Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
aawc/unrar
main @ 97e1780
4
Fixes
0
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Memory Corruption: 4 prior fixes. Scrutinize any change in this area.
archive.cpp: most-fixed (2 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Comment extraction used raw Array<wchar> and manual conversion functions (CharToWide, UtfToWide, RawToWide) that could overflow or mishandle encoding, leading to memory corruption.
Memory Corruption: Struct member alignment set to 4Bytes caused ABI mismatch between the DLL and its consumers, corrupting memory when structs were shared across boundaries.
Memory Corruption: Archive initialization used outdated RAROptions structure instead of CommandData, carrying forward known memory-safety bugs from older unrar versions.