Thank you Florian. I have no further comments. I think this can be closed. Initially it seemed to me like an easy fix.
I am not completely certain but I do believe the tools output is correct: https://openscanhub.fedoraproject.org/task/86804/log/transfig-3.2.9a%5E20250619.ee3f4d8-6.fc44/scan-results.html#def2
bound.c: invalid value passed to `strchr`
Signed integer overflow in function `compute_ellarc`