OVERFLOW: would write 4096 bytes into 2000-byte alloc (2096 bytes OOB)
RESULT: BUGGY
---PATCHED---
RESULT: PATCHED - size clamped to 2000 (alloc 2000)