it seems like chaining rops breaks a bit - the frame ranges don't seem to get respected.
It's better to use a merge rop & specify strict frame range