Page History

...

Another common mistake is to use more format specifiers than supplied arguments. This results in undefined behavior, which could end up pulling extra values off the stack and unintentionally exposing data. The following example illustrates a case of this:

char const char *error_msg = "Resource not available to user.";
/* ... */
printf("Error (%s): %s", error_msg);

...

The following code matches the number of format specifiers with the number of variable arguments.

char const char *error_msg = "Resource not available to user.";
/* ... */
printf("Error: %s", error_msg);

...

Related Vulnerabilities

...