Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
burntsushi/memchr
master @ 581faf0
2
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Credential Leak: 1 prior fix. Scrutinize any change in this area.
.github/workflows/ci.yml: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Safety: Out-of-bounds pointer subtraction in the low-level `packedpair` vector finder can lead to undefined behavior or segmentation faults when searching for needle sizes that exceed the remaining haystack distance. This is critical as the crate is widely relied upon for safe, high-performance string matching.
Credential Leak: Continuous integration workflows that do not disable credential persistence allow subsequent, untrusted build or test steps to potentially read and leak repository tokens from the local disk.