笔试题，大家看看

sky_terry

Consider the following code:

#include <stdio.h>
#include <string.h>
int main(int argc, char *argv[]) {
int i = 1;
char buf[4];
strcpy(buf, "AAAA");
printf("%dn", i);
return 0;
}

a) When compiled and executed on x86, why does this program usually not
output what the programmer intended?

b) Name several ways in which the security problem that causes this
program not to output what the programmer intended can be prevented
WITHOUT changing the code.

sky_terry

运行结果是：0
但如果strcpy(buf, "AAA") // 3个A
结果是1
为什么？

ltvxworks

看一下i的地址&i是多少，然后再看看buf的地址是多少！
看看是不是因为strcpy函数执行时，把最后一个字节写成了'\0',而这个字节的地址恰好是i低位的地址．
这里没有调试环境，我说的纯属猜测！

tchhyc

同意楼上的