不同字符编码的字符串处理函数查询:Microsoft 字符串处理函数大全
宽字符转char字符
字符串从wchar_t转换成char
#include <stdlib.h>
errno_t wcstombs_s( size_t *pReturnValue, char *mbstr, size_t sizeInBytes, const wchar_t *wcstr, size_t count );
字符串格式化输出sprintf_s
利用sprintf_s将计算出的内存中的hex形式MD5哈希值转换为字符串进行操作。代码如下:
BYTE* hash;
hash = GetHash(lpReadFileBuffer, CALG_MD5); //GetHash是自写的其他函数
if (hash)
{
//MD5_DIGEST_LENGTH
char hashstring[32];
memset(hashstring, 0, sizeof(hashstring));
for (int i = 0; i < 16; ++i) {
sprintf_s(hashstring + i * 2, 16, "%02x", (BYTE)*(hash+i));
}
LOG(INFO) << hashstring;
}
使用的sprintf_s方法可能会引起Run-Time Check Failure #2 - Stack around the variable ‘hashstring’ was corrupted 问题。
正确的做法是使用byteToHexStr函数。原理https://wenku.baidu.com/view/bc698defe009581b6bd9eb31.html
inline std::string byteToHexStr(unsigned char* byte_arr, int arr_len)
{
std::string hexstr;
//
for (int i = 0; nullptr != byte_arr && i < arr_len; ++i)
{
char hex1;
char hex2;
/*借助C++支持的unsigned和int的强制转换,把unsigned char赋值给int的值,那么系统就会自动完成强制转换*/
int value = byte_arr[i];
int S = value / 16;
int Y = value % 16;
//将C++中unsigned char和int的强制转换得到的商转成字母
if (S >= 0 && S <= 9)
{
hex1 = (char)(48 + S);
}
else
{
hex1 = (char)(55 + S);
}
//将C++中unsigned char和int的强制转换得到的余数转成字母
if (Y >= 0 && Y <= 9)
{
hex2 = (char)(48 + Y);
}
else
{
hex2 = (char)(55 + Y);
}
//最后一步的代码实现,将所得到的两个字母连接成字符串达到目的
hexstr = hexstr + hex1 + hex2;
}
return hexstr;
}
字符串查找函数strstr
char* strstr(char*, const char*);
字符串以字符分割strtok_s
char* strtok_s(
char* str,
const char* delimiters,
char** context
);
wchar_t* wcstok_s(
wchar_t* str,
const wchar_t* delimiters,
wchar_t** context
);
unsigned char* _mbstok_s(
unsigned char* str,
const unsigned char* delimiters,
char** context
);
int IOCsInitialize(WCHAR* curPath)
{
FILE* fr;
char line[1000];
char* str = NULL;
if (fopen_s(&fr, ".\\iocs\\hash-APT-202101-06.txt", "r")) {
printf("Open IOCs File failed,%d\n", GetLastError());
return -1;
}
while (!feof(fr))
{
fgets(line, 1000, fr);
char* p = strstr(line, ";");
if (p != NULL)
{
if(strtok_s(line, ";" ,&str))
{
switch (strlen(line))
{
case 32:
printf("md5");
break;
case 40:
printf("sha1");
break;
case 64:
printf("sha256");
break;
default:
break;
}
}
}
}
printf("%s", line);
fclose(fr);
return 0;
}
https://docs.microsoft.com/en-us/cpp/c-runtime-library/reference/strtok-s-strtok-s-l-wcstok-s-wcstok-s-l-mbstok-s-mbstok-s-l?view=msvc-160