Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
apache/xerces-c
master @ 53c0401
64
Fixes
0
CVEs
HIGH
Peak severity
17.9%
Coverage
Highlights
Memory Corruption: 31 prior fixes. Scrutinize any change in this area.
src/xercesc/validators/datatype/ListDatatypeValidator.cpp: most-fixed (4 issues). Treat as high-risk during review.
41 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Numerous fixes target memory corruption in schema validation, including use-after-free, double-free, and buffer overflows in content models, complex types, and substitution group comparison. These stem from ownership mismanagement, shallow copies, and uninitialized members.
Use After Free: Multiple use-after-free vulnerabilities were fixed in schema-related components (SchemaInfo, ComplexTypeInfo, QName, AllContentModel) due to dangling pointers, shallow copies, and premature deletion. These require careful lifetime management and deep copying.
Buffer Overflow: Datatype validators (List, Base64, HexBinary, AnyURI) have had multiple buffer overflow and integer overflow fixes, often from incorrect buffer sizing, pointer arithmetic, or type casting. These are critical for handling untrusted XML content.