Development record
repolint privacy scanner readTrackedFile reads io.LimitReader(f, maxScanBytes) with no cap+1 probe, so a tracked file that grows past the cap between fstat and read is scanned as a truncated prefix and reported clean, bypassing the not-scanned warn channel the same file over-cap at stat would take
issueresolvedminoriss-2608220144233519
repolint privacy scanner readTrackedFile reads io.LimitReader(f, maxScanBytes) with no cap+1 probe, so a tracked file that grows past the cap between fstat and read is scanned as a truncated prefix and reported clean, bypassing the not-scanned warn channel the same file over-cap at stat would take
Frontmatter
| id | iss-2608220144233519 |
|---|---|
| type | issue |
| lifecycle | resolved |
| severity | minor |
.abcd/work/issues/resolved/iss-2608220144233519-repolint-scan-cap-exact-read-truncation.md
open on GitHub ↗ · commit history ↗
mentions1
- dcn-26082200000000012026-08-22 — Bug-hunt round 7, branch bughunt-b/round-7. Baseline (make preflight