Package: opensmtpd
Version: 5.4.2p1-1
Usertags: goto-cc

During an analysis of all Debian packages using our research compiler tool-chain
(using tools from the cbmc package) the following error was found:

The declaration here:

http://sources.debian.net/src/opensmtpd/5.4.2p1-1/openbsd-compat/log.h?hl=54#L54

shadows the fact that the function fatal takes a single argument only:

http://sources.debian.net/src/opensmtpd/5.4.2p1-1/smtpd/log.c?hl=164#L163

Consequently several calls to "fatal" such as

http://sources.debian.net/src/opensmtpd/5.4.2p1-1/openbsd-compat/setresguid.c?hl=48#L48
http://sources.debian.net/src/opensmtpd/5.4.2p1-1/openbsd-compat/entropy.c?hl=222#L222

(several more exist) will all produce fairly useless error messages as the
second argument will be discarded.

Best,
Michael

Attachment: pgpEPfHj2JrPk.pgp
Description: PGP signature

Reply via email to