Claudio Russo

revise existing tests to match #311 (subtype checking only for refere…

4

…nce types) I think these tests are need to change in light of #311 (as verified by Motoko testing)

[Security] Candid deserialization vulnerabilities

1

Tracking JIRA issue(s): https://dfinity.atlassian.net/browse/FOLLOW-303 - [x] uint overflow - [ ] recursion limit - [x] binread allocation - [ ] space bomb (vec null) - [ ] skip vec null...

**Overview** Why do we need this feature? What are we trying to accomplish? **Requirements** What requirements are necessary to consider this problem solved? **Considered Solutions** What solutions were considered? **Recommended...

No further repro info:  https://discordapp.com/channels/748416164832608337/748416164832608341/930766049903775754

typo: binary format for function annotations

1

I think there's a typo here. Every binary `funcann` occupies 1 byte, not zero or more.

experiment: modify candid tooling to preserve source occurrences of blob types when parsing and pretty-printing candid sources

2

Dfx selectively processes handwritten candid to inline imports and/or service arguments. It does so by first parsing, manipulating then pretty-printing the candid ast. During parsing, blob abbreviations are expanded and...

I tried upgrade to dfx 0.15.0-beta.0 for example, but then there is some issue with the provided node.js (which I don't grok). Perhaps some package-lock.json files need regenerating but I...

containing, for example `VarArray.take`, `VarArray.filter` etc.

Since we have similar functions for other collection types.