fix(graph): bounds-check local-file records and reject unsafe names - #656

Merged

bryan-minimal merged 5 commits into

mainfrom

fix/graph-wire-local-file-bounds

Jul 7, 2026

Commits on Jul 7, 2026

fix(graph): bound wire record length to prevent decoder OOM

bryan-minimal
and
claude
committed
6ee6a32
fix(graph): also cap build_count preallocation in the wire decoder

bryan-minimal
and
claude
committed
0e93724
fix(graph): bounds-check local-file record offsets and reject unsafe names

bryan-minimal
and
claude
committed
bc425c9
Merge branch 'main' into fix/graph-wire-local-file-bounds
bryan-minimal
authored
13de9d3
style(graph): rustfmt the local-file bounds-check error calls

bryan-minimal
and
claude
committed
d73bd40