From e85aeda4baf98862af9f95b4fb7fb86173b1b5b6 Mon Sep 17 00:00:00 2001
From: Justine Tunney <jtunney@gmail.com>
Date: Sat, 20 Feb 2021 12:39:39 -0800
Subject: [PATCH] Fix some more build issues (#43)

We're now scrubbing environment variables in compile.com since gnu make
was not behaving as expected. It also appears there was a regression in
recent revisions that caused ASAN to be turned off for most binaries in
dbg mode, which has now been fixed. Cosmopolitan is fully ASAN hardened
down to the lowest level libraries and it doesn't need any interceptors
---
 Makefile                       |   2 +-
 build/bootstrap/compile.com    | Bin 65536 -> 65536 bytes
 build/definitions.mk           |  34 +------
 examples/examples.mk           |   2 +-
 libc/runtime/exit.c            |   4 +-
 libc/runtime/finddebugbinary.c |   4 +-
 tool/build/compile.c           | 171 +++++++++++++++++++++++----------
 tool/build/package.c           |   6 +-
 8 files changed, 132 insertions(+), 91 deletions(-)

diff --git a/Makefile b/Makefile
index fd1083b72..e9e61b85e 100644
--- a/Makefile
+++ b/Makefile
@@ -206,7 +206,7 @@ depend:	o/$(MODE)/depend
 tags:	TAGS HTAGS
 
