[FD] Heap 'two-write-where-and-what' format string (FMS) technique