On Sat, Jan 22, 2011 at 2:04 AM, Nelson A. de Oliveira <nao...@gmail.com> wrote:

> To make it crash:
> perl -e 'print "5"x2100000' | ./a.out

I believe the unbounded '%s' is a legitimate bug, but is the '%i'
assertion true?

The example it gives doesn't crash when I run it.  Instead scanf
returns ERANGE and (oddly) sets 'a' to -1.  This may be Linux specific
behavior though.

Gimp-developer mailing list

Reply via email to