 o/$(MODE)/.x:
-	@$(MKDIR) $(@D) && touch $@
+	@mkdir -p $(@D) && touch $@
 
 o/$(MODE)/srcs.txt: o/$(MODE)/.x $(MAKEFILES) $(call uniq,$(foreach x,$(SRCS),$(dir $(x))))
 	$(file >$@) $(foreach x,$(SRCS),$(file >>$@,$(x)))
diff --git a/build/bootstrap/compile.com b/build/bootstrap/compile.com
index ff0c7a674cdb1f74015744d82ee077fdc3334b79..8d185afeffcb567ff8c564b86c5f3f9f208b135a 100755
GIT binary patch
delta 15941
zcmc(GdwfjC`~Nv7Ig%hYE=yb@kys>z1R)U{yOD6B8;$!lsJMo@Wf#@5%Vu$`B{i)}
zwQfa~Y7y1AZI+P4r4>}=Q%cZswp(>+8$oNo?>T$;w0-^l`Th0D>t&yLF7wRHGtWHp
z%*<i2_**Rg`=lUlLJaviXcF(b!!SLGo*i8HY3<2e$l3q2>$*%Mjd=+RBZ7zeHxE)V
zjH*s4pZy2J1bQ|O5yYR08Ai`ID}EyH);BltGwK*&Pm$jQ8GN~bf+LwHN!tdaQx=CX
zOs;OEVCUD}U>Io*MI%NW`R$~Rspc2mXP6KvsJ@SucZ$-iphZZ3K<;q2&g4Xc0T~PK
z>KKnMm&xUvaxo#deXhT=>pf6oa(m@QIQ3K@JU1yf#Q7&JHp=ait8*Tq#h}~~xq;3V
zkUgv`C!-pU;xd9sQNs>RN=KlV;#on=iW5XWw-(C`8!Bn)lIIOunt%D4@@}Mw52P$D
z!&qy)s{ADkEeth|HLI*OdSjxsX0WlhwWgOR*jh8gIL=yQG&Z-^OfgM8vdfQQoW0NL
zm|_-nqzEg6-k0(Y7?1UQ3_}>hS*Yi=Ab1Gy2|ipyajRh0CJhEb8v8E8h<xzx4C9{e
z^?KvI(#mNJBjoUXz)ee%OwEfq=>KnX(pO8!{zjqZI?yBa_!P1>m#L*eyytWU>KW;b
ziD8P(sDY*>Xa(1}!C+6gj<P{~B1P3hx4jiQ@XMs#dt@SHGQ?A=_xW-NNi3CkBHN}+
zS`LXcd&16^7>msXk)0692s)+md!PS^%u%;9LlBKit<V#6qy@@)Z>bd0gJJsF-$@P>
zM6C){+{<7ti?$Dnj4FQ~khB%rL}2OpUSkMV&_0o2@?9!h4z(-ujZf>jU9#2&RN#0L
zM&<{GJDG~q@rjtFT|SwH#VSysPL<yRe0L)%6sqXS_sP^P<&Xb{`Eh$;Q)fekIr$ZH
ztIWJjnJpA%zgNs<GV?TLY7}PdF2+np4ZTxj?k>vhtZ+kKRTX5WoibAu=5L?KBSXzj
zGIIuHj#QZ6y<#>1lW`BA%$W-Fu#efpqOEz%pnYSbVl!CM78tPDfs(r=#AQP?L!o#Z
zWm+loQ_5tiE-OmZrZarHA}rdy(8Z{1Rd8lmom~HWVD1Y1IE$4ET3>}W7VSH7g?#f@
zU|Y4#9x)8BTD2QUDgOpota}r!cS)&N>s7sUUp<Rl?ao8FTAo}jO0G7UR=cNEyRh@6
zm4azCcR$MfOJN?MOtZ@v>QrCw4QH!QykRMS6a7I?E>hrD(^_p6nW;OdpBY;^lNG{p
zOcPxtbuHT6viRqy<Ls?)d&uIZKF-$_LbQ*N;2bFv%=e^FAEmW(j3UzAr_t2FIYXgn
zlr};w+P<_6CD3SpdVujSddoA@IZu&1w_WaDkU`YkhjBdFPP@X{FLO-wovReWL9}Zl
z4V%_CD+H^rZsX!(AY?d<t+{xYRE(8~weInw^PSfX0o_~bZt<trD_FHN&;nzshu|~>
zB}9xd02b{Bl&s2c3bR?XD=7jWI{}?i7t}AlLrc-L)T9EX@NNh<(&l8^Z&PCgwiv3*
z<~8xf>a*Z8khExf$!Zo_wB2dJWGtpjQ~EIhS~^lK-=k#FHkYNsEZQcrRHI_L(j+I9
z>Q1E&%2JPEHQFV*(4?&iSOdiwl)Fymey?!p3YPL|)iIR0KxR4>CiQ1&GG$Ju%xszY
zfx@ItEA^wye9F|x%q23jb}?PRQY=Ua)olO-dzg6vOl7b~W!io;Hlt>~(OI6vKw3W0
z6*AV6K+lchbyVAa;Kf^L=@ZJaYw!Omo68t2ZAXN|RAC-&fhKh~$|kK3nTx=k_c0$*
z4qeCxY4s_2h{WP4scjF~Uo4@GPjDUphqhYqvAl2w<zF)m!}PA8ZP?X$a#Jo7U*!2(
z2SP%wOt>Vd(kcX7wTXAeVaAFNK?yuZL{oxTN;e9_ZdyF)24M29sq)_gEH0(JxHAVa
zh;|xbkT0fcrJ*b6md4ztJ89EJZ(3cPuwF>wH~+#gbH}0=n^3?QR|Ax$anCz~WTzxM
z|BjFJCne4Ik*4}ce^JszA8DwM^dcCffs|yn^SymEZ*2^!mn^1^1CaMlDeG+p8OP?I
z8OC2_dxowX?3&%^p7Y(CK5KQ@LM^SzN9qFW-7WscXMh#mX|EE@5G}p}5;{E%Wte7`
z%+Y281JT?cP!eX#linOP`p_ER`;_#dqA=m{&a$#Dw2EEZg4XB_5<*c3MqZbaMP3cy
z84Z`BxbsK3&70BzxqHSsLK$C$LD4@!47-S;^er02_!Cak!QO+scoN;aj3tLg_JJ6G
zNuEOf7?plwmh84&&~EV-nl0qcWf;3w2g@8O0Pd8DV?mViyHKavWj6Ix9Xe&LF`K$V
z;XEjDK0+%}#1^^h;l+Lzb&Of+55*WseHoQ9;W$#7tUxbb*IR!yBi2NrE@SKqEs-c8
zJ{UWx4wa<^RhimK`_W(7y{Vy=$%`uCPmeqXp7y)b9GFFos!u?a#?8a_X8TcPI|Pl;
zp*M@CEcd*obc^;T_=sHXuu>qsf~v3~Aqb@_C-d)(M9Gb4r$EBFopM)W&~6%Z4EEq>
zZiYEZT^V^(HOdAt(<O~Ub$wActdD$`L6ufw5Yx-0LmlZF3_2~PQ02*INxhcM%;7Kz
zCZQ*7LM-*<LF0S>)u=6asqqg8_%x=8_x`5z)2&o#sgy1&KP`O?IfFgZWw5808^oXU
zT?5b(IwwBT55vm+tyn8JsJH%Nk;=L<O=+vc1@Xy9X*u>oc?n?cO3Cwyt7Vh^HCO=X
z0mBTzq%?bu0`h$QQ2me$@h|=0L8eymm*T67`wiDIaJMHAUf)d5<OZ(h@1ZQs8B6=3
zxr{Qr_WCoT32$%y1Xx}Z;5$(;h<Eyn9jXjs!g64qu*0w}b0iQy&gIZlT!0^G-#F?o
zrt@OuDE(-Cwth@@33_t~6&TY{DEj&)^q27mD1kxhS;lXs#SodgU8edYs#ev2^O0G`
zw*W5>EaTS!;~`tdt6%s^SXW~}ETIP)z4&K__(z8LU50o;y8qDYEh_&BhlUFL2uUZ5
z^|J;@%~9DKGGe%3bp?8UE|BT~mr{Q7de=#FF?!6ELHyMqJ~oI?eJV-+h#+phm5hk!
z!j=3)Rz)OnMHk4KhzwR+*s#?umRq!q9FJVgzDasTwKmtiUhI`xB0SsqrgvzdY#YKd
zx!&O=FYzX?@cJ@8;1wPu<4;sC<$d_QS2!#4ufD>c-lqD?Ug3{`n??SsR|K~#@X5dM
zb+7PSGJn~>@OcV;en@=v5euvXy9(A*7QwO5BCXm?@fY!zife&WmTsXy8ae@vxRjQ-
z1=~nY>w<8XLC1J@99B`V$>12=I#96w=+YN;fY9LyS4jg+6!-Wn>8^=XO}L8nbm=G)
zsb{?E#plQr&1i1Vb5g4LnC(V#+YD`Tvm9+&PenMXs|k+dAvj1$!d7y%O#*jt3aQsN
zTs`R{8qVTfwreWeYaF8BnIjREB(<%En{|~;Z5zp%77<6==ApwE!C9w3jX``M-he08
z3dA9;{)fcXHnZV^IxLeOe+B`5{r3!$r7wbth;{?nFp}4<XK+XWJ?~`&Vpsa;207L)
zjh#u@Xlsja(X{pWXMdqn#wK>TAlkMAl@3iLTcVpcoR9GxUXLHyj=w~B)y>E^(Vgl!
zG$0`{<-8T8d>W|})2(GnDbCQ<BfOV0#M8Nd$naF|?|_I@&rXxEF|8wdLPT&3sW6Cc
zuX^5T_?cW@d{%{Fd)2Yz<CwIT4?*_{-SVm%z7)D;JsaRvpFd6b_8r0_Ds^y6!FtAP
zaC}UcUM>T>G=QOL4`-3A_7VM6)lehj8mdsNq_a@Q|M>^Q1kkBCA%%$iZD3YceUbkG
z1v{U24QM$h@;89yvItas5lUWlDsi^YV(SxChxiU(l~Bc}A`FhqiVU$b-enMP31WIh
zn)ujhjnJW~^h%^Th_brjWO|1#Yy{cTA)3Q{oa-=vvzCySvBTLUGA~xcP9q=1>M5rx
zRvWtHq^ws*vz7WZPpZ`dKB?J25<2E`F%Gh|;}i<&bb60_Z)M@uPCHp{$qJGY{|38(
z?1|6ewjL)TolkSt_sG@GG3KhPI>yqglPMRs2zv25Da<Y>UCq(UD0Td|XewFV55U+7
zg%PySQ*h)VwZA7lMvjC&)G|17VmvXRHl)<+|D|^HGy;{L>!ng3)gQ762JyC2^0}wP
z{jriP>9UdAc9ev7jbpP&R@W(w!;i`%%!2YLiL5~c4wY7}A>VY3WSfvjUCp6mS3y90
zktW(^(ffu=X<`}mucl;q!iazyPhk$XgGdP-+ipcUubnWhBvkO@KLmm^q_Lr0=P%fJ
z%|#3*K)flH<`8YSnVj`7`Mg_}>TnIJBns1RhGOL$tRcbOleo8Ph|oQ(`AD$R<9`(F
z?}P?QNsZ{}^{V$zK~6_3-NU$}tI6i>;avU6#MQmMy6y#R1l^pYee0QdfyMG**_y<t
zfP>#)9f!>!F^QAvXyKuPIHX+CtSsD^c%5w)i74Z_muaguVs7usA^K*9cwMSJq43=v
z3s~;dG7{W#VxzmTr(QfIC$m29wHK15JxNsmGe{n6{b3f5ANp!P?s|@fFQFIq<3+Ss
zHk$O*zQa8^K#ph!bNxgTlA_@j93b6OlEbsd!HJOrTg$zkUdXx}4%%&O71%H&-8k}Y
zN;J1=IXRXR#%(Gi*HXp?zmMGnmrlkBf-NkG^zD_}qQUQUZFrIDIF8GMepFj_lhe|d
z%gByivD{x{$hW<89nzNhMsS|m$9B!w0ry4bGL(~g2O7hL<ldpirh+{$(2$cbh3Itg
zO;f<6)=w%m;)IrLaO|j}0jSGtvO?FQK@hkIYhYp%e>+6tXOkkGhI@M{xvA@?TJ<X?
zb*?bYMg2hhl_csT1G7Oxf;EPW*JrUjDb$ZwHTxVSELk{Su++^)TBr63oW7VY?45hb
zwA2n<)n2k8HLh7T5;{zZFzp(gggV2>0IG|>@e8?=x|Q3wmn`i)QQdW~tSwG2y5e2w
z(8)_9t!vU^LSsMkHRCNeHK3Cx*k23us=wGnQq$UVo+V^vS~S;vB>5n1FqgZ8JWLzJ
ztsFtp)4Q~KZ~``4e8v)i*xpJqL}|VQ!Kk5;APvn+C&-5MmR$J>ayY#c4HrMBcL<qE
zMFOOaKfoh+sq13WrcXO=P6o;9(^MFWBubc887d$TOcSf3_$w|DlKE-?m5pXtP8uH!
zq8C2ulGY+=73@P?xJ0wb(}unq?Al$QlKp+u!=7SI`$i)~=)G5|9j!H-DU8~Mvg|^j
z;An)l`eA#~MF?VQh$q(`JP>U`$x(<n>tQvdiBFzf%wTV(wYnvqt)m`9!umFkZy`|K
z@Tyr5T>#NK!97vWsrFS6&r0Xu3#gSL_6-sI!iJHledAdT+1R&dm}M8OOD9#8-;0Hp
zR3E9r$ONqXAKotfy>Az`Sv+=3!7=e661i+SA5w*<fnw)75q(CZ_K`c0Zr1Xn>8AM8
zOO~1v?_)puJ28-0G8%EucaXIi2hG_#80O4B)Qtkg?L{B{US}vJ(mSia6Ei6B%0GzW
zQ{O^Q`Ip+4^p5|cn_n^}{flAeM^o+d|DoN^zfOrc|01SRV*h^;wUn6j52Cz*#)AIe
z0rS*=Q6%%VX6@SjgF)%Evov%2$Dmu0)vq-(*ZY_7%VD(q7v0Xcph}kiONojS^Zr46
zso_uDE&aEDv>VSrargO$a8o;fpHk!hLACQ$+lk(gWj^pWb)5@>_?<yKX%NqNE98{%
z4#*#k89VAs$@!uVUG+?fMe95U4aRtjwoonv+Y^RjUn`z)2H9dGi*}PtZD3E(QR*~M
z<6Z7|YEie-&IZqY^orLz#Hoc6c%6P2jyFz!=1l~EA^O4kV+ioxL4x>vfb<s5tvDMA
z(cdEuq^Z(xr^kCUbAIgW=+GTIE!<px@vn@W(}KP0>8kH^jPwY{ZJX<@TImjx*Hg<F
zobFi2rYAjF^i90W!|h{7DyJF!*z6MGHM9-TT|p(=EE1d9!fZr0>306wOnUZF*^pE*
z&V>rGn?hVgi7OOhE176o=v=E1LVSej&P@uzJ3~H4jdJc+2*3IW{hX&1!Vf+|lGA)a
zp`7<o+Bttz2uFQ{CZo_hCv#TEC`U5)HZb<FuTE%mjp+wxh`$StFXOPc35$Ozha*cn
z)8(DdA2vt?i)P<+oU3KB(Jk0*Q$R8cNw(#v_0E6xv1Z(9$>|4Z1)!-uatVu1QDrZK
z2%VlRIN2XX@}yQ%;F!e<V!|C-JaN}g`Ve~~a_!3$7x`~xFuI~<<R}`3?EIcrRnTdu
zGe3uOY?h@G3MimDM)-7CC~muk#D0=2z|WHbv>ELDD3n$C$fVHBP3a4heCvkWGUGtO
zVT@x9xUy*AQxh%Mx`E!bMXA(3Bm(_tM2U8_+DxJ29S#+4OBP&cfcNw(D08IwV_f`w
zls$8Cbf*eW2GQ1T$Uewl0|#60c?!TwLtO)_IZoyK2-Z@LR(O|Iu&Z~;GW@3$IQl_t
z@LCknlVG8-owv*6ERfX}TC}Sde?{V7SDV-3^24recgL5Hj1x<+DR#4K?S~NYFFEPW
zkhCL}R?t@XMl(XLo{$P4E$xXlXoh*DwopSeAJZ=|R6Ifh@}W?qCKnK_urpr&5<o07
zUY9O*M0@GKU}p)XvqhY*H%*vIBbupp8J~>;JOPgi{bdrp9!o&Ul8Aj3XDK|6skOk%
z`1ZF+-K=Ka{3x?Wtf?J_%wfpC-NJ-9`>|s1Unp6h#+q7L7I2Iy$LkXLUqQm9!MR&x
zbXJ)8GhkI+Fg(vRNS^T`3aIiMuvGaDuwu~~&BJAr<%6Jd;y}F`1$(fFU!1yT09c>)
zFsj9G;2vV;b!iJ!*)y-x#3Ds+NnuR2y!<#SrOn1KV+^+>_b@ht@uLpHYR*6;3Dh%b
z4(5_}ayb6>f|%QZAIp5Uhp{2L8%%5BPu4frGnqmo4iX79Rp?=+oo66GhevUJ(y2uu
