security notes: add buffer overflow example