CVE chaining of CVE-2016-2819 and CVE-2017-5375

hi,
I was exploring your write up for CVE-2016-2819 using CVE-2017-5375 and got stuck at a point where you have introduced **fake_objects** in the function **Exploit.prototype.spray** and only those **particular index of fake_objects is targeted**. 
