Skip to content

v1.3.1 - AG resume marker hardened (CodeQL HIGH closed)

Choose a tag to compare

View all tags
@HetCreep HetCreep released this 15 Jul 15:55
v1.3.1
This tag was signed with the committer’s verified signature.
HetCreep
SSH Key Fingerprint: 0osv9sipbbl2qmrI00rRA3kcEKs4ZuS+FBihPD/c8DU
Verified
Learn about vigilant mode.
8fd8d8b
This commit was signed with the committer’s verified signature.
HetCreep
SSH Key Fingerprint: 0osv9sipbbl2qmrI00rRA3kcEKs4ZuS+FBihPD/c8DU
Verified
Learn about vigilant mode.

PATCH - the Antigravity resume shim's once-per-session marker is now an atomic create-exclusive latch (wx flag, private 0o700 tmp subdir): closes CodeQL js/insecure-temporary-file (HIGH), kills the TOCTOU race, refuses planted symlinks in one syscall. Named divergence kept: a non-EEXIST create failure still emits the recovery block with an honest "may repeat" note. Plus a hermetic-test sandbox-leak fix. Tests 19/19 - verify PASS.

Assets 2
Loading