fix: add path validation in dump_win_syms.py...

[anupamme]

Summary

Address high severity security finding in tools/dump_win_syms.py.

Vulnerability

Field	Value
ID	utils.custom.path-traversal-open
Severity	HIGH
Scanner	semgrep
Rule	utils.custom.path-traversal-open
File	tools/dump_win_syms.py:8
Assessment	Pattern match — needs manual review

Description: User-controlled input used in file path for open() without sanitization. This can allow path traversal attacks to read arbitrary files.

Evidence

Scanner confirmation: semgrep rule utils.custom.path-traversal-open matched this pattern as utils.custom.path-traversal-open.

Threat Model Context

This is a Python library - vulnerabilities affect applications that import this code.

Changes

• tools/dump_win_syms.py

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

This change addresses a pattern flagged by static analysis. The code path handles user-influenced input and the fix reduces the attack surface against both manual and automated exploitation.

---

Automated security fix by OrbisAI Security