bee-san/Ciphey v0.12.1

on GitHub

Security

• Bounds the Brainfuck interpreter to 1,000,000 executed instructions so non-terminating untrusted programs fail through the decoder's existing error path instead of hanging Ciphey.
• Adds a regression test for non-terminating Brainfuck input while preserving the existing valid Hello World and longer corpus decodes.

Build reliability

• Restores the rand 0.8 and half 2.3.1 compatibility pins required by candle-core 0.3.3, repairing cross-platform builds broken by later dependency updates.

Thanks to @spartan8806 for responsibly reporting the Brainfuck denial-of-service issue.