Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
google/jsonnet
master @ 2ef32ab
5
Fixes
0
CVEs
HIGH
Peak severity
100.0%
Coverage
Highlights
Denial of Service: 5 prior fixes. Scrutinize any change in this area.
core/vm.cpp: most-fixed (3 issues). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Deeply nested or recursive Jsonnet inputs can trigger stack overflow crashes in the parser due to unconstrained execution depth or bypassed recursion-tracking arguments. Ensure all parser entry points strictly pass and enforce maximum parsing recursion depth limits.
Denial of Service: The VM interpreter is susceptible to undefined behavior crashes during bitwise operations and numerical type conversions. Safe bounds, finiteness, and shift operand range checks must be applied prior to executing operations like left-shifts or double-to-integer casts.
Denial of Service: The virtual machine can experience null pointer dereferences when processing specific execution frames like FRAME_BUILTIN_FORCE_THUNKS. Using pre-stored location fields instead of dereferencing potentially null AST pointers avoids this failure mode.