Matt Van Horn 2e9eacb8cf fix(audit): charge map reads to the count before opening the member ...

An oversized or unreadable .map returned before readSourceMap counted it, so
the allowance of 32 never ran out. An unexpanded .NET or PyInstaller package
could then decompress every listed map member, about 1 MiB each, up to the
4,096 entry cap.

The count bounds reads, so examineMap now reserves the slot before it opens the
member. A map past the count is skipped unopened, and a linker map past it is
still settled from its bounded prefix. An inline data: map is already in memory
and keeps its charge at the point it is parsed.

2026-11-01 20:20:05 -08:00

..

.vitepress

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

assets

docs(readme): show a dark showcase image on dark themes (#6915)

2026-10-24 05:51:22 +08:00

design

feat(artifacts): inspect and extract Bun standalone module graphs (#6998)

2026-10-29 22:31:50 +08:00

readme

docs(readme): align Linux x64 analysis prerequisites (#7997)

2026-10-29 13:44:07 +08:00

releases

docs: archive historical verification and release inventories (#7519)

2026-10-28 00:54:54 +08:00

specs

feat(environment): serve sorted creates, listed references and toggles (#7600)

2026-10-29 18:46:18 +08:00

verification

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

adb-device-analysis.md

fix(adb): validate screen capture PNG headers (#7962)

2026-10-29 16:04:49 +08:00

agent-environments-quickstart.md

fix(environment)!: report recorded reads and target uncertainty (#7834)

2026-10-29 05:09:31 +08:00

agent-environments.md

feat(environment): serve sorted creates, listed references and toggles (#7600)

2026-10-29 18:46:18 +08:00

android-analysis.md

feat(android): trace callers of external DEX methods (#8154)

2026-10-31 01:07:18 +08:00

apk-signature.md

docs(apk): clarify rotated signer agreement (#7936)

2026-10-29 20:00:02 +08:00

apktool-resource-analysis.md

fix(apktool): read Apktool 2.9+ metadata in its line-oriented dialect (#7747)

2026-10-28 19:46:11 +08:00

apple-application-analysis.md

fix(apple): read flattened framework Info.plist from Resources (#8101)

2026-10-30 01:00:06 -07:00

apple-ips.md

fix(apple): keep the documented terminating process, parent pid and metadata members of IPS reports (#7079)

2026-10-25 13:56:51 +08:00

architecture.mermaid

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

binary-diagnostics.md

feat(binary-layout): admit ELF32 i386, ARM and MIPS layout profiles (#7052)

2026-10-25 14:18:44 +08:00

browser-observation.md

fix(browser): preserve DOM length units in captures and comparisons (#7971)

2026-10-29 11:27:01 +08:00

browser-scenario-contract.md

fix(browser): disclose opaque redirect coverage gaps (#7943)

2026-10-29 07:57:00 +08:00

bun-standalone.md

feat(artifacts): inspect and extract Bun standalone module graphs (#6998)

2026-10-29 22:31:50 +08:00

capability-composition.md

refactor(composition): unify capability bindings and cleanup ownership (#8441)

2026-11-01 13:30:21 +08:00

ci-analysis.md

docs(ci): add a repeatable static analysis example (#6496)

2026-10-23 23:42:58 +09:00

cli.md

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

client-configuration.md

docs(setup): restore target and Hopper launch settings (#7902)

2026-10-29 23:03:02 +08:00

client-verification.md

fix(setup): register explicit MCP runtimes and preserve launcher identity

2026-10-26 02:33:31 +08:00

desktop-applications.md

fix(desktop): charge retained rows at their measured representation (#8105)

2026-10-30 01:00:28 -07:00

devicetree.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

dotnet-bundles.md

feat(artifacts): inspect and extract .NET single-file bundles (#3787)

2026-10-29 20:06:58 +08:00

electron-fuses.md

fix(electron): preserve selected fuse inspection paths (#3104)

2026-10-14 12:49:17 +08:00

electron-observation.md

fix(browser): preserve DOM length units in captures and comparisons (#7971)

2026-10-29 11:27:01 +08:00

elf-notes.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

erlang-beam.md

test(erlang): cover lambdas names filter and chunks miss in BEAM views (#6973)

2026-10-24 17:39:57 +08:00

error-contract.schema.json

fix(mcp): name the close_binary retry for retained cleanup (#8329)

2026-10-31 11:12:30 -07:00

esp-flash-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

esp-image.md

feat(artifacts): inventory and extract ESP flash layouts (#8228)

2026-10-31 15:24:32 +08:00

evm-bytecode.md

fix(analysis-view): keep inferred confidence on views of inferred Evidence (#8099)

2026-10-30 00:59:53 -07:00

firmware-analysis.md

feat(artifacts): inventory and extract UF2 and DfuSe firmware containers (#8230)

