On Wed, Apr 16, 2014 at 03:25:35PM +0200, Werner Koch wrote: > [...] > > [ In that case the attacker would only be able to return an arbitrary > integer which is the used to index (with bounds check) a table of > strings shown in a trace output. ] So there are bound checks. I had nothing to worry about. Thanks! Leo