add pivot keyword argument to ROP.call_chain_ptr()
implement multiple gadget candidates in ROP.call_chain_ptr()