ABC tickets: core library primitives

Discrepancies in abc/ — the foundational slice/buffer/net/poll/curl layer every other module builds on. Each entry is one ticket with its live state; it drops off once the ticket closes. The fix-and-land method is Issues. Memory-safety findings live under MEM; this topic is for behavioural/correctness gaps. The 2026-07-07 five-agent full-library review landed as ABC-005..018; every ticketed finding was verified against source first.

Active tickets

s_purge skips the swapped-in tail (LIVE via LSM/Y), $rm/$rm1 memmove the wrong count, u8sPop copies head yet sheds tail, sDrain breaks its own contract, $tailshift cannot compile, $feedf returns OK on end-of-template truncation. (armed for any non-u8 T), bReMap shrink OOB (macOS path), bAcquire alignment + size-overflow math. overflow + no-op sift-up, LSMSort silently loses data on roughly-sorted input, Yx $sort b8-comparator-through-qsort UB, PRO.h included by LSM.h. nibble ("0g" decodes OK), OKscan matches "KO" not "OK" (0x518 vs 0x614), RON pad-feed breaks the Feed contract, ZINT-128 feeds unchecked. huge records (bit-0x20 test) → stream desync; probe shift UB; leftover unaligned casts; missing u32 length guards.

ABC-010 MED — numeric/unicode parsing: overlong U+FFFF accepted, JSON unescape emits CESU-8 its own validator rejects, decimal drains wrap u64 → OK with a wrong value, float parse truncates at 31 chars, i64Zig signed-overflow UB.
ABC-011 HIGH — HTTP serializer emits ZERO headers (same-pointer slice {h[0], *h}; verified empirically); RFC-legal empty reason-phrase rejected by the grammar.
ABC-012 HIGH — socket layer: NETInfo returns OK without copying the result out, aNETAddress stack OOB on long hosts, bind walk aborts instead of trying the next address, CURL callbacks return OK on OOM (truncated body as HTTP 200), pol mask clobber, EINTR/EAGAIN collapse.
ABC-013 HIGH — FILE/FSW: FILEFlushThreshold loses data on a short write (Bate eats all), FILETrimMap truncates PAST off the file, FILE_BOOK grows over uninit memory vs its NULL sentinel, no O_CLOEXEC anywhere, FSW watches unremovable + kqueue fd leak.
ABC-014 HIGH — PACK/PAGE/SLOG/NEST stores: crafted PACK trailer → wild DATA terminator (u64 wrap), PACKClose leaks on error, SLOG writer emits skip records its own reader cannot expand (64 vs 127), NESTFeed self-corrupts past its one-time room check.
ABC-015 MED — container templates: SSTx.h is non-compiling bit-rot (ruling: revive or delete), HASHx converge compares a stale hash, MSET seeks with the wrong comparator, instantiation traps (X-clobber, leaked T/Key typedefs).
ABC-016 MED — bedrock hygiene: popc64 is the 32-bit builtin, sha256empty unaligned u64 reads, MAIN exit-code truncation, SAN.h incomplete + undefs NULL, OK.h static rotating buffers.
ABC-017 MED — build/CI: no -Wall anywhere, WITH_INET undeclared so the net stack + fuzz targets never run in CI, LEX generator drifted from its committed output (fbreak vs goto) — blocks regens.
ABC-018 GATED — style sweep (the PTR-001 pattern, review-gated): DNS name codec + NFA regex compiler are manual parsers, slice-from-arith cluster, naming/error-code drift, misc LOW list.
ABC-019 MED — bracketed IPv6 host never resolves: the URI lexer hands [::1] framing-included, NETResolve feeds it verbatim to getaddrinfo → Invalid argument; IPv6 dead end-to-end even after JS-110's compose-side fix.
ABC-021 HIGH — SORTu64 emits garbage: Yx tie-loop guard has swapped args (drains the whole heap as one tie group), SORTu64y emits only eqs0, ping-pong passes use full buffer extents,
tie pad overflow; smoke-fuzz CI red. Fix verified, landing.
ABC-022 LOW — gcc 15.2 Release -Warray-bounds false positive on the inlined MSET sift-down child probe (h[right], guarded by right < n, dead at runtime); breaks ABC-017's 0-warning build.

Sessions

2026-07-07 full-library review session booked ABC-005..ABC-018.

ABC-003 (UTF8_LEN[byte>>4] byte-length table shifted; multibyte lead bytes over-count) landed into the abc sub — 02a23dc3 (?/abc/.dogs) + pin cb71e65b. (BRO-004's incoherence was a separate bro bug, not this table — see ABC-003.)

ABC-004 (abc/BIT.h u1 bitmap + set algebra; BitUnset |=~ bug killed by construction; FILE_RW migrated; backs DOG-001's weavescope) landed into the abc sub — 7dafb8d7 + u64s rework 6e3b93f8 + pin 876315d1; the optional NFA class-bitmap migration was dropped as scope — see ABC-004.