Code execution via unchecked long path copies

Stack buffer overflows in cxong TinyDir before 1.2.6 allow local users to corrupt memory through crafted long file paths. tinydir_file_open copies a full POSIX path into a 256-character stack filename buffer; Windows branches use an unchecked split and concatenate filename and extension buffers. Exploitation requires an embedding application to pass an attacker-controlled long path across a security boundary; effects range from a crash to arbitrary code execution in that application context.