gitlab.flawfinder.sprintf-1.vsprintf-1.swprintf-1.vswprintf-1._stprintf-1._vstprintf-1

137
Download Count*
MIT
License

Use sprintf_s, snprintf, or vsnprintf.

Run Locally

Run in CI

Semgrep CI docs

Defintion

Edit RuleView Source
Open in Playground 
rules:
  - id: flawfinder.sprintf-1.vsprintf-1.swprintf-1.vswprintf-1._stprintf-1._vstprintf-1
    languages:
      - c
    message: |
      Use sprintf_s, snprintf, or vsnprintf.
    metadata:
      cwe: "CWE-120: Does not check for buffer overflows (CWE-120)"
      primary_identifier: flawfinder.sprintf-1.vsprintf-1.swprintf-1.vswprintf-1._stprintf-1._vstprintf-1
      secondary_identifiers:
        - name: Flawfinder - sprintf
          type: flawfinder_func_name
          value: sprintf
        - name: Flawfinder - vsprintf
          type: flawfinder_func_name
          value: vsprintf
        - name: Flawfinder - swprintf
          type: flawfinder_func_name
          value: swprintf
        - name: Flawfinder - vswprintf
          type: flawfinder_func_name
          value: vswprintf
        - name: Flawfinder - _stprintf
          type: flawfinder_func_name
          value: _stprintf
        - name: Flawfinder - _vstprintf
          type: flawfinder_func_name
          value: _vstprintf
      license: MIT
    pattern-either:
      - pattern: sprintf(...)
      - pattern: vsprintf(...)
      - pattern: swprintf(...)
      - pattern: vswprintf(...)
      - pattern: _stprintf(...)
      - pattern: _vstprintf(...)
    severity: ERROR