Memory leak Search all instances of malloc(). Is there a corresponding free()? Buffer overrun Are copy functions being used without max buffer size protection? Does all array based memory manipulation code check for max buffer size?