z!ukw*+G*IEzd}V~pu~j&9V~4>)~c<jVp^j+YtWO8h3H5mI^xd5N`>fJMbyjhsv;W)
zbO`N<Nk*<}8mkviV@B73j~P8*NNx^j$_A3B13I&nq{F~{>Ujfv`;xSshX`!IOI<FI
zM*}0w^)EoRJ-y}(;``v63?_TDMcYp<7={$Ly#h0cKS?&_4jkuRwKD@<lD?WsV=kT^
z!y)TwVCT#BGt3Fe&sxPU=j(vBg6Hv@UCO_>0naHZ<*O-N!9M^fd8N6j)E=tk8)|gR
z=m$^q=^su$9ke_2>wWU=Fx|uL3Acb0_os~~lWBwF&BL*i`0mjhLkbY$#=%NbzaAhW
zvB63k;(AF;01?T%jtWGgmOVj4Z(mY=g%$1E2hc7!-p`_@c6=#|)`qBbIGWy3z+`>o
zMO5IsyuOpfboH$&m)x3k8N;w^3!#LHeM!|w=b)IzTpPOMTZ?1K>q8n3GU((**bGzl
z*LAd-%-2Re<M(B@o~TCu{@&CSXqIuMrQvc*iT`LRixdrsZ*+4q9A-52T*RK-Nw_oV
zf0g_-B%-1J7x0rR|DvIkr%HQvWW-exH&o5;Cw+!?>Q!&J4p%}o=p>$g`pX_=^pjn}
zx3>(U&qm#_-lI<X&MS`LxPf@?HBJXD{AA(5q5auz)4s<*kk9%q->@J3Ilw*)L1JF0
z-CS4N14|0jQ(GWR=pY*J!r}Y1y(DpXT>RlFSRK)6twToAea4>f$A7TUrcyI#y6uFe
zG&=mg?27nY$|D<ww`6lk(eOd+8B%vdkA|y;QT3<V$(v$!iC2@mgNzu_o!ehrxMsxr
zEPJ)E-KgFy`-n^*y@k^pBlWWN>Q6POgHYHc!@dv(yJ29TNE^w7>~*YP;h)*_{ki*x
z$lUQdZqFf7G(L)3b%^{hek`XsL{f6b1fBj8mF?OaUy>a;k=zGgk~2BY8`&sP3|kA}
zjtivjF!M`Nlk*oh>mYeD!N@f}NZy>-io0A$3MMw!II+47qWS`WdulDzT<kSt$f{-Z
z69&OCHr%dVS6Emvu|3PpI6(fIbd=k>pB$OIpk*vv*U>2G@;#hAu1smJXKXJ_!9gzs
z@uHYee?J*GWdwI*AK5!4i8Jpb(v;OB9%J@}r0?fUz;wN!W$~gA{U5>6HAJvJ4WFx_
z$)9|T2`;Bx>jk<MU6BPB;7fse?r{iz2tPYPqJM(*tRK)Xz91D-n~YpR1(Pc0))AsB
z>0=ZF;cEW!0W5Y^{#`1b9M%ysswJ3K8hcdv6|`XILugIAdMiW?jtPD#!jsC3R;L8p
zB_mE)!8pL{bBA%aJ|`dKMh`pmIfVQ)4={E^vgRQLqUIKWYH2Eh1CZ-L+}%)yW*wD=
z%CSC`hNL?xYqZQ#ABWh>CbsS;&8Ee5nMt*=Rak~^QYP-D0p<pvkWD%E;FeIAX*;8`
zeeLV`i@jvwv?lS6z4TTxOphuFNmNqQ^Z+R1b@)YV)Mh_G#zKp@S=&oaPm3`x0Yyl<
zoR>h;TkQT671h%zu%2ZFM_rsJgH1AZ0B&E;AtVk5bcMJZ!b_wN4<S0Z+yT^M!~`wm
z+y=M}4E8P}0?fIF0*8NnTpXCX+Ia$WSD-0o7i(;jk#uGbnK50}YJyMnK2Gfh_O^Q<
zRgj!;7ib=ao$$kFWYhG<oOT~MG(9}nUsl*B1ifVUk=xTVQ&Q<^UsMmG)kVH5K!&v(
z8B}VZ`#YL}CMU#!W{NiW@hYEage-aj(l7RqH{Tq@ZQVmozWEjR%Wm@aj4|Bu-Q?Pg
zFmCE@@@&QkuEB0HWTuw8{3&^F=AD%BRDD@$U>8_1!;u=ISJh7qQH2DL1Rdpm5$JG=
ztX|U#po~w)uWWsh@Aet_a@On3vv*;|_y=9S3%i__SIlFqn8%_zZ5IijJ(~OZ6S8o2
z68FU?q-gf#h`bPaXR{sf$0(!2!gs^OJ5e^UE+I)<xs&Xf(~(=glU$o~gsa#=*5##h
zjveGiUQFiV9gwoC=K$b+*N-28f*@*hWpENMAkY$>WpP-bA?YgK<>4%#(LWT!UKW%2
zlpSP<F}&d)+hq;4UTOGoJ6UGbaUX0aXN-rqyC0Lqrrz9+j|t{FY%<O+|IcCe2ZMBc
zqZx^xo56Xuk$2|Ca>urjJ#+0`&Nh-bZz)%IPoZnx6qeieDT#S&HoKI3_||AHX)}5D
zRtoDXOj?laS8wlTbj5bf6oQU^w3#efm=Kf;k|#i_yMwqE_T`#wCP9mag!CM#qpO_W
zj~m3;FE^1Hi&~G}YxWWS<GtRBqx4-zf1Lgrl00+a+@3&hL(gyYO73x=m!W<@H9veQ
zc7Id26yF+CEuO08`+^W?Y)r4`nx{F&d-bhOc><+#JIU{hHgl;X$@}K`m@#@xLbRu!
zqi4JLYC-&7`Z^V>SM+b4A=cW*dg@7cx5@WL-fiTexj$EH3(;9L+%g-PY{}swZRETq
znp?h=Jh6mvA^D{7Vu4#-M#e2}!If_!ix!V=*09X$)q0WGBj;v91l8;5<pO<ld|pa^
zU)+W(+(KF`X~x}OLK2ts;uc!TTT8~U`J{45JMM?ggtJC-12>acYpbX$i|OF-m51q}
zU|(2s#;uN^XL-RfxVu+4;SD+b^KvrV8W+EW${EA3!n}0cD&@-WI^5D=*9E#)eu6_a
zJp*PLa$NcW5+RqY)48w|qRWqEzalg8OSugnk#4r$+-@^@+ZNW=Zl($Yq#r(n9s1}U
z!&vV*Jdo&<uFutYx&qAWRLxH^7Z%$(u-xs9<o?q6A@i_BXV~9qjUD4ugtYbqF)d5c
zZ&-+Z{ET}H)&}hW?sBl-t2a`YwLXh51xQanKnvXjM=BhC$U|7EMzCk%U;0BqwLf^y
zcJlkOI8L{nv{^p9{*HHOubSekK>2=IT1{3jkL;b7h*82VB6#^k-N(Rs<j(_+0LOy7
zL(hJ%D>8qgA9%ft1kE}2s*aImq<HfC@-D;f(F71VT!6H41Nt-`54nOv#|qjS=$RWJ
zO`=o-4$;m|AmGhaYJzw}Yc!C%gLfy1_fd?oPWcfUz3NXEiETQbM|7#?-@<i?zo|)a
zF<O=a=@u@Q(E3B%$Dq+E`0M3?Xvrn99ovXJ7p*~$KcUO#=(ek5*^2I}RSS?Ys4Y-~
z`$DORe7&M+O4s)gnO&wp>p8FcTd1)+LgiSmPJmb)^)UP{zC~}}s!Ld7tvc#9AmEN2
z3UFw7gS579sT0zKVS-BN*Oax$1$-3K{Vm#0-n|2X+HK!XcMkRFod|JIk70x=?7b?G
zChYQht9f1_ebX4EQ3#H7vIpUsp@ufh-<?kt(kljfH*OD$f-<SRmhWKF8|hvH5RmNk
zg&Jc}HcDeqGR25t&k)r-kxE4=aHrRcd*yws-iuEbkeka_?bY;J2*(T;ZX#%VIG9%R
zM!89(CXd}CX{Vl}pV&&*?jYqW({h@~+yE&8EKfb(4deMY&<D7#h`=h}m|3-nC}5I)
z!b+%CLo(K)mE*6erF0N&#=8!%s(tD@kTTW9)4OvO=5^3BjF5l6oy>GJ?I6L?B?m93
z@^KhvC3XB{bugMY){*nuNEA(hVwiI~Iq1kXC(nCj<^UAwEX1K@cNV&D)%HYn#*}FD
z&hIMZT!kXT7Hr3O={ZSn`1=AWg8-Va^D#h@$`;ne2Ry3%>K4FE?ve}<D@%J7hkZeO
zWDrY5`n?35pp78WwhUcqW2-+`!Ueu9&>u&Z%HSRb-ws?wEYHZfj%4i$O6lU=yf%98
zDLfwH;?1DiulWj83~JhC^hSMTGr7JhDM<y*da+V(t>R$CBLr(G#L*YC_|#gnXl}41
zfPyJ?FGWgd^#&P#HRN~=$=Zl{r2p!K;Gfq(eqVb0eXI6|ZKPmzhomX-)RO~^4TQ4v
zef`(#uqUQ(q0o~`9lRAH$1b?*yL61U3RA2QR6!-<%E=$ABe)ciG$}A~!R2ICK`h&p
z94olSeY=HhcsH9{RzParjcOE>hg_(UNu?itSRVN3Z1*A3X-#8xGwHLYGgq^jELam)
zzZ4^d`5Qvm)L0DrYBM>yrfu-X)n4D(CTq&R9pu59CXw_0OWCp=&e0EEGjaqXxcC?^
zd3J4^IiwwF)uS!cNrPYkMEOeWVpz{u6?}-?3ZIT^BU2Y#as7e<UMS;TbrKGvD26@Q
zM64vP#fI7R^ruW^4iGw(J+TViQM<_n(sW=lXn`tQ0cKLnEV75q--N=#W74U5h!+cw
z*)xmixhn(?ItCmJY!51Ucx@<FlWDvm=Yb(9HUcEmP}>>PKrt+F6Y23@Z+0D7^j-_@
zj)Q#oUKDqHHaYR0I&vq(GLl{xBhmkDC<{q7s(k9Uf*o0Ex=XrAYTipX_mx>?#!SK9
z8(Cv|g|w_aWbinQ$$LDL`q`;W+kM=&B%Q<t=rFlxc-@Nrdcvg~2fQK_9HY#kIl;PM
z+F{AP606*LD(=<IXEpy0lu>(3L|wOpjj)=ZIup{AHlEUI?Ivg5?;N%SRZEZ}i|f&k
zoH8M)Jg=((PiII_7p*6rEp17!wY8evnBl8=4;rXQ4`Esjyj|OUJsG>UF*kM(>9@5R
zcg#-6+D`24!jiS^S$yj7VBKnVCo!)d$88eHt@Vxd@4rv0U&W_4)5_@5bpW>})-nYY
z!BUI|n``aqw4vH`Z2N*h%An%CglS&d+L-rA;)b}O1)stWymVuE;p`2K*an_;P@2rw
z<RZB2L*YU$S@*%%&`pG90ov6RBrPmgEy0$;90?gk>TT@SuSx^gsTLePF$v!rqMr%V
zE`>_3wT1l`zZf2;XN;<%m&qEBkI-qp_7F=wHWb=SK{&|<px|i>A+l;?<Dlqea*rM_
zC3`n^XmAt}9zIpDRt^iv>T^?xXJbl}=dEeT`5o!PIAb*S2%3o(Csq>OhmFJO)r}zf
zc>;toKUy}3d3ZNV#>Z1QeoGO=^kHwV{3CMY!!h0KK!HDY>v#R-sc((F;cw^rYTh%M
z@?(bJUPMVe#Dz6dHF^D`x!glS%03F4G6f>4{Ee_jy6yh_6xeJn)(DPWz9-Xnfmjn+
zlg8lK`w%Z}f_;7<K0m2}JYI*T(|f#L?B4Yxt{r+1CN<B;;2Wnq>iVZU^qhWi4HcYQ
zTgu5NhE44n?2DwU7b*TtR2JAv(q^)BQ#Y<)5^-+I;3io~(B{N3F)$|#i}Ncx3DX!L
zwYNfPtavs}#4Igb?!D}ZKnU<XPFM4V6X_U(u#?yJS;4wPw!*Ae3jo!PykI-?RxPP&
z3E8|^J*sjQdKIn=@iGwVcq%$Jz3hE@Z-pnTnipi%wKK$W>2sti9xZkq+|1zQrd^9l
zc_E4~zDqUqV$oII5~AADxZ#tHUhkQbzqQ*JdG405m~SS?9!(Xdy;O*8j4EtF6=EBc
zox8~@V&2j;sOMJMl|Elgwr+_H`(m+gbsln1m-@%*+~dINjBQp&R?oZNqha)KD|3QF
zUYXy1Ag@ffg-qI--QW?dOf%(r^kbp)UnKuU<jU5ldL88?!6eaia@$T)Yn#LDd-yC$
z-sg9~4?kYb^6}7L#K)=UL?&38do}ZAyw)3GOCn<;!n~R(G9LQK+beQ#9Pr^X?l+DZ
z&(s=+iz-3J`#kb)j>2Z()g;PzaI3I2Et77w@M_x0cv1ut$#4;j*{cba37G|Txt3=N
z>UuSSGVU!7yj?eQRx_`rhUP6rZFOua+epWHHIj^v(*>jk^o{_(QpUOcVO)61MKn+@
z<3U+<FNK}Xg1#aduT$W^#y_LL->car<Lsjrox}BdGe)ppCe$woIuN$EqBblb;|;b1
zoecZD3ix~(Z)gcv5-{Hq01L=?VEwRx;k~z_!QnC<T*YzCI_lK0fQ;8;{8H6%Sq)$T
zU;Rha9Qf0;lktGXVRORM4YSdKP?_M_61XkUpu>m)Wn4RpnZwixK?618s0A7o1gr^o
zs{kF4fDbu>mmM0~a5HT{F}p-6ES#{t8_V5TS@_|Ob{zLcB`N(RuX$Fbj?r1XGmQrM
z|2?2+GREuo`4?qXlEJ&Wb6J&zj$Mf?H>Z-6ed=VNlBK(|1B|G2<Sl$^uzL;H;xn>n
zPmAuV&vcCH{Sr^V>h$tJ<22;;dS?qC4NsGvE<Vgt9}Il|%As%9^v=h7$i+R4aZf4j
ziDJ8wx}SyCKe9)MtCFwj_b1d1!y6PPd^Ug!c?`09GJ=r)D^~A3vZrwE=e<~b+w|QR
z_t?(Fxvw+#_5t#E-*j$<hK$?)f?L$OaNL0rf!xwca`Z@;Dg}E;hIoP|fH*nC72Z1{
zvh2>n*~bpDaY;{%G4#4igD*+EXH|#%RcZLCmzIdwhEIcQ3rQFAc)@$Z^J7}H3t!@q
zD5sddmq+Sg`dvPj(ks0JENQDZd|m{ufSY1Ea=aoxFb@U0|6k>>7H&5B07bHm_vcX1
zMZQa3;UnjHmhDNLu1<vyT+KQ5Sz(=$9W3`r5;<^+m=E<r#8BB*WFw>2=IUsrySX=W
zy{r2KuC5h-DK|tv(#|gdUB%mZ%2)At8o;K5kJWNyR6<!ki(u2I%8)SN&0eQEbiu2B
zgs5%j+xz7DX3)eS-Pd5{SenAe2ZA-Gnvd^A&Y$iW$ATAVyz%7wCzo1Pc)qLVAEr=+
zYI@R<jw9S<i+l_=ZTW&*a*QT1r6cN|#*32g3sF_C!qufa*~0GSUH#e&jp#olGc|o+
z1pe}7P0X1(Y3jthh@6>k&YC)X;+%-N6X)bjojHR{K4;^G_9(1Ax0UN>=si|%Flc)-
zgI*spuy^{{H2vW8vFTZ__ZGBq%uuHJs6Nd{y{3tcPsr2c1=nVJzit?k*?$nD$?G^_
z{A6ZkCrut`nQ5tgwS|S>bo4jt)6xcZHe~cqXEOD#rS~!D`wn8VhNUrs(+6fUgEO<z
zG6ph}I;z6+sRbETIP=Cum;--{6_~BSg$i7)z|Ry|uE4tre5$|(m#7{y!*r4hIHf2s
zRe{+GoT<P?3j9!kdlgu$zzPNa@-O(Of;YZQ8)TSh1twC6_L=?)VY~vDDsZg=zfhn{
zftM6mrNAc&4Ez=f@z+X$F$(OgK)nKoDKHNZ&craQ6~bl(exbmx6!?t-?<nwh1^Qjl
z;eUjxBUM*)R1MQqfl&&iFLLy+!xggP+rG^wnBE-EbQ(W(MyI?fOsC#VYz~w2=7f$D
z=TBtF<8O1xhd<R0P$s%??3G(}+Au%L)#abwl>iSJChl*vZ~p`QA-d2Q+oO(If72(v
zQ-MVaJg>kT3Vf-wM!_3b`6#Uw7^lEA1&&eRbOkO@;7SF4P$f?z&T9(cm;%33prpWO
z3aodFk^fpNFhzmG6-Zx%=^uSBrhnTMcv68C3cR7fXSd8g!P>WdFhYTy6_~2P;R>9i
zz!eJIqQK7;ctnBUDDZ{?s}&e{$Jb6v1$G>u6a)p1R$#6I=O{2=ftwU~P=P*m3{#*A
xx6tw%;f4L~bgOOtA5JOlhWURurM~u=|Jjt%nMuIE|Nkj1Jn^VkJ(9(${tt|o9@78-

