堆学习——fastbin_dup_into_stack

前面写了double free实现，现在写double free的升级篇，通过修改fd指针篡改栈数据。

#include <stdio.h>
#include <stdlib.h>

int main()
{
   
	fprintf(stderr, "This file extends on fastbin_dup.c by tricking malloc into\n"
	       "returning a pointer to a controlled location (in this case, the stack).\n");

	unsigned long long stack_var;

	fprintf(stderr, "The address we want malloc() to return is %p.\n", 8+(char *)&stack_var);

	fprintf(stderr, "Allocating 3 buffers.\n");
	int *a = malloc(8);
	int *b = malloc(8