In [Half] of curl’s vulnerabilities are C mistakes, Daniel S, author, analyzes number of vulnerabilities due to memory handling in C.