1. Forum
  2. FidoNet
  3. sync programming

  • src/xpdev/dat_file.c

    From Deucе@1:103/705 to Git commit to main/sbbs/master on Sunday, March 15, 2026 16:01:53
    https://gitlab.synchro.net/main/sbbs/-/commit/97495ee29f0da7a841cfad0e
    Modified Files:
    src/xpdev/dat_file.c
    Log Message:
    Fix csvEncode() heap buffer overflow

    malloc(strlen * 2) was too small — worst case (all double-quotes with enclosure) needs strlen * 2 + 3 bytes: each quote doubled, plus
    opening quote, closing quote, and NUL terminator.

    Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
    --- SBBSecho 3.37-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)