Insecure coding in C (and C++)