delta 15043
zcmc(Gdwfh+*Z(;uIk}LSkPIn_BnU|e2|^-9W+F*Xm=O2-UC~4-nL!nkm<*2T5H_VZ
zLfwm|QWa@ULLwK{3Z?a;L=`7Z`=FOJsGj$`&zySt^!fes`|F+0Cui+-*=w)8_S$P-
z&Pi^rdv30Kk>t&N6G?vXp2O>JGt59@U`H1pY%!PfYg>Nar29N~=U=cm)OW0VhZU_D
zM$@v2pYj{Scs0H=MiB3oF^qw6X5Jy2T3gx)i}j4~L5VO^0Z*1uP?}v%y0w`+=vNKH
zWa%dgc7EGUhLP@4G;~6#|7ktb#IO2^Vf>^Oel8k0LuppfLZx}2oje#zPPZA6{^X9H
zY1C&iS)5ZT#$|QSa(90GJ*ZJxNm-%J(^McND<R9zxq?yyvifA{odammJ8MFgm$SuP
zJ#%t;6`ABeiTlill=$~(*K$0p6we7_W{e>6SspAiZmhJuC3))K(enN0ly@^ld?0O2
zWEg9+Y?@<jo@Yw4w6-=IOd;0h(WWSCbCM~paiX<(fhpPAY%*t7@w?$4wy_+2-4wz?
z13wXj#v<T(E<Bmyg{7<97{>Whjh-oE8TceEk6~hE>Cwv!Bh2FGguK8qDG8FfLm3C|
zzlEicJaRE0(9#)7q(l25Y%4c+G>Z3~<z5CxiZwAznFTe_E&~y8O>dR`gsw=HODVOQ
zQuy3>#>|(+p>b)zMusuk<G%WpVMIRf7a-#A(nep{cJWI+tstE~s1Q*xU98k><xfI1
zN_vHg{I2+@TG|Pb6nosxj_9zh95UM=lkQEWH;`;?gavZ2QObhBur~;0gIpzziD#H0
z_7#a<f~fOCjfS=GNv^Ixii{?IDUg))x=3KD`LfB6DtMtk!{nE1Y_q8InDZ{J0WPg=
zr~n6*Wo}?JBvO%<E)k3LXrI!uf0+gpsMF*Jf!`27g#uMQU$|s^s`#Vu1KS|O^-h14
zS@fK_Sz&%hnL#R(JZCObm}e<7TxBlV$5?2up?8A9JwUm=Rqll6RTC7ZoidYE=D_F7
zP=&dGGAF9ckmpP{FqwuCl(|r4axUh8TwTM@4B9sZlv%)%?)HO!94Iw(gt+2}_9&F?
zrpy}3JV===)n!GA`t-zJ#do2(x*gEPXl(U}SVf&u{~EA{Iy{_ZYK1kf3SDz`uP7Dr
zEhoUX>f9bN46oU62uKw_5-hf12d#HWtvCF6y?(BGxk|P350z>;O0@u`+FV-gzFIBN
zRSo|A6Ads8Ln!l^%6z&9##_owflloguI~ImDdlGWD!z`2SMg_*T3TAGn<{hceHv$`
zj?P4tuoM2IQ^zM)_l_cd6jhyrRjySLH>Wv=tAxcaLY#A=La^MIX1FL_oKsbiVJ?m4
zHqHeqg^o6DBQRGNPutMsug24=`|<($zv{Kdh0dj_WPr;&Z=)D~56)?v;<T%rC%dWP
z=GM*)D&ZMK(SNfiokRT^dr;8Lc~Iq^SHw+i%RU1k-C^p&#g<FYFo!Vl8{O#Om-I!F
zm#Z3r{*YzCs+)`E7;`IRvtcM9%Zvla)!8XolaHhYWF<uqaHpYDT88>%mOHe#fEL>!
zt4Om^lD<t)Ol>RJb)Bg$n~a>)pXQ`guyb`Wikg+Vx(He@o66`sl_IH<o>WPQBITn<
z1?TF#6sdqRI_)GkD%GD#J?;Zt7Tui(E}Q7IlkS05mQJ}hC|CEn%B0g-s-?`Slv$=Q
zKUA4CxTV9CIiE6jD@?n}q!BD_q|AKEv?<ISh1sGk`Md?R#h@X<X9Lh4gNGiQBBc<Q
zx8cfmph?FUy9N+4p1_?y!KKnoIx)9V&G!}|v5J+_ZqyPhGHl<QW;;)zaXM6OF_;MK
zQTf-+<1j$w|Dr8v4+2;aR%X8B4o%ngxI)UXT@o}Yb%L$Q%sWTYRp>3K$Kbmo!wO;*
zP5iqL(BhefLvUUGbxr;jz_NqXiW#uNwU%JWs8;F5I=X&z#j<T}eqq%s)^bkRE+p_*
zeq@*>(*%oMdl@D4@hm`93iq@pEIUm}cK(=)^amv!b&+<uNY5zg9T({h7wJ!5kk+|K
zuenHa3-rmXkhF6EloeC@@-+tgh$}xZjJw8Wp<OWA!>__VXX|fW?mD)EdRmjefp+Vo
zFKO?M;ysCnuW8>zemA70?-x=jlOGJ-3>;(v&^TGJ2d}5vK0!r6yd|yMsmQeys`)vf
z)1M#)k3&(~{VG;u*f<nO*-6NYXW-}^ag?a*2V(3c#pC<{D%}eWmKD&&Jju*3cHI}~
zLTN5=r$X!tqBNy99sL6q^FYlfmDXm9xi2*RfxbH{pk8{W^vo1ec7<Y{7b5?o3$0yf
z2nJXRRumY-8wTt57EJ3R)MZRBLd%CJ(ZKAb`J_6<yWZSQvcga$3~5YEz{EmVL@H(1
ztp||Y5e$u5U@IsVw*<?I?R$;w6KI4EgIJk+f1Yek&DG5YA4wtt5e?~fRD}%-aUhNG
zkiR$bn`@5z)`*7pQ0{DWx`EDbquqBc{P8J`IqX`jC>zC$aw!_s4JG4ih^3>}(~s(!
zQbXS9*xvH!OC_pXQM1LW#vCXJ`?msJ@Lvk5AwU)AnH2GUez{STQehNRYoyVIbiP$d
zsXZw?EA51w(VkImw5Qe>#UJv^N1!FxB0e&V!-V>!Oml%YXt4g6E4|f+d4aY%UJ!qu
zD8*rwQbH3`O7dGuGD6x7vpq$>&@E;R#$Z1Xh~G7gHH=9YpBYAvGKa-pift;}I9AUf
ztn$I%-rm4ud2QrPC`&0*sV(8tQATvW{FEFE>E5?5u$*?l`=DSH?+g=r)EmV(EwIMm
zlW-<e>V=1M9W<2{;33(jk=CIB69+?rF^@&fiS<xe%_mU;gB@Kp--8zY6l$zOb!P-?
zeKR;w3R(!X#;cm|0*r@fHNX2$R|)f_kyt{tKFc4;a*1#UTX38g3PVG@KL16Qw@JcO
zQXLx1jag0Zh4$ex?~x8+30!I&85@?)o+~a4JHT??cab5T^VlckeCIBfw{Dcl(&xJ{
zG5CFVXv+E6k7cst@fCmJd!FMv6#kay_?rrz{}0^s9N(buXFtc+DER2-_$uHtL_Xy?
zVTmHp_aAtd=lBAJAMg*{UB%CjiES#)g|jf^g0(VNaIDOg5_gcgE&)E>XCYSBfG2g^
zMILr32<c<gGmU#st{w`o!{`{@#Y?b$Uv4Pr0hyCOUnV=lJ9C!LNo9B^&Ciz+fR{dH
zIvE&Q+v+^|EqpQ;{|6b>^?kO2{N8nJyZN<f(^?toq`@FKPWj2QEd92V%<dM)iF3(2
z-9ohf@6!AdTW-6qu?^*rplVACuaFDf!nr>$lcsK+xREPK`-l#KaVrr{^Pt8kJ`isr
zbch$rNY1xOMns0crw_}d#?~TRgkNWvOhXA&9Eljo9@-o^(Dyx0dN#`RLN<@OMbaZv
z*gwdINNZ3YTDG1#{0ugk+S!$YXxjr+vd<>bQ62m}t{{ZE;-R?h$52_jpG=DC)rtuR
z37aQQuB+lNlI>Cb*w4v@s1DrPD)M7gm(bcO+SxI6MzKNGx&yH*<-Btm^iS57l9=u(
z9alaVx-Dx9&#FSVt>-*t?Sv|_xqA-|oha`f#6Bb6b`Kr)ZWEMRsS(E@EQnXBU#oc$
zWKZhc(~_UaF9c>SZ;kUM3U;2k0knn_`D~zBERqACiju6oK!*0nWOtBvd&F`nmE=N?
z_I^zvdT33(iq#z}hISlz+@lYBghWS2Qai>+kKp_&$p_Kn*(&1RGn{QEQ9TWm^GZ)$
zpr(S_R;i~;e`~ru@CZUYUD`&@^vvQs-yl7E&7)v@uPxjndvVX0eJnRkBwxqQV0}n@
z?^#?=CwZ^;SuTc<*?po$O^3&GlX{u6a3nT}UrSF!Wv|g8Mf|z5)_ECCC2GF`F!e&=
z9xV(M968va-j^=8L_Lg-Sy7Eqp!!qlNs-*{6VU#B7t<ZgIHUNTQ*s59RA?ufzVC3o
zJ|l<w#<1U#Z~M+`d-zkON15nQXGy;a2`x}c*hD79bz=9BRdE*1$3f&cExV6s`%Uo7
zeuD14`35of>)EX*$~h52c157z#zz9N#xo{=yWU-}@y9O0SWm3r@606U`Yq)AN=ah>
zOikKjREZa|Zv`T(4Ufs&{SyXwfQBtXY%LaS`-(s>X?_4!4Y3ko*B(;$o3Zr8e(z!>
zfMqK;Xtq{@^9AvZ59a1=AU)zkxO*>=jQH-_w=N*v_H#~lO+w~Rg!tQQh$FtUrvV%>
zSSBap=d?VfMEaN->C*b*h=dz#``>4x-}f_YO(qQLJ)`)uQM{Ed-jHt1Ebf@NoaGj+
zA#V?SDS*JQuuR#zxgs?1W8$wPov+to4Ym!#{AzTAvG!BtPto%JNeInTCA9eNBvPwe
z!Q~f|7YB{zeqT%88x+oY7L&?BiCph#giY$eX{V8nNs-*pwIn?$nCo6c<|R$@&BAI#
zFG*$#w%{sqIVm}4=dU!<W$X<cr<DFZYM}(pS!w1P(pw+RU7A8>==D7w*<7}sr>?MF
zH}${;h))g534^^%AwuHdK+_9?J;%#9EABV)g+3M&Th_OY@p}~_qOBgu0o*{r;h@Fz
zgeFrs6uenY)0U7>Wx`_kx}WsjLXv6-=OS!mzF~-_!vl=&5+S>s21MHj<gB5S*AH}C
zY}YlC2Zl^`Gtno{)a*YB5~egF&R4o)B_AaxdA*QJCu^Uhq&c|<_sUVyb#P33dR>J<
z5VEf$T4-QQ#Pr9wXa7WA9lVQ+I7<9eUTSyxh@vgVAeP6Lr_vp{<hhz*$i+bc<o%R@
zz|zC6*5n#<8#-o!eW;hL9e9{rNa@aP&m(`NL~=e8NVn9{T)RB7GIbO;V?4Q(+9zzq
z88|SnHa8UE873J!htC25UO*Emu)=(XbWQ8XjX6Wo(t6SKur#fQU(;zC_R>4wA`p1#
zwuKa@MQ|?)<lD3tEO#1UNcPo00Xv`+vA#1u6T(6wZw1iUz+{{>9~ebh5XY2DIZME`
zk15B^k4+gv*lx7z;to;r5HExL4fUb5nKQ@3nl)6p(mNsaZ>(VIF3PeC#QdT*^j0}K
zW7i2FIX9rO6!G`pFQ&7%Qo?SF=UQs($)OiJw11RFbs@xFg{UV)Tl&_bo^$IJa_hym
z?DwSU#aQ+ji4X<``yQmCbSO3XNi1Tcsk9y)p<DO$%Zu}bKCI>D3gC{H9!@e$o>D>Y
zH#H$CpxF7(_F<dW+Kq10{!RRl5<UJw+)ar;asMf~l@f3KgSd_ot3eb>PbDwEdu2-*
z=`&<c@(+6%ruIJ?mq2NdVe#J^ze9=i8s_iBuPG5dAF9O+={2++`zd|;|MFid8_1%e
z0o`v<@mc@Sae)$t{eyUp6hTkvf9WYA*M_!_IR0PsPpOjc;N8Dlca#Jf+q3T|CVlW<
zRSuFF#sH6ZX~i58X4DQ6|4U>oWv2Z@>vBqr{Ri=tz2r+{CO2(43C+-sD_G7j?@gUH
zskY*LNsqn;rXp82_!MfGVsX!+6nt_2iM6FHzZ%=CfLvW?h1$j*cZyQ&pvIOr4C84m
z=$bx5gP&fJWzu3;H&5m(JtNgGB=N(7EL$K)SGIi%lyjx+eYD|xPbF?ri5n>KkV;&k
z5X~!{pQwav7h%5BsS+l-2$P%_RYJOpFvR)2N{Dw65}cL?Dy5r?65(`L4kox4a1q)~
zf_2VN5Dk+JQw&q5G(3BSVTxFUyMiL>?EJJ+ItN~55$HI82;x(8c@(9IaVZp>zUL;5
zL>kAwtuMuG*Rj8APfHe&@2&_=u4^{hc@4^%{LSbtonlrT;Bak$>ju+E!C{JFjW|oT
zbm{r_B$c^|eb9B3s@(lTVMh%m+O@S5I970w|4tf>s}Zn{fR^q^afglkE|eRW;EZJy
zE!EPe-ijv3g0+!Wb>nj>Kx2WZY-Gb1(F$pTwThz_tfv+1+R2IxKZOFv5a{(Cf+8%z
zWdon2P%}Z*_N7I;Hcnx3EuQCzQOIY37AXsP(5}1jy=xtuAXXs%_Ok1eN|0?XIq4Bz
z+LcT-=vGii+2fvpBdr{W7^7GA5{LTOSvbr;!ef0A>2kR_5KGy5Xhinib^<`GHr<de
z_C!OeKO&t4PI6@`oEeE_gukT=L>Y67YCaGJ%wpUgdMhM)fAR1RF1zB9!QZ2!GE3VG
zyqdp<C;bUxUAler6})w*Um35u!AWZjh&D$6=irv3z%|Yxtms>UlJ#-4IV^WM$Cziy
z<syIZ4&y-&i)-$Xb|Zr=b0JaR2YqhJhG?yf)ku@y1~ygm)4_^HlZ^p_Lvd`9q8F#R
zAt=~=Q}D#;J`%wCcz{VOeu)?oGj2#9K$Sh?23^<&8FB|PW)GR~K&5nncrvDt+{6KN
zE2h19+z0cl;If{2dtxmq8yUpad`G?=*=}Yr5>sP_o&OY&noV&-LggwyVSBng<t+Tb
z7f_KXbmesvXdkHBXsgZ+lre3F{;|jDG=}<y9PFeZIYO0``B~qQv7>tQPQtKaJ7k__
z5YJ)^M}m(rT#I_<;h2Zk&t<6|+OUVin5H8Z{mI9pdb8Kb{ZU2Q)gxTFQ`*C$nzB=v
zQAZAs4z(oJ(cMmJb1kx%<~9_VC+F&TrC=OWc9C{iyeq9sKsDF99<B3h5T!FO)2$cY
z$6Q0Jjcx4w>SBgDExB3i*>!vsXzTfMJf~FgCjr=sD*hu1*Yk$}DxPb8LFx(B%9S6?
zGP$7<m;PB~_LxI~>y9bcZFEtw$Gr=r>^g0H5a~KL)-p*4oMT{_V@!eII6j@8J2M7=
z=;k7p|3!=k5qm~G6$nQydt3^v{fqJlp0(=^LA&7Cnn~U7IIf8LLR9)Jk{(^*vNUBX
