Format String Leak, Stack Overflow, and ROP Chain to Read the Flag

When 'any value' becomes 'the exact right value'

How a 64-Byte Buffer Breaks Program Logic