Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
pykeio/ort
main @ 5e669f6
8
Fixes
2
CVEs
CRITICAL
Peak severity
Highlights
Memory Safety: 4 prior fixes. Scrutinize any change in this area.
src/session/mod.rs: most-fixed (2 issues). Treat as high-risk during review.
7 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Safety: Asynchronous inference futures dropping early can trigger a Use After Free via premature release of RunOptions through raw FFI calls. Keeping references alive using an Arc is necessary to prevent these segfaults.
Use After Free: In-memory session models loaded from a buffer can be freed before the session itself if the session's lifetime is not explicitly bound to the underlying byte buffer using phantom lifetime markers.
Memory Safety: Using assignments on fields of uninitialized structs instantiated via new_uninit can cause Rust to run drop destructors on uninitialized memory, causing double-free or memory corruption conditions.