2026-10-31 16:27:00 +08:00

fit-images.md

feat(artifacts): inventory and extract U-Boot FIT images (#7771)

2026-10-29 13:33:26 +08:00

flutter-analysis.md

fix(flutter): qualify unsupported unified snapshot profiles

2026-10-24 04:28:54 +08:00

frida-instrumentation.md

fix!: retain Frida observations through shared finalization

2026-10-24 01:47:31 +08:00

ghidra-dol.md

docs(ghidra): fix DOL guide PowerPC link (#7857)

2026-10-29 04:57:59 +08:00

ghidra-dos.md

fix(ghidra): admit newer 12.x releases as compatible builds (#6924)

2026-10-27 03:49:12 +08:00

ghidra-mips.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-nativeaot.md

fix(nativeaot): charge only examined candidate table entries

2026-10-24 04:23:56 +08:00

ghidra-ppc.md

feat(ghidra): analyze GameCube/Wii DOL executables through Ghidra (#6240)

2026-10-24 17:56:31 +08:00

ghidra-provider.md

fix(ghidra): report unbacked file-offset addresses without schema repair (#8308)

2026-10-31 08:59:00 -07:00

ghidra-psp.md

test(ghidra): expect carved MIPS copies to be refused at target opening (#8227)

2026-10-31 15:24:17 +08:00

ghidra-riscv.md

feat(ghidra): admit RISC-V ilp32 ELF with a derived calling convention (#8229)

2026-10-31 15:48:46 +08:00

go-binaries.md

merge: consolidate upstream ownership and coverage fixes

2026-10-24 04:43:33 +08:00

godot-pck.md

feat(artifacts): read Godot 3 PCK version 1 archives (#7781)

2026-10-28 19:43:43 +08:00

gpu-code-objects.md

fix(gpu): own CCOB boundaries and payload representations

2026-10-24 02:34:35 +08:00

harmony-analysis.md

fix(harmony): classify exact manifest names once (#7206)

2026-10-27 13:30:24 +08:00

hex-records.md

feat(artifacts): inventory and extract Intel HEX and Motorola S-record regions (#7136)

2026-10-28 12:35:55 +08:00

http3-capture-lab.md

fix(deps): patch fast-uri, qs and HTTP/3 certifi (#7704)

2026-10-28 03:34:36 +00:00

ida-provider.md

fix(ida): admit architecture families by allowlist (#7485)

2026-10-30 22:30:23 +08:00

il2cpp-metadata.md

fix(il2cpp): validate structural record extents (#7861)

2026-10-29 01:55:47 +08:00

index.md

feat(audit): report what a shipped app exposes to static analysis

2026-11-01 02:41:37 -08:00

ines-containers.md

feat(artifacts): inspect classic iNES container regions (#2816)

2026-10-31 15:49:16 +08:00

installation.md

feat(investigation)!: retain records across engine cleanup (#8361)

2026-10-31 21:34:45 +00:00

javascript-application-graph.md

fix(javascript): separate endpoint syntax correspondence from target identity

2026-10-24 03:59:44 +08:00

javascript-application-workflows.md

refactor(evidence): unify retained inputs across domains (#8299)

2026-10-31 14:45:21 +00:00

javascript-artifact-reconstruction.md

fix(electron): keep literal IPC sends ambiguous beside unresolved handlers (#8120)

2026-10-30 02:21:23 -07:00

javascript-recovery.md

fix(javascript): preserve recovery acquisition and cancellation failures

2026-10-24 03:11:07 +08:00

javascript-route-inventory.md

feat(web): page retained bundle endpoint observations and inferences (#7259)

2026-10-27 01:37:39 +08:00

javascript-runtime-observation.md

fix(inspector): retain captures through authorization cleanup failures

2026-10-24 03:16:30 +08:00

javascript-runtime-reconciliation.md

fix(javascript): distinguish bundled script locations (#7909)

2026-10-29 07:56:06 +08:00

jeb-analysis.md

fix(jeb)!: preserve engine refusal diagnostics

2026-10-27 06:22:10 +08:00

kernel-modules.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

kuna-provider.md

fix(kuna): omit Mach-O data symbols from the procedure inventory (#8335)

2026-10-31 11:12:41 -07:00

managed-code-analysis.md

feat(dotnet): expose field constant defaults (#8015)

2026-10-31 00:10:36 +08:00

mcp-contracts.md

fix!: preserve feature traces when owner lookup is unavailable (#8368)

2026-11-01 05:38:40 +08:00

mcp-prompts.md

feat(guidance): distinguish focused matches from broad parent sections (#8305)

