http://manyface.github.io/2016/05/19/AndroidHeapUnlinkExploitPractice/
Some exercises to understand Android heap exploit