Repository navigation
Bound correction alignment cache growth #21
Description
Medium security finding. src/codex32/correction.py uses an unbounded process-global @cache for _syndrome_alignment, keyed by caller-controlled HRP and length. Long-lived GUI/service callers can accumulate alignment tables monotonically.
Remediation: remove attacker-specific global caching or use a small bounded LRU with lifecycle clearing; add churn/regression tests.
Parent: #20
Activity
correction: retain target alignments
correction: Bound alignment cache
correction: retain target alignments
BenWestgate commentedon Sep 24, 2026
@claude did PR #24 close this issue?
BenWestgate commentedon Sep 25, 2026
Resolved on
reviewability-v1by merged PR #24 (correction: Bound alignment cache growth)._syndrome_alignmentnow uses a bounded LRU and the regression suite covers cache churn/bounds. Closing this finding as completed.