fixed: verify exec buffer overflow and fread