Solve "Recover Binary Search Tree"
use constant space solution