Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
khaledhosny/ots
main @ 884861e
22
Fixes
0
CVEs
HIGH
Peak severity
77.3%
Coverage
Highlights
Integer Overflow: 10 prior fixes. Scrutinize any change in this area.
src/cff.cc: most-fixed (5 issues). Treat as high-risk during review.
12 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: Multiple boundary calculations (ranges, attach_points, mark_records, pair_pos, etc.) were vulnerable to integer overflow due to incorrect index arithmetic and reordering.
Integer Overflow: GPOS value record size calculation (class1_count * class2_count) could overflow 32-bit, leading to undersized allocations and memory corruption.
Out-of-bounds Read: Incorrect FeatureTable length calculation using wrong lookup_count variable could cause out-of-bounds reads in font sanitizer.