Skip to content

fix(proto): do not size an egress list from the request - #430

Merged
WaylandYang merged 1 commit into
devfrom
fix/egress-list-alloc
Oct 31, 2026
Merged

WaylandYang merged 1 commit into
devfrom
fix/egress-list-alloc

Conversation

@WaylandYang

Copy link
Copy Markdown
Contributor

CodeQL raised rust/uncontrolled-allocation-size, high severity, at proto.rs:323, on code from #419: Vec::with_capacity(l.len()), where l comes from a request.

It could not allocate much: the length is checked against 64 just above, and l is already in memory. But the capacity saved nothing, so this uses Vec::new(), and the alert goes.

py/bind-socket-all-network-interfaces in sandstorm-agent.py is also open, from 2026-10-27, and is not touched here.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: WaylandYang <145302500+WaylandYang@users.noreply.github.com>
@WaylandYang
WaylandYang merged commit 6121176 into dev Oct 31, 2026
10 checks passed
@WaylandYang
WaylandYang deleted the fix/egress-list-alloc branch October 31, 2026 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant