Not all bugs are buffer overflows, many are just the code not doing what it claimed at a high level