Software Development

I heard rumours that the strcpy function is dangerous and shouldn't be used. Supposedly it can be exploited to create buffer overflows somehow.

And indeed when I compile my C code in the admittedly non-conforming Visual Studio C compiler, it warns me about using strcpy among other functions, labelling it dangerous. Is it true?

If so, what should we use instead? Some rumours say that strncpy should be used instead, others like Microsoft tell me to use strcpy_s.

is a duplicate

This question has been asked before and has already been answered. It should be marked as a duplicate.

Please enter the URL of the proposed duplicate in the details field below.

not constructive

This question cannot be answered in a way that is helpful to anyone. It's not possible to learn something from possible answers, except for the solution for the specific problem of the asker.

Communities

Comments on Is strcpy dangerous and what should be used instead?

Is strcpy dangerous and what should be used instead?

2 comment threads