What is the behavior of printing NULL with printf’s %s specifier?

by

First things first: printf is expecting a valid (i.e. non-NULL)
pointer for its %s argument so passing it a NULL is officially
undefined. It may print “(null)” or it may delete all files on your
hard drive–either is correct behavior as far as ANSI is concerned
(at least, that’s what Harbison and Steele tells me.)

That being said, yeah, this is really wierd behavior. It turns out
that what’s happening is that when you do a simple printf like this:

printf("%s\n", NULL);

gcc is (ahem) smart enough to deconstruct this into a call to
puts. The first printf, this:

printf("test %s\n", NULL);

is complicated enough that gcc will instead emit a call to real
printf.

(Notice that gcc emits warnings about your invalid printf argument
when you compile. That’s because it long ago developed the ability to
parse *printf format strings.)

You can see this yourself by compiling with the -save-temps option
and then looking through the resulting .s file.

When I compiled the first example, I got:

movl    $.LC0, %eax
movl    $0, %esi
movq    %rax, %rdi
movl    $0, %eax
call    printf      ; <-- Actually calls printf!

(Comments were added by me.)

But the second one produced this code:

movl    $0, %edi    ; Stores NULL in the puts argument list
call    puts        ; Calls puts

The wierd thing is that it doesn’t print the following newline.
It’s as though it’s figured out that this is going to cause a segfault
so it doesn’t bother. (Which it has–it warned me when I compiled
it.)

More Related Contents:

  1. Returning struct containing array
  2. Where is the header file on Linux? Why can’t I find ? [duplicate]
  3. Creating a daemon in Linux
  4. C: Run a System Command and Get Output? [duplicate]
  5. How to know linux scheduler time slice?
  6. In C how do you redirect stdin/stdout/stderr to files when making an execvp() or similar call?
  7. Using pointer after free()
  8. Why does stdout need explicit flushing when redirected to file?
  9. What is the advantage of GCC’s __builtin_expect in if else statements?
  10. Can code that will never be executed invoke undefined behavior?
  11. Timeout Function
  12. I do not understand how execlp() works in Linux
  13. How to get the current time in milliseconds from C in Linux?
  14. Beep on Linux in C
  15. What is the difference between a Linux platform driver and normal device driver?
  16. Checking if a dir. entry returned by readdir is a directory, link or file. dent->d_type isn’t showing the type
  17. Why does forking my process cause the file to be read infinitely
  18. Finding out if a message over tcp was delivered
  19. What does a dot before the variable name in struct mean?
  20. why C clock() returns 0
  21. calling assembly function from c
  22. CPU cache inhibition
  23. Check if process exists given its pid
  24. How do I reimplement (or wrap) a syscall function on Linux?
  25. Executing shell script with system() returns 256. What does that mean?
  26. How to use SO_KEEPALIVE option properly to detect that the client at the other end is down?
  27. What API do I call to get the system uptime?
  28. Where are syscalls located in glibc source
  29. Linux function to get mount points
  30. Why can’t a modifiable lvalue have an array type?

Leave a Comment