Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

marten-seemann/qtls-go1-15

              master @ 0d137e9
            

Fixes

CVEs

MEDIUM

Peak severity

Highlights

Auth Bypass: 5 prior fixes. Scrutinize any change in this area.

crypto/tls: most-fixed (3 issues). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Inadequate verification of ALPN protocols on TLS 1.3 session resumption can lead to cross-protocol authentication bypass and application data injection. Ensure the negotiated protocol matches the resumed session's ALPN.

Auth Bypass: Failing to encode critical constraints like early data limits and ALPN configurations directly inside the serialized session ticket allows clients to bypass handshake policies during resumption.

Protocol Violation: Allowing 0-RTT options to persist after receiving or issuing a HelloRetryRequest (HRR) violates the TLS 1.3 state machine, resulting in potential handshake desynchronization or compliance failures.