From a memory-safety audit of nobilis on 2 October 2026: its own code has two unsafe blocks (both sound libc calls in main.rs), so what follows is about the code it depends on. Advisories were checked against the OSV/RustSec database for every crate in Cargo.lock, and each one traced to whether it is actually compiled in.
Echo cancellation and noise suppression (#232) are sonora, a Rust port of WebRTC's audio processing. Its sonora-simd 0.2.0 has 136 lines of unsafe (SIMD intrinsics) and sonora-aec3 25 more - the most unsafe of any crate that handles data from other people: the far-end signal it cancels against is the decoded audio of everyone else in the call.
The input is fixed-size float frames, so the exposure is out-of-bounds or misaligned access in its own arithmetic rather than parsing - but the crate is at 0.2 and has had little outside scrutiny. Options: review or fuzz the SIMD paths against the scalar ones with odd lengths and NaNs; check whether it offers a scalar-only build and measure what that costs; pin and watch it.
From a memory-safety audit of nobilis on 2 October 2026: its own code has two `unsafe` blocks (both sound libc calls in `main.rs`), so what follows is about the code it depends on. Advisories were checked against the OSV/RustSec database for every crate in `Cargo.lock`, and each one traced to whether it is actually compiled in.
Echo cancellation and noise suppression (#232) are `sonora`, a Rust port of WebRTC's audio processing. Its `sonora-simd` 0.2.0 has **136 lines of `unsafe`** (SIMD intrinsics) and `sonora-aec3` 25 more - the most `unsafe` of any crate that handles data from other people: the far-end signal it cancels against is the decoded audio of everyone else in the call.
The input is fixed-size float frames, so the exposure is out-of-bounds or misaligned access in its own arithmetic rather than parsing - but the crate is at 0.2 and has had little outside scrutiny. Options: review or fuzz the SIMD paths against the scalar ones with odd lengths and NaNs; check whether it offers a scalar-only build and measure what that costs; pin and watch it.
Salastil
added this to the v1.0 milestone 2026-10-02 19:03:41 -04:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
From a memory-safety audit of nobilis on 2 October 2026: its own code has two
unsafeblocks (both sound libc calls inmain.rs), so what follows is about the code it depends on. Advisories were checked against the OSV/RustSec database for every crate inCargo.lock, and each one traced to whether it is actually compiled in.Echo cancellation and noise suppression (#232) are
sonora, a Rust port of WebRTC's audio processing. Itssonora-simd0.2.0 has 136 lines ofunsafe(SIMD intrinsics) andsonora-aec325 more - the mostunsafeof any crate that handles data from other people: the far-end signal it cancels against is the decoded audio of everyone else in the call.The input is fixed-size float frames, so the exposure is out-of-bounds or misaligned access in its own arithmetic rather than parsing - but the crate is at 0.2 and has had little outside scrutiny. Options: review or fuzz the SIMD paths against the scalar ones with odd lengths and NaNs; check whether it offers a scalar-only build and measure what that costs; pin and watch it.