The tradeoff is complexity. The microcode must be carefully arranged so that the instructions in delay slots are either useful setup for both paths, or at least harmless if the redirect fires. Not every case is as clean as RETF. When a PLA redirect interrupts an LCALL, the return address is already pushed onto the microcode call stack (yes, the 386 has a microcode call stack) -- the redirected code must account for this stale entry. When multiple protection tests overlap, or when a redirect fires during a delay slot of another jump, the control flow becomes hard to reason about. During the FPGA core implementation, protection delay slot interactions were consistently the most difficult bugs to track down.
CET — 3 p.m.
。关于这个话题，搜狗输入法下载提供了深入分析
Последние новости，这一点在91视频中也有详细论述
Fermaw also, it seems, started obfuscating and scrambling how his player was initialised, making the AudioSource class harder to find via the polling loop. The constructor hijack became unreliable.