gh-136062: Buffer Overflow Vulnerability in _Py_wreadlink Function

[akshat62]

• Issue: Buffer Overflow Vulnerability in _Py_wreadlink Function #136062

[picnixz]

As I said, it's not necessary because wcsncpy copies the NUL termination if it's counted in buflen (which is the case because buflen > r1 == len(buf_without_NUL). And wcsncpy just fills the remaining chars with NUL chars:

If, after copying the terminating null wide character from src, count is not reached, additional null wide characters are written to dest until the total of count characters have been written.

So we'll anyway have a NUL termination.