// https://syzkaller.appspot.com/bug?id=176a70590ebfd17c1e3d65c543580943188c20d7 // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include void loop() { memcpy((void*)0x20000540, "\x63\xaf\xfa\x6c\xda\xd7\x4b\x6b\xc3\x11\x29\xcd\xd6\xe3\x52\x9c\x39" "\xa1\xcc\x98\x12\xa8\x6c\x3d\xda\x8e\xe5\x09\x08\xdc\xcb\x77\x58\x72" "\x00\xb0\xa1\xbf\x5d\xdf\xea\xc9\xa6\x53\x1c\x9a\x44\x00\xed\xe9\x26" "\x3f\x3f\x0b\xf2\x4c\xc8\xc6\x90\xa9\xfb\x67\x4b\xe3\x1a\x58\xda\x69" "\xce\xf4\x57\xf2\x3e\x0a\xe4\xee\x28\x81\x55\x0b\x50\x01\x27\x91\x43" "\x1b\x69\x5e\x19\xc8\xd5\xd5\x0c\xb7\x01\x4c\xf8\x76\x85\xe1\x40\x74" "\x10\xe8\x90\x1d\xaf\x5e\x90\x5a\xea\xae\x4d\xcd\x12\x12\x00\x36\xfc" "\x7a\x01\xf7\x93\xfd\x5d\x57\x1a\xdb\xd0\xdd\x83\x28\x77\x94\x74\xa6" "\x3b\x30\x7f\x13\x9d\xb1\xaa\xa5\xdf\x8f\x0b\x81\x70\x21\xa7\xbe\xfd" "\x91\x90\x15\x18\x98\x79\x51\x30\x94\x1e\x36\x4e\xe5\x8b\x98\xfb\xab" "\x9f\x38\x73\x2e\xd5\xcf\x77\x8d\xe6\x48\x4e\xaa\xf0\x1e\x94\xd6\xdf" "\x8b\x5f\xc4\xe6\x83\x41\x8c\xa0\x82\x39\x38\x66\xef\xe6\x3b\xb9\x9a" "\x1b\x4f\xca\x4f\x47\x29\x9d\x1f\xed\xea\xdb\x5e", 216); syscall(SYS_pop_ctx, 0x20000540); } int main() { syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); loop(); return 0; }