Jasper Yu says to YSITD https://bamboofox.cs.nctu.edu.tw/uploads/material/attachment/11/format_string_exploit.pdf