1. A computer-implemented method comprising: scanning a stack of an application for a pointer to a word of a machine code of the application; locating one or more bytes immediately preceding the pointed-to machine code; parsing the one or more bytes for a call instruction; and determining the pointed-to machine code as a return address when the one or more bytes constitute includes the call instruction.