fix: add buffer-length check in uri.c

[orbisai0security]

Summary

Fix high severity security issue in uri.c.

Vulnerability

Field	Value
ID	V-003
Severity	HIGH
Scanner	multi_agent_ai
Rule	V-003
File	uri.c:1356
Assessment	Confirmed exploitable
CWE	CWE-120

Description: The libcurl write callback at uri.c:1356 copies received data into a buffer using memcpy without validating that p->size + realsize does not exceed the allocated capacity of p->data. A malicious remote server can send responses larger than the buffer allocation, causing a heap buffer overflow. Since the attacker controls the remote endpoint, they can precisely control the overflow data.

Evidence

Exploitation scenario: 1...

Scanner confirmation: multi_agent_ai rule V-003 flagged this pattern.

Production code: This file is in the production codebase, not test-only code.

Changes

• uri.c

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security