Package: asclock
Version: 2.0.12-23

While building your package using our research compiler infrastructure we
noticed the following conflicting declarations:

./asclock.h:extern char exec_str[MAX_PATH_LEN];
./asclock.c:char exec_str[] = "echo no program has been specified 
>/dev/console";

This may cause undefined behaviour (likely a segfault) if any part of the
program relies on the fact that exec_str is of size MAX_PATH_LEN, while only 50
bytes are actually allocated.

Best,
Michael

Attachment: pgpMXbyFWJtgc.pgp
Description: PGP signature

Reply via email to