Shadow: Dummy folders, an obvious overflow, and a ROP chain