Release Notes

This release addresses multiple security findings reported by Snyk and an intensive fuzzing campaign (300M+ iterations). Enhances the overall robustness of the resource management.

Changes

Security & Hardening

• Integer Overflow Prevention: Implemented thread count clamping and explicit size_t arithmetic for workspace allocation.
• Resource Management: Fixed potential file handle leaks in CLI error paths and benchmark modes.
• Input Sanitization: Hardened CLI argument parsing and enhanced output terminal guards.

Core Library

• Thread Configuration: Centralized ZXC_MAX_THREADS (1024) and synchronized limits across the codebase.
• Memory Safety: Patched potential out-of-bounds access points and refined scratch buffer management.

CI

• Fuzzing: Optimized buffer API and memory reuse for automated fuzzing integration.

Full Changelog: v0.8.1...v0.8.2