Message-id: <e7c6b040cf5d.479907dc@optonline.net>
Date: Thu, 24 Jan 2008 21:49:16 +0000 (GMT)
From: digit2004@...online.net
To: bugtraq@...urityfocus.com
Subject: gdb bug

Received: from [10.240.3.204] (Forwarded-For: 24.184.135.112, [10.240.3.204])
 by mstr11.srv.hcvlny.cv.net (mshttpd); Mon, 21 Jan 2008 00:55:53 +0000 (GMT)
Date: Mon, 21 Jan 2008 00:55:53 +0000 (GMT)
From: digit2004@...online.net
Subject: gdb bug
To: admin@...urityfocus.com, *@...urityfocus.com
Message-id: <e67eafe06f48.4793ed99@...online.net>
MIME-version: 1.0
X-Mailer: Sun Java(tm) System Messenger Express 6.2-8.04 (built Feb 28 2007)
Content-type: multipart/alternative;
 boundary="Boundary_(ID_Zt0VdLS26ir4zrObMAlqhg)"
Content-language: en
X-Accept-Language: en
Priority: normal

This is a multi-part message in MIME format.

--Boundary_(ID_Zt0VdLS26ir4zrObMAlqhg)
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: quoted-printable
Content-disposition: inline

self corrupted gdb (which gdb itself is
warning=A0 about)=2C corrupting the stack that by chance has a jump
instruction causing a loop=2C=A0 An attacker can exploit this vulnerabil=
ity
to inject malicious commands to be run under the permissions of the
current gbb session=2E =2C effects gdb 6=2E*-7=2E* I tested=2Easerisk ex=
ploitgdb asteriskctrl+cr asteriskctrl+cr asterisk -r=A0=A0=A0=A0=A0 =3C-=
---- reason for crash ( -r is a flag for asterisk gdb mistakes this for =
run not run)x 0xb7e7dde8rret 0xb7e7dde8Program received signal SIGINT=2C=
 Interrupt=2E=5BSwitching to Thread -1211655968 (LWP 3208)=5D0xb7e7dde8 =
in poll () from /lib/tls/libc=2Eso=2E6(gdb) ret 0xb7e7dde8Make selected =
stack frame return now=3F (y or n) yreakpoint 1=2C 0x080a5e17 in main ()=
(gdb) ret 0xb7e7dde80=A0 0xb7db9ea4 in =5F=5Flibc=5Fstart=5Fmain () from=
 /lib/tls/libc=2Eso=2E6(gdb) backtrace=230=A0 0xb7db9ea4 in =5F=5Flibc=5F=
start=5Fmain () from /lib/tls/libc=2Eso=2E6=231=A0 0x080554f1 in =5Fstar=
t ()Program received signal SIGINT=2C Interrupt=2E=5BSwitching to Thread=
 -1211655968 (LWP 3208)=5D0xb7e7dde8 in poll () from /lib/tls/libc=2Eso=2E=
6internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=
 frame-=3Enext !=3D NA problem internal to GDB has been detected=2Cfurth=
er debugging may prove unreliable=2ECreate a core file of GDB=3F (y or n=
)Please answer y or n=2E/build/buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=

frame-=3Enext !=3D NULL=27 failed=2EA problem internal to GDB has been d=
etected=2Cfurther debugging may prove unreliable=2ECreate a core file of=
 GDB=3F (y or n)=A0=A0=A0 poll failed=3A No such file or directoryx86*CL=
I=3E Aborted0xb7e101c20xb7e1021e =3Cglob64+22478=3E=3A=A0=A0=A0=A0=A0 0x=
ff(gdb) x86*CLI=3E x86*CLI=3E x86*CLI=3E x80x7e1012b6 =3C-----0x7e10126e=
0x080a55540xb7e10012 =3Cposix=5Ffallocate+258=3E=3A=A0=A0=A0=A0=A0=A0=A0=
 =22=5C002=220xb7e10012 =3Cposix=5Ffallocate+258=3E=3A=A0=A0=A0=A0=A0=A0=
=A0 =22=5C002=22(gdb)
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*Cret 0xb7e101dex/s 0xb7e0fde8xb7e10=
887
=3Csendfile64+1319=3E=3A=A0=A0=A0
=22=5C213E=D8=5C215=B5t=FB=FF=FF=5C211t=24=5Cb=5C211D=24=5C004=E8=B3=5C2=
30=FF=FF=5C205=C0=5C017=5C210=3B=FF=FF=FF=5C213M=5C020=5C213=5C205x=FB=FF=
=FF=5C2139=5C213q=5C004=5C211=BD=5Cb=FB=FF=FF=5C213=5C225=5Cb=FB=FF=FF=5C=
211=B5=5Cf=FB=FF=FF=5C213=BDt=FB=FF=FF=5C213=5C215=5Cf=FB=FF=FF1=D71=C1=5C=
t=F9=5C017=5C205=5C003=FF=FF=FF=5C213U=E0=5C211=5C225(=FB=FF=FF=5C211=5C=
225p=FB=FF=FF=5C213=B5(=FB=FF=FF=5C205=F6to=5C213=BD(=FB=FF=FF=B9=2C=22(=
gdb)x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*C0xb7edb350 =3Csystem=3E0xb7e10348 =3Csendfile+40=3E=3A=A0=A0=A0=A0=A0=
=A0=A0 =22=5C201=C1=5C224=A7=5C006=22ebx=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
 0xbfa6c69c=A0=A0=A0=A0=A0=A0 -1079589220esp=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0 0xbfa6c45c=A0=A0=A0=A0=A0=A0 0xbfa6c45cebp=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0 0xbfa6c468=A0=A0=A0=A0=A0=A0 0xbfa6c468esi=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0 0xbfa6c71a=A0=A0=A0=A0=A0=A0 -1079589094edi=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0 0xb7e7aadc=A0=A0=A0=A0=A0=A0 -1209554212eip=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0 0xb7e0fde8=A0=A0=A0=A0=A0=A0 0xb7e0fde8 =3Cpoll+56=3Exmm=
0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =7Bv4=5Ffloat =3D =7B0x0=2C 0x0=2C 0x0=2C=
 0x0=7D=2C v2=5Fdouble =3D =7B0x0=2C 0x0=7D=2C=A0 v16=5Fint8 =3D =7B0x0 =
=3Crepeats 16 times=3E=7D=2C v8=5Fint16 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C=
 0x0=2C=A0=A0=A0 0x0=2C 0x0=2C 0x0=7D=2C v4=5Fint32 =3D =7B0x0=2C 0x0=2C=
 0x0=2C 0x0=7D=2C v2=5Fint64 =3D =7B0x0=2C 0x0=7D=2C=A0 uint128 =3D 0x00=
000000000000000000000000000000=7Dxmm1=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =7Bv=
4=5Ffloat =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5Fdouble =3D =7B0x0=2C=
 0x0=7D=2C=A0 v16=5Fint8 =3D =7B0x0 =3Crepeats 16 times=3E=7D=2C v8=5Fin=
t16 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C=A0=A0=A0 0x0=2C 0x0=2C 0x0=
=7D=2C v4=5Fint32 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5Fint64 =3D =7B=
0x0=2C 0x0=7D=2C=A0 uint128 =3D 0x00000000000000000000000000000000=7Dxmm=
2=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =7Bv4=5Ffloat =3D =7B0x0=2C 0x0=2C 0x0=2C=
 0x0=7D=2C v2=5Fdouble =3D =7B0x0=2C 0x0=7D=2C=A0 v16=5Fint8 =3D =7B0x0 =
=3Crepeats 16 times=3E=7D=2C v8=5Fint16 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C=
 0x0=2C=A0=A0=A0 0x0=2C 0x0=2C 0x0=7D=2C v4=5Fint32 =3D =7B0x0=2C 0x0=2C=
 0x0=2C 0x0=7D=2C v2=5Fint64 =3D =7B0x0=2C 0x0=7D=2Cxmm6=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0 =7Bv4=5Ffloat =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5Fdo=
uble =3D =7B0x0=2C 0x0=7D=2C=A0 v16=5Fint8 =3D =7B0x0 =3Crepeats 16 time=
s=3E=7D=2C v8=5Fint16 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C=A0=A0=A0=
 0x0=2C 0x0=2C 0x0=7D=2C v4=5Fint32 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C=
 v2=5Fint64 =3D =7B0x0=2C 0x0=7D=2C=A0 uint128 =3D 0x0000000000000000000=
0000000000000=7Dxmm7=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =7Bv4=5Ffloat =3D =7B=
0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5Fdouble =3D =7B0x0=2C 0x0=7D=2C=A0 v1=
6=5Fint8 =3D =7B0x0 =3Crepeats 16 times=3E=7D=2C v8=5Fint16 =3D =7B0x0=2C=
 0x0=2C 0x0=2C 0x0=2C 0x0=2C=A0=A0=A0 0x0=2C 0x0=2C 0x0=7D=2C v4=5Fint32=
 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5Fint64 =3D =7B0x0=2C 0x0=7D=2C=
=A0 uint128 =3D 0x00000000000000000000000000000000=7Dmxcsr=A0=A0=A0=A0=A0=
=A0=A0=A0=A0 0x1f80=A0=A0 8064mm0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =7Bui=
nt64 =3D 0x0=2C v2=5Fint32 =3D =7B0x0=2C 0x0=7D=2C v4=5Fint16 =3D =7B0x0=
=2C 0x0=2C=A0=A0=A0 0x0=2C 0x0=7D=2C v8=5Fint8 =3D =7B0x0=2C 0x0=2C 0x0=2C=
 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=7D=7Dmm1=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
 =7Buint64 =3D 0x0=2C v2=5Fint32 =3D =7B0x0=2C 0x0=7D=2C v4=5Fint16 =3D =
=7B0x0=2C 0x0=2C=A0=A0=A0 0x0=2C 0x0=7D=2C v8=5Fint8 =3D =7B0x0=2C 0x0=2C=
 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=7D=7Dmm2=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0 =7Buint64 =3D 0x0=2C v2=5Fint32 =3D =7B0x0=2C 0x0=7D=2C v4=5Fi=
nt16 =3D =7B0x0=2C 0x0=2C=A0=A0=A0 0x0=2C 0x0=7D=2C v8=5Fint8 =3D =7B0x0=
=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=7D=7Dmm3=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0 =7Buint64 =3D 0x0=2C v2=5Fint32 =3D =7B0x0=2C 0x0=7D=2C=
 v4=5Fint16 =3D =7B0x0=2C 0x0=2C=A0=A0=A0 0x0=2C 0x0=7D=2C v8=5Fint8 =3D=
 =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=7D=7Dmm4=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0 =7Buint64 =3D 0x0=2C v2=5Fint32 =3D =7B0x0=2C 0=
x0=7D=2C v4=5Fint16 =3D =7B0x0=2C 0x0=2C=A0=A0=A0 0x0=2C 0x0=7D=2C v8=5F=
int8 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=7D=7Dmm=
5=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =7Buint64 =3D 0x0=2C v2=5Fint32 =3D =7B=
0x0=2C 0x0=7D=2C v4=5Fint16 =3D =7B0x0=2C 0x0=2C=A0=A0=A0 0x0=2C 0x0=7D=2C=
 v8=5Fint8 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=7D=
=7Dmm6=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =7Buint64 =3D 0x0=2C v2=5Fint32 =
=3D =7B0x0=2C 0x0=7D=2C v4=5Fint16 =3D =7B0x0=2C 0x0=2C=A0=A0=A0 0x0=2C =
0x0=7D=2C v8=5Fint8 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=
=2C 0x0=7D=7Dmm7=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =7Buint64 =3D 0xe41900=
e9e96363f9=2C v2=5Fint32 =3D =7B0xe96363f9=2C=A0=A0=A0 0xe41900e9=7D=2C =
v4=5Fint16 =3D =7B0x63f9=2C 0xe963=2C 0xe9=2C 0xe419=7D=2C v8=5Fint8 =3D=
 =7B0xf9=2C=A0=A0=A0 0x63=2C 0x63=2C 0xe9=2C 0xe9=2C 0x0=2C 0x19=2C 0xe4=
=7D=7D0xb7e4e90b 0x080a806c 0x80a8791=A0 0x80a933e 0x80aa391 0x80afc9c =3C=
aes=5Fencrypt+1356=3E=3A=A0=A0=A0 =22=22gdb) x/a8 0x0a106A syntax error =
in expression=2C near =600x0a106=27=2E(gdb) call 0x0a106=242 =3D 41222(g=
db) ret 0x0a106Make selected stack frame return now=3F (y or n)=A0=A0 =23=
0=A0 0x080a5554 in ast=5Fsafe=5Fsystem ()(gdb) ret 0x0a106Make selected =
stack frame return now=3F (y or n) yx86*CLI=3E x86*CLI=3E x86*CLI=3E x86=
*CLI=3E x86*CLI=3E x86*Cbuild/buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=

frame-=3Enext !=3D NULL=27 failed=2EA problem internal to GDB has been d=
etected=2Cfurther debugging may prove unreliable=2EQuit this debugging s=
ession=3F (y or n)Please answer y or n=2E/build/buildd/gdb-6=2E4/gdb/fra=
me=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=

frame-=3Enext !=3D NULL=27 failed=2EA problem internal to GDB has been d=
etected=2Cfurther debugging may prove unreliable=2E0xb7f8e350 0xb7f8e505=
=3A=A0=A0=A0=A0=A0 =22=5C207=DF=B8=AE=22/build/buildd/gdb-6=2E4/gdb/fram=
e=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=

frame-=3Enext !=3D NULL=27 failed=2EA problem internal to GDB has been d=
etected=2Cfurther debugging may prove unreliable=2E/build/buildd/gdb-6=2E=
4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=

frame-=3Enext !=3D NULL=27 failed=2EA problem internal to GDB has been d=
etected=2Cfurther debugging may prove unreliable=2ECreate a core file of=
 GDB=3F (y or n) y/build/buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=

frame-=3Enext !=3D NULL=27 failed=2EA problem internal to GDB has been d=
etected=2Cfurther debugging may prove unreliable=2EQuit this debugging s=
ession=3F (y or n)Please answer y or n=2E/build/buildd/gdb-6=2E4/gdb/fra=
me=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=

