Allen Guan says to YSITD
Overflow Predictable RNG(Random Number Generator) Find '/bin/sh' or 'sh' in library Leak stack address