execve("/usr/bin/ssh", ["ssh", "localhost"], [/* 52 vars */]) = 0
uname({sys="Linux", node="xxxxxx.xxx.xxxxxxxx.xx", ...}) = 0
brk(0)                                  = 0x81025e4
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40014000
open("/etc/ld.so.preload", O_RDONLY)    = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=89935, ...}) = 0
mmap2(NULL, 89935, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40015000
close(3)                                = 0
open("/lib/libutil.so.1", O_RDONLY)     = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\r\0"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=10965, ...}) = 0
mmap2(NULL, 10616, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4002b000
mprotect(0x4002d000, 2424, PROT_NONE)   = 0
mmap2(0x4002d000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x1) = 0x4002d000
close(3)                                = 0
open("/usr/lib/libz.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240\30"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=61764, ...}) = 0
mmap2(NULL, 54412, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4002e000
mprotect(0x4003a000, 5260, PROT_NONE)   = 0
mmap2(0x4003a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xc) = 0x4003a000
close(3)                                = 0
open("/lib/libnsl.so.1", O_RDONLY)      = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300;\0"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=89485, ...}) = 0
mmap2(NULL, 85216, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4003c000
mprotect(0x4004e000, 11488, PROT_NONE)  = 0
mmap2(0x4004e000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x11) = 0x4004e000
mmap2(0x4004f000, 7392, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4004f000
close(3)                                = 0
open("/usr/lib/libcrypto.so.0.9.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\337"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0555, st_size=895979, ...}) = 0
mmap2(NULL, 789604, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40051000
mprotect(0x40105000, 52324, PROT_NONE)  = 0
mmap2(0x40105000, 40960, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xb4) = 0x40105000
mmap2(0x4010f000, 11364, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4010f000
close(3)                                = 0
open("/lib/libcrypt.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240\t\0"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=22661, ...}) = 0
mmap2(NULL, 181568, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40112000
mprotect(0x40117000, 161088, PROT_NONE) = 0
mmap2(0x40117000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x4) = 0x40117000
mmap2(0x40118000, 156992, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40118000
close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`X\1\000"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=1457726, ...}) = 0
mmap2(NULL, 1230468, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4013f000
mprotect(0x40266000, 22148, PROT_NONE)  = 0
mmap2(0x40266000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x127) = 0x40266000
mmap2(0x40269000, 9860, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40269000
close(3)                                = 0
open("/lib/libdl.so.2", O_RDONLY)       = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P\31\0\000"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=12399, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4026c000
mmap2(NULL, 11508, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4026d000
mprotect(0x4026f000, 3316, PROT_NONE)   = 0
mmap2(0x4026f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x1) = 0x4026f000
close(3)                                = 0
mprotect(0x40051000, 737280, PROT_READ|PROT_WRITE) = 0
mprotect(0x40051000, 737280, PROT_READ|PROT_EXEC) = 0
munmap(0x40015000, 89935)               = 0
uname({sys="Linux", node="xxxxxx.xxx.xxxxxxxx.xx", ...}) = 0
fcntl64(0, F_GETFD)                     = 0
fcntl64(1, F_GETFD)                     = 0
fcntl64(2, F_GETFD)                     = 0
geteuid32()                             = 1001
getuid32()                              = 1001
getegid32()                             = 408
getgid32()                              = 408
brk(0)                                  = 0x81025e4
brk(0x81035e4)                          = 0x81035e4
brk(0x8104000)                          = 0x8104000
getuid32()                              = 1001
geteuid32()                             = 1001
setresuid32(0xffffffff, 0x3e9, 0xffffffff) = 0
socket(PF_UNIX, SOCK_STREAM, 0)         = 3
connect(3, {sa_family=AF_UNIX, path="/var/run/.nscd_socket"}, 110) = -1 ENOENT (No such file or directory)
close(3)                                = 0
open("/etc/nsswitch.conf", O_RDONLY)    = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=498, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
read(3, "# /etc/nsswitch.conf:\n# $Header:"..., 4096) = 498
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x40015000, 4096)                = 0
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=89935, ...}) = 0
mmap2(NULL, 89935, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40015000
close(3)                                = 0
open("/lib/libnss_compat.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300\25"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=50182, ...}) = 0
mmap2(NULL, 46184, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40270000
mprotect(0x4027b000, 1128, PROT_NONE)   = 0
mmap2(0x4027b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xa) = 0x4027b000
close(3)                                = 0
open("/lib/libnsl.so.1", O_RDONLY)      = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300;\0"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=89485, ...}) = 0
mmap2(NULL, 85216, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4027c000
mprotect(0x4028e000, 11488, PROT_NONE)  = 0
mmap2(0x4028e000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x11) = 0x4028e000
mmap2(0x4028f000, 7392, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4028f000
close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`X\1\000"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=1457726, ...}) = 0
mmap2(NULL, 1230468, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40291000
mprotect(0x403b8000, 22148, PROT_NONE)  = 0
mmap2(0x403b8000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x127) = 0x403b8000
mmap2(0x403bb000, 9860, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x403bb000
close(3)                                = 0
open("/lib/ld-linux.so.2", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\260\t\0"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=89343, ...}) = 0
mmap2(NULL, 80844, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x403be000
mprotect(0x403d1000, 3020, PROT_NONE)   = 0
mmap2(0x403d1000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x12) = 0x403d1000
close(3)                                = 0
munmap(0x40015000, 89935)               = 0
brk(0)                                  = 0x8104000
brk(0x8105000)                          = 0x8105000
brk(0)                                  = 0x8105000
open("/etc/nsswitch.conf", O_RDONLY)    = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=498, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
read(3, "# /etc/nsswitch.conf:\n# $Header:"..., 4096) = 498
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x40015000, 4096)                = 0
uname({sys="Linux", node="xxxxxx.xxx.xxxxxxxx.xx", ...}) = 0
open("/etc/passwd", O_RDONLY)           = 3
fcntl64(3, F_GETFD)                     = 0
fcntl64(3, F_SETFD, FD_CLOEXEC)         = 0
fstat64(3, {st_mode=S_IFREG|0644, st_size=1673, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
_llseek(3, 0, [0], SEEK_CUR)            = 0
read(3, "root:x:0:0::/root:/bin/bash\nbin:"..., 4096) = 1673
close(3)                                = 0
munmap(0x40015000, 4096)                = 0
umask(022)                              = 02
brk(0)                                  = 0x8105000
brk(0x8106000)                          = 0x8106000
brk(0)                                  = 0x8106000
brk(0x8107000)                          = 0x8107000
brk(0)                                  = 0x8107000
brk(0x8108000)                          = 0x8108000
brk(0)                                  = 0x8108000
brk(0x8109000)                          = 0x8109000
brk(0)                                  = 0x8109000
brk(0x810a000)                          = 0x810a000
brk(0)                                  = 0x810a000
brk(0x810b000)                          = 0x810b000
brk(0)                                  = 0x810b000
brk(0x810c000)                          = 0x810c000
brk(0)                                  = 0x810c000
brk(0x810d000)                          = 0x810d000
brk(0)                                  = 0x810d000
brk(0x810e000)                          = 0x810e000
ioctl(0, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0
open("/home/xxxxxx/.ssh/config", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory)
open("/etc/ssh/ssh_config", O_RDONLY|O_LARGEFILE) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=1159, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40015000
read(3, "#\t$OpenBSD: ssh_config,v 1.19 20"..., 4096) = 1159
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x40015000, 4096)                = 0
getpid()                                = 15970
getpid()                                = 15970
open("/dev/urandom", O_RDONLY)          = 3
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++