https://curl.se/docs/security.html - C bugs are marked.