danger of writing past the allocated space.
If necessary, truncate all input strings to a reasonable length before passing them to the
copy and concatenation functions.
Assume all input is malicious. Use an "accept known good" input validation strategy,