Yunho Kim

crash2.html is not a human-readable file because crash2.html is generated by our automated test generation tool FOCAL, not a human developer. A malicious attacker can use a such unexpected file (human readable or not) to cause a crash and exploit this crash as a security vulnerability. Thus, I think that this bug can cause a serious security problem and should be fixed. Thank you

NULL pointer dereference in mjson 1.7

Buffer overflow issue in read_line_alloc at src/sxmlc.c:1841

Buffer overflow in strip_spaces src/sxmlc.c:1916

Two crash bugs on mp3gain