René's URL Explorer Experiment


Title: sec(parser): BoundedSegment + audit trail for untrusted asSlice by dfa1 · Pull Request #27 · dfa1/vortex-java · GitHub

Open Graph Title: sec(parser): BoundedSegment + audit trail for untrusted asSlice by dfa1 · Pull Request #27 · dfa1/vortex-java

X Title: sec(parser): BoundedSegment + audit trail for untrusted asSlice by dfa1 · Pull Request #27 · dfa1/vortex-java

Description: Vortex columnar format, in pure Java (zero-copy, FFM, no JNI, no Unsafe) - sec(parser): BoundedSegment + audit trail for untrusted asSlice by dfa1 · Pull Request #27 · dfa1/vortex-java

Open Graph Description: Summary Replaces every untrusted MemorySegment.asSlice call in the file-open and decode path with a typed BoundedSegment wrapper, so malformed input throws VortexException (the documented SECURITY....

X Description: Summary Replaces every untrusted MemorySegment.asSlice call in the file-open and decode path with a typed BoundedSegment wrapper, so malformed input throws VortexException (the documented SECURITY....

Opengraph URL: https://github.com/dfa1/vortex-java/pull/27

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:24920b5e-b462-9f96-9c18-7bdedb3e9b3b
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idA5B0:7FD8A:9BD7EE:D5E16A:6A4DDE59
html-safe-noncef2ddac687586530b42340ebfa2d2ca3053bd163bd5767ad070cd5a742f526e9e
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBNUIwOjdGRDhBOjlCRDdFRTpENUUxNkE6NkE0RERFNTkiLCJ2aXNpdG9yX2lkIjoiNzgxNjA2NTcyNzQwNDM1NTQ1IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmac86acff50b0601810f16f31acb202fdf1b1336db95edac15d091817b8831fb631
hovercard-subject-tagpull_request:3842070583
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/dfa1/vortex-java/27/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/e3c0a3a0f8ec8cdd64e611c612ac8ef3d9be7587375d530e0c179aab970462d9/dfa1/vortex-java/pull/27
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/e3c0a3a0f8ec8cdd64e611c612ac8ef3d9be7587375d530e0c179aab970462d9/dfa1/vortex-java/pull/27
og:image:altSummary Replaces every untrusted MemorySegment.asSlice call in the file-open and decode path with a typed BoundedSegment wrapper, so malformed input throws VortexException (the documented SECURITY....
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamedfa1
hostnamegithub.com
expected-hostnamegithub.com
None06b8a6144231bf3a234f1c2e9993861e07ce98a905912b114aa386c2d7e84b33
turbo-cache-controlno-cache
go-importgithub.com/dfa1/vortex-java git https://github.com/dfa1/vortex-java.git
octolytics-dimension-user_id5798698
octolytics-dimension-user_logindfa1
octolytics-dimension-repository_id1249412947
octolytics-dimension-repository_nwodfa1/vortex-java
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id1249412947
octolytics-dimension-repository_network_root_nwodfa1/vortex-java
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release1d344bdb7547fe6bca17a59bb2b8aac3dc9532a0
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/dfa1/vortex-java/pull/27#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fdfa1%2Fvortex-java%2Fpull%2F27
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fdfa1%2Fvortex-java%2Fpull%2F27
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=dfa1%2Fvortex-java
