Repository navigation
Bound correction alignment cache growth #21
Description
Activity
- added a parent issue
on Sep 22, 2026 - added a commit that references this issue
on Sep 22, 2026 - added 2 commits that reference this issue
on Sep 24, 2026 Resolved on
reviewability-v1by merged PR #24 (correction: Bound alignment cache growth)._syndrome_alignmentnow uses a bounded LRU and the regression suite covers cache churn/bounds. Closing this finding as completed.
Medium security finding.
src/codex32/correction.pyuses an unbounded process-global@cachefor_syndrome_alignment, keyed by caller-controlled HRP and length. Long-lived GUI/service callers can accumulate alignment tables monotonically.Remediation: remove attacker-specific global caching or use a small bounded LRU with lifecycle clearing; add churn/regression tests.
Parent: #20