From f173e27272e6e37cab016f9ef3f90d3e1189329f Mon Sep 17 00:00:00 2001 From: Paul Eggert Date: Sat, 8 Apr 2023 13:51:26 -0700 Subject: manual: document snprintf truncation better --- manual/stdio.texi | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/manual/stdio.texi b/manual/stdio.texi index c502a21036..3820a24f3e 100644 --- a/manual/stdio.texi +++ b/manual/stdio.texi @@ -2439,7 +2439,10 @@ If @var{size} is zero, nothing, not even the null byte, shall be written and The return value is the number of characters which would be generated for the given input, excluding the trailing null. If this value is greater than or equal to @var{size}, not all characters from the result have -been stored in @var{s}. You should try again with a bigger output +been stored in @var{s}. If this happens, you should be wary of using +the truncated result as that could lead to security, encoding, or +other bugs in your program (@pxref{Truncating Strings}). +Instead, you should try again with a bigger output string. Here is an example of doing this: @smallexample -- cgit 1.4.1