memory (and possibly adjacent variables), which is outside the intended control sphere
of the fname buffer. At a higher layer, there is another control sphere: only the explicit
behaviors in the source code should be executed. If an attacker can leverage the buffer
overflow for code execution, then the attacker's shellcode probably contains behaviors