badptr            161 user/testbin/crash/crash.c 	int *badptr = (int *)(((char *)ptr)+1);
badptr            164 user/testbin/crash/crash.c 	j = *badptr;