Moritz Heidkamp <[email protected]> writes:

> the substring-index[-ci] procedures of the data-structures unit are
> vulnerable to a buffer overrun attack when passed an integer greater
> than zero as the optional START argument.

Forgot to mention: As a work-around you can switch to SRFI 13's
string-contains procedure which also returns the substring's index in
case it is found.

Moritz

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Chicken-users mailing list
[email protected]
https://lists.nongnu.org/mailman/listinfo/chicken-users

Reply via email to