GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.Referenceshttps://lists.gnu.org/archive/html/bug-cflow/2019-04/msg00000.html
