Hacker News new | ask | show | jobs
by saagarjha 2492 days ago
scanf(“%s”, …) can cause a buffer overflow.
2 comments
mort96 2492 days ago
It sucks that there's no scanf("%.*s"), where you give the buffer length as a separate argument. The fact that it's in a string literal also makes using a compile-time constant really ugly.
link
claystu 2492 days ago
You can overflow buffers all sorts of ways in C.
link