fix: the memcpy calls at integers in integers.c

[orbisai0security]

Summary

Fix critical severity security issue in C-library/src/integers.c.

Vulnerability

Field	Value
ID	V-002
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-002
File	C-library/src/integers.c:66
CWE	CWE-120

Description: The memcpy calls at integers.c lines 66 and 86 copy len+1 bytes from an internal buffer 'buf' to an output buffer 'out'. If 'len' is derived from user-controlled input (e.g., the string representation of a very large integer) without proper bounds checking, and if 'out' is allocated based on an incorrect or smaller size estimate, the memcpy will write beyond the allocated region of 'out', causing a heap buffer overflow. Additionally, if len is close to SIZE_MAX, the expression len+1 wraps to 0 due to integer overflow, causing a logic error where memcpy copies 0 bytes instead of the intended amount.

Changes

• C-library/src/integers.c

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security