4463 Commits

Author SHA1 Message Date
Arjun
04c1b5bdcf
Merge 3a2fb20479178415cec01fce9aa256898ba3bd9f into 4290ea753912378913b1f3f54e0fc5720afeda5d 2026-08-10 08:07:42 -07:00
arjun2075
3a2fb20479 fix: accept hexadecimal values for Disassemble x86 address arguments
The 'Code Segment (CS)' and 'Offset (IP)' arguments were declared as
'number' ingredients, so they were parsed with parseFloat and rejected
hexadecimal input such as '0xABC' with:

    Invalid ingredient value. Not a number: NaN

However, SetBasePosition already parses both values with parseInt(x, 16)
and GetPosition renders them back out with toString(16), so these fields
have always been hexadecimal. The two conversions cancel out visually,
which is why the mismatch went unnoticed. It is observable though: a code
segment entered as '24' becomes 36 decimal internally, which crosses the
documented 'CS >= 36 switches 32-bit output to SEG:OFFSET' threshold.

Both arguments are now 'string' ingredients parsed by a dedicated helper
that accepts bare ('ABC'), prefixed ('0xABC') and suffixed ('ABCh') hex,
and rejects anything else with a named error instead of a NaN message.

The code segment is left-padded to four digits because SetBasePosition
reads it via slice(length - 4), which silently truncated shorter values
('ABC' was read as 'C').

Existing recipes are unaffected: the default is unchanged and numeric
argument values from saved recipes are still handled.

