Fix for CVE-2025-69720: ncurses: buffer overflow in function
`analyze_string()`of `progs/infocmp.c`

---
 progs/infocmp.c |    5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

--- progs/infocmp.c
+++ progs/infocmp.c	2025-12-10 21:17:26.000000000 +0000
@@ -812,7 +812,7 @@ lookup_params(const assoc * table, char
 static void
 analyze_string(const char *name, const char *cap, TERMTYPE2 *tp)
 {
-    char buf2[MAX_TERMINFO_LENGTH];
+    char buf2[MAX_TERMINFO_LENGTH + 1];
     const char *sp;
     const assoc *ap;
     int tp_lines = tp->Numbers[2];
@@ -840,7 +840,8 @@ analyze_string(const char *name, const c
 	    if (VALID_STRING(cp) &&
 		cp[0] != '\0' &&
 		cp != cap) {
-		len = strlen(cp);
+		if ((len = strlen(cp)) > MAX_TERMINFO_LENGTH)
+		    len = MAX_TERMINFO_LENGTH;
 		_nc_STRNCPY(buf2, sp, len);
 		buf2[len] = '\0';
 
