From 4f4d639438103c51d76b942c9dce5a0b7fbcaa71 Mon Sep 17 00:00:00 2001 From: Ammar Askar Date: Mon, 18 Jan 2021 19:50:19 -0800 Subject: [PATCH] Add advisory for double-free in fil-ocl --- crates/fil-ocl/RUSTSEC-0000-0000.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 crates/fil-ocl/RUSTSEC-0000-0000.md diff --git a/crates/fil-ocl/RUSTSEC-0000-0000.md b/crates/fil-ocl/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..37606f2 --- /dev/null +++ b/crates/fil-ocl/RUSTSEC-0000-0000.md @@ -0,0 +1,20 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "fil-ocl" +date = "2021-01-04" +url = "https://github.com/cogciprocate/ocl/issues/194" +categories = ["memory-corruption"] +keywords = ["memory-safety", "double-free"] + +[versions] +patched = [] +unaffected = ["< 0.12.0"] +``` + +# EventList's From conversions can double drop on panic. + +Affected versions of this crate read from a container using `ptr::read` in +`From`, and then call a user specified `Into` function. + +This issue can result in a double-free if the user provided function panics.