Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
newrelic/newrelic-php-agent
main @ f1e5cb5
3
Fixes
0
CVEs
MEDIUM
Peak severity
0.0%
Coverage
Highlights
Buffer Overflow: 2 prior fixes. Scrutinize any change in this area.
agent/install-util.c: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Buffer Overflow: The rules substitution engine was prone to potential buffer overflows due to unchecked return values from string formatting functions, which could be exploited when processing complex rule sets.
Denial of Service: Unbounded dynamic stack allocation using custom memory allocation macros (like nr_alloca) inside processing loops could exhaust stack space, leading to application crashes and denial of service.
Buffer Overflow: Resolving file paths with static destination buffers in standard library calls like realpath poses overrun risks, necessitating dynamic allocation patterns.