frame-=3Enext !=3D NULL=27 failed=2EA problem internal to GDB has been d=
etected=2Cfurther debugging may prove unreliable=2EQuit this debugging s=
ession=3F (y or n) n=230=A0 0xb7e8dde8 in poll () from /lib/tls/libc=2Es=
o=2E6=231=A0 0x080a5554 in ast=5Fsafe=5Fsystem ()x/0xcd b7e8de85=230=A0 =
0xb7e8dde8 in =3F=3F () from /lib/tls/libc=2Eso=2E6=231=A0 0x080a5554 in=
 =3F=3F ()(gdb) ret 0x80a5554Make selected stack frame return now=3F (y =
or n) y=A0=A0=A0=A0=A0 0xb7e8de85 =3Cposix=5Ffadvise+37=3E=3A=A0 0xcd(gd=
b)
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*(gdb) backtrace=230=A0 0x080a5554 in ast=5Fsaf=
e=5Fsystem ()(gdb)=A0=A0=A0=A0=A0=A0=A0=A0 0x80a55ac =3Cast=5Fsafe=5Fsys=
tem+2126=3E=3A=A0=A0=A0=A0=A0=A0 0x0b(gdb)0x80a55e6 =3Cast=5Fsafe=5Fsyst=
em+2184=3E=3A=A0=A0=A0=A0=A0=A0 0x20(gdb)x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E0x80a55=
b9 40x0x080a4d81 =3Cast=5Fsafe=5Fsystem+35=3E=3A=A0=A0=A0=A0=A0=A0=A0 je=
=A0=A0=A0=A0 0x80a4e34 =3Cast=5Fsafe=5Fsystem+214=3E0x080a4d9d =3Cast=5F=
safe=5Fsystem+63=3E=3A=A0=A0=A0=A0=A0=A0=A0 je=A0=A0=A0=A0 0x80a4e52 =3C=
ast=5Fsafe=5Fsystem+244=3E0x080a4da3 =3Cast=5Fsafe=5Fsystem+69=3E=3A=A0=A0=
=A0=A0=A0=A0=A0 jle=A0=A0=A0 0x80a4ea5 =3Cast=5Fsafe=5Fsystem+327=3E0x08=
0a4de1 =3Cast=5Fsafe=5Fsystem+131=3E=3A=A0=A0=A0=A0=A0=A0 call=A0=A0 0x8=
054e48 =3Cpthread=5Fmutex=5Flock=40plt=3E0x080a4da9 =3Cast=5Fsafe=5Fsyst=
em+75=3E=3A=A0=A0=A0=A0=A0=A0=A0 lea=A0=A0=A0 0x68(=25esp)=2C=25ebp0x080=
a4dad =3Cast=5Fsafe=5Fsystem+79=3E=3A=A0=A0=A0=A0=A0=A0=A0 lea=A0=A0=A0 =
0x20(=25esp)=2C=25edi0x080a50cd =3Cast=5Fsafe=5Fsystem+879=3E=3A=A0=A0=A0=
=A0=A0=A0 call=A0=A0 0x80551a8 =3Csnprintf=40plt=3E0x080a50d2 =3Cast=5Fs=
afe=5Fsystem+884=3E=3A=A0=A0=A0=A0=A0=A0 cmpb=A0=A0 =240x0=2C0x1c(=25esp=
)0x080a50d7 =3Cast=5Fsafe=5Fsystem+889=3E=3A=A0=A0=A0=A0=A0=A0 je=A0=A0=A0=
=A0 0x80a5114 =3Cast=5Fsafe=5Fsystem+950=3E0x080a50d9 =3Cast=5Fsafe=5Fsy=
stem+891=3E=3A=A0=A0=A0=A0=A0=A0 mov=A0=A0=A0 0x81093c0=2C=25edx0x080a50=
df =3Cast=5Fsafe=5Fsystem+897=3E=3A=A0=A0=A0=A0=A0=A0 test=A0=A0 =25edx=2C=
=25edx0x080a50e1 =3Cast=5Fsafe=5Fsystem+899=3E=3A=A0=A0=A0=A0=A0=A0 je=A0=
=A0=A0=A0 0x80a53b7 =3Cast=5Fsafe=5Fsystem+1625=3E0x080a50e7 =3Cast=5Fsa=
fe=5Fsystem+905=3E=3A=A0=A0=A0=A0=A0=A0 mov=A0=A0=A0 0x81093bc=2C=25eax0=
x080a50ec =3Cast=5Fsafe=5Fsystem+910=3E=3A=A0=A0=A0=A0=A0=A0 test=A0=A0 =
=25eax=2C=25eax0x080a50ee =3Cast=5Fsafe=5Fsystem+912=3E=3A=A0=A0=A0=A0=A0=
=A0 je=A0=A0=A0=A0 0x80a53b7 =3Cast=5Fsafe=5Fsystem+1625=3E0x080a50f4 =3C=
ast=5Fsafe=5Fsystem+918=3E=3A=A0=A0=A0=A0=A0=A0 lea=A0=A0=A0 0x1c(=25esp=
)=2C=25eax0x080a50f8 =3Cast=5Fsafe=5Fsystem+922=3E=3A=A0=A0=A0=A0=A0=A0 =
mov=A0=A0=A0 =25eax=2C0xc(=25esp)0x080a50fc =3Cast=5Fsafe=5Fsystem+926=3E=
=3A=A0=A0=A0=A0=A0=A0 movl=A0=A0 =240x12=2C0x8(=25esp)0x080a5104 =3Cast=5F=
safe=5Fsystem+934=3E=3A=A0=A0=A0=A0=A0=A0 lea=A0=A0=A0 0x6c(=25esp)=2C=25=
eax0x080a5108 =3Cast=5Fsafe=5Fsystem+938=3E=3A=A0=A0=A0=A0=A0=A0 mov=A0=A0=
=A0 =25eax=2C0x4(=25esp)0x080a51a7 =3Cast=5Fsafe=5Fsystem+1097=3E=3A=A0=A0=
=A0=A0=A0 call=A0=A0 0x805fd1e =3Cast=5Factive=5Fchannels=3E0x080a51ac =3C=
ast=5Fsafe=5Fsystem+1102=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0 =240x80eac4a=2C=
=25edx0x080a51b1 =3Cast=5Fsafe=5Fsystem+1107=3E=3A=A0=A0=A0=A0=A0 test=A0=
=A0 =25eax=2C=25eax0x080a51b3 =3Cast=5Fsafe=5Fsystem+1109=3E=3A=A0=A0=A0=
=A0=A0 jne=A0=A0=A0 0x80a51ba =3Cast=5Fsafe=5Fsystem+1116=3E0x080a510c =3C=
ast=5Fsafe=5Fsystem+942=3E=3A=A0=A0=A0=A0=A0=A0 mov=A0=A0=A0 =25edx=2C(=25=
esp)=A0=A0=A0=A0=A0 0x080a5308 =3Cast=5Fsafe=5Fsystem+1450=3E=3A=A0=A0=A0=
=A0=A0 call=A0=A0 0x8054ef8 =3Cexecvp=40plt=3E0xb7f77365
=3Csystem+21=3E=3A=A0 =22=5C211=5C004=24=E8g=5C215=FF=FFZ=5B=5D=C3=22=2C=
 =27=5C220=27 =3Crepeats 15
times=3E=2C =22U=5C211=E5=5C203=EC=5Cb=5C211=7C=24=5C004=5C213=7D=5Cb=5C=
2114=24e=5C2135=5Cb0x080a5375 =3Cast=5Fsafe=5Fsystem+1559=3E=3A=A0=A0=A0=
=A0=A0 jmp=A0=A0=A0 0x80a5199 =3Cast=5Fsafe=5Fsystem+1083=3E0x080a537a =3C=
ast=5Fsafe=5Fsystem+1564=3E=3A=A0=A0=A0=A0=A0 call=A0=A0 0x805fd1e =3Cas=
t=5Factive=5Fchannels=3E0x080a537f =3Cast=5Fsafe=5Fsystem+1569=3E=3A=A0=A0=
=A0=A0=A0 mov=A0=A0=A0 =240x80eac04=2C=25edx0x080a5384 =3Cast=5Fsafe=5Fs=
ystem+1574=3E=3A=A0=A0=A0=A0=A0 test=A0=A0 =25eax=2C=25eax0x080a5386 =3C=
ast=5Fsafe=5Fsystem+1576=3E=3A=A0=A0=A0=A0=A0 jne=A0=A0=A0 0x80a538d =3C=
ast=5Fsafe=5Fsystem+1583=3E0x080a5388 =3Cast=5Fsafe=5Fsystem+1578=3E=3A=A0=
=A0=A0=A0=A0 mov=A0=A0=A0 =240x80eac4c=2C=25edx0x080a538d =3Cast=5Fsafe=5F=
system+1583=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0 =25edi=2C0x8(=25esp)0x080a=
5391 =3Cast=5Fsafe=5Fsystem+1587=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0 =25ed=
x=2C0x4(=25esp)0x080a5395 =3Cast=5Fsafe=5Fsystem+1591=3E=3A=A0=A0=A0=A0=A0=
 movl=A0=A0 =240x80eac0e=2C(=25esp)0x080a539c =3Cast=5Fsafe=5Fsystem+159=
8=3E=3A=A0=A0=A0=A0=A0 call=A0=A0 0x8056989 =3Cast=5Fverbose=3E0x080a53a=
1 =3Cast=5Fsafe=5Fsystem+1603=3E=3A=A0=A0=A0=A0=A0 jmp=A0=A0=A0 0x80a519=
9 =3Cast=5Fsafe=5Fsystem+1083=3E0x080a53a6 =3Cast=5Fsafe=5Fsystem+1608=3E=
=3A=A0=A0=A0=A0=A0 movl=A0=A0 =240x80ebaec=2C(=25esp)0x080a53ad =3Cast=5F=
safe=5Fsystem+1615=3E=3A=A0=A0=A0=A0=A0 call=A0=A0 0x8056989 =3Cast=5Fve=
rbose=3E0x080a53b2 =3Cast=5Fsafe=5Fsystem+1620=3E=3A=A0=A0=A0=A0=A0 jmp=A0=
=A0=A0 0x80a5143 =3Cast=5Fsafe=5Fsystem+997=3E0x080a53b7 =3Cast=5Fsafe=5F=
system+1625=3E=3A=A0=A0=A0=A0=A0 call=A0=A0 0x80a3de7 =3Cast=5Fset=5Fpri=
ority+2778=3E0x080a53bc =3Cast=5Fsafe=5Fsystem+1630=3E=3A=A0=A0=A0=A0=A0=
 mov=A0=A0=A0 0x81093c0=2C=25edx0x080a53c2 =3Cast=5Fsafe=5Fsystem+1636=3E=
=3A=A0=A0=A0=A0=A0 jmp=A0=A0=A0 0x80a50f4 =3Cast=5Fsafe=5Fsystem+918=3E0=
x080a53c7 =3Cast=5Fsafe=5Fsystem+1641=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0 =
=240x80e7f14=2C=25eax0x080a53cc =3Cast=5Fsafe=5Fsystem+1646=3E=3A=A0=A0=A0=
=A0=A0 jmp=A0=A0=A0 0x80a501e =3Cast=5Fsafe=5Fsystem+704=3E0x080a53d1 =3C=
ast=5Fsafe=5Fsystem+1651=3E=3A=A0=A0=A0=A0=A0 sub=A0=A0=A0 =240xc=2C=25e=
sp0x080a53d4 =3Cast=5Fsafe=5Fsystem+1654=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0=
 =240x1=2C=25eax0x080a56f7 =3Cast=5Fsafe=5Fsystem+2457=3E=3A=A0=A0=A0=A0=
=A0 mov=A0=A0=A0 =25eax=2C(=25esp)0x080a56fa =3Cast=5Fsafe=5Fsystem+2460=
=3E=3A=A0=A0=A0=A0=A0 call=A0=A0 0x8054a78 =3Cfprintf=40plt=3E0x080a56ff=
 =3Cast=5Fsafe=5Fsystem+2465=3E=3A=A0=A0=A0=A0=A0 call=A0=A0 0x808c708 =3C=
term=5Fquit=3E0x080a59c2 =3Cast=5Fsafe=5Fsystem+3172=3E=3A=A0=A0=A0=A0=A0=
 je=A0=A0=A0=A0 0x80a59e6 =3Cast=5Fsafe=5Fsystem+3208=3E0x080a59c4 =3Cas=
t=5Fsafe=5Fsystem+3174=3E=3A=A0=A0=A0=A0=A0 movl=A0=A0 =240x0=2C0xc(=25e=
sp)0x080a59cc =3Cast=5Fsafe=5Fsystem+3182=3E=3A=A0=A0=A0=A0=A0 movl=A0=A0=
 =240xa=2C0x8(=25esp)0x080a59d4 =3Cast=5Fsafe=5Fsystem+3190=3E=3A=A0=A0=A0=
=A0=A0 movl=A0=A0 =240x0=2C0x4(=25esp)0x080a59dc =3Cast=5Fsafe=5Fsystem+=
3198=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0 =25ebx=2C(=25esp)0x080a59df =3Cas=
t=5Fsafe=5Fsystem+3201=3E=3A=A0=A0=A0=A0=A0 call=A0=A0 0x8054ec8 =3C=5F=5F=
strtol=5Finternal=40plt=3E0x080a59e4 =3Cast=5Fsafe=5Fsystem+3206=3E=3A=A0=
=A0=A0=A0=A0 mov=A0=A0=A0 =25eax=2C=25ebp0x080a59e6 =3Cast=5Fsafe=5Fsyst=
em+3208=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0 0x81093b8=2C=25eax0x080a59eb =3C=
ast=5Fsafe=5Fsystem+3213=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0 =25eax=2C0xc(=
=25esp)0x080a59ef =3Cast=5Fsafe=5Fsystem+3217=3E=3A=A0=A0=A0=A0=A0 movl=A0=
=A0 =240x80eacc4=2C0x8(=25esp)0x080a59f7 =3Cast=5Fsafe=5Fsystem+3225=3E=3A=
=A0=A0=A0=A0=A0 movl=A0=A0 =240x50=2C0x4(=25esp)0x080a59ff =3Cast=5Fsafe=
=5Fsystem+3233=3E=3A=A0=A0=A0=A0=A0 lea=A0=A0=A0 0x20(=25esp)=2C=25ebx0x=
080a5a03 =3Cast=5Fsafe=5Fsystem+3237=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0 =25=
ebx=2C(=25esp)0x080a5a06 =3Cast=5Fsafe=5Fsystem+3240=3E=3A=A0=A0=A0=A0=A0=
 call=A0=A0 0x80551a8 =3Csnprintf=40plt=3E0x080a5a0b =3Cast=5Fsafe=5Fsys=
tem+3245=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0 =25ebx=2C=25edx0x080a5a0d =3C=
ast=5Fsafe=5Fsystem+3247=3E=3A=A0=A0=A0=A0=A0 mov=A0=A0=A0 0x8104178=2C=25=
eax=3Cast=5Fsafe=5Fsystem+2185=3E=3A=A0=A0=A0=A0=A0=A0 0xff(gdb)x86*CLI=3E=

