orneryd / NornicDB / 30376957259

89%

Build Type

push

github

Committed by orneryd

Commit Message

fix(security): harden allocation sizing and macOS secret handling

Add shared overflow-safe allocation helpers and route high-risk slice
preallocation sites through them across cypher, search, storage,
temporal, qdrantgrpc, textchunk, and CUDA paths.

Also remove secret-bearing macOS logs and replace regex-based ignore
pattern compilation with direct glob matching in the MenuBar app.

Security changes:
- guard size math used for slice capacity hints and candidate expansion
- clamp FastRP dimension-driven allocation behavior
- harden CUDA top-k buffer sizing against overflow
- stop logging JWT/API key details
- remove dynamic regex construction from file ignore matching

Coverage Stats

64 of 86 new or added lines in 18 files covered. (74.42%)

24 existing lines in 7 files now uncovered.

147736 of 165670 relevant lines covered (89.17%)

1.04 hits per line