$ 0 0 Responsible disclosure and an exploitable hole closed neatly through the exploitable process itself. Result! (But make sure you've patched.)