Security context

Highlights

Buffer Overflow: 1 prior fix. Scrutinize any change in this area.

src/argon2_node.cpp: most-fixed (2 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Buffer Overflow: Inadequate allocation sizing when interfacing with the underlying `argon2_hash` function can cause a heap buffer overflow. Correcting this requires dynamic allocation based on the calculated length of the encoded Argon2 hash.

Memory Corruption: Using standard C-string duplication utilities like `strdup` on binary buffers containing null bytes leads to premature truncation and potentially unsafe memory manipulation. Handling hash data safely requires using Node-native raw data copy utilities like `Nan::CopyBuffer`.

Security Misconfiguration: Over-privileged GitHub Actions workflows create a posture risk where compromised dependencies or pull requests could abuse write permissions on the repository. Access must be limited using explicit read-only scopes.