This is the whole compiling and linking in the package (warnings removed, they are all only about variables which are defined but not used):
cc -g -O2 -O2 -Wall -c -o c2esp.o c2esp.c cc -g -O2 -O2 -Wall -c -o jbig85.o jbig85.c cc -g -O2 -O2 -Wall -c -o jbig.o jbig.c cc -g -O2 -O2 -Wall -c -o jbig_ar.o jbig_ar.c cc -g -O2 -O2 -Wall -o c2esp c2esp.o -lcupsimage -lcups -lcupsdriver jbig85.o jbig.o jbig_ar.o cc -g -O2 -O2 -Wall -c -o command2esp.o command2esp.c cc -g -O2 -O2 -Wall -o command2esp command2esp.o -lcups -lcupsdriver cc -g -O2 -O2 -Wall -c -o myopldecode.o myopldecode.c cc -g -O2 -O2 -Wall -g myopldecode.o jbig85.o jbig.o jbig_ar.o -o myopldecode The buffer overflow issues in jbig_write_file, jbig_decode1 your are talking about are all in myopldecode.c which is a debug helper program which does not get into the driver or command parser (see compiling and linking commands above), so this code is not executed when a user prints. I can remove the file without loosing functionality of the package. I will look into the file name length issue. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/821940 Title: [MIR] c2esp To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/c2esp/+bug/821940/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs