Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

github/softu2f

              master @ cac9e72
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Auth Bypass: 3 prior fixes. Scrutinize any change in this area.

SelfSignedCertificate/SelfSignedCertificate.m: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The U2F authenticator bypassed the critical user-presence test, allowing signatures to be generated without verified user intent. Developers must guarantee that signing flows are strictly blocked if user presence checks do not explicitly succeed.

Auth Bypass: Lack of application parameter validation against stored keychain tags during registration key-handle lookups allowed cross-app key-usage bypasses. This violates basic U2F origin-isolation boundaries.

Memory Corruption: Misuse of OpenSSL's d2i functions (d2i_X509, d2i_ECPrivateKey) where the input pointer is mutated internally led to memory safety bugs. Using a copy of the buffer pointer during DER decoding is critical to prevent use-after-free or invalid-free behaviors.