Report
A linker backend helper builds diagnostic text in a reusable static buffer by estimating the required size from strlen(fmt) plus a caller-supplied arg length, then appends with vsprintf(). If the estimate is wrong or the formatted output expands beyond the heuristic, the write can overrun the allocated buffer during relocation error handling.
809a3399-4e11-4f3c-9aa1-fb67f3f619f5
A linker backend helper builds diagnostic text in a reusable static buffer by estimating the required size from strlen(fmt) plus a caller-supplied arg length, then appends with vsprintf(). If the estimate is wrong or the formatted output expands beyond the heuristic, the write can overrun the allocated buffer during relocation error handling.