TDLR: glibc 2.34 tcache hardening HoR smallbin var bypass into vtable mapping perms bug abuse

Original writeup (https://gist.github.com/c4ebt/d5989f17c06155b3d2550f9e6c70394c).