fix: the memcpy and memmove calls at lines 829-837 i... in main.c

[orbisai0security]

Summary

Fix critical severity security issue in src/chart/main.c.

Vulnerability

Field	Value
ID	V-001
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-001
File	src/chart/main.c:829
CWE	CWE-120

Description: The memcpy and memmove calls at lines 829-837 in src/chart/main.c do not validate that n_extra_patches or *N fit within the allocated destination buffers (target_L, target_a, target_b, colorchecker_Lab). An attacker who supplies a crafted color chart or calibration file encoding a large n_extra_patches value can cause a heap buffer overflow, overwriting heap metadata or adjacent allocations.

Changes

• src/chart/main.c

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security

[TurboGit]

Looks good now, thanks!

[TurboGit]

Thanks!