Process Layout - i386 w/PIE & W^X Going up reduces already tight mmap(2) space Worst case analysis Highest random for shlib + maximum .text size Open range for PIE 320MB - 448MB