J3vbandClaude Opus 5 6258681731 fix(plugin): guard against wasm guests with no memory section (F2) ...

The guest's linear memory was taken from mod.Memory() and used unchecked, so
an untrusted plugin wasm with no memory section nil-dereferenced on the
unrecovered startup path and crashed the server. All guest-memory access now
goes through one guestMemory() helper that detects wazero's non-nil interface
wrapping a nil *MemoryInstance, binding no commands at activation and
returning the existing missing-export diagnostic on dispatch.

Verified by a panel of agents; the added regression test panics with the
finding's exact stack against the unpatched tree.

Note: TestRegistry_Activate_WithoutRuntime and
TestRegistry_EnablePlugin_RollsBackWhenActivationFails fail under
-tags wazero, confirmed here to fail identically on the base tree. They are
pre-existing and unrelated; CI builds the wazero variant but does not test it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-07-30 15:00:26 +02:00

..

examples/hello

feat(plugin): enforce manifest-declared per-command ACL

2026-07-20 14:10:02 +02:00

audit_closure_test.go

docs(audit): correct CRITICAL #4 closure — Dispatch has a live hub caller

2026-07-20 14:36:24 +02:00

dbstore_test.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

errors.go

feat(plugin): enforce manifest-declared per-command ACL

2026-07-20 14:10:02 +02:00

host_commands.go

feat(plugin): enforce manifest-declared per-command ACL

2026-07-20 14:10:02 +02:00

host_events.go

docs(audit): correct CRITICAL #4 closure — Dispatch has a live hub caller

2026-07-20 14:36:24 +02:00

host_http_test.go

feat(api): proxy Klipy GIF requests server-side so no key ships to clients

2026-07-20 13:29:46 +02:00

host_http.go

feat(api): proxy Klipy GIF requests server-side so no key ships to clients

2026-07-20 13:29:46 +02:00

host_storage.go

feat(plugin): enforce manifest-declared per-command ACL

2026-07-20 14:10:02 +02:00

host_ui_test.go

test+feat(phase-bc): pass 4 — test coverage, install endpoint, CHANGELOG

2026-04-06 10:30:18 +00:00

host_ui.go

fix(lint): delete dead ws broadcast cluster; demote phase-header comments

2026-07-18 12:55:22 +02:00

loader_test.go

test+feat(phase-bc): pass 4 — test coverage, install endpoint, CHANGELOG

2026-04-06 10:30:18 +00:00

loader.go

fix(lint): delete dead ws broadcast cluster; demote phase-header comments

2026-07-18 12:55:22 +02:00

manifest_nottoml.go

fix(lint): delete dead ws broadcast cluster; demote phase-header comments

2026-07-18 12:55:22 +02:00

manifest_test.go

test+feat(phase-bc): pass 4 — test coverage, install endpoint, CHANGELOG

2026-04-06 10:30:18 +00:00

manifest_toml.go

feat(phase-bc): TOML plugin manifests + Solid vitest preset

2026-04-06 23:25:16 +02:00

manifest.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

plugin_test.go

feat(plugin): enforce manifest-declared per-command ACL

2026-07-20 14:10:02 +02:00

pluginstore.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

registry_test.go

test: close measured test-coverage gaps across server, client and Rust

2026-07-25 14:47:21 +00:00

registry.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

sandbox_default.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

sandbox_wazero_test.go

fix(plugin): guard against wasm guests with no memory section (F2)

2026-07-30 15:00:26 +02:00

sandbox_wazero.go

fix(plugin): guard against wasm guests with no memory section (F2)

2026-07-30 15:00:26 +02:00