bug: it is very easy for an adversary to crash a hyperapp

[nick1udwig]

hyperprocess-macro/src/lib.rs

Lines 987 to 989 in 980027e

	let unreachable_arm = quote! {
	_ => unreachable!(concat!("Non-", #type_name, " request variant received in ", #type_name, " handler"))
	};

[jurij-jukic]

log of dangerous places:

• hyperprocess-macro/src/lib.rs:1076 uses unreachable! for unexpected enum variants; any deserialization drift between request variants and handlers will crash the component instead of logging and rejecting the request.

• hyperprocess-macro/src/lib.rs:1120-1135 serializes handler results with serde_json::to_vec(...).unwrap() and then calls resp.send().unwrap(); any serialization failure or send error will panic rather than surfacing an error back to the caller.

• process_lib/src/hyperapp.rs:280 and process_lib/src/hyperapp.rs:305 assume every non-success payload is a SendError, panicking on corrupt or unexpected responses instead of bubbling a decode failure.

[jurij-jukic]

PR here: #47