Repository navigation

fix: harden DoS and panic surfaces found in deep security audit - #2006

Merged

chaliy merged 13 commits into

mainfrom

claude/vigilant-fermat-tztypx

Jun 10, 2026

Merged

fix: harden DoS and panic surfaces found in deep security audit#2006
chaliy merged 13 commits into
mainfrom
claude/vigilant-fermat-tztypx

Commits on Jun 10, 2026
- fix(interpreter): bound comma-list brace expansion (TM-DOS-042)
  chaliy
  committed
  8639b9f
- fix(jq): cap output bytes and honor execution deadline (TM-DOS-095)
  chaliy
  committed
  7d48fbd
- fix(expr): guard i64::MIN / -1 division overflow
  chaliy
  committed
  884a74a
- fix(date): guard relative-offset arithmetic overflow
  chaliy
  committed
  4f46d1d
- fix(interpreter): run eval and alias bodies in the current shell
  chaliy
  committed
  8d33952
- fix(limits): saturating subtraction in check_function_insert
  chaliy
  committed
  3ec3297
- fix(credential): refuse placeholder substitution when repeated
  chaliy
  committed
  e385f32
- fix(python): clamp Monty duration to the execution deadline
  chaliy
  committed
  543a5c4
- perf(lexer): bound two lookahead scans to avoid O(n^2) lexing
  chaliy
  committed
  451c4a7
- fix(sqlite): sanitize engine open and dot-command error paths
  chaliy
  committed
  8be734a
- chore(threat-model): correct DoS spec drift and document new findings
  chaliy
  committed
  38d3634
- test(date): use Display in overflow-assert message
  chaliy
  committed
  f85621d
- test(python): make timeout-clamp test robust to outer timeout
  chaliy
  committed
  e47cd39