[NaS]

strval is also unsecure if you use it on user-input without further checks.
If the input contains a very large number or is too long (no matter what it contains) it will or might crash the server, so at least check for the length first.

Or just use sscanf as already suggested.