x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86(0100 times 3 pages)when I type ret and half way through t=
he address it prints x86*CLI=3E for 3 pages=2E (even after I let it idle=
 for a while)0x80a560a =3Cast=5Fsafe=5Fsystem+2220=3E=3A=A0=A0=A0=A0=A0=A0=
 0x00(gdb)x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E
x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*Cvery large k=
eeps going 100x0x80a56a0 =3Cast=5Fsafe=5Fsystem+2370=3E=3A=A0=A0=A0=A0=A0=
=A0 0x040x80a5736 =3Cast=5Fsafe=5Fsystem+2520=3E=3A=A0=A0=A0=A0=A0=A0 0x=
08(gdb)x86*CLI=3E x86*CLI=3E x86*CLI=3E 0x80a5737 =3Cast=5Fsafe=5Fsystem=
+2521=3E=3A=A0=A0=A0 0xe8(gdb)x86=403=5Bnewsploit=5D=24 gdb gdbGNU gdb 6=
=2E4-debianCopyright 2005 Free Software Foundation=2C Inc=2EGDB is free =
software=2C covered by the GNU General Public License=2C and you arewelc=
ome to change it and/or distribute copies of it under certain conditions=
=2EType =22show copying=22 to see the conditions=2EThere is absolutely n=
o warranty for GDB=2E=A0 Type =22show warranty=22 for details=2EThis GDB=
 was configured as =22i486-linux-gnu=22=2E=2E=2E(no debugging symbols fo=
und)Using host libthread=5Fdb library =22/lib/tls/libthread=5Fdb=2Eso=2E=
1=22=2E(gdb) x 0x80a561b0x80a561b =3Cvalidate=5Factionline+606=3E=3A=A0=A0=
=A0 0xfd1400e8(gdb)0x80a561f =3Cvalidate=5Factionline+610=3E=3A=A0=A0=A0=
 0xec4589ff(gdb)0x80a5623 =3Cvalidate=5Factionline+614=3E=3A=A0=A0=A0 0x=
ffff60e9(gdb)0x80a5627 =3Cvalidate=5Factionline+618=3E=3A=A0=A0=A0 0x244=
4c7ff(gdb)0x80a562b =3Cvalidate=5Factionline+622=3E=3A=A0=A0=A0 0x0a2507=
04(gdb)0x80a562f =3Cvalidate=5Factionline+626=3E=3A=A0=A0=A0 0x24348908(=
gdb)0x80a5633 =3Cvalidate=5Factionline+630=3E=3A=A0=A0=A0 0x006825e8(gdb=
)0x80a5637 =3Cvalidate=5Factionline+634=3E=3A=A0=A0=A0 0x0fc08500(gdb)0x=
80a563b =3Cvalidate=5Factionline+638=3E=3A=A0=A0=A0 0x00008f84(gdb)0x80a=
563f =3Cvalidate=5Factionline+642=3E=3A=A0=A0=A0 0xec4d8b00rogram receiv=
ed signal SIGINT=2C Interrupt=2E0xb7e55de8 in poll () from /lib/tls/libc=
=2Eso=2E6(gdb) x 0xb7e55de80xb7e55de8 =3Cpoll+56=3E=3A=A0=A0 0x003dfb87(=
gdb)0xb7e55dec =3Cpoll+60=3E=3A=A0=A0 0x89fffff0(gdb)0xb7e55df0 =3Cpoll+=
64=3E=3A=A0=A0 0x893b77c7=A0=A0=A0 gdb) backtrace=230=A0 0xb7e55de8 in p=
oll () from /lib/tls/libc=2Eso=2E6=231=A0 0x08112244 in gdb=5Fdo=5Fone=5F=
event ()=232=A0 0x0810f303 in catch=5Ferrors ()=233=A0 0x080bbd21 in =5F=
initialize=5Ftui=5Fhooks ()=234=A0 0x0810f59b in current=5Finterp=5Fcomm=
and=5Floop ()=235=A0 0x080779cb in main ()(gdb) ret 0x9010f5cb0=A0 0x081=
12244 in gdb=5Fdo=5Fone=5Fevent ()x/s =24eip0x8113d33
=3Cinferior=5Fevent=5Fhandler=5Fwrapper+49=3E=3A=A0=A0 =22=C9=C3=22=2C =27=
=5C220=27 =3Crepeats
11 times=3E=2C =22U=5C211=E5=A1=D0i(=5Cb=5D=C3U=5C211=E51=C0=5D=C3U=5C21=
1=E5WVS=5C203=EC=5C034=C7=5C004=24=5C004=22(gdb)0x81183b3
=3Cgdbarch=5Fpseudo=5Fregister=5Fwrite+216=3E=3A=A0=A0
=22=C7=5C004=24=7C=5E=23=5Cb=E8ep=F6=FFU=5C211=E5=5C213U=5Cf=5C213E=5Cb=5C=
211Pt=5D=C3U=5C211=E5S=5C203=EC=5C024=5C213=5D=5Cb=5C205=DBt/=5C213Cx=5C=
203=F8=FFtk=5C203=3D=F0=E3(=5Cb=5C001=7E=5C030=C7D=24=5C004=E1Z=23=5Cb=A1=
h!*=5Cb=5C211=5C004=24=E8Q=5C200=F6=FF=5C213Cx=5C203=C4=5C024=5B=5D=C3=C7=
D=24=5Cb=5C005=22(gdb0x811b40d =3Cset=5Fgdbarch=5Funwind=5Fsp+15=3E=3A=A0=
=A0=A0 =22=5D=C3U=5C211=E5VS=5C203=EC =5C213=5D=5Cb=5C213u=5Cf=5C205=DBt=
9=5C213=5C213X=5C001=22(gdb)0x811b426 =3Cgdbarch=5Fdeprecated=5Fsaved=5F=
pc=5Fafter=5Fcall+23=3E=3A=A0=A0 =22=22(gdb)0x811b427
=3Cgdbarch=5Fdeprecated=5Fsaved=5Fpc=5Fafter=5Fcall+24=3E=3A=A0=A0
=22=5C205=C9ts=5C203=3D=F0=E3(=5Cb=5C001=7E=5C033=C7D=24=5C004=FC=A4=23=5C=
b=A1h!*=5Cb=5C211=5C004=24=E8=5CtP=F6=FF=5C213=5C213X=5C001=22(gdb)0x811=
b44e =3Cgdbarch=5Fdeprecated=5Fsaved=5Fpc=5Fafter=5Fcall+63=3E=3A=A0=A0 =
=22=22(gdb)0x811b44f =3Cgdbarch=5Fdeprecated=5Fsaved=5Fpc=5Fafter=5Fcall=
+64=3E=3A=A0=A0 =22=5C211u=5Cb=5C203=C4 =5B=5E=5D=FF=E1=C7D=24=5Cb=5C005=
=22(gdb)0x811b460 =3Cgdbarch=5Fdeprecated=5Fsaved=5Fpc=5Fafter=5Fcall+81=
=3E=3A=A0=A0 =22=22(gdb)0x811b461 =3Cgdbarch=5Fdeprecated=5Fsaved=5Fpc=5F=
after=5Fcall+82=3E=3A=A0=A0 =22=22(gdb)0x811b462 =3Cgdbarch=5Fdeprecated=
=5Fsaved=5Fpc=5Fafter=5Fcall+83=3E=3A=A0=A0 =22=C7D=24=5C004=5C226s =5Cb=
=C7=5C004=24=22(gdb)(it=27s jumping around) possible jmp trick exploit f=
ound0x811b5d5 =3Cset=5Fgdbarch=5Fframe=5Fnum=5Fargs+15=3E=3A=A0=A0=A0=A0=
=A0=A0 =22=5D=C3U=5C211=E5VS=5C203=EC =5C213=5D=5Cb=5C213u=5Cf=5C205=DBt=
9=5C213=5C213=60=5C001=22(gdb)0x811b5ee =3Cgdbarch=5Fdeprecated=5Fstack=5F=
align+23=3E=3A=A0=A0 =22=22(gdb)0x811b5ef
=3Cgdbarch=5Fdeprecated=5Fstack=5Falign+24=3E=3A=A0=A0
=22=5C205=C9ts=5C203=3D=F0=E3(=5Cb=5C001=7E=5C033=C7D=24=5C004=5C224=A5=23=
=5Cb=A1h!*=5Cb=5C211=5C004=24=E8AN=F6=FF=5C213=5C213=60=5C001=22(gdb)0x8=
11b616 =3Cgdbarch=5Fdeprecated=5Fstack=5Falign+63=3E=3A=A0=A0 =22=22(gdb=
)0x811cfb5
=3Cdeprecated=5Fregister=5Fgdbarch=5Fswap+52=3E=3A=A0=A0=A0=A0=A0=A0=A0=A0=

=22=5C213=5C023=5C213E=5C020=5C211B=5Cb=5C213E=5Cb=5C211=5C002=5C213E=5C=
f=5C211B=5C004=5C203=C4=5C004=5B=5D=C3U=5C211=E5VS=5C203=EC
=5C2135=E0i(=5Cb=5C205=F6tW=5C213=5E=24=5C205=DBt=3D=5C213C=5C004=5C213=5C=
v=5C213=5C020=5C213=40=5C004=5C211D=24=5Cb=5C211T=24=5C004=5C211=5Cf=24=E8=
=AF=A3=F5=FF=5C213C=5C004=5C213=5C020=5C213=40=5C004=5C211D=24=5Cb=C7D=24=
=5C004=22(gdb)(being run as regular user )Unable to connect to remote as=
terisk (does /var/run/asterisk/asterisk=2Ectl exist=3F)Program exited wi=
th code 01=2E(gdb) run asterisk -r =7CStarting program=3A /usr/sbin/aste=
risk asterisk -r =7C/bin/bash=3A -c=3A line 1=3A syntax error=3A unexpec=
ted end of fileProgram exited with code 02=2EYou can=27t do that without=
 a process to debug=2E(gdb) run asterisk -r =7Cx86*CLI=3E x86*CLI=3E x86=
*CLI=3E Quit(gdb) run asterisk -vvvvvcStarting program=3A /usr/sbin/aste=
risk asterisk -vvvvvc(no debugging symbols found)Error in re-setting bre=
akpoint 1=3AFunction =22main=22 not defined=2E(no debugging symbols foun=
d)Error in re-setting breakpoint 1=3AFunction =22main=22 not defined=2E(=
no debugging symbols found)Error in re-setting breakpoint 1=3AFunction =22=
main=22 not defined=2E=5BThread debugging using libthread=5Fdb enabled=5D=
=5BNew Thread -1212167968 (LWP 32289)=5D(no debugging symbols found)Erro=
r in re-setting breakpoint 1=3AFunction =22main=22 not defined=2E(no deb=
ugging symbols found)Error in re-setting breakpoint 1=3AFunction =22main=
=22 not defined=2E(no debugging symbols found)Error in re-setting breakp=
oint 1=3AFunction =22main=22 not defined=2E(no debugging symbols found)E=
rror in re-setting breakpoint 1=3AFunction =22main=22 not defined=2E(no =
debugging symbols found)Error in re-setting breakpoint 1=3AFunction =22m=
ain=22 not defined=2E(no debugging symbols found)Error in re-setting bre=
akpoint 1=3AFunction =22main=22 not defined=2E(no debugging symbols foun=
d)Error in re-setting breakpoint 1=3AFunction =22main=22 not defined=2E(=
no debugging symbols found)Error in re-setting breakpoint 1=3AFunction =22=
main=22 not defined=2EUnable to open pid file =27/var/run/asterisk/aster=
isk=2Epid=27=3A Permission denied=5BNew Thread -1212171344 (LWP 32293)=5D=
=5BThread -1212171344 (LWP 32293) exited=5DUnable to bind socket to /var=
/run/asterisk/asterisk=2Ectl=3A Address already in use=A0 =3D=3D Parsing=
 =27/etc/asterisk/asterisk=2Econf=27=3A Not found (Permission denied)=A0=
 =3D=3D Parsing =27/etc/asterisk/extconfig=2Econf=27=3A Not found (Permi=
ssion denied)Asterisk 1=2E2=2E7=2E1=2C Copyright (C) 1999 - 2006 Digium=2C=
 Inc=2E and others=2ECreated by Mark Spencer =3Cmarkster=40digium=2Ecom=3E=
Asterisk comes with ABSOLUTELY NO WARRANTY=3B type =27show warranty=27 f=
or details=2EThis is free software=2C with components licensed under the=
 GNU General PublicLicense version 2 and other licenses=3B you are welco=
me to redistribute it undercertain conditions=2E Type =27show license=27=
 for details=2E=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=A0 =3D=3D Parsing =27/etc/asterisk/logger=2Econf=27=3A=
 Not found (Permission denied)Unable to open logger=2Econf=3A Permission=
 deniedrJan 18 07=3A36=3A58 ERROR=5B32289=5D=3A logger=2Ec=3A625 init=5F=
logger=3A Unable to create event log=3A Permission denied=A0 =230=A0 0xb=
7da1ea4 in =5F=5Flibc=5Fstart=5Fmain () from /lib/tls/libc=2Eso=2E6(gdb)=
Make selected stack frame return now=3F (y or n) y=230=A0 0x080554f1 in =
=3F=3F ()(gdb)Make selected stack frame return now=3F (y or n) y/build/b=
uildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=

frame-=3Enext !=3D NULL=27 failed=2EA problem internal to GDB has been d=
etected=2Cfurther debugging may prove unreliable=2EQuit this debugging s=
ession=3F (y or n)=A0=A0=A0=A0=A0=A0=A0=A0=A0 =5Cf=5C213E=5Cb=5C211=5D=F4=
=E8=B3=5C213=FF=FF=5C201=C3=CD4=22(gdb)0xb7f7b70c =3Cpthread=5Fgetaffini=
ty=5Fnp=40=40GLIBC=5F2=2E3=2E4+28=3E=3A=A0=A0=A0=A0 =22=22(gdb)0xb7f7b70=
d =3Cpthread=5Fgetaffinity=5Fnp=40=40GLIBC=5F2=2E3=2E4+29=3E=3A=A0=A0=A0=
=A0 =22=5C211=7D=FC=5C205=F6=5C213U=5C020=5C213xH=5C211=F1xJ=5C207=DF=B8=
=F2=22(gdb)0xb7f7b721 =3Cpthread=5Fgetaffinity=5Fnp=40=40GLIBC=5F2=2E3=2E=
4+49=3E=3A=A0=A0=A0=A0 =22=22(gdb)0xb7f7b722 =3Cpthread=5Fgetaffinity=5F=
np=40=40GLIBC=5F2=2E3=2E4+50=3E=3A=A0=A0=A0=A0 =22=22(gdb)0xb7f7b723 =3C=
pthread=5Fgetaffinity=5Fnp=40=40GLIBC=5F2=2E3=2E4+51=3E=3A=A0=A0=A0=A0 =22=
=CD=5C200=5C207=FB=3D=22(gdb)0xb7f7b729 =3Cpthread=5Fgetaffinity=5Fnp=40=
=40GLIBC=5F2=2E3=2E4+57=3E=3A=A0=A0=A0=A0 =22=F0=FF=FFv=5C022=5C213=5D=F4=
=F7=D8=5C213u=F8=5C213=7D=FC=5C211=EC=5D=C3=5C215v=22(gdb)0xb7f7b740
=3Cpthread=5Fgetaffinity=5Fnp=40=40GLIBC=5F2=2E3=2E4+80=3E=3A=A0=A0=A0=A0=

=22)=C6=5C215=5Cf=5C0021=D2=5C211t=24=5Cb=5C211T=24=5C004=5C211=5Cf=24=E8=
=5C215=5C212=FF=FF=5C213=5D=F41=C0=5C213u=F8=5C213=7D=FC=5C211=EC=5D=C3=B9=
=FF=FF=FF=5C177=EB=AF=5C215v=22(gdb)0xb7f7b770 =3Cpthread=5Fgetaffinity=5F=
np=40GLIBC=5F2=2E3=2E3=3E=3A=A0=A0=A0=A0=A0=A0=A0=A0 =22U=B9=5C200=22(gd=
b)0xb7f7b774 =3Cpthread=5Fgetaffinity=5Fnp=40GLIBC=5F2=2E3=2E3+4=3E=3A=A0=
=A0=A0=A0=A0=A0 =22=22(gdb)=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0 0x000008ec in =3F=3F ()(gdb)Make selected stack frame return now=3F =
(y or n) y=230=A0 0x080ec8c4 in =3F=3F ()(gdb)Make selected stack frame =
return now=3F (y or n) y=230=A0 0x080ec594 in =3F=3F ()(gdb)Make selecte=
d stack frame return now=3F (y or n) y=230=A0 0x08110800 in =3F=3F ()(gd=
b)Make selected stack frame return now=3F (y or n) y=230=A0 0xb7f43bf6 i=
n =5Fdl=5Frtld=5Fdi=5Fserinfo () from /lib/ld-linux=2Eso=2E2(gdb)=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 ret 0xb7da1ea4LI=3E=
 x86*CLI=3E x86*CLI=3E x86*CLI=3E x86*CLI=3E =230=A0 0x080554f1 in =3F=3F=
 ()(gdb)Make selected stack frame return now=3F (y or n) y/build/buildd/=
gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=

frame-=3Enext !=3D NULL=27 failed=2EA problem internal to GDB has been d=
etected=2Cfurther debugging may prove unreliable=2EQuit this debugging s=
ession=3F (y or n)=A0 gdb)Make selected stack frame return now=3F (y or =
n) y=230=A0 0x00000001 in =3F=3F ()(gdb)Make selected stack frame return=
 now=3F (y or n) y=230=A0 0x00000000 in =3F=3F ()(gdb)Make selected stac=
k frame return now=3F (y or n) y=230=A0 0x080ec8a6 in =3F=3F ()(gdb)Make=
 selected stack frame return now=3F (y or n) y=230=A0 0x080ec640 in =3F=3F=
 ()(gdb)Make selected stack frame return now=3F (y or n) y=230=A0 0x0811=
0800 in =3F=3F ()(gdb)Make selected stack frame return now=3F (y or n) y=
=230=A0 0xb7ece52e in in6addr=5Fany ()=A0=A0 from /lib/tls/libc=2Eso=2E6=
(gdb) backtrace=230=A0 0xb7ece52e in in6addr=5Fany () from /lib/tls/libc=
=2Eso=2E6=231=A0 0xb7fb7eec in =3F=3F ()=A0=A0=A0 () from /lib/tls/libpt=
hread=2Eso=2E0(gdb) backtrace=230=A0 0xb7f3d312 in sysctl=5Fargs=2E0 () =
from /lib/tls/libpthread=2Eso=2E0=231=A0 0xb7f61b30 in =5Fdl=5Frtld=5Fdi=
=5Fserinfo () from /lib/ld-linux=2Eso=2E2=232=A0 0xb7f35717 in =5F=5Fpth=
read=5Finitialize=5Fminimal=5Finternal ()=A0=A0 from /lib/tls/libpthread=
=2Eso=2E0=233=A0 0xb7d62ea4 in =5F=5Flibc=5Fstart=5Fmain () from /lib/tl=
s/libc=2Eso=2E6=234=A0 0x080554f1 in =3F=3F ()=A0=A0 () from /lib/tls/li=
bpthread=2Eso=2E0(gdb) backtrace=230=A0 0xb7f4a310 in sysctl=5Fargs=2E0 =
() from /lib/tls/libpthread=2Eso=2E0=231=A0 0xb7f4a312 in sysctl=5Fargs=2E=
0 () from /lib/tls/libpthread=2Eso=2E0=232=A0 0xb7f6eb30 in =5Fdl=5Frtld=
=5Fdi=5Fserinfo () from /lib/ld-linux=2Eso=2E2=233=A0 0xb7f42717 in =5F=5F=
pthread=5Finitialize=5Fminimal=5Finternal ()=A0=A0 from /lib/tls/libpthr=
ead=2Eso=2E0=234=A0 0xb7d6fea4 in =5F=5Flibc=5Fstart=5Fmain () from /lib=
/tls/libc=2Eso=2E6=235=A0 0x080554f1 in =3F=3F ()=230=A0 0xb7dd0ea4 in =5F=
=5Flibc=5Fstart=5Fmain () from /lib/tls/libc=2Eso=2E6(gdb)Make selected =
stack frame return now=3F (y or n) y=230=A0 0x080554f1 in =3F=3F ()(gdb)=
Make selected stack frame return now=3F (y or n) y/build/buildd/gdb-6=2E=
4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26=26=

