Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

rust-windowing/winit

              master @ 874a1e3
            

Fixes

CVEs

HIGH

Peak severity

66.7%

Coverage

Highlights

Use After Free: 4 prior fixes. Scrutinize any change in this area.

src/x11/window/mod.rs: most-fixed (2 issues). Treat as high-risk during review.

6 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Use After Free: CFRunLoop observer callback can fire after loop exit, leading to use-after-free; fix invalidates observer on Drop.

Use After Free: OwnedDisplayHandle could dangle if underlying handle is dropped; fix wraps in Arc to ensure lifetime safety.

Use After Free: XInput2 event processing used unsafe access to X connection, risking UAF; fix clones connection and uses safe accessors.