> My first impression on seeing this (I'm still reading Dion's paper) was > that perhaps some sort of validator or IPS-like functionality in the > JIT, analyzing the input, could be effective, looking for malformations > and suspicious behavior. I propose antivirus scanning. With this problem solved, moving on to... /mz