FINAL RESULTS:
test.c:6: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
Note: no issue is generated if line 4 is changed to e.g. sscanf(arg, "I32u");
Given this source file:
Flawfinder
2.0.17
outputs:Note: no issue is generated if line
4
is changed to e.g.sscanf(arg, "I32u");