KarpelesLab / rlp / 23492342359

72%

push

github

move to KarpelesLab, fix decoder overflow vulnerability, add canonical validation

- Transfer module path from ModChain to KarpelesLab
- Fix integer overflow in decoder bounds check (uint64→int cast could
  bypass length validation on malicious input, causing a panic)
- Add canonical RLP validation: reject non-canonical single byte encoding,
  long form for short lengths, and leading zeros in length bytes
- Add DecodeOne for decoding a single RLP entry with remaining bytes
- Add GitHub Actions workflow with Coveralls integration
- Add Coveralls badge to README

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

47 of 50 new or added lines in 1 file covered. (94.0%)

112 of 155 relevant lines covered (72.26%)

0.83 hits per line