目前针对缓冲区溢出和格式化字符串漏洞攻击已经提出了很多种解决方法。

So far, although many approaches have been proposed to solve buffer overflows and format string attacks, unfortunately few of them can prevent all possible attacks.

youdao

printf 的格式化字符串也可以输出数据（使用 %n 指令），并且可以暴露任意的数据，这就使得这个问题成为一个非常严重的漏洞。

printf format strings can also write data (using the %n directive) and reveal arbitrary data, making this a critical vulnerability. Following is an example of this mistake

youdao