How to Secure Existing C and C++ Software Without Memory Safety [pdf]