How a double-free bug in WhatsApp turns to remote code execution