3. For each of the following statements, indicate whether it is vulnerable to format string attack, and if yes, show how to fix it. [4 points]

1. printf(user_data);
   //assume that user_data is a string variable

2. printf(Hello world);

3. printf(%d %s, user_data);

4. printf(Hello world %%);