C is Brittle D is Plastic

[Walter Bright]

So true. When I'm asked to review a C project, the first thing I do is look for 
strncat(). Code that uses it is guaranteed to be broken.