On Mon, Jan 24, 2011 at 1:11 AM, Christopher Curtis <ccurt...@gmail.com> wrote:
> On Sat, Jan 22, 2011 at 2:04 AM, Nelson A. de Oliveira <nao...@gmail.com> 
> wrote:
>> To make it crash:
>> perl -e 'print "5"x2100000' | ./a.out
> I believe the unbounded '%s' is a legitimate bug, but is the '%i'
> assertion true?
> The example it gives doesn't crash when I run it.  Instead scanf
> returns ERANGE and (oddly) sets 'a' to -1.  This may be Linux specific
> behavior though.

Both on Linux and FreeBSD I get a segmentation fault with the example
code. I can't test on other platforms however.

Best regards,
Gimp-developer mailing list

Reply via email to