Reloadhttps://github.com/dfa1/vortex-java/pull/27
Reloadhttps://github.com/dfa1/vortex-java/pull/27
Reloadhttps://github.com/dfa1/vortex-java/pull/27
dfa1 https://github.com/dfa1
vortex-javahttps://github.com/dfa1/vortex-java
Notifications https://github.com/login?return_to=%2Fdfa1%2Fvortex-java
Fork 1 https://github.com/login?return_to=%2Fdfa1%2Fvortex-java
Star 3 https://github.com/login?return_to=%2Fdfa1%2Fvortex-java
Code https://github.com/dfa1/vortex-java
Issues 5 https://github.com/dfa1/vortex-java/issues
Pull requests 2 https://github.com/dfa1/vortex-java/pulls
Discussions https://github.com/dfa1/vortex-java/discussions
Actions https://github.com/dfa1/vortex-java/actions
Projects https://github.com/dfa1/vortex-java/projects
Security and quality 0 https://github.com/dfa1/vortex-java/security
Insights https://github.com/dfa1/vortex-java/pulse
Code https://github.com/dfa1/vortex-java
Issues https://github.com/dfa1/vortex-java/issues
Pull requests https://github.com/dfa1/vortex-java/pulls
Discussions https://github.com/dfa1/vortex-java/discussions
Actions https://github.com/dfa1/vortex-java/actions
Projects https://github.com/dfa1/vortex-java/projects
Security and quality https://github.com/dfa1/vortex-java/security
Insights https://github.com/dfa1/vortex-java/pulse
dfa1https://github.com/dfa1
mainhttps://github.com/dfa1/vortex-java/tree/main
worktree-asslice-audithttps://github.com/dfa1/vortex-java/tree/worktree-asslice-audit
Conversationhttps://github.com/dfa1/vortex-java/pull/27
Commits6 (6)https://github.com/dfa1/vortex-java/pull/27/commits
Checkshttps://github.com/dfa1/vortex-java/pull/27/checks
Files changedhttps://github.com/dfa1/vortex-java/pull/27/files
sec(parser): BoundedSegment + audit trail for untrusted asSlicehttps://github.com/dfa1/vortex-java/pull/27#top
dfa1https://github.com/dfa1
mainhttps://github.com/dfa1/vortex-java/tree/main
worktree-asslice-audithttps://github.com/dfa1/vortex-java/tree/worktree-asslice-audit
https://github.com/dfa1
dfa1https://github.com/dfa1
Jun 10, 2026https://github.com/dfa1/vortex-java/pull/27#issue-4634278887
Please reload this pagehttps://github.com/dfa1/vortex-java/pull/27
Claude Codehttps://claude.com/claude-code
Please reload this pagehttps://github.com/dfa1/vortex-java/pull/27
dfa1https://github.com/dfa1
June 10, 2026 21:20https://github.com/dfa1/vortex-java/pull/27#commits-pushed-b6a9c24
https://github.com/dfa1
https://github.com/claude
sec(parser): wrap untrusted MemorySegment.asSlice calls in MemorySegm…https://github.com/dfa1/vortex-java/pull/27/commits/b6a9c242a4b4bb81c84df33e63b1ba8e09a2fd45
b6a9c24https://github.com/dfa1/vortex-java/pull/27/commits/b6a9c242a4b4bb81c84df33e63b1ba8e09a2fd45
https://github.com/dfa1
https://github.com/claude
sec(parser): introduce BoundedSegment wrapper at the mmap boundary [P…https://github.com/dfa1/vortex-java/pull/27/commits/b7d583a8653ffd756657217c80d8bf79896a5187
b7d583ahttps://github.com/dfa1/vortex-java/pull/27/commits/b7d583a8653ffd756657217c80d8bf79896a5187
#27https://github.com/dfa1/vortex-java/pull/27
https://github.com/dfa1
https://github.com/claude
sec(parser): thread BoundedSegment through DecodeContext.buffer() [Ph…https://github.com/dfa1/vortex-java/pull/27/commits/413edb8503bef92a0247beb4ff358993a7942bd7
