We downloaded a file called "toto",
<pre>
80488ad: c3 ret
</pre>
We shipped 24 bytes, so we wrote the return address. Let break on the ret of checkPass:
<pre>
(gdb) b *0x80488ad
Breakpoint 1 at 0x80488ad
(gdb) c
Breakpoint 1, 0x080488ad in checkPass ()
Current language: auto; currently asm