@lanodan @mirabilos only found by clang with "sprintf always truncated (4-byte destination, 5-byte minimum size)" warning! and I think these analyses are relatively fresh (and you sure as fuck you don't get them on a full android build). one weeps for what bullshit's in there that /isn't/ caught by my heuristic-du-jour
btw there's some more in-and-around these, but both of them reduce to 1 line (cw gore):
https://review.lineageos.org/c/LineageOS/android_vendor_qcom_opensource_dataservices/+/431741
https://review.lineageos.org/c/LineageOS/android_vendor_qcom_opensource_dataservices/+/431742
https://review.lineageos.org/c/LineageOS/android_vendor_qcom_opensource_dataservices/+/431743
https://review.lineageos.org/c/LineageOS/android_vendor_qcom_opensource_dataservices/+/431746