protects last page of codebuffer. This should cause a SIGSEGV if we try to access it. Until now it was possible to go over and access out of bounds. In addition, there a couple of clang-tidy fixes which should be NFC.