Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
tjfoc/gmsm
master @ 36b992c
5
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Auth Bypass: 2 prior fixes. Scrutinize any change in this area.
gmtls: most-fixed (2 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Cloning a TLS configuration failed to copy the GetKECertificate callback, which can bypass critical key exchange certificate checks or lead to unexpected connection parameters in cloned sessions.
Improper Certificate Validation: The client failed to properly verify both the signing and encryption certificates during a GMSSL handshake, and incorrectly accepted unsupported key types like RSA.
Auth Bypass: During TLS handshakes, the library incorrectly routed SM2 signature verification to standard ECDSA verification instead of the specialized SM2 logic, potentially accepting invalid signatures.