fix: add buffer-length check in main.c

[orbisai0security]

Summary

Fix high severity security issue in packages/gscope4/src/main.c.

Vulnerability

Field	Value
ID	V-001
Severity	HIGH
Scanner	multi_agent_ai
Rule	V-001
File	packages/gscope4/src/main.c:248
CWE	CWE-120

Description: Five sprintf() calls in packages/gscope4/src/main.c write into fixed-size stack or heap buffers (ui_file, path) using ui_file_path and the HOME environment variable as inputs, without any bounds checking. Because HOME is fully attacker-controlled by any local user, setting it to a string exceeding the destination buffer size causes a stack buffer overflow when main.c:574 executes. The same pattern at lines 248, 254, 262, and 270 is exploitable if ui_file_path is influenced by environment variables or command-line arguments.

Changes

• packages/gscope4/src/main.c

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security

[tefletch]

Need to make analogous changes to GTK2 and GTK3 version-unique main.c files