Rudy Celekli 4e4b15b825 fix(browser): validate PNG chunks and preserve unsupported encodings ...

Validate chunk checksums, type bytes, ordering and end boundaries before pixel comparison. Distinguish malformed PNGs and corrupt DEFLATE streams from recognized unsupported encodings through CLI and MCP error projection.

Adapted from #1375 with additional decoder and public boundary regressions. Eighteen decoder tests and six compiled CLI/MCP cases passed.

Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com>

Co-authored-by: morluto <76467478+morluto@users.noreply.github.com>

2026-10-11 11:07:15 +08:00

..

adb

fix(adb): retain rollback ownership and cancelled acquisition facts

2026-10-11 00:28:39 +08:00

android

perf(android): validate prerequisites once per retained JADX session

2026-10-11 02:31:57 +08:00

apktool

fix(ci): repair format gate and pin maintenance skill destinations

2026-10-11 00:33:36 +08:00

application

perf(cli): defer binary provider composition

2026-10-11 11:07:15 +08:00

artifacts

fix(artifacts): serialize ASAR snapshot ownership

2026-10-11 09:28:28 +08:00

browser

fix(browser): validate PNG chunks and preserve unsupported encodings

2026-10-11 11:07:15 +08:00

cli

fix(javascript): isolate source analysis and retain bounded partial evidence (#1651)

2026-10-11 07:22:50 +08:00

composition

perf(cli): defer binary provider composition

2026-10-11 11:07:15 +08:00

config

feat(ghidra): configurable import language and analysis seeds (#1667)

2026-10-11 09:57:38 +08:00

contracts

feat(process): bound a finalization interval before forced capture timeout

2026-10-11 09:55:43 +08:00

domain

fix(native): bind NativeAOT metadata to declared PE section extents

2026-10-11 11:07:15 +08:00

dotnet

fix(dotnet): bound RVA reads by section virtual size

2026-10-11 07:02:16 +08:00

evaluation

feat(skills)!: improve Codex onboarding and task recovery (#1613)

2026-10-11 03:13:56 +08:00

evm

perf(evm): avoid repeated cleanup diagnostics (#1622)

2026-10-11 03:28:16 +08:00

filesystem

refactor(filesystem): share directory cleanup ownership

2026-10-11 06:10:10 +08:00

firmware

fix(publication)!: retain cleanup owners across export workflows

2026-10-11 05:17:10 +08:00

ghidra

fix(native): bind NativeAOT metadata to declared PE section extents

2026-10-11 11:07:15 +08:00

hopper

fix(providers): bound launcher diagnostics without losing byte counts

2026-10-11 02:50:06 +08:00

ida

fix(engines): serialize JEB acquisition and respect IDA cancellation

2026-10-11 00:03:23 +08:00

inspector

fix(inspector): retain observations after capture failures

2026-10-09 23:35:19 +08:00

javascript

fix: reject directory paths for the Wakaru limiter and mitmdump

2026-10-11 10:43:48 +08:00

jeb

fix(engines): serialize JEB acquisition and respect IDA cancellation

2026-10-11 00:03:23 +08:00

main

fix(mcp): admit composed analysis through result bookkeeping

2026-10-10 00:35:17 +08:00

native

fix(native): bind NativeAOT metadata to declared PE section extents

2026-10-11 11:07:15 +08:00

process

fix(process): settle launcher exit without dropping descendant lineage

2026-10-11 11:06:10 +08:00

reference

fix(reference)!: retain source and metadata cleanup owners

2026-10-11 06:10:10 +08:00

server

fix(javascript): isolate source analysis and retain bounded partial evidence (#1651)

2026-10-11 07:22:50 +08:00

windows

fix: bind identity and coverage to the producing rule (#1513)

2026-10-10 17:14:47 +08:00

catalogIdentity.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cli.ts

feat(apktool): decode Android resource tables through a caller-supplied launcher (#1556)

2026-10-10 23:04:12 +08:00

cliBrowserContext.ts

fix(mcp): isolate optional observation adapter failures (#838)

2026-10-07 11:45:17 +08:00

cliBrowserScenarioCommands.ts

perf(cli): defer Playwright and isomorphic-git until a command needs them

2026-10-10 13:16:44 +08:00

cliCommandNames.ts

feat(apktool): decode Android resource tables through a caller-supplied launcher (#1556)

2026-10-10 23:04:12 +08:00

cliEvidenceCommands.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cliHostInputs.test.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cliJavaScriptRuntimeCommands.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cliJsonInput.ts

fix(filesystem): bound and verify admitted file and JSON reads

2026-10-11 00:28:24 +08:00

cliJsonPaths.test.ts

fix(cli): preserve blank JSON paths for input validation (#1068)

2026-10-08 20:57:54 +08:00

cliLogging.test.ts

refactor: consolidate boundary semantics and prune redundant tests

2026-10-10 05:56:01 +08:00

cliLogging.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

cliObservationOptions.ts

fix(javascript): isolate source analysis and retain bounded partial evidence (#1651)

2026-10-11 07:22:50 +08:00

cliOutput.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

config.test.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

doctorRuntime.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00

generatedPackageMetadata.ts

feat(skills)!: improve Codex onboarding and task recovery (#1613)

2026-10-11 03:13:56 +08:00

identity.ts

…

logger.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

main.ts

refactor: remove forwarding exports and redundant aliases

2026-10-09 22:46:09 +08:00

mcpDoctor.ts

fix(mcp): validate doctor probe against its discovered output contract (#1461)

2026-10-10 14:33:57 +08:00

mcpStartupPolicy.ts

…

serverIdentity.ts

…

setupEnvironment.test.ts

refactor!: enforce canonical evidence and provider boundaries

2026-10-09 20:18:52 +08:00