...
In this example, a dynamic array of integers is allocated to store s elements. However, if s is zero, the call to malloc(s) will may return a reference to a block of memory of size 0 rather than NULL. When data is copied to this location, a heap-buffer overflow will occur.
...