Skip to content

fix: address HIGH security findings (HIGH-01 to HIGH-05) #13

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
manni07 wants to merge 17 commits into
base: main
Choose a base branch
from
Open

fix: address HIGH security findings (HIGH-01 to HIGH-05) #13

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
8eb68cc
chore: add .gitignore with worktrees/ and build artifacts
manni07 Mar 2, 2026
98d54b2
fix: address CRIT security findings (CRIT-01 to CRIT-04)
manni07 Mar 2, 2026
9fd445e
fix: address MED security findings (MED-01 to MED-06)
manni07 Mar 2, 2026
a00ce3a
docs: add HIGH security findings implementation plan
manni07 Mar 2, 2026
236e495
fix(HIGH-01): add token-count guard and embed_lookup bounds check
manni07 Mar 2, 2026
168754c
docs: update diary #001 with HIGH-01 implementation summary
manni07 Mar 2, 2026
ef1bb7d
fix(HIGH-01): add embed_backward clamp and cleanup on early-exit
manni07 Mar 2, 2026
8929afc
fix(HIGH-02): add realpath() validation for data and model paths
manni07 Mar 2, 2026
b5c3cf9
fix(HIGH-03): clean up FD/mmap and resolve argv[0] before exec restart
manni07 Mar 2, 2026
b3936dc
docs: update diary with HIGH-03 implementation details
manni07 Mar 2, 2026
78666fc
fix(HIGH-04): add xmf/xcf OOM-abort helpers, replace all malloc/calloc
manni07 Mar 2, 2026
b40fd59
docs: update diary #001 with HIGH-04 implementation summary
manni07 Mar 2, 2026
ce2d68c
fix(HIGH-04): replace remaining malloc/calloc in stories_cpu_ops.h
manni07 Mar 2, 2026
87014bd
fix(HIGH-04): add OOM guards for remaining malloc/calloc in 3 files
manni07 Mar 2, 2026
42eae54
fix(HIGH-04): add OOM guard for mask calloc in stories_mil.h
manni07 Mar 2, 2026
f78b943
fix(HIGH-05): ane_eval() returns bool, add step_ok tracking
manni07 Mar 2, 2026
e2e0c83
docs: mark HIGH-01 to HIGH-05 as resolved, update diary
manni07 Mar 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
# macOS metadata
.DS_Store
**/.DS_Store

# Worktrees
.worktrees/
worktrees/

# Log files
*.log
firebase-debug.log

# Compiled binaries
training/train
training/train_large
training/probe_*
training/*.dSYM/

# Training data (large binary files)
training/*.bin

# ANE compiled artifacts
**/*.mlmodelc/
**/*.mlpackage/

# External assets (models, datasets)
assets/
447 changes: 447 additions & 0 deletions docs/diaries/001-initial-setup-and-security-audit.md
View file
Open in desktop

Large diffs are not rendered by default.

Loading