Implement WTFuzz's no-spray technique

Replaces the good old heaplib spray.  Also the trigger is updated.  ROP chains are different than the ones in RopDb (null-byte-free).

I don't know why for some reasons I have 7 other updates in there while git status tells me nothing about it. But it's ok, because we need to update James' e-mail anyways.