Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
GNOME/libsoup
master @ 60ac9e5
117
Fixes
0
CVEs
CRITICAL
Peak severity
33.3%
Coverage
Highlights
Use-After-Free: 16 prior fixes. Scrutinize any change in this area.
libsoup/soup-session.c: most-fixed (17 issues). Treat as high-risk during review.
79 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Use-After-Free: Dominant vulnerability class with multiple distinct root causes: queue item double-processing, stale pointers after buffer reallocation, and missing refcounts during signal emission or session teardown. These affect central request lifecycle paths and can lead to memory corruption or code execution.
Authentication Bypass: Multiple auth bypasses from improper handling of cached credentials, NTLM state, and cookie prefix validation. Also includes a critical typo in NTLM response comparison and failures to clear auth headers on redirects/tunnels, enabling credential theft or unauthorized access.
Buffer Overflow / Out-of-bounds Write: Multiple heap overflow paths from integer overflow in length arithmetic (WebSocket payload, GByteArray allocation, deflate buffer size) and missing bounds checks. These are directly exploitable by a malicious peer and can lead to remote code execution.