Re: Convert float to gchar *

[John K Luebs <jkluebs luebsphoto com>]

On Mon, Oct 13, 2003 at 11:27:19AM -0400, Havoc Pennington wrote:
> On Sat, 2003-10-11 at 16:07, Gus Koppel wrote:
> > Not really. snprintf () on an auto (local) buffer (instead of pointer)
> > variable is probably faster / more direct, uses less system resources
> > and you don't need to free anything by yourself, thus avoiding a
> > potential memory leak cause.
>
> You win possible crashes and buffer overflows instead.

How, exactly, does use of snprintf() lead to buffer overflow
vulnerabilities?