[ H = \sum_i<j J_ij Z_i Z_j + \sum_i h_i Z_i, ]
If we give the exact 16‑byte payload, check_name returns 0 , and the program reaches the flag printing code without ever touching the overflow . JUQ-496