Beyond that, I don't see anything that really stands out to me. String handling is done via C++, auto-response elements look right, sprintf- like things are done sanely, and the SQL all looks to be injection-safe. +1 from me on a quick overview audit.
** Changed in: quassel (Ubuntu) Assignee: Kees Cook (kees) => (unassigned) -- Quassel main inclusion report https://bugs.launchpad.net/bugs/317892 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs