The Debian package has accumulated a few patches through the years. Could you perhaps consider applying some of them?

https://anonscm.debian.org/viewvc/pkg-pike/trunk/debian/patches/bad_size_t_r... Fix undefined behaviour/buffer overruns on 64-bit architectures caused by broken redefinition of size_t. Basically the same change as was made to image_jpeg.c in 2008.

https://anonscm.debian.org/viewvc/pkg-pike/trunk/debian/patches/undefined_ht... Protocols.DNS_SD apparently doesn't include the necessary header declaring htons() (arpa/inet.h *or* netinet/in.h depending on platform). The code might compile anyway, but crash later.

The rest are actually all HURD related, but should be harmless enough:

https://anonscm.debian.org/viewvc/pkg-pike/trunk/debian/patches/pthread_stub... Check whether pthread_atfork() is a stub and not just whether it exists.

https://anonscm.debian.org/viewvc/pkg-pike/trunk/debian/patches/misplaced_MA... The conditional #define MAXPATHLEN comes after the first use of it (in src/modules/_Stdio/efuns.c).

https://anonscm.debian.org/viewvc/pkg-pike/trunk/debian/patches/hurd.patch?r... 1. Let realpath() allocate memory itself. 2. Include mach/message.h directly where mach_msg_type_number_t is used. 3. Don't build shared objects any differently than on Linux (-shared, not -Wl,-Bshareable).