Interesting C-language problem

1#include <stdio.h>2 intMainvoid)3 {4     Charbuff[Ten];5memset (Buff,0,sizeof(Buff));6 gets (buff);7printf"\ n The buffer entered is [%s]\n", buff);8     return 0;9}

This is an interesting C language problem, the code run seems to be correct, but there is a security problem, the problem is the Get () function, the function is to receive a string of standard input, and do not check the size of the string buffer directly copied into the buff array, which may cause the buff memory overflow, You can use the fgets () function instead of this function in a format similar to the following:

Char *fgets (char *str,int n,file *stream);

Interesting C-language problem