=== on 28 Aug 2013, 09:37:16 Dinesh Bolkensteyn wrote:
See \http://msdn.microsoft.com/en-us/library/xdb9w69d.aspx

=== on 29 Aug 2013, 06:38:19 Dinesh Bolkensteyn wrote:
perhaps we should also cover sscanf() and fscanf()

=== on 29 Aug 2013, 08:12:36 Dinesh Bolkensteyn wrote:
http://crasseux.com/books/ctutorial/String-overflows-with-scanf.html

=== on 29 Aug 2013, 09:37:41 Dinesh Bolkensteyn wrote:
Let's exclude sscanf() because the length of the string is known by the program, and is an upper bound for the size of the buffer required by %s.

=== on 3 Mar 2015, 09:49:30 Samuel Mercier wrote:
\[~ann.campbell.2] added reference to MITRE, CWE-676 for consistency with RSPEC-1081. Can you double check?

=== on 3 Mar 2015, 14:43:16 Samuel Mercier wrote:
Answer from Ann on hipchat on March 3rd, 2014, 14:31 looks good @SamuelMercier . Thx

