use stack overflow to over-write register lr