{"id":2812,"date":"2017-11-18T00:01:13","date_gmt":"2017-11-18T08:01:13","guid":{"rendered":"http:\/\/c-for-dummies.com\/blog\/?p=2812"},"modified":"2017-11-11T10:14:19","modified_gmt":"2017-11-11T18:14:19","slug":"safe-coding-practices-scanf","status":"publish","type":"post","link":"https:\/\/c-for-dummies.com\/blog\/?p=2812","title":{"rendered":"Safe Coding Practices – scanf()<\/em>"},"content":{"rendered":"

When it was pointed out to me<\/a> that using the scanf()<\/em> functions in my online teaching material was an “unsafe coding practice,” I thought, “Well, duh!” I’ve never been a fan of scanf()<\/em>; it’s an ugly function.
\n
\nI recall when I first learned to code. The scanf()<\/em> function frustrated me. In fact, one of the first functions I coded in C, one that I used over and over, is my own input()<\/em> function to read a string of text; I’ve never used scanf()<\/em> beyond my books or courses.<\/p>\n

Here is what I wrote in a blog post<\/a> in October 2016:<\/p>\n

I\u2019m not a fan of the scanf()<\/em> function, despite how handy it can be. It\u2019s a great teaching tool, but for a program that accepts string input, you need to use fgets()<\/em> instead.<\/p><\/blockquote>\n

The post from April 2014 is titled “scanf()<\/em> the Bastard<\/a>.”<\/p>\n

Yes, I have no love for the function, but how specifically is it an “unsafe” programming practice? The issue raised was that it’s not suited for numeric input. That’s one useful feature scanf()<\/em> has, especially when writing a program to teach C; it replaces a bunch of other functions required to convert string input to a numeric value.<\/p>\n

The issue raised is the “undefined behavior” of scanf()<\/em>, specifically when input isn’t what’s requested. I mention this vulnerability in my teachings: You must trust that the user types the input requested or the code goes bonkers, especially for numeric input.<\/p>\n

\r\n#include <stdio.h>\r\n\r\nint main()\r\n{\r\n    float balance;\r\n\r\n    printf(\"Enter your bank balance: \");\r\n    scanf(\"%f\",&balance);\r\n    printf(\"Half your balance is %.2f\\n\",\r\n            balance\/2);\r\n\r\n    return(0);\r\n}<\/pre>\n
If you run this code and type a value, it works. Type a string as input and you see:<\/p>\n
Enter you bank balance: none of your business
\nHalf your balance is 0.00<\/code><\/p>\n
If you type NAN<\/strong>, you get:<\/p>\n
Enter you bank balance: NAN
\nHalf your balance is nan<\/code><\/p>\n
The value NAN<\/code> is numeric code for “not a number”; INF<\/code> is code for “infinity.” These are both “values” interpreted by the C program. NAN<\/code> can also be output, for example, when you try to obtain the square root of a negative value.<\/p>\n
The fscanf()<\/em> function, which reads values from a file, also suffers from the same flaws as scanf()<\/em>. Yet, as a teaching tool, I believe using the function is okay. For code released to the wild, don’t use fscanf()<\/em>, either.<\/p>\n
These issues are important, and I believe I fully address them in my courses. For details from the Software Engineering Institute’s concerns regarding various scanf()<\/em> weaknesses, click here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
Just don’t ever use this function in any code you plan on releasing into the wild. Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-2812","post","type-post","status-publish","format-standard","hentry","category-main"],"_links":{"self":[{"href":"https:\/\/c-for-dummies.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2812","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/c-for-dummies.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/c-for-dummies.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/c-for-dummies.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/c-for-dummies.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2812"}],"version-history":[{"count":7,"href":"https:\/\/c-for-dummies.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2812\/revisions"}],"predecessor-version":[{"id":2832,"href":"https:\/\/c-for-dummies.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2812\/revisions\/2832"}],"wp:attachment":[{"href":"https:\/\/c-for-dummies.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2812"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/c-for-dummies.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2812"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/c-for-dummies.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2812"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}