Package: xxgdb
Version: 1.12-17
Usertags: goto-cc

During an analysis of all packages using our research compiler tool-chain (using
tools from the cbmc package) the following error was found:

The declaration of File in global.h:

http://sources.debian.net/src/xxgdb/1.12-17/global.h?hl=122#L122

shadows the fact that File actually requires 3 arguments:

http://sources.debian.net/src/xxgdb/1.12-17/filemenu.c?hl=476,477,478,479#L476

Consequently the call in line 338 of the same file will cause a stack underflow
and will thus result in undefined behaviour (the values of all parameters will
be arbitrary).

Best,
Michael

Attachment: pgplg3Pqb1b2a.pgp
Description: PGP signature

Reply via email to