Security context

Highlights

Buffer Overflow: 4 prior fixes. Scrutinize any change in this area.

src/lib/lwan-request.c: most-fixed (5 issues). Treat as high-risk during review.

21 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Buffer Overflow / Heap Buffer Overflow: Multiple fixes address writes past buffer boundaries during request parsing and socket reads, indicating a systemic lack of bounds enforcement in hot paths.

Integer Overflow: Integer overflows in buffer size calculations lead to undersized allocations and subsequent heap overflows; multiple fixes add overflow checks before size arithmetic.

Use-After-Free / Race Condition: Concurrent access to shared objects (cache entries, pubsub messages, connection table) and improper error handling cause use-after-free and double-free conditions.