Gergo Magyar da1154f53e feat(cfg): defensive per-statement cap on harvested taint sites (#2195 U11) ... A statement's harvested sites[] had no explicit bound — a pathological or machine-generated statement (hundreds of nested calls) could grow it without limit. Add DEFAULT_PDG_MAX_SITES_PER_STATEMENT (512, mirroring the PDG edge/fact cap style): openCallSite/addMemberRead check-before-push and stop at the cap, keeping the first 512 sites fully intact and setting an observable sitesTruncated flag. A cap-dropped openCallSite returns a -1 sentinel that pushFrame/setSite*/the occurrence fan-out all tolerate (no dangling parent/via, no clobber of kept sites). Generous enough that no real statement is affected: bench --check fingerprints unchanged, cfg unit suite 617 passed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 17:08:15 +00:00
..
fixtures	fix(cpp): suppress deleted overload winners (#2094)	2026-06-10 18:41:30 +01:00
helpers	test(cfg): pin *-harvest.ts literals to their own grammar in the gate (#2195 U10)	2026-06-14 17:00:00 +00:00
integration	test(cfg): pin *-harvest.ts literals to their own grammar in the gate (#2195 U10)	2026-06-14 17:00:00 +00:00
unit	feat(cfg): defensive per-statement cap on harvested taint sites (#2195 U11)	2026-06-14 17:08:15 +00:00
utils	perf(hooks): cmdline-first Linux db-lock scan, drop the lsof fallback (#2180) (#2183)	2026-06-13 11:52:14 +01:00