frame-=3Enext !=3D NULL=27 failed=2EA problem internal to GDB has been d=
etected=2Cfurther debugging may prove unreliable=2EObject file /usr/sbin=
/asterisk=3A=A0 Objfile at 0x82efce8=2C bfd at 0x82de9c0=2C 1178 minsyms=
Object file system-supplied DSO at 0xffffe000=3A=A0 Objfile at 0x83334c8=
=2C bfd at 0x8303d50=2C 4 minsymsObject file /lib/tls/libdl=2Eso=2E2=3A=A0=
 Objfile at 0x83999b8=2C bfd at 0x836be08=2C 31 minsymsObject file /lib/=
tls/libpthread=2Eso=2E0=3A=A0 Objfile at 0x83aa900=2C bfd at 0x831eb80=2C=
 696 minsymsObject file /lib/libncurses=2Eso=2E5=3A=A0 Objfile at 0x83dd=
1b0=2C bfd at 0x8359e08=2C 760 minsymsObject
file /lib/tls/libm=2Eso=2E6=3A=A0 Objfile at 0x8400e80=2C bfd at 0x83199=
58=2C 331
min---Type =3Creturn=3E to continue=2C or q =3Creturn=3E to quit---symsO=
bject file /lib/tls/libresolv=2Eso=2E2=3A=A0 Objfile at 0x84197f0=2C bfd=
 at 0x831e8b0=2C 135 minsymsObject file /usr/lib/i686/cmov/libssl=2Eso=2E=
0=2E9=2E8=3A=A0 Objfile at 0x842b9f0=2C bfd at 0x8359128=2C 665 minsymsO=
bject file /lib/tls/libc=2Eso=2E6=3A=A0 Objfile at 0x84590f0=2C bfd at 0=
x83b4338=2C 2120 minsymsObject file /lib/ld-linux=2Eso=2E2=3A=A0 Objfile=
 at 0x84c11e0=2C bfd at 0x83228f0=2C 32 minsymsObject file /usr/lib/i686=
/cmov/libcrypto=2Eso=2E0=2E9=2E8=3A=A0 Objfile at 0x84c91e8=2C bfd at 0x=
8461160=2C 3344 minsyrogram exited with code 01=2E(gdb) x0xb7da1ea5 =3CC=
AST=5FS=5Ftable0+60645=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22PublicKey=22(gdb)0x=
b7da1eaf =3CCAST=5FS=5Ftable0+60655=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22i2d=5F=
RSA=5FNET=22(gdb)0xb7da1ebb =3CCAST=5FS=5Ftable0+60667=3E=3A=A0=A0=A0=A0=
=A0=A0=A0 =22i2d=5FRSA=5FPUBKEY=22(gdb)0xb7da1eca =3CCAST=5FS=5Ftable0+6=
0682=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22LONG=5FC2I=22(gdb)0xb7da1ed3 =3CCAST=5F=
S=5Ftable0+60691=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22OID=5FMODULE=5FINIT=22(gd=
b)0xb7da1ee3 =3CCAST=5FS=5Ftable0+60707=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22PA=
RSE=5FTAGGING=22(gdb)0xb7da1ef1 =3CCAST=5FS=5Ftable0+60721=3E=3A=A0=A0=A0=
=A0=A0=A0=A0 =22PKCS5=5Fpb0xb7da20c0 =3CCAST=5FS=5Ftable0+61184=3E=3A=A0=
=A0=A0=A0=A0=A0=A0 =22PBEPARAM=22(gdb)0xb7da20c9 =3CCAST=5FS=5Ftable0+61=
193=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22salt=22(gdb)0xb7da20ce =3CCAST=5FS=5Ft=
able0+61198=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22iter=22(gdb)0xb7da20d3 =3CCAST=
=5FS=5Ftable0+61203=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22p5=5Fpbe=2Ec=22(gdb)0x=
b7da20dc =3CCAST=5FS=5Ftable0+61212=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22PBKDF2=
PARAM=22(gdb)0xb7da20e8 =3CCAST=5FS=5Ftable0+61224=3E=3A=A0=A0=A0=A0=A0=A0=
=A0 =22PBE2PARAM=22(gdb)0xb7da20f2 =3CCAST=5FS=5Ftable0+61234=3E=3A=A0=A0=
=A0=A0=A0=A0=A0 =22keyfunc=22(gdb)0xb7da20fa =3CCAST=5FS=5Ftable0+61242=3E=
=3A=A0=A0=A0=A0=A0=A0=A0 =22p5=5Fpbev2=2Ec=22(gdb)0xb7da2105 =3CCAST=5FS=
=5Ftable0+61253=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22PKCS8=5FPRIV=5FKEY=5FINFO=22=
(gdb)0xb7da2119 =3CCAST=5FS=5Ftable0+61273=3E=3A=A0=A0=A0=A0=A0=A0=A0 =22=
pkeyalg=22(gdb)0xb7da2121 =3CCAST=5FS=5Ftable0+61281=3E=3A=A0=A0=A0=A0=A0=
=A0=A0 =22oid=5Fsection=220xb7da21b8 =3CCAST=5FS=5Ftable0+61432=3E=3A=A0=
=A0=A0=A0=A0=A0=A0 =22strlen(objstr)+23+2*enc-=3Eiv=5Flen+13 =3C=3D size=
of buf=22=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0 (string exploit here)gdb) disas 0xb7da31e4Du=
mp of assembler code for function CAST=5FS=5Ftable0=3Anable to open pid =
file =27/var/run/asterisk/asterisk=2Epid=27=3A Permission denied=5BNew T=
hread -1211937872 (LWP 15438)=5DProgram received signal SIGINT=2C Interr=
upt=2E=5BSwitching to Thread -1211934496 (LWP 15437)=5D0xb7e0654c in nan=
osleep () from /lib/tls/libc=2Eso=2E6(gdb) backtrace=230=A0 0xb7e0654c i=
n nanosleep () from /lib/tls/libc=2Eso=2E6=231=A0 0xb7e3ce2a in usleep (=
) from /lib/tls/libc=2Eso=2E6=232=A0 0x080b34a8 in test=5Ffor=5Fthread=5F=
safety ()=233=A0 0x00000064 in =3F=3F ()=234=A0 0x00000000 in =3F=3F ()n=
ull byte - 0xb7da33cc =3CSTORE=5Fparam=5Fsizes+348=3E=3A=A0=A0=A0=A0=A0 =
=22=5Cn=220xb7e7e770 =3Ccatanh+176=3E=3A=A0=A0=A0=A0=A0=A0=A0=A0 =22=DDE=
=5Cf=5C203=FE=5C002=5C017=5C224=C01=D2=5C203=FF=5C002=5C017=5C224=C2=DD=5D=
=D8=5C205=D0=DDE=5C024u=C6=D9=5C203=A4=AF=FF=FF=D9=C1=DE=CA=DDE=5Cf=DDE=5C=
f=D9=C9=D8=EA=D9=C9=D8=C2=D9=CB=DDU=D0=D9=C9=D8=C8=D9=CB=D8=C8=D9=CB=D8=C1=
=D9=CB=DE=C1=DD=5C034=24=DD=5D=A8=DD=5D=B8=E8j=B7=FF=FF=DDE=B8=D9=C9=DD=5D=
=D8=DD=5C034=24=E8Z=B7=FF=FF=DCm=D8=DDE=A8=DDE=5C024=D9=CA=D8=5C213=E8=B4=
=FF=FF=D9=CA=D8=C0=D9=CA=DD=5D=D8=DDE=5Cf=D8=C8=DE=E9=DCe=D0=D9=F3=DD=5D=
=E0=5C213E=5Cb=DDE=E0=D8=5C213=A8=AF=FF=FF=DDE=D8=E9D=FF=FF=FF=5C215=BB=D0=
=AE=FF=FF=5C211=3C=24=E8O=E5=FF=FF=5C213E=5Cb=DDU=D8=DDE=D8=D9=C9=DDX=5C=
b=DD=5C030=5C213=5D=F4=5C213u=F8=5C213=22=2E=2E=2E(gdb)(parts lit up in =
black and blinking)(looks like hi-ascii)

--Boundary_(ID_Zt0VdLS26ir4zrObMAlqhg)
Content-type: text/html; charset=iso-8859-1
Content-transfer-encoding: quoted-printable
Content-disposition: inline

