software needs to validate all user input to ensure it is not too large for
the memory buffer allocated to receive it and does not contain
segments of executable code.
u Mutual Suspicion—Components should not trust other components