Security context

Highlights

Denial of Service: 3 prior fixes. Scrutinize any change in this area.

yellowstone-grpc-geyser: most-fixed (2 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Denial of Service: An integer underflow vulnerability exists during the cleanup of blocks and blockhashes with small slot numbers, resulting in an out-of-bounds subtraction and subsequent service panic. Future modifications to storage cleanup logic must use checked arithmetic instead of wrapping or standard subtraction operators.

Denial of Service: Premature client loop termination on stream half-closes can leave resources leaking or spawn detached handlers that crash. Strict cancellation handling inside the client loop handler is required to ensure clean disconnections.

Denial of Service: Unbounded queue growth occurs when out-of-order messages are not dropped based on write-version sequencing, leading to memory exhaustion. Any new message processing paths or alternative queue interfaces must validate write_version sequence ordering.