// https://syzkaller.appspot.com/bug?id=52da8b3e29345da11271b7e521554d695ea3ac4d // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include __attribute__((noreturn)) static void doexit(int status) { volatile unsigned i; syscall(__NR_exit_group, status); for (i = 0;; i++) { } } #include #include #include #include #include #include #include #include #include #include const int kFailStatus = 67; const int kRetryStatus = 69; static void fail(const char* msg, ...) { int e = errno; va_list args; va_start(args, msg); vfprintf(stderr, msg, args); va_end(args); fprintf(stderr, " (errno %d)\n", e); doexit((e == ENOMEM || e == EAGAIN) ? kRetryStatus : kFailStatus); } #define BITMASK_LEN(type, bf_len) (type)((1ull << (bf_len)) - 1) #define BITMASK_LEN_OFF(type, bf_off, bf_len) \ (type)(BITMASK_LEN(type, (bf_len)) << (bf_off)) #define STORE_BY_BITMASK(type, addr, val, bf_off, bf_len) \ if ((bf_off) == 0 && (bf_len) == 0) { \ *(type*)(addr) = (type)(val); \ } else { \ type new_val = *(type*)(addr); \ new_val &= ~BITMASK_LEN_OFF(type, (bf_off), (bf_len)); \ new_val |= ((type)(val)&BITMASK_LEN(type, (bf_len))) << (bf_off); \ *(type*)(addr) = new_val; \ } struct csum_inet { uint32_t acc; }; static void csum_inet_init(struct csum_inet* csum) { csum->acc = 0; } static void csum_inet_update(struct csum_inet* csum, const uint8_t* data, size_t length) { if (length == 0) return; size_t i; for (i = 0; i < length - 1; i += 2) csum->acc += *(uint16_t*)&data[i]; if (length & 1) csum->acc += (uint16_t)data[length - 1]; while (csum->acc > 0xffff) csum->acc = (csum->acc & 0xffff) + (csum->acc >> 16); } static uint16_t csum_inet_digest(struct csum_inet* csum) { return ~csum->acc; } static __thread int skip_segv; static __thread jmp_buf segv_env; static void segv_handler(int sig, siginfo_t* info, void* uctx) { uintptr_t addr = (uintptr_t)info->si_addr; const uintptr_t prog_start = 1 << 20; const uintptr_t prog_end = 100 << 20; if (__atomic_load_n(&skip_segv, __ATOMIC_RELAXED) && (addr < prog_start || addr > prog_end)) { _longjmp(segv_env, 1); } doexit(sig); } static void install_segv_handler() { struct sigaction sa; memset(&sa, 0, sizeof(sa)); sa.sa_handler = SIG_IGN; syscall(SYS_rt_sigaction, 0x20, &sa, NULL, 8); syscall(SYS_rt_sigaction, 0x21, &sa, NULL, 8); memset(&sa, 0, sizeof(sa)); sa.sa_sigaction = segv_handler; sa.sa_flags = SA_NODEFER | SA_SIGINFO; sigaction(SIGSEGV, &sa, NULL); sigaction(SIGBUS, &sa, NULL); } #define NONFAILING(...) \ { \ __atomic_fetch_add(&skip_segv, 1, __ATOMIC_SEQ_CST); \ if (_setjmp(segv_env) == 0) { \ __VA_ARGS__; \ } \ __atomic_fetch_sub(&skip_segv, 1, __ATOMIC_SEQ_CST); \ } static void use_temporary_dir() { char tmpdir_template[] = "./syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) fail("failed to mkdtemp"); if (chmod(tmpdir, 0777)) fail("failed to chmod"); if (chdir(tmpdir)) fail("failed to chdir"); } long r[3]; void loop() { memset(r, -1, sizeof(r)); NONFAILING(*(uint8_t*)0x20368f2d = -1); NONFAILING(*(uint8_t*)0x20368f2e = -1); NONFAILING(*(uint8_t*)0x20368f2f = -1); NONFAILING(*(uint8_t*)0x20368f30 = -1); NONFAILING(*(uint8_t*)0x20368f31 = -1); NONFAILING(*(uint8_t*)0x20368f32 = -1); NONFAILING(*(uint8_t*)0x20368f33 = -1); NONFAILING(*(uint8_t*)0x20368f34 = -1); NONFAILING(*(uint8_t*)0x20368f35 = -1); NONFAILING(*(uint8_t*)0x20368f36 = -1); NONFAILING(*(uint8_t*)0x20368f37 = -1); NONFAILING(*(uint8_t*)0x20368f38 = -1); NONFAILING(*(uint16_t*)0x20368f39 = htobe16(0x86dd)); NONFAILING(STORE_BY_BITMASK(uint8_t, 0x20368f3b, 0, 0, 4)); NONFAILING(STORE_BY_BITMASK(uint8_t, 0x20368f3b, 6, 4, 4)); NONFAILING(memcpy((void*)0x20368f3c, "\x8b\xdf\x96", 3)); NONFAILING(*(uint16_t*)0x20368f3f = htobe16(8)); NONFAILING(*(uint8_t*)0x20368f41 = 0x11); NONFAILING(*(uint8_t*)0x20368f42 = 0); NONFAILING(*(uint8_t*)0x20368f43 = 0xfe); NONFAILING(*(uint8_t*)0x20368f44 = 0x80); NONFAILING(*(uint8_t*)0x20368f45 = 0); NONFAILING(*(uint8_t*)0x20368f46 = 0); NONFAILING(*(uint8_t*)0x20368f47 = 0); NONFAILING(*(uint8_t*)0x20368f48 = 0); NONFAILING(*(uint8_t*)0x20368f49 = 0); NONFAILING(*(uint8_t*)0x20368f4a = 0); NONFAILING(*(uint8_t*)0x20368f4b = 0); NONFAILING(*(uint8_t*)0x20368f4c = 0); NONFAILING(*(uint8_t*)0x20368f4d = 0); NONFAILING(*(uint8_t*)0x20368f4e = 0); NONFAILING(*(uint8_t*)0x20368f4f = 0); NONFAILING(*(uint8_t*)0x20368f50 = 0); NONFAILING(*(uint8_t*)0x20368f51 = 0); NONFAILING(*(uint8_t*)0x20368f52 = 0); NONFAILING(*(uint8_t*)0x20368f53 = 0xfe); NONFAILING(*(uint8_t*)0x20368f54 = 0x80); NONFAILING(*(uint8_t*)0x20368f55 = 0); NONFAILING(*(uint8_t*)0x20368f56 = 0); NONFAILING(*(uint8_t*)0x20368f57 = 0); NONFAILING(*(uint8_t*)0x20368f58 = 0); NONFAILING(*(uint8_t*)0x20368f59 = 0); NONFAILING(*(uint8_t*)0x20368f5a = 0); NONFAILING(*(uint8_t*)0x20368f5b = 0); NONFAILING(*(uint8_t*)0x20368f5c = 0); NONFAILING(*(uint8_t*)0x20368f5d = 0); NONFAILING(*(uint8_t*)0x20368f5e = 0); NONFAILING(*(uint8_t*)0x20368f5f = 0); NONFAILING(*(uint8_t*)0x20368f60 = 0); NONFAILING(*(uint8_t*)0x20368f61 = 0); NONFAILING(*(uint8_t*)0x20368f62 = 0xbb); NONFAILING(*(uint16_t*)0x20368f63 = 0); NONFAILING(*(uint16_t*)0x20368f65 = 0); NONFAILING(*(uint16_t*)0x20368f67 = htobe16(8)); NONFAILING(*(uint16_t*)0x20368f69 = 0); struct