Dear Maintainers,

We are researching static analysis for recurring vulnerabilities. When
using our tool to test on 'ascd', we found a suspicious integer overflow
to buffer overflow at 'v2parse' in 'libworkman/database.c'. 'listsize'
which was read by 'fscanf' in line 948 would be used directly to
allocate memory in line 950 with no check. We suggest adding an integer
overflow check before memory allocation to prevent buffer overflow.

Thank you for maintaining ascd.

Best regards