trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.
libconfuse project libconfuse 3.2.1
debian debian linux 8.0