Summary
CDIDX_INDEX_INCLUDE_SYMBOL_KINDS, CDIDX_INDEX_EXCLUDE_SYMBOL_KINDS, and repeated symbol-kind filter flags accumulate comma-separated values without a pre-split length or entry-count cap.
Evidence
IndexCommandRunner.Parse.cs calls AddSymbolKindFilterValues, which loops over value.Split(,, StringSplitOptions.TrimEntries) and appends every raw value to the include/exclude lists before normal validation.
Impact
A large environment/config value or CLI value can cause avoidable allocation and parse work even though symbol kinds are a small known set.
Expected
Apply a documented maximum CSV length and entry count before splitting, and reject overlarge filters with a clear parse error.
Summary
CDIDX_INDEX_INCLUDE_SYMBOL_KINDS,CDIDX_INDEX_EXCLUDE_SYMBOL_KINDS, and repeated symbol-kind filter flags accumulate comma-separated values without a pre-split length or entry-count cap.Evidence
IndexCommandRunner.Parse.cscallsAddSymbolKindFilterValues, which loops overvalue.Split(,, StringSplitOptions.TrimEntries)and appends every raw value to the include/exclude lists before normal validation.Impact
A large environment/config value or CLI value can cause avoidable allocation and parse work even though symbol kinds are a small known set.
Expected
Apply a documented maximum CSV length and entry count before splitting, and reject overlarge filters with a clear parse error.