see comments
[ From the Comments, courtesy of Ed Pilatowicz ]
this bug is being filed from the security code sweep.
i've been going through rcm_daemon using the security code sweep tool
and while analyzing it's output for ip_rcm.c i found an assortment
of potential problems in the source. most the problems center around
string manipulations. the problems are things like strcpy's where the
destination buffer is smaller than the source buffer, or also cases where
it's extremly difficult/impossible to verify if the destination bufer is
smaller than the source buffer.
while i can't see any way that these problems could be used as a
root exploit, there are problems that could result in memory
corruption causing rcm_daemon to crash.