V12
Critical #2: client-handle TOCTOU. CDSI hands the host opaque pointers to client state. When performing operations, it authenticates these client pointers by checking a secret canary, then separately CASing a state field. We used our host control primitive to pause between the two, free the client, groom the heap, and reuse its address for our own object. The enclave validates the original client, but uses our replacement.