Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

crystal-lang/crystal

              master @ 2cb6c1e
            

Fixes

CVEs

CRITICAL

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 7 prior fixes. Scrutinize any change in this area.

src/openssl/ssl/context.cr: most-fixed (6 issues). Treat as high-risk during review.

30 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Memory Corruption: String formatting, parsing, and multi-byte decoding have historically triggered out-of-bounds reads/writes and memory corruption because of incorrect capacity calculations and missing bounds checks on pointer/slice conversions.

Auth Bypass: Misconfigured default OpenSSL verification parameters, incorrect ALPN setups, and missing PEER flags have repeatedly caused TLS client/server authentication and verification bypasses.

TLS Verification Failure: Hostnames and validation structures passed to OpenSSL's C callbacks were subject to garbage collection while active, creating race conditions and use-after-free conditions that break verification.