a!4b$?jlbQ60tO8mk4#_@# zP^i0We5f69p8yvz=sm~H2y*q>E3YXG`)i)^$h3#Nzf`+r5o7jj%A+d<#&Os0$6ZFh zbvn5cc&D?`PRu5Xn=P{K`QG%#jae2x2cvUD3E&c z7#ty+N$tdVoTED#iW*mA(Edf;oZ*{>kCjZPeoH|47|5u(PW%HmFj$v`#KHHiW_#gvV+?m%u|qO?-$|3zYUSw7V6}R{=PX0q&D)NY?;|B_QTg?!n?PmcTobkcn(W&Q*H3!3Mao9CqAh-dtHeb z`b!C-=k+CxHqdnE-J5a)7?CR7D5QNDBo?x&p1hqiWnW zKDqCieLFC%E4dTAig?w(+q@+CWQ=^0DQ#?T?F@y~`^J9&-g0f!iTlz<|IM|+O2a>F zQvd_S3wr8K!G*9=r4S(kLBo6rud_Ul`!>M0WQI|}&s{}RNe;R}`& zHt(sE&vX{(><>=8QG4cJ1G_z1nXDja7eF-ARa~$1C8x z5{DlMUa0)Qwl#PPRpEp+Kr^o)R>FWFh3KNPH?d?Q;#shy(}yMahSjgrbu9d8)UAo4 zsbWj-*07-WV(zz@Kw;l)JGcA!**-XhxIiMsc&UvI(!KoD1(D1>0q>>(6Ule>uputn zLaub>YE_lXFKCs@A-hG|MA2y+=+p{SaxTGy#@k@~x%gMyf%^^TQWPqU2}ZIXyWRP? zn!v!V;a%N~*@*ize~{6jKrJYW9=m`OM*@z>OqR+H#SJ+gCs}A%(Ku3Z(rZt4)N$J7 zOH8Aw0oe@wheA@XpYM~Z^Wol4{j7}Rvl}DzfB*2``+S#A$h>*Z8%>$Lj`|*}3S^r=-+>y^b=`2}?q+0u zyI}5ExvoHC1rpgE-@i2lQt0^xIT_`kDKRx~7ZQeio4aV4mfx;OLD)Jye=6*;cpQ!L z453fvPe{Ni^B_wTg#04WRzX*(WA(5yofyPs8aUQ39VR6=pf~5TQzID_P1zN|?9Kg% z^bxz_5+=hPQ%LsRir8PB*#g@j2UEl8d}_Bna1#IhOLPH!nMP1L?mKJp&s5#a&U7}t zfsv#(fKnb-IgYajlA)$T5(e6J#Tpq>!~~GLK*(NsyGohmW23f&CMaDy<-yn--uznbh@jV}yC{Aey6g20~ zg{R>Qs7yN9yNAWL(j6}n|rapBB!9>I(cwK};B)x@z>l5O{)Q}mf?$3wzwTq>hy&z++?BQy4z@vj)XGMb7@K+Ov z_?aj{c;JuY4)zyebOb7CE!ci%3~yZ?lP2I8{5z4rfhMf)AYzv>Leg)pA0=Ttn;Dz} zRfmDsOJFNXzBT9z2dj@SpMC9_(G~hSxRP2ci-)4DCDB=EniHB6eMi)c8i-tYV?{&I zWJJXfs%v6mky9M-X~z4WX^dG8T^FoZU}WLdJlh`gSa2egqBF?rvUe5^XVe~))i{fH zIT@-SW`tIlQ6n#m59XJOLcYP@-yCf{qNXo(naVpE9#|eY&TBWuu6&RvDs0^|Q@)DUF&ZxW24aU)omMgYrNT83N^$~*-ho3I}ThJpH1?Is~VVB ziV0sHtzirYOgbgC!S-J|TCa!h9dX^7X#%05WsY z*L~AJF~*xNT}f#26Jd&q$qf)@D$n2j#c1AOxjVX%-u2}x{5QO~aDEX+U-&K8uuy&M zk(aG*2J?~M^y2Hv2Rrj!Ql92!npHxhB7>7>CCbn% zb@++em`HH1Gqjm7+*@He>ao~*SA)@*g!#U0l?ZAxCmLliH?9F~=PR}&67dy8ZduiC zX&KE?SBdUhSu#(5Fdpv=^~!9s6LG0)8T0?^Mi{({XuD5UEwoO)mtuz~@LOZln0|$a zKZJ7r!UEaG+&V)A?pQ78eDAPhUY3*96lq5ONC|^4@S#SNu3oeddi{3d($Oa)HYzgl z=L@q<^mE)1Lgvt4J*B{>vX459=&(qQcIVHVBX;tQi|)QS?09oWapwf|r(Mw5y%W$g z2V3A}Sh!vVJ!_`k>U-BPAH7C&9JxbV*PCSTlEYft=LEf&cD7A-2skRSB*}n&bz_di zPw6fJ^LtmQByk;omuAr$l8~X#ubVEVGnRf9RoEnaT@bMHfvE>H6jUHm*M%5jx(pU+ zH4c&_vK1BVcscpKN@3S2@pI}-#dq(H2O~PvH0wINe}tbe5vr11$)(jzZt0kQG~K(H z`aS69Mp;*yx2;`M7$hdo88dvF7N{jWa%DjfRX(D`);6B&HLG)Nc22wW2#9xXMJRi zZk(Td7|#!M#Lx)Qq8QAT)Exi=@8aJkyC}!0Dhhn&Pq>hc$}QOARvf*ZoicPxO1du_ z1W@aBBPuiV=1K0z?83VT!xpQJ?Sg=s#Ch{=>#zH+rjiyL{fo<{=H8g>j<8IwCbay_ z8$EfTD?=s3lb%}Wj5P>PpM)_c`NZ#Vp_JL8QJYb5l_UtOH}QX{gt2D0D&xGvnWHgf zNZ&orZ$Byf`EjGZsg4sm`(IN??8J}PTR^=Q0KKP`$e>4sUK^JStN*c>NzrWE^9k;9 zfWFhxx?S>#v+^&R2^{)bk?-@E9KI5?L1wg{=sHJ>6T~U&e&fQ%g<0SK>D#mZkft}c znL344RTgp>*M&&%)yQY~m~C>~#jlyLnQ&hlx~rmsf}dN!0`O0<7XQ4q@sZxBNV@DN zGbov)k#BK}SO~X4CLQ>X&gebgP*XLBld zAD^<=t?oFjAPWZG8@996q2F;|#~XeP9|33H;y2I(FkX(E^jb8MA0j{(Q>G667{$wL zc>ItG6g^Sfz!6j7jn7`+QuV28j3>brwqb{faQ>Fk;ESFdi%3@%zMX`$fOJ4uXs@K_ zAG9iP##e#HJ2D(}C`bA2eXPpK)_iFW1*ckJd%isbi2YAlKvzXCCUpP#!$r#cY4++S zi;~Okn^!-6cdl)WUq+(teYS8<9DvGznkuMkG#fS#D{v;?1*Ms1AjPS-es3>x#aL{q z<^^mM*`XFzqa4})WP2`gtbRebAPfi4yX%Oo1w{4G){4E4F*YCO|2GZZe79L-n%)B@ z{=&nnT$b7D zg!z7?PHQ$5L*U$CmAP)f@^i$crz^pmxflC9?HVmqRZ+J9r(;R%ED z{9*F8B`vEXpL*w6$C_W8iK+j?Q8W+^Q&9Pxd!jA@K+)ZYx4l$w48ZF7xY;bY^bRUZoJwGabWvmJN?*R3m{gN!B5(yT_3_23v1@}f$PF)ul z1LO{W{44R!`A+_5E#TR51Wjq2_=eA+lC(b*^xaMy>|r*fu~Vd~mBfI2i;p+PlH z9sk(Esxn2kuJGxq#E>-WN2j{+w{APLqGh_tdQPr?gkd{Mmp$bIM~7OjfXjG(C~q08 z$oY%!d=+I!EF7?v1lXDdB#v@{*avjqSyU31MDpwz6&*>J;IvE$rJ1~_Lwh(X0Q=Wo%6Ybya*-kpD!RJaJ~_H#8yP0rz+89Nekj0RLD<7E$*vn~EtCTDYn7!b@#K$%uS;t!3JK=Wnp~6h z#R_EPfK7R3(jNuGWFFkokULxVQZN+KiF+_Q3j_o)?7rMVGNxXN z2Yk!39rUZyg@g0rbz1R(5XjLpNd1kcJnNO69f(Mi7|>)F1WqDYs7Nzln|2qzAz9T? z8T&{;L@t_|o5J>h=4doO18_^3HY}VISFK8t*}@Ikb)Z%p=QiCxe3@(#`?1OXw&7VU z@RB9jZ2xm*jsG@$6tGOttNrdF=VG z*K6{U2WMWJR!mOE7vws9FeR`NOtqRbJyLA`L=&Np^H#Bd|0_ZFhLt8K1Q4Ws9Px&p zw=+lEFF#2oA-5&5tXqIT^tVq-2`xx z22b^yPa4((>4ChX$~kbEy0Z~31t2{}hVnYxZPEN$bsQ?}T(Ljh?$@5fg4fZvs(=)K zsRtKuJG^b_3W{5`<#y2&t-abTQZA*dn>}p@L`kw6cUPP$$Rce9N2y)Ef>StK^a-*= z9wg~KL-v>dnst=6Cln4oUY<7eT6U3LVB!x-tk99@?{!EvWn1jIwiy;T^>Ut+%3kp{ zJ=>MI`fNOaK@yn^f&bi{5cL|Civ%6rZqU4Z^_V%9l(H|`5FLpA@beC0KXND6^Az_* zJkRQ^hbU|rZQ7?OPlFO~TYptSLA;oLO~K!}>yHCEijUHy5Yf*7XG(V^>u2}%y=uoI zc|@ghzMn!WU^D(HV$!R+W3WGk_yE+qazJVN$>wysP^U|O->5z^2ImX_cN7 zleH7kn~45cJ;fMDE{L8%>gKZ_u|R(P6!zO8lAvU3!WBnJ3B6CPE1;uODiM)&!l%zS z(pzrRL6lSS^y}p~Mx=^+V|(4>P){okK1+M;9gTrj4(RDto+J9c1?{h=QY4$eglG{q z!}eXzF?)*yL({TNtxf2X||3Bl5@UxZU<`_pj%8rqC&kET#MsS zpNDAlN3CJkPk~2nO&6bzVtu1! zOO%NK${#2)lTVlkMpP`xC#>pww@|}b65lvpaV$i?zviXPH2GJfPTWZ~JI|$X3!-RE zzpaNpG8i`>+D(!+HH|-hk<Kyqfc%Frq&P#RGvvA5e-qFFDNTJaKb4y6sMN8e&+I zCE>YWnuWaD1CdS@e!mB*T9xaAjT3lcgD}Xu>{=VE7Oa-hS*L~ZIBYEgO@;oV;WdrR z&?RH`d>3%;bK_u2;o3*?DmLnx`zl);DsksSSky06p#-V^YEEfg+>ieoT6BOAwDtxhxD-C|k*tOUk z4sVS#3CV5q_ySK}9qsjZ!XgK<+PZZ$c8yddw{=JPJ(%CiuQ*53vL8|)9y#i{Q4@T% z2ogUW=xWAs-7xwg&XQoXRcQ@Y>%N!jbk2L&sCwKV_`4$brWhs78i`wrLvT6Fqb;M6*C&Qy#Z4IetN6RVMdU+g&v06o(R6W( zG>c63;C?}GYxU6|d;ZU*;IPtX2-NqHSSn#hn%7UYa$InW&`mp)^x~i)?7q zvv8(9a~8k-=}|8xgoaj!We} zH8C??#${acnbfZV(KO1$h9(%YdL<`Ty6c{B{n`uI&u2m%p9>?bI=G{NAwBE~Cz&ny zbT}fG$VnH&XoGD%yy8BqFJAZiXZ>e1hbdD`86Z8y$avJ}iTYMj+HctJ zjWo_(2vqOulnHQ_5N3C%^x^hT3TCd6AJGy9xx?>nA4b<#es#_kRh;g;+inj|c1kA6 z-7Vf@3YAW;%}Y-kq~jR5-)Br#lEQVys9pLt@~!c=gH)`OJVjGQ+R_ z(G7!Wg&nk%8BS-;eQxFEZ0u>=A5Z4smI$jI2x)lQ)(A}OVn0&%K4Ja=Z!8iSV2W9* zPD1^jT4Ha|yMMzoJ3bY6(BK_VDBAi<%8I5TE#jO1IJ_#l67#D4+(K~~^O)Jg z(kHae-4ua??P|I8wja9BLjPd*=zm~$ygx4&w;FKqIK(vI9(5>u?qpTpibh_}Je)nP z_b_3oFv+&cBnc9mgLZ9g@9vQSb*}*?j@Yq5DBBmM7mUv79_2OTzpP{eImCs4%E=|G zoqvZBM|&4J$V%0$WJ=3Wloz;t4{-#fFDhaucV500hE(xDjJbLhLHo#vNlOG%nw$dw zXc4(BJKSNJB;wY(-tHqsI0`dAaydHmc~e_#2-c_g@zTNy2vkH)UsZf+<8LidF}h>l ze*f_w((ZvIl9J^m?eaY>-o-!Phb?uiaaOU+6A23=|O7K5mcAR=)Yg~_MCw2j_}uuVUU0){+ql>$@_QxIvd zh>3E1ZzP{)s9UA~U4_2Z$5@?fL|@rESr=cfNsBHTxOvn>^9hfC&MC#!36exCe_Nlv zBOx$CE*bGpOyq+qbSPZn`}qhJ&VE!k+p_ELc3@3%Dnu6>isCxo?Ae#uhgY{! zbJf~VK+o7bdcTiWPBJb=C73;bmI>pCNx-yEQ$n@glHl0Bl(6CodbE5f^$K^NL@O0 z^3PQ=Pz8hRf3W(6@eNkv1;OfyJ-d8SoI;^MC$|3s@4N{s>VM$9Ga^Kw-RDI#$;LOz zkBs$(^LN*%6f;EW5n~{y=xKOT<-~G*h2_O{)I)05<%2k#glkK4Vqa8-W5g5NpC0{s z@qWNYFwLt5tfqlvwfJlA(-;X3VZJsc3qsK+;E{x+u@Gnl3bCglo@*yu~cPa!*W6`oPbx8*n^t=)D`Mki>t0 zUg{STu5;iwLKXVa9{GgAzcmls9lX6l3R;QY*%!HPee)OHL7}L8HO1uwsf;8Z1y}*g zGeajJF}j>13cpsgOh4OF*#!0L6YWv)+o4GuNDlt(XkJr>_g_vK zUL%P;5vx~Mjq#{N@46Q!${ANhclKiiAY2mX`{%<}uXm@v61^dcHP}2kV(l3SW`Psl zsjuXOoYp?%HUV4%nz2o>UtgMryA==PVPoi*4+#TNggoJXr4UeDbQyT~vj9 z&|jVaQb8DLK|F5Vqv+AlO=WeAB@pQN9zb?`uBei(fa$M1s$JKIh#p1uh*`n%x?eyM zt~~WrD0ICqgfwV3Wv2N8|)9`PA22Zo{9siqV*edU8*)-);#B+EQl^S{9W26wWK_<45 zcl60!|0aDZtO8@G-W)8Hsw9feZ~IL|AXf1kM#Qp)z)A+w;;U_kolJEZh~DG-i*)OZ zkTmCNy5z1nCFt7_hp4UG6r9Zwk+&INfalij!+M=LMp~Wq6OYVx4CE6J2j)=^DW~bC zqAqA_$#&;+yDa{r#pKMk>KY1RBSyK6nssuV#R2K{mli{l8oA|v?ZtSYkgwmxddSNa zkdo;*KcKQPUM^l5bP|TW>*s3ll9y*xIuR9gxoSQIdB$0uia@%R;yzHT*Ne?M6^yAj zDGs1;p#&a4>i~Y; zxkk(w(uB=!dW735P+gF5HhM?Yedl7*b$ovYXC)pF7yY;wYJ!f~jv>w{vS0s8{wr-n zpIg}2L~+gCWNu&N*4KNujw69Db+F`}4qS)nWdUFxX#r(2sdIx@#h}w~_6(86pQ{Gj*R zTnRGi&C(G5u#DIJppe02+Vu7Z{Aq7lphDxZ{)yZ_1KPxi98!lmI0$q$lM*YRHzV@j zZb*2ZQr<)cu=!9YFeKw~UutV=8D$>S`@8>@mN3=TeMe0^NDY{X5evRs81~=V0odwK zJF@&O&uN1lhZo#EAs7wj_nbS|T1FC3O~$4_Uoz<`|q}S z%kO+qXOvhKiy9IFE>%WZqnMy_-~JMiD{^>hy-Y2hDE=&eO^$dq_C++xosQ9N&~wzm zsyWRZil2{taPpHbiYD|ES}ulXRFwQJ0PW_Ek=1Jh+7(|_Vf+02-cw{%^_Sv`qr!wh4m+?sf9^KNRbnCp9_kPv6{%II zZnItTe?(Po;U+D4++1IMojFEmpC?nM*)FKFaN(hbrxuxLNSWCLxJi+D+0ykGPykmJ zk7OAwI$yfoqkn5%aj}4Pyc=!9wnj-MmzWyDtv?1HF#-79EivQb(j!_3KLMCh=tyKD zI|#pDEIFOnv^ zH)}uq<$EcWk=X6(FEyNL_ChYMoS|5A_08uw6Grd(Tg2RI_^}3>xtuEQ?O`22jpS^$ zO;hAl&j1>@mil@co^Hga#6>3dCo#G1IKC+BAGpFl#etk!AY@DvPz=kaGB>g|z8@9G zh#U7xdO{+KuTZ{AcYB+*{mawFk{nX9@A-z=z38E0F!yWQ(vjAKtm?%W1#&?k9aKG7 z@5Aya0U=HijwQ0g6d|x>0$RxGLaUhmND^$x7=(KWIA3fIfp0QB=kS+Ue zY{D3U1#FhY1QbqW+vahQ*`rK}m83$FSxo~tieaf#UMHv(GthCk2qT~@LokSY_+f7M z89!&a56XFxobPpBzk@eT2uycz7jn5*5PvE}A4>tb{#kW#iK`Qa?z{jYEX+&A7O4Yw z_F)H$^T&~g`W6@|86hbEz5-+~rht4zslHkkyO(9tbfM$FjoJdpp7)0AM}{<_2u)}^ zQ%^sFGnge^Vyx7ElG25$ooFGys71-YXjx2tF2}`DHb=X|6(!j#f}kg@CUlujv>%3^ z8(H`r=TH5T1`*<*{g*&86yje9lMiA`-nI>lV_sfNdjQupFOU%47 z-mc34lb|-Q$2WW_X3mkSZ68K2L%q9ePks!g;6p7D_hV;$@QIU!jvYQYnpQf7MvqPgt9o{EM?K@H zA@bn?CCG^x>@vS=?8k#Z? zO6zbUU)CzKwa8sNE-NdI!4ta;<owxWj74t(@QB4%Jg@btos!Ap6wpY>y;4? zQP*AZ&90!Yh1t(Qy_c6hK(_g7H>sTrnM*y4Wp*b7St{43T$!jl>mzqM7nQ9p>+AhU z-NO9}#T$uV0%|(3Pa6xuxiqz5T=Gy;BdK3;Jl^p%Jr*W0A}7uIPMmXPkIH>)`W^(9 zmp?yV!2uCn2)6;8*YetE?TPizsx@z(Z0PKQe-493wvqpr=(r9*Z(MuLq_I&Rp;#Y{G6zA~-#3Xz;m1D3LKP-LRq|6h=P z64Snqi+BJJSY_mbcRB~x!D`zwngx7f-Uw_8YZfT@k2+n3_PyuRE~eFAR=rZstR>@Lq)UzOYTed7f&Fm(rAkQ z^p|~L{|8S|1`XUd{FmEj|k zZqmVS=2z z1^hARxhoS002Jvo$X9ol%^O!q(LJmyy~KE;Xx{9YCP&y4x0iSk>-IVsfC{$U}|||oPa9RmX{@v;q_yubp=c< zgP=^Q8z%}-V(|kqat7J0=$p-Iu^6g-Bd?29=1{*lW4jf}4cJ<`hO&d-bjNNliUJW$ zB3Q*NvWpvHUXc{T5M^~`w)<9>hB1{xMCK_Vqs1md*~*yR9?#(Hh^Ktwcf%JBU~0@rqf;zAj<_xsPrE*MeQPVUSVF}sk=h1-`Q>EvI>COP@U{wM^ya{{Z`?Mn zsHa|{pF;sb=VPPf0w$sO3ek_DHBwNkal-<|8rO($!#9QF2oyaqun3W}Uy#`~R5+tR zAQ84U9f^gX2YWvSGiTXMtrw#t_UY@eAD?noVni<*uP&8)w`*^rp|Wtg9xcQa3*aZQ zEsbhODT*}}AGW{o$uQzoiQo8SJnc1QUtdUm2u20Ghaunf=w^}TM!xHv6Uw!!ngn!YN>wnuZ({2K^NpVvt3O_NDDu+beSjW3&nPmUt zD_&p$HqMEmm{e6j4Y=~GV|=^l)ej>FNU}7DRO4S=7~Brffnp`$uFaIkqXvP&NivwG z9|M42IOTk~wwAT}HstBpy{PMPM;wUl`)G6Q@mmiqdB;$na|kP^YNsV&CJbDFd|#&} zq~9c=jzhFsCZ^1Wy0iKau&#{USXXpoT`K~KgYD#119n(A1sJ=2L zAEd_;l?Oo~-aBWYx?e=YM1`DD8bCy0{I*~~$C&g}b<2RmNZdytq-d3`El+3mmvtoL zUkxW`0yzN-1i;Br(v^>|5DpT&4ea7q<*Wt@;VLV&nQm7S1Y_Z?WmaGWz_aOt2%uQG z-EK(qRHI_e77s<*XqC`YY3tb7UtZb7^9jg)Plp{6fnv66JK#_?(G&;^GcGZMa0!Le zF2R6s)Cd6kdKsSq*k=`N9{5VH;1|m5*oE~An)Ob1{5ENc%lpMCZjKRsMOkYlwYX@S z;8onNs9b_sO)#w06wN0y>+UM9^@LJ3&@W1glI=c1z$y#{vRLKJH$p4TB=5FJD-=ZL z5KiSWEzxtT@O=S;%8@E%UrNAPwKTs`ANxO}{>*=%e$EZ*LjlyMlwt%>AJFmVii><4 zvFz3lB*t&#j*5jAN&1R9ilyr;iHCviA}5_yrwuXRs5#&rq=8Rt7p{;EU@i;<&Lr*a z!|BH))vB?l*RkxaK5eewYd9c%GGIu2(7wT#&VqE~7gz+$G+S*s9`Svk8JtB0KEM0b za3VRRabUZee0YE|l9fy4WPaK)zTs)^8V3Zib;J36r362=eY*dXwEjN<{J;O_XukfB zFz+3il|l-lywT>NU7P(P*FEphH*$TFJkkp%pwATD964Wnvf6xragf$Gdg#hKPWjiY zB;J0fsBOX#?D<<-AW5}JaGGF2eSiMU_&YsiTZaD33^su@yhyrz9PdsgQZ^-u3SB~9gZtr(f~VH#Ts5O)Vfx<+>HqdkmFXyj*d2@(gYqP$xl8 zJ^U3NLfUmo_?0slHJhKktNO%~h-i(AfT(RdQulx^l}%=%u_fPBG{dA8SXgzBKHB^( zzn?HC1gYQ1?@8W9ihTxVFPS&oRXNXgcHrS8Q?`{Ajoszzg2$SUC+9}Yk9$w{?V5I?a*30E_JdB!6EnA; z^WZ}qPrPK|=$%O*G`L##0v_#>isZ{O%}(1DVmIN6(oLYTnpIf8Zc=umlZ{TU*eU=wdwb$+)F~^}3JFdVI2A{b7op)2I_O4@By8l`F9y z$)sEFd){8t_LOFCrhvf@4!$01RGHPWhD&ssKTAgEmCc#o#|eP+lZDr58Qd85O}hN+dVRtr1MX(69mgCWL% z6zxDjMV!Wy6Z6g z#_v328jo|&&MSJquk?ZpO?O397qQ2Ep~)U|XPtNE_=MaI?hg|_FeIVK{Pq|Y0oWB@ zYBJ$3c4i6o6nFdG zrGXuJq!$|^ng=o;A8ydduI{JH)Gj0}bT1zi>UAkmQCul52V^o6wE(KWb0BY%!vVQ(Yoy}3p5Rco)TUg02H(|IAuj4f`-_Pk$*(kTXAbU{q1>ZUZ1ZgTStO@|Q zSXAg&@|2zz=AUM?{%J;Lnp5DYXbj^6r8gL0R5o@d{2jIze_xzATHHFP%X)nSoQ-xM|vWU-T{XbM$Iw-K(O8$ z6=>84NM92meU(3?kNq#wzpF`6zA#vpv#<#0@#TOXZ~C_$uc+STnBSvVtB4tBpVfB< zja66qRcM4Nd;7Uaz{k3iYUI1@Il~1dijQx`3!_=IlN%M8e=#+GIZ7InkLBs&?ocrm zR;cD^Aj$y=^Gf>!BlBVm$pOVV;hl9{L&ZxJjXe#ph?AdlrTKNqfkiekab(sXS&dP! z5piJj`z~Cxz=RA1ezr%R;tSt(1D{Ma#GY8nsZu3;xG~b?0!Es+e`)BqZZvdtUp@b$l^B+0>E+EIJ-N^A>fE@oGeusTUc`@}}$b0!sS2O{Hl+5X|`7bc+ z;sHWSABuQntqgc_Ryxde<6?U~)$b`{|CZxz{7}?x%YI(JE;$5jd{H=ei2dkQ9!6__ zkWDe=Ac(z0I0Ev|$;Fh&q$~pYVSpbbdDai%f;i!^l6`v%1Q4gXK;?AC z5UM6jXg8}j0M6(C1)M?UnkGQ^14_B59((_%%q8)BOoTFxgCB>tN8$NmNz88pJ50g? z(HA;t>5mdHhjUxSzsn}vuM>iz0Os2~NhaVaBp3F@M>xC2h{Z|)M#u7QtWavv55`a~?oXQS ziit`YhBvD_COL^~3Qp~;DZI}4R1iHXzyB(3ZHRtu9 zD%&0#_qGW{ahBgvPjpGl?gkmZ26TV*V0xA~bXU`Nz^dLwtI|mEk2F5D2?ng{22c8O z9s%h1nqHDLrF@AZuUpZ$z|IRt|E*i+Y-^9=6tJ4ZUf){gX9=Pmv&x5%LYcYMHSeR? zILjz_R^MeGS^UJaWnJ%D7)p8_>bi`01W5+G@W1u_Z6{YrZVYIugS_fzfcC3ZqJC-$ zvb8Sywp6WK-+oTH5%|1y#CM|vNng#&F~a7K-EQW@)-Rxh9v^cI3L1(Z7m{AnW?s?+V!gwG+M$1!gkwNL01BZ{6W;|(W(<=rvLv8 z!<7U=9tSG~aZ7TIWMPwZeKnzKmO)Up&YsFA9gYaZYoY3L!CrU}zq^dhiks4sSd0Ma z%MN`^qB$S`f&sC953;sE@aije|3muff0Mp(v+1;b6dojbnlo;Z@|=vX;#RDP0{r)C zI=Q?K++n(#^U7Q1)0fJdGfV{BG~_oDdpOBYqMhASW-chev@pC^4cI;?ZKoSMjWUH< z5`8Te*K$4$S5yuIyGbu0@*ZfCcG3x9A&E3+03MEX+@LNMy(NH{oqPzIEv(_hp5>eb zL!7Sbgkw(uKMf9-Q3q8ZiNLau?Cm+KN{Zj+mg~BU+Z`4W3vXDL4Q~N|(vtELh2rmg F{})`jvPS>_ literal 0 HcmV?d00001 diff --git a/2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_21-33-34.png b/2023/11/19/how-does-Spring-AOP-create-proxy-beans/Snipaste_2023-11-20_21-33-34.png new file mode 100644 index 0000000000000000000000000000000000000000..1b8ad3393f5eda6b9753826228142f722241030a GIT binary patch literal 84895 zcmX_n1yozl(>4yp9g0(mySo=C?gR~1G)QrRI}~YgDOR9JvEUlqonk?YLyHx6`O@G2 zJ8#apcTV>1&dkot&Q9(=`J|o zQqxmlXJ_Z*;}c_G5Rer(rg|$ZEL_$+XqBNa!_Usf!Ama}Ue?sWCamDD#>U0Qmew>- z*fhW<=f}n?<{R>f*C>i#4?O0>!^S3@;q`-A(Xp(lM}UouNgd3_F3l>go6|JFA`8?E zYcKv}CC<(!sOjvOH&E7?!KS5DTv=7t2ra2AQekHe3iK3IwI287i>Mi3V}EDB#>#G( zSk_b-XvoHAB>B#(%1W5c@B?pNO>d+GTiK6T%XH=JHl{CWuu z11^SOa8S_4z~J{0dWx2Qa_np$*jd?xI6v8o+exzJg#lg$9IbtV)7_&=lR=KEyamMt zfsVXlsv>fh5iYty#(eB-Dq(CwAlZ+lBNm*W;*zXV`V)+}zj&6VS#V1l2bo98lw`OU zt8;j|m6d%9bj;|GHgvPHFYEEM%k@j(2ju`~Ju5{HZ+RA7V2P-DtTo89Fv^TgiYwBRAEYa9;VB&8ZO$$C zKG9V+J=oaE3v8(&9%mO}3{DSJ6>T@<6y{PAQ_=@Ya?0waJ$D#+@Ui;(`lgr~cznpz z)C>mMn#WW&lv(h6j!$wmjS7noP%+FGR^#?ctN=td^Suv@(ou-=vrKpPQP$@12Jn4P z$!xA;F_#tk1bXLh7Qk(llK{|E)U!J4aR>l?tNW}Mp4^sZW2@m_qMZ*R|tvHzC;DXRjM;LYXq*;Z7-HYG6>5UrP;$tkRAwZ2?Y62#D{E zmEXzg`7R$V^J0d}5G(w2kTz82h@c~Fa^dU{A5k?L0{WWR8K&0!%{dzov7cQAiT*!Au|*;SMfzX~M#YC9fMWm% zXPAkRyZ_pD{?~yt{lB(o-+vv94F4NM^M8ZN@F8P$#0Wy^fDjNN1VJ25E8x^0PUHT4 zAIX3X9X@d&yeLD@E&s-QWn&bwwB_2celPy0ycvf1>Jw)f3x2|`7)kPOqbpA~m|sS$sR_ULl* z@Grg;i5y04{(E2~ey<0+IK(`IK4PFgE!cp5?hE>WVvhc%a}p0uX(Ybf(W_(teZ(Rk z^{yAqgqL>YX|Wqj|6!+Qk$9v6-%2wHib)@_E#wUhj=oB^04vHTTVTXH2AIkge!rNL+|PRN;pM~E&^ffVXAYT;&qA-;c}iPtoI}1yhUhHD9mCNY!qJHVIDUiVKwMKm_+-QAH zy1?j;y5IdM$nB`q?VX>`@Dw{r@nR{F9oo6arcNb0`(3cbv{-OG=)CrI`0ou=Bd#!O zl|0j7^#=n5;zAZoj-_bh8e~Z}xArRcWm(OpJ8<@zAH9XL*(319)heKqevGD8&o^$- zyI0R;K4iNjV{Kq?;~d;HO`2WpP{n=EbI0uJ!zz6lu;8Lg3XBB)q~B%s4J38`HL=}- zK9!wN5Edp<(Xv+R-T*bqnEQPDuNS-=sJF^7gA?sY#VuY-9(36aKx8<~(ozUDHo>6x z&Nl#eNXJsxPwC3(RUE@?JOXck3@ z%O~ff{E!7wxtO(5ePHdpAJ6?f`>~r?B2@7$Dr1B=ag|k-+Gsqk@F-0&s>)~b{gsFboJFKm=1WD6>(XrZ zxgRF38l!+z4AC%o|6JJhxO!J0GR_(HBijCS&6!oOus+1dQ8)a=&ME4v z3UDCEEwUX)O&%lequ<$~Wd{A?aowVHiz#sGsJv3_IUo{}gTn+FF@-M(OXD39HV5(0 zrq?3=ehqv}EVK!oJt9#Ze;GiuV6fyMou|86yd$;r^XS4yXU&mC0ThcS4i?zFtQtXU{VrFoigKn4PHIJ{17aB#!M{eUnJRKbygC|DT>(J67R;#W^Nd(-8g1OklL4f*C8) z(uLr?Gry7cp(E!N52t(H{W`x{`W~uaFai6g1g&I1t@&kpuw*5^TnuQK{c;e6!6jvB z9Scy_m%Ddow^zd%B!PXV%Kcpl{qI49fs_yqVq#UTDcM{}yXYh#xA`)*{NmCF+5NVj z4=m_bwDE~a4rUD#J0$X^|HRuFvj7ZuWZR0aWS}`sIt*>>bXa*$DKf(XamQ^MN22MI z#tfuDxh+aLO6fV7(hS2T<6KP~D!8QK~+G&IZ_)OSeW?rbanXU`W>Eg&xuV?*AxjyPCdr#%ZJ z%dR&6=QTlG?Q4~Dw(D5WeSHl2e$ri%j9(Ixd{wtLgsNnlyRt1vw7s&g)Hn%+Exw-J z`yXb~Aw?_-L|J#l@R^XN9=6s&ZT~Q}?00L=EJ+VG8XlshRE71j*wv_V=fy8*1Ha7B zRCg;BLGS(Qv`)N$?mY&d@)qD4Oz1vjVT^E80B)OOwmF34{)BPX+Wp(Uwn}#9QTo6C z2zCOZll5>W@cpWV7d+6B(BhHaiZKNhn&h2Iy(xtDVht^2k|$peXby@l z#M$TJz{RS=#a5!Ld&<@SJRM<@fMK>aN1Fm)SH(dK{f;cHy6rjg;VWs^oOzezOH%Ux z$(83D<9J5G>w_-fFP&+fvpv`N46zU(YmQ<3GMY{G!m#s0WA$*s3eB^wI z5NqY&;A*q$z#$PP7RxGxk*)rI?=DdNYj-!pz|>SCS==e+w27~CSB>Dpre3OkiZF}%YIp-TpKMvTX zmu|=SVlz=MW$cSO!QNd*x9P2D zE-Jr}0%b2SYn(hcNf0L3W%xHqzHxj7AixP#FMG%-rWWP|dzEvpgcFm>$KaOS+m)UB zM=%odXcIRZwNhIqoH*ZuFf zX;WDUBF2NX->9I_Th$d-l5!eyS`yLb_*{S9-bvU8^N+f}&<X2|1>Q^^ ziFO62JuM6Cc|qP>VKoSn2iVU>SLocS-HAZT#y1=RQ8z?ax8K|2I4Kqxaq^;&kpg1DdzdCGj zK>skWi<-t-x=64P#bYZGf6-q!vm)Ht0p*&8Y~z2ir1?6v;knmXqc|vVYd5F4!|&1? zk}xv5-&Qhh+{B)Tg)Q)TY6>LJ(5N*_Oj!t$-F7wOoZCAeuSiWz)l1U))6fGtvl&ZQ zKmb;Ok{CRcZ)64;CeTv9;{dH&TU+zPY9$ys3p2lj)5iP!<#l^fS`z@BwwZrHI>D*h zIj0P0QACugJzUh#JrK#AoM=KMaJ2hk0MO82hA#ij2CM!4P4wjnoGAt^XYW9Pq|eR% zJQ40Wq$(vEd`z@O2U3b?*XxD=R=UKG(@xnK85#8jQqg=Fao+hh1{6_zlnV|4xE|$4 zzyem8zU-IUA?H}72WISS?#6AD=c}GmOL;$0ZhHAX2;p>feBOQ#$o}jKT0-crQ?g~| z>r5p=B0xg}!+u_5Izc<5lbvjqe%`#B5pE-oef(bVR$07U)`r z&InaeR#ql?Rm%)1Ni>!q4!ZT`Tl85wQ~VL$m;C$`W~sOxoj*_@PqoR_Px0K`LGR zFFx5$$#G@=%VUpOc%1~3JFW-vPv0|mU<{lRdNOklnwQPA46+?&T~?jJmf>pB{!TJ0A3&B$TINeYh=R&{e0a2Ukh zOve%{w?G>&z1-~ZTw`mdI|1sCct!$_p#OH>ZR$SMAUo+g>EHflSka)SUGb3k54DB`fwHc1yQjB3vMFMqc3aKMp1{B0h7jD0((?Ie=*1K ziU+wtucm7wwV3d2gV?8hneD01%(dPL2c|{25dcAi0dd26{jk7m$j8qmjMBHGwY+2oO|PcdRgr z^R^VsV?1DhVw`vCzz3lo5X}X52LoAH7r_u3ixep15$Du6B#>uB0Zf1Y$MSi6sDsuK zlZWx;?|n^>j#``F>Q;zh8>(sh(a##2FX)*2@gJ)_8vgVUvl?@?coU#Gj*Y8vNJbBuo$ANzVTF4`4)S zlgYBJJ3TZRulq2E@sP?c-BWAjOoYYM!Sq7Dz@l1s7Ug;4U# zPL_mIQ&50oE)~3EAWkw053!3jdEHA|JaX|)No;cS2V&j+9tO-uxQVUTlJ41EVZNTb zVSi))FX%Oa9g!a$ea{aFu6;JWG|8W$qr9_v4mrMrV1)rLW#2g>?pjPuAA^^~CpJh} z^qi((UxKwF61wf4Lpd))f5|rn00E0W9vOj+=4YAXQJFDiw1aG`=Kb>80l&EJh@f@Q z^W;6b-po~L(MM{@S~!Q| zB~rR1ubgDJmIr#5Wl1)XZ<64vxYh|pGaqPf)kONUF0$@Ko-P;vba5uW37xFWI|7QS zQqI{mW(?G#L0Z!Pw${}Mpl6&|Jw+}&bPW6&i~Cy@7A%PbR8Eb<9QD;vsZEU|_qcCD z6yx{obF)vyLr+?e8u%{a`;ML!s$+J#dCb=sBE;VeA_Nxy+kPV|^T7ki2-Om}5Iq+p z2-m4nRu9Ozt%DGX^v2meOzih=glfrYc?c6KEz4-;Mzq{R=AvVl)Qa`Bz7Z1USkO7B zl53e|ZE^}VaErG!_qGYKEBcP#xA?Zw>||;)?SRsQVDG_Ot63(b7N za1CS|t9iS8;~i+?FT_%J{)|DKc$a z^#6mXpowfe zpv|WAu#Zpyo%a+@F>9~iz>`uqAl8}^sErMrYAqR`5N}?j>=B(7-a3DvwRMQHMi%Lv zrp0PK<=sEUL`!4nR{`jFz z_zMccZObuG<92j|L@FKPvRul_l&ItpzHDWYYPCM@h5WS{8-kL{j{$VvRX7!cPI0V? zG1KBgh@&0W}8b zR^y%e>A{H^Ux9&Gd%Ednk9&=AuI^}W`#Oh{C=T!avu7^vbTz!znuADR#5SQ_cMwlO zX8<-?Ibg=yZyv6ywl9xa0Ajf+5?}S8y(=t#J5n)S;-RxRr=<)GdK2rhWWgjxg;$%A zA1GB{i_@Dlkr!~#e;7foV^lt~V1Ii?r#VW^*>6KJ$0g zuZok=?gyve{0*SU6jP`0dNbD_Jq2z&RvZRhc3AK^27u>pZ#{s5z|LPhH4YV!#xcMb9YCO_o|?0XL442;*8=P%@BMnBt2=G*fG%kBE%n69OrWybO%o+! z6|VtM`-^soptJvDD)b-+@Cgj{GN@@>CVlylu`G8krj@4|@6S86ItqIFg!32o2e`cL zuHN>q^LquYLW_VeEEm!3(jqLO{V9nnr-{Ebf-qLYy&# z1)Q+zyn*z_e@RR*LG0(?V<{7GU~0~FW&V~2jMJ5oQQbqQ?>hJ%0v2FS0-8zo*SnN;8wR&xG zeL*s)c~d(O&w8|?zoAwC$H9>7X-j?=_i)7rr<8_4L+}J-=q2ggB*2Jfz8#+vlJ?|+ zY?yboHJakx6X(^w+?vD8PhhSEq=Y2x6CDCCvrNDPTt>M4y@H`W1xExUx00 z!rd#Ht(0`w=xY|*^ST6R+8cIy@EUW+dmZ4mPrNP*27Q-DK5XNDKaiFd-P`qjj(N>t zZVurJS0*RSi#l(((PL2xvKZ_Z@as9QqV}aQ4RG{lk@i9SYX{BQ$ky}I;qRRH?X=}_ zBRhYK4{j8XH`m6ieuxn>L0Bkjrw-A-H)>=LhH-uZ*RS?h+-BW7w^O)&iPm?EZ_BuI zWqjyJ15l>)I@UD19~Ybv@GfhbFz3BU+$3K4pRKROQdAAWe(<~4YJrTigPxk3JMbJ< zOf5C3k9Hkq5LCfTGPI7PlX>4{WxWLdegX?Oa5AuTEjKfmK(kn5l5Q6Attq}Fmrf_PN2Cto{KDJbivUTNgN!aT^3bNPEGiCmg z_bDBgM$*Q_4PnKu_p_O>_LVzlJ2(A)ZY(MfW{h~8Bx?F-WzfOwk{czRhJGg#G+PiZ z9;#&E9^yyVtFhQSA}qLabmw=jzW!Cja(K8x(#Y`9f zk?Jlw1fkX=2aoi$i%x;>a zp7S%pkL+Z=UYl-;Cx3EZckxN2SB#S;D4*EcP8;{P-yw;M4Z%h=wsfqsxGyI4o&-HU z)SXjc%eGTk@66AI=Ti1JVevYC?7)3fX?b4G?6f(HYxksJNb263ZlXT#XIdYW$_|sTJ5>I$W`k_f9r)D=V`-yA(LYUb}VeD{ZXIC)St2AarL5cG0?AY+U?X4~^ z?4rI|wa#iG;~=VGr#(||azG3CivES{jLeB~G`1u!{3;;XTWd~O~zPz!b+FRg$v&;yTl5C3g#hnb%q&^TV- zs!pC(ii!gGQ>x2JZKtu01#(CrK&%{s8C`0lo#jb`|obzR0r@o?8*qhSXELp4dvJyG%bS2jMe zyO*Ky~kBpJ5-4N`Wn{uBLYw ztcLxOR%gDV#B<|Iy}(oRv5Lz2m$e%}a94K1r~C-!(bgAjGwCtV8388*pBsT7 zys*4|@aatad$Sma8#WY|q`hIGgttu8Z&_x*`c%zSfC4}zd zxf|H!AxZFYe6Ck~(dYCCJhS5OpfN)Ccq* zj|q)_pe#OODTn-=vy7#m9%L&;kXM=2oSlJv{NsggP3-9YQw?BtLRdD;Ki_S4E-(jev(Z=54n1?lf zE+;I7M_=Z7EX8-t--d<`)L#`?zYrT7WlxuBmD5Q`14y$rGuOG}kLPGi4JdK_^WD~P#oS^qmY^7^F@@c4tDf}# zVuYr9y^uux}022Iy4Dz zsha5LU+7jjxx9a0`Q~0rrMIgQmy=WzNRZI>vo>+2O?Cm64riQ73}%4X$g`Mta?nR4 z8b*v&Oj2}{gvXwgTS&9uvqJp*(naA(&ppd@;3(6R0~~2<3|5eEnjU5EC!EzxQUqd_ zl)quqh&usM8*_Yy_Qq)&`3WF>ghcl!c(%@Jd< zF%0(^F=r}34ub$2&PXoqHTqaO#)DEbyXvqs@_z&Rx}?v=t_CY6ZAQ3jtz9GcY*Zrz zNv=8AREN8e{;!8$m0VPgvBR`dq?aMc=`O##}qg zZ9Beu!+O%%bvGf}l_e37ckEJ#jy63!t z{fqu33Ay{^iZ&MKj^t5ioN2rl_bu8FjSNwO(qu9&TPZMGleQ!tg*T9v>umSqr@{)4 z^55pZZad4y!VWV#-RnuPIkYsG#j2ygAaDF=_s%>I_O=O|)t;AYMy;exY~$D>SUDLs zmhjsi<-8mQl$hRB(eomGxcNh2KsC1D{qT4A@WKTkHwvm%r8Qx4*27?eL|Kxr>k#lm ze2nGnndT+YT9?GW0Up|^2{cj6b+VJ-E5i))C1_DcS#Acvzb?s>Ur%?nPnf5+kd=3RUBDqiNL4VT~6Y2Xx9-+Qi? zP-s(yzCNe>feq+N9i6r*w*v^{d8U2y6)gFyjyCAm^IHg>%dqA=tMGZrCmtkru`?p? zp#GZi07#(6bi-brQK+1ewn`KBGux!mzZLOShAAPds_?DH5mNn}ZKU+tO znY?aeg+ix}%IXipaK*K};P$eto)^tc(7RIqiaPU9dyZIAxCnd12 zhV5^&N0sLfAi&JYAM- z4mJ@Zv!?by|G2#@{ave0{5{P;hj*JgI*sNf59(K+{o5TbYSQ}GiaN~Y z7pB=KReKjLEVwfQBT&2gy1yg=y5U$aLZI$6rGy5!cKZOiU zvf;k0l1HqCg`SG&A;+a{2%8?37^0P@O7n61v^o<>M!@I3QYpk{F z*hj5k@GjNIcFNobn@X=3&9?C~csdRYpkGIUq}z>xbzh$VV={t(WwOu{M!)?7Se@>4Vh zXx=P231axwJ;C}xwV1&xdpO^NAUc12H3S}UO7$&qVydEm;Y z7CE3Gy2n?qe#dMZES$3Z{E-SnI*Dm4IVD7D&j|wch%-i?;Ttt=Rqos!!QVBSb-;Ic z?x-SbNAo<-hzIZ5^$kJ=7O%nkWzAsdMX9sx^iaToKFFx{1mQ^EI>+ql`^t3+*JP_{pub^KM9 zdMLFMP@#}w^~)fQ{j17oQ#X0sshk{>`6fs=I->-fhN1TmFTTVe?3jiEy&X}skm8x^XR<^ zYR7TtuVGSZ6+NbTVm+ zX2cV8!HYPA!gAfm$+(~JfQC<}aG9?7^?Q!}uBE$b2D!B#$MVw@hCs%eS!WRL7`wT+ zYyV1M$FY#b+pNVMlFplvQA|clp~}ih_vWVs60IGXkMxie{s(;B2}|&NP!JR3O*Ao!=1I@*EkBND>JrCb)(QudNH7o<#Xe}3smB~)0uIll+xyUu)20gPsNl|4jTxB^_T8k>a!_wai_ z7GU*eWn~i&L*NhE4*Gl$4_GjHd_58Hh3W`DH3={>CJPjd-qnBjS!KZ5tEsVxEP9VD zMg1;I#4z&jDq{Yp&F`c;iBL3Z(!2M?;d+RK>Oh>L^G`Cso*cvkzK5%0m4s6?CQYDC z7i%EpEP+e-Wu${|O!T)LNf(b-3v-U9j6Y1NXlr;VDi)>ZxMv240L-5K$R<+o4aDE( zTFJ0f#Aa{Tw5|F1MrmkkIV2}Xr7?HNiQY?6SVl%Y%b3w|jF>DTe8=jlPAH6t~2P#eb}Mw=!Utq)XKTq7p7aqp#4f ztK7Gu4mp72O^cthFFyy?nhRfhcUM+Nn}l1w&FrdMk#QymI*a7{HynKhyrQcXeG8e> zeC=t(rdchAhqpUA%7G{AkHc2DnHU&%Hj^HV`f16bQ)aQ^{(C8;|Tnu-F(5p`lcgs;Ocy?+JS z3+dVDq4QFp)R(7BnNth>PD^lg(c(S>>=GPe^O2zK4%6fQ`;eZr>(hf_kV~YCq z1va%DpdygoWoCgY9dIxdZEMu@{!)|h2fF3hGYEL67D7@k@}Hn;V0v@Zgr$th1zZwM zk1Y_Vk0&1G-+nq69RH6*{ktg^Tk!uY$^NU$(!&4OeyHSqL>?(i7hCvSfDa>C2&-n8 zRHr49-phEbl9e*iiO;4c#-4t1$U{Z@)F%TS|9?2l{HpUuruQ7)*4(oDAhrJaF3I4x3eA123z7l6 zk6wA6@9}8E<)dzi>acG|ItOrb4$g-;9(FA#F>CO*Kw1hoB+(AKKvjJa3{K(}w{uz% z!GEW1-oPyL@mqgSB(7l(BK9IuK{tVJh3PDCr;gY|Pqmz&5aL<`xEsQz{g**2wb${&Zan7~IV2 z6`WTu__i@~Mh|%Iv%>|s7-08cif(&g1gF7!+Wf;|o*nO8rIx$p=-lN%ZoB|rtep)8 zA18L_xq(?l99;`zQn{>C)a|5ybAk8T$r%)8ECDf=E?kYC!M}K;{l<7`RT5Uo_Z&~b zr4erZyWm=eYZF0BYH8U;ir(r|YCB5VJ*~inov!jle6KF?5LB$rbLEB-ojVYC`_~8=N_04C*%Wy*(YE^TN;QfLy9X`^5DkBo6a08IIy(sA4XKYE*+Zw zXni9^q3bB|MSAgo8!Sw5te{z?K~0?28Z3e3=&K2|v|ljt>s{Y#M;yxK8=ojnzuv#* z+4)OoIL_5s@Ssy<69ar<%~3EN0!4=}PJ2O}#%W{cuXOSUxV&8(~MqVeeQjZb-T=JHTQ@w7I-8D`g6CnW49 zN#usfLRY^|S^dXY-?02NWdaU2`_EDe3mGt7iXbhWBB<>JQtz&4{^hl0_-mRp7}3_2 zELg#goX>3l`MCh<4tnt0;20cJ?B1w`-qRxM5X)h#!I8fGXhsjYfMIIJv^&6g>}^XT zOnxm_=OP4Zy!C4^y{z`PRc1bACq)STNi#>y5({Jz(_mx_WID86(|9M^F(2ahvb>c!P5UGL zx2WK>9H@>fsZy=G8yf~+Toe_Nm<^QeGFyQZ;$8e#ICCNB{!eO~w?l!+ZS#12og1d1W znpi~Vb)+Sx5X0i>R%7w;_m-a6Cmb>A7QK%IWL|h-&xk7hwZ!N?=x#rQyMyJQC?#kM zAb86_Ri^;%r+}!vtC^1(_%p7-I~4X=aFF>Q>44sa;x+Rt-?_OWPycw>M~RW^kGv<$ zD<K#p$^a{CgtF$<0_tA3EwXJRo^Y=>^~EO6(jn`Egq?ZhnID@RcizgH|aB) ze);T@V{gOK>{(ju&z-t%BtGyA&Gp!ah@l2VJogX*#?7J~yQk%jnMmbh@_+l4tm|p>U8=5itc2($^1~q&UXRgd$PB z0V0mVFF0hL70ww>ME}dMERiGs5-rRBfbqp}32=P;F8tae`3656_(!PzgUP4%?)-z( zr~WTx>%du#^8?Yh=Wo?@VSPbf-_xoRPTzF2Ya=H9-0?a-i{5qoS-JKyqq(r-qA}HX zBmVRuFsE2pQ`*&l_y;>ML)zu|g>zPHF`vna&50UY$!G|qn}6Mnb~UIBZ~^Sooiwg= zNw(OQJneOg5BJ`w1M`mp1C6}e?yGN{&bF>Lb613uy*#gn60;=kpFQ}q_cv$4f30Ya z+}qy(Z~S1c`v0WJ>qpi)&S5`{3=8%jevl|DYAWPo0M?f&pN&R(x}4oR2R`ZFj6J4- z#IZy&a(IEWaCVQsuddI*G}V$_{uc^$QhVQmzmWcQZHp@u2UgfZmkA)7hu&#dJ68fs zeb3Ns!4t3Nv*kbwtlI}%IR0<1R$E`2oYtDkq0+i>`LjU3y}rF*BNw7+O%p+^_75w1 zQXDxW#~7?ZHntX-A6ELLWMRgp+cRag7IXN^Wi1fxeu2U=i$Y#BqL-ijT@rr}o$<`q z4>_o9#pI_lrbRpcu6j)Qd!#(K{DnRc8fa8PtJms_UozSnL2PU%XHTMe0mgUyJf9`D zBEE;MgI9l3?pjY;Mo058b$>7WO;s0-3Gv~aD{fqgt@a^vK9KALk(*c>2u2ohea;v?@!2h&Y=Xf z#e#4tRI1L{X;hyP6Y{WtEO3Hc?iB(+%zaSNy2ebHP(R@H74#L%y4JsjKu;>zG0tPo zqA+o~a#}@ZPe=EW#07oL(gjcbyi6{jT4nBDPg_r~ASMH*(+gA;PQvUPf@>E%cOz%c zxATdt01`Z4ZC6M&bkBSl!S{Gq*8v^sx407y&=V$n@~et90>@2ni7p7L_&~JZ_Tb~7 zi!GxLO`B0jjQkb(6>2JW|KJ$#4!21*rW&zF;?}@E)m(vS>6NnERw%k4;<3ie>@2^A z=Uiy%pLSfpQ}!vHEz{BE>wYWpl@q9+7&^VQDf~jAC1!6MFsh9&WJ zrFMfYA<3Fc^Sj+H3e&!mysTVvWR~117{LkFG_hpcF=ql1fyeVGHShtQpUgvzI?gIq z_l855)T;0=@%7KnQ*eVFqti|+pE38D(Jjr{(^h-6So={JJA(l24n=gX%lEqwWcv@n zBOcpr^-5p-Uq&`FqXD_1jPIJv$!LUGKfrx_+D*D~6{p}O!zue2!I$KF60)(7%qgZc ztP=Zz;VX*IfE%oM#>`5~TxMx8XxZZlzhO;u{_1M}me|NSvOyv6vkTNL$XB0P;7y3M zn^@Vak3J;%G<6!jdg~7N)qRO67v>p?8HuV+)4vk9I;Bl6H!QFr_KnQVY79z$jKLj^ z#l`cXFp^)#S3V|XP9e|lkTE*__B-Mn`%>PtWQe(3D>T}y$K(nFj}BUkI=rvWzFE%1 zdO(l`jX(469`JBhgEJIOlH`78C?e-+2=^KT9Vd2>6RNU%iut`~m$vLWD}; zUv(CXx8{`4^xxQvGo6HWPpEHQ5vU=0FUq22lKcE-A zpb4S%-){qXQUuyMDe~XcCxlz61mmY}^G31=V~Z<)pljg%=MF6&lBgnn4XgjTLo4ON zj4VT=vp&v1+y1GMjiRmELa zr}7!`m8F)+Hg4Bb2%6u<7h#?1Zl+m@<-e{FEdi0eJ&uMIwE>GOk3B$=DRV7+RW z>ZH5Hj=;X|(jO&VjCX3{9+*cUXubq3Jeu~f50nrgN7B|`h1t)ACWCCr_cndUg_?}+ zXfpy|^X--sh5_`jh8$uHQFy zR8+aDZ*{u-o0JvN0`Zj1xw8&Y=egM4?t}XVvJ|Q%;aJb>2|7XeNrty93kCgm?t#+b zAWDoVJQQys>$l?c92%<`BGgB!A#D{rRQYavMfaL15P8gzpI)I@Vh&bw+1#}KOYUDO zu+xz4gE1Pusxc@oAwig1q<4Xb+mVHAQ@AA3p7o2G2oxL0BHhmO+oe;;0%drz$V19B zz$BmL4HB=UVibr#b#FyF4pk>Tp|<;cb8$dsT*n5z37FR_N8lRT0z}XUrQGTViW2@gP)yaP{s+Hcr|^cSfB?17QT$Z zsW_(oBVUrnr}}PB{nRWs6&m+lFtXhBU-f`~6@LD8t`>lDEQBB1alVXU{5o3#YW0aA z+S8iLmEFiF9aXCcGN?%f)Yfia-_R#|PYXSFIQM!_FG>rwy6s%Xp%&2gou?s=*Y&Jo zn#IswfJchJ@2UW(0|sUYn$b@`d$hR zU#Ag#z5EOw%1ImMxpjR>Xr-ZY*bs`8O%jV(YV2X9ix0j7$R;zZk6tRL0kPvk^2RT|$F*?l6S8TT;^`oTo{pAASEi892Y(Hq)={3sgT!nc zB%mKB@L{}H+By>p=7z9BrS1wgmnDSZ zg#3gs9Gbk}!)p2V?)D2I8Ws#yB@rvYka^%-Pa*dJZ1}?ieO1SesQ@ebhn*eo21m#R zqXs%_D4p-_to(v<{DHK3C+-OI(CMh&L0+P~l>p2B?@>ew5fc^NZ~~}G#qk>ug*L@P z8te`WkcKi(p|O=4vBQ8sfxQ1m9*qGr|48q%vUES2G!D|Pm^U>#UB%;X~PBqvp zh#dyK-%Q(Alki1N=}f%?8$t^M!q%^m+y5)PLf;(Y+_`|5r$Ka3wBw8N0JOrjMsB|2 z-Zfh@$w*yuU4L$EFOfHg-wuo(mvO!2%wsi^mTcdr$o%#c|LR#^`Dy1Z9mYKB+iG-H z#B$nQkc?eUf7$cw&SBy^_p?osUoi>r+*d{U!L8{l6Z-7tw4)7j2|@8@1Z>n{mk25U zJdb&Z=JH6?M%XXj(->dieVet66Xu&`~ zMf7v|7O{aFtN71SBe>Pa5)i!iKk)bThF&n z4Wf&y1w0XVxS3EHd=)C3MJy;}Rc1#IaX5d`6u0m0|G|b-#$maz{aH8nxa)iX8Tdc= zsXX-7VU^Qzy-49x3|3;qRY_sv5HmCSK7E|(`fF3*-0arT-oPXu*|)+tyFR{wOvdT!vGGDgDa3Wd5XC8n>blEqUL;cy_`L z9?PHl0b4A3R~F@fq zO5VzqOU*CxZsV=_j`dkfcKP1MCyG~+`AjEaZE{PI`F!kTGuOdoMMbyS>T9x4#~G>o z7UPH^zWwNBAsaqK^o)Rz*jI@kT=*Q>ZMPTcQ&h{O`l(qVrarH9SOkXa7{I$H6(XhX z2Wc^hA7v(gYlFv+sC^PB@~}@q<>}N+4YnQj{HYrHP!&Uxf*^)gOxxVp*gd!|Bl#

