A function is selected by touching a corresponding triggerable sub-part.
A remotely triggerable use-after-free vulnerability was found in rpcbind, a server that converts RPC program numbers into universal addresses.