Merge remote-tracking branch 'origin/main' into fix/issue-358-check-created-overflow

# Conflicts: # crates/gitlawb-core/src/http_sig.rs
fix(core): compute created-skew in checked arithmetic (#358 )
2026-11-09 05:20:05 -10:00 · 2026-11-07 16:09:50 -06:00 · 2026-09-15 10:06:21 -05:00
1 changed files with 20 additions and 0 deletions
@@ -566,6 +566,26 @@ mod tests {
        assert!(sig.check_created().is_ok());
    }

+    #[test]
+    fn extreme_created_timestamps_reject_without_wrapping() {
+        let kp = Keypair::generate();
+        let did = kp.did();
+        let parse = |created: i64| {
+            let sig_input =
+                format!(r#"sig1=("@method");keyid="{did}";alg="ed25519";created={created}"#);
+            HttpSignature::parse(&sig_input, "sig1=:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA:").unwrap()
+        };
+        // i64::MIN used to panic in debug (subtraction overflow) and wrap to a
+        // passing skew in release; now - 2^63 wrapped to i64::MIN, whose abs()
+        // wrapped back to itself and read as fresh. Both must reject.
+        for created in [i64::MIN, i64::MAX, Utc::now().timestamp() - i64::MAX] {
+            assert!(
+                parse(created).check_created().is_err(),
+                "created={created} must not pass the freshness gate"
+            );
+        }
+    }
+
    #[test]
    fn parse_error_missing_sig1_prefix() {
        let err = HttpSignature::parse(