Package: remem
Version: 2.12-7
Usertags: goto-cc

During an analysis of all packages using our research compiler tool-chain (using
tools from the cbmc package) the following error was found:

The definition of datetree_add_word in parsers-date.c

http://sources.debian.net/src/remem/2.12-7/plugins/parsers-date.c?hl=216#L216

names exactly 3 parameters, but 4 arguments are being passed here:

http://sources.debian.net/src/remem/2.12-7/plugins/parsers-date.c?hl=95#L95

While this could be almost harmless, it seems the excess argument is actually in
the middle: the second argument seems inappropriate. Consequently the third and
fourth argument will not be used properly, with undefined behaviour resulting.

Best,
Michael

Attachment: pgp6227jXfuj8.pgp
Description: PGP signature

Reply via email to