csum_inet csum_1; csum_inet_init(&csum_1); NONFAILING(csum_inet_update(&csum_1, (const uint8_t*)0x20368f43, 16)); NONFAILING(csum_inet_update(&csum_1, (const uint8_t*)0x20368f53, 16)); uint32_t csum_1_chunk_2 = 0x8000000; csum_inet_update(&csum_1, (const uint8_t*)&csum_1_chunk_2, 4); uint32_t csum_1_chunk_3 = 0x11000000; csum_inet_update(&csum_1, (const uint8_t*)&csum_1_chunk_3, 4); NONFAILING(csum_inet_update(&csum_1, (const uint8_t*)0x20368f63, 8)); NONFAILING(*(uint16_t*)0x20368f69 = csum_inet_digest(&csum_1)); r[0] = syscall(__NR_socket, 0xa, 2, 0); NONFAILING(memcpy((void*)0x2072baa8, "\x6d\x61\x6e\x67\x6c\x65\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 32)); NONFAILING(*(uint32_t*)0x2072bac8 = 0x1f); NONFAILING(*(uint32_t*)0x2072bacc = 6); NONFAILING(*(uint32_t*)0x2072bad0 = 0x4f8); NONFAILING(*(uint32_t*)0x2072bad4 = 0xd0); NONFAILING(*(uint32_t*)0x2072bad8 = 0x1a0); NONFAILING(*(uint32_t*)0x2072badc = 0x1a0); NONFAILING(*(uint32_t*)0x2072bae0 = 0); NONFAILING(*(uint32_t*)0x2072bae4 = 0); NONFAILING(*(uint32_t*)0x2072bae8 = 0x428); NONFAILING(*(uint32_t*)0x2072baec = 0x428); NONFAILING(*(uint32_t*)0x2072baf0 = 0x428); NONFAILING(*(uint32_t*)0x2072baf4 = 0x428); NONFAILING(*(uint32_t*)0x2072baf8 = 0x428); NONFAILING(*(uint32_t*)0x2072bafc = 6); NONFAILING(*(uint64_t*)0x2072bb00 = 0x20fe5000); NONFAILING(*(uint8_t*)0x2072bb08 = 0); NONFAILING(*(uint8_t*)0x2072bb09 = 0); NONFAILING(*(uint8_t*)0x2072bb0a = 0); NONFAILING(*(uint8_t*)0x2072bb0b = 0); NONFAILING(*(uint8_t*)0x2072bb0c = 0); NONFAILING(*(uint8_t*)0x2072bb0d = 0); NONFAILING(*(uint8_t*)0x2072bb0e = 0); NONFAILING(*(uint8_t*)0x2072bb0f = 0); NONFAILING(*(uint8_t*)0x2072bb10 = 0); NONFAILING(*(uint8_t*)0x2072bb11 = 0); NONFAILING(*(uint8_t*)0x2072bb12 = 0); NONFAILING(*(uint8_t*)0x2072bb13 = 0); NONFAILING(*(uint8_t*)0x2072bb14 = 0); NONFAILING(*(uint8_t*)0x2072bb15 = 0); NONFAILING(*(uint8_t*)0x2072bb16 = 0); NONFAILING(*(uint8_t*)0x2072bb17 = 0); NONFAILING(*(uint8_t*)0x2072bb18 = 0); NONFAILING(*(uint8_t*)0x2072bb19 = 0); NONFAILING(*(uint8_t*)0x2072bb1a = 0); NONFAILING(*(uint8_t*)0x2072bb1b = 0); NONFAILING(*(uint8_t*)0x2072bb1c = 0); NONFAILING(*(uint8_t*)0x2072bb1d = 0); NONFAILING(*(uint8_t*)0x2072bb1e = 0); NONFAILING(*(uint8_t*)0x2072bb1f = 0); NONFAILING(*(uint8_t*)0x2072bb20 = 0); NONFAILING(*(uint8_t*)0x2072bb21 = 0); NONFAILING(*(uint8_t*)0x2072bb22 = 0); NONFAILING(*(uint8_t*)0x2072bb23 = 0); NONFAILING(*(uint8_t*)0x2072bb24 = 0); NONFAILING(*(uint8_t*)0x2072bb25 = 0); NONFAILING(*(uint8_t*)0x2072bb26 = 0); NONFAILING(*(uint8_t*)0x2072bb27 = 0); NONFAILING(*(uint8_t*)0x2072bb28 = 0); NONFAILING(*(uint8_t*)0x2072bb29 = 0); NONFAILING(*(uint8_t*)0x2072bb2a = 0); NONFAILING(*(uint8_t*)0x2072bb2b = 0); NONFAILING(*(uint8_t*)0x2072bb2c = 0); NONFAILING(*(uint8_t*)0x2072bb2d = 0); NONFAILING(*(uint8_t*)0x2072bb2e = 0); NONFAILING(*(uint8_t*)0x2072bb2f = 0); NONFAILING(*(uint8_t*)0x2072bb30 = 0); NONFAILING(*(uint8_t*)0x2072bb31 = 0); NONFAILING(*(uint8_t*)0x2072bb32 = 0); NONFAILING(*(uint8_t*)0x2072bb33 = 0); NONFAILING(*(uint8_t*)0x2072bb34 = 0); NONFAILING(*(uint8_t*)0x2072bb35 = 0); NONFAILING(*(uint8_t*)0x2072bb36 = 0); NONFAILING(*(uint8_t*)0x2072bb37 = 0); NONFAILING(*(uint8_t*)0x2072bb38 = 0); NONFAILING(*(uint8_t*)0x2072bb39 = 0); NONFAILING(*(uint8_t*)0x2072bb3a = 0); NONFAILING(*(uint8_t*)0x2072bb3b = 0); NONFAILING(*(uint8_t*)0x2072bb3c = 0); NONFAILING(*(uint8_t*)0x2072bb3d = 0); NONFAILING(*(uint8_t*)0x2072bb3e = 0); NONFAILING(*(uint8_t*)0x2072bb3f = 0); NONFAILING(*(uint8_t*)0x2072bb40 = 0); NONFAILING(*(uint8_t*)0x2072bb41 = 0); NONFAILING(*(uint8_t*)0x2072bb42 = 0); NONFAILING(*(uint8_t*)0x2072bb43 = 0); NONFAILING(*(uint8_t*)0x2072bb44 = 0); NONFAILING(*(uint8_t*)0x2072bb45 = 0); NONFAILING(*(uint8_t*)0x2072bb46 = 0); NONFAILING(*(uint8_t*)0x2072bb47 = 0); NONFAILING(*(uint8_t*)0x2072bb48 = 0); NONFAILING(*(uint8_t*)0x2072bb49 = 0); NONFAILING(*(uint8_t*)0x2072bb4a = 0); NONFAILING(*(uint8_t*)0x2072bb4b = 0); NONFAILING(*(uint8_t*)0x2072bb4c = 0); NONFAILING(*(uint8_t*)0x2072bb4d = 0); NONFAILING(*(uint8_t*)0x2072bb4e = 0); NONFAILING(*(uint8_t*)0x2072bb4f = 0); NONFAILING(*(uint8_t*)0x2072bb50 = 0); NONFAILING(*(uint8_t*)0x2072bb51 = 0); NONFAILING(*(uint8_t*)0x2072bb52 = 0); NONFAILING(*(uint8_t*)0x2072bb53 = 0); NONFAILING(*(uint8_t*)0x2072bb54 = 0); NONFAILING(*(uint8_t*)0x2072bb55 = 0); NONFAILING(*(uint8_t*)0x2072bb56 = 0); NONFAILING(*(uint8_t*)0x2072bb57 = 0); NONFAILING(*(uint8_t*)0x2072bb58 = 0); NONFAILING(*(uint8_t*)0x2072bb59 = 0); NONFAILING(*(uint8_t*)0x2072bb5a = 0); NONFAILING(*(uint8_t*)0x2072bb5b = 0); NONFAILING(*(uint8_t*)0x2072bb5c = 0); NONFAILING(*(uint8_t*)0x2072bb5d = 0); NONFAILING(*(uint8_t*)0x2072bb5e = 0); NONFAILING(*(uint8_t*)0x2072bb5f = 0); NONFAILING(*(uint8_t*)0x2072bb60 = 0); NONFAILING(*(uint8_t*)0x2072bb61 = 0); NONFAILING(*(uint8_t*)0x2072bb62 = 0); NONFAILING(*(uint8_t*)0x2072bb63 = 0); NONFAILING(*(uint8_t*)0x2072bb64 = 0); NONFAILING(*(uint8_t*)0x2072bb65 = 0); NONFAILING(*(uint8_t*)0x2072bb66 = 0); NONFAILING(*(uint8_t*)0x2072bb67 = 0); NONFAILING(*(uint8_t*)0x2072bb68 = 0); NONFAILING(*(uint8_t*)0x2072bb69 = 0); NONFAILING(*(uint8_t*)0x2072bb6a = 