OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-24 12:20:34 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix all advisories to pass linter

Browse Source 
Mostly related to the `affected_functions` field, which has changed a
few times.
This commit is contained in:
Tony Arcieri
2019-09-09 12:19:01 -07:00
parent 74ebe212dc
commit 01ac6725d5
19 changed files with 80 additions and 76 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
crates/image/RUSTSEC-2019-0014.toml
View File

@@ -11,7 +11,7 @@ initializing all instances.
This could run Drop implementations on uninitialized types, equivalent to
use-after-free, and allow an attacker arbitrary code execution.
Two different fixes were applied. It is possible to conserve the interface by
ensuring proper initialization before calling `Vec::set_len`. Drop is no longer
called in case of panic, though.
@@ -24,4 +24,6 @@ patched_versions = [">= 0.21.3"]
unaffected_versions = ["< 0.10.2"]
url = "https://github.com/image-rs/image/pull/985"
keywords = ["drop", "use-after-free"]
affected_functions = ["image::hdr::HDRDecoder::read_image_transform"]
[affected.functions]
"image::hdr::HDRDecoder::read_image_transform" = ["< 0.21.3, >= 0.10.2"]