It's me (Mario) - Defcon quals 2018 Concatenating tricks for string, triggering UAF, hijacking function pointer on the heap.