From d5811c82b21ac88e0b931cd27852662308b182f4 Mon Sep 17 00:00:00 2001 From: Yechan Bae Date: Thu, 3 Sep 2020 06:29:27 -0400 Subject: [PATCH] Update 0012-ordnung --- crates/ordnung/RUSTSEC-0000-0000.toml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 crates/ordnung/RUSTSEC-0000-0000.toml diff --git a/crates/ordnung/RUSTSEC-0000-0000.toml b/crates/ordnung/RUSTSEC-0000-0000.toml new file mode 100644 index 0000000..302e446 --- /dev/null +++ b/crates/ordnung/RUSTSEC-0000-0000.toml @@ -0,0 +1,15 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "ordnung" +date = "2020-09-03" +title = "Memory safety issues in `compact::Vec`" +url = "https://github.com/maciejhirsz/ordnung/issues/8" +description = """ +`compact::Vec` contains multiple memory safety issues. + +1. It mishandles large capacity and causes out-of-bound access in 32-bit / allocator layout mismatch in 64-bit. +2. `remove()` is not panic-safe and causes double-free when an index larger than the length is provided. +""" + +[versions] +patched = []