fix: five memcpy calls in tinystr in tinystr.cpp

[orbisai0security]

Summary

Fix high severity security issue in src/PLASMA/TinyXml/base/tinystr.cpp.

Vulnerability

Field	Value
ID	V-001
Severity	HIGH
Scanner	multi_agent_ai
Rule	V-001
File	src/PLASMA/TinyXml/base/tinystr.cpp:53
CWE	CWE-190

Description: Five memcpy calls in tinystr.cpp copy data into heap-allocated buffers without validating that the source length fits within the destination buffer. The size variable newlen is computed from the source string length (e.g., strlen(instring) + 1) and used both to allocate the buffer and to copy data, but there is no guard against integer overflow in the size computation or mismatch between allocated size and copy size. A crafted XML document with oversized string values can overflow the heap buffer, overwriting adjacent heap metadata or function pointers.

Changes

• src/PLASMA/TinyXml/base/tinystr.cpp

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security