>B;Qf4RnA54R(zLc9gTcNmSS>g(ojt7CKf9Nlf-Ihc7YYst)6T(HKo2a`o6 zg4Azg?$IMGlEZ%;`uII}#eNK>ZxIQ%8TT*R2>}TgNEG~-XL(jDDDm<X&oAPbxXJ*+OZ!m^|1# zl%0dAn#(pbUyVvquz2ia_bklT6yjctUXF{Y-7bibde(MN^xaikCKjXSwBfUy{L69? z0LZw%Mg;&22w$&LRgnPBef<%*06*fwC4>wZ2XM#x9RvWp4oJstzrOnK*#Ey{j{o;O z_N6xf&~i@*yIa;|#BM+1{{P1ZFYYb|AuTO1FPig*^;y`Z%7+D&RH>Gv;ve<#+6bhu zy|jI}L_nWc+)i&UDNyOIKVPqoW%KZ$zuXbk--fPhC3q%n&^htD9q=r0bWPQyZJn@c zj{&~o{1c&q(QpxwrK*&6dUZ!#^~9dmo=xp|f;h^~Xhnh?;;t1qpmiL6c=FIl35wv-k$!eGFFhre&T{#>rAK*xG!lM)3! zmCgNSsY6EFGTaZ+v!A0VydlLdqlRJey{=ri7=>4|#) zjhMT%HII{!fUozs;919=y=+!1W`y^aaR7Nn{1yW#E}w3{-GRZaZ0#8e`>ZNW_Hjra z=soKx3`dv@nB^1&od0zecKVZ6g8MWDy9g{N)!rh>#&OYW$g1y|3U`@tw6%%NGg+ZN zKtsUsE4Z45YJqKt_99@cqrLe9| zYJ_-kWTbXsX6^PeLiSg*=qJ4>yv%OTwbz3}SbcA(d|TRg_3eMk)cIgWCG)4TYDO=R&EYuQLQa!Gu7md)^+#fkC9VttY-&u2$jtUK6+Cn zj|xn)^^SFuFkcKv&^l~df|3$C4tTxD@@=vBhTcLr63+8qSk2;@bz&-~SFFg$@od!%W_BhtIgqJ&nlt z<{%QT_GJXPpVRlpHxYp)JP^`V^=WFH&CS|nYh0AplO@1#4($PT#HX@yC~Ql+ zftjMnxCa)#5j>ip>VF|pG9?&TWgPumK*e`_mavx?z`Nm(CJ?)7l(vJk~?~ z4eh-A5I=E~_G8sqL%vCWl2`A^Xm*pfJpM6Rv5p<}$2uKZu<|e&lGWv{mu>GbvI=oY zt|sx6&7?#4k*=FZL*xLvB>SWnc`d_;3royfv@bPnS;Xg+uPSKu5}ju=f)!t8s%IY? zWtyY}bHVvrv{u&_il@R=VY;u_MIF@gw6(y>l9Symul74Sl(sWaK4#oNUPy7qsWl(f zQ4*4fFUd?i{p)+Yw&zk{COE(^wgnZpwWF8zZIL^q&b%czn6L@ek-=rS(gO4u)^zza)0;&Qc33&Q#!!DpL7q>(W3`zjUr(& z8<+cPopG7pRJ>99G08>-EGO0vBOCS%vu;r=vnY+YoE->y)Q4s`WuPt`(%n;-(m1M0 z>a!|L5{H&4>W0HR0;>GQu#{&gf?*A252!E&(wHPnA47T0!2wkgC;;fl9mZ~HC!*L4On1A%2f zMqXS*Rr-Y%!l!Z0dNTb>89oJ>i&0pY9XHeJJooW1$Yg zpM}cZzGptn`F`v7hv0Wg&_VHEs4v?zq4Ai$b2kP%xW26_&@u^>rNLK~lmJS6BMN=K z;XSK5sNcsKf3kkM)*&qhXIPE&ks*poG_4{(4RfNtdRSYE(psz0Ro>NzW-0~`#_WHhrADjEb_-8~ZyH}$Pn+~6w8O9pe{T{BnUN65V{7C2oak>cv^4Mbf2Jz0g z8Md3WPs?bUN+PvaGE!wf-Lz(9GIQ<(F)tYKA6oTV zDnLi#^qd?XNKd~v4xff0TU|@VgU!pgM*V2NM)IpeuXkW47nNuEay#nDV@>1lnL8=* z&fE3ofsClyz1_Em*Eppf*T;UdFJr3N`;KdH(u|aq-$jTNjq2d%?B%zT4TSMjjR~LF;6?O+%Y(|Br#HsbN)4mzD{JGqnV1bJG}pq0*{H~^EO`81n^@%hhAy1 z^mykz9DSgdRAd4LM;sF$p)7^X>tc1}WnGhXz%maccdmo{c0YA%F>6S8p(!$RA;ZW- zyg94!YzVkLoci{RDCqZjKN>m3?rHaEwGu)2%hQu`ba8R<^heGMJI0oEt-DJj^8c!Tk4RxhLon30TFuN=ziN0)D~2@n`aJ1BIY0&l&vxd6Ty zN0%ddE)oz1AMhSCe0yS~`j~Q(!C?sP%nC?g9a56y<5-h>xM8HY2v*Ls(qNp_9IdmN8-48XeC z9(Jcr;Qc%&a3kZGsK8K~md}&f{o)J}bY}^#)>Z0uMA66q2BT~pvLX9SHofme1imdn z{=vXFvspBvOJmsxoN1GJ;We#OY8cabIpD&jv|O19{K=_C5%}lxJc{bhekPY*R0h9G z1^m12c*GRM4Z|+LIi9{_g`d2!-lK11y^RMs*`2shs?w`LZ~lgBLHjt3EG2ua*dvN=?N%G|&%VsH93er%h&^vr_!C z8+n2X##n?Bwfmovl6=Xgrd@}~J`S51m{Tl51Cwo>mD|07>AN&@dTUkd6vWK~k9Xy% zl^APUmd)GO$&pOL)f$KT^bVcmV_Re=FDo|Jsw$E~Qjz|znwe4gR|5{E?~Rh{BzjEP zrWBz%KR@^MLB5CI-89rsO$-N@+0vd0;y*4qH(Ju8+A{IS`C3GZ<-(UN=RN`^U}*io?_T%D;?R z)+UuhKd*gqAuK)@Izb;zUyB&mK=KdGRCFY-XZg{3eLryn?L!ovz$ev&4l7+J4UeDP z=6mLa2pFjOo#<9MS)mH*soTYlQfa6D4tcKYVM?4n$D_gNH&;UUe1yk_E-P0@MXTu~ ze3zYh5x#o*h!+N(vkpcUB#S4yzLv-L`BmE~b$=%p8RALI9Ho(*xcpQhLG`GSkI)*5 zgDoYdwn4J3c6p(lbROGRIP|YbWN?0D%t{0x1i3PS3ev__k+U; zT-kXicYBI|{P8zV&bXioozs)=Lt9x&(g8NKW!{nL5ggRz{vC6CyC861;_)V{|aUE==vp}hjDAf4GtS4k|NqerZLANuos*{5vx0{RD& zPz^e;5H`r4tG`G+-hyD10s69LjQ^Dc^;+$Ae`@tq$a*cT)$a+UVDeC+FzB`RYVt?8 z*E(V2{G!1pWvpEj)_@W>CR+pK<+6{^-NA0?Qm5%_m$$7?7A1Q*!7LbuQ8SCh4DX62 z{5P&~4)Za~%3hkroNPREBA)p@uqPkV8z#{%bulg)M}d2<<;2!UJ}u3-|KK7bXnPH1 zDT~zFVS=)N@(T+qNl7Ob+v@Ruc-MQ3-2bh07{wt^ZYQ$I^wcRCS;Bg0XXSP}{`gTS zTj7*c*ib6pz5~@TdNigmqn`9SEz^;EU`}h9`mtql8+q=G^$wGBd{Oh zJHh-OGmGQE0?o|Orn%Ia-OO3zp;CycbT#-ONp3lXai{HP8t(KOkY;x(ivxLWZOx=r z_)OOdAuc&h9>16uPdLJ8`iS3q>lCw7(JG3C+LYy*-wVb^Tf~8;*gEP$|G+=kl2-fJxYrGdDGW!|kLx@IAggbg;M0%%fK^ejI^qva zuRR}7N1qT+&$#~3keJ4Bx*u-`h{H{PtkK4T$aOv{uvj!3VMFql63B&%C}{YA4Q}iq zaVfsFK|eWhns9lj+Gb;EQZfhc?F!Koj7d8x`h}>|c)&i2D=l)oMqKr+!8zh$c2*8- zNfQ#ydUcQarZ+SWNp(K+P@$ADHYyfDpK~5MSLg3oaD@GS-Zf|R(lw)iX$bKsDq`h2g6SPsblV9@!i*yPu*qJj<25E45P{L7(Ct*4& z%{ww3&_Pm+NBac#3#ZqqX|q-9Q&QsiNhhZ5)h_EI9(ITY8rZY5oU1~SK)}t=Myt-? zf#!$JCF~IUFPp}2*buMwo>YAd{ zo1W2zb*~K`_=fJC)jICah(%J6m=M$(ebDyT4FC2%G@lf&pPzm9=<+LX9YG34Nzk+Z z6^2I4#yRy5jmqh_2hNmyfr-nzHCmtTC~@iAodz9hmsN)}$=P>CzvzGLhY3OcTpA+@ z`{*08!yj%}DlQwipT(k;*bsK{pm3k`aqKj3^8QQ?H*IO25$=z7Bq+0^LlzI3iXnwh zrEY9CZn?IwBJKh#es;fRNM;QuIUpO6183*2M7MCk7)RofGP6e20Ctgd6*I8R zY~R54hw!b*1q~2ZT<{jbW}AQ5Ey}aPT_rl7e&an<58{@_PL!69p)Q`7O9MY*p1*PN z$p}|HQjtE0m!0U;L!*>X2dFrWieY{|=^88ixAUV`C*#`gwC>yKtk+YRr>lEkXZ56( ztc{t8j+NZ2SW6jP%Q)nVy85KSjchK_hTub*eh$W;&3jB8n>e&k(efi z#7XPEz@rw~mcoi&IWT2&SaK3eU3Wb{G^o}!+GQBVKYVnY1^QFBkr=?~W5y>cMvY}Q z?9J;U+O*Jb2bU3}6^vjE0X#!mU}R}M{R8k@S7?59)@E-0^}1_wpRUHq&v2J$?_n4T zec7AgQK!}2OR)RhghX+pV`r#?6)K^Ga%Y^IX9%-4S>KZdlBU2{Q=|QiDN&=9dMj1g zW^?77I8zsrDY%?8E|uFr&0eHuezlVBXg#Zi`dJbjYvh#-%pK%`Zzb^gI*OX^JY|PZ zp3nG;!*^rVxGQ9_gTE-+qSJu6!gSnVM63I=dXKm^d#nA&Vh@6p?cx` z9r>A7+|E*}P-c7fBZQkaq8CjtgB!k!7#^S8I7VlMw4vSz#es^fi7JQwVk@c2r3g#x zgmsRcuqZtiTJ3oC#SSSKRmn|covP`b0mP~wNP5+Eeax?ip;R+e_&?n%K+`4|Y)SUe zqEhO}jH{%ilf$NQ?PE|GPs_$+iHxRRqm^+T%_nv(kult#Fw*9S>xto|X)4Fk50XKm zlT?x^h;PvkN~6qH?J29 zHh@?i8zj2SMLu9h^U&GKs3;m+>nsdmlabo)8UjeG`<9BkpGU73nUA*4L}~T4UsA#T zB=ulj_{ZVybHCe2K}W_ihUVGx9@sM}aQ8#eH7fka8xuh^Pu3e)7iIG~5PtozH>f}{jJ4f(+Kt>gR zH}H^twsHsO@>v;e)>4G;l*p3;bIaWDx3~I99DCRj(JRztwk@Ce-#C`zg2Vdz)!AEt z25T54IWy_0)RtZc6@;baP>AqQLUZuj1~Pq5r#7_b;h^Y-jQ4Y;fi$nZTq|M%O=IOX zEsDUE-}M*|o*_$n#0$Dtc2KPlyNA%yFolm=OREFrBo6mJH9bLn-yUr~|C;IaSHNi3 znBulS9yIeW>wfh@)i(Gc)&t4cfXY%7fjOP`sOsK<38Y`qzXQu*_g`gB5%<3_oE27AtZ{eMzFCYNJ}M_qME<^Hqii`f4%l286ql*`hvsfp3ZJ$!uWS9;<0!<_eL z=#aOkpn!0Q4i`4fGs7`=Yj+iH1(kgNk-D+6KFwEe&#RNJ$+He4{8=DPTuG_VRjFwb zlP^=2E5ls|Oqw=*PoX7kQ@O8PY89$O$^4G_(WC4PPsHh^=c?A=$W+Es$Z3PqqBq>$ z&cbJ}c^`~T+O47Ex~Z37NGReqe9Wg+lCvZ+`ky`&P%5lo92v~;R-Cdgg{J?M`lm0& z{eWWxhn&iEeB++Yx1UeHXFWT~NsP#;cVJb1VCq)bUSMN#8>o6jXlCAWz6k`pLUzw$ z*Ym2PJIwyK(F!>au&(@Yi{fy&Ub6h5O4Zo0s=9Iy*fRgqS3z-c@3%y+*5dOlim%%f z;QpAUL}a0Z!_fn5iu@-6K5gDcVv2Nm$(jRkr*3J5Ju<4>3Qtdp&llG%S+yreOe*@CRk87b z|MRK33Cab585Ez$ZhE^Nl&u)!VZjC$&3*~|9=M(yfo=0+DGKPZqn*q|MDR&tZgKq< z9O@h7bdf;$KA6HMVLl6aXz>n1)BTtW9{JDTij}cQV$Y!hsthf+T+_537^;O>nr|C( zm1i=3nh`)pOD02?($Y^CJ&i9*Bzt=gYG@+=FKVuFI_1H&-LC>K^p#F+a)2MBOI#ifh2*^vBxGD~cy9V<*NoyzrjZSY#&2)%;t@ z5$`cdC1_?^oQ#Xa*Jr-83CM5kV|7TD9MTRPr=oftBIVnFED(4jQG$Zp^FyQ8do+Ue zqjMP2mj%i7uYWN-b?z~i^GtU(ak zaU-f`DZ{krh@S|up%l??O~Ih!)W=Ft@%Mj=B8yuQ&7E@KJHxs5YU9Xp!c$rqcML-h zY}OdE5TU(@i0M*Q7vLdyYfq&CKGeBQrfFT}U~G9NWS_xA^o`;^)Vu!|-mDTmB!H85 zR*R+5JOB;8eQA_1U8V4=`C4N#74~Xx|01h7v}?KELzgi)a<3N`M`ZMb+FtecyEEz{ zC=&2v+&ay|@@0#Cq0^Q5lJQRgr@e*)9cmSm!He7``X@mzo=Ch7jksYo&b&1E$i|XMulO?w z%eIfd!>FVPRQLEc^7Un8_n!mu%_el+oqf|)myDxaxxKCsx9yUYG z`?pDXY&gQ}go<<(@Ju*&A$5F#6?u852x{^y`CeJvZ;XM8;KK1Z--5ss?RK=~&1+jg zOSvwYUA72PWM;IhbG3vt*jY8YQMt03ptI%gWHFti1=6Pa$B8ft#dk_WUYFaFP^Tlx z=e9rS{cZ|CvScN4X%9#(;$`x-ag!)RAI?juXOryFk~e!Fe{v(7<}7B8>OcFH92b|9 zca)MIatm+N5pb#=-e|IaiAuEGs6y^Tez8K;XM-7}|a6?t+e=aLwG6Rk1DhcW=hkM z!mQX8c`7eF)=A#&IQs;%O5bRD@RiuYA5O?M9g=pRjAI<-H452%N0->3pZ!NfUQ(1P zbRhM&4d+}d?`;zchxdb)KbHuRJI2d+iCJz5E87U!GWLl*nHTC?CP(dUb?*k>CZ3+; z69Y;#p(c|NdvqKd{#UVh@0pnt82VSvUE(j2N>Lz%Lp5&r$HLTcH-agvr1-e?eh6xu zM9qVdO>!#rIsb%92Rub-KlbRj`9u=CI$TracTwsIqWx9UW6yo}kwk(V*;T`G;}lukN@s&ff^h@yU)(1q;zZ4M>V4mBHFO}lANuj=Lv7cn zhRkD;OBqKVmBTN2R94mR;<;jZw$E5bH3^V9TJPl#r#DTlJA5dY?!=6Di7@wF(nKIb zvmJtr|hC zGFP1p;&BwFBdzOk``W;ax!jmf=&r?1l%miwQ=c-}7-{S~=FT;v{=$!lSb}d(I*;8$ zYhB?FUs8O>!^JrPBv?XkCC!x0K`iZ!ch@{FziL%4`Rd|9Md-1ZaYBw#H>!$xt^2W% z@PbFb)i>a&GFJCZSlsIRL{NL7-6iwm0+hh+e8-lE0@^hy^co!@I?vI-)~}G^b99TU zIB$|kmf*ofKLF&H-bCt$Fp*H9eL8*;1|ymU`(yN2_^X^8(I>$aNs7bR zDN3d{86=*d_KS?qA3w)?P#i020Paup#j`|8J!mI8u@+n)eUjONydx+P2P9F0Y&jkO<#2IHf86D>T z$}$!OutGF=hge|0g0!6DT`Mke;3%_TfJtTm?(dUnJaOCKb{e7N0fXh!rMMlwtnh~9 z2ltDtBCpYwqdTuZmc68aZy*RCE$u{mp|{Laj{1(wp=6v>R_mpWZjaF&B5<}r%}hKb zR<7!9p@R(M#kj)|49h5=Io$(u9TUH6+0`4Y$DUi6&BZtrM*8v)X63%4b++oD+0x$p97OvAh@&HG zFVG>%ZYd5I1i0vdXqQEuUMm=}^+7`ByTLw1u-sc(<68gs6|;c8qA95bLYp<0wN!Gj zs_iZB+~Pj3ltXs8E|GHH#=nY6xCf2jss}$NxUu<$33m=l+37WcINioTY%eEhvNa_{ z3o`Asc5?l2A2zrB{AcK&=t>WnK=Vh|U(+A2JjySYee^WWpr54JwXW7CU4TKqX6=Wk@Khm2X)TF6*8Nvca3z(C}{Q`8h)9&Y_r- zYiMSc`?4p-=rpSNEnyf(^eW&so1Tr@@D-SdFkex=-v~;cvwe;xYKr)R_ z0ry+>2|xU~nG-d|qCDgLL&!w}3(4%xYDf3~tey*Ayx~Ns^2D^#-^>L%SAuKkI(L;! zX)hdIT#78t<8X4d-@qb?=^gKr|3PFq=mxTBuPJsF=m;MS{uM-V=`6fRlcnMtZ2 z;8b>&;ihN1bp6OkFRkle7u(9WM}wmjKpT|apiUV?9vL>} z&^{G5KRKv(oVMxR)lJBXy>|3&y1v4*U7HT9FtuKFD*lm6!Zp&K~>RV#7XS5lHjS$7kLW zTm|=t;Q-OmZs2*`+v9X>VL6FWg`PvVVjxNa>00P$=tR3`*#Aqzs8D@mlKb4Qo8SV zjJ3vYi73>io%$orA5N+F=4|kB97cx)3NXWi1yWDP>*+1P2&%~vBbu8BP|QBKe-P5_ z3AJSoUlI0^dbY_*UGjoP>37NW{X_N2r=ulBWeo>GUy4Il@ZOb?9Qu=&CWPX!s0)0N zE+Nr>*eNGnL{dg#s7Te3m_Fh9^YOa_$%7%4b^+DRJc+o}fwSsYh2td6^Tcc2y=&k? z%npJFm_-CQr^9la)AiLHd4wI@Z@UYB0v=9_Y7U!_%GJ>`C3X^~(U|;V_Q4>pFkda< zxrKn6m#4AvVVd#rq<#J{V*dgDla|#$ElQSUZ_G$80d#ax&sw?@;LT!$U z)q6PtfI))s#>q%*J&=@^0N_=g^4I0FaFW2MCz|3#8djy9ks2%bBFG%Ve4nNDydl5^919)PN{kIQy zcl4PhF2D!WaZpliJ-c0@q@gf9I&nDPO}KNA_O`{aUU@Fw!$8%&Op?3GSlv7K#0e!D zD+{YABuY`6ptaRNZtMhW~d9|sO*?NQ_JLQZ5uCZykps=L>A z!-gO_lUCm1Y>2G;mTo)-M%5|_DDAQ>^i&FLDn(F&3-9$a6!O2jvBJEt_Ous!DZc)- z@X?zP*8A{NcPj8MdWhF%E0ZKyd$CL-tyIqfELpr={=q%7eQF-S8inoN{ZnN-Y|2z# z;OwA;>M59Xu*41gM&J)8fc(eNeZVa_+@bOYc5rDnZ}-|rzpPEkonV5Hq^tQiE}RP&kACK4BS-X2}M8!zLJjs{bBB zn_+hy2R2sP-n>v7XLM4YT)PU{H&X!mOEp^@i#txJQX$n^bl55$f^ph}5aUqW{pSsg zek~nRfgn%~Czq9McMM(a_z)ym zed$#XGu9#5?yQKGuy-pf7MC>yGp=K7?VE`|s*pcJONN0$8D}=`E(rQ6%AQg!sZGzd z(#(jHTp%N~<>NnRlajlD<6qpw)v~09z7v&+lg)1Mmee2K7CjPE3+ETe%yt|^xaE$$ zLJ)w&?Qb8A-u9n|JE?GP@41G^3DSm(mUJaLJ+D$&c)WW@FNU}oS_%f8iEL!+>$l6_ zIGhbypnDj^pIupq8j+vkD^+Q$`U-?Z0IStPLq(^)V9t8VGm~ih@de4TqWF=&g|Di- zkG$U5p>xC^^xiJ>l8M;YD$AUzsNb%vo~)}`|DdI%Rj=>|&3ih;WmfPya&<$7?N3T1 zOZJYkMO<^N*)!v+m&!7yTAWrPr_dM^I3!E<#l z{28Uk#|UsjgAnwaVzVD8hiFE1A+*I?ra&P-%Z7)_=2+|7CS2%?3 zD%dX`Szm++erNir{OdG(@0jL7dW9A~Kc{Rb3lob2>lCd-ec+NW*Gs?Zt>gfAFHge{ zEh*y^Ub0@5gp}-dpKS77GUk3Fy*k zSV-py^=P_d5jh(8b`8{N-GLz_tSW0r7s-RJ$Kul_3EoX|4(?CAHa~q83!)k?T}U#$ zh{4-yxfGT{{RV27ru%bW3giEytjx;@?H@o_MbQdr^`ldwXx)UGD%I&}D(bP(Cbm)Xn1B;K|Lr1V>Dh{L{J8p9qfsyrzxy8fiTY$m-!<^dW+gjYYcg_xU(IgT4ajh62UNx`!Sk^3IxY8H>=}u5lLuOy*tY7S z)MIcM!6Z|RcXgQ0&tsmtl!ondZ(xQnrhFV=@~%xhaPGyewpyYQN}Ayhmb5_ogop<& zO1>RSuX^H>c0`?sti_b&dXB4PNA+lXHza&zgd4g}_!KRX`>0)}Whvr}9`~`jlQO5O z4M63<4^0YE4sTlCXP#I|XQD|3bxj%7oeP9Gy`=n>+FYUW+$53^5JTWdz7MFtUgTy zT=(Q&QfwpsqO?X%G|xB;>r)Vyd{II@E;gqkTdq$%CX$hQx~V@VFdP>wg^wvz;5Ofo zj2O|Pqv8&M=U4&fHh_y20(`C=r-Is98kjT}!}@jyo`jSChzQv^`;5TNbG1&vt%}o_ zS(>q*Ygz(MBj1IxD0dB3eBUvT+kjAda7#JnHNR-KyGo2@5iJa^X*0$Dj-1jV?R!k2{-1pH zXZlfDOqlSe-0+?w2xj(mB2C=BcMlUID@GKu*QtDMM8FhyP5uV1dSmKofHZ934Mms~ zGD-V{h}9wPx3a;D7O8x=;4Is}8;TIjtwRA4fx`B}P`RuM3`fmQy6##p45E|qiUt1g zM2WJ7um@JW8rj2XQiEVtvx0Vd#==Owls~LZBJyDpLrz3Yftn)&uz4wM%=V{^EtHpq z`d6soMoXsO64UTfEQlz8TRwmL_fzi?{=jQd@=Ja7YnAOpoF?)tiLU3z~#mEH8Fr5n9)zu!_r>f zy}?0I$qT6er`JkqXP{LY^!5?9k}xV*(RvU)$#2Hnu317KIePEr0Sg8#wkg|l)E8fv zn)Mr{wIMBjnF=~CJAVUjKNaITx5@s75QS{_&iI@TKs1}juI)%!S<`3MqaNm>sGwh? zb}GHe1N^X0&*OurL@Z}!cp7w;5*Z`5b11NYz5B!pcaNmbE&y}>C-YRg_RG#3yC%x~&$VnAz(f{P|;kk33(+$#>@E%j-8#(Na-k)lXGeNzkUE>SfN7pW3 z%ah%f56ujvF5nm2lUs&SVA1f;Kq+v#?bl|$f6*1w@-Lw|c?$ni1L?2|#!hj`sn|Du zqEug;%Zd=;c=^0Fzmu~cEINP6?DveTs(x74#DA-)0S>Bj8(4pryhg&;v$~IdX%sDu z@LPz?(Br&$UZ*K$GEq4l+b=2Teg5u~B%1!{8)Ae38BnaLFdh3A~8AZ_)*AkSg$80Q1QhgiJqEfEwbLR8Lzo~ zT$)9HD%K*y2E0-ll*RnrN4HW0ZqJ>$JgyAU-vLfy`JhJAHG=PVHUHCB9L} z^ck-wR_QlRgyN80{8>y59(Ww&aIL5k2(k1i6w-Z@ATE;>3p9To@7hbplI^lKAt7LWqJhE*J-bD7^k?G3EDYh zi3Qt)C4#U}jpe1kAt;y4P-Uvk$7Wb0jt-On;Fq@+i6DD6h1&J`_y571SWwRQjEq<; zV&;E-cK#1{qyHI&#s2(5!z@4lw*_GD1i<|gK{0WXjuGa5j5d3^Gl1`;|ByBZkM1(C zKrV0BrVD}x;wQz4y}Bhf$0~scpX5K@UbF{2f<1&-VF2!7zV@gSlQO-C0p1_AOTIm8 z9OmIzIzbbDOko{NauDzx3s1l{_c$vN$&QkzwfJx~V~uh_9j&q|*M-osbj*r{mJc`V z4lH6ntvY^IYrE#bz_ekUPB24LSZ_jHCue?meR;)eC(@)kiEOxXf0n;yNDZZ2cq&8g zwPS1hiF)wnuj#uUe$_B$9@*iu=s?NGE3JgB?YV%B{++r-z;}`V`X^g7glb_f--IG8 zVtOFX=Lbj4H)q^0t|g$)Q-r3jnW2M5X;Gh*=6ds$-M%E(^Ilw)X*4-+MPYd|#i>I= z-gvqPK98Nw?TfBIlejP+05-pH85tyKw()+%~@{t&ug6=8NnQ;cN;VMs#Ot`xn?L?M%n;9HS9tsLKI z4ecQivy5iOen(h21t1mopOeV{jwT|pmvWgvcWWIxtIrZI$XBEbj{2xjS!@z5TJD3z zDV`CMch37g{&O#Xyp$gOU8<5Ny(Z_g^4+*E+lS&PM6x!nuAX}#36NJwfu2cyFo*KelNt55r-k`kx3{Oh8&4ZPfF+x!zu1%;|tZ zS^3E!wr|n|>=(U2VEY8mTc5>iDs%zuAfN9!&%#Qpbt4L|P*JMby{9r4R+mi1;1h1- zlv#8Wo_y>2b*_hL5(_f^!&RlB5GChACibK@y_gjrjvfXcPT+|9zK+^ox=iY`Q zD|6{~sM^=;Id8RpA)X|0L?B9TC$TEyJ7^YMpMHUv9(Ep*{BS&lO{l9TFae{jGR#}eWGv2ptlaWKNNhdG2$D)yGrwoY|EVS zkJa0#Svb0Hwmx2Gxztb@7LB_h+3foQFpevRtEl`n=1g-L&C;^*fMnc+)z zv_+sCbTV6g({rH3E8gt#h4T`s#B@-4`KoHRto0|)a3PfF0%0{mqnL1V+<^m`cep-A zr_m1?9i(E_UausaZXIhV;c`O$=SF;2&1aeA^IEefvs2LToPAoEK+J&;y8p?eMa-qY z#gM=NX@21p)U2LkM-?YS~i5*!|ug8?5#?2CD_1n zN?qUAVIe!y{f>L83>9-(%*Anaakh+(lVdJsTr*FU&9{!O$U(qkpduSwV-K+G%C{3Otp z(eS7BB(51i#4X#U1;wvnyz#2K98z=lWivdS9?l-p8ia+f6eHQR^3|e4&kDo25aT`S z0(KHiZm4S}&UYd#sJEZ<)93M;Q&cpqfBvx<6Notxkz_=l)sn=ei2Z51XKS(UWnzL( z4#H6p8v->5rR>FUTzRI`n(glvRdYh>1#LRfO}G| z7o&jCDxALSwhT>j$FN!XSyoosWqO>R6oXjMm7f${Me<(r>i14bjJ*`rbXuxwS^I|Y zyOUp3ig?=KHwmCcv4fXPe4KX$XJuV3T9K1J`A&~*#x+=M<-qJOT_$w&!1=>@p5S7! z(VW{2jL%0FxNNXGckPDDP~Lf$`ejs&N~au!Ru(QB*vIZ`{is8l)ou`8v8xBv)-Xrc z!V{eDn`-F@okZR$MfM@;O5#Y@>~94)e8ef^NJr-WJn{Wbg(WK9_LJ&6QE24n%KeLX ziugKWXkC?Ajc}u@I#(dqUBe?8PXLm7H|!I%kZXf4aLQJTQ7!|0mbt=vJ&+mc_`+x1 zu4IS1>pjAme0~g5D~5P_KW4?;HD`4Ht`6^LpOPt;B!0K`TbU~kD|uncjxBBb=AG;O zTLvLD`8^c{z{Kc7Z*LB?4c^2?+p(%3I{8o1=As%ywrnhxVUh{p| z_Cs?P07aGZ9yIc?fpp{Ty7)tAB34a@e`=;zBhC!O3)h##&0?|s0ZpBF{~`r^!xkeO z4qSalvx?YP9#GdTq~$T^jZpTZ;UguvoSfnMH(BoNj-Stq57;p;gh1$kuP@lLzr0-M zdiDUtR!;VHFaH|l`g`z*hGdRm;tX$0TcYtC&tNjPG67K{VQwcn4BOKAJ(Sv4(#`NV zUiRl0-U{kaOeJ&JMW@32i%V39TzGKw1e^8OL=T2cb(iZNKp-kt5z^NotF~ADLEg5eqq$z{ z`+dXH=jm}5FSMu?6?pnMee)VOS68uSSg<_ZL!k;@k*%KdurT+cUdc3~l9b;YvwD!4 zeGAKZoD<5=m^`m!w(_X)9c#+>mw1%PYjF>rg*N(Qo;=mD%&ZpovF$&kk8YmA+(f$C zFIFS<0#>0&T}#P@krY{{7$9O@zpCh05PY}Ne~#eb(+)xu1`=2opq@MMsOBr|wC~@$ zt2Bm8bZuRc>{s))IWmpanTgz+3&}XnhXMEMH&TPkl-?%OC!!=otMBB`s{U%hiz|zb zAr1D^juT3#$kzJGYpy|CPv3To5lC4_`PK27~k|8ZM_R$D`P~`%Li!Y4S9jH>R&H@nZKphCOM) zyY2!Ocl&2HPob{oarwKAmf)(*mJ!h#MNjVy1nfhey_d)Fg?=AW^qU*T;!Z<<)eeEvVGzA_-HsB3osF+jwiK|my=r8@u(QWmZB5;wre?leM?0q z&;R&dcO^vQK5hdJU1YwUEb=86h^U?rM1XmyMN*!ChwEwfgup{$m;~8!U_{;uBp2im zKH(hxK#&Ini&mi-4|bj>m|W1LkoF)9%#(xA32$ja3b=xOcGFYY8uBsG+YD-M;Fh=sSPs9j;vGI}ku~M`R;6P?3%&QZFLyyTtl-qV zhjvD;fQ^rm*jQLRTWT3_Merpxr`Rf(F&s~kgP!lQlZAC2y zI8+GWyj4e8NS9sRR5lXW`CQ+ahQEN`mbOt}!L`)7-cRM0Jdl6zZ9AGkJ4AQxc9h{A zFL5?%IOpx!QPgVES@)Rrh#t!uHTeKjK@2 zEa-MTOkv3D=zL??SGSep*6a(X3RU`lk3jVO@11UJ7vsL~x;4p$YKPrJT%Q+ep~#18 z98#FM)as>Ix|${?`;E4UXmL*ul5eIcVo<>$(;{DRaPy~k9d_rgH#J<~Ohc?rr zbG5LrWV^hD+vB`fe4VULcG;b*GTo{UIcENb8oZi)rb7X=wD`aw25`VE$pSnE0*={= zLV)ui;MzM}Kvv)YI?(Mg1Pdtm3@Yh$Lb*Gc$sGuYoj9;Z5AuO7S>R{^QP5>%HZp($ za<4vRdn~rA5hwx;w6`$Tl=(irLojanMqPp1%;oti#|i_q^OPb&&AsDO8u7 z1pO3|9H%t;kgMx0NjR>2b(IVIdkVyFOEUaM#fzqW(P3wA(Klvsz~95ph3?!%>&->h z&f(TVI*QOOzHjS>05+81YzUl012WP+V1x-59E-7mBhF=JDN{nU1Kw(Np5-dg)kupy z${add4r^~tcGw$e`E|caHUverHx@4vnZAbka+U~wT zxpd~?5QC_psA_YK(dPiC>aAMcI#&3iz74yJvlDL8Fk15mUq4!$$U#1vglGx4FSuMB z>&`=QZ`Dn7zz-*JpZC>4ykoaE)b9AJ5wUMOy!DCVPuzlU!2OPwf3veB-i8A0a`55c*aB6m{g0i9Osz4T^ipZwvOx`z(}RGSCT$?jTJ zH=wi}9Li7L2H+ZXyx!KBC|kcqswRlSXRKoN^3M(ZfKp*j?&(}?x8uDeP6S^}Q#nkP z)}C7_np?f-y>~UVR=%=0A#V3=LjTP7y*-TbtlbP71_lVZ7OffI2A$bR-8Q z&rXUXBDr_wl(qIYVzGCVDRYPCG6xH!K!42886<;w^q>(ENV6etT7OHxflL3|L798N z)(Z5Z&OYZxYT}vpH}5~~8;wrGmDZ0Xv6UcW`ReR=pr2u2CsKm7Dtwh_dxM{Osy7BT zkd@wy=MgfF3s;t#4Wvsv5u}5L9skqKqZ${nm!Q9)$ebttUi<16u=Y!yj?&Ve)FP~c zU<_$hvB`6h;_wvoF0jvzg7>tMBv2yswu|e_j>)Kve%Tb279Lshks75YfAtB^!hK=Z zM^&H^K7dL0lZr6hyUBWl0JcnExYtNB0l1S5V13YDr=9%wQ9M{YgNO4avRSzDDFmws zln4fq$vSzQ#CQSk_@Ufu$c}N5e*g1M;OLm^!E|I@^xauUNfNCVBn%*SeFL?d1lZgO9cfU!W|9)_nG5Ig+ zXPu0DZF#|D+Y}^CCnit2%J#8iW@8~CIco!<*@CECR72$Is@d^na~H7OTk1U!{*tR4 zaW_aD;H<&ntMziXe!Sj^#(Vv~`piY?U~`0aBz~3HIL#7sl(saHFO>(ZsoLI8Y{heR zu}X5LfCGch;gm>#+$J;300MJbnD-OFO>*Lw5PS+0vwxC`EX%Y#ST2{$^8!eV*;mjR zzvnSa3|K@eaBMdj1IW$zge>+egE%l3-oDYuDxaU$$%DKPz@snM(T%0P{2(G#ATLJN z5W-35`BZWdU`Uo5S#=Mfg9I&o1P9iB>$hvZXkIM=|M#7%4-hQ~6$rryB*hePz^uL| ze%(0a!XjepDSHzFQszoUK9j=>M6ccsGw;PZdXrFJ5+nq9PI1RNsu51j6xi|KTa9i- zpjSq5;E20e8KxXC_oECDUg|QSg23>+{w)Rgb(LoiKfy0!vT(yZ){;DVECP0dZAk*H z86x?jckg1_um_}T1F>{)xNv@`ulSazo;yek-zg~o=lY%po&Tqo@xSQCX}>?>;tYX^ zRj;EzERy+MtM1Ky*MFD-Xa4&L-bgqV>=6NW3||AF43ipolP4g&ITZIk%fC^X0amEg zR;01VQqlpq`VqHAYfD=trv3i!H2_8cQv27KG20~?Zv^)5YEm#K40Lra{_9pR|5|W? z3-jK853u;lBt1~^XT%sd4^#>$ zVM#$AdFWg=GX@Stg4aGgkq#zX^XC76`SAhucsmYSB>WO0^c415 zy$7A)A6|E7g!}+Og`H#;m-t*%zcM4^D zsg&~lfo?0?6WymTFP`cyS6lSCn90)%MByt|(I>4)CzZdGZ*W=eIP;0{yzb=c7g)|T z%UQs6S`!+E&ZCsFb5F8_;~6t2o*B0IbG))!p)2&Ql=umh1n&T%-K_7AT_d z=rg!|e<9uMNfPb-FbH&KH^4}r`Un6beSCptA-fiFWea|KCx3($W>IFU*Z=Gu&=ULq z-;(>g8(~VEpa}&ak1_Q09(u;KUB2P_YQ8xArl>gcw}+yZdP;C=C2G>oLc$DQ4Jf{_ z3uh~Y2WJ!iy9a#DXo}CNME8T=duz%;NVA(8-WC`CQEQ&N|0}C0SK-t?LflKL=&5^( z@~9jKv*fbom*c(J&)s~qu)}6L=+TE^JG_(SA*HEe_xjYQ+%o=^3_w#Kn^rR4db-XP6&Se&;<+*elTlcS*GsykbHW-3a+JC-pQFY;`3NlEqxTDTw- ze2an7eFrI%Di?EVwV%JlQ;{0@Rg!4ZNKGiSb&^IcNTXTe=0r?*2b(Ec27Eg1X;h@PebxK7*Ut(>}u+ zsXd*)m;%mF!TAcvyMOx92rb+qPXn%d!Hu`%*+T?mYHV}wMyb2LJ<>_&&$di6&6i~{ za&OGESzJxFWrXr!GDfI#E!bexdr<$CBR+&nDl&$U1*4f&0@TVw_6Gr;a@cDKk?`=C z+67WLG`AF6#EhMn-~sSbPfXNo&*^34dbt*CnJI+%=~#_l1kBSX{w&mM!fm2uzTS5L z`f0v0Z5dgsXX~2m@Z7kz*efdEFa6Y2JdEsJNECcmzNTTqtY`dQjEVsDNYj$kC(Nwq z_&sbP);Dt6Z`QVJc~gDI`)1xP+pi{LFz}2e^@}!naq+hXuF?I;`9Z0bR(!MX^b2EI z{rk4YwEIK)7FbtqMrUUv6!*P{KN_qB&wLqvZnrYg-3G6F9`8r(ws(Y*%IdkQ=Lyk2 z(vVh$!H3cV>XKc3|GClJs(aVkp#D>|us>$4S=rHXZT9XdQN%0`HjY2SPNwJUz2mcs zM+(Wv9sx&!=na4IiSY*#6pa=D?az$(B~ZazAwIKMQ}>qoi&-5`=%o3~lWDpDI&3K7D zuB6)H2F+F#$i)}uNuU-Q6!KAVXU}&Rt;eq+;`+b2llcW71iBb5fIb7e11yZx^9DetZO{~NZQEF{`^)%|#mE0=>Aa2WNMR#05e zr|8D2YAlH<)5eRQ-+nG{xfx^5^YeSY<^p5g$9pFq;W*T%#ia8H>Tvz*VA`i%(qn%; zLP}w9W5I-AHNU@}Kc~yOceual4Rem^c5UR|g_+S*baY<*_#3lLoVCb-MM&1d8ZgUX z1>uVvE#yX@@6?K>ZX)|y&A&K5Lfc}-;2+p5|Ei8JGs3pkq*eF8rY#mcnE{O}iV4Vy zrcKeRg|e0TV^428g`tzq~1ZjR$Xm7|=a_C(6;F0$K0uIiFCavsL}{PD?`Q+Ur8 z@DB*^K-~|zI(xV36Bws|tJVe3*HJANN|Qj&x<9xL8l&_B=1^Jx6{V!VM>)@g2655CMg2AlN^#Cn3k{VUUjV3Fp~qcjRmL8% zf|?4!7leq?vt(dq5B**Ac7-@q85QfhabXCVy;d`Aq);Z~-hOUidBTl}cFc@eNnVnV z`9>iCt(m2}e%EFqiOF#cUeYFv*M-b7CIzB3sCRK_<%5$(YU$O5CUx&aS1(05xBJZ9 zQ^CLJA6WE%yts5%Ii-aiv{h=0kfKiz$J!_V5wl?sH}zyTCKDH0!^H+mVoF?|7ko@c zvgM=mpz0QG`02?_7@S`eQd|?aH>?2J$@Bw>FN>C-@mvzY`puJV%8)->`9GrJ>i&pC zNRhREhT@Pr3E+AG?yJN5}kNkEBP4%#g>Pb8P#i5 zB8eOnT}%A4;e4^x08qoo5Q?jMMM?{+tPqa>jVMF>|Tr2XF%1PIG#L_B8*R>9CVA&`b^f1%yZG*y8W!HU!g!0U2;=#0+0LV zZSGr}`x#tQD}H=@;sX(zcV(<=_%5qN563a1e1lei{-*M5{6g1@xJ9hI^-_d1#c_WX zPl=fp5Wh!E-7&@klmUO+>zs!VXj^d51ujoby=k5kZTK)hqA$}cF5lsRbz66+bz9m1 z5wiYr>Z^|!Z>?XRQ8eJQiN7PdlMg07Lc^%XD=ygY-up58+W@Wob+j}a-zKXDFjYpX z-wfzvVO&X-GR;m~tZt&)H#3(H9fh(!!W2Vi0(*RhR(MH!S+Dc){v#~#?}i!QXrN`i zg)Nh-v7sBSd2%r4-DlO5{j5A4tv?NdEKg-4smboUQLJP!9(@jk4ly)S^Ebn#ouzRK zFFJ+~bk(V=VP3oxY3&ELGOVJiL|=D`P;hn8uKijs4#uUO+6N|j`mLtkw67iV6~%bJ zi2o(e8fu|BD7Z{wsv*?Nw<-5DWk>)f#+9!sBZm-77w-@R!Yna}@2(;+3{~Eg zK-%YGqD0BSn-2J~@TE}|G3}9)%@Y)`u0mNI^FoUw2T&bA*pt{j)%^*sP7OpP-;rX; z|94p4U*xUcB$hd%ZRZ%=xY90{nPOM78&k_Jy*fWt!B~P%iju)2yA>GjJjGKiyj89} zv)>te`nd8=ge>|N^Odp(RAzO>0xszeZ{$==AJ%FMJ(K>XDCRNX*ESn}_w*o~9-#_V zKOgy4Wm?1i(}4fR`}Kx{YKd!~e)hYw4nmD0=M-S7w}Bjnv(E;Ul2=zb)ph8XNFQKo zfcjv*#rthRMSIE6&J>9a0{xub2Jfk}_j0o45`d-HNZn`1Qouu)3+L3j1jIkDQai}b zzIgDND+WjKT4a4NoRpx+saBrtcWI5_J2aDt{0qykd{jhsgxAQ($=o7kkFo9Fzh|C4 zIi|aDc^nms-&`Ni50B(v@h3eUs|)Wy+HVIxD-?wBG~r*z#4PN-AYQJ z$PDeLcU@)U61IYG;oNtPoj7e?~~>bVTXariAF%xe^j(`N^}NpV&7AX{(p`fUZ16a;MZix=x-0owV_? zK%lcRQ7Z=h8C*AhcM>|1ykhrroM66;k-+W{ND|)h;l?P=*#Nr@SQE=cf@K1+R;}Bf zf`EIp(r`NLZgMFQ4^Z$1c+h@1hBojCfXV#2(Yu0&PnUEFC!* z8a9O*moJNwXeeij<{m6rCzKN?s^C4=2Rf1Afv9RyAIgpI{C!22F ztriQS@nKvRR5>>>s!39C*@er7)v$kWW|mUU7QHY+A&20379ZMBKiTZIHow@CPcZiL znIyz0YYiPdqpwVk>d-KPyt>?rEtadlePSxF1Ffjb>(FE$Q3l2UU>@iP_EihYH#pfqO zV2*Jv+W|PcZap#T;Jk1MnG=tEZkTNpFnJpAo=HrlV>A> zMl+Dnbz1DqUY&e=YOx+*qMGP$=Vvm^anMvTb@0-08cNK2)5cz@AsT&m8UkF?Z6w)FN-;QoW_ZUPNq8# zX6m7R-dDa?G{-}%9$#pqI$tIbv`;A7KjzamWVoZI?es#YSx!|unxdI))Q7a0!TUi$ z;G(1p+7EjSl z&$(|+MviZ-yc)HHCSzQ)xcTK5R+3dy6{$rfe%D{5U}x5!)c!VTsfhw=%cWPG$GE<1$NRg+&i-!XkQO-m2z`FNeS(gC~a*hvfL+qM5Bx z>;wJtCpW~XH$XubFLzsNUJti0xLaFb;^Chd8u^8}@dc8TnMe0lYk>3K#NH?_I7#eu z0P^Q*mO35`z)^pfx2}J=!sks(VwYfH%SJ-!R9iBsozf?y0I-}l{mrR_H0#Cv7Bg+e zpY)Kq=@I&KP2#Oo&GY52;8WTLBlTa9#uQB8J7MXJpe)~?$w{&5<= z7=?x@h1Q1*N1Gs&nIQ&@ICd^82Yy36H1xYENCAuFe7*Kk8XlPHXDDtvHt@xQT2hhB zCWy+<9bfvktQLtN3o8zpT<*=*!P9)7SYY&dOE$-&kI;IhKn@58M|Wh+cPds2&b1_U zK~{U}o`6g^Kd)JL7k`xBmx6_%lIo)IJ&3MyJQp#J(vZfX6$eF$!o6d;FtIWMYdrDc zUtI483I=~fpUGxX&5}kD)L)^FBnD&>qlmlirnoad4ye}lQ@1x>`HIGqd@Z#Gq`_g+ z!W70-5M_V(KRF~9s`p*G1g>%PF+9KFlD4r=PEOW?JNzA-9g2erH|JJ}$*Wsb5Kr6{ zHgH}cgG8Tnsb``tw--xo^Gl7A!P9i;VHy*a(^-EZE48s!;kqvzCC{}U)~AJRnt$}? z9yE>1F!;~|E+aUM6LlTXdrK;tX-10a7Zj=;CZ+V!SQxC#`JlP5BBg5|7?~rS?p9|- zbbe|EpsIrjfk_<{%mM@GT3hglb0*!AXl<*#ZO}9CzP>#=Mm&&)3@)-LZ2tMMI#I=} z1yQZ%>52Hr1qbL*b1%Sqz+Htom&QGsA_}Ppy*8(FBJJFEHf?Ft4k3 ze_57Mci#^v5v8Es-|TA(V->5_aT^Dzm!!I;QSPR6!Y@?t@0AIU1G0vH63DG2QxARZ-&z^L4DrtE zLp-DX#U|!L6RzB}?bd&7cRqK5*7OII!FN@n$KF6>e_)kfN@hL2*P!Dd!mGm0Z)|mk zHt%*)plw5MI#PRGP8U>UuC{2EmDztkRGxe_MPH17u&yLGdd27{_OcG26^p^fsb#G& zU$t!5R+EnlH`Ppsx5h_l1mZjx9G3l=BMrW`9iwtdrt{5P<9;rEhwz@40eR?hJ5Ey= zmNk^1*oxNNMZdhQhNBh{<*T2&h8^?6ho(4Z8};O%_B-jfX^bUsafIi9J|u$8J0Z`X z6$bT*Cx^xCP`S|vBp!a~0_iVJY*ReOo>5BOCxa*= z%CZv85-099PB6a_vAaOBWR{wZYLAml+znTA|Ca9-Swi=b_5@$5NaIF$ZC$i+{!n$G z0!4bIiOs6G*YFY6Z*=LU`Hh5&T!%}dhuL)bf|ek6b1%cp^?{mw-s7Foyf^ye z0Y3v9K7T)3s#0$0W zq*3TvY(xb4;cpY1J4>DL3!x)@G@K6l&39u(%>}cmu*jt zrX$(bf+Eghdjc@)_g5EZ>bkg!p2J0=3zfx|9Ft5n3R+8N7Qmlj3*k-!t+wTii&VY% z>^FRxaGtt!N1-c{*K_=Jn^JMQ58?t8q_G~;|I4G(fD+KryDmt#YUfXwN48=$l%$}M z)yb`7b&Q9m#7>+ChL<2(06++WNJ4HHLgC&|#74}=_Y#q|xkOOIpQe>);`FZ;qv>`x z-Gm_S+swQND@R7sy=4NrG}ru4hlSGdJM-M$y=vD>uS?3}m+yi8IXO1^oKp&Yeqy6z zo>|DYgMO~zzs3@07u1Gzn~QpzLU)RL``-o3P$1CtVjW_u0+}sK3CyXFZs#lY1GP22 zfF2h=nTvoITa#nyM4-O`cW$5EIAz4>d5wfuTHkOcS&tb1#0Fi)|NFuTZps<~NPXu>!u@Q1_b8bGliiF%$*Z$>`H>8MCU(*=5_vZz`(v)b z*8b%3s`lOlCi)9&CVqM1Or9TEh)Er=i~?B54Zp{dubW!RB>?_D(#>EegY4#V_6 zKilHEd<0FNMgsjpSZ%K*+}MyBSbxm`a|NDkXE#SbQzPn-YbS%@QlVZF&2sU`nkOe_^kbeZvl4`DG_AZYHibsYnk8Gc^Ed|`gB(Go{_N|3`S=c-~A@@sc+^~K5 zXFQSiD^%8SH+d!gqF>oYfY-HLaq@d>21g;s)=E}A$;xu{>f0io zuxT@0^wE`okG?<@Z8+|-X)a@JIcV4SaP}anmOy8Dn(x9iHnHsE6Itr7cMqk)v(qh8 z@5Z6d%=uNnykEL_>(1@yoI5IDGs~;^WlZUg5KtzF#OHey^@QAs z;b(fsZN))LShcpjR?|c?Llr9Vu7G?zLXPPZNOZf0o<{~UBn~3qv>K(ugT(Vb_}x(X zKGmI$sUpmk1#$TeszoHLOFL<|N*wp8#~vc2^Cetj&8PeO-^q)>m`6SPiv}jtH;rjy zL&N-k`IqAcsp8R;lld=)1MSY-gEInVCHvCaW-6x%GCD`n?@@ds)DGFEcy+-yV%30x znHMK2zu+$~7#pEk;Hg)f-L4!w+aRizxr%NgU4ytn6k=?9u4v1Tjr;H9);!ATf&6Ns=hE2 zU)ald*#BPp4F$rC;F)cM+mH>!!e!1@e4W5E$M5eD4#C{L>DR`sUc9t9pTu>dX79GN zNRU=Ri(ATVAPpQxcr|y6(rx9pZBxc`BQ#UpNCLiKuWBYONDh`2yh1Ehar`Q$Z$_GkN<$fX+EuNmOgg@4|%O3Ky&M32f* z2cl~=_=%*P4#8OF8n|n`Fc(qq8=`5vKYwEHdF2T_qdN0k5ox!HOYsVKbS+=xtk<2bgFlY$mA4 zU}}1G)UFAy?_sxudZU*LlP91zj5j|4-0+|lERF@!~gF}Gj-8t9i>zV7>;GYEgj9>9ST?D86d%Bo~h zMww;)+FjA+-}KfNQ|m8GoU*64{QTs+CX6a{MVCCB;cN+T!0~%cPPF9V)C5$7r}pDl zmRWq8*#^V$0Bid2`s~bF^41JQ>OGNc$t7nvZ(+(WIc}O_tOHwcgwR=ueOX7u2b{R-% z!`+Fs3D{o0%N9*WNy_tdJ#_UO!{72kXL^EGvOvs!rlWLg!+a)BpnMV0eU#(;^ua;o zrLeE?>t&C}qT&a1ue0WzLziJ$_0GGy+3`lDxR`V6i_uP>g&CtxeL2Eh;bY!`05#Zx zz;baFUwz%KUwy`qc+`=vp^3#d+QqSt zrRJ;bG@ZA7zsX?j4ly6(>dFzW4Gri#7l0ta62nSe-OwxP%ig2(l5tNV!qpW~sF_X$ zs}DU>BJ)#_WZp=2E~mg!Mx&fUU2Gz@{Y#hZ^QP3xa88{Gw`KurHfj(JYU( z?Jo14ZNnZNWynEkoP1o@s?~@4vz9*wNrC`XfkHI{mXi0N>{_xf<-arVJIqoij*;$N zBME-TB9A7%UW>tY|5VT!`&VtZFLMKf(cSU_0(w|62Y9Ol8 zk>FMR=FrEcRHbmd7r&S-`UdRIvT&MFviG^DwIE@Smy)W?*N&q7D;Pq*1+u`T?>p=1 za${IRA8Wl|)w=&eg_Rq)cEE(ugkE|1rkcJ8)%jo!yw+jn&jKsU+`x(I+SX-0M_s$B zScmHP{<~%6$O1b$p0~KY)n8?GBgDij%_e@^4i*5PfQXz`Kj9K&i~GGBBwF6Hd>GrR z76M`IpP%eltE6v^Q1HZbzcXwGn5CEU91J>zn2^6d4rgPKvrf-mpTQZOqW#162g?S& zJ(j*~2U>Fyci8(EbJ z>NdTDQG@>Bw|dLviej$#@p1e3Jl5m5@$HZFn1b2$RT>Zf=R($~;XlqZj)iJJw}qD~ zyCV-XTU7+tL`hCuC{DZspPZ?e(2#%X08c(Zr);mSXkSX&DWrjw|C+ z*P;Ur{Y`vt>sL&NYO(sA#GFjD1cT2%_yuFdiaf>_rwwKs_v@(jzA8w zzznq@q?GC47oq#<@d(x|a#PEiF~slkrk0O$WdzH^L{0RJei!-+TvwZnn=*8`~<7jX`KwtYeCA9KX<4S}dOufM0CGAdfRk4F`$x-vv9U~CM<=r`tzUw~>m5y*|Hsi}S8I52_~QJu@5-`@eS=!58X6uy z?_oMNDgI%!iE%6}s@ytGJ~{9Ncgj*tf?ACv)NDp6_;rYD_5i$+<{7h1#3m$%Jr(OKXL?n#^IbbK6X2)}r zrK)}8ntRh9k#7vr_g`3QL2G8{y0Erck(+D8YmAgjF&%l}>*_PUe8If*aX1~}fZY+7 z!L(Zj5#xiJb@Z?ba7|)>(B=9KCW@<&{e*8Gp5ULdM!ZEbB6p0tMhq>@0Iz>GT5~5q zv%{S4k4`H}cszX(`k1E_K2xF+_2zq~YKf{nngg~-Y3OI9J_iS#} zw|U6%!zp1-qe|F=&wp(~0G9P^Id>jzdTHJ7*EPtxRhA8v9oiUzpI;D9TwDZyHGP{bn=LF@b|O0;vCnz4?vU;r>OS=w+KQEcuxB=Hc~!71 z<%LVOngBYv%t9WRRf<{|6opwq%HOAosgn5*v7)Pk-l$NwV$@^bE}v$U6?pV}y?mjK zP?Viy=M&+T)1&!W+>*ycuo^1Of%&S?E?1g=8}8!dTvjgeo9k~ zf(|LUV7(#r+U^f&q6@kGdIVtFEq4gpLuD{Y6 z*w5+2c$1!;SBB5$gk>eRnBbp<0MlyEv4zEl%PVx`k(_?u#Tf619CD|0zOrUr$qce* z)cOfv?MRbdC614jqlzGC=Z1^;d%@K&&G+K`GVXT@#EdO47%NrDXixR=WA|uK zbjJ82$F3l^_XB*DpWQ~dc8#8jackL`Ei~WK0{Wfu%aOA{VUlql0G#}C-ot((k zh^Lz4=oaZQDPM!}e(zB7qpE68C2RL=^mt0>jW9HZ)tKga#7~Gz~_`qK+1? zk8>zkSJle3?S!vWt5?aeRG#Ou<$Z?^RZhCsr6|v6U)i2yhsPvFAdPd(7bhlLm8FFF zoV*-v*bWOiS=WdGEJJ9o9Ll{@MAPiWpYgF~FV$lg->Sf;E9=SurHyymGXAS=C8qVtr!MiII68=}Z@#k~yQ}Raht!Hk7_=lVGZzTfC%^V*Stz-qf zb4p&m$#P}r?Ww6agcR+Us+VXMmv$nycHGAD52U=5sXaq%etKW&EySco{N;;N8Zi5b z$M(tMBYCD#!?JDyIc-RM)2gxUH4hn?@$(_I=#QRUSe*nuDp3Z~4xJmn=aAM39zA}U zY?x5+ZuZ5}@{9A}`1gcI`W6-M*6mVfp9u z>^{fTtHkd%ODHw!8@|8reVJ?niAx(5%^rp@aI!)%iw3(k#Eh1>n+|?FDYO(f>{>rJ zgUiK3vdsC!?A1#Fr=gDGCWf{~KSr8sTfw-B3LF8dnbUawyB|7pI+3#vrxLdmD6RS~ zTb?+H#4(F4Ci|dT3`pxdM6(JwPv0HoEg)QR)r`KCNBYknt^QZUAwa||qXt04wZF$h z-&<-qQJMUz_NQPQN$8?His&d&!nkdl%889H8AKom7hm%2!;xjL z-YyYW%n#lZ`9I2d+nth=QA{R#n=>&WUI{YCzq(X60Fg)yAHj;-*mM<_Vu(No>q%S- zV(r%vE=>vbp}up4d8CX(3i=VM*vmwGaXFK8$>1@n<1E>(`{+}ITSg(T;BzcU7^WA~ z=3d}`{FQ7%O@2|USiM9+D*BShpYIT3Gc4#M^s3_=NC8$QU8YC!&(05OJI_$);s${kccmP`g_%q30&Buolg-AJuaCSF7UQ zbIn{wUbx zpO%|G{}~rc42tnZ1a5a+W|(x~K#FIEyd_WqRVxkSS{t`o{H5QNj6#pp{p&62lbo{yWLjo?``)OIq8N@9*k(V8@ zIFERmrs#<0vF!7BtW7sndcMoC*@zM?eko3K?N6Nx4gnv^_7E;$SUT;(8qne3td+1V z(u3c?U;^fw4d_>vZu{DWuEO_|7KyL%U_Gq=ad|ZYZHRtK_3Ptsa2-zeiI=k|g#TjW zbKpR+_vweH5~~lUzv`YED)DDudi~7%v(W8p5Aahm|J^X9TIs7X9P-Q@+7O-fxUU_h z#ZM8vkMLU*1i~P3b+Prj4g+ZC*3Pol>;yeZ7A~5*4`l_^8tJ-tiQrrI-VXu~;j5BE z7KgbeWtflO{b#0NC~ZfSO)LEQ0*s%((To2p6%9kk_f%rZa03%EM=JJeRpc(gChEY% zUv$pxv>`JV|5>iG&t0A=o^V3w(=v%-DV`gXkzYl9(uv!vL)t44o7wyycVO$$aTr&~ z;>*bp|FS`18NYn~t&gZo1?UsbVJ6>8v~(8!l7V2W%V0hA<*hlMxw~BLe^wMIYDwa)=!Hkq#tlke$;u~J^4WMl6Vm>?oRJbBC6yYtR8-b_lP#x zeW}Jrbau&y2h{|Q&LSQMkW1-GoUjJR#m>4L)K!_o2krN7;Mglw)m~Svq5&6hPJ$u4 zO#u0#bX*I^9-xC@B>=f&{X#hv*>=y2d(n80QvhP%Tl5Uj(m!YofLm$@E+>28l2ya8 zLm41gc>f?ZTk*|4J|F3#mO=is6bZIGEX65IgRCDur1>_+G08}D>x)%mkN@p#4&ittlkpt5_ zR^FdDTg621L3v?7Oe8rDfD%C?Qb5c@tM>xfO|rgaR()IpL?$4&+h`_I8whYfdd=T4 zn^Wp`&(=I`k})SYJr=Sjf3QJpSU?0IIZTy}bRZx+`B?e1EZMM`7T*0`n}hd(8LJAj zfqT55dBX_5AUz>_tA+{vmAN~poPCCrNb$KcfGVy{EKSk@o zOB)0)7Dzh?XeG}oZpco~4&pF9c@{mO8+|^ zv#24v9}59L#o!!-EzQ>>!*vAvI&$rYT_JM#E=fw6zBghve}c1CQZ;*u)Wm!`?+Xug zZ>#o-Ca94;gxSZKZSQtknbJHTQso)ft}oDG2SH1A za&UF928R7d9R(N#y_wFf9L>JJIQklfT?L#}>FtyDdM4^qQ;!cl^5`e{D6AeQ)JmZ{2 zpOWFhnDCe5x2wu^+K$;}?V1bS<%l3-ugI7t{z~bBCja??MdOeivSTal z{bgYxY4|5La@^(qsBaaH_%Ji+7g{aE65hJvVPO7n;72IuW0t+xQD)#-wCFzd=>@(E zcj+CFj%?B5(RsXqHV#NK$pi9cF}XEabwPyzSl9?XARvNFlTkw^pg)7nu5GB&{GWp5@M^}2jKg(jpDUf^DhG1d=g9xtmFq{IMRk z`*OUYQ5M@#_D)eqszx|G0?Z%JHNVRD2v$|AcEw@f6)TaDaNTsx4GbZ4v1UMHz_wiE zNL)3qZ!%V8cjjQphM##qe>9TQ#G$x-3`5AJI5l}+q<0? z?%XN!6<^4UVNtldLZ1yAjgQSs9 zwY>GFuH_ovq)Az|-z4TQ-Nd8QYf-Ya7R-#_kpF&>N*?e{}(Q-P~_)({Krq1wC&Fb_s{zVyxjjmw7QJ#?p zf;sf8HB+q-|LbsQz^YmIEa|61a&hD5T9Ws^7;k|w3HW@p??b}qptr&~%FAb2yzx|= z@lBh-U|7u%%BX~^vEIqbvS}fm1lvUw$tpvjzBSQI^b1~VmZ~9kZ)|-FuOxN z@tjS2u&ZC*yjGV{Sw&*fnSU%86`H%9t^6%UjjSjB^`IL$Z_!*g^5I!MH=TPQQt9Cv zX`7@yY2HxAq|9H^{GRPc>^ul93RygSdf))|?YK>anTNJU49qqZm*H2@6V)wd1ucz!%w~fN0T|ey9Ie9^#`R_P&A> z))gqp_@dQmh~%<6G+JKy*@bSn1J2`+swoCr5orN>$y`020-{y{eL=D@ylUMj6*{8- zL)KeIMb$@bptPhQNK1n>h;(;Lh`^A8bc2-6fOLa&cjo|uAfPa$NQdOm-ObQ_$M^fz zUH4n}Kh^=}?0ELxzcYKEXGd1P9FTrJuo0A=J)F@GsBhA6Wzg}LC_EA&Pr1q8DuPaB z;&n%}yT&=X!t<;7HEpSTj(v&cxNM0wNGZpNdF^vg{>sQj2!k=1Lf-aqVyWmI+4{P| zHD~s55V(9G5rFo3p8ny7eJ^wurSUYQq-N8}&crmvvDh?4n-hm^I5nu=hk@p=@ewY8H1R!A>!Q7YhMp{4=$>+37+h- z0VD&yRWxmr-c?Oz1$>nvTQnon|1Psgxd#MZ(f+)$zueL~-e8~eX9EBErC^O;vF^2n zb~=&^urqcZ-Ot_@R=1W@`Oq=MiR>aVK)r)FQXS27Pzo!|1{^hD?p%}I&sbLR>}Yx> z#hg)YLng4!ler{$AqNqohy>)aF@sC66!FL8+;Eq;F+didg#vfsC%c(sqiZ;FQhhhWP0rukSVgY)oef+ z_cxMJ@EMqaAw6%iw za`5UMOEEs5m&;71>87D~Lu%9~O{4XPA19qjjJd|9Ks}s0we~5RxCz?rx2z?DIuPz2 zabYJ}V+z)V+E8Cjo2?Wgp8}W;QZ=$Z2yGnU<`d39q4@c{uRJz`%g3z-DJ0u@U&nU^ z;3ic7eX`@*9fZ*k9*JCpcsjTmZ!?AH?I*4TI4b`Rf(ki0qbC=kj=WBYyuOAu0J)3q zFk01jl~b9J1D7DNIcM;X5WN56Rtl11`X5+T&Sa3kXk=V{*JirpxHL!1*Uk8kQ5(TJ z1QQBC%v~zDUdJ{>!mt`|YorCbY5!x}Ca?kS%YmK0^u%V4N$vKX^l#kL%2x&cqpjAn z`!%%RSkm@3+Lrn%q)a0ZkfC+_XCrLWSnLTo^a_-Ih<}21G-gCEQrB#+`)N^hOc>>u zOiP}5x7C|}op?CVAIb4D#o!h65lPqer1EuCzZdXH2u@=F=UCl0nY=lzO+(GR4$CtC_IRG2jkU^> z5tz-Nkw9 zS;KUIQ(3+3sHDf|d8wRV9?K;6L;J;BLsd0jg?Vg+hn?;}zxOMe7+VL9du=4TJT+Yl z`UZEKz;o}KUr+rI&U4L^h#%bswAhYJUp`zBpR7`$(T_x?A01>(uy0dLeWTq?yuWK{ zZq{EPf2w*QUd9EbNT4Tf(|l=Xx+`g{I1=g^KGZDR{ngHE1|h+UFOzHuSxNE0;sfb= z=uC{%TzIh_@{|Jr!++I>F`&bm{(!^Mp?jfNxF4>{1)*Hg;l z^2&P!6xB%<<*c|!DvF1K!#A_=fOTh@?B!>mDT+PO?ZDJcw4q1yk!)6-NT-yJebwp@ zBsXd+f=iW^o;iPQfo2N`NPfp69*_5AXiC++U(M6P>|vKik;(Xj#V)M#4IE1OUj2us{S-aOj} zG$}iBP|D#=#IBv{zDHo04z-X;{2}OXOtJ(9G}%M6l#=V`z2JcAAJbH~`~%p_{so8~ zsMY#AwWz%@ytcVWe7t}#fPrOxnFkue(7ug7zVbC*>EznY!uXynWcQ9Ci;-Bhn~%Eo%$VM0}2($ zy<-=LUrrI$RQ<9(oeQIA`)s-DwRyhsi%Q;04Ildz`O@!IQrttrMuIvBQh|#F8o@!f zFrN`H8c5?M3CoF*n;Jcy+AWobUSwrlr~hO7TAoFg+@o~DD6Di34#hq?cR~E!+S`AQ z&J{H48^j8oj3Tqy=0k}bF>Pk&znP+<|MujVgA(D+v86p?2dX}5C2trOZ@#+Pe@=&~ zJp}d@?vp>kJv9FQhW}>&2X#G05^5a=vhB%7wD~SWPX*eOC-iAFW?B6i(#opzq`%>s zwC^LX&b0BTA}KcFLI5$_k2{}34jfTnr6b2Xs7UKynVd17P)Ywm0WJ#4I2`Z%rZYGa zx7#Q-ybuYj5>dT1;+L5rPjmP;ip+R3MfVFGa67Z%!hVE714B%+fi3=CmEW!Yw5-C)gs^4|qta zE?g1Rl#HBpWbmziSua0H`Q>+4r5d2&UK%OhHFBh9;bv1mj1-d#Gk6eDTF=Od{Inq40`?lS)wnVJAu->o9=bfUwUzCL>-T9O?GQ5Hu|1 zm{qailY!F(x+NRKsg4uxyS0>b;(WfzGkQWmCfjSIfVA$}Ir`EXH<16IWJLAy>2G_M zYKgAP$WKohHt4zvpEQhb+n|TL9OA1LIeLorYf_2drIDjM!CDxcwJ)d~KG{+t78J1Z zsfB3I4N6nCG;m+7#BmJ$n#>k+bzd>x5a{6Cd71Z!2j%6WbND^1CninGcycJc<7US> z3ie$+Pw{gYpzL;{&d&~`ZshVV8I*hPpIrT!Oki6u44U&zNYbf|-J)C*tGB$QP9*p4 z_k304G(F#N%;-R4&!^D`iOO5q47_Z%*O~ONaa=c$di==J_*1M~{|0dvCqTR1*|Mjz zf@6_x4_3zXA?HuzSu!mUTqU2u)wX;iF4_#Ranp=AOS3U~Oj!jPyhC$)DcSHY05!s z>;Z5CkJ_lHp8eRn1trY6uQF0K$2K6ZCJ$r}R@^-65!IW4pbBqTJVPcx3r%aHlI zBf%Rj;=;S*bdGNBd73Xl0ATj}`$oaA)f5D18QwfJ)5&V4&QhoQZbc6e!G9mbg$}FZ z$r|G&|Jn%uCcH1?-%N2FBar>+#QRYLa8S-CQ(PTCfdbWEpZo3T&;7$2MrTdTbUZ5T z$aQ-wQ#pBJ1QTU^N7-Lndr%s=s)HurR^b~jY9cjWVdS`K<>v4z2eFZ)KU zU3}a8rFf$ev-}n%vd!+xE8D}Bu?D%bC91sZO6fdk>xVVCXx*cA6aQrRmwKml;Xs9< zPs_71sKcs`q3)U~O#=??Ra0UIj5aRs( zh@*FwBel4EZMw&v7&MvRT05|H+|sq=F+UtSX>q87tb)WUe@+`(7|w`Ca=u^$O`9+}`WIn(01p-BF=HxADbhpnMA+QcJg^7s}Adc&-#d)IX@e z#rB*NVPma>RXuVtp+^6Jq>j`_7(#UsP)4~sCivVs`0 z*71F=$-K#z6(lw9k>>#B_^5S9_z#||Qe%p22${`_O9`JYYar7F22%@MX^}w?8LX|h z?jtsjM|I_aD|$OGCC4a^M3Ll}%hodYegsc#k=20Sy5yYJ+19sY73TPM+;!#211=Wxx@<6#*_LAjH2~Ll-ROyGOA?t`x5^6}{o9oi+4~sf^W>;nkq;w3U%Vaetb~yg%ylW*NKR zwc4XM=dIZrNRm}1^}Nm6exI|t<)0iLJN7A$bEScvNe288F$uAeSh=YbAzuF@>~r>> zP_(52kkDJ$V6S;Zy4mz9?JVm~{)FlUUB^E2J%w-}=-bTK znPmhZ3Q->rzNm%A+_HV1dS`S5y4v$Wcu>M4vOal;``*7i`D&k*M>!;VkYk_nkR$t( zxvQSNCACAeSWJTm4N5KLw>Q_^;>*lQ2y{CdE_d(X9LZ`dR<9Ph;*h!!ICSRy zeal5Hw45e(lqn!`Ba`WfX!|c|3~0h>0Gxf^rpk$}n@ju7!BxP{k;3qsC?l_F5hr2lr~sdl z_tKPfVC4qe*BR9b!&B^&_l4r8uVxj>v1FHg4eB?|hZpw!_6Ud>7O2VJC!4CTykgX# zX9WGJn79+3T(m`nZZH`d+5-2Re(l%Uetsvcl!^*0X@pIt^88v`fQU@-hgPAh@xBvI zX=jRSzbqLvlP|QygThooyEwCcRP-+>tda(GW_=MA;gAkam{z=F|G#SE6?~$tN2Tp_ zG*=4Xk(pkecC&xOv&Mq9Uej5}@m_K)+lYGmfAkeZ>I<6-cx9^#o5b39V#(q7KN?$z zz)}|l++KmE#LFmv%5yJ)oprJ(A9ecN)1FmgKxZ!eSZSw+K)5;|Km2xkOsyk<>BN4= zp%*(7qk-c^@|=;_A~bC4h${LtK>N&7$1&m%hwzNQ#HG0J~I&$GB3 zpH;ceNUPB?b+?mir&%52;SLpOKm3`!yg+B_yb{}1e*Li_@MvK*Q*H>Y0eYzvtVp3` zl*y#j={T!F(i;qSAY%K?nfh@msd5I>of(9w?LhQ#l61w(fUXCC))3#tNt&!$)3!gPR^{~d@wQX-PM$yx0&09U7U19m@ujs zlq?Vb1)pQvw~X@4({(*v{$ohn>t=0z3jxf#u_H}?dx?8owp5PMB0EWDPi7YeIP>@y zaBq|aIvhpckqp}cFbIw;Q#oeWsNJ~2us25BU-z3;4i z1Jd(ous~*sRSH}||BBU=e*y5H95-RrLElikx{kHc<(W%!Y62zIth5AJ;iaNQD^s6M zMqH2LFkx%v!G`&$z~Rvb!EanWuM#vUFJ?FSH3WV`Y79#@A{K)RC7e+vG>cYALH#F{ z6IivwCsf6+lKug^+0AK%R3my@4C&03%C?WtRupQ^A^;9HFo zG2=3V6?+jT@mEfcKV2L@a|F7Bs9%Hrd?wgx59{J==jzXZV*p85)HXPUPHqeR)4nKc zojagA)bzaexUXNthdMm({c@^|T%-W$QAY08?6=GqJ}V!=K9e4?6zX6CasS2sB>dd4 zgZ#_GvoD?NrR)ldR|+2P$eQC*a)W%w2w8L9z}zK%LmcxH7wrY`bU``!vjsaPQ)`ZF&uq1Vh>ge!V^TO%L- zV4#BYC(10qP9igt2S#Y_+Fr6~A~ z_P9F@m7WZ|c5V)1%R*KTBsxGj@V@(>lWl(ub&Y*gsXI9j;h?&37Pc`ld!%1zrzou- z%l;?4(qGU&N89ot9P@^tRP+O?vS}Ad22}qQiK5m zU%mX-&)GEpUk&*+HryzI{Y?22?d%SBQpcICP9?I%j|%|*@ZGTL1ilHZpo;oy+6RiQ0%##;XItzVw)tlvi2$p_%_vCs#~ZEK7>c)^)@uX9@#4@7Sekr4th< z)qWt45_ZU=gi_{{{lB9Gj0|~{AWi)Qa=fb*{^UnYGhp>47EUs(+VEa;52-F4;Ea5l zE)>24;z~)$@lu}qNTzZkCR;B*ma$l`KToAJm&H`aUPMKfIxLXTYpqAayQ*20$c6#@ z&?I$XvZw{XI+p&vl*wOqBsKT^B0(4AyRuTvfX;G~+2L5I5Q&?D2{Y1+STwh6^aYda zOA-qhz0YzL_GthFsp+xObGG$_kaF#E4n1FY{kxO#w$j`j{Eozafw&8jFy_f%=mBFn zp%JH34TbwZ-fYiRBmIApiA+w|DFndLU)(JdSitW~Fkwnd{pog^9Gkj-`D6|uwa&p@k zNKb@M{Le}~M!g@6v22*Oi)%8@7{akpKI_vz|3(;VFW~)YT_+O^68RLw7)2iybp6{$ zi#Tt)l{`r(##d{!tb0DoLo1P0fKHh8iU{LH?ALgBKWzN(@9S_I+}8EH6+Bfm*=FDbUOFu!4klx|A=D_UmZQUzGWn6JA%#Q)g z0%pNx4F3pzfIm0A>3xx?sN!i#przYI(ekU18%~k5?o$Fo8{~Wwx{CVO>syH z65uU2%uq~ym;-D0&g)x_p~-HTRwX~5?wJwfG^6kr8uX&983@wU;-n&}i()YJ>eRJ-V(+PK8BDnOk2{8aduQas!x za?}eVZY)HX-GrDcEiwJ(Aj(4)gK7BZyh=>N<7qBy)h$AhJF9F^?0OdXe?KBAe+ldy zuSL_iB)Gz*FkZT8)W7#u`v(i2do3F)lVGU-Io;&=pt=t52ky_^4q2hmKW)#2yFuV@ z+PXic^SquNnc!Rvos`a?f$#M`wo$2Y58!}7_yg<^yDVLwy}Txa`O$+`iI((w%uw;gK=Rasmr>7h60GNj}?6nF4d^V+H5DwM9}u!9J7FrRC-Q#(~%?LT|tF z^fKj*et9oaSyF$!^Mu@&`CXYdFKu=-0z3`2-oxYVgM8@z>9hbCn-fxSQcd0MG2~!KKq?-lR9g=r-r}tzw_l9!7q@)9) z-|&^hV27$HD~b?{MDr9zD4Q*tma?8^&TZKF3cpQ2b)*q6G?mOCVMgE?VlRZt;nKwG zFL@(&m&pGrt_WOqdrc(+O!%Rg2ncOM9m5F4ygEWv+$=hlS?G&qSc)OeoNe@UbmELgUE9-QoaoOB1WYIKsJd5O7aJN zw;$7MT?recK-(&WSo^z-=QUfCz-an!zs=&|YQKe9RYGQGW*|z}O=~6Vnx*O(vKyf7 z1`6Bu&dr94<~bey~qNoqk`0@LSIGMiz<{!J1Mi&6@H z5ezDlo#`6H^y~Q?mczRCuB5-F=R?;+@7Dv3tX+&3k~SRF200D+ZxR6|Go+85g&EnH ztT>*!4nS0{Hd=%ICKDM!s9I}P8_}pX@|q#xeQ0$pf{IEyni-nnu=_ODG6e^{%0ZYtpCkl>sV$O?w_nny~%(}#N{(rQjCFk&-0MCI27PWPn3k7$B#u`F=R ziqPgmqNbR+GA*3;+gpeA06SJF-%I%yAXOK}GM{XtUk=!#f6@v3JHd7LIr)RAGs<@I z)B%{vcQ)Xj#|@HhC{8M9*I{WlUt*?`)p^v9EDfQsN-%fr{ZyH#N3P?BSHAO)WO8Oe z{}vtYLjkC9wdbup3-uLmeM^|?X2WvfyQaG}ll=<})gAk|I}=_ly>327GDBB)(L5W; zZVD#+gPgB_Bev3DV%(qeMxTY7&q}mSj>PFAIF3GkvmVtS z0f(L$rZnW|;%~{Cufh!6MmTMiNP7oTSY)H$YYvM--%O_#h$$)aLYq=qqxj8a7dtH! z9Tz(H+;$;CzN%ht#W;{*AP?;4e7eYYwBj~r75I!LrnVA!LTIB4&Y@x`9Ie1`^Qq^- z-V`gyGT|ic5as93ii#QI6TuR)zLCqxCbn(4a8vB#WlljpUHX^|Ipy8a%l3V*omLy{ z(Rx^a%FR1OLjKLXJvxAx8bd|mlofo~*8N@UKnm;5){p`l;vX3;+}w3hA%h@UE^uuB zG9xCbfuGXwstj)7lkl0q#`fgYb+O)w_G>NKUTvtm19Iy3a(-+O^40MVqB||z8pUr7 zZeHwQav#YubZV^WK&VcH#dw9FvJ;??1*)f1L0qcC6CYvtw^Zh z`{jyg-Sk(m$LhCg)1FfaR;fl=wUt!CS%`X-zDfYT4dO*AysK~CMrcerf2HjW_@X~K z+;2blMaLYU(T4^a>hp^~nm9;ivE%c19K3Vq1+W>Rk*L&WYFEDT)E8pMTl%)D@-#)DfrF(l-&tf4m9jmckpPfZMKC zRQ;T?>7TX*9ipDtL>ZJ3xZGIo(QZiEC*}fpdS*>w!sKz9s;^{LL>SdLYo42in(;wX7VS z`oz2x%7g0WxolC`N#+4BK3hGB6u+LNhr= zeFq(%@ypY1%a-V>@PmDIzQ1B%Cb>pVf>@%fZca(QtL-uP5NxBT;jGUnrki?UQV*Q; z;O*mlMg0jWEq38X8eyxf*ebBuV(vYUV2A|Kx)keH0_ayPc!P$d=ow{?-(M$ssaY~@ zWi?gZ=>Ya$z__M98gxFFgsCi#Zp#OjTE4OQSfKL7tp)JD%J#S~NISuxDx3P}YewTz zSn6{%t0FGBx}OM+>lDBT6OibN{(o|^gjiwwD*}-VxORhc#mz>F=VH~xENlrhu9^=S z=Hg%$61iaRMfCB=D~Au>4Wj|VF0|h|x4R`uf}+7IG^n$%*M*4%gB34~Wl|E$t0eg@ zo_|YUk9o0gl1N|X+3S7(_xpbNQF5qH2^BR*qHU^UL88iAa5YOX@fS8Z6*2%&5jgS9 z9XS=!wApZbq)}QlKo$qX3X$f8e&XfKNq=T}KM2{Tk(@LX9X%a$lEE$4A#QN|#y&1B z&OVGqUwUAJURzTSjD6k#w3pO&ny0dZdJz%?z}8$-7O}9+Hw8tJBQ6mvzc;47b{y$! z_T%_&&=eCX?2Ha@E^vN_S$y*cU$hm4e^111tKGE6|A<%KD$jaI^`>Op4O8)Moha$Y zEJ{tu6v{!$bEt2LG1*q9zn4|TV>Pjy0aybIISOOZ{{}pq(~OnlV7T%oo2B6adj)?# z>PBjVbnT%J(n>zSxfMu3XA5K?gjvef*6lkBUM@scVt0k$hFX!bbnzGT_9EJusKwvN7mZD^#Wb;x>Yh z<#{)=vrxdz<^syWFwF0}i_VoooD8t~IAX%y z>Og~kQ1xCv51w1v%W-a;5(jU2<~>q;QauE#OrcEIrtu*$TcN%iR9`+k~c5n#qHi8S8iL zx?6l0X(DNKS3@q~@q{RT=B9(QE-N(*p9vNE+*(INfH{WVapZTuIHHyz69$= zCysIAv*od1TC1N13`;#IV_oa9Z(%LzU*3ug|(u0O1>RixQgz9}-vj0YV1mXeh?@`N`?@tp_ekmG8nzdL3qpZmc8swV_O{^*#GHbYE;Yt z<((hCQ3a>8yhyzGZ^#di6T0UN;jJPC)3mz%h7i8EL-%-3QRgOq2nVDl3mzO7gCDBN z&o(T*$HwDsdGoweM(TND$)p72>@8`gwB%Iz` zs@TnmSa9_E(s~tv4rcbgC{4q=R8Ro+YSFw#4nD2+IDWqJS>E3oylSN%y}C7Nd%7Hn zia!YX=LcE?u%3gPpWo9Q0C9G96$x{J6+U?n7>wWRK@iojCCJ0=@5+0E`7z+{wDWDm zSnous2LCvihnenS`LlvRG#->R{OGa{ju)*6Bvg5KUL5SxOPZ{ZOn*vTbQS>fb{|MU z>9arfLN0b*@q_V7l*O`hH9Gp5=JEfeXr7lt?R+k((R-Dx+XN|slb~z#5*nQRFf}u9 z^oAc-R>7oxe)W=R4~PVydw9NUw~2ezht8+I|HX8c#b$%lqAP~HY9`ymOYuquFvRrE zskA7RyxNEx5Msre3_xVG@)KmRSyNb)49YpRGNNiSkF7#hFnB5dv##k zmsn?YBhwgvqByNB*H2t(?Omo>Ph1^o9X0t(|4Z3lpm{e3;BOLMLP%oLX;expKJ zv2afgKAb|>eMO69057I%AP*LFLLV)uw)qg1Yz4}jNdB)s(KWCw@mfKQjVUMUav1Al zv^!uTqO8WQ4qNk=pD=5(5)p)D^due9zjSRt>l5?2FgN-vJ=^ZJEYMAplBpwmA#MuG z>JIf=AY9eLc`MBsJx?m`{PA1laJ}PX`S-X#?_cT_lgzV03BCb!j+dwugdKiMyj5b> zLvC1*1`+pjenSN}oRz~k-pg%XkSCkSe5}Zq4O8>P?j3+A1BU~v=eUhvhcBOg!5Zfh zUsl;|$$-5?Hxd99_-{PFrvRwdQvj$Nq+1wZYrYg*tT$Ld);>;}nZhGcLK>@?()1Hs z1Qp3o=k3!0$5HQIRiHV3A0z{*cqEx@JiMJ$KxC662aAB~6;U~&5_wx@oO+m;X2wJG z?KDsA_Js;^{{dNN7s7kw&R~${R;UVg8xKgIV1kZgTCR8n!HB1LO{gy{?W?W7Uoja9 z;Ppdh6;@KPLhk}roE*gRQ|yrBTj z#Q>xQyyE2t7VPQszh}#ARdQnq)VCRR^gESIf(R=vhe<-~%=9m7*RpL!_lu%MSdrkd z2+QQV7HdT~=zry&)>I~6Iuir$HS4xXLQP?3pv@HBrdce9c|JDin>eOXwcgH`Eawq0 zENQ#HXaLG$_=KoW5E0RiPScAVau#~}zt7xnI3}0tm&E>l%<~w}Vfm2oM*3km1|q$t zGj0uXz2#cPN>lV46-$px{(XeR9>H7PLWTZ;eaKuI-r)YZvuoYL@qlA>`te zr0FdbgVJaN%b;swP}dzt$L5+AFJOi0WZa+Fxt0@;9qAUf^%MSyn&+*!h=F%of+5?? znXj=f?GdWDw1ZLX4S>9|f)Pk$49jAODDsD#iRt79z*AZAACVrICX!cK8r)NThAVB^ zP@&Oc`&qz8|GRsj81!pFR?4mZwpVEN8Hbm#R>?=C%G0KlMU6DU2;4KG$ob2nt(oaL zBMx;O&KIfhH4KbGn4HzJSt4BMf~xpY0eIs+4}ol_j+@Q%TH_6*KvUpAqzFmNk!L7 ztZex5VtKJwh&NhDGUfBad6kPEgSn#uE;1+~6L}k?Jpr&T3C%@vJ-9VZ+8uYQEsY`$ zD;HFjkm`PxrTmBtIO_qwWPTrSjnj1>^^zz;jy=$SlV!*?)n}H0H~QC5K!D88NtvJd z=aw?`A=p%48lik=*8|rnHh6vV5jklxpwMr^WL|kG%x6^%?lpDoAWGn90z{v1SG_h}ZhS||Ae0GVAzmgqA`_7y#rp8^w7KXe` zh37vbnENY*eY3tLx~{TO;%Th>_}tu25g)s|qutOg9LcK%y;tLCd%55Tb8AJQ5}#AiHMSxSI~O#NkZOny zVf$8_m@B{Qg&Pz087EMN9_z9H5X1?sbw=TMxNs1?W_)_BNsLnv&`5`d#&93EkzzD# z_v+jui;(+-eWD9tv@6s4%N|^FdY_U9ZWl1nKa}OiO%kmwPBZyiR6MGw+WBJLOz$ z4m-xf@&DH_Ty>fJ-OLpL!04~^_L+|CEhA0ie|7<@I=Nlta`@-nd7G%?AU6bcR#2p~ z+7bQ6ESUT;Q>mvv5%i{=5evg&cGp0h4*Bhf)=&Bo_A{A?d|mvXdMW!>veH?vohwZB zx37621n-<~d0cX%r(Vp_L;bq&xD6<6hp^Z)E=s~@pE*Vm)b`rT`S*C;uIQ z2>-j!d*G&xCx;to#3CMmw7j>>O5Px67}{1E0Q<#;UuMHDdT*c~5A)1Vd5BUlD`|}o z{iuouvYa5@jTucKg2Us_ z6@u|o*a|uSap#(+0`RH2|4J=1Ase{Vod12OAU)9)OzoO3Z+Kf%|P zJ2#f?CX(INs&evP2=ueCAM`SLI))?W>K(|XeSi-kAN8_-^4&Rtt6SE!$M<4 zBok1u&_n&n1h5Ny;}idIxqWCjD1a11GYmmzPy-Wd^-@S0DYDd3qOmvRHIey3*C3ts zCDHABBF?Hmeui_0s1J!h=02AaU@k05_*WqNb3Liyy4-enj!hG))jid|A>>_m0e`TL ztUauO^;-|cPRgfGue1dIWsGJ-<^AhQ!;m(Js4mc-5$a8OZ>g|_tp0XFQ*ZIq7+-25 zCB^MoG3djm553MFoBHBN-b&(d71%R zJ{Bd1*{pc`3|l4JH{n^Upb9Q(h>*(%&c#$uxU?}lyX<%>i;S}am63e1t|N7Ef9Lcc zc)jE@x=9%SvZ#mn!Q)Sl?Ilv?KtRIBX@t7B-iqEiA;{Fv8Ip;&f0-oUBVv~rgRiK_ zO$jE&vAK~MhoC_j6I7TJ69Dg(f(#$i&MP}0D$K-@RvS}l7xmUK3_5$bpMxJ6=L;O0 z2dyq(_1Dwuf!ty;M24E0OS`3XFLb$aXmSE88V>7;#Nk9+1eHUATLG2ed|}-up0lLcsK7*LjkR!k@Jv>t6_Zq+_Q~=Ij=Y} zBH;HRgkeMLfHpCYSU~{Wx(41#s0Ha;Bc8L>IUOHit0Lv0h1)Lfsf4RgRuQmv`&3!(S z``)?FKWy3X$y_~L<=m=3y89(I5W>CU8tb>Xls&Uk0HDM8bbjq>?y77aaC7$A9)y0pe0YdMzT2^)$4q>qib?~PG|?N@)@ja^UCm9^@Jh4zy6~O~ z_pE`&e)fmQU|H#KoZAh%~2ZtPS-@n1t{`eqQlr`tQVY{|PQ%N`qy6byFh{=I6+H%~k5*zbsuQS6rrh ze~O>#zAV-6FQR_6bhk(lE>|48{=RZ?{@3Xpkbl55@n5!H=nWL@Pw|9(r zBASlVzbh=`v=cwjt!(gQPEn(&3xO-y{w#BPTL*^p3sL|l^T?MSRD<7(3fiu1PfTD9 zxkZHk*fPr3?9(&L`UztZT=hIerHkP63X02cL6!OxlYckx*86!|cwa9=-s&KMI6d!1 zVLO{?YjqUwbu2L4LIikB(YBHu)Mm6{R4a5C>5KVDdluBL_(TtD?sWvU7E#}Y#|r3( zPbtS;7x+<(hOLurBib>^Iyk$tZVPg%VGi0Sa{|p^nNH4b-Rb9X@03R3eu!wS)Te7c zW;i%c-zajR6O-K%32{+KCz(_|FY!x z2@yTQe$K~dz~q~9N+V-=EV=Gwc0}JlO%tRjC`2cl_jvRWTx72R5uZNFX*?w zxi1w}HW$Vbv9G)87Ls&x|%Xp3}E zLIqx|B}~)tzU4(7LmJiUd|!BF=QE3UIXk~kzrOOlraF|q>2DVsqW_7Guvq2@;5t6? z7Dxj00(5|(DVE>=++s+0Iq%^7hZ_g~tjEqNtVyrtUdSB9jcZj<9u3Ot$+(lsW7{l` z#Z}TL{0n(;bujYXo@Pl=@}oZ#dx+CO#8|;eP3$SfwZSM@u&DSMXvI@S3rECIJzw=% zrtUl5KOMiii(ix-aiZx&MGou|wx}3c7Ed zVq>fXL_6qkyNmwOhtU-@@ORgnF<`b=1)TeHDdoI?vKoT_ylwoSx9jIR>d~YB z>`!6ct_kFzKuhj(9(GAlYyCn1zS8qK`_G|7$OI#-R)J-=ps(BprDxCRZ^s@gnC?$ z=D)~VD@1(F#gZOWCZYB?k30>T>zJScwr*kiM?a1=rTO@;IiR=1R?ZDIlrudad=6Y3 zZ3qTLgd;#JEBL)tOt}flmPdvM$Iaz8LJ* z0Z){!3*uzQN{nf!D2b@-ok0WwCUc~7oi$)++Srewp@6}wIatxMBj_;BJJI{`32^jyA@2PWt zv92IT<)s}m7n@gbHHkv8KAB5x_66Rrq_j6}yYW=Cv}3~LU<9x|6Kv=XIv<$_u=82X z*jgwzZMSYctJ?_6mUnf#Se2hrWXzkZWS`Z^pk4X{5*S(4KVW=o|0nc>GzygH7!5kl zsPTzAs_;e_0IKfGbaim6xzjPE_=gB%@N~Wf6^ZMI`EGhxU7REg@wbxGZu&g#SfAIu zWE=LpxobZq($W68WQ+$8+{P8m3qrn$U(W>ZNQ%}8zVHi$m$(X~%lica%1MO3M^7(G zq?!rNC;dRG#*ABqCWa780S~q~YK`|mmX^mgAODPyz3C0`-+(Ob*c_Iy06!BLlOkJckbAW2SWY!+s*!* zsecd~Xwd2)ap2GW3s^bk=Djxle_DI%s5qYBUvz;WfnZ6H;1B}A9fCuG2ZFQc0wKXQ z=;H29&|pCmY;j#IxI>V|A-Dut+<8O3_x|2}@6UH0=WvFesjjZ>uBvWodg^n64=e>{ z9aih+PE=(Y2gU<87ljr?aBF#ZsE604H2 zPFiUwezWY}5tR=FPevOyx&t^wCH(eBua)q99ZBdO)jNq?RqD!1!1&v&NGRw=?uL5W z5==-#$9Rq%xW%$@Zq9~cywG9yHDgAq9V|*L$~96?F^`H0lFxXE!=zBOIR9vRS)Okx z+vwVT2}FF8a$9$PrEa;PqW|vez3H1oW{+V!$Zm|#_-ET)IFL9x_l(%=z0S-#Jru~F z`mm5aV?uMMj946+z6*&b6BeH3OV#+0-1YNOL}~PDXiS*!%|v$(${o;r-52oitw>JeuO8fgfq}*C;*t#d1}@ zIrKLx(OaJ7WSBmvwRNhkSVu1VZ^S~bX$ae*D9(teJc5+k+eLsnGru-kHH#eXk%SDS ztZh?Y&<4|)I8kq>Es-8RgD)0DVMG}@icRz4*`A)sIis80;y=&HvW&#nZeyA7z1t^m zXaK&US#~aJ*j0r&7g84f|4mB?}Z zt4C<8$wJhhGs~_XpNO{=aq(sDJDF}IY`P=Veat0rmk(Ov$R{3ifnb?CYnDGYrRY?B zi6-I@6h(idhdunjK)&}|g6K3<7~nfiq8{2lHPcHr-pf1}^X&WA_SuTV_}k*O=&|4L zi?dCsJFL9PadV6sMXbrp3S3$2+~NP8wApE=cFBbJ zzCK#~cTtGMT7bG!U_H-O@*u{5m1Gpgi@%buW=*|M#BACczS|Bad{ydO?9$%e^nr_@ z!C-c41$Ml>w$s=t&j2(+EGz(-`Z*#hzbu-VLO5?UDShXhKva>hfWO=C_tMxAV@Zaa z@>kHU1EryUZiDQ#PDJFgNNRm&iR|awD475XSah-7hU}>YwZ$i8CH}y9G50qvGl-Lo z7j9l&F9p1ECC`48_zKd(K!JYteJs6_SiCIr%OwgF9Rx2)uhJ1TQ5ZPMVE^~uXXSKd zIo7f}Bc&Y+7@L55ZHXIO;iv={Z)=Y%S#t+b(mvC@DULI)Nk_Fbo95{xL?XN9{SnxZfhZb$bM()~VrA&a1o1<9#TO}SrOC9O7 zHyWunCzS(B|9IH^A3QeFHE{Pppea=7P}CkELk(sx0A8pH9AoQp?_bnv@SEt|&R}88 z-&V!l8>J%#={+=7;`+=hn!siWm*f|9EO?yjEkq}`eWic**YszWG9Tu`WEsBd063}< zTPz}-lp(5MjTD_5NLmCl?Psy#)pmj!B&RsE1@C6{_x+B9qCwHyw19W|@ftJL)Srtf0ZhLN_iBTbC?w~I4Q4T+qkrD-h^wD)4N$= z79fx|^p!i6w=GeyasRs7dJ6yY3jdtHX(C(IkS>&M*Z$fLd(IC|=5fozg$n|)z&hU} znpvN8d>zOiKyi>|F^^>n|2#y!9|ZL`{0Ps2D{DUqu8hXz3RWL+_3935xZTYc`l-mtWv% z^=Kd*Et`*(|5O#xc?qrjK5~wpsr@SG_YIK8M*mE@-S;*5mDRdGkVDr z7?=i~jfw~JaD4Og1rjd~cBw)0F=i&(bU7rxCm}R=$?U==4%k>_tr?&7v~BA1D`yc$ z$zUqHgxT8RCLrQDVM4D)Br>Bq9Dk2p)L&+d74zMP!CRug;@7!0P^XL2&Gog&Pvfo; z0oW!NlqK-+D%`%Nx2$$4W4Ge{yAy*47ov&i>*ncwJC8&*MZ>Ip4w>@f5U$6ri4aKL z#CFUGiQ%@?J@t`LF)ei5VV}M~OUTFHb)^L30f>*R{K&mLEwAvMLge%8?~mCctf&#A z*JbqALAEov$z`*d5RQOJ$7K_=qnWtC1+vz5bb%Z~6_s>eHuH0!H z!B2PCw1U-pop?S+JD(4Cs?wcG#FReRMKXGteM@i**vO+$-q`)hYIm}+}4kc&p=x4gJ-(LvTmC`~#n-mqC7tFO(i@BfYCr*xaR91`_h?~j% zm=5f_nVY$`hHn~)wBGT2KK7eLc9*A@M4vZQ3AGI0XHYwr3CExAXb0%9q1Ms&~HCF!MZ(eYySGr{7AAQi!;iDHM;-__5h~ z!>eC_cL8udg|(rHLuzT$;oyD&bAR(JK&=Ncl0= zZw+vFz{ez2S%3GWJcu_Os!F$hl7KK0WRgvwnTC#=8JTRQKT}-3aH|+qa+bNKiz@wF zleGNeE1aLwYX19LV${#HOrcql7hd3Wk}-*NzJqy1)YT>84+tp;)qRS2f0S05tEENKSkvM4 z6HE_-ZEHIpP=?(8Eew7}PPx*PqWvrZtfd~MQ+mfnO`&y+aNet{GNUFudq9NrU25;& z4a6Fr??UUSL?)Y|izzIp<|;THlR>!NF_SLYX_f143%3AAgfDQ#ByA%>>4Y zgV2gx-c>dgHr&}3+$rXVeGxH%biVqCQ~%%C9RF>Tb!Us|`r>XfUF(-E$kan7S$>@K z5-m!#O9QVNeuUh8TJ%<@5jdh;`pOL>9&zy3z`&eRn$#dvpRN>X$r}_{#PyRG$%qWW zA|!{Yd93ww>z!`-SGBj)o~n{XYO|P3VxhF( zu@xjAAty1-S{Cd@9CCQb?J8ZlHzlWr{tB42+)jCjo2-DKI2uF=D_R<>3iIj zL=%37fhWYBk&kSS);f7$;=!p18VDLHDk?l3O8Mh`=kw0uYQog1g5ly-Z!dV$;aF=J zf-o%ijI%pF!iSh+#JeVMb3!D+u=~q~Nx;sYN^M{LHGkUc14VMYS$5{3;aBQplHF9fxAw z@+($F>O$OJ-EDX%oXR--z;#ojn0JkSY2pMq4%hje!R;W#*-F2>h4G4aGECU{8)P!L zOf!u)Ywlv*L5Ddu>#5+JQ&J~O7hJk7?lZ>oXDc-&gq>Cr5)y6Vgr*RZP=r-NmIyJd zZVg|H#p%cKj$6cDh>DHiWDB2d#bry@nr-TBL%5 zqLHoV(h#4?OGtxgCks+wN!_HG&ALN`5c51^ReRm%j|+H&2s`Lp+PvG$4t`KgoP0|s zQR60>EUvAx^@0elGYY~1?i*>4Meb@THZHB5{`k~!Q#R>=}cjxX;Ybt zZmU|pb^OycxchO1k5P^TLJ}VE>04ewUhdTXuC3j|;i$SrSFtbDmU7^+_Le>QA13=v z3u2flUeZdUprN<zFQT3 zM9S8++ee>8kcLVOdrVCXJ2s!6fFFx@6@ylYxB}d8S0)L=bg~({ts&noFU`N{sO9nf z>a1E`aI7dYg&%5n_UD{7jgDDhc+ECmy|y|pLlK|fek9%sD774^2t;o3arE|vvyJZtwHCayTxEp$Q( zgC?F<(s>G+R&Jb*w&;X29b!Vz0AY##udc;CIDA(L{$>h@84Yi@A2sgGm|_y)Ls&i5|bL$QUf z5ch0*a|}KQ+KFq~NLnb=?U_nfGF?YllkZjWVS+Hjl|@$VN)|2R3JFAh;ug)M79NJ0 zs4WgsXuo0SWipQdzp}qB6u&Q({IDR?gYm}R2w9}8_`{^y7_fjr8e6CTWdY4P@U#Oa z1bL4n`9|0q&n3bh=KG5Bi7eHy*$Eacn6)voDCXOTk@TBmyCz%;O7#J>ty#y*F)FW? zGxQmGni(63Gxq7+kG8F=XyHsYQUs2JYsfAh=d+ra+@p5{Fn;l~_X2ynL{KIIlUk#V z%>=i}8da47FD(Uv)74=^ei2ruA_}^&vdfA;fA#0~od-tz8H0mbhTuEQP_?t#$n(~D z#%uFRw?t8HoJvE6y$mLw7p%{>YQ*-A73h4g++Ed=BQ9EB@NFknc}Ndk!__=jpfhI$ zP1tsPJ{-!lZffKjRXoan;trDORTdS2v7rl*&opds%5|U3+R8mEHE9T#tgL%YX+^<4 zH7Nba1CJGgz~7wUnk{$Bf3x8oM!o=ez|QxQLSI}p!Atf6VPK({vy%u^z!mnNw%z9Z zkL$n34r;z^_X=W++12^|CW{`z2SFHOMMuB7hGW-FV-O>#C&N|CS>r%mc%wO$4u_>ckjNs-eA_ddA88p-?3juI6I{aep+Uc(m(8os z;AKl@Klj6qXP-TTIymQ;MDYkH9lcv?^XsyjcqJ%F{uK7SXPU!d_1d=V1uJ?V-%_;a zA+);C723JvseCC$hle!I41IS_>G1a`>%y#y+Cmfl6L(;-EX1u#26Zy)^ht;D`}wMi z+1w&nK|7=S+6k>Qt4*F4#35H2W3618>$KdvH|FHA;2)6*l0<5er?3wgZjq-UU%BR} zbmjxB`Y3GW3%q_;VavUb0&Glc=q6|LfO6*rN9Mg~SwiM*SK9F&^YEV){pV4Lzbcq} zH(yxqMmC79T|WNhl_}#|3-9^3G2#&Wt_(ABtSB>#=PF)zNBKf$jk;zJQum)hE)4GG z#Hyu+&&PT@^vPv3yBR#@RQ`ihbp4=l&us!8^6MqbKS)0C5Nz`=w4!3BpjoNu49!_M z*z|5EE7j?0c=9LC&6&H+`4Sq*geVvB)&@TPI2JMUvp04)N#_X?$hK$gjM*GsLRqjRi_foYj-l4im29%{RTY2()f< z)sfEBYk#+zK5@&rX4`F@!_IR1nnC!!77L8=%S*3;mw2@_>vG)x*YoR#_i7$Sn(m=*vEEBGfWbFn|LK~Ahtt`jIs@!l* zy;J#)$9Z7RN8I@aRMt8~c`;@oWW!H}s6tIAvmWo>4{q`=-lIfibocTF>m#)XZ^c-I0}8$**Z>q`nEMKup(Q)+$Yi zK0ax#wCFRleVmm^hI^wONL{f4+@1e8O~-sJ1^rWytOT)29G8@Ln>x~xv#shW%!w@m z0nC{xl5Fs%(sH9t0=`H;x^k*96m8&G7);h3H82N@vvHj7vih*h3TZg|6nSJ z$$o!CGSFzywK7?iiWsD0$>CxVL9O%+kEA_9%M3@{^R~V0#jm}Y9 zjylUZ2jK<&KL2MERAFF7GV;tI3j^jXGjyX3CoX)Mo<+Vy z7-gt7Pe|CvFx;KCKit*Hf*|c40(4Cv9Q+; zVDGGPsLX5ne-GJ9trt}b0ah~iaS=O?fZwp8z`{fcvl`hUt5d<{F6dn4RPY2rT6q zIBSqRh|u(Zi$K&ZJtO&?fS_|%9QakkJ&ad2Eu?D~$e2x0GW}-HmfFEKSq-yVWF_df zZXe{xHT9;4e9l53x~&R!rGDXQN>@oQT1$K^YWZqmNDb(5DB0>27lQm)AmU%=%QD+j zufrS5raW50=c{`GYisz=+8zd6iU5X!f>Nycpr3uybvEO&_p76jd2p)FxZAC<|pX~*uuikwmP9d#A=MfKj^0(hC;r{4nMdA)i z1|h@$o*Q4_rwgbfPjjsJkDBOVZ(#QA{!38>(GE)~Awy=+pa=;Lf$6`0fGR_2Ae$MN z#llDG&Z>`TP5oYQnF20~82Y-0OmDHJzBa?pjFx4j3pFqm@xZ!uTKHHcb>(%m;ZJg7 z#Uw6KT&`XbzV6@8DhC5;D-*o>GDSz?%>v-D-$M&bW!61bB(_p#0?JTANKI{ie52SJx4u$Jl$LvS?>D~@vqTaurI(LoY)i&vUYPp?M_YtU)&{uj~4X9&mDZL0cE ziT-w4ypWVsm6DwN_1NOe>8ssZMuNKv-wox%l?#gn3~IU#oXJvzEfRY%R?1f z!N2D4^@Hfp_*Uul%k9?zxyPUPTxNHKYFXteTC@T}Tp&HxlA$3(4`RP1Hdz{Ec?P?G zJkn>}F?_n??mAsQqKH+X0LRO2>GWZNh(<_0DWL84{5j^R%_juIAUfrz7l5>A*<>iC zuwgk6AepiJji{yI3>jWZN>hmuf;)9LF`ZTm{hBP67Fa{BN_)ey8eq8lDzD{4I!(3K zN!W}(0p@=r*Itl{aP>|=e+}_qH#|E^Ao1yNqN7aWaBRL>znF@I^eknCI(5zeG_$x% zeipZH_^zI~xP88L4rRmT+yTgC#$J#A>y-g{cCGHk^mTySXYX)%2itcPSPnv{bd&XH}1iHw!SQkE(KoehHZSul&I--X>G&)n%!8t=WZl`b}4hFlkcK(zJ3G-24!klBtB| zwTn~E#T(@}L^6fa<+>Pgr4Rq@$u%4vEXX%v_laMRWzj!vPFfE(R4z31mW*yili*Q% zc*zKy_&IT{O9m4w>wNf%^W}?+(B=__p$t7zBA9?aOl*ivzt&}TWX1WuqiNH<;Xqgg zE;jG8|NXjAEm?NKpnd7K=*Vu@o8Xb^BPS-TnPRdXox@nSb?@*nsz}FCKd$2tTwy=G zPYti(&R5po%EcDjJFS)_I7!*Lgh`(elg?>;GZ$}BqfV)+qq_-P7qmLV!3#v}&QnK) z-PPJFeJekRM*Ey`^`vg)uGXFLWXpp$c>Rs)-iDYZmHu~EDk<27VR22`>Rdi|({VG` z$Ki=TSA8)mGQUZuJuPY#;YXJn+X>f+2HVyYD`y-_RLd-%jm3|z%`E(l{QgFL<*O2!9pxt`vzq$(UzewLqtpZymN6e|6$`;In zIm6pPt{-|XRDl8)UW0r!lXiwLin`@ZmXB+QVV*4uv&D8qOA~fDRWrJ@P{C8Szd5Cb z@*A4v|2c!G-bYBG;++1X1~Q#6uz%;SiSupHektd1_z}w&{dJuKs{-n2ssk!6)!;3Zp9E|_WAvpQoYeV+M&Zz0e-`}Cyt4~N@TFq?mEhc~ZK6|i}9*Sf$iRY9y zRx*)O0Sw2Xxb4tI*;urX7|EPRLI+XG8#7vw%axSu{WVye=+=d%$KHCc`BGK{86NAl zVCfm@B#XvDw&wSo`5A0}q^lTZ+RX^3{jLNpcA!US|-5#4Q@RtC%wL&+!C?55+osT#g7 zO$LbrQ>HcH3b~RNysv?AvF>b1MVOTVXS;S&);VOqFA>1jF+Z?}YLS~uOk&8vD=pEA z6o|jlnSW;e&ENYgdSxZ?nu|e`9LxAqxt>_3SCuRmL6l#{%E35q9g$n`MUaiKfB#1p$6izvGqEU4jrp%`SE>gBkvr9@ED z%Zjx0<0bnl6W|{!IIRW$<-q#mc-A)p!R4r#fk-~A!V^IZ3Bim|HJ!Xdq%*)zVH%r! z%(MSg}YIpGJ3)TPG?Cd;SlHMNP8kNl!{k)EHD5&QyBIR$O8b@9qwKv;mt|)#UWW zD>;5u)A8q{d(hj;2cwaD+6VX7wb?srB6C1Cj;{-}Ra>{mP}cV2mgpEw8b{notB0_$ z-dOU_atpNam%CXeWPMblxG`<}TP|&qJ*@fRuRgkp0Bf70QTAn-+&0e=1a`?DCSpE!A5NUrbDJ`Y%Ox&0dPo>He+cV>5_+c7L!cpS)}=we9c87%`!;bj(l}SX zCJR}Qk(#%hv^+_z`}K3z{yqOvJf_y0ielnAi&Dw{U1(}vU$<39E!9K{z8Z|=2gJelC;ETLLWm^G0zG$%`lB4=_DVraDb;Ons->HE7SFxc zSa4W8s_$pH{OPN<40I;{sU6Nf&G7<3g$lX$aK#5xJ{0yi$5+!N?Qyt}Sax&R#*@Kn zSi^m;D}}}<2mh_cFUWUd#{B(NUN-BSSY9{1{ofM=Y&LI4zp~ZHEdwXv5=MVd%wA`b zua9B%NiI5On!RqIpsT|dKk>xHbzk7C`E%qBa!}Z%&bl{)Q#IoRaQOHbg468q@9$af zzpWd}VHH0@hIB{&4mL!r9555Yf-!J$!@-uh-bn0ny~NeY(d_S%NQKjh!y}-a|6loC zfJTfP`VV_J85u9Hxp{230~B437lMoXP?lp01N-v+Z^DVV0TziIq^0@j10zd$I4V8a zzc$Fo@`CjtD4oUMCEo?a;vunV{?!lEsE4D5g5L!MW6)Br5M`Spv12)t!64xBj|N5U z&k;b1@|zZ@%Ob&CIp$_y8QrYAR~GYm>}|{J ze5QFI%tgjq=kYtby_!X2<@42!i+sD02%WDU z>Z={&U67NmJ9WlinADj39WR@Mb}$997W@58_R3tv(N>6zIFb<%c$wX1hN*zO7i*fVV8U6CWiu2*IlgBiczd}YMLCDwb-2XZLeuO6ghh(;&rF9b zHvhK`ad_F+(_vhB^>;bpJ3*yaauw^{sZd0%j7$rM|XF%5dbcVU!QC$s|H{6Sk0I z-Q2grxH;UJ9yLOejNo90`MRNdSGpb)sY5Pq<@E`BvlnV`eV!EcfH(dVkdHC?cI>x?sL#ZH3-IsT92A_}J3+7e4XuL(< zmmU`!Ls5Sxgz``YaLw^4~77V{TMqkJk_+|r71X{5< zv;PPHA*?Qh4t4CFtZ4a!#ga9A$xk>;TY?V#vhv<^KIj~+D~<|cE^iSzbNOfwM%^kp zw4CP~MYxN@yQ}@)q(T&o^FtAbR;EAG+3eu~hiOXWy}zu)Y-kETMKzP_mx(p$1-P2@ zT78BdsiV3G{UKUbPD9+xP&h&umq;QyChfXnHqsF(M2Gol_l;>nSg@INgb2Jl9U)vQ z2%{dR_9AZT+}sQ*u9je@h(gXogDFr zg{4aa)dl|V$%F-jWsVY}j6Y=82;IGRl6V1OBYV_q0pXb=f!Ia&BzSsl_@(Oncl*aU zJgHU~4w)BdqS9`?Y9t=Te&9Y~4nb*D4+KYGpzQF%Kn6^|ilqZUd}(0c{pWusb0mF* zhFB!P;fI!EG!ju8MA^d9ZZ+lv*<~<*;*RhiMcN&Z>Fr835RvI+t;>sb0$?{vJP>UW zrGY^Y6xpr-Sm*;^3D_w7&h!A!febr`Gcr0&0_(B70s5mbwnt%Tk1$+(flP>hBzfJ= z{Ais>tbIkZv8;R@GS2zingz{>4Da9qB!F}2{Lk+^zyAa^C|ML}Nkm6M$mvZ-fuywYZ3!Vm|`7%fz$8 znqm+&?hc?(;C%Fx&jt_WN`@dgxo9^dXxAa|cQ&q5m;!4g_31-ak&$NnfDo-ZM=m-!OoL zp1I_u5?E4yL1D2IN(AF5C^WRRaS5ZK8VRnGckIlid#;%h*~cqJi=M>j*jr z3S4Ua`*DtEn6GU$UM^&79 z4O?&ZCieXl3HBXhUO#Pew*fs+rLd|&vZ%{&B)A{=B_6r^e1@ZLlfpm=(*3(W~m~Jwedz4KYp3|z35RX#%?rFYaGB58F6uChOziG@cwv=Gntvz(> z%XFr)%uhPNf~u5+Xk9wrHFbo50syez9|K2MtMVwEz!EK&#tOr$_4NZ*$_X>*EdfDo)2v3_dr?&*2U;cE<3{cQ|gpmrU( zMoj_8q}TvJ;MD)_qNf1sxfD>Y1j-+w=sy(xe<^af{7u0EfiT{t_#hUpF-V^hQMB1Z zP>O&ha1)OD39ytua8wQ8G6F^K1(1t7fR=$v)-iT009YJ+jI9D(#5Rd&-UHULNt6vp z4pv|*JiCZWX^DSk_j*z1x? ziJsY{#{A!$Tb?hoALlF0 z+wo(|UXapjbsHvWdh%M2d8uX?ABgd75=jyS#vUCh$OB1M{RfJB_V(@j7M|M6C`0PV z&pNPxJicmA{pGu<DR);R54Yr3aOTm?HQ z2^&JDOMXrfngZeG@gxusl7LDRJfh8p+--Oo+u_OkwCg|-61OkCs2;n118tJuD zGw-iB8W4d=gUc)7kUO;Z+*$~OzOB9ctE3jOEzOt0Leh)HIZF_=v2``R zzRuNr%6YP>KwQ*wp4wCPlWSyr#}V90(U8z_tP~FNY0{zn=VuHm`?wa##~4DQgA3&A00KB}V4ZR6(K<7i8PBCMXLo6R z3l_mA)_@~GtKw0Q+~+s-;>PxmFZWfUrB;m8Sxlx*7k_oKm|+Jz?mk(k1`X`9RuO-( z5?L!1b{^5e@ zLsnCZGt|HSf_LmVh$MrN6@E|)D-%20QV%>8$+<#Y0iS6(eUT=GZ{SVVtasfBHy?GY zY#9^5PuJswY%;rvD;Hl>hP1Ccuk4k)6Lc!I=~r%KkGWh7y1W!yJ?l1(F4Ae9CGwXs zWAca_c*bJ$!$BnOqfcz$LZBE9XZVw#ieW1b7f4(MZa<4Zja+}rGry8{-e{hK{TifoXQ|qvOk}W!N0T-Lo{{b)e>BV|%Y=XPgb1XV4dYp0~ot|}| z-c$!+>m95(@n+1XDOi{Z!;BYsnH) z_XA3yZ&*xV_dj}WQOZgzJEJeI@2umex1FlK5qy2Wt&OZjF_R02{jsvhj3`}mWN>RJ zk^{fVgCEJgIzEy-3l<-Wa5SyDiE?@y_C0oi^pGKHA))Jdg4ayW{`aAM?;M6pN~^pz zn>G5t8mx2neQtcoA4FM?XFCGxY`w(?`lQa<`T$%fP2PYc%(e9PgC_EBSe zMtLrpBVX1q;gI)(@WqRQiPyn&b$xs5gW2=k0bCosQX2#b@2Ot%aI6uhsX+9pWaJgt z$J}V3M=R|Kw|h002UX=gUprYFea$L(hS+ptyLjPOQVzu)3}! zI)>Y#Mf@Y(og|rsy~LU%_|6|@wjEL8j04B1B!u2#zpil?1$-bLTylxI?u`7NB3lpd z7KwyMJAo-ak`;IEc<4uUm9v|>8HxnLUCxc63L^{@phA>3N?pN-(ISZ?|QoR}RpnHv4I+Y3sm-_R@*xu<`6*QAq=Nr`qt3~RJ%d-~(I8HY?N zc9tu|yw?2vw5|valuf8G#t3im^8m|~l&wph-#QQD*6{4t4q zcZvxbj|f9((k`3?HrHsq7CT)}Cr<+$Z2Tshj*N;Np=?Fevt+Y2MnzP&YUSQ8nZ3A6 z?cAPwtya-P`J>it5gt??)~VfgcwE#^-D7U3_k>vjoy;B(Q{$BxQft$?!p?dyrmQJ*#;fL*`QSJ4HucZ?ZNeneUzG!-{5-S3jj>{6aj>9X` zkoAdZm}PRtUM$LMNvD+XjGou_JxVbpVOJe(t>|YJclD!obLH#7=c-xD+&cHvK{qqZ z5l&YB>_j9EtfR3(pT1%ZwQ+cg0b|vB1~;}+S+6HUUThio=0AM_fAxN5eW@tu9hhi; zTz)s0ZP$gpy1(dRejqcz6&=tbI)VA}NoBifHG7uC_hX3)2eAq9BD{AiuT`;KR)R~% z&KLgVPYPi=yeGgp({o_k8(W4wcFPK`RSxXW+h>Q&x{dZ=0b{ZwMN z9yVXu((#eElX;YlBz&_ff54t}*wgfO?MkohP~&S(@-1FotdD^L*7op24n%t8wNszY zUj5AymY58UcY}n}8pWr(GGWBR%3X_DZD;Yl>&l@(o}OyTY=Y!PM}1|6czQJ)@-$rkcjuy^<_I`e{LQV z{zvn?e-~(XiO1~Xvi^eg%Pf6=^>ID%_Su6({}LLi`aPt@{D&Rvlnq!V)&uJt)c;9n zx%H5qlHehSrBqO>A#~x7Mqkz%cX%>}%u__Px{*(#(3j@qm`1gy#1}&*s0~V!Z!6=8gv})n{ zZyyRrbWy`EnSZ{>uv_v8xv(49-IdDufJICHkk2(xDm=ZfxN*m-v|OQEeHwpAv)u*_ zP;&1YFnj563KWE7*MKZl0x2FJaJsQ*JqA(V^k#mmXa$`P)JPEn$Xq1kx;=_`ziE-q7z?ACGI&|qWPGwL8qj>3Wd<; zr;9RG2 z`|1AW%``F$ESht&psTUVBmb=aIL2q*O{~}GEy&xv<#^{f8S_+19+XY%y24l69>@=A zg?osLPV$w(sCOyF1Vj_Bil!C>YcfTaV6Zt4Qbnvbd`e1K3^O{4Z}5B=VjAPwtecV{ ziD0@?%ueeyez?Af{g)4G+rP7nM4g1;n{Qpr1KR^Z@X;}0*iL!?)&Ehexd3LjRIa)< zTKg<#?L?OcaVm;`BFf_tjRkW1p0HZey{QXI`@#rWrBpN*pYA_BAevdYwvLELSZ#Z_ zX_h7{!tnxWaX?~QTNz-Gd4Gjllmn+RFQf_8-OIhbBn%7^qXUKx$N(NjXa;Xd8qENX zRyvmhGbhqH%mR8t0;_n!5ZQ7p#Ex?9zxxD<-6q=!+$M%`;W9*K@^dm)T1mpp)WK3~ z@-8-T?i2!Fl4;=kjLj9kr1rp#CkT(Tbi}eXLO|a6R?YI`7p`02mGKjXN6SH)NNkWj z9mM2?qIrSYy2oB%seMt>--{nfc4jY;{lK`3Z7~3X1-Ut+1w2N114IcxD~Z4uc>?=9 z5Wznl_$x%9P%y?b)I)S(7zl`Z`HBO|c@M;Mz6R$2@tnFwQh%Df_usW=Wh$!GamW|^ zq@T)thDn#ZQuBXw`GYYZkXVmVQDYC`LcFOEra3z3&<~}YTHEK88dSapj0sN;E z9I)fhS>DiVe4v3(Kkhf2?=7z80SQ2lcUpm5%HJ>~D1Z+gcMQqh4qR~`UI1i!Lk(Pk zSQ!w*cz!ytyEkTw22`d0VFyx}*PNlZ+U<{d@qS_{X$A8F5^N zT>W%33cBEdP%=CUo#cQOMn4BV2?K{bM%jtHDMyb5!b{Ik>E*N`%48s8xR4?iL9rnO zM!^Ikefsd^IoX|tmX8G}5V^xiD^UW-69M+6{a1Jpu4EA}n&YA3)d&%dN-KOg8Ikp` z8$i`Z@kwCN)0Ii%x4uFzfzJGE=>`azTx59zcYoQP?Q5eOlSckBNBAc!kLJH|+FQN$ zeyVB_Ux7RSC%y2Zp8f{J2SnIjQ`dsrftU*r4Q1SmwXbOb8P5}jtW`%)%0+E}ZBkWipMp6wFEB?P0F<4>ebB*i+kJ{v8 z9)gmm5r{%J^m-bID-b#xz41C>hM<&%ArOz+-W>b5XMo;V%yqHA=ju$J`AWV9 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +Spring AOP 如何创建代理 beans | Moralok + + + + + + + + + + + +

