Hi,

I noticed that freeze.c parses integers like this:

#define GET_NUMBER(Number)                                      \
  do                                                            \
    {                                                           \
      (Number) = 0;                                             \
      while (isdigit (character))                               \
        {                                                       \
          (Number) = 10 * (Number) + character - '0';           \
          GET_CHARACTER;                                        \
        }                                                       \
    }                                                           \
  while (0)

However, given too long a string of digits, "Number" overflows.
Considering the rigorous parsing elsewhere in that file, I think
this must be accidental.


Reply via email to