e-NeXSh: Achieving an Effectively Non-Executable Stack and Heap via System-Call Policing