is between lines 2 and 4 - ftype has a "size" property that is larger than expected by the
programmer. The trigger point somewhere within the execution of strcat() on line 4,
since strcat() does not prevent overflow. If the attacker has a goal of crashing the
software, then the strcat() call may also be the activation point. However, if the