为什么printf适用于非终止字符串

I am wondering how does printf() figure out when to stop printing a string, even I haven't put a termination character at the end of the string? I did an experiment by malloc a 10 bytes memory and put exactly 10 characters in it, somehow, the printf could still print out these characters without running out of bound, why? I am wondering how does printf() figure out whe