Package: isdnutils Version: 1:3.25+dfsg1-3.4 Usertags: goto-cc During an analysis of all Debian packages using our research compiler tool-chain (using tools from the cbmc package) the following error was found:
When invoked from here: http://sources.debian.net/src/isdnutils/1:3.25+dfsg1-3.4/xmonisdn/Net.c?hl=547#L547 undefined behaviour due to a stack underflow is unavoidable as GetNetinfoFile actually requires (and uses) an argument: http://sources.debian.net/src/isdnutils/1:3.25+dfsg1-3.4/xmonisdn/Net.c?hl=625#L625 Best, Michael
pgpozJruj7_Yx.pgp
Description: PGP signature
