1635N/A // Jam anything you want in here, it will be cast to a You_Have_Been_P0wned 1635N/A // Make a Class 'many_loader' under the default loader 1635N/A // Some classes under a new Loader, LOADER2, including another version of 'many_loader' 1635N/A // Set the victim, a String of length 6 1635N/A // Go cast '_p0wnee' to type You_Have_Been_P0wned 1635N/A // Make it clear that the runtime type many_loader (what we get from the 1635N/A // array X2) varies from the static type of many_loader. 1635N/A // Read the victims guts out 1635N/A // On 32-bit HotSpot Java6 this sets the victim String length shorter, then crashes the VM 1635N/A // I need to compile (hence call in a loop) a function which returns a value 1635N/A // loaded from classloader other than the system one. The point of this 1635N/A // call is to give me an abstract 'hook' into a function loaded with a