OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-05 19:20:34 +01:00
Code Issues Packages Projects Releases Wiki Activity

Report abomonation as unsound (#1079)

Browse Source
This commit is contained in:
Ben Kimock
2021-10-17 17:28:16 -04:00
committed by GitHub
parent e7d342f190
commit 68a4387f34
1 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
crates/abomonation/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,19 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "abomonation"
date = "2021-10-17"
url = "https://github.com/TimelyDataflow/abomonation/issues/23"
categories = []
keywords = []
informational = "unsound"
[versions]
patched = []
```
# abomonation transmutes &T to and from &[u8] without sufficient constraints
This transmute is at the core of the abomonation crates. It's so easy to use it to violate alignment requirements that no test in the crate's test suite passes under miri.
The use of this transmute in serialization/deserialization also incorrectly assumes that the layout of a repr(Rust) type is stable.
This transmute can also disclose both the contents of padding bytes which may be an information leak and the contents of pointers, which may be used to defeat ASLR.