+ +
+
+
+ + + + + + + +
+ +
+ +
+ + + + + + + + +
+ + +
+ + 0% +
+ + + + +
+ + + + + +
+ + + +
+ + + + + + + +
+

+ Spring AOP 如何创建代理 beans +

+ + +
+ + + + +
+

Spring AOP 是基于代理实现的,它既支持 JDK 动态代理也支持 CGLib。

+
    +
  • 在什么时候创建代理对象的?
  • +
  • 怎么创建代理对象的?
  • +
+

过程简单图解

+ +

准备工作

    +
  • 引入依赖
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    <dependency>
    <groupId>org.springframework</groupId>
    <artifactId>spring-context</artifactId>
    <version>4.3.12.RELEASE</version>
    </dependency>
    <dependency>
    <groupId>org.springframework</groupId>
    <artifactId>spring-aspects</artifactId>
    <version>4.3.12.RELEASE</version>
    </dependency>
  • +
  • 目标对象类
    1
    2
    3
    4
    5
    6
    public class MathCalculator {

    public int div(int i, int j) {
    return i / j;
    }
    }
  • +
  • 切面类
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    @Aspect
    public class LogAspects {

    @Pointcut("execution(public int com.moralok.aop.MathCalculator.*(..))")
    public void pointCut() {

    }

    @Before("pointCut()")
    public void logStart(JoinPoint joinPoint) {
    System.out.println(joinPoint.getSignature().getName() + "除法运行@Before。。。参数列表为 " + Arrays.asList(joinPoint.getArgs()) + "");
    }

    @After("pointCut()")
    public void logEnd(JoinPoint joinPoint) {
    System.out.println(joinPoint.getSignature().getName() + "除法结束@After。。。");
    }

    @AfterReturning(value = "pointCut()", returning = "result")
    public void logReturn(JoinPoint joinPoint, Object result) {
    System.out.println(joinPoint.getSignature().getName() + "除法正常返回@AfterReturning。。。运行结果 " + result);
    }

    @AfterThrowing(value = "pointCut()", throwing = "e")
    public void logException(JoinPoint joinPoint, Exception e) {
    System.out.println(joinPoint.getSignature().getName() + "除法异常@AfterThrowing。。。异常信息 " + e.getMessage());
    }

    @Around(value = "execution(public String com.moralok.bean.Car.getName(..))")
    public Object logAround(ProceedingJoinPoint joinPoint) throws Throwable {
    System.out.println(joinPoint.getSignature().getName() + " @Around开始");
    Object proceed = joinPoint.proceed();
    System.out.println(joinPoint.getSignature().getName() + " @Around结束");
    return proceed;
    }
    }
  • +
  • 配置类
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    @Configuration
    @EnableAspectJAutoProxy
    public class AopConfig {

    @Bean
    public MathCalculator mathCalculator() {
    return new MathCalculator();
    }

    @Bean
    public LogAspects logAspects() {
    return new LogAspects();
    }
    }
  • +
  • 测试类
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    public class AopTest {

    @Test
    public void aopTest() {
    AnnotationConfigApplicationContext ac = new AnnotationConfigApplicationContext(AopConfig.class);
    MathCalculator mathCalculator = ac.getBean(MathCalculator.class);
    mathCalculator.div(1, 1);
    mathCalculator.div(1, 0);
    ac.close();
    }
    }
  • +
  • Debug 断点的判断条件(可选)
    1
    beanName.equals("mathCalculator")
  • +
+

创建代理 Bean 和创建普通 Bean 的区别

其实创建代理 Bean 的过程和创建普通 Bean 的过程直到进行初始化处理(initializeBean)前都是一样的。更具体地说,如很多资料所言,Spring 创建代理对象的工作,是在应用后置处理器阶段完成的。

+

常规的入口 getBean

mathCalculator 以 getBean 方法为起点,开始创建的过程。

+
1
2
3
4
5
6
@Override
public void preInstantiateSingletons() throws BeansException {
// ...(mathCalculator)
getBean(beanName);
// ...
}
+ +

应用后置处理器

在正常地实例化 Bean 后,初始化 Bean 时,会对 Bean 实例应用后置处理器。

+

可是,究竟是哪一个后置处理器做的呢

+
1
2
3
4
5
6
7
8
9
protected Object initializeBean(final String beanName, final Object bean, RootBeanDefinition mbd) {
// ...
wrappedBean = applyBeanPostProcessorsBeforeInitialization(wrappedBean, beanName);
// ...
invokeInitMethods(beanName, wrappedBean, mbd);
// ...
wrappedBean = applyBeanPostProcessorsAfterInitialization(wrappedBean, beanName);
return wrappedBean;
}
+ +

AnnotationAwareAspectJAutoProxyCreator

在本示例中,创建代理的后置处理器就是 AnnotationAwareAspectJAutoProxyCreator,它继承自 AbstractAutoProxyCreator,AbstractAutoProxyCreator 实现了 BeanPostProcessor 接口。

+

那么,它是什么时候,怎么加入到 beanFactory 中呢

+

PS: 显然,还有其他继承自 AbstractAutoProxyCreator 的后置处理器,暂时不谈。

+

BeanPostProcessor 的方法

postProcessBeforeInitialization 和 postProcessAfterInitialization 方法,前者什么都没做,后者在必要时对 Bean 进行包装。

+
    +
  • AbstractAutoProxyCreator#postProcessAfterInitialization 就是创建代理对象的入口。
  • +
  • wrapIfNecessary 就是将 Bean 包装成代理 Bean 的入口方法
  • +
+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
public abstract class AbstractAutoProxyCreator extends ProxyProcessorSupport
implements SmartInstantiationAwareBeanPostProcessor, BeanFactoryAware {
// ...
@Override
public Object postProcessBeforeInitialization(Object bean, String beanName) {
// 什么都没做
return bean;
}
@Override
public Object postProcessAfterInitialization(Object bean, String beanName) throws BeansException {
if (bean != null) {
Object cacheKey = getCacheKey(bean.getClass(), beanName);
if (!this.earlyProxyReferences.contains(cacheKey)) {
// 如有必要,将 bean 包装成代理对象
return wrapIfNecessary(bean, beanName, cacheKey);
}
}
return bean;
}
// ...
}
+ +

创建代理 Bean 的过程

按需包装成代理 wrapIfNecessary

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
protected Object wrapIfNecessary(Object bean, String beanName, Object cacheKey) {
// 判断是否直接返回 bean
if (beanName != null && this.targetSourcedBeans.contains(beanName)) {
return bean;
}
if (Boolean.FALSE.equals(this.advisedBeans.get(cacheKey))) {
return bean;
}
if (isInfrastructureClass(bean.getClass()) || shouldSkip(bean.getClass(), beanName)) {
this.advisedBeans.put(cacheKey, Boolean.FALSE);
return bean;
}

// 如果有适用于当前 bean 的 advise 则为其创建代理
Object[] specificInterceptors = getAdvicesAndAdvisorsForBean(bean.getClass(), beanName, null);
if (specificInterceptors != DO_NOT_PROXY) {
this.advisedBeans.put(cacheKey, Boolean.TRUE);
Object proxy = createProxy(
bean.getClass(), beanName, specificInterceptors, new SingletonTargetSource(bean));
this.proxyTypes.put(cacheKey, proxy.getClass());
return proxy;
}

this.advisedBeans.put(cacheKey, Boolean.FALSE);
return bean;
}
+ +

AbstractAutoProxyCreator 视角,创建代理

AbstractAutoProxyCreator#createProxy,创建一个 ProxyFactory,将工作交给它处理。

+
    +
  1. 创建一个代理工厂 ProxyFactory
  2. +
  3. 设置相关信息
  4. +
  5. 通过 ProxyFactory 获取代理
  6. +
+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
protected Object createProxy(
Class<?> beanClass, String beanName, Object[] specificInterceptors, TargetSource targetSource) {

if (this.beanFactory instanceof ConfigurableListableBeanFactory) {
AutoProxyUtils.exposeTargetClass((ConfigurableListableBeanFactory) this.beanFactory, beanName, beanClass);
}

ProxyFactory proxyFactory = new ProxyFactory();
proxyFactory.copyFrom(this);

if (!proxyFactory.isProxyTargetClass()) {
if (shouldProxyTargetClass(beanClass, beanName)) {
proxyFactory.setProxyTargetClass(true);
}
else {
evaluateProxyInterfaces(beanClass, proxyFactory);
}
}

Advisor[] advisors = buildAdvisors(beanName, specificInterceptors);
proxyFactory.addAdvisors(advisors);
proxyFactory.setTargetSource(targetSource);
customizeProxyFactory(proxyFactory);

proxyFactory.setFrozen(this.freezeProxy);
if (advisorsPreFiltered()) {
proxyFactory.setPreFiltered(true);
}

return proxyFactory.getProxy(getProxyClassLoader());
}
+ +

ProxyFactory 视角,获取代理

ProxyFactory#getProxy,创建一个 AopProxy 并委托它实现 getProxy。

+
+

AopProxy 的含义与职责从字面上有点不好理解。

+
+
1
2
3
public Object getProxy(ClassLoader classLoader) {
return createAopProxy().getProxy(classLoader);
}
+ +

ProxyFactor视角,创建 AopProxy

ProxyFactory#createAopProxy,获取一个 AopProxyFactory 创建 AopProxy。

+
1
2
3
4
5
6
7
protected final synchronized AopProxy createAopProxy() {
if (!this.active) {
activate();
}
// 获取 AopProxy 工厂并创建一个 AopProxy
return getAopProxyFactory().createAopProxy(this);
}
+ +

AopProxyFactory视角,创建 AopProxy

AopProxyFactory#createAopProxy。

+
    +
  • AopProxyFactory 有且仅有一个默认实现 DefaultAopProxyFactory。
  • +
  • createAopProxy 方法会根据配置信息,返回具体实现:开箱即用的有 JdkDynamicAopProxy 或者 ObjenesisCglibAopProxy。
  • +
+

这里的处理,决定了 Spring AOP 会使用哪一种动态代理实现。比如 Spring AOP 默认使用 JDK 动态代理,如果目标对象实现了接口 Spring 会使用 JDK 动态代理,这些结论的依据就在于此。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
public class DefaultAopProxyFactory implements AopProxyFactory, Serializable {

@Override
public AopProxy createAopProxy(AdvisedSupport config) throws AopConfigException {
if (config.isOptimize() || config.isProxyTargetClass() || hasNoUserSuppliedProxyInterfaces(config)) {
Class<?> targetClass = config.getTargetClass();
if (targetClass == null) {
throw new AopConfigException("TargetSource cannot determine target class: " +
"Either an interface or a target is required for proxy creation.");
}
if (targetClass.isInterface() || Proxy.isProxyClass(targetClass)) {
return new JdkDynamicAopProxy(config);
}
return new ObjenesisCglibAopProxy(config);
}
else {
return new JdkDynamicAopProxy(config);
}
}
}
+ +

获取代理 AopProxy#getProxy

AopProxy 视角,获取代理。

+

JDK 动态代理

JdkDynamicAopProxy。

+
1
2
3
4
5
6
@Override
public Object getProxy(ClassLoader classLoader) {
// ...
// JDK 动态代理,已经和 Spring 无关
return Proxy.newProxyInstance(classLoader, proxiedInterfaces, this);
}
+ +
InvocationHandler 的 invoke 方法

根据 Proxy.newProxyInstance(classLoader, proxiedInterfaces, this) 可知,this 也就是 JdkDynamicAopProxy 同时也是一个 InvocationHandler,它必然实现了 invoke 方法,当代理对象调用方法时,就会进入到 invoke 方法中。

+
1
2
3
4
@Override
public Object invoke(Object proxy, Method method, Object[] args) throws Throwable {
// ...
}
+ +

CGLib 动态代理

ObjenesisCglibAopProxy。

+
1
2
3
4
5
6
7
8
@Override
public Object getProxy(ClassLoader classLoader) {
// ...
// CGLib 动态代理,已经和 Spring 无关
Enhancer enhancer = createEnhancer();
// ...
return createProxyClassAndInstance(enhancer, callbacks);
}
+ +
为什么 Spring 中没有依赖 CGLib

你可能会注意到 Spring 中并没有直接依赖 CGLib,像 Enhancer 所在的包是 org.springframework.cglib.proxy。根据文档:

+
+

从 spring 3.2 开始,不再需要将 cglib 添加到类路径中,因为 cglib 类在 org.springframework 下重新打包并分布在 spring-core jar 中。 这样做既是为了方便,也是为了避免与使用不同版本 cglib 的其他项目发生潜在冲突。

+
+

创建代理前的准备

在前面预留了一些问题,当初我在看网上的资料时就有这些困惑。

+

Bean 后置处理器 AspectJAwareAdvisorAutoProxyCreator 在什么时候,怎么加入到 beanFactory 中的?

Debug 停留在 Spring 上下文刷新方法中的 finishBeanFactoryInitialization。

+
1
2
3
4
5
6
7
8
@Override
public void refresh() throws BeansException, IllegalStateException {
// ...
invokeBeanFactoryPostProcessors(beanFactory);
// ...
finishBeanFactoryInitialization(beanFactory);
// ...
}
+ +

从 beanFatory 的 beanDefinitionMap 可以观察到,配置类 AopConfig 中的 MathCalculator 和 LogAspect 的信息已经就位。

+ + +

从 beanFactory 的 beanProcessor 可以观察到,AnnotationAwareAspectJAutoProxyCreator 已经就位。

+ + +

@EnableXXX 的魔法

注解 @EnableXXX 往往伴随着注解 @Import,在 invokeBeanFactoryPostProcessors(beanFactory) 中,工厂后置处理器 ConfigurationClassPostProcessor 会处理它。

+
1
2
3
4
5
6
7
8
@Target(ElementType.TYPE)
@Retention(RetentionPolicy.RUNTIME)
@Documented
@Import(AspectJAutoProxyRegistrar.class)
public @interface EnableAspectJAutoProxy {
boolean proxyTargetClass() default false;
boolean exposeProxy() default false;
}
+ +

在 ConfigurationClassPostProcessor 的处理中,因为 AspectJAutoProxyRegistrar 实现了 ImportBeanDefinitionRegistrar,registerBeanDefinitions 方法会被调用,AnnotationAwareAspectJAutoProxyCreator 的 beanDefinition 随之被注册到 beanFactory,因 AnnotationAwareAspectJAutoProxyCreator 实现了 BeanPostProcessor 被提前创建。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
class AspectJAutoProxyRegistrar implements ImportBeanDefinitionRegistrar {
@Override
public void registerBeanDefinitions(
AnnotationMetadata importingClassMetadata, BeanDefinitionRegistry registry) {
// 如有必要注册 AspectJAnnotationAutoProxyCreator
AopConfigUtils.registerAspectJAnnotationAutoProxyCreatorIfNecessary(registry);
// 根据配置设置一些属性
AnnotationAttributes enableAspectJAutoProxy =
AnnotationConfigUtils.attributesFor(importingClassMetadata, EnableAspectJAutoProxy.class);
if (enableAspectJAutoProxy.getBoolean("proxyTargetClass")) {
AopConfigUtils.forceAutoProxyCreatorToUseClassProxying(registry);
}
if (enableAspectJAutoProxy.getBoolean("exposeProxy")) {
AopConfigUtils.forceAutoProxyCreatorToExposeProxy(registry);
}
}
}
+ +
1
2
3
public static BeanDefinition registerAspectJAnnotationAutoProxyCreatorIfNecessary(BeanDefinitionRegistry registry, Object source) {
return registerOrEscalateApcAsRequired(AnnotationAwareAspectJAutoProxyCreator.class, registry, source);
}
+ +

切面类 LogAspect 的解析是在什么时候?

进入创建 Bean 的方法 createBean 后,除了 doCreateBean,应额外留意 resolveBeforeInstantiation 方法。

+
    +
  1. Object bean = resolveBeforeInstantiation(beanName, mbdToUse),在实例化前进行解析。
  2. +
  3. Object beanInstance = doCreateBean(beanName, mbdToUse, args),创建 Bean 的具体过程。
  4. +
+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
@Override
protected Object createBean(String beanName, RootBeanDefinition mbd, Object[] args) throws BeanCreationException {
// ...
try {
Object bean = resolveBeforeInstantiation(beanName, mbdToUse);
if (bean != null) {
return bean;
}
}
// ...

