> While the use of such a fixed-size buffer is an obvious vulnerability, we note that fqzcomp already contains over two dozen static buffers. It should be note

> While the use of such a fixed-size buffer is an obvious vulnerability, we note that fqzcomp already contains over two dozen static buffers. It should be noted that "static buffers" are not per se a vulnerability. This sentence reads like they equate the two.