Merge commit from fork

fix(security): ViewDiffInfo / TagsMake の auto_sprintf → auto_sprintf_s でスタックバッファオーバーフローを修正 (GHSA-jpr9-7379-v6m7)

Author: m-tmatma

sakura_core/cmd/CViewCommander_TagJump.cpp

@@ -592,7 +592,7 @@ bool CViewCommander::Command_TagsMake( void )
 		WCHAR szCmdDir[_MAX_PATH];
 		::GetSystemDirectory(szCmdDir, int(std::size(szCmdDir)));
 		//	2006.08.04 genta add /D to disable autorun
-		auto_sprintf( cmdline, L"\"%s\\cmd.exe\" /D /C \"\"%s\\%s\" %s\"",
+		auto_sprintf_s( cmdline, std::size(cmdline), L"\"%s\\cmd.exe\" /D /C \"\"%s\\%s\" %s\"",
 				szCmdDir,
 				szExeFolder,	//sakura.exeパス
 				CTAGS_COMMAND,	//ctags.exe

sakura_core/view/CEditView_Diff.cpp

@@ -148,8 +148,8 @@ void CEditView::ViewDiffInfo(
 
 	{
 		//コマンドライン文字列作成(MAX:1024)
-		auto_sprintf(
-			cmdline,
+		auto_sprintf_s(
+			cmdline, std::size(cmdline),
 			L"\"%s\\%s\" %s \"%s\" \"%s\"",
 			szExeFolder,	//sakura.exeパス
 			L"diff.exe",		//diff.exe