[robryk]

Well, there are for example all those libbfd-related issues that caused running strings(!) on unstrusted files to be unsafe.