I have a question, i want to know if osquery will accept pull request fixing this kind of stuff, this is a code that could be vuln in the future. right now isn’t exploitable or anything. but if im doing some code-review i will add as a note

This looks like a great suggestion to me. The FB team is not currently merging PRs due to some work they are doing internally, but I think they would merge this once they return.