On Sat, Jan 22, 2011 at 2:04 AM, Nelson A. de Oliveira <[email protected]> wrote:
> To make it crash: > perl -e 'print "5"x2100000' | ./a.out I believe the unbounded '%s' is a legitimate bug, but is the '%i' assertion true? The example it gives doesn't crash when I run it. Instead scanf returns ERANGE and (oddly) sets 'a' to -1. This may be Linux specific behavior though. Chris _______________________________________________ Gimp-developer mailing list [email protected] https://lists.XCF.Berkeley.EDU/mailman/listinfo/gimp-developer
