when does a buffer overflow condition exist? a. when the software does not encrypt sensitive information before storing it in the buffer b. when a program attempts to put more data in a buffer than it can hold c. when a program does not perform any authentication for functionality that requires a provable user identity d. when the software does not perform an access control check for a function that consumes a significant amount of buffer space