704 Commits

Author SHA1 Message Date
arjun2075
3a2fb20479 fix: accept hexadecimal values for Disassemble x86 address arguments
The 'Code Segment (CS)' and 'Offset (IP)' arguments were declared as
'number' ingredients, so they were parsed with parseFloat and rejected
hexadecimal input such as '0xABC' with:

    Invalid ingredient value. Not a number: NaN

However, SetBasePosition already parses both values with parseInt(x, 16)
and GetPosition renders them back out with toString(16), so these fields
have always been hexadecimal. The two conversions cancel out visually,
which is why the mismatch went unnoticed. It is observable though: a code
segment entered as '24' becomes 36 decimal internally, which crosses the
documented 'CS >= 36 switches 32-bit output to SEG:OFFSET' threshold.

Both arguments are now 'string' ingredients parsed by a dedicated helper
that accepts bare ('ABC'), prefixed ('0xABC') and suffixed ('ABCh') hex,
and rejects anything else with a named error instead of a NaN message.

The code segment is left-padded to four digits because SetBasePosition
reads it via slice(length - 4), which silently truncated shorter values
('ABC' was read as 'C').

Existing recipes are unaffected: the default is unchanged and numeric
argument values from saved recipes are still handled.

Fixes #2720
2026-08-10 08:04:46 -07:00
Sanjay Santhanam
c56dd23358
fix: stop Parse QR Code from participating in Magic (#2610) (#2613) 2026-07-25 09:08:18 +01:00
Kirill
be42a3b9c8
Restrict A1Z26 Magic checks to valid ranges (#2644) 2026-07-25 08:39:11 +01:00
MAN$I VERMA
8e19b7e402
feat: Extend automated ingredient validation to include argSelector ingredients (#2641) (#2643) 2026-07-25 08:17:08 +01:00
p-leriche
f6a4631130
Add Modular Exponentiation operation (#2149) 2026-07-25 08:00:06 +01:00
GCHQDeveloper581
f77ddf4890
Fix pretty recipe parser ReDoS (#2687)
Co-authored-by: zainnadeem(RedOpsCell) <zainnadeemzainnadeem80@gmail.com> (main author)
2026-07-24 07:42:55 +01:00
Thomas Nemer
1343a107cb
feat: add modulo operation (#2103)
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (Minor tweaks to pass CI)
2026-07-23 08:27:49 +01:00
alleria173
88a2dbab9d
Add HMAC regression tests for Decimal key parsing (#2680) 2026-07-21 18:25:12 +01:00
Michael Roberson
df545e62b9
fix: await Node API operations whose run() returns a non-async Promise (#2659) 2026-07-21 16:12:30 +01:00
min23asdw
5a01c71098
fix: fromDecimal Auto delimiter now correctly parses multiple numbers (#2270) 2026-07-18 10:10:40 +00:00
p-leriche
d172282755
Add Modular Inverse operation (#2207) 2026-07-17 17:04:13 +00:00
Michael Roberson
d771ea2cc0
Consolidate HTML entity tables into a single spec-generated source (#2645) (#2671) 2026-07-17 16:36:55 +00:00
p-leriche
e5ee170e8d
Add Extended GCD operation (#2206) 2026-07-17 17:24:44 +01:00
Imantas
0e2e118719
Add COBS encoding/decoding operations (#2185) 2026-07-17 17:09:44 +01:00
Michael Roberson
81c18e2f69
fix: remove stray punctuation from malformed To HTML Entity table values (#2660) 2026-07-16 09:34:08 +01:00
Thomas M
002ed911b1
feat: add TEA and XTEA block ciphers (#2225) 2026-07-05 13:22:27 +01:00
Thomas M
fa219d96f1
feat: add PRESENT and Twofish ciphers (#2157) 2026-07-05 11:11:31 +01:00
MAN$I VERMA
19c8a8a310
fix: support constructor and __proto__ parameters in Parse URI (#2578) (#2581) 2026-07-04 18:04:50 +01:00
MAN$I VERMA
86746296be
feat: Implement automated option-type ingredient validation (#2625) 2026-07-04 12:20:33 +01:00
Thomas M
9ab5108664
Add Ascon (NIST SP 800-232) operations: Hash, MAC, Encrypt, Decrypt (#2155) 2026-07-04 11:32:23 +01:00
alleria173
79de8f1199
fix/2445 HOTP (and 2426 TOTP) type errors (#2620) 2026-07-03 11:58:00 +00:00
loki1205
eccaf723f5
Fix base32 unicode alphabet (#2380) 2026-07-03 11:39:33 +01:00
