-
Notifications
You must be signed in to change notification settings - Fork 27
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[audit] Track September 2026 GroveDB audit follow-up
audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:trackingAudit follow-up index covering new reports, existing issues and historical fixes.Audit follow-up index covering new reports, existing issues and historical fixes.Status: Open.#916 In dashpay/grovedb;[audit][C018] Worst-case delete-up-tree estimates omit the requested leaf
area:parsing-costsC groups: decoding, storage accounting, cost estimation and serialization.C groups: decoding, storage accounting, cost estimation and serialization.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:correctnessAudit reports incorrect library behavior or accounting without proven security impact.Audit reports incorrect library behavior or accounting without proven security impact.Status: Open.#915 In dashpay/grovedb;[audit][C017] Delete-up-tree results discard completed planning costs
area:parsing-costsC groups: decoding, storage accounting, cost estimation and serialization.C groups: decoding, storage accounting, cost estimation and serialization.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:correctnessAudit reports incorrect library behavior or accounting without proven security impact.Audit reports incorrect library behavior or accounting without proven security impact.Status: Open.#914 In dashpay/grovedb;[audit][C016] Multichunk encoding can exceed its requested byte budget
area:parsing-costsC groups: decoding, storage accounting, cost estimation and serialization.C groups: decoding, storage accounting, cost estimation and serialization.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:correctnessAudit reports incorrect library behavior or accounting without proven security impact.Audit reports incorrect library behavior or accounting without proven security impact.Status: Open.#913 In dashpay/grovedb;[audit][C015] Indexed mirror estimates omit mixed sum-carrier key widths
area:parsing-costsC groups: decoding, storage accounting, cost estimation and serialization.C groups: decoding, storage accounting, cost estimation and serialization.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:correctnessAudit reports incorrect library behavior or accounting without proven security impact.Audit reports incorrect library behavior or accounting without proven security impact.Status: Open.#912 In dashpay/grovedb;[audit][C014] Average insertion estimates omit wrapped-tree storage overhead
area:parsing-costsC groups: decoding, storage accounting, cost estimation and serialization.C groups: decoding, storage accounting, cost estimation and serialization.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:correctnessAudit reports incorrect library behavior or accounting without proven security impact.Audit reports incorrect library behavior or accounting without proven security impact.Status: Open.#911 In dashpay/grovedb;[audit][C013] Fallback deletion costs credit absent or already deleted data
area:parsing-costsC groups: decoding, storage accounting, cost estimation and serialization.C groups: decoding, storage accounting, cost estimation and serialization.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:correctnessAudit reports incorrect library behavior or accounting without proven security impact.Audit reports incorrect library behavior or accounting without proven security impact.Status: Open.#910 In dashpay/grovedb;[audit][C011] Ordinal Serde Element formats disagree on variant identity
area:parsing-costsC groups: decoding, storage accounting, cost estimation and serialization.C groups: decoding, storage accounting, cost estimation and serialization.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:correctnessAudit reports incorrect library behavior or accounting without proven security impact.Audit reports incorrect library behavior or accounting without proven security impact.Status: Open.#909 In dashpay/grovedb;[audit][C007] Batched commitment appends omit their accumulated BLAKE3 cost
area:parsing-costsC groups: decoding, storage accounting, cost estimation and serialization.C groups: decoding, storage accounting, cost estimation and serialization.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:correctnessAudit reports incorrect library behavior or accounting without proven security impact.Audit reports incorrect library behavior or accounting without proven security impact.Status: Open.#907 In dashpay/grovedb;[audit][C006] Reconcile bulk and commitment read/hash accounting with the versioned cost model
area:parsing-costsC groups: decoding, storage accounting, cost estimation and serialization.C groups: decoding, storage accounting, cost estimation and serialization.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:correctnessAudit reports incorrect library behavior or accounting without proven security impact.Audit reports incorrect library behavior or accounting without proven security impact.Status: Open.#906 In dashpay/grovedb;[audit][C003] Public ChunkOp decoding allocates before validating resource limits
area:parsing-costsC groups: decoding, storage accounting, cost estimation and serialization.C groups: decoding, storage accounting, cost estimation and serialization.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:securityAudit reports a security property failure; deployment impact needs validation.Audit reports a security property failure; deployment impact needs validation.Status: Open.#904 In dashpay/grovedb;[audit][M023] SumItem reference prediction uses flags different from the effective stored value
area:mutations-referencesM groups: batches, inserts, deletes, tree metadata and references.M groups: batches, inserts, deletes, tree metadata and references.audit:2026-09Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.Reconciled September 2026 GroveDB audit; audited worktree at 2fa0f133.audit:needs-validationSaved source evidence reviewed; focused runtime and deployment validation outstanding.Saved source evidence reviewed; focused runtime and deployment validation outstanding.bugSomething isn't workingSomething isn't workingseverity:low-provisionalLow impact in the audited scenario; provisional static assessment.Low impact in the audited scenario; provisional static assessment.type:correctnessAudit reports incorrect library behavior or accounting without proven security impact.Audit reports incorrect library behavior or accounting without proven security impact.Status: Open.#901 In dashpay/grovedb;