Package: sc
Version: 
Usertags: goto-cc

During an analysis of all packages using our research compiler tool-chain (using
tools from the cbmc package) the following error was found:

The declaration of repaint in sc.c

http://sources.debian.net/src/sc/7.16-3/sc.c?hl=88#L88

shadows the fact that sc actually requires 5 arguments:

http://sources.debian.net/src/sc/7.16-3/screen.c?hl=1076#L1076

Consequently the call here:

http://sources.debian.net/src/sc/7.16-3/sc.c?hl=830#L830

will cause a stack underflow and thus results in undefined behaviour (here this
will most likely mean arbitrary values being used as attributes, possibly
garbling the screen).

Best,
Michael

Attachment: pgpCilQj_YiGA.pgp
Description: PGP signature

Reply via email to