From 85a3149472cb488cc6a0f6eaa32f406411c1e13d Mon Sep 17 00:00:00 2001 From: Anupam Mediratta Date: Sat, 16 May 2026 08:08:37 +0000 Subject: [PATCH] [HALARM] Bound early debug print formatting (#9017) Replace unbounded vsprintf() call in DbgPrintEarly() with vsnprintf() when formatting into a fixed-size 1024-byte stack buffer in ARM HAL. Automated security fix generated by Orbis Security AI. CORE-17604 Co-authored-by: OrbisAI Security --- hal/halarm/generic/halinit.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hal/halarm/generic/halinit.c b/hal/halarm/generic/halinit.c index 76adb5c1681..46feffc47d9 100644 --- a/hal/halarm/generic/halinit.c +++ b/hal/halarm/generic/halinit.c @@ -165,7 +165,7 @@ DbgPrintEarly(const char *fmt, ...) PCHAR String = Buffer; va_start(args, fmt); - i = vsprintf(Buffer, fmt, args); + i = vsnprintf(Buffer, sizeof(Buffer), fmt, args); va_end(args); /* Output the message */