[ASA-201804-9] xfig: information disclosure