fix: the kernel driver uses sprintf() to write forma... in veye_gxcam.c

[orbisai0security]

Summary

Fix high severity security issue in driver_source/cam_drv_src/rpi-6.12.y/veye_gxcam.c.

Vulnerability

Field	Value
ID	V-001
Severity	HIGH
Scanner	multi_agent_ai
Rule	V-001
File	driver_source/cam_drv_src/rpi-6.12.y/veye_gxcam.c:1415
CWE	CWE-120

Description: The kernel driver uses sprintf() to write formatted strings into sysfs attribute buffers without bounds checking. The sysfs show function receives a PAGE_SIZE buffer, but sprintf() does not enforce this limit. If cam->camera_model contains a string longer than PAGE_SIZE due to corrupted I2C data from a malicious or faulty camera device, a kernel heap buffer overflow occurs. The modern kernel API sysfs_emit() or scnprintf() should be used instead.

Changes

• driver_source/cam_drv_src/rpi-6.12.y/veye_gxcam.c

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security