Args accepts --players 0 (src/args.rs:16-17), but default match setup evaluates args.players - 1 at src/match_loading.rs:188. Debug builds panic and release builds can wrap.
Fix: enforce the supported range in Clap and add parsing tests for zero, maximum, and excessive counts.
Severity: High
Args accepts --players 0 (src/args.rs:16-17), but default match setup evaluates args.players - 1 at src/match_loading.rs:188. Debug builds panic and release builds can wrap.
Fix: enforce the supported range in Clap and add parsing tests for zero, maximum, and excessive counts.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Severity: High
Args accepts --players 0 (src/args.rs:16-17), but default match setup evaluates args.players - 1 at src/match_loading.rs:188. Debug builds panic and release builds can wrap.
Fix: enforce the supported range in Clap and add parsing tests for zero, maximum, and excessive counts.