Package: xcal
Version: 4.1-19
Usertags: goto-cc

During an analysis of all packages using our research compiler tool-chain (using
tools from the cbmc package) the following error was found:

The declaration of NewMeWrap in xcal_edit.c:

http://sources.debian.net/src/xcal/4.1-19/xcal_edit.c?hl=87#L87

shadows the fact that NewMeWrap actually requires 2 arguments:

http://sources.debian.net/src/xcal/4.1-19/xcal_edit.c?hl=343#L343

Consequently the call in line 1193 of the same file will cause a stack underflow
and will thus result in undefined behaviour (the values of all parameters will
be arbitrary).

Best,
Michael

Attachment: pgpRL9s_Cy98q.pgp
Description: PGP signature

Reply via email to