Hiroaki Etoh, IBM Research The original description of the GCC stack canary implementation (then called ProPolice, now `-fstack-protector`). Explains the canary placement strategy and why local variables are reordered to put arrays near the canary.