Finding off-by-one errors in production code is a hobby of mine, but it's also pretty horrifying how often they're security-relevant.