misa77

v0.3.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 8d Build & Package

✓ No known CVEs patched

✓ No known CVEs patched in this version

Affected surfaces

rce_ssrf

Summary

AI summary

Updates Highlights, Compatibility, and true across a mixed release.

Type	Severity	Summary	CVE
Feature
Feature	Medium	`misa77::decompress` now accepts a `misa77::dconfig` for safe decoding. `misa77::decompress` now accepts a `misa77::dconfig` for safe decoding. Source: llm_adapter@2026-07-18 Confidence: high	—
Feature	Low	Hand‑written NEON path added for ARM64 decoding. Hand‑written NEON path added for ARM64 decoding. Source: llm_adapter@2026-07-18 Confidence: high	—
Feature	Low	Version macros (`MISA77_VERSION_`) exposed in public header. Version macros (`MISA77_VERSION_`) exposed in public header. Source: llm_adapter@2026-07-18 Confidence: high	—
Feature	Low	CLI `-v/--verbose` now reports codec time and wall time separately. CLI `-v/--verbose` now reports codec time and wall time separately. Source: llm_adapter@2026-07-18 Confidence: high	—
Feature	Low	'misa77::decompress' default dconfig maintains unsafe pre‑0.3.0 behavior for source compatibility. 'misa77::decompress' default dconfig maintains unsafe pre‑0.3.0 behavior for source compatibility. Source: granite4.1:30b@2026-07-18-audit Confidence: low	—
Performance	Low	Safe decoder incurs 2‑4 % decode cost overhead. Safe decoder incurs 2‑4 % decode cost overhead. Source: llm_adapter@2026-07-18 Confidence: high	—

Full changelog

Safe decompressor: misa77::decompress now takes a misa77::dconfig. Pass dconfig(true) to get a decoder that is guaranteed to terminate and stay in-bounds (no UB of any kind) on corrupt or malicious input, at a 2-4% decode cost. It has been fuzzed under ASan/UBSan.
Hand-written NEON path for ARM64. Previously, we relied on auto-vectorization.
Version macros in the public header (MISA77_VERSION_MAJOR/MINOR/PATCH, MISA77_VERSION_NUMBER, MISA77_VERSION_STR).
CLI: -v/--verbose reports codec time and wall time separately (#2).

Fresh 0.3.0 results for Intel x86-64 and Apple M3 are in the README, with the raw lzbench tables archived under misc/lzbench-results-archive/0.3.0/. The benchmarking harness is a public lzbench fork.

The stream format is unchanged from 0.2.0.
The library API is source-compatible: the new dconfig parameter of decompress() has a default value (unsafe, as before).

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track misa77

Get notified when new releases ship.

About misa77