Heap overflow due to integer overflow

Original writeup (https://gist.github.com/birdg0/dbe57050ffc85fe6ec1af4b35df68831).