fix: at glob/glob in glob.c

[orbisai0security]

Summary

Fix critical severity security issue in glob/glob.c.

Vulnerability

Field	Value
ID	V-001
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-001
File	glob/glob.c:401
CWE	CWE-120

Description: At glob/glob.c:401, the buffer 'onealt' is allocated as strlen(pattern)-1 bytes. At line 414, memcpy copies 'begin - pattern' bytes from 'pattern' into 'onealt' without verifying that the copy length fits within the allocated buffer. A crafted alternation pattern where the prefix before the opening brace is longer than strlen(pattern)-1 causes a heap buffer overflow. Lines 472-473 compound this by copying additional data (next-p bytes plus rest_len bytes) into alt_start derived from onealt without any bounds validation, potentially overflowing the same buffer a second time.

Changes

• glob/glob.c

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security