Security context

Highlights

Denial of Service: 95 prior fixes. Scrutinize any change in this area.

src/tango/quic/crypto/fd_quic_crypto_suites.c: most-fixed (15 issues). Treat as high-risk during review.

154 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: The validator previously bypassed signature validation entirely for multi-signature transactions by only checking the first signature, allowing unauthenticated transactions to execute. Additionally, double-fetch vulnerabilities in shared memory could allow a race condition to bypass validation checks.

Sandbox Escape: Incorrect return code checks on Landlock system calls and misaligned capability dropping operations allowed sandbox escapes. Furthermore, failure to close ruleset file descriptors allowed descriptor leaks into sandboxed child processes.

Denial of Service: Parsing of unvalidated gossip network packets was highly susceptible to integer overflow and out-of-bounds writes due to unsafe offset tracking (e.g., using unchecked increments and bitvec limits).