From 4b7ea774078336255f5a27fba882ea1c876bc3db Mon Sep 17 00:00:00 2001 From: JOE1994 Date: Thu, 15 Apr 2021 12:00:46 -0400 Subject: [PATCH] Report 0163-algorithmica to RustSec --- crates/algorithmica/RUSTSEC-0000-0000.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 crates/algorithmica/RUSTSEC-0000-0000.md diff --git a/crates/algorithmica/RUSTSEC-0000-0000.md b/crates/algorithmica/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..52b54a3 --- /dev/null +++ b/crates/algorithmica/RUSTSEC-0000-0000.md @@ -0,0 +1,16 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "algorithmica" +date = "2021-03-07" +url = "https://github.com/AbrarNitk/algorithmica/issues/1" +categories = ["memory-corruption"] + +[versions] +patched = [] +``` + +# 'merge_sort::merge()' crashes with double-free for `T: Drop` + +In the affected versions of this crate, `merge_sort::merge()` wildly duplicates and drops ownership of `T` without guarding against double-free. Due to such implementation, +simply invoking `merge_sort::merge()` on `Vec` can cause **double free** bugs.