The buffer overflow example was fixed as below. Is this safe ?

int bof(char * )str, int size){

char *buffer = (char *) malloc(size);

strcpy(buffer, str);

return 1;

}