• src/xpdev/dat_file.c

    From Deuc�@VERT to Git commit to main/sbbs/master on Sunday, March 15, 2026 16:01:53
    https://gitlab.synchro.net/main/sbbs/-/commit/97495ee29f0da7a841cfad0e
    Modified Files:
    src/xpdev/dat_file.c
    Log Message:
    Fix csvEncode() heap buffer overflow

    malloc(strlen * 2) was too small � worst case (all double-quotes with enclosure) needs strlen * 2 + 3 bytes: each quote doubled, plus
    opening quote, closing quote, and NUL terminator.

    Co-Authored-By: Claude Opus 4.6 <[email protected]>

    ---
    � Synchronet � Vertrauen � Home of Synchronet � [vert/cvs/bbs].synchro.net