Size computation for allocation may overflow (#99)

* Size computation for allocation may overflow

Performing calculations involving the size of potentially large strings or slices can result in an overflow (for signed integer types) or a wraparound (for unsigned types). An overflow causes the result of the calculation to become negative, while a wraparound results in a small (positive) number.

internal/recovery/circuit_breaker.go

@@ -148,6 +148,7 @@ func (cb *CircuitBreaker) allowRequest() bool {
 // allowHalfOpenRequest checks if a request is allowed in half-open state
 func (cb *CircuitBreaker) allowHalfOpenRequest() bool {
 	current := atomic.AddInt32(&cb.halfOpenRequests, 1)
+	// #nosec G115 -- MaxRequests is a small config value that fits in int32
 	if current <= int32(cb.config.MaxRequests) {
 		return true
 	}
@@ -164,6 +165,7 @@ func (cb *CircuitBreaker) recordFailure() {
 
 	state := CircuitBreakerState(atomic.LoadInt32(&cb.state))
 
+	// #nosec G115 -- FailureThreshold is a small config value that fits in int32
 	if state == CircuitBreakerClosed && failures >= int32(cb.config.FailureThreshold) {
 		cb.transitionToOpen()
 	} else if state == CircuitBreakerHalfOpen {
@@ -180,6 +182,7 @@ func (cb *CircuitBreaker) recordSuccess() {
 
 	state := CircuitBreakerState(atomic.LoadInt32(&cb.state))
 
+	// #nosec G115 -- SuccessThreshold is a small config value that fits in int32
 	if state == CircuitBreakerHalfOpen && successes >= int32(cb.config.SuccessThreshold) {
 		cb.transitionToClosed()
 	}

internal/recovery/metrics.go

@@ -191,6 +191,7 @@ func (re *RetryExecutor) calculateDelay(attempt int) time.Duration {
 	}
 
 	// Add jitter
+	// #nosec G404 -- math/rand is acceptable for jitter timing, not security-sensitive
 	if re.config.RandomizationFactor > 0 {
 		jitter := delay * re.config.RandomizationFactor
 		minDelay := delay - jitter