Multiple Darwin/MacOS X kernel bugs

DoS on parsing executable format, access behind array boundaries...