Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
spacemonkeygo/openssl
master @ c2dcc5c
4
Fixes
20
CVEs
CRITICAL
Peak severity
Highlights
Memory Corruption: 2 prior fixes. Scrutinize any change in this area.
ciphers.go: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Go's garbage collector can reclaim backing memory for certificates, stores, and private keys while OpenSSL pointers are still actively referenced inside C-land, causing use-after-free vulnerabilities. Go references must be explicitly kept alive.
Memory Corruption: Incorrect CGo function signatures when calling native APIs like X509_check_host can lead to stack alignment issues, memory corruption, or hard crashes depending on the underlying OpenSSL shared library version.
Auth Bypass: Failing to set the Server Name Indication (SNI) extension prior to triggering the connection handshake prevents downstream virtual hosts from serving correct certificates, leading to handshakes with default or incorrect hostnames.