Repository navigation
[uk-ai-resilience] Allocation-size overflow in awf_config_policy.go (Tier B) #66614
Description
Activity
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 13.5 AIC · ⌖ 8.94 AIC · ⊞ 12.9K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 14.8 AIC · ⌖ 10.1 AIC · ⊞ 12.9K · ◷
Caution
agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.Details
Potential security threats were detected in the agent output.
Review the workflow run logs for details.
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 19.7 AIC · ⌖ 14.8 AIC · ⊞ 12.9K · ◷
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
🍪 Om nom nom by Issue Monster · pi · gpt54 · 19.1 AIC · ⌖ 10.4 AIC · ⊞ 12.9K · ◷
- linked a pull request that will close this issueAvoid allocation-size overflow in AWF model policy union #66646
on Oct 7, 2026
Tier B, SLA: high. Source: weekly UK AI governance report (see the discussion "[uk-ai-resilience] Weekly governance report").
Code-scanning alerts #1007 and #1008 (
go/allocation-size-overflow, high) inpkg/workflow/awf_config_policy.go(lines 79-80) have no tracking issue.Risk scoring (1 low risk - 5 high risk): exposure 3, patchability 1 (small local fix), detectability 1 (CodeQL flagged), fragility 2, ownership confidence 3.
Remediation:
appendwithout precomputed size, or check lengths before adding).Human-review trigger: if the sizes derive from untrusted workflow frontmatter.