Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
google/brotli
master @ 83fe766
4
Fixes
1
CVEs
HIGH
Peak severity
Highlights
Integer Overflow: 2 prior fixes. Scrutinize any change in this area.
c/dec/decode.c: most-fixed (1 issue). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: Integer overflows in Brotli's compound dictionary decompression code (e.g., in chunk offset and size calculations) allow attackers to bypass memory validation, potentially causing severe heap-based out-of-bounds corruption during decoding operations.
Out-of-bounds Read: High-level JNI wrappers must rigorously validate input boundaries and lengths before copying raw stream chunks to native memory, otherwise risking native heap out-of-bounds reads during stream decompression.
Path Traversal: The Brotli CLI is susceptible to TOCTOU file-symlink race conditions if metadata modifications are done on raw file paths instead of active file descriptors, risking unauthorized path traversal and file manipulation.