logoalt Hacker News

wolf550etoday at 5:56 PM1 replyview on HN

From status in readme in github:

- misa77's format may change unexpectedly as it's still v0.x.y.

- The decoder assumes that the input is a valid misa77 stream. Invalid input is UB and I offer no guarantees for whatever misa77 does in this case.

- It's been through some local fuzzing but is not hardened, so treat it as experimental.


Replies

cogman10today at 7:21 PM

- Excellent of the author to call these things out.

- All 3 things are show stoppers for any real use.

An unstable format which trusts input is a CVE and data loss magnet.

show 2 replies