--- coreutils-8.5/src/fmt.c.orig	2012-04-30 10:37:50.082717390 -0700
+++ coreutils-8.5/src/fmt.c	2012-05-01 11:28:00.745415600 -0700
@@ -587,6 +587,7 @@
       while (same_para (c) && in_column == other_indent)
         c = get_line (f, c);
     }
+  /* Parfait_ALLOW buffer-overflow word_limit will be incremented by get_line */
   (word_limit - 1)->period = (word_limit - 1)->final = true;
   next_char = c;
   return true;
--- coreutils-8.5/src/sort.c.orig	2012-04-30 10:19:57.802726721 -0700
+++ coreutils-8.5/src/sort.c	2012-04-30 10:20:49.681778327 -0700
@@ -3386,7 +3386,7 @@
                           char const *optarg1 = argv[optind++];
                           s = parse_field_count (optarg1 + 1, &key->eword,
                                              N_("invalid number after `-'"));
-                          if (*s == '.')
+                          if (s && *s == '.')
                             s = parse_field_count (s + 1, &key->echar,
                                                N_("invalid number after `.'"));
                           if (!key->echar && key->eword)
--- coreutils-8.5/src/stty.c.orig	2012-04-30 10:29:20.174932138 -0700
+++ coreutils-8.5/src/stty.c	2012-04-30 11:20:00.683384538 -0700
@@ -1543,7 +1543,7 @@
 
       bitsp = mode_type_flag (mode_info[i].type, mode);
       mask = mode_info[i].mask ? mode_info[i].mask : mode_info[i].bits;
-      if ((*bitsp & mask) == mode_info[i].bits)
+      if (bitsp && ((*bitsp & mask) == mode_info[i].bits))
         {
           if (mode_info[i].flags & SANE_UNSET)
             {
@@ -1620,7 +1620,7 @@
 
       bitsp = mode_type_flag (mode_info[i].type, mode);
       mask = mode_info[i].mask ? mode_info[i].mask : mode_info[i].bits;
-      if ((*bitsp & mask) == mode_info[i].bits)
+      if (bitsp && ((*bitsp & mask) == mode_info[i].bits))
         wrapf ("%s", mode_info[i].name);
       else if (mode_info[i].flags & REV)
         wrapf ("-%s", mode_info[i].name);
@@ -1835,12 +1835,14 @@
       if (mode_info[i].flags & SANE_SET)
         {
           bitsp = mode_type_flag (mode_info[i].type, mode);
-          *bitsp = (*bitsp & ~mode_info[i].mask) | mode_info[i].bits;
+          if (bitsp)
+            *bitsp = (*bitsp & ~mode_info[i].mask) | mode_info[i].bits;
         }
       else if (mode_info[i].flags & SANE_UNSET)
         {
           bitsp = mode_type_flag (mode_info[i].type, mode);
-          *bitsp = *bitsp & ~mode_info[i].mask & ~mode_info[i].bits;
+          if (bitsp)
+            *bitsp = *bitsp & ~mode_info[i].mask & ~mode_info[i].bits;
         }
     }
 }