Other parts of exec-shield, like the 'ASCII armoring' (to make it
impossible to embed the address of a function in a shared library in an
string and then get it into an overflowed string via C string-handling
functions) haven't gone upstream yet :( I wonder why not?