RootCauseunvalidated
reg=strlen(t); RESIZE_MALLOCED_BUFFER(result, rlen, (reg + slen + 2), rsize, rsize); strcpy(result+rlen,t); — Audited array.c around array_to_string_internal(). Tension: correctness depends on room being sufficient and on int arithmetic not overflowing. Outcome: final result[rlen]='\0'.
7475f068-fca7-48d6-8970-6e5508d55604
reg=strlen(t); RESIZE_MALLOCED_BUFFER(result, rlen, (reg + slen + 2), rsize, rsize); strcpy(result+rlen,t); — Audited array.c around array_to_string_internal(). Tension: correctness depends on room being sufficient and on int arithmetic not overflowing. Outcome: final result[rlen]='\0'.