Repository navigation

fix(security): cap bsdtar extraction size to prevent decompression bomb DoS [DEVA11Y-484] - #25

Merged

maunilm merged 19 commits into

mainfrom

fix/DEVA11Y-484-bsdtar-size-limit

Sep 2, 2026

Commits on May 29, 2026
- fix(security): cap bsdtar extraction size to prevent decompression bomb DoS [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  7e139ab
Commits on Jun 2, 2026
- test(security): real-process regression suite for the bsdtar extraction guard [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  0cc2b6b
- fix(security): tighten watchdog overshoot, guard Windows path, assert live termination [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  6264227
Commits on Aug 27, 2026
- Merge branch 'main' into fix/DEVA11Y-484-bsdtar-size-limit
  
  maunilm
  and
  claude
  committed
  df410ac
- test(security): move extraction-guard suite to tests/extraction-guard [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  e850495
- refactor(security): narrow PR to DEVA11Y-484's stated remediation only
  
  maunilm
  and
  claude
  committed
  72091b9
- Merge branch 'main' into fix/DEVA11Y-484-bsdtar-size-limit
  
  maunilm
  and
  claude
  committed
  3a7d545
- docs(security): drop comment references to the path #37 removed [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  f703901
- fix(security): address review feedback — compressed cap + P3 hygiene [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  2c5fba8
Commits on Aug 31, 2026
- Merge branch 'main' into fix/DEVA11Y-484-bsdtar-size-limit
  maunilm
  authored
  efcf13c
- fix(security): close the three gating review findings [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  e0db1dd
- fix(security): drain bsdtar stderr to close a proven extraction deadlock [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  0af9ec2
- fix(security): bound the bsdtar stderr excerpt surfaced to the user [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  17c3b7a
- fix(security): keep bsdtar's decisive line and bound the excerpt by bytes [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  13a8111
- test(security): add mutation-validated regression suite for the extraction guard [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  1dd9e31
Commits on Sep 1, 2026
- fix(security): budget the excerpt's head and tail separately [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  3027e92
- test(security): fix an intermittent failure in the extraction-guard suite [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  0118ee0
- refactor(security): derive the line threshold so the omitted count cannot go negative [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  52f011f
- test(security): close the review findings on the extraction-guard suite [DEVA11Y-484]
  
  maunilm
  and
  claude
  committed
  c73f5fb

Navigation Menu

Repository navigation

fix(security): cap bsdtar extraction size to prevent decompression bomb DoS [DEVA11Y-484] - #25

fix(security): cap bsdtar extraction size to prevent decompression bomb DoS [DEVA11Y-484]#25
maunilm merged 19 commits into
mainfrom
fix/DEVA11Y-484-bsdtar-size-limit

Commits on May 29, 2026

fix(security): cap bsdtar extraction size to prevent decompression bomb DoS [DEVA11Y-484]

Commits on Jun 2, 2026

test(security): real-process regression suite for the bsdtar extraction guard [DEVA11Y-484]

fix(security): tighten watchdog overshoot, guard Windows path, assert live termination [DEVA11Y-484]

Commits on Aug 27, 2026

Merge branch 'main' into fix/DEVA11Y-484-bsdtar-size-limit

test(security): move extraction-guard suite to tests/extraction-guard [DEVA11Y-484]

refactor(security): narrow PR to DEVA11Y-484's stated remediation only

Merge branch 'main' into fix/DEVA11Y-484-bsdtar-size-limit

docs(security): drop comment references to the path #37 removed [DEVA11Y-484]

fix(security): address review feedback — compressed cap + P3 hygiene [DEVA11Y-484]

Commits on Aug 31, 2026

Merge branch 'main' into fix/DEVA11Y-484-bsdtar-size-limit

fix(security): close the three gating review findings [DEVA11Y-484]

fix(security): drain bsdtar stderr to close a proven extraction deadlock [DEVA11Y-484]

fix(security): bound the bsdtar stderr excerpt surfaced to the user [DEVA11Y-484]

fix(security): keep bsdtar's decisive line and bound the excerpt by bytes [DEVA11Y-484]

test(security): add mutation-validated regression suite for the extraction guard [DEVA11Y-484]

Commits on Sep 1, 2026

fix(security): budget the excerpt's head and tail separately [DEVA11Y-484]

test(security): fix an intermittent failure in the extraction-guard suite [DEVA11Y-484]

refactor(security): derive the line threshold so the omitted count cannot go negative [DEVA11Y-484]

test(security): close the review findings on the extraction-guard suite [DEVA11Y-484]