Subj : docs/v322_new.md src/sbbs3/atcodes.cpp exec.cpp execmisc.cpp inkey.cpp
To   : Git commit to main/sbbs/master
From : Rob Swindell (on Debian Linux)
Date : Wed Sep 30 2026 19:08:47

https://gitlab.synchro.net/main/sbbs/-/commit/cf6d568170a047dbb6647208
Modified Files:
	docs/v322_new.md src/sbbs3/atcodes.cpp exec.cpp execmisc.cpp inkey.cpp sbbs.h xtrn.cpp
Log Message:
cmdstr(): bound the output by the caller's buffer size

Fixes #1191

cmdstr() limited its output to the size of its own member buffer even when
writing into a caller-supplied one whose size it was never told, so a
caller with a smaller buffer could be overflowed. @TYPE: and @INCLUDE: did
exactly that, expanding into atcode()'s output buffer with a bound of 511.

Add an overload that takes the output buffer's size (with the mode as a
required argument, so a call passing a NULL buffer and a mode can never
resolve to it by accident) and route the unsized form through it with the
member buffer's size. Every caller that passes its own buffer now passes
its size too: atcode() hands over the maxlen it already had, and the Baja
interpreter, the hot-key handler and execmisc pass sizeof their arrays.
An expansion that does not fit is now logged as truncated instead of
silently cut.

Verified on a scratch terminal server: a short @INCLUDE: still displays the
file through the sized path, and a 400-character one is handled within
the caller's buffer.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
--- SBBSecho 3.38-Linux
 * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

.