0); NONFAILING(*(uint8_t*)0x2072bb6b = 0); NONFAILING(*(uint8_t*)0x2072bb6c = 0); NONFAILING(*(uint8_t*)0x2072bb6d = 0); NONFAILING(*(uint8_t*)0x2072bb6e = 0); NONFAILING(*(uint8_t*)0x2072bb6f = 0); NONFAILING(*(uint8_t*)0x2072bb70 = 0); NONFAILING(*(uint8_t*)0x2072bb71 = 0); NONFAILING(*(uint8_t*)0x2072bb72 = 0); NONFAILING(*(uint8_t*)0x2072bb73 = 0); NONFAILING(*(uint8_t*)0x2072bb74 = 0); NONFAILING(*(uint8_t*)0x2072bb75 = 0); NONFAILING(*(uint8_t*)0x2072bb76 = 0); NONFAILING(*(uint8_t*)0x2072bb77 = 0); NONFAILING(*(uint8_t*)0x2072bb78 = 0); NONFAILING(*(uint8_t*)0x2072bb79 = 0); NONFAILING(*(uint8_t*)0x2072bb7a = 0); NONFAILING(*(uint8_t*)0x2072bb7b = 0); NONFAILING(*(uint8_t*)0x2072bb7c = 0); NONFAILING(*(uint8_t*)0x2072bb7d = 0); NONFAILING(*(uint8_t*)0x2072bb7e = 0); NONFAILING(*(uint8_t*)0x2072bb7f = 0); NONFAILING(*(uint8_t*)0x2072bb80 = 0); NONFAILING(*(uint8_t*)0x2072bb81 = 0); NONFAILING(*(uint8_t*)0x2072bb82 = 0); NONFAILING(*(uint8_t*)0x2072bb83 = 0); NONFAILING(*(uint8_t*)0x2072bb84 = 0); NONFAILING(*(uint8_t*)0x2072bb85 = 0); NONFAILING(*(uint8_t*)0x2072bb86 = 0); NONFAILING(*(uint8_t*)0x2072bb87 = 0); NONFAILING(*(uint8_t*)0x2072bb88 = 0); NONFAILING(*(uint8_t*)0x2072bb89 = 0); NONFAILING(*(uint8_t*)0x2072bb8a = 0); NONFAILING(*(uint8_t*)0x2072bb8b = 0); NONFAILING(*(uint8_t*)0x2072bb8c = 0); NONFAILING(*(uint8_t*)0x2072bb8d = 0); NONFAILING(*(uint8_t*)0x2072bb8e = 0); NONFAILING(*(uint8_t*)0x2072bb8f = 0); NONFAILING(*(uint32_t*)0x2072bb90 = 0); NONFAILING(*(uint16_t*)0x2072bb94 = 0xa8); NONFAILING(*(uint16_t*)0x2072bb96 = 0xd0); NONFAILING(*(uint32_t*)0x2072bb98 = 0); NONFAILING(*(uint64_t*)0x2072bba0 = 0); NONFAILING(*(uint64_t*)0x2072bba8 = 0); NONFAILING(*(uint16_t*)0x2072bbb0 = 0x28); NONFAILING(memcpy((void*)0x2072bbb2, "\x44\x53\x43\x50\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00", 29)); NONFAILING(*(uint8_t*)0x2072bbcf = 0); NONFAILING(*(uint8_t*)0x2072bbd0 = 0x17); NONFAILING(*(uint8_t*)0x2072bbd8 = -1); NONFAILING(*(uint8_t*)0x2072bbd9 = 1); NONFAILING(*(uint8_t*)0x2072bbda = 0); NONFAILING(*(uint8_t*)0x2072bbdb = 0); NONFAILING(*(uint8_t*)0x2072bbdc = 0); NONFAILING(*(uint8_t*)0x2072bbdd = 0); NONFAILING(*(uint8_t*)0x2072bbde = 0); NONFAILING(*(uint8_t*)0x2072bbdf = 0); NONFAILING(*(uint8_t*)0x2072bbe0 = 0); NONFAILING(*(uint8_t*)0x2072bbe1 = 0); NONFAILING(*(uint8_t*)0x2072bbe2 = 0); NONFAILING(*(uint8_t*)0x2072bbe3 = 0); NONFAILING(*(uint8_t*)0x2072bbe4 = 0); NONFAILING(*(uint8_t*)0x2072bbe5 = 0); NONFAILING(*(uint8_t*)0x2072bbe6 = 0); NONFAILING(*(uint8_t*)0x2072bbe7 = 1); NONFAILING(*(uint8_t*)0x2072bbe8 = 0xfe); NONFAILING(*(uint8_t*)0x2072bbe9 = 0x80); NONFAILING(*(uint8_t*)0x2072bbea = 0); NONFAILING(*(uint8_t*)0x2072bbeb = 0); NONFAILING(*(uint8_t*)0x2072bbec = 0); NONFAILING(*(uint8_t*)0x2072bbed = 0); NONFAILING(*(uint8_t*)0x2072bbee = 0); NONFAILING(*(uint8_t*)0x2072bbef = 0); NONFAILING(*(uint8_t*)0x2072bbf0 = 0); NONFAILING(*(uint8_t*)0x2072bbf1 = 0); NONFAILING(*(uint8_t*)0x2072bbf2 = 0); NONFAILING(*(uint8_t*)0x2072bbf3 = 0); NONFAILING(*(uint8_t*)0x2072bbf4 = 0); NONFAILING(*(uint8_t*)0x2072bbf5 = 0); NONFAILING(*(uint8_t*)0x2072bbf6 = 0); NONFAILING(*(uint8_t*)0x2072bbf7 = 0xbb); NONFAILING(*(uint32_t*)0x2072bbf8 = htobe32(0)); NONFAILING(*(uint32_t*)0x2072bbfc = htobe32(0)); NONFAILING(*(uint32_t*)0x2072bc00 = htobe32(0)); NONFAILING(*(uint32_t*)0x2072bc04 = htobe32(0)); NONFAILING(*(uint32_t*)0x2072bc08 = htobe32(0)); NONFAILING(*(uint32_t*)0x2072bc0c = htobe32(0)); NONFAILING(*(uint32_t*)0x2072bc10 = htobe32(0)); NONFAILING(*(uint32_t*)0x2072bc14 = htobe32(0)); NONFAILING(*(uint8_t*)0x2072bc18 = 0x73); NONFAILING(*(uint8_t*)0x2072bc19 = 0x79); NONFAILING(*(uint8_t*)0x2072bc1a = 0x7a); NONFAILING(*(uint8_t*)0x2072bc1b = 0); NONFAILING(*(uint8_t*)0x2072bc1c = 0); NONFAILING(memcpy( (void*)0x2072bc28, "\x1d\x80\x29\x53\x1c\xda\xa6\xd7\xd1\xac\x1b\xae\xf2\x68\x39\x75", 16)); NONFAILING(*(uint8_t*)0x2072bc38 = 0); NONFAILING(*(uint8_t*)0x2072bc39 = 0); NONFAILING(*(uint8_t*)0x2072bc3a = 0); NONFAILING(*(uint8_t*)0x2072bc3b = 0); NONFAILING(*(uint8_t*)0x2072bc3c = 0); NONFAILING(*(uint8_t*)0x2072bc3d = 0); NONFAILING(*(uint8_t*)0x2072bc3e = 0); NONFAILING(*(uint8_t*)0x2072bc3f = 0); NONFAILING(*(uint8_t*)0x2072bc40 = 0); NONFAILING(*(uint8_t*)0x2072bc41 = 0); NONFAILING(*(uint8_t*)0x2072bc42 = 0); NONFAILING(*(uint8_t*)0x2072bc43 = 0); NONFAILING(*(uint8_t*)0x2072bc44 = 0); NONFAILING(*(uint8_t*)0x2072bc45 = 0); NONFAILING(*(uint8_t*)0x2072bc46 = 0); NONFAILING(*(uint8_t*)0x2072bc47 = 0); NONFAILING(*(uint8_t*)0x2072bc48 = 0); NONFAILING(*(uint8_t*)0x2072bc49 = 0); NONFAILING(*(uint8_t*)0x2072bc4a = 0); NONFAILING(*(uint8_t*)0x2072bc4b = 0); NONFAILING(*(uint8_t*)0x2072bc4c = 0); NONFAILING(*(uint8_t*)0x2072bc4d = 0); NONFAILING(*(uint8_t*)0x2072bc4e = 0); NONFAILING(*(uint8_t*)0x2072bc4f = 0); NONFAILING(*(uint8_t*)0x2072bc50 = 0); NONFAILING(*(uint8_t*)0x2072bc51 = 0); NONFAILING(*(uint8_t*)0x2072bc52 = 0); NONFAILING(*(uint8_t*)0x2072bc53 = 0); NONFAILING(*(uint8_t*)0x2072bc54 = 0); NONFAILING(*(uint8_t*)0x2072bc55 = 0); NONFAILING(*(uint8_t*)0x2072bc56 = 0); NONFAILING(*(uint8_t*)0x2072bc57 = 0); NONFAILING(*(uint16_t*)0x2072bc58 = 0); NONFAILING(*(uint8_t*)0x2072bc5a = 0); NONFAILING(*(uint8_t*)0x2072bc5b = 0); NONFAILING(*(uint8_t*)0x2072bc5c = 0); NONFAILING(*(uint32_t*)0x2072bc60 = 0); NONFAILING(*(uint16_t*)0x2072bc64 = 0xa8); NONFAILING(*(uint16_t*)0x2072bc66 = 0xd0); NONFAILING(*(uint32_t*)0x2072bc68 = 0); NONFAILING(*(uint64_t*)0x2072bc70 = 0); NONFAILING(*(uint64_t*)0x2072bc78 = 0); NONFAILING(*(uint16_t*)0x2072bc80 = 0x28); NONFAILING(memcpy((void*)0x2072bc82, "\x43\x48\x45\x43\x4b\x53\x55\x4d\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00", 29)); NONFAILING(*(uint8_t*)0x2072bc9f = 0); NONFAILING(*(uint8_t*)0x2072bca0 = 1); NONFAILING(*(uint8_t*)0x2072bca8 = 0); NONFAILING(*(uint8_t*)0x2072bca9 = 0); NONFAILING(*(uint8_t*)0x2072bcaa = 0); NONFAILING(*(uint8_t*)0x2072bcab = 0); NONFAILING(*(uint8_t*)0x2072bcac = 0); NONFAILING(*(uint8_t*)0x2072bcad = 0); NONFAILING(*(uint8_t*)0x2072bcae = 0); NONFAILING(*(uint8_t*)0x2072bcaf = 0); NONFAILING(*(uint8_t*)0x2072bcb0 = 0); NONFAILING(*(uint8_t*)0x2072bcb1 = 0); NONFAILING(*(uint8_t*)0x2072bcb2 = 0); NONFAILING(*(uint8_t*)0x2072bcb3 = 0); NONFAILING(*(uint8_t*)0x2072bcb4 = 0); NONFAILING(*(uint8_t*)0x2072bcb5 = 0); NONFAILING(*(uint8_t*)0x2072bcb6 = 0); NONFAILING(*(uint8_t*)0x2072bcb7 = 0); NONFAILING(*(uint8_t*)0x2072bcb8 = 0); NONFAILING(*(uint8_t*)0x2072bcb9 = 0); NONFAILING(*(uint8_t*)0x2072bcba = 0); NONFAILING(*(uint8_t*)0x2072bcbb = 0); NONFAILING(*(uint8_t*)0x2072bcbc = 0); NONFAILING(*(uint8_t*)0x2072bcbd = 0); NONFAILING(*(uint8_t*)0x2072bcbe = 0); NONFAILING(*(uint8_t*)0x2072bcbf = 0); NONFAILING(*(uint8_t*)0x2072bcc0 = 0); NONFAILING(*(uint8_t*)0x2072bcc1 = 0); NONFAILING(*(uint8_t*)0x2072bcc2 = 0); NONFAILING(*(uint8_t*)0x2072bcc3 = 0); NONFAILING(*(uint8_t*)0x2072bcc4 = 0); NONFAILING(*(uint8_t*)0x2072bcc5 = 0); NONFAILING(*(uint8_t*)0x2072bcc6 = 0); NONFAILING(*(uint8_t*)0x2072bcc7 = 0); NONFAILING(*(uint8_t*)0x2072bcc8 = 0); NONFAILING(*(uint8_t*)0x2072bcc9 = 0); NONFAILING(*(uint8_t*)0x2072bcca = 0); NONFAILING(*(uint8_t*)0x2072bccb = 0); NONFAILING(*(uint8_t*)0x2072bccc = 0); NONFAILING(*(uint8_t*)0x2072bccd = 0); NONFAILING(*(uint8_t*)0x2072bcce = 0); NONFAILING(*(uint8_t*)0x2072bccf = 0); NONFAILING(*(uint8_t*)0x2072bcd0 = 0); NONFAILING(*(uint8_t*)0x2072bcd1 = 0); NONFAILING(*(uint8_t*)0x2072bcd2 = 0); NONFAILING(*(uint8_t*)0x2072bcd3 = 0); NONFAILING(*(uint8_t*)0x2072bcd4 = 0); NONFAILING(*(uint8_t*)0x2072bcd5 = 0); NONFAILING(*(uint8_t*)0x2072bcd6 = 0); NONFAILING(*(uint8_t*)0x2072bcd7 = 0); NONFAILING(*(uint8_t*)0x2072bcd8 = 0); NONFAILING(*(uint8_t*)0x2072bcd9 = 0); NONFAILING(*(uint8_t*)0x2072bcda = 0); NONFAILING(*(uint8_t*)0x2072bcdb = 0); NONFAILING(*(uint8_t*)0x2072bcdc = 0); NONFAILING(*(uint8_t*)0x2072bcdd = 0); NONFAILING(*(uint8_t*)0x2072bcde = 0); NONFAILING(*(uint8_t*)0x2072bcdf = 0); NONFAILING(*(uint8_t*)0x2072bce0 = 0); NONFAILING(*(uint8_t*)0x2072bce1 = 0); NONFAILING(*(uint8_t*)0x2072bce2 = 0); NONFAILING(*(uint8_t*)0x2072bce3 = 0); NONFAILING(*(uint8_t*)0x2072bce4 = 0); NONFAILING(*(uint8_t*)0x2072bce5 = 0); NONFAILING(*(uint8_t*)0x2072bce6 = 0); NONFAILING(*(uint8_t*)0x2072bce7 = 0); NONFAILING(*(uint8_t*)0x2072bce8 = 0); NONFAILING(*(uint8_t*)0x2072bce9 = 0); NONFAILING(*(uint8_t*)0x2072bcea = 0); NONFAILING(*(uint8_t*)0x2072bceb = 0); NONFAILING(*(uint8_t*)0x2072bcec = 0); NONFAILING(*(uint8_t*)0x2072bced = 0); NONFAILING(*(uint8_t*)0x2072bcee = 0); NONFAILING(*(uint8_t*)0x2072bcef = 0); NONFAILING(*(uint8_t*)0x2072bcf0 = 0); NONFAILING(*(uint8_t*)0x2072bcf1 = 0); NONFAILING(*(uint8_t*)0x2072bcf2 = 0); NONFAILING(*(uint8_t*)0x2072bcf3 = 0); NONFAILING(*(uint8_t*)0x2072bcf4 = 0); NONFAILING(*(uint8_t*)0x2072bcf5 = 0); NONFAILING(*(uint8_t*)0x2072bcf6 = 0); NONFAILING(*(uint8_t*)0x2072bcf7 = 0); NONFAILING(*(uint8_t*)0x2072bcf8 = 0); NONFAILING(*(uint8_t*)0x2072bcf9 = 0); NONFAILING(*(uint8_t*)0x2072bcfa = 0); NONFAILING(*(uint8_t*)0x2072bcfb = 0); NONFAILING(*(uint8_t*)0x2072bcfc = 0); NONFAILING(*(uint8_t*)0x2072bcfd = 0); NONFAILING(*(uint8_t*)0x2072bcfe = 0); NONFAILING(*(uint8_t*)0x2072bcff = 0); NONFAILING(*(uint8_t*)0x2072bd00 = 0); NONFAILING(*(uint8_t*)0x2072bd01 = 0); NONFAILING(*(uint8_t*)0x2072bd02 = 0); NONFAILING(*(uint8_t*)0x2072bd03 = 0); NONFAILING(*(uint8_t*)0x2072bd04 = 0); NONFAILING(*(uint8_t*)0x2072bd05 = 0); NONFAILING(*(uint8_t*)0x2072bd06 = 0); NONFAILING(*(uint8_t*)0x2072bd07 = 0); NONFAILING(*(uint8_t*)0x2072bd08 = 0); NONFAILING(*(uint8_t*)0x2072bd09 = 0); NONFAILING(*(uint8_t*)0x2072bd0a = 0); NONFAILING(*(uint8_t*)0x2072bd0b = 0); NONFAILING(*(uint8_t*)0x2072bd0c = 0); NONFAILING(*(uint8_t*)0x2072bd0d = 0); NONFAILING(*(uint8_t*)0x2072bd0e = 0); NONFAILING(*(uint8_t*)0x2072bd0f = 0); NONFAILING(*(uint8_t*)0x2072bd10 = 0); NONFAILING(*(uint8_t*)0x2072bd11 = 0); NONFAILING(*(uint8_t*)0x2072bd12 = 0); NONFAILING(*(uint8_t*)0x2072bd13 = 0); NONFAILING(*(uint8_t*)0x2072bd14 = 0); NONFAILING(*(uint8_t*)0x2072bd15 = 0); NONFAILING(*(uint8_t*)0x2072bd16 = 0); NONFAILING(*(uint8_t*)0x2072bd17 = 0); NONFAILING(*(uint8_t*)0x2072bd18 = 0); NONFAILING(*(uint8_t*)0x2072bd19 = 0); NONFAILING(*(uint8_t*)0x2072bd1a = 0); NONFAILING(*(uint8_t*)0x2072bd1b = 0); NONFAILING(*(uint8_t*)0x2072bd1c = 0); NONFAILING(*(uint8_t*)0x2072bd1d = 