z6}WB#?<L?4Od*sjtw~>_8+P3SD52EjRE_i{6w?H5gE_7lIRINsx~J``Z229>2SN;U
zbGTlao9!{KB{yM4B7gQH1je;$8x^3xzqg%@rhs>JnANr?DQ*9PD*tYK6v-JE8}P$i
zgjItwh}DvL4i4AXFO!mSp^;@pFr?nS<PPO&Ql6CFa}~}A;wi-iqHR2yl|Cly_+GxF
z#_E~sRGdcOj|W6IKB(=@3fIxZF&>xrPi515q=Rb}#S6y|W4W$3NZEv-z@zY<KqEE?
zsp08$7*~#?oX3acmkBYMTX4uXM5c7{n@IOY_P8SO8(yY84S%#B&Io^sCtdAbi-t4|
z6V>RLj<kJWIs!9ju(YBPDc+=+JeA~39K~KH)e{H!zcr4wTN$A&LsKf`@bLX4U{Zf>
z{^{b3Nn2U=TJfF9gIV@h(rs!XSAUAsPBmx`hocU%W4m<wN(A~%Bm29wgM>`m#(ET=
zn6}KFJ5WMmXY08+B_wBdXD+>jY@a=it3N>=&z|a?OY^8*_tptA{iRN^V}LcfW1s3L
zh|BT!8g{+I0mlKx>6MflJOZF0#*0Qw)Cp4j(lf66C*;^16L;}AiI^M4Z8%Pb&h6m+
z8YZ_<)UH2H7S3(YjXYj#pWB_~B0nZ2^FHO~6%+Hz%Q@*7dGvC7?))+0n>B$mA0zX!
z61V}!$op9vTOC0}2np8~&&J@K{D|nYgDh4`vR<HzPXR58%ki$XRl{^lBP5*}Akm*-
zJ?92A>o1hvt5}D5u?>1EXXjIC)r6}{S_+X@>4iQ6audJdV@z;O{ynN7F}MK{rdj<z
z6rqW_juz};{O2Ik6%w*W$85Jj!tYnp!?2EDGGW8+8}~8!BYPb8ZV?$XKQd+!WQ}g&
zhcH)-iQykmAcnsSpjnfQi~wXCkcNIJ!>FeplB4rqXtfNaztl}GCRgUiSfXf6wjR?e
zf-*(^1%M@<C<IcD-S>Y!WS9(Ft;Y6+VkLhPxMDSR0FHc`)dyS*0gTdl!3HRa`xSE?
zCj16a%|FExW>6<?hfFRliu_wBmdqphuXOFEqbd`=%83&quff<fii+B96j;x(g2M;l
z;T!WIx%f(8?{g<G;maF5J*Z4v^HKECh?xQZ7|{&8mqCHUy){fT_r;sDW2D1^;Ditt
z^8n<H>~{?#X_dsdT|jft*SPH{3~>zXTC%+(>`!>Cv1K7o+I7tzkwptae9P#VI?@oS
z+Rr{B?=8p}^b8XXSSzYe<R1V_x7J_=CVMq}joSt2ZUoI7X>{YyxkRr67{$|&K6!*h
zEF8s6K0;P5Ji+ZhO!~b#HEb}>qmI7bhOg=cN8jJ(bucg~wrX>$6mLx9N20FFVRHP{
z3EUSS5Wht_Zo>y;_@X<5g3)?<b+T6<cr@LS>}SxlPWIFI`D#H&c}OUF_E>2){0Trc
z&w!zfgvdWSLS9`woC`cePA_i9$p^``#gn<c2T6QR0+)4=<m7x6y2MXe#%#yj(bve}
zYahVZ`%pHr<wAmv93XQ{J-NXL$eX58&c2_FG^cXHe)5(%Dq|oLl+mt@2Ef}fH=cep
zAc(qf1t5*`ZnQ+lRvhPLO!&s!7P0YkAG(1bidX+CCi0K>5x*rN{`89gXgI9^s$u6o
zlDtIEjoC-?mwdwQ+Dis59n4MNOY)ZX<vQ(EI_15W)Gd99+qZ}GUlz?R-9zRqvvVEy
zkYARq;RYNoe*Lw1ELV4k++Dtiok7OEKAHQqkQ{$~5L;3F>+6Ybt>*1QleX(-KNvKA
z7tvYbyu(3i^ppndBd=Rt<gOHwO3N6(yzzQEA?RhOQH*}IkVNKonfdcd7tuXdmg`C~
z@8BG8iayg5&gQff9OIkiuW*Ce_z*8Zq;qM1rSlO@yx%&k>gEtBp$o=PtZd@twfF?c
z)RwM{9a0=KWkXnHqnFgQpB&EJ$*mnvGV)@h`WfKw$VNnPL~N5FUX%7FW73N5UD8F5
zBDS%W)OwF{^ANR%9LO8SId_rfyl^gQEeTmYi@Ual<gbq8ig%L_R|j)7HuB|afh(;c
zfz}`{w~+L+PHsP_MwWFl_V3t3Gk$_*cxsJ6U)Xf5A&0G9JKo%dt01wep_-1~ELk{x
z-_IakGg#00HSv4%$wO-r7iS}}`BT}+q#!?n^V&s9^CP*Hh2(C2SZ9Zo_84!u%?}0p
z%I4aJ;81!j7aXJeLzV1zviDjNX^V*+K;=xqm}fF|hDN<m+JcE=wClYZP8^VBWmU{H
z&MG&IklrEdZS%R`bfno9&2A)J*Hm$pJIKG*433<cr})?)e_@a-Q^c2jQWBPVS-Rrs
zvnsTSA57V}uJPJICa&$kb<8VXy0!<)`MyW?u3P5UD+`m&zM_jCz2J~epCQrWpw1(3
zriiU=n2Om!O~4TaX8`Re8m-nRp=M91%e!QQ7{o>GBZtKpu6ZxHDUNSFWfg7c1$-2x
z+)PT_$cyVc4IUbg4k0W;u^q+N1!+dMQF)D83LJCq4n5*^Q)T`@gOKS2n)65OQWP1<
zn;c%>XIvTG*kNzxDV=y5qdyZPBslb}prd=0C7#kIN;Rg7zdCz?fR|uW2oedc(MB-`
zuNfp?7sV9qR9*tYs<EV>y{ljTA-br=uB3i!SC(;w%(n-#sbsx9f(;_YcB}WHgLI~R
z8gqptz0p4^Z3U94HXh=*S(3^FX=tC7vGV<amIcRg2I-i7`!#JVDSV?{_)idTsntL{
z?>4=RX{umN9xb)>$_QI{sKEXF%jCuzg)IZyF^qQwt=fvLbp$6qSWYeC8}=dxH+-^}
zt_#`#tWOPS2L{)v>?0bGHXfAaCjOL4`kLHww6*L|Fr3Ja(>qjq@O9)Vsm8-~x)_YT
z+BurI616hqOx`H8eH|$-N(?>*dSfTGp44Z*EaT#_h&9M~6^y;Kaw8k&L^p9PC>Qc7
zo6#*CC!6>lN{iTN{M<0JEzVI5T@O*K`C<D>?uHc0h1Y0@Jf(=X(BFz)<;mLoS+D`Y
zC-O}QFkE0+bq`TMe!PpQ{Zk9c=v>_uN-}qpK1QRl<;Pe}k+uRPvkzW!dN^=U81)1_
z<cmRb9cxFydOx}@=KUz4sy(=H9}~$)4ul<ce=+EM0c6qVv#`n3QrWRyL(%Ld1~1u1
z=5L&0`DNL2SC^qkM<O2PG`tR1TXnzgr5458<Yj$@S>HgB`)(}1cvEnOUJT2-utGrq
zP1yPGfFx9}^uc!xnvb-XftedB(#2+MB{xDbmPDgiB|cGyb(Gqc=Rn$6>4#)^L0g}V
zsFXhI26kJHU1U)~fMy{GFgp7yw5DCWi)<-K=v2LwhT>I&wVs3P?ry=1@N>L~v3qQ7
zUbVzm%Gp956ll4t%ZSIOIA1O07p2DjWYulmLxfE|67;b&I=xJ7gzD6yH{aA_@k%YE
zurZkiZJ1zBJ%A8Qr#9Q_%+Z2(9hJ<iB1blba%<L-3!BVbbQMY49L<Ii)8^~k8@tH}
zGKD*~i4>8}-A|hs=0Jd1V;FzZ3!cGwpuyQ1BtNLe*Ce53EU5InB<&}ElHOd=F4B8T
zOzTzXD*XF7YMa}N!3%ehoGsnbstROTx$VrH$Lv7>EWlt-oKTAoTgpuy2J2(l>>=&`
zx6H%ckQt)NAU*~0PrL4B4yoS~HsDqv=EW#w!@Ke-mMH`XW(QvbGIo;Ba?oxc+_~(5
z0eEQ@Ti!Bm5sG5){z8(tHO4Xm0<o9W(dz(&MoJ2{8x6xgP?PxBbg{`W#xOcvyi9L=
zVw(707GojQ*b2~NF{8vD9D~Nhm7huHTOn9ierC@op$95I#A#c_4DBo^Zsc`=@R50@
zan=K4LiAPWFpu@J)tX0&!4G$mpSKPU*@<L;TX|pT#jJ{XenV%gHF-#_Hj>eAc1|!u
zm5`9^Wf~<UCI^}_@RozVA(;wtdcvQkPU!nYMWk7izlSQa<FuYyE*&RDZ>Cygv??T2
z(`tjUhfJ-LrgR4d?-~&shZfN|t<13fgv*qKGgt_5cBQ%ZAo|r9B5l}!pbG>CXF71`
zhG8dcg~b8j{D;L&d|xP|zI+9B8~l|77q$q}l$J$lu^*7UZM}n!I1mchGaKH99kZ&1
zgqobbM!cZGcD3Kzq;6Yu?>Ap{)p~&1ls!PmZpOsXJ$MV=_Ov#$Cf?fYZuSvoT@rBN
z)Uf_A>9xH*cmEACbbBwhwD|Sy-C4F3+5gr?b`|OW_Vfw0>(%Hpj5dgW&}{<l@zDQ_
zZM1=J@EJvRHO&L5z^(BfX3rA%k!kGJ#GiSEn$m*yyu=%%bSj=CWXsf^w%f?Vw`08b
zB5T4W-s_7a-w9ybybmi8h(+^}sftioJD&`HcUs`st#q%Tdy#^Kl{K2x$l6Tlm<gon
z-G1RE;Rwnm!7&g+bj=v~M997rD0S|J(aHOBe2jrHX-e|Old$*vW9zmcioEf~Q5g!2
z-9XmUbyJf+5witDC)YL5dje_nI>o5qb>yY@dbFwVfK9Ws!geJMC2FnN<o)*s8Nb3t
zuZcg5UBz@$Byum^pqG_gfku2Gs1dC99!h6_#6Z)FsS<j_BZzK|o<g-7EgQugywy*{
z$1ymVOA#b`$6)T49c1y2sr@Tnre4D`k1YZ`GaO42g5|H1e-r<{!jBq*YY}zBBCc$f
z{v@6|mv9}n63fouuuzC-^521vQf)si8w5WN+l-7Ir|!JcH<MF4gQFfEmSq^%O1cJL
zH3my*HuSn}s>8=U)nVWadCkpGu%v~w!A9H*BigL%L~{bR@VAWOzXbM@w3G}g?8gc7
z$dbZzZc{!vT^R5G9UKc6<79hsE{4!k8k<jib_Mxo19LZfWBqUA>ekVHBym@JOUryU
zxaiIc3ru$<sQCgUizOkdxpp8lurz{wnU_I{E`waxnAyZLiq;nCVvY0(j(v?fXu!n`
zPI0<nsFdTU##%bnki^2AY%A@fAY#kvz+aF!rn!`+VyV-6vRqpMu89|HwXb<di>>70
zu3+PuIZ6!ECX9bIfmM(;ae1R_6;#6c0uVHTtLVRUKUY0>w-QbNvzkoU9UXjawQB}1
zK!tzI;8`0ngS*A!qYngD#Y?ndzTsV(tp7HTgHZ4PHIHSyG{QU%SWP;<Kc&rM^oee^
zThVV$Qh$_sS%~BP&aEaOvj}#xM7OD5>?h9m9hNygH6i(sM#O|LLP=tg+c7sh<nZ{}
zXt;!r(Jt;3m)k)Ok5F)r8NsVNMTG{-;eiSs_()FbG&%;jmx8-ZXJ#@U({b6=Om{ma
zX^-TcoiV56a7n>^!-6+=Ot>8+hhJ52OF}5qiQz&~p++HO6!>r*YYTkj@Dc@=%e=nx
z$#}KB9DYE-yXo0vHbBqH;oB8_y52L{b8sm5>lB>(D3}WwbP)|KQ*iH0pG(1KGof#u
zg10Pi-|U`V;4X)cr?{nreH7F?#9%-V1Vx~Af%mcCBXup{0R?YU=zS*mXg%-<1^3VO
zT<y6m*ApI4aIe<EBSQx7LW5ok?px1s?R)CA@W4#!fmV!LvNk5O4LqRW{`kgA`GsEv
zK3XX8%nM!|lDY^6)F=Xtg<iY8jC%B_M8S2hGK-m(erVu;f(I0MZuWew00wLaKBg2e
zh-m)9jkXcRDHW2nIAC8tmfNtQ*tkD}<8EIeOAh9As6%Sf=gJFBM&)~Q6wRhsLy>z)
z-4)_~s6SVCrC4_;p5=bVtM3n-Y&Ge3c#7w*s8ss+3VHkRW^Vo=((_1A|7nNxjAm;^
z<B+D*8ZT2e@|(dq-$hG}l^grGu*TLjvD!Z2VB2+rGx-q7JJOaNK(-(0%(|1$js&)D
zfja5dFOYZtMZ@u@*2Q;^;8UGskQ?UW8wJA&*5GV$s5q@CiDl=KH6Pt)8M5G5Z|?IV
zvisP4Zbuj5SNtb;v~#iF#}m9bkFQDgXTh3QSZLD4({#&;6AM$k?K6>OmlTINKW2$%
z`P$SEc}ySkugZay-tujB!$gromWJASTOfvOmMrr0>ruh({!I8<kEG2<0L2#G&QGQS
zBCj<Ue^q{-We1VMGrhPJruf2{4jenNxUq6C%dJf$o2!WBO#^1H#`f)0Y}Iu`l4-qr
zS+}y}jcHyRJz_6q`57kK`I(?=csoz|8XhkRu+ZS!r@;y;p{$%qoA`9947&&%BJ`S1
zF38%8QB<y_ORn2cdK?OOHQ0RyJsY(40&8j$-`YS9SNDv$t*18;H-EqO`=zkD#;<Xl
z0>Ry+r6*nqSy!GS@+}s?Mx4+qr1~kOMa=}Cy;!_mpA0_G7cZ>Y$FhBk1J1>{k(@8`
zS}=nLk4+spDt-8{;-)WlaY1954wKS4Od1*<9UGSup5qIF;l?o;!$vU+dllcV>*-F~
zNF6N&eJ-G3{6?v;mkNigaE1z3sqk$TmZ<P^6@ITmmUaZcmMRQTVJ{ULRG6ti9Q7Bd
z1d9qcsc^Rno&SJes<@=Wrz&i5(baIM3j3;Xyb9;3Fi(Y>DWtD2_o#$pDy&uEH5LA%
z!ar2#e#zC4zX~H&n5x1VDqN((JQa#6EL7ofKx`xNzE&k%xkR{cUUVOwIx>R@-vqG*
zWcD{%ZkiB%@vU!ex9pmGn+m&r6;}Ws;wAXsXrsSjn3#w7Z@9J=)L{a@b%}OWVY~{B
zDx9i9RU@-Z#otun9u*d;uu_FLRrsR{pQz9WFO=x7{Y}NI3=^Re2C8tZ3g@YCxe7O^
zaE}U|D!i(~f2q*@maBnIDoj>krV6L3aQQ8ZOK`nPC{*Dw6`oPyRTciM!WQ+edZ8-p
zslov&9HzplDqNz%bt>GU!lNV9LX8S<sPG3B{;WcGb@V!_u<zeSlfkb*6Ov2e<&MSY
v?)Ga@93$m&mjA<XrM6i9569KjKJ$MzuJte=4uAju<63<BQBo_C$!h)=8|=Bx

