Issues

Add `costVetkdDeriveKey` primitive for `ic0.cost_vetkd_derive_key`

#6337

· marc0olo opened

on Sep 2, 2026

from_candid: "byte read out of buffer" trap when skipping many record fields (to_candid round-trip)

#6331

· ggreif opened

on Aug 28, 2026

Implicit argument not resolved when the type variable appears only in the result

#6322

· skilesare opened

on Aug 23, 2026

Interpreter/codegen divergence in Nat/Int exponentiation: exponents >= 2^32 trap on-chain (bigint_to_word32_trap) while moc -r computes them up to 2^62-1

#6309

· haoxucu opened

on Aug 16, 2026

Interpreter internal error instead of a trap: out-of-bounds Blob indexing (b[999999]) raises an uncaught OCaml exception and dumps the environment, diverging from the compiled Wasm which traps cleanly

#6308

· haoxucu opened

on Aug 16, 2026

Missing overflow check in StableMemory.grow: an attacker-supplied Nat of the form 2^64 - size + K passes the max-pages guard and silently shrinks the logical stable memory (canister brick)

#6307

· haoxucu opened

on Aug 16, 2026

Arbitrary local file read embedded into compiled Wasm via blob:file: imports or relative .. imports (no containment)

#6306

· haoxucu opened

on Aug 16, 2026

Cubic blowup in parser error recovery: 400 syntax errors take ~9.4 s, 1000+ errors stall native moc for minutes and hang the JavaScript build

#6305

· haoxucu opened

on Aug 16, 2026

Quadratic time in type checking of unbracketed sum chains (re-inference of the whole left subtree per operator), reaching ~15 s for 32k operands and crashing the JS build at ~5k operands

#6304

· haoxucu opened

on Aug 16, 2026

Quadratic time blowup in Candid .did type checking (Map.union fold over type declarations) enables DoS of compile services with a ~1 MB file

#6303

· haoxucu opened

on Aug 16, 2026

Stored XSS in mo-doc generated HTML: doc comments are rendered as raw Markdown with no HTML escaping and no URL-scheme filtering (javascript:)

#6302

· haoxucu opened

on Aug 16, 2026

Compiler crash on Candid IDL numeric labels: decimal IDs >= 2^32 AND hexadecimal IDs (even < 2^32) raise an uncaught Failure in Uint32.of_string

#6301

· haoxucu opened

on Aug 16, 2026

Navigation Menu

Uh oh!

All issues

Add `costVetkdDeriveKey` primitive for `ic0.cost_vetkd_derive_key`

from_candid: "byte read out of buffer" trap when skipping many record fields (to_candid round-trip)

Implicit argument not resolved when the type variable appears only in the result

Interpreter/codegen divergence in Nat/Int exponentiation: exponents >= 2^32 trap on-chain (bigint_to_word32_trap) while moc -r computes them up to 2^62-1

Interpreter internal error instead of a trap: out-of-bounds Blob indexing (b[999999]) raises an uncaught OCaml exception and dumps the environment, diverging from the compiled Wasm which traps cleanly

Missing overflow check in StableMemory.grow: an attacker-supplied Nat of the form 2^64 - size + K passes the max-pages guard and silently shrinks the logical stable memory (canister brick)

Arbitrary local file read embedded into compiled Wasm via blob:file: imports or relative .. imports (no containment)

Cubic blowup in parser error recovery: 400 syntax errors take ~9.4 s, 1000+ errors stall native moc for minutes and hang the JavaScript build

Quadratic time in type checking of unbracketed sum chains (re-inference of the whole left subtree per operator), reaching ~15 s for 32k operands and crashing the JS build at ~5k operands

Quadratic time blowup in Candid .did type checking (Map.union fold over type declarations) enables DoS of compile services with a ~1 MB file

Stored XSS in mo-doc generated HTML: doc comments are rendered as raw Markdown with no HTML escaping and no URL-scheme filtering (javascript:)

Compiler crash on Candid IDL numeric labels: decimal IDs >= 2^32 AND hexadecimal IDs (even < 2^32) raise an uncaught Failure in Uint32.of_string

Uh oh!

Search results