write-up(pwn)/dreamhack

[Dreamhack] pwn_patch_1 write-up