flag{oob_read_plus_uaf_aslr_bypass}
