This is looking for coding bugs that allow unintentional behavior, not intentionally malicious code.