Having a parsing interface that just supports parsing a string is probably a premature optimization on the other end of the spectrum. A Little Light Reading My first thought was to look to the source ...

Useful security tips from one of ESET's malware analysts, Matías Porolli, featuring examples of vulnerable code and ways to spot it.