Thanks for using the Mayhem tags[1] on these. The minimal set to reproduce is: env -i joy2key -config A This bug will only bite if -config is specified on the command line and $HOME is not set. (Thus env -i is critical).
This has been reported upstream[2] and a patch sent. The patch will be included in the next Debian version of the package; however, since it is unlikely to arise in normal operation and does not seem exploitable, I won't rush to make a version just for this fix. [1] http://lists.debian.org/debian-devel/2013/06/msg00720.html [2] https://sourceforge.net/p/joy2key/patches/5/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
