From b6b853ccd4beae9f1fe19dcd63ba78b08c460c3e Mon Sep 17 00:00:00 2001 From: orbisai0security Date: Fri, 8 May 2026 05:51:02 +0000 Subject: [PATCH] fix: V-002 security vulnerability Automated security fix generated by Orbis Security AI --- src/feature/dircommon/consdiff.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/feature/dircommon/consdiff.c b/src/feature/dircommon/consdiff.c index 323f2bd576..ec59307e6b 100644 --- a/src/feature/dircommon/consdiff.c +++ b/src/feature/dircommon/consdiff.c @@ -873,7 +873,7 @@ apply_ed_diff(const smartlist_t *cons1, const smartlist_t *diff, goto error_cleanup; } /* Copy the line to make it nul-terminated. */ - memcpy(diff_line, diff_cdline->s, diff_cdline->len); + memcpy(diff_line, diff_cdline->s, MIN(diff_cdline->len, sizeof(diff_line) - 1)); diff_line[diff_cdline->len] = 0; const char *ptr = diff_line; int start = 0, end = 0;