 Security is the concern, not necessarily safety or availability (the software may be allowed to fail in certain ways).As with all kinds of defensive programming, avoiding bugs is a primary objective, however the motivation is not as much to reduce the likelihood of failure in normal operation (as if safety was the concern), but to reduce the attack surface – the programmer must assume that the software might be misused actively to reveal bugs, and that bugs could be exploited maliciously.int risky_programming(char *input){
The function will result in undefined behavior when the input is over 1000 characters.