Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
GNOME/libxml2
master @ c632489
170
Fixes
0
CVEs
CRITICAL
Peak severity
28.6%
Coverage
Highlights
Use-After-Free: 31 prior fixes. Scrutinize any change in this area.
parser.c: most-fixed (44 issues). Treat as high-risk during review.
124 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Buffer Overflow: Dominant vulnerability class with 30+ fixes; spans stack and heap overflows in parsing, buffer growth, and network URL handling. Often triggered by unchecked length arithmetic or missing bounds checks before writes.
Integer Overflow: 22 fixes; unchecked size/length arithmetic before xmlMalloc/xmlRealloc leads to undersized allocations and subsequent heap overflows. Affects buffer growth, entity lengths, URI escaping, and array sizing.
Use-After-Free: 31 fixes; pervasive lifetime bugs in entity expansion, XInclude processing, XPath evaluation, and reader cleanup. Often caused by stale pointers after reallocation, premature frees, or incorrect document/entity ownership.