What about return-to-libc based attacks?


Short answer:

ProPolice makes them unfeasable

Long answer:

Noone else has better solutions.

Yes, there are still some variations we are working
to find solutions for

All the solutions we are dreaming up
have 10% performance cost,
or 5% code growth,
or significant development process changes,
and even then, may not be foolproof against all these problems

For now the solution is:  See the short answer