OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-04 18:50:34 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #318 from Qwaz/failure-336

Browse Source 
Informational advisory for rust-lang-nursery/failure#336
This commit is contained in:
Sergey "Shnatsel" Davidoff
2020-08-15 01:03:56 +02:00
committed by GitHub
parent 90624f4e01 7ba77515fa
commit 1837ccc396
1 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
crates/failure/RUSTSEC-0000-0000.toml Normal file
View File

@@ -0,0 +1,20 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "failure"
date = "2019-11-13"
informational = "unsound"
title = "Type confusion if __private_get_type_id__ is overriden"
url = "https://github.com/rust-lang-nursery/failure/issues/336"
keywords = ["unsound"]
description = """
Safe Rust code can implement malfunctioning `__private_get_type_id__` and cause
type confusion when downcasting, which is an undefined behavior.
Users who derive `Fail` trait are not affected.
"""
[affected]
functions = { "failure::Fail::__private_get_type_id__" = [">= 0.1.0"] }
[versions]
patched = []