ROP.call_chain_ptr(): use libc_csu_init gadget for stack pivoting