In order to produce more secure C programs

and to improve the security of existed C programs

C library functions that are vulnerable to buffer overflow attack are analyzed. They are analyzed to obtain the features when they are used in a vulnerable way

and suggestions are given to avoid the vulnerable way. A buffer overflow detection tool that makes use of the analysis result can detect buffer overflow in C binary programs. The analysis result is practica1.