house_of_botcake: demonstrate how to malloc back to stack_var

[tesuji]

Currently a draft now to gather reviews before fixing all other versions across glibc.

[Kyle-Kyle]

This is essentially using the chunk overlapping primitive to perform a tcache poisoning attack, which makes it clearer for beginners to realize the power of the technique.
However, I'm a little hesitant about merging this because chunk overlapping is a powerful primitive by itself, more than just the ability to perform tcache poisoning attack (for example, read/write other objects).

I think if you could add a sentence explaining what you could do with the chunk overlapping primitive (directly read/write objects, heap metadata etc) and say tcache poisoning attack is just one of them (write to heap metadata) will be great.

[tesuji]

Here is a part of the output from the new changes:

I'm not great with words so I'm very happy to have feedback.

[tesuji]

Suggested change

	puts("Use the overlapping chunk to control a->next pointer.");
	puts("Use the overlapping chunk to control victim->next pointer.");

[Kyle-Kyle]

that looks great. Can you please make the changes to all other files?