Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
contain-rs/linked-hash-map
master @ dfc4a57
4
Fixes
1
CVEs
CRITICAL
Peak severity
100.0%
Coverage
Highlights
Memory Corruption: 4 prior fixes. Scrutinize any change in this area.
src/lib.rs: most-fixed (4 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Unsafe use of uninitialized memory and raw pointers can lead to undefined behavior or arbitrary memory access, as seen in the library's historical initialization and deallocation logic. For example, violating non-null pointer constraints resulted in a critical published advisory (CVE-2020-25573).
Memory Corruption: Transmuting references without guaranteeing layout equivalency via attributes like `#[repr(transparent)]` can lead to undefined behavior and invalid memory access if the compiler optimizes the layout of wrapper structures differently.
Memory Corruption: Iterators relying on raw pointer traversal can yield out-of-bounds access or use-after-free conditions if their loop termination criteria do not strictly align with the actual element counts.