Security context

Highlights

Denial of Service: 8 prior fixes. Scrutinize any change in this area.

src/bqfc.c: most-fixed (4 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Denial of Service: The deserialization pipeline in src/bqfc.c has suffered from multiple out-of-bounds read and write vulnerabilities due to insufficient input validation and boundary checks. This poses a severe denial-of-service risk via crashes when parsing malformed serialized forms.

Auth Bypass: Insufficient uniqueness and canonicalization checking during form deserialization (bqfc_deserialize and bqfc_decompr) can allow attackers to generate mathematically equivalent but non-canonical forms, resulting in proof malleability or signature bypasses.

Buffer Overflow: The VDF network client is susceptible to stack buffer overflows during session initialization because of missing size validations on socket input buffers before invoking boost::asio::read.