Question

I know that buffer overruns are one potential hazard to using C-style strings (char arrays). If I know my data will fit in my buffer, is it okay to use them anyway? Are there other drawbacks inherent to C-style strings that I need to be aware of?

EDIT: Here’s an example close to what I’m working on:

char buffer[1024]; char * line = NULL; while ((line = fgets(fp)) != NULL) { // this won't compile, but that's not the issue     // parse one line of command output here. } 

This code is taking data from a FILE pointer that was created using a popen('df') command. I’m trying to run Linux commands and parse their output to get information about the operating system. Is there anything wrong (or dangerous) with setting the buffer to some arbitrary size this way?

Answer 1

C strings lack the following aspects of their C++ counterparts:

• Automatic memory management: you have to allocate and free their memory manually.
• Extra capacity for concatenation efficiency: C++ strings often have a capacity greater than their size. This allows increasing the size without many reallocations.
• No embedded NULs: by definition a NUL character ends a C string; C++ string keep an internal size counter so they don’t need a special value to mark their end.
• Sensible comparison and assignment operators: even though comparison of C string pointers is permitted, it’s almost always not what was intended. Similarly, assigning C string pointers (or passing them to functions) creates ownership ambiguities.