Pondering the X client vulnerabilities

"Latest advances"? Like, say, "grep for strncpy and see if the code assumes that result will be NUL-terminated (usually under a couple of minutes per hit)"? Or "look for <alloc-style function>(<something> {*,<<} <something>); it's likely to be allocating an array and constitutes a potential overflow, unless the array size is constrained by something"? Something that recent?