fix: correctness — bw throttle underflow, glob **, protocol version, valgrind

src/shared/protocol.c

@@ -36,10 +36,17 @@ static void bw_throttle(size_t bytes_written) {
   clock_gettime(CLOCK_MONOTONIC, &now);
 
   /* Use unsigned long long for elapsed_ns to avoid overflow in multiplication.
-   * time_t differences fit comfortably in 64-bit for any practical runtime. */
+   * time_t differences fit comfortably in 64-bit for any practical runtime.
+   * Handle nanosecond carry/borrow to avoid unsigned wraparound when
+   * now.tv_nsec < bw_last_refill.tv_nsec. */
+  long long sec_diff = (long long)(now.tv_sec - bw_last_refill.tv_sec);
+  long long nsec_diff = (long long)(now.tv_nsec - bw_last_refill.tv_nsec);
+  if (nsec_diff < 0) {
+      sec_diff--;
+      nsec_diff += 1000000000LL;
+  }
   unsigned long long elapsed_ns =
-      (unsigned long long)(now.tv_sec - bw_last_refill.tv_sec) * 1000000000ULL +
-      (unsigned long long)(now.tv_nsec - bw_last_refill.tv_nsec);
+      (unsigned long long)sec_diff * 1000000000ULL + (unsigned long long)nsec_diff;
   bw_last_refill = now;
 
   long long tokens_to_add = (long long)((double)io_bwlimit * (double)elapsed_ns / 1000000000.0);

src/shared/utils.c

@@ -92,13 +92,16 @@ bool glob_match(const char* pattern, const char* str) {
       str++;
     } else {
       if (*pattern != *str) {
-        /* If pattern has a '/' followed by '**', allow zero path components */
+        /* If pattern has a '/' followed by '**', allow zero path components.
+         * Only skip slash-double-star if the remainder is empty or starts with '/';
+         * otherwise fall through to normal character matching. */
         if (*pattern == '/' && *(pattern + 1) == '*' && *(pattern + 2) == '*') {
-          /* Skip over slash-double-star and try to match rest against current str */
           const char* rest = pattern + 3;
+          if (*rest == '\0')
+            return glob_match(rest, str);
           if (*rest == '/')
-            rest++;
-          return glob_match(rest, str);
+            return glob_match(rest + 1, str);
+          /* slash-double-star X where X does not start with '/' — fall through */
         }
         return false;
       }