413edb8https://github.com/dfa1/vortex-java/pull/27/commits/413edb8503bef92a0247beb4ff358993a7942bd7
https://github.com/dfa1
https://github.com/claude
sec(parser): change VortexHandle.slice to return BoundedSegment [Phas…https://github.com/dfa1/vortex-java/pull/27/commits/4352be02d621a7700676b6fffef7f11933db142c
4352be0https://github.com/dfa1/vortex-java/pull/27/commits/4352be02d621a7700676b6fffef7f11933db142c
@deprecatedhttps://github.com/deprecated
https://github.com/dfa1
https://github.com/claude
sec(parser): migrate VortexReader internals to BoundedSegment [Phase …https://github.com/dfa1/vortex-java/pull/27/commits/a9a5189165e9e3e838fd2b7ccf44541742809a70
a9a5189https://github.com/dfa1/vortex-java/pull/27/commits/a9a5189165e9e3e838fd2b7ccf44541742809a70
https://github.com/dfa1
dfa1https://github.com/dfa1
Jun 10, 2026https://github.com/dfa1/vortex-java/pull/27#event-26593460207
https://github.com/dfa1
dfa1https://github.com/dfa1
Jun 10, 2026https://github.com/dfa1/vortex-java/pull/27#issuecomment-4674089762
Please reload this pagehttps://github.com/dfa1/vortex-java/pull/27
https://github.com/dfa1
dfa1https://github.com/dfa1
Jun 11, 2026https://github.com/dfa1/vortex-java/pull/27#issuecomment-4677761533
previous commenthttps://github.com/dfa1/vortex-java/pull/27#issuecomment-4674089762
Please reload this pagehttps://github.com/dfa1/vortex-java/pull/27
https://github.com/dfa1
https://github.com/claude
sec(parser): fold MemorySegments into BoundedSegment as the single APIhttps://github.com/dfa1/vortex-java/pull/27/commits/66a50acee018978fdca17a354d8d9760994aba63
66a50achttps://github.com/dfa1/vortex-java/pull/27/commits/66a50acee018978fdca17a354d8d9760994aba63
https://github.com/dfa1
dfa1https://github.com/dfa1
Jun 11, 2026 https://github.com/dfa1/vortex-java/pull/27#ref-pullrequest-4637962352
docs(adr): split read and write runtimes out of core #29 https://github.com/dfa1/vortex-java/pull/29
dfa1https://github.com/dfa1
Jun 11, 2026 https://github.com/dfa1/vortex-java/pull/27#ref-commit-78096e0
https://github.com/dfa1
https://github.com/claude
docs(adr): split read and write runtimes out of corehttps://github.com/dfa1/vortex-java/commit/78096e0850fef936dcc9b497dff07ec72ad6199a
78096e0https://github.com/dfa1/vortex-java/commit/78096e0850fef936dcc9b497dff07ec72ad6199a
#27https://github.com/dfa1/vortex-java/pull/27
#27https://github.com/dfa1/vortex-java/pull/27
dfa1https://github.com/dfa1
Jun 11, 2026 https://github.com/dfa1/vortex-java/pull/27#ref-commit-b554d3e
https://github.com/dfa1
https://github.com/claude
docs(adr): split read and write runtimes out of corehttps://github.com/dfa1/vortex-java/commit/b554d3efd7aec2c82c85934f0e12550d51c1b507
b554d3ehttps://github.com/dfa1/vortex-java/commit/b554d3efd7aec2c82c85934f0e12550d51c1b507
#27https://github.com/dfa1/vortex-java/pull/27
#27https://github.com/dfa1/vortex-java/pull/27
https://github.com/dfa1
dfa1https://github.com/dfa1
Jun 11, 2026 https://github.com/dfa1/vortex-java/pull/27#ref-pullrequest-4638119452
refactor(encoding): ADR 0001 — all 6 phases #30 https://github.com/dfa1/vortex-java/pull/30
https://github.com/apps/sonarqubecloud
sonarqubecloudhttps://github.com/apps/sonarqubecloud
Jun 15, 2026https://github.com/dfa1/vortex-java/pull/27#issuecomment-4705098185
https://sonarcloud.io/dashboard?id=dfa1_vortex-java&pullRequest=27
