Communities

Writing
Writing
Codidact Meta
Codidact Meta
The Great Outdoors
The Great Outdoors
Photography & Video
Photography & Video
Scientific Speculation
Scientific Speculation
Cooking
Cooking
Electrical Engineering
Electrical Engineering
Judaism
Judaism
Languages & Linguistics
Languages & Linguistics
Software Development
Software Development
Mathematics
Mathematics
Christianity
Christianity
Code Golf
Code Golf
Music
Music
Physics
Physics
Linux Systems
Linux Systems
Power Users
Power Users
Tabletop RPGs
Tabletop RPGs
Community Proposals
Community Proposals
tag:snake search within a tag
answers:0 unanswered questions
user:xxxx search by author id
score:0.5 posts with 0.5+ score
"snake oil" exact phrase
votes:4 posts with 4+ votes
created:<1w created < 1 week ago
post_type:xxxx type of post
Search help
Notifications
Mark all as read See all your notifications »
Q&A

Welcome to Software Development on Codidact!

Will you help us build our independent community of developers helping developers? We're small and trying to grow. We welcome questions about all aspects of software development, from design to code to QA and more. Got questions? Got answers? Got code you'd like someone to review? Please join us.

Post History

66%
+2 −0
Q&A Why is atoi dangerous and what should be used instead?

The atoi family of functions should never be used for any purpose - they are broken by design. The reason why can be found in the C standard C23 7.24.1: The functions atof, atoi, atol, and atol...

posted 21h ago by Lundin‭

Answer
#1: Initial revision by user avatar Lundin‭ · 2024-12-11T09:00:04Z (about 21 hours ago)
The `atoi` family of functions should never be used for any purpose - they are broken by design.

The reason why can be found in the C standard C23 7.24.1:

> The functions `atof`, `atoi`, `atol`, and `atoll` are not required to affect the value of the integer expression `errno` on an error. If the value of the result cannot be represented, the behavior is undefined.

Meaning that the functions do not necessary have any error handling at all - if you pass a string which consists of other things than digit characters, anything can happen. 

Furthermore, the same chapter makes this guarantee (C23 7.24.2):

> Except for the behavior on error, they are equivalent to
> 
>     atoi: (int)strtol(nptr, nullptr, 10)
>     atol: strtol(nptr, nullptr, 10)
>     atoll: strtoll(nptr, nullptr, 10)

So the solution is to always use the `strtol` family of functions instead. They have error handling but are otherwise 100% equivalent to the `atoi` family, when passing base 10 = decimal as parameter.

(In fact some of the better standard libraries implements `atoi` as a mere wrapper macro around `strtol`.)