M5: Mitigating attacks against machine learning software with Arbitrary Cod