Repository navigation

Fix high-severity code scanning issues in geo_filters, hash-sorted-map, and bpe - #175

Merged

aneubeck merged 12 commits into

mainfrom

aneubeck-triage-rust-gems-security-alerts

Nov 4, 2026

Merged

Fix high-severity code scanning issues in geo_filters, hash-sorted-map, and bpe#175
aneubeck merged 12 commits into
mainfrom
aneubeck-triage-rust-gems-security-alerts

Commits on Nov 4, 2026
- Avoid unaligned slice casts in GeoDiffCount and BitVec::from_bytes
  
  aneubeck
  and
  Copilot
  committed
  13e6c6f
- Fix panic-unwind double-drop in sort_by_hash and big-endian group_ops
  
  aneubeck
  and
  Copilot
  committed
  c96b17c
- Validate DAAC deserialization and check token bounds in bpe
  
  aneubeck
  and
  Copilot
  committed
  53cec1f
- Avoid unwrap() in validate_daac_bytes to satisfy clippy::unwrap_used
  
  aneubeck
  and
  Copilot
  committed
  5c983a0
- Use zero-copy unaligned block reads in BitVec
  
  aneubeck
  and
  Copilot
  committed
  ce9ac66
- Use zero-copy unaligned bucket reads for GeoDiffCount::msb
  
  aneubeck
  and
  Copilot
  committed
  43773dd
- Use slice try_into in read_u32_le
  
  aneubeck
  and
  Copilot
  committed
  4be9847
- Nest PartialOrd match branches in GeoDiffCount
  
  aneubeck
  and
  Copilot
  committed
  1d0b6b1
- Refactor geo_filters unaligned storage into Unaligned<T> wrapper
  
  aneubeck
  and
  Copilot
  committed
  8e12238
- Update ctrl tags immediately during sort_by_hash insertion sort
  
  aneubeck
  and
  Copilot
  committed
  4234986
- Document why group_ops uses from_le_bytes instead of from_ne_bytes
  
  aneubeck
  and
  Copilot
  committed
  28bebc7
- Replace unwrap() calls in validate_daac_bytes_checks_invariants test
  
  aneubeck
  and
  Copilot
  committed
  1b5785c