Hi, As some of you already know I'm a computer science teacher at a Dutch university. Currently I'm giving a course about security. For my next practical lesson I want my students todo an audit of a small piece of C-code. Nothing fancy really just looking for sprintf instead of snprintf, gets instead of fgets, etc. And formatstring vulnerabilities. Does anyone know of some (small!) piece of software in Fedora (Extras) that could benefit from this? And are there any other simple checks my students could do? Any findings will of course be published. Thanks & Regards, Hans
