CERT.STR.RANGE.FORMATTER
Use of string range formatter is implementation defined
Vulnerability and risk
String range formatter may not be supported by all compilers and usage could affect portability
Vulnerable code example
extern void foo(char *cptr) { scanf("Total %[a-z]", cptr); }
Range formatter may not be portable