> I think you can reproduce this without the driver he's playing with
> by mmap'ing /dev/mem, and writing into any clustered page group (that
> a driver might have created or whatever).

that is an offence the program author should be shot for and then
chastized and ... ;)