PLSysSec / PLSysSec/cargo-scan
Tracking issue: crashes in `chain` binary
Open
Nobody has claimed this yet.
bug
roadmap-unplanned
- Dominant language
- Rust
- Stars
- 47
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
Binary chain crashes with stack overflow on tokio:
caleb@caleb-mac cargo-scan % cargo run --bin chain -- create data/packages/tokio policy.manifest
Finished dev [unoptimized + debuginfo] target(s) in 0.38s
Running `target/debug/chain create data/packages/tokio policy.manifest`
Creating audit chain
Loading audit package lockfile
Creating dependency graph
Making default policy for unicode-ident v1.0.4
Making default policy for proc-macro2 v1.0.46
Making default policy for quote v1.0.21
Making default policy for syn v1.0.102
thread 'main' has overflowed its stack
fatal runtime error: stack overflow
zsh: abort cargo run --bin chain -- create data/packages/tokio policy.manifest
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the reported command: cargo run --bin chain -- create data/packages/tokio policy.manifest. Trace the chain binary through dependency-graph creation and default-policy generation, especially around the last logged crate. Done means the command no longer overflows the stack and completes audit-chain creation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100