Hardening: input validation and bounds tightening across 28 subsystems (round 2)
Merged
JA
6mo ago+1336+1336+0123456789012345678901234567890123456789-173-173-012345678901234567890123456789
Follow-up to #31129. 46 small, independent commits tightening input validation, bounds checks, size limits, and resource lifetimes across:
- node (5)
- install (5)
- structured-clone (3)
- mysql (3)
- valkey (2)
- shell (2)
- libarchive (2)
- http (2)
- bundler (2)
- bake (2)
- yaml (1)
- websocket (1)
- webcore (1)
- sqlite (1)
- spawn (1)
- sourcemap (1)
- server (1)
- semver (1)
- postgres (1)
- inspector (1)
- ini (1)
- http3 (1)
- http2 (1)
- formdata (1)
- crypto (1)
- create (1)
- bunx (1)
- blob (1)
Each change is the minimal validation or bound needed at that site; no behavioral changes for well-formed inputs.
cargo checkclean on all 10 cross-platform targets- Full debug build clean
- Targeted test runs on touched subsystems: no new failures