1. Forum
  2. DOVE-Net
  3. Synchronet Programming

  • src/xpdev/dat_file.c

    From Deucе@VERT to Git commit to main/sbbs/master on Sun Mar 15 16:01:53 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/97495ee29f0da7a841cfad0e
    Modified Files:
    src/xpdev/dat_file.c
    Log Message:
    Fix csvEncode() heap buffer overflow

    malloc(strlen * 2) was too small — worst case (all double-quotes with enclosure) needs strlen * 2 + 3 bytes: each quote doubled, plus
    opening quote, closing quote, and NUL terminator.

    Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

    ---
    ￭ Synchronet ￭ Vertrauen ￭ Home of Synchronet ￭ [vert/cvs/bbs].synchro.net