2026-10-31 11:11:05 -07:00

migration-6.2.md

docs: correct MCP error and capture import guidance

2026-10-10 05:41:52 +08:00

model-artifacts.md

fix(model): preserve uncertainty across released GGUF layouts

2026-10-24 02:00:10 +08:00

native-function-matching.md

feat(native): make function matching allowance configurable (#7159)

2026-10-26 02:22:32 +08:00

native-investigation.md

fix(decompile): keep provider no-pseudocode facts on batch items (#8323)

2026-10-31 09:00:48 -07:00

node-sea.md

fix(artifacts): compare Node SEA member declarations

2026-10-27 06:06:27 +08:00

packet-captures.md

fix(captures): preserve canonical TShark alias fields

2026-10-23 19:07:46 +08:00

pcap-analysis.md

fix(pcap): redact HTTP credentials in failed capture diagnostics (#7871)

2026-10-28 18:14:22 +00:00

pe-certificates.md

fix(certificates)!: disclose undecoded unsigned attributes (#7920)

2026-10-29 08:56:07 +08:00

pe-imports.md

fix(pe): share header identity across native metadata readers

2026-10-24 16:08:26 +08:00

pe-load-config.md

fix(metadata): preserve declared phandles and relocation fields

2026-10-24 23:51:20 +08:00

process-capture.md

perf(process): reuse a verified Darwin ownership helper across processes (#8318)

2026-10-31 11:12:02 -07:00

python-packaged-applications.md

fix(artifacts): retain raw archive keys across entry projections

2026-10-25 03:30:22 +08:00

python-pyc.md

feat(python): query selected pyc code-object facts (#6928)

2026-10-24 10:23:06 +08:00

raw-binary.md

docs: correct the raw ARM example and document a Cortex-M language override (#7483)

2026-10-30 22:28:06 +08:00

reconstruction-coverage.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

reconstruction-obligation-ledgers.md

fix(reconstruction): qualify original process evidence at its owner

2026-10-24 06:13:53 +08:00

reconstruction-readiness.md

refactor(verification): separate readiness evidence scopes

2026-10-24 11:31:39 +08:00

recorded-crashes.md

feat(apple): inspect IPS crash reports (#6511)

2026-10-24 16:02:59 +08:00

release-exposure.md

fix(audit): charge map reads to the count before opening the member

2026-11-01 20:20:05 -08:00

releasing.md

feat(plugins): make Claude Code and Codex installs self-contained (#7514)

2026-10-27 17:13:17 +00:00

reverse-engineering-tools.md

docs(cutter): explain bridge descriptor discovery configuration

2026-10-24 17:21:08 +08:00

roadmap.md

docs: remove retired architecture and migration artifacts

2026-10-10 05:41:45 +08:00

rust-binaries.md

feat(elf): decode Zstandard section-name tables (#6987)

2026-10-25 02:16:33 +08:00

signal-recordings.md

merge: consolidate upstream identity and representation owners

2026-10-24 05:13:41 +08:00

sqlite-databases.md

test(sqlite): preserve worker failures through cleanup retry

2026-10-24 12:34:10 +08:00

testing.md

feat(investigation)!: retain records across engine cleanup (#8361)

2026-10-31 21:34:45 +00:00

tool-design.md

feat(investigation)!: retain records across engine cleanup (#8361)

2026-10-31 21:34:45 +00:00

uf2-dfuse.md

feat(artifacts): inventory and extract UF2 and DfuSe firmware containers (#8230)

2026-10-31 16:27:00 +08:00

uimage.md

fix(artifacts): name every U-Boot uImage type in the pinned image.h (#8007)

2026-10-29 15:13:37 +08:00

unityfs.md

feat(artifacts): read UnityFS AssetBundle containers (#7699)

2026-10-28 16:47:39 +08:00

user-visible-errors.csv

feat(investigation)!: retain records across engine cleanup (#8361)

2026-10-31 21:34:45 +00:00

wasm-artifacts.md

refactor(evidence): unify retained inputs across domains (#8299)

2026-10-31 14:45:21 +00:00

web-network-captures.md

fix(captures): admit browser-serialized HAR request URLs (#8112)

2026-10-30 01:03:35 -07:00

web-runtime.md

fix(browser): retain truthful cleanup facts and document request ownership

2026-10-24 03:59:44 +08:00

web-source-location.md

fix(source-maps): resolve empty sourceRoot sources against the map URL (#8107)

2026-10-30 01:00:41 -07:00

website-module-trace.md

fix(analysis): preserve artifact and selection error ownership

2026-10-24 22:54:05 +08:00

website-script-export.md

docs: correct setup capture and recovery boundary guidance

2026-10-24 02:40:21 +08:00

windows-ghidra-p0.md

fix: correct stale provider refusal and diagnostic text (#7484)

2026-10-30 22:39:46 +08:00