Fix TextInsertAlloc overflow by correcting loop bounds (#5982)

Co-authored-by: gideons <gse@newspacesystems.com>
This commit is contained in:
GideonSerf 2026-07-16 12:08:41 +02:00 • committed by GitHub
commit 93e64f2210
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -2014,7 +2014,7 @@ char *TextInsertAlloc(const char *text, const char *insert, int position)
for (int i = 0; i < position; i++) result[i] = text[i];
for (int i = position; i < (insertLen + position); i++) result[i] = insert[i - position];
for (int i = (insertLen + position); i < (textLen + insertLen + position); i++) result[i] = text[i - insertLen];
for (int i = (insertLen + position); i < (textLen + insertLen); i++) result[i] = text[i - insertLen];
result[textLen + insertLen] = '\0'; // Add EOL
}