Hacker News new | past | comments | ask | show | jobs | submit login

If a user wants to parse integers etc. from a string, the function snprintf and family is often applied. It is a neatly simple function. This article seems to invent a problem rather than an organic one.



The article argues that there is no easy way to detect whether the parsing finished successfully. As a consequence, the C standard library is unsafe when used normally.

It's interesting how beginners are encouraged to use various string functions which are not safe to use with external input.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: