All issues

Search results

[bug bounty] kvlds: zero-length copies pass NULL to memcpy()

Status: Open.

#383 In Tarsnap/kivaloo;

· rudrasatani13 opened on Sep 13, 2026

[bug bounty] json_find stack-overflows on deeply nested valid JSON

Status: Open.

#380 In Tarsnap/kivaloo;

· studentcloud2 opened on Sep 12, 2026

kvlds_range callback error stalls the shared wire request queue

Status: Open.

#373 In Tarsnap/kivaloo;

· unrivaledtrigger opened on Sep 8, 2026

json_find misses later fields after whitespace within a preceding nested value

Status: Open.

#372 In Tarsnap/kivaloo;

· manuelferreira28ya-sudo opened on Sep 8, 2026

servers.py: ret is not 0 identity comparison — SyntaxWarning on Python 3.8+

Status: Open.

#371 In Tarsnap/kivaloo;

· Sophia-Thickums opened on Sep 8, 2026

wire.py send_recv() breaks on fragmented socket reads; truncated buffers give cryptic struct.error

Status: Open.

#370 In Tarsnap/kivaloo;

· Sophia-Thickums opened on Sep 8, 2026

[bug bounty] Python wire client rejects valid responses larger than 16 KiB (e.g., LBS GET with block size > 16360)

Status: Open.

#369 In Tarsnap/kivaloo;

· zhangb06 opened on Sep 8, 2026

onlinequantile_get overflows for finite opposite-sign inputs

Status: Open.

#367 In Tarsnap/kivaloo;

· Kaysuto opened on Sep 8, 2026

[bug bounty] Python server discovery aborts on stale PIDs and disappearing processes

Status: Open.

#366 In Tarsnap/kivaloo;

· ugin-man opened on Sep 8, 2026

[bug bounty] Python KVLDS decoder converts empty keys and values to None

Status: Open.

#365 In Tarsnap/kivaloo;

· ugin-man opened on Sep 8, 2026

[bug bounty] HTTP retry queues leak response bodies on 500/503 and can exhaust memory

Status: Open.

#364 In Tarsnap/kivaloo;

· lazzyms opened on Sep 8, 2026

[bug bounty] Python LBS append silently truncates or pads mismatched block counts

Status: Open.

#362 In Tarsnap/kivaloo;

· ugin-man opened on Sep 8, 2026