Object beanInstance = doCreateBean(beanName, mbdToUse, args);
// ...
return beanInstance;
}
+ +

入口方法 resolveBeforeInstantiation

根据注释,该方法给 BeanPostProcessors 一个机会提前返回一个代理对象。在本示例中,返回 null,但是方法在第一次执行后已经提前解析得到 advisors 并缓存。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
protected Object resolveBeforeInstantiation(String beanName, RootBeanDefinition mbd) {
Object bean = null;
if (!Boolean.FALSE.equals(mbd.beforeInstantiationResolved)) {
if (!mbd.isSynthetic() && hasInstantiationAwareBeanPostProcessors()) {
Class<?> targetType = determineTargetType(beanName, mbd);
if (targetType != null) {
// 注意,应用的是实例化前的处理
bean = applyBeanPostProcessorsBeforeInstantiation(targetType, beanName);
if (bean != null) {
// 注意,应用的是初始化后的处理
bean = applyBeanPostProcessorsAfterInitialization(bean, beanName);
}
}
}
mbd.beforeInstantiationResolved = (bean != null);
}
return bean;
}
+ +

InstantiationAwareBeanPostProcessor

应用 InstantiationAwareBeanPostProcessor 的 postProcessBeforeInstantiation。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
protected Object applyBeanPostProcessorsBeforeInstantiation(Class<?> beanClass, String beanName) {
for (BeanPostProcessor bp : getBeanPostProcessors()) {
if (bp instanceof InstantiationAwareBeanPostProcessor) {
InstantiationAwareBeanPostProcessor ibp = (InstantiationAwareBeanPostProcessor) bp;
// 循环依次处理
Object result = ibp.postProcessBeforeInstantiation(beanClass, beanName);
if (result != null) {
return result;
}
}
}
return null;
}
+ +

AnnotationAwareAspectJAutoProxyCreator 不仅仅是一个 BeanPostProcessor,它还是一个 InstantiationAwareBeanPostProcessor。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
public Object postProcessBeforeInstantiation(Class<?> beanClass, String beanName) throws BeansException {
Object cacheKey = getCacheKey(beanClass, beanName);

if (beanName == null || !this.targetSourcedBeans.contains(beanName)) {
if (this.advisedBeans.containsKey(cacheKey)) {
return null;
}
if (isInfrastructureClass(beanClass) || shouldSkip(beanClass, beanName)) {
this.advisedBeans.put(cacheKey, Boolean.FALSE);
return null;
}
}

if (beanName != null) {
TargetSource targetSource = getCustomTargetSource(beanClass, beanName);
if (targetSource != null) {
this.targetSourcedBeans.add(beanName);
Object[] specificInterceptors = getAdvicesAndAdvisorsForBean(beanClass, beanName, targetSource);
Object proxy = createProxy(beanClass, beanName, specificInterceptors, targetSource);
this.proxyTypes.put(cacheKey, proxy.getClass());
return proxy;
}
}

return null;
}
+ +

和 wrapIfNecessary 方法对比,容易发现两者有不少相似的处理。

+ + +
+

注意:以下方法应注意是否被子类重写

+
+

org.springframework.aop.aspectj.autoproxy.AspectJAwareAdvisorAutoProxyCreator#shouldSkip

+
1
2
3
4
5
protected boolean shouldSkip(Class<?> beanClass, String beanName) {
// 查找并缓存 advisors
List<Advisor> candidateAdvisors = findCandidateAdvisors();
// ...
}
+ +

org.springframework.aop.framework.autoproxy.AbstractAdvisorAutoProxyCreator#getAdvicesAndAdvisorsForBean

+
1
2
3
4
protected Object[] getAdvicesAndAdvisorsForBean(Class<?> beanClass, String beanName, TargetSource targetSource) {
List<Advisor> advisors = findEligibleAdvisors(beanClass, beanName);
// ...
}
+ +

org.springframework.aop.framework.autoproxy.AbstractAdvisorAutoProxyCreator#findEligibleAdvisors

+
1
2
3
4
5
protected List<Advisor> findEligibleAdvisors(Class<?> beanClass, String beanName) {
// 查找并缓存 advisors
List<Advisor> candidateAdvisors = findCandidateAdvisors();
// ...
}
+ +

容易注意到两者在创建代理前,都会调用 findCandidateAdvisors 方法查找候选的 advisors,其实这也是我们想要找的对切面类的解析处理所在。

+

查找并缓存 advisors

org.springframework.aop.aspectj.annotation.AnnotationAwareAspectJAutoProxyCreator#findCandidateAdvisors

+
1
2
3
4
5
protected List<Advisor> findCandidateAdvisors() {
List<Advisor> advisors = super.findCandidateAdvisors();
advisors.addAll(this.aspectJAdvisorsBuilder.buildAspectJAdvisors());
return advisors;
}
+ +

org.springframework.aop.aspectj.annotation.BeanFactoryAspectJAdvisorsBuilder#buildAspectJAdvisors

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
public List<Advisor> buildAspectJAdvisors() {
List<String> aspectNames = this.aspectBeanNames;
if (aspectNames == null) {
// 第一次进入,没有缓存
synchronized (this) {
aspectNames = this.aspectBeanNames;
if (aspectNames == null) {
List<Advisor> advisors = new LinkedList<Advisor>();
aspectNames = new LinkedList<String>();
String[] beanNames = BeanFactoryUtils.beanNamesForTypeIncludingAncestors(
this.beanFactory, Object.class, true, false);
for (String beanName : beanNames) {
// ...
// 如果是切面,解析得到 advisors
if (this.advisorFactory.isAspect(beanType)) {
aspectNames.add(beanName);
// ...
if (this.beanFactory.isSingleton(beanName)) {
this.advisorsCache.put(beanName, classAdvisors);
}
else {
this.aspectFactoryCache.put(beanName, factory);
}
}
}
this.aspectBeanNames = aspectNames;
return advisors;
}
}
}

if (aspectNames.isEmpty()) {
return Collections.emptyList();
}
// 以后进来读缓存
List<Advisor> advisors = new LinkedList<Advisor>();
for (String aspectName : aspectNames) {
List<Advisor> cachedAdvisors = this.advisorsCache.get(aspectName);
if (cachedAdvisors != null) {
advisors.addAll(cachedAdvisors);
}
else {
MetadataAwareAspectInstanceFactory factory = this.aspectFactoryCache.get(aspectName);
advisors.addAll(this.advisorFactory.getAdvisors(factory));
}
}
return advisors;
}
+ +

可以通过 beanFactory->beanPostProcessors->aspectJAdvisorsBuilder->advisorsCache 观察 advisors 的查找情况。

+ +
+ + + + + + +
+
+ + + + + + +
+
+ +
+ +
+ + + + + + + + + + + + + + + + + + + + + + + diff --git a/archives/2020/08/index.html b/archives/2020/08/index.html index a9c33bf8..946a50eb 100644 --- a/archives/2020/08/index.html +++ b/archives/2020/08/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -250,13 +250,13 @@

Moralok

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/archives/2020/index.html b/archives/2020/index.html index f021bf2d..e889e830 100644 --- a/archives/2020/index.html +++ b/archives/2020/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -250,13 +250,13 @@

Moralok

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/archives/2023/05/index.html b/archives/2023/05/index.html index 759afb1a..6774e62a 100644 --- a/archives/2023/05/index.html +++ b/archives/2023/05/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -250,13 +250,13 @@

Moralok

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/archives/2023/06/index.html b/archives/2023/06/index.html index 95384496..8e2e84bc 100644 --- a/archives/2023/06/index.html +++ b/archives/2023/06/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -390,13 +390,13 @@

Moralok

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/archives/2023/07/index.html b/archives/2023/07/index.html index 2c2c5ac9..4ece365a 100644 --- a/archives/2023/07/index.html +++ b/archives/2023/07/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -250,13 +250,13 @@

Moralok

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/archives/2023/08/index.html b/archives/2023/08/index.html index f8681164..2cb16038 100644 --- a/archives/2023/08/index.html +++ b/archives/2023/08/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -250,13 +250,13 @@

Moralok

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/archives/2023/11/index.html b/archives/2023/11/index.html index 66cb5643..a3486727 100644 --- a/archives/2023/11/index.html +++ b/archives/2023/11/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -203,6 +203,26 @@

Moralok

2023
+ +
Hexo & NexT.Muse 强力驱动 diff --git a/archives/2023/index.html b/archives/2023/index.html index ed05ed95..6d693c72 100644 --- a/archives/2023/index.html +++ b/archives/2023/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -203,6 +203,26 @@

Moralok

2023
+ +
- -
@@ -433,13 +433,13 @@

Moralok

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/archives/2023/page/2/index.html b/archives/2023/page/2/index.html index 14ca3484..6861fe94 100644 --- a/archives/2023/page/2/index.html +++ b/archives/2023/page/2/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -203,6 +203,26 @@

Moralok

2023
+ +
Hexo & NexT.Muse 强力驱动 diff --git a/archives/index.html b/archives/index.html index cee3fc11..9763b6c5 100644 --- a/archives/index.html +++ b/archives/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -203,6 +203,26 @@

Moralok

2023
+ +
- -
@@ -410,7 +410,7 @@

Moralok

@@ -433,13 +433,13 @@

Moralok

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/archives/page/2/index.html b/archives/page/2/index.html index 95b7b3b3..3ed3ce71 100644 --- a/archives/page/2/index.html +++ b/archives/page/2/index.html @@ -152,13 +152,13 @@

Moralok

@@ -195,7 +195,7 @@

Moralok

- 嗯..! 目前共计 20 篇日志。 继续努力。 + 嗯..! 目前共计 21 篇日志。 继续努力。
@@ -203,6 +203,26 @@

Moralok

2023
+ +
-
-
-
- 2020 -
- - @@ -413,7 +410,7 @@

Moralok

@@ -436,13 +433,13 @@

Moralok

- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/archives/page/3/index.html b/archives/page/3/index.html new file mode 100644 index 00000000..f42f0fd5 --- /dev/null +++ b/archives/page/3/index.html @@ -0,0 +1,292 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +归档 | Moralok + + + + + + + + + + + +
+ +
+
+
+ + + + + +
+ + + + + + + +
+ +
+ +
+ + + + + + + + +
+ + +
+ + 0% +
+ + + + +
+ + + + + +
+
+
+ 嗯..! 目前共计 21 篇日志。 继续努力。 +
+ + +
+ 2020 +
+ + + + +
+
+ + + + + +
+
+ +
+ +
+ + + + + + + + + + + + + + + + + + + + + + + diff --git a/css/main.css b/css/main.css index dcd7eb2b..4e2a1e18 100644 --- a/css/main.css +++ b/css/main.css @@ -2641,7 +2641,7 @@ mark.search-keyword { vertical-align: middle; } .links-of-author a::before { - background: #ffff45; + background: #ffc1ff; display: inline-block; margin-right: 3px; transform: translateY(-2px); diff --git a/index.html b/index.html index 1cb18cda..f9578c62 100644 --- a/index.html +++ b/index.html @@ -152,13 +152,13 @@

Moralok

@@ -191,6 +191,228 @@

Moralok

+
+ + + +
+ + + + + + + +
+

+ +

+ + +
+ + + + +
+

Spring AOP 是基于代理实现的,它既支持 JDK 动态代理也支持 CGLib。

+
    +
  • 在什么时候创建代理对象的?
  • +
  • 怎么创建代理对象的?
  • +
+

过程简单图解

+ +

准备工作

    +
  • 引入依赖
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    <dependency>
    <groupId>org.springframework</groupId>
    <artifactId>spring-context</artifactId>
    <version>4.3.12.RELEASE</version>
    </dependency>
    <dependency>
    <groupId>org.springframework</groupId>
    <artifactId>spring-aspects</artifactId>
    <version>4.3.12.RELEASE</version>
    </dependency>
  • +
  • 目标对象类
    1
    2
    3
    4
    5
    6
    public class MathCalculator {

    public int div(int i, int j) {
    return i / j;
    }
    }
  • +
  • 切面类
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    @Aspect
    public class LogAspects {

    @Pointcut("execution(public int com.moralok.aop.MathCalculator.*(..))")
    public void pointCut() {

    }

    @Before("pointCut()")
    public void logStart(JoinPoint joinPoint) {
    System.out.println(joinPoint.getSignature().getName() + "除法运行@Before。。。参数列表为 " + Arrays.asList(joinPoint.getArgs()) + "");
    }

    @After("pointCut()")
    public void logEnd(JoinPoint joinPoint) {
    System.out.println(joinPoint.getSignature().getName() + "除法结束@After。。。");
    }

    @AfterReturning(value = "pointCut()", returning = "result")
    public void logReturn(JoinPoint joinPoint, Object result) {
    System.out.println(joinPoint.getSignature().getName() + "除法正常返回@AfterReturning。。。运行结果 " + result);
    }

    @AfterThrowing(value = "pointCut()", throwing = "e")
    public void logException(JoinPoint joinPoint, Exception e) {
    System.out.println(joinPoint.getSignature().getName() + "除法异常@AfterThrowing。。。异常信息 " + e.getMessage());
    }

    @Around(value = "execution(public String com.moralok.bean.Car.getName(..))")
    public Object logAround(ProceedingJoinPoint joinPoint) throws Throwable {
    System.out.println(joinPoint.getSignature().getName() + " @Around开始");
    Object proceed = joinPoint.proceed();
    System.out.println(joinPoint.getSignature().getName() + " @Around结束");
    return proceed;
    }
    }
  • +
  • 配置类
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    @Configuration
    @EnableAspectJAutoProxy
    public class AopConfig {

    @Bean
    public MathCalculator mathCalculator() {
    return new MathCalculator();
    }

    @Bean
    public LogAspects logAspects() {
    return new LogAspects();
    }
    }
  • +
  • 测试类
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    public class AopTest {

    @Test
    public void aopTest() {
    AnnotationConfigApplicationContext ac = new AnnotationConfigApplicationContext(AopConfig.class);
    MathCalculator mathCalculator = ac.getBean(MathCalculator.class);
    mathCalculator.div(1, 1);
    mathCalculator.div(1, 0);
    ac.close();
    }
    }
  • +
  • Debug 断点的判断条件(可选)
    1
    beanName.equals("mathCalculator")
  • +
+

创建代理 Bean 和创建普通 Bean 的区别

其实创建代理 Bean 的过程和创建普通 Bean 的过程直到进行初始化处理(initializeBean)前都是一样的。更具体地说,如很多资料所言,Spring 创建代理对象的工作,是在应用后置处理器阶段完成的。

+

常规的入口 getBean

mathCalculator 以 getBean 方法为起点,开始创建的过程。

+
1
2
3
4
5
6
@Override
public void preInstantiateSingletons() throws BeansException {
// ...(mathCalculator)
getBean(beanName);
// ...
}
+ +

应用后置处理器

在正常地实例化 Bean 后,初始化 Bean 时,会对 Bean 实例应用后置处理器。

+

可是,究竟是哪一个后置处理器做的呢

+
1
2
3
4
5
6
7
8
9
protected Object initializeBean(final String beanName, final Object bean, RootBeanDefinition mbd) {
// ...
wrappedBean = applyBeanPostProcessorsBeforeInitialization(wrappedBean, beanName);
// ...
invokeInitMethods(beanName, wrappedBean, mbd);
// ...
wrappedBean = applyBeanPostProcessorsAfterInitialization(wrappedBean, beanName);
return wrappedBean;
}
+ +

AnnotationAwareAspectJAutoProxyCreator

在本示例中,创建代理的后置处理器就是 AnnotationAwareAspectJAutoProxyCreator,它继承自 AbstractAutoProxyCreator,AbstractAutoProxyCreator 实现了 BeanPostProcessor 接口。

+

那么,它是什么时候,怎么加入到 beanFactory 中呢

+

PS: 显然,还有其他继承自 AbstractAutoProxyCreator 的后置处理器,暂时不谈。

+

BeanPostProcessor 的方法

postProcessBeforeInitialization 和 postProcessAfterInitialization 方法,前者什么都没做,后者在必要时对 Bean 进行包装。

+
    +
  • AbstractAutoProxyCreator#postProcessAfterInitialization 就是创建代理对象的入口。
  • +
  • wrapIfNecessary 就是将 Bean 包装成代理 Bean 的入口方法
  • +
+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
public abstract class AbstractAutoProxyCreator extends ProxyProcessorSupport
implements SmartInstantiationAwareBeanPostProcessor, BeanFactoryAware {
// ...
@Override
public Object postProcessBeforeInitialization(Object bean, String beanName) {
// 什么都没做
return bean;
}
@Override
public Object postProcessAfterInitialization(Object bean, String beanName) throws BeansException {
if (bean != null) {
Object cacheKey = getCacheKey(bean.getClass(), beanName);
if (!this.earlyProxyReferences.contains(cacheKey)) {
// 如有必要,将 bean 包装成代理对象
return wrapIfNecessary(bean, beanName, cacheKey);
}
}
return bean;
}
// ...
}
+ +

创建代理 Bean 的过程

按需包装成代理 wrapIfNecessary

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
protected Object wrapIfNecessary(Object bean, String beanName, Object cacheKey) {
// 判断是否直接返回 bean
if (beanName != null && this.targetSourcedBeans.contains(beanName)) {
return bean;
}
if (Boolean.FALSE.equals(this.advisedBeans.get(cacheKey))) {
return bean;
}
if (isInfrastructureClass(bean.getClass()) || shouldSkip(bean.getClass(), beanName)) {
this.advisedBeans.put(cacheKey, Boolean.FALSE);
return bean;
}

// 如果有适用于当前 bean 的 advise 则为其创建代理
Object[] specificInterceptors = getAdvicesAndAdvisorsForBean(bean.getClass(), beanName, null);
if (specificInterceptors != DO_NOT_PROXY) {
this.advisedBeans.put(cacheKey, Boolean.TRUE);
Object proxy = createProxy(
bean.getClass(), beanName, specificInterceptors, new SingletonTargetSource(bean));
this.proxyTypes.put(cacheKey, proxy.getClass());
return proxy;
}

this.advisedBeans.put(cacheKey, Boolean.FALSE);
return bean;
}
+ +

AbstractAutoProxyCreator 视角,创建代理

AbstractAutoProxyCreator#createProxy,创建一个 ProxyFactory,将工作交给它处理。

+
    +
  1. 创建一个代理工厂 ProxyFactory
  2. +
  3. 设置相关信息
  4. +
  5. 通过 ProxyFactory 获取代理
  6. +
+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
protected Object createProxy(
Class<?> beanClass, String beanName, Object[] specificInterceptors, TargetSource targetSource) {

if (this.beanFactory instanceof ConfigurableListableBeanFactory) {
AutoProxyUtils.exposeTargetClass((ConfigurableListableBeanFactory) this.beanFactory, beanName, beanClass);
}

ProxyFactory proxyFactory = new ProxyFactory();
proxyFactory.copyFrom(this);

if (!proxyFactory.isProxyTargetClass()) {
if (shouldProxyTargetClass(beanClass, beanName)) {
proxyFactory.setProxyTargetClass(true);
}
else {
evaluateProxyInterfaces(beanClass, proxyFactory);
}
}

Advisor[] advisors = buildAdvisors(beanName, specificInterceptors);
proxyFactory.addAdvisors(advisors);
proxyFactory.setTargetSource(targetSource);
customizeProxyFactory(proxyFactory);

proxyFactory.setFrozen(this.freezeProxy);
if (advisorsPreFiltered()) {
proxyFactory.setPreFiltered(true);
}

return proxyFactory.getProxy(getProxyClassLoader());
}
+ +

ProxyFactory 视角,获取代理

ProxyFactory#getProxy,创建一个 AopProxy 并委托它实现 getProxy。

+
+

AopProxy 的含义与职责从字面上有点不好理解。

+
+
1
2
3
public Object getProxy(ClassLoader classLoader) {
return createAopProxy().getProxy(classLoader);
}
+ +

ProxyFactor视角,创建 AopProxy

ProxyFactory#createAopProxy,获取一个 AopProxyFactory 创建 AopProxy。

+
1
2
3
4
5
6
7
protected final synchronized AopProxy createAopProxy() {
if (!this.active) {
activate();
}
// 获取 AopProxy 工厂并创建一个 AopProxy
return getAopProxyFactory().createAopProxy(this);
}
+ +

AopProxyFactory视角,创建 AopProxy

AopProxyFactory#createAopProxy。

+
    +
  • AopProxyFactory 有且仅有一个默认实现 DefaultAopProxyFactory。
  • +
  • createAopProxy 方法会根据配置信息,返回具体实现:开箱即用的有 JdkDynamicAopProxy 或者 ObjenesisCglibAopProxy。
  • +
+

这里的处理,决定了 Spring AOP 会使用哪一种动态代理实现。比如 Spring AOP 默认使用 JDK 动态代理,如果目标对象实现了接口 Spring 会使用 JDK 动态代理,这些结论的依据就在于此。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
public class DefaultAopProxyFactory implements AopProxyFactory, Serializable {

@Override
public AopProxy createAopProxy(AdvisedSupport config) throws AopConfigException {
if (config.isOptimize() || config.isProxyTargetClass() || hasNoUserSuppliedProxyInterfaces(config)) {
Class<?> targetClass = config.getTargetClass();
if (targetClass == null) {
throw new AopConfigException("TargetSource cannot determine target class: " +
"Either an interface or a target is required for proxy creation.");
}
if (targetClass.isInterface() || Proxy.isProxyClass(targetClass)) {
return new JdkDynamicAopProxy(config);
}
return new ObjenesisCglibAopProxy(config);
}
else {
return new JdkDynamicAopProxy(config);
}
}
}
+ +

获取代理 AopProxy#getProxy

AopProxy 视角,获取代理。

+

JDK 动态代理

JdkDynamicAopProxy。

+
1
2
3
4
5
6
@Override
public Object getProxy(ClassLoader classLoader) {
// ...
// JDK 动态代理,已经和 Spring 无关
return Proxy.newProxyInstance(classLoader, proxiedInterfaces, this);
}
+ +
InvocationHandler 的 invoke 方法

根据 Proxy.newProxyInstance(classLoader, proxiedInterfaces, this) 可知,this 也就是 JdkDynamicAopProxy 同时也是一个 InvocationHandler,它必然实现了 invoke 方法,当代理对象调用方法时,就会进入到 invoke 方法中。

+
1
2
3
4
@Override
public Object invoke(Object proxy, Method method, Object[] args) throws Throwable {
// ...
}
+ +

CGLib 动态代理

ObjenesisCglibAopProxy。

+
1
2
3
4
5
6
7
8
@Override
public Object getProxy(ClassLoader classLoader) {
// ...
// CGLib 动态代理,已经和 Spring 无关
Enhancer enhancer = createEnhancer();
// ...
return createProxyClassAndInstance(enhancer, callbacks);
}
+ +
为什么 Spring 中没有依赖 CGLib

你可能会注意到 Spring 中并没有直接依赖 CGLib,像 Enhancer 所在的包是 org.springframework.cglib.proxy。根据文档:

+
+

从 spring 3.2 开始,不再需要将 cglib 添加到类路径中,因为 cglib 类在 org.springframework 下重新打包并分布在 spring-core jar 中。 这样做既是为了方便,也是为了避免与使用不同版本 cglib 的其他项目发生潜在冲突。

+
+

创建代理前的准备

在前面预留了一些问题,当初我在看网上的资料时就有这些困惑。

+

Bean 后置处理器 AspectJAwareAdvisorAutoProxyCreator 在什么时候,怎么加入到 beanFactory 中的?

Debug 停留在 Spring 上下文刷新方法中的 finishBeanFactoryInitialization。

+
1
2
3
4
5
6
7
8
@Override
public void refresh() throws BeansException, IllegalStateException {
// ...
invokeBeanFactoryPostProcessors(beanFactory);
// ...
finishBeanFactoryInitialization(beanFactory);
// ...
}
+ +

从 beanFatory 的 beanDefinitionMap 可以观察到,配置类 AopConfig 中的 MathCalculator 和 LogAspect 的信息已经就位。

+ + +

从 beanFactory 的 beanProcessor 可以观察到,AnnotationAwareAspectJAutoProxyCreator 已经就位。

+ + +

@EnableXXX 的魔法

注解 @EnableXXX 往往伴随着注解 @Import,在 invokeBeanFactoryPostProcessors(beanFactory) 中,工厂后置处理器 ConfigurationClassPostProcessor 会处理它。

+
1
2
3
4
5
6
7
8
@Target(ElementType.TYPE)
@Retention(RetentionPolicy.RUNTIME)
@Documented
@Import(AspectJAutoProxyRegistrar.class)
public @interface EnableAspectJAutoProxy {
boolean proxyTargetClass() default false;
boolean exposeProxy() default false;
}
+ +

在 ConfigurationClassPostProcessor 的处理中,因为 AspectJAutoProxyRegistrar 实现了 ImportBeanDefinitionRegistrar,registerBeanDefinitions 方法会被调用,AnnotationAwareAspectJAutoProxyCreator 的 beanDefinition 随之被注册到 beanFactory,因 AnnotationAwareAspectJAutoProxyCreator 实现了 BeanPostProcessor 被提前创建。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
class AspectJAutoProxyRegistrar implements ImportBeanDefinitionRegistrar {
@Override
public void registerBeanDefinitions(
AnnotationMetadata importingClassMetadata, BeanDefinitionRegistry registry) {
// 如有必要注册 AspectJAnnotationAutoProxyCreator
AopConfigUtils.registerAspectJAnnotationAutoProxyCreatorIfNecessary(registry);
// 根据配置设置一些属性
AnnotationAttributes enableAspectJAutoProxy =
AnnotationConfigUtils.attributesFor(importingClassMetadata, EnableAspectJAutoProxy.class);
if (enableAspectJAutoProxy.getBoolean("proxyTargetClass")) {
AopConfigUtils.forceAutoProxyCreatorToUseClassProxying(registry);
}
if (enableAspectJAutoProxy.getBoolean("exposeProxy")) {
AopConfigUtils.forceAutoProxyCreatorToExposeProxy(registry);
}
}
}
+ +
1
2
3
public static BeanDefinition registerAspectJAnnotationAutoProxyCreatorIfNecessary(BeanDefinitionRegistry registry, Object source) {
return registerOrEscalateApcAsRequired(AnnotationAwareAspectJAutoProxyCreator.class, registry, source);
}
+ +

切面类 LogAspect 的解析是在什么时候?

进入创建 Bean 的方法 createBean 后,除了 doCreateBean,应额外留意 resolveBeforeInstantiation 方法。

+
    +
  1. Object bean = resolveBeforeInstantiation(beanName, mbdToUse),在实例化前进行解析。
  2. +
  3. Object beanInstance = doCreateBean(beanName, mbdToUse, args),创建 Bean 的具体过程。
  4. +
+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
@Override
protected Object createBean(String beanName, RootBeanDefinition mbd, Object[] args) throws BeanCreationException {
// ...
try {
Object bean = resolveBeforeInstantiation(beanName, mbdToUse);
if (bean != null) {
return bean;
}
}
// ...

Object beanInstance = doCreateBean(beanName, mbdToUse, args);
// ...
return beanInstance;
}
+ +

入口方法 resolveBeforeInstantiation

根据注释,该方法给 BeanPostProcessors 一个机会提前返回一个代理对象。在本示例中,返回 null,但是方法在第一次执行后已经提前解析得到 advisors 并缓存。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
protected Object resolveBeforeInstantiation(String beanName, RootBeanDefinition mbd) {
Object bean = null;
if (!Boolean.FALSE.equals(mbd.beforeInstantiationResolved)) {
if (!mbd.isSynthetic() && hasInstantiationAwareBeanPostProcessors()) {
Class<?> targetType = determineTargetType(beanName, mbd);
if (targetType != null) {
// 注意,应用的是实例化前的处理
bean = applyBeanPostProcessorsBeforeInstantiation(targetType, beanName);
if (bean != null) {
// 注意,应用的是初始化后的处理
bean = applyBeanPostProcessorsAfterInitialization(bean, beanName);
}
}
}
mbd.beforeInstantiationResolved = (bean != null);
}
return bean;
}
+ +

InstantiationAwareBeanPostProcessor

应用 InstantiationAwareBeanPostProcessor 的 postProcessBeforeInstantiation。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
protected Object applyBeanPostProcessorsBeforeInstantiation(Class<?> beanClass, String beanName) {
for (BeanPostProcessor bp : getBeanPostProcessors()) {
if (bp instanceof InstantiationAwareBeanPostProcessor) {
InstantiationAwareBeanPostProcessor ibp = (InstantiationAwareBeanPostProcessor) bp;
// 循环依次处理
Object result = ibp.postProcessBeforeInstantiation(beanClass, beanName);
if (result != null) {
return result;
}
}
}
return null;
}
+ +

AnnotationAwareAspectJAutoProxyCreator 不仅仅是一个 BeanPostProcessor,它还是一个 InstantiationAwareBeanPostProcessor。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
public Object postProcessBeforeInstantiation(Class<?> beanClass, String beanName) throws BeansException {
Object cacheKey = getCacheKey(beanClass, beanName);

if (beanName == null || !this.targetSourcedBeans.contains(beanName)) {
if (this.advisedBeans.containsKey(cacheKey)) {
return null;
}
if (isInfrastructureClass(beanClass) || shouldSkip(beanClass, beanName)) {
this.advisedBeans.put(cacheKey, Boolean.FALSE);
return null;
}
}

if (beanName != null) {
TargetSource targetSource = getCustomTargetSource(beanClass, beanName);
if (targetSource != null) {
this.targetSourcedBeans.add(beanName);
Object[] specificInterceptors = getAdvicesAndAdvisorsForBean(beanClass, beanName, targetSource);
Object proxy = createProxy(beanClass, beanName, specificInterceptors, targetSource);
this.proxyTypes.put(cacheKey, proxy.getClass());
return proxy;
}
}

return null;
}
+ +

和 wrapIfNecessary 方法对比,容易发现两者有不少相似的处理。

+ + +
+

注意:以下方法应注意是否被子类重写

+
+

org.springframework.aop.aspectj.autoproxy.AspectJAwareAdvisorAutoProxyCreator#shouldSkip

+
1
2
3
4
5
protected boolean shouldSkip(Class<?> beanClass, String beanName) {
// 查找并缓存 advisors
List<Advisor> candidateAdvisors = findCandidateAdvisors();
// ...
}
+ +

org.springframework.aop.framework.autoproxy.AbstractAdvisorAutoProxyCreator#getAdvicesAndAdvisorsForBean

+
1
2
3
4
protected Object[] getAdvicesAndAdvisorsForBean(Class<?> beanClass, String beanName, TargetSource targetSource) {
List<Advisor> advisors = findEligibleAdvisors(beanClass, beanName);
// ...
}
+ +

org.springframework.aop.framework.autoproxy.AbstractAdvisorAutoProxyCreator#findEligibleAdvisors

+
1
2
3
4
5
protected List<Advisor> findEligibleAdvisors(Class<?> beanClass, String beanName) {
// 查找并缓存 advisors
List<Advisor> candidateAdvisors = findCandidateAdvisors();
// ...
}
+ +

容易注意到两者在创建代理前,都会调用 findCandidateAdvisors 方法查找候选的 advisors,其实这也是我们想要找的对切面类的解析处理所在。

+

查找并缓存 advisors

org.springframework.aop.aspectj.annotation.AnnotationAwareAspectJAutoProxyCreator#findCandidateAdvisors

+
1
2
3
4
5
protected List<Advisor> findCandidateAdvisors() {
List<Advisor> advisors = super.findCandidateAdvisors();
advisors.addAll(this.aspectJAdvisorsBuilder.buildAspectJAdvisors());
return advisors;
}
+ +

org.springframework.aop.aspectj.annotation.BeanFactoryAspectJAdvisorsBuilder#buildAspectJAdvisors

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
public List<Advisor> buildAspectJAdvisors() {
List<String> aspectNames = this.aspectBeanNames;
if (aspectNames == null) {
// 第一次进入,没有缓存
synchronized (this) {
aspectNames = this.aspectBeanNames;
if (aspectNames == null) {
List<Advisor> advisors = new LinkedList<Advisor>();
aspectNames = new LinkedList<String>();
String[] beanNames = BeanFactoryUtils.beanNamesForTypeIncludingAncestors(
this.beanFactory, Object.class, true, false);
for (String beanName : beanNames) {
// ...
// 如果是切面,解析得到 advisors
if (this.advisorFactory.isAspect(beanType)) {
aspectNames.add(beanName);
// ...
if (this.beanFactory.isSingleton(beanName)) {
this.advisorsCache.put(beanName, classAdvisors);
}
else {
this.aspectFactoryCache.put(beanName, factory);
}
}
}
this.aspectBeanNames = aspectNames;
return advisors;
}
}
}

if (aspectNames.isEmpty()) {
return Collections.emptyList();
}
// 以后进来读缓存
List<Advisor> advisors = new LinkedList<Advisor>();
for (String aspectName : aspectNames) {
List<Advisor> cachedAdvisors = this.advisorsCache.get(aspectName);
if (cachedAdvisors != null) {
advisors.addAll(cachedAdvisors);
}
else {
MetadataAwareAspectInstanceFactory factory = this.aspectFactoryCache.get(aspectName);
advisors.addAll(this.advisorFactory.getAdvisors(factory));
}
}
return advisors;
}
+ +

可以通过 beanFactory->beanPostProcessors->aspectJAdvisorsBuilder->advisorsCache 观察 advisors 的查找情况。

+ + +
+ + + + + +
+
+ +
+
+
+ + + + + + +
@@ -224,9 +446,15 @@

- - + + + @@ -391,7 +619,7 @@

- + @@ -560,7 +788,7 @@

- + @@ -714,7 +942,7 @@

- + @@ -882,7 +1110,7 @@

- + @@ -1315,7 +1543,7 @@

- + @@ -1548,7 +1776,7 @@

- + @@ -1748,7 +1976,7 @@

- + @@ -1910,7 +2138,7 @@

- + @@ -2026,294 +2254,8 @@

- - - -
- - - - - - - -
-

- -

- - -
- - - - -
-

组织类加载工作:loadClass

Java 程序启动的时候,Java 虚拟机会调用 java.lang.ClassLoader#loadClass(java.lang.String) 加载 main 方法所在的类。

-
1
2
3
public Class<?> loadClass(String name) throws ClassNotFoundException {
return loadClass(name, false);
}
- -

根据注释可知,此方法加载具有指定二进制名称的类,它由 Java 虚拟机调用来解析类引用,调用它等同于调用 loadClass(name, false)

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
protected Class<?> loadClass(String name, boolean resolve)
throws ClassNotFoundException
{
// 以二进制名称获取类加载的锁进行同步
synchronized (getClassLoadingLock(name)) {
// First, check if the class has already been loaded
// 首先检查类是否已加载,根据该方法注释可知:
// 如果当前类加载器已经被 Java 虚拟机记录为具有该二进制名称的类的加载器(initiating loader),Java 虚拟机可以直接返回 Class 对象。
Class<?> c = findLoadedClass(name);
if (c == null) {
long t0 = System.nanoTime();
try {
// 如果类还未加载,先委派给父·类加载器进行加载,如果父·类加载器为 null,则使用虚拟机内建的类加载器进行加载
if (parent != null) {
// 递归调用
c = parent.loadClass(name, false);
} else {
// 递归调用的终结点
c = findBootstrapClassOrNull(name);
}
} catch (ClassNotFoundException e) {
// ClassNotFoundException thrown if class not found
// from the non-null parent class loader
// 当父·类加载器长尝试加载但是失败,捕获异常但是什么都不做,因为接下来,当前类加载器需要自己也尝试加载。
}

if (c == null) {
// If still not found, then invoke findClass in order
// to find the class.
long t1 = System.nanoTime();
// 父·类加载器未找到类,当前类加载器自己找。
c = findClass(name);

// this is the defining class loader; record the stats
sun.misc.PerfCounter.getParentDelegationTime().addTime(t1 - t0);
sun.misc.PerfCounter.getFindClassTime().addElapsedTimeFrom(t1);
sun.misc.PerfCounter.getFindClasses().increment();
}
}
if (resolve) {
resolveClass(c);
}
return c;
}
}
- -

根据注释可知,java.lang.ClassLoader#loadClass(java.lang.String, boolean) 同样是加载“具有指定二进制名称的类”,此方法的实现按以下顺序搜索类:

-
    -
  1. 调用 findLoadedClass(String) 以检查该类是否已加载。
  2. -
  3. 在父·类加载器上调用 loadClass 方法。如果父·类加载器为空,则使用虚拟机内置的类加载器。
  4. -
  5. 调用 findClass(String) 方法来查找该类。
  6. -
-

如果使用上述步骤找到了该类(找到并定义类),并且解析标志为 true,则此方法将对生成的 Class 对象调用 resolveClass(Class) 方法。鼓励 ClassLoader 的子类重写 findClass(String),而不是此方法。除非被重写,否则此方法在整个类加载过程中以 getClassLoadingLock 方法的结果进行同步。

-
-

注意:父·类加载器并非父类·类加载器(当前类加载器的父类),而是当前的类加载器的 parent 属性被赋值另外一个类加载器实例,其含义更接近于“可以委派类加载工作的另一个类加载器(一个帮忙干活的上级)”。虽然绝大多数说法中,当一个类加载器的 parent 值为 null 时,它的父·类加载器是引导类加载器(bootstrap class loader),但是当看到 findBootstrapClassOrNull 方法时,我有点困惑,因为我以为会看到语义类似于 loadClassByBootstrapClassLoader 这样的方法名。从注释和代码的语义上看,bootstrap class loader 不像是任何一个类加载器的父·类加载器,但是从类加载的机制设计上说,它是,只是因为它并非由 Java 语言编写而成,不能实例化并赋值给 parent 属性。findBootstrapClassOrNull 方法的语义更接近于:当一个类加载器的父·类加载器为 null 时,将准备加载的目标类先当作启动类(Bootstrap Class)尝试查找,如果找不到就返回 null

-
-

怎么并行地加载类 getClassLoadingLock

需要加载的类可能很多很多,我们很容易想到如果可以并行地加载类就好了。显然,JDK 的编写者考虑到了这一点。
此方法返回类加载操作的锁对象。为了向后兼容,此方法的默认实现的行为如下。如果此 ClassLoader 对象注册为具备并行能力,则该方法返回与指定类名关联的专用对象。 否则,该方法返回此 ClassLoader 对象。
简单地说,如果 ClassLoader 对象注册为具备并行能力,那么一个 name 一个锁对象,已创建的锁对象保存在 ConcurrentHashMap 类型的 parallelLockMap 中,这样类加载工作可以并行;否则所有类加载工作共用一个锁对象,就是 ClassLoader 对象本身。
这个方案意味着非同名的目标类可以认为在加载时没有冲突?

-
1
2
3
4
5
6
7
8
9
10
11
protected Object getClassLoadingLock(String className) {
Object lock = this;
if (parallelLockMap != null) {
Object newLock = new Object();
lock = parallelLockMap.putIfAbsent(className, newLock);
if (lock == null) {
lock = newLock;
}
}
return lock;
}
- -
什么是 “ClassLoader 对象注册为具有并行能力”呢?

AppClassLoader 中有一段 static 代码。事实上 java.lang.ClassLoader#registerAsParallelCapable 是将 ClassLoader 对象注册为具有并行能力唯一的入口。因此,所有想要注册为具有并行能力的 ClassLoader 都需要调用一次该方法。

-
1
2
3
static {
ClassLoader.registerAsParallelCapable();
}
- -

java.lang.ClassLoader#registerAsParallelCapable 方法有一个注解 @CallerSensitive,这是因为它的代码中调用的 native 方法 sun.reflect.Reflection#getCallerClass() 方法。由注释可知,当且仅当以下所有条件全部满足时才注册成功:

-
    -
  1. 尚未创建调用者的实例(类加载器尚未实例化)
  2. -
  3. 调用者的所有超类(Object 类除外)都注册为具有并行能力。
  4. -
-
怎么保证这两个条件成立呢?
    -
  1. 对于第一个条件,可以通过将调用的代码写在 static 代码块中来实现。如果写在构造器方法里,并且通过单例模式保证只实例化一次可以吗?答案是不行的,后续会解释这个“注册”行为在构造器方法中是如何被使用以及为何不能写在构造器方法里。
  2. -
  3. 对于第二个条件,由于 Java 虚拟机加载类时,总是会先尝试加载其父类,又因为加载类时会先调用 static 代码块,因此父类的 static 代码块总是先于子类的 static 代码块。
  4. -
-

你可以看到 AppClassLoader->URLClassLoader->SecureClassLoader->ClassLoader 均在 static 代码块实现注册,以保证满足以上两个条件。

-
注册工作做了什么?

简单地说就是保存了类加载器所属 ClassSet

-
1
2
3
4
5
6
7
8
@CallerSensitive
protected static boolean registerAsParallelCapable() {
// 获得此方法的调用者的 Class 实例,asSubClass 可以将 Class<?> 类型的 Class 转换为代表指定类的子类的 Class<? extends U> 类型的 Class。
Class<? extends ClassLoader> callerClass =
Reflection.getCallerClass().asSubclass(ClassLoader.class);
// 注册调用者的 Class 为具有并行能力
return ParallelLoaders.register(callerClass);
}
- -

方法 java.lang.ClassLoader.ParallelLoaders#registerParallelLoaders 封装了一组具有并行能力的加载器类型。就是持有 ClassLoaderClass 实例的集合,并保证添加时加同步锁。

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
// private 修饰,只有其外部类 ClassLoader 才可以使用
// static 修饰,内部类如果需要定义 static 方法或者 static 变量,必须用 static 修饰
private static class ParallelLoaders {
// private 修饰构造器方法,不希望这个类被实例化,只想要使用它的静态变量和方法。
private ParallelLoaders() {}

// the set of parallel capable loader types
// 使用 loaderTypes 时通过 synchronized 加同步锁
private static final Set<Class<? extends ClassLoader>> loaderTypes =
Collections.newSetFromMap(
// todo: 为什么使用弱引用来实现?为了卸载类时的垃圾回收?
new WeakHashMap<Class<? extends ClassLoader>, Boolean>());
static {
// 将 ClassLoader 本身注册为具有并行能力
synchronized (loaderTypes) { loaderTypes.add(ClassLoader.class); }
}

/**
* Registers the given class loader type as parallel capabale.
* Returns {@code true} is successfully registered; {@code false} if
* loader's super class is not registered.
*/
static boolean register(Class<? extends ClassLoader> c) {
synchronized (loaderTypes) {
if (loaderTypes.contains(c.getSuperclass())) {
// register the class loader as parallel capable
// if and only if all of its super classes are.
// Note: given current classloading sequence, if
// the immediate super class is parallel capable,
// all the super classes higher up must be too.
// 当且仅当其所有超类都具有并行能力时,才将类加载器注册为具有并行能力。
// 注意:给定当前的类加载顺序(加载类时,Java 虚拟机总是先尝试加载其父类),如果直接超类具有并行能力,则所有更高的超类也必然具有并行能力。
loaderTypes.add(c);
return true;
} else {
return false;
}
}
}

/**
* Returns {@code true} if the given class loader type is
* registered as parallel capable.
*/
static boolean isRegistered(Class<? extends ClassLoader> c) {
synchronized (loaderTypes) {
return loaderTypes.contains(c);
}
}
}
- -
“注册”怎么和锁产生联系?

但是以上的注册过程只是起到一个“标记”作用,没有涉及和锁相关的代码,那么这个“标记”是怎么和真正的锁产生联系呢?ClassLoader 提供了三个构造器方法:

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
private ClassLoader(Void unused, ClassLoader parent) {
// 由 private 修饰,不允许子类重写
this.parent = parent;
if (ParallelLoaders.isRegistered(this.getClass())) {
// 如果类加载器已经注册为具有并行能力,则做一些赋值操作
parallelLockMap = new ConcurrentHashMap<>();
// 保存 package->certs 的 map 映射,相关的工作也可以并行进行
package2certs = new ConcurrentHashMap<>();
assertionLock = new Object();
} else {
// no finer-grained lock; lock on the classloader instance
parallelLockMap = null;
package2certs = new Hashtable<>();
assertionLock = this;
}
}

// 由 protect 修饰,允许子类重写,传递了父·类加载器。
protected ClassLoader(ClassLoader parent) {
this(checkCreateClassLoader(), parent);
}

// 由 protect 修饰,允许子类重写,父·类加载器使用 getSystemClassLoader 方法返回的系统类加载器。
protected ClassLoader() {
this(checkCreateClassLoader(), getSystemClassLoader());
}
- -

ClassLoader 的构造器方法最终都调用 private 修饰的 java.lang.ClassLoader#ClassLoader(java.lang.Void, java.lang.ClassLoader),又因为父类的构造器方法总是先于子类的构造器方法被执行,这样一来,所有继承 ClassLoader 的类加载器在创建的时候都会根据在创建实例之前是否注册为具有并行能力而做不同的操作。

-
为什么注册的代码不能写在构造器方法里?

使用“注册”的代码也解释了 java.lang.ClassLoader#registerAsParallelCapable 为了满足调用成功的第一个条件为什么不能写在构造器方法中,因为使用这个机制的代码先于你在子类构造器方法里编写的代码被执行。
同时,不论是 loadLoader 还是 getClassLoadingLock 都是由 protect 修饰,允许子类重写,来自定义并行加载类的能力。

-
-

todo: 讨论自定义类加载器的时候,印象里似乎对并行加载类的提及比较少,之后留意一下。

-
-

检查目标类是否已加载

加载类之前显然需要检查目标类是否已加载,这项工作最终是交给 native 方法,在虚拟机中执行,就像在黑盒中一样。
todo: 不同类加载器同一个类名会如何判定?

-
1
2
3
4
5
6
7
protected final Class<?> findLoadedClass(String name) {
if (!checkName(name))
return null;
return findLoadedClass0(name);
}

private native final Class<?> findLoadedClass0(String name);
- -

保证核心类库的安全性:双亲委派模型

正如在代码和注释中所看到的,正常情况下,类的加载工作先委派给自己的父·类加载器,即 parent 属性的值——另一个类加载器实例。一层一层向上委派直到 parentnull,代表类加载工作会尝试先委派给虚拟机内建的 bootstrap class loader 处理,然后由 bootstrap class loader 首先尝试加载。如果被委派方加载失败,委派方会自己再尝试加载。
正常加载类的是应用类加载器 AppClassLoader,它的 parentExtClassLoaderExtClassLoaderparentnull

-
-

在网上也能看到有人提到以前大家称之为“父·类加载器委派机制”,“双亲”一词易引人误解。

-
-
为什么要用这套奇怪的机制

这样设计很明显的一个目的就是保证核心类库的类加载安全性。比如 Object 类,设计者不希望编写代码的人重新写一个 Object 类并加载到 Java 虚拟机中,但是加载类的本质就是读取字节数据传递给 Java 虚拟机创建一个 Class 实例,使用这套机制的目的之一就是为了让核心类库先加载,同时先加载的类不会再次被加载。

-

通常流程如下:

-
    -
  1. AppClassLoader 调用 loadClass 方法,先委派给 ExtClassLoader
  2. -
  3. ExtClassLoader 调用 loadClass 方法,先委派给 bootstrap class loader
  4. -
  5. bootstrap class loader 在其设置的类路径中无法找到 BananaTest 类,抛出 ClassNotFoundException 异常。
  6. -
  7. ExtClassLoader 捕获异常,然后自己调用 findClass 方法尝试进行加载。
  8. -
  9. ExtClassLoader 在其设置的类路径中无法找到 BananaTest 类,抛出 ClassNotFoundException 异常。
  10. -
  11. AppClassLoader 捕获异常,然后自己调用 findClass 方法尝试进行加载。
  12. -
-

注释中提到鼓励重写 findClass 方法而不是 loadClass,因为正是该方法实现了所谓的“双亲委派模型”,java.lang.ClassLoader#findClass 实现了如何查找加载类。如果不是专门为了破坏这个类加载模型,应该选择重写 findClass;其次是因为该方法中涉及并行加载类的机制。

-

查找类资源:findClass

默认情况下,类加载器在自己尝试进行加载时,会调用 java.lang.ClassLoader#findClass 方法,该方法由子类重写。AppClassLoaderExtClassLoader 都是继承 URLClassLoader,而 URLClassLoader 重写了 findClass 方法。根据注释可知,该方法会从 URL 搜索路径查找并加载具有指定名称的类。任何引用 Jar 文件的 URL 都会根据需要加载并打开,直到找到该类。

-

过程如下:

-
    -
  1. name 转换为 path,比如 com.example.BananaTest 转换为 com/example/BananaTest.class
  2. -
  3. 使用 URL 搜索路径 URLClassPathpath 中获取 Resource,本质上就是轮流将可能存放的目录列表拼接上文件路径进行查找。
  4. -
  5. 调用 URLClassLoader 的私有方法 defineClass,该方法调用父类 SecureClassLoaderdefineClass 方法。
  6. -
-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
protected Class<?> findClass(final String name)
throws ClassNotFoundException
{
final Class<?> result;
try {
// todo:
result = AccessController.doPrivileged(
new PrivilegedExceptionAction<Class<?>>() {
public Class<?> run() throws ClassNotFoundException {
// 将 name 转换为 path
String path = name.replace('.', '/').concat(".class");
// 从 URLClassPath 中查找 Resource
Resource res = ucp.getResource(path, false);
if (res != null) {
try {
return defineClass(name, res);
} catch (IOException e) {
throw new ClassNotFoundException(name, e);
} catch (ClassFormatError e2) {
if (res.getDataError() != null) {
e2.addSuppressed(res.getDataError());
}
throw e2;
}
} else {
return null;
}
}
}, acc);
} catch (java.security.PrivilegedActionException pae) {
throw (ClassNotFoundException) pae.getException();
}
if (result == null) {
throw new ClassNotFoundException(name);
}
return result;
}
- -

查找类的目录列表:URLClassPath

URLClassLoader 拥有一个 URLClassPath 类型的属性 ucp。由注释可知,URLClassPath 类用于维护一个 URL 的搜索路径,以便从 Jar 文件和目录中加载类和资源。
URLClassPath 的核心构造器方法:

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
public URLClassPath(URL[] urls,
URLStreamHandlerFactory factory,
AccessControlContext acc) {
// 将 urls 保存到 ArrayList 类型的属性 path 中,根据注释,path 的含义为 URL 的原始搜索路径。
for (int i = 0; i < urls.length; i++) {
path.add(urls[i]);
}
// 将 urls 保存到 Stack 类型的属性 urls 中,根据注释,urls 的含义为未打开的 URL 列表。
push(urls);
if (factory != null) {
// 如果 factory 不为 null,使用它创建一个 URLStreamHandler 实例处理 Jar 文件。
jarHandler = factory.createURLStreamHandler("jar");
}
if (DISABLE_ACC_CHECKING)
this.acc = null;
else
this.acc = acc;
}
- -
URLClassPath#getResource

URLClassLoader 调用 sun.misc.URLClassPath#getResource(java.lang.String, boolean) 方法获取指定名称对应的资源。根据注释,该方法会查找 URL 搜索路径上的第一个资源,如果找不到资源,则返回 null
显然,这里的 Loader 不是我们前面提到的类加载器。LoaderURLClassPath 的内部类,用于表示根据一个基本 URL 创建的资源和类的加载器。也就是说一个基本 URL 对应一个 Loader

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
public Resource getResource(String name, boolean check) {
if (DEBUG) {
System.err.println("URLClassPath.getResource(\"" + name + "\")");
}

Loader loader;
// 获取缓存(默认没有用)
int[] cache = getLookupCache(name);
// 不断获取下一个 Loader 来获取 Resource,直到获取到或者没有下一个 Loader
for (int i = 0; (loader = getNextLoader(cache, i)) != null; i++) {
Resource res = loader.getResource(name, check);
if (res != null) {
return res;
}
}
return null;
}
- -
URLClassPath#getNextLoader

获取下一个 Loader,其实根据 index 从一个存放已创建 LoaderArrayList 中获取。

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
private synchronized Loader getNextLoader(int[] cache, int index) {
if (closed) {
return null;
}
if (cache != null) {
if (index < cache.length) {
Loader loader = loaders.get(cache[index]);
if (DEBUG_LOOKUP_CACHE) {
System.out.println("HASCACHE: Loading from : " + cache[index]
+ " = " + loader.getBaseURL());
}
return loader;
} else {
return null; // finished iterating over cache[]
}
} else {
// 获取 Loader
return getLoader(index);
}
}
- -
URLClassPath#getLoader(int)
    -
  1. index 到存放已创建 Loader 的列表中去获取(调用方传入的 index0 开始不断递增直到超过范围)。
  2. -
  3. 如果 index 超过范围,说明已有的 Loader 都找不到目标 Resource,需要到未打开的 URL 中查找。
  4. -
  5. 从未打开的 URL 中取出(pop)一个来创建 Loader,如果 urls 已经为空,则返回 null
  6. -
-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
private synchronized Loader getLoader(int index) {
if (closed) {
return null;
}
// Expand URL search path until the request can be satisfied
// or the URL stack is empty.
while (loaders.size() < index + 1) {
// Pop the next URL from the URL stack
// 如果 index 超过数组范围,需要从未打开的 URL 中取出一个,创建 Loader 并返回
URL url;
synchronized (urls) {
if (urls.empty()) {
return null;
} else {
url = urls.pop();
}
}
// Skip this URL if it already has a Loader. (Loader
// may be null in the case where URL has not been opened
// but is referenced by a JAR index.)
String urlNoFragString = URLUtil.urlNoFragString(url);
if (lmap.containsKey(urlNoFragString)) {
continue;
}
// Otherwise, create a new Loader for the URL.
Loader loader;
try {
// 根据 URL 创建 Loader
loader = getLoader(url);
// If the loader defines a local class path then add the
// URLs to the list of URLs to be opened.
URL[] urls = loader.getClassPath();
if (urls != null) {
push(urls);
}
} catch (IOException e) {
// Silently ignore for now...
continue;
} catch (SecurityException se) {
// Always silently ignore. The context, if there is one, that
// this URLClassPath was given during construction will never
// have permission to access the URL.
if (DEBUG) {
System.err.println("Failed to access " + url + ", " + se );
}
continue;
}
// Finally, add the Loader to the search path.
validateLookupCache(loaders.size(), urlNoFragString);
loaders.add(loader);
lmap.put(urlNoFragString, loader);
}
if (DEBUG_LOOKUP_CACHE) {
System.out.println("NOCACHE: Loading from : " + index );
}
return loaders.get(index);
}
- -
URLClassPath#getLoader(java.net.URL)

根据指定的 URL 创建 Loader,不同类型的 URL 会返回不同具体实现的 Loader

-
    -
  1. 如果 URL 不是以 / 结尾,认为是 Jar 文件,则返回 JarLoader 类型,比如 file:/C:/Users/xxx/.jdks/corretto-1.8.0_342/jre/lib/rt.jar
  2. -
  3. 如果 URL/ 结尾,且协议为 file,则返回 FileLoader 类型,比如 file:/C:/Users/xxx/IdeaProjects/java-test/target/classes/
  4. -
  5. 如果 URL/ 结尾,且协议不会 file,则返回 Loader 类型。
  6. -
-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
private Loader getLoader(final URL url) throws IOException {
try {
return java.security.AccessController.doPrivileged(
new java.security.PrivilegedExceptionAction<Loader>() {
public Loader run() throws IOException {
String file = url.getFile();
if (file != null && file.endsWith("/")) {
if ("file".equals(url.getProtocol())) {
return new FileLoader(url);
} else {
return new Loader(url);
}
} else {
return new JarLoader(url, jarHandler, lmap, acc);
}
}
}, acc);
} catch (java.security.PrivilegedActionException pae) {
throw (IOException)pae.getException();
}
}
- -

URLClassPath.FileLoader#getResource

FileLoadergetResource 为例,如果文件找到了,就会将文件包装成一个 FileInputStream,再将 FileInputStream 包装成一个 Resource 返回。

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
Resource getResource(final String name, boolean check) {
final URL url;
try {
URL normalizedBase = new URL(getBaseURL(), ".");
url = new URL(getBaseURL(), ParseUtil.encodePath(name, false));

if (url.getFile().startsWith(normalizedBase.getFile()) == false) {
// requested resource had ../..'s in path
return null;
}

if (check)
URLClassPath.check(url);

final File file;
if (name.indexOf("..") != -1) {
file = (new File(dir, name.replace('/', File.separatorChar)))
.getCanonicalFile();
if ( !((file.getPath()).startsWith(dir.getPath())) ) {
/* outside of base dir */
return null;
}
} else {
file = new File(dir, name.replace('/', File.separatorChar));
}

if (file.exists()) {
return new Resource() {
public String getName() { return name; };
public URL getURL() { return url; };
public URL getCodeSourceURL() { return getBaseURL(); };
public InputStream getInputStream() throws IOException
{ return new FileInputStream(file); };
public int getContentLength() throws IOException
{ return (int)file.length(); };
};
}
} catch (Exception e) {
return null;
}
return null;
}
- -

ClassLoader 的搜索路径

从上文可知,ClassLoader 调用 findClass 方法查找类的时候,并不是漫无目的地查找,而是根据设置的类路径进行查找,不同的 ClassLoader 有不同的类路径。

-

以下是通过 IDEA 启动 Java 程序时的命令,可以看到其中通过 -classpath 指定了应用·类加载器 AppClassLoader 的类路径,该类路径除了包含常规的 JRE 的文件路径外,还额外添加了当前 maven 工程编译生成的 target\classes 目录。

-
1
C:\Users\xxx\.jdks\corretto-1.8.0_342\bin\java.exe -agentlib:jdwp=transport=dt_socket,address=127.0.0.1:52959,suspend=y,server=n -javaagent:C:\Users\xxx\AppData\Local\JetBrains\IntelliJIdea2022.3\captureAgent\debugger-agent.jar -Dfile.encoding=UTF-8 -classpath "C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\charsets.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\access-bridge-64.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\cldrdata.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\dnsns.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\jaccess.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\jfxrt.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\localedata.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\nashorn.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunec.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunjce_provider.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunmscapi.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunpkcs11.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\zipfs.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jce.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jfr.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jfxswt.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jsse.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\management-agent.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\resources.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\rt.jar;C:\Users\xxx\IdeaProjects\java-test\target\classes;C:\Program Files\JetBrains\IntelliJ IDEA 2022.3.3\lib\idea_rt.jar" org.example.BananaTest
- -
bootstrap class loader

启动·类加载器 bootstrap class loader,加载核心类库,即 <JRE_HOME>/lib 目录中的部分类库,如 rt.jar,只有名字符合要求的 jar 才能被识别。 启动 Java 虚拟机时可以通过选项 -Xbootclasspath 修改默认的类路径,有三种使用方式:

-
    -
  • -Xbootclasspath::完全覆盖核心类库的类路径,不常用,除非重写核心类库。
  • -
  • -Xbootclasspath/a: 以后缀的方式拼接在原搜索路径后面,常用。
  • -
  • -Xbootclasspath/p: 以前缀的方式拼接再原搜索路径前面.不常用,避免引起不必要的冲突。
  • -
-

IDEA 中编辑启动配置,添加 VM 选项,-Xbootclasspath:C:\Software,里面没有类文件,启动虚拟机失败,提示:

-
1
2
3
4
Error occurred during initialization of VM
java/lang/NoClassDefFoundError: java/lang/Object

进程已结束,退出代码1
- -
ExtClassLoader

扩展·类加载器 ExtClassLoader,加载 <JRE_HOME>/lib/ext/ 目录中的类库。启动 Java 虚拟机时可以通过选项 -Djava.ext.dirs 修改默认的类路径。显然修改不当同样可能会引起 Java 程序的异常。

-
AppClassLoader

应用·类加载器 AppClassLoader ,加载应用级别的搜索路径中的类库。可以使用系统的环境变量 CLASSPATH 的值,也可以在启动 Java 虚拟机时通过选项 -classpath 修改。

-

CLASSPATHWindows 中,多个文件路径使用分号 ; 分隔,而 Linux 中则使用冒号 : 分隔。以下例子表示当前目录和另一个文件路径拼接而成的类路径。

-
    -
  • Windows:.;C:\path\to\classes
  • -
  • Linux:.:/path/to/classes
  • -
-

事实上,AppClassLoader 最终的类路径,不仅仅包含 -classpath 的值,还会包含 -javaagent 指定的值。

-

字节数据转换为 Class 实例:defineClass

方法 defineClass,顾名思义,就是定义类,将字节数据转换为 Class 实例。在 ClassLoader 以及其子类中有很多同名方法,方法内各种处理和包装,最终都是为了使用 name 和字节数据等参数,调用 native 方法获得一个 Class 实例。
以下是定义类时最终可能调用的 native 方法。

-
1
2
3
4
5
6
7
8
9
private native Class<?> defineClass0(String name, byte[] b, int off, int len,
ProtectionDomain pd);

private native Class<?> defineClass1(String name, byte[] b, int off, int len,
ProtectionDomain pd, String source);

private native Class<?> defineClass2(String name, java.nio.ByteBuffer b,
int off, int len, ProtectionDomain pd,
String source);
- -

其方法参数有:

-
    -
  • name,目标类的名称。
  • -
  • byte[]ByteBuffer 类型的字节数据,offlen 只是为了定位传入的字节数组中关于目标类的字节数据,通常分别是 0 和字节数组的长度,毕竟专门构造一个包含无关数据的字节数组很无聊。
  • -
  • ProtectionDomain,保护域,todo:
  • -
  • sourceCodeSource 的位置。
  • -
-

defineClass 方法的调用过程,其实就是从 URLClassLoader 开始,一层一层处理后再调用父类的 defineClass 方法,分别经过了 SecureClassLoaderClassLoader

-

URLClassLoader#defineClass

此方法是再 URLClassLoaderfindClass 方法中,获得正确的 Resource 之后调用的,由 private 修饰。根据注释,它使用从指定资源获取的类字节来定义类,生成的类必须先解析才能使用。

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
private Class<?> defineClass(String name, Resource res) throws IOException {
long t0 = System.nanoTime();
// 获取最后一个 . 的位置
int i = name.lastIndexOf('.');
// 返回资源的 CodeSourceURL
URL url = res.getCodeSourceURL();
if (i != -1) {
// 截取包名 com.example
String pkgname = name.substring(0, i);
// Check if package already loaded.
Manifest man = res.getManifest();
definePackageInternal(pkgname, man, url);
}
// Now read the class bytes and define the class
// 先尝试以 ByteBuffer 的形式返回字节数据,如果资源的输入流不是在 ByteBuffer 之上实现的,则返回 null
java.nio.ByteBuffer bb = res.getByteBuffer();
if (bb != null) {
// Use (direct) ByteBuffer:
// 不常用
CodeSigner[] signers = res.getCodeSigners();
CodeSource cs = new CodeSource(url, signers);
sun.misc.PerfCounter.getReadClassBytesTime().addElapsedTimeFrom(t0);
// 调用 java.security.SecureClassLoader#defineClass(java.lang.String, java.nio.ByteBuffer, java.security.CodeSource)
return defineClass(name, bb, cs);
} else {
// 以字节数组的形式返回资源数据
byte[] b = res.getBytes();
// must read certificates AFTER reading bytes.
// 必须再读取字节数据后读取证书,todo:
CodeSigner[] signers = res.getCodeSigners();
// 根据 URL 和签名者创建 CodeSource
CodeSource cs = new CodeSource(url, signers);
sun.misc.PerfCounter.getReadClassBytesTime().addElapsedTimeFrom(t0);
// 调用 java.security.SecureClassLoader#defineClass(java.lang.String, byte[], int, int, java.security.CodeSource)
return defineClass(name, b, 0, b.length, cs);
}
}
- -

Resource 类提供了 getBytes 方法,此方法以字节数组的形式返回字节数据。

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
public byte[] getBytes() throws IOException {
byte[] b;
// Get stream before content length so that a FileNotFoundException
// can propagate upwards without being caught too early
// 在获取内容长度之前获取流,以便 FileNotFoundException 可以向上传播而不会过早被捕获(todo: 不理解)
// 获取缓存的 InputStream
InputStream in = cachedInputStream();

// This code has been uglified to protect against interrupts.
// Even if a thread has been interrupted when loading resources,
// the IO should not abort, so must carefully retry, failing only
// if the retry leads to some other IO exception.
// 该代码为了防止中断有点丑陋。即使线程在加载资源时被中断,IO 也不应该中止,因此必须小心重试,只有当重试导致其他 IO 异常时才会失败。
// 检测当前线程是否收到中断信号,收到的话则返回 true 且清除中断状态,重新变更为未中断状态。
boolean isInterrupted = Thread.interrupted();
int len;
for (;;) {
try {
// 获取内容长度,顺利的话就跳出循环
len = getContentLength();
break;
} catch (InterruptedIOException iioe) {
// 如果获取内容长度时,线程被中断抛出了异常,捕获后清除中断状态
Thread.interrupted();
isInterrupted = true;
}
}

try {
b = new byte[0];
if (len == -1) len = Integer.MAX_VALUE;
int pos = 0;
while (pos < len) {
int bytesToRead;
if (pos >= b.length) { // Only expand when there's no room
// 如果当前读取位置已经大于等于数组长度
// 本次待读取字节长度 = 剩余未读取长度和 1024 取较小值
bytesToRead = Math.min(len - pos, b.length + 1024);
if (b.length < pos + bytesToRead) {
// 如果当前读取位置 + 本次待读取字节长度 > 数组长度,则创建新数组并复制数据
b = Arrays.copyOf(b, pos + bytesToRead);
}
} else {
// 数组还有空间,待读取字节长度 = 数组剩余空间
bytesToRead = b.length - pos;
}
int cc = 0;
try {
// 读取数据
cc = in.read(b, pos, bytesToRead);
} catch (InterruptedIOException iioe) {
// 如果读取时,线程被中断抛出了异常,捕获后清除中断状态
Thread.interrupted();
isInterrupted = true;
}
if (cc < 0) {
// 如果读取返回值 < 0
if (len != Integer.MAX_VALUE) {
// 且长度并未无限,表示提前检测到 EOF,抛出异常
throw new EOFException("Detect premature EOF");
} else {
// 如果长度无限,表示读到了文件结尾,数组长度大于当前读取位置,创建新数组并复制长度
if (b.length != pos) {
b = Arrays.copyOf(b, pos);
}
break;
}
}
pos += cc;
}
} finally {
try {
in.close();
} catch (InterruptedIOException iioe) {
isInterrupted = true;
} catch (IOException ignore) {}

if (isInterrupted) {
// 如果 isInterrupted 为 true,代表中断过,重新将线程状态置为中断。
Thread.currentThread().interrupt();
}
}
return b;
}
- -

getByteBuffer 之后会缓存 InputStream 以便调用 getBytes 时使用,方法由 synchronized 修饰。

-
1
2
3
4
5
6
private synchronized InputStream cachedInputStream() throws IOException {
if (cis == null) {
cis = getInputStream();
}
return cis;
}
- -

在这个例子中,Resource 的实例是 URLClassPath 中的匿名类 FileLoaderResource 的匿名类的方式创建的。

-
1
2
3
4
5
6
7
8
9
10
11
public InputStream getInputStream() throws IOException
{
// 在该匿名类中,getInputStream 的实现就是简单地根据 FileLoader 中保存的 File 实例创建 FileInputStream 并返回。
return new FileInputStream(file);
}

public int getContentLength() throws IOException
{
// 在该匿名类中,getContentLength 的实现就是简单地根据 FileLoader 中保存的 File 实例获取长度。
return (int)file.length();
};
- -

SecureClassLoader#defineClass

URLClassLoader 继承自 SecureClassLoaderSecureClassLoader 提供并重载了 defineClass 方法,两个方法的注释均比代码长得多。
由注释可知,方法的作用是将字节数据(byte[] 类型或者 ByteBuffer 类型)转换为 Class 类型的实例,有一个可选的 CodeSource 类型的参数。

-
1
2
3
4
5
6
7
8
9
10
11
12
protected final Class<?> defineClass(String name,
byte[] b, int off, int len,
CodeSource cs)
{
return defineClass(name, b, off, len, getProtectionDomain(cs));
}

protected final Class<?> defineClass(String name, java.nio.ByteBuffer b,
CodeSource cs)
{
return defineClass(name, b, getProtectionDomain(cs));
}
- -

方法中只是简单地将 CodeSource 类型的参数转换成 ProtectionDomain 类型,就调用 ClassLoaderdefineClass 方法。

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
private ProtectionDomain getProtectionDomain(CodeSource cs) {
// 如果 CodeSource 为 null,直接返回 null
if (cs == null)
return null;

ProtectionDomain pd = null;
synchronized (pdcache) {
// 先从 Map 缓存中获取 ProtectionDomain
pd = pdcache.get(cs);
if (pd == null) {
// 从 CodeSource 中获取 PermissionCollection
PermissionCollection perms = getPermissions(cs);
// 缓存中没有,则创建一个 ProtectionDomain 并放入缓存
pd = new ProtectionDomain(cs, perms, this, null);
pdcache.put(cs, pd);
if (debug != null) {
debug.println(" getPermissions "+ pd);
debug.println("");
}
}
}
return pd;
}
- -
getPermissions

根据注释可知,此方法会返回给定 CodeSource 对象的权限。此方法由 protect 修饰,AppClassLoaderURLClassLoader 都有重写。当前 ClassLoaderAppClassLoader

-

AppClassLoader#getPermissions,添加允许从类路径加载的任何类退出 VM的权限。

-
1
2
3
4
5
6
7
8
9
protected PermissionCollection getPermissions(CodeSource codesource)
{
// 调用父类 URLClassLoader 的 getPermissions
PermissionCollection perms = super.getPermissions(codesource);
// 允许从类路径加载的任何类退出 VM的权限。
// todo: 这是否自定义的类加载器加载的类,可能不能退出 VM。
perms.add(new RuntimePermission("exitVM"));
return perms;
}
- -

SecureClassLoader#getPermissions,添加一个读文件或读目录的权限。

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
protected PermissionCollection getPermissions(CodeSource codesource)
{
// 调用父类 SecureClassLoader 的 getPermissions
PermissionCollection perms = super.getPermissions(codesource);

URL url = codesource.getLocation();

Permission p;
URLConnection urlConnection;

try {
// FileURLConnection 实例
urlConnection = url.openConnection();
// 允许 read 的 FilePermission 实例
p = urlConnection.getPermission();
} catch (java.io.IOException ioe) {
p = null;
urlConnection = null;
}

if (p instanceof FilePermission) {
// if the permission has a separator char on the end,
// it means the codebase is a directory, and we need
// to add an additional permission to read recursively
// 如果文件路径以文件分隔符结尾,表示目录,需要在末尾添加"-"改为递归读的权限
String path = p.getName();
if (path.endsWith(File.separator)) {
path += "-";
p = new FilePermission(path, SecurityConstants.FILE_READ_ACTION);
}
} else if ((p == null) && (url.getProtocol().equals("file"))) {
String path = url.getFile().replace('/', File.separatorChar);
path = ParseUtil.decode(path);
if (path.endsWith(File.separator))
path += "-";
p = new FilePermission(path, SecurityConstants.FILE_READ_ACTION);
} else {
/**
* Not loading from a 'file:' URL so we want to give the class
* permission to connect to and accept from the remote host
* after we've made sure the host is the correct one and is valid.
*/
URL locUrl = url;
if (urlConnection instanceof JarURLConnection) {
locUrl = ((JarURLConnection)urlConnection).getJarFileURL();
}
String host = locUrl.getHost();
if (host != null && (host.length() > 0))
p = new SocketPermission(host,
SecurityConstants.SOCKET_CONNECT_ACCEPT_ACTION);
}

// make sure the person that created this class loader
// would have this permission

if (p != null) {
final SecurityManager sm = System.getSecurityManager();
if (sm != null) {
final Permission fp = p;
AccessController.doPrivileged(new PrivilegedAction<Void>() {
public Void run() throws SecurityException {
sm.checkPermission(fp);
return null;
}
}, acc);
}
perms.add(p);
}
return perms;
}
- -

SecureClassLoader#getPermissions,延迟设置权限,在创建 ProtectionDomain 时再设置。

-
1
2
3
4
5
6
7
8
protected PermissionCollection getPermissions(CodeSource codesource)
{
// 检查以确保类加载器已初始化。在 SecureClassLoader 构造器最后会用一个布尔变量表示加载器初始化成功。
// 从代码上看,似乎只能保证 SecureClassLoader 的构造器方法已执行完毕?
check();
// ProtectionDomain 延迟绑定,Permissions 继承 PermissionCollection 类。
return new Permissions(); // ProtectionDomain defers the binding
}
- -
ProtectionDomain

ProtectionDomain 的相关构造器参数:

-
    -
  • CodeSource
  • -
  • PermissionCollection,如果不为 null,会设置权限为只读,表示权限在使用过程中不再修改;同时检查是否需要设置拥有全部权限。
  • -
  • ClassLoader
  • -
  • Principal[]
  • -
-

这样看来,SecureClassLoader 为了定义类做的处理,就是简单地创建一些关于权限的对象,并保存了 CodeSource->ProtectionDomain 的映射作为缓存。

-

ClassLoader#defineClass

抽象类 ClassLoader 中最终用于定义类的 native 方法 define0define1define2 都是由 private 修饰的,ClassLoader 提供并重载了 defineClass 方法作为使用它们的入口,这些 defineClass 方法都由 protect final 修饰,这意味着这些方法只能被子类使用,并且不能被重写。

-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
protected final Class<?> defineClass(String name, byte[] b, int off, int len)
throws ClassFormatError
{
return defineClass(name, b, off, len, null);
}

protected final Class<?> defineClass(String name, byte[] b, int off, int len,
ProtectionDomain protectionDomain)
throws ClassFormatError
{
protectionDomain = preDefineClass(name, protectionDomain);
String source = defineClassSourceLocation(protectionDomain);
Class<?> c = defineClass1(name, b, off, len, protectionDomain, source);
postDefineClass(c, protectionDomain);
return c;
}

protected final Class<?> defineClass(String name, java.nio.ByteBuffer b,
ProtectionDomain protectionDomain)
throws ClassFormatError
{
int len = b.remaining();

// Use byte[] if not a direct ByteBufer:
if (!b.isDirect()) {
if (b.hasArray()) {
return defineClass(name, b.array(),
b.position() + b.arrayOffset(), len,
protectionDomain);
} else {
// no array, or read-only array
byte[] tb = new byte[len];
b.get(tb); // get bytes out of byte buffer.
return defineClass(name, tb, 0, len, protectionDomain);
}
}

protectionDomain = preDefineClass(name, protectionDomain);
String source = defineClassSourceLocation(protectionDomain);
Class<?> c = defineClass2(name, b, b.position(), len, protectionDomain, source);
postDefineClass(c, protectionDomain);
return c;
}
- -

主要步骤:

-
    -
  1. preDefineClass 前置处理
  2. -
  3. defineClassX
  4. -
  5. postDefineClass 后置处理
  6. -
-
preDefineClass

确定保护域 ProtectionDomain,并检查:

-
    -
  1. 未定义 java.*
  2. -
  3. 该类的签名者与包(package)中其余类的签名者相匹配
  4. -
-
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
private ProtectionDomain preDefineClass(String name,
ProtectionDomain pd)
{
// 检查 name 为 null 或者有可能是有效的二进制名称
if (!checkName(name))
throw new NoClassDefFoundError("IllegalName: " + name);

// Note: Checking logic in java.lang.invoke.MemberName.checkForTypeAlias
// relies on the fact that spoofing is impossible if a class has a name
// of the form "java.*"
// 如果 name 以 java. 开头,则抛出异常
if ((name != null) && name.startsWith("java.")) {
throw new SecurityException
("Prohibited package name: " +
name.substring(0, name.lastIndexOf('.')));
}
if (pd == null) {
// 如果未传入 ProtectionDomain,取默认的 ProtectionDomain
pd = defaultDomain;
}

// 存放了 package->certs 的 map 映射作为缓存,检查一个包内的 certs 都是一样的
// todo: certs
if (name != null) checkCerts(name, pd.getCodeSource());

return pd;
}
- -
defineClassSourceLocation

确定 ClassCodeSource 位置。

-
1
2
3
4
5
6
7
8
9
private String defineClassSourceLocation(ProtectionDomain pd)
{
CodeSource cs = pd.getCodeSource();
String source = null;
if (cs != null && cs.getLocation() != null) {
source = cs.getLocation().toString();
}
return source;
}
- -
defineClassX 方法

这些 native 方法使用了 name,字节数据,ProtectionDomainsource 等参数,像黑盒一样,在虚拟机中定义了一个类。

-
postDefineClass

在定义类后使用 ProtectionDomain 中的 certs 补充 Class 实例的 signer 信息,猜测在 native 方法 defineClassX 方法中,对 ProtectionDomain 做了一些修改。事实上,从代码上看,将 CodeSource 包装为 ProtectionDomain 传入后,除了 defineClassX 方法外,其他地方都是取出 CodeSource 使用。

-
1
2
3
4
5
6
7
8
9
private void postDefineClass(Class<?> c, ProtectionDomain pd)
{
if (pd.getCodeSource() != null) {
// 获取证书
Certificate certs[] = pd.getCodeSource().getCertificates();
if (certs != null)
setSigners(c, certs);
}
}
- -
- - - - - -
-
- -
-
-