https://camo.githubusercontent.com/4fe73d190ee58e1cd813384cae342413435615102ab16a3fffc5c5ac2bb56044/68747470733a2f2f736f6e6172736f757263652e6769746875622e696f2f736f6e6172636c6f75642d6769746875622d7374617469632d7265736f75726365732f76322f636f6d6d6f6e2f6661696c65642d313670782e706e67
C Reliability Rating on New Codehttps://sonarcloud.io/dashboard?id=dfa1_vortex-java&pullRequest=27
https://camo.githubusercontent.com/4fe73d190ee58e1cd813384cae342413435615102ab16a3fffc5c5ac2bb56044/68747470733a2f2f736f6e6172736f757263652e6769746875622e696f2f736f6e6172636c6f75642d6769746875622d7374617469632d7265736f75726365732f76322f636f6d6d6f6e2f6661696c65642d313670782e706e67
D Maintainability Rating on New Codehttps://sonarcloud.io/dashboard?id=dfa1_vortex-java&pullRequest=27
See analysis details on SonarQube Cloudhttps://sonarcloud.io/dashboard?id=dfa1_vortex-java&pullRequest=27
https://camo.githubusercontent.com/1a96b909953f6d455d6bea9702b11b99e63fc143c87967afd0ec14d3431d4be8/68747470733a2f2f736f6e6172736f757263652e6769746875622e696f2f736f6e6172636c6f75642d6769746875622d7374617469632d7265736f75726365732f76322f636f6d6d6f6e2f6c696768745f62756c622d313670782e706e67
https://camo.githubusercontent.com/76a056c55530b084c742a182df2b3a6f4df8321046daa4a50ff5723b5c595283/68747470733a2f2f736f6e6172736f757263652e6769746875622e696f2f736f6e6172636c6f75642d6769746875622d7374617469632d7265736f75726365732f76322f636f6d6d6f6e2f736f6e61726c696e742d313670782e706e67
SonarQube for IDEhttps://www.sonarsource.com/products/sonarlint/features/connected-mode/?referrer=pull-request
Please reload this pagehttps://github.com/dfa1/vortex-java/pull/27
https://github.com/dfa1
dfa1https://github.com/dfa1
Jun 19, 2026https://github.com/dfa1/vortex-java/pull/27#issuecomment-4754417268
Please reload this pagehttps://github.com/dfa1/vortex-java/pull/27
https://github.com/dfa1
dfa1https://github.com/dfa1
Jun 19, 2026https://github.com/dfa1/vortex-java/pull/27#event-26971284423
dfa1https://github.com/dfa1
Jun 20, 2026 https://github.com/dfa1/vortex-java/pull/27#ref-commit-9663b16
https://github.com/dfa1
https://github.com/claude
feat(core): add IoBounds for untrusted-segment bounds typing (ADR 000…https://github.com/dfa1/vortex-java/commit/9663b161e2e32beb1efe688fa98a7da646388b34
9663b16https://github.com/dfa1/vortex-java/commit/9663b161e2e32beb1efe688fa98a7da646388b34
#27https://github.com/dfa1/vortex-java/pull/27
dfa1https://github.com/dfa1
Jun 20, 2026 https://github.com/dfa1/vortex-java/pull/27#ref-commit-e9af80d
https://github.com/dfa1
https://github.com/claude
feat(core): add IoBounds for untrusted-segment bounds typing (ADR 000…https://github.com/dfa1/vortex-java/commit/e9af80d6db4fa6307564cf10906e3a25e1e26c9a
e9af80dhttps://github.com/dfa1/vortex-java/commit/e9af80d6db4fa6307564cf10906e3a25e1e26c9a
#27https://github.com/dfa1/vortex-java/pull/27
https://github.com/dfa1
dfa1https://github.com/dfa1
June 20, 2026 11:44https://github.com/dfa1/vortex-java/pull/27#event-26986991764
https://github.co/hiddenchars
https://github.com/dfa1/vortex-java/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fdfa1%2Fvortex-java%2Fpull%2F27
Please reload this pagehttps://github.com/dfa1/vortex-java/pull/27
https://github.com/dfa1
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.