There are probably a number of places that are open to attacks
such as the following one, in bltinmodule.c:min_max().