1 piece
Instead of hand picking examples, state a property such as declared length never exceeds actual length, and let the framework generate hundreds of inputs and shrink any failure to a minimal case. Heartbleed is exactly the class of bug an implementer's own examples systematically miss.