- - - -
@@ -2336,13 +2278,13 @@
- 42k + 45k
Hexo & NexT.Muse 强力驱动 diff --git a/leancloud_counter_security_urls.json b/leancloud_counter_security_urls.json index 81899462..6dcb8dac 100644 --- a/leancloud_counter_security_urls.json +++ b/leancloud_counter_security_urls.json @@ -1 +1 @@ -[{"title":"Docker 常用命令列表","url":"/2020/08/19/docker-frequently-used-commands/"},{"title":"在 iOS 和 macOS 上安装 OpenVPN 客户端","url":"/2023/06/07/how-to-setup-OpenVPN-connect-client-on-iOS-and-macOS/"},{"title":"在 Ubuntu 上安装 Clash","url":"/2023/05/27/how-to-install-clash-on-ubuntu/"},{"title":"在 Windows 10 上安装 OpenVPN 服务器","url":"/2023/06/07/how-to-setup-OpenVPN-server-on-windows-10/"},{"title":"使用 OpenVPN 访问家庭内网","url":"/2023/06/07/how-to-use-OpenVPN-to-access-home-network/"},{"title":"如何为终端、docker 和容器设置代理","url":"/2023/06/13/how-to-configure-proxy-for-terminal-docker-and-container/"},{"title":"Ubuntu server 20.04 安装后没有分配全部磁盘空间","url":"/2023/06/24/Ubuntu-server-20-04-not-all-disk-space-was-allocated-after-installation/"},{"title":"如何使用 SSH 连接 Github 和服务器","url":"/2023/06/28/how-to-use-ssh-to-connect-github-and-server/"},{"title":"Tmux 常用命令和快捷键","url":"/2023/06/29/tmux-frequently-used-commands/"},{"title":"如何在 Ubuntu 20.04 上安装 Minikube","url":"/2023/06/23/how-to-install-Minikube-on-Ubuntu-20-04/"},{"title":"Spring Bean 加载过程","url":"/2023/08/10/how-does-Spring-load-beans/"},{"title":"JVM GC 的测试和分析","url":"/2023/11/01/testing-and-analysis-of-jvm-gc/"},{"title":"字符串常量池的测试和分析","url":"/2023/11/03/testing-and-analysis-of-StringTable/"},{"title":"Java 类加载器源码分析","url":"/2023/07/13/Java-class-loader-source-code-analysis/"},{"title":"关于 Java 字节码指令的一些例子分析","url":"/2023/11/09/some-examples-of-Java-bytecode-instruction-analysis/"},{"title":"基于 Redis 的分布式锁的简单实现","url":"/2023/11/13/simple-implementation-of-distributed-lock-based-on-Redis/"},{"title":"使用 Grafana 和 Prometheus 搭建监控","url":"/2023/11/18/setup-monitoring-using-grafana-and-prometheus/"},{"title":"JVM 内存区域的测试和分析","url":"/2023/11/04/testing-and-analysis-of-jvm-memory-area/"},{"title":"JDK 动态代理和 CGLib","url":"/2023/11/19/JDK-dynamic-proxy-and-CGLib/"},{"title":"Java 垃圾收集","url":"/2023/11/07/garbage-collection-in-Java/"}] \ No newline at end of file +[{"title":"在 Ubuntu 上安装 Clash","url":"/2023/05/27/how-to-install-clash-on-ubuntu/"},{"title":"Docker 常用命令列表","url":"/2020/08/19/docker-frequently-used-commands/"},{"title":"在 iOS 和 macOS 上安装 OpenVPN 客户端","url":"/2023/06/07/how-to-setup-OpenVPN-connect-client-on-iOS-and-macOS/"},{"title":"在 Windows 10 上安装 OpenVPN 服务器","url":"/2023/06/07/how-to-setup-OpenVPN-server-on-windows-10/"},{"title":"使用 OpenVPN 访问家庭内网","url":"/2023/06/07/how-to-use-OpenVPN-to-access-home-network/"},{"title":"如何为终端、docker 和容器设置代理","url":"/2023/06/13/how-to-configure-proxy-for-terminal-docker-and-container/"},{"title":"Ubuntu server 20.04 安装后没有分配全部磁盘空间","url":"/2023/06/24/Ubuntu-server-20-04-not-all-disk-space-was-allocated-after-installation/"},{"title":"如何使用 SSH 连接 Github 和服务器","url":"/2023/06/28/how-to-use-ssh-to-connect-github-and-server/"},{"title":"Tmux 常用命令和快捷键","url":"/2023/06/29/tmux-frequently-used-commands/"},{"title":"如何在 Ubuntu 20.04 上安装 Minikube","url":"/2023/06/23/how-to-install-Minikube-on-Ubuntu-20-04/"},{"title":"Spring Bean 加载过程","url":"/2023/08/10/how-does-Spring-load-beans/"},{"title":"Java 类加载器源码分析","url":"/2023/07/13/Java-class-loader-source-code-analysis/"},{"title":"JVM GC 的测试和分析","url":"/2023/11/01/testing-and-analysis-of-jvm-gc/"},{"title":"字符串常量池的测试和分析","url":"/2023/11/03/testing-and-analysis-of-StringTable/"},{"title":"JVM 内存区域的测试和分析","url":"/2023/11/04/testing-and-analysis-of-jvm-memory-area/"},{"title":"关于 Java 字节码指令的一些例子分析","url":"/2023/11/09/some-examples-of-Java-bytecode-instruction-analysis/"},{"title":"基于 Redis 的分布式锁的简单实现","url":"/2023/11/13/simple-implementation-of-distributed-lock-based-on-Redis/"},{"title":"使用 Grafana 和 Prometheus 搭建监控","url":"/2023/11/18/setup-monitoring-using-grafana-and-prometheus/"},{"title":"JDK 动态代理和 CGLib","url":"/2023/11/19/JDK-dynamic-proxy-and-CGLib/"},{"title":"Java 垃圾收集","url":"/2023/11/07/garbage-collection-in-Java/"},{"title":"Spring AOP 如何创建代理 beans","url":"/2023/11/19/how-does-Spring-AOP-create-proxy-beans/"}] \ No newline at end of file diff --git a/page/2/index.html b/page/2/index.html index 00d9fd1a..82852240 100644 --- a/page/2/index.html +++ b/page/2/index.html @@ -152,13 +152,13 @@

Moralok

@@ -191,6 +191,292 @@

Moralok

+
+ + + +
+ + + + + + + +
+

+ +

+ + +
+ + + + +
+

组织类加载工作:loadClass

Java 程序启动的时候,Java 虚拟机会调用 java.lang.ClassLoader#loadClass(java.lang.String) 加载 main 方法所在的类。

+
1
2
3
public Class<?> loadClass(String name) throws ClassNotFoundException {
return loadClass(name, false);
}
+ +

根据注释可知,此方法加载具有指定二进制名称的类,它由 Java 虚拟机调用来解析类引用,调用它等同于调用 loadClass(name, false)

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
protected Class<?> loadClass(String name, boolean resolve)
throws ClassNotFoundException
{
// 以二进制名称获取类加载的锁进行同步
synchronized (getClassLoadingLock(name)) {
// First, check if the class has already been loaded
// 首先检查类是否已加载,根据该方法注释可知:
// 如果当前类加载器已经被 Java 虚拟机记录为具有该二进制名称的类的加载器(initiating loader),Java 虚拟机可以直接返回 Class 对象。
Class<?> c = findLoadedClass(name);
if (c == null) {
long t0 = System.nanoTime();
try {
// 如果类还未加载,先委派给父·类加载器进行加载,如果父·类加载器为 null,则使用虚拟机内建的类加载器进行加载
if (parent != null) {
// 递归调用
c = parent.loadClass(name, false);
} else {
// 递归调用的终结点
c = findBootstrapClassOrNull(name);
}
} catch (ClassNotFoundException e) {
// ClassNotFoundException thrown if class not found
// from the non-null parent class loader
// 当父·类加载器长尝试加载但是失败,捕获异常但是什么都不做,因为接下来,当前类加载器需要自己也尝试加载。
}

if (c == null) {
// If still not found, then invoke findClass in order
// to find the class.
long t1 = System.nanoTime();
// 父·类加载器未找到类,当前类加载器自己找。
c = findClass(name);

// this is the defining class loader; record the stats
sun.misc.PerfCounter.getParentDelegationTime().addTime(t1 - t0);
sun.misc.PerfCounter.getFindClassTime().addElapsedTimeFrom(t1);
sun.misc.PerfCounter.getFindClasses().increment();
}
}
if (resolve) {
resolveClass(c);
}
return c;
}
}
+ +

根据注释可知,java.lang.ClassLoader#loadClass(java.lang.String, boolean) 同样是加载“具有指定二进制名称的类”,此方法的实现按以下顺序搜索类:

+
    +
  1. 调用 findLoadedClass(String) 以检查该类是否已加载。
  2. +
  3. 在父·类加载器上调用 loadClass 方法。如果父·类加载器为空,则使用虚拟机内置的类加载器。
  4. +
  5. 调用 findClass(String) 方法来查找该类。
  6. +
+

如果使用上述步骤找到了该类(找到并定义类),并且解析标志为 true,则此方法将对生成的 Class 对象调用 resolveClass(Class) 方法。鼓励 ClassLoader 的子类重写 findClass(String),而不是此方法。除非被重写,否则此方法在整个类加载过程中以 getClassLoadingLock 方法的结果进行同步。

+
+

注意:父·类加载器并非父类·类加载器(当前类加载器的父类),而是当前的类加载器的 parent 属性被赋值另外一个类加载器实例,其含义更接近于“可以委派类加载工作的另一个类加载器(一个帮忙干活的上级)”。虽然绝大多数说法中,当一个类加载器的 parent 值为 null 时,它的父·类加载器是引导类加载器(bootstrap class loader),但是当看到 findBootstrapClassOrNull 方法时,我有点困惑,因为我以为会看到语义类似于 loadClassByBootstrapClassLoader 这样的方法名。从注释和代码的语义上看,bootstrap class loader 不像是任何一个类加载器的父·类加载器,但是从类加载的机制设计上说,它是,只是因为它并非由 Java 语言编写而成,不能实例化并赋值给 parent 属性。findBootstrapClassOrNull 方法的语义更接近于:当一个类加载器的父·类加载器为 null 时,将准备加载的目标类先当作启动类(Bootstrap Class)尝试查找,如果找不到就返回 null

+
+

怎么并行地加载类 getClassLoadingLock

需要加载的类可能很多很多,我们很容易想到如果可以并行地加载类就好了。显然,JDK 的编写者考虑到了这一点。
此方法返回类加载操作的锁对象。为了向后兼容,此方法的默认实现的行为如下。如果此 ClassLoader 对象注册为具备并行能力,则该方法返回与指定类名关联的专用对象。 否则,该方法返回此 ClassLoader 对象。
简单地说,如果 ClassLoader 对象注册为具备并行能力,那么一个 name 一个锁对象,已创建的锁对象保存在 ConcurrentHashMap 类型的 parallelLockMap 中,这样类加载工作可以并行;否则所有类加载工作共用一个锁对象,就是 ClassLoader 对象本身。
这个方案意味着非同名的目标类可以认为在加载时没有冲突?

+
1
2
3
4
5
6
7
8
9
10
11
protected Object getClassLoadingLock(String className) {
Object lock = this;
if (parallelLockMap != null) {
Object newLock = new Object();
lock = parallelLockMap.putIfAbsent(className, newLock);
if (lock == null) {
lock = newLock;
}
}
return lock;
}
+ +
什么是 “ClassLoader 对象注册为具有并行能力”呢?

AppClassLoader 中有一段 static 代码。事实上 java.lang.ClassLoader#registerAsParallelCapable 是将 ClassLoader 对象注册为具有并行能力唯一的入口。因此,所有想要注册为具有并行能力的 ClassLoader 都需要调用一次该方法。

+
1
2
3
static {
ClassLoader.registerAsParallelCapable();
}
+ +

java.lang.ClassLoader#registerAsParallelCapable 方法有一个注解 @CallerSensitive,这是因为它的代码中调用的 native 方法 sun.reflect.Reflection#getCallerClass() 方法。由注释可知,当且仅当以下所有条件全部满足时才注册成功:

+
    +
  1. 尚未创建调用者的实例(类加载器尚未实例化)
  2. +
  3. 调用者的所有超类(Object 类除外)都注册为具有并行能力。
  4. +
+
怎么保证这两个条件成立呢?
    +
  1. 对于第一个条件,可以通过将调用的代码写在 static 代码块中来实现。如果写在构造器方法里,并且通过单例模式保证只实例化一次可以吗?答案是不行的,后续会解释这个“注册”行为在构造器方法中是如何被使用以及为何不能写在构造器方法里。
  2. +
  3. 对于第二个条件,由于 Java 虚拟机加载类时,总是会先尝试加载其父类,又因为加载类时会先调用 static 代码块,因此父类的 static 代码块总是先于子类的 static 代码块。
  4. +
+

你可以看到 AppClassLoader->URLClassLoader->SecureClassLoader->ClassLoader 均在 static 代码块实现注册,以保证满足以上两个条件。

+
注册工作做了什么?

简单地说就是保存了类加载器所属 ClassSet

+
1
2
3
4
5
6
7
8
@CallerSensitive
protected static boolean registerAsParallelCapable() {
// 获得此方法的调用者的 Class 实例,asSubClass 可以将 Class<?> 类型的 Class 转换为代表指定类的子类的 Class<? extends U> 类型的 Class。
Class<? extends ClassLoader> callerClass =
Reflection.getCallerClass().asSubclass(ClassLoader.class);
// 注册调用者的 Class 为具有并行能力
return ParallelLoaders.register(callerClass);
}
+ +

方法 java.lang.ClassLoader.ParallelLoaders#registerParallelLoaders 封装了一组具有并行能力的加载器类型。就是持有 ClassLoaderClass 实例的集合,并保证添加时加同步锁。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
// private 修饰,只有其外部类 ClassLoader 才可以使用
// static 修饰,内部类如果需要定义 static 方法或者 static 变量,必须用 static 修饰
private static class ParallelLoaders {
// private 修饰构造器方法,不希望这个类被实例化,只想要使用它的静态变量和方法。
private ParallelLoaders() {}

// the set of parallel capable loader types
// 使用 loaderTypes 时通过 synchronized 加同步锁
private static final Set<Class<? extends ClassLoader>> loaderTypes =
Collections.newSetFromMap(
// todo: 为什么使用弱引用来实现?为了卸载类时的垃圾回收?
new WeakHashMap<Class<? extends ClassLoader>, Boolean>());
static {
// 将 ClassLoader 本身注册为具有并行能力
synchronized (loaderTypes) { loaderTypes.add(ClassLoader.class); }
}

/**
* Registers the given class loader type as parallel capabale.
* Returns {@code true} is successfully registered; {@code false} if
* loader's super class is not registered.
*/
static boolean register(Class<? extends ClassLoader> c) {
synchronized (loaderTypes) {
if (loaderTypes.contains(c.getSuperclass())) {
// register the class loader as parallel capable
// if and only if all of its super classes are.
// Note: given current classloading sequence, if
// the immediate super class is parallel capable,
// all the super classes higher up must be too.
// 当且仅当其所有超类都具有并行能力时,才将类加载器注册为具有并行能力。
// 注意:给定当前的类加载顺序(加载类时,Java 虚拟机总是先尝试加载其父类),如果直接超类具有并行能力,则所有更高的超类也必然具有并行能力。
loaderTypes.add(c);
return true;
} else {
return false;
}
}
}

/**
* Returns {@code true} if the given class loader type is
* registered as parallel capable.
*/
static boolean isRegistered(Class<? extends ClassLoader> c) {
synchronized (loaderTypes) {
return loaderTypes.contains(c);
}
}
}
+ +
“注册”怎么和锁产生联系?

但是以上的注册过程只是起到一个“标记”作用,没有涉及和锁相关的代码,那么这个“标记”是怎么和真正的锁产生联系呢?ClassLoader 提供了三个构造器方法:

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
private ClassLoader(Void unused, ClassLoader parent) {
// 由 private 修饰,不允许子类重写
this.parent = parent;
if (ParallelLoaders.isRegistered(this.getClass())) {
// 如果类加载器已经注册为具有并行能力,则做一些赋值操作
parallelLockMap = new ConcurrentHashMap<>();
// 保存 package->certs 的 map 映射,相关的工作也可以并行进行
package2certs = new ConcurrentHashMap<>();
assertionLock = new Object();
} else {
// no finer-grained lock; lock on the classloader instance
parallelLockMap = null;
package2certs = new Hashtable<>();
assertionLock = this;
}
}

// 由 protect 修饰,允许子类重写,传递了父·类加载器。
protected ClassLoader(ClassLoader parent) {
this(checkCreateClassLoader(), parent);
}

// 由 protect 修饰,允许子类重写,父·类加载器使用 getSystemClassLoader 方法返回的系统类加载器。
protected ClassLoader() {
this(checkCreateClassLoader(), getSystemClassLoader());
}
+ +

ClassLoader 的构造器方法最终都调用 private 修饰的 java.lang.ClassLoader#ClassLoader(java.lang.Void, java.lang.ClassLoader),又因为父类的构造器方法总是先于子类的构造器方法被执行,这样一来,所有继承 ClassLoader 的类加载器在创建的时候都会根据在创建实例之前是否注册为具有并行能力而做不同的操作。

+
为什么注册的代码不能写在构造器方法里?

使用“注册”的代码也解释了 java.lang.ClassLoader#registerAsParallelCapable 为了满足调用成功的第一个条件为什么不能写在构造器方法中,因为使用这个机制的代码先于你在子类构造器方法里编写的代码被执行。
同时,不论是 loadLoader 还是 getClassLoadingLock 都是由 protect 修饰,允许子类重写,来自定义并行加载类的能力。

+
+

todo: 讨论自定义类加载器的时候,印象里似乎对并行加载类的提及比较少,之后留意一下。

+
+

检查目标类是否已加载

加载类之前显然需要检查目标类是否已加载,这项工作最终是交给 native 方法,在虚拟机中执行,就像在黑盒中一样。
todo: 不同类加载器同一个类名会如何判定?

+
1
2
3
4
5
6
7
protected final Class<?> findLoadedClass(String name) {
if (!checkName(name))
return null;
return findLoadedClass0(name);
}

private native final Class<?> findLoadedClass0(String name);
+ +

保证核心类库的安全性:双亲委派模型

正如在代码和注释中所看到的,正常情况下,类的加载工作先委派给自己的父·类加载器,即 parent 属性的值——另一个类加载器实例。一层一层向上委派直到 parentnull,代表类加载工作会尝试先委派给虚拟机内建的 bootstrap class loader 处理,然后由 bootstrap class loader 首先尝试加载。如果被委派方加载失败,委派方会自己再尝试加载。
正常加载类的是应用类加载器 AppClassLoader,它的 parentExtClassLoaderExtClassLoaderparentnull

+
+

在网上也能看到有人提到以前大家称之为“父·类加载器委派机制”,“双亲”一词易引人误解。

+
+
为什么要用这套奇怪的机制

这样设计很明显的一个目的就是保证核心类库的类加载安全性。比如 Object 类,设计者不希望编写代码的人重新写一个 Object 类并加载到 Java 虚拟机中,但是加载类的本质就是读取字节数据传递给 Java 虚拟机创建一个 Class 实例,使用这套机制的目的之一就是为了让核心类库先加载,同时先加载的类不会再次被加载。

+

通常流程如下:

+
    +
  1. AppClassLoader 调用 loadClass 方法,先委派给 ExtClassLoader
  2. +
  3. ExtClassLoader 调用 loadClass 方法,先委派给 bootstrap class loader
  4. +
  5. bootstrap class loader 在其设置的类路径中无法找到 BananaTest 类,抛出 ClassNotFoundException 异常。
  6. +
  7. ExtClassLoader 捕获异常,然后自己调用 findClass 方法尝试进行加载。
  8. +
  9. ExtClassLoader 在其设置的类路径中无法找到 BananaTest 类,抛出 ClassNotFoundException 异常。
  10. +
  11. AppClassLoader 捕获异常,然后自己调用 findClass 方法尝试进行加载。
  12. +
+

注释中提到鼓励重写 findClass 方法而不是 loadClass,因为正是该方法实现了所谓的“双亲委派模型”,java.lang.ClassLoader#findClass 实现了如何查找加载类。如果不是专门为了破坏这个类加载模型,应该选择重写 findClass;其次是因为该方法中涉及并行加载类的机制。

+

查找类资源:findClass

默认情况下,类加载器在自己尝试进行加载时,会调用 java.lang.ClassLoader#findClass 方法,该方法由子类重写。AppClassLoaderExtClassLoader 都是继承 URLClassLoader,而 URLClassLoader 重写了 findClass 方法。根据注释可知,该方法会从 URL 搜索路径查找并加载具有指定名称的类。任何引用 Jar 文件的 URL 都会根据需要加载并打开,直到找到该类。

+

过程如下:

+
    +
  1. name 转换为 path,比如 com.example.BananaTest 转换为 com/example/BananaTest.class
  2. +
  3. 使用 URL 搜索路径 URLClassPathpath 中获取 Resource,本质上就是轮流将可能存放的目录列表拼接上文件路径进行查找。
  4. +
  5. 调用 URLClassLoader 的私有方法 defineClass,该方法调用父类 SecureClassLoaderdefineClass 方法。
  6. +
+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
protected Class<?> findClass(final String name)
throws ClassNotFoundException
{
final Class<?> result;
try {
// todo:
result = AccessController.doPrivileged(
new PrivilegedExceptionAction<Class<?>>() {
public Class<?> run() throws ClassNotFoundException {
// 将 name 转换为 path
String path = name.replace('.', '/').concat(".class");
// 从 URLClassPath 中查找 Resource
Resource res = ucp.getResource(path, false);
if (res != null) {
try {
return defineClass(name, res);
} catch (IOException e) {
throw new ClassNotFoundException(name, e);
} catch (ClassFormatError e2) {
if (res.getDataError() != null) {
e2.addSuppressed(res.getDataError());
}
throw e2;
}
} else {
return null;
}
}
}, acc);
} catch (java.security.PrivilegedActionException pae) {
throw (ClassNotFoundException) pae.getException();
}
if (result == null) {
throw new ClassNotFoundException(name);
}
return result;
}
+ +

查找类的目录列表:URLClassPath

URLClassLoader 拥有一个 URLClassPath 类型的属性 ucp。由注释可知,URLClassPath 类用于维护一个 URL 的搜索路径,以便从 Jar 文件和目录中加载类和资源。
URLClassPath 的核心构造器方法:

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
public URLClassPath(URL[] urls,
URLStreamHandlerFactory factory,
AccessControlContext acc) {
// 将 urls 保存到 ArrayList 类型的属性 path 中,根据注释,path 的含义为 URL 的原始搜索路径。
for (int i = 0; i < urls.length; i++) {
path.add(urls[i]);
}
// 将 urls 保存到 Stack 类型的属性 urls 中,根据注释,urls 的含义为未打开的 URL 列表。
push(urls);
if (factory != null) {
// 如果 factory 不为 null,使用它创建一个 URLStreamHandler 实例处理 Jar 文件。
jarHandler = factory.createURLStreamHandler("jar");
}
if (DISABLE_ACC_CHECKING)
this.acc = null;
else
this.acc = acc;
}
+ +
URLClassPath#getResource

URLClassLoader 调用 sun.misc.URLClassPath#getResource(java.lang.String, boolean) 方法获取指定名称对应的资源。根据注释,该方法会查找 URL 搜索路径上的第一个资源,如果找不到资源,则返回 null
显然,这里的 Loader 不是我们前面提到的类加载器。LoaderURLClassPath 的内部类,用于表示根据一个基本 URL 创建的资源和类的加载器。也就是说一个基本 URL 对应一个 Loader

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
public Resource getResource(String name, boolean check) {
if (DEBUG) {
System.err.println("URLClassPath.getResource(\"" + name + "\")");
}

Loader loader;
// 获取缓存(默认没有用)
int[] cache = getLookupCache(name);
// 不断获取下一个 Loader 来获取 Resource,直到获取到或者没有下一个 Loader
for (int i = 0; (loader = getNextLoader(cache, i)) != null; i++) {
Resource res = loader.getResource(name, check);
if (res != null) {
return res;
}
}
return null;
}
+ +
URLClassPath#getNextLoader

获取下一个 Loader,其实根据 index 从一个存放已创建 LoaderArrayList 中获取。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
private synchronized Loader getNextLoader(int[] cache, int index) {
if (closed) {
return null;
}
if (cache != null) {
if (index < cache.length) {
Loader loader = loaders.get(cache[index]);
if (DEBUG_LOOKUP_CACHE) {
System.out.println("HASCACHE: Loading from : " + cache[index]
+ " = " + loader.getBaseURL());
}
return loader;
} else {
return null; // finished iterating over cache[]
}
} else {
// 获取 Loader
return getLoader(index);
}
}
+ +
URLClassPath#getLoader(int)
    +
  1. index 到存放已创建 Loader 的列表中去获取(调用方传入的 index0 开始不断递增直到超过范围)。
  2. +
  3. 如果 index 超过范围,说明已有的 Loader 都找不到目标 Resource,需要到未打开的 URL 中查找。
  4. +
  5. 从未打开的 URL 中取出(pop)一个来创建 Loader,如果 urls 已经为空,则返回 null
  6. +
+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
private synchronized Loader getLoader(int index) {
if (closed) {
return null;
}
// Expand URL search path until the request can be satisfied
// or the URL stack is empty.
while (loaders.size() < index + 1) {
// Pop the next URL from the URL stack
// 如果 index 超过数组范围,需要从未打开的 URL 中取出一个,创建 Loader 并返回
URL url;
synchronized (urls) {
if (urls.empty()) {
return null;
} else {
url = urls.pop();
}
}
// Skip this URL if it already has a Loader. (Loader
// may be null in the case where URL has not been opened
// but is referenced by a JAR index.)
String urlNoFragString = URLUtil.urlNoFragString(url);
if (lmap.containsKey(urlNoFragString)) {
continue;
}
// Otherwise, create a new Loader for the URL.
Loader loader;
try {
// 根据 URL 创建 Loader
loader = getLoader(url);
// If the loader defines a local class path then add the
// URLs to the list of URLs to be opened.
URL[] urls = loader.getClassPath();
if (urls != null) {
push(urls);
}
} catch (IOException e) {
// Silently ignore for now...
continue;
} catch (SecurityException se) {
// Always silently ignore. The context, if there is one, that
// this URLClassPath was given during construction will never
// have permission to access the URL.
if (DEBUG) {
System.err.println("Failed to access " + url + ", " + se );
}
continue;
}
// Finally, add the Loader to the search path.
validateLookupCache(loaders.size(), urlNoFragString);
loaders.add(loader);
lmap.put(urlNoFragString, loader);
}
if (DEBUG_LOOKUP_CACHE) {
System.out.println("NOCACHE: Loading from : " + index );
}
return loaders.get(index);
}
+ +
URLClassPath#getLoader(java.net.URL)

根据指定的 URL 创建 Loader,不同类型的 URL 会返回不同具体实现的 Loader

+
    +
  1. 如果 URL 不是以 / 结尾,认为是 Jar 文件,则返回 JarLoader 类型,比如 file:/C:/Users/xxx/.jdks/corretto-1.8.0_342/jre/lib/rt.jar
  2. +
  3. 如果 URL/ 结尾,且协议为 file,则返回 FileLoader 类型,比如 file:/C:/Users/xxx/IdeaProjects/java-test/target/classes/
  4. +
  5. 如果 URL/ 结尾,且协议不会 file,则返回 Loader 类型。
  6. +
+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
private Loader getLoader(final URL url) throws IOException {
try {
return java.security.AccessController.doPrivileged(
new java.security.PrivilegedExceptionAction<Loader>() {
public Loader run() throws IOException {
String file = url.getFile();
if (file != null && file.endsWith("/")) {
if ("file".equals(url.getProtocol())) {
return new FileLoader(url);
} else {
return new Loader(url);
}
} else {
return new JarLoader(url, jarHandler, lmap, acc);
}
}
}, acc);
} catch (java.security.PrivilegedActionException pae) {
throw (IOException)pae.getException();
}
}
+ +

URLClassPath.FileLoader#getResource

FileLoadergetResource 为例,如果文件找到了,就会将文件包装成一个 FileInputStream,再将 FileInputStream 包装成一个 Resource 返回。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
Resource getResource(final String name, boolean check) {
final URL url;
try {
URL normalizedBase = new URL(getBaseURL(), ".");
url = new URL(getBaseURL(), ParseUtil.encodePath(name, false));

if (url.getFile().startsWith(normalizedBase.getFile()) == false) {
// requested resource had ../..'s in path
return null;
}

if (check)
URLClassPath.check(url);

final File file;
if (name.indexOf("..") != -1) {
file = (new File(dir, name.replace('/', File.separatorChar)))
.getCanonicalFile();
if ( !((file.getPath()).startsWith(dir.getPath())) ) {
/* outside of base dir */
return null;
}
} else {
file = new File(dir, name.replace('/', File.separatorChar));
}

if (file.exists()) {
return new Resource() {
public String getName() { return name; };
public URL getURL() { return url; };
public URL getCodeSourceURL() { return getBaseURL(); };
public InputStream getInputStream() throws IOException
{ return new FileInputStream(file); };
public int getContentLength() throws IOException
{ return (int)file.length(); };
};
}
} catch (Exception e) {
return null;
}
return null;
}
+ +

ClassLoader 的搜索路径

从上文可知,ClassLoader 调用 findClass 方法查找类的时候,并不是漫无目的地查找,而是根据设置的类路径进行查找,不同的 ClassLoader 有不同的类路径。

+

以下是通过 IDEA 启动 Java 程序时的命令,可以看到其中通过 -classpath 指定了应用·类加载器 AppClassLoader 的类路径,该类路径除了包含常规的 JRE 的文件路径外,还额外添加了当前 maven 工程编译生成的 target\classes 目录。

+
1
C:\Users\xxx\.jdks\corretto-1.8.0_342\bin\java.exe -agentlib:jdwp=transport=dt_socket,address=127.0.0.1:52959,suspend=y,server=n -javaagent:C:\Users\xxx\AppData\Local\JetBrains\IntelliJIdea2022.3\captureAgent\debugger-agent.jar -Dfile.encoding=UTF-8 -classpath "C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\charsets.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\access-bridge-64.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\cldrdata.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\dnsns.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\jaccess.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\jfxrt.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\localedata.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\nashorn.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunec.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunjce_provider.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunmscapi.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunpkcs11.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\zipfs.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jce.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jfr.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jfxswt.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jsse.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\management-agent.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\resources.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\rt.jar;C:\Users\xxx\IdeaProjects\java-test\target\classes;C:\Program Files\JetBrains\IntelliJ IDEA 2022.3.3\lib\idea_rt.jar" org.example.BananaTest
+ +
bootstrap class loader

启动·类加载器 bootstrap class loader,加载核心类库,即 <JRE_HOME>/lib 目录中的部分类库,如 rt.jar,只有名字符合要求的 jar 才能被识别。 启动 Java 虚拟机时可以通过选项 -Xbootclasspath 修改默认的类路径,有三种使用方式:

+
    +
  • -Xbootclasspath::完全覆盖核心类库的类路径,不常用,除非重写核心类库。
  • +
  • -Xbootclasspath/a: 以后缀的方式拼接在原搜索路径后面,常用。
  • +
  • -Xbootclasspath/p: 以前缀的方式拼接再原搜索路径前面.不常用,避免引起不必要的冲突。
  • +
+

IDEA 中编辑启动配置,添加 VM 选项,-Xbootclasspath:C:\Software,里面没有类文件,启动虚拟机失败,提示:

+
1
2
3
4
Error occurred during initialization of VM
java/lang/NoClassDefFoundError: java/lang/Object

进程已结束,退出代码1
+ +
ExtClassLoader

扩展·类加载器 ExtClassLoader,加载 <JRE_HOME>/lib/ext/ 目录中的类库。启动 Java 虚拟机时可以通过选项 -Djava.ext.dirs 修改默认的类路径。显然修改不当同样可能会引起 Java 程序的异常。

+
AppClassLoader

应用·类加载器 AppClassLoader ,加载应用级别的搜索路径中的类库。可以使用系统的环境变量 CLASSPATH 的值,也可以在启动 Java 虚拟机时通过选项 -classpath 修改。

+

CLASSPATHWindows 中,多个文件路径使用分号 ; 分隔,而 Linux 中则使用冒号 : 分隔。以下例子表示当前目录和另一个文件路径拼接而成的类路径。

+
    +
  • Windows:.;C:\path\to\classes
  • +
  • Linux:.:/path/to/classes
  • +
+

事实上,AppClassLoader 最终的类路径,不仅仅包含 -classpath 的值,还会包含 -javaagent 指定的值。

+

字节数据转换为 Class 实例:defineClass

方法 defineClass,顾名思义,就是定义类,将字节数据转换为 Class 实例。在 ClassLoader 以及其子类中有很多同名方法,方法内各种处理和包装,最终都是为了使用 name 和字节数据等参数,调用 native 方法获得一个 Class 实例。
以下是定义类时最终可能调用的 native 方法。

+
1
2
3
4
5
6
7
8
9
private native Class<?> defineClass0(String name, byte[] b, int off, int len,
ProtectionDomain pd);

private native Class<?> defineClass1(String name, byte[] b, int off, int len,
ProtectionDomain pd, String source);

private native Class<?> defineClass2(String name, java.nio.ByteBuffer b,
int off, int len, ProtectionDomain pd,
String source);
+ +

其方法参数有:

+
    +
  • name,目标类的名称。
  • +
  • byte[]ByteBuffer 类型的字节数据,offlen 只是为了定位传入的字节数组中关于目标类的字节数据,通常分别是 0 和字节数组的长度,毕竟专门构造一个包含无关数据的字节数组很无聊。
  • +
  • ProtectionDomain,保护域,todo:
  • +
  • sourceCodeSource 的位置。
  • +
+

defineClass 方法的调用过程,其实就是从 URLClassLoader 开始,一层一层处理后再调用父类的 defineClass 方法,分别经过了 SecureClassLoaderClassLoader

+

URLClassLoader#defineClass

此方法是再 URLClassLoaderfindClass 方法中,获得正确的 Resource 之后调用的,由 private 修饰。根据注释,它使用从指定资源获取的类字节来定义类,生成的类必须先解析才能使用。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
private Class<?> defineClass(String name, Resource res) throws IOException {
long t0 = System.nanoTime();
// 获取最后一个 . 的位置
int i = name.lastIndexOf('.');
// 返回资源的 CodeSourceURL
URL url = res.getCodeSourceURL();
if (i != -1) {
// 截取包名 com.example
String pkgname = name.substring(0, i);
// Check if package already loaded.
Manifest man = res.getManifest();
definePackageInternal(pkgname, man, url);
}
// Now read the class bytes and define the class
// 先尝试以 ByteBuffer 的形式返回字节数据,如果资源的输入流不是在 ByteBuffer 之上实现的,则返回 null
java.nio.ByteBuffer bb = res.getByteBuffer();
if (bb != null) {
// Use (direct) ByteBuffer:
// 不常用
CodeSigner[] signers = res.getCodeSigners();
CodeSource cs = new CodeSource(url, signers);
sun.misc.PerfCounter.getReadClassBytesTime().addElapsedTimeFrom(t0);
// 调用 java.security.SecureClassLoader#defineClass(java.lang.String, java.nio.ByteBuffer, java.security.CodeSource)
return defineClass(name, bb, cs);
} else {
// 以字节数组的形式返回资源数据
byte[] b = res.getBytes();
// must read certificates AFTER reading bytes.
// 必须再读取字节数据后读取证书,todo:
CodeSigner[] signers = res.getCodeSigners();
// 根据 URL 和签名者创建 CodeSource
CodeSource cs = new CodeSource(url, signers);
sun.misc.PerfCounter.getReadClassBytesTime().addElapsedTimeFrom(t0);
// 调用 java.security.SecureClassLoader#defineClass(java.lang.String, byte[], int, int, java.security.CodeSource)
return defineClass(name, b, 0, b.length, cs);
}
}
+ +

Resource 类提供了 getBytes 方法,此方法以字节数组的形式返回字节数据。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
public byte[] getBytes() throws IOException {
byte[] b;
// Get stream before content length so that a FileNotFoundException
// can propagate upwards without being caught too early
// 在获取内容长度之前获取流,以便 FileNotFoundException 可以向上传播而不会过早被捕获(todo: 不理解)
// 获取缓存的 InputStream
InputStream in = cachedInputStream();

// This code has been uglified to protect against interrupts.
// Even if a thread has been interrupted when loading resources,
// the IO should not abort, so must carefully retry, failing only
// if the retry leads to some other IO exception.
// 该代码为了防止中断有点丑陋。即使线程在加载资源时被中断,IO 也不应该中止,因此必须小心重试,只有当重试导致其他 IO 异常时才会失败。
// 检测当前线程是否收到中断信号,收到的话则返回 true 且清除中断状态,重新变更为未中断状态。
boolean isInterrupted = Thread.interrupted();
int len;
for (;;) {
try {
// 获取内容长度,顺利的话就跳出循环
len = getContentLength();
break;
} catch (InterruptedIOException iioe) {
// 如果获取内容长度时,线程被中断抛出了异常,捕获后清除中断状态
Thread.interrupted();
isInterrupted = true;
}
}

try {
b = new byte[0];
if (len == -1) len = Integer.MAX_VALUE;
int pos = 0;
while (pos < len) {
int bytesToRead;
if (pos >= b.length) { // Only expand when there's no room
// 如果当前读取位置已经大于等于数组长度
// 本次待读取字节长度 = 剩余未读取长度和 1024 取较小值
bytesToRead = Math.min(len - pos, b.length + 1024);
if (b.length < pos + bytesToRead) {
// 如果当前读取位置 + 本次待读取字节长度 > 数组长度,则创建新数组并复制数据
b = Arrays.copyOf(b, pos + bytesToRead);
}
} else {
// 数组还有空间,待读取字节长度 = 数组剩余空间
bytesToRead = b.length - pos;
}
int cc = 0;
try {
// 读取数据
cc = in.read(b, pos, bytesToRead);
} catch (InterruptedIOException iioe) {
// 如果读取时,线程被中断抛出了异常,捕获后清除中断状态
Thread.interrupted();
isInterrupted = true;
}
if (cc < 0) {
// 如果读取返回值 < 0
if (len != Integer.MAX_VALUE) {
// 且长度并未无限,表示提前检测到 EOF,抛出异常
throw new EOFException("Detect premature EOF");
} else {
// 如果长度无限,表示读到了文件结尾,数组长度大于当前读取位置,创建新数组并复制长度
if (b.length != pos) {
b = Arrays.copyOf(b, pos);
}
break;
}
}
pos += cc;
}
} finally {
try {
in.close();
} catch (InterruptedIOException iioe) {
isInterrupted = true;
} catch (IOException ignore) {}

if (isInterrupted) {
// 如果 isInterrupted 为 true,代表中断过,重新将线程状态置为中断。
Thread.currentThread().interrupt();
}
}
return b;
}
+ +

getByteBuffer 之后会缓存 InputStream 以便调用 getBytes 时使用,方法由 synchronized 修饰。

+
1
2
3
4
5
6
private synchronized InputStream cachedInputStream() throws IOException {
if (cis == null) {
cis = getInputStream();
}
return cis;
}
+ +

在这个例子中,Resource 的实例是 URLClassPath 中的匿名类 FileLoaderResource 的匿名类的方式创建的。

+
1
2
3
4
5
6
7
8
9
10
11
public InputStream getInputStream() throws IOException
{
// 在该匿名类中,getInputStream 的实现就是简单地根据 FileLoader 中保存的 File 实例创建 FileInputStream 并返回。
return new FileInputStream(file);
}

public int getContentLength() throws IOException
{
// 在该匿名类中,getContentLength 的实现就是简单地根据 FileLoader 中保存的 File 实例获取长度。
return (int)file.length();
};
+ +

SecureClassLoader#defineClass

URLClassLoader 继承自 SecureClassLoaderSecureClassLoader 提供并重载了 defineClass 方法,两个方法的注释均比代码长得多。
由注释可知,方法的作用是将字节数据(byte[] 类型或者 ByteBuffer 类型)转换为 Class 类型的实例,有一个可选的 CodeSource 类型的参数。

+
1
2
3
4
5
6
7
8
9
10
11
12
protected final Class<?> defineClass(String name,
byte[] b, int off, int len,
CodeSource cs)
{
return defineClass(name, b, off, len, getProtectionDomain(cs));
}

protected final Class<?> defineClass(String name, java.nio.ByteBuffer b,
CodeSource cs)
{
return defineClass(name, b, getProtectionDomain(cs));
}
+ +

方法中只是简单地将 CodeSource 类型的参数转换成 ProtectionDomain 类型,就调用 ClassLoaderdefineClass 方法。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
private ProtectionDomain getProtectionDomain(CodeSource cs) {
// 如果 CodeSource 为 null,直接返回 null
if (cs == null)
return null;

ProtectionDomain pd = null;
synchronized (pdcache) {
// 先从 Map 缓存中获取 ProtectionDomain
pd = pdcache.get(cs);
if (pd == null) {
// 从 CodeSource 中获取 PermissionCollection
PermissionCollection perms = getPermissions(cs);
// 缓存中没有,则创建一个 ProtectionDomain 并放入缓存
pd = new ProtectionDomain(cs, perms, this, null);
pdcache.put(cs, pd);
if (debug != null) {
debug.println(" getPermissions "+ pd);
debug.println("");
}
}
}
return pd;
}
+ +
getPermissions

根据注释可知,此方法会返回给定 CodeSource 对象的权限。此方法由 protect 修饰,AppClassLoaderURLClassLoader 都有重写。当前 ClassLoaderAppClassLoader

+

AppClassLoader#getPermissions,添加允许从类路径加载的任何类退出 VM的权限。

+
1
2
3
4
5
6
7
8
9
protected PermissionCollection getPermissions(CodeSource codesource)
{
// 调用父类 URLClassLoader 的 getPermissions
PermissionCollection perms = super.getPermissions(codesource);
// 允许从类路径加载的任何类退出 VM的权限。
// todo: 这是否自定义的类加载器加载的类,可能不能退出 VM。
perms.add(new RuntimePermission("exitVM"));
return perms;
}
+ +

SecureClassLoader#getPermissions,添加一个读文件或读目录的权限。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
protected PermissionCollection getPermissions(CodeSource codesource)
{
// 调用父类 SecureClassLoader 的 getPermissions
PermissionCollection perms = super.getPermissions(codesource);

URL url = codesource.getLocation();

Permission p;
URLConnection urlConnection;

try {
// FileURLConnection 实例
urlConnection = url.openConnection();
// 允许 read 的 FilePermission 实例
p = urlConnection.getPermission();
} catch (java.io.IOException ioe) {
p = null;
urlConnection = null;
}

if (p instanceof FilePermission) {
// if the permission has a separator char on the end,
// it means the codebase is a directory, and we need
// to add an additional permission to read recursively
// 如果文件路径以文件分隔符结尾,表示目录,需要在末尾添加"-"改为递归读的权限
String path = p.getName();
if (path.endsWith(File.separator)) {
path += "-";
p = new FilePermission(path, SecurityConstants.FILE_READ_ACTION);
}
} else if ((p == null) && (url.getProtocol().equals("file"))) {
String path = url.getFile().replace('/', File.separatorChar);
path = ParseUtil.decode(path);
if (path.endsWith(File.separator))
path += "-";
p = new FilePermission(path, SecurityConstants.FILE_READ_ACTION);
} else {
/**
* Not loading from a 'file:' URL so we want to give the class
* permission to connect to and accept from the remote host
* after we've made sure the host is the correct one and is valid.
*/
URL locUrl = url;
if (urlConnection instanceof JarURLConnection) {
locUrl = ((JarURLConnection)urlConnection).getJarFileURL();
}
String host = locUrl.getHost();
if (host != null && (host.length() > 0))
p = new SocketPermission(host,
SecurityConstants.SOCKET_CONNECT_ACCEPT_ACTION);
}

// make sure the person that created this class loader
// would have this permission

if (p != null) {
final SecurityManager sm = System.getSecurityManager();
if (sm != null) {
final Permission fp = p;
AccessController.doPrivileged(new PrivilegedAction<Void>() {
public Void run() throws SecurityException {
sm.checkPermission(fp);
return null;
}
}, acc);
}
perms.add(p);
}
return perms;
}
+ +

SecureClassLoader#getPermissions,延迟设置权限,在创建 ProtectionDomain 时再设置。

+
1
2
3
4
5
6
7
8
protected PermissionCollection getPermissions(CodeSource codesource)
{
// 检查以确保类加载器已初始化。在 SecureClassLoader 构造器最后会用一个布尔变量表示加载器初始化成功。
// 从代码上看,似乎只能保证 SecureClassLoader 的构造器方法已执行完毕?
check();
// ProtectionDomain 延迟绑定,Permissions 继承 PermissionCollection 类。
return new Permissions(); // ProtectionDomain defers the binding
}
+ +
ProtectionDomain

ProtectionDomain 的相关构造器参数:

+
    +
  • CodeSource
  • +
  • PermissionCollection,如果不为 null,会设置权限为只读,表示权限在使用过程中不再修改;同时检查是否需要设置拥有全部权限。
  • +
  • ClassLoader
  • +
  • Principal[]
  • +
+

这样看来,SecureClassLoader 为了定义类做的处理,就是简单地创建一些关于权限的对象,并保存了 CodeSource->ProtectionDomain 的映射作为缓存。

+

ClassLoader#defineClass

抽象类 ClassLoader 中最终用于定义类的 native 方法 define0define1define2 都是由 private 修饰的,ClassLoader 提供并重载了 defineClass 方法作为使用它们的入口,这些 defineClass 方法都由 protect final 修饰,这意味着这些方法只能被子类使用,并且不能被重写。

+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
protected final Class<?> defineClass(String name, byte[] b, int off, int len)
throws ClassFormatError
{
return defineClass(name, b, off, len, null);
}

protected final Class<?> defineClass(String name, byte[] b, int off, int len,
ProtectionDomain protectionDomain)
throws ClassFormatError
{
protectionDomain = preDefineClass(name, protectionDomain);
String source = defineClassSourceLocation(protectionDomain);
Class<?> c = defineClass1(name, b, off, len, protectionDomain, source);
postDefineClass(c, protectionDomain);
return c;
}

protected final Class<?> defineClass(String name, java.nio.ByteBuffer b,
ProtectionDomain protectionDomain)
throws ClassFormatError
{
int len = b.remaining();

// Use byte[] if not a direct ByteBufer:
if (!b.isDirect()) {
if (b.hasArray()) {
return defineClass(name, b.array(),
b.position() + b.arrayOffset(), len,
protectionDomain);
} else {
// no array, or read-only array
byte[] tb = new byte[len];
b.get(tb); // get bytes out of byte buffer.
return defineClass(name, tb, 0, len, protectionDomain);
}
}

protectionDomain = preDefineClass(name, protectionDomain);
String source = defineClassSourceLocation(protectionDomain);
Class<?> c = defineClass2(name, b, b.position(), len, protectionDomain, source);
postDefineClass(c, protectionDomain);
return c;
}
+ +

主要步骤:

+
    +
  1. preDefineClass 前置处理
  2. +
  3. defineClassX
  4. +
  5. postDefineClass 后置处理
  6. +
+
preDefineClass

确定保护域 ProtectionDomain,并检查:

+
    +
  1. 未定义 java.*
  2. +
  3. 该类的签名者与包(package)中其余类的签名者相匹配
  4. +
+
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
private ProtectionDomain preDefineClass(String name,
ProtectionDomain pd)
{
// 检查 name 为 null 或者有可能是有效的二进制名称
if (!checkName(name))
throw new NoClassDefFoundError("IllegalName: " + name);

// Note: Checking logic in java.lang.invoke.MemberName.checkForTypeAlias
// relies on the fact that spoofing is impossible if a class has a name
// of the form "java.*"
// 如果 name 以 java. 开头,则抛出异常
if ((name != null) && name.startsWith("java.")) {
throw new SecurityException
("Prohibited package name: " +
name.substring(0, name.lastIndexOf('.')));
}
if (pd == null) {
// 如果未传入 ProtectionDomain,取默认的 ProtectionDomain
pd = defaultDomain;
}

// 存放了 package->certs 的 map 映射作为缓存,检查一个包内的 certs 都是一样的
// todo: certs
if (name != null) checkCerts(name, pd.getCodeSource());

return pd;
}
+ +
defineClassSourceLocation

确定 ClassCodeSource 位置。

+
1
2
3
4
5
6
7
8
9
private String defineClassSourceLocation(ProtectionDomain pd)
{
CodeSource cs = pd.getCodeSource();
String source = null;
if (cs != null && cs.getLocation() != null) {
source = cs.getLocation().toString();
}
return source;
}
+ +
defineClassX 方法

这些 native 方法使用了 name,字节数据,ProtectionDomainsource 等参数,像黑盒一样,在虚拟机中定义了一个类。

+
postDefineClass

在定义类后使用 ProtectionDomain 中的 certs 补充 Class 实例的 signer 信息,猜测在 native 方法 defineClassX 方法中,对 ProtectionDomain 做了一些修改。事实上,从代码上看,将 CodeSource 包装为 ProtectionDomain 传入后,除了 defineClassX 方法外,其他地方都是取出 CodeSource 使用。

+
1
2
3
4
5
6
7
8
9
private void postDefineClass(Class<?> c, ProtectionDomain pd)
{
if (pd.getCodeSource() != null) {
// 获取证书
Certificate certs[] = pd.getCodeSource().getCertificates();
if (certs != null)
setSigners(c, certs);
}
}
+ +
+ + + + + +
+
+ +
+
+
+ + + + + + +
@@ -232,7 +518,7 @@

- + @@ -386,7 +672,7 @@

- + @@ -520,7 +806,7 @@

- + @@ -631,7 +917,7 @@

- + @@ -781,7 +1067,7 @@

- + @@ -921,7 +1207,7 @@

- + @@ -1069,7 +1355,7 @@

- + @@ -1185,7 +1471,7 @@

- + @@ -1306,7 +1592,7 @@

- + @@ -1395,549 +1681,8 @@

- - - -
- - - - - - - -
-

- -

- - -
- - - - -
-

常用命令

从 Docker 官方命令行参考中按顺序选取常用的命令和用法。

-

docker attach

将本地标准输入、输出和错误流附加到一个正在运行的容器。

-

用法

1
docker attach [OPTIONS] CONTAINER
- -

描述

使用 docker attach 通过容器 ID 或名称将终端的标准输入、输出和错误附加到正在运行的容器。这允许你查看其正在进行的输出或以交互方式控制它,就好像命令直接在你的终端中运行一样。

-

如果 docker run 同时指定 -it 选项,使用 CTRL-p CTRL-q 退出 docker attach 时,不影响容器继续运行。

-

选项

- - - - - - - - - - - - - - - - - -
名称和缩写默认值描述
--detach-keys覆盖用于从容器分离的键序列
--sig-proxytrue代理转发所有收到的信号给进程
-

docker exec

在正在运行中的容器里执行命令。

-

用法

1
docker exec [OPTIONS] CONTAINER COMMAND [ARG...]
- -

选项

- - - - - - - - - - - - - - - - - - - - - - - - - - -
名称和缩写描述
--detach,-d分离模式:在后台运行命令
--env,-e设置环境变量
--interactive,-i即使未附加也保持 STDIN 打开
--tty,-t分配伪 TTY
--workdir,-w容器内的工作目录
-

docker images

列出镜像。

-

用法

1
docker images [OPTIONS] [REPOSITORY[:TAG]]
- -

选项

- - - - - - - - - - -
名称和缩写描述
--all,-a展示所有镜像
-

docker info

展示系统范围的信息。

-

用法

1
docker info [OPTIONS]
- -

选项

- - - - - - - - - - -
名称和缩写描述
--format,-f使用指定模板格式化输出
-

docker inspect

返回有关 Docker 对象的低级信息。

-

用法

1
docker inspect [OPTIONS] NAME|ID [NAME|ID...]
- -

选项

- - - - - - - - - - -
名称和缩写描述
--format,-f使用指定模板格式化输出
-

docker logs

获取容器的日志。

-

用法

1
docker logs [OPTIONS] CONTAINER
- -

选项

- - - - - - - - - - - - - - - - - - - - - - - - - - -
名称和缩写描述
--follow,-f按照日志输出
--since显示指定时间戳(2013-01-02T13:23:37Z)或相对时间(42m)后的日志
--tail,-n从日志末尾开始显示的行数
--timestamps,-t显示时间戳
--until显示指定时间戳(2013-01-02T13:23:37Z)或相对时间(42m)前的日志
-

docker network

管理网络。

-

用法

1
docker network COMMAND
- -

docker network connect

将容器连接到网络。

-
用法
1
docker network connect [OPTIONS] NETWORK CONTAINER
- -

docker network create

创建网络。

-
用法
1
docker network create [OPTIONS] NETWORK
- -
选项
- - - - - - - - - - - - -
名称和缩写默认值描述
--driver,-dbridge按照日志输出
-

docker network disconnect

断开容器与网络的连接。

-
用法
1
docker network create [OPTIONS] NETWORK
- -

docker network inspect

显示一个或多个网络的详细信息。

-
用法
1
docker network inspect [OPTIONS] NETWORK [NETWORK...]
- -

docker network ls

列出网络。

-
用法
1
docker network ls [OPTIONS]
- -
选项
- - - - - - - - - - - - -
名称和缩写默认值描述
--filter,-f提供过滤值(例如 driver=bridge)
-

docker network rm

删除一个或多个网络。

-
用法
1
docker network rm NETWORK [NETWORK...]
- -
选项
- - - - - - - - - - - - -
名称和缩写默认值描述
--filter,-f提供过滤值(例如 driver=bridge)
-

docker port

列出容器的端口映射或特定映射。

-

用法

1
docker port CONTAINER [PRIVATE_PORT[/PROTO]]
- -

例子

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
docker ps

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
b650456536c7 busybox:latest top 54 minutes ago Up 54 minutes 0.0.0.0:1234->9876/tcp, 0.0.0.0:4321->7890/tcp test
docker port test

7890/tcp -> 0.0.0.0:4321
9876/tcp -> 0.0.0.0:1234
docker port test 7890/tcp

0.0.0.0:4321
docker port test 7890/udp

2014/06/24 11:53:36 Error: No public port '7890/udp' published for test
docker port test 7890

0.0.0.0:4321
- - -

docker ps

列出容器。

-

用法

1
docker ps [OPTIONS]
- -

选项

- - - - - - - - - - - - - - -
名称和缩写描述
--all,-a显示所有容器(默认只显示运行中的容器)
--filter,-f根据提供的条件过滤输出
-

docker pull

从仓库下载镜像。

-

用法

1
docker pull [OPTIONS] NAME[:TAG|@DIGEST]
- - -

docker rename

重命名容器。

-

用法

1
docker rename CONTAINER NEW_NAME
- - -

docker restart

重启一个或多个容器。

-

用法

1
docker restart [OPTIONS] CONTAINER [CONTAINER...]
- - -

docker rm

移除一个或多个容器。

-

用法

1
docker rm [OPTIONS] CONTAINER [CONTAINER...]
- -

选项

- - - - - - - - - - -
名称和缩写描述
--force,-f强制删除正在运行的容器(使用 SIGKILL)
-

docker rmi

删除一个或多个镜像。

-

用法

1
docker rmi [OPTIONS] IMAGE [IMAGE...]
- -

选项

- - - - - - - - - - -
名称和缩写描述
--force,-f强制删除镜像(当其正在被容器使用中)
-

docker run

从镜像创建并运行新容器。

-

用法

1
docker run [OPTIONS] IMAGE [COMMAND] [ARG...]
- -

选项

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
名称和缩写默认值描述
--attach,-a附加到 STDIN、STDOUT 或 STDERR
--detach,-d在后台运行容器并打印容器 ID
--env,-e设置环境变量
--expose公开一个端口或一系列端口
--interactive,-i即使未附加,也要保持 STDIN 打开
--name为容器命名
--network将容器连接到网络
--publish,-p将容器的端口发布到主机
--restartno容器退出时应用的重启策略
--tty,-t分配伪 TTY
--volume,-v绑定挂载卷
-

在 Docker Hub 中搜索镜像。

-

用法

1
docker search [OPTIONS] TERM
- -

选项

- - - - - - - - - - - - - - -
名称和缩写描述
--filter,-f根据提供的条件过滤输出
--limit最大搜索结果数量
-

docker start

启动一个或多个容器。

-

用法

1
docker start [OPTIONS] CONTAINER [CONTAINER...]
- -

选项

- - - - - - - - - - - - - - -
名称和缩写描述
--attach,-a附加 STDOUT/STDERR 和转发信号
--interactive,-i附加容器的 STDIN
-

docker stats

显示容器资源使用统计的实时流。

-

用法

1
docker stats [OPTIONS] [CONTAINER...]
- -

选项

- - - - - - - - - - -
名称和缩写描述
--all,-a显示所有容器(默认只显示运行中的容器)
-

例子

1
2
3
4
5
docker stats
CONTAINER ID NAME CPU % MEM USAGE / LIMIT MEM % NET I/O BLOCK I/O PIDS
3d2180bad26e zoo1 0.05% 34.98MiB / 15.59GiB 0.22% 38.6MB / 0B 5.39MB / 656MB 39
828987756ee6 zoo3 0.04% 80.3MiB / 15.59GiB 0.50% 38.6MB / 0B 20.9MB / 522MB 32
d6e23f304046 zoo2 0.04% 78.84MiB / 15.59GiB 0.49% 38.6MB / 0B 19.8MB / 883MB 32
- - -

docker stop

停止一个或多个正在运行的容器。

-

用法

1
docker stop [OPTIONS] CONTAINER [CONTAINER...]
- - -

docker top

显示容器中的运行进程。

-

用法

1
docker top CONTAINER [ps OPTIONS]
- -

例子

1
2
3
4
5
6
7
8
9
10
docker top jellyfin
UID PID PPID C STIME TTY TIME CMD
root 652954 652845 0 6月16 ? 00:00:00 /package/admin/s6/command/s6-svscan -d4 -- /run/service
root 653039 652954 0 6月16 ? 00:00:00 s6-supervise s6-linux-init-shutdownd
root 653040 653039 0 6月16 ? 00:00:00 /package/admin/s6-linux-init/command/s6-linux-init-shutdownd -c /run/s6/basedir -g 3000 -C -B
root 653071 652954 0 6月16 ? 00:00:00 s6-supervise s6rc-fdholder
root 653072 652954 0 6月16 ? 00:00:00 s6-supervise svc-jellyfin
root 653073 652954 0 6月16 ? 00:00:00 s6-supervise s6rc-oneshot-runner
root 653081 653073 0 6月16 ? 00:00:00 /package/admin/s6/command/s6-ipcserverd -1 -- /package/admin/s6/command/s6-ipcserver-access -v0 -E -l0 -i data/rules -- /package/admin/s6/command/s6-sudod -t 30000 -- /package/admin/s6-rc/command/s6-rc-oneshot-run -l ../.. --
user 653197 653072 0 6月16 ? 00:11:38 /usr/bin/jellyfin --ffmpeg=/usr/lib/jellyfin-ffmpeg/ffmpeg
- - -

docker version

显示 Docker 版本信息。

-

用法

1
docker version [OPTIONS]
- - -

docker volume

管理卷。

-

用法

1
docker volume COMMAND
- -

docker volume create

创建卷。

-
用法
1
docker volume create [OPTIONS] [VOLUME]
- -
选项
- - - - - - - - - - - - -
名称和缩写默认值描述
--driver,-dlocal指定卷驱动程序名称
-

docker volume inspect

显示一个或多个卷的详细信息。

-
用法
1
docker volume inspect [OPTIONS] VOLUME [VOLUME...]
- -

docker volume ls

列出卷。

-
用法
1
docker volume ls [OPTIONS]
- -
选项
- - - - - - - - - - - - -
名称和缩写默认值描述
--filter,-flocal提供过滤值(例如 dangling=true)
-

docker volume rm

删除一个或多个卷。

-
用法
1
docker volume rm [OPTIONS] VOLUME [VOLUME...]
- - -

参考链接

Docker 命令行参考
深入探究docker attach的退出方式

- - -
- - - - - -
-
- -
-
-

- - - -
@@ -1960,13 +1705,13 @@

- 42k + 45k

Hexo & NexT.Muse 强力驱动 diff --git a/page/3/index.html b/page/3/index.html new file mode 100644 index 00000000..65d13c00 --- /dev/null +++ b/page/3/index.html @@ -0,0 +1,792 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +Moralok + + + + + + + + + + + +
+ +
+
+
+ + + + + +
+ + + + + + + +
+ +
+ +
+ + + + + + + + +
+ + +
+ + 0% +
+ + + + +
+ + + + +
+ + + +
+ + + + + + + +
+

+ +

+ + +
+ + + + +
+

常用命令

从 Docker 官方命令行参考中按顺序选取常用的命令和用法。

+

docker attach

将本地标准输入、输出和错误流附加到一个正在运行的容器。

+

用法

1
docker attach [OPTIONS] CONTAINER
+ +

描述

使用 docker attach 通过容器 ID 或名称将终端的标准输入、输出和错误附加到正在运行的容器。这允许你查看其正在进行的输出或以交互方式控制它,就好像命令直接在你的终端中运行一样。

+

如果 docker run 同时指定 -it 选项,使用 CTRL-p CTRL-q 退出 docker attach 时,不影响容器继续运行。

+

选项

+ + + + + + + + + + + + + + + + + +
名称和缩写默认值描述
--detach-keys覆盖用于从容器分离的键序列
--sig-proxytrue代理转发所有收到的信号给进程
+

docker exec

在正在运行中的容器里执行命令。

+

用法

1
docker exec [OPTIONS] CONTAINER COMMAND [ARG...]
+ +

选项

+ + + + + + + + + + + + + + + + + + + + + + + + + + +
名称和缩写描述
--detach,-d分离模式:在后台运行命令
--env,-e设置环境变量
--interactive,-i即使未附加也保持 STDIN 打开
--tty,-t分配伪 TTY
--workdir,-w容器内的工作目录
+

docker images

列出镜像。

+

用法

1
docker images [OPTIONS] [REPOSITORY[:TAG]]
+ +

选项

+ + + + + + + + + + +
名称和缩写描述
--all,-a展示所有镜像
+

docker info

展示系统范围的信息。

+

用法

1
docker info [OPTIONS]
+ +

选项

+ + + + + + + + + + +
名称和缩写描述
--format,-f使用指定模板格式化输出
+

docker inspect

返回有关 Docker 对象的低级信息。

+

用法

1
docker inspect [OPTIONS] NAME|ID [NAME|ID...]
+ +

选项

+ + + + + + + + + + +
名称和缩写描述
--format,-f使用指定模板格式化输出
+

docker logs

获取容器的日志。

+

用法

1
docker logs [OPTIONS] CONTAINER
+ +

选项

+ + + + + + + + + + + + + + + + + + + + + + + + + + +
名称和缩写描述
--follow,-f按照日志输出
--since显示指定时间戳(2013-01-02T13:23:37Z)或相对时间(42m)后的日志
--tail,-n从日志末尾开始显示的行数
--timestamps,-t显示时间戳
--until显示指定时间戳(2013-01-02T13:23:37Z)或相对时间(42m)前的日志
+

docker network

管理网络。

+

用法

1
docker network COMMAND
+ +

docker network connect

将容器连接到网络。

+
用法
1
docker network connect [OPTIONS] NETWORK CONTAINER
+ +

docker network create

创建网络。

+
用法
1
docker network create [OPTIONS] NETWORK
+ +
选项
+ + + + + + + + + + + + +
名称和缩写默认值描述
--driver,-dbridge按照日志输出
+

docker network disconnect

断开容器与网络的连接。

+
用法
1
docker network create [OPTIONS] NETWORK
+ +

docker network inspect

显示一个或多个网络的详细信息。

+
用法
1
docker network inspect [OPTIONS] NETWORK [NETWORK...]
+ +

docker network ls

列出网络。

+
用法
1
docker network ls [OPTIONS]
+ +
选项
+ + + + + + + + + + + + +
名称和缩写默认值描述
--filter,-f提供过滤值(例如 driver=bridge)
+

docker network rm

删除一个或多个网络。

+
用法
1
docker network rm NETWORK [NETWORK...]
+ +
选项
+ + + + + + + + + + + + +
名称和缩写默认值描述
--filter,-f提供过滤值(例如 driver=bridge)
+

docker port

列出容器的端口映射或特定映射。

+

用法

1
docker port CONTAINER [PRIVATE_PORT[/PROTO]]
+ +

例子

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
docker ps

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
b650456536c7 busybox:latest top 54 minutes ago Up 54 minutes 0.0.0.0:1234->9876/tcp, 0.0.0.0:4321->7890/tcp test
docker port test

7890/tcp -> 0.0.0.0:4321
9876/tcp -> 0.0.0.0:1234
docker port test 7890/tcp

0.0.0.0:4321
docker port test 7890/udp

2014/06/24 11:53:36 Error: No public port '7890/udp' published for test
docker port test 7890

0.0.0.0:4321
+ + +

docker ps

列出容器。

+

用法

1
docker ps [OPTIONS]
+ +

选项

+ + + + + + + + + + + + + + +
名称和缩写描述
--all,-a显示所有容器(默认只显示运行中的容器)
--filter,-f根据提供的条件过滤输出
+

docker pull

从仓库下载镜像。

+

用法

1
docker pull [OPTIONS] NAME[:TAG|@DIGEST]
+ + +

docker rename

重命名容器。

+

用法

1
docker rename CONTAINER NEW_NAME
+ + +

docker restart

重启一个或多个容器。

+

用法

1
docker restart [OPTIONS] CONTAINER [CONTAINER...]
+ + +

docker rm

移除一个或多个容器。

+

用法

1
docker rm [OPTIONS] CONTAINER [CONTAINER...]
+ +

选项

+ + + + + + + + + + +
名称和缩写描述
--force,-f强制删除正在运行的容器(使用 SIGKILL)
+

docker rmi

删除一个或多个镜像。

+

用法

1
docker rmi [OPTIONS] IMAGE [IMAGE...]
+ +

选项

+ + + + + + + + + + +
名称和缩写描述
--force,-f强制删除镜像(当其正在被容器使用中)
+

docker run

从镜像创建并运行新容器。

+

用法

1
docker run [OPTIONS] IMAGE [COMMAND] [ARG...]
+ +

选项

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
名称和缩写默认值描述
--attach,-a附加到 STDIN、STDOUT 或 STDERR
--detach,-d在后台运行容器并打印容器 ID
--env,-e设置环境变量
--expose公开一个端口或一系列端口
--interactive,-i即使未附加,也要保持 STDIN 打开
--name为容器命名
--network将容器连接到网络
--publish,-p将容器的端口发布到主机
--restartno容器退出时应用的重启策略
--tty,-t分配伪 TTY
--volume,-v绑定挂载卷
+

