Skip to content

Fail closed when gzip, extra listing, or the applied manifest cannot be trusted - #6

Merged
shaneburrell merged 1 commit into
mainfrom
lab/v0.1.9-fail-closed
Sep 15, 2026
Merged

shaneburrell merged 1 commit into
mainfrom
lab/v0.1.9-fail-closed

Conversation

@shaneburrell

Copy link
Copy Markdown
Owner

Summary

  • Bound gzip decompress of the SSH planning manifest at MaxFrame so a small frame cannot expand into an unbounded allocation on the helper.
  • verify --extra and Finish now fail instead of reporting success when the destination cannot be listed or the applied manifest cannot be saved.
  • A second Plan in one helper session aborts the previous receiver and is rejected.

Test plan

  • make check
  • go test -race ./...
  • make cover (89.7%)
  • ./scripts/e2e.sh
  • ./scripts/e2e-live.sh (skipped: no [email protected])
  • GitHub CI (fmt, tidy, vet, test, race, cover, lint, fuzz, matrix, e2e)

@shaneburrell
shaneburrell merged commit 6e260aa into main Sep 15, 2026
11 checks passed
@shaneburrell
shaneburrell deleted the lab/v0.1.9-fail-closed branch September 15, 2026 00:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant