tcache poisoning (Write What Where via UAF)

From Andrew Novocin