Vulnerability Development mailing list archives

OT: snprintf() null termination


From: Vanja Hrustic <vanja () vanja com>
Date: Thu, 30 May 2002 21:57:42 +0700

I remember there were threads about this issue already, but it's hard to
draw a conclusion.

So - do all platforms properly null-terminate string (on overflow) when
snprintf() is used, or one should still use "sizeof(string)-1" for the
size of the snprintf()-ed string?

Thanks.

Vanja


Current thread: