Thanks. The guarded pointers look great , and both them and the Burrough model could work well for micro-controllers, and suffer a relatively small penatly. T

Thanks. The guarded pointers look great , and both them and the Burrough model could work well for micro-controllers, and suffer a relatively small penatly. The SAFE-PUMP would probably need a relatively new manufacturing process to make economical sense for medium-end microcontroller or would be fitting for a high-end microcontroller. >> Again, embedded is static enough that there should be no such interrupts in normal operation if pointer-arithmetic is avoided, right? I think when calling a function and pushing stuff into the stack ,you'll need such interrupts, and maybe in other situations.I'm no sure though, i'm just an hobbyist in embedded, but pretty interested in the industry - and the tension between the fact that everybody says internet-of-things-security is a big issue with no solution and on the other hand ,the availability highly secure research and working systems. Anyway, thanks again for your help!