lea (load effective address) instruction,
85,
91
chaining return into libc calls,
132-33
returning into system( ),
130-31
writing multiple words with a single call,
136-38
writing nulls with return into libc,
134-36
load effective address (lea) instructions,
85,
91