Andrew White 516be602d8 fix: assorted byte-index slicing safety fixes (#2452) ...

* fix(supervisor-process): use slice patterns when rewriting passwd/group lines

rewrite_passwd_at and rewrite_group_at indexed into a Vec of fields
with fields[N] after checking fields.len(). Use slice patterns so a
malformed line falls through to the no-op branch instead of risking a
panic if the guard is ever changed. Add regression tests for
malformed sandbox entries.

Signed-off-by: Andrew White <andrewh@cdw.com>

* fix(bootstrap): avoid byte-index slice after @ in SSH destination

extract_host_from_ssh_destination sliced dest[at_pos + 1..] after
finding '@'. '@' is ASCII so this is currently safe, but it is a
latent panic surface if the split logic changes. Use get() instead
and add a multi-byte hostname test.

Signed-off-by: Andrew White <andrewh@cdw.com>

* fix(bootstrap): avoid byte-index slice in .dockerignore glob matcher

glob_match sliced path[idx + 1..] after matching '/'. '/' is ASCII so
this is currently safe, but it is a latent UTF-8 panic surface. Use
get() instead.

Signed-off-by: Andrew White <andrewh@cdw.com>

* fix(router): avoid literal byte offset when stripping /v1 prefix

build_backend_url sliced &path[3..] after verifying the /v1 prefix.
Use strip_prefix() so the code stays correct if the prefix length
ever changes.

Signed-off-by: Andrew White <andrewh@cdw.com>

* fix(supervisor-network): avoid byte-index slice in inference path matching

The Bedrock-style /*/ path matcher sliced rest[slash_at + 1..] after
finding '/'. '/' is ASCII so this is currently safe, but it is a
latent UTF-8 panic surface. Use get() instead.

Signed-off-by: Andrew White <andrewh@cdw.com>

---------

Signed-off-by: Andrew White <andrewh@cdw.com>

2026-07-27 14:38:09 +00:00

..

src

fix: assorted byte-index slicing safety fixes (#2452)

2026-07-27 14:38:09 +00:00

Cargo.toml

feat(policy): accept numeric UIDs for sandbox process identity (#1973)

2026-07-02 13:31:06 -07:00