swap.gs

write-up of an exploit for a kernel bug (not mine) in waitid (on ed-diamond.com)