A suspicious integer overflow to buffer overflow in ‘SweeD_Input.c’

Package: sweed
Version: 3.2.1+dfsg-5

Dear Maintainers,

We are researching static analysis for recurring vulnerabilities. When
using our tool to test on 'sweed', we found a suspicious integer
overflow to buffer overflow at 'readAlignmentMS' in 'SweeD_Input.c'.
'alignment->segsites' which was read by 'fscanf' in line 3341 would be
used directly to allocate memory in line 3345 and 3346 with no check. We
suggest adding an integer overflow check before memory allocation to
prevent buffer overflow.

Thank you for maintaining sweed.

Best regards