Hidden backdoor API to root privileges in Apple OS X(truesecdev.wordpress.com)

  class Example {
  public:
    static bool do_it;
    virtual void do_it_if() {
       if (g_do_it) return;

       /* otherwise do something that dereferences this... */
    }
  };

  void test1() {
    Example::do_it = false;
    static_cast<Example *>(NULL)->do_it_if();
  }

  void test2() {
    Example::do_it = true;
    static_cast<Example *>(NULL)->do_it_if();
  }