Size does matter: why using gadget-chain length to prevent code-reuse attacks is hard
Return-oriented programming without returns