Re: [SECURITY] Async-signal-unsafe operations in alrm_catcher() signal handler

On 2026-08-27 16:22, [email protected] wrote:
>     printf (_("\007timed out waiting for input: auto-logout\n"));
>     fflush (stdout);

Thanks for the bug report. I see that the current Git version has evolved a bit, in that it now calls 'write' (which is async-signal-safe) rather than printf and fflush. However, it still calls gettext (which is not async-signal-safe) and it calls jump_to_top_level (which is even less so), so there's still a couple of bugs here.

Agreed that a flag-based approach is the way to go, though I expect your patch won't be quite enough.