Here is the detailed write-up : https://pwn-maher.blogspot.com/2020/07/pwn5-csictf-2020-smash-solution.html

Original writeup (https://pwn-maher.blogspot.com/2020/07/pwn5-csictf-2020-smash-solution.html).