Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
klauspost/compress
master @ 73508b2
6
Fixes
0
CVEs
HIGH
Peak severity
16.7%
Coverage
Highlights
Memory Corruption: 3 prior fixes. Scrutinize any change in this area.
gzhttp/compress.go: most-fixed (1 issue). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Unsafe decodeSync copy path lacks space margin, enabling out-of-bounds writes on crafted input.
Buffer Overflow: Assembly sequence decoder writes literals/matches to output without capacity check, allowing OOB writes.
Out-of-bounds Read: Disabled length check in SnappyConverter.Convert permits OOB reads and stale data leakage.