realloc fake size
Poison null byte
overlapping chunk