Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

kkos/oniguruma

              master @ f95747b
            

Fixes

CVEs

CRITICAL

Peak severity

71.4%

Coverage

Highlights

Buffer Overflow: 5 prior fixes. Scrutinize any change in this area.

src/regparse.c: most-fixed (11 issues). Treat as high-risk during review.

23 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Buffer Overflow: Multiple heap-buffer-overflows from missing end-of-pattern checks before PFETCH/PINC and from unvalidated raw byte strings in parse_exp.

Integer Overflow: Pointer arithmetic on range/p with reg->dist_max/min can overflow, leading to out-of-bounds read/write and denial of service. Multiple fixes added bounds checks but the pattern recurs.

Out-of-Bounds Read: PFETCH macro and parse_regexp can read beyond the end of the pattern buffer, especially with incomplete multibyte characters.