Re: review eject 2.1.5+deb1+cvs20081104-13.1 2014-02-14 21:29

2014-02-24 Thread Gianfranco Costamagna
Il Domenica 23 Febbraio 2014 10:39, Bart Martens ba...@debian.org ha scritto: Hi Gianfranco, Hi Bart and debian mentors, first sorry for the late reply. I have two questions for you. 1. The patch makes the program use one additional position of the memory pointed to by buf.  Are you sure

Re: review eject 2.1.5+deb1+cvs20081104-13.1 2014-02-14 21:29

2014-02-24 Thread Bart Martens
On Mon, Feb 24, 2014 at 12:58:33PM +, Gianfranco Costamagna wrote: Il Domenica 23 Febbraio 2014 10:39, Bart Martens ba...@debian.org ha scritto: 1. The patch makes the program use one additional position of the memory pointed to by buf.  Are you sure that there will be no buffer overflow

review eject 2.1.5+deb1+cvs20081104-13.1 2014-02-14 21:29

2014-02-23 Thread Bart Martens
Hi Gianfranco, I have two questions for you. 1. The patch makes the program use one additional position of the memory pointed to by buf. Are you sure that there will be no buffer overflow for any value of name without replacing 14 by 15 in the allocation ? 2. The package has a high popcon.