binutils [REDACTED]: [REDACTED]

In [REDACTED], function auto_export builds an '_imp'-prefixed name using an allocation sized by strlen and then uses sprintf(name, "%s%s", "_imp", sn). This is a classic unsafe-copy pattern; even if it currently looks matched, any integer truncation/overflow or mismatch introduced later would make the allocation too small and allow heap buffer overflow ([REDACTED]).