Defensive programming: Difference between revisions

Revision as of 20:28, 21 January 2022

Revision as of 17:23, 22 April 2022

Line 26:

// ...

}</syntaxhighlight>

The function will result in undefined behavior when the input is over 1000 characters. Some novice programmers may not feel that this is a problem, supposing that no user will enter such a long input. This particular bug demonstrates a vulnerability which enables [[buffer overflow]] [[exploit (computer security)|exploit]]s. Here is a solution to this example:

<syntaxhighlight lang="c">int secure_programming(char *input) {