vbpf / prevail / 28866098469

87%

push

github

Guard Exit assertion handler against a missing label

The AssertExtractor Exit handler dereferenced current_label (a
std::optional<Label>) without checking has_value(). The only call site
that passes std::nullopt currently passes a Call, not an Exit, so this is
latent -- but any future get_assertions(Exit{}, ..., std::nullopt) would be
UB in a security-critical file.

Treat a missing label as the top-level frame, consistent with the sibling
make_valid_access which already guards the same member.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CsnGgfCt3qNBW1Wk8BPPjQ
Signed-off-by: Elazar Gershuni <elazarg@gmail.com>

1 of 1 new or added line in 1 file covered. (100.0%)

9147 of 10571 relevant lines covered (86.53%)

6473897.72 hits per line