Why is printf with a single argument (without conversion specifiers) deprecated?

by

printf("Hello World!"); is IMHO not vulnerable but consider this:

const char *str;
...
printf(str);

If str happens to point to a string containing %s format specifiers, your program will exhibit undefined behaviour (mostly a crash), whereas puts(str) will just display the string as is.

Example:

printf("%s");   //undefined behaviour (mostly crash)
puts("%s");     // displays "%s\n"

More Related Contents:

  1. Please explain the difference in the printfs below
  2. char c[]=”Albus”; printf(“%c”, c); [closed]
  3. Correct format specifier for double in printf
  4. How do you format an unsigned long long int using printf?
  5. What does “%.*s” mean in printf?
  6. What is the purpose of the h and hh modifiers for printf?
  7. How to printf “unsigned long” in C?
  8. What precisely does the %g printf specifier mean?
  9. Function does not return printf
  10. Why does printf not flush after the call unless a newline is in the format string?
  11. Printing leading 0’s in C
  12. How should I print types like off_t and size_t?
  13. printf format specifiers for uint32_t and size_t
  14. printf adds extra `FFFFFF` to hex print from a char array [duplicate]
  15. call printf using va_list
  16. Behaviour of printf when printing a %d without supplying variable name
  17. using printf to print out floating values
  18. Whitespace before %c specification in the format specifier of scanf function in C
  19. How to use “zd” specifier with `printf()`?
  20. Unsigned values in C
  21. Centering strings with printf()
  22. Passing too many arguments to printf
  23. printf with “%d” of numbers starting with 0 (ex “0102”) giving unexpected answer (ex ‘”66″)
  24. Wrong format specifiers in scanf (or) printf
  25. What primitive data type is time_t? [duplicate]
  26. Is it possible to print out only a certain section of a C-string, without making a separate substring?
  27. Printf long long int in C with GCC?
  28. cross-platform printing of 64-bit integers with printf
  29. C dynamically printf double, no loss of precision and no trailing zeroes
  30. What is the difference between %f and %lf in C?

Leave a Comment