Merge pull request #587 from ammaraskar/ocl

Add advisory for double-free in fil-ocl
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-01-20 20:37:54 +01:00
committed by GitHub

View File

@@ -0,0 +1,20 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "fil-ocl"
date = "2021-01-04"
url = "https://github.com/cogciprocate/ocl/issues/194"
categories = ["memory-corruption"]
keywords = ["memory-safety", "double-free"]
[versions]
patched = []
unaffected = ["< 0.12.0"]
```
# EventList's From<EventList> conversions can double drop on panic.
Affected versions of this crate read from a container using `ptr::read` in
`From<EventList>`, and then call a user specified `Into<Event>` function.
This issue can result in a double-free if the user provided function panics.