在 Docker Hub 中搜索镜像。

+

用法

1
docker search [OPTIONS] TERM
+ +

选项

+ + + + + + + + + + + + + + +
名称和缩写描述
--filter,-f根据提供的条件过滤输出
--limit最大搜索结果数量
+

docker start

启动一个或多个容器。

+

用法

1
docker start [OPTIONS] CONTAINER [CONTAINER...]
+ +

选项

+ + + + + + + + + + + + + + +
名称和缩写描述
--attach,-a附加 STDOUT/STDERR 和转发信号
--interactive,-i附加容器的 STDIN
+

docker stats

显示容器资源使用统计的实时流。

+

用法

1
docker stats [OPTIONS] [CONTAINER...]
+ +

选项

+ + + + + + + + + + +
名称和缩写描述
--all,-a显示所有容器(默认只显示运行中的容器)
+

例子

1
2
3
4
5
docker stats
CONTAINER ID NAME CPU % MEM USAGE / LIMIT MEM % NET I/O BLOCK I/O PIDS
3d2180bad26e zoo1 0.05% 34.98MiB / 15.59GiB 0.22% 38.6MB / 0B 5.39MB / 656MB 39
828987756ee6 zoo3 0.04% 80.3MiB / 15.59GiB 0.50% 38.6MB / 0B 20.9MB / 522MB 32
d6e23f304046 zoo2 0.04% 78.84MiB / 15.59GiB 0.49% 38.6MB / 0B 19.8MB / 883MB 32
+ + +

docker stop

停止一个或多个正在运行的容器。

+

用法

1
docker stop [OPTIONS] CONTAINER [CONTAINER...]
+ + +

docker top

显示容器中的运行进程。

+

用法

1
docker top CONTAINER [ps OPTIONS]
+ +

例子

1
2
3
4
5
6
7
8
9
10
docker top jellyfin
UID PID PPID C STIME TTY TIME CMD
root 652954 652845 0 6月16 ? 00:00:00 /package/admin/s6/command/s6-svscan -d4 -- /run/service
root 653039 652954 0 6月16 ? 00:00:00 s6-supervise s6-linux-init-shutdownd
root 653040 653039 0 6月16 ? 00:00:00 /package/admin/s6-linux-init/command/s6-linux-init-shutdownd -c /run/s6/basedir -g 3000 -C -B
root 653071 652954 0 6月16 ? 00:00:00 s6-supervise s6rc-fdholder
root 653072 652954 0 6月16 ? 00:00:00 s6-supervise svc-jellyfin
root 653073 652954 0 6月16 ? 00:00:00 s6-supervise s6rc-oneshot-runner
root 653081 653073 0 6月16 ? 00:00:00 /package/admin/s6/command/s6-ipcserverd -1 -- /package/admin/s6/command/s6-ipcserver-access -v0 -E -l0 -i data/rules -- /package/admin/s6/command/s6-sudod -t 30000 -- /package/admin/s6-rc/command/s6-rc-oneshot-run -l ../.. --
user 653197 653072 0 6月16 ? 00:11:38 /usr/bin/jellyfin --ffmpeg=/usr/lib/jellyfin-ffmpeg/ffmpeg
+ + +

docker version

显示 Docker 版本信息。

+

用法

1
docker version [OPTIONS]
+ + +

docker volume

管理卷。

+

用法

1
docker volume COMMAND
+ +

docker volume create

创建卷。

+
用法
1
docker volume create [OPTIONS] [VOLUME]
+ +
选项
+ + + + + + + + + + + + +
名称和缩写默认值描述
--driver,-dlocal指定卷驱动程序名称
+

docker volume inspect

显示一个或多个卷的详细信息。

+
用法
1
docker volume inspect [OPTIONS] VOLUME [VOLUME...]
+ +

docker volume ls

列出卷。

+
用法
1
docker volume ls [OPTIONS]
+ +
选项
+ + + + + + + + + + + + +
名称和缩写默认值描述
--filter,-flocal提供过滤值(例如 dangling=true)
+

docker volume rm

删除一个或多个卷。

+
用法
1
docker volume rm [OPTIONS] VOLUME [VOLUME...]
+ + +

参考链接

Docker 命令行参考
深入探究docker attach的退出方式

+ + +
+ + + + + +
+
+ +
+
+
+ + + + + + +
+
+ +
+ +
+ + + + + + + + + + + + + + + + + + + + + + + diff --git a/search.xml b/search.xml index ee0a3576..1a6e3e62 100644 --- a/search.xml +++ b/search.xml @@ -1,5 +1,50 @@ + + 在 Ubuntu 上安装 Clash + /2023/05/27/how-to-install-clash-on-ubuntu/ + 安装 Clash

GitHub 下载预构建的二进制文件。

+
:/mnt/hgfs/share$ wget https://github.com/Dreamacro/clash/releases/download/v1.16.0/clash-linux-amd64-v1.16.0.gz
+ +

使用 gzip 解压压缩包 clash-linux-amd64-v1.16.0.gz 得到 clash-linux-amd64-v1.16.0。

+
:/mnt/hgfs/share$ gzip -d clash-linux-amd64-v1.16.0.gz 
gzip: clash-linux-amd64-v1.16.0: Value too large for defined data type
+

忽略提示。

+

移动二进制文件到目录 /usr/local/bin 并且重命名为 clash。

+
:/mnt/hgfs/share$ sudo mv clash-linux-amd64-v1.16.0 /usr/local/bin/clash
[sudo] password for wrmao:
+ +

现在可以通过 clash -v 查看 Clash 的版本信息。

+
:~$ clash -v
Clash v1.16.0 linux amd64 with go1.20.4 Fri May 19 13:57:32 UTC 2023
+ +

使用 Clash

使用命令 clash 启动,可以看到日志。

+
:~$ clash
INFO[0000] Can't find config, create a initial config file
INFO[0000] Can't find MMDB, start download
INFO[0003] Mixed(http+socks) proxy listening at: 127.0.0.1:7890
+ +

在第一次启动 Clash 时,Clash 会在 ~/.config 下创建目录 clash,并在其中创建 3 个文件。

+
:~/.config/clash$ ls
cache.db config.yaml Country.mmdb
+

其中 config.yaml 是 Clash 的配置文件,Country.mmdb 是全球 IP 库,可以实现各个国家的 IP 信息解析和地理定位。
config.yaml 的内容直接从已有的配置文件复制过来。

+

可以浏览器访问 http://clash.razord.top/#/proxies 选择代理服务器。

+

设置 Clash 为后台服务

参考官方文档 Clash as a service

+

拷贝配置文件到 /etc/clash

+
:~/.config/clash$ sudo cp config.yaml /etc/clash/
:~/.config/clash$ sudo cp Country.mmdb /etc/clash/
+ +

/etc/systemd/system/clash.service 创建 systemd 配置文件:

+
[Unit]
Description=Clash daemon, A rule-based proxy in Go.
After=network-online.target

[Service]
Type=simple
Restart=always
ExecStart=/usr/local/bin/clash -d /etc/clash

[Install]
WantedBy=multi-user.target
+ +

之后重载 systemd:

+
systemctl daemon-reload
+ +

设置系统开机时启动 clashd:

+
systemctl enable clash
+ +

马上启动 clashd:

+
systemctl start clash
+ +

检查 Clash 的健康状态和日志:

+
systemctl status clash
journalctl -xe
]]> + + clash + proxy + + Docker 常用命令列表 /2020/08/19/docker-frequently-used-commands/ @@ -479,51 +524,6 @@ openvpn - - 在 Ubuntu 上安装 Clash - /2023/05/27/how-to-install-clash-on-ubuntu/ - 安装 Clash

GitHub 下载预构建的二进制文件。

-
:/mnt/hgfs/share$ wget https://github.com/Dreamacro/clash/releases/download/v1.16.0/clash-linux-amd64-v1.16.0.gz
- -

使用 gzip 解压压缩包 clash-linux-amd64-v1.16.0.gz 得到 clash-linux-amd64-v1.16.0。

-
:/mnt/hgfs/share$ gzip -d clash-linux-amd64-v1.16.0.gz 
gzip: clash-linux-amd64-v1.16.0: Value too large for defined data type
-

忽略提示。

-

移动二进制文件到目录 /usr/local/bin 并且重命名为 clash。

-
:/mnt/hgfs/share$ sudo mv clash-linux-amd64-v1.16.0 /usr/local/bin/clash
[sudo] password for wrmao:
- -

现在可以通过 clash -v 查看 Clash 的版本信息。

-
:~$ clash -v
Clash v1.16.0 linux amd64 with go1.20.4 Fri May 19 13:57:32 UTC 2023
- -

使用 Clash

使用命令 clash 启动,可以看到日志。

-
:~$ clash
INFO[0000] Can't find config, create a initial config file
INFO[0000] Can't find MMDB, start download
INFO[0003] Mixed(http+socks) proxy listening at: 127.0.0.1:7890
- -

在第一次启动 Clash 时,Clash 会在 ~/.config 下创建目录 clash,并在其中创建 3 个文件。

-
:~/.config/clash$ ls
cache.db config.yaml Country.mmdb
-

其中 config.yaml 是 Clash 的配置文件,Country.mmdb 是全球 IP 库,可以实现各个国家的 IP 信息解析和地理定位。
config.yaml 的内容直接从已有的配置文件复制过来。

-

可以浏览器访问 http://clash.razord.top/#/proxies 选择代理服务器。

-

设置 Clash 为后台服务

参考官方文档 Clash as a service

-

拷贝配置文件到 /etc/clash

-
:~/.config/clash$ sudo cp config.yaml /etc/clash/
:~/.config/clash$ sudo cp Country.mmdb /etc/clash/
- -

/etc/systemd/system/clash.service 创建 systemd 配置文件:

-
[Unit]
Description=Clash daemon, A rule-based proxy in Go.
After=network-online.target

[Service]
Type=simple
Restart=always
ExecStart=/usr/local/bin/clash -d /etc/clash

[Install]
WantedBy=multi-user.target
- -

之后重载 systemd:

-
systemctl daemon-reload
- -

设置系统开机时启动 clashd:

-
systemctl enable clash
- -

马上启动 clashd:

-
systemctl start clash
- -

检查 Clash 的健康状态和日志:

-
systemctl status clash
journalctl -xe
]]>
- - clash - proxy - -
在 Windows 10 上安装 OpenVPN 服务器 /2023/06/07/how-to-setup-OpenVPN-server-on-windows-10/ @@ -663,8 +663,8 @@

参考链接

Linux 让终端走代理的几种方法
Linux ❀ wget设置代理
配置Docker使用代理
Docker的三种网络代理配置
docker 设置代理,以及国内加速镜像设置

]]> - docker proxy + docker
@@ -933,91 +933,289 @@ - JVM GC 的测试和分析 - /2023/11/01/testing-and-analysis-of-jvm-gc/ - 堆的组成
public class JvmGcTest_1 {

public static final int _512KB = 512 * 1024;
public static final int _1MB = 1024 * 1024;
public static final int _6MB = 6 * 1024 * 1024;
public static final int _7MB = 7 * 1024 * 1024;
public static final int _8MB = 8 * 1024 * 1024;

// -Xms20M -Xmx20M -Xmn10M -XX:+UseSerialGC -XX:+PrintGCDetails -verbose:gc
// -XX:+UseSerialGC 避免幸存区比例动态调整
public static void main(String[] args) {

}
}
+ Java 类加载器源码分析 + /2023/07/13/Java-class-loader-source-code-analysis/ + 组织类加载工作:loadClass

Java 程序启动的时候,Java 虚拟机会调用 java.lang.ClassLoader#loadClass(java.lang.String) 加载 main 方法所在的类。

+
public Class<?> loadClass(String name) throws ClassNotFoundException {
return loadClass(name, false);
}
-
Heap
def new generation total 9216K, used 2010K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
eden space 8192K, 24% used [0x00000000fec00000, 0x00000000fedf68c8, 0x00000000ff400000)
from space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
to space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
tenured generation total 10240K, used 0K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
the space 10240K, 0% used [0x00000000ff600000, 0x00000000ff600000, 0x00000000ff600200, 0x0000000100000000)
Metaspace used 3288K, capacity 4496K, committed 4864K, reserved 1056768K
class space used 348K, capacity 388K, committed 512K, reserved 1048576K
+

根据注释可知,此方法加载具有指定二进制名称的类,它由 Java 虚拟机调用来解析类引用,调用它等同于调用 loadClass(name, false)

+
protected Class<?> loadClass(String name, boolean resolve)
throws ClassNotFoundException
{
// 以二进制名称获取类加载的锁进行同步
synchronized (getClassLoadingLock(name)) {
// First, check if the class has already been loaded
// 首先检查类是否已加载,根据该方法注释可知:
// 如果当前类加载器已经被 Java 虚拟机记录为具有该二进制名称的类的加载器(initiating loader),Java 虚拟机可以直接返回 Class 对象。
Class<?> c = findLoadedClass(name);
if (c == null) {
long t0 = System.nanoTime();
try {
// 如果类还未加载,先委派给父·类加载器进行加载,如果父·类加载器为 null,则使用虚拟机内建的类加载器进行加载
if (parent != null) {
// 递归调用
c = parent.loadClass(name, false);
} else {
// 递归调用的终结点
c = findBootstrapClassOrNull(name);
}
} catch (ClassNotFoundException e) {
// ClassNotFoundException thrown if class not found
// from the non-null parent class loader
// 当父·类加载器长尝试加载但是失败,捕获异常但是什么都不做,因为接下来,当前类加载器需要自己也尝试加载。
}

if (c == null) {
// If still not found, then invoke findClass in order
// to find the class.
long t1 = System.nanoTime();
// 父·类加载器未找到类,当前类加载器自己找。
c = findClass(name);

// this is the defining class loader; record the stats
sun.misc.PerfCounter.getParentDelegationTime().addTime(t1 - t0);
sun.misc.PerfCounter.getFindClassTime().addElapsedTimeFrom(t1);
sun.misc.PerfCounter.getFindClasses().increment();
}
}
if (resolve) {
resolveClass(c);
}
return c;
}
}
-

根据打印的信息,组成如下:

-
    -
  • Heap: 堆。
      -
    • def new generation: 新生代。
    • -
    • tenured generation: 老年代。
    • -
    • Metaspace: 元空间,实际上并不属于堆, -XX:+PrintGCDetails 将它的信息一起输出。
    • -
    -
  • -
-

堆空间的比例

新生代中的空间占比 eden:from:to 在默认情况下是 8:1:1,与观察到的数据 8192K:1024K:1024K 一致。
新生代的空间 eden + from + to 为 10240K,符合 -Xmn10M 设置的大小。
total 显示为 9216K,即 eden + from 的大小,是因为 to 的空间不计算在内。新生代可用的空间只有 eden + fromto 空间只是在使用标记-复制算法进行垃圾回收时使用。
老年代的空间为 10240K。
目前仅 eden 中已用 2010K,约占 eden 空间的 24%。

-

从内存地址分析堆空间

内存地址为 16 位的 16 进制的数字,64 位机器。
[0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000) 分别表示地址空间的开始、已用、结束的地址指针。
新生代 [0x00000000fec00000, 0x00000000ff600000),老年代 [0x00000000ff600000, 0x0000000100000000),计算可得空间大小均为 10MB。
eden 中已用的空间地址为 [0x00000000fec00000, 0x00000000fedf68c8),空间大小为 2058440 byte,约等于 2010K。

-

显而易见,新生代和老生代是一片完全连续的地址空间。

-

堆的垃圾回收

public static void main(String[] args) {
List<byte[]> list = new ArrayList<>();
list.add(new byte[_7MB]);
}
+

根据注释可知,java.lang.ClassLoader#loadClass(java.lang.String, boolean) 同样是加载“具有指定二进制名称的类”,此方法的实现按以下顺序搜索类:

+
    +
  1. 调用 findLoadedClass(String) 以检查该类是否已加载。
  2. +
  3. 在父·类加载器上调用 loadClass 方法。如果父·类加载器为空,则使用虚拟机内置的类加载器。
  4. +
  5. 调用 findClass(String) 方法来查找该类。
  6. +
+

如果使用上述步骤找到了该类(找到并定义类),并且解析标志为 true,则此方法将对生成的 Class 对象调用 resolveClass(Class) 方法。鼓励 ClassLoader 的子类重写 findClass(String),而不是此方法。除非被重写,否则此方法在整个类加载过程中以 getClassLoadingLock 方法的结果进行同步。

+
+

注意:父·类加载器并非父类·类加载器(当前类加载器的父类),而是当前的类加载器的 parent 属性被赋值另外一个类加载器实例,其含义更接近于“可以委派类加载工作的另一个类加载器(一个帮忙干活的上级)”。虽然绝大多数说法中,当一个类加载器的 parent 值为 null 时,它的父·类加载器是引导类加载器(bootstrap class loader),但是当看到 findBootstrapClassOrNull 方法时,我有点困惑,因为我以为会看到语义类似于 loadClassByBootstrapClassLoader 这样的方法名。从注释和代码的语义上看,bootstrap class loader 不像是任何一个类加载器的父·类加载器,但是从类加载的机制设计上说,它是,只是因为它并非由 Java 语言编写而成,不能实例化并赋值给 parent 属性。findBootstrapClassOrNull 方法的语义更接近于:当一个类加载器的父·类加载器为 null 时,将准备加载的目标类先当作启动类(Bootstrap Class)尝试查找,如果找不到就返回 null

+
+

怎么并行地加载类 getClassLoadingLock

需要加载的类可能很多很多,我们很容易想到如果可以并行地加载类就好了。显然,JDK 的编写者考虑到了这一点。
此方法返回类加载操作的锁对象。为了向后兼容,此方法的默认实现的行为如下。如果此 ClassLoader 对象注册为具备并行能力,则该方法返回与指定类名关联的专用对象。 否则,该方法返回此 ClassLoader 对象。
简单地说,如果 ClassLoader 对象注册为具备并行能力,那么一个 name 一个锁对象,已创建的锁对象保存在 ConcurrentHashMap 类型的 parallelLockMap 中,这样类加载工作可以并行;否则所有类加载工作共用一个锁对象,就是 ClassLoader 对象本身。
这个方案意味着非同名的目标类可以认为在加载时没有冲突?

+
protected Object getClassLoadingLock(String className) {
Object lock = this;
if (parallelLockMap != null) {
Object newLock = new Object();
lock = parallelLockMap.putIfAbsent(className, newLock);
if (lock == null) {
lock = newLock;
}
}
return lock;
}
-
[GC (Allocation Failure) [DefNew: 2013K->721K(9216K), 0.0105099 secs] 2013K->721K(19456K), 0.0105455 secs] [Times: user=0.00 sys=0.00, real=0.01 secs] 
Heap
def new generation total 9216K, used 8135K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
eden space 8192K, 90% used [0x00000000fec00000, 0x00000000ff33d8c0, 0x00000000ff400000)
from space 1024K, 70% used [0x00000000ff500000, 0x00000000ff5b45f0, 0x00000000ff600000)
to space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
tenured generation total 10240K, used 0K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
the space 10240K, 0% used [0x00000000ff600000, 0x00000000ff600000, 0x00000000ff600200, 0x0000000100000000)
Metaspace used 3354K, capacity 4496K, committed 4864K, reserved 1056768K
class space used 360K, capacity 388K, committed 512K, reserved 1048576K
+
什么是 “ClassLoader 对象注册为具有并行能力”呢?

AppClassLoader 中有一段 static 代码。事实上 java.lang.ClassLoader#registerAsParallelCapable 是将 ClassLoader 对象注册为具有并行能力唯一的入口。因此,所有想要注册为具有并行能力的 ClassLoader 都需要调用一次该方法。

+
static {
ClassLoader.registerAsParallelCapable();
}
-

Allocation Failure,正常情况下,新对象总是分配在 Eden,分配空间失败,eden 的剩余空间不足以存放 7M 大小的对象,新生代发生 minor GC
[DefNew: 2013K->721K(9216K), 0.0105099 secs],新生代在垃圾回收前后空间的占用变化和耗时。
2013K->721K(19456K), 0.0105455 secs,整个堆在垃圾回收前后空间的占用变化和耗时。

-

GC 类型

    -
  • GC: minor GC。
  • -
  • Fulle GC: full GC。
  • -
-

from 和 to 的角色变换

from 的已用空间的地址为 [0x00000000ff500000, 0x00000000ff5b45f0),空间大小为 738800 byte,约 721K,与 GC 后的新生代空间占用大小一致。在垃圾回收后,eden 区域存活的对象全部转移到了原 to 空间,fromto 空间的角色相互转换(从地址空间的信息可以看到此时 to 的地址指针比 from 的地址指针小)。
eden 的已用空间的地址为 [0x00000000fec00000, 0x00000000ff33d8c0),空间大小为 7592128 byte,约 7.24M,比 7M 大不少。此时 eden 区域除了 byte[] 对象外,还存储了其他对象,比如为了创建 List<byte[]> 对象而新加载的类对象。

-

eden 空间足够时不发生 GC

public static void main(String[] args) {
List<byte[]> list = new ArrayList<>();
list.add(new byte[_7MB]);
list.add(new byte[_512KB]);
}
+

java.lang.ClassLoader#registerAsParallelCapable 方法有一个注解 @CallerSensitive,这是因为它的代码中调用的 native 方法 sun.reflect.Reflection#getCallerClass() 方法。由注释可知,当且仅当以下所有条件全部满足时才注册成功:

+
    +
  1. 尚未创建调用者的实例(类加载器尚未实例化)
  2. +
  3. 调用者的所有超类(Object 类除外)都注册为具有并行能力。
  4. +
+
怎么保证这两个条件成立呢?
    +
  1. 对于第一个条件,可以通过将调用的代码写在 static 代码块中来实现。如果写在构造器方法里,并且通过单例模式保证只实例化一次可以吗?答案是不行的,后续会解释这个“注册”行为在构造器方法中是如何被使用以及为何不能写在构造器方法里。
  2. +
  3. 对于第二个条件,由于 Java 虚拟机加载类时,总是会先尝试加载其父类,又因为加载类时会先调用 static 代码块,因此父类的 static 代码块总是先于子类的 static 代码块。
  4. +
+

你可以看到 AppClassLoader->URLClassLoader->SecureClassLoader->ClassLoader 均在 static 代码块实现注册,以保证满足以上两个条件。

+
注册工作做了什么?

简单地说就是保存了类加载器所属 ClassSet

+
@CallerSensitive
protected static boolean registerAsParallelCapable() {
// 获得此方法的调用者的 Class 实例,asSubClass 可以将 Class<?> 类型的 Class 转换为代表指定类的子类的 Class<? extends U> 类型的 Class。
Class<? extends ClassLoader> callerClass =
Reflection.getCallerClass().asSubclass(ClassLoader.class);
// 注册调用者的 Class 为具有并行能力
return ParallelLoaders.register(callerClass);
}
-
[GC (Allocation Failure) [DefNew: 2013K->721K(9216K), 0.0011172 secs] 2013K->721K(19456K), 0.0011443 secs] [Times: user=0.00 sys=0.00, real=0.00 secs] 
Heap
def new generation total 9216K, used 8647K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
eden space 8192K, 96% used [0x00000000fec00000, 0x00000000ff3bd8d0, 0x00000000ff400000)
from space 1024K, 70% used [0x00000000ff500000, 0x00000000ff5b45f0, 0x00000000ff600000)
to space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
tenured generation total 10240K, used 0K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
the space 10240K, 0% used [0x00000000ff600000, 0x00000000ff600000, 0x00000000ff600200, 0x0000000100000000)
Metaspace used 3354K, capacity 4496K, committed 4864K, reserved 1056768K
class space used 360K, capacity 388K, committed 512K, reserved 1048576K
+

方法 java.lang.ClassLoader.ParallelLoaders#registerParallelLoaders 封装了一组具有并行能力的加载器类型。就是持有 ClassLoaderClass 实例的集合,并保证添加时加同步锁。

+
// private 修饰,只有其外部类 ClassLoader 才可以使用
// static 修饰,内部类如果需要定义 static 方法或者 static 变量,必须用 static 修饰
private static class ParallelLoaders {
// private 修饰构造器方法,不希望这个类被实例化,只想要使用它的静态变量和方法。
private ParallelLoaders() {}

// the set of parallel capable loader types
// 使用 loaderTypes 时通过 synchronized 加同步锁
private static final Set<Class<? extends ClassLoader>> loaderTypes =
Collections.newSetFromMap(
// todo: 为什么使用弱引用来实现?为了卸载类时的垃圾回收?
new WeakHashMap<Class<? extends ClassLoader>, Boolean>());
static {
// 将 ClassLoader 本身注册为具有并行能力
synchronized (loaderTypes) { loaderTypes.add(ClassLoader.class); }
}

/**
* Registers the given class loader type as parallel capabale.
* Returns {@code true} is successfully registered; {@code false} if
* loader's super class is not registered.
*/
static boolean register(Class<? extends ClassLoader> c) {
synchronized (loaderTypes) {
if (loaderTypes.contains(c.getSuperclass())) {
// register the class loader as parallel capable
// if and only if all of its super classes are.
// Note: given current classloading sequence, if
// the immediate super class is parallel capable,
// all the super classes higher up must be too.
// 当且仅当其所有超类都具有并行能力时,才将类加载器注册为具有并行能力。
// 注意:给定当前的类加载顺序(加载类时,Java 虚拟机总是先尝试加载其父类),如果直接超类具有并行能力,则所有更高的超类也必然具有并行能力。
loaderTypes.add(c);
return true;
} else {
return false;
}
}
}

/**
* Returns {@code true} if the given class loader type is
* registered as parallel capable.
*/
static boolean isRegistered(Class<? extends ClassLoader> c) {
synchronized (loaderTypes) {
return loaderTypes.contains(c);
}
}
}
-

由于 eden 区域还能放下 512K 的对象,所以仍然只会发生一次垃圾回收。
eden 区域的已用空间比例上升到 96%,已用空间的地址为 [0x00000000fec00000, 0x00000000ff3bd8d0),空间大小为 8116432 byte,约 7.74M,比上一次增加了 524304 byte,即 512 * 1024 + 16。显然第二次添加时,不再因为创建 List<byte[]> 而创建额外的对象,只有创建对象所需的 512K 和 16 字节的对象头。这一刻数值的精确让人欣喜hhh

-

新生代空间不足,部分对象提前晋升到老年代

public static void main(String[] args) {
List<byte[]> list = new ArrayList<>();
list.add(new byte[_7MB]);
list.add(new byte[_512KB]);
list.add(new byte[_512KB]);
}
+
“注册”怎么和锁产生联系?

但是以上的注册过程只是起到一个“标记”作用,没有涉及和锁相关的代码,那么这个“标记”是怎么和真正的锁产生联系呢?ClassLoader 提供了三个构造器方法:

+
private ClassLoader(Void unused, ClassLoader parent) {
// 由 private 修饰,不允许子类重写
this.parent = parent;
if (ParallelLoaders.isRegistered(this.getClass())) {
// 如果类加载器已经注册为具有并行能力,则做一些赋值操作
parallelLockMap = new ConcurrentHashMap<>();
// 保存 package->certs 的 map 映射,相关的工作也可以并行进行
package2certs = new ConcurrentHashMap<>();
assertionLock = new Object();
} else {
// no finer-grained lock; lock on the classloader instance
parallelLockMap = null;
package2certs = new Hashtable<>();
assertionLock = this;
}
}

// 由 protect 修饰,允许子类重写,传递了父·类加载器。
protected ClassLoader(ClassLoader parent) {
this(checkCreateClassLoader(), parent);
}

// 由 protect 修饰,允许子类重写,父·类加载器使用 getSystemClassLoader 方法返回的系统类加载器。
protected ClassLoader() {
this(checkCreateClassLoader(), getSystemClassLoader());
}
-
[GC (Allocation Failure) [DefNew: 2013K->721K(9216K), 0.0013580 secs] 2013K->721K(19456K), 0.0013932 secs] [Times: user=0.00 sys=0.00, real=0.00 secs] 
[GC (Allocation Failure) [DefNew: 8565K->512K(9216K), 0.0046378 secs] 8565K->8396K(19456K), 0.0046540 secs] [Times: user=0.00 sys=0.00, real=0.00 secs]
Heap
def new generation total 9216K, used 1350K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
eden space 8192K, 10% used [0x00000000fec00000, 0x00000000fecd1a20, 0x00000000ff400000)
from space 1024K, 50% used [0x00000000ff400000, 0x00000000ff480048, 0x00000000ff500000)
to space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
tenured generation total 10240K, used 7884K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
the space 10240K, 77% used [0x00000000ff600000, 0x00000000ffdb33a0, 0x00000000ffdb3400, 0x0000000100000000)
Metaspace used 3354K, capacity 4496K, committed 4864K, reserved 1056768K
class space used 360K, capacity 388K, committed 512K, reserved 1048576K
+

ClassLoader 的构造器方法最终都调用 private 修饰的 java.lang.ClassLoader#ClassLoader(java.lang.Void, java.lang.ClassLoader),又因为父类的构造器方法总是先于子类的构造器方法被执行,这样一来,所有继承 ClassLoader 的类加载器在创建的时候都会根据在创建实例之前是否注册为具有并行能力而做不同的操作。

+
为什么注册的代码不能写在构造器方法里?

使用“注册”的代码也解释了 java.lang.ClassLoader#registerAsParallelCapable 为了满足调用成功的第一个条件为什么不能写在构造器方法中,因为使用这个机制的代码先于你在子类构造器方法里编写的代码被执行。
同时,不论是 loadLoader 还是 getClassLoadingLock 都是由 protect 修饰,允许子类重写,来自定义并行加载类的能力。

+
+

todo: 讨论自定义类加载器的时候,印象里似乎对并行加载类的提及比较少,之后留意一下。

+
+

检查目标类是否已加载

加载类之前显然需要检查目标类是否已加载,这项工作最终是交给 native 方法,在虚拟机中执行,就像在黑盒中一样。
todo: 不同类加载器同一个类名会如何判定?

+
protected final Class<?> findLoadedClass(String name) {
if (!checkName(name))
return null;
return findLoadedClass0(name);
}

private native final Class<?> findLoadedClass0(String name);
-

在第三次添加时,由于 eden 空间不足,因此又发生了第二次垃圾回收。
[DefNew: 8565K->512K(9216K), 0.0046378 secs],新生代的空间占用下降到了 512K,应该是在 from 中留下了第二次添加时的 512K。
在第二次添加完成后,eden [0x00000000fec00000, 0x00000000ff3bd8d0)from [0x00000000ff500000, 0x00000000ff5b45f0) 占用的空间为 8116432 + 738800 = 8855232 约 8647.7K,略大于 8565K。很奇怪,第二次垃圾回收前,新生代的空间占用为什么有小幅度下降。
8565K->8396K(19456K), 0.0046540 secs,堆的占用空间并未发生明显下降。部分对象因为新生代空间不足,提前晋升到了老年代中。8396K - 512 K 剩余 7884K,全部晋升到老年代,符合 77% 的统计数据。
eden 中加入了第三次添加时的对象,大于 512K 不少。
此时 edenfromtenured 中均有不好确认成分的空间占用,比如 from 中多了 56 字节。

-

新生代空间不足,大对象直接在老年代创建

public static void main(String[] args) {
List<byte[]> list = new ArrayList<>();
list.add(new byte[_8MB]);
}
+

保证核心类库的安全性:双亲委派模型

正如在代码和注释中所看到的,正常情况下,类的加载工作先委派给自己的父·类加载器,即 parent 属性的值——另一个类加载器实例。一层一层向上委派直到 parentnull,代表类加载工作会尝试先委派给虚拟机内建的 bootstrap class loader 处理,然后由 bootstrap class loader 首先尝试加载。如果被委派方加载失败,委派方会自己再尝试加载。
正常加载类的是应用类加载器 AppClassLoader,它的 parentExtClassLoaderExtClassLoaderparentnull

+
+

在网上也能看到有人提到以前大家称之为“父·类加载器委派机制”,“双亲”一词易引人误解。

+
+
为什么要用这套奇怪的机制

这样设计很明显的一个目的就是保证核心类库的类加载安全性。比如 Object 类,设计者不希望编写代码的人重新写一个 Object 类并加载到 Java 虚拟机中,但是加载类的本质就是读取字节数据传递给 Java 虚拟机创建一个 Class 实例,使用这套机制的目的之一就是为了让核心类库先加载,同时先加载的类不会再次被加载。

+

通常流程如下:

+
    +
  1. AppClassLoader 调用 loadClass 方法,先委派给 ExtClassLoader
  2. +
  3. ExtClassLoader 调用 loadClass 方法,先委派给 bootstrap class loader
  4. +
  5. bootstrap class loader 在其设置的类路径中无法找到 BananaTest 类,抛出 ClassNotFoundException 异常。
  6. +
  7. ExtClassLoader 捕获异常,然后自己调用 findClass 方法尝试进行加载。
  8. +
  9. ExtClassLoader 在其设置的类路径中无法找到 BananaTest 类,抛出 ClassNotFoundException 异常。
  10. +
  11. AppClassLoader 捕获异常,然后自己调用 findClass 方法尝试进行加载。
  12. +
+

注释中提到鼓励重写 findClass 方法而不是 loadClass,因为正是该方法实现了所谓的“双亲委派模型”,java.lang.ClassLoader#findClass 实现了如何查找加载类。如果不是专门为了破坏这个类加载模型,应该选择重写 findClass;其次是因为该方法中涉及并行加载类的机制。

+

查找类资源:findClass

默认情况下,类加载器在自己尝试进行加载时,会调用 java.lang.ClassLoader#findClass 方法,该方法由子类重写。AppClassLoaderExtClassLoader 都是继承 URLClassLoader,而 URLClassLoader 重写了 findClass 方法。根据注释可知,该方法会从 URL 搜索路径查找并加载具有指定名称的类。任何引用 Jar 文件的 URL 都会根据需要加载并打开,直到找到该类。

+

过程如下:

+
    +
  1. name 转换为 path,比如 com.example.BananaTest 转换为 com/example/BananaTest.class
  2. +
  3. 使用 URL 搜索路径 URLClassPathpath 中获取 Resource,本质上就是轮流将可能存放的目录列表拼接上文件路径进行查找。
  4. +
  5. 调用 URLClassLoader 的私有方法 defineClass,该方法调用父类 SecureClassLoaderdefineClass 方法。
  6. +
+
protected Class<?> findClass(final String name)
throws ClassNotFoundException
{
final Class<?> result;
try {
// todo:
result = AccessController.doPrivileged(
new PrivilegedExceptionAction<Class<?>>() {
public Class<?> run() throws ClassNotFoundException {
// 将 name 转换为 path
String path = name.replace('.', '/').concat(".class");
// 从 URLClassPath 中查找 Resource
Resource res = ucp.getResource(path, false);
if (res != null) {
try {
return defineClass(name, res);
} catch (IOException e) {
throw new ClassNotFoundException(name, e);
} catch (ClassFormatError e2) {
if (res.getDataError() != null) {
e2.addSuppressed(res.getDataError());
}
throw e2;
}
} else {
return null;
}
}
}, acc);
} catch (java.security.PrivilegedActionException pae) {
throw (ClassNotFoundException) pae.getException();
}
if (result == null) {
throw new ClassNotFoundException(name);
}
return result;
}
-
Heap
def new generation total 9216K, used 2177K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
eden space 8192K, 26% used [0x00000000fec00000, 0x00000000fee20730, 0x00000000ff400000)
from space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
to space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
tenured generation total 10240K, used 8192K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
the space 10240K, 80% used [0x00000000ff600000, 0x00000000ffe00010, 0x00000000ffe00200, 0x0000000100000000)
Metaspace used 3353K, capacity 4496K, committed 4864K, reserved 1056768K
class space used 360K, capacity 388K, committed 512K, reserved 1048576K
+

查找类的目录列表:URLClassPath

URLClassLoader 拥有一个 URLClassPath 类型的属性 ucp。由注释可知,URLClassPath 类用于维护一个 URL 的搜索路径,以便从 Jar 文件和目录中加载类和资源。
URLClassPath 的核心构造器方法:

+
public URLClassPath(URL[] urls,
URLStreamHandlerFactory factory,
AccessControlContext acc) {
// 将 urls 保存到 ArrayList 类型的属性 path 中,根据注释,path 的含义为 URL 的原始搜索路径。
for (int i = 0; i < urls.length; i++) {
path.add(urls[i]);
}
// 将 urls 保存到 Stack 类型的属性 urls 中,根据注释,urls 的含义为未打开的 URL 列表。
push(urls);
if (factory != null) {
// 如果 factory 不为 null,使用它创建一个 URLStreamHandler 实例处理 Jar 文件。
jarHandler = factory.createURLStreamHandler("jar");
}
if (DISABLE_ACC_CHECKING)
this.acc = null;
else
this.acc = acc;
}
-

在 Eden 空间肯定不足而老年代空间足够的情况下,大对象会直接在老年代中创建,此时不会发生 GC。

-

内存不足 OOM

public static void main(String[] args) {
List<byte[]> list = new ArrayList<>();
list.add(new byte[_8MB]);
list.add(new byte[_8MB]);
}
+
URLClassPath#getResource

URLClassLoader 调用 sun.misc.URLClassPath#getResource(java.lang.String, boolean) 方法获取指定名称对应的资源。根据注释,该方法会查找 URL 搜索路径上的第一个资源,如果找不到资源,则返回 null
显然,这里的 Loader 不是我们前面提到的类加载器。LoaderURLClassPath 的内部类,用于表示根据一个基本 URL 创建的资源和类的加载器。也就是说一个基本 URL 对应一个 Loader

+
public Resource getResource(String name, boolean check) {
if (DEBUG) {
System.err.println("URLClassPath.getResource(\"" + name + "\")");
}

Loader loader;
// 获取缓存(默认没有用)
int[] cache = getLookupCache(name);
// 不断获取下一个 Loader 来获取 Resource,直到获取到或者没有下一个 Loader
for (int i = 0; (loader = getNextLoader(cache, i)) != null; i++) {
Resource res = loader.getResource(name, check);
if (res != null) {
return res;
}
}
return null;
}
-
waiting...
[GC (Allocation Failure) [DefNew: 4711K->928K(9216K), 0.0017245 secs][Tenured: 8192K->9117K(10240K), 0.0021690 secs] 12903K->9117K(19456K), [Metaspace: 4267K->4267K(1056768K)], 0.0039336 secs] [Times: user=0.00 sys=0.00, real=0.00 secs]
[Full GC (Allocation Failure) [Tenured: 9117K->9063K(10240K), 0.0014352 secs] 9117K->9063K(19456K), [Metaspace: 4267K->4267K(1056768K)], 0.0014614 secs] [Times: user=0.00 sys=0.00, real=0.00 secs]
Exception in thread "Thread-0" java.lang.OutOfMemoryError: Java heap space
at com.moralok.jvm.gc.JvmGcTest.lambda$main$0(JvmGcTest.java:27)
at com.moralok.jvm.gc.JvmGcTest$$Lambda$1/2003749087.run(Unknown Source)
at java.lang.Thread.run(Thread.java:750)

Heap
def new generation total 9216K, used 1502K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
eden space 8192K, 18% used [0x00000000fec00000, 0x00000000fed77a00, 0x00000000ff400000)
from space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
to space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
tenured generation total 10240K, used 9063K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
the space 10240K, 88% used [0x00000000ff600000, 0x00000000ffed9c50, 0x00000000ffed9e00, 0x0000000100000000)
Metaspace used 4787K, capacity 4884K, committed 4992K, reserved 1056768K
class space used 522K, capacity 558K, committed 640K, reserved 1048576K
+
URLClassPath#getNextLoader

获取下一个 Loader,其实根据 index 从一个存放已创建 LoaderArrayList 中获取。

+
private synchronized Loader getNextLoader(int[] cache, int index) {
if (closed) {
return null;
}
if (cache != null) {
if (index < cache.length) {
Loader loader = loaders.get(cache[index]);
if (DEBUG_LOOKUP_CACHE) {
System.out.println("HASCACHE: Loading from : " + cache[index]
+ " = " + loader.getBaseURL());
}
return loader;
} else {
return null; // finished iterating over cache[]
}
} else {
// 获取 Loader
return getLoader(index);
}
}
-

当新生代和老年代的空间均不足时,在尝试 GC 和 Full GC 后仍不能成功分配对象,就会发生 OutOfMemoryError

-

线程中发生内存不足,不会影响其他线程

public static void main(String[] args) {
List<byte[]> list = new ArrayList<>();

new Thread(() -> {
list.add(new byte[_8MB]);
list.add(new byte[_8MB]);
}).start();

System.out.println("waiting...");
try {
System.in.read();
} catch (IOException e) {
throw new RuntimeException(e);
}
}
+
URLClassPath#getLoader(int)
    +
  1. index 到存放已创建 Loader 的列表中去获取(调用方传入的 index0 开始不断递增直到超过范围)。
  2. +
  3. 如果 index 超过范围,说明已有的 Loader 都找不到目标 Resource,需要到未打开的 URL 中查找。
  4. +
  5. 从未打开的 URL 中取出(pop)一个来创建 Loader,如果 urls 已经为空,则返回 null
  6. +
+
private synchronized Loader getLoader(int index) {
if (closed) {
return null;
}
// Expand URL search path until the request can be satisfied
// or the URL stack is empty.
while (loaders.size() < index + 1) {
// Pop the next URL from the URL stack
// 如果 index 超过数组范围,需要从未打开的 URL 中取出一个,创建 Loader 并返回
URL url;
synchronized (urls) {
if (urls.empty()) {
return null;
} else {
url = urls.pop();
}
}
// Skip this URL if it already has a Loader. (Loader
// may be null in the case where URL has not been opened
// but is referenced by a JAR index.)
String urlNoFragString = URLUtil.urlNoFragString(url);
if (lmap.containsKey(urlNoFragString)) {
continue;
}
// Otherwise, create a new Loader for the URL.
Loader loader;
try {
// 根据 URL 创建 Loader
loader = getLoader(url);
// If the loader defines a local class path then add the
// URLs to the list of URLs to be opened.
URL[] urls = loader.getClassPath();
if (urls != null) {
push(urls);
}
} catch (IOException e) {
// Silently ignore for now...
continue;
} catch (SecurityException se) {
// Always silently ignore. The context, if there is one, that
// this URLClassPath was given during construction will never
// have permission to access the URL.
if (DEBUG) {
System.err.println("Failed to access " + url + ", " + se );
}
continue;
}
// Finally, add the Loader to the search path.
validateLookupCache(loaders.size(), urlNoFragString);
loaders.add(loader);
lmap.put(urlNoFragString, loader);
}
if (DEBUG_LOOKUP_CACHE) {
System.out.println("NOCACHE: Loading from : " + index );
}
return loaders.get(index);
}
-
[GC (Allocation Failure) [DefNew: 2013K->721K(9216K), 0.0012274 secs][Tenured: 8192K->8912K(10240K), 0.0113036 secs] 10205K->8912K(19456K), [Metaspace: 3345K->3345K(1056768K)], 0.0125751 secs] [Times: user=0.00 sys=0.00, real=0.01 secs] 
[Full GC (Allocation Failure) [Tenured: 8912K->8895K(10240K), 0.0011880 secs] 8912K->8895K(19456K), [Metaspace: 3345K->3345K(1056768K)], 0.0012009 secs] [Times: user=0.00 sys=0.00, real=0.00 secs]
Heap
def new generation total 9216K, used 246K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
eden space 8192K, 3% used [0x00000000fec00000, 0x00000000fec3d890, 0x00000000ff400000)
from space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
to space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
tenured generation total 10240K, used 8895K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
the space 10240K, 86% used [0x00000000ff600000, 0x00000000ffeafce0, 0x00000000ffeafe00, 0x0000000100000000)
Metaspace used 3380K, capacity 4496K, committed 4864K, reserved 1056768K
class space used 363K, capacity 388K, committed 512K, reserved 1048576K
Exception in thread "main" java.lang.OutOfMemoryError: Java heap space
at com.moralok.jvm.gc.JvmGcTest.main(JvmGcTest.java:21)
+
URLClassPath#getLoader(java.net.URL)

根据指定的 URL 创建 Loader,不同类型的 URL 会返回不同具体实现的 Loader

+
    +
  1. 如果 URL 不是以 / 结尾,认为是 Jar 文件,则返回 JarLoader 类型,比如 file:/C:/Users/xxx/.jdks/corretto-1.8.0_342/jre/lib/rt.jar
  2. +
  3. 如果 URL/ 结尾,且协议为 file,则返回 FileLoader 类型,比如 file:/C:/Users/xxx/IdeaProjects/java-test/target/classes/
  4. +
  5. 如果 URL/ 结尾,且协议不会 file,则返回 Loader 类型。
  6. +
+
private Loader getLoader(final URL url) throws IOException {
try {
return java.security.AccessController.doPrivileged(
new java.security.PrivilegedExceptionAction<Loader>() {
public Loader run() throws IOException {
String file = url.getFile();
if (file != null && file.endsWith("/")) {
if ("file".equals(url.getProtocol())) {
return new FileLoader(url);
} else {
return new Loader(url);
}
} else {
return new JarLoader(url, jarHandler, lmap, acc);
}
}
}, acc);
} catch (java.security.PrivilegedActionException pae) {
throw (IOException)pae.getException();
}
}
-

Thread-0 发生 OutOfMemoryError 后,main 线程仍然正常运行。

-

大对象的划分指标

当创建的大对象 + 对象头的容量小于等于 eden,如果 GC 后的存活对象可以放入 to,那么还是会先在 eden 中创建大对象。
在本案例中,又会马上发生一次 GC,大对象提前晋升到老年代中。

-
public static void main(String[] args) {
List<byte[]> list = new ArrayList<>();
list.add(new byte[_8MB - 16]);
}
+

URLClassPath.FileLoader#getResource

FileLoadergetResource 为例,如果文件找到了,就会将文件包装成一个 FileInputStream,再将 FileInputStream 包装成一个 Resource 返回。

+
Resource getResource(final String name, boolean check) {
final URL url;
try {
URL normalizedBase = new URL(getBaseURL(), ".");
url = new URL(getBaseURL(), ParseUtil.encodePath(name, false));

if (url.getFile().startsWith(normalizedBase.getFile()) == false) {
// requested resource had ../..'s in path
return null;
}

if (check)
URLClassPath.check(url);

final File file;
if (name.indexOf("..") != -1) {
file = (new File(dir, name.replace('/', File.separatorChar)))
.getCanonicalFile();
if ( !((file.getPath()).startsWith(dir.getPath())) ) {
/* outside of base dir */
return null;
}
} else {
file = new File(dir, name.replace('/', File.separatorChar));
}

if (file.exists()) {
return new Resource() {
public String getName() { return name; };
public URL getURL() { return url; };
public URL getCodeSourceURL() { return getBaseURL(); };
public InputStream getInputStream() throws IOException
{ return new FileInputStream(file); };
public int getContentLength() throws IOException
{ return (int)file.length(); };
};
}
} catch (Exception e) {
return null;
}
return null;
}
-
[GC (Allocation Failure) [DefNew: 2013K->693K(9216K), 0.0015517 secs] 2013K->693K(19456K), 0.0015828 secs] [Times: user=0.00 sys=0.00, real=0.00 secs] 
[GC (Allocation Failure) [DefNew: 8885K->0K(9216K), 0.0048110 secs] 8885K->8885K(19456K), 0.0048264 secs] [Times: user=0.00 sys=0.02, real=0.00 secs]
Heap
def new generation total 9216K, used 410K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
eden space 8192K, 5% used [0x00000000fec00000, 0x00000000fec66958, 0x00000000ff400000)
from space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
to space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
tenured generation total 10240K, used 8885K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
the space 10240K, 86% used [0x00000000ff600000, 0x00000000ffead580, 0x00000000ffead600, 0x0000000100000000)
Metaspace used 3321K, capacity 4496K, committed 4864K, reserved 1056768K
class space used 354K, capacity 388K, committed 512K, reserved 1048576K
+

ClassLoader 的搜索路径

从上文可知,ClassLoader 调用 findClass 方法查找类的时候,并不是漫无目的地查找,而是根据设置的类路径进行查找,不同的 ClassLoader 有不同的类路径。

+

以下是通过 IDEA 启动 Java 程序时的命令,可以看到其中通过 -classpath 指定了应用·类加载器 AppClassLoader 的类路径,该类路径除了包含常规的 JRE 的文件路径外,还额外添加了当前 maven 工程编译生成的 target\classes 目录。

+
C:\Users\xxx\.jdks\corretto-1.8.0_342\bin\java.exe -agentlib:jdwp=transport=dt_socket,address=127.0.0.1:52959,suspend=y,server=n -javaagent:C:\Users\xxx\AppData\Local\JetBrains\IntelliJIdea2022.3\captureAgent\debugger-agent.jar -Dfile.encoding=UTF-8 -classpath "C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\charsets.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\access-bridge-64.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\cldrdata.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\dnsns.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\jaccess.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\jfxrt.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\localedata.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\nashorn.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunec.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunjce_provider.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunmscapi.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunpkcs11.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\zipfs.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jce.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jfr.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jfxswt.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jsse.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\management-agent.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\resources.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\rt.jar;C:\Users\xxx\IdeaProjects\java-test\target\classes;C:\Program Files\JetBrains\IntelliJ IDEA 2022.3.3\lib\idea_rt.jar" org.example.BananaTest
-

尽管最终大部分对象提前晋升到老年代,但是可以看到第二次 GC 前的新生代空间占用,可见数组分配时,所需空间刚好为 Eden 空间大小时,还是会在 eden 创建对象。

-

注意事项

    -
  • 正常情况下,新对象都是在 eden 中创建。
  • -
  • 空间足够的意思并非空间占用相加的值仍小于总额,而是有连续的一片内存可供分配。因此紧凑才能利用率高。
  • -
  • 正常情况下,GC 前 to 区域总是为空,GC 后 eden 区域总是为空。
  • -
  • 正常情况下,GC 后 eden 和 from 的存活对象要么去了 to,要么去老年代。
  • -
  • 只要 GC 后腾空 eden,创建在 eden 中的新对象的空间占用可以等于 eden 的大小。
  • +
    bootstrap class loader

    启动·类加载器 bootstrap class loader,加载核心类库,即 <JRE_HOME>/lib 目录中的部分类库,如 rt.jar,只有名字符合要求的 jar 才能被识别。 启动 Java 虚拟机时可以通过选项 -Xbootclasspath 修改默认的类路径,有三种使用方式:

    +
      +
    • -Xbootclasspath::完全覆盖核心类库的类路径,不常用,除非重写核心类库。
    • +
    • -Xbootclasspath/a: 以后缀的方式拼接在原搜索路径后面,常用。
    • +
    • -Xbootclasspath/p: 以前缀的方式拼接再原搜索路径前面.不常用,避免引起不必要的冲突。
    -

    尽管总体上有迹可循,但是 GC 的具体情况,仍然需要具体分析,有很多分支情况未一一确认。

    -]]> - - java - jvm - - - - 字符串常量池的测试和分析 - /2023/11/03/testing-and-analysis-of-StringTable/ - 如果你准备过 Java 的面试,应该看到过一个问题:“String s1 = new String("abc"); 这个语句创建了几个字符串对象”。这个问题曾经困扰我,当时的我不能理解这个问题想要考察的是什么?
    答案中或许提及了字符串常量池,但是如果细究起来,会发现答案并不完善,有些令人困惑,甚至问题本身就有一定的误导作用。它很容易让初学者以为创建一个字符串对象和创建一个其他类型的对象在过程上是有一些区别的。
    其实关键的地方在于 “abc” 而不是 new String("abc")

    -

    字符串常量池的作用

    字符串字面量

    字面量(literal)是用于表达源代码中的一个固定值的表示法(notion),比如代码中的整数、浮点数、字符串。简而言之,字符串字面量就是双引号包裹的字符串,例如:

    -
    String s1 = "a";
    +

    IDEA 中编辑启动配置,添加 VM 选项,-Xbootclasspath:C:\Software,里面没有类文件,启动虚拟机失败,提示:

    +
    Error occurred during initialization of VM
    java/lang/NoClassDefFoundError: java/lang/Object

    进程已结束,退出代码1
    -

    在 Java 中,字符串对象就是一个 String 类型的对象,因此在程序运行时,String 类型的变量 s1 指向的一定是一个 String 对象。字面量 “a” 在某一个时刻,没有经过 new 关键字,变成了一个 String 对象

    -

    接下来我们来思考一个问题,程序中每一个字符串字面量都要对应着生成一个单独的 String 对象吗?考虑到 Java 中 String 对象是不可变的,显然相同的字符串字面量完全可以共用一个 String 对象从而避免重复创建对象。JVM 也是这样设计的,这些可以共用的 String 对象组成了一个字符串常量池。

    -
      -
    1. 第一次遇到某一个字符串字面量时,会在字符串常量池中创建一个 String 对象,以后遇到相同的字符串字面量,就复用该对象,不再重复创建。
    2. -
    3. 每一次 new 都会创建一个新的 String 对象。
    4. +
      ExtClassLoader

      扩展·类加载器 ExtClassLoader,加载 <JRE_HOME>/lib/ext/ 目录中的类库。启动 Java 虚拟机时可以通过选项 -Djava.ext.dirs 修改默认的类路径。显然修改不当同样可能会引起 Java 程序的异常。

      +
      AppClassLoader

      应用·类加载器 AppClassLoader ,加载应用级别的搜索路径中的类库。可以使用系统的环境变量 CLASSPATH 的值,也可以在启动 Java 虚拟机时通过选项 -classpath 修改。

      +

      CLASSPATHWindows 中,多个文件路径使用分号 ; 分隔,而 Linux 中则使用冒号 : 分隔。以下例子表示当前目录和另一个文件路径拼接而成的类路径。

      +
        +
      • Windows:.;C:\path\to\classes
      • +
      • Linux:.:/path/to/classes
      • +
      +

      事实上,AppClassLoader 最终的类路径,不仅仅包含 -classpath 的值,还会包含 -javaagent 指定的值。

      +

      字节数据转换为 Class 实例:defineClass

      方法 defineClass,顾名思义,就是定义类,将字节数据转换为 Class 实例。在 ClassLoader 以及其子类中有很多同名方法,方法内各种处理和包装,最终都是为了使用 name 和字节数据等参数,调用 native 方法获得一个 Class 实例。
      以下是定义类时最终可能调用的 native 方法。

      +
      private native Class<?> defineClass0(String name, byte[] b, int off, int len,
      ProtectionDomain pd);

      private native Class<?> defineClass1(String name, byte[] b, int off, int len,
      ProtectionDomain pd, String source);

      private native Class<?> defineClass2(String name, java.nio.ByteBuffer b,
      int off, int len, ProtectionDomain pd,
      String source);
      + +

      其方法参数有:

      +
        +
      • name,目标类的名称。
      • +
      • byte[]ByteBuffer 类型的字节数据,offlen 只是为了定位传入的字节数组中关于目标类的字节数据,通常分别是 0 和字节数组的长度,毕竟专门构造一个包含无关数据的字节数组很无聊。
      • +
      • ProtectionDomain,保护域,todo:
      • +
      • sourceCodeSource 的位置。
      • +
      +

      defineClass 方法的调用过程,其实就是从 URLClassLoader 开始,一层一层处理后再调用父类的 defineClass 方法,分别经过了 SecureClassLoaderClassLoader

      +

      URLClassLoader#defineClass

      此方法是再 URLClassLoaderfindClass 方法中,获得正确的 Resource 之后调用的,由 private 修饰。根据注释,它使用从指定资源获取的类字节来定义类,生成的类必须先解析才能使用。

      +
      private Class<?> defineClass(String name, Resource res) throws IOException {
      long t0 = System.nanoTime();
      // 获取最后一个 . 的位置
      int i = name.lastIndexOf('.');
      // 返回资源的 CodeSourceURL
      URL url = res.getCodeSourceURL();
      if (i != -1) {
      // 截取包名 com.example
      String pkgname = name.substring(0, i);
      // Check if package already loaded.
      Manifest man = res.getManifest();
      definePackageInternal(pkgname, man, url);
      }
      // Now read the class bytes and define the class
      // 先尝试以 ByteBuffer 的形式返回字节数据,如果资源的输入流不是在 ByteBuffer 之上实现的,则返回 null
      java.nio.ByteBuffer bb = res.getByteBuffer();
      if (bb != null) {
      // Use (direct) ByteBuffer:
      // 不常用
      CodeSigner[] signers = res.getCodeSigners();
      CodeSource cs = new CodeSource(url, signers);
      sun.misc.PerfCounter.getReadClassBytesTime().addElapsedTimeFrom(t0);
      // 调用 java.security.SecureClassLoader#defineClass(java.lang.String, java.nio.ByteBuffer, java.security.CodeSource)
      return defineClass(name, bb, cs);
      } else {
      // 以字节数组的形式返回资源数据
      byte[] b = res.getBytes();
      // must read certificates AFTER reading bytes.
      // 必须再读取字节数据后读取证书,todo:
      CodeSigner[] signers = res.getCodeSigners();
      // 根据 URL 和签名者创建 CodeSource
      CodeSource cs = new CodeSource(url, signers);
      sun.misc.PerfCounter.getReadClassBytesTime().addElapsedTimeFrom(t0);
      // 调用 java.security.SecureClassLoader#defineClass(java.lang.String, byte[], int, int, java.security.CodeSource)
      return defineClass(name, b, 0, b.length, cs);
      }
      }
      + +

      Resource 类提供了 getBytes 方法,此方法以字节数组的形式返回字节数据。

      +
      public byte[] getBytes() throws IOException {
      byte[] b;
      // Get stream before content length so that a FileNotFoundException
      // can propagate upwards without being caught too early
      // 在获取内容长度之前获取流,以便 FileNotFoundException 可以向上传播而不会过早被捕获(todo: 不理解)
      // 获取缓存的 InputStream
      InputStream in = cachedInputStream();

      // This code has been uglified to protect against interrupts.
      // Even if a thread has been interrupted when loading resources,
      // the IO should not abort, so must carefully retry, failing only
      // if the retry leads to some other IO exception.
      // 该代码为了防止中断有点丑陋。即使线程在加载资源时被中断,IO 也不应该中止,因此必须小心重试,只有当重试导致其他 IO 异常时才会失败。
      // 检测当前线程是否收到中断信号,收到的话则返回 true 且清除中断状态,重新变更为未中断状态。
      boolean isInterrupted = Thread.interrupted();
      int len;
      for (;;) {
      try {
      // 获取内容长度,顺利的话就跳出循环
      len = getContentLength();
      break;
      } catch (InterruptedIOException iioe) {
      // 如果获取内容长度时,线程被中断抛出了异常,捕获后清除中断状态
      Thread.interrupted();
      isInterrupted = true;
      }
      }

      try {
      b = new byte[0];
      if (len == -1) len = Integer.MAX_VALUE;
      int pos = 0;
      while (pos < len) {
      int bytesToRead;
      if (pos >= b.length) { // Only expand when there's no room
      // 如果当前读取位置已经大于等于数组长度
      // 本次待读取字节长度 = 剩余未读取长度和 1024 取较小值
      bytesToRead = Math.min(len - pos, b.length + 1024);
      if (b.length < pos + bytesToRead) {
      // 如果当前读取位置 + 本次待读取字节长度 > 数组长度,则创建新数组并复制数据
      b = Arrays.copyOf(b, pos + bytesToRead);
      }
      } else {
      // 数组还有空间,待读取字节长度 = 数组剩余空间
      bytesToRead = b.length - pos;
      }
      int cc = 0;
      try {
      // 读取数据
      cc = in.read(b, pos, bytesToRead);
      } catch (InterruptedIOException iioe) {
      // 如果读取时,线程被中断抛出了异常,捕获后清除中断状态
      Thread.interrupted();
      isInterrupted = true;
      }
      if (cc < 0) {
      // 如果读取返回值 < 0
      if (len != Integer.MAX_VALUE) {
      // 且长度并未无限,表示提前检测到 EOF,抛出异常
      throw new EOFException("Detect premature EOF");
      } else {
      // 如果长度无限,表示读到了文件结尾,数组长度大于当前读取位置,创建新数组并复制长度
      if (b.length != pos) {
      b = Arrays.copyOf(b, pos);
      }
      break;
      }
      }
      pos += cc;
      }
      } finally {
      try {
      in.close();
      } catch (InterruptedIOException iioe) {
      isInterrupted = true;
      } catch (IOException ignore) {}

      if (isInterrupted) {
      // 如果 isInterrupted 为 true,代表中断过,重新将线程状态置为中断。
      Thread.currentThread().interrupt();
      }
      }
      return b;
      }
      + +

      getByteBuffer 之后会缓存 InputStream 以便调用 getBytes 时使用,方法由 synchronized 修饰。

      +
      private synchronized InputStream cachedInputStream() throws IOException {
      if (cis == null) {
      cis = getInputStream();
      }
      return cis;
      }
      + +

      在这个例子中,Resource 的实例是 URLClassPath 中的匿名类 FileLoaderResource 的匿名类的方式创建的。

      +
      public InputStream getInputStream() throws IOException
      {
      // 在该匿名类中,getInputStream 的实现就是简单地根据 FileLoader 中保存的 File 实例创建 FileInputStream 并返回。
      return new FileInputStream(file);
      }

      public int getContentLength() throws IOException
      {
      // 在该匿名类中,getContentLength 的实现就是简单地根据 FileLoader 中保存的 File 实例获取长度。
      return (int)file.length();
      };
      + +

      SecureClassLoader#defineClass

      URLClassLoader 继承自 SecureClassLoaderSecureClassLoader 提供并重载了 defineClass 方法,两个方法的注释均比代码长得多。
      由注释可知,方法的作用是将字节数据(byte[] 类型或者 ByteBuffer 类型)转换为 Class 类型的实例,有一个可选的 CodeSource 类型的参数。

      +
      protected final Class<?> defineClass(String name,
      byte[] b, int off, int len,
      CodeSource cs)
      {
      return defineClass(name, b, off, len, getProtectionDomain(cs));
      }

      protected final Class<?> defineClass(String name, java.nio.ByteBuffer b,
      CodeSource cs)
      {
      return defineClass(name, b, getProtectionDomain(cs));
      }
      + +

      方法中只是简单地将 CodeSource 类型的参数转换成 ProtectionDomain 类型,就调用 ClassLoaderdefineClass 方法。

      +
      private ProtectionDomain getProtectionDomain(CodeSource cs) {
      // 如果 CodeSource 为 null,直接返回 null
      if (cs == null)
      return null;

      ProtectionDomain pd = null;
      synchronized (pdcache) {
      // 先从 Map 缓存中获取 ProtectionDomain
      pd = pdcache.get(cs);
      if (pd == null) {
      // 从 CodeSource 中获取 PermissionCollection
      PermissionCollection perms = getPermissions(cs);
      // 缓存中没有,则创建一个 ProtectionDomain 并放入缓存
      pd = new ProtectionDomain(cs, perms, this, null);
      pdcache.put(cs, pd);
      if (debug != null) {
      debug.println(" getPermissions "+ pd);
      debug.println("");
      }
      }
      }
      return pd;
      }
      + +
      getPermissions

      根据注释可知,此方法会返回给定 CodeSource 对象的权限。此方法由 protect 修饰,AppClassLoaderURLClassLoader 都有重写。当前 ClassLoaderAppClassLoader

      +

      AppClassLoader#getPermissions,添加允许从类路径加载的任何类退出 VM的权限。

      +
      protected PermissionCollection getPermissions(CodeSource codesource)
      {
      // 调用父类 URLClassLoader 的 getPermissions
      PermissionCollection perms = super.getPermissions(codesource);
      // 允许从类路径加载的任何类退出 VM的权限。
      // todo: 这是否自定义的类加载器加载的类,可能不能退出 VM。
      perms.add(new RuntimePermission("exitVM"));
      return perms;
      }
      + +

      SecureClassLoader#getPermissions,添加一个读文件或读目录的权限。

      +
      protected PermissionCollection getPermissions(CodeSource codesource)
      {
      // 调用父类 SecureClassLoader 的 getPermissions
      PermissionCollection perms = super.getPermissions(codesource);

      URL url = codesource.getLocation();

      Permission p;
      URLConnection urlConnection;

      try {
      // FileURLConnection 实例
      urlConnection = url.openConnection();
      // 允许 read 的 FilePermission 实例
      p = urlConnection.getPermission();
      } catch (java.io.IOException ioe) {
      p = null;
      urlConnection = null;
      }

      if (p instanceof FilePermission) {
      // if the permission has a separator char on the end,
      // it means the codebase is a directory, and we need
      // to add an additional permission to read recursively
      // 如果文件路径以文件分隔符结尾,表示目录,需要在末尾添加"-"改为递归读的权限
      String path = p.getName();
      if (path.endsWith(File.separator)) {
      path += "-";
      p = new FilePermission(path, SecurityConstants.FILE_READ_ACTION);
      }
      } else if ((p == null) && (url.getProtocol().equals("file"))) {
      String path = url.getFile().replace('/', File.separatorChar);
      path = ParseUtil.decode(path);
      if (path.endsWith(File.separator))
      path += "-";
      p = new FilePermission(path, SecurityConstants.FILE_READ_ACTION);
      } else {
      /**
      * Not loading from a 'file:' URL so we want to give the class
      * permission to connect to and accept from the remote host
      * after we've made sure the host is the correct one and is valid.
      */
      URL locUrl = url;
      if (urlConnection instanceof JarURLConnection) {
      locUrl = ((JarURLConnection)urlConnection).getJarFileURL();
      }
      String host = locUrl.getHost();
      if (host != null && (host.length() > 0))
      p = new SocketPermission(host,
      SecurityConstants.SOCKET_CONNECT_ACCEPT_ACTION);
      }

      // make sure the person that created this class loader
      // would have this permission

      if (p != null) {
      final SecurityManager sm = System.getSecurityManager();
      if (sm != null) {
      final Permission fp = p;
      AccessController.doPrivileged(new PrivilegedAction<Void>() {
      public Void run() throws SecurityException {
      sm.checkPermission(fp);
      return null;
      }
      }, acc);
      }
      perms.add(p);
      }
      return perms;
      }
      + +

      SecureClassLoader#getPermissions,延迟设置权限,在创建 ProtectionDomain 时再设置。

      +
      protected PermissionCollection getPermissions(CodeSource codesource)
      {
      // 检查以确保类加载器已初始化。在 SecureClassLoader 构造器最后会用一个布尔变量表示加载器初始化成功。
      // 从代码上看,似乎只能保证 SecureClassLoader 的构造器方法已执行完毕?
      check();
      // ProtectionDomain 延迟绑定,Permissions 继承 PermissionCollection 类。
      return new Permissions(); // ProtectionDomain defers the binding
      }
      + +
      ProtectionDomain

      ProtectionDomain 的相关构造器参数:

      +
        +
      • CodeSource
      • +
      • PermissionCollection,如果不为 null,会设置权限为只读,表示权限在使用过程中不再修改;同时检查是否需要设置拥有全部权限。
      • +
      • ClassLoader
      • +
      • Principal[]
      • +
      +

      这样看来,SecureClassLoader 为了定义类做的处理,就是简单地创建一些关于权限的对象,并保存了 CodeSource->ProtectionDomain 的映射作为缓存。

      +

      ClassLoader#defineClass

      抽象类 ClassLoader 中最终用于定义类的 native 方法 define0define1define2 都是由 private 修饰的,ClassLoader 提供并重载了 defineClass 方法作为使用它们的入口,这些 defineClass 方法都由 protect final 修饰,这意味着这些方法只能被子类使用,并且不能被重写。

      +
      protected final Class<?> defineClass(String name, byte[] b, int off, int len)
      throws ClassFormatError
      {
      return defineClass(name, b, off, len, null);
      }

      protected final Class<?> defineClass(String name, byte[] b, int off, int len,
      ProtectionDomain protectionDomain)
      throws ClassFormatError
      {
      protectionDomain = preDefineClass(name, protectionDomain);
      String source = defineClassSourceLocation(protectionDomain);
      Class<?> c = defineClass1(name, b, off, len, protectionDomain, source);
      postDefineClass(c, protectionDomain);
      return c;
      }

      protected final Class<?> defineClass(String name, java.nio.ByteBuffer b,
      ProtectionDomain protectionDomain)
      throws ClassFormatError
      {
      int len = b.remaining();

      // Use byte[] if not a direct ByteBufer:
      if (!b.isDirect()) {
      if (b.hasArray()) {
      return defineClass(name, b.array(),
      b.position() + b.arrayOffset(), len,
      protectionDomain);
      } else {
      // no array, or read-only array
      byte[] tb = new byte[len];
      b.get(tb); // get bytes out of byte buffer.
      return defineClass(name, tb, 0, len, protectionDomain);
      }
      }

      protectionDomain = preDefineClass(name, protectionDomain);
      String source = defineClassSourceLocation(protectionDomain);
      Class<?> c = defineClass2(name, b, b.position(), len, protectionDomain, source);
      postDefineClass(c, protectionDomain);
      return c;
      }
      + +

      主要步骤:

      +
        +
      1. preDefineClass 前置处理
      2. +
      3. defineClassX
      4. +
      5. postDefineClass 后置处理
      6. +
      +
      preDefineClass

      确定保护域 ProtectionDomain,并检查:

      +
        +
      1. 未定义 java.*
      2. +
      3. 该类的签名者与包(package)中其余类的签名者相匹配
      4. +
      +
      private ProtectionDomain preDefineClass(String name,
      ProtectionDomain pd)
      {
      // 检查 name 为 null 或者有可能是有效的二进制名称
      if (!checkName(name))
      throw new NoClassDefFoundError("IllegalName: " + name);

      // Note: Checking logic in java.lang.invoke.MemberName.checkForTypeAlias
      // relies on the fact that spoofing is impossible if a class has a name
      // of the form "java.*"
      // 如果 name 以 java. 开头,则抛出异常
      if ((name != null) && name.startsWith("java.")) {
      throw new SecurityException
      ("Prohibited package name: " +
      name.substring(0, name.lastIndexOf('.')));
      }
      if (pd == null) {
      // 如果未传入 ProtectionDomain,取默认的 ProtectionDomain
      pd = defaultDomain;
      }

      // 存放了 package->certs 的 map 映射作为缓存,检查一个包内的 certs 都是一样的
      // todo: certs
      if (name != null) checkCerts(name, pd.getCodeSource());

      return pd;
      }
      + +
      defineClassSourceLocation

      确定 ClassCodeSource 位置。

      +
      private String defineClassSourceLocation(ProtectionDomain pd)
      {
      CodeSource cs = pd.getCodeSource();
      String source = null;
      if (cs != null && cs.getLocation() != null) {
      source = cs.getLocation().toString();
      }
      return source;
      }
      + +
      defineClassX 方法

      这些 native 方法使用了 name,字节数据,ProtectionDomainsource 等参数,像黑盒一样,在虚拟机中定义了一个类。

      +
      postDefineClass

      在定义类后使用 ProtectionDomain 中的 certs 补充 Class 实例的 signer 信息,猜测在 native 方法 defineClassX 方法中,对 ProtectionDomain 做了一些修改。事实上,从代码上看,将 CodeSource 包装为 ProtectionDomain 传入后,除了 defineClassX 方法外,其他地方都是取出 CodeSource 使用。

