mirrors/stb
1
0
Fork 0
mirror of https://github.com/nothings/stb synced 2024-12-13 19:47:10 +03:00
Code Issues Packages Projects Releases Wiki Activity

Note insecurity of stb_sprintf

Browse Source
This commit is contained in:
nothings 2014-06-03 10:23:12 -07:00
parent b5230e0685
commit 41a3179397
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tools/make_readme.c
View File

@ -15,7 +15,7 @@ int main(int argc, char **argv)
for (i=0; i < listlen; ++i) { for (i=0; i < listlen; ++i) {
int num,j; int num,j;
char **tokens = stb_tokens_stripwhite(list[i], "|", &num); // stb_tokens -- tokenize string into malloced array of strings char **tokens = stb_tokens_stripwhite(list[i], "|", &num); // stb_tokens -- tokenize string into malloced array of strings
FILE *g = fopen(stb_sprintf("../%s", tokens[0]), "rb"); // stb_sprintf -- sprintf to a temporary buffer (not threadsafe) FILE *g = fopen(stb_sprintf("../%s", tokens[0]), "rb"); // stb_sprintf -- sprintf to a static temp buffer (not threadsafe or secure)
char buffer[256], *s1, *s2; char buffer[256], *s1, *s2;
fread(buffer, 1, 256, g); fread(buffer, 1, 256, g);
fclose(g); fclose(g);