If you have an arbitray kfree and need a leak - Use setxattr technique and block on the last byte of the copy. Then free the buffer and reallocate another object, unblock the copy and leak contents of the object using getxattr.
