OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-30 08:13:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #568 from JOE1994/glsl-layout

Browse Source 
glsl-layout: double drop upon panic in 'fn map_array'
This commit is contained in:
Sergey "Shnatsel" Davidoff
2021-01-18 21:48:42 +01:00
committed by GitHub
parent 854d300690 efb79effca
commit 4e1c5c4006
1 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
crates/glsl-layout/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,19 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "glsl-layout"
date = "2021-01-10"
url = "https://github.com/rustgd/glsl-layout/pull/10"
categories = ["memory-corruption"]
[versions]
patched = [">= 0.4.0"]
```
# Double drop upon panic in 'fn map_array()'
Affected versions of this crate did not guard against panic within the user-provided function `f` (2nd parameter of `fn map_array`), and thus panic within `f`
causes double drop of a single object.
The flaw was corrected in the 0.4.0 release by wrapping the object vulnerable
to a double drop within `ManuallyDrop<T>`.