OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-23 15:38:27 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix all advisories to pass linter

Browse Source 
Mostly related to the `affected_functions` field, which has changed a
few times.
This commit is contained in:
Tony Arcieri
2019-09-09 12:19:01 -07:00
parent 74ebe212dc
commit 01ac6725d5
19 changed files with 80 additions and 76 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
crates/compact_arena/RUSTSEC-2019-0015.toml
View File

@@ -7,13 +7,16 @@ description = """
Affected versions of this crate did not properly implement the generativity,
because the invariant lifetimes were not necessarily `drop`ped.
This allows an attacker to mix up two arenas, using indices created from one
arena with another one. This might lead to an out-of-bounds read or write
This allows an attacker to mix up two arenas, using indices created from one
arena with another one. This might lead to an out-of-bounds read or write
access into the memory reserved for the arena.
The flaw was corrected by implementing generativity correctly in version 0.4.0.
"""
patched_versions = [">= 0.4.0"]
url = "https://github.com/llogiq/compact_arena/issues/22"
keywords = ["memory-corruption", "uninitialized-memory"]
affected_functions = ["compact_arena::SmallArena::new"]
categories = ["memory-corruption"]
keywords = ["uninitialized-memory"]
[affected.functions]
"compact_arena::SmallArena::new" = ["< 0.4.0"]