3 ms·

asprintf is fine for most cases. For the other cases you probably don't want to dynamically allocate memory so snprintf with a fixed buffer size is fine.

• rurban 6y ago
  Nope, there's still %n in snprintf. snprintf_s is better, but still a security nightmare.
  • cozzyd 6y ago
    Sure, but you can just not use %n and not accept format strings from users?