Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

irontec/sngrep

              master @ 1642c54
            

Fixes

CVEs

CRITICAL

Peak severity

25.0%

Coverage

Highlights

Buffer Overflow: 10 prior fixes. Scrutinize any change in this area.

src/sip.c: most-fixed (5 issues). Treat as high-risk during review.

11 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Buffer Overflow: Multiple overflows in SIP header parsing (Call-ID, Warning, media format) due to unbounded string copies from regex captures; some fixed with strncpy/sscanf width limits but the pattern recurs across sub-parsers.

Buffer Overflow: Stack overflow in user-part attribute extraction and SIP attribute getters; fixed by adding size clamping and bounded sprintf, but similar getter code paths remain potential variants.

Buffer Overflow: HEPv3 AUTH_KEY handling used fixed-size password buffer with memcpy based on attacker-controlled length; one fix added bounds check, another changed to dynamic allocation—both for same sink, indicating incomplete remediation risk.