Codex/sync upstream 0.9.8 - #1

Merged

SpectralDragon merged 48 commits into

codex/sync-upstream-0.9.8

Aug 27, 2026

Commits on Jan 24, 2026

Several leaks and bugs fixed (added new unit test)
marcobambini
committed
9fccc47
Update README.md
marcobambini
authored
633aa73

Commits on Jan 30, 2026

Update index.html
marcobambini
authored
f82bd06
fix clang build
iAndyHD3
committed
76b3d7b

Commits on Feb 2, 2026

Merge pull request #435 from iAndyHD3/master
marcobambini
authored
f01f46c

Commits on Feb 23, 2026

Bump version to 0.9.5 — extensive bug fixes, memory safety improvements, and documentation

marcobambini
and
claude
committed
bb850e8

Commits on Feb 24, 2026

Update README.md
marcobambini
authored
38b2a57
Update ARCHITECTURE.md
marcobambini
authored
0e42cb8

Commits on Apr 1, 2026

fix(core): move gravity_opt_free after refcount check to prevent double-free

barchett
authored and
seL4 Developer
committed
dd81589
Merge pull request #436 from barchett/fix/double-free-gravity-opt-free
marcobambini
authored
87c9c90

Commits on Apr 14, 2026

Commits on May 25, 2026

Change install instructions to be more readily packagable.
eigenwhat
committed
aa18dbc
Add self to CONTRIBUTORS.
eigenwhat
committed
53bdbf7

Commits on May 26, 2026

Merge pull request #439 from eigenwhat/cmake-changes-for-packaging
marcobambini
authored
9827138
fix: V-001 security vulnerability
orbisai0security
committed
eb67d22
Merge pull request #440 from orbisai0security/fix-console-strcat-buffer-overflow
marcobambini
authored
3744550

Commits on Jul 19, 2026

Commits on Jul 20, 2026

Merge pull request #445 from barchett/fix/vm-memory-leaks
marcobambini
authored
17a280b

Commits on Aug 5, 2026

fix: heap out-of-bounds read in parse_number_expression (#446)

marcobambini
and
claude
committed
1b9bbf3
Merge pull request #449 from marcobambini/fix/parser-number-oob-read
marcobambini
authored
e1f38c2
fix: optional classes never released due to unbalanced refcount

marcobambini
and
claude
committed
97b92c2
fix: harden the JSON executable loader and scanner (#444, #447, #448)

marcobambini
and
claude
committed
9b337c3
fix: core reference leaked by every gravity_compiler_run

marcobambini
and
claude
committed
6330961
fix: Int overflow and float remainder constant folding (#443)

marcobambini
and
claude
committed
bfc9f49
Merge branch 'fix/loadbuffer-json-hardening'
marcobambini
committed
2d228e0
Merge branch 'fix/const-folding-rem-and-int-overflow'
marcobambini
committed
899b577
Merge branch 'fix/optionals-refcount'
marcobambini
committed
64cf047
Merge branch 'claude/xenodochial-brahmagupta-7367f6'
marcobambini
committed
573f2a8
ci: add a GitHub Actions build, test and sanitizer workflow

marcobambini
and
claude
committed
60d759c
fix: double free of the inline source buffer in the CLI

marcobambini
and
claude
committed
6cbf589
docs: correct the default bytecode output file name

marcobambini
and
claude
committed
1236a3c
Bump version to 0.9.8 — memory safety and JSON loader hardening

marcobambini
and
claude
committed
970757d
fix: mirror the runtime float precision when folding a remainder

marcobambini
and
claude
committed
3cf4876
fix: heap buffer overflow in list_storeat when the resize fails

marcobambini
and
claude
committed
6e8d00e
ci: remove the CodeQL workflow, let the compiler check formats instead

marcobambini
and
claude
committed
94ba228
fix: count a CR+LF pair as a single line break in the lexer

marcobambini
and
claude
committed
daefac8
build: add a staticlib target to the Makefile

marcobambini
and
claude
committed
a8ea371
fix: guard the Windows code paths with _WIN32, not WIN32

marcobambini
and
claude
committed
40a26f2

Commits on Aug 26, 2026