mirror of
https://github.com/OMGeeky/advisory-db.git
synced 2026-02-23 15:38:27 +01:00
Report 0163-algorithmica to RustSec
This commit is contained in:
16
crates/algorithmica/RUSTSEC-0000-0000.md
Normal file
16
crates/algorithmica/RUSTSEC-0000-0000.md
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
```toml
|
||||||
|
[advisory]
|
||||||
|
id = "RUSTSEC-0000-0000"
|
||||||
|
package = "algorithmica"
|
||||||
|
date = "2021-03-07"
|
||||||
|
url = "https://github.com/AbrarNitk/algorithmica/issues/1"
|
||||||
|
categories = ["memory-corruption"]
|
||||||
|
|
||||||
|
[versions]
|
||||||
|
patched = []
|
||||||
|
```
|
||||||
|
|
||||||
|
# 'merge_sort::merge()' crashes with double-free for `T: Drop`
|
||||||
|
|
||||||
|
In the affected versions of this crate, `merge_sort::merge()` wildly duplicates and drops ownership of `T` without guarding against double-free. Due to such implementation,
|
||||||
|
simply invoking `merge_sort::merge()` on `Vec<T: Drop>` can cause **double free** bugs.
|
||||||
Reference in New Issue
Block a user