Known Dangerous Functions

• sprintf

  • Field length specifiers can prevent the problem.
  • Use the alternative snprintf.

• Occasionally – scanf and fscanf

  • Again – limit each field’s length.

• The str* functions – strcat, strcpy

  • Use strncat and strncpy instead.
    • Watch out for the usage!

• gets

• Your own loops.