OpenMiles is a drop-in mss32.dll replacement for the Miles Sound System. It is a library loaded into a game process. It opens no network port, has no server component, and handles no user accounts or personal data. Its input surface is the data files a game opens through it (audio, MIDI/XMIDI, DLS, MSS soundbanks) and the .asi/.m3d/.flt plugin DLLs it loads from the game's directory.

The full model, including the current risk ranking, is in docs/THREAT_MODEL.md. Every control it claims exists is cited as a file:line anchor, and make check-threat-model (also run by make lint) fails when an anchor no longer sits on that line, so a moved control cannot keep a "mitigated" verdict.

Only the current default branch build is supported. There are no LTS or long-term-support branches in this repository.

Open a private security advisory on the repository's GitHub page. Please include the game and data files involved, the build flags used (-Dmss-version, -Doptimize, target), and the steps to reproduce.

No disclosure deadline or embargo policy is defined by this project yet.

• Memory safety problems reached from a data file the game opens (soundbank, event bytecode, XMIDI/MIDI, MP3, OGG, WAV, FLAC, DLS).
• The temporary-file handling in AIL_open_ASI_provider, which writes a caller-supplied PE image to a temporary file before loading it. On Windows that directory comes from GetTempPathW; elsewhere it comes from TMPDIR, falling back to the game's own working directory, so a process that controls that variable chooses where the image lands.
• Anything reachable from AIL_startup's scan of the game directory for plugin files.
• RIB_load_provider_library, which loads a caller-named path as plugin code. Unlike the two directory scans it applies no plugin-extension allowlist, no filename check, and no already-loaded check, so a report is in scope wherever a game can be made to pass a path it does not control.
• Anything reachable from the scan of the redist directory the game sets with AIL_set_redist_directory. That directory is not restricted to the game directory, so it is in scope wherever the game is pointed.
• A path traversal or an unexpected overwrite reached through AIL_WAV_file_write or AIL_file_write, which take a caller-named path and create or truncate it with no validation. The report is still worth sending, since the module is the write primitive, but the caller chooses the path.

• Loading an unsigned .asi/.m3d/.flt plugin from the game directory or from the redist directory. The original MSS behaves the same way, and the plugin is native code the user deliberately installed. Keep the game directory, and any directory the game points the redist search at, writable only by the user.
• A bug in miniaudio, TinySoundFont, or tml.h; report those upstream.
• Crafted arguments passed to the exports by a buggy host game. The C ABI cannot validate a caller's pointers, and a caller inside the process already has more authority than the library.