Tobias GesellchenandClaude Opus 4.7 b149580c19 fix(ding): clamp sample rate against int -> uint32 truncation ...

CodeQL flagged the writeWAV cast of strconv.Atoi's result to
uint32 (alert 148). Two-layer defence: the handler rejects
sample-rate query params outside [8000, 192000] before parsing
ever reaches Render, and WithDefaults snaps any out-of-range
caller-supplied SampleRate back to the default before
renderChirp allocates buffers sized by it.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-19 23:20:40 +02:00

..

ding_test.go

fix(ding): clamp sample rate against int -> uint32 truncation

2026-05-19 23:20:40 +02:00

ding.go

fix(ding): clamp sample rate against int -> uint32 truncation

2026-05-19 23:20:40 +02:00