Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ash-rs/ash
master @ a9a1fb1
2
Fixes
1
CVEs
CRITICAL
Peak severity
Highlights
Memory Safety: 2 prior fixes. Scrutinize any change in this area.
ash: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Safety: Using Vec::set_len on uninitialized or partially initialized buffers when underlying Vulkan driver queries fail can expose uninitialized memory or cause undefined behavior. The fix ensures early returns on error conditions before mutating buffer lengths.
Memory Safety: The safe push_next function implicitly dereferenced arbitrary raw pointer chains without enforcing an unsafe function contract, allowing safe Rust code to trigger memory safety violations.