diff --git a/build/definitions.mk b/build/definitions.mk
index 32a8e11d1..96f22072b 100644
--- a/build/definitions.mk
+++ b/build/definitions.mk
@@ -46,11 +46,6 @@ V ?= 1
 LC_ALL = C
 SOURCE_DATE_EPOCH = 0
 
-DD ?= /bin/dd
-CP ?= /bin/cp -f
-RM ?= /bin/rm -f
-SED ?= /bin/sed
-MKDIR ?= /bin/mkdir -p
 TAGS ?= /usr/bin/ctags  # emacs source builds or something breaks it
 ARFLAGS = rcsD
 ZFLAGS ?=
@@ -83,41 +78,14 @@ PWD := $(shell pwd)
 IMAGE_BASE_VIRTUAL ?= 0x400000
 HELLO := $(shell build/hello)
 TMPDIR := $(shell build/findtmp)
-COMPILE := $(shell build/getcompile)
-CCVERSION := $(shell build/getccversion $(CC))
+COMPILE := $(shell build/getcompile) -V$(shell build/getccversion $(CC))
 
 export ADDR2LINE
-export CCVERSION
-export COMPILE
-export CP
-export DD
-export GZ
-export IMAGE_BASE_VIRTUAL
 export LC_ALL
-export LOGFMT
-export MKDIR
 export MODE
-export OBJDUMP
-export RM
-export SED
 export SOURCE_DATE_EPOCH
 export TMPDIR
 export V
-export ZFLAGS
-
-unexport COMPILER_PATH
-unexport CPATH
-unexport CPLUS_INCLUDE_PATH
-unexport C_INCLUDE_PATH
-unexport DEPENDENCIES_OUTPUT
-unexport GCC_COMPARE_DEBUG
-unexport GCC_EXEC_PREFIX
-unexport LANG
-unexport LC_CTYPE
-unexport LC_MESSAGES
-unexport LIBRARY_PATH
-unexport OBJC_INCLUDE_PATH
-unexport SUNPRO_DEPENDENCIES
 
