Assume a server program has a function f$()$ below. Its parameter char $*$message is a character string sent by a client.

void f$($char $*$message$)\{$

char foo$[16]$;

strcpy$($foo$,$ message$)$;

$\}$

A malicious client may deploy a buffer overflow attack against the server by sending a well crafted string containing malicious code. true or false