echo > /proc/ ^ `{cat /dev/ppid} ^ /noteid => system crash
problem appears when any garbage will sent to noteid. in turn, id=atoi(a) will become 0, loop will find first zeroed proc entry and strcmp will kill system. However, one doubt still here: atoi call. If n equals to zero, it will dereference pointer a.