 FTRACE =								\
 	-pg
diff --git a/examples/examples.mk b/examples/examples.mk
index 1374b63a4..c011a62aa 100644
--- a/examples/examples.mk
+++ b/examples/examples.mk
@@ -130,7 +130,7 @@ o/$(MODE)/examples/nesemu1.com.dbg:				\
 $(EXAMPLES_OBJS): examples/examples.mk
 
 usr/share/dict/words: usr/share/dict/words.gz
-	@$(MKDIR) $(dir $@)
+	@mkdir -p $(@D)
 	@$(GZ) $(ZFLAGS) -d <$< >$@
 
 .PHONY: o/$(MODE)/examples
diff --git a/libc/runtime/exit.c b/libc/runtime/exit.c
index 694bc000e..6cfa3cdd9 100644
--- a/libc/runtime/exit.c
+++ b/libc/runtime/exit.c
@@ -39,8 +39,8 @@ wontreturn void exit(int exitcode) {
   if (weaken(__cxa_finalize)) {
     weaken(__cxa_finalize)(NULL);
   }
-  for (p = *weaken(__fini_array_end); p-- > *weaken(__fini_array_start);) {
-    ((void (*)(void))p)();
+  for (p = *weaken(__fini_array_end); p > *weaken(__fini_array_start);) {
+    ((void (*)(void))(*--p))();
   }
   _Exit(exitcode);
 }
diff --git a/libc/runtime/finddebugbinary.c b/libc/runtime/finddebugbinary.c
index 29dc83e65..3b5a37d85 100644
--- a/libc/runtime/finddebugbinary.c
+++ b/libc/runtime/finddebugbinary.c
@@ -35,7 +35,9 @@ const char *FindDebugBinary(void) {
   unsigned i, len;
   char buf[2][PATH_MAX];
   static char res[PATH_MAX];
-  const char *bins[4], *pwd;
+  const char *bins[4], *pwd, *comdbg;
+  if (res[0]) return res;
+  if ((comdbg = emptytonull(getenv("COMDBG")))) return comdbg;
   if (res[0]) return res;
   bins[0] = program_invocation_name;
   bins[1] = (const char *)getauxval(AT_EXECFN);
diff --git a/tool/build/compile.c b/tool/build/compile.c
index 92bfb75c4..d7c1023f3 100644
--- a/tool/build/compile.c
+++ b/tool/build/compile.c
@@ -63,12 +63,13 @@ FLAGS\n\
 \n\
   -A ACTION    specifies short command name for V=0 logging\n\
   -T TARGET    specifies target name for V=0 logging\n\
+  -V NUMBER    specifies compiler version\n\
   -t           touch target on success\n\
   -n           do nothing (used to prime the executable)\n\
   -?           print help\n\
 \n"
 
-struct Flags {
+struct Args {
   size_t n;
   char **p;
 };
@@ -92,6 +93,7 @@ bool wantubsan;
 bool touchtarget;
 
 char *cmd;
+char *comdbg;
 char *cachedcmd;
 char *originalcmd;
 char *colorflag;
@@ -106,9 +108,18 @@ int columns;
 sigset_t mask;
 sigset_t savemask;
 
-struct Flags flags;
+struct Args env;
+struct Args args;
 struct Command command;
 
+const char *const kSafeEnv[] = {
+    "ADDR2LINE",  // needed by GetAddr2linePath
+    "MAKEFLAGS",  // needed by IsRunningUnderMake
+    "PWD",        // just seems plain needed
+    "TERM",       // needed by IsTerminalInarticulate
+    "TMPDIR",     // needed by compiler
+};
+
 const char *const kGccOnlyFlags[] = {
     "--nocompress-debug-sections",
     "--noexecstack",
@@ -173,6 +184,27 @@ char *DescribeCommand(void) {
   return basename(cmd);
 }
 
+bool IsSafeEnv(const char *s) {
+  const char *p;
+  int n, m, l, r, x;
+  p = strchr(s, '=');
+  n = p ? p - s : -1;
+  l = 0;
+  r = ARRAYLEN(kSafeEnv) - 1;
+  while (l <= r) {
+    m = (l + r) >> 1;
+    x = strncmp(s, kSafeEnv[m], n);
+    if (x < 0) {
+      r = m - 1;
+    } else if (x > 0) {
+      l = m + 1;
+    } else {
+      return true;
+    }
+  }
+  return false;
+}
+
 bool IsGccOnlyFlag(const char *s) {
   int m, l, r, x;
   l = 0;
@@ -201,10 +233,24 @@ bool IsGccOnlyFlag(const char *s) {
   return false;
 }
 
