Sign in
llvm
/
llvm-archive
/
48649d2c83b557841c9e5c978d9ab5af13cb52e5
/
.
/
safecode
/
test
/
mem_safety
/
format_string
/
format_string-006.c
blob: e28648ee456beed8ad6aa16bd81137c6d9499633 [
file
] [
log
] [
blame
]
/* sprintf() overflow */
#include
<stdio.h>
#include
<string.h>
int
main
()
{
char
buffer
[
1000
];
char
dest
[
20
];
memset
(
buffer
,
'a'
,
999
);
buffer
[
999
]
=
'\0'
;
sprintf
(
dest
,
"%s"
,
buffer
);
return
0
;
}