Skip to content

fix(dsa): guard allocation and cache eviction boundaries - #3

Merged
notzenco merged 1 commit into
mainfrom
security-fixes-msrv
Oct 29, 2026
Merged

fix(dsa): guard allocation and cache eviction boundaries#3
notzenco merged 1 commit into
mainfrom
security-fixes-msrv

Conversation

@notzenco

@notzenco notzenco commented Oct 29, 2026

Copy link
Copy Markdown
Owner

Summary

  • Reject overflowing C B-tree and segment-tree construction sizes before allocation.
  • Remove Rust LRU cache entries by node identity before freeing evicted nodes, including unusual safe Clone implementations.
  • Update complexity and remediation docs; commit the Rust workspace lockfile with Cargo 1.70-compatible web-sys and js-sys versions.

Verification

  • C suite with AddressSanitizer and UndefinedBehaviorSanitizer: passed.
  • Rust workspace format, Clippy, all-feature tests, no-default-feature check, and warning-free docs: passed.
  • Rust 1.70 library check with --locked: passed.
  • git diff --check: passed.

The branch is ready for review; it has not been merged.

@notzenco
fix(dsa): guard allocation and cache eviction boundaries
e049b12 
Reject C allocation sizes that can overflow before construction.
Remove an evicted Rust LRU node by identity before freeing it, including
when Clone produces a key unequal to the stored key.

Track a compatible Rust dependency graph so the declared 1.70 check
resolves consistently in CI.
@notzenco
notzenco merged commit 1e94fae into main Oct 29, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@notzenco