Automatic device driver synthesis with termite
XFI: software guards for system address spaces