Is fgets functions secure?

mullog · 10-02-2004, 12:32 PM

Hi,

I read that fgets isn't secure, but not why. Could someone please explain me why?

mirradric · 10-02-2004, 12:52 PM

from what I know fgets is more secure than gets since the fgets requires you to specify the size of the buffer.

I guess it could be insecure because the programmer may specify the wrong size. Not sure about this one so i'll be watching this thread.

infamous41md · 10-02-2004, 01:22 PM

fgets() is secure as long as (mentioned)the length calculation is correct. However, there is sometimes confusion as to how it deals with input. If there is not a newline in the first 'len' bytes of the file handle, the buffer will not contain a newline, but it will _always_ be NULL terminated.