On Wed, Mar 12, 2014 at 03:03:07PM -0400, Daniel Kahn Gillmor wrote: > Clint, what do you think? The fixes seem good. The calloc fix is setting `sz' to 0. Your patch is not. This leads me to wonder why `sz' was added in the first place and why it's not being used in any way.