 Martin Vogel
|
1d30971ff0
|
Bump vendored deps: Mongoose 7.21, SQLite 3.51.3, mimalloc 3.2.8
Mongoose 7.20 → 7.21:
Fixes 3 CVEs disclosed 2026-04-02:
- CVE-2026-5244: preauth RCE via TLS heap buffer overflow
- CVE-2026-5245: mDNS stack overflow RCE (34-byte UDP packet)
- CVE-2026-5246: mTLS bypass with P-384 certificates
SQLite 3.49.1 → 3.51.3:
Fixes WAL-reset database corruption bug (we use WAL mode).
Also fixes nested EXISTS query errors, POSIX lock deadlock,
and FTS5 memory error.
mimalloc 2.1.9 → 3.2.8 (v2 → v3):
Eliminated thread-local segments for better cross-thread sharing,
lower fragmentation, faster TLS on Windows, improved calloc.
API change: mi_option_eager_commit → mi_option_arena_eager_commit.
Linux kernel benchmark: 1:42 (no regression). All 2718 tests pass.
|
2026-04-03 23:01:06 +02:00 |
|
|
Martin Vogel
|
18fa9979ee
|
Replace vmem with mimalloc global allocator, add extraction-phase prescan, fix __init__.py QN collision
Memory management:
- Vendor mimalloc v2.1.9 as global allocator (MI_OVERRIDE=1 in prod)
- New mem.h/mem.c: RSS-based budget tracking via mi_process_info()
- Remove vmem.c/vmem.h (mmap-based budget tracking)
- Remove slab tier2 bump allocator (~300 LOC); >64B goes to mimalloc
- Slab tier1 pages from malloc (= mimalloc) instead of vmem
- Arena blocks from malloc instead of vmem
- Budget raised from 35% to 50% RAM (no more untracked C++ heap)
Extraction-phase prescan (eliminates disk re-reads):
- HTTP call sites: keyword check + URL extraction during extraction
- HTTP routes: decorator + source-based extraction during extraction
- Config file refs: regex scan during extraction
- httplinks: 41.8s → 13ms on Linux kernel (3,212x faster)
- configlink: 41.4s → 0.8s on Linux kernel (54x faster)
- Linux kernel fast-mode total: 2m38s → 1m18s
Bug fixes:
- __init__.py Module QN no longer collides with Folder QN
- index.ts same fix for JS/TS packages
- 13 regression tests for QN collision at FQN + extraction layers
- search_graph/search_code default limit raised from 10 to 500k
- Resolve all clang-tidy, cppcheck, and clang-format warnings
Repo cleanup:
- tree-sitter-form, tree-sitter-magma moved to tools/
- .gitignore: build/, node_modules/, graph-ui/dist/, TEST_PLAN.md
|
2026-03-17 22:05:57 +01:00 |
|