[lazide]

The issue in many of these cases is there appears to be no canonical safe way to know the length of the input in C, and people apparently screw up keeping track of the lengths of the buffers all the time.

[saagarjha]

This is why you reduce the amount of C code that has to keep track of it to as little as possible.