Readline crime: exploiting a SUID logic bug

Looking at a local privilege escalation (on some systems) that works due to a logic bug in readline, when used with SUID programs.