ruvnet--RuView

mirror of https://github.com/ruvnet/RuView synced 2026-07-23 17:33:20 +00:00

Files

T

ruv a1051607dd test(core,cli): pin DoS-resistance of CSI deserialisers (ADR-127 security review)

Beyond-SOTA security review of wifi-densepose-core + wifi-densepose-cli.
Load-bearing-question verdict: the NaN-state-poisoning bug class does NOT
originate in core — core exposes no stateful accumulator (no Welford,
von-Mises, IIR, voxel grid, running mean); each downstream crate rolls its
own, so each fix is correctly local. Both crates confirmed clean on every
reviewed dimension (panic-on-adversarial-input, NaN handling, unbounded
memory, path traversal, secrets) — no production code changed.

Adds 4 regression pins locking in two existing-but-untested DoS guards:
- core: from_canonical_bytes shape guard (Vec::with_capacity bound) — proven
  to fail with `capacity overflow` when the saturating-mul guard is removed.
- core: canonical decoder never panics on arbitrary/truncated bytes.
- cli: parse_csi_packet rejects an oversized n_antennas*n_subcarriers claim
  before Array2 allocation (33 MB claim in a 2 KB datagram -> None).
- cli: parse_csi_packet never panics on arbitrary UDP bytes.

core: 35 -> 37 lib tests; cli: 24 -> 26 tests; 0 failed. Python proof
unchanged (f8e76f21…46f7a — off the signal path).

Co-Authored-By: claude-flow <ruv@ruv.net>

2026-06-14 23:40:13 -04:00

.cargo

fix(security): audit — fix RUSTSEC vulns, clippy warnings, dead code (#769 )

2026-05-23 05:36:13 -04:00

.claude-flow

chore(repo): rename rust-port/wifi-densepose-rs → v2/ (flatten to one level) (#427 )

2026-04-25 21:28:13 -04:00

crates

test(core,cli): pin DoS-resistance of CSI deserialisers (ADR-127 security review)

2026-06-14 23:40:13 -04:00

data

chore(repo): rename rust-port/wifi-densepose-rs → v2/ (flatten to one level) (#427 )