heap 3

typedef struct {
  char a[10];
  char b[10];
  char c[10];
  char flag[5];
} object;

x->flag has to overwritten to "pico" \ Free x, then allocate 35 bytes, then type: 30 a's & pico \