On Mon, Feb 10, 2014 at 03:33:32PM -0800, Tom Roeder wrote: > 3. adds a fast check for pointer safety at each indirect call site: Why not using a bloom filter for valid target addresses instead? Joerg