fix: memory-safety and correctness backports for 1.2.x - #574

Open

somethingwithproof wants to merge 10 commits into

Cacti:1.2.xfrom

somethingwithproof:fix/memory-safety-1.2.x

Commits on Aug 31, 2026

fix(util): correct off-by-one OOB write in strncopy() when src fills the buffer
somethingwithproof
committed
ad141d0
fix(php): reserve room for the terminator in php_readpipe()
somethingwithproof
committed
189aee2
fix(ping): copy the hostname and tokenise reentrantly in get_namebyhost()
somethingwithproof
committed
2d31fcb
fix(php): bound the script server shutdown and reap the child
somethingwithproof
committed
744f1cc
fix(config): size the RDB SSL path fields like every other path
somethingwithproof
committed
e2cf021
fix: check the four remaining calloc results in spine.c
somethingwithproof
committed
e5e1ad4
fix(sql): free the result set when the fetch returns no row
somethingwithproof
committed
f06efd9
fix(log): keep the appended newline inside flogmessage
somethingwithproof
committed
7529280

Commits on Sep 5, 2026