Hi Gianfranco,

I have two questions for you.

1. The patch makes the program use one additional position of the memory
pointed to by buf.  Are you sure that there will be no buffer overflow for any
value of name without replacing 14 by 15 in the allocation ?

2. The package has a high popcon.  Have you thoroughly tested the resulting
package ? I would feel more comfortable if you would confirm that on bug
719110.

Regards,

Bart Martens


-- 
To UNSUBSCRIBE, email to debian-mentors-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20140223093920.gc14...@master.debian.org

Reply via email to