- Replace unsafe static mut DNS_TID (data race between loopback listener
thread, mDNS responder thread, and scheme-call paths) with AtomicU16
+ fetch_update. Eliminates torn writes and interleaved read-modify-write
that could produce duplicate transaction IDs and misroute responses.
- Add MAX_COMPRESSION_JUMPS=10 cap and backward-loop detection to
decode_name. Previously a malicious DNS response with a self-referential
or cyclic compression pointer could spin the scheme daemon's main
thread indefinitely (DoS).
Closes the two CRITICAL findings (C-19, C-20) from
local/docs/NETWORKING-AND-DRIVERS-CODE-ASSESSMENT-2026-07-27.md
§3.5
vasilito
01f4f5d958