Note insecurity of stb_sprintf

This commit is contained in:
nothings 2014-06-03 10:23:12 -07:00
parent b5230e0685
commit 41a3179397

View File

@ -15,7 +15,7 @@ int main(int argc, char **argv)
for (i=0; i < listlen; ++i) {
int num,j;
char **tokens = stb_tokens_stripwhite(list[i], "|", &num); // stb_tokens -- tokenize string into malloced array of strings
FILE *g = fopen(stb_sprintf("../%s", tokens[0]), "rb"); // stb_sprintf -- sprintf to a temporary buffer (not threadsafe)
FILE *g = fopen(stb_sprintf("../%s", tokens[0]), "rb"); // stb_sprintf -- sprintf to a static temp buffer (not threadsafe or secure)
char buffer[256], *s1, *s2;
fread(buffer, 1, 256, g);
fclose(g);