Repository navigation

Audit: all 63 bugs + the improvements (phases 1-4) - #19

Merged

Lynxifyy merged 59 commits into

mainfrom

lynxifyy/berryapi-audit-fixes

Nov 6, 2026

Merged

Audit: all 63 bugs + the improvements (phases 1-4)#19
Lynxifyy merged 59 commits into
mainfrom
lynxifyy/berryapi-audit-fixes

Commits on Nov 4, 2026
Commits on Nov 5, 2026
- Phase 3 fix: bound the adrp+add look-ahead to the caller's span
  Lynxifyy
  committed
  726a26e
- docs: record session memory notes
  Lynxifyy
  committed
  57cfbad
- Bugs 48-52: lifecycle safety, C-ABI exception guard, logger races
  Lynxifyy
  committed
  74f54ce
- Bugs 59-63: script-layer hygiene
  Lynxifyy
  committed
  04b12e8
- Impr 87,88,91: crash handler, safe-mode counter, metrics registry
  Lynxifyy
  committed
  80178ed
- Impr 90,95,96,97,100: logging, SECURITY.md, CI, fuzzers, SBOM
  Lynxifyy
  committed
  da3ef04
- Impr 89,92,88-wiring: validated config file, frame-time budgets, safe-mode boot
  Lynxifyy
  committed
  8283b16
- Impr 81,82,83: golden-file test, network error enums, Python stub
  Lynxifyy
  committed
  2d2a521
- Impr 58,70: Chrome-trace export, drift-corrected timer scheduler
  Lynxifyy
  committed
  89c0b63
- Impr 73: per-category script memory accounting
  Lynxifyy
  committed
  791f05d
- Impr 57: per-script frame CPU quota with a soft warning
  Lynxifyy
  committed
  cd8fabb
- Impr 74,75: scripttest coverage view, script lint/format pack
  Lynxifyy
  committed
  b0bb697
- Impr 72: structured async scopes
  Lynxifyy
  committed
  b62d923
- Impr 76: runnable documentation examples checked in CI
  Lynxifyy
  committed
  7082222
- Impr 98, bug 63: clean warning baseline + check-warnings gate
  Lynxifyy
  committed
  8b78fe0
- Impr 69: hot-reload state schema version
  Lynxifyy
  committed
  4d79120
- Impr 16,99: single-pass multi-signature scan, CMake+Ninja build
  Lynxifyy
  committed
  f4c2930
- tests: crash test raises SIGSEGV instead of a null store
  Lynxifyy
  committed
  3c36430
- Impr 66: event payload schemas with a stable name
  Lynxifyy
  committed
  66b1c69
- Impr 27: version-tagged signature rules
  Lynxifyy
  committed
  0333801
- docs: extend session memory notes
  Lynxifyy
  committed
  284cae5
- Impr 8,9,10: hook chains, per-hook accounting, RAII hook groups
  Lynxifyy
  committed
  77aac27
- Impr 9: per-handler accounting and fault auto-disable
  Lynxifyy
  committed
  8092e72
- Impr 17,19,32: Horspool skipping, build-id offset cache, module bytes from disk
  Lynxifyy
  committed
  fb37d7b
- Impr 34: gzip/deflate response decoding
  Lynxifyy
  committed
  13e666c
- Impr 35: refuse a redirect that downgrades https to http
  Lynxifyy
  committed
  259f9c7
- Impr 51 (fragmentation + keepalive): WS message reassembly and pings
  Lynxifyy
  committed
  e158a80
- Impr 42,43: certificate pinning and an extra CA directory
  Lynxifyy
  committed
  628320b
- Impr 53: per-script network quotas
  Lynxifyy
  committed
  62de319
- Impr 90: log ring buffer for an in-game console + JSON lines
  Lynxifyy
  committed
  b4f7a4b
- Impr 78: generated argument validation from IDL constraints
  Lynxifyy
  committed
  e51f11d
- Impr 36: HTTP keep-alive connection pool
  Lynxifyy
  committed
  2e6680d
- Impr 68: replay records the run's RNG seed and clock origin
  Lynxifyy
  committed
  e73048e
- Impr 45: Happy Eyeballs candidate ordering for dual-stack connects
  Lynxifyy
  committed
  331f46d
- Impr 44: HTTP CONNECT and SOCKS5 proxy support
  Lynxifyy
  committed
  f3f7743
- test: make the HookGroup rollback case deterministic
  Lynxifyy
  committed
  beb3ea6
- Impr 37: streaming HTTP response API
  Lynxifyy
  committed
  07ae49b
- Impr 79,97: extend the fuzz targets to every pure parser
  Lynxifyy
  committed
  4a44d5c
- Impr 61,98: luau-analyze/lint in CI, -Werror gate for clean files
  Lynxifyy
  committed
  e801462
- Impr 63: sandboxed require backed by a virtual filesystem
  Lynxifyy
  committed
  6e01a9e
- Impr 67: validate a script-bus payload against the declared schema
  Lynxifyy
  committed
  9afe843
- Impr 91: loopback-only, token-protected metrics debug endpoint
  Lynxifyy
  committed
  d7dfdea
- Impr 89: config hot reload
  Lynxifyy
  committed
  0d551da
- Impr 62: compiled-bytecode cache
  Lynxifyy
  committed
  94db02f
- Impr 65: per-script secret store
  Lynxifyy
  committed
  c4768c8
- Impr 64: capability consent store
  Lynxifyy
  committed
  24966b6
- Impr 93: locked, zeroized key buffer
  Lynxifyy
  committed
  6fe3134
- Impr 58: per-binding script profiler with a Chrome trace
  Lynxifyy
  committed
  18467b5
- docs: extend session memory notes (third pass)
  Lynxifyy
  committed
  01d431a
- ci: fix the clang and arm64 job failures
  Lynxifyy
  committed
  1e02c77

Commits

Commits on Nov 4, 2026

Commits on Nov 5, 2026