Package: eflite Version: 0.4.1-1 Severity: normal Hi,
While scanning some packages I found the following piece of code which leads
to a buffer overflow when an overly long HOME env var is used.
Affected code (es.c):
> char buf[513];
> char *p;
>
> p = getenv("HOME");
> sprintf(buf, "%s/.es.conf", p);
Cheers,
--
Raphael Geissert - Debian Maintainer
www.debian.org - get.debian.net
signature.asc
Description: This is a digitally signed message part.

