The OS X regex engine (TRE) uses the alloca function in a few places, sometimes where an attacker can partially control the size.
This site contains information which could be considered illegal in some countries. It is provided here for educational use only and is not intended to be used for illegal activities.