在C中，什么是sscanf的安全替代品？

Question

I found online that in C++ there's an alternative, but what about plain-old C? I appreciate any tips or advice.

Answer 1

It depends on what you want to do with it.

Since you have the string in memory, you can safely avoid buffer overflows by being careful about the arguments you pass. For example, if you're scanning into a string, using "%s" , just use a target buffer big enough to hold the biggest string that could possibly be there (and make sure that the source buffer is a valid string, ie, that it's '\\0' -terminated).

One danger of all the *scanf() functions is that if you're scanning a numeric value, and the input value is too big to be represented in the target type, the behavior is undefined. For example, this program:

#include <stdio.h>
int main(void) {
    const char *s = "999999999999999999999999999";
    int n;
    sscanf(s, "%d", &n);
    printf("n = %d\n", n);
    return 0;
}

has undefined behavior (unless INT_MAX is really really big).

You can safely scan numeric values using the strto*() functions: strtol() , strtoll() , strtoul() , strtoull() , strtof() , strtod() , strtold() . Their behavior on errors is a bit tricky, but at least it's well defined.

Answer 2

I believe you're looking for the "m" modifier. It dynamically allocates memory to hold the extracted string, so as to avoid buffer overflows. The only drawback is that it's a GNU extension, so eg MSVC probably won't recognize it.

Here is an existing Stack Overflow answer on that topic.

Here's an example of how to use it:

#include <stdio.h>
#include <string.h>
#include <stdlib.h>

int main(void)
{
    char *str;
    printf("Enter your name:\n");
    scanf("%ms", &str);

    printf("Hello %s!\n", str);
    free(str);
    return 0;
}

Answer 3

Under Windows, you can use sscanf_s (see https://msdn.microsoft.com/en-us/library/t6z7bya3.aspx ) which require you to provide the buffer length for every %s match as an argument right after the buffer argument.

For example, sscanf_s( tokenstring, "%s", s, (unsigned)_countof(s) ); .