The developer builds a security-critical protection mechanism into the software but the compiler optimizes the program such that the mechanism is removed or modified.