for those who dont know, a bug in fbmem.c is how motochopper works.
basically it was able to allocate all the memory on the device to itself (a lowly normal user), including kernel memory.
and once that occured, it could simply change itself to be root or the usual things you can do once you...