Skip to content

Commit f73a3a6

Browse files
committed
CPP: Explain the danger of gets a bit more in qhelp.
1 parent 0541950 commit f73a3a6

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

cpp/ql/src/Security/CWE/CWE-676/PotentiallyDangerousFunction.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ use. Currently, it checks for calls
88
to <code>gets</code> and <code>gmtime</code>. See <strong>Related rules</strong>
99
below for rules that identify other dangerous functions.</p>
1010

11-
<p>The <code>gets</code> function is one of the vulnerabilities exploited by the Internet Worm of 1988, one of the first computer worms to spread through the Internet.</p>
11+
<p>The <code>gets</code> function is one of the vulnerabilities exploited by the Internet Worm of 1988, one of the first computer worms to spread through the Internet. The <code>gets</code> function provides no way to limit the amount of data that is read and stored, so without prior knowledge of the input it is impossible to use it safely with any size of buffer.</p>
1212

1313
<p>The <code>gmtime</code> function fills data into a <code>tm</code>
1414
struct in shared memory and then returns a pointer to that struct. If

0 commit comments

Comments
 (0)