0); NONFAILING(*(uint8_t*)0x2072bd1e = 0); NONFAILING(*(uint8_t*)0x2072bd1f = 0); NONFAILING(*(uint8_t*)0x2072bd20 = 0); NONFAILING(*(uint8_t*)0x2072bd21 = 0); NONFAILING(*(uint8_t*)0x2072bd22 = 0); NONFAILING(*(uint8_t*)0x2072bd23 = 0); NONFAILING(*(uint8_t*)0x2072bd24 = 0); NONFAILING(*(uint8_t*)0x2072bd25 = 0); NONFAILING(*(uint8_t*)0x2072bd26 = 0); NONFAILING(*(uint8_t*)0x2072bd27 = 0); NONFAILING(*(uint8_t*)0x2072bd28 = 0); NONFAILING(*(uint8_t*)0x2072bd29 = 0); NONFAILING(*(uint8_t*)0x2072bd2a = 0); NONFAILING(*(uint8_t*)0x2072bd2b = 0); NONFAILING(*(uint8_t*)0x2072bd2c = 0); NONFAILING(*(uint8_t*)0x2072bd2d = 0); NONFAILING(*(uint8_t*)0x2072bd2e = 0); NONFAILING(*(uint8_t*)0x2072bd2f = 0); NONFAILING(*(uint32_t*)0x2072bd30 = 0); NONFAILING(*(uint16_t*)0x2072bd34 = 0xa8); NONFAILING(*(uint16_t*)0x2072bd36 = 0xe8); NONFAILING(*(uint32_t*)0x2072bd38 = 0); NONFAILING(*(uint64_t*)0x2072bd40 = 0); NONFAILING(*(uint64_t*)0x2072bd48 = 0); NONFAILING(*(uint16_t*)0x2072bd50 = 0x40); NONFAILING(memcpy((void*)0x2072bd52, "\x52\x41\x54\x45\x45\x53\x54\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00", 29)); NONFAILING(*(uint8_t*)0x2072bd6f = 0); NONFAILING(memcpy( (void*)0x2072bd70, "\x73\x79\x7a\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16)); NONFAILING(*(uint8_t*)0x2072bd80 = 0); NONFAILING(*(uint8_t*)0x2072bd81 = 0); NONFAILING(*(uint64_t*)0x2072bd88 = 0); NONFAILING(*(uint8_t*)0x2072bd90 = 0); NONFAILING(*(uint8_t*)0x2072bd91 = 0); NONFAILING(*(uint8_t*)0x2072bd92 = 0); NONFAILING(*(uint8_t*)0x2072bd93 = 0); NONFAILING(*(uint8_t*)0x2072bd94 = 0); NONFAILING(*(uint8_t*)0x2072bd95 = 0); NONFAILING(*(uint8_t*)0x2072bd96 = 0); NONFAILING(*(uint8_t*)0x2072bd97 = 0); NONFAILING(*(uint8_t*)0x2072bd98 = 0); NONFAILING(*(uint8_t*)0x2072bd99 = 0); NONFAILING(*(uint8_t*)0x2072bd9a = 0); NONFAILING(*(uint8_t*)0x2072bd9b = 0); NONFAILING(*(uint8_t*)0x2072bd9c = 0); NONFAILING(*(uint8_t*)0x2072bd9d = 0); NONFAILING(*(uint8_t*)0x2072bd9e = 0); NONFAILING(*(uint8_t*)0x2072bd9f = 0); NONFAILING(*(uint8_t*)0x2072bda0 = 0); NONFAILING(*(uint8_t*)0x2072bda1 = 0); NONFAILING(*(uint8_t*)0x2072bda2 = 0); NONFAILING(*(uint8_t*)0x2072bda3 = 0); NONFAILING(*(uint8_t*)0x2072bda4 = 0); NONFAILING(*(uint8_t*)0x2072bda5 = 0); NONFAILING(*(uint8_t*)0x2072bda6 = 0); NONFAILING(*(uint8_t*)0x2072bda7 = 0); NONFAILING(*(uint8_t*)0x2072bda8 = 0); NONFAILING(*(uint8_t*)0x2072bda9 = 0); NONFAILING(*(uint8_t*)0x2072bdaa = 0); NONFAILING(*(uint8_t*)0x2072bdab = 0); NONFAILING(*(uint8_t*)0x2072bdac = 0); NONFAILING(*(uint8_t*)0x2072bdad = 0); NONFAILING(*(uint8_t*)0x2072bdae = 0); NONFAILING(*(uint8_t*)0x2072bdaf = 0); NONFAILING(*(uint8_t*)0x2072bdb0 = 0); NONFAILING(*(uint8_t*)0x2072bdb1 = 0); NONFAILING(*(uint8_t*)0x2072bdb2 = 0); NONFAILING(*(uint8_t*)0x2072bdb3 = 0); NONFAILING(*(uint8_t*)0x2072bdb4 = 0); NONFAILING(*(uint8_t*)0x2072bdb5 = 0); NONFAILING(*(uint8_t*)0x2072bdb6 = 0); NONFAILING(*(uint8_t*)0x2072bdb7 = 0); NONFAILING(*(uint8_t*)0x2072bdb8 = 0); NONFAILING(*(uint8_t*)0x2072bdb9 = 0); NONFAILING(*(uint8_t*)0x2072bdba = 0); NONFAILING(*(uint8_t*)0x2072bdbb = 0); NONFAILING(*(uint8_t*)0x2072bdbc = 0); NONFAILING(*(uint8_t*)0x2072bdbd = 0); NONFAILING(*(uint8_t*)0x2072bdbe = 0); NONFAILING(*(uint8_t*)0x2072bdbf = 0); NONFAILING(*(uint8_t*)0x2072bdc0 = 0); NONFAILING(*(uint8_t*)0x2072bdc1 = 0); NONFAILING(*(uint8_t*)0x2072bdc2 = 0); NONFAILING(*(uint8_t*)0x2072bdc3 = 0); NONFAILING(*(uint8_t*)0x2072bdc4 = 0); NONFAILING(*(uint8_t*)0x2072bdc5 = 0); NONFAILING(*(uint8_t*)0x2072bdc6 = 0); NONFAILING(*(uint8_t*)0x2072bdc7 = 0); NONFAILING(*(uint8_t*)0x2072bdc8 = 0); NONFAILING(*(uint8_t*)0x2072bdc9 = 0); NONFAILING(*(uint8_t*)0x2072bdca = 0); NONFAILING(*(uint8_t*)0x2072bdcb = 0); NONFAILING(*(uint8_t*)0x2072bdcc = 0); NONFAILING(*(uint8_t*)0x2072bdcd = 0); NONFAILING(*(uint8_t*)0x2072bdce = 0); NONFAILING(*(uint8_t*)0x2072bdcf = 0); NONFAILING(*(uint8_t*)0x2072bdd0 = 0); NONFAILING(*(uint8_t*)0x2072bdd1 = 0); NONFAILING(*(uint8_t*)0x2072bdd2 = 0); NONFAILING(*(uint8_t*)0x2072bdd3 = 0); NONFAILING(*(uint8_t*)0x2072bdd4 = 0); NONFAILING(*(uint8_t*)0x2072bdd5 = 0); NONFAILING(*(uint8_t*)0x2072bdd6 = 0); NONFAILING(*(uint8_t*)0x2072bdd7 = 0); NONFAILING(*(uint8_t*)0x2072bdd8 = 0); NONFAILING(*(uint8_t*)0x2072bdd9 = 0); NONFAILING(*(uint8_t*)0x2072bdda = 0); NONFAILING(*(uint8_t*)0x2072bddb = 0); NONFAILING(*(uint8_t*)0x2072bddc = 0); NONFAILING(*(uint8_t*)0x2072bddd = 0); NONFAILING(*(uint8_t*)0x2072bdde = 0); NONFAILING(*(uint8_t*)0x2072bddf = 0); NONFAILING(*(uint8_t*)0x2072bde0 = 0); NONFAILING(*(uint8_t*)0x2072bde1 = 0); NONFAILING(*(uint8_t*)0x2072bde2 = 0); NONFAILING(*(uint8_t*)0x2072bde3 = 0); NONFAILING(*(uint8_t*)0x2072bde4 = 0); NONFAILING(*(uint8_t*)0x2072bde5 = 0); NONFAILING(*(uint8_t*)0x2072bde6 = 0); NONFAILING(*(uint8_t*)0x2072bde7 = 0); NONFAILING(*(uint8_t*)0x2072bde8 = 0); NONFAILING(*(uint8_t*)0x2072bde9 = 0); NONFAILING(*(uint8_t*)0x2072bdea = 0); NONFAILING(*(uint8_t*)0x2072bdeb = 0); NONFAILING(*(uint8_t*)0x2072bdec = 0); NONFAILING(*(uint8_t*)0x2072bded = 0); NONFAILING(*(uint8_t*)0x2072bdee = 0); NONFAILING(*(uint8_t*)0x2072bdef = 0); NONFAILING(*(uint8_t*)0x2072bdf0 = 0); NONFAILING(*(uint8_t*)0x2072bdf1 = 