Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
hashicorp/go.net
master @ b69938b
2
Fixes
0
CVEs
HIGH
Peak severity
100.0%
Coverage
Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
ipv6/sockopt_*.go: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Using uintptr in getsockopt/setsockopt syscall wrappers can lead to invalid pointer retention and memory corruption, especially if the GC moves the object. The fix replaces uintptr with unsafe.Pointer to ensure proper liveness.
Auth Bypass: The SOCKS5 username/password authentication method uses a version byte that must be 0x01; a wrong constant causes the server to reject or misinterpret the handshake, allowing authentication to be bypassed. The fix corrects the version byte.