-void AddFlag(char *s) {
+bool FileExistsAndIsNewerThan(const char *filepath, const char *thanpath) {
+  struct stat st1, st2;
+  if (stat(filepath, &st1) == -1) return false;
+  if (stat(thanpath, &st2) == -1) return false;
+  if (st1.st_mtim.tv_sec < st2.st_mtim.tv_sec) return false;
+  if (st1.st_mtim.tv_sec > st2.st_mtim.tv_sec) return true;
+  return st1.st_mtim.tv_nsec >= st2.st_mtim.tv_nsec;
+}
+
+void AddEnv(char *s) {
+  env.p = realloc(env.p, ++env.n * sizeof(*env.p));
+  env.p[env.n - 1] = s;
+}
+
+void AddArg(char *s) {
   size_t n;
-  flags.p = realloc(flags.p, ++flags.n * sizeof(*flags.p));
-  flags.p[flags.n - 1] = s;
+  args.p = realloc(args.p, ++args.n * sizeof(*args.p));
+  args.p[args.n - 1] = s;
   if (s) {
     n = strlen(s);
     if (command.n) {
@@ -229,7 +275,7 @@ int Launch(void) {
   if ((pid = vfork()) == -1) exit(errno);
   if (!pid) {
     sigprocmask(SIG_SETMASK, &savemask, NULL);
-    execv(cmd, flags.p);
+    execve(cmd, args.p, env.p);
     _exit(127);
   }
   while (waitpid(pid, &ws, 0) == -1) {
@@ -239,14 +285,14 @@ int Launch(void) {
 }
 
 int main(int argc, char *argv[]) {
-  char *p;
   size_t n;
+  char *p, **envp;
   int i, ws, rc, opt;
 
   /*
    * parse prefix arguments
    */
-  while ((opt = getopt(argc, argv, "?hntA:T:")) != -1) {
+  while ((opt = getopt(argc, argv, "?hntA:T:V:")) != -1) {
     switch (opt) {
       case 'n':
         exit(0);
@@ -259,6 +305,9 @@ int main(int argc, char *argv[]) {
       case 'T':
         target = optarg;
         break;
+      case 'V':
+        ccversion = atoi(optarg);
+        break;
       case '?':
       case 'h':
         write(1, MANUAL, sizeof(MANUAL) - 1);
@@ -278,39 +327,38 @@ int main(int argc, char *argv[]) {
     if (!(cmd = commandv(cmd, ccpath))) exit(127);
   }
 
-  ccversion = atoi(firstnonnull(emptytonull(getenv("CCVERSION")), "4"));
   isgcc = !!strstr(basename(cmd), "gcc");
   isclang = !!strstr(basename(cmd), "clang");
   iscc = isgcc | isclang;
 
   /*
-   * ingest flag arguments
+   * ingest arguments
    */
   for (i = optind; i < argc; ++i) {
     if (argv[i][0] != '-') {
-      AddFlag(argv[i]);
+      AddArg(argv[i]);
       continue;
     }
     if (!strcmp(argv[i], "-o")) {
-      AddFlag(argv[i]);
-      AddFlag((outpath = argv[++i]));
+      AddArg(argv[i]);
+      AddArg((outpath = argv[++i]));
       continue;
     }
     if (!iscc) {
-      AddFlag(argv[i]);
+      AddArg(argv[i]);
       continue;
     }
     if (isclang && IsGccOnlyFlag(argv[i])) {
       continue;
     }
     if (!strcmp(argv[i], "-w")) {
-      AddFlag(argv[i]);
-      AddFlag("-D__W__");
+      AddArg(argv[i]);
+      AddArg("-D__W__");
     } else if (!strcmp(argv[i], "-Oz")) {
       if (isclang) {
-        AddFlag(argv[i]);
+        AddArg(argv[i]);
       } else {
-        AddFlag("-Os");
+        AddArg("-Os");
       }
     } else if (!strcmp(argv[i], "-pg")) {
       wantpg = true;
@@ -328,17 +376,17 @@ int main(int argc, char *argv[]) {
       wantframe = false;
     } else if (!strcmp(argv[i], "-mno-vzeroupper")) {
       if (isgcc) {
-        AddFlag("-Wa,-msse2avx");
-        AddFlag("-D__MNO_VZEROUPPER__");
+        AddArg("-Wa,-msse2avx");
+        AddArg("-D__MNO_VZEROUPPER__");
       } else if (isclang) {
-        AddFlag("-mllvm");
-        AddFlag("-x86-use-vzeroupper=0");
+        AddArg("-mllvm");
+        AddArg("-x86-use-vzeroupper=0");
       }
     } else if (!strcmp(argv[i], "-msse2avx")) {
       if (isgcc) {
-        AddFlag(argv[i]);
+        AddArg(argv[i]);
       } else if (isclang) {
-        AddFlag("-Wa,-msse2avx");
+        AddArg("-Wa,-msse2avx");
       }
     } else if (!strcmp(argv[i], "-fsanitize=address")) {
       if (isgcc && ccversion >= 6) wantasan = true;
@@ -353,7 +401,7 @@ int main(int argc, char *argv[]) {
       wantubsan = false;
     } else if (startswith(argv[i], "-fsanitize=implicit") &&
                strstr(argv[i], "integer")) {
-      if (isgcc) AddFlag(argv[i]);
+      if (isgcc) AddArg(argv[i]);
     } else if (startswith(argv[i], "-fvect-cost") ||
                startswith(argv[i], "-mstringop") ||
                startswith(argv[i], "-gz") ||
@@ -362,18 +410,18 @@ int main(int argc, char *argv[]) {
                startswith(argv[i], "-fvect-cost") ||
                startswith(argv[i], "-fvect-cost")) {
       if (isgcc && ccversion >= 6) {
-        AddFlag(argv[i]);
+        AddArg(argv[i]);
       }
     } else if (startswith(argv[i], "-fdiagnostic-color=")) {
       colorflag = argv[i];
     } else if (startswith(argv[i], "-R") ||
                !strcmp(argv[i], "-fsave-optimization-record")) {
-      if (isclang) AddFlag(argv[i]);
+      if (isclang) AddArg(argv[i]);
     } else if (isclang && startswith(argv[i], "--debug-prefix-map")) {
       /* llvm doesn't provide a gas interface so simulate w/ clang */
-      AddFlag(xasprintf("-f%s", argv[i] + 2));
+      AddArg(xasprintf("-f%s", argv[i] + 2));
     } else {
-      AddFlag(argv[i]);
+      AddArg(argv[i]);
     }
   }
   if (!outpath) {
@@ -381,51 +429,62 @@ int main(int argc, char *argv[]) {
   }
 
   /*
-   * append special flags
+   * append special args
    */
   if (iscc) {
     if (isclang) {
-      /* AddFlag("-fno-integrated-as"); */
-      AddFlag("-Wno-unused-command-line-argument");
-      AddFlag("-Wno-incompatible-pointer-types-discards-qualifiers");
+      /* AddArg("-fno-integrated-as"); */
+      AddArg("-Wno-unused-command-line-argument");
+      AddArg("-Wno-incompatible-pointer-types-discards-qualifiers");
     }
-    AddFlag("-no-canonical-prefixes");
+    AddArg("-no-canonical-prefixes");
     if (!IsTerminalInarticulate()) {
-      AddFlag(firstnonnull(colorflag, "-fdiagnostics-color=always"));
+      AddArg(firstnonnull(colorflag, "-fdiagnostics-color=always"));
     }
     if (wantpg && !wantnopg) {
-      AddFlag("-pg");
-      AddFlag("-D__PG__");
+      AddArg("-pg");
+      AddArg("-D__PG__");
       if (wantnop && !isclang) {
-        AddFlag("-mnop-mcount");
-        AddFlag("-D__MNOP_MCOUNT__");
+        AddArg("-mnop-mcount");
+        AddArg("-D__MNOP_MCOUNT__");
       }
       if (wantrecord) {
-        AddFlag("-mrecord-mcount");
-        AddFlag("-D__MRECORD_MCOUNT__");
+        AddArg("-mrecord-mcount");
+        AddArg("-D__MRECORD_MCOUNT__");
       }
       if (wantfentry) {
-        AddFlag("-mfentry");
-        AddFlag("-D__MFENTRY__");
+        AddArg("-mfentry");
+        AddArg("-D__MFENTRY__");
       }
     }
     if (wantasan) {
-      AddFlag("-fsanitize=address");
-      AddFlag("-D__FSANITIZE_ADDRESS__");
+      AddArg("-fsanitize=address");
+      AddArg("-D__FSANITIZE_ADDRESS__");
     }
     if (wantubsan) {
-      AddFlag("-fsanitize=undefined");
-      AddFlag("-fno-data-sections");
+      AddArg("-fsanitize=undefined");
+      AddArg("-fno-data-sections");
     }
     if (wantframe) {
-      AddFlag("-fno-omit-frame-pointer");
+      AddArg("-fno-omit-frame-pointer");
     }
   }
 
   /*
-   * terminate argument list passed to subprocess
+   * terminate args
    */
-  AddFlag(NULL);
+  AddArg(NULL);
+
+  /*
+   * scrub environment for determinism and great justice
+   */
+  for (envp = environ; *envp; ++envp) {
+    if (IsSafeEnv(*envp)) {
+      AddEnv(*envp);
+    }
+  }
+  AddEnv("LC_ALL=C");
+  AddEnv("SOURCE_DATE_EPOCH=0");
 
   /*
    * ensure output directory exists
@@ -463,10 +522,15 @@ int main(int argc, char *argv[]) {
 
   /*
    * create temporary copy when launching APE binaries
+   * and we help FindDebugBinary to find debug symbols
    */
   if (!IsWindows() && endswith(cmd, ".com")) {
+    comdbg = xasprintf("%s.dbg", cmd);
     cachedcmd = xasprintf("o/%s", cmd);
-    if (fileexists(cachedcmd)) {
+    if (fileexists(comdbg)) {
+      AddEnv(xasprintf("COMDBG=%s", comdbg));
+    }
+    if (FileExistsAndIsNewerThan(cachedcmd, cmd)) {
       cmd = cachedcmd;
     } else {
       if (startswith(cmd, "o/")) {
@@ -478,6 +542,11 @@ int main(int argc, char *argv[]) {
     }
   }
 
+  /*
+   * terminate environment
+   */
+  AddEnv(NULL);
+
   /*
    * launch command
    */
diff --git a/tool/build/package.c b/tool/build/package.c
index ce8742be5..9d9671aa9 100644
--- a/tool/build/package.c
+++ b/tool/build/package.c
@@ -351,8 +351,10 @@ void OpenObject(struct Package *pkg, struct Object *obj, int mode, int prot,
   CHECK_NE(-1, (fd = open(&pkg->strings.p[obj->path], (obj->mode = mode))),
            "path=%`'s", &pkg->strings.p[obj->path]);
   CHECK_NE(-1, fstat(fd, &st));
-  CHECK_NE(MAP_FAILED, (obj->elf = mmap(NULL, (obj->size = st.st_size), prot,
-                                        flags, fd, 0)));
+  CHECK_NE(
+      MAP_FAILED,
+      (obj->elf = mmap(NULL, (obj->size = st.st_size), prot, flags, fd, 0)),
+      "path=%`'s", &pkg->strings.p[obj->path]);
   CHECK_NE(-1, close(fd));
   CHECK(IsElf64Binary(obj->elf, obj->size), "path=%`'s",
         &pkg->strings.p[obj->path]);