C itself was the attack. We would be in a much better place across many dimensions had we stuck with the Wirthian family of languages. If not for strings alone, in terms of security and cycles wasted running strlen.
http://www.cs.virginia.edu/~evans/cs655/readings/bwk-on-pasc...