ROP.dl_resolve(): change the default return address to the end of the sequence