orneryd / NornicDB / 30380886004

89%

Build Type

push

github

Committed by orneryd

Commit Message

fix(security): harden allocation sizing and untrusted preallocation hints

Replace unchecked allocation size arithmetic in vector file store paths
with checked size computations, and remove user-controlled LIMIT values
from slice preallocation hints across storage, search, and cypher fast
paths to reduce overflow and excessive-allocation risk.

Also tighten APOC remote fetch controls and Cypher literal fallback
quoting in related security hardening work.

Tests:
- go test ./pkg/storage ./pkg/search ./pkg/cypher
- go test ./apoc ./pkg/cypher

Coverage Stats

14 of 18 new or added lines in 7 files covered. (77.78%)

10 existing lines in 5 files now uncovered.

147824 of 165776 relevant lines covered (89.17%)

1.04 hits per line