      +
      private void postDefineClass(Class<?> c, ProtectionDomain pd)
      {
      if (pd.getCodeSource() != null) {
      // 获取证书
      Certificate certs[] = pd.getCodeSource().getCertificates();
      if (certs != null)
      setSigners(c, certs);
      }
      }
      ]]> + + java + class loader + + + + JVM GC 的测试和分析 + /2023/11/01/testing-and-analysis-of-jvm-gc/ + 堆的组成
      public class JvmGcTest_1 {

      public static final int _512KB = 512 * 1024;
      public static final int _1MB = 1024 * 1024;
      public static final int _6MB = 6 * 1024 * 1024;
      public static final int _7MB = 7 * 1024 * 1024;
      public static final int _8MB = 8 * 1024 * 1024;

      // -Xms20M -Xmx20M -Xmn10M -XX:+UseSerialGC -XX:+PrintGCDetails -verbose:gc
      // -XX:+UseSerialGC 避免幸存区比例动态调整
      public static void main(String[] args) {

      }
      }
      + +
      Heap
      def new generation total 9216K, used 2010K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
      eden space 8192K, 24% used [0x00000000fec00000, 0x00000000fedf68c8, 0x00000000ff400000)
      from space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
      to space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
      tenured generation total 10240K, used 0K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
      the space 10240K, 0% used [0x00000000ff600000, 0x00000000ff600000, 0x00000000ff600200, 0x0000000100000000)
      Metaspace used 3288K, capacity 4496K, committed 4864K, reserved 1056768K
      class space used 348K, capacity 388K, committed 512K, reserved 1048576K
      + +

      根据打印的信息,组成如下:

      +
        +
      • Heap: 堆。
          +
        • def new generation: 新生代。
        • +
        • tenured generation: 老年代。
        • +
        • Metaspace: 元空间,实际上并不属于堆, -XX:+PrintGCDetails 将它的信息一起输出。
        • +
        +
      • +
      +

      堆空间的比例

      新生代中的空间占比 eden:from:to 在默认情况下是 8:1:1,与观察到的数据 8192K:1024K:1024K 一致。
      新生代的空间 eden + from + to 为 10240K,符合 -Xmn10M 设置的大小。
      total 显示为 9216K,即 eden + from 的大小,是因为 to 的空间不计算在内。新生代可用的空间只有 eden + fromto 空间只是在使用标记-复制算法进行垃圾回收时使用。
      老年代的空间为 10240K。
      目前仅 eden 中已用 2010K,约占 eden 空间的 24%。

      +

      从内存地址分析堆空间

      内存地址为 16 位的 16 进制的数字,64 位机器。
      [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000) 分别表示地址空间的开始、已用、结束的地址指针。
      新生代 [0x00000000fec00000, 0x00000000ff600000),老年代 [0x00000000ff600000, 0x0000000100000000),计算可得空间大小均为 10MB。
      eden 中已用的空间地址为 [0x00000000fec00000, 0x00000000fedf68c8),空间大小为 2058440 byte,约等于 2010K。

      +

      显而易见,新生代和老生代是一片完全连续的地址空间。

      +

      堆的垃圾回收

      public static void main(String[] args) {
      List<byte[]> list = new ArrayList<>();
      list.add(new byte[_7MB]);
      }
      + +
      [GC (Allocation Failure) [DefNew: 2013K->721K(9216K), 0.0105099 secs] 2013K->721K(19456K), 0.0105455 secs] [Times: user=0.00 sys=0.00, real=0.01 secs] 
      Heap
      def new generation total 9216K, used 8135K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
      eden space 8192K, 90% used [0x00000000fec00000, 0x00000000ff33d8c0, 0x00000000ff400000)
      from space 1024K, 70% used [0x00000000ff500000, 0x00000000ff5b45f0, 0x00000000ff600000)
      to space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
      tenured generation total 10240K, used 0K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
      the space 10240K, 0% used [0x00000000ff600000, 0x00000000ff600000, 0x00000000ff600200, 0x0000000100000000)
      Metaspace used 3354K, capacity 4496K, committed 4864K, reserved 1056768K
      class space used 360K, capacity 388K, committed 512K, reserved 1048576K
      + +

      Allocation Failure,正常情况下,新对象总是分配在 Eden,分配空间失败,eden 的剩余空间不足以存放 7M 大小的对象,新生代发生 minor GC
      [DefNew: 2013K->721K(9216K), 0.0105099 secs],新生代在垃圾回收前后空间的占用变化和耗时。
      2013K->721K(19456K), 0.0105455 secs,整个堆在垃圾回收前后空间的占用变化和耗时。

      +

      GC 类型

        +
      • GC: minor GC。
      • +
      • Fulle GC: full GC。
      • +
      +

      from 和 to 的角色变换

      from 的已用空间的地址为 [0x00000000ff500000, 0x00000000ff5b45f0),空间大小为 738800 byte,约 721K,与 GC 后的新生代空间占用大小一致。在垃圾回收后,eden 区域存活的对象全部转移到了原 to 空间,fromto 空间的角色相互转换(从地址空间的信息可以看到此时 to 的地址指针比 from 的地址指针小)。
      eden 的已用空间的地址为 [0x00000000fec00000, 0x00000000ff33d8c0),空间大小为 7592128 byte,约 7.24M,比 7M 大不少。此时 eden 区域除了 byte[] 对象外,还存储了其他对象,比如为了创建 List<byte[]> 对象而新加载的类对象。

      +

      eden 空间足够时不发生 GC

      public static void main(String[] args) {
      List<byte[]> list = new ArrayList<>();
      list.add(new byte[_7MB]);
      list.add(new byte[_512KB]);
      }
      + +
      [GC (Allocation Failure) [DefNew: 2013K->721K(9216K), 0.0011172 secs] 2013K->721K(19456K), 0.0011443 secs] [Times: user=0.00 sys=0.00, real=0.00 secs] 
      Heap
      def new generation total 9216K, used 8647K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
      eden space 8192K, 96% used [0x00000000fec00000, 0x00000000ff3bd8d0, 0x00000000ff400000)
      from space 1024K, 70% used [0x00000000ff500000, 0x00000000ff5b45f0, 0x00000000ff600000)
      to space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
      tenured generation total 10240K, used 0K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
      the space 10240K, 0% used [0x00000000ff600000, 0x00000000ff600000, 0x00000000ff600200, 0x0000000100000000)
      Metaspace used 3354K, capacity 4496K, committed 4864K, reserved 1056768K
      class space used 360K, capacity 388K, committed 512K, reserved 1048576K
      + +

      由于 eden 区域还能放下 512K 的对象,所以仍然只会发生一次垃圾回收。
      eden 区域的已用空间比例上升到 96%,已用空间的地址为 [0x00000000fec00000, 0x00000000ff3bd8d0),空间大小为 8116432 byte,约 7.74M,比上一次增加了 524304 byte,即 512 * 1024 + 16。显然第二次添加时,不再因为创建 List<byte[]> 而创建额外的对象,只有创建对象所需的 512K 和 16 字节的对象头。这一刻数值的精确让人欣喜hhh

      +

      新生代空间不足,部分对象提前晋升到老年代

      public static void main(String[] args) {
      List<byte[]> list = new ArrayList<>();
      list.add(new byte[_7MB]);
      list.add(new byte[_512KB]);
      list.add(new byte[_512KB]);
      }
      + +
      [GC (Allocation Failure) [DefNew: 2013K->721K(9216K), 0.0013580 secs] 2013K->721K(19456K), 0.0013932 secs] [Times: user=0.00 sys=0.00, real=0.00 secs] 
      [GC (Allocation Failure) [DefNew: 8565K->512K(9216K), 0.0046378 secs] 8565K->8396K(19456K), 0.0046540 secs] [Times: user=0.00 sys=0.00, real=0.00 secs]
      Heap
      def new generation total 9216K, used 1350K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
      eden space 8192K, 10% used [0x00000000fec00000, 0x00000000fecd1a20, 0x00000000ff400000)
      from space 1024K, 50% used [0x00000000ff400000, 0x00000000ff480048, 0x00000000ff500000)
      to space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
      tenured generation total 10240K, used 7884K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
      the space 10240K, 77% used [0x00000000ff600000, 0x00000000ffdb33a0, 0x00000000ffdb3400, 0x0000000100000000)
      Metaspace used 3354K, capacity 4496K, committed 4864K, reserved 1056768K
      class space used 360K, capacity 388K, committed 512K, reserved 1048576K
      + +

      在第三次添加时,由于 eden 空间不足,因此又发生了第二次垃圾回收。
      [DefNew: 8565K->512K(9216K), 0.0046378 secs],新生代的空间占用下降到了 512K,应该是在 from 中留下了第二次添加时的 512K。
      在第二次添加完成后,eden [0x00000000fec00000, 0x00000000ff3bd8d0)from [0x00000000ff500000, 0x00000000ff5b45f0) 占用的空间为 8116432 + 738800 = 8855232 约 8647.7K,略大于 8565K。很奇怪,第二次垃圾回收前,新生代的空间占用为什么有小幅度下降。
      8565K->8396K(19456K), 0.0046540 secs,堆的占用空间并未发生明显下降。部分对象因为新生代空间不足,提前晋升到了老年代中。8396K - 512 K 剩余 7884K,全部晋升到老年代,符合 77% 的统计数据。
      eden 中加入了第三次添加时的对象,大于 512K 不少。
      此时 edenfromtenured 中均有不好确认成分的空间占用,比如 from 中多了 56 字节。

      +

      新生代空间不足,大对象直接在老年代创建

      public static void main(String[] args) {
      List<byte[]> list = new ArrayList<>();
      list.add(new byte[_8MB]);
      }
      + +
      Heap
      def new generation total 9216K, used 2177K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
      eden space 8192K, 26% used [0x00000000fec00000, 0x00000000fee20730, 0x00000000ff400000)
      from space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
      to space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
      tenured generation total 10240K, used 8192K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
      the space 10240K, 80% used [0x00000000ff600000, 0x00000000ffe00010, 0x00000000ffe00200, 0x0000000100000000)
      Metaspace used 3353K, capacity 4496K, committed 4864K, reserved 1056768K
      class space used 360K, capacity 388K, committed 512K, reserved 1048576K
      + +

      在 Eden 空间肯定不足而老年代空间足够的情况下,大对象会直接在老年代中创建,此时不会发生 GC。

      +

      内存不足 OOM

      public static void main(String[] args) {
      List<byte[]> list = new ArrayList<>();
      list.add(new byte[_8MB]);
      list.add(new byte[_8MB]);
      }
      + +
      waiting...
      [GC (Allocation Failure) [DefNew: 4711K->928K(9216K), 0.0017245 secs][Tenured: 8192K->9117K(10240K), 0.0021690 secs] 12903K->9117K(19456K), [Metaspace: 4267K->4267K(1056768K)], 0.0039336 secs] [Times: user=0.00 sys=0.00, real=0.00 secs]
      [Full GC (Allocation Failure) [Tenured: 9117K->9063K(10240K), 0.0014352 secs] 9117K->9063K(19456K), [Metaspace: 4267K->4267K(1056768K)], 0.0014614 secs] [Times: user=0.00 sys=0.00, real=0.00 secs]
      Exception in thread "Thread-0" java.lang.OutOfMemoryError: Java heap space
      at com.moralok.jvm.gc.JvmGcTest.lambda$main$0(JvmGcTest.java:27)
      at com.moralok.jvm.gc.JvmGcTest$$Lambda$1/2003749087.run(Unknown Source)
      at java.lang.Thread.run(Thread.java:750)

      Heap
      def new generation total 9216K, used 1502K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
      eden space 8192K, 18% used [0x00000000fec00000, 0x00000000fed77a00, 0x00000000ff400000)
      from space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
      to space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
      tenured generation total 10240K, used 9063K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
      the space 10240K, 88% used [0x00000000ff600000, 0x00000000ffed9c50, 0x00000000ffed9e00, 0x0000000100000000)
      Metaspace used 4787K, capacity 4884K, committed 4992K, reserved 1056768K
      class space used 522K, capacity 558K, committed 640K, reserved 1048576K
      + +

      当新生代和老年代的空间均不足时,在尝试 GC 和 Full GC 后仍不能成功分配对象,就会发生 OutOfMemoryError

      +

      线程中发生内存不足,不会影响其他线程

      public static void main(String[] args) {
      List<byte[]> list = new ArrayList<>();

      new Thread(() -> {
      list.add(new byte[_8MB]);
      list.add(new byte[_8MB]);
      }).start();

      System.out.println("waiting...");
      try {
      System.in.read();
      } catch (IOException e) {
      throw new RuntimeException(e);
      }
      }
      + +
      [GC (Allocation Failure) [DefNew: 2013K->721K(9216K), 0.0012274 secs][Tenured: 8192K->8912K(10240K), 0.0113036 secs] 10205K->8912K(19456K), [Metaspace: 3345K->3345K(1056768K)], 0.0125751 secs] [Times: user=0.00 sys=0.00, real=0.01 secs] 
      [Full GC (Allocation Failure) [Tenured: 8912K->8895K(10240K), 0.0011880 secs] 8912K->8895K(19456K), [Metaspace: 3345K->3345K(1056768K)], 0.0012009 secs] [Times: user=0.00 sys=0.00, real=0.00 secs]
      Heap
      def new generation total 9216K, used 246K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
      eden space 8192K, 3% used [0x00000000fec00000, 0x00000000fec3d890, 0x00000000ff400000)
      from space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
      to space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
      tenured generation total 10240K, used 8895K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
      the space 10240K, 86% used [0x00000000ff600000, 0x00000000ffeafce0, 0x00000000ffeafe00, 0x0000000100000000)
      Metaspace used 3380K, capacity 4496K, committed 4864K, reserved 1056768K
      class space used 363K, capacity 388K, committed 512K, reserved 1048576K
      Exception in thread "main" java.lang.OutOfMemoryError: Java heap space
      at com.moralok.jvm.gc.JvmGcTest.main(JvmGcTest.java:21)
      + +

      Thread-0 发生 OutOfMemoryError 后,main 线程仍然正常运行。

      +

      大对象的划分指标

      当创建的大对象 + 对象头的容量小于等于 eden,如果 GC 后的存活对象可以放入 to,那么还是会先在 eden 中创建大对象。
      在本案例中,又会马上发生一次 GC,大对象提前晋升到老年代中。

      +
      public static void main(String[] args) {
      List<byte[]> list = new ArrayList<>();
      list.add(new byte[_8MB - 16]);
      }
      + +
      [GC (Allocation Failure) [DefNew: 2013K->693K(9216K), 0.0015517 secs] 2013K->693K(19456K), 0.0015828 secs] [Times: user=0.00 sys=0.00, real=0.00 secs] 
      [GC (Allocation Failure) [DefNew: 8885K->0K(9216K), 0.0048110 secs] 8885K->8885K(19456K), 0.0048264 secs] [Times: user=0.00 sys=0.02, real=0.00 secs]
      Heap
      def new generation total 9216K, used 410K [0x00000000fec00000, 0x00000000ff600000, 0x00000000ff600000)
      eden space 8192K, 5% used [0x00000000fec00000, 0x00000000fec66958, 0x00000000ff400000)
      from space 1024K, 0% used [0x00000000ff400000, 0x00000000ff400000, 0x00000000ff500000)
      to space 1024K, 0% used [0x00000000ff500000, 0x00000000ff500000, 0x00000000ff600000)
      tenured generation total 10240K, used 8885K [0x00000000ff600000, 0x0000000100000000, 0x0000000100000000)
      the space 10240K, 86% used [0x00000000ff600000, 0x00000000ffead580, 0x00000000ffead600, 0x0000000100000000)
      Metaspace used 3321K, capacity 4496K, committed 4864K, reserved 1056768K
      class space used 354K, capacity 388K, committed 512K, reserved 1048576K
      + +

      尽管最终大部分对象提前晋升到老年代,但是可以看到第二次 GC 前的新生代空间占用,可见数组分配时,所需空间刚好为 Eden 空间大小时,还是会在 eden 创建对象。

      +

      注意事项

        +
      • 正常情况下,新对象都是在 eden 中创建。
      • +
      • 空间足够的意思并非空间占用相加的值仍小于总额,而是有连续的一片内存可供分配。因此紧凑才能利用率高。
      • +
      • 正常情况下,GC 前 to 区域总是为空,GC 后 eden 区域总是为空。
      • +
      • 正常情况下,GC 后 eden 和 from 的存活对象要么去了 to,要么去老年代。
      • +
      • 只要 GC 后腾空 eden,创建在 eden 中的新对象的空间占用可以等于 eden 的大小。
      • +
      +

      尽管总体上有迹可循,但是 GC 的具体情况,仍然需要具体分析,有很多分支情况未一一确认。

      +]]>
      + + java + jvm + +
      + + 字符串常量池的测试和分析 + /2023/11/03/testing-and-analysis-of-StringTable/ + 如果你准备过 Java 的面试,应该看到过一个问题:“String s1 = new String("abc"); 这个语句创建了几个字符串对象”。这个问题曾经困扰我,当时的我不能理解这个问题想要考察的是什么?
      答案中或许提及了字符串常量池,但是如果细究起来,会发现答案并不完善,有些令人困惑,甚至问题本身就有一定的误导作用。它很容易让初学者以为创建一个字符串对象和创建一个其他类型的对象在过程上是有一些区别的。
      其实关键的地方在于 “abc” 而不是 new String("abc")

      +

      字符串常量池的作用

      字符串字面量

      字面量(literal)是用于表达源代码中的一个固定值的表示法(notion),比如代码中的整数、浮点数、字符串。简而言之,字符串字面量就是双引号包裹的字符串,例如:

      +
      String s1 = "a";
      + +

      在 Java 中,字符串对象就是一个 String 类型的对象,因此在程序运行时,String 类型的变量 s1 指向的一定是一个 String 对象。字面量 “a” 在某一个时刻,没有经过 new 关键字,变成了一个 String 对象

      +

      接下来我们来思考一个问题,程序中每一个字符串字面量都要对应着生成一个单独的 String 对象吗?考虑到 Java 中 String 对象是不可变的,显然相同的字符串字面量完全可以共用一个 String 对象从而避免重复创建对象。JVM 也是这样设计的,这些可以共用的 String 对象组成了一个字符串常量池。

      +
        +
      1. 第一次遇到某一个字符串字面量时,会在字符串常量池中创建一个 String 对象,以后遇到相同的字符串字面量,就复用该对象,不再重复创建。
      2. +
      3. 每一次 new 都会创建一个新的 String 对象。

      ps: 以上的“遇到某一个字符串字面量”就是很纯粹地指代程序的源代码中出现用双引号括起来的字符串字面量。

      进入字符串常量池的两种情况

      因此,如果字符串常量池中没有值为 “abc” 的 String 对象new String("abc") 语句将涉及两个 String 对象的创建,第一个是因为括号里的 “abc” 而在字符串常量池中生成的,第二个才是 new 关键字在堆中创建的;否则只会涉及一个 String 对象的创建。
      为什么上面改用如果字符串常量池中没有值为 “abc” 的 String 对象呢?这是因为,字符串常量池里保留的 String 对象有两种产生来源:

      @@ -1119,201 +1317,148 @@
      - Java 类加载器源码分析 - /2023/07/13/Java-class-loader-source-code-analysis/ - 组织类加载工作:loadClass

      Java 程序启动的时候,Java 虚拟机会调用 java.lang.ClassLoader#loadClass(java.lang.String) 加载 main 方法所在的类。

      -
      public Class<?> loadClass(String name) throws ClassNotFoundException {
      return loadClass(name, false);
      }
      - -

      根据注释可知,此方法加载具有指定二进制名称的类,它由 Java 虚拟机调用来解析类引用,调用它等同于调用 loadClass(name, false)

      -
      protected Class<?> loadClass(String name, boolean resolve)
      throws ClassNotFoundException
      {
      // 以二进制名称获取类加载的锁进行同步
      synchronized (getClassLoadingLock(name)) {
      // First, check if the class has already been loaded
      // 首先检查类是否已加载,根据该方法注释可知:
      // 如果当前类加载器已经被 Java 虚拟机记录为具有该二进制名称的类的加载器(initiating loader),Java 虚拟机可以直接返回 Class 对象。
      Class<?> c = findLoadedClass(name);
      if (c == null) {
      long t0 = System.nanoTime();
      try {
      // 如果类还未加载,先委派给父·类加载器进行加载,如果父·类加载器为 null,则使用虚拟机内建的类加载器进行加载
      if (parent != null) {
      // 递归调用
      c = parent.loadClass(name, false);
      } else {
      // 递归调用的终结点
      c = findBootstrapClassOrNull(name);
      }
      } catch (ClassNotFoundException e) {
      // ClassNotFoundException thrown if class not found
      // from the non-null parent class loader
      // 当父·类加载器长尝试加载但是失败,捕获异常但是什么都不做,因为接下来,当前类加载器需要自己也尝试加载。
      }

      if (c == null) {
      // If still not found, then invoke findClass in order
      // to find the class.
      long t1 = System.nanoTime();
      // 父·类加载器未找到类,当前类加载器自己找。
      c = findClass(name);

      // this is the defining class loader; record the stats
      sun.misc.PerfCounter.getParentDelegationTime().addTime(t1 - t0);
      sun.misc.PerfCounter.getFindClassTime().addElapsedTimeFrom(t1);
      sun.misc.PerfCounter.getFindClasses().increment();
      }
      }
      if (resolve) {
      resolveClass(c);
      }
      return c;
      }
      }
      + JVM 内存区域的测试和分析 + /2023/11/04/testing-and-analysis-of-jvm-memory-area/ + 内存区域

      JVM 内存区域划分为:

      +
        +
      • 程序计数器
      • +
      • 虚拟机栈
      • +
      • 本地方法栈
      • +
      • +
      • 方法区
      • +
      + -

      根据注释可知,java.lang.ClassLoader#loadClass(java.lang.String, boolean) 同样是加载“具有指定二进制名称的类”,此方法的实现按以下顺序搜索类:

      -
        -
      1. 调用 findLoadedClass(String) 以检查该类是否已加载。
      2. -
      3. 在父·类加载器上调用 loadClass 方法。如果父·类加载器为空,则使用虚拟机内置的类加载器。
      4. -
      5. 调用 findClass(String) 方法来查找该类。
      6. +

        程序计数器

        虚拟机栈

        Java 虚拟机栈(Java Virtual Machine Stack),线程私有,生命周期与线程相同。虚拟机栈描述的是 Java 方法执行的线程内存模型。每个方法被执行的时候,Java虚拟机都会同步创建一个栈帧(Stack Frame)用于存储局部变量表、操作数栈、动态连接、方法出口等信息。

        +

        可以使用 -Xss1024k 设置虚拟机栈的大小。默认情况下都是 1024k,只有 Windows 中取决于虚拟内存。

        +

        栈内存溢出

          +
        1. 栈帧过多导致栈内存溢出
        2. +
        3. 栈帧过大导致栈内存溢出(难复现)
        -

        如果使用上述步骤找到了该类(找到并定义类),并且解析标志为 true,则此方法将对生成的 Class 对象调用 resolveClass(Class) 方法。鼓励 ClassLoader 的子类重写 findClass(String),而不是此方法。除非被重写,否则此方法在整个类加载过程中以 getClassLoadingLock 方法的结果进行同步。

        -
        -

        注意:父·类加载器并非父类·类加载器(当前类加载器的父类),而是当前的类加载器的 parent 属性被赋值另外一个类加载器实例,其含义更接近于“可以委派类加载工作的另一个类加载器(一个帮忙干活的上级)”。虽然绝大多数说法中,当一个类加载器的 parent 值为 null 时,它的父·类加载器是引导类加载器(bootstrap class loader),但是当看到 findBootstrapClassOrNull 方法时,我有点困惑,因为我以为会看到语义类似于 loadClassByBootstrapClassLoader 这样的方法名。从注释和代码的语义上看,bootstrap class loader 不像是任何一个类加载器的父·类加载器,但是从类加载的机制设计上说,它是,只是因为它并非由 Java 语言编写而成,不能实例化并赋值给 parent 属性。findBootstrapClassOrNull 方法的语义更接近于:当一个类加载器的父·类加载器为 null 时,将准备加载的目标类先当作启动类(Bootstrap Class)尝试查找,如果找不到就返回 null

        -
        -

        怎么并行地加载类 getClassLoadingLock

        需要加载的类可能很多很多,我们很容易想到如果可以并行地加载类就好了。显然,JDK 的编写者考虑到了这一点。
        此方法返回类加载操作的锁对象。为了向后兼容,此方法的默认实现的行为如下。如果此 ClassLoader 对象注册为具备并行能力,则该方法返回与指定类名关联的专用对象。 否则,该方法返回此 ClassLoader 对象。
        简单地说,如果 ClassLoader 对象注册为具备并行能力,那么一个 name 一个锁对象,已创建的锁对象保存在 ConcurrentHashMap 类型的 parallelLockMap 中,这样类加载工作可以并行;否则所有类加载工作共用一个锁对象,就是 ClassLoader 对象本身。
        这个方案意味着非同名的目标类可以认为在加载时没有冲突?

        -
        protected Object getClassLoadingLock(String className) {
        Object lock = this;
        if (parallelLockMap != null) {
        Object newLock = new Object();
        lock = parallelLockMap.putIfAbsent(className, newLock);
        if (lock == null) {
        lock = newLock;
        }
        }
        return lock;
        }
        +

        不正确的递归调用

        public class StackTest_4 {

        private static int count = 0;

        // 改变栈的大小限制 -Xss256k,观察调用次数的变化
        public static void main(String[] args) {
        try {
        method1();
        } catch (Throwable t) {
        t.printStackTrace();
        } finally {
        // 默认情况下经过 20000+ 次,改变参数后 3000+ 次
        System.out.println(count);
        }
        }

        private static void method1() {
        count++;
        method1();
        }
        }
        -
        什么是 “ClassLoader 对象注册为具有并行能力”呢?

        AppClassLoader 中有一段 static 代码。事实上 java.lang.ClassLoader#registerAsParallelCapable 是将 ClassLoader 对象注册为具有并行能力唯一的入口。因此,所有想要注册为具有并行能力的 ClassLoader 都需要调用一次该方法。

        -
        static {
        ClassLoader.registerAsParallelCapable();
        }
        -

        java.lang.ClassLoader#registerAsParallelCapable 方法有一个注解 @CallerSensitive,这是因为它的代码中调用的 native 方法 sun.reflect.Reflection#getCallerClass() 方法。由注释可知,当且仅当以下所有条件全部满足时才注册成功:

        -
          -
        1. 尚未创建调用者的实例(类加载器尚未实例化)
        2. -
        3. 调用者的所有超类(Object 类除外)都注册为具有并行能力。
        4. -
        -
        怎么保证这两个条件成立呢?
          -
        1. 对于第一个条件,可以通过将调用的代码写在 static 代码块中来实现。如果写在构造器方法里,并且通过单例模式保证只实例化一次可以吗?答案是不行的,后续会解释这个“注册”行为在构造器方法中是如何被使用以及为何不能写在构造器方法里。
        2. -
        3. 对于第二个条件,由于 Java 虚拟机加载类时,总是会先尝试加载其父类,又因为加载类时会先调用 static 代码块,因此父类的 static 代码块总是先于子类的 static 代码块。
        4. -
        -

        你可以看到 AppClassLoader->URLClassLoader->SecureClassLoader->ClassLoader 均在 static 代码块实现注册,以保证满足以上两个条件。

        -
        注册工作做了什么?

        简单地说就是保存了类加载器所属 ClassSet

        -
        @CallerSensitive
        protected static boolean registerAsParallelCapable() {
        // 获得此方法的调用者的 Class 实例,asSubClass 可以将 Class<?> 类型的 Class 转换为代表指定类的子类的 Class<? extends U> 类型的 Class。
        Class<? extends ClassLoader> callerClass =
        Reflection.getCallerClass().asSubclass(ClassLoader.class);
        // 注册调用者的 Class 为具有并行能力
        return ParallelLoaders.register(callerClass);
        }
        +

        循环引用导致 JSON 解析无限循环

        并非只有自己写的递归方法可能引发栈内存溢出,有可能第三方库也会引发栈内存溢出。

        +
        public class StackTest_5 {

        public static void main(String[] args) throws JsonProcessingException {
        Department department = new Department();
        department.setName("Tech");

        Employee employee1 = new Employee();
        employee1.setName("Tom");
        employee1.setDepartment(department);

        Employee employee2 = new Employee();
        employee2.setName("Tim");
        employee2.setDepartment(department);

        department.setEmployees(Arrays.asList(employee1, employee2));

        ObjectMapper objectMapper = new ObjectMapper();
        System.out.println(objectMapper.writeValueAsString(department));
        }

        static class Department {
        private String name;
        private List<Employee> employees;

        public String getName() {
        return name;
        }

        public void setName(String name) {
        this.name = name;
        }

        public List<Employee> getEmployees() {
        return employees;
        }

        public void setEmployees(List<Employee> employees) {
        this.employees = employees;
        }
        }

        static class Employee {
        private String name;
        private Department department;

        public String getName() {
        return name;
        }

        public void setName(String name) {
        this.name = name;
        }

        public Department getDepartment() {
        return department;
        }

        public void setDepartment(Department department) {
        this.department = department;
        }
        }
        }
        -

        方法 java.lang.ClassLoader.ParallelLoaders#registerParallelLoaders 封装了一组具有并行能力的加载器类型。就是持有 ClassLoaderClass 实例的集合,并保证添加时加同步锁。

        -
        // private 修饰,只有其外部类 ClassLoader 才可以使用
        // static 修饰,内部类如果需要定义 static 方法或者 static 变量,必须用 static 修饰
        private static class ParallelLoaders {
        // private 修饰构造器方法,不希望这个类被实例化,只想要使用它的静态变量和方法。
        private ParallelLoaders() {}

        // the set of parallel capable loader types
        // 使用 loaderTypes 时通过 synchronized 加同步锁
        private static final Set<Class<? extends ClassLoader>> loaderTypes =
        Collections.newSetFromMap(
        // todo: 为什么使用弱引用来实现?为了卸载类时的垃圾回收?
        new WeakHashMap<Class<? extends ClassLoader>, Boolean>());
        static {
        // 将 ClassLoader 本身注册为具有并行能力
        synchronized (loaderTypes) { loaderTypes.add(ClassLoader.class); }
        }

        /**
        * Registers the given class loader type as parallel capabale.
        * Returns {@code true} is successfully registered; {@code false} if
        * loader's super class is not registered.
        */
        static boolean register(Class<? extends ClassLoader> c) {
        synchronized (loaderTypes) {
        if (loaderTypes.contains(c.getSuperclass())) {
        // register the class loader as parallel capable
        // if and only if all of its super classes are.
        // Note: given current classloading sequence, if
        // the immediate super class is parallel capable,
        // all the super classes higher up must be too.
        // 当且仅当其所有超类都具有并行能力时,才将类加载器注册为具有并行能力。
        // 注意:给定当前的类加载顺序(加载类时,Java 虚拟机总是先尝试加载其父类),如果直接超类具有并行能力,则所有更高的超类也必然具有并行能力。
        loaderTypes.add(c);
        return true;
        } else {
        return false;
        }
        }
        }

        /**
        * Returns {@code true} if the given class loader type is
        * registered as parallel capable.
        */
        static boolean isRegistered(Class<? extends ClassLoader> c) {
        synchronized (loaderTypes) {
        return loaderTypes.contains(c);
        }
        }
        }
        +

        局部变量的线程安全问题

          +
        1. 局部变量如果未逃离方法的作用范围,就是线程安全的。
        2. +
        3. 局部变量如果是引用类型且逃离了方法的作用范围,就是线程不安全的。
        4. +
        +
        public class StackTest_3 {

        public static void main(String[] args) {
        method1();
        }

        // 线程安全
        private static void method1() {
        StringBuilder sb = new StringBuilder();
        sb.append(1);
        sb.append(2);
        sb.append(3);
        System.out.println(sb);
        }

        // 线程不安全
        private static void method2(StringBuilder sb) {
        sb.append(1);
        sb.append(2);
        sb.append(3);
        System.out.println(sb);
        }

        // 线程不安全,看到一个说法:发生指令重排,sb 的 append 操作发生在返回之后(有待确认)
        private static StringBuilder method3() {
        StringBuilder sb = new StringBuilder();
        sb.append(1);
        sb.append(2);
        sb.append(3);
        return sb;
        }
        }
        -
        “注册”怎么和锁产生联系?

        但是以上的注册过程只是起到一个“标记”作用,没有涉及和锁相关的代码,那么这个“标记”是怎么和真正的锁产生联系呢?ClassLoader 提供了三个构造器方法:

        -
        private ClassLoader(Void unused, ClassLoader parent) {
        // 由 private 修饰,不允许子类重写
        this.parent = parent;
        if (ParallelLoaders.isRegistered(this.getClass())) {
        // 如果类加载器已经注册为具有并行能力,则做一些赋值操作
        parallelLockMap = new ConcurrentHashMap<>();
        // 保存 package->certs 的 map 映射,相关的工作也可以并行进行
        package2certs = new ConcurrentHashMap<>();
        assertionLock = new Object();
        } else {
        // no finer-grained lock; lock on the classloader instance
        parallelLockMap = null;
        package2certs = new Hashtable<>();
        assertionLock = this;
        }
        }

        // 由 protect 修饰,允许子类重写,传递了父·类加载器。
        protected ClassLoader(ClassLoader parent) {
        this(checkCreateClassLoader(), parent);
        }

        // 由 protect 修饰,允许子类重写,父·类加载器使用 getSystemClassLoader 方法返回的系统类加载器。
        protected ClassLoader() {
        this(checkCreateClassLoader(), getSystemClassLoader());
        }
        +

        线程问题排查

        CPU 占用率居高不下

        public class ThreadTest_1 {

        public static void main(String[] args) {
        new Thread(null, () -> {
        System.out.println("t1...");
        while (true) {

        }
        }, "thread1").start();

        new Thread(null, () -> {
        System.out.println("t2...");
        try {
        TimeUnit.SECONDS.sleep(1000);
        } catch (InterruptedException e) {
        e.printStackTrace();
        }
        }, "thread2").start();

        new Thread(null, () -> {
        System.out.println("t3...");
        try {
        TimeUnit.SECONDS.sleep(1000);
        } catch (InterruptedException e) {
        e.printStackTrace();
        }
        }, "thread3").start();
        }
        }
        +

        当发现 CPU 占用率居高不下时,可以尝试以下步骤:

        +
          +
        1. top,定位 cpu 占用高的进程 id。
        2. +
        3. ps H -eo pid,tid,%cpu | grep pid,进一步定位引起 cpu 占用高的线程 id。
        4. +
        5. jstack pid,根据线程 id 换算成 16进制的 nid 找到对应线程,进一步定位到问题的源码行号。
        6. +
        +
        "thread1" #8 prio=5 os_prio=0 tid=0x00007f9bd0162800 nid=0x1061ad runnable [0x00007f9bd56eb000]
        java.lang.Thread.State: RUNNABLE
        at com.moralok.jvm.thread.ThreadTest_1.lambda$main$0(ThreadTest_1.java:10)
        at com.moralok.jvm.thread.ThreadTest_1$$Lambda$1/250421012.run(Unknown Source)
        at java.lang.Thread.run(Thread.java:750)
        -

        ClassLoader 的构造器方法最终都调用 private 修饰的 java.lang.ClassLoader#ClassLoader(java.lang.Void, java.lang.ClassLoader),又因为父类的构造器方法总是先于子类的构造器方法被执行,这样一来,所有继承 ClassLoader 的类加载器在创建的时候都会根据在创建实例之前是否注册为具有并行能力而做不同的操作。

        -
        为什么注册的代码不能写在构造器方法里?

        使用“注册”的代码也解释了 java.lang.ClassLoader#registerAsParallelCapable 为了满足调用成功的第一个条件为什么不能写在构造器方法中,因为使用这个机制的代码先于你在子类构造器方法里编写的代码被执行。
        同时,不论是 loadLoader 还是 getClassLoadingLock 都是由 protect 修饰,允许子类重写,来自定义并行加载类的能力。

        -
        -

        todo: 讨论自定义类加载器的时候,印象里似乎对并行加载类的提及比较少,之后留意一下。

        -
        -

        检查目标类是否已加载

        加载类之前显然需要检查目标类是否已加载,这项工作最终是交给 native 方法,在虚拟机中执行,就像在黑盒中一样。
        todo: 不同类加载器同一个类名会如何判定?

        -
        protected final Class<?> findLoadedClass(String name) {
        if (!checkName(name))
        return null;
        return findLoadedClass0(name);
        }

        private native final Class<?> findLoadedClass0(String name);
        +

        死锁,迟迟未返回结果

        public class ThreadTest_2 {

        private static final Object A = new Object();
        private static final Object B = new Object();

        public static void main(String[] args) {
        new Thread(null, () -> {
        System.out.println("t1...");
        synchronized (A) {
        System.out.println(Thread.currentThread().getName() + " get A");
        try {
        TimeUnit.SECONDS.sleep(5);
        } catch (InterruptedException e) {
        throw new RuntimeException(e);
        }
        synchronized (B) {
        System.out.println(Thread.currentThread().getName() + " get B");
        }
        }
        }, "thread1").start();

        new Thread(null, () -> {
        System.out.println("t2...");
        synchronized (B) {
        System.out.println(Thread.currentThread().getName() + " get B");
        try {
        TimeUnit.SECONDS.sleep(5);
        } catch (InterruptedException e) {
        throw new RuntimeException(e);
        }
        synchronized (A) {
        System.out.println(Thread.currentThread().getName() + " get A");
        }
        }
        }, "thread2").start();
        }
        }
        -

        保证核心类库的安全性:双亲委派模型

        正如在代码和注释中所看到的,正常情况下,类的加载工作先委派给自己的父·类加载器,即 parent 属性的值——另一个类加载器实例。一层一层向上委派直到 parentnull,代表类加载工作会尝试先委派给虚拟机内建的 bootstrap class loader 处理,然后由 bootstrap class loader 首先尝试加载。如果被委派方加载失败,委派方会自己再尝试加载。
        正常加载类的是应用类加载器 AppClassLoader,它的 parentExtClassLoaderExtClassLoaderparentnull

        -
        -

        在网上也能看到有人提到以前大家称之为“父·类加载器委派机制”,“双亲”一词易引人误解。

        -
        -
        为什么要用这套奇怪的机制

        这样设计很明显的一个目的就是保证核心类库的类加载安全性。比如 Object 类,设计者不希望编写代码的人重新写一个 Object 类并加载到 Java 虚拟机中,但是加载类的本质就是读取字节数据传递给 Java 虚拟机创建一个 Class 实例,使用这套机制的目的之一就是为了让核心类库先加载,同时先加载的类不会再次被加载。

        -

        通常流程如下:

          -
        1. AppClassLoader 调用 loadClass 方法,先委派给 ExtClassLoader
        2. -
        3. ExtClassLoader 调用 loadClass 方法,先委派给 bootstrap class loader
        4. -
        5. bootstrap class loader 在其设置的类路径中无法找到 BananaTest 类,抛出 ClassNotFoundException 异常。
        6. -
        7. ExtClassLoader 捕获异常,然后自己调用 findClass 方法尝试进行加载。
        8. -
        9. ExtClassLoader 在其设置的类路径中无法找到 BananaTest 类,抛出 ClassNotFoundException 异常。
        10. -
        11. AppClassLoader 捕获异常,然后自己调用 findClass 方法尝试进行加载。
        12. +
        13. jstack pid,会显示找到死锁,以及死锁涉及的线程,,并各自持有的锁还有等待的锁。
        14. +
        15. 其他工具如 jconsole 也具有检测死锁的功能。
        -

        注释中提到鼓励重写 findClass 方法而不是 loadClass,因为正是该方法实现了所谓的“双亲委派模型”,java.lang.ClassLoader#findClass 实现了如何查找加载类。如果不是专门为了破坏这个类加载模型,应该选择重写 findClass;其次是因为该方法中涉及并行加载类的机制。

        -

        查找类资源:findClass

        默认情况下,类加载器在自己尝试进行加载时,会调用 java.lang.ClassLoader#findClass 方法,该方法由子类重写。AppClassLoaderExtClassLoader 都是继承 URLClassLoader,而 URLClassLoader 重写了 findClass 方法。根据注释可知,该方法会从 URL 搜索路径查找并加载具有指定名称的类。任何引用 Jar 文件的 URL 都会根据需要加载并打开,直到找到该类。

        -

        过程如下:

        +

        本地方法栈

        堆(Heap)的特点:

          -
        1. name 转换为 path,比如 com.example.BananaTest 转换为 com/example/BananaTest.class
        2. -
        3. 使用 URL 搜索路径 URLClassPathpath 中获取 Resource,本质上就是轮流将可能存放的目录列表拼接上文件路径进行查找。
        4. -
        5. 调用 URLClassLoader 的私有方法 defineClass,该方法调用父类 SecureClassLoaderdefineClass 方法。
        6. +
        7. 线程共享,需要考虑线程安全问题。
        8. +
        9. 存在垃圾回收机制。
        10. +
        11. 使用 -Xmx8m 设置大小。
        -
        protected Class<?> findClass(final String name)
        throws ClassNotFoundException
        {
        final Class<?> result;
        try {
        // todo:
        result = AccessController.doPrivileged(
        new PrivilegedExceptionAction<Class<?>>() {
        public Class<?> run() throws ClassNotFoundException {
        // 将 name 转换为 path
        String path = name.replace('.', '/').concat(".class");
        // 从 URLClassPath 中查找 Resource
        Resource res = ucp.getResource(path, false);
        if (res != null) {
        try {
        return defineClass(name, res);
        } catch (IOException e) {
        throw new ClassNotFoundException(name, e);
        } catch (ClassFormatError e2) {
        if (res.getDataError() != null) {
        e2.addSuppressed(res.getDataError());
        }
        throw e2;
        }
        } else {
        return null;
        }
        }
        }, acc);
        } catch (java.security.PrivilegedActionException pae) {
        throw (ClassNotFoundException) pae.getException();
        }
        if (result == null) {
        throw new ClassNotFoundException(name);
        }
        return result;
        }
        - -

        查找类的目录列表:URLClassPath

        URLClassLoader 拥有一个 URLClassPath 类型的属性 ucp。由注释可知,URLClassPath 类用于维护一个 URL 的搜索路径,以便从 Jar 文件和目录中加载类和资源。
        URLClassPath 的核心构造器方法:

        -
        public URLClassPath(URL[] urls,
        URLStreamHandlerFactory factory,
        AccessControlContext acc) {
        // 将 urls 保存到 ArrayList 类型的属性 path 中,根据注释,path 的含义为 URL 的原始搜索路径。
        for (int i = 0; i < urls.length; i++) {
        path.add(urls[i]);
        }
        // 将 urls 保存到 Stack 类型的属性 urls 中,根据注释,urls 的含义为未打开的 URL 列表。
        push(urls);
        if (factory != null) {
        // 如果 factory 不为 null,使用它创建一个 URLStreamHandler 实例处理 Jar 文件。
        jarHandler = factory.createURLStreamHandler("jar");
        }
        if (DISABLE_ACC_CHECKING)
        this.acc = null;
        else
        this.acc = acc;
        }
        - -
        URLClassPath#getResource

        URLClassLoader 调用 sun.misc.URLClassPath#getResource(java.lang.String, boolean) 方法获取指定名称对应的资源。根据注释,该方法会查找 URL 搜索路径上的第一个资源,如果找不到资源,则返回 null
        显然,这里的 Loader 不是我们前面提到的类加载器。LoaderURLClassPath 的内部类,用于表示根据一个基本 URL 创建的资源和类的加载器。也就是说一个基本 URL 对应一个 Loader

        -
        public Resource getResource(String name, boolean check) {
        if (DEBUG) {
        System.err.println("URLClassPath.getResource(\"" + name + "\")");
        }

        Loader loader;
        // 获取缓存(默认没有用)
        int[] cache = getLookupCache(name);
        // 不断获取下一个 Loader 来获取 Resource,直到获取到或者没有下一个 Loader
        for (int i = 0; (loader = getNextLoader(cache, i)) != null; i++) {
        Resource res = loader.getResource(name, check);
        if (res != null) {
        return res;
        }
        }
        return null;
        }
        - -
        URLClassPath#getNextLoader

        获取下一个 Loader,其实根据 index 从一个存放已创建 LoaderArrayList 中获取。

        -
        private synchronized Loader getNextLoader(int[] cache, int index) {
        if (closed) {
        return null;
        }
        if (cache != null) {
        if (index < cache.length) {
        Loader loader = loaders.get(cache[index]);
        if (DEBUG_LOOKUP_CACHE) {
        System.out.println("HASCACHE: Loading from : " + cache[index]
        + " = " + loader.getBaseURL());
        }
        return loader;
        } else {
        return null; // finished iterating over cache[]
        }
        } else {
        // 获取 Loader
        return getLoader(index);
        }
        }
        +

        堆内存溢出

        既然堆有垃圾回收机制,为什么还会发生内存溢出呢?最开始的时候,我也有这样的困惑。
        后来我才认识到,还在使用中的对象是不能被强制回收的,不再使用的对象不是立刻回收的。当创建对象却没有足够的内存空间时,如果清理掉那些不再使用的对象就有足够的内存空间,就不会发生内存溢出,程序只是表现为卡顿。

        +
        public class HeapTest_1 {  

        // -Xmx8m
        // 不设置可能不提示 Java heap space,出错地方不同,报错信息不同
        public static void main(String[] args) {
        int i = 0;
        try {
        List<String> list = new ArrayList<>();
        String s = "hello";
        while (true) {
        list.add(s);
        s = s + s;
        i++;
        }
        } catch (Throwable t) {
        t.printStackTrace();
        } finally {
        System.out.println("运行次数 " + i);
        }
        }
        }
        -
        URLClassPath#getLoader(int)
          -
        1. index 到存放已创建 Loader 的列表中去获取(调用方传入的 index0 开始不断递增直到超过范围)。
        2. -
        3. 如果 index 超过范围,说明已有的 Loader 都找不到目标 Resource,需要到未打开的 URL 中查找。
        4. -
        5. 从未打开的 URL 中取出(pop)一个来创建 Loader,如果 urls 已经为空,则返回 null
        6. -
        -
        private synchronized Loader getLoader(int index) {
        if (closed) {
        return null;
        }
        // Expand URL search path until the request can be satisfied
        // or the URL stack is empty.
        while (loaders.size() < index + 1) {
        // Pop the next URL from the URL stack
        // 如果 index 超过数组范围,需要从未打开的 URL 中取出一个,创建 Loader 并返回
        URL url;
        synchronized (urls) {
        if (urls.empty()) {
        return null;
        } else {
        url = urls.pop();
        }
        }
        // Skip this URL if it already has a Loader. (Loader
        // may be null in the case where URL has not been opened
        // but is referenced by a JAR index.)
        String urlNoFragString = URLUtil.urlNoFragString(url);
        if (lmap.containsKey(urlNoFragString)) {
        continue;
        }
        // Otherwise, create a new Loader for the URL.
        Loader loader;
        try {
        // 根据 URL 创建 Loader
        loader = getLoader(url);
        // If the loader defines a local class path then add the
        // URLs to the list of URLs to be opened.
        URL[] urls = loader.getClassPath();
        if (urls != null) {
        push(urls);
        }
        } catch (IOException e) {
        // Silently ignore for now...
        continue;
        } catch (SecurityException se) {
        // Always silently ignore. The context, if there is one, that
        // this URLClassPath was given during construction will never
        // have permission to access the URL.
        if (DEBUG) {
        System.err.println("Failed to access " + url + ", " + se );
        }
        continue;
        }
        // Finally, add the Loader to the search path.
        validateLookupCache(loaders.size(), urlNoFragString);
        loaders.add(loader);
        lmap.put(urlNoFragString, loader);
        }
        if (DEBUG_LOOKUP_CACHE) {
        System.out.println("NOCACHE: Loading from : " + index );
        }
        return loaders.get(index);
        }
        +
        java.lang.OutOfMemoryError: Java heap space
        at java.util.Arrays.copyOf(Arrays.java:3332)
        at java.lang.AbstractStringBuilder.ensureCapacityInternal(AbstractStringBuilder.java:124)
        at java.lang.AbstractStringBuilder.append(AbstractStringBuilder.java:448)
        at java.lang.StringBuilder.append(StringBuilder.java:141)
        at com.moralok.jvm.memory.heap.HeapTest_1.main(HeapTest_1.java:21)
        运行次数 17
        -
        URLClassPath#getLoader(java.net.URL)

        根据指定的 URL 创建 Loader,不同类型的 URL 会返回不同具体实现的 Loader

        -
          -
        1. 如果 URL 不是以 / 结尾,认为是 Jar 文件,则返回 JarLoader 类型,比如 file:/C:/Users/xxx/.jdks/corretto-1.8.0_342/jre/lib/rt.jar
        2. -
        3. 如果 URL/ 结尾,且协议为 file,则返回 FileLoader 类型,比如 file:/C:/Users/xxx/IdeaProjects/java-test/target/classes/
        4. -
        5. 如果 URL/ 结尾,且协议不会 file,则返回 Loader 类型。
        6. +

          堆内存溢出的发生往往需要长时间的运行,因此在排查相关问题时,可以适当调小堆内存。

          +

          监测堆内存

            +
          1. 使用 jps 查看 Java 进程列表
          2. +
          3. 使用 jmap -heap pid 查看堆内存信息
          4. +
          5. 还可以使用 jconsole 观察堆内存变化曲线
          6. +
          7. 还可以使用 VisualVM 查看堆信息
          -
          private Loader getLoader(final URL url) throws IOException {
          try {
          return java.security.AccessController.doPrivileged(
          new java.security.PrivilegedExceptionAction<Loader>() {
          public Loader run() throws IOException {
          String file = url.getFile();
          if (file != null && file.endsWith("/")) {
          if ("file".equals(url.getProtocol())) {
          return new FileLoader(url);
          } else {
          return new Loader(url);
          }
          } else {
          return new JarLoader(url, jarHandler, lmap, acc);
          }
          }
          }, acc);
          } catch (java.security.PrivilegedActionException pae) {
          throw (IOException)pae.getException();
          }
          }
          - -

          URLClassPath.FileLoader#getResource

          FileLoadergetResource 为例,如果文件找到了,就会将文件包装成一个 FileInputStream,再将 FileInputStream 包装成一个 Resource 返回。

          -
          Resource getResource(final String name, boolean check) {
          final URL url;
          try {
          URL normalizedBase = new URL(getBaseURL(), ".");
          url = new URL(getBaseURL(), ParseUtil.encodePath(name, false));

          if (url.getFile().startsWith(normalizedBase.getFile()) == false) {
          // requested resource had ../..'s in path
          return null;
          }

          if (check)
          URLClassPath.check(url);

          final File file;
          if (name.indexOf("..") != -1) {
          file = (new File(dir, name.replace('/', File.separatorChar)))
          .getCanonicalFile();
          if ( !((file.getPath()).startsWith(dir.getPath())) ) {
          /* outside of base dir */
          return null;
          }
          } else {
          file = new File(dir, name.replace('/', File.separatorChar));
          }

          if (file.exists()) {
          return new Resource() {
          public String getName() { return name; };
          public URL getURL() { return url; };
          public URL getCodeSourceURL() { return getBaseURL(); };
          public InputStream getInputStream() throws IOException
          { return new FileInputStream(file); };
          public int getContentLength() throws IOException
          { return (int)file.length(); };
          };
          }
          } catch (Exception e) {
          return null;
          }
          return null;
          }
          +
          public class HeapTest_2 {

          public static void main(String[] args) throws InterruptedException {
          System.out.println("1...");
          TimeUnit.SECONDS.sleep(30);
          // 堆空间占用上升 10MB
          byte[] bytes = new byte[1024 * 1024 * 10];
          System.out.println("2...");
          TimeUnit.SECONDS.sleep(30);
          bytes = null;
          // 堆空间占用下降
          System.gc();
          System.out.println("3...");
          TimeUnit.SECONDS.sleep(3000);
          }
          }
          -

          ClassLoader 的搜索路径

          从上文可知,ClassLoader 调用 findClass 方法查找类的时候,并不是漫无目的地查找,而是根据设置的类路径进行查找,不同的 ClassLoader 有不同的类路径。

          -

          以下是通过 IDEA 启动 Java 程序时的命令,可以看到其中通过 -classpath 指定了应用·类加载器 AppClassLoader 的类路径,该类路径除了包含常规的 JRE 的文件路径外,还额外添加了当前 maven 工程编译生成的 target\classes 目录。

          -
          C:\Users\xxx\.jdks\corretto-1.8.0_342\bin\java.exe -agentlib:jdwp=transport=dt_socket,address=127.0.0.1:52959,suspend=y,server=n -javaagent:C:\Users\xxx\AppData\Local\JetBrains\IntelliJIdea2022.3\captureAgent\debugger-agent.jar -Dfile.encoding=UTF-8 -classpath "C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\charsets.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\access-bridge-64.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\cldrdata.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\dnsns.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\jaccess.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\jfxrt.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\localedata.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\nashorn.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunec.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunjce_provider.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunmscapi.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\sunpkcs11.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\ext\zipfs.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jce.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jfr.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jfxswt.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\jsse.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\management-agent.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\resources.jar;C:\Users\xxx\.jdks\corretto-1.8.0_342\jre\lib\rt.jar;C:\Users\xxx\IdeaProjects\java-test\target\classes;C:\Program Files\JetBrains\IntelliJ IDEA 2022.3.3\lib\idea_rt.jar" org.example.BananaTest
          +

          使用 jmap -heap pid 查看堆内存信息:

          +
          Eden Space:
          capacity = 268435456 (256.0MB)
          used = 32212360 (30.72010040283203MB)

          used = 42698136 (40.720115661621094MB)

          used = 5368728 (5.120018005371094MB)
          -
          bootstrap class loader

          启动·类加载器 bootstrap class loader,加载核心类库,即 <JRE_HOME>/lib 目录中的部分类库,如 rt.jar,只有名字符合要求的 jar 才能被识别。 启动 Java 虚拟机时可以通过选项 -Xbootclasspath 修改默认的类路径,有三种使用方式:

          -
            -
          • -Xbootclasspath::完全覆盖核心类库的类路径,不常用,除非重写核心类库。
          • -
          • -Xbootclasspath/a: 以后缀的方式拼接在原搜索路径后面,常用。
          • -
          • -Xbootclasspath/p: 以前缀的方式拼接再原搜索路径前面.不常用,避免引起不必要的冲突。
          • -
          -

          IDEA 中编辑启动配置,添加 VM 选项,-Xbootclasspath:C:\Software,里面没有类文件,启动虚拟机失败,提示:

          -
          Error occurred during initialization of VM
          java/lang/NoClassDefFoundError: java/lang/Object

          进程已结束,退出代码1
          +

          使用 jconsole 查看堆内存信息:

          + -
          ExtClassLoader

          扩展·类加载器 ExtClassLoader,加载 <JRE_HOME>/lib/ext/ 目录中的类库。启动 Java 虚拟机时可以通过选项 -Djava.ext.dirs 修改默认的类路径。显然修改不当同样可能会引起 Java 程序的异常。

          -
          AppClassLoader

          应用·类加载器 AppClassLoader ,加载应用级别的搜索路径中的类库。可以使用系统的环境变量 CLASSPATH 的值,也可以在启动 Java 虚拟机时通过选项 -classpath 修改。

          -

          CLASSPATHWindows 中,多个文件路径使用分号 ; 分隔,而 Linux 中则使用冒号 : 分隔。以下例子表示当前目录和另一个文件路径拼接而成的类路径。

          -
            -
          • Windows:.;C:\path\to\classes
          • -
          • Linux:.:/path/to/classes
          • -
          -

          事实上,AppClassLoader 最终的类路径,不仅仅包含 -classpath 的值,还会包含 -javaagent 指定的值。

          -

          字节数据转换为 Class 实例:defineClass

          方法 defineClass,顾名思义,就是定义类,将字节数据转换为 Class 实例。在 ClassLoader 以及其子类中有很多同名方法,方法内各种处理和包装,最终都是为了使用 name 和字节数据等参数,调用 native 方法获得一个 Class 实例。
          以下是定义类时最终可能调用的 native 方法。

          -
          private native Class<?> defineClass0(String name, byte[] b, int off, int len,
          ProtectionDomain pd);

          private native Class<?> defineClass1(String name, byte[] b, int off, int len,
          ProtectionDomain pd, String source);

          private native Class<?> defineClass2(String name, java.nio.ByteBuffer b,
          int off, int len, ProtectionDomain pd,
          String source);
          +

          堆内存占用居高不下

          当你发现堆内存占用居高不下,经过 GC,下降也不明显,如果你想查看一下堆内的具体情况,可以将其 dump 查看。

          +
          public class HeapTest_3 {  

          // jps 查进程,jmap 看堆内存,jconsole 执行GC,堆内存占用没有明显下降
          // 使用 VisualVM 的堆 dump 功能,观察大对象
          public static void main(String[] args) throws IOException {
          List<Student> students = new ArrayList<>();
          for (int i = 0; i < 200; i++) {
          students.add(new Student());
          }
          System.in.read();
          }

          static class Student {
          private byte[] score = new byte[1024 * 1024];
          }
          }
          +

          可使用 VisualVM 的 Heap Dump 功能:

          + -

          其方法参数有:

          +

          也可使用 jmap -dump:format=b,file=filename.hprof pid,需要其他分析工具搭配。

          +

          方法区

          根据《Java虚拟机规范》,方法区在逻辑上是堆的一部分,但是在具体实现上,各个虚拟机厂商并不相同。对于 Hotspot 而言:

            -
          • name,目标类的名称。
          • -
          • byte[]ByteBuffer 类型的字节数据,offlen 只是为了定位传入的字节数组中关于目标类的字节数据,通常分别是 0 和字节数组的长度,毕竟专门构造一个包含无关数据的字节数组很无聊。
          • -
          • ProtectionDomain,保护域,todo:
          • -
          • sourceCodeSource 的位置。
          • +
          • JDK 8 之前,方法区的具体实现为永久代,使用堆内存,使用 -XX:MaxPermSize=10m 设置大小。
          • +
          • JDK 8 开始,方法区的具体实现为元空间,使用直接内存,使用 -XX:MaxMetaspaceSize=10m 设置大小。
          -

          defineClass 方法的调用过程,其实就是从 URLClassLoader 开始,一层一层处理后再调用父类的 defineClass 方法,分别经过了 SecureClassLoaderClassLoader

          -

          URLClassLoader#defineClass

          此方法是再 URLClassLoaderfindClass 方法中,获得正确的 Resource 之后调用的,由 private 修饰。根据注释,它使用从指定资源获取的类字节来定义类,生成的类必须先解析才能使用。

          -
          private Class<?> defineClass(String name, Resource res) throws IOException {
          long t0 = System.nanoTime();
          // 获取最后一个 . 的位置
          int i = name.lastIndexOf('.');
          // 返回资源的 CodeSourceURL
          URL url = res.getCodeSourceURL();
          if (i != -1) {
          // 截取包名 com.example
          String pkgname = name.substring(0, i);
          // Check if package already loaded.
          Manifest man = res.getManifest();
          definePackageInternal(pkgname, man, url);
          }
          // Now read the class bytes and define the class
          // 先尝试以 ByteBuffer 的形式返回字节数据,如果资源的输入流不是在 ByteBuffer 之上实现的,则返回 null
          java.nio.ByteBuffer bb = res.getByteBuffer();
          if (bb != null) {
          // Use (direct) ByteBuffer:
          // 不常用
          CodeSigner[] signers = res.getCodeSigners();
          CodeSource cs = new CodeSource(url, signers);
          sun.misc.PerfCounter.getReadClassBytesTime().addElapsedTimeFrom(t0);
          // 调用 java.security.SecureClassLoader#defineClass(java.lang.String, java.nio.ByteBuffer, java.security.CodeSource)
          return defineClass(name, bb, cs);
          } else {
          // 以字节数组的形式返回资源数据
          byte[] b = res.getBytes();
          // must read certificates AFTER reading bytes.
          // 必须再读取字节数据后读取证书,todo:
          CodeSigner[] signers = res.getCodeSigners();
          // 根据 URL 和签名者创建 CodeSource
          CodeSource cs = new CodeSource(url, signers);
          sun.misc.PerfCounter.getReadClassBytesTime().addElapsedTimeFrom(t0);
          // 调用 java.security.SecureClassLoader#defineClass(java.lang.String, byte[], int, int, java.security.CodeSource)
          return defineClass(name, b, 0, b.length, cs);
          }
          }
          +

          方法区溢出

          public class MethodAreaTest_1 extends ClassLoader {

          // -XX:MaxMetaspaceSize=8m MaxMetaspaceSize is too small.
          // -XX:MaxMetaspaceSize=10m java.lang.OutOfMemoryError: Compressed class space
          // 不是 Metaspace 应该是某个参数设置的问题
          // JDK 6: -XX:MaxPermSize=8m PermGen space
          public static void main(String[] args) {
          int j = 0;
          try {
          MethodAreaTest_1 methodAreaTest1 = new MethodAreaTest_1();
          for (int i = 0; i < 20000; i++, j++) {
          ClassWriter classWriter = new ClassWriter(0);
          // 版本号,public,类名,包名,父类,接口
          classWriter.visit(Opcodes.V1_8, Opcodes.ACC_PUBLIC, "Class" + i, null, "java/lang/Object", null);
          // 返回二进制字节码
          byte[] code = classWriter.toByteArray();
          // 加载类
          methodAreaTest1.defineClass("Class" + i, code, 0, code.length);
          }
          } catch (ClassFormatError e) {
          e.printStackTrace();
          } finally {
          System.out.println("次数 " + j);
          }
          }
          }
          +
            +
          1. 当设置的值太小时 -XX:MaxMetaspaceSize=8m,提示 MaxMetaspaceSize is too small。
          2. +
          3. 实验中抛出 java.lang.OutOfMemoryError: Compressed class space。
          4. +
          5. 添加参数 -XX:-UseCompressedClassPointers 后,抛出 java.lang.OutOfMemoryError: Metaspace。
          6. +
          7. JDK 6 设置 -XX:MaxPermSize=8m,抛出 java.lang.OutOfMemoryError: PermGen space。
          8. +
          +

          不要认为自己不会写动态生成字节码相关的代码就忽略这方面的问题,如今很多框架使用字节码技术大量地动态生成类。

          +

          运行时常量池

          二进制字节码文件主要包含三类信息:

          +
            +
          1. 类的基本信息
          2. +
          3. 类的常量池(Constant Pool)
          4. +
          5. 类的方法信息
          6. +
          +

          使用 javap 反编译

          public class MethodAreaTest_2 {  

          public static void main(String[] args) {
          System.out.println("hello world");
          }
          }
          -

          Resource 类提供了 getBytes 方法,此方法以字节数组的形式返回字节数据。

          -
          public byte[] getBytes() throws IOException {
          byte[] b;
          // Get stream before content length so that a FileNotFoundException
          // can propagate upwards without being caught too early
          // 在获取内容长度之前获取流,以便 FileNotFoundException 可以向上传播而不会过早被捕获(todo: 不理解)
          // 获取缓存的 InputStream
          InputStream in = cachedInputStream();

          // This code has been uglified to protect against interrupts.
          // Even if a thread has been interrupted when loading resources,
          // the IO should not abort, so must carefully retry, failing only
          // if the retry leads to some other IO exception.
          // 该代码为了防止中断有点丑陋。即使线程在加载资源时被中断,IO 也不应该中止,因此必须小心重试,只有当重试导致其他 IO 异常时才会失败。
          // 检测当前线程是否收到中断信号,收到的话则返回 true 且清除中断状态,重新变更为未中断状态。
          boolean isInterrupted = Thread.interrupted();
          int len;
          for (;;) {
          try {
          // 获取内容长度,顺利的话就跳出循环
          len = getContentLength();
          break;
          } catch (InterruptedIOException iioe) {
          // 如果获取内容长度时,线程被中断抛出了异常,捕获后清除中断状态
          Thread.interrupted();
          isInterrupted = true;
          }
          }

          try {
          b = new byte[0];
          if (len == -1) len = Integer.MAX_VALUE;
          int pos = 0;
          while (pos < len) {
          int bytesToRead;
          if (pos >= b.length) { // Only expand when there's no room
          // 如果当前读取位置已经大于等于数组长度
          // 本次待读取字节长度 = 剩余未读取长度和 1024 取较小值
          bytesToRead = Math.min(len - pos, b.length + 1024);
          if (b.length < pos + bytesToRead) {
          // 如果当前读取位置 + 本次待读取字节长度 > 数组长度,则创建新数组并复制数据
          b = Arrays.copyOf(b, pos + bytesToRead);
          }
          } else {
          // 数组还有空间,待读取字节长度 = 数组剩余空间
          bytesToRead = b.length - pos;
          }
          int cc = 0;
          try {
          // 读取数据
          cc = in.read(b, pos, bytesToRead);
          } catch (InterruptedIOException iioe) {
          // 如果读取时,线程被中断抛出了异常,捕获后清除中断状态
          Thread.interrupted();
          isInterrupted = true;
          }
          if (cc < 0) {
          // 如果读取返回值 < 0
          if (len != Integer.MAX_VALUE) {
          // 且长度并未无限,表示提前检测到 EOF,抛出异常
          throw new EOFException("Detect premature EOF");
          } else {
          // 如果长度无限,表示读到了文件结尾,数组长度大于当前读取位置,创建新数组并复制长度
          if (b.length != pos) {
          b = Arrays.copyOf(b, pos);
          }
          break;
          }
          }
          pos += cc;
          }
          } finally {
          try {
          in.close();
          } catch (InterruptedIOException iioe) {
          isInterrupted = true;
          } catch (IOException ignore) {}

          if (isInterrupted) {
          // 如果 isInterrupted 为 true,代表中断过,重新将线程状态置为中断。
          Thread.currentThread().interrupt();
          }
          }
          return b;
          }
          +
          Classfile /C:/Users/username/Documents/github/jvm-study/target/classes/com/moralok/jvm/memory/methodarea/MethodAreaTest_2.class
          Last modified 2023-11-4; size 619 bytes
          MD5 checksum 0ed10a8f0a03be54fd4159958ee7446c
          Compiled from "MethodAreaTest_2.java"
          public class com.moralok.jvm.memory.methodarea.MethodAreaTest_2
          minor version: 0
          major version: 52
          flags: ACC_PUBLIC, ACC_SUPER
          Constant pool:
          #1 = Methodref #6.#20 // java/lang/Object."<init>":()V
          #2 = Fieldref #21.#22 // java/lang/System.out:Ljava/io/PrintStream;
          #3 = String #23 // hello world
          #4 = Methodref #24.#25 // java/io/PrintStream.println:(Ljava/lang/String;)V
          #5 = Class #26 // com/moralok/jvm/memory/methodarea/MethodAreaTest_2
          #6 = Class #27 // java/lang/Object
          #7 = Utf8 <init>
          #8 = Utf8 ()V
          #9 = Utf8 Code
          #10 = Utf8 LineNumberTable
          #11 = Utf8 LocalVariableTable
          #12 = Utf8 this
          #13 = Utf8 Lcom/moralok/jvm/memory/methodarea/MethodAreaTest_2;
          #14 = Utf8 main
          #15 = Utf8 ([Ljava/lang/String;)V
          #16 = Utf8 args
          #17 = Utf8 [Ljava/lang/String;
          #18 = Utf8 SourceFile
          #19 = Utf8 MethodAreaTest_2.java
          #20 = NameAndType #7:#8 // "<init>":()V
          #21 = Class #28 // java/lang/System
          #22 = NameAndType #29:#30 // out:Ljava/io/PrintStream;
          #23 = Utf8 hello world
          #24 = Class #31 // java/io/PrintStream
          #25 = NameAndType #32:#33 // println:(Ljava/lang/String;)V
          #26 = Utf8 com/moralok/jvm/memory/methodarea/MethodAreaTest_2
          #27 = Utf8 java/lang/Object
          #28 = Utf8 java/lang/System
          #29 = Utf8 out
          #30 = Utf8 Ljava/io/PrintStream;
          #31 = Utf8 java/io/PrintStream
          #32 = Utf8 println
          #33 = Utf8 (Ljava/lang/String;)V
          {
          public com.moralok.jvm.memory.methodarea.MethodAreaTest_2();
          descriptor: ()V
          flags: ACC_PUBLIC
          Code:
          stack=1, locals=1, args_size=1
          0: aload_0
          1: invokespecial #1 // Method java/lang/Object."<init>":()V
          4: return
          LineNumberTable:
          line 3: 0
          LocalVariableTable:
          Start Length Slot Name Signature
          0 5 0 this Lcom/moralok/jvm/memory/methodarea/MethodAreaTest_2;

          public static void main(java.lang.String[]);
          descriptor: ([Ljava/lang/String;)V
          flags: ACC_PUBLIC, ACC_STATIC
          Code:
          stack=2, locals=1, args_size=1
          0: getstatic #2 // Field java/lang/System.out:Ljava/io/PrintStream;
          3: ldc #3 // String hello world
          5: invokevirtual #4 // Method java/io/PrintStream.println:(Ljava/lang/String;)V
          8: return
          LineNumberTable:
          line 6: 0
          line 7: 8
          LocalVariableTable:
          Start Length Slot Name Signature
          0 9 0 args [Ljava/lang/String;
          }
          SourceFile: "MethodAreaTest_2.java"
          -

          getByteBuffer 之后会缓存 InputStream 以便调用 getBytes 时使用,方法由 synchronized 修饰。

          -
          private synchronized InputStream cachedInputStream() throws IOException {
          if (cis == null) {
          cis = getInputStream();
          }
          return cis;
          }
          +
            +
          1. Class 文件的常量池就是一张表,虚拟机根据索引去查找类名、字段名及其类型,方法名及其参数类型和字面量等。
          2. +
          3. 当类被加载到虚拟机之后,Class 文件中的常量池中的信息就进入到了运行时常量池。
          4. +
          5. 这个过程其实就是信息从文件进入了内存。
          6. +
          +

