AI model found two ways to freeze the CertView VS Code extension
A developer handed his open-source CertView VS Code extension to OpenAI's Daybreak Blue security model, which found two flaws: an O(n²) PEM parser and a PKCS#12 iteration count that becomes Infinity. Both are fixed in version 0.5.1.
- A 234 KiB PEM block took 87.7 seconds to parse due to a join per line
- PKCS#12 with parseInt of 128 bytes of 0xFF yielded Infinity and an endless loop
- Fixes: a length counter instead of join and a 100,000 iteration cap
- GPT-5.6-Sol found the hang, but only Daybreak Blue spotted the Infinity case
Read next
Security