OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-30 08:13:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

Report memory management error in bitvec

Browse Source 
See myrrlyn/bitvec#55
This commit is contained in:
Alexander Payne
2020-03-27 16:10:15 -06:00
committed by GitHub
parent de905c8bfe
commit 70389f6a25
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
crates/bitvec/RUSTSEC-0000-0000.toml Normal file
View File

@@ -0,0 +1,16 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "bitvec"
date = "2020-03-27"
title = "use-after or double free of allocated memory"
url = "https://github.com/myrrlyn/bitvec/issues/55"
categories = ["memory-corruption"]
description = """
Conversion of `BitVec` to `BitBox` did not account for allocation movement.
The flaw was corrected by using the address after resizing, rather than the original base address.
"""
functions = { "bitvec::vec::BitVec::into_boxed_bitslice" = ["< 0.17.4, >= 0.11.0"] }
[versions]
patched = [">= 0.17.4"]
unaffected = ["< 0.11.0"]