the buffer must be less than or equal to the allocated size of the buffer
RESOURCE and a BEHAVIOR exists that violates said PROPERTY.
If the PRODUCT BEHAVES in a stack / heap environment (Is there a specific vuln
theory term to refer to the products environment?) and the Buffer Overflow