The techniques to guard buffers against overflows.

[S@rK0Y]

the problem is the programmer made assumptions that the buffer will be big enough, so he just uses the buffer pointer at will.

the solution.
a buffer also needs a size variable, and every write operation to the buffer needs to be checked if there's enough room remaining in the buffer

that's exactly what DaBOFi does do. Actually, very question is to provide clear scheme of protection with lowest performance penalty of possible ones. DaBOFi deals w/ 3 parameters:

1. base of buffer (it's written in ToRA).
2. offset within buffer.
3. size of buffer (stored in metadata of buffer).
==============================
So, access Just to arbitrary address ain't acceptable.