0); NONFAILING(*(uint8_t*)0x2072bdf2 = 0); NONFAILING(*(uint8_t*)0x2072bdf3 = 0); NONFAILING(*(uint8_t*)0x2072bdf4 = 0); NONFAILING(*(uint8_t*)0x2072bdf5 = 0); NONFAILING(*(uint8_t*)0x2072bdf6 = 0); NONFAILING(*(uint8_t*)0x2072bdf7 = 0); NONFAILING(*(uint8_t*)0x2072bdf8 = 0); NONFAILING(*(uint8_t*)0x2072bdf9 = 0); NONFAILING(*(uint8_t*)0x2072bdfa = 0); NONFAILING(*(uint8_t*)0x2072bdfb = 0); NONFAILING(*(uint8_t*)0x2072bdfc = 0); NONFAILING(*(uint8_t*)0x2072bdfd = 0); NONFAILING(*(uint8_t*)0x2072bdfe = 0); NONFAILING(*(uint8_t*)0x2072bdff = 0); NONFAILING(*(uint8_t*)0x2072be00 = 0); NONFAILING(*(uint8_t*)0x2072be01 = 0); NONFAILING(*(uint8_t*)0x2072be02 = 0); NONFAILING(*(uint8_t*)0x2072be03 = 0); NONFAILING(*(uint8_t*)0x2072be04 = 0); NONFAILING(*(uint8_t*)0x2072be05 = 0); NONFAILING(*(uint8_t*)0x2072be06 = 0); NONFAILING(*(uint8_t*)0x2072be07 = 0); NONFAILING(*(uint8_t*)0x2072be08 = 0); NONFAILING(*(uint8_t*)0x2072be09 = 0); NONFAILING(*(uint8_t*)0x2072be0a = 0); NONFAILING(*(uint8_t*)0x2072be0b = 0); NONFAILING(*(uint8_t*)0x2072be0c = 0); NONFAILING(*(uint8_t*)0x2072be0d = 0); NONFAILING(*(uint8_t*)0x2072be0e = 0); NONFAILING(*(uint8_t*)0x2072be0f = 0); NONFAILING(*(uint8_t*)0x2072be10 = 0); NONFAILING(*(uint8_t*)0x2072be11 = 0); NONFAILING(*(uint8_t*)0x2072be12 = 0); NONFAILING(*(uint8_t*)0x2072be13 = 0); NONFAILING(*(uint8_t*)0x2072be14 = 0); NONFAILING(*(uint8_t*)0x2072be15 = 0); NONFAILING(*(uint8_t*)0x2072be16 = 0); NONFAILING(*(uint8_t*)0x2072be17 = 0); NONFAILING(*(uint32_t*)0x2072be18 = 0); NONFAILING(*(uint16_t*)0x2072be1c = 0xa8); NONFAILING(*(uint16_t*)0x2072be1e = 0xd0); NONFAILING(*(uint32_t*)0x2072be20 = 0); NONFAILING(*(uint64_t*)0x2072be28 = 0); NONFAILING(*(uint64_t*)0x2072be30 = 0); NONFAILING(*(uint16_t*)0x2072be38 = 0x28); NONFAILING(memcpy((void*)0x2072be3a, "\x48\x4c\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00", 29)); NONFAILING(*(uint8_t*)0x2072be57 = 0); NONFAILING(*(uint8_t*)0x2072be58 = 0); NONFAILING(*(uint8_t*)0x2072be59 = 0); NONFAILING(*(uint8_t*)0x2072be60 = 0); NONFAILING(*(uint8_t*)0x2072be61 = 0); NONFAILING(*(uint8_t*)0x2072be62 = 0); NONFAILING(*(uint8_t*)0x2072be63 = 0); NONFAILING(*(uint8_t*)0x2072be64 = 0); NONFAILING(*(uint8_t*)0x2072be65 = 0); NONFAILING(*(uint8_t*)0x2072be66 = 0); NONFAILING(*(uint8_t*)0x2072be67 = 0); NONFAILING(*(uint8_t*)0x2072be68 = 0); NONFAILING(*(uint8_t*)0x2072be69 = 0); NONFAILING(*(uint8_t*)0x2072be6a = 0); NONFAILING(*(uint8_t*)0x2072be6b = 0); NONFAILING(*(uint8_t*)0x2072be6c = 0); NONFAILING(*(uint8_t*)0x2072be6d = 0); NONFAILING(*(uint8_t*)0x2072be6e = 0); NONFAILING(*(uint8_t*)0x2072be6f = 0); NONFAILING(*(uint8_t*)0x2072be70 = 0); NONFAILING(*(uint8_t*)0x2072be71 = 0); NONFAILING(*(uint8_t*)0x2072be72 = 0); NONFAILING(*(uint8_t*)0x2072be73 = 0); NONFAILING(*(uint8_t*)0x2072be74 = 0); NONFAILING(*(uint8_t*)0x2072be75 = 0); NONFAILING(*(uint8_t*)0x2072be76 = 0); NONFAILING(*(uint8_t*)0x2072be77 = 0); NONFAILING(*(uint8_t*)0x2072be78 = 0); NONFAILING(*(uint8_t*)0x2072be79 = 0); NONFAILING(*(uint8_t*)0x2072be7a = 0); NONFAILING(*(uint8_t*)0x2072be7b = 0); NONFAILING(*(uint8_t*)0x2072be7c = 0); NONFAILING(*(uint8_t*)0x2072be7d = 0); NONFAILING(*(uint8_t*)0x2072be7e = 0); NONFAILING(*(uint8_t*)0x2072be7f = 0); NONFAILING(*(uint8_t*)0x2072be80 = 0); NONFAILING(*(uint8_t*)0x2072be81 = 0); NONFAILING(*(uint8_t*)0x2072be82 = 0); NONFAILING(*(uint8_t*)0x2072be83 = 0); NONFAILING(*(uint8_t*)0x2072be84 = 0); NONFAILING(*(uint8_t*)0x2072be85 = 0); NONFAILING(*(uint8_t*)0x2072be86 = 0); NONFAILING(*(uint8_t*)0x2072be87 = 0); NONFAILING(*(uint8_t*)0x2072be88 = 0); NONFAILING(*(uint8_t*)0x2072be89 = 0); NONFAILING(*(uint8_t*)0x2072be8a = 0); NONFAILING(*(uint8_t*)0x2072be8b = 0); NONFAILING(*(uint8_t*)0x2072be8c = 0); NONFAILING(*(uint8_t*)0x2072be8d = 0); NONFAILING(*(uint8_t*)0x2072be8e = 0); NONFAILING(*(uint8_t*)0x2072be8f = 0); NONFAILING(*(uint8_t*)0x2072be90 = 0); NONFAILING(*(uint8_t*)0x2072be91 = 0); NONFAILING(*(uint8_t*)0x2072be92 = 0); NONFAILING(*(uint8_t*)0x2072be93 = 0); NONFAILING(*(uint8_t*)0x2072be94 = 0); NONFAILING(*(uint8_t*)0x2072be95 = 0); NONFAILING(*(uint8_t*)0x2072be96 = 0); NONFAILING(*(uint8_t*)0x2072be97 = 0); NONFAILING(*(uint8_t*)0x2072be98 = 0); NONFAILING(*(uint8_t*)0x2072be99 = 0); NONFAILING(*(uint8_t*)0x2072be9a = 0); NONFAILING(*(uint8_t*)0x2072be9b = 0); NONFAILING(*(uint8_t*)0x2072be9c = 0); NONFAILING(*(uint8_t*)0x2072be9d = 0); NONFAILING(*(uint8_t*)0x2072be9e = 0); NONFAILING(*(uint8_t*)0x2072be9f = 0); NONFAILING(*(uint8_t*)0x2072bea0 = 0); NONFAILING(*(uint8_t*)0x2072bea1 = 0); NONFAILING(*(uint8_t*)0x2072bea2 = 0); NONFAILING(*(uint8_t*)0x2072bea3 = 0); NONFAILING(*(uint8_t*)0x2072bea4 = 0); NONFAILING(*(uint8_t*)0x2072bea5 = 0); NONFAILING(*(uint8_t*)0x2072bea6 = 0); NONFAILING(*(uint8_t*)0x2072bea7 = 0); NONFAILING(*(uint8_t*)0x2072bea8 = 0); NONFAILING(*(uint8_t*)0x2072bea9 = 0); NONFAILING(*(uint8_t*)0x2072beaa = 0); NONFAILING(*(uint8_t*)0x2072beab = 0); NONFAILING(*(uint8_t*)0x2072beac = 0); NONFAILING(*(uint8_t*)0x2072bead = 0); NONFAILING(*(uint8_t*)0x2072beae = 0); NONFAILING(*(uint8_t*)0x2072beaf = 0); NONFAILING(*(uint8_t*)0x2072beb0 = 0); NONFAILING(*(uint8_t*)0x2072beb1 = 