Before vs. After the Overflow

Padding fills buf and saved RBP; the next 8 bytes land exactly on the saved return address.