Heap overflow to override function pointer.

Original writeup (https://lordidiot.github.io/2018-11-18/ritsec-ctf-2018/#yet-another-hr-management-framework-pwn).