=3Cfont face=3D=22Arial=2Csans-serif=22=3Eself corrupted gdb (which gdb =
itself is
warning=26nbsp=3B about)=2C corrupting the stack that by chance has a ju=
mp
instruction causing a loop=2C=26nbsp=3B An attacker can exploit this vul=
nerability
to inject malicious commands to be run under the permissions of the
current gbb session=2E =2C effects gdb 6=2E*-7=2E* I tested=2E=3Cbr=3E=3C=
br=3E=3Cbr=3E=3Cbr=3Easerisk exploit=3Cbr=3E=3Cbr=3Egdb asterisk=3Cbr=3E=
ctrl+c=3Cbr=3Er asterisk=3Cbr=3Ectrl+c=3Cbr=3E=3Cbr=3Er asterisk -r=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =26lt=3B----- reason for c=
rash ( -r is a flag for asterisk gdb mistakes this for run not run)=3Cbr=
=3Ex 0xb7e7dde8=3Cbr=3Er=3Cbr=3E=3Cbr=3Eret 0xb7e7dde8=3Cbr=3E=3Cbr=3EPr=
ogram received signal SIGINT=2C Interrupt=2E=3Cbr=3E=5BSwitching to Thre=
ad -1211655968 (LWP 3208)=5D=3Cbr=3E0xb7e7dde8 in poll () from /lib/tls/=
libc=2Eso=2E6=3Cbr=3E(gdb) ret 0xb7e7dde8=3Cbr=3EMake selected stack fra=
me return now=3F (y or n) y=3Cbr=3E=3Cbr=3Ereakpoint 1=2C 0x080a5e17 in =
main ()=3Cbr=3E(gdb) ret 0xb7e7dde8=3Cbr=3E=3Cbr=3E=3Cbr=3E0=26nbsp=3B 0=
xb7db9ea4 in =5F=5Flibc=5Fstart=5Fmain () from /lib/tls/libc=2Eso=2E6=3C=
br=3E(gdb) backtrace=3Cbr=3E=230=26nbsp=3B 0xb7db9ea4 in =5F=5Flibc=5Fst=
art=5Fmain () from /lib/tls/libc=2Eso=2E6=3Cbr=3E=231=26nbsp=3B 0x080554=
f1 in =5Fstart ()=3Cbr=3E=3Cbr=3EProgram received signal SIGINT=2C Inter=
rupt=2E=3Cbr=3E=5BSwitching to Thread -1211655968 (LWP 3208)=5D=3Cbr=3E0=
xb7e7dde8 in poll () from /lib/tls/libc=2Eso=2E6=3Cbr=3Einternal-error=3A=
 frame=5Fregister=3A Assertion =60frame !=3D NULL =26amp=3B=26amp=3B fra=
me-=26gt=3Bnext !=3D N=3Cbr=3EA problem internal to GDB has been detecte=
d=2C=3Cbr=3Efurther debugging may prove unreliable=2E=3Cbr=3ECreate a co=
re file of GDB=3F (y or n)=3Cbr=3EPlease answer y or n=2E=3Cbr=3E/build/=
buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26am=
p=3B=26amp=3B
frame-=26gt=3Bnext !=3D NULL=27 failed=2E=3Cbr=3EA problem internal to G=
DB has been detected=2C=3Cbr=3Efurther debugging may prove unreliable=2E=
=3Cbr=3ECreate a core file of GDB=3F (y or n)=26nbsp=3B=26nbsp=3B=26nbsp=
=3B =3Cbr=3E=3Cbr=3Epoll failed=3A No such file or directory=3Cbr=3Ex86*=
CLI=26gt=3B Aborted=3Cbr=3E=3Cbr=3E0xb7e101c2=3Cbr=3E=3Cbr=3E0xb7e1021e =
=26lt=3Bglob64+22478=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B 0xff=3Cbr=3E(gdb) x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B=
 x8=3Cbr=3E=3Cbr=3E0x7e1012b6 =26lt=3B-----=3Cbr=3E=3Cbr=3E0x7e10126e=3C=
br=3E=3Cbr=3E0x080a5554=3Cbr=3E=3Cbr=3E0xb7e10012 =26lt=3Bposix=5Ffalloc=
ate+258=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26n=
bsp=3B=26nbsp=3B =22=5C002=22=3Cbr=3E=3Cbr=3E=3Cbr=3E0xb7e10012 =26lt=3B=
posix=5Ffallocate+258=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B =22=5C002=22=3Cbr=3E(gdb)
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*C=3Cbr=3E=3Cbr=3E=3C=
br=3Eret 0xb7e101de=3Cbr=3E=3Cbr=3E=3Cbr=3Ex/s 0xb7e0fde8=3Cbr=3E=3Cbr=3E=
=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3Exb7e10887
=26lt=3Bsendfile64+1319=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B
=22=5C213E=D8=5C215=B5t=FB=FF=FF=5C211t=24=5Cb=5C211D=24=5C004=E8=B3=5C2=
30=FF=FF=5C205=C0=5C017=5C210=3B=FF=FF=FF=5C213M=5C020=5C213=5C205x=FB=FF=
=FF=5C2139=5C213q=5C004=5C211=BD=5Cb=FB=FF=FF=5C213=5C225=5Cb=FB=FF=FF=5C=
211=B5=5Cf=FB=FF=FF=5C213=BDt=FB=FF=FF=5C213=5C215=5Cf=FB=FF=FF1=D71=C1=5C=
t=F9=5C017=5C205=5C003=FF=FF=FF=5C213U=E0=5C211=5C225(=FB=FF=FF=5C211=5C=
225p=FB=FF=FF=5C213=B5(=FB=FF=FF=5C205=F6to=5C213=BD(=FB=FF=FF=B9=2C=22=3C=
br=3E(gdb)=3Cbr=3Ex86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*C=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E0xb7edb350 =26lt=3Bsystem=26gt=3B=3C=
br=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E0xb7e10348 =26lt=3Bsendfile+40=26gt=
=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbs=
p=3B =22=5C201=C1=5C224=A7=5C006=22=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=
=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3Eebx=26nbsp=3B=26nbsp=3B=26nbsp=3B=26n=
bsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbs=
p=3B 0xbfa6c69c=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=
=3B -1079589220=3Cbr=3Eesp=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbs=
p=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0xbfa6c=
45c=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0xbfa6c4=
5c=3Cbr=3Eebp=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0xbfa6c468=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0xbfa6c468=3Cbr=3Eesi=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0xbfa6c71a=26nbsp=3B=26nbsp=3B=26nbs=
p=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B -1079589094=3Cbr=3Eedi=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=
=3B=26nbsp=3B=26nbsp=3B 0xb7e7aadc=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B -1209554212=3Cbr=3Eeip=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B 0xb7e0fde8=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26n=
bsp=3B 0xb7e0fde8 =26lt=3Bpoll+56=26gt=3B=3Cbr=3E=3Cbr=3E=3Cbr=3Exmm0=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B =7Bv4=5Ffloat =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=
=2C v2=5Fdouble =3D =7B0x0=2C 0x0=7D=2C=3Cbr=3E=26nbsp=3B v16=5Fint8 =3D=
 =7B0x0 =26lt=3Brepeats 16 times=26gt=3B=7D=2C v8=5Fint16 =3D =7B0x0=2C =
0x0=2C 0x0=2C 0x0=2C 0x0=2C=3Cbr=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x0=2C=
 0x0=2C 0x0=7D=2C v4=5Fint32 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5F=
int64 =3D =7B0x0=2C 0x0=7D=2C=3Cbr=3E=26nbsp=3B uint128 =3D 0x0000000000=
0000000000000000000000=7D=3Cbr=3Exmm1=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =7Bv4=5F=
float =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5Fdouble =3D =7B0x0=2C 0x=
0=7D=2C=3Cbr=3E=26nbsp=3B v16=5Fint8 =3D =7B0x0 =26lt=3Brepeats 16 times=
=26gt=3B=7D=2C v8=5Fint16 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C=3Cbr=
=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x0=2C 0x0=2C 0x0=7D=2C v4=5Fint32 =3D=
 =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5Fint64 =3D =7B0x0=2C 0x0=7D=2C=3C=
br=3E=26nbsp=3B uint128 =3D 0x00000000000000000000000000000000=7D=3Cbr=3E=
xmm2=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B =7Bv4=5Ffloat =3D =7B0x0=2C 0x0=2C 0x0=2C=
 0x0=7D=2C v2=5Fdouble =3D =7B0x0=2C 0x0=7D=2C=3Cbr=3E=26nbsp=3B v16=5Fi=
nt8 =3D =7B0x0 =26lt=3Brepeats 16 times=26gt=3B=7D=2C v8=5Fint16 =3D =7B=
0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C=3Cbr=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B=
 0x0=2C 0x0=2C 0x0=7D=2C v4=5Fint32 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C=
 v2=5Fint64 =3D =7B0x0=2C 0x0=7D=2C=3Cbr=3E=3Cbr=3Exmm6=26nbsp=3B=26nbsp=
=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B =7Bv4=5Ffloat =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5Fdoub=
le =3D =7B0x0=2C 0x0=7D=2C=3Cbr=3E=26nbsp=3B v16=5Fint8 =3D =7B0x0 =26lt=
=3Brepeats 16 times=26gt=3B=7D=2C v8=5Fint16 =3D =7B0x0=2C 0x0=2C 0x0=2C=
 0x0=2C 0x0=2C=3Cbr=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x0=2C 0x0=2C 0x0=7D=
=2C v4=5Fint32 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5Fint64 =3D =7B0=
x0=2C 0x0=7D=2C=3Cbr=3E=26nbsp=3B uint128 =3D 0x000000000000000000000000=
00000000=7D=3Cbr=3Exmm7=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =7Bv4=5Ffloat =3D =7B=
0x0=2C 0x0=2C 0x0=2C 0x0=7D=2C v2=5Fdouble =3D =7B0x0=2C 0x0=7D=2C=3Cbr=3E=
=26nbsp=3B v16=5Fint8 =3D =7B0x0 =26lt=3Brepeats 16 times=26gt=3B=7D=2C =
v8=5Fint16 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C=3Cbr=3E=26nbsp=3B=26=
nbsp=3B=26nbsp=3B 0x0=2C 0x0=2C 0x0=7D=2C v4=5Fint32 =3D =7B0x0=2C 0x0=2C=
 0x0=2C 0x0=7D=2C v2=5Fint64 =3D =7B0x0=2C 0x0=7D=2C=3Cbr=3E=26nbsp=3B u=
int128 =3D 0x00000000000000000000000000000000=7D=3Cbr=3Emxcsr=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B 0x1f80=26nbsp=3B=26nbsp=3B 8064=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3Emm0=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =7Buint64 =3D 0x0=2C v2=5Fint32 =3D=
 =7B0x0=2C 0x0=7D=2C v4=5Fint16 =3D =7B0x0=2C 0x0=2C=3Cbr=3E=26nbsp=3B=26=
nbsp=3B=26nbsp=3B 0x0=2C 0x0=7D=2C v8=5Fint8 =3D =7B0x0=2C 0x0=2C 0x0=2C=
 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=7D=7D=3Cbr=3Emm1=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B =7Buint64 =3D 0x0=2C v2=5Fint32 =3D =7B0x0=2C 0x0=7D=2C =
v4=5Fint16 =3D =7B0x0=2C 0x0=2C=3Cbr=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x=
0=2C 0x0=7D=2C v8=5Fint8 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C=
 0x0=2C 0x0=7D=7D=3Cbr=3Emm2=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26n=
bsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =7Bui=
nt64 =3D 0x0=2C v2=5Fint32 =3D =7B0x0=2C 0x0=7D=2C v4=5Fint16 =3D =7B0x0=
=2C 0x0=2C=3Cbr=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x0=2C 0x0=7D=2C v8=5Fi=
nt8 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=7D=7D=3C=
br=3Emm3=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26n=
bsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =7Buint64 =3D 0x0=2C v2=5F=
int32 =3D =7B0x0=2C 0x0=7D=2C v4=5Fint16 =3D =7B0x0=2C 0x0=2C=3Cbr=3E=26=
nbsp=3B=26nbsp=3B=26nbsp=3B 0x0=2C 0x0=7D=2C v8=5Fint8 =3D =7B0x0=2C 0x0=
=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=7D=7D=3Cbr=3Emm4=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B =7Buint64 =3D 0x0=2C v2=5Fint32 =3D =7B0x0=2C =
0x0=7D=2C v4=5Fint16 =3D =7B0x0=2C 0x0=2C=3Cbr=3E=26nbsp=3B=26nbsp=3B=26=
nbsp=3B 0x0=2C 0x0=7D=2C v8=5Fint8 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x=
0=2C 0x0=2C 0x0=2C 0x0=7D=7D=3Cbr=3Emm5=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B =7Buint64 =3D 0x0=2C v2=5Fint32 =3D =7B0x0=2C 0x0=7D=2C v4=5Fint16=
 =3D =7B0x0=2C 0x0=2C=3Cbr=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x0=2C 0x0=7D=
=2C v8=5Fint8 =3D =7B0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x=
0=7D=7D=3Cbr=3Emm6=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26n=
bsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =7Buint64 =3D 0=
x0=2C v2=5Fint32 =3D =7B0x0=2C 0x0=7D=2C v4=5Fint16 =3D =7B0x0=2C 0x0=2C=
=3Cbr=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x0=2C 0x0=7D=2C v8=5Fint8 =3D =7B=
0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=2C 0x0=7D=7D=3Cbr=3Emm7=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =7Buint64 =3D 0xe41900e9e96363f9=2C =
v2=5Fint32 =3D =7B0xe96363f9=2C=3Cbr=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x=
e41900e9=7D=2C v4=5Fint16 =3D =7B0x63f9=2C 0xe963=2C 0xe9=2C 0xe419=7D=2C=
 v8=5Fint8 =3D =7B0xf9=2C=3Cbr=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x63=2C =
0x63=2C 0xe9=2C 0xe9=2C 0x0=2C 0x19=2C 0xe4=7D=7D=3Cbr=3E=3Cbr=3E=3Cbr=3E=
0xb7e4e90b 0x080a806c 0x80a8791=26nbsp=3B 0x80a933e 0x80aa391 0x80afc9c =
=26lt=3Baes=5Fencrypt+1356=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B =22=22=
=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3Egdb) x/a8 0x0a106=3Cbr=3EA synta=
x error in expression=2C near =600x0a106=27=2E=3Cbr=3E(gdb) call 0x0a106=
=3Cbr=3E=242 =3D 41222=3Cbr=3E(gdb) ret 0x0a106=3Cbr=3EMake selected sta=
ck frame return now=3F (y or n)=26nbsp=3B=26nbsp=3B =3Cbr=3E=3Cbr=3E=3Cb=
r=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=230=26nbsp=3B 0x080a5554 in=
 ast=5Fsafe=5Fsystem ()=3Cbr=3E(gdb) ret 0x0a106=3Cbr=3EMake selected st=
ack frame return now=3F (y or n) y=3Cbr=3Ex86*CLI=26gt=3B x86*CLI=26gt=3B=
 x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*C=3Cbr=3E=3Cbr=3E=3C=
br=3Ebuild/buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26am=
p=3B=26amp=3B
frame-=26gt=3Bnext !=3D NULL=27 failed=2E=3Cbr=3EA problem internal to G=
DB has been detected=2C=3Cbr=3Efurther debugging may prove unreliable=2E=
=3Cbr=3EQuit this debugging session=3F (y or n)=3Cbr=3EPlease answer y o=
r n=2E=3Cbr=3E/build/buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26am=
p=3B=26amp=3B
frame-=26gt=3Bnext !=3D NULL=27 failed=2E=3Cbr=3EA problem internal to G=
DB has been detected=2C=3Cbr=3Efurther debugging may prove unreliable=2E=
=3Cbr=3E=3Cbr=3E=3Cbr=3E0xb7f8e350 =3Cbr=3E=3Cbr=3E0xb7f8e505=3A=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22=5C207=DF=B8=AE=22=3Cbr=3E=3C=
br=3E/build/buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26am=
p=3B=26amp=3B
frame-=26gt=3Bnext !=3D NULL=27 failed=2E=3Cbr=3EA problem internal to G=
DB has been detected=2C=3Cbr=3Efurther debugging may prove unreliable=2E=
=3Cbr=3E=3Cbr=3E=3Cbr=3E/build/buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26am=
p=3B=26amp=3B
frame-=26gt=3Bnext !=3D NULL=27 failed=2E=3Cbr=3EA problem internal to G=
DB has been detected=2C=3Cbr=3Efurther debugging may prove unreliable=2E=
=3Cbr=3ECreate a core file of GDB=3F (y or n) y=3Cbr=3E=3Cbr=3E=3Cbr=3E/=
build/buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26am=
p=3B=26amp=3B
frame-=26gt=3Bnext !=3D NULL=27 failed=2E=3Cbr=3EA problem internal to G=
DB has been detected=2C=3Cbr=3Efurther debugging may prove unreliable=2E=
=3Cbr=3EQuit this debugging session=3F (y or n)=3Cbr=3EPlease answer y o=
r n=2E=3Cbr=3E/build/buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26am=
p=3B=26amp=3B
