Visual Studio Code – Can fscanf buffer overflow when %d is used?
I ran the Fortify Static Code Analyzer on the ossec-hids repo and it reported the following "Buffer Overflow: Format String" finding for src/analysisd/stats.c:415: The format string argument to fscanf() at stats.c line 415 does not properly limit the amount of…