alleria173
c51e21a242
fix/2444 TOTP input validation for correct otpauth uri generation (#2621) 2026-07-03 10:23:06 +00:00
Kirill
179eb9a379
Validate Wrap line width (#2606)
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
Co-authored-by: C85297 <95289555+C85297@users.noreply.github.com>
2026-07-03 11:06:55 +01:00
Zain Nadeem
961bbab682
Handle malformed image parser errors in View Bit Plane (#2612) 2026-07-03 09:02:14 +00:00
alleria173
3104e6073f
Fixes #2446 hotp otpauth uri validation (#2614) 2026-07-03 08:54:38 +00:00
Zain Nadeem
6f95a2e17d
Handle invalid bcrypt salt errors in Bcrypt compare (#2615) 2026-07-03 08:52:04 +00:00
Kirill
d6f087efad
Validate empty Show On Map options (#2631) 2026-07-03 08:47:06 +00:00
GCHQDeveloper581
275b594f7c
Fix BigNumber deserialisation in Dish, and add tests (#2607)
With ideas from: cyphercodes <cyphercodes@users.noreply.github.com>
With ideas from: Sivachandran Paramasivam <sivachandran.p@gmail.com>
2026-06-26 12:07:33 +00:00
Kirill
bd4c59cf34
Handle empty Generate Image mode (#2598) 2026-06-25 11:59:33 +00:00
Zain Nadeem
0e50d32ec5
Fix stale presenter after expected operation errors (#2589)
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (tweaked tests)
2026-06-24 16:39:01 +00:00
GCHQDeveloper581
080357a4f5
Improve parameter validation for a number of operations where exceptions otherwise caused. (#2586) 2026-06-22 11:51:12 +01:00
Leon Zandman
a0a369a7ef
Fix uncaught TypeError in "Show on map" operation. (#2453) 2026-06-20 12:01:14 +01:00
min23asdw
0d2af8ce00
fix: jsonata $base64decode/$base64encode in Web Worker (#2275) 2026-06-20 11:40:37 +01:00
Willi Ballenthin
08e5c13da4
fix Dechunk HTTP Response leaks terminating chunk and trailers into output (#2290) 2026-06-20 09:49:47 +00:00
Willi Ballenthin
64fc664479
fix: MIME Decoding corrupts non-ASCII characters in Base64-encoded words (#2291) 2026-06-20 10:41:53 +01:00
Willi Ballenthin
8105e3eb07
fix: Gzip comment with header checksum produces corrupt streams (#2288) 2026-06-20 09:03:12 +01:00
Willi Ballenthin
0a0d95bcbd
fix TLV Parser BER long-form length parsing (#2289) 2026-06-20 08:59:30 +01:00
Willi Ballenthin
9a8a279b82
fix: Unescape Unicode Characters accepts 4-6 hex digits for U+ prefix (#2287) 2026-06-20 08:56:09 +01:00
Willi Ballenthin
5a2eeed066
fix Set Difference and Set Intersection preserve duplicates from first sample (#2286) 2026-06-20 08:52:56 +01:00
Willi Ballenthin
0fd6190b46
fix: From Base operation produces wrong results for fractional inputs (#2285)
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-06-20 08:48:49 +01:00
Willi Ballenthin
f0468d391d
fix Median operation returns incorrect result for unsorted odd-length inputs (#2284) 2026-06-20 07:21:07 +00:00
Shailendra Singh
ddbe914132
Added RenderPDF functionality (#2105)
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> very basic unit testing
2026-06-19 18:29:40 +00:00
GCHQ Developer 85297
4a70dff3f2
Fix URL encoding incorrectly converting input to UTF-8 (#2340) 2026-06-19 14:01:19 +01:00
MAN$I VERMA
33c2207427
feat: Add automated parameter validation framework (#2561) 2026-06-19 12:59:04 +01:00
Shailendra Singh
e18441d430
Fix: added viewport styles to img tag in RenderImage Dish (#2109)
Co-authored-by: GCHQ Developer 85297 <95289555+C85297@users.noreply.github.com>
2026-06-19 11:56:11 +01:00
GCHQ Developer 85297
0b9258b8fb
Fix operation description rendering (#2577) 2026-06-18 15:33:11 +01:00
GCHQ Developer 85297
85db3be5d0
Chart operation prototype protection (#2569) 2026-06-17 10:41:55 +00:00
Shivam Kumar
31808e83d5
Fix Uint8Array concat crash in Parse IPv4 header (#2409) 2026-06-15 09:34:25 +01:00
sky
7f0544e1c6
fix: validate hexdump width upper bound (#2514) 2026-06-15 09:02:56 +01:00