Hello Thomas, I am wondering if this is not a false positive.
all the code is compiled with -D_FORTIFY_SOURCE=2 https://salsa.debian.org/science-team/tango/-/jobs/954394/raw Can you confirm that it is a false positive ? I am not that confident when it comes to hardening flags. for the record I checked also the Database and it is also affected by this. cheers