/* * shmcrash2 * * crashes! */ #include #include #include #include #include #include #include int main (int argc, char ** argv) { if (argc < 2) { fprintf(stderr, "%s: expected argument\n", argv[0]); return 1; } printf("(this should not crash; but the kernel should free the shm block)\n"); size_t size = 0x1000; volatile char * shm = (char *)syscall_shm_obtain(argv[1], &size); if (shm == NULL) { return 1; } char * args[] = {"/bin/echo", "exec'd to echo\n", NULL}; execve(args[0], args, NULL); return 5; }