By allowing JIT at all, a small ROP chain can call VirtualProtect to make a larger payload executable. Sure you can do everything with ROP, but it is less conv

By allowing JIT at all, a small ROP chain can call VirtualProtect to make a larger payload executable. Sure you can do everything with ROP, but it is less convenient (and Intel CET might eventually make ROP attacks actually hard).