Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ziglang/zig
master @ 738d2be
91
Fixes
0
CVEs
HIGH
Peak severity
43.8%
Coverage
Highlights
Memory Corruption: 13 prior fixes. Scrutinize any change in this area.
lib/std/crypto/tls/Client.zig: most-fixed (10 issues). Treat as high-risk during review.
47 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The standard library TLS client suffered from multiple logical and verification gaps, including a failure to verify the handshake Finished verify_data, incomplete chain of trust verification, and skipped verification steps during batched handshakes. This could allow complete validation bypass by active adversaries.
Memory Corruption: Out-of-bounds write vulnerabilities in decompression components (such as zstd and zstandard) can allow untrusted compressed inputs to corrupt memory or execute arbitrary code. Boundaries were historically not validated against destination slice limits prior to copying.
Command Injection: Spawning Windows batch files via CreateProcessW was vulnerable to the BatBadBut command injection issue due to lack of strict argument escaping and implicit cmd.exe invocation.