• Path Traversal Protection: Blocks ../ and ..\ sequences in filenames and output paths
• Excessive Traversal: Prevents deep path traversal attempts (../../../)
• Filename Length: Maximum 256 characters per filename
• Output Path Length: Maximum 512 characters for output paths

• Maximum Files: 1000 input files per compilation
• Evaluation Code: 4096 character limit for -e/--eval expressions
• Interactive Input: Sanitized to alphanumeric characters only

• Buffer Overflow Protection: All string operations use safe functions (strncpy, snprintf)
• Input Bounds: Fixed-size buffers with length validation
• Memory Allocation: Proper error handling for malloc/realloc failures

• Menu selection limited to valid characters (0-9, a-z, A-Z)
• Invalid characters rejected with error message
• Buffer size limited to 10 characters

• Maximum 1000 .ggcode files displayed in interactive menu
• Warning shown if directory contains too many files
• Memory allocation failures handled gracefully

• Length validation for all string arguments
• Path traversal detection in file arguments
• Bounds checking for array operations

• No use of unsafe functions (strcpy, strcat, gets, sprintf)
• All string operations use bounded versions
• Null termination guaranteed

• Write permission testing before file creation
• Fallback to current directory if target inaccessible
• Temporary file creation for permission validation

• Windows and Unix path handling
• Platform-specific directory operations
• Safe file enumeration with bounds checking

• Clear error messages for invalid input
• Memory cleanup on error conditions
• Safe exit paths for all error scenarios

• Proper memory deallocation
• File handle cleanup
• Directory handle closure

• Avoid extremely long filenames or paths
• Use relative paths when possible
• Keep evaluation expressions reasonable in size

• All new string operations must use safe functions
• Add bounds checking for any new input handling
• Test with malformed input and edge cases

These measures protect against common vulnerabilities while maintaining usability.