Someone could do that, but the point of having the dest buffer size is to at least give the programmer a chance to try to get it right.

I also wonder if a linter could notice that the dest buffer size passed isn’t the actual size of the buffer. (That leads the the next problem in the code, if you look at the definition of that buffer, so that’s good.)