**tl;dr**
+ Race condition to change the type.+  Leak using uninitialized memory and get rip with overflow.
**Challenge Points:** 1000  **No of Solves:** 1  **Challenge Author:** [3agl3](https://twitter.com/3agl31)