Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

blueness/sthttpd

              master @ 2845bf5
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Buffer Overflow: 2 prior fixes. Scrutinize any change in this area.

src/libhttpd.c: most-fixed (3 issues). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Buffer Overflow: Heap buffer overflow in URI path normalization (de_dotdot) due to incorrect length calculation during memmove; a second out-of-bounds array access occurs when trimming trailing slashes from empty paths. These are the most severe and directly exploitable memory corruption issues.

Memory Safety: Unsafe use of strcpy on overlapping memory blocks causes undefined behavior and potential memory corruption; replaced with memmove. This affects multiple components and indicates a systemic lack of awareness about overlapping buffer operations.

Denial of Service: CVE-2012-5640: specially-crafted .htpasswd file causes crypt() to return NULL, leading to null pointer dereference in strcmp and crash. Missing NULL check before dereferencing external input.