Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

facebook/hhvm

              master @ 7f8b8d1
            

193

Fixes

CVEs

CRITICAL

Peak severity

25.0%

Coverage

Highlights

Denial of Service: 46 prior fixes. Scrutinize any change in this area.

hphp/runtime/ext/gd/ext_gd.cpp: most-fixed (5 issues). Treat as high-risk during review.

135 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Use-After-Free: Most frequently patched class; callbacks and async operations often outlive their owning objects, leading to memory corruption and remote exploitation.

Memory Corruption / Buffer Overflow: Integer overflows and missing bounds checks before allocation or memcpy lead to heap/stack corruption; multiple fixes across different parsers.

Denial of Service: Unbounded allocations, missing depth/size limits, and resource leaks are remotely triggerable; many fixes add caps, checks, and timeouts.