🛡️ Sentinel: Security Hardening

[tryigit]

Problem:
The FFI boundaries in rust/cbor-cose/src/ffi.rs exposed memory safety vulnerabilities in rust_prop_get and rust_prop_set. Specifically, they relied on direct, unverified raw pointer dereferencing via std::slice::from_raw_parts without checking bounds, lengths, or alignment, which could lead to Undefined Behavior (UB) or memory corruption if malformed parameters were passed from the C++ layer.

Solution:
Refactored these unsafe functions to utilize the validate_slice_args helper function. This introduces explicit validation constraints for:

• Null pointers
• Alignment
• Arithmetic overflows and valid memory bound length limits

This hardening prevents panics from aborting the Zygote during invalid string construction and effectively mitigates potential UB across the JNI/FFI boundaries.

Verification:

• cargo check & cargo clippy pass cleanly.
• cargo test ffi passes with 20/20 successfully executed test cases validating FFI boundary safety.

---

PR created automatically by Jules for task 13389500138211768961 started by @tryigit

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[appwrite]

Yiğit

Project ID: 67b294d30004942511a5

Functions (1)

Function	ID	Status	Logs
Bootloader Hook	67b296050015d6532253	Ready	View Logs

Tip

Appwrite has crossed the 50K GitHub stars milestone with hundreds of active contributors

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.