2 Commits

Include renames

Author	SHA1	Message	Date
qing	1348660cd8	docs(aibox): second-round audit re-review at HEAD 177a9ac ... - Batch E fixes re-verified: H1/H3/M1 solid, H2 solid but with two residuals (reader thread leak, subagent timeout blind spot), M2 incomplete (timeout paths skip tool attribute cleanup) - Legacy M3/M4/L1/L3 confirmed unfixed; L1 found second instance at db.py:459 (get_immediate_memos) - New findings: 1 high (SOCKS5 proxy password persisted in plaintext), 9 medium (drain thread leak, event-loop blocking RLock, FTS5 keyword injection, streaming bypass of result length cap, persistent prompt injection storage, TOCTOU on mark_as_triggered, etc.), 7 low - Updated compliance matrix and proposed Batch F fix plan (F1-F6)	2026-08-17 17:51:43 +08:00
qing	177a9ac9a6	fix(aibox): close audit findings H1-H3/M1-M2 (command exec protection chain) ... - H1: CommandLineTool.execute_streaming now purely delegates to injected executor; removes 150-line duplicate Popen loop that bypassed 1MB cap, cancel() and timeout protections - H2: thread the blocking readline into a daemon reader thread; main loop polls queue with 0.1s ticks so timeout/1MB checks fire even for silent commands (verified: 3s timeout on 15s sleep, was 15s+ before) - H3: stdin=DEVNULL on both Popen sites; stdin-waiting commands now hit EOF instead of deadlocking the tool thread forever - M1: heredoc delimiter uniquification in write_file guidance (content line equal to AIBOX_EOF no longer truncates into shell injection) - M2: 3600s total deadline on registry streaming forward loop Verification: PoC regression 5/5 PASS (timeout/1MB/cancel/delegation), full unit suite 264 passed. Audit report updated with Batch E results.	2026-08-17 17:28:41 +08:00