Are you talking about "The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86)"(https://cseweb.ucsd.edu/~hovav/dist/geometry.pdf)? Great paper with a great title.