Issues

AesEncryptionProvider leaves copies of the key and plaintext in unzeroed heap arrays, unlike the HMAC providers

ktsu-dev/Essentials#98 · opened

on Oct 7, 2026

1

Cancelling NativeCommandExecutor.Execute kills only the shell: work in a subshell, pipeline or child process keeps running and completes its side effects

ktsu-dev/Essentials#97 · opened

on Oct 7, 2026

1

FNV, Hex and byte-wise obfuscation stream paths read one byte at a time: ~11x slower and 32 bytes allocated per input byte on plain streams

ktsu-dev/Essentials#91 · opened

on Oct 6, 2026

1

Async stream-hash defaults throw on a disposed or write-only stream, while the sync TryHash returns false

ktsu-dev/Essentials#90 · opened

on Oct 6, 2026

1

Legacy ktsu.Abstractions / ktsu.Common provider packages are not deprecated on NuGet and don't point at ktsu.Essentials.*

ktsu-dev/Essentials#89 · opened

on Oct 6, 2026

1

Compression, AES, encoding and obfuscation stream Try* methods throw NotSupportedException for a non-readable source or non-writable destination instead of returning false

ktsu-dev/Essentials#86 · opened

on Oct 6, 2026

1

InMemoryCacheProvider.GetOrAdd overwrites a concurrently Set value, and racing callers get an instance that isn't the cached one

ktsu-dev/Essentials#85 · opened

on Oct 6, 2026

1

Only Gzip checks that async compression output is byte-identical to sync; Deflate, ZLib, Brotli and AES have no such test (async-surface spec)

ktsu-dev/Essentials#83 · opened

on Oct 6, 2026

1

RetrieveOrCreateAsync overwrites a stored file it cannot parse with new T(), destroying the user's data

ktsu-dev/Essentials#82 · opened

on Oct 6, 2026

1

Gzip, Deflate, ZLib and Brotli TryDecompress return true for truncated input and hand back partial data

ktsu-dev/Essentials#80 · opened

on Oct 6, 2026

1

InMemoryCacheProvider never evicts expired entries unless that exact key is read again, so short-TTL caches grow without bound

ktsu-dev/Essentials#79 · opened

on Oct 5, 2026

1

Categorical distribution and Choose(items, weights) return zero-weight outcomes: weights [1e308, 1e308, 0] always sample index 2

ktsu-dev/Essentials#78 · opened

on Oct 5, 2026

1

File-backed persistence: keys differing only in case ("Config" vs "config") overwrite each other on Windows and macOS

ktsu-dev/Essentials#77 · opened

on Oct 5, 2026

1

JsonSerializationProvider.Deserialize(ReadOnlySpan<byte>) returns null for UTF-8 JSON that starts with a BOM (the YAML provider accepts it)

ktsu-dev/Essentials#76 · opened

on Sep 30, 2026

1

AES decrypts a zero-byte ciphertext "successfully" to empty plaintext through Decrypt(byte[]) and the stream paths, though the span TryDecrypt rejects it

ktsu-dev/Essentials#75 · opened

on Sep 30, 2026

1

HMAC TryHash(key, Stream) throws ObjectDisposedException / NotSupportedException for a disposed or write-only stream instead of returning false

ktsu-dev/Essentials#74 · opened

on Sep 30, 2026

1

TOML provider loses multi-word properties, lists and nested objects on a round trip, and throws MissingMethodException for records

ktsu-dev/Essentials#69 · opened

on Sep 29, 2026

1

FileSystem/Temp StoreAsync: concurrent writes to one key throw, and readers see the key as missing mid-write (shared .tmp path + delete-then-move)

ktsu-dev/Essentials#66 · opened

on Sep 29, 2026

1

Nothing tells users of the archived ktsu.Abstractions / ktsu.Common packages that ktsu.Essentials replaces them

ktsu-dev/Essentials#65 · opened

on Sep 29, 2026

1

No authenticated-encryption provider: AES-GCM / IAuthenticatedEncryptionProvider (designed in the keyed-hashing spec, never tracked)

ktsu-dev/Essentials#64 · opened

on Sep 29, 2026

1

ISerializationProvider takes TextWriter/TextReader, which blocks genuine async serialization

ktsu-dev/Essentials#18 · opened

on Aug 23, 2026

2

Most async methods are Task.Run wrappers, not genuine async I/O

ktsu-dev/Essentials#8 · opened

on Aug 19, 2026

5

Navigation Menu

Repository navigation

Issues

AesEncryptionProvider leaves copies of the key and plaintext in unzeroed heap arrays, unlike the HMAC providers

Cancelling NativeCommandExecutor.Execute kills only the shell: work in a subshell, pipeline or child process keeps running and completes its side effects

FNV, Hex and byte-wise obfuscation stream paths read one byte at a time: ~11x slower and 32 bytes allocated per input byte on plain streams

Async stream-hash defaults throw on a disposed or write-only stream, while the sync TryHash returns false

Legacy ktsu.Abstractions / ktsu.Common provider packages are not deprecated on NuGet and don't point at ktsu.Essentials.*

Compression, AES, encoding and obfuscation stream Try* methods throw NotSupportedException for a non-readable source or non-writable destination instead of returning false

InMemoryCacheProvider.GetOrAdd overwrites a concurrently Set value, and racing callers get an instance that isn't the cached one

Only Gzip checks that async compression output is byte-identical to sync; Deflate, ZLib, Brotli and AES have no such test (async-surface spec)

RetrieveOrCreateAsync overwrites a stored file it cannot parse with new T(), destroying the user's data

Gzip, Deflate, ZLib and Brotli TryDecompress return true for truncated input and hand back partial data

InMemoryCacheProvider never evicts expired entries unless that exact key is read again, so short-TTL caches grow without bound

Categorical distribution and Choose(items, weights) return zero-weight outcomes: weights [1e308, 1e308, 0] always sample index 2

File-backed persistence: keys differing only in case ("Config" vs "config") overwrite each other on Windows and macOS

JsonSerializationProvider.Deserialize(ReadOnlySpan<byte>) returns null for UTF-8 JSON that starts with a BOM (the YAML provider accepts it)

AES decrypts a zero-byte ciphertext "successfully" to empty plaintext through Decrypt(byte[]) and the stream paths, though the span TryDecrypt rejects it

HMAC TryHash(key, Stream) throws ObjectDisposedException / NotSupportedException for a disposed or write-only stream instead of returning false

TOML provider loses multi-word properties, lists and nested objects on a round trip, and throws MissingMethodException for records

FileSystem/Temp StoreAsync: concurrent writes to one key throw, and readers see the key as missing mid-write (shared .tmp path + delete-then-move)

Nothing tells users of the archived ktsu.Abstractions / ktsu.Common packages that ktsu.Essentials replaces them

No authenticated-encryption provider: AES-GCM / IAuthenticatedEncryptionProvider (designed in the keyed-hashing spec, never tracked)

ISerializationProvider takes TextWriter/TextReader, which blocks genuine async serialization

Most async methods are Task.Run wrappers, not genuine async I/O