Slobodan Predolac c2d57040f0 Fix out-of-bounds write in malloc_vsnprintf when size is 0 ...

When called with size==0, the else branch wrote to str[size-1] which
is str[(size_t)-1], a massive out-of-bounds write. Standard vsnprintf
allows size==0 to mean "compute length only, write nothing".

Add unit test for the size==0 case.

2026-04-01 23:15:19 -04:00

9.1 KiB

Raw Blame History

View Raw