Abstract: In order to produce more secure C programs, and to improve the security of existed C programs, C library functions that are vulnerable to buffer overflow attack are analyzed. They are analyzed to obtain the features when they are used in a vulnerable way, and suggestions are given to avoid the vulnerable way. A buffer overflow detection tool that makes use of the analysis result can detect buffer overflow in C binary programs. The analysis result is practica1.