# gets

## Prototype

```c
char* gets(char* s);
```

This function reads a line of input from the standard input stream (stdin) and stores it in the array pointed to by `s`, until either a newline character or the end-of-file is reached. The newline character is replaced with a null character.

## Vulnerable example

```c
#include <stdio.h>
#include <string.h>

int main(int argc, char **argv)
{
    char buffer[16];  // create a buffer with 16 bytes of storage

    printf("Enter a string: ");
    gets(buffer);  // read input from the user and store it in buffer

    printf("You entered: %s\n", buffer);  // print the contents of buffer

    return 0;
}
```

This code creates a buffer with a fixed size of 16 bytes, and then uses the `gets` function to read input from the user and store it in the buffer. However, `gets` does not check the length of the input, so if the user enters more than 16 characters, the extra characters will overflow the buffer and potentially overwrite other areas of memory, which can lead to unpredictable behavior and security vulnerabilities.

## Prevent&#x20;

To prevent buffer overflow vulnerabilities, it is important to use functions that are designed to check the length of input and limit the amount of data that is read. In this case, the recommended alternative to `gets` is `fgets`, which takes an additional argument specifying the maximum number of characters to read.

```c
#include <stdio.h>
#include <string.h>

int main(int argc, char **argv)
{
    char buffer[16];  // create a buffer with 16 bytes of storage

    printf("Enter a string: ");
    fgets(buffer, sizeof(buffer), stdin);  // read input from the user and store it in buffer

    // remove the newline character from the end of the string
    int length = strlen(buffer);
    if (buffer[length - 1] == '\n')
        buffer[length - 1] = '\0';

    printf("You entered: %s\n", buffer);  // print the contents of buffer

    return 0;
}
```

This code creates a buffer with a fixed size of 16 bytes, and then uses the `fgets` function to read input from the user and store it in the buffer. The `fgets` function takes an additional argument specifying the maximum number of characters to read, which in this case is set to the size of the buffer. This ensures that `fgets` will not read more characters than the buffer can hold, preventing a buffer overflow.

{% hint style="info" %}
Note that the `fgets` function includes the newline character in the input, so the code above removes the newline character from the end of the string before printing it.
{% endhint %}

&#x20;


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://www.ctfrecipes.com/pwn/stack-exploitation/stack-buffer-overflow/dangerous-functions/gets.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.