Killer write up, very clever bit of code reading and exploit development.