Hi,

in the function current_chapter_number() there is a buffer overflow
which is fixed by this patch:

--------------------------* snip *---------------------------------
--- makeinfo/sectioning.c
+++ makeinfo/sectioning.c       2012-11-19 14:10:54.639587164 +0000
@@ -256,7 +256,7 @@ current_chapter_number (void)
     return xstrdup ("");
   else if (enum_marker == APPENDIX_MAGIC)
     {
-      char s[1];
+      char s[2];
       sprintf (s, "%c", numbers[0] + 64);
       return xstrdup (s);
     }
--------------------------* snap *---------------------------------

Werner

-- 
  "Having a smoking section in a restaurant is like having
          a peeing section in a swimming pool." -- Edward Burr

Reply via email to