Hello Michael, On Sun, Sep 23, 2012 at 12:41:02AM +0100, Michael Tautschnig wrote: > Package: asclock > Version: 2.0.12-23 > > While building your package using our research compiler infrastructure we
Just for curiosity: Any pointers to this "research" and
"infrastructure"?
> noticed the following conflicting declarations:
>
> ./asclock.h:extern char exec_str[MAX_PATH_LEN];
> ./asclock.c:char exec_str[] = "echo no program has been specified
> >/dev/console";
>
> This may cause undefined behaviour (likely a segfault) if any part of the
> program relies on the fact that exec_str is of size MAX_PATH_LEN, while only
> 50
> bytes are actually allocated.
I've very spotty and limited internet access atm, but I will
investigate this later. If you believe that this issue has security
implications feel free to tag it such, otherwise this probably will be
a post wheezy issue.
Thanks for reporting!
Greetings
Helge
--
Dr. Helge Kreutzmann [email protected]
Dipl.-Phys. http://www.helgefjell.de/debian.php
64bit GNU powered gpg signed mail preferred
Help keep free software "libre": http://www.ffii.de/
signature.asc
Description: Digital signature
