Fix loading of return addresses in _exit().