Losing Control: On the Effectiveness of Control-Flow Integrity under Stack Attacks