stackprotector: use canary at end of stack to indicate overruns at oops time