From 794dd9c254c924dcd14a4d41b74a0f33cfdceee0 Mon Sep 17 00:00:00 2001
From: Maxime Meignan <maxime.meignan@wavestone.com>
Date: Fri, 3 Nov 2023 19:27:44 +0100
Subject: [PATCH] CLI: bugfix: the output path was too small to be overwritten

---
 EDRSandblast_CLI/EDRSandblast.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/EDRSandblast_CLI/EDRSandblast.c b/EDRSandblast_CLI/EDRSandblast.c
index 909e430..bdff028 100644
--- a/EDRSandblast_CLI/EDRSandblast.c
+++ b/EDRSandblast_CLI/EDRSandblast.c
@@ -209,7 +209,8 @@ Dump options:\n\
     TCHAR wdigestOffsetCSVPath[MAX_PATH] = { 0 };
     TCHAR ciOffsetCSVPath[MAX_PATH] = { 0 };
     TCHAR fltmgrOffsetCSVPath[MAX_PATH] = { 0 };
-    TCHAR processName[] = TEXT("lsass.exe");
+    TCHAR processName[MAX_PATH];
+    _tcscpy_s(processName, _countof(processName), TEXT("lsass.exe"));
     TCHAR outputPath[MAX_PATH] = { 0 };
     BOOL verbose = FALSE;
     BOOL removeVulnDriver = TRUE;