#heap-underflow clear

CVE-2021-3999: glibc getcwd() off-by-one buffer underflow + missing bounds check