Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

trojan-gfw/trojan

              master @ 3e7bb9a
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Denial of Service: 11 prior fixes. Scrutinize any change in this area.

src/clientsession.cpp: most-fixed (3 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Uncaught network exceptions and improper handling of remote endpoint details on disconnected sockets can easily trigger remote process crashes. Developers must ensure all socket operations utilize the error_code overload to prevent uncaught exceptions.

Memory Corruption: Asynchronous Boost.Asio operations frequently suffer from use-after-free vulnerabilities when buffer lifetimes are not strictly extended to match callback lifetimes via std::shared_ptr or shared_from_this.

SQL Injection: Unsanitized input executed directly via database queries allows remote attackers to bypass authentication. This requires strict validation of input lengths and formats before invoking database client calls.