Darryl H. ThomasLLMs are getting really good at spotting long-lived security issues in already heavily scrutinized codebases.
To maintain balance, LLMs are getting really good at introducing them too.
❯ If you truncate the filename during the `strcpy`, aren't you introducing the possibility of setting `infile` to a path that doesn't exist, or worse, exists but is not the intended file? I think it would be better to check the `inputFilename` and fail if the length exceeds the buffer size.
⏺ Good point. Silent truncation is dangerous — better to fail fast and clearly.