| F-11.7-1 |
CRITICAL |
W11.7-destructive-test.md |
build/bin/dstalk-cli.exe corrupt copy (MD5 d8e8c92b vs 803ca2ea); all commands treated as AI prompt, exit code always 3 |
OPEN |
— |
— |
— |
| F-11.7-2 |
MEDIUM |
W11.7-destructive-test.md |
/clear reports [OK] even when session unavailable (g_session==null) — main.cpp:168-172 |
OPEN |
— |
— |
— |
| F-11.7-3 |
LOW |
W11.7-destructive-test.md |
/context silent no-output when session unavailable; no else branch — main.cpp:175-185 |
OPEN |
— |
— |
— |
| F-11.7-4 |
LOW |
W11.7-destructive-test.md |
/file write (no args) matched as unknown command instead of usage hint |
OPEN |
— |
— |
— |
| F-11.1-1 |
HIGH |
W11.1-context-audit.md |
C++ exception (std::bad_alloc)穿越ABI边界，违反plugin-abi §5.3；trim_impl (L114-226) 无try/catch → std::terminate() |
OPEN |
— |
— |
— |
| F-11.1-2 |
HIGH |
W11.1-context-audit.md |
strdup返回值未检查，OOM时静默失败+泄漏；L138-141/L219-222 循环内4次strdup无nullptr检查 |
OPEN |
— |
— |
— |
| F-11.1-3 |
MEDIUM |
W11.1-context-audit.md |
context_set_max_tokens死API，g_max_tokens从未被读取（L21/L243-244） |
OPEN |
— |
— |
— |
| F-11.1-4 |
LOW |
W11.1-context-audit.md |
UTF-8解码无越界保护（L42-64, L96-104），多字节序列假设后续字节有效 |
OPEN |
— |
— |
— |
| F-11.1-5 |
LOW |
W11.1-context-audit.md |
token计数逻辑重复（L34-68 vs L91-106 ~90%重复） |
OPEN |
— |
— |
— |
| F-11.1-6 |
LOW |
W11.1-context-audit.md |
0xC0/0xC1过短编码未识别（L52, L100），仅影响token估算计数 |
OPEN |
— |
— |
— |
XiuChengWu
0e41c8c6f6