Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
grame-cncm/faust
master-dev @ f4190e6
8
Fixes
3
CVEs
CRITICAL
Peak severity
14.3%
Coverage
Highlights
Buffer Overflow: 2 prior fixes. Scrutinize any change in this area.
architecture/faustqt.h: most-fixed (1 issue). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Safety: Inadequate type validation and integer promotion during the calculation of read/write indices for signal tables can lead to severe out-of-bounds memory accesses. This requires early casting and boundary checks on table size arguments.
Buffer Overflow: Lack of size boundary validation on Faust signal table promotion (e.g., sigRDTbl and sigWRTbl) can result in out-of-bounds memory compilation bugs during signal optimization phases.
Memory Corruption: The FIR bytecode interpreter handles heap reads and writes (fRealHeap, fIntHeap) without strict index bounds assertions, leaving execution paths vulnerable to memory corruption via malformed bytecode.