A new approach for testing buffer overflow vulnerabilities in C and C++