On Sat, Jan 22, 2011 at 2:04 AM, Nelson A. de Oliveira <naoliv@xxxxxxxxx> wrote: > To make it crash: > perl -e 'print "5"x2100000' | ./a.out I believe the unbounded '%s' is a legitimate bug, but is the '%i' assertion true? The example it gives doesn't crash when I run it. Instead scanf returns ERANGE and (oddly) sets 'a' to -1. This may be Linux specific behavior though. Chris _______________________________________________ Gimp-developer mailing list Gimp-developer@xxxxxxxxxxxxxxxxxxxxxx https://lists.XCF.Berkeley.EDU/mailman/listinfo/gimp-developer
