From 4c2d1c0d1bb3ed777b35ac53fd68fcd005675e26 Mon Sep 17 00:00:00 2001 From: Ammar Askar Date: Thu, 24 Sep 2020 03:02:18 -0700 Subject: [PATCH] Add advisory for out-of-bounds write in stack crate --- crates/stack/RUSTSEC-0000-0000.toml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 crates/stack/RUSTSEC-0000-0000.toml diff --git a/crates/stack/RUSTSEC-0000-0000.toml b/crates/stack/RUSTSEC-0000-0000.toml new file mode 100644 index 0000000..3aca7ab --- /dev/null +++ b/crates/stack/RUSTSEC-0000-0000.toml @@ -0,0 +1,14 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "stack" +date = "2020-09-24" +title = "Missing check in ArrayVec leads to out-of-bounds write." +url = "https://github.com/arcnmx/stack-rs/issues/4" +description = """ +ArrayVec::insert allows insertion of an element into the array object into the +specified index. Due to a missing check on the upperbound of this index, it is +possible to write out of bounds. +""" + +[versions] +patched = []