Hardening against buffer overruns