From b956beb3bc3d0487f4e6d58f4868ebfacd05c8e3 Mon Sep 17 00:00:00 2001 From: orbisai0security Date: Sat, 27 Jun 2026 03:31:55 +0000 Subject: [PATCH] fix: V-001 security vulnerability Automated security fix generated by OrbisAI Security --- tools/gbagfx/main.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tools/gbagfx/main.c b/tools/gbagfx/main.c index 497a869e14..16d26a4c29 100644 --- a/tools/gbagfx/main.c +++ b/tools/gbagfx/main.c @@ -641,7 +641,7 @@ int main(int argc, char **argv) if (*outputFileExtension == 0) FATAL_ERROR("Output file \"%s\" has no extension.\n", outputPath); - size_t newOutputPathSize = strlen(inputPath) - strlen(inputFileExtension) + strlen(outputFileExtension); + size_t newOutputPathSize = strlen(inputPath) - strlen(inputFileExtension) + strlen(outputFileExtension) + 1; outputPath = malloc(newOutputPathSize); if (outputPath == NULL) @@ -653,7 +653,7 @@ int main(int argc, char **argv) if (outputPath[i] == '.') { - strcpy(&outputPath[i + 1], outputFileExtension); + memcpy(&outputPath[i + 1], outputFileExtension, strlen(outputFileExtension) + 1); break; } }