Who is responsible for ECPG?

I'm wondering who is responsible for ECPG since there appear to be a
number questionable statements which may or may not be bugs. Do we have
a resident expert?

Examples:

src/interfaces/ecpg/ecpglib/execute.c line 871

To my untrained eye it looks like after the first time through the loop
it's going to double-free nval.

src/interfaces/ecpg/pgtypeslib/numeric.c line 364

A numeric is allocated but leaked if set_var_from_str fails.

src/interfaces/ecpg/compatlib/informix.c line 169

Again, memory leak if risnull fails

Yes, these are from the coverity report. Who knows enough about ECPG to
decide what's a real bug and what's just bad assumptions?
--
Martijn van Oosterhout <kleptog@svana.org> http://svana.org/kleptog/