Skip to content

Harden snapshot replay and integer powers - #2511

Open
Emma C (emmche) wants to merge 1 commit into
microsoft:mainfrom
emmche:users/emmche/int32overflow
Open

Emma C (emmche) wants to merge 1 commit into
microsoft:mainfrom
emmche:users/emmche/int32overflow

Conversation

@emmche

Copy link
Copy Markdown
Contributor

Filter snapshot commands before replay, handle full-range integer exponents safely, enable release control-flow protection, and add regression coverage.

Description of the changes:

  • Hardened snapshot replay by filtering commands before execution and rejecting unsupported mode, memory, and arbitrary commands.
  • Updated integer exponentiation to safely handle the full 32-bit range, including  INT32_MIN , without signed overflow or recursion.
  • Enabled Control Flow Guard for Release builds and added native, managed, and UI regression coverage.

How changes were validated:

  • Built and published the full solution for Release x64.
  • Built the updated Calculator UI test project.
  • Deployed the generated Calculator package and verified basic arithmetic.
  • Exercised malicious snapshot payloads with and without expression state; both were rejected and left the display unchanged.

Filter snapshot commands before replay, handle full-range integer exponents safely, enable release control-flow protection, and add regression coverage.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant