Search results

BEAM loader validator false-rejects valid multi-allocate functions (Y-register frame check is control-flow-insensitive)

Status: Open.

#18 In ablative-io/beamr;

· JoshuaBearup opened on Jul 20, 2026

== returns false for arithmetically-equal bignum/float — BigInt↔Float arms missing in numeric_eq

bugSomething isn't workingSomething isn't working

Status: Open.

#15 In ablative-io/beamr;

· ijnebzor opened on Jul 14, 2026

Hardening: dirty-NIF tail-call fall-through + non-GC-aware result copy + dead distribution/etf.rs (vs main @f85ce94)

Status: Open.

#14 In ablative-io/beamr;

· JoshuaBearup opened on Jun 10, 2026

Atom term ordering compares by intern index, not by atom name — violates BEAM term order and is load-nondeterministic

Status: Open.

#13 In ablative-io/beamr;

· JoshuaBearup opened on Jun 3, 2026

Literals and BIF results are Box::leak-ed onto a never-GC'd global heap — heap-DoS + per-process isolation break

Status: Open.

#12 In ablative-io/beamr;

· JoshuaBearup opened on Jun 3, 2026

Loader lacks a unified validating-boundary contract — the same untrusted-input DoS class re-opens per chunk type

Status: Open.

#11 In ablative-io/beamr;

· JoshuaBearup opened on Jun 3, 2026

No determinism / replay seam: wall-clock, global counters, unordered link iteration, and unseeded rand

Status: Open.

#10 In ablative-io/beamr;

· JoshuaBearup opened on Jun 3, 2026

meridian_ffi NIFs grant loaded bytecode unrestricted sh -c + filesystem access with no capability check

Status: Open.

#9 In ablative-io/beamr;

· JoshuaBearup opened on Jun 3, 2026