gets - get a string from standard input (DEPRECATED)
Standard C library (libc
, -lc
)
#include <stdio.h>
[[deprecated]] char *gets(char *s);
Never use this function
.
gets() reads a line from stdin
into the
buffer pointed to by s
until either a terminating newline or
EOF, which it replaces with a null byte ('\0'). No
check for buffer overrun is performed (see BUGS below).
gets() returns s
on success, and NULL on
error or when end of file occurs while no characters have been read.
However, given the lack of buffer overrun checking, there can be no
guarantees that the function will even return.
For an explanation of the terms used in this section, see attributes(7).
Interface | Attribute | Value |
gets() |
Thread safety | MT-Safe |
POSIX.1-2008.
Never use gets(). Because it is impossible to tell without knowing the data in advance how many characters gets() will read, and because gets() will continue to store characters past the end of the buffer, it is extremely dangerous to use. It has been used to break computer security. Use fgets() instead.
For more information, see CWE-242 (aka "Use of Inherently Dangerous Function") at http://cwe.mitre.org/data/definitions/242.html