>attacker-supplied data was used in calculating the offset inside an array of callbacks. So you could just tell the server to call into the “auth success” handler. то тфв чувство когда tox писали долбоёбы изоморфные libssh-ебанатам. wait... oh shi~