It's pretty shocking to see this (slightly reformatted for sanity): int journal_file_append_entry(JournalFile *f, const dual_timestamp *ts,

It's pretty shocking to see this (slightly reformatted for sanity): int journal_file_append_entry(JournalFile *f, const dual_timestamp *ts, const struct iovec iovec[], unsigned n_iovec, uint64_t *seqnum, Object **ret, uint64_t *offset) { items = alloca(sizeof(EntryItem) * MAX(1u, n_iovec)); Stack-allocating based on a function argument, with no checks? No one who wants to maintain control over their machine should use this software. We should honestly just consider it a rootkit at this point.