          虚拟机解释器(interpreter)需要解释的字节码指令如下:

          +
          0: getstatic     #2
          3: ldc #3
          5: invokevirtual #4
          +

          索引 #2 的意思就是去常量表里查找对应项代表的事物。

          +

          直接内存

            +
          • 常见于 NIO 操作中的数据缓冲区。
          • +
          • 分配和回收的成本较高,但读写性能更高。
          • +
          • 不由 JVM 进行内存释放
          • +
          +

          NIO 和 IO 的拷贝性能

          public class DirectMemoryTest_1 {  

          private static final String FROM = "C:\\Users\\username\\Videos\\jellyfin\\media\\movies\\Harry Potter and the Chamber of Secrets (2002) [1080p]\\Harry.Potter.and.the.Chamber.of.Secrets.2002.1080p.BrRip.x264.YIFY.mp4";
          private static final String TO = "C:\\Users\\username\\Videos\\jellyfin\\media\\movies\\Harry Potter and the Chamber of Secrets (2002) [1080p]\\Harry.Potter.and.the.Chamber.of.Secrets.2002.1080p.BrRip.x264.YIFY-copy.mp4";
          private static final int _1Mb = 1024 * 1024;

          public static void main(String[] args) {
          io();
          directBuffer();
          }

          private static void directBuffer() {
          long start = System.nanoTime();
          try (FileChannel from = new FileInputStream(FROM).getChannel();
          FileChannel to = new FileOutputStream(TO).getChannel()) {
          ByteBuffer buffer = ByteBuffer.allocateDirect(_1Mb);
          while (true) {
          int len = from.read(buffer);
          if (len == -1) {
          break;
          }
          buffer.flip();
          to.write(buffer);
          buffer.clear();
          }
          } catch (IOException e) {
          e.printStackTrace();
          }
          long end = System.nanoTime();
          System.out.println("directBuffer 用时 " + (end - start) / 1000_000.0);
          }

          private static void io() {
          long start = System.nanoTime();
          try (FileInputStream from = new FileInputStream(FROM);
          FileOutputStream to = new FileOutputStream(TO)) {
          byte[] buffer = new byte[_1Mb];
          while (true) {
          int len = from.read(buffer);
          if (len == -1) {
          break;
          }
          to.write(buffer);
          }
          } catch (IOException e) {
          e.printStackTrace();
          }
          long end = System.nanoTime();
          System.out.println("io 用时 " + (end - start) / 1000_000.0);
          }
          }
          -

          在这个例子中,Resource 的实例是 URLClassPath 中的匿名类 FileLoaderResource 的匿名类的方式创建的。

          -
          public InputStream getInputStream() throws IOException
          {
          // 在该匿名类中,getInputStream 的实现就是简单地根据 FileLoader 中保存的 File 实例创建 FileInputStream 并返回。
          return new FileInputStream(file);
          }

          public int getContentLength() throws IOException
          {
          // 在该匿名类中,getContentLength 的实现就是简单地根据 FileLoader 中保存的 File 实例获取长度。
          return (int)file.length();
          };
          +
          io 用时 1676.9797
          directBuffer 用时 836.4796
          -

          SecureClassLoader#defineClass

          URLClassLoader 继承自 SecureClassLoaderSecureClassLoader 提供并重载了 defineClass 方法,两个方法的注释均比代码长得多。
          由注释可知,方法的作用是将字节数据(byte[] 类型或者 ByteBuffer 类型)转换为 Class 类型的实例,有一个可选的 CodeSource 类型的参数。

          -
          protected final Class<?> defineClass(String name,
          byte[] b, int off, int len,
          CodeSource cs)
          {
          return defineClass(name, b, off, len, getProtectionDomain(cs));
          }

          protected final Class<?> defineClass(String name, java.nio.ByteBuffer b,
          CodeSource cs)
          {
          return defineClass(name, b, getProtectionDomain(cs));
          }
          + -

          方法中只是简单地将 CodeSource 类型的参数转换成 ProtectionDomain 类型,就调用 ClassLoaderdefineClass 方法。

          -
          private ProtectionDomain getProtectionDomain(CodeSource cs) {
          // 如果 CodeSource 为 null,直接返回 null
          if (cs == null)
          return null;

          ProtectionDomain pd = null;
          synchronized (pdcache) {
          // 先从 Map 缓存中获取 ProtectionDomain
          pd = pdcache.get(cs);
          if (pd == null) {
          // 从 CodeSource 中获取 PermissionCollection
          PermissionCollection perms = getPermissions(cs);
          // 缓存中没有,则创建一个 ProtectionDomain 并放入缓存
          pd = new ProtectionDomain(cs, perms, this, null);
          pdcache.put(cs, pd);
          if (debug != null) {
          debug.println(" getPermissions "+ pd);
          debug.println("");
          }
          }
          }
          return pd;
          }
          + -
          getPermissions

          根据注释可知,此方法会返回给定 CodeSource 对象的权限。此方法由 protect 修饰,AppClassLoaderURLClassLoader 都有重写。当前 ClassLoaderAppClassLoader

          -

          AppClassLoader#getPermissions,添加允许从类路径加载的任何类退出 VM的权限。

          -
          protected PermissionCollection getPermissions(CodeSource codesource)
          {
          // 调用父类 URLClassLoader 的 getPermissions
          PermissionCollection perms = super.getPermissions(codesource);
          // 允许从类路径加载的任何类退出 VM的权限。
          // todo: 这是否自定义的类加载器加载的类,可能不能退出 VM。
          perms.add(new RuntimePermission("exitVM"));
          return perms;
          }
          -

          SecureClassLoader#getPermissions,添加一个读文件或读目录的权限。

          -
          protected PermissionCollection getPermissions(CodeSource codesource)
          {
          // 调用父类 SecureClassLoader 的 getPermissions
          PermissionCollection perms = super.getPermissions(codesource);

          URL url = codesource.getLocation();

          Permission p;
          URLConnection urlConnection;

          try {
          // FileURLConnection 实例
          urlConnection = url.openConnection();
          // 允许 read 的 FilePermission 实例
          p = urlConnection.getPermission();
          } catch (java.io.IOException ioe) {
          p = null;
          urlConnection = null;
          }

          if (p instanceof FilePermission) {
          // if the permission has a separator char on the end,
          // it means the codebase is a directory, and we need
          // to add an additional permission to read recursively
          // 如果文件路径以文件分隔符结尾,表示目录,需要在末尾添加"-"改为递归读的权限
          String path = p.getName();
          if (path.endsWith(File.separator)) {
          path += "-";
          p = new FilePermission(path, SecurityConstants.FILE_READ_ACTION);
          }
          } else if ((p == null) && (url.getProtocol().equals("file"))) {
          String path = url.getFile().replace('/', File.separatorChar);
          path = ParseUtil.decode(path);
          if (path.endsWith(File.separator))
          path += "-";
          p = new FilePermission(path, SecurityConstants.FILE_READ_ACTION);
          } else {
          /**
          * Not loading from a 'file:' URL so we want to give the class
          * permission to connect to and accept from the remote host
          * after we've made sure the host is the correct one and is valid.
          */
          URL locUrl = url;
          if (urlConnection instanceof JarURLConnection) {
          locUrl = ((JarURLConnection)urlConnection).getJarFileURL();
          }
          String host = locUrl.getHost();
          if (host != null && (host.length() > 0))
          p = new SocketPermission(host,
          SecurityConstants.SOCKET_CONNECT_ACCEPT_ACTION);
          }

          // make sure the person that created this class loader
          // would have this permission

          if (p != null) {
          final SecurityManager sm = System.getSecurityManager();
          if (sm != null) {
          final Permission fp = p;
          AccessController.doPrivileged(new PrivilegedAction<Void>() {
          public Void run() throws SecurityException {
          sm.checkPermission(fp);
          return null;
          }
          }, acc);
          }
          perms.add(p);
          }
          return perms;
          }
          +

          直接内存溢出

          public class DirectMemoryTest_2 {  

          private static final int _100Mb = 1024 * 1024 * 100;

          public static void main(String[] args) {
          List<ByteBuffer> list = new ArrayList<>();
          int i = 0;
          try {
          while (true) {
          ByteBuffer byteBuffer = ByteBuffer.allocateDirect(_100Mb);
          list.add(byteBuffer);
          i++;
          }
          } catch (Throwable t) {
          t.printStackTrace();
          } System.out.println(i);
          }
          }
          -

          SecureClassLoader#getPermissions,延迟设置权限,在创建 ProtectionDomain 时再设置。

          -
          protected PermissionCollection getPermissions(CodeSource codesource)
          {
          // 检查以确保类加载器已初始化。在 SecureClassLoader 构造器最后会用一个布尔变量表示加载器初始化成功。
          // 从代码上看,似乎只能保证 SecureClassLoader 的构造器方法已执行完毕?
          check();
          // ProtectionDomain 延迟绑定,Permissions 继承 PermissionCollection 类。
          return new Permissions(); // ProtectionDomain defers the binding
          }
          +
          java.lang.OutOfMemoryError: Direct buffer memory
          at java.nio.Bits.reserveMemory(Bits.java:695)
          at java.nio.DirectByteBuffer.<init>(DirectByteBuffer.java:123)
          at java.nio.ByteBuffer.allocateDirect(ByteBuffer.java:311)
          at com.moralok.jvm.memory.direct.DirectMemoryTest_2.main(DirectMemoryTest_2.java:16)
          145
          -
          ProtectionDomain

          ProtectionDomain 的相关构造器参数:

          -
            -
          • CodeSource
          • -
          • PermissionCollection,如果不为 null,会设置权限为只读,表示权限在使用过程中不再修改;同时检查是否需要设置拥有全部权限。
          • -
          • ClassLoader
          • -
          • Principal[]
          • -
          -

          这样看来,SecureClassLoader 为了定义类做的处理,就是简单地创建一些关于权限的对象,并保存了 CodeSource->ProtectionDomain 的映射作为缓存。

          -

          ClassLoader#defineClass

          抽象类 ClassLoader 中最终用于定义类的 native 方法 define0define1define2 都是由 private 修饰的,ClassLoader 提供并重载了 defineClass 方法作为使用它们的入口,这些 defineClass 方法都由 protect final 修饰,这意味着这些方法只能被子类使用,并且不能被重写。

          -
          protected final Class<?> defineClass(String name, byte[] b, int off, int len)
          throws ClassFormatError
          {
          return defineClass(name, b, off, len, null);
          }

          protected final Class<?> defineClass(String name, byte[] b, int off, int len,
          ProtectionDomain protectionDomain)
          throws ClassFormatError
          {
          protectionDomain = preDefineClass(name, protectionDomain);
          String source = defineClassSourceLocation(protectionDomain);
          Class<?> c = defineClass1(name, b, off, len, protectionDomain, source);
          postDefineClass(c, protectionDomain);
          return c;
          }

          protected final Class<?> defineClass(String name, java.nio.ByteBuffer b,
          ProtectionDomain protectionDomain)
          throws ClassFormatError
          {
          int len = b.remaining();

          // Use byte[] if not a direct ByteBufer:
          if (!b.isDirect()) {
          if (b.hasArray()) {
          return defineClass(name, b.array(),
          b.position() + b.arrayOffset(), len,
          protectionDomain);
          } else {
          // no array, or read-only array
          byte[] tb = new byte[len];
          b.get(tb); // get bytes out of byte buffer.
          return defineClass(name, tb, 0, len, protectionDomain);
          }
          }

          protectionDomain = preDefineClass(name, protectionDomain);
          String source = defineClassSourceLocation(protectionDomain);
          Class<?> c = defineClass2(name, b, b.position(), len, protectionDomain, source);
          postDefineClass(c, protectionDomain);
          return c;
          }
          +

          这似乎是代码中抛出的异常,而不是真正的直接内存溢出?

          +

          直接内存释放的原理

          演示直接内存的释放受 GC 影响

          public class DirectMemoryTest_3 {

          private static final int _1GB = 1024 * 1024 * 1024;

          public static void main(String[] args) throws IOException {
          ByteBuffer byteBuffer = ByteBuffer.allocateDirect(_1GB);
          System.out.println("分配完毕");
          System.in.read();
          System.out.println("开始释放");
          byteBuffer = null;
          // 随着 ByteBuffer 的释放,从任务管理器界面看到程序的内存的占用迅速下降 1GB。
          System.gc();
          System.in.read();
          }
          }
          -

          主要步骤:

          -
            -
          1. preDefineClass 前置处理
          2. -
          3. defineClassX
          4. -
          5. postDefineClass 后置处理
          6. -
          -
          preDefineClass

          确定保护域 ProtectionDomain,并检查:

          -
            -
          1. 未定义 java.*
          2. -
          3. 该类的签名者与包(package)中其余类的签名者相匹配
          4. -
          -
          private ProtectionDomain preDefineClass(String name,
          ProtectionDomain pd)
          {
          // 检查 name 为 null 或者有可能是有效的二进制名称
          if (!checkName(name))
          throw new NoClassDefFoundError("IllegalName: " + name);

          // Note: Checking logic in java.lang.invoke.MemberName.checkForTypeAlias
          // relies on the fact that spoofing is impossible if a class has a name
          // of the form "java.*"
          // 如果 name 以 java. 开头,则抛出异常
          if ((name != null) && name.startsWith("java.")) {
          throw new SecurityException
          ("Prohibited package name: " +
          name.substring(0, name.lastIndexOf('.')));
          }
          if (pd == null) {
          // 如果未传入 ProtectionDomain,取默认的 ProtectionDomain
          pd = defaultDomain;
          }

          // 存放了 package->certs 的 map 映射作为缓存,检查一个包内的 certs 都是一样的
          // todo: certs
          if (name != null) checkCerts(name, pd.getCodeSource());

          return pd;
          }
          +

          手动进行直接内存的分配和释放

          在代码中实现手动进行直接内存的分配和释放。

          +
          public class DirectMemoryTest_4 {

          private static final int _1GB = 1024 * 1024 * 1024;

          public static void main(String[] args) throws IOException {
          Unsafe unsafe = getUnsafe();

          // 分配内存
          long base = unsafe.allocateMemory(_1GB);
          unsafe.setMemory(base, _1GB, (byte) 0);
          System.in.read();

          // 释放内存
          unsafe.freeMemory(base);
          System.in.read();
          }

          private static Unsafe getUnsafe() {
          try {
          Field f = Unsafe.class.getDeclaredField("theUnsafe");
          f.setAccessible(true);
          Unsafe unsafe = (Unsafe) f.get(null);
          return unsafe;
          } catch (NoSuchFieldException | IllegalAccessException e) {
          throw new RuntimeException(e);
          }
          }
          }
          -
          defineClassSourceLocation

          确定 ClassCodeSource 位置。

          -
          private String defineClassSourceLocation(ProtectionDomain pd)
          {
          CodeSource cs = pd.getCodeSource();
          String source = null;
          if (cs != null && cs.getLocation() != null) {
          source = cs.getLocation().toString();
          }
          return source;
          }
          +

          如何将 GC 和直接内存的分配和释放关联

          本质上,直接内存的自动释放是利用了虚引用的机制,间接调用了 unsafe 的分配和释放直接内存的方法。

          +

          DirectByteBuffer 就是使用 unsafe.allocateMemory(size) 分配直接内存。DirectByteBuffer 对象以及一个 Deallocator 对象(Runnable 类型)一起用于创建了一个虚引用类型的 Cleaner 对象。

          +
          DirectByteBuffer(int cap) {

          // 省略
          try {
          base = unsafe.allocateMemory(size);
          } catch (OutOfMemoryError x) {
          Bits.unreserveMemory(size, cap);
          throw x;
          }
          // 省略
          cleaner = Cleaner.create(this, new Deallocator(base, size, cap));
          att = null;
          }
          -
          defineClassX 方法

          这些 native 方法使用了 name,字节数据,ProtectionDomainsource 等参数,像黑盒一样,在虚拟机中定义了一个类。

          -
          postDefineClass

          在定义类后使用 ProtectionDomain 中的 certs 补充 Class 实例的 signer 信息,猜测在 native 方法 defineClassX 方法中,对 ProtectionDomain 做了一些修改。事实上,从代码上看,将 CodeSource 包装为 ProtectionDomain 传入后,除了 defineClassX 方法外,其他地方都是取出 CodeSource 使用。

          -
          private void postDefineClass(Class<?> c, ProtectionDomain pd)
          {
          if (pd.getCodeSource() != null) {
          // 获取证书
          Certificate certs[] = pd.getCodeSource().getCertificates();
          if (certs != null)
          setSigners(c, certs);
          }
          }
          ]]> +

          根据虚引用的机制,如果 DirectByteBuffer 对象被回收,虚引用对象会被加入到 Cleanner 的引用队列,ReferenceHandler 线程会处理引用队列中的 Cleaner 对象,进而调用 Deallocator 对象的 run 方法。

          +
          public void run() {
          if (address == 0) {
          // Paranoia
          return;
          }
          unsafe.freeMemory(address);
          address = 0;
          Bits.unreserveMemory(size, capacity);
          }
          +]]> java - class loader + jvm @@ -1543,151 +1688,6 @@ prometheus - - JVM 内存区域的测试和分析 - /2023/11/04/testing-and-analysis-of-jvm-memory-area/ - 内存区域

          JVM 内存区域划分为:

          -
            -
          • 程序计数器
          • -
          • 虚拟机栈
          • -
          • 本地方法栈
          • -
          • -
          • 方法区
          • -
          - - -

          程序计数器

          虚拟机栈

          Java 虚拟机栈(Java Virtual Machine Stack),线程私有,生命周期与线程相同。虚拟机栈描述的是 Java 方法执行的线程内存模型。每个方法被执行的时候,Java虚拟机都会同步创建一个栈帧(Stack Frame)用于存储局部变量表、操作数栈、动态连接、方法出口等信息。

          -

          可以使用 -Xss1024k 设置虚拟机栈的大小。默认情况下都是 1024k,只有 Windows 中取决于虚拟内存。

          -

          栈内存溢出

            -
          1. 栈帧过多导致栈内存溢出
          2. -
          3. 栈帧过大导致栈内存溢出(难复现)
          4. -
          -

          不正确的递归调用

          public class StackTest_4 {

          private static int count = 0;

          // 改变栈的大小限制 -Xss256k,观察调用次数的变化
          public static void main(String[] args) {
          try {
          method1();
          } catch (Throwable t) {
          t.printStackTrace();
          } finally {
          // 默认情况下经过 20000+ 次,改变参数后 3000+ 次
          System.out.println(count);
          }
          }

          private static void method1() {
          count++;
          method1();
          }
          }
          - - -

          循环引用导致 JSON 解析无限循环

          并非只有自己写的递归方法可能引发栈内存溢出,有可能第三方库也会引发栈内存溢出。

          -
          public class StackTest_5 {

          public static void main(String[] args) throws JsonProcessingException {
          Department department = new Department();
          department.setName("Tech");

          Employee employee1 = new Employee();
          employee1.setName("Tom");
          employee1.setDepartment(department);

          Employee employee2 = new Employee();
          employee2.setName("Tim");
          employee2.setDepartment(department);

          department.setEmployees(Arrays.asList(employee1, employee2));

          ObjectMapper objectMapper = new ObjectMapper();
          System.out.println(objectMapper.writeValueAsString(department));
          }

          static class Department {
          private String name;
          private List<Employee> employees;

          public String getName() {
          return name;
          }

          public void setName(String name) {
          this.name = name;
          }

          public List<Employee> getEmployees() {
          return employees;
          }

          public void setEmployees(List<Employee> employees) {
          this.employees = employees;
          }
          }

          static class Employee {
          private String name;
          private Department department;

          public String getName() {
          return name;
          }

          public void setName(String name) {
          this.name = name;
          }

          public Department getDepartment() {
          return department;
          }

          public void setDepartment(Department department) {
          this.department = department;
          }
          }
          }
          - -

          局部变量的线程安全问题

            -
          1. 局部变量如果未逃离方法的作用范围,就是线程安全的。
          2. -
          3. 局部变量如果是引用类型且逃离了方法的作用范围,就是线程不安全的。
          4. -
          -
          public class StackTest_3 {

          public static void main(String[] args) {
          method1();
          }

          // 线程安全
          private static void method1() {
          StringBuilder sb = new StringBuilder();
          sb.append(1);
          sb.append(2);
          sb.append(3);
          System.out.println(sb);
          }

          // 线程不安全
          private static void method2(StringBuilder sb) {
          sb.append(1);
          sb.append(2);
          sb.append(3);
          System.out.println(sb);
          }

          // 线程不安全,看到一个说法:发生指令重排,sb 的 append 操作发生在返回之后(有待确认)
          private static StringBuilder method3() {
          StringBuilder sb = new StringBuilder();
          sb.append(1);
          sb.append(2);
          sb.append(3);
          return sb;
          }
          }
          - -

          线程问题排查

          CPU 占用率居高不下

          public class ThreadTest_1 {

          public static void main(String[] args) {
          new Thread(null, () -> {
          System.out.println("t1...");
          while (true) {

          }
          }, "thread1").start();

          new Thread(null, () -> {
          System.out.println("t2...");
          try {
          TimeUnit.SECONDS.sleep(1000);
          } catch (InterruptedException e) {
          e.printStackTrace();
          }
          }, "thread2").start();

          new Thread(null, () -> {
          System.out.println("t3...");
          try {
          TimeUnit.SECONDS.sleep(1000);
          } catch (InterruptedException e) {
          e.printStackTrace();
          }
          }, "thread3").start();
          }
          }
          -

          当发现 CPU 占用率居高不下时,可以尝试以下步骤:

          -
            -
          1. top,定位 cpu 占用高的进程 id。
          2. -
          3. ps H -eo pid,tid,%cpu | grep pid,进一步定位引起 cpu 占用高的线程 id。
          4. -
          5. jstack pid,根据线程 id 换算成 16进制的 nid 找到对应线程,进一步定位到问题的源码行号。
          6. -
          -
          "thread1" #8 prio=5 os_prio=0 tid=0x00007f9bd0162800 nid=0x1061ad runnable [0x00007f9bd56eb000]
          java.lang.Thread.State: RUNNABLE
          at com.moralok.jvm.thread.ThreadTest_1.lambda$main$0(ThreadTest_1.java:10)
          at com.moralok.jvm.thread.ThreadTest_1$$Lambda$1/250421012.run(Unknown Source)
          at java.lang.Thread.run(Thread.java:750)
          - -

          死锁,迟迟未返回结果

          public class ThreadTest_2 {

          private static final Object A = new Object();
          private static final Object B = new Object();

          public static void main(String[] args) {
          new Thread(null, () -> {
          System.out.println("t1...");
          synchronized (A) {
          System.out.println(Thread.currentThread().getName() + " get A");
          try {
          TimeUnit.SECONDS.sleep(5);
          } catch (InterruptedException e) {
          throw new RuntimeException(e);
          }
          synchronized (B) {
          System.out.println(Thread.currentThread().getName() + " get B");
          }
          }
          }, "thread1").start();

          new Thread(null, () -> {
          System.out.println("t2...");
          synchronized (B) {
          System.out.println(Thread.currentThread().getName() + " get B");
          try {
          TimeUnit.SECONDS.sleep(5);
          } catch (InterruptedException e) {
          throw new RuntimeException(e);
          }
          synchronized (A) {
          System.out.println(Thread.currentThread().getName() + " get A");
          }
          }
          }, "thread2").start();
          }
          }
          - -
            -
          1. jstack pid,会显示找到死锁,以及死锁涉及的线程,,并各自持有的锁还有等待的锁。
          2. -
          3. 其他工具如 jconsole 也具有检测死锁的功能。
          4. -
          -

          本地方法栈

          堆(Heap)的特点:

          -
            -
          1. 线程共享,需要考虑线程安全问题。
          2. -
          3. 存在垃圾回收机制。
          4. -
          5. 使用 -Xmx8m 设置大小。
          6. -
          -

          堆内存溢出

          既然堆有垃圾回收机制,为什么还会发生内存溢出呢?最开始的时候,我也有这样的困惑。
          后来我才认识到,还在使用中的对象是不能被强制回收的,不再使用的对象不是立刻回收的。当创建对象却没有足够的内存空间时,如果清理掉那些不再使用的对象就有足够的内存空间,就不会发生内存溢出,程序只是表现为卡顿。

          -
          public class HeapTest_1 {  

          // -Xmx8m
          // 不设置可能不提示 Java heap space,出错地方不同,报错信息不同
          public static void main(String[] args) {
          int i = 0;
          try {
          List<String> list = new ArrayList<>();
          String s = "hello";
          while (true) {
          list.add(s);
          s = s + s;
          i++;
          }
          } catch (Throwable t) {
          t.printStackTrace();
          } finally {
          System.out.println("运行次数 " + i);
          }
          }
          }
          - -
          java.lang.OutOfMemoryError: Java heap space
          at java.util.Arrays.copyOf(Arrays.java:3332)
          at java.lang.AbstractStringBuilder.ensureCapacityInternal(AbstractStringBuilder.java:124)
          at java.lang.AbstractStringBuilder.append(AbstractStringBuilder.java:448)
          at java.lang.StringBuilder.append(StringBuilder.java:141)
          at com.moralok.jvm.memory.heap.HeapTest_1.main(HeapTest_1.java:21)
          运行次数 17
          - -

          堆内存溢出的发生往往需要长时间的运行,因此在排查相关问题时,可以适当调小堆内存。

          -

          监测堆内存

            -
          1. 使用 jps 查看 Java 进程列表
          2. -
          3. 使用 jmap -heap pid 查看堆内存信息
          4. -
          5. 还可以使用 jconsole 观察堆内存变化曲线
          6. -
          7. 还可以使用 VisualVM 查看堆信息
          8. -
          -
          public class HeapTest_2 {

          public static void main(String[] args) throws InterruptedException {
          System.out.println("1...");
          TimeUnit.SECONDS.sleep(30);
          // 堆空间占用上升 10MB
          byte[] bytes = new byte[1024 * 1024 * 10];
          System.out.println("2...");
          TimeUnit.SECONDS.sleep(30);
          bytes = null;
          // 堆空间占用下降
          System.gc();
          System.out.println("3...");
          TimeUnit.SECONDS.sleep(3000);
          }
          }
          - -

          使用 jmap -heap pid 查看堆内存信息:

          -
          Eden Space:
          capacity = 268435456 (256.0MB)
          used = 32212360 (30.72010040283203MB)

          used = 42698136 (40.720115661621094MB)

          used = 5368728 (5.120018005371094MB)
          - -

          使用 jconsole 查看堆内存信息:

          - - -

          堆内存占用居高不下

          当你发现堆内存占用居高不下,经过 GC,下降也不明显,如果你想查看一下堆内的具体情况,可以将其 dump 查看。

          -
          public class HeapTest_3 {  

          // jps 查进程,jmap 看堆内存,jconsole 执行GC,堆内存占用没有明显下降
          // 使用 VisualVM 的堆 dump 功能,观察大对象
          public static void main(String[] args) throws IOException {
          List<Student> students = new ArrayList<>();
          for (int i = 0; i < 200; i++) {
          students.add(new Student());
          }
          System.in.read();
          }

          static class Student {
          private byte[] score = new byte[1024 * 1024];
          }
          }
          -

          可使用 VisualVM 的 Heap Dump 功能:

          - - -

          也可使用 jmap -dump:format=b,file=filename.hprof pid,需要其他分析工具搭配。

          -

          方法区

          根据《Java虚拟机规范》,方法区在逻辑上是堆的一部分,但是在具体实现上,各个虚拟机厂商并不相同。对于 Hotspot 而言:

          -
            -
          • JDK 8 之前,方法区的具体实现为永久代,使用堆内存,使用 -XX:MaxPermSize=10m 设置大小。
          • -
          • JDK 8 开始,方法区的具体实现为元空间,使用直接内存,使用 -XX:MaxMetaspaceSize=10m 设置大小。
          • -
          -

          方法区溢出

          public class MethodAreaTest_1 extends ClassLoader {

          // -XX:MaxMetaspaceSize=8m MaxMetaspaceSize is too small.
          // -XX:MaxMetaspaceSize=10m java.lang.OutOfMemoryError: Compressed class space
          // 不是 Metaspace 应该是某个参数设置的问题
          // JDK 6: -XX:MaxPermSize=8m PermGen space
          public static void main(String[] args) {
          int j = 0;
          try {
          MethodAreaTest_1 methodAreaTest1 = new MethodAreaTest_1();
          for (int i = 0; i < 20000; i++, j++) {
          ClassWriter classWriter = new ClassWriter(0);
          // 版本号,public,类名,包名,父类,接口
          classWriter.visit(Opcodes.V1_8, Opcodes.ACC_PUBLIC, "Class" + i, null, "java/lang/Object", null);
          // 返回二进制字节码
          byte[] code = classWriter.toByteArray();
          // 加载类
          methodAreaTest1.defineClass("Class" + i, code, 0, code.length);
          }
          } catch (ClassFormatError e) {
          e.printStackTrace();
          } finally {
          System.out.println("次数 " + j);
          }
          }
          }
          -
            -
          1. 当设置的值太小时 -XX:MaxMetaspaceSize=8m,提示 MaxMetaspaceSize is too small。
          2. -
          3. 实验中抛出 java.lang.OutOfMemoryError: Compressed class space。
          4. -
          5. 添加参数 -XX:-UseCompressedClassPointers 后,抛出 java.lang.OutOfMemoryError: Metaspace。
          6. -
          7. JDK 6 设置 -XX:MaxPermSize=8m,抛出 java.lang.OutOfMemoryError: PermGen space。
          8. -
          -

          不要认为自己不会写动态生成字节码相关的代码就忽略这方面的问题,如今很多框架使用字节码技术大量地动态生成类。

          -

          运行时常量池

          二进制字节码文件主要包含三类信息:

          -
            -
          1. 类的基本信息
          2. -
          3. 类的常量池(Constant Pool)
          4. -
          5. 类的方法信息
          6. -
          -

          使用 javap 反编译

          public class MethodAreaTest_2 {  

          public static void main(String[] args) {
          System.out.println("hello world");
          }
          }
          - -
          Classfile /C:/Users/username/Documents/github/jvm-study/target/classes/com/moralok/jvm/memory/methodarea/MethodAreaTest_2.class
          Last modified 2023-11-4; size 619 bytes
          MD5 checksum 0ed10a8f0a03be54fd4159958ee7446c
          Compiled from "MethodAreaTest_2.java"
          public class com.moralok.jvm.memory.methodarea.MethodAreaTest_2
          minor version: 0
          major version: 52
          flags: ACC_PUBLIC, ACC_SUPER
          Constant pool:
          #1 = Methodref #6.#20 // java/lang/Object."<init>":()V
          #2 = Fieldref #21.#22 // java/lang/System.out:Ljava/io/PrintStream;
          #3 = String #23 // hello world
          #4 = Methodref #24.#25 // java/io/PrintStream.println:(Ljava/lang/String;)V
          #5 = Class #26 // com/moralok/jvm/memory/methodarea/MethodAreaTest_2
          #6 = Class #27 // java/lang/Object
          #7 = Utf8 <init>
          #8 = Utf8 ()V
          #9 = Utf8 Code
          #10 = Utf8 LineNumberTable
          #11 = Utf8 LocalVariableTable
          #12 = Utf8 this
          #13 = Utf8 Lcom/moralok/jvm/memory/methodarea/MethodAreaTest_2;
          #14 = Utf8 main
          #15 = Utf8 ([Ljava/lang/String;)V
          #16 = Utf8 args
          #17 = Utf8 [Ljava/lang/String;
          #18 = Utf8 SourceFile
          #19 = Utf8 MethodAreaTest_2.java
          #20 = NameAndType #7:#8 // "<init>":()V
          #21 = Class #28 // java/lang/System
          #22 = NameAndType #29:#30 // out:Ljava/io/PrintStream;
          #23 = Utf8 hello world
          #24 = Class #31 // java/io/PrintStream
          #25 = NameAndType #32:#33 // println:(Ljava/lang/String;)V
          #26 = Utf8 com/moralok/jvm/memory/methodarea/MethodAreaTest_2
          #27 = Utf8 java/lang/Object
          #28 = Utf8 java/lang/System
          #29 = Utf8 out
          #30 = Utf8 Ljava/io/PrintStream;
          #31 = Utf8 java/io/PrintStream
          #32 = Utf8 println
          #33 = Utf8 (Ljava/lang/String;)V
          {
          public com.moralok.jvm.memory.methodarea.MethodAreaTest_2();
          descriptor: ()V
          flags: ACC_PUBLIC
          Code:
          stack=1, locals=1, args_size=1
          0: aload_0
          1: invokespecial #1 // Method java/lang/Object."<init>":()V
          4: return
          LineNumberTable:
          line 3: 0
          LocalVariableTable:
          Start Length Slot Name Signature
          0 5 0 this Lcom/moralok/jvm/memory/methodarea/MethodAreaTest_2;

          public static void main(java.lang.String[]);
          descriptor: ([Ljava/lang/String;)V
          flags: ACC_PUBLIC, ACC_STATIC
          Code:
          stack=2, locals=1, args_size=1
          0: getstatic #2 // Field java/lang/System.out:Ljava/io/PrintStream;
          3: ldc #3 // String hello world
          5: invokevirtual #4 // Method java/io/PrintStream.println:(Ljava/lang/String;)V
          8: return
          LineNumberTable:
          line 6: 0
          line 7: 8
          LocalVariableTable:
          Start Length Slot Name Signature
          0 9 0 args [Ljava/lang/String;
          }
          SourceFile: "MethodAreaTest_2.java"
          - -
            -
          1. Class 文件的常量池就是一张表,虚拟机根据索引去查找类名、字段名及其类型,方法名及其参数类型和字面量等。
          2. -
          3. 当类被加载到虚拟机之后,Class 文件中的常量池中的信息就进入到了运行时常量池。
          4. -
          5. 这个过程其实就是信息从文件进入了内存。
          6. -
          -

          虚拟机解释器(interpreter)需要解释的字节码指令如下:

          -
          0: getstatic     #2
          3: ldc #3
          5: invokevirtual #4
          -

          索引 #2 的意思就是去常量表里查找对应项代表的事物。

          -

          直接内存

            -
          • 常见于 NIO 操作中的数据缓冲区。
          • -
          • 分配和回收的成本较高,但读写性能更高。
          • -
          • 不由 JVM 进行内存释放
          • -
          -

          NIO 和 IO 的拷贝性能

          public class DirectMemoryTest_1 {  

          private static final String FROM = "C:\\Users\\username\\Videos\\jellyfin\\media\\movies\\Harry Potter and the Chamber of Secrets (2002) [1080p]\\Harry.Potter.and.the.Chamber.of.Secrets.2002.1080p.BrRip.x264.YIFY.mp4";
          private static final String TO = "C:\\Users\\username\\Videos\\jellyfin\\media\\movies\\Harry Potter and the Chamber of Secrets (2002) [1080p]\\Harry.Potter.and.the.Chamber.of.Secrets.2002.1080p.BrRip.x264.YIFY-copy.mp4";
          private static final int _1Mb = 1024 * 1024;

          public static void main(String[] args) {
          io();
          directBuffer();
          }

          private static void directBuffer() {
          long start = System.nanoTime();
          try (FileChannel from = new FileInputStream(FROM).getChannel();
          FileChannel to = new FileOutputStream(TO).getChannel()) {
          ByteBuffer buffer = ByteBuffer.allocateDirect(_1Mb);
          while (true) {
          int len = from.read(buffer);
          if (len == -1) {
          break;
          }
          buffer.flip();
          to.write(buffer);
          buffer.clear();
          }
          } catch (IOException e) {
          e.printStackTrace();
          }
          long end = System.nanoTime();
          System.out.println("directBuffer 用时 " + (end - start) / 1000_000.0);
          }

          private static void io() {
          long start = System.nanoTime();
          try (FileInputStream from = new FileInputStream(FROM);
          FileOutputStream to = new FileOutputStream(TO)) {
          byte[] buffer = new byte[_1Mb];
          while (true) {
          int len = from.read(buffer);
          if (len == -1) {
          break;
          }
          to.write(buffer);
          }
          } catch (IOException e) {
          e.printStackTrace();
          }
          long end = System.nanoTime();
          System.out.println("io 用时 " + (end - start) / 1000_000.0);
          }
          }
          - -
          io 用时 1676.9797
          directBuffer 用时 836.4796
          - - - - - - -

          直接内存溢出

          public class DirectMemoryTest_2 {  

          private static final int _100Mb = 1024 * 1024 * 100;

          public static void main(String[] args) {
          List<ByteBuffer> list = new ArrayList<>();
          int i = 0;
          try {
          while (true) {
          ByteBuffer byteBuffer = ByteBuffer.allocateDirect(_100Mb);
          list.add(byteBuffer);
          i++;
          }
          } catch (Throwable t) {
          t.printStackTrace();
          } System.out.println(i);
          }
          }
          - -
          java.lang.OutOfMemoryError: Direct buffer memory
          at java.nio.Bits.reserveMemory(Bits.java:695)
          at java.nio.DirectByteBuffer.<init>(DirectByteBuffer.java:123)
          at java.nio.ByteBuffer.allocateDirect(ByteBuffer.java:311)
          at com.moralok.jvm.memory.direct.DirectMemoryTest_2.main(DirectMemoryTest_2.java:16)
          145
          - -

          这似乎是代码中抛出的异常,而不是真正的直接内存溢出?

          -

          直接内存释放的原理

          演示直接内存的释放受 GC 影响

          public class DirectMemoryTest_3 {

          private static final int _1GB = 1024 * 1024 * 1024;

          public static void main(String[] args) throws IOException {
          ByteBuffer byteBuffer = ByteBuffer.allocateDirect(_1GB);
          System.out.println("分配完毕");
          System.in.read();
          System.out.println("开始释放");
          byteBuffer = null;
          // 随着 ByteBuffer 的释放,从任务管理器界面看到程序的内存的占用迅速下降 1GB。
          System.gc();
          System.in.read();
          }
          }
          - -

          手动进行直接内存的分配和释放

          在代码中实现手动进行直接内存的分配和释放。

          -
          public class DirectMemoryTest_4 {

          private static final int _1GB = 1024 * 1024 * 1024;

          public static void main(String[] args) throws IOException {
          Unsafe unsafe = getUnsafe();

          // 分配内存
          long base = unsafe.allocateMemory(_1GB);
          unsafe.setMemory(base, _1GB, (byte) 0);
          System.in.read();

          // 释放内存
          unsafe.freeMemory(base);
          System.in.read();
          }

          private static Unsafe getUnsafe() {
          try {
          Field f = Unsafe.class.getDeclaredField("theUnsafe");
          f.setAccessible(true);
          Unsafe unsafe = (Unsafe) f.get(null);
          return unsafe;
          } catch (NoSuchFieldException | IllegalAccessException e) {
          throw new RuntimeException(e);
          }
          }
          }
          - -

          如何将 GC 和直接内存的分配和释放关联

          本质上,直接内存的自动释放是利用了虚引用的机制,间接调用了 unsafe 的分配和释放直接内存的方法。

          -

          DirectByteBuffer 就是使用 unsafe.allocateMemory(size) 分配直接内存。DirectByteBuffer 对象以及一个 Deallocator 对象(Runnable 类型)一起用于创建了一个虚引用类型的 Cleaner 对象。

          -
          DirectByteBuffer(int cap) {

          // 省略
          try {
          base = unsafe.allocateMemory(size);
          } catch (OutOfMemoryError x) {
          Bits.unreserveMemory(size, cap);
          throw x;
          }
          // 省略
          cleaner = Cleaner.create(this, new Deallocator(base, size, cap));
          att = null;
          }
          - -

          根据虚引用的机制,如果 DirectByteBuffer 对象被回收,虚引用对象会被加入到 Cleanner 的引用队列,ReferenceHandler 线程会处理引用队列中的 Cleaner 对象,进而调用 Deallocator 对象的 run 方法。

          -
          public void run() {
          if (address == 0) {
          // Paranoia
          return;
          }
          unsafe.freeMemory(address);
          address = 0;
          Bits.unreserveMemory(size, capacity);
          }
          -]]>
          - - java - jvm - -
          JDK 动态代理和 CGLib /2023/11/19/JDK-dynamic-proxy-and-CGLib/ @@ -2111,4 +2111,145 @@ jvm + + Spring AOP 如何创建代理 beans + /2023/11/19/how-does-Spring-AOP-create-proxy-beans/ + Spring AOP 是基于代理实现的,它既支持 JDK 动态代理也支持 CGLib。

          +
            +
          • 在什么时候创建代理对象的?
          • +
          • 怎么创建代理对象的?
          • +
          +

          过程简单图解

          + +

          准备工作

            +
          • 引入依赖
            <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-context</artifactId>
            <version>4.3.12.RELEASE</version>
            </dependency>
            <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-aspects</artifactId>
            <version>4.3.12.RELEASE</version>
            </dependency>
          • +
          • 目标对象类
            public class MathCalculator {

            public int div(int i, int j) {
            return i / j;
            }
            }
          • +
          • 切面类
            @Aspect
            public class LogAspects {

            @Pointcut("execution(public int com.moralok.aop.MathCalculator.*(..))")
            public void pointCut() {

            }

            @Before("pointCut()")
            public void logStart(JoinPoint joinPoint) {
            System.out.println(joinPoint.getSignature().getName() + "除法运行@Before。。。参数列表为 " + Arrays.asList(joinPoint.getArgs()) + "");
            }

            @After("pointCut()")
            public void logEnd(JoinPoint joinPoint) {
            System.out.println(joinPoint.getSignature().getName() + "除法结束@After。。。");
            }

            @AfterReturning(value = "pointCut()", returning = "result")
            public void logReturn(JoinPoint joinPoint, Object result) {
            System.out.println(joinPoint.getSignature().getName() + "除法正常返回@AfterReturning。。。运行结果 " + result);
            }

            @AfterThrowing(value = "pointCut()", throwing = "e")
            public void logException(JoinPoint joinPoint, Exception e) {
            System.out.println(joinPoint.getSignature().getName() + "除法异常@AfterThrowing。。。异常信息 " + e.getMessage());
            }

            @Around(value = "execution(public String com.moralok.bean.Car.getName(..))")
            public Object logAround(ProceedingJoinPoint joinPoint) throws Throwable {
            System.out.println(joinPoint.getSignature().getName() + " @Around开始");
            Object proceed = joinPoint.proceed();
            System.out.println(joinPoint.getSignature().getName() + " @Around结束");
            return proceed;
            }
            }
          • +
          • 配置类
            @Configuration
            @EnableAspectJAutoProxy
            public class AopConfig {

            @Bean
            public MathCalculator mathCalculator() {
            return new MathCalculator();
            }

            @Bean
            public LogAspects logAspects() {
            return new LogAspects();
            }
            }
          • +
          • 测试类
            public class AopTest {

            @Test
            public void aopTest() {
            AnnotationConfigApplicationContext ac = new AnnotationConfigApplicationContext(AopConfig.class);
            MathCalculator mathCalculator = ac.getBean(MathCalculator.class);
            mathCalculator.div(1, 1);
            mathCalculator.div(1, 0);
            ac.close();
            }
            }
          • +
          • Debug 断点的判断条件(可选)
            beanName.equals("mathCalculator")
          • +
          +

          创建代理 Bean 和创建普通 Bean 的区别

          其实创建代理 Bean 的过程和创建普通 Bean 的过程直到进行初始化处理(initializeBean)前都是一样的。更具体地说,如很多资料所言,Spring 创建代理对象的工作,是在应用后置处理器阶段完成的。

          +

          常规的入口 getBean

          mathCalculator 以 getBean 方法为起点,开始创建的过程。

          +
          @Override
          public void preInstantiateSingletons() throws BeansException {
          // ...(mathCalculator)
          getBean(beanName);
          // ...
          }
          + +

          应用后置处理器

          在正常地实例化 Bean 后,初始化 Bean 时,会对 Bean 实例应用后置处理器。

          +

          可是,究竟是哪一个后置处理器做的呢

          +
          protected Object initializeBean(final String beanName, final Object bean, RootBeanDefinition mbd) {
          // ...
          wrappedBean = applyBeanPostProcessorsBeforeInitialization(wrappedBean, beanName);
          // ...
          invokeInitMethods(beanName, wrappedBean, mbd);
          // ...
          wrappedBean = applyBeanPostProcessorsAfterInitialization(wrappedBean, beanName);
          return wrappedBean;
          }
          + +

          AnnotationAwareAspectJAutoProxyCreator

          在本示例中,创建代理的后置处理器就是 AnnotationAwareAspectJAutoProxyCreator,它继承自 AbstractAutoProxyCreator,AbstractAutoProxyCreator 实现了 BeanPostProcessor 接口。

          +

          那么,它是什么时候,怎么加入到 beanFactory 中呢

          +

          PS: 显然,还有其他继承自 AbstractAutoProxyCreator 的后置处理器,暂时不谈。

          +

          BeanPostProcessor 的方法

          postProcessBeforeInitialization 和 postProcessAfterInitialization 方法,前者什么都没做,后者在必要时对 Bean 进行包装。

          +
            +
          • AbstractAutoProxyCreator#postProcessAfterInitialization 就是创建代理对象的入口。
          • +
          • wrapIfNecessary 就是将 Bean 包装成代理 Bean 的入口方法
          • +
          +
          public abstract class AbstractAutoProxyCreator extends ProxyProcessorSupport
          implements SmartInstantiationAwareBeanPostProcessor, BeanFactoryAware {
          // ...
          @Override
          public Object postProcessBeforeInitialization(Object bean, String beanName) {
          // 什么都没做
          return bean;
          }
          @Override
          public Object postProcessAfterInitialization(Object bean, String beanName) throws BeansException {
          if (bean != null) {
          Object cacheKey = getCacheKey(bean.getClass(), beanName);
          if (!this.earlyProxyReferences.contains(cacheKey)) {
          // 如有必要,将 bean 包装成代理对象
          return wrapIfNecessary(bean, beanName, cacheKey);
          }
          }
          return bean;
          }
          // ...
          }
          + +

          创建代理 Bean 的过程

          按需包装成代理 wrapIfNecessary

          protected Object wrapIfNecessary(Object bean, String beanName, Object cacheKey) {
          // 判断是否直接返回 bean
          if (beanName != null && this.targetSourcedBeans.contains(beanName)) {
          return bean;
          }
          if (Boolean.FALSE.equals(this.advisedBeans.get(cacheKey))) {
          return bean;
          }
          if (isInfrastructureClass(bean.getClass()) || shouldSkip(bean.getClass(), beanName)) {
          this.advisedBeans.put(cacheKey, Boolean.FALSE);
          return bean;
          }

          // 如果有适用于当前 bean 的 advise 则为其创建代理
          Object[] specificInterceptors = getAdvicesAndAdvisorsForBean(bean.getClass(), beanName, null);
          if (specificInterceptors != DO_NOT_PROXY) {
          this.advisedBeans.put(cacheKey, Boolean.TRUE);
          Object proxy = createProxy(
          bean.getClass(), beanName, specificInterceptors, new SingletonTargetSource(bean));
          this.proxyTypes.put(cacheKey, proxy.getClass());
          return proxy;
          }

          this.advisedBeans.put(cacheKey, Boolean.FALSE);
          return bean;
          }
          + +

          AbstractAutoProxyCreator 视角,创建代理

          AbstractAutoProxyCreator#createProxy,创建一个 ProxyFactory,将工作交给它处理。

          +
            +
          1. 创建一个代理工厂 ProxyFactory
          2. +
          3. 设置相关信息
          4. +
          5. 通过 ProxyFactory 获取代理
          6. +
          +
          protected Object createProxy(
          Class<?> beanClass, String beanName, Object[] specificInterceptors, TargetSource targetSource) {

          if (this.beanFactory instanceof ConfigurableListableBeanFactory) {
          AutoProxyUtils.exposeTargetClass((ConfigurableListableBeanFactory) this.beanFactory, beanName, beanClass);
          }

          ProxyFactory proxyFactory = new ProxyFactory();
          proxyFactory.copyFrom(this);

          if (!proxyFactory.isProxyTargetClass()) {
          if (shouldProxyTargetClass(beanClass, beanName)) {
          proxyFactory.setProxyTargetClass(true);
          }
          else {
          evaluateProxyInterfaces(beanClass, proxyFactory);
          }
          }

          Advisor[] advisors = buildAdvisors(beanName, specificInterceptors);
          proxyFactory.addAdvisors(advisors);
          proxyFactory.setTargetSource(targetSource);
          customizeProxyFactory(proxyFactory);

          proxyFactory.setFrozen(this.freezeProxy);
          if (advisorsPreFiltered()) {
          proxyFactory.setPreFiltered(true);
          }

          return proxyFactory.getProxy(getProxyClassLoader());
          }
          + +

          ProxyFactory 视角,获取代理

          ProxyFactory#getProxy,创建一个 AopProxy 并委托它实现 getProxy。

          +
          +

          AopProxy 的含义与职责从字面上有点不好理解。

          +
          +
          public Object getProxy(ClassLoader classLoader) {
          return createAopProxy().getProxy(classLoader);
          }
          + +

          ProxyFactor视角,创建 AopProxy

          ProxyFactory#createAopProxy,获取一个 AopProxyFactory 创建 AopProxy。

          +
          protected final synchronized AopProxy createAopProxy() {
          if (!this.active) {
          activate();
          }
          // 获取 AopProxy 工厂并创建一个 AopProxy
          return getAopProxyFactory().createAopProxy(this);
          }
          + +

          AopProxyFactory视角,创建 AopProxy

          AopProxyFactory#createAopProxy。

          +
            +
          • AopProxyFactory 有且仅有一个默认实现 DefaultAopProxyFactory。
          • +
          • createAopProxy 方法会根据配置信息,返回具体实现:开箱即用的有 JdkDynamicAopProxy 或者 ObjenesisCglibAopProxy。
          • +
          +

          这里的处理,决定了 Spring AOP 会使用哪一种动态代理实现。比如 Spring AOP 默认使用 JDK 动态代理,如果目标对象实现了接口 Spring 会使用 JDK 动态代理,这些结论的依据就在于此。

          +
          public class DefaultAopProxyFactory implements AopProxyFactory, Serializable {

          @Override
          public AopProxy createAopProxy(AdvisedSupport config) throws AopConfigException {
          if (config.isOptimize() || config.isProxyTargetClass() || hasNoUserSuppliedProxyInterfaces(config)) {
          Class<?> targetClass = config.getTargetClass();
          if (targetClass == null) {
          throw new AopConfigException("TargetSource cannot determine target class: " +
          "Either an interface or a target is required for proxy creation.");
          }
          if (targetClass.isInterface() || Proxy.isProxyClass(targetClass)) {
          return new JdkDynamicAopProxy(config);
          }
          return new ObjenesisCglibAopProxy(config);
          }
          else {
          return new JdkDynamicAopProxy(config);
          }
          }
          }
          + +

          获取代理 AopProxy#getProxy

          AopProxy 视角,获取代理。

          +

          JDK 动态代理

          JdkDynamicAopProxy。

          +
          @Override
          public Object getProxy(ClassLoader classLoader) {
          // ...
          // JDK 动态代理,已经和 Spring 无关
          return Proxy.newProxyInstance(classLoader, proxiedInterfaces, this);
          }
          + +
          InvocationHandler 的 invoke 方法

          根据 Proxy.newProxyInstance(classLoader, proxiedInterfaces, this) 可知,this 也就是 JdkDynamicAopProxy 同时也是一个 InvocationHandler,它必然实现了 invoke 方法,当代理对象调用方法时,就会进入到 invoke 方法中。

          +
          @Override
          public Object invoke(Object proxy, Method method, Object[] args) throws Throwable {
          // ...
          }
          + +

          CGLib 动态代理

          ObjenesisCglibAopProxy。

          +
          @Override
          public Object getProxy(ClassLoader classLoader) {
          // ...
          // CGLib 动态代理,已经和 Spring 无关
          Enhancer enhancer = createEnhancer();
          // ...
          return createProxyClassAndInstance(enhancer, callbacks);
          }
          + +
          为什么 Spring 中没有依赖 CGLib

          你可能会注意到 Spring 中并没有直接依赖 CGLib,像 Enhancer 所在的包是 org.springframework.cglib.proxy。根据文档:

          +
          +

          从 spring 3.2 开始,不再需要将 cglib 添加到类路径中,因为 cglib 类在 org.springframework 下重新打包并分布在 spring-core jar 中。 这样做既是为了方便,也是为了避免与使用不同版本 cglib 的其他项目发生潜在冲突。

          +
          +

          创建代理前的准备

          在前面预留了一些问题,当初我在看网上的资料时就有这些困惑。

          +

          Bean 后置处理器 AspectJAwareAdvisorAutoProxyCreator 在什么时候,怎么加入到 beanFactory 中的?

          Debug 停留在 Spring 上下文刷新方法中的 finishBeanFactoryInitialization。

          +
          @Override
          public void refresh() throws BeansException, IllegalStateException {
          // ...
          invokeBeanFactoryPostProcessors(beanFactory);
          // ...
          finishBeanFactoryInitialization(beanFactory);
          // ...
          }
          + +

          从 beanFatory 的 beanDefinitionMap 可以观察到,配置类 AopConfig 中的 MathCalculator 和 LogAspect 的信息已经就位。

          + + +

          从 beanFactory 的 beanProcessor 可以观察到,AnnotationAwareAspectJAutoProxyCreator 已经就位。

          + + +

          @EnableXXX 的魔法

          注解 @EnableXXX 往往伴随着注解 @Import,在 invokeBeanFactoryPostProcessors(beanFactory) 中,工厂后置处理器 ConfigurationClassPostProcessor 会处理它。

          +
          @Target(ElementType.TYPE)
          @Retention(RetentionPolicy.RUNTIME)
          @Documented
          @Import(AspectJAutoProxyRegistrar.class)
          public @interface EnableAspectJAutoProxy {
          boolean proxyTargetClass() default false;
          boolean exposeProxy() default false;
          }
          + +

          在 ConfigurationClassPostProcessor 的处理中,因为 AspectJAutoProxyRegistrar 实现了 ImportBeanDefinitionRegistrar,registerBeanDefinitions 方法会被调用,AnnotationAwareAspectJAutoProxyCreator 的 beanDefinition 随之被注册到 beanFactory,因 AnnotationAwareAspectJAutoProxyCreator 实现了 BeanPostProcessor 被提前创建。

          +
          class AspectJAutoProxyRegistrar implements ImportBeanDefinitionRegistrar {
          @Override
          public void registerBeanDefinitions(
          AnnotationMetadata importingClassMetadata, BeanDefinitionRegistry registry) {
          // 如有必要注册 AspectJAnnotationAutoProxyCreator
          AopConfigUtils.registerAspectJAnnotationAutoProxyCreatorIfNecessary(registry);
          // 根据配置设置一些属性
          AnnotationAttributes enableAspectJAutoProxy =
          AnnotationConfigUtils.attributesFor(importingClassMetadata, EnableAspectJAutoProxy.class);
          if (enableAspectJAutoProxy.getBoolean("proxyTargetClass")) {
          AopConfigUtils.forceAutoProxyCreatorToUseClassProxying(registry);
          }
          if (enableAspectJAutoProxy.getBoolean("exposeProxy")) {
          AopConfigUtils.forceAutoProxyCreatorToExposeProxy(registry);
          }
          }
          }
          + +
          public static BeanDefinition registerAspectJAnnotationAutoProxyCreatorIfNecessary(BeanDefinitionRegistry registry, Object source) {
          return registerOrEscalateApcAsRequired(AnnotationAwareAspectJAutoProxyCreator.class, registry, source);
          }
          + +

          切面类 LogAspect 的解析是在什么时候?

          进入创建 Bean 的方法 createBean 后,除了 doCreateBean,应额外留意 resolveBeforeInstantiation 方法。

          +
            +
          1. Object bean = resolveBeforeInstantiation(beanName, mbdToUse),在实例化前进行解析。
          2. +
          3. Object beanInstance = doCreateBean(beanName, mbdToUse, args),创建 Bean 的具体过程。
          4. +
          +
          @Override
          protected Object createBean(String beanName, RootBeanDefinition mbd, Object[] args) throws BeanCreationException {
          // ...
          try {
          Object bean = resolveBeforeInstantiation(beanName, mbdToUse);
          if (bean != null) {
          return bean;
          }
          }
          // ...

          Object beanInstance = doCreateBean(beanName, mbdToUse, args);
          // ...
          return beanInstance;
          }
          + +

          入口方法 resolveBeforeInstantiation

          根据注释,该方法给 BeanPostProcessors 一个机会提前返回一个代理对象。在本示例中,返回 null,但是方法在第一次执行后已经提前解析得到 advisors 并缓存。

          +
          protected Object resolveBeforeInstantiation(String beanName, RootBeanDefinition mbd) {
          Object bean = null;
          if (!Boolean.FALSE.equals(mbd.beforeInstantiationResolved)) {
          if (!mbd.isSynthetic() && hasInstantiationAwareBeanPostProcessors()) {
          Class<?> targetType = determineTargetType(beanName, mbd);
          if (targetType != null) {
          // 注意,应用的是实例化前的处理
          bean = applyBeanPostProcessorsBeforeInstantiation(targetType, beanName);
          if (bean != null) {
          // 注意,应用的是初始化后的处理
          bean = applyBeanPostProcessorsAfterInitialization(bean, beanName);
          }
          }
          }
          mbd.beforeInstantiationResolved = (bean != null);
          }
          return bean;
          }
          + +

          InstantiationAwareBeanPostProcessor

          应用 InstantiationAwareBeanPostProcessor 的 postProcessBeforeInstantiation。

          +
          protected Object applyBeanPostProcessorsBeforeInstantiation(Class<?> beanClass, String beanName) {
          for (BeanPostProcessor bp : getBeanPostProcessors()) {
          if (bp instanceof InstantiationAwareBeanPostProcessor) {
          InstantiationAwareBeanPostProcessor ibp = (InstantiationAwareBeanPostProcessor) bp;
          // 循环依次处理
          Object result = ibp.postProcessBeforeInstantiation(beanClass, beanName);
          if (result != null) {
          return result;
          }
          }
          }
          return null;
          }
          + +

          AnnotationAwareAspectJAutoProxyCreator 不仅仅是一个 BeanPostProcessor,它还是一个 InstantiationAwareBeanPostProcessor。

          +
          public Object postProcessBeforeInstantiation(Class<?> beanClass, String beanName) throws BeansException {
          Object cacheKey = getCacheKey(beanClass, beanName);

          if (beanName == null || !this.targetSourcedBeans.contains(beanName)) {
          if (this.advisedBeans.containsKey(cacheKey)) {
          return null;
          }
          if (isInfrastructureClass(beanClass) || shouldSkip(beanClass, beanName)) {
          this.advisedBeans.put(cacheKey, Boolean.FALSE);
          return null;
          }
          }

          if (beanName != null) {
          TargetSource targetSource = getCustomTargetSource(beanClass, beanName);
          if (targetSource != null) {
          this.targetSourcedBeans.add(beanName);
          Object[] specificInterceptors = getAdvicesAndAdvisorsForBean(beanClass, beanName, targetSource);
          Object proxy = createProxy(beanClass, beanName, specificInterceptors, targetSource);
          this.proxyTypes.put(cacheKey, proxy.getClass());
          return proxy;
          }
          }

          return null;
          }
          + +

          和 wrapIfNecessary 方法对比,容易发现两者有不少相似的处理。

          + + +
          +

          注意:以下方法应注意是否被子类重写

          +
          +

          org.springframework.aop.aspectj.autoproxy.AspectJAwareAdvisorAutoProxyCreator#shouldSkip

          +
          protected boolean shouldSkip(Class<?> beanClass, String beanName) {
          // 查找并缓存 advisors
          List<Advisor> candidateAdvisors = findCandidateAdvisors();
          // ...
          }
          + +

          org.springframework.aop.framework.autoproxy.AbstractAdvisorAutoProxyCreator#getAdvicesAndAdvisorsForBean

          +
          protected Object[] getAdvicesAndAdvisorsForBean(Class<?> beanClass, String beanName, TargetSource targetSource) {
          List<Advisor> advisors = findEligibleAdvisors(beanClass, beanName);
          // ...
          }
          + +

          org.springframework.aop.framework.autoproxy.AbstractAdvisorAutoProxyCreator#findEligibleAdvisors

          +
          protected List<Advisor> findEligibleAdvisors(Class<?> beanClass, String beanName) {
          // 查找并缓存 advisors
          List<Advisor> candidateAdvisors = findCandidateAdvisors();
          // ...
          }
          + +

          容易注意到两者在创建代理前,都会调用 findCandidateAdvisors 方法查找候选的 advisors,其实这也是我们想要找的对切面类的解析处理所在。

          +

          查找并缓存 advisors

          org.springframework.aop.aspectj.annotation.AnnotationAwareAspectJAutoProxyCreator#findCandidateAdvisors

          +
          protected List<Advisor> findCandidateAdvisors() {
          List<Advisor> advisors = super.findCandidateAdvisors();
          advisors.addAll(this.aspectJAdvisorsBuilder.buildAspectJAdvisors());
          return advisors;
          }
          + +

          org.springframework.aop.aspectj.annotation.BeanFactoryAspectJAdvisorsBuilder#buildAspectJAdvisors

          +
          public List<Advisor> buildAspectJAdvisors() {
          List<String> aspectNames = this.aspectBeanNames;
          if (aspectNames == null) {
          // 第一次进入,没有缓存
          synchronized (this) {
          aspectNames = this.aspectBeanNames;
          if (aspectNames == null) {
          List<Advisor> advisors = new LinkedList<Advisor>();
          aspectNames = new LinkedList<String>();
          String[] beanNames = BeanFactoryUtils.beanNamesForTypeIncludingAncestors(
          this.beanFactory, Object.class, true, false);
          for (String beanName : beanNames) {
          // ...
          // 如果是切面,解析得到 advisors
          if (this.advisorFactory.isAspect(beanType)) {
          aspectNames.add(beanName);
          // ...
          if (this.beanFactory.isSingleton(beanName)) {
          this.advisorsCache.put(beanName, classAdvisors);
          }
          else {
          this.aspectFactoryCache.put(beanName, factory);
          }
          }
          }
          this.aspectBeanNames = aspectNames;
          return advisors;
          }
          }
          }

          if (aspectNames.isEmpty()) {
          return Collections.emptyList();
          }
          // 以后进来读缓存
          List<Advisor> advisors = new LinkedList<Advisor>();
          for (String aspectName : aspectNames) {
          List<Advisor> cachedAdvisors = this.advisorsCache.get(aspectName);
          if (cachedAdvisors != null) {
          advisors.addAll(cachedAdvisors);
          }
          else {
          MetadataAwareAspectInstanceFactory factory = this.aspectFactoryCache.get(aspectName);
          advisors.addAll(this.advisorFactory.getAdvisors(factory));
          }
          }
          return advisors;
          }
          + +

          可以通过 beanFactory->beanPostProcessors->aspectJAdvisorsBuilder->advisorsCache 观察 advisors 的查找情况。

          +]]>
          + + java + spring + aop + +
          diff --git a/tags/aop/index.html b/tags/aop/index.html new file mode 100644 index 00000000..e4bae95c --- /dev/null +++ b/tags/aop/index.html @@ -0,0 +1,290 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +标签: aop | Moralok + + + + + + + + + + + +
          + +
          +
          +
          + + + + + +
          + + + + + + + +
          + +
          + +
          + + + + + + + + +
          + + +
          + + 0% +
          + + + + +
          + + + + + +
          +
          +
          +

          aop + 标签 +

          +
          + + +
          + 2023 +
          + + + +
          +
          + + + + +
          +
          + +
          + +
          + + + + + + + + + + + + + + + + + + + + + + + diff --git a/tags/bytecode/index.html b/tags/bytecode/index.html index 9dd8eda8..8963028a 100644 --- a/tags/bytecode/index.html +++ b/tags/bytecode/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          bytecode - 42k + 45k
          Hexo & NexT.Muse 强力驱动 diff --git a/tags/cglib/index.html b/tags/cglib/index.html index 10e0887e..ea430dce 100644 --- a/tags/cglib/index.html +++ b/tags/cglib/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          cglib - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/clash/index.html b/tags/clash/index.html index f30c9228..9e1e6e87 100644 --- a/tags/clash/index.html +++ b/tags/clash/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          clash - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/class-loader/index.html b/tags/class-loader/index.html index fc6dc810..de7536ce 100644 --- a/tags/class-loader/index.html +++ b/tags/class-loader/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          class loader - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/distributed-lock/index.html b/tags/distributed-lock/index.html index a7971bbf..56d955f7 100644 --- a/tags/distributed-lock/index.html +++ b/tags/distributed-lock/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          distributed lock - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/docker/index.html b/tags/docker/index.html index 986a475c..62159032 100644 --- a/tags/docker/index.html +++ b/tags/docker/index.html @@ -152,13 +152,13 @@ @@ -274,13 +274,13 @@

          docker - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/grafana/index.html b/tags/grafana/index.html index ed515c8f..42fc82d5 100644 --- a/tags/grafana/index.html +++ b/tags/grafana/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          grafana - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/index.html b/tags/index.html index 3e6a66f8..0b732595 100644 --- a/tags/index.html +++ b/tags/index.html @@ -27,7 +27,7 @@ - + @@ -155,13 +155,13 @@ @@ -209,10 +209,10 @@

          tags
          @@ -246,13 +246,13 @@

          tags - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/java/index.html b/tags/java/index.html index d30a278e..50385e2b 100644 --- a/tags/java/index.html +++ b/tags/java/index.html @@ -152,13 +152,13 @@ @@ -205,6 +205,26 @@

          java 2023

          + +
          Hexo & NexT.Muse 强力驱动 diff --git a/tags/jdk-proxy/index.html b/tags/jdk-proxy/index.html index 062137d2..4c04408b 100644 --- a/tags/jdk-proxy/index.html +++ b/tags/jdk-proxy/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          jdk proxy - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/jvm/index.html b/tags/jvm/index.html index d8d1b794..88265c1f 100644 --- a/tags/jvm/index.html +++ b/tags/jvm/index.html @@ -152,13 +152,13 @@ @@ -311,13 +311,13 @@

          jvm - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/minikube/index.html b/tags/minikube/index.html index 0cd81084..5a72db8d 100644 --- a/tags/minikube/index.html +++ b/tags/minikube/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          minikube - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/openvpn/index.html b/tags/openvpn/index.html index 10b14335..eb04a9c3 100644 --- a/tags/openvpn/index.html +++ b/tags/openvpn/index.html @@ -152,13 +152,13 @@ @@ -291,13 +291,13 @@

          openvpn - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/prometheus/index.html b/tags/prometheus/index.html index 899b4179..2de5d5bb 100644 --- a/tags/prometheus/index.html +++ b/tags/prometheus/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          prometheus - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/proxy/index.html b/tags/proxy/index.html index 6064cbd0..d53e65e3 100644 --- a/tags/proxy/index.html +++ b/tags/proxy/index.html @@ -152,13 +152,13 @@ @@ -271,13 +271,13 @@

          proxy - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/redis/index.html b/tags/redis/index.html index bc925cd0..bce0a5bf 100644 --- a/tags/redis/index.html +++ b/tags/redis/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          redis - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/spring/index.html b/tags/spring/index.html index 030ab9de..1a263629 100644 --- a/tags/spring/index.html +++ b/tags/spring/index.html @@ -152,13 +152,13 @@ @@ -205,6 +205,26 @@

          spring 2023

          + +
          Hexo & NexT.Muse 强力驱动 diff --git a/tags/ssh/index.html b/tags/ssh/index.html index 06e60a08..9505d73b 100644 --- a/tags/ssh/index.html +++ b/tags/ssh/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          ssh - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/tmux/index.html b/tags/tmux/index.html index 6da9b12b..6824f67c 100644 --- a/tags/tmux/index.html +++ b/tags/tmux/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          tmux - 42k + 45k

          Hexo & NexT.Muse 强力驱动 diff --git a/tags/ubuntu/index.html b/tags/ubuntu/index.html index 49a8b0cf..694d5a29 100644 --- a/tags/ubuntu/index.html +++ b/tags/ubuntu/index.html @@ -152,13 +152,13 @@ @@ -251,13 +251,13 @@

          ubuntu - 42k + 45k

          Hexo & NexT.Muse 强力驱动