frame-=26gt=3Bnext !=3D NULL=27 failed=2E=3Cbr=3EA problem internal to G=
DB has been detected=2C=3Cbr=3Efurther debugging may prove unreliable=2E=
=3Cbr=3EQuit this debugging session=3F (y or n) n=3Cbr=3E=3Cbr=3E=3Cbr=3E=
=230=26nbsp=3B 0xb7e8dde8 in poll () from /lib/tls/libc=2Eso=2E6=3Cbr=3E=
=231=26nbsp=3B 0x080a5554 in ast=5Fsafe=5Fsystem ()=3Cbr=3E=3Cbr=3Ex/0xc=
d b7e8de85=3Cbr=3E=3Cbr=3E=3Cbr=3E=230=26nbsp=3B 0xb7e8dde8 in =3F=3F ()=
 from /lib/tls/libc=2Eso=2E6=3Cbr=3E=231=26nbsp=3B 0x080a5554 in =3F=3F =
()=3Cbr=3E=3Cbr=3E(gdb) ret 0x80a5554=3Cbr=3EMake selected stack frame r=
eturn now=3F (y or n) y=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
 =3Cbr=3E=3Cbr=3E0xb7e8de85 =26lt=3Bposix=5Ffadvise+37=26gt=3B=3A=26nbsp=
=3B 0xcd=3Cbr=3E(gdb)
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*=3Cbr=3E=3Cbr=3E=3Cbr=3E(gdb) backtr=
ace=3Cbr=3E=230=26nbsp=3B 0x080a5554 in ast=5Fsafe=5Fsystem ()=3Cbr=3E(g=
db)=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B =3Cbr=3E=3Cbr=3E=3Cbr=3E0x80a55ac =26lt=3Bast=5Fsafe=5Fsystem=
+2126=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbs=
p=3B 0x0b=3Cbr=3E(gdb)=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E0x80a55e6 =
=26lt=3Bast=5Fsafe=5Fsystem+2184=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x20=3Cbr=3E(gdb)=3Cbr=3Ex86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E0x80a55b9 4=
0x=3Cbr=3E=3Cbr=3E=3Cbr=3E0x080a4d81 =26lt=3Bast=5Fsafe=5Fsystem+35=26gt=
=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbs=
p=3B je=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x80a4e34 =26lt=3Bast=5F=
safe=5Fsystem+214=26gt=3B=3Cbr=3E=3Cbr=3E0x080a4d9d =26lt=3Bast=5Fsafe=5F=
system+63=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B je=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x80a4e52 =26=
lt=3Bast=5Fsafe=5Fsystem+244=26gt=3B=3Cbr=3E0x080a4da3 =26lt=3Bast=5Fsaf=
e=5Fsystem+69=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B jle=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x80a4ea5 =26lt=3B=
ast=5Fsafe=5Fsystem+327=26gt=3B=3Cbr=3E=3Cbr=3E=3Cbr=3E0x080a4de1 =26lt=3B=
ast=5Fsafe=5Fsystem+131=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B call=26nbsp=3B=26nbsp=3B 0x8054e48 =26lt=3Bpthread=5F=
mutex=5Flock=40plt=26gt=3B=3Cbr=3E=3Cbr=3E0x080a4da9 =26lt=3Bast=5Fsafe=5F=
system+75=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B lea=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x68(=25esp)=2C=25eb=
p=3Cbr=3E0x080a4dad =26lt=3Bast=5Fsafe=5Fsystem+79=26gt=3B=3A=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B lea=26nbsp=3B=26=
nbsp=3B=26nbsp=3B 0x20(=25esp)=2C=25edi=3Cbr=3E=3Cbr=3E0x080a50cd =26lt=3B=
ast=5Fsafe=5Fsystem+879=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B call=26nbsp=3B=26nbsp=3B 0x80551a8 =26lt=3Bsnprintf=
=40plt=26gt=3B=3Cbr=3E0x080a50d2 =26lt=3Bast=5Fsafe=5Fsystem+884=26gt=3B=
=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B cmpb=26n=
bsp=3B=26nbsp=3B =240x0=2C0x1c(=25esp)=3Cbr=3E=3Cbr=3E=3Cbr=3E0x080a50d7=
 =26lt=3Bast=5Fsafe=5Fsystem+889=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B je=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
 0x80a5114 =26lt=3Bast=5Fsafe=5Fsystem+950=26gt=3B=3Cbr=3E0x080a50d9 =26=
lt=3Bast=5Fsafe=5Fsystem+891=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x81093c0=2C=
=25edx=3Cbr=3E0x080a50df =26lt=3Bast=5Fsafe=5Fsystem+897=26gt=3B=3A=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B test=26nbsp=3B=26=
nbsp=3B =25edx=2C=25edx=3Cbr=3E0x080a50e1 =26lt=3Bast=5Fsafe=5Fsystem+89=
9=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
 je=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x80a53b7 =26lt=3Bast=5Fsafe=
=5Fsystem+1625=26gt=3B=3Cbr=3E0x080a50e7 =26lt=3Bast=5Fsafe=5Fsystem+905=
=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =
mov=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x81093bc=2C=25eax=3Cbr=3E0x080a50ec =26=
lt=3Bast=5Fsafe=5Fsystem+910=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B test=26nbsp=3B=26nbsp=3B =25eax=2C=25eax=3Cb=
r=3E0x080a50ee =26lt=3Bast=5Fsafe=5Fsystem+912=26gt=3B=3A=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B je=26nbsp=3B=26nbsp=3B=26n=
bsp=3B=26nbsp=3B 0x80a53b7 =26lt=3Bast=5Fsafe=5Fsystem+1625=26gt=3B=3Cbr=
=3E0x080a50f4 =26lt=3Bast=5Fsafe=5Fsystem+918=26gt=3B=3A=26nbsp=3B=26nbs=
p=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B lea=26nbsp=3B=26nbsp=3B=26n=
bsp=3B 0x1c(=25esp)=2C=25eax=3Cbr=3E0x080a50f8 =26lt=3Bast=5Fsafe=5Fsyst=
em+922=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B mov=26nbsp=3B=26nbsp=3B=26nbsp=3B =25eax=2C0xc(=25esp)=3Cbr=3E0x08=
0a50fc =26lt=3Bast=5Fsafe=5Fsystem+926=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B movl=26nbsp=3B=26nbsp=3B =240x12=2C=
0x8(=25esp)=3Cbr=3E0x080a5104 =26lt=3Bast=5Fsafe=5Fsystem+934=26gt=3B=3A=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B lea=26nbsp=3B=
=26nbsp=3B=26nbsp=3B 0x6c(=25esp)=2C=25eax=3Cbr=3E0x080a5108 =26lt=3Bast=
=5Fsafe=5Fsystem+938=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26nbsp=3B =25eax=2C0x4(=25esp)=
=3Cbr=3E=3Cbr=3E=3Cbr=3E0x080a51a7 =26lt=3Bast=5Fsafe=5Fsystem+1097=26gt=
=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B call=26nbsp=3B=26=
nbsp=3B 0x805fd1e =26lt=3Bast=5Factive=5Fchannels=26gt=3B=3Cbr=3E0x080a5=
1ac =26lt=3Bast=5Fsafe=5Fsystem+1102=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26nbsp=3B =240x80eac4a=
=2C=25edx=3Cbr=3E0x080a51b1 =26lt=3Bast=5Fsafe=5Fsystem+1107=26gt=3B=3A=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B test=26nbsp=3B=26nbsp=3B=
 =25eax=2C=25eax=3Cbr=3E0x080a51b3 =26lt=3Bast=5Fsafe=5Fsystem+1109=26gt=
=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B jne=26nbsp=3B=26=
nbsp=3B=26nbsp=3B 0x80a51ba =26lt=3Bast=5Fsafe=5Fsystem+1116=26gt=3B=3Cb=
r=3E0x080a510c =26lt=3Bast=5Fsafe=5Fsystem+942=26gt=3B=3A=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26=
nbsp=3B =25edx=2C(=25esp)=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=
=3B =3Cbr=3E=3Cbr=3E0x080a5308 =26lt=3Bast=5Fsafe=5Fsystem+1450=26gt=3B=3A=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B call=26nbsp=3B=26nbsp=
=3B 0x8054ef8 =26lt=3Bexecvp=40plt=26gt=3B=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=
=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E0xb7f77365
=26lt=3Bsystem+21=26gt=3B=3A=26nbsp=3B =22=5C211=5C004=24=E8g=5C215=FF=FF=
Z=5B=5D=C3=22=2C =27=5C220=27 =26lt=3Brepeats 15
times=26gt=3B=2C =22U=5C211=E5=5C203=EC=5Cb=5C211=7C=24=5C004=5C213=7D=5C=
b=5C2114=24e=5C2135=5Cb=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E0x080a5375 =26lt=3B=
ast=5Fsafe=5Fsystem+1559=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=
=3B=26nbsp=3B jmp=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x80a5199 =26lt=3Bast=5F=
safe=5Fsystem+1083=26gt=3B=3Cbr=3E0x080a537a =26lt=3Bast=5Fsafe=5Fsystem=
+1564=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B call=26=
nbsp=3B=26nbsp=3B 0x805fd1e =26lt=3Bast=5Factive=5Fchannels=26gt=3B=3Cbr=
=3E0x080a537f =26lt=3Bast=5Fsafe=5Fsystem+1569=26gt=3B=3A=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26nbsp=3B =24=
0x80eac04=2C=25edx=3Cbr=3E0x080a5384 =26lt=3Bast=5Fsafe=5Fsystem+1574=26=
gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B test=26nbsp=3B=
=26nbsp=3B =25eax=2C=25eax=3Cbr=3E0x080a5386 =26lt=3Bast=5Fsafe=5Fsystem=
+1576=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B jne=26=
nbsp=3B=26nbsp=3B=26nbsp=3B 0x80a538d =26lt=3Bast=5Fsafe=5Fsystem+1583=26=
gt=3B=3Cbr=3E0x080a5388 =26lt=3Bast=5Fsafe=5Fsystem+1578=26gt=3B=3A=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26=
nbsp=3B =240x80eac4c=2C=25edx=3Cbr=3E0x080a538d =26lt=3Bast=5Fsafe=5Fsys=
tem+1583=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mo=
v=26nbsp=3B=26nbsp=3B=26nbsp=3B =25edi=2C0x8(=25esp)=3Cbr=3E0x080a5391 =26=
lt=3Bast=5Fsafe=5Fsystem+1587=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26nbsp=3B =25edx=2C0x4(=25esp)=
=3Cbr=3E0x080a5395 =26lt=3Bast=5Fsafe=5Fsystem+1591=26gt=3B=3A=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B movl=26nbsp=3B=26nbsp=3B =240x8=
0eac0e=2C(=25esp)=3Cbr=3E0x080a539c =26lt=3Bast=5Fsafe=5Fsystem+1598=26g=
t=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B call=26nbsp=3B=
=26nbsp=3B 0x8056989 =26lt=3Bast=5Fverbose=26gt=3B=3Cbr=3E0x080a53a1 =26=
lt=3Bast=5Fsafe=5Fsystem+1603=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B jmp=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x80a5199 =26lt=3Bas=
t=5Fsafe=5Fsystem+1083=26gt=3B=3Cbr=3E0x080a53a6 =26lt=3Bast=5Fsafe=5Fsy=
stem+1608=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B m=
ovl=26nbsp=3B=26nbsp=3B =240x80ebaec=2C(=25esp)=3Cbr=3E0x080a53ad =26lt=3B=
ast=5Fsafe=5Fsystem+1615=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=
=3B=26nbsp=3B call=26nbsp=3B=26nbsp=3B 0x8056989 =26lt=3Bast=5Fverbose=26=
gt=3B=3Cbr=3E0x080a53b2 =26lt=3Bast=5Fsafe=5Fsystem+1620=26gt=3B=3A=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B jmp=26nbsp=3B=26nbsp=3B=26=
nbsp=3B 0x80a5143 =26lt=3Bast=5Fsafe=5Fsystem+997=26gt=3B=3Cbr=3E0x080a5=
3b7 =26lt=3Bast=5Fsafe=5Fsystem+1625=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B call=26nbsp=3B=26nbsp=3B 0x80a3de7 =26lt=3Bast=
=5Fset=5Fpriority+2778=26gt=3B=3Cbr=3E0x080a53bc =26lt=3Bast=5Fsafe=5Fsy=
stem+1630=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B m=
ov=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x81093c0=2C=25edx=3Cbr=3E0x080a53c2 =26=
lt=3Bast=5Fsafe=5Fsystem+1636=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B jmp=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x80a50f4 =26lt=3Bas=
t=5Fsafe=5Fsystem+918=26gt=3B=3Cbr=3E0x080a53c7 =26lt=3Bast=5Fsafe=5Fsys=
tem+1641=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mo=
v=26nbsp=3B=26nbsp=3B=26nbsp=3B =240x80e7f14=2C=25eax=3Cbr=3E0x080a53cc =
=26lt=3Bast=5Fsafe=5Fsystem+1646=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B jmp=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x80a501e =26lt=3B=
ast=5Fsafe=5Fsystem+704=26gt=3B=3Cbr=3E0x080a53d1 =26lt=3Bast=5Fsafe=5Fs=
ystem+1651=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =
sub=26nbsp=3B=26nbsp=3B=26nbsp=3B =240xc=2C=25esp=3Cbr=3E0x080a53d4 =26l=
t=3Bast=5Fsafe=5Fsystem+1654=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26nbsp=3B =240x1=2C=25eax=3Cbr=
=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E0x080a56f7 =26lt=3Bast=5Fsafe=5Fsystem+2457=26=
gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=
=26nbsp=3B=26nbsp=3B =25eax=2C(=25esp)=3Cbr=3E0x080a56fa =26lt=3Bast=5Fs=
afe=5Fsystem+2460=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26n=
bsp=3B call=26nbsp=3B=26nbsp=3B 0x8054a78 =26lt=3Bfprintf=40plt=26gt=3B=3C=
br=3E0x080a56ff =26lt=3Bast=5Fsafe=5Fsystem+2465=26gt=3B=3A=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B call=26nbsp=3B=26nbsp=3B 0x808c708=
 =26lt=3Bterm=5Fquit=26gt=3B=3Cbr=3E=3Cbr=3E0x080a59c2 =26lt=3Bast=5Fsaf=
e=5Fsystem+3172=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbs=
p=3B je=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x80a59e6 =26lt=3Bast=5F=
safe=5Fsystem+3208=26gt=3B=3Cbr=3E0x080a59c4 =26lt=3Bast=5Fsafe=5Fsystem=
+3174=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B movl=26=
nbsp=3B=26nbsp=3B =240x0=2C0xc(=25esp)=3Cbr=3E0x080a59cc =26lt=3Bast=5Fs=
afe=5Fsystem+3182=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26n=
bsp=3B movl=26nbsp=3B=26nbsp=3B =240xa=2C0x8(=25esp)=3Cbr=3E0x080a59d4 =26=
lt=3Bast=5Fsafe=5Fsystem+3190=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B movl=26nbsp=3B=26nbsp=3B =240x0=2C0x4(=25esp)=3Cbr=3E0=
x080a59dc =26lt=3Bast=5Fsafe=5Fsystem+3198=26gt=3B=3A=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26nbsp=3B =25ebx=2C=
(=25esp)=3Cbr=3E0x080a59df =26lt=3Bast=5Fsafe=5Fsystem+3201=26gt=3B=3A=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B call=26nbsp=3B=26nbsp=3B=
 0x8054ec8 =26lt=3B=5F=5Fstrtol=5Finternal=40plt=26gt=3B=3Cbr=3E0x080a59=
e4 =26lt=3Bast=5Fsafe=5Fsystem+3206=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbs=
p=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26nbsp=3B =25eax=2C=25e=
bp=3Cbr=3E0x080a59e6 =26lt=3Bast=5Fsafe=5Fsystem+3208=26gt=3B=3A=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26nbsp=3B=
 0x81093b8=2C=25eax=3Cbr=3E0x080a59eb =26lt=3Bast=5Fsafe=5Fsystem+3213=26=
gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=
=26nbsp=3B=26nbsp=3B =25eax=2C0xc(=25esp)=3Cbr=3E0x080a59ef =26lt=3Bast=5F=
safe=5Fsystem+3217=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B movl=26nbsp=3B=26nbsp=3B =240x80eacc4=2C0x8(=25esp)=3Cbr=3E0x080=
a59f7 =26lt=3Bast=5Fsafe=5Fsystem+3225=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B movl=26nbsp=3B=26nbsp=3B =240x50=2C0x4(=25es=
p)=3Cbr=3E0x080a59ff =26lt=3Bast=5Fsafe=5Fsystem+3233=26gt=3B=3A=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B lea=26nbsp=3B=26nbsp=3B=26nbsp=3B=
 0x20(=25esp)=2C=25ebx=3Cbr=3E0x080a5a03 =26lt=3Bast=5Fsafe=5Fsystem+323=
7=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbs=
p=3B=26nbsp=3B=26nbsp=3B =25ebx=2C(=25esp)=3Cbr=3E0x080a5a06 =26lt=3Bast=
=5Fsafe=5Fsystem+3240=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B call=26nbsp=3B=26nbsp=3B 0x80551a8 =26lt=3Bsnprintf=40plt=26g=
