Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

mobivm/robovm

              master @ fed6c11
            

Fixes

CVEs

HIGH

Peak severity

33.3%

Coverage

Highlights

Use-After-Free / Memory Corruption: 2 prior fixes. Scrutinize any change in this area.

compiler/cocoatouch/src/main/java/org/robovm/apple/coregraphics/CGBitmapContext.java: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Use-After-Free / Memory Corruption: Session caching caused a double-free of the native SSL session object; disabling caching was the fix, but any future re-enablement or alternate caching path risks the same bug.

Use-After-Free / Memory Corruption: Race condition in session resumption led to multiple frees of the same session extension buffer; the fix guards s->hit but other session-related paths may still lack synchronization.

Memory Corruption: Incorrect pointer lifetime and release callback handling in CGBitmapContextCreate caused memory corruption; similar CoreGraphics wrappers may repeat this pattern.