Kaoru0822 0b04d384cc fix(native): refuse truncated executable headers at target admission ...

Target admission accepted a thin Mach-O after reading only its magic and
CPU type, so a 12-byte prefix opened as a valid arm64 executable and the
first provider query failed as a generic execution failure. ELF headers
were likewise accepted after 20 bytes, and a FAT file whose selected slice
lies beyond its end was admitted.

Require the complete fixed header (Mach-O 28 or 32 bytes, ELF 52 or 64),
Mach-O load commands that fit in the file, and a selected FAT slice within
the file, checking commitments against the file size rather than the
probed prefix. Each refusal names the failed constraint.

Fixes #1189

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-09 03:51:37 +00:00

..

acceptance

fix(cli): cancel routed JavaScript analysis in rea analyze (#1156)

2026-10-09 09:48:10 +08:00

boundary

fix(native): refuse truncated executable headers at target admission

2026-10-09 03:51:37 +00:00

composition

fix(application): budget bridge candidate projection by bytes

2026-10-09 05:15:23 +08:00

conformance

fix(hopper): reserve Linux demo application before launch (#1158)

2026-10-09 10:14:25 +08:00

evaluation

test: prune redundant cases and promote configuration lifecycle coverage

2026-10-09 02:58:03 +08:00

fixtures

perf(mcp): reuse input schemas without losing caller guidance (#1162)

2026-10-09 11:38:07 +08:00

process-global

feat(clients): register Grok Build and Grok Bot during setup (#1134)

2026-10-09 06:08:29 +08:00

support

test: consolidate failure guards and trim unused fixture APIs

2026-10-09 03:13:43 +08:00

processOwnershipRunner.ts

test(process): retire native caches at worker teardown

2026-10-09 04:12:49 +08:00