More on Function Pointer attacks

Mariusz Woloszyn has posted an interesting critique on Function Pointer attacks to BugTraq, along with code to demonstrate that adequate protection was still lacked by the Stack{shield,guard} products.