[deft-security] Fix 6 vulnerabilities in src/ds.h

src/ds.h

@@ -8,26 +8,29 @@ typedef struct DataItem
 {
     char *key;
     char *value;
-    unsigned int hit_count;     // Hit count for caching
-    unsigned int last_accessed; // Timestamp of last access
+    uint64_t hit_count;     // Hit count for caching (use 64-bit to prevent overflow)
+    uint64_t last_accessed; // Timestamp of last access (use 64-bit to prevent overflow)
     struct DataItem *next;      // For chaining in hash table
 } DataItem;
 
 typedef struct
 {
-    unsigned int size;
+    size_t size; // Use size_t for better portability and larger capacity
     DataItem **table;
 } HashTable;
 
 // --- Hash Table Function Declarations ---
+// Returns NULL on allocation failure - caller MUST check return value
 HashTable *create_hash_table(unsigned int size);
 void free_hash_table(HashTable *ht);
 unsigned int hash_function(const char *key, unsigned int size);
 void hash_table_insert(HashTable *ht, const char *key, const char *value);
+// Returns NULL if key not found - caller MUST check return value
 DataItem *hash_table_search(HashTable *ht, const char *key);
 void hash_table_remove(HashTable *ht, const char *key);
 
 // --- Helper Function Declarations ---
+// Returns NULL on allocation failure - caller MUST check return value
 char *my_strdup(const char *s);
 void free_data_item_contents(DataItem *item);
 void free_data_list(DataItem **list, size_t *size, size_t *capacity);