0); NONFAILING(*(uint8_t*)0x2072beb2 = 0); NONFAILING(*(uint8_t*)0x2072beb3 = 0); NONFAILING(*(uint8_t*)0x2072beb4 = 0); NONFAILING(*(uint8_t*)0x2072beb5 = 0); NONFAILING(*(uint8_t*)0x2072beb6 = 0); NONFAILING(*(uint8_t*)0x2072beb7 = 0); NONFAILING(*(uint8_t*)0x2072beb8 = 0); NONFAILING(*(uint8_t*)0x2072beb9 = 0); NONFAILING(*(uint8_t*)0x2072beba = 0); NONFAILING(*(uint8_t*)0x2072bebb = 0); NONFAILING(*(uint8_t*)0x2072bebc = 0); NONFAILING(*(uint8_t*)0x2072bebd = 0); NONFAILING(*(uint8_t*)0x2072bebe = 0); NONFAILING(*(uint8_t*)0x2072bebf = 0); NONFAILING(*(uint8_t*)0x2072bec0 = 0); NONFAILING(*(uint8_t*)0x2072bec1 = 0); NONFAILING(*(uint8_t*)0x2072bec2 = 0); NONFAILING(*(uint8_t*)0x2072bec3 = 0); NONFAILING(*(uint8_t*)0x2072bec4 = 0); NONFAILING(*(uint8_t*)0x2072bec5 = 0); NONFAILING(*(uint8_t*)0x2072bec6 = 0); NONFAILING(*(uint8_t*)0x2072bec7 = 0); NONFAILING(*(uint8_t*)0x2072bec8 = 0); NONFAILING(*(uint8_t*)0x2072bec9 = 0); NONFAILING(*(uint8_t*)0x2072beca = 0); NONFAILING(*(uint8_t*)0x2072becb = 0); NONFAILING(*(uint8_t*)0x2072becc = 0); NONFAILING(*(uint8_t*)0x2072becd = 0); NONFAILING(*(uint8_t*)0x2072bece = 0); NONFAILING(*(uint8_t*)0x2072becf = 0); NONFAILING(*(uint8_t*)0x2072bed0 = 0); NONFAILING(*(uint8_t*)0x2072bed1 = 0); NONFAILING(*(uint8_t*)0x2072bed2 = 0); NONFAILING(*(uint8_t*)0x2072bed3 = 0); NONFAILING(*(uint8_t*)0x2072bed4 = 0); NONFAILING(*(uint8_t*)0x2072bed5 = 0); NONFAILING(*(uint8_t*)0x2072bed6 = 0); NONFAILING(*(uint8_t*)0x2072bed7 = 0); NONFAILING(*(uint8_t*)0x2072bed8 = 0); NONFAILING(*(uint8_t*)0x2072bed9 = 0); NONFAILING(*(uint8_t*)0x2072beda = 0); NONFAILING(*(uint8_t*)0x2072bedb = 0); NONFAILING(*(uint8_t*)0x2072bedc = 0); NONFAILING(*(uint8_t*)0x2072bedd = 0); NONFAILING(*(uint8_t*)0x2072bede = 0); NONFAILING(*(uint8_t*)0x2072bedf = 0); NONFAILING(*(uint8_t*)0x2072bee0 = 0); NONFAILING(*(uint8_t*)0x2072bee1 = 0); NONFAILING(*(uint8_t*)0x2072bee2 = 0); NONFAILING(*(uint8_t*)0x2072bee3 = 0); NONFAILING(*(uint8_t*)0x2072bee4 = 0); NONFAILING(*(uint8_t*)0x2072bee5 = 0); NONFAILING(*(uint8_t*)0x2072bee6 = 0); NONFAILING(*(uint8_t*)0x2072bee7 = 0); NONFAILING(*(uint32_t*)0x2072bee8 = 0); NONFAILING(*(uint16_t*)0x2072beec = 0xa8); NONFAILING(*(uint16_t*)0x2072beee = 0xd0); NONFAILING(*(uint32_t*)0x2072bef0 = 0); NONFAILING(*(uint64_t*)0x2072bef8 = 0); NONFAILING(*(uint64_t*)0x2072bf00 = 0); NONFAILING(*(uint16_t*)0x2072bf08 = 0x28); NONFAILING(memcpy((void*)0x2072bf0a, "\x43\x48\x45\x43\x4b\x53\x55\x4d\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00", 29)); NONFAILING(*(uint8_t*)0x2072bf27 = 0); NONFAILING(*(uint8_t*)0x2072bf28 = 1); NONFAILING(*(uint8_t*)0x2072bf30 = 0); NONFAILING(*(uint8_t*)0x2072bf31 = 0); NONFAILING(*(uint8_t*)0x2072bf32 = 0); NONFAILING(*(uint8_t*)0x2072bf33 = 0); NONFAILING(*(uint8_t*)0x2072bf34 = 0); NONFAILING(*(uint8_t*)0x2072bf35 = 0); NONFAILING(*(uint8_t*)0x2072bf36 = 0); NONFAILING(*(uint8_t*)0x2072bf37 = 0); NONFAILING(*(uint8_t*)0x2072bf38 = 0); NONFAILING(*(uint8_t*)0x2072bf39 = 0); NONFAILING(*(uint8_t*)0x2072bf3a = 0); NONFAILING(*(uint8_t*)0x2072bf3b = 0); NONFAILING(*(uint8_t*)0x2072bf3c = 0); NONFAILING(*(uint8_t*)0x2072bf3d = 0); NONFAILING(*(uint8_t*)0x2072bf3e = 0); NONFAILING(*(uint8_t*)0x2072bf3f = 0); NONFAILING(*(uint8_t*)0x2072bf40 = 0); NONFAILING(*(uint8_t*)0x2072bf41 = 0); NONFAILING(*(uint8_t*)0x2072bf42 = 0); NONFAILING(*(uint8_t*)0x2072bf43 = 0); NONFAILING(*(uint8_t*)0x2072bf44 = 0); NONFAILING(*(uint8_t*)0x2072bf45 = 0); NONFAILING(*(uint8_t*)0x2072bf46 = 0); NONFAILING(*(uint8_t*)0x2072bf47 = 0); NONFAILING(*(uint8_t*)0x2072bf48 = 0); NONFAILING(*(uint8_t*)0x2072bf49 = 0); NONFAILING(*(uint8_t*)0x2072bf4a = 0); NONFAILING(*(uint8_t*)0x2072bf4b = 0); NONFAILING(*(uint8_t*)0x2072bf4c = 0); NONFAILING(*(uint8_t*)0x2072bf4d = 0); NONFAILING(*(uint8_t*)0x2072bf4e = 0); NONFAILING(*(uint8_t*)0x2072bf4f = 0); NONFAILING(*(uint8_t*)0x2072bf50 = 0); NONFAILING(*(uint8_t*)0x2072bf51 = 0); NONFAILING(*(uint8_t*)0x2072bf52 = 0); NONFAILING(*(uint8_t*)0x2072bf53 = 0); NONFAILING(*(uint8_t*)0x2072bf54 = 0); NONFAILING(*(uint8_t*)0x2072bf55 = 0); NONFAILING(*(uint8_t*)0x2072bf56 = 0); NONFAILING(*(uint8_t*)0x2072bf57 = 0); NONFAILING(*(uint8_t*)0x2072bf58 = 0); NONFAILING(*(uint8_t*)0x2072bf59 = 0); NONFAILING(*(uint8_t*)0x2072bf5a = 0); NONFAILING(*(uint8_t*)0x2072bf5b = 0); NONFAILING(*(uint8_t*)0x2072bf5c = 0); NONFAILING(*(uint8_t*)0x2072bf5d = 0); NONFAILING(*(uint8_t*)0x2072bf5e = 0); NONFAILING(*(uint8_t*)0x2072bf5f = 0); NONFAILING(*(uint8_t*)0x2072bf60 = 0); NONFAILING(*(uint8_t*)0x2072bf61 = 0); NONFAILING(*(uint8_t*)0x2072bf62 = 0); NONFAILING(*(uint8_t*)0x2072bf63 = 0); NONFAILING(*(uint8_t*)0x2072bf64 = 0); NONFAILING(*(uint8_t*)0x2072bf65 = 0); NONFAILING(*(uint8_t*)0x2072bf66 = 0); NONFAILING(*(uint8_t*)0x2072bf67 = 0); NONFAILING(*(uint8_t*)0x2072bf68 = 0); NONFAILING(*(uint8_t*)0x2072bf69 = 0); NONFAILING(*(uint8_t*)0x2072bf6a = 0); NONFAILING(*(uint8_t*)0x2072bf6b = 0); NONFAILING(*(uint8_t*)0x2072bf6c = 0); NONFAILING(*(uint8_t*)0x2072bf6d = 0); NONFAILING(*(uint8_t*)0x2072bf6e = 0); NONFAILING(*(uint8_t*)0x2072bf6f = 0); NONFAILING(*(uint8_t*)0x2072bf70 = 0); NONFAILING(*(uint8_t*)0x2072bf71 = 0); NONFAILING(*(uint8_t*)0x2072bf72 = 0); NONFAILING(*(uint8_t*)0x2072bf73 = 0); NONFAILING(*(uint8_t*)0x2072bf74 = 0); NONFAILING(*(uint8_t*)0x2072bf75 = 0); NONFAILING(*(uint8_t*)0x2072bf76 = 0); NONFAILING(*(uint8_t*)0x2072bf77 = 0); NONFAILING(*(uint8_t*)0x2072bf78 = 0); NONFAILING(*(uint8_t*)0x2072bf79 = 0); NONFAILING(*(uint8_t*)0x2072bf7a = 0); NONFAILING(*(uint8_t*)0x2072bf7b = 0); NONFAILING(*(uint8_t*)0x2072bf7c = 0); NONFAILING(*(uint8_t*)0x2072bf7d = 0); NONFAILING(*(uint8_t*)0x2072bf7e = 0); NONFAILING(*(uint8_t*)0x2072bf7f = 0); NONFAILING(*(uint8_t*)0x2072bf80 = 0); NONFAILING(*(uint8_t*)0x2072bf81 = 0); NONFAILING(*(uint8_t*)0x2072bf82 = 0); NONFAILING(*(uint8_t*)0x2072bf83 = 0); NONFAILING(*(uint8_t*)0x2072bf84 = 0); NONFAILING(*(uint8_t*)0x2072bf85 = 0); NONFAILING(*(uint8_t*)0x2072bf86 = 0); NONFAILING(*(uint8_t*)0x2072bf87 = 0); NONFAILING(*(uint8_t*)0x2072bf88 = 0); NONFAILING(*(uint8_t*)0x2072bf89 = 0); NONFAILING(*(uint8_t*)0x2072bf8a = 0); NONFAILING(*(uint8_t*)0x2072bf8b = 0); NONFAILING(*(uint8_t*)0x2072bf8c = 0); NONFAILING(*(uint8_t*)0x2072bf8d = 0); NONFAILING(*(uint8_t*)0x2072bf8e = 0); NONFAILING(*(uint8_t*)0x2072bf8f = 0); NONFAILING(*(uint8_t*)0x2072bf90 = 0); NONFAILING(*(uint8_t*)0x2072bf91 = 0); NONFAILING(*(uint8_t*)0x2072bf92 = 0); NONFAILING(*(uint8_t*)0x2072bf93 = 0); NONFAILING(*(uint8_t*)0x2072bf94 = 0); NONFAILING(*(uint8_t*)0x2072bf95 = 0); NONFAILING(*(uint8_t*)0x2072bf96 = 0); NONFAILING(*(uint8_t*)0x2072bf97 = 0); NONFAILING(*(uint8_t*)0x2072bf98 = 0); NONFAILING(*(uint8_t*)0x2072bf99 = 0); NONFAILING(*(uint8_t*)0x2072bf9a = 0); NONFAILING(*(uint8_t*)0x2072bf9b = 0); NONFAILING(*(uint8_t*)0x2072bf9c = 0); NONFAILING(*(uint8_t*)0x2072bf9d = 0); NONFAILING(*(uint8_t*)0x2072bf9e = 0); NONFAILING(*(uint8_t*)0x2072bf9f = 0); NONFAILING(*(uint8_t*)0x2072bfa0 = 0); NONFAILING(*(uint8_t*)0x2072bfa1 = 0); NONFAILING(*(uint8_t*)0x2072bfa2 = 0); NONFAILING(*(uint8_t*)0x2072bfa3 = 0); NONFAILING(*(uint8_t*)0x2072bfa4 = 0); NONFAILING(*(uint8_t*)0x2072bfa5 = 0); NONFAILING(*(uint8_t*)0x2072bfa6 = 0); NONFAILING(*(uint8_t*)0x2072bfa7 = 0); NONFAILING(*(uint8_t*)0x2072bfa8 = 0); NONFAILING(*(uint8_t*)0x2072bfa9 = 0); NONFAILING(*(uint8_t*)0x2072bfaa = 0); NONFAILING(*(uint8_t*)0x2072bfab = 0); NONFAILING(*(uint8_t*)0x2072bfac = 0); NONFAILING(*(uint8_t*)0x2072bfad = 0); NONFAILING(*(uint8_t*)0x2072bfae = 0); NONFAILING(*(uint8_t*)0x2072bfaf = 0); NONFAILING(*(uint8_t*)0x2072bfb0 = 0); NONFAILING(*(uint8_t*)0x2072bfb1 = 0); NONFAILING(*(uint8_t*)0x2072bfb2 = 0); NONFAILING(*(uint8_t*)0x2072bfb3 = 0); NONFAILING(*(uint8_t*)0x2072bfb4 = 0); NONFAILING(*(uint8_t*)0x2072bfb5 = 0); NONFAILING(*(uint8_t*)0x2072bfb6 = 0); NONFAILING(*(uint8_t*)0x2072bfb7 = 0); NONFAILING(*(uint32_t*)0x2072bfb8 = 0); NONFAILING(*(uint16_t*)0x2072bfbc = 0xa8); NONFAILING(*(uint16_t*)0x2072bfbe = 0xd0); NONFAILING(*(uint32_t*)0x2072bfc0 = 0); NONFAILING(*(uint64_t*)0x2072bfc8 = 0); NONFAILING(*(uint64_t*)0x2072bfd0 = 0); NONFAILING(*(uint16_t*)0x2072bfd8 = 0x28); NONFAILING(memcpy((void*)0x2072bfda, "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00", 29)); NONFAILING(*(uint8_t*)0x2072bff7 = 0); NONFAILING(*(uint32_t*)0x2072bff8 = 0xfffffffe); syscall(__NR_setsockopt, r[0], 0x29, 0x40, 0x2072baa8, 0x558); r[1] = syscall(__NR_socket, 0xa, 1, 0); r[2] = syscall(__NR_socket, 0xa, 1, 0); NONFAILING(*(uint16_t*)0x201fefe4 = 0xa); NONFAILING(*(uint16_t*)0x201fefe6 = htobe16(0x4e22)); NONFAILING(*(uint32_t*)0x201fefe8 = 0); NONFAILING(*(uint8_t*)0x201fefec = 0); NONFAILING(*(uint8_t*)0x201fefed = 0); NONFAILING(*(uint8_t*)0x201fefee = 0); NONFAILING(*(uint8_t*)0x201fefef = 0); NONFAILING(*(uint8_t*)0x201feff0 = 0); NONFAILING(*(uint8_t*)0x201feff1 = 0); NONFAILING(*(uint8_t*)0x201feff2 = 0); NONFAILING(*(uint8_t*)0x201feff3 = 0); NONFAILING(*(uint8_t*)0x201feff4 = 0); NONFAILING(*(uint8_t*)0x201feff5 = 0); NONFAILING(*(uint8_t*)0x201feff6 = 0); NONFAILING(*(uint8_t*)0x201feff7 = 0); NONFAILING(*(uint8_t*)0x201feff8 = 0); NONFAILING(*(uint8_t*)0x201feff9 = 0); NONFAILING(*(uint8_t*)0x201feffa = 0); NONFAILING(*(uint8_t*)0x201feffb = 0); NONFAILING(*(uint32_t*)0x201feffc = 0); syscall(__NR_bind, r[2], 0x201fefe4, 0x1c); syscall(__NR_listen, r[2], 0x7b); NONFAILING(*(uint16_t*)0x2007f000 = 0xa); NONFAILING(*(uint16_t*)0x2007f002 = htobe16(0x4e22)); NONFAILING(*(uint32_t*)0x2007f004 = 0); NONFAILING(*(uint8_t*)0x2007f008 = 0); NONFAILING(*(uint8_t*)0x2007f009 = 0); NONFAILING(*(uint8_t*)0x2007f00a = 0); NONFAILING(*(uint8_t*)0x2007f00b = 0); NONFAILING(*(uint8_t*)0x2007f00c = 0); NONFAILING(*(uint8_t*)0x2007f00d = 0); NONFAILING(*(uint8_t*)0x2007f00e = 0); NONFAILING(*(uint8_t*)0x2007f00f = 0); NONFAILING(*(uint8_t*)0x2007f010 = 0); NONFAILING(*(uint8_t*)0x2007f011 = 0); NONFAILING(*(uint8_t*)0x2007f012 = 0); NONFAILING(*(uint8_t*)0x2007f013 = 0); NONFAILING(*(uint8_t*)0x2007f014 = 0); NONFAILING(*(uint8_t*)0x2007f015 = 0); NONFAILING(*(uint8_t*)0x2007f016 = 0); NONFAILING(*(uint8_t*)0x2007f017 = 0); NONFAILING(*(uint32_t*)0x2007f018 = 0); syscall(__NR_sendto, r[1], 0x204e8000, 0, 0x20000001, 0x2007f000, 0x1c); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); install_segv_handler(); use_temporary_dir(); loop(); return 0; }