From b5535b83f7987f3aa9689dde33a0b8b1f4c80c55 Mon Sep 17 00:00:00 2001
From: orbisai0security <mediratta01.pally@gmail.com>
Date: Sat, 11 Jul 2026 08:06:55 +0000
Subject: [PATCH] fix: V-001 security vulnerability

Automated security fix generated by OrbisAI Security
---
 gitstatus/src/arena.h | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/gitstatus/src/arena.h b/gitstatus/src/arena.h
index 569833ca..cd4b374d 100644
--- a/gitstatus/src/arena.h
+++ b/gitstatus/src/arena.h
@@ -132,7 +132,10 @@ class Arena {
   inline char* StrCat(const Ts&... ts) {
     return [&](std::initializer_list<StringView> ss) {
       size_t len = 0;
-      for (StringView s : ss) len += s.len;
+      for (StringView s : ss) {
+        assert(len + s.len >= len);
+        len += s.len;
+      }
       char* p = Allocate<char>(len + 1);
       for (StringView s : ss) {
         std::memcpy(p, s.ptr, s.len);