Why is it usually a bad idea to use gets()? Suggest a workaround.

1.	Why is it usually a bad idea to use gets()? Suggest a workaround.
Answer» The standard INPUT library gets() reads USER input till it encounters a new line character. However, it does not check on the size of the variable being provided by the user is under the maximum size of the DATA type which makes the system vulnerable to buffer overflow and the input being WRITTEN into memory where it isn’t supposed to. We, THEREFORE, use gets() to achieve the same with a restricted range of input Bonus: It remained an official part of the language up to the 1999 ISO C standard, but it was officially removed by the 2011 standard. Most C implementations still support it, but at least GCC issues a warning for any code that uses it.

Answer»

The standard INPUT library gets() reads USER input till it encounters a new line character. However, it does not check on the size of the variable being provided by the user is under the maximum size of the DATA type which makes the system vulnerable to buffer overflow and the input being WRITTEN into memory where it isn’t supposed to.

We, THEREFORE, use gets() to achieve the same with a restricted range of input

Bonus: It remained an official part of the language up to the 1999 ISO C standard, but it was officially removed by the 2011 standard. Most C implementations still support it, but at least GCC issues a warning for any code that uses it.

Discussion

No Comment Found

Related InterviewSolutions

Which is better #define or enum?
Suppose a global variable and local variable have the same name. Is it possible to access a global variable from a block where local variables are defined?
Which structure is used to link the program and the operating system?
What is a near pointer and a far pointer in C?
What is the difference between ‘g’ and “g” in C?
What are dangling pointers? How are dangling pointers different from memory leaks?
What is the difference between #include "..." and #include ?
Why is it usually a bad idea to use gets()? Suggest a workaround.
What is typedef?
What is Dynamic memory allocation in C? Name the dynamic allocation functions.

Why is it usually a bad idea to use gets()? Suggest a workaround.

Discussion

No Comment Found

Related InterviewSolutions

Reply to Comment