Similar to #14, __PAGEZERO

[arubdesu]

Pardon that this is in a similar vein to #14, and also that I haven't started trial-ing Santa or dug in deep enough to know if this can be reported on in 'observation' mode, but as per exploit tpwn's purported mitigation NULLGuard, supposedly more than just this POC would be caught by checking binaries for lack-of-__PAGEZERO. Not sure I have much to add, I understand if enabling Santa to report on this wouldn't be worth the effort if it is indeed not present in 10.11.
<insert I have no idea what I'm doing dog meme>

[russellhancox]

It's certainly not a lot of effort to add and I can't see any harm, I'll investigate further.

[russellhancox]

Fixed with b87482e, which will be included in 0.9.1 (hopefully next week).

[russellhancox]

That release took a lot longer than expected but this is now released.