Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
dropbox/rust-brotli-decompressor
master @ c1f6944
3
Fixes
0
CVEs
HIGH
Peak severity
33.3%
Coverage
Highlights
Integer Overflow: 2 prior fixes. Scrutinize any change in this area.
src/decode.rs: most-fixed (2 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: Unchecked addition of input/output offsets with available lengths can wrap, leading to incorrect bounds checks and subsequent memory corruption.
Integer Overflow: Allocation size multiplication can overflow, resulting in undersized buffers that later get overrun.
Out-of-bounds Write: Unclamped copy length in uncompressed block output can become negative or exceed ringbuffer bounds, causing a write past allocated memory.