想了好久 也没有看出来这道pwn题

用IDA反编译的伪代码如下
int __cdecl __noreturn main(int argc, const char **argv, const char **envp)
{
int v3; // [rsp+Ch] [rbp-4h]

init(argc, argv, envp);
while ( 1 )
{
menu();
v3 = get_int();
if ( v3 == 3 )
break;
if ( v3 == 1 )
{
printf("sensible>>");
printf("It can overflow here.");
overflow(0LL);
}
else if ( v3 == 2 )
{
printf("sensible>>");
printf("It can overflow here.");
overflow(arr);
}
}
exit(0);
}