COOLJAPAN

Posts tagged #fuzzing

5 posts

Aug 6, 2026 · 6 min

OxiBLAS 0.2.2 Released — 57 Doctests That Never Ran, Two Constructors That Should Have Been Unsafe, and a Fuzzer for Both Untrusted Parsers

OxiBLAS 0.2.2 is a production-readiness hardening release: a 16-domain multi-agent audit plus adversarial re-verification closes numerical correctness bugs across BLAS/LAPACK/sparse, hardens PackedRef/BandedRef construction to unsafe fn, fixes an integer-overflow bug in the Matrix Market parser, turns 57 of 64 previously-`ignore`d doctests into real executed tests, and adds a libFuzzer harness for both untrusted-input parsers. No breaking API changes outside two now-`unsafe` constructors. Pure Rust BLAS/LAPACK for SciRS2.

releaseoxiblasblas
Aug 6, 2026 · 10 min

OxiCrypto 0.3.0 Released — All 12 FIPS 205 SLH-DSA Parameter Sets, TLS 1.3 AEAD Negotiation, and a Bcrypt Panic-DoS Fixed

OxiCrypto 0.3.0 completes the FIPS 205 SLH-DSA parameter-set matrix (all 12 of 12), ships a new negotiate_aead TLS 1.3 cipher-suite resolver alongside negotiate_mac/negotiate_sig/negotiate_kex, adds coverage-guided fuzzing across AEAD/MAC/PQ/KDF, gives every sub-crate a runnable example, and fixes a byte/char-boundary panic-DoS in bcrypt verification — the sovereign Pure Rust cryptography layer for the COOLJAPAN ecosystem.

releaseoxicryptopure-rust
Aug 6, 2026 · 10 min

OxiH5 0.2.3 Released — Six Writer Gaps Closed, Extensible-Array Chunk Indexes Now Readable

OxiH5 0.2.3 closes six writer roadmap gaps — compound records, vlen sequences, array/opaque/bitfield types, big-endian/half-precision floats, soft/external/hard links — makes extensible-array chunk indexes readable, fixes five crash/OOM classes. 987 tests passing — COOLJAPAN's sovereign scientific-data layer.

releaseoxih5pure-rust
Aug 6, 2026 · 10 min

OxiSound 0.2.1 Released — A Zero-C PulseAudio Backend, Three OSC Decoder DoS Bugs Closed

OxiSound 0.2.1 ships oxisound-pulse — a brand-new, 100% Pure Rust PulseAudio/PipeWire native-protocol backend with zero C in its Linux audio path — plus three denial-of-service fixes in oxisound-osc's untrusted-UDP decode path (an out-of-bounds read, unbounded nesting, and a 32-bit integer wraparound), a new fuzz workspace, and a stream_stats() correctness fix. The sovereign audio device I/O layer for the COOLJAPAN ecosystem.

releaseoxisoundpure-rust
Jul 13, 2026 · 10 min

OxiArc 0.3.6 Released — The 75-Item Audit That Ended Five Private Codec Dialects

OxiArc 0.3.6 pairs a security-hardening pass with a 22-auditor, 75-item reference-interop campaign: zstd's FSE fix takes real-frame decode from 0/64 to 64/64, brotli's RFC 7932 rewrite goes 141/172 failures to 608/608, plus LZMA2, bzip2, and SZIP fixes. 2,426 tests passing, Pure Rust.

releaseoxiarczstd