t=3B=3Cbr=3E0x080a5a0b =26lt=3Bast=5Fsafe=5Fsystem+3245=26gt=3B=3A=26nbs=
p=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbsp=3B=26nbsp=3B=26n=
bsp=3B =25ebx=2C=25edx=3Cbr=3E0x080a5a0d =26lt=3Bast=5Fsafe=5Fsystem+324=
7=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B mov=26nbs=
p=3B=26nbsp=3B=26nbsp=3B 0x8104178=2C=25eax=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=
=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=
=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=26lt=3Bast=5Fsafe=5Fsystem+2185=26gt=
=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0xff=3C=
br=3E(gdb)=3Cbr=3Ex86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86=3Cbr=3E(0100 times 3 pages)=3Cbr=3E=3Cbr=3Ewhen I ty=
pe ret and half way through the address it prints x86*CLI=26gt=3B for 3 =
pages=2E (even after I let it idle for a while)=3Cbr=3E=3Cbr=3E=3Cbr=3E=3C=
br=3E0x80a560a =26lt=3Bast=5Fsafe=5Fsystem+2220=26gt=3B=3A=26nbsp=3B=26n=
bsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x00=3Cbr=3E(gdb)=3Cbr=3E=
x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B
x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26=
gt=3B x86*C=3Cbr=3Every large keeps going 100x=3Cbr=3E=3Cbr=3E0x80a56a0 =
=26lt=3Bast=5Fsafe=5Fsystem+2370=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x04=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E0x80a=
5736 =26lt=3Bast=5Fsafe=5Fsystem+2520=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26n=
bsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x08=3Cbr=3E(gdb)=3Cbr=3Ex86*CLI=26=
gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B 0x80a5737 =26lt=3Bast=5Fsafe=5Fsys=
tem+2521=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B 0xe8=3Cbr=3E(gdb)=3Cbr=
=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=
=3E=3Cbr=3E=3Cbr=3Ex86=403=5Bnewsploit=5D=24 gdb gdb=3Cbr=3EGNU gdb 6=2E=
4-debian=3Cbr=3ECopyright 2005 Free Software Foundation=2C Inc=2E=3Cbr=3E=
GDB is free software=2C covered by the GNU General Public License=2C and=
 you are=3Cbr=3Ewelcome to change it and/or distribute copies of it unde=
r certain conditions=2E=3Cbr=3EType =22show copying=22 to see the condit=
ions=2E=3Cbr=3EThere is absolutely no warranty for GDB=2E=26nbsp=3B Type=
 =22show warranty=22 for details=2E=3Cbr=3EThis GDB was configured as =22=
i486-linux-gnu=22=2E=2E=2E(no debugging symbols found)=3Cbr=3EUsing host=
 libthread=5Fdb library =22/lib/tls/libthread=5Fdb=2Eso=2E1=22=2E=3Cbr=3E=
=3Cbr=3E(gdb) x 0x80a561b=3Cbr=3E0x80a561b =26lt=3Bvalidate=5Factionline=
+606=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B 0xfd1400e8=3Cbr=3E(gdb)=3C=
br=3E0x80a561f =26lt=3Bvalidate=5Factionline+610=26gt=3B=3A=26nbsp=3B=26=
nbsp=3B=26nbsp=3B 0xec4589ff=3Cbr=3E(gdb)=3Cbr=3E0x80a5623 =26lt=3Bvalid=
ate=5Factionline+614=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B 0xffff60e9=
=3Cbr=3E(gdb)=3Cbr=3E0x80a5627 =26lt=3Bvalidate=5Factionline+618=26gt=3B=
=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x2444c7ff=3Cbr=3E(gdb)=3Cbr=3E0x80a56=
2b =26lt=3Bvalidate=5Factionline+622=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nb=
sp=3B 0x0a250704=3Cbr=3E(gdb)=3Cbr=3E0x80a562f =26lt=3Bvalidate=5Faction=
line+626=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x24348908=3Cbr=3E(gdb=
)=3Cbr=3E0x80a5633 =26lt=3Bvalidate=5Factionline+630=26gt=3B=3A=26nbsp=3B=
=26nbsp=3B=26nbsp=3B 0x006825e8=3Cbr=3E(gdb)=3Cbr=3E0x80a5637 =26lt=3Bva=
lidate=5Factionline+634=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x0fc08=
500=3Cbr=3E(gdb)=3Cbr=3E0x80a563b =26lt=3Bvalidate=5Factionline+638=26gt=
=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B 0x00008f84=3Cbr=3E(gdb)=3Cbr=3E0x80=
a563f =26lt=3Bvalidate=5Factionline+642=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26=
nbsp=3B 0xec4d8b00=3Cbr=3Erogram received signal SIGINT=2C Interrupt=2E=3C=
br=3E0xb7e55de8 in poll () from /lib/tls/libc=2Eso=2E6=3Cbr=3E(gdb) x 0x=
b7e55de8=3Cbr=3E0xb7e55de8 =26lt=3Bpoll+56=26gt=3B=3A=26nbsp=3B=26nbsp=3B=
 0x003dfb87=3Cbr=3E(gdb)=3Cbr=3E0xb7e55dec =26lt=3Bpoll+60=26gt=3B=3A=26=
nbsp=3B=26nbsp=3B 0x89fffff0=3Cbr=3E(gdb)=3Cbr=3E0xb7e55df0 =26lt=3Bpoll=
+64=26gt=3B=3A=26nbsp=3B=26nbsp=3B 0x893b77c7=26nbsp=3B=26nbsp=3B=26nbsp=
=3B =3Cbr=3E=3Cbr=3E=3Cbr=3Egdb) backtrace=3Cbr=3E=230=26nbsp=3B 0xb7e55=
de8 in poll () from /lib/tls/libc=2Eso=2E6=3Cbr=3E=231=26nbsp=3B 0x08112=
244 in gdb=5Fdo=5Fone=5Fevent ()=3Cbr=3E=232=26nbsp=3B 0x0810f303 in cat=
ch=5Ferrors ()=3Cbr=3E=233=26nbsp=3B 0x080bbd21 in =5Finitialize=5Ftui=5F=
hooks ()=3Cbr=3E=234=26nbsp=3B 0x0810f59b in current=5Finterp=5Fcommand=5F=
loop ()=3Cbr=3E=235=26nbsp=3B 0x080779cb in main ()=3Cbr=3E=3Cbr=3E(gdb)=
 ret 0x9010f5cb=3Cbr=3E=3Cbr=3E=3Cbr=3E0=26nbsp=3B 0x08112244 in gdb=5Fd=
o=5Fone=5Fevent ()=3Cbr=3E=3Cbr=3Ex/s =24eip=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cb=
r=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E0x8113d33
=26lt=3Binferior=5Fevent=5Fhandler=5Fwrapper+49=26gt=3B=3A=26nbsp=3B=26n=
bsp=3B =22=C9=C3=22=2C =27=5C220=27 =26lt=3Brepeats
11 times=26gt=3B=2C =22U=5C211=E5=A1=D0i(=5Cb=5D=C3U=5C211=E51=C0=5D=C3U=
=5C211=E5WVS=5C203=EC=5C034=C7=5C004=24=5C004=22=3Cbr=3E(gdb)=3Cbr=3E=3C=
br=3E=3Cbr=3E0x81183b3
=26lt=3Bgdbarch=5Fpseudo=5Fregister=5Fwrite+216=26gt=3B=3A=26nbsp=3B=26n=
bsp=3B
=22=C7=5C004=24=7C=5E=23=5Cb=E8ep=F6=FFU=5C211=E5=5C213U=5Cf=5C213E=5Cb=5C=
211Pt=5D=C3U=5C211=E5S=5C203=EC=5C024=5C213=5D=5Cb=5C205=DBt/=5C213Cx=5C=
203=F8=FFtk=5C203=3D=F0=E3(=5Cb=5C001=7E=5C030=C7D=24=5C004=E1Z=23=5Cb=A1=
h!*=5Cb=5C211=5C004=24=E8Q=5C200=F6=FF=5C213Cx=5C203=C4=5C024=5B=5D=C3=C7=
D=24=5Cb=5C005=22=3Cbr=3E(gdb=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3C=
br=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E0x8=
11b40d =26lt=3Bset=5Fgdbarch=5Funwind=5Fsp+15=26gt=3B=3A=26nbsp=3B=26nbs=
p=3B=26nbsp=3B =22=5D=C3U=5C211=E5VS=5C203=EC =5C213=5D=5Cb=5C213u=5Cf=5C=
205=DBt9=5C213=5C213X=5C001=22=3Cbr=3E(gdb)=3Cbr=3E0x811b426 =26lt=3Bgdb=
arch=5Fdeprecated=5Fsaved=5Fpc=5Fafter=5Fcall+23=26gt=3B=3A=26nbsp=3B=26=
nbsp=3B =22=22=3Cbr=3E(gdb)=3Cbr=3E0x811b427
=26lt=3Bgdbarch=5Fdeprecated=5Fsaved=5Fpc=5Fafter=5Fcall+24=26gt=3B=3A=26=
nbsp=3B=26nbsp=3B
=22=5C205=C9ts=5C203=3D=F0=E3(=5Cb=5C001=7E=5C033=C7D=24=5C004=FC=A4=23=5C=
b=A1h!*=5Cb=5C211=5C004=24=E8=5CtP=F6=FF=5C213=5C213X=5C001=22=3Cbr=3E(g=
db)=3Cbr=3E0x811b44e =26lt=3Bgdbarch=5Fdeprecated=5Fsaved=5Fpc=5Fafter=5F=
call+63=26gt=3B=3A=26nbsp=3B=26nbsp=3B =22=22=3Cbr=3E(gdb)=3Cbr=3E0x811b=
44f =26lt=3Bgdbarch=5Fdeprecated=5Fsaved=5Fpc=5Fafter=5Fcall+64=26gt=3B=3A=
=26nbsp=3B=26nbsp=3B =22=5C211u=5Cb=5C203=C4 =5B=5E=5D=FF=E1=C7D=24=5Cb=5C=
005=22=3Cbr=3E(gdb)=3Cbr=3E0x811b460 =26lt=3Bgdbarch=5Fdeprecated=5Fsave=
d=5Fpc=5Fafter=5Fcall+81=26gt=3B=3A=26nbsp=3B=26nbsp=3B =22=22=3Cbr=3E(g=
db)=3Cbr=3E0x811b461 =26lt=3Bgdbarch=5Fdeprecated=5Fsaved=5Fpc=5Fafter=5F=
call+82=26gt=3B=3A=26nbsp=3B=26nbsp=3B =22=22=3Cbr=3E(gdb)=3Cbr=3E0x811b=
462 =26lt=3Bgdbarch=5Fdeprecated=5Fsaved=5Fpc=5Fafter=5Fcall+83=26gt=3B=3A=
=26nbsp=3B=26nbsp=3B =22=C7D=24=5C004=5C226s =5Cb=C7=5C004=24=22=3Cbr=3E=
(gdb)=3Cbr=3E=3Cbr=3E(it=27s jumping around) possible jmp trick exploit =
found=3Cbr=3E=3Cbr=3E=3Cbr=3E0x811b5d5 =26lt=3Bset=5Fgdbarch=5Fframe=5Fn=
um=5Fargs+15=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B =22=5D=C3U=5C211=E5VS=5C203=EC =5C213=5D=5Cb=5C213u=5Cf=5C205=
=DBt9=5C213=5C213=60=5C001=22=3Cbr=3E(gdb)=3Cbr=3E0x811b5ee =26lt=3Bgdba=
rch=5Fdeprecated=5Fstack=5Falign+23=26gt=3B=3A=26nbsp=3B=26nbsp=3B =22=22=
=3Cbr=3E(gdb)=3Cbr=3E0x811b5ef
=26lt=3Bgdbarch=5Fdeprecated=5Fstack=5Falign+24=26gt=3B=3A=26nbsp=3B=26n=
bsp=3B
=22=5C205=C9ts=5C203=3D=F0=E3(=5Cb=5C001=7E=5C033=C7D=24=5C004=5C224=A5=23=
=5Cb=A1h!*=5Cb=5C211=5C004=24=E8AN=F6=FF=5C213=5C213=60=5C001=22=3Cbr=3E=
(gdb)=3Cbr=3E0x811b616 =26lt=3Bgdbarch=5Fdeprecated=5Fstack=5Falign+63=26=
gt=3B=3A=26nbsp=3B=26nbsp=3B =22=22=3Cbr=3E(gdb)=3Cbr=3E=3Cbr=3E=3Cbr=3E=
=3Cbr=3E0x811cfb5
=26lt=3Bdeprecated=5Fregister=5Fgdbarch=5Fswap+52=26gt=3B=3A=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B
=22=5C213=5C023=5C213E=5C020=5C211B=5Cb=5C213E=5Cb=5C211=5C002=5C213E=5C=
f=5C211B=5C004=5C203=C4=5C004=5B=5D=C3U=5C211=E5VS=5C203=EC
=5C2135=E0i(=5Cb=5C205=F6tW=5C213=5E=24=5C205=DBt=3D=5C213C=5C004=5C213=5C=
v=5C213=5C020=5C213=40=5C004=5C211D=24=5Cb=5C211T=24=5C004=5C211=5Cf=24=E8=
=AF=A3=F5=FF=5C213C=5C004=5C213=5C020=5C213=40=5C004=5C211D=24=5Cb=C7D=24=
=5C004=22=3Cbr=3E(gdb)=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3C=
br=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3C=
br=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E(being run as regular user )=3Cbr=3E=
=3Cbr=3E=3Cbr=3E=3Cbr=3EUnable to connect to remote asterisk (does /var/=
run/asterisk/asterisk=2Ectl exist=3F)=3Cbr=3E=3Cbr=3EProgram exited with=
 code 01=2E=3Cbr=3E(gdb) run asterisk -r =7C=3Cbr=3EStarting program=3A =
/usr/sbin/asterisk asterisk -r =7C=3Cbr=3E/bin/bash=3A -c=3A line 1=3A s=
yntax error=3A unexpected end of file=3Cbr=3E=3Cbr=3EProgram exited with=
 code 02=2E=3Cbr=3EYou can=27t do that without a process to debug=2E=3Cb=
r=3E(gdb) run asterisk -r =7Cx86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26g=
t=3B Quit=3Cbr=3E(gdb) run asterisk -vvvvvc=3Cbr=3EStarting program=3A /=
usr/sbin/asterisk asterisk -vvvvvc=3Cbr=3E(no debugging symbols found)=3C=
br=3EError in re-setting breakpoint 1=3A=3Cbr=3EFunction =22main=22 not =
defined=2E=3Cbr=3E(no debugging symbols found)=3Cbr=3EError in re-settin=
g breakpoint 1=3A=3Cbr=3EFunction =22main=22 not defined=2E=3Cbr=3E(no d=
ebugging symbols found)=3Cbr=3EError in re-setting breakpoint 1=3A=3Cbr=3E=
Function =22main=22 not defined=2E=3Cbr=3E=5BThread debugging using libt=
hread=5Fdb enabled=5D=3Cbr=3E=5BNew Thread -1212167968 (LWP 32289)=5D=3C=
br=3E(no debugging symbols found)=3Cbr=3EError in re-setting breakpoint =
1=3A=3Cbr=3EFunction =22main=22 not defined=2E=3Cbr=3E(no debugging symb=
ols found)=3Cbr=3EError in re-setting breakpoint 1=3A=3Cbr=3EFunction =22=
main=22 not defined=2E=3Cbr=3E(no debugging symbols found)=3Cbr=3EError =
in re-setting breakpoint 1=3A=3Cbr=3EFunction =22main=22 not defined=2E=3C=
br=3E(no debugging symbols found)=3Cbr=3EError in re-setting breakpoint =
1=3A=3Cbr=3EFunction =22main=22 not defined=2E=3Cbr=3E(no debugging symb=
ols found)=3Cbr=3EError in re-setting breakpoint 1=3A=3Cbr=3EFunction =22=
main=22 not defined=2E=3Cbr=3E(no debugging symbols found)=3Cbr=3EError =
in re-setting breakpoint 1=3A=3Cbr=3EFunction =22main=22 not defined=2E=3C=
br=3E(no debugging symbols found)=3Cbr=3EError in re-setting breakpoint =
1=3A=3Cbr=3EFunction =22main=22 not defined=2E=3Cbr=3E(no debugging symb=
ols found)=3Cbr=3EError in re-setting breakpoint 1=3A=3Cbr=3EFunction =22=
main=22 not defined=2E=3Cbr=3EUnable to open pid file =27/var/run/asteri=
sk/asterisk=2Epid=27=3A Permission denied=3Cbr=3E=5BNew Thread -12121713=
44 (LWP 32293)=5D=3Cbr=3E=5BThread -1212171344 (LWP 32293) exited=5D=3Cb=
r=3EUnable to bind socket to /var/run/asterisk/asterisk=2Ectl=3A Address=
 already in use=3Cbr=3E=26nbsp=3B =3D=3D Parsing =27/etc/asterisk/asteri=
sk=2Econf=27=3A Not found (Permission denied)=3Cbr=3E=26nbsp=3B =3D=3D P=
arsing =27/etc/asterisk/extconfig=2Econf=27=3A Not found (Permission den=
ied)=3Cbr=3EAsterisk 1=2E2=2E7=2E1=2C Copyright (C) 1999 - 2006 Digium=2C=
 Inc=2E and others=2E=3Cbr=3ECreated by Mark Spencer =26lt=3Bmarkster=40=
digium=2Ecom=26gt=3B=3Cbr=3EAsterisk comes with ABSOLUTELY NO WARRANTY=3B=
 type =27show warranty=27 for details=2E=3Cbr=3EThis is free software=2C=
 with components licensed under the GNU General Public=3Cbr=3ELicense ve=
rsion 2 and other licenses=3B you are welcome to redistribute it under=3C=
br=3Ecertain conditions=2E Type =27show license=27 for details=2E=3Cbr=3E=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3Cbr=3E=26nbsp=3B =3D=3D Parsing =27/etc/asterisk/logger=2Econf=27=3A=
 Not found (Permission denied)=3Cbr=3EUnable to open logger=2Econf=3A Pe=
rmission denied=3Cbr=3ErJan 18 07=3A36=3A58 ERROR=5B32289=5D=3A logger=2E=
c=3A625 init=5Flogger=3A Unable to create event log=3A Permission denied=
=26nbsp=3B =3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=
=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=230=26nbsp=3B 0xb7da1ea4 in =
=5F=5Flibc=5Fstart=5Fmain () from /lib/tls/libc=2Eso=2E6=3Cbr=3E(gdb)=3C=
br=3EMake selected stack frame return now=3F (y or n) y=3Cbr=3E=230=26nb=
sp=3B 0x080554f1 in =3F=3F ()=3Cbr=3E(gdb)=3Cbr=3EMake selected stack fr=
ame return now=3F (y or n) y=3Cbr=3E=3Cbr=3E/build/buildd/gdb-6=2E4/gdb/=
frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26am=
p=3B=26amp=3B
frame-=26gt=3Bnext !=3D NULL=27 failed=2E=3Cbr=3EA problem internal to G=
DB has been detected=2C=3Cbr=3Efurther debugging may prove unreliable=2E=
=3Cbr=3EQuit this debugging session=3F (y or n)=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =3Cbr=3E=
=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=
=5Cf=5C213E=5Cb=5C211=5D=F4=E8=B3=5C213=FF=FF=5C201=C3=CD4=22=3Cbr=3E(gd=
b)=3Cbr=3E0xb7f7b70c =26lt=3Bpthread=5Fgetaffinity=5Fnp=40=40GLIBC=5F2=2E=
3=2E4+28=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22=22=3Cbr=3E=
(gdb)=3Cbr=3E0xb7f7b70d =26lt=3Bpthread=5Fgetaffinity=5Fnp=40=40GLIBC=5F=
