Android's bionic libc strlen function does a similar read-beyond-the-buffer thing: https://cs.android.com/android/platform/superproject/+/master:bionic/libc/arc

Android's bionic libc strlen function does a similar read-beyond-the-buffer thing: https://cs.android.com/android/platform/superproject/+/master:bionic/libc/arch-arm/generic/bionic/strlen.c;l=1;drc=ea9957a72a78d4f43dd8ddc1545fd800c0d15c9f https://cs.android.com/android/platform/superproject/+/maste... I first learned about it when valgrind complained at every place I was calling strlen.