Buffer overruns are embarassing (even if caused by user error), so assert