c = getchar();
except for "Shout it!", which uses gets()
. gets()
does not check the input length and is prone to buffer overflows.msf-pattern_create -l 1000
as the input. When the game ends and the function returns, the app crashes and we can see the saved RIP value.