Conforming and non-conforming code segments

Hi

Does anyone use conforming code segments? That is, code segments which
can be accessed from a numerically higher CPL compared to the segments
DPL. Seems dangerous to me... Even if a conforming segment is used
for "system utilities that do not access protected facilties" (as
recommended by Intel), couldn't a rogue application decide to jump to
any entry point in the segment that may not be a valid entry point (ie
not a subroutine start address). This could lead to possibly
disastrous consequences. Correct me if I'm wrong...

cheers
Michael

.