Beagle SCM

MEM tickets: memory-safety audit

Active tickets from the 2026-06-05 whole-codebase memory-safety audit; the full per-defect digest (severity, file, one-liner for all 45) lives in MEM. Each entry below is one open ticket — a landed one (verify with be log | grep MEM-NNN) drops off. The 7 below remain (2026-07-07 audit: MEM-041 a338e631, MEM-042 6d7ebd5a landed; MEM-023 fixed via KEEP-001 0eb0afab + GET-020 49039f36; MEM-019/024 partially fixed by MEM-040/KEEP-001); the 6 JSC-blocked js defects (MEM-007/032/033/034/035/039) were dropped as stale — superseded by the landed JABC review (JS-002..014), with js/convert.cpp removed as dead code. The fix-and-land method is Issues.

Active tickets

• MEM-010 — CURL unchecked alloc null-deref plus easy-handle and slist leaks (abc/CURL.c).
• MEM-019 — graf call() early-return skips mmap/handle cleanup (graf/MERGE.c, MAP.c, LOG.c, REBASE.c).
• MEM-021 — abc latent low-severity bounds/overflow hardening (SKIPfeed, MMAP resize, DNSNameText, utf8).
• MEM-024 — push-side recursive walk holds a 1MB mmap per frame; errors swallowed (keeper/WIRECLI.c).
• MEM-025 — first_name slice dangles into the compacted advert buffer (keeper/WIRECLI.c).
• MEM-027 — patch_walk does unbounded BASS carving (~29MB/level), exhausting the arena (sniff/PATCH.c).
• MEM-031 — WOOFApiOpen leaks dogs/buffers on a later open failure (woof/CONN.c).