@saagar the thing that's really funny to me is that there are two different ways you get heap writes *and* because the mallocs are not M_CANFAIL if your crafted elf is large enough the kernel can't alloc a pin list you can get a kernel panic...