Fixes #2720
2026-08-10 08:04:46 -07:00
Bart van Andel
4290ea7539
fix: use js-yaml for both JSON to YAML and YAML to JSON (#2710) 2026-08-06 10:52:18 +01:00
dependabot[bot]
e2b0558c9c
chore (deps): bump the patch-updates group across 1 directory with 6 updates (#2712)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-06 08:32:40 +01:00
dependabot[bot]
bb941dd2b6
chore (deps): bump the minor-updates group across 1 directory with 3 updates (#2705)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-06 07:58:04 +01:00
dependabot[bot]
1d39e75dac
chore (deps): bump the actions-dependencies group with 2 updates (#2703)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-06 07:49:01 +01:00
Bart van Andel
396c6c8e93
fix: replace shasum / sha256sum / sed calls with node built-ins (#2019) 2026-08-06 07:39:30 +01:00
dependabot[bot]
b435acc6b4
chore (deps): bump fast-uri from 3.1.4 to 3.1.5 (#2709)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 08:31:29 +00:00
dependabot[bot]
f161086705
chore (deps): bump ip-address from 10.2.0 to 10.4.0 (#2708)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 08:06:47 +00:00
Sanjay Santhanam
c56dd23358
fix: stop Parse QR Code from participating in Magic (#2610) (#2613) 2026-07-25 09:08:18 +01:00
Kirill
be42a3b9c8
Restrict A1Z26 Magic checks to valid ranges (#2644) 2026-07-25 08:39:11 +01:00
MAN$I VERMA
8e19b7e402
feat: Extend automated ingredient validation to include argSelector ingredients (#2641) (#2643) 2026-07-25 08:17:08 +01:00
p-leriche
f6a4631130
Add Modular Exponentiation operation (#2149) 2026-07-25 08:00:06 +01:00
Zain Nadeem
c7d20d8601
Add npm allowScripts policy for npm v12 (#2682) 2026-07-24 15:47:02 +01:00
dependabot[bot]
536ee84034
chore (deps): bump assorted vulnerable dependencies (#2689)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
2026-07-24 10:54:29 +01:00
dependabot[bot]
08b2b7b3dd
chore (deps): bump shell-quote from 1.8.4 to 1.10.0 (#2690)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 10:05:16 +01:00
dependabot[bot]
ed21930260
chore (deps): bump the patch-updates group across 1 directory with 9 updates (#2686)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 09:04:47 +01:00
dependabot[bot]
51600c4a4f
chore (deps): bump the actions-dependencies group across 1 directory with 2 updates (#2685)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 08:49:31 +01:00
dependabot[bot]
4b43f89eb8
chore (deps): bump nginxinc/nginx-unprivileged from fd3314e to 44e3633 in the docker-dependencies group (#2684)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 08:38:40 +01:00
GCHQDeveloper581
d24ba1afce
Bump v11.3.0 (#2688) v11.3.0 2026-07-24 08:05:09 +01:00
GCHQDeveloper581
f77ddf4890
Fix pretty recipe parser ReDoS (#2687)
Co-authored-by: zainnadeem(RedOpsCell) <zainnadeemzainnadeem80@gmail.com> (main author)
2026-07-24 07:42:55 +01:00
Thomas Nemer
1343a107cb
feat: add modulo operation (#2103)
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (Minor tweaks to pass CI)
2026-07-23 08:27:49 +01:00
alleria173
88a2dbab9d
Add HMAC regression tests for Decimal key parsing (#2680) 2026-07-21 18:25:12 +01:00
Michael Roberson
df545e62b9
fix: await Node API operations whose run() returns a non-async Promise (#2659) 2026-07-21 16:12:30 +01:00
dependabot[bot]
4a53231a71
chore (deps): bump morgan from 1.10.1 to 1.11.0 (#2676)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-18 10:11:35 +00:00
min23asdw
5a01c71098
fix: fromDecimal Auto delimiter now correctly parses multiple numbers (#2270) 2026-07-18 10:10:40 +00:00
p-leriche
c7898130e7
Add Generate Prime Number operation (#2212) 2026-07-17 17:09:06 +00:00
p-leriche
d172282755
Add Modular Inverse operation (#2207) 2026-07-17 17:04:13 +00:00
Michael Roberson
d771ea2cc0
Consolidate HTML entity tables into a single spec-generated source (#2645) (#2671) 2026-07-17 16:36:55 +00:00
p-leriche
e5ee170e8d
Add Extended GCD operation (#2206) 2026-07-17 17:24:44 +01:00
Imantas
0e2e118719
Add COBS encoding/decoding operations (#2185) 2026-07-17 17:09:44 +01:00
dependabot[bot]
9e59868b84
chore (deps): bump websocket-driver from 0.7.4 to 0.7.5 (#2673)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-16 10:21:11 +01:00
Michael Roberson
81c18e2f69
fix: remove stray punctuation from malformed To HTML Entity table values (#2660) 2026-07-16 09:34:08 +01:00
dependabot[bot]
49b855c761
chore (deps): bump the actions-dependencies group across 1 directory with 6 updates (#2668)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 16:24:22 +01:00
dependabot[bot]
de784f6e52
chore (deps): bump the minor-updates group across 1 directory with 3 updates (#2669)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 16:13:41 +01:00
dependabot[bot]
bf705e7d43
chore (deps): bump the patch-updates group with 5 updates (#2654)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (added chromedriver update to 150.0.3)
2026-07-14 12:56:04 +01:00
Thomas M
002ed911b1
feat: add TEA and XTEA block ciphers (#2225) 2026-07-05 13:22:27 +01:00
Thomas M
fa219d96f1
feat: add PRESENT and Twofish ciphers (#2157) 2026-07-05 11:11:31 +01:00
MAN$I VERMA
19c8a8a310
fix: support constructor and __proto__ parameters in Parse URI (#2578) (#2581) 2026-07-04 18:04:50 +01:00
MAN$I VERMA
86746296be
feat: Implement automated option-type ingredient validation (#2625) 2026-07-04 12:20:33 +01:00
Thomas M
9ab5108664
Add Ascon (NIST SP 800-232) operations: Hash, MAC, Encrypt, Decrypt (#2155) 2026-07-04 11:32:23 +01:00
dependabot[bot]
4707ddb861
chore (deps): bump the patch-updates group across 1 directory with 6 updates (#2638)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 17:22:33 +01:00
dependabot[bot]
eaf185242a
chore (deps): bump webpack from 5.107.2 to 5.108.3 in the minor-updates group (#2635)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 16:26:10 +01:00
dependabot[bot]
a4edfdd770
chore (deps): bump nginxinc/nginx-unprivileged from 458ecbe to fd3314e in the docker-dependencies group (#2633)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 16:13:41 +01:00
GCHQDeveloper581
3ca7c792df
Feature: automatically expire PRs if CLA remains unsigned for an extended period (#2636) 2026-07-03 15:54:10 +01:00
alleria173
79de8f1199
fix/2445 HOTP (and 2426 TOTP) type errors (#2620) 2026-07-03 11:58:00 +00:00
loki1205
eccaf723f5
Fix base32 unicode alphabet (#2380) 2026-07-03 11:39:33 +01:00
GCHQDeveloper581
740d350306
Add a workflow to automatically flag PRs without a signed CLA (#2627) 2026-07-03 11:28:53 +01:00
alleria173
c51e21a242
fix/2444 TOTP input validation for correct otpauth uri generation (#2621) 2026-07-03 10:23:06 +00:00
Kirill
179eb9a379
Validate Wrap line width (#2606)
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
Co-authored-by: C85297 <95289555+C85297@users.noreply.github.com>
2026-07-03 11:06:55 +01:00