Files
epics-base/modules/database
Jacqueline GarrahanandClaude Opus 4.8 ae029e46a5 printfRecord: fix one-byte VAL overflow in %ls conversion
In the long-string (%ls) branch dbGetLink(DBR_CHAR) / dbLoadLinkLS can
leave n at vspace+1, so pval[n] = 0 writes at pval[vspace+1], one byte
past the sizv-byte VAL buffer (pval + vspace + 1 == prec->val + sizv).
Clamp n to vspace immediately before writing the terminator.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-21 07:53:37 -05:00
..