Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c. Reference: https://sourceforge.net/p/mcj/tickets/52/
Created transfig tracking bugs for this issue: Affects: fedora-all [bug 1800635]
Patch: https://sourceforge.net/p/mcj/fig2dev/ci/03ea4578258d2d9ca1ceb080e469ad261db39ef0/