int decorators[DECSIZE]; The decorators array has a size of 13 (DECSIZE=13).
t = strchr(decorations, **s) - decorations; decorators[t] = 1; Here, when t becomes 13, an out-of-bounds (OOB) write can occur. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2086692 Title: stack-buffer-overflow in parsenote() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/abcmidi/+bug/2086692/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
