MAXWORDLEN vs MAXTOKENLEN

[Matthias Andree]

David Relson <relson at osagesoftware.com> writes:

> Hi,
>
> Anybody know why we have two similar symbols with different values?
>
> lexer.h has:  #define MAXTOKENLEN 30
> lexer.l has:  #define MAXWORDLEN  20
>
> lexer.l uses MAXWORDLEN to decide if the token is too long to return
> graham.c uses MAXTOKENLEN as the length for tokens in the extrema array

As per your analysis, one of these must go. Is this exploitable (buffer
overrun) if you exchange the values BTW?

-- 
Matthias Andree