5f0472f77a2f70c91194ce5d539e63073b46f0e2
71%

Ran 17 Jul 2026 05:41PM UTC

Jobs 1

Files 32

Run time 1min

Badge

Embed ▾

Committed 17 Jul 2026 05:37PM UTC coverage: 70.48%. Remained the same

Build # 5f0472f77a2f70c91194ce5d539e63073b46f0e2

Build Type

push

github

Committed by

dimitarvp

Commit Message

record wave-2 chunk-1 review (A1+A2) run 1

six-agent fleet + orchestrator source-verification over
native/xqlitenif/src @ f9cb120. eight mechanisms after dedup.

confirmed S0: blob/session ops + Drop bypass the connection Mutex
(NOMUTEX data race, found by all six agents); session close-order
UAF (sqlite3_close frees since a session holds no Vdbe); global
log-hook Vec freed under a lock-free reader; progress-list UAF via
session changeset stepping the VDBE off the conn Mutex. S1: backup
progress leaks a msg_env per successful send. S2: schema encoder
expect on fallible alloc; eprintln in resource destructors.

reclassified: the finders' blob close-order UAF is self-defused by
sqlite3_close returning BUSY on the blob's internal Vdbe — a
connection leak (S2), not a UAF. only the session path dangles.

held: zero .lock().unwrap() (poison chain defused); rustler 0.38
catch_unwind covers NIF bodies and encoders, leaving destructors as
the sole S0 panic surface. S3s filed in BACKLOG.

Coverage Stats

573 of 813 relevant lines covered (70.48%)

36.55 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	5f0472f77a2f70c91194ce5d539e63073b46f0e2.1	17 Jul 2026 05:41PM UTC	32	70.48	GitHub Action Run

dimitarvp / xqlite / 5f0472f77a2f70c91194ce5d539e63073b46f0e2
71%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 5f0472f77a2f70c91194ce5d539e63073b46f0e2

dimitarvp / xqlite / 5f0472f77a2f70c91194ce5d539e63073b46f0e2 71%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 5f0472f77a2f70c91194ce5d539e63073b46f0e2

dimitarvp / xqlite / 5f0472f77a2f70c91194ce5d539e63073b46f0e2
71%

README BADGES
x