3614156c7d
that the documented TCB is at the tail of the extended TCB. In other words, the base of the TCB has a negative offset from the TLS.