CWE-126
Hi Team,
https://github.com/GNOME/gjs/blob/master/gi/repo.cpp#L709
i.e
s = g_string_sized_new(strlen(hyphen_name) + 1);
Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) such as (CWE-126).
Request team to please have a look and validate.
Cheers Dhiraj