From 0345e24f554a6a15a673a9d96d41d9b59db3e37d Mon Sep 17 00:00:00 2001
From: Ember <BeigeBox@users.noreply.github.com>
Date: Sun, 5 Apr 2026 17:50:31 -0700
Subject: [PATCH] Fix off-by-one buffer size in DynVoice::linkedTo

The sprintf buffer for formatting an unsigned int TG number was 10
bytes, but the maximum representation (4294967295) requires 11 bytes
including the null terminator.
---
 DynVoice.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/DynVoice.cpp b/DynVoice.cpp
index 58fcbb6..de9586f 100644
--- a/DynVoice.cpp
+++ b/DynVoice.cpp
@@ -137,7 +137,7 @@ bool CDynVoice::open()
 
 void CDynVoice::linkedTo(unsigned int number)
 {
-	char letters[10U];
+	char letters[11U];
 	::sprintf(letters, "%u", number);
 
 	std::vector<std::string> words;