Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ged/ruby-pg
master @ 346c382
2
Fixes
0
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Integer Overflow: 1 prior fix. Scrutinize any change in this area.
ext/pg_connection.c: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: An integer overflow in the allocation of query parameters allows large 'bytea' values to wrap the calculated memory pool size, leading to an out-of-bounds heap write. Developers must ensure that all parameter-size accumulations are validated against overflow prior to calling allocation routines.
Integer Overflow: Signed integer arithmetic used during copy-row encoding can overflow during buffer capacity calculations. This can bypass capacity checks and result in memory corruption. Ensuring consistent use of size_t for allocation boundaries is critical.