Unchecked Length String Allocation

Unsafe length arithmetic and unchecked string operations allocate based on fragile suffix/ELF header assumptions, then write with strcpy/sprintf or compute relocation counts from attacker-controlled fields, causing overflow or huge allocations. This breaks symbol/reloc parsing and can enable denial-of-service.