The General Principle

• The exploit is a chain. Break any single link and the whole attack collapses — defense in depth is efficient here.
• An info leak with no control-flow primitive is often harmless; a write primitive with no leak (thanks to ASLR) is often unusable.