2=2E3=2E4+29=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22=5C21=
1=7D=FC=5C205=F6=5C213U=5C020=5C213xH=5C211=F1xJ=5C207=DF=B8=F2=22=3Cbr=3E=
(gdb)=3Cbr=3E0xb7f7b721 =26lt=3Bpthread=5Fgetaffinity=5Fnp=40=40GLIBC=5F=
2=2E3=2E4+49=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22=22=3C=
br=3E(gdb)=3Cbr=3E0xb7f7b722 =26lt=3Bpthread=5Fgetaffinity=5Fnp=40=40GLI=
BC=5F2=2E3=2E4+50=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22=
=22=3Cbr=3E(gdb)=3Cbr=3E0xb7f7b723 =26lt=3Bpthread=5Fgetaffinity=5Fnp=40=
=40GLIBC=5F2=2E3=2E4+51=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
 =22=CD=5C200=5C207=FB=3D=22=3Cbr=3E(gdb)=3Cbr=3E0xb7f7b729 =26lt=3Bpthr=
ead=5Fgetaffinity=5Fnp=40=40GLIBC=5F2=2E3=2E4+57=26gt=3B=3A=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B =22=F0=FF=FFv=5C022=5C213=5D=F4=F7=D8=5C213u=
=F8=5C213=7D=FC=5C211=EC=5D=C3=5C215v=22=3Cbr=3E(gdb)=3Cbr=3E0xb7f7b740
=26lt=3Bpthread=5Fgetaffinity=5Fnp=40=40GLIBC=5F2=2E3=2E4+80=26gt=3B=3A=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B
=22)=C6=5C215=5Cf=5C0021=D2=5C211t=24=5Cb=5C211T=24=5C004=5C211=5Cf=24=E8=
=5C215=5C212=FF=FF=5C213=5D=F41=C0=5C213u=F8=5C213=7D=FC=5C211=EC=5D=C3=B9=
=FF=FF=FF=5C177=EB=AF=5C215v=22=3Cbr=3E(gdb)=3Cbr=3E0xb7f7b770 =26lt=3Bp=
thread=5Fgetaffinity=5Fnp=40GLIBC=5F2=2E3=2E3=26gt=3B=3A=26nbsp=3B=26nbs=
p=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22U=B9=
=5C200=22=3Cbr=3E(gdb)=3Cbr=3E0xb7f7b774 =26lt=3Bpthread=5Fgetaffinity=5F=
np=40GLIBC=5F2=2E3=2E3+4=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=
=3B=26nbsp=3B=26nbsp=3B =22=22=3Cbr=3E(gdb)=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=
=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B =3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=
=3Cbr=3E0x000008ec in =3F=3F ()=3Cbr=3E(gdb)=3Cbr=3EMake selected stack =
frame return now=3F (y or n) y=3Cbr=3E=230=26nbsp=3B 0x080ec8c4 in =3F=3F=
 ()=3Cbr=3E(gdb)=3Cbr=3EMake selected stack frame return now=3F (y or n)=
 y=3Cbr=3E=230=26nbsp=3B 0x080ec594 in =3F=3F ()=3Cbr=3E(gdb)=3Cbr=3EMak=
e selected stack frame return now=3F (y or n) y=3Cbr=3E=230=26nbsp=3B 0x=
08110800 in =3F=3F ()=3Cbr=3E(gdb)=3Cbr=3EMake selected stack frame retu=
rn now=3F (y or n) y=3Cbr=3E=3Cbr=3E=230=26nbsp=3B 0xb7f43bf6 in =5Fdl=5F=
rtld=5Fdi=5Fserinfo () from /lib/ld-linux=2Eso=2E2=3Cbr=3E(gdb)=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=
=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B =3Cbr=3Eret 0xb7da1ea4=3Cbr=3E=3Cbr=3E=3Cbr=3ELI=26gt=3B x86*CLI=26=
gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B x86*CLI=26gt=3B =230=26nbsp=3B 0x0=
80554f1 in =3F=3F ()=3Cbr=3E(gdb)=3Cbr=3EMake selected stack frame retur=
n now=3F (y or n) y=3Cbr=3E=3Cbr=3E/build/buildd/gdb-6=2E4/gdb/frame=2Ec=
=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26am=
p=3B=26amp=3B
frame-=26gt=3Bnext !=3D NULL=27 failed=2E=3Cbr=3EA problem internal to G=
DB has been detected=2C=3Cbr=3Efurther debugging may prove unreliable=2E=
=3Cbr=3EQuit this debugging session=3F (y or n)=26nbsp=3B =3Cbr=3E=3Cbr=3E=
=3Cbr=3E=3Cbr=3Egdb)=3Cbr=3EMake selected stack frame return now=3F (y o=
r n) y=3Cbr=3E=230=26nbsp=3B 0x00000001 in =3F=3F ()=3Cbr=3E(gdb)=3Cbr=3E=
Make selected stack frame return now=3F (y or n) y=3Cbr=3E=230=26nbsp=3B=
 0x00000000 in =3F=3F ()=3Cbr=3E(gdb)=3Cbr=3EMake selected stack frame r=
eturn now=3F (y or n) y=3Cbr=3E=230=26nbsp=3B 0x080ec8a6 in =3F=3F ()=3C=
br=3E(gdb)=3Cbr=3EMake selected stack frame return now=3F (y or n) y=3Cb=
r=3E=230=26nbsp=3B 0x080ec640 in =3F=3F ()=3Cbr=3E(gdb)=3Cbr=3EMake sele=
cted stack frame return now=3F (y or n) y=3Cbr=3E=230=26nbsp=3B 0x081108=
00 in =3F=3F ()=3Cbr=3E(gdb)=3Cbr=3EMake selected stack frame return now=
=3F (y or n) y=3Cbr=3E=230=26nbsp=3B 0xb7ece52e in in6addr=5Fany ()=3Cbr=
=3E=26nbsp=3B=26nbsp=3B from /lib/tls/libc=2Eso=2E6=3Cbr=3E(gdb) backtra=
ce=3Cbr=3E=230=26nbsp=3B 0xb7ece52e in in6addr=5Fany () from /lib/tls/li=
bc=2Eso=2E6=3Cbr=3E=231=26nbsp=3B 0xb7fb7eec in =3F=3F ()=3Cbr=3E=3Cbr=3E=
=3Cbr=3E=26nbsp=3B=26nbsp=3B=26nbsp=3B () from /lib/tls/libpthread=2Eso=2E=
0=3Cbr=3E(gdb) backtrace=3Cbr=3E=230=26nbsp=3B 0xb7f3d312 in sysctl=5Far=
gs=2E0 () from /lib/tls/libpthread=2Eso=2E0=3Cbr=3E=231=26nbsp=3B 0xb7f6=
1b30 in =5Fdl=5Frtld=5Fdi=5Fserinfo () from /lib/ld-linux=2Eso=2E2=3Cbr=3E=
=232=26nbsp=3B 0xb7f35717 in =5F=5Fpthread=5Finitialize=5Fminimal=5Finte=
rnal ()=3Cbr=3E=26nbsp=3B=26nbsp=3B from /lib/tls/libpthread=2Eso=2E0=3C=
br=3E=233=26nbsp=3B 0xb7d62ea4 in =5F=5Flibc=5Fstart=5Fmain () from /lib=
/tls/libc=2Eso=2E6=3Cbr=3E=234=26nbsp=3B 0x080554f1 in =3F=3F ()=3Cbr=3E=
=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=26nbsp=3B=26nbsp=3B () from /lib/tls/li=
bpthread=2Eso=2E0=3Cbr=3E(gdb) backtrace=3Cbr=3E=230=26nbsp=3B 0xb7f4a31=
0 in sysctl=5Fargs=2E0 () from /lib/tls/libpthread=2Eso=2E0=3Cbr=3E=231=26=
nbsp=3B 0xb7f4a312 in sysctl=5Fargs=2E0 () from /lib/tls/libpthread=2Eso=
=2E0=3Cbr=3E=232=26nbsp=3B 0xb7f6eb30 in =5Fdl=5Frtld=5Fdi=5Fserinfo () =
from /lib/ld-linux=2Eso=2E2=3Cbr=3E=233=26nbsp=3B 0xb7f42717 in =5F=5Fpt=
hread=5Finitialize=5Fminimal=5Finternal ()=3Cbr=3E=26nbsp=3B=26nbsp=3B f=
rom /lib/tls/libpthread=2Eso=2E0=3Cbr=3E=234=26nbsp=3B 0xb7d6fea4 in =5F=
=5Flibc=5Fstart=5Fmain () from /lib/tls/libc=2Eso=2E6=3Cbr=3E=235=26nbsp=
=3B 0x080554f1 in =3F=3F ()=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=230=26=
nbsp=3B 0xb7dd0ea4 in =5F=5Flibc=5Fstart=5Fmain () from /lib/tls/libc=2E=
so=2E6=3Cbr=3E(gdb)=3Cbr=3EMake selected stack frame return now=3F (y or=
 n) y=3Cbr=3E=230=26nbsp=3B 0x080554f1 in =3F=3F ()=3Cbr=3E(gdb)=3Cbr=3E=
Make selected stack frame return now=3F (y or n) y=3Cbr=3E=3Cbr=3E/build=
/buildd/gdb-6=2E4/gdb/frame=2Ec=3A616=3A
internal-error=3A frame=5Fregister=3A Assertion =60frame !=3D NULL =26am=
p=3B=26amp=3B
frame-=26gt=3Bnext !=3D NULL=27 failed=2E=3Cbr=3EA problem internal to G=
DB has been detected=2C=3Cbr=3Efurther debugging may prove unreliable=2E=
=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3EObject file /usr/sbin/asterisk=3A=26nbsp=
=3B Objfile at 0x82efce8=2C bfd at 0x82de9c0=2C 1178 minsyms=3Cbr=3E=3Cb=
r=3E=3Cbr=3EObject file system-supplied DSO at 0xffffe000=3A=26nbsp=3B O=
bjfile at 0x83334c8=2C bfd at 0x8303d50=2C 4 minsyms=3Cbr=3E=3Cbr=3E=3Cb=
r=3EObject file /lib/tls/libdl=2Eso=2E2=3A=26nbsp=3B Objfile at 0x83999b=
8=2C bfd at 0x836be08=2C 31 minsyms=3Cbr=3E=3Cbr=3E=3Cbr=3EObject file /=
lib/tls/libpthread=2Eso=2E0=3A=26nbsp=3B Objfile at 0x83aa900=2C bfd at =
0x831eb80=2C 696 minsyms=3Cbr=3E=3Cbr=3E=3Cbr=3EObject file /lib/libncur=
ses=2Eso=2E5=3A=26nbsp=3B Objfile at 0x83dd1b0=2C bfd at 0x8359e08=2C 76=
0 minsyms=3Cbr=3E=3Cbr=3E=3Cbr=3EObject
file /lib/tls/libm=2Eso=2E6=3A=26nbsp=3B Objfile at 0x8400e80=2C bfd at =
0x8319958=2C 331
min---Type =26lt=3Breturn=26gt=3B to continue=2C or q =26lt=3Breturn=26g=
t=3B to quit---=3Cbr=3Esyms=3Cbr=3E=3Cbr=3E=3Cbr=3EObject file /lib/tls/=
libresolv=2Eso=2E2=3A=26nbsp=3B Objfile at 0x84197f0=2C bfd at 0x831e8b0=
=2C 135 minsyms=3Cbr=3E=3Cbr=3E=3Cbr=3EObject file /usr/lib/i686/cmov/li=
bssl=2Eso=2E0=2E9=2E8=3A=26nbsp=3B Objfile at 0x842b9f0=2C bfd at 0x8359=
128=2C 665 minsyms=3Cbr=3E=3Cbr=3E=3Cbr=3EObject file /lib/tls/libc=2Eso=
=2E6=3A=26nbsp=3B Objfile at 0x84590f0=2C bfd at 0x83b4338=2C 2120 minsy=
ms=3Cbr=3E=3Cbr=3E=3Cbr=3EObject file /lib/ld-linux=2Eso=2E2=3A=26nbsp=3B=
 Objfile at 0x84c11e0=2C bfd at 0x83228f0=2C 32 minsyms=3Cbr=3E=3Cbr=3E=3C=
br=3EObject file /usr/lib/i686/cmov/libcrypto=2Eso=2E0=2E9=2E8=3A=26nbsp=
=3B Objfile at 0x84c91e8=2C bfd at 0x8461160=2C 3344 minsy=3Cbr=3E=3Cbr=3E=
=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3Erogram exited wi=
th code 01=2E=3Cbr=3E(gdb) x=3Cbr=3E0xb7da1ea5 =26lt=3BCAST=5FS=5Ftable0=
+60645=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B =22PublicKey=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da1eaf =26lt=3BC=
AST=5FS=5Ftable0+60655=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B =22i2d=5FRSA=5FNET=22=3Cbr=3E(gdb)=3Cbr=3E=
0xb7da1ebb =26lt=3BCAST=5FS=5Ftable0+60667=26gt=3B=3A=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22i2d=5FRSA=5FPUBKEY=
=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da1eca =26lt=3BCAST=5FS=5Ftable0+60682=26gt=3B=
=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
 =22LONG=5FC2I=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da1ed3 =26lt=3BCAST=5FS=5Ftabl=
e0+60691=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B =22OID=5FMODULE=5FINIT=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da1e=
e3 =26lt=3BCAST=5FS=5Ftable0+60707=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=
=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22PARSE=5FTAGGING=22=3Cbr=3E=
(gdb)=3Cbr=3E0xb7da1ef1 =26lt=3BCAST=5FS=5Ftable0+60721=26gt=3B=3A=26nbs=
p=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22PKCS=
5=5Fpb=3Cbr=3E0xb7da20c0 =26lt=3BCAST=5FS=5Ftable0+61184=26gt=3B=3A=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22PBE=
PARAM=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da20c9 =26lt=3BCAST=5FS=5Ftable0+61193=26=
gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26n=
bsp=3B =22salt=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da20ce =26lt=3BCAST=5FS=5Ftabl=
e0+61198=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B =22iter=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da20d3 =26lt=3BCAST=
=5FS=5Ftable0+61203=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B =22p5=5Fpbe=2Ec=22=3Cbr=3E(gdb)=3Cbr=3E0xb7d=
a20dc =26lt=3BCAST=5FS=5Ftable0+61212=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26n=
bsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22PBKDF2PARAM=22=3Cbr=3E=
(gdb)=3Cbr=3E0xb7da20e8 =26lt=3BCAST=5FS=5Ftable0+61224=26gt=3B=3A=26nbs=
p=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22PBE2=
PARAM=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da20f2 =26lt=3BCAST=5FS=5Ftable0+61234=26=
gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26n=
bsp=3B =22keyfunc=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da20fa =26lt=3BCAST=5FS=5Ft=
able0+61242=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B =22p5=5Fpbev2=2Ec=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da2105=
 =26lt=3BCAST=5FS=5Ftable0+61253=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22PKCS8=5FPRIV=5FKEY=5FINFO=22=
=3Cbr=3E(gdb)=3Cbr=3E0xb7da2119 =26lt=3BCAST=5FS=5Ftable0+61273=26gt=3B=3A=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22=
pkeyalg=22=3Cbr=3E(gdb)=3Cbr=3E0xb7da2121 =26lt=3BCAST=5FS=5Ftable0+6128=
1=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B =22oid=5Fsection=22=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3C=
br=3E0xb7da21b8 =26lt=3BCAST=5FS=5Ftable0+61432=26gt=3B=3A=26nbsp=3B=26n=
bsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22strlen(objst=
r)+23+2*enc-=26gt=3Biv=5Flen+13 =26lt=3B=3D sizeof buf=22=3Cbr=3E=26nbsp=
=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=
=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nb=
sp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=
=3B (string exploit here)=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=
=3Cbr=3E=3Cbr=3Egdb) disas 0xb7da31e4=3Cbr=3EDump of assembler code for =
function CAST=5FS=5Ftable0=3A=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3C=
br=3Enable to open pid file =27/var/run/asterisk/asterisk=2Epid=27=3A Pe=
rmission denied=3Cbr=3E=5BNew Thread -1211937872 (LWP 15438)=5D=3Cbr=3E=3C=
br=3EProgram received signal SIGINT=2C Interrupt=2E=3Cbr=3E=5BSwitching =
to Thread -1211934496 (LWP 15437)=5D=3Cbr=3E0xb7e0654c in nanosleep () f=
rom /lib/tls/libc=2Eso=2E6=3Cbr=3E(gdb) backtrace=3Cbr=3E=230=26nbsp=3B =
0xb7e0654c in nanosleep () from /lib/tls/libc=2Eso=2E6=3Cbr=3E=231=26nbs=
p=3B 0xb7e3ce2a in usleep () from /lib/tls/libc=2Eso=2E6=3Cbr=3E=232=26n=
bsp=3B 0x080b34a8 in test=5Ffor=5Fthread=5Fsafety ()=3Cbr=3E=233=26nbsp=3B=
 0x00000064 in =3F=3F ()=3Cbr=3E=234=26nbsp=3B 0x00000000 in =3F=3F ()=3C=
br=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3Enull byte - 0xb7da3=
3cc =26lt=3BSTORE=5Fparam=5Fsizes+348=26gt=3B=3A=26nbsp=3B=26nbsp=3B=26n=
bsp=3B=26nbsp=3B=26nbsp=3B =22=5Cn=22=3Cbr=3E=3Cbr=3E=3Cbr=3E=3Cbr=3E=3C=
br=3E=3Cbr=3E=3Cbr=3E0xb7e7e770 =26lt=3Bcatanh+176=26gt=3B=3A=26nbsp=3B=26=
nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B=26nbsp=3B =22=DD=
E=5Cf=5C203=FE=5C002=5C017=5C224=C01=D2=5C203=FF=5C002=5C017=5C224=C2=DD=
=5D=D8=5C=3Cbr=3E205=D0=DDE=5C024u=C6=D9=5C203=A4=AF=FF=FF=D9=C1=DE=CA=DD=
E=5Cf=DDE=5Cf=D9=C9=D8=EA=D9=C9=D8=C2=D9=CB=DDU=D0=D9=C9=D8=C8=D9=CB=D8=C8=
=D9=CB=D8=C1=D9=CB=DE=C1=DD=5C034=24=DD=5D=A8=DD=5D=B8=E8j=B7=FF=FF=DD=3C=
br=3EE=B8=D9=C9=DD=5D=D8=DD=5C034=24=E8Z=B7=FF=FF=DCm=D8=DDE=A8=DDE=5C02=
4=D9=CA=D8=5C213=E8=B4=FF=FF=D9=CA=D8=C0=D9=CA=DD=5D=D8=DDE=5Cf=D8=C8=DE=
=E9=DCe=D0=D9=F3=DD=5D=E0=5C213E=5Cb=DDE=E0=D8=5C21=3Cbr=3E3=A8=AF=FF=FF=
=DDE=D8=E9D=FF=FF=FF=5C215=BB=D0=AE=FF=FF=5C211=26lt=3B=24=E8O=E5=FF=FF=5C=
213E=5Cb=DDU=D8=DDE=D8=D9=C9=DDX=5Cb=DD=5C030=5C213=5D=F4=5C213u=F8=5C21=
3=22=2E=2E=2E=3Cbr=3E(gdb)=3Cbr=3E(parts lit up in black and blinking)=3C=
br=3E(looks like hi-ascii)=3C/font=3E

--Boundary_(ID_Zt0VdLS26ir4zrObMAlqhg)--

Powered by blists - more mailing lists