Your response makes no sense. There is no theory. It's really simple, actually: If you have a mine-field with an uncountable number of mines, knowing the loc

Your response makes no sense. There is no theory. It's really simple, actually: If you have a mine-field with an uncountable number of mines, knowing the locations of 200 mines won't help you cross the mine-field safely. If, instead, you learn how to spot areas which are known to be safe, you can, assuming you don't make a mistake, at least attempt to cross it safely (and if you fail to cross it, you can go back and learn how to spot other areas which are known to be safe). That is the difference between your claim that you need to know all the documented instances of UB and my claim that you just need to know enough defined behaviour to write your program. It has nothing to do with security assessments or pentests.