The recent (late 2019) change to the type of a content-length variable from int to size_t deserves some attention now that i (the Serveez maintainer) am regaining access and momentum to the project.

Thanks go to Austin James Gadient and Raimund Jacob for the work thus far.  Looking ahead, there are three points to consider.

First off, there were some additional, follow-on, changes required: (a) do_write is now also size_t; (b) the printf format used for output is now %zu.

Secondly, the lack of public Guile-BAUX is in the process of being resolved (https://savannah.gnu.org/task/?15530).  Hopefully w/in the next week or so anyone will be able to bootstrap Serveez using Guile-BAUX and the usual set of Autotools, and hack on it more easily.

Lastly, once the Guile-BAUX repo is public, the above changes should be tested in the environment where the bug was found (Mac OSX) before we cut a new release.  Because there is a CVE related to this, i've set the severity to Blocker.  I encourage Austin James Gadient to obtain a Savannah account so that we can discuss what is necessary to roll an interim release for his evaluation.

Feel free to monitor this channel as well as the repo (branch 'next') for updates.  (E.g., i will post as soon as i find out Guile-BAUX is public.)