Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ip7z/7zip
main @ f9d78af
2
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Integer Overflow: 1 prior fix. Scrutinize any change in this area.
C/7zArcIn.c: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: An integer overflow in the allocation size calculations of the 7z archive parser could lead to heap buffer overflows. This occurs when scaling or multiplying counts during metadata parsing before passing the size to the allocator, highlighting a need for explicit safety casts during size calculations.
Path Traversal: Path traversal during archive extraction allows malicious archives to write files outside of the target extraction directory. Specifically, handling symbolic or hard links with mixed parent directory elements ('..') requires strict tracking of traversal depth relative to non-parent components.