From fd09e72816d23d044808947f1b73d171c0baf986 Mon Sep 17 00:00:00 2001
From: Andrea Mazzoleni <amadvance@gmail.com>
Date: Sun, 16 Aug 2026 21:41:02 +0200
Subject: [PATCH] Add buffer bounds check before appending wildcard in
 windows_opendir_find

---
 os/mingw.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/os/mingw.c b/os/mingw.c
index 0409a29b..9374497e 100644
--- a/os/mingw.c
+++ b/os/mingw.c
@@ -1337,8 +1337,14 @@ static windows_dir* windows_opendir_find(const char* dir)
 
 	wdir = convert(conv_buf, dir);
 
-	/* add final / and * */
+	/* add final \ and * */
 	len = wcslen(wdir);
+	if (len + 3 > CONV_MAX) {
+		free(dirstream);
+		errno = ENAMETOOLONG;
+		return 0;
+	}
+
 	if (len != 0 && wdir[len - 1] != '\\')
 		wdir[len++] = L'\\';
 	wdir[len++] = L'*';