$ 0 0 You need to manually opt in bounds checks (which you usually only enable while developing, not in releases). Look up "address sanitizer".