From 5d99da0914901623658f7047ba61d52db356b8a0 Mon Sep 17 00:00:00 2001 From: orbisai0security Date: Sun, 17 May 2026 04:23:48 +0000 Subject: [PATCH] fix: V-001 security vulnerability Automated security fix generated by Orbis Security AI --- renderers/raylib/clay_renderer_raylib.c | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/renderers/raylib/clay_renderer_raylib.c b/renderers/raylib/clay_renderer_raylib.c index 7fbc2c7..26ea326 100644 --- a/renderers/raylib/clay_renderer_raylib.c +++ b/renderers/raylib/clay_renderer_raylib.c @@ -206,13 +206,14 @@ void Clay_Raylib_Render(Clay_RenderCommandArray renderCommands, Font* fonts) Clay_TextRenderData *textData = &renderCommand->renderData.text; Font fontToUse = fonts[textData->fontId]; - int strlen = textData->stringContents.length + 1; - - if(strlen > temp_render_buffer_len) { + if (textData->stringContents.length < 0) break; + size_t strLen = (size_t)textData->stringContents.length + 1; + + if((int)strLen > temp_render_buffer_len) { // Grow the temp buffer if we need a larger string if(temp_render_buffer) free(temp_render_buffer); - temp_render_buffer = (char *) malloc(strlen); - temp_render_buffer_len = strlen; + temp_render_buffer = (char *) malloc(strLen); + temp_render_buffer_len = (int)strLen; } // Raylib uses standard C strings so isn't compatible with cheap slices, we need to clone the string to append null terminator