OpenBSD integer overflow

integer overflow in semget allows root to write kernel memory...