Package: eflite
Version: 0.4.1-1
Severity: normal

Hi,

While scanning some packages I found the following piece of code which leads 
to a buffer overflow when an overly long HOME env var is used.

Affected code (es.c):
>   char buf[513];
>   char *p;
>
>   p = getenv("HOME");
>   sprintf(buf, "%s/.es.conf", p);

Cheers,
-- 
Raphael Geissert - Debian Maintainer
www.debian.org - get.debian.net

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to