Issues

• Test gaps: Analyzer #370 wiring, names over 16 chars, parseHttpDate :61 survive mutation

  bugsev:low
  faratech/bsod-analyzer#382 · Filter by author faratech opened on Oct 30, 2026

• Vendor-named profiles (C:\Users\Dell) redact hardware evidence: 'BIOS Vendor: <user> Inc.'

  bugsev:low
  faratech/bsod-analyzer#381 · Filter by author faratech opened on Oct 30, 2026

• Retry (and Analyze) still upload a dump removed from the page while the session check is pending

  bugsev:low
  faratech/bsod-analyzer#380 · Filter by author faratech opened on Oct 30, 2026

• Remove and Clear finished results drop focus to <body> and announce nothing

  bugsev:low
  faratech/bsod-analyzer#379 · Filter by author faratech opened on Oct 30, 2026

• Mobile sticky ad bar clips a filled 100px AdSense unit by 8px (padding inside a 100px max-height)

  bugsev:low
  faratech/bsod-analyzer#378 · Filter by author faratech opened on Oct 30, 2026

• Hunted names miss Greek final sigma and Turkish İ: trie keys and text walk lowercase differently

  bugsecuritysev:low
  faratech/bsod-analyzer#377 · Filter by author faratech opened on Oct 30, 2026

• Prompt redaction no longer masks WSL/MSYS/forward-slash profile paths (/mnt/c/Users/x, /c/Users/x, /Users/x)

  bugsecuritysev:medium
  faratech/bsod-analyzer#376 · Filter by author faratech opened on Oct 30, 2026

• regenerate-ai-reports.mjs ignores '--limit 5' (documented form): run becomes unbounded on the paid route

  bugsev:medium
  faratech/bsod-analyzer#375 · Filter by author faratech opened on Oct 30, 2026

• /stats CPU threads histogram labels exclude counts their bins hold (1 in '2-4', 5/7 in '6-8', ...)

  bugsev:low
  faratech/bsod-analyzer#374 · Filter by author faratech opened on Oct 30, 2026

• UTC crash heatmap drops the minutes of half-hour time zones (+5:30, +5:45, -3:30): wrong hour/weekday

  bugsev:medium
  faratech/bsod-analyzer#373 · Filter by author faratech opened on Oct 30, 2026

• windows_release() labels GA Windows 11 26H2 (26300) and 26H1 (28000) as Insider in /stats and crash priors

  bugsev:medium
  faratech/bsod-analyzer#372 · Filter by author faratech opened on Oct 30, 2026

• Wrong stop-code descriptions on /stats (0x192, 0x19C, 0x1A0, 0x1A6, 0x116/0x117...) and dead FILESYSTEM fallback

  bugsev:medium
  faratech/bsod-analyzer#371 · Filter by author faratech opened on Oct 30, 2026

• Analyzer refuses new files after 10 analyses in one page load; finished results cannot be removed

  bugsev:low
  faratech/bsod-analyzer#370 · Filter by author faratech opened on Oct 30, 2026

• Mobile sticky ad bar is white in dark mode, shows empty when unfilled, and covers the page bottom

  bugsev:low
  faratech/bsod-analyzer#369 · Filter by author faratech opened on Oct 30, 2026

• No graceful shutdown: SIGTERM kills in-flight uploads and AI calls, orphaning WinDbg jobs

  bugsev:medium
  faratech/bsod-analyzer#368 · Filter by author faratech opened on Oct 30, 2026

• Redaction wiring mutants survive the suite (names option, longest-first, UTF-16 high byte, cap, gtag set); email scan backtracks

  bugsecuritysev:low
  faratech/bsod-analyzer#367 · Filter by author faratech opened on Oct 30, 2026

• staticNotModified honours If-Modified-Since values that are not HTTP-dates (e.g. 9999) with a 304

  bugsev:low
  faratech/bsod-analyzer#366 · Filter by author faratech opened on Oct 30, 2026

• Non-ASCII and two-character CJK profile names leak from fallback prompt text; /privacy overstates the removal

  bugsecuritysev:medium
  faratech/bsod-analyzer#365 · Filter by author faratech opened on Oct 30, 2026

• 32-name hunt cap is filled by URL /users/ paths, so the real profile name is never hunted in fallback prompts

  bugsecuritysev:medium
  faratech/bsod-analyzer#364 · Filter by author faratech opened on Oct 30, 2026

• Prompt redaction swallows the rest of a line after a free-text profile path and never hunts the real name

  bugsecuritysev:medium
  faratech/bsod-analyzer#363 · Filter by author faratech opened on Oct 30, 2026

• Prompt redaction harvests System32 from HOMEPATH=\Windows\system32 and replaces every System32 in driver paths

  bugsev:medium
  faratech/bsod-analyzer#362 · Filter by author faratech opened on Oct 30, 2026

• GA page_view sends window.location.href with the fragment, leaking the #wf_sso token to Google Analytics

  bugsecuritysev:low
  faratech/bsod-analyzer#361 · Filter by author faratech opened on Oct 30, 2026

• Prompt redaction leaks profile names after a space or past 64 chars and ignores USERNAME=/COMPUTERNAME= values

  bugsecuritysev:medium
  faratech/bsod-analyzer#360 · Filter by author faratech opened on Oct 30, 2026

• Fallback prompts send hex-dumped byte excerpts unredacted: profile names and emails survive in the hex and ASCII columns

  bugsecuritysev:medium
  faratech/bsod-analyzer#359 · Filter by author faratech opened on Oct 30, 2026

• requestTargetPath disagrees with the router on absolute-form targets with ? in the authority

  bugsev:low
  faratech/